curriculum-project-hub/.scratch/saas-production-readiness/issues/45-build-private-platform-admin-control-plane.md

Build the private platform-administrator control plane

Type: task Status: open Blocked by: 20, 27, 28, 42, 43, 44

Question

Implement authenticated requirePlatformAdmin APIs and a private /admin/platform web area for Platform Administrators to create/list/update Organizations, bootstrap their OWNER, view/change lifecycle state, configure and test each customer-owned Feishu Application, configure the Organization's distinct platform-managed Provider Connection, and manage platform-admin allowlisting. Prove anonymous users, ordinary members, and Organization admins cannot load either page data or mutations; every sensitive action is validated, redacted, audited, observable, and covered by browser-level critical-journey tests. Emergency workload controls remain integrated through ticket 37.