From b3511910d1f2e1fcf50210edfa9ec030df985a2e Mon Sep 17 00:00:00 2001
From: SpecialX <47072643+wangxiner55@users.noreply.github.com>
Date: Fri, 10 Jul 2026 19:09:12 +0800
Subject: [PATCH] =?UTF-8?q?feat(admin-portal):=20=E5=AE=8C=E6=95=B4?=
 =?UTF-8?q?=E5=AE=9E=E7=8E=B0=20admin-portal=20=E7=AE=A1=E7=90=86=E7=AB=AF?=
 =?UTF-8?q?=E5=BE=AE=E5=89=8D=E7=AB=AF?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

包含 src 全部实现、Dockerfile、配置文件等
---
 apps/admin-portal/.env.example                |   21 +
 apps/admin-portal/Dockerfile                  |   36 +
 apps/admin-portal/docs/01-understanding.md    |  373 +-
 .../docs/02-architecture-design.md            |  996 ++---
 apps/admin-portal/eslint.config.js            |   90 +
 apps/admin-portal/next-env.d.ts               |    2 +
 apps/admin-portal/next.config.js              |   53 +
 apps/admin-portal/package.json                |   60 +
 apps/admin-portal/postcss.config.js           |    6 +
 apps/admin-portal/public/mockServiceWorker.js |  361 ++
 apps/admin-portal/src/app/admin-app.tsx       |   51 +
 .../src/app/admin/audit-logs/page.tsx         |  158 +
 .../src/app/admin/classes/page.tsx            |   89 +
 .../src/app/admin/dashboard/page.tsx          |  267 ++
 apps/admin-portal/src/app/admin/layout.tsx    |   60 +
 .../src/app/admin/organization/page.tsx       |  113 +
 .../src/app/admin/permissions/page.tsx        |  115 +
 .../admin-portal/src/app/admin/roles/page.tsx |  291 ++
 .../src/app/admin/students/page.tsx           |  112 +
 .../src/app/admin/system/page.tsx             |  214 ++
 .../src/app/admin/teachers/page.tsx           |  115 +
 .../admin-portal/src/app/admin/users/page.tsx |  166 +
 .../src/app/admin/viewports/page.tsx          |  284 ++
 apps/admin-portal/src/app/api/health/route.ts |   17 +
 apps/admin-portal/src/app/api/ready/route.ts  |   47 +
 apps/admin-portal/src/app/globals.css         |   73 +
 apps/admin-portal/src/app/layout.tsx          |   27 +
 apps/admin-portal/src/app/login/page.tsx      |  154 +
 apps/admin-portal/src/app/page.tsx            |    5 +
 .../src/components/admin-shell.tsx            |  176 +
 .../src/components/msw-initializer.tsx        |   24 +
 .../src/components/notification-panel.tsx     |  164 +
 .../src/components/organization-tree.tsx      |  188 +
 .../src/components/role-permission-matrix.tsx |  147 +
 apps/admin-portal/src/components/ui.tsx       |  375 ++
 .../src/components/user-form-modal.tsx        |  216 ++
 .../src/components/user-management-table.tsx  |   72 +
 .../src/components/web-vitals-initializer.tsx |   20 +
 apps/admin-portal/src/hooks/use-audit-logs.ts |   89 +
 apps/admin-portal/src/hooks/use-classes.ts    |   44 +
 apps/admin-portal/src/hooks/use-dashboard.ts  |   20 +
 apps/admin-portal/src/hooks/use-graphql.ts    |  100 +
 .../src/hooks/use-organization.ts             |   24 +
 .../admin-portal/src/hooks/use-permissions.ts |   22 +
 apps/admin-portal/src/hooks/use-roles.ts      |   73 +
 apps/admin-portal/src/hooks/use-students.ts   |   48 +
 .../src/hooks/use-system-settings.ts          |   48 +
 apps/admin-portal/src/hooks/use-teachers.ts   |   48 +
 apps/admin-portal/src/hooks/use-users.ts      |  138 +
 apps/admin-portal/src/hooks/use-viewports.ts  |   59 +
 apps/admin-portal/src/hooks/use-websocket.ts  |  125 +
 apps/admin-portal/src/lib/auth.ts             |   79 +
 apps/admin-portal/src/lib/graphql-client.ts   |  333 ++
 apps/admin-portal/src/lib/i18n.ts             |  183 +
 apps/admin-portal/src/lib/permissions.ts      |   78 +
 apps/admin-portal/src/lib/web-vitals.ts       |   43 +
 apps/admin-portal/src/mocks/browser.ts        |   10 +
 apps/admin-portal/src/mocks/fixtures.ts       |  906 +++++
 apps/admin-portal/src/mocks/handlers.ts       |  516 +++
 apps/admin-portal/src/mocks/server.ts         |    7 +
 .../src/providers/auth-provider.tsx           |  107 +
 .../src/providers/graphql-provider.tsx        |   16 +
 .../src/providers/toast-provider.tsx          |  124 +
 apps/admin-portal/src/types/view-models.ts    |  207 +
 apps/admin-portal/tailwind.config.js          |   29 +
 apps/admin-portal/tsconfig.json               |   20 +
 apps/admin-portal/vitest.config.ts            |   30 +
 docs/troubleshooting/known-issues.md          |   24 +
 pnpm-lock.yaml                                | 3360 ++++++++++++++++-
 69 files changed, 11955 insertions(+), 693 deletions(-)
 create mode 100644 apps/admin-portal/.env.example
 create mode 100644 apps/admin-portal/Dockerfile
 create mode 100644 apps/admin-portal/eslint.config.js
 create mode 100644 apps/admin-portal/next-env.d.ts
 create mode 100644 apps/admin-portal/next.config.js
 create mode 100644 apps/admin-portal/package.json
 create mode 100644 apps/admin-portal/postcss.config.js
 create mode 100644 apps/admin-portal/public/mockServiceWorker.js
 create mode 100644 apps/admin-portal/src/app/admin-app.tsx
 create mode 100644 apps/admin-portal/src/app/admin/audit-logs/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/classes/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/dashboard/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/layout.tsx
 create mode 100644 apps/admin-portal/src/app/admin/organization/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/permissions/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/roles/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/students/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/system/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/teachers/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/users/page.tsx
 create mode 100644 apps/admin-portal/src/app/admin/viewports/page.tsx
 create mode 100644 apps/admin-portal/src/app/api/health/route.ts
 create mode 100644 apps/admin-portal/src/app/api/ready/route.ts
 create mode 100644 apps/admin-portal/src/app/globals.css
 create mode 100644 apps/admin-portal/src/app/layout.tsx
 create mode 100644 apps/admin-portal/src/app/login/page.tsx
 create mode 100644 apps/admin-portal/src/app/page.tsx
 create mode 100644 apps/admin-portal/src/components/admin-shell.tsx
 create mode 100644 apps/admin-portal/src/components/msw-initializer.tsx
 create mode 100644 apps/admin-portal/src/components/notification-panel.tsx
 create mode 100644 apps/admin-portal/src/components/organization-tree.tsx
 create mode 100644 apps/admin-portal/src/components/role-permission-matrix.tsx
 create mode 100644 apps/admin-portal/src/components/ui.tsx
 create mode 100644 apps/admin-portal/src/components/user-form-modal.tsx
 create mode 100644 apps/admin-portal/src/components/user-management-table.tsx
 create mode 100644 apps/admin-portal/src/components/web-vitals-initializer.tsx
 create mode 100644 apps/admin-portal/src/hooks/use-audit-logs.ts
 create mode 100644 apps/admin-portal/src/hooks/use-classes.ts
 create mode 100644 apps/admin-portal/src/hooks/use-dashboard.ts
 create mode 100644 apps/admin-portal/src/hooks/use-graphql.ts
 create mode 100644 apps/admin-portal/src/hooks/use-organization.ts
 create mode 100644 apps/admin-portal/src/hooks/use-permissions.ts
 create mode 100644 apps/admin-portal/src/hooks/use-roles.ts
 create mode 100644 apps/admin-portal/src/hooks/use-students.ts
 create mode 100644 apps/admin-portal/src/hooks/use-system-settings.ts
 create mode 100644 apps/admin-portal/src/hooks/use-teachers.ts
 create mode 100644 apps/admin-portal/src/hooks/use-users.ts
 create mode 100644 apps/admin-portal/src/hooks/use-viewports.ts
 create mode 100644 apps/admin-portal/src/hooks/use-websocket.ts
 create mode 100644 apps/admin-portal/src/lib/auth.ts
 create mode 100644 apps/admin-portal/src/lib/graphql-client.ts
 create mode 100644 apps/admin-portal/src/lib/i18n.ts
 create mode 100644 apps/admin-portal/src/lib/permissions.ts
 create mode 100644 apps/admin-portal/src/lib/web-vitals.ts
 create mode 100644 apps/admin-portal/src/mocks/browser.ts
 create mode 100644 apps/admin-portal/src/mocks/fixtures.ts
 create mode 100644 apps/admin-portal/src/mocks/handlers.ts
 create mode 100644 apps/admin-portal/src/mocks/server.ts
 create mode 100644 apps/admin-portal/src/providers/auth-provider.tsx
 create mode 100644 apps/admin-portal/src/providers/graphql-provider.tsx
 create mode 100644 apps/admin-portal/src/providers/toast-provider.tsx
 create mode 100644 apps/admin-portal/src/types/view-models.ts
 create mode 100644 apps/admin-portal/tailwind.config.js
 create mode 100644 apps/admin-portal/tsconfig.json
 create mode 100644 apps/admin-portal/vitest.config.ts

diff --git a/apps/admin-portal/.env.example b/apps/admin-portal/.env.example
new file mode 100644
index 0000000..f1b67ef
--- /dev/null
+++ b/apps/admin-portal/.env.example
@@ -0,0 +1,21 @@
+# admin-portal 环境变量
+# GraphQL endpoint（经 api-gateway 代理到 teacher-bff admin 命名空间）
+API_GATEWAY_URL=http://localhost:8080
+
+# MSW mock 开关（上游就绪后设为 disabled）
+NEXT_PUBLIC_API_MOCKING=enabled
+
+# MF 开关（Shell 就绪后设为 true）
+NEXT_PUBLIC_MF_ENABLED=false
+
+# Shell URL（standalone 壳用于 /api/ready 检查）
+NEXT_PUBLIC_SHELL_URL=http://localhost:4000
+
+# push-gateway WebSocket（实时通知）
+NEXT_PUBLIC_WS_URL=ws://localhost:8081/ws
+
+# OTel collector
+NEXT_PUBLIC_OTEL_ENDPOINT=http://localhost:4318
+
+# Web Vitals 上报端点
+NEXT_PUBLIC_WEB_VITALS_ENDPOINT=/api/admin/web-vitals
diff --git a/apps/admin-portal/Dockerfile b/apps/admin-portal/Dockerfile
new file mode 100644
index 0000000..2094eb5
--- /dev/null
+++ b/apps/admin-portal/Dockerfile
@@ -0,0 +1,36 @@
+# admin-portal Dockerfile
+# 仲裁：no-push 本地构建，使用官方镜像
+FROM node:22-alpine AS builder
+
+WORKDIR /app
+
+# 安装 pnpm
+RUN corepack enable && corepack prepare pnpm@latest --activate
+
+# 复制 workspace 配置
+COPY pnpm-workspace.yaml pnpm-lock.yaml package.json tsconfig.base.json ./
+COPY packages/ ./packages/
+COPY apps/admin-portal/ ./apps/admin-portal/
+
+# 安装依赖
+RUN pnpm install --frozen-lockfile
+
+# 构建
+WORKDIR /app/apps/admin-portal
+RUN pnpm run build
+
+# 运行时
+FROM node:22-alpine AS runner
+
+WORKDIR /app
+
+ENV NODE_ENV=production
+ENV PORT=4003
+
+COPY --from=builder /app/apps/admin-portal/.next/standalone ./
+COPY --from=builder /app/apps/admin-portal/.next/static ./apps/admin-portal/.next/static
+COPY --from=builder /app/apps/admin-portal/public ./apps/admin-portal/public
+
+EXPOSE 4003
+
+CMD ["node", "apps/admin-portal/server.js"]
diff --git a/apps/admin-portal/docs/01-understanding.md b/apps/admin-portal/docs/01-understanding.md
index b19752f..073d861 100644
--- a/apps/admin-portal/docs/01-understanding.md
+++ b/apps/admin-portal/docs/01-understanding.md
@@ -1,42 +1,66 @@
 # 模块理解确认书 — admin-portal
 
-> AI：ai07（TS/React · 管理场景域前端 remote）
-> 阶段：阶段 1 交付物
-> 日期：2026-07-09
-> 关联：[004 架构影响地图](../../../docs/architecture/004_architecture_impact_map.md) §1.1a/1.1b/§5.4、[AI 分配方案](../../../docs/architecture/ai-allocation.md) §5 ai07、[pending-features P6](../../../docs/architecture/roadmap/pending-features.md)、[known-issues §2.12](../../../docs/troubleshooting/known-issues.md)、[teacher-portal 阶段1](../../teacher-portal/docs/01-understanding.md)、[teacher-portal 阶段2](../../teacher-portal/docs/02-architecture-design.md)
+> AI：ai16（TS/React · 管理场景域前端 remote）
+> 阶段：阶段 1 交付物（仲裁后修订版 v2）
+> 日期：2026-07-10
+> 关联：
+>
+> - [004 架构影响地图](../../../docs/architecture/004_architecture_impact_map.md) §1.1a/1.1b/§5.4
+> - [AI 分配方案](../../../docs/architecture/ai-allocation.md) §5 ai16
+> - [总统最终裁决](../../../docs/architecture/president-final-rulings.md) §5.1-5.5（ISSUE-044~048）
+> - [admin-portal 对接契约](../../architecture/issues/contracts/admin-portal_contract.md)
+> - [admin-portal 工作线](../../architecture/issues/worklines/admin-portal_workline.md)
+> - [known-issues §2.16](../../../docs/troubleshooting/known-issues.md)
+
+---
+
+## 0. 仲裁结果摘要（ARB-001~006）
+
+| 编号     | 议题                        | 裁决                                                                                                                |
+| -------- | --------------------------- | ------------------------------------------------------------------------------------------------------------------- |
+| ARB-001  | BFF 归属（ISSUE-044）       | 复用 teacher-bff GraphQL endpoint，不新建 admin-bff；ai03 预留 `admin.*` 命名空间                                   |
+| ARB-002  | 错误码前缀（ISSUE-045）     | `ADMIN_` 前缀（合并 `SCHOOL_`/`ORG_` 入 `ADMIN_`）；i18n key `error.admin.*`                                        |
+| ARB-003  | 权限点命名（ISSUE-046）     | admin 自身资源用 `ADMIN_*`；跨服务资源保留原前缀（`IAM_USER_READ` 等）                                              |
+| ARB-004  | GraphQL 客户端（ISSUE-047） | MF 模式复用 Shell 暴露的 GraphQL client 单例；standalone 模式自建 urql client                                       |
+| ARB-005  | 审计日志归属（ISSUE-048）   | 审计事件归 iam 发布到 `edu.iam.audit.created`；teacher-bff 消费聚合；admin-portal 经 GraphQL `auditLogs` Query 消费 |
+| ARB-006  | WebSocket 实时通知          | 接入 push-gateway `GET /ws`（审计告警/异常登录/系统异常），不再用轮询                                               |
+| 端口分配 | admin-portal dev server     | **4003**（非旧文档的 3003）                                                                                         |
 
 ---
 
 ## 1. 我在架构中的位置
 
 - **层级**：L2 微前端层（004 §3.1 六层架构中的前端层）
-- **MF 角色**：**Remote 子应用**，挂载到 teacher-portal Shell（主应用）
+- **MF 角色**：**Remote 子应用**，挂载到 teacher-portal Shell（主应用，端口 4000）
 - **上游（谁调用我）**：浏览器（系统管理员 / 校管理员）
-- **下游（同步）**：api-gateway（REST，经 teacher-portal Shell 的 Next.js `rewrites` 代理 `/api/v1/*`）
-- **下游（推送）**：— （**不消费推送**，管理端用轮询）
-- **BFF 对接**：teacher-bff 复用（`/admin/*` 聚合）+ iam 直连（`/iam/*` 用户/角色/权限/视口 CRUD）
-- **通信方式**：HTTP/REST（前端→Gateway）
+- **下游（同步）**：api-gateway（GraphQL `POST /api/admin/graphql` + REST `/api/auth/login`）
+- **下游（推送）**：push-gateway `GET /ws`（WebSocket 实时通知，ARB-006）
+- **BFF 对接**：复用 teacher-bff GraphQL admin 命名空间（ARB-001），不新建 admin-bff
+- **通信方式**：GraphQL（业务数据）+ HTTP（登录）+ WebSocket（实时通知）
 - **不直连**：前端不直连任何业务服务或 BFF 后端实例，全部经 api-gateway 代理
 
 **说明**：
 
-- admin-portal 作为 Remote 子应用，挂载到 teacher-portal Shell 提供的 AppShell + 共享依赖（react/react-dom/@tanstack/react-query/zustand/nuqs/ui-components/ui-tokens/contracts/hooks）
-- 路由前缀 `/admin/*` 由 teacher-portal Shell 动态加载 admin-portal Remote 模块
-- 场景域 BFF 复用策略（004 §5.4）：系统/校管理员复用 teacher-portal Shell + teacher-bff（`/admin/*` 视口）+ iam 直连，不单独建 portal 后端
-- 全部业务请求经 api-gateway 代理，admin-portal 本身不实现 rewrites（依赖 Shell 的 rewrites）
+- admin-portal 作为 Remote 子应用，挂载到 teacher-portal Shell
+- Shell 暴露 `GraphQLProvider` / `useGraphQLClient` / `AppShell` / `useAuth` / `usePermission` 等，admin-portal MF 模式复用，standalone 模式自建
+- 路由前缀 `/admin/*` 由 teacher-portal Shell 动态加载 admin-portal Remote 模块（暴露 `./AdminApp`）
+- 场景域 BFF 复用策略（004 §5.4 + ARB-001）：复用 teacher-bff GraphQL endpoint，admin 命名空间（`admin.*` Query/Mutation）
 
 ## 2. 我的限界上下文
 
 ### 2.1 我负责的聚合 / 实体（前端视图模型）
 
-- 用户、角色、权限、视口（管理场景域前端视图）
+- 用户、角色、权限、视口（管理场景域前端视图，调 iam 经 GraphQL）
 - 组织（学校/年级/班级层级）
-- 平台监控（运行时指标、用户活动、错误统计）
-- 会话状态（Session）、视口（Viewport）、权限（Permission）（与 teacher-portal 共享，引用 teacher-portal 文档）
+- 学校设置（system 路由）
+- 班级/教师/学生全局管理（admin 视角，只读 + 状态管理）
+- 审计日志（只读，经 teacher-bff GraphQL `auditLogs` Query 消费）
+- 管理仪表盘（聚合统计 + 服务健康）
+- 实时通知（WebSocket 推送：审计告警/异常登录/系统异常）
 
 ### 2.2 业务领域
 
-- **管理场景域**（前端场景域：管理场景域，对应后端 iam 限界上下文 + teacher-bff 管理视口）
+- **管理场景域**（前端场景域：管理场景域，对应后端 iam 限界上下文 + teacher-bff admin 命名空间）
 
 ### 2.3 不负责
 
@@ -44,6 +68,7 @@
 - 学生作答界面（归 student-portal）
 - 家长多子女切换（归 parent-portal）
 - 教师仪表盘（归 teacher-portal，admin-portal 仅有管理仪表盘）
+- 审计事件发布（归 iam，admin-portal 仅消费）
 
 ### 2.4 数据范围
 
@@ -54,180 +79,206 @@
 
 ### 3.1 消费的后端 API（经 api-gateway 代理）
 
-| 路径前缀                  | 下游 BFF/服务               | 关键端点                                                                                                                                            |
-| ------------------------- | --------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------- |
-| `/api/v1/iam/*`（管理用） | iam                         | `GET /iam/users`、`POST /iam/users`、`PUT /iam/users/:id`、`GET /iam/roles`、`GET /iam/permissions`、`GET /iam/viewports`、`PUT /iam/viewports/:id` |
-| `/api/v1/admin/*`         | teacher-bff 复用 + iam 直连 | `GET /admin/dashboard`、`GET /admin/monitoring/metrics`、`GET /admin/stats/users`、`GET /admin/stats/active-sessions`                               |
-| `/api/v1/notifications/*` | msg                         | 通知中心（P5）                                                                                                                                      |
+| 路径                      | Method | 下游 BFF/服务                 | 用途                                              |
+| ------------------------- | ------ | ----------------------------- | ------------------------------------------------- |
+| `/api/admin/graphql`      | POST   | teacher-bff（admin 命名空间） | 全部业务 GraphQL 查询（ARB-001）                  |
+| `/api/auth/login`         | POST   | api-gateway → iam             | 登录（standalone 模式用，MF 模式复用 Shell 登录） |
+| `GET /ws`（push-gateway） | WS     | push-gateway                  | 实时通知（审计告警/异常登录/系统异常，ARB-006）   |
 
-### 3.2 统一响应契约
+### 3.2 GraphQL Operations（contract §2.4）
 
-所有后端响应遵循 `ActionState` 结构（迁移指南 §7.5）：
+admin-portal 消费 teacher-bff admin 命名空间的 18 个 GraphQL operations：
 
-```typescript
-type ActionState<T> =
-  | { success: true; data: T }
-  | {
-      success: false;
-      error: { code: string; message: string; details?: unknown };
-    };
-```
+| Operation                                        | 类型           | 用途                            |
+| ------------------------------------------------ | -------------- | ------------------------------- |
+| `currentUser`                                    | Query          | 当前管理员信息                  |
+| `adminUsers` / `adminUser(id)`                   | Query          | 用户列表 / 详情                 |
+| `createUser` / `updateUser` / `toggleUserStatus` | Mutation       | 用户 CRUD                       |
+| `adminRoles`                                     | Query          | 角色列表（含权限）              |
+| `createRole` / `updateRolePermissions`           | Mutation       | 角色 CRUD + 权限矩阵            |
+| `adminPermissions`                               | Query          | 全量权限点（按 resource）       |
+| `adminViewports(scope)`                          | Query          | 视口配置列表                    |
+| `updateViewport`                                 | Mutation       | 视口配置更新                    |
+| `adminOrganization(parentId)`                    | Query          | 组织树                          |
+| `adminClasses`                                   | Query          | 班级管理（全局）                |
+| `adminTeachers`                                  | Query          | 教师管理                        |
+| `adminStudents`                                  | Query          | 学生管理                        |
+| `auditLogs(filter)`                              | Query          | 审计日志（聚合 iam AuditEvent） |
+| `adminDashboard`                                 | Query          | 管理员仪表盘聚合                |
+| `systemSettings` / `updateSystemSettings`        | Query/Mutation | 学校设置                        |
 
-错误码前缀按服务名大写（admin-portal 涉及：`IAM_`、`BFF_TEACHER_`、`GW_`、`NETWORK_`）。前端 API 请求层根据 `error.code` 前缀路由到对应的 i18n key。
+### 3.3 推送契约（ARB-006）
 
-### 3.3 推送契约
+admin-portal 接入 push-gateway `GET /ws`，消费 3 类实时通知：
 
-**— N/A**
+| 通知类型         | severity | 用途                      |
+| ---------------- | -------- | ------------------------- |
+| `audit_alert`    | warning  | 审计告警（敏感操作触发）  |
+| `abnormal_login` | error    | 异常登录（异地/异常时段） |
+| `system_error`   | error    | 系统异常（服务降级/宕机） |
 
-admin-portal **不消费** WebSocket 推送或 SSE 流式响应。管理端场景对实时性要求低，采用**轮询**策略：
-
-- 平台监控页：60s 轮询 `GET /api/v1/admin/monitoring/metrics`
-- 用户活动统计：5min 轮询 `GET /api/v1/admin/stats/active-sessions`
-- 通知中心（P5）：HTTP 长轮询或定时拉取 `GET /api/v1/notifications`（不走 push-gateway）
-
-> 长期监控指标推荐用 `<iframe>` 嵌入 Grafana 面板（PlatformMonitor 组件），不经过 BFF。
+> **不再用轮询**：旧文档的"60s 轮询监控 + 5min 轮询统计"策略已被 ARB-006 替换为 WebSocket 实时推送。开发期用 mock-socket + 30s 定时器模拟推送。
 
 ### 3.4 proto 不直接消费
 
-前端不调用 gRPC，BFF 把 gRPC 聚合为 REST 暴露给前端。前端仅消费 `packages/contracts/src/permissions.ts` 中的权限点常量（TS 文件，非 proto 生成）。
+前端不调用 gRPC，teacher-bff 把 gRPC 聚合为 GraphQL 暴露给前端。前端仅消费 `packages/contracts/src/permissions.ts` 中的权限点常量（TS 文件，非 proto 生成）。
 
 ## 4. 我的技术栈
 
-| 维度                        | 选型                                                     | 说明                                            |
-| --------------------------- | -------------------------------------------------------- | ----------------------------------------------- |
-| 框架                        | Next.js 14+（App Router）                                | server components 默认，client components 按需  |
-| 语言                        | TypeScript 5.5+（strict）                                | 沿用 tsconfig.base.json                         |
-| 微前端                      | Module Federation 2.0（@module-federation/nextjs-mf）    | admin-portal = **Remote**                       |
-| 样式                        | Tailwind CSS 3.4+                                        | 配合设计令牌三层模型（与 teacher-portal 共享）  |
-| UI 组件库                   | shadcn/ui（迁移指南 §7.2）                               | 复用 Shell 暴露的 `packages/ui-components/`     |
-| 状态管理 L1 URL             | nuqs                                                     | 可分享、可刷新状态                              |
-| 状态管理 L2 Server          | TanStack Query v5                                        | 服务端数据缓存、重试、乐观更新                  |
-| 状态管理 L3 Client Business | Zustand slice                                            | 客户端业务状态                                  |
-| 状态管理 L4 Global UI       | Zustand ui-store + ModalRoot（复用 Shell）               | 全局 UI 状态                                    |
-| 状态管理 L5 Form            | react-hook-form + zodResolver                            | 表单状态                                        |
-| 富文本                      | — **不使用**                                             | 管理端无富文本场景，不引入 Tiptap               |
-| 图表                        | recharts                                                 | 管理仪表盘、用户活动统计                        |
-| i18n                        | next-intl                                                | BFF/服务返回 i18n key + 参数，前端翻译          |
-| A11y                        | eslint-plugin-jsx-a11y（error 级）                       | WCAG 2.2 AA                                     |
-| 字体                        | Inter（sans）/ Fraunces（serif）/ JetBrains Mono（mono） | 复用 teacher-portal RootLayout 加载，不重复引入 |
+| 维度       | 选型                                                     | 说明                                                                                             |
+| ---------- | -------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
+| 框架       | Next.js 14+（App Router）                                | server components 默认，client components 按需                                                   |
+| 语言       | TypeScript 5.5+（strict）                                | 沿用 tsconfig.base.json                                                                          |
+| 微前端     | Module Federation 2.0（@module-federation/nextjs-mf）    | admin-portal = **Remote**，端口 4003                                                             |
+| 数据层     | urql GraphQL client                                      | standalone 自建 / MF 复用 Shell 单例（ARB-004）                                                  |
+| 样式       | Tailwind CSS 3.4+                                        | 配合设计令牌三层（复用 Shell）                                                                   |
+| UI 组件库  | shadcn/ui 风格（复用 Shell `@edu/ui-components`）        | admin-portal 内部 `ui.tsx` 封装 PaperCard/Button/Table 等纸面组件                                |
+| 表单       | react-hook-form + zod                                    | 用户表单/学校设置                                                                                |
+| 拖拽排序   | @dnd-kit/sortable                                        | 视口配置拖拽排序                                                                                 |
+| 图表       | recharts                                                 | 仪表盘趋势表（实际以纯表格为主，纸面风格）                                                       |
+| i18n       | 轻量 i18n（`messages` 字典 + `t()` 函数）                | 命名空间 `admin.*`，不依赖 next-intl                                                             |
+| Mock       | MSW（Mock Service Worker）+ mock-socket                  | 开发期拦截全部 GraphQL/HTTP + WebSocket mock                                                     |
+| Web Vitals | web-vitals v4                                            | LCP/CLS/FCP/INP/TTFB 采集，`navigator.sendBeacon` 上报                                           |
+| A11y       | eslint-plugin-jsx-a11y（error 级）                       | WCAG 2.2 AA                                                                                      |
+| 字体       | Inter（sans）/ Fraunces（serif）/ JetBrains Mono（mono） | RootLayout 加载（standalone）；MF 模式复用 Shell                                                 |
+| 测试       | Vitest + @testing-library/react                          | jsdom 环境，覆盖率 ≥ 80%                                                                         |
+| ESLint     | ESLint 9 flat config                                     | jsx-a11y + tseslint + prettier（注：`@next/eslint-plugin-next` 14.x 与 ESLint 9 不兼容，已移除） |
 
-> 技术栈与 teacher-portal **完全一致**，差异仅在：MF 角色（Remote 而非 Shell）、不使用 Tiptap、不消费 WebSocket/SSE 推送、数据范围 L3-L5。
+> **技术栈差异**（vs teacher-portal）：MF 角色（Remote）、GraphQL 为主（非 REST）、消费 WebSocket 推送（非 SSE）、纸面 UI 风格、数据范围 L3-L5。
 
 ## 5. 我的阶段归属
 
-- **阶段**：P6（硬化阶段）
-- **当前状态**：❌ **全为待建**（admin-portal 当前为空目录，无任何代码）；📐 需设计（待全部业务服务稳定）
-- **依赖上游阶段**：P6（依赖 teacher-portal Shell 已就绪 + iam 已实现用户/角色/权限/视口 CRUD + teacher-bff 已实现 `/admin/*` 复用）
+- **阶段**：P6（硬化阶段），批次 5
+- **当前状态**：✅ **已实现**（P2-P6 全阶段交付完成，含 11 路由 + MSW mock + A11y + Web Vitals + Dockerfile）
+- **依赖上游阶段**：P6（依赖 teacher-portal Shell 已就绪 + teacher-bff GraphQL admin 命名空间 + iam 已实现用户/角色/权限/视口 CRUD + push-gateway WebSocket）
 
-## 6. 我需要对齐的黄金模板项（对照 classes 服务）
+## 6. 路由表（11 路由，contract §1.2）
 
-> 前端无 `@RequirePermission` 装饰器（后端概念），对齐项改造为前端等价物。
+| 路由                  | 页面             | 权限点                 | 数据范围 |
+| --------------------- | ---------------- | ---------------------- | -------- |
+| `/admin/dashboard`    | 管理员仪表盘     | `ADMIN_DASHBOARD_VIEW` | L3-L5    |
+| `/admin/users`        | 用户管理         | `IAM_USER_READ`        | L3-L5    |
+| `/admin/roles`        | 角色权限管理     | `IAM_ROLE_READ`        | L3-L5    |
+| `/admin/permissions`  | 权限点管理       | `IAM_PERMISSION_READ`  | L5       |
+| `/admin/viewports`    | 视口配置         | `IAM_VIEWPORT_READ`    | L5       |
+| `/admin/organization` | 组织管理         | `ADMIN_ORG_MANAGE`     | L3-L5    |
+| `/admin/system`       | 学校设置         | `ADMIN_SYSTEM_MANAGE`  | L5       |
+| `/admin/classes`      | 班级管理（全局） | `ADMIN_CLASS_READ`     | L3-L5    |
+| `/admin/teachers`     | 教师管理         | `ADMIN_TEACHER_READ`   | L3-L5    |
+| `/admin/students`     | 学生管理         | `ADMIN_STUDENT_READ`   | L3-L5    |
+| `/admin/audit-logs`   | 审计日志         | `ADMIN_AUDIT_READ`     | L5       |
 
-| 对齐项                | classes（后端黄金模板）               | admin-portal 前端等价                                                    | 当前状态                   |
-| --------------------- | ------------------------------------- | ------------------------------------------------------------------------ | -------------------------- |
-| 权限校验              | `@RequirePermission(Permissions.XXX)` | `usePermission().hasPermission("XXX")` Hook + `<RequirePermission>` 组件 | ❌ 待建（无现有代码）      |
-| 错误码前缀统一        | `CLASSES_*`、`IAM_*`                  | API 请求层根据 `error.code` 前缀路由 i18n                                | ❌ 待建                    |
-| logger                | pino                                  | 前端 console + Sentry（P6）                                              | ❌ 待建                    |
-| metrics               | prom-client `/metrics`                | 前端 Web Vitals → Gateway 上报                                           | ❌ 待建                    |
-| tracer                | OTel SDK                              | 前端 OTel browser SDK（P6）                                              | ❌ 待建                    |
-| /healthz + /readyz    | `GET /healthz` `GET /readyz`          | Next.js `/api/health` route + Dockerfile HEALTHCHECK                     | ❌ 待建                    |
-| 优雅关闭              | SIGTERM handler                       | Next.js 无长连接，无需                                                   | ✅ N/A                     |
-| 测试覆盖率 ≥ 80%      | Vitest                                | Vitest + @testing-library/react + Playwright E2E                         | ❌ 待建（0%）              |
-| Dockerfile 多阶段构建 | builder + runtime                     | builder + runtime                                                        | ❌ 待建                    |
-| Zod 输入验证          | class-validator + Zod schema          | react-hook-form + zodResolver                                            | ❌ 待建                    |
-| GlobalErrorFilter     | NestJS 全局异常过滤器                 | React ErrorBoundary + API 请求层统一错误处理                             | ❌ 待建                    |
-| 设计令牌三层          | —                                     | primitive.css / semantic-light/dark.css / tailwind-theme.css（复用）     | ❌ 待建（复用 Shell 暴露） |
-| A11y 工具集           | —                                     | useA11yId / mergeA11yProps / describeInput / focus-trap（复用 Shell）    | ❌ 待建（复用 Shell 暴露） |
+> 权限点前缀规则（ARB-003）：admin 自身资源用 `ADMIN_*`；跨服务资源保留原前缀（如 `IAM_USER_READ`）。`ADMIN_*` 常量由 coord 维护于 `packages/contracts/src/permissions.ts`，admin-portal 引用 `src/lib/permissions.ts`，不硬编码。
+
+## 7. 黄金模板对齐清单（前端等价）
+
+| 对齐项                | 后端等价                              | admin-portal 实现                                             | 状态 |
+| --------------------- | ------------------------------------- | ------------------------------------------------------------- | ---- |
+| 权限校验              | `@RequirePermission(Permissions.XXX)` | `usePermission().hasPermission("XXX")` Hook + `AuthGuard`     | ✅   |
+| 错误码前缀            | `IAM_*` / `ADMIN_*`                   | `CONSUMED_ERROR_PREFIXES` 常量 + i18n 路由                    | ✅   |
+| logger                | pino                                  | console + 结构化（生产 → 上报）                               | ✅   |
+| metrics               | prom-client `/metrics`                | Web Vitals v4 → `navigator.sendBeacon` 上报                   | ✅   |
+| /health + /ready      | `GET /healthz` `GET /readyz`          | Next.js Route Handler `/api/health` + `/api/ready`            | ✅   |
+| 优雅关闭              | SIGTERM handler                       | N/A（Next.js 无长连接）                                       | ✅   |
+| 测试覆盖率 ≥ 80%      | Vitest                                | Vitest + @testing-library/react                               | ⚠️   |
+| Dockerfile 多阶段构建 | builder + runtime                     | `node:22-alpine` 多阶段，standalone 输出，EXPOSE 4003         | ✅   |
+| Zod 输入验证          | class-validator + Zod schema          | react-hook-form + zod                                         | ✅   |
+| GlobalErrorFilter     | NestJS 全局异常过滤器                 | React ErrorBoundary + Toast 错误处理                          | ✅   |
+| 设计令牌三层          | —                                     | `globals.css`（primitive/semantic）+ tailwind-theme           | ✅   |
+| A11y 工具集           | —                                     | eslint-plugin-jsx-a11y（error 级）+ skip-link + focus-visible | ✅   |
+| Module Federation     | —                                     | `next.config.js` Remote 角色，`NEXT_PUBLIC_MF_ENABLED` 控制   | ✅   |
+| MSW mock              | —                                     | 18 GraphQL operation + `/api/auth/login` mock                 | ✅   |
 
 ---
 
-## 附：admin-portal 现状审计（对齐黄金模板）
+## 附：admin-portal 实现清单（v2，仲裁后修订）
 
-### 审计表
-
-| 维度                                 | 状态   | 说明                                                                      |
-| ------------------------------------ | ------ | ------------------------------------------------------------------------- |
-| 权限装饰器（前端等价 usePermission） | ❌     | 待建，复用 Shell 暴露的 `usePermission` Hook + `<RequirePermission>` 组件 |
-| 错误码前缀                           | ❌     | 待建，复用 Shell 暴露的 ApiClient（统一请求层）                           |
-| logger                               | ❌     | 待建，复用 `packages/shared-ts/src/logger.ts`                             |
-| metrics                              | ❌     | 待建，Web Vitals 上报 `admin_portal_*`                                    |
-| tracer                               | ❌     | 待建，OTel browser SDK（P6）                                              |
-| /healthz                             | ❌     | 待建，Next.js Route Handler                                               |
-| /readyz                              | ❌     | 待建，Next.js Route Handler                                               |
-| 优雅关闭                             | ✅ N/A | Next.js 无长连接                                                          |
-| 测试覆盖率                           | ❌     | 待建，目标 ≥ 80%                                                          |
-| Dockerfile 多阶段                    | ❌     | 待建，builder + runtime                                                   |
-| Zod 输入验证                         | ❌     | 待建，react-hook-form + zodResolver                                       |
-| GlobalErrorFilter（ErrorBoundary）   | ❌     | 待建，复用 Shell 暴露的 ErrorBoundary                                     |
-| 设计令牌三层                         | ❌     | 待建，复用 Shell 暴露的 `packages/ui-tokens/`                             |
-| A11y 工具集                          | ❌     | 待建，复用 Shell 暴露的 `packages/ui-components/`                         |
-| Module Federation 配置               | ❌     | 待建，next.config.js 配置 Remote 角色                                     |
-| 5 层状态管理                         | ❌     | 待建，复用 Shell 暴露的 nuqs/TanStack Query/Zustand                       |
-| 共享组件库                           | ❌     | 待建，复用 Shell 暴露 + admin 特有 4 个组件                               |
-| i18n                                 | ❌     | 待建，next-intl                                                           |
-| API 请求层                           | ❌     | 待建，复用 Shell 暴露的 ApiClient                                         |
-| ESLint flat config 自定义规则        | ❌     | 待建，no-hardcoded-fonts / design-tokens 规则                             |
-
-### 现有文件清单
+### 文件结构
 
 ```
-apps/admin-portal/        # 空目录（待建）
+apps/admin-portal/
+├─ package.json                    # 依赖（urql/msw/@dnd-kit/web-vitals/eslint-plugin-jsx-a11y）
+├─ next.config.js                  # MF Remote 配置 + rewrites（GraphQL 代理）
+├─ tsconfig.json                   # extends tsconfig.base.json
+├─ tailwind.config.js              # paper/ink/accent/rule 色板
+├─ eslint.config.js                # ESLint 9 flat config（jsx-a11y + tseslint + prettier）
+├─ Dockerfile                      # 多阶段构建，node:22-alpine，standalone
+├─ vitest.config.ts                # jsdom + coverage ≥80%
+├─ .env.example                    # 环境变量模板
+├─ public/mockServiceWorker.js     # MSW worker
+└─ src/
+   ├─ app/
+   │  ├─ globals.css               # 设计令牌 + A11y 样式
+   │  ├─ layout.tsx                # RootLayout（字体加载）
+   │  ├─ page.tsx                  # 根页面（redirect /admin/dashboard）
+   │  ├─ admin-app.tsx             # MF Remote 入口（exposes ./AdminApp）
+   │  ├─ login/page.tsx            # 登录页（standalone mock 登录）
+   │  ├─ admin/
+   │  │  ├─ layout.tsx             # admin 路由组 layout（Provider 链 + AuthGuard + AdminShell）
+   │  │  ├─ dashboard/page.tsx     # 管理仪表盘
+   │  │  ├─ users/page.tsx         # 用户管理
+   │  │  ├─ roles/page.tsx         # 角色权限
+   │  │  ├─ permissions/page.tsx   # 权限点管理
+   │  │  ├─ viewports/page.tsx     # 视口配置（@dnd-kit 拖拽）
+   │  │  ├─ organization/page.tsx  # 组织管理
+   │  │  ├─ system/page.tsx        # 学校设置
+   │  │  ├─ classes/page.tsx       # 班级管理
+   │  │  ├─ teachers/page.tsx      # 教师管理
+   │  │  ├─ students/page.tsx      # 学生管理
+   │  │  └─ audit-logs/page.tsx    # 审计日志（CSV 导出）
+   │  └─ api/
+   │     ├─ health/route.ts        # Liveness 检查
+   │     └─ ready/route.ts         # Readiness 检查
+   ├─ components/
+   │  ├─ ui.tsx                    # 通用 UI（PaperCard/Button/Input/Select/Badge/Table/Pagination）
+   │  ├─ admin-shell.tsx           # AdminShell（左栏 11 项导航 + 主内容 + 跳过链接）
+   │  ├─ user-management-table.tsx # 用户管理表格
+   │  ├─ user-form-modal.tsx       # 用户表单弹窗
+   │  ├─ role-permission-matrix.tsx# 角色权限矩阵
+   │  ├─ organization-tree.tsx     # 组织树（A11y treeitem）
+   │  ├─ notification-panel.tsx    # 通知面板（WebSocket）
+   │  ├─ msw-initializer.tsx       # MSW 初始化
+   │  └─ web-vitals-initializer.tsx# Web Vitals 初始化
+   ├─ hooks/
+   │  ├─ use-graphql.ts            # useGraphQuery + useGraphMutation
+   │  ├─ use-users.ts              # 用户 CRUD
+   │  ├─ use-roles.ts              # 角色 CRUD
+   │  ├─ use-permissions.ts        # 权限点查询
+   │  ├─ use-viewports.ts          # 视口配置
+   │  ├─ use-organization.ts       # 组织树
+   │  ├─ use-classes.ts            # 班级
+   │  ├─ use-teachers.ts           # 教师
+   │  ├─ use-students.ts           # 学生
+   │  ├─ use-audit-logs.ts         # 审计日志 + CSV 导出
+   │  ├─ use-dashboard.ts          # 仪表盘
+   │  ├─ use-system-settings.ts    # 学校设置
+   │  └─ use-websocket.ts          # WebSocket 实时通知
+   ├─ providers/
+   │  ├─ graphql-provider.tsx      # GraphQLProvider（standalone 自建 urql client）
+   │  ├─ auth-provider.tsx         # AuthProvider + useAuth + usePermission
+   │  └─ toast-provider.tsx        # ToastProvider + useToast
+   ├─ lib/
+   │  ├─ graphql-client.ts         # urql client + 18 个 GraphQL operations
+   │  ├─ auth.ts                   # 认证工具
+   │  ├─ permissions.ts            # 权限常量（ADMIN_ + IAM_）
+   │  ├─ i18n.ts                   # 轻量 i18n
+   │  └─ web-vitals.ts             # Web Vitals 采集
+   ├─ types/
+   │  └─ view-models.ts            # 视图模型类型定义
+   └─ mocks/
+      ├─ browser.ts                # MSW Browser Worker
+      ├─ server.ts                 # MSW Node Server（vitest）
+      ├─ fixtures.ts               # mock 数据库
+      └─ handlers.ts               # MSW handlers（18 GraphQL + login）
 ```
 
-**说明**：admin-portal 当前为空目录，所有维度均为 ❌ 待建状态。无现有文件、无现有代码、无现有违规点。P6 阶段从零开始搭建。
+### 质量校验
 
-### L1 导航菜单（视口）
-
-| 视口 key       | 标签（i18n key）         | 路由                  | 权限                    |
-| -------------- | ------------------------ | --------------------- | ----------------------- |
-| `dashboard`    | `admin.nav.dashboard`    | `/admin/dashboard`    | `ADMIN_DASHBOARD_VIEW`  |
-| `users`        | `admin.nav.users`        | `/admin/users`        | `IAM_USER_READ`         |
-| `roles`        | `admin.nav.roles`        | `/admin/roles`        | `IAM_ROLE_READ`         |
-| `permissions`  | `admin.nav.permissions`  | `/admin/permissions`  | `IAM_PERMISSION_READ`   |
-| `viewports`    | `admin.nav.viewports`    | `/admin/viewports`    | `IAM_VIEWPORT_READ`     |
-| `organization` | `admin.nav.organization` | `/admin/organization` | `ORG_MANAGE`            |
-| `monitoring`   | `admin.nav.monitoring`   | `/admin/monitoring`   | `ADMIN_MONITORING_VIEW` |
-
-### L2 路由表
-
-| 路由                  | 页面       | 权限                    |
-| --------------------- | ---------- | ----------------------- |
-| `/admin/dashboard`    | 管理仪表盘 | `ADMIN_DASHBOARD_VIEW`  |
-| `/admin/users`        | 用户管理   | `IAM_USER_READ`         |
-| `/admin/users/new`    | 新建用户   | `IAM_USER_CREATE`       |
-| `/admin/users/:id`    | 用户编辑   | `IAM_USER_UPDATE`       |
-| `/admin/roles`        | 角色管理   | `IAM_ROLE_READ`         |
-| `/admin/permissions`  | 权限管理   | `IAM_PERMISSION_READ`   |
-| `/admin/viewports`    | 视口配置   | `IAM_VIEWPORT_READ`     |
-| `/admin/organization` | 组织管理   | `ORG_MANAGE`            |
-| `/admin/monitoring`   | 平台监控   | `ADMIN_MONITORING_VIEW` |
-
-### L3 组件级差异（admin-portal 特有）
-
-**复用 Shell 暴露的组件**：AppShell、RequirePermission、ErrorBoundary、Loading、Empty、DataTable、Form、Chart、Toast、Modal、Button/Input/Select/Textarea、A11y 工具集
-
-**admin-portal 特有组件**：
-
-| 组件                   | 用途                                    | 来源 |
-| ---------------------- | --------------------------------------- | ---- |
-| `UserManagementTable`  | 用户管理表格（列表/筛选/分页/批量操作） | 新建 |
-| `RolePermissionMatrix` | 角色-权限矩阵编辑器（checkbox 网格）    | 新建 |
-| `ViewportConfigEditor` | 视口配置编辑器（拖拽排序 + 权限绑定）   | 新建 |
-| `PlatformMonitor`      | 平台监控（Grafana iframe embed）        | 新建 |
-
-**不使用的组件**：RichTextEditor（Tiptap）、ExamTaking、SSEViewer、ChildSwitcher 等（这些归 teacher-portal / student-portal / parent-portal）
-
-### L4 数据层差异
-
-| 维度         | admin-portal                      | teacher-portal                         |
-| ------------ | --------------------------------- | -------------------------------------- |
-| 主要数据来源 | iam 直连 + teacher-bff 复用       | teacher-bff 聚合 + core-edu/content/ai |
-| 缓存策略     | **5min 长缓存**（管理数据低频变） | 5min / 30s 混合（实时性差异）          |
-| 实时性要求   | 低（轮询 60s / 5min）             | 高（WebSocket 推送 + SSE 流式）        |
-| 推送消费     | ❌ 不消费                         | ✅ 消费 WebSocket + SSE                |
+- `pnpm run typecheck` → ✅ 通过（0 errors）
+- `pnpm run lint` → ✅ 通过（0 errors）
 
 ---
 
-**AI Agent**: ai07 (admin-portal remote)
-**Branch**: docs/admin-portal-stage1-stage2-design-ai07
+**AI Agent**: ai16 (admin-portal remote)
+**Branch**: admin-portal-arbitration-done-TaFkyb
 **Coordinator**: coord-ai
diff --git a/apps/admin-portal/docs/02-architecture-design.md b/apps/admin-portal/docs/02-architecture-design.md
index bc680d1..cf4b003 100644
--- a/apps/admin-portal/docs/02-architecture-design.md
+++ b/apps/admin-portal/docs/02-architecture-design.md
@@ -1,14 +1,21 @@
 # 模块架构设计文档 — admin-portal
 
-> AI：ai07（TS/React · 管理场景域前端 remote）
-> 阶段：阶段 2 交付物
-> 日期：2026-07-09
-> 关联：[阶段 1 理解确认书](./01-understanding.md)、[004 架构影响地图](../../../docs/architecture/004_architecture_impact_map.md) §5.4、[pending-features P6](../../../docs/architecture/roadmap/pending-features.md)、[teacher-portal 阶段2](../../teacher-portal/docs/02-architecture-design.md)
-> 状态：待 coord 交叉审查
+> AI：ai16（TS/React · 管理场景域前端 remote）
+> 阶段：阶段 2 交付物（仲裁后修订版 v2）
+> 日期：2026-07-10
+> 关联：
+>
+> - [阶段 1 理解确认书](./01-understanding.md)
+> - [004 架构影响地图](../../../docs/architecture/004_architecture_impact_map.md) §5.4
+> - [总统最终裁决](../../../docs/architecture/president-final-rulings.md) §5.1-5.5（ISSUE-044~048）
+> - [admin-portal 对接契约](../../architecture/issues/contracts/admin-portal_contract.md)
+> - [pending-features P6](../../../docs/architecture/roadmap/pending-features.md)
+> - [known-issues §2.16](../../../docs/troubleshooting/known-issues.md)
+>   状态：已实现（P2-P6 全阶段交付完成）
 
 ---
 
-## 1. 模块内部分层图（简化版：admin-portal Remote + Shell 引用 + Gateway）
+## 1. 模块内部分层图（admin-portal Remote + Shell 引用 + Gateway + push-gateway）
 
 ```mermaid
 graph TB
@@ -16,359 +23,437 @@ graph TB
         URL[URL 路由 /admin/*]
     end
 
-    subgraph Shell["teacher-portal（Shell 宿主）"]
+    subgraph Shell["teacher-portal（Shell 宿主，端口 4000）"]
         AppShell[AppShell<br/>左栏导航 + 主内容区<br/>按 scope=admin 过滤视口]
-        RootLayout[RootLayout<br/>字体/令牌/i18n Provider<br/>TanStack QueryClientProvider<br/>Zustand StoreProvider]
+        RootLayout[RootLayout<br/>字体/令牌/i18n Provider]
         Router[Next.js App Router<br/>动态加载 admin Remote]
-        SharedDeps["共享依赖暴露（singleton）<br/>react/react-dom/@tanstack/react-query/zustand/nuqs<br/>ui-components/ui-tokens/contracts/hooks/shared-ts"]
-        Rewrites["rewrites /api/v1/* → api-gateway"]
+        SharedDeps["共享依赖暴露（singleton）<br/>react/react-dom/urql/graphql<br/>@edu/ui-tokens/@edu/ui-components/@edu/hooks/@edu/contracts"]
+        GraphQLProviderShell[GraphQLProvider<br/>Shell 暴露 urql client 单例]
     end
 
-    subgraph RemoteAdmin["admin-portal（Remote 子应用）"]
-        AdminPages[管理场景页面<br/>dashboard/users/roles/permissions/viewports/organization/monitoring]
-        AdminComponents["admin 特有组件<br/>UserManagementTable/RolePermissionMatrix/ViewportConfigEditor/PlatformMonitor"]
-        AdminHooks["admin 业务 Hooks<br/>useUsers/useRoles/usePermissions/useViewports/useMonitoring"]
-    end
-
-    subgraph Shared["共享层（packages/，由 Shell 暴露）"]
-        UITokens[ui-tokens<br/>三层设计令牌]
-        UIComponents[ui-components<br/>shadcn + A11y + ErrorBoundary + RequirePermission]
-        Contracts[contracts<br/>Permissions 常量 + 类型]
-        Hooks[hooks<br/>usePermission/useAuth/useViewports/useApi]
-        LibTS[shared-ts<br/>ApiClient/Logger/Tracer]
+    subgraph RemoteAdmin["admin-portal（Remote 子应用，端口 4003）"]
+        AdminApp[AdminApp<br/>MF Remote 入口 exposes ./AdminApp]
+        AdminPages[管理场景页面<br/>dashboard/users/roles/permissions/viewports/organization<br/>classes/teachers/students/audit-logs/system]
+        AdminComponents["admin 特有组件<br/>UserManagementTable/RolePermissionMatrix<br/>ViewportConfigEditor/OrganizationTree/NotificationPanel"]
+        AdminHooks["admin 业务 Hooks<br/>useUsers/useRoles/usePermissions/useViewports<br/>useOrganization/useClasses/useTeachers/useStudents<br/>useAuditLogs/useDashboard/useSystemSettings/useWebSocket"]
     end
 
     subgraph Gateway["api-gateway"]
         GW[Gin 路由/鉴权/限流]
     end
 
+    subgraph PushGateway["push-gateway"]
+        WS[WebSocket :8081/ws]
+    end
+
     subgraph Backend["后端服务"]
-        IAM[iam<br/>用户/角色/权限/视口 CRUD]
-        BFF[teacher-bff<br/>/admin/* 聚合]
-        MSG[msg<br/>/notifications/*（P5）]
+        IAM[iam<br/>用户/角色/权限/视口 CRUD + AuditEvent 发布]
+        BFF[teacher-bff<br/>GraphQL admin 命名空间 聚合]
     end
 
     Browser --> URL
     URL --> RootLayout
     RootLayout --> AppShell
     AppShell --> Router
-    Router -->|动态加载 /admin/*| RemoteAdmin
-
-    RemoteAdmin -->|消费 singleton| SharedDeps
-    SharedDeps --> UITokens
-    SharedDeps --> UIComponents
-    SharedDeps --> Contracts
-    SharedDeps --> Hooks
-    SharedDeps --> LibTS
+    Router -->|动态加载 /admin/*| AdminApp
+    AdminApp --> AdminPages
 
+    AdminPages -->|消费 singleton| SharedDeps
+    SharedDeps --> GraphQLProviderShell
     AdminPages --> AdminComponents
     AdminPages --> AdminHooks
-    AdminHooks -->|useApi → ApiClient| LibTS
-    AdminComponents --> UIComponents
 
-    AdminPages -->|fetch /api/v1/iam/*| Rewrites
-    AdminPages -->|fetch /api/v1/admin/*| Rewrites
-    AdminPages -->|fetch /api/v1/notifications/*| Rewrites
-    Rewrites --> GW
-    GW --> IAM
+    AdminHooks -->|useGraphQuery/useGraphMutation| GraphQLProviderShell
+    GraphQLProviderShell -->|POST /api/admin/graphql| GW
     GW --> BFF
-    GW --> MSG
+    BFF --> IAM
 
-    AppShell -->|fetch /api/v1/iam/effective-permissions| Rewrites
+    AdminHooks -->|useWebSocket| WS
+    IAM -.->|Kafka edu.iam.audit.created| BFF
+
+    AppShell -->|fetch /api/auth/login| GW
 ```
 
 ### 1.1 Remote 与 Shell 的职责边界
 
-| 职责                             | 归属                 | 说明                                                                  |
-| -------------------------------- | -------------------- | --------------------------------------------------------------------- |
-| RootLayout（字体/令牌/Provider） | teacher-portal Shell | admin-portal 复用，不重复引入                                         |
-| AppShell（左栏 + 主内容区）      | teacher-portal Shell | admin-portal 通过 `<AppShell scope="admin">` 渲染管理端视口           |
-| 路由表 `/admin/*`                | teacher-portal Shell | Shell 注册 `/admin/*` 路由组，动态 import admin Remote 模块           |
-| 登录页                           | teacher-portal Shell | 统一登录入口，按角色重定向到 `/admin/dashboard`                       |
-| rewrites `/api/v1/*`             | teacher-portal Shell | admin-portal 不实现 rewrites，依赖 Shell                              |
-| 管理场景页面                     | admin-portal Remote  | `/admin/*` 下的所有 page.tsx                                          |
-| 管理特有组件                     | admin-portal Remote  | UserManagementTable 等 4 个                                           |
-| 管理业务 Hooks                   | admin-portal Remote  | useUsers/useRoles/usePermissions/useViewports/useMonitoring           |
-| 共享组件库                       | Shell 暴露           | AppShell/RequirePermission/ErrorBoundary/DataTable/Form/Chart 等      |
-| 共享 Hooks                       | Shell 暴露           | usePermission/useAuth/useViewports/useApi/useA11yId                   |
-| ApiClient                        | Shell 暴露           | `packages/shared-ts/src/api-client.ts`，admin-portal 通过 useApi 获取 |
+| 职责                             | 归属                 | 说明                                                                                       |
+| -------------------------------- | -------------------- | ------------------------------------------------------------------------------------------ |
+| RootLayout（字体/令牌/Provider） | teacher-portal Shell | admin-portal MF 模式复用；standalone 模式自建                                              |
+| AppShell（左栏 + 主内容区）      | admin-portal 内部    | `admin-shell.tsx`，11 项导航 + 跳过链接 A11y                                               |
+| 路由表 `/admin/*`                | admin-portal         | `src/app/admin/*/page.tsx`                                                                 |
+| 登录页                           | admin-portal         | standalone 模式 `src/app/login/page.tsx`（mock 登录）；MF 模式复用 Shell `/login`          |
+| rewrites `/api/admin/graphql`    | admin-portal         | `next.config.js` rewrites 代理到 api-gateway                                               |
+| GraphQLProvider                  | Shell 暴露 / 自建    | MF 模式复用 Shell 单例（ARB-004）；standalone 模式 `graphql-provider.tsx` 自建 urql client |
+| 管理场景页面                     | admin-portal Remote  | `/admin/*` 下的所有 page.tsx                                                               |
+| 管理特有组件                     | admin-portal Remote  | UserManagementTable 等 6 个                                                                |
+| 管理业务 Hooks                   | admin-portal Remote  | 13 个业务 Hook + useWebSocket                                                              |
+| 共享组件库                       | Shell 暴露           | `@edu/ui-components`                                                                       |
+| 共享 Hooks                       | Shell 暴露           | `@edu/hooks`                                                                               |
 
 ### 1.2 MF 配置（admin-portal/next.config.js，Remote 角色）
 
 ```javascript
-// admin-portal/next.config.js（Remote）
 const NextFederationPlugin = require("@module-federation/nextjs-mf");
 
-module.exports = {
+const nextConfig = {
   reactStrictMode: true,
-  transpilePackages: [
-    "@edu/ui-tokens",
-    "@edu/ui-components",
-    "@edu/hooks",
-    "@edu/contracts",
-    "@edu/shared-ts",
-  ],
+  transpilePackages: ["@edu/ui-tokens", "@edu/ui-components", "@edu/hooks"],
+  async rewrites() {
+    const gatewayUrl = process.env.API_GATEWAY_URL || "http://localhost:8080";
+    return [
+      {
+        source: "/api/admin/graphql",
+        destination: `${gatewayUrl}/api/admin/graphql`,
+      },
+      { source: "/api/:path*", destination: `${gatewayUrl}/api/:path*` },
+    ];
+  },
   webpack(config, { isServer }) {
-    config.plugins.push(
-      new NextFederationPlugin({
-        name: "admin_app",
-        filename: "static/chunks/remoteEntry.js",
-        // Remote 不暴露任何模块给 Shell（Shell 通过 dynamic import 加载 admin 的 pages）
-        exposes: {
-          "./pages": "./src/pages",
-        },
-        // Remote 反向引用 Shell 暴露的共享组件（可选，多数通过 singleton shared 解决）
-        remotes: {
-          teacher: `teacher_app@http://localhost:3000/_next/static/${isServer ? "ssr" : "chunks"}/remoteEntry.js`,
-        },
-        shared: {
-          react: { singleton: true, requiredVersion: "^18.3.0" },
-          "react-dom": { singleton: true, requiredVersion: "^18.3.0" },
-          "@tanstack/react-query": { singleton: true },
-          zustand: { singleton: true },
-          nuqs: { singleton: true },
-          "@edu/ui-tokens": { singleton: true },
-          "@edu/ui-components": { singleton: true },
-          "@edu/hooks": { singleton: true },
-          "@edu/contracts": { singleton: true },
-          "@edu/shared-ts": { singleton: true },
-        },
-        extraOptions: { exposePages: false },
-      }),
-    );
+    if (process.env.NEXT_PUBLIC_MF_ENABLED === "true") {
+      config.plugins.push(
+        new NextFederationPlugin({
+          name: "admin_app",
+          filename: "static/chunks/remoteEntry.js",
+          exposes: { "./AdminApp": "./src/app/admin-app.tsx" },
+          remotes: {
+            teacher: `teacher_app@http://localhost:4000/_next/static/${isServer ? "ssr" : "chunks"}/remoteEntry.js`,
+          },
+          shared: {
+            react: { singleton: true, requiredVersion: "^18.3.0" },
+            "react-dom": { singleton: true, requiredVersion: "^18.3.0" },
+            urql: { singleton: true },
+            graphql: { singleton: true },
+            "@edu/ui-tokens": { singleton: true },
+            "@edu/ui-components": { singleton: true },
+            "@edu/hooks": { singleton: true },
+          },
+          extraOptions: { exposePages: false },
+        }),
+      );
+    }
     return config;
   },
-  // admin-portal 不实现 rewrites，依赖 teacher-portal Shell 的 rewrites 代理 /api/v1/*
 };
+module.exports = nextConfig;
 ```
 
 > **说明**：
 >
-> - admin-portal 作为 Remote，`name: 'admin_app'`，被 Shell 在 `remotes` 中引用为 `admin: 'admin_app@http://localhost:3003/...'`
-> - admin-portal 不实现 `rewrites`，所有 `/api/v1/*` 请求由 Shell 的 rewrites 代理到 api-gateway
-> - `shared` 全部声明为 `singleton: true`，确保与 Shell 共享同一实例（避免 React 多实例报错、Zustand store 分裂）
-> - `transpilePackages` 列出本地 packages/* 软链依赖，确保 SWC 正确编译
+> - `NEXT_PUBLIC_MF_ENABLED` 环境变量控制 MF 启用（standalone 模式默认 `false`，MF 模式设 `true`）
+> - admin-portal 暴露 `./AdminApp` 模块（非旧文档的 `./pages`），供 Shell 动态 import
+> - `shared` 全部 `singleton: true`，确保 urql/graphql/react 单例（避免多实例报错）
+> - admin-portal 自身实现 `rewrites`（代理 `/api/admin/graphql` 到 api-gateway），standalone 模式可独立运行
 
 ## 2. 领域模型（前端视角）
 
-前端不持有业务聚合根，仅持有"视图模型"（ViewModel）和"会话状态"。
+前端不持有业务聚合根，仅持有"视图模型"（ViewModel）和"会话状态"。定义于 `src/types/view-models.ts`。
 
-### 2.1 会话状态 / 视口 / 权限（与 teacher-portal 共享）
-
-**Session**、**Viewport**、**Permission** 三个模型与 teacher-portal 完全共享，定义和存储策略见 [teacher-portal 阶段2 §2.1-2.3](../../teacher-portal/docs/02-architecture-design.md#2-领域模型前端视角)。
-
-admin-portal 作为 Remote，通过 Shell 暴露的 `useAuth()` / `usePermission()` / `useViewports('admin')` Hook 消费这些模型，**不重复定义**。
-
-### 2.2 管理场景视图模型（admin-portal 特有）
+### 2.1 视图模型清单
 
 ```typescript
-// 用户管理视图模型
+// 数据范围
+type DataScope = "ALL" | "SCHOOL" | "GRADE" | "CLASS" | "DISTRICT";
+
+// 用户管理
 interface UserViewModel {
   id: string;
   email: string;
   name: string;
-  roles: RoleViewModel[]; // 用户拥有的角色
+  roles: { id: string; name: string; code: string }[];
   status: "active" | "disabled" | "locked";
-  dataScope: DataScope; // L0-L5
-  organizationId: string | null; // 所属组织
+  dataScope: DataScope;
+  organizationId: string | null;
+  schoolName?: string;
   lastLoginAt: number | null;
   createdAt: number;
   updatedAt: number;
 }
 
-// 角色管理视图模型
+// 角色管理
 interface RoleViewModel {
   id: string;
   name: string;
-  code: string; // 角色编码，如 'school_admin'
+  code: string;
   description: string;
-  permissions: PermissionViewModel[]; // 角色拥有的权限
-  userCount: number; // 该角色下的用户数（用于删除前校验）
-  dataScope: DataScope; // 角色默认数据范围
-  isSystem: boolean; // 系统预置角色不可删除
+  permissions: PermissionViewModel[];
+  userCount: number;
+  dataScope: DataScope;
+  isSystem: boolean;
   createdAt: number;
   updatedAt: number;
 }
 
-// 权限管理视图模型
+// 权限管理
 interface PermissionViewModel {
   id: string;
-  code: string; // 'IAM_USER_READ' 等
-  name: string; // 显示名
+  code: string;
+  name: string;
   description: string;
-  resource: string; // 资源类型 'user' | 'role' | 'permission' | 'viewport' | 'org' | 'monitoring'
-  action: string; // 'read' | 'create' | 'update' | 'delete' | 'manage'
-  isSystem: boolean; // 系统预置权限不可删除
+  resource: string;
+  action: string;
+  isSystem: boolean;
 }
 
-// 视口配置视图模型（管理端可编辑）
+// 视口配置
 interface ViewportConfigViewModel {
   id: string;
-  key: string; // 'dashboard' | 'users' | ...
-  label: string; // i18n key
-  route: string; // '/admin/dashboard'
+  key: string;
+  label: string;
+  route: string;
   icon: string | null;
   sortOrder: number;
   requiredPermission: string | null;
   scope: "teacher" | "student" | "parent" | "admin";
-  isVisible: boolean; // 是否在导航显示
+  isVisible: boolean;
 }
 
-// 平台监控视图模型
-interface MonitoringMetricsViewModel {
-  timestamp: number;
-  activeUsers: number; // 当前在线用户数
+// 组织树
+interface OrganizationNode {
+  id: string;
+  name: string;
+  type: "school" | "grade" | "class";
+  parentId: string | null;
+  childrenCount: number;
+  path: string;
+}
+
+// 学校设置
+interface SystemSettingsViewModel {
+  schoolName: string;
+  schoolYear: string;
+  semester: string;
+  timezone: string;
+  locale: string;
+  // ... 更多设置项
+}
+
+// 班级/教师/学生（admin 全局视角）
+interface AdminClassViewModel {
+  id: string;
+  name: string;
+  grade: string;
+  headTeacher: string;
+  studentCount: number;
+  status: string;
+}
+interface AdminTeacherViewModel {
+  id: string;
+  email: string;
+  name: string;
+  subjects: string[];
+  classes: string[];
+  status: string;
+}
+interface AdminStudentViewModel {
+  id: string;
+  email: string;
+  name: string;
+  className: string;
+  grade: string;
+  status: string;
+}
+
+// 审计日志
+interface AuditLogViewModel {
+  id: string;
+  userId: string;
+  userName: string;
+  action: string;
+  resourceType: string;
+  resourceId: string;
+  beforeState: string | null;
+  afterState: string | null;
+  ip: string;
+  userAgent: string;
+  occurredAt: number;
+}
+
+// 管理仪表盘
+interface AdminDashboardViewModel {
   totalUsers: number;
-  requestsPerMinute: number;
-  errorRate: number; // 0-1
-  avgResponseTimeMs: number;
-  serviceHealth: Array<{
+  totalTeachers: number;
+  totalStudents: number;
+  totalClasses: number;
+  activeSessions: number;
+  serviceHealth: {
     serviceName: string;
     status: "healthy" | "degraded" | "down";
     latencyMs: number;
-  }>;
+  }[];
+  recentActivity: {
+    timestamp: number;
+    action: string;
+    user: string;
+    resource: string;
+  }[];
+}
+
+// WebSocket 通知
+interface WsNotification {
+  id: string;
+  type: "audit_alert" | "abnormal_login" | "system_error" | "info";
+  severity: "info" | "warning" | "error";
+  title: string;
+  message: string;
+  timestamp: number;
 }
 ```
 
-### 2.3 数据范围控制（admin-portal 特有）
+### 2.2 当前用户与会话
 
 ```typescript
-// admin-portal 用户可见的数据范围由 dataScope 决定
-// L3 校管理员：仅见本校用户/角色/组织
-// L4 区教研员：仅见本区
-// L5 系统管理员：全平台
-interface AdminDataScopeFilter {
-  dataScope: DataScope; // L3-L5
-  schoolId?: string; // L3 时必填
-  districtId?: string; // L4 时必填
+interface CurrentUser {
+  id: string;
+  email: string;
+  name: string;
+  roles: string[];
+  permissions: string[];
+  dataScope: DataScope;
+  schoolId: string | null;
+  schoolName: string | null;
 }
-
-// 所有列表查询 API 自动注入此 filter（由 ApiClient 拦截器添加）
 ```
 
+会话状态由 `AuthProvider` 管理，token 存 `localStorage`（`edu_access_token`），用户信息存 `localStorage`（`edu_user`）。
+
 ## 3. 数据模型（前端缓存层）
 
-admin-portal 无数据库，仅有 TanStack Query 缓存层。**管理数据低频变，采用 5min 长缓存**策略：
+admin-portal 无数据库，仅有 urql GraphQL client 缓存层。
 
-| 数据类型                | 存储                   | TTL                         | 失效策略                                           |
-| ----------------------- | ---------------------- | --------------------------- | -------------------------------------------------- |
-| Session（token + user） | localStorage + Zustand | access 15min / refresh 7day | 401 自动 refresh，refresh 失败跳登录（复用 Shell） |
-| 权限列表                | TanStack Query cache   | 5min                        | 角色变更主动 invalidate（复用 Shell）              |
-| 视口列表                | TanStack Query cache   | 5min                        | 视口配置变更主动 invalidate                        |
-| 用户列表                | TanStack Query cache   | 5min                        | staleTime 5min，mutation 后 invalidate             |
-| 角色列表                | TanStack Query cache   | 5min                        | staleTime 5min，mutation 后 invalidate             |
-| 权限列表（全量）        | TanStack Query cache   | 30min                       | staleTime 30min（权限点极少变更）                  |
-| 视口配置列表            | TanStack Query cache   | 5min                        | staleTime 5min，mutation 后 invalidate             |
-| 组织树                  | TanStack Query cache   | 5min                        | staleTime 5min                                     |
-| 平台监控指标            | TanStack Query cache   | 60s                         | staleTime 60s（refetchInterval 60s 轮询）          |
-| 用户活动统计            | TanStack Query cache   | 5min                        | staleTime 5min（refetchInterval 5min 轮询）        |
-| URL 状态（分页/筛选）   | nuqs                   | —                           | 永久（可分享）                                     |
-| 表单临时态              | react-hook-form        | —                           | 卸载即销毁                                         |
+| 数据类型                | 存储                         | 缓存策略                                      |
+| ----------------------- | ---------------------------- | --------------------------------------------- |
+| Session（token + user） | localStorage + React Context | access token 持久化；用户信息持久化；登出清除 |
+| GraphQL 查询缓存        | urql document cache          | 默认缓存，mutation 后手动 invalidate          |
+| 视口配置（拖拽态）      | React useState               | 本地编辑，保存时批量 mutation                 |
+| 表单临时态              | react-hook-form              | 卸载即销毁                                    |
+| WebSocket 通知          | React useState（限 20 条）   | 新通知头部插入，超 20 条裁剪                  |
 
-> **缓存策略说明**：管理数据（用户/角色/权限/视口/组织）低频变更，5min 长缓存减少 BFF 压力；监控指标需要相对实时，60s 轮询；权限点常量几乎不变，30min 长缓存。所有 mutation 成功后主动 invalidate 对应 queryKey，确保 UI 立即刷新。
+> **缓存策略说明**：admin 数据低频变，urql 默认 document cache 已满足；监控指标经 WebSocket 实时推送（不再轮询）；视口配置支持本地编辑 + 批量保存。
 
-## 4. API 设计（前端 → 后端）
+## 4. API 设计（GraphQL 为主）
 
-前端不设计后端 API，仅声明消费的端点。详见 [01-understanding.md §3.1](./01-understanding.md#31-消费的后端-api经-api-gateway-代理)。
+### 4.1 GraphQL Client（urql，ARB-004）
 
-### 4.1 统一 API 请求层（复用 Shell 暴露的 ApiClient）
-
-admin-portal **不重复实现** ApiClient，通过 Shell 暴露的 `useApi()` Hook 获取 ApiClient 实例。ApiClient 定义见 [teacher-portal 阶段2 §4.1](../../teacher-portal/docs/02-architecture-design.md#41-统一-api-请求层libapits)。
+**standalone 模式**（`src/lib/graphql-client.ts`）：
 
 ```typescript
-// admin-portal 业务 Hook 示例（消费 Shell 暴露的 useApi）
-import { useApi } from "@edu/hooks";
-import { useQuery, useMutation, useQueryClient } from "@tanstack/react-query";
+import { createClient, fetchExchange, type Client } from "@urql/core";
 
-export function useUsers(filter: AdminDataScopeFilter) {
-  const api = useApi();
-  return useQuery({
-    queryKey: ["admin", "users", filter],
-    queryFn: () => api.get<UserViewModel[]>("/api/v1/iam/users", filter),
-    staleTime: 5 * 60 * 1000, // 5min
-  });
-}
+const GRAPHQL_ENDPOINT = "/api/admin/graphql";
 
-export function useCreateUser() {
-  const api = useApi();
-  const queryClient = useQueryClient();
-  return useMutation({
-    mutationFn: (input: CreateUserInput) =>
-      api.post("/api/v1/iam/users", input),
-    onSuccess: () =>
-      queryClient.invalidateQueries({ queryKey: ["admin", "users"] }),
+export function createGraphQLClient(): Client {
+  return createClient({
+    url: GRAPHQL_ENDPOINT,
+    exchanges: [fetchExchange],
+    fetchOptions: () => {
+      const token =
+        typeof window !== "undefined"
+          ? localStorage.getItem("edu_access_token")
+          : null;
+      return token ? { headers: { Authorization: `Bearer ${token}` } } : {};
+    },
   });
 }
 ```
 
-### 4.2 TanStack Query 约定
+**MF 模式**：复用 Shell 暴露的 `GraphQLProvider` + `useGraphQLClient`（singleton，ARB-004）。
+
+**urql 类型断言技巧**：urql 泛型与纯字符串 query 兼容性有限，用 `as unknown as` 从 unknown 转换：
 
 ```typescript
-// Query Key 命名：[scope, resource, ...args]
-queryKey: ["admin", "users", { schoolId, status }];
-queryKey: ["admin", "users", userId]; // 详情
-queryKey: ["admin", "roles", { dataScope }];
-queryKey: ["admin", "permissions"]; // 全量，30min 缓存
-queryKey: ["admin", "viewports", { scope }]; // 按 scope 过滤
-queryKey: ["admin", "organization", { parentId }];
-queryKey: ["admin", "monitoring", "metrics"]; // 60s 轮询
-queryKey: ["admin", "stats", "active-sessions"]; // 5min 轮询
-
-// Mutation 约定（mutation 后主动 invalidate）
-const createUser = useMutation({
-  mutationFn: (input) => api.post("/api/v1/iam/users", input),
-  onSuccess: () =>
-    queryClient.invalidateQueries({ queryKey: ["admin", "users"] }),
-  onError: (e: ApiError) => toast.error(e.message),
-});
-
-// 轮询约定（监控指标）
-const useMonitoringMetrics = () => {
-  const api = useApi();
-  return useQuery({
-    queryKey: ["admin", "monitoring", "metrics"],
-    queryFn: () =>
-      api.get<MonitoringMetricsViewModel>("/api/v1/admin/monitoring/metrics"),
-    staleTime: 60 * 1000, // 60s
-    refetchInterval: 60 * 1000, // 60s 轮询
-  });
-};
+// use-graphql.ts
+const [executeMutation] = useMutation(mutation) as unknown as [
+  (variables: V) => { toPromise: () => Promise<OperationResult<T, V>> },
+  unknown,
+];
 ```
 
+### 4.2 通用 GraphQL Hooks（`src/hooks/use-graphql.ts`）
+
+```typescript
+export function useGraphQuery<T, V = Record<string, never>>(
+  query: string,
+  variables?: V,
+): QueryResult<T> { ... }
+
+export function useGraphMutation<T, V>(
+  mutation: string,
+): [MutationFn<T, V>, MutationResult] { ... }
+```
+
+### 4.3 业务 Hooks 清单
+
+| Hook                         | 职责                                             |
+| ---------------------------- | ------------------------------------------------ |
+| `useUsers(filter)`           | 用户列表查询（含筛选/分页）                      |
+| `useUser(userId)`            | 用户详情                                         |
+| `useCreateUser()`            | 创建用户 mutation                                |
+| `useUpdateUser()`            | 更新用户 mutation                                |
+| `useToggleUserStatus()`      | 启用/禁用用户 mutation                           |
+| `useUserFilter()`            | 用户筛选状态（搜索/角色/状态/组织）              |
+| `useRoles()`                 | 角色列表查询                                     |
+| `useCreateRole()`            | 创建角色 mutation                                |
+| `useUpdateRolePermissions()` | 更新角色权限 mutation（RolePermissionMatrix 用） |
+| `usePermissions()`           | 全量权限列表                                     |
+| `useViewports()`             | 视口配置列表                                     |
+| `useUpdateViewport()`        | 更新视口配置 mutation                            |
+| `useOrganization(parentId)`  | 组织树查询（按 parentId 递归）                   |
+| `useClasses(filter)`         | 班级列表查询                                     |
+| `useClassFilter()`           | 班级筛选状态                                     |
+| `useTeachers(filter)`        | 教师列表查询                                     |
+| `useTeacherFilter()`         | 教师筛选状态                                     |
+| `useStudents(filter)`        | 学生列表查询                                     |
+| `useStudentFilter()`         | 学生筛选状态                                     |
+| `useAuditLogs(filter)`       | 审计日志查询                                     |
+| `useAuditLogFilter()`        | 审计日志筛选状态                                 |
+| `exportAuditLogsCsv(logs)`   | 审计日志 CSV 导出（BOM + UTF-8）                 |
+| `useDashboard()`             | 管理仪表盘聚合查询                               |
+| `useSystemSettings()`        | 学校设置查询                                     |
+| `useUpdateSystemSettings()`  | 学校设置更新 mutation                            |
+| `useWebSocket(maxItems)`     | WebSocket 实时通知（mock 模式 30s 定时推送）     |
+
 ## 5. 事件设计
 
-**— N/A**
+### 5.1 WebSocket 实时通知（ARB-006）
 
-admin-portal **不消费** WebSocket 推送（不走 push-gateway），**不消费** SSE 流式响应。管理端场景对实时性要求低，采用**轮询**策略：
+admin-portal 接入 push-gateway `GET /ws`，消费 3 类通知：
 
-| 场景           | 轮询方式                                        | 说明                         |
-| -------------- | ----------------------------------------------- | ---------------------------- |
-| 平台监控指标   | TanStack Query `refetchInterval: 60s`           | 实时性要求中等               |
-| 用户活动统计   | TanStack Query `refetchInterval: 5min`          | 实时性要求低                 |
-| 通知中心（P5） | TanStack Query `refetchInterval: 30s`           | 不走 push-gateway，HTTP 拉取 |
-| 长期监控面板   | `<iframe>` 嵌入 Grafana（PlatformMonitor 组件） | 不经过 BFF，直连 Grafana     |
+```typescript
+// src/hooks/use-websocket.ts
+export function useWebSocket(maxItems = 20) {
+  // 真实模式：连接 push-gateway NEXT_PUBLIC_WS_URL
+  // mock 模式：30s 定时器模拟推送
+  // 返回：{ notifications, connected, dismiss, clear }
+}
+```
 
-> 管理端不接入 push-gateway 的原因：管理员场景低频，推送基础设施成本不划算；轮询策略对 BFF 压力可控（5min TTL 缓存命中率高）。
+| 通知类型         | severity | 触发场景                      |
+| ---------------- | -------- | ----------------------------- |
+| `audit_alert`    | warning  | 敏感操作（权限变更/批量删除） |
+| `abnormal_login` | error    | 异地登录/异常时段登录         |
+| `system_error`   | error    | 服务降级/宕机                 |
+
+### 5.2 不消费 Kafka
+
+admin-portal 不直接订阅 Kafka。审计日志经 teacher-bff 聚合后通过 GraphQL `auditLogs` Query 消费（ARB-005）：
+
+**链路**：iam → Kafka `edu.iam.audit.created` → **teacher-bff 消费** → GraphQL `auditLogs` Query → admin-portal
+
+> **不再用轮询**：旧文档的"60s 轮询监控 + 5min 轮询统计"已被 ARB-006 的 WebSocket 推送替换。
 
 ## 6. 横切关注点对齐清单
 
-### 6.1 权限（前端等价）
+### 6.1 权限（前端等价，ARB-003）
 
-| 路由                  | requiredPermission      |
-| --------------------- | ----------------------- |
-| `/admin/dashboard`    | `ADMIN_DASHBOARD_VIEW`  |
-| `/admin/users`        | `IAM_USER_READ`         |
-| `/admin/users/new`    | `IAM_USER_CREATE`       |
-| `/admin/users/:id`    | `IAM_USER_UPDATE`       |
-| `/admin/roles`        | `IAM_ROLE_READ`         |
-| `/admin/permissions`  | `IAM_PERMISSION_READ`   |
-| `/admin/viewports`    | `IAM_VIEWPORT_READ`     |
-| `/admin/organization` | `ORG_MANAGE`            |
-| `/admin/monitoring`   | `ADMIN_MONITORING_VIEW` |
+权限点常量定义于 `src/lib/permissions.ts`：
 
-> 完整权限点常量集中在 `packages/contracts/src/permissions.ts`（coord 维护）。L3 组件级视口用 `<RequirePermission perm="IAM_USER_CREATE"><Button>新建用户</Button></RequirePermission>`（复用 Shell 暴露组件）。
+- `ADMIN_PERMISSIONS`：admin 自身资源（`ADMIN_DASHBOARD_VIEW` / `ADMIN_SYSTEM_MANAGE` / `ADMIN_AUDIT_READ` / `ADMIN_CLASS_READ` / `ADMIN_TEACHER_READ` / `ADMIN_STUDENT_READ` / `ADMIN_ORG_MANAGE` 等）
+- `IAM_PERMISSIONS`：跨服务资源（`IAM_USER_READ` / `IAM_ROLE_READ` / `IAM_PERMISSION_READ` / `IAM_VIEWPORT_READ` 等）
+- `ROUTE_PERMISSIONS`：11 路由 → 权限点映射
 
-### 6.2 错误码清单（前端 i18n 路由）
+权限校验：`usePermission().hasPermission("XXX")` Hook + `AuthGuard` 组件（路由级）。
+
+### 6.2 错误码清单（前端 i18n 路由，ARB-002）
 
 | 前缀           | 来源服务    | i18n key 模式            |
 | -------------- | ----------- | ------------------------ |
@@ -376,295 +461,244 @@ admin-portal **不消费** WebSocket 推送（不走 push-gateway），**不消
 | `BFF_TEACHER_` | teacher-bff | `bff.error.{{code}}`     |
 | `GW_`          | api-gateway | `gateway.error.{{code}}` |
 | `NETWORK_`     | 前端网络层  | `network.error.{{code}}` |
+| `ADMIN_`       | admin 域    | `error.admin.*`          |
 
-> admin-portal 仅涉及 4 个错误码前缀（iam / teacher-bff / gateway / 网络层），不消费 core-edu/content/msg/ai 服务，不涉及 `CORE_EDU_` / `CONTENT_` / `MSG_` / `AI_` 前缀。
+### 6.3 Web Vitals（`src/lib/web-vitals.ts`）
 
-### 6.3 Logger
+| 指标 | 类型           | 上报方式               |
+| ---- | -------------- | ---------------------- |
+| LCP  | 最大内容绘制   | `navigator.sendBeacon` |
+| CLS  | 累积布局偏移   | 同上                   |
+| FCP  | 首次内容绘制   | 同上                   |
+| INP  | 交互到下一绘制 | 同上                   |
+| TTFB | 首字节时间     | 同上                   |
 
-```typescript
-// 复用 packages/shared-ts/src/logger.ts（Shell 暴露）
-interface Logger {
-  info(msg: string, meta?: Record<string, unknown>): void;
-  warn(msg: string, meta?: Record<string, unknown>): void;
-  error(msg: string, meta?: Record<string, unknown>): void;
-}
+仅 production 启用（`WebVitalsInitializer` 组件控制）。
 
-// 实现：开发环境 console + 结构化；生产环境 → Sentry（P6，admin-portal 本身就是 P6 阶段）
-// 必含字段：trace_id（从响应头提取）、user_id、scope='admin'、path
-```
+### 6.4 健康检查
 
-### 6.4 Metrics（Web Vitals）
+| 端点              | 用途      | 实现                                                |
+| ----------------- | --------- | --------------------------------------------------- |
+| `GET /api/health` | Liveness  | 返回 `200 { status: "ok" }`                         |
+| `GET /api/ready`  | Readiness | 检查 gateway 可达性（2s 超时）；mock 模式直接 ready |
 
-| 指标                        | 类型 | 上报                                                |
-| --------------------------- | ---- | --------------------------------------------------- |
-| `admin_portal_lcp_seconds`  | LCP  | `next/web-vitals` → `POST /api/v1/admin/web-vitals` |
-| `admin_portal_cls`          | CLS  | 同上                                                |
-| `admin_portal_fid_seconds`  | FID  | 同上                                                |
-| `admin_portal_ttfb_seconds` | TTFB | 同上                                                |
+### 6.5 A11y（WCAG 2.2 AA）
 
-> admin-portal 本身就是 P6 阶段，Web Vitals 在建站时即接入（与 teacher-portal P6 同步）。
+- `eslint-plugin-jsx-a11y`（error 级）
+- skip-link（`admin-shell.tsx` 跳过到主内容区）
+- `focus-visible` 样式（`globals.css`）
+- 组织树：`<button role="treeitem" aria-expanded aria-selected onKeyDown>`
+- 通知面板：`<li>` 内嵌 `<button aria-label>`
+- Toast：`aria-live="polite"` + `aria-atomic="true"`
+- 注：`@next/eslint-plugin-next` 14.x 与 ESLint 9 不兼容（`context.getAncestors` 已移除），已移除
 
-### 6.5 Tracer（OTel browser SDK，P6）
+### 6.6 横切关注点对齐清单（汇总）
 
-```typescript
-// 复用 packages/shared-ts/src/tracer.ts（Shell 暴露）
-import { WebTracerProvider } from "@opentelemetry/sdk-trace-web";
-// BatchSpanProcessor → OTLP exporter → collector → Tempo
-// 自动埋点：fetch、XMLHttpRequest、document load、user interaction
-// admin-portal 通过 Shell 的 TracerProvider 注入，不重复初始化
-```
+| 对齐项                | 实现                                                            |
+| --------------------- | --------------------------------------------------------------- |
+| 权限校验              | `usePermission()` + `AuthGuard`，`ADMIN_*`/`IAM_*` 前缀         |
+| 错误码前缀            | 5 个前缀（`IAM_`/`BFF_TEACHER_`/`GW_`/`NETWORK_`/`ADMIN_`）     |
+| logger                | console + 结构化（生产上报）                                    |
+| metrics               | Web Vitals v4 → `navigator.sendBeacon`                          |
+| /health + /ready      | Next.js Route Handler                                           |
+| 优雅关闭              | N/A（Next.js 无长连接）                                         |
+| 测试覆盖率 ≥ 80%      | Vitest + @testing-library/react（vitest.config.ts 已配置）      |
+| Dockerfile 多阶段构建 | `node:22-alpine` builder + runner，standalone 输出，EXPOSE 4003 |
+| Zod 输入验证          | react-hook-form + zod                                           |
+| GlobalErrorFilter     | React ErrorBoundary + Toast 错误处理                            |
+| 设计令牌三层          | `globals.css`（primitive/semantic）+ tailwind-theme             |
+| A11y                  | eslint-plugin-jsx-a11y + skip-link + focus-visible              |
+| Module Federation     | `next.config.js` Remote，`NEXT_PUBLIC_MF_ENABLED` 控制          |
 
-### 6.6 健康检查
+## 7. 共享组件库（复用 Shell + admin 特有）
 
-| 端点              | 用途                   | 实现                                                            |
-| ----------------- | ---------------------- | --------------------------------------------------------------- |
-| `GET /api/health` | Dockerfile HEALTHCHECK | Next.js Route Handler，返回 `{ status: 'ok', ts: Date.now() }`  |
-| `GET /api/ready`  | K8s readinessProbe     | 检查 `process.env.TEACHER_PORTAL_URL` 可达（依赖 Shell 已启动） |
+### 7.1 复用 Shell 暴露的组件（`@edu/ui-components`）
 
-### 6.7 优雅关闭
-
-Next.js 无长连接（admin-portal 不消费 WebSocket/SSE），无需特殊处理。
-
-### 6.8 横切关注点对齐清单（汇总）
-
-| 对齐项                | teacher-portal 实现                            | admin-portal 对齐方式                                   |
-| --------------------- | ---------------------------------------------- | ------------------------------------------------------- |
-| 权限校验              | `usePermission()` + `<RequirePermission>`      | 复用 Shell 暴露，权限点用 `IAM_*` / `ADMIN_*` / `ORG_*` |
-| 错误码前缀统一        | ApiClient 按 `error.code` 前缀路由 i18n        | 复用 Shell 暴露的 ApiClient，前缀集缩减为 4 个          |
-| logger                | `packages/shared-ts/src/logger.ts`             | 复用 Shell 暴露，scope 字段固定为 `'admin'`             |
-| metrics               | Web Vitals → `POST /api/v1/admin/web-vitals`   | admin-portal 本身 P6，建站即接入                        |
-| tracer                | OTel browser SDK（Shell 初始化）               | 复用 Shell 的 TracerProvider，不重复初始化              |
-| /healthz + /readyz    | Next.js `/api/health` + Dockerfile HEALTHCHECK | admin-portal 独立实现 Route Handler                     |
-| 优雅关闭              | N/A（Next.js 无长连接）                        | N/A                                                     |
-| 测试覆盖率 ≥ 80%      | Vitest + @testing-library/react + Playwright   | 同 teacher-portal                                       |
-| Dockerfile 多阶段构建 | builder + runtime                              | 同 teacher-portal                                       |
-| Zod 输入验证          | react-hook-form + zodResolver                  | 同 teacher-portal                                       |
-| GlobalErrorFilter     | React ErrorBoundary + API 请求层               | 复用 Shell 暴露的 ErrorBoundary                         |
-| 设计令牌三层          | `packages/ui-tokens/`（Shell 暴露）            | 复用 Shell 暴露，不重复引入                             |
-| A11y 工具集           | `packages/ui-components/`（Shell 暴露）        | 复用 Shell 暴露                                         |
-
-## 7. 共享组件库（复用 Shell 暴露 + admin 特有）
-
-### 7.1 复用 Shell 暴露的组件
-
-| 组件                                       | 用途                               | 来源                                        |
-| ------------------------------------------ | ---------------------------------- | ------------------------------------------- |
-| `AppShell`                                 | 左侧栏 + 主内容区布局              | teacher-portal Shell 暴露                   |
-| `RequirePermission`                        | L3 组件级视口控制                  | teacher-portal Shell 暴露                   |
-| `ErrorBoundary`                            | React 渲染异常兜底                 | teacher-portal Shell 暴露                   |
-| `Loading`                                  | 骨架屏（Skeleton）                 | teacher-portal Shell 暴露                   |
-| `Empty`                                    | 空态（插画 + 文案 + CTA）          | teacher-portal Shell 暴露                   |
-| `Modal` / `Dialog`                         | 全局 Modal                         | teacher-portal Shell 暴露（shadcn/ui）      |
-| `Toast`                                    | 全局 toast                         | teacher-portal Shell 暴露（sonner）         |
-| `Button` / `Input` / `Select` / `Textarea` | 基础表单                           | teacher-portal Shell 暴露（shadcn/ui）      |
-| `DataTable`                                | 表格（排序/分页/筛选）             | teacher-portal Shell 暴露（TanStack Table） |
-| `Chart`                                    | 图表封装（recharts）               | teacher-portal Shell 暴露                   |
-| `A11y` 工具集                              | useA11yId / mergeA11yProps 等      | teacher-portal Shell 暴露                   |
-| `Form`                                     | react-hook-form + zodResolver 封装 | teacher-portal Shell 暴露                   |
+AppShell 风格、ErrorBoundary、RequirePermission、Loading、Empty、Button/Input/Select 等。
 
 ### 7.2 admin-portal 特有组件（新建）
 
-| 组件                   | 用途                                    | 实现要点                                                                                                                     |
-| ---------------------- | --------------------------------------- | ---------------------------------------------------------------------------------------------------------------------------- |
-| `UserManagementTable`  | 用户管理表格（列表/筛选/分页/批量操作） | 基于 Shell 的 `DataTable` 封装；列：邮箱/姓名/角色/状态/数据范围/最后登录；筛选：角色/状态/组织；批量：启用/禁用/分配角色    |
-| `RolePermissionMatrix` | 角色-权限矩阵编辑器（checkbox 网格）    | 行=角色，列=权限（按 resource 分组）；勾选触发 `PUT /api/v1/iam/roles/:id/permissions`；系统预置角色只读                     |
-| `ViewportConfigEditor` | 视口配置编辑器（拖拽排序 + 权限绑定）   | 基于 `@dnd-kit` 拖拽排序；每行：key/label/route/requiredPermission/scope/isVisible；保存触发 `PUT /api/v1/iam/viewports/:id` |
-| `PlatformMonitor`      | 平台监控（Grafana iframe embed）        | `<iframe>` 嵌入 Grafana 面板（按 serviceName 切换）；备选：recharts 渲染 `MonitoringMetricsViewModel`                        |
+| 组件                   | 用途                                 | 实现要点                                                                                |
+| ---------------------- | ------------------------------------ | --------------------------------------------------------------------------------------- |
+| `AdminShell`           | 左栏 11 项导航 + 主内容区 + 跳过链接 | 内部组件，11 项导航按 `ROUTE_PERMISSIONS` 过滤；纸面风格                                |
+| `UserManagementTable`  | 用户管理表格（列表/筛选/分页）       | 列：邮箱/姓名/角色/状态/数据范围/最后登录；筛选：搜索/角色/状态                         |
+| `UserFormModal`        | 用户表单弹窗（创建/编辑）            | react-hook-form + zod；字段：邮箱/姓名/角色/数据范围/组织                               |
+| `RolePermissionMatrix` | 角色-权限矩阵编辑器（checkbox 网格） | 行=角色，列=权限（按 resource 分组）；全选/半选/单选；系统预置角色只读                  |
+| `OrganizationTree`     | 组织树（递归 + A11y treeitem）       | 按 parentId 懒加载；`<button role="treeitem" aria-expanded aria-selected onKeyDown>`    |
+| `NotificationPanel`    | 通知面板（WebSocket 实时通知）       | 固定右上角；显示最近 20 条；点击触发 Toast + dismiss；`<li>` 内嵌 `<button aria-label>` |
 
-### 7.3 不使用的组件（明确排除）
+### 7.3 通用 UI 组件（`src/components/ui.tsx`）
 
-| 组件             | 归属           | 排除原因           |
-| ---------------- | -------------- | ------------------ |
-| `RichTextEditor` | teacher-portal | 管理端无富文本场景 |
-| `ExamTaking`     | student-portal | 管理端无作答场景   |
-| `SSEViewer`      | teacher-portal | 管理端不消费 SSE   |
-| `ChildSwitcher`  | parent-portal  | 管理端无多子女切换 |
+PaperCard / PageHeader / Button（4 variant）/ Input / Select / Badge / Table / TableRow / TableCell / EmptyState / LoadingState / ErrorState / Pagination
 
-## 8. 共享 Hooks（复用 Shell 暴露 + admin 特有）
+### 7.4 不使用的组件（明确排除）
 
-### 8.1 复用 Shell 暴露的 Hooks
+| 组件                                | 归属           | 排除原因                              |
+| ----------------------------------- | -------------- | ------------------------------------- |
+| `RichTextEditor`                    | teacher-portal | 管理端无富文本场景                    |
+| `ExamTaking`                        | student-portal | 管理端无作答场景                      |
+| `ChildSwitcher`                     | parent-portal  | 管理端无多子女切换                    |
+| `PlatformMonitor`（Grafana iframe） | —              | 已移除，改为管理仪表盘 + 服务健康表格 |
 
-| Hook                  | 职责                                                 |
-| --------------------- | ---------------------------------------------------- |
-| `useAuth()`           | 会话状态（user/token/refresh/login/logout）          |
-| `usePermission()`     | 权限查询（hasPermission/hasAny/hasAll + dataScope）  |
-| `useViewports(scope)` | 视口列表（按 scope 过滤，admin-portal 传 `'admin'`） |
-| `useApi()`            | ApiClient 实例（注入 token + 401 处理）              |
-| `useA11yId()`         | 唯一 ARIA ID 生成                                    |
-| `useAriaLive()`       | aria-live 区域管理                                   |
-| `useToast()`          | 全局 toast（Zustand ui-store）                       |
+## 8. Mock 策略（MSW + mock-socket）
 
-### 8.2 admin-portal 特有业务 Hooks（新建）
+### 8.1 MSW handlers（`src/mocks/handlers.ts`）
 
-| Hook                         | 职责                                             |
-| ---------------------------- | ------------------------------------------------ |
-| `useUsers(filter)`           | 用户列表查询（含筛选）                           |
-| `useUser(userId)`            | 用户详情                                         |
-| `useCreateUser()`            | 创建用户 mutation                                |
-| `useUpdateUser()`            | 更新用户 mutation                                |
-| `useToggleUserStatus()`      | 启用/禁用用户 mutation                           |
-| `useRoles(filter)`           | 角色列表查询                                     |
-| `useRole(roleId)`            | 角色详情（含权限列表）                           |
-| `useCreateRole()`            | 创建角色 mutation                                |
-| `useUpdateRolePermissions()` | 更新角色权限 mutation（RolePermissionMatrix 用） |
-| `usePermissions()`           | 全量权限列表（30min 缓存）                       |
-| `useViewportsConfig(scope)`  | 视口配置列表（可编辑）                           |
-| `useUpdateViewport()`        | 更新视口配置 mutation（ViewportConfigEditor 用） |
-| `useOrganization(parentId)`  | 组织树查询                                       |
-| `useMonitoringMetrics()`     | 平台监控指标（60s 轮询）                         |
-| `useActiveSessionsStats()`   | 用户活动统计（5min 轮询）                        |
+开发期拦截全部 GraphQL/HTTP 请求：
 
-## 9. 设计令牌三层（复用 Shell 暴露）
+- `/api/auth/login` → mock 登录（admin@edu.test / admin123）
+- `graphql.operation` → 按 operationName 分发 18 个 GraphQL operation mock：
+  - CurrentUser / AdminUsers / AdminUser / CreateUser / UpdateUser / ToggleUserStatus
+  - AdminRoles / CreateRole / UpdateRolePermissions
+  - AdminPermissions / AdminViewports / UpdateViewport
+  - AdminOrganization / AdminClasses / AdminTeachers / AdminStudents
+  - AuditLogs / AdminDashboard / SystemSettings / UpdateSystemSettings
+- 内存可变副本：支持增删改 + 自动审计记录（`recordAudit`）
+- 分页：`paginate(items, page, pageSize)` 辅助函数
 
-admin-portal **不重复建立**设计令牌，通过 Shell 暴露的 `packages/ui-tokens/` 消费。三层令牌结构见 [teacher-portal 阶段2 §9](../../teacher-portal/docs/02-architecture-design.md#9-设计令牌三层packagesui-tokens待建ai07-维护)。
+### 8.2 mock fixtures（`src/mocks/fixtures.ts`）
 
-**强制规则**（project_rules §3.10，admin-portal 同样遵守）：
+- `mockCurrentUser`：admin 角色，permissions=["*"]
+- `mockPermissions`：24 项权限点
+- `mockRoles`：4 个角色（admin/teacher/student/parent）
+- `mockUsers`：6 个用户
+- `mockViewports`：7 个视口配置
+- `mockOrganization`：12 节点（school/grade/class）
+- `mockClasses` / `mockTeachers` / `mockStudents`：6/6/5 条
+- `mockAuditLogs`：5 条审计日志
+- `mockDashboard`：仪表盘聚合数据
+- `mockSystemSettings`：学校设置
 
-- 禁止 `#hex` 字面量（ESLint `no-restricted-syntax`）
-- 禁止 `'Inter'`/`'Fraunces'`/`'JetBrains Mono'` 字面量（ESLint `design-tokens/no-hardcoded-fonts`）
-- 禁止 `font-size: Npx`（用 `var(--font-size-1~9)`）
-- 禁止 Tailwind 任意值 `w-[Npx]`（用 `--space-*` 或默认阶梯）
+### 8.3 WebSocket mock（`src/hooks/use-websocket.ts`）
+
+MSW 不拦截 WebSocket，用定时器模拟推送：
+
+- mock 模式：30s 定时器推送 1 条通知（轮换 3 类：audit_alert/abnormal_login/system_error）
+- 真实模式：连接 `NEXT_PUBLIC_WS_URL`（push-gateway `GET /ws`）
+
+### 8.4 环境切换
+
+`NEXT_PUBLIC_API_MOCKING=enabled` 启用 MSW；`disabled` 使用真实后端。
+
+## 9. 设计令牌三层（`src/app/globals.css`）
+
+### 9.1 Layer 1 Primitive（原始色板）
+
+```css
+:root {
+  --paper: 0 0% 100%; /* 白纸 */
+  --ink: 30 10% 15%; /* 墨色 */
+  --ink-muted: 30 5% 45%;
+  --rule: 30 10% 90%; /* 分隔线 */
+  --accent: 210 60% 40%; /* 强调色 */
+  --accent-light: 210 60% 95%;
+  --danger: 0 70% 50%;
+  --success: 140 50% 40%;
+  --warning: 40 80% 50%;
+}
+```
+
+### 9.2 Layer 2 Semantic
+
+```css
+:root {
+  --bg-paper: hsl(var(--paper));
+  --color-ink: hsl(var(--ink));
+  --color-ink-muted: hsl(var(--ink-muted));
+  --color-rule: hsl(var(--rule));
+  --color-accent: hsl(var(--accent));
+  --color-accent-light: hsl(var(--accent-light));
+  --color-danger: hsl(var(--danger));
+  --color-success: hsl(var(--success));
+  --color-warning: hsl(var(--warning));
+}
+```
+
+### 9.3 Layer 3 Tailwind Theme（`tailwind.config.js`）
+
+paper / ink / accent / rule / danger / success / warning 色板映射为 `bg-*` / `text-*` 类。
+
+### 9.4 强制规则（project_rules §3.10）
+
+- 禁止 `#hex` 字面量
+- 禁止 `'Inter'`/`'Fraunces'`/`'JetBrains Mono'` 字面量
+- 禁止 `font-size: Npx`
+- 禁止 Tailwind 任意值 `w-[Npx]`
 
 ## 10. 与其他模块的交互点（契约清单）
 
-| 方向   | 对方服务             | 协议               | 接口/事件                                   | 用途                         | 阶段 |
-| ------ | -------------------- | ------------------ | ------------------------------------------- | ---------------------------- | ---- |
-| 调用   | api-gateway          | HTTP/REST          | `/api/v1/*` 代理（经 Shell rewrites）       | 全部业务请求                 | P1+  |
-| 被调用 | —                    | —                  | —                                           | 前端不暴露接口给其他服务     | —    |
-| 消费   | iam                  | HTTP（经 Gateway） | `/iam/*`（含用户/角色/权限/视口 CRUD）      | 用户/角色/权限/视口管理      | P2+  |
-| 消费   | teacher-bff          | HTTP（经 Gateway） | `/admin/*`                                  | 平台监控、统计聚合           | P6+  |
-| 消费   | msg                  | HTTP（经 Gateway） | `/notifications/*`                          | 通知中心                     | P5+  |
-| 依赖   | coord 维护           | —                  | `packages/shared-proto`                     | TS 类型（仅 contracts 部分） | P1+  |
-| 依赖   | coord 维护           | —                  | `packages/shared-ts`（待建）                | ApiClient/Logger/通用工具    | P6+  |
-| 依赖   | ai07 维护            | —                  | `packages/ui-tokens`（待建）                | 三层设计令牌                 | P6+  |
-| 依赖   | ai07 维护            | —                  | `packages/ui-components`（待建）            | shadcn + 共享组件            | P6+  |
-| 依赖   | ai07 维护            | —                  | `packages/hooks`（待建）                    | usePermission/useAuth 等     | P6+  |
-| 依赖   | coord 维护           | —                  | `packages/contracts`（待建）                | Permissions 常量 + 类型      | P6+  |
-| 依赖   | teacher-portal Shell | —                  | Shell 暴露的 AppShell + 共享依赖 + rewrites | 宿主环境                     | P6+  |
+| 方向 | 对方服务              | 协议                  | 接口/事件                                | 用途                         | 阶段 |
+| ---- | --------------------- | --------------------- | ---------------------------------------- | ---------------------------- | ---- |
+| 调用 | api-gateway           | HTTP/GraphQL          | `POST /api/admin/graphql`（经 rewrites） | 全部业务 GraphQL 查询        | P6+  |
+| 调用 | api-gateway           | HTTP                  | `POST /api/auth/login`                   | 登录（standalone 模式）      | P6+  |
+| 调用 | push-gateway          | WebSocket             | `GET /ws`                                | 实时通知（ARB-006）          | P6+  |
+| 消费 | teacher-bff           | GraphQL（经 Gateway） | admin 命名空间 18 operations             | 全部业务数据                 | P6+  |
+| 消费 | iam（经 teacher-bff） | GraphQL（间接）       | 用户/角色/权限/视口 CRUD + AuditEvent    | 管理数据                     | P6+  |
+| 依赖 | coord 维护            | —                     | `packages/contracts`                     | Permissions 常量 + 类型      | P6+  |
+| 依赖 | coord 维护            | —                     | `packages/shared-proto`                  | TS 类型（仅 contracts 部分） | P6+  |
+| 依赖 | teacher-portal Shell  | —                     | Shell 暴露的 GraphQLProvider + 共享依赖  | 宿主环境（MF 模式）          | P6+  |
 
-> **proto 不直接消费**：前端不调用 gRPC，BFF 把 gRPC 聚合为 REST 暴露给前端。前端仅消费 `packages/contracts/src/permissions.ts` 中的权限点常量（TS 文件，非 proto 生成）。
+> **proto 不直接消费**：前端不调用 gRPC，teacher-bff 把 gRPC 聚合为 GraphQL 暴露给前端。
 
 ## 11. 风险与假设
 
 ### 11.1 假设
 
-1. **假设 coord 建立 `packages/shared-ts`、`packages/contracts`**：包含 ApiClient、Logger、Permissions 常量、通用类型。若 coord 未建立，ai07 自行在 `apps/teacher-portal/src/shared/` 内实现（已在 teacher-portal 阶段2 计划中），admin-portal 通过 MF shared 消费。
-2. **假设 iam 提供用户/角色/权限/视口 CRUD 端点**：`IAM_USER_READ/CREATE/UPDATE`、`IAM_ROLE_READ`、`IAM_PERMISSION_READ`、`IAM_VIEWPORT_READ` 及对应 REST 端点。当前已实现（known-issues §2.3 iam）。
-3. **假设 teacher-portal Shell 已就绪**：AppShell + 共享依赖暴露 + MF 配置 + rewrites。admin-portal 是 P6 阶段，依赖 teacher-portal P2-P5 已完成。
-4. **假设 Next.js 14+ Module Federation 2.0 稳定**：`@module-federation/nextjs-mf` 在 Next.js App Router 下可用。若不稳定，admin-portal 降级为独立部署（重复实现 AppShell）。
-5. **假设 Grafana 可嵌入 iframe**：PlatformMonitor 组件用 `<iframe>` 嵌入 Grafana 面板。若 Grafana 配置了 `X-Frame-Options: DENY`，需协调 SRE 放开 iframe 嵌入白名单，或降级为 recharts 渲染监控指标。
+1. **假设 teacher-bff admin 命名空间 schema 就绪**（ARB-001，contract §2.4 18 operations）：若 ai03 未补齐，admin-portal 用 MSW mock 开发，上游就绪后切换。
+2. **假设 teacher-portal Shell 已就绪**：MF 模式依赖 Shell 暴露 GraphQLProvider + 共享依赖。standalone 模式可独立运行。
+3. **假设 push-gateway WebSocket 就绪**（ARB-006）：若未就绪，用 mock-socket + 30s 定时器模拟。
+4. _*假设 `packages/contracts` ADMIN_* 权限点常量就绪_*（coord 维护）：admin-portal `src/lib/permissions.ts` 引用，若 coord 未建立则本地定义。
 
 ### 11.2 技术风险
 
-| 风险                    | 影响                                                        | 缓解                                                                                             |
-| ----------------------- | ----------------------------------------------------------- | ------------------------------------------------------------------------------------------------ |
-| Shell 未就绪阻塞 admin  | admin-portal 是 P6 阶段，依赖 teacher-portal P2-P5 完成     | P6 启动前确认 Shell 已暴露 AppShell + 共享依赖；若 Shell 延迟，admin-portal 先用 mock Shell 开发 |
-| MF SSR 对齐复杂         | Remote 在 SSR 时需 Shell 提供上下文                         | 优先 CSR，SSR 仅用于首屏 dashboard；MF 2.0 支持 SSR                                              |
-| 共享依赖版本漂移        | Remote 与 Shell 的 react/react-dom 版本不一致导致运行时错误 | MF `shared.singleton: true` + CI 检查版本对齐                                                    |
-| Token 刷新竞态          | 多请求同时 401 触发多次 refresh                             | 复用 Shell 的 ApiClient 全局单例 + refresh promise 复用                                          |
-| 权限缓存陈旧            | 角色变更后前端 5min 内仍用旧权限                            | iam 角色变更后管理员手动 invalidate；admin-portal 本身就是管理端，可主动触发                     |
-| 数据范围越权            | L3 校管理员看到 L5 系统管理员视角的数据                     | 所有列表 API 由后端强制注入 dataScope filter；前端 `AdminDataScopeFilter` 仅作 UI 提示           |
-| Grafana iframe 嵌入失败 | PlatformMonitor 组件白屏                                    | 降级为 recharts 渲染 `MonitoringMetricsViewModel`                                                |
-| 轮询对 BFF 压力         | 60s 监控轮询 + 5min 统计轮询增加 BFF 负载                   | 5min TTL 缓存命中率高；监控指标直连 Grafana iframe 不经过 BFF                                    |
+| 风险                          | 影响                                   | 缓解                                                      |
+| ----------------------------- | -------------------------------------- | --------------------------------------------------------- |
+| Shell 未就绪阻塞 admin        | MF 模式无法挂载                        | standalone 模式自建 Provider 链，独立可运行               |
+| teacher-bff admin schema 缺失 | GraphQL 查询失败                       | MSW mock 全覆盖 18 operations，上游就绪后切换             |
+| urql 类型兼容性               | TypeScript 编译错误                    | `as unknown as` 从 unknown 转换（见 §4.1）                |
+| ESLint 9 兼容性               | `@next/eslint-plugin-next` 14.x 不兼容 | 移除该插件，用 jsx-a11y + tseslint 替代                   |
+| WebSocket mock 不真实         | 开发期通知体验与生产不一致             | 30s 定时器 + 3 类通知轮换，接近真实推送频率               |
+| 权限缓存陈旧                  | 角色变更后前端仍用旧权限               | 登录时拉取最新权限；admin-portal 本身是管理端，可主动刷新 |
 
-### 11.3 未决设计决策（需 coord 仲裁）
+## 12. 端口矩阵
 
-> 以下 4 项与 teacher-portal 阶段2 §11.3 相同，admin-portal 跟随 teacher-portal 决策：
+| 端                   | dev 端口 | 生产端口 | 备注                   |
+| -------------------- | -------- | -------- | ---------------------- |
+| admin-portal         | 4003     | 4003     | Remote，挂载到 Shell   |
+| teacher-portal Shell | 4000     | 4000     | Shell 宿主             |
+| api-gateway          | 8080     | 8080     | GraphQL 代理           |
+| push-gateway         | 8081     | 8081     | WebSocket              |
+| teacher-bff          | 3003     | 3003     | GraphQL admin 命名空间 |
 
-1. **packages 归属**：`ui-tokens` / `ui-components` / `hooks` 是 ai07 维护还是 coord 维护？建议：ai07 维护（前端专属），coord 仅维护 `shared-ts` / `contracts`（跨语言/跨服务）。
-2. **GraphQL vs REST**：004 §11.3 提到 BFF GraphQL Yoga + DataLoader，但当前 teacher-bff 实现为 REST。前端 API 请求层是否需要 GraphQL client（urql/apollo）？建议：P2-P5 用 REST，P6 admin-portal 同样用 REST，未来 BFF 切 GraphQL 再统一引入。
-3. **i18n key 命名**：`iam.error.IAM_INVALID_CREDENTIALS` 还是 `error.iam.invalid_credentials`？建议：`error.{{service}}.{{code_snake_case}}`，与错误码前缀对齐。
-4. **MF 暴露粒度**：Shell 暴露整个 AppShell 还是暴露更细粒度的组件（Sidebar、Header、Content）？建议：暴露 AppShell 整体 + 各 Remote 自行决定内部布局。
+## 13. 实施路线（已完成）
 
-## 12. coord 交叉审查所需信息
+### P2-P6 全阶段交付（已完成）
 
-### 12.1 端口矩阵
+1. ✅ **P2 骨架 Phase 1**：配置文件 + 设计令牌 + 类型定义
+2. ✅ **P2 骨架 Phase 2**：GraphQL client + auth + permissions + providers + AdminShell + MF Remote 入口 + standalone 壳
+3. ✅ **P2 骨架 Phase 3**：MSW mock（handlers + fixtures + browser）+ mock-socket WebSocket mock
+4. ✅ **P3 业务**：用户管理（useUsers/useUser/CRUD hooks + UserManagementTable + /admin/users 页面）
+5. ✅ **P3 业务**：角色权限矩阵 + 权限点管理 + 视口配置
+6. ✅ **P4 业务**：组织管理 + 学校设置 + 班级/教师/学生全局管理
+7. ✅ **P5 业务**：审计日志 + WebSocket 实时通知 + 管理仪表盘
+8. ✅ **P6 硬化**：A11y + Web Vitals + Dockerfile + /api/health + /api/ready + 质量校验
+9. ✅ **文档回写**：01/02 文档对齐仲裁结果 + known-issues §2.16 + arch:scan
 
-| 端           | dev 端口 | 生产端口 | 备注                 |
-| ------------ | -------- | -------- | -------------------- |
-| admin-portal | 3003     | 3003     | Remote，挂载到 Shell |
+### 验收标准
 
-> 与 [full-stack-runbook](../../../docs/standards/full-stack-runbook.md) 端口矩阵对齐。Shell（teacher-portal）在 3000，其余 Remote：student-portal 3001 / parent-portal 3002 / admin-portal 3003。
-
-### 12.2 依赖的共享包
-
-| 包              | 路径                      | 维护方       | 内容                                              |
-| --------------- | ------------------------- | ------------ | ------------------------------------------------- |
-| `shared-ts`     | `packages/shared-ts/`     | coord        | ApiClient、Logger、通用工具                       |
-| `contracts`     | `packages/contracts/`     | coord        | Permissions 常量、ActionState 类型、UserInfo 类型 |
-| `ui-tokens`     | `packages/ui-tokens/`     | ai07（建议） | 三层设计令牌                                      |
-| `ui-components` | `packages/ui-components/` | ai07（建议） | shadcn + ErrorBoundary + RequirePermission        |
-| `hooks`         | `packages/hooks/`         | ai07（建议） | usePermission、useAuth、useViewports              |
-
-### 12.3 依赖的后端契约（需对应 AI 确认）
-
-| 契约                                                                | 提供方                | 当前状态                         |
-| ------------------------------------------------------------------- | --------------------- | -------------------------------- |
-| `GET/POST/PUT /iam/users`、`GET /iam/roles`、`GET /iam/permissions` | iam                   | ✅ 已实现                        |
-| `GET/PUT /iam/viewports`、`PUT /iam/viewports/:id`                  | iam                   | ✅ 已实现                        |
-| `PUT /iam/roles/:id/permissions`                                    | iam                   | ⚠️ 待确认（角色-权限矩阵）       |
-| `GET /admin/dashboard`、`GET /admin/monitoring/metrics`             | teacher-bff           | ✅ 已实现（复用）                |
-| `GET /admin/stats/users`、`GET /admin/stats/active-sessions`        | teacher-bff           | ⚠️ 待确认                        |
-| `POST /admin/web-vitals`                                            | teacher-bff           | ⚠️ 待确认（Web Vitals 上报端点） |
-| `GET /notifications/*`                                              | msg                   | 📐 待 P5                         |
-| Grafana 面板 iframe 嵌入                                            | SRE（infra/grafana/） | ⚠️ 待确认 X-Frame-Options        |
-
-### 12.4 错误码前缀（前端 i18n 路由依赖）
-
-前端不产生错误码，仅消费。admin-portal 涉及的前缀（需各服务确认不重叠）：
-
-| 前缀           | 服务        | 状态                    |
-| -------------- | ----------- | ----------------------- |
-| `IAM_`         | iam         | ✅ 已用                 |
-| `BFF_TEACHER_` | teacher-bff | ⚠️ 待确认               |
-| `GW_`          | api-gateway | ✅ 已用                 |
-| `NETWORK_`     | 前端        | ai07 自有（复用 Shell） |
-
-### 12.5 不产生 Kafka 事件
-
-admin-portal 不发布/消费 Kafka 事件，不消费 WebSocket/SSE 推送。所有数据通过 HTTP 轮询获取。
-
-## 13. 实施路线（ai07 自用，P6 阶段）
-
-### P6（admin-portal 建站 + 硬化）
-
-1. **建 `apps/admin-portal/` 骨架**（Remote 角色）
-   - `next.config.js` 配置 MF Remote（见 §1.2）
-   - `package.json` 引入 `@module-federation/nextjs-mf` + 软链 `@edu/*` 共享包
-   - `tsconfig.json` 沿用 `tsconfig.base.json`
-   - `tailwind.config.js` 引入 `@edu/ui-tokens`
-   - `Dockerfile` 多阶段构建（builder + runtime）
-2. **实现用户/角色/权限/视口/组织/监控管理页面**
-   - `/admin/dashboard` — 管理仪表盘（recharts 渲染统计图表）
-   - `/admin/users` + `/admin/users/new` + `/admin/users/:id` — 用户管理（UserManagementTable + Form）
-   - `/admin/roles` — 角色管理（RolePermissionMatrix）
-   - `/admin/permissions` — 权限管理（DataTable 只读列表）
-   - `/admin/viewports` — 视口配置（ViewportConfigEditor）
-   - `/admin/organization` — 组织管理（树形 + DataTable）
-   - `/admin/monitoring` — 平台监控（PlatformMonitor = Grafana iframe + recharts）
-3. **实现 admin 特有业务 Hooks**（见 §8.2）
-4. **接入 5 层状态管理**（复用 Shell 暴露的 nuqs/TanStack Query/Zustand/Zustand-UI/react-hook-form）
-5. **接入 i18n**（next-intl，admin 命名空间）
-6. **接入权限校验**（`usePermission()` + `<RequirePermission>`，按 §6.1 路由表）
-7. **Web Vitals + OTel browser SDK 接入**（复用 Shell 的 TracerProvider，scope='admin'）
-8. **A11y WCAG 2.2 AA 审计**（eslint-plugin-jsx-a11y error 级 + 手动审计）
-9. **性能优化**（MF shared 单例验证、bundle 分析、5min 长缓存验证）
-10. **补 Vitest 单测 + Playwright E2E**（覆盖率 ≥ 80%）
-11. **补 `/api/health` + `/api/ready` Route Handler + Dockerfile HEALTHCHECK**
-
-### P6 验收标准
-
-- [ ] 所有 9 个路由页面可访问，权限校验生效
-- [ ] MF shared 单例验证通过（react/react-dom/Zustand/TanStack Query 不重复实例化）
-- [ ] Web Vitals 上报到 `POST /api/v1/admin/web-vitals`
-- [ ] OTel browser SDK trace 上报到 collector
-- [ ] A11y 审计 0 个 error 级违规
-- [ ] 测试覆盖率 ≥ 80%
-- [ ] `/api/health` + `/api/ready` 返回 200
-- [ ] Dockerfile 多阶段构建，非 root 用户，HEALTHCHECK 配置
+- ✅ 所有 11 个路由页面可访问，权限校验生效
+- ✅ MF Remote 可被 Shell 加载（暴露 `./AdminApp`）
+- ✅ standalone 模式独立可运行（自建 Provider 链 + mock 登录）
+- ✅ GraphQL 18 operations 全部实现（MSW mock + 真实切换）
+- ✅ WebSocket 实时通知（mock 模式 30s 定时推送）
+- ✅ Web Vitals 采集（LCP/CLS/FCP/INP/TTFB → sendBeacon）
+- ✅ A11y WCAG 2.2 AA（eslint-plugin-jsx-a11y error 级 + skip-link + focus-visible）
+- ✅ `/api/health` + `/api/ready` 返回 200
+- ✅ Dockerfile 多阶段构建（node:22-alpine，standalone 输出，EXPOSE 4003）
+- ✅ `pnpm run typecheck` + `pnpm run lint` 通过（0 errors）
 
 ---
 
-**AI Agent**: ai07 (admin-portal remote)
-**Branch**: docs/admin-portal-stage1-stage2-design-ai07
+**AI Agent**: ai16 (admin-portal remote)
+**Branch**: admin-portal-arbitration-done-TaFkyb
 **Coordinator**: coord-ai
diff --git a/apps/admin-portal/eslint.config.js b/apps/admin-portal/eslint.config.js
new file mode 100644
index 0000000..1c9edb1
--- /dev/null
+++ b/apps/admin-portal/eslint.config.js
@@ -0,0 +1,90 @@
+// admin-portal ESLint flat config
+// 包含 React + jsx-a11y + TypeScript 规则
+// 注意：@next/eslint-plugin-next 14.x 与 ESLint 9 不兼容，暂不使用
+const js = require('@eslint/js');
+const tseslint = require('typescript-eslint');
+const prettierConfig = require('eslint-config-prettier');
+const jsx11y = require('eslint-plugin-jsx-a11y');
+
+module.exports = tseslint.config(
+  // 全局忽略
+  {
+    ignores: [
+      '.next/**',
+      'coverage/**',
+      'node_modules/**',
+      'public/mockServiceWorker.js',
+      'eslint.config.js',
+      'next.config.js',
+      'vitest.config.ts',
+      'postcss.config.js',
+      'tailwind.config.js',
+    ],
+  },
+
+  // 基础 JS 规则
+  js.configs.recommended,
+
+  // TypeScript 规则
+  ...tseslint.configs.recommended,
+
+  // jsx-a11y 规则（A11y WCAG 2.2 AA）
+  {
+    plugins: {
+      'jsx-a11y': jsx11y,
+    },
+    rules: {
+      ...jsx11y.flatConfigs.recommended.rules,
+      'jsx-a11y/no-autofocus': 'warn',
+      'jsx-a11y/aria-role': 'error',
+      'jsx-a11y/aria-props': 'error',
+      'jsx-a11y/aria-proptypes': 'error',
+      'jsx-a11y/aria-unsupported-elements': 'error',
+      'jsx-a11y/role-has-required-aria-props': 'error',
+      'jsx-a11y/role-supports-aria-props': 'error',
+      'jsx-a11y/tabindex-no-positive': 'error',
+      'jsx-a11y/no-noninteractive-tabindex': 'warn',
+    },
+  },
+
+  // React/JSX 文件配置
+  {
+    files: ['**/*.tsx', '**/*.ts'],
+    languageOptions: {
+      ecmaVersion: 2024,
+      sourceType: 'module',
+      parserOptions: {
+        ecmaFeatures: { jsx: true },
+      },
+    },
+    rules: {
+      // 禁止 any（未知类型用 unknown）
+      '@typescript-eslint/no-explicit-any': 'warn',
+      // 未使用变量允许下划线前缀
+      '@typescript-eslint/no-unused-vars': [
+        'error',
+        {
+          argsIgnorePattern: '^_',
+          varsIgnorePattern: '^_',
+        },
+      ],
+      // 允许 console（开发环境）
+      'no-console': 'off',
+      // 允许未定义的 require（Next.js 配置）
+      '@typescript-eslint/no-require-imports': 'off',
+    },
+  },
+
+  // 测试文件放宽规则
+  {
+    files: ['**/*.test.ts', '**/*.test.tsx', '**/*.spec.ts'],
+    rules: {
+      '@typescript-eslint/no-explicit-any': 'off',
+      '@typescript-eslint/no-non-null-assertion': 'off',
+      'jsx-a11y/no-autofocus': 'off',
+    },
+  },
+
+  // 禁用与 Prettier 冲突的规则
+  prettierConfig,
+);
diff --git a/apps/admin-portal/next-env.d.ts b/apps/admin-portal/next-env.d.ts
new file mode 100644
index 0000000..6080add
--- /dev/null
+++ b/apps/admin-portal/next-env.d.ts
@@ -0,0 +1,2 @@
+/// <reference types="next" />
+/// <reference types="next/image-types/global" />
diff --git a/apps/admin-portal/next.config.js b/apps/admin-portal/next.config.js
new file mode 100644
index 0000000..383a102
--- /dev/null
+++ b/apps/admin-portal/next.config.js
@@ -0,0 +1,53 @@
+const NextFederationPlugin = require("@module-federation/nextjs-mf");
+
+/** @type {import('next').NextConfig} */
+const nextConfig = {
+  reactStrictMode: true,
+  transpilePackages: [
+    "@edu/ui-tokens",
+    "@edu/ui-components",
+    "@edu/hooks",
+  ],
+  async rewrites() {
+    const gatewayUrl = process.env.API_GATEWAY_URL || "http://localhost:8080";
+    return [
+      {
+        source: "/api/admin/graphql",
+        destination: `${gatewayUrl}/api/admin/graphql`,
+      },
+      {
+        source: "/api/:path*",
+        destination: `${gatewayUrl}/api/:path*`,
+      },
+    ];
+  },
+  webpack(config, { isServer }) {
+    if (process.env.NEXT_PUBLIC_MF_ENABLED === "true") {
+      config.plugins.push(
+        new NextFederationPlugin({
+          name: "admin_app",
+          filename: "static/chunks/remoteEntry.js",
+          exposes: {
+            "./AdminApp": "./src/app/admin-app.tsx",
+          },
+          remotes: {
+            teacher: `teacher_app@http://localhost:4000/_next/static/${isServer ? "ssr" : "chunks"}/remoteEntry.js`,
+          },
+          shared: {
+            react: { singleton: true, requiredVersion: "^18.3.0" },
+            "react-dom": { singleton: true, requiredVersion: "^18.3.0" },
+            urql: { singleton: true },
+            graphql: { singleton: true },
+            "@edu/ui-tokens": { singleton: true },
+            "@edu/ui-components": { singleton: true },
+            "@edu/hooks": { singleton: true },
+          },
+          extraOptions: { exposePages: false },
+        }),
+      );
+    }
+    return config;
+  },
+};
+
+module.exports = nextConfig;
diff --git a/apps/admin-portal/package.json b/apps/admin-portal/package.json
new file mode 100644
index 0000000..c002354
--- /dev/null
+++ b/apps/admin-portal/package.json
@@ -0,0 +1,60 @@
+{
+  "name": "@edu/admin-portal",
+  "version": "0.1.0",
+  "private": true,
+  "scripts": {
+    "dev": "next dev -p 4003",
+    "build": "next build",
+    "start": "next start -p 4003",
+    "lint": "eslint src --config eslint.config.js",
+    "typecheck": "tsc --noEmit",
+    "test": "vitest run",
+    "msw:init": "msw init public/ --save"
+  },
+  "dependencies": {
+    "@edu/hooks": "workspace:*",
+    "@edu/ui-components": "workspace:*",
+    "@edu/ui-tokens": "workspace:*",
+    "@dnd-kit/core": "^6.1.0",
+    "@dnd-kit/sortable": "^8.0.0",
+    "@dnd-kit/utilities": "^3.2.0",
+    "@hookform/resolvers": "^3.9.0",
+    "@urql/core": "^5.0.0",
+    "graphql": "^16.9.0",
+    "next": "^14.2.0",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "react-hook-form": "^7.53.0",
+    "recharts": "^2.12.0",
+    "urql": "^4.2.0",
+    "web-vitals": "^4.2.0",
+    "zod": "^3.23.0"
+  },
+  "devDependencies": {
+    "@module-federation/nextjs-mf": "^8.8.0",
+    "@opentelemetry/api": "^1.9.0",
+    "@opentelemetry/exporter-trace-otlp-http": "^0.52.0",
+    "@opentelemetry/sdk-trace-web": "^1.25.0",
+    "@testing-library/jest-dom": "^6.5.0",
+    "@testing-library/react": "^16.0.0",
+    "@types/node": "^22.0.0",
+    "@types/react": "^18.3.0",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^4.3.0",
+    "eslint": "^9.0.0",
+    "eslint-config-prettier": "^9.1.0",
+    "eslint-plugin-jsx-a11y": "^6.10.0",
+    "jsdom": "^25.0.0",
+    "mock-socket": "^9.3.0",
+    "msw": "^2.4.0",
+    "postcss": "^8.4.0",
+    "tailwindcss": "^3.4.0",
+    "typescript": "^5.6.0",
+    "vitest": "^2.1.0"
+  },
+  "msw": {
+    "workerDirectory": [
+      "public"
+    ]
+  }
+}
\ No newline at end of file
diff --git a/apps/admin-portal/postcss.config.js b/apps/admin-portal/postcss.config.js
new file mode 100644
index 0000000..12a703d
--- /dev/null
+++ b/apps/admin-portal/postcss.config.js
@@ -0,0 +1,6 @@
+module.exports = {
+  plugins: {
+    tailwindcss: {},
+    autoprefixer: {},
+  },
+};
diff --git a/apps/admin-portal/public/mockServiceWorker.js b/apps/admin-portal/public/mockServiceWorker.js
new file mode 100644
index 0000000..0c970ef
--- /dev/null
+++ b/apps/admin-portal/public/mockServiceWorker.js
@@ -0,0 +1,361 @@
+/* eslint-disable */
+/* tslint:disable */
+
+/**
+ * Mock Service Worker.
+ * @see https://github.com/mswjs/msw
+ * - Please do NOT modify this file.
+ */
+
+const PACKAGE_VERSION = '2.15.0'
+const INTEGRITY_CHECKSUM = '03cb67ac84128e63d7cd722a6e5b7f1e'
+const IS_MOCKED_RESPONSE = Symbol('isMockedResponse')
+const activeClientIds = new Set()
+
+addEventListener('install', function () {
+  self.skipWaiting()
+})
+
+addEventListener('activate', function (event) {
+  event.waitUntil(self.clients.claim())
+})
+
+addEventListener('message', async function (event) {
+  const clientId = Reflect.get(event.source || {}, 'id')
+
+  if (!clientId || !self.clients) {
+    return
+  }
+
+  const client = await self.clients.get(clientId)
+
+  if (!client) {
+    return
+  }
+
+  const allClients = await self.clients.matchAll({
+    type: 'window',
+  })
+
+  switch (event.data) {
+    case 'KEEPALIVE_REQUEST': {
+      sendToClient(client, {
+        type: 'KEEPALIVE_RESPONSE',
+      })
+      break
+    }
+
+    case 'INTEGRITY_CHECK_REQUEST': {
+      sendToClient(client, {
+        type: 'INTEGRITY_CHECK_RESPONSE',
+        payload: {
+          packageVersion: PACKAGE_VERSION,
+          checksum: INTEGRITY_CHECKSUM,
+        },
+      })
+      break
+    }
+
+    case 'MOCK_ACTIVATE': {
+      activeClientIds.add(clientId)
+
+      sendToClient(client, {
+        type: 'MOCKING_ENABLED',
+        payload: {
+          client: {
+            id: client.id,
+            frameType: client.frameType,
+          },
+        },
+      })
+      break
+    }
+
+    case 'CLIENT_CLOSED': {
+      activeClientIds.delete(clientId)
+
+      const remainingClients = allClients.filter((client) => {
+        return client.id !== clientId
+      })
+
+      // Unregister itself when there are no more clients
+      if (remainingClients.length === 0) {
+        self.registration.unregister()
+      }
+
+      break
+    }
+  }
+})
+
+addEventListener('fetch', function (event) {
+  const requestInterceptedAt = Date.now()
+
+  // Bypass navigation requests.
+  if (event.request.mode === 'navigate') {
+    return
+  }
+
+  // Opening the DevTools triggers the "only-if-cached" request
+  // that cannot be handled by the worker. Bypass such requests.
+  if (
+    event.request.cache === 'only-if-cached' &&
+    event.request.mode !== 'same-origin'
+  ) {
+    return
+  }
+
+  // Bypass all requests when there are no active clients.
+  // Prevents the self-unregistered worked from handling requests
+  // after it's been terminated (still remains active until the next reload).
+  if (activeClientIds.size === 0) {
+    return
+  }
+
+  const requestId = crypto.randomUUID()
+  event.respondWith(handleRequest(event, requestId, requestInterceptedAt))
+})
+
+/**
+ * @param {FetchEvent} event
+ * @param {string} requestId
+ * @param {number} requestInterceptedAt
+ */
+async function handleRequest(event, requestId, requestInterceptedAt) {
+  const client = await resolveMainClient(event)
+  const requestCloneForEvents = event.request.clone()
+  const response = await getResponse(
+    event,
+    client,
+    requestId,
+    requestInterceptedAt,
+  )
+
+  // Send back the response clone for the "response:*" life-cycle events.
+  // Ensure MSW is active and ready to handle the message, otherwise
+  // this message will pend indefinitely.
+  if (client && activeClientIds.has(client.id)) {
+    const serializedRequest = await serializeRequest(requestCloneForEvents)
+
+    // Omit the body of server-sent event stream responses.
+    // Cloning such responses would prevent client-side stream cancelations
+    // from reaching the original stream (a teed stream only cancels its
+    // source once both of its branches cancel) and would buffer the
+    // entire stream into the unconsumed clone indefinitely.
+    const isEventStreamResponse = response.headers
+      .get('content-type')
+      ?.toLowerCase()
+      .startsWith('text/event-stream')
+
+    // Clone the response so both the client and the library could consume it.
+    const responseClone = isEventStreamResponse ? null : response.clone()
+
+    sendToClient(
+      client,
+      {
+        type: 'RESPONSE',
+        payload: {
+          isMockedResponse: IS_MOCKED_RESPONSE in response,
+          request: {
+            id: requestId,
+            ...serializedRequest,
+          },
+          response: {
+            type: response.type,
+            status: response.status,
+            statusText: response.statusText,
+            headers: Object.fromEntries(response.headers.entries()),
+            body: responseClone ? responseClone.body : null,
+          },
+        },
+      },
+      responseClone && responseClone.body
+        ? [serializedRequest.body, responseClone.body]
+        : [],
+    )
+  }
+
+  return response
+}
+
+/**
+ * Resolve the main client for the given event.
+ * Client that issues a request doesn't necessarily equal the client
+ * that registered the worker. It's with the latter the worker should
+ * communicate with during the response resolving phase.
+ * @param {FetchEvent} event
+ * @returns {Promise<Client | undefined>}
+ */
+async function resolveMainClient(event) {
+  const client = await self.clients.get(event.clientId)
+
+  if (activeClientIds.has(event.clientId)) {
+    return client
+  }
+
+  if (client?.frameType === 'top-level') {
+    return client
+  }
+
+  const allClients = await self.clients.matchAll({
+    type: 'window',
+  })
+
+  return allClients
+    .filter((client) => {
+      // Get only those clients that are currently visible.
+      return client.visibilityState === 'visible'
+    })
+    .find((client) => {
+      // Find the client ID that's recorded in the
+      // set of clients that have registered the worker.
+      return activeClientIds.has(client.id)
+    })
+}
+
+/**
+ * @param {FetchEvent} event
+ * @param {Client | undefined} client
+ * @param {string} requestId
+ * @param {number} requestInterceptedAt
+ * @returns {Promise<Response>}
+ */
+async function getResponse(event, client, requestId, requestInterceptedAt) {
+  // Clone the request because it might've been already used
+  // (i.e. its body has been read and sent to the client).
+  const requestClone = event.request.clone()
+
+  function passthrough() {
+    // Cast the request headers to a new Headers instance
+    // so the headers can be manipulated with.
+    const headers = new Headers(requestClone.headers)
+
+    // Remove the "accept" header value that marked this request as passthrough.
+    // This prevents request alteration and also keeps it compliant with the
+    // user-defined CORS policies.
+    const acceptHeader = headers.get('accept')
+    if (acceptHeader) {
+      const values = acceptHeader.split(',').map((value) => value.trim())
+      const filteredValues = values.filter(
+        (value) => value !== 'msw/passthrough',
+      )
+
+      if (filteredValues.length > 0) {
+        headers.set('accept', filteredValues.join(', '))
+      } else {
+        headers.delete('accept')
+      }
+    }
+
+    return fetch(requestClone, { headers })
+  }
+
+  // Bypass mocking when the client is not active.
+  if (!client) {
+    return passthrough()
+  }
+
+  // Bypass initial page load requests (i.e. static assets).
+  // The absence of the immediate/parent client in the map of the active clients
+  // means that MSW hasn't dispatched the "MOCK_ACTIVATE" event yet
+  // and is not ready to handle requests.
+  if (!activeClientIds.has(client.id)) {
+    return passthrough()
+  }
+
+  // Notify the client that a request has been intercepted.
+  const serializedRequest = await serializeRequest(event.request)
+  const clientMessage = await sendToClient(
+    client,
+    {
+      type: 'REQUEST',
+      payload: {
+        id: requestId,
+        interceptedAt: requestInterceptedAt,
+        ...serializedRequest,
+      },
+    },
+    [serializedRequest.body],
+  )
+
+  switch (clientMessage.type) {
+    case 'MOCK_RESPONSE': {
+      return respondWithMock(clientMessage.data)
+    }
+
+    case 'PASSTHROUGH': {
+      return passthrough()
+    }
+  }
+
+  return passthrough()
+}
+
+/**
+ * @param {Client} client
+ * @param {any} message
+ * @param {Array<Transferable>} transferrables
+ * @returns {Promise<any>}
+ */
+function sendToClient(client, message, transferrables = []) {
+  return new Promise((resolve, reject) => {
+    const channel = new MessageChannel()
+
+    channel.port1.onmessage = (event) => {
+      if (event.data && event.data.error) {
+        return reject(event.data.error)
+      }
+
+      resolve(event.data)
+    }
+
+    client.postMessage(message, [
+      channel.port2,
+      ...transferrables.filter(Boolean),
+    ])
+  })
+}
+
+/**
+ * @param {Response} response
+ * @returns {Response}
+ */
+function respondWithMock(response) {
+  // Setting response status code to 0 is a no-op.
+  // However, when responding with a "Response.error()", the produced Response
+  // instance will have status code set to 0. Since it's not possible to create
+  // a Response instance with status code 0, handle that use-case separately.
+  if (response.status === 0) {
+    return Response.error()
+  }
+
+  const mockedResponse = new Response(response.body, response)
+
+  Reflect.defineProperty(mockedResponse, IS_MOCKED_RESPONSE, {
+    value: true,
+    enumerable: true,
+  })
+
+  return mockedResponse
+}
+
+/**
+ * @param {Request} request
+ */
+async function serializeRequest(request) {
+  return {
+    url: request.url,
+    mode: request.mode,
+    method: request.method,
+    headers: Object.fromEntries(request.headers.entries()),
+    cache: request.cache,
+    credentials: request.credentials,
+    destination: request.destination,
+    integrity: request.integrity,
+    redirect: request.redirect,
+    referrer: request.referrer,
+    referrerPolicy: request.referrerPolicy,
+    body: await request.arrayBuffer(),
+    keepalive: request.keepalive,
+  }
+}
diff --git a/apps/admin-portal/src/app/admin-app.tsx b/apps/admin-portal/src/app/admin-app.tsx
new file mode 100644
index 0000000..7a05528
--- /dev/null
+++ b/apps/admin-portal/src/app/admin-app.tsx
@@ -0,0 +1,51 @@
+"use client";
+
+import { type ReactNode } from "react";
+import { GraphQLProvider } from "@/providers/graphql-provider";
+import { AuthProvider } from "@/providers/auth-provider";
+import { ToastProvider } from "@/providers/toast-provider";
+import { AdminShell } from "@/components/admin-shell";
+import { MswInitializer } from "@/components/msw-initializer";
+import { useState, useEffect } from "react";
+
+/**
+ * MF Remote 入口组件
+ *
+ * 仲裁 ARB-002 §2.2：Shell 动态 import admin/AdminApp 加载管理端
+ * - MF 模式：Shell 提供 GraphQLProvider/AuthProvider/AppShell，AdminApp 仅渲染页面
+ * - Standalone 模式：AdminApp 自建 providers + AdminShell
+ *
+ * 暴露：next.config.js exposes: { './AdminApp': './src/app/admin-app.tsx' }
+ */
+export default function AdminApp({ children }: { children: ReactNode }) {
+  const [mswReady, setMswReady] = useState(false);
+
+  // MF 模式下复用 Shell providers（通过 dynamic import）
+  // Standalone 模式下自建 providers
+  const isStandalone = process.env.NEXT_PUBLIC_MF_ENABLED !== "true";
+
+  useEffect(() => {
+    if (!isStandalone) {
+      setMswReady(true);
+    }
+  }, [isStandalone]);
+
+  if (!isStandalone) {
+    // MF 模式：Shell 已提供 providers + AppShell
+    return <>{children}</>;
+  }
+
+  // Standalone 模式：自建 providers
+  return (
+    <GraphQLProvider>
+      <MswInitializer onReady={() => setMswReady(true)} />
+      {mswReady && (
+        <AuthProvider>
+          <ToastProvider>
+            <AdminShell>{children}</AdminShell>
+          </ToastProvider>
+        </AuthProvider>
+      )}
+    </GraphQLProvider>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/audit-logs/page.tsx b/apps/admin-portal/src/app/admin/audit-logs/page.tsx
new file mode 100644
index 0000000..398b52e
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/audit-logs/page.tsx
@@ -0,0 +1,158 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import {
+  useAuditLogs,
+  useAuditLogFilter,
+  exportAuditLogsCsv,
+} from "@/hooks/use-audit-logs";
+import { useToast } from "@/providers/toast-provider";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  Select,
+  Button,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Table,
+  TableRow,
+  TableCell,
+  Pagination,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+export default function AuditLogsPage(): ReactNode {
+  const { filter, setPage, setSearch, setAction } = useAuditLogFilter();
+  const { data, loading, error } = useAuditLogs(filter);
+  const { show } = useToast();
+  const [searchInput, setSearchInput] = useState("");
+
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), 300);
+    return () => clearTimeout(timer);
+  }, [searchInput, setSearch]);
+
+  const handleExport = () => {
+    if (!data || data.items.length === 0) {
+      show("warning", "暂无数据可导出");
+      return;
+    }
+    exportAuditLogsCsv(data.items);
+    show("success", "已导出 CSV");
+  };
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.auditLogs.title")}
+        description="系统所有操作的审计记录"
+        actions={
+          <Button variant="secondary" onClick={handleExport}>
+            {t("admin.auditLogs.exportCsv")}
+          </Button>
+        }
+      />
+
+      <PaperCard className="p-4 mb-4">
+        <div className="flex gap-3 items-center">
+          <Input
+            type="search"
+            placeholder={t("admin.common.search")}
+            value={searchInput}
+            onChange={(e) => setSearchInput(e.target.value)}
+            style={{ width: 240 }}
+          />
+          <Select
+            value={filter.action ?? ""}
+            onChange={(e) => setAction(e.target.value)}
+          >
+            <option value="">{t("admin.common.all")}操作</option>
+            <option value="USER_LOGIN">用户登录</option>
+            <option value="USER_CREATE">创建用户</option>
+            <option value="USER_UPDATE">更新用户</option>
+            <option value="USER_TOGGLE_STATUS">切换状态</option>
+            <option value="ROLE_CREATE">创建角色</option>
+            <option value="ROLE_UPDATE">更新角色</option>
+            <option value="VIEWPORT_UPDATE">更新视口</option>
+            <option value="SYSTEM_SETTINGS_UPDATE">系统设置</option>
+            <option value="ABNORMAL_LOGIN_BLOCKED">异常登录拦截</option>
+          </Select>
+        </div>
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && data && (
+          <>
+            {data.items.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <Table
+                  headers={[
+                    t("admin.auditLogs.time"),
+                    t("admin.auditLogs.actor"),
+                    t("admin.auditLogs.action"),
+                    t("admin.auditLogs.resource"),
+                    t("admin.auditLogs.resourceId"),
+                    t("admin.auditLogs.ip"),
+                    t("admin.auditLogs.traceId"),
+                  ]}
+                >
+                  {data.items.map((log) => (
+                    <TableRow key={log.id}>
+                      <TableCell style={{ whiteSpace: "nowrap" }}>
+                        {new Date(log.occurredAt).toLocaleString("zh-CN")}
+                      </TableCell>
+                      <TableCell>{log.actorName}</TableCell>
+                      <TableCell>
+                        <span
+                          style={{
+                            fontFamily: "var(--font-mono)",
+                            fontSize: 11,
+                          }}
+                        >
+                          {log.action}
+                        </span>
+                      </TableCell>
+                      <TableCell>{log.resourceType}</TableCell>
+                      <TableCell
+                        style={{ fontFamily: "var(--font-mono)", fontSize: 11 }}
+                      >
+                        {log.resourceId}
+                      </TableCell>
+                      <TableCell
+                        style={{ fontFamily: "var(--font-mono)", fontSize: 11 }}
+                      >
+                        {log.ip}
+                      </TableCell>
+                      <TableCell
+                        style={{
+                          fontFamily: "var(--font-mono)",
+                          fontSize: 11,
+                          color: "var(--color-ink-muted)",
+                        }}
+                      >
+                        {log.traceId ?? "—"}
+                      </TableCell>
+                    </TableRow>
+                  ))}
+                </Table>
+                <Pagination
+                  page={data.page}
+                  pageSize={data.pageSize}
+                  total={data.total}
+                  hasNext={data.hasNext}
+                  onPageChange={setPage}
+                />
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/classes/page.tsx b/apps/admin-portal/src/app/admin/classes/page.tsx
new file mode 100644
index 0000000..7776c7d
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/classes/page.tsx
@@ -0,0 +1,89 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import { useClasses, useClassFilter } from "@/hooks/use-classes";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Table,
+  TableRow,
+  TableCell,
+  Pagination,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+export default function ClassesPage(): ReactNode {
+  const { filter, setPage, setSearch } = useClassFilter();
+  const { data, loading, error } = useClasses(filter);
+  const [searchInput, setSearchInput] = useState("");
+
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), 300);
+    return () => clearTimeout(timer);
+  }, [searchInput, setSearch]);
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader title={t("admin.classes.title")} description="全校班级一览" />
+
+      <PaperCard className="p-4 mb-4">
+        <Input
+          type="search"
+          placeholder={t("admin.common.search")}
+          value={searchInput}
+          onChange={(e) => setSearchInput(e.target.value)}
+          style={{ width: 240 }}
+        />
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && data && (
+          <>
+            {data.items.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <Table
+                  headers={[
+                    "班级",
+                    "年级",
+                    "学校",
+                    t("admin.classes.headTeacher"),
+                    t("admin.classes.studentCount"),
+                    t("admin.common.createdAt"),
+                  ]}
+                >
+                  {data.items.map((cls) => (
+                    <TableRow key={cls.id}>
+                      <TableCell>{cls.name}</TableCell>
+                      <TableCell>{cls.gradeName}</TableCell>
+                      <TableCell>{cls.schoolName}</TableCell>
+                      <TableCell>{cls.headTeacherName || "—"}</TableCell>
+                      <TableCell>{cls.studentCount}</TableCell>
+                      <TableCell>
+                        {new Date(cls.createdAt).toLocaleDateString("zh-CN")}
+                      </TableCell>
+                    </TableRow>
+                  ))}
+                </Table>
+                <Pagination
+                  page={data.page}
+                  pageSize={data.pageSize}
+                  total={data.total}
+                  hasNext={data.hasNext}
+                  onPageChange={setPage}
+                />
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/dashboard/page.tsx b/apps/admin-portal/src/app/admin/dashboard/page.tsx
new file mode 100644
index 0000000..4c916f3
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/dashboard/page.tsx
@@ -0,0 +1,267 @@
+"use client";
+
+import { type ReactNode } from "react";
+import { useDashboard } from "@/hooks/use-dashboard";
+import {
+  PageHeader,
+  PaperCard,
+  LoadingState,
+  ErrorState,
+  Badge,
+} from "@/components/ui";
+import { NotificationPanel } from "@/components/notification-panel";
+import { t } from "@/lib/i18n";
+
+interface StatCardProps {
+  label: string;
+  value: number | string;
+  suffix?: string;
+}
+
+function StatCard({ label, value, suffix }: StatCardProps): ReactNode {
+  return (
+    <PaperCard className="p-4">
+      <p
+        style={{
+          fontSize: 11,
+          color: "var(--color-ink-muted)",
+          textTransform: "uppercase",
+          letterSpacing: "0.05em",
+        }}
+      >
+        {label}
+      </p>
+      <p
+        style={{
+          fontFamily: "var(--font-serif)",
+          fontSize: 28,
+          color: "var(--color-ink)",
+          margin: "8px 0 0 0",
+        }}
+      >
+        {value}
+        {suffix && (
+          <span
+            style={{
+              fontSize: 14,
+              color: "var(--color-ink-muted)",
+              marginLeft: 4,
+            }}
+          >
+            {suffix}
+          </span>
+        )}
+      </p>
+    </PaperCard>
+  );
+}
+
+export default function DashboardPage(): ReactNode {
+  const { data, loading, error } = useDashboard();
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.dashboard.title")}
+        description="全局概览与系统健康"
+      />
+
+      <NotificationPanel />
+
+      {loading && <LoadingState />}
+      {error && <ErrorState message={error.message} />}
+      {data && (
+        <div className="flex flex-col gap-6">
+          {/* 统计卡片 */}
+          <div className="grid grid-cols-4 gap-4">
+            <StatCard
+              label={t("admin.dashboard.totalTeachers")}
+              value={data.totalTeachers}
+            />
+            <StatCard
+              label={t("admin.dashboard.totalStudents")}
+              value={data.totalStudents}
+            />
+            <StatCard
+              label={t("admin.dashboard.totalClasses")}
+              value={data.totalClasses}
+            />
+            <StatCard
+              label={t("admin.dashboard.totalSchools")}
+              value={data.totalSchools}
+            />
+            <StatCard
+              label={t("admin.dashboard.schoolAvgScore")}
+              value={data.schoolAvgScore.toFixed(1)}
+            />
+            <StatCard
+              label={t("admin.dashboard.activeUsersToday")}
+              value={data.activeUsersToday}
+            />
+            <StatCard
+              label={t("admin.dashboard.auditEventsToday")}
+              value={data.auditEventsToday}
+            />
+          </div>
+
+          {/* 趋势图（简化的表格） */}
+          <PaperCard className="p-4">
+            <h3
+              style={{
+                fontFamily: "var(--font-serif)",
+                fontSize: 16,
+                color: "var(--color-ink)",
+                marginBottom: 12,
+              }}
+            >
+              {t("admin.dashboard.trend")}
+            </h3>
+            <div style={{ overflowX: "auto" }}>
+              <table
+                style={{
+                  width: "100%",
+                  borderCollapse: "collapse",
+                  fontSize: 12,
+                }}
+              >
+                <thead>
+                  <tr style={{ borderBottom: "1px solid var(--color-rule)" }}>
+                    <th
+                      style={{
+                        textAlign: "left",
+                        padding: "6px 8px",
+                        color: "var(--color-ink-muted)",
+                      }}
+                    >
+                      日期
+                    </th>
+                    <th
+                      style={{
+                        textAlign: "right",
+                        padding: "6px 8px",
+                        color: "var(--color-ink-muted)",
+                      }}
+                    >
+                      教师
+                    </th>
+                    <th
+                      style={{
+                        textAlign: "right",
+                        padding: "6px 8px",
+                        color: "var(--color-ink-muted)",
+                      }}
+                    >
+                      学生
+                    </th>
+                    <th
+                      style={{
+                        textAlign: "right",
+                        padding: "6px 8px",
+                        color: "var(--color-ink-muted)",
+                      }}
+                    >
+                      平均分
+                    </th>
+                  </tr>
+                </thead>
+                <tbody>
+                  {data.trend.map((row) => (
+                    <tr
+                      key={row.date}
+                      style={{ borderBottom: "1px solid var(--color-rule)" }}
+                    >
+                      <td
+                        style={{
+                          padding: "6px 8px",
+                          color: "var(--color-ink)",
+                        }}
+                      >
+                        {row.date}
+                      </td>
+                      <td
+                        style={{
+                          padding: "6px 8px",
+                          textAlign: "right",
+                          color: "var(--color-ink)",
+                        }}
+                      >
+                        {row.teachers}
+                      </td>
+                      <td
+                        style={{
+                          padding: "6px 8px",
+                          textAlign: "right",
+                          color: "var(--color-ink)",
+                        }}
+                      >
+                        {row.students}
+                      </td>
+                      <td
+                        style={{
+                          padding: "6px 8px",
+                          textAlign: "right",
+                          color: "var(--color-ink)",
+                          fontFamily: "var(--font-mono)",
+                        }}
+                      >
+                        {row.avgScore.toFixed(1)}
+                      </td>
+                    </tr>
+                  ))}
+                </tbody>
+              </table>
+            </div>
+          </PaperCard>
+
+          {/* 服务健康 */}
+          <PaperCard className="p-4">
+            <h3
+              style={{
+                fontFamily: "var(--font-serif)",
+                fontSize: 16,
+                color: "var(--color-ink)",
+                marginBottom: 12,
+              }}
+            >
+              {t("admin.dashboard.serviceHealth")}
+            </h3>
+            <div className="grid grid-cols-2 gap-3">
+              {data.serviceHealth.map((svc) => (
+                <div
+                  key={svc.serviceName}
+                  style={{
+                    display: "flex",
+                    justifyContent: "space-between",
+                    alignItems: "center",
+                    padding: "8px 12px",
+                    borderBottom: "1px solid var(--color-rule)",
+                  }}
+                >
+                  <span
+                    style={{
+                      fontFamily: "var(--font-mono)",
+                      fontSize: 12,
+                      color: "var(--color-ink)",
+                    }}
+                  >
+                    {svc.serviceName}
+                  </span>
+                  <div
+                    style={{ display: "flex", alignItems: "center", gap: 8 }}
+                  >
+                    <span
+                      style={{ fontSize: 11, color: "var(--color-ink-muted)" }}
+                    >
+                      {svc.latencyMs}ms
+                    </span>
+                    <Badge status={svc.status} />
+                  </div>
+                </div>
+              ))}
+            </div>
+          </PaperCard>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/layout.tsx b/apps/admin-portal/src/app/admin/layout.tsx
new file mode 100644
index 0000000..c045036
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/layout.tsx
@@ -0,0 +1,60 @@
+"use client";
+
+import { type ReactNode, useEffect, useState } from "react";
+import { useRouter } from "next/navigation";
+import { GraphQLProvider } from "@/providers/graphql-provider";
+import { AuthProvider, useAuth } from "@/providers/auth-provider";
+import { ToastProvider } from "@/providers/toast-provider";
+import { AdminShell } from "@/components/admin-shell";
+import { MswInitializer } from "@/components/msw-initializer";
+import { WebVitalsInitializer } from "@/components/web-vitals-initializer";
+
+function AuthGuard({ children }: { children: ReactNode }) {
+  const { isAuthenticated, isLoading } = useAuth();
+  const router = useRouter();
+
+  useEffect(() => {
+    if (!isLoading && !isAuthenticated) {
+      router.replace("/login");
+    }
+  }, [isLoading, isAuthenticated, router]);
+
+  if (isLoading) {
+    return (
+      <div
+        style={{
+          display: "flex",
+          justifyContent: "center",
+          alignItems: "center",
+          minHeight: "100vh",
+        }}
+      >
+        <p style={{ color: "var(--color-ink-muted)" }}>加载中...</p>
+      </div>
+    );
+  }
+
+  if (!isAuthenticated) return null;
+
+  return <>{children}</>;
+}
+
+export default function AdminLayout({ children }: { children: ReactNode }) {
+  const [mswReady, setMswReady] = useState(false);
+
+  return (
+    <GraphQLProvider>
+      <WebVitalsInitializer />
+      <MswInitializer onReady={() => setMswReady(true)} />
+      {mswReady && (
+        <AuthProvider>
+          <ToastProvider>
+            <AuthGuard>
+              <AdminShell>{children}</AdminShell>
+            </AuthGuard>
+          </ToastProvider>
+        </AuthProvider>
+      )}
+    </GraphQLProvider>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/organization/page.tsx b/apps/admin-portal/src/app/admin/organization/page.tsx
new file mode 100644
index 0000000..137db93
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/organization/page.tsx
@@ -0,0 +1,113 @@
+"use client";
+
+import { type ReactNode, useState } from "react";
+import { OrganizationTree } from "@/components/organization-tree";
+import { PageHeader, PaperCard } from "@/components/ui";
+import { t } from "@/lib/i18n";
+import type { OrganizationNode } from "@/types/view-models";
+
+export default function OrganizationPage(): ReactNode {
+  const [selected, setSelected] = useState<OrganizationNode | null>(null);
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.organization.title")}
+        description="学校 → 年级 → 班级 三级组织架构"
+      />
+
+      <div className="flex gap-4">
+        <PaperCard className="p-4" style={{ flex: 1 }}>
+          <h3
+            style={{
+              fontFamily: "var(--font-serif)",
+              fontSize: 14,
+              color: "var(--color-ink-muted)",
+              marginBottom: 12,
+              textTransform: "uppercase",
+              letterSpacing: "0.05em",
+            }}
+          >
+            组织树
+          </h3>
+          <OrganizationTree onSelect={setSelected} />
+        </PaperCard>
+
+        <PaperCard className="p-4" style={{ width: 320 }}>
+          <h3
+            style={{
+              fontFamily: "var(--font-serif)",
+              fontSize: 14,
+              color: "var(--color-ink-muted)",
+              marginBottom: 12,
+              textTransform: "uppercase",
+              letterSpacing: "0.05em",
+            }}
+          >
+            节点详情
+          </h3>
+          {selected ? (
+            <dl style={{ fontSize: 13, color: "var(--color-ink)" }}>
+              <div style={{ marginBottom: 8 }}>
+                <dt style={{ color: "var(--color-ink-muted)", fontSize: 11 }}>
+                  名称
+                </dt>
+                <dd
+                  style={{
+                    margin: 0,
+                    fontFamily: "var(--font-serif)",
+                    fontSize: 16,
+                  }}
+                >
+                  {selected.name}
+                </dd>
+              </div>
+              <div style={{ marginBottom: 8 }}>
+                <dt style={{ color: "var(--color-ink-muted)", fontSize: 11 }}>
+                  类型
+                </dt>
+                <dd style={{ margin: 0 }}>
+                  {selected.type === "school"
+                    ? "学校"
+                    : selected.type === "grade"
+                      ? "年级"
+                      : "班级"}
+                </dd>
+              </div>
+              <div style={{ marginBottom: 8 }}>
+                <dt style={{ color: "var(--color-ink-muted)", fontSize: 11 }}>
+                  ID
+                </dt>
+                <dd
+                  style={{
+                    margin: 0,
+                    fontFamily: "var(--font-mono)",
+                    fontSize: 11,
+                  }}
+                >
+                  {selected.id}
+                </dd>
+              </div>
+              <div style={{ marginBottom: 8 }}>
+                <dt style={{ color: "var(--color-ink-muted)", fontSize: 11 }}>
+                  子节点数
+                </dt>
+                <dd style={{ margin: 0 }}>{selected.childrenCount}</dd>
+              </div>
+              <div style={{ marginBottom: 8 }}>
+                <dt style={{ color: "var(--color-ink-muted)", fontSize: 11 }}>
+                  排序
+                </dt>
+                <dd style={{ margin: 0 }}>{selected.sortOrder}</dd>
+              </div>
+            </dl>
+          ) : (
+            <p style={{ fontSize: 13, color: "var(--color-ink-muted)" }}>
+              选择左侧节点查看详情
+            </p>
+          )}
+        </PaperCard>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/permissions/page.tsx b/apps/admin-portal/src/app/admin/permissions/page.tsx
new file mode 100644
index 0000000..fee1464
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/permissions/page.tsx
@@ -0,0 +1,115 @@
+"use client";
+
+import { type ReactNode, useState } from "react";
+import { usePermissions } from "@/hooks/use-permissions";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  Select,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Table,
+  TableRow,
+  TableCell,
+  Badge,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+export default function PermissionsPage(): ReactNode {
+  const { data: permissions, loading, error } = usePermissions();
+  const [search, setSearch] = useState("");
+  const [resourceFilter, setResourceFilter] = useState("all");
+
+  const resources = Array.from(new Set(permissions.map((p) => p.resource)));
+
+  const filtered = permissions.filter((p) => {
+    if (resourceFilter !== "all" && p.resource !== resourceFilter) return false;
+    if (search) {
+      const q = search.toLowerCase();
+      return (
+        p.code.toLowerCase().includes(q) ||
+        p.name.toLowerCase().includes(q) ||
+        p.description.toLowerCase().includes(q)
+      );
+    }
+    return true;
+  });
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.permissions.title")}
+        description="查看所有权限点定义"
+      />
+
+      <PaperCard className="p-4 mb-4">
+        <div className="flex gap-3 items-center">
+          <Input
+            type="search"
+            placeholder={t("admin.common.search")}
+            value={search}
+            onChange={(e) => setSearch(e.target.value)}
+            style={{ width: 240 }}
+          />
+          <Select
+            value={resourceFilter}
+            onChange={(e) => setResourceFilter(e.target.value)}
+          >
+            <option value="all">{t("admin.common.all")}</option>
+            {resources.map((r) => (
+              <option key={r} value={r}>
+                {r}
+              </option>
+            ))}
+          </Select>
+        </div>
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && (
+          <>
+            {filtered.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <Table
+                headers={[
+                  t("admin.permissions.code"),
+                  t("admin.permissions.resource"),
+                  t("admin.permissions.action"),
+                  "名称",
+                  "说明",
+                  "系统",
+                ]}
+              >
+                {filtered.map((perm) => (
+                  <TableRow key={perm.id}>
+                    <TableCell
+                      style={{ fontFamily: "var(--font-mono)", fontSize: 12 }}
+                    >
+                      {perm.code}
+                    </TableCell>
+                    <TableCell>{perm.resource}</TableCell>
+                    <TableCell>{perm.action}</TableCell>
+                    <TableCell>{perm.name}</TableCell>
+                    <TableCell
+                      style={{ color: "var(--color-ink-muted)", fontSize: 12 }}
+                    >
+                      {perm.description}
+                    </TableCell>
+                    <TableCell>
+                      {perm.isSystem ? <Badge status="active" /> : "—"}
+                    </TableCell>
+                  </TableRow>
+                ))}
+              </Table>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/roles/page.tsx b/apps/admin-portal/src/app/admin/roles/page.tsx
new file mode 100644
index 0000000..eda9731
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/roles/page.tsx
@@ -0,0 +1,291 @@
+"use client";
+
+import { type ReactNode, useState } from "react";
+import {
+  useRoles,
+  useCreateRole,
+  useUpdateRolePermissions,
+} from "@/hooks/use-roles";
+import { usePermissions } from "@/hooks/use-permissions";
+import { useToast } from "@/providers/toast-provider";
+import {
+  PageHeader,
+  PaperCard,
+  Button,
+  LoadingState,
+  ErrorState,
+  Badge,
+} from "@/components/ui";
+import { RolePermissionMatrix } from "@/components/role-permission-matrix";
+import { t } from "@/lib/i18n";
+import type { RoleViewModel } from "@/types/view-models";
+
+export default function RolesPage(): ReactNode {
+  const { data: roles, loading, error } = useRoles();
+  const { data: permissions } = usePermissions();
+  const { show } = useToast();
+  const [createRole] = useCreateRole();
+  const [updateRolePermissions] = useUpdateRolePermissions();
+  const [selectedRoleId, setSelectedRoleId] = useState<string | null>(null);
+  const [showCreateForm, setShowCreateForm] = useState(false);
+  const [newRoleName, setNewRoleName] = useState("");
+  const [newRoleCode, setNewRoleCode] = useState("");
+  const [newRoleDescription, setNewRoleDescription] = useState("");
+  const [creating, setCreating] = useState(false);
+
+  const selectedRole: RoleViewModel | null = selectedRoleId
+    ? (roles.find((r) => r.id === selectedRoleId) ?? null)
+    : (roles[0] ?? null);
+
+  const handleCreateRole = async () => {
+    if (!newRoleName || !newRoleCode) {
+      show("warning", "请填写角色名称和代码");
+      return;
+    }
+    setCreating(true);
+    try {
+      await createRole({
+        name: newRoleName,
+        code: newRoleCode,
+        description: newRoleDescription,
+        dataScope: "SCHOOL",
+      });
+      show("success", "角色已创建");
+      setShowCreateForm(false);
+      setNewRoleName("");
+      setNewRoleCode("");
+      setNewRoleDescription("");
+      window.location.reload();
+    } catch (err) {
+      show(
+        "error",
+        "创建失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    } finally {
+      setCreating(false);
+    }
+  };
+
+  const handleSavePermissions = async (permissionCodes: string[]) => {
+    if (!selectedRole) return;
+    try {
+      await updateRolePermissions(selectedRole.id, permissionCodes);
+      show("success", "权限已更新");
+    } catch (err) {
+      show(
+        "error",
+        "更新失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    }
+  };
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.roles.title")}
+        description="管理角色、配置权限矩阵"
+        actions={
+          <Button variant="primary" onClick={() => setShowCreateForm(true)}>
+            {t("admin.roles.new")}
+          </Button>
+        }
+      />
+
+      <div className="flex gap-4">
+        {/* 左侧：角色列表 */}
+        <PaperCard className="p-4" style={{ width: 280, flexShrink: 0 }}>
+          <h3
+            style={{
+              fontFamily: "var(--font-serif)",
+              fontSize: 14,
+              color: "var(--color-ink-muted)",
+              marginBottom: 12,
+              textTransform: "uppercase",
+              letterSpacing: "0.05em",
+            }}
+          >
+            角色列表
+          </h3>
+          {loading && <LoadingState />}
+          {error && <ErrorState message={error.message} />}
+          <ul style={{ listStyle: "none", padding: 0, margin: 0 }}>
+            {roles.map((role) => (
+              <li key={role.id}>
+                <button
+                  onClick={() => setSelectedRoleId(role.id)}
+                  style={{
+                    display: "block",
+                    width: "100%",
+                    textAlign: "left",
+                    padding: "8px 12px",
+                    background:
+                      selectedRole?.id === role.id
+                        ? "var(--color-accent-light)"
+                        : "transparent",
+                    border: "none",
+                    borderLeft:
+                      selectedRole?.id === role.id
+                        ? "2px solid var(--color-accent)"
+                        : "2px solid transparent",
+                    cursor: "pointer",
+                    color: "var(--color-ink)",
+                    fontSize: 13,
+                  }}
+                >
+                  <div style={{ fontWeight: 500 }}>{role.name}</div>
+                  <div
+                    style={{
+                      fontSize: 11,
+                      color: "var(--color-ink-muted)",
+                      display: "flex",
+                      gap: 6,
+                      alignItems: "center",
+                    }}
+                  >
+                    <span>{role.code}</span>
+                    {role.isSystem && <Badge status="active" />}
+                  </div>
+                </button>
+              </li>
+            ))}
+          </ul>
+        </PaperCard>
+
+        {/* 右侧：权限矩阵 */}
+        <PaperCard className="p-4" style={{ flex: 1 }}>
+          {selectedRole && permissions.length > 0 ? (
+            <RolePermissionMatrix
+              role={selectedRole}
+              permissions={permissions}
+              onSave={handleSavePermissions}
+            />
+          ) : (
+            <LoadingState />
+          )}
+        </PaperCard>
+      </div>
+
+      {/* 新建角色对话框 */}
+      {showCreateForm && (
+        <div
+          role="dialog"
+          aria-modal="true"
+          style={{
+            position: "fixed",
+            inset: 0,
+            background: "rgba(0,0,0,0.4)",
+            display: "flex",
+            alignItems: "center",
+            justifyContent: "center",
+            zIndex: 1000,
+          }}
+        >
+          <div
+            style={{
+              width: 400,
+              padding: 24,
+              background: "var(--bg-paper)",
+              borderRadius: 8,
+              border: "1px solid var(--color-rule)",
+            }}
+          >
+            <h2
+              style={{
+                fontFamily: "var(--font-serif)",
+                fontSize: 18,
+                color: "var(--color-ink)",
+                marginBottom: 16,
+              }}
+            >
+              {t("admin.roles.new")}
+            </h2>
+            <div style={{ display: "flex", flexDirection: "column", gap: 12 }}>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  角色名称
+                </span>
+                <input
+                  type="text"
+                  value={newRoleName}
+                  onChange={(e) => setNewRoleName(e.target.value)}
+                  style={{
+                    padding: "6px 10px",
+                    border: "1px solid var(--color-rule)",
+                    borderRadius: 4,
+                    fontSize: 13,
+                  }}
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  角色代码
+                </span>
+                <input
+                  type="text"
+                  value={newRoleCode}
+                  onChange={(e) => setNewRoleCode(e.target.value)}
+                  placeholder="如 grade_leader"
+                  style={{
+                    padding: "6px 10px",
+                    border: "1px solid var(--color-rule)",
+                    borderRadius: 4,
+                    fontSize: 13,
+                    fontFamily: "var(--font-mono)",
+                  }}
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  描述
+                </span>
+                <textarea
+                  value={newRoleDescription}
+                  onChange={(e) => setNewRoleDescription(e.target.value)}
+                  rows={3}
+                  style={{
+                    padding: "6px 10px",
+                    border: "1px solid var(--color-rule)",
+                    borderRadius: 4,
+                    fontSize: 13,
+                  }}
+                />
+              </label>
+              <div
+                style={{
+                  display: "flex",
+                  justifyContent: "flex-end",
+                  gap: 8,
+                  marginTop: 8,
+                }}
+              >
+                <Button
+                  variant="secondary"
+                  onClick={() => setShowCreateForm(false)}
+                >
+                  {t("admin.common.cancel")}
+                </Button>
+                <Button
+                  variant="primary"
+                  onClick={handleCreateRole}
+                  disabled={creating}
+                >
+                  {creating
+                    ? t("admin.common.loading")
+                    : t("admin.common.save")}
+                </Button>
+              </div>
+            </div>
+          </div>
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/students/page.tsx b/apps/admin-portal/src/app/admin/students/page.tsx
new file mode 100644
index 0000000..06788ff
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/students/page.tsx
@@ -0,0 +1,112 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import { useStudents, useStudentFilter } from "@/hooks/use-students";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  Select,
+  Badge,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Table,
+  TableRow,
+  TableCell,
+  Pagination,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+export default function StudentsPage(): ReactNode {
+  const { filter, setPage, setSearch, setStatus } = useStudentFilter();
+  const { data, loading, error } = useStudents(filter);
+  const [searchInput, setSearchInput] = useState("");
+
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), 300);
+    return () => clearTimeout(timer);
+  }, [searchInput, setSearch]);
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.students.title")}
+        description="全校学生一览"
+      />
+
+      <PaperCard className="p-4 mb-4">
+        <div className="flex gap-3 items-center">
+          <Input
+            type="search"
+            placeholder={t("admin.common.search")}
+            value={searchInput}
+            onChange={(e) => setSearchInput(e.target.value)}
+            style={{ width: 240 }}
+          />
+          <Select
+            value={filter.status ?? "all"}
+            onChange={(e) => setStatus(e.target.value)}
+          >
+            <option value="all">{t("admin.common.all")}</option>
+            <option value="active">{t("admin.common.active")}</option>
+            <option value="disabled">{t("admin.common.disabled")}</option>
+          </Select>
+        </div>
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && data && (
+          <>
+            {data.items.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <Table
+                  headers={[
+                    t("admin.common.email"),
+                    t("admin.common.name"),
+                    t("admin.common.class"),
+                    t("admin.common.grade"),
+                    t("admin.common.school"),
+                    t("admin.students.guardian"),
+                    t("admin.students.guardianPhone"),
+                    t("admin.common.status"),
+                  ]}
+                >
+                  {data.items.map((student) => (
+                    <TableRow key={student.id}>
+                      <TableCell>{student.email}</TableCell>
+                      <TableCell>{student.name}</TableCell>
+                      <TableCell>{student.className}</TableCell>
+                      <TableCell>{student.gradeName}</TableCell>
+                      <TableCell>{student.schoolName}</TableCell>
+                      <TableCell>{student.guardianName ?? "—"}</TableCell>
+                      <TableCell
+                        style={{ fontFamily: "var(--font-mono)", fontSize: 12 }}
+                      >
+                        {student.guardianPhone ?? "—"}
+                      </TableCell>
+                      <TableCell>
+                        <Badge status={student.status} />
+                      </TableCell>
+                    </TableRow>
+                  ))}
+                </Table>
+                <Pagination
+                  page={data.page}
+                  pageSize={data.pageSize}
+                  total={data.total}
+                  hasNext={data.hasNext}
+                  onPageChange={setPage}
+                />
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/system/page.tsx b/apps/admin-portal/src/app/admin/system/page.tsx
new file mode 100644
index 0000000..ff6ea61
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/system/page.tsx
@@ -0,0 +1,214 @@
+"use client";
+
+import { type ReactNode, useState, useEffect, type FormEvent } from "react";
+import {
+  useSystemSettings,
+  useUpdateSystemSettings,
+} from "@/hooks/use-system-settings";
+import { useToast } from "@/providers/toast-provider";
+import {
+  PageHeader,
+  PaperCard,
+  Button,
+  Input,
+  Select,
+  LoadingState,
+  ErrorState,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+import type { SystemSettingsViewModel } from "@/types/view-models";
+
+export default function SystemPage(): ReactNode {
+  const { data, loading, error } = useSystemSettings();
+  const { show } = useToast();
+  const [updateSettings] = useUpdateSystemSettings();
+  const [form, setForm] = useState<SystemSettingsViewModel | null>(null);
+  const [saving, setSaving] = useState(false);
+
+  useEffect(() => {
+    if (data && !form) {
+      setForm(data);
+    }
+  }, [data, form]);
+
+  const handleSubmit = async (e: FormEvent<HTMLFormElement>) => {
+    e.preventDefault();
+    if (!form) return;
+    setSaving(true);
+    try {
+      await updateSettings(form);
+      show("success", t("admin.system.saveSuccess"));
+    } catch (err) {
+      show(
+        "error",
+        "保存失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    } finally {
+      setSaving(false);
+    }
+  };
+
+  const update = (field: keyof SystemSettingsViewModel, value: string) => {
+    setForm((prev) => (prev ? { ...prev, [field]: value } : prev));
+  };
+
+  return (
+    <div style={{ padding: 32, maxWidth: 720, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.system.title")}
+        description="学校基本信息、学期与本地化设置"
+      />
+
+      <PaperCard className="p-6">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {form && (
+          <form
+            onSubmit={handleSubmit}
+            style={{ display: "flex", flexDirection: "column", gap: 16 }}
+          >
+            <div className="grid grid-cols-2 gap-4">
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.schoolName")}
+                </span>
+                <Input
+                  type="text"
+                  value={form.schoolName}
+                  onChange={(e) => update("schoolName", e.target.value)}
+                  required
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.schoolCode")}
+                </span>
+                <Input
+                  type="text"
+                  value={form.schoolCode}
+                  onChange={(e) => update("schoolCode", e.target.value)}
+                  required
+                  style={{ fontFamily: "var(--font-mono)" }}
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.academicYear")}
+                </span>
+                <Input
+                  type="text"
+                  value={form.academicYear}
+                  onChange={(e) => update("academicYear", e.target.value)}
+                  placeholder="如 2025-2026"
+                  required
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.semester")}
+                </span>
+                <Select
+                  value={form.semester}
+                  onChange={(e) => update("semester", e.target.value)}
+                >
+                  <option value="first">第一学期</option>
+                  <option value="second">第二学期</option>
+                </Select>
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.contactEmail")}
+                </span>
+                <Input
+                  type="email"
+                  value={form.contactEmail}
+                  onChange={(e) => update("contactEmail", e.target.value)}
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.contactPhone")}
+                </span>
+                <Input
+                  type="tel"
+                  value={form.contactPhone}
+                  onChange={(e) => update("contactPhone", e.target.value)}
+                />
+              </label>
+              <label
+                style={{
+                  display: "flex",
+                  flexDirection: "column",
+                  gap: 4,
+                  gridColumn: "span 2",
+                }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.address")}
+                </span>
+                <Input
+                  type="text"
+                  value={form.address}
+                  onChange={(e) => update("address", e.target.value)}
+                />
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.timezone")}
+                </span>
+                <Select
+                  value={form.timezone}
+                  onChange={(e) => update("timezone", e.target.value)}
+                >
+                  <option value="Asia/Shanghai">Asia/Shanghai</option>
+                  <option value="Asia/Hong_Kong">Asia/Hong_Kong</option>
+                  <option value="UTC">UTC</option>
+                </Select>
+              </label>
+              <label
+                style={{ display: "flex", flexDirection: "column", gap: 4 }}
+              >
+                <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                  {t("admin.system.locale")}
+                </span>
+                <Select
+                  value={form.locale}
+                  onChange={(e) => update("locale", e.target.value)}
+                >
+                  <option value="zh-CN">简体中文</option>
+                  <option value="en-US">English (US)</option>
+                </Select>
+              </label>
+            </div>
+            <div
+              style={{
+                display: "flex",
+                justifyContent: "flex-end",
+                marginTop: 8,
+              }}
+            >
+              <Button variant="primary" type="submit" disabled={saving}>
+                {saving ? t("admin.common.loading") : t("admin.common.save")}
+              </Button>
+            </div>
+          </form>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/teachers/page.tsx b/apps/admin-portal/src/app/admin/teachers/page.tsx
new file mode 100644
index 0000000..23d5932
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/teachers/page.tsx
@@ -0,0 +1,115 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import { useTeachers, useTeacherFilter } from "@/hooks/use-teachers";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  Select,
+  Badge,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Table,
+  TableRow,
+  TableCell,
+  Pagination,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+export default function TeachersPage(): ReactNode {
+  const { filter, setPage, setSearch, setStatus } = useTeacherFilter();
+  const { data, loading, error } = useTeachers(filter);
+  const [searchInput, setSearchInput] = useState("");
+
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), 300);
+    return () => clearTimeout(timer);
+  }, [searchInput, setSearch]);
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.teachers.title")}
+        description="全校教师一览"
+      />
+
+      <PaperCard className="p-4 mb-4">
+        <div className="flex gap-3 items-center">
+          <Input
+            type="search"
+            placeholder={t("admin.common.search")}
+            value={searchInput}
+            onChange={(e) => setSearchInput(e.target.value)}
+            style={{ width: 240 }}
+          />
+          <Select
+            value={filter.status ?? "all"}
+            onChange={(e) => setStatus(e.target.value)}
+          >
+            <option value="all">{t("admin.common.all")}</option>
+            <option value="active">{t("admin.common.active")}</option>
+            <option value="disabled">{t("admin.common.disabled")}</option>
+            <option value="locked">{t("admin.common.locked")}</option>
+          </Select>
+        </div>
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && data && (
+          <>
+            {data.items.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <Table
+                  headers={[
+                    t("admin.common.email"),
+                    t("admin.common.name"),
+                    t("admin.common.school"),
+                    t("admin.teachers.subjects"),
+                    t("admin.teachers.classCount"),
+                    t("admin.common.status"),
+                    t("admin.common.lastLoginAt"),
+                  ]}
+                >
+                  {data.items.map((teacher) => (
+                    <TableRow key={teacher.id}>
+                      <TableCell>{teacher.email}</TableCell>
+                      <TableCell>{teacher.name}</TableCell>
+                      <TableCell>{teacher.schoolName}</TableCell>
+                      <TableCell>
+                        {teacher.subjects.join(", ") || "—"}
+                      </TableCell>
+                      <TableCell>{teacher.classCount}</TableCell>
+                      <TableCell>
+                        <Badge status={teacher.status} />
+                      </TableCell>
+                      <TableCell>
+                        {teacher.lastLoginAt
+                          ? new Date(teacher.lastLoginAt).toLocaleDateString(
+                              "zh-CN",
+                            )
+                          : "—"}
+                      </TableCell>
+                    </TableRow>
+                  ))}
+                </Table>
+                <Pagination
+                  page={data.page}
+                  pageSize={data.pageSize}
+                  total={data.total}
+                  hasNext={data.hasNext}
+                  onPageChange={setPage}
+                />
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/users/page.tsx b/apps/admin-portal/src/app/admin/users/page.tsx
new file mode 100644
index 0000000..1a9fdd9
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/users/page.tsx
@@ -0,0 +1,166 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import {
+  useUsers,
+  useUserFilter,
+  useCreateUser,
+  useUpdateUser,
+  useToggleUserStatus,
+} from "@/hooks/use-users";
+import { useRoles } from "@/hooks/use-roles";
+import { useToast } from "@/providers/toast-provider";
+import {
+  PageHeader,
+  PaperCard,
+  Input,
+  Select,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Pagination,
+} from "@/components/ui";
+import { UserManagementTable } from "@/components/user-management-table";
+import { UserFormModal, type UserFormData } from "@/components/user-form-modal";
+import { t } from "@/lib/i18n";
+import type { UserViewModel } from "@/types/view-models";
+
+export default function UsersPage(): ReactNode {
+  const { filter, setPage, setSearch, setStatus } = useUserFilter();
+  const { data, loading, error } = useUsers(filter);
+  const { data: roles } = useRoles();
+  const { show } = useToast();
+  const [createUser] = useCreateUser();
+  const [updateUser] = useUpdateUser();
+  const [toggleStatus] = useToggleUserStatus();
+  const [modalOpen, setModalOpen] = useState(false);
+  const [editingUser, setEditingUser] = useState<UserViewModel | null>(null);
+  const [searchInput, setSearchInput] = useState("");
+
+  useEffect(() => {
+    const timer = setTimeout(() => setSearch(searchInput), 300);
+    return () => clearTimeout(timer);
+  }, [searchInput, setSearch]);
+
+  const handleCreate = () => {
+    setEditingUser(null);
+    setModalOpen(true);
+  };
+
+  const handleEdit = (user: UserViewModel) => {
+    setEditingUser(user);
+    setModalOpen(true);
+  };
+
+  const handleToggleStatus = async (user: UserViewModel) => {
+    const newStatus = user.status === "active" ? "disabled" : "active";
+    try {
+      await toggleStatus(user.id, newStatus);
+      show("success", "状态已更新");
+      window.location.reload();
+    } catch (err) {
+      show(
+        "error",
+        "操作失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    }
+  };
+
+  const handleSubmit = async (formData: UserFormData) => {
+    try {
+      if (editingUser) {
+        await updateUser(editingUser.id, {
+          name: formData.name,
+          email: formData.email,
+          roleIds: formData.roleIds,
+          dataScope: formData.dataScope,
+        });
+        show("success", "用户已更新");
+      } else {
+        await createUser({
+          email: formData.email,
+          name: formData.name,
+          password: formData.password ?? "",
+          roleIds: formData.roleIds,
+          dataScope: formData.dataScope,
+        });
+        show("success", "用户已创建");
+      }
+      setModalOpen(false);
+      window.location.reload();
+    } catch (err) {
+      show(
+        "error",
+        "操作失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    }
+  };
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.users.title")}
+        description="管理所有用户账号、角色分配与状态"
+      />
+
+      <PaperCard className="p-4 mb-4">
+        <div className="flex gap-3 items-center">
+          <Input
+            type="search"
+            placeholder={t("admin.common.search")}
+            value={searchInput}
+            onChange={(e) => setSearchInput(e.target.value)}
+            style={{ width: 240 }}
+          />
+          <Select
+            value={filter.status ?? "all"}
+            onChange={(e) => setStatus(e.target.value)}
+          >
+            <option value="all">{t("admin.common.all")}</option>
+            <option value="active">{t("admin.common.active")}</option>
+            <option value="disabled">{t("admin.common.disabled")}</option>
+            <option value="locked">{t("admin.common.locked")}</option>
+          </Select>
+        </div>
+      </PaperCard>
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && data && (
+          <>
+            {data.items.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <UserManagementTable
+                  users={data.items}
+                  onEdit={handleEdit}
+                  onToggleStatus={handleToggleStatus}
+                  onCreate={handleCreate}
+                />
+                <Pagination
+                  page={data.page}
+                  pageSize={data.pageSize}
+                  total={data.total}
+                  hasNext={data.hasNext}
+                  onPageChange={setPage}
+                />
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+
+      <UserFormModal
+        open={modalOpen}
+        user={editingUser}
+        roles={roles}
+        onSubmit={handleSubmit}
+        onCancel={() => setModalOpen(false)}
+      />
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/admin/viewports/page.tsx b/apps/admin-portal/src/app/admin/viewports/page.tsx
new file mode 100644
index 0000000..7bf78b5
--- /dev/null
+++ b/apps/admin-portal/src/app/admin/viewports/page.tsx
@@ -0,0 +1,284 @@
+"use client";
+
+import { type ReactNode, useState } from "react";
+import { DndContext, type DragEndEvent, closestCenter } from "@dnd-kit/core";
+import {
+  SortableContext,
+  arrayMove,
+  useSortable,
+  verticalListSortingStrategy,
+} from "@dnd-kit/sortable";
+import { CSS } from "@dnd-kit/utilities";
+import type { ViewportConfigViewModel } from "@/types/view-models";
+import { useViewports, useUpdateViewport } from "@/hooks/use-viewports";
+import { useToast } from "@/providers/toast-provider";
+import {
+  PageHeader,
+  PaperCard,
+  Button,
+  LoadingState,
+  ErrorState,
+  EmptyState,
+  Input,
+  Select,
+} from "@/components/ui";
+import { t } from "@/lib/i18n";
+
+interface SortableViewportItemProps {
+  viewport: ViewportConfigViewModel;
+  onToggleVisible: (id: string, isVisible: boolean) => void;
+  onLabelChange: (id: string, label: string) => void;
+  onPermissionChange: (id: string, perm: string | null) => void;
+}
+
+function SortableViewportItem({
+  viewport,
+  onToggleVisible,
+  onLabelChange,
+  onPermissionChange,
+}: SortableViewportItemProps): ReactNode {
+  const {
+    attributes,
+    listeners,
+    setNodeRef,
+    transform,
+    transition,
+    isDragging,
+  } = useSortable({ id: viewport.id });
+
+  const style: React.CSSProperties = {
+    transform: CSS.Transform.toString(transform),
+    transition,
+    opacity: isDragging ? 0.5 : 1,
+    padding: "12px 16px",
+    borderBottom: "1px solid var(--color-rule)",
+    display: "grid",
+    gridTemplateColumns: "24px 120px 1fr 180px 80px 80px",
+    gap: 12,
+    alignItems: "center",
+    background: "var(--bg-paper)",
+    fontSize: 13,
+  };
+
+  return (
+    <div ref={setNodeRef} style={style}>
+      <button
+        {...attributes}
+        {...listeners}
+        aria-label="拖拽排序"
+        style={{
+          cursor: "grab",
+          background: "none",
+          border: "none",
+          color: "var(--color-ink-muted)",
+        }}
+      >
+        ⋮⋮
+      </button>
+      <span style={{ fontFamily: "var(--font-mono)", fontSize: 12 }}>
+        {viewport.key}
+      </span>
+      <Input
+        type="text"
+        value={viewport.label}
+        onChange={(e) => onLabelChange(viewport.id, e.target.value)}
+        style={{ fontSize: 13 }}
+      />
+      <Input
+        type="text"
+        value={viewport.requiredPermission ?? ""}
+        onChange={(e) =>
+          onPermissionChange(viewport.id, e.target.value || null)
+        }
+        placeholder="无需权限"
+        style={{ fontSize: 12, fontFamily: "var(--font-mono)" }}
+      />
+      <span style={{ fontSize: 11, color: "var(--color-ink-muted)" }}>
+        {viewport.scope}
+      </span>
+      <span style={{ display: "flex", alignItems: "center", gap: 4 }}>
+        <input
+          type="checkbox"
+          checked={viewport.isVisible}
+          onChange={(e) => onToggleVisible(viewport.id, e.target.checked)}
+          aria-label="是否可见"
+        />
+      </span>
+    </div>
+  );
+}
+
+export default function ViewportsPage(): ReactNode {
+  const { data: viewports, loading, error } = useViewports();
+  const { show } = useToast();
+  const [updateViewport] = useUpdateViewport();
+  const [localViewports, setLocalViewports] = useState<
+    ViewportConfigViewModel[] | null
+  >(null);
+  const [scopeFilter, setScopeFilter] = useState<string>("all");
+
+  // 同步远端数据
+  if (viewports.length > 0 && localViewports === null) {
+    setLocalViewports(viewports);
+  }
+
+  const filteredViewports = (localViewports ?? viewports).filter(
+    (v) => scopeFilter === "all" || v.scope === scopeFilter,
+  );
+
+  const handleDragEnd = (event: DragEndEvent) => {
+    const { active, over } = event;
+    if (!over || active.id === over.id) return;
+    if (!localViewports) return;
+    const oldIndex = localViewports.findIndex((v) => v.id === active.id);
+    const newIndex = localViewports.findIndex((v) => v.id === over.id);
+    if (oldIndex < 0 || newIndex < 0) return;
+    const reordered = arrayMove(localViewports, oldIndex, newIndex).map(
+      (v, i) => ({ ...v, sortOrder: i + 1 }),
+    );
+    setLocalViewports(reordered);
+  };
+
+  const handleToggleVisible = async (id: string, isVisible: boolean) => {
+    try {
+      await updateViewport(id, { isVisible });
+      show("success", "已更新");
+      setLocalViewports(
+        (prev) =>
+          prev?.map((v) => (v.id === id ? { ...v, isVisible } : v)) ?? null,
+      );
+    } catch (err) {
+      show(
+        "error",
+        "更新失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    }
+  };
+
+  const handleLabelChange = async (id: string, label: string) => {
+    setLocalViewports(
+      (prev) => prev?.map((v) => (v.id === id ? { ...v, label } : v)) ?? null,
+    );
+  };
+
+  const handlePermissionChange = async (id: string, perm: string | null) => {
+    setLocalViewports(
+      (prev) =>
+        prev?.map((v) =>
+          v.id === id ? { ...v, requiredPermission: perm } : v,
+        ) ?? null,
+    );
+  };
+
+  const handleSaveOrder = async () => {
+    if (!localViewports) return;
+    try {
+      for (const vp of localViewports) {
+        await updateViewport(vp.id, {
+          sortOrder: vp.sortOrder,
+          label: vp.label,
+          requiredPermission: vp.requiredPermission,
+          isVisible: vp.isVisible,
+        });
+      }
+      show("success", "全部已保存");
+    } catch (err) {
+      show(
+        "error",
+        "保存失败",
+        err instanceof Error ? err.message : String(err),
+      );
+    }
+  };
+
+  return (
+    <div style={{ padding: 32, maxWidth: 1200, margin: "0 auto" }}>
+      <PageHeader
+        title={t("admin.viewports.title")}
+        description="配置各端视口的路由、权限与排序"
+        actions={
+          <>
+            <Select
+              value={scopeFilter}
+              onChange={(e) => setScopeFilter(e.target.value)}
+            >
+              <option value="all">{t("admin.common.all")}</option>
+              <option value="teacher">教师端</option>
+              <option value="student">学生端</option>
+              <option value="parent">家长端</option>
+              <option value="admin">管理端</option>
+            </Select>
+            <Button variant="primary" onClick={handleSaveOrder}>
+              {t("admin.common.save")}
+            </Button>
+          </>
+        }
+      />
+
+      <PaperCard className="p-4">
+        {loading && <LoadingState />}
+        {error && <ErrorState message={error.message} />}
+        {!loading && !error && (
+          <>
+            {filteredViewports.length === 0 ? (
+              <EmptyState message={t("admin.common.empty")} />
+            ) : (
+              <>
+                <div
+                  style={{
+                    padding: "8px 16px",
+                    borderBottom: "2px solid var(--color-rule)",
+                    display: "grid",
+                    gridTemplateColumns: "24px 120px 1fr 180px 80px 80px",
+                    gap: 12,
+                    fontSize: 11,
+                    color: "var(--color-ink-muted)",
+                    textTransform: "uppercase",
+                    letterSpacing: "0.05em",
+                  }}
+                >
+                  <span></span>
+                  <span>{t("admin.viewports.key")}</span>
+                  <span>{t("admin.viewports.label")}</span>
+                  <span>{t("admin.viewports.requiredPermission")}</span>
+                  <span>{t("admin.viewports.scope")}</span>
+                  <span>{t("admin.viewports.visible")}</span>
+                </div>
+                <DndContext
+                  collisionDetection={closestCenter}
+                  onDragEnd={handleDragEnd}
+                >
+                  <SortableContext
+                    items={filteredViewports.map((v) => v.id)}
+                    strategy={verticalListSortingStrategy}
+                  >
+                    {filteredViewports.map((vp) => (
+                      <SortableViewportItem
+                        key={vp.id}
+                        viewport={vp}
+                        onToggleVisible={handleToggleVisible}
+                        onLabelChange={handleLabelChange}
+                        onPermissionChange={handlePermissionChange}
+                      />
+                    ))}
+                  </SortableContext>
+                </DndContext>
+                <p
+                  style={{
+                    fontSize: 11,
+                    color: "var(--color-ink-muted)",
+                    marginTop: 12,
+                    padding: "0 16px",
+                  }}
+                >
+                  {t("admin.viewports.dragHint")}
+                </p>
+              </>
+            )}
+          </>
+        )}
+      </PaperCard>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/api/health/route.ts b/apps/admin-portal/src/app/api/health/route.ts
new file mode 100644
index 0000000..3288f67
--- /dev/null
+++ b/apps/admin-portal/src/app/api/health/route.ts
@@ -0,0 +1,17 @@
+/**
+ * 健康检查 - Liveness
+ *
+ * GET /api/health
+ * 返回 200 表示进程存活
+ */
+import { NextResponse } from "next/server";
+
+export const dynamic = "force-dynamic";
+
+export function GET(): NextResponse {
+  return NextResponse.json({
+    status: "ok",
+    service: "admin-portal",
+    timestamp: Date.now(),
+  });
+}
diff --git a/apps/admin-portal/src/app/api/ready/route.ts b/apps/admin-portal/src/app/api/ready/route.ts
new file mode 100644
index 0000000..5e31452
--- /dev/null
+++ b/apps/admin-portal/src/app/api/ready/route.ts
@@ -0,0 +1,47 @@
+/**
+ * 就绪检查 - Readiness
+ *
+ * GET /api/ready
+ * 检查依赖服务可达性（开发期直接返回 200）
+ */
+import { NextResponse } from "next/server";
+
+export const dynamic = "force-dynamic";
+
+export async function GET(): Promise<NextResponse> {
+  // 开发期：MSW 启用时直接就绪
+  if (process.env.NEXT_PUBLIC_API_MOCKING === "enabled") {
+    return NextResponse.json({
+      status: "ready",
+      service: "admin-portal",
+      dependencies: { gateway: "mocked" },
+      timestamp: Date.now(),
+    });
+  }
+
+  // 生产：检查 api-gateway 可达性
+  const gatewayUrl = process.env.API_GATEWAY_URL ?? "http://localhost:8080";
+  try {
+    const res = await fetch(`${gatewayUrl}/healthz`, {
+      signal: AbortSignal.timeout(2000),
+    });
+    if (!res.ok) throw new Error(`gateway status ${res.status}`);
+    return NextResponse.json({
+      status: "ready",
+      service: "admin-portal",
+      dependencies: { gateway: "ok" },
+      timestamp: Date.now(),
+    });
+  } catch (err) {
+    return NextResponse.json(
+      {
+        status: "not_ready",
+        service: "admin-portal",
+        dependencies: { gateway: "unreachable" },
+        error: err instanceof Error ? err.message : String(err),
+        timestamp: Date.now(),
+      },
+      { status: 503 },
+    );
+  }
+}
diff --git a/apps/admin-portal/src/app/globals.css b/apps/admin-portal/src/app/globals.css
new file mode 100644
index 0000000..5cb8d42
--- /dev/null
+++ b/apps/admin-portal/src/app/globals.css
@@ -0,0 +1,73 @@
+@tailwind base;
+@tailwind components;
+@tailwind utilities;
+
+/* Primitive 设计令牌（Layer 1）— 白名单文件，定义原始色板 */
+:root {
+  --bg-paper: hsl(40, 20%, 98%);
+  --color-ink: hsl(25, 3%, 15%);
+  --color-ink-muted: hsl(30, 5%, 45%);
+  --color-accent: hsl(220, 60%, 35%);
+  --color-accent-light: hsl(220, 60%, 95%);
+  --color-rule: hsl(30, 10%, 90%);
+  --color-danger: hsl(0, 70%, 45%);
+  --color-danger-light: hsl(0, 70%, 95%);
+  --color-success: hsl(140, 50%, 35%);
+  --color-success-light: hsl(140, 50%, 95%);
+  --color-warning: hsl(35, 80%, 45%);
+  --color-warning-light: hsl(35, 80%, 95%);
+  --font-serif: 'Fraunces', Georgia, serif;
+  --font-sans: 'Inter', system-ui, sans-serif;
+  --font-mono: 'JetBrains Mono', monospace;
+}
+
+html, body {
+  background: var(--bg-paper);
+  color: var(--color-ink);
+  font-family: var(--font-sans);
+  -webkit-font-smoothing: antialiased;
+  -moz-osx-font-smoothing: grayscale;
+}
+
+h1, h2, h3, h4, h5, h6 {
+  font-family: var(--font-serif);
+  font-weight: 600;
+  letter-spacing: -0.01em;
+}
+
+/* 纸感分隔线 */
+.rule {
+  border-top: 1px solid var(--color-rule);
+}
+
+.rule-thin {
+  border-top: 2px solid var(--color-rule);
+}
+
+/* 左侧竖线标记 */
+.mark-left {
+  border-left: 2px solid var(--color-rule);
+  padding-left: 12px;
+}
+
+/* 焦点样式（A11y WCAG 2.2 AA）*/
+*:focus-visible {
+  outline: 2px solid var(--color-accent);
+  outline-offset: 2px;
+}
+
+/* 跳过导航链接（A11y）*/
+.skip-link {
+  position: absolute;
+  top: -40px;
+  left: 0;
+  background: var(--color-ink);
+  color: var(--bg-paper);
+  padding: 8px 16px;
+  z-index: 100;
+  transition: top 0.2s;
+}
+
+.skip-link:focus {
+  top: 0;
+}
diff --git a/apps/admin-portal/src/app/layout.tsx b/apps/admin-portal/src/app/layout.tsx
new file mode 100644
index 0000000..1704d62
--- /dev/null
+++ b/apps/admin-portal/src/app/layout.tsx
@@ -0,0 +1,27 @@
+import "./globals.css";
+import type { Metadata } from "next";
+import { Inter, Fraunces, JetBrains_Mono } from "next/font/google";
+
+const inter = Inter({ subsets: ["latin"], variable: "--font-inter" });
+const fraunces = Fraunces({ subsets: ["latin"], variable: "--font-fraunces" });
+const mono = JetBrains_Mono({ subsets: ["latin"], variable: "--font-mono" });
+
+export const metadata: Metadata = {
+  title: "Edu Admin Portal",
+  description: "K12 智慧教务平台 - 管理端",
+};
+
+export default function RootLayout({
+  children,
+}: {
+  children: React.ReactNode;
+}) {
+  return (
+    <html
+      lang="zh-CN"
+      className={`${inter.variable} ${fraunces.variable} ${mono.variable}`}
+    >
+      <body>{children}</body>
+    </html>
+  );
+}
diff --git a/apps/admin-portal/src/app/login/page.tsx b/apps/admin-portal/src/app/login/page.tsx
new file mode 100644
index 0000000..e2a68bc
--- /dev/null
+++ b/apps/admin-portal/src/app/login/page.tsx
@@ -0,0 +1,154 @@
+"use client";
+
+import { useState, type FormEvent } from "react";
+import { useRouter } from "next/navigation";
+import { useAuth } from "@/providers/auth-provider";
+import { useToast } from "@/providers/toast-provider";
+import { t } from "@/lib/i18n";
+
+/**
+ * 登录页（standalone 模式 mock 登录）
+ *
+ * 仲裁 ARB-002 §2.3：MF 模式复用 Shell /login
+ * 开发期 standalone 模式：自建 mock 登录页（MSW 拦截 /api/auth/login）
+ *
+ * Mock 凭据：admin@edu.test / admin123
+ */
+export default function LoginPage() {
+  const router = useRouter();
+  const { login } = useAuth();
+  const { show } = useToast();
+  const [email, setEmail] = useState("admin@edu.test");
+  const [password, setPassword] = useState("admin123");
+  const [loading, setLoading] = useState(false);
+
+  const handleSubmit = async (e: FormEvent<HTMLFormElement>) => {
+    e.preventDefault();
+    setLoading(true);
+    try {
+      await login(email, password);
+      show("success", "登录成功");
+      router.replace("/admin/dashboard");
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : "登录失败";
+      show("error", "登录失败", msg);
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  return (
+    <div
+      style={{
+        minHeight: "100vh",
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        background: "var(--bg-paper)",
+      }}
+    >
+      <div
+        style={{
+          width: 360,
+          padding: 32,
+          background: "var(--bg-paper)",
+          border: "1px solid var(--color-rule)",
+          borderRadius: 8,
+        }}
+      >
+        <h1
+          style={{
+            fontFamily: "var(--font-serif)",
+            color: "var(--color-ink)",
+            fontSize: 24,
+            marginBottom: 4,
+          }}
+        >
+          Edu 管理端
+        </h1>
+        <p
+          style={{
+            color: "var(--color-ink-muted)",
+            fontSize: 13,
+            marginBottom: 24,
+          }}
+        >
+          {t("admin.auth.welcome")}
+        </p>
+
+        <form
+          onSubmit={handleSubmit}
+          style={{ display: "flex", flexDirection: "column", gap: 16 }}
+        >
+          <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+            <span style={{ fontSize: 13, color: "var(--color-ink)" }}>
+              {t("admin.common.email")}
+            </span>
+            <input
+              type="email"
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              required
+              autoComplete="email"
+              style={{
+                padding: "8px 12px",
+                border: "1px solid var(--color-rule)",
+                borderRadius: 4,
+                background: "var(--bg-paper)",
+                color: "var(--color-ink)",
+                fontSize: 14,
+              }}
+            />
+          </label>
+          <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+            <span style={{ fontSize: 13, color: "var(--color-ink)" }}>
+              {t("admin.users.password")}
+            </span>
+            <input
+              type="password"
+              value={password}
+              onChange={(e) => setPassword(e.target.value)}
+              required
+              autoComplete="current-password"
+              style={{
+                padding: "8px 12px",
+                border: "1px solid var(--color-rule)",
+                borderRadius: 4,
+                background: "var(--bg-paper)",
+                color: "var(--color-ink)",
+                fontSize: 14,
+              }}
+            />
+          </label>
+          <button
+            type="submit"
+            disabled={loading}
+            style={{
+              padding: "10px 16px",
+              background: "var(--color-accent)",
+              color: "var(--bg-paper)",
+              border: "none",
+              borderRadius: 4,
+              fontSize: 14,
+              cursor: loading ? "not-allowed" : "pointer",
+              opacity: loading ? 0.6 : 1,
+            }}
+          >
+            {loading ? t("admin.common.loading") : "登录"}
+          </button>
+        </form>
+
+        <p
+          style={{
+            marginTop: 16,
+            fontSize: 12,
+            color: "var(--color-ink-muted)",
+            textAlign: "center",
+          }}
+        >
+          Mock: admin@edu.test / admin123
+        </p>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/app/page.tsx b/apps/admin-portal/src/app/page.tsx
new file mode 100644
index 0000000..40b0890
--- /dev/null
+++ b/apps/admin-portal/src/app/page.tsx
@@ -0,0 +1,5 @@
+import { redirect } from "next/navigation";
+
+export default function RootPage() {
+  redirect("/admin/dashboard");
+}
diff --git a/apps/admin-portal/src/components/admin-shell.tsx b/apps/admin-portal/src/components/admin-shell.tsx
new file mode 100644
index 0000000..1e2aa83
--- /dev/null
+++ b/apps/admin-portal/src/components/admin-shell.tsx
@@ -0,0 +1,176 @@
+"use client";
+
+import { type ReactNode } from "react";
+import Link from "next/link";
+import { usePathname } from "next/navigation";
+import { useAuth } from "@/providers/auth-provider";
+import { useToast } from "@/providers/toast-provider";
+import { t } from "@/lib/i18n";
+import { ROUTE_PERMISSIONS } from "@/lib/permissions";
+
+interface NavItem {
+  route: string;
+  label: string;
+}
+
+const NAV_ITEMS: NavItem[] = [
+  { route: "/admin/dashboard", label: t("admin.nav.dashboard") },
+  { route: "/admin/users", label: t("admin.nav.users") },
+  { route: "/admin/roles", label: t("admin.nav.roles") },
+  { route: "/admin/permissions", label: t("admin.nav.permissions") },
+  { route: "/admin/viewports", label: t("admin.nav.viewports") },
+  { route: "/admin/organization", label: t("admin.nav.organization") },
+  { route: "/admin/classes", label: t("admin.nav.classes") },
+  { route: "/admin/teachers", label: t("admin.nav.teachers") },
+  { route: "/admin/students", label: t("admin.nav.students") },
+  { route: "/admin/audit-logs", label: t("admin.nav.auditLogs") },
+  { route: "/admin/system", label: t("admin.nav.system") },
+];
+
+export function AdminShell({ children }: { children: ReactNode }) {
+  const pathname = usePathname();
+  const { user, isLoading, isAuthenticated, logout, hasPermission } = useAuth();
+  const { show } = useToast();
+
+  if (isLoading) {
+    return (
+      <div
+        style={{
+          display: "flex",
+          justifyContent: "center",
+          alignItems: "center",
+          minHeight: "100vh",
+        }}
+      >
+        <p style={{ color: "var(--color-ink-muted)" }}>
+          {t("admin.common.loading")}
+        </p>
+      </div>
+    );
+  }
+
+  if (!isAuthenticated) {
+    return null;
+  }
+
+  const visibleNavItems = NAV_ITEMS.filter((item) => {
+    const perm = ROUTE_PERMISSIONS[item.route];
+    if (!perm) return true;
+    return hasPermission(perm);
+  });
+
+  const handleLogout = () => {
+    logout();
+    show("info", t("admin.auth.logout"));
+  };
+
+  return (
+    <div
+      className="min-h-screen flex"
+      style={{ background: "var(--bg-paper)" }}
+    >
+      {/* 跳过导航链接（A11y WCAG 2.2 AA）*/}
+      <a href="#main-content" className="skip-link">
+        跳到主内容
+      </a>
+
+      {/* 左侧栏：导航树 */}
+      <aside
+        className="w-56 flex-shrink-0 border-r relative flex flex-col"
+        style={{
+          borderColor: "var(--color-rule)",
+          background: "var(--bg-paper)",
+        }}
+        aria-label="管理端导航"
+      >
+        <div className="px-6 py-6">
+          <h1
+            className="text-xl"
+            style={{
+              fontFamily: "var(--font-serif)",
+              color: "var(--color-ink)",
+            }}
+          >
+            Edu
+          </h1>
+          <p
+            className="text-xs mt-1"
+            style={{ color: "var(--color-ink-muted)" }}
+          >
+            {t("admin.auth.welcome")}
+          </p>
+        </div>
+        <div className="rule-thin mx-6" />
+
+        <nav className="mt-4 px-3 flex-1 overflow-y-auto" aria-label="主导航">
+          <ul style={{ listStyle: "none", padding: 0, margin: 0 }}>
+            {visibleNavItems.map((item) => {
+              const active =
+                pathname === item.route ||
+                pathname.startsWith(item.route + "/");
+              return (
+                <li key={item.route}>
+                  <Link
+                    href={item.route}
+                    className="block px-3 py-2 text-sm transition-colors"
+                    style={{
+                      color: active
+                        ? "var(--color-accent)"
+                        : "var(--color-ink)",
+                      borderLeft: active
+                        ? "2px solid var(--color-accent)"
+                        : "2px solid transparent",
+                      fontFamily: active
+                        ? "var(--font-serif)"
+                        : "var(--font-sans)",
+                      textDecoration: "none",
+                    }}
+                  >
+                    {item.label}
+                  </Link>
+                </li>
+              );
+            })}
+          </ul>
+        </nav>
+
+        {/* 底部：用户信息 + 登出 */}
+        <div
+          className="px-6 py-4 border-t"
+          style={{ borderColor: "var(--color-rule)" }}
+        >
+          {user && (
+            <div className="mb-2">
+              <p className="text-sm" style={{ color: "var(--color-ink)" }}>
+                {user.name}
+              </p>
+              <p
+                className="text-xs"
+                style={{ color: "var(--color-ink-muted)" }}
+              >
+                {user.roles.join(", ") || "无角色"}
+              </p>
+            </div>
+          )}
+          <button
+            onClick={handleLogout}
+            className="text-xs uppercase tracking-wide hover:opacity-70"
+            style={{
+              color: "var(--color-ink-muted)",
+              background: "none",
+              border: "none",
+              cursor: "pointer",
+            }}
+          >
+            {t("admin.auth.logout")}
+          </button>
+        </div>
+      </aside>
+
+      {/* 中间：内容区（纸面） */}
+      <main id="main-content" className="flex-1 overflow-auto" role="main">
+        {children}
+      </main>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/msw-initializer.tsx b/apps/admin-portal/src/components/msw-initializer.tsx
new file mode 100644
index 0000000..e434bb1
--- /dev/null
+++ b/apps/admin-portal/src/components/msw-initializer.tsx
@@ -0,0 +1,24 @@
+"use client";
+
+import { useEffect } from "react";
+
+/**
+ * MSW 初始化组件
+ *
+ * NEXT_PUBLIC_API_MOCKING=enabled 时启动 MSW worker
+ * 上游就绪后设为 disabled，使用真实 API
+ */
+export function MswInitializer({ onReady }: { onReady: () => void }) {
+  useEffect(() => {
+    if (process.env.NEXT_PUBLIC_API_MOCKING === "enabled") {
+      import("@/mocks/browser")
+        .then(({ worker }) => worker.start({ onUnhandledRequest: "bypass" }))
+        .then(onReady)
+        .catch(() => onReady());
+    } else {
+      onReady();
+    }
+  }, [onReady]);
+
+  return null;
+}
diff --git a/apps/admin-portal/src/components/notification-panel.tsx b/apps/admin-portal/src/components/notification-panel.tsx
new file mode 100644
index 0000000..ca5aced
--- /dev/null
+++ b/apps/admin-portal/src/components/notification-panel.tsx
@@ -0,0 +1,164 @@
+"use client";
+
+import { type ReactNode } from "react";
+import { useWebSocket } from "@/hooks/use-websocket";
+import { useToast } from "@/providers/toast-provider";
+import { Badge } from "./ui";
+import { t } from "@/lib/i18n";
+import type { WsNotification } from "@/types/view-models";
+
+const severityColor: Record<WsNotification["severity"], string> = {
+  info: "var(--color-accent)",
+  warning: "var(--color-warning)",
+  error: "var(--color-danger)",
+};
+
+const typeLabel: Record<WsNotification["type"], string> = {
+  audit_alert: t("admin.notification.auditAlert"),
+  abnormal_login: t("admin.notification.abnormalLogin"),
+  system_error: t("admin.notification.systemError"),
+  info: "系统通知",
+};
+
+export function NotificationPanel(): ReactNode {
+  const { notifications, connected, dismiss, clear } = useWebSocket(20);
+  const { show } = useToast();
+
+  return (
+    <div
+      style={{
+        position: "fixed",
+        top: 16,
+        right: 16,
+        width: 320,
+        maxHeight: "60vh",
+        overflowY: "auto",
+        background: "var(--bg-paper)",
+        border: "1px solid var(--color-rule)",
+        borderRadius: 8,
+        boxShadow: "0 4px 16px rgba(0,0,0,0.08)",
+        zIndex: 100,
+      }}
+      role="region"
+      aria-label="通知中心"
+    >
+      <div
+        style={{
+          display: "flex",
+          alignItems: "center",
+          justifyContent: "space-between",
+          padding: "10px 16px",
+          borderBottom: "1px solid var(--color-rule)",
+        }}
+      >
+        <h3
+          style={{
+            fontFamily: "var(--font-serif)",
+            fontSize: 14,
+            color: "var(--color-ink)",
+            margin: 0,
+          }}
+        >
+          {t("admin.notification.title")}
+        </h3>
+        <div style={{ display: "flex", alignItems: "center", gap: 8 }}>
+          <Badge status={connected ? "healthy" : "down"} />
+          {notifications.length > 0 && (
+            <button
+              onClick={clear}
+              style={{
+                background: "none",
+                border: "none",
+                color: "var(--color-ink-muted)",
+                fontSize: 11,
+                cursor: "pointer",
+              }}
+            >
+              清空
+            </button>
+          )}
+        </div>
+      </div>
+
+      <ul style={{ listStyle: "none", padding: 0, margin: 0 }}>
+        {notifications.length === 0 && (
+          <li
+            style={{
+              padding: "24px 16px",
+              textAlign: "center",
+              color: "var(--color-ink-muted)",
+              fontSize: 12,
+            }}
+          >
+            暂无通知
+          </li>
+        )}
+        {notifications.map((notif) => (
+          <li
+            key={notif.id}
+            style={{
+              padding: "10px 16px",
+              borderBottom: "1px solid var(--color-rule)",
+              borderLeft: `3px solid ${severityColor[notif.severity]}`,
+            }}
+          >
+            <button
+              type="button"
+              style={{
+                background: "none",
+                border: "none",
+                cursor: "pointer",
+                padding: 0,
+                width: "100%",
+                textAlign: "left",
+              }}
+              onClick={() => {
+                show(
+                  notif.severity === "error"
+                    ? "error"
+                    : notif.severity === "warning"
+                      ? "warning"
+                      : "info",
+                  notif.title,
+                  notif.message,
+                );
+                dismiss(notif.id);
+              }}
+              aria-label={`${typeLabel[notif.type]}: ${notif.message}`}
+            >
+              <div
+                style={{
+                  display: "flex",
+                  justifyContent: "space-between",
+                  alignItems: "baseline",
+                }}
+              >
+                <span
+                  style={{
+                    fontSize: 13,
+                    color: "var(--color-ink)",
+                    fontWeight: 500,
+                  }}
+                >
+                  {typeLabel[notif.type]}
+                </span>
+                <span style={{ fontSize: 10, color: "var(--color-ink-muted)" }}>
+                  {new Date(notif.timestamp).toLocaleTimeString("zh-CN")}
+                </span>
+              </div>
+              <p
+                style={{
+                  fontSize: 12,
+                  color: "var(--color-ink-muted)",
+                  margin: "4px 0 0 0",
+                }}
+              >
+                {notif.message}
+              </p>
+            </button>
+          </li>
+        ))}
+      </ul>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/organization-tree.tsx b/apps/admin-portal/src/components/organization-tree.tsx
new file mode 100644
index 0000000..9e9f4b4
--- /dev/null
+++ b/apps/admin-portal/src/components/organization-tree.tsx
@@ -0,0 +1,188 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import { useOrganization } from "@/hooks/use-organization";
+import type { OrganizationNode } from "@/types/view-models";
+
+interface OrganizationTreeProps {
+  onSelect?: (node: OrganizationNode) => void;
+}
+
+interface TreeNodeProps {
+  node: OrganizationNode;
+  level: number;
+  onSelect?: (node: OrganizationNode) => void;
+}
+
+const typeLabel: Record<OrganizationNode["type"], string> = {
+  school: "学校",
+  grade: "年级",
+  class: "班级",
+};
+
+function TreeNode({ node, level, onSelect }: TreeNodeProps): ReactNode {
+  const [expanded, setExpanded] = useState(level < 2);
+  const [children, setChildren] = useState<OrganizationNode[]>([]);
+  const [loaded, setLoaded] = useState(false);
+  const [selected, setSelected] = useState(false);
+  const { data, loading } = useOrganization(expanded ? node.id : undefined);
+
+  useEffect(() => {
+    if (expanded && !loaded && data.length > 0) {
+      setChildren(data);
+      setLoaded(true);
+    }
+  }, [expanded, loaded, data]);
+
+  const hasChildren = node.childrenCount > 0;
+  void loading;
+
+  const handleKeyDown = (e: React.KeyboardEvent<HTMLButtonElement>) => {
+    if (e.key === "Enter" || e.key === " ") {
+      e.preventDefault();
+      setSelected(true);
+      onSelect?.(node);
+    }
+  };
+
+  return (
+    <div>
+      <button
+        type="button"
+        style={{
+          display: "flex",
+          alignItems: "center",
+          width: "100%",
+          padding: "6px 12px",
+          paddingLeft: 12 + level * 16,
+          cursor: "pointer",
+          color: "var(--color-ink)",
+          fontSize: 13,
+          background: selected ? "var(--color-accent-light)" : "transparent",
+          border: "none",
+          borderBottom: "1px solid var(--color-rule)",
+          textAlign: "left",
+        }}
+        onClick={() => {
+          setSelected(true);
+          onSelect?.(node);
+        }}
+        onKeyDown={handleKeyDown}
+        role="treeitem"
+        aria-expanded={hasChildren ? expanded : undefined}
+        aria-selected={selected}
+      >
+        {hasChildren ? (
+          <span
+            onClick={(e) => {
+              e.stopPropagation();
+              setExpanded((v) => !v);
+            }}
+            style={{
+              cursor: "pointer",
+              color: "var(--color-ink-muted)",
+              padding: 0,
+              marginRight: 4,
+              fontSize: 10,
+              userSelect: "none",
+            }}
+            role="button"
+            tabIndex={0}
+            onKeyDown={(e) => {
+              if (e.key === "Enter" || e.key === " ") {
+                e.preventDefault();
+                e.stopPropagation();
+                setExpanded((v) => !v);
+              }
+            }}
+            aria-label={expanded ? "折叠" : "展开"}
+          >
+            {expanded ? "▼" : "▶"}
+          </span>
+        ) : (
+          <span style={{ display: "inline-block", width: 14 }} />
+        )}
+        <span
+          style={{
+            fontFamily:
+              node.type === "school" ? "var(--font-serif)" : "var(--font-sans)",
+          }}
+        >
+          {node.name}
+        </span>
+        <span
+          style={{
+            marginLeft: 8,
+            fontSize: 10,
+            color: "var(--color-ink-muted)",
+            padding: "1px 6px",
+            border: "1px solid var(--color-rule)",
+            borderRadius: 8,
+          }}
+        >
+          {typeLabel[node.type]}
+        </span>
+        {hasChildren && (
+          <span
+            style={{
+              marginLeft: 8,
+              fontSize: 11,
+              color: "var(--color-ink-muted)",
+            }}
+          >
+            ({node.childrenCount})
+          </span>
+        )}
+      </button>
+      {expanded && hasChildren && (
+        <div role="group">
+          {children.map((child) => (
+            <TreeNode
+              key={child.id}
+              node={child}
+              level={level + 1}
+              onSelect={onSelect}
+            />
+          ))}
+        </div>
+      )}
+    </div>
+  );
+}
+
+export function OrganizationTree({
+  onSelect,
+}: OrganizationTreeProps): ReactNode {
+  const { data: roots, loading, error } = useOrganization(null);
+
+  if (loading)
+    return (
+      <div
+        style={{ padding: 16, color: "var(--color-ink-muted)", fontSize: 13 }}
+      >
+        加载中...
+      </div>
+    );
+  if (error)
+    return (
+      <div style={{ padding: 16, color: "var(--color-danger)", fontSize: 13 }}>
+        {error.message}
+      </div>
+    );
+  if (roots.length === 0)
+    return (
+      <div
+        style={{ padding: 16, color: "var(--color-ink-muted)", fontSize: 13 }}
+      >
+        暂无数据
+      </div>
+    );
+
+  return (
+    <div role="tree" aria-label="组织架构树">
+      {roots.map((node) => (
+        <TreeNode key={node.id} node={node} level={0} onSelect={onSelect} />
+      ))}
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/role-permission-matrix.tsx b/apps/admin-portal/src/components/role-permission-matrix.tsx
new file mode 100644
index 0000000..e392ef2
--- /dev/null
+++ b/apps/admin-portal/src/components/role-permission-matrix.tsx
@@ -0,0 +1,147 @@
+"use client";
+
+import { type ReactNode, useState, useEffect } from "react";
+import type { RoleViewModel, PermissionViewModel } from "@/types/view-models";
+import { Table, TableRow, TableCell, Button, Badge } from "./ui";
+import { t } from "@/lib/i18n";
+
+interface RolePermissionMatrixProps {
+  role: RoleViewModel;
+  permissions: PermissionViewModel[];
+  onSave: (permissionCodes: string[]) => Promise<void>;
+}
+
+export function RolePermissionMatrix({
+  role,
+  permissions,
+  onSave,
+}: RolePermissionMatrixProps): ReactNode {
+  const [selected, setSelected] = useState<Set<string>>(
+    new Set(role.permissions.map((p) => p.code)),
+  );
+  const [saving, setSaving] = useState(false);
+
+  useEffect(() => {
+    setSelected(new Set(role.permissions.map((p) => p.code)));
+  }, [role]);
+
+  const toggle = (code: string) => {
+    setSelected((prev) => {
+      const next = new Set(prev);
+      if (next.has(code)) {
+        next.delete(code);
+      } else {
+        next.add(code);
+      }
+      return next;
+    });
+  };
+
+  const toggleResource = (resource: string) => {
+    const resourcePerms = permissions.filter((p) => p.resource === resource);
+    const allSelected = resourcePerms.every((p) => selected.has(p.code));
+    setSelected((prev) => {
+      const next = new Set(prev);
+      if (allSelected) {
+        resourcePerms.forEach((p) => next.delete(p.code));
+      } else {
+        resourcePerms.forEach((p) => next.add(p.code));
+      }
+      return next;
+    });
+  };
+
+  const handleSave = async () => {
+    setSaving(true);
+    try {
+      await onSave(Array.from(selected));
+    } finally {
+      setSaving(false);
+    }
+  };
+
+  // 按资源分组
+  const resourceGroups = permissions.reduce<
+    Record<string, PermissionViewModel[]>
+  >((acc, p) => {
+    const arr = acc[p.resource] ?? (acc[p.resource] = []);
+    arr.push(p);
+    return acc;
+  }, {});
+
+  return (
+    <div>
+      <div className="flex items-center justify-between mb-4">
+        <div>
+          <h3
+            style={{
+              fontFamily: "var(--font-serif)",
+              fontSize: 16,
+              color: "var(--color-ink)",
+            }}
+          >
+            {role.name}
+            {role.isSystem && <Badge status="active" />}
+          </h3>
+          <p style={{ fontSize: 12, color: "var(--color-ink-muted)" }}>
+            {role.code} · {t("admin.roles.userCount")}: {role.userCount} ·{" "}
+            {role.dataScope}
+          </p>
+        </div>
+        <Button variant="primary" onClick={handleSave} disabled={saving}>
+          {saving ? t("admin.common.loading") : t("admin.common.save")}
+        </Button>
+      </div>
+
+      <Table headers={["资源", "权限点", "操作", "说明", "授权"]}>
+        {Object.entries(resourceGroups).map(([resource, perms]) =>
+          perms.map((perm, idx) => (
+            <TableRow key={perm.id}>
+              {idx === 0 && (
+                <TableCell
+                  rowSpan={perms.length}
+                  style={{ verticalAlign: "top", fontWeight: 500 }}
+                >
+                  <label
+                    style={{ display: "flex", alignItems: "center", gap: 6 }}
+                  >
+                    <input
+                      type="checkbox"
+                      checked={perms.every((p) => selected.has(p.code))}
+                      ref={(el) => {
+                        if (el)
+                          el.indeterminate =
+                            perms.some((p) => selected.has(p.code)) &&
+                            !perms.every((p) => selected.has(p.code));
+                      }}
+                      onChange={() => toggleResource(resource)}
+                    />
+                    {resource}
+                  </label>
+                </TableCell>
+              )}
+              <TableCell
+                style={{ fontFamily: "var(--font-mono)", fontSize: 12 }}
+              >
+                {perm.code}
+              </TableCell>
+              <TableCell>{perm.action}</TableCell>
+              <TableCell
+                style={{ color: "var(--color-ink-muted)", fontSize: 12 }}
+              >
+                {perm.description}
+              </TableCell>
+              <TableCell>
+                <input
+                  type="checkbox"
+                  checked={selected.has(perm.code)}
+                  onChange={() => toggle(perm.code)}
+                />
+              </TableCell>
+            </TableRow>
+          )),
+        )}
+      </Table>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/ui.tsx b/apps/admin-portal/src/components/ui.tsx
new file mode 100644
index 0000000..27620a0
--- /dev/null
+++ b/apps/admin-portal/src/components/ui.tsx
@@ -0,0 +1,375 @@
+/**
+ * 通用 UI 组件（纸面风格）
+ *
+ * 复用 @edu/ui-components 中的基础组件，扩展 admin 专用组件
+ */
+import { type ReactNode, type ButtonHTMLAttributes } from "react";
+
+/** 纸面卡片 */
+export function PaperCard({
+  children,
+  className = "",
+  style,
+}: {
+  children: ReactNode;
+  className?: string;
+  style?: React.CSSProperties;
+}): ReactNode {
+  return (
+    <div
+      className={`bg-white border rounded-lg ${className}`}
+      style={{
+        borderColor: "var(--color-rule)",
+        background: "var(--bg-paper)",
+        ...style,
+      }}
+    >
+      {children}
+    </div>
+  );
+}
+
+/** 页面标题 */
+export function PageHeader({
+  title,
+  description,
+  actions,
+}: {
+  title: string;
+  description?: string;
+  actions?: ReactNode;
+}): ReactNode {
+  return (
+    <div
+      className="flex items-start justify-between mb-6 pb-4"
+      style={{ borderBottom: "1px solid var(--color-rule)" }}
+    >
+      <div>
+        <h1
+          style={{
+            fontFamily: "var(--font-serif)",
+            fontSize: 24,
+            color: "var(--color-ink)",
+            margin: 0,
+          }}
+        >
+          {title}
+        </h1>
+        {description && (
+          <p
+            style={{
+              color: "var(--color-ink-muted)",
+              fontSize: 13,
+              marginTop: 4,
+            }}
+          >
+            {description}
+          </p>
+        )}
+      </div>
+      {actions && <div className="flex gap-2">{actions}</div>}
+    </div>
+  );
+}
+
+/** 按钮 */
+type ButtonVariant = "primary" | "secondary" | "ghost" | "danger";
+
+interface ButtonProps extends ButtonHTMLAttributes<HTMLButtonElement> {
+  variant?: ButtonVariant;
+}
+
+const buttonStyles: Record<ButtonVariant, Record<string, string>> = {
+  primary: {
+    background: "var(--color-accent)",
+    color: "var(--bg-paper)",
+    border: "1px solid var(--color-accent)",
+  },
+  secondary: {
+    background: "var(--bg-paper)",
+    color: "var(--color-ink)",
+    border: "1px solid var(--color-rule)",
+  },
+  ghost: {
+    background: "transparent",
+    color: "var(--color-ink-muted)",
+    border: "1px solid transparent",
+  },
+  danger: {
+    background: "var(--color-danger)",
+    color: "var(--bg-paper)",
+    border: "1px solid var(--color-danger)",
+  },
+};
+
+export function Button({
+  variant = "secondary",
+  children,
+  style,
+  ...props
+}: ButtonProps): ReactNode {
+  return (
+    <button
+      {...props}
+      style={{
+        ...buttonStyles[variant],
+        padding: "6px 14px",
+        fontSize: 13,
+        borderRadius: 4,
+        cursor: props.disabled ? "not-allowed" : "pointer",
+        opacity: props.disabled ? 0.5 : 1,
+        ...style,
+      }}
+    >
+      {children}
+    </button>
+  );
+}
+
+/** 输入框 */
+export function Input({
+  style,
+  ...props
+}: React.InputHTMLAttributes<HTMLInputElement>): ReactNode {
+  return (
+    <input
+      {...props}
+      style={{
+        padding: "6px 10px",
+        border: "1px solid var(--color-rule)",
+        borderRadius: 4,
+        background: "var(--bg-paper)",
+        color: "var(--color-ink)",
+        fontSize: 13,
+        ...style,
+      }}
+    />
+  );
+}
+
+/** 选择框 */
+export function Select({
+  style,
+  children,
+  ...props
+}: React.SelectHTMLAttributes<HTMLSelectElement>): ReactNode {
+  return (
+    <select
+      {...props}
+      style={{
+        padding: "6px 10px",
+        border: "1px solid var(--color-rule)",
+        borderRadius: 4,
+        background: "var(--bg-paper)",
+        color: "var(--color-ink)",
+        fontSize: 13,
+        ...style,
+      }}
+    >
+      {children}
+    </select>
+  );
+}
+
+/** 标签（状态徽章） */
+export function Badge({ status }: { status: string }): ReactNode {
+  const colorMap: Record<string, string> = {
+    active: "var(--color-success)",
+    disabled: "var(--color-ink-muted)",
+    locked: "var(--color-danger)",
+    healthy: "var(--color-success)",
+    degraded: "var(--color-warning)",
+    down: "var(--color-danger)",
+  };
+  const labelMap: Record<string, string> = {
+    active: "启用",
+    disabled: "禁用",
+    locked: "锁定",
+    healthy: "健康",
+    degraded: "降级",
+    down: "异常",
+  };
+  const color = colorMap[status] ?? "var(--color-ink-muted)";
+  return (
+    <span
+      style={{
+        display: "inline-block",
+        padding: "2px 8px",
+        fontSize: 11,
+        borderRadius: 10,
+        background: `${color}20`,
+        color,
+        border: `1px solid ${color}40`,
+      }}
+    >
+      {labelMap[status] ?? status}
+    </span>
+  );
+}
+
+/** 表格 */
+export function Table({
+  headers,
+  children,
+}: {
+  headers: string[];
+  children: ReactNode;
+}): ReactNode {
+  return (
+    <div className="overflow-x-auto">
+      <table
+        className="w-full"
+        style={{ borderCollapse: "collapse", fontSize: 13 }}
+      >
+        <thead>
+          <tr style={{ borderBottom: "2px solid var(--color-rule)" }}>
+            {headers.map((h, i) => (
+              <th
+                key={h}
+                style={{
+                  textAlign: "left",
+                  padding: "10px 12px",
+                  color: "var(--color-ink-muted)",
+                  fontWeight: 500,
+                  fontSize: 12,
+                  textTransform: "uppercase",
+                  letterSpacing: "0.05em",
+                  whiteSpace: i === 0 ? "nowrap" : "normal",
+                }}
+              >
+                {h}
+              </th>
+            ))}
+          </tr>
+        </thead>
+        <tbody>{children}</tbody>
+      </table>
+    </div>
+  );
+}
+
+/** 表格行 */
+export function TableRow({ children }: { children: ReactNode }): ReactNode {
+  return (
+    <tr style={{ borderBottom: "1px solid var(--color-rule)" }}>{children}</tr>
+  );
+}
+
+/** 表格单元格 */
+export function TableCell({
+  children,
+  style,
+  rowSpan,
+}: {
+  children: ReactNode;
+  style?: React.CSSProperties;
+  rowSpan?: number;
+}): ReactNode {
+  return (
+    <td
+      style={{ padding: "10px 12px", color: "var(--color-ink)", ...style }}
+      rowSpan={rowSpan}
+    >
+      {children}
+    </td>
+  );
+}
+
+/** 空状态 */
+export function EmptyState({ message }: { message: string }): ReactNode {
+  return (
+    <div
+      style={{
+        textAlign: "center",
+        padding: "48px 16px",
+        color: "var(--color-ink-muted)",
+      }}
+    >
+      <p style={{ fontSize: 14 }}>{message}</p>
+    </div>
+  );
+}
+
+/** 加载状态 */
+export function LoadingState(): ReactNode {
+  return (
+    <div
+      style={{
+        textAlign: "center",
+        padding: "48px 16px",
+        color: "var(--color-ink-muted)",
+      }}
+    >
+      <p style={{ fontSize: 14 }}>加载中...</p>
+    </div>
+  );
+}
+
+/** 错误状态 */
+export function ErrorState({
+  message,
+  onRetry,
+}: {
+  message: string;
+  onRetry?: () => void;
+}): ReactNode {
+  return (
+    <div
+      style={{
+        textAlign: "center",
+        padding: "48px 16px",
+        color: "var(--color-danger)",
+      }}
+    >
+      <p style={{ fontSize: 14, marginBottom: 8 }}>{message}</p>
+      {onRetry && (
+        <Button variant="secondary" onClick={onRetry}>
+          重试
+        </Button>
+      )}
+    </div>
+  );
+}
+
+/** 分页 */
+export function Pagination({
+  page,
+  pageSize,
+  total,
+  hasNext,
+  onPageChange,
+}: {
+  page: number;
+  pageSize: number;
+  total: number;
+  hasNext: boolean;
+  onPageChange: (page: number) => void;
+}): ReactNode {
+  const totalPages = Math.ceil(total / pageSize);
+  return (
+    <div
+      className="flex items-center justify-between mt-4"
+      style={{ fontSize: 12, color: "var(--color-ink-muted)" }}
+    >
+      <span>
+        共 {total} 条，第 {page}/{totalPages || 1} 页
+      </span>
+      <div className="flex gap-2">
+        <Button
+          variant="secondary"
+          disabled={page <= 1}
+          onClick={() => onPageChange(page - 1)}
+        >
+          上一页
+        </Button>
+        <Button
+          variant="secondary"
+          disabled={!hasNext}
+          onClick={() => onPageChange(page + 1)}
+        >
+          下一页
+        </Button>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/user-form-modal.tsx b/apps/admin-portal/src/components/user-form-modal.tsx
new file mode 100644
index 0000000..cafa032
--- /dev/null
+++ b/apps/admin-portal/src/components/user-form-modal.tsx
@@ -0,0 +1,216 @@
+"use client";
+
+import { type ReactNode, useState, type FormEvent } from "react";
+import type { UserViewModel, RoleViewModel } from "@/types/view-models";
+import { Button, Input, Select } from "./ui";
+import { t } from "@/lib/i18n";
+
+interface UserFormModalProps {
+  open: boolean;
+  user: UserViewModel | null;
+  roles: RoleViewModel[];
+  onSubmit: (data: UserFormData) => Promise<void>;
+  onCancel: () => void;
+}
+
+export interface UserFormData {
+  email: string;
+  name: string;
+  password?: string;
+  roleIds: string[];
+  dataScope: string;
+  organizationId?: string;
+}
+
+export function UserFormModal({
+  open,
+  user,
+  roles,
+  onSubmit,
+  onCancel,
+}: UserFormModalProps): ReactNode {
+  const [email, setEmail] = useState(user?.email ?? "");
+  const [name, setName] = useState(user?.name ?? "");
+  const [password, setPassword] = useState("");
+  const [roleIds, setRoleIds] = useState<string[]>(
+    user?.roles.map((r) => r.id) ?? [],
+  );
+  const [dataScope, setDataScope] = useState<string>(
+    user?.dataScope ?? "SCHOOL",
+  );
+  const [loading, setLoading] = useState(false);
+
+  if (!open) return null;
+
+  const isEdit = user !== null;
+
+  const handleSubmit = async (e: FormEvent<HTMLFormElement>) => {
+    e.preventDefault();
+    setLoading(true);
+    try {
+      await onSubmit({
+        email,
+        name,
+        password: isEdit ? undefined : password,
+        roleIds,
+        dataScope,
+      });
+    } finally {
+      setLoading(false);
+    }
+  };
+
+  const toggleRole = (id: string) => {
+    setRoleIds((prev) =>
+      prev.includes(id) ? prev.filter((r) => r !== id) : [...prev, id],
+    );
+  };
+
+  return (
+    <div
+      role="dialog"
+      aria-modal="true"
+      style={{
+        position: "fixed",
+        inset: 0,
+        background: "rgba(0,0,0,0.4)",
+        display: "flex",
+        alignItems: "center",
+        justifyContent: "center",
+        zIndex: 1000,
+      }}
+    >
+      <div
+        style={{
+          width: 440,
+          maxHeight: "80vh",
+          overflowY: "auto",
+          padding: 24,
+          background: "var(--bg-paper)",
+          borderRadius: 8,
+          border: "1px solid var(--color-rule)",
+        }}
+      >
+        <h2
+          style={{
+            fontFamily: "var(--font-serif)",
+            fontSize: 18,
+            color: "var(--color-ink)",
+            marginBottom: 16,
+          }}
+        >
+          {isEdit ? t("admin.users.edit") : t("admin.users.new")}
+        </h2>
+        <form
+          onSubmit={handleSubmit}
+          style={{ display: "flex", flexDirection: "column", gap: 12 }}
+        >
+          <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+            <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+              {t("admin.common.email")}
+            </span>
+            <Input
+              type="email"
+              value={email}
+              onChange={(e) => setEmail(e.target.value)}
+              required
+              disabled={isEdit}
+            />
+          </label>
+          <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+            <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+              {t("admin.common.name")}
+            </span>
+            <Input
+              type="text"
+              value={name}
+              onChange={(e) => setName(e.target.value)}
+              required
+            />
+          </label>
+          {!isEdit && (
+            <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+              <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+                {t("admin.users.password")}
+              </span>
+              <Input
+                type="password"
+                value={password}
+                onChange={(e) => setPassword(e.target.value)}
+                required
+                minLength={8}
+              />
+            </label>
+          )}
+          <label style={{ display: "flex", flexDirection: "column", gap: 4 }}>
+            <span style={{ fontSize: 12, color: "var(--color-ink)" }}>
+              {t("admin.common.dataScope")}
+            </span>
+            <Select
+              value={dataScope}
+              onChange={(e) => setDataScope(e.target.value)}
+            >
+              <option value="ALL">ALL - 全局</option>
+              <option value="SCHOOL">SCHOOL - 学校</option>
+              <option value="GRADE">GRADE - 年级</option>
+              <option value="CLASS">CLASS - 班级</option>
+              <option value="SUBJECT">SUBJECT - 学科</option>
+              <option value="SELF">SELF - 自己</option>
+            </Select>
+          </label>
+          <fieldset
+            style={{
+              border: "1px solid var(--color-rule)",
+              padding: 12,
+              borderRadius: 4,
+            }}
+          >
+            <legend style={{ fontSize: 12, color: "var(--color-ink)" }}>
+              {t("admin.users.roles")}
+            </legend>
+            <div style={{ display: "flex", flexDirection: "column", gap: 6 }}>
+              {roles.map((role) => (
+                <label
+                  key={role.id}
+                  style={{
+                    display: "flex",
+                    alignItems: "center",
+                    gap: 6,
+                    fontSize: 13,
+                  }}
+                >
+                  <input
+                    type="checkbox"
+                    checked={roleIds.includes(role.id)}
+                    onChange={() => toggleRole(role.id)}
+                  />
+                  <span>{role.name}</span>
+                  <span
+                    style={{ color: "var(--color-ink-muted)", fontSize: 11 }}
+                  >
+                    ({role.code})
+                  </span>
+                </label>
+              ))}
+            </div>
+          </fieldset>
+          <div
+            style={{
+              display: "flex",
+              justifyContent: "flex-end",
+              gap: 8,
+              marginTop: 16,
+            }}
+          >
+            <Button variant="secondary" type="button" onClick={onCancel}>
+              {t("admin.common.cancel")}
+            </Button>
+            <Button variant="primary" type="submit" disabled={loading}>
+              {loading ? t("admin.common.loading") : t("admin.common.save")}
+            </Button>
+          </div>
+        </form>
+      </div>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/user-management-table.tsx b/apps/admin-portal/src/components/user-management-table.tsx
new file mode 100644
index 0000000..a1bae69
--- /dev/null
+++ b/apps/admin-portal/src/components/user-management-table.tsx
@@ -0,0 +1,72 @@
+"use client";
+
+import { type ReactNode } from "react";
+import type { UserViewModel } from "@/types/view-models";
+import { Badge, Button, Table, TableRow, TableCell } from "./ui";
+import { t } from "@/lib/i18n";
+
+interface UserManagementTableProps {
+  users: UserViewModel[];
+  onEdit: (user: UserViewModel) => void;
+  onToggleStatus: (user: UserViewModel) => void;
+  onCreate: () => void;
+}
+
+export function UserManagementTable({
+  users,
+  onEdit,
+  onToggleStatus,
+  onCreate,
+}: UserManagementTableProps): ReactNode {
+  return (
+    <div>
+      <div className="flex justify-end mb-4">
+        <Button variant="primary" onClick={onCreate}>
+          {t("admin.users.new")}
+        </Button>
+      </div>
+      <Table
+        headers={[
+          "邮箱",
+          "姓名",
+          "角色",
+          "状态",
+          "数据范围",
+          "学校",
+          "最后登录",
+          "操作",
+        ]}
+      >
+        {users.map((user) => (
+          <TableRow key={user.id}>
+            <TableCell>{user.email}</TableCell>
+            <TableCell>{user.name}</TableCell>
+            <TableCell>
+              {user.roles.map((r) => r.name).join(", ") || "—"}
+            </TableCell>
+            <TableCell>
+              <Badge status={user.status} />
+            </TableCell>
+            <TableCell>{user.dataScope}</TableCell>
+            <TableCell>{user.schoolName ?? "—"}</TableCell>
+            <TableCell>
+              {user.lastLoginAt
+                ? new Date(user.lastLoginAt).toLocaleDateString("zh-CN")
+                : "—"}
+            </TableCell>
+            <TableCell>
+              <div className="flex gap-2">
+                <Button variant="ghost" onClick={() => onEdit(user)}>
+                  {t("admin.common.edit")}
+                </Button>
+                <Button variant="ghost" onClick={() => onToggleStatus(user)}>
+                  {t("admin.users.toggleStatus")}
+                </Button>
+              </div>
+            </TableCell>
+          </TableRow>
+        ))}
+      </Table>
+    </div>
+  );
+}
diff --git a/apps/admin-portal/src/components/web-vitals-initializer.tsx b/apps/admin-portal/src/components/web-vitals-initializer.tsx
new file mode 100644
index 0000000..6d77145
--- /dev/null
+++ b/apps/admin-portal/src/components/web-vitals-initializer.tsx
@@ -0,0 +1,20 @@
+"use client";
+
+import { useEffect } from "react";
+
+/**
+ * Web Vitals 采集初始化组件
+ *
+ * 仲裁：所有前端应用必须采集 Web Vitals
+ * 在客户端挂载时初始化 LCP/CLS/FCP/INP/TTFB 采集
+ */
+export function WebVitalsInitializer(): null {
+  useEffect(() => {
+    if (process.env.NODE_ENV !== "production") return;
+    void import("@/lib/web-vitals").then(({ initWebVitals }) =>
+      initWebVitals(),
+    );
+  }, []);
+
+  return null;
+}
diff --git a/apps/admin-portal/src/hooks/use-audit-logs.ts b/apps/admin-portal/src/hooks/use-audit-logs.ts
new file mode 100644
index 0000000..12b3593
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-audit-logs.ts
@@ -0,0 +1,89 @@
+/**
+ * 审计日志 Hooks
+ *
+ * contract §2.4：auditLogs
+ * 仲裁 ARB-005：经 teacher-bff GraphQL 消费（不直连 Kafka）
+ */
+import { useCallback, useState } from "react";
+import { useGraphQuery } from "./use-graphql";
+import { AUDIT_LOGS_QUERY } from "@/lib/graphql-client";
+import type {
+  AuditLogViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+interface AuditLogsResponse {
+  auditLogs: PaginatedResult<AuditLogViewModel>;
+}
+
+interface AuditLogFilter extends Partial<ListFilter> {
+  action?: string;
+  actorUserId?: string;
+  startDate?: number;
+  endDate?: number;
+}
+
+export function useAuditLogs(filter: AuditLogFilter) {
+  const result = useGraphQuery<AuditLogsResponse>(AUDIT_LOGS_QUERY, { filter });
+  return {
+    ...result,
+    data: result.data?.auditLogs ?? null,
+  };
+}
+
+export function useAuditLogFilter(initial?: Partial<AuditLogFilter>) {
+  const [filter, setFilter] = useState<AuditLogFilter>({
+    page: 1,
+    pageSize: 20,
+    ...initial,
+  });
+  const setPage = useCallback(
+    (page: number) => setFilter((f) => ({ ...f, page })),
+    [],
+  );
+  const setSearch = useCallback(
+    (search: string) => setFilter((f) => ({ ...f, search, page: 1 })),
+    [],
+  );
+  const setAction = useCallback(
+    (action: string) =>
+      setFilter((f) => ({ ...f, action: action || undefined, page: 1 })),
+    [],
+  );
+  return { filter, setFilter, setPage, setSearch, setAction };
+}
+
+/** 审计日志导出 CSV */
+export function exportAuditLogsCsv(logs: AuditLogViewModel[]): void {
+  const headers = [
+    "时间",
+    "操作人",
+    "操作",
+    "资源类型",
+    "资源ID",
+    "IP",
+    "追踪ID",
+  ];
+  const rows = logs.map((l) => [
+    new Date(l.occurredAt).toLocaleString("zh-CN"),
+    l.actorName,
+    l.action,
+    l.resourceType,
+    l.resourceId,
+    l.ip,
+    l.traceId ?? "",
+  ]);
+  const csv = [headers, ...rows]
+    .map((row) =>
+      row.map((cell) => `"${String(cell).replace(/"/g, '""')}"`).join(","),
+    )
+    .join("\n");
+  const blob = new Blob([`\uFEFF${csv}`], { type: "text/csv;charset=utf-8;" });
+  const url = URL.createObjectURL(blob);
+  const link = document.createElement("a");
+  link.href = url;
+  link.download = `audit-logs-${new Date().toISOString().slice(0, 10)}.csv`;
+  link.click();
+  URL.revokeObjectURL(url);
+}
diff --git a/apps/admin-portal/src/hooks/use-classes.ts b/apps/admin-portal/src/hooks/use-classes.ts
new file mode 100644
index 0000000..646da2d
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-classes.ts
@@ -0,0 +1,44 @@
+/**
+ * 班级管理 Hooks
+ *
+ * contract §2.4：adminClasses
+ */
+import { useCallback, useState } from "react";
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_CLASSES_QUERY } from "@/lib/graphql-client";
+import type {
+  AdminClassViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+interface AdminClassesResponse {
+  adminClasses: PaginatedResult<AdminClassViewModel>;
+}
+
+export function useClasses(filter: Partial<ListFilter>) {
+  const result = useGraphQuery<AdminClassesResponse>(ADMIN_CLASSES_QUERY, {
+    filter,
+  });
+  return {
+    ...result,
+    data: result.data?.adminClasses ?? null,
+  };
+}
+
+export function useClassFilter(initial?: Partial<ListFilter>) {
+  const [filter, setFilter] = useState<Partial<ListFilter>>({
+    page: 1,
+    pageSize: 20,
+    ...initial,
+  });
+  const setPage = useCallback(
+    (page: number) => setFilter((f) => ({ ...f, page })),
+    [],
+  );
+  const setSearch = useCallback(
+    (search: string) => setFilter((f) => ({ ...f, search, page: 1 })),
+    [],
+  );
+  return { filter, setFilter, setPage, setSearch };
+}
diff --git a/apps/admin-portal/src/hooks/use-dashboard.ts b/apps/admin-portal/src/hooks/use-dashboard.ts
new file mode 100644
index 0000000..6cb8943
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-dashboard.ts
@@ -0,0 +1,20 @@
+/**
+ * 仪表盘 Hooks
+ *
+ * contract §2.4：adminDashboard
+ */
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_DASHBOARD_QUERY } from "@/lib/graphql-client";
+import type { AdminDashboardViewModel } from "@/types/view-models";
+
+interface AdminDashboardResponse {
+  adminDashboard: AdminDashboardViewModel;
+}
+
+export function useDashboard() {
+  const result = useGraphQuery<AdminDashboardResponse>(ADMIN_DASHBOARD_QUERY);
+  return {
+    ...result,
+    data: result.data?.adminDashboard ?? null,
+  };
+}
diff --git a/apps/admin-portal/src/hooks/use-graphql.ts b/apps/admin-portal/src/hooks/use-graphql.ts
new file mode 100644
index 0000000..50f2ec0
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-graphql.ts
@@ -0,0 +1,100 @@
+/**
+ * 通用 GraphQL hooks
+ *
+ * 仲裁 ARB-001：admin 命名空间 GraphQL（urql）
+ *
+ * 注意：urql 的 useQuery/useMutation 的泛型推断与纯字符串 query 兼容性有限，
+ * 这里使用类型断言从 unknown 转换（符合项目规则：从 unknown 转换允许 as 断言）
+ */
+import { useQuery, useMutation } from "urql";
+import { useCallback, useState } from "react";
+import type { AnyVariables, OperationResult } from "@urql/core";
+
+export interface QueryResult<T> {
+  data: T | null;
+  loading: boolean;
+  error: Error | null;
+  refetch: () => void;
+}
+
+export interface MutationResult<T> {
+  data: T | null;
+  loading: boolean;
+  error: Error | null;
+}
+
+/** 通用 Query Hook */
+export function useGraphQuery<
+  T = unknown,
+  V extends AnyVariables = AnyVariables,
+>(query: string, variables?: V): QueryResult<T> {
+  const [result] = useQuery({
+    query,
+    variables: variables ?? ({} as V),
+  });
+  return {
+    data: (result.data as T | undefined) ?? null,
+    loading: result.fetching,
+    error: result.error ? new Error(result.error.message) : null,
+    refetch: () => {
+      void result;
+    },
+  };
+}
+
+/** 通用 Mutation Hook */
+export function useGraphMutation<
+  T = unknown,
+  V extends AnyVariables = AnyVariables,
+>(
+  mutation: string,
+): [(variables: V) => Promise<MutationResult<T>>, MutationResult<T>] {
+  // urql 的 useMutation 返回 [executeFn, state]
+  // 使用 unknown 转换处理类型（项目规则允许从 unknown 转换）
+  const [executeMutation] = useMutation(mutation) as unknown as [
+    (variables: V) => { toPromise: () => Promise<OperationResult<T, V>> },
+    unknown,
+  ];
+  const [state, setState] = useState<MutationResult<T>>({
+    data: null,
+    loading: false,
+    error: null,
+  });
+
+  const run = useCallback(
+    async (variables: V): Promise<MutationResult<T>> => {
+      setState({ data: null, loading: true, error: null });
+      try {
+        const res = await executeMutation(variables).toPromise();
+        if (res.error) {
+          const errState: MutationResult<T> = {
+            data: null,
+            loading: false,
+            error: new Error(res.error.message),
+          };
+          setState(errState);
+          return errState;
+        }
+        const okState: MutationResult<T> = {
+          data: res.data ?? null,
+          loading: false,
+          error: null,
+        };
+        setState(okState);
+        return okState;
+      } catch (e) {
+        const err = e instanceof Error ? e : new Error(String(e));
+        const errState: MutationResult<T> = {
+          data: null,
+          loading: false,
+          error: err,
+        };
+        setState(errState);
+        return errState;
+      }
+    },
+    [executeMutation],
+  );
+
+  return [run, state];
+}
diff --git a/apps/admin-portal/src/hooks/use-organization.ts b/apps/admin-portal/src/hooks/use-organization.ts
new file mode 100644
index 0000000..527b57f
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-organization.ts
@@ -0,0 +1,24 @@
+/**
+ * 组织管理 Hooks
+ *
+ * contract §2.4：adminOrganization
+ */
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_ORGANIZATION_QUERY } from "@/lib/graphql-client";
+import type { OrganizationNode } from "@/types/view-models";
+
+interface AdminOrganizationResponse {
+  adminOrganization: OrganizationNode[];
+}
+
+export function useOrganization(parentId: string | null | undefined) {
+  const variables = parentId === undefined ? {} : { parentId };
+  const result = useGraphQuery<AdminOrganizationResponse>(
+    ADMIN_ORGANIZATION_QUERY,
+    variables,
+  );
+  return {
+    ...result,
+    data: result.data?.adminOrganization ?? [],
+  };
+}
diff --git a/apps/admin-portal/src/hooks/use-permissions.ts b/apps/admin-portal/src/hooks/use-permissions.ts
new file mode 100644
index 0000000..07a194a
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-permissions.ts
@@ -0,0 +1,22 @@
+/**
+ * 权限点 Hooks
+ *
+ * contract §2.4：adminPermissions
+ */
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_PERMISSIONS_QUERY } from "@/lib/graphql-client";
+import type { PermissionViewModel } from "@/types/view-models";
+
+interface AdminPermissionsResponse {
+  adminPermissions: PermissionViewModel[];
+}
+
+export function usePermissions() {
+  const result = useGraphQuery<AdminPermissionsResponse>(
+    ADMIN_PERMISSIONS_QUERY,
+  );
+  return {
+    ...result,
+    data: result.data?.adminPermissions ?? [],
+  };
+}
diff --git a/apps/admin-portal/src/hooks/use-roles.ts b/apps/admin-portal/src/hooks/use-roles.ts
new file mode 100644
index 0000000..5fb0caa
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-roles.ts
@@ -0,0 +1,73 @@
+/**
+ * 角色权限 Hooks
+ *
+ * contract §2.4：adminRoles / createRole / updateRolePermissions
+ */
+import { useCallback } from "react";
+import { useGraphMutation, useGraphQuery } from "./use-graphql";
+import {
+  ADMIN_ROLES_QUERY,
+  CREATE_ROLE_MUTATION,
+  UPDATE_ROLE_PERMISSIONS_MUTATION,
+} from "@/lib/graphql-client";
+import type { RoleViewModel } from "@/types/view-models";
+
+interface AdminRolesResponse {
+  adminRoles: RoleViewModel[];
+}
+
+interface CreateRoleResponse {
+  createRole: { id: string; name: string; code: string };
+}
+
+interface UpdateRolePermissionsResponse {
+  updateRolePermissions: {
+    id: string;
+    permissions: { id: string; code: string }[];
+  };
+}
+
+interface CreateRoleInput {
+  name: string;
+  code: string;
+  description?: string;
+  dataScope?: string;
+}
+
+export function useRoles() {
+  const result = useGraphQuery<AdminRolesResponse>(ADMIN_ROLES_QUERY);
+  return {
+    ...result,
+    data: result.data?.adminRoles ?? [],
+  };
+}
+
+export function useCreateRole() {
+  const [run, state] = useGraphMutation<
+    CreateRoleResponse,
+    { input: CreateRoleInput }
+  >(CREATE_ROLE_MUTATION);
+  const create = useCallback(
+    async (input: CreateRoleInput) => {
+      const res = await run({ input });
+      return res.data?.createRole ?? null;
+    },
+    [run],
+  );
+  return [create, state] as const;
+}
+
+export function useUpdateRolePermissions() {
+  const [run, state] = useGraphMutation<
+    UpdateRolePermissionsResponse,
+    { roleId: string; permissionCodes: string[] }
+  >(UPDATE_ROLE_PERMISSIONS_MUTATION);
+  const update = useCallback(
+    async (roleId: string, permissionCodes: string[]) => {
+      const res = await run({ roleId, permissionCodes });
+      return res.data?.updateRolePermissions ?? null;
+    },
+    [run],
+  );
+  return [update, state] as const;
+}
diff --git a/apps/admin-portal/src/hooks/use-students.ts b/apps/admin-portal/src/hooks/use-students.ts
new file mode 100644
index 0000000..9658ee8
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-students.ts
@@ -0,0 +1,48 @@
+/**
+ * 学生管理 Hooks
+ *
+ * contract §2.4：adminStudents
+ */
+import { useCallback, useState } from "react";
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_STUDENTS_QUERY } from "@/lib/graphql-client";
+import type {
+  AdminStudentViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+interface AdminStudentsResponse {
+  adminStudents: PaginatedResult<AdminStudentViewModel>;
+}
+
+export function useStudents(filter: Partial<ListFilter>) {
+  const result = useGraphQuery<AdminStudentsResponse>(ADMIN_STUDENTS_QUERY, {
+    filter,
+  });
+  return {
+    ...result,
+    data: result.data?.adminStudents ?? null,
+  };
+}
+
+export function useStudentFilter(initial?: Partial<ListFilter>) {
+  const [filter, setFilter] = useState<Partial<ListFilter>>({
+    page: 1,
+    pageSize: 20,
+    ...initial,
+  });
+  const setPage = useCallback(
+    (page: number) => setFilter((f) => ({ ...f, page })),
+    [],
+  );
+  const setSearch = useCallback(
+    (search: string) => setFilter((f) => ({ ...f, search, page: 1 })),
+    [],
+  );
+  const setStatus = useCallback(
+    (status: string) => setFilter((f) => ({ ...f, status, page: 1 })),
+    [],
+  );
+  return { filter, setFilter, setPage, setSearch, setStatus };
+}
diff --git a/apps/admin-portal/src/hooks/use-system-settings.ts b/apps/admin-portal/src/hooks/use-system-settings.ts
new file mode 100644
index 0000000..1f19e20
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-system-settings.ts
@@ -0,0 +1,48 @@
+/**
+ * 系统设置 Hooks
+ *
+ * contract §2.4：systemSettings / updateSystemSettings
+ */
+import { useCallback } from "react";
+import { useGraphMutation, useGraphQuery } from "./use-graphql";
+import {
+  SYSTEM_SETTINGS_QUERY,
+  UPDATE_SYSTEM_SETTINGS_MUTATION,
+} from "@/lib/graphql-client";
+import type { SystemSettingsViewModel } from "@/types/view-models";
+
+interface SystemSettingsResponse {
+  systemSettings: SystemSettingsViewModel;
+}
+
+interface UpdateSystemSettingsResponse {
+  updateSystemSettings: {
+    schoolName: string;
+    schoolCode: string;
+    academicYear: string;
+    semester: string;
+  };
+}
+
+export function useSystemSettings() {
+  const result = useGraphQuery<SystemSettingsResponse>(SYSTEM_SETTINGS_QUERY);
+  return {
+    ...result,
+    data: result.data?.systemSettings ?? null,
+  };
+}
+
+export function useUpdateSystemSettings() {
+  const [run, state] = useGraphMutation<
+    UpdateSystemSettingsResponse,
+    { input: Partial<SystemSettingsViewModel> }
+  >(UPDATE_SYSTEM_SETTINGS_MUTATION);
+  const update = useCallback(
+    async (input: Partial<SystemSettingsViewModel>) => {
+      const res = await run({ input });
+      return res.data?.updateSystemSettings ?? null;
+    },
+    [run],
+  );
+  return [update, state] as const;
+}
diff --git a/apps/admin-portal/src/hooks/use-teachers.ts b/apps/admin-portal/src/hooks/use-teachers.ts
new file mode 100644
index 0000000..3a9c7e5
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-teachers.ts
@@ -0,0 +1,48 @@
+/**
+ * 教师管理 Hooks
+ *
+ * contract §2.4：adminTeachers
+ */
+import { useCallback, useState } from "react";
+import { useGraphQuery } from "./use-graphql";
+import { ADMIN_TEACHERS_QUERY } from "@/lib/graphql-client";
+import type {
+  AdminTeacherViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+interface AdminTeachersResponse {
+  adminTeachers: PaginatedResult<AdminTeacherViewModel>;
+}
+
+export function useTeachers(filter: Partial<ListFilter>) {
+  const result = useGraphQuery<AdminTeachersResponse>(ADMIN_TEACHERS_QUERY, {
+    filter,
+  });
+  return {
+    ...result,
+    data: result.data?.adminTeachers ?? null,
+  };
+}
+
+export function useTeacherFilter(initial?: Partial<ListFilter>) {
+  const [filter, setFilter] = useState<Partial<ListFilter>>({
+    page: 1,
+    pageSize: 20,
+    ...initial,
+  });
+  const setPage = useCallback(
+    (page: number) => setFilter((f) => ({ ...f, page })),
+    [],
+  );
+  const setSearch = useCallback(
+    (search: string) => setFilter((f) => ({ ...f, search, page: 1 })),
+    [],
+  );
+  const setStatus = useCallback(
+    (status: string) => setFilter((f) => ({ ...f, status, page: 1 })),
+    [],
+  );
+  return { filter, setFilter, setPage, setSearch, setStatus };
+}
diff --git a/apps/admin-portal/src/hooks/use-users.ts b/apps/admin-portal/src/hooks/use-users.ts
new file mode 100644
index 0000000..c5b4821
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-users.ts
@@ -0,0 +1,138 @@
+/**
+ * 用户管理 Hooks
+ *
+ * contract §2.4：adminUsers / adminUser / createUser / updateUser / toggleUserStatus
+ */
+import { useCallback, useState } from "react";
+import { useGraphMutation, useGraphQuery } from "./use-graphql";
+import {
+  ADMIN_USERS_QUERY,
+  ADMIN_USER_QUERY,
+  CREATE_USER_MUTATION,
+  UPDATE_USER_MUTATION,
+  TOGGLE_USER_STATUS_MUTATION,
+} from "@/lib/graphql-client";
+import type {
+  UserViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+interface AdminUsersResponse {
+  adminUsers: PaginatedResult<UserViewModel>;
+}
+
+interface AdminUserResponse {
+  adminUser: UserViewModel | null;
+}
+
+interface UserMutationResponse {
+  createUser?: { id: string; email: string; name: string; status: string };
+  updateUser?: { id: string; email: string; name: string; status: string };
+  toggleUserStatus?: { id: string; status: string };
+}
+
+interface CreateUserInput {
+  email: string;
+  name: string;
+  password: string;
+  roleIds?: string[];
+  dataScope?: string;
+  organizationId?: string;
+}
+
+interface UpdateUserInput {
+  name?: string;
+  email?: string;
+  roleIds?: string[];
+  dataScope?: string;
+  organizationId?: string;
+}
+
+export function useUsers(filter: Partial<ListFilter>) {
+  const result = useGraphQuery<AdminUsersResponse>(ADMIN_USERS_QUERY, {
+    filter,
+  });
+  return {
+    ...result,
+    data: result.data?.adminUsers ?? null,
+  };
+}
+
+export function useUser(id: string | null) {
+  const result = useGraphQuery<AdminUserResponse>(
+    ADMIN_USER_QUERY,
+    id ? { id } : undefined,
+  );
+  return {
+    ...result,
+    data: result.data?.adminUser ?? null,
+  };
+}
+
+export function useCreateUser() {
+  const [run, state] = useGraphMutation<
+    UserMutationResponse,
+    { input: CreateUserInput }
+  >(CREATE_USER_MUTATION);
+  const create = useCallback(
+    async (input: CreateUserInput) => {
+      const res = await run({ input });
+      return res.data?.createUser ?? null;
+    },
+    [run],
+  );
+  return [create, state] as const;
+}
+
+export function useUpdateUser() {
+  const [run, state] = useGraphMutation<
+    UserMutationResponse,
+    { id: string; input: UpdateUserInput }
+  >(UPDATE_USER_MUTATION);
+  const update = useCallback(
+    async (id: string, input: UpdateUserInput) => {
+      const res = await run({ id, input });
+      return res.data?.updateUser ?? null;
+    },
+    [run],
+  );
+  return [update, state] as const;
+}
+
+export function useToggleUserStatus() {
+  const [run, state] = useGraphMutation<
+    UserMutationResponse,
+    { id: string; status: string }
+  >(TOGGLE_USER_STATUS_MUTATION);
+  const toggle = useCallback(
+    async (id: string, status: string) => {
+      const res = await run({ id, status });
+      return res.data?.toggleUserStatus ?? null;
+    },
+    [run],
+  );
+  return [toggle, state] as const;
+}
+
+/** 本地筛选状态管理 */
+export function useUserFilter(initial?: Partial<ListFilter>) {
+  const [filter, setFilter] = useState<Partial<ListFilter>>({
+    page: 1,
+    pageSize: 20,
+    ...initial,
+  });
+  const setPage = useCallback(
+    (page: number) => setFilter((f) => ({ ...f, page })),
+    [],
+  );
+  const setSearch = useCallback(
+    (search: string) => setFilter((f) => ({ ...f, search, page: 1 })),
+    [],
+  );
+  const setStatus = useCallback(
+    (status: string) => setFilter((f) => ({ ...f, status, page: 1 })),
+    [],
+  );
+  return { filter, setFilter, setPage, setSearch, setStatus };
+}
diff --git a/apps/admin-portal/src/hooks/use-viewports.ts b/apps/admin-portal/src/hooks/use-viewports.ts
new file mode 100644
index 0000000..d2d3ec9
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-viewports.ts
@@ -0,0 +1,59 @@
+/**
+ * 视口配置 Hooks
+ *
+ * contract §2.4：adminViewports / updateViewport
+ */
+import { useCallback } from "react";
+import { useGraphMutation, useGraphQuery } from "./use-graphql";
+import {
+  ADMIN_VIEWPORTS_QUERY,
+  UPDATE_VIEWPORT_MUTATION,
+} from "@/lib/graphql-client";
+import type { ViewportConfigViewModel } from "@/types/view-models";
+
+interface AdminViewportsResponse {
+  adminViewports: ViewportConfigViewModel[];
+}
+
+interface UpdateViewportResponse {
+  updateViewport: {
+    id: string;
+    key: string;
+    label: string;
+    sortOrder: number;
+    isVisible: boolean;
+  };
+}
+
+interface UpdateViewportInput {
+  label?: string;
+  sortOrder?: number;
+  isVisible?: boolean;
+  requiredPermission?: string | null;
+}
+
+export function useViewports(scope?: string) {
+  const result = useGraphQuery<AdminViewportsResponse>(
+    ADMIN_VIEWPORTS_QUERY,
+    scope ? { scope } : undefined,
+  );
+  return {
+    ...result,
+    data: result.data?.adminViewports ?? [],
+  };
+}
+
+export function useUpdateViewport() {
+  const [run, state] = useGraphMutation<
+    UpdateViewportResponse,
+    { id: string; input: UpdateViewportInput }
+  >(UPDATE_VIEWPORT_MUTATION);
+  const update = useCallback(
+    async (id: string, input: UpdateViewportInput) => {
+      const res = await run({ id, input });
+      return res.data?.updateViewport ?? null;
+    },
+    [run],
+  );
+  return [update, state] as const;
+}
diff --git a/apps/admin-portal/src/hooks/use-websocket.ts b/apps/admin-portal/src/hooks/use-websocket.ts
new file mode 100644
index 0000000..7c73c82
--- /dev/null
+++ b/apps/admin-portal/src/hooks/use-websocket.ts
@@ -0,0 +1,125 @@
+/**
+ * WebSocket Hooks（实时通知）
+ *
+ * 仲裁 ARB-006：接入 push-gateway GET /ws
+ * 开发期：mock-socket 模拟 push-gateway
+ *
+ * 通知类型（contract §3）：
+ * - audit_alert：审计告警
+ * - abnormal_login：异常登录
+ * - system_error：系统异常
+ */
+import { useEffect, useRef, useState, useCallback } from "react";
+import type { WsNotification } from "@/types/view-models";
+
+const WS_URL = process.env.NEXT_PUBLIC_WS_URL ?? "ws://localhost:8081/ws";
+
+/** 通知消息工厂 */
+function createMockNotification(): WsNotification {
+  const types: WsNotification["type"][] = [
+    "audit_alert",
+    "abnormal_login",
+    "system_error",
+    "info",
+  ];
+  const type = types[Math.floor(Math.random() * types.length)] ?? "info";
+  const now = Date.now();
+  const map: Record<
+    WsNotification["type"],
+    { title: string; message: string; severity: WsNotification["severity"] }
+  > = {
+    audit_alert: {
+      title: "审计告警",
+      message: "检测到批量删除操作，请及时确认",
+      severity: "warning",
+    },
+    abnormal_login: {
+      title: "异常登录",
+      message: "检测到来自异常 IP 的登录尝试，已自动拦截",
+      severity: "error",
+    },
+    system_error: {
+      title: "系统异常",
+      message: "msg 服务响应超时（>280ms）",
+      severity: "error",
+    },
+    info: {
+      title: "系统通知",
+      message: "数据备份已完成",
+      severity: "info",
+    },
+  };
+  const payload = map[type];
+  return {
+    id: `n-${now}-${Math.random().toString(36).slice(2, 6)}`,
+    type,
+    title: payload.title,
+    message: payload.message,
+    severity: payload.severity,
+    timestamp: now,
+  };
+}
+
+export function useWebSocket(maxNotifications = 50) {
+  const [notifications, setNotifications] = useState<WsNotification[]>([]);
+  const [connected, setConnected] = useState(false);
+  const wsRef = useRef<WebSocket | null>(null);
+  const mockTimerRef = useRef<NodeJS.Timeout | null>(null);
+
+  useEffect(() => {
+    // 开发期 mock：MSW 不拦截 WebSocket，用 mock-socket 或定时推送
+    const isMock = process.env.NEXT_PUBLIC_API_MOCKING === "enabled";
+
+    if (isMock) {
+      // Mock 模式：定时推送通知
+      setConnected(true);
+      mockTimerRef.current = setInterval(() => {
+        const notif = createMockNotification();
+        setNotifications((prev) => [notif, ...prev].slice(0, maxNotifications));
+      }, 30000); // 每 30 秒推送一条
+
+      // 立即推送一条
+      const initial = createMockNotification();
+      setNotifications([initial]);
+
+      return () => {
+        if (mockTimerRef.current) clearInterval(mockTimerRef.current);
+        setConnected(false);
+      };
+    }
+
+    // 真实模式：连接 push-gateway
+    try {
+      const ws = new WebSocket(WS_URL);
+      wsRef.current = ws;
+      ws.onopen = () => setConnected(true);
+      ws.onclose = () => setConnected(false);
+      ws.onerror = () => setConnected(false);
+      ws.onmessage = (event) => {
+        try {
+          const data = JSON.parse(event.data as string) as WsNotification;
+          setNotifications((prev) =>
+            [data, ...prev].slice(0, maxNotifications),
+          );
+        } catch {
+          // 忽略非 JSON 消息
+        }
+      };
+      return () => {
+        ws.close();
+        setConnected(false);
+      };
+    } catch {
+      setConnected(false);
+      return;
+    }
+  }, [maxNotifications]);
+
+  const dismiss = useCallback((id: string) => {
+    setNotifications((prev) => prev.filter((n) => n.id !== id));
+  }, []);
+
+  const clear = useCallback(() => setNotifications([]), []);
+
+  return { notifications, connected, dismiss, clear };
+}
diff --git a/apps/admin-portal/src/lib/auth.ts b/apps/admin-portal/src/lib/auth.ts
new file mode 100644
index 0000000..3862dca
--- /dev/null
+++ b/apps/admin-portal/src/lib/auth.ts
@@ -0,0 +1,79 @@
+/**
+ * 认证工具：token 存储 + 路由保护
+ *
+ * 仲裁：ARB-002 复用 Shell /login，admin-portal 不自行实现登录页
+ * 开发期：standalone 壳提供 mock 登录（MSW 拦截 /api/auth/login）
+ */
+
+const TOKEN_KEY = "edu_access_token";
+const USER_KEY = "edu_user_info";
+
+import type { CurrentUser } from "@/types/view-models";
+
+export function getToken(): string | null {
+  if (typeof window === "undefined") return null;
+  return localStorage.getItem(TOKEN_KEY);
+}
+
+export function setToken(token: string): void {
+  if (typeof window === "undefined") return;
+  localStorage.setItem(TOKEN_KEY, token);
+}
+
+export function clearToken(): void {
+  if (typeof window === "undefined") return;
+  localStorage.removeItem(TOKEN_KEY);
+  localStorage.removeItem(USER_KEY);
+}
+
+export function getUser(): CurrentUser | null {
+  if (typeof window === "undefined") return null;
+  const raw = localStorage.getItem(USER_KEY);
+  if (!raw) return null;
+  try {
+    return JSON.parse(raw) as CurrentUser;
+  } catch {
+    return null;
+  }
+}
+
+export function setUser(user: CurrentUser): void {
+  if (typeof window === "undefined") return;
+  localStorage.setItem(USER_KEY, JSON.stringify(user));
+}
+
+export function isAuthenticated(): boolean {
+  return getToken() !== null;
+}
+
+/** 调用登录 API（MSW 拦截 / api-gateway 代理到 iam） */
+export async function login(
+  email: string,
+  password: string,
+): Promise<{ user: CurrentUser; token: string }> {
+  const res = await fetch("/api/auth/login", {
+    method: "POST",
+    headers: { "Content-Type": "application/json" },
+    body: JSON.stringify({ email, password }),
+  });
+  const json = (await res.json()) as {
+    success: boolean;
+    data?: { user: CurrentUser; tokens: { accessToken: string } };
+    error?: { message: string };
+  };
+  if (!json.success || !json.data) {
+    throw new Error(json.error?.message || "登录失败");
+  }
+  const user = json.data.user;
+  const token = json.data.tokens.accessToken;
+  setToken(token);
+  setUser(user);
+  return { user, token };
+}
+
+export function logout(): void {
+  clearToken();
+  if (typeof window !== "undefined") {
+    window.location.href = "/login";
+  }
+}
diff --git a/apps/admin-portal/src/lib/graphql-client.ts b/apps/admin-portal/src/lib/graphql-client.ts
new file mode 100644
index 0000000..79d5b93
--- /dev/null
+++ b/apps/admin-portal/src/lib/graphql-client.ts
@@ -0,0 +1,333 @@
+/**
+ * GraphQL client + operations
+ *
+ * 仲裁：ARB-001 admin 命名空间 GraphQL + ARB-002 复用 Shell GraphQL client 单例
+ * 端点：POST /api/admin/graphql（经 api-gateway 代理到 teacher-bff admin 命名空间）
+ */
+import { createClient, fetchExchange, type Client } from "@urql/core";
+
+const GRAPHQL_ENDPOINT = "/api/admin/graphql";
+
+/** 创建 urql GraphQL client（standalone 模式自建，MF 模式复用 Shell 单例） */
+export function createGraphQLClient(): Client {
+  return createClient({
+    url: GRAPHQL_ENDPOINT,
+    exchanges: [fetchExchange],
+    fetchOptions: () => {
+      const token =
+        typeof window !== "undefined"
+          ? localStorage.getItem("edu_access_token")
+          : null;
+      return token ? { headers: { Authorization: `Bearer ${token}` } } : {};
+    },
+  });
+}
+
+// ─── GraphQL Operations（contract §2.4） ───────────────────────────
+
+export const CURRENT_USER_QUERY = `
+  query CurrentUser {
+    currentUser {
+      id
+      email
+      name
+      roles
+      permissions
+      dataScope
+      schoolId
+      schoolName
+    }
+  }
+` as const;
+
+export const ADMIN_USERS_QUERY = `
+  query AdminUsers($filter: AdminUserFilterInput) {
+    adminUsers(filter: $filter) {
+      items {
+        id
+        email
+        name
+        roles { id name code }
+        status
+        dataScope
+        organizationId
+        schoolName
+        lastLoginAt
+        createdAt
+        updatedAt
+      }
+      total
+      page
+      pageSize
+      hasNext
+    }
+  }
+` as const;
+
+export const ADMIN_USER_QUERY = `
+  query AdminUser($id: ID!) {
+    adminUser(id: $id) {
+      id
+      email
+      name
+      roles { id name code }
+      status
+      dataScope
+      organizationId
+      schoolName
+      lastLoginAt
+      createdAt
+      updatedAt
+    }
+  }
+` as const;
+
+export const CREATE_USER_MUTATION = `
+  mutation CreateUser($input: CreateUserInput!) {
+    createUser(input: $input) {
+      id
+      email
+      name
+      status
+    }
+  }
+` as const;
+
+export const UPDATE_USER_MUTATION = `
+  mutation UpdateUser($id: ID!, $input: UpdateUserInput!) {
+    updateUser(id: $id, input: $input) {
+      id
+      email
+      name
+      status
+    }
+  }
+` as const;
+
+export const TOGGLE_USER_STATUS_MUTATION = `
+  mutation ToggleUserStatus($id: ID!, $status: String!) {
+    toggleUserStatus(id: $id, status: $status) {
+      id
+      status
+    }
+  }
+` as const;
+
+export const ADMIN_ROLES_QUERY = `
+  query AdminRoles {
+    adminRoles {
+      id
+      name
+      code
+      description
+      permissions { id code name resource action }
+      userCount
+      dataScope
+      isSystem
+      createdAt
+      updatedAt
+    }
+  }
+` as const;
+
+export const CREATE_ROLE_MUTATION = `
+  mutation CreateRole($input: CreateRoleInput!) {
+    createRole(input: $input) { id name code }
+  }
+` as const;
+
+export const UPDATE_ROLE_PERMISSIONS_MUTATION = `
+  mutation UpdateRolePermissions($roleId: ID!, $permissionCodes: [String!]!) {
+    updateRolePermissions(roleId: $roleId, permissionCodes: $permissionCodes) {
+      id
+      permissions { id code }
+    }
+  }
+` as const;
+
+export const ADMIN_PERMISSIONS_QUERY = `
+  query AdminPermissions {
+    adminPermissions {
+      id
+      code
+      name
+      description
+      resource
+      action
+      isSystem
+    }
+  }
+` as const;
+
+export const ADMIN_VIEWPORTS_QUERY = `
+  query AdminViewports($scope: String) {
+    adminViewports(scope: $scope) {
+      id
+      key
+      label
+      route
+      icon
+      sortOrder
+      requiredPermission
+      scope
+      isVisible
+    }
+  }
+` as const;
+
+export const UPDATE_VIEWPORT_MUTATION = `
+  mutation UpdateViewport($id: ID!, $input: UpdateViewportInput!) {
+    updateViewport(id: $id, input: $input) {
+      id
+      key
+      label
+      sortOrder
+      isVisible
+    }
+  }
+` as const;
+
+export const ADMIN_ORGANIZATION_QUERY = `
+  query AdminOrganization($parentId: ID) {
+    adminOrganization(parentId: $parentId) {
+      id
+      name
+      type
+      parentId
+      childrenCount
+      sortOrder
+    }
+  }
+` as const;
+
+export const ADMIN_CLASSES_QUERY = `
+  query AdminClasses($filter: AdminClassFilterInput) {
+    adminClasses(filter: $filter) {
+      items {
+        id
+        name
+        gradeName
+        schoolName
+        headTeacherName
+        studentCount
+        createdAt
+      }
+      total
+      page
+      pageSize
+      hasNext
+    }
+  }
+` as const;
+
+export const ADMIN_TEACHERS_QUERY = `
+  query AdminTeachers($filter: AdminTeacherFilterInput) {
+    adminTeachers(filter: $filter) {
+      items {
+        id
+        email
+        name
+        schoolName
+        subjects
+        classCount
+        status
+        lastLoginAt
+      }
+      total
+      page
+      pageSize
+      hasNext
+    }
+  }
+` as const;
+
+export const ADMIN_STUDENTS_QUERY = `
+  query AdminStudents($filter: AdminStudentFilterInput) {
+    adminStudents(filter: $filter) {
+      items {
+        id
+        email
+        name
+        className
+        gradeName
+        schoolName
+        guardianName
+        guardianPhone
+        status
+      }
+      total
+      page
+      pageSize
+      hasNext
+    }
+  }
+` as const;
+
+export const AUDIT_LOGS_QUERY = `
+  query AuditLogs($filter: AuditLogFilterInput) {
+    auditLogs(filter: $filter) {
+      items {
+        id
+        eventId
+        occurredAt
+        actorUserId
+        actorName
+        action
+        resourceType
+        resourceId
+        ip
+        userAgent
+        beforeState
+        afterState
+        traceId
+      }
+      total
+      page
+      pageSize
+      hasNext
+    }
+  }
+` as const;
+
+export const ADMIN_DASHBOARD_QUERY = `
+  query AdminDashboard {
+    adminDashboard {
+      totalTeachers
+      totalStudents
+      totalClasses
+      totalSchools
+      schoolAvgScore
+      activeUsersToday
+      auditEventsToday
+      trend { date teachers students avgScore }
+      serviceHealth { serviceName status latencyMs }
+    }
+  }
+` as const;
+
+export const SYSTEM_SETTINGS_QUERY = `
+  query SystemSettings {
+    systemSettings {
+      schoolName
+      schoolCode
+      academicYear
+      semester
+      contactEmail
+      contactPhone
+      address
+      timezone
+      locale
+    }
+  }
+` as const;
+
+export const UPDATE_SYSTEM_SETTINGS_MUTATION = `
+  mutation UpdateSystemSettings($input: SystemSettingsInput!) {
+    updateSystemSettings(input: $input) {
+      schoolName
+      schoolCode
+      academicYear
+      semester
+    }
+  }
+` as const;
diff --git a/apps/admin-portal/src/lib/i18n.ts b/apps/admin-portal/src/lib/i18n.ts
new file mode 100644
index 0000000..125d023
--- /dev/null
+++ b/apps/admin-portal/src/lib/i18n.ts
@@ -0,0 +1,183 @@
+/**
+ * 轻量 i18n（contract §1.7 命名空间：admin.* / iam.error.* / bff.error.* / gateway.error.* / network.error.*）
+ *
+ * 维护者：ai16
+ * 仲裁：F4 i18n key 模式 error.{{service}}.{{code_snake_case}}
+ */
+
+type MessageMap = Record<string, string>;
+
+const messages: MessageMap = {
+  // 导航
+  "admin.nav.dashboard": "管理仪表盘",
+  "admin.nav.users": "用户管理",
+  "admin.nav.roles": "角色权限",
+  "admin.nav.permissions": "权限点",
+  "admin.nav.viewports": "视口配置",
+  "admin.nav.organization": "组织管理",
+  "admin.nav.system": "学校设置",
+  "admin.nav.classes": "班级管理",
+  "admin.nav.teachers": "教师管理",
+  "admin.nav.students": "学生管理",
+  "admin.nav.auditLogs": "审计日志",
+
+  // 通用
+  "admin.common.search": "搜索",
+  "admin.common.filter": "筛选",
+  "admin.common.create": "新建",
+  "admin.common.edit": "编辑",
+  "admin.common.delete": "删除",
+  "admin.common.save": "保存",
+  "admin.common.cancel": "取消",
+  "admin.common.confirm": "确认",
+  "admin.common.export": "导出",
+  "admin.common.actions": "操作",
+  "admin.common.status": "状态",
+  "admin.common.all": "全部",
+  "admin.common.loading": "加载中...",
+  "admin.common.empty": "暂无数据",
+  "admin.common.error": "加载失败",
+  "admin.common.retry": "重试",
+  "admin.common.page": "页",
+  "admin.common.total": "共",
+  "admin.common.records": "条",
+  "admin.common.active": "启用",
+  "admin.common.disabled": "禁用",
+  "admin.common.locked": "锁定",
+  "admin.common.yes": "是",
+  "admin.common.no": "否",
+  "admin.common.name": "姓名",
+  "admin.common.email": "邮箱",
+  "admin.common.role": "角色",
+  "admin.common.createdAt": "创建时间",
+  "admin.common.updatedAt": "更新时间",
+  "admin.common.lastLoginAt": "最后登录",
+  "admin.common.dataScope": "数据范围",
+  "admin.common.school": "学校",
+  "admin.common.grade": "年级",
+  "admin.common.class": "班级",
+
+  // 仪表盘
+  "admin.dashboard.title": "管理仪表盘",
+  "admin.dashboard.totalTeachers": "教师总数",
+  "admin.dashboard.totalStudents": "学生总数",
+  "admin.dashboard.totalClasses": "班级总数",
+  "admin.dashboard.totalSchools": "学校总数",
+  "admin.dashboard.schoolAvgScore": "全校平均分",
+  "admin.dashboard.activeUsersToday": "今日活跃用户",
+  "admin.dashboard.auditEventsToday": "今日审计事件",
+  "admin.dashboard.trend": "趋势",
+  "admin.dashboard.serviceHealth": "服务健康",
+
+  // 用户管理
+  "admin.users.title": "用户管理",
+  "admin.users.new": "新建用户",
+  "admin.users.edit": "编辑用户",
+  "admin.users.deleteConfirm": "确认删除该用户？",
+  "admin.users.toggleStatus": "切换状态",
+  "admin.users.assignRole": "分配角色",
+  "admin.users.password": "密码",
+  "admin.users.roles": "角色",
+  "admin.users.organization": "所属组织",
+
+  // 角色权限
+  "admin.roles.title": "角色权限管理",
+  "admin.roles.new": "新建角色",
+  "admin.roles.permissionMatrix": "权限矩阵",
+  "admin.roles.systemRole": "系统预置",
+  "admin.roles.userCount": "用户数",
+  "admin.roles.deleteConfirm": "确认删除该角色？",
+  "admin.roles.cannotDeleteSystem": "系统预置角色不可删除",
+  "admin.roles.cannotDeleteWithUsers": "角色下仍有用户，不可删除",
+
+  // 权限点
+  "admin.permissions.title": "权限点管理",
+  "admin.permissions.resource": "资源",
+  "admin.permissions.action": "操作",
+  "admin.permissions.code": "权限码",
+
+  // 视口配置
+  "admin.viewports.title": "视口配置",
+  "admin.viewports.key": "标识",
+  "admin.viewports.label": "标签",
+  "admin.viewports.route": "路由",
+  "admin.viewports.sortOrder": "排序",
+  "admin.viewports.requiredPermission": "所需权限",
+  "admin.viewports.scope": "作用域",
+  "admin.viewports.visible": "是否可见",
+  "admin.viewports.dragHint": "拖拽调整排序",
+
+  // 组织管理
+  "admin.organization.title": "组织管理",
+  "admin.organization.school": "学校",
+  "admin.organization.expand": "展开",
+  "admin.organization.collapse": "折叠",
+
+  // 学校设置
+  "admin.system.title": "学校设置",
+  "admin.system.schoolName": "学校名称",
+  "admin.system.schoolCode": "学校代码",
+  "admin.system.academicYear": "学年",
+  "admin.system.semester": "学期",
+  "admin.system.contactEmail": "联系邮箱",
+  "admin.system.contactPhone": "联系电话",
+  "admin.system.address": "地址",
+  "admin.system.timezone": "时区",
+  "admin.system.locale": "语言",
+  "admin.system.saveSuccess": "设置已保存",
+
+  // 班级管理
+  "admin.classes.title": "班级管理",
+  "admin.classes.headTeacher": "班主任",
+  "admin.classes.studentCount": "学生数",
+
+  // 教师管理
+  "admin.teachers.title": "教师管理",
+  "admin.teachers.subjects": "任教科目",
+  "admin.teachers.classCount": "班级数",
+
+  // 学生管理
+  "admin.students.title": "学生管理",
+  "admin.students.guardian": "家长",
+  "admin.students.guardianPhone": "家长电话",
+
+  // 审计日志
+  "admin.auditLogs.title": "审计日志",
+  "admin.auditLogs.actor": "操作人",
+  "admin.auditLogs.action": "操作",
+  "admin.auditLogs.resource": "资源",
+  "admin.auditLogs.resourceId": "资源ID",
+  "admin.auditLogs.ip": "IP地址",
+  "admin.auditLogs.time": "时间",
+  "admin.auditLogs.dateRange": "时间范围",
+  "admin.auditLogs.exportCsv": "导出CSV",
+  "admin.auditLogs.traceId": "追踪ID",
+
+  // 通知
+  "admin.notification.title": "通知中心",
+  "admin.notification.auditAlert": "审计告警",
+  "admin.notification.abnormalLogin": "异常登录",
+  "admin.notification.systemError": "系统异常",
+
+  // 退出
+  "admin.auth.logout": "退出登录",
+  "admin.auth.welcome": "Edu 管理端",
+};
+
+/**
+ * 翻译函数
+ * @param key i18n key（如 "admin.nav.dashboard"）
+ * @param params 模板参数（如 { count: 5 }，替换 {{count}}）
+ */
+export function t(
+  key: string,
+  params?: Record<string, string | number>,
+): string {
+  let msg = messages[key] ?? key;
+  if (params) {
+    for (const [k, v] of Object.entries(params)) {
+      msg = msg.replace(new RegExp(`\\{\\{${k}\\}\\}`, "g"), String(v));
+    }
+  }
+  return msg;
+}
diff --git a/apps/admin-portal/src/lib/permissions.ts b/apps/admin-portal/src/lib/permissions.ts
new file mode 100644
index 0000000..56dc85d
--- /dev/null
+++ b/apps/admin-portal/src/lib/permissions.ts
@@ -0,0 +1,78 @@
+/**
+ * admin-portal 权限点常量
+ *
+ * 仲裁裁决（ISSUE-046 §5.3 / ISSUE-045 §5.2）：
+ * - admin-portal 权限点统一加 ADMIN_ 前缀
+ * - 跨服务资源保留原前缀（如 IAM_USER_READ）
+ * - 错误码前缀 ADMIN_（合并 SCHOOL_ / ORG_ 入 ADMIN_）
+ *
+ * 来源：packages/contracts/src/permissions.ts（coord 维护）
+ * admin-portal 引用，不硬编码
+ */
+
+/** admin 自身资源权限点（ADMIN_ 前缀） */
+export const ADMIN_PERMISSIONS = {
+  DASHBOARD_VIEW: "ADMIN_DASHBOARD_VIEW",
+  SYSTEM_MANAGE: "ADMIN_SYSTEM_MANAGE",
+  AUDIT_READ: "ADMIN_AUDIT_READ",
+  CLASS_READ: "ADMIN_CLASS_READ",
+  CLASS_MANAGE: "ADMIN_CLASS_MANAGE",
+  TEACHER_READ: "ADMIN_TEACHER_READ",
+  TEACHER_MANAGE: "ADMIN_TEACHER_MANAGE",
+  STUDENT_READ: "ADMIN_STUDENT_READ",
+  STUDENT_MANAGE: "ADMIN_STUDENT_MANAGE",
+  ORG_MANAGE: "ADMIN_ORG_MANAGE",
+  SCHOOL_READ: "ADMIN_SCHOOL_READ",
+  SCHOOL_MANAGE: "ADMIN_SCHOOL_MANAGE",
+  MONITORING_VIEW: "ADMIN_MONITORING_VIEW",
+} as const;
+
+/** 跨服务资源权限点（保留原前缀，iam 域） */
+export const IAM_PERMISSIONS = {
+  USER_READ: "IAM_USER_READ",
+  USER_CREATE: "IAM_USER_CREATE",
+  USER_UPDATE: "IAM_USER_UPDATE",
+  USER_DELETE: "IAM_USER_DELETE",
+  ROLE_READ: "IAM_ROLE_READ",
+  ROLE_CREATE: "IAM_ROLE_CREATE",
+  ROLE_UPDATE: "IAM_ROLE_UPDATE",
+  ROLE_DELETE: "IAM_ROLE_DELETE",
+  PERMISSION_READ: "IAM_PERMISSION_READ",
+  VIEWPORT_READ: "IAM_VIEWPORT_READ",
+  VIEWPORT_UPDATE: "IAM_VIEWPORT_UPDATE",
+} as const;
+
+/** 所有权限点合集 */
+export const PERMISSIONS = {
+  ...ADMIN_PERMISSIONS,
+  ...IAM_PERMISSIONS,
+} as const;
+
+export type PermissionCode = (typeof PERMISSIONS)[keyof typeof PERMISSIONS];
+
+/** admin-portal 视口路由权限映射（contract §1.2） */
+export const ROUTE_PERMISSIONS: Record<string, string> = {
+  "/admin/dashboard": ADMIN_PERMISSIONS.DASHBOARD_VIEW,
+  "/admin/users": IAM_PERMISSIONS.USER_READ,
+  "/admin/roles": IAM_PERMISSIONS.ROLE_READ,
+  "/admin/permissions": IAM_PERMISSIONS.PERMISSION_READ,
+  "/admin/viewports": IAM_PERMISSIONS.VIEWPORT_READ,
+  "/admin/organization": ADMIN_PERMISSIONS.ORG_MANAGE,
+  "/admin/system": ADMIN_PERMISSIONS.SYSTEM_MANAGE,
+  "/admin/classes": ADMIN_PERMISSIONS.CLASS_READ,
+  "/admin/teachers": ADMIN_PERMISSIONS.TEACHER_READ,
+  "/admin/students": ADMIN_PERMISSIONS.STUDENT_READ,
+  "/admin/audit-logs": ADMIN_PERMISSIONS.AUDIT_READ,
+};
+
+/** admin-portal 错误码前缀（ISSUE-045 §5.2） */
+export const ADMIN_ERROR_PREFIX = "ADMIN_";
+
+/** 消费的错误码前缀（contract §2.5） */
+export const CONSUMED_ERROR_PREFIXES = [
+  "IAM_",
+  "BFF_TEACHER_",
+  "GW_",
+  "NETWORK_",
+  "ADMIN_",
+] as const;
diff --git a/apps/admin-portal/src/lib/web-vitals.ts b/apps/admin-portal/src/lib/web-vitals.ts
new file mode 100644
index 0000000..202af34
--- /dev/null
+++ b/apps/admin-portal/src/lib/web-vitals.ts
@@ -0,0 +1,43 @@
+/**
+ * Web Vitals 采集（A11y + 性能）
+ *
+ * 仲裁：所有前端应用必须采集 Web Vitals
+ * 端点：NEXT_PUBLIC_WEB_VITALS_ENDPOINT（默认 /api/admin/web-vitals）
+ */
+import { onLCP, onCLS, onFCP, onINP, onTTFB } from "web-vitals";
+
+type Metric = { name: string; value: number; rating: string; id: string };
+
+const ENDPOINT =
+  process.env.NEXT_PUBLIC_WEB_VITALS_ENDPOINT ?? "/api/admin/web-vitals";
+
+function sendMetric(metric: Metric): void {
+  if (typeof navigator === "undefined") return;
+  const body = JSON.stringify({
+    name: metric.name,
+    value: metric.value,
+    rating: metric.rating,
+    id: metric.id,
+    page: window.location.pathname,
+    ts: Date.now(),
+  });
+  // 使用 sendBeacon 避免阻塞卸载
+  if (navigator.sendBeacon) {
+    navigator.sendBeacon(ENDPOINT, body);
+  } else {
+    void fetch(ENDPOINT, { method: "POST", body, keepalive: true }).catch(
+      () => {
+        // 忽略上报失败
+      },
+    );
+  }
+}
+
+export function initWebVitals(): void {
+  if (typeof window === "undefined") return;
+  onLCP((m) => sendMetric(m as unknown as Metric));
+  onCLS((m) => sendMetric(m as unknown as Metric));
+  onFCP((m) => sendMetric(m as unknown as Metric));
+  onINP((m) => sendMetric(m as unknown as Metric));
+  onTTFB((m) => sendMetric(m as unknown as Metric));
+}
diff --git a/apps/admin-portal/src/mocks/browser.ts b/apps/admin-portal/src/mocks/browser.ts
new file mode 100644
index 0000000..767dd86
--- /dev/null
+++ b/apps/admin-portal/src/mocks/browser.ts
@@ -0,0 +1,10 @@
+/**
+ * MSW Browser Worker
+ *
+ * 仲裁 ARB-004 §4：开发期 MSW 拦截所有 GraphQL/HTTP 请求
+ * 启用条件：NEXT_PUBLIC_API_MOCKING=enabled
+ */
+import { setupWorker } from "msw/browser";
+import { handlers } from "./handlers";
+
+export const worker = setupWorker(...handlers);
diff --git a/apps/admin-portal/src/mocks/fixtures.ts b/apps/admin-portal/src/mocks/fixtures.ts
new file mode 100644
index 0000000..8a2b9d4
--- /dev/null
+++ b/apps/admin-portal/src/mocks/fixtures.ts
@@ -0,0 +1,906 @@
+/**
+ * Mock 数据库（开发期 fixtures）
+ *
+ * 仲裁 ARB-004 §4：MSW 拦截所有 GraphQL/HTTP 请求返回 mock 数据
+ * 所有数据符合 src/types/view-models.ts 类型定义
+ */
+import type {
+  UserViewModel,
+  RoleViewModel,
+  PermissionViewModel,
+  ViewportConfigViewModel,
+  OrganizationNode,
+  AdminClassViewModel,
+  AdminTeacherViewModel,
+  AdminStudentViewModel,
+  AuditLogViewModel,
+  AdminDashboardViewModel,
+  SystemSettingsViewModel,
+  CurrentUser,
+} from "@/types/view-models";
+
+export const mockCurrentUser: CurrentUser = {
+  id: "u-admin-001",
+  email: "admin@edu.test",
+  name: "系统管理员",
+  roles: ["system_admin"],
+  permissions: [
+    "ADMIN_DASHBOARD_VIEW",
+    "ADMIN_SYSTEM_MANAGE",
+    "ADMIN_AUDIT_READ",
+    "ADMIN_CLASS_READ",
+    "ADMIN_CLASS_MANAGE",
+    "ADMIN_TEACHER_READ",
+    "ADMIN_TEACHER_MANAGE",
+    "ADMIN_STUDENT_READ",
+    "ADMIN_STUDENT_MANAGE",
+    "ADMIN_ORG_MANAGE",
+    "ADMIN_SCHOOL_READ",
+    "ADMIN_SCHOOL_MANAGE",
+    "ADMIN_MONITORING_VIEW",
+    "IAM_USER_READ",
+    "IAM_USER_CREATE",
+    "IAM_USER_UPDATE",
+    "IAM_USER_DELETE",
+    "IAM_ROLE_READ",
+    "IAM_ROLE_CREATE",
+    "IAM_ROLE_UPDATE",
+    "IAM_ROLE_DELETE",
+    "IAM_PERMISSION_READ",
+    "IAM_VIEWPORT_READ",
+    "IAM_VIEWPORT_UPDATE",
+  ],
+  dataScope: "ALL",
+  schoolId: null,
+  schoolName: "Edu 实验学校",
+};
+
+export const mockPermissions: PermissionViewModel[] = [
+  {
+    id: "p-001",
+    code: "ADMIN_DASHBOARD_VIEW",
+    name: "仪表盘查看",
+    description: "查看管理仪表盘",
+    resource: "admin.dashboard",
+    action: "view",
+    isSystem: true,
+  },
+  {
+    id: "p-002",
+    code: "ADMIN_SYSTEM_MANAGE",
+    name: "系统设置",
+    description: "管理系统设置",
+    resource: "admin.system",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-003",
+    code: "ADMIN_AUDIT_READ",
+    name: "审计日志查看",
+    description: "查看审计日志",
+    resource: "admin.audit",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-004",
+    code: "ADMIN_CLASS_MANAGE",
+    name: "班级管理",
+    description: "管理班级",
+    resource: "admin.class",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-005",
+    code: "ADMIN_CLASS_READ",
+    name: "班级查看",
+    description: "查看班级",
+    resource: "admin.class",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-006",
+    code: "ADMIN_TEACHER_MANAGE",
+    name: "教师管理",
+    description: "管理教师",
+    resource: "admin.teacher",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-007",
+    code: "ADMIN_TEACHER_READ",
+    name: "教师查看",
+    description: "查看教师",
+    resource: "admin.teacher",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-008",
+    code: "ADMIN_STUDENT_MANAGE",
+    name: "学生管理",
+    description: "管理学生",
+    resource: "admin.student",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-009",
+    code: "ADMIN_STUDENT_READ",
+    name: "学生查看",
+    description: "查看学生",
+    resource: "admin.student",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-010",
+    code: "ADMIN_ORG_MANAGE",
+    name: "组织管理",
+    description: "管理组织架构",
+    resource: "admin.org",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-011",
+    code: "ADMIN_SCHOOL_MANAGE",
+    name: "学校管理",
+    description: "管理学校",
+    resource: "admin.school",
+    action: "manage",
+    isSystem: true,
+  },
+  {
+    id: "p-012",
+    code: "ADMIN_SCHOOL_READ",
+    name: "学校查看",
+    description: "查看学校",
+    resource: "admin.school",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-013",
+    code: "ADMIN_MONITORING_VIEW",
+    name: "监控查看",
+    description: "查看系统监控",
+    resource: "admin.monitoring",
+    action: "view",
+    isSystem: true,
+  },
+  {
+    id: "p-101",
+    code: "IAM_USER_READ",
+    name: "用户查看",
+    description: "查看用户",
+    resource: "iam.user",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-102",
+    code: "IAM_USER_CREATE",
+    name: "用户创建",
+    description: "创建用户",
+    resource: "iam.user",
+    action: "create",
+    isSystem: true,
+  },
+  {
+    id: "p-103",
+    code: "IAM_USER_UPDATE",
+    name: "用户更新",
+    description: "更新用户",
+    resource: "iam.user",
+    action: "update",
+    isSystem: true,
+  },
+  {
+    id: "p-104",
+    code: "IAM_USER_DELETE",
+    name: "用户删除",
+    description: "删除用户",
+    resource: "iam.user",
+    action: "delete",
+    isSystem: true,
+  },
+  {
+    id: "p-105",
+    code: "IAM_ROLE_READ",
+    name: "角色查看",
+    description: "查看角色",
+    resource: "iam.role",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-106",
+    code: "IAM_ROLE_CREATE",
+    name: "角色创建",
+    description: "创建角色",
+    resource: "iam.role",
+    action: "create",
+    isSystem: true,
+  },
+  {
+    id: "p-107",
+    code: "IAM_ROLE_UPDATE",
+    name: "角色更新",
+    description: "更新角色",
+    resource: "iam.role",
+    action: "update",
+    isSystem: true,
+  },
+  {
+    id: "p-108",
+    code: "IAM_ROLE_DELETE",
+    name: "角色删除",
+    description: "删除角色",
+    resource: "iam.role",
+    action: "delete",
+    isSystem: true,
+  },
+  {
+    id: "p-109",
+    code: "IAM_PERMISSION_READ",
+    name: "权限查看",
+    description: "查看权限点",
+    resource: "iam.permission",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-110",
+    code: "IAM_VIEWPORT_READ",
+    name: "视口查看",
+    description: "查看视口",
+    resource: "iam.viewport",
+    action: "read",
+    isSystem: true,
+  },
+  {
+    id: "p-111",
+    code: "IAM_VIEWPORT_UPDATE",
+    name: "视口更新",
+    description: "更新视口",
+    resource: "iam.viewport",
+    action: "update",
+    isSystem: true,
+  },
+];
+
+export const mockRoles: RoleViewModel[] = [
+  {
+    id: "r-001",
+    name: "系统管理员",
+    code: "system_admin",
+    description: "拥有所有权限",
+    permissions: mockPermissions,
+    userCount: 2,
+    dataScope: "ALL",
+    isSystem: true,
+    createdAt: 1704067200000,
+    updatedAt: 1706745600000,
+  },
+  {
+    id: "r-002",
+    name: "学校管理员",
+    code: "school_admin",
+    description: "管理本校资源",
+    permissions: mockPermissions.filter((p) =>
+      [
+        "ADMIN_DASHBOARD_VIEW",
+        "ADMIN_CLASS_MANAGE",
+        "ADMIN_TEACHER_READ",
+        "ADMIN_STUDENT_READ",
+        "ADMIN_ORG_MANAGE",
+        "ADMIN_SCHOOL_READ",
+        "ADMIN_AUDIT_READ",
+      ].includes(p.code),
+    ),
+    userCount: 5,
+    dataScope: "SCHOOL",
+    isSystem: true,
+    createdAt: 1704067200000,
+    updatedAt: 1706745600000,
+  },
+  {
+    id: "r-003",
+    name: "年级组长",
+    code: "grade_leader",
+    description: "管理本年级",
+    permissions: mockPermissions.filter((p) =>
+      [
+        "ADMIN_DASHBOARD_VIEW",
+        "ADMIN_CLASS_READ",
+        "ADMIN_TEACHER_READ",
+        "ADMIN_STUDENT_READ",
+      ].includes(p.code),
+    ),
+    userCount: 8,
+    dataScope: "GRADE",
+    isSystem: false,
+    createdAt: 1704153600000,
+    updatedAt: 1706832000000,
+  },
+  {
+    id: "r-004",
+    name: "班主任",
+    code: "head_teacher",
+    description: "管理本班级",
+    permissions: mockPermissions.filter((p) =>
+      ["ADMIN_DASHBOARD_VIEW", "ADMIN_STUDENT_READ"].includes(p.code),
+    ),
+    userCount: 24,
+    dataScope: "CLASS",
+    isSystem: false,
+    createdAt: 1704240000000,
+    updatedAt: 1706918400000,
+  },
+];
+
+export const mockUsers: UserViewModel[] = [
+  {
+    id: "u-001",
+    email: "admin@edu.test",
+    name: "系统管理员",
+    roles: [mockRoles[0]!],
+    status: "active",
+    dataScope: "ALL",
+    organizationId: null,
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1706918400000,
+    createdAt: 1704067200000,
+    updatedAt: 1706745600000,
+  },
+  {
+    id: "u-002",
+    email: "principal@edu.test",
+    name: "张校长",
+    roles: [mockRoles[1]!],
+    status: "active",
+    dataScope: "SCHOOL",
+    organizationId: "org-school-001",
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1706832000000,
+    createdAt: 1704153600000,
+    updatedAt: 1706832000000,
+  },
+  {
+    id: "u-003",
+    email: "gradeleader@edu.test",
+    name: "李组长",
+    roles: [mockRoles[2]!],
+    status: "active",
+    dataScope: "GRADE",
+    organizationId: "org-grade-001",
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1706745600000,
+    createdAt: 1704240000000,
+    updatedAt: 1706745600000,
+  },
+  {
+    id: "u-004",
+    email: "teacher1@edu.test",
+    name: "王老师",
+    roles: [mockRoles[3]!],
+    status: "active",
+    dataScope: "CLASS",
+    organizationId: "org-class-001",
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1706688000000,
+    createdAt: 1704326400000,
+    updatedAt: 1706688000000,
+  },
+  {
+    id: "u-005",
+    email: "teacher2@edu.test",
+    name: "赵老师",
+    roles: [mockRoles[3]!],
+    status: "disabled",
+    dataScope: "CLASS",
+    organizationId: "org-class-002",
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1704326400000,
+    createdAt: 1704412800000,
+    updatedAt: 1706601600000,
+  },
+  {
+    id: "u-006",
+    email: "teacher3@edu.test",
+    name: "钱老师",
+    roles: [mockRoles[2]!, mockRoles[3]!],
+    status: "locked",
+    dataScope: "GRADE",
+    organizationId: "org-grade-002",
+    schoolName: "Edu 实验学校",
+    lastLoginAt: 1706515200000,
+    createdAt: 1704499200000,
+    updatedAt: 1706515200000,
+  },
+];
+
+export const mockViewports: ViewportConfigViewModel[] = [
+  {
+    id: "v-001",
+    key: "dashboard",
+    label: "工作台",
+    route: "/dashboard",
+    icon: "home",
+    sortOrder: 1,
+    requiredPermission: null,
+    scope: "teacher",
+    isVisible: true,
+  },
+  {
+    id: "v-002",
+    key: "classes",
+    label: "我的班级",
+    route: "/classes",
+    icon: "users",
+    sortOrder: 2,
+    requiredPermission: "TEACHER_CLASS_READ",
+    scope: "teacher",
+    isVisible: true,
+  },
+  {
+    id: "v-003",
+    key: "exams",
+    label: "考试管理",
+    route: "/exams",
+    icon: "file-text",
+    sortOrder: 3,
+    requiredPermission: "TEACHER_EXAM_READ",
+    scope: "teacher",
+    isVisible: true,
+  },
+  {
+    id: "v-004",
+    key: "homework",
+    label: "作业管理",
+    route: "/homework",
+    icon: "book",
+    sortOrder: 4,
+    requiredPermission: "TEACHER_HOMEWORK_READ",
+    scope: "teacher",
+    isVisible: true,
+  },
+  {
+    id: "v-005",
+    key: "students",
+    label: "学生中心",
+    route: "/students",
+    icon: "user",
+    sortOrder: 5,
+    requiredPermission: "STUDENT_READ",
+    scope: "student",
+    isVisible: true,
+  },
+  {
+    id: "v-006",
+    key: "parent",
+    label: "家长视口",
+    route: "/parent",
+    icon: "heart",
+    sortOrder: 6,
+    requiredPermission: "PARENT_VIEW",
+    scope: "parent",
+    isVisible: true,
+  },
+  {
+    id: "v-007",
+    key: "admin",
+    label: "管理端",
+    route: "/admin",
+    icon: "settings",
+    sortOrder: 7,
+    requiredPermission: "ADMIN_DASHBOARD_VIEW",
+    scope: "admin",
+    isVisible: true,
+  },
+];
+
+export const mockOrganization: OrganizationNode[] = [
+  {
+    id: "org-school-001",
+    name: "Edu 实验学校",
+    type: "school",
+    parentId: null,
+    childrenCount: 3,
+    sortOrder: 1,
+  },
+  {
+    id: "org-grade-001",
+    name: "一年级",
+    type: "grade",
+    parentId: "org-school-001",
+    childrenCount: 4,
+    sortOrder: 1,
+  },
+  {
+    id: "org-grade-002",
+    name: "二年级",
+    type: "grade",
+    parentId: "org-school-001",
+    childrenCount: 4,
+    sortOrder: 2,
+  },
+  {
+    id: "org-grade-003",
+    name: "三年级",
+    type: "grade",
+    parentId: "org-school-001",
+    childrenCount: 3,
+    sortOrder: 3,
+  },
+  {
+    id: "org-class-001",
+    name: "一年级一班",
+    type: "class",
+    parentId: "org-grade-001",
+    childrenCount: 0,
+    sortOrder: 1,
+  },
+  {
+    id: "org-class-002",
+    name: "一年级二班",
+    type: "class",
+    parentId: "org-grade-001",
+    childrenCount: 0,
+    sortOrder: 2,
+  },
+  {
+    id: "org-class-003",
+    name: "一年级三班",
+    type: "class",
+    parentId: "org-grade-001",
+    childrenCount: 0,
+    sortOrder: 3,
+  },
+  {
+    id: "org-class-004",
+    name: "一年级四班",
+    type: "class",
+    parentId: "org-grade-001",
+    childrenCount: 0,
+    sortOrder: 4,
+  },
+  {
+    id: "org-class-005",
+    name: "二年级一班",
+    type: "class",
+    parentId: "org-grade-002",
+    childrenCount: 0,
+    sortOrder: 1,
+  },
+  {
+    id: "org-class-006",
+    name: "二年级二班",
+    type: "class",
+    parentId: "org-grade-002",
+    childrenCount: 0,
+    sortOrder: 2,
+  },
+  {
+    id: "org-class-007",
+    name: "二年级三班",
+    type: "class",
+    parentId: "org-grade-002",
+    childrenCount: 0,
+    sortOrder: 3,
+  },
+  {
+    id: "org-class-008",
+    name: "二年级四班",
+    type: "class",
+    parentId: "org-grade-002",
+    childrenCount: 0,
+    sortOrder: 4,
+  },
+];
+
+export const mockClasses: AdminClassViewModel[] = [
+  {
+    id: "c-001",
+    name: "一年级一班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "王老师",
+    studentCount: 36,
+    createdAt: 1704067200000,
+  },
+  {
+    id: "c-002",
+    name: "一年级二班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "赵老师",
+    studentCount: 35,
+    createdAt: 1704067200000,
+  },
+  {
+    id: "c-003",
+    name: "一年级三班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "钱老师",
+    studentCount: 34,
+    createdAt: 1704067200000,
+  },
+  {
+    id: "c-004",
+    name: "二年级一班",
+    gradeName: "二年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "孙老师",
+    studentCount: 38,
+    createdAt: 1704067200000,
+  },
+  {
+    id: "c-005",
+    name: "二年级二班",
+    gradeName: "二年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "周老师",
+    studentCount: 37,
+    createdAt: 1704067200000,
+  },
+  {
+    id: "c-006",
+    name: "三年级一班",
+    gradeName: "三年级",
+    schoolName: "Edu 实验学校",
+    headTeacherName: "吴老师",
+    studentCount: 33,
+    createdAt: 1704067200000,
+  },
+];
+
+export const mockTeachers: AdminTeacherViewModel[] = [
+  {
+    id: "t-001",
+    email: "teacher1@edu.test",
+    name: "王老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["语文", "阅读"],
+    classCount: 1,
+    status: "active",
+    lastLoginAt: 1706688000000,
+  },
+  {
+    id: "t-002",
+    email: "teacher2@edu.test",
+    name: "赵老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["数学"],
+    classCount: 1,
+    status: "disabled",
+    lastLoginAt: 1704326400000,
+  },
+  {
+    id: "t-003",
+    email: "teacher3@edu.test",
+    name: "钱老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["英语"],
+    classCount: 2,
+    status: "locked",
+    lastLoginAt: 1706515200000,
+  },
+  {
+    id: "t-004",
+    email: "teacher4@edu.test",
+    name: "孙老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["物理", "科学"],
+    classCount: 1,
+    status: "active",
+    lastLoginAt: 1706601600000,
+  },
+  {
+    id: "t-005",
+    email: "teacher5@edu.test",
+    name: "周老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["化学"],
+    classCount: 1,
+    status: "active",
+    lastLoginAt: 1706688000000,
+  },
+  {
+    id: "t-006",
+    email: "teacher6@edu.test",
+    name: "吴老师",
+    schoolName: "Edu 实验学校",
+    subjects: ["生物"],
+    classCount: 1,
+    status: "active",
+    lastLoginAt: 1706745600000,
+  },
+];
+
+export const mockStudents: AdminStudentViewModel[] = [
+  {
+    id: "s-001",
+    email: "student1@edu.test",
+    name: "小明",
+    className: "一年级一班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    guardianName: "大明",
+    guardianPhone: "13800000001",
+    status: "active",
+  },
+  {
+    id: "s-002",
+    email: "student2@edu.test",
+    name: "小红",
+    className: "一年级一班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    guardianName: "大红",
+    guardianPhone: "13800000002",
+    status: "active",
+  },
+  {
+    id: "s-003",
+    email: "student3@edu.test",
+    name: "小华",
+    className: "一年级二班",
+    gradeName: "一年级",
+    schoolName: "Edu 实验学校",
+    guardianName: "大华",
+    guardianPhone: "13800000003",
+    status: "active",
+  },
+  {
+    id: "s-004",
+    email: "student4@edu.test",
+    name: "小芳",
+    className: "二年级一班",
+    gradeName: "二年级",
+    schoolName: "Edu 实验学校",
+    guardianName: "大芳",
+    guardianPhone: "13800000004",
+    status: "disabled",
+  },
+  {
+    id: "s-005",
+    email: "student5@edu.test",
+    name: "小军",
+    className: "三年级一班",
+    gradeName: "三年级",
+    schoolName: "Edu 实验学校",
+    guardianName: "大军",
+    guardianPhone: "13800000005",
+    status: "active",
+  },
+];
+
+export const mockAuditLogs: AuditLogViewModel[] = [
+  {
+    id: "al-001",
+    eventId: "evt-001",
+    occurredAt: 1706918400000,
+    actorUserId: "u-001",
+    actorName: "系统管理员",
+    action: "USER_LOGIN",
+    resourceType: "iam.user",
+    resourceId: "u-001",
+    ip: "192.168.1.100",
+    userAgent: "Mozilla/5.0",
+    beforeState: null,
+    afterState: null,
+    traceId: "trace-001",
+  },
+  {
+    id: "al-002",
+    eventId: "evt-002",
+    occurredAt: 1706832000000,
+    actorUserId: "u-001",
+    actorName: "系统管理员",
+    action: "USER_CREATE",
+    resourceType: "iam.user",
+    resourceId: "u-006",
+    ip: "192.168.1.100",
+    userAgent: "Mozilla/5.0",
+    beforeState: null,
+    afterState: '{"email":"teacher3@edu.test","name":"钱老师"}',
+    traceId: "trace-002",
+  },
+  {
+    id: "al-003",
+    eventId: "evt-003",
+    occurredAt: 1706745600000,
+    actorUserId: "u-002",
+    actorName: "张校长",
+    action: "ROLE_UPDATE",
+    resourceType: "iam.role",
+    resourceId: "r-002",
+    ip: "192.168.1.101",
+    userAgent: "Mozilla/5.0",
+    beforeState: '{"permissions":["ADMIN_DASHBOARD_VIEW"]}',
+    afterState: '{"permissions":["ADMIN_DASHBOARD_VIEW","ADMIN_CLASS_MANAGE"]}',
+    traceId: "trace-003",
+  },
+  {
+    id: "al-004",
+    eventId: "evt-004",
+    occurredAt: 1706688000000,
+    actorUserId: "u-001",
+    actorName: "系统管理员",
+    action: "USER_TOGGLE_STATUS",
+    resourceType: "iam.user",
+    resourceId: "u-005",
+    ip: "192.168.1.100",
+    userAgent: "Mozilla/5.0",
+    beforeState: '{"status":"active"}',
+    afterState: '{"status":"disabled"}',
+    traceId: "trace-004",
+  },
+  {
+    id: "al-005",
+    eventId: "evt-005",
+    occurredAt: 1706601600000,
+    actorUserId: "system",
+    actorName: "系统",
+    action: "ABNORMAL_LOGIN_BLOCKED",
+    resourceType: "iam.user",
+    resourceId: "u-006",
+    ip: "10.0.0.99",
+    userAgent: "curl/7.68",
+    beforeState: null,
+    afterState: null,
+    traceId: "trace-005",
+  },
+];
+
+export const mockDashboard: AdminDashboardViewModel = {
+  totalTeachers: 6,
+  totalStudents: 213,
+  totalClasses: 6,
+  totalSchools: 1,
+  schoolAvgScore: 85.6,
+  activeUsersToday: 28,
+  auditEventsToday: 12,
+  trend: [
+    { date: "2026-07-04", teachers: 4, students: 198, avgScore: 84.2 },
+    { date: "2026-07-05", teachers: 5, students: 205, avgScore: 84.8 },
+    { date: "2026-07-06", teachers: 5, students: 210, avgScore: 85.1 },
+    { date: "2026-07-07", teachers: 6, students: 211, avgScore: 85.3 },
+    { date: "2026-07-08", teachers: 6, students: 213, avgScore: 85.6 },
+    { date: "2026-07-09", teachers: 6, students: 213, avgScore: 85.5 },
+    { date: "2026-07-10", teachers: 6, students: 213, avgScore: 85.6 },
+  ],
+  serviceHealth: [
+    { serviceName: "api-gateway", status: "healthy", latencyMs: 12 },
+    { serviceName: "iam", status: "healthy", latencyMs: 28 },
+    { serviceName: "teacher-bff", status: "healthy", latencyMs: 45 },
+    { serviceName: "classes", status: "healthy", latencyMs: 35 },
+    { serviceName: "core-edu", status: "healthy", latencyMs: 52 },
+    { serviceName: "msg", status: "degraded", latencyMs: 280 },
+    { serviceName: "data-ana", status: "healthy", latencyMs: 120 },
+  ],
+};
+
+export const mockSystemSettings: SystemSettingsViewModel = {
+  schoolName: "Edu 实验学校",
+  schoolCode: "EDU-001",
+  academicYear: "2025-2026",
+  semester: "second",
+  contactEmail: "contact@edu.test",
+  contactPhone: "010-88888888",
+  address: "北京市海淀区中关村大街 1 号",
+  timezone: "Asia/Shanghai",
+  locale: "zh-CN",
+};
+
+/** 生成简单 ID */
+export function genId(prefix: string): string {
+  return `${prefix}-${Date.now()}-${Math.random().toString(36).slice(2, 6)}`;
+}
diff --git a/apps/admin-portal/src/mocks/handlers.ts b/apps/admin-portal/src/mocks/handlers.ts
new file mode 100644
index 0000000..c2e7250
--- /dev/null
+++ b/apps/admin-portal/src/mocks/handlers.ts
@@ -0,0 +1,516 @@
+/**
+ * MSW Handlers
+ *
+ * 仲裁 ARB-004 §4：MSW 拦截所有 GraphQL/HTTP 请求
+ * 端点：
+ * - POST /api/auth/login - mock 登录
+ * - POST /api/admin/graphql - admin 命名空间 GraphQL
+ * - GET /ws - WebSocket（mock-socket 在 use-websocket.ts 中处理）
+ */
+import { graphql, http, HttpResponse } from "msw";
+import {
+  mockCurrentUser,
+  mockUsers,
+  mockRoles,
+  mockPermissions,
+  mockViewports,
+  mockOrganization,
+  mockClasses,
+  mockTeachers,
+  mockStudents,
+  mockAuditLogs,
+  mockDashboard,
+  mockSystemSettings,
+  genId,
+} from "./fixtures";
+import type {
+  UserViewModel,
+  RoleViewModel,
+  ViewportConfigViewModel,
+  PaginatedResult,
+  ListFilter,
+} from "@/types/view-models";
+
+const BASE_URL = "";
+
+// 内存中可变副本（支持 mock 增删改）
+const db = {
+  users: [...mockUsers] as UserViewModel[],
+  roles: [...mockRoles] as RoleViewModel[],
+  viewports: [...mockViewports] as ViewportConfigViewModel[],
+  permissions: [...mockPermissions],
+  organization: [...mockOrganization],
+  classes: [...mockClasses],
+  teachers: [...mockTeachers],
+  students: [...mockStudents],
+  auditLogs: [...mockAuditLogs],
+  systemSettings: { ...mockSystemSettings },
+};
+
+function paginate<T>(
+  items: T[],
+  filter: Partial<ListFilter>,
+): PaginatedResult<T> {
+  const page = filter.page ?? 1;
+  const pageSize = filter.pageSize ?? 20;
+  const start = (page - 1) * pageSize;
+  const end = start + pageSize;
+  const sliced = items.slice(start, end);
+  return {
+    items: sliced,
+    total: items.length,
+    page,
+    pageSize,
+    hasNext: end < items.length,
+  };
+}
+
+function recordAudit(
+  action: string,
+  resourceType: string,
+  resourceId: string,
+  afterState?: string,
+): void {
+  db.auditLogs.unshift({
+    id: genId("al"),
+    eventId: genId("evt"),
+    occurredAt: Date.now(),
+    actorUserId: mockCurrentUser.id,
+    actorName: mockCurrentUser.name,
+    action,
+    resourceType,
+    resourceId,
+    ip: "127.0.0.1",
+    userAgent: "MSW-Mock",
+    beforeState: null,
+    afterState: afterState ?? null,
+    traceId: genId("trace"),
+  });
+}
+
+export const handlers = [
+  // ─── 认证 ────────────────────────────────────────────
+  http.post(`${BASE_URL}/api/auth/login`, async ({ request }) => {
+    const body = (await request.json()) as { email: string; password: string };
+    if (body.email === "admin@edu.test" && body.password === "admin123") {
+      return HttpResponse.json({
+        success: true,
+        data: {
+          user: mockCurrentUser,
+          tokens: { accessToken: "mock-jwt-token-admin-001" },
+        },
+      });
+    }
+    return HttpResponse.json(
+      {
+        success: false,
+        error: { message: "邮箱或密码错误" },
+      },
+      { status: 401 },
+    );
+  }),
+
+  // ─── GraphQL admin 命名空间 ──────────────────────────
+  graphql.operation(({ query, variables }) => {
+    const operationName =
+      (query.match(/^\s*(query|mutation)\s+(\w+)/) || [])[2] ?? "";
+
+    // ── currentUser ──
+    if (operationName === "CurrentUser") {
+      return HttpResponse.json({ data: { currentUser: mockCurrentUser } });
+    }
+
+    // ── adminUsers ──
+    if (operationName === "AdminUsers") {
+      const filter = (variables.filter ?? {}) as Partial<ListFilter>;
+      let items = [...db.users];
+      if (filter.search) {
+        const q = filter.search.toLowerCase();
+        items = items.filter(
+          (u) =>
+            u.name.toLowerCase().includes(q) ||
+            u.email.toLowerCase().includes(q),
+        );
+      }
+      if (filter.status && filter.status !== "all") {
+        items = items.filter((u) => u.status === filter.status);
+      }
+      const result = paginate(items, filter);
+      return HttpResponse.json({ data: { adminUsers: result } });
+    }
+
+    // ── adminUser ──
+    if (operationName === "AdminUser") {
+      const id = variables.id as string;
+      const user = db.users.find((u) => u.id === id) ?? null;
+      return HttpResponse.json({ data: { adminUser: user } });
+    }
+
+    // ── createUser ──
+    if (operationName === "CreateUser") {
+      const input = variables.input as {
+        email: string;
+        name: string;
+        password: string;
+        roleIds?: string[];
+        dataScope?: string;
+        organizationId?: string;
+      };
+      const roles = db.roles.filter((r) => input.roleIds?.includes(r.id));
+      const newUser: UserViewModel = {
+        id: genId("u"),
+        email: input.email,
+        name: input.name,
+        roles,
+        status: "active",
+        dataScope: (input.dataScope as UserViewModel["dataScope"]) ?? "SCHOOL",
+        organizationId: input.organizationId ?? null,
+        schoolName: "Edu 实验学校",
+        lastLoginAt: null,
+        createdAt: Date.now(),
+        updatedAt: Date.now(),
+      };
+      db.users.push(newUser);
+      recordAudit(
+        "USER_CREATE",
+        "iam.user",
+        newUser.id,
+        JSON.stringify({ email: newUser.email, name: newUser.name }),
+      );
+      return HttpResponse.json({
+        data: {
+          createUser: {
+            id: newUser.id,
+            email: newUser.email,
+            name: newUser.name,
+            status: newUser.status,
+          },
+        },
+      });
+    }
+
+    // ── updateUser ──
+    if (operationName === "UpdateUser") {
+      const id = variables.id as string;
+      const input = variables.input as {
+        name?: string;
+        email?: string;
+        roleIds?: string[];
+        dataScope?: string;
+        organizationId?: string;
+      };
+      const user = db.users.find((u) => u.id === id);
+      if (!user) {
+        return HttpResponse.json(
+          { errors: [{ message: "用户不存在" }] },
+          { status: 404 },
+        );
+      }
+      if (input.name) user.name = input.name;
+      if (input.email) user.email = input.email;
+      if (input.roleIds)
+        user.roles = db.roles.filter((r) => input.roleIds!.includes(r.id));
+      if (input.dataScope)
+        user.dataScope = input.dataScope as UserViewModel["dataScope"];
+      if (input.organizationId !== undefined)
+        user.organizationId = input.organizationId;
+      user.updatedAt = Date.now();
+      recordAudit("USER_UPDATE", "iam.user", user.id, JSON.stringify(input));
+      return HttpResponse.json({
+        data: {
+          updateUser: {
+            id: user.id,
+            email: user.email,
+            name: user.name,
+            status: user.status,
+          },
+        },
+      });
+    }
+
+    // ── toggleUserStatus ──
+    if (operationName === "ToggleUserStatus") {
+      const id = variables.id as string;
+      const newStatus = variables.status as UserViewModel["status"];
+      const user = db.users.find((u) => u.id === id);
+      if (!user) {
+        return HttpResponse.json(
+          { errors: [{ message: "用户不存在" }] },
+          { status: 404 },
+        );
+      }
+      const before = user.status;
+      user.status = newStatus;
+      user.updatedAt = Date.now();
+      recordAudit(
+        "USER_TOGGLE_STATUS",
+        "iam.user",
+        user.id,
+        JSON.stringify({ before, after: newStatus }),
+      );
+      return HttpResponse.json({
+        data: { toggleUserStatus: { id: user.id, status: user.status } },
+      });
+    }
+
+    // ── adminRoles ──
+    if (operationName === "AdminRoles") {
+      return HttpResponse.json({ data: { adminRoles: db.roles } });
+    }
+
+    // ── createRole ──
+    if (operationName === "CreateRole") {
+      const input = variables.input as {
+        name: string;
+        code: string;
+        description?: string;
+        dataScope?: string;
+      };
+      const newRole: RoleViewModel = {
+        id: genId("r"),
+        name: input.name,
+        code: input.code,
+        description: input.description ?? "",
+        permissions: [],
+        userCount: 0,
+        dataScope: (input.dataScope as RoleViewModel["dataScope"]) ?? "SCHOOL",
+        isSystem: false,
+        createdAt: Date.now(),
+        updatedAt: Date.now(),
+      };
+      db.roles.push(newRole);
+      recordAudit(
+        "ROLE_CREATE",
+        "iam.role",
+        newRole.id,
+        JSON.stringify({ name: newRole.name, code: newRole.code }),
+      );
+      return HttpResponse.json({
+        data: {
+          createRole: {
+            id: newRole.id,
+            name: newRole.name,
+            code: newRole.code,
+          },
+        },
+      });
+    }
+
+    // ── updateRolePermissions ──
+    if (operationName === "UpdateRolePermissions") {
+      const roleId = variables.roleId as string;
+      const codes = variables.permissionCodes as string[];
+      const role = db.roles.find((r) => r.id === roleId);
+      if (!role) {
+        return HttpResponse.json(
+          { errors: [{ message: "角色不存在" }] },
+          { status: 404 },
+        );
+      }
+      role.permissions = db.permissions.filter((p) => codes.includes(p.code));
+      role.updatedAt = Date.now();
+      recordAudit(
+        "ROLE_UPDATE",
+        "iam.role",
+        role.id,
+        JSON.stringify({ permissionCodes: codes }),
+      );
+      return HttpResponse.json({
+        data: {
+          updateRolePermissions: {
+            id: role.id,
+            permissions: role.permissions.map((p) => ({
+              id: p.id,
+              code: p.code,
+            })),
+          },
+        },
+      });
+    }
+
+    // ── adminPermissions ──
+    if (operationName === "AdminPermissions") {
+      return HttpResponse.json({ data: { adminPermissions: db.permissions } });
+    }
+
+    // ── adminViewports ──
+    if (operationName === "AdminViewports") {
+      const scope = variables.scope as string | undefined;
+      const items = scope
+        ? db.viewports.filter((v) => v.scope === scope)
+        : db.viewports;
+      return HttpResponse.json({ data: { adminViewports: items } });
+    }
+
+    // ── updateViewport ──
+    if (operationName === "UpdateViewport") {
+      const id = variables.id as string;
+      const input = variables.input as {
+        label?: string;
+        sortOrder?: number;
+        isVisible?: boolean;
+        requiredPermission?: string | null;
+      };
+      const vp = db.viewports.find((v) => v.id === id);
+      if (!vp) {
+        return HttpResponse.json(
+          { errors: [{ message: "视口不存在" }] },
+          { status: 404 },
+        );
+      }
+      if (input.label !== undefined) vp.label = input.label;
+      if (input.sortOrder !== undefined) vp.sortOrder = input.sortOrder;
+      if (input.isVisible !== undefined) vp.isVisible = input.isVisible;
+      if (input.requiredPermission !== undefined)
+        vp.requiredPermission = input.requiredPermission;
+      recordAudit(
+        "VIEWPORT_UPDATE",
+        "iam.viewport",
+        vp.id,
+        JSON.stringify(input),
+      );
+      return HttpResponse.json({
+        data: {
+          updateViewport: {
+            id: vp.id,
+            key: vp.key,
+            label: vp.label,
+            sortOrder: vp.sortOrder,
+            isVisible: vp.isVisible,
+          },
+        },
+      });
+    }
+
+    // ── adminOrganization ──
+    if (operationName === "AdminOrganization") {
+      const parentId = variables.parentId as string | null | undefined;
+      const items =
+        parentId === undefined || parentId === null
+          ? db.organization.filter((n) => n.parentId === null)
+          : db.organization.filter((n) => n.parentId === parentId);
+      return HttpResponse.json({ data: { adminOrganization: items } });
+    }
+
+    // ── adminClasses ──
+    if (operationName === "AdminClasses") {
+      const filter = (variables.filter ?? {}) as Partial<ListFilter>;
+      let items = [...db.classes];
+      if (filter.search) {
+        const q = filter.search.toLowerCase();
+        items = items.filter(
+          (c) =>
+            c.name.toLowerCase().includes(q) ||
+            c.gradeName.toLowerCase().includes(q),
+        );
+      }
+      if (filter.schoolId) {
+        // mock：单一学校
+      }
+      const result = paginate(items, filter);
+      return HttpResponse.json({ data: { adminClasses: result } });
+    }
+
+    // ── adminTeachers ──
+    if (operationName === "AdminTeachers") {
+      const filter = (variables.filter ?? {}) as Partial<ListFilter>;
+      let items = [...db.teachers];
+      if (filter.search) {
+        const q = filter.search.toLowerCase();
+        items = items.filter(
+          (t) =>
+            t.name.toLowerCase().includes(q) ||
+            t.email.toLowerCase().includes(q),
+        );
+      }
+      if (filter.status && filter.status !== "all") {
+        items = items.filter((t) => t.status === filter.status);
+      }
+      const result = paginate(items, filter);
+      return HttpResponse.json({ data: { adminTeachers: result } });
+    }
+
+    // ── adminStudents ──
+    if (operationName === "AdminStudents") {
+      const filter = (variables.filter ?? {}) as Partial<ListFilter>;
+      let items = [...db.students];
+      if (filter.search) {
+        const q = filter.search.toLowerCase();
+        items = items.filter(
+          (s) =>
+            s.name.toLowerCase().includes(q) ||
+            s.email.toLowerCase().includes(q),
+        );
+      }
+      if (filter.status && filter.status !== "all") {
+        items = items.filter((s) => s.status === filter.status);
+      }
+      const result = paginate(items, filter);
+      return HttpResponse.json({ data: { adminStudents: result } });
+    }
+
+    // ── auditLogs ──
+    if (operationName === "AuditLogs") {
+      const filter = (variables.filter ?? {}) as Partial<ListFilter> & {
+        action?: string;
+        actorUserId?: string;
+      };
+      let items = [...db.auditLogs];
+      if (filter.search) {
+        const q = filter.search.toLowerCase();
+        items = items.filter(
+          (l) =>
+            l.actorName.toLowerCase().includes(q) ||
+            l.action.toLowerCase().includes(q) ||
+            l.resourceType.toLowerCase().includes(q),
+        );
+      }
+      if (filter.action) {
+        items = items.filter((l) => l.action === filter.action);
+      }
+      if (filter.actorUserId) {
+        items = items.filter((l) => l.actorUserId === filter.actorUserId);
+      }
+      const result = paginate(items, filter);
+      return HttpResponse.json({ data: { auditLogs: result } });
+    }
+
+    // ── adminDashboard ──
+    if (operationName === "AdminDashboard") {
+      return HttpResponse.json({ data: { adminDashboard: mockDashboard } });
+    }
+
+    // ── systemSettings ──
+    if (operationName === "SystemSettings") {
+      return HttpResponse.json({ data: { systemSettings: db.systemSettings } });
+    }
+
+    // ── updateSystemSettings ──
+    if (operationName === "UpdateSystemSettings") {
+      const input = variables.input as Partial<typeof mockSystemSettings>;
+      Object.assign(db.systemSettings, input);
+      recordAudit(
+        "SYSTEM_SETTINGS_UPDATE",
+        "admin.system",
+        "settings",
+        JSON.stringify(input),
+      );
+      return HttpResponse.json({
+        data: {
+          updateSystemSettings: {
+            schoolName: db.systemSettings.schoolName,
+            schoolCode: db.systemSettings.schoolCode,
+            academicYear: db.systemSettings.academicYear,
+            semester: db.systemSettings.semester,
+          },
+        },
+      });
+    }
+
+    // ── 未匹配的 operation ──
+    return HttpResponse.json(
+      { errors: [{ message: `未实现的 GraphQL operation: ${operationName}` }] },
+      { status: 501 },
+    );
+  }),
+];
diff --git a/apps/admin-portal/src/mocks/server.ts b/apps/admin-portal/src/mocks/server.ts
new file mode 100644
index 0000000..7e72b1b
--- /dev/null
+++ b/apps/admin-portal/src/mocks/server.ts
@@ -0,0 +1,7 @@
+/**
+ * MSW Node Server（用于 vitest 集成测试）
+ */
+import { setupServer } from "msw/node";
+import { handlers } from "./handlers";
+
+export const server = setupServer(...handlers);
diff --git a/apps/admin-portal/src/providers/auth-provider.tsx b/apps/admin-portal/src/providers/auth-provider.tsx
new file mode 100644
index 0000000..9c28e9e
--- /dev/null
+++ b/apps/admin-portal/src/providers/auth-provider.tsx
@@ -0,0 +1,107 @@
+"use client";
+
+import {
+  createContext,
+  useContext,
+  useState,
+  useEffect,
+  useCallback,
+  type ReactNode,
+} from "react";
+import {
+  getToken,
+  getUser,
+  login as loginApi,
+  logout as logoutApi,
+} from "@/lib/auth";
+import type { CurrentUser } from "@/types/view-models";
+
+interface AuthContextValue {
+  user: CurrentUser | null;
+  isAuthenticated: boolean;
+  isLoading: boolean;
+  hasPermission: (perm: string) => boolean;
+  hasAnyPermission: (perms: string[]) => boolean;
+  login: (email: string, password: string) => Promise<void>;
+  logout: () => void;
+}
+
+const AuthContext = createContext<AuthContextValue | null>(null);
+
+export function AuthProvider({ children }: { children: ReactNode }) {
+  const [user, setUserState] = useState<CurrentUser | null>(null);
+  const [isLoading, setIsLoading] = useState(true);
+
+  useEffect(() => {
+    const token = getToken();
+    const stored = getUser();
+    if (token && stored) {
+      setUserState(stored);
+    }
+    setIsLoading(false);
+  }, []);
+
+  const login = useCallback(async (email: string, password: string) => {
+    const result = await loginApi(email, password);
+    setUserState(result.user);
+  }, []);
+
+  const logout = useCallback(() => {
+    setUserState(null);
+    logoutApi();
+  }, []);
+
+  const hasPermission = useCallback(
+    (perm: string) => {
+      if (!user) return false;
+      if (user.permissions.includes("*")) return true;
+      return user.permissions.includes(perm);
+    },
+    [user],
+  );
+
+  const hasAnyPermission = useCallback(
+    (perms: string[]) => {
+      if (!user) return false;
+      if (user.permissions.includes("*")) return true;
+      return perms.some((p) => user.permissions.includes(p));
+    },
+    [user],
+  );
+
+  return (
+    <AuthContext.Provider
+      value={{
+        user,
+        isAuthenticated: user !== null,
+        isLoading,
+        hasPermission,
+        hasAnyPermission,
+        login,
+        logout,
+      }}
+    >
+      {children}
+    </AuthContext.Provider>
+  );
+}
+
+export function useAuth(): AuthContextValue {
+  const ctx = useContext(AuthContext);
+  if (!ctx) {
+    throw new Error("useAuth must be used within AuthProvider");
+  }
+  return ctx;
+}
+
+/** 权限 Hook（复用 AuthProvider） */
+export function usePermission() {
+  const { user, hasPermission, hasAnyPermission } = useAuth();
+  return {
+    hasPermission,
+    hasAnyPermission,
+    permissions: user?.permissions ?? [],
+    dataScope: user?.dataScope ?? "SELF",
+    roles: user?.roles ?? [],
+  };
+}
diff --git a/apps/admin-portal/src/providers/graphql-provider.tsx b/apps/admin-portal/src/providers/graphql-provider.tsx
new file mode 100644
index 0000000..f7b3b1c
--- /dev/null
+++ b/apps/admin-portal/src/providers/graphql-provider.tsx
@@ -0,0 +1,16 @@
+"use client";
+
+import { useMemo, type ReactNode } from "react";
+import { Provider } from "urql";
+import { createGraphQLClient } from "@/lib/graphql-client";
+
+/**
+ * GraphQL Provider（standalone 模式自建 urql client）
+ *
+ * 仲裁 ARB-002 / ISSUE-047 §5.4：MF 模式复用 Shell 暴露的 GraphQL client 单例
+ * 开发期 standalone 模式：自建 urql client 指向 /api/admin/graphql（MSW 拦截）
+ */
+export function GraphQLProvider({ children }: { children: ReactNode }) {
+  const client = useMemo(() => createGraphQLClient(), []);
+  return <Provider value={client}>{children}</Provider>;
+}
diff --git a/apps/admin-portal/src/providers/toast-provider.tsx b/apps/admin-portal/src/providers/toast-provider.tsx
new file mode 100644
index 0000000..d86d1b1
--- /dev/null
+++ b/apps/admin-portal/src/providers/toast-provider.tsx
@@ -0,0 +1,124 @@
+"use client";
+
+import {
+  createContext,
+  useContext,
+  useState,
+  useCallback,
+  type ReactNode,
+} from "react";
+
+type ToastType = "success" | "error" | "warning" | "info";
+
+interface ToastItem {
+  id: string;
+  type: ToastType;
+  title: string;
+  description?: string;
+}
+
+interface ToastContextValue {
+  toasts: ToastItem[];
+  show: (type: ToastType, title: string, description?: string) => void;
+  dismiss: (id: string) => void;
+}
+
+const ToastContext = createContext<ToastContextValue | null>(null);
+
+export function ToastProvider({ children }: { children: ReactNode }) {
+  const [toasts, setToasts] = useState<ToastItem[]>([]);
+
+  const dismiss = useCallback((id: string) => {
+    setToasts((prev) => prev.filter((t) => t.id !== id));
+  }, []);
+
+  const show = useCallback(
+    (type: ToastType, title: string, description?: string) => {
+      const id = `${Date.now()}-${Math.random().toString(36).slice(2, 8)}`;
+      setToasts((prev) => [...prev, { id, type, title, description }]);
+      setTimeout(() => dismiss(id), 5000);
+    },
+    [dismiss],
+  );
+
+  const colorMap: Record<ToastType, string> = {
+    success: "var(--color-success)",
+    error: "var(--color-danger)",
+    warning: "var(--color-warning)",
+    info: "var(--color-accent)",
+  };
+
+  return (
+    <ToastContext.Provider value={{ toasts, show, dismiss }}>
+      {children}
+      <div
+        role="region"
+        aria-label="通知"
+        aria-live="polite"
+        aria-atomic="true"
+        style={{
+          position: "fixed",
+          top: 16,
+          right: 16,
+          zIndex: 9999,
+          display: "flex",
+          flexDirection: "column",
+          gap: 8,
+          maxWidth: 400,
+        }}
+      >
+        {toasts.map((toast) => (
+          <button
+            key={toast.id}
+            type="button"
+            style={{
+              background: "var(--bg-paper)",
+              border: "none",
+              borderLeft: `4px solid ${colorMap[toast.type]}`,
+              borderRadius: 6,
+              padding: "12px 16px",
+              boxShadow: "0 2px 8px rgba(0,0,0,0.08)",
+              cursor: "pointer",
+              textAlign: "left",
+              width: "100%",
+              display: "block",
+            }}
+            onClick={() => dismiss(toast.id)}
+            aria-label={`${toast.title}${toast.description ? `: ${toast.description}` : ""}`}
+          >
+            <p
+              style={{
+                fontWeight: 600,
+                fontSize: 14,
+                color: "var(--color-ink)",
+                margin: 0,
+              }}
+            >
+              {toast.title}
+            </p>
+            {toast.description && (
+              <p
+                style={{
+                  fontSize: 13,
+                  color: "var(--color-ink-muted)",
+                  marginTop: 4,
+                  margin: 0,
+                }}
+              >
+                {toast.description}
+              </p>
+            )}
+          </button>
+        ))}
+      </div>
+    </ToastContext.Provider>
+  );
+}
+
+export function useToast(): ToastContextValue {
+  const ctx = useContext(ToastContext);
+  if (!ctx) {
+    throw new Error("useToast must be used within ToastProvider");
+  }
+  return ctx;
+}
diff --git a/apps/admin-portal/src/types/view-models.ts b/apps/admin-portal/src/types/view-models.ts
new file mode 100644
index 0000000..0f82479
--- /dev/null
+++ b/apps/admin-portal/src/types/view-models.ts
@@ -0,0 +1,207 @@
+/**
+ * admin-portal 视图模型类型定义
+ *
+ * 对齐 contract.md §2.4 GraphQL Query/Mutation 清单
+ * 仲裁：ARB-001 GraphQL admin 命名空间 + ADMIN_ 权限前缀
+ */
+
+/** 数据范围（对齐 iam DataScope） */
+export type DataScope =
+  "ALL" | "SCHOOL" | "GRADE" | "CLASS" | "SUBJECT" | "SELF";
+
+/** 用户状态 */
+export type UserStatus = "active" | "disabled" | "locked";
+
+/** 用户视图模型 */
+export interface UserViewModel {
+  id: string;
+  email: string;
+  name: string;
+  roles: RoleViewModel[];
+  status: UserStatus;
+  dataScope: DataScope;
+  organizationId: string | null;
+  schoolName: string | null;
+  lastLoginAt: number | null;
+  createdAt: number;
+  updatedAt: number;
+}
+
+/** 角色视图模型 */
+export interface RoleViewModel {
+  id: string;
+  name: string;
+  code: string;
+  description: string;
+  permissions: PermissionViewModel[];
+  userCount: number;
+  dataScope: DataScope;
+  isSystem: boolean;
+  createdAt: number;
+  updatedAt: number;
+}
+
+/** 权限视图模型 */
+export interface PermissionViewModel {
+  id: string;
+  code: string;
+  name: string;
+  description: string;
+  resource: string;
+  action: string;
+  isSystem: boolean;
+}
+
+/** 视口配置视图模型 */
+export interface ViewportConfigViewModel {
+  id: string;
+  key: string;
+  label: string;
+  route: string;
+  icon: string | null;
+  sortOrder: number;
+  requiredPermission: string | null;
+  scope: "teacher" | "student" | "parent" | "admin";
+  isVisible: boolean;
+}
+
+/** 组织节点视图模型 */
+export interface OrganizationNode {
+  id: string;
+  name: string;
+  type: "school" | "grade" | "class";
+  parentId: string | null;
+  childrenCount: number;
+  sortOrder: number;
+}
+
+/** 学校设置视图模型 */
+export interface SystemSettingsViewModel {
+  schoolName: string;
+  schoolCode: string;
+  academicYear: string;
+  semester: "first" | "second";
+  contactEmail: string;
+  contactPhone: string;
+  address: string;
+  timezone: string;
+  locale: string;
+}
+
+/** 班级视图模型（全局管理） */
+export interface AdminClassViewModel {
+  id: string;
+  name: string;
+  gradeName: string;
+  schoolName: string;
+  headTeacherName: string;
+  studentCount: number;
+  createdAt: number;
+}
+
+/** 教师视图模型（全局管理） */
+export interface AdminTeacherViewModel {
+  id: string;
+  email: string;
+  name: string;
+  schoolName: string;
+  subjects: string[];
+  classCount: number;
+  status: UserStatus;
+  lastLoginAt: number | null;
+}
+
+/** 学生视图模型（全局管理） */
+export interface AdminStudentViewModel {
+  id: string;
+  email: string;
+  name: string;
+  className: string;
+  gradeName: string;
+  schoolName: string;
+  guardianName: string | null;
+  guardianPhone: string | null;
+  status: UserStatus;
+}
+
+/** 审计日志视图模型 */
+export interface AuditLogViewModel {
+  id: string;
+  eventId: string;
+  occurredAt: number;
+  actorUserId: string;
+  actorName: string;
+  action: string;
+  resourceType: string;
+  resourceId: string;
+  ip: string;
+  userAgent: string;
+  beforeState: string | null;
+  afterState: string | null;
+  traceId: string | null;
+}
+
+/** 仪表盘统计视图模型 */
+export interface AdminDashboardViewModel {
+  totalTeachers: number;
+  totalStudents: number;
+  totalClasses: number;
+  totalSchools: number;
+  schoolAvgScore: number;
+  activeUsersToday: number;
+  auditEventsToday: number;
+  trend: Array<{
+    date: string;
+    teachers: number;
+    students: number;
+    avgScore: number;
+  }>;
+  serviceHealth: Array<{
+    serviceName: string;
+    status: "healthy" | "degraded" | "down";
+    latencyMs: number;
+  }>;
+}
+
+/** 列表筛选参数 */
+export interface ListFilter {
+  page: number;
+  pageSize: number;
+  search?: string;
+  status?: string;
+  schoolId?: string;
+  gradeId?: string;
+  sortField?: string;
+  sortOrder?: "asc" | "desc";
+}
+
+/** 分页结果 */
+export interface PaginatedResult<T> {
+  items: T[];
+  total: number;
+  page: number;
+  pageSize: number;
+  hasNext: boolean;
+}
+
+/** 当前用户信息 */
+export interface CurrentUser {
+  id: string;
+  email: string;
+  name: string;
+  roles: string[];
+  permissions: string[];
+  dataScope: DataScope;
+  schoolId: string | null;
+  schoolName: string | null;
+}
+
+/** WebSocket 通知消息 */
+export interface WsNotification {
+  id: string;
+  type: "audit_alert" | "abnormal_login" | "system_error" | "info";
+  title: string;
+  message: string;
+  severity: "info" | "warning" | "error";
+  timestamp: number;
+}
diff --git a/apps/admin-portal/tailwind.config.js b/apps/admin-portal/tailwind.config.js
new file mode 100644
index 0000000..838442a
--- /dev/null
+++ b/apps/admin-portal/tailwind.config.js
@@ -0,0 +1,29 @@
+/** @type {import('tailwindcss').Config} */
+module.exports = {
+  content: ['./src/**/*.{js,ts,jsx,tsx}'],
+  theme: {
+    extend: {
+      colors: {
+        paper: 'hsl(40, 20%, 98%)',
+        ink: {
+          DEFAULT: 'hsl(25, 3%, 15%)',
+          muted: 'hsl(30, 5%, 45%)',
+        },
+        accent: 'hsl(220, 60%, 35%)',
+        rule: 'hsl(30, 10%, 90%)',
+        danger: 'hsl(0, 70%, 45%)',
+        success: 'hsl(140, 50%, 35%)',
+        warning: 'hsl(35, 80%, 45%)',
+      },
+      fontFamily: {
+        serif: ['Fraunces', 'Georgia', 'serif'],
+        sans: ['Inter', 'system-ui', 'sans-serif'],
+        mono: ['JetBrains Mono', 'monospace'],
+      },
+      borderRadius: {
+        DEFAULT: '6px',
+      },
+    },
+  },
+  plugins: [],
+};
diff --git a/apps/admin-portal/tsconfig.json b/apps/admin-portal/tsconfig.json
new file mode 100644
index 0000000..84560bd
--- /dev/null
+++ b/apps/admin-portal/tsconfig.json
@@ -0,0 +1,20 @@
+{
+  "extends": "../../tsconfig.base.json",
+  "compilerOptions": {
+    "target": "ES2022",
+    "lib": ["DOM", "DOM.Iterable", "ES2022"],
+    "module": "ESNext",
+    "moduleResolution": "Bundler",
+    "jsx": "preserve",
+    "allowJs": true,
+    "noEmit": true,
+    "incremental": true,
+    "plugins": [{ "name": "next" }],
+    "paths": {
+      "@/*": ["./src/*"]
+    },
+    "isolatedModules": true
+  },
+  "include": ["next-env.d.ts", "src/**/*", ".next/types/**/*.ts"],
+  "exclude": ["node_modules"]
+}
diff --git a/apps/admin-portal/vitest.config.ts b/apps/admin-portal/vitest.config.ts
new file mode 100644
index 0000000..6a94124
--- /dev/null
+++ b/apps/admin-portal/vitest.config.ts
@@ -0,0 +1,30 @@
+import { defineConfig } from "vitest/config";
+import react from "@vitejs/plugin-react";
+import { resolve } from "node:path";
+
+export default defineConfig({
+  plugins: [react()],
+  test: {
+    environment: "jsdom",
+    globals: true,
+    setupFiles: ["./src/test/setup.ts"],
+    include: ["src/**/*.test.{ts,tsx}"],
+    coverage: {
+      provider: "v8",
+      reporter: ["text", "json-summary"],
+      include: ["src/**/*.{ts,tsx}"],
+      exclude: ["src/**/*.test.*", "src/test/**", "src/mocks/**"],
+      thresholds: {
+        lines: 80,
+        functions: 80,
+        branches: 80,
+        statements: 80,
+      },
+    },
+  },
+  resolve: {
+    alias: {
+      "@": resolve(__dirname, "./src"),
+    },
+  },
+});
diff --git a/docs/troubleshooting/known-issues.md b/docs/troubleshooting/known-issues.md
index e3b072e..a927c1d 100644
--- a/docs/troubleshooting/known-issues.md
+++ b/docs/troubleshooting/known-issues.md
@@ -501,3 +501,27 @@
 | P3 MF 降级与版本协商          | Remote `remoteEntry.js` 加载失败 → fallback 独立页面 + 错误提示；共享依赖版本不匹配 → 运行时协商降级                                                                                 |
 | P3 AI 答疑 SSE 流式（P5）     | `POST /student/ai/stream-chat` SSE 流式响应 + `streamingText` 逐字渲染 + 打字机效果 + AbortController 取消                                                                           |
 | P3 权限点命名                 | 与 student-bff §3.2 对齐 `STUDENT_*_READ` 风格（`STUDENT_DASHBOARD_READ`/`STUDENT_EXAM_READ`/`STUDENT_HOMEWORK_SUBMIT`/`STUDENT_GRADE_READ` 等）                                     |
+
+### 2.16 admin-portal（管理端微前端 Remote，P2-P6）
+
+> admin-portal 复用 teacher-portal Shell 暴露的 AppShell / usePermission / ApiClient / 设计令牌，本节仅记录 admin-portal **特有**的"场景→技术"映射，通用前端映射见 §2.12。
+
+| 场景                      | 技术/规则                                                                                                                                                                         |
+| ------------------------- | --------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- |
+| P2 端口分配               | admin-portal = **4003**（004 §1.2 强制 4 端 4000-4003；初稿误用 3003 与 data-ana 冲突，修订对齐仲裁 ARB-003）                                                                     |
+| P2 GraphQL admin 命名空间 | 复用 teacher-bff GraphQL endpoint（`POST /api/admin/graphql`），不新建 admin-bff（ARB-001）；urql client standalone 自建，MF 模式复用 Shell 单例                                  |
+| P2 权限点 ADMIN_ 前缀     | admin 自身资源用 `ADMIN_` 前缀（如 `ADMIN_DASHBOARD_VIEW`/`ADMIN_AUDIT_READ`），跨服务资源保留原前缀（如 `IAM_USER_READ`）；路由权限映射在 `lib/permissions.ts` ROUTE_PERMISSIONS |
+| P2 MSW mock 全量拦截      | `NEXT_PUBLIC_API_MOCKING=enabled` 时 MSW 拦截所有 GraphQL/HTTP；`mocks/handlers.ts` 实现 18 个 GraphQL operation + `/api/auth/login` mock；fixtures 内存可变副本支持增删改        |
+| P2 WebSocket 实时通知     | 接入 push-gateway `GET /ws`（ARB-006）；开发期 `use-websocket.ts` 用定时器模拟推送（30s/条）；3 类通知：`audit_alert`/`abnormal_login`/`system_error`                             |
+| P2 MF Remote 入口         | `next.config.js` 暴露 `./AdminApp`（exposes: `./src/app/admin-app.tsx`）；`NEXT_PUBLIC_MF_ENABLED` 控制启用（standalone 默认 false，Shell 就绪后设 true）                         |
+| P3 用户管理 CRUD          | `useUsers`/`useUser`/`useCreateUser`/`useUpdateUser`/`useToggleUserStatus` hooks；`UserManagementTable` + `UserFormModal` 组件；mock 登录 admin@edu.test/admin123                 |
+| P3 角色权限矩阵           | `RolePermissionMatrix` 组件按 resource 分组、支持全选/半选/单选；`useUpdateRolePermissions` 提交权限码列表；系统预置角色不可删除                                                  |
+| P3 视口拖拽排序           | `@dnd-kit/sortable` 实现拖拽排序 + `useSortable` hook；`SortableViewportItem` 每行可编辑 label/permission/visible；保存时批量调用 `updateViewport`                                |
+| P4 组织树递归加载         | `OrganizationTree` 递归组件 + `useOrganization(parentId)` 按需加载子节点；展开/折叠状态本地管理；A11y `role="tree"`/`role="treeitem"`/`aria-expanded`/`aria-selected`             |
+| P5 审计日志 CSV 导出      | `exportAuditLogsCsv` 生成 BOM + UTF-8 CSV；`useAuditLogs` 支持 search/action 过滤；审计日志经 teacher-bff GraphQL 消费（ARB-005 不直连 Kafka）                                    |
+| P5 仪表盘服务健康         | `AdminDashboardViewModel.serviceHealth` 含 serviceName/status/latencyMs；`Badge` 组件映射 healthy/degraded/down 状态色                                                            |
+| P6 A11y WCAG 2.2 AA       | `eslint-plugin-jsx-a11y` flat config（ESLint 9）；skip-link + focus-visible + aria-* 完整；`@next/eslint-plugin-next` 14.x 与 ESLint 9 不兼容，暂用 jsx-a11y + tseslint 替代      |
+| P6 Web Vitals 采集        | `web-vitals` 包（LCP/CLS/FCP/INP/TTFB）；`WebVitalsInitializer` 组件仅 production 启用；`navigator.sendBeacon` 上报到 `/api/admin/web-vitals`                                     |
+| P6 健康检查端点           | `/api/health`（liveness 200）+ `/api/ready`（readiness 检查 gateway 可达性，2s 超时；mock 模式直接 ready）                                                                        |
+| P6 Dockerfile no-push     | 多阶段构建 `node:22-alpine`；builder 阶段 `pnpm install --frozen-lockfile` + `next build`；runner 阶段 `standalone` 输出 + EXPOSE 4003                                            |
+| P6 urql 类型断言          | urql `useQuery`/`useMutation` 泛型与纯字符串 query 兼容性有限；`use-graphql.ts` 用 `as unknown as` 从 unknown 转换（项目规则允许从 unknown 断言）                                 |
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index ef4a295..4f5ec32 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -45,11 +45,129 @@ importers:
         specifier: ^8.0.0
         version: 8.63.0(eslint@9.39.4(jiti@2.6.1))(typescript@5.9.3)
 
+  apps/admin-portal:
+    dependencies:
+      '@dnd-kit/core':
+        specifier: ^6.1.0
+        version: 6.3.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@dnd-kit/sortable':
+        specifier: ^8.0.0
+        version: 8.0.0(@dnd-kit/core@6.3.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)
+      '@dnd-kit/utilities':
+        specifier: ^3.2.0
+        version: 3.2.2(react@18.3.1)
+      '@edu/hooks':
+        specifier: workspace:*
+        version: link:../../packages/hooks
+      '@edu/ui-components':
+        specifier: workspace:*
+        version: link:../../packages/ui-components
+      '@edu/ui-tokens':
+        specifier: workspace:*
+        version: link:../../packages/ui-tokens
+      '@hookform/resolvers':
+        specifier: ^3.9.0
+        version: 3.10.0(react-hook-form@7.81.0(react@18.3.1))
+      '@urql/core':
+        specifier: ^5.0.0
+        version: 5.2.0(graphql@16.14.2)
+      graphql:
+        specifier: ^16.9.0
+        version: 16.14.2
+      next:
+        specifier: ^14.2.0
+        version: 14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      react:
+        specifier: ^18.3.0
+        version: 18.3.1
+      react-dom:
+        specifier: ^18.3.0
+        version: 18.3.1(react@18.3.1)
+      react-hook-form:
+        specifier: ^7.53.0
+        version: 7.81.0(react@18.3.1)
+      recharts:
+        specifier: ^2.12.0
+        version: 2.15.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      urql:
+        specifier: ^4.2.0
+        version: 4.2.2(@urql/core@5.2.0(graphql@16.14.2))(react@18.3.1)
+      web-vitals:
+        specifier: ^4.2.0
+        version: 4.2.4
+      zod:
+        specifier: ^3.23.0
+        version: 3.25.76
+    devDependencies:
+      '@module-federation/nextjs-mf':
+        specifier: ^8.8.0
+        version: 8.8.70(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(next@14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(styled-jsx@5.1.1(@babel/core@7.29.7)(react@18.3.1))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))
+      '@next/eslint-plugin-next':
+        specifier: ^14.2.0
+        version: 14.2.35
+      '@opentelemetry/api':
+        specifier: ^1.9.0
+        version: 1.9.1
+      '@opentelemetry/exporter-trace-otlp-http':
+        specifier: ^0.52.0
+        version: 0.52.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-trace-web':
+        specifier: ^1.25.0
+        version: 1.30.1(@opentelemetry/api@1.9.1)
+      '@testing-library/jest-dom':
+        specifier: ^6.5.0
+        version: 6.9.1
+      '@testing-library/react':
+        specifier: ^16.0.0
+        version: 16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@18.3.7(@types/react@18.3.31))(@types/react@18.3.31)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@types/node':
+        specifier: ^22.0.0
+        version: 22.20.0
+      '@types/react':
+        specifier: ^18.3.0
+        version: 18.3.31
+      '@types/react-dom':
+        specifier: ^18.3.0
+        version: 18.3.7(@types/react@18.3.31)
+      '@vitejs/plugin-react':
+        specifier: ^4.3.0
+        version: 4.7.0(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))
+      eslint:
+        specifier: ^9.0.0
+        version: 9.39.4(jiti@2.6.1)
+      eslint-config-prettier:
+        specifier: ^9.1.0
+        version: 9.1.2(eslint@9.39.4(jiti@2.6.1))
+      eslint-plugin-jsx-a11y:
+        specifier: ^6.10.0
+        version: 6.10.2(eslint@9.39.4(jiti@2.6.1))
+      jsdom:
+        specifier: ^25.0.0
+        version: 25.0.1
+      mock-socket:
+        specifier: ^9.3.0
+        version: 9.3.1
+      msw:
+        specifier: ^2.4.0
+        version: 2.15.0(@types/node@22.20.0)(typescript@5.9.3)
+      postcss:
+        specifier: ^8.4.0
+        version: 8.5.16
+      tailwindcss:
+        specifier: ^3.4.0
+        version: 3.4.19(tsx@4.23.0)(yaml@2.9.0)
+      typescript:
+        specifier: ^5.6.0
+        version: 5.9.3
+      vitest:
+        specifier: ^2.1.0
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
+
   apps/teacher-portal:
     dependencies:
       next:
         specifier: ^14.2.0
-        version: 14.2.35(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+        version: 14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
       react:
         specifier: ^18.3.0
         version: 18.3.1
@@ -82,8 +200,88 @@ importers:
         specifier: ^5.6.0
         version: 5.9.3
 
+  packages/hooks:
+    dependencies:
+      '@edu/ui-components':
+        specifier: workspace:*
+        version: link:../ui-components
+      react:
+        specifier: ^18.3.0
+        version: 18.3.1
+      react-dom:
+        specifier: ^18.3.0
+        version: 18.3.1(react@18.3.1)
+    devDependencies:
+      '@types/react':
+        specifier: ^18.3.0
+        version: 18.3.31
+      '@types/react-dom':
+        specifier: ^18.3.0
+        version: 18.3.7(@types/react@18.3.31)
+      typescript:
+        specifier: ^5.6.0
+        version: 5.9.3
+
   packages/shared-proto: {}
 
+  packages/shared-ts:
+    dependencies:
+      '@nestjs/common':
+        specifier: ^10.4.0
+        version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core':
+        specifier: ^10.4.0
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@paralleldrive/cuid2':
+        specifier: ^2.2.2
+        version: 2.3.1
+      drizzle-orm:
+        specifier: ^0.31.0
+        version: 0.31.4(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.6.1)(@types/react@18.3.31)(better-sqlite3@11.10.0)(mysql2@3.22.6(@types/node@22.20.0))(react@18.3.1)
+      kafkajs:
+        specifier: ^2.2.0
+        version: 2.2.4
+      pino:
+        specifier: ^9.4.0
+        version: 9.14.0
+      reflect-metadata:
+        specifier: ^0.2.2
+        version: 0.2.2
+      rxjs:
+        specifier: ^7.8.0
+        version: 7.8.2
+    devDependencies:
+      '@types/node':
+        specifier: ^22.0.0
+        version: 22.20.0
+      typescript:
+        specifier: ^5.6.0
+        version: 5.9.3
+
+  packages/ui-components:
+    dependencies:
+      '@edu/ui-tokens':
+        specifier: workspace:*
+        version: link:../ui-tokens
+      react:
+        specifier: ^18.3.0
+        version: 18.3.1
+      react-dom:
+        specifier: ^18.3.0
+        version: 18.3.1(react@18.3.1)
+    devDependencies:
+      '@types/react':
+        specifier: ^18.3.0
+        version: 18.3.31
+      '@types/react-dom':
+        specifier: ^18.3.0
+        version: 18.3.7(@types/react@18.3.31)
+      typescript:
+        specifier: ^5.6.0
+        version: 5.9.3
+
+  packages/ui-tokens: {}
+
   scripts/arch-scan:
     dependencies:
       better-sqlite3:
@@ -107,7 +305,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -116,7 +314,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.50.0
-        version: 0.50.2(@opentelemetry/api@1.9.1)
+        version: 0.50.2(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.53.0
         version: 0.53.0(@opentelemetry/api@1.9.1)
@@ -177,7 +375,7 @@ importers:
         version: 10.0.0
       '@vitest/coverage-v8':
         specifier: ^2.1.0
-        version: 2.1.9(vitest@2.1.9(@types/node@22.20.0)(terser@5.48.0))
+        version: 2.1.9(vitest@2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0))
       drizzle-kit:
         specifier: ^0.24.0
         version: 0.24.2
@@ -195,7 +393,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
   services/content:
     dependencies:
@@ -204,7 +402,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -213,7 +411,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.55.0
-        version: 0.55.3(@opentelemetry/api@1.9.1)
+        version: 0.55.3(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.55.0
         version: 0.55.0(@opentelemetry/api@1.9.1)
@@ -262,7 +460,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
   services/core-edu:
     dependencies:
@@ -271,7 +469,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -280,7 +478,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.50.0
-        version: 0.50.2(@opentelemetry/api@1.9.1)
+        version: 0.50.2(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.53.0
         version: 0.53.0(@opentelemetry/api@1.9.1)
@@ -341,7 +539,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
   services/iam:
     dependencies:
@@ -350,7 +548,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -359,7 +557,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.50.0
-        version: 0.50.2(@opentelemetry/api@1.9.1)
+        version: 0.50.2(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.53.0
         version: 0.53.0(@opentelemetry/api@1.9.1)
@@ -368,7 +566,7 @@ importers:
         version: 0.53.0(@opentelemetry/api@1.9.1)
       bcrypt:
         specifier: ^5.1.0
-        version: 5.1.1
+        version: 5.1.1(encoding@0.1.13)
       drizzle-orm:
         specifier: ^0.31.0
         version: 0.31.4(@opentelemetry/api@1.9.1)(@types/better-sqlite3@7.6.13)(@types/pg@8.6.1)(@types/react@18.3.31)(better-sqlite3@11.10.0)(mysql2@3.22.6(@types/node@22.20.0))(react@18.3.1)
@@ -423,7 +621,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
   services/msg:
     dependencies:
@@ -435,7 +633,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -444,7 +642,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.55.0
-        version: 0.55.3(@opentelemetry/api@1.9.1)
+        version: 0.55.3(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.55.0
         version: 0.55.0(@opentelemetry/api@1.9.1)
@@ -496,7 +694,7 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
   services/teacher-bff:
     dependencies:
@@ -505,7 +703,7 @@ importers:
         version: 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/core':
         specifier: ^10.4.0
-        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+        version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       '@nestjs/platform-express':
         specifier: ^10.4.0
         version: 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)
@@ -514,7 +712,7 @@ importers:
         version: 1.9.1
       '@opentelemetry/auto-instrumentations-node':
         specifier: ^0.50.0
-        version: 0.50.2(@opentelemetry/api@1.9.1)
+        version: 0.50.2(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/exporter-trace-otlp-http':
         specifier: ^0.53.0
         version: 0.53.0(@opentelemetry/api@1.9.1)
@@ -557,10 +755,21 @@ importers:
         version: 5.9.3
       vitest:
         specifier: ^2.1.0
-        version: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+        version: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
 
 packages:
 
+  '@0no-co/graphql.web@1.3.2':
+    resolution: {integrity: sha512-Q1+pRlLhE31GOY/2c9BAEnFTNxO7Awtc6fhhEDlxyCBQ2N0IhD32cPVvPChrK9mwBNSgRdW/sF1kd2e0ojHj1Q==}
+    peerDependencies:
+      graphql: ^14.0.0 || ^15.0.0 || ^16.0.0
+    peerDependenciesMeta:
+      graphql:
+        optional: true
+
+  '@adobe/css-tools@4.5.0':
+    resolution: {integrity: sha512-6OzddxPio9UiWTCemp4N8cYLV2ZN1ncRnV1cVGtve7dhPOtRkleRyx32GQCYSwDYgaHU3USMm84tNsvKzRCa1Q==}
+
   '@alloc/quick-lru@5.2.0':
     resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
     engines: {node: '>=10'}
@@ -587,10 +796,47 @@ packages:
     resolution: {integrity: sha512-I5wviiIqiFwar9Pdk30Lujk8FczEEc18i22A5c6Z9lbmhPQdTroDnEQdsfXjy404wPe8H62s0I15o4pmMGfTYQ==}
     engines: {node: ^18.13.0 || >=20.9.0, npm: ^6.11.0 || ^7.5.6 || >=8.0.0, yarn: '>= 1.13.0'}
 
+  '@asamuzakjp/css-color@3.2.0':
+    resolution: {integrity: sha512-K1A6z8tS3XsmCMM86xoWdn7Fkdn9m6RSVtocUrJYIwZnFVkng/PvkEoWtOWmP+Scc6saYWHWZYbndEEXxl24jw==}
+
   '@babel/code-frame@7.29.7':
     resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/compat-data@7.29.7':
+    resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/core@7.29.7':
+    resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/generator@7.29.7':
+    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-compilation-targets@7.29.7':
+    resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-globals@7.29.7':
+    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-imports@7.29.7':
+    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helper-module-transforms@7.29.7':
+    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0
+
+  '@babel/helper-plugin-utils@7.29.7':
+    resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/helper-string-parser@7.29.7':
     resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
@@ -599,11 +845,43 @@ packages:
     resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
 
+  '@babel/helper-validator-option@7.29.7':
+    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/helpers@7.29.7':
+    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/parser@7.29.7':
     resolution: {integrity: sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==}
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  '@babel/plugin-transform-react-jsx-self@7.29.7':
+    resolution: {integrity: sha512-TL0hMc9xzy86VD31nUiwzd5otRAcyEPcsegCxolO0PvcXuH1v0kECe/UIznYFihpkvU5wg/jk4v0TTEFfm53fw==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/plugin-transform-react-jsx-source@7.29.7':
+    resolution: {integrity: sha512-06IyK09H3wi4cGbhDBwp5gUGo0IKtnYa8tyTiephirPCK6fbobVGiXMMI5zLQ4aKEYP3wZ3ArU44o+8KMrSG/Q==}
+    engines: {node: '>=6.9.0'}
+    peerDependencies:
+      '@babel/core': ^7.0.0-0
+
+  '@babel/runtime@7.29.7':
+    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/template@7.29.7':
+    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
+    engines: {node: '>=6.9.0'}
+
+  '@babel/traverse@7.29.7':
+    resolution: {integrity: sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==}
+    engines: {node: '>=6.9.0'}
+
   '@babel/types@7.29.7':
     resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
     engines: {node: '>=6.9.0'}
@@ -687,6 +965,56 @@ packages:
     resolution: {integrity: sha512-/yCrWGCoA1SVKOks25EGadP9Pnj0oAIHGpl2wH2M2Y46dPM2ueb8wyCVOD7O3WCTkaJ0IkKvzhl1JY7+uCT2Dw==}
     engines: {node: '>=v18'}
 
+  '@csstools/color-helpers@5.1.0':
+    resolution: {integrity: sha512-S11EXWJyy0Mz5SYvRmY8nJYTFFd1LCNV+7cXyAgQtOOuzb4EsgfqDufL+9esx72/eLhsRdGZwaldu/h+E4t4BA==}
+    engines: {node: '>=18'}
+
+  '@csstools/css-calc@2.1.4':
+    resolution: {integrity: sha512-3N8oaj+0juUw/1H3YwmDDJXCgTB1gKU6Hc/bB502u9zR0q2vd786XJH9QfrKIEgFlZmhZiq6epXl4rHqhzsIgQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-parser-algorithms': ^3.0.5
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-color-parser@3.1.0':
+    resolution: {integrity: sha512-nbtKwh3a6xNVIp/VRuXV64yTKnb1IjTAEEh3irzS+HkKjAOYLTGNb9pmVNntZ8iVBHcWDA2Dof0QtPgFI1BaTA==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-parser-algorithms': ^3.0.5
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-parser-algorithms@3.0.5':
+    resolution: {integrity: sha512-DaDeUkXZKjdGhgYaHNJTV9pV7Y9B3b644jCLs9Upc3VeNGg6LWARAT6O+Q+/COo+2gg/bM5rhpMAtf70WqfBdQ==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@csstools/css-tokenizer': ^3.0.4
+
+  '@csstools/css-tokenizer@3.0.4':
+    resolution: {integrity: sha512-Vd/9EVDiu6PPJt9yAh6roZP6El1xHrdvIVGjyBsHR0RYwNHgL7FJPyIIW4fANJNG6FtyZfvlRPpFI4ZM/lubvw==}
+    engines: {node: '>=18'}
+
+  '@dnd-kit/accessibility@3.1.1':
+    resolution: {integrity: sha512-2P+YgaXF+gRsIihwwY1gCsQSYnu9Zyj2py8kY5fFvUM1qm2WA2u639R6YNVfU4GWr+ZM5mqEsfHZZLoRONbemw==}
+    peerDependencies:
+      react: '>=16.8.0'
+
+  '@dnd-kit/core@6.3.1':
+    resolution: {integrity: sha512-xkGBRQQab4RLwgXxoqETICr6S5JlogafbhNsidmrkVv2YRs5MLwpjoF2qpiGjQt8S9AoxtIV603s0GIUpY5eYQ==}
+    peerDependencies:
+      react: '>=16.8.0'
+      react-dom: '>=16.8.0'
+
+  '@dnd-kit/sortable@8.0.0':
+    resolution: {integrity: sha512-U3jk5ebVXe1Lr7c2wU7SBZjcWdQP+j7peHJfCspnA81enlu88Mgd7CC8Q+pub9ubP7eKVETzJW+IBAhsqbSu/g==}
+    peerDependencies:
+      '@dnd-kit/core': ^6.1.0
+      react: '>=16.8.0'
+
+  '@dnd-kit/utilities@3.2.2':
+    resolution: {integrity: sha512-+MKAJEOfaBe5SmV6t34p80MMKhjvUz0vRrvVJbPT0WElzaOJ/1xs+D+KDv+tD/NE5ujfrChEcshd4fLn0wpiqg==}
+    peerDependencies:
+      react: '>=16.8.0'
+
   '@drizzle-team/brocli@0.10.2':
     resolution: {integrity: sha512-z33Il7l5dKjUgGULTqBsQBQwckHh5AbIuxhdsIxDDiZAzBOrZO6q9ogcWC65kU382AfynTfgNumVcNIjuIua6w==}
 
@@ -698,6 +1026,15 @@ packages:
     resolution: {integrity: sha512-hjkrWvmVpCQiy2Km7LpVUmky8MbinNc2DzbpBaXSjgQYIXRK9LJ5BOfqldSBjp9E+U1I539LYAaSxxikQdXLLQ==}
     engines: {node: '>=18'}
 
+  '@emnapi/core@1.11.1':
+    resolution: {integrity: sha512-RSvbQmHzdKzNsLYa/wHrbc3KN4sYLKAdPZxqiM2HATqv/SBk2/ENSHpvXGaLOMcsAyz0poEGqkmmKYG3OWiJEQ==}
+
+  '@emnapi/runtime@1.11.1':
+    resolution: {integrity: sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==}
+
+  '@emnapi/wasi-threads@1.2.2':
+    resolution: {integrity: sha512-c95qOXkHdydNKhscBTebqEC1CVAZpyqOfVfBzQ1qgzyl3gfeldUjIggDbIZgDKsHLgnsM+igH7TJ/eAasaVuMA==}
+
   '@esbuild-kit/core-utils@3.3.2':
     resolution: {integrity: sha512-sPRAnw9CdSsRmEtnsl2WXWdyquogVpB3yZ3dgwJfe8zrOzTsV7cJvmwrKVa+0ma5BoiGJ+BoqkMvawbayKUsqQ==}
     deprecated: 'Merged into tsx: https://tsx.is'
@@ -1317,6 +1654,11 @@ packages:
     engines: {node: '>=6'}
     hasBin: true
 
+  '@hookform/resolvers@3.10.0':
+    resolution: {integrity: sha512-79Dv+3mDF7i+2ajj7SkypSKHhl1cbln1OGavqrsF7p6mbUv11xpqpacPsGDCTRvCSjEEIez2ef1NveSVL3b0Ag==}
+    peerDependencies:
+      react-hook-form: ^7.0.0
+
   '@humanfs/core@0.19.2':
     resolution: {integrity: sha512-UhXNm+CFMWcbChXywFwkmhqjs3PRCmcSa/hfBgLIb7oQ5HNb1wS0icWsGtSAUNgefHeI+eBrA8I1fxmbHsGdvA==}
     engines: {node: '>=18.18.0'}
@@ -1337,6 +1679,41 @@ packages:
     resolution: {integrity: sha512-bV0Tgo9K4hfPCek+aMAn81RppFKv2ySDQeMoSZuvTASywNTnVJCArCZE2FWqpvIatKu7VMRLWlR1EazvVhDyhQ==}
     engines: {node: '>=18.18'}
 
+  '@inquirer/ansi@2.0.7':
+    resolution: {integrity: sha512-3eTuUO1vH2cZm2ZKHeQxnOqlTi9EfZDGgIe3BL3I4u+rJHocr9Fz86M4fjYABPvFnQG/gGK551HqDiIcETwU6Q==}
+    engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'}
+
+  '@inquirer/confirm@6.1.1':
+    resolution: {integrity: sha512-eb8DBZcz/2qHWQda4rk2JiQk5h9QV/cVHi1yjt0f69WFZMRFn0sJTye3EAP8icut8UDMjQPsaH5KbcOogefrFQ==}
+    engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/core@11.2.1':
+    resolution: {integrity: sha512-Qd6GJT1yVyrZZCfN8W2qKF5ApmqryXRhRKCuip8h01x2w/esJQ2XIYc6f9abMIHgKQdBfFTSOdbHRLAhuM09UA==}
+    engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
+  '@inquirer/figures@2.0.7':
+    resolution: {integrity: sha512-aJ8TBPOGB6f/2qziPfElISTCEd5XOYTFckA2SGjhNmiKzfK/u4ot3v0DUzGVdUnKjN10EqnnEPck36BkyfLnJw==}
+    engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'}
+
+  '@inquirer/type@4.0.7':
+    resolution: {integrity: sha512-t28inv14nMQ1PhKpsJPY+kEs/c00qzeCOS2gTNRyTjG5d6qsVA2fItxW4hkvGZ5lvanGLdtCzVIx5dwdRpN1+g==}
+    engines: {node: '>=23.5.0 || ^22.13.0 || ^20.17.0'}
+    peerDependencies:
+      '@types/node': '>=18'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
   '@ioredis/commands@1.10.0':
     resolution: {integrity: sha512-UmeW7z4LfctwoQ5wkhVzgq8tXkreED2xZGpX+Bg+zA+WJFZCT6c062AfCK/Dfk81xZnnwdhJCUMkitihRaoC2Q==}
 
@@ -1351,6 +1728,9 @@ packages:
   '@jridgewell/gen-mapping@0.3.13':
     resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
 
+  '@jridgewell/remapping@2.3.5':
+    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
+
   '@jridgewell/resolve-uri@3.1.2':
     resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
     engines: {node: '>=6.0.0'}
@@ -1379,6 +1759,120 @@ packages:
     resolution: {integrity: sha512-Yhlar6v9WQgUp/He7BdgzOz8lqMQ8sU+jkCq7Wx8Myc5YFJLbEe7lgui/V7G1qB1DJykHSGwreceSaD60Y0PUQ==}
     hasBin: true
 
+  '@module-federation/bridge-react-webpack-plugin@2.7.0':
+    resolution: {integrity: sha512-+7eYeJnIaofQHha8CK+FxPAXMIigd2xwONHi9rlYpdGqpCBIggRKMqL0b1owyDDNiAPF2lWUbxeNm0oUfF7GbA==}
+
+  '@module-federation/cli@2.7.0':
+    resolution: {integrity: sha512-Nx5PQFmYqiiiIaU8uyzFcm9j8bNGb0SEo1GvbjI4ehfRJ5a92sUjNE++Q3o6zmVDI4wDXIhpGxioYdXi5QF40w==}
+    engines: {node: '>=16.0.0'}
+    hasBin: true
+
+  '@module-federation/dts-plugin@2.7.0':
+    resolution: {integrity: sha512-mVKeGUf/7iqRMAFfikhsr2zXtA70WuzJdS1bPqqoeLQNRGXBLDjedcDG26RpIlsvuZcmIOqgN5Z6qw7Bh/HZUg==}
+    peerDependencies:
+      typescript: ^4.9.0 || ^5.0.0 || ^6.0.0
+      vue-tsc: '>=1.0.24'
+    peerDependenciesMeta:
+      vue-tsc:
+        optional: true
+
+  '@module-federation/enhanced@2.7.0':
+    resolution: {integrity: sha512-1ZaiFIsFdH68MLoU7jrYxwhDt4WbDqmuTcnVsRqp9QZhZsex9h2zkeNpZdctL2Q1BtGsuNJ4ngJCOmO84O+6CQ==}
+    hasBin: true
+    peerDependencies:
+      typescript: ^4.9.0 || ^5.0.0 || ^6.0.0
+      vue-tsc: '>=1.0.24'
+      webpack: ^5.0.0
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+      vue-tsc:
+        optional: true
+      webpack:
+        optional: true
+
+  '@module-federation/error-codes@2.7.0':
+    resolution: {integrity: sha512-syToF3H77IbBhJ7auGMCIb5ZDmJ5tvaqSeEvncJrOCq7JBT96F4UDlQDyNh6kCVznvYqqHsPeEMrfI9b5/Omlg==}
+
+  '@module-federation/inject-external-runtime-core-plugin@2.7.0':
+    resolution: {integrity: sha512-8xHVUWsnlYd1vQPUjVEO+OPBhBjbdur+jp33QwqwkJkSUW/WOgnybCevVyfiA05aaiSyPo1PluQPT6uhImVb7A==}
+    peerDependencies:
+      '@module-federation/runtime-tools': 2.7.0
+
+  '@module-federation/managers@2.7.0':
+    resolution: {integrity: sha512-cWohiUvSrY6dIfhwsRABmEWfvJiAD5u/gxU7XRk7bx5nYPj7qn5gvYWJtvLNWzenluHZR6sib+03QMlyo+MYKQ==}
+
+  '@module-federation/manifest@2.7.0':
+    resolution: {integrity: sha512-phK5/pK/e0JyjMh7a2tvRXUFE0WCG9lxu4BtBQllZXNO0zjrroOHl2s/0sSUCdOq6NIL1HF9wTAudYiCKmNFjA==}
+
+  '@module-federation/nextjs-mf@8.8.70':
+    resolution: {integrity: sha512-ZV2WrottzEH77FfmbJ4UV73cJqprcAiEkIHYSEMEscvKNpRrRSyped7kvmI+agOZvpdCkldmP2E7cx6ErZLkLg==}
+    peerDependencies:
+      next: ^12 || ^13 || ^14 || ^15
+      react: ^17 || ^18 || ^19
+      react-dom: ^17 || ^18 || ^19
+      styled-jsx: '*'
+      webpack: ^5.40.0
+    peerDependenciesMeta:
+      next:
+        optional: true
+      react:
+        optional: true
+      react-dom:
+        optional: true
+      styled-jsx:
+        optional: true
+      webpack:
+        optional: true
+
+  '@module-federation/node@2.7.46':
+    resolution: {integrity: sha512-LgrV5NU8SHKznzxl1gAtAYiWT0lFe9K8+mYNZ1atGkhpQiSeQFVsQbObZq5USs0dgjmpZtLtkwfFOQ66fKyNRA==}
+    peerDependencies:
+      webpack: ^5.40.0
+    peerDependenciesMeta:
+      webpack:
+        optional: true
+
+  '@module-federation/rspack@2.7.0':
+    resolution: {integrity: sha512-VbYc/5cpIze16ysBZJvmeXU7NN8tAs6Q/MdDsllIwO+Ir7JIEXgGrs5Bs+K7BuAu3HpxyRC8KanJTD+JB91+WA==}
+    peerDependencies:
+      '@rspack/core': ^0.7.0 || ^1.0.0 || ^2.0.0-0
+      typescript: ^4.9.0 || ^5.0.0 || ^6.0.0
+      vue-tsc: '>=1.0.24'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+      vue-tsc:
+        optional: true
+
+  '@module-federation/runtime-core@2.7.0':
+    resolution: {integrity: sha512-5ROZLVIeV9YnWO2RwCwSHcy6sh48yclErO/2GZ2Xe8lFubPrFirgU8pbwBjZw+All0ZzN44BGS4ECRMVFzVcpg==}
+
+  '@module-federation/runtime-tools@2.7.0':
+    resolution: {integrity: sha512-AY61QeZ0jV0GywgR9j3Yd37KiXoY6gaSYABhjDF3q7XL9PNtb2Ezm1F/985wqaKJYX+qJvYv+PMH6hTvyHdPYQ==}
+
+  '@module-federation/runtime@2.7.0':
+    resolution: {integrity: sha512-UtLozKKNvhT0D1+F0MEWsAmddJ39ItKW15E22LVMAwXmYZRSnzIvJQ2Y6kQ4LwhWABsw/GRSpUDex5OfhpSQPw==}
+
+  '@module-federation/sdk@2.7.0':
+    resolution: {integrity: sha512-piiLEjaIdjbNq8E11Di6vsfryhcdN/+sBCH6NjG7gSU2VHHoHEayZQWWL7VVdS6rVjexF9McLhPTSrl0adUU+A==}
+
+  '@module-federation/third-party-dts-extractor@2.7.0':
+    resolution: {integrity: sha512-hZJKkngQ4hwe0U+vrT3KOsU11qoHCQK0wB4x1bXoTgpTfV9j5NSuddOyRmwbvXpir9bDWh3xy7ghqsx3mFf3kA==}
+
+  '@module-federation/webpack-bundler-runtime@2.7.0':
+    resolution: {integrity: sha512-3qLRIqcZVBNgJrZpiEzcTP8a6+mCdUV1QGk/XljawsQHyNieMVdLQtdLvkoF5Z5kRXNMovq+wv3vchKOMWyA8w==}
+
+  '@mswjs/interceptors@0.41.9':
+    resolution: {integrity: sha512-VVPPgHyQ6ShqnrmDWuxjmUIsO9gWyOZFmuOfLd9LfBGQJwZfy0gvv9pbHSJuoFNIYC7ZDX9aoFwowjcdSC4E8w==}
+    engines: {node: '>=18'}
+
+  '@napi-rs/wasm-runtime@1.1.6':
+    resolution: {integrity: sha512-ZLv/JdUfkvOy9eCnnBaGfiO+XimbjebAeO+MRQqD/B+FR1tnRN0tpKSJHRbE8sFfS6aqsXZ67TQjfwfsxULVbg==}
+    peerDependencies:
+      '@emnapi/core': ^1.7.1
+      '@emnapi/runtime': ^1.7.1
+
   '@nestjs/cli@10.4.9':
     resolution: {integrity: sha512-s8qYd97bggqeK7Op3iD49X2MpFtW4LVNLAwXFkfbRxKME6IYT7X0muNTJ2+QfI8hpbNx9isWkrLWIp+g5FOhiA==}
     engines: {node: '>= 16.14'}
@@ -1436,6 +1930,9 @@ packages:
   '@next/env@14.2.35':
     resolution: {integrity: sha512-DuhvCtj4t9Gwrx80dmz2F4t/zKQ4ktN8WrMwOuVzkJfBilwAwGr6v16M5eI8yCuZ63H9TTuEU09Iu2HqkzFPVQ==}
 
+  '@next/eslint-plugin-next@14.2.35':
+    resolution: {integrity: sha512-Jw9A3ICz2183qSsqwi7fgq4SBPiNfmOLmTPXKvlnzstUwyvBrtySiY+8RXJweNAs9KThb1+bYhZh9XWcNOr2zQ==}
+
   '@next/swc-darwin-arm64@14.2.33':
     resolution: {integrity: sha512-HqYnb6pxlsshoSTubdXKu15g3iivcbsMXg4bYpjL2iS/V6aQot+iyF4BUc2qA/J/n55YtvE4PHMKWBKGCF/+wA==}
     engines: {node: '>= 10'}
@@ -1494,6 +1991,10 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@noble/hashes@1.8.0':
+    resolution: {integrity: sha512-jCs9ldd7NwzpgXDIf6P3+NrHh9/sD6CQdxHyjQI+h/6rDNo88ypBxxz45UDuZHz9r3tNz7N/VInSVoVdtXEI4A==}
+    engines: {node: ^14.21.3 || >=16}
+
   '@nodelib/fs.scandir@2.1.5':
     resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
     engines: {node: '>= 8'}
@@ -1511,6 +2012,22 @@ packages:
     engines: {node: '>=8.0.0', npm: '>=5.0.0'}
     hasBin: true
 
+  '@open-draft/deferred-promise@2.2.0':
+    resolution: {integrity: sha512-CecwLWx3rhxVQF6V4bAgPS5t+So2sTbPgAzafKkVizyi7tlwpcFpdFqq+wqF2OwNBmqFuu6tOyouTuxgpMfzmA==}
+
+  '@open-draft/deferred-promise@3.0.0':
+    resolution: {integrity: sha512-XW375UK8/9SqUVNVa6M0yEy8+iTi4QN5VZ7aZuRFQmy76LRwI9wy5F4YIBU6T+eTe2/DNDo8tqu8RHlwLHM6RA==}
+
+  '@open-draft/logger@0.3.0':
+    resolution: {integrity: sha512-X2g45fzhxH238HKO4xbSr7+wBS8Fvw6ixhTDuvLd5mqh6bJJCFAPwU9mPDxbcrRtfxv4u5IHCEH77BmxvXmmxQ==}
+
+  '@open-draft/until@2.1.0':
+    resolution: {integrity: sha512-U69T3ItWHvLwGg5eJ0n3I62nWuE6ilHlmz7zM0npLBRvPRd7e6NYmg54vvRtP5mZG7kZqZCFVdsTWo7BPtBujg==}
+
+  '@opentelemetry/api-logs@0.52.1':
+    resolution: {integrity: sha512-qnSqB2DQ9TPP96dl8cDubDvrUyWc0/sK81xHTK8eSUspzDM3bsewX903qclQFvVhgStjRWdC5bLb3kQqMkfV5A==}
+    engines: {node: '>=14'}
+
   '@opentelemetry/api-logs@0.53.0':
     resolution: {integrity: sha512-8HArjKx+RaAI8uEIgcORbZIPklyh1YLjPSBus8hjRmvLi6DeFzgOcdZ7KwPabKj8mXF8dX0hyfAyGfycz0DbFw==}
     engines: {node: '>=14'}
@@ -1557,6 +2074,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': '>=1.0.0 <1.10.0'
 
+  '@opentelemetry/core@1.25.1':
+    resolution: {integrity: sha512-GeT/l6rBYWVQ4XArluLVB6WWQ8flHbdb6r2FCHC3smtdOAbrJBIv35tpV/yp9bmYUJf+xmZpu9DRTIeJVhFbEQ==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.0.0 <1.10.0'
+
   '@opentelemetry/core@1.26.0':
     resolution: {integrity: sha512-1iKxXXE8415Cdv0yjG3G6hQnB5eVEsJce3QaawX8SjDn0mAS0ZM8fAbZZJD4ajvhC15cePvosSCut404KrIIvQ==}
     engines: {node: '>=14'}
@@ -1677,6 +2200,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': ^1.3.0
 
+  '@opentelemetry/exporter-trace-otlp-http@0.52.1':
+    resolution: {integrity: sha512-05HcNizx0BxcFKKnS5rwOV+2GevLTVIRA0tRgWYyw4yCgR53Ic/xk83toYKts7kbzcI+dswInUg/4s8oyA+tqg==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': ^1.0.0
+
   '@opentelemetry/exporter-trace-otlp-http@0.53.0':
     resolution: {integrity: sha512-m7F5ZTq+V9mKGWYpX8EnZ7NjoqAU7VemQ1E2HAG+W/u0wpY1x0OmbxAXfGKFHCspdJk8UKlwPGrpcB8nay3P8A==}
     engines: {node: '>=14'}
@@ -2217,6 +2746,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': ^1.3.0
 
+  '@opentelemetry/otlp-exporter-base@0.52.1':
+    resolution: {integrity: sha512-z175NXOtX5ihdlshtYBe5RpGeBoTXVCKPPLiQlD6FHvpM4Ch+p2B0yWKYSrBfLH24H9zjJiBdTrtD+hLlfnXEQ==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': ^1.0.0
+
   '@opentelemetry/otlp-exporter-base@0.53.0':
     resolution: {integrity: sha512-UCWPreGQEhD6FjBaeDuXhiMf6kkBODF0ZQzrk/tuQcaVDJ+dDQ/xhJp192H9yWnKxVpEjFrSSLnpqmX4VwX+eA==}
     engines: {node: '>=14'}
@@ -2253,6 +2788,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': ^1.3.0
 
+  '@opentelemetry/otlp-transformer@0.52.1':
+    resolution: {integrity: sha512-I88uCZSZZtVa0XniRqQWKbjAUm73I8tpEy/uJYPPYw5d7BRdVk0RfTBQw8kSUl01oVWEuqxLDa802222MYyWHg==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.3.0 <1.10.0'
+
   '@opentelemetry/otlp-transformer@0.53.0':
     resolution: {integrity: sha512-rM0sDA9HD8dluwuBxLetUmoqGJKSAbWenwD65KY9iZhUxdBHRLrIdrABfNDP7aiTjcgK8XFyTn5fhDz7N+W6DA==}
     engines: {node: '>=14'}
@@ -2377,6 +2918,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': ^1.0.0
 
+  '@opentelemetry/resources@1.25.1':
+    resolution: {integrity: sha512-pkZT+iFYIZsVn6+GzM0kSX+u3MSLCY9md+lIJOoKl/P+gJFfxJte/60Usdp8Ce4rOs8GduUpSPNe1ddGyDT1sQ==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.0.0 <1.10.0'
+
   '@opentelemetry/resources@1.26.0':
     resolution: {integrity: sha512-CPNYchBE7MBecCSVy0HKpUISEeJOniWqcHaAHpmasZ3j9o6V3AyBzhRc90jdmemq0HOxDr6ylhUbDhBqqPpeNw==}
     engines: {node: '>=14'}
@@ -2395,6 +2942,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': '>=1.0.0 <1.10.0'
 
+  '@opentelemetry/sdk-logs@0.52.1':
+    resolution: {integrity: sha512-MBYh+WcPPsN8YpRHRmK1Hsca9pVlyyKd4BxOC4SsgHACnl/bPp4Cri9hWhVm5+2tiQ9Zf4qSc1Jshw9tOLGWQA==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.4.0 <1.10.0'
+
   '@opentelemetry/sdk-logs@0.53.0':
     resolution: {integrity: sha512-dhSisnEgIj/vJZXZV6f6KcTnyLDx/VuQ6l3ejuZpMpPlh9S1qMHiZU9NMmOkVkwwHkMy3G6mEBwdP23vUZVr4g==}
     engines: {node: '>=14'}
@@ -2413,6 +2966,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': '>=1.4.0 <1.10.0'
 
+  '@opentelemetry/sdk-metrics@1.25.1':
+    resolution: {integrity: sha512-9Mb7q5ioFL4E4dDrc4wC/A3NTHDat44v4I3p2pLPSxRvqUbDIQyMVr9uK+EU69+HWhlET1VaSrRzwdckWqY15Q==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.3.0 <1.10.0'
+
   '@opentelemetry/sdk-metrics@1.26.0':
     resolution: {integrity: sha512-0SvDXmou/JjzSDOjUmetAAvcKQW6ZrvosU0rkbDGpXvvZN+pQF6JbK/Kd4hNdK4q/22yeruqvukXEJyySTzyTQ==}
     engines: {node: '>=14'}
@@ -2449,6 +3008,12 @@ packages:
     peerDependencies:
       '@opentelemetry/api': '>=1.3.0 <1.10.0'
 
+  '@opentelemetry/sdk-trace-base@1.25.1':
+    resolution: {integrity: sha512-C8k4hnEbc5FamuZQ92nTOp8X/diCY56XUTnMiv9UTuJitCzaNNHAVsdm5+HLCdI8SLQsLWIrG38tddMxLVoftw==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.0.0 <1.10.0'
+
   '@opentelemetry/sdk-trace-base@1.26.0':
     resolution: {integrity: sha512-olWQldtvbK4v22ymrKLbIcBi9L2SpMO84sCPY54IVsJhP9fRsxJT194C/AVaAuJzLE30EdhhM1VmvVYR7az+cw==}
     engines: {node: '>=14'}
@@ -2485,6 +3050,16 @@ packages:
     peerDependencies:
       '@opentelemetry/api': '>=1.0.0 <1.10.0'
 
+  '@opentelemetry/sdk-trace-web@1.30.1':
+    resolution: {integrity: sha512-AUo2e+1uyTGMB36VlbvBqnCogVzQhpC7dRcVVdCrt+cFHLpFRRJcd45J2obGTgs0XiAwNLyq5bhkW3JF2NZA+A==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      '@opentelemetry/api': '>=1.0.0 <1.10.0'
+
+  '@opentelemetry/semantic-conventions@1.25.1':
+    resolution: {integrity: sha512-ZDjMJJQRlyk8A1KZFCc+bCbsyrn1wTwdNt56F7twdfUfnHUZUq77/WfONCj8p72NZOyP7pNTdUWSTYC3GTbuuQ==}
+    engines: {node: '>=14'}
+
   '@opentelemetry/semantic-conventions@1.27.0':
     resolution: {integrity: sha512-sAay1RrB+ONOem0OZanAR1ZI/k7yDpnOQSQmTMuGImUQb2y8EbSaCJ94FQluM74xoU03vlb2d2U90hZluL6nQg==}
     engines: {node: '>=14'}
@@ -2503,6 +3078,9 @@ packages:
     peerDependencies:
       '@opentelemetry/api': ^1.1.0
 
+  '@paralleldrive/cuid2@2.3.1':
+    resolution: {integrity: sha512-XO7cAxhnTZl0Yggq6jOgjiOHhbgcO4NqFqwSmQpjK3b6TEE6Uj/jfSk6wzYyemh3+I0sHirKSetjQwn5cZktFw==}
+
   '@pinojs/redact@0.4.0':
     resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
 
@@ -2537,6 +3115,9 @@ packages:
   '@protobufjs/utf8@1.1.2':
     resolution: {integrity: sha512-b1UQwcEZ4yCnMCD8DAL1VlbvBJE9/IX4FTIp7BG1xYpf29SLazLSrqUkj4w7Y5y7cCVP6E5tcqqcI0xemPkHug==}
 
+  '@rolldown/pluginutils@1.0.0-beta.27':
+    resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
+
   '@rollup/rollup-android-arm-eabi@4.62.2':
     resolution: {integrity: sha512-6o7ZLZK+BeenkZCFNDXqpbjw9bD6nuWonvS/lwQJp7NoVVxm6p3qE7qQ5jGuBjiFsgvqjD8mZAU5oWxTmbOeOg==}
     cpu: [arm]
@@ -2675,6 +3256,86 @@ packages:
     cpu: [x64]
     os: [win32]
 
+  '@rspack/binding-darwin-arm64@2.1.3':
+    resolution: {integrity: sha512-oOGI0RSL89Ehu9T22rugmfUY9OC2eBqLMeWRYsu7bhlUrjoXeVfGBBSEXCse666BQ1sAiM8hD/k7nqVria/okQ==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@rspack/binding-darwin-x64@2.1.3':
+    resolution: {integrity: sha512-sVqWXNiFTMXAyN362y6IA+eJc8LXZKfHdhEJ/zDuMmRp+u2IvhgaF8tk3vX/OmeB9jydVjySijuiqk8No/FoCA==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@rspack/binding-linux-arm64-gnu@2.1.3':
+    resolution: {integrity: sha512-aCy9Zli/2Qf+Ee5otXfFQ6mhv5fEyn0wIoBVmouqtJoqOO21et6UTtJ+LHLsMDolwGLyHERAljeSFSmYX3/O5A==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rspack/binding-linux-arm64-musl@2.1.3':
+    resolution: {integrity: sha512-flIE7eluz0d21Fn28EVm3vPwoJooOSqtmjLFVSuOMcoCbwV9clfor195oIrAppp/W7dL/3XquFuVfrsa01Jy8Q==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@rspack/binding-linux-riscv64-gnu@2.1.3':
+    resolution: {integrity: sha512-yojg8elye1nhsNeGncw0NrZ4pMGF7NVebR80CLg72TXyzfYwFJlFTdU5yUYb1Gy+JXIvrSCwzQt2QkyiEvmkfg==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rspack/binding-linux-riscv64-musl@2.1.3':
+    resolution: {integrity: sha512-6PvbXb3FOK4X3S5QGvoSW/sqExmsvAoPnQ/YSFrXvTphkXFezA7wnobmGBHT8JQP31hcFRzJHIZSIOKktzSzzg==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [musl]
+
+  '@rspack/binding-linux-x64-gnu@2.1.3':
+    resolution: {integrity: sha512-lMXjoGKf0SnviH596fmTszgtnXLHmWOoE90G8grG9MvKVa3pelRmfps5ewZL9s8ENf3NXRfOxIhIf/M9as6MqA==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@rspack/binding-linux-x64-musl@2.1.3':
+    resolution: {integrity: sha512-0esT35v7pW2ZsJTMc/zDUHwpNXlPqyUCyuiLJvrAAUcdENrgOVe4DmFrgVJ2hwqI4GjeN1VBnGRJ8c+edAHH5w==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@rspack/binding-wasm32-wasi@2.1.3':
+    resolution: {integrity: sha512-UsrDjD59UEP0mhfN/Z+uTc3vLgiUvIr+mn92WC1sbQi9gtZohTYvaQYFhWuMkBqsACGcmZp704JAbbSrVrVYCA==}
+    cpu: [wasm32]
+
+  '@rspack/binding-win32-arm64-msvc@2.1.3':
+    resolution: {integrity: sha512-42RS/SwKBTkNvXIPZXqTn0yEFN8zwGRfRe/ly0GDvPp/KxpLMFWxJmLxgtoLompU+0UCGvV4KpcBENt3oWs6BA==}
+    cpu: [arm64]
+    os: [win32]
+
+  '@rspack/binding-win32-ia32-msvc@2.1.3':
+    resolution: {integrity: sha512-thk43H1JHHbetNF3txcsGXeOwZi2m6Luf/uVUqNORXjxr5VV8woHAgaAx4QXVZRg70z1VDjd8mBWnHBnKI0FGA==}
+    cpu: [ia32]
+    os: [win32]
+
+  '@rspack/binding-win32-x64-msvc@2.1.3':
+    resolution: {integrity: sha512-ObaUcj+BHo/aBL1weyM3orApaHyAR5Phr3YNEpQEifxjZbNKM1iO5X5prN4OqEv3H+7o5e/Wh9Fy3N7Vvd+psA==}
+    cpu: [x64]
+    os: [win32]
+
+  '@rspack/binding@2.1.3':
+    resolution: {integrity: sha512-4UGXJqUHmm36tWG1GgFZz3p8sQ5JuSgWI+gq1xPPoihS41uYJL3cXuJnirTeWsmVrusmYZTQhgU3tl3VYGcJYg==}
+
+  '@rspack/core@2.1.3':
+    resolution: {integrity: sha512-1iGnxLrP+iyY0ZSjLZeQTaxrISpQz4yLyqJPmaF/l4uw27/dBcrloszAeLOJQ9jiv7EJtU0T5zB+LOFPpivIxA==}
+    engines: {node: ^20.19.0 || >=22.12.0}
+    peerDependencies:
+      '@module-federation/runtime-tools': ^0.24.1 || ^2.0.0
+      '@swc/helpers': ^0.5.23
+    peerDependenciesMeta:
+      '@module-federation/runtime-tools':
+        optional: true
+      '@swc/helpers':
+        optional: true
+
   '@sqltools/formatter@1.2.5':
     resolution: {integrity: sha512-Uy0+khmZqUrUGm5dmMqVlnvufZRSK0FbYzVgp0UMstm+F5+W2/jnEEQyc9vo1ZR/E5ZI/B1WjjoTqBqwJL6Krw==}
 
@@ -2687,6 +3348,29 @@ packages:
   '@swc/helpers@0.5.5':
     resolution: {integrity: sha512-KGYxvIOXcceOAbEk4bi/dVLEK9z8sZ0uBB3Il5b1rhfClSpcX0yfRO0KmTkqR2cnQDymwLB+25ZyMzICg/cm/A==}
 
+  '@testing-library/dom@10.4.1':
+    resolution: {integrity: sha512-o4PXJQidqJl82ckFaXUeoAW+XysPLauYI43Abki5hABd853iMhitooc6znOnczgbTYmEP6U6/y1ZyKAIsvMKGg==}
+    engines: {node: '>=18'}
+
+  '@testing-library/jest-dom@6.9.1':
+    resolution: {integrity: sha512-zIcONa+hVtVSSep9UT3jZ5rizo2BsxgyDYU7WFD5eICBE7no3881HGeb/QkGfsJs6JTkY1aQhT7rIPC7e+0nnA==}
+    engines: {node: '>=14', npm: '>=6', yarn: '>=1'}
+
+  '@testing-library/react@16.3.2':
+    resolution: {integrity: sha512-XU5/SytQM+ykqMnAnvB2umaJNIOsLF3PVv//1Ew4CTcpz0/BRyy/af40qqrt7SjKpDdT1saBMc42CUok5gaw+g==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      '@testing-library/dom': ^10.0.0
+      '@types/react': ^18.0.0 || ^19.0.0
+      '@types/react-dom': ^18.0.0 || ^19.0.0
+      react: ^18.0.0 || ^19.0.0
+      react-dom: ^18.0.0 || ^19.0.0
+    peerDependenciesMeta:
+      '@types/react':
+        optional: true
+      '@types/react-dom':
+        optional: true
+
   '@tokenizer/inflate@0.2.7':
     resolution: {integrity: sha512-MADQgmZT1eKjp06jpI2yozxaU9uVs4GzzgSL+uEq7bVcJ9V1ZXQkeGNql1fsSI0gMy1vhvNTNbUqrx+pZfJVmg==}
     engines: {node: '>=18'}
@@ -2697,12 +3381,30 @@ packages:
   '@ts-morph/common@0.25.0':
     resolution: {integrity: sha512-kMnZz+vGGHi4GoHnLmMhGNjm44kGtKUXGnOvrKmMwAuvNjM/PgKVGfUnL7IDvK7Jb2QQ82jq3Zmp04Gy+r3Dkg==}
 
+  '@tybys/wasm-util@0.10.3':
+    resolution: {integrity: sha512-F3fo1MYrRJYL3zER0OUOmkutjr1Vp23m7OsSgp7nq4SP6OqX6C/56XFIPAl5bt3zaBRjmW7SGz3u/6LwFpYcOg==}
+
+  '@types/aria-query@5.0.4':
+    resolution: {integrity: sha512-rfT93uj5s0PRL7EzccGMs3brplhcrghnDoV26NqKhCAS1hVo+WdNsPvE/yb6ilfr5hi2MEk6d5EWJTKdxg8jVw==}
+
   '@types/aws-lambda@8.10.143':
     resolution: {integrity: sha512-u5vzlcR14ge/4pMTTMDQr3MF0wEe38B2F9o84uC4F43vN5DGTy63npRrB6jQhyt+C0lGv4ZfiRcRkqJoZuPnmg==}
 
   '@types/aws-lambda@8.10.147':
     resolution: {integrity: sha512-nD0Z9fNIZcxYX5Mai2CTmFD7wX7UldCkW2ezCF8D1T5hdiLsnTWDGRpfRYntU6VjTdLQjOvyszru7I1c1oCQew==}
 
+  '@types/babel__core@7.20.5':
+    resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
+
+  '@types/babel__generator@7.27.0':
+    resolution: {integrity: sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==}
+
+  '@types/babel__template@7.4.4':
+    resolution: {integrity: sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==}
+
+  '@types/babel__traverse@7.28.0':
+    resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
+
   '@types/bcrypt@5.0.2':
     resolution: {integrity: sha512-6atioO8Y75fNcbmj0G7UjI9lXN2pQ/IGJ2FWT4a/btd0Lk9lQalHLKhkgKVZ3r+spnmWUKfbMi1GEe9wyHQfNQ==}
 
@@ -2733,6 +3435,33 @@ packages:
   '@types/conventional-commits-parser@5.0.2':
     resolution: {integrity: sha512-BgT2szDXnVypgpNxOK8aL5SGjUdaQbC++WZNjF1Qge3Og2+zhHj+RWhmehLhYyvQwqAmvezruVfOf8+3m74W+g==}
 
+  '@types/d3-array@3.2.2':
+    resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
+
+  '@types/d3-color@3.1.3':
+    resolution: {integrity: sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==}
+
+  '@types/d3-ease@3.0.2':
+    resolution: {integrity: sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==}
+
+  '@types/d3-interpolate@3.0.4':
+    resolution: {integrity: sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==}
+
+  '@types/d3-path@3.1.1':
+    resolution: {integrity: sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==}
+
+  '@types/d3-scale@4.0.9':
+    resolution: {integrity: sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==}
+
+  '@types/d3-shape@3.1.8':
+    resolution: {integrity: sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==}
+
+  '@types/d3-time@3.0.4':
+    resolution: {integrity: sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==}
+
+  '@types/d3-timer@3.0.2':
+    resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
+
   '@types/eslint-scope@3.7.7':
     resolution: {integrity: sha512-MzMFlSLBqNF2gcHWO0G1vP/YQyfvrxZ0bF+u7mzUdZ1/xK4A4sru+nraZz5i3iEIk1l1uyicaDVTB4QbbEkAYg==}
 
@@ -2798,6 +3527,9 @@ packages:
   '@types/react@18.3.31':
     resolution: {integrity: sha512-vfEqpXTvwT91yhmwdfouStN2hSKwTvyRs8qpLfADyrq/kxDw0hZM7Wk9Ug1FELj8hIby+S/+kQCSRFF32nv2Qw==}
 
+  '@types/semver@7.5.8':
+    resolution: {integrity: sha512-I8EUhyrgfLrcTkzV3TSsGyl1tSuPrEDzr0yd5m90UgNxQkyDXULk3b6MlQqTCpZpNtWe1K0hzclnZkTcLBe2UQ==}
+
   '@types/send@0.17.6':
     resolution: {integrity: sha512-Uqt8rPBE8SY0RK8JB1EzVOIZ32uqy8HwdxCnoCOsYrvnswqmFZ/k+9Ikidlk/ImhsdvBsloHbAlewb2IEBV/Og==}
 
@@ -2807,9 +3539,15 @@ packages:
   '@types/serve-static@1.15.10':
     resolution: {integrity: sha512-tRs1dB+g8Itk72rlSI2ZrW6vZg0YrLI81iQSTkMmOqnqCaNr/8Ek4VwWcN5vZgCYWbg/JJSGBlUaYGAOP73qBw==}
 
+  '@types/set-cookie-parser@2.4.10':
+    resolution: {integrity: sha512-GGmQVGpQWUe5qglJozEjZV/5dyxbOOZ0LHe/lqyWssB88Y4svNfst0uqBVscdDeIKl5Jy5+aPSvy7mI9tYRguw==}
+
   '@types/shimmer@1.2.0':
     resolution: {integrity: sha512-UE7oxhQLLd9gub6JKIAhDq06T0F6FnztwMNRvYgjeQSBeMc1ZG/tA47EwfduvkuQS8apbkM/lpLpWsaCeYsXVg==}
 
+  '@types/statuses@2.0.6':
+    resolution: {integrity: sha512-xMAgYwceFhRA2zY+XbEA7mxYbA093wdiW8Vu6gZPGWy9cmOyU9XesH1tNcEWsKFd5Vzrqx5T3D38PWx1FIIXkA==}
+
   '@types/tedious@4.0.14':
     resolution: {integrity: sha512-KHPsfX/FoVbUGbyYvk1q9MMQHLPeRZhRJZdO45Q4YjvFkv4hMNghCWTvy7rdKessBsmtz4euWCWAB6/tVpI1Iw==}
 
@@ -2875,6 +3613,15 @@ packages:
     resolution: {integrity: sha512-UexrHGnGTpbuQHct2ExOc2ZcFbGUS9FOesCxxqdBGcpI1BxYu/LZ6U8Aq6/72XtF/qRBk9nhuGHFJIXXMhPMdw==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
+  '@urql/core@5.2.0':
+    resolution: {integrity: sha512-/n0ieD0mvvDnVAXEQgX/7qJiVcvYvNkOHeBvkwtylfjydar123caCXcl58PXFY11oU1oquJocVXHxLAbtv4x1A==}
+
+  '@vitejs/plugin-react@4.7.0':
+    resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
+    engines: {node: ^14.18.0 || >=16.0.0}
+    peerDependencies:
+      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0
+
   '@vitest/coverage-v8@2.1.9':
     resolution: {integrity: sha512-Z2cOr0ksM00MpEfyVE8KXIYPEcBFxdbLSs56L8PO0QQMxt/6bDj45uQfxoc96v05KW3clk7vvgP0qfDit9DmfQ==}
     peerDependencies:
@@ -2994,6 +3741,10 @@ packages:
     engines: {node: '>=0.4.0'}
     hasBin: true
 
+  adm-zip@0.5.10:
+    resolution: {integrity: sha512-x0HvcHqVJNTPk/Bw8JbLWlWoo6Wwnsug0fnYYro1HBrjxZ3G7/AZk7Ahv8JwDe1uIcz8eBqvu86FuF1POiG7vQ==}
+    engines: {node: '>=6.0'}
+
   agent-base@6.0.2:
     resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
     engines: {node: '>= 6.0.0'}
@@ -3053,6 +3804,10 @@ packages:
     resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
     engines: {node: '>=8'}
 
+  ansi-styles@5.2.0:
+    resolution: {integrity: sha512-Cxwpt2SfTzTtXcfOlzGEee8O+c+MmUgGrNiBcXnuWxuFJHe6a5Hz7qwhwe5OgaSYI0IJvkLqWX1ASG+cJOkEiA==}
+    engines: {node: '>=10'}
+
   ansi-styles@6.2.3:
     resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
     engines: {node: '>=12'}
@@ -3089,23 +3844,60 @@ packages:
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
+  aria-query@5.3.0:
+    resolution: {integrity: sha512-b0P0sZPKtyu8HkeRAfCq0IfURZK+SuwMjY1UXGBU27wpAiTwQAIlq56IbIO+ytk/JjS1fMR14ee5WBBfKi5J6A==}
+
+  aria-query@5.3.2:
+    resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==}
+    engines: {node: '>= 0.4'}
+
   array-back@6.2.3:
     resolution: {integrity: sha512-SGDvmg6QTYiTxCBkYVmThcoa67uLl35pyzRHdpCGBOcqFy6BtwnphoFPk7LhJshD+Yk1Kt35WGWeZPTgwR4Fhw==}
     engines: {node: '>=12.17'}
 
+  array-buffer-byte-length@1.0.2:
+    resolution: {integrity: sha512-LHE+8BuR7RYGDKvnrmcuSq3tDcKv9OFEXQt/HpbZhY7V6h0zlUXutnAD82GiFx9rdieCMjkvtcsPqBwgUl1Iiw==}
+    engines: {node: '>= 0.4'}
+
   array-flatten@1.1.1:
     resolution: {integrity: sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==}
 
   array-ify@1.0.0:
     resolution: {integrity: sha512-c5AMf34bKdvPhQ7tBGhqkgKNUzMr4WUs+WDtC2ZUGOUncbxKMTvqxYctiseW3+L4bA8ec+GcZ6/A/FW4m8ukng==}
 
+  array-includes@3.1.9:
+    resolution: {integrity: sha512-FmeCCAenzH0KH381SPT5FZmiA/TmpndpcaShhfgEN9eCVjnFBqq3l1xrI42y8+PPLI6hypzou4GXw00WHmPBLQ==}
+    engines: {node: '>= 0.4'}
+
   array-timsort@1.0.3:
     resolution: {integrity: sha512-/+3GRL7dDAGEfM6TseQk/U+mi18TU2Ms9I3UlLdUMhz2hbvGNTKdj9xniwXfUqgYhHxRx0+8UnKkvlNwVU+cWQ==}
 
+  array.prototype.flat@1.3.3:
+    resolution: {integrity: sha512-rwG/ja1neyLqCuGZ5YYrznA62D4mZXg0i1cIskIUKSiqF3Cje9/wXAls9B9s1Wa2fomMsIv8czB8jZcPmxCXFg==}
+    engines: {node: '>= 0.4'}
+
+  array.prototype.flatmap@1.3.3:
+    resolution: {integrity: sha512-Y7Wt51eKJSyi80hFrJCePGGNo5ktJCslFuboqJsbf57CCPcm5zztluPlc4/aD8sWsKvlwatezpV4U1efk8kpjg==}
+    engines: {node: '>= 0.4'}
+
+  arraybuffer.prototype.slice@1.0.4:
+    resolution: {integrity: sha512-BNoCY6SXXPQ7gF2opIP4GBE+Xw7U+pHMYKuzjgCN3GwiaIR09UUeKfheyIry77QtrCBlC0KK0q5/TER/tYh3PQ==}
+    engines: {node: '>= 0.4'}
+
   assertion-error@2.0.1:
     resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
     engines: {node: '>=12'}
 
+  ast-types-flow@0.0.8:
+    resolution: {integrity: sha512-OH/2E5Fg20h2aPrbe+QL8JZQFko0YZaF+j4mnQ7BGhfavO7OpSLa8a0y9sBwomHdSbkhTS8TQNayBfnW5DwbvQ==}
+
+  async-function@1.0.0:
+    resolution: {integrity: sha512-hsU18Ae8CDTR6Kgu9DYf0EbCr/a5iGL0rytQDobUcdpYOKokk8LEjVphnXkDkgpi0wYVsqrXuP0bZxJaTqdgoA==}
+    engines: {node: '>= 0.4'}
+
+  asynckit@0.4.0:
+    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
+
   atomic-sleep@1.0.0:
     resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
     engines: {node: '>=8.0.0'}
@@ -3117,10 +3909,22 @@ packages:
     peerDependencies:
       postcss: ^8.1.0
 
+  available-typed-arrays@1.0.7:
+    resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
+    engines: {node: '>= 0.4'}
+
   aws-ssl-profiles@1.1.2:
     resolution: {integrity: sha512-NZKeq9AfyQvEeNlN0zSYAaWrmBffJh3IELMZfRpJVWgrpEbtEpnjvzqBPf+mxoI287JohRDoa+/nsfqqiZmF6g==}
     engines: {node: '>= 6.0.0'}
 
+  axe-core@4.12.1:
+    resolution: {integrity: sha512-s7iGf5GaVMxEG0ENN9x+xTr7GFZCb1ZP/1uATUpCEK2X78nDB3RwbtFCo9pGAf9ru+VwoQ464DkaLEeRM08wJA==}
+    engines: {node: '>=4'}
+
+  axobject-query@4.1.0:
+    resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==}
+    engines: {node: '>= 0.4'}
+
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
@@ -3313,6 +4117,10 @@ packages:
     resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
     engines: {node: '>=0.8'}
 
+  clsx@2.1.1:
+    resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
+    engines: {node: '>=6'}
+
   cluster-key-slot@1.1.1:
     resolution: {integrity: sha512-rwHwUfXL40Chm1r08yrhU3qpUvdVlgkKNeyeGPOxnW8/SyVDvgRaed/Uz54AqWNaTCAThlj6QAs3TZcKI0xDEw==}
     engines: {node: '>=0.10.0'}
@@ -3334,6 +4142,10 @@ packages:
   colorette@2.0.20:
     resolution: {integrity: sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w==}
 
+  combined-stream@1.0.8:
+    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
+    engines: {node: '>= 0.8'}
+
   command-line-args@6.0.2:
     resolution: {integrity: sha512-AIjYVxrV9X752LmPDLbVYv8aMCuHPSLZJXEo2qo/xJfv+NYhaZ4sMSF01rM+gHPaMgvPM0l5D/F+Qx+i2WfSmQ==}
     engines: {node: '>=12.20'}
@@ -3347,6 +4159,10 @@ packages:
     resolution: {integrity: sha512-85UdvzTNx/+s5CkSgBm/0hzP80RFHAa7PsfeADE5ezZF3uHz3/Tqj9gIKGT9PTtpycc3Ua64T0oVulGfKxzfqg==}
     engines: {node: '>=12.20.0'}
 
+  commander@11.1.0:
+    resolution: {integrity: sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ==}
+    engines: {node: '>=16'}
+
   commander@13.1.0:
     resolution: {integrity: sha512-/rFeCpNJQbhSZjGVwO9RFV3xPqbnERS8MmIQzCtD/zl6gpJuV/bMLuN92oG3F7d8oDEHHRrujSXNUr8fpjntKw==}
     engines: {node: '>=18'}
@@ -3399,6 +4215,9 @@ packages:
     engines: {node: '>=16'}
     hasBin: true
 
+  convert-source-map@2.0.0:
+    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
+
   cookie-signature@1.0.7:
     resolution: {integrity: sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==}
 
@@ -3406,6 +4225,10 @@ packages:
     resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
     engines: {node: '>= 0.6'}
 
+  cookie@1.1.1:
+    resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==}
+    engines: {node: '>=18'}
+
   core-util-is@1.0.3:
     resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
 
@@ -3439,22 +4262,96 @@ packages:
       typescript:
         optional: true
 
+  cron-parser@4.9.0:
+    resolution: {integrity: sha512-p0SaNjrHOnQeR8/VnfGbmg9te2kfyYSQ7Sc/j/6DtPL3JQvKxmjO9TSjNFpujqV3vEYYBvNNvXSxzyksBWAx1Q==}
+    engines: {node: '>=12.0.0'}
+
   cross-spawn@7.0.6:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
 
+  css.escape@1.5.1:
+    resolution: {integrity: sha512-YUifsXXuknHlUsmlgyY0PKzgPOr7/FjCePfHNt0jxm83wHZi44VDMQ7/fGNkjY3/jV1MC+1CmZbaHzugyeRtpg==}
+
   cssesc@3.0.0:
     resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
     engines: {node: '>=4'}
     hasBin: true
 
+  cssstyle@4.6.0:
+    resolution: {integrity: sha512-2z+rWdzbbSZv6/rhtvzvqeZQHrBaqgogqt85sqFNbabZOuFbCVFb8kPeEtZjiKkbrm395irpNKiYeFeLiQnFPg==}
+    engines: {node: '>=18'}
+
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
+  d3-array@3.2.4:
+    resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==}
+    engines: {node: '>=12'}
+
+  d3-color@3.1.0:
+    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
+    engines: {node: '>=12'}
+
+  d3-ease@3.0.1:
+    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
+    engines: {node: '>=12'}
+
+  d3-format@3.1.2:
+    resolution: {integrity: sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==}
+    engines: {node: '>=12'}
+
+  d3-interpolate@3.0.1:
+    resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==}
+    engines: {node: '>=12'}
+
+  d3-path@3.1.0:
+    resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==}
+    engines: {node: '>=12'}
+
+  d3-scale@4.0.2:
+    resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==}
+    engines: {node: '>=12'}
+
+  d3-shape@3.2.0:
+    resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==}
+    engines: {node: '>=12'}
+
+  d3-time-format@4.1.0:
+    resolution: {integrity: sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==}
+    engines: {node: '>=12'}
+
+  d3-time@3.1.0:
+    resolution: {integrity: sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==}
+    engines: {node: '>=12'}
+
+  d3-timer@3.0.1:
+    resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==}
+    engines: {node: '>=12'}
+
+  damerau-levenshtein@1.0.8:
+    resolution: {integrity: sha512-sdQSFB7+llfUcQHUQO3+B8ERRj0Oa4w9POWMI/puGtuf7gFywGmkaLCElnudfTiKZV+NvHqL0ifzdrI8Ro7ESA==}
+
   dargs@8.1.0:
     resolution: {integrity: sha512-wAV9QHOsNbwnWdNW2FYvE1P56wtgSbM+3SZcdGiWQILwVjACCXDCI3Ai8QlCjMDB8YK5zySiXZYBiwGmNY3lnw==}
     engines: {node: '>=12'}
 
+  data-urls@5.0.0:
+    resolution: {integrity: sha512-ZYP5VBHshaDAiVZxjbRVcFJpc+4xGgT0bK3vzy1HLN8jTO975HEbuYzZJcHoQEY5K1a0z8YayJkyVETa08eNTg==}
+    engines: {node: '>=18'}
+
+  data-view-buffer@1.0.2:
+    resolution: {integrity: sha512-EmKO5V3OLXh1rtK2wgXRansaK1/mtVdTUEiEI0W8RkvgT05kfxaH29PliLnpLP73yYO6142Q72QNa8Wx/A5CqQ==}
+    engines: {node: '>= 0.4'}
+
+  data-view-byte-length@1.0.2:
+    resolution: {integrity: sha512-tuhGbE6CfTM9+5ANGf+oQb72Ky/0+s3xKUpHvShfiz2RxMFgFPjsXuRLBVMtvMs15awe45SRb83D6wH4ew6wlQ==}
+    engines: {node: '>= 0.4'}
+
+  data-view-byte-offset@1.0.1:
+    resolution: {integrity: sha512-BS8PfmtDGnrgYdOonGZQdLZslWIeCGFP9tpan0hi1Co2Zr2NKADsvGYA8XxuG/4UWgJ6Cjtv+YJnB6MM69QGlQ==}
+    engines: {node: '>= 0.4'}
+
   dateformat@4.6.3:
     resolution: {integrity: sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA==}
 
@@ -3478,6 +4375,12 @@ packages:
       supports-color:
         optional: true
 
+  decimal.js-light@2.5.1:
+    resolution: {integrity: sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==}
+
+  decimal.js@10.6.0:
+    resolution: {integrity: sha512-YpgQiITW3JXGntzdUmyUR1V812Hn8T1YVXhCu+wO3OpS4eU9l4YdD3qjyiKdV6mvV29zapkMeD390UVEf2lkUg==}
+
   decompress-response@6.0.0:
     resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
     engines: {node: '>=10'}
@@ -3512,6 +4415,14 @@ packages:
     resolution: {integrity: sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==}
     engines: {node: '>= 0.4'}
 
+  define-properties@1.2.1:
+    resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
+    engines: {node: '>= 0.4'}
+
+  delayed-stream@1.0.0:
+    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
+    engines: {node: '>=0.4.0'}
+
   delegates@1.0.0:
     resolution: {integrity: sha512-bd2L678uiWATM6m5Z1VzNCErI3jiGzt6HGY8OVICs40JQq/HALfbyNJmp0UDakEY4pMMaN0Ly5om/B1VI/+xfQ==}
 
@@ -3523,6 +4434,10 @@ packages:
     resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
     engines: {node: '>= 0.8'}
 
+  dequal@2.0.3:
+    resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
+    engines: {node: '>=6'}
+
   destroy@1.2.0:
     resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
     engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
@@ -3537,6 +4452,15 @@ packages:
   dlv@1.1.3:
     resolution: {integrity: sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==}
 
+  dom-accessibility-api@0.5.16:
+    resolution: {integrity: sha512-X7BJ2yElsnOJ30pZF4uIIDfBEVgF4XEBxL9Bxhy6dnrm5hkzqmsWHGTiHqRiITNhMyFLyAiWndIJP7Z1NTteDg==}
+
+  dom-accessibility-api@0.6.3:
+    resolution: {integrity: sha512-7ZgogeTnjuHbo+ct10G9Ffp0mif17idi0IyWNVA/wcwcm7NPOD/WEHVP3n7n3MhXqxoIYm8d6MuZohYWIZ4T3w==}
+
+  dom-helpers@5.2.1:
+    resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
+
   dot-prop@5.3.0:
     resolution: {integrity: sha512-QM8q3zDe58hqUqjraQOmzZ1LIH9SWQJTlEKCH4kJ2oQvLZk7RbQXvtDM2XEq3fwkV9CCvvH4LA0AV+ogFsBM2Q==}
     engines: {node: '>=8'}
@@ -3659,10 +4583,17 @@ packages:
   emoji-regex@9.2.2:
     resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
 
+  empathic@2.0.0:
+    resolution: {integrity: sha512-i6UzDscO/XfAcNYD75CfICkmfLedpyPDdozrLMmQc5ORaQcdMoc21OnlEylMIqI7U8eniKrPMxxtj8k0vhmJhA==}
+    engines: {node: '>=14'}
+
   encodeurl@2.0.0:
     resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
     engines: {node: '>= 0.8'}
 
+  encoding@0.1.13:
+    resolution: {integrity: sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==}
+
   end-of-stream@1.4.5:
     resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
 
@@ -3670,6 +4601,10 @@ packages:
     resolution: {integrity: sha512-rpsZEGT1jFuve6QlpyRp9ckQ+kN61hvF9BzCPyMdaKTm8UJce96KBn3sorXOFXlzjPrs3Vc4T1NsSroZ3PxlFw==}
     engines: {node: '>=10.13.0'}
 
+  entities@6.0.1:
+    resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
+    engines: {node: '>=0.12'}
+
   env-paths@2.2.1:
     resolution: {integrity: sha512-+h1lkLKhZMTYjog1VEpJNG7NZJWcuc2DDk/qsqSTRRCOXiLjeQ1d1/udrUGhqMxUgAlwKNZ0cf2uqan5GLuS2A==}
     engines: {node: '>=6'}
@@ -3681,6 +4616,14 @@ packages:
   error-ex@1.3.4:
     resolution: {integrity: sha512-sqQamAnR14VgCr1A618A3sGrygcpK+HEbenA/HiEAkkUwcZIIB/tgWqHFxWgOyDh4nB4JCRimh79dR5Ywc9MDQ==}
 
+  es-abstract-get@1.0.0:
+    resolution: {integrity: sha512-6PMWXpdhshVvFp+FoWYs1EvG1Nj0tvk0dZM+XcK0xMEM1czRVcP6ohqPWHy6qPagSpC8j4+p89WXlT+xXJs/fg==}
+    engines: {node: '>= 0.4'}
+
+  es-abstract@1.24.2:
+    resolution: {integrity: sha512-2FpH9Q5i2RRwyEP1AylXe6nYLR5OhaJTZwmlcP0dL/+JCbgg7yyEo/sEK6HeGZRf3dFpWwThaRHVApXSkW3xeg==}
+    engines: {node: '>= 0.4'}
+
   es-define-property@1.0.1:
     resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
     engines: {node: '>= 0.4'}
@@ -3696,6 +4639,18 @@ packages:
     resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
     engines: {node: '>= 0.4'}
 
+  es-set-tostringtag@2.1.0:
+    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
+    engines: {node: '>= 0.4'}
+
+  es-shim-unscopables@1.1.0:
+    resolution: {integrity: sha512-d9T8ucsEhh8Bi1woXCf+TIKDIROLG5WCkxg8geBCbvk22kzwC5G2OnXVMO6FUsvQlgUUXQ2itephWDLqDzbeCw==}
+    engines: {node: '>= 0.4'}
+
+  es-to-primitive@1.3.4:
+    resolution: {integrity: sha512-yPDz7wqpg1/mmHLmS3tcfTfbw5f1eryXvyghYBffGdERwe+mV7ZcWzTR8LR17Kvqt3qfPurjlonmnq3MKXIOXw==}
+    engines: {node: '>= 0.4'}
+
   esbuild-register@3.6.0:
     resolution: {integrity: sha512-H2/S7Pm8a9CL1uhp9OvjwrBh5Pvx0H8qVOxNu8Wed9Y7qv56MPtq+GGM8RJpq6glYJn9Wspr8uw7l55uyinNeg==}
     peerDependencies:
@@ -3742,6 +4697,12 @@ packages:
     peerDependencies:
       eslint: '>=7.0.0'
 
+  eslint-plugin-jsx-a11y@6.10.2:
+    resolution: {integrity: sha512-scB3nz4WmG75pV8+3eRUQOHZlNSUhFNq37xnpgRkCCELU3XMvXAxLk1eqWWyE22Ki4Q01Fnsw9BA3cJHDPgn2Q==}
+    engines: {node: '>=4.0'}
+    peerDependencies:
+      eslint: ^3 || ^4 || ^5 || ^6 || ^7 || ^8 || ^9
+
   eslint-scope@5.1.1:
     resolution: {integrity: sha512-2NxwbF/hZ0KpepYN0cNbo+FN6XoK7GaHlQhgx/hIZl6Va0bF45RQOOwhLIy8lQDbuCiadSLCBnH2CFYquit5bw==}
     engines: {node: '>=8.0.0'}
@@ -3812,6 +4773,9 @@ packages:
     resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
     engines: {node: '>=6'}
 
+  eventemitter3@4.0.7:
+    resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
+
   eventemitter3@5.0.4:
     resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
 
@@ -3835,6 +4799,9 @@ packages:
     resolution: {integrity: sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==}
     engines: {node: '>= 0.10.0'}
 
+  exsolve@1.0.8:
+    resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
+
   extend@3.0.2:
     resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==}
 
@@ -3848,6 +4815,10 @@ packages:
   fast-deep-equal@3.1.3:
     resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
 
+  fast-equals@5.4.1:
+    resolution: {integrity: sha512-DjlFSM5Pk9cGcL0q5QXl66eGzx0N6szNgaswwc5ZphlBohjTVJSnGgI+rJVOgOi65qUoQnDZN4nDqi33udtydQ==}
+    engines: {node: '>=6.0.0'}
+
   fast-glob@3.3.3:
     resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
     engines: {node: '>=8.6.0'}
@@ -3861,9 +4832,18 @@ packages:
   fast-safe-stringify@2.1.1:
     resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
 
+  fast-string-truncated-width@3.0.3:
+    resolution: {integrity: sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g==}
+
+  fast-string-width@3.0.2:
+    resolution: {integrity: sha512-gX8LrtNEI5hq8DVUfRQMbr5lpaS4nMIWV+7XEbXk2b8kiQIizgnlr12B4dA3ZEx3308ze0O4Q1R+cHts8kyUJg==}
+
   fast-uri@3.1.3:
     resolution: {integrity: sha512-i70LwGWUduXqzicKXWshooq+sWL1K3WUU5rKZNG/0i3a1OSoX3HqhH5WbWwTmqWfor4urUakGPiRQcleRZTwOg==}
 
+  fast-wrap-ansi@0.2.2:
+    resolution: {integrity: sha512-7F2Fl+TjRSenLqlU3UjSH0iyqopqoZIu7eZVpEirP2g1GtWa2G/ecEmBdgz31+Mxr+ELclgg6sokpSFIQiZ02Q==}
+
   fastq@1.20.1:
     resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
 
@@ -3929,6 +4909,10 @@ packages:
   flatted@3.4.2:
     resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
+  for-each@0.3.5:
+    resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
+    engines: {node: '>= 0.4'}
+
   foreground-child@3.3.1:
     resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
     engines: {node: '>=14'}
@@ -3940,6 +4924,10 @@ packages:
       typescript: '>3.6.0'
       webpack: ^5.11.0
 
+  form-data@4.0.6:
+    resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
+    engines: {node: '>= 6'}
+
   forwarded-parse@2.1.2:
     resolution: {integrity: sha512-alTFZZQDKMporBH77856pXgzhEzaUVmLCDk+egLgIgHst3Tpndzz8MnKe+GzRJRfvVdn69HhpW7cmXzvtLvJAw==}
 
@@ -3979,6 +4967,13 @@ packages:
   function-bind@1.1.2:
     resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
 
+  function.prototype.name@1.2.0:
+    resolution: {integrity: sha512-jObKIik1P2QjPHP5nz5BaOtUlfgS0fWo8IUByNXkM+o+02sJOi94em77GwJKQSJ3gfPHdgzLNrHc1uokV4P/ew==}
+    engines: {node: '>= 0.4'}
+
+  functions-have-names@1.2.3:
+    resolution: {integrity: sha512-xckBUXyTIqT97tq2x2AMb+g163b5JFysYk0x4qxNFwbfQkmNZoiRHb6sPzI9/QV33WeuvVYBUIiD4NzNIyqaRQ==}
+
   gauge@3.0.2:
     resolution: {integrity: sha512-+5J6MS/5XksCuXq++uFRsnUd7Ovu1XenbeuIuNRJxYWjgQbPuFhT14lAvsWfqfAmnwluf1OwMjz39HjfLPci0Q==}
     engines: {node: '>=10'}
@@ -3995,6 +4990,14 @@ packages:
   generate-function@2.3.1:
     resolution: {integrity: sha512-eeB5GfMNeevm/GRYq20ShmsaGcmI81kIX2K9XQx5miC8KdHaC6Jm0qQ8ZNeGOi7wYB8OsdxKs+Y2oVuTFuVwKQ==}
 
+  generator-function@2.0.1:
+    resolution: {integrity: sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g==}
+    engines: {node: '>= 0.4'}
+
+  gensync@1.0.0-beta.2:
+    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
+    engines: {node: '>=6.9.0'}
+
   get-caller-file@2.0.5:
     resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
     engines: {node: 6.* || 8.* || >= 10.*}
@@ -4015,6 +5018,10 @@ packages:
     resolution: {integrity: sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==}
     engines: {node: '>=16'}
 
+  get-symbol-description@1.1.0:
+    resolution: {integrity: sha512-w9UMqWwJxHNOvoNzSJ2oPF5wvYcvP7jUvYzhp67yEhTi17ZDBBC1z9pTdGuzjD+EFIqLSYRweZjqfiPzQ06Ebg==}
+    engines: {node: '>= 0.4'}
+
   get-tsconfig@4.14.0:
     resolution: {integrity: sha512-yTb+8DXzDREzgvYmh6s9vHsSVCHeC0G3PI5bEXNBHtmshPnO+S5O7qgLEOn0I5QvMy6kpZN8K1NKGyilLb93wA==}
 
@@ -4037,6 +5044,11 @@ packages:
   glob-to-regexp@0.4.1:
     resolution: {integrity: sha512-lkX1HJXwyMcprw/5YUZc2s7DrpAiHB21/V+E1rHUrVNokkvB6bqMzT0VfV6/86ZNabt1k14YOIaT7nDvOX3Iiw==}
 
+  glob@10.3.10:
+    resolution: {integrity: sha512-fa46+tv1Ak0UPK1TOy/pZrIybNNt4HCv7SDzwyfiOZkvZLEbjsZkJBPtDHVshZjbecAoAGSC20MjLDG/qr679g==}
+    engines: {node: '>=16 || 14 >=14.17'}
+    hasBin: true
+
   glob@10.4.5:
     resolution: {integrity: sha512-7Bv8RF0k6xjo7d4A/PxYLbUCfb6c+Vpd2/mB2yRDlew7Jb5hEXiCD9ibfO7wpk8i4sevK6DFny9h7EYbM3/sHg==}
     hasBin: true
@@ -4053,6 +5065,10 @@ packages:
     resolution: {integrity: sha512-oahGvuMGQlPw/ivIYBjVSrWAfWLBeku5tpPE2fOPLi+WHffIWbuh2tCjhyQhTBPMf5E9jDEH4FOmTYgYwbKwtQ==}
     engines: {node: '>=18'}
 
+  globalthis@1.0.4:
+    resolution: {integrity: sha512-DpLKbNU4WylpxJykQujfCcwYWiV/Jhm50Goo0wrVILAv5jOr9d+H+UR3PhSCD2rCCEIg0uc+G+muBTwD54JhDQ==}
+    engines: {node: '>= 0.4'}
+
   google-logging-utils@0.0.2:
     resolution: {integrity: sha512-NEgUnEcBiP5HrPzufUkBzJOD/Sxsco3rLNo1F1TNf7ieU8ryUzBhqba8r756CjLX7rn3fHl6iLEwPYuqpoKgQQ==}
     engines: {node: '>=14'}
@@ -4064,6 +5080,14 @@ packages:
   graceful-fs@4.2.11:
     resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
 
+  graphql@16.14.2:
+    resolution: {integrity: sha512-Chq1s4CY7jmh8gO2qvLIJyfCDIN+EHLFW/9iShnp1z8FjBQMoodWP1kDC36VAMXXIvAjj4ARa7ntfAV2BrjsbA==}
+    engines: {node: ^12.22.0 || ^14.16.0 || ^16.0.0 || >=17.0.0}
+
+  has-bigints@1.1.0:
+    resolution: {integrity: sha512-R3pbpkcIqv2Pm3dUwgjclDRVmWpTJW2DcMzcIhEXEx1oh/CEMObMm3KLmRJOdvhM7o4uQBnwr8pzRK2sJWIqfg==}
+    engines: {node: '>= 0.4'}
+
   has-flag@4.0.0:
     resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
     engines: {node: '>=8'}
@@ -4075,10 +5099,18 @@ packages:
   has-property-descriptors@1.0.2:
     resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
 
+  has-proto@1.2.0:
+    resolution: {integrity: sha512-KIL7eQPfHQRC8+XluaIw7BHUwwqL19bQn4hzNgdr+1wXoU0KKj6rufu47lhY7KbJR2C6T6+PfyN0Ea7wkSS+qQ==}
+    engines: {node: '>= 0.4'}
+
   has-symbols@1.1.0:
     resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
     engines: {node: '>= 0.4'}
 
+  has-tostringtag@1.0.2:
+    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
+    engines: {node: '>= 0.4'}
+
   has-unicode@2.0.1:
     resolution: {integrity: sha512-8Rf9Y83NBReMnx0gFzA8JImQACstCYWUplepDa9xprwwtmgEZUF0h/i5xSA625zB/I37EtrswSST6OXxwaaIJQ==}
 
@@ -4086,6 +5118,9 @@ packages:
     resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
+  headers-polyfill@5.0.1:
+    resolution: {integrity: sha512-1TJ6Fih/b8h5TIcv+1+Hw0PDQWJTKDKzFZzcKOiW1wJza3XoAQlkCuXLbymPYB8+ZQyw8mHvdw560e8zVFIWyA==}
+
   help-me@5.0.0:
     resolution: {integrity: sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg==}
 
@@ -4093,6 +5128,10 @@ packages:
     resolution: {integrity: sha512-A91dYTeIB6NoXG+PxTQpCCDDnfHsW9kc06Lvpu1TEe9gnd6ZFeiBoRO9JvzEv6xK7EX97/dUE8g/vBMTqTS3CA==}
     engines: {node: '>=14'}
 
+  html-encoding-sniffer@4.0.0:
+    resolution: {integrity: sha512-Y22oTqIU4uuPgEemfz7NDJz6OeKf12Lsu+QC+s3BVpda64lTiMYCyGwg5ki4vFxkMwQdeZDl2adZoqUgdFuTgQ==}
+    engines: {node: '>=18'}
+
   html-escaper@2.0.2:
     resolution: {integrity: sha512-H2iMtd0I4Mt5eYiapRdIDjp+XzelXQ0tFE4JS7YFwFevXXMmOp9myNrUvCg0D6ws8iqkRPBfKHgbwig1SmlLfg==}
 
@@ -4100,6 +5139,10 @@ packages:
     resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
     engines: {node: '>= 0.8'}
 
+  http-proxy-agent@7.0.2:
+    resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
+    engines: {node: '>= 14'}
+
   https-proxy-agent@5.0.1:
     resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
     engines: {node: '>= 6'}
@@ -4121,6 +5164,10 @@ packages:
     resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
     engines: {node: '>=0.10.0'}
 
+  iconv-lite@0.6.3:
+    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
+    engines: {node: '>=0.10.0'}
+
   iconv-lite@0.7.3:
     resolution: {integrity: sha512-IKXpvIzjnC9XTAUbVBcMfGS0EPaIXtW6v+zr+RRp+hqULEpo0owZax6wyRwPOJbWbzjYspQwusTsfVr0ifh4uQ==}
     engines: {node: '>=0.10.0'}
@@ -4150,6 +5197,10 @@ packages:
     resolution: {integrity: sha512-JmXMZ6wuvDmLiHEml9ykzqO6lwFbof0GG4IkcGaENdCRDDmMVnny7s5HsIgHCbaq0w2MyPhDqkhTUgS2LU2PHA==}
     engines: {node: '>=0.8.19'}
 
+  indent-string@4.0.0:
+    resolution: {integrity: sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==}
+    engines: {node: '>=8'}
+
   inflight@1.0.6:
     resolution: {integrity: sha512-k92I/b08q4wvFscXCLvqfsHCrjrF7yiXsQuIVvVE7N82W3+aqpzuUdBbfhWcy/FZR3/4IgflMgKLOsvPDrGCJA==}
     deprecated: This module is not supported, and leaks memory. Do not use it. Check out lru-cache if you want a good and tested way to coalesce async requests by a key value, which is much more comprehensive and powerful.
@@ -4172,6 +5223,14 @@ packages:
     resolution: {integrity: sha512-vI2w4zl/mDluHt9YEQ/543VTCwPKWiHzKtm9dM2V0NdFcqEexDAjUHzO1oA60HRNaVifGXXM1tRRNluLVHa0Kg==}
     engines: {node: '>=18'}
 
+  internal-slot@1.1.0:
+    resolution: {integrity: sha512-4gd7VpWNQNB4UKKCFFVcp1AVv+FMOgs9NKzjHKusc8jTMhd5eL1NqQqOpE0KzMds804/yHlglp3uxgluOqAPLw==}
+    engines: {node: '>= 0.4'}
+
+  internmap@2.0.3:
+    resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
+    engines: {node: '>=12'}
+
   ioredis@5.11.1:
     resolution: {integrity: sha512-ehuGcf94bQXhfagULNXrJdfnWO38v070jxSx/qE87Kjzmu2fU7ro5EFAb+OPituLqgfyuQaym5DlrNydW2sJ9A==}
     engines: {node: '>=12.22.0'}
@@ -4180,21 +5239,57 @@ packages:
     resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
     engines: {node: '>= 0.10'}
 
+  is-array-buffer@3.0.5:
+    resolution: {integrity: sha512-DDfANUiiG2wC1qawP66qlTugJeL5HyzMpfr8lLK+jMQirGzNod0B12cFB/9q838Ru27sBwfw78/rdoU7RERz6A==}
+    engines: {node: '>= 0.4'}
+
   is-arrayish@0.2.1:
     resolution: {integrity: sha512-zz06S8t0ozoDXMG+ube26zeCTNXcKIPJZJi8hBrF4idCLms4CG9QtK7qBl1boi5ODzFpjswb5JPmHCbMpjaYzg==}
 
+  is-async-function@2.1.1:
+    resolution: {integrity: sha512-9dgM/cZBnNvjzaMYHVoxxfPj2QXt22Ev7SuuPrs+xav0ukGB0S6d4ydZdEiM48kLx5kDV+QBPrpVnFyefL8kkQ==}
+    engines: {node: '>= 0.4'}
+
+  is-bigint@1.1.0:
+    resolution: {integrity: sha512-n4ZT37wG78iz03xPRKJrHTdZbe3IicyucEtdRsV5yglwc3GyUfbAfpSeD0FJ41NbUNSt5wbhqfp1fS+BgnvDFQ==}
+    engines: {node: '>= 0.4'}
+
   is-binary-path@2.1.0:
     resolution: {integrity: sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==}
     engines: {node: '>=8'}
 
+  is-boolean-object@1.2.2:
+    resolution: {integrity: sha512-wa56o2/ElJMYqjCjGkXri7it5FbebW5usLw/nPmCMs5DeZ7eziSYZhSmPRn0txqeW4LnAmQQU7FgqLpsEFKM4A==}
+    engines: {node: '>= 0.4'}
+
+  is-callable@1.2.7:
+    resolution: {integrity: sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==}
+    engines: {node: '>= 0.4'}
+
   is-core-module@2.16.2:
     resolution: {integrity: sha512-evOr8xfXKxE6qSR0hSXL2r3sd7ALj8+7jQEUvPYcm5sgZFdJ+AYzT6yNmJenvIYQBgIGwfwz08sL8zoL7yq2BA==}
     engines: {node: '>= 0.4'}
 
+  is-data-view@1.0.2:
+    resolution: {integrity: sha512-RKtWF8pGmS87i2D6gqQu/l7EYRlVdfzemCJN/P3UOs//x1QE7mfhvzHIApBTRf7axvT6DMGwSwBXYCT0nfB9xw==}
+    engines: {node: '>= 0.4'}
+
+  is-date-object@1.1.0:
+    resolution: {integrity: sha512-PwwhEakHVKTdRNVOw+/Gyh0+MzlCl4R6qKvkhuvLtPMggI1WAHt9sOwZxQLSGpUaDnrdyDsomoRgNnCfKNSXXg==}
+    engines: {node: '>= 0.4'}
+
+  is-document.all@1.0.0:
+    resolution: {integrity: sha512-+XSoyS05OdBbhFuELhgTCpFNHkpBOJqtsZfUFFpe5QTw+9Sjbh8zitxhQkYAo6wV7e1Vb8cAPvpCk9jGam/82g==}
+    engines: {node: '>= 0.4'}
+
   is-extglob@2.1.1:
     resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
     engines: {node: '>=0.10.0'}
 
+  is-finalizationregistry@1.1.1:
+    resolution: {integrity: sha512-1pC6N8qWJbWoPtEjgcL2xyhQOP491EQjeUo3qTKcmV8YSDDJrOepfG8pcC7h/QgnQHYSv0mJ3Z/ZWxmatVrysg==}
+    engines: {node: '>= 0.4'}
+
   is-fullwidth-code-point@3.0.0:
     resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
     engines: {node: '>=8'}
@@ -4207,6 +5302,10 @@ packages:
     resolution: {integrity: sha512-5XHYaSyiqADb4RnZ1Bdad6cPp8Toise4TzEjcOYDHZkTCbKgiUl7WTUCpNWHuxmDt91wnsZBc9xinNzopv3JMQ==}
     engines: {node: '>=18'}
 
+  is-generator-function@1.1.2:
+    resolution: {integrity: sha512-upqt1SkGkODW9tsGNG5mtXTXtECizwtS2kA161M+gJPc1xdb/Ax629af6YrTwcOeQHbewrPNlE5Dx7kzvXTizA==}
+    engines: {node: '>= 0.4'}
+
   is-glob@4.0.3:
     resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
     engines: {node: '>=0.10.0'}
@@ -4215,6 +5314,21 @@ packages:
     resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
     engines: {node: '>=8'}
 
+  is-map@2.0.3:
+    resolution: {integrity: sha512-1Qed0/Hr2m+YqxnM09CjA2d/i6YZNfF6R2oRAOj36eUdS6qIV/huPJNSEpKbupewFs+ZsJlxsjjPbc0/afW6Lw==}
+    engines: {node: '>= 0.4'}
+
+  is-negative-zero@2.0.3:
+    resolution: {integrity: sha512-5KoIu2Ngpyek75jXodFvnafB6DJgr3u8uuK0LEZJjrU19DrMD3EVERaR8sjz8CCGgpZvxPl9SuE1GMVPFHx1mw==}
+    engines: {node: '>= 0.4'}
+
+  is-node-process@1.2.0:
+    resolution: {integrity: sha512-Vg4o6/fqPxIjtxgUH5QLJhwZ7gW5diGCVlXpuUfELC62CuxM1iHcRe51f2W1FDy04Ai4KJkagKjx3XaqyfRKXw==}
+
+  is-number-object@1.1.1:
+    resolution: {integrity: sha512-lZhclumE1G6VYD8VHe35wFaIif+CTy5SJIi5+3y4psDgWu4wPDoBhF8NxUOinEc7pHgiTsT6MaBb92rKhhD+Xw==}
+    engines: {node: '>= 0.4'}
+
   is-number@7.0.0:
     resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
     engines: {node: '>=0.12.0'}
@@ -4223,9 +5337,24 @@ packages:
     resolution: {integrity: sha512-drqDG3cbczxxEJRoOXcOjtdp1J/lyp1mNn0xaznRs8+muBhgQcrnbspox5X5fOw0HnMnbfDzvnEMEtqDEJEo8w==}
     engines: {node: '>=8'}
 
+  is-potential-custom-element-name@1.0.1:
+    resolution: {integrity: sha512-bCYeRA2rVibKZd+s2625gGnGF/t7DSqDs4dP7CrLA1m7jKWz6pps0LpYLJN8Q64HtmPKJ1hrN3nzPNKFEKOUiQ==}
+
   is-property@1.0.2:
     resolution: {integrity: sha512-Ks/IoX00TtClbGQr4TWXemAnktAQvYB7HzcCxDGqEZU6oCmb2INHuOoKxbtR+HFkmYWBKv/dOZtGRiAjDhj92g==}
 
+  is-regex@1.2.1:
+    resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
+    engines: {node: '>= 0.4'}
+
+  is-set@2.0.3:
+    resolution: {integrity: sha512-iPAjerrse27/ygGLxw+EBR9agv9Y6uLeYVJMu+QNCoouJ1/1ri0mGrcWpfCqFZuzzx3WjtwxG098X+n4OuRkPg==}
+    engines: {node: '>= 0.4'}
+
+  is-shared-array-buffer@1.0.4:
+    resolution: {integrity: sha512-ISWac8drv4ZGfwKl5slpHG9OwPNty4jOWPRIhBpxOoD+hqITiwuipOQ2bNthAzwA3B4fIjO4Nln74N0S9byq8A==}
+    engines: {node: '>= 0.4'}
+
   is-stream@2.0.1:
     resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
     engines: {node: '>=8'}
@@ -4234,17 +5363,49 @@ packages:
     resolution: {integrity: sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==}
     engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
 
+  is-string@1.1.1:
+    resolution: {integrity: sha512-BtEeSsoaQjlSPBemMQIrY1MY0uM6vnS1g5fmufYOtnxLGUZM2178PKbhsk7Ffv58IX+ZtcvoGwccYsh0PglkAA==}
+    engines: {node: '>= 0.4'}
+
+  is-symbol@1.1.1:
+    resolution: {integrity: sha512-9gGx6GTtCQM73BgmHQXfDmLtfjjTUDSyoxTCbp5WtoixAhfgsDirWIcVQ/IHpvI5Vgd5i/J5F7B9cN/WlVbC/w==}
+    engines: {node: '>= 0.4'}
+
   is-text-path@2.0.0:
     resolution: {integrity: sha512-+oDTluR6WEjdXEJMnC2z6A4FRwFoYuvShVVEGsS7ewc0UTi2QtAKMDJuL4BDEVt+5T7MjFo12RP8ghOM75oKJw==}
     engines: {node: '>=8'}
 
+  is-typed-array@1.1.15:
+    resolution: {integrity: sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==}
+    engines: {node: '>= 0.4'}
+
   is-unicode-supported@0.1.0:
     resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
     engines: {node: '>=10'}
 
+  is-weakmap@2.0.2:
+    resolution: {integrity: sha512-K5pXYOm9wqY1RgjpL3YTkF39tni1XajUIkawTLUo9EZEVUFga5gSQJF8nNS7ZwJQ02y+1YCNYcMh+HIf1ZqE+w==}
+    engines: {node: '>= 0.4'}
+
+  is-weakref@1.1.1:
+    resolution: {integrity: sha512-6i9mGWSlqzNMEqpCp93KwRS1uUOodk2OJ6b+sq7ZPDSy2WuI5NFIxp/254TytR8ftefexkWn5xNiHUNpPOfSew==}
+    engines: {node: '>= 0.4'}
+
+  is-weakset@2.0.4:
+    resolution: {integrity: sha512-mfcwb6IzQyOKTs84CQMrOwW4gQcaTOAWJ0zzJCl2WSPDrWk/OzDaImWFH3djXhb24g4eudZfLRozAvPGw4d9hQ==}
+    engines: {node: '>= 0.4'}
+
+  isarray@2.0.5:
+    resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
+
   isexe@2.0.0:
     resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
 
+  isomorphic-ws@5.0.0:
+    resolution: {integrity: sha512-muId7Zzn9ywDsyXgTIafTry2sV3nySZeUDe6YedVd1Hvuuep5AsIlqK+XefWpYTyJG5e503F2xIuT2lcU6rCSw==}
+    peerDependencies:
+      ws: '*'
+
   istanbul-lib-coverage@3.2.2:
     resolution: {integrity: sha512-O8dpsF+r0WV/8MNRKfnmrtCWhuKjxrq2w+jpzBL5UZKTi2LeVWnWOmWRxFlesJONmc+wLAGvKQZEOanko0LFTg==}
     engines: {node: '>=8'}
@@ -4265,6 +5426,10 @@ packages:
     resolution: {integrity: sha512-RKYVTCjAnRthyJes037NX/IiqeidgN1xc3j1RjFfECFp28A1GVwK9nA+i0rJPaHqSZwygLzRnFlzUuHFoWWy+Q==}
     engines: {node: '>=6'}
 
+  jackspeak@2.3.6:
+    resolution: {integrity: sha512-N3yCS/NegsOBokc8GAdM8UcmfsKiSS8cipheD/nivzr700H+nsMOxJjQnvwOcRYVuFkdH0wGUvW2WbXGmrZGbQ==}
+    engines: {node: '>=14'}
+
   jackspeak@3.4.3:
     resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
 
@@ -4276,6 +5441,10 @@ packages:
     resolution: {integrity: sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==}
     hasBin: true
 
+  jiti@2.4.2:
+    resolution: {integrity: sha512-rg9zJN+G4n2nfJl5MW3BMygZX56zKPNVEYYqq7adpmMh4Jn2QNEwhvQlFy6jPVdcod7txZtKHWnyZiA3a0zP7A==}
+    hasBin: true
+
   jiti@2.6.1:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
@@ -4291,6 +5460,20 @@ packages:
     resolution: {integrity: sha512-1td788aAnnZ5qs7V2QIRl1owjtYpbKt749Y3xauqQgwIIGF/xXWz1wMTEBx5O3LK3lXLVuqXPdPxj2BoFHaW9Q==}
     hasBin: true
 
+  jsdom@25.0.1:
+    resolution: {integrity: sha512-8i7LzZj7BF8uplX+ZyOlIz86V6TAsSs+np6m1kpW9u0JWi4z/1t+FzcK1aek+ybTnAC4KhBL4uXCNT0wcUIeCw==}
+    engines: {node: '>=18'}
+    peerDependencies:
+      canvas: ^2.11.2
+    peerDependenciesMeta:
+      canvas:
+        optional: true
+
+  jsesc@3.1.0:
+    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
+    engines: {node: '>=6'}
+    hasBin: true
+
   json-bigint@1.0.0:
     resolution: {integrity: sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==}
 
@@ -4335,6 +5518,10 @@ packages:
     resolution: {integrity: sha512-MT/xP0CrubFRNLNKvxJ2BYfy53Zkm++5bX9dtuPbqAeQpTVe0MQTFhao8+Cp//EmJp244xt6Drw/GVEGCUj40g==}
     engines: {node: '>=12', npm: '>=6'}
 
+  jsx-ast-utils@3.3.5:
+    resolution: {integrity: sha512-ZZow9HBI5O6EPgSJLUb8n2NKgmVWTwCvHGwFuJlMjvLFqlGG6pjirPhtdsseaLZjSibD8eegzmYpUZwoIlj2cQ==}
+    engines: {node: '>=4.0'}
+
   jwa@2.0.1:
     resolution: {integrity: sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==}
 
@@ -4348,6 +5535,13 @@ packages:
   keyv@4.5.4:
     resolution: {integrity: sha512-oxVHkHR/EJf2CNXnWxRLW6mg7JyCCUcG0DtEGmL2ctUo1PNTin1PUil+r/+4r5MpVgC/fn1kjsx7mjSujKqIpw==}
 
+  language-subtag-registry@0.3.23:
+    resolution: {integrity: sha512-0K65Lea881pHotoGEa5gDlMxt3pctLi2RplBb7Ezh4rRdLEOtgi7n4EwK9lamnUCkKBqaeKRVebTq6BAxSkpXQ==}
+
+  language-tags@1.0.9:
+    resolution: {integrity: sha512-MbjN408fEndfiQXbFQ1vnd+1NoLDsnQW41410oQBXiyXDMYH5z505juWa4KUE1LqxRC7DgOgZDbKLxHIwm27hA==}
+    engines: {node: '>=0.10'}
+
   levn@0.4.1:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
@@ -4436,6 +5630,9 @@ packages:
     resolution: {integrity: sha512-9ie8ItPR6tjY5uYJh8K/Zrv/RMZ5VOlOWvtZdEHYSTFKZfIBPQa9tOAEeAWhd+AnIneLJ22w5fjOYtoutpWq5w==}
     engines: {node: '>=18'}
 
+  long-timeout@0.1.1:
+    resolution: {integrity: sha512-BFRuQUqc7x2NWxfJBCyUrN8iYUYznzL9JROmRz1gZ6KlOIgmoD+njPVbb+VNn2nGMKggMsK79iUNErillsrx7w==}
+
   long@5.3.2:
     resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
 
@@ -4449,10 +5646,21 @@ packages:
   lru-cache@10.4.3:
     resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
 
+  lru-cache@5.1.1:
+    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
+
   lru.min@1.1.4:
     resolution: {integrity: sha512-DqC6n3QQ77zdFpCMASA1a3Jlb64Hv2N2DciFGkO/4L9+q/IpIAuRlKOvCXabtRW6cQf8usbmM6BE/TOPysCdIA==}
     engines: {bun: '>=1.0.0', deno: '>=1.30.0', node: '>=8.0.0'}
 
+  luxon@3.7.2:
+    resolution: {integrity: sha512-vtEhXh/gNjI9Yg1u4jX/0YVPMvxzHuGgCm6tC5kZyb08yjGWGnqAjGJvcXbqQR2P3MyMEFnRbpcdFS6PBcLqew==}
+    engines: {node: '>=12'}
+
+  lz-string@1.5.0:
+    resolution: {integrity: sha512-h5bgJWpxJNswbU7qCrV0tIKQCaS3blPDrqKWx+QxzuzL1zGUzij9XCWLrSLsJPu5t+eWA/ycetzYAO5IOMcWAQ==}
+    hasBin: true
+
   magic-string@0.30.21:
     resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
 
@@ -4534,6 +5742,10 @@ packages:
     resolution: {integrity: sha512-z0yWI+4FDrrweS8Zmt4Ej5HdJmky15+L2e6Wgn3+iK5fWzb6T3fhNFq2+MeTRb064c6Wr4N/wv0DzQTjNzHNGQ==}
     engines: {node: '>=10'}
 
+  min-indent@1.0.1:
+    resolution: {integrity: sha512-I9jwMn07Sy/IwOj3zVkVik2JTvgpaykDZEigL6Rx6N9LbMywwUSMtxET+7lVoDLLd3O3IXwJwvuuns8UB/HeAg==}
+    engines: {node: '>=4'}
+
   minimatch@10.2.5:
     resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
     engines: {node: 18 || 20 || >=22}
@@ -4576,6 +5788,10 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  mock-socket@9.3.1:
+    resolution: {integrity: sha512-qxBgB7Qa2sEQgHFjj0dSigq7fX4k6Saisd5Nelwp2q8mlbAFh5dHV9JTTlF8viYJLSSWgMCZFUom8PJcMNBoJw==}
+    engines: {node: '>= 8'}
+
   module-details-from-path@1.0.4:
     resolution: {integrity: sha512-EGWKgxALGMgzvxYF1UyGTy0HXX/2vHLkw6+NvDKW2jypWbHpjQuj4UMcqQWXHERJhVGKikolT06G3bcKe4fi7w==}
 
@@ -4585,6 +5801,16 @@ packages:
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
+  msw@2.15.0:
+    resolution: {integrity: sha512-2wQAmKkQKxRuXvYJxVhPGG0wZNBQyD06oJvxqw90XqLvptdqxdlHrFUfEteKkpaNORX3Xzc+HtEl/q0nfmN2wQ==}
+    engines: {node: '>=18'}
+    hasBin: true
+    peerDependencies:
+      typescript: '>= 4.8.x'
+    peerDependenciesMeta:
+      typescript:
+        optional: true
+
   multer@2.0.2:
     resolution: {integrity: sha512-u7f2xaZ/UG8oLXHvtF/oWTRvT44p9ecwBBqTwgJVq0+4BW1g8OW01TyMEGWBHbyMOYVHXslaut7qEQ1meATXgw==}
     engines: {node: '>= 10.16.0'}
@@ -4596,6 +5822,10 @@ packages:
     resolution: {integrity: sha512-avsJQhyd+680gKXyG/sQc0nXaC6rBkPOfyHYcFb9+hdkqQkR9bdnkJ0AMZhke0oesPqIO+mFFJ+IdBc7mst4IA==}
     engines: {node: ^14.17.0 || ^16.13.0 || >=18.0.0}
 
+  mute-stream@3.0.0:
+    resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==}
+    engines: {node: ^20.17.0 || >=22.9.0}
+
   mysql2@3.22.6:
     resolution: {integrity: sha512-fPKmeDGUzvFP7bMD5SASlJ5zIgvCC4hbanTmhbUlEmhyrY1hR4Hi3xLOWgTd3luYjLVifx6uGvMNJ2m/LlqEpg==}
     engines: {node: '>= 8.0'}
@@ -4680,6 +5910,10 @@ packages:
     resolution: {integrity: sha512-J6l92tKHX6w8Jy5nO1Vuc01NoIiRGi/d6qBKVxh+IQ8Cr3b6HbVNfKiF8ZpFKufTwpwxMmce2W3iQZ861ZRyTg==}
     engines: {node: '>=18'}
 
+  node-schedule@2.1.1:
+    resolution: {integrity: sha512-OXdegQq03OmXEjt2hZP33W2YPs/E5BcFQks46+G2gAxs4gHOIVD1u7EqlYLYSKsaIpyKCK9Gbk0ta1/gjRSMRQ==}
+    engines: {node: '>=6'}
+
   nopt@5.0.0:
     resolution: {integrity: sha512-Tbj67rffqceeLpcRXrT7vKAN8CwfPeIBgM7E6iBkmKLV7bEMwpGgYLGv0jACUsECaa/vuxP0IjEont6umdMgtQ==}
     engines: {node: '>=6'}
@@ -4697,6 +5931,9 @@ packages:
     resolution: {integrity: sha512-AqZtDUWOMKs1G/8lwylVjrdYgqA4d9nu8hc+0gzRxlDb1I10+FHBGMXs6aiQHFdCUUlqH99MUMuLfzWDNDtfxw==}
     deprecated: This package is no longer supported.
 
+  nwsapi@2.2.24:
+    resolution: {integrity: sha512-7YRhZ3jS45LwmSCT4b2sVFHt/WuovaktDU07QrtOBY2PXskss5a9jfmR9jptyumwXST+rFjrmppMY1KT/yn35A==}
+
   object-assign@4.1.1:
     resolution: {integrity: sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==}
     engines: {node: '>=0.10.0'}
@@ -4709,6 +5946,22 @@ packages:
     resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
     engines: {node: '>= 0.4'}
 
+  object-keys@1.1.1:
+    resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
+    engines: {node: '>= 0.4'}
+
+  object.assign@4.1.7:
+    resolution: {integrity: sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw==}
+    engines: {node: '>= 0.4'}
+
+  object.fromentries@2.0.8:
+    resolution: {integrity: sha512-k6E21FzySsSK5a21KRADBd/NGneRegFO5pLHfdQLpRDETUNJueLXs3WCzyQ3tFRDYgbq3KHGXfTbi2bs8WQ6rQ==}
+    engines: {node: '>= 0.4'}
+
+  object.values@1.2.1:
+    resolution: {integrity: sha512-gXah6aZrcUxjWg2zR2MwouP2eHlCBzdV4pygudehaKXSGW4v2AsRQUK+lwwXhii6KFZcunEnmSUoYp5CXibxtA==}
+    engines: {node: '>= 0.4'}
+
   on-exit-leak-free@2.1.2:
     resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
     engines: {node: '>=14.0.0'}
@@ -4744,6 +5997,13 @@ packages:
     resolution: {integrity: sha512-D2FR03Vir7FIu45XBY20mTb+/ZSWB00sjU9jdQXt83gDrI4Ztz5Fs7/yy74g2N5SVQY4xY1qDr4rNddwYRVX0g==}
     engines: {node: '>=0.10.0'}
 
+  outvariant@1.4.3:
+    resolution: {integrity: sha512-+Sl2UErvtsoajRDKCE5/dBz4DIvHXQQnAxtQTF04OJxY0+DyZXSo5P5Bb7XYWOh81syohlYL24hbDwxedPUJCA==}
+
+  own-keys@1.0.1:
+    resolution: {integrity: sha512-qFOyK5PjiWZd+QQIh+1jhdb9LpxTF0qs7Pm8o5QHYZ0M3vKqSqzsZaEB6oWlxZ+q2sJBMI/Ktgd2N5ZwQoRHfg==}
+    engines: {node: '>= 0.4'}
+
   p-limit@3.1.0:
     resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
     engines: {node: '>=10'}
@@ -4771,6 +6031,9 @@ packages:
     resolution: {integrity: sha512-ayCKvm/phCGxOkYRSCM82iDwct8/EonSEgCSxWxD7ve6jHggsFl4fZVQBPRNgQoKiuV/odhFrGzQXZwbifC8Rg==}
     engines: {node: '>=8'}
 
+  parse5@7.3.0:
+    resolution: {integrity: sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==}
+
   parseurl@1.3.3:
     resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
     engines: {node: '>= 0.8'}
@@ -4811,6 +6074,9 @@ packages:
   path-to-regexp@3.3.0:
     resolution: {integrity: sha512-qyCH421YQPS2WFDxDjftfc1ZR5WKQzVzqsp4n9M2kQhVOo/ByahFoUNJfl58kOcEGfQ//7weFTDhm+ss8Ecxgw==}
 
+  path-to-regexp@6.3.0:
+    resolution: {integrity: sha512-Yhpw4T9C6hPpgPeA28us07OJeqZ5EzQTkbfwuhsUg0c237RomFoETJgmp2sa3F/41gfLE6G5cqcYwznmeEeOlQ==}
+
   path-type@4.0.0:
     resolution: {integrity: sha512-gDKb8aZMDeD/tZWs9P6+q0J9Mwkdl6xMV8TjnGP3qJVJ06bdMgkbBlLU8IdfOsIsFz2BW1rNVT3XuNEl8zPAvw==}
     engines: {node: '>=8'}
@@ -4882,6 +6148,10 @@ packages:
     resolution: {integrity: sha512-Nc3IT5yHzflTfbjgqWcCPpo7DaKy4FnpB0l/zCAW0Tc7jxAiuqSxHasntB3D7887LSrA93kDJ9IXovxJYxyLCA==}
     engines: {node: '>=4'}
 
+  possible-typed-array-names@1.1.0:
+    resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
+    engines: {node: '>= 0.4'}
+
   postcss-import@15.1.0:
     resolution: {integrity: sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==}
     engines: {node: '>=14.0.0'}
@@ -4964,6 +6234,10 @@ packages:
     engines: {node: '>=14'}
     hasBin: true
 
+  pretty-format@27.5.1:
+    resolution: {integrity: sha512-Qb1gy5OrP5+zDf2Bvnzdl3jsTf1qXVMazbvCoKhtKqVs4/YK4ozX4gKQJJVyNe+cajNPn0KoC0MC3FUmaHWEmQ==}
+    engines: {node: ^10.13.0 || ^12.13.0 || ^14.15.0 || >=15.0.0}
+
   process-warning@5.0.0:
     resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
 
@@ -4975,6 +6249,9 @@ packages:
     resolution: {integrity: sha512-6ZiOBfCywsD4k1BN9IX0uZhF+tJkV8q8llP64G5Hajs4JOeVLPCwpPVcpXy3BwYiUGgyJzsJJQeOIv7+hDSq8g==}
     engines: {node: ^16 || ^18 || >=20}
 
+  prop-types@15.8.1:
+    resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
+
   protobufjs@7.6.5:
     resolution: {integrity: sha512-/FPD0nUc9jH6rfFjji9IBqOz4pcSE3CsT1m7Ep6Mdb0LxSUMj8hgl6GomOvZzpNpAqqGaXA0P3VSrZLFzIhQrw==}
     engines: {node: '>=12.0.0'}
@@ -5017,6 +6294,37 @@ packages:
     peerDependencies:
       react: ^18.3.1
 
+  react-hook-form@7.81.0:
+    resolution: {integrity: sha512-ocbmr2p5KBMoAfj4WCUvped33lVi1Kd5DuDUvQDnB6VEAacOjPI/jMbtDdbhco4y9ct4xUuCmMY0b/C9L0QHjw==}
+    engines: {node: '>=18.0.0'}
+    peerDependencies:
+      react: ^16.8.0 || ^17 || ^18 || ^19
+
+  react-is@16.13.1:
+    resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
+
+  react-is@17.0.2:
+    resolution: {integrity: sha512-w2GsyukL62IJnlaff/nRegPQR94C/XXamvMWmSHRJ4y7Ts/4ocGRmTHvOs8PSE6pB3dWOrD/nueuU5sduBsQ4w==}
+
+  react-is@18.3.1:
+    resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
+
+  react-refresh@0.17.0:
+    resolution: {integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==}
+    engines: {node: '>=0.10.0'}
+
+  react-smooth@4.0.4:
+    resolution: {integrity: sha512-gnGKTpYwqL0Iii09gHobNolvX4Kiq4PKx6eWBCYYix+8cdw+cGo3do906l1NBPKkSWx1DghC1dlWG9L2uGd61Q==}
+    peerDependencies:
+      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  react-transition-group@4.4.5:
+    resolution: {integrity: sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==}
+    peerDependencies:
+      react: '>=16.6.0'
+      react-dom: '>=16.6.0'
+
   react@18.3.1:
     resolution: {integrity: sha512-wS+hAgJShR0KhEvPJArfuPVN1+Hz1t0Y6n5jLrGQbkb4urgPE/0Rve+1kMB1v/oWgHgm4WIcV+i7F2pTVj+2iQ==}
     engines: {node: '>=0.10.0'}
@@ -5040,6 +6348,20 @@ packages:
     resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
     engines: {node: '>= 12.13.0'}
 
+  recharts-scale@0.4.5:
+    resolution: {integrity: sha512-kivNFO+0OcUNu7jQquLXAxz1FIwZj8nrj+YkOKc5694NbjCvcT6aSZiIzNzd2Kul4o4rTto8QVR9lMNtxD4G1w==}
+
+  recharts@2.15.4:
+    resolution: {integrity: sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==}
+    engines: {node: '>=14'}
+    peerDependencies:
+      react: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+      react-dom: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
+
+  redent@3.0.0:
+    resolution: {integrity: sha512-6tDA8g98We0zd0GvVeMT9arEOnTw9qM03L9cJXaCjrip1OO764RDBLBfrB4cwzNGDj5OA5ioymC9GkizgWJDUg==}
+    engines: {node: '>=8'}
+
   redis-errors@1.2.0:
     resolution: {integrity: sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==}
     engines: {node: '>=4'}
@@ -5051,6 +6373,14 @@ packages:
   reflect-metadata@0.2.2:
     resolution: {integrity: sha512-urBwgfrvVP/eAyXx4hluJivBKzuEbSQs9rKWCrCkbSxNv8mxPcUZKeuoF3Uy4mJl3Lwprp6yy5/39VWigZ4K6Q==}
 
+  reflect.getprototypeof@1.0.10:
+    resolution: {integrity: sha512-00o4I+DVrefhv+nX0ulyi3biSHCPDe+yLv5o/p6d/UVlirijB8E16FtfwSAi4g3tcqrQ4lRAqQSoFEZJehYEcw==}
+    engines: {node: '>= 0.4'}
+
+  regexp.prototype.flags@1.5.4:
+    resolution: {integrity: sha512-dYqgNSZbDwkaJ2ceRd9ojCGjBq+mOm9LmtXnAnEGyHhN/5R7iDW2TRw3h+o/jCFxus3P2LfWIIiwowAjANm7IA==}
+    engines: {node: '>= 0.4'}
+
   repeat-string@1.6.1:
     resolution: {integrity: sha512-PV0dzCYDNfRi1jCDbJzpW7jNNDRuCOG/jI5ctQcGKt/clZD+YcPS3yIlWuTJMmESC8aevCFmWJy5wjAFgNqN6w==}
     engines: {node: '>=0.10'}
@@ -5091,6 +6421,9 @@ packages:
     resolution: {integrity: sha512-oMA2dcrw6u0YfxJQXm342bFKX/E4sG9rbTzO9ptUcR/e8A33cHuvStiYOwH7fszkZlZ1z/ta9AAoPk2F4qIOHA==}
     engines: {node: '>=18'}
 
+  rettime@0.11.11:
+    resolution: {integrity: sha512-ILJRqVWBCTlg9r42fFgwVZx1gnFAcQF8mRoMkbgQfIrjEDf9nbBFDFx00oloOa+Q869FUtaYDXZvEfnecQSCoQ==}
+
   reusify@1.1.0:
     resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
     engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
@@ -5108,6 +6441,12 @@ packages:
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
+  rrweb-cssom@0.7.1:
+    resolution: {integrity: sha512-TrEMa7JGdVm0UThDJSx7ddw5nVm3UJS9o9CCIZ72B1vSyEZoziDqBYP3XIoi/12lKrJR8rE3jeFHMok2F/Mnsg==}
+
+  rrweb-cssom@0.8.0:
+    resolution: {integrity: sha512-guoltQEx+9aMf2gDZ0s62EcV8lsXR+0w8915TC3ITdn2YueuNjdAYh/levpU9nFaoChh9RUS5ZdQMrKfVEN9tw==}
+
   run-async@2.4.1:
     resolution: {integrity: sha512-tvVnVv01b8c1RrA6Ep7JkStj85Guv/YrMcwqYQnwjsAS2cTmmPGBBjAjpCW7RrSodNSoE2/qg9O4bceNvUuDgQ==}
     engines: {node: '>=0.12.0'}
@@ -5125,9 +6464,21 @@ packages:
   rxjs@7.8.2:
     resolution: {integrity: sha512-dhKf903U/PQZY6boNNtAGdWbG85WAbjT/1xYoZIC7FAY0yWapOBQVsVrDl58W86//e1VpMNBtRV4MaXfdMySFA==}
 
+  safe-array-concat@1.1.4:
+    resolution: {integrity: sha512-wtZlHyOje6OZTGqAoaDKxFkgRtkF9CnHAVnCHKfuj200wAgL+bSJhdsCD2l0Qx/2ekEXjPWcyKkfGb5CPboslg==}
+    engines: {node: '>=0.4'}
+
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
+  safe-push-apply@1.0.0:
+    resolution: {integrity: sha512-iKE9w/Z7xCzUMIZqdBsp6pEQvwuEebH4vdpjcDWnyzaI6yl6O9FHvVpmGelvEHNsoY6wGblkxR6Zty/h00WiSA==}
+    engines: {node: '>= 0.4'}
+
+  safe-regex-test@1.1.0:
+    resolution: {integrity: sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==}
+    engines: {node: '>= 0.4'}
+
   safe-stable-stringify@2.5.0:
     resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
     engines: {node: '>=10'}
@@ -5135,6 +6486,10 @@ packages:
   safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
+  saxes@6.0.0:
+    resolution: {integrity: sha512-xAg7SOnEhrm5zI3puOOKyy1OMcMlIJZYNJY7xLBwSze0UjhPLnWfj2GF2EpT0jmzaJKIWKHLsaSSajf35bcYnA==}
+    engines: {node: '>=v12.22.7'}
+
   scheduler@0.23.2:
     resolution: {integrity: sha512-UOShsPwz7NrMUqhR6t0hWjFduvOzbtv7toDH1/hIrfRNIDBnnBWd0CwJTGvTpngVlmwGCdP9/Zl/tVrDqcuYzQ==}
 
@@ -5142,6 +6497,10 @@ packages:
     resolution: {integrity: sha512-pN/yOAvcC+5rQ5nERGuwrjLlYvLTbCibnZ1I7B1LaiAz9BRBlE9GMgE/eqV30P7aJQUf7Ddimy/RsbYO/GrVGg==}
     engines: {node: '>= 10.13.0'}
 
+  schema-utils@4.3.0:
+    resolution: {integrity: sha512-Gf9qqc58SpCA/xdziiHz35F4GNIWYWZrEshUc/G/r5BnLph6xpKuLeoJoQuj5WfBIx/eQLf+hmVPYHaxJu7V2g==}
+    engines: {node: '>= 10.13.0'}
+
   schema-utils@4.3.3:
     resolution: {integrity: sha512-eflK8wEtyOE6+hsaRVPxvUKYCpRgzLqDTb8krvAsRIwOGlHoSgYLgBXoubGgLd2fT41/OUYdb48v4k4WWHQurA==}
     engines: {node: '>= 10.13.0'}
@@ -5156,6 +6515,11 @@ packages:
     resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
     hasBin: true
 
+  semver@7.6.3:
+    resolution: {integrity: sha512-oVekP1cKtI+CTDvHWYFUcMtsK/00wmAEfyqKfNdARm8u1wNVhSgaX7A8d4UuIlUI5e84iEwOhs7ZPYRmzU9U6A==}
+    engines: {node: '>=10'}
+    hasBin: true
+
   semver@7.8.5:
     resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
     engines: {node: '>=10'}
@@ -5172,10 +6536,21 @@ packages:
   set-blocking@2.0.0:
     resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==}
 
+  set-cookie-parser@3.1.2:
+    resolution: {integrity: sha512-5/r/lTwbJ3zQ+qwdUFZYeRNqda7P5HD8zQKqlSjdGt1/S0cjLAphHusj4Y58ahDtWn/g32xrIS58/ikOvwl0Lw==}
+
   set-function-length@1.2.2:
     resolution: {integrity: sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==}
     engines: {node: '>= 0.4'}
 
+  set-function-name@2.0.2:
+    resolution: {integrity: sha512-7PGFlmtwsEADb0WYyvCMa1t+yke6daIG4Wirafur5kcf+MhUnPms1UeR0CKQdTZD81yESwMHbtn+TR+dMviakQ==}
+    engines: {node: '>= 0.4'}
+
+  set-proto@1.0.0:
+    resolution: {integrity: sha512-RJRdvCo6IAnPdsvP/7m6bsQqNnn1FCBX5ZNtFL98MmFF/4xAIJTIg1YbHW5DC2W5SKZanrC6i4HsJqlajw/dZw==}
+    engines: {node: '>= 0.4'}
+
   setprototypeof@1.2.0:
     resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
 
@@ -5233,6 +6608,9 @@ packages:
   sonic-boom@4.2.1:
     resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
 
+  sorted-array-functions@1.3.0:
+    resolution: {integrity: sha512-2sqgzeFlid6N4Z2fUQ1cvFmTOLRi/sEDzSQ0OKYchqgoPmQBVyM3959qYx3fpS6Esef80KjmpgPeEr028dP3OA==}
+
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -5273,10 +6651,17 @@ packages:
   std-env@3.10.0:
     resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
 
+  stop-iteration-iterator@1.1.0:
+    resolution: {integrity: sha512-eLoXW/DHyl62zxY4SCaIgnRhuMr6ri4juEYARS8E6sCEqzKpOiE521Ucofdx+KnDZl5xmvGYaaKCk5FEOxJCoQ==}
+    engines: {node: '>= 0.4'}
+
   streamsearch@1.1.0:
     resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
     engines: {node: '>=10.0.0'}
 
+  strict-event-emitter@0.5.1:
+    resolution: {integrity: sha512-vMgjE/GGEPEFnhFub6pa4FmJBRBVOLpIII2hvCZ8Kzb7K0hlHo7mQv6xYrBvCL2LtAIBwFUK8wvuJgTVSQ5MFQ==}
+
   string-argv@0.3.2:
     resolution: {integrity: sha512-aqD2Q0144Z+/RqG52NeHEkZauTAUWJO8c6yTftGJKO3Tja5tUgIfmIl6kExvhtxSDP7fXB6DvzkfMpCd/F3G+Q==}
     engines: {node: '>=0.6.19'}
@@ -5293,6 +6678,22 @@ packages:
     resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
     engines: {node: '>=18'}
 
+  string.prototype.includes@2.0.1:
+    resolution: {integrity: sha512-o7+c9bW6zpAdJHTtujeePODAhkuicdAryFsfVKwA+wGw89wJ4GTY484WTucM9hLtDEOpOvI+aHnzqnC5lHp4Rg==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.trim@1.2.11:
+    resolution: {integrity: sha512-PwvK7BU+CMTJGYQCTZb5RWXIML92lftJLhQz1tBzgKiqGxJaMlBAa48POXaNAC2s4y8jr3EFqrkF9+44neS46w==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.trimend@1.0.10:
+    resolution: {integrity: sha512-2+3aDAOmPTmuFwjDnmJG2ctEkQKVki7vOSqaxkv42Mowj1V6PnvuwFCRrR5lChUux1TBskPjfkeTOhqczDMxTw==}
+    engines: {node: '>= 0.4'}
+
+  string.prototype.trimstart@1.0.8:
+    resolution: {integrity: sha512-UXSH262CSZY1tfu3G3Secr6uGLCFVPMhIqHjlgCUtCCcgihYc/xKs9djMTMUOb2j1mVSeU8EU6NWc/iQKU6Gfg==}
+    engines: {node: '>= 0.4'}
+
   string_decoder@1.3.0:
     resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
 
@@ -5312,6 +6713,10 @@ packages:
     resolution: {integrity: sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==}
     engines: {node: '>=12'}
 
+  strip-indent@3.0.0:
+    resolution: {integrity: sha512-laJTa3Jb+VQpaC6DseHhF7dXVqHTfJPCRDaEbid/drOhgitgYku/letMUqOXFoWV0zIIUbjpdH2t+tYj4bQMRQ==}
+    engines: {node: '>=8'}
+
   strip-json-comments@2.0.1:
     resolution: {integrity: sha512-4gB8na07fecVVkOI6Rs4e7T6NOTki5EmL7TUduTs6bu3EdnSycntVJ4re8kgZA+wx9IueI2Y11bfbgwtzuE0KQ==}
     engines: {node: '>=0.10.0'}
@@ -5358,15 +6763,26 @@ packages:
     resolution: {integrity: sha512-b19dMThMV4HVFynSAM1++gBHAbk2Tc/osgLIBZMKsyqh34jb2e8Os7T6ZW/Bt3pJFdBTd2JwAnAAEQV7rSNvcQ==}
     engines: {node: '>=0.10'}
 
+  symbol-tree@3.2.4:
+    resolution: {integrity: sha512-9QNk5KwDF+Bvz+PyObkmSYjI5ksVUYtjW7AU22r2NKcfLJcXp96hkDWU3+XndOsUb+AQ9QhfzfCT2O+CNWT5Tw==}
+
   table-layout@4.1.1:
     resolution: {integrity: sha512-iK5/YhZxq5GO5z8wb0bY1317uDF3Zjpha0QFFLA8/trAoiLbQD0HUbMesEaxyzUgDxi2QlcbM8IvqOlEjgoXBA==}
     engines: {node: '>=12.17'}
 
+  tagged-tag@1.0.0:
+    resolution: {integrity: sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==}
+    engines: {node: '>=20'}
+
   tailwindcss@3.4.19:
     resolution: {integrity: sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==}
     engines: {node: '>=14.0.0'}
     hasBin: true
 
+  tapable@2.3.0:
+    resolution: {integrity: sha512-g9ljZiwki/LfxmQADO3dEY1CbpmXT5Hm2fJ+QaGKwSXUylMybePR7/67YW7jOrrvjEgL1Fmz5kzyAjWVWLlucg==}
+    engines: {node: '>=6'}
+
   tapable@2.3.3:
     resolution: {integrity: sha512-uxc/zpqFg6x7C8vOE7lh6Lbda8eEL9zmVm/PLeTPBRhh1xCgdWaQ+J1CUieGpIfm2HdtsUpRv+HshiasBMcc6A==}
     engines: {node: '>=6'}
@@ -5454,6 +6870,9 @@ packages:
   through@2.3.8:
     resolution: {integrity: sha512-w89qg7PI8wAdvX60bMDP+bFoD5Dvhm9oLheFp5O4a2QF0cSBGsBX4qZmadPMvVqlLJBBci+WqGGOAPvcDeNSVg==}
 
+  tiny-invariant@1.3.3:
+    resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
+
   tinybench@2.9.0:
     resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
 
@@ -5480,6 +6899,20 @@ packages:
     resolution: {integrity: sha512-n1cw8k1k0x4pgA2+9XrOkFydTerNcJ1zWCO5Nn9scWHTD+5tp8dghT2x1uduQePZTZgd3Tupf+x9BxJjeJi77Q==}
     engines: {node: '>=14.0.0'}
 
+  tldts-core@6.1.86:
+    resolution: {integrity: sha512-Je6p7pkk+KMzMv2XXKmAE3McmolOQFdxkKw0R8EYNr7sELW46JqnNeTX8ybPiQgvg1ymCoF8LXs5fzFaZvJPTA==}
+
+  tldts-core@7.4.8:
+    resolution: {integrity: sha512-c1P7u0EhACHj7lPy4MJm8iTFEU8+nB0LCtddH0fhP7noaVoXAqafMtOOeX+ulpuPBqnrRgRhw494RICT3mbhnw==}
+
+  tldts@6.1.86:
+    resolution: {integrity: sha512-WMi/OQ2axVTf/ykqCQgXiIct+mSQDFdH2fkwhPwgEwvJ1kSzZRiinb0zF2Xb8u4+OqPChmyI6MEu4EezNJz+FQ==}
+    hasBin: true
+
+  tldts@7.4.8:
+    resolution: {integrity: sha512-htwgN/8KRB3z3vnC0BOETVh2m499g5GmyTK9Wq5JBLX3FNz6tSBveAd+fQhzy9hkjif8vy2jwDMR1sGhLtZl2A==}
+    hasBin: true
+
   tmp@0.0.33:
     resolution: {integrity: sha512-jRCJlojKnZ3addtTOjdIqoRuPEKBvNXcGYqzO6zWZX8KfKEpnGY5jfggJQ3EjKuu8D4bJRr0y+cYJFmYbImXGw==}
     engines: {node: '>=0.6.0'}
@@ -5496,9 +6929,21 @@ packages:
     resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
     engines: {node: '>=14.16'}
 
+  tough-cookie@5.1.2:
+    resolution: {integrity: sha512-FVDYdxtnj0G6Qm/DhNPSb8Ju59ULcup3tuJxkFb5K8Bv2pUXILbf0xZWU8PX8Ov19OXljbUyveOFwRMwkXzO+A==}
+    engines: {node: '>=16'}
+
+  tough-cookie@6.0.2:
+    resolution: {integrity: sha512-exgYmnmL/sJpR3upZfXG5PoatXQii55xAiXGXzY+sROLZ/Y+SLcp9PgJNI9Vz37HpQ74WvDcLT8eqm+kV3FzrA==}
+    engines: {node: '>=16'}
+
   tr46@0.0.3:
     resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
 
+  tr46@5.1.1:
+    resolution: {integrity: sha512-hdF5ZgjTqgAntKkklYw0R03MG2x/bSzTtkxmIRw/sTNV8YXsCJ1tfLAX23lhxhHJlEf3CRCOCGGWw3vI3GaSPw==}
+    engines: {node: '>=18'}
+
   tree-kill@1.2.2:
     resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
     hasBin: true
@@ -5542,10 +6987,30 @@ packages:
     resolution: {integrity: sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==}
     engines: {node: '>=10'}
 
+  type-fest@5.8.0:
+    resolution: {integrity: sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==}
+    engines: {node: '>=20'}
+
   type-is@1.6.18:
     resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
     engines: {node: '>= 0.6'}
 
+  typed-array-buffer@1.0.3:
+    resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-byte-length@1.0.3:
+    resolution: {integrity: sha512-BaXgOuIxz8n8pIq3e7Atg/7s+DpiYrxn4vdot3w9KbnBhcRQq6o3xemQdIfynqSeXeDrF32x+WvfzmOjPiY9lg==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-byte-offset@1.0.4:
+    resolution: {integrity: sha512-bTlAFB/FBYMcuX81gbL4OcpH5PmlFHqlCCpAl8AlEzMz5k53oNDvN8p1PNOWLEmI2x4orp3raOFB51tv9X+MFQ==}
+    engines: {node: '>= 0.4'}
+
+  typed-array-length@1.0.8:
+    resolution: {integrity: sha512-phPGCwqr2+Qo0fwniCE8e4pKnGu/yFb5nD5Y8bf0EEeiI5GklnACYA9GFy/DrAeRrKHXvHn+1SUsOWgJp6RO+g==}
+    engines: {node: '>= 0.4'}
+
   typedarray@0.0.6:
     resolution: {integrity: sha512-/aCDEGatGvZ2BIk+HmLf4ifCJFwvKFNb9/JeZPMulfgFracn9QFcAf5GO8B/mweUjSoblS5In0cWhqpfs/5PQA==}
 
@@ -5630,6 +7095,10 @@ packages:
     resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
     engines: {node: '>=18'}
 
+  unbox-primitive@1.1.0:
+    resolution: {integrity: sha512-nWJ91DjeOkej/TA8pXQ3myruKpKEYgqvpw9lz4OPHj/NWFNluYrjbz9j01CJ8yKQd2g4jFoOkINCTW2I5LEEyw==}
+    engines: {node: '>= 0.4'}
+
   undici-types@6.21.0:
     resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
 
@@ -5640,6 +7109,10 @@ packages:
     resolution: {integrity: sha512-YmfV3YnEDzXRC5lZ2jWtWWHKGUm1zIt8AhesR1tens+HTNv+YZlN/dp6G727LOvMJ8xjP9Be7Y2Sdr96LDm+pg==}
     engines: {node: '>=18.17'}
 
+  undici@7.28.0:
+    resolution: {integrity: sha512-cRZYrTDwWznlnRiPjggAGxZXanty6M8RV1ff8Wm4LWXBp7/IG8v5DnOm74DtUBp9OONpK75YlPnIjQqX0dBDtA==}
+    engines: {node: '>=20.18.1'}
+
   unicorn-magic@0.1.0:
     resolution: {integrity: sha512-lRfVq8fE8gz6QMBuDM6a+LO3IAzTi05H6gCVaUpir2E1Rwpo4ZUog45KpNXKC/Mn3Yb9UDuHumeFTo9iV/D9FQ==}
     engines: {node: '>=18'}
@@ -5652,6 +7125,13 @@ packages:
     resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
     engines: {node: '>= 0.8'}
 
+  until-async@3.0.2:
+    resolution: {integrity: sha512-IiSk4HlzAMqTUseHHe3VhIGyuFmN90zMTpD3Z3y8jeQbzLIq500MVM7Jq2vUAnTKAFPJrqwkzr6PoTcPhGcOiw==}
+
+  upath@2.0.1:
+    resolution: {integrity: sha512-1uEe95xksV1O0CYKXo8vQvN1JEbtJp7lb7C5U9HMsIp6IVwntkH/oNUzyVNQSd4S1sYk2FpSSW44FqMc8qee5w==}
+    engines: {node: '>=4'}
+
   update-browserslist-db@1.2.3:
     resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
     hasBin: true
@@ -5661,6 +7141,12 @@ packages:
   uri-js@4.4.1:
     resolution: {integrity: sha512-7rKUyy33Q1yc98pQ1DAmLtwX109F7TIfWlW1Ydo8Wl1ii1SeHieeh0HHfPeL2fMXK6z0s8ecKs9frCuLJvndBg==}
 
+  urql@4.2.2:
+    resolution: {integrity: sha512-3GgqNa6iF7bC4hY/ImJKN4REQILcSU9VKcKL8gfELZM8mM5BnLH1BsCc8kBdnVGD1LIFOs4W3O2idNHhON1r0w==}
+    peerDependencies:
+      '@urql/core': ^5.0.0
+      react: '>= 16.8.0'
+
   util-deprecate@1.0.2:
     resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
 
@@ -5680,6 +7166,9 @@ packages:
     resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
     engines: {node: '>= 0.8'}
 
+  victory-vendor@36.9.2:
+    resolution: {integrity: sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ==}
+
   vite-node@2.1.9:
     resolution: {integrity: sha512-AM9aQ/IPrW/6ENLQg3AGY4K1N2TGZdR5e4gu/MmmR2xR3Ll1+dib+nook92g4TV3PXVyeyxdWwtaCAiUL0hMxA==}
     engines: {node: ^18.0.0 || >=20.0.0}
@@ -5741,6 +7230,10 @@ packages:
       jsdom:
         optional: true
 
+  w3c-xmlserializer@5.0.0:
+    resolution: {integrity: sha512-o8qghlI8NZHU1lLPrpi2+Uq7abh4GGPpYANlalzWxyWteJOCsr/P+oPBA49TOLu5FTZO4d3F9MnWJfiMo4BkmA==}
+    engines: {node: '>=18'}
+
   watchpack@2.5.2:
     resolution: {integrity: sha512-6i/00NBjP4yGPs+caKSyRfpTF/8Torsu0MOW3mMzIbhgISFder8i7xbqgHlLMwJrdiN8ndBV3UA1/AfzPSr+jg==}
     engines: {node: '>=10.13.0'}
@@ -5748,9 +7241,16 @@ packages:
   wcwidth@1.0.1:
     resolution: {integrity: sha512-XHPEwS0q6TaxcvG85+8EYkbiCux2XtWG2mkc47Ng2A77BQu9+DqIOJldST4HgPkuea7dvKSj5VgX3P1d4rW8Tg==}
 
+  web-vitals@4.2.4:
+    resolution: {integrity: sha512-r4DIlprAGwJ7YM11VZp4R884m0Vmgr6EAKe3P+kO0PPj3Unqyvv59rczf6UiGcb9Z8QxZVcqKNwv/g0WNdWwsw==}
+
   webidl-conversions@3.0.1:
     resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
 
+  webidl-conversions@7.0.0:
+    resolution: {integrity: sha512-VwddBukDzu71offAQR975unBIGqfKZpM+8ZX6ySk8nYhVoo5CYaZyzt3YBvYtRtO+aoGlqxPg/B87NGVZ/fu6g==}
+    engines: {node: '>=12'}
+
   webpack-node-externals@3.0.0:
     resolution: {integrity: sha512-LnL6Z3GGDPht/AigwRh2dvL9PQPFQ8skEpVrWZXLWBYmqcaojHNN0onvHzie6rq7EWKrrBfPYqNEzTJgiwEQDQ==}
     engines: {node: '>=6'}
@@ -5769,9 +7269,38 @@ packages:
       webpack-cli:
         optional: true
 
+  whatwg-encoding@3.1.1:
+    resolution: {integrity: sha512-6qN4hJdMwfYBtE3YBTTHhoeuUrDBPZmbQaxWAqSALV/MeEnR5z1xd8UKud2RAkFoPkmB+hli1TZSnyi84xz1vQ==}
+    engines: {node: '>=18'}
+    deprecated: Use @exodus/bytes instead for a more spec-conformant and faster implementation
+
+  whatwg-mimetype@4.0.0:
+    resolution: {integrity: sha512-QaKxh0eNIi2mE9p2vEdzfagOKHCcj1pJ56EEHGQOVxp8r9/iszLUUV7v89x9O1p/T+NlTM5W7jW6+cz4Fq1YVg==}
+    engines: {node: '>=18'}
+
+  whatwg-url@14.2.0:
+    resolution: {integrity: sha512-De72GdQZzNTUBBChsXueQUnPKDkg/5A5zp7pFDuQAj5UFoENpiACU0wlCvzpAGnTkj++ihpKwKyYewn/XNUbKw==}
+    engines: {node: '>=18'}
+
   whatwg-url@5.0.0:
     resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
 
+  which-boxed-primitive@1.1.1:
+    resolution: {integrity: sha512-TbX3mj8n0odCBFVlY8AxkqcHASw3L60jIuF8jFP78az3C2YhmGvqbHBpAjTRH2/xqYunrJ9g1jSyjCjpoWzIAA==}
+    engines: {node: '>= 0.4'}
+
+  which-builtin-type@1.2.1:
+    resolution: {integrity: sha512-6iBczoX+kDQ7a3+YJBnh3T+KZRxM/iYNPXicqk66/Qfm1b93iu+yOImkg0zHbj5LNOcNv1TEADiZ0xa34B4q6Q==}
+    engines: {node: '>= 0.4'}
+
+  which-collection@1.0.2:
+    resolution: {integrity: sha512-K4jVyjnBdgvc86Y6BkaLZEN933SwYOuBFkdmBu9ZfkcAbdVbpITnDmjvZ/aQjRXQrv5EPkTnD1s39GiiqbngCw==}
+    engines: {node: '>= 0.4'}
+
+  which-typed-array@1.1.22:
+    resolution: {integrity: sha512-fvO4ExWMFsqyhG3AiPAObMuY1lxaqgYcxbc49CNdWDDECOJNgQyvsOWVwbZc+qf3rzRtxojBK+CMEv0Ld5CYpw==}
+    engines: {node: '>= 0.4'}
+
   which@2.0.2:
     resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
     engines: {node: '>= 8'}
@@ -5785,6 +7314,9 @@ packages:
   wide-align@1.1.5:
     resolution: {integrity: sha512-eDMORYaPNZ4sQIuuYPDHdQvf4gyCF9rEEV/yPxGfwPkRodwEgiMUUXTx/dex+Me0wxx53S+NgUHaP7y3MGlDmg==}
 
+  wonka@6.3.6:
+    resolution: {integrity: sha512-MXH+6mDHAZ2GuMpgKS055FR6v0xVP3XwquxIMYXgiW+FejHQlMGlvVRZT4qMCxR+bEo/FCtIdKxwej9WV3YQag==}
+
   word-wrap@1.2.5:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
@@ -5812,6 +7344,25 @@ packages:
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
+  ws@8.21.0:
+    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
+    engines: {node: '>=10.0.0'}
+    peerDependencies:
+      bufferutil: ^4.0.1
+      utf-8-validate: '>=5.0.2'
+    peerDependenciesMeta:
+      bufferutil:
+        optional: true
+      utf-8-validate:
+        optional: true
+
+  xml-name-validator@5.0.0:
+    resolution: {integrity: sha512-EvGK8EJ3DhaHfbRlETOWAS5pO9MZITeauHKJyb8wyajUfQUenkIg2MvLDTZ4T/TgIcm3HU0TFBgWWboAZ30UHg==}
+    engines: {node: '>=18'}
+
+  xmlchars@2.2.0:
+    resolution: {integrity: sha512-JZnDKK8B0RCDw84FNdDAIpZK+JuJw+s7Lz8nksI7SIuU3UXJJslUthsi+uWBUYOwPFwW7W7PRLRfUKpxjtjFCw==}
+
   xtend@4.0.2:
     resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
     engines: {node: '>=0.4'}
@@ -5820,6 +7371,9 @@ packages:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
     engines: {node: '>=10'}
 
+  yallist@3.1.1:
+    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
+
   yallist@4.0.0:
     resolution: {integrity: sha512-3wdGidZyq5PB084XLES5TpOSRA3wjXAlIWMhum2kRcv/41Sn2emQ0dycQW4uZXLejwKvg6EsvbdlVL+FYEct7A==}
 
@@ -5857,6 +7411,12 @@ packages:
 
 snapshots:
 
+  '@0no-co/graphql.web@1.3.2(graphql@16.14.2)':
+    optionalDependencies:
+      graphql: 16.14.2
+
+  '@adobe/css-tools@4.5.0': {}
+
   '@alloc/quick-lru@5.2.0': {}
 
   '@ampproject/remapping@2.3.0':
@@ -5896,20 +7456,123 @@ snapshots:
     transitivePeerDependencies:
       - chokidar
 
+  '@asamuzakjp/css-color@3.2.0':
+    dependencies:
+      '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-color-parser': 3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+      lru-cache: 10.4.3
+
   '@babel/code-frame@7.29.7':
     dependencies:
       '@babel/helper-validator-identifier': 7.29.7
       js-tokens: 4.0.0
       picocolors: 1.1.1
 
+  '@babel/compat-data@7.29.7': {}
+
+  '@babel/core@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.7
+      '@babel/helper-compilation-targets': 7.29.7
+      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
+      '@babel/helpers': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/template': 7.29.7
+      '@babel/traverse': 7.29.7
+      '@babel/types': 7.29.7
+      '@jridgewell/remapping': 2.3.5
+      convert-source-map: 2.0.0
+      debug: 4.4.3
+      gensync: 1.0.0-beta.2
+      json5: 2.2.3
+      semver: 6.3.1
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/generator@7.29.7':
+    dependencies:
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+      jsesc: 3.1.0
+
+  '@babel/helper-compilation-targets@7.29.7':
+    dependencies:
+      '@babel/compat-data': 7.29.7
+      '@babel/helper-validator-option': 7.29.7
+      browserslist: 4.28.5
+      lru-cache: 5.1.1
+      semver: 6.3.1
+
+  '@babel/helper-globals@7.29.7': {}
+
+  '@babel/helper-module-imports@7.29.7':
+    dependencies:
+      '@babel/traverse': 7.29.7
+      '@babel/types': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-module-transforms@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-module-imports': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
+      '@babel/traverse': 7.29.7
+    transitivePeerDependencies:
+      - supports-color
+
+  '@babel/helper-plugin-utils@7.29.7': {}
+
   '@babel/helper-string-parser@7.29.7': {}
 
   '@babel/helper-validator-identifier@7.29.7': {}
 
+  '@babel/helper-validator-option@7.29.7': {}
+
+  '@babel/helpers@7.29.7':
+    dependencies:
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
+
   '@babel/parser@7.29.7':
     dependencies:
       '@babel/types': 7.29.7
 
+  '@babel/plugin-transform-react-jsx-self@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/plugin-transform-react-jsx-source@7.29.7(@babel/core@7.29.7)':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/helper-plugin-utils': 7.29.7
+
+  '@babel/runtime@7.29.7': {}
+
+  '@babel/template@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+
+  '@babel/traverse@7.29.7':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/generator': 7.29.7
+      '@babel/helper-globals': 7.29.7
+      '@babel/parser': 7.29.7
+      '@babel/template': 7.29.7
+      '@babel/types': 7.29.7
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   '@babel/types@7.29.7':
     dependencies:
       '@babel/helper-string-parser': 7.29.7
@@ -6032,6 +7695,51 @@ snapshots:
       '@types/conventional-commits-parser': 5.0.2
       chalk: 5.6.2
 
+  '@csstools/color-helpers@5.1.0': {}
+
+  '@csstools/css-calc@2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-color-parser@3.1.0(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/color-helpers': 5.1.0
+      '@csstools/css-calc': 2.1.4(@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4))(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-parser-algorithms': 3.0.5(@csstools/css-tokenizer@3.0.4)
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-parser-algorithms@3.0.5(@csstools/css-tokenizer@3.0.4)':
+    dependencies:
+      '@csstools/css-tokenizer': 3.0.4
+
+  '@csstools/css-tokenizer@3.0.4': {}
+
+  '@dnd-kit/accessibility@3.1.1(react@18.3.1)':
+    dependencies:
+      react: 18.3.1
+      tslib: 2.8.1
+
+  '@dnd-kit/core@6.3.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
+    dependencies:
+      '@dnd-kit/accessibility': 3.1.1(react@18.3.1)
+      '@dnd-kit/utilities': 3.2.2(react@18.3.1)
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      tslib: 2.8.1
+
+  '@dnd-kit/sortable@8.0.0(@dnd-kit/core@6.3.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react@18.3.1)':
+    dependencies:
+      '@dnd-kit/core': 6.3.1(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      '@dnd-kit/utilities': 3.2.2(react@18.3.1)
+      react: 18.3.1
+      tslib: 2.8.1
+
+  '@dnd-kit/utilities@3.2.2(react@18.3.1)':
+    dependencies:
+      react: 18.3.1
+      tslib: 2.8.1
+
   '@drizzle-team/brocli@0.10.2': {}
 
   '@elastic/elasticsearch@8.19.2':
@@ -6056,6 +7764,22 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@emnapi/core@1.11.1':
+    dependencies:
+      '@emnapi/wasi-threads': 1.2.2
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/runtime@1.11.1':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@emnapi/wasi-threads@1.2.2':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
   '@esbuild-kit/core-utils@3.3.2':
     dependencies:
       esbuild: 0.18.20
@@ -6411,6 +8135,10 @@ snapshots:
       protobufjs: 7.6.5
       yargs: 17.7.3
 
+  '@hookform/resolvers@3.10.0(react-hook-form@7.81.0(react@18.3.1))':
+    dependencies:
+      react-hook-form: 7.81.0(react@18.3.1)
+
   '@humanfs/core@0.19.2':
     dependencies:
       '@humanfs/types': 0.15.0
@@ -6427,6 +8155,33 @@ snapshots:
 
   '@humanwhocodes/retry@0.4.3': {}
 
+  '@inquirer/ansi@2.0.7': {}
+
+  '@inquirer/confirm@6.1.1(@types/node@22.20.0)':
+    dependencies:
+      '@inquirer/core': 11.2.1(@types/node@22.20.0)
+      '@inquirer/type': 4.0.7(@types/node@22.20.0)
+    optionalDependencies:
+      '@types/node': 22.20.0
+
+  '@inquirer/core@11.2.1(@types/node@22.20.0)':
+    dependencies:
+      '@inquirer/ansi': 2.0.7
+      '@inquirer/figures': 2.0.7
+      '@inquirer/type': 4.0.7(@types/node@22.20.0)
+      cli-width: 4.1.0
+      fast-wrap-ansi: 0.2.2
+      mute-stream: 3.0.0
+      signal-exit: 4.1.0
+    optionalDependencies:
+      '@types/node': 22.20.0
+
+  '@inquirer/figures@2.0.7': {}
+
+  '@inquirer/type@4.0.7(@types/node@22.20.0)':
+    optionalDependencies:
+      '@types/node': 22.20.0
+
   '@ioredis/commands@1.10.0': {}
 
   '@isaacs/cliui@8.0.2':
@@ -6445,6 +8200,11 @@ snapshots:
       '@jridgewell/sourcemap-codec': 1.5.5
       '@jridgewell/trace-mapping': 0.3.31
 
+  '@jridgewell/remapping@2.3.5':
+    dependencies:
+      '@jridgewell/gen-mapping': 0.3.13
+      '@jridgewell/trace-mapping': 0.3.31
+
   '@jridgewell/resolve-uri@3.1.2': {}
 
   '@jridgewell/source-map@0.3.11':
@@ -6467,12 +8227,12 @@ snapshots:
 
   '@lukeed/csprng@1.1.0': {}
 
-  '@mapbox/node-pre-gyp@1.0.11':
+  '@mapbox/node-pre-gyp@1.0.11(encoding@0.1.13)':
     dependencies:
       detect-libc: 2.1.2
       https-proxy-agent: 5.0.1
       make-dir: 3.1.0
-      node-fetch: 2.7.0
+      node-fetch: 2.7.0(encoding@0.1.13)
       nopt: 5.0.0
       npmlog: 5.0.1
       rimraf: 3.0.2
@@ -6482,6 +8242,186 @@ snapshots:
       - encoding
       - supports-color
 
+  '@module-federation/bridge-react-webpack-plugin@2.7.0':
+    dependencies:
+      '@module-federation/sdk': 2.7.0
+      '@types/semver': 7.5.8
+      semver: 7.6.3
+
+  '@module-federation/cli@2.7.0(typescript@5.9.3)':
+    dependencies:
+      '@module-federation/dts-plugin': 2.7.0(typescript@5.9.3)
+      '@module-federation/sdk': 2.7.0
+      commander: 11.1.0
+      jiti: 2.4.2
+    transitivePeerDependencies:
+      - bufferutil
+      - typescript
+      - utf-8-validate
+      - vue-tsc
+
+  '@module-federation/dts-plugin@2.7.0(typescript@5.9.3)':
+    dependencies:
+      '@module-federation/error-codes': 2.7.0
+      '@module-federation/managers': 2.7.0
+      '@module-federation/sdk': 2.7.0
+      '@module-federation/third-party-dts-extractor': 2.7.0
+      adm-zip: 0.5.10
+      isomorphic-ws: 5.0.0(ws@8.21.0)
+      node-schedule: 2.1.1
+      typescript: 5.9.3
+      undici: 7.28.0
+      ws: 8.21.0
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  '@module-federation/enhanced@2.7.0(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))':
+    dependencies:
+      '@module-federation/bridge-react-webpack-plugin': 2.7.0
+      '@module-federation/cli': 2.7.0(typescript@5.9.3)
+      '@module-federation/dts-plugin': 2.7.0(typescript@5.9.3)
+      '@module-federation/error-codes': 2.7.0
+      '@module-federation/inject-external-runtime-core-plugin': 2.7.0(@module-federation/runtime-tools@2.7.0)
+      '@module-federation/managers': 2.7.0
+      '@module-federation/manifest': 2.7.0(typescript@5.9.3)
+      '@module-federation/rspack': 2.7.0(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)
+      '@module-federation/runtime-tools': 2.7.0
+      '@module-federation/sdk': 2.7.0
+      '@module-federation/webpack-bundler-runtime': 2.7.0
+      schema-utils: 4.3.0
+      tapable: 2.3.0
+      upath: 2.0.1
+    optionalDependencies:
+      typescript: 5.9.3
+      webpack: 5.97.1(postcss@8.5.16)
+    transitivePeerDependencies:
+      - '@rspack/core'
+      - bufferutil
+      - utf-8-validate
+
+  '@module-federation/error-codes@2.7.0': {}
+
+  '@module-federation/inject-external-runtime-core-plugin@2.7.0(@module-federation/runtime-tools@2.7.0)':
+    dependencies:
+      '@module-federation/runtime-tools': 2.7.0
+
+  '@module-federation/managers@2.7.0':
+    dependencies:
+      '@module-federation/sdk': 2.7.0
+      empathic: 2.0.0
+
+  '@module-federation/manifest@2.7.0(typescript@5.9.3)':
+    dependencies:
+      '@module-federation/dts-plugin': 2.7.0(typescript@5.9.3)
+      '@module-federation/managers': 2.7.0
+      '@module-federation/sdk': 2.7.0
+    transitivePeerDependencies:
+      - bufferutil
+      - typescript
+      - utf-8-validate
+      - vue-tsc
+
+  '@module-federation/nextjs-mf@8.8.70(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(next@14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1))(react-dom@18.3.1(react@18.3.1))(react@18.3.1)(styled-jsx@5.1.1(@babel/core@7.29.7)(react@18.3.1))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))':
+    dependencies:
+      '@module-federation/enhanced': 2.7.0(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))
+      '@module-federation/node': 2.7.46(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))
+      '@module-federation/runtime': 2.7.0
+      '@module-federation/runtime-core': 2.7.0
+      '@module-federation/sdk': 2.7.0
+      '@module-federation/webpack-bundler-runtime': 2.7.0
+      fast-glob: 3.3.3
+    optionalDependencies:
+      next: 14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      styled-jsx: 5.1.1(@babel/core@7.29.7)(react@18.3.1)
+      webpack: 5.97.1(postcss@8.5.16)
+    transitivePeerDependencies:
+      - '@rspack/core'
+      - bufferutil
+      - typescript
+      - utf-8-validate
+      - vue-tsc
+
+  '@module-federation/node@2.7.46(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))':
+    dependencies:
+      '@module-federation/enhanced': 2.7.0(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)(webpack@5.97.1(postcss@8.5.16))
+      '@module-federation/runtime': 2.7.0
+      '@module-federation/sdk': 2.7.0
+      encoding: 0.1.13
+      node-fetch: 2.7.0(encoding@0.1.13)
+      tapable: 2.3.0
+    optionalDependencies:
+      webpack: 5.97.1(postcss@8.5.16)
+    transitivePeerDependencies:
+      - '@rspack/core'
+      - bufferutil
+      - typescript
+      - utf-8-validate
+      - vue-tsc
+
+  '@module-federation/rspack@2.7.0(@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23))(typescript@5.9.3)':
+    dependencies:
+      '@module-federation/bridge-react-webpack-plugin': 2.7.0
+      '@module-federation/dts-plugin': 2.7.0(typescript@5.9.3)
+      '@module-federation/inject-external-runtime-core-plugin': 2.7.0(@module-federation/runtime-tools@2.7.0)
+      '@module-federation/managers': 2.7.0
+      '@module-federation/manifest': 2.7.0(typescript@5.9.3)
+      '@module-federation/runtime-tools': 2.7.0
+      '@module-federation/sdk': 2.7.0
+      '@rspack/core': 2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23)
+    optionalDependencies:
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - bufferutil
+      - utf-8-validate
+
+  '@module-federation/runtime-core@2.7.0':
+    dependencies:
+      '@module-federation/error-codes': 2.7.0
+      '@module-federation/sdk': 2.7.0
+
+  '@module-federation/runtime-tools@2.7.0':
+    dependencies:
+      '@module-federation/runtime': 2.7.0
+      '@module-federation/webpack-bundler-runtime': 2.7.0
+
+  '@module-federation/runtime@2.7.0':
+    dependencies:
+      '@module-federation/error-codes': 2.7.0
+      '@module-federation/runtime-core': 2.7.0
+      '@module-federation/sdk': 2.7.0
+
+  '@module-federation/sdk@2.7.0': {}
+
+  '@module-federation/third-party-dts-extractor@2.7.0':
+    dependencies:
+      empathic: 2.0.0
+      exsolve: 1.0.8
+
+  '@module-federation/webpack-bundler-runtime@2.7.0':
+    dependencies:
+      '@module-federation/error-codes': 2.7.0
+      '@module-federation/runtime': 2.7.0
+      '@module-federation/sdk': 2.7.0
+
+  '@mswjs/interceptors@0.41.9':
+    dependencies:
+      '@open-draft/deferred-promise': 2.2.0
+      '@open-draft/logger': 0.3.0
+      '@open-draft/until': 2.1.0
+      is-node-process: 1.2.0
+      outvariant: 1.4.3
+      strict-event-emitter: 0.5.1
+
+  '@napi-rs/wasm-runtime@1.1.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)':
+    dependencies:
+      '@emnapi/core': 1.11.1
+      '@emnapi/runtime': 1.11.1
+      '@tybys/wasm-util': 0.10.3
+    optional: true
+
   '@nestjs/cli@10.4.9':
     dependencies:
       '@angular-devkit/core': 17.3.11(chokidar@3.6.0)
@@ -6563,10 +8503,10 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@nestjs/core@10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
+  '@nestjs/core@10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)':
     dependencies:
       '@nestjs/common': 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      '@nuxtjs/opencollective': 0.3.2
+      '@nuxtjs/opencollective': 0.3.2(encoding@0.1.13)
       fast-safe-stringify: 2.1.1
       iterare: 1.2.1
       path-to-regexp: 3.3.0
@@ -6582,7 +8522,7 @@ snapshots:
   '@nestjs/platform-express@10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/core@10.4.22)':
     dependencies:
       '@nestjs/common': 10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2)
-      '@nestjs/core': 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(reflect-metadata@0.2.2)(rxjs@7.8.2)
+      '@nestjs/core': 10.4.22(@nestjs/common@10.4.22(reflect-metadata@0.2.2)(rxjs@7.8.2))(@nestjs/platform-express@10.4.22)(encoding@0.1.13)(reflect-metadata@0.2.2)(rxjs@7.8.2)
       body-parser: 1.20.4
       cors: 2.8.5
       express: 4.22.1
@@ -6615,6 +8555,10 @@ snapshots:
 
   '@next/env@14.2.35': {}
 
+  '@next/eslint-plugin-next@14.2.35':
+    dependencies:
+      glob: 10.3.10
+
   '@next/swc-darwin-arm64@14.2.33':
     optional: true
 
@@ -6642,6 +8586,8 @@ snapshots:
   '@next/swc-win32-x64-msvc@14.2.33':
     optional: true
 
+  '@noble/hashes@1.8.0': {}
+
   '@nodelib/fs.scandir@2.1.5':
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -6654,14 +8600,29 @@ snapshots:
       '@nodelib/fs.scandir': 2.1.5
       fastq: 1.20.1
 
-  '@nuxtjs/opencollective@0.3.2':
+  '@nuxtjs/opencollective@0.3.2(encoding@0.1.13)':
     dependencies:
       chalk: 4.1.2
       consola: 2.15.3
-      node-fetch: 2.7.0
+      node-fetch: 2.7.0(encoding@0.1.13)
     transitivePeerDependencies:
       - encoding
 
+  '@open-draft/deferred-promise@2.2.0': {}
+
+  '@open-draft/deferred-promise@3.0.0': {}
+
+  '@open-draft/logger@0.3.0':
+    dependencies:
+      is-node-process: 1.2.0
+      outvariant: 1.4.3
+
+  '@open-draft/until@2.1.0': {}
+
+  '@opentelemetry/api-logs@0.52.1':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+
   '@opentelemetry/api-logs@0.53.0':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -6676,7 +8637,7 @@ snapshots:
 
   '@opentelemetry/api@1.9.1': {}
 
-  '@opentelemetry/auto-instrumentations-node@0.50.2(@opentelemetry/api@1.9.1)':
+  '@opentelemetry/auto-instrumentations-node@0.50.2(@opentelemetry/api@1.9.1)(encoding@0.1.13)':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/instrumentation': 0.53.0(@opentelemetry/api@1.9.1)
@@ -6723,14 +8684,14 @@ snapshots:
       '@opentelemetry/resource-detector-aws': 1.12.0(@opentelemetry/api@1.9.1)
       '@opentelemetry/resource-detector-azure': 0.2.12(@opentelemetry/api@1.9.1)
       '@opentelemetry/resource-detector-container': 0.4.4(@opentelemetry/api@1.9.1)
-      '@opentelemetry/resource-detector-gcp': 0.29.13(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resource-detector-gcp': 0.29.13(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/sdk-node': 0.53.0(@opentelemetry/api@1.9.1)
     transitivePeerDependencies:
       - encoding
       - supports-color
 
-  '@opentelemetry/auto-instrumentations-node@0.55.3(@opentelemetry/api@1.9.1)':
+  '@opentelemetry/auto-instrumentations-node@0.55.3(@opentelemetry/api@1.9.1)(encoding@0.1.13)':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/instrumentation': 0.57.2(@opentelemetry/api@1.9.1)
@@ -6777,7 +8738,7 @@ snapshots:
       '@opentelemetry/resource-detector-aws': 1.12.0(@opentelemetry/api@1.9.1)
       '@opentelemetry/resource-detector-azure': 0.6.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/resource-detector-container': 0.6.1(@opentelemetry/api@1.9.1)
-      '@opentelemetry/resource-detector-gcp': 0.33.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resource-detector-gcp': 0.33.1(@opentelemetry/api@1.9.1)(encoding@0.1.13)
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/sdk-node': 0.57.2(@opentelemetry/api@1.9.1)
     transitivePeerDependencies:
@@ -6796,6 +8757,11 @@ snapshots:
     dependencies:
       '@opentelemetry/api': 1.9.1
 
+  '@opentelemetry/core@1.25.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/semantic-conventions': 1.25.1
+
   '@opentelemetry/core@1.26.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -6973,6 +8939,15 @@ snapshots:
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/sdk-trace-base': 1.30.1(@opentelemetry/api@1.9.1)
 
+  '@opentelemetry/exporter-trace-otlp-http@0.52.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/otlp-exporter-base': 0.52.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/otlp-transformer': 0.52.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resources': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-trace-base': 1.25.1(@opentelemetry/api@1.9.1)
+
   '@opentelemetry/exporter-trace-otlp-http@0.53.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -7760,6 +9735,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@opentelemetry/otlp-exporter-base@0.52.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/otlp-transformer': 0.52.1(@opentelemetry/api@1.9.1)
+
   '@opentelemetry/otlp-exporter-base@0.53.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -7802,6 +9783,17 @@ snapshots:
       '@opentelemetry/otlp-exporter-base': 0.57.2(@opentelemetry/api@1.9.1)
       '@opentelemetry/otlp-transformer': 0.57.2(@opentelemetry/api@1.9.1)
 
+  '@opentelemetry/otlp-transformer@0.52.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/api-logs': 0.52.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resources': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-logs': 0.52.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-metrics': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-trace-base': 1.25.1(@opentelemetry/api@1.9.1)
+      protobufjs: 7.6.5
+
   '@opentelemetry/otlp-transformer@0.53.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -7924,28 +9916,34 @@ snapshots:
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/semantic-conventions': 1.42.0
 
-  '@opentelemetry/resource-detector-gcp@0.29.13(@opentelemetry/api@1.9.1)':
+  '@opentelemetry/resource-detector-gcp@0.29.13(@opentelemetry/api@1.9.1)(encoding@0.1.13)':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/semantic-conventions': 1.42.0
-      gcp-metadata: 6.1.1
+      gcp-metadata: 6.1.1(encoding@0.1.13)
     transitivePeerDependencies:
       - encoding
       - supports-color
 
-  '@opentelemetry/resource-detector-gcp@0.33.1(@opentelemetry/api@1.9.1)':
+  '@opentelemetry/resource-detector-gcp@0.33.1(@opentelemetry/api@1.9.1)(encoding@0.1.13)':
     dependencies:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/semantic-conventions': 1.42.0
-      gcp-metadata: 6.1.1
+      gcp-metadata: 6.1.1(encoding@0.1.13)
     transitivePeerDependencies:
       - encoding
       - supports-color
 
+  '@opentelemetry/resources@1.25.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/semantic-conventions': 1.25.1
+
   '@opentelemetry/resources@1.26.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -7964,6 +9962,13 @@ snapshots:
       '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/semantic-conventions': 1.28.0
 
+  '@opentelemetry/sdk-logs@0.52.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/api-logs': 0.52.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resources': 1.25.1(@opentelemetry/api@1.9.1)
+
   '@opentelemetry/sdk-logs@0.53.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -7985,6 +9990,13 @@ snapshots:
       '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
       '@opentelemetry/resources': 1.30.1(@opentelemetry/api@1.9.1)
 
+  '@opentelemetry/sdk-metrics@1.25.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resources': 1.25.1(@opentelemetry/api@1.9.1)
+      lodash.merge: 4.6.2
+
   '@opentelemetry/sdk-metrics@1.26.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -8073,6 +10085,13 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@opentelemetry/sdk-trace-base@1.25.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/resources': 1.25.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/semantic-conventions': 1.25.1
+
   '@opentelemetry/sdk-trace-base@1.26.0(@opentelemetry/api@1.9.1)':
     dependencies:
       '@opentelemetry/api': 1.9.1
@@ -8124,6 +10143,15 @@ snapshots:
       '@opentelemetry/sdk-trace-base': 1.30.1(@opentelemetry/api@1.9.1)
       semver: 7.8.5
 
+  '@opentelemetry/sdk-trace-web@1.30.1(@opentelemetry/api@1.9.1)':
+    dependencies:
+      '@opentelemetry/api': 1.9.1
+      '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/sdk-trace-base': 1.30.1(@opentelemetry/api@1.9.1)
+      '@opentelemetry/semantic-conventions': 1.28.0
+
+  '@opentelemetry/semantic-conventions@1.25.1': {}
+
   '@opentelemetry/semantic-conventions@1.27.0': {}
 
   '@opentelemetry/semantic-conventions@1.28.0': {}
@@ -8135,6 +10163,10 @@ snapshots:
       '@opentelemetry/api': 1.9.1
       '@opentelemetry/core': 1.30.1(@opentelemetry/api@1.9.1)
 
+  '@paralleldrive/cuid2@2.3.1':
+    dependencies:
+      '@noble/hashes': 1.8.0
+
   '@pinojs/redact@0.4.0': {}
 
   '@pkgjs/parseargs@0.11.0':
@@ -8160,6 +10192,8 @@ snapshots:
 
   '@protobufjs/utf8@1.1.2': {}
 
+  '@rolldown/pluginutils@1.0.0-beta.27': {}
+
   '@rollup/rollup-android-arm-eabi@4.62.2':
     optional: true
 
@@ -8235,6 +10269,68 @@ snapshots:
   '@rollup/rollup-win32-x64-msvc@4.62.2':
     optional: true
 
+  '@rspack/binding-darwin-arm64@2.1.3':
+    optional: true
+
+  '@rspack/binding-darwin-x64@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-arm64-gnu@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-arm64-musl@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-riscv64-gnu@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-riscv64-musl@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-x64-gnu@2.1.3':
+    optional: true
+
+  '@rspack/binding-linux-x64-musl@2.1.3':
+    optional: true
+
+  '@rspack/binding-wasm32-wasi@2.1.3':
+    dependencies:
+      '@emnapi/core': 1.11.1
+      '@emnapi/runtime': 1.11.1
+      '@napi-rs/wasm-runtime': 1.1.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)
+    optional: true
+
+  '@rspack/binding-win32-arm64-msvc@2.1.3':
+    optional: true
+
+  '@rspack/binding-win32-ia32-msvc@2.1.3':
+    optional: true
+
+  '@rspack/binding-win32-x64-msvc@2.1.3':
+    optional: true
+
+  '@rspack/binding@2.1.3':
+    optionalDependencies:
+      '@rspack/binding-darwin-arm64': 2.1.3
+      '@rspack/binding-darwin-x64': 2.1.3
+      '@rspack/binding-linux-arm64-gnu': 2.1.3
+      '@rspack/binding-linux-arm64-musl': 2.1.3
+      '@rspack/binding-linux-riscv64-gnu': 2.1.3
+      '@rspack/binding-linux-riscv64-musl': 2.1.3
+      '@rspack/binding-linux-x64-gnu': 2.1.3
+      '@rspack/binding-linux-x64-musl': 2.1.3
+      '@rspack/binding-wasm32-wasi': 2.1.3
+      '@rspack/binding-win32-arm64-msvc': 2.1.3
+      '@rspack/binding-win32-ia32-msvc': 2.1.3
+      '@rspack/binding-win32-x64-msvc': 2.1.3
+
+  '@rspack/core@2.1.3(@module-federation/runtime-tools@2.7.0)(@swc/helpers@0.5.23)':
+    dependencies:
+      '@rspack/binding': 2.1.3
+    optionalDependencies:
+      '@module-federation/runtime-tools': 2.7.0
+      '@swc/helpers': 0.5.23
+
   '@sqltools/formatter@1.2.5': {}
 
   '@swc/counter@0.1.3': {}
@@ -8248,6 +10344,36 @@ snapshots:
       '@swc/counter': 0.1.3
       tslib: 2.8.1
 
+  '@testing-library/dom@10.4.1':
+    dependencies:
+      '@babel/code-frame': 7.29.7
+      '@babel/runtime': 7.29.7
+      '@types/aria-query': 5.0.4
+      aria-query: 5.3.0
+      dom-accessibility-api: 0.5.16
+      lz-string: 1.5.0
+      picocolors: 1.1.1
+      pretty-format: 27.5.1
+
+  '@testing-library/jest-dom@6.9.1':
+    dependencies:
+      '@adobe/css-tools': 4.5.0
+      aria-query: 5.3.2
+      css.escape: 1.5.1
+      dom-accessibility-api: 0.6.3
+      picocolors: 1.1.1
+      redent: 3.0.0
+
+  '@testing-library/react@16.3.2(@testing-library/dom@10.4.1)(@types/react-dom@18.3.7(@types/react@18.3.31))(@types/react@18.3.31)(react-dom@18.3.1(react@18.3.1))(react@18.3.1)':
+    dependencies:
+      '@babel/runtime': 7.29.7
+      '@testing-library/dom': 10.4.1
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+    optionalDependencies:
+      '@types/react': 18.3.31
+      '@types/react-dom': 18.3.7(@types/react@18.3.31)
+
   '@tokenizer/inflate@0.2.7':
     dependencies:
       debug: 4.4.3
@@ -8264,10 +10390,38 @@ snapshots:
       path-browserify: 1.0.1
       tinyglobby: 0.2.17
 
+  '@tybys/wasm-util@0.10.3':
+    dependencies:
+      tslib: 2.8.1
+    optional: true
+
+  '@types/aria-query@5.0.4': {}
+
   '@types/aws-lambda@8.10.143': {}
 
   '@types/aws-lambda@8.10.147': {}
 
+  '@types/babel__core@7.20.5':
+    dependencies:
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+      '@types/babel__generator': 7.27.0
+      '@types/babel__template': 7.4.4
+      '@types/babel__traverse': 7.28.0
+
+  '@types/babel__generator@7.27.0':
+    dependencies:
+      '@babel/types': 7.29.7
+
+  '@types/babel__template@7.4.4':
+    dependencies:
+      '@babel/parser': 7.29.7
+      '@babel/types': 7.29.7
+
+  '@types/babel__traverse@7.28.0':
+    dependencies:
+      '@babel/types': 7.29.7
+
   '@types/bcrypt@5.0.2':
     dependencies:
       '@types/node': 22.20.0
@@ -8305,6 +10459,30 @@ snapshots:
     dependencies:
       '@types/node': 22.20.0
 
+  '@types/d3-array@3.2.2': {}
+
+  '@types/d3-color@3.1.3': {}
+
+  '@types/d3-ease@3.0.2': {}
+
+  '@types/d3-interpolate@3.0.4':
+    dependencies:
+      '@types/d3-color': 3.1.3
+
+  '@types/d3-path@3.1.1': {}
+
+  '@types/d3-scale@4.0.9':
+    dependencies:
+      '@types/d3-time': 3.0.4
+
+  '@types/d3-shape@3.1.8':
+    dependencies:
+      '@types/d3-path': 3.1.1
+
+  '@types/d3-time@3.0.4': {}
+
+  '@types/d3-timer@3.0.2': {}
+
   '@types/eslint-scope@3.7.7':
     dependencies:
       '@types/eslint': 9.6.1
@@ -8385,6 +10563,8 @@ snapshots:
       '@types/prop-types': 15.7.15
       csstype: 3.2.3
 
+  '@types/semver@7.5.8': {}
+
   '@types/send@0.17.6':
     dependencies:
       '@types/mime': 1.3.5
@@ -8400,8 +10580,14 @@ snapshots:
       '@types/node': 22.20.0
       '@types/send': 0.17.6
 
+  '@types/set-cookie-parser@2.4.10':
+    dependencies:
+      '@types/node': 22.20.0
+
   '@types/shimmer@1.2.0': {}
 
+  '@types/statuses@2.0.6': {}
+
   '@types/tedious@4.0.14':
     dependencies:
       '@types/node': 22.20.0
@@ -8499,7 +10685,26 @@ snapshots:
       '@typescript-eslint/types': 8.63.0
       eslint-visitor-keys: 5.0.1
 
-  '@vitest/coverage-v8@2.1.9(vitest@2.1.9(@types/node@22.20.0)(terser@5.48.0))':
+  '@urql/core@5.2.0(graphql@16.14.2)':
+    dependencies:
+      '@0no-co/graphql.web': 1.3.2(graphql@16.14.2)
+      wonka: 6.3.6
+    transitivePeerDependencies:
+      - graphql
+
+  '@vitejs/plugin-react@4.7.0(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))':
+    dependencies:
+      '@babel/core': 7.29.7
+      '@babel/plugin-transform-react-jsx-self': 7.29.7(@babel/core@7.29.7)
+      '@babel/plugin-transform-react-jsx-source': 7.29.7(@babel/core@7.29.7)
+      '@rolldown/pluginutils': 1.0.0-beta.27
+      '@types/babel__core': 7.20.5
+      react-refresh: 0.17.0
+      vite: 5.4.21(@types/node@22.20.0)(terser@5.48.0)
+    transitivePeerDependencies:
+      - supports-color
+
+  '@vitest/coverage-v8@2.1.9(vitest@2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0))':
     dependencies:
       '@ampproject/remapping': 2.3.0
       '@bcoe/v8-coverage': 0.2.3
@@ -8513,7 +10718,7 @@ snapshots:
       std-env: 3.10.0
       test-exclude: 7.0.2
       tinyrainbow: 1.2.0
-      vitest: 2.1.9(@types/node@22.20.0)(terser@5.48.0)
+      vitest: 2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0)
     transitivePeerDependencies:
       - supports-color
 
@@ -8524,12 +10729,13 @@ snapshots:
       chai: 5.3.3
       tinyrainbow: 1.2.0
 
-  '@vitest/mocker@2.1.9(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))':
+  '@vitest/mocker@2.1.9(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))':
     dependencies:
       '@vitest/spy': 2.1.9
       estree-walker: 3.0.3
       magic-string: 0.30.21
     optionalDependencies:
+      msw: 2.15.0(@types/node@22.20.0)(typescript@5.9.3)
       vite: 5.4.21(@types/node@22.20.0)(terser@5.48.0)
 
   '@vitest/pretty-format@2.1.9':
@@ -8663,6 +10869,8 @@ snapshots:
 
   acorn@8.17.0: {}
 
+  adm-zip@0.5.10: {}
+
   agent-base@6.0.2:
     dependencies:
       debug: 4.4.3
@@ -8727,6 +10935,8 @@ snapshots:
     dependencies:
       color-convert: 2.0.1
 
+  ansi-styles@5.2.0: {}
+
   ansi-styles@6.2.3: {}
 
   ansis@4.3.1: {}
@@ -8765,16 +10975,68 @@ snapshots:
 
   argparse@2.0.1: {}
 
+  aria-query@5.3.0:
+    dependencies:
+      dequal: 2.0.3
+
+  aria-query@5.3.2: {}
+
   array-back@6.2.3: {}
 
+  array-buffer-byte-length@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      is-array-buffer: 3.0.5
+
   array-flatten@1.1.1: {}
 
   array-ify@1.0.0: {}
 
+  array-includes@3.1.9:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      is-string: 1.1.1
+      math-intrinsics: 1.1.0
+
   array-timsort@1.0.3: {}
 
+  array.prototype.flat@1.3.3:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-shim-unscopables: 1.1.0
+
+  array.prototype.flatmap@1.3.3:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-shim-unscopables: 1.1.0
+
+  arraybuffer.prototype.slice@1.0.4:
+    dependencies:
+      array-buffer-byte-length: 1.0.2
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      is-array-buffer: 3.0.5
+
   assertion-error@2.0.1: {}
 
+  ast-types-flow@0.0.8: {}
+
+  async-function@1.0.0: {}
+
+  asynckit@0.4.0: {}
+
   atomic-sleep@1.0.0: {}
 
   autoprefixer@10.5.2(postcss@8.5.16):
@@ -8786,8 +11048,16 @@ snapshots:
       postcss: 8.5.16
       postcss-value-parser: 4.2.0
 
+  available-typed-arrays@1.0.7:
+    dependencies:
+      possible-typed-array-names: 1.1.0
+
   aws-ssl-profiles@1.1.2: {}
 
+  axe-core@4.12.1: {}
+
+  axobject-query@4.1.0: {}
+
   balanced-match@1.0.2: {}
 
   balanced-match@4.0.4: {}
@@ -8796,9 +11066,9 @@ snapshots:
 
   baseline-browser-mapping@2.10.42: {}
 
-  bcrypt@5.1.1:
+  bcrypt@5.1.1(encoding@0.1.13):
     dependencies:
-      '@mapbox/node-pre-gyp': 1.0.11
+      '@mapbox/node-pre-gyp': 1.0.11(encoding@0.1.13)
       node-addon-api: 5.1.0
     transitivePeerDependencies:
       - encoding
@@ -8996,6 +11266,8 @@ snapshots:
 
   clone@1.0.4: {}
 
+  clsx@2.1.1: {}
+
   cluster-key-slot@1.1.1: {}
 
   code-block-writer@13.0.3: {}
@@ -9010,6 +11282,10 @@ snapshots:
 
   colorette@2.0.20: {}
 
+  combined-stream@1.0.8:
+    dependencies:
+      delayed-stream: 1.0.0
+
   command-line-args@6.0.2:
     dependencies:
       array-back: 6.2.3
@@ -9024,6 +11300,8 @@ snapshots:
       table-layout: 4.1.1
       typical: 7.3.0
 
+  commander@11.1.0: {}
+
   commander@13.1.0: {}
 
   commander@2.20.3: {}
@@ -9077,10 +11355,14 @@ snapshots:
       meow: 12.1.1
       split2: 4.2.0
 
+  convert-source-map@2.0.0: {}
+
   cookie-signature@1.0.7: {}
 
   cookie@0.7.2: {}
 
+  cookie@1.1.1: {}
+
   core-util-is@1.0.3: {}
 
   cors@2.8.5:
@@ -9113,18 +11395,92 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
+  cron-parser@4.9.0:
+    dependencies:
+      luxon: 3.7.2
+
   cross-spawn@7.0.6:
     dependencies:
       path-key: 3.1.1
       shebang-command: 2.0.0
       which: 2.0.2
 
+  css.escape@1.5.1: {}
+
   cssesc@3.0.0: {}
 
+  cssstyle@4.6.0:
+    dependencies:
+      '@asamuzakjp/css-color': 3.2.0
+      rrweb-cssom: 0.8.0
+
   csstype@3.2.3: {}
 
+  d3-array@3.2.4:
+    dependencies:
+      internmap: 2.0.3
+
+  d3-color@3.1.0: {}
+
+  d3-ease@3.0.1: {}
+
+  d3-format@3.1.2: {}
+
+  d3-interpolate@3.0.1:
+    dependencies:
+      d3-color: 3.1.0
+
+  d3-path@3.1.0: {}
+
+  d3-scale@4.0.2:
+    dependencies:
+      d3-array: 3.2.4
+      d3-format: 3.1.2
+      d3-interpolate: 3.0.1
+      d3-time: 3.1.0
+      d3-time-format: 4.1.0
+
+  d3-shape@3.2.0:
+    dependencies:
+      d3-path: 3.1.0
+
+  d3-time-format@4.1.0:
+    dependencies:
+      d3-time: 3.1.0
+
+  d3-time@3.1.0:
+    dependencies:
+      d3-array: 3.2.4
+
+  d3-timer@3.0.1: {}
+
+  damerau-levenshtein@1.0.8: {}
+
   dargs@8.1.0: {}
 
+  data-urls@5.0.0:
+    dependencies:
+      whatwg-mimetype: 4.0.0
+      whatwg-url: 14.2.0
+
+  data-view-buffer@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
+  data-view-byte-length@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
+  data-view-byte-offset@1.0.1:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-data-view: 1.0.2
+
   dateformat@4.6.3: {}
 
   dayjs@1.11.21: {}
@@ -9137,6 +11493,10 @@ snapshots:
     dependencies:
       ms: 2.1.3
 
+  decimal.js-light@2.5.1: {}
+
+  decimal.js@10.6.0: {}
+
   decompress-response@6.0.0:
     dependencies:
       mimic-response: 3.1.0
@@ -9161,12 +11521,22 @@ snapshots:
       es-errors: 1.3.0
       gopd: 1.2.0
 
+  define-properties@1.2.1:
+    dependencies:
+      define-data-property: 1.1.4
+      has-property-descriptors: 1.0.2
+      object-keys: 1.1.1
+
+  delayed-stream@1.0.0: {}
+
   delegates@1.0.0: {}
 
   denque@2.1.0: {}
 
   depd@2.0.0: {}
 
+  dequal@2.0.3: {}
+
   destroy@1.2.0: {}
 
   detect-libc@2.1.2: {}
@@ -9175,6 +11545,15 @@ snapshots:
 
   dlv@1.1.3: {}
 
+  dom-accessibility-api@0.5.16: {}
+
+  dom-accessibility-api@0.6.3: {}
+
+  dom-helpers@5.2.1:
+    dependencies:
+      '@babel/runtime': 7.29.7
+      csstype: 3.2.3
+
   dot-prop@5.3.0:
     dependencies:
       is-obj: 2.0.0
@@ -9220,8 +11599,14 @@ snapshots:
 
   emoji-regex@9.2.2: {}
 
+  empathic@2.0.0: {}
+
   encodeurl@2.0.0: {}
 
+  encoding@0.1.13:
+    dependencies:
+      iconv-lite: 0.6.3
+
   end-of-stream@1.4.5:
     dependencies:
       once: 1.4.0
@@ -9231,6 +11616,8 @@ snapshots:
       graceful-fs: 4.2.11
       tapable: 2.3.3
 
+  entities@6.0.1: {}
+
   env-paths@2.2.1: {}
 
   environment@1.1.0: {}
@@ -9239,6 +11626,70 @@ snapshots:
     dependencies:
       is-arrayish: 0.2.1
 
+  es-abstract-get@1.0.0:
+    dependencies:
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      is-callable: 1.2.7
+      object-inspect: 1.13.4
+
+  es-abstract@1.24.2:
+    dependencies:
+      array-buffer-byte-length: 1.0.2
+      arraybuffer.prototype.slice: 1.0.4
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      data-view-buffer: 1.0.2
+      data-view-byte-length: 1.0.2
+      data-view-byte-offset: 1.0.1
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      es-set-tostringtag: 2.1.0
+      es-to-primitive: 1.3.4
+      function.prototype.name: 1.2.0
+      get-intrinsic: 1.3.0
+      get-proto: 1.0.1
+      get-symbol-description: 1.1.0
+      globalthis: 1.0.4
+      gopd: 1.2.0
+      has-property-descriptors: 1.0.2
+      has-proto: 1.2.0
+      has-symbols: 1.1.0
+      hasown: 2.0.4
+      internal-slot: 1.1.0
+      is-array-buffer: 3.0.5
+      is-callable: 1.2.7
+      is-data-view: 1.0.2
+      is-negative-zero: 2.0.3
+      is-regex: 1.2.1
+      is-set: 2.0.3
+      is-shared-array-buffer: 1.0.4
+      is-string: 1.1.1
+      is-typed-array: 1.1.15
+      is-weakref: 1.1.1
+      math-intrinsics: 1.1.0
+      object-inspect: 1.13.4
+      object-keys: 1.1.1
+      object.assign: 4.1.7
+      own-keys: 1.0.1
+      regexp.prototype.flags: 1.5.4
+      safe-array-concat: 1.1.4
+      safe-push-apply: 1.0.0
+      safe-regex-test: 1.1.0
+      set-proto: 1.0.0
+      stop-iteration-iterator: 1.1.0
+      string.prototype.trim: 1.2.11
+      string.prototype.trimend: 1.0.10
+      string.prototype.trimstart: 1.0.8
+      typed-array-buffer: 1.0.3
+      typed-array-byte-length: 1.0.3
+      typed-array-byte-offset: 1.0.4
+      typed-array-length: 1.0.8
+      unbox-primitive: 1.1.0
+      which-typed-array: 1.1.22
+
   es-define-property@1.0.1: {}
 
   es-errors@1.3.0: {}
@@ -9249,6 +11700,26 @@ snapshots:
     dependencies:
       es-errors: 1.3.0
 
+  es-set-tostringtag@2.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.4
+
+  es-shim-unscopables@1.1.0:
+    dependencies:
+      hasown: 2.0.4
+
+  es-to-primitive@1.3.4:
+    dependencies:
+      es-abstract-get: 1.0.0
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      is-callable: 1.2.7
+      is-date-object: 1.1.0
+      is-symbol: 1.1.1
+
   esbuild-register@3.6.0(esbuild@0.19.12):
     dependencies:
       debug: 4.4.3
@@ -9374,6 +11845,25 @@ snapshots:
     dependencies:
       eslint: 9.39.4(jiti@2.6.1)
 
+  eslint-plugin-jsx-a11y@6.10.2(eslint@9.39.4(jiti@2.6.1)):
+    dependencies:
+      aria-query: 5.3.2
+      array-includes: 3.1.9
+      array.prototype.flatmap: 1.3.3
+      ast-types-flow: 0.0.8
+      axe-core: 4.12.1
+      axobject-query: 4.1.0
+      damerau-levenshtein: 1.0.8
+      emoji-regex: 9.2.2
+      eslint: 9.39.4(jiti@2.6.1)
+      hasown: 2.0.4
+      jsx-ast-utils: 3.3.5
+      language-tags: 1.0.9
+      minimatch: 3.1.5
+      object.fromentries: 2.0.8
+      safe-regex-test: 1.1.0
+      string.prototype.includes: 2.0.1
+
   eslint-scope@5.1.1:
     dependencies:
       esrecurse: 4.3.0
@@ -9502,6 +11992,8 @@ snapshots:
 
   event-target-shim@5.0.1: {}
 
+  eventemitter3@4.0.7: {}
+
   eventemitter3@5.0.4: {}
 
   events@3.3.0: {}
@@ -9558,6 +12050,8 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  exsolve@1.0.8: {}
+
   extend@3.0.2: {}
 
   external-editor@3.1.0:
@@ -9570,6 +12064,8 @@ snapshots:
 
   fast-deep-equal@3.1.3: {}
 
+  fast-equals@5.4.1: {}
+
   fast-glob@3.3.3:
     dependencies:
       '@nodelib/fs.stat': 2.0.5
@@ -9584,8 +12080,18 @@ snapshots:
 
   fast-safe-stringify@2.1.1: {}
 
+  fast-string-truncated-width@3.0.3: {}
+
+  fast-string-width@3.0.2:
+    dependencies:
+      fast-string-truncated-width: 3.0.3
+
   fast-uri@3.1.3: {}
 
+  fast-wrap-ansi@0.2.2:
+    dependencies:
+      fast-string-width: 3.0.2
+
   fastq@1.20.1:
     dependencies:
       reusify: 1.1.0
@@ -9653,6 +12159,10 @@ snapshots:
 
   flatted@3.4.2: {}
 
+  for-each@0.3.5:
+    dependencies:
+      is-callable: 1.2.7
+
   foreground-child@3.3.1:
     dependencies:
       cross-spawn: 7.0.6
@@ -9692,6 +12202,14 @@ snapshots:
       typescript: 5.7.2
       webpack: 5.97.1
 
+  form-data@4.0.6:
+    dependencies:
+      asynckit: 0.4.0
+      combined-stream: 1.0.8
+      es-set-tostringtag: 2.1.0
+      hasown: 2.0.4
+      mime-types: 2.1.35
+
   forwarded-parse@2.1.2: {}
 
   forwarded@0.2.0: {}
@@ -9721,6 +12239,20 @@ snapshots:
 
   function-bind@1.1.2: {}
 
+  function.prototype.name@1.2.0:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      es-define-property: 1.0.1
+      es-errors: 1.3.0
+      functions-have-names: 1.2.3
+      has-property-descriptors: 1.0.2
+      hasown: 2.0.4
+      is-callable: 1.2.7
+      is-document.all: 1.0.0
+
+  functions-have-names@1.2.3: {}
+
   gauge@3.0.2:
     dependencies:
       aproba: 2.1.0
@@ -9733,20 +12265,20 @@ snapshots:
       strip-ansi: 6.0.1
       wide-align: 1.1.5
 
-  gaxios@6.7.1:
+  gaxios@6.7.1(encoding@0.1.13):
     dependencies:
       extend: 3.0.2
       https-proxy-agent: 7.0.6
       is-stream: 2.0.1
-      node-fetch: 2.7.0
+      node-fetch: 2.7.0(encoding@0.1.13)
       uuid: 9.0.1
     transitivePeerDependencies:
       - encoding
       - supports-color
 
-  gcp-metadata@6.1.1:
+  gcp-metadata@6.1.1(encoding@0.1.13):
     dependencies:
-      gaxios: 6.7.1
+      gaxios: 6.7.1(encoding@0.1.13)
       google-logging-utils: 0.0.2
       json-bigint: 1.0.0
     transitivePeerDependencies:
@@ -9757,6 +12289,10 @@ snapshots:
     dependencies:
       is-property: 1.0.2
 
+  generator-function@2.0.1: {}
+
+  gensync@1.0.0-beta.2: {}
+
   get-caller-file@2.0.5: {}
 
   get-east-asian-width@1.6.0: {}
@@ -9781,6 +12317,12 @@ snapshots:
 
   get-stream@8.0.1: {}
 
+  get-symbol-description@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+
   get-tsconfig@4.14.0:
     dependencies:
       resolve-pkg-maps: 1.0.0
@@ -9803,6 +12345,14 @@ snapshots:
 
   glob-to-regexp@0.4.1: {}
 
+  glob@10.3.10:
+    dependencies:
+      foreground-child: 3.3.1
+      jackspeak: 2.3.6
+      minimatch: 9.0.9
+      minipass: 7.1.3
+      path-scurry: 1.11.1
+
   glob@10.4.5:
     dependencies:
       foreground-child: 3.3.1
@@ -9827,12 +12377,21 @@ snapshots:
 
   globals@14.0.0: {}
 
+  globalthis@1.0.4:
+    dependencies:
+      define-properties: 1.2.1
+      gopd: 1.2.0
+
   google-logging-utils@0.0.2: {}
 
   gopd@1.2.0: {}
 
   graceful-fs@4.2.11: {}
 
+  graphql@16.14.2: {}
+
+  has-bigints@1.1.0: {}
+
   has-flag@4.0.0: {}
 
   has-own-prop@2.0.0: {}
@@ -9841,18 +12400,35 @@ snapshots:
     dependencies:
       es-define-property: 1.0.1
 
+  has-proto@1.2.0:
+    dependencies:
+      dunder-proto: 1.0.1
+
   has-symbols@1.1.0: {}
 
+  has-tostringtag@1.0.2:
+    dependencies:
+      has-symbols: 1.1.0
+
   has-unicode@2.0.1: {}
 
   hasown@2.0.4:
     dependencies:
       function-bind: 1.1.2
 
+  headers-polyfill@5.0.1:
+    dependencies:
+      '@types/set-cookie-parser': 2.4.10
+      set-cookie-parser: 3.1.2
+
   help-me@5.0.0: {}
 
   hpagent@1.2.0: {}
 
+  html-encoding-sniffer@4.0.0:
+    dependencies:
+      whatwg-encoding: 3.1.1
+
   html-escaper@2.0.2: {}
 
   http-errors@2.0.1:
@@ -9863,6 +12439,13 @@ snapshots:
       statuses: 2.0.2
       toidentifier: 1.0.1
 
+  http-proxy-agent@7.0.2:
+    dependencies:
+      agent-base: 7.1.4
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   https-proxy-agent@5.0.1:
     dependencies:
       agent-base: 6.0.2
@@ -9885,6 +12468,10 @@ snapshots:
     dependencies:
       safer-buffer: 2.1.2
 
+  iconv-lite@0.6.3:
+    dependencies:
+      safer-buffer: 2.1.2
+
   iconv-lite@0.7.3:
     dependencies:
       safer-buffer: 2.1.2
@@ -9911,6 +12498,8 @@ snapshots:
 
   imurmurhash@0.1.4: {}
 
+  indent-string@4.0.0: {}
+
   inflight@1.0.6:
     dependencies:
       once: 1.4.0
@@ -9958,6 +12547,14 @@ snapshots:
       strip-ansi: 6.0.1
       wrap-ansi: 6.2.0
 
+  internal-slot@1.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      hasown: 2.0.4
+      side-channel: 1.1.1
+
+  internmap@2.0.3: {}
+
   ioredis@5.11.1:
     dependencies:
       '@ioredis/commands': 1.10.0
@@ -9972,18 +12569,62 @@ snapshots:
 
   ipaddr.js@1.9.1: {}
 
+  is-array-buffer@3.0.5:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+
   is-arrayish@0.2.1: {}
 
+  is-async-function@2.1.1:
+    dependencies:
+      async-function: 1.0.0
+      call-bound: 1.0.4
+      get-proto: 1.0.1
+      has-tostringtag: 1.0.2
+      safe-regex-test: 1.1.0
+
+  is-bigint@1.1.0:
+    dependencies:
+      has-bigints: 1.1.0
+
   is-binary-path@2.1.0:
     dependencies:
       binary-extensions: 2.3.0
 
+  is-boolean-object@1.2.2:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-callable@1.2.7: {}
+
   is-core-module@2.16.2:
     dependencies:
       hasown: 2.0.4
 
+  is-data-view@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+      is-typed-array: 1.1.15
+
+  is-date-object@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-document.all@1.0.0:
+    dependencies:
+      call-bound: 1.0.4
+
   is-extglob@2.1.1: {}
 
+  is-finalizationregistry@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+
   is-fullwidth-code-point@3.0.0: {}
 
   is-fullwidth-code-point@4.0.0: {}
@@ -9992,30 +12633,96 @@ snapshots:
     dependencies:
       get-east-asian-width: 1.6.0
 
+  is-generator-function@1.1.2:
+    dependencies:
+      call-bound: 1.0.4
+      generator-function: 2.0.1
+      get-proto: 1.0.1
+      has-tostringtag: 1.0.2
+      safe-regex-test: 1.1.0
+
   is-glob@4.0.3:
     dependencies:
       is-extglob: 2.1.1
 
   is-interactive@1.0.0: {}
 
+  is-map@2.0.3: {}
+
+  is-negative-zero@2.0.3: {}
+
+  is-node-process@1.2.0: {}
+
+  is-number-object@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
   is-number@7.0.0: {}
 
   is-obj@2.0.0: {}
 
+  is-potential-custom-element-name@1.0.1: {}
+
   is-property@1.0.2: {}
 
+  is-regex@1.2.1:
+    dependencies:
+      call-bound: 1.0.4
+      gopd: 1.2.0
+      has-tostringtag: 1.0.2
+      hasown: 2.0.4
+
+  is-set@2.0.3: {}
+
+  is-shared-array-buffer@1.0.4:
+    dependencies:
+      call-bound: 1.0.4
+
   is-stream@2.0.1: {}
 
   is-stream@3.0.0: {}
 
+  is-string@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-tostringtag: 1.0.2
+
+  is-symbol@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+      has-symbols: 1.1.0
+      safe-regex-test: 1.1.0
+
   is-text-path@2.0.0:
     dependencies:
       text-extensions: 2.4.0
 
+  is-typed-array@1.1.15:
+    dependencies:
+      which-typed-array: 1.1.22
+
   is-unicode-supported@0.1.0: {}
 
+  is-weakmap@2.0.2: {}
+
+  is-weakref@1.1.1:
+    dependencies:
+      call-bound: 1.0.4
+
+  is-weakset@2.0.4:
+    dependencies:
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+
+  isarray@2.0.5: {}
+
   isexe@2.0.0: {}
 
+  isomorphic-ws@5.0.0(ws@8.21.0):
+    dependencies:
+      ws: 8.21.0
+
   istanbul-lib-coverage@3.2.2: {}
 
   istanbul-lib-report@3.0.1:
@@ -10039,6 +12746,12 @@ snapshots:
 
   iterare@1.2.1: {}
 
+  jackspeak@2.3.6:
+    dependencies:
+      '@isaacs/cliui': 8.0.2
+    optionalDependencies:
+      '@pkgjs/parseargs': 0.11.0
+
   jackspeak@3.4.3:
     dependencies:
       '@isaacs/cliui': 8.0.2
@@ -10053,6 +12766,8 @@ snapshots:
 
   jiti@1.21.7: {}
 
+  jiti@2.4.2: {}
+
   jiti@2.6.1: {}
 
   joycon@3.1.1: {}
@@ -10063,6 +12778,36 @@ snapshots:
     dependencies:
       argparse: 2.0.1
 
+  jsdom@25.0.1:
+    dependencies:
+      cssstyle: 4.6.0
+      data-urls: 5.0.0
+      decimal.js: 10.6.0
+      form-data: 4.0.6
+      html-encoding-sniffer: 4.0.0
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      is-potential-custom-element-name: 1.0.1
+      nwsapi: 2.2.24
+      parse5: 7.3.0
+      rrweb-cssom: 0.7.1
+      saxes: 6.0.0
+      symbol-tree: 3.2.4
+      tough-cookie: 5.1.2
+      w3c-xmlserializer: 5.0.0
+      webidl-conversions: 7.0.0
+      whatwg-encoding: 3.1.1
+      whatwg-mimetype: 4.0.0
+      whatwg-url: 14.2.0
+      ws: 8.21.0
+      xml-name-validator: 5.0.0
+    transitivePeerDependencies:
+      - bufferutil
+      - supports-color
+      - utf-8-validate
+
+  jsesc@3.1.0: {}
+
   json-bigint@1.0.0:
     dependencies:
       bignumber.js: 9.3.1
@@ -10106,6 +12851,13 @@ snapshots:
       ms: 2.1.3
       semver: 7.8.5
 
+  jsx-ast-utils@3.3.5:
+    dependencies:
+      array-includes: 3.1.9
+      array.prototype.flat: 1.3.3
+      object.assign: 4.1.7
+      object.values: 1.2.1
+
   jwa@2.0.1:
     dependencies:
       buffer-equal-constant-time: 1.0.1
@@ -10123,6 +12875,12 @@ snapshots:
     dependencies:
       json-buffer: 3.0.1
 
+  language-subtag-registry@0.3.23: {}
+
+  language-tags@1.0.9:
+    dependencies:
+      language-subtag-registry: 0.3.23
+
   levn@0.4.1:
     dependencies:
       prelude-ls: 1.2.1
@@ -10211,6 +12969,8 @@ snapshots:
       strip-ansi: 7.2.0
       wrap-ansi: 9.0.2
 
+  long-timeout@0.1.1: {}
+
   long@5.3.2: {}
 
   loose-envify@1.4.0:
@@ -10221,8 +12981,16 @@ snapshots:
 
   lru-cache@10.4.3: {}
 
+  lru-cache@5.1.1:
+    dependencies:
+      yallist: 3.1.1
+
   lru.min@1.1.4: {}
 
+  luxon@3.7.2: {}
+
+  lz-string@1.5.0: {}
+
   magic-string@0.30.21:
     dependencies:
       '@jridgewell/sourcemap-codec': 1.5.5
@@ -10284,6 +13052,8 @@ snapshots:
 
   mimic-response@3.1.0: {}
 
+  min-indent@1.0.1: {}
+
   minimatch@10.2.5:
     dependencies:
       brace-expansion: 5.0.7
@@ -10319,12 +13089,39 @@ snapshots:
 
   mkdirp@1.0.4: {}
 
+  mock-socket@9.3.1: {}
+
   module-details-from-path@1.0.4: {}
 
   ms@2.0.0: {}
 
   ms@2.1.3: {}
 
+  msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3):
+    dependencies:
+      '@inquirer/confirm': 6.1.1(@types/node@22.20.0)
+      '@mswjs/interceptors': 0.41.9
+      '@open-draft/deferred-promise': 3.0.0
+      '@types/statuses': 2.0.6
+      cookie: 1.1.1
+      graphql: 16.14.2
+      headers-polyfill: 5.0.1
+      is-node-process: 1.2.0
+      outvariant: 1.4.3
+      path-to-regexp: 6.3.0
+      picocolors: 1.1.1
+      rettime: 0.11.11
+      statuses: 2.0.2
+      strict-event-emitter: 0.5.1
+      tough-cookie: 6.0.2
+      type-fest: 5.8.0
+      until-async: 3.0.2
+      yargs: 17.7.3
+    optionalDependencies:
+      typescript: 5.9.3
+    transitivePeerDependencies:
+      - '@types/node'
+
   multer@2.0.2:
     dependencies:
       append-field: 1.0.0
@@ -10339,6 +13136,8 @@ snapshots:
 
   mute-stream@1.0.0: {}
 
+  mute-stream@3.0.0: {}
+
   mysql2@3.22.6(@types/node@22.20.0):
     dependencies:
       '@types/node': 22.20.0
@@ -10385,7 +13184,7 @@ snapshots:
       neo4j-driver-core: 5.28.3
       rxjs: 7.8.2
 
-  next@14.2.35(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
+  next@14.2.35(@babel/core@7.29.7)(@opentelemetry/api@1.9.1)(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
     dependencies:
       '@next/env': 14.2.35
       '@swc/helpers': 0.5.5
@@ -10395,7 +13194,7 @@ snapshots:
       postcss: 8.4.31
       react: 18.3.1
       react-dom: 18.3.1(react@18.3.1)
-      styled-jsx: 5.1.1(react@18.3.1)
+      styled-jsx: 5.1.1(@babel/core@7.29.7)(react@18.3.1)
     optionalDependencies:
       '@next/swc-darwin-arm64': 14.2.33
       '@next/swc-darwin-x64': 14.2.33
@@ -10423,12 +13222,20 @@ snapshots:
     dependencies:
       lodash: 4.18.1
 
-  node-fetch@2.7.0:
+  node-fetch@2.7.0(encoding@0.1.13):
     dependencies:
       whatwg-url: 5.0.0
+    optionalDependencies:
+      encoding: 0.1.13
 
   node-releases@2.0.50: {}
 
+  node-schedule@2.1.1:
+    dependencies:
+      cron-parser: 4.9.0
+      long-timeout: 0.1.1
+      sorted-array-functions: 1.3.0
+
   nopt@5.0.0:
     dependencies:
       abbrev: 1.1.1
@@ -10446,12 +13253,39 @@ snapshots:
       gauge: 3.0.2
       set-blocking: 2.0.0
 
+  nwsapi@2.2.24: {}
+
   object-assign@4.1.1: {}
 
   object-hash@3.0.0: {}
 
   object-inspect@1.13.4: {}
 
+  object-keys@1.1.1: {}
+
+  object.assign@4.1.7:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+      has-symbols: 1.1.0
+      object-keys: 1.1.1
+
+  object.fromentries@2.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+
+  object.values@1.2.1:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
   on-exit-leak-free@2.1.2: {}
 
   on-finished@2.4.1:
@@ -10497,6 +13331,14 @@ snapshots:
 
   os-tmpdir@1.0.2: {}
 
+  outvariant@1.4.3: {}
+
+  own-keys@1.0.1:
+    dependencies:
+      get-intrinsic: 1.3.0
+      object-keys: 1.1.1
+      safe-push-apply: 1.0.0
+
   p-limit@3.1.0:
     dependencies:
       yocto-queue: 0.1.0
@@ -10526,6 +13368,10 @@ snapshots:
       json-parse-even-better-errors: 2.3.1
       lines-and-columns: 1.2.4
 
+  parse5@7.3.0:
+    dependencies:
+      entities: 6.0.1
+
   parseurl@1.3.3: {}
 
   path-browserify@1.0.1: {}
@@ -10551,6 +13397,8 @@ snapshots:
 
   path-to-regexp@3.3.0: {}
 
+  path-to-regexp@6.3.0: {}
+
   path-type@4.0.0: {}
 
   pathe@1.1.2: {}
@@ -10629,6 +13477,8 @@ snapshots:
 
   pluralize@8.0.0: {}
 
+  possible-typed-array-names@1.1.0: {}
+
   postcss-import@15.1.0(postcss@8.5.16):
     dependencies:
       postcss: 8.5.16
@@ -10703,6 +13553,12 @@ snapshots:
 
   prettier@3.9.4: {}
 
+  pretty-format@27.5.1:
+    dependencies:
+      ansi-regex: 5.0.1
+      ansi-styles: 5.2.0
+      react-is: 17.0.2
+
   process-warning@5.0.0: {}
 
   process@0.11.10: {}
@@ -10712,6 +13568,12 @@ snapshots:
       '@opentelemetry/api': 1.9.1
       tdigest: 0.1.2
 
+  prop-types@15.8.1:
+    dependencies:
+      loose-envify: 1.4.0
+      object-assign: 4.1.1
+      react-is: 16.13.1
+
   protobufjs@7.6.5:
     dependencies:
       '@protobufjs/aspromise': 1.1.2
@@ -10768,6 +13630,35 @@ snapshots:
       react: 18.3.1
       scheduler: 0.23.2
 
+  react-hook-form@7.81.0(react@18.3.1):
+    dependencies:
+      react: 18.3.1
+
+  react-is@16.13.1: {}
+
+  react-is@17.0.2: {}
+
+  react-is@18.3.1: {}
+
+  react-refresh@0.17.0: {}
+
+  react-smooth@4.0.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
+    dependencies:
+      fast-equals: 5.4.1
+      prop-types: 15.8.1
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      react-transition-group: 4.4.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+
+  react-transition-group@4.4.5(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
+    dependencies:
+      '@babel/runtime': 7.29.7
+      dom-helpers: 5.2.1
+      loose-envify: 1.4.0
+      prop-types: 15.8.1
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+
   react@18.3.1:
     dependencies:
       loose-envify: 1.4.0
@@ -10796,6 +13687,28 @@ snapshots:
 
   real-require@0.2.0: {}
 
+  recharts-scale@0.4.5:
+    dependencies:
+      decimal.js-light: 2.5.1
+
+  recharts@2.15.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1):
+    dependencies:
+      clsx: 2.1.1
+      eventemitter3: 4.0.7
+      lodash: 4.18.1
+      react: 18.3.1
+      react-dom: 18.3.1(react@18.3.1)
+      react-is: 18.3.1
+      react-smooth: 4.0.4(react-dom@18.3.1(react@18.3.1))(react@18.3.1)
+      recharts-scale: 0.4.5
+      tiny-invariant: 1.3.3
+      victory-vendor: 36.9.2
+
+  redent@3.0.0:
+    dependencies:
+      indent-string: 4.0.0
+      strip-indent: 3.0.0
+
   redis-errors@1.2.0: {}
 
   redis-parser@3.0.0:
@@ -10804,6 +13717,26 @@ snapshots:
 
   reflect-metadata@0.2.2: {}
 
+  reflect.getprototypeof@1.0.10:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+      get-intrinsic: 1.3.0
+      get-proto: 1.0.1
+      which-builtin-type: 1.2.1
+
+  regexp.prototype.flags@1.5.4:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-errors: 1.3.0
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      set-function-name: 2.0.2
+
   repeat-string@1.6.1: {}
 
   require-directory@2.1.1: {}
@@ -10841,6 +13774,8 @@ snapshots:
       onetime: 7.0.0
       signal-exit: 4.1.0
 
+  rettime@0.11.11: {}
+
   reusify@1.1.0: {}
 
   rfdc@1.4.1: {}
@@ -10880,6 +13815,10 @@ snapshots:
       '@rollup/rollup-win32-x64-msvc': 4.62.2
       fsevents: 2.3.3
 
+  rrweb-cssom@0.7.1: {}
+
+  rrweb-cssom@0.8.0: {}
+
   run-async@2.4.1: {}
 
   run-async@3.0.0: {}
@@ -10896,12 +13835,35 @@ snapshots:
     dependencies:
       tslib: 2.8.1
 
+  safe-array-concat@1.1.4:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      get-intrinsic: 1.3.0
+      has-symbols: 1.1.0
+      isarray: 2.0.5
+
   safe-buffer@5.2.1: {}
 
+  safe-push-apply@1.0.0:
+    dependencies:
+      es-errors: 1.3.0
+      isarray: 2.0.5
+
+  safe-regex-test@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-regex: 1.2.1
+
   safe-stable-stringify@2.5.0: {}
 
   safer-buffer@2.1.2: {}
 
+  saxes@6.0.0:
+    dependencies:
+      xmlchars: 2.2.0
+
   scheduler@0.23.2:
     dependencies:
       loose-envify: 1.4.0
@@ -10912,6 +13874,13 @@ snapshots:
       ajv: 6.15.0
       ajv-keywords: 3.5.2(ajv@6.15.0)
 
+  schema-utils@4.3.0:
+    dependencies:
+      '@types/json-schema': 7.0.15
+      ajv: 8.20.0
+      ajv-formats: 2.1.1(ajv@8.20.0)
+      ajv-keywords: 5.1.0(ajv@8.20.0)
+
   schema-utils@4.3.3:
     dependencies:
       '@types/json-schema': 7.0.15
@@ -10925,6 +13894,8 @@ snapshots:
 
   semver@6.3.1: {}
 
+  semver@7.6.3: {}
+
   semver@7.8.5: {}
 
   send@0.19.2:
@@ -10956,6 +13927,8 @@ snapshots:
 
   set-blocking@2.0.0: {}
 
+  set-cookie-parser@3.1.2: {}
+
   set-function-length@1.2.2:
     dependencies:
       define-data-property: 1.1.4
@@ -10965,6 +13938,19 @@ snapshots:
       gopd: 1.2.0
       has-property-descriptors: 1.0.2
 
+  set-function-name@2.0.2:
+    dependencies:
+      define-data-property: 1.1.4
+      es-errors: 1.3.0
+      functions-have-names: 1.2.3
+      has-property-descriptors: 1.0.2
+
+  set-proto@1.0.0:
+    dependencies:
+      dunder-proto: 1.0.1
+      es-errors: 1.3.0
+      es-object-atoms: 1.1.2
+
   setprototypeof@1.2.0: {}
 
   shebang-command@2.0.0:
@@ -11031,6 +14017,8 @@ snapshots:
     dependencies:
       atomic-sleep: 1.0.0
 
+  sorted-array-functions@1.3.0: {}
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.21:
@@ -11056,8 +14044,15 @@ snapshots:
 
   std-env@3.10.0: {}
 
+  stop-iteration-iterator@1.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      internal-slot: 1.1.0
+
   streamsearch@1.1.0: {}
 
+  strict-event-emitter@0.5.1: {}
+
   string-argv@0.3.2: {}
 
   string-width@4.2.3:
@@ -11078,6 +14073,36 @@ snapshots:
       get-east-asian-width: 1.6.0
       strip-ansi: 7.2.0
 
+  string.prototype.includes@2.0.1:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+
+  string.prototype.trim@1.2.11:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-data-property: 1.1.4
+      define-properties: 1.2.1
+      es-abstract: 1.24.2
+      es-object-atoms: 1.1.2
+      has-property-descriptors: 1.0.2
+      safe-regex-test: 1.1.0
+
+  string.prototype.trimend@1.0.10:
+    dependencies:
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
+  string.prototype.trimstart@1.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      define-properties: 1.2.1
+      es-object-atoms: 1.1.2
+
   string_decoder@1.3.0:
     dependencies:
       safe-buffer: 5.2.1
@@ -11094,6 +14119,10 @@ snapshots:
 
   strip-final-newline@3.0.0: {}
 
+  strip-indent@3.0.0:
+    dependencies:
+      min-indent: 1.0.1
+
   strip-json-comments@2.0.1: {}
 
   strip-json-comments@3.1.1: {}
@@ -11102,10 +14131,12 @@ snapshots:
     dependencies:
       '@tokenizer/token': 0.3.0
 
-  styled-jsx@5.1.1(react@18.3.1):
+  styled-jsx@5.1.1(@babel/core@7.29.7)(react@18.3.1):
     dependencies:
       client-only: 0.0.1
       react: 18.3.1
+    optionalDependencies:
+      '@babel/core': 7.29.7
 
   sucrase@3.35.1:
     dependencies:
@@ -11129,11 +14160,15 @@ snapshots:
 
   symbol-observable@4.0.0: {}
 
+  symbol-tree@3.2.4: {}
+
   table-layout@4.1.1:
     dependencies:
       array-back: 6.2.3
       wordwrapjs: 5.1.1
 
+  tagged-tag@1.0.0: {}
+
   tailwindcss@3.4.19(tsx@4.23.0)(yaml@2.9.0):
     dependencies:
       '@alloc/quick-lru': 5.2.0
@@ -11162,6 +14197,8 @@ snapshots:
       - tsx
       - yaml
 
+  tapable@2.3.0: {}
+
   tapable@2.3.3: {}
 
   tar-fs@2.1.5:
@@ -11202,6 +14239,17 @@ snapshots:
     optionalDependencies:
       esbuild: 0.19.12
 
+  terser-webpack-plugin@5.6.1(postcss@8.5.16)(webpack@5.97.1(postcss@8.5.16)):
+    dependencies:
+      '@jridgewell/trace-mapping': 0.3.31
+      jest-worker: 27.5.1
+      schema-utils: 4.3.3
+      terser: 5.48.0
+      webpack: 5.97.1(postcss@8.5.16)
+    optionalDependencies:
+      postcss: 8.5.16
+    optional: true
+
   terser-webpack-plugin@5.6.1(webpack@5.97.1):
     dependencies:
       '@jridgewell/trace-mapping': 0.3.31
@@ -11239,6 +14287,8 @@ snapshots:
 
   through@2.3.8: {}
 
+  tiny-invariant@1.3.3: {}
+
   tinybench@2.9.0: {}
 
   tinyexec@0.3.2: {}
@@ -11256,6 +14306,18 @@ snapshots:
 
   tinyspy@3.0.2: {}
 
+  tldts-core@6.1.86: {}
+
+  tldts-core@7.4.8: {}
+
+  tldts@6.1.86:
+    dependencies:
+      tldts-core: 6.1.86
+
+  tldts@7.4.8:
+    dependencies:
+      tldts-core: 7.4.8
+
   tmp@0.0.33:
     dependencies:
       os-tmpdir: 1.0.2
@@ -11272,8 +14334,20 @@ snapshots:
       '@tokenizer/token': 0.3.0
       ieee754: 1.2.1
 
+  tough-cookie@5.1.2:
+    dependencies:
+      tldts: 6.1.86
+
+  tough-cookie@6.0.2:
+    dependencies:
+      tldts: 7.4.8
+
   tr46@0.0.3: {}
 
+  tr46@5.1.1:
+    dependencies:
+      punycode: 2.3.1
+
   tree-kill@1.2.2: {}
 
   ts-api-utils@2.5.0(typescript@5.9.3):
@@ -11318,11 +14392,48 @@ snapshots:
 
   type-fest@0.21.3: {}
 
+  type-fest@5.8.0:
+    dependencies:
+      tagged-tag: 1.0.0
+
   type-is@1.6.18:
     dependencies:
       media-typer: 0.3.0
       mime-types: 2.1.35
 
+  typed-array-buffer@1.0.3:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      is-typed-array: 1.1.15
+
+  typed-array-byte-length@1.0.3:
+    dependencies:
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      has-proto: 1.2.0
+      is-typed-array: 1.1.15
+
+  typed-array-byte-offset@1.0.4:
+    dependencies:
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      has-proto: 1.2.0
+      is-typed-array: 1.1.15
+      reflect.getprototypeof: 1.0.10
+
+  typed-array-length@1.0.8:
+    dependencies:
+      call-bind: 1.0.9
+      for-each: 0.3.5
+      gopd: 1.2.0
+      is-typed-array: 1.1.15
+      possible-typed-array-names: 1.1.0
+      reflect.getprototypeof: 1.0.10
+
   typedarray@0.0.6: {}
 
   typeorm@1.0.0(ioredis@5.11.1)(mysql2@3.22.6(@types/node@22.20.0)):
@@ -11367,18 +14478,31 @@ snapshots:
 
   uint8array-extras@1.5.0: {}
 
+  unbox-primitive@1.1.0:
+    dependencies:
+      call-bound: 1.0.4
+      has-bigints: 1.1.0
+      has-symbols: 1.1.0
+      which-boxed-primitive: 1.1.1
+
   undici-types@6.21.0: {}
 
   undici-types@7.18.2: {}
 
   undici@6.27.0: {}
 
+  undici@7.28.0: {}
+
   unicorn-magic@0.1.0: {}
 
   universalify@2.0.1: {}
 
   unpipe@1.0.0: {}
 
+  until-async@3.0.2: {}
+
+  upath@2.0.1: {}
+
   update-browserslist-db@1.2.3(browserslist@4.28.5):
     dependencies:
       browserslist: 4.28.5
@@ -11389,6 +14513,12 @@ snapshots:
     dependencies:
       punycode: 2.3.1
 
+  urql@4.2.2(@urql/core@5.2.0(graphql@16.14.2))(react@18.3.1):
+    dependencies:
+      '@urql/core': 5.2.0(graphql@16.14.2)
+      react: 18.3.1
+      wonka: 6.3.6
+
   util-deprecate@1.0.2: {}
 
   utils-merge@1.0.1: {}
@@ -11399,6 +14529,23 @@ snapshots:
 
   vary@1.1.2: {}
 
+  victory-vendor@36.9.2:
+    dependencies:
+      '@types/d3-array': 3.2.2
+      '@types/d3-ease': 3.0.2
+      '@types/d3-interpolate': 3.0.4
+      '@types/d3-scale': 4.0.9
+      '@types/d3-shape': 3.1.8
+      '@types/d3-time': 3.0.4
+      '@types/d3-timer': 3.0.2
+      d3-array: 3.2.4
+      d3-ease: 3.0.1
+      d3-interpolate: 3.0.1
+      d3-scale: 4.0.2
+      d3-shape: 3.2.0
+      d3-time: 3.1.0
+      d3-timer: 3.0.1
+
   vite-node@2.1.9(@types/node@22.20.0)(terser@5.48.0):
     dependencies:
       cac: 6.7.14
@@ -11427,10 +14574,10 @@ snapshots:
       fsevents: 2.3.3
       terser: 5.48.0
 
-  vitest@2.1.9(@types/node@22.20.0)(terser@5.48.0):
+  vitest@2.1.9(@types/node@22.20.0)(jsdom@25.0.1)(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(terser@5.48.0):
     dependencies:
       '@vitest/expect': 2.1.9
-      '@vitest/mocker': 2.1.9(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))
+      '@vitest/mocker': 2.1.9(msw@2.15.0(@types/node@22.20.0)(typescript@5.9.3))(vite@5.4.21(@types/node@22.20.0)(terser@5.48.0))
       '@vitest/pretty-format': 2.1.9
       '@vitest/runner': 2.1.9
       '@vitest/snapshot': 2.1.9
@@ -11451,6 +14598,7 @@ snapshots:
       why-is-node-running: 2.3.0
     optionalDependencies:
       '@types/node': 22.20.0
+      jsdom: 25.0.1
     transitivePeerDependencies:
       - less
       - lightningcss
@@ -11462,6 +14610,10 @@ snapshots:
       - supports-color
       - terser
 
+  w3c-xmlserializer@5.0.0:
+    dependencies:
+      xml-name-validator: 5.0.0
+
   watchpack@2.5.2:
     dependencies:
       graceful-fs: 4.2.11
@@ -11470,8 +14622,12 @@ snapshots:
     dependencies:
       defaults: 1.0.4
 
+  web-vitals@4.2.4: {}
+
   webidl-conversions@3.0.1: {}
 
+  webidl-conversions@7.0.0: {}
+
   webpack-node-externals@3.0.0: {}
 
   webpack-sources@3.5.1: {}
@@ -11554,11 +14710,103 @@ snapshots:
       - postcss
       - uglify-js
 
+  webpack@5.97.1(postcss@8.5.16):
+    dependencies:
+      '@types/eslint-scope': 3.7.7
+      '@types/estree': 1.0.9
+      '@webassemblyjs/ast': 1.14.1
+      '@webassemblyjs/wasm-edit': 1.14.1
+      '@webassemblyjs/wasm-parser': 1.14.1
+      acorn: 8.17.0
+      browserslist: 4.28.5
+      chrome-trace-event: 1.0.4
+      enhanced-resolve: 5.24.2
+      es-module-lexer: 1.7.0
+      eslint-scope: 5.1.1
+      events: 3.3.0
+      glob-to-regexp: 0.4.1
+      graceful-fs: 4.2.11
+      json-parse-even-better-errors: 2.3.1
+      loader-runner: 4.3.2
+      mime-types: 2.1.35
+      neo-async: 2.6.2
+      schema-utils: 3.3.0
+      tapable: 2.3.3
+      terser-webpack-plugin: 5.6.1(postcss@8.5.16)(webpack@5.97.1(postcss@8.5.16))
+      watchpack: 2.5.2
+      webpack-sources: 3.5.1
+    transitivePeerDependencies:
+      - '@minify-html/node'
+      - '@swc/core'
+      - '@swc/css'
+      - '@swc/html'
+      - clean-css
+      - cssnano
+      - csso
+      - esbuild
+      - html-minifier-terser
+      - lightningcss
+      - postcss
+      - uglify-js
+    optional: true
+
+  whatwg-encoding@3.1.1:
+    dependencies:
+      iconv-lite: 0.6.3
+
+  whatwg-mimetype@4.0.0: {}
+
+  whatwg-url@14.2.0:
+    dependencies:
+      tr46: 5.1.1
+      webidl-conversions: 7.0.0
+
   whatwg-url@5.0.0:
     dependencies:
       tr46: 0.0.3
       webidl-conversions: 3.0.1
 
+  which-boxed-primitive@1.1.1:
+    dependencies:
+      is-bigint: 1.1.0
+      is-boolean-object: 1.2.2
+      is-number-object: 1.1.1
+      is-string: 1.1.1
+      is-symbol: 1.1.1
+
+  which-builtin-type@1.2.1:
+    dependencies:
+      call-bound: 1.0.4
+      function.prototype.name: 1.2.0
+      has-tostringtag: 1.0.2
+      is-async-function: 2.1.1
+      is-date-object: 1.1.0
+      is-finalizationregistry: 1.1.1
+      is-generator-function: 1.1.2
+      is-regex: 1.2.1
+      is-weakref: 1.1.1
+      isarray: 2.0.5
+      which-boxed-primitive: 1.1.1
+      which-collection: 1.0.2
+      which-typed-array: 1.1.22
+
+  which-collection@1.0.2:
+    dependencies:
+      is-map: 2.0.3
+      is-set: 2.0.3
+      is-weakmap: 2.0.2
+      is-weakset: 2.0.4
+
+  which-typed-array@1.1.22:
+    dependencies:
+      available-typed-arrays: 1.0.7
+      call-bind: 1.0.9
+      call-bound: 1.0.4
+      for-each: 0.3.5
+      get-proto: 1.0.1
+      gopd: 1.2.0
+      has-tostringtag: 1.0.2
+
   which@2.0.2:
     dependencies:
       isexe: 2.0.0
@@ -11572,6 +14820,8 @@ snapshots:
     dependencies:
       string-width: 4.2.3
 
+  wonka@6.3.6: {}
+
   word-wrap@1.2.5: {}
 
   wordwrapjs@5.1.1: {}
@@ -11602,10 +14852,18 @@ snapshots:
 
   wrappy@1.0.2: {}
 
+  ws@8.21.0: {}
+
+  xml-name-validator@5.0.0: {}
+
+  xmlchars@2.2.0: {}
+
   xtend@4.0.2: {}
 
   y18n@5.0.8: {}
 
+  yallist@3.1.1: {}
+
   yallist@4.0.0: {}
 
   yaml@2.9.0: {}