Hospitality engine

List a combine group's staff-drawn adjacency edges

get/api/link-adjacencies

Every book_table_link_adjacencies edge for one book_table_link_groups id (2026-09-11): which of the group's own tables actually sit next to each other, drawn on the floor-plan canvas' connect tool. Combining that group's members now requires a connected chain of these edges (see reservation-slots.ts's own comment); an empty list means every member is bookable only on its own or with a single-table fit.

Authorization

sessionCookie
sb-qxrvgfkjyvbngipqvslu-auth-token<token>

The dashboard's Supabase Auth session cookie, set at sign-in. Large sessions are split across numbered chunks (…auth-token.0, .1), so treat this as a cookie family rather than one name.

Every request re-validates it against the Auth server (getUser()), never by decoding the cookie locally: a JWT nothing has checked is not a credential. Tenancy is then read from the verified app_metadata.company_id claim and enforced by row-level security; it is never read from request input, on any route, ever.

role (admin / staff) is deliberately not in RLS. It gates specific actions in route code, the operations marked admin below, so hiding a button in the UI is cosmetic only, and a route's own check is the enforcement.

In: cookie

Query Parameters

linkGroupId*string

The combine group's own book_table_link_groups id.

Formatuuid

Response Body

application/json

application/json

application/json

application/json

curl -X GET "https://example.com/api/link-adjacencies?linkGroupId=497f6eca-6276-4993-bfeb-53cbbbba6f08"
{  "edges": [    {      "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",      "tableAId": "168a9ff3-a8f5-446f-9317-a12a92d4feed",      "tableBId": "29442673-3f7b-4c34-b398-f20a1a1539d7"    }  ]}