import crypto from 'node:crypto';

const API = 'https://non-voip-api.0246864.xyz/api/v1';
const headers = {
  'X-Api-Key': process.env.NV_API_KEY,
  'Content-Type': 'application/json',
};

async function apiJson(response) {
  const body = await response.json();
  if (!response.ok) throw new Error(`${response.status}: ${body.message}`);
  return body;
}

// 1. Find something orderable
const catalog = await apiJson(await fetch(
  `${API}/catalog?search=whatsapp&countryCode=DE`,
  { headers },
));
const rows = catalog.data;

// 2. Rent the number safely — retry with the same Idempotency-Key
const created = await apiJson(await fetch(`${API}/verifications`, {
  method: 'POST',
  headers: { ...headers, 'Idempotency-Key': crypto.randomUUID() },
  body: JSON.stringify({ productServiceId: rows[0].productServiceId }),
}));
const verificationId = created.data.verificationId;

// 3. Poll until a message arrives. Single-SMS orders usually become "completed".
let verification;
while (true) {
  const detail = await apiJson(await fetch(
    `${API}/verifications/${verificationId}`,
    { headers },
  ));
  verification = detail.data;
  if (verification.messages?.length) break;
  if (['completed', 'expired', 'cancelled', 'failed'].includes(verification.status)) {
    throw new Error(`Verification ended without a code: ${verification.status}`);
  }
  await new Promise((resolve) => setTimeout(resolve, 3000));
}

console.log(verification.status, verification.messages?.[0]?.code);
// → "otp_received" "483920"