docs: create milestone v2.4 roadmap (4 phases)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

.planning/ROADMAP.md

@@ -10,6 +10,7 @@
 - ✅ **v2.1 Public Discovery** — Phases 24-27 (shipped 2026-04-12)
 - ✅ **v2.2 User Experience Polish** — Phases 28-31 (shipped 2026-04-13)
 - ✅ **v2.3 Global & Social Ready** — Phases 32-34 (shipped 2026-04-19)
+- 🚧 **v2.4 Admin Foundation** — Phases 35-38 (in progress)
 
 ## Phases
 
@@ -95,6 +96,13 @@
 
 </details>
 
+### 🚧 v2.4 Admin Foundation (In Progress)
+
+- [ ] **Phase 35: Bug Fixes** — Clear the v2.3 backlog: wrong modal, missing images, slow loading, auth redirect, cursor pointer
+- [ ] **Phase 36: Admin Role & Panel Foundation** — isAdmin flag, server mechanism to grant admin, gated /admin route with placeholder UI
+- [ ] **Phase 37: Admin — Global Item Management** — Browse, edit, and delete global catalog items from the admin panel
+- [ ] **Phase 38: Admin — Tag Management** — Full tag CRUD with parent-child hierarchy in the admin panel
+
 ## Phase Details
 
 ### Phase 24: Public Access & Infrastructure
@@ -213,6 +221,60 @@ Plans:
   TBD (discuss phase)
 **Plans**: TBD
 
+### Phase 35: Bug Fixes
+**Goal**: All five known v2.3 regressions and polish gaps are resolved — the app behaves correctly and consistently
+**Depends on**: Phase 34 (v2.3 complete)
+**Requirements**: FIX-01, FIX-02, FIX-03, FIX-04, FIX-05
+**Success Criteria** (what must be TRUE):
+  1. Clicking "Add Candidate" on a thread page opens the add-candidate modal, not any other modal
+  2. Item images appear correctly on collection overview cards — no broken or missing images
+  3. Catalog and collection images appear without noticeable delay across all image-bearing pages
+  4. Clicking the sign-in button on an auth prompt navigates the user directly to the Logto login page
+  5. Every clickable or interactive element in the app (buttons, links, cards, badges) shows a pointer cursor on hover
+**Plans**: TBD
+
+**UI hint**: yes
+
+### Phase 36: Admin Role & Panel Foundation
+**Goal**: An admin user exists in the system with a verified flag, a server-side mechanism to grant admin status, and a protected /admin route that non-admins cannot reach
+**Depends on**: Phase 35
+**Requirements**: ROLE-01, ROLE-02, ADMN-01
+**Success Criteria** (what must be TRUE):
+  1. The users table has an isAdmin boolean column and the schema migration applies cleanly
+  2. A developer can grant or revoke admin status for any user via a CLI script or seed mechanism without touching the UI
+  3. Navigating to /admin as an authenticated non-admin user returns an access-denied response (403 or redirect)
+  4. Navigating to /admin as an admin user loads the admin panel (even if it shows a placeholder)
+**Plans**: TBD
+
+**UI hint**: yes
+
+### Phase 37: Admin — Global Item Management
+**Goal**: Admins can browse, edit, and delete any global catalog item from the admin panel
+**Depends on**: Phase 36
+**Requirements**: ADMN-02, ADMN-03, ADMN-04
+**Success Criteria** (what must be TRUE):
+  1. Admin can view a paginated list of all global catalog items with search and tag filtering
+  2. Admin can open any catalog item and edit its name, brand, model, weight, price, tags, image, and attribution fields — changes persist
+  3. Admin can delete a catalog item after confirming the action — the item is removed from the catalog and the deletion is irreversible
+**Plans**: TBD
+
+**UI hint**: yes
+
+### Phase 38: Admin — Tag Management
+**Goal**: Admins can fully manage the tag taxonomy — creating, renaming, organizing into a parent-child hierarchy, and deleting tags — from within the admin panel
+**Depends on**: Phase 37
+**Requirements**: ADMN-05, ADMN-06, ADMN-07, ADMN-08, ADMN-09, ADMN-10
+**Success Criteria** (what must be TRUE):
+  1. Admin can view all tags in a list that shows each tag's name, item count, parent tag (if any), and direct children
+  2. Admin can create a new top-level tag by entering a name — the tag appears immediately in the list
+  3. Admin can rename any existing tag — the updated name is reflected everywhere the tag is used
+  4. Admin can assign a parent to any tag, making it a child in the hierarchy (e.g. "down" under "insulation")
+  5. Admin can remove a parent assignment from a tag, making it a top-level tag again
+  6. Admin can delete a tag; if items currently use that tag, a warning is shown before the deletion is confirmed
+**Plans**: TBD
+
+**UI hint**: yes
+
 ## Progress
 
 | Phase | Milestone | Plans Complete | Status | Completed |
@@ -244,13 +306,17 @@ Plans:
 | 25. Catalog Enrichment & Agent Tools | v2.1 | 2/2 | Complete | 2026-04-10 |
 | 26. Discovery Landing Page | v2.1 | 3/3 | Complete | 2026-04-10 |
 | 27. Top Nav Restructure & Search Bar Rethink | v2.1 | 4/4 | Complete | 2026-04-12 |
-| 28. Profile & Logto Integration | v2.2 | 3/3 | Complete    | 2026-04-12 |
-| 29. Image Presentation | v2.2 | 5/5 | Complete   | 2026-04-13 |
-| 30. Onboarding Redesign | v2.2 | 3/3 | Complete    | 2026-04-12 |
-| 31. Mobile Polish | v2.2 | 2/2 | Complete    | 2026-04-12 |
+| 28. Profile & Logto Integration | v2.2 | 3/3 | Complete | 2026-04-12 |
+| 29. Image Presentation | v2.2 | 5/5 | Complete | 2026-04-13 |
+| 30. Onboarding Redesign | v2.2 | 3/3 | Complete | 2026-04-12 |
+| 31. Mobile Polish | v2.2 | 2/2 | Complete | 2026-04-12 |
 | 32. Setup Sharing System | v2.3 | 4/4 | Complete | 2026-04-15 |
 | 33. Currency System | v2.3 | 6/6 | Complete | 2026-04-13 |
 | 34. i18n Foundation | v2.3 | 8/8 | Complete | 2026-04-18 |
+| 35. Bug Fixes | v2.4 | 0/TBD | Not started | - |
+| 36. Admin Role & Panel Foundation | v2.4 | 0/TBD | Not started | - |
+| 37. Admin — Global Item Management | v2.4 | 0/TBD | Not started | - |
+| 38. Admin — Tag Management | v2.4 | 0/TBD | Not started | - |
 
 ## Backlog