admin

Canonical repo source: docs/dev/admin.md

Wiki status: Current-state summary

Last Synced: 2026-04-09

Admin Panel Development

Current Admin Model

• awcms/ is the maintained admin application
• React 19.2.4 + Vite ^8.0.5
• JavaScript ES2022+
• Supabase remains the source of truth for Auth, PostgreSQL, RLS, and ABAC
• Cloudflare Workers are the maintained server-side operational/runtime boundary

Current High-Risk Rules

• tenant isolation is mandatory in admin code
• UI permission checks are UX guardrails, not final authority
• permission keys must use scope.resource.action
• admin routes with protected identifiers should follow current signed-route-param guidance
• useAdminMenu() is scope-aware and data-driven, not a static global sidebar assumption

Canonical Repo Docs

• docs/dev/admin.md
• docs/modules/MENU_SYSTEM.md
• docs/security/abac.md