fix(admin): P0 integrity — permanent bans, ACL sidebar, rank guards

Co-authored-by: Cursor <[email protected]>

src/app/admin/bans/page.tsx

@@ -2,6 +2,7 @@ import { redirect } from "next/navigation";
 import { getTranslations } from "next-intl/server";
 import { createBan, liftBan } from "@/actions/admin-bans";
 import { StatusCard } from "@/components/admin/dashboard";
+import { activeBanWhere, unixNow } from "@/lib/bans";
 import { canAccess, getAdminContext, PERMS } from "@/lib/permissions";
 import { prisma } from "@/lib/prisma";
 
@@ -18,11 +19,11 @@ export default async function AdminBans() {
 	}
 
 	const t = await getTranslations("pages.admin.bans");
-	const now = Math.floor(Date.now() / 1000);
+	const now = unixNow();
 	let bans: Awaited<ReturnType<typeof prisma.ban.findMany>> = [];
 	try {
 		bans = await prisma.ban.findMany({
-			where: { banExpire: { gt: now } },
+			where: activeBanWhere(now),
 			orderBy: { timestamp: "desc" },
 			take: 100,
 		});
@@ -30,7 +31,6 @@ export default async function AdminBans() {
 		bans = [];
 	}
 
-	// banExpire of 0 means permanent in the emulator schema.
 	const permanent = bans.filter((b) => b.banExpire === 0).length;
 	const accountBans = bans.filter((b) => b.type === "account").length;