fix: instance creation broken by sanitization guard, silent error swallow, and build failures

.env.example

@@ -52,7 +52,7 @@ DEL_INSTANCE=false
 
 # Provider: postgresql | mysql | psql_bouncer
 DATABASE_PROVIDER=postgresql
-DATABASE_CONNECTION_URI='postgresql://user:pass@evolution-postgres:5432/evolution_db?schema=evolution_api'
+DATABASE_CONNECTION_URI=postgresql://user:pass@evolution-postgres:5432/evolution_db
 
 # Postgres container settings (used by docker-compose)
 POSTGRES_DATABASE=evolution_db

Dockerfile

@@ -24,6 +24,7 @@ COPY ./prisma ./prisma
 COPY ./manager ./manager
 COPY ./.env.example ./.env
 COPY ./runWithProvider.js ./
+COPY ./prisma.config.ts ./
 
 COPY ./Docker ./Docker
 
@@ -65,6 +66,7 @@ COPY --from=builder /evolution/.env ./.env
 COPY --from=builder /evolution/Docker ./Docker
 COPY --from=builder /evolution/runWithProvider.js ./runWithProvider.js
 COPY --from=builder /evolution/tsup.config.ts ./tsup.config.ts
+COPY --from=builder /evolution/prisma.config.ts ./prisma.config.ts
 
 ENV DOCKER_ENV=true
 

patches/.gitkeep

@@ -0,0 +1 @@
+

src/api/abstract/abstract.router.ts

@@ -51,7 +51,12 @@ export abstract class RouterBroker {
     }
 
     if (request.originalUrl.includes('/instance/create')) {
-      Object.assign(instance, sanitizeUntrustedInput(body));
+      const sanitized = sanitizeUntrustedInput(body);
+      // instanceName must come from the body on create — there is no URL param on this route
+      if (body?.instanceName !== undefined) {
+        sanitized.instanceName = body.instanceName;
+      }
+      Object.assign(instance, sanitized);
     }
 
     Object.assign(ref, body);

src/api/integrations/channel/evohub/evohub.controlplane.router.ts

@@ -37,7 +37,7 @@ export class EvoHubControlPlaneRouter extends RouterBroker {
     });
 
     this.router.get('/evohub/channels/:id', guard, async (req, res) => {
-      res.json(await evoHubClient.getChannel(req.params.id));
+      res.json(await evoHubClient.getChannel(req.params.id as string));
     });
 
     this.router.get('/evohub/available-channels', guard, async (_req, res) => {
@@ -114,7 +114,7 @@ export class EvoHubControlPlaneRouter extends RouterBroker {
     });
 
     this.router.post('/evohub/channels/:id/meta-connect', guard, async (req, res) => {
-      res.json(await evoHubClient.connectToMeta(req.params.id, req.body));
+      res.json(await evoHubClient.connectToMeta(req.params.id as string, req.body));
     });
   }
 }

src/api/services/monitor.service.ts

@@ -257,8 +257,25 @@ export class WAMonitoringService {
           businessId: data.businessId,
         },
       });
+      // Ensure Setting record exists immediately after Instance creation.
+      // Prevents FK constraint violations (Setting_instanceId_fkey) in chatbot
+      // integrations that write to IntegrationSession before setSettings() runs.
+      await this.prismaRepository.setting.upsert({
+        where: { instanceId: data.instanceId },
+        update: {},
+        create: {
+          instanceId: data.instanceId,
+          rejectCall: false,
+          groupsIgnore: false,
+          alwaysOnline: false,
+          readMessages: false,
+          readStatus: false,
+          syncFullHistory: false,
+        },
+      });
     } catch (error) {
       this.logger.error(error);
+      throw error;
     }
   }
 

tsup.config.ts

@@ -26,16 +26,17 @@ export default defineConfig({
   // Apenas o nome exato @prisma/client é bundlado (redirecionado pelo alias para o client
   // gerado). Subpaths como @prisma/client/runtime/* permanecem externos (node_modules).
   noExternal: [/^@prisma\/client$/],
+  define: {
+    __LICENSE_ENDPOINT_ENCODED__: licenseEndpointEncoded,
+    __LICENSE_ENDPOINT_XOR_KEY__: licenseEndpointXorKey,
+  },
   esbuildOptions(options) {
     // platform node: garante o shim de import.meta.url no bundle CJS (client Prisma 7 usa import.meta)
     options.platform = 'node';
     options.alias = {
       ...(options.alias ?? {}),
       '@prisma/client': path.resolve(process.cwd(), 'prisma/generated/client/client.ts'),
     };
-  define: {
-    __LICENSE_ENDPOINT_ENCODED__: licenseEndpointEncoded,
-    __LICENSE_ENDPOINT_XOR_KEY__: licenseEndpointXorKey,
   },
   onSuccess: async () => {
     cpSync('src/utils/translations', 'dist/translations', { recursive: true });