// Node.js 18+ (native fetch)
// Whitelist your server IP first.
// Initial Login uses the fixed x-auth-token from the Postman documentation.

const PORTAL_BASE = "https://newsip.pbxme.com";

const INITIAL_HEADERS = {
  "x-auth-token": "YOUR_INITIAL_X_AUTH_TOKEN",
  "Content-Type": "application/json"
};

async function parseResponse(r) {
  const text = await r.text();
  let body = text;
  if (text) {
    try { body = JSON.parse(text); } catch (e) {}
  }
  return { status: r.status, body };
}

// 1) Login and receive account id, account_token, and session x-auth-token
async function login() {
  const r = await fetch(`${PORTAL_BASE}/api/login/`, {
    method: "POST",
    headers: INITIAL_HEADERS,
    body: JSON.stringify({
      username: "YOUR_ACCOUNT_NUMBER",
      password: "YOUR_PASSWORD"
    })
  });

  if (!r.ok) {
    throw new Error(`Login failed with HTTP ${r.status}`);
  }

  return r.json();
}

// 2) Documented SMS Config API: forward inbound SMS to email
async function addSmsForwardToEmail(id, token, did, destEmail, sessionHeaders) {
  const r = await fetch(`${PORTAL_BASE}/api/sms`, {
    method: "POST",
    headers: sessionHeaders,
    body: JSON.stringify({
      action: "add",
      did,
      dest_email: destEmail,
      id,
      token
    })
  });
  return parseResponse(r);
}

// 3) Documented SMS Config API: forward inbound SMS to a webhook
async function addSmsForwardToWebhook(id, token, did, webhookUrl, sessionHeaders) {
  const r = await fetch(`${PORTAL_BASE}/api/sms`, {
    method: "POST",
    headers: sessionHeaders,
    body: JSON.stringify({
      action: "add",
      did,
      webhook_url: webhookUrl,
      id,
      token
    })
  });
  return parseResponse(r);
}

// 4) Separate outbound SMS endpoint (not in current Postman collection)
async function sendOutboundSms() {
  const url = new URL("https://api.pbxme.com/astppsend-sms");
  url.searchParams.set("username", "YOUR_USERNAME");
  url.searchParams.set("password", "YOUR_PASSWORD");
  url.searchParams.set("destination", "+19175550100");
  url.searchParams.set("callerid", "YOUR_CALLER_ID");
  url.searchParams.set("message", "Hello from PBXMe");
  url.searchParams.set("sms", "1");
  url.searchParams.set("whatsapp", "0");

  const r = await fetch(url.toString(), { method: "GET" });
  return r.text();
}

(async () => {
  const auth = await login();
  const id = auth.id;
  const accountToken = auth.account_token;
  const sessionXAuthToken = auth["x-auth-token"];

  const SESSION_HEADERS = {
    "x-auth-token": sessionXAuthToken,
    "Content-Type": "application/json"
  };

  const emailForward = await addSmsForwardToEmail(
    id,
    accountToken,
    "+447911123456",
    "alerts@yourdomain.com",
    SESSION_HEADERS
  );
  console.log("Email forwarding result:", emailForward);

  const webhookForward = await addSmsForwardToWebhook(
    id,
    accountToken,
    "+447911123456",
    "https://example.com/api?from={CallerID}&text={SMS_TEXT}&to={SMS_DST_ADDR}",
    SESSION_HEADERS
  );
  console.log("Webhook forwarding result:", webhookForward);

  const outbound = await sendOutboundSms();
  console.log("Outbound SMS response:", outbound);
})();