LoreBranch admin

Closed beta control room.

Use this page to operate the beta: review reports, manage trust, suspend or restore accounts, and confirm production readiness before expanding invitations.

Back to app

Account suspensions

Sign in to manage restrictions

Open sign in

Beta ops

Production readiness checklist

Database URLset

Direct migration URLset

NextAuth secretset

Google authset

Email authmissing

Payments enabledmissing

Stripemissing

Stripe webhooksmissing

Beta invite-only modeset

Beta env invitesmissing

Support emailmissing

Cron secretmissing

Maintenance modeoff

Read-only modeoff

Publishing pausedoff

Invites pausedoff

Production Vercel URL passes npm run verify:deployment

Neon production database backups are enabled and restore path is understood

Google OAuth callback points at the production domain

At least one account is flagged as moderator or admin

Reports, suspensions, restore, trust, and block actions are tested by an operator

Invite emails are normalized in /admin and copied into BETA_ALLOWED_EMAILS before redeploy

Payments are either tested end-to-end or hidden from beta users

Support/contact email is visible to beta testers

Incident response

Hide or unpublish fast

Emergency controls for obvious policy, legal, or privacy incidents. Every successful action writes moderation audit and operational event rows.

Operations health

Cron, webhooks, backups

Lightweight production telemetry for beta operations. This catches recent operational failures without adding a full observability provider yet.

Beta invites

Allowlist composer

invite only

This uses the current deploy-safe beta gate. Add emails, copy the normalizedBETA_ALLOWED_EMAILSvalue, update it in Vercel, then redeploy. Existing signed-in users remain allowed.

Invite emails

0 valid invites

No valid invite emails yet.

Vercel path: project settings, Environment Variables, editBETA_ALLOWED_EMAILSfor Production, then redeploy. Sign-in URL for invite emails: https://lorebranch.com/signin.

Privacy operations

Admin DSAR tools

Export or anonymise an account for verified data-rights requests from users who cannot use the self-service controls. These actions are admin-only and should be recorded in the external DSAR log.

Handle or emailDSAR case reference

Anonymise account

Irreversible. Type DELETE and verify the DSAR externally before continuing. Admin accounts are blocked by the API.

Audit trail

Searchable admin actions

0 matched

Persistent moderation and privacy operations recorded from production actions. Search and CSV export are loaded server-side so older actions are not hidden by the initial page.