Workflow

Requirement Check:
- DB Type: PostgreSQL or MongoDB?
- Scope: Structural (Schema/Models) or Operational (Raw SQL/Backups)?
- Auth: Hardcoded (Env Var) or Identity (OAuth)?
Architecture Setup:
- Scaffold a Next.js application (App Router).
- Install core libs: prisma (SQL) or mongoose (Mongo), plus UI components (Shadcn/UI recommended).
Security Implementation:
- Create a global middleware.ts to block ALL routes unless authenticated.
- If Hardcoded: Check a session cookie against ADMIN_PASSWORD.
- If Identity: Integrate NextAuth.js with ALLOWED_EMAILS whitelist.
Feature Build:
- Schema Mode: specialized pages for "Table Editor" or "Collection Manager".
- Ops Mode: "Query Playground" and "Health/Metrics" pages.
Final Polish:
- Add "System Status" indicator.
- Ensure strict Content Security Policy headers.

Instructions

1. Database Connection Patterns

PostgreSQL: Always utilize Prisma ORM for type safety on the admin side.
- Ops Mode: Allow raw parameterized queries via prisma.$queryRaw.
MongoDB: Use Mongoose for schema definitions if "Structural" is requested; use raw MongoClient for "Ops" to allow unrestricted aggregation pipelines.

2. Security Patterns

The "Ironclad" Middleware:

// middleware.ts
export function middleware(req) {
  const session = getSession(req);
  if (!session || !isOwner(session.user)) {
    return new Response("Unauthorized Access Prohibited", { status: 403 });
  }
}

Env Validation: Fail build immediately if ADMIN_SECRET or DATABASE_URL is missing.

3. UI/UX Guidelines

Aesthetics: Use "Dark Mode" by default for admin tools (reduces eye strain for Ops).
Feedback: Every destructive action (Drop Table, Delete Many) MUST have a "Type the name to confirm" modal.
Data Density: Use compact tables with expandable rows for JSON/BSON data.

Workflow

Instructions

1. Database Connection Patterns

2. Security Patterns

3. UI/UX Guidelines

Resources

managing-databases

Database Admin Generator

When to use this skill