Add leads handlers, WhatsApp integration, and test files

apps/go-crm/internal/handlers/customers_test.go

@@ -0,0 +1,49 @@
+package handlers
+
+import (
+	"net/http"
+	"net/http/httptest"
+	"testing"
+	"time"
+
+	"golang.org/x/crypto/bcrypt"
+)
+
+func TestCreateCustomerInternalSecret(t *testing.T) {
+	testDB, cleanup := SetupTestDB(t)
+	defer cleanup()
+
+	DB = testDB
+
+	hashedPassword, _ := bcrypt.GenerateFromPassword([]byte("password"), bcrypt.DefaultCost)
+	testDB.Exec(
+		"INSERT INTO accounts (email, name, password, created_at) VALUES (?, ?, ?, ?)",
+		"test@example.com", "Test Account", string(hashedPassword), time.Now().Unix(),
+	)
+
+	var accountID int64
+	testDB.QueryRow("SELECT account_id FROM accounts WHERE email = ?", "test@example.com").Scan(&accountID)
+
+	var clientID int64
+	testDB.QueryRow(
+		"INSERT INTO clients (account_id, name, phone, created_at) VALUES (?, ?, ?, ?) RETURNING client_id",
+		accountID, "Test Client", "+5521987654321", time.Now().Unix(),
+	).Scan(&clientID)
+
+	req := httptest.NewRequest(http.MethodPost, "/customers", nil)
+	req.PostForm = map[string][]string{
+		"name":     {"+5521987654321"},
+		"phone":   {"+5521987654321"},
+		"client_id": {string(rune(clientID))},
+	}
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	req.Header.Set("X-Internal-Secret", "internal-secret")
+
+	w := httptest.NewRecorder()
+
+	CreateCustomer(w, req)
+
+	if w.Code != http.StatusOK && w.Code != http.StatusFound {
+		t.Fatalf("expected success with internal secret, got %d", w.Code)
+	}
+}