Add owner-only operational counts dashboard

app/admin/operations/operations.css

@@ -0,0 +1,16 @@
+.admin-operations-grid {
+  display: grid;
+  grid-template-columns: repeat(auto-fit, minmax(min(100%, 15rem), 1fr));
+  gap: 0.75rem;
+  margin: 1rem 0;
+}
+
+.admin-operations-grid > div {
+  padding: 0.85rem 1rem;
+  border: 1px solid var(--border);
+  border-radius: 0.5rem;
+  background: #171c16;
+}
+
+.admin-operations-grid dt { color: #b7bbaf; font-size: 0.9rem; }
+.admin-operations-grid dd { margin: 0.35rem 0 0; font-size: 1.2rem; overflow-wrap: anywhere; }

app/admin/operations/page.tsx

@@ -0,0 +1,63 @@
+'use client';
+
+import { useEffect, useState } from 'react';
+import { Button } from '@/components/ui/button';
+import { ClientRequestError, requestJson } from '@/lib/client-request';
+import type { AdminOperations } from '@/db/admin-operations';
+import '../admin.css';
+import './operations.css';
+
+type Account = { id: string; role: 'owner' | 'operator' | 'viewer' };
+type Snapshot = AdminOperations & { revision: string };
+const message = (error: unknown) => error instanceof Error ? error.message : 'Operational status is unavailable.';
+
+export default function OperationsPage() {
+  const [snapshot, setSnapshot] = useState<Snapshot | null>(null);
+  const [notice, setNotice] = useState('');
+  const [loading, setLoading] = useState(true);
+  const [refresh, setRefresh] = useState(0);
+  useEffect(() => {
+    let canceled = false;
+    requestJson<{ admin: Account }>('/api/admin/session', { cache: 'no-store' })
+      .then(async ({ admin }) => {
+        if (admin.role !== 'owner') throw new Error('Operations are available only to an owner.');
+        const result = await requestJson<Snapshot>('/api/admin/operations', {
+          cache: 'no-store', headers: { 'X-Dune-Admin-Id': admin.id },
+        });
+        if (!canceled) { setSnapshot(result); setNotice(''); }
+      })
+      .catch(error => {
+        if (canceled) return;
+        setSnapshot(null);
+        setNotice(error instanceof ClientRequestError && [401, 403].includes(error.status ?? 0)
+          ? 'Owner access changed or expired. Sign in to administration again.' : message(error));
+      })
+      .finally(() => { if (!canceled) setLoading(false); });
+    return () => { canceled = true; };
+  }, [refresh]);
+
+  return <main className="admin-shell">
+    <header className="admin-header"><div><a className="admin-return" href="/admin">Administration</a><h1>Operations</h1></div>
+      <Button variant="outline" disabled={loading} onClick={() => { setSnapshot(null); setLoading(true); setRefresh(value => value + 1); }}>Refresh status</Button></header>
+    <p>Owner-only, read-only counts from the current database and the revision baked into this server build. Refresh to take a new sample; no monitoring or automatic repair runs here.</p>
+    {notice && <p role="alert" className="admin-notice">{notice}</p>}
+    {loading ? <output>Checking owner access and database…</output> : snapshot ? <section aria-labelledby="operations-sample">
+      <h2 id="operations-sample">Sample at {new Date(snapshot.observedAt).toLocaleString()}</h2>
+      <dl className="admin-operations-grid">
+        <div><dt>Server build revision</dt><dd>{snapshot.revision}</dd></div>
+        <div><dt>Saved rooms (including removed/archived)</dt><dd>{snapshot.rooms}</dd></div>
+        <div><dt>Removed rooms</dt><dd>{snapshot.removedRooms}</dd></div>
+        <div><dt>Archived rooms</dt><dd>{snapshot.archivedRooms}</dd></div>
+        <div><dt>Paused rooms</dt><dd>{snapshot.pausedRooms}</dd></div>
+        <div><dt>Closed rooms</dt><dd>{snapshot.closedRooms}</dd></div>
+        <div><dt>Active seat credentials</dt><dd>{snapshot.activeSeats}</dd></div>
+        <div><dt>Invalid JSON room states</dt><dd>{snapshot.unreadableRooms}</dd></div>
+        <div><dt>Latest room write</dt><dd>{snapshot.lastRoomChange === null ? 'No rooms' : new Date(snapshot.lastRoomChange).toLocaleString()}</dd></div>
+        <div><dt>Room backup snapshots</dt><dd>{snapshot.backupSnapshots}</dd></div>
+        <div><dt>Backup snapshot payload bytes</dt><dd>{snapshot.backupBytes.toLocaleString()}</dd></div>
+        <div><dt>Recorded private exports</dt><dd>{snapshot.backupDownloads}</dd></div>
+      </dl>
+      <p>These counters do not check SQLite integrity, disk free space, backup recoverability, stalled decisions or server health outside this request. The invalid JSON count detects syntax only, not rule-level save validity; this page cannot repair a room.</p>
+    </section> : <p><a className="admin-room-link" href="/admin">Sign in to administration</a></p>}
+  </main>;
+}

app/admin/page.tsx

@@ -125,6 +125,7 @@ export default function Administration() {
         <div className="admin-section-heading"><div><h2 id="admin-rooms-title">Rooms</h2><p className="admin-secondary">Public room details. Cards, sealed choices and private discussion stay hidden.</p></div>
           <div className="admin-room-actions">{account.role !== 'viewer' && <Button disabled={controlsBusy} onClick={() => { setSelectedDiscussion(null); setSelectedSeatAi(null); setSelectedRoom(null); setSelectedLobby(null); setSelectedRemoval(null); setSelectedClosure(null); setSelectedArchive(null); setCreatingRoom(true); }}>Create a room</Button>}
             {account.role === 'owner' && <a className="admin-room-link" href="/admin/backups">Room backups</a>}
+            {account.role === 'owner' && <a className="admin-room-link" href="/admin/operations">Operations</a>}
             <Button variant="outline" disabled={controlsBusy} onClick={() => void load(applied, directory?.page ?? 1)}><RefreshCw aria-hidden="true" /> Refresh</Button></div></div>
         {creatingRoom && account.role !== 'viewer' && <AdminRoomCreation key={account.id} accountId={account.id}
           onClose={() => setCreatingRoom(false)} onDenied={accessChanged} onBusyChange={setOperationBusy}