diff --git a/public_html/admin/index.php b/public_html/admin/index.php
new file mode 100644
index 0000000..d79d6a9
--- /dev/null
+++ b/public_html/admin/index.php
@@ -0,0 +1,934 @@
+<?php
+require_once __DIR__ . '/../../api/config.php';
+require_once __DIR__ . '/../../api/lib/db.php';
+
+session_name('jarvis_admin');
+session_start();
+
+// ── AUTH HELPERS ──────────────────────────────────────────────────────────────
+function loggedIn(): bool { return !empty($_SESSION['admin_user']); }
+function j(mixed $d): never { header('Content-Type: application/json'); echo json_encode($d); exit; }
+function bad(string $msg, int $code = 400): never { http_response_code($code); j(['error' => $msg]); }
+
+// ── BACKEND API ───────────────────────────────────────────────────────────────
+$action = $_GET['action'] ?? $_POST['action'] ?? '';
+if ($action) {
+    // Login doesn't require session
+    if ($action === 'login') {
+        $u = trim($_POST['username'] ?? '');
+        $p = $_POST['password'] ?? '';
+        $row = JarvisDB::single('SELECT * FROM users WHERE username = ?', [$u]);
+        if ($row && password_verify($p, $row['password_hash'])) {
+            $_SESSION['admin_user'] = $row['username'];
+            $_SESSION['admin_name'] = $row['display_name'];
+            j(['ok' => true, 'name' => $row['display_name']]);
+        }
+        bad('Invalid credentials', 401);
+    }
+    if ($action === 'logout') { session_destroy(); j(['ok' => true]); }
+    if (!loggedIn()) bad('Not authenticated', 401);
+
+    switch ($action) {
+
+        // ── DASHBOARD ─────────────────────────────────────────────────────────
+        case 'dashboard':
+            $mi = [];
+            foreach (file('/proc/meminfo') as $l) {
+                [$k,$v] = explode(':', $l, 2) + [null,null];
+                if ($k) $mi[trim($k)] = (int)trim($v);
+            }
+            $mt = $mi['MemTotal'] ?? 0; $mf = $mi['MemAvailable'] ?? 0;
+            $up = (int)explode(' ', file_get_contents('/proc/uptime'))[0];
+            $la = explode(' ', file_get_contents('/proc/loadavg'));
+            $disk = trim(shell_exec("df / | tail -1 | awk '{print $5}'") ?? '');
+            j([
+                'sys' => [
+                    'mem_pct'      => $mt > 0 ? round(($mt-$mf)/$mt*100,1) : 0,
+                    'mem_used_mb'  => round(($mt-$mf)/1024),
+                    'mem_total_mb' => round($mt/1024),
+                    'uptime_s'     => $up,
+                    'load_1m'      => (float)$la[0],
+                    'disk_pct'     => $disk,
+                ],
+                'agents'  => JarvisDB::single('SELECT COUNT(*) total, SUM(status="online") online FROM registered_agents'),
+                'alerts'  => JarvisDB::single('SELECT COUNT(*) total, SUM(resolved=0) active FROM alerts'),
+                'devices' => JarvisDB::single('SELECT COUNT(*) total, SUM(status="online") online FROM network_devices WHERE alias IS NOT NULL'),
+                'facts'   => JarvisDB::single('SELECT COUNT(*) total FROM kb_facts'),
+                'intents' => JarvisDB::single('SELECT COUNT(*) total, SUM(active=1) active FROM kb_intents'),
+            ]);
+
+        // ── AGENTS ───────────────────────────────────────────────────────────
+        case 'agents_list':
+            $agents = JarvisDB::query('SELECT agent_id, hostname, agent_type, ip_address, status, last_seen, created_at FROM registered_agents ORDER BY status="online" DESC, hostname');
+            $metrics = JarvisDB::query('SELECT agent_id, cpu_pct, mem_pct, disk_pct FROM agent_metrics WHERE recorded_at > DATE_SUB(NOW(), INTERVAL 5 MINUTE) GROUP BY agent_id');
+            $mm = array_column($metrics, null, 'agent_id');
+            foreach ($agents as &$a) $a['metrics'] = $mm[$a['agent_id']] ?? null;
+            j($agents);
+
+        case 'agents_delete':
+            $id = $_POST['agent_id'] ?? ''; if (!$id) bad('Missing agent_id');
+            JarvisDB::execute('DELETE FROM registered_agents WHERE agent_id=?', [$id]);
+            JarvisDB::execute('DELETE FROM agent_metrics WHERE agent_id=?', [$id]);
+            JarvisDB::execute('DELETE FROM agent_commands WHERE agent_id=?', [$id]);
+            j(['ok' => true]);
+
+        // ── NETWORK ──────────────────────────────────────────────────────────
+        case 'network_list':
+            j(JarvisDB::query('SELECT id,ip,mac,hostname,alias,device_type,status,last_seen FROM network_devices WHERE alias IS NOT NULL ORDER BY alias'));
+
+        case 'network_save':
+            $id   = (int)($_POST['id'] ?? 0);
+            $ip   = trim($_POST['ip'] ?? ''); $alias = trim($_POST['alias'] ?? '');
+            $type = trim($_POST['device_type'] ?? 'device');
+            if (!$ip || !$alias) bad('IP and alias required');
+            if ($id) {
+                JarvisDB::execute('UPDATE network_devices SET ip=?,alias=?,device_type=? WHERE id=?', [$ip,$alias,$type,$id]);
+            } else {
+                JarvisDB::execute('INSERT INTO network_devices (ip,alias,device_type,status) VALUES (?,?,?,"unknown") ON DUPLICATE KEY UPDATE alias=?,device_type=?', [$ip,$alias,$type,$alias,$type]);
+            }
+            j(['ok' => true]);
+
+        case 'network_delete':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('DELETE FROM network_devices WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        case 'network_ping':
+            $ip = trim($_POST['ip'] ?? ''); if (!$ip) bad('Missing IP');
+            $out = shell_exec('ping -c 2 -W 2 '.escapeshellarg($ip).' 2>/dev/null');
+            $alive = $out && (strpos($out,'2 received')!==false || strpos($out,'1 received')!==false);
+            $lat = null;
+            if ($alive && preg_match('/time=([\d.]+)/', $out, $m)) $lat = (float)$m[1];
+            j(['alive'=>$alive,'latency_ms'=>$lat]);
+
+        // ── ALERTS ───────────────────────────────────────────────────────────
+        case 'alerts_list':
+            $f = $_GET['filter'] ?? 'all';
+            $w = $f === 'active' ? 'WHERE resolved=0' : ($f === 'resolved' ? 'WHERE resolved=1' : '');
+            j(JarvisDB::query("SELECT id,alert_type,title,message,severity,resolved,created_at,resolved_at,source_key FROM alerts $w ORDER BY created_at DESC LIMIT 300"));
+
+        case 'alerts_resolve':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('UPDATE alerts SET resolved=1,resolved_at=NOW() WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        case 'alerts_resolve_all':
+            JarvisDB::execute('UPDATE alerts SET resolved=1,resolved_at=NOW() WHERE resolved=0');
+            j(['ok' => true]);
+
+        case 'alerts_delete':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('DELETE FROM alerts WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        case 'alerts_purge_resolved':
+            JarvisDB::execute('DELETE FROM alerts WHERE resolved=1');
+            j(['ok' => true]);
+
+        case 'alerts_save':
+            $id  = (int)($_POST['id'] ?? 0);
+            $t   = trim($_POST['title'] ?? ''); if (!$t) bad('Title required');
+            $typ = trim($_POST['alert_type'] ?? 'manual');
+            $msg = trim($_POST['message'] ?? '');
+            $sev = trim($_POST['severity'] ?? 'info');
+            if ($id) {
+                JarvisDB::execute('UPDATE alerts SET alert_type=?,title=?,message=?,severity=? WHERE id=?', [$typ,$t,$msg,$sev,$id]);
+            } else {
+                JarvisDB::execute('INSERT INTO alerts (alert_type,title,message,severity,resolved) VALUES (?,?,?,?,0)', [$typ,$t,$msg,$sev]);
+            }
+            j(['ok' => true]);
+
+        // ── KB FACTS ─────────────────────────────────────────────────────────
+        case 'facts_categories':
+            j(JarvisDB::query('SELECT category, COUNT(*) cnt FROM kb_facts GROUP BY category ORDER BY cnt DESC'));
+
+        case 'facts_list':
+            $cat = $_GET['category'] ?? '';
+            if ($cat === '__all__') {
+                j(JarvisDB::query('SELECT id,category,fact_key,fact_value,host,updated_at FROM kb_facts ORDER BY category,fact_key LIMIT 1000'));
+            }
+            j(JarvisDB::query('SELECT id,category,fact_key,fact_value,host,updated_at FROM kb_facts WHERE category=? ORDER BY fact_key', [$cat]));
+
+        case 'facts_save':
+            $id  = (int)($_POST['id'] ?? 0);
+            $cat = trim($_POST['category'] ?? ''); $key = trim($_POST['fact_key'] ?? ''); $val = trim($_POST['fact_value'] ?? '');
+            if (!$cat||!$key) bad('Category and key required');
+            if ($id) {
+                JarvisDB::execute('UPDATE kb_facts SET category=?,fact_key=?,fact_value=? WHERE id=?', [$cat,$key,$val,$id]);
+            } else {
+                JarvisDB::execute('INSERT INTO kb_facts (category,fact_key,fact_value) VALUES (?,?,?)', [$cat,$key,$val]);
+            }
+            j(['ok' => true]);
+
+        case 'facts_delete':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('DELETE FROM kb_facts WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        // ── KB INTENTS ───────────────────────────────────────────────────────
+        case 'intents_list':
+            j(JarvisDB::query('SELECT id,intent_name,pattern,response_template,action_type,priority,active FROM kb_intents ORDER BY priority DESC,intent_name'));
+
+        case 'intents_save':
+            $id   = (int)($_POST['id'] ?? 0);
+            $name = trim($_POST['intent_name'] ?? ''); $pat = trim($_POST['pattern'] ?? '');
+            $resp = trim($_POST['response_template'] ?? '');
+            $typ  = trim($_POST['action_type'] ?? 'response');
+            $pri  = (int)($_POST['priority'] ?? 5); $act = (int)($_POST['active'] ?? 1);
+            if (!$name||!$pat) bad('Name and pattern required');
+            if ($id) {
+                JarvisDB::execute('UPDATE kb_intents SET intent_name=?,pattern=?,response_template=?,action_type=?,priority=?,active=? WHERE id=?', [$name,$pat,$resp,$typ,$pri,$act,$id]);
+            } else {
+                JarvisDB::execute('INSERT INTO kb_intents (intent_name,pattern,response_template,action_type,priority,active) VALUES (?,?,?,?,?,?)', [$name,$pat,$resp,$typ,$pri,$act]);
+            }
+            j(['ok' => true]);
+
+        case 'intents_delete':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('DELETE FROM kb_intents WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        case 'intents_toggle':
+            $id = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            JarvisDB::execute('UPDATE kb_intents SET active=NOT active WHERE id=?', [$id]);
+            j(['ok' => true]);
+
+        // ── SITES ────────────────────────────────────────────────────────────
+        case 'sites_list':
+            j(JarvisDB::query("SELECT fact_key,fact_value,updated_at FROM kb_facts WHERE category='sites' ORDER BY fact_key"));
+
+        // ── USERS ────────────────────────────────────────────────────────────
+        case 'users_list':
+            j(JarvisDB::query('SELECT id,username,display_name,last_seen,created_at FROM users ORDER BY username'));
+
+        case 'users_save':
+            $id  = (int)($_POST['id'] ?? 0); if (!$id) bad('Missing id');
+            $dn  = trim($_POST['display_name'] ?? '');
+            $pw  = trim($_POST['password'] ?? '');
+            if ($pw) {
+                JarvisDB::execute('UPDATE users SET display_name=?,password_hash=? WHERE id=?', [$dn, password_hash($pw, PASSWORD_BCRYPT), $id]);
+            } else {
+                JarvisDB::execute('UPDATE users SET display_name=? WHERE id=?', [$dn, $id]);
+            }
+            j(['ok' => true]);
+
+        default: bad('Unknown action');
+    }
+}
+?>
+<!DOCTYPE html>
+<html lang="en">
+<head>
+<meta charset="UTF-8">
+<meta name="viewport" content="width=device-width,initial-scale=1">
+<title>JARVIS ADMIN</title>
+<style>
+*{box-sizing:border-box;margin:0;padding:0}
+:root{
+  --bg:#080b0f;--surface:#0d1117;--panel:#111820;--border:#1a2535;--border2:#243040;
+  --cyan:#00d4ff;--green:#39ff14;--red:#ff3333;--yellow:#ffcc00;--orange:#ff8800;
+  --text:#c8d8e8;--dim:#4a6080;--font:'Share Tech Mono',monospace;
+}
+body{background:var(--bg);color:var(--text);font-family:var(--font);font-size:13px;min-height:100vh;display:flex;flex-direction:column}
+a{color:var(--cyan);text-decoration:none}
+
+/* ── LOGIN ── */
+#loginWrap{display:flex;align-items:center;justify-content:center;min-height:100vh;flex-direction:column;gap:24px}
+#loginBox{background:var(--surface);border:1px solid var(--border2);padding:36px 40px;width:360px}
+#loginBox h1{color:var(--cyan);font-size:1.4rem;letter-spacing:4px;margin-bottom:6px;text-align:center}
+#loginBox p{color:var(--dim);font-size:0.7rem;letter-spacing:2px;text-align:center;margin-bottom:28px}
+.field{margin-bottom:16px}
+.field label{display:block;color:var(--dim);font-size:0.65rem;letter-spacing:2px;margin-bottom:6px}
+.field input{width:100%;background:#060a0e;border:1px solid var(--border2);color:var(--text);padding:10px 12px;font-family:var(--font);font-size:13px;outline:none}
+.field input:focus{border-color:var(--cyan)}
+#loginErr{color:var(--red);font-size:0.7rem;text-align:center;min-height:16px;margin-bottom:8px}
+.btn{background:transparent;border:1px solid var(--cyan);color:var(--cyan);padding:10px 20px;font-family:var(--font);font-size:0.75rem;letter-spacing:2px;cursor:pointer;transition:all .15s}
+.btn:hover{background:var(--cyan);color:#000}
+.btn-red{border-color:var(--red);color:var(--red)} .btn-red:hover{background:var(--red);color:#fff}
+.btn-green{border-color:var(--green);color:var(--green)} .btn-green:hover{background:var(--green);color:#000}
+.btn-yellow{border-color:var(--yellow);color:var(--yellow)} .btn-yellow:hover{background:var(--yellow);color:#000}
+.btn-sm{padding:4px 10px;font-size:0.65rem;letter-spacing:1px}
+.btn-xs{padding:2px 7px;font-size:0.6rem;letter-spacing:1px}
+.btn-full{width:100%;display:block;text-align:center}
+
+/* ── LAYOUT ── */
+#app{display:none;flex:1;flex-direction:column}
+#topbar{background:var(--surface);border-bottom:1px solid var(--border2);padding:10px 20px;display:flex;align-items:center;justify-content:space-between}
+#topbar .logo{color:var(--cyan);font-size:1rem;letter-spacing:5px}
+#topbar .sub{color:var(--dim);font-size:0.6rem;letter-spacing:3px;margin-left:12px}
+#topbar .right{display:flex;align-items:center;gap:16px}
+#topbar .user{color:var(--dim);font-size:0.65rem;letter-spacing:1px}
+#main{display:flex;flex:1;overflow:hidden}
+
+/* ── SIDEBAR ── */
+#sidebar{width:180px;background:var(--surface);border-right:1px solid var(--border2);padding:16px 0;flex-shrink:0}
+.nav-item{display:block;padding:10px 20px;color:var(--dim);font-size:0.7rem;letter-spacing:2px;cursor:pointer;border-left:2px solid transparent;transition:all .15s}
+.nav-item:hover{color:var(--text);background:var(--panel)}
+.nav-item.active{color:var(--cyan);border-left-color:var(--cyan);background:var(--panel)}
+.nav-section{padding:16px 20px 6px;color:var(--border2);font-size:0.55rem;letter-spacing:3px}
+
+/* ── CONTENT ── */
+#content{flex:1;overflow-y:auto;padding:24px}
+.tab{display:none}.tab.active{display:block}
+.page-title{color:var(--cyan);font-size:0.9rem;letter-spacing:4px;margin-bottom:20px;border-bottom:1px solid var(--border);padding-bottom:10px;display:flex;align-items:center;justify-content:space-between}
+.page-title .actions{display:flex;gap:8px}
+
+/* ── STAT CARDS ── */
+.stat-grid{display:grid;grid-template-columns:repeat(auto-fill,minmax(160px,1fr));gap:12px;margin-bottom:24px}
+.stat-card{background:var(--surface);border:1px solid var(--border);padding:16px}
+.stat-card .lbl{color:var(--dim);font-size:0.6rem;letter-spacing:2px;margin-bottom:8px}
+.stat-card .val{font-size:1.6rem;color:var(--cyan)}
+.stat-card .sub{color:var(--dim);font-size:0.65rem;margin-top:4px}
+.stat-card .ok{color:var(--green)}.stat-card .warn{color:var(--yellow)}.stat-card .danger{color:var(--red)}
+
+/* ── TABLE ── */
+.tbl-wrap{background:var(--surface);border:1px solid var(--border);overflow-x:auto}
+table{width:100%;border-collapse:collapse}
+th{color:var(--dim);font-size:0.6rem;letter-spacing:2px;padding:10px 12px;text-align:left;border-bottom:1px solid var(--border2);white-space:nowrap}
+td{padding:9px 12px;border-bottom:1px solid var(--border);font-size:0.75rem;vertical-align:middle}
+tr:last-child td{border-bottom:none}
+tr:hover td{background:rgba(0,212,255,0.03)}
+.badge{display:inline-block;padding:2px 8px;font-size:0.6rem;letter-spacing:1px}
+.badge-green{background:rgba(57,255,20,0.1);color:var(--green);border:1px solid rgba(57,255,20,0.3)}
+.badge-red{background:rgba(255,51,51,0.1);color:var(--red);border:1px solid rgba(255,51,51,0.3)}
+.badge-yellow{background:rgba(255,204,0,0.1);color:var(--yellow);border:1px solid rgba(255,204,0,0.3)}
+.badge-cyan{background:rgba(0,212,255,0.1);color:var(--cyan);border:1px solid rgba(0,212,255,0.3)}
+.badge-dim{background:rgba(74,96,128,0.1);color:var(--dim);border:1px solid rgba(74,96,128,0.3)}
+.actions-col{white-space:nowrap;display:flex;gap:4px;flex-wrap:wrap}
+.dot{width:8px;height:8px;border-radius:50%;display:inline-block;margin-right:6px}
+.dot-green{background:var(--green);box-shadow:0 0 6px var(--green)}
+.dot-red{background:var(--red)}
+.dot-dim{background:var(--dim)}
+
+/* ── MODAL ── */
+#modalBg{display:none;position:fixed;inset:0;background:rgba(0,0,0,.75);z-index:1000;align-items:center;justify-content:center}
+#modalBg.open{display:flex}
+#modal{background:var(--surface);border:1px solid var(--border2);width:500px;max-width:95vw;max-height:90vh;display:flex;flex-direction:column}
+#modalHead{padding:16px 20px;border-bottom:1px solid var(--border2);display:flex;justify-content:space-between;align-items:center}
+#modalHead h3{color:var(--cyan);font-size:0.8rem;letter-spacing:3px}
+#modalClose{background:none;border:none;color:var(--dim);cursor:pointer;font-size:1.2rem}
+#modalClose:hover{color:var(--red)}
+#modalBody{padding:20px;overflow-y:auto;flex:1}
+#modalFoot{padding:12px 20px;border-top:1px solid var(--border2);display:flex;justify-content:flex-end;gap:8px}
+.form-row{margin-bottom:14px}
+.form-row label{display:block;color:var(--dim);font-size:0.6rem;letter-spacing:2px;margin-bottom:5px}
+.form-row input,.form-row select,.form-row textarea{width:100%;background:#060a0e;border:1px solid var(--border2);color:var(--text);padding:8px 10px;font-family:var(--font);font-size:12px;outline:none;resize:vertical}
+.form-row input:focus,.form-row select:focus,.form-row textarea:focus{border-color:var(--cyan)}
+.form-row textarea{min-height:80px}
+
+/* ── FILTERS ── */
+.filters{display:flex;gap:8px;margin-bottom:16px;flex-wrap:wrap;align-items:center}
+.filters .lbl{color:var(--dim);font-size:0.6rem;letter-spacing:2px;margin-right:4px}
+.filter-btn{background:none;border:1px solid var(--border2);color:var(--dim);padding:4px 12px;font-family:var(--font);font-size:0.65rem;letter-spacing:1px;cursor:pointer}
+.filter-btn.active,.filter-btn:hover{border-color:var(--cyan);color:var(--cyan)}
+select.filter-sel{background:#060a0e;border:1px solid var(--border2);color:var(--text);padding:4px 8px;font-family:var(--font);font-size:0.65rem;outline:none}
+select.filter-sel:focus{border-color:var(--cyan)}
+
+/* ── TOAST ── */
+#toast{position:fixed;bottom:24px;right:24px;z-index:2000;display:flex;flex-direction:column;gap:8px}
+.toast-msg{background:var(--panel);border:1px solid var(--border2);padding:10px 16px;font-size:0.7rem;letter-spacing:1px;animation:slideIn .2s ease;border-left:3px solid var(--cyan)}
+.toast-msg.err{border-left-color:var(--red);color:var(--red)}
+.toast-msg.ok{border-left-color:var(--green);color:var(--green)}
+@keyframes slideIn{from{transform:translateX(40px);opacity:0}to{transform:translateX(0);opacity:1}}
+
+/* ── MISC ── */
+.empty{color:var(--dim);font-size:0.7rem;letter-spacing:1px;padding:30px;text-align:center}
+.loading{color:var(--dim);font-size:0.7rem;letter-spacing:2px;padding:30px;text-align:center;animation:pulse 1s infinite}
+@keyframes pulse{0%,100%{opacity:1}50%{opacity:.4}}
+.meter{height:4px;background:var(--border);margin-top:4px;position:relative}
+.meter-bar{height:100%;background:var(--cyan);transition:width .3s}
+.meter-bar.warn{background:var(--yellow)}.meter-bar.danger{background:var(--red)}
+.ts{color:var(--dim);font-size:0.65rem}
+.monospace{font-family:var(--font)}
+.trunc{max-width:260px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap}
+</style>
+</head>
+<body>
+
+<!-- LOGIN -->
+<div id="loginWrap">
+  <div id="loginBox">
+    <h1>JARVIS</h1>
+    <p>ADMIN PORTAL</p>
+    <div class="field"><label>USERNAME</label><input id="lu" type="text" autofocus></div>
+    <div class="field"><label>PASSWORD</label><input id="lp" type="password"></div>
+    <div id="loginErr"></div>
+    <button class="btn btn-full" onclick="doLogin()">AUTHENTICATE</button>
+  </div>
+</div>
+
+<!-- APP -->
+<div id="app">
+  <div id="topbar">
+    <div style="display:flex;align-items:center">
+      <span class="logo">JARVIS</span>
+      <span class="sub">ADMIN PORTAL</span>
+    </div>
+    <div class="right">
+      <span class="user" id="adminUser"></span>
+      <button class="btn btn-sm btn-red" onclick="doLogout()">LOGOUT</button>
+    </div>
+  </div>
+  <div id="main">
+    <div id="sidebar">
+      <div class="nav-section">OVERVIEW</div>
+      <div class="nav-item active" data-tab="dashboard" onclick="nav(this)">DASHBOARD</div>
+      <div class="nav-section">MANAGE</div>
+      <div class="nav-item" data-tab="agents" onclick="nav(this)">AGENTS</div>
+      <div class="nav-item" data-tab="network" onclick="nav(this)">NETWORK</div>
+      <div class="nav-item" data-tab="alerts" onclick="nav(this)">ALERTS</div>
+      <div class="nav-section">KNOWLEDGE</div>
+      <div class="nav-item" data-tab="facts" onclick="nav(this)">KB FACTS</div>
+      <div class="nav-item" data-tab="intents" onclick="nav(this)">KB INTENTS</div>
+      <div class="nav-section">INFO</div>
+      <div class="nav-item" data-tab="sites" onclick="nav(this)">SITES</div>
+      <div class="nav-item" data-tab="users" onclick="nav(this)">USERS</div>
+    </div>
+    <div id="content">
+
+      <!-- DASHBOARD -->
+      <div class="tab active" id="tab-dashboard">
+        <div class="page-title">DASHBOARD</div>
+        <div class="stat-grid" id="dash-cards"><div class="loading">LOADING...</div></div>
+        <div style="display:grid;grid-template-columns:1fr 1fr;gap:16px" id="dash-bottom"></div>
+      </div>
+
+      <!-- AGENTS -->
+      <div class="tab" id="tab-agents">
+        <div class="page-title">AGENTS
+          <div class="actions"><button class="btn btn-sm" onclick="loadAgents()">REFRESH</button></div>
+        </div>
+        <div class="tbl-wrap" id="agents-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- NETWORK -->
+      <div class="tab" id="tab-network">
+        <div class="page-title">NETWORK DEVICES
+          <div class="actions">
+            <button class="btn btn-sm btn-green" onclick="netModal()">+ ADD DEVICE</button>
+            <button class="btn btn-sm" onclick="loadNetwork()">REFRESH</button>
+          </div>
+        </div>
+        <div class="tbl-wrap" id="network-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- ALERTS -->
+      <div class="tab" id="tab-alerts">
+        <div class="page-title">ALERTS
+          <div class="actions">
+            <button class="btn btn-sm btn-green" onclick="alertModal()">+ CREATE</button>
+            <button class="btn btn-sm btn-yellow" onclick="apiPost('alerts_resolve_all',{},()=>{toast('All resolved','ok');loadAlerts()})">RESOLVE ALL</button>
+            <button class="btn btn-sm btn-red" onclick="apiPost('alerts_purge_resolved',{},()=>{toast('Purged','ok');loadAlerts()})">PURGE RESOLVED</button>
+            <button class="btn btn-sm" onclick="loadAlerts()">REFRESH</button>
+          </div>
+        </div>
+        <div class="filters">
+          <span class="lbl">FILTER:</span>
+          <button class="filter-btn active" onclick="setAlertFilter('all',this)">ALL</button>
+          <button class="filter-btn" onclick="setAlertFilter('active',this)">ACTIVE</button>
+          <button class="filter-btn" onclick="setAlertFilter('resolved',this)">RESOLVED</button>
+        </div>
+        <div class="tbl-wrap" id="alerts-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- KB FACTS -->
+      <div class="tab" id="tab-facts">
+        <div class="page-title">KB FACTS
+          <div class="actions">
+            <button class="btn btn-sm btn-green" onclick="factModal()">+ ADD FACT</button>
+            <button class="btn btn-sm" onclick="loadFacts()">REFRESH</button>
+          </div>
+        </div>
+        <div class="filters">
+          <span class="lbl">CATEGORY:</span>
+          <select class="filter-sel" id="factCat" onchange="loadFacts()">
+            <option value="__all__">ALL</option>
+          </select>
+        </div>
+        <div class="tbl-wrap" id="facts-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- KB INTENTS -->
+      <div class="tab" id="tab-intents">
+        <div class="page-title">KB INTENTS
+          <div class="actions">
+            <button class="btn btn-sm btn-green" onclick="intentModal()">+ ADD INTENT</button>
+            <button class="btn btn-sm" onclick="loadIntents()">REFRESH</button>
+          </div>
+        </div>
+        <div class="tbl-wrap" id="intents-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- SITES -->
+      <div class="tab" id="tab-sites">
+        <div class="page-title">SITE HEALTH</div>
+        <div id="sites-content"><div class="loading">LOADING...</div></div>
+      </div>
+
+      <!-- USERS -->
+      <div class="tab" id="tab-users">
+        <div class="page-title">USERS</div>
+        <div class="tbl-wrap" id="users-tbl"><div class="loading">LOADING...</div></div>
+      </div>
+
+    </div><!-- /content -->
+  </div><!-- /main -->
+</div><!-- /app -->
+
+<!-- MODAL -->
+<div id="modalBg">
+  <div id="modal">
+    <div id="modalHead"><h3 id="modalTitle">EDIT</h3><button id="modalClose" onclick="closeModal()">×</button></div>
+    <div id="modalBody"></div>
+    <div id="modalFoot"><button class="btn btn-sm" onclick="closeModal()">CANCEL</button><button class="btn btn-sm btn-green" id="modalSave" onclick="modalSave()">SAVE</button></div>
+  </div>
+</div>
+
+<div id="toast"></div>
+
+<script>
+// ── UTILS ─────────────────────────────────────────────────────────────────────
+let _alertFilter = 'all';
+let _modalCb = null;
+
+function esc(s){ return String(s||'').replace(/&/g,'&amp;').replace(/</g,'&lt;').replace(/>/g,'&gt;').replace(/"/g,'&quot;'); }
+function ts(s){ if(!s) return '—'; const d=new Date(s); return d.toLocaleString('en-US',{month:'short',day:'numeric',hour:'2-digit',minute:'2-digit'}); }
+function ago(s){ if(!s) return '—'; const sec=Math.floor((Date.now()-new Date(s))/1000); if(sec<60) return sec+'s ago'; if(sec<3600) return Math.floor(sec/60)+'m ago'; return Math.floor(sec/3600)+'h ago'; }
+function fmtUp(s){ const d=Math.floor(s/86400),h=Math.floor((s%86400)/3600),m=Math.floor((s%3600)/60); return (d>0?d+'d ':'')+h+'h '+m+'m'; }
+
+async function api(action, params={}) {
+  const url = new URL(location.href);
+  url.searchParams.set('action', action);
+  Object.entries(params).forEach(([k,v]) => url.searchParams.set(k,v));
+  const r = await fetch(url.toString());
+  return r.json();
+}
+
+async function apiPost(action, data={}, cb=null) {
+  const fd = new FormData();
+  fd.append('action', action);
+  Object.entries(data).forEach(([k,v]) => fd.append(k,v));
+  try {
+    const r = await fetch(location.href, {method:'POST', body:fd});
+    const d = await r.json();
+    if (d.error) { toast(d.error,'err'); return; }
+    if (cb) cb(d);
+  } catch(e) { toast('Request failed','err'); }
+}
+
+function toast(msg, type='ok') {
+  const el = document.createElement('div');
+  el.className = 'toast-msg '+(type==='err'?'err':'ok');
+  el.textContent = msg;
+  document.getElementById('toast').appendChild(el);
+  setTimeout(() => el.remove(), 3000);
+}
+
+function sevBadge(s) {
+  const m = {critical:'badge-red',warning:'badge-yellow',info:'badge-cyan'};
+  return `<span class="badge ${m[s]||'badge-dim'}">${esc(s).toUpperCase()}</span>`;
+}
+function statusBadge(s) {
+  if (s==='online') return `<span class="badge badge-green">ONLINE</span>`;
+  if (s==='offline') return `<span class="badge badge-red">OFFLINE</span>`;
+  return `<span class="badge badge-dim">${esc(s).toUpperCase()}</span>`;
+}
+
+// ── AUTH ──────────────────────────────────────────────────────────────────────
+async function doLogin() {
+  const u=document.getElementById('lu').value.trim(), p=document.getElementById('lp').value;
+  const fd=new FormData(); fd.append('action','login'); fd.append('username',u); fd.append('password',p);
+  const r = await fetch(location.href,{method:'POST',body:fd});
+  const d = await r.json();
+  if (d.error) { document.getElementById('loginErr').textContent=d.error; return; }
+  document.getElementById('loginWrap').style.display='none';
+  document.getElementById('app').style.display='flex';
+  document.getElementById('adminUser').textContent = (d.name||u).toUpperCase();
+  initApp();
+}
+
+async function doLogout() {
+  await apiPost('logout');
+  location.reload();
+}
+
+document.getElementById('lp').addEventListener('keydown', e => { if(e.key==='Enter') doLogin(); });
+document.getElementById('lu').addEventListener('keydown', e => { if(e.key==='Enter') document.getElementById('lp').focus(); });
+
+// ── NAV ───────────────────────────────────────────────────────────────────────
+function nav(el) {
+  document.querySelectorAll('.nav-item').forEach(n=>n.classList.remove('active'));
+  el.classList.add('active');
+  const tab = el.dataset.tab;
+  document.querySelectorAll('.tab').forEach(t=>t.classList.remove('active'));
+  document.getElementById('tab-'+tab).classList.add('active');
+  loadTab(tab);
+}
+
+function loadTab(tab) {
+  ({
+    dashboard: loadDashboard,
+    agents:    loadAgents,
+    network:   loadNetwork,
+    alerts:    loadAlerts,
+    facts:     ()=>{ loadFactCategories(); loadFacts(); },
+    intents:   loadIntents,
+    sites:     loadSites,
+    users:     loadUsers,
+  })[tab]?.();
+}
+
+function initApp() { loadDashboard(); setInterval(loadDashboard, 15000); }
+
+// ── DASHBOARD ─────────────────────────────────────────────────────────────────
+async function loadDashboard() {
+  const d = await api('dashboard');
+  const s = d.sys;
+  const mp = s.mem_pct, mc = mp>80?'danger':mp>60?'warn':'';
+  const lc = s.load_1m>2?'danger':s.load_1m>1?'warn':'';
+  const dc = (parseInt(s.disk_pct)>88)?'danger':(parseInt(s.disk_pct)>75)?'warn':'';
+
+  document.getElementById('dash-cards').innerHTML = `
+    <div class="stat-card">
+      <div class="lbl">MEMORY</div>
+      <div class="val ${mc}">${mp}%</div>
+      <div class="sub">${s.mem_used_mb} / ${s.mem_total_mb} MB</div>
+      <div class="meter"><div class="meter-bar ${mc}" style="width:${mp}%"></div></div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">LOAD AVG</div>
+      <div class="val ${lc}">${s.load_1m}</div>
+      <div class="sub">1-minute average</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">DISK USAGE</div>
+      <div class="val ${dc}">${s.disk_pct||'—'}</div>
+      <div class="sub">root filesystem</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">UPTIME</div>
+      <div class="val" style="font-size:1rem;margin-top:4px">${fmtUp(s.uptime_s)}</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">AGENTS</div>
+      <div class="val ${d.agents?.online>0?'':'danger'}">${d.agents?.online||0}<span style="font-size:1rem;color:var(--dim)">/${d.agents?.total||0}</span></div>
+      <div class="sub">online</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">ACTIVE ALERTS</div>
+      <div class="val ${d.alerts?.active>0?'danger':''}">${d.alerts?.active||0}<span style="font-size:1rem;color:var(--dim)">/${d.alerts?.total||0}</span></div>
+      <div class="sub">unresolved</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">NAMED DEVICES</div>
+      <div class="val">${d.devices?.total||0}</div>
+      <div class="sub">${d.devices?.online||0} online</div>
+    </div>
+    <div class="stat-card">
+      <div class="lbl">KB FACTS</div>
+      <div class="val">${d.facts?.total||0}</div>
+      <div class="sub">${d.intents?.active||0}/${d.intents?.total||0} intents active</div>
+    </div>
+  `;
+}
+
+// ── AGENTS ────────────────────────────────────────────────────────────────────
+async function loadAgents() {
+  document.getElementById('agents-tbl').innerHTML = '<div class="loading">LOADING...</div>';
+  const agents = await api('agents_list');
+  if (!agents.length) { document.getElementById('agents-tbl').innerHTML='<div class="empty">NO AGENTS REGISTERED</div>'; return; }
+  let rows = agents.map(a => {
+    const m = a.metrics;
+    const meterCell = m
+      ? `<span style="font-size:0.65rem">${m.cpu_pct??'—'}% CPU · ${m.mem_pct??'—'}% RAM</span>`
+      : `<span style="color:var(--dim);font-size:0.65rem">—</span>`;
+    return `<tr>
+      <td><span class="dot ${a.status==='online'?'dot-green':'dot-red'}"></span>${esc(a.hostname)}</td>
+      <td>${statusBadge(a.status)}</td>
+      <td><span class="badge badge-cyan">${esc(a.agent_type).toUpperCase()}</span></td>
+      <td>${esc(a.ip_address||'—')}</td>
+      <td>${meterCell}</td>
+      <td class="ts">${ago(a.last_seen)}</td>
+      <td class="ts">${ts(a.created_at)}</td>
+      <td><div class="actions-col">
+        <button class="btn btn-xs btn-red" onclick="delAgent('${esc(a.agent_id)}','${esc(a.hostname)}')">DELETE</button>
+      </div></td>
+    </tr>`;
+  }).join('');
+  document.getElementById('agents-tbl').innerHTML = `<table>
+    <thead><tr><th>HOSTNAME</th><th>STATUS</th><th>TYPE</th><th>IP</th><th>METRICS</th><th>LAST SEEN</th><th>REGISTERED</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function delAgent(id, name) {
+  if (!confirm(`Delete agent "${name}"? This cannot be undone.`)) return;
+  apiPost('agents_delete', {agent_id:id}, ()=>{ toast('Agent deleted','ok'); loadAgents(); });
+}
+
+// ── NETWORK ───────────────────────────────────────────────────────────────────
+async function loadNetwork() {
+  document.getElementById('network-tbl').innerHTML = '<div class="loading">LOADING...</div>';
+  const devs = await api('network_list');
+  if (!devs.length) { document.getElementById('network-tbl').innerHTML='<div class="empty">NO NAMED DEVICES</div>'; return; }
+  let rows = devs.map(d => `<tr>
+    <td><span class="dot ${d.status==='online'?'dot-green':d.status==='offline'?'dot-red':'dot-dim'}"></span>${esc(d.alias)}</td>
+    <td>${esc(d.ip)}</td>
+    <td><span class="badge badge-dim">${esc(d.device_type||'device').toUpperCase()}</span></td>
+    <td>${statusBadge(d.status)}</td>
+    <td class="ts">${ago(d.last_seen)}</td>
+    <td><div class="actions-col">
+      <button class="btn btn-xs" onclick="pingDev(${d.id},'${esc(d.ip)}',this)">PING</button>
+      <button class="btn btn-xs btn-yellow" onclick="netModal(${d.id},'${esc(d.ip)}','${esc(d.alias)}','${esc(d.device_type||'')}')">EDIT</button>
+      <button class="btn btn-xs btn-red" onclick="delNet(${d.id},'${esc(d.alias)}')">DEL</button>
+    </div></td>
+  </tr>`).join('');
+  document.getElementById('network-tbl').innerHTML = `<table>
+    <thead><tr><th>NAME</th><th>IP</th><th>TYPE</th><th>STATUS</th><th>LAST SEEN</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function netModal(id=0, ip='', alias='', type='device') {
+  openModal(id?'EDIT DEVICE':'ADD DEVICE', `
+    <div class="form-row"><label>IP ADDRESS</label><input id="f-ip" value="${esc(ip)}" placeholder="10.48.200.x"></div>
+    <div class="form-row"><label>NAME / ALIAS</label><input id="f-alias" value="${esc(alias)}" placeholder="My Device"></div>
+    <div class="form-row"><label>TYPE</label>
+      <select id="f-type">
+        ${['device','server','router','switch','phone','camera','nas','printer','vm','workstation'].map(t=>`<option value="${t}" ${t===type?'selected':''}>${t.toUpperCase()}</option>`).join('')}
+      </select>
+    </div>
+    <input type="hidden" id="f-id" value="${id}">
+  `, () => {
+    const data = {id: document.getElementById('f-id').value, ip: document.getElementById('f-ip').value, alias: document.getElementById('f-alias').value, device_type: document.getElementById('f-type').value};
+    apiPost('network_save', data, ()=>{ toast('Saved','ok'); closeModal(); loadNetwork(); });
+  });
+}
+
+async function pingDev(id, ip, btn) {
+  btn.textContent = '...'; btn.disabled = true;
+  const res = await apiPost('network_ping', {ip}, null);
+  // Re-fetch to update status
+  loadNetwork();
+  btn.textContent = 'PING'; btn.disabled = false;
+}
+
+// Direct ping returning result
+(window.pingDev = async function(id, ip, btn) {
+  btn.textContent='…'; btn.disabled=true;
+  const fd=new FormData(); fd.append('action','network_ping'); fd.append('ip',ip);
+  try {
+    const r = await fetch(location.href,{method:'POST',body:fd});
+    const d = await r.json();
+    toast(d.alive ? `${ip} ONLINE (${d.latency_ms??'?'}ms)` : `${ip} OFFLINE`, d.alive?'ok':'err');
+  } catch(e){ toast('Ping failed','err'); }
+  btn.textContent='PING'; btn.disabled=false;
+});
+
+function delNet(id, name) {
+  if (!confirm(`Remove "${name}" from network devices?`)) return;
+  apiPost('network_delete', {id}, ()=>{ toast('Removed','ok'); loadNetwork(); });
+}
+
+// ── ALERTS ────────────────────────────────────────────────────────────────────
+function setAlertFilter(f, el) {
+  _alertFilter = f;
+  document.querySelectorAll('.filter-btn').forEach(b=>b.classList.remove('active'));
+  el.classList.add('active');
+  loadAlerts();
+}
+
+async function loadAlerts() {
+  document.getElementById('alerts-tbl').innerHTML='<div class="loading">LOADING...</div>';
+  const alerts = await api('alerts_list', {filter:_alertFilter});
+  if (!alerts.length) { document.getElementById('alerts-tbl').innerHTML='<div class="empty">NO ALERTS</div>'; return; }
+  let rows = alerts.map(a => `<tr>
+    <td>${sevBadge(a.severity)}</td>
+    <td>${esc(a.alert_type)}</td>
+    <td class="trunc">${esc(a.title)}</td>
+    <td class="trunc ts">${esc(a.message||'—')}</td>
+    <td>${a.resolved ? '<span class="badge badge-dim">RESOLVED</span>' : '<span class="badge badge-red">ACTIVE</span>'}</td>
+    <td class="ts">${ts(a.created_at)}</td>
+    <td><div class="actions-col">
+      ${!a.resolved?`<button class="btn btn-xs btn-green" onclick="apiPost('alerts_resolve',{id:${a.id}},()=>{toast('Resolved','ok');loadAlerts()})">RESOLVE</button>`:''}
+      <button class="btn btn-xs btn-yellow" onclick="alertModal(${a.id},'${esc(a.alert_type)}','${esc(a.title)}','${esc(a.message||'')}','${esc(a.severity)}')">EDIT</button>
+      <button class="btn btn-xs btn-red" onclick="apiPost('alerts_delete',{id:${a.id}},()=>{toast('Deleted','ok');loadAlerts()})">DEL</button>
+    </div></td>
+  </tr>`).join('');
+  document.getElementById('alerts-tbl').innerHTML = `<table>
+    <thead><tr><th>SEV</th><th>TYPE</th><th>TITLE</th><th>MESSAGE</th><th>STATUS</th><th>CREATED</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function alertModal(id=0, type='manual', title='', message='', severity='info') {
+  openModal(id?'EDIT ALERT':'CREATE ALERT', `
+    <div class="form-row"><label>TYPE</label><input id="a-type" value="${esc(type)}" placeholder="manual"></div>
+    <div class="form-row"><label>TITLE</label><input id="a-title" value="${esc(title)}"></div>
+    <div class="form-row"><label>MESSAGE</label><textarea id="a-msg">${esc(message)}</textarea></div>
+    <div class="form-row"><label>SEVERITY</label>
+      <select id="a-sev">
+        ${['info','warning','critical'].map(s=>`<option value="${s}" ${s===severity?'selected':''}>${s.toUpperCase()}</option>`).join('')}
+      </select>
+    </div>
+    <input type="hidden" id="a-id" value="${id}">
+  `, () => {
+    const data = {id: document.getElementById('a-id').value, alert_type: document.getElementById('a-type').value, title: document.getElementById('a-title').value, message: document.getElementById('a-msg').value, severity: document.getElementById('a-sev').value};
+    apiPost('alerts_save', data, ()=>{ toast('Saved','ok'); closeModal(); loadAlerts(); });
+  });
+}
+
+// ── KB FACTS ─────────────────────────────────────────────────────────────────
+async function loadFactCategories() {
+  const cats = await api('facts_categories');
+  const sel = document.getElementById('factCat');
+  sel.innerHTML = '<option value="__all__">ALL CATEGORIES</option>' +
+    cats.map(c=>`<option value="${esc(c.category)}">${esc(c.category)} (${c.cnt})</option>`).join('');
+}
+
+async function loadFacts() {
+  document.getElementById('facts-tbl').innerHTML='<div class="loading">LOADING...</div>';
+  const cat = document.getElementById('factCat')?.value || '__all__';
+  const facts = await api('facts_list', {category: cat});
+  if (!facts.length) { document.getElementById('facts-tbl').innerHTML='<div class="empty">NO FACTS</div>'; return; }
+  let rows = facts.map(f => `<tr>
+    <td><span class="badge badge-cyan">${esc(f.category)}</span></td>
+    <td>${esc(f.fact_key)}</td>
+    <td class="trunc" style="max-width:320px" title="${esc(f.fact_value)}">${esc(f.fact_value)}</td>
+    <td class="ts">${ago(f.updated_at)}</td>
+    <td><div class="actions-col">
+      <button class="btn btn-xs btn-yellow" onclick='factModal(${f.id},"${esc(f.category)}","${esc(f.fact_key)}",${JSON.stringify(f.fact_value)})'>EDIT</button>
+      <button class="btn btn-xs btn-red" onclick="apiPost('facts_delete',{id:${f.id}},()=>{toast('Deleted','ok');loadFacts()})">DEL</button>
+    </div></td>
+  </tr>`).join('');
+  document.getElementById('facts-tbl').innerHTML = `<table>
+    <thead><tr><th>CATEGORY</th><th>KEY</th><th>VALUE</th><th>UPDATED</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function factModal(id=0, category='', key='', value='') {
+  openModal(id?'EDIT FACT':'ADD FACT', `
+    <div class="form-row"><label>CATEGORY</label><input id="fc-cat" value="${esc(category)}" placeholder="system"></div>
+    <div class="form-row"><label>KEY</label><input id="fc-key" value="${esc(key)}" placeholder="fact_name"></div>
+    <div class="form-row"><label>VALUE</label><textarea id="fc-val">${esc(value)}</textarea></div>
+    <input type="hidden" id="fc-id" value="${id}">
+  `, () => {
+    const data = {id: document.getElementById('fc-id').value, category: document.getElementById('fc-cat').value, fact_key: document.getElementById('fc-key').value, fact_value: document.getElementById('fc-val').value};
+    apiPost('facts_save', data, ()=>{ toast('Saved','ok'); closeModal(); loadFacts(); });
+  });
+}
+
+// ── KB INTENTS ────────────────────────────────────────────────────────────────
+async function loadIntents() {
+  document.getElementById('intents-tbl').innerHTML='<div class="loading">LOADING...</div>';
+  const intents = await api('intents_list');
+  if (!intents.length) { document.getElementById('intents-tbl').innerHTML='<div class="empty">NO INTENTS</div>'; return; }
+  let rows = intents.map(i => `<tr style="${i.active?'':'opacity:0.45'}">
+    <td>${esc(i.intent_name)}</td>
+    <td class="trunc" style="max-width:240px" title="${esc(i.pattern)}"><code style="font-size:0.65rem;color:var(--yellow)">${esc(i.pattern)}</code></td>
+    <td class="trunc" style="max-width:200px" title="${esc(i.response_template||'')}"><span style="font-size:0.7rem">${esc(i.response_template||'—')}</span></td>
+    <td><span class="badge badge-dim">${esc(i.action_type)}</span></td>
+    <td style="text-align:center">${i.priority}</td>
+    <td>${i.active?'<span class="badge badge-green">ON</span>':'<span class="badge badge-dim">OFF</span>'}</td>
+    <td><div class="actions-col">
+      <button class="btn btn-xs" onclick="apiPost('intents_toggle',{id:${i.id}},()=>{toast('Toggled','ok');loadIntents()})">${i.active?'DISABLE':'ENABLE'}</button>
+      <button class="btn btn-xs btn-yellow" onclick='intentModal(${i.id},"${esc(i.intent_name)}","${esc(i.pattern)}",${JSON.stringify(i.response_template||"")},"${esc(i.action_type)}",${i.priority},${i.active})'>EDIT</button>
+      <button class="btn btn-xs btn-red" onclick="apiPost('intents_delete',{id:${i.id}},()=>{toast('Deleted','ok');loadIntents()})">DEL</button>
+    </div></td>
+  </tr>`).join('');
+  document.getElementById('intents-tbl').innerHTML = `<table>
+    <thead><tr><th>NAME</th><th>PATTERN</th><th>RESPONSE</th><th>TYPE</th><th style="text-align:center">PRI</th><th>STATUS</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function intentModal(id=0, name='', pattern='', response='', type='response', priority=5, active=1) {
+  openModal(id?'EDIT INTENT':'ADD INTENT', `
+    <div class="form-row"><label>INTENT NAME</label><input id="i-name" value="${esc(name)}" placeholder="my_intent"></div>
+    <div class="form-row"><label>REGEX PATTERN</label><input id="i-pat" value="${esc(pattern)}" placeholder="(?i)(keyword).*(match)"></div>
+    <div class="form-row"><label>RESPONSE TEMPLATE</label><textarea id="i-resp">${esc(response)}</textarea></div>
+    <div class="form-row"><label>ACTION TYPE</label>
+      <select id="i-type">${['response','action','query'].map(t=>`<option value="${t}" ${t===type?'selected':''}>${t.toUpperCase()}</option>`).join('')}</select>
+    </div>
+    <div class="form-row"><label>PRIORITY (1-10)</label><input id="i-pri" type="number" min="1" max="10" value="${priority}"></div>
+    <div class="form-row"><label>ACTIVE</label>
+      <select id="i-act"><option value="1" ${active?'selected':''}>YES</option><option value="0" ${!active?'selected':''}>NO</option></select>
+    </div>
+    <input type="hidden" id="i-id" value="${id}">
+  `, () => {
+    const data = {id: document.getElementById('i-id').value, intent_name: document.getElementById('i-name').value, pattern: document.getElementById('i-pat').value, response_template: document.getElementById('i-resp').value, action_type: document.getElementById('i-type').value, priority: document.getElementById('i-pri').value, active: document.getElementById('i-act').value};
+    apiPost('intents_save', data, ()=>{ toast('Saved','ok'); closeModal(); loadIntents(); });
+  });
+}
+
+// ── SITES ─────────────────────────────────────────────────────────────────────
+async function loadSites() {
+  document.getElementById('sites-content').innerHTML='<div class="loading">LOADING...</div>';
+  const sites = await api('sites_list');
+  if (!sites.length) { document.getElementById('sites-content').innerHTML='<div class="empty">NO SITE DATA</div>'; return; }
+  const labels = {
+    'jarvis':'jarvis.orbishosting.com','tomsjavajive':'tomsjavajive.com',
+    'epictravelexp':'epictravelexpeditions.com','parkersling':'parkerslingshot',
+    'orbishosting':'orbishosting.com','orbisportal':'orbis.orbishosting.com','tomtomgames':'tomtomgames.com'
+  };
+  let cards = sites.map(s => {
+    const up = s.fact_value==='up';
+    return `<div class="stat-card" style="border-left:3px solid ${up?'var(--green)':'var(--red)'}">
+      <div class="lbl">${esc(labels[s.fact_key]||s.fact_key)}</div>
+      <div class="val ${up?'ok':'danger'}" style="font-size:1.2rem">${up?'ONLINE':'OFFLINE'}</div>
+      <div class="sub">checked ${ago(s.updated_at)}</div>
+    </div>`;
+  }).join('');
+  document.getElementById('sites-content').innerHTML = `<div class="stat-grid">${cards}</div>`;
+}
+
+// ── USERS ─────────────────────────────────────────────────────────────────────
+async function loadUsers() {
+  document.getElementById('users-tbl').innerHTML='<div class="loading">LOADING...</div>';
+  const users = await api('users_list');
+  let rows = users.map(u => `<tr>
+    <td>${esc(u.username)}</td>
+    <td>${esc(u.display_name||'—')}</td>
+    <td class="ts">${ago(u.last_seen)}</td>
+    <td class="ts">${ts(u.created_at)}</td>
+    <td><button class="btn btn-xs btn-yellow" onclick="userModal(${u.id},'${esc(u.display_name||'')}')">EDIT</button></td>
+  </tr>`).join('');
+  document.getElementById('users-tbl').innerHTML = `<table>
+    <thead><tr><th>USERNAME</th><th>DISPLAY NAME</th><th>LAST SEEN</th><th>CREATED</th><th>ACTIONS</th></tr></thead>
+    <tbody>${rows}</tbody></table>`;
+}
+
+function userModal(id, display) {
+  openModal('EDIT USER', `
+    <div class="form-row"><label>DISPLAY NAME</label><input id="u-dn" value="${esc(display)}"></div>
+    <div class="form-row"><label>NEW PASSWORD (leave blank to keep)</label><input id="u-pw" type="password" placeholder="••••••••"></div>
+    <input type="hidden" id="u-id" value="${id}">
+  `, () => {
+    const data = {id: document.getElementById('u-id').value, display_name: document.getElementById('u-dn').value, password: document.getElementById('u-pw').value};
+    apiPost('users_save', data, ()=>{ toast('Saved','ok'); closeModal(); loadUsers(); });
+  });
+}
+
+// ── MODAL ─────────────────────────────────────────────────────────────────────
+function openModal(title, body, saveCb) {
+  document.getElementById('modalTitle').textContent = title;
+  document.getElementById('modalBody').innerHTML = body;
+  _modalCb = saveCb;
+  document.getElementById('modalBg').classList.add('open');
+  const first = document.querySelector('#modalBody input, #modalBody textarea, #modalBody select');
+  if (first) setTimeout(()=>first.focus(), 50);
+}
+
+function closeModal() { document.getElementById('modalBg').classList.remove('open'); _modalCb=null; }
+function modalSave() { if (_modalCb) _modalCb(); }
+
+document.getElementById('modalBg').addEventListener('click', e => { if (e.target===document.getElementById('modalBg')) closeModal(); });
+document.addEventListener('keydown', e => { if (e.key==='Escape') closeModal(); });
+document.addEventListener('keydown', e => { if (e.key==='Enter' && e.ctrlKey && document.getElementById('modalBg').classList.contains('open')) modalSave(); });
+
+// ── AUTO-LOGIN CHECK (PHP session) ───────────────────────────────────────────
+<?php if (loggedIn()): ?>
+document.getElementById('loginWrap').style.display='none';
+document.getElementById('app').style.display='flex';
+document.getElementById('adminUser').textContent = '<?= htmlspecialchars($_SESSION['admin_name'] ?? $_SESSION['admin_user']) ?>'.toUpperCase();
+initApp();
+<?php endif; ?>
+</script>
+</body>
+</html>