Bookings API

https://deepcontext.app/api/public/tenants/{slug}

const BASE = "https://deepcontext.app/api/public/tenants/YOUR_SLUG";

// 1. Services, their questions, and the tenant's timezone.
const config = await fetch(BASE).then((r) => r.json());
const service = config.services[0];

// 2. Open start times. UTC instants, already filtered for notice/horizon/buffers.
const from = new Date().toISOString();
const to = new Date(Date.now() + 60 * 86_400_000).toISOString();
const { slots } = await fetch(
  `${BASE}/availability?service_id=${service.id}` +
    `&from=${encodeURIComponent(from)}&to=${encodeURIComponent(to)}`,
).then((r) => r.json());

// 3. Submit. One key per booking attempt — reuse it if you retry the SAME booking,
//    generate a new one when the customer picks a different slot.
const res = await fetch(`${BASE}/bookings`, {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Idempotency-Key": crypto.randomUUID(),
  },
  body: JSON.stringify({
    service_id: service.id,
    starts_at: slots[0],
    customer_name: "Jane Customer",
    customer_email: "jane@example.com",
    customer_phone: "+14155550123",
    form_data: { "22222222-2222-4222-8222-222222222222": "Wool" },
    turnstile_token: tokenFromWidget,
    website: "", // honeypot — must stay empty
  }),
});

const body = await res.json();
if (res.status === 201) {
  showSuccess(body.booking.status, body.acknowledgment);
}

function normalizeAnswers(fields, answers) {
  const values = {};
  const errors = {};

  for (const field of fields) {
    const raw = answers[field.id];

    // An unchecked box is a real `false`, not a missing answer, so a boolean is
    // never blank and can never fail `required`. Anything that isn't a boolean is
    // an error, not a falsy value — coercing it would store `false` for an answer
    // the server rejects.
    if (field.type === "boolean") {
      if (raw == null) values[field.id] = false;
      else if (typeof raw === "boolean") values[field.id] = raw;
      else errors[field.id] = "Choose yes or no.";
      continue;
    }

    if (raw == null || (typeof raw === "string" && raw.trim() === "")) {
      if (field.required) errors[field.id] = "This is required.";
      continue; // omit optional blanks — never send ""
    }

    if (field.type === "number") {
      // Inputs give you strings; both a number and a numeric string are accepted.
      // Past 2^53−1 a JS number silently rounds, so the server rejects it.
      const n = Number(raw);
      if (!Number.isFinite(n) || Math.abs(n) > Number.MAX_SAFE_INTEGER) {
        errors[field.id] = "Enter a valid number.";
      } else {
        values[field.id] = n;
      }
    } else if (field.type === "select") {
      const value = typeof raw === "string" ? raw.trim() : null;
      if (value === null || !(field.options ?? []).includes(value)) {
        errors[field.id] = "Choose one of the listed options.";
      } else {
        values[field.id] = value;
      }
    } else if (field.type === "date") {
      // Round-tripping catches dates the regex accepts but the calendar doesn't:
      // 2026-02-31 rolls forward to March.
      const value = typeof raw === "string" ? raw.trim() : "";
      const real =
        /^\d{4}-\d{2}-\d{2}$/.test(value) &&
        new Date(`${value}T00:00:00.000Z`).toISOString().slice(0, 10) === value;
      if (!real) errors[field.id] = "Enter a valid date.";
      else values[field.id] = value;
    } else {
      // Don't coerce: the server requires a string here, so `String(raw)` would
      // accept an answer it rejects.
      if (typeof raw !== "string") errors[field.id] = "Enter a valid answer.";
      else values[field.id] = raw.trim();
    }
  }

  return { values, errors };
}

{ "error": { "code": "invalid_request", "message": "Human-readable explanation" } }