Quick Start

curl -X POST https://<project-ref>.supabase.co/functions/v1/api/channels \
  -H "x-api-key: crt_pk_sua-chave" \
  -H "Content-Type: application/json" \
  -d '{ "name": "Suporte Principal" }'

curl -X POST https://<project-ref>.supabase.co/functions/v1/api/webhooks \
  -H "x-api-key: crt_pk_sua-chave" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Meu CRM",
    "url": "https://meuapp.com/webhook/coexy",
    "events": ["messages", "message_status"]
  }'

export async function POST(request: Request): Promise<Response> {
  const body = await request.text()
  const signature = request.headers.get('x-coexy-signature') ?? ''

  const valid = await verifySignature(body, signature, process.env.COEXY_HMAC_SECRET!)
  if (!valid) return new Response('Unauthorized', { status: 401 })

  // Responder 200 ANTES de processar (timeout de 10s)
  processEvent(JSON.parse(body)).catch(console.error)

  return new Response('OK', { status: 200 })
}