# Defina as credenciais (veja /pt/api/authentication para o helper de assinatura)
export SALESOS_API_KEY="sk_live_YOUR_API_KEY"
export SALESOS_API_SECRET="YOUR_API_KEY_SECRET"
export SALESOS_URL="https://api.play2sell.com/functions/v1/payments"

# 1. Issue an invoice (BR PIX charge with auto NFS-e)
curl -s -X POST "$SALESOS_URL/invoices" \
  -H "Authorization: P2S-SIGN-V1 API_KEY:TIMESTAMP:SIGNATURE" \
  -H "Idempotency-Key: $(uuidgen)" \
  -H "Content-Type: application/json" \
  -d '{
    "customer": { "country": "BR", "tax_id": "12345678000190", "name": "Acme Corp", "email": "billing@acme.com" },
    "amount": 12345, "currency": "BRL",
    "description": "Consulting — April/2026",
    "payment_method": { "type": "pix", "expires_in_seconds": 3600 },
    "tax_document": { "auto_issue": true, "type": "nfse", "service_code": "01.05" },
    "cost_center": "CC-OPERATIONS", "contractor_reference": "PO-9981"
  }' | jq .

import { randomUUID } from 'node:crypto';

const API_URL = 'https://api.play2sell.com/functions/v1/payments';
const API_KEY = process.env.SALESOS_API_KEY;

async function call(path, { method = 'GET', body } = {}) {
  const headers = {
    // P2S-SIGN-V1 — veja signedRequest() em /pt/api/authentication
    'Authorization': await signedHeader(method, path, body),
    'Content-Type': 'application/json',
  };
  if (method === 'POST') headers['Idempotency-Key'] = randomUUID();

  const res = await fetch(`${API_URL}${path}`, {
    method,
    headers,
    body: body ? JSON.stringify(body) : undefined,
  });

  if (!res.ok) {
    const problem = await res.json();
    throw new Error(`${problem.code}: ${problem.detail || problem.title}`);
  }
  return res.json();
}

const invoice = await call('/invoices', {
  method: 'POST',
  body: {
    customer: { country: 'BR', tax_id: '12345678000190', name: 'Acme Corp', email: 'billing@acme.com' },
    amount: 12345,
    currency: 'BRL',
    description: 'Consulting — April/2026',
    payment_method: { type: 'pix', expires_in_seconds: 3600 },
    tax_document: { auto_issue: true, type: 'nfse', service_code: '01.05' },
    cost_center: 'CC-OPERATIONS',
    contractor_reference: 'PO-9981',
  },
});
console.log(`Invoice issued: ${invoice.id} (our_number: ${invoice.our_number}, pix qr: ${invoice.payment_method.pix.qr_code})`);

import os
import uuid
import requests

API_URL = 'https://api.play2sell.com/functions/v1/payments'
API_KEY = os.environ['SALESOS_API_KEY']

def call(path: str, method: str = 'GET', body: dict | None = None) -> dict:
    headers = {
        'Authorization': f'Bearer {API_KEY}',
        'Content-Type': 'application/json',
    }
    if method == 'POST':
        headers['Idempotency-Key'] = str(uuid.uuid4())

    r = requests.request(method, f'{API_URL}{path}', json=body, headers=headers, timeout=30)
    if not r.ok:
        problem = r.json()
        raise Exception(f"{problem.get('code')}: {problem.get('detail') or problem.get('title')}")
    return r.json()


invoice = call('/invoices', 'POST', {
    'customer': {'country': 'BR', 'tax_id': '12345678000190', 'name': 'Acme Corp', 'email': 'billing@acme.com'},
    'amount': 12345,
    'currency': 'BRL',
    'description': 'Consulting — April/2026',
    'payment_method': {'type': 'pix', 'expires_in_seconds': 3600},
    'tax_document': {'auto_issue': True, 'type': 'nfse', 'service_code': '01.05'},
    'cost_center': 'CC-OPERATIONS',
    'contractor_reference': 'PO-9981',
})
print(f"Invoice issued: {invoice['id']} (our_number: {invoice['our_number']})")
print(f"PIX QR code: {invoice['payment_method']['pix']['qr_code']}")

<?php

$apiUrl       = 'https://api.play2sell.com/functions/v1/payments';
$apiKey       = getenv('SALESOS_API_KEY');
$apiKeySecret = getenv('SALESOS_API_SECRET');

// Constrói o header Authorization P2S-SIGN-V1. Atenção: o hash_hmac()
// do PHP recebe (dados, chave) — o oposto de Node/Python.
function p2sSignedHeader(string $method, string $fullPath, string $body): string {
    global $apiKey, $apiKeySecret;
    $ts          = (string) time();
    $payloadHash = hash('sha256', $body);
    $k1  = hash_hmac('sha256', $apiKey,      $apiKeySecret, true);
    $k2  = hash_hmac('sha256', $ts,          $k1,           true);
    $k3  = hash_hmac('sha256', $method,      $k2,           true);
    $k4  = hash_hmac('sha256', $fullPath,    $k3,           true);
    $sig = hash_hmac('sha256', $payloadHash, $k4);  // hex
    return "P2S-SIGN-V1 {$apiKey}:{$ts}:{$sig}";
}

function call(string $path, string $method = 'GET', ?array $body = null): array {
    global $apiUrl;
    $bodyStr  = $body ? json_encode($body) : '';
    $fullPath = parse_url($apiUrl, PHP_URL_PATH) . $path;

    $headers = [
        'Authorization: ' . p2sSignedHeader($method, $fullPath, $bodyStr),
        'Content-Type: application/json',
    ];
    if ($method === 'POST') {
        $headers[] = 'Idempotency-Key: ' . bin2hex(random_bytes(16));
    }

    $ch = curl_init($apiUrl . $path);
    curl_setopt_array($ch, [
        CURLOPT_CUSTOMREQUEST => $method,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => $headers,
        CURLOPT_POSTFIELDS => $bodyStr ?: null,
        CURLOPT_TIMEOUT => 30,
    ]);

    $res = curl_exec($ch);
    $code = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    $json = json_decode($res, true);

    if ($code >= 400) {
        throw new Exception(($json['code'] ?? 'error') . ': ' . ($json['detail'] ?? $json['title'] ?? 'unknown'));
    }
    return $json;
}

$invoice = call('/invoices', 'POST', [
    'customer' => ['country' => 'BR', 'tax_id' => '12345678000190', 'name' => 'Acme Corp', 'email' => 'billing@acme.com'],
    'amount' => 12345,
    'currency' => 'BRL',
    'description' => 'Consulting — April/2026',
    'payment_method' => ['type' => 'pix', 'expires_in_seconds' => 3600],
    'tax_document' => ['auto_issue' => true, 'type' => 'nfse', 'service_code' => '01.05'],
    'cost_center' => 'CC-OPERATIONS',
    'contractor_reference' => 'PO-9981',
]);
echo "Invoice issued: {$invoice['id']} (our_number: {$invoice['our_number']})\n";
echo "PIX QR: {$invoice['payment_method']['pix']['qr_code']}\n";