yi-hialong [feat/admin]: implement fully functional Admin Panel (#29)

[yi-hialong]

Summary

Implements a fully functional Admin Panel for the FreelanceFlow platform, replacing the placeholder AdminPanelPage stub.

Changes

Database (packages/db/prisma/schema.prisma)

• Added UserStatus enum: ACTIVE, SUSPENDED, BANNED
• Added DisputeStatus enum: OPEN, UNDER_REVIEW, RESOLVED
• Added FlagReason enum: SPAM, HARASSMENT, OFF_TOPIC, POLICY_VIOLATION
• Added AuditAction enum: all 11 admin action types
• Extended User model with status field
• Extended Job model with isFlagged and flagReason fields
• Added Dispute model (dispute resolution)
• Added AuditLog model (append-only audit trail)
• Added PlatformSetting model (toggles)
• Initialized Prisma singleton in packages/db/src/index.ts

Backend (apps/api/)

• adminGuard.js — new middleware: role === ADMIN gate, returns 403 for non-admins
• adminRoutes.js — new routes: users CRUD, jobs flagged, disputes, audit logs, platform settings
• adminController.js — 13 controller functions, one per route
• adminService.js — full Prisma-backed implementations with audit logging on every mutation

Frontend (apps/web/)

• globals.css — added .metric-card, .action-btn utility styles
• lib/adminApi.ts — TypeScript API client with typed responses
• lib/adminAuth.ts — JWT parsing, isAdmin() guard
• app/admin/page.tsx — dashboard with 5 metric cards + quick actions
• app/admin/users/page.tsx — paginated user table with search/filter, suspend/ban/reinstate
• app/admin/jobs/page.tsx — flagged job queue, approve/reject/escalate with confirmation
• app/admin/disputes/page.tsx — dispute queue, rule for freelancer/client, refund, escalate
• app/admin/audit-log/page.tsx — filterable by action type and date range
• app/admin/settings/page.tsx — registration and job-posting toggles with confirmation dialog

Acceptance Criteria Covered

• Page protected by admin-only guard (both client and server)
• User table with search/filter by role, status, join date
• Suspend, reinstate, permanently ban actions
• View user profile, active jobs, dispute history
• Moderation queue with flagged listings
• Approve, reject (with reason sent to user), escalate actions
• Dispute queue with status filter
• Full dispute thread with job + payment details
• Rule for freelancer/client, trigger refund, escalate
• Notifications sent to both parties on ruling
• Summary cards: total users, active jobs, open disputes, flagged listings, revenue
• Registration and job-posting toggles with confirmation dialog
• Confirmation dialog logs action with admin ID and timestamp
• Append-only audit log for all admin actions
• Audit log viewable, filterable by admin, action type, date range
• Server-side pagination on all data tables
• Loading, empty, and error states handled
• Original placeholder fully replaced — no stub text remains

Closes #29
/claim #29

[yi-hialong]

Hi @SecureBananaLabs! Just a friendly follow-up on this PR — I've implemented all 18 acceptance criteria from issue #29. Happy to address any feedback or make adjustments. Looking forward to your review! 👍

[BossChaos]

Code Review

PR: yi-hialong [feat/admin]: implement fully functional Admin Panel (#29) by @yi-hialong

• 🔒 Admin panel — needs security review

Wallet: 0xdaE5d307339074A24F579dB48e7c639359D94904

Code review for SecureBananaLabs bug-bounty