# Phase 15: UX Polish + Super Admin Ops Tools

**Status:** Not started
**Depends on:** All previous phases

## Goal

Production-ready polish: audit log viewer, global search, bulk operations, mobile-responsive
portal, keyboard shortcuts, error boundaries, and production security hardening.

## Planned Scope

### Backend

**Audit log viewer endpoint**
- `GET /api/audit-logs` — paginated, filterable by school, action, actor, date range
- Already have `audit_logs` table — just need the endpoint + frontend

**Global search endpoint**
- `GET /api/search?q={query}` — searches across schools, invoices, tickets
- Returns grouped results: `{ schools: [...], invoices: [...], tickets: [...] }`
- Limit 5 results per category

**Bulk school actions**
- `POST /api/schools/export-csv` — export school list as CSV (name, status, tier, credits, license)
- `POST /api/schools/bulk-status` — change status for multiple school IDs (super admin)

**Rate limiting on auth endpoints**
- Add `slowapi` middleware: `POST /auth/login` — max 10 req/min per IP
- Return `429 Too Many Requests` with Retry-After header

**HTTPS redirect**
- Add redirect middleware in `main.py` (X-Forwarded-Proto check)
- Update `nginx.conf` to pass X-Forwarded-Proto header

### Frontend

**Audit log page** (`AuditLogPage.vue` — new or sub-section in admin)
- Table: timestamp, actor, action, entity type, entity name, IP
- Filters: date range, actor, action type

**Global search** (keyboard shortcut `/`)
- `SearchModal.vue` — command palette style
- Press `/` anywhere → modal opens with search input
- Results grouped by type, click navigates to entity

**Keyboard shortcuts**
- `/` — open global search
- `N` — new school (when on /schools)
- `Esc` — close any open modal

**Mobile-responsive portal**
- PortalSidebar: collapsible on mobile (hamburger menu)
- PortalLayout: responsive header
- All portal pages: responsive table → card layout on mobile

**Error boundary component** (`ErrorBoundary.vue`)
- Wraps page content in AppLayout/PortalLayout
- On uncaught error: shows friendly "Something went wrong" card with retry button

**Empty state illustrations**
- SchoolsPage: "No schools yet" with Add School CTA
- TicketsPage: "No tickets" with Submit Ticket CTA
- BillingPage: "No invoices yet" with Generate Invoices CTA

**Dashboard refresh UX**
- Auto-refresh every 5 minutes (setInterval)
- Show "Data may be stale" banner after 10 minutes without refresh

**CSV export button** in SchoolsPage toolbar

## Key Files to Create/Modify

- `backend/app/routers/search.py` (new)
- `backend/app/routers/audit.py` (new — expose existing audit_logs table)
- `backend/app/routers/schools.py` — bulk-status + export-csv endpoints
- `backend/app/main.py` — include search + audit routers, add rate limit + HTTPS middleware
- `backend/requirements.txt` — add `slowapi`
- `frontend/src/pages/AuditLogPage.vue` (new)
- `frontend/src/components/ui/SearchModal.vue` (new)
- `frontend/src/components/ui/ErrorBoundary.vue` (new)
- `frontend/src/layouts/AppLayout.vue` — global keyboard shortcut handler
- `frontend/src/layouts/PortalLayout.vue` — mobile responsive
- `frontend/src/components/sidebar/PortalSidebar.vue` — mobile collapsible
- `frontend/src/pages/SchoolsPage.vue` — bulk actions, CSV export, empty state
- `frontend/src/router/index.ts` — /audit-logs route
- `frontend/src/components/sidebar/AppSidebar.vue` — audit logs nav item
- `frontend/src/lib/api.ts` — globalSearch, getAuditLogs, exportSchoolsCsv, bulkSchoolStatus