Admin console
The admin console is a React UI under /admin. Its navigation is defined in
frontend/src/components/admin/nav.ts; its mounted routes are defined in
frontend/src/App.tsx. Documentation for an admin page should match both
files: nav.ts tells operators what appears in the sidebar, while App.tsx
tells them which component renders for each route.
AdminGuard mounts the admin route tree for every authenticated browser
session and renders a 403 view for non-admin users. That keeps admin URLs
deterministic instead of falling through to chat.
Workspace map
| Workspace | Workspace route | Pages shown in the current nav |
|---|---|---|
| Mission Control | /admin | Mission Control dashboard. |
| Activity | /admin/activity | Live feed at /admin/activity/live; Conversations at /admin/activity/conversations; Time-travel replay at /admin/activity/replay; Audit log at /admin/activity/audit; Usage & cost at /admin/activity/usage; Network egress at /admin/activity/network-egress. |
| Agents | /admin/agents | Registry at /admin/agents/registry; Memories at /admin/agents/memories; Skills at /admin/agents/skills. |
| Inference | /admin/inference | Single-page workspace combining upstream providers and per-role model assignment; no child routes. |
| Integrations | /admin/integrations | Knowledge content at /admin/integrations/knowledge; Retrieval sources at /admin/integrations/retrieval; Data pipelines at /admin/integrations/pipelines; Connectors at /admin/integrations/connectors; Plugins at /admin/integrations/plugins. |
| Governance | /admin/governance | Tool decisions at /admin/governance/tool-decisions; Runtime policy at /admin/governance/runtime-policy. |
| Access | /admin/access | Users at /admin/access/users; SSO providers at /admin/access/sso. |
| Platform | /admin/platform | Stack at /admin/platform/stack; Secrets at /admin/platform/secrets; Backups at /admin/platform/backups; Deploy at /admin/platform/deploy; Update at /admin/platform/update; Sandbox sessions at /admin/platform/sandbox; API reference at /admin/platform/api. |
Data pipelines is listed in the navigation but no React route is mounted in
frontend/src/App.tsx as of this commit. Treat /admin/integrations/pipelines
as a reserved nav target until a route is added.
Route ownership
| Area | Primary frontend files | Backend surfaces |
|---|---|---|
| Mission Control, Stack, Deploy, Update | frontend/src/components/admin/mission, frontend/src/components/admin/platform, frontend/src/components/admin/system | Gateway admin/status APIs, compose/installer job APIs. |
| Activity, Conversations, Replay | frontend/src/components/admin/AgentActivityPage.tsx, frontend/src/components/admin/conversations, frontend/src/components/admin/replay | Agent runtime turn history, replay, trace, and activity APIs. |
| Audit log | frontend/src/components/admin/AuditPage.tsx, frontend/src/components/admin/audit | Audit service receipt/event APIs through the gateway. |
| Usage & cost | frontend/src/components/admin/UsagePage.tsx | Observability service /v1/generations*, /v1/prices*, and admin usage APIs. |
| Network egress | frontend/src/components/admin/NetworkEgressPage.tsx | Audit service egress stats at /v1/admin/audit/egress/stats. |
| Registry | frontend/src/components/admin/agents | Agent registry/version APIs. |
| Inference | frontend/src/components/admin/InferenceWorkspacePage.tsx, frontend/src/components/admin/inference/ProvidersSection.tsx, frontend/src/components/admin/inference/RolesSection.tsx, frontend/src/api/inference.ts, frontend/src/api/roles.ts | Gateway /v1/admin/inference/* proxy to inference-router — providers/models catalog via frontend/src/api/inference.ts plus per-role model selection via /v1/admin/inference/roles (frontend/src/api/roles.ts, model_roles table). |
| Memories | frontend/src/components/admin/MemoryExplorerPage.tsx, frontend/src/components/admin/memoryExplorer | Memory service admin query/delete APIs. |
| Skills | frontend/src/components/admin/SkillsPage.tsx, frontend/src/api/skills.ts | Agent runtime /v1/skills and user-skill store. |
| Knowledge content | frontend/src/components/admin/KnowledgePage.tsx, frontend/src/components/admin/knowledge | Knowledge service document/audience APIs. |
| Retrieval sources | frontend/src/components/admin/ConnectorsPage.tsx, frontend/src/components/admin/connectors | Connector/retrieval source APIs. |
| Connectors | frontend/src/components/admin/ConnectorsAdminPage.tsx, frontend/src/components/admin/connector-hub, frontend/src/api/mcp.ts, frontend/src/api/oauthProviders.ts | Agent runtime /v1/admin/mcp-servers*, /v1/admin/oauth-providers*, /v1/admin/connector-capabilities*. |
| Plugins | frontend/src/components/settings/PluginsPage.tsx | Plugin catalog/install APIs. |
| Tool decisions, Runtime policy | frontend/src/components/admin/AgentOpsPage.tsx, frontend/src/components/admin/PoliciesPage.tsx | AgentOps decision store, guardrail policy, and runtime policy APIs. |
| Users, SSO providers | frontend/src/components/admin/UsersPage.tsx, frontend/src/components/admin/SsoSettingsPage.tsx | Keycloak, auth service, and SSO provider APIs. |
| Secrets | frontend/src/components/admin/platform/PlatformSecretsPage.tsx, frontend/src/components/admin/system/SecretsPage.tsx | Tenant secrets and platform secret APIs. |
| Sandbox sessions | frontend/src/components/admin/SandboxSessionsPage.tsx | Code-sandbox admin/session APIs. |
| API reference | frontend/src/components/admin/ApiDocsPage.tsx | Static frontend reference page. |
Legacy path redirects
Legacy path redirects are defined in ADMIN_LEGACY_REDIRECTS in
frontend/src/components/admin/nav.ts and mirrored in frontend/src/App.tsx.
They keep older bookmarks alive after the admin IA reshuffle. Examples:
| Old path | New path |
|---|---|
/admin/operate/activity | /admin/activity/live |
/admin/operate/models | /admin/inference |
/admin/agents/models | /admin/inference |
/admin/agents/providers | /admin/inference |
/admin/knowledge/content | /admin/integrations/knowledge |
/admin/tools/mcp | /admin/integrations/connectors |
/admin/govern/audit | /admin/activity/audit |
/admin/identity/oauth-providers | /admin/integrations/connectors |
/admin/integrations/mcp | /admin/integrations/connectors |
/admin/integrations/oauth | /admin/integrations/connectors |
/admin/developer/sandbox | /admin/platform/sandbox |
/admin/system/secrets | /admin/platform/secrets |
When adding a new admin page, update frontend/src/components/admin/nav.ts,
mount the route in frontend/src/App.tsx, and update this page in the same
change.
Verified against commit 5187b91e (2026-06-11) · sources 3972575c3c82.