import os
import requests

API = "https://www.dotly.com.py/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['DOTLY_API_KEY']}"}

info = requests.get(API, headers=HEADERS, timeout=30)
info.raise_for_status()
print(info.json()["organization"]["name"], info.json()["key"]["scopes"])

// Node.js 18 o superior (fetch incluido)
const API = "https://www.dotly.com.py/api/v1";
const headers = { Authorization: `Bearer ${process.env.DOTLY_API_KEY}` };

const res = await fetch(API, { headers });
if (!res.ok) throw new Error(`Dotly respondió ${res.status}: ${await res.text()}`);
const info = await res.json();
console.log(info.organization.name, info.key.scopes);

<?php
$api = "https://www.dotly.com.py/api/v1";
$ch = curl_init($api);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ["Authorization: Bearer " . getenv("DOTLY_API_KEY")],
    CURLOPT_TIMEOUT => 30,
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status !== 200) { throw new RuntimeException("Dotly respondió $status: $body"); }
$info = json_decode($body, true);
echo $info["organization"]["name"], PHP_EOL;

curl https://www.dotly.com.py/api/v1 \
  -H "Authorization: Bearer $DOTLY_API_KEY"

import os
import requests
from urllib.parse import quote

API = "https://www.dotly.com.py/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['DOTLY_API_KEY']}"}

producto = {
    "name": "Zapatilla Runner Pro",
    "category": "Calzado",
    "sku": "RUN-PRO",
    "currency": "PYG",
    "price": 450000,
    "promo_price": 399000,
    "tax": "iva_10",
    "attributes": {"Marca": "Mburucuyá", "Material": "Malla"},
    "variants": [
        {"external_id": "RUN-PRO-40", "sku": "RUN-PRO-40", "options": {"Talle": "40"}, "stock": 5},
        {"external_id": "RUN-PRO-41", "sku": "RUN-PRO-41", "options": {"Talle": "41"}, "stock": 0},
    ],
    "source_updated_at": "2026-10-17T15:30:00Z",
}
# PUT crea o reemplaza; el identificador es el de TU sistema (external_id).
res = requests.put(f"{API}/items/{quote('erp-1001', safe='')}", json=producto, headers=HEADERS, timeout=30)
res.raise_for_status()
print(res.json()["result"], res.json()["data"]["version"])  # created / updated / unchanged

const API = "https://www.dotly.com.py/api/v1";
const headers = {
  Authorization: `Bearer ${process.env.DOTLY_API_KEY}`,
  "Content-Type": "application/json",
};

const producto = {
  name: "Zapatilla Runner Pro",
  category: "Calzado",
  sku: "RUN-PRO",
  currency: "PYG",
  price: 450000,
  promo_price: 399000,
  tax: "iva_10",
  attributes: { Marca: "Mburucuyá", Material: "Malla" },
  variants: [
    { external_id: "RUN-PRO-40", sku: "RUN-PRO-40", options: { Talle: "40" }, stock: 5 },
    { external_id: "RUN-PRO-41", sku: "RUN-PRO-41", options: { Talle: "41" }, stock: 0 },
  ],
  source_updated_at: "2026-10-17T15:30:00Z",
};

const res = await fetch(`${API}/items/${encodeURIComponent("erp-1001")}`, {
  method: "PUT",
  headers,
  body: JSON.stringify(producto),
});
if (!res.ok) throw new Error(`Dotly respondió ${res.status}: ${await res.text()}`);
const { result, data } = await res.json();
console.log(result, data.version);

<?php
$api = "https://www.dotly.com.py/api/v1";
$producto = [
    "name" => "Zapatilla Runner Pro",
    "category" => "Calzado",
    "sku" => "RUN-PRO",
    "currency" => "PYG",
    "price" => 450000,
    "promo_price" => 399000,
    "tax" => "iva_10",
    "attributes" => ["Marca" => "Mburucuyá", "Material" => "Malla"],
    "variants" => [
        ["external_id" => "RUN-PRO-40", "sku" => "RUN-PRO-40", "options" => ["Talle" => "40"], "stock" => 5],
        ["external_id" => "RUN-PRO-41", "sku" => "RUN-PRO-41", "options" => ["Talle" => "41"], "stock" => 0],
    ],
    "source_updated_at" => "2026-10-17T15:30:00Z",
];
$ch = curl_init($api . "/items/" . rawurlencode("erp-1001"));
curl_setopt_array($ch, [
    CURLOPT_CUSTOMREQUEST => "PUT",
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => ["Authorization: Bearer " . getenv("DOTLY_API_KEY"), "Content-Type: application/json"],
    CURLOPT_POSTFIELDS => json_encode($producto, JSON_UNESCAPED_UNICODE),
    CURLOPT_TIMEOUT => 30,
]);
$body = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
curl_close($ch);
if ($status >= 300) { throw new RuntimeException("Dotly respondió $status: $body"); }
$respuesta = json_decode($body, true);
echo $respuesta["result"], " v", $respuesta["data"]["version"], PHP_EOL;

curl -X PUT https://www.dotly.com.py/api/v1/items/erp-1001 \
  -H "Authorization: Bearer $DOTLY_API_KEY" \
  -H "Content-Type: application/json" \
  -d '{"name": "Zapatilla Runner Pro", "category": "Calzado", "sku": "RUN-PRO",
       "price": 450000, "promo_price": 399000, "tax": "iva_10",
       "variants": [{"external_id": "RUN-PRO-40", "options": {"Talle": "40"}, "stock": 5}]}' 

import os
import requests

API = "https://www.dotly.com.py/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['DOTLY_API_KEY']}"}

cambios = {"updates": [
    {"item": "erp-1001", "variant": "RUN-PRO-40", "quantity": 3},   # fijar
    {"item": "erp-1001", "variant": "RUN-PRO-41", "delta": 10},     # sumar (o restar con negativo)
]}
res = requests.post(f"{API}/inventory", json=cambios, headers={**HEADERS, "Idempotency-Key": "stock-2026-10-17-1530"}, timeout=30)
res.raise_for_status()
for fila in res.json()["data"]:
    print(fila["external_id"], fila.get("result") or fila["error"]["message"])

const API = "https://www.dotly.com.py/api/v1";
const res = await fetch(`${API}/inventory`, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.DOTLY_API_KEY}`,
    "Content-Type": "application/json",
    "Idempotency-Key": "stock-2026-10-17-1530",
  },
  body: JSON.stringify({ updates: [
    { item: "erp-1001", variant: "RUN-PRO-40", quantity: 3 },
    { item: "erp-1001", variant: "RUN-PRO-41", delta: 10 },
  ] }),
});
if (!res.ok) throw new Error(`Dotly respondió ${res.status}: ${await res.text()}`);
const { data, failed } = await res.json();
console.log(`${data.length - failed} actualizados, ${failed} con error`);

<?php
$api = "https://www.dotly.com.py/api/v1";
$cambios = ["updates" => [
    ["item" => "erp-1001", "variant" => "RUN-PRO-40", "quantity" => 3],
    ["item" => "erp-1001", "variant" => "RUN-PRO-41", "delta" => 10],
]];
$ch = curl_init($api . "/inventory");
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        "Authorization: Bearer " . getenv("DOTLY_API_KEY"),
        "Content-Type: application/json",
        "Idempotency-Key: stock-2026-10-17-1530",
    ],
    CURLOPT_POSTFIELDS => json_encode($cambios),
]);
$respuesta = json_decode(curl_exec($ch), true);
curl_close($ch);
echo ($respuesta["failed"] ?? 0), " con error", PHP_EOL;

curl -X POST https://www.dotly.com.py/api/v1/inventory \
  -H "Authorization: Bearer $DOTLY_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: stock-2026-10-17-1530" \
  -d '{"updates": [{"item": "erp-1001", "variant": "RUN-PRO-40", "quantity": 3}]}' 

import os
import requests

API = "https://www.dotly.com.py/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['DOTLY_API_KEY']}"}

def catalogo_del_erp():
    """Tus productos, con el formato de la API. Acá, un ejemplo fijo."""
    yield {"external_id": "erp-1001", "name": "Zapatilla Runner Pro", "price": 450000, "sku": "RUN-PRO"}
    yield {"external_id": "erp-1002", "name": "Medias deportivas", "price": 35000, "track_stock": True, "stock": 40}

# 1. Abrir la sincronización completa
inicio = requests.post(f"{API}/sync-runs", headers=HEADERS, timeout=30)
inicio.raise_for_status()
run = inicio.json()["data"]

# 2. Enviar todo el catálogo en lotes de hasta 500, marcando la corrida
lote = []
def enviar(lote):
    ops = [{"op": "upsert", "type": "item", "external_id": p.pop("external_id"), "data": p} for p in lote]
    res = requests.post(f"{API}/batch", json={"operations": ops}, timeout=60,
                        headers={**HEADERS, "Dotly-Sync-Run": run["id"]})
    res.raise_for_status()
    for fila in res.json()["data"]:
        if "error" in fila:
            print("Error en", fila["external_id"], fila["error"]["message"])

for producto in catalogo_del_erp():
    lote.append(producto)
    if len(lote) == 500:
        enviar(lote)
        lote = []
if lote:
    enviar(lote)

# 3. Completar: lo que tu sistema ya no tiene se desactiva en Dotly
fin = requests.post(f"{API}/sync-runs/{run['id']}/complete", json={"missing": "deactivate"}, headers=HEADERS, timeout=60)
fin.raise_for_status()
print(fin.json()["data"]["stats"])

const API = "https://www.dotly.com.py/api/v1";

async function dotly(method, path, body, extraHeaders = {}) {
  const res = await fetch(`${API}${path}`, {
    method,
    headers: {
      Authorization: `Bearer ${process.env.DOTLY_API_KEY}`,
      "Content-Type": "application/json",
      ...extraHeaders,
    },
    body: body === undefined ? undefined : JSON.stringify(body),
  });
  if (!res.ok) throw new Error(`Dotly respondió ${res.status}: ${await res.text()}`);
  return res.json();
}

const productos = [
  { external_id: "erp-1001", name: "Zapatilla Runner Pro", price: 450000, sku: "RUN-PRO" },
  { external_id: "erp-1002", name: "Medias deportivas", price: 35000, track_stock: true, stock: 40 },
];

const { data: run } = await dotly("POST", "/sync-runs");

for (let i = 0; i < productos.length; i += 500) {
  const operations = productos.slice(i, i + 500).map(({ external_id, ...data }) =>
    ({ op: "upsert", type: "item", external_id, data }));
  const { data } = await dotly("POST", "/batch", { operations }, { "Dotly-Sync-Run": run.id });
  data.filter((r) => r.error).forEach((r) => console.error(r.external_id, r.error.message));
}

const fin = await dotly("POST", `/sync-runs/${run.id}/complete`, { missing: "deactivate" });
console.log(fin.data.stats);

<?php
$api = "https://www.dotly.com.py/api/v1";
$headers = ["Authorization: Bearer " . getenv("DOTLY_API_KEY"), "Content-Type: application/json"];

function dotly(string $method, string $url, array $headers, ?array $data = null): array {
    $ch = curl_init($url);
    curl_setopt_array($ch, [
        CURLOPT_CUSTOMREQUEST => $method,
        CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => $headers,
        CURLOPT_POSTFIELDS => $data === null ? "" : json_encode($data, JSON_UNESCAPED_UNICODE),
        CURLOPT_TIMEOUT => 60,
    ]);
    $body = curl_exec($ch);
    $status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
    curl_close($ch);
    if ($status >= 300) { throw new RuntimeException("Dotly respondió $status: $body"); }
    return json_decode($body, true);
}

$productos = [
    ["external_id" => "erp-1001", "name" => "Zapatilla Runner Pro", "price" => 450000, "sku" => "RUN-PRO"],
    ["external_id" => "erp-1002", "name" => "Medias deportivas", "price" => 35000, "track_stock" => true, "stock" => 40],
];

$run = dotly("POST", "$api/sync-runs", $headers)["data"];
foreach (array_chunk($productos, 500) as $lote) {
    $ops = array_map(function ($p) {
        $id = $p["external_id"]; unset($p["external_id"]);
        return ["op" => "upsert", "type" => "item", "external_id" => $id, "data" => $p];
    }, $lote);
    $resultado = dotly("POST", "$api/batch", array_merge($headers, ["Dotly-Sync-Run: " . $run["id"]]), ["operations" => $ops]);
    foreach ($resultado["data"] as $fila) {
        if (isset($fila["error"])) { echo "Error en {$fila['external_id']}: {$fila['error']['message']}", PHP_EOL; }
    }
}
$fin = dotly("POST", "$api/sync-runs/{$run['id']}/complete", $headers, ["missing" => "deactivate"]);
echo json_encode($fin["data"]["stats"]), PHP_EOL;

RUN=$(curl -s -X POST https://www.dotly.com.py/api/v1/sync-runs -H "Authorization: Bearer $DOTLY_API_KEY" | jq -r .data.id)

curl -X POST https://www.dotly.com.py/api/v1/batch \
  -H "Authorization: Bearer $DOTLY_API_KEY" -H "Content-Type: application/json" \
  -H "Dotly-Sync-Run: $RUN" \
  -d '{"operations": [{"op": "upsert", "type": "item", "external_id": "erp-1001",
                       "data": {"name": "Zapatilla Runner Pro", "price": 450000}}]}'

curl -X POST https://www.dotly.com.py/api/v1/sync-runs/$RUN/complete \
  -H "Authorization: Bearer $DOTLY_API_KEY" -H "Content-Type: application/json" \
  -d '{"missing": "deactivate"}' 

import os
import time
import requests

API = "https://www.dotly.com.py/api/v1"
HEADERS = {"Authorization": f"Bearer {os.environ['DOTLY_API_KEY']}"}
ultimo = 0  # guardalo en tu base: es el cursor

while True:
    res = requests.get(f"{API}/events", params={"after": ultimo, "types": "catalog.item.*"}, headers=HEADERS, timeout=30)
    res.raise_for_status()
    pagina = res.json()
    for evento in pagina["data"]:
        if evento["origin"]["source"] == "dotly":   # cambios hechos en la web de Dotly
            print(evento["type"], evento["resource"]["external_id"], evento["changes"])
    ultimo = pagina["next_after"]
    if not pagina["has_more"]:
        time.sleep(30)

const API = "https://www.dotly.com.py/api/v1";
const headers = { Authorization: `Bearer ${process.env.DOTLY_API_KEY}` };
let ultimo = 0; // guardalo en tu base: es el cursor

for (;;) {
  const res = await fetch(`${API}/events?after=${ultimo}&types=catalog.item.*`, { headers });
  if (!res.ok) throw new Error(`Dotly respondió ${res.status}: ${await res.text()}`);
  const pagina = await res.json();
  for (const evento of pagina.data) {
    if (evento.origin.source === "dotly") console.log(evento.type, evento.resource.external_id, evento.changes);
  }
  ultimo = pagina.next_after;
  if (!pagina.has_more) await new Promise((r) => setTimeout(r, 30_000));
}

<?php
$api = "https://www.dotly.com.py/api/v1";
$ultimo = 0; // guardalo en tu base: es el cursor
while (true) {
    $ch = curl_init("$api/events?after=$ultimo&types=catalog.item.*");
    curl_setopt_array($ch, [CURLOPT_RETURNTRANSFER => true,
        CURLOPT_HTTPHEADER => ["Authorization: Bearer " . getenv("DOTLY_API_KEY")]]);
    $pagina = json_decode(curl_exec($ch), true);
    curl_close($ch);
    foreach ($pagina["data"] as $evento) {
        if ($evento["origin"]["source"] === "dotly") { echo $evento["type"], " ", $evento["resource"]["external_id"], PHP_EOL; }
    }
    $ultimo = $pagina["next_after"];
    if (!$pagina["has_more"]) { sleep(30); }
}

curl "https://www.dotly.com.py/api/v1/events?after=0&types=catalog.item.*" \
  -H "Authorization: Bearer $DOTLY_API_KEY"

# Flask: recibir webhooks de Dotly y verificar la firma
import hashlib
import hmac
import os
import time

from flask import Flask, abort, request

app = Flask(__name__)
SECRET = os.environ["DOTLY_WEBHOOK_SECRET"]  # whsec_...
procesados = set()  # usá tu base: los eventos pueden llegar más de una vez

def firma_valida(header: str, cuerpo: bytes) -> bool:
    partes = dict(p.split("=", 1) for p in header.split(","))
    t = int(partes["t"])
    if abs(time.time() - t) > 300:
        return False
    esperado = hmac.new(SECRET.encode(), f"{t}.".encode() + cuerpo, hashlib.sha256).hexdigest()
    return hmac.compare_digest(esperado, partes["v1"])

@app.post("/webhooks/dotly")
def recibir():
    if not firma_valida(request.headers.get("Dotly-Signature", ""), request.get_data()):
        abort(400)
    evento = request.get_json()
    if evento["id"] not in procesados:
        procesados.add(evento["id"])
        print(evento["type"], evento["data"].get("external_id"))
    return "", 204

// Express: recibir webhooks de Dotly y verificar la firma
import crypto from "node:crypto";
import express from "express";

const app = express();
const SECRET = process.env.DOTLY_WEBHOOK_SECRET; // whsec_...

function firmaValida(header, cuerpo) {
  const partes = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  const t = Number(partes.t);
  if (Math.abs(Date.now() / 1000 - t) > 300) return false;
  const esperado = crypto.createHmac("sha256", SECRET).update(`${t}.`).update(cuerpo).digest("hex");
  return partes.v1?.length === esperado.length &&
    crypto.timingSafeEqual(Buffer.from(esperado), Buffer.from(partes.v1));
}

app.post("/webhooks/dotly", express.raw({ type: "application/json" }), (req, res) => {
  if (!firmaValida(req.get("Dotly-Signature") || "", req.body)) return res.sendStatus(400);
  const evento = JSON.parse(req.body);
  console.log(evento.type, evento.data.external_id); // procesá idempotente por evento.id
  res.sendStatus(204);
});
app.listen(3000);

<?php
// Recibir webhooks de Dotly y verificar la firma
$secreto = getenv("DOTLY_WEBHOOK_SECRET"); // whsec_...
$cuerpo = file_get_contents("php://input");
$partes = [];
foreach (explode(",", $_SERVER["HTTP_DOTLY_SIGNATURE"] ?? "") as $p) {
    [$k, $v] = array_pad(explode("=", $p, 2), 2, "");
    $partes[$k] = $v;
}
$t = (int)($partes["t"] ?? 0);
$esperado = hash_hmac("sha256", $t . "." . $cuerpo, $secreto);
if (abs(time() - $t) > 300 || !hash_equals($esperado, $partes["v1"] ?? "")) {
    http_response_code(400);
    exit;
}
$evento = json_decode($cuerpo, true);
error_log($evento["type"] . " " . ($evento["data"]["external_id"] ?? "")); // procesá idempotente por $evento["id"]
http_response_code(204);

# Firma: Dotly-Signature: t=<unix>,v1=<hex>
# v1 = HMAC-SHA256(secreto, "<t>.<cuerpo exacto recibido>") en hexadecimal.
# Rechazá firmas con más de 5 minutos y comparalas en tiempo constante.

{
  "object": "event",
  "id": "5b0c8f0e-6a8e-4b41-9d0a-3f5f2f1d7c11",
  "sequence": 1042,
  "type": "catalog.item.updated",
  "created_at": "2026-10-17T18:30:00Z",
  "resource": {"type": "item", "id": "01a1…", "external_id": "erp-1001"},
  "origin": {"connection_id": null, "source": "dotly"},
  "changes": ["price", "stock"],
  "data": { "object": "item", "external_id": "erp-1001", "name": "Zapatilla Runner Pro", "price": 450000, "…": "…" }
}