Auth
/api/v1/auth/*
Sessions, login, organizations, password reset (better-auth)
REST API for shifts, staff, organizations, punch approvals, reservations, and more. The web app runs on a separate frontend — use this host for programmatic access and health checks.
All routes below are prefixed with /api/v1. Authentication uses session cookies from the web app.
/api/v1/auth/*
Sessions, login, organizations, password reset (better-auth)
/api/v1/shifts
Shift CRUD, requests, punch-in/out, approvals
/api/v1/users
Staff listing, create, update, org membership
/api/v1/organizations
List, create, and switch active organization
/api/v1/schedule-templates
Reusable week/day schedule templates
/api/v1/reservation-events
Customer reservation events
/api/v1/buyingList
Shared shopping / buying items
/api/v1/notifications
Web push subscriptions and sends
/api/v1/ai
Schedule assistant chat and tools
/api/v1/calendar
iCal feed for user shifts (subscription URL)
/api/v1/billing
Workspace plan, Polar checkout, webhook at /api/v1/billing/polar/webhook
/api/v1/lead
Landing page lead capture (POST)
/api/v1 on the frontend domain; requests are proxied here internally.