<?php

$baseUrl = getenv('XPAYR_BASE_URL') ?: 'https://xpayr.com/api/v1';
$secretKey = getenv('XPAYR_SECRET_KEY') ?: 'sk_test_xxx';

$payload = [
    'amount' => 49.90,
    'currency' => 'USDT',
    'network' => 'tron-mainnet',
    'metadata' => [
        'order_id' => 'ORDER-1001',
        'customer_id' => 'cus_123',
    ],
    'success_url' => 'https://example.com/paid',
    'cancel_url' => 'https://example.com/cancel',
    'ipn_callback_url' => 'https://example.com/webhooks/xpayr',
];

$ch = curl_init($baseUrl . '/payments');
curl_setopt_array($ch, [
    CURLOPT_POST => true,
    CURLOPT_RETURNTRANSFER => true,
    CURLOPT_HTTPHEADER => [
        'Authorization: Bearer ' . $secretKey,
        'Content-Type: application/json',
    ],
    CURLOPT_POSTFIELDS => json_encode($payload),
]);

$raw = curl_exec($ch);
$status = curl_getinfo($ch, CURLINFO_HTTP_CODE);
$error = curl_error($ch);
curl_close($ch);

if ($raw === false || $status >= 400) {
    fwrite(STDERR, 'XPayr API error: ' . ($error ?: $raw) . PHP_EOL);
    exit(1);
}

$session = json_decode((string) $raw, true);
echo 'Session: ' . ($session['id'] ?? '-') . PHP_EOL;
echo 'Checkout: ' . ($session['payment_url'] ?? '-') . PHP_EOL;