Client API

// Request
POST /api/chat
Authorization: Bearer YOUR_API_KEY
// Weglassen, wenn noch keins vorliegt — die Antwort bringt dann eins mit.
X-Session-ID: <session-token>
// Optional, siehe "Identity Verification" unten. Beide Header nur setzen,
// wenn der Nutzer über window.go33.identify() verifiziert wurde — sonst
// beide weglassen, dann bleibt der Chat wie gewohnt anonym.
X-User-Id: <user-id>
X-User-Hash: <hmac-sha256-hex>
Content-Type: application/json

{ "query": "Wie kann ich euch kontaktieren?" }

// Response: text/event-stream

data: {"content":"Sie"}
data: {"content":" können"}
data: {"content":" uns..."}
data: [DONE]

// Vom Server vergeben, nicht selbst erzeugt.
const token = localStorage.getItem("chat_session") ?? "";

const res = await fetch("https://go33.de/api/chat", {
  method: "POST",
  headers: {
    "Content-Type": "application/json",
    "Authorization": "Bearer YOUR_API_KEY",
    ...(token ? { "X-Session-ID": token } : {}),
  },
  body: JSON.stringify({ query: "Hallo!" }),
});

// Beim ersten Aufruf und bei jeder Erneuerung steht hier ein neuer Wert.
const issued = res.headers.get("X-Session-ID");
if (issued) localStorage.setItem("chat_session", issued);

const reader = res.body.getReader();
const decoder = new TextDecoder();
let output = "";

while (true) {
  const { done, value } = await reader.read();
  if (done) break;
  for (const line of decoder.decode(value).split("\n")) {
    if (line.startsWith("data: ") && line !== "data: [DONE]") {
      const { content } = JSON.parse(line.slice(6));
      output += content;
      renderMessage(output);
    }
  }
}

// Verlauf laden
GET /api/chat/history
Authorization: Bearer YOUR_API_KEY
X-Session-ID: <session-token>

// Response
{
  "messages": [
    { "role": "user", "content": "Hallo!", "timestamp": "2024-01-01T..." },
    { "role": "assistant", "content": "Guten Tag!", "timestamp": "2024-01-01T..." }
  ]
}

// Verlauf löschen
DELETE /api/chat/history
Authorization: Bearer YOUR_API_KEY
X-Session-ID: <session-token>

// Response: 204 No Content

GET /api/chat/config
Authorization: Bearer YOUR_API_KEY

// Response
{
  "bot_name": "KI-Assistent",
  "welcome_message": "Hallo! Wie kann ich helfen?",
  "primary_color": "#6366f1",
  "language": "de"
}

POST /api/chat/messages/{id}/feedback
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

{ "feedback": "up" }
// "feedback" ist entweder "up" oder "down"

// Response: 204 No Content

POST /api/chat/attachments
Authorization: Bearer YOUR_API_KEY
X-Session-ID: <session-token>
Content-Type: image/jpeg

<Rohe Bilddaten als Request-Body, kein JSON/Multipart>

// Response
{ "attachment_id": "atc_...", "mime_type": "image/jpeg" }

GET /api/chat/attachments/{id}
Authorization: Bearer YOUR_API_KEY
X-Session-ID: <session-token>

// Response: die Bilddaten mit passendem Content-Type

GET /api/booking/available-days?month=2026-08&workflow_id=wf_...
Authorization: Bearer YOUR_API_KEY

// Response
{ "available_days": [3, 4, 5, 10, 11, 12] }

GET /api/booking/slots?date=2026-08-03&workflow_id=wf_...
Authorization: Bearer YOUR_API_KEY

// Response
{ "slots": [{ "start": "2026-08-03T09:00:00Z", "end": "2026-08-03T09:30:00Z" }, ...] }

POST /api/booking
Authorization: Bearer YOUR_API_KEY
Content-Type: application/json

{
  "name": "Max Mustermann",
  "email": "max@example.com",
  "phone": "+49 151 12345678",
  "company": "",
  "notes": "",
  "booked_at": "2026-08-03T09:00:00Z",
  "service_id": "",
  "workflow_id": "wf_..."
}

// Response: 201 Created, das erstellte Appointment-Objekt

<script>
  window.go33.identify({
    userId: "{{USER_ID}}",
    userHash: "{{USER_HASH}}", // serverseitig berechnet, siehe unten
  });
</script>

// Variante 1: window.go33 API
window.go33.on("action", ({ action, parameters }) => {
  if (action === "redirect") {
    window.location.href = `/preise/${parameters.plan}`;
  }
});

// Variante 2: natives CustomEvent
window.addEventListener("go33:action", (event) => {
  const { action, parameters } = event.detail;
  console.log(action, parameters);
});