Construye un sitio de reservas para clases de fitness con Claude Code

Elige el tipo de proyecto

Sitio de reservas de clases de fitness

Sitio de reservas de clínica dental

Sitio de reservas de peluquería

Sitio de reservas de barbería

Sitio de reservas de spa

Sitio de reservas de entrenador personal

Sitio de reservas de coaching

Sitio de reservas de restaurante

Sitio de reservas de salón de belleza

Sitio de reservas de masajes terapéuticos

Sitio de reservas de salón de uñas

Sitio de reservas de fotógrafo

Sitio de reservas de peluquería canina

Sitio de reservas de estudio de yoga

Sitio de reservas de estudio de tatuajes

Sitio de reservas de clases de baile

Sitio de reservas de clases de fitness

Sitio de reservas de terapia y orientación

Sitio de reservas de quiropráctico

Sitio de reservas de fisioterapeuta

Sitio de reservas de detallado de coches

Sitio de reservas de taller mecánico

Sitio de reservas de servicio de limpieza

Sitio de reservas de reparaciones del hogar

Sitio de reservas de cuidado de jardín

Sitio de reservas de organizador de eventos

Sitio de reservas de wedding planner

Sitio de reservas de maquilladora

Sitio de reservas de esteticista

Sitio de reservas de tutor privado

Sitio de reservas de autoescuela

Sitio de reservas de visitas inmobiliarias

Sitio de reservas de agente inmobiliario

Vista previa del flujo de reserva

- Seleccionar servicio

- Seleccionar fecha

- Seleccionar hora

- Confirmar reserva

Detalles del cliente recopilados

- Nombre completo

- Email

- Teléfono

- Notas opcionales

Crear un proyecto en Supabase

Crea un nuevo proyecto de Supabase para el backend de tu sistema de reservas.

Abrir Supabase

https://supabase.com/?utm_source=partner&utm_medium=social&utm_campaign=supasquad&dub_id=dfcthVHW4UOcyzr2

Crear el usuario administrador

Crea un usuario administrador en Supabase Authentication y luego copia el user ID.

Ejecutar el SQL de configuración completa

Pega tu user ID de administrador y luego ejecuta este código SQL en el SQL Editor de Supabase. Configurará todo de una vez: tablas, políticas de seguridad y acceso de administrador.

SQL de configuración completa

create table services ( id uuid primary key default gen_random_uuid(), name text not null, description text, duration_minutes integer not null check (duration_minutes > 0), price numeric(10,2), is_active boolean not null default true, created_at timestamp with time zone default now() ); create table appointments ( id uuid primary key default gen_random_uuid(), full_name text not null, email text not null, phone text not null, service_id uuid not null references services(id) on delete restrict, appointment_date date not null, start_time time not null, end_time time not null, status text not null default 'pending' check (status in ('pending', 'confirmed', 'cancelled', 'completed')), notes text, created_at timestamp with time zone default now() ); create table business_hours ( id uuid primary key default gen_random_uuid(), weekday integer not null check (weekday between 0 and 6), is_open boolean not null default true, start_time time, end_time time ); create table blocked_dates ( id uuid primary key default gen_random_uuid(), blocked_date date not null unique, reason text, created_at timestamp with time zone default now() ); create table business_settings ( id uuid primary key default gen_random_uuid(), business_name text not null default 'Core Motion Fitness Studio', business_email text, business_phone text, business_address text, slot_interval_minutes integer not null default 30, booking_notice_hours integer not null default 4, created_at timestamp with time zone default now() ); create table admin_users ( id uuid primary key default gen_random_uuid(), user_id uuid not null unique references auth.users(id) on delete cascade, created_at timestamp with time zone default now() ); insert into services (name, description, duration_minutes, price) values ('Beginner Fitness Class', 'A welcoming fitness class focused on simple movement, safe technique, and building confidence.', 60, 30), ('Strength Training Class', 'A structured class focused on functional strength, controlled movement, and proper exercise form.', 60, 40), ('HIIT Fitness Class', 'An energetic interval-based class with guided movements, rest periods, and coach-led pacing.', 45, 35), ('Mobility & Stretch Class', 'A gentle class focused on mobility, flexibility, posture, and recovery-friendly movement.', 45, 30), ('Small Group Training', 'A focused small group session with personalized coaching, form guidance, and structured workouts.', 60, 55), ('Private Fitness Session', 'A one-on-one coaching session tailored to your goals, experience level, and comfort.', 60, 90); insert into business_hours (weekday, is_open, start_time, end_time) values (0, true, '08:00', '13:00'), (1, true, '06:00', '20:00'), (2, true, '06:00', '20:00'), (3, true, '06:00', '20:00'), (4, true, '06:00', '20:00'), (5, true, '06:00', '18:00'), (6, true, '08:00', '14:00'); insert into business_settings (business_name, business_email, business_phone, business_address, slot_interval_minutes, booking_notice_hours) values ('Core Motion Fitness Studio', 'hello@coremotionfitness.com', '+1 555 012 4567', '1048 Active Street, New York, NY', 30, 4); alter table admin_users enable row level security; alter table services enable row level security; alter table appointments enable row level security; alter table business_hours enable row level security; alter table blocked_dates enable row level security; alter table business_settings enable row level security; create policy "Anyone can read active services" on services for select to anon, authenticated using (is_active = true); create policy "Admins can manage services" on services for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can create appointments" on appointments for insert to anon, authenticated with check (true); create policy "Admins can read appointments" on appointments for select to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Admins can update appointments" on appointments for update to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read business hours" on business_hours for select to anon, authenticated using (true); create policy "Admins can manage business hours" on business_hours for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read blocked dates" on blocked_dates for select to anon, authenticated using (true); create policy "Admins can manage blocked dates" on blocked_dates for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read business settings" on business_settings for select to anon, authenticated using (true); create policy "Admins can manage business settings" on business_settings for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Users can read their own admin row" on admin_users for select to authenticated using (auth.uid() = user_id); insert into admin_users (user_id) values ('PASTE_YOUR_AUTH_USER_ID_HERE');

User ID del administrador

Introduce tu user ID de Supabase Auth

Configuración SQL paso a paso (opcional)

Crear las tablas de la base de datos

Ejecuta estas consultas SQL dentro del SQL Editor de Supabase.

Tabla de servicios

create table services ( id uuid primary key default gen_random_uuid(), name text not null, description text, duration_minutes integer not null check (duration_minutes > 0), price numeric(10,2), is_active boolean not null default true, created_at timestamp with time zone default now() );

Tabla de citas

create table appointments ( id uuid primary key default gen_random_uuid(), full_name text not null, email text not null, phone text not null, service_id uuid not null references services(id) on delete restrict, appointment_date date not null, start_time time not null, end_time time not null, status text not null default 'pending' check (status in ('pending', 'confirmed', 'cancelled', 'completed')), notes text, created_at timestamp with time zone default now() );

Tabla de horarios del negocio

create table business_hours ( id uuid primary key default gen_random_uuid(), weekday integer not null check (weekday between 0 and 6), is_open boolean not null default true, start_time time, end_time time );

Tabla de fechas bloqueadas

create table blocked_dates ( id uuid primary key default gen_random_uuid(), blocked_date date not null unique, reason text, created_at timestamp with time zone default now() );

Tabla de ajustes

create table business_settings ( id uuid primary key default gen_random_uuid(), business_name text not null default 'Core Motion Fitness Studio', business_email text, business_phone text, business_address text, slot_interval_minutes integer not null default 30, booking_notice_hours integer not null default 4, created_at timestamp with time zone default now() );

Añadir los datos iniciales

Ejecuta estas consultas iniciales.

Insertar los servicios iniciales

insert into services (name, description, duration_minutes, price) values ('Beginner Fitness Class', 'A welcoming fitness class focused on simple movement, safe technique, and building confidence.', 60, 30), ('Strength Training Class', 'A structured class focused on functional strength, controlled movement, and proper exercise form.', 60, 40), ('HIIT Fitness Class', 'An energetic interval-based class with guided movements, rest periods, and coach-led pacing.', 45, 35), ('Mobility & Stretch Class', 'A gentle class focused on mobility, flexibility, posture, and recovery-friendly movement.', 45, 30), ('Small Group Training', 'A focused small group session with personalized coaching, form guidance, and structured workouts.', 60, 55), ('Private Fitness Session', 'A one-on-one coaching session tailored to your goals, experience level, and comfort.', 60, 90);

Insertar los horarios del negocio

insert into business_hours (weekday, is_open, start_time, end_time) values (0, false, null, null), (1, true, '09:00', '17:00'), (2, true, '09:00', '17:00'), (3, true, '09:00', '17:00'), (4, true, '09:00', '17:00'), (5, true, '09:00', '17:00'), (6, true, '09:00', '13:00');

Inserta los ajustes

insert into business_settings (business_name, business_email, business_phone, business_address, slot_interval_minutes, booking_notice_hours) values ('Core Motion Fitness Studio', 'hello@coremotionfitness.com', '+1 555 012 4567', '1048 Active Street, New York, NY', 30, 4);

Asegurar el panel de administración

1. Crear la tabla de acceso de administradores Crea una tabla que defina qué usuarios autenticados pueden acceder y gestionar el panel de administración.

Tabla admin_users

create table admin_users ( id uuid primary key default gen_random_uuid(), user_id uuid not null unique references auth.users(id) on delete cascade, created_at timestamp with time zone default now() );

2. Habilitar Row Level Security Activa RLS en las tablas que deben protegerse de los usuarios normales.

Habilitar RLS

alter table admin_users enable row level security; alter table services enable row level security; alter table appointments enable row level security; alter table business_hours enable row level security; alter table blocked_dates enable row level security; alter table business_settings enable row level security;

3. Añadir las políticas de administrador Permite a los usuarios públicos leer solo lo necesario para el sitio de reservas, y permite solo a los usuarios administradores gestionar los datos protegidos.

Políticas de administrador

create policy "Anyone can read active services" on services for select to anon, authenticated using (is_active = true); create policy "Admins can manage services" on services for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can create appointments" on appointments for insert to anon, authenticated with check (true); create policy "Admins can read appointments" on appointments for select to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Admins can update appointments" on appointments for update to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read business hours" on business_hours for select to anon, authenticated using (true); create policy "Admins can manage business hours" on business_hours for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read blocked dates" on blocked_dates for select to anon, authenticated using (true); create policy "Admins can manage blocked dates" on blocked_dates for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Anyone can read business settings" on business_settings for select to anon, authenticated using (true); create policy "Admins can manage business settings" on business_settings for all to authenticated using ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ) with check ( exists ( select 1 from admin_users where admin_users.user_id = auth.uid() ) ); create policy "Users can read their own admin row" on admin_users for select to authenticated using (auth.uid() = user_id);

4. Añadir tu usuario administrador Primero crea tu cuenta de administrador desde la pantalla de login de la app, luego inserta tu user ID autenticado en la tabla admin_users.

Insertar tu usuario administrador

insert into admin_users (user_id) values ('PASTE_YOUR_AUTH_USER_ID_HERE');

Usa el Prompt 1 para construir el proyecto

Prompt 1: Construir el proyecto completo de clases de fitness

Construye un sitio web de clínica dental moderno y premium con sistema real de reservas…

You are a world-class full-stack product builder, creative director, and UI/UX designer. Build a premium modern fitness class booking website with a real booking system and a secure admin dashboard. The final result should feel like it was designed by a top-tier fitness and wellness design agency and built as a real production-ready product. Do not create a generic template. Do not create a basic admin panel. Do not make small visual improvements. Create a complete, polished, premium fitness class booking experience from the first version. Tech stack: - React - TypeScript - Vite - Supabase for database, backend, and auth ================================================ SUPABASE CONNECTION ================================================ Create a .env.local file in your project root with your Supabase credentials: VITE_SUPABASE_URL=PASTE_YOUR_SUPABASE_URL_HERE VITE_SUPABASE_ANON_KEY=PASTE_YOUR_PUBLISHABLE_KEY_HERE Rules: - Use these values as environment variables - Do not hardcode them inside components - Create the Supabase client in src/lib/supabase.ts - Use import.meta.env.VITE_SUPABASE_URL and import.meta.env.VITE_SUPABASE_ANON_KEY - Use the official Supabase client with normal browser session persistence - Do not manually clear or remove the Supabase session - Do not sign the admin out automatically unless the user clicks a sign out button ================================================ DATABASE SCHEMA ================================================ Use this exact schema. Do not rename fields or invent new ones. services: - id - name - description - duration_minutes - price - is_active - created_at appointments: - id - full_name - email - phone - service_id - appointment_date - start_time - end_time - status - notes - created_at business_hours: - id - weekday - is_open - start_time - end_time blocked_dates: - id - blocked_date - reason - created_at business_settings: - id - business_name - business_email - business_phone - business_address - slot_interval_minutes - booking_notice_hours - created_at admin_users: - id - user_id - created_at Important: - Use business_settings for fitness studio business information. - Use business_name, business_email, business_phone, and business_address. - Do not use clinic_settings. - Do not use clinic_name, clinic_email, clinic_phone, or clinic_address. - Do not use fitness_settings. - Do not use gym_settings. - Do not use studio_settings. - Do not use class_settings. - Do not use trainer_settings. - Do not use coaching_settings. - Do not use salon_settings. - Do not use spa_settings. - Do not use dental_settings. - Do not use barbershop_settings. - Do not rename any table or field. - Use admin_users.user_id to check admin access. - Do not check admin access by email. - Do not check admin_users.id for authorization. - Do not use fake local authentication. - Do not use fake local data. ================================================ PROJECT GOAL ================================================ Create a complete fitness class booking website where visitors can: - view fitness classes and training sessions - select a class or session - select a date - see available time slots - enter their details - submit a real appointment request - see a success confirmation Create a secure admin dashboard where the fitness studio owner, coach, or studio manager can manage: - appointments - services - business hours - blocked dates - business settings Everything in the dashboard should be useful and editable, not just displayed. ================================================ CREATIVE DIRECTION ================================================ This project must look premium from the first version. Think like a world-class creative director for a premium fitness studio. The public website should feel: - premium - modern - energetic - clean - strong - motivating - polished - structured - trustworthy - professional - client-friendly - realistic for a premium local fitness studio The dashboard should feel: - premium - clean - modern - product-like - organized - smooth - easy for a fitness studio manager to use - visually polished, not basic Design quality expectations: - Avoid generic or template-like design - Avoid flat and empty layouts - Avoid boring sections - Avoid weak spacing - Avoid basic AI-generated landing page patterns - Do not make the public website look like a simple template - Do not make the admin dashboard look like a basic starter dashboard - Keep the design fitness-focused, premium, energetic, clean, and professional - Do not make it look like a dental clinic, beauty salon, massage studio, restaurant, dance studio, coaching website, or generic SaaS landing page ================================================ VISUAL DESIGN SYSTEM ================================================ Use a premium fitness studio visual style: - clean white, warm off-white, soft gray, charcoal, deep navy, graphite, and subtle neutral backgrounds - refined electric blue, lime, orange, red, graphite, silver, and energetic accent colors - strong but clean contrast - polished class cards - refined borders - soft shadows - layered visuals - subtle gradients - cinematic lighting effects - energetic depth - premium buttons - minimal fitness icons - high-quality fitness studio imagery Use depth, gradients, lighting, and layered visuals where appropriate. Avoid flat backgrounds. Create clear contrast and strong hierarchy. Make the interface feel intentionally designed, not assembled from default components. Typography: - improve hierarchy and readability - make headings strong, energetic, premium, and trustworthy - use modern, bold, readable typography - avoid overly decorative fonts - dashboard should stay clean, readable, and product-like Layout: - improve spacing and composition - use modern section layouts - use energetic visual storytelling - introduce tasteful asymmetry where appropriate - create image-led active compositions - avoid rigid boring sections - every section should feel intentionally designed Interactions: - add smooth animations and micro-interactions - enhance hover effects and transitions - make the experience feel polished and alive - keep interactions energetic but professional, not distracting ================================================ IMAGE AND VISUAL STORYTELLING REQUIREMENTS ================================================ The public website must use strong, high-quality, niche-specific fitness studio imagery from the first version. Do not create a premium layout with no images. Do not rely only on icons, gradients, or abstract shapes. Use real, relevant imagery in the right places to make the site feel complete, motivating, trustworthy, and premium. Image style: - premium fitness studio photography - clean modern training environment - coach leading a class - small group training atmosphere - functional movement and strength training shown safely - mobility and stretching session imagery - clean equipment, mats, weights, and studio details - energetic but professional atmosphere - refined and realistic - good cropping - consistent visual style across the website Good image subjects: - modern fitness studio interior - coach leading a fitness class - small group training session - functional strength training area - mobility or stretching class - clean weights, mats, and equipment - beginner-friendly group class atmosphere - personal training session shown professionally - bright studio floor with active movement - reception or waiting area for a fitness studio Do not use: - dental imagery - medical clinic imagery - massage therapy imagery - beauty salon imagery - barbershop imagery - restaurant imagery - dance studio imagery - bodybuilding competition imagery - extreme body transformation imagery - body-shaming or appearance-focused visuals - unsafe exercise imagery - injury, pain, or clinical procedure imagery - overly revealing or inappropriate fitness imagery - low-resolution images - awkward stock photos - broken image links - random model portraits unrelated to fitness classes Implementation: - Use reliable external image URLs if needed. - Prefer high-quality Unsplash-style imagery or other stable image sources. - Make sure image links actually load. - Use descriptive alt text. - Use object-fit: cover and intentional cropping. - Keep the layout responsive. - If an image fails, the layout should still look good. - Keep images easy to replace later by storing image URLs in a clear data structure, config object, or component-level constants. Every image should support the fitness studio brand, improve trust, and make the section feel more premium. ================================================ BRAND DIRECTION ================================================ Use fitness studio-specific language: - Fitness Studio - Fitness Class - Training Session - Coach - Instructor - Client - Member - Appointment - Class - Session - Beginner Fitness - Strength Training - HIIT Fitness - Mobility - Stretch - Small Group Training - Private Fitness Session - Movement - Technique - Book your class - Schedule your session - Reserve your fitness class Do not use: - dental - dentist - patient - oral health - massage therapy - therapist - beauty salon - stylist - medical - healthcare - barber - barbershop - restaurant - reservation - table - dance class - choreography Avoid unrealistic health or fitness claims. Do not promise guaranteed results. Do not use body-shaming or appearance-based messaging. Do not promote extreme workouts, unsafe exercise, or overtraining. Do not use fear-based or insecurity-based messaging. Focus on strength, movement, confidence, consistency, technique, energy, community, professional coaching, comfort, and a polished client experience. ================================================ PUBLIC WEBSITE ================================================ Create: - Navbar - Hero section - Services section - About section - Booking section - Success confirmation screen - Footer Public website requirements: - Load real services from the services table. - Only show active services on the public website. - Use business_settings for fitness studio name, email, phone, and address when available. - Use business_name as the studio name. - Use business_email as the studio email. - Use business_phone as the studio phone. - Use business_address as the studio address. - Make the booking section polished and easy to follow. - Use strong fitness studio-specific imagery throughout the public website. - The site should look like a real premium fitness class booking website, not a simple template. ================================================ PUBLIC WEBSITE QUALITY EXPECTATIONS ================================================ Navbar: - refined and premium - clean fitness studio brand presence - elegant spacing - polished booking CTA Hero: - visually striking and premium - must include a strong, relevant fitness studio visual - use imagery such as a modern fitness studio, coach leading a class, small group training, strength training area, mobility class, clean equipment, or energetic studio atmosphere - use image overlays, gradients, lighting, or layered composition for depth - maintain strong text readability - strong headline hierarchy - energetic and trustworthy supporting text - polished CTA buttons - not generic - not flat - not basic Services: - should not look like a plain list - make services feel premium, energetic, clean, and visually engaging - use strong layout, refined typography, beautiful spacing, and polished cards or premium list design - include relevant visual treatment for services - service cards should include niche-relevant images or image areas where appropriate - show service name, description, duration, price, and booking affordance - services should be dynamic from Supabase Suggested image direction for services: - Beginner Fitness Class: welcoming beginner-friendly class setting - Strength Training Class: clean strength area with coach guidance - HIIT Fitness Class: energetic group class, not unsafe or extreme - Mobility & Stretch Class: calm stretching or mobility session - Small Group Training: small group coaching atmosphere - Private Fitness Session: one-on-one coaching shown professionally Keep service images consistent in crop, quality, and style. Do not use unsafe, extreme, body-shaming, medical, or unrelated fitness images. About: - energetic, professional, and intentional - visually balanced - should reinforce trust, experience, technique, consistency, comfort, community, and professional coaching - include a strong fitness studio-related image or layered visual - avoid awkward empty layouts Booking: - polished and product-like - easy to follow - clear steps - strong selected states - premium time slot UI - clean client/member details form - clear appointment summary - elegant success state - may include subtle supporting imagery or visual accents, but do not make the booking form harder to use Footer: - refined - premium - consistent with the brand - use business_settings where relevant ================================================ BOOKING FLOW ================================================ Step 1: Select a fitness class or training session Step 2: Select a date and available time Step 3: Enter: - full name - email - phone - optional notes Step 4: Show a success confirmation with appointment summary Booking UI should include: - clear step indicator - nice selected states - clean date selection - polished time slots - appointment summary - strong CTA buttons Use client-friendly, member-friendly, and fitness studio-focused language in the booking flow. Do not use patient-focused language. ================================================ AVAILABILITY LOGIC ================================================ Available time slots must be generated using: - business_hours - services.duration_minutes - business_settings.slot_interval_minutes - business_settings.booking_notice_hours - blocked_dates - existing appointments Rules: - Only show slots inside working hours - Skip blocked dates - Skip overlapping appointments - Ignore cancelled appointments - Respect booking notice time - Use the selected service duration to calculate end_time - New active services added from the dashboard must work in the booking flow Overlap rule: new_start < existing_end AND new_end > existing_start All slots should be normalized as: { start: Date, end: Date, label: string } Time safety: - Only format real Date objects - Never pass invalid strings to format() - Never use strings like "yyyy-MM-ddT10:30:00" - Always combine the selected date and time correctly - Save appointment_date as a Supabase-compatible date - Save start_time and end_time as Supabase-compatible time values Important booking insert rule: - When creating an appointment, do not use .insert(...).select() or .insert(...).select().single(). - Public users are allowed to insert appointments, but they are not allowed to read all appointments. - Use insert only, then show the success screen from the local booking data already available in the form. - Do not add a public SELECT policy for appointments. - Do not insert id manually. - Do not insert created_at manually. - service_id must be the selected service id from the services table. ================================================ ADMIN AUTH ================================================ Create a real admin login using Supabase Auth. Admin login flow: 1. Admin enters email and password. 2. Sign in with supabase.auth.signInWithPassword(). 3. If login fails, show a clear error message. 4. After successful sign in, get the authenticated user. 5. Use the authenticated user's id. 6. Check if user.id exists in admin_users.user_id. 7. If the user exists in admin_users, allow access to dashboard. 8. If the user is authenticated but not found in admin_users, show: "You are signed in, but you are not authorized as an admin." 9. Add a loading state while checking session and admin access. 10. Do not redirect back to login before the admin check finishes. Important admin session rules: - On admin route load, call supabase.auth.getSession(). - If there is no session, stop loading and show the login form. - If there is a session, get the current user with supabase.auth.getUser(). - Query admin_users where user_id equals user.id. - Use maybeSingle(), not single(), when checking admin_users. - If a matching row exists, set isAdmin to true and show the dashboard. - If no matching row exists, set isAdmin to false and show the unauthorized message. - Always stop the loading state in a finally block. - The UI must never stay stuck on "Verifying access..." forever. - Use supabase.auth.onAuthStateChange to respond to sign in, sign out, token refresh, and session changes. - Do not sign the admin out automatically because of a temporary query error. - Do not clear local storage or remove the Supabase session manually. - Keep the admin logged in as long as Supabase has a valid session. - If a token refresh event happens, keep the dashboard available and re-check admin access if needed. Rules: - Protect all admin routes. - Public website should stay accessible without login. - Do not check admin access by email. - Do not check admin_users.id. - Do not use fake local authentication. - Do not rely only on hiding buttons. - Do not use business_settings for admin authentication. - Do not use services or appointments for admin authentication. - Admin access is only controlled by admin_users.user_id. Important: - The admin_users table contains user_id values from Supabase Auth. - The login email and password belong to a Supabase Auth user. - After login, always compare auth.user.id with admin_users.user_id. - Do not compare user.email with anything in admin_users. ================================================ ADMIN DASHBOARD ================================================ Create a complete dashboard with these pages: 1. Overview 2. Appointments 3. Services 4. Business Hours 5. Blocked Dates 6. Business Settings The dashboard must feel like a polished premium product dashboard, not a basic admin template. Dashboard visual requirements: - refined sidebar - polished page headers - beautiful cards - clean tables - premium forms - clear modals or drawers - elegant buttons - refined badges - smooth hover states - good empty states - strong spacing and hierarchy - consistent design system 1. Overview: - show useful stats - upcoming appointments - pending appointments - completed appointments - active services - use polished metric cards and useful layout 2. Appointments: - show all appointments from Supabase - show client/member name, service, date, time, phone, email, status, and notes - allow filtering by status - allow updating status: - pending - confirmed - cancelled - completed - make appointment tables/cards clean, readable, and premium 3. Services: This page must be fully manageable, not read-only. The admin must be able to: - add new services/classes - edit existing services/classes - activate services/classes - deactivate services/classes Each service row should have clear actions. Service fields: - name - description - duration_minutes - price - is_active Important: - Existing services must have an Edit action. - Editing should open a polished pre-filled form, modal, drawer, or panel. - Saving should update the service in Supabase. - Inactive services should stay visible in the admin dashboard. - Inactive services should not appear on the public booking page. - Prefer deactivate instead of hard delete because appointments can reference services. - New or updated active services must appear automatically in the booking flow. 4. Business Hours: - allow editing each weekday - allow open/closed days - allow editing start_time and end_time - changes must affect available booking slots - make the editor clear and easy to use 5. Blocked Dates: - allow adding blocked dates - allow removing blocked dates - show reason - blocked dates must prevent bookings - make the interface simple and polished 6. Business Settings: Allow editing: - business_name - business_email - business_phone - business_address - slot_interval_minutes - booking_notice_hours In the UI, these fields can be labeled as: - Studio Name - Studio Email - Studio Phone - Studio Address - Slot Interval - Booking Notice Important: - Save updates back to business_settings. - Updated business settings should appear on the public website where relevant. ================================================ QUALITY REQUIREMENTS ================================================ - Full working app - Clean code structure - Supabase fully connected - Booking flow working - Appointment insert works without requiring public appointment read access - Admin login working - Admin session handling working - Admin verification never gets stuck forever - Protected dashboard working - Services management fully working - Appointments management working - Business hours editing working - Blocked dates working - Business settings editing working using business_settings - Public website uses high-quality fitness studio-specific imagery - Hero section includes a strong relevant fitness studio visual - Services section includes relevant niche-specific visual treatment or images - About section includes authentic fitness studio imagery or visual storytelling - Images are properly cropped, responsive, and not broken - Image URLs are easy to replace later - No placeholder fake data - No disconnected dashboard pages - No read-only admin pages where editing is expected - Premium fitness studio visual direction from the start - Public website should feel top-tier, not template-like - Dashboard should feel like a polished premium product - Admin auth must work using Supabase Auth user.id and admin_users.user_id - Keep functionality and visual quality strong from the first version FINAL RESULT: Create a complete, working, premium fitness class booking platform with a high-end public website, strong niche-specific imagery, working admin login, stable session handling, real appointment booking, and a polished admin dashboard.

Opcional: Empieza con un proyecto listo para usar

Sitio de reservas de clases de fitness

Empieza más rápido con el proyecto listo para usar

PROJECT

https://profitstudio.app/template/fitness-class-booking-website

Añadir variables de entorno de Supabase

Añade la URL de tu proyecto Supabase y tu Publishable Key en un archivo .env.local para pruebas locales.

Instalar Git

Asegúrate de que Git esté instalado en tu ordenador antes de subir el proyecto a GitHub.

Descargar Git

https://git-scm.com/

Conectar VS Code a GitHub

Inicia sesión con tu cuenta de GitHub dentro de VS Code.

Crear un repositorio de GitHub

Crea un nuevo repositorio privado de GitHub y copia la URL del repositorio.

Subir el proyecto a GitHub

Abre Claude Code en VS Code, pega el Prompt seguro para publicar en GitHub y añade la URL de tu repositorio de GitHub. Después de que Claude prepare el proyecto, abre Source Control en VS Code y haz commit y sync de los cambios.

Prompt seguro para publicar en GitHub

Añade la URL de tu repositorio de GitHub a continuación y usa el prompt personalizado en Claude Code.

I already created an empty GitHub repository. GitHub repository URL: {{GITHUB_REPOSITORY_URL}} Please prepare and push this local project to that GitHub repository. Rules: - Do not change the app code, UI, design, routes, database logic, backend logic, Supabase logic, or functionality. - Only handle Git and GitHub publishing. - Check Git status, branch, remotes, .gitignore, and tracked files first. - Make sure .env and .env.local are not committed. - Make sure generated files like node_modules, dist, dist-ssr, *.tsbuildinfo, .DS_Store, and log files are ignored. - If unnecessary files are already tracked, remove them from Git tracking only. Do not delete real project files. - Use main for a new repository, unless an existing branch should be preserved. - Connect this project to the GitHub repository URL. - Create a clean commit if needed. - Push the project to GitHub. If the push fails, diagnose and fix only the Git/GitHub setup. Do not change app functionality. Before any destructive action, explain what you found and what you plan to do.

URL del repositorio de GitHub

https://github.com/username/repository-name.git

Crear una aplicación Node.js en Hostinger

Abre Hostinger, crea una nueva aplicación Node.js y elige tu dominio.

Abrir Hostinger

Publica este proyecto con la misma configuración que se muestra en el vídeo.

RECOMMENDED

https://www.hostg.xyz/SHJe0

Importar el repositorio y desplegar

Importa tu repositorio de GitHub, añade las variables de entorno necesarias y haz clic en Desplegar.

VITE_SUPABASE_URL VITE_SUPABASE_ANON_KEY

VITE_SUPABASE_URL

URL del proyecto

VITE_SUPABASE_ANON_KEY

Clave anon (pública)

Obtén estos valores en Supabase

Abrir la configuración de API

https://supabase.com/dashboard/project/_/settings/api

Envía los emails de cita automáticamente

Haz el sistema de reservas más profesional con emails de cita automáticos.

- Envía un email de nueva reserva al administrador

- Envía un email de confirmación al paciente

Mejora opcional después del despliegue.

Haz que tu sitio web con IA envíe emails automáticamente (tutorial de Supabase)

Ver tutorial

https://www.youtube.com/watch?v=NK6ztA_-0cE

Envía SMS de citas automáticamente

Haz que tu sistema de reservas sea más profesional con confirmaciones SMS automáticas después de cada reserva.

- Envía una confirmación SMS al cliente

- Notifica también al propietario del negocio por SMS (opcional)

Añade notificaciones SMS a tu sitio de reservas con IA

Ver tutorial

https://youtu.be/AoR1FDcUuK4?si=O1Bi5azhJW7jJezF