curriculum-project-hub/.scratch/saas-production-readiness/issues/46-build-private-org-admin-control-plane.md

Build the private Organization-administrator control plane

Type: task Status: open Blocked by: 20, 27, 28, 32, 36, 43, 44

Question

Turn the guarded Organization JSON APIs into a usable private /admin/org/:orgSlug web control plane for OWNER/ADMIN users. Cover members and roles, teams and Project access, Folders/Projects/chat unbinding, sessions and usage, model/role/run policy, Organization policy limits and alerts, Feishu connection readiness, Provider Credential Mode selection, and BYOK key/base URL management without ever displaying stored plaintext. Preserve server-side authorization on every request, define safe loading/error/empty states, and prove login redirect plus browser journeys, cross-Organization denial, MEMBER denial, secret redaction, and logout/session expiry end to end.