Admin/Ops

Admin/Ops workbench

Read-only local skeleton for minimum POC metrics, operational queues, region coverage, and featured seed inventory. Mutations and production Admin enforcement are intentionally not represented as complete.

Auth guard placeholder. Admin route and API are read-only skeletons until identity roles and admin policy enforcement are wired. Guard status: TODO(auth/admin).

Dependencies

Issue contract map

issue #2

Identity, Profile, Role, and Region

User summaries, Admin role boundary, verified host marker, and Region labels.

Admin/Ops cannot move past mock auth/RLS/admin policy until roles and Region records are real.

issue #3

Session read model, Discover list, and Session detail

Session, Song, Setlist, Slot, public Region, and status read projections.

Featured inventory and metrics must read #3 data rather than redefining Session shape.

issue #4

Host create, edit, and cancel Session flow

Host-owned created, edited, cancelled, and hidden Session state.

Admin correction views must not bypass Host lifecycle semantics or notification boundaries.

issue #5

Request Slot, Application, and Waitlist workflow

Application and Waitlist queues with pending and waitlisted states.

Pending application counts stay mock-only until #5 persists player requests.

issue #6

Host approval, Lineup, Prep chat, and address unlock

Approval, Lineup, participant access, Prep chat, and private address unlock state.

Admin support context cannot claim address or chat access auditing before #6 exists.

issue #7

Completed Session, Recap, Rating, and trust history

Completed/offline-happened Session, recap, rating, no-show, and cancellation signals.

Trust history and no-show queues remain illustrative until #7 creates durable evidence.

issue #8

Admin/Ops workbench and operational metrics

Read-only Admin/Ops workbench, metrics, queues, readiness, runbook, and checklist.

This bounded slice exposes contract shape only; admin mutations and audit writes are follow-up.

issue #9

PRD: Octav POC real-operations MVP

Acceptance standard and POC success metrics.

Metrics must stay tied to the PRD success criteria, not ad hoc analytics.

issue #10

Development services, procurement, and invoice support

procurement/secrets/monitoring blockers for staging and controlled production.

Live accounts, provider setup, monitoring, invoices, and secret-management stay HITL.

issue #11

Trust, safety, and compliance launch readiness

trust/safety/legal blockers for reports, moderation, adult-only, privacy, and copyright.

Moderation categories, SLA, support escalation, and legal copy stay HITL before launch.

Staging readiness

Staging blockers and HITL boundaries

Required visible boundaries: auth/RLS/admin policy; Supabase CLI/db reset; procurement/secrets/monitoring; trust/safety/legal.

auth/RLS/admin policy

Route is explicitly read-only mock with TODO(auth/admin); staging needs server Admin role rejection tests for Host and Player users.

Engineeringissue #2, issue #8

todo_before_staging

Operational queue data contracts

Pending applications, featured sessions, moderation, and trust signals are mock projections until upstream read models exist.

Engineeringissue #3, issue #4, issue #5, issue #6, issue #7

blocked_upstream

Supabase CLI/db reset

This Admin/Ops slice does not run or claim database reset, migration promotion, or seed-data readiness.

Engineeringissue #8, issue #10

todo_before_staging

procurement/secrets/monitoring

Accounts, domains, invoices, monitoring, analytics, and secret-management are visible as blockers only.

No service account, live provider, credential, token, billing, receipt, or monitoring decision is made in #8.

Human/Opsissue #10

blocked_hitl

trust/safety/legal

Moderation queue is visible but report categories, adult-only copy, Terms, Privacy, Code of Conduct, copyright, and SLA remain HITL.

No legal/policy approval or support escalation ownership is implied by the mock queue.

Legal/Policyissue #11

blocked_hitl

PRD success metrics

The mock dashboard exposes seed users, registered users, sessions, applications, full sessions, completed/offline-happened sessions, region coverage, and moderation queue counts.

Admin/Opsissue #8, issue #9

mock_ready

Runbook

Operational queue handling

readinessissue #2, issue #8

Verify Admin access boundary before staging

Before any staging rehearsal uses Admin/Ops data.

Action: Confirm server auth, role lookup, RLS policy, and non-Admin rejection tests from issue #2 and issue #8 are in place.
Boundary: Do not describe this mock page or API as a live Admin-protected route.

applicationsissue #5, issue #6

Review pending Applications without changing state

Host review needs support visibility for stuck requests or waitlist pressure.

Action: Use the queue to inspect applicant, requested Slot, Region, and mock age of the request; leave approve, decline, and Prep chat unlock to #5/#6 flows.
Boundary: Do not add Admin approval mutations, direct Lineup edits, or private location unlocks in this slice.

moderationissue #7, issue #8, issue #11

Triage reports and risky items as policy placeholders

Reports, restricted users, no-show signals, or copyright concerns appear in seed ops.

Action: Record category, severity, status, and redacted preview for Admin/Ops visibility; route policy decisions to #11.
Boundary: Do not finalize report copy, block semantics, moderation SLA, legal language, or raw private chat access here.

seed_opsissue #3, issue #4, issue #8, issue #11

Check featured seed inventory against upstream Session state

Admin/Ops needs to rehearse launch-region inventory and POC metrics.

Action: Compare featured candidates to #3/#4 Session status, Region, open Slots, and cancellation state once those contracts are real.
Boundary: Do not hardcode production launch Region, create seed Sessions, or mutate featured state from this read-only route.

readinessissue #10

Escalate service and monitoring blockers

Staging or controlled-production readiness mentions accounts, domains, email, monitoring, analytics, invoices, or secret-management.

Action: Leave the item visible in the readiness checklist and hand it to #10 Human/Ops with no values recorded in source code.
Boundary: Do not store credentials, billing details, receipt contents, or live provider configuration in this workbench.

Checklist

Readiness contract checks

blocked_upstreamstaging

User/Profile/Role/Region contract available to Admin/Ops

Admin user summaries and Region coverage are mock until #2 provides role and Region read models.

Engineering - issue #2

blocked_upstreamstaging

Session/Song/Setlist/Slot read model feeds inventory and metrics

Featured and region inventory must read #3 state before staging data is claimed.

Engineering - issue #3

blocked_upstreamstaging

Host create/edit/cancel state is visible without redefining Host flow

Admin correction views must respect Host lifecycle and notification boundaries from #4.

Engineering - issue #4

blocked_upstreamstaging

Application and Waitlist queues use #5 state

Pending and waitlisted queues are mock-only until Application persistence exists.

Engineering - issue #5

blocked_upstreamstaging

Approval, Lineup, Prep chat, and address access are auditable

Admin/Ops can show private-location support boundaries only after #6 defines participant access.

Engineering - issue #6

blocked_upstreamstaging

Completed Session, Recap, Rating, no-show, and cancellation signals exist

Trust-history queue items are illustrative until #7 creates durable recap/rating evidence.

Engineering - issue #7

mock_readystaging

Admin/Ops route remains read-only until audited mutations are specified

This route exposes only GET read projections with no admin writes, no live auth claim, and no provider wiring.

Engineering - issue #8

mock_readystaging

POC metrics remain tied to PRD acceptance standard

Metric labels follow the PRD success criteria and should not drift into unrelated analytics.

Admin/Ops - issue #9

blocked_hitlcontrolled_production

Procurement, accounts, monitoring, invoices, and secret-management are resolved

Keep #10 visible as HITL; no credentials, billing details, or live service decisions belong in this source tree.

Human/Ops - issue #10

blocked_hitlcontrolled_production

Trust, safety, legal, support, adult-only, privacy, and copyright gates are resolved

Keep #11 visible as HITL; this mock queue does not approve policy, SLA, report copy, or launch readiness.

Legal/Policy - issue #11

slotApplicationsGoal 50

Slot applications

Read-only mock until issue #5 owns Application/Waitlist persistence.

fullSessionsGoal 10

Full sessions

Mock full or capacity-reached Sessions.

completedOfflineHappenedSessionsGoal 10

Completed/offline happened

Mock completed or ops-confirmed offline Sessions.

regionCoverageGoal 5

Region coverage

CityTown coverage with seed users, Sessions, or registered users.

pendingApplications

Pending applications

1 additional mock Application is waitlisted.

reportsModerationQueue

Reports/moderation queue

Open and in-review reports or risky items for Admin/Ops visibility.

Users

Role and restriction state

noneNew Brunswick, Middlesex County, NJ

Nora Admin

Roles: admin
Seed cohort: Yes
Verified host: No

noneNew Brunswick, Middlesex County, NJ

Maya Chen

Roles: player, host
Seed cohort: Yes
Verified host: Yes

noneHoboken, Hudson County, NJ

Andre Walker

Roles: player, host
Seed cohort: Yes
Verified host: No

restrictedJersey City, Hudson County, NJ

Theo Grant

Roles: player
Seed cohort: No
Verified host: No

noneEdison, Middlesex County, NJ

Sam Patel

Roles: player, host
Seed cohort: Yes
Verified host: No

Applications

Pending applications

Theo Grant

Indie rhythm section rehearsal - New Brunswick, Middlesex County, NJ

Can cover rhythm and lead parts; available for the full two-hour window.

Guitar on Reptilia2026-06-22T11:15:00.000Z

blocked by issue #5

Priya Shah

Indie rhythm section rehearsal - New Brunswick, Middlesex County, NJ

Comfortable adding pads and simple harmonies; profile instruments need validation.

Keys on Dreams2026-06-22T11:42:00.000Z

blocked by issue #5

Leo Martin

Classic rock open slots - Hoboken, Hudson County, NJ

Joining waitlist because the session is nearing capacity.

Backing vocals on Seven Nation Army2026-06-22T12:05:00.000Z

blocked by issue #5

Trust signals

Moderation queue

address_privacy

Reporter says a participant asked for private location details before approval.

Redacted chat preview. Enter admin support context after audit is implemented.

reportReporter user_maya_host

open

highblocked by issue #11

no_show

Completed Session has a no-show signal that should feed future trust history after #7.

Trust history and dispute policy are not implemented in this skeleton.

risky_itemReporter system_mock

in_review

mediumblocked by issue #11

copyright

Reporter wants confirmation that recap links cannot contain full copyrighted songs.

reportReporter user_andre_host

open

lowblocked by issue #11

Trust controls

Report and block summaries

address_privacy

Report received for address privacy. Sensitive incident detail is redacted.

Reporter redacted

open2026-06-25T13:00:00.000Z

metadata only

block

Active user block. Future Application submission is blocked by the API.

Reporter redacted

active2026-06-25T13:05:00.000Z

metadata only

Regions

Region coverage

ActiveNew Jersey

New Brunswick, Middlesex County, NJ

Registered / seed users: 2 / 2
Sessions / open slots: 1 / 2
Pending applications: 2

ActiveNew Jersey

Hoboken, Hudson County, NJ

Registered / seed users: 1 / 1
Sessions / open slots: 1 / 1
Pending applications: 1

ActiveNew Jersey

Jersey City, Hudson County, NJ

Registered / seed users: 1 / 0
Sessions / open slots: 1 / 0
Pending applications: 0

ActiveNew Jersey

Edison, Middlesex County, NJ

Registered / seed users: 1 / 1
Sessions / open slots: 1 / 0
Pending applications: 0

InactiveNew York

New York, New York County, NY

Registered / seed users: 0 / 0
Sessions / open slots: 0 / 0
Pending applications: 0

Seed ops

Featured sessions

openNew Brunswick, Middlesex County, NJ

Indie rhythm section rehearsal

Seed inventory with verified host and two open slots.

2026-07-03T23:30:00.000Z

fillingHoboken, Hudson County, NJ

Classic rock open slots

Useful for waitlist and application queue rehearsal.

2026-07-09T00:00:00.000Z

Boundaries

Human/legal, Procurement, and follow-up work

Human/legal policy - blocked: Issue #11 owns adult-only wording, Terms, Privacy, Code of Conduct, report policy, block semantics, copyright policy, moderation SLA, and support escalation.
Procurement and accounts - blocked: Issue #10 owns Vercel, Supabase, Apple Developer, domain, email, monitoring, analytics, invoices, payment method, and secret-management setup.
Admin mutations - todo: This first version is read-only. Region/session/report/restriction writes need real auth, persistence, and audit evidence before they can be claimed.

Contract

Read-only skeleton TODOs

TODO: TODO(auth/admin): replace this guard placeholder with server-side Admin role enforcement before staging.
TODO: Connect metrics to Supabase read models once issue #5 Application/Waitlist data exists.
TODO: Keep admin mutations disabled in this skeleton; issue #8 follow-up must add audited writes after the read model is real.
TODO: Do not treat report categories, moderation SLA, block semantics, or legal copy as complete; those remain issue #11 HITL decisions.
TODO: Do not treat accounts, domains, invoices, email provider, monitoring, analytics, or secret storage as complete; those remain issue #10 procurement work.
TODO: TODO(runtime): Supabase CLI/db reset has not been verified from this read-only Admin/Ops contract; do not claim staging migration readiness here.