Dashboard Overview
Real-time operations •
Notifications
Mark all readLive notifications ready
New orders, M-Pesa payments, and stock alerts will appear here.
Live Stock Volume Tracker
Revenue Analytics
Peak Order Hours
Recent M-Pesa Transactions
| Time | Customer | Package | Amount | M-Pesa Code | Status | Order ID | Actions |
|---|---|---|---|---|---|---|---|
| No M-Pesa transactions recorded today. | |||||||
All Orders
| Order ID | Customer | Product | Qty | Amount | Receipt | Status | Date | Actions |
|---|---|---|---|---|---|---|---|---|
| No orders recorded yet. | ||||||||
Customer Directory
Product Catalog
Driver Fleet
Delivery Queue
| Order ID | Customer | Area | Package | Driver | Status | ETA | Actions |
|---|---|---|---|---|---|---|---|
| No deliveries queued yet. | |||||||
Recurring Orders
Bottle Tracking by Customer
| Customer | 20L Issued | 10L Issued | Returned | Outstanding | Deposit (KSh) | Last Return | Actions |
|---|---|---|---|---|---|---|---|
| Grace Wanjiku | 4 | 2 | 3 | 3 | 1,500 | 25 Jun 2026 | |
| Nairobi Office Hub | 10 | 5 | 12 | 3 | 1,500 | 28 Jun 2026 |
M-Pesa Transaction Log
| Transaction ID | Phone | Amount | M-Pesa Receipt | Status | Time |
|---|---|---|---|---|---|
| No M-Pesa records yet. | |||||
Daraja API Configuration
Business Shortcode
Lipa Na M-Pesa Paybill
Paybill Account
Customer account reference
Callback URL
Safaricom webhook — must be HTTPS, validated with signature
Live Credentials
Consumer Key, Consumer Secret, Passkey — env variables only, never in code
Expense Categories
Expense Log
| Date | Category | Description | Amount | Recorded By | Receipt |
|---|---|---|---|---|---|
| 29 Jun 2026 | Fuel | Route Westlands → Kilimani | 3,200 | Manager | RCPT-001 |
| 28 Jun 2026 | Maintenance | Truck tyre replacement | 8,500 | Super Admin | RCPT-002 |
Monthly Revenue Trend
Product Sales Mix
Daily Operations Summary
| Date | Day | Orders | Revenue | Avg Order | Status |
|---|---|---|---|---|---|
| No analytics loaded yet. | |||||
Customer Reviews
Support Tickets
| Ticket ID | Customer | Subject | Priority | Status | Assigned | Created | Actions |
|---|---|---|---|---|---|---|---|
| No support tickets yet. | |||||||
Audit Log — Who Changed What
Authentication
Admin JWT Auth
All admin routes require a valid JWT + approved admin email.
CSRF Protection
Mutations, auth forms, and payments require CSRF tokens.
Rate Limiting
Auth, payment, and review endpoints throttled.
Session Timeout
Auto-logout after 30 minutes of inactivity.
Login Brute-Force Lock
Locked for 10 minutes after 5 failed attempts.
Role Access Control
Super Admin
Full access — all panels, settings, security, audit log.
Manager
Orders, Customers, Products, Analytics, Settings, Audit.
Dispatcher
Orders, Dispatch, Bottle Returns, Subscriptions only.
Accountant
M-Pesa, Expenses, Analytics, Z-Report only.
API Security
Daraja API Keys
M-Pesa credentials stay in hosting environment variables only.
JWT Secret
Production requires a unique 32+ character secret.
CORS Policy
Allowed origins set via ALLOWED_ORIGINS env variable.
M-Pesa Callback Sig
Each callback verified against Safaricom signature before crediting.
Login Activity
Current Session
Validated via backend JWT before any dashboard data loads.
Token Storage
JWT stored in memory only — not localStorage or sessionStorage.
Firebase Project
Google Sign-in via the Regal Aqua Firebase project.
Business Settings
Business Name
Displayed across the platform
Domain
Primary website URL
Support Email
Customer contact address
Business Phone
Contact number for orders
WhatsApp Business Number
Used for order confirmations
Africa's Talking SMS Sender
Shortcode or alphanumeric sender ID
System Configuration
Currency
Default transaction currency
Timezone
System time reference
Low Stock Threshold
Alert when stock falls below this number
Render API URL
Backend server endpoint
Notification Preferences
New Order Alerts
Notify when an order is placed
Payment Confirmations
Alert on successful M-Pesa payment
Low Stock Warnings
Alert when inventory is low
New Review Notifications
Alert when a customer leaves a review
Daily Z-Report Email
Auto-send daily operations summary to owner at midnight