Expand admin observability with drill-downs, geo clarity, and LLM tracking.

Clickable dashboard panels, admin-gated detail APIs, full country names with SA highlight, and server-side token logging on all LLM routes for open-beta monitoring without exposing PII.

Co-authored-by: Cursor <cursoragent@cursor.com>

Author: Your Name

app/api/admin/observability/audit/route.ts

@@ -0,0 +1,25 @@
+import { ok, handleError, enforceRateLimit } from "../../../_utils";
+import { parseDaysParam, requireAdmin } from "@/lib/analytics/admin-api";
+import { buildAuditInsight } from "@/lib/analytics/drilldown";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/** Admin drill-down: per-user or global audit trail (no raw PII). */
+export async function GET(req: Request) {
+  try {
+    const limited = await enforceRateLimit(req, "default");
+    if (limited) return limited;
+
+    const { user, error } = await requireAdmin();
+    if (error) return error;
+
+    const url = new URL(req.url);
+    const days = parseDaysParam(req.url);
+    const userId = url.searchParams.get("userId") || undefined;
+    const payload = await buildAuditInsight(days, userId);
+    return ok({ ...payload, admin: { email: user!.email } });
+  } catch (e) {
+    return handleError(e);
+  }
+}

app/api/admin/observability/geo/route.ts

@@ -0,0 +1,23 @@
+import { ok, handleError, enforceRateLimit } from "../../../_utils";
+import { parseDaysParam, requireAdmin } from "@/lib/analytics/admin-api";
+import { buildGeoInsight } from "@/lib/analytics/drilldown";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/** Admin drill-down: geographic traffic with full country names and SA highlight. */
+export async function GET(req: Request) {
+  try {
+    const limited = await enforceRateLimit(req, "default");
+    if (limited) return limited;
+
+    const { user, error } = await requireAdmin();
+    if (error) return error;
+
+    const days = parseDaysParam(req.url);
+    const payload = await buildGeoInsight(days);
+    return ok({ ...payload, admin: { email: user!.email } });
+  } catch (e) {
+    return handleError(e);
+  }
+}

app/api/admin/observability/llm/route.ts

@@ -0,0 +1,23 @@
+import { ok, handleError, enforceRateLimit } from "../../../_utils";
+import { parseDaysParam, requireAdmin } from "@/lib/analytics/admin-api";
+import { buildLLMInsight } from "@/lib/analytics/drilldown";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/** Admin drill-down: LLM call and token usage statistics. */
+export async function GET(req: Request) {
+  try {
+    const limited = await enforceRateLimit(req, "default");
+    if (limited) return limited;
+
+    const { user, error } = await requireAdmin();
+    if (error) return error;
+
+    const days = parseDaysParam(req.url);
+    const payload = await buildLLMInsight(days);
+    return ok({ ...payload, admin: { email: user!.email } });
+  } catch (e) {
+    return handleError(e);
+  }
+}

app/api/admin/observability/pages/route.ts

@@ -0,0 +1,25 @@
+import { ok, handleError, enforceRateLimit } from "../../../_utils";
+import { parseDaysParam, requireAdmin } from "@/lib/analytics/admin-api";
+import { buildPageInsight } from "@/lib/analytics/drilldown";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/** Admin drill-down: page view breakdown (all pages or single path). */
+export async function GET(req: Request) {
+  try {
+    const limited = await enforceRateLimit(req, "default");
+    if (limited) return limited;
+
+    const { user, error } = await requireAdmin();
+    if (error) return error;
+
+    const url = new URL(req.url);
+    const days = parseDaysParam(req.url);
+    const path = url.searchParams.get("path") || undefined;
+    const payload = await buildPageInsight(days, path);
+    return ok({ ...payload, admin: { email: user!.email } });
+  } catch (e) {
+    return handleError(e);
+  }
+}

app/api/admin/observability/users/route.ts

@@ -0,0 +1,23 @@
+import { ok, handleError, enforceRateLimit } from "../../../_utils";
+import { parseDaysParam, requireAdmin } from "@/lib/analytics/admin-api";
+import { buildUsersInsight } from "@/lib/analytics/drilldown";
+
+export const runtime = "nodejs";
+export const dynamic = "force-dynamic";
+
+/** Admin drill-down: registered users with masked emails and activity stats. */
+export async function GET(req: Request) {
+  try {
+    const limited = await enforceRateLimit(req, "default");
+    if (limited) return limited;
+
+    const { user, error } = await requireAdmin();
+    if (error) return error;
+
+    const days = parseDaysParam(req.url);
+    const payload = await buildUsersInsight(days);
+    return ok({ ...payload, admin: { email: user!.email } });
+  } catch (e) {
+    return handleError(e);
+  }
+}

app/api/llm/complete-checklist-item/route.ts

@@ -1,6 +1,6 @@
 import { bad, handleError, ok, safeJson, enforceRateLimit } from "../../_utils";
 import { GLOBAL_SYSTEM } from "@/lib/prompts";
-import { callLLM, extractJSON, isLLMConfigured } from "@/lib/llm";
+import { callLLM, llmTracking, extractJSON, isLLMConfigured } from "@/lib/llm";
 import type { ResearchTypeAnswersV2 } from "@/lib/types";
 import { buildContextBundle, bundleToPromptBlock } from "@/lib/agents/contextBundle";
 
@@ -65,6 +65,7 @@ Return ONLY this JSON:
       maxTokens: 900,
       temperature: 0.15,
       jsonOnly: true,
+      tracking: llmTracking(req, "/api/llm/complete-checklist-item"),
     });
     const parsed = extractJSON<{
       canDraft: boolean;

app/api/llm/cover-letter/route.ts

@@ -1,6 +1,6 @@
 import { bad, handleError, ok, safeJson, enforceRateLimit } from "../../_utils";
 import { GLOBAL_SYSTEM } from "@/lib/prompts";
-import { callLLM, isLLMConfigured } from "@/lib/llm";
+import { callLLM, llmTracking, isLLMConfigured } from "@/lib/llm";
 import { buildContextBundle, bundleToPromptBlock } from "@/lib/agents/contextBundle";
 import type { ProjectState } from "@/lib/types";
 
@@ -69,6 +69,7 @@ Return ONLY this JSON:
       prompt,
       jsonOnly: true,
       maxTokens: 1500,
+      tracking: llmTracking(req, "/api/llm/cover-letter"),
     });
     let parsed: { letter?: string; warnings?: string[] };
     try {

app/api/llm/enhance/route.ts

@@ -1,6 +1,6 @@
 import { bad, handleError, ok, safeJson, enforceRateLimit } from "../../_utils";
 import { GLOBAL_SYSTEM } from "@/lib/prompts";
-import { callLLM, isLLMConfigured } from "@/lib/llm";
+import { callLLM, llmTracking, isLLMConfigured } from "@/lib/llm";
 import type { ResearchTypeAnswersV2 } from "@/lib/types";
 import { buildContextBundle, bundleToPromptBlock } from "@/lib/agents/contextBundle";
 
@@ -54,6 +54,7 @@ Return ONLY this JSON:
       maxTokens: 400,
       temperature: 0.2,
       jsonOnly: true,
+      tracking: llmTracking(req, "/api/llm/enhance"),
     });
 
     // Try to parse the JSON; on failure, return the raw text as value.

app/api/llm/final-report/route.ts

@@ -1,5 +1,5 @@
 import { bad, handleError, ok, safeJson, enforceRateLimit } from "../../_utils";
-import { callLLM, extractJSON, isLLMConfigured } from "@/lib/llm";
+import { callLLM, llmTracking, extractJSON, isLLMConfigured } from "@/lib/llm";
 import { GLOBAL_SYSTEM, finalReportPrompt } from "@/lib/prompts";
 import type { ProjectState } from "@/lib/types";
 import { buildContextBundle, bundleToPromptBlock } from "@/lib/agents/contextBundle";
@@ -113,6 +113,7 @@ export async function POST(req: Request) {
       maxTokens: 4000,
       temperature: 0.1,
       jsonOnly: true,
+      tracking: llmTracking(req, "/api/llm/final-report"),
     });
     let report = extractJSON<Record<string, unknown>>(text1);
 
@@ -130,6 +131,7 @@ export async function POST(req: Request) {
           maxTokens: 4000,
           temperature: 0.05,
           jsonOnly: true,
+          tracking: llmTracking(req, "/api/llm/final-report"),
         });
         report = extractJSON<Record<string, unknown>>(text2);
       } catch {

app/api/llm/generate-section/route.ts

@@ -1,6 +1,6 @@
 import { bad, handleError, ok, safeJson, enforceRateLimit } from "../../_utils";
 import { GLOBAL_SYSTEM, REFINE_SECTION_SCHEMA } from "@/lib/prompts";
-import { callLLM, extractJSON, isLLMConfigured } from "@/lib/llm";
+import { callLLM, llmTracking, extractJSON, isLLMConfigured } from "@/lib/llm";
 import type { LLMRefineResponse, ResearchTypeAnswersV2 } from "@/lib/types";
 import { designById } from "@/lib/registry/designs";
 import { guidelineById } from "@/lib/guidelines";
@@ -108,6 +108,7 @@ Return ONLY the JSON object.`;
       maxTokens: 4000,
       temperature: 0.25,
       jsonOnly: true,
+      tracking: llmTracking(req, "/api/llm/generate-section"),
     });
     const parsed = extractJSON<LLMRefineResponse>(text);
     return ok(parsed);