WEBCON MD — Core API (no front-end, no API key)
===============================================
by Devatron

This server has no UI. Everything is a plain HTTP JSON endpoint you call
directly with curl, fetch, or any HTTP client. No API key, login, or
account is required for anything below.

MODEL
-------------------------------------------------
A "session" is a WhatsApp login (scan a QR code or enter a pairing code
to produce credentials). A "subsession" is a running bot instance started
from those credentials. Create a session, wait for it to connect, then
start one or more subsessions from it.

ENDPOINTS
-------------------------------------------------

POST /api/v1/sessions
  Create a session (QR or pairing code).
  Body: { "method": "qr" }                          (QR code flow)
     or { "method": "pairing", "phoneNumber": "234701234567" }
  Optional: "pairServer": 1-7
  curl -X POST "$BASE/api/v1/sessions" \
    -H "Content-Type: application/json" \
    -d '{"method":"qr"}'

GET /api/v1/sessions/:sessionId
  Poll status, pairing code, and — once connected — credentials.
  curl "$BASE/api/v1/sessions/SESSION_ID"

GET /api/v1/sessions/:sessionId/qr.png
  The QR code as a raw PNG. Embed directly with <img src="...">.
  curl "$BASE/api/v1/sessions/SESSION_ID/qr.png" -o qr.png

DELETE /api/v1/sessions/:sessionId
  Terminate a session.
  curl -X DELETE "$BASE/api/v1/sessions/SESSION_ID"

POST /api/v1/sessions/:sessionId/subsessions
  Start a bot (subsession) from a connected session's credentials.
  curl -X POST "$BASE/api/v1/sessions/SESSION_ID/subsessions"

POST /api/v1/subsessions
  Start a bot directly from a raw WEBCON-BOT:/WOLF-BOT: credential string.
  Body: { "sessionId": "WEBCON-BOT:eyJ..." }
  curl -X POST "$BASE/api/v1/subsessions" \
    -H "Content-Type: application/json" \
    -d '{"sessionId":"WEBCON-BOT:eyJ..."}'

GET /api/v1/subsessions/:subsessionId
  Get a bot's connection status and recent logs.
  curl "$BASE/api/v1/subsessions/SUBSESSION_ID"

DELETE /api/v1/subsessions/:subsessionId
  Stop a running bot.
  curl -X DELETE "$BASE/api/v1/subsessions/SUBSESSION_ID"

GET /health
  Health check for uptime monitors / Railway.
  curl "$BASE/health"

===============================================
Replace $BASE with this server's URL.