A little less busywork.
Import notes & provenance
How this console relates to your existing AI Receptionist backend.
Source
Project: AI Receptionist · commit 0125dd8a964423ef5adac1a7dcd1c3653425bf84
Original snapshot: 184 files preserved in backend/, including tests and docs; reviewed deployment additions are documented separately.
Excluded by the snapshot: .env and secrets, customer data, business profile JSON, local databases, private keys, dependencies.
Endpoint mapping
| Endpoint | Guard | Screen | Browser |
|---|---|---|---|
| GET /api/status | Public | Connection check | live |
| POST /api/conversations | Legacy public handler; absent from deploy runtime | Playground (demo only) | demo-only |
| POST /api/message | Legacy public handler; absent from deploy runtime | Playground (demo only) | demo-only |
| GET /api/businesses/:id/profile | Clerk Bearer + active membership + settings:manage | Business profile (live) | live |
| GET /api/businesses/:id/appointment-requests | Clerk Bearer + active membership + appointments:read | Appointment requests (live, read-only) | live |
| POST /api/businesses/:id/native-calendar/:action | Clerk Bearer + active membership + operation permissions | Business calendar (live) | live |
| GET /api/appointments | Legacy x-api-key | — (replaced by the protected route above) | demo-only |
| POST /api/appointments | Legacy x-api-key | — | demo-only |
| POST /api/onboarding/plan | PLATFORM_ADMIN_API_KEY | Onboarding planning | demo-only |
Deployment status and remaining setup
- The AWS backend and private PostgreSQL database are deployed. Native calendar migrations through 005 have been applied; the runtime never migrates at startup.
- Signed-in synthetic acceptance verified booking, rescheduling, cancellation, business isolation, sign-out and private calendar subscription refresh.
- Production Clerk identity and signing-key rotation rehearsal remain pending. Current sign-in uses Clerk Development for testing.
- AI conversations, phone answering, email handling, authenticated onboarding and business profile writes remain pending. Their demo screens do not make live changes.
Honest limitations
- Demo receptionist is rule-based, not AI. It mirrors the backend's request-capture rule only.
- Demo data and edits live in this tab and reset on reload.
- The role switcher only changes what the UI shows; real permissions are enforced by the backend.
- businesses/validate.js (the strict profile validator used by index.js and onboarding/service.js) was dropped by the transfer's sanitization filter and has been restored verbatim; business/validate.js is the older presence-only onboarding validator. Real business profile JSON was intentionally excluded as customer data.
- Hosted API and browser acceptance used reserved synthetic businesses and test identities. These checks do not establish readiness for real customer calls, email or production identity.