11 — Admin Panel (Super-Admin / Vendor-Side) #

Panel untuk vendor (kita — penjual aplikasi) memantau license, tenants (SaaS), telemetry, billing, support. Ini BUKAN panel hotel staff. Hotel staff pakai User Panel (lihat 12-USER_PANEL.md).

URL convention: /admin di host vendor (e.g. admin.hotelhub.id atau host khusus untuk standalone).

1. Akses & isolasi #

• Route group admin.* dengan middleware auth:admin + role:super_admin|support|sales.
• Tabel admin_users terpisah dari users (hotel staff) — tidak overlap.
• 2FA wajib (TOTP) untuk semua admin user.
• Login attempt logged + alert untuk gagal berturut-turut.
• Standalone deploy biasa tidak expose admin panel ke internet umum — guarded oleh IP whitelist + bind ke port internal.
• SaaS deploy: admin panel di subdomain khusus, di belakang VPN / Cloudflare Access (P2).

2. Layout #

[Sidebar]                        [Topbar: search, notifications, profile]
─────────────────────────────────────────────────────────────────────────
🏠 Dashboard
🔑 Licenses
   ├── Active
   ├── Expired
   ├── Revoked
   └── Pairing logs
🏢 Tenants (SaaS only)
   ├── All tenants
   ├── New signups
   ├── Trials
   └── Churned
💳 Billing
   ├── Subscriptions
   ├── Invoices
   ├── Coupons
   └── Failed payments
📊 Telemetry & Health
   ├── System health (per tenant)
   ├── API call usage
   ├── Errors / alerts
   └── Database size
🤝 Support
   ├── Tickets
   ├── Knowledge base
   └── Live chat queue (P2)
🛍 Marketplace (P3)
   ├── Add-ons
   └── Affiliates
👥 Admin Users
   ├── Roles
   └── Activity log
🔧 System
   ├── Feature flags
   ├── Pricing config
   ├── Email templates
   ├── Update notifications
   └── Audit log

3. Module: Licenses #

List view #

• Search by license key, hotel name, owner email
• Filter: active / expired / revoked / unpaired
• Bulk action: extend, revoke, send reminder

Detail view #

Per license:

• Key (masked, copy-on-click)
• Owner contact
• Plan & feature set
• Issued / expires / last heartbeat
• Paired devices (with revoke per device)
• Usage telemetry (rooms count, bookings/month)
• Pairing log (history of attach/detach)
• Action: extend, regenerate token, revoke, send to owner

Create license (manual sale flow) #

Form: company name, contact, plan (standalone vs SaaS), feature flags, max rooms, max users, validity period, payment status. Generate key + send activation email.

Bulk operations #

• Import from CSV (mass migration from old activation system)
• Export usage report

Lihat detail desain di 16-LICENSE_PAIRING_DESIGN.md.

4. Module: Tenants (SaaS) #

Hanya muncul kalau APP_MODE=saas.

List #

• Tenant id, slug, custom domain, plan, status (active / trial / suspended / churned)
• Created at, last active at
• Rooms count, bookings/month, MRR

Detail per tenant #

Tabs:

• Overview — KPI: rooms, occupancy avg, monthly bookings, MRR
• Subscription — current plan, next renewal, payment history, upgrade/downgrade button
• Usage — API calls, storage, queue jobs, AI tokens consumed (per BYOK provider)
• Database — size, last backup, restore point
• Logs — recent errors, slow queries, login activity
• Domain — primary, custom, SSL status
• Impersonate — login-as button (audit-logged) untuk troubleshooting

Tenant lifecycle #

• Trial 14 days → notify D-7, D-3, D-0
• Auto-suspend setelah lewat grace 7 days unpaid
• Suspend = read-only mode, data retained 90 days
• Hard-delete setelah 90 days (with multiple notifications) — atau owner export & cancel

5. Module: Billing #

• Subscriptions view per tenant
• Invoices (PDF) — generated otomatis monthly
• Failed payments queue — retry + dunning
• Coupons / promo codes — create, expire, usage cap
• Tax handling — kalau owner aplikasi PKP, generate faktur pajak per invoice (via Coretax)
• Payment methods — owner aplikasi BYOK juga (Midtrans/Xendit/Stripe untuk billing tenants)

6. Module: Telemetry & Health #

Polling endpoint dari setiap deployment (standalone & tenant) push ke central:

POST /admin/telemetry/heartbeat
{
  "license_key": "...",
  "deployment_id": "...",
  "version": "1.4.2",
  "rooms_count": 24,
  "active_bookings": 18,
  "queue_jobs_pending": 3,
  "queue_jobs_failed_24h": 0,
  "errors_24h": 12,
  "db_size_mb": 380,
  "uptime_pct_24h": 99.9
}

Heartbeat tiap 1 jam. Stored di tabel deployment_heartbeats (rolling 30 days).

Alert rules:

• No heartbeat 24 jam → "Deployment offline"
• queue_jobs_failed_24h > 50 → notify support
• errors_24h spike (3x baseline) → notify dev team
• DB size > plan limit → notify sales team (upsell)

Dashboard chart: deployment health overview, top-error tenants, version distribution.

7. Module: Support #

Tickets #

• Created by tenant via in-app help button or email
• Priority: low / medium / high / urgent
• SLA target by plan tier
• Assign to support agent
• Internal notes vs customer-facing reply
• Linked to tenant/license context

Knowledge base #

• Markdown articles
• Versioned per app version
• Public URL (slug-based)

Live chat (P2) #

• Queue + agent assignment

8. Module: Admin Users & Roles #

admin_users
├── id, email, password (bcrypt)
├── name, phone
├── role_id
├── two_factor_secret_encrypted
├── is_active
├── last_login_at, last_login_ip
└── timestamps

admin_roles
├── id, name (super_admin|sales|support|finance|dev_ops|read_only)
├── permissions (JSON array of permission keys)
└── timestamps

Permission contoh: licenses.create, licenses.revoke, tenants.impersonate, billing.refund, system.feature_flags, audit.read, dll.

Activity log per admin user: every action (especially impersonation, refund, license revoke) logged.

9. Module: System Settings #

Feature flags #

Global toggle features yang bisa dipatok per tenant atau global:

• enable_ai_demand_forecast (default off)
• enable_marketplace_addons (P3)
• force_2fa_for_owners
• dll

UI: list flag + tenant override matrix.

Pricing config #

Edit plan: name, monthly/yearly price, feature set, rooms cap, user cap, AI quota baseline. Activate / deprecate plan.

Email templates #

Master template untuk:

• Trial expiring
• Payment failed
• Pairing success
• License expired
• Welcome email

WYSIWYG + variable insert.

Update notifications #

Push announcement to all tenants:

• "v1.5 released — new feature X"
• "Maintenance window Sunday 02:00 WIB"

Tampil di user panel banner. Tenant-targeted (by plan, by region).

Audit log #

Read-only, searchable, exportable. Retention 7 tahun.

10. Module: Marketplace (P3) #

• Add-ons — paid features tenant bisa subscribe (e.g. "Spa module", "Banquet module", "Revenue Management AI")
• Affiliates — referrer tracking + commission ledger
• Owner aplikasi atau third-party developer bisa publish add-on

Phase 3, opsional.

11. Branding & White-label #

Kalau jualnya sebagai white-label (reseller boleh re-brand):

• Per-reseller theme: logo, color, domain, invoice template
• Reseller ID di license — semua tenant under reseller masuk ke MRR-nya
• Reseller punya sub-admin panel /reseller (limited subset of admin) — Phase 2

12. Reports yang tersedia #

13. Stack #

• Filament admin panel (atau custom-built Livewire) — quick to build
• Charts: Apache ECharts atau Chart.js
• Real-time: Laravel Echo + Reverb untuk live notifications
• Auth: Laravel Fortify + custom 2FA + IP whitelist guard

14. Open questions #

1. Filament vs custom Livewire untuk admin? Filament cepat tapi kurang lentur untuk custom flow license.
2. Apakah perlu mobile admin app, atau cukup responsive web?
3. Multi-region deployment (Asia + Europe) untuk reduce latency tenant push? Phase 3.
4. Reseller portal di Phase 2 atau Phase 3?