Read-only Admin V2 shell. API is live; Firebase, Mongo, and Loki adapters are next.
req_17789564852160052721 critical, 1 warning
Reason and confirmation required
Access explanation should compare participants, gallery visibility, and storage counters.
room_123Resolve link flow should return fallback URL and canonical room role.
branch:latestConfig diff should show main, user override, and effective public value.
user_123| Operation | Mode |
|---|---|
| users.search | read |
| support.room-report | read |
| config.set | write |
| users.update | write |
Firebase login required later
users.read, support.read, config.read, ops.read
users.write and config.write
| Scopes | Status | |
|---|---|---|
| admin@example.com | all test scopes | active |
| support@example.com | support.read, users.read | read |
Search by user id, email, phone, or Branch link target.
users.searchWritable changes require reason, actor, and audit event.
users.updateRead from Mongo after adapter setup
Highlighted before writes
No write queue in this shell
| Key | Main | User | Effective |
|---|---|---|---|
| aicam | true | false | false |
| gallery_download | true | none | true |
| share_links | enabled | none | enabled |
Every write should store before, after, actor, reason, and request id.
config.setMongo and Loki emission planned
Require reason text
Generated at API boundary
| Time | Actor | Action | Target |
|---|---|---|---|
| 11:08 | admin@example.com | support.room-report | room_123 |
| 11:06 | admin@example.com | support.resolve-link | branch:latest |
| 11:01 | admin@example.com | ops.health | clos-test-admin-v2 |
Actor, action, target, result, request id, and timestamp are required.
audit.eventclos-test-admin-v2
test.admin.clos.vc
Immutable ECR tag deployed
| Check | Status | Evidence |
|---|---|---|
| API health | ok | /healthz |
| Traefik route | ok | Host test.admin.clos.vc |
| Old admin rollback | kept | clos-test-admin still running |
Use the CLI JSON contract for future agent support workflows.
clos-admin ops healthEvery rendered page and API response includes the active request id.
req_1778956485216005272