Admin Portal

Critical

• Magic-link auth only — admin emails: shai@superseller.agency, shai@superseller.agency. No password auth.
• Role check: session.role === 'admin' — non-admins redirected to client dashboard.
• Session: 30-day expiry, encrypted AES-256-GCM cookie superseller_client_session.
• 37+ components, 28+ API routes — always check existing components before creating new ones.
• Admin URL: admin.superseller.agency (same Vercel project as superseller.agency, different route).
• Clarity tracks admin sessions tagged surface=admin — filter them out in Clarity's dashboard when reviewing customer UX data. Sensitive admin surfaces (revenue, customer IDs, credentials) MUST be wrapped in data-clarity-mask="true" before shipping. Full policy: docs/PRIVACY.md.

Architecture

admin.superseller.agency → /admin/page.tsx → verifySession() → AdminDashboardClient.tsx
                                                             ↓
                                                    Inline sidebar + header (no separate layout)
                                                             ↓
                                                    19 Tab Components (sidebar nav)