const API_KEY = 'crm_sk_sua_chave_aqui';
const BASE = 'https://crm.acessocomercial.com/api';

interface Contato {
  id: string;
  name: string;
  email: string;
  phone: string;
  position: string;
  companyId: string;
  tags: string[];
  createdAt: string;
}

interface RespostaPaginada<T> {
  data: T[];
  total: number;
  page: number;
  limit: number;
}

async function buscarContatos(
  busca?: string,
  pagina = 1
): Promise<RespostaPaginada<Contato>> {
  const params = new URLSearchParams({
    page: String(pagina),
    limit: '20',
  });
  if (busca) params.set('search', busca);

  const resposta = await fetch(`${BASE}/contacts?${params}`, {
    headers: { 'X-API-Key': API_KEY },
  });

  if (!resposta.ok) {
    throw new Error(`Erro na API: ${resposta.status}`);
  }

  return resposta.json();
}

interface CriarNegocioRequest {
  title: string;
  value: number;
  stage?: string;
  probability?: number;
  companyId?: string;
  contactIds?: string[];
  expectedCloseDate?: string;
}

async function criarNegocio(negocio: CriarNegocioRequest) {
  const resposta = await fetch(`${BASE}/deals`, {
    method: 'POST',
    headers: {
      'X-API-Key': API_KEY,
      'Content-Type': 'application/json',
    },
    body: JSON.stringify(negocio),
  });

  if (!resposta.ok) {
    const erro = await resposta.json();
    throw new Error(erro.error ?? 'Falha ao criar negócio');
  }

  return resposta.json();
}

// Exemplo de uso
const novoNegocio = await criarNegocio({
  title: 'Licença Enterprise - Acme Corp',
  value: 50000,
  stage: 'proposta',
  probability: 60,
  expectedCloseDate: '2026-07-15T00:00:00Z',
});

import { createHmac } from 'node:crypto';

function verificarAssinaturaWebhook(
  payload: string,
  assinatura: string,
  secret: string
): boolean {
  const esperado = createHmac('sha256', secret)
    .update(payload)
    .digest('hex');
  return esperado === assinatura;
}

// Handler Express.js
app.post('/webhooks/simplecrm', (req, res) => {
  const assinatura = req.headers['x-webhook-signature'] as string;
  const corpoBruto = JSON.stringify(req.body);

  if (!verificarAssinaturaWebhook(corpoBruto, assinatura, WEBHOOK_SECRET)) {
    return res.status(401).json({ error: 'Assinatura inválida' });
  }

  const { event, data } = req.body;

  switch (event) {
    case 'contact.created':
      console.log('Novo contato:', data.name);
      break;
    case 'deal.updated':
      console.log('Negócio movido para:', data.stage);
      break;
    case 'invoice.paid':
      console.log('Fatura paga:', data.number);
      break;
  }

  res.status(200).json({ received: true });
});