Continuation Workspace

Sprint Planner Dashboard

Browse the Markdown handoff files that let humans and agents continue work without the original chat history.

Sprint Tasks

AdminPanelUserManagement

docs/sprint_tasks/AdminPanelUserManagement/AUTO_CONTINUE_TRACKER.md · docs/sprint_tasks/AdminPanelUserManagement/PHASE_SPRINT_MAP.md

AUTO_CONTINUE_TRACKER.md

PHASE_SPRINT_MAP.md

Current Sprint

Status: Complete
Current phase: Phase 8 - Verification
Last updated: 2026-05-22
Next step: Sprint complete. Resume on the next planned sprint or a follow-up polish pass for audit logging and moderation workflows if needed.

Checklist

[x] Create sprint doc.
[x] Create phase sprint map.
[x] Create auto-continue tracker.
[x] Review current admin panel controller and view.
[x] Review user fields and relationships.
[x] Replace player-only listing with all-users listing.
[x] Add search, filters, and pagination.
[x] Add password reset link action.
[x] Add temporary password action.
[x] Add email edit action.
[x] Add resend verification action.
[x] Add admin promotion/demotion action.
[x] Add last-admin safety rule.
[x] Decide deletion model after relationship review.
[x] Add delete-account workflow.
[x] Add focused admin tests.
[x] Run relevant Laravel tests.

Phase Map

Turn the admin panel into a real user-management surface for support and moderation.

Phase 1: Current State Audit Review `app/Http/Controllers/Auth/AdminController.php`. Review current `/admin/*` routes. Review `app/Models/User.php`. Inspect any admin Blade views currently in use. Confirm which user relationships make deletion risky.
Phase 2: User Index Upgrade Replace the player-only list with an all-users list. Add: pagination search by username/email filters for role and verification Expose key account metadata.
Phase 3: Account Recovery Actions Add send-password-reset-link action. Add force-set-temporary-password action. Add change-email action. Add resend-verification action.
Phase 4: Role Management Add promote-to-admin action. Add demote-to-player action. Prevent the last admin from demoting themselves. Add confirmation for role changes.
Phase 5: Deletion Safety Review Inspect relationships from users into sessions, tasks, snapshots, or other owned records. Decide whether deletion is: soft delete guarded hard delete blocked when related records exist
Phase 6: Deletion Workflow Implement the chosen deletion model. Add explicit confirmation UX. Prevent accidental self-deletion unless later intentionally supported.
Phase 7: Tests Add admin-only access tests. Add tests for password reset action. Add tests for email update validation. Add tests for role promotion/demotion rules. Add tests for deletion guardrails.
Phase 8: Verification Run focused PHP feature tests. Run the full relevant Laravel suite if admin auth or user mutation logic changes. Manually verify the admin panel flows in the browser.

Agent Resume Prompt

# Agent Resume Prompt

You are continuing work in a Laravel 13 project.

## Repository

- Path: `/home/runner/workspace`
- Follow the project style guides in `docs/style/`.
- Do not overwrite unrelated work in the git tree.
- Use `rg` for search and focused tests for verification.

## Sprint

- Sprint key: `AdminPanelUserManagement`
- Tracker: `docs/sprint_tasks/AdminPanelUserManagement/AUTO_CONTINUE_TRACKER.md`
- Phase map: `docs/sprint_tasks/AdminPanelUserManagement/PHASE_SPRINT_MAP.md`
- Status: Complete
- Current phase: Phase 8 - Verification
- Last updated: 2026-05-22
- Sprint goal: Turn the admin panel into a real user-management surface for support and moderation.

## Next Step

Sprint complete. Resume on the next planned sprint or a follow-up polish pass for audit logging and moderation workflows if needed.

## Unchecked Checklist Items

- No unchecked checklist items parsed.

## Phase Map

- Phase 1: Current State Audit: Review `app/Http/Controllers/Auth/AdminController.php`. Review current `/admin/*` routes. Review `app/Models/User.php`. Inspect any admin Blade views currently in use. Confirm which user relationships make deletion risky.
- Phase 2: User Index Upgrade: Replace the player-only list with an all-users list. Add: pagination search by username/email filters for role and verification Expose key account metadata.
- Phase 3: Account Recovery Actions: Add send-password-reset-link action. Add force-set-temporary-password action. Add change-email action. Add resend-verification action.
- Phase 4: Role Management: Add promote-to-admin action. Add demote-to-player action. Prevent the last admin from demoting themselves. Add confirmation for role changes.
- Phase 5: Deletion Safety Review: Inspect relationships from users into sessions, tasks, snapshots, or other owned records. Decide whether deletion is: soft delete guarded hard delete blocked when related records exist
- Phase 6: Deletion Workflow: Implement the chosen deletion model. Add explicit confirmation UX. Prevent accidental self-deletion unless later intentionally supported.
- Phase 7: Tests: Add admin-only access tests. Add tests for password reset action. Add tests for email update validation. Add tests for role promotion/demotion rules. Add tests for deletion guardrails.
- Phase 8: Verification: Run focused PHP feature tests. Run the full relevant Laravel suite if admin auth or user mutation logic changes. Manually verify the admin panel flows in the browser.

## Parser Warnings

- None.

## Verification Commands

- `php artisan test tests/Feature/Livewire/SprintPlannerTest.php tests/Unit/Services/SprintPlanning/SprintMarkdownParserTest.php tests/Unit/Services/SprintPlanning/SprintDocumentRepositoryTest.php`
- `vendor/bin/pint --dirty`

Continue from the next step above. Update `AUTO_CONTINUE_TRACKER.md` before stopping.