Templates are over.

const API = "https://besmi.com/api/storefront/v1";
const KEY = "bpk_live_...";   // publishable: safe in the browser

const besmi = (path, body) =>
  fetch(API + path, {
    method: body ? "POST" : "GET",
    headers: { "Besmi-Key": KEY, ...(body && { "Content-Type": "application/json" }) },
    body: body && JSON.stringify(body),
  }).then((r) => r.json());

const { services } = await besmi("/services");
const q = new URLSearchParams({ serviceId: services[0].id, date: "2026-11-20" });
const { slots } = await besmi("/availability?" + q);

await besmi("/verification/email", { email: "ana@example.com" });
const r = await besmi("/bookings", {
  serviceId: services[0].id,
  startAt: slots[0].start,
  client: { firstName: "Ana", lastName: "Diaz", email: "ana@example.com", phone: "+13035550123" },
  consent: { transactional: true, marketing: false },
  verification: { email: "ana@example.com", code: "123456" },
});
// r.result: "booked", or "deposit_required" with a Stripe PaymentIntent