"use strict"; var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) { if (k2 === undefined) k2 = k; var desc = Object.getOwnPropertyDescriptor(m, k); if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) { desc = { enumerable: true, get: function() { return m[k]; } }; } Object.defineProperty(o, k2, desc); }) : (function(o, m, k, k2) { if (k2 === undefined) k2 = k; o[k2] = m[k]; })); var __setModuleDefault = (this && this.__setModuleDefault) || (Object.create ? (function(o, v) { Object.defineProperty(o, "default", { enumerable: true, value: v }); }) : function(o, v) { o["default"] = v; }); var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) { var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d; if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc); else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r; return c > 3 && r && Object.defineProperty(target, key, r), r; }; var __importStar = (this && this.__importStar) || (function () { var ownKeys = function(o) { ownKeys = Object.getOwnPropertyNames || function (o) { var ar = []; for (var k in o) if (Object.prototype.hasOwnProperty.call(o, k)) ar[ar.length] = k; return ar; }; return ownKeys(o); }; return function (mod) { if (mod && mod.__esModule) return mod; var result = {}; if (mod != null) for (var k = ownKeys(mod), i = 0; i < k.length; i++) if (k[i] !== "default") __createBinding(result, mod, k[i]); __setModuleDefault(result, mod); return result; }; })(); var __metadata = (this && this.__metadata) || function (k, v) { if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v); }; var __param = (this && this.__param) || function (paramIndex, decorator) { return function (target, key) { decorator(target, key, paramIndex); } }; var SchedulingController_1; Object.defineProperty(exports, "__esModule", { value: true }); exports.SchedulingController = void 0; const common_1 = require("@nestjs/common"); const scheduling_service_1 = require("./scheduling.service"); const config_1 = require("@nestjs/config"); const prisma_service_1 = require("../prisma/prisma.service"); const crypto = __importStar(require("crypto")); const events_gateway_1 = require("../websocket/events.gateway"); function firstHeader(value) { if (Array.isArray(value)) return value[0]; return value; } function timingSafeEqualStr(provided, expected) { if (!provided || !expected) return false; const a = Buffer.from(provided); const b = Buffer.from(expected); if (a.length !== b.length) return false; return crypto.timingSafeEqual(a, b); } let SchedulingController = SchedulingController_1 = class SchedulingController { schedulingService; configService; prisma; eventsGateway; logger = new common_1.Logger(SchedulingController_1.name); constructor(schedulingService, configService, prisma, eventsGateway) { this.schedulingService = schedulingService; this.configService = configService; this.prisma = prisma; this.eventsGateway = eventsGateway; } async handleWebhook(rawSecretKey, payload) { const secret = this.configService.get('CALCOM_WEBHOOK_SECRET'); const secretKey = firstHeader(rawSecretKey); if (!secret) { if (process.env.NODE_ENV === 'production') { this.logger.error('CALCOM_WEBHOOK_SECRET not configured — rejecting webhook'); throw new common_1.ForbiddenException('Webhook verification is not configured'); } this.logger.warn('CALCOM_WEBHOOK_SECRET not configured — webhook signature verification skipped (dev)'); } else if (!secretKey) { this.logger.warn('Cal.com webhook rejected: no credentials presented'); throw new common_1.UnauthorizedException('Webhook credentials missing'); } else if (!timingSafeEqualStr(secretKey, secret)) { this.logger.warn('Cal.com webhook rejected: invalid x-cal-secret-key'); throw new common_1.UnauthorizedException('Invalid webhook secret'); } this.logger.log(`Received Cal.com webhook: ${payload.triggerEvent}`); try { if (payload.triggerEvent === 'BOOKING_CREATED') { const { eventTypeId, eventTypeTitle, startTime, endTime, attendees, metadata } = payload.payload; const guestEmail = attendees[0]?.email; let workspaceId = null; if (metadata?.episodeId) { const booking = await this.schedulingService.createBooking({ episodeId: metadata.episodeId, startTime, endTime, timezone: attendees[0]?.timeZone || 'UTC', }); const podcast = await this.prisma.podcast.findUnique({ where: { id: booking.episode.podcastId }, select: { workspaceId: true }, }); workspaceId = podcast?.workspaceId ?? null; } else if (guestEmail) { workspaceId = await this.schedulingService.handleCalcomBookingByEmail(guestEmail, startTime, endTime, attendees[0]?.timeZone || 'UTC'); } if (workspaceId) { this.eventsGateway.notifyCalComBookingCreated(workspaceId, { id: String(payload.payload?.uid || payload.payload?.bookingId || ""), startTime, endTime, }); } } else if (payload.triggerEvent === 'BOOKING_CANCELLED') { const uid = String(payload.payload?.uid || payload.payload?.bookingId || ""); if (uid) { const booking = await this.prisma.booking.findFirst({ where: { OR: [{ calendarEventId: uid }, { meetLink: { contains: uid } }] }, include: { episode: { include: { podcast: { select: { workspaceId: true } }, }, }, }, }); if (booking?.episode?.podcast?.workspaceId) { this.eventsGateway.notifyCalComBookingCancelled(booking.episode.podcast.workspaceId, booking.id); } } } } catch (error) { this.logger.error(`Error processing webhook: ${error instanceof Error ? error.message : String(error)}`); } return { status: 'success' }; } }; exports.SchedulingController = SchedulingController; __decorate([ (0, common_1.Post)(), (0, common_1.HttpCode)(200), __param(0, (0, common_1.Headers)('x-cal-secret-key')), __param(1, (0, common_1.Body)()), __metadata("design:type", Function), __metadata("design:paramtypes", [Object, Object]), __metadata("design:returntype", Promise) ], SchedulingController.prototype, "handleWebhook", null); exports.SchedulingController = SchedulingController = SchedulingController_1 = __decorate([ (0, common_1.Controller)('webhooks/calcom'), __metadata("design:paramtypes", [scheduling_service_1.SchedulingService, config_1.ConfigService, prisma_service_1.PrismaService, events_gateway_1.EventsGateway]) ], SchedulingController); //# sourceMappingURL=scheduling.controller.js.map