curl https://bravopay.club/api/v1/me \
  -H "Authorization: Bearer bp_live_seu_token"

{
  "error": {
    "code": "validation_error",
    "message": "One or more fields are invalid",
    "details": { "amount_cents": ["amount_cents min R$5,00 (500 cents)"] }
  }
}

curl -X POST https://bravopay.club/api/v1/transactions \
  -H "Authorization: Bearer bp_live_seu_token" \
  -H "Content-Type: application/json" \
  -d '{
    "amount_cents": 1990,
    "method": "pix",
    "customer": {
      "email": "joao@example.com",
      "name": "João Silva",
      "cpf": "11144477735"
    },
    "description": "Mensalidade Plano Pro",
    "external_reference": "order_42"
  }'

{
  "id": "tx_clxabc123",
  "object": "transaction",
  "status": "PENDING",
  "method": "PIX",
  "amount_cents": 1990,
  "fee_cents": 449,
  "net_cents": 1541,
  "currency": "BRL",
  "pix": {
    "copy_paste": "00020126580014BR.GOV.BCB.PIX...",
    "expires_at": "2026-06-01T16:30:00.000Z"
  },
  "created_at": "2026-06-01T15:30:00.000Z"
}

curl -X POST https://bravopay.club/api/v1/transactions \
  -H "Authorization: Bearer bp_live_seu_token" \
  -H "Content-Type: application/json" \
  -d '{
    "amount_cents": 9990,
    "method": "card",
    "customer": {
      "email": "maria@example.com",
      "name": "Maria Souza",
      "cpf": "52998224725"
    },
    "description": "Curso Premium"
  }'

{
  "id": "tx_clxdef456",
  "object": "transaction",
  "status": "PENDING",
  "method": "CARD",
  "amount_cents": 9990,
  "fee_cents": 1349,
  "net_cents": 8641,
  "currency": "BRL",
  "card": {
    "hosted_url": "https://bravopay.club/api/v1/transactions/tx_clxdef456/card-redirect",
    "message": "Redirect customer to hosted_url to enter card details (Stripe Elements, PCI-compliant)."
  },
  "created_at": "2026-06-01T15:30:00.000Z"
}

curl https://bravopay.club/api/v1/transactions?status=PAID&limit=50 \
  -H "Authorization: Bearer bp_live_seu_token"

{
  "data": [
    {
      "id": "tx_clxabc123",
      "object": "transaction",
      "product_id": "prd_xxx",
      "checkout_id": "ck_xxx",
      "customer": { "email": "...", "name": "...", "cpf": "...", "phone": "..." },
      "amount_cents": 1990,
      "fee_cents": 449,
      "net_cents": 1541,
      "currency": "BRL",
      "method": "PIX",
      "status": "PAID",
      "provider": "safepix",
      "provider_id": "tx_safepix_xxx",
      "pix": { "qr_code": "...", "copy_paste": "...", "expires_at": "..." },
      "card": null,
      "tracking": { "utm_source": "...", "utm_medium": "...", "fbclid": "..." },
      "paid_at": "2026-06-01T15:32:00.000Z",
      "created_at": "2026-06-01T15:30:00.000Z",
      "updated_at": "2026-06-01T15:32:00.000Z"
    }
  ],
  "has_more": true,
  "next_cursor": "tx_clxabc123"
}

curl https://bravopay.club/api/v1/me -H "Authorization: Bearer bp_live_seu_token"

{
  "id": "usr_xxx",
  "email": "voce@example.com",
  "name": "Você",
  "balance_cents": 12345,
  "api_card_enabled": false
}

curl -X POST https://bravopay.club/api/v1/products \
  -H "Authorization: Bearer bp_live_seu_token" \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Plano Pro Mensal",
    "price_cents": 1990,
    "description": "Acesso completo por 30 dias",
    "type": "SUBSCRIPTION",
    "interval_days": 30
  }'

{
  "id": "evt_xxx",
  "type": "transaction.paid",
  "created_at": "2026-06-01T15:32:00.000Z",
  "data": {
    "object": "transaction",
    "id": "tx_clxabc123",
    "status": "PAID",
    "amount_cents": 1990,
    "currency": "BRL",
    "method": "PIX",
    "customer": { "email": "...", "name": "...", "cpf": "..." },
    "external_reference": "order_42",
    "paid_at": "2026-06-01T15:32:00.000Z"
  }
}

import crypto from "node:crypto";

function verifyWebhook(rawBody, signature, secret) {
  const expected = crypto
    .createHmac("sha256", secret)
    .update(rawBody)
    .digest("hex");
  return crypto.timingSafeEqual(
    Buffer.from(expected),
    Buffer.from(signature)
  );
}

// 1. Cria PIX (sem produto, funciona pra qualquer conta)
const res = await fetch("https://bravopay.club/api/v1/transactions", {
  method: "POST",
  headers: {
    "Authorization": `Bearer ${process.env.BRAVOPAY_API_KEY}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    amount_cents: 1990,
    method: "pix",
    customer: {
      email: "cliente@example.com",
      name: "Cliente Exemplo",
      cpf: "11144477735",
    },
    description: "Pedido #42",
    external_reference: "order_42",
  }),
});

const tx = await res.json();
if (!res.ok) throw new Error(tx.error.message);

// 2. Mostra QR pro cliente
console.log("Copia-cola PIX:", tx.pix.copy_paste);
console.log("Expira em:", tx.pix.expires_at);

// 3. Espera webhook 'transaction.paid' chegar no seu endpoint
//    OU pollie GET /transactions/{id} periodicamente
//    OU melhor: configure o webhook em Dashboard → Integrações