WhatsApp Integration

// GET - Verification Request from Meta
router.get('/webhook', (req, res) => {
  const mode = req.query['hub.mode'];
  const token = req.query['hub.verify_token'];
  const challenge = req.query['hub.challenge'];

  if (mode === 'subscribe' && token === VERIFY_TOKEN) {
    console.log("✅ Webhook Verified!");
    res.status(200).send(challenge);
  } else {
    res.sendStatus(403);
  }
});

// POST - Incoming Messages
router.post('/webhook', validateSignature, async (req, res) => {
  // IMMEDIATE 200 OK
  res.sendStatus(200);

  const message = req.body.entry?.[0]?.changes?.[0]?.value?.messages?.[0];
  
  if (message && message.type === 'text') {
    await whatsappQueue.add('process-message', {
      wamid: message.id,
      from: message.from,
      text: message.text.body,
      timestamp: message.timestamp
    }, {
      jobId: message.id, // Deduplication
      removeOnComplete: true
    });
  }
});

export const worker = new Worker('whatsapp-ai', async job => {
  const { wamid, from, text } = job.data;
  
  // 1. Check/Create Session
  let session = await prisma.whatsAppSession.findUnique({ 
    where: { phoneNumber: from } 
  });
  
  if (!session) {
    session = await prisma.whatsAppSession.create({
      data: { 
        phoneNumber: from, 
        isBotActive: true, 
        expiresAt: new Date(Date.now() + 24 * 60 * 60 * 1000),
        sessionContext: { history: [] } 
      }
    });
  }

  // 2. Check if Bot is Active
  if (!session.isBotActive) {
    console.log(`⏸️ Bot inactive for ${from}. Skipping.`);
    return;
  }

  // 3. Handover Detection
  const HANDOVER_KEYWORDS = /\b(humano|agente|asesor|persona|queja|reclamo)\b/i;
  if (HANDOVER_KEYWORDS.test(text)) {
    await prisma.whatsAppSession.update({
      where: { id: session.id },
      data: { 
        isBotActive: false,
        handoverTrigger: "KEYWORD_DETECTED"
      }
    });
    
    // Send transfer message
    await axios.post(
      `https://graph.facebook.com/v21.0/${process.env.WHATSAPP_PHONE_ID}/messages`,
      {
        messaging_product: "whatsapp",
        to: from,
        text: { body: "Te estoy transfiriendo con un asesor humano..." }
      },
      { headers: { 
        'Authorization': `Bearer ${process.env.WHATSAPP_ACCESS_TOKEN}` 
      }}
    );
    return;
  }

  // 4. AI Processing
  const aiResponse = await generateSupportResponse(text, history);
  
  // 5. Send Response
  await axios.post(
    `https://graph.facebook.com/v21.0/${process.env.WHATSAPP_PHONE_ID}/messages`,
    {
      messaging_product: "whatsapp",
      to: from,
      text: { body: aiResponse.text }
    },
    { headers: { 'Authorization': `Bearer ${process.env.WHATSAPP_ACCESS_TOKEN}` }}
  );
});

expiresAt: new Date(Date.now() + 24 * 60 * 60 * 1000)

# Use permanent System User token
WHATSAPP_ACCESS_TOKEN="EAAG...(permanent)"

# Production phone number
WHATSAPP_PHONE_ID="your-production-phone-id"

# Secure verify token
WHATSAPP_VERIFY_TOKEN="$(openssl rand -hex 32)"

# App secret from Meta dashboard
WHATSAPP_APP_SECRET="your-production-app-secret"

# Production API URL
BASE_URL="https://api.kaiu.com"