Documentation
Admin and operations
Admin panel
Updated 2026-11-03
Admin panel
The admin is Filament at /admin and is protected by authentication and two-factor authentication. Every game runs its own admin and database.
Main areas
| Area | What it controls |
|---|---|
| Collectibles and profiles | Catalog, taxonomy, media, profiles, SEO, abilities |
| Mechanics | Versioned mechanics profile; activation and rollback |
| Feature settings | DB-backed flags for mechanics, abilities, quiz, control, timed trials and caps |
| Abilities | Definitions, versions and assignment |
| Quiz | Sets, questions, options, sample size, attempt caps |
| Timed trials | Quiz timer and grace |
| Anti-cheat | Read-only findings and flags (no automatic sanction) |
| Theme scaffold | Generate and validate a new theme pack |
| Test lab | Allowlisted verification suites and bounded simulations |
| Command reference | Every project command with usage, safety and where it is exposed |
| Manual sections | Runtime player/admin/kit manual in EN/IT |
| Media gallery and editor | Uploads, non-destructive edits, background removal |
| Image generator | Local Stable Diffusion generation and process control |
| Events and campaigns | Events, campaigns, rewards and settlement |
| Moderation | Reports, rules, sanctions, appeals and Player 360 |
| Localization | Keys, runtime values and file sync |
| Legal documents | Drafts, placeholders and publication |
| Client build | Build the APK and the web preview |
| Control plane | Signed multi-game API and licences |
| Growth | Settings, meta templates, redirects, 404 log, SEO audit, landing pages, social assets, ASO |
Safety rules
- Admin actions are authorized by policies.
- Destructive operations require deliberate confirmation.
- The command reference runs only allowlisted read-only commands.
- The test lab records every run and refuses arbitrary shell commands.
- Secrets are never shown in the admin.
- Two-factor authentication stays enabled on operator accounts.
Roles
Policies map admin areas to permissions. Keep operator accounts separate and revoke access when a person leaves. See the operations docs.
Manuals
The admin Manual sections resource is the runtime manual served at /manual and through GET /api/v1/manual. The product documentation you are reading is separate and lives in resources/docs/.