Sua mensagem nos canais certos

// Backend Node/TS — 2) Disparar (channels ⊆ canais habilitados no template)
const otpMobile = String(Math.floor(100000 + Math.random() * 900000));
const otpWeb = String(Math.floor(100000 + Math.random() * 900000));
await otpStore.save({
  userId: "usr_123",
  mobileOtp: otpMobile,
  webOtp: otpWeb,
  expiresAt: new Date(Date.now() + 5 * 60 * 1000),
});
const res = await fetch("https://api.notifique.dev/v1/templates/send", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    Authorization: "Bearer sk_live_xxxxx",
  },
  body: JSON.stringify({
    to: ["5511999999999", "[email protected]"],
    template: "otp_duplo_login",
    // Só canais com enabled: true no template (ex.: não inclua "telegram" se estiver desligado)
    channels: ["sms", "email"],
    variables: {
      nome: "João",
      otp_mobile: otpMobile,
      otp_web: otpWeb,
      validade_min: "5",
    },
    // instanceId: obrigatório se "whatsapp" ∈ channels e não houver instância padrão
    // telegram: { instanceId: "..." } — se "telegram" ∈ channels
    // from — se e-mail ∈ channels e não houver domínio padrão
  }),
});
if (!res.ok) throw new Error("Falha ao enviar");
const payload = await res.json();
console.log(payload.data?.messageIds);

type ConfirmInput = { userId: string; mobileCode: string; webCode: string };
export async function confirmOtpDual(input: ConfirmInput) {
  const current = await otpStore.getByUserId(input.userId);
  if (!current) throw new Error("OTP não encontrado");
  if (new Date() > current.expiresAt) throw new Error("OTP expirado");
  const mobileOk = await verifyHash(input.mobileCode, current.mobileOtpHash);
  const webOk = await verifyHash(input.webCode, current.webOtpHash);
  if (!mobileOk || !webOk) throw new Error("Códigos inválidos");
  await otpStore.consume(input.userId);
  return { ok: true, authenticatedAt: new Date().toISOString() };
}