Add Admin Endpoint (Superadmin Only)

[codebestia]

Background

The only way to create an Admin row so far is one-time bootstrap script. This issue adds the normal, ongoing way: an existing superadmin adding another admin through the API. Per the request, this does not touch the smart contract at all — it's a backend-only concept, deliberately decoupled from the contract's own Admin/Manager/Operator role system, which is a separate on-chain authorization concern this backend doesn't currently drive.

Proposed Steps

1. POST /admin/admins (requireSuperAdmin) — body { address: string, name: string, isSuperAdmin?: boolean }.
2. Validate address with StrKey.isValidEd25519PublicKey; 400 if invalid.
3. Reject if an Admin row for that address already exists — 409, matching the same non-overwrite discipline as the one-time bootstrap script.
4. Create the row with createdBy: req.admin.id (the acting superadmin) and isSuperAdmin: Boolean(body.isSuperAdmin) (defaults to false — a superadmin creating another admin does not implicitly grant superadmin unless explicitly requested; a superadmin can choose to grant it, since restricting that further isn't something the request asked for).
5. Record a admin.created audit log entry with actorId: req.admin.id, targetId: <new admin id>.
6. Return the created admin record (no keypair or secret involved anywhere in this flow — admins authenticate with their own existing Stellar wallet.

Acceptance Criteria

• POST /admin/admins requires requireSuperAdmin — a non-superadmin admin gets 403
• Valid new address + name → 201 with the created admin (no isSuperAdmin in body → defaults to false)
• Duplicate address → 409, no row created or modified
• Invalid Stellar address → 400
• Created row's createdBy is set to the acting superadmin's id
• No smart contract call is made anywhere in this flow
• Exactly one AdminLog entry (admin.created) is produced per successful call

[Peculiarr7]

Hi! I’m a full-stack developer with a strong blockchain background, and I’m confident I can resolve this issue quickly and effectively. I’ll deliver a clean, reliable solution with immediate attention to detail, ensuring it’s completed as soon as possible. Please assign it to me—I’m ready to get started right away.

[bobo-24]

Hi! I came across this issue and would love to work on it. I have experience with similar tasks and I'm confident I can investigate, implement a clean solution, and thoroughly test it before submitting a PR. If the issue is still open, I would appreciate it if you could assign it to me. I’ll prioritize this immediately and ensure a reliable solution is delivered as soon as possible. Thank you!

[dslegacy]

Hi team, I’m dslegacy, a software engineer with experience building backend APIs and working with authentication and database systems. I’ve reviewed this issue and understand the requirements around superadmin authorization, Stellar address validation, duplicate handling, audit logging, and keeping this flow strictly backend-only.

I’d like to take ownership of this issue and implement the endpoint using the existing admin patterns, with proper validation and test coverage for permissions, duplicates, invalid addresses, creation, and audit logging. I’ll keep the implementation scoped to the requested API flow without introducing any smart contract interaction. I’d appreciate being assigned this issue.

[grantfox-oss]

🦊 GrantFox — @dslegacy has been assigned to this issue as part of the Third Campaign campaign!

Next steps:

1. Open a Pull Request referencing this issue (e.g., Closes #47)
2. Your PR will be reviewed by the ShadeProtocol maintainers

Good luck! Track your progress on GrantFox.

[grantfox-oss]

🎉 This issue has been marked as completed on GrantFox as part of the Third Campaign campaign!

@dslegacy's PR #57 was approved and merged by @codebestia.

🏆 @dslegacy: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (258 total points). Track your full progress on GrantFox.

👏 Great work, @dslegacy! Keep contributing to ShadeProtocol.