Alya Dev Trip

Alya Hotel System

Plugin WordPress pour agences : hôtels et vols via Alya Dev Trip Connector. Thème cible : Hoteldz Tech. Documentation d’intégration — pas un guide pour le voyageur qui réserve.

1.1.16-dev https://alyatrip.com Pour les agences Not a hotel PMS

The product

What Alya Hotel System is

A WordPress booking layer: the browser talks only to REST alya/v1. LiteAPI remains supplier of record via bookingId.

Hotels

Search, fiche, rates, prebook, Payment SDK, book.

Flights

IATA search, verify, extras before book, prebook, book.

Agency operations

Cockpit, CRM, pricing, reports, webhooks.

It is not a property management system. Rooms and allotment stay at the supplier.

The business problem

Live inventory on WordPress, without leaking keys

Supplier isolation

API keys must stay on the server. Public pages use a nonce, not X-API-Key.

Honest booking state

A prebook is not a reservation. A sandbox card is not a production PASS.

Staff without full WP admin

Agency Admin / Staff operate the cockpit without manage_options or the vault.

No invented ROI, customer counts, or testimonials.

The solution

Hoteldz Tech → Alya → Agency → Connector

Hoteldz Tech (cible) · alyatrip.com↓ WordPress + Alya Hotel System + shortcodes↓ Agency cockpit / REST alya/v1↓ Alya Dev Trip Connector (inventory, book, Payment SDK)

Chrome live aujourd’hui : Traveler 3.2.9. Cible : Hoteldz Tech — PLANNED / FUTURE. Hop technique LiteAPI inchangé.

Platform

Verified surface

Real captures only. Hotel funnel through Pay UI; flights UI; SANDBOX cockpit.

Hotel results
Hotels Live
Prebook Pay
Prebook / Pay UI Live
Flights
Flights UI Live
Cockpit
Cockpit Live
CRM
CRM Live
Pricing
Pricing 10% Both

Hotel booking journey

Audit stopping point is after Pay UI

Search
Results
Hotel
Rates
Checkout
Prebook ✓
Payment UI ✓
Book — not this audit
Confirmation — not this audit

Prebook confirmed. Payment interface confirmed. Payment submission not performed.

Hotel search

Destination, dates, occupancy

Verified live

  • Homepage Hôtels tab and /hotels/
  • Places autocomplete → GET /alya/v1/places
  • Live: Paris, 20–22 Sep 2026, 2 adults
Hotel search widget
Homepage hotel tab — alyatrip.com

Hotel results

LiteAPI list, no second WP markup

Cards with photo, Favori, Comparer, Choisir. Favorites = localStorage.

Verified live

Hotel results
/hotels/ — Paris 20–22 Sep 2026

Hotel details

Fiche on /hotel-contract-system/

Gallery, amenities, reviews, rates, Réserver. Not a Traveler /hotel/ CPT.

Hotel fiche
hotel_id=lp1ea94 — B&B HOTEL Paris 17 Batignolles

Checkout

Holder, guest, Vérifier le tarif

Not WooCommerce checkout. Choose room first, then the guest form.

Room offers
Choose room — remboursable / non remboursable

Payment

Stripe Payment SDK

Traveler↓ Stripe Payment SDK↓ TRANSACTION_ID↓ POST /alya/v1/book

Pay was not clicked. Not a live PASS.

Payment widget
Stripe UI READY — Pay not submitted

Hotel booking status — this audit

Honesty over a fake PASS

PrebookVerified live Payment UIVerified live Payment submissionNot verified bookingIdNot generated in this audit VoucherNot generated in this audit

Flights

Search → offers → extras → Stripe

Live ALG–CDG 13–20 Sep 2026: 59+ offers, extras, Pay UI 153.94 EUR.

UI Offers Pay UI Pay not submitted

Flight offers
/flights/ — offres ALG–CDG (nonce frais)

Agency cockpit

/function-user-settings/

Staff OS outside wp-admin. SANDBOX badge. Hash navigation. Full-page captures of each module.

Cockpit
Cockpit — local mirror, not invented KPIs

Dashboard

Local KPIs only

  • Réservations 8 · Confirmées 4 · Annulées 1
  • Revenue 3446.72 EUR · Commission 313.30 EUR
  • Copy: “miroir local, rien d’inventé”
Dashboard metrics
Observed 30 Aug 2026 SANDBOX

CRM

Remote inventory + local dossiers

Tous 23 / confirmés 19 / annulés 2. Different from dashboard 8/4/1 — two inventories, not a documentation error.

CRM
#crm — “Aucun bookingId inventé”

Reservations

Local index

Total 7, confirmées 4. Payment: Carte voyageur vs Non renseigné on prebooks.

Reservations
#bookings — alya_hs_booking_index

Pricing

Server margin, LiteAPI field

Global 10%. Overlay 0. Engine cap 90%. No second WordPress markup.

Verified both

Pricing
#pricing — PricingEngine

Commission

Verified for tested 10% configuration

CA 3446.72 EUR · Commission 313.30 EUR · Markup 0.00 · Prebook excluded.

selling × 10 / (100 + 10) ≈ 313.34 vs 313.30

Observed / verified formula — not a commercial contract.

DEMONSTRATION ONLY: 110 EUR at 10% → 10 EUR.

Reports
Local SQL — not Analytics Connect

Payment architecture

Three staff methods, one public path

MethodWhoWhat it is
TRANSACTION_IDTraveler + agentStripe Payment SDK
ACC_CREDIT_CARDStaffLiteAPI agency account card
WALLETStaffLiteAPI wallet — not an Alya ledger
CREDITStaffProduction only (JS)

WooCommerce is not this engine. Prepaid Alya ledger: not found.

Agent payment methods
Staff banner: traveler card / agency card / wallet. Crédit = production only.

Plugin implementation

  • Traveler card
  • Agency account card
  • LiteAPI wallet
  • Stripe Payment SDK

NOT FOUND in plugin

  • CIB · SATIM · Edahabia
  • PayPal · Cheque · Cash

Homepage Elementor may list SATIM/CIB = marketing content, not plugin code.

Payments mirror
Cockpit payments mirror (SANDBOX). Not a published customer story.

Reports

Confirmed CA only

bookingId + CONFIRMED/BOOKED. CSV button present. Markup 0.00 on this view.

Reports
#reports

Alya Dev Trip Connector

Keys never in the browser

Alya → REST alya/v1 → vault → LiteAPI (api.liteapi.travel / book.liteapi.travel)

Inbound connector events are logged. The browser never sends the private key.

Catalogue complet : Alya Dev Trip Connector · canvas 14 août 2026.

Technical architecture

Browser isolation

BrowserHoteldz Tech / staff
WordPressAlya Hotel System
Alya Dev Trip Connector1.1.16-dev
REST alya/v1nonce + caps
LiteAPIhotels / flights
Payment SDKTRANSACTION_ID

Security

Verified mechanisms

Vault

sand_ / prod_ encrypted. Not in JS.

Nonce + limits

Public REST buckets; 429 Retry-After.

Capabilities

Staff cannot vault, purge, or agent-book.

Inbound events

Supplier events are logged. Signature details stay internal.

Verified roles

  • Administrator
  • alya_agency_admin
  • alya_agency_staff
  • Public traveler (no WP role)

NOT FOUND

  • Hotel Manager
  • Reception
  • Accountant
  • Corporate

WordPress / Hoteldz Tech

Theme chrome vs Alya widgets

  • Cible visuelle : Hoteldz Tech — PLANNED / FUTURE
  • Chrome live aujourd’hui : Traveler 3.2.9, no child. Production theme not switched.
  • Elementor present. WooCommerce cart empty — not the connector payment engine.
Homepage
Chrome actuel + recherche Alya

Is

  • Travel booking technology
  • Hotels + flights via LiteAPI
  • Agency cockpit, CRM, reports
  • Pricing & commission (local)

Not verified as

  • Hotel PMS / allotment / reception
  • Alya prepaid wallet
  • QR / WhatsApp delivery
  • CIB / SATIM / PayPal

Current product status

Evidence labels

Live verified homepage, hotel funnel to Pay UI, flights UI, 9 cockpit modules.

Code verified REST, roles, wallet/ledger absence, cancel rules, cron hooks.

Partial Stripe pk, PARTIEL menus, CRM vs local counts.

Requires access authorized Pay, voucher, remaining hashes, DNS.

Not found PMS, extra roles, CIB/SATIM, QR.

Wallet

LiteAPI wallet is not an Alya ledger

Staff method WALLET. Local prepaid ledger: not found.

Agencies
No wallet balance UI · unique agency, not multi-tenant PMS

Database

CPT + alya_hs_* mirrors

Supplier of record remains LiteAPI bookingId. Schema version 1.1.21-perf-idx.

alya_booking CPT↓ booking_index / payments / documents / webhooks / flight_sessions

REST alya/v1

Browser never sends X-API-Key

~100 routes. Public nonce + limits. Staff capabilities. Bodies: NOT DETERMINED beyond PHP — not invented.

Commercial

Alya Dev Trip · Alya Hotel System · Alya Dev Trip Connector · Hoteldz Tech

Technique (inchangé)

LiteAPI · api.liteapi.travel · book.liteapi.travel

Catalogue : Alya Dev Trip Connector (14 août 2026). Pas le cockpit Alya.

Theme / Website Architecture Context

Hoteldz Tech is the target theme

Cible : Hoteldz Tech (PLANNED / FUTURE). Chrome live aujourd’hui : Traveler 3.2.9. Alya widgets are theme-agnostic. Chrome is not. Plan: documentation/theme-migration/. Production theme not switched.

Hoteldz Tech cible
Chrome actuel + recherche Alya — cible Hoteldz Tech

Differentiation (evidence only)

Strengths that are verified

  • REST isolation — keys stay in vault
  • Hotel funnel live through Payment SDK UI
  • Agency cockpit with honest local KPIs
  • PricingEngine margin (tested 10%)

Limitations

Shown because they are true

No bookingId/voucher this audit. Flight nonce. No PMS. No CIB/SATIM in plugin. No Alya prepaid wallet.

Next validation — not a sales roadmap

Authorized tests still needed

  • Sandbox Pay → confirmation → voucher
  • Reload flights → offers
  • Remaining cockpit + WP-admin shots
  • Staging only for hoteldz.tech

Alya Dev Trip

https://alyatrip.com

Public homepage contacts only. Plugin 1.1.16-dev.

contact@alyatrip.com · +213 550 108 856