First payment

export API_BASE_URL="https://api.staging.blackbird.xyz/flynet/v1"
export ACCESS_TOKEN="..."        # OAuth access token (from /oauth/token)
export MERCHANT_ID="..."         # from your onboarding email; required
export CUSTOMER_USER_ID="..."    # the member paying; their UUID, which equals the token's sub claim / the id from /users/me

const res = await fetch(`${process.env.API_BASE_URL}/payment_intents`, {
  method: "POST",
  headers: {
    Authorization: `Bearer ${process.env.ACCESS_TOKEN!}`,
    "Content-Type": "application/json",
  },
  body: JSON.stringify({
    flynet_merchant_id: process.env.MERCHANT_ID,
    customer_user_id: process.env.CUSTOMER_USER_ID,
    amount: { value: "1000000000000000000", currency: "FLY" },
    description: "First payment recipe",
    idempotency_key: `recipe-first-payment-${Date.now()}`,
  }),
});

const intent = await res.json();
console.log(intent.id, intent.status);

curl -X POST "$API_BASE_URL/payment_intents" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{
    \"flynet_merchant_id\": \"$MERCHANT_ID\",
    \"customer_user_id\": \"$CUSTOMER_USER_ID\",
    \"amount\": { \"value\": \"1000000000000000000\", \"currency\": \"FLY\" },
    \"description\": \"First payment recipe\",
    \"idempotency_key\": \"recipe-first-payment-$(date +%s)\"
  }"

{
  "id": "{uuid}",
  "status": "pending",
  "amount": { "value": "1000000000000000000", "currency": "FLY" }
}

const intentId = intent.id; // from Step 1

const res = await fetch(
  `${process.env.API_BASE_URL}/payment_intents/${intentId}/confirm`,
  {
    method: "POST",
    headers: {
      Authorization: `Bearer ${process.env.ACCESS_TOKEN!}`,
      "Content-Type": "application/json",
    },
    body: JSON.stringify({ user_id: process.env.CUSTOMER_USER_ID }),
  },
);

const confirmed = await res.json();
console.log(confirmed.status, confirmed.paid_at);

export INTENT_ID="{the_id_from_step_1}"

curl -X POST "$API_BASE_URL/payment_intents/$INTENT_ID/confirm" \
  -H "Authorization: Bearer $ACCESS_TOKEN" \
  -H "Content-Type: application/json" \
  -d "{ \"user_id\": \"$CUSTOMER_USER_ID\" }"

{
  "id": "{uuid}",
  "status": "paid",
  "paid_at": "2026-05-11T20:01:00Z"
}

const res = await fetch(
  `${process.env.API_BASE_URL}/payment_intents/${intentId}`,
  { headers: { Authorization: `Bearer ${process.env.ACCESS_TOKEN!}` } },
);

const verified = await res.json();
console.log(verified.status, verified.paid_at);

curl "$API_BASE_URL/payment_intents/$INTENT_ID" \
  -H "Authorization: Bearer $ACCESS_TOKEN"

const res = await fetch(
  `${process.env.API_BASE_URL}/payment_intents/${intentId}/refund`,
  {
    method: "POST",
    headers: { Authorization: `Bearer ${process.env.ACCESS_TOKEN!}` },
  },
);

const refunded = await res.json();
console.log(refunded.status); // "refunded"

curl -X POST "$API_BASE_URL/payment_intents/$INTENT_ID/refund" \
  -H "Authorization: Bearer $ACCESS_TOKEN"