Use Space HTTPS URL for Snippe webhooks

src/routes/devices.routes.js

@@ -16,6 +16,7 @@ const {
   makePaymentAssetUrl,
   resolvePaymentAssetPath,
 } = require("../utils/portalPaymentStorage");
+const { snippeWebhookUrl } = require("../utils/webhookUrl");
 
 const ALLOWED_PORTAL_PAYMENT_MODES = new Set(["online_only", "direct_only", "both"]);
 const PAYMENT_IMAGE_MIME_EXTENSIONS = {
@@ -837,14 +838,12 @@ router.post("/:id/renew", async (req, res) => {
     );
 
     // Initiate Snippe payment to tenant's phone
-    const host = (process.env.PORTAL_HOST || '').replace(/^https?:\/\//, '');
-    const webhookBase = `${process.env.PORTAL_SCHEME || "http"}://${host}`;
     try {
       await snippe.createPayment({
         reference,
         amount: parseFloat(device.monthly_fee),
         phone: device.client_phone,
-        webhookUrl: `${webhookBase}/api/webhooks/snippe`,
+        webhookUrl: snippeWebhookUrl(),
         metadata: { reference, type: "device_renewal", device_id: String(device.id) },
       });
     } catch (payErr) {

src/routes/payouts.routes.js

@@ -2,6 +2,7 @@ const router = require('express').Router();
 const db     = require('../config/db');
 const snippe = require('../services/snippe');
 const { requireAuth } = require('../middleware/auth');
+const { snippeWebhookUrl } = require('../utils/webhookUrl');
 
 router.use(requireAuth);
 
@@ -66,8 +67,6 @@ router.post('/', async (req, res) => {
     );
 
     const payoutId  = result.insertId;
-    const host = (process.env.PORTAL_HOST || '').replace(/^https?:\/\//, '');
-    const webhookBase = `${process.env.PORTAL_SCHEME || 'http'}://${host}`;
 
     // Call Snippe disbursement
     try {
@@ -77,7 +76,7 @@ router.post('/', async (req, res) => {
         phone,
         recipientName: client.contact_name,
         narration:     'WiFi platform payout',
-        webhookUrl:    `${webhookBase}/api/webhooks/snippe`,
+        webhookUrl:    snippeWebhookUrl(),
       });
 
       // Save disbursement reference

src/routes/portal.routes.js

@@ -10,6 +10,7 @@ const { v4: uuidv4 } = require('uuid');
 const { purchaseLimiter, portalAuthLimiter } = require('../middleware/rateLimiter');
 const { alertAdmin } = require('../utils/adminAlert');
 const { makePaymentAssetUrl } = require('../utils/portalPaymentStorage');
+const { snippeWebhookUrl } = require('../utils/webhookUrl');
 const { decryptSecret } = require('../utils/paymentSecrets');
 
 const normalizeMac = mac => String(mac || '').toUpperCase().replace(/[:\-]/g, '');
@@ -519,14 +520,12 @@ router.post('/:siteId/purchase', purchaseLimiter, async (req, res) => {
       ]
     );
 
-    const host = (process.env.PORTAL_HOST || '').replace(/^https?:\/\//, '');
-    const webhookBase = `${process.env.PORTAL_SCHEME || 'http'}://${host}`;
     try {
       await snippe.createPayment({
         reference,
         amount:     parseFloat(plan.price),
         phone,
-        webhookUrl: `${webhookBase}/api/webhooks/snippe`,
+        webhookUrl: snippeWebhookUrl(),
         apiKey: paymentAccount.apiKey,
         metadata:   {
           reference:    reference,

src/utils/webhookUrl.js

@@ -0,0 +1,16 @@
+function publicHost() {
+  return String(process.env.WEBHOOK_HOST || process.env.SPACE_HOST || process.env.PORTAL_HOST || '')
+    .replace(/^https?:\/\//, '')
+    .replace(/\/+$/, '');
+}
+
+function snippeWebhookUrl(path = '/api/webhooks/snippe') {
+  const host = publicHost();
+  if (!host) {
+    throw new Error('WEBHOOK_HOST, SPACE_HOST, or PORTAL_HOST is required for Snippe webhooks');
+  }
+  const normalizedPath = path.startsWith('/') ? path : `/${path}`;
+  return `https://${host}${normalizedPath}`;
+}
+
+module.exports = { snippeWebhookUrl };