Orders

const res = await fetch('https://panel.example.com/api/v1/client/orders?status=active', {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data, meta } = await res.json();

$ch = curl_init('https://panel.example.com/api/v1/client/orders?status=active');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The listing carries NO LINES: the items and the services born come on the detail endpoint.
$rows = Kernel::internal('client:Orders/GetOrders', ['owner_id' => $uid])['data'];

const res = await fetch(`https://panel.example.com/api/v1/client/orders/${id}`, {
  headers: { Authorization: `Bearer ${clientKey}` },
});

const { data } = await res.json();
const ids = data.services.map((s) => s.id);

$ch = curl_init('https://panel.example.com/api/v1/client/orders/' . $id);
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER     => ['Authorization: Bearer ' . $clientKey],
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The services can already exist while the order still reads WAITING; follow the service state.
$o = Kernel::internal('client:Orders/GetOrder', ['owner_id' => $uid, 'id' => $id])['data'];
$live = array_filter($o['services'], fn ($s) => $s['status'] === 'active');

const res = await fetch('https://panel.example.com/api/v1/client/orders/preview', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({ items, coupons }),
});

const { data } = await res.json();
showSummary(data.subtotal, data.discount, data.tax, data.total);

$ch = curl_init('https://panel.example.com/api/v1/client/orders/preview');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode(['items' => $items]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// The preview DOES NOT run the ordering gates: the terms, verification and balance go unchecked here.
$q = Kernel::internal('client:Orders/PreviewOrder', ['owner_id' => $uid, 'items' => $items])['data'];
$due = $q['total']['amount'];

const res = await fetch('https://panel.example.com/api/v1/client/orders', {
  method: 'POST',
  headers: {
    Authorization: `Bearer ${clientKey}`,
    'Content-Type': 'application/json',
  },
  body: JSON.stringify({
    terms: true,
    items,
    payment: { method: 'balance' },
  }),
});

const { data } = await res.json();
if (data.payment.status === 'failed') showPayLater(data.invoice);

$ch = curl_init('https://panel.example.com/api/v1/client/orders');
curl_setopt_array($ch, [
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_POST           => true,
    CURLOPT_HTTPHEADER     => [
        'Authorization: Bearer ' . $clientKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode([
        'terms' => true, 'items' => $items,
        'payment' => ['method' => 'balance'],
    ]),
]);

$body = json_decode(curl_exec($ch), true);
curl_close($ch);

// A 201 DOES NOT MEAN PAID: a declined card still leaves the order and its unpaid invoice, so read the payment state.
$o = Kernel::internal('client:Orders/CreateOrder',
    ['owner_id' => $uid, 'terms' => true, 'items' => $items,
     'payment' => ['method' => 'card']])['data'];

if ($o['payment']['status'] !== 'paid') $notify($o['invoice']['invoice_id']);