import { readFileSync } from "node:fs";
import { RoxRegister } from "@rox-register/sdk"; // 0.1.2+

const rox = new RoxRegister({
  apiKey: process.env.RR_API_KEY,      // key with the sign scope
  requestSigningKey: {
    kid: "ish-prod-2026-01",
    privateJwk: JSON.parse(readFileSync("request-key.jwk", "utf8")),
  },
});

const envelope = await rox.createEnvelope({
  file: readFileSync("agreement.pdf"),        // raw PDF bytes
  filename: "agreement.pdf",
  name: "Consulting agreement",
  recordType: "contract",
  signingOrder: "sequential",                 // or "parallel"
  message: "Please review and sign.",
  expiresAt: "2026-10-01T00:00:00Z",          // optional
  signers: [
    { name: "Amira Hassan", email: "amira@example.com" },
    { name: "Omar Farouk", email: "omar@example.com" },
  ],
  fields: [
    // PDF points, origin bottom-left, 1-based pages; signerIndex references
    // the signers array above.
    { signerIndex: 0, kind: "signature", page: 1, x: 72, y: 90, w: 180, h: 48 },
    { signerIndex: 1, kind: "signature", page: 1, x: 320, y: 90, w: 180, h: 48 },
  ],
  idempotencyKey: "env-agreement-2026-001",   // one key per envelope
});
// envelope.envelope_id       -> env_<ULID>, store it
// envelope.status            -> "sent" (creation IS the send)
// envelope.source_digest_hex -> sha256 of YOUR uploaded source PDF

# The JWS covers the sha256 of the RAW multipart bytes, so build the body
# yourself with a fixed boundary instead of letting curl invent one.
SIGNERS='[{"name":"Amira Hassan","email":"amira@example.com","tier":"ses","order_index":0}]'
FIELDS='[{"signer_index":0,"kind":"signature","page":1,"x":72,"y":90,"w":180,"h":48}]'
B="rr-$(uuidgen | tr -d '-')"
{
  printf -- '--%s\r\nContent-Disposition: form-data; name="name"\r\n\r\nConsulting agreement\r\n' "$B"
  printf -- '--%s\r\nContent-Disposition: form-data; name="record_type"\r\n\r\ncontract\r\n' "$B"
  printf -- '--%s\r\nContent-Disposition: form-data; name="signing_order"\r\n\r\nsequential\r\n' "$B"
  printf -- '--%s\r\nContent-Disposition: form-data; name="signers"\r\n\r\n%s\r\n' "$B" "$SIGNERS"
  printf -- '--%s\r\nContent-Disposition: form-data; name="fields"\r\n\r\n%s\r\n' "$B" "$FIELDS"
  printf -- '--%s\r\nContent-Disposition: form-data; name="file"; filename="agreement.pdf"\r\nContent-Type: application/pdf\r\n\r\n' "$B"
  cat agreement.pdf
  printf -- '\r\n--%s--\r\n' "$B"
} > /tmp/rr-envelope

TS=$(($(date +%s) * 1000)); NONCE=$(uuidgen | tr '[:upper:]' '[:lower:]')
BODY_HASH=$(shasum -a 256 /tmp/rr-envelope | cut -d' ' -f1)
printf 'RRv1\nPOST\n/v1/envelopes\n%s\n%s\n%s' "$BODY_HASH" "$TS" "$NONCE" > /tmp/rr-input
SIG=$(openssl pkeyutl -sign -inkey request-key.pem -rawin -in /tmp/rr-input \
  | basenc --base64url -w0 | tr -d '=')

curl -sS -X POST https://api.roxregister.com/v1/envelopes \
  -H "Authorization: Bearer $RR_API_KEY" \
  -H "Content-Type: multipart/form-data; boundary=$B" \
  -H "X-RR-Key-Id: ish-prod-2026-01" -H "X-RR-Timestamp: $TS" \
  -H "X-RR-Nonce: $NONCE" -H "X-RR-Signature: $SIG" \
  --data-binary @/tmp/rr-envelope
# 201: envelope created in status sent; store envelope_id and
# source_digest_hex (the sha256 of the uploaded source PDF).

const view = await rox.getEnvelope(envelope.envelope_id);
for (const signer of view.signers) {
  // signer.signing_url opens the hosted signing page for THAT signer.
  // Stable across re-fetches; null once the signer or envelope is terminal.
  await sendOverYourChannel(signer.email, signer.signing_url);
}

import { constructWebhookEvent } from "@rox-register/sdk";

// In your webhook handler (secret from createWebhook):
const event = constructWebhookEvent({ secret, headers, rawBody });
switch (event.type) {
  case "envelope.signer_signed":   // one signer done
  case "envelope.signer_declined": // envelope closes as declined, hold released
  case "envelope.completed":       // last signer signed, assembly starts
    break;
  case "envelope.assembled": {
    // The final signed document + completion certificate are sealed records:
    // event.data.contract_record_id / certificate_record_id (and their
    // rr_ref_... references). Fetch the downloads now (next step).
    break;
  }
  case "envelope.voided":
  case "envelope.expired":
    break; // terminal without a signature; the hold is released
}

const done = await rox.getEnvelope(envelope.envelope_id);
// done.completed_record_id    -> sealed record of the FINAL SIGNED DOCUMENT
// done.certificate_record_id  -> sealed record of the COMPLETION CERTIFICATE
// done.final_file_url         -> presigned download (expires)
// done.certificate_file_url   -> presigned download (expires)

const finalPdf = Buffer.from(
  await (await fetch(done.final_file_url)).arrayBuffer(),
);
const certificate = Buffer.from(
  await (await fetch(done.certificate_file_url)).arrayBuffer(),
);
// Archive BOTH in your own systems now: the stored copies leave Rox
// storage after 1 day. The records and their proofs are permanent.

<div id="signing"></div>
<script src="https://sign.roxregister.com/embed.js"></script>
<script>
  const handle = RoxSign.mount({
    container: "#signing",          // Element or selector
    url: signer.signing_url,        // from GET /v1/envelopes/{id}
    height: "640px",                // optional, default 640px
    onEvent: (msg) => {
      // msg = { type: "rr-sign", event, envelope_id?, detail? }
      if (msg.event === "signed") showSuccessScreen();
      if (msg.event === "error") showFallbackLink(signer.signing_url);
    },
  });
  // later, e.g. on route change: handle.unmount();
</script>

const envelope = await rox.createEnvelope({
  // ... file, name, recordType, signingOrder, signers as above ...
  branding: {
    primaryHex: "#1c5cab",       // exact #rrggbb; buttons, accents, links
    logoHidden: true,            // hide the Rox mark on the ceremony chrome
    nameDisplay: "Acme Insurance", // shown to signers instead of your legal name
  },
});
// Raw API: a `branding` JSON text part on POST /v1/envelopes:
//   { "primary_hex": "#1c5cab", "logo_hidden": true,
//     "name_display": "Acme Insurance" }
// Echoed back (normalized) on GET /v1/envelopes/{id} as `branding`.