Suds API

curl https://app.suds.co.ke/api/v1/setup \
  -H "Authorization: Bearer sk_test_..."

{
  "business": { "name": "Sparkle Auto Spa (sandbox)" },
  "staff": [{ "name": "Test Washer", "role": "attendant" }]
}

JOB=$(uuidgen)
curl https://app.suds.co.ke/api/v1/ops \
  -H "Authorization: Bearer $SUDS_KEY" \
  -H "Content-Type: application/json" \
  -d '{"id":"checkin-412","kind":"job.create","payload":{
        "jobId":"'$JOB'","branchId":"...","type":"walk_in",
        "plateRaw":"KDA 412X","vehicleClassId":"...",
        "customerName":"Room 412"}}'

curl https://app.suds.co.ke/api/v1/jobs/$JOB \
  -H "Authorization: Bearer $SUDS_KEY"

const base = 'https://app.suds.co.ke/api/v1';
const headers = { authorization: `Bearer ${process.env.SUDS_KEY}`, 'content-type': 'application/json' };
const jobId = crypto.randomUUID();

await fetch(`${base}/ops`, { method: 'POST', headers, body: JSON.stringify({
  id: 'checkin-412', kind: 'job.create',
  payload: { jobId, branchId, type: 'walk_in', plateRaw: 'KDA 412X', vehicleClassId, customerName: 'Room 412' },
}) });

const job = await (await fetch(`${base}/jobs/${jobId}`, { headers })).json();

import os, uuid, requests

base = "https://app.suds.co.ke/api/v1"
headers = {"Authorization": f"Bearer {os.environ['SUDS_KEY']}"}
job_id = str(uuid.uuid4())

requests.post(f"{base}/ops", headers=headers, json={
    "id": "checkin-412", "kind": "job.create",
    "payload": {"jobId": job_id, "branchId": branch_id, "type": "walk_in",
                "plateRaw": "KDA 412X", "vehicleClassId": class_id, "customerName": "Room 412"},
}).raise_for_status()

job = requests.get(f"{base}/jobs/{job_id}", headers=headers).json()

{
  "business": { "id": "0190c2...", "name": "Sparkle Auto Spa",
                "business_kind": "carwash", "timezone": "Africa/Nairobi" },
  "branches": [{ "id": "0190c2...", "name": "Main", "address": "Ngong Road" }],
  "vehicleClasses": [{ "id": "0190c3...", "name": "Saloon" }],
  "services": [{ "id": "0190c4...", "name": "Full Wash",
                "category": "wash", "pricing": "fixed" }],
  "prices": [{ "service_id": "0190c4...", "vehicle_class_id": "0190c3...",
              "amount_cents": 80000 }],
  "staff": [{ "id": "0190c5...", "name": "Brian Kiprop", "role": "attendant" }]
}

{
  "changes": [{
    "seq": 1042, "entity": "job", "id": "0190d4a2...",
    "op": "upsert", "at": "2026-11-14T09:12:03Z",
    "data": { /* the job, as in GET /jobs/{id} */ }
  }],
  "cursor": 1042,
  "more": false
}

{
  "id": "0190d4a2-6b1e-7c3a-9f10-2a3b4c5d6e7f",
  "jobNumber": "A-0142",
  "type": "walk_in",
  "status": "ready",
  "plateRaw": "KDA 412X",
  "vehicleClass": "Saloon",
  "customerName": "Room 412",
  "subtotalCents": 80000,
  "discountCents": 0,
  "totalCents": 80000,
  "paidCents": 0,
  "services": [{ "name": "Full Wash", "quantity": 1,
                 "unitPriceCents": 80000, "lineTotalCents": 80000,
                 "workerName": "Brian Kiprop" }],
  "payments": []
}

{
  "id": "opera-folio-88121-paid",
  "kind": "payment.cash",
  "payload": {
    "paymentId": "0190d4b0-...",
    "jobId": "0190d4a2-...",
    "amountCents": 80000
  }
}

{ "status": "applied" }

{ "status": "rejected",
  "reason": "cannot take payment on a voided job" }

{
  "jobId": "0190d4a2-6b1e-7c3a-9f10-2a3b4c5d6e7f",
  "branchId": "0190c2...",
  "type": "walk_in",
  "plateRaw": "KDA 412X",
  "vehicleClassId": "0190c3...",
  "customerName": "Room 412",
  "customerPhone": "0712345678"
}

{
  "jobId": "0190d4a2-...",
  "lineId": "0190d4a3-...",
  "serviceId": "0190c4..."
}

{ "jobId": "0190d4a2-...", "to": "ready" }

{
  "paymentId": "0190d4b0-...",
  "jobId": "0190d4a2-...",
  "amountCents": 80000
}

{
  "customerId": "0190c9...",
  "amountCents": 2400000,
  "method": "bank",
  "reference": "FT26318KX2"
}

POST https://pms.hotel.example/suds
X-Suds-Event: job.updated
X-Suds-Delivery: 0190d4b7-...
X-Suds-Signature: t=1794651625,v1=5f2b...

{
  "id": "0190d4b7-...",
  "event": "job.updated",
  "createdAt": "2026-11-14T09:12:03Z",
  "data": { /* the job */ }
}

import { createHmac, timingSafeEqual } from 'node:crypto';

export function fromSuds(rawBody, header, secret) {
  const { t, v1 } = Object.fromEntries(header.split(',').map((p) => p.split('=')));
  if (Math.abs(Date.now() / 1000 - Number(t)) > 300) return false;
  const want = createHmac('sha256', secret).update(`${t}.${rawBody}`).digest('hex');
  return want.length === v1.length && timingSafeEqual(Buffer.from(want), Buffer.from(v1));
}

import hmac, hashlib, time

def from_suds(raw_body: bytes, header: str, secret: str) -> bool:
    parts = dict(p.split("=", 1) for p in header.split(","))
    if abs(time.time() - int(parts["t"])) > 300:
        return False
    want = hmac.new(secret.encode(), parts["t"].encode() + b"." + raw_body, hashlib.sha256).hexdigest()
    return hmac.compare_digest(want, parts["v1"])

function from_suds(string $raw, string $header, string $secret): bool {
    parse_str(str_replace(',', '&', $header), $p);
    if (abs(time() - (int) $p['t']) > 300) return false;
    $want = hash_hmac('sha256', $p['t'] . '.' . $raw, $secret);
    return hash_equals($want, $p['v1']);
}