Build apps. Automate workflows.
Connect anything.

import { app, Datastore } from 'codehooks-js';
import { verify } from 'webhook-verify';

// Connect: Stripe calls this endpoint, so it skips the API key check
app.auth('/webhook/*', (req, res, next) => next());

app.post('/webhook/stripe', async (req, res) => {
  const secret = process.env.STRIPE_WEBHOOK_SECRET;
  if (!verify('stripe', req.rawBody, req.headers, secret)) {
    return res.status(401).json({ error: 'Invalid signature' });
  }
  const conn = await Datastore.open();
  // Stripe retries events, so skip any event ID seen in the last week
  const kv = { keyspace: 'stripe-events' };
  if (await conn.get(req.body.id, kv)) {
    return res.json({ received: true });
  }
  const order = await conn.insertOne('orders', {
    eventId: req.body.id,
    status: 'new',
  });
  await conn.enqueue('fulfil', { orderId: order._id });
  await conn.set(req.body.id, 'done', { ...kv, ttl: 7 * 24 * 60 * 60 * 1000 });
  res.json({ received: true });
});

// Automate: a worker handles each order in the background
app.worker('fulfil', async (req, res) => {
  const { orderId } = req.body.payload;
  const conn = await Datastore.open();
  // call your shipping or CRM API here
  await conn.updateOne('orders', orderId, { $set: { status: 'done' } });
  res.end();
});

// ...and a cron job checks for stuck orders every morning
app.job('0 7 * * *', async (req, res) => {
  const conn = await Datastore.open();
  const stuck = await conn.getMany('orders', { status: 'new' }).toArray();
  console.log(`${stuck.length} orders still open`);
  res.end();
});

// Build: an API (protected by API key or JWT by default)
app.get('/api/orders', async (req, res) => {
  const conn = await Datastore.open();
  const orders = await conn.getMany('orders', {}, { limit: 50 }).toArray();
  res.json(orders);
});

// ...and the frontend that calls it, served from the same deploy
app.static({
  route: '/',
  directory: '/dist',
  default: 'index.html',
  notFound: '/index.html',
});

export default app.init();