Owner API

Read the current tenant.

Update business fields. Slug is NOT patchable here (set at registration).

Business name (max 200 chars).

Business type (max 80 chars).

Street address (max 200 chars).

Address line 2 (max 200 chars).

City (max 120 chars).

Province/state (max 120 chars).

Postal code (max 40 chars).

Country (max 120 chars).

Display phone on the public page (max 40 chars).

Contact email (max 200 chars).

Website URL (max 300 chars).

Public description (max 2000 chars).

Logo URL (max 500 chars).

Cover image URL (max 500 chars).

IANA timezone (max 80 chars).

Currency code (max 8 chars, e.g. CAD).

ISO country code (max 8 chars).

How far ahead customers can book (1-365).

Minimum notice in hours (0-168).

Buffer between bookings (0-120).

Concurrent bookings per slot (1-50).

0 = account required, 1 = guest checkout allowed.

0 = no deposit, 1 = deposit required at booking.

0-100 percent of price charged as deposit.

Free-cancellation window in hours (0-720).

Free-text policy (max 4000 chars).

Custom domain CNAME target (max 200 chars).

Template slug. The Zod schema accepts any 1-64 char string; the AI site-content mock currently only knows atelier / salon / spa / clinic. Other slugs are stored as-is and rendered by the dashboard.

Hex color for template accent. Use null to clear.

List services for the current tenant (includes inactive).

Create a service.

Service name (1-200 chars).

One or two sentences (max 2000 chars).

5-480.

Price in minor units (cents). 0-100000.

Optional 0-100 percent.

1-365, optional.

0-168, optional.

0-120. Default 0.

1-50. Default 1.

Optional image URL.

Default 1. 0 hides from booking page.

Default 1. 0 means in-person only.

Display order. Lower = earlier.

JSON-encoded custom form schema (max 8000 chars).

Update a service. Any subset of the create fields.

Soft-delete. Flips isActive to 0; historical bookings are preserved.

Bulk-reorder. Body: { order: ["sv_a", "sv_b", ...] }. Sets order_index to position in array.

List all staff profiles for the current tenant.

Create a staff profile. Optionally links to an existing users row by email.

Display name (1-120 chars).

If present and the email exists, the staff profile is linked to that user. Otherwise a new users row is created.

Job title (max 120 chars).

1-2 sentences. Shown on the public page (max 2000 chars).

Optional photo URL (max 500 chars).

Hex color used on the calendar (default #6366F1).

Default 1. 0 hides from public booking.

Read a staff profile, including their workingHours array.

Update a staff profile (no userEmail field). Any subset of displayName, title, bio, avatarUrl, color, isBookable.

Soft-delete. Flips isBookable to 0; the staff member disappears from public booking.

Replace the staff member's weekly schedule.

Array of { dayOfWeek: 0-6, isOpen: 0|1, openTime: HH:MM, closeTime: HH:MM }.

List bookings. Supports filters.

One of: pending, confirmed, completed, cancelled, no_show.

Filter start.

Filter end.

Default 50, max 200.

Default 0.

Aggregate stats for the current tenant: today's bookings, upcoming (7d), no-show count, week revenue (all-time cents).

Manual-create a booking from the dashboard. Either customerId or newCustomer is required.

Existing customer id (mutually exclusive with newCustomer).

Inline new customer: { firstName, lastName?, email, phone? }.

Booking-specific notes (max 2000 chars).

pending | confirmed | completed | cancelled | no_show. Defaults to confirmed.

Read one booking, with joined service, staff, and customer objects.

Update a booking. Any subset of notes, internalNotes, status.

Transition pending → confirmed.

Transition to cancelled (sets cancelled_at = now). Use /api/payments/:id/refund separately to refund the deposit.

Transition confirmed → completed.

Transition confirmed → no_show (sets no_show_at = now).

Append a timestamped internal note. Body: { note: string }.

Move a booking to a new start time. Body: { newStartDatetime, staffProfileId? }.

List customers. Supports q (LIKE on first_name/last_name/email), tag, blacklisted=1, limit, offset.

Returns a CSV download. Headers: first_name, last_name, email, phone, total_bookings, total_spent, no_show_count, is_blacklisted.

Create a customer.

First name (1-100 chars).

Last name (max 100 chars).

Email (max 200 chars).

Phone (max 40 chars).

Internal notes (max 4000 chars).

Up to 50 tags (each max 50 chars).

Read a customer (includes the 25 most recent bookings).

Update a customer. Fields: firstName, lastName, email, phone, notes, tags, isBlacklisted, blacklistReason, birthday, referralSource.

GDPR anonymize: blanks PII fields but keeps the row for audit.

All bookings for this customer.

Append a timestamped note. Body: { note: string }.

Start Stripe Connect onboarding. Returns a redirect URL (onboardingUrl) and accountId.

Read the current Stripe connection: connected, mode (test|live), chargesEnabled, payoutsEnabled, detailsSubmitted.

Disconnect Stripe. Clears stripe_account_id and stripe_charges_enabled.

Create a Stripe PaymentIntent for a booking. Returns clientSecret for the Stripe.js front-end.

full or deposit. Defaults to deposit if the booking has a non-zero deposit_amount, otherwise full.

Optional. Forwarded to Stripe receipt.

Optional. Forwarded to Stripe receipt (max 200 chars).

Read-after-write check. The webhook is the source of truth; this endpoint exists for synchronous UX. Body: { bookingId }. Returns the booking's status and payment_status.

Aggregate payments by status. Returns rows of { status, c, total } where total is SUM(amount) in cents.

Read a single payment.

Refund a payment. Body: { amount?, reason? }. amount is in MAJOR units (dollars); omit for a full refund. In test mode the database is updated directly; in live mode the Stripe refund is created.

Refund amount in major units (dollars). Omit for a full refund.

Free-text reason (max 500 chars).