Taking a Domain

const res = await fetch('https://panel.example.com/api/v1/client/domains/tlds?tld=com', {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
const years = Object.keys(data[0].register_years ?? {});

$ch = curl_init('https://panel.example.com/api/v1/client/domains/tlds?tld=com');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The price per term comes ONLY when one extension is asked for: the general listing holds no such table.
$one = Kernel::internal('client:Domains/GetTlds', ['owner_id' => $uid, 'tld' => 'com'])['data'][0];
$priced = array_keys($one['register_years'] ?? []);

const res = await fetch('https://panel.example.com/api/v1/client/domains/check', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ domain }),
});

const { data } = await res.json();
if (data.premium) showPremiumPrice(data.premium_price);

$ch = curl_init('https://panel.example.com/api/v1/client/domains/check');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['domain' => $name]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Do not read UNKNOWN as free: the registrar could not be reached and the order can still fail.
$r = Kernel::internal('client:Domains/CheckDomain',
    ['owner_id' => $uid, 'domain' => $name])['data'];

$safe = $r['status'] === 'available';

const res = await fetch('https://panel.example.com/api/v1/client/domains/register', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    terms: true,
    domain,
    years: 1,
    whois_profile_id: profileId,
    payment: { method: 'balance' },
  }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/register');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode($order),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// A SPECIALLY PRICED name registers for ONE YEAR whatever is sent, and it wants the acceptance flag.
$c = Kernel::internal('client:Domains/CheckDomain',
    ['owner_id' => $uid, 'domain' => $name])['data'];

Kernel::internal('client:Domains/RegisterDomain', ['owner_id' => $uid, 'terms' => true,
    'domain' => $name, 'accept_premium' => $c['premium'],
    'payment' => ['method' => 'balance']]);

const res = await fetch('https://panel.example.com/api/v1/client/domains/transfer', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ terms: true, domain, auth_code: code, payment }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/transfer');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode($order),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// A transfer is ALWAYS one year and does not finish at payment: follow it on the transfer status endpoint.
$o = Kernel::internal('client:Domains/TransferDomain', ['owner_id' => $uid] + $order)['data'];
$sid = $o['domain']['service_id'];

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/transfer-lock`, {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
if (! data.live) warnStaleValue();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/transfer-lock');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Where the live flag is false the value can be old: weigh the lock decision against it.
$l = Kernel::internal('client:Domains/GetTransferLock',
    ['owner_id' => $uid, 'domain' => $domain])['data'];
$trusted = $l['live'];

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/transfer-lock`, {
  method: 'PUT',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ locked: false }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/transfer-lock');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST  => 'PUT',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['locked' => false]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// OPENING the lock leaves the domain open to being taken: close it again as soon as the move is done.
Kernel::internal('client:Domains/UpdateTransferLock',
    ['owner_id' => $uid, 'domain' => $domain, 'locked' => false]);

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/auth-code`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${clientKey}` },
});

if (res.ok) tellUserToCheckEmail();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/auth-code');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The code NEVER comes back in the answer: it goes to the owner's e-mail, which is a deliberate safeguard.
Kernel::internal('client:Domains/SendAuthCode', ['owner_id' => $uid, 'domain' => $domain]);

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/auth-code`, {
  method: 'PUT',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ code }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/auth-code');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST  => 'PUT',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['code' => $code]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// This endpoint SAVES and does not restart the transfer: a changed code still wants a fresh attempt at the provider.
Kernel::internal('client:Domains/SaveAuthCode',
    ['owner_id' => $uid, 'domain' => $domain, 'code' => $code]);

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/transfer-status`, {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
showProgress(data.transfer.state, data.transfer.message);

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/transfer-status');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Every call goes LIVE to the provider: do not poll it often in a watcher, hourly is plenty.
$t = Kernel::internal('client:Domains/GetTransferStatus',
    ['owner_id' => $uid, 'domain' => $domain])['data'];
$done = $t['transfer']['state'] === 'completed';