feat(credits-admin): auth-first responsive console (login gate + activity center + slide-over detail)

prisma/migrations/20260714213447_admin_audit_created_at_id_index/migration.sql

@@ -0,0 +1,2 @@
+-- CreateIndex
+CREATE INDEX "AdminAudit_createdAt_id_idx" ON "AdminAudit"("createdAt", "id");

prisma/schema.prisma

@@ -499,6 +499,7 @@ model AdminAudit {
   @@unique([accountId, idempotencyKey])
   @@index([accountId, createdAt])
   @@index([actorEmail, createdAt])
+  @@index([createdAt, id])
 }
 
 /// Per-PR agent variant (dev XMTP network only). A named bundle pinning an

src/api/v2/credits-admin/audit-repository.ts

@@ -1,4 +1,4 @@
-import type { AdminAudit } from "@prisma/client";
+import type { AdminAudit, Prisma } from "@prisma/client";
 import { prisma } from "@/utils/prisma";
 
 export type AdminAuditAction = "grant" | "adjust";
@@ -35,3 +35,51 @@ export const listAdminAuditByAccount = async (
     take: limit,
   });
 };
+
+export type RecentAuditCursor = { createdAt: Date; id: string };
+
+// Delimiter-safe: neither field can contain "|" (ISO timestamp + UUID id).
+export const encodeAuditCursor = (r: { createdAt: Date; id: string }): string =>
+  Buffer.from(`${r.createdAt.toISOString()}|${r.id}`).toString("base64url");
+
+export const decodeAuditCursor = (raw: string): RecentAuditCursor | null => {
+  try {
+    const decoded = Buffer.from(raw, "base64url").toString("utf8");
+    const idx = decoded.indexOf("|");
+    if (idx < 0) return null;
+    const createdAt = new Date(decoded.slice(0, idx));
+    const id = decoded.slice(idx + 1);
+    if (Number.isNaN(createdAt.getTime()) || !id) return null;
+    return { createdAt, id };
+  } catch {
+    return null;
+  }
+};
+
+export const listRecentAdminAudit = async (args: {
+  limit?: number;
+  cursor?: RecentAuditCursor | null;
+  action?: AdminAuditAction | null;
+}): Promise<{ rows: AdminAudit[]; nextCursor: string | null }> => {
+  const limit = args.limit ?? AUDIT_LIST_LIMIT;
+  const where: Prisma.AdminAuditWhereInput = {};
+  if (args.action) where.action = args.action;
+  if (args.cursor) {
+    // Keyset (createdAt, id) < (cursor). Prisma has no tuple comparison, so
+    // OR-expand. The id tiebreaker keeps paging stable when createdAt collides.
+    where.OR = [
+      { createdAt: { lt: args.cursor.createdAt } },
+      { createdAt: args.cursor.createdAt, id: { lt: args.cursor.id } },
+    ];
+  }
+  const rows = await prisma.adminAudit.findMany({
+    where,
+    orderBy: [{ createdAt: "desc" }, { id: "desc" }],
+    take: limit + 1,
+  });
+  const hasMore = rows.length > limit;
+  const page = hasMore ? rows.slice(0, limit) : rows;
+  const last = page.at(-1);
+  const nextCursor = hasMore && last ? encodeAuditCursor(last) : null;
+  return { rows: page, nextCursor };
+};

src/api/v2/credits-admin/credits-admin.router.ts

@@ -4,8 +4,10 @@ import { accountViewGetHandler } from "./handlers/account-view-get";
 import { adjustPostHandler } from "./handlers/adjust-post";
 import { adminPageHandler } from "./handlers/admin-page";
 import { auditGetHandler } from "./handlers/audit-get";
+import { auditRecentGetHandler } from "./handlers/audit-recent-get";
 import { grantPostHandler } from "./handlers/grant-post";
 import { searchGetHandler } from "./handlers/search-get";
+import { whoamiGetHandler } from "./handlers/whoami-get";
 import { attachActorIdentity } from "./middleware/cf-identity";
 import { creditsAdminTokenAuth } from "./middleware/token-auth";
 
@@ -15,8 +17,19 @@ export const creditsAdminRouter = Router();
 creditsAdminRouter.get("/", adminPageHandler);
 
 // Reads — token gate only (no audit write).
+creditsAdminRouter.get(
+  "/whoami",
+  creditsAdminTokenAuth,
+  attachActorIdentity,
+  whoamiGetHandler,
+);
 creditsAdminRouter.get("/search", creditsAdminTokenAuth, searchGetHandler);
 creditsAdminRouter.get("/audit", creditsAdminTokenAuth, auditGetHandler);
+creditsAdminRouter.get(
+  "/audit/recent",
+  creditsAdminTokenAuth,
+  auditRecentGetHandler,
+);
 creditsAdminRouter.get(
   "/accounts/:accountId",
   creditsAdminTokenAuth,