The Domains You Own

const res = await fetch('https://panel.example.com/api/v1/client/domains?status=active', {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
const expiring = data.filter((d) => d.due_date && d.due_date < horizon);

$ch = curl_init('https://panel.example.com/api/v1/client/domains?status=active');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The lock and privacy values are a MIRROR: the last value saved rather than the current one.
$rows = Kernel::internal('client:Domains/GetDomains', ['owner_id' => $uid])['data'];
// for the live one: client:Domains/GetTransferLock

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}`, {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
if (data.capabilities.dns_records) showDnsTab();

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// Build the interface FROM THE CAPABILITIES: not every provider does everything, and a closed surface answers 422.
$d = Kernel::internal('client:Domains/GetDomain',
    ['owner_id' => $uid, 'domain' => $domain])['data'];

$tabs = array_keys(array_filter($d['capabilities']));

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}`, {
  method: 'PATCH',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ auto_renew: true }),
});

if (res.status === 422) explainLock(await res.json());

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_CUSTOMREQUEST  => 'PATCH',
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['auto_renew' => true]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// With automatic renewal off a domain expires QUIETLY: setting a reminder is left to you.
Kernel::internal('client:Domains/UpdateDomain',
    ['owner_id' => $uid, 'domain' => $domain, 'auto_renew' => true]);

const d = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}`, {
  headers: { Authorization: `Bearer ${clientKey}` },
}).then((r) => r.json());

const terms = d.data.renewal.terms;

await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/renew`, {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ years: terms[0].years }),
});

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/renew');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['years' => 2]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The terms offered are bounded by THE REGISTRY CEILING: a ten-year name may take no further two.
$d = Kernel::internal('client:Domains/GetDomain',
    ['owner_id' => $uid, 'domain' => $domain])['data'];

$years = array_column($d['renewal']['terms'], 'years');

const res = await fetch(`https://panel.example.com/api/v1/client/domains/${domain}/addons/${key}`, {
  method: 'POST',
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
goPay(data.invoice_id);

$ch = curl_init('https://panel.example.com/api/v1/client/domains/' . $domain . '/addons/' . $key);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// An add-on does not open until THE INVOICE IS PAID: the purchase call raises the document alone.
$inv = Kernel::internal('client:Domains/BuyDomainAddon',
    ['owner_id' => $uid, 'domain' => $domain, 'key' => 'whois-privacy'])['data'];

Kernel::internal('client:Invoices/PayInvoice',
    ['owner_id' => $uid, 'id' => $inv['invoice_id'], 'payment' => ['method' => 'balance']]);