API de Imóveis & Integrações

curl 'https://altovaleshopping.com/api/v1/properties?page=1&limit=20&status=ativo' \
  -H "X-API-Key: av_live_SUA_CHAVE_AQUI"

const API = "https://altovaleshopping.com/api/v1";
const KEY = process.env.AVS_API_KEY!;   // nunca hardcode a chave

const res = await fetch(`${API}/properties?status=ativo&limit=100`, {
  headers: { "X-API-Key": KEY },
});

if (!res.ok) throw new Error(`API ${res.status}: ${(await res.json()).error}`);

const { data, total, page, limit } = await res.json();
console.log(`${data.length} de ${total} imóveis`);

$ch = curl_init("https://altovaleshopping.com/api/v1/properties?status=ativo");
curl_setopt($ch, CURLOPT_RETURNTRANSFER, true);
curl_setopt($ch, CURLOPT_HTTPHEADER, ["X-API-Key: " . getenv("AVS_API_KEY")]);
$body = json_decode(curl_exec($ch), true);

# 1. cria (entra como rascunho)
RES=$(curl -sS -X POST "https://altovaleshopping.com/api/v1/properties" \
  -H "X-API-Key: $KEY" -H "Content-Type: application/json" \
  -d '{
    "title": "Casa 3 quartos no Centro",
    "property_type": "venda",
    "category": "casa",
    "price": 450000,
    "address_street": "Rua XV de Novembro",
    "address_number": "100",
    "address_neighborhood": "Centro",
    "address_city": "Rio do Sul",
    "address_state": "SC",
    "address_zip": "89160-000",
    "reference_code": "SEU-ID-EXTERNO-123"
  }')
ID=$(echo "$RES" | jq -r .id)

# 2. publica
curl -sS -X PATCH "https://altovaleshopping.com/api/v1/properties/$ID" \
  -H "X-API-Key: $KEY" -H "Content-Type: application/json" \
  -d '{"status":"ativo"}'

curl 'https://altovaleshopping.com/api/v1/leads?updated_since=2026-08-01T00:00:00Z&limit=100' \
  -H "X-API-Key: $KEY"

# {
#   "data": [
#     {
#       "id": "uuid",
#       "name": "Maria Souza",
#       "email": "[email protected]",
#       "phone": "47999990000",
#       "origin": "visita",
#       "urgency": "alta",
#       "status_column_id": "col_novo",
#       "source_property_id": "uuid",
#       "assigned_broker_id": null,
#       "created_at": "2026-08-02T13:41:07.201Z"
#     }
#   ],
#   "total": 37, "page": 1, "limit": 100
# }

KEY="av_live_..."
URL="https://altovaleshopping.com/api/v1"
PAGE=1
while :; do
  RES=$(curl -sS "$URL/properties?page=$PAGE&limit=100" -H "X-API-Key: $KEY")
  echo "$RES" | jq -r '.data[] | [.id, .reference_code, .status, .price] | @tsv'
  TOTAL=$(echo "$RES" | jq -r .total)
  (( PAGE * 100 >= TOTAL )) && break
  PAGE=$((PAGE + 1))
  sleep 1   # respeita o rate limit
done

curl -X POST 'https://altovaleshopping.com/api/v1/properties/UUID/images' \
  -H "X-API-Key: $KEY" -H "Content-Type: application/json" \
  -d '{
    "source_urls": ["https://cdn.seucrm.com/1.jpg", "https://cdn.seucrm.com/2.jpg"],
    "replace": true
  }'

{
  "event": "lead.created",
  "payload": { "...": "dados do evento" },
  "timestamp": "2026-08-10T12:34:56.000Z",
  "delivery_id": "uuid"
}

// Headers
// X-Webhook-Event: lead.created
// X-Webhook-Delivery: uuid
// X-Webhook-Signature: <hmac-sha256-hex do corpo, se houver secret>

import crypto from "node:crypto";

app.post("/webhooks/avs", express.raw({ type: "application/json" }), (req, res) => {
  const expected = crypto
    .createHmac("sha256", process.env.AVS_WEBHOOK_SECRET!)
    .update(req.body)              // corpo BRUTO, antes do JSON.parse
    .digest("hex");

  const received = req.header("X-Webhook-Signature") ?? "";
  const ok =
    received.length === expected.length &&
    crypto.timingSafeEqual(Buffer.from(received), Buffer.from(expected));

  if (!ok) return res.sendStatus(401);

  res.sendStatus(200);           // responde primeiro
  enqueue(JSON.parse(req.body)); // processa depois
});

async function callApi(path: string, init: RequestInit = {}) {
  for (let attempt = 0; attempt < 3; attempt++) {
    const r = await fetch(`${API}${path}`, {
      ...init,
      headers: { "X-API-Key": KEY, "Content-Type": "application/json", ...init.headers },
    });

    if (r.ok) return r.json();

    if (r.status === 429) {                        // limite: espera crescente
      await sleep(1000 * (attempt + 1));
      continue;
    }
    if (r.status >= 500) {                         // servidor: backoff exponencial
      await sleep(500 * 2 ** attempt);
      continue;
    }
    throw new Error(`API ${r.status}: ${(await r.json()).error}`);  // 4xx: não retentar
  }
  throw new Error("Máximo de tentativas excedido");
}