Unified Booking & Operations Platform
A full-stack platform powering every aspect of Highline Adventures — from guest bookings and activity scheduling to equipment tracking, staff operations, and financial reporting.
Built for California's adventure tourism industry. One platform, zero friction.
162
API Endpoints
28
Database Tables
124
Automated Tests
70
Template Views
Guest Experience
A seamless booking experience from browsing to checkout, with account management and real-time availability.
Browse and book cabins, yurts, RV sites, and campsites. Interactive property map, image galleries, amenity lists, and real-time availability calendars.
Zipline tours, adventure parks, guided experiences, and lessons. Recurring schedules with time slots, capacity tracking, and resource pool management.
Kayaks, bikes, helmets, climbing gear, camping equipment, and water sports. QR code scanning for instant checkout and return tracking.
A single shopping cart handles all three booking types — accommodations, activities, and equipment — in one checkout flow. HMAC-SHA256 signed cookie-based cart with no external dependencies.
Smart Pricing
Dynamic pricing engine with seasonal, weekend, holiday, and length-of-stay rules applied automatically.
Tax Compliance
Configurable tax engine — occupancy (TOT), sales tax, and resort fees with date-window support.
Cancellation Policy
4-tier refund policy (100%/50%/25%/0%) based on days-before-checkin, with admin override.
Back Office
A comprehensive admin panel with 16 management modules, role-based access, and daily automated background jobs.
Revenue summaries, occupancy metrics, booking trends, and exportable financial reports.
Full lifecycle control — view, modify, check in, cancel, and manage refunds for all bookings.
Check-in/check-out manifests, activity rosters, and guest arrival lists generated daily.
On-site retail transactions, folio charges to guest bookings, and item catalog management.
5-tier role system — guest, instructor, property manager, admin, and super admin with scoped permissions.
Automatic gap detection and move suggestions for floating inventory to maximize occupancy.
Digital waiver templates with versioning, e-signatures, and CCPA data privacy compliance tools.
Task assignment, cleaning schedules, maintenance tracking, and automated daily background jobs.
System Design
Purpose-built asset modeling, secure-by-default middleware, and a provider-based integration layer.
Assets with permanent, fixed locations — specific cabins, numbered campsites. Guests book an exact unit with known coordinates on the property map.
Interchangeable units within a type — guests book "a yurt" and the system assigns the optimal unit. Eligible for grid optimization to minimize gaps.
Activities requiring staff and equipment pools — zipline tours need instructors and harnesses. The system checks resource contention before confirming.
JWT access + refresh tokens in httponly cookies. Role-based route guards with automatic redirect vs 401 based on request type.
Cookie-to-form-field validation on all state-changing requests. API routes (/api/*) exempt for JSON clients.
In-memory sliding window. Login (5/5min), registration (3/5min), API (60/min), cart (30/min). HTTP 429 on breach.
CSP, X-Frame-Options, X-Content-Type-Options, Referrer-Policy, Permissions-Policy, and GZip compression.
Under the Hood
A modern, fully async Python stack designed for performance, maintainability, and zero-downtime deployments.
Fully async Python web framework with automatic OpenAPI docs, dependency injection, and type validation.
Async ORM with asyncpg driver. Connection pooling, eager loading, and transactional session management.
28-table relational schema across 9 categories. Alembic for migrations, pool_pre_ping for resilience.
Settings management via environment variables, request schemas, and data validation throughout.
Server-side templating with template inheritance, 70 views across admin, public, auth, and staff sections.
Hypermedia-driven interactions — partial page updates, boosted navigation, and inline form submissions without full page reloads.
Lightweight reactive UI — modals, dropdowns, multi-step checkout wizard, and interactive property maps.
Utility-first styling with custom primary (green) and accent (orange) color scales. Responsive across all breakpoints.
Integration Ready
External integrations use an abstract base class + implementation + factory pattern, making providers hot-swappable without code changes.
charge() and refund() interfaces. Currently using mock provider — ready for Stripe or Square integration.
Mock → Stripe/Squaregenerate_code() and revoke_code() interfaces. Ready for hardware integration with keycode management.
Mock → Hardware APIBooking confirmations, cancellation notices, and keycode delivery. Ready for email/SMS integration.
Noop → Email/SMSSummit Guardian is deployed and running in production. Explore the full platform — guest booking, admin operations, and everything in between.
Launch app.summitguardian.com