Every URL, in one place

All current public landing variations, admin pages and API endpoints — populated with live data from Supabase. Use this as a click-through tour or a sanity-check before demos.

0 partners0 assets0 POIs0 locations0 templates0 experiences0 scans 7d

Public landing

What guests see when they scan a QR or visit a partner URL directly.

Marketing root

Landing for everything — short demo list + counts.

Asset landing — no QR (no discount)

Same asset URL without ?q. Public landing renders POIs and experiences but no promo labels.

/casa-bella/sunshine-suite

Admin

Operations + partner workspaces. Mock auth defaults to a Litto super admin — switch via the avatar in any admin page.

Admin landing

Role-based picker. Auto-redirects partner_admins with a single workspace.

/console

Magic-link sign-in

Real Supabase auth (e-mailed link).

/console/login

Super admin

Operations dashboard

Platform-wide KPIs.

/console

Partners table

Sortable, filterable workspace list.

/console/partners

Locations

Cities backing POIs and templates.

/console/locations

POI library

Curated POIs across all locations.

/console/pois

POI moderation queue

Pending partner submissions — approve / reject.

/console/pois?tab=submissions

Content templates

POI + experience bundles per location.

/console/templates

Litto sync console

Manual trigger + run history for the experience cache.

/console/litto-sync

Users (stub)

Membership management — wires up once auth is fully migrated.

/console/users

Per-partner workspaces

API endpoints

Server routes. POST endpoints aren't directly clickable — example curl recipes provided.

GET/api/cron/litto-sync

Litto sync cron target

Vercel Cron (every 30 min) hits this with bearer auth. Local hits without CRON_SECRET set are allowed for testing.

Try in browser

GET/api/geocode?q=…

Mapbox geocoding proxy

Server-side typeahead for POI submissions. Returns 503 with enabled:false when MAPBOX_TOKEN is unset.

Try in browser

POST/api/scan

Scan ingest

Fired client-side after the public landing renders. Logs to scans table + emits PostHog event.

curl -X POST http://localhost:3001/api/scan \
  -H "Content-Type: application/json" \
  -d '{"partner_slug":"casa-bella","asset_slug":"sunshine-suite","qr_slug":"7K9X2"}'

POST/api/webhook/litto

Litto booking webhook

HMAC-SHA256 verified inbound from litto.co. Idempotent on litto_booking_id. Handles completed / refunded / cancelled.

curl -X POST http://localhost:3001/api/webhook/litto \
  -H "Content-Type: application/json" \
  -d '{"event":"booking.completed","litto_booking_id":"abc-123","ref":"casa-bella","qr_slug":"7K9X2","amount_total":95,"commission_amount":9.5}'

Feature deep-links

Targeted spots inside admin pages where specific features show up.

Asset groups · Manage members

Cross-partner roster (super-admin); click any group → multi-select picker for adding partner assets.

/console/asset-groups

Asset overrides + map pin (POI form has it too)

Welcome message override, hide template POIs, add custom POIs / experiences, important contacts editor, QR assignment.

/console/casa-bella/assets/sunshine-suite

Templates table → detail

Pick any template → POI + experience managers with up/down sort and highlight star.

/console/templates

POI library + create

Click any card → detail page with map pin (drop / drag), photo gallery, edit form.

/console/pois

Discount code CRUD

Cross-partner code roster (super-admin) with usage counts (groups + QR overrides).

/console/discount-codes

POI submission flow

Submit form needs a real signed-in user (FK gate).

/console/casa-bella/poi-submissions