Overview

Operators / Customers

API Connections provider keys registered once, assigned to operators from the Operators page

Devices — Campaign Locations every device = one physical booth spot

Locked Kiosks Easy Mode booths that hit 3 failed on-screen unlock attempts — clear here to let them resume on their next check-in (~60s)

Kiosk Security Incidents silent photo taken locally on each failed unlock attempt

Photo Library every full-res generated photo, kept indefinitely — search by operator/device/date for reference or support

Banned Machines

DRM Device Licenses every installation gets its own key — revoke one without touching the rest

Fleet Status live health of every booth — auto-refreshes every 30s while this page is open

Analytics generation activity, success rates and credit consumption across the whole fleet

Provider Cost estimate from Google's public Gemini price list — each face-QC retry is a paid image; input tokens are folded in as a small overhead

Finance credits sold vs. used, revenue at your selling price, provider cost, margin, liability — same date range as above

Provider balances live, where the provider offers it refresh

Generations per Day

Generations per Week

Per Operator

Template Popularity top 20 by attempts in the selected period

Guest Leads captured on booths with guest consent — filter by operator, export to CSV

Pending Templates 0 from flagged operators — hidden from guests until approved

Global Templates shared prompt library — never shipped in the app itself

Operator-Created Templates made in-app via Smart Style Analyzer/wizard — promote a great one into the official library

Template Health generation failure rate per template (min. 5 attempts) — catches a bad prompt before guests do

Duplicate Templates near-identical prompts, names or the same thumbnail image (Smart Analyzer re-saves). Generation history and pack membership move to the kept template. 0

Template Packs curated bundles (Eid, Weddings, PSL…) — apply pushes copies into an operator's own template pool in one click

Idle-Screen Ads played on a booth's attract screen while nobody's using it — own promos or paid third-party spots

Max 150MB — pre-compress video (H.264 mp4) before uploading.

Event Galleries every operator's public photo microsites (/g/…) — deactivating instantly closes the public gallery; no delete here by design (booths manage their own)

Booth Photos the original a guest kept and the looks made from it — drag any tile to compare

Loading…

Photo Overlays frames, stickers & stamps — every booth downloads active ones and caches them locally, so this works even offline mid-event

PNG, WEBP, or SVG, max 10MB — needs a transparent background for anything but a full frame. Occasion is the theme chip a guest filters by in the booth; leave it blank to show under every occasion.

Licence alerts a second account trying to start a trial on hardware that already used one, a trial attempt from a virtual machine, or hardware that cannot be identified. The trial is bound to the machine, not the email, which is what makes these visible at all. 0

Missing media overlay and ad rows whose image file is no longer on the server. An old deploy deleted the media directories before the workflow excluded them; these rows survived and still render as 404s in booths and here. Re-upload the art under a new row, or delete the dead rows. 0

Built-in Library the overlays that ship inside the app itself — hide, rename or re-theme one across the whole fleet without a new release. The art is never uploaded here, only these overrides.

The ID is the overlay's stable name from the shipped library manifest (client/assets/overlays/manifest.json), always starting builtin_. Booths cache these overrides, so they keep applying with the WiFi down. Clearing an override returns that overlay to how it shipped.

These act on the overrides listed below — the built-ins that already have one. There is no bulk category here: a built-in's category comes from the shipped library and no override can change it.

Operator Uploads stickers & frames operators uploaded from their own booths — private to that operator until you Share it, then every booth gets it (reversible)

Deleting here removes another operator's own upload from their booth. Sharing is the reversible action; this one is not.

Price Per Photo

Price Per Video AI Video (Veo) generation — usually costs more per generation than a photo

Visa Photo Price Visa Photo mode produces the compliant ID photo locally (no AI call) but still charges this many credits per photo

Rate-Limit Whitelist these operator emails skip the per-IP credit-request throughput limits, and may share one physical machine with another account (no “already registered to a different operator” block) — for 360 Media/testing accounts. It does NOT lift the failed-password lockout: that is 5 wrong passwords in 15 minutes and applies to every account, because this endpoint has not authenticated anyone yet and the email it would match on is supplied by the caller. Use “Clear login lockout” below instead.

Clear Login Lockout five wrong passwords in 15 minutes locks an account out. This clears that counter for one email immediately instead of waiting the window out. Audited.

Attract-Screen Idle Timeout how long a booth sits idle before showing "Touch to Begin" and playing idle-screen ads

NEW Template Badge how many days a freshly-created or newly-promoted template shows a NEW badge and sorts ahead of the usage-based order (WORKORDER A5)

Support Content shown on the booth's About page — fetched unauthenticated from /v1/public/support-content; leave a field empty to hide it

Developer Content shown on the booth's About page — fetched unauthenticated from /v1/public/developer-content; leave a field empty to hide it

Face-Preservation QC rechecks a generated photo against the original for face similarity and retries (up to 2x) if it drifts too far — costs one extra vision call per attempt (WORKORDER B4)

Scores are visible per-generation on each operator's Usage Details page.

Credit Packages bundles operators pick from on their Buy Credits screen

Pending Top-up Requests

Platform API Keys shared across every operator — e.g. ElevenLabs for the booth's spoken voice guide

Keys are encrypted at rest and never shown again after saving — only whether one is configured.

Dashboard Security 2FA — protects this panel even if the admin key leaks

Audit Log ban evasion attempts & admin actions

Server Tools run whitelisted maintenance scripts on this server — no SSH needed

Each card runs one approved script on the server and streams its output below the card. API-key fields are used for that run only and are never stored or logged. Every run is recorded in the Audit Log (admin_tool_run).

Recent Runs this server process only — cleared on restart

Templates Created (WORKORDER A3)

Generation Activity Log