diff --git a/backend/main.py b/backend/main.py
index 7766f46..ed57417 100644
--- a/backend/main.py
+++ b/backend/main.py
@@ -40,6 +40,18 @@
 PBKDF2_ITERATIONS = 200_000
 EMAIL_RE = re.compile(r"^[^\s@]+@[^\s@]+\.[^\s@]+$")
 
+# List of email addresses that should be registered as moderators.
+# Set via CIPHER_MODERATOR_EMAILS environment variable (comma-separated emails).
+# Example: export CIPHER_MODERATOR_EMAILS="mod1@example.com,mod2@example.com"
+# If not set, all registered users will be regular users (role='user')
+MODERATOR_EMAILS = {
+    email.strip().lower()
+    for email in os.environ.get("CIPHER_MODERATOR_EMAILS", "").split(",")
+    if email.strip()
+}
+
+START_TIME = int(time.time())
+
 # Group invite tokens expire after 7 days
 GROUP_INVITE_TTL = 7 * 24 * 60 * 60
 
@@ -56,6 +68,9 @@
   email TEXT UNIQUE NOT NULL,
   auth_salt BLOB NOT NULL,
   auth_hash TEXT NOT NULL,
+  role TEXT NOT NULL DEFAULT 'user',
+  status TEXT NOT NULL DEFAULT 'active',
+  suspended_until INTEGER,
   created_at INTEGER NOT NULL,
   last_login_at INTEGER
 );
@@ -162,6 +177,7 @@
   group_message_id INTEGER REFERENCES group_messages(id) ON DELETE SET NULL,
   reason TEXT NOT NULL,
   details TEXT,
+  message_content TEXT,
   created_at INTEGER NOT NULL
 );
 CREATE INDEX IF NOT EXISTS idx_reports_created ON reports(created_at DESC);
@@ -224,14 +240,42 @@
 );
 CREATE INDEX IF NOT EXISTS idx_group_invites_invitee ON group_invites(invitee_id, expires_at);
 CREATE INDEX IF NOT EXISTS idx_group_invites_group   ON group_invites(group_id);
+CREATE TABLE IF NOT EXISTS mod_actions (
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  mod_id      INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  target_id   INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  action      TEXT NOT NULL,
+  reason      TEXT,
+  created_at  INTEGER NOT NULL
+);
+CREATE INDEX IF NOT EXISTS idx_mod_actions_mod ON mod_actions(mod_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_mod_actions_target ON mod_actions(target_id, created_at DESC);
+CREATE INDEX IF NOT EXISTS idx_mod_actions_time ON mod_actions(created_at DESC);
+CREATE TABLE IF NOT EXISTS appeals (
+  id          INTEGER PRIMARY KEY AUTOINCREMENT,
+  user_id     INTEGER NOT NULL REFERENCES users(id) ON DELETE CASCADE,
+  status      TEXT NOT NULL DEFAULT 'pending',
+  reason      TEXT NOT NULL,
+  response    TEXT,
+  created_at  INTEGER NOT NULL,
+  reviewed_at INTEGER,
+  reviewed_by INTEGER REFERENCES users(id) ON DELETE SET NULL
+);
+CREATE INDEX IF NOT EXISTS idx_appeals_user ON appeals(user_id);
+CREATE INDEX IF NOT EXISTS idx_appeals_status ON appeals(status, created_at DESC);
 """
 
 
 def _migrate(conn):
     """Apply additive column migrations safely."""
     migrations = [
+        ("users",          "role", "TEXT NOT NULL DEFAULT 'user'"),
+        ("users",          "status", "TEXT NOT NULL DEFAULT 'active'"),
+        ("users",          "suspended_until", "INTEGER"),
         ("messages",       "reply_to_id", "INTEGER REFERENCES messages(id) ON DELETE SET NULL"),
         ("group_messages", "reply_to_id", "INTEGER REFERENCES group_messages(id) ON DELETE SET NULL"),
+        ("reports",        "message_content", "TEXT"),
+        ("appeals",        "appeal_type", "TEXT"),
         ("push_subscriptions", None, None),  # table-level check only
     ]
     existing_tables = {r[0] for r in conn.execute(
@@ -321,19 +365,28 @@ def make_session(user_id: int, request: Request, response: Response):
     set_cookie(response, CSRF_COOKIE, csrf, request, http_only=False)
 
 
+def is_super_moderator(user: sqlite3.Row) -> bool:
+    return user["role"] == "super_moderator"
+
+
+def is_moderator_row(user: sqlite3.Row) -> bool:
+    return user["role"] in ("moderator", "super_moderator")
+
+
 def current_user(request: Request) -> Optional[sqlite3.Row]:
     sid = request.cookies.get(SESSION_COOKIE)
     if not sid:
         return None
     with db() as conn:
         row = conn.execute(
-            """SELECT u.id, u.email, u.auth_salt, u.auth_hash, u.created_at, u.last_login_at,
+            """SELECT u.id, u.email, u.auth_salt, u.auth_hash, u.role, u.status,
+                      u.created_at, u.last_login_at,
                       s.id AS sess_id, s.csrf AS sess_csrf, s.expires_at AS sess_exp
                  FROM sessions s JOIN users u ON u.id = s.user_id
                 WHERE s.id = ?""",
             (sid,)
         ).fetchone()
-    if not row or row["sess_exp"] < int(time.time()):
+    if not row or row["sess_exp"] < int(time.time()) or row["status"] == "banned":
         return None
     return row
 
@@ -364,6 +417,19 @@ def auth_dep(request: Request):
     return user
 
 
+def require_active_user(request: Request, user = Depends(require_user)):
+    require_csrf(request, user)
+    if user["status"] != "active":
+        raise HTTPException(403, "Account suspended")
+    return user
+
+
+def require_moderator(user = Depends(require_active_user)):
+    if not is_moderator_row(user):
+        raise HTTPException(403, "Moderator access required")
+    return user
+
+
 class PreflightIn(BaseModel):
     email: str = Field(min_length=3, max_length=254)
 
@@ -441,8 +507,26 @@ class ReportIn(BaseModel):
     reportedUserId: Optional[int] = None
     messageId: Optional[int] = None
     groupMessageId: Optional[int] = None
-    reason: str = Field(min_length=5, max_length=500)
+    reason: str = Field(min_length=1, max_length=500)
     details: Optional[str] = Field(default=None, max_length=2000)
+    messageContent: Optional[str] = Field(default=None, max_length=10000)
+
+
+class ModUserActionIn(BaseModel):
+    action: str = Field(..., pattern="^(suspend|ban|restore|approve|reject)$")
+    duration_days: Optional[int] = Field(default=7, ge=1, le=365)  # For suspend action only
+    reason: Optional[str] = Field(default=None, max_length=500)
+
+
+class ModChangeRoleIn(BaseModel):
+    new_role: str = Field(..., pattern="^(user|moderator|super_moderator)$")
+
+
+class AppealSubmitIn(BaseModel):
+    appeal_type: str = Field(..., pattern="^(mistaken|violated_by_mistake|circumstances_changed)$")
+    email: str = Field(min_length=3, max_length=254)
+    authHash: str = Field(pattern="^[0-9a-fA-F]{64}$")
+    reason: str = Field(min_length=50, max_length=2000)
 
 
 class InviteToGroupIn(BaseModel):
@@ -478,6 +562,7 @@ async def security_headers(request: Request, call_next):
     response.headers["Referrer-Policy"] = "no-referrer"
     response.headers["Cross-Origin-Opener-Policy"] = "same-origin"
     response.headers["Permissions-Policy"] = "interest-cohort=(), browsing-topics=()"
+    response.headers["Service-Worker-Allowed"] = "/"
     if not request.url.path.startswith("/static/"):
         response.headers["Cache-Control"] = "no-store"
     response.headers["Content-Security-Policy"] = (
@@ -518,11 +603,12 @@ def register(body: RegisterIn, request: Request, response: Response):
     salt_bytes = bytes.fromhex(body.authSalt)
     auth_hash_stored = hasher.hash(body.authHash.lower())
     now = int(time.time())
+    role = "moderator" if email in MODERATOR_EMAILS else "user"
     with db() as conn:
         try:
             cur = conn.execute(
-                "INSERT INTO users (email, auth_salt, auth_hash, created_at, last_login_at) VALUES (?,?,?,?,?)",
-                (email, salt_bytes, auth_hash_stored, now, now)
+                "INSERT INTO users (email, auth_salt, auth_hash, role, status, created_at, last_login_at) VALUES (?,?,?,?,?,?,?)",
+                (email, salt_bytes, auth_hash_stored, role, "active", now, now)
             )
         except sqlite3.IntegrityError:
             raise HTTPException(409, "Email already registered")
@@ -535,19 +621,55 @@ def register(body: RegisterIn, request: Request, response: Response):
 def login(body: LoginIn, request: Request, response: Response):
     rate_limit(f"login:{client_ip(request)}", 10, 60)
     email = body.email.lower().strip()
+    now = int(time.time())
     with db() as conn:
-        row = conn.execute("SELECT id, auth_hash FROM users WHERE email = ?", (email,)).fetchone()
+        row = conn.execute("SELECT id, auth_hash, status, suspended_until FROM users WHERE email = ?", (email,)).fetchone()
     if not row:
         raise HTTPException(401, "Invalid credentials")
+
+    # Auto-restore if suspension expired
+    if row["status"] == "suspended" and row["suspended_until"] and row["suspended_until"] <= now:
+        with db() as conn:
+            conn.execute("UPDATE users SET status = 'active', suspended_until = NULL WHERE id = ?", (row["id"],))
+        row = dict(row)
+        row["status"] = "active"
+        row["suspended_until"] = None
+
+    # Check suspension/ban status after potential auto-restore
+    if row["status"] == "banned":
+        try:
+            hasher.verify(row["auth_hash"], body.authHash.lower())
+        except (VerifyMismatchError, InvalidHash) as err:
+            raise HTTPException(401, "Invalid credentials") from err
+        return {
+            "id": row["id"],
+            "email": email,
+            "restricted": True,
+            "restrictionType": "banned",
+        }
+    elif row["status"] == "suspended":
+        try:
+            hasher.verify(row["auth_hash"], body.authHash.lower())
+        except (VerifyMismatchError, InvalidHash) as err:
+            raise HTTPException(401, "Invalid credentials") from err
+        time_remaining = (row["suspended_until"] - now) if row["suspended_until"] else None
+        return {
+            "id": row["id"],
+            "email": email,
+            "restricted": True,
+            "restrictionType": "suspended",
+            "timeRemaining": time_remaining,
+        }
+
     try:
         hasher.verify(row["auth_hash"], body.authHash.lower())
-    except (VerifyMismatchError, InvalidHash):
-        raise HTTPException(401, "Invalid credentials")
+    except (VerifyMismatchError, InvalidHash) as err:
+        raise HTTPException(401, "Invalid credentials") from err
     make_session(row["id"], request, response)
     _log_login(row["id"], request)
     with db() as conn:
-        conn.execute("UPDATE users SET last_login_at = ? WHERE id = ?", (int(time.time()), row["id"]))
-    return {"id": row["id"], "email": email}
+        conn.execute("UPDATE users SET last_login_at = ? WHERE id = ?", (now, row["id"]))
+    return {"id": row["id"], "email": email, "restricted": False}
 
 
 @app.post("/api/auth/verify")
@@ -556,8 +678,8 @@ def verify_password(body: LoginIn, user = Depends(auth_dep)):
         raise HTTPException(403, "Email mismatch")
     try:
         hasher.verify(user["auth_hash"], body.authHash.lower())
-    except (VerifyMismatchError, InvalidHash):
-        raise HTTPException(401, "Wrong password")
+    except (VerifyMismatchError, InvalidHash) as err:
+        raise HTTPException(401, "Wrong password") from err
     return {"ok": True}
 
 
@@ -581,6 +703,9 @@ def me(user = Depends(require_user)):
         "createdAt": user["created_at"],
         "lastLoginAt": user["last_login_at"],
         "iterations": PBKDF2_ITERATIONS,
+        "role": user["role"],
+        "status": user["status"],
+        "isModerator": is_moderator_row(user),
     }
 
 
@@ -888,7 +1013,7 @@ def _grant_media_access(conn, media_ids: list[str], uploader_id: int, recipient_
 
 
 @app.post("/api/messages", status_code=201)
-def message_send(body: MessageIn, user = Depends(auth_dep)):
+def message_send(body: MessageIn, user = Depends(require_active_user)):
     if body.recipientId == user["id"]:
         raise HTTPException(400, "Cannot message yourself")
     with db() as conn:
@@ -908,7 +1033,7 @@ def message_send(body: MessageIn, user = Depends(auth_dep)):
 
 
 @app.post("/api/messages/{msg_id}/read")
-def message_mark_read(msg_id: int, user = Depends(auth_dep)):
+def message_mark_read(msg_id: int, user = Depends(require_active_user)):
     now = int(time.time())
     with db() as conn:
         conn.execute(
@@ -919,7 +1044,7 @@ def message_mark_read(msg_id: int, user = Depends(auth_dep)):
 
 
 @app.delete("/api/messages/{msg_id}")
-def message_delete(msg_id: int, user = Depends(auth_dep)):
+def message_delete(msg_id: int, user = Depends(require_active_user)):
     with db() as conn:
         row = conn.execute(
             "SELECT sender_id, recipient_id FROM messages WHERE id = ?", (msg_id,)
@@ -1044,7 +1169,7 @@ def group_preflight(group_id: int, user = Depends(require_user)):
 
 
 @app.post("/api/groups/{group_id}/join", status_code=201)
-def group_join(group_id: int, body: GroupJoinIn, request: Request, user = Depends(auth_dep)):
+def group_join(group_id: int, body: GroupJoinIn, request: Request, user = Depends(require_active_user)):
     rate_limit(f"groupjoin:{client_ip(request)}", 20, 60)
     with db() as conn:
         g = conn.execute("SELECT verifier_hash FROM groups WHERE id = ?", (group_id,)).fetchone()
@@ -1072,7 +1197,7 @@ def group_join(group_id: int, body: GroupJoinIn, request: Request, user = Depend
 
 
 @app.post("/api/groups/{group_id}/leave")
-def group_leave(group_id: int, user = Depends(auth_dep)):
+def group_leave(group_id: int, user = Depends(require_active_user)):
     with db() as conn:
         _require_group_member(conn, group_id, user["id"])
         conn.execute("DELETE FROM group_members WHERE group_id = ? AND user_id = ?", (group_id, user["id"]))
@@ -1083,7 +1208,7 @@ def group_leave(group_id: int, user = Depends(auth_dep)):
 
 
 @app.get("/api/groups/{group_id}/messages")
-def group_messages_list(group_id: int, limit: int = 200, user = Depends(require_user)):
+def group_messages_list(group_id: int, limit: int = 200, user = Depends(require_active_user)):
     limit = max(1, min(limit, 500))
     with db() as conn:
         _require_group_member(conn, group_id, user["id"])
@@ -1113,7 +1238,7 @@ def group_messages_list(group_id: int, limit: int = 200, user = Depends(require_
 
 
 @app.post("/api/groups/{group_id}/messages", status_code=201)
-def group_message_send(group_id: int, body: GroupMessageIn, user = Depends(auth_dep)):
+def group_message_send(group_id: int, body: GroupMessageIn, user = Depends(require_active_user)):
     with db() as conn:
         _require_group_member(conn, group_id, user["id"])
         now = int(time.time())
@@ -1147,7 +1272,7 @@ def group_mark_read(group_id: int, user = Depends(auth_dep)):
 
 
 @app.delete("/api/groups/{group_id}/messages/{msg_id}")
-def group_message_delete(group_id: int, msg_id: int, user = Depends(auth_dep)):
+def group_message_delete(group_id: int, msg_id: int, user = Depends(require_active_user)):
     with db() as conn:
         _require_group_member(conn, group_id, user["id"])
         row = conn.execute(
@@ -1420,28 +1545,398 @@ def list_blocked(user = Depends(auth_dep)):
 # ── Reports ───────────────────────────────────────────────────────────────────
 
 @app.post("/api/report", status_code=201)
-def report(body: ReportIn, user = Depends(auth_dep)):
+def report(body: ReportIn, user = Depends(require_active_user)):
     if not body.reportedUserId and not body.messageId and not body.groupMessageId:
         raise HTTPException(400, "Must report a user or message")
     now = int(time.time())
     with db() as conn:
         cur = conn.execute(
-            "INSERT INTO reports (reporter_id, reported_user_id, message_id, group_message_id, reason, details, created_at) "
-            "VALUES (?,?,?,?,?,?,?)",
-            (user["id"], body.reportedUserId, body.messageId, body.groupMessageId, body.reason, body.details, now)
+            "INSERT INTO reports (reporter_id, reported_user_id, message_id, group_message_id, reason, details, message_content, created_at) "
+            "VALUES (?,?,?,?,?,?,?,?)",
+            (user["id"], body.reportedUserId, body.messageId, body.groupMessageId, body.reason, body.details, body.messageContent, now)
         )
     return {"id": cur.lastrowid}
 
 
-# ── Session management ────────────────────────────────────────────────────────
+@app.get("/api/mod/stats")
+def mod_stats(user = Depends(require_moderator)):
+    with db() as conn:
+        total_users = conn.execute("SELECT COUNT(*) FROM users").fetchone()[0]
+        total_active = conn.execute("SELECT COUNT(*) FROM users WHERE status = 'active'").fetchone()[0]
+        total_suspended = conn.execute("SELECT COUNT(*) FROM users WHERE status = 'suspended'").fetchone()[0]
+        total_banned = conn.execute("SELECT COUNT(*) FROM users WHERE status = 'banned'").fetchone()[0]
+        total_messages = conn.execute("SELECT COUNT(*) FROM messages").fetchone()[0]
+        total_reports = conn.execute("SELECT COUNT(*) FROM reports").fetchone()[0]
+        recent_reports = conn.execute("SELECT COUNT(*) FROM reports WHERE created_at > ?", (int(time.time()) - 86400,)).fetchone()[0]
+    return {
+        "totalUsers": total_users,
+        "activeUsers": total_active,
+        "suspendedUsers": total_suspended,
+        "bannedUsers": total_banned,
+        "totalMessages": total_messages,
+        "totalReports": total_reports,
+        "recentReports": recent_reports,
+        "serverUptime": int(time.time()) - START_TIME,
+        "now": int(time.time()),
+    }
+
+
+@app.get("/api/mod/reports")
+def mod_reports(limit: int = 100, offset: int = 0, user = Depends(require_moderator)):
+    limit = max(1, min(limit, 200))
+    offset = max(0, offset)
+    with db() as conn:
+        rows = conn.execute(
+            """SELECT r.id, r.reason, r.details, r.created_at,
+                        r.message_id, r.group_message_id, r.message_content,
+                        r.reporter_id, rep.email AS reporter_email,
+                        r.reported_user_id, tgt.email AS reported_email
+                   FROM reports r
+                   LEFT JOIN users rep ON rep.id = r.reporter_id
+                   LEFT JOIN users tgt ON tgt.id = r.reported_user_id
+                  ORDER BY r.created_at DESC LIMIT ? OFFSET ?""",
+            (limit, offset)
+        ).fetchall()
+    return [{
+        "id": r["id"],
+        "reason": r["reason"],
+        "details": r["details"],
+        "createdAt": r["created_at"],
+        "messageId": r["message_id"],
+        "groupMessageId": r["group_message_id"],
+        "messageContent": r["message_content"],
+        "reporterId": r["reporter_id"],
+        "reporterEmail": r["reporter_email"],
+        "reportedUserId": r["reported_user_id"],
+        "reportedUserEmail": r["reported_email"],
+    } for r in rows]
+
+
+@app.get("/api/mod/users")
+def mod_users(limit: int = 200, offset: int = 0, user = Depends(require_moderator)):
+    limit = max(1, min(limit, 500))
+    offset = max(0, offset)
+    with db() as conn:
+        rows = conn.execute(
+            "SELECT id, email, role, status, created_at, last_login_at FROM users ORDER BY created_at DESC LIMIT ? OFFSET ?",
+            (limit, offset)
+        ).fetchall()
+    return [{
+        "id": r["id"],
+        "email": r["email"],
+        "role": r["role"],
+        "status": r["status"],
+        "createdAt": r["created_at"],
+        "lastLoginAt": r["last_login_at"],
+    } for r in rows]
+
+
+@app.post("/api/mod/users/{user_id}/status")
+def mod_user_status(user_id: int, body: ModUserActionIn, user = Depends(require_moderator)):
+    if user_id == user["id"]:
+        raise HTTPException(400, "Cannot modify your own account")
+
+    now = int(time.time())
+    with db() as conn:
+        target = conn.execute("SELECT id, role FROM users WHERE id = ?", (user_id,)).fetchone()
+        if not target:
+            raise HTTPException(404, "User not found")
+
+        # Determine new status and suspended_until
+        if body.action == "suspend":
+            new_status = "suspended"
+            suspended_until = now + (body.duration_days * 86400) if body.duration_days else now + (7 * 86400)
+        elif body.action == "ban":
+            new_status = "banned"
+            suspended_until = None
+        else:  # restore
+            new_status = "active"
+            suspended_until = None
+
+        # Permission checks: only super_moderators can modify moderators
+        target_is_mod = target["role"] in ("moderator", "super_moderator")
+        if target_is_mod and not is_super_moderator(user):
+            raise HTTPException(403, "Only super moderators can modify moderators")
+
+        # Update user status
+        conn.execute(
+            "UPDATE users SET status = ?, suspended_until = ? WHERE id = ?",
+            (new_status, suspended_until, user_id)
+        )
+
+        # Log action to audit log
+        action_str = body.action
+        if body.action == "suspend" and body.duration_days:
+            action_str = f"suspend_{body.duration_days}d"
+
+        conn.execute(
+            "INSERT INTO mod_actions (mod_id, target_id, action, reason, created_at) VALUES (?, ?, ?, ?, ?)",
+            (user["id"], user_id, action_str, body.reason, now)
+        )
+
+        # Revoke sessions if suspending or banning
+        if new_status in ("banned", "suspended"):
+            conn.execute("DELETE FROM sessions WHERE user_id = ?", (user_id,))
+
+    return {"ok": True}
+
+
+@app.post("/api/mod/users/{user_id}/role")
+def mod_change_role(user_id: int, body: ModChangeRoleIn, user = Depends(require_moderator)):
+    if user_id == user["id"]:
+        raise HTTPException(400, "Cannot change your own role")
+    if not is_super_moderator(user):
+        raise HTTPException(403, "Only super moderators can change roles")
+
+    now = int(time.time())
+    with db() as conn:
+        target = conn.execute("SELECT id, role FROM users WHERE id = ?", (user_id,)).fetchone()
+        if not target:
+            raise HTTPException(404, "User not found")
+        conn.execute("UPDATE users SET role = ? WHERE id = ?", (body.new_role, user_id))
+
+        # Log action to audit log
+        conn.execute(
+            "INSERT INTO mod_actions (mod_id, target_id, action, reason, created_at) VALUES (?, ?, ?, ?, ?)",
+            (user["id"], user_id, f"role_change_{body.new_role}", f"Changed from {target['role']}", now)
+        )
+
+    return {"ok": True, "newRole": body.new_role}
+
+
+@app.get("/api/mod/audit-log")
+def get_audit_log(user = Depends(require_moderator), limit: int = 100, offset: int = 0):
+    """Get audit log of moderator actions. Limited to 100 entries by default."""
+    if limit > 500:
+        limit = 500
+    if limit < 1:
+        limit = 1
+    if offset < 0:
+        offset = 0
+
+    with db() as conn:
+        # Get total count
+        total = conn.execute("SELECT COUNT(*) as cnt FROM mod_actions").fetchone()["cnt"]
+
+        # Get audit log entries ordered by most recent first
+        rows = conn.execute(
+            """SELECT ma.id, ma.mod_id, ma.target_id, ma.action, ma.reason, ma.created_at,
+                      mod_user.email as mod_email,
+                      target_user.email as target_email
+               FROM mod_actions ma
+               LEFT JOIN users mod_user ON ma.mod_id = mod_user.id
+               LEFT JOIN users target_user ON ma.target_id = target_user.id
+               ORDER BY ma.created_at DESC
+               LIMIT ? OFFSET ?""",
+            (limit, offset)
+        ).fetchall()
+
+    entries = [
+        {
+            "id": r["id"],
+            "modId": r["mod_id"],
+            "modUsername": r["mod_email"],
+            "targetId": r["target_id"],
+            "targetUsername": r["target_email"],
+            "action": r["action"],
+            "reason": r["reason"],
+            "createdAt": r["created_at"]
+        }
+        for r in rows
+    ]
+
+    return {
+        "total": total,
+        "limit": limit,
+        "offset": offset,
+        "entries": entries
+    }
+
+
+@app.post("/api/appeals")
+def create_appeal(body: AppealSubmitIn, request: Request):
+    """Allow suspended/banned users to appeal their status."""
+    email = body.email.lower().strip()
+    now = int(time.time())
+
+    # Look up user and verify credentials
+    with db() as conn:
+        user_row = conn.execute(
+            "SELECT id, auth_hash, status FROM users WHERE email = ?",
+            (email,)
+        ).fetchone()
+
+    if not user_row:
+        raise HTTPException(401, "Invalid credentials")
+
+    # Verify the authHash
+    try:
+        hasher.verify(user_row["auth_hash"], body.authHash.lower())
+    except (VerifyMismatchError, InvalidHash) as err:
+        raise HTTPException(401, "Invalid credentials") from err
+
+    # User must be suspended or banned to appeal
+    if user_row["status"] == "active":
+        raise HTTPException(400, "Only suspended or banned users can appeal")
+
+    user_id = user_row["id"]
+
+    # Check if user already has a pending appeal
+    with db() as conn:
+        existing = conn.execute(
+            "SELECT id FROM appeals WHERE user_id = ? AND status = 'pending'",
+            (user_id,)
+        ).fetchone()
+        if existing:
+            raise HTTPException(400, "You already have a pending appeal")
+
+        # Create appeal
+        conn.execute(
+            "INSERT INTO appeals (user_id, status, appeal_type, reason, created_at) VALUES (?, ?, ?, ?, ?)",
+            (user_id, "pending", body.appeal_type, body.reason, now)
+        )
+
+    return {"ok": True, "message": "Appeal submitted successfully"}
+
+
+@app.get("/api/appeals/status")
+def get_appeal_status(user = Depends(require_user)):
+    """Get current user's appeal status."""
+    with db() as conn:
+        appeal = conn.execute(
+            """SELECT id, status, reason, response, appeal_type, created_at, reviewed_at
+               FROM appeals WHERE user_id = ? ORDER BY created_at DESC LIMIT 1""",
+            (user["id"],)
+        ).fetchone()
+
+    if not appeal:
+        return {"hasAppeal": False}
+
+    return {
+        "hasAppeal": True,
+        "id": appeal["id"],
+        "status": appeal["status"],
+        "appealType": appeal["appeal_type"],
+        "reason": appeal["reason"],
+        "response": appeal["response"],
+        "createdAt": appeal["created_at"],
+        "reviewedAt": appeal["reviewed_at"],
+    }
+
+
+@app.get("/api/mod/appeals")
+def get_appeals(user = Depends(require_moderator), status: str = "pending", limit: int = 50, offset: int = 0):
+    """Get appeals for moderator review."""
+    # Validate status parameter to prevent SQL injection
+    valid_statuses = {"pending", "approved", "rejected"}
+    if status and status not in valid_statuses:
+        raise HTTPException(400, "Invalid status value")
+
+    if limit > 500:
+        limit = 500
+    if limit < 1:
+        limit = 1
+    if offset < 0:
+        offset = 0
+
+    with db() as conn:
+        # Get total count
+        if status:
+            total = conn.execute("SELECT COUNT(*) as cnt FROM appeals WHERE status = ?", (status,)).fetchone()["cnt"]
+        else:
+            total = conn.execute("SELECT COUNT(*) as cnt FROM appeals").fetchone()["cnt"]
+
+        # Get appeals
+        if status:
+            rows = conn.execute(
+                """SELECT a.id, a.user_id, a.status, a.reason, a.response, a.created_at, a.reviewed_at,
+                          a.reviewed_by, u.email
+                   FROM appeals a
+                   LEFT JOIN users u ON a.user_id = u.id
+                   WHERE a.status = ?
+                   ORDER BY a.created_at DESC LIMIT ? OFFSET ?""",
+                (status, limit, offset)
+            ).fetchall()
+        else:
+            rows = conn.execute(
+                """SELECT a.id, a.user_id, a.status, a.reason, a.response, a.created_at, a.reviewed_at,
+                          a.reviewed_by, u.email
+                   FROM appeals a
+                   LEFT JOIN users u ON a.user_id = u.id
+                   ORDER BY a.created_at DESC LIMIT ? OFFSET ?""",
+                (limit, offset)
+            ).fetchall()
+
+    entries = [
+        {
+            "id": r["id"],
+            "userId": r["user_id"],
+            "userEmail": r["email"],
+            "status": r["status"],
+            "reason": r["reason"],
+            "response": r["response"],
+            "createdAt": r["created_at"],
+            "reviewedAt": r["reviewed_at"]
+        }
+        for r in rows
+    ]
+
+    return {
+        "total": total,
+        "limit": limit,
+        "offset": offset,
+        "entries": entries
+    }
+
+
+@app.post("/api/mod/appeals/{appeal_id}")
+def review_appeal(appeal_id: int, body: ModUserActionIn, user = Depends(require_moderator)):
+    """Review and approve/reject an appeal."""
+    if body.action not in ("approve", "reject"):
+        raise HTTPException(400, "Action must be 'approve' or 'reject'")
+
+    now = int(time.time())
+    with db() as conn:
+        appeal = conn.execute("SELECT user_id, status FROM appeals WHERE id = ?", (appeal_id,)).fetchone()
+        if not appeal:
+            raise HTTPException(404, "Appeal not found")
+        if appeal["status"] != "pending":
+            raise HTTPException(400, "Appeal already reviewed")
+
+        if body.action == "approve":
+            # Restore user
+            conn.execute(
+                "UPDATE users SET status = 'active', suspended_until = NULL WHERE id = ?",
+                (appeal["user_id"],)
+            )
+            new_status = "approved"
+        else:
+            new_status = "rejected"
+
+        # Update appeal
+        conn.execute(
+            "UPDATE appeals SET status = ?, response = ?, reviewed_at = ?, reviewed_by = ? WHERE id = ?",
+            (new_status, body.reason, now, user["id"], appeal_id)
+        )
+
+        # Log action
+        conn.execute(
+            "INSERT INTO mod_actions (mod_id, target_id, action, reason, created_at) VALUES (?, ?, ?, ?, ?)",
+            (user["id"], appeal["user_id"], f"appeal_{new_status}", body.reason, now)
+        )
+
+    return {"ok": True, "status": new_status}
+
+
+# ── Session management ────────────────────────────────────────────────────────────
 
 @app.post("/api/auth/logout-all")
 def logout_all(body: DeleteAccountIn, user = Depends(auth_dep)):
     """Logout all other sessions, require password (auth_hash) verification"""
     try:
         hasher.verify(user["auth_hash"], body.authHash.lower())
-    except (VerifyMismatchError, InvalidHash):
-        raise HTTPException(401, "Wrong password")
+    except (VerifyMismatchError, InvalidHash) as err:
+        raise HTTPException(401, "Wrong password") from err
     with db() as conn:
         conn.execute(
             "DELETE FROM sessions WHERE user_id = ? AND id != ?",
diff --git a/static/index.html b/static/index.html
index 09be982..2892909 100644
--- a/static/index.html
+++ b/static/index.html
@@ -102,6 +102,79 @@ <h1>Welcome back</h1>
   </div>
 </section>
 
+<!-- ╔══════════════════ SUSPENSION VIEW ══════════════════╗ -->
+<section id="view-suspension" class="view view-center hidden">
+  <div class="auth-shell">
+    <div class="brand brand-lg">
+      <div class="logo">AC</div>
+      <h1 id="susp-title">Account Suspended</h1>
+    </div>
+
+    <div class="card auth-card">
+      <div style="padding:20px;text-align:center;">
+        <p id="susp-message" class="muted" style="margin-bottom:16px;"></p>
+        <div id="susp-time-remain" style="font-size:18px;margin:16px 0;"><b id="susp-time-text"></b></div>
+        <div class="actions" style="display:flex;gap:12px;justify-content:center;margin-top:24px;">
+          <button class="btn primary" id="susp-appeal-btn" type="button">Submit Appeal</button>
+          <button class="btn ghost" id="susp-logout-btn" type="button">Sign out</button>
+        </div>
+      </div>
+    </div>
+  </div>
+</section>
+
+<!-- ╔══════════════════ APPEAL PAGE ══════════════════╗ -->
+<section id="view-appeal" class="view view-center hidden">
+  <div class="auth-shell">
+    <div class="brand brand-lg">
+      <div class="logo">AC</div>
+      <h1 id="appeal-title">Appeal Your Restriction</h1>
+    </div>
+
+    <div class="card auth-card">
+      <div id="appeal-status-panel" style="display:none;padding:16px;margin-bottom:16px;background:rgba(100,200,100,0.1);border-left:3px solid #64c864;border-radius:4px;">
+        <p id="appeal-status-text" style="margin:0;"></p>
+      </div>
+
+      <form id="appeal-form" class="form">
+        <label class="field">
+          <span>Email</span>
+          <input id="appeal-email" type="email" autocomplete="username" required spellcheck="false" placeholder="your@email.com">
+        </label>
+
+        <label class="field">
+          <span>Appeal Type</span>
+          <select id="appeal-type" required>
+            <option value="">Select reason for appeal...</option>
+            <option value="mistaken">Mistaken ban/suspension</option>
+            <option value="violated_by_mistake">I violated rules by mistake</option>
+            <option value="circumstances_changed">My circumstances have changed</option>
+          </select>
+        </label>
+
+        <label class="field">
+          <span>Appeal Reason (minimum 50 characters)</span>
+          <textarea id="appeal-reason" rows="5" required minlength="50" maxlength="2000" placeholder="Explain why you believe your restriction should be lifted..."></textarea>
+          <small id="appeal-char-count" class="muted" style="display:block;margin-top:4px;">0 / 2000</small>
+        </label>
+
+        <p id="appeal-error" class="form-error hidden"></p>
+        <div class="modal-foot" style="margin-top:20px;">
+          <button class="btn ghost" type="button" id="appeal-cancel">Back</button>
+          <button class="btn primary" type="submit">Submit Appeal</button>
+        </div>
+      </form>
+    </div>
+
+    <div id="appeal-success-panel" style="display:none;text-align:center;padding:20px;">
+      <h2 style="color:#64c864;margin-bottom:16px;">Appeal Submitted</h2>
+      <p class="muted" style="margin-bottom:12px;">Your appeal has been submitted to the moderators.</p>
+      <p id="appeal-success-id" class="muted" style="font-size:12px;margin-bottom:20px;"></p>
+      <button class="btn primary" id="appeal-back-btn" type="button">Return to Sign In</button>
+    </div>
+  </div>
+</section>
+
 <!-- ╔══════════════════ APP VIEW ══════════════════╗ -->
 <section id="view-app" class="view hidden">
   <header class="topbar">
@@ -121,7 +194,16 @@ <h1>ASCII Cipher</h1>
       <button class="tab" data-route="settings" type="button">Settings</button>
     </nav>
 
+    <nav class="tabs main-tabs hidden" id="mod-tabs">
+      <button class="tab active" data-mod-route="dashboard" type="button">Dashboard</button>
+      <button class="tab" data-mod-route="reports" type="button">Reports</button>
+      <button class="tab" data-mod-route="users" type="button">Users</button>
+      <button class="tab" data-mod-route="appeals" type="button">Appeals <span class="count" id="mod-appeals-count" style="display:none">0</span></button>
+      <button class="tab" data-mod-route="audit" type="button">Audit</button>
+    </nav>
+
     <div class="topbar-end">
+      <button class="icon-btn hidden" id="mod-mode-btn" title="Switch to moderator mode">mod</button>
       <button class="icon-btn" id="lock-btn" title="Lock vault (keeps you signed in)">lock</button>
       <button class="icon-btn" id="logout-btn" title="Sign out">logout</button>
     </div>
@@ -341,6 +423,78 @@ <h3 class="section-h">Danger zone</h3>
       </form>
     </section>
   </main>
+
+  <!-- ─── MODERATION TAB ─── -->
+  <main id="tab-moderation" class="tab-pane hidden">
+    <section id="mod-pane-dashboard" class="mod-pane">
+      <section class="card">
+        <div class="card-label">
+          <span>Moderator dashboard</span>
+          <span class="hint">Visible only to moderator accounts</span>
+        </div>
+        <div class="grid-tiles" style="gap:12px;display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));margin-top:12px;">
+          <div class="metric-card"><div class="metric-label">Users</div><div class="metric-value" id="mod-total-users">0</div></div>
+          <div class="metric-card"><div class="metric-label">Active</div><div class="metric-value" id="mod-active-users">0</div></div>
+          <div class="metric-card"><div class="metric-label">Suspended</div><div class="metric-value" id="mod-suspended-users">0</div></div>
+          <div class="metric-card"><div class="metric-label">Banned</div><div class="metric-value" id="mod-banned-users">0</div></div>
+          <div class="metric-card"><div class="metric-label">Messages</div><div class="metric-value" id="mod-total-messages">0</div></div>
+          <div class="metric-card" style="position:relative;">
+            <div class="metric-label">Reports</div>
+            <div class="metric-value" id="mod-total-reports">0</div>
+            <div id="mod-unreviewed-badge" style="display:none;position:absolute;top:8px;right:8px;background:#ff5454;color:white;border-radius:50%;width:24px;height:24px;display:flex;align-items:center;justify-content:center;font-size:12px;font-weight:bold;"></div>
+          </div>
+          <div class="metric-card" style="position:relative;">
+            <div class="metric-label">Appeals</div>
+            <div class="metric-value" id="mod-pending-appeals">0</div>
+            <div id="mod-appeals-badge" style="display:none;position:absolute;top:8px;right:8px;background:#ff5454;color:white;border-radius:50%;width:24px;height:24px;display:flex;align-items:center;justify-content:center;font-size:12px;font-weight:bold;"></div>
+          </div>
+        </div>
+      </section>
+    </section>
+
+    <section id="mod-pane-reports" class="mod-pane hidden">
+      <section class="card">
+        <h3 class="section-h">Recent reports</h3>
+        <div class="muted small" style="margin-bottom:12px;">Reports are shown in plain text so moderators can review them quickly.</div>
+        <input type="text" id="mod-reports-search" placeholder="Search reports by reason or details..." style="width:100%;margin-bottom:12px;">
+        <div id="mod-reports-list" class="table"></div>
+      </section>
+    </section>
+
+    <section id="mod-pane-users" class="mod-pane hidden">
+      <section class="card">
+        <h3 class="section-h">User accounts</h3>
+        <p class="muted small">Suspend or ban an account to stop abusive activity.</p>
+        <div style="display:flex;gap:12px;margin-bottom:12px;flex-wrap:wrap;align-items:center;">
+          <input type="text" id="mod-user-search" placeholder="Search by email..." style="flex:1;min-width:200px;">
+          <select id="mod-user-filter" style="min-width:150px;">
+            <option value="">All users</option>
+            <option value="active">Active only</option>
+            <option value="suspended">Suspended only</option>
+            <option value="banned">Banned only</option>
+            <option value="moderator">Moderators only</option>
+          </select>
+        </div>
+        <div id="mod-users-list" class="table"></div>
+      </section>
+    </section>
+
+    <section id="mod-pane-appeals" class="mod-pane hidden">
+      <section class="card">
+        <h3 class="section-h">Pending appeals</h3>
+        <p class="muted small">Users can appeal their suspension or ban with a written reason.</p>
+        <div id="mod-appeals-list" class="table"></div>
+      </section>
+    </section>
+
+    <section id="mod-pane-audit" class="mod-pane hidden">
+      <section class="card">
+        <h3 class="section-h">Audit log</h3>
+        <p class="muted small">All moderator actions are logged for transparency and accountability.</p>
+        <div id="mod-audit-log" class="table"></div>
+      </section>
+    </section>
+  </main>
 </section>
 
 <!-- ╔══════════════════ MODALS ══════════════════╗ -->
@@ -470,13 +624,145 @@ <h3>Start something new</h3>
   </div>
 </div>
 
+<div class="modal hidden" id="suspension-modal">
+  <div class="modal-card sm">
+    <header class="modal-head"><h3>Suspend account</h3></header>
+    <form id="suspension-form" class="form">
+      <label class="field">
+        <span>Duration</span>
+        <select id="suspension-duration" required>
+          <option value="">Select duration...</option>
+          <option value="1">1 day</option>
+          <option value="7">7 days</option>
+          <option value="30">30 days</option>
+          <option value="60">60 days</option>
+        </select>
+      </label>
+      <label class="field">
+        <span>Reason template</span>
+        <select id="suspension-template">
+          <option value="">Custom reason...</option>
+          <option value="Spam or repetitive content">Spam or repetitive content</option>
+          <option value="Harassment or bullying">Harassment or bullying</option>
+          <option value="Inappropriate content">Inappropriate content</option>
+          <option value="Violation of community guidelines">Violation of community guidelines</option>
+          <option value="Suspicious activity">Suspicious activity</option>
+        </select>
+      </label>
+      <label class="field">
+        <span>Reason</span>
+        <textarea id="suspension-reason" placeholder="Why is this account being suspended?" maxlength="500"></textarea>
+      </label>
+    </form>
+    <div class="modal-foot">
+      <button class="btn ghost" id="suspension-cancel" type="button">Cancel</button>
+      <button class="btn danger" id="suspension-ok" type="button">Suspend</button>
+    </div>
+  </div>
+</div>
+
+<div class="modal hidden" id="appeal-review-modal">
+  <div class="modal-card">
+    <header class="modal-head"><h3>Review appeal</h3></header>
+    <div class="modal-body">
+      <p><b>Appeal reason:</b></p>
+      <p id="appeal-reason-text" style="margin-bottom:12px;"></p>
+      <label class="field">
+        <span>Decision</span>
+        <select id="appeal-decision" required>
+          <option value="">Select decision...</option>
+          <option value="approve">Approve - Restore account</option>
+          <option value="reject">Reject - Keep restriction</option>
+        </select>
+      </label>
+      <label class="field">
+        <span>Response to user (optional)</span>
+        <textarea id="appeal-response" placeholder="Explain your decision..." maxlength="500"></textarea>
+      </label>
+    </div>
+    <div class="modal-foot">
+      <button class="btn ghost" id="appeal-cancel" type="button">Cancel</button>
+      <button class="btn primary" id="appeal-submit" type="button">Submit decision</button>
+    </div>
+  </div>
+</div>
+
+<div class="modal hidden" id="action-modal">
+  <div class="modal-card sm">
+    <header class="modal-head"><h3 id="action-modal-title">Confirm action</h3></header>
+    <form id="action-form" class="form">
+      <label class="field">
+        <span>Reason template</span>
+        <select id="action-template">
+          <option value="">Custom reason...</option>
+          <option value="Spam or repetitive content">Spam or repetitive content</option>
+          <option value="Harassment or bullying">Harassment or bullying</option>
+          <option value="Inappropriate content">Inappropriate content</option>
+          <option value="Violation of community guidelines">Violation of community guidelines</option>
+          <option value="Suspicious activity">Suspicious activity</option>
+        </select>
+      </label>
+      <label class="field">
+        <span>Reason (optional)</span>
+        <textarea id="action-reason" placeholder="Provide additional details..." maxlength="500"></textarea>
+      </label>
+    </form>
+    <div class="modal-foot">
+      <button class="btn ghost" id="action-cancel" type="button">Cancel</button>
+      <button class="btn danger" id="action-ok" type="button">Confirm</button>
+    </div>
+  </div>
+</div>
+
+<div class="modal hidden" id="restore-modal">
+  <div class="modal-card sm">
+    <header class="modal-head"><h3>Restore this account</h3></header>
+    <form id="restore-form" class="form">
+      <label class="field">
+        <span>Reason for restoration</span>
+        <select id="restore-reason">
+          <option value="">Select a reason...</option>
+          <option value="Appeal approved">Appeal approved</option>
+          <option value="Manual review - no violation found">Manual review - no violation found</option>
+          <option value="Mistaken suspension">Mistaken suspension</option>
+        </select>
+      </label>
+    </form>
+    <div class="modal-foot">
+      <button class="btn ghost" id="restore-cancel" type="button">Cancel</button>
+      <button class="btn primary" id="restore-ok" type="button">Restore</button>
+    </div>
+  </div>
+</div>
+
+<div class="modal hidden" id="submit-appeal-modal">
+  <div class="modal-card sm">
+    <header class="modal-head"><h3>Appeal your restriction</h3></header>
+    <form id="submit-appeal-form" class="form">
+      <p class="muted small" style="margin-bottom:12px;">Explain why you believe your restriction should be lifted.</p>
+      <label class="field">
+        <span>Appeal reason</span>
+        <textarea id="appeal-reason-input" required placeholder="Provide details about your appeal..." maxlength="1000"></textarea>
+      </label>
+    </form>
+    <div class="modal-foot">
+      <button class="btn ghost" id="appeal-submit-cancel" type="button">Cancel</button>
+      <button class="btn primary" id="appeal-submit-ok" type="button">Submit appeal</button>
+    </div>
+  </div>
+</div>
+
 <div class="modal hidden" id="report-modal">
   <div class="modal-card">
     <header class="modal-head">
-      <h3>Report</h3>
+      <h3>Report Message</h3>
       <button class="icon-btn" id="report-close" type="button">close</button>
     </header>
     <form id="report-form" class="form">
+      <div id="report-preview" class="card" style="margin-bottom:16px;padding:12px;background:rgba(255,255,255,0.05);border-radius:4px;display:none;">
+        <div class="muted small" style="margin-bottom:8px;">Message being reported:</div>
+        <div id="report-preview-text" style="word-break:break-word;"></div>
+      </div>
       <label class="field">
         <span>Reason</span>
         <select id="report-reason" class="select" required>
@@ -492,6 +778,9 @@ <h3>Report</h3>
         <span>Details <span class="hint">optional</span></span>
         <textarea id="report-details" rows="3" maxlength="2000" placeholder="Additional context…"></textarea>
       </label>
+      <div style="background:rgba(255,165,0,0.1);border-left:3px solid #ffa500;padding:12px;margin:16px 0;border-radius:2px;">
+        <p class="muted small" style="margin:0;">⚠️ <strong>Privacy Notice:</strong> This message will be decrypted and sent unencrypted to moderators for review. They will be able to see the full content to take appropriate action.</p>
+      </div>
       <p id="report-error" class="form-error hidden"></p>
       <div class="modal-foot">
         <button class="btn ghost" type="button" id="report-cancel">Cancel</button>
@@ -509,18 +798,6 @@ <h3>Report</h3>
 </div>
 
 <script type="module" src="/static/js/app.js"></script>
-
-<!-- Service Worker Registration -->
-<script>
-if ('serviceWorker' in navigator) {
-  navigator.serviceWorker.register('/static/js/sw.js', { scope: '/' })
-    .then((registration) => {
-      console.log('Service Worker registered:', registration);
-    })
-    .catch((error) => {
-      console.log('Service Worker registration failed:', error);
-    });
-}
-</script>
+<script src="/static/js/sw-register.js"></script>
 </body>
 </html>
diff --git a/static/js/app.js b/static/js/app.js
index 9f3121c..daf8da3 100644
--- a/static/js/app.js
+++ b/static/js/app.js
@@ -59,6 +59,128 @@ function confirmDialog({ title, body, okText = "Confirm", danger = true }) {
   });
 }
 
+function suspensionDialog() {
+  return new Promise((resolve) => {
+    const m = $("suspension-modal");
+    const form = $("suspension-form");
+    const duration = $("suspension-duration");
+    const template = $("suspension-template");
+    const reason = $("suspension-reason");
+    const ok = $("suspension-ok");
+    const cancel = $("suspension-cancel");
+
+    form.reset();
+
+    const onTemplateChange = () => {
+      if (template.value) {
+        reason.value = template.value;
+      }
+    };
+
+    const close = (v) => {
+      m.classList.add("hidden");
+      ok.removeEventListener("click", onOk);
+      cancel.removeEventListener("click", onCancel);
+      form.removeEventListener("submit", onSubmit);
+      template.removeEventListener("change", onTemplateChange);
+      resolve(v);
+    };
+    const onOk = () => {
+      if (!duration.value) {
+        duration.focus();
+        return;
+      }
+      close({ durationDays: Number(duration.value), reason: reason.value || null });
+    };
+    const onCancel = () => close(null);
+    const onSubmit = (e) => { e.preventDefault(); onOk(); };
+
+    ok.addEventListener("click", onOk);
+    cancel.addEventListener("click", onCancel);
+    form.addEventListener("submit", onSubmit);
+    template.addEventListener("change", onTemplateChange);
+    m.classList.remove("hidden");
+    duration.focus();
+  });
+}
+
+function actionDialog(title) {
+  return new Promise((resolve) => {
+    const m = $("action-modal");
+    const form = $("action-form");
+    const template = $("action-template");
+    const reason = $("action-reason");
+    const ok = $("action-ok");
+    const cancel = $("action-cancel");
+    const titleEl = $("action-modal-title");
+
+    titleEl.textContent = title;
+    form.reset();
+
+    const onTemplateChange = () => {
+      if (template.value) {
+        reason.value = template.value;
+      }
+    };
+
+    const close = (v) => {
+      m.classList.add("hidden");
+      ok.removeEventListener("click", onOk);
+      cancel.removeEventListener("click", onCancel);
+      form.removeEventListener("submit", onSubmit);
+      template.removeEventListener("change", onTemplateChange);
+      resolve(v);
+    };
+    const onOk = () => {
+      close({ reason: reason.value || null });
+    };
+    const onCancel = () => close(null);
+    const onSubmit = (e) => { e.preventDefault(); onOk(); };
+
+    ok.addEventListener("click", onOk);
+    cancel.addEventListener("click", onCancel);
+    form.addEventListener("submit", onSubmit);
+    template.addEventListener("change", onTemplateChange);
+    m.classList.remove("hidden");
+    template.focus();
+  });
+}
+
+function restoreDialog() {
+  return new Promise((resolve) => {
+    const m = $("restore-modal");
+    const form = $("restore-form");
+    const reason = $("restore-reason");
+    const ok = $("restore-ok");
+    const cancel = $("restore-cancel");
+
+    form.reset();
+
+    const close = (v) => {
+      m.classList.add("hidden");
+      ok.removeEventListener("click", onOk);
+      cancel.removeEventListener("click", onCancel);
+      form.removeEventListener("submit", onSubmit);
+      resolve(v);
+    };
+    const onOk = () => {
+      if (!reason.value) {
+        reason.focus();
+        return;
+      }
+      close({ reason: reason.value });
+    };
+    const onCancel = () => close(null);
+    const onSubmit = (e) => { e.preventDefault(); onOk(); };
+
+    ok.addEventListener("click", onOk);
+    cancel.addEventListener("click", onCancel);
+    form.addEventListener("submit", onSubmit);
+    m.classList.remove("hidden");
+    reason.focus();
+  });
+}
+
 function fmtTime(unix) {
   if (!unix) return "—";
   const d = new Date(unix * 1000);
@@ -94,17 +216,26 @@ const state = {
   route: "cipher",
   cipherMode: "encrypt",
   showKey: false,
+  modMode: false,
+  modRoute: "dashboard",
 };
 
 function setView(name) {
-  for (const v of ["auth", "unlock", "app"]) {
+  for (const v of ["auth", "unlock", "suspension", "appeal", "app"]) {
     $(`view-${v}`).classList.toggle("hidden", v !== name);
   }
 }
+function updateModeratorTab() {
+  const btn = $("mod-mode-btn");
+  if (!btn) return;
+  btn.classList.toggle("hidden", !state.user?.isModerator || state.modMode);
+}
 function setRoute(r) {
+  if (r === "moderation") { enterModMode(); return; }
+  if (state.modMode) return;
   state.route = r;
   for (const t of $$("#main-tabs .tab")) t.classList.toggle("active", t.dataset.route === r);
-  for (const p of ["cipher", "vault", "messages", "history", "settings"]) {
+  for (const p of ["cipher", "vault", "messages", "history", "settings", "moderation"]) {
     $(`tab-${p}`).classList.toggle("hidden", p !== r);
     $(`tab-${p}`).classList.toggle("active", p === r);
   }
@@ -115,6 +246,44 @@ function setRoute(r) {
   location.hash = r;
 }
 
+function setModRoute(name) {
+  state.modRoute = name;
+  for (const t of $$("#mod-tabs .tab")) t.classList.toggle("active", t.dataset.modRoute === name);
+  for (const p of ["dashboard", "reports", "users", "appeals", "audit"]) {
+    $(`mod-pane-${p}`).classList.toggle("hidden", p !== name);
+  }
+  location.hash = "mod/" + name;
+}
+
+function enterModMode() {
+  if (!state.user?.isModerator) return;
+  state.modMode = true;
+  $("main-tabs").classList.add("hidden");
+  $("mod-tabs").classList.remove("hidden");
+  for (const p of ["cipher", "vault", "messages", "history", "settings"]) {
+    $(`tab-${p}`).classList.add("hidden");
+    $(`tab-${p}`).classList.remove("active");
+  }
+  $("tab-moderation").classList.remove("hidden");
+  $("tab-moderation").classList.add("active");
+  $("mod-mode-btn").textContent = "exit mod";
+  $("mod-mode-btn").title = "Back to app";
+  setModRoute(state.modRoute || "dashboard");
+  loadModeration();
+}
+
+function exitModMode() {
+  state.modMode = false;
+  $("main-tabs").classList.remove("hidden");
+  $("mod-tabs").classList.add("hidden");
+  $("tab-moderation").classList.add("hidden");
+  $("tab-moderation").classList.remove("active");
+  $("mod-mode-btn").textContent = "mod";
+  $("mod-mode-btn").title = "Switch to moderator mode";
+  updateModeratorTab();
+  setRoute(state.route || "cipher");
+}
+
 // ─── Auth view ─────────────────────────────────────────────────
 const authForm = $("auth-form");
 let authMode = "login";
@@ -185,7 +354,16 @@ authForm.addEventListener("submit", async (e) => {
     } else {
       const pre = await api.post("/api/auth/preflight", { email });
       const { authHash, vaultKey } = await deriveAuthAndVault(password, pre.authSalt, pre.iterations);
-      await api.post("/api/auth/login", { email, authHash });
+      const loginRes = await api.post("/api/auth/login", { email, authHash });
+
+      if (loginRes.restricted) {
+        state.userEmail = email;
+        state.authHash = authHash;
+        state.loginRestriction = { type: loginRes.restrictionType, timeRemaining: loginRes.timeRemaining };
+        showSuspensionScreen(loginRes.restrictionType, loginRes.timeRemaining);
+        return;
+      }
+
       state.vaultKey = vaultKey;
     }
     await loadUser();
@@ -208,6 +386,86 @@ $("unlock-toggle").addEventListener("click", () => {
 });
 $("unlock-logout").addEventListener("click", logout);
 
+// ─── Suspension and Appeal Handling ───────────────────────────────────
+function formatTimeRemaining(seconds) {
+  if (!seconds || seconds <= 0) return "Ban is permanent";
+  const days = Math.floor(seconds / 86400);
+  const hours = Math.floor((seconds % 86400) / 3600);
+  if (days > 0) return `${days} day${days > 1 ? 's' : ''} remaining`;
+  return `${hours} hour${hours > 1 ? 's' : ''} remaining`;
+}
+
+function showSuspensionScreen(type, timeRemaining) {
+  setView("suspension");
+  const title = type === "banned" ? "Account Banned" : "Account Suspended";
+  const message = type === "banned"
+    ? "Your account has been permanently banned."
+    : "Your account has been suspended and you cannot log in.";
+
+  $("susp-title").textContent = title;
+  $("susp-message").textContent = message;
+
+  if (type === "suspended" && timeRemaining) {
+    $("susp-time-remain").style.display = "block";
+    $("susp-time-text").textContent = formatTimeRemaining(timeRemaining);
+  } else {
+    $("susp-time-remain").style.display = "none";
+  }
+}
+
+function showAppealPage() {
+  setView("appeal");
+  $("appeal-form").style.display = "block";
+  $("appeal-success-panel").style.display = "none";
+  $("appeal-email").value = state.userEmail || "";
+  $("appeal-reason").value = "";
+  $("appeal-type").value = "";
+  updateAppealCharCount();
+}
+
+function updateAppealCharCount() {
+  const count = $("appeal-reason").value.length;
+  $("appeal-char-count").textContent = `${count} / 2000`;
+}
+
+$("susp-appeal-btn").addEventListener("click", showAppealPage);
+$("susp-logout-btn").addEventListener("click", () => { setView("auth"); });
+$("appeal-cancel").addEventListener("click", () => { setView("suspension"); });
+$("appeal-reason").addEventListener("input", updateAppealCharCount);
+
+$("appeal-form").addEventListener("submit", async (e) => {
+  e.preventDefault();
+  $("appeal-error").classList.add("hidden");
+
+  const email = $("appeal-email").value.trim().toLowerCase();
+  const type = $("appeal-type").value;
+  const reason = $("appeal-reason").value.trim();
+
+  if (!email || !type || reason.length < 50) {
+    return $("appeal-error").textContent = "All fields required (reason: min 50 characters)", void $("appeal-error").classList.remove("hidden");
+  }
+
+  try {
+    busy("Submitting appeal…");
+    const res = await api.post("/api/appeals", {
+      appeal_type: type,
+      email,
+      authHash: state.authHash,
+      reason
+    });
+    $("appeal-form").style.display = "none";
+    $("appeal-success-panel").style.display = "block";
+    $("appeal-success-id").textContent = `Appeal ID: ${res.id || "submitted"}`;
+  } catch (err) {
+    $("appeal-error").textContent = err.message || "Failed to submit appeal";
+    $("appeal-error").classList.remove("hidden");
+  } finally {
+    unbusy();
+  }
+});
+
+$("appeal-back-btn").addEventListener("click", () => { setView("auth"); });
+
 $("unlock-form").addEventListener("submit", async (e) => {
   e.preventDefault();
   $("unlock-error").classList.add("hidden");
@@ -240,6 +498,7 @@ $("unlock-form").addEventListener("submit", async (e) => {
 async function loadUser() {
   state.user = await api.get("/api/auth/me");
   $("user-email").textContent = state.user.email;
+  updateModeratorTab();
 }
 
 async function logout() {
@@ -727,6 +986,383 @@ async function loadSettings() {
   await loadLoginHistory();
 }
 
+async function loadModeration() {
+  try {
+    const [stats, appealsData, reports, users] = await Promise.all([
+      api.get("/api/mod/stats"),
+      api.get("/api/mod/appeals?status=pending&limit=1"),
+      api.get("/api/mod/reports?limit=100"),
+      api.get("/api/mod/users?limit=200"),
+    ]);
+
+    $("mod-total-users").textContent = stats.totalUsers;
+    $("mod-active-users").textContent = stats.activeUsers;
+    $("mod-suspended-users").textContent = stats.suspendedUsers;
+    $("mod-banned-users").textContent = stats.bannedUsers;
+    $("mod-total-messages").textContent = stats.totalMessages;
+    $("mod-total-reports").textContent = stats.totalReports;
+
+    const pendingAppealCount = appealsData.total;
+    $("mod-pending-appeals").textContent = pendingAppealCount;
+    const appealsBadge = $("mod-appeals-badge");
+    if (pendingAppealCount > 0) {
+      appealsBadge.textContent = pendingAppealCount > 99 ? "99+" : pendingAppealCount;
+      appealsBadge.style.display = "flex";
+    } else {
+      appealsBadge.style.display = "none";
+    }
+    const appealsCount = $("mod-appeals-count");
+    if (pendingAppealCount > 0) {
+      appealsCount.textContent = pendingAppealCount > 99 ? "99+" : pendingAppealCount;
+      appealsCount.style.display = "";
+    } else {
+      appealsCount.style.display = "none";
+    }
+
+    const reportsList = $("mod-reports-list");
+    const reportsSearchInput = $("mod-reports-search");
+
+    const renderReports = () => {
+    const searchTerm = reportsSearchInput.value.toLowerCase();
+    let filtered = reports.filter(r => {
+      const searchText = [
+        r.reason,
+        r.details || "",
+        r.reporterEmail || "",
+        r.reportedUserEmail || ""
+      ].join(" ").toLowerCase();
+      return searchText.includes(searchTerm);
+    });
+
+    reportsList.replaceChildren();
+    if (filtered.length === 0) {
+      const empty = document.createElement("div");
+      empty.className = "empty";
+      const p = document.createElement("p");
+      p.textContent = filtered.length !== reports.length ? "No matching reports." : "No recent reports.";
+      empty.appendChild(p);
+      reportsList.appendChild(empty);
+    } else {
+      filtered.forEach(r => {
+        const reportRow = document.createElement("div");
+        reportRow.className = "report-row";
+        reportRow.style.cssText = "padding:12px 0;border-bottom:1px solid rgba(255,255,255,0.08);";
+
+        const line1 = document.createElement("div");
+        const reasonB = document.createElement("b");
+        reasonB.textContent = r.reason;
+        line1.appendChild(reasonB);
+        line1.appendChild(document.createTextNode(" · " + fmtTime(r.createdAt)));
+        reportRow.appendChild(line1);
+
+        const line2 = document.createElement("div");
+        line2.className = "muted small";
+        line2.textContent = "Reporter: " + (r.reporterEmail || "unknown") + " · Reported: " + (r.reportedUserEmail || "unknown");
+        reportRow.appendChild(line2);
+
+        const line3 = document.createElement("div");
+        line3.textContent = r.details || "No additional details.";
+        reportRow.appendChild(line3);
+
+        if (r.messageContent) {
+          const line3b = document.createElement("div");
+          line3b.style.cssText = "margin-top:8px;padding:8px;background:rgba(255,255,255,0.03);border-left:2px solid rgba(255,255,255,0.1);";
+          const contentLabel = document.createElement("div");
+          contentLabel.className = "muted small";
+          contentLabel.textContent = "Message content:";
+          line3b.appendChild(contentLabel);
+          const contentText = document.createElement("div");
+          contentText.textContent = r.messageContent.slice(0, 500) + (r.messageContent.length > 500 ? "…" : "");
+          contentText.style.cssText = "margin-top:4px;word-break:break-word;";
+          line3b.appendChild(contentText);
+          reportRow.appendChild(line3b);
+        }
+
+        const line4 = document.createElement("div");
+        line4.className = "muted small";
+        line4.textContent = "DM " + (r.messageId ? "id " + r.messageId : r.groupMessageId ? "group id " + r.groupMessageId : "user report");
+        reportRow.appendChild(line4);
+
+        reportsList.appendChild(reportRow);
+      });
+    }
+    };
+
+    renderReports();
+    reportsSearchInput.addEventListener("input", renderReports);
+
+    const searchInput = $("mod-user-search");
+    const filterSelect = $("mod-user-filter");
+    const usersList = $("mod-users-list");
+
+    const renderUsersList = () => {
+    const searchTerm = searchInput.value.toLowerCase();
+    const filterStatus = filterSelect.value;
+
+    let filtered = users.filter(u => {
+      const matchesSearch = u.email.toLowerCase().includes(searchTerm);
+      const matchesFilter = !filterStatus ||
+        (filterStatus === "moderator" ? u.role === "moderator" || u.role === "super_moderator" : u.status === filterStatus);
+      return matchesSearch && matchesFilter;
+    });
+
+    usersList.replaceChildren();
+
+    if (filtered.length === 0) {
+      const empty = document.createElement("div");
+      empty.className = "empty";
+      const p = document.createElement("p");
+      p.textContent = filtered.length !== users.length ? "No matching users." : "No user accounts.";
+      empty.appendChild(p);
+      usersList.appendChild(empty);
+    } else {
+      filtered.forEach(u => {
+        const sessionItem = document.createElement("div");
+        sessionItem.className = "session-item";
+        sessionItem.style.cssText = "display:flex;justify-content:space-between;align-items:center;gap:12px;flex-wrap:wrap;";
+
+        const leftDiv = document.createElement("div");
+        leftDiv.style.cssText = "min-width:0;";
+
+        const emailDiv = document.createElement("div");
+        const emailB = document.createElement("b");
+        emailB.textContent = u.email;
+        emailDiv.appendChild(emailB);
+        if (u.role === "moderator" || u.role === "super_moderator") {
+          const hint = document.createElement("span");
+          hint.className = "hint";
+          hint.textContent = u.role === "super_moderator" ? "(super moderator)" : "(moderator)";
+          hint.style.cssText = u.role === "super_moderator" ? "color:#ffa500;font-weight:bold;" : "";
+          emailDiv.appendChild(document.createTextNode(" "));
+          emailDiv.appendChild(hint);
+        }
+        leftDiv.appendChild(emailDiv);
+
+        const statusDiv = document.createElement("div");
+        statusDiv.className = "muted small";
+        statusDiv.textContent = "Status: " + u.status + " · Created " + fmtTime(u.createdAt) + " · Last login " + fmtTime(u.lastLoginAt);
+        leftDiv.appendChild(statusDiv);
+
+        sessionItem.appendChild(leftDiv);
+
+        const rightDiv = document.createElement("div");
+        rightDiv.style.cssText = "display:flex;gap:8px;flex-wrap:wrap;";
+
+        if (u.status !== "suspended" && u.status !== "banned") {
+          const suspendBtn = document.createElement("button");
+          suspendBtn.className = "btn ghost";
+          suspendBtn.setAttribute("data-mod-action", "suspend");
+          suspendBtn.setAttribute("data-user-id", u.id);
+          suspendBtn.textContent = "Suspend";
+          rightDiv.appendChild(suspendBtn);
+
+          const banBtn = document.createElement("button");
+          banBtn.className = "btn ghost";
+          banBtn.setAttribute("data-mod-action", "ban");
+          banBtn.setAttribute("data-user-id", u.id);
+          banBtn.textContent = "Ban";
+          rightDiv.appendChild(banBtn);
+        }
+
+        if (u.status !== "active") {
+          const restoreBtn = document.createElement("button");
+          restoreBtn.className = "btn primary";
+          restoreBtn.setAttribute("data-mod-action", "restore");
+          restoreBtn.setAttribute("data-user-id", u.id);
+          restoreBtn.textContent = "Restore";
+          rightDiv.appendChild(restoreBtn);
+        }
+
+        sessionItem.appendChild(rightDiv);
+        usersList.appendChild(sessionItem);
+      });
+
+    }
+  };
+
+  renderUsersList();
+  searchInput.addEventListener("input", renderUsersList);
+  filterSelect.addEventListener("change", renderUsersList);
+
+  // Event delegation for mod actions (prevents listener accumulation)
+  usersList.addEventListener("click", async (e) => {
+    const btn = e.target.closest("[data-mod-action]");
+    if (!btn) return;
+
+    try {
+      const action = btn.dataset.modAction;
+      const userId = Number(btn.dataset.userId);
+
+      let actionData = null;
+      if (action === "suspend") {
+        actionData = await suspensionDialog();
+        if (!actionData) return;
+      } else if (action === "ban") {
+        actionData = await actionDialog("Ban this account?");
+        if (!actionData) return;
+      } else if (action === "restore") {
+        actionData = await restoreDialog();
+        if (!actionData) return;
+      }
+
+      const payload = { action, ...(actionData && actionData.durationDays ? { duration_days: actionData.durationDays } : {}), ...(actionData && actionData.reason ? { reason: actionData.reason } : {}) };
+      await api.post(`/api/mod/users/${userId}/status`, payload);
+      const actionLabel = { suspend: "suspended", ban: "banned", restore: "restored" }[action];
+      toast(`Account ${actionLabel}`, "info");
+      loadModeration();
+    } catch (e) {
+      toast(`Error: ${e.message}`, "error");
+    }
+  });
+
+  const appeals = await api.get("/api/mod/appeals?status=pending&limit=50");
+  const appealsList = $("mod-appeals-list");
+  appealsList.replaceChildren();
+  if (appeals.entries.length === 0) {
+    const empty = document.createElement("div");
+    empty.className = "empty";
+    const p = document.createElement("p");
+    p.textContent = "No pending appeals.";
+    empty.appendChild(p);
+    appealsList.appendChild(empty);
+  } else {
+    appeals.entries.forEach(appeal => {
+      const row = document.createElement("div");
+      row.className = "report-row";
+      row.style.cssText = "padding:12px 0;border-bottom:1px solid rgba(255,255,255,0.08);";
+
+      const line1 = document.createElement("div");
+      const userB = document.createElement("b");
+      userB.textContent = appeal.userEmail || "unknown";
+      line1.appendChild(userB);
+      line1.appendChild(document.createTextNode(" · " + fmtTime(appeal.createdAt)));
+      row.appendChild(line1);
+
+      const line2 = document.createElement("div");
+      line2.textContent = appeal.reason;
+      row.appendChild(line2);
+
+      const btnDiv = document.createElement("div");
+      btnDiv.style.cssText = "margin-top:8px;display:flex;gap:8px;";
+      const reviewBtn = document.createElement("button");
+      reviewBtn.className = "btn primary";
+      reviewBtn.setAttribute("data-appeal-id", appeal.id);
+      reviewBtn.textContent = "Review";
+      reviewBtn.addEventListener("click", async () => {
+        try {
+          $("appeal-reason-text").textContent = appeal.reason;
+          const decision = await new Promise((resolve) => {
+            const m = $("appeal-review-modal");
+            const decisionSelect = $("appeal-decision");
+            const responseText = $("appeal-response");
+            const submitBtn = $("appeal-submit");
+            const cancelBtn = $("appeal-cancel");
+
+            decisionSelect.value = "";
+            responseText.value = "";
+
+            const close = (v) => {
+              m.classList.add("hidden");
+              submitBtn.removeEventListener("click", onSubmit);
+              cancelBtn.removeEventListener("click", onCancel);
+              resolve(v);
+            };
+            const onSubmit = () => {
+              if (!decisionSelect.value) {
+                decisionSelect.focus();
+                return;
+              }
+              close({ action: decisionSelect.value, reason: responseText.value || null });
+            };
+            const onCancel = () => close(null);
+
+            submitBtn.addEventListener("click", onSubmit);
+            cancelBtn.addEventListener("click", onCancel);
+            m.classList.remove("hidden");
+            decisionSelect.focus();
+          });
+
+          if (!decision) return;
+
+          await api.post(`/api/mod/appeals/${appeal.id}`, { action: decision.action, reason: decision.reason });
+          toast("Appeal reviewed", "info");
+          loadModeration();
+        } catch (e) {
+          toast(`Error: ${e.message}`, "error");
+        }
+      });
+      btnDiv.appendChild(reviewBtn);
+      row.appendChild(btnDiv);
+
+      appealsList.appendChild(row);
+    });
+  }
+
+  const auditLog = await api.get("/api/mod/audit-log?limit=50");
+  const auditList = $("mod-audit-log");
+  auditList.replaceChildren();
+  if (auditLog.entries.length === 0) {
+    const empty = document.createElement("div");
+    empty.className = "empty";
+    const p = document.createElement("p");
+    p.textContent = "No recent actions.";
+    empty.appendChild(p);
+    auditList.appendChild(empty);
+  } else {
+    auditLog.entries.forEach(entry => {
+      const row = document.createElement("div");
+      row.className = "report-row";
+      row.style.cssText = "padding:12px 0;border-bottom:1px solid rgba(255,255,255,0.08);";
+
+      const line1 = document.createElement("div");
+      const actionB = document.createElement("b");
+      actionB.textContent = entry.action;
+      line1.appendChild(actionB);
+      line1.appendChild(document.createTextNode(" · " + fmtTime(entry.createdAt)));
+      row.appendChild(line1);
+
+      const line2 = document.createElement("div");
+      line2.className = "muted small";
+      line2.textContent = "By: " + (entry.mod_email || "unknown") + " → Target: " + (entry.target_email || "unknown");
+      row.appendChild(line2);
+
+      if (entry.reason) {
+        const line3 = document.createElement("div");
+        line3.textContent = entry.reason;
+        row.appendChild(line3);
+      }
+
+      auditList.appendChild(row);
+    });
+  }
+} catch (e) {
+  const reportsList = $("mod-reports-list");
+  const usersList = $("mod-users-list");
+  
+  const errorEl1 = document.createElement("p");
+  errorEl1.className = "form-error";
+  errorEl1.textContent = e.message;
+  reportsList.replaceChildren(errorEl1);
+  
+  const errorEl2 = document.createElement("p");
+  errorEl2.className = "form-error";
+  errorEl2.textContent = e.message;
+  usersList.replaceChildren(errorEl2);
+
+  const appealsList = $("mod-appeals-list");
+  const errorEl3 = document.createElement("p");
+  errorEl3.className = "form-error";
+  errorEl3.textContent = e.message;
+  appealsList.replaceChildren(errorEl3);
+
+  const auditList = $("mod-audit-log");
+  const errorEl4 = document.createElement("p");
+  errorEl4.className = "form-error";
+  errorEl4.textContent = e.message;
+  auditList.replaceChildren(errorEl4);
+}
+}
+
 async function loadSessions() {
   const list = $("sessions-list");
   list.innerHTML = '<p class="muted small">Loading…</p>';
@@ -874,9 +1510,20 @@ $("delete-account-form").addEventListener("submit", async (e) => {
 
 // ─── Routing ───────────────────────────────────────────────────
 for (const t of $$("#main-tabs .tab")) t.addEventListener("click", () => setRoute(t.dataset.route));
+for (const t of $$("#mod-tabs .tab")) t.addEventListener("click", () => setModRoute(t.dataset.modRoute));
+$("mod-mode-btn").addEventListener("click", () => state.modMode ? exitModMode() : enterModMode());
 window.addEventListener("hashchange", () => {
-  const r = location.hash.slice(1);
-  if (["cipher","vault","messages","history","settings"].includes(r)) setRoute(r);
+  const h = location.hash.slice(1);
+  if (h.startsWith("mod/")) {
+    const sub = h.slice(4);
+    if (["dashboard","reports","users","appeals","audit"].includes(sub)) {
+      if (!state.modMode) enterModMode();
+      else setModRoute(sub);
+    }
+  } else if (["cipher","vault","messages","history","settings"].includes(h)) {
+    if (state.modMode) exitModMode();
+    setRoute(h);
+  }
 });
 
 // ─── Keyboard shortcuts ────────────────────────────────────────
@@ -1080,7 +1727,7 @@ async function openDmThread(peerId) {
   refreshMsgKeySource();
   renderThreads();
   renderGroups();
-  await loadDmMessages(peerId);
+  await loadDmMessages(peerId, true);
   setTimeout(() => msgEls.body.focus(), 50);
 }
 
@@ -1142,15 +1789,14 @@ async function openGroupThread(groupId) {
   msgEls.keyRow.classList.add("hidden"); // group key is fixed
   renderThreads();
   renderGroups();
-  await loadGroupMessages(groupId);
+  await loadGroupMessages(groupId, true);
   setTimeout(() => msgEls.body.focus(), 50);
 }
 
-async function loadDmMessages(peerId) {
+async function loadDmMessages(peerId, resetDecryption = false) {
   try {
     state.messages = await api.get(`/api/messages?peer=${peerId}&limit=200`);
-    // Reset decryption state for new thread
-    state.messagesDecrypted = false;
+    if (resetDecryption) state.messagesDecrypted = false;
     await renderDmMessages();
     for (const m of state.messages) {
       if (!m.fromMe && !m.readAt) {
@@ -1165,11 +1811,10 @@ async function loadDmMessages(peerId) {
   }
 }
 
-async function loadGroupMessages(groupId) {
+async function loadGroupMessages(groupId, resetDecryption = false) {
   try {
     state.messages = await api.get(`/api/groups/${groupId}/messages?limit=200`);
-    // Reset decryption state for new thread
-    state.messagesDecrypted = false;
+    if (resetDecryption) state.messagesDecrypted = false;
     await renderGroupMessages();
     try { await api.post(`/api/groups/${groupId}/read`); } catch {}
     const g = state.groups.find(x => x.id === groupId);
@@ -1706,14 +2351,35 @@ async function subscribeToPushNotifications() {
 }
 
 // ── Report modal ──
-let reportingMsgId = null, reportingSenderId = null;
-function showReportModal(msgId, senderId) {
+let reportingMsgId = null, reportingSenderId = null, reportingMsgContent = null;
+async function showReportModal(msgId, senderId) {
   reportingMsgId = msgId;
   reportingSenderId = senderId;
+  reportingMsgContent = null;
   $("report-reason").value = "";
   $("report-details").value = "";
   $("report-error").classList.add("hidden");
+  $("report-preview").style.display = "none";
   $("report-modal").classList.remove("hidden");
+
+  const msg = state.messages.find(x => x.id === msgId);
+  if (msg) {
+    try {
+      let decrypted;
+      if (state.activeThread.kind === "dm") {
+        decrypted = await tryDecryptDm(msg.ciphertext, state.activeThread.peerId);
+      } else {
+        decrypted = await decryptToken(msg.ciphertext, state.activeThread.key);
+      }
+      if (decrypted.ok) {
+        reportingMsgContent = decrypted.text;
+        $("report-preview-text").textContent = decrypted.text.slice(0, 200) + (decrypted.text.length > 200 ? "…" : "");
+        $("report-preview").style.display = "block";
+      }
+    } catch (err) {
+      // Preview failed, continue without it
+    }
+  }
   setTimeout(() => $("report-reason").focus(), 30);
 }
 $("report-close").addEventListener("click", () => $("report-modal").classList.add("hidden"));
@@ -1723,11 +2389,19 @@ $("report-form").addEventListener("submit", async (e) => {
   const reason = $("report-reason").value;
   if (!reason) return;
   try {
+    const ok = await confirmDialog({
+      title: "Submit this report?",
+      body: "The moderators will see the decrypted message and investigate this report.",
+      okText: "Submit report",
+    });
+    if (!ok) return;
+
     await api.post("/api/report", {
       messageId: reportingMsgId,
       reportedUserId: reportingSenderId,
       reason,
       details: $("report-details").value || undefined,
+      messageContent: reportingMsgContent,
     });
     $("report-modal").classList.add("hidden");
     toast("Report submitted. Thank you.", "info");
@@ -1817,6 +2491,7 @@ async function boot() {
     state.user = await api.get("/api/auth/me");
     $("user-email").textContent = state.user.email;
     $("unlock-email").textContent = state.user.email;
+    updateModeratorTab();
     setView("unlock");
     setTimeout(() => $("unlock-password").focus(), 60);
   } catch (err) {
diff --git a/static/js/sw-register.js b/static/js/sw-register.js
new file mode 100644
index 0000000..874051c
--- /dev/null
+++ b/static/js/sw-register.js
@@ -0,0 +1,9 @@
+if ('serviceWorker' in navigator) {
+  navigator.serviceWorker.register('/static/js/sw.js')
+    .then((registration) => {
+      console.log('Service Worker registered:', registration);
+    })
+    .catch((error) => {
+      console.log('Service Worker registration failed:', error);
+    });
+}