The admin area

import { createFileRoute, notFound, Outlet } from "@tanstack/react-router";
import {
  Building2,
  FileStack,
  FlaskConical,
  LayoutDashboard,
  Mail,
  ScrollText,
  Settings2,
  Shield,
  Users,
} from "lucide-react";
 
import { AdminShell, type AdminNavItem } from "@repo/admin-ui";
import { AccountControls } from "#/components/AccountMenu";
import { NotFoundScreen } from "#/components/system/SystemScreens";
import { m } from "#/paraglide/messages";
 
/**
 * Site administration — the jazzmin/unfold replacement, on-prem by
 * construction (runs inside the app: no CDN, no cloud console, no license
 * activation). Its own chrome (AdminShell: left nav, mobile drawer) — admin
 * is deliberately not dressed like the app. The shell is string-free by
 * contract; every label comes from Paraglide here.
 *
 * Gated on `isSiteAdmin` both here (404 — don't reveal the area exists) and
 * in every server function (`requireSiteAdmin`). Project-scoped admin (roles,
 * templates) stays inside each project's AdminPanel.
 */
export const Route = createFileRoute("/_authed/admin")({
  beforeLoad: ({ context }) => {
    const user = (context as { user?: { isSiteAdmin?: boolean } }).user;
    if (!user?.isSiteAdmin) throw notFound();
  },
  notFoundComponent: () => <NotFoundScreen />,
  component: AdminLayout,
});
 
function AdminLayout() {
  const nav: AdminNavItem[] = [
    { to: "/admin", label: m.sadmin_nav_overview(), icon: LayoutDashboard, exact: true },
    { to: "/admin/users", label: m.sadmin_nav_users(), icon: Users },
    { to: "/admin/groups", label: m.sadmin_nav_groups(), icon: Shield },
    { to: "/admin/workspaces", label: m.sadmin_nav_workspaces(), icon: Building2 },
    { to: "/admin/media", label: m.sadmin_nav_media(), icon: FileStack },
    { to: "/admin/config", label: m.sadmin_nav_config(), icon: Settings2 },
    { to: "/admin/audit", label: m.sadmin_nav_audit(), icon: ScrollText },
    { to: "/admin/outbox", label: m.sadmin_nav_outbox(), icon: Mail },
    // Lives outside /admin but shares the gate: site admins only in prod.
    { to: "/sandbox", label: m.sadmin_nav_sandbox(), icon: FlaskConical },
  ];
 
  return (
    <AdminShell
      items={nav}
      title={m.sadmin_title()}
      subtitle={m.sadmin_subtitle()}
      back={{ to: "/", label: m.sadmin_back() }}
      menuLabel={m.sadmin_menu_open()}
      closeMenuLabel={m.sadmin_menu_close()}
      collapseLabel={m.sadmin_nav_collapse()}
      expandLabel={m.sadmin_nav_expand()}
      accountSlot={<AccountControls withSignOut compact />}
    >
      <Outlet />
    </AdminShell>
  );
}