import { Controller, Get, Query, Res, Logger } from '@nestjs/common'; import * as express from 'express'; import { PrismaService } from '../../prisma/prisma.service'; @Controller('whatsapp') export class ProductFlowWebviewController { private readonly logger = new Logger(ProductFlowWebviewController.name); constructor(private readonly prisma: PrismaService) {} @Get('search') async serveSearchFlow( @Query('phone') phone: string, @Query('businessId') businessId: string, @Res() res: express.Response, ) { this.logger.log(`Search webview requested for phone: ${phone}, business: ${businessId}`); const business = await this.prisma.business.findUnique({ where: { id: businessId || '' }, }); const businessName = this.esc(business?.name || 'our Store'); const safePhone = this.esc(phone || ''); const safeBusinessId = this.esc(businessId || ''); const html = ` Search Products
Search Products

Search Products

Please enter product search terms or keywords below.

Example: Coffee, Mouse, Speaker

✓
Managed by ${businessName}. Learn more
`; res.setHeader('Content-Type', 'text/html; charset=utf-8'); res.setHeader('Cache-Control', 'no-store'); res.send(html); } @Get('add-custom') async serveAddCustomFlow( @Query('phone') phone: string, @Query('businessId') businessId: string, @Query('productId') productId: string, @Res() res: express.Response, ) { this.logger.log(`Add custom product webview requested for phone: ${phone}, business: ${businessId}, product: ${productId}`); const business = await this.prisma.business.findUnique({ where: { id: businessId || '' }, }); const businessName = this.esc(business?.name || 'our Store'); const safePhone = this.esc(phone || ''); const safeBusinessId = this.esc(businessId || ''); const safeProductId = this.esc(productId || ''); const product = productId ? await this.prisma.product.findUnique({ where: { id: productId } }) : null; const productName = product ? product.name : ''; const html = ` Add Product
Passenger Information

Passenger Information

${productName ? `Please enter details for ${this.esc(productName)} below.` : 'Please enter passenger details below.'}

Example: John Doe

Example: 1

✓
Managed by ${businessName}. Learn more
`; res.setHeader('Content-Type', 'text/html; charset=utf-8'); res.setHeader('Cache-Control', 'no-store'); res.send(html); } private esc(str: string): string { return str .replace(/&/g, '&') .replace(//g, '>') .replace(/"/g, '"') .replace(/'/g, '''); } }