bedrud-fe-admin

name	bedrud-fe-admin
description	Admin dashboard — route guards, data tables, overview widgets, settings tabs, queue, recordings stub.
license	Apache License

Bedrud Frontend Admin

React 19 SPA. apps/web/. TanStack Query 5 + Recharts. Path alias #/* → ./src/*.

---

Access model

Role	Admin shell	Mutations	Settings
superadmin / admin	yes	full	yes
moderator	yes (isReadOnly)	blocked in UI	redirected away
others	redirected → /dashboard	—	—

Layout guard — routes/dashboard/admin.tsx:

• loader: fetch /api/auth/me if needed; allow superadmin | admin | moderator; else → /dashboard (unauth → /auth)
• AdminContext: { isReadOnly, isModerator, currentUserId } via useAdminContext()
• Moderators: isReadOnly: true (kick/mute/suspend/delete/role UI hidden)

Settings extra guard — admin/settings.tsx beforeLoad: moderators and non-admin → /dashboard/admin

Sidebar nav — routes/dashboard.tsx ADMIN_NAV: Overview, Queue, Users, Rooms, Settings. Recordings nav entry commented (// TODO oncoming feature).

---

Admin Routes

All under /dashboard/admin/ (layout admin.tsx → <Outlet />).

Route	File	Purpose
/dashboard/admin	admin/index.tsx	Overview → <AdminOverviewPage />
/dashboard/admin/queue	admin/queue.tsx	Queue stats → <QueueStatsPage />
/dashboard/admin/recordings	admin/recordings.tsx	Stub — “Coming in a future release”
/dashboard/admin/rooms	admin/rooms.tsx	Rooms list: filters, bulk suspend/close, create room (?create=true)
/dashboard/admin/rooms/$roomId	admin/rooms_.$roomId.tsx	Live room detail: meta, bitrate chart (3s poll), participants mute/kick, suspend/delete, persistent toggle
/dashboard/admin/rooms/events	admin/rooms_.events.tsx	Room events log: type/date/search + RoomEventsTable
/dashboard/admin/users	admin/users.tsx	Users list: filters, bulk ban/promote/delete
/dashboard/admin/users/$userId	admin/users_.$userId.tsx	User detail: hero, role/status, force-logout, delete, rooms + sessions tabs
/dashboard/admin/users/recent-signups	admin/users_.recent-signups.tsx	Recent signups: provider/date filters + RecentSignupsTable
/dashboard/admin/settings	admin/settings.tsx	System settings (per-tab draft + save)

Route file note: pathless-underscore files (rooms_.$roomId) map to nested URL segments without nesting layouts.

---

Key APIs (by page)

Page	Endpoints
Overview	GET /api/admin/overview (poll 60s)
Queue	GET /api/admin/queue (poll 10s)
Rooms list	GET /api/admin/rooms?limit=1000&status=…, bulk `POST …/bulk/suspend
Room detail	GET …/rooms/:id/participants (3s), kick/mute, POST …/suspend, DELETE …/rooms/:id, PUT …/rooms/:id (settings/persistent)
Room events	GET /api/admin/rooms/events?page&limit&q&type&dateFrom&dateTo
Users list	GET /api/admin/users?limit=1000, bulk `POST …/bulk/ban
User detail	GET …/users/:id, GET …/sessions?page&limit, PUT …/status, PUT …/accesses, DELETE …/users/:id, POST …/force-logout
Recent signups	GET /api/admin/users/recent?…
Settings	GET/PUT /api/admin/settings, validate POST …/settings/validate, test email POST …/settings/send-test-email
Invite tokens	GET/POST /api/admin/invite-tokens, delete by id
Webhooks	GET/POST /api/admin/webhooks, PUT/DELETE …/:id, POST …/:id/test
Cert info	GET /api/admin/cert-info (Server tab)

---

Admin Components — src/components/admin/

Data table primitives

Component	File	Purpose
DataTableSearch	DataTableSearch.tsx	Search input
DataTablePagination	DataTablePagination.tsx	Page + limit controls
DataTableFacetedFilter	DataTableFacetedFilter.tsx	Multi-select faceted filter
DataTableFilterChips	DataTableFilterChips.tsx	Active filter chips
DataTableToolbar	DataTableToolbar.tsx	Toolbar + chips from table state
DataTableBulkBar	DataTableBulkBar.tsx	Bulk selection bar + action buttons
useTableState	useTableState.ts	Client filter/sort/page/selection for { id }[] items

Note: There are no standalone UserTable.tsx / RoomTable.tsx. Users/rooms list UIs are inline in the route files.

Domain tables / pages

Component	File	Purpose
RoomEventsTable	RoomEventsTable.tsx	Events rows (type, room, user, time)
RecentSignupsTable	RecentSignupsTable.tsx	Signup rows → user detail links
RecordingsTable	RecordingsTable.tsx	Stub + RecordingItem type (future)
QueueStatsPage	queue-stats.tsx	Queue KPIs, depth bar, email queue, recent failures
ProviderBadge	ProviderBadge.tsx	Auth provider badge (local/google/github/guest/passkey)

Action / chrome

Component	File	Purpose
AdminBulkBar	AdminBulkBar.tsx	Alternate bulk bar (children slot)
AdminControlBar	AdminControlBar.tsx	Rooms control bar + shared filter opt constants
AlertConfirmDialog	AlertConfirmDialog.tsx	Confirm dialog (used by users bulk)
RowActionsDropdown	RowActionsDropdown.tsx	Room row menu (view/edit/suspend/close/delete)

---

Overview Widgets — admin/overview/

Composed by AdminOverviewPage (overview/index.tsx). Data: useAdminOverview().

Export	File	Purpose
AdminOverviewPage	index.tsx	Layout: header, health, KPIs, chart+composition, ops panels
AdminHealthStrip	health-strip.tsx	Overall / TLS / realtime / DB / uptime / alerts
AdminKpiRow	kpi-row.tsx	5 KPIs: totalUsers, onlineNow, totalRooms, activeSessions, pendingActions
KpiCard	kpi-card.tsx	Single KPI + delta
AdminActivityChart	activity-chart.tsx	Lazy-loaded Recharts area: roomsCreated / active / participants
AdminRoomComposition	room-composition.tsx	live / public / private / persistent (+ stale in type)
AdminNeedsAttention	needs-attention.tsx	Severity-sorted attention items
AdminRecentSignups	recent-signups.tsx	Widget list + link to full page
AdminRecentEvents	recent-events.tsx	Widget list + link to room events
AdminDetailTable	detail-table.tsx	Placeholder tabs linking to full Users/Rooms pages (not used on overview)

---

Settings Tabs — admin/settings/

Active tabs in settings.tsx TABS (9):

id	Label	Component	Notes
general	General	GeneralTab	Reg mode open/invite/closed; auto-save via onPatch. Embeds InviteTokensSection
auth	Authentication	AuthTab	Passkeys, guest login, JWT/session, Google/GitHub/Twitter OAuth
livekit	LiveKit	LiveKitTab	Host, API key/secret, external flag + validate
server	Server	ServerTab	Port/host/domain/TLS/ACME/proxy, limits, cert status
email	Email	EmailTab	Branding, subjects/preheaders, SMTP, send-test-email
cors	CORS	CorsTab	Origins/headers/methods/credentials/maxAge
chat	Chat	ChatTab	Upload backend disk/S3/inline, retention, quotas
logging	Logging	LoggingTab	logLevel
webhooks	Webhooks	WebhookSection	CRUD + test; no settings fields (TAB_FIELDS.webhooks = [])

Not in active TABS (stub code remains):

• RecordingsTab (recordings-tab.tsx) — stub placeholder; import still exported from index.ts; tab entry + TabsContent commented (// TODO oncoming feature)
• SystemSettings still has recordingsEnabled, recordingMaxDurationMins, recordingMaxFileSizeMB (future)

Save model

• Per-tab drafts → sticky Save only sends current tab’s changed fields
• General uses immediate handlePatch (no draft)
• Local validation: validateLocalSettings from shared.tsx; server validate button hits /api/admin/settings/validate

Shared settings helpers

Export	File	Purpose
Section, Field, TextInput, Toggle, ValidateButton, validateLocalSettings	shared.tsx	Form chrome + client validation
SystemSettings, InviteToken, RegMode	types.ts	Settings domain types
barrel	index.ts	Re-exports tabs + shared + types

---

Lib hooks & types

src/lib/use-admin-overview.ts

useAdminOverview() → GET /api/admin/overview, refetchInterval: 60_000.

Key types: AdminOverview, OverviewHealth, TLSStatus, OverviewKPIs, KpiEntry, DayActivity, RoomComposition, AttentionItem, RecentUser, RoomEvent, AdminRoomEvent, InstanceInfo.

src/lib/use-queue-stats.ts

useQueueStats() → GET /api/admin/queue, refetchInterval: 10_000.

QueueStats: pending/active/done24h/failed24h/total/maxDepth/oldestPending/recentFailures/rates + email: pendingEmail, failedEmail24h, lastSendError, lastSendErrorAt.

src/types/admin.ts

Export	Purpose
AdminUser	List/detail user DTO
AdminRoom	List room DTO (+ optional settings, owner fields)
ROLE_OPTS	superadmin / admin / moderator / user / guest
ROLE_ACCESS_MAP	role → accesses[] payload
detectRole, getRoleLabel	Role helpers for badges/selects

---

Page behavior notes

Rooms list

• Sub-tabs: All Rooms | Room events
• Filters: visibility, status (also server query), capacity, created
• Bulk: suspend, close (queued jobs)
• Create via CreateRoomDialog (isAdmin); overview “Create room” navigates with ?create=true

Room detail

• Live participants + rolling bitrate history (60 samples ≈ 3 min)
• Actions gated by !isReadOnly: mute, kick, suspend, delete, toggle isPersistent
• Recordings section removed (TODO comment)

Users list

• Sub-tabs: All Users | Recent sign-ups
• Filters: provider, role, status, created
• Bulk ban/promote/delete; excludes currentUserId; delete is queued

User detail

• Role Select + confirm; active/banned toggle; force-logout + email-confirm delete
• Tabs: Rooms (activity chart + list) | Room Sessions (paginated)

Settings

• Superadmin/admin only
• Masked secrets in inputs; OAuth empty → falls back to config.yaml (server-side)

---

Future / stubs (do not invent full UI)

Location	Status
/dashboard/admin/recordings	Placeholder page
RecordingsTable	Placeholder component + RecordingItem type
RecordingsTab	Placeholder; not wired in settings TABS
Sidebar Recordings nav	Commented out
Webhook event recording.completed	Listed, marked TODO
Room detail recordings section	Removed with TODO