The fulfillment rail, as an API.

# Sandbox keys resolve ONLY to synthetic patients — no BAA needed to start.
curl https://api.neolife.health/v1/orders \
  -H "Authorization: Bearer nk_sandbox_7f21a9c4e0b8…" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: $(uuidgen)" \
  -d '{
    "clinicId": "cln_8f21",
    "patientRef": "pt_4b9c",
    "items": [{ "productId": "prod_tdf30", "quantity": 1, "sig": "Apply nightly" }],
    "shipping": { "method": "standard", "to": "addr_77a2" }
  }'

# → 201 Created  { "id": "ord_19d4", "status": "draft", "approvalRequired": true }

import { Neolife, verifyWebhook, NeolifeError } from "@neolifehealth/sdk";
import crypto from "node:crypto";

// A nk_sandbox_ key => client.mode === "sandbox" (synthetic patients only).
const client = new Neolife({ apiKey: process.env.NEOLIFE_API_KEY! });

// Create → approve (provider-gated) → submit. The Idempotency-Key makes the
// retry safe: a double-submit would be a second physical shipment.
const draft = await client.orders.create({
  clinicId: "cln_8f21",
  patientRef: "pt_4b9c",
  items: [{ productId: "prod_tdf30", quantity: 1, sig: "Apply nightly" }],
  shipping: { method: "standard", to: "addr_77a2" },
});

await client.orders.approve(draft.id);                       // a licensed provider signs
await client.orders.submit(draft.id, {                       // idempotent by key
  idempotencyKey: crypto.randomUUID(),
});

// Verify an incoming webhook — pass the RAW body, before JSON.parse.
app.post("/webhooks", express.raw({ type: "application/json" }), (req, res) => {
  try {
    const event = verifyWebhook(req.body, req.headers, process.env.NEOLIFE_WEBHOOK_SECRET!);
    console.log(event.type, event.data);   // PHI-free: ids + status only
    res.sendStatus(204);
  } catch (err) {
    res.sendStatus(400);                     // bad signature => reject
  }
});

# Default mode is SANDBOX. Every command prints a persistent SANDBOX / LIVE badge.
neolife login --key nk_sandbox_7f21a9c4e0b8…

neolife keys create --name "shopify-integration" --mode sandbox --type secret
neolife orders list --status draft
neolife catalog list

# Draft only — there is no --submit. A provider approves server-side.
neolife orders create --items '[{"productId":"prod_tdf30","quantity":1}]'

# Fire a correctly Standard-Webhooks-signed event at your local receiver — no relay.
neolife trigger order.shipped \
  --forward-to http://localhost:3000/webhooks \
  --secret whsec_your_signing_secret