nabeh/whatsapp-gateway/server.js

const fs = require('fs');
const path = require('path');
const dotenv = require('dotenv');

// Find .env file identically to how PHP bootstrap does it
const envPaths = [
    path.join(__dirname, '.env'),
    path.join(__dirname, '../.env'),
    path.join(__dirname, '../backend/.env'),
    path.join(__dirname, '../../../.env')
];

for (const p of envPaths) {
    if (fs.existsSync(p)) {
        dotenv.config({ path: p });
        console.log(`Loaded environment from ${p}`);
        break;
    }
}

const express = require('express');
const cors = require('cors');
const { startSession, disconnectSession, sendMessage, getActiveSessions, checkContact, exportChatHistory } = require('./baileys-client');

const app = express();
app.use(cors());
app.use(express.json({ limit: '50mb' }));
app.use(express.urlencoded({ limit: '50mb', extended: true }));

const PORT = process.env.PORT || 3722;

// Health check endpoint (Public)
app.get('/health', (req, res) => {
    res.json({ status: 'healthy', service: 'Nabeh WhatsApp Gateway' });
});

// Security Middleware: Protect all /api/ routes
app.use('/api', (req, res, next) => {
    const secret = req.header('X-Webhook-Secret');
    if (!process.env.WEBHOOK_SECRET || secret !== process.env.WEBHOOK_SECRET) {
        return res.status(403).json({ error: 'Unauthorized gateway access' });
    }
    next();
});

// Start or retrieve a session
app.post('/api/sessions/start', async (req, res) => {
    const { session_key, webhook_url } = req.body;

    if (!session_key || !webhook_url) {
        return res.status(400).json({ error: 'Missing session_key or webhook_url' });
    }

    try {
        await startSession(session_key, webhook_url);
        res.json({ status: 'success', message: 'Session started or retrieved' });
    } catch (err) {
        console.error(`Error starting session ${session_key}:`, err);
        res.status(500).json({ error: 'Failed to start session' });
    }
});

// Disconnect and remove a session (e.g., when banned or logged out)
app.post('/api/sessions/disconnect', async (req, res) => {
    const { session_key } = req.body;

    if (!session_key) {
        return res.status(400).json({ error: 'Missing session_key' });
    }

    try {
        await disconnectSession(session_key);
        res.json({ status: 'success', message: 'Session disconnected and cleaned up' });
    } catch (err) {
        console.error(`Error disconnecting session ${session_key}:`, err);
        res.status(500).json({ error: 'Failed to disconnect session' });
    }
});

// Get list of active session keys in memory
app.get('/api/sessions/active', (req, res) => {
    res.json({ status: 'success', active_sessions: getActiveSessions() });
});

// Check if contact is on WhatsApp
app.post('/api/contacts/check', async (req, res) => {
    const { session_key, phone } = req.body;

    if (!session_key || !phone) {
        return res.status(400).json({ error: 'Missing session_key or phone' });
    }

    try {
        const result = await checkContact(session_key, phone);
        res.json({ status: 'success', data: result });
    } catch (err) {
        console.error(`Error checking contact ${phone} via ${session_key}:`, err);
        res.status(500).json({ error: err.message || 'Failed to check contact' });
    }
});

// Export chat history to file
app.post('/api/chats/export', async (req, res) => {
    const { session_key } = req.body;

    if (!session_key) {
        return res.status(400).json({ error: 'Missing session_key' });
    }

    try {
        const filePath = await exportChatHistory(session_key);
        res.json({ 
            status: 'success', 
            message: 'Chat history exported successfully', 
            file_name: 'whatsapp_chats_history.txt',
            path: filePath
        });
    } catch (err) {
        console.error(`Error exporting chats for session ${session_key}:`, err);
        res.status(500).json({ error: err.message || 'Failed to export chats' });
    }
});

// Send outbound message
app.post('/api/messages/send', async (req, res) => {
    const { session_key, phone, message, media_url, audio, mimetype, image } = req.body;

    if (!session_key || !phone) {
        return res.status(400).json({ error: 'Missing session_key or phone' });
    }

    if (!message && !audio && !media_url && !image) {
        return res.status(400).json({ error: 'Missing message, audio, media_url, or image' });
    }

    try {
        const result = await sendMessage(session_key, phone, message, media_url, audio, mimetype, image);
        res.json({ status: 'success', data: result });
    } catch (err) {
        console.error(`Error sending message via ${session_key} to ${phone}:`, err);
        res.status(500).json({ error: err.message || 'Failed to send message' });
    }
});

// Auto-resume existing sessions on startup
const SESSIONS_DIR = path.join(__dirname, 'sessions');
if (fs.existsSync(SESSIONS_DIR)) {
    const defaultWebhookUrl = process.env.WEBHOOK_URL || 'https://nabeh.intaleqapp.com/api/whatsapp/webhook';
    const activeSessions = fs.readdirSync(SESSIONS_DIR, { withFileTypes: true })
        .filter(dirent => dirent.isDirectory() && dirent.name.startsWith('cmp_'))
        .map(dirent => dirent.name);

    for (const session_key of activeSessions) {
        console.log(`[Auto-Resume] Resuming session: ${session_key}`);
        startSession(session_key, defaultWebhookUrl).catch(err => {
            console.error(`[Auto-Resume] Failed to resume ${session_key}:`, err.message);
        });
    }
}

app.listen(PORT, () => {
    console.log(`🚀 Nabeh WhatsApp Gateway running on port ${PORT}`);
});