DigiSurvey Connect API

curl https://vtlxdqgdrapeyhncbkrj.supabase.co/functions/v1/api/me \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY"

const BASE = 'https://vtlxdqgdrapeyhncbkrj.supabase.co/functions/v1/api';
const res = await fetch(`${BASE}/me`, {
  headers: { Authorization: `Bearer ${process.env.DIGISURVEY_API_KEY}` },
});
console.log(await res.json());
// { object: 'api_key', organisation: { id, name, type }, scopes: [...], rate_limit_per_minute: 120 }

import os, requests
BASE = "https://vtlxdqgdrapeyhncbkrj.supabase.co/functions/v1/api"
s = requests.Session()
s.headers["Authorization"] = f"Bearer {os.environ['DIGISURVEY_API_KEY']}"
print(s.get(f"{BASE}/me", timeout=30).json())

{
  "error": {
    "code": "invalid_request",
    "message": "survey_type must be spot, final or reinspection",
    "details": { … }        // sometimes, e.g. per-row errors
  }
}

{ "object": "list", "data": [ … ], "has_more": true, "next_offset": 50 }

curl -X POST $BASE/claims \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: CLAIMSYS-88213" \
  -d '{
    "claim_number": "MC-2026-0412",
    "policy_number": "3001/12345678/00/000",
    "vehicle_number": "RJ14 CD 5678",
    "insured_name": "Ramesh Kumar",
    "insured_phone": "+91 98290 00000",
    "garage_name": "Shree Motors",
    "garage_address": "Sikar Road, Jaipur",
    "loss_date": "2026-09-20",
    "loss_location": "NH-52, Chomu",
    "estimate_amount": 52000,
    "survey_type": "spot",
    "instructions": "Insured available after 11 am",
    "surveyor_email": "surveyor@example.com"
  }'

const res = await fetch(`${BASE}/claims`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${process.env.DIGISURVEY_API_KEY}`,
    'Content-Type': 'application/json',
    'Idempotency-Key': claim.id,            // your own claim id
  },
  body: JSON.stringify({
    claim_number: claim.number,
    vehicle_number: claim.vehicleNo,
    insured_name: claim.insured,
    loss_date: claim.lossDate,                  // 'YYYY-MM-DD'
    survey_type: 'spot',
    surveyor_email: claim.surveyorEmail,
  }),
});
if (!res.ok) throw new Error((await res.json()).error.message);
const created = await res.json();   // created.id, created.status === 'new'

r = s.post(f"{BASE}/claims", json={
    "claim_number": "MC-2026-0412",
    "vehicle_number": "RJ14CD5678",
    "insured_name": "Ramesh Kumar",
    "loss_date": "2026-09-20",
    "survey_type": "spot",
    "surveyor_email": "surveyor@example.com",
    "external_ref": "CLAIMSYS-88213",
}, timeout=30)
if r.status_code == 409:
    claim_id = r.json()["error"]["details"]["id"]   # already sent earlier
else:
    r.raise_for_status()
    claim_id = r.json()["id"]

{
  "object": "claim",
  "id": "524f9bf0-b5e5-4074-92f0-a15cad984bdf",
  "claim_number": "MC-2026-0412",
  "vehicle_number": "RJ14CD5678",
  "insurer_name": "Your Insurance Co",
  "loss_date": "2026-09-20",
  "estimate_amount": 52000,
  "survey_type": "spot",
  "status": "new",
  "survey_id": null,
  "created_via": "api",
  "external_ref": "CLAIMSYS-88213",
  "surveyor": { "id": "20f1…", "name": "A. Sharma", "mobile": "98xxxxxx00" },
  "created_at": "2026-09-26T03:02:32.923Z", …
}

curl -X POST $BASE/claims/bulk \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY" -H "Content-Type: application/json" \
  -d '{ "claims": [
        { "claim_number": "MC-1001", "vehicle_number": "MH12AB1234", "surveyor_email": "a@example.com", "external_ref": "X-1001" },
        { "policy_number": "only-a-policy" },
        { "claim_number": "MC-1003", "loss_date": "31/02/2026" }
      ] }'

{
  "object": "bulk_result",
  "created_count": 1,
  "error_count": 2,
  "created": [ { "index": 0, "id": "761cf636-…" } ],
  "errors": [
    { "index": 1, "code": "invalid", "message": "claim_number or vehicle_number is required" },
    { "index": 2, "code": "invalid", "message": "date/time field value out of range: \"31-02-2026\"" }
  ]
}

curl "$BASE/claims?status=report_submitted&updated_since=2026-09-25T00:00:00Z&limit=100" \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY"

def all_claims(**filters):
    offset = 0
    while True:
        page = s.get(f"{BASE}/claims", params={**filters, "limit": 200, "offset": offset}, timeout=30).json()
        yield from page["data"]
        if not page["has_more"]: break
        offset = page["next_offset"]

curl -X POST $BASE/claims/524f9bf0-b5e5-4074-92f0-a15cad984bdf/assign \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY" -H "Content-Type: application/json" \
  -d '{ "surveyor_email": "surveyor@example.com", "note": "Urgent — cashless" }'

{ "object": "list", "has_more": false, "data": [
  { "object": "surveyor", "id": "20f1…", "name": "A. Sharma", "email": "a@example.com",
    "mobile": "98xxxxxx00", "license_number": "SLA-12345", "iiisla_number": "…", "connected_since": "2026-09-01T…" } ] }

{
  "object": "report", "id": "0896304a-…", "status": "viewed",
  "claim": { "id": "524f9bf0-…", "claim_number": "MC-2026-0412", "external_ref": "CLAIMSYS-88213", "status": "report_submitted" },
  "surveyor": { "name": "A. Sharma", "license_number": "SLA-12345", … },
  "summary": { "vehicle_number": "RJ14CD5678", "assessed_amount": 41250, … },
  "documents_expire_at": "2026-09-26T04:03:07Z",
  "files": [ { "name": "Final_RJ14CD5678.pdf", "report_type": "final", "size": 812345,
               "download_url": "https://digitaliiisla.co.in/.netlify/functions/r2?action=ticket&t=9ffb…" } ],
  "reports": [ { "report_type": "final", "updated_at": "…", "changed_since_sent": false,
                 "html_url": "$BASE/reports/0896304a-…/html?type=final" } ],
  "photos": [ { "stage": "primary", "label": "Front bumper", "captured_at": "…", "latitude": 26.91, "longitude": 75.78, "download_url": "…" } ],
  "documents": [ { "doc_type": "rc", "uploaded_at": "…", "download_url": "…" } ]
}

curl -X POST $BASE/reports/0896304a-6ec9-4f3c-9ec4-fac4da66a950/ack \
  -H "Authorization: Bearer $DIGISURVEY_API_KEY" -H "Content-Type: application/json" \
  -d '{ "message": "Received, thanks" }'

POST /your/webhook HTTP/1.1
Content-Type: application/json
User-Agent: DigiSurvey-Webhooks/1.0
X-DigiSurvey-Event: report.submitted
X-DigiSurvey-Delivery: 5b0d3a1e-8f7c-4c2a-9a55-0c3f6f0b7a11
X-DigiSurvey-Timestamp: 1790391777
X-DigiSurvey-Signature: v1=6f1c0a…e93b

{
  "id": "5b0d3a1e-8f7c-4c2a-9a55-0c3f6f0b7a11",
  "object": "event",
  "type": "report.submitted",
  "api_version": "2026-09-26",
  "created_at": "2026-09-26T03:02:56Z",
  "data": { "report": { "id": "0896304a-…", "claim_id": "524f9bf0-…", "report_types": ["final"], … } }
}

import crypto from 'node:crypto';
import express from 'express';
const app = express();
const SECRET = process.env.DIGISURVEY_WEBHOOK_SECRET; // whsec_…

app.post('/webhooks/digisurvey', express.raw({ type: 'application/json' }), (req, res) => {
  const ts = req.get('X-DigiSurvey-Timestamp');
  const sig = (req.get('X-DigiSurvey-Signature') || '').replace(/^v1=/, '');
  const expected = crypto.createHmac('sha256', SECRET).update(`${ts}.${req.body}`).digest('hex');
  const fresh = Math.abs(Date.now() / 1000 - Number(ts)) < 300;
  if (!fresh || sig.length !== expected.length ||
      !crypto.timingSafeEqual(Buffer.from(sig), Buffer.from(expected))) {
    return res.sendStatus(400);
  }
  const event = JSON.parse(req.body);
  queue.add(event);            // handle asynchronously, de-duplicate on event.id
  res.sendStatus(200);
});

import hmac, hashlib, time, os
from flask import Flask, request, abort
app = Flask(__name__)
SECRET = os.environ["DIGISURVEY_WEBHOOK_SECRET"].encode()

@app.post("/webhooks/digisurvey")
def digisurvey():
    ts = request.headers.get("X-DigiSurvey-Timestamp", "")
    sig = request.headers.get("X-DigiSurvey-Signature", "").removeprefix("v1=")
    raw = request.get_data()                      # raw bytes
    expected = hmac.new(SECRET, ts.encode() + b"." + raw, hashlib.sha256).hexdigest()
    if not ts.isdigit() or abs(time.time() - int(ts)) > 300 or not hmac.compare_digest(sig, expected):
        abort(400)
    event = request.get_json()
    enqueue(event)                                # de-duplicate on event["id"]
    return "", 200

$secret = getenv('DIGISURVEY_WEBHOOK_SECRET');
$raw = file_get_contents('php://input');
$ts  = $_SERVER['HTTP_X_DIGISURVEY_TIMESTAMP'] ?? '';
$sig = preg_replace('/^v1=/', '', $_SERVER['HTTP_X_DIGISURVEY_SIGNATURE'] ?? '');
$expected = hash_hmac('sha256', $ts . '.' . $raw, $secret);
if (!ctype_digit($ts) || abs(time() - (int)$ts) > 300 || !hash_equals($expected, $sig)) {
  http_response_code(400); exit;
}
$event = json_decode($raw, true);
http_response_code(200);

import os, requests, pathlib
BASE = "https://vtlxdqgdrapeyhncbkrj.supabase.co/functions/v1/api"
s = requests.Session()
s.headers["Authorization"] = f"Bearer {os.environ['DIGISURVEY_API_KEY']}"

# 1) send today's claims from your system (max 500 per call)
claims = [{"claim_number": c.no, "vehicle_number": c.reg, "insured_name": c.insured,
           "survey_type": "spot", "surveyor_email": c.surveyor, "external_ref": c.id} for c in new_claims()]
for i in range(0, len(claims), 500):
    r = s.post(f"{BASE}/claims/bulk", json={"claims": claims[i:i+500]}, timeout=60)
    for e in r.json().get("errors", []):
        if e["code"] != "duplicate":
            log_error(claims[i + e["index"]], e["message"])

# 2) download new reports and acknowledge them
for rep in s.get(f"{BASE}/reports", params={"status": "submitted", "limit": 50}, timeout=30).json()["data"]:
    full = s.get(f"{BASE}/reports/{rep['id']}", timeout=30).json()
    folder = pathlib.Path("reports") / (full["summary"].get("claim_number") or rep["id"])
    folder.mkdir(parents=True, exist_ok=True)
    for f in full["files"]:
        if f["download_url"]:
            (folder / f["name"]).write_bytes(requests.get(f["download_url"], timeout=120).content)
    s.post(f"{BASE}/reports/{rep['id']}/ack", json={"message": "Auto-received by ClaimSys"}, timeout=30)

import { writeFile, mkdir } from 'node:fs/promises';
const BASE = 'https://vtlxdqgdrapeyhncbkrj.supabase.co/functions/v1/api';
const H = { Authorization: `Bearer ${process.env.DIGISURVEY_API_KEY}`, 'Content-Type': 'application/json' };
const api = async (path, init = {}) => {
  const r = await fetch(BASE + path, { ...init, headers: H });
  if (r.status === 429) { await new Promise(ok => setTimeout(ok, Number(r.headers.get('retry-after')) * 1000)); return api(path, init); }
  return r.json();
};

const result = await api('/claims/bulk', { method: 'POST', body: JSON.stringify({ claims: todaysClaims }) });
console.log(`${result.created_count} created, ${result.error_count} errors`);

const { data: inbox } = await api('/reports?status=submitted');
for (const rep of inbox) {
  const full = await api(`/reports/${rep.id}`);
  const dir = `reports/${full.summary.claim_number ?? rep.id}`;
  await mkdir(dir, { recursive: true });
  for (const f of full.files) {
    if (f.download_url) await writeFile(`${dir}/${f.name}`, Buffer.from(await (await fetch(f.download_url)).arrayBuffer()));
  }
  await api(`/reports/${rep.id}/ack`, { method: 'POST', body: JSON.stringify({ message: 'Received' }) });
}