feat(dashboard): refine activity telemetry and maps

design/us-018-admin-dashboard.md

@@ -1,9 +1,9 @@
 ---
 type: User Story
 title: Monitor community account activity
-description: Administrators use a server-rendered dashboard to review registrations, monthly activity, denials, and risky networks.
-tags: [admin, dashboard, metrics, security, ssr]
-timestamp: 2026-08-01T23:32:54Z
+description: Administrators use a server-rendered dashboard to review daily activity, confirmed connections, locations, denials, and risky networks.
+tags: [admin, dashboard, metrics, security, maps, ssr]
+timestamp: 2026-08-02T00:12:32Z
 story_id: US-018
 status: verified
 ---
@@ -15,16 +15,17 @@ As an administrator, I want an operational dashboard of account and game activit
 # Acceptance Criteria
 
 - [x] The administrator landing page is a dashboard rather than a settings form.
-- [x] An open-data world map plots each user's latest observation with valid approximate coordinates.
-- [x] Map markers link to user records and have an accessible text-table equivalent.
-- [x] Natural Earth boundaries are bundled and server-rendered without disclosing map or location requests to a third party.
-- [x] The dashboard graphs new registered users by UTC day for the previous 14 days.
+- [x] A server-rendered Natural Earth overview plots each user's latest observation with valid approximate coordinates.
+- [x] Administrators can opt into a zoomable OpenStreetMap view without removing the default overview.
+- [x] OpenStreetMap tiles load only after the administrator selects the interactive view and retain required attribution.
+- [x] Map markers show the managed Discord nickname on hover or keyboard focus, link to user records, and have an accessible text-table equivalent.
+- [x] The dashboard graphs distinct daily active users by UTC day for the previous 14 days with understandable date labels.
 - [x] Monthly active users count distinct users observed through portal or game activity in the previous 30 days.
-- [x] Monthly active Minecraft accounts count distinct linked accounts observed in the previous 30 days.
+- [x] Monthly active Minecraft accounts count distinct accounts with a confirmed Velocity post-login connection in the previous 30 days.
 - [x] The dashboard shows login denials from the previous 24 hours.
-- [x] Recent VPN, proxy, and Tor observations link to affected user records.
+- [x] Recent VPN, proxy, and Tor observations use enriched ProxyCheck classifications, collapse repeated rows per user, and show counts, sources, and latest activity.
 - [x] The graph includes an accessible title, description, point labels, and textual values.
-- [x] Dashboard queries and rendering execute server-side without client-side data fetching.
+- [x] Dashboard queries and initial rendering execute server-side; only the opt-in pan-and-zoom map hydrates client-side.
 - [x] Deployment-managed guild settings and denial messaging remain available on a dedicated settings page.
 
 # Implementation
@@ -33,11 +34,12 @@ As an administrator, I want an operational dashboard of account and game activit
 - [`apps/web/src/app/admin/(console)/settings/page.tsx`](../apps/web/src/app/admin/%28console%29/settings/page.tsx)
 - [`apps/web/src/lib/admin-metrics.ts`](../apps/web/src/lib/admin-metrics.ts)
 - [`apps/web/src/components/user-world-map.tsx`](../apps/web/src/components/user-world-map.tsx)
+- [`apps/web/src/components/map-view-toggle.tsx`](../apps/web/src/components/map-view-toggle.tsx)
 - [`apps/web/src/lib/user-location-map.ts`](../apps/web/src/lib/user-location-map.ts)
 
 # Validation
 
-- Missing-day chart behavior is covered by [`apps/web/src/lib/admin-metrics.test.ts`](../apps/web/src/lib/admin-metrics.test.ts).
+- Missing-day chart behavior and per-user VPN collapsing are covered by [`apps/web/src/lib/admin-metrics.test.ts`](../apps/web/src/lib/admin-metrics.test.ts).
 - Coordinate parsing, projection, linked markers, text fallback, and attribution are covered by the user-world-map tests.
 - The Next.js production build reports the dashboard and database-backed console pages as dynamic server-rendered routes.