API do Polf

# 1) Crie o projeto — o vídeo longo entra, os cortes saem
curl -s -X POST https://api.polf.ai/api/v1/project/create \
  -H "Content-Type: application/json" \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE" \
  -d '{
    "videoUrl": "https://www.youtube.com/watch?v=XXXX",
    "lang": "pt",
    "maxClipNumber": 6,
    "idempotencyKey": "meu-job-001",
    "webhookUrl": "https://seu-app.com/webhooks/polf"
  }'
# → {"code": 2000, "projectId": "3021", "errMsg": ""}

# 2) Acompanhe: por WEBHOOK (recomendado) ou polling a cada 20-30s
curl -s https://api.polf.ai/api/v1/project/query/3021 \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE"
# processando → {"code": 1000, "status": "processing", "stage": "render",
#                "clipsReady": 2, "clipsTotal": 6, ...}
# pronto      → {"code": 2000, "status": "done", "videos": [...], ...}

# 3) Baixe o mp4 pelo link DURÁVEL (não expira; -L segue o redirect 302)
curl -L -o clip.mp4 \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE" \
  "https://api.polf.ai/api/v1/clips/CLIP_ID/download"

curl https://api.polf.ai/api/v1/project/query/3021 \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE"

{
  "code": 2000,
  "projectId": "3021",
  "shareLink": null,
  "errMsg": "",
  "externalUserId": "user_42"
}

{
  "code": 2000,
  "projectId": "3021",
  "projectName": "Integração",
  "status": "done",
  "stage": "render",
  "externalUserId": "user_42",
  "clipsReady": 6,
  "clipsTotal": 6,
  "videosReady": 6,
  "videosTotal": 6,
  "videos": [
    {
      "videoId": "8a1f0c02-7e11-4a9e-9a71-3f2f6f1b2c9d",
      "title": "O erro que derruba 9 em cada 10 canais",
      "videoMsDuration": 42000,
      "viralScore": "8.5",
      "viralReason": "gancho forte nos 3 primeiros segundos",
      "transcript": "…",
      "ready": true,
      "videoUrl": "https://…presigned… (expira ~1h)",
      "streamUrl": "https://…presigned… (expira ~1h)",
      "downloadUrl": "https://api.polf.ai/api/v1/clips/8a1f0c02-…/download",
      "thumbUrl": "https://…presigned…",
      "thumbnailUrl": "https://…presigned…",
      "status": "rendered",
      "hook": "Você está fazendo isso errado",
      "socialCaption": "O corte que muda o jogo #cortes",
      "layoutType": "fill",
      "captionLang": "pt",
      "clipEditorUrl": "/editor?clip=8a1f0c02-…",
      "relatedTopic": "[]",
      "disliked": false,
      "starred": false
    }
  ]
}

{
  "code": 4008,
  "projectId": "3022",
  "projectName": "Integração",
  "videos": [],
  "errMsg": "Não conseguimos baixar este vídeo — ele pode estar privado, removido, restrito por idade/região, ou ser muito longo. Confira o link e as permissões.",
  "status": "failed",
  "stage": "download",
  "externalUserId": "user_42",
  "clipsReady": 0,
  "clipsTotal": 0,
  "error": {
    "errorCode": "SOURCE_UNAVAILABLE",
    "message": "Não conseguimos baixar este vídeo — ele pode estar privado, removido, restrito por idade/região, ou ser muito longo. Confira o link e as permissões.",
    "retriable": false,
    "stage": "download"
  }
}

{
  "code": 2000,
  "clipId": "8a1f0c02-…",
  "renderJobId": "8a1f0c02-…:9x16",
  "status": "exporting"
}

{
  "code": 2000,
  "projects": [
    {
      "projectId": "3021",
      "projectName": "Integração",
      "createdAt": "2026-07-02T14:03:07+00:00",
      "status": "done",
      "stage": "render",
      "externalUserId": "user_42",
      "clipsReady": 6,
      "clipsTotal": 6
    },
    {
      "projectId": "3020",
      "projectName": "Integração",
      "createdAt": "2026-07-02T11:41:22+00:00",
      "status": "failed",
      "stage": "download",
      "externalUserId": "user_17",
      "clipsReady": 0,
      "clipsTotal": 0,
      "error": {
        "errorCode": "SOURCE_UNAVAILABLE",
        "message": "O link enviado é inválido ou não aponta para um vídeo.",
        "retriable": false,
        "stage": "download"
      }
    }
  ],
  "nextCursor": "MjAyNi0wNy0wMlQxMTo0MToyMiswMDowMHwzMDIw",
  "errMsg": ""
}

{
  "code": 1000,
  "credits": {
    "unit": "source_minutes",
    "used": 42.5,
    "limit": 300,
    "remaining": 257.5,
    "period": "month",
    "periodStart": "2026-07-01T00:00:00+00:00"
  },
  "posts": { "month": 12, "limit": 300 },
  "suspended": false
}

curl -s -X POST https://api.polf.ai/api/v1/posts \
  -H "Content-Type: application/json" \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE" \
  -d '{
    "externalUserId": "user_42",
    "clipId": "8a1f0c02-…",
    "targets": [
      { "platform": "tiktok" },
      { "accountId": "sa_123", "caption": "legenda específica desta rede" }
    ],
    "scheduledAt": "2026-07-03T18:00:00-03:00",
    "webhookUrl": "https://seu-app.com/webhooks/polf"
  }'
# → { "code": 2000, "postId": "p_9f31…", "status": "scheduled",
#     "scheduledAt": "2026-07-03T21:00:00+00:00",
#     "targets": [ { "targetId": "p_9f31…:TIKTOK", "platform": "tiktok",
#                    "status": "processing", "platformPostUrl": null } ] }

{
  "event": "clip.rendered",
  "eventId": "b1e6a7a2-4a4e-4c1b-9d2f-8f0f4b6a2e11",
  "createdAt": "2026-07-02T14:07:31+00:00",
  "apiVersion": "2026-07-01",
  "projectId": "3021",
  "externalUserId": "user_42",
  "data": { }
}

{
  "clipId": "8a1f0c02-7e11-4a9e-9a71-3f2f6f1b2c9d",
  "projectId": "3021",
  "title": "O erro que derruba 9 em cada 10 canais",
  "hook": "Você está fazendo isso errado",
  "socialCaption": "O corte que muda o jogo #cortes",
  "viralScore": "8.5",
  "viralReason": "gancho forte nos 3 primeiros segundos",
  "durationMs": 42000,
  "ratio": "9:16",
  "captionLang": "pt",
  "status": "rendered",
  "streamUrl": "https://…presigned… (expira ~1h; null enquanto status=selected)",
  "downloadUrl": "https://api.polf.ai/api/v1/clips/8a1f0c02-…/download",
  "thumbnailUrl": "https://…presigned… (existe DESDE a seleção)",
  "width": null,
  "height": null,
  "sizeBytes": null
}

{
  "event": "project.selected",
  "eventId": "…",
  "createdAt": "2026-07-02T14:05:02+00:00",
  "apiVersion": "2026-07-01",
  "projectId": "3021",
  "externalUserId": "user_42",
  "data": {
    "clips": [ { "clipId": "…", "status": "selected", "streamUrl": null,
                 "thumbnailUrl": "https://…", "viralScore": "8.5", "…": "…" } ],
    "clipsTotal": 6,
    "clipsReady": 0
  }
}

{
  "event": "clip.rendered",
  "eventId": "…",
  "createdAt": "2026-07-02T14:07:31+00:00",
  "apiVersion": "2026-07-01",
  "projectId": "3021",
  "externalUserId": "user_42",
  "data": {
    "clip": { "clipId": "…", "status": "rendered",
              "streamUrl": "https://…presigned…", "downloadUrl": "https://…/download", "…": "…" },
    "clipsReady": 1,
    "clipsTotal": 6
  }
}

{
  "event": "clip.failed",
  "eventId": "…",
  "projectId": "3021",
  "externalUserId": "user_42",
  "apiVersion": "2026-07-01",
  "createdAt": "…",
  "data": {
    "clipId": "8a1f0c02-…",
    "error": {
      "errorCode": "RENDER_FAILED",
      "message": "Falha ao renderizar os cortes. Tente gerar de novo.",
      "retriable": true,
      "stage": "render"
    }
  }
}

{
  "event": "project.completed",
  "eventId": "…",
  "projectId": "3021",
  "externalUserId": "user_42",
  "apiVersion": "2026-07-01",
  "createdAt": "…",
  "data": { "clipsReady": 6, "clipsTotal": 6 }
}

{
  "event": "project.failed",
  "eventId": "…",
  "projectId": "3022",
  "externalUserId": "user_42",
  "apiVersion": "2026-07-01",
  "createdAt": "…",
  "data": {
    "error": {
      "errorCode": "SOURCE_UNAVAILABLE",
      "message": "Não conseguimos baixar este vídeo — ele pode estar privado, removido, restrito por idade/região, ou ser muito longo. Confira o link e as permissões.",
      "retriable": false,
      "stage": "download"
    }
  }
}

{
  "event": "post.published",
  "eventId": "…",
  "projectId": null,
  "externalUserId": "user_42",
  "apiVersion": "2026-07-01",
  "createdAt": "…",
  "data": {
    "postId": "p_9f31…",
    "status": "published",
    "targets": [
      { "targetId": "p_9f31…:TIKTOK", "platform": "tiktok",
        "status": "published", "platformPostUrl": "https://www.tiktok.com/@user/video/…" },
      { "targetId": "p_9f31…:INSTAGRAM", "platform": "instagram",
        "status": "failed", "platformPostUrl": null,
        "error": { "errorCode": "PUBLISH_FAILED",
                   "message": "…detalhe da rede…", "retriable": true } }
    ]
  }
}

{ "code": 2000, "projectId": "3021", "jobId": "uuid", "clips": 6 }

import crypto from "node:crypto";

// IMPORTANTE: a assinatura é do corpo CRU. No Express, use
// express.raw({ type: "application/json" }) NESTA rota (não o json parser).
export function verifyPolfSignature(
  rawBody: string,
  signatureHeader: string, // header "Polf-Signature": t=1751464051,v1=5257a86…
  secret: string,          // whsec_… (entregue UMA vez junto com a sua API key)
  toleranceS = 300
): boolean {
  const parts = Object.fromEntries(
    signatureHeader.split(",").map((kv) => kv.split(/=(.+)/).slice(0, 2))
  );
  if (!parts.t || !parts.v1) return false;
  if (Math.abs(Date.now() / 1000 - Number(parts.t)) > toleranceS) return false; // anti-replay
  const expected = crypto
    .createHmac("sha256", secret)
    .update(`${parts.t}.${rawBody}`)
    .digest("hex");
  const a = Buffer.from(expected);
  const b = Buffer.from(parts.v1);
  return a.length === b.length && crypto.timingSafeEqual(a, b); // tempo-constante
}

// app.post("/webhooks/polf", express.raw({ type: "application/json" }), (req, res) => {
//   if (!verifyPolfSignature(req.body.toString("utf8"),
//       req.header("Polf-Signature") ?? "", process.env.POLF_WEBHOOK_SECRET!)) {
//     return res.status(400).end();
//   }
//   const evt = JSON.parse(req.body.toString("utf8"));
//   // deduplique por evt.eventId (entrega at-least-once) e responda 2xx RÁPIDO
//   res.status(200).end();
// });

import hmac, hashlib, time

def verify_polf_signature(raw_body: bytes, header: str, secret: str, tol: int = 300) -> bool:
    """header = request.headers["Polf-Signature"]  (formato: t=<unix>,v1=<hmac_hex>)
    secret = whsec_… (entregue UMA vez junto com a sua API key)."""
    p = dict(kv.split("=", 1) for kv in header.split(","))
    if abs(time.time() - int(p["t"])) > tol:      # anti-replay (janela de 5 min)
        return False
    expected = hmac.new(secret.encode(),
                        p["t"].encode() + b"." + raw_body,
                        hashlib.sha256).hexdigest()
    return hmac.compare_digest(expected, p["v1"])  # comparação tempo-constante

# FastAPI:
# @app.post("/webhooks/polf")
# async def hook(request: Request):
#     raw = await request.body()                   # corpo CRU (antes de parsear)
#     if not verify_polf_signature(raw, request.headers["Polf-Signature"], SECRET):
#         raise HTTPException(400)
#     evt = json.loads(raw)                        # dedup por evt["eventId"]
#     return {"ok": True}                          # 2xx rápido; processe async

# roda no seu CI sem gastar crédito, GPU ou download
curl -s -X POST https://api.polf.ai/api/v1/project/create \
  -H "Content-Type: application/json" \
  -H "INSTACUT_API_KEY: ik_SUA_CHAVE" \
  -d '{"videoUrl": "polf-test://success", "webhookUrl": "https://seu-app.com/webhooks/polf"}'

# em ~5s: project.selected → clip.rendered ×2 → project.completed
# os clips fake vêm marcados "[SANDBOX] …" e o mp4/downloadUrl funcionam DE VERDADE
# (asset fixo de 3s 9:16) — dá pra testar o download durável de ponta a ponta.
# Todos os payloads de sandbox levam "sandbox": true no data.

HTTP/1.1 429 Too Many Requests
RateLimit-Limit: 120
RateLimit-Remaining: 0
RateLimit-Reset: 23
Retry-After: 23

{"detail": "rate limit excedido, tente em instantes"}

npm install @polf_ai/sdk

import Polf from "@polf_ai/sdk";

const polf = new Polf({ apiKey: process.env.POLF_API_KEY! });

const { projectId } = await polf.projects.create({
  videoUrl: "https://www.youtube.com/watch?v=XXXX",   // ou polf-test://success em CI
  externalUserId: "user_42",
});
const project = await polf.projects.waitUntilDone(projectId);
for (const clip of project.videos) {
  console.log(clip.title, clip.downloadUrl);          // URL DURÁVEL (302 → fresca)
}

const event = Polf.webhooks.constructEvent(rawBody, signatureHeader, secret);
// evento TIPADO: narrow por event.event (project.selected | clip.rendered |
// project.completed | project.failed | clip.failed | post.published | post.failed)
if (event.event === "clip.rendered") console.log(event.data.clip.downloadUrl);
// assinatura inválida/replay → lança WebhookVerificationError (responda 400)