[christopher-od]

Domain Provider Role

Adds a new domain_provider role for users who donate a domain for use on the platform.

How it works

Role assignment (admin-only):

• Admin goes to Admin → Users, finds a user, and clicks "Domain Provider" — this grants the domain_provider role
• Demoting a domain_provider back to user is also supported via the existing "Demote" button
• Once a user has the role, the admin can go to Admin → Root Domains, click "Assign" on any domain, and select the provider from a list

Domain provider experience:

• A "Domain Provider" section appears in the sidebar with a "My Donated Domains" link
• The /domain-provider-dashboard page shows real-time stats: active subdomains, pending requests, DNS record count, new requests in the past 7 days — broken down per domain
• Sensitive infrastructure fields (zone_id, nameservers, reserved_names, notes) remain redacted; stat fields (record_count, last_synced) are visible

Changes

Backend

• schema.sql: domain_provider added to role CHECK constraint with idempotent migration block for existing databases
• server/functions/adminAssignDomainProvider.js: assigns/removes provider_user_id/provider_user_email/provider_assigned_at on Domain entity; validates the target user has domain_provider role before linking; writes AuditLog entries for both assign and unassign
• server/domain-provider-routes.js: GET /api/domain-provider/stats and GET /api/domain-provider/domains — scoped to the authenticated provider, admins can query any provider via ?user_id=
• server/entity-routes.js: domain providers see record_count and last_synced for their own domain; zone_id and other infra fields still redacted
• server/function-runner.js: registers adminAssignDomainProvider
• server/index.js: registers domain provider routes

Frontend

• src/pages/DomainProviderDashboard.jsx: new page with stat cards (totals) and per-domain breakdown cards
• src/pages/AdminUsers.jsx: domain_provider badge (emerald), "Domain Provider" action button for plain users, demote path, Domain Providers count stat
• src/pages/AdminDomains.jsx: "Assign/Provider" button per domain row opens modal showing current provider + list of domain_provider users to assign; remove provider button
• src/api/rootminsterClient.js: domainProvider.stats() and domainProvider.domains()
• src/App.jsx: /domain-provider-dashboard route protected by domain_provider|admin
• src/components/Layout.jsx: Domain Provider sidebar section and command palette entry

Validation

• ESLint: clean
• Tests: 309/309 pass
• Build: clean, 0 source maps in dist