// Node.js 18+ (native fetch)
// Based on the supplied API reference.

const INITIAL_HEADERS = {
  "x-auth-token": "YOUR_INITIAL_X_AUTH_TOKEN",
  "Content-Type": "application/json"
};

async function post(url, body, headers) {
  const res = await fetch(url, {
    method: "POST",
    headers,
    body: JSON.stringify(body)
  });
  return res.json();
}

async function login(username, password) {
  return post(
    "https://newsip.israelnumber.com/api/login/",
    { username, password },
    INITIAL_HEADERS
  );
}

async function getAvailableDIDs(id, token, countryId, headers) {
  return post("https://newsip.israelnumber.com/customer/did_crud/", {
    action: "available_list",
    parent_id: "0",
    country_id: countryId,
    id,
    token
  }, headers);
}

async function getPurchasedDIDs(id, token, headers) {
  return post("https://newsip.israelnumber.com/customer/did_crud/", {
    action: "purchase_list",
    id,
    token
  }, headers);
}

async function addSmsWebhook(id, token, did, webhookUrl, headers) {
  const res = await fetch("https://newsip.israelnumber.com/api/sms", {
    method: "POST",
    headers,
    body: JSON.stringify({
      action: "add",
      id,
      token,
      did,
      webhook_url: webhookUrl
    })
  });
  const text = await res.text();
  let response = text;
  if (text) {
    try { response = JSON.parse(text); } catch (e) {}
  }
  return { status: res.status, response };
}

(async () => {
  const auth = await login("YOUR_ACCOUNT_NUMBER", "YOUR_PASSWORD");
  const accountId = auth.id;
  const token = auth.account_token;
  const sessionXAuthToken = auth["x-auth-token"];

  const SESSION_HEADERS = {
    "x-auth-token": sessionXAuthToken,
    "Content-Type": "application/json"
  };

  // countryId is the optional numeric country ID provided in the Country List reference.
  const available = await getAvailableDIDs(
    accountId,
    token,
    "YOUR_COUNTRY_ID",
    SESSION_HEADERS
  );
  console.log(available);

  const purchased = await getPurchasedDIDs(accountId, token, SESSION_HEADERS);
  console.log(purchased);

  const smsWebhook = await addSmsWebhook(
    accountId,
    token,
    "YOUR_SMS_ENABLED_DID",
    "https://example.com/api?from={CallerID}&text={SMS_TEXT}&to={SMS_DST_ADDR}",
    SESSION_HEADERS
  );
  console.log("SMS webhook result:", smsWebhook);
})();

# Step 1 — Login with the fixed initial x-auth-token
LOGIN_RESPONSE=$(curl -s -X POST "https://newsip.israelnumber.com/api/login/" \
  -H "x-auth-token: YOUR_INITIAL_X_AUTH_TOKEN" \
  -H "Content-Type: application/json" \
  -d '{
    "username":"YOUR_ACCOUNT_NUMBER",
    "password":"YOUR_PASSWORD"
  }')

# Extract values returned by Login.
# Requires jq: https://jqlang.org/
ACCOUNT_ID=$(printf '%s' "$LOGIN_RESPONSE" | jq -r '.id')
ACCOUNT_TOKEN=$(printf '%s' "$LOGIN_RESPONSE" | jq -r '.account_token')
SESSION_X_AUTH_TOKEN=$(printf '%s' "$LOGIN_RESPONSE" | jq -r '."x-auth-token"')

# Step 2 — List available DIDs using the generated session x-auth-token
curl -s -X POST "https://newsip.israelnumber.com/customer/did_crud/" \
  -H "x-auth-token: $SESSION_X_AUTH_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{
    \"action\":\"available_list\",
    \"parent_id\":\"0\",
    \"country_id\":\"YOUR_COUNTRY_ID\",
    \"id\":\"$ACCOUNT_ID\",
    \"token\":\"$ACCOUNT_TOKEN\"
  }"

# Step 3 — List purchased DIDs
curl -s -X POST "https://newsip.israelnumber.com/customer/did_crud/" \
  -H "x-auth-token: $SESSION_X_AUTH_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{
    \"action\":\"purchase_list\",
    \"id\":\"$ACCOUNT_ID\",
    \"token\":\"$ACCOUNT_TOKEN\"
  }"

# Step 4 — Release a DID
curl -s -X POST "https://newsip.israelnumber.com/customer/did_management/" \
  -H "x-auth-token: $SESSION_X_AUTH_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{
    \"action\":\"release\",
    \"did_id\":\"YOUR_DID_ID\",
    \"accountid\":\"$ACCOUNT_ID\",
    \"id\":\"$ACCOUNT_ID\",
    \"token\":\"$ACCOUNT_TOKEN\"
  }"

# Step 5 — Configure inbound SMS forwarding to a webhook
# -i shows HTTP status/headers together with any response body.
curl -s -i -X POST "https://newsip.israelnumber.com/api/sms" \
  -H "x-auth-token: $SESSION_X_AUTH_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{
    \"action\":\"add\",
    \"id\":\"$ACCOUNT_ID\",
    \"token\":\"$ACCOUNT_TOKEN\",
    \"did\":\"YOUR_SMS_ENABLED_DID\",
    \"webhook_url\":\"https://example.com/api?from={CallerID}&text={SMS_TEXT}&to={SMS_DST_ADDR}\"
  }"