سایت خودتان را به نیوارا وصل کنید

curl -X POST https://studio.manova.ir/api/sites/connect \
  -H "Content-Type: application/json" \
  -d '{
    "code": "NV-1A2B3C4D",
    "siteUrl": "https://example.com",
    "endpoint": "https://example.com/api/nivara",
    "platform": "custom",
    "software": "my-cms",
    "version": "2.3",
    "siteName": "My Site"
  }'

# پاسخ موفق:
# {"ok":true,"siteId":"6f1c…","secret":"q8Zr…","verifyUrl":"https://studio.manova.ir/api/sites/verify"}

curl -X POST https://studio.manova.ir/api/sites/verify \
  -H "Content-Type: application/json" \
  -d '{"siteId":"6f1c…"}'
# {"ok":true}

import { createHmac, timingSafeEqual } from "node:crypto";

const MAX_SKEW = 300;            // seconds
const seen = new Map();          // signature -> expiry (use Redis/DB if you run several servers)

/**
 * req: { method, path, headers, rawBody }
 *   path    = path relative to your endpoint, e.g. "/publish"
 *   rawBody = the exact request body string ("" for GET). Verify BEFORE JSON.parse.
 */
export function verifyNivara(req, { siteId, secret }) {
  const ts = Number(req.headers["x-nivara-timestamp"]);
  const sig = String(req.headers["x-nivara-signature"] || "");
  if (req.headers["x-nivara-site"] !== siteId) return "wrong site";
  if (!Number.isFinite(ts) || Math.abs(Date.now() / 1000 - ts) > MAX_SKEW) return "expired";

  const expected = createHmac("sha256", secret)
    .update(`${ts}.${req.method}.${req.path}.${req.method === "GET" ? "" : req.rawBody}`)
    .digest("hex");
  const a = Buffer.from(expected), b = Buffer.from(sig);
  if (a.length !== b.length || !timingSafeEqual(a, b)) return "bad signature";

  const now = Date.now();
  for (const [k, exp] of seen) if (exp < now) seen.delete(k);
  if (seen.has(sig)) return "replayed";
  seen.set(sig, now + 2 * MAX_SKEW * 1000);
  return null; // OK
}

HTTP/1.1 200 OK
Content-Type: application/json

{
  "ok": true,
  "software": "my-cms",
  "version": "2.3",
  "siteName": "My Site",
  "postCount": 128,
  "seo": null
}

POST /api/nivara/publish HTTP/1.1
Host: example.com
Content-Type: application/json
X-Nivara-Site: 6f1c2a4e-…
X-Nivara-Timestamp: 1791990000
X-Nivara-Signature: 9b1f0c…e4
X-Nivara-Protocol: 1

{
  "protocol": 1,
  "jobId": "a3d9b8c2-…",
  "mode": "publish",
  "title": "هاست وردپرس با هاست معمولی چه فرقی دارد؟",
  "slug": "wordpress-hosting-vs-shared-hosting",
  "excerpt": "…",
  "html": "<p>…</p><h2>…</h2>…",
  "seo": {
    "metaTitle": "…",
    "metaDescription": "…",
    "focusKeyword": "هاست وردپرس",
    "secondaryKeywords": ["…", "…"]
  },
  "category": "هاستینگ",
  "tags": ["وردپرس", "هاست"],
  "featuredImage": { "url": "https://studio.manova.ir/media/a3d9…/featured-1a2b3c.webp", "alt": "…" },
  "inlineImages": [{ "url": "https://studio.manova.ir/media/a3d9…/image-6-4d5e6f.webp", "alt": "…", "caption": "…" }],
  "faqSchema": { "@context": "https://schema.org", "@type": "FAQPage", "mainEntity": [] },
  "options": { "createCategories": true },
  "document": { "title": "…", "blocks": [], "faq": [], "internalLinkIdeas": [] }
}

{
  "type": "heading",        // heading | paragraph | list | quote | table | image
  "level": 2,               // headings only: 2 or 3
  "text": "…",              // heading, paragraph, quote (paragraphs may contain **bold**)
  "ordered": null,          // lists only
  "items": null,            // lists only: ["…", "…"]
  "headers": null,          // tables only: ["…", "…"]
  "rows": null,             // tables only: [["…", "…"], …]
  "alt": null,              // images only: Persian alt text
  "caption": null,          // images only
  "imagePrompt": null       // images only: English description used to generate the image
}

HTTP/1.1 401 Unauthorized
Content-Type: application/json

{ "message": "bad signature" }

// Minimal receiver (Node.js, no dependencies). Full version: https://studio.manova.ir/downloads/custom-cms-receiver.mjs
import { createServer } from "node:http";
import { verifyNivara } from "./verify-nivara.js";   // the function from the "request signing" section

const BASE = "/api/nivara";
const config = await loadSetting("nivara");          // { siteId, secret } saved while connecting

createServer((req, res) => {
  let rawBody = "";
  req.on("data", c => (rawBody += c));
  req.on("end", async () => {
    const send = (status, json) => { res.writeHead(status, { "Content-Type": "application/json" }); res.end(JSON.stringify(json)); };
    const url = new URL(req.url, "http://x");
    if (!url.pathname.startsWith(BASE)) return send(404, { message: "not found" });
    const path = url.pathname.slice(BASE.length);       // "/status" | "/publish" | "/disconnect"

    const problem = verifyNivara({ method: req.method, path, headers: req.headers, rawBody }, config);
    if (problem) return send(401, { message: problem });

    if (req.method === "GET" && path === "/status")
      return send(200, { ok: true, software: "my-cms", version: "2.3", siteName: "My Site", postCount: await countPublished() });

    if (req.method === "POST" && path === "/publish") {
      const p = JSON.parse(rawBody);
      // Upsert by jobId: the same order always updates the same post.
      const post = await upsertPostByNivaraJob(p.jobId, {
        title: p.title, slug: p.slug, html: p.html, excerpt: p.excerpt,
        status: p.mode === "publish" ? "published" : "draft",
        metaTitle: p.seo.metaTitle, metaDescription: p.seo.metaDescription,
        category: p.category, tags: p.tags,
        featuredImage: p.featuredImage.url && await importImage(p.featuredImage.url, p.featuredImage.alt),
      });
      return send(200, { ok: true, postId: String(post.id), url: post.url, status: p.mode, postCount: await countPublished() });
    }

    if (req.method === "POST" && path === "/disconnect") {
      await deleteSetting("nivara");
      return send(200, { ok: true });
    }
    send(404, { message: "not found" });
  });
}).listen(8080);

import { createHmac } from "node:crypto";

const NIVARA = "https://studio.manova.ir/api/v1";
const { siteId, secret } = await loadSetting("nivara");   // saved while connecting

/** Signed request to Nivara. path includes the query string, e.g. "/jobs?status=draft". */
export async function nivara(method, path, body) {
  const raw = body === undefined ? "" : JSON.stringify(body);
  const ts = Math.floor(Date.now() / 1000);
  const signature = createHmac("sha256", secret)
    .update(`${ts}.${method}.${path}.${method === "GET" ? "" : raw}`)
    .digest("hex");
  const res = await fetch(NIVARA + path, {
    method,
    headers: { "Content-Type": "application/json", "X-Nivara-Site": siteId, "X-Nivara-Timestamp": String(ts), "X-Nivara-Signature": signature },
    body: method === "GET" ? undefined : raw,
  });
  const json = await res.json();
  if (!json.ok) throw Object.assign(new Error(json.error.message), { code: json.error.code, status: res.status });
  return json.data;
}

// Examples
const account = await nivara("GET", "/account");
const { job } = await nivara("POST", "/jobs", { type: "article", title: "راهنمای انتخاب هاست", keyword: "هاست وردپرس" });
const detail = await nivara("GET", `/jobs/${job.id}`);

POST /api/v1/jobs
{
  "type": "article",                     // article | product | landing | rewrite
  "title": "راهنمای انتخاب هاست وردپرس",  // title یا keyword (حداقل یکی)
  "keyword": "هاست وردپرس",
  "audience": "صاحبان فروشگاه‌های آنلاین",
  "notes": "به پشتیبانی فارسی اشاره شود",
  "tone": "professional",                // professional | friendly | expert | sales
  "autoImage": true,                     // فقط اگر تولید تصویر فعال باشد هزینه دارد
  "autoSeo": true,
  "internalLinks": true,
  "autoPublish": false,                  // false: پیش‌نویس به سایت فرستاده می‌شود
  "scheduledAt": null                    // یا "2026-11-01T09:00:00+03:30"
}

HTTP/1.1 402 Payment Required
{ "ok": false, "error": { "code": "insufficient_balance", "message": "موجودی کیف پول کافی نیست." } }