Auth
Magic-link/MFA provider, secure sessions, owner/client/prospect roles, RBAC middleware.
Magic-link/MFA provider, secure sessions, owner/client/prospect roles, RBAC middleware.
Postgres/Prisma schema, encrypted PII fields, backups, audit-log table.
Stripe hosted invoices/checkout, deposits, rent ledger, webhook verification.
E-sign provider or native signing flow, contract templates, signed PDF storage.
Telnyx/SMS and transactional email provider, consent/opt-out, owner alert routing.
Approved knowledge base, escalation rules, conversation summaries, owner notifications.
HTTPS/HSTS, secret management, field-level encryption, least-privilege API keys.
Fair Housing, FCRA, California/local/HOA, privacy, accessibility, SMS/email compliance.
DATABASE_URL
RFJ_FIELD_ENCRYPTION_KEY
RFJ_SESSION_SECRET
PAYMENT_PROVIDER_SECRET
PAYMENT_WEBHOOK_SECRET
RFJ_OWNER_EMAIL
RFJ_OWNER_PHONE
POST /api/prospect/inquiries — Create encrypted inquiry, send owner alert draft, return booking status.
GET /api/owner/inquiries — Owner-only inquiry pipeline with audit trail.
POST /api/owner/inquiries/:id/decision — Approve, request info, decline, or advance to screening.
POST /api/payments/create-invoice — Owner-approved Stripe-hosted invoice only.
POST /api/contracts/create — Generate contract package from approved booking.
POST /api/messages/concierge — AI concierge response + escalation summary.
POST /api/maintenance/tickets — Guest maintenance ticket with urgency classification.