Sharepoint-Toolbox/.planning/STATE.md

gsd_state_version, milestone, milestone_name, status, stopped_at, last_updated, last_activity, progress

gsd_state_version	milestone	milestone_name	status	stopped_at	last_updated	last_activity	progress
1.0	v1.0	milestone	completed	Completed 07-04-PLAN.md	2026-04-07T10:45:02.830Z	2026-04-07 — Roadmap created (Phases 6-9), 10/10 requirements mapped	total_phases completed_phases total_plans completed_plans 4 1 13 10

Project State

Project Reference

See: .planning/PROJECT.md (updated 2026-04-07)

Core value: Administrators can audit and manage SharePoint/Teams permissions and storage across multiple client tenants from a single, reliable desktop application. Current focus: v1.1 Enhanced Reports — global site selection, user access audit, simplified permissions, storage visualization

Current Position

Phase: 6 — Global Site Selection (not started) Plan: — Status: Roadmap complete, awaiting first plan Last activity: 2026-04-07 — Roadmap created (Phases 6-9), 10/10 requirements mapped

v1.1 Progress: [                    ] 0%
Phase 6 [ ] → Phase 7 [ ] → Phase 8 [ ] → Phase 9 [ ]

Performance Metrics

Metric	v1.0	v1.1 (running)
Phases	5	4 planned
Plans	36	TBD
Commits	164	0
Tests	134 pass / 22 skip	—
Phase 06-global-site-selection P02	8	1 tasks
Phase 06-global-site-selection P01	2	2 tasks
Phase 06-global-site-selection P03	2	3 tasks
Phase 06-global-site-selection P04	2	3 tasks
Phase 06-global-site-selection P05	2	1 tasks
Phase 07-user-access-audit P01	5	2 tasks
Phase 07-user-access-audit P03	2	1 tasks
Phase 07-user-access-audit P02	1	1 tasks
Phase 07-user-access-audit P06	2	2 tasks
Phase 07-user-access-audit P04	2	1 tasks

Accumulated Context

Decisions

Decisions are logged in PROJECT.md Key Decisions table.

v1.1 architectural notes:

• Global site selection (Phase 6) changes the toolbar; all tabs must bind to a shared GlobalSiteSelectionViewModel or equivalent. Use WeakReferenceMessenger for cross-tab site-changed notifications, consistent with v1.0 messenger usage.
• Per-tab override (SITE-02) means each FeatureViewModelBase subclass stores a nullable local site override; null means "use global".
• Storage Visualization (Phase 9) requires a WPF charting NuGet (LiveCharts2 recommended — actively maintained, WPF-native, self-contained friendly). Wire chart data binding to the existing storage scan result model.
• Self-contained EXE constraint: charting library must not require runtime DLLs outside the publish output.
• [Phase 06-02]: MainWindowViewModel uses Func? factory for SitePickerDialog and broadcasts GlobalSitesChangedMessage via WeakReferenceMessenger on collection change
• [Phase 06-01]: GlobalSitesChangedMessage uses IReadOnlyList (snapshot, not ObservableCollection) so receivers cannot mutate sender state
• [Phase 06-01]: FeatureViewModelBase.OnGlobalSitesReceived (private) updates GlobalSites then calls OnGlobalSitesChanged (protected virtual) — separates storage from derived class hooks
• [Phase 06-03]: Added using SharepointToolbox.Core.Models to MainWindow.xaml.cs for TenantProfile in SitePickerDialog factory lambda
• [Phase 06-03]: toolbar.selectSites.tooltipDisabled added to resources but not wired in XAML — WPF Button disabled tooltip requires style trigger (deferred)
• [Phase 06-global-site-selection]: PermissionsViewModel uses _hasLocalSiteOverride guard for SelectedSites; site picker sets flag, tenant switch resets it
• [Phase 06-global-site-selection]: Single-site VMs use partial void OnSiteUrlChanged to detect local typing; clearing field reverts to global
• [Phase 06-global-site-selection]: BulkMembersViewModel confirmed excluded: no SiteUrl field, CSV-driven per-row site URLs
• [Phase 06-global-site-selection]: Test 8 asserts override-reset via next global sites message (not SiteUrl='' — OnSiteUrlChanged re-applies global immediately when cleared)
• [Phase 06-global-site-selection]: Used reflection to set _hasLocalSiteOverride in PermissionsViewModel test — avoids needing a real SitePickerDialog
• [Phase 07-01]: UserAccessEntry is fully denormalized (one row = one user + one object + one permission) for direct DataGrid binding
• [Phase 07-01]: IsHighPrivilege and IsExternalUser pre-computed at scan time; GraphUserResult co-located with IGraphUserSearchService interface
• [Phase 07-03]: Minimum 2-character query guard prevents overly broad Graph API requests
• [Phase 07-03]: OData single-quote escaping (replace apostrophe with two apostrophes) prevents injection in startsWith filter
• [Phase 07-03]: ConsistencyLevel=eventual and Count=true both required for startsWith on Graph directory objects
• [Phase 07-user-access-audit]: TenantProfile.ClientId empty in service — session pre-authenticated at ViewModel level; SessionManager returns cached context by URL key
• [Phase 07-user-access-audit]: Bidirectional contains matching for user login — handles both plain email and full SharePoint claim formats
• [Phase 07-user-access-audit]: UserAccessCsvExportService has two write modes: WriteAsync (per-user files to directory) and WriteSingleFileAsync (combined for SaveFileDialog)
• [Phase 07-user-access-audit]: HTML sortTable() scoped per group so sorting in by-user view keeps each user's rows together
• [Phase 07-04]: CollectionViewSource bound at construction; ApplyGrouping() swaps PropertyGroupDescription between UserLogin/SiteUrl on IsGroupByUser toggle
• [Phase 07-04]: ExportCsvAsync uses WriteSingleFileAsync (combined file) not WriteAsync (per-user directory) to match SaveFileDialog single-path UX

Pending Todos

1. Add global multi-site selection option (ui) — todos/pending/2026-04-07-add-global-multi-site-selection-option.md — addressed by Phase 6

Blockers/Concerns

None.

Session Continuity

Last session: 2026-04-07T10:45:02.828Z Stopped at: Completed 07-04-PLAN.md Resume file: None