KnearMe Admin Architecture

Route layout

• Public auth route: /login.
• Protected admin area: /dashboard/*.
• API helpers: src/app/api/*.

Representative domain sections under dashboard:

• ai (usage, costs, models)
• agents (handoffs, memory)
• businesses, chats
• review-pipeline
• system (health, logs, audit)

Auth and authorization

• Supabase auth for identity.
• admin_users table gates access and role resolution.
• Role order: superadmin > ops > viewer.
• Middleware protects private routes.

Data access model

• Standard server client for auth-sensitive checks.
• Admin service-role client for operational visibility across tenants.

Key sources

• App guide: /Users/aaronbaker/knearme-platform/apps/knearme-admin/CLAUDE.md
• Admin migrations: /Users/aaronbaker/knearme-platform/apps/knearme-admin/supabase/migrations