Redemption

const BASE = "https://api.t3sa.com/v1"; // proposed URL
const auth = { Authorization: `Bearer ${process.env.TESA_API_KEY}` };

async function tesa(path: string, init: RequestInit = {}) {
  const res = await fetch(`${BASE}${path}`, {
    ...init,
    headers: { ...auth, "Content-Type": "application/json", ...init.headers },
  });
  const body = await res.json();
  if (!res.ok) throw new Error(`${body.erro.codigo}: ${body.erro.mensagem}`);
  return body;
}

// 1. Request (propose scope)
const resgate = await tesa("/resgates", {
  method: "POST",
  headers: { "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({
    valor: "150000.00",
    carteira_destino_id: "cart_3k9d",
    referencia_interna: "folha-2026-09",
  }),
});

// 2. Approve (admin scope, in a restricted environment)
const aprovado = await tesa(`/resgates/${resgate.id}/aprovar`, {
  method: "POST",
  headers: { "Idempotency-Key": crypto.randomUUID() },
  body: JSON.stringify({ comentario: "Folha de setembro" }),
});

// 3. Send each unsigned transaction to the custodian
for (const tx of aprovado.transacoes) {
  await enviarAoCustodiante(tx.rede, tx.payload_nao_assinado);
}

// 4. Wait for the resgate.concluido webhook, or poll GET /resgates/{id}