import { createVerifiedTransport } from "@darknyx/sdk/transport-node";

// Obtain these pins from the independently approved release and finalized
// VaultConfig, not from the server you are about to verify.
const transport = await createVerifiedTransport({
  baseUrl: process.env.DARKNYX_URL!,
  deps: verifierDependencies,
  expectedComposeHash,
  expectedSignerSetSha256,
  createWebSocket,
});

const tokenResponse = await transport.fetch(
  new URL("/auth/token", process.env.DARKNYX_URL!),
  {
    method: "POST",
    headers: { "content-type": "application/json" },
    body: JSON.stringify({ api_key, api_secret, passphrase }),
  },
);
const { access_token } = (await tokenResponse.json()) as {
  access_token: string;
};

const instruments = await transport.fetch(
  new URL("/instruments", process.env.DARKNYX_URL!),
);

const account = await transport.fetch(
  new URL("/account", process.env.DARKNYX_URL!),
  { headers: { authorization: `Bearer ${access_token}` } },
);
// Pass transport.fetch and transport.webSocketFactory to the SDK order and
// stream clients so every private operation stays on the verified transport.