Status — owner work done, teammate-delegated panels intentionally deferred

This comment summarises PB-011 against the spec-folder task list. Issue stays open until:

Nora / Yosra ship the delegated admin panels (T-013 / T-014 / T-015 / T-016 — see below)
End-of-iteration QA sign-off

Task	Commit	Notes
T-001 User management commands	`2c95359`	SetUserStatus, SoftDeleteUser, ChangeUserRole + validators + `IUserAdministration` abstraction over Identity
T-002 Upgrade + onboarding queues	`d5c3da5`	`ReviewOnboardingCommand` (Active/Deactivated flip), `ReviewUpgradeRequestCommand` (role grant + status flip), paged queue queries
T-003 Content moderation endpoints	—	delegated: scholarships→Nora (PB-003), articles→Yosra (PB-009), community→Yosra (PB-007). admin panels will embed their pages
T-004 Analytics queries	`0fbade7`	`GetAnalyticsOverviewQuery` rolls users/listings/apps/bookings/revenue/profit-share/AI into one DTO; `GetUserGrowthQuery` fills zero-days; `GetApplicationFunnelQuery` groups by status
T-005 `SendBroadcastCommand`	`0fbade7`	EN+AR required, returns recipient count, routes through `INotificationDispatcher` so prefs still apply
T-006 Audit every admin mutation	`2c95359`, `d5c3da5`, `0fbade7`	every command above carries `[Auditable]`
T-007 Role + endpoint guards	`86c79d6`	`[Authorize(Roles = "Admin,SuperAdmin")]` at controller level
T-008 Unit + integration tests	`86c79d6`, `948eebc`	27 tests: command handlers, validators, `UserAdministration` against InMemory DB (Suspend → tokens revoked)

Task	Commit	Notes
T-009 `AdminLayout`	`c355f5b`	dedicated sidebar, Admin/SuperAdmin role guard at route level
T-010 `AdminDashboard`	`c355f5b`	10 KPI cards + inline-SVG sparkline + funnel bars (no Recharts dep, keeps bundle lean)
T-011 `UsersAdmin`	`c355f5b`	search + status/role filters + `IncludeDeleted` toggle, activate/suspend/delete inline actions
T-012 `UpgradeQueue` + `OnboardingQueue`	`c355f5b`	approve/reject inline, rejection notes mandatory
T-013 `ScholarshipsAdmin`	—	delegated to Nora (PB-003) — admin stub route still resolves
T-014 `ArticlesAdmin`	—	delegated to Yosra (PB-009)
T-015 `CommunityModeration`	—	delegated to Yosra (PB-007)
T-016 `ProfitShareConfig`	—	delegated to Nora (PB-014) — admin page embeds her component
T-017 `AuditLog` viewer	`aa790dd`	full filter set (search/action/target/actor/date), paginated; shares the PB-012 T-010 implementation
T-018 `BroadcastComposer`	`c355f5b`	bilingual title+body, AR inputs mirrored RTL, recipient count toasted
T-019 standalone `Analytics`	`c3cdf01`	7/30/90/180d window toggle, bigger area chart + funnel bars + total-in-window tally
T-020 Arabic copy	`c355f5b`, `aa790dd`, `c3cdf01`	`admin.json` AR namespace full coverage (nav + dashboard + users + queues + audit + analytics + broadcast)

Task	Status	Notes
T-021 E2E: approve consultant onboarding → dashboard updates	🟡 partial	Playwright admin route-guard smoke lands in `admin.spec.ts`; full flow needs seeded integration env
T-022 E2E: suspend user → immediate logout	✅ unit-level proof	`UserAdministrationTests.Suspend_revokes_every_active_refresh_token` covers the enforcement rule; the frontend side is already wired because the JWT refresh interceptor checks the revoked flag

server/src/ScholarPath.Application/Admin/ (commands + queries + DTOs)
server/src/ScholarPath.Application/Common/Interfaces/IUserAdministration.cs + IAdminReadService.cs
server/src/ScholarPath.Infrastructure/Services/UserAdministration.cs + AdminReadService.cs
server/src/ScholarPath.API/Controllers/AdminController.cs
client/src/components/layout/AdminLayout.tsx
client/src/pages/admin/ (7 pages)
client/src/services/api/admin.ts
client/src/locales/{en,ar}/admin.json

✅ Content areas gated by Admin/SuperAdmin role
✅ Every mutation audited (via PB-012 AuditBehavior + [Auditable])
✅ Analytics cards render real aggregations
🟡 Delegated admin panels (ScholarshipsAdmin/Articles/Community/ProfitShareConfig) pending owner implementation — routes resolve to stubs today

[PB-011] Admin Portal and Oversight #11