feat: Complete Phase 1 – Core Venue Management & Discovery

.dockerignore

@@ -0,0 +1,6 @@
+node_modules
+dist/
+.env
+__pycache__/
+.venv/
+*.pyc

.editorconfig

@@ -0,0 +1,12 @@
+root = true
+
+[*]
+indent_style = space
+indent_size = 2
+end_of_line = lf
+charset = utf-8
+trim_trailing_whitespace = true
+insert_final_newline = true
+
+[*.md]
+trim_trailing_whitespace = false

.github/workflows/ci.yml

@@ -0,0 +1,73 @@
+name: CI
+
+on:
+  pull_request:
+  push:
+    branches: [main]
+
+jobs:
+  frontend:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+      - uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      - uses: actions/setup-node@v4
+        with:
+          node-version: 20
+          cache: pnpm
+      - run: pnpm install --frozen-lockfile
+      - name: Lint
+        run: pnpm lint
+      - name: Build (tsc type-check + vite build — the merge gate)
+        run: pnpm build
+      - name: Security audit
+        run: pnpm audit --audit-level=high
+
+  api:
+    runs-on: ubuntu-latest
+    services:
+      postgres:
+        image: postgres:16
+        env:
+          POSTGRES_USER: user
+          POSTGRES_PASSWORD: pass
+          POSTGRES_DB: venue404
+        ports:
+          - 5432:5432
+        options: >-
+          --health-cmd="pg_isready -U user -d venue404"
+          --health-interval=10s
+          --health-timeout=5s
+          --health-retries=5
+    env:
+      DATABASE_URL: postgresql://user:pass@localhost:5432/venue404
+      SUPABASE_URL: https://example.supabase.co
+      SUPABASE_JWT_SECRET: test-secret
+      SUPABASE_SERVICE_ROLE_KEY: test-service-role
+      STRIPE_SECRET_KEY: sk_test_dummy
+      STRIPE_WEBHOOK_SECRET: whsec_dummy
+    defaults:
+      run:
+        working-directory: apps/api
+    steps:
+      - uses: actions/checkout@v4
+      - uses: astral-sh/setup-uv@v4
+        with:
+          enable-cache: true
+          cache-dependency-glob: "apps/api/pyproject.toml"
+          python-version: "3.12"
+      - name: Install dependencies
+        run: |
+          uv venv
+          echo "$PWD/.venv/bin" >> $GITHUB_PATH
+          uv pip install -e ".[dev]"
+      - name: Lint
+        run: ruff check .
+      - name: Migrate
+        run: alembic upgrade head
+      - name: Tests
+        run: pytest -q
+      - name: Security audit
+        run: uvx pip-audit

.github/workflows/jobs.yml

@@ -0,0 +1,48 @@
+name: Background Jobs
+
+# Triggers the API's background jobs at their original cadences by calling the
+# token-guarded POST /api/internal/run-jobs endpoint. The in-process scheduler
+# stays off (ENABLE_JOBS=false) so the free Render service can sleep.
+#
+#   15-min   (*/15 * * * *) -> invoice_generator, payment_pending_expiry
+#   hourly   (0 * * * *)    -> hold_expiry, payment_reminders, search_indexer
+#   6-hourly (0 */6 * * *)  -> request_expiry, overdue_flag, overdue_autocancel
+#   daily    (0 0 * * *)    -> completion
+on:
+  schedule:
+    - cron: "*/15 * * * *"
+    - cron: "0 * * * *"
+    - cron: "0 */6 * * *"
+    - cron: "0 0 * * *"
+  workflow_dispatch:
+    inputs:
+      jobs:
+        description: "Comma-separated job names to run"
+        required: true
+        default: "hold_expiry,payment_reminders,request_expiry,overdue_flag,overdue_autocancel,completion,search_indexer,invoice_generator,payment_pending_expiry"
+
+jobs:
+  run:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Select job set
+        id: select
+        run: |
+          case "${{ github.event.schedule }}" in
+            "*/15 * * * *") JOBS="invoice_generator,payment_pending_expiry" ;;
+            "0 * * * *")    JOBS="hold_expiry,payment_reminders,search_indexer" ;;
+            "0 */6 * * *")  JOBS="request_expiry,overdue_flag,overdue_autocancel" ;;
+            "0 0 * * *")    JOBS="completion" ;;
+            *)              JOBS="${{ github.event.inputs.jobs }}" ;;
+          esac
+          echo "jobs=$JOBS" >> "$GITHUB_OUTPUT"
+          echo "Running jobs: $JOBS"
+
+      - name: Warm up (ride out free-tier cold start)
+        run: curl -fsS --max-time 90 --retry 5 --retry-all-errors --retry-delay 12 "${{ secrets.API_BASE_URL }}/health"
+
+      - name: Trigger jobs
+        run: |
+          curl -fsS --max-time 300 -X POST \
+            -H "X-Job-Token: ${{ secrets.JOB_RUNNER_TOKEN }}" \
+            "${{ secrets.API_BASE_URL }}/api/internal/run-jobs?jobs=${{ steps.select.outputs.jobs }}"

.github/workflows/keepalive.yml

@@ -0,0 +1,19 @@
+name: Keepalive
+
+# Pings the API /health every 13 minutes so Render's free web service does not
+# spin down (it sleeps after ~15 min idle). GitHub Actions cron is best-effort.
+#
+# NOTE: on a PRIVATE repo this consumes ~3,300 Actions minutes/month and will
+# exceed the 2,000-min free budget — use a free external pinger (UptimeRobot /
+# cron-job.org) instead. On a PUBLIC repo, Actions minutes are free.
+on:
+  schedule:
+    - cron: "*/13 * * * *"
+  workflow_dispatch:
+
+jobs:
+  ping:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Ping /health
+        run: curl -fsS --max-time 60 --retry 3 --retry-delay 10 "${{ secrets.API_BASE_URL }}/health"

.gitignore

@@ -0,0 +1,44 @@
+# ---- Dependencies ----
+node_modules/
+.venv/
+*.egg-info/
+
+# ---- Build output ----
+dist/
+build/
+*.tsbuildinfo
+
+# ---- Environment secrets ----
+.env
+.env.local
+.env.*.local
+
+# ---- Python runtime ----
+__pycache__/
+*.py[cod]
+*.pyo
+
+# ---- Test & coverage ----
+.pytest_cache/
+.mypy_cache/
+.ruff_cache/
+htmlcov/
+.coverage
+coverage.xml
+
+# ---- Editor & OS ----
+.vscode/
+.idea/
+*.swp
+.DS_Store
+Thumbs.db
+
+# ---- Misc ----
+prd.txt
+auth-prd.md
+.claude/
+claude.md
+/prds
+
+.akhil
+self/ 

.prettierrc

@@ -0,0 +1,7 @@
+{
+  "semi": false,
+  "singleQuote": true,
+  "tabWidth": 2,
+  "trailingComma": "es5",
+  "printWidth": 100
+}

apps/admin-panel/.env.example

@@ -0,0 +1,7 @@
+# Supabase (browser client - anon key only)
+VITE_SUPABASE_URL=https://your-project-ref.supabase.co
+VITE_SUPABASE_ANON_KEY=your-supabase-anon-key
+
+# FastAPI backend
+VITE_API_BASE_URL=http://localhost:8000
+VITE_STRIPE_PUBLISHABLE_KEY=

apps/admin-panel/index.html

@@ -0,0 +1,16 @@
+<!doctype html>
+<html lang="en">
+
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <link rel="icon" type="image/png" href="/favicon.png" />
+  <title>Venue404 | Admin</title>
+</head>
+
+<body>
+  <div id="root"></div>
+  <script type="module" src="/src/main.tsx"></script>
+</body>
+
+</html>

apps/admin-panel/package.json

@@ -0,0 +1,33 @@
+{
+  "name": "@venue404/admin-panel",
+  "private": true,
+  "version": "0.0.0",
+  "type": "module",
+  "scripts": {
+    "dev": "vite --port 5399",
+    "build": "tsc && vite build",
+    "lint": "eslint src",
+    "preview": "vite preview"
+  },
+  "dependencies": {
+    "@tailwindcss/vite": "^4.3.0",
+    "@tanstack/react-query": "^5.101.0",
+    "@venue404/api-client": "workspace:*",
+    "@venue404/ui": "workspace:*",
+    "class-variance-authority": "^0.7.1",
+    "clsx": "^2.1.1",
+    "lucide-react": "^1.17.0",
+    "react": "^18.3.0",
+    "react-dom": "^18.3.0",
+    "react-router-dom": "^6.23.0",
+    "recharts": "^3.8.1",
+    "tailwind-merge": "^3.6.0",
+    "tailwindcss": "^4.3.0"
+  },
+  "devDependencies": {
+    "@types/react": "^18.3.0",
+    "@types/react-dom": "^18.3.0",
+    "@vitejs/plugin-react": "^4.3.0",
+    "vite": "^8.1.3"
+  }
+}

apps/admin-panel/src/App.tsx

@@ -0,0 +1,6 @@
+import { RouterProvider } from 'react-router-dom'
+import { router } from './routes'
+
+export default function App() {
+  return <RouterProvider router={router} />
+}

apps/admin-panel/src/components/AdminLayout.tsx

@@ -0,0 +1,57 @@
+import { useNavigate, useLocation } from 'react-router-dom'
+import { useAuth } from '../lib/AuthContext'
+import { AppShell, Logo, type NavItemConfig } from '@venue404/ui'
+import {
+  LayoutDashboard, Building2, Users, UserCheck,
+  CalendarDays, ClipboardList, Settings, Sparkles, LayoutGrid, Search, PhoneCall,
+} from 'lucide-react'
+
+const NAV: NavItemConfig[] = [
+  { label: 'Dashboard',       href: '/dashboard',      icon: <LayoutDashboard className="h-4 w-4" /> },
+  { label: 'Venue Approvals', href: '/venues/pending', icon: <Building2 className="h-4 w-4" /> },
+  { label: 'Users',           href: '/users',          icon: <Users className="h-4 w-4" /> },
+  { label: 'Venue Owners',    href: '/owners',         icon: <UserCheck className="h-4 w-4" /> },
+  { label: 'Amenities',       href: '/amenities',      icon: <Sparkles className="h-4 w-4" /> },
+  { label: 'Categories',      href: '/categories',     icon: <LayoutGrid className="h-4 w-4" /> },
+  { label: 'Bookings',        href: '/bookings',       icon: <CalendarDays className="h-4 w-4" /> },
+  { label: 'External Reservations', href: '/external-reservations', icon: <PhoneCall className="h-4 w-4" /> },
+  { label: 'Deep Research',   href: '/deep-research-insights', icon: <Search className="h-4 w-4" /> },
+  { label: 'Audit Log',       href: '/audit-log',      icon: <ClipboardList className="h-4 w-4" /> },
+  { label: 'Settings',        href: '/settings',       icon: <Settings className="h-4 w-4" /> },
+]
+
+type AdminLayoutProps = {
+  pageTitle: string
+  pageSubtitle?: string
+  children: React.ReactNode
+}
+
+export function AdminLayout({ pageTitle, pageSubtitle, children }: AdminLayoutProps) {
+  const { user, signOut } = useAuth()
+  const navigate = useNavigate()
+  const location = useLocation()
+
+  async function handleSignOut() {
+    await signOut()
+    navigate('/login', { replace: true })
+  }
+
+  return (
+    <AppShell
+      navItems={NAV}
+      activePath={location.pathname}
+      onNavigate={navigate}
+      pageTitle={pageTitle}
+      pageSubtitle={pageSubtitle}
+      brand={<Logo variant="dark" />}
+      user={user ? {
+        name: user.profile.full_name ?? user.email ?? 'Admin',
+        email: user.email ?? '',
+        role: 'Super Admin',
+      } : undefined}
+      onSignOut={handleSignOut}
+    >
+      {children}
+    </AppShell>
+  )
+}