# 1. Upload the signed LoA PDF. The response `data.url` is a short-lived signed
#    URL (1-hour default). Pass `ttl_ms` to keep it valid long enough for the
#    carrier to fetch it during submission — here, 24 hours.
curl -X POST "https://api.orbit.devotel.io/api/v1/files/upload?ttl_ms=86400000" \
  -H "X-API-Key: dv_live_sk_your_key_here" \
  -F "file=@./loa.pdf;type=application/pdf"
# => { "data": { "id": "file_...", "url": "https://storage.googleapis.com/...", ... } }

# 2. Submit the port request, passing the uploaded `data.url` as loaFileUrl.
curl -X POST https://api.orbit.devotel.io/api/v1/numbers/porting \
  -H "X-API-Key: dv_live_sk_your_key_here" \
  -H "Content-Type: application/json" \
  -d '{
    "numbers": ["+14155551234", "+14155551235"],
    "currentCarrier": "MessageBird",
    "country": "US",
    "authorizedSigner": "Your Name",
    "accountNumber": "123456789",
    "accountPin": "1234",
    "loaFileUrl": "https://storage.googleapis.com/.../loa.pdf?X-Goog-Signature=..."
  }'

const messagebird = require('messagebird')('your_access_key');

await messagebird.messages.create({
  originator: '+18005551234',
  recipients: ['+14155552671'],
  body: 'Hello from MessageBird!',
});

import { Devotel } from '@devotel-orbit/node'

const orbit = new Devotel({ apiKey: 'dv_live_sk_xxxx' })

await orbit.messages.send({
  channel: 'sms',
  to: '+14155552671',
  body: 'Hello from Orbit!',
  webhook_url: 'https://yourapp.com/webhooks/sms-status',
})

{
  "id": "mb_msg_03692",
  "recipient": "+14155552671",
  "originator": "+18005551234",
  "status": "delivered"
}

{
  "id": "evt_msg_001",
  "type": "message.delivered",
  "created_at": "2026-09-19T12:00:00Z",
  "data": {
    "message_id": "msg_abc123",
    "channel": "sms",
    "from": "+18005551234",
    "to": "+14155552671",
    "status": "delivered"
  }
}

// MessageBird (before) — validated nothing, consumed unsigned JSON
const delivery = JSON.parse(req.body);

// Orbit (after) — verify HMAC-SHA256 over the raw body first, then consume
import { verifyWebhookSignature } from '@devotel-orbit/node'
const valid = verifyWebhookSignature(rawBody, signature, 'whsec_your_secret')

curl -X POST https://api.orbit.devotel.io/api/v1/flows \
  -H "X-API-Key: dv_live_sk_..." \
  -H "Content-Type: application/json" \
  -d '{
    "name": "Welcome (migrated from Flow Builder)",
    "trigger_type": "event",
    "definition": {
      "trigger": { "type": "event", "event": "contact.created" },
      "nodes": [
        {
          "id": "gate_source",
          "type": "condition",
          "data": { "field": "source", "operator": "equals", "value": "signup_form" }
        },
        {
          "id": "welcome_sms",
          "type": "sendSms",
          "data": {
            "to": "{{phone}}",
            "body": "Welcome to Acme, {{first_name}}! Reply HELP for help, STOP to opt out."
          }
        },
        { "id": "wait_24h", "type": "delay", "data": { "amount": 24, "unit": "hours" } },
        {
          "id": "followup_email",
          "type": "sendEmail",
          "data": {
            "to": "{{email}}",
            "subject": "Getting started with Acme",
            "body": "Hi {{first_name}}, here are three things worth doing first."
          }
        }
      ],
      "edges": [
        { "source": "gate_source", "sourceHandle": "yes", "target": "welcome_sms" },
        { "source": "welcome_sms", "target": "wait_24h" },
        { "source": "wait_24h", "target": "followup_email" }
      ]
    }
  }'

// Start OTP delivery
const request = await messagebird.verify.create({
  recipient: '+14155552671',
  originator: 'Acme',
  template: 'Your code is %token',
});

// Check the code the user typed
const check = await messagebird.verify.verify(request.id, '123456');

const sent = await orbit.verify.send('+14155552671', 'sms');

const result = await orbit.verify.check({
  verification_id: sent.data.verification_id,
  code: '123456',
});