Internal admin

Operate AIMSOO without SSH: approvals, rebuilds, and audit trails live in one console.

The README mandates that Cloud SQL is canonical and workers only derive data. This console honors that by routing every action through FastAPI so RBAC, logging, and compliance stay intact.

Reviews & approvals

Triage submissions, enforce publishing thresholds, and green-light jobs that will regenerate ISR pages.

Propagation health

Monitor worker queues, rerun failed jobs, and view propagation scores without shell access.

Emergency rebuilds

Trigger selective re-publishes from Cloud SQL snapshots when caches drift or assets expire.

Guardrails (do not break)
  • FastAPI verifies Firebase tokens + role (viewer, editor, owner, platform_admin).
  • Cloud SQL stays canonical—admins never write around the API.
  • Service accounts back every worker action; audit logs persist in SQL.
  • Redis or other caches are introduced only for locks and rate limits if metrics demand it.

Runbooks

Publish → derive → rebuild, with admin hooks at each layer.

When something drifts, admins rebuild from source: Cloud SQL rows feed workers, workers regenerate artifacts, ISR republishes pages.

  1. 1Audit

    Investigate

    Use SQL-backed audit trails to see who published what and when, down to job step IDs.

  2. 2Control

    Mitigate

    Pause or resume workers, pin jobs, or force regeneration without redeploying anything.

  3. 3Rebuild

    Propagate

    Kick Cloud Tasks that re-derive embeddings, JSON-LD, and pages directly from canonical data.

RBAC matrix

viewer

Read-only visibility into jobs, logs, and public snapshots.

editor

Approve business edits, request publishes, and monitor propagation scores.

owner

Manage organization members, trigger rebuilds, and review sensitive assets.

platform_admin

Full control: RBAC policy updates, worker tuning, and compliance exports.

Need platform-admin access?

Reach out to the platform team; invites are managed via FastAPI so every action is logged.