Balance

const res = await fetch('https://panel.example.com/api/v1/client/balance', {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
if (data.low_balance) promptTopUp(data.balance);

$ch = curl_init('https://panel.example.com/api/v1/client/balance');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The wallet currency can differ from the DISPLAY one on the profile; read the amount in its own.
$w = Kernel::internal('client:Balance/GetBalance', ['owner_id' => $uid])['data'];
$amount = $w['balance']['amount'];
$cur    = $w['balance']['currency'];

const url = new URL('https://panel.example.com/api/v1/client/balance/transactions');
url.searchParams.set('type', 'down');

const res = await fetch(url, { headers: { Authorization: `Bearer ${clientKey}` } });
const { data, meta } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/balance/transactions?type=down');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// A movement is a HISTORICAL record: a refund adds a row the other way rather than removing the old one.
$rows = Kernel::internal('client:Balance/GetBalanceTransactions',
    ['owner_id' => $uid, 'type' => 'down'])['data'];
$paid = array_column($rows, 'invoice_id');

const res = await fetch('https://panel.example.com/api/v1/client/balance/settings', {
  method: 'PATCH',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    alert: { enabled: true, threshold: 50 },
    alert_recipients: [84],
  }),
});

const { data } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/balance/settings');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST  => 'PATCH',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['auto_pay_from_balance' => true]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The recipient list REPLACES: read the ones already on and merge before adding an address.
$cur = Kernel::internal('client:Balance/GetBalance', ['owner_id' => $uid])['data'];
$on  = array_column(array_filter($cur['alert']['recipients'],
    fn ($r) => $r['enabled'] && ! $r['owner']), 'id');

$on[] = $newAddressId;
Kernel::internal('client:Balance/UpdateBalanceSettings',
    ['owner_id' => $uid, 'alert_recipients' => $on]);