Change the restaurant's settings
Partner key + restaurant key. Changes the fields you send; a field you leave out stays as it is. Same rules as the restaurant dashboard. With expectedVersion, nothing is written if the settings changed since you read them (409 CHANGED); an order does not count as a change.
The legal fields (orgNumber, legalName, addressLine1, postalCode, city) can be changed until the owner has signed the customer agreement; after that a new value gives 409 LEGAL_LOCKED (the stored value is accepted). The logo and cover image must be uploaded to LettBestilt. Remove version, updatedAt and legal before you send a GET response back. Slug, email, the ordering page, the font, invoicing, agreements, payment and printers cannot be changed here. Not allowed for an archived restaurant. Every change is logged with the field names, never the values.
Authentication
The partner key (lbp_test_… or lbp_live_…), sent as Authorization: Bearer lbp_… and created in LettBestilt Partner under Partner key. It belongs to the whole partner, not to a restaurant, and only works against /api/v1/partner. Server to server only: a request with an Origin header is rejected with 403 FORBIDDEN, and the key must never be in a browser. A TEST key sees and creates only sandboxes; LIVE keys work once LettBestilt Partner is open. A suspended or archived partner, a revoked key and a restaurant key (lbs_…) here give 401 UNAUTHORIZED; an expired key gives 401 KEY_EXPIRED.
The restaurant’s own key (lbs_test_… or lbs_live_…) for calls about one restaurant in the partner API, sent together with the partner key. The key must have full access (scope *, otherwise 403 INSUFFICIENT_SCOPE), belong to a restaurant the partner owns and be in the same environment as the partner key. A restaurant that does not exist, belongs to another partner or does not match the key always gives the same 404 RESTAURANT_NOT_FOUND. Older keys without an environment in the prefix (lbs_<random>) are not accepted here; rotate them in LettBestilt Partner.
Path parameters
The restaurant’s slug. It must match the restaurant key in X-LettBestilt-Restaurant-Key.
Request
The restaurant’s website (http/https).
The visiting address. Empty = use the legal address (all or nothing).
Sent together with longitude: both or neither.
Sent together with latitude: both or neither.
Logo. Only a file uploaded to LettBestilt’s own UploadThing app (https://<appId>.ufs.sh/f/… or https://utfs.io/a/<appId>/…); other addresses give 422. The stored value is accepted (including older links). An empty string or null removes the image.
Cover image. Only a file uploaded to LettBestilt’s own UploadThing app (https://<appId>.ufs.sh/f/… or https://utfs.io/a/<appId>/…); other addresses give 422. The stored value is accepted (including older links). An empty string or null removes the image.
At least one of pickupEnabled and deliveryEnabled must be true.
At least one of pickupEnabled and deliveryEnabled must be true. Delivery zones are set separately.
Base preparation time for pickup, in minutes (without rush).
Base delivery time, in minutes (without rush).
Legal. 9 digits with a valid check digit (mod11); spaces are tolerated and removed. Locked when the owner has signed the customer agreement.
Legal address (used for the customer agreement and the payment provider). Locked when the owner has signed the customer agreement.
version from GET. If the settings have changed since, 409 CHANGED and nothing is written. An order does not change the version.

