// 1. Company Verification - sync
const companyResult = await fetch(
  `${BASE_URL}/api/gateway/execute/${PROJECT_HASH}/api`,
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-API-KEY": API_KEY,
      "X-SYNC-TIMEOUT": "60000"
    },
    body: JSON.stringify({
      company_name: "Acme Holdings Ltd",
      registration_number: "12345678",
      country: "GB"
    })
  }
);
const companyData = await companyResult.json();

// 2. Person Verification - async (for each director/UBO)
const personInit = await fetch(
  `${BASE_URL}/api/gateway/execute/${PROJECT_HASH}/kyc/init`,
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-API-KEY": API_KEY
    },
    body: JSON.stringify({
      first_name: "Jane",
      last_name: "Smith",
      country: "GB",
      external_reference: "YOUR-REF-2026-0123"
    })
  }
);
const { tokens } = await personInit.json();
const verificationUrl = `${BASE_URL}/${PROJECT_HASH}/?t=${tokens.start}`;
// Send verificationUrl to the user via email or in-app

// 3. Screening - sync (ongoing monitoring)
const screenResult = await fetch(
  `${BASE_URL}/api/gateway/execute/${PROJECT_HASH}/screening/api`,
  {
    method: "POST",
    headers: {
      "Content-Type": "application/json",
      "X-API-KEY": API_KEY,
      "X-SYNC-TIMEOUT": "15000"
    },
    body: JSON.stringify({
      name: "John Smith",
      date_of_birth: "1975-03-20",
      country: "GB",
      entity_type: "person",
      categories: ["pep", "sanctions", "adverse_media", "watchlist"]
    })
  }
);

async function pollForResults(pullToken, options = {}) {
  const {
    baseUrl = "https://instance.prod.onboardapp.io",
    maxAttempts = 30,
    initialDelay = 10_000, // 10 seconds
    maxDelay = 30_000, // 30 seconds
    backoffAfter = 12 // switch to maxDelay after 12 attempts (2 min)
  } = options;

  for (let attempt = 0; attempt < maxAttempts; attempt++) {
    const response = await fetch(
      `${baseUrl}/api/gateway/sharable-payload/${pullToken}`
    );

    if (response.status === 200) {
      return await response.json();
    }

    if (response.status === 404) {
      throw new Error("Invalid or expired pull token");
    }

    if (response.status !== 204) {
      throw new Error(`Unexpected status: ${response.status}`);
    }

    // 204 - still processing
    const delay = attempt < backoffAfter ? initialDelay : maxDelay;
    await new Promise((resolve) => setTimeout(resolve, delay));
  }

  throw new Error(`Polling timed out after ${maxAttempts} attempts`);
}

// Usage
try {
  const results = await pollForResults("eyJhbGciOiJIUzI1NiJ9.pull-token...");
  console.log("Verification complete:", results.processing_status);
} catch (err) {
  console.error("Polling failed:", err.message);
}