CRM WhatsApp Grupo 3 completo + Marco A/B (Asaas) + admin SaaS + refactors polimórficos

Sessão 11+: fechamento do CRM de WhatsApp com dois providers (Evolution/Twilio), sistema de créditos com Asaas/PIX, polimorfismo de telefones/emails, e integração admin SaaS no /saas/addons existente. ═══════════════════════════════════════════════════════════════════════════ GRUPO 3 — WORKFLOW / CRM (completo) ═══════════════════════════════════════════════════════════════════════════ 3.1 Tags · migration conversation_tags + seed de 5 system tags · composable useConversationTags.js · popover + pills no drawer e nos cards do Kanban. 3.2 Atribuição de conversa a terapeuta · migration 20260421000012 com PK (tenant_id, thread_key), UPSERT, RLS que valida assignee como membro ativo do mesmo tenant · view conversation_threads expandida com assigned_to + assigned_at · composable useConversationAssignment.js · drawer com Select filtrável + botão "Assumir" · inbox com filtro aside (Todas/Minhas/Não atribuídas) e chip do responsável em cada card (destaca "Eu" em azul). 3.3 Notas internas · migration conversation_notes · composable + seção colapsável no drawer · apenas o criador pode editar/apagar (RLS). 3.5 Converter desconhecido em paciente · botão + dialog quick-cadastro · "Vincular existente" com Select filter de até 500 pacientes · cria telefone WhatsApp (vinculado) via upsertWhatsappForExisting. 3.6 Histórico de conversa no prontuário · nova aba "Conversas" em PatientProntuario.vue · PatientConversationsTab.vue com stats (total / recebidas / enviadas / primeira / última), SelectButton de filtro, timeline com bolhas por direção, mídia inline (imagem/áudio/vídeo/doc via signed URL), indicadores ✓ ✓✓ de delivery, botão "Abrir no CRM". ═══════════════════════════════════════════════════════════════════════════ MARCO A — UNIFICAÇÃO WHATSAPP (dois providers mutuamente exclusivos) ═══════════════════════════════════════════════════════════════════════════ - Página chooser ConfiguracoesWhatsappChooserPage.vue com 2 cards (Pessoal/ Oficial), deactivate via edge function deactivate-notification-channel - send-whatsapp-message refatorada com roteamento por provider; Twilio deduz 1 crédito antes do envio e refunda em falha - Paridade Twilio (novo): módulo compartilhado supabase/functions/_shared/ whatsapp-hooks.ts com lógica provider-agnóstica (opt-in, opt-out, auto- reply, schedule helpers em TZ São Paulo, makeTwilioCreditedSendFn que envolve envio em dedução atômica + rollback). Consumido por Evolution E Twilio inbound. Evolution refatorado (~290 linhas duplicadas removidas). - Bucket privado whatsapp-media · decrypt via Evolution getBase64From MediaMessage · upload com path tenant/yyyy/mm · signed URLs on-demand ═══════════════════════════════════════════════════════════════════════════ MARCO B — SISTEMA DE CRÉDITOS WHATSAPP + ASAAS ═══════════════════════════════════════════════════════════════════════════ Banco: - Migration 20260421000007_whatsapp_credits (4 tabelas: balance, transactions, packages, purchases) + RPCs add_whatsapp_credits e deduct_whatsapp_credits (atômicas com SELECT FOR UPDATE) - Migration 20260421000013_tenant_cpf_cnpj (coluna em tenants com CHECK de 11 ou 14 dígitos) Edge functions: - create-whatsapp-credit-charge · Asaas v3 (sandbox + prod) · PIX com QR code · getOrCreateAsaasCustomer patcha customer existente com CPF quando está faltando - asaas-webhook · recebe PAYMENT_RECEIVED/CONFIRMED e credita balance Frontend (tenant): - Página /configuracoes/creditos-whatsapp com saldo + loja + histórico - Dialog de confirmação com CPF/CNPJ (validação via isValidCPF/CNPJ de utils/validators, formatação on-blur, pré-fill de tenants.cpf_cnpj, persiste no primeiro uso) · fallback sandbox 24971563792 REMOVIDO - Composable useWhatsappCredits extrai erros amigáveis via error.context.json() Frontend (SaaS admin): - Em /saas/addons (reuso do pattern existente, não criou página paralela): - Aba 4 "Pacotes WhatsApp" — CRUD whatsapp_credit_packages com DataTable, toggle is_active inline, dialog de edição com validação - Aba 5 "Topup WhatsApp" — tenant Select com saldo ao vivo · RPC add_whatsapp_credits com p_admin_id = auth.uid() (auditoria) · histórico das últimas 20 transações topup/adjustment/refund ═══════════════════════════════════════════════════════════════════════════ GRUPO 2 — AUTOMAÇÃO ═══════════════════════════════════════════════════════════════════════════ 2.3 Auto-reply · conversation_autoreply_settings + conversation_autoreply_ log · 3 modos de schedule (agenda das regras semanais, business_hours custom, custom_window) · cooldown por thread · respeita opt-out · agora funciona em Evolution E Twilio (hooks compartilhados) 2.4 Lembretes de sessão · conversation_session_reminders_settings + _logs · edge send-session-reminders (cron) · janelas 24h e 2h antes · Twilio deduz crédito com rollback em falha ═══════════════════════════════════════════════════════════════════════════ GRUPO 5 — COMPLIANCE (LGPD Art. 18 §2) ═══════════════════════════════════════════════════════════════════════════ 5.2 Opt-out · conversation_optouts + conversation_optout_keywords (10 system seed + custom por tenant) · detecção por regex word-boundary e normalização (lowercase + strip acentos + pontuação) · ack automático (deduz crédito em Twilio) · opt-in via "voltar", "retornar", "reativar", "restart" · página /configuracoes/conversas-optouts com CRUD de keywords ═══════════════════════════════════════════════════════════════════════════ REFACTOR POLIMÓRFICO — TELEFONES + EMAILS ═══════════════════════════════════════════════════════════════════════════ - contact_types + contact_phones (entity_type + entity_id) — migration 20260421000008 · contact_email_types + contact_emails — 20260421000011 - Componentes ContactPhonesEditor.vue e ContactEmailsEditor.vue (add/edit/ remove com confirm, primary selector, WhatsApp linked badge) - Composables useContactPhones.js + useContactEmails.js com unsetOtherPrimaries() e validação - Trocado em PatientsCadastroPage.vue e MedicosPage.vue (removidos campos legados telefone/telefone_alternativo e email_principal/email_alternativo) - Migration retroativa v2 (20260421000010) detecta conversation_messages e cria/atualiza phone como WhatsApp vinculado ═══════════════════════════════════════════════════════════════════════════ POLIMENTO VISUAL + INFRA ═══════════════════════════════════════════════════════════════════════════ - Skeletons simplificados no dashboard do terapeuta - Animações fade-up com stagger via [--delay:Xms] (fix specificity sobre .dash-card box-shadow transition) - ConfirmDialog com group="conversation-drawer" (evita montagem duplicada) - Image preview PrimeVue com botão de download injetado via MutationObserver (fetch + blob para funcionar cross-origin) - Áudio/vídeo com preload="metadata" e controles de velocidade do browser - friendlySendError() mapeia códigos do edge pra mensagens pt-BR via error.context.json() - Teleport #cfg-page-actions para ações globais de Configurações - Brotli/Gzip + auto-import Vue/PrimeVue + bundle analyzer - AppLayout consolidado (removidas duplicatas por área) + RouterPassthrough - Removido console.trace debug que estava em watch de router e queries Supabase (degradava perf pra todos) - Realtime em conversation_messages via publication supabase_realtime - Notifier global flutuante com beep + toggle mute (4 camadas: badge + sino + popup + browser notification) ═══════════════════════════════════════════════════════════════════════════ MIGRATIONS NOVAS (13) ═══════════════════════════════════════════════════════════════════════════ 20260420000001_patient_intake_invite_info_rpc 20260420000002_audit_logs_lgpd 20260420000003_audit_logs_unified_view 20260420000004_lgpd_export_patient_rpc 20260420000005_conversation_messages 20260420000005_search_global_rpc 20260420000006_conv_messages_notifications 20260420000007_notif_channels_saas_admin_insert 20260420000008_conv_messages_realtime 20260420000009_conv_messages_delivery_status 20260421000001_whatsapp_media_bucket 20260421000002_conversation_notes 20260421000003_conversation_tags 20260421000004_conversation_autoreply 20260421000005_conversation_optouts 20260421000006_session_reminders 20260421000007_whatsapp_credits 20260421000008_contact_phones 20260421000009_retroactive_whatsapp_link 20260421000010_retroactive_whatsapp_link_v2 20260421000011_contact_emails 20260421000012_conversation_assignments 20260421000013_tenant_cpf_cnpj ═══════════════════════════════════════════════════════════════════════════ EDGE FUNCTIONS NOVAS / MODIFICADAS ═══════════════════════════════════════════════════════════════════════════ Novas: - _shared/whatsapp-hooks.ts (módulo compartilhado) - asaas-webhook - create-whatsapp-credit-charge - deactivate-notification-channel - evolution-webhook-provision - evolution-whatsapp-inbound - get-intake-invite-info - notification-webhook - send-session-reminders - send-whatsapp-message - submit-patient-intake - twilio-whatsapp-inbound ═══════════════════════════════════════════════════════════════════════════ FRONTEND — RESUMO ═══════════════════════════════════════════════════════════════════════════ Composables novos: useAddonExtrato, useAuditoria, useAutoReplySettings, useClinicKPIs, useContactEmails, useContactPhones, useConversationAssignment, useConversationNotes, useConversationOptouts, useConversationTags, useConversations, useLgpdExport, useSessionReminders, useWhatsappCredits Stores: conversationDrawerStore Componentes novos: ConversationDrawer, GlobalInboundNotifier, GlobalSearch, ContactEmailsEditor, ContactPhonesEditor Páginas novas: CRMConversasPage, PatientConversationsTab, AddonsExtratoPage, AuditoriaPage, NotificationsHistoryPage, ConfiguracoesWhatsappChooserPage, ConfiguracoesConversasAutoreplyPage, ConfiguracoesConversasOptoutsPage, ConfiguracoesConversasTagsPage, ConfiguracoesCreditosWhatsappPage, ConfiguracoesLembretesSessaoPage Utils novos: addonExtratoExport, auditoriaExport, excelExport, lgpdExportFormats Páginas existentes alteradas: ClinicDashboard, PatientsCadastroPage, PatientCadastroDialog, PatientsListPage, MedicosPage, PatientProntuario, ConfiguracoesWhatsappPage, SaasWhatsappPage, ConfiguracoesRecursosExtrasPage, ConfiguracoesPage, AgendaTerapeutaPage, AgendaClinicaPage, NotificationItem, NotificationDrawer, AppLayout, AppTopbar, useMenuBadges, patientsRepository, SaasAddonsPage (aba 4 + 5 WhatsApp) Routes: routes.clinic, routes.configs, routes.therapist atualizados Menus: clinic.menu, therapist.menu, saas.menu atualizados ═══════════════════════════════════════════════════════════════════════════ NOTAS - Após subir, rodar supabase functions serve --no-verify-jwt --env-file supabase/functions/.env pra carregar o módulo _shared - WHATSAPP_SETUP.md reescrito (~400 linhas) com setup completo dos 3 providers + troubleshooting + LGPD - HANDOFF.md atualizado com estado atual e próximos passos Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-04-23 07:05:24 -03:00
parent 037ba3721f
commit 2644e60bb6
191 changed files with 38629 additions and 3756 deletions
@@ -0,0 +1,475 @@
+/*
+|--------------------------------------------------------------------------
+| Agência PSI — Edge Function: send-session-reminders
+|--------------------------------------------------------------------------
+| Dispara lembretes WhatsApp pra sessões futuras. Chamado por pg_cron a cada
+| 15 minutos.
+|
+| Busca eventos com inicio_em dentro das janelas:
+|   - 24h ± 15min  (envio do lembrete de 24h)
+|   - 2h  ± 15min  (envio do lembrete de 2h)
+|
+| Checa per-evento:
+|   - settings.enabled do tenant
+|   - quiet_hours (agora está dentro da janela silenciosa?)
+|   - opt-out do paciente
+|   - canal ativo (Evolution/Twilio)
+|   - log unique: nao duplica
+|
+| Suporta apenas Evolution no momento (Twilio virá com Marco B - créditos).
+|--------------------------------------------------------------------------
+*/
+
+import { createClient, SupabaseClient } from 'https://esm.sh/@supabase/supabase-js@2'
+
+const corsHeaders = {
+    'Access-Control-Allow-Origin':  '*',
+    'Access-Control-Allow-Headers': 'authorization, x-client-info, apikey, content-type',
+    'Access-Control-Allow-Methods': 'POST, GET, OPTIONS',
+}
+
+function json(body: unknown, status = 200) {
+    return new Response(JSON.stringify(body), {
+        status,
+        headers: { ...corsHeaders, 'Content-Type': 'application/json' }
+    })
+}
+
+function rewriteForContainer(apiUrl: string): string {
+    try {
+        const u = new URL(apiUrl)
+        if (u.hostname === 'localhost' || u.hostname === '127.0.0.1') {
+            u.hostname = 'host.docker.internal'
+            return u.toString().replace(/\/+$/, '')
+        }
+        return apiUrl.replace(/\/+$/, '')
+    } catch {
+        return apiUrl
+    }
+}
+
+function normalizePhoneBR(raw: string | null | undefined): string {
+    const digits = String(raw || '').replace(/\D/g, '')
+    if (digits.length === 10 || digits.length === 11) return '55' + digits
+    return digits
+}
+
+// Verifica se o momento atual (em São Paulo) está dentro da janela quiet_hours
+function isQuietHoursNow(startHHMM: string, endHHMM: string): boolean {
+    const now = new Date()
+    const fmt = new Intl.DateTimeFormat('en-US', {
+        timeZone: 'America/Sao_Paulo',
+        hour: '2-digit', minute: '2-digit', hour12: false
+    })
+    const parts = fmt.formatToParts(now)
+    const h = parseInt(parts.find((p) => p.type === 'hour')?.value || '0', 10)
+    const m = parseInt(parts.find((p) => p.type === 'minute')?.value || '0', 10)
+    const mins = h * 60 + m
+    const [sh, sm] = startHHMM.split(':').map(Number)
+    const [eh, em] = endHHMM.split(':').map(Number)
+    const startMin = (sh || 0) * 60 + (sm || 0)
+    const endMin = (eh || 0) * 60 + (em || 0)
+    if (startMin === endMin) return false
+    if (startMin < endMin) {
+        // janela normal (ex: 08:00-12:00)
+        return mins >= startMin && mins < endMin
+    }
+    // janela atravessando meia-noite (ex: 22:00-08:00)
+    return mins >= startMin || mins < endMin
+}
+
+// Formata data/hora do evento pra texto pt-BR
+function fmtDateDayMonth(iso: string): string {
+    try {
+        const d = new Date(iso)
+        return new Intl.DateTimeFormat('pt-BR', {
+            timeZone: 'America/Sao_Paulo',
+            day: '2-digit', month: 'long'
+        }).format(d)
+    } catch { return iso }
+}
+
+function fmtTime(iso: string): string {
+    try {
+        const d = new Date(iso)
+        return new Intl.DateTimeFormat('pt-BR', {
+            timeZone: 'America/Sao_Paulo',
+            hour: '2-digit', minute: '2-digit', hour12: false
+        }).format(d)
+    } catch { return '' }
+}
+
+// Substitui variáveis no template
+function renderTemplate(
+    tpl: string,
+    vars: { nome_paciente: string; data_sessao: string; hora_sessao: string; modalidade: string; nome_clinica: string }
+): string {
+    return tpl
+        .replaceAll('{{nome_paciente}}', vars.nome_paciente)
+        .replaceAll('{{data_sessao}}', vars.data_sessao)
+        .replaceAll('{{hora_sessao}}', vars.hora_sessao)
+        .replaceAll('{{modalidade}}', vars.modalidade)
+        .replaceAll('{{nome_clinica}}', vars.nome_clinica)
+}
+
+// Envia via Evolution. Retorna messageId ou null se falhar.
+async function sendViaEvolution(
+    apiUrl: string, apiKey: string, instance: string, phone: string, text: string
+): Promise<{ ok: boolean; messageId?: string; error?: string }> {
+    try {
+        const endpoint = `${rewriteForContainer(apiUrl)}/message/sendText/${encodeURIComponent(instance)}`
+        const resp = await fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Content-Type': 'application/json', apikey: apiKey },
+            body: JSON.stringify({ number: phone, text })
+        })
+        if (!resp.ok) {
+            const t = await resp.text()
+            return { ok: false, error: `HTTP ${resp.status}: ${t.slice(0, 200)}` }
+        }
+        const j = await resp.json().catch(() => null) as Record<string, unknown> | null
+        const msgId = (j?.key as { id?: string })?.id ?? null
+        return { ok: true, messageId: msgId ?? undefined }
+    } catch (err) {
+        return { ok: false, error: String(err) }
+    }
+}
+
+// Envia via Twilio. Retorna messageId + status ou erro.
+async function sendViaTwilio(
+    subSid: string, authToken: string, fromNumber: string, toPhone: string, text: string
+): Promise<{ ok: boolean; messageId?: string; status?: string; error?: string }> {
+    if (!subSid || !authToken || !fromNumber) {
+        return { ok: false, error: 'Twilio credenciais incompletas' }
+    }
+    const toE164 = toPhone.startsWith('+') ? toPhone : `+${toPhone}`
+    const endpoint = `https://api.twilio.com/2010-04-01/Accounts/${subSid}/Messages.json`
+    const basicAuth = btoa(`${subSid}:${authToken}`)
+    const params = new URLSearchParams()
+    params.append('From', `whatsapp:${fromNumber}`)
+    params.append('To', `whatsapp:${toE164}`)
+    params.append('Body', text)
+    try {
+        const resp = await fetch(endpoint, {
+            method: 'POST',
+            headers: { 'Authorization': `Basic ${basicAuth}`, 'Content-Type': 'application/x-www-form-urlencoded' },
+            body: params.toString()
+        })
+        const data = await resp.json().catch(() => null) as Record<string, unknown> | null
+        if (!resp.ok) {
+            return { ok: false, error: `Twilio ${resp.status}: ${(data?.message as string) || JSON.stringify(data).slice(0, 200)}` }
+        }
+        return { ok: true, messageId: String(data?.sid || ''), status: String(data?.status || 'queued') }
+    } catch (e) {
+        return { ok: false, error: String(e) }
+    }
+}
+
+// Verifica se paciente está opted-out
+async function isOptedOut(supa: SupabaseClient, tenantId: string, phone: string): Promise<boolean> {
+    const { data } = await supa
+        .from('conversation_optouts')
+        .select('id')
+        .eq('tenant_id', tenantId)
+        .eq('phone', phone)
+        .is('opted_back_in_at', null)
+        .limit(1)
+        .maybeSingle()
+    return !!data
+}
+
+type ProcessStats = {
+    considered: number
+    sent: number
+    skipped: Record<string, number>
+    errors: number
+}
+
+// Processa eventos em uma janela especifica
+async function processWindow(
+    supa: SupabaseClient,
+    type: '24h' | '2h',
+    minutesAhead: number,
+    stats: ProcessStats
+): Promise<void> {
+    const windowMin = 15 // ±15min
+    const start = new Date(Date.now() + (minutesAhead - windowMin) * 60 * 1000).toISOString()
+    const end = new Date(Date.now() + (minutesAhead + windowMin) * 60 * 1000).toISOString()
+
+    // Busca eventos na janela com patient + tenant (nome da clinica via company_profiles/tenants)
+    const { data: events, error } = await supa
+        .from('agenda_eventos')
+        .select(`
+            id, tenant_id, inicio_em, modalidade, patient_id, status,
+            patients:patient_id (id, nome_completo, telefone)
+        `)
+        .eq('status', 'agendado')
+        .gte('inicio_em', start)
+        .lte('inicio_em', end)
+
+    if (error) {
+        console.error('[reminders] events query error:', error.message)
+        return
+    }
+
+    stats.considered += (events || []).length
+
+    for (const ev of events || []) {
+        try {
+            const eventId = ev.id as string
+            const tenantId = ev.tenant_id as string
+            const pat = Array.isArray(ev.patients) ? ev.patients[0] : ev.patients
+            if (!pat || !pat.telefone) {
+                // Sem telefone — loga e pula
+                await logSkip(supa, eventId, tenantId, type, 'no_phone')
+                stats.skipped.no_phone = (stats.skipped.no_phone || 0) + 1
+                continue
+            }
+            const phone = normalizePhoneBR(pat.telefone)
+            if (!/^\d{10,15}$/.test(phone)) {
+                await logSkip(supa, eventId, tenantId, type, 'invalid_phone')
+                stats.skipped.invalid_phone = (stats.skipped.invalid_phone || 0) + 1
+                continue
+            }
+
+            // Ja enviado? (UNIQUE constraint previne dup mas checamos pra economizar)
+            const { data: existing } = await supa
+                .from('session_reminder_logs')
+                .select('id')
+                .eq('event_id', eventId)
+                .eq('reminder_type', type)
+                .maybeSingle()
+            if (existing) {
+                stats.skipped.already_sent = (stats.skipped.already_sent || 0) + 1
+                continue
+            }
+
+            // Settings do tenant
+            const { data: settings } = await supa
+                .from('session_reminder_settings')
+                .select('*')
+                .eq('tenant_id', tenantId)
+                .maybeSingle()
+
+            if (!settings || !settings.enabled) {
+                stats.skipped.disabled = (stats.skipped.disabled || 0) + 1
+                continue
+            }
+            if (type === '24h' && !settings.send_24h) {
+                stats.skipped.type_disabled = (stats.skipped.type_disabled || 0) + 1
+                continue
+            }
+            if (type === '2h' && !settings.send_2h) {
+                stats.skipped.type_disabled = (stats.skipped.type_disabled || 0) + 1
+                continue
+            }
+
+            // Quiet hours
+            if (settings.quiet_hours_enabled) {
+                const startHHMM = String(settings.quiet_hours_start || '22:00').slice(0, 5)
+                const endHHMM = String(settings.quiet_hours_end || '08:00').slice(0, 5)
+                if (isQuietHoursNow(startHHMM, endHHMM)) {
+                    await logSkip(supa, eventId, tenantId, type, 'quiet_hours')
+                    stats.skipped.quiet_hours = (stats.skipped.quiet_hours || 0) + 1
+                    continue
+                }
+            }
+
+            // Opt-out
+            if (settings.respect_opt_out && await isOptedOut(supa, tenantId, phone)) {
+                await logSkip(supa, eventId, tenantId, type, 'opted_out')
+                stats.skipped.opted_out = (stats.skipped.opted_out || 0) + 1
+                continue
+            }
+
+            // Canal ativo
+            const { data: channel } = await supa
+                .from('notification_channels')
+                .select('provider, credentials, twilio_phone_number, is_active')
+                .eq('tenant_id', tenantId)
+                .eq('channel', 'whatsapp')
+                .is('deleted_at', null)
+                .maybeSingle()
+            if (!channel || !channel.is_active) {
+                await logSkip(supa, eventId, tenantId, type, 'no_channel')
+                stats.skipped.no_channel = (stats.skipped.no_channel || 0) + 1
+                continue
+            }
+
+            // Nome da clinica (tenants.name)
+            const { data: tenant } = await supa
+                .from('tenants')
+                .select('name')
+                .eq('id', tenantId)
+                .maybeSingle()
+
+            // Monta mensagem
+            const tpl = type === '24h' ? settings.template_24h : settings.template_2h
+            const text = renderTemplate(tpl, {
+                nome_paciente: pat.nome_completo || 'Paciente',
+                data_sessao: fmtDateDayMonth(ev.inicio_em),
+                hora_sessao: fmtTime(ev.inicio_em),
+                modalidade: ev.modalidade === 'online' ? 'online' : 'presencial',
+                nome_clinica: tenant?.name || ''
+            })
+
+            // Envia (Evolution only por enquanto)
+            if (channel.provider === 'evolution') {
+                const creds = (channel.credentials ?? {}) as Record<string, string>
+                if (!creds.api_url || !creds.api_key || !creds.instance_name) {
+                    await logSkip(supa, eventId, tenantId, type, 'creds_missing')
+                    stats.skipped.creds_missing = (stats.skipped.creds_missing || 0) + 1
+                    continue
+                }
+                const sendRes = await sendViaEvolution(creds.api_url, creds.api_key, creds.instance_name, phone, text)
+                if (!sendRes.ok) {
+                    console.error('[reminders] send failed for event', eventId, sendRes.error)
+                    await supa.from('session_reminder_logs').insert({
+                        event_id: eventId, tenant_id: tenantId, reminder_type: type,
+                        provider: 'evolution', skip_reason: `send_failed: ${sendRes.error}`, to_phone: phone
+                    })
+                    stats.errors++
+                    continue
+                }
+                // Registra outbound message + log
+                const { data: msg } = await supa.from('conversation_messages').insert({
+                    tenant_id: tenantId,
+                    patient_id: pat.id,
+                    channel: 'whatsapp',
+                    direction: 'outbound',
+                    from_number: null,
+                    to_number: phone,
+                    body: text,
+                    provider: 'evolution',
+                    provider_message_id: sendRes.messageId ?? null,
+                    provider_raw: { reminder_type: type, event_id: eventId },
+                    kanban_status: 'awaiting_patient',
+                    responded_at: new Date().toISOString()
+                }).select('id').single()
+
+                await supa.from('session_reminder_logs').insert({
+                    event_id: eventId, tenant_id: tenantId, reminder_type: type,
+                    provider: 'evolution', to_phone: phone,
+                    provider_message_id: sendRes.messageId ?? null,
+                    conversation_message_id: msg?.id ?? null
+                })
+                stats.sent++
+            } else if (channel.provider === 'twilio') {
+                // Busca creds twilio (colunas dedicadas + credentials JSONB com auth_token)
+                const { data: fullChannel } = await supa
+                    .from('notification_channels')
+                    .select('twilio_subaccount_sid, twilio_phone_number, credentials')
+                    .eq('tenant_id', tenantId)
+                    .eq('channel', 'whatsapp')
+                    .is('deleted_at', null)
+                    .maybeSingle()
+                const twCreds = (fullChannel?.credentials ?? {}) as Record<string, string>
+                const subSid = fullChannel?.twilio_subaccount_sid as string
+                const subToken = twCreds.subaccount_auth_token
+                const twFrom = fullChannel?.twilio_phone_number as string
+
+                if (!subSid || !subToken || !twFrom) {
+                    await logSkip(supa, eventId, tenantId, type, 'twilio_creds_missing')
+                    stats.skipped.twilio_creds_missing = (stats.skipped.twilio_creds_missing || 0) + 1
+                    continue
+                }
+
+                // Deduz 1 crédito ANTES (atômico via RPC)
+                const { error: dedErr } = await supa.rpc('deduct_whatsapp_credits', {
+                    p_tenant_id: tenantId,
+                    p_amount: 1,
+                    p_conversation_message_id: null,
+                    p_note: `Lembrete sessão ${type}`
+                })
+                if (dedErr) {
+                    const reason = String(dedErr.message || '').includes('insufficient_credits') ? 'insufficient_credits' : 'deduct_error'
+                    await logSkip(supa, eventId, tenantId, type, reason)
+                    stats.skipped[reason] = (stats.skipped[reason] || 0) + 1
+                    continue
+                }
+
+                const sendRes = await sendViaTwilio(subSid, subToken, twFrom, phone, text)
+                if (!sendRes.ok) {
+                    // Refund
+                    await supa.rpc('add_whatsapp_credits', {
+                        p_tenant_id: tenantId,
+                        p_amount: 1,
+                        p_kind: 'refund',
+                        p_purchase_id: null,
+                        p_admin_id: null,
+                        p_note: `Refund lembrete falhou: ${sendRes.error?.slice(0, 200)}`
+                    })
+                    console.error('[reminders] twilio send failed:', sendRes.error)
+                    await supa.from('session_reminder_logs').insert({
+                        event_id: eventId, tenant_id: tenantId, reminder_type: type,
+                        provider: 'twilio', skip_reason: `send_failed: ${sendRes.error}`, to_phone: phone
+                    })
+                    stats.errors++
+                    continue
+                }
+
+                const { data: msg } = await supa.from('conversation_messages').insert({
+                    tenant_id: tenantId,
+                    patient_id: pat.id,
+                    channel: 'whatsapp',
+                    direction: 'outbound',
+                    from_number: null,
+                    to_number: phone,
+                    body: text,
+                    provider: 'twilio',
+                    provider_message_id: sendRes.messageId ?? null,
+                    provider_raw: { reminder_type: type, event_id: eventId, status: sendRes.status },
+                    kanban_status: 'awaiting_patient',
+                    responded_at: new Date().toISOString(),
+                    delivery_status: sendRes.status === 'delivered' ? 'delivered' : 'sent'
+                }).select('id').single()
+
+                await supa.from('session_reminder_logs').insert({
+                    event_id: eventId, tenant_id: tenantId, reminder_type: type,
+                    provider: 'twilio', to_phone: phone,
+                    provider_message_id: sendRes.messageId ?? null,
+                    conversation_message_id: msg?.id ?? null
+                })
+                stats.sent++
+            } else {
+                await logSkip(supa, eventId, tenantId, type, 'unknown_provider')
+                stats.skipped.unknown_provider = (stats.skipped.unknown_provider || 0) + 1
+            }
+        } catch (err) {
+            console.error('[reminders] event process error:', err)
+            stats.errors++
+        }
+    }
+}
+
+async function logSkip(
+    supa: SupabaseClient, eventId: string, tenantId: string, type: '24h' | '2h', reason: string
+) {
+    await supa.from('session_reminder_logs').insert({
+        event_id: eventId, tenant_id: tenantId, reminder_type: type,
+        provider: 'skipped', skip_reason: reason
+    })
+}
+
+Deno.serve(async (req: Request) => {
+    if (req.method === 'OPTIONS') return new Response('ok', { headers: corsHeaders })
+
+    try {
+        const supabase = createClient(
+            Deno.env.get('SUPABASE_URL')!,
+            Deno.env.get('SUPABASE_SERVICE_ROLE_KEY')!
+        )
+
+        const stats: ProcessStats = { considered: 0, sent: 0, skipped: {}, errors: 0 }
+
+        // 24h antes
+        await processWindow(supabase, '24h', 24 * 60, stats)
+        // 2h antes
+        await processWindow(supabase, '2h', 2 * 60, stats)
+
+        return json({ ok: true, stats })
+    } catch (err) {
+        console.error('[reminders] fatal:', err)
+        return json({ ok: false, error: String(err) }, 500)
+    }
+})