Operations Home
Loading your role-scoped platform status.
Priority Work
Loading role-scoped operational queues...
Infrastructure Health
Read-only sync| Name | Status | Provider | Owner | Visibility | Source |
|---|
System Mix
From live service typesHosting0
VPS0
Email0
DNS0
Welcome Back
Services, onboarding, billing, and support in one friendly control room.
Your Services
Loading servicesAccount Status
- Loading account status...
Support
Loading support availability...
Billing Status
| Loading billing status... |
My Account
Profile, session security, and access settings for this Backstage account.
Session details load after sign in.
- Role
- Checking
- Session
- Secure and active
- Service scope
- Role scoped
Multi-Factor Authentication
Sign in requiredUse an authenticator app before MFA is required for your account.
Authenticator setup
Open authenticator link
Scan this code with Microsoft Authenticator, Google Authenticator, or another TOTP app.
Enter a setup key instead
Recovery codes
Store these somewhere private. They are displayed only once.
Notifications
LoadingLoading account notifications...
Service Command Center
Every purchased service mapped to the right customer, provider, plan, entitlement, and next action.
Service Ledger
Entitlement source of truth| Service | Customer | Provider | Plan | Status | Next |
|---|
Customer Visibility Rule
Customer sees owned services
Admin sees all services
Support sees assigned accounts
Pending check
Billing drives entitlement
Provisioning Studio
Orders become services through provider-specific adapters, confirmation gates, rollback notes, and audit events.
Provisioning Queue
Safe orchestration staging| Order | Customer | Service | Provider | Stage | Status | Review |
|---|
Safety Gates
Read-only checks first
Idempotency key per action
Destructive actions need approval
Audit event after every adapter call
Product Templates & Capacity
Loading configurationOwner Decisions
- Loading activation gates
Mapping Suggestions
- Loading mapping suggestions
VPS Services
Virtualizor records load from live provider sync after sign in.
VPS Information
- IPv4
- Available after service mapping
- OS
- Provider managed
- Node
- Provider managed
- Uptime
- Provider managed
- Panel
- Virtualizor
Resource Mix
Console
Provider write disabledConsole access will open through the approved Virtualizor flow after service mapping and action gates are enabled.
Website Hosting
HestiaCP website records load from live provider sync after sign in.
Resource Mix
Website Tools
Recent Activity
| Website activity appears after live provider events are connected. |
Domains
Registration, DNS health, SSL status, renewals, and ownership signals in one list.
Domain Portfolio
Loading domains| Domain | Service | DNS | SSL | Renews |
|---|
Renewal Mix
87 renewals next 7 days
12 SSL checks pending
3 registrar actions needed
Mailboxes, aliases, forwarders, authentication, and deliverability posture.
Domain Authentication
SPF aligned
DKIM active
DMARC monitor mode
MX records healthy
Mailboxes
| Mailbox | Usage | Aliases | Status |
|---|
DNS
Zone records, propagation checks, mail records, and change history without spelunking through raw panel screens.
Zone Signal
DNS Zone
Live records pending| Type | Name | Value | TTL |
|---|
Backups
Website, database, email, and VPS restore points with restore intent separated from destructive action. Revolutionary, apparently.
Schedule
Websites: daily at 02:00
Databases: every 12 hours
VPS snapshots: weekly
Offsite retention: configure
Restore Points
Loading restore points| Date | Target | Type | Size | Status |
|---|
Billing
Plans, invoices, renewals, credits, and payment state tied to the services customers actually own.
Recent Invoices
Loading invoices| Invoice | Customer | Service | Total | Status |
|---|
Support
Tickets, account context, service health, and guided fixes before everything becomes a group chat autopsy.
WHMCS routing
Loading departments
Checking sync
Select a ticket
Choose a request from the queue to review its conversation and available actions.
Access & Approvals
Manage panel users, role boundaries, account holds, and privileged decisions.
Policy role
Panel Users
Sign in requiredSign in as an admin to load users.
| User | Role | Status | MFA | Password | Source |
|---|
Permission Matrix
Production gate model| Role | Customer Data | Web Hosting | VPS Power | Billing | Admin Tools |
|---|
Current Preview Role
Owner Admin
Can see the full fleet, manage customers, review billing, provider readiness, and privileged lifecycle actions.
Billing Supervisor
Can manage billing lifecycle actions, including immediate termination, account deletion, and abuse/security hold removal, without provider credential access.
Customer
Only sees purchased services, invoices, support tickets, and safe self-service actions.
Support Agent
Can run broad customer assist actions and place abuse/security holds; termination, account deletion, hold removal, provider credentials, and entitlement sync stay escalated.
Approval Queue
Sign in required| Request | Requester | Status | Service | Requested |
|---|
Entitlement Source
Billing plan maps services
Hestia user maps websites
Virtualizor user maps VPS access
Team roles use panel user storage
Audit Events
Loading recent events| Time | Actor | Action | Guardrail |
|---|
Platform Health
Current provider sync, storage, and backend availability.
Web domains, DNS zones, mailboxes, databases, SSL, cron, backups, and user quotas.
Needs API credential vaultVPS list, power actions, console links, snapshots, rebuilds, plans, IPs, and usage.
Needs API credentialsPlans, invoices, renewal state, customer ownership, credits, and service gates.
Model definedTickets, account timeline, health checks, guided fixes, and escalation requests.
Workflow mappedLive Backend Readiness
Current checks
Loading backend health...
Action Capability Matrix
Loading actions| Action | Area | Provider | State | Roles | Release |
|---|
Drift & Reconciliation
Loading findings| Finding | Severity | Provider | Resource | Detected |
|---|
Worker & Queue Health
LoadingLoading queue health...
Launch Readiness
Sign in required| Area | Status | Impact | Next Step |
|---|
Integration Canary Activation
Owner MFA requiredLoading guarded support and billing actions...
Production Phase Acceptance
Loading 26 phasesProduction gateEvaluating
Loading exact launch blockers...
| Phase | Status | Evidence | Next Gate |
|---|
Public Launch Buildout
Loading phases| Phase | Status | Impact | Next Step |
|---|
Storage & Sync Persistence
Loading storage| Layer | Status | Purpose | Next Step |
|---|
Live Provider Sync
Loading sync status| Provider | Status | Records | Public Results | Next Gate |
|---|
Live Provider Inventory
Sign in required| Provider | Resource | Owner Hint | Customer | Visibility | Last Sync | Action |
|---|
Page 1
WHMCS Mapping Workbench
Loading WHMCS mappings| WHMCS identity or service | Suggested panel or provider record | Confidence reason | Mapping state | Last confirmation | Command |
|---|---|---|---|---|---|
| Loading WHMCS mappings | |||||
Auth Gates
Loading auth gates| Role | Session | Provider Reads | Writes | Blocked By | Next Gate |
|---|
Provider Write Contracts
Loading contracts| Action | Provider | Adapter Operation | Reads | Rollback | Enablement Blockers | Status |
|---|
Adapter Dry-Run Replay
Loading dry runs| Action | Provider | Replay Sequence | Write Handling | Audit | Rollback | Blockers | Status |
|---|
Recovery Evidence
Loading evidence gates| Gate | Provider | Protects | Evidence Needed | Proof Method | Approval | Next Step | Status |
|---|
Restore Drill Approval Packets
Loading packets| Packet | Provider | Target | Scope | Preconditions | Evidence Fields | Stop Conditions | Approval | Status |
|---|
Backup Inventory Collection
Loading collectors| Collector | Provider | Scope | Evidence Fields | Run Mode | Browser Run | Next Step | Status |
|---|
Backup Collector Runner
Loading runner gates| Gate | Requirement | Run Handling | Evidence Output | Status |
|---|
Backup Evidence Store
Loading evidence packets| Packet | Run | Collector | Provider | Target | Status | Safety | Created |
|---|
Guarded Action Catalog
Loading actions| Action | Provider | Area | Policy | Roles | Notifications | Customer Notice | Public Reasons | Risk | Status |
|---|
Audit & Approval Policy
Loading audit policy| Event | Risk | Approval | Notifications | Customer Notice | Public Reasons | Status | Notes |
|---|
Service Ownership Map
Loading ownership| Customer | Service | Provider | Provider Resource | Owner Gate | Next Step |
|---|
Provider Identity Registry
Loading registry| Service | Provider | Account Ref | Resource Ref | Registry | Next Step |
|---|
Provider Adapter Diagnostics
Loading adapter contracts| Adapter | Stage | First Read | Read Calls | Blocked By | Next Step |
|---|
Provider Sync Plan
Loading read model| Provider | Stage | Reads | Maps To | Preview Rows | Next Step |
|---|
Provider Read Jobs
Loading read jobs| Provider | Job | Status | Method | Maps To | Blocked By |
|---|
Live Read Bridge
Loading bridge gates| Provider | Job | Bridge | Request | Public Run | Next Gate |
|---|
Support & Billing Stack
Loading recommendations| Area | Recommendation | Fit | Integration | Status |
|---|
WHMCS Support Activation
Loading support plan| Phase | Decision | Why | Next Step | Status |
|---|
Live Chat Options
Loading options| Option | Hosting | Cost Posture | Fit | Status |
|---|
Action Pipeline
- 1Resolve service ownerBilling and account map
- 2Check permissionRole and entitlement gate
- 3Confirm riskSafe, sensitive, or destructive
- 4Call adapterProvider-specific API client
- 5Write audit eventOutcome, actor, target
First Safe Actions To Wire
Low-risk API reads first| Action | Provider | Risk | Why first |
|---|---|---|---|
| List customer websites | HestiaCP | Read only | Confirms account mapping |
| List customer VPS instances | Virtualizor | Read only | Confirms entitlement model |
| Show usage and health | Both panels | Read only | Useful before write actions |
| Open support timeline | Support | Read only | Gives agents context |