From 8e2523d5553481dc64b73a5dc04d6e987eb8392b Mon Sep 17 00:00:00 2001
From: "Leon.Schmidt" <leonmauricewill15@gmail.com>
Date: Thu, 20 Aug 2026 20:52:36 +0200
Subject: [PATCH] ENH - rebuild admin panel as standalone editor

---
 frontend/src/App.vue                          |   33 +-
 frontend/src/assets/img/app-icons/admin.svg   |   22 -
 frontend/src/assets/main.css                  |   13 -
 .../components/AdminPanel.contract.test.ts    |  133 +
 frontend/src/components/AdminPanel.vue        | 2167 +++++++++++++++++
 frontend/src/config/apps.ts                   |   16 -
 frontend/src/stores/admin.ts                  |   14 +-
 frontend/src/stores/app-store.test.ts         |   10 +-
 frontend/src/stores/app-store.ts              |   20 +-
 frontend/src/stores/phone.ts                  |  278 ++-
 frontend/src/types/admin.ts                   |    1 +
 frontend/src/types/apps.ts                    |    1 -
 frontend/src/types/device.ts                  |    3 -
 frontend/src/utils/appStorePreviewImages.ts   |   10 +-
 frontend/src/utils/appStorePreviews.ts        |    2 +-
 frontend/src/utils/preferences.ts             |    1 -
 frontend/src/views/PhoneAppWindow.vue         |    2 +-
 .../src/views/apps/AdminApp.contract.test.ts  |  117 -
 frontend/src/views/apps/AdminApp.vue          | 1352 ----------
 frontend/src/views/apps/SettingsApp.vue       |    2 +-
 frontend/testserver/index.cjs                 |   31 +-
 sky_phone/config/locales/de.lua               |   27 +-
 sky_phone/config/locales/en.lua               |   27 +-
 sky_phone/source/client/focus.lua             |   20 +
 sky_phone/source/client/main.lua              |   70 +-
 sky_phone/source/client/nui_server_bridge.lua |    2 +-
 sky_phone/source/server/admin.lua             |  138 +-
 sky_phone/source/server/phone.lua             |   35 -
 28 files changed, 2786 insertions(+), 1761 deletions(-)
 delete mode 100644 frontend/src/assets/img/app-icons/admin.svg
 create mode 100644 frontend/src/components/AdminPanel.contract.test.ts
 create mode 100644 frontend/src/components/AdminPanel.vue
 delete mode 100644 frontend/src/views/apps/AdminApp.contract.test.ts
 delete mode 100644 frontend/src/views/apps/AdminApp.vue

diff --git a/frontend/src/App.vue b/frontend/src/App.vue
index fb24a2e..f82ba7c 100644
--- a/frontend/src/App.vue
+++ b/frontend/src/App.vue
@@ -11,6 +11,7 @@ import {
 import { useRoute, useRouter } from 'vue-router'
 
 import { SkyProvider } from '@/ui'
+import AdminPanel from '@/components/AdminPanel.vue'
 import PhoneHomeIndicator from '@/components/PhoneHomeIndicator.vue'
 import PhoneControlCenter from '@/components/PhoneControlCenter.vue'
 import PhoneDynamicIsland from '@/components/PhoneDynamicIsland.vue'
@@ -114,8 +115,13 @@ type AppMessage = {
     | CustomAppCatalogEventData
     | CustomAppEventData
     | NavigationEventData
+    | AdminPanelOpenPayload
 }
 
+type AdminPanelOpenPayload = Required<
+  Pick<PhoneOpenPayload, 'fallbackLocales' | 'lang' | 'locales'>
+>
+
 type CustomAppCatalogEventData = {
   apps?: unknown
 }
@@ -355,6 +361,9 @@ const appTransitionName = computed(() =>
   route.query.transition === 'app-switch' ? 'app-switch' : 'app-window',
 )
 const isLocked = ref(false)
+const adminPanelOpen = ref(
+  isDevelopment && developmentParameters.has('adminPanel'),
+)
 const springboardEditing = ref(false)
 const isUnlocking = ref(false)
 const passcodeBusy = ref(false)
@@ -518,10 +527,7 @@ function hydratePhone(payload: PhoneOpenPayload): void {
   clock.hydrate(payload.device?.data.alarms?.payload)
   games.hydrate(payload.device?.data.games?.payload)
   media.hydrate(payload.device?.data.media?.payload)
-  appStore.hydrate(
-    payload.device?.data.apps?.payload,
-    phone.permissions.adminPanel,
-  )
+  appStore.hydrate(payload.device?.data.apps?.payload)
   widgets.hydrate(payload.device?.data.widgets?.payload)
 }
 
@@ -723,7 +729,15 @@ function openDevelopmentPayphonePreview(): void {
 function onMessage(event: MessageEvent<AppMessage>): void {
   if (!isTrustedRootMessageSource(event.source, window)) return
 
-  if (event.data?.type === 'custom-apps:catalog') {
+  if (event.data?.type === 'admin:open') {
+    const data = event.data.data as AdminPanelOpenPayload | undefined
+    if (data?.lang && data.locales && data.fallbackLocales) {
+      phone.setLocale(data.lang, data.locales, data.fallbackLocales)
+    }
+    adminPanelOpen.value = true
+  } else if (event.data?.type === 'admin:close') {
+    adminPanelOpen.value = false
+  } else if (event.data?.type === 'custom-apps:catalog') {
     appCatalog.replaceCatalog(event.data.data)
     const catalogPayload = event.data.data as
       | { apps?: unknown; debug?: unknown }
@@ -1736,6 +1750,15 @@ onBeforeUnmount(() => {
 </script>
 
 <template>
+  <SkyProvider
+    v-if="adminPanelOpen"
+    dark
+    :safe-areas="false"
+    accent="#74d66f"
+    accent-soft="rgba(116, 214, 111, 0.14)"
+  >
+    <AdminPanel @close="adminPanelOpen = false" />
+  </SkyProvider>
   <PhoneMediaCapture />
   <PhoneMemoRecorder />
   <RadioHud />
diff --git a/frontend/src/assets/img/app-icons/admin.svg b/frontend/src/assets/img/app-icons/admin.svg
deleted file mode 100644
index d0512d3..0000000
--- a/frontend/src/assets/img/app-icons/admin.svg
+++ /dev/null
@@ -1,22 +0,0 @@
-<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 128 128">
-  <defs>
-    <linearGradient id="bg" x1="12" y1="8" x2="116" y2="120" gradientUnits="userSpaceOnUse">
-      <stop stop-color="#9b8cff"/>
-      <stop offset="0.52" stop-color="#5540d7"/>
-      <stop offset="1" stop-color="#17123f"/>
-    </linearGradient>
-    <radialGradient id="glow" cx="0" cy="0" r="1" gradientTransform="translate(102 20) rotate(132) scale(58)">
-      <stop stop-color="#67e8ff" stop-opacity=".95"/>
-      <stop offset="1" stop-color="#67e8ff" stop-opacity="0"/>
-    </radialGradient>
-    <filter id="shadow" x="20" y="16" width="88" height="102" filterUnits="userSpaceOnUse">
-      <feDropShadow dx="0" dy="7" stdDeviation="6" flood-color="#110b39" flood-opacity=".48"/>
-    </filter>
-  </defs>
-  <rect width="128" height="128" rx="30" fill="url(#bg)"/>
-  <rect width="128" height="128" rx="30" fill="url(#glow)"/>
-  <path d="M64 25 96 38v22c0 21-12 36-32 44-20-8-32-23-32-44V38l32-13Z" fill="#0f1532" fill-opacity=".78" stroke="#fff" stroke-width="5" stroke-linejoin="round" filter="url(#shadow)"/>
-  <path d="m48 64 10 10 22-25" fill="none" stroke="#72ecff" stroke-width="8" stroke-linecap="round" stroke-linejoin="round"/>
-  <circle cx="102" cy="29" r="5" fill="#fff" fill-opacity=".9"/>
-  <circle cx="24" cy="92" r="4" fill="#8ff5ff" fill-opacity=".7"/>
-</svg>
diff --git a/frontend/src/assets/main.css b/frontend/src/assets/main.css
index edfbd04..6d7181a 100644
--- a/frontend/src/assets/main.css
+++ b/frontend/src/assets/main.css
@@ -1288,19 +1288,6 @@ button {
 .app-icon--darkchat {
   background: #050507;
 }
-.app-icon--admin {
-  background:
-    radial-gradient(
-      circle at 72% 18%,
-      rgba(66, 220, 255, 0.8),
-      transparent 22%
-    ),
-    linear-gradient(145deg, #8b7bff, #3423a6 70%);
-  color: #fff;
-  box-shadow:
-    inset 0 0 0 1px rgba(255, 255, 255, 0.22),
-    0 8px 22px rgba(80, 57, 210, 0.35);
-}
 .darkchat-page {
   --dc-purple: #8b5cf6;
   --dc-purple-dark: #5b21b6;
diff --git a/frontend/src/components/AdminPanel.contract.test.ts b/frontend/src/components/AdminPanel.contract.test.ts
new file mode 100644
index 0000000..0832f07
--- /dev/null
+++ b/frontend/src/components/AdminPanel.contract.test.ts
@@ -0,0 +1,133 @@
+import { readFileSync } from 'node:fs'
+
+import { describe, expect, it } from 'vitest'
+
+const source = readFileSync(
+  new URL('./AdminPanel.vue', import.meta.url),
+  'utf8',
+)
+const app = readFileSync(new URL('../App.vue', import.meta.url), 'utf8')
+const apps = readFileSync(new URL('../config/apps.ts', import.meta.url), 'utf8')
+const store = readFileSync(
+  new URL('../stores/admin.ts', import.meta.url),
+  'utf8',
+)
+const server = readFileSync(
+  new URL('../../../sky_phone/source/server/admin.lua', import.meta.url),
+  'utf8',
+)
+const phoneServer = readFileSync(
+  new URL('../../../sky_phone/source/server/phone.lua', import.meta.url),
+  'utf8',
+)
+const phoneClient = readFileSync(
+  new URL('../../../sky_phone/source/client/main.lua', import.meta.url),
+  'utf8',
+)
+const focusClient = readFileSync(
+  new URL('../../../sky_phone/source/client/focus.lua', import.meta.url),
+  'utf8',
+)
+const bridge = readFileSync(
+  new URL(
+    '../../../sky_phone/source/client/nui_server_bridge.lua',
+    import.meta.url,
+  ),
+  'utf8',
+)
+const config = readFileSync(
+  new URL('../../../sky_phone/config/config.lua', import.meta.url),
+  'utf8',
+)
+const schema = readFileSync(
+  new URL('../../../sky_phone/sql/install.sql', import.meta.url),
+  'utf8',
+)
+
+describe('standalone admin panel contracts', () => {
+  it('renders as a dedicated full-screen editor outside the phone shell', () => {
+    expect(apps).not.toContain("id: 'admin'")
+    expect(app).toContain("event.data?.type === 'admin:open'")
+    expect(app).toContain('v-if="adminPanelOpen"')
+    expect(app).toContain('<AdminPanel')
+    expect(source).toContain("import { SkyButton } from '@/ui'")
+    expect(source).toContain('class="admin-panel-overlay"')
+    expect(source).toContain('class="admin-panel-rail"')
+    expect(source).toContain('class="admin-panel-directory"')
+    expect(source).toContain('class="admin-panel-editor"')
+    expect(source).toContain('pointer-events: auto')
+    expect(source).toContain('@media (prefers-reduced-motion: reduce)')
+  })
+
+  it('stages app changes locally and saves them only from the toolbar action', () => {
+    expect(source).toContain('const drafts = ref<')
+    expect(source).toContain('@click="saveChanges"')
+    expect(source).toContain("t('editor.noAutoSave')")
+    expect(store).toContain("'admin:save-apps'")
+    expect(store).not.toContain("'admin:set-app'")
+    expect(server).toContain(
+      'Bridge.Callbacks.Register("sky_phone:admin:save-apps"',
+    )
+  })
+
+  it('connects every operation through the standard NUI callback bridge', () => {
+    expect(bridge).toContain(
+      'admin = [[bootstrap player save-apps reveal-password]]',
+    )
+    for (const endpoint of [
+      'admin:bootstrap',
+      'admin:player',
+      'admin:save-apps',
+      'admin:reveal-password',
+    ]) {
+      expect(store).toContain(endpoint)
+    }
+  })
+
+  it('authorizes every server request without requiring a phone session', () => {
+    expect(server).not.toContain('SkyPhone.RequireSession(source)')
+    expect(server).toContain(
+      'Bridge.Framework.HasAdminGroup(source, Config.AdminPanel.AdminGroups)',
+    )
+    expect(server).toContain('Config.AdminPanel.ReadRequestsPerMinute')
+    expect(server).toContain('Config.AdminPanel.ActionRequestsPerMinute')
+    expect(server).toContain('Config.AdminPanel.CredentialRevealsPerMinute')
+    expect(config).toContain('Config.AdminPanel = {')
+  })
+
+  it('opens directly from the configurable command with dedicated focus', () => {
+    expect(config).toContain('Command = "phoneadmin"')
+    expect(server).toContain(
+      'RegisterCommand(Config.AdminPanel.Command, function(command_source)',
+    )
+    expect(server).toContain(
+      'TriggerClientEvent("sky_phone:admin:launch", player_source)',
+    )
+    expect(phoneServer).not.toContain(
+      'RegisterCommand(Config.AdminPanel.Command',
+    )
+    expect(phoneClient).toContain('RegisterNetEvent("sky_phone:admin:launch"')
+    expect(phoneClient).toContain('SkyPhoneFocus.SetAdminPanel(true)')
+    expect(focusClient).toContain('function SkyPhoneFocus.SetAdminPanel(open)')
+  })
+
+  it('validates ownership, app policy, and revision before a batch mutation', () => {
+    expect(server).toContain('find_owned_device(target_source, data.imei)')
+    expect(server).toContain('app_metadata(change.appId)')
+    expect(server).toContain('error = "device_not_owned"')
+    expect(server).toContain('error = "app_protected"')
+    expect(server).toContain('AND `revision` = ?')
+    expect(server).toContain('SkyPhone.RefreshDevice(data.imei)')
+  })
+
+  it('gates plaintext account reveals behind confirmation and audit logging', () => {
+    expect(source).toContain('revealDialogImei')
+    expect(source).toContain("t('credentials.revealTitle')")
+    expect(server).toContain('"reveal_account_password"')
+    expect(server).toContain('write_audit(')
+    expect(server).not.toContain('passcode_hash` AS')
+    expect(schema).toContain(
+      'CREATE TABLE IF NOT EXISTS `sky_phone_admin_audit`',
+    )
+  })
+})
diff --git a/frontend/src/components/AdminPanel.vue b/frontend/src/components/AdminPanel.vue
new file mode 100644
index 0000000..ee05e50
--- /dev/null
+++ b/frontend/src/components/AdminPanel.vue
@@ -0,0 +1,2167 @@
+<script setup lang="ts">
+import {
+  BadgeDollarSign,
+  BriefcaseBusiness,
+  Check,
+  ChevronRight,
+  CircleUserRound,
+  Clipboard,
+  Database,
+  Eye,
+  HardDrive,
+  KeyRound,
+  LayoutDashboard,
+  LoaderCircle,
+  LockKeyhole,
+  RefreshCw,
+  Save,
+  ScrollText,
+  Search,
+  ShieldCheck,
+  Smartphone,
+  TriangleAlert,
+  UsersRound,
+  WalletCards,
+  Wifi,
+  X,
+} from 'lucide-vue-next'
+import { computed, onBeforeUnmount, onMounted, ref, watch } from 'vue'
+
+import {
+  DEFAULT_INSTALLED_PHONE_APP_IDS,
+  getPhoneApp,
+  getPhoneAppLabel,
+  isExternalPhoneApp,
+  isLaunchablePhoneApp,
+  isPhoneAppRemovable,
+  PHONE_APPS,
+} from '@/config/apps'
+import { useAdminStore } from '@/stores/admin'
+import { usePhoneStore } from '@/stores/phone'
+import type { AdminAuditEntry, AdminDevice } from '@/types/admin'
+import type { LaunchablePhoneAppDefinition } from '@/types/apps'
+import { SkyButton } from '@/ui'
+import { copyText } from '@/utils/clipboard'
+import { parseDatabaseDate } from '@/utils/date'
+import { nuiCall } from '@/utils/nui'
+
+type AdminTab = 'players' | 'audit'
+type PendingAction =
+  | { kind: 'close' }
+  | { kind: 'player'; source: number }
+  | { kind: 'refresh' }
+  | { kind: 'tab'; tab: AdminTab }
+
+const emit = defineEmits<{ close: [] }>()
+const admin = useAdminStore()
+const phone = usePhoneStore()
+const tab = ref<AdminTab>('players')
+const playerQuery = ref('')
+const appQuery = ref('')
+const selectedImei = ref('')
+const drafts = ref<Record<string, Record<string, boolean>>>({})
+const saving = ref(false)
+const revealDialogImei = ref('')
+const discardDialog = ref(false)
+const pendingAction = ref<PendingAction | null>(null)
+const toast = ref('')
+const toastTone = ref<'error' | 'success'>('success')
+let toastTimer: number | undefined
+
+const filteredPlayers = computed(() => {
+  const needle = playerQuery.value.trim().toLocaleLowerCase(phone.lang)
+  if (!needle) return admin.players
+  return admin.players.filter((player) =>
+    [
+      player.name,
+      player.serverName,
+      player.source,
+      player.identifier,
+      player.job,
+      player.phoneNumber ?? '',
+    ]
+      .join(' ')
+      .toLocaleLowerCase(phone.lang)
+      .includes(needle),
+  )
+})
+
+const selectedDevice = computed(() => {
+  const devices = admin.selectedPlayer?.devices ?? []
+  return (
+    devices.find((device) => device.imei === selectedImei.value) ??
+    devices[0] ??
+    null
+  )
+})
+
+const manageableApps = computed(() => {
+  const needle = appQuery.value.trim().toLocaleLowerCase(phone.lang)
+  return PHONE_APPS.filter(
+    (app): app is LaunchablePhoneAppDefinition =>
+      isLaunchablePhoneApp(app) && !app.adminOnly,
+  )
+    .filter(
+      (app) =>
+        !needle ||
+        getPhoneAppLabel(app, phone.t)
+          .toLocaleLowerCase(phone.lang)
+          .includes(needle),
+    )
+    .sort((left, right) =>
+      getPhoneAppLabel(left, phone.t).localeCompare(
+        getPhoneAppLabel(right, phone.t),
+        phone.lang,
+      ),
+    )
+})
+
+const pendingCount = computed(() =>
+  Object.values(drafts.value).reduce(
+    (total, changes) => total + Object.keys(changes).length,
+    0,
+  ),
+)
+const hasChanges = computed(() => pendingCount.value > 0)
+const selectedDeviceChanges = computed(() =>
+  selectedDevice.value
+    ? Object.keys(drafts.value[selectedDevice.value.imei] ?? {}).length
+    : 0,
+)
+const revealedCredential = computed(() =>
+  selectedDevice.value
+    ? admin.revealedCredentials[selectedDevice.value.imei]
+    : undefined,
+)
+
+watch(
+  () => admin.selectedPlayer,
+  (player) => {
+    if (!player?.devices.some((device) => device.imei === selectedImei.value)) {
+      selectedImei.value = player?.devices[0]?.imei ?? ''
+    }
+  },
+)
+
+function t(key: string, params?: Record<string, string>): string {
+  return phone.t('AdminPanel.' + key, params)
+}
+
+function showToast(
+  message: string,
+  tone: 'error' | 'success' = 'success',
+): void {
+  if (toastTimer) window.clearTimeout(toastTimer)
+  toast.value = message
+  toastTone.value = tone
+  toastTimer = window.setTimeout(() => (toast.value = ''), 2800)
+}
+
+function formatMoney(value: number, currency: string): string {
+  const formatted = new Intl.NumberFormat(phone.lang, {
+    maximumFractionDigits: 0,
+  }).format(value)
+  return `${currency}${formatted}`
+}
+
+function formatDate(value: string): string {
+  const date = parseDatabaseDate(value)
+  return Number.isNaN(date.getTime())
+    ? value
+    : new Intl.DateTimeFormat(phone.lang, {
+        dateStyle: 'medium',
+        timeStyle: 'short',
+      }).format(date)
+}
+
+function initials(name: string): string {
+  return name
+    .split(/\s+/)
+    .filter(Boolean)
+    .slice(0, 2)
+    .map((part) => part.charAt(0).toLocaleUpperCase(phone.lang))
+    .join('')
+}
+
+function baseInstalled(
+  device: AdminDevice,
+  app: LaunchablePhoneAppDefinition,
+): boolean {
+  if (device.apps.uninstalled.includes(app.id)) return false
+  if (device.apps.claimed.includes(app.id)) return true
+  return isExternalPhoneApp(app)
+    ? app.defaultInstalled
+    : DEFAULT_INSTALLED_PHONE_APP_IDS.has(app.id)
+}
+
+function isInstalled(
+  device: AdminDevice,
+  app: LaunchablePhoneAppDefinition,
+): boolean {
+  const deviceDraft = drafts.value[device.imei]
+  return deviceDraft &&
+    Object.prototype.hasOwnProperty.call(deviceDraft, app.id)
+    ? deviceDraft[app.id]
+    : baseInstalled(device, app)
+}
+
+function toggleApp(app: LaunchablePhoneAppDefinition): void {
+  const device = selectedDevice.value
+  if (!device) return
+  const nextInstalled = !isInstalled(device, app)
+  if (!nextInstalled && !isPhoneAppRemovable(app)) return
+
+  const deviceDraft = drafts.value[device.imei] ?? {}
+  if (nextInstalled === baseInstalled(device, app)) {
+    delete deviceDraft[app.id]
+  } else {
+    deviceDraft[app.id] = nextInstalled
+  }
+  if (Object.keys(deviceDraft).length) drafts.value[device.imei] = deviceDraft
+  else delete drafts.value[device.imei]
+}
+
+function errorText(error = admin.error): string {
+  return t('errors.' + (error || 'default'))
+}
+
+async function loadPlayer(source: number): Promise<void> {
+  if (await admin.openPlayer(source)) return
+  showToast(errorText(), 'error')
+}
+
+async function refreshData(): Promise<void> {
+  const selectedSource = admin.selectedPlayer?.source
+  if (!(await admin.load())) {
+    showToast(errorText(), 'error')
+    return
+  }
+  const nextSource =
+    admin.players.find((player) => player.source === selectedSource)?.source ??
+    admin.players[0]?.source
+  if (nextSource) await loadPlayer(nextSource)
+}
+
+function queueAction(action: PendingAction): void {
+  if (!hasChanges.value) {
+    void runAction(action)
+    return
+  }
+  pendingAction.value = action
+  discardDialog.value = true
+}
+
+async function runAction(action: PendingAction): Promise<void> {
+  if (action.kind === 'close') {
+    const response = await nuiCall('admin:close')
+    if (response.success) emit('close')
+    else showToast(errorText(response.error), 'error')
+    return
+  }
+  if (action.kind === 'refresh') {
+    await refreshData()
+    return
+  }
+  if (action.kind === 'tab') {
+    tab.value = action.tab
+    return
+  }
+  await loadPlayer(action.source)
+}
+
+async function discardAndContinue(): Promise<void> {
+  const action = pendingAction.value
+  drafts.value = {}
+  pendingAction.value = null
+  discardDialog.value = false
+  if (action) await runAction(action)
+}
+
+function cancelDiscard(): void {
+  discardDialog.value = false
+  pendingAction.value = null
+}
+
+async function saveChanges(): Promise<void> {
+  const player = admin.selectedPlayer
+  if (!player || !hasChanges.value || saving.value) return
+  saving.value = true
+  const pendingDevices = Object.entries(drafts.value)
+  for (const [imei, deviceChanges] of pendingDevices) {
+    const device = admin.selectedPlayer?.devices.find(
+      (candidate) => candidate.imei === imei,
+    )
+    if (!device) {
+      saving.value = false
+      showToast(t('editor.saveFailed'), 'error')
+      return
+    }
+    const changes = Object.entries(deviceChanges).map(([appId, installed]) => ({
+      appId,
+      installed,
+    }))
+    const response = await admin.saveApps(
+      player.source,
+      imei,
+      device.apps.revision,
+      changes,
+    )
+    if (!response.success) {
+      saving.value = false
+      showToast(errorText(response.error), 'error')
+      return
+    }
+    delete drafts.value[imei]
+  }
+  saving.value = false
+  await admin.load()
+  showToast(t('editor.saved'))
+}
+
+async function revealPassword(): Promise<void> {
+  const player = admin.selectedPlayer
+  const imei = revealDialogImei.value
+  revealDialogImei.value = ''
+  if (!player || !imei) return
+  const response = await admin.revealPassword(player.source, imei)
+  if (!response.success) showToast(errorText(response.error), 'error')
+}
+
+async function copyPassword(): Promise<void> {
+  if (!revealedCredential.value) return
+  if (await copyText(revealedCredential.value.password)) {
+    showToast(t('credentials.copied'))
+  }
+}
+
+function auditDescription(entry: AdminAuditEntry): string {
+  const appId =
+    typeof entry.details.appId === 'string' ? entry.details.appId : ''
+  const app = appId ? getPhoneApp(appId) : undefined
+  return app
+    ? getPhoneAppLabel(app, phone.t)
+    : typeof entry.details.email === 'string'
+      ? entry.details.email
+      : entry.deviceImei || entry.targetIdentifier
+}
+
+function onKeydown(event: KeyboardEvent): void {
+  if (event.key !== 'Escape') return
+  event.preventDefault()
+  if (revealDialogImei.value) {
+    revealDialogImei.value = ''
+    return
+  }
+  if (discardDialog.value) {
+    discardDialog.value = false
+    pendingAction.value = null
+    return
+  }
+  queueAction({ kind: 'close' })
+}
+
+onMounted(() => {
+  document.addEventListener('keydown', onKeydown)
+  void refreshData()
+})
+
+onBeforeUnmount(() => {
+  document.removeEventListener('keydown', onKeydown)
+  if (toastTimer) window.clearTimeout(toastTimer)
+})
+</script>
+
+<template>
+  <div class="admin-panel-overlay" role="dialog" :aria-label="t('name')">
+    <div class="admin-panel-window">
+      <header class="admin-panel-header">
+        <div class="admin-panel-brand">
+          <span class="admin-panel-brand__mark"
+            ><ShieldCheck :size="19"
+          /></span>
+          <div>
+            <strong>{{ t('editor.brand') }}</strong>
+            <span>{{ t('editor.workspace') }}</span>
+          </div>
+        </div>
+
+        <div class="admin-panel-context">
+          <span class="admin-panel-context__path">
+            {{ tab === 'players' ? t('editor.players') : t('editor.audit') }}
+          </span>
+          <ChevronRight :size="14" />
+          <strong>{{
+            admin.selectedPlayer?.name || t('editor.noSelection')
+          }}</strong>
+        </div>
+
+        <div class="admin-panel-actions">
+          <span v-if="hasChanges" class="admin-panel-dirty">
+            <span></span>{{ t('editor.unsaved') }} · {{ pendingCount }}
+          </span>
+          <button
+            type="button"
+            class="admin-panel-icon-button"
+            :aria-label="t('editor.refresh')"
+            :title="t('editor.refresh')"
+            :disabled="admin.loading || saving"
+            @click="queueAction({ kind: 'refresh' })"
+          >
+            <RefreshCw :size="17" :class="{ 'is-spinning': admin.loading }" />
+          </button>
+          <button
+            type="button"
+            class="admin-panel-save"
+            :class="{ 'is-ready': hasChanges }"
+            :aria-label="t('editor.save')"
+            :title="hasChanges ? t('editor.saveHint') : t('editor.save')"
+            :disabled="!hasChanges || saving"
+            @click="saveChanges"
+          >
+            <LoaderCircle v-if="saving" :size="18" class="is-spinning" />
+            <Check v-else :size="19" stroke-width="3" />
+          </button>
+          <button
+            type="button"
+            class="admin-panel-icon-button admin-panel-close"
+            :aria-label="t('editor.close')"
+            :title="t('editor.close')"
+            @click="queueAction({ kind: 'close' })"
+          >
+            <X :size="18" />
+          </button>
+        </div>
+      </header>
+
+      <div class="admin-panel-body">
+        <nav class="admin-panel-rail" :aria-label="t('navigation')">
+          <button
+            type="button"
+            :class="{ 'is-active': tab === 'players' }"
+            :aria-label="t('tabs.players')"
+            :title="t('tabs.players')"
+            @click="queueAction({ kind: 'tab', tab: 'players' })"
+          >
+            <UsersRound :size="19" />
+          </button>
+          <button
+            type="button"
+            :class="{ 'is-active': tab === 'audit' }"
+            :aria-label="t('tabs.audit')"
+            :title="t('tabs.audit')"
+            @click="queueAction({ kind: 'tab', tab: 'audit' })"
+          >
+            <ScrollText :size="19" />
+          </button>
+          <div class="admin-panel-rail__spacer"></div>
+          <span class="admin-panel-live" :title="t('players.online')">
+            <span></span>{{ t('editor.online') }}
+          </span>
+        </nav>
+
+        <aside class="admin-panel-directory">
+          <template v-if="tab === 'players'">
+            <div class="admin-panel-directory__header">
+              <div>
+                <span>{{ t('players.eyebrow') }}</span>
+                <h2>{{ t('players.title') }}</h2>
+              </div>
+              <strong>{{ filteredPlayers.length }}</strong>
+            </div>
+            <label class="admin-panel-search">
+              <Search :size="16" />
+              <input
+                v-model="playerQuery"
+                type="search"
+                :placeholder="t('search.players')"
+                :aria-label="t('search.players')"
+              />
+            </label>
+
+            <div class="admin-panel-player-list">
+              <button
+                v-for="player in filteredPlayers"
+                :key="player.source"
+                type="button"
+                :class="{
+                  'is-active': admin.selectedPlayer?.source === player.source,
+                }"
+                @click="queueAction({ kind: 'player', source: player.source })"
+              >
+                <span class="admin-panel-avatar">{{
+                  initials(player.name)
+                }}</span>
+                <span class="admin-panel-player-list__copy">
+                  <strong>{{ player.name }}</strong>
+                  <small>{{ player.job }} · ID {{ player.source }}</small>
+                </span>
+                <span class="admin-panel-player-list__meta">
+                  <span class="admin-panel-online-dot"></span>
+                  {{ player.deviceCount }}
+                </span>
+              </button>
+
+              <div
+                v-if="!filteredPlayers.length"
+                class="admin-panel-empty-list"
+              >
+                <UsersRound :size="26" />
+                <strong>{{ t('players.empty') }}</strong>
+                <span>{{ t('players.emptyBody') }}</span>
+              </div>
+            </div>
+          </template>
+
+          <template v-else>
+            <div class="admin-panel-directory__header">
+              <div>
+                <span>{{ t('audit.eyebrow') }}</span>
+                <h2>{{ t('audit.title') }}</h2>
+              </div>
+              <strong>{{ admin.audit.length }}</strong>
+            </div>
+            <div class="admin-panel-audit-mini-list">
+              <article v-for="entry in admin.audit" :key="entry.id">
+                <span class="admin-panel-audit-icon"
+                  ><ScrollText :size="15"
+                /></span>
+                <div>
+                  <strong>{{ t('audit.actions.' + entry.action) }}</strong>
+                  <span>{{ entry.actorName }}</span>
+                  <small>{{ formatDate(entry.createdAt) }}</small>
+                </div>
+              </article>
+            </div>
+          </template>
+        </aside>
+
+        <main class="admin-panel-editor">
+          <div
+            v-if="admin.loading && !admin.initialized"
+            class="admin-panel-loading"
+          >
+            <LoaderCircle :size="26" class="is-spinning" />
+            <span>{{ t('loading') }}</span>
+          </div>
+
+          <section
+            v-else-if="tab === 'audit'"
+            class="admin-panel-editor__scroll"
+          >
+            <div class="admin-panel-page-heading">
+              <div class="admin-panel-heading-icon">
+                <ScrollText :size="23" />
+              </div>
+              <div>
+                <span>{{ t('audit.eyebrow') }}</span>
+                <h1>{{ t('audit.title') }}</h1>
+                <p>{{ t('audit.body') }}</p>
+              </div>
+            </div>
+            <div v-if="admin.audit.length" class="admin-panel-audit-grid">
+              <article v-for="entry in admin.audit" :key="entry.id">
+                <div class="admin-panel-audit-grid__topline">
+                  <span>{{ t('audit.actions.' + entry.action) }}</span>
+                  <time>{{ formatDate(entry.createdAt) }}</time>
+                </div>
+                <strong>{{ auditDescription(entry) }}</strong>
+                <p>
+                  {{
+                    t('audit.by', {
+                      actor: entry.actorName,
+                      target: String(entry.targetSource ?? '—'),
+                    })
+                  }}
+                </p>
+              </article>
+            </div>
+            <div v-else class="admin-panel-empty-editor">
+              <ScrollText :size="34" />
+              <h2>{{ t('audit.empty') }}</h2>
+              <p>{{ t('audit.emptyBody') }}</p>
+            </div>
+          </section>
+
+          <section
+            v-else-if="admin.selectedPlayer"
+            class="admin-panel-editor__scroll"
+          >
+            <div class="admin-panel-profile-heading">
+              <span class="admin-panel-profile-avatar">
+                {{ initials(admin.selectedPlayer.name) }}
+              </span>
+              <div>
+                <span>{{ t('detail.character') }}</span>
+                <h1>{{ admin.selectedPlayer.name }}</h1>
+                <p>{{ admin.selectedPlayer.serverName }}</p>
+              </div>
+              <div class="admin-panel-profile-heading__status">
+                <span><span></span>{{ t('players.online') }}</span>
+                <strong>ID {{ admin.selectedPlayer.source }}</strong>
+              </div>
+            </div>
+
+            <div
+              class="admin-panel-device-tabs"
+              :aria-label="t('devices.choose')"
+            >
+              <button
+                v-for="device in admin.selectedPlayer.devices"
+                :key="device.imei"
+                type="button"
+                :class="{
+                  'is-active': device.imei === selectedDevice?.imei,
+                  'is-dirty': Boolean(
+                    Object.keys(drafts[device.imei] ?? {}).length,
+                  ),
+                }"
+                @click="selectedImei = device.imei"
+              >
+                <Smartphone :size="16" />
+                <span>{{ device.name }}</span>
+                <small>{{ device.number || device.imei.slice(-4) }}</small>
+              </button>
+            </div>
+
+            <div class="admin-panel-stat-grid">
+              <article>
+                <WalletCards :size="18" />
+                <span>{{ t('detail.cash') }}</span>
+                <strong>{{
+                  formatMoney(
+                    admin.selectedPlayer.money.cash,
+                    admin.selectedPlayer.money.currency,
+                  )
+                }}</strong>
+              </article>
+              <article>
+                <BadgeDollarSign :size="18" />
+                <span>{{ t('detail.bank') }}</span>
+                <strong>{{
+                  formatMoney(
+                    admin.selectedPlayer.money.bank,
+                    admin.selectedPlayer.money.currency,
+                  )
+                }}</strong>
+              </article>
+              <article>
+                <BriefcaseBusiness :size="18" />
+                <span>{{ t('detail.job') }}</span>
+                <strong>{{
+                  admin.selectedPlayer.job.label ||
+                  admin.selectedPlayer.job.name
+                }}</strong>
+              </article>
+              <article>
+                <Wifi :size="18" />
+                <span>{{ t('detail.duty') }}</span>
+                <strong>{{
+                  admin.selectedPlayer.job.onDuty
+                    ? t('detail.onDuty')
+                    : t('detail.offDuty')
+                }}</strong>
+              </article>
+            </div>
+
+            <div class="admin-panel-section-grid">
+              <article class="admin-panel-section-card">
+                <div class="admin-panel-section-card__heading">
+                  <div>
+                    <span>{{ t('editor.profile') }}</span>
+                    <h2>{{ t('detail.playerData') }}</h2>
+                  </div>
+                  <CircleUserRound :size="20" />
+                </div>
+                <dl class="admin-panel-field-list">
+                  <div>
+                    <dt>{{ t('detail.identifier') }}</dt>
+                    <dd>{{ admin.selectedPlayer.identifier }}</dd>
+                  </div>
+                  <div>
+                    <dt>{{ t('detail.birthdate') }}</dt>
+                    <dd>
+                      {{
+                        admin.selectedPlayer.birthdate || t('detail.unknown')
+                      }}
+                    </dd>
+                  </div>
+                  <div>
+                    <dt>{{ t('detail.grade') }}</dt>
+                    <dd>
+                      {{ admin.selectedPlayer.job.grade }} ·
+                      {{
+                        admin.selectedPlayer.job.gradeLabel ||
+                        t('detail.unknown')
+                      }}
+                    </dd>
+                  </div>
+                </dl>
+              </article>
+
+              <article class="admin-panel-section-card">
+                <div class="admin-panel-section-card__heading">
+                  <div>
+                    <span>{{ t('editor.device') }}</span>
+                    <h2>{{ t('devices.title') }}</h2>
+                  </div>
+                  <HardDrive :size="20" />
+                </div>
+                <div v-if="selectedDevice" class="admin-panel-device-summary">
+                  <span class="admin-panel-device-summary__icon">
+                    <Smartphone :size="23" />
+                  </span>
+                  <div>
+                    <strong>{{ selectedDevice.name }}</strong>
+                    <span>{{
+                      selectedDevice.number || t('devices.noNumber')
+                    }}</span>
+                  </div>
+                  <small>{{
+                    selectedDevice.simType || t('devices.noSim')
+                  }}</small>
+                </div>
+                <dl v-if="selectedDevice" class="admin-panel-field-list">
+                  <div>
+                    <dt>{{ t('devices.imei') }}</dt>
+                    <dd>{{ selectedDevice.imei }}</dd>
+                  </div>
+                  <div>
+                    <dt>{{ t('devices.updated') }}</dt>
+                    <dd>{{ formatDate(selectedDevice.updatedAt) }}</dd>
+                  </div>
+                </dl>
+                <div v-else class="admin-panel-inline-empty">
+                  {{ t('devices.emptyBody') }}
+                </div>
+              </article>
+            </div>
+
+            <article v-if="selectedDevice" class="admin-panel-section-card">
+              <div class="admin-panel-section-card__heading">
+                <div>
+                  <span>{{ t('editor.security') }}</span>
+                  <h2>{{ t('credentials.title') }}</h2>
+                </div>
+                <KeyRound :size="20" />
+              </div>
+              <div class="admin-panel-security-grid">
+                <div class="admin-panel-credential-box">
+                  <span>{{ t('credentials.email') }}</span>
+                  <strong>{{
+                    selectedDevice.account?.email || t('credentials.noAccount')
+                  }}</strong>
+                </div>
+                <div class="admin-panel-credential-box">
+                  <span>{{ t('credentials.password') }}</span>
+                  <strong class="admin-panel-password">
+                    {{ revealedCredential?.password || '••••••••••••' }}
+                  </strong>
+                  <button
+                    v-if="selectedDevice.account && !revealedCredential"
+                    type="button"
+                    :disabled="
+                      admin.actionKey === selectedDevice.imei + ':password'
+                    "
+                    @click="revealDialogImei = selectedDevice.imei"
+                  >
+                    <Eye :size="15" />{{ t('credentials.reveal') }}
+                  </button>
+                  <button
+                    v-else-if="revealedCredential"
+                    type="button"
+                    @click="copyPassword"
+                  >
+                    <Clipboard :size="15" />{{ t('credentials.copy') }}
+                  </button>
+                </div>
+                <div
+                  class="admin-panel-credential-box admin-panel-credential-box--pin"
+                >
+                  <LockKeyhole :size="18" />
+                  <div>
+                    <span>{{ t('credentials.passcode') }}</span>
+                    <strong>{{
+                      selectedDevice.security.enabled
+                        ? t('credentials.passcodeHashed', {
+                            length: String(selectedDevice.security.length ?? 0),
+                          })
+                        : t('credentials.passcodeDisabled')
+                    }}</strong>
+                  </div>
+                </div>
+              </div>
+            </article>
+
+            <article v-if="selectedDevice" class="admin-panel-section-card">
+              <div
+                class="admin-panel-section-card__heading admin-panel-app-heading"
+              >
+                <div>
+                  <span>{{ t('apps.eyebrow') }}</span>
+                  <h2>{{ t('apps.title') }}</h2>
+                  <p>{{ t('apps.description') }}</p>
+                </div>
+                <div class="admin-panel-app-heading__actions">
+                  <span v-if="selectedDeviceChanges">
+                    {{
+                      t('apps.changes', {
+                        count: String(selectedDeviceChanges),
+                      })
+                    }}
+                  </span>
+                  <label class="admin-panel-search admin-panel-search--apps">
+                    <Search :size="15" />
+                    <input
+                      v-model="appQuery"
+                      type="search"
+                      :placeholder="t('search.apps')"
+                      :aria-label="t('search.apps')"
+                    />
+                  </label>
+                </div>
+              </div>
+
+              <div class="admin-panel-manual-save-note">
+                <Save :size="17" />
+                <div>
+                  <strong>{{ t('editor.noAutoSave') }}</strong>
+                  <span>{{ t('editor.noAutoSaveBody') }}</span>
+                </div>
+              </div>
+
+              <div class="admin-panel-app-grid">
+                <button
+                  v-for="app in manageableApps"
+                  :key="app.id"
+                  type="button"
+                  :class="{
+                    'is-enabled': isInstalled(selectedDevice, app),
+                    'is-dirty': Object.prototype.hasOwnProperty.call(
+                      drafts[selectedDevice.imei] ?? {},
+                      app.id,
+                    ),
+                  }"
+                  :disabled="
+                    isInstalled(selectedDevice, app) &&
+                    !isPhoneAppRemovable(app)
+                  "
+                  @click="toggleApp(app)"
+                >
+                  <span class="admin-panel-app-icon" :class="app.iconClass">
+                    <component :is="app.icon" :size="18" />
+                  </span>
+                  <span class="admin-panel-app-copy">
+                    <strong>{{ getPhoneAppLabel(app, phone.t) }}</strong>
+                    <small>{{
+                      !isPhoneAppRemovable(app)
+                        ? t('apps.protected')
+                        : isInstalled(selectedDevice, app)
+                          ? t('apps.installed')
+                          : t('apps.available')
+                    }}</small>
+                  </span>
+                  <span class="admin-panel-switch" aria-hidden="true">
+                    <span></span>
+                  </span>
+                </button>
+              </div>
+            </article>
+          </section>
+
+          <section v-else class="admin-panel-empty-editor">
+            <span class="admin-panel-empty-editor__icon">
+              <LayoutDashboard :size="34" />
+            </span>
+            <span>{{ t('overview.eyebrow') }}</span>
+            <h1>{{ t('overview.title') }}</h1>
+            <p>{{ t('editor.selectPlayer') }}</p>
+            <div class="admin-panel-empty-stats">
+              <article>
+                <UsersRound :size="18" />
+                <strong>{{ admin.stats.online }}</strong>
+                <span>{{ t('overview.online') }}</span>
+              </article>
+              <article>
+                <Smartphone :size="18" />
+                <strong>{{ admin.stats.devices }}</strong>
+                <span>{{ t('overview.devices') }}</span>
+              </article>
+              <article>
+                <Database :size="18" />
+                <strong>{{ admin.stats.accounts }}</strong>
+                <span>{{ t('overview.accounts') }}</span>
+              </article>
+            </div>
+          </section>
+        </main>
+      </div>
+    </div>
+
+    <Transition name="admin-toast">
+      <div v-if="toast" class="admin-panel-toast" :class="`is-${toastTone}`">
+        <Check v-if="toastTone === 'success'" :size="17" />
+        <TriangleAlert v-else :size="17" />
+        {{ toast }}
+      </div>
+    </Transition>
+
+    <div v-if="revealDialogImei" class="admin-panel-dialog-backdrop">
+      <section class="admin-panel-dialog" role="alertdialog">
+        <span class="admin-panel-dialog__icon"><KeyRound :size="21" /></span>
+        <div>
+          <h2>{{ t('credentials.revealTitle') }}</h2>
+          <p>{{ t('credentials.revealBody') }}</p>
+        </div>
+        <div class="admin-panel-dialog__actions">
+          <SkyButton variant="secondary" @click="revealDialogImei = ''">
+            {{ t('credentials.cancel') }}
+          </SkyButton>
+          <SkyButton class="is-primary" @click="revealPassword">
+            <Eye :size="15" />{{ t('credentials.confirmReveal') }}
+          </SkyButton>
+        </div>
+      </section>
+    </div>
+
+    <div v-if="discardDialog" class="admin-panel-dialog-backdrop">
+      <section class="admin-panel-dialog" role="alertdialog">
+        <span class="admin-panel-dialog__icon is-warning">
+          <TriangleAlert :size="21" />
+        </span>
+        <div>
+          <h2>{{ t('editor.discardTitle') }}</h2>
+          <p>{{ t('editor.discardBody') }}</p>
+        </div>
+        <div class="admin-panel-dialog__actions">
+          <SkyButton variant="secondary" @click="cancelDiscard">
+            {{ t('editor.keepEditing') }}
+          </SkyButton>
+          <SkyButton
+            class="is-danger"
+            variant="danger"
+            @click="discardAndContinue"
+          >
+            {{ t('editor.discard') }}
+          </SkyButton>
+        </div>
+      </section>
+    </div>
+  </div>
+</template>
+
+<style scoped>
+.admin-panel-overlay {
+  --admin-bg: #090b0a;
+  --admin-panel: #111311;
+  --admin-panel-raised: #171917;
+  --admin-panel-hover: #1d201d;
+  --admin-border: rgba(255, 255, 255, 0.075);
+  --admin-border-strong: rgba(255, 255, 255, 0.12);
+  --admin-text: #f0f3f0;
+  --admin-muted: #818781;
+  --admin-dim: #555b55;
+  --admin-green: #74d66f;
+  --admin-green-soft: rgba(116, 214, 111, 0.14);
+  --admin-red: #ef6969;
+  position: fixed;
+  z-index: 10000;
+  inset: 0;
+  display: grid;
+  place-items: center;
+  padding: 3.2vh 3vw;
+  color: var(--admin-text);
+  background:
+    radial-gradient(circle at 50% 30%, rgba(28, 39, 29, 0.18), transparent 55%),
+    rgba(1, 3, 2, 0.56);
+  font-family: var(--sky-font-family, Inter, sans-serif);
+  backdrop-filter: blur(2px);
+  pointer-events: auto;
+}
+
+.admin-panel-window {
+  width: min(94vw, 1600px);
+  height: min(91vh, 940px);
+  overflow: hidden;
+  border: 1px solid rgba(255, 255, 255, 0.08);
+  border-radius: 10px;
+  background: var(--admin-bg);
+  box-shadow:
+    0 35px 110px rgba(0, 0, 0, 0.72),
+    inset 0 1px rgba(255, 255, 255, 0.025);
+}
+
+.admin-panel-header {
+  height: 54px;
+  display: grid;
+  grid-template-columns: 250px 1fr auto;
+  align-items: center;
+  border-bottom: 1px solid var(--admin-border);
+  background: #0b0d0c;
+}
+
+.admin-panel-brand,
+.admin-panel-context,
+.admin-panel-actions,
+.admin-panel-profile-heading,
+.admin-panel-section-card__heading,
+.admin-panel-device-summary,
+.admin-panel-manual-save-note,
+.admin-panel-dialog__actions {
+  display: flex;
+  align-items: center;
+}
+
+.admin-panel-brand {
+  height: 100%;
+  gap: 10px;
+  padding: 0 15px;
+  border-right: 1px solid var(--admin-border);
+}
+
+.admin-panel-brand__mark {
+  width: 30px;
+  height: 30px;
+  display: grid;
+  place-items: center;
+  border: 1px solid rgba(116, 214, 111, 0.26);
+  border-radius: 7px;
+  color: var(--admin-green);
+  background: var(--admin-green-soft);
+}
+
+.admin-panel-brand div,
+.admin-panel-profile-heading > div:nth-child(2),
+.admin-panel-device-summary div,
+.admin-panel-manual-save-note div {
+  display: grid;
+  min-width: 0;
+}
+
+.admin-panel-brand strong {
+  font-size: 11px;
+  letter-spacing: 0.13em;
+}
+
+.admin-panel-brand span:last-child {
+  color: var(--admin-muted);
+  font-size: 9px;
+  letter-spacing: 0.11em;
+}
+
+.admin-panel-context {
+  gap: 7px;
+  min-width: 0;
+  padding: 0 16px;
+  color: var(--admin-dim);
+  font-size: 11px;
+}
+
+.admin-panel-context strong {
+  overflow: hidden;
+  color: #bfc4bf;
+  font-weight: 550;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-actions {
+  gap: 6px;
+  padding-right: 10px;
+}
+
+.admin-panel-dirty {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+  margin-right: 5px;
+  color: #d2a861;
+  font-size: 10px;
+}
+
+.admin-panel-dirty > span,
+.admin-panel-online-dot,
+.admin-panel-live > span,
+.admin-panel-profile-heading__status span span {
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: var(--admin-green);
+  box-shadow: 0 0 8px rgba(116, 214, 111, 0.75);
+}
+
+.admin-panel-dirty > span {
+  background: #d8aa5e;
+  box-shadow: 0 0 8px rgba(216, 170, 94, 0.65);
+}
+
+.admin-panel-icon-button,
+.admin-panel-save,
+.admin-panel-rail button {
+  border: 0;
+  color: var(--admin-muted);
+  background: transparent;
+}
+
+.admin-panel-icon-button,
+.admin-panel-save {
+  width: 44px;
+  height: 44px;
+  display: grid;
+  place-items: center;
+  border-radius: 6px;
+  cursor: pointer;
+}
+
+.admin-panel-icon-button:hover:not(:disabled) {
+  color: var(--admin-text);
+  background: var(--admin-panel-hover);
+}
+
+.admin-panel-save {
+  border: 1px solid var(--admin-border);
+  color: #555b55;
+  background: #151715;
+}
+
+.admin-panel-save.is-ready {
+  border-color: rgba(116, 214, 111, 0.5);
+  color: #091009;
+  background: var(--admin-green);
+  box-shadow: 0 0 18px rgba(116, 214, 111, 0.18);
+}
+
+.admin-panel-save.is-ready:hover:not(:disabled) {
+  filter: brightness(1.08);
+}
+
+.admin-panel-close:hover {
+  color: var(--admin-red) !important;
+  background: rgba(239, 105, 105, 0.09) !important;
+}
+
+button:disabled {
+  cursor: not-allowed !important;
+  opacity: 0.5;
+}
+
+.admin-panel-body {
+  height: calc(100% - 54px);
+  display: grid;
+  grid-template-columns: 54px 300px minmax(0, 1fr);
+}
+
+.admin-panel-rail {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 7px;
+  padding: 11px 0 10px;
+  border-right: 1px solid var(--admin-border);
+  background: #0b0d0c;
+}
+
+.admin-panel-rail button {
+  width: 44px;
+  height: 44px;
+  display: grid;
+  place-items: center;
+  border-radius: 6px;
+  cursor: pointer;
+}
+
+.admin-panel-rail button:hover,
+.admin-panel-rail button.is-active {
+  color: var(--admin-text);
+  background: var(--admin-panel-hover);
+}
+
+.admin-panel-rail button.is-active {
+  box-shadow: inset 2px 0 var(--admin-green);
+}
+
+.admin-panel-rail__spacer {
+  flex: 1;
+}
+
+.admin-panel-live {
+  display: grid;
+  justify-items: center;
+  gap: 5px;
+  color: var(--admin-dim);
+  font-size: 7px;
+  font-weight: 700;
+  letter-spacing: 0.1em;
+}
+
+.admin-panel-directory {
+  min-width: 0;
+  overflow: hidden;
+  border-right: 1px solid var(--admin-border);
+  background: #101210;
+}
+
+.admin-panel-directory__header {
+  height: 70px;
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  padding: 0 16px;
+}
+
+.admin-panel-directory__header div,
+.admin-panel-section-card__heading > div:first-child,
+.admin-panel-app-heading > div:first-child,
+.admin-panel-page-heading > div:last-child {
+  display: grid;
+  gap: 2px;
+}
+
+.admin-panel-directory__header span,
+.admin-panel-section-card__heading span,
+.admin-panel-page-heading span,
+.admin-panel-profile-heading > div > span {
+  color: var(--admin-muted);
+  font-size: 9px;
+  font-weight: 650;
+  letter-spacing: 0.08em;
+}
+
+.admin-panel-directory__header h2,
+.admin-panel-section-card__heading h2,
+.admin-panel-page-heading h1,
+.admin-panel-profile-heading h1,
+.admin-panel-empty-editor h1,
+.admin-panel-dialog h2 {
+  margin: 0;
+  font-weight: 600;
+}
+
+.admin-panel-directory__header h2 {
+  font-size: 14px;
+}
+
+.admin-panel-directory__header > strong {
+  min-width: 28px;
+  padding: 4px 7px;
+  border-radius: 5px;
+  color: #b7bcb7;
+  background: #1b1e1b;
+  font-size: 10px;
+  text-align: center;
+}
+
+.admin-panel-search {
+  height: 44px;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  margin: 0 12px 11px;
+  padding: 0 10px;
+  border: 1px solid var(--admin-border);
+  border-radius: 6px;
+  color: var(--admin-dim);
+  background: #161816;
+}
+
+.admin-panel-search:focus-within {
+  border-color: rgba(116, 214, 111, 0.3);
+  color: var(--admin-green);
+}
+
+.admin-panel-search input {
+  width: 100%;
+  min-width: 0;
+  border: 0;
+  outline: 0;
+  color: var(--admin-text);
+  background: transparent;
+  font: inherit;
+  font-size: 11px;
+}
+
+.admin-panel-search input::placeholder {
+  color: #5f655f;
+}
+
+.admin-panel-player-list,
+.admin-panel-audit-mini-list {
+  height: calc(100% - 115px);
+  overflow-y: auto;
+  padding: 0 8px 16px;
+  scrollbar-color: #343834 transparent;
+  scrollbar-width: thin;
+}
+
+.admin-panel-player-list > button {
+  width: 100%;
+  display: grid;
+  grid-template-columns: 34px minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 10px;
+  padding: 9px 9px;
+  border: 1px solid transparent;
+  border-radius: 6px;
+  color: var(--admin-text);
+  background: transparent;
+  text-align: left;
+  cursor: pointer;
+}
+
+.admin-panel-player-list > button:hover {
+  background: #171a17;
+}
+
+.admin-panel-player-list > button.is-active {
+  border-color: var(--admin-border);
+  background: #1b1e1b;
+  box-shadow: inset 2px 0 var(--admin-green);
+}
+
+.admin-panel-avatar,
+.admin-panel-profile-avatar {
+  display: grid;
+  place-items: center;
+  flex: 0 0 auto;
+  border: 1px solid rgba(116, 214, 111, 0.16);
+  border-radius: 7px;
+  color: #c7e8c4;
+  background: linear-gradient(145deg, #263126, #182018);
+  font-size: 10px;
+  font-weight: 700;
+}
+
+.admin-panel-avatar {
+  width: 32px;
+  height: 32px;
+}
+
+.admin-panel-player-list__copy {
+  display: grid;
+  min-width: 0;
+  gap: 2px;
+}
+
+.admin-panel-player-list__copy strong,
+.admin-panel-player-list__copy small {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-player-list__copy strong {
+  font-size: 11px;
+  font-weight: 580;
+}
+
+.admin-panel-player-list__copy small,
+.admin-panel-player-list__meta {
+  color: var(--admin-muted);
+  font-size: 9px;
+}
+
+.admin-panel-player-list__meta {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+}
+
+.admin-panel-empty-list,
+.admin-panel-empty-editor,
+.admin-panel-loading {
+  display: grid;
+  place-items: center;
+  align-content: center;
+  text-align: center;
+}
+
+.admin-panel-empty-list {
+  gap: 5px;
+  padding: 40px 22px;
+  color: var(--admin-muted);
+}
+
+.admin-panel-empty-list strong {
+  color: var(--admin-text);
+  font-size: 12px;
+}
+
+.admin-panel-empty-list span {
+  font-size: 10px;
+  line-height: 1.5;
+}
+
+.admin-panel-audit-mini-list {
+  height: calc(100% - 70px);
+  padding-inline: 10px;
+}
+
+.admin-panel-audit-mini-list article {
+  display: grid;
+  grid-template-columns: 28px 1fr;
+  gap: 9px;
+  padding: 10px 5px;
+  border-bottom: 1px solid var(--admin-border);
+}
+
+.admin-panel-audit-icon {
+  width: 27px;
+  height: 27px;
+  display: grid;
+  place-items: center;
+  border-radius: 5px;
+  color: var(--admin-green);
+  background: var(--admin-green-soft);
+}
+
+.admin-panel-audit-mini-list div {
+  display: grid;
+  gap: 2px;
+  min-width: 0;
+}
+
+.admin-panel-audit-mini-list strong {
+  font-size: 10px;
+}
+
+.admin-panel-audit-mini-list span,
+.admin-panel-audit-mini-list small {
+  color: var(--admin-muted);
+  font-size: 9px;
+}
+
+.admin-panel-editor {
+  min-width: 0;
+  overflow: hidden;
+  background:
+    linear-gradient(rgba(255, 255, 255, 0.012) 1px, transparent 1px), #0b0d0c;
+  background-size: 100% 44px;
+}
+
+.admin-panel-editor__scroll {
+  height: 100%;
+  overflow-y: auto;
+  padding: 18px;
+  scrollbar-color: #343834 transparent;
+  scrollbar-width: thin;
+}
+
+.admin-panel-loading,
+.admin-panel-empty-editor {
+  height: 100%;
+  gap: 9px;
+  color: var(--admin-muted);
+}
+
+.admin-panel-profile-heading {
+  gap: 13px;
+  min-height: 72px;
+  padding: 4px 5px 16px;
+}
+
+.admin-panel-profile-avatar {
+  width: 48px;
+  height: 48px;
+  border-radius: 9px;
+  font-size: 13px;
+}
+
+.admin-panel-profile-heading h1 {
+  font-size: 21px;
+  letter-spacing: -0.025em;
+}
+
+.admin-panel-profile-heading p,
+.admin-panel-section-card__heading p,
+.admin-panel-page-heading p,
+.admin-panel-empty-editor p,
+.admin-panel-dialog p {
+  margin: 0;
+  color: var(--admin-muted);
+  font-size: 10px;
+  line-height: 1.55;
+}
+
+.admin-panel-profile-heading__status {
+  display: grid;
+  justify-items: end;
+  gap: 5px;
+  margin-left: auto;
+}
+
+.admin-panel-profile-heading__status > span {
+  display: flex;
+  align-items: center;
+  gap: 7px;
+  color: var(--admin-green);
+  font-size: 9px;
+  font-weight: 650;
+  letter-spacing: 0.07em;
+}
+
+.admin-panel-profile-heading__status strong {
+  padding: 4px 7px;
+  border: 1px solid var(--admin-border);
+  border-radius: 4px;
+  color: #a8aea8;
+  background: #151715;
+  font-size: 9px;
+}
+
+.admin-panel-device-tabs {
+  display: flex;
+  gap: 6px;
+  overflow-x: auto;
+  margin-bottom: 12px;
+  padding-bottom: 2px;
+}
+
+.admin-panel-device-tabs button {
+  min-width: 155px;
+  display: grid;
+  grid-template-columns: 20px 1fr;
+  grid-template-rows: auto auto;
+  align-items: center;
+  gap: 1px 7px;
+  padding: 8px 10px;
+  border: 1px solid var(--admin-border);
+  border-radius: 6px;
+  color: var(--admin-muted);
+  background: #121412;
+  text-align: left;
+  cursor: pointer;
+}
+
+.admin-panel-device-tabs button svg {
+  grid-row: 1 / 3;
+}
+
+.admin-panel-device-tabs button span {
+  color: #c8cdc8;
+  font-size: 10px;
+}
+
+.admin-panel-device-tabs button small {
+  font-size: 8px;
+}
+
+.admin-panel-device-tabs button.is-active {
+  border-color: rgba(116, 214, 111, 0.3);
+  color: var(--admin-green);
+  background: var(--admin-green-soft);
+}
+
+.admin-panel-device-tabs button.is-dirty::after {
+  content: '';
+  width: 5px;
+  height: 5px;
+  grid-column: 2;
+  grid-row: 1 / 3;
+  align-self: center;
+  justify-self: end;
+  border-radius: 50%;
+  background: #d8aa5e;
+}
+
+.admin-panel-stat-grid,
+.admin-panel-section-grid,
+.admin-panel-security-grid,
+.admin-panel-app-grid,
+.admin-panel-audit-grid,
+.admin-panel-empty-stats {
+  display: grid;
+  gap: 10px;
+}
+
+.admin-panel-stat-grid {
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  margin-bottom: 10px;
+}
+
+.admin-panel-stat-grid article {
+  display: grid;
+  grid-template-columns: 26px 1fr;
+  align-items: center;
+  gap: 1px 8px;
+  min-width: 0;
+  padding: 10px 12px;
+  border: 1px solid var(--admin-border);
+  border-radius: 6px;
+  background: var(--admin-panel);
+}
+
+.admin-panel-stat-grid svg {
+  grid-row: 1 / 3;
+  color: var(--admin-muted);
+}
+
+.admin-panel-stat-grid span {
+  color: var(--admin-muted);
+  font-size: 8px;
+  text-transform: uppercase;
+}
+
+.admin-panel-stat-grid strong {
+  overflow: hidden;
+  font-size: 12px;
+  font-weight: 600;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-section-grid {
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.admin-panel-section-card {
+  margin-bottom: 10px;
+  padding: 13px;
+  border: 1px solid var(--admin-border);
+  border-radius: 7px;
+  background: var(--admin-panel);
+  box-shadow: inset 0 1px rgba(255, 255, 255, 0.015);
+}
+
+.admin-panel-section-card__heading {
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 12px;
+  padding-bottom: 10px;
+  border-bottom: 1px solid var(--admin-border);
+}
+
+.admin-panel-section-card__heading h2 {
+  font-size: 12px;
+}
+
+.admin-panel-section-card__heading > svg {
+  color: var(--admin-muted);
+}
+
+.admin-panel-field-list {
+  display: grid;
+  gap: 7px;
+  margin: 0;
+}
+
+.admin-panel-field-list > div {
+  display: grid;
+  grid-template-columns: minmax(110px, 0.75fr) minmax(0, 1.25fr);
+  align-items: center;
+  gap: 10px;
+}
+
+.admin-panel-field-list dt {
+  color: var(--admin-muted);
+  font-size: 9px;
+}
+
+.admin-panel-field-list dd {
+  min-width: 0;
+  overflow: hidden;
+  margin: 0;
+  padding: 7px 9px;
+  border: 1px solid var(--admin-border);
+  border-radius: 5px;
+  color: #d8dcd8;
+  background: #191b19;
+  font-size: 9px;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-device-summary {
+  gap: 9px;
+  margin-bottom: 10px;
+}
+
+.admin-panel-device-summary__icon,
+.admin-panel-heading-icon,
+.admin-panel-empty-editor__icon {
+  display: grid;
+  place-items: center;
+  border: 1px solid rgba(116, 214, 111, 0.16);
+  color: var(--admin-green);
+  background: var(--admin-green-soft);
+}
+
+.admin-panel-device-summary__icon {
+  width: 38px;
+  height: 38px;
+  border-radius: 7px;
+}
+
+.admin-panel-device-summary strong {
+  font-size: 11px;
+}
+
+.admin-panel-device-summary span,
+.admin-panel-device-summary small {
+  color: var(--admin-muted);
+  font-size: 9px;
+}
+
+.admin-panel-device-summary small {
+  margin-left: auto;
+  padding: 4px 7px;
+  border-radius: 4px;
+  background: #1b1e1b;
+}
+
+.admin-panel-inline-empty {
+  padding: 18px;
+  color: var(--admin-muted);
+  font-size: 10px;
+  text-align: center;
+}
+
+.admin-panel-security-grid {
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.admin-panel-credential-box {
+  position: relative;
+  display: grid;
+  align-content: center;
+  min-height: 66px;
+  gap: 5px;
+  padding: 9px 10px;
+  border: 1px solid var(--admin-border);
+  border-radius: 5px;
+  background: #181a18;
+}
+
+.admin-panel-credential-box > span,
+.admin-panel-credential-box--pin div span {
+  color: var(--admin-muted);
+  font-size: 8px;
+  text-transform: uppercase;
+}
+
+.admin-panel-credential-box > strong,
+.admin-panel-credential-box--pin strong {
+  overflow: hidden;
+  padding-right: 82px;
+  font-size: 10px;
+  font-weight: 550;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-credential-box button {
+  position: absolute;
+  right: 7px;
+  bottom: 8px;
+  display: flex;
+  align-items: center;
+  gap: 5px;
+  padding: 5px 7px;
+  border: 1px solid var(--admin-border-strong);
+  border-radius: 4px;
+  color: #bbc0bb;
+  background: #242724;
+  font-size: 8px;
+  cursor: pointer;
+  min-height: 44px;
+}
+
+.admin-panel-password {
+  font-family: ui-monospace, SFMono-Regular, Consolas, monospace;
+  letter-spacing: 0.06em;
+}
+
+.admin-panel-credential-box--pin {
+  grid-column: 1 / -1;
+  grid-template-columns: 24px 1fr;
+  align-items: center;
+  min-height: 46px;
+}
+
+.admin-panel-credential-box--pin > svg {
+  color: var(--admin-muted);
+}
+
+.admin-panel-credential-box--pin div {
+  display: grid;
+  gap: 3px;
+}
+
+.admin-panel-credential-box--pin strong {
+  padding: 0;
+  color: #b8bdb8;
+  font-size: 9px;
+}
+
+.admin-panel-app-heading {
+  align-items: flex-end;
+}
+
+.admin-panel-app-heading__actions {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+}
+
+.admin-panel-app-heading__actions > span {
+  color: #d8aa5e;
+  font-size: 9px;
+}
+
+.admin-panel-search--apps {
+  width: 190px;
+  height: 44px;
+  margin: 0;
+}
+
+.admin-panel-manual-save-note {
+  gap: 9px;
+  margin-bottom: 10px;
+  padding: 8px 10px;
+  border: 1px solid rgba(116, 214, 111, 0.16);
+  border-radius: 5px;
+  color: var(--admin-green);
+  background: rgba(116, 214, 111, 0.055);
+}
+
+.admin-panel-manual-save-note strong {
+  font-size: 9px;
+}
+
+.admin-panel-manual-save-note span {
+  color: #849184;
+  font-size: 8px;
+}
+
+.admin-panel-app-grid {
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+}
+
+.admin-panel-app-grid > button {
+  display: grid;
+  grid-template-columns: 32px minmax(0, 1fr) auto;
+  align-items: center;
+  gap: 8px;
+  min-width: 0;
+  padding: 8px;
+  border: 1px solid var(--admin-border);
+  border-radius: 5px;
+  color: var(--admin-text);
+  background: #161816;
+  text-align: left;
+  cursor: pointer;
+}
+
+.admin-panel-app-grid > button:hover:not(:disabled) {
+  border-color: var(--admin-border-strong);
+  background: var(--admin-panel-hover);
+}
+
+.admin-panel-app-grid > button.is-dirty {
+  border-color: rgba(216, 170, 94, 0.32);
+  box-shadow: inset 2px 0 #d8aa5e;
+}
+
+.admin-panel-app-icon {
+  width: 30px;
+  height: 30px;
+  display: grid;
+  place-items: center;
+  border-radius: 7px;
+  color: white;
+  background: #292c29;
+}
+
+.admin-panel-app-copy {
+  display: grid;
+  min-width: 0;
+  gap: 2px;
+}
+
+.admin-panel-app-copy strong,
+.admin-panel-app-copy small {
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.admin-panel-app-copy strong {
+  font-size: 9px;
+  font-weight: 550;
+}
+
+.admin-panel-app-copy small {
+  color: var(--admin-muted);
+  font-size: 8px;
+}
+
+.admin-panel-switch {
+  width: 27px;
+  height: 15px;
+  padding: 2px;
+  border-radius: 999px;
+  background: #353935;
+  transition: background 150ms ease;
+}
+
+.admin-panel-switch span {
+  width: 11px;
+  height: 11px;
+  display: block;
+  border-radius: 50%;
+  background: #c8cdc8;
+  transition: transform 150ms ease;
+}
+
+.admin-panel-app-grid > button.is-enabled .admin-panel-switch {
+  background: var(--admin-green);
+}
+
+.admin-panel-app-grid > button.is-enabled .admin-panel-switch span {
+  transform: translateX(12px);
+  background: #0b100b;
+}
+
+.admin-panel-page-heading {
+  display: flex;
+  align-items: center;
+  gap: 12px;
+  margin-bottom: 15px;
+  padding: 5px;
+}
+
+.admin-panel-heading-icon,
+.admin-panel-empty-editor__icon {
+  width: 44px;
+  height: 44px;
+  border-radius: 8px;
+}
+
+.admin-panel-page-heading h1,
+.admin-panel-empty-editor h1 {
+  font-size: 19px;
+}
+
+.admin-panel-audit-grid {
+  grid-template-columns: repeat(2, minmax(0, 1fr));
+}
+
+.admin-panel-audit-grid article {
+  display: grid;
+  gap: 7px;
+  padding: 13px;
+  border: 1px solid var(--admin-border);
+  border-radius: 6px;
+  background: var(--admin-panel);
+}
+
+.admin-panel-audit-grid__topline {
+  display: flex;
+  justify-content: space-between;
+  gap: 10px;
+  color: var(--admin-green);
+  font-size: 9px;
+}
+
+.admin-panel-audit-grid time,
+.admin-panel-audit-grid p {
+  color: var(--admin-muted);
+  font-size: 8px;
+}
+
+.admin-panel-audit-grid strong {
+  font-size: 11px;
+}
+
+.admin-panel-empty-editor {
+  padding: 30px;
+}
+
+.admin-panel-empty-editor > p {
+  max-width: 430px;
+}
+
+.admin-panel-empty-stats {
+  grid-template-columns: repeat(3, 130px);
+  margin-top: 14px;
+}
+
+.admin-panel-empty-stats article {
+  display: grid;
+  grid-template-columns: 28px 1fr;
+  align-items: center;
+  padding: 10px;
+  border: 1px solid var(--admin-border);
+  border-radius: 6px;
+  background: var(--admin-panel);
+  text-align: left;
+}
+
+.admin-panel-empty-stats svg {
+  grid-row: 1 / 3;
+  color: var(--admin-muted);
+}
+
+.admin-panel-empty-stats strong {
+  font-size: 13px;
+}
+
+.admin-panel-empty-stats span {
+  color: var(--admin-muted);
+  font-size: 8px;
+}
+
+.admin-panel-toast {
+  position: fixed;
+  z-index: 10002;
+  right: 4vw;
+  bottom: 4vh;
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  max-width: 390px;
+  padding: 10px 13px;
+  border: 1px solid rgba(116, 214, 111, 0.25);
+  border-radius: 6px;
+  color: #d7ecd5;
+  background: #152015;
+  box-shadow: 0 16px 40px rgba(0, 0, 0, 0.45);
+  font-size: 10px;
+}
+
+.admin-panel-toast.is-error {
+  border-color: rgba(239, 105, 105, 0.3);
+  color: #f2c4c4;
+  background: #241414;
+}
+
+.admin-panel-dialog-backdrop {
+  position: fixed;
+  z-index: 10001;
+  inset: 0;
+  display: grid;
+  place-items: center;
+  background: rgba(0, 0, 0, 0.66);
+  backdrop-filter: blur(3px);
+}
+
+.admin-panel-dialog {
+  width: min(420px, 90vw);
+  display: grid;
+  grid-template-columns: 38px 1fr;
+  gap: 12px;
+  padding: 16px;
+  border: 1px solid var(--admin-border-strong);
+  border-radius: 8px;
+  background: #121412;
+  box-shadow: 0 25px 75px rgba(0, 0, 0, 0.65);
+}
+
+.admin-panel-dialog__icon {
+  width: 36px;
+  height: 36px;
+  display: grid;
+  place-items: center;
+  border-radius: 7px;
+  color: var(--admin-green);
+  background: var(--admin-green-soft);
+}
+
+.admin-panel-dialog__icon.is-warning {
+  color: #e0ad5f;
+  background: rgba(224, 173, 95, 0.12);
+}
+
+.admin-panel-dialog h2 {
+  margin-bottom: 5px;
+  font-size: 14px;
+}
+
+.admin-panel-dialog__actions {
+  grid-column: 1 / -1;
+  justify-content: flex-end;
+  gap: 7px;
+  margin-top: 5px;
+}
+
+.admin-panel-dialog__actions button {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  padding: 7px 10px;
+  border: 1px solid var(--admin-border-strong);
+  border-radius: 5px;
+  color: #c6cbc6;
+  background: #202320;
+  font-size: 9px;
+  cursor: pointer;
+}
+
+.admin-panel-overlay button:focus-visible,
+.admin-panel-overlay input:focus-visible {
+  outline: 2px solid var(--admin-green);
+  outline-offset: 2px;
+}
+
+.admin-panel-dialog__actions button.is-primary {
+  border-color: rgba(116, 214, 111, 0.3);
+  color: #d9eed7;
+  background: rgba(116, 214, 111, 0.14);
+}
+
+.admin-panel-dialog__actions button.is-danger {
+  border-color: rgba(239, 105, 105, 0.3);
+  color: #efaaaa;
+  background: rgba(239, 105, 105, 0.1);
+}
+
+.is-spinning {
+  animation: admin-spin 800ms linear infinite;
+}
+
+.admin-toast-enter-active,
+.admin-toast-leave-active {
+  transition:
+    opacity 160ms ease,
+    transform 160ms ease;
+}
+
+.admin-toast-enter-from,
+.admin-toast-leave-to {
+  opacity: 0;
+  transform: translateY(8px);
+}
+
+@keyframes admin-spin {
+  to {
+    transform: rotate(360deg);
+  }
+}
+
+@media (max-width: 1100px) {
+  .admin-panel-window {
+    width: 97vw;
+    height: 94vh;
+  }
+
+  .admin-panel-body {
+    grid-template-columns: 50px 250px minmax(0, 1fr);
+  }
+
+  .admin-panel-header {
+    grid-template-columns: 225px 1fr auto;
+  }
+
+  .admin-panel-stat-grid,
+  .admin-panel-app-grid {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .admin-panel-overlay *,
+  .admin-panel-overlay *::before,
+  .admin-panel-overlay *::after {
+    animation-duration: 0.01ms !important;
+    transition-duration: 0.01ms !important;
+  }
+}
+</style>
diff --git a/frontend/src/config/apps.ts b/frontend/src/config/apps.ts
index e77aeb5..40709e5 100644
--- a/frontend/src/config/apps.ts
+++ b/frontend/src/config/apps.ts
@@ -42,7 +42,6 @@ import {
 import { defineAsyncComponent, markRaw, shallowReactive } from 'vue'
 
 import appStoreIcon from '@/assets/img/app-icons/apps.webp'
-import adminIcon from '@/assets/img/app-icons/admin.svg'
 import calculatorIcon from '@/assets/img/app-icons/calculator.webp'
 import cameraIcon from '@/assets/img/app-icons/camera.webp'
 import clockIcon from '@/assets/img/app-icons/clock.webp'
@@ -94,21 +93,6 @@ import type {
 } from '@/types/apps'
 
 export const PHONE_APPS = shallowReactive<PhoneAppDefinition[]>([
-  {
-    adminOnly: true,
-    category: 'utilities',
-    component: markRaw(
-      defineAsyncComponent(() => import('@/views/apps/AdminApp.vue')),
-    ),
-    dockOrder: null,
-    gridOrder: 31,
-    icon: markRaw(ShieldCheck),
-    iconClass: 'app-icon--admin',
-    iconImage: adminIcon,
-    id: 'admin',
-    labelKey: 'Apps.admin.name',
-    route: '/apps/admin',
-  },
   {
     category: 'utilities',
     component: markRaw(
diff --git a/frontend/src/stores/admin.ts b/frontend/src/stores/admin.ts
index 2f3539a..d2269ad 100644
--- a/frontend/src/stores/admin.ts
+++ b/frontend/src/stores/admin.ts
@@ -60,17 +60,17 @@ export const useAdminStore = defineStore('admin', {
       this.selectedPlayer = null
       this.revealedCredentials = {}
     },
-    async setApp(
+    async saveApps(
       source: number,
       imei: string,
-      appId: string,
-      installed: boolean,
+      revision: number,
+      changes: Array<{ appId: string; installed: boolean }>,
     ): Promise<NuiResponse<AdminPlayerDetail>> {
-      this.actionKey = `${imei}:${appId}`
-      const response = await nuiCall<AdminPlayerDetail>('admin:set-app', {
-        appId,
+      this.actionKey = `${imei}:save`
+      const response = await nuiCall<AdminPlayerDetail>('admin:save-apps', {
+        changes,
         imei,
-        installed,
+        revision,
         source,
       })
       this.actionKey = ''
diff --git a/frontend/src/stores/app-store.test.ts b/frontend/src/stores/app-store.test.ts
index 888ae4d..649eaf3 100644
--- a/frontend/src/stores/app-store.test.ts
+++ b/frontend/src/stores/app-store.test.ts
@@ -14,7 +14,6 @@ const mocks = vi.hoisted(() => ({
   phone: {
     device: { imei: 'phone-a' },
     isOpen: true,
-    permissions: { adminPanel: false },
     saveDeviceNamespace: vi.fn(),
   },
 }))
@@ -27,7 +26,6 @@ describe('app store', () => {
     setActivePinia(createPinia())
     mocks.phone.device.imei = 'phone-a'
     mocks.phone.isOpen = true
-    mocks.phone.permissions.adminPanel = false
     mocks.phone.saveDeviceNamespace.mockReset()
   })
 
@@ -77,17 +75,11 @@ describe('app store', () => {
     }
   })
 
-  it('exposes the protected admin app only with server-granted access', () => {
+  it('drops the retired admin app from persisted phone layouts', () => {
     const apps = useAppStoreStore()
 
     apps.hydrate({ claimedApps: ['admin'] })
-    expect(apps.isInstalled('admin')).toBe(false)
     expect(apps.homeLayout.grid).not.toContain('admin')
-
-    mocks.phone.permissions.adminPanel = true
-    apps.hydrate(null, true)
-    expect(apps.isInstalled('admin')).toBe(true)
-    expect(apps.homeLayout.grid).toContain('admin')
   })
 
   it('migrates current layouts so dock apps are not repeated in the grid', () => {
diff --git a/frontend/src/stores/app-store.ts b/frontend/src/stores/app-store.ts
index 3e46907..892b223 100644
--- a/frontend/src/stores/app-store.ts
+++ b/frontend/src/stores/app-store.ts
@@ -57,11 +57,9 @@ function getDefaultDockIds(): LaunchablePhoneAppId[] {
     .map((app) => app.id)
 }
 
-function getDefaultInstalledIds(
-  adminPanelAccess = false,
-): LaunchablePhoneAppId[] {
+function getDefaultInstalledIds(): LaunchablePhoneAppId[] {
   return PHONE_APPS.filter((app) => {
-    if (app.adminOnly) return adminPanelAccess
+    if (app.adminOnly) return false
     return isExternalPhoneApp(app)
       ? app.defaultInstalled
       : DEFAULT_INSTALLED_PHONE_APP_IDS.has(app.id)
@@ -222,7 +220,7 @@ export const useAppStoreStore = defineStore('app-store', {
       installations.set(id, { deviceImei, timer, token })
       pendingInstallations.set(this, installations)
     },
-    hydrate(payload: unknown, adminPanelAccess = false): void {
+    hydrate(payload: unknown): void {
       this.cancelPendingInstalls()
       const data = payload as {
         claimedApps?: unknown
@@ -258,10 +256,7 @@ export const useAppStoreStore = defineStore('app-store', {
           })
         : []
       const installedIds = [
-        ...new Set([
-          ...getDefaultInstalledIds(adminPanelAccess),
-          ...this.claimedApps,
-        ]),
+        ...new Set([...getDefaultInstalledIds(), ...this.claimedApps]),
       ].filter((id) => !this.uninstalledApps.includes(id))
       const removedLegacyDefaults = hasUninstalledBuiltinApp(
         data?.homeLayout,
@@ -317,7 +312,7 @@ export const useAppStoreStore = defineStore('app-store', {
     },
     isInstalled(appId: LaunchablePhoneAppId): boolean {
       const app = getPhoneApp(appId)
-      if (app?.adminOnly) return usePhoneStore().permissions.adminPanel
+      if (app?.adminOnly) return false
       if (this.uninstalledApps.includes(appId)) return false
       if (this.claimedApps.includes(appId)) return true
       if (!app) return false
@@ -327,10 +322,7 @@ export const useAppStoreStore = defineStore('app-store', {
     },
     reconcileCatalog(): void {
       const installedIds = [
-        ...new Set([
-          ...getDefaultInstalledIds(usePhoneStore().permissions.adminPanel),
-          ...this.claimedApps,
-        ]),
+        ...new Set([...getDefaultInstalledIds(), ...this.claimedApps]),
       ].filter((id) => !this.uninstalledApps.includes(id))
       const defaults = createDefaultHomeLayout(
         installedIds,
diff --git a/frontend/src/stores/phone.ts b/frontend/src/stores/phone.ts
index 303acc7..a73915a 100644
--- a/frontend/src/stores/phone.ts
+++ b/frontend/src/stores/phone.ts
@@ -38,7 +38,6 @@ export type PhoneOpenPayload = {
   locales?: LocaleTree
   memos?: DeviceBootstrap['memos']
   notes?: DeviceBootstrap['notes']
-  permissions?: DeviceBootstrap['permissions']
   player?: DeviceBootstrap['player']
   security?: DeviceSecurity
   token?: string
@@ -806,7 +805,7 @@ const citywarnFallbackLocales = {
   },
 }
 
-const adminFallbackLocales = {
+const adminPanelFallbackLocales = {
   name: 'Command Center',
   subtitle: 'Protected administration',
   navigation: 'Admin navigation',
@@ -829,7 +828,11 @@ const adminFallbackLocales = {
     empty: 'No players found',
     emptyBody: 'Adjust the search or refresh the live player list.',
   },
-  search: { players: 'Search name, ID, job, or number', clear: 'Clear search' },
+  search: {
+    players: 'Search name, ID, job, or number',
+    apps: 'Search apps',
+    clear: 'Clear search',
+  },
   detail: {
     character: 'Character profile',
     data: 'Player data overview',
@@ -878,13 +881,39 @@ const adminFallbackLocales = {
   apps: {
     eyebrow: 'Remote management',
     title: 'App access',
-    search: 'Search apps',
+    description:
+      'Stage app access for this device. Nothing changes until you save.',
     installed: 'Installed',
     available: 'Available',
-    grant: 'Install',
-    revoke: 'Remove',
-    granted: 'App installed on the selected phone.',
-    revoked: 'App removed from the selected phone.',
+    protected: 'System app',
+    changes: '{count} pending changes',
+  },
+  editor: {
+    brand: 'SKY PHONE',
+    workspace: 'ADMIN WORKSPACE',
+    players: 'Player directory',
+    audit: 'Audit log',
+    selectPlayer:
+      'Select a player to inspect identity, devices, credentials, and app access.',
+    save: 'Save changes',
+    saveHint: 'Apply pending changes',
+    saved: 'Changes saved.',
+    unsaved: 'Unsaved changes',
+    close: 'Close admin panel',
+    refresh: 'Refresh live data',
+    online: 'LIVE',
+    profile: 'PROFILE',
+    financial: 'FINANCIAL',
+    device: 'DEVICE',
+    security: 'SECURITY',
+    noAutoSave: 'Manual save',
+    noAutoSaveBody: 'Changes stay local until the green check is pressed.',
+    discardTitle: 'Discard unsaved changes?',
+    discardBody: 'Your staged app changes have not been saved.',
+    keepEditing: 'Keep editing',
+    discard: 'Discard changes',
+    saveFailed: 'Some changes could not be saved.',
+    noSelection: 'No player selected',
   },
   audit: {
     eyebrow: 'Accountability',
@@ -910,15 +939,14 @@ const adminFallbackLocales = {
       'The phone changed in the meantime. Refresh and try again.',
     account_not_found: 'No iFruit account is linked to this phone.',
     invalid_request: 'The admin request was invalid.',
-    device_locked: 'Unlock your phone before using the admin panel.',
     request_failed: 'The admin request failed.',
     default: 'The admin panel is temporarily unavailable.',
   },
 }
 
 const defaultLocales: LocaleTree = {
+  AdminPanel: adminPanelFallbackLocales,
   Apps: {
-    admin: adminFallbackLocales,
     citywarn: citywarnFallbackLocales,
     crypto: cryptoFallbackLocales,
     easyShare: {
@@ -2544,46 +2572,190 @@ const defaultLocales: LocaleTree = {
         'neon-drop': 'Neon block-dropping puzzle',
       },
       previews: {
-        citywarn: { first: 'Live alerts', second: 'Safety zones', third: 'Incident updates' },
-        crypto: { first: 'Synthetic markets', second: 'Portfolio', third: 'Wallet transfers' },
-        health: { first: 'Activity rings', second: 'Medical ID', third: 'Health records' },
-        'weazel-news': { first: 'Top stories', second: 'Local reports', third: 'Breaking news' },
-        companies: { first: 'Business directory', second: 'Job requests', third: 'Services' },
-        music: { first: 'Now playing', second: 'Playlists', third: 'Music library' },
-        picstagram: { first: 'Photo feed', second: 'Stories', third: 'Profiles' },
-        feather: { first: 'Short posts', second: 'Following feed', third: 'Conversations' },
-        fliptok: { first: 'Video feed', second: 'Creator tools', third: 'Trends' },
-        flare: { first: 'Discover people', second: 'Matches', third: 'Live moments' },
-        calendar: { first: 'Upcoming events', second: 'Day planner', third: 'Reminders' },
-        radio: { first: 'Live channels', second: 'Team radio', third: 'Favorites' },
-        'local-pages': { first: 'Local pages', second: 'Reviews', third: 'City discovery' },
-        crewlink: { first: 'Crew roster', second: 'Shared locations', third: 'Coordination' },
-        phone: { first: 'Recent calls', second: 'Contacts', third: 'Voicemail' },
-        messages: { first: 'Conversations', second: 'Media sharing', third: 'Quick replies' },
-        darkchat: { first: 'Private chats', second: 'Secure groups', third: 'Invitations' },
-        garage: { first: 'Vehicle list', second: 'Parking locations', third: 'Valet' },
-        house: { first: 'Property access', second: 'Residents', third: 'Management' },
-        map: { first: 'Live navigation', second: 'Nearby places', third: 'Route guidance' },
-        skyride: { first: 'Ride booking', second: 'Driver tracking', third: 'Trip history' },
-        banking: { first: 'Account balance', second: 'Transfers', third: 'Transactions' },
-        billing: { first: 'Open invoices', second: 'Payment requests', third: 'Payment history' },
+        citywarn: {
+          first: 'Live alerts',
+          second: 'Safety zones',
+          third: 'Incident updates',
+        },
+        crypto: {
+          first: 'Synthetic markets',
+          second: 'Portfolio',
+          third: 'Wallet transfers',
+        },
+        health: {
+          first: 'Activity rings',
+          second: 'Medical ID',
+          third: 'Health records',
+        },
+        'weazel-news': {
+          first: 'Top stories',
+          second: 'Local reports',
+          third: 'Breaking news',
+        },
+        companies: {
+          first: 'Business directory',
+          second: 'Job requests',
+          third: 'Services',
+        },
+        music: {
+          first: 'Now playing',
+          second: 'Playlists',
+          third: 'Music library',
+        },
+        picstagram: {
+          first: 'Photo feed',
+          second: 'Stories',
+          third: 'Profiles',
+        },
+        feather: {
+          first: 'Short posts',
+          second: 'Following feed',
+          third: 'Conversations',
+        },
+        fliptok: {
+          first: 'Video feed',
+          second: 'Creator tools',
+          third: 'Trends',
+        },
+        flare: {
+          first: 'Discover people',
+          second: 'Matches',
+          third: 'Live moments',
+        },
+        calendar: {
+          first: 'Upcoming events',
+          second: 'Day planner',
+          third: 'Reminders',
+        },
+        radio: {
+          first: 'Live channels',
+          second: 'Team radio',
+          third: 'Favorites',
+        },
+        'local-pages': {
+          first: 'Local pages',
+          second: 'Reviews',
+          third: 'City discovery',
+        },
+        crewlink: {
+          first: 'Crew roster',
+          second: 'Shared locations',
+          third: 'Coordination',
+        },
+        phone: {
+          first: 'Recent calls',
+          second: 'Contacts',
+          third: 'Voicemail',
+        },
+        messages: {
+          first: 'Conversations',
+          second: 'Media sharing',
+          third: 'Quick replies',
+        },
+        darkchat: {
+          first: 'Private chats',
+          second: 'Secure groups',
+          third: 'Invitations',
+        },
+        garage: {
+          first: 'Vehicle list',
+          second: 'Parking locations',
+          third: 'Valet',
+        },
+        house: {
+          first: 'Property access',
+          second: 'Residents',
+          third: 'Management',
+        },
+        map: {
+          first: 'Live navigation',
+          second: 'Nearby places',
+          third: 'Route guidance',
+        },
+        skyride: {
+          first: 'Ride booking',
+          second: 'Driver tracking',
+          third: 'Trip history',
+        },
+        banking: {
+          first: 'Account balance',
+          second: 'Transfers',
+          third: 'Transactions',
+        },
+        billing: {
+          first: 'Open invoices',
+          second: 'Payment requests',
+          third: 'Payment history',
+        },
         mail: { first: 'Inbox', second: 'Attachments', third: 'Mailboxes' },
         notes: { first: 'Notes', second: 'Checklists', third: 'Pinned ideas' },
-        memos: { first: 'Voice recordings', second: 'Playback', third: 'Favorites' },
-        calculator: { first: 'Basic calculation', second: 'Scientific tools', third: 'History' },
-        camera: { first: 'Photo mode', second: 'Video capture', third: 'Zoom controls' },
+        memos: {
+          first: 'Voice recordings',
+          second: 'Playback',
+          third: 'Favorites',
+        },
+        calculator: {
+          first: 'Basic calculation',
+          second: 'Scientific tools',
+          third: 'History',
+        },
+        camera: {
+          first: 'Photo mode',
+          second: 'Video capture',
+          third: 'Zoom controls',
+        },
         clock: { first: 'World clock', second: 'Alarms', third: 'Timers' },
-        weather: { first: 'Current weather', second: 'Hourly forecast', third: 'Seven-day outlook' },
-        photos: { first: 'Media library', second: 'Albums', third: 'Shared media' },
-        settings: { first: 'Device controls', second: 'Privacy', third: 'Personalization' },
+        weather: {
+          first: 'Current weather',
+          second: 'Hourly forecast',
+          third: 'Seven-day outlook',
+        },
+        photos: {
+          first: 'Media library',
+          second: 'Albums',
+          third: 'Shared media',
+        },
+        settings: {
+          first: 'Device controls',
+          second: 'Privacy',
+          third: 'Personalization',
+        },
         snake: { first: 'High score', second: 'Speed', third: 'Classic grid' },
-        memory: { first: 'Matched pairs', second: 'Best time', third: 'Card themes' },
-        'number-merge': { first: 'Highest tile', second: 'Score', third: 'Strategy grid' },
-        minesweeper: { first: 'Mine counter', second: 'Best time', third: 'Difficulty' },
-        'tower-stack': { first: 'Tower height', second: 'Perfect drops', third: 'High score' },
-        'sky-flappy': { first: 'Flight score', second: 'Best run', third: 'Obstacles' },
-        citymarkt: { first: 'Listings', second: 'Categories', third: 'Saved offers' },
-        'neon-drop': { first: 'Lines cleared', second: 'Level', third: 'Neon pieces' },
+        memory: {
+          first: 'Matched pairs',
+          second: 'Best time',
+          third: 'Card themes',
+        },
+        'number-merge': {
+          first: 'Highest tile',
+          second: 'Score',
+          third: 'Strategy grid',
+        },
+        minesweeper: {
+          first: 'Mine counter',
+          second: 'Best time',
+          third: 'Difficulty',
+        },
+        'tower-stack': {
+          first: 'Tower height',
+          second: 'Perfect drops',
+          third: 'High score',
+        },
+        'sky-flappy': {
+          first: 'Flight score',
+          second: 'Best run',
+          third: 'Obstacles',
+        },
+        citymarkt: {
+          first: 'Listings',
+          second: 'Categories',
+          third: 'Saved offers',
+        },
+        'neon-drop': {
+          first: 'Lines cleared',
+          second: 'Level',
+          third: 'Neon pieces',
+        },
       },
       search: {
         recommended: 'Recommended',
@@ -5276,9 +5448,6 @@ export const usePhoneStore = defineStore('phone', {
       firstName: '',
       lastName: '',
     } as DeviceBootstrap['player'],
-    permissions: {
-      adminPanel: false,
-    } as DeviceBootstrap['permissions'],
     security: {
       enabled: false,
       length: null,
@@ -5298,6 +5467,15 @@ export const usePhoneStore = defineStore('phone', {
       this.cameraLandscape = false
       this.isOpen = false
     },
+    setLocale(
+      lang: string,
+      locales: LocaleTree,
+      fallbackLocales: LocaleTree,
+    ): void {
+      this.lang = lang
+      this.locales = locales
+      this.fallbackLocales = fallbackLocales
+    },
     open(payload: PhoneOpenPayload = {}): void {
       const nextImei = payload.device?.imei ?? this.device?.imei ?? null
       const nextToken = payload.token ?? this.deviceSessionToken
@@ -5313,7 +5491,6 @@ export const usePhoneStore = defineStore('phone', {
       this.locales = payload.locales ?? this.fallbackLocales
       if (payload.device) this.hydrateDevice(payload.device)
       if (payload.player) this.player = payload.player
-      this.permissions = payload.permissions ?? { adminPanel: false }
       this.security = payload.security ?? {
         enabled: false,
         length: null,
@@ -5324,7 +5501,6 @@ export const usePhoneStore = defineStore('phone', {
     endDeviceSession(): void {
       this.close()
       this.player = { firstName: '', lastName: '' }
-      this.permissions = { adminPanel: false }
       if (this.deviceSessionToken !== null) {
         this.deviceSessionToken = null
         this.persistenceGeneration += 1
diff --git a/frontend/src/types/admin.ts b/frontend/src/types/admin.ts
index 4551b6f..dbdf464 100644
--- a/frontend/src/types/admin.ts
+++ b/frontend/src/types/admin.ts
@@ -58,6 +58,7 @@ export type AdminPlayerDetail = {
   money: {
     bank: number
     cash: number
+    currency: string
   }
   name: string
   serverName: string
diff --git a/frontend/src/types/apps.ts b/frontend/src/types/apps.ts
index a825956..66a2e25 100644
--- a/frontend/src/types/apps.ts
+++ b/frontend/src/types/apps.ts
@@ -1,7 +1,6 @@
 import type { Component } from 'vue'
 
 export type BuiltinPhoneAppId =
-  | 'admin'
   | 'phone'
   | 'messages'
   | 'darkchat'
diff --git a/frontend/src/types/device.ts b/frontend/src/types/device.ts
index f652570..34ee1b4 100644
--- a/frontend/src/types/device.ts
+++ b/frontend/src/types/device.ts
@@ -50,9 +50,6 @@ export type DeviceBootstrap = {
   device: PhoneDevice
   memos: MemoDto[]
   notes: Note[]
-  permissions: {
-    adminPanel: boolean
-  }
   player: PhonePlayerIdentity
   security: DeviceSecurity
   token: string
diff --git a/frontend/src/utils/appStorePreviewImages.ts b/frontend/src/utils/appStorePreviewImages.ts
index 0abbb29..9cb8c0f 100644
--- a/frontend/src/utils/appStorePreviewImages.ts
+++ b/frontend/src/utils/appStorePreviewImages.ts
@@ -1,9 +1,6 @@
 import type { BuiltinPhoneAppId } from '@/types/apps'
 
-type PreviewableBuiltinAppId = Exclude<
-  BuiltinPhoneAppId,
-  'admin' | 'app-store'
->
+type PreviewableBuiltinAppId = Exclude<BuiltinPhoneAppId, 'app-store'>
 
 const previewModules = import.meta.glob<string>(
   '../assets/img/app-previews/*.jpg',
@@ -16,7 +13,10 @@ const previewModules = import.meta.glob<string>(
 
 const APP_STORE_PREVIEW_IMAGES = Object.fromEntries(
   Object.entries(previewModules).map(([path, imageUrl]) => {
-    const appId = path.split('/').at(-1)?.replace(/\.jpg$/, '')
+    const appId = path
+      .split('/')
+      .at(-1)
+      ?.replace(/\.jpg$/, '')
     if (!appId) throw new Error(`Invalid App Store preview path: ${path}`)
     return [appId, imageUrl]
   }),
diff --git a/frontend/src/utils/appStorePreviews.ts b/frontend/src/utils/appStorePreviews.ts
index 83f5966..c393593 100644
--- a/frontend/src/utils/appStorePreviews.ts
+++ b/frontend/src/utils/appStorePreviews.ts
@@ -5,7 +5,7 @@ export type AppStorePreviewVisual = {
   surface: string
 }
 
-type PreviewableBuiltinAppId = Exclude<BuiltinPhoneAppId, 'admin' | 'app-store'>
+type PreviewableBuiltinAppId = Exclude<BuiltinPhoneAppId, 'app-store'>
 
 const APP_STORE_PREVIEW_STYLES = {
   citywarn: { accent: '#ff4f5e', surface: '#250e17' },
diff --git a/frontend/src/utils/preferences.ts b/frontend/src/utils/preferences.ts
index 6e57e10..48b0358 100644
--- a/frontend/src/utils/preferences.ts
+++ b/frontend/src/utils/preferences.ts
@@ -98,7 +98,6 @@ const DEFAULT_APP_NOTIFICATIONS: Record<
   LaunchablePhoneAppId,
   AppNotificationPreferences
 > = {
-  admin: { enabled: true, sounds: true },
   phone: { enabled: true, sounds: true },
   messages: { enabled: true, sounds: true },
   darkchat: { enabled: true, sounds: true },
diff --git a/frontend/src/views/PhoneAppWindow.vue b/frontend/src/views/PhoneAppWindow.vue
index 12bee44..0dcc86e 100644
--- a/frontend/src/views/PhoneAppWindow.vue
+++ b/frontend/src/views/PhoneAppWindow.vue
@@ -28,7 +28,7 @@ const launchStyle = computed(() => {
 
 <template>
   <div
-    v-if="app && (!app.adminOnly || phone.permissions.adminPanel)"
+    v-if="app && !app.adminOnly"
     class="app-window"
     :class="{ 'app-window--citywarn': app.id === 'citywarn' }"
     :style="launchStyle"
diff --git a/frontend/src/views/apps/AdminApp.contract.test.ts b/frontend/src/views/apps/AdminApp.contract.test.ts
deleted file mode 100644
index 5e6048a..0000000
--- a/frontend/src/views/apps/AdminApp.contract.test.ts
+++ /dev/null
@@ -1,117 +0,0 @@
-import { readFileSync } from 'node:fs'
-
-import { describe, expect, it } from 'vitest'
-
-const source = readFileSync(new URL('./AdminApp.vue', import.meta.url), 'utf8')
-const store = readFileSync(
-  new URL('../../stores/admin.ts', import.meta.url),
-  'utf8',
-)
-const server = readFileSync(
-  new URL('../../../../sky_phone/source/server/admin.lua', import.meta.url),
-  'utf8',
-)
-const phoneServer = readFileSync(
-  new URL('../../../../sky_phone/source/server/phone.lua', import.meta.url),
-  'utf8',
-)
-const phoneClient = readFileSync(
-  new URL('../../../../sky_phone/source/client/main.lua', import.meta.url),
-  'utf8',
-)
-const bridge = readFileSync(
-  new URL(
-    '../../../../sky_phone/source/client/nui_server_bridge.lua',
-    import.meta.url,
-  ),
-  'utf8',
-)
-const config = readFileSync(
-  new URL('../../../../sky_phone/config/config.lua', import.meta.url),
-  'utf8',
-)
-const schema = readFileSync(
-  new URL('../../../../sky_phone/sql/install.sql', import.meta.url),
-  'utf8',
-)
-
-describe('admin command center contracts', () => {
-  it('uses the shared Sky UI with one scroll owner and no Konsta imports', () => {
-    expect(source).not.toContain("from 'konsta/vue'")
-    for (const component of [
-      'SkyAppPage',
-      'SkyNavbar',
-      'SkyScrollArea',
-      'SkySearchbar',
-      'SkyDialog',
-      'SkyCard',
-    ]) {
-      expect(source).toContain(`<${component}`)
-    }
-    expect(source.match(/<SkyScrollArea/g)).toHaveLength(2)
-    expect(source).toContain('<template v-if="admin.selectedPlayer">')
-    expect(source).toContain('<template v-else>')
-    expect(source).toContain('@media (prefers-reduced-motion: reduce)')
-  })
-
-  it('connects each admin operation through the standard NUI callback bridge', () => {
-    expect(bridge).toContain(
-      'admin = [[bootstrap player set-app reveal-password]]',
-    )
-    for (const endpoint of [
-      'admin:bootstrap',
-      'admin:player',
-      'admin:set-app',
-      'admin:reveal-password',
-    ]) {
-      expect(store).toContain(endpoint)
-    }
-  })
-
-  it('authorizes every server request and applies separate rate limits', () => {
-    expect(server).toContain('SkyPhone.RequireSession(source)')
-    expect(server).toContain(
-      'Bridge.Framework.HasAdminGroup(source, Config.AdminPanel.AdminGroups)',
-    )
-    expect(server).toContain('Config.AdminPanel.ReadRequestsPerMinute')
-    expect(server).toContain('Config.AdminPanel.ActionRequestsPerMinute')
-    expect(server).toContain('Config.AdminPanel.CredentialRevealsPerMinute')
-    expect(config).toContain('Config.AdminPanel = {')
-  })
-
-  it('opens directly from a server-authorized configurable command', () => {
-    expect(config).toContain('Command = "phoneadmin"')
-    expect(phoneServer).toContain(
-      'RegisterCommand(Config.AdminPanel.Command, function(command_source)',
-    )
-    expect(phoneServer).toContain(
-      'Bridge.Framework.HasAdminGroup(player_source, Config.AdminPanel.AdminGroups)',
-    )
-    expect(phoneServer).toContain(
-      'TriggerClientEvent("sky_phone:admin:launch", player_source)',
-    )
-    expect(phoneServer).toContain('if not sessions[player_source] then')
-    expect(phoneClient).toContain(
-      'RegisterNetEvent("sky_phone:admin:launch"',
-    )
-    expect(phoneClient).toContain('requested_app_id = "admin"')
-  })
-
-  it('validates ownership and app policy before remote device mutation', () => {
-    expect(server).toContain('find_owned_device(target_source, data.imei)')
-    expect(server).toContain('app_metadata(data.appId)')
-    expect(server).toContain('error = "device_not_owned"')
-    expect(server).toContain('error = "app_protected"')
-    expect(server).toContain('AND `revision` = ?')
-    expect(server).toContain('SkyPhone.RefreshDevice(data.imei)')
-  })
-
-  it('gates plaintext account reveals behind confirmation and audit logging', () => {
-    expect(source).toContain('revealDialogImei')
-    expect(source).toContain("t('credentials.revealTitle')")
-    expect(server).toContain('"reveal_account_password"')
-    expect(server).toContain('write_audit(')
-    expect(server).not.toContain('passcode_hash` AS')
-    expect(schema).toContain('CREATE TABLE IF NOT EXISTS `sky_phone_admin_audit`')
-  })
-})
diff --git a/frontend/src/views/apps/AdminApp.vue b/frontend/src/views/apps/AdminApp.vue
deleted file mode 100644
index 7a8bb98..0000000
--- a/frontend/src/views/apps/AdminApp.vue
+++ /dev/null
@@ -1,1352 +0,0 @@
-<script setup lang="ts">
-import {
-  BadgeDollarSign,
-  Check,
-  ChevronRight,
-  CircleUserRound,
-  Clipboard,
-  Database,
-  HardDrive,
-  KeyRound,
-  LockKeyhole,
-  RefreshCw,
-  SearchX,
-  ShieldCheck,
-  ShieldEllipsis,
-  Smartphone,
-  UserRoundCog,
-  UsersRound,
-  Wifi,
-} from 'lucide-vue-next'
-import { computed, onMounted, ref, watch } from 'vue'
-import { useRouter } from 'vue-router'
-
-import {
-  DEFAULT_INSTALLED_PHONE_APP_IDS,
-  getPhoneApp,
-  getPhoneAppLabel,
-  isExternalPhoneApp,
-  isLaunchablePhoneApp,
-  isPhoneAppRemovable,
-  PHONE_APPS,
-} from '@/config/apps'
-import { useAdminStore } from '@/stores/admin'
-import { usePhoneStore } from '@/stores/phone'
-import type { AdminAuditEntry, AdminDevice } from '@/types/admin'
-import type { LaunchablePhoneAppDefinition } from '@/types/apps'
-import {
-  SkyAppPage,
-  SkyButton,
-  SkyCard,
-  SkyDialog,
-  SkyDialogButton,
-  SkyEmptyState,
-  SkyNavbar,
-  SkyScrollArea,
-  SkySearchbar,
-  SkySpinner,
-} from '@/ui'
-import { copyText } from '@/utils/clipboard'
-import { parseDatabaseDate } from '@/utils/date'
-
-type AdminTab = 'players' | 'audit'
-
-const admin = useAdminStore()
-const phone = usePhoneStore()
-const router = useRouter()
-const tab = ref<AdminTab>('players')
-const playerQuery = ref('')
-const appQuery = ref('')
-const selectedImei = ref('')
-const revealDialogImei = ref('')
-const toast = ref('')
-let toastTimer: number | undefined
-
-const filteredPlayers = computed(() => {
-  const needle = playerQuery.value.trim().toLocaleLowerCase(phone.lang)
-  if (!needle) return admin.players
-  return admin.players.filter((player) =>
-    [
-      player.name,
-      player.serverName,
-      player.source,
-      player.identifier,
-      player.job,
-      player.phoneNumber ?? '',
-    ]
-      .join(' ')
-      .toLocaleLowerCase(phone.lang)
-      .includes(needle),
-  )
-})
-
-const selectedDevice = computed(() => {
-  const devices = admin.selectedPlayer?.devices ?? []
-  return (
-    devices.find((device) => device.imei === selectedImei.value) ??
-    devices[0] ??
-    null
-  )
-})
-
-const manageableApps = computed(() => {
-  const needle = appQuery.value.trim().toLocaleLowerCase(phone.lang)
-  return PHONE_APPS.filter(
-    (app): app is LaunchablePhoneAppDefinition =>
-      isLaunchablePhoneApp(app) && !app.adminOnly,
-  )
-    .filter((app) => {
-      if (!needle) return true
-      return getPhoneAppLabel(app, phone.t)
-        .toLocaleLowerCase(phone.lang)
-        .includes(needle)
-    })
-    .sort((left, right) => {
-      const leftInstalled = selectedDevice.value
-        ? isInstalled(selectedDevice.value, left)
-        : false
-      const rightInstalled = selectedDevice.value
-        ? isInstalled(selectedDevice.value, right)
-        : false
-      if (leftInstalled !== rightInstalled) return leftInstalled ? -1 : 1
-      return getPhoneAppLabel(left, phone.t).localeCompare(
-        getPhoneAppLabel(right, phone.t),
-        phone.lang,
-      )
-    })
-})
-
-const revealedCredential = computed(() =>
-  selectedDevice.value
-    ? admin.revealedCredentials[selectedDevice.value.imei]
-    : undefined,
-)
-
-watch(
-  () => admin.selectedPlayer,
-  (player) => {
-    if (!player?.devices.some((device) => device.imei === selectedImei.value)) {
-      selectedImei.value = player?.devices[0]?.imei ?? ''
-    }
-  },
-)
-
-function t(key: string, params?: Record<string, string>): string {
-  return phone.t('Apps.admin.' + key, params)
-}
-
-function showToast(message: string): void {
-  if (toastTimer) window.clearTimeout(toastTimer)
-  toast.value = message
-  toastTimer = window.setTimeout(() => (toast.value = ''), 2600)
-}
-
-function formatMoney(value: number): string {
-  return new Intl.NumberFormat(phone.lang, {
-    maximumFractionDigits: 0,
-  }).format(value)
-}
-
-function formatDate(value: string): string {
-  const date = parseDatabaseDate(value)
-  return Number.isNaN(date.getTime())
-    ? value
-    : new Intl.DateTimeFormat(phone.lang, {
-        dateStyle: 'medium',
-        timeStyle: 'short',
-      }).format(date)
-}
-
-function isInstalled(
-  device: AdminDevice,
-  app: LaunchablePhoneAppDefinition,
-): boolean {
-  if (device.apps.uninstalled.includes(app.id)) return false
-  if (device.apps.claimed.includes(app.id)) return true
-  return isExternalPhoneApp(app)
-    ? app.defaultInstalled
-    : DEFAULT_INSTALLED_PHONE_APP_IDS.has(app.id)
-}
-
-function errorText(error = admin.error): string {
-  return t('errors.' + (error || 'default'))
-}
-
-async function openPlayer(source: number): Promise<void> {
-  if (await admin.openPlayer(source)) return
-  showToast(errorText())
-}
-
-async function toggleApp(app: LaunchablePhoneAppDefinition): Promise<void> {
-  const player = admin.selectedPlayer
-  const device = selectedDevice.value
-  if (!player || !device) return
-  const installed = isInstalled(device, app)
-  const response = await admin.setApp(
-    player.source,
-    device.imei,
-    app.id,
-    !installed,
-  )
-  if (!response.success) {
-    showToast(errorText(response.error))
-    return
-  }
-  showToast(t(installed ? 'apps.revoked' : 'apps.granted'))
-}
-
-async function revealPassword(): Promise<void> {
-  const player = admin.selectedPlayer
-  const imei = revealDialogImei.value
-  revealDialogImei.value = ''
-  if (!player || !imei) return
-  const response = await admin.revealPassword(player.source, imei)
-  if (!response.success) showToast(errorText(response.error))
-}
-
-async function copyPassword(): Promise<void> {
-  if (!revealedCredential.value) return
-  if (await copyText(revealedCredential.value.password)) {
-    showToast(t('credentials.copied'))
-  }
-}
-
-function auditDescription(entry: AdminAuditEntry): string {
-  const appId =
-    typeof entry.details.appId === 'string' ? entry.details.appId : ''
-  const app = appId ? getPhoneApp(appId) : undefined
-  return app
-    ? getPhoneAppLabel(app, phone.t)
-    : typeof entry.details.email === 'string'
-      ? entry.details.email
-      : entry.deviceImei || entry.targetIdentifier
-}
-
-async function refresh(): Promise<void> {
-  if (!(await admin.load())) showToast(errorText())
-}
-
-function closeDetail(): void {
-  admin.closePlayer()
-  selectedImei.value = ''
-  appQuery.value = ''
-}
-
-onMounted(() => {
-  if (!phone.permissions.adminPanel) {
-    void router.replace('/')
-    return
-  }
-  void refresh()
-})
-</script>
-
-<template>
-  <SkyAppPage
-    dark
-    accent="#8b7bff"
-    accent-soft="rgba(139, 123, 255, 0.2)"
-    class="admin-page"
-    :label="t('name')"
-  >
-    <template v-if="admin.selectedPlayer">
-      <SkyNavbar
-        :back-label="t('players.title')"
-        show-back
-        :subtitle="'ID ' + admin.selectedPlayer.source"
-        :title="admin.selectedPlayer.name"
-        @back="closeDetail"
-      />
-
-      <SkyScrollArea padded class="admin-scroll admin-detail-scroll">
-        <section class="admin-identity-card">
-          <div class="admin-avatar admin-avatar--large" aria-hidden="true">
-            <CircleUserRound :size="34" />
-          </div>
-          <div>
-            <span class="admin-kicker">{{ t('detail.character') }}</span>
-            <h2>{{ admin.selectedPlayer.name }}</h2>
-            <p>{{ admin.selectedPlayer.serverName }}</p>
-          </div>
-          <span class="admin-live-dot" :aria-label="t('players.online')"></span>
-        </section>
-
-        <section class="admin-info-grid" :aria-label="t('detail.data')">
-          <SkyCard>
-            <BadgeDollarSign :size="18" />
-            <span>{{ t('detail.cash') }}</span>
-            <strong>{{
-              '$' + formatMoney(admin.selectedPlayer.money.cash)
-            }}</strong>
-          </SkyCard>
-          <SkyCard>
-            <Database :size="18" />
-            <span>{{ t('detail.bank') }}</span>
-            <strong>{{
-              '$' + formatMoney(admin.selectedPlayer.money.bank)
-            }}</strong>
-          </SkyCard>
-          <SkyCard>
-            <UserRoundCog :size="18" />
-            <span>{{ t('detail.job') }}</span>
-            <strong>{{
-              admin.selectedPlayer.job.label || admin.selectedPlayer.job.name
-            }}</strong>
-          </SkyCard>
-          <SkyCard>
-            <Wifi :size="18" />
-            <span>{{ t('detail.duty') }}</span>
-            <strong>{{
-              admin.selectedPlayer.job.onDuty
-                ? t('detail.onDuty')
-                : t('detail.offDuty')
-            }}</strong>
-          </SkyCard>
-        </section>
-
-        <section class="admin-data-panel">
-          <div class="admin-section-heading">
-            <div>
-              <span>{{ t('detail.identity') }}</span>
-              <h2>{{ t('detail.playerData') }}</h2>
-            </div>
-            <ShieldCheck :size="22" />
-          </div>
-          <dl class="admin-data-list">
-            <div>
-              <dt>{{ t('detail.identifier') }}</dt>
-              <dd>{{ admin.selectedPlayer.identifier }}</dd>
-            </div>
-            <div>
-              <dt>{{ t('detail.birthdate') }}</dt>
-              <dd>
-                {{ admin.selectedPlayer.birthdate || t('detail.unknown') }}
-              </dd>
-            </div>
-            <div>
-              <dt>{{ t('detail.grade') }}</dt>
-              <dd>
-                {{ admin.selectedPlayer.job.grade }} ·
-                {{ admin.selectedPlayer.job.gradeLabel || t('detail.unknown') }}
-              </dd>
-            </div>
-          </dl>
-        </section>
-
-        <section class="admin-data-panel admin-devices-panel">
-          <div class="admin-section-heading">
-            <div>
-              <span>{{ t('devices.eyebrow') }}</span>
-              <h2>{{ t('devices.title') }}</h2>
-            </div>
-            <strong>{{ admin.selectedPlayer.devices.length }}</strong>
-          </div>
-
-          <div
-            v-if="admin.selectedPlayer.devices.length > 1"
-            class="admin-device-picker"
-            :aria-label="t('devices.choose')"
-          >
-            <button
-              v-for="device in admin.selectedPlayer.devices"
-              :key="device.imei"
-              type="button"
-              :class="{ 'is-active': device.imei === selectedDevice?.imei }"
-              @click="selectedImei = device.imei"
-            >
-              <Smartphone :size="17" />
-              <span>{{ device.number || device.imei.slice(-4) }}</span>
-            </button>
-          </div>
-
-          <SkyEmptyState
-            v-if="!selectedDevice"
-            :body="t('devices.emptyBody')"
-            :title="t('devices.empty')"
-          />
-
-          <template v-else>
-            <div class="admin-device-hero">
-              <div class="admin-device-glyph" aria-hidden="true">
-                <Smartphone :size="28" />
-              </div>
-              <div>
-                <h3>{{ selectedDevice.name }}</h3>
-                <p>{{ selectedDevice.number || t('devices.noNumber') }}</p>
-              </div>
-              <span>{{ selectedDevice.simType || t('devices.noSim') }}</span>
-            </div>
-
-            <dl class="admin-data-list admin-data-list--compact">
-              <div>
-                <dt>{{ t('devices.imei') }}</dt>
-                <dd>{{ selectedDevice.imei }}</dd>
-              </div>
-              <div>
-                <dt>{{ t('devices.updated') }}</dt>
-                <dd>{{ formatDate(selectedDevice.updatedAt) }}</dd>
-              </div>
-            </dl>
-
-            <div class="admin-credential-card">
-              <div class="admin-section-heading admin-section-heading--small">
-                <div>
-                  <span>{{ t('credentials.eyebrow') }}</span>
-                  <h3>{{ t('credentials.title') }}</h3>
-                </div>
-                <KeyRound :size="21" />
-              </div>
-
-              <template v-if="selectedDevice.account">
-                <div class="admin-secret-row">
-                  <div>
-                    <span>{{ t('credentials.email') }}</span>
-                    <strong>{{ selectedDevice.account.email }}</strong>
-                  </div>
-                </div>
-                <div class="admin-secret-row">
-                  <div>
-                    <span>{{ t('credentials.password') }}</span>
-                    <strong class="admin-password">{{
-                      revealedCredential?.password || '••••••••••••'
-                    }}</strong>
-                  </div>
-                  <SkyButton
-                    v-if="!revealedCredential"
-                    :disabled="
-                      admin.actionKey === selectedDevice.imei + ':password'
-                    "
-                    small
-                    tonal
-                    @click="revealDialogImei = selectedDevice.imei"
-                  >
-                    {{ t('credentials.reveal') }}
-                  </SkyButton>
-                  <SkyButton
-                    v-else
-                    :aria-label="t('credentials.copy')"
-                    icon-only
-                    tonal
-                    @click="copyPassword"
-                  >
-                    <Clipboard :size="18" />
-                  </SkyButton>
-                </div>
-              </template>
-              <p v-else class="admin-muted-note">
-                {{ t('credentials.noAccount') }}
-              </p>
-
-              <div class="admin-pin-state">
-                <LockKeyhole :size="19" />
-                <div>
-                  <strong>{{ t('credentials.passcode') }}</strong>
-                  <span>{{
-                    selectedDevice.security.enabled
-                      ? t('credentials.passcodeHashed', {
-                          length: String(selectedDevice.security.length ?? 0),
-                        })
-                      : t('credentials.passcodeDisabled')
-                  }}</span>
-                </div>
-              </div>
-            </div>
-          </template>
-        </section>
-
-        <section v-if="selectedDevice" class="admin-data-panel admin-app-panel">
-          <div class="admin-section-heading">
-            <div>
-              <span>{{ t('apps.eyebrow') }}</span>
-              <h2>{{ t('apps.title') }}</h2>
-            </div>
-            <HardDrive :size="22" />
-          </div>
-          <SkySearchbar
-            v-model="appQuery"
-            :clear-label="t('search.clear')"
-            :label="t('apps.search')"
-            :placeholder="t('apps.search')"
-          />
-          <div class="admin-app-list">
-            <article v-for="app in manageableApps" :key="app.id">
-              <div class="admin-mini-app-icon" :class="app.iconClass">
-                <component :is="app.icon" :size="20" />
-              </div>
-              <div>
-                <strong>{{ getPhoneAppLabel(app, phone.t) }}</strong>
-                <span>{{
-                  isInstalled(selectedDevice, app)
-                    ? t('apps.installed')
-                    : t('apps.available')
-                }}</span>
-              </div>
-              <SkyButton
-                :disabled="
-                  admin.actionKey === selectedDevice.imei + ':' + app.id ||
-                  (isInstalled(selectedDevice, app) &&
-                    !isPhoneAppRemovable(app))
-                "
-                small
-                :tonal="isInstalled(selectedDevice, app)"
-                :variant="
-                  isInstalled(selectedDevice, app) ? 'secondary' : 'primary'
-                "
-                @click="toggleApp(app)"
-              >
-                <Check
-                  v-if="
-                    isInstalled(selectedDevice, app) &&
-                    !isPhoneAppRemovable(app)
-                  "
-                  :size="16"
-                />
-                <template v-else>{{
-                  t(
-                    isInstalled(selectedDevice, app)
-                      ? 'apps.revoke'
-                      : 'apps.grant',
-                  )
-                }}</template>
-              </SkyButton>
-            </article>
-          </div>
-        </section>
-      </SkyScrollArea>
-    </template>
-
-    <template v-else>
-      <SkyNavbar
-        :title="t('name')"
-        :subtitle="t('subtitle')"
-        show-back
-        @back="router.push('/')"
-      >
-        <template #right>
-          <button
-            class="admin-navbar-action"
-            type="button"
-            :aria-label="t('refresh')"
-            :disabled="admin.loading"
-            @click="refresh"
-          >
-            <RefreshCw :size="19" :class="{ 'is-spinning': admin.loading }" />
-          </button>
-        </template>
-      </SkyNavbar>
-
-      <nav class="admin-tabs" :aria-label="t('navigation')">
-        <button
-          type="button"
-          :class="{ 'is-active': tab === 'players' }"
-          @click="tab = 'players'"
-        >
-          <UsersRound :size="17" />
-          {{ t('tabs.players') }}
-        </button>
-        <button
-          type="button"
-          :class="{ 'is-active': tab === 'audit' }"
-          @click="tab = 'audit'"
-        >
-          <ShieldEllipsis :size="17" />
-          {{ t('tabs.audit') }}
-        </button>
-      </nav>
-
-      <SkyScrollArea padded class="admin-scroll admin-overview-scroll">
-        <div v-if="admin.loading && !admin.initialized" class="admin-loading">
-          <SkySpinner />
-          <span>{{ t('loading') }}</span>
-        </div>
-
-        <template v-else-if="tab === 'players'">
-          <section class="admin-command-hero">
-            <div class="admin-command-icon" aria-hidden="true">
-              <ShieldCheck :size="34" />
-            </div>
-            <div>
-              <span>{{ t('overview.eyebrow') }}</span>
-              <h1>{{ t('overview.title') }}</h1>
-              <p>{{ t('overview.body') }}</p>
-            </div>
-          </section>
-
-          <section class="admin-stat-grid" :aria-label="t('overview.stats')">
-            <SkyCard>
-              <UsersRound :size="19" />
-              <strong>{{ admin.stats.online }}</strong>
-              <span>{{ t('overview.online') }}</span>
-            </SkyCard>
-            <SkyCard>
-              <Smartphone :size="19" />
-              <strong>{{ admin.stats.devices }}</strong>
-              <span>{{ t('overview.devices') }}</span>
-            </SkyCard>
-            <SkyCard>
-              <Database :size="19" />
-              <strong>{{ admin.stats.accounts }}</strong>
-              <span>{{ t('overview.accounts') }}</span>
-            </SkyCard>
-          </section>
-
-          <section class="admin-player-section">
-            <div class="admin-section-heading">
-              <div>
-                <span>{{ t('players.eyebrow') }}</span>
-                <h2>{{ t('players.title') }}</h2>
-              </div>
-              <strong>{{ filteredPlayers.length }}</strong>
-            </div>
-            <SkySearchbar
-              v-model="playerQuery"
-              :clear-label="t('search.clear')"
-              :label="t('search.players')"
-              :placeholder="t('search.players')"
-            />
-
-            <div v-if="filteredPlayers.length" class="admin-player-list">
-              <button
-                v-for="player in filteredPlayers"
-                :key="player.source"
-                type="button"
-                @click="openPlayer(player.source)"
-              >
-                <span class="admin-avatar" aria-hidden="true">{{
-                  player.name.charAt(0).toLocaleUpperCase(phone.lang)
-                }}</span>
-                <span class="admin-player-copy">
-                  <strong>{{ player.name }}</strong>
-                  <small>
-                    ID {{ player.source }} ·
-                    {{ player.job || t('detail.unknown') }}
-                  </small>
-                </span>
-                <span class="admin-device-count">
-                  <Smartphone :size="14" />
-                  {{ player.deviceCount }}
-                </span>
-                <ChevronRight :size="18" />
-              </button>
-            </div>
-
-            <SkyEmptyState
-              v-else
-              :body="t('players.emptyBody')"
-              :title="t('players.empty')"
-            >
-              <template #icon>
-                <SearchX :size="24" />
-              </template>
-            </SkyEmptyState>
-          </section>
-        </template>
-
-        <section v-else class="admin-audit-section">
-          <div class="admin-audit-hero">
-            <ShieldEllipsis :size="28" />
-            <div>
-              <span>{{ t('audit.eyebrow') }}</span>
-              <h2>{{ t('audit.title') }}</h2>
-              <p>{{ t('audit.body') }}</p>
-            </div>
-          </div>
-          <div v-if="admin.audit.length" class="admin-audit-list">
-            <article v-for="entry in admin.audit" :key="entry.id">
-              <span class="admin-audit-line" aria-hidden="true"></span>
-              <div class="admin-audit-icon" aria-hidden="true">
-                <ShieldCheck :size="17" />
-              </div>
-              <div>
-                <span>{{ formatDate(entry.createdAt) }}</span>
-                <strong>{{ t('audit.actions.' + entry.action) }}</strong>
-                <p>{{ auditDescription(entry) }}</p>
-                <small>{{
-                  t('audit.by', {
-                    actor: entry.actorName,
-                    target: String(entry.targetSource ?? '—'),
-                  })
-                }}</small>
-              </div>
-            </article>
-          </div>
-          <SkyEmptyState
-            v-else
-            :body="t('audit.emptyBody')"
-            :title="t('audit.empty')"
-          />
-        </section>
-      </SkyScrollArea>
-    </template>
-
-    <SkyDialog
-      :content="t('credentials.revealBody')"
-      :opened="Boolean(revealDialogImei)"
-      :title="t('credentials.revealTitle')"
-      @backdropclick="revealDialogImei = ''"
-      @escape="revealDialogImei = ''"
-    >
-      <template #buttons>
-        <SkyDialogButton @click="revealDialogImei = ''">
-          {{ t('credentials.cancel') }}
-        </SkyDialogButton>
-        <SkyDialogButton strong @click="revealPassword">
-          {{ t('credentials.confirmReveal') }}
-        </SkyDialogButton>
-      </template>
-    </SkyDialog>
-
-    <Transition name="admin-toast">
-      <div v-if="toast" class="admin-toast" role="status">{{ toast }}</div>
-    </Transition>
-  </SkyAppPage>
-</template>
-
-<style scoped>
-.admin-page {
-  --admin-violet: #8b7bff;
-  --admin-cyan: #39d9ff;
-  --admin-green: #46e6a8;
-  --admin-surface: #111118;
-  --admin-surface-raised: #191923;
-  position: absolute;
-  inset: 0;
-  overflow: hidden;
-  background:
-    radial-gradient(
-      circle at 85% -5%,
-      rgba(122, 92, 255, 0.26),
-      transparent 34%
-    ),
-    radial-gradient(
-      circle at -8% 35%,
-      rgba(57, 217, 255, 0.1),
-      transparent 32%
-    ),
-    #07070b;
-  color: var(--sky-text);
-}
-
-.admin-page :deep(.sky-app-page__backdrop) {
-  background: transparent;
-}
-
-.admin-page :deep(.sky-navbar__background) {
-  background: rgba(7, 7, 11, 0.96);
-}
-
-.admin-page :deep(.sky-navbar__blur) {
-  display: none;
-}
-
-.admin-scroll {
-  position: absolute;
-  inset: var(--sky-safe-area-top) 0 var(--sky-safe-area-bottom);
-  overflow-x: hidden;
-  overflow-y: auto;
-  overscroll-behavior: contain;
-  scrollbar-width: none;
-}
-
-.admin-scroll::-webkit-scrollbar {
-  display: none;
-}
-
-.admin-overview-scroll {
-  top: calc(var(--sky-safe-area-top) + var(--sky-navbar-height) + 58px);
-}
-
-.admin-detail-scroll {
-  top: calc(var(--sky-safe-area-top) + var(--sky-navbar-height));
-  display: grid;
-  align-content: start;
-  gap: var(--sky-space-4);
-}
-
-.admin-navbar-action {
-  width: var(--sky-touch-target);
-  height: var(--sky-touch-target);
-  display: grid;
-  place-items: center;
-  border: 0;
-  border-radius: var(--sky-radius-pill);
-  background: var(--sky-app-accent-soft);
-  color: var(--admin-violet);
-}
-
-.admin-tabs {
-  position: absolute;
-  z-index: 3;
-  top: calc(var(--sky-safe-area-top) + var(--sky-navbar-height) + 7px);
-  left: var(--sky-page-gutter);
-  right: var(--sky-page-gutter);
-  height: 44px;
-  display: grid;
-  grid-template-columns: repeat(2, 1fr);
-  gap: var(--sky-space-1);
-  padding: 4px;
-  border: 1px solid var(--sky-hairline);
-  border-radius: var(--sky-radius-pill);
-  background: #111116;
-}
-
-.admin-tabs button {
-  min-height: 36px;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  gap: var(--sky-space-2);
-  border: 0;
-  border-radius: var(--sky-radius-pill);
-  background: transparent;
-  color: var(--sky-muted);
-  font: inherit;
-  font-size: var(--sky-font-caption);
-  font-weight: 700;
-}
-
-.admin-tabs button.is-active {
-  background: linear-gradient(135deg, #6f5cff, #9588ff);
-  color: #fff;
-  box-shadow: 0 5px 18px rgba(111, 92, 255, 0.32);
-}
-
-.admin-command-hero,
-.admin-audit-hero,
-.admin-identity-card {
-  display: flex;
-  align-items: center;
-  gap: var(--sky-space-4);
-  padding: var(--sky-space-5);
-  border: 1px solid rgba(139, 123, 255, 0.3);
-  border-radius: var(--sky-radius-card);
-  background: linear-gradient(
-    145deg,
-    rgba(34, 31, 56, 0.96),
-    rgba(16, 16, 24, 0.98)
-  );
-  box-shadow: 0 18px 50px rgba(0, 0, 0, 0.3);
-}
-
-.admin-command-hero h1,
-.admin-audit-hero h2,
-.admin-identity-card h2,
-.admin-section-heading h2,
-.admin-section-heading h3 {
-  margin: 3px 0 0;
-  font-size: 20px;
-  line-height: 1.12;
-}
-
-.admin-command-hero p,
-.admin-audit-hero p,
-.admin-identity-card p {
-  margin: 6px 0 0;
-  color: var(--sky-muted);
-  font-size: 13px;
-  line-height: 1.4;
-}
-
-.admin-command-hero span,
-.admin-audit-hero span,
-.admin-kicker,
-.admin-section-heading span {
-  color: var(--admin-cyan);
-  font-size: 10px;
-  font-weight: 800;
-  letter-spacing: 0.12em;
-  text-transform: uppercase;
-}
-
-.admin-command-icon,
-.admin-device-glyph {
-  width: 58px;
-  height: 58px;
-  flex: none;
-  display: grid;
-  place-items: center;
-  border-radius: 18px;
-  background: linear-gradient(145deg, #7864ff, #4431c4);
-  color: #fff;
-  box-shadow: 0 10px 30px rgba(91, 70, 232, 0.35);
-}
-
-.admin-stat-grid,
-.admin-info-grid {
-  display: grid;
-  grid-template-columns: repeat(3, 1fr);
-  gap: var(--sky-space-2);
-  margin-top: var(--sky-space-3);
-}
-
-.admin-stat-grid :deep(.sky-card),
-.admin-info-grid :deep(.sky-card) {
-  min-width: 0;
-  border: 1px solid var(--sky-hairline);
-  background: rgba(20, 20, 29, 0.96);
-}
-
-.admin-stat-grid :deep(.sky-card__content),
-.admin-info-grid :deep(.sky-card__content) {
-  display: grid;
-  gap: 5px;
-  padding: var(--sky-space-3);
-}
-
-.admin-stat-grid svg,
-.admin-info-grid svg {
-  color: var(--admin-violet);
-}
-
-.admin-stat-grid strong {
-  font-size: 23px;
-}
-
-.admin-stat-grid span,
-.admin-info-grid span {
-  overflow: hidden;
-  color: var(--sky-muted);
-  font-size: 10px;
-  text-overflow: ellipsis;
-}
-
-.admin-info-grid {
-  grid-template-columns: repeat(2, 1fr);
-  margin: 0;
-}
-
-.admin-info-grid strong {
-  overflow: hidden;
-  font-size: 13px;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.admin-player-section,
-.admin-audit-section {
-  margin-top: var(--sky-space-5);
-}
-
-.admin-section-heading {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: var(--sky-space-3);
-  margin-bottom: var(--sky-space-3);
-}
-
-.admin-section-heading > strong {
-  min-width: 32px;
-  padding: 5px 9px;
-  border-radius: var(--sky-radius-pill);
-  background: var(--sky-app-accent-soft);
-  color: var(--admin-violet);
-  font-size: 12px;
-  text-align: center;
-}
-
-.admin-section-heading > svg {
-  color: var(--admin-violet);
-}
-
-.admin-player-list,
-.admin-app-list,
-.admin-audit-list {
-  display: grid;
-  gap: var(--sky-space-2);
-  margin-top: var(--sky-space-3);
-}
-
-.admin-player-list > button,
-.admin-app-list article {
-  min-height: 66px;
-  display: flex;
-  align-items: center;
-  gap: var(--sky-space-3);
-  width: 100%;
-  padding: 10px 12px;
-  border: 1px solid var(--sky-hairline);
-  border-radius: 18px;
-  background: var(--admin-surface);
-  color: inherit;
-  font: inherit;
-  text-align: left;
-}
-
-.admin-player-list > button:active {
-  background: var(--admin-surface-raised);
-  transform: scale(0.985);
-}
-
-.admin-avatar {
-  width: 44px;
-  height: 44px;
-  flex: none;
-  display: grid;
-  place-items: center;
-  border: 1px solid rgba(139, 123, 255, 0.4);
-  border-radius: 15px;
-  background: linear-gradient(145deg, #332c59, #191727);
-  color: #bcb2ff;
-  font-size: 17px;
-  font-weight: 800;
-}
-
-.admin-avatar--large {
-  width: 60px;
-  height: 60px;
-  border-radius: 20px;
-}
-
-.admin-player-copy,
-.admin-app-list article > div:nth-child(2) {
-  min-width: 0;
-  flex: 1;
-  display: grid;
-  gap: 4px;
-}
-
-.admin-player-copy strong,
-.admin-player-copy small,
-.admin-app-list strong,
-.admin-app-list span {
-  overflow: hidden;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.admin-player-copy small,
-.admin-app-list span {
-  color: var(--sky-muted);
-  font-size: 11px;
-}
-
-.admin-device-count {
-  display: flex;
-  align-items: center;
-  gap: 4px;
-  color: var(--sky-muted);
-  font-size: 11px;
-}
-
-.admin-identity-card {
-  position: relative;
-  min-height: 100px;
-}
-
-.admin-live-dot {
-  position: absolute;
-  top: 18px;
-  right: 18px;
-  width: 10px;
-  height: 10px;
-  border: 2px solid #211e35;
-  border-radius: 50%;
-  background: var(--admin-green);
-  box-shadow: 0 0 12px rgba(70, 230, 168, 0.7);
-}
-
-.admin-data-panel {
-  padding: var(--sky-space-4);
-  border: 1px solid var(--sky-hairline);
-  border-radius: var(--sky-radius-card);
-  background: rgba(17, 17, 24, 0.96);
-}
-
-.admin-data-list {
-  display: grid;
-  gap: 1px;
-  margin: 0;
-  overflow: hidden;
-  border: 1px solid var(--sky-hairline);
-  border-radius: 16px;
-  background: var(--sky-hairline);
-}
-
-.admin-data-list > div {
-  display: grid;
-  gap: 5px;
-  padding: 12px 13px;
-  background: var(--admin-surface-raised);
-}
-
-.admin-data-list dt {
-  color: var(--sky-muted);
-  font-size: 10px;
-  text-transform: uppercase;
-}
-
-.admin-data-list dd {
-  margin: 0;
-  overflow-wrap: anywhere;
-  font-size: 12px;
-}
-
-.admin-device-picker {
-  display: flex;
-  gap: var(--sky-space-2);
-  margin-bottom: var(--sky-space-3);
-  overflow-x: auto;
-  scrollbar-width: none;
-}
-
-.admin-device-picker button {
-  min-width: 94px;
-  min-height: var(--sky-touch-target);
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  gap: 6px;
-  padding: 8px 12px;
-  border: 1px solid var(--sky-hairline);
-  border-radius: var(--sky-radius-pill);
-  background: var(--admin-surface-raised);
-  color: var(--sky-muted);
-}
-
-.admin-device-picker button.is-active {
-  border-color: var(--admin-violet);
-  background: var(--sky-app-accent-soft);
-  color: #c8c0ff;
-}
-
-.admin-device-hero {
-  display: flex;
-  align-items: center;
-  gap: var(--sky-space-3);
-  padding: var(--sky-space-3) 0;
-}
-
-.admin-device-glyph {
-  width: 48px;
-  height: 48px;
-  border-radius: 15px;
-}
-
-.admin-device-hero > div:nth-child(2) {
-  min-width: 0;
-  flex: 1;
-}
-
-.admin-device-hero h3,
-.admin-device-hero p {
-  margin: 0;
-}
-
-.admin-device-hero p,
-.admin-device-hero > span {
-  margin-top: 4px;
-  color: var(--sky-muted);
-  font-size: 11px;
-}
-
-.admin-data-list--compact {
-  grid-template-columns: repeat(2, 1fr);
-  margin-top: var(--sky-space-2);
-}
-
-.admin-credential-card {
-  margin-top: var(--sky-space-4);
-  padding: var(--sky-space-4);
-  border: 1px solid rgba(57, 217, 255, 0.2);
-  border-radius: 19px;
-  background: linear-gradient(
-    145deg,
-    rgba(17, 29, 36, 0.95),
-    rgba(17, 17, 25, 0.98)
-  );
-}
-
-.admin-section-heading--small {
-  margin-bottom: var(--sky-space-2);
-}
-
-.admin-secret-row {
-  min-height: 58px;
-  display: flex;
-  align-items: center;
-  gap: var(--sky-space-2);
-  border-bottom: 1px solid var(--sky-hairline);
-}
-
-.admin-secret-row > div {
-  min-width: 0;
-  flex: 1;
-  display: grid;
-  gap: 4px;
-}
-
-.admin-secret-row span,
-.admin-pin-state span,
-.admin-muted-note {
-  color: var(--sky-muted);
-  font-size: 11px;
-}
-
-.admin-secret-row strong {
-  overflow: hidden;
-  font-size: 12px;
-  text-overflow: ellipsis;
-  white-space: nowrap;
-}
-
-.admin-password {
-  color: var(--admin-cyan);
-  font-family: ui-monospace, SFMono-Regular, Menlo, monospace;
-}
-
-.admin-pin-state {
-  display: flex;
-  align-items: center;
-  gap: var(--sky-space-3);
-  padding-top: var(--sky-space-3);
-}
-
-.admin-pin-state > svg {
-  color: var(--admin-green);
-}
-
-.admin-pin-state > div {
-  display: grid;
-  gap: 4px;
-}
-
-.admin-app-panel :deep(.sky-searchbar) {
-  margin-bottom: var(--sky-space-3);
-}
-
-.admin-mini-app-icon {
-  width: 42px;
-  height: 42px;
-  flex: none;
-  display: grid;
-  place-items: center;
-  border-radius: 13px;
-  background: linear-gradient(145deg, #2f2f3c, #17171e);
-  color: #fff;
-}
-
-.admin-app-list :deep(.sky-button) {
-  min-width: 72px;
-}
-
-.admin-audit-hero {
-  margin-bottom: var(--sky-space-4);
-}
-
-.admin-audit-hero > svg {
-  flex: none;
-  color: var(--admin-violet);
-}
-
-.admin-audit-list article {
-  position: relative;
-  display: grid;
-  grid-template-columns: 38px 1fr;
-  gap: var(--sky-space-3);
-  min-height: 96px;
-}
-
-.admin-audit-icon {
-  z-index: 1;
-  width: 38px;
-  height: 38px;
-  display: grid;
-  place-items: center;
-  border: 1px solid rgba(139, 123, 255, 0.38);
-  border-radius: 13px;
-  background: #201d32;
-  color: #a99dff;
-}
-
-.admin-audit-line {
-  position: absolute;
-  top: 38px;
-  bottom: -10px;
-  left: 18px;
-  width: 1px;
-  background: linear-gradient(var(--admin-violet), transparent);
-}
-
-.admin-audit-list article:last-child .admin-audit-line {
-  display: none;
-}
-
-.admin-audit-list article > div:last-child {
-  display: grid;
-  align-content: start;
-  gap: 4px;
-  padding: 2px 0 var(--sky-space-4);
-}
-
-.admin-audit-list span,
-.admin-audit-list small {
-  color: var(--sky-muted);
-  font-size: 10px;
-}
-
-.admin-audit-list p {
-  margin: 0;
-  color: #c8c8d2;
-  font-size: 12px;
-  overflow-wrap: anywhere;
-}
-
-.admin-loading {
-  min-height: 280px;
-  display: grid;
-  place-items: center;
-  align-content: center;
-  gap: var(--sky-space-3);
-  color: var(--sky-muted);
-}
-
-.admin-toast {
-  position: absolute;
-  z-index: 20;
-  left: 50%;
-  bottom: calc(var(--sky-safe-area-bottom) + var(--sky-space-4));
-  max-width: calc(100% - 32px);
-  padding: 11px 16px;
-  border: 1px solid rgba(255, 255, 255, 0.12);
-  border-radius: var(--sky-radius-pill);
-  background: #262331;
-  box-shadow: 0 12px 32px rgba(0, 0, 0, 0.45);
-  color: #fff;
-  font-size: 12px;
-  transform: translateX(-50%);
-}
-
-.is-spinning {
-  animation: admin-spin 0.8s linear infinite;
-}
-
-.admin-toast-enter-active,
-.admin-toast-leave-active {
-  transition:
-    opacity var(--sky-transition-normal) ease,
-    transform var(--sky-transition-normal) ease;
-}
-
-.admin-toast-enter-from,
-.admin-toast-leave-to {
-  opacity: 0;
-  transform: translate(-50%, 8px);
-}
-
-@keyframes admin-spin {
-  to {
-    transform: rotate(360deg);
-  }
-}
-
-@media (prefers-reduced-motion: reduce) {
-  .admin-page *,
-  .admin-page *::before,
-  .admin-page *::after {
-    animation-duration: 0.01ms !important;
-    animation-iteration-count: 1 !important;
-    transition-duration: 0.01ms !important;
-  }
-}
-</style>
diff --git a/frontend/src/views/apps/SettingsApp.vue b/frontend/src/views/apps/SettingsApp.vue
index c31f14c..badcd09 100644
--- a/frontend/src/views/apps/SettingsApp.vue
+++ b/frontend/src/views/apps/SettingsApp.vue
@@ -724,7 +724,7 @@ async function confirmFactoryReset(): Promise<void> {
   if (!success) accountToast.value = accountError()
   else {
     appAuth.hydrate(undefined, '')
-    appStore.hydrate(undefined, phone.permissions.adminPanel)
+    appStore.hydrate(undefined)
     phone.resetAfterFactoryReset()
   }
 }
diff --git a/frontend/testserver/index.cjs b/frontend/testserver/index.cjs
index 69eed19..45e3585 100644
--- a/frontend/testserver/index.cjs
+++ b/frontend/testserver/index.cjs
@@ -4696,6 +4696,7 @@ function adminMockPlayerDetail(source = 1) {
     money: {
       bank: primary ? 182450 : 28450,
       cash: primary ? 2740 : 950,
+      currency: '$',
     },
     name: primary ? 'Alex Morgan' : 'Jordan Blake',
     serverName: primary ? 'Skyline' : 'JordanB',
@@ -4759,15 +4760,20 @@ app.post('/api/:endpoint', async (request, response, next) => {
     })
     return
   }
-  if (endpoint === 'admin:set-app') {
-    const appId = String(request.body.appId ?? '')
-    const installed = request.body.installed === true
-    adminMockApps.claimed = adminMockApps.claimed.filter((id) => id !== appId)
-    adminMockApps.uninstalled = adminMockApps.uninstalled.filter(
-      (id) => id !== appId,
-    )
-    if (installed) adminMockApps.claimed.push(appId)
-    else adminMockApps.uninstalled.push(appId)
+  if (endpoint === 'admin:save-apps') {
+    const changes = Array.isArray(request.body.changes)
+      ? request.body.changes
+      : []
+    for (const change of changes) {
+      const appId = String(change.appId ?? '')
+      const installed = change.installed === true
+      adminMockApps.claimed = adminMockApps.claimed.filter((id) => id !== appId)
+      adminMockApps.uninstalled = adminMockApps.uninstalled.filter(
+        (id) => id !== appId,
+      )
+      if (installed) adminMockApps.claimed.push(appId)
+      else adminMockApps.uninstalled.push(appId)
+    }
     adminMockApps.revision += 1
     response.json({
       success: true,
@@ -4775,6 +4781,10 @@ app.post('/api/:endpoint', async (request, response, next) => {
     })
     return
   }
+  if (endpoint === 'admin:close') {
+    response.json({ success: true })
+    return
+  }
   if (endpoint === 'admin:reveal-password') {
     response.json({
       success: true,
@@ -9982,9 +9992,6 @@ app.post('/api/:endpoint', (request, response) => {
           firstName: 'Alex',
           lastName: 'Morgan',
         },
-        permissions: {
-          adminPanel: true,
-        },
         security: mockSecurity,
         token: 'development',
       },
diff --git a/sky_phone/config/locales/de.lua b/sky_phone/config/locales/de.lua
index 0fb864d..713c0d1 100644
--- a/sky_phone/config/locales/de.lua
+++ b/sky_phone/config/locales/de.lua
@@ -201,20 +201,21 @@ Locales["de"] = {
                 contacts = { name = "Favoriten", description = "Rufe deine Lieblingskontakte an oder schreibe ihnen.", choose = "Lieblingskontakte" },
             },
         },
+        AdminPanel = {
+            name = "Kommandozentrale", subtitle = "Geschützte Administration", navigation = "Admin-Navigation", refresh = "Admin-Daten aktualisieren", loading = "Geschützte Daten werden geladen...",
+            tabs = { players = "Spieler", audit = "Audit" },
+            overview = { eyebrow = "Live-Betrieb", title = "Kommandozentrale", body = "Verwalte aktive Handys, App-Zugriffe und geschützte Accountdaten.", stats = "Server-Handystatistik", online = "Online", devices = "Geräte", accounts = "Accounts" },
+            players = { eyebrow = "Aktive Sitzungen", title = "Online-Spieler", online = "Jetzt online", empty = "Keine Spieler gefunden", emptyBody = "Passe die Suche an oder aktualisiere die Spielerliste." },
+            search = { players = "Name, ID, Job oder Nummer suchen", apps = "Apps suchen", clear = "Suche leeren" },
+            detail = { character = "Charakterprofil", data = "Spielerdatenübersicht", cash = "Bargeld", bank = "Bank", job = "Job", duty = "Dienst", onDuty = "Im Dienst", offDuty = "Außer Dienst", identity = "Identität", playerData = "Spielerdaten", identifier = "Charakter-Identifier", birthdate = "Geburtsdatum", grade = "Job-Rang", unknown = "Unbekannt" },
+            devices = { eyebrow = "Gerätesteuerung", title = "Handys", choose = "Handy auswählen", empty = "Kein Handy gefunden", emptyBody = "Dieser Spieler besitzt aktuell kein verwaltbares Handy.", noNumber = "Keine Telefonnummer", noSim = "Keine SIM", imei = "IMEI", updated = "Letzte Aktivität" },
+            credentials = { eyebrow = "Geschützte Daten", title = "Zugangsdaten", email = "iFruit-E-Mail", password = "iFruit-Passwort", reveal = "Anzeigen", copy = "Passwort kopieren", copied = "Passwort kopiert.", noAccount = "Mit diesem Handy ist kein iFruit-Account verknüpft.", passcode = "Gerätecode", passcodeHashed = "{length}-stellige PIN · sicher gehasht und nicht wiederherstellbar", passcodeDisabled = "Kein Gerätecode eingerichtet", revealTitle = "Geschütztes Passwort anzeigen?", revealBody = "Diese Aktion wird serverseitig autorisiert, rate-limitiert und im Admin-Audit protokolliert.", cancel = "Abbrechen", confirmReveal = "Passwort anzeigen" },
+            apps = { eyebrow = "Fernverwaltung", title = "App-Zugriff", description = "Lege App-Zugriffe für dieses Gerät als Entwurf fest. Erst Speichern übernimmt die Änderungen.", installed = "Installiert", available = "Verfügbar", protected = "System-App", changes = "{count} offene Änderungen" },
+            audit = { eyebrow = "Nachvollziehbarkeit", title = "Audit-Verlauf", body = "Sensible Anzeigen und App-Änderungen werden hier protokolliert.", empty = "Noch keine Admin-Aktionen", emptyBody = "Geschützte Aktionen erscheinen hier, nachdem sie ausgeführt wurden.", by = "{actor} · Ziel-ID {target}", actions = { grant_app = "App installiert", revoke_app = "App entfernt", reveal_account_password = "Passwort angezeigt" } },
+            editor = { brand = "SKY PHONE", workspace = "ADMIN WORKSPACE", players = "Spielerverzeichnis", audit = "Audit-Protokoll", selectPlayer = "Wähle einen Spieler, um Identität, Geräte, Zugangsdaten und App-Zugriffe zu prüfen.", save = "Änderungen speichern", saveHint = "Offene Änderungen übernehmen", saved = "Änderungen gespeichert.", unsaved = "Ungespeicherte Änderungen", close = "Admin-Panel schließen", refresh = "Live-Daten aktualisieren", online = "LIVE", profile = "PROFIL", financial = "FINANZEN", device = "GERÄT", security = "SICHERHEIT", noAutoSave = "Manuelles Speichern", noAutoSaveBody = "Änderungen bleiben lokal, bis der grüne Haken gedrückt wird.", discardTitle = "Ungespeicherte Änderungen verwerfen?", discardBody = "Deine vorgemerkten App-Änderungen wurden noch nicht gespeichert.", keepEditing = "Weiter bearbeiten", discard = "Änderungen verwerfen", saveFailed = "Einige Änderungen konnten nicht gespeichert werden.", noSelection = "Kein Spieler ausgewählt" },
+            errors = { not_authorized = "Du hast keinen Zugriff auf das Admin-Panel.", rate_limited = "Zu viele Admin-Anfragen. Bitte warte.", player_unavailable = "Dieser Spieler ist nicht mehr online.", device_not_owned = "Dieses Handy gehört nicht mehr zum ausgewählten Spieler.", invalid_app = "Diese App ist nicht auf dem Server registriert.", app_protected = "Diese System-App kann nicht entfernt werden.", revision_conflict = "Das Handy wurde zwischenzeitlich geändert. Aktualisiere und versuche es erneut.", account_not_found = "Mit diesem Handy ist kein iFruit-Account verknüpft.", invalid_request = "Die Admin-Anfrage war ungültig.", request_failed = "Die Admin-Anfrage ist fehlgeschlagen.", default = "Das Admin-Panel ist vorübergehend nicht verfügbar." },
+        },
         Apps = {
-            admin = {
-                name = "Kommandozentrale", subtitle = "Geschützte Administration", navigation = "Admin-Navigation", refresh = "Admin-Daten aktualisieren", loading = "Geschützte Daten werden geladen...",
-                tabs = { players = "Spieler", audit = "Audit" },
-                overview = { eyebrow = "Live-Betrieb", title = "Kommandozentrale", body = "Verwalte aktive Handys, App-Zugriffe und geschützte Accountdaten.", stats = "Server-Handystatistik", online = "Online", devices = "Geräte", accounts = "Accounts" },
-                players = { eyebrow = "Aktive Sitzungen", title = "Online-Spieler", online = "Jetzt online", empty = "Keine Spieler gefunden", emptyBody = "Passe die Suche an oder aktualisiere die Spielerliste." },
-                search = { players = "Name, ID, Job oder Nummer suchen", clear = "Suche leeren" },
-                detail = { character = "Charakterprofil", data = "Spielerdatenübersicht", cash = "Bargeld", bank = "Bank", job = "Job", duty = "Dienst", onDuty = "Im Dienst", offDuty = "Außer Dienst", identity = "Identität", playerData = "Spielerdaten", identifier = "Charakter-Identifier", birthdate = "Geburtsdatum", grade = "Job-Rang", unknown = "Unbekannt" },
-                devices = { eyebrow = "Gerätesteuerung", title = "Handys", choose = "Handy auswählen", empty = "Kein Handy gefunden", emptyBody = "Dieser Spieler besitzt aktuell kein verwaltbares Handy.", noNumber = "Keine Telefonnummer", noSim = "Keine SIM", imei = "IMEI", updated = "Letzte Aktivität" },
-                credentials = { eyebrow = "Geschützte Daten", title = "Zugangsdaten", email = "iFruit-E-Mail", password = "iFruit-Passwort", reveal = "Anzeigen", copy = "Passwort kopieren", copied = "Passwort kopiert.", noAccount = "Mit diesem Handy ist kein iFruit-Account verknüpft.", passcode = "Gerätecode", passcodeHashed = "{length}-stellige PIN · sicher gehasht und nicht wiederherstellbar", passcodeDisabled = "Kein Gerätecode eingerichtet", revealTitle = "Geschütztes Passwort anzeigen?", revealBody = "Diese Aktion wird serverseitig autorisiert, rate-limitiert und im Admin-Audit protokolliert.", cancel = "Abbrechen", confirmReveal = "Passwort anzeigen" },
-                apps = { eyebrow = "Fernverwaltung", title = "App-Zugriff", search = "Apps suchen", installed = "Installiert", available = "Verfügbar", grant = "Installieren", revoke = "Entfernen", granted = "App wurde auf dem ausgewählten Handy installiert.", revoked = "App wurde vom ausgewählten Handy entfernt." },
-                audit = { eyebrow = "Nachvollziehbarkeit", title = "Audit-Verlauf", body = "Sensible Anzeigen und App-Änderungen werden hier protokolliert.", empty = "Noch keine Admin-Aktionen", emptyBody = "Geschützte Aktionen erscheinen hier, nachdem sie ausgeführt wurden.", by = "{actor} · Ziel-ID {target}", actions = { grant_app = "App installiert", revoke_app = "App entfernt", reveal_account_password = "Passwort angezeigt" } },
-                errors = { not_authorized = "Du hast keinen Zugriff auf das Admin-Panel.", rate_limited = "Zu viele Admin-Anfragen. Bitte warte.", player_unavailable = "Dieser Spieler ist nicht mehr online.", device_not_owned = "Dieses Handy gehört nicht mehr zum ausgewählten Spieler.", invalid_app = "Diese App ist nicht auf dem Server registriert.", app_protected = "Diese System-App kann nicht entfernt werden.", revision_conflict = "Das Handy wurde zwischenzeitlich geändert. Aktualisiere und versuche es erneut.", account_not_found = "Mit diesem Handy ist kein iFruit-Account verknüpft.", invalid_request = "Die Admin-Anfrage war ungültig.", device_locked = "Entsperre dein Handy, bevor du das Admin-Panel nutzt.", request_failed = "Die Admin-Anfrage ist fehlgeschlagen.", default = "Das Admin-Panel ist vorübergehend nicht verfügbar." },
-            },
             health = {
                 name = "Gesundheit",
                 navigation = "Gesundheitsnavigation",
diff --git a/sky_phone/config/locales/en.lua b/sky_phone/config/locales/en.lua
index b0bde34..a9dd770 100644
--- a/sky_phone/config/locales/en.lua
+++ b/sky_phone/config/locales/en.lua
@@ -201,20 +201,21 @@ Locales["en"] = {
                 contacts = { name = "Favorites", description = "Call or message your favorite contacts.", choose = "Favorite Contacts" },
             },
         },
+        AdminPanel = {
+            name = "Command Center", subtitle = "Protected administration", navigation = "Admin navigation", refresh = "Refresh admin data", loading = "Loading protected data...",
+            tabs = { players = "Players", audit = "Audit" },
+            overview = { eyebrow = "Live operations", title = "Command Center", body = "Manage active phone devices, app access, and protected account data.", stats = "Server phone statistics", online = "Online", devices = "Devices", accounts = "Accounts" },
+            players = { eyebrow = "Active sessions", title = "Online players", online = "Online now", empty = "No players found", emptyBody = "Adjust the search or refresh the live player list." },
+            search = { players = "Search name, ID, job, or number", apps = "Search apps", clear = "Clear search" },
+            detail = { character = "Character profile", data = "Player data overview", cash = "Cash", bank = "Bank", job = "Job", duty = "Duty", onDuty = "On duty", offDuty = "Off duty", identity = "Identity", playerData = "Player data", identifier = "Character identifier", birthdate = "Birthdate", grade = "Job grade", unknown = "Unknown" },
+            devices = { eyebrow = "Device control", title = "Phones", choose = "Choose phone", empty = "No phone found", emptyBody = "This player currently has no phone device that can be managed.", noNumber = "No phone number", noSim = "No SIM", imei = "IMEI", updated = "Last activity" },
+            credentials = { eyebrow = "Protected data", title = "Credentials", email = "iFruit email", password = "iFruit password", reveal = "Reveal", copy = "Copy password", copied = "Password copied.", noAccount = "No iFruit account is linked to this phone.", passcode = "Device passcode", passcodeHashed = "{length}-digit PIN · securely hashed and not recoverable", passcodeDisabled = "No passcode configured", revealTitle = "Reveal protected password?", revealBody = "This action is server-authorized, rate-limited, and written to the admin audit log.", cancel = "Cancel", confirmReveal = "Reveal password" },
+            apps = { eyebrow = "Remote management", title = "App access", description = "Stage app access for this device. Nothing changes until you save.", installed = "Installed", available = "Available", protected = "System app", changes = "{count} pending changes" },
+            audit = { eyebrow = "Accountability", title = "Audit trail", body = "Sensitive reveals and remote app changes are recorded here.", empty = "No admin actions yet", emptyBody = "Protected actions will appear here after they are performed.", by = "{actor} · target ID {target}", actions = { grant_app = "App installed", revoke_app = "App removed", reveal_account_password = "Password revealed" } },
+            editor = { brand = "SKY PHONE", workspace = "ADMIN WORKSPACE", players = "Player directory", audit = "Audit log", selectPlayer = "Select a player to inspect identity, devices, credentials, and app access.", save = "Save changes", saveHint = "Apply pending changes", saved = "Changes saved.", unsaved = "Unsaved changes", close = "Close admin panel", refresh = "Refresh live data", online = "LIVE", profile = "PROFILE", financial = "FINANCIAL", device = "DEVICE", security = "SECURITY", noAutoSave = "Manual save", noAutoSaveBody = "Changes stay local until the green check is pressed.", discardTitle = "Discard unsaved changes?", discardBody = "Your staged app changes have not been saved.", keepEditing = "Keep editing", discard = "Discard changes", saveFailed = "Some changes could not be saved.", noSelection = "No player selected" },
+            errors = { not_authorized = "You do not have access to the admin panel.", rate_limited = "Too many admin requests. Please wait.", player_unavailable = "That player is no longer online.", device_not_owned = "That phone no longer belongs to the selected player.", invalid_app = "That app is not registered on the server.", app_protected = "This system app cannot be removed.", revision_conflict = "The phone changed in the meantime. Refresh and try again.", account_not_found = "No iFruit account is linked to this phone.", invalid_request = "The admin request was invalid.", request_failed = "The admin request failed.", default = "The admin panel is temporarily unavailable." },
+        },
         Apps = {
-            admin = {
-                name = "Command Center", subtitle = "Protected administration", navigation = "Admin navigation", refresh = "Refresh admin data", loading = "Loading protected data...",
-                tabs = { players = "Players", audit = "Audit" },
-                overview = { eyebrow = "Live operations", title = "Command Center", body = "Manage active phone devices, app access, and protected account data.", stats = "Server phone statistics", online = "Online", devices = "Devices", accounts = "Accounts" },
-                players = { eyebrow = "Active sessions", title = "Online players", online = "Online now", empty = "No players found", emptyBody = "Adjust the search or refresh the live player list." },
-                search = { players = "Search name, ID, job, or number", clear = "Clear search" },
-                detail = { character = "Character profile", data = "Player data overview", cash = "Cash", bank = "Bank", job = "Job", duty = "Duty", onDuty = "On duty", offDuty = "Off duty", identity = "Identity", playerData = "Player data", identifier = "Character identifier", birthdate = "Birthdate", grade = "Job grade", unknown = "Unknown" },
-                devices = { eyebrow = "Device control", title = "Phones", choose = "Choose phone", empty = "No phone found", emptyBody = "This player currently has no phone device that can be managed.", noNumber = "No phone number", noSim = "No SIM", imei = "IMEI", updated = "Last activity" },
-                credentials = { eyebrow = "Protected data", title = "Credentials", email = "iFruit email", password = "iFruit password", reveal = "Reveal", copy = "Copy password", copied = "Password copied.", noAccount = "No iFruit account is linked to this phone.", passcode = "Device passcode", passcodeHashed = "{length}-digit PIN · securely hashed and not recoverable", passcodeDisabled = "No passcode configured", revealTitle = "Reveal protected password?", revealBody = "This action is server-authorized, rate-limited, and written to the admin audit log.", cancel = "Cancel", confirmReveal = "Reveal password" },
-                apps = { eyebrow = "Remote management", title = "App access", search = "Search apps", installed = "Installed", available = "Available", grant = "Install", revoke = "Remove", granted = "App installed on the selected phone.", revoked = "App removed from the selected phone." },
-                audit = { eyebrow = "Accountability", title = "Audit trail", body = "Sensitive reveals and remote app changes are recorded here.", empty = "No admin actions yet", emptyBody = "Protected actions will appear here after they are performed.", by = "{actor} · target ID {target}", actions = { grant_app = "App installed", revoke_app = "App removed", reveal_account_password = "Password revealed" } },
-                errors = { not_authorized = "You do not have access to the admin panel.", rate_limited = "Too many admin requests. Please wait.", player_unavailable = "That player is no longer online.", device_not_owned = "That phone no longer belongs to the selected player.", invalid_app = "That app is not registered on the server.", app_protected = "This system app cannot be removed.", revision_conflict = "The phone changed in the meantime. Refresh and try again.", account_not_found = "No iFruit account is linked to this phone.", invalid_request = "The admin request was invalid.", device_locked = "Unlock your phone before using the admin panel.", request_failed = "The admin request failed.", default = "The admin panel is temporarily unavailable." },
-            },
             health = {
                 name = "Health",
                 navigation = "Health navigation",
diff --git a/sky_phone/source/client/focus.lua b/sky_phone/source/client/focus.lua
index f4d0d5f..df176d9 100644
--- a/sky_phone/source/client/focus.lua
+++ b/sky_phone/source/client/focus.lua
@@ -4,6 +4,7 @@ local blocked_phone_controls = { 24, 140, 141, 142, 257, 263, 264 }
 local blocked_phone_look_controls = { 1, 2, 3, 4, 5, 6 }
 local focused_control_groups = { 0, 1, 2 }
 local state = {
+    admin_panel_open = false,
     activity_suspended = false,
     allow_movement = Config.Phone.AllowMovement,
     call_focus = false,
@@ -42,6 +43,15 @@ function SkyPhoneFocus.ApplyGameInputControls(block_look)
 end
 
 function SkyPhoneFocus.Resolve(state)
+    if state.admin_panel_open then
+        return {
+            block_game = true,
+            cursor = true,
+            focused = true,
+            game_input = false,
+            keep_input = false,
+        }
+    end
     if state.activity_suspended then
         return { block_game = false, cursor = false, focused = false, game_input = false, keep_input = false }
     end
@@ -112,6 +122,15 @@ function SkyPhoneFocus.SetPhone(open, cursor_disabled)
     SkyPhoneFocus.Reapply()
 end
 
+function SkyPhoneFocus.SetAdminPanel(open)
+    state.admin_panel_open = open == true
+    if state.admin_panel_open then
+        state.notification_focus = false
+        state.text_input_focused = false
+    end
+    SkyPhoneFocus.Reapply()
+end
+
 function SkyPhoneFocus.SetCall(active)
     state.call_focus = active == true
     SkyPhoneFocus.Reapply()
@@ -142,6 +161,7 @@ function SkyPhoneFocus.SetExternalGameInput(owner_resource, allow_game_input)
 end
 
 function SkyPhoneFocus.Reset()
+    state.admin_panel_open = false
     state.activity_suspended = false
     state.call_focus = false
     state.camera_active = false
diff --git a/sky_phone/source/client/main.lua b/sky_phone/source/client/main.lua
index 6a05597..0ef2f7d 100644
--- a/sky_phone/source/client/main.lua
+++ b/sky_phone/source/client/main.lua
@@ -8,7 +8,7 @@ local equipped_phone_number = nil
 local nui_generation = 0
 local live_activity_active = false
 local open_home_requested = false
-local requested_app_id = nil
+local admin_panel_open = false
 
 local function get_equipped_phone_number()
     if not device_payload or not device_payload.device.sim then
@@ -61,28 +61,30 @@ end
 SkyPhoneClient.GetState = get_phone_state
 SkyPhoneClient.GetEquippedPhoneNumber = get_authoritative_phone_number
 
-local function open_requested_app()
-    if not requested_app_id then
-        return
-    end
-
-    local app_id = requested_app_id
-    requested_app_id = nil
-    local opened, error_code = SkyPhoneNavigation.Open(app_id)
-    if not opened then
-        Bridge.Debug(
-            "warn",
-            "[sky_phone] Could not open requested app '%s': %s.",
-            app_id,
-            tostring(error_code)
-        )
-    end
-end
-
 Bridge.Debug("debug", "[sky_phone] Client script initialized.", { always = true })
 
 local locale, locale_name = SkyPhoneLocales.Resolve(Config.Bridge.Locale)
 
+local function send_admin_panel_open()
+    SendNUIMessage({
+        type = "admin:open",
+        data = {
+            lang = locale_name,
+            locales = locale.Nui,
+            fallbackLocales = Locales.en.Nui,
+        },
+    })
+end
+
+local function close_admin_panel()
+    if not admin_panel_open then
+        return
+    end
+    admin_panel_open = false
+    SkyPhoneFocus.SetAdminPanel(false)
+    SendNUIMessage({ type = "admin:close" })
+end
+
 local function send_open_message()
     if not device_payload then
         return
@@ -114,7 +116,6 @@ local function close_phone(close_device_session)
     local was_open = is_open
     open_requested = false
     open_without_focus = false
-    requested_app_id = nil
     TriggerEvent("sky_phone:animation:phone", false)
     is_open = false
     if was_open then
@@ -244,6 +245,9 @@ RegisterNUICallback("ui:ready", function(data, cb)
     if open_requested and device_payload then
         send_open_message()
     end
+    if admin_panel_open then
+        send_admin_panel_open()
+    end
     SkyPhoneCalls.ReplayNui()
     SkyPhoneSimPicker.ReplayNui()
     SkyPhoneFocus.Reapply()
@@ -286,15 +290,16 @@ RegisterNUICallback("ui:opened", function(data, cb)
     end
     SkyPhoneFocus.SetPhone(true, open_without_focus)
     TriggerEvent("sky_phone:animation:phone", true)
-    open_requested_app()
     cb({ success = true })
 end)
 
 RegisterNetEvent("sky_phone:admin:launch", function()
-    requested_app_id = "admin"
-    if is_open then
-        open_requested_app()
+    if is_open or open_requested then
+        close_phone()
     end
+    admin_panel_open = true
+    SkyPhoneFocus.SetAdminPanel(true)
+    send_admin_panel_open()
 end)
 
 RegisterNetEvent("sky_phone:admin:command-error", function(error_code)
@@ -307,12 +312,23 @@ RegisterNetEvent("sky_phone:admin:command-error", function(error_code)
     )
 end)
 
+RegisterNUICallback("admin:close", function(data, cb)
+    if type(data) ~= "table" then
+        cb({ success = false, error = "invalid_request" })
+        return
+    end
+    close_admin_panel()
+    cb({ success = true })
+end)
+
 RegisterNUICallback("ui:input-focus", function(data, cb)
     if type(data) ~= "table" or type(data.active) ~= "boolean" then
         cb({ success = false, error = "invalid_request" })
         return
     end
-    SkyPhoneFocus.SetTextInputFocused(data.active and (is_open or open_requested))
+    SkyPhoneFocus.SetTextInputFocused(
+        data.active and (is_open or open_requested or admin_panel_open)
+    )
     cb({ success = true })
 end)
 
@@ -374,11 +390,9 @@ RegisterNetEvent("sky_phone:device:invalidated", function()
     update_equipped_phone_number(nil)
     live_activity_active = false
     open_home_requested = false
-    requested_app_id = nil
 end)
 
 RegisterNetEvent("sky_phone:device:error", function(error_code)
-    requested_app_id = nil
     if not is_open and not open_requested then
         open_without_focus = false
     end
@@ -416,7 +430,7 @@ AddEventHandler("onResourceStop", function(resource_name)
     is_open = false
     open_requested = false
     open_without_focus = false
-    requested_app_id = nil
+    admin_panel_open = false
 
     TriggerEvent("sky_phone:animation:reset")
     SkyPhoneCalls.Reset()
diff --git a/sky_phone/source/client/nui_server_bridge.lua b/sky_phone/source/client/nui_server_bridge.lua
index 93cf2df..9fd453a 100644
--- a/sky_phone/source/client/nui_server_bridge.lua
+++ b/sky_phone/source/client/nui_server_bridge.lua
@@ -1,6 +1,6 @@
 local callback_groups = {
     account = [[login register logout devices remove-device]],
-    admin = [[bootstrap player set-app reveal-password]],
+    admin = [[bootstrap player save-apps reveal-password]],
     banking = [[overview transfer]],
     billing = [[overview list detail markRead pay dispute]],
     calendar = [[list create update delete]],
diff --git a/sky_phone/source/server/admin.lua b/sky_phone/source/server/admin.lua
index 63b7ed6..a3f93fe 100644
--- a/sky_phone/source/server/admin.lua
+++ b/sky_phone/source/server/admin.lua
@@ -97,10 +97,6 @@ local function player_name(source)
 end
 
 local function require_admin(source, operation, maximum)
-    local session, error_response = SkyPhone.RequireSession(source)
-    if not session then
-        return nil, error_response
-    end
     if not Config.AdminPanel.Enabled
         or not Bridge.Framework.HasAdminGroup(source, Config.AdminPanel.AdminGroups)
     then
@@ -110,9 +106,36 @@ local function require_admin(source, operation, maximum)
     if not SkyPhone.AllowOperation(source, "admin_" .. operation, maximum, 60) then
         return nil, { success = false, error = "rate_limited" }
     end
-    return session
+    return true
 end
 
+if type(Config.AdminPanel.Command) ~= "string" or Config.AdminPanel.Command == "" then
+    error("[sky_phone] Config.AdminPanel.Command must be a non-empty command name.")
+end
+
+RegisterCommand(Config.AdminPanel.Command, function(command_source)
+    local player_source = tonumber(command_source)
+    if not player_source or player_source < 1 then
+        Bridge.Debug("warn", "[sky_phone] The admin panel command can only be used by a player.")
+        return
+    end
+    if not Config.AdminPanel.Enabled then
+        TriggerClientEvent("sky_phone:admin:command-error", player_source, "disabled")
+        return
+    end
+    if not Bridge.Framework.HasAdminGroup(player_source, Config.AdminPanel.AdminGroups) then
+        Bridge.Debug(
+            "warn",
+            "[sky_phone] Rejected admin panel command from source %s.",
+            tostring(player_source)
+        )
+        TriggerClientEvent("sky_phone:admin:command-error", player_source, "not_authorized")
+        return
+    end
+
+    TriggerClientEvent("sky_phone:admin:launch", player_source)
+end, false)
+
 local function normalize_source(value)
     local player_source = tonumber(value)
     if not player_source or player_source < 1 or player_source ~= math.floor(player_source) then
@@ -301,6 +324,7 @@ local function load_player_detail(source)
         money = {
             bank = tonumber(Bridge.Framework.GetMoney(source, "bank")) or 0,
             cash = tonumber(Bridge.Framework.GetMoney(source, "cash")) or 0,
+            currency = Config.Banking.Currency,
         },
         devices = load_player_devices(source, identifier),
     }
@@ -395,12 +419,12 @@ local function load_audit()
 end
 
 Bridge.Callbacks.Register("sky_phone:admin:bootstrap", function(source)
-    local session, error_response = require_admin(
+    local authorized, error_response = require_admin(
         source,
         "bootstrap",
         Config.AdminPanel.ReadRequestsPerMinute
     )
-    if not session then
+    if not authorized then
         return error_response
     end
 
@@ -425,12 +449,12 @@ Bridge.Callbacks.Register("sky_phone:admin:bootstrap", function(source)
 end)
 
 Bridge.Callbacks.Register("sky_phone:admin:player", function(source, data)
-    local session, error_response = require_admin(
+    local authorized, error_response = require_admin(
         source,
         "player",
         Config.AdminPanel.ReadRequestsPerMinute
     )
-    if not session then
+    if not authorized then
         return error_response
     end
     local target_source = normalize_source(data and data.source)
@@ -440,19 +464,23 @@ Bridge.Callbacks.Register("sky_phone:admin:player", function(source, data)
     return { success = true, data = load_player_detail(target_source) }
 end)
 
-Bridge.Callbacks.Register("sky_phone:admin:set-app", function(source, data)
-    local session, error_response = require_admin(
+Bridge.Callbacks.Register("sky_phone:admin:save-apps", function(source, data)
+    local authorized, error_response = require_admin(
         source,
-        "set_app",
+        "save_apps",
         Config.AdminPanel.ActionRequestsPerMinute
     )
-    if not session then
+    if not authorized then
         return error_response
     end
     if type(data) ~= "table"
         or not SkyPhoneImei.IsValid(data.imei)
-        or type(data.appId) ~= "string"
-        or type(data.installed) ~= "boolean"
+        or type(data.revision) ~= "number"
+        or data.revision < 0
+        or data.revision ~= math.floor(data.revision)
+        or type(data.changes) ~= "table"
+        or #data.changes < 1
+        or #data.changes > 128
     then
         return { success = false, error = "invalid_request" }
     end
@@ -465,12 +493,32 @@ Bridge.Callbacks.Register("sky_phone:admin:set-app", function(source, data)
     if not target_device then
         return { success = false, error = "device_not_owned" }
     end
-    local metadata = app_metadata(data.appId)
-    if not metadata then
-        return { success = false, error = "invalid_app" }
-    end
-    if not data.installed and not metadata.removable then
-        return { success = false, error = "app_protected" }
+    local normalized_changes = {}
+    local seen_apps = {}
+    for index = 1, #data.changes do
+        local change = data.changes[index]
+        if type(change) ~= "table"
+            or type(change.appId) ~= "string"
+            or #change.appId < 1
+            or #change.appId > 64
+            or type(change.installed) ~= "boolean"
+            or seen_apps[change.appId]
+        then
+            return { success = false, error = "invalid_request" }
+        end
+        local metadata = app_metadata(change.appId)
+        if not metadata then
+            return { success = false, error = "invalid_app" }
+        end
+        if not change.installed and not metadata.removable then
+            return { success = false, error = "app_protected" }
+        end
+        seen_apps[change.appId] = true
+        normalized_changes[#normalized_changes + 1] = {
+            appId = change.appId,
+            installed = change.installed,
+            metadata = metadata,
+        }
     end
 
     local rows = Bridge.Database.Query([[
@@ -479,15 +527,23 @@ Bridge.Callbacks.Register("sky_phone:admin:set-app", function(source, data)
         WHERE `device_imei` = ? AND `namespace` = 'apps'
         LIMIT 1
     ]], { data.imei })
+    local current_revision = tonumber(rows[1] and rows[1].revision) or 0
+    if current_revision ~= data.revision then
+        return { success = false, error = "revision_conflict" }
+    end
+
     local payload, claimed_apps, uninstalled_apps = load_app_payload(rows[1] and rows[1].payload)
-    if data.installed then
-        uninstalled_apps = remove_app_id(uninstalled_apps, data.appId)
-        if not metadata.defaultInstalled then
-            claimed_apps = add_app_id(claimed_apps, data.appId)
+    for index = 1, #normalized_changes do
+        local change = normalized_changes[index]
+        if change.installed then
+            uninstalled_apps = remove_app_id(uninstalled_apps, change.appId)
+            if not change.metadata.defaultInstalled then
+                claimed_apps = add_app_id(claimed_apps, change.appId)
+            end
+        else
+            claimed_apps = remove_app_id(claimed_apps, change.appId)
+            uninstalled_apps = add_app_id(uninstalled_apps, change.appId)
         end
-    else
-        claimed_apps = remove_app_id(claimed_apps, data.appId)
-        uninstalled_apps = add_app_id(uninstalled_apps, data.appId)
     end
     payload.claimedApps = claimed_apps
     payload.uninstalledApps = #uninstalled_apps > 0 and uninstalled_apps or nil
@@ -498,12 +554,11 @@ Bridge.Callbacks.Register("sky_phone:admin:set-app", function(source, data)
     end
 
     if rows[1] then
-        local revision = tonumber(rows[1].revision) or 0
         local result = Bridge.Database.Query([[
             UPDATE `sky_phone_device_data`
             SET `payload` = ?, `revision` = `revision` + 1
             WHERE `device_imei` = ? AND `namespace` = 'apps' AND `revision` = ?
-        ]], { encoded, data.imei, revision })
+        ]], { encoded, data.imei, data.revision })
         if affected_rows(result) ~= 1 then
             return { success = false, error = "revision_conflict" }
         end
@@ -517,25 +572,28 @@ Bridge.Callbacks.Register("sky_phone:admin:set-app", function(source, data)
         end
     end
 
-    write_audit(
-        source,
-        target_source,
-        target_identifier,
-        data.imei,
-        data.installed and "grant_app" or "revoke_app",
-        { appId = data.appId }
-    )
+    for index = 1, #normalized_changes do
+        local change = normalized_changes[index]
+        write_audit(
+            source,
+            target_source,
+            target_identifier,
+            data.imei,
+            change.installed and "grant_app" or "revoke_app",
+            { appId = change.appId }
+        )
+    end
     SkyPhone.RefreshDevice(data.imei)
     return { success = true, data = load_player_detail(target_source) }
 end)
 
 Bridge.Callbacks.Register("sky_phone:admin:reveal-password", function(source, data)
-    local session, error_response = require_admin(
+    local authorized, error_response = require_admin(
         source,
         "reveal_password",
         Config.AdminPanel.CredentialRevealsPerMinute
     )
-    if not session then
+    if not authorized then
         return error_response
     end
     if type(data) ~= "table" or not SkyPhoneImei.IsValid(data.imei) then
diff --git a/sky_phone/source/server/phone.lua b/sky_phone/source/server/phone.lua
index a3063c9..147fbad 100644
--- a/sky_phone/source/server/phone.lua
+++ b/sky_phone/source/server/phone.lua
@@ -2,10 +2,6 @@ local phone_open_handler
 local pending_phone_opens = {}
 local server_started = false
 
-if type(Config.AdminPanel.Command) ~= "string" or Config.AdminPanel.Command == "" then
-    error("[sky_phone] Config.AdminPanel.Command must be a non-empty command name.")
-end
-
 local function flush_pending_phone_opens()
     if not server_started or not phone_open_handler then
         return
@@ -575,11 +571,6 @@ local function bootstrap(source, security, security_loaded)
             firstName = trim(Bridge.Framework.GetFirstname(source)) or "",
             lastName = trim(Bridge.Framework.GetLastname(source)) or "",
         },
-        permissions = {
-            adminPanel = Config.AdminPanel.Enabled
-                and Bridge.Framework.HasAdminGroup(source, Config.AdminPanel.AdminGroups)
-                or false,
-        },
     }
 end
 
@@ -919,32 +910,6 @@ end
 phone_open_handler = open_phone
 flush_pending_phone_opens()
 
-RegisterCommand(Config.AdminPanel.Command, function(command_source)
-    local player_source = tonumber(command_source)
-    if not player_source or player_source < 1 then
-        Bridge.Debug("warn", "[sky_phone] The admin panel command can only be used by a player.")
-        return
-    end
-    if not Config.AdminPanel.Enabled then
-        TriggerClientEvent("sky_phone:admin:command-error", player_source, "disabled")
-        return
-    end
-    if not Bridge.Framework.HasAdminGroup(player_source, Config.AdminPanel.AdminGroups) then
-        Bridge.Debug(
-            "warn",
-            "[sky_phone] Rejected admin panel command from source %s.",
-            tostring(player_source)
-        )
-        TriggerClientEvent("sky_phone:admin:command-error", player_source, "not_authorized")
-        return
-    end
-
-    TriggerClientEvent("sky_phone:admin:launch", player_source)
-    if not sessions[player_source] then
-        open_phone(player_source, nil)
-    end
-end, false)
-
 function SkyPhone.OpenDeviceForCall(source, imei)
     local matches = find_device_slots(source, imei)
     if not matches[1] then