Glenhouse Live

Creators and brand partners each get their own workspace, and super admins and admins share the admin console. New creator and brand accounts start unapproved and wait on a holding page until an admin lets them in. The middleware checks each request's role, then every page layout and every API handler checks role and approval again, and with authentication unconfigured in production the app refuses every private route rather than opening up.

A visibility table decides what each role can see: brand partners see their own spend, creators see only their own payout, and the platform's own figures are for admins alone.

Payments run on Stripe Connect Express. Every amount is kept in whole cents and the breakdown always sums exactly to the deal total; payment amounts are read from the database, never from the request; and the payment webhook is signature-verified and idempotent. The payout flow is code-complete and running in Stripe's test mode.

TikTok's API doesn't report live-stream metrics, so a standalone worker fills the gap. A headless browser driven by Playwright spots when a monitored creator goes live and captures screenshots, and a WebSocket connection records chat, gifts, likes and shares while the stream runs.

The worker runs outside Vercel because it holds long-lived connections. It posts to the app's ingest API with a shared key checked in constant time, stores screenshots in Vercel Blob behind an admin-only proxy, and fills in the linked deal's analytics when a stream ends.

The public site explains the model to brands; the dashboards behind the sign-in aren't shown here.