Onramp Integration

const axios = require('axios');
const crypto = require('crypto');

const BASE_URL = 'https://ramp.hexarails.ai';
const API_KEY = process.env.COINUT_API_KEY;
const API_SECRET = process.env.COINUT_API_SECRET;

// ── Authentication Helper ─────────────────────────────
function createSignature(method, path, body = {}) {
  const timestamp = Math.floor(Date.now() / 1000).toString();
  const nonce = crypto.randomUUID();
  const host = new URL(BASE_URL).host;
  const requestBody = method.toUpperCase() === 'GET' ? '' : JSON.stringify(body);
  const bodyHash = requestBody
    ? crypto.createHash('sha256').update(requestBody).digest('hex')
    : '';
  const canonical = [
    method.toUpperCase(),
    host,
    path,
    '',
    bodyHash,
    timestamp,
    nonce,
  ].join('\n');
  const signature = crypto.createHmac('sha256', API_SECRET).update(canonical).digest('hex');
  return { timestamp, nonce, signature };
}

async function coinutRequest(method, path, body = {}) {
  const { timestamp, nonce, signature } = createSignature(method, path, body);

  return axios({
    method,
    url: `${BASE_URL}${path}`,
    headers: {
      'Content-Type': 'application/json',
      'X-API-Key': API_KEY,
      'X-Timestamp': timestamp,
      'X-Nonce': nonce,
      'X-Signature': signature,
    },
    data: body,
  });
}

// ── Step 1: Create Customer ──────────────────────────
async function createCustomer(name, email, externalId) {
  const { data } = await coinutRequest('POST', '/customer/create', {
    name,
    email,
    type: 'DEPOSITOR',
    isIndividual: true,
    externalId, // Links to your internal user system
  });
  return data.customerId;
}

// ── Step 3: Create Virtual Account ───────────────────
async function createVirtualAccount(customerId, currency) {
  const { data } = await coinutRequest('POST', '/virtual-account/create', {
    customerId,
    currency, // 'AUD', 'EUR', 'SGD','USD' or 'GBP',etc
  });
  return data;
}

// ── Step 4: Add Crypto Address ───────────────────────
async function addCryptoAddress(customerId, address, network) {
  const { data } = await coinutRequest('POST', '/crypto-address/add', {
    customerId,
    currency: 'USDT', // 'USDT','USDC'
    address,
    label: 'Customer Wallet',
    network, // 'ETH' .'TRX' or 'MATIC'
  });
  return data.cryptoAddressId;
}

// ── Step 5: Create Onramp Flow ───────────────────────
async function createOnrampFlow(customerId, fiatCurrency, cryptoAddressId) {
  const { data } = await coinutRequest('POST', '/autoramp-flow/onramp', {
    from: {
      customerId,
      currency: fiatCurrency,
    },
    to: cryptoAddressId,
  });
  return data;
}

// ── Full Onramp Orchestration ────────────────────────
async function executeOnramp(user) {
  try {
    // 1. Create customer
    const customerId = await createCustomer(user.name, user.email, user.id);
    console.log('Customer created:', customerId);

    // 2. Wait for KYC approval (webhook or polling)
    // See webhook handler below

    // 3. Create virtual account
    const va = await createVirtualAccount(customerId, 'AUD');
    console.log('VA created:', va.payId);

    // 4. Add crypto address
    const cryptoAddressId = await addCryptoAddress(
      customerId,
      user.walletAddress,
      'TRX' // TRC-20
    );

    // 5. Create autoramp flow
    const flow = await createOnrampFlow(customerId, 'AUD', cryptoAddressId);
    console.log('Onramp flow created:', flow.flowId);

    return {
      customerId,
      payId: va.payId,
      bsb: va.bsb,
      accountNumber: va.accountNumber,
      flowId: flow.flowId,
    };
  } catch (error) {
    console.error('Onramp failed:', error.response?.data || error.message);
    throw error;
  }
}

// ── Webhook Handler ──────────────────────────────────
const express = require('express');
const app = express();
app.use(express.json());

app.post('/webhooks/coinut', (req, res) => {
  const { event, data } = req.body;

  switch (event) {
    case 'CUSTOMER_APPROVED':
      console.log('Customer KYC approved:', data.customerId);
      // Proceed to create VA and flow
      break;

    case 'DEPOSIT_RECEIVED':
      console.log('Deposit received:', data.amount, data.currency);
      break;

    case 'DEPOSIT_APPROVED':
      console.log('Deposit approved, trade will execute');
      break;

    case 'TRADE_SETTLED':
      console.log('Trade settled! TX hash:', data.txHash);
      // Notify customer
      break;

    case 'CUSTOMER_REJECTED':
      console.log('Customer KYC rejected:', data.customerId, data.reason);
      break;
  }

  res.status(200).send('OK');
});

app.listen(3000, () => console.log('Webhook server listening on port 3000'));