CreaScale AI API

curl https://api.creascale.ai/api/v1/credits \
  -H "Authorization: Bearer cs_live_your_key_here"

curl -X POST https://api.creascale.ai/api/v1/static-ads \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "prompt": "Matte silicone phone case, 80 DH, ships COD in Morocco",
    "quality": "standard",
    "count": 4
  }'

{
  "run_id": "a1b2c3d4-...",
  "status": "generating",
  "quality": "standard",
  "count": 4,
  "credits_debited": 20,
  "credits_remaining": 980,
  "expected_eta_s": 32
}

curl https://api.creascale.ai/api/v1/static-ads/RUN_ID \
  -H "Authorization: Bearer cs_live_your_key"

{
  "run_id": "a1b2c3d4-...",
  "status": "completed",
  "quality": "standard",
  "images": [
    { "id": "...", "url": "https://...public...", "file_name": "ad_1.jpg", "mime_type": "image/jpeg" }
  ],
  "count": 4
}

curl -X POST https://api.creascale.ai/api/v1/ugc/videos \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "product_url": "https://example.com/product",
    "prompt": "Hook: this case survived a 2m drop",
    "tier": "standard",
    "duration_s": 16,
    "variant_count": 3
  }'

{
  "project_id": "a1b2c3d4-...",
  "project_ids": ["a1b2c3d4-...", "b2c3d4e5-...", "c3d4e5f6-..."],
  "batch_id": "d4e5f6a7-...",
  "count": 3,
  "requested_variants": 3,
  "variant_cap": 20,
  "variant_count": 3,
  "status": "generating",
  "credits_debited": 150,
  "credits_remaining": 850,
  "expected_eta_s": 270
}

curl https://api.creascale.ai/api/v1/ugc/videos/PROJECT_ID \
  -H "Authorization: Bearer cs_live_your_key"

{
  "id": "a1b2c3d4-...",
  "name": "Phone case — drop test",
  "status": "completed",
  "variant_count": 1,
  "target_language": "fr",
  "target_country": "MA",
  "ad_copy": { "headline": "...", "primary_text": "..." },
  "final_video_url": "https://...signed...  (1h)",
  "scenes": [
    { "id": "...", "scene_order": 1, "scene_kind": "hook", "status": "completed",
      "subtitle": "This case survived a 2m drop",
      "video_url": "https://...signed... (1h)" }
  ]
}

curl "https://api.creascale.ai/api/v1/ugc/videos?limit=10&offset=0" \
  -H "Authorization: Bearer cs_live_your_key"

{
  "data": [
    { "id": "...", "name": "...", "status": "completed", "variant_count": 3,
      "target_language": "fr", "created_at": "2026-08-15T09:00:00Z" }
  ],
  "total": 42,
  "limit": 10,
  "offset": 0
}

curl https://api.creascale.ai/api/v1/ugc/batch/BATCH_ID \
  -H "Authorization: Bearer cs_live_your_key"

{
  "batch_id": "d4e5f6a7-...",
  "total": 3,
  "done": 2,
  "counts": { "completed": 2, "generating": 1 },
  "complete": false,
  "variants": [
    { "project_id": "...", "name": "Variant 1", "status": "completed",
      "tier": "standard", "duration_s": 16,
      "video_url": "https://...signed... (1h)" }
  ]
}

curl -X POST https://api.creascale.ai/api/v1/runs \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "product_url": "https://example.com/product",
    "product_image_urls": [
      "https://cdn.example.com/photo1.jpg",
      "https://cdn.example.com/photo2.jpg"
    ]
  }'

curl -X POST https://api.creascale.ai/api/v1/runs \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "product_url": "https://example.com/product",
    "niche": "skincare",
    "target_country": "US",
    "target_language": "en"
  }'

{
  "id": "a1b2c3d4-...",
  "status": "processing",
  "credits_consumed": 30,
  "credits_remaining": 750,
  "created_at": "2026-04-15T12:00:00Z",
  // present only when product_image_urls or product_images_base64 supplied:
  "images_uploaded": 2,
  "image_errors": []
}

curl "https://api.creascale.ai/api/v1/runs?limit=10&status=completed" \
  -H "Authorization: Bearer cs_live_your_key"

{
  "id": "a1b2c3d4-...",
  "status": "completed",
  "pdas": [
    {
      "id": "...",
      "name": "The Skeptic Who Became a Believer",
      "persona": "35-45F, tried everything, trust issues",
      "desire": "Something that actually works",
      "awareness": "warm",
      "hook": "I was the last person who'd try this..."
    }
  ],
  "media": [
    {
      "id": "...",
      "pda_id": "...",
      "file_url": "https://...signed-url...",
      "generation_model": "gemini-3-pro-image"
    }
  ],
  "ad_copies": [
    {
      "id": "...",
      "pda_id": "...",
      "primary_text_v1": "She tried 47 products...",
      "headline_1": "Finally. Real Results.",
      "cta_button": "Shop Now"
    }
  ]
}

curl https://api.creascale.ai/api/v1/runs/RUN_ID/media/MEDIA_ID/url \
  -H "Authorization: Bearer cs_live_your_key"

{
  "credits_remaining": 650,
  "credits_recharge": 150,
  "credits_total": 800,
  "credits_limit": 780,
  "plan": "enterprise",
  "status": "active",
  "current_period_end": "2026-05-15T00:00:00Z"
}

{
  "data": [{
    "id": "uuid",
    "pda_number": 1,
    "name": "Budget-conscious parent",
    "persona": "...",
    "desire": "...",
    "awareness": "cold",
    "hook": "...",
    "priority": "high"
  }],
  "total": 8,
  "run_status": "reviewing_angles"
}

{ "hook": "New hook text", "persona": "Updated persona" }

{
  "duplicates": [
    { "angle_id": "uuid-1", "copies": 10 },
    { "angle_id": "uuid-2", "copies": 5 }
  ]
}

{
  "approved_angle_ids": ["uuid-1", "uuid-3", "uuid-5"]
}
// Omit to keep all angles

curl -X POST https://api.creascale.ai/api/v1/runs/RUN_ID/media/MEDIA_ID/ai-edit \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "instruction": "change background to white, remove discount badge"
  }'

curl -X POST https://creascale-agent-api.onrender.com/api/v1/messages/template \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: order-8832-confirmation" \
  -d '{
    "to": "212600000001",
    "template": "order_confirmation",
    "language": "fr",
    "body_params": ["Yassine", "8832", "329 DH"],
    "quick_reply_payloads": ["CONFIRM:8832", "CANCEL:8832"]
  }'

{
  "send_id": "b3f1c2d0-...",
  "status": "queued",
  "duplicate": false,              // true = this Idempotency-Key was already used → same send_id, no new message
  "service_window_minutes_left": 1240   // present when the 24h service window is currently open
}

curl https://creascale-agent-api.onrender.com/api/v1/templates/config \
  -H "Authorization: Bearer cs_live_your_key"

{
  "order_confirm_template": "order_confirmation",
  "order_confirm_text": null,
  "shipping_confirm_template": "shipping_update",
  "order_followup_text": null,
  "followup_confirmed_text": "Order confirmed, delivery within 48h.",
  "followup_cancelled_text": null,
  "sheet_watch_enabled": false,
  "sheet_watch_url": null,
  "sheet_watch_template": null,
  "sheet_watch_map": null,
  "readonly_templates_enabled": true,
  "readonly_template_daily_cap": null,
  "readonly_template_hours": null,
  "readonly_timezone": "Africa/Casablanca",
  "readonly_plan": "pro",
  "readonly_sends_monthly_cap": 10000,
  "readonly_sends_lifetime_cap": null,
  "readonly_templates_max": null
}

curl -X PATCH https://creascale-agent-api.onrender.com/api/v1/templates/config \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "order_confirm_template": "order_confirmation",
    "shipping_confirm_template": "shipping_update"
  }'

{
  "customer": "212600000001",
  "origin": "checkout_checkbox",            // where the consent was collected
  "collected_at": "2026-08-01T14:32:00Z",   // when
  "consent_text": "I agree to receive order updates and offers on WhatsApp"
}

curl -X POST https://creascale-agent-api.onrender.com/api/v1/messages/text \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{ "to": "212600000001", "text": "Hi Yassine, your parcel ships tomorrow." }'

curl -X POST https://creascale-agent-api.onrender.com/api/v1/messages/media \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{ "to": "212600000001", "type": "image",
        "link": "https://cdn.example.com/jewels/nour-ring.jpg",
        "caption": "The Nour ring, 1,200 MAD" }'

// The webhook tells you what arrived:
{
  "event": "message.received",
  "data": {
    "customer": "212600000001",
    "text": "",                      // the caption, if any
    "media": [{
      "type": "image",               // image · video · audio · document · sticker
      "mime": "image/jpeg",
      "size": 84213,
      "voice": false,                // true only for a WhatsApp voice note
      "filename": null,
      "url": "https://creascale-agent-api.onrender.com/api/v1/messages/media/wa_1234567890",
      "expires_in_days": 7
    }]
  }
}

{
  "send_id": "b3f1c2d0-...",
  "status": "sent",                  // queued → sent · failed (definitive, with the Meta error code)
  "provider_message_id": "wamid.…",  // Meta message id, once accepted
  "error": null,
  "created_at": "2026-08-09T18:02:11Z"
}

{
  "data": [{
    "id": "9c2e…",
    "customer": "212600000001",       // not masked: it is your customer
    "channel": "whatsapp",
    "language": "fr",
    "state": "human",                 // human = one of your operators has the thread (agent silent)
    "last_message_at": "2026-09-04T20:11:03Z",
    "last_preview": "Merci, c'est expédié.",
    "last_direction": "outbound"
  }],
  "next_since": "2026-09-04T20:11:03Z"   // pass it back as ?since= to get only what changed
}

{ "all": 534, "whatsapp": 66, "instagram": 468, "escalations": 3 }   // real totals, never a page size

{
  "data": [
    { "id": "…", "from": "customer", "text": "Bonjour, c'est expédié ?", "at": "2026-09-04T20:10:41Z", "direction": "inbound",  "status": null },
    { "id": "…", "from": "human",    "text": "Oui, demain.",             "at": "2026-09-04T20:11:03Z", "direction": "outbound", "status": "delivered" }
  ],
  "next_after": "2026-09-04T20:11:03Z"
}

const express = require('express');
const crypto = require('crypto');
const app = express();

// Kill-switch: one env var stops the rail without a redeploy.
const ENABLED = process.env.CREASCALE_ENABLED === 'true';
const SECRET = process.env.CREASCALE_WEBHOOK_SECRET; // fail CLOSED if missing

const seen = new Set(); // use a DB table in production

app.post('/creascale-webhook', express.raw({ type: 'application/json' }), (req, res) => {
  if (!ENABLED) return res.sendStatus(503);
  if (!SECRET) return res.sendStatus(401); // never 200 without verification

  const sig = req.headers['x-creascale-signature'];
  const ts = req.headers['x-creascale-timestamp'];
  const body = req.body.toString('utf8');
  const expected = 'sha256=' + crypto.createHmac('sha256', SECRET)
    .update(ts + '.' + body).digest('hex');
  const fresh = Math.abs(Date.now() / 1000 - Number(ts)) <= 300;
  if (!fresh || !crypto.timingSafeEqual(Buffer.from(sig || ''), Buffer.from(expected))) {
    return res.status(401).send('Invalid signature');
  }

  const evt = JSON.parse(body);
  const key = evt.event + ':' + (evt.data.send_id || evt.data.message_id || '');
  if (seen.has(key)) return res.sendStatus(200); // retry replay — already handled
  seen.add(key);

  res.sendStatus(200); // ACK FIRST — then process async
  setImmediate(() => {
    if (evt.event === 'message.received' && evt.data.button_payload) {
      // "CONFIRM:8832" → confirm ORDER 8832 — never "the customer's latest order".
      const [action, orderId] = evt.data.button_payload.split(':');
      // handleOrderAnswer(action, orderId, evt.data.from);
    }
  });
});

const crypto = require('crypto');

function verifySignature(body, signature, timestamp, secret) {
  // Reject if timestamp older than 5 min (prevents replay)
  const now = Math.floor(Date.now() / 1000);
  if (Math.abs(now - parseInt(timestamp)) > 300) return false;

  const signedString = timestamp + '.' + body;
  const expected = 'sha256=' + crypto
    .createHmac('sha256', secret)
    .update(signedString)
    .digest('hex');
  return crypto.timingSafeEqual(
    Buffer.from(signature),
    Buffer.from(expected)
  );
}

// In your Express handler (use raw body parser):
app.post('/webhook', express.raw({ type: 'application/json' }), (req, res) => {
  const sig = req.headers['x-creascale-signature'];
  const ts = req.headers['x-creascale-timestamp'];
  const body = req.body.toString('utf8');
  if (!verifySignature(body, sig, ts, WEBHOOK_SECRET)) {
    return res.status(401).send('Invalid signature');
  }
  const event = JSON.parse(body);
  // Process event...
  res.sendStatus(200);
});

{
  "event": "run.completed",
  "timestamp": "2026-04-15T12:05:00Z",
  "data": {
    "run_id": "a1b2c3d4-...",
    "status": "completed"
  }
}

curl -X POST https://creascale-agent-api.onrender.com/api/v1/webhooks \
  -H "Authorization: Bearer cs_live_your_key" \
  -H "Content-Type: application/json" \
  -d '{
    "url": "https://your-erp.example.com/creascale/hook",
    "events": ["message.received", "message.delivered", "template.approved"]
  }'

{
  "id": "a1b2c3d4-...",
  "url": "https://your-erp.example.com/creascale/hook",
  "secret": "whsec_...",
  "events": ["message.received"]
}

{
  "data": [
    { "id": "a1b2c3d4-...",
      "url": "https://your-erp.example.com/creascale/hook",
      "secret_masked": "whsec_12...",
      "events": ["message.received"],
      "is_active": true,
      "created_at": "2026-08-15T09:00:00Z" }
  ]
}

curl -X DELETE https://creascale-agent-api.onrender.com/api/v1/webhooks/WEBHOOK_ID \
  -H "Authorization: Bearer cs_live_your_key"

{
  "error": "Insufficient credits",
  "credits_remaining": 10,
  "credits_required": 30
}