import requests

url = "https://api.bongomind.com/v1/chat"
headers = {
    "Authorization": "Bearer YOUR_TENANT_API_KEY",
    "Content-Type": "application/json"
}
payload = {
    "message": "আমার বকেয়া বিল কত এবং আমি কিভাবে বিকাশ দিয়ে পরিশোধ করব?",
    "end_user_id": "cust_user_401"
}

response = requests.post(url, json=payload, headers=headers)
print("AI Reply:", response.json()["reply"])

import fetch from 'node-fetch';

async function chatWithBongoMind() {
  const res = await fetch('https://api.bongomind.com/v1/chat', {
    method: 'POST',
    headers: {
      'Authorization': 'Bearer YOUR_TENANT_API_KEY',
      'Content-Type': 'application/json'
    },
    body: JSON.stringify({
      message: 'আমার ডোমেইন myshopbd.com কি খালি আছে?',
      end_user_id: 'user_dhaka_01'
    })
  });
  const data = await res.json();
  console.log('AI Reply:', data.reply);
}
chatWithBongoMind();

// app/Http/Controllers/BongoMindWebhookController.php
namespace App\Http\Controllers;

use Illuminate\Http\Request;

class BongoMindWebhookController extends Controller
{
    public function handle(Request $request)
    {
        $signature = $request->header('X-BongoMind-Signature');
        $timestamp = $request->header('X-BongoMind-Timestamp');
        $secret = config('services.bongomind.secret'); // Your bm_sec_...
        
        // HMAC-SHA256 Signature Verification
        $payload = $timestamp . '.' . $request->getContent();
        $expected = 'sha256=' . hash_hmac('sha256', $payload, $secret);
        
        if (!hash_equals($expected, (string)$signature)) {
            return response()->json(['ok' => false, 'error' => 'invalid_signature'], 401);
        }
        
        $tool = $request->input('tool');
        if ($tool === 'get_user_bill') {
            return response()->json([
                'ok' => true,
                'data' => ['due_amount' => 800, 'due_date' => '2026-10-31']
            ]);
        }
        return response()->json(['ok' => false, 'error' => 'unknown_tool'], 404);
    }
}