API CleanPlus : connectez votre tunnel de réservation à votre logiciel de nettoyage

curl https://cleanplus.app/api/public/v1/services -H "Authorization: Bearer $CLEANPLUS_KEY"

1. GET  /availability   → afficher les créneaux libres pour la durée estimée
2. POST /bookings       → à la validation : client + site + intervention créés
3. Webhooks             → booking.rescheduled / cancelled / intervention.completed
4. PATCH ou /cancel     → modification ou annulation demandée par le client

Authorization: Bearer cp_live_xxxxxxxxxxxxxxxxxxxxxxxx

curl "https://cleanplus.app/api/public/v1/availability?date_from=2026-10-12&date_to=2026-10-16&duration_minutes=120&agents_count=1" \
  -H "Authorization: Bearer $CLEANPLUS_KEY"

{
  "timezone": "Europe/Paris",
  "slots": [
    { "date": "2026-10-12", "start_time": "08:00", "end_time": "10:00", "available_agents_count": 3 },
    { "date": "2026-10-12", "start_time": "08:30", "end_time": "10:30", "available_agents_count": 3 }
  ]
}

{
  "services": [
    { "id": "…", "name": "Ménage complet", "description": "Toutes pièces", "category": "Particuliers",
      "unit_price_ht": 32.5, "unit": "heure" }
  ]
}

curl -X POST https://cleanplus.app/api/public/v1/bookings \
  -H "Authorization: Bearer $CLEANPLUS_KEY" \
  -H "Content-Type: application/json" \
  -H "Idempotency-Key: CMD-1042" \
  -d '{
    "external_ref": "CMD-1042",
    "customer": { "type": "particulier", "name": "Martin", "first_name": "Julie", "email": "julie@exemple.fr", "phone": "0601020304" },
    "site": { "address": "12 rue de la Paix", "postal_code": "75002", "city": "Paris",
              "access_instructions": "Digicode au portail, 3e étage", "surface": "85 m²" },
    "slot": { "date": "2026-10-12", "start_time": "08:00", "duration_minutes": 120 },
    "service": "Ménage complet",
    "notes": "Options : vitres, four",
    "attachments": [{ "url": "https://votre-stockage.fr/photo-salon.jpg", "name": "Salon" }]
  }'

{
  "id": "5d0c6e0a-2c41-4a3e-9f1b-7f3b2d1e9a10",
  "external_ref": "CMD-1042",
  "source": "api",
  "status": "planifie",
  "date": "2026-10-12",
  "start_time": "08:00",
  "end_time": "10:00",
  "service": "Ménage complet",
  "notes": "Options : vitres, four",
  "site": { "id": "…", "name": "Martin — 12 rue de la Paix", "address": "12 rue de la Paix, 75002 Paris",
            "access_instructions": "Digicode au portail, 3e étage" },
  "customer": { "id": "…", "name": "Martin", "first_name": "Julie",
                "email": "julie@exemple.fr", "phone": "0601020304" },
  "agents": [ { "id": "…", "role": "principal", "name": "Sofia Benali" } ],
  "created_at": "2026-10-01T14:02:11.000Z",
  "updated_at": "2026-10-01T14:02:11.000Z"
}

curl https://cleanplus.app/api/public/v1/bookings/5d0c6e0a-2c41-4a3e-9f1b-7f3b2d1e9a10 -H "Authorization: Bearer $CLEANPLUS_KEY"

curl -X PATCH https://cleanplus.app/api/public/v1/bookings/{id} \
  -H "Authorization: Bearer $CLEANPLUS_KEY" -H "Content-Type: application/json" \
  -d '{ "slot": { "date": "2026-10-13", "start_time": "14:00", "duration_minutes": 120 } }'

curl -X POST https://cleanplus.app/api/public/v1/bookings/{id}/cancel \
  -H "Authorization: Bearer $CLEANPLUS_KEY" -H "Content-Type: application/json" \
  -d '{ "reason": "Annulé par le client" }'

{ "error": { "code": "validation_error", "message": "Données invalides",
             "details": { "slot.start_time": ["Format HH:MM attendu"] } } }

POST https://votre-site.fr/webhooks/cleanplus
Content-Type: application/json
User-Agent: CleanPlus-Webhooks/1.0
X-CleanPlus-Event: booking.rescheduled
X-CleanPlus-Delivery: 8f1c…        ← identifiant unique, à utiliser pour dédoublonner
X-CleanPlus-Signature: t=1791712320,v1=5f2b…

{ "id": "8f1c…", "type": "booking.rescheduled", "created_at": "2026-10-10T09:12:00Z",
  "data": { …objet Booking… } }

import crypto from "node:crypto";

export function verify(rawBody, header, secret) {
  const { t, v1 } = Object.fromEntries(header.split(",").map((p) => p.split("=")));
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const expected = crypto.createHmac("sha256", secret).update(`${t}.${rawBody}`).digest("hex");
  return expected.length === v1.length && crypto.timingSafeEqual(Buffer.from(expected), Buffer.from(v1));
}