Platform API

{
  "id": "whevt_abc123def456",
  "type": "goal.completed",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_xyz789",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 20.00,        // Total goal amount charged (micro-payments + final remaining)
    "depositAmount": 9.99,  // Deposit charged at confirmation (0 if no deposit)
    "transferId": "tr_stripe_transfer_id",
    "metadata": {
      "productId": "prod_filmcourse_001",
      "buyerId": "your_platform_user_456",
      "platform": "your_platform_name"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.deposit_paid",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_xyz789",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 9.99,         // Deposit charged (same as depositAmount)
    "depositAmount": 9.99,
    "metadata": {
      "productId": "prod_filmcourse_001",
      "buyerId": "your_platform_user_456"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.round_up_collected",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_xyz789",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 3.00,            // Micro-payment just collected ($3.00 standard)
    "savedAmount": 6.00,       // Cumulative total saved after this payment
    "targetAmount": 29.99,     // Goal target amount
    "paymentProgress": 20,     // Percentage toward goal (0-100)
    "metadata": {
      "productId": "prod_filmcourse_001",
      "buyerId": "your_platform_user_456"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.subscription_created",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_abc123",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "frequency": "MONTHLY",
    "nextBillingDate": "2026-04-03T00:00:00.000Z",
    "metadata": {
      "planId": "plan_premium",
      "buyerId": "your_platform_user_456"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.cycle_paid",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_abc123",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 9.99,
    "transferId": "tr_stripe_transfer_id",
    "frequency": "MONTHLY",
    "cycleNumber": 2,
    "nextBillingDate": "2026-05-03T00:00:00.000Z",
    "metadata": {
      "planId": "plan_premium",
      "buyerId": "your_platform_user_456"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.cancelled",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_xyz789",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 29.99,
    "depositAmount": 9.99,       // 0 if no deposit was required
    "depositRefundable": true,   // Whether the goal was set to refund on cancel
    "depositRefunded": true,     // true only if Stripe refund actually succeeded
    "metadata": {
      "productId": "prod_filmcourse_001",
      "buyerId": "your_platform_user_456",
      "platform": "your_platform_name"
    }
  }
}

{
  "id": "whevt_...",
  "type": "goal.payment_failed",
  "timestamp": 1740484800,
  "data": {
    "goalId": "goal_xyz789",
    "userId": "trickl_internal_user_id",
    "userEmail": "buyer@example.com",
    "userName": "Alex Johnson",
    "providerId": "prov_abc123",
    "amount": 3.00,              // The failed charge amount (dollars)
    "savedAmount": 9.00,         // Updated savedAmount after reversal (dollars)
    "targetAmount": 15.00,       // Goal target (dollars)
    "paymentProgress": 60,       // Updated progress percentage after reversal
    "metadata": {
      "productId": "prod_filmcourse_001",
      "buyerId": "your_platform_user_456",
      "platform": "your_platform_name"
    }
  }
}

import crypto from 'crypto';
import express from 'express';

function verifyTricklWebhook(
  rawBody: string,
  signature: string,
  timestamp: string,
  secret: string
): boolean {
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) return false;

  const expected = crypto
    .createHmac('sha256', secret)
    .update(`${timestamp}.${rawBody}`)
    .digest('hex');

  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// IMPORTANT: must receive raw body
app.post('/webhooks/trickl', express.raw({ type: 'application/json' }), async (req, res) => {
  const rawBody = req.body.toString();
  const signature = req.headers['x-trickl-signature'] as string;
  const timestamp = req.headers['x-trickl-timestamp'] as string;
  const webhookId = req.headers['x-trickl-webhook-id'] as string;

  const event = JSON.parse(rawBody);
  const creator = await db.creators.findFirst({
    where: { tricklProviderId: event.data.providerId }
  });

  if (!verifyTricklWebhook(rawBody, signature, timestamp, creator.tricklWebhookSecret)) {
    return res.status(401).send('Invalid signature');
  }

  // Deduplicate
  const alreadyProcessed = await db.processedWebhooks.findUnique({ where: { id: webhookId } });
  if (alreadyProcessed) return res.status(200).send('ok');

  if (event.type === 'goal.completed') {
    const { productId, buyerId, ticketId } = event.data.metadata;
    await grantProductAccess(productId, buyerId);
    await db.processedWebhooks.create({ data: { id: webhookId } });

    // For event tickets: push QR code to Trickl to unlock the ticket card in the app
    if (ticketId) {
      const qrRef = await getBookingQrRef(ticketId);
      await fetch(`https://api.trickl.com/api/v1/goals/${event.data.goalId}/ticket`, {
        method: 'POST',
        headers: {
          'Authorization': `Bearer ${creator.tricklWebhookSecret}`,
          'Content-Type': 'application/json',
        },
        body: JSON.stringify({ qrData: qrRef }),
      });
    }
  }

  res.status(200).send('ok');
});