wal: flush 20260712T1900

.claude/WAL.md

@@ -10,9 +10,10 @@ chain:
 [x] FE (implementer-frontend) DONE — npm×2 PASS, 2 dialog+2 page SHA256-identical (badge+Công-bố+filter+file-mẫu+Mã-editable+MST-warn)
 [x] BE DONE (SendMessage-resume finish sạch) — build slnx **0/0 em-main-verified** + Mig 64 applied 2 DB; authz FE mismatch (Import nút Create→Update 2-app) em-main FIX; policy Suppliers.Update auto-reg Program.cs:80 verified
 [x] test-specialist DONE — +19 test, **477 PASS** (458→477) + bắt BUG THẬT null-Code NRE trong NewSupplier (path R4 lõi) → em-main FIX `(r.Code??"").Trim()` + flip test → 477 xanh re-verify
-[!] reviewer adversarial (dedup-OQ4 + publish-guard + authz-D3 + visibility + LayoutValid + Mig64 + null-fix + SHA-mirror) ĐANG chạy nền
-[ ] reviewer về → fix must-fix → FE rebuild → BÁO anh review → commit → deploy → cicd byte-verify
+[x] reviewer GO-WITH-ADJ — 2 must-fix (draft-leak picker + CreateSupplier IsPublic) → em-main FIX 5-site (4 FE picker published=true + BE CreateSupplier IsPublic=true) → re-verify ALL GREEN (477 test + FE ×2 build + BE 0/0)
+[!] CHỜ anh Kiệt review (owner gate) TRƯỚC deploy — đã báo full package
+[ ] anh OK → commit + push → cicd deploy verify byte-level → closeout (harvest 4 sub-diary + spec run-trace + gotcha null-Code + STATUS/HANDOFF)
 
-next: reviewer về → xử must-fix → BÁO anh review (spec+diff) TRƯỚC deploy → commit → deploy → cicd
-verify: build 0/0 + 477 test CONFIRMED em-main; null-Code bug fixed+tested; OQ4 MST-A-Code-B FillNulls-safe (reviewer đang verify); session chết → /tiep: code+test DONE đĩa, chờ reviewer verdict → deploy (KHÔNG re-implement)
-wf: reviewer | HMW-review | adversarial-pre-commit-8-focus | RUNNING | resume=xử-must-fix→báo-anh→commit→deploy
+next: anh Kiệt review→OK → commit `[CLAUDE] Supplier: import v2 + publish/draft (Mig 64)` + push → cicd Run # verify (bundle rotate ×2 + Mig 64 prod + smoke + byte-verify nút file mẫu/badge)
+verify: ALL GREEN em-main-confirmed (477 test + 2 FE build + slnx 0/0); 2 bug caught+fixed (null-Code NRE + authz-403) + 2 reviewer-must-fix applied; session chết → /tiep: code DONE+verified đĩa, CHỜ anh-review→deploy (KHÔNG re-implement, KHÔNG tự commit/deploy trước anh OK)
+wf: (chờ-anh) | HMW-review-DONE | ready-to-deploy | AWAITING-OWNER-REVIEW | resume=anh-OK→commit→push→cicd

.claude/agent-memory/reviewer/MEMORY.md

@@ -14,6 +14,7 @@
 - [S103 H20+crystallized-backfill review](project_s103_h20_crystallized_backfill_review.md) — WF2 PASS (fable-clone ensemble); 6/6 hash recompute MATCH + 4 already-met verified file:line. **Lesson: multi-axis warning phải nằm trong OUTPUT của script, không chỉ doc** — reader chạy script inline.
 - **S101 H19 WF2 review LANE-C (adap-reports+honesty)** — PASS; 4 hash recompute MATCH; hex→SHA = recompute CẢ strip/no-strip chứng content-hash ≠ commit-SHA. → `archive/2026-07.md`.
 - [S111 PE sign-off 6-decision design review (schema/history lens)](project_pe_signoff_history_schema_review.md) — GO-WITH-ADJ; Decision-5 opinion-history: RECOMMEND (a) append-only table, REJECT (b) version-col (drops UNIQUE + breaks UPSERT read every site), (c) Changelog zero-mig fallback. Hook @ ApproveV2Async UPSERT :784-790. Decision-3 caller-safe (SlaExpiryJob=Contract-only, not PE). A1 breaks 4 bypass tests.
+- [S113 Supplier import v2 close-review (owner anh Kiệt)](project_s113_supplier_import_v2_review.md) — GO-WITH-ADJ 2 must-fix: consumers (PeDetailTabs:2222 + ContractCreatePage:321 ×2app) DON'T pass published=true → drafts leak into pickers (R4/R6 "ẩn" undelivered) + CreateSupplier:86 missing IsPublic=true. Dedup/publish/mig/authz SOLID. Lesson: "filter added" ≠ "drafts hidden" — grep-all-consumer + create write-path.
 
 ---
 

.claude/agent-memory/reviewer/project_s113_supplier_import_v2_review.md

@@ -0,0 +1,26 @@
+---
+name: project-s113-supplier-import-v2-review
+description: S113 Supplier import v2 close-review (owner anh Kiệt) — GO-WITH-ADJ, 2 coupled must-fix = visibility consumers unwired + CreateSupplier IsPublic missing
+metadata:
+  type: project
+---
+
+# S113 Supplier import v2 — pre-commit review (2026-07-12, owner anh Kiệt)
+
+**Verdict: GO-WITH-ADJ (2 must-fix).** Build 0/0, 19 new supplier tests PASS (477 total). Dedup/publish/authz/mig/null-fix/SHA-mirror all solid. Feature's storage+admin half done; **the "ẩn" (hide-draft) half of R4/R6 NOT delivered.**
+
+## CAUGHT (MAJOR, coupled — the cardinality S87/S88 miss the spec itself flagged as recover-lane):
+1. **Consumers don't pass `published=true`** — `published` filter wired ONLY in admin SuppliersPage (both apps). PE picker `PeDetailTabs.tsx:2222` + `ContractCreatePage.tsx:321` (×2 apps = 4 sites) fetch ALL suppliers → draft NCC (IsPublic=false, Code="") LEAK into pickers. Defeats R4/R6. Concrete harm: draft Code="" selectable in ContractCreate → malformed contract# `SOL&/01`. Publish-gate becomes pointless.
+2. **CreateSupplierCommand:86 does NOT set IsPublic** — manual "Thêm NCC" (Code required NotEmpty) → IsPublic=false (DB default) → new coded NCC becomes DRAFT. Seed✓/backfill✓/import✓/publish✓ set IsPublic but runtime CREATE path missed. Coupled: if #1 fixed, manual+inline-create (PeDetailTabs:2244) vanish from picker until re-published. Fix = `entity.IsPublic = true` (Code always non-empty).
+
+## Verified SOLID (resisted scrutiny):
+- **Dedup MST-primary+Code-backstop**: no 500-unique-violation path found. T6 proves OQ4 (MST→A/Code→B): FillNulls skips Code + B untouched (no silent-clobber). Blank-MST no-merge (T3). Batch precedence existing→batch, MST→Code. Service-level OrdinalIgnoreCase (T5 SQLite-BINARY proves not DB-collation-dependent).
+- **Publish D2**: gate Code-non-empty on publish=true (T10); NOT via UpdateSupplier (own command, #73-safe); UpdateSupplier preserves IsPublic (not in field-set). Test HONESTLY flags publish unique-check uses DB-collation≠service OrdinalIgnoreCase (prod SQL CI handles).
+- **Authz D3**: preview/confirm Roles→Policy=Suppliers.Update; publish+template new same policy; auto-reg (Suppliers∈All, Update∈Actions); List = class-[Authorize] any-auth (pickers OK, no #44). FE Import Create→Update both apps.
+- **Mig 64**: 3-file (cs+Designer:3272/3365+snapshot), reversible Down, backfill `SET IsPublic=1` idempotent, filter `[Code]<>''` allows N drafts, no new table.
+- **null-Code fix**: `(r.Code??"").Trim()` :462 + `IsPublic=!IsNullOrWhiteSpace` :209 + guarded codeKey all sites; no unguarded `.Code!` left.
+- **FE SHA-mirror**: SuppliersPage+ImportDialog byte-identical (sha256); isPublic in both types; badge full-class-literal.
+
+## Nice-to-have: stale svc comment :31-34 (old "BEST-GUESS") contradicts new :35-37; Down restores filter w/o `[Code]<>''` → rollback-after-drafts CreateIndex fails if ≥2 empty drafts; no BuildTemplate→Preview round-trip test; Case-9 self-consistency ≠ real-file (S112 carry-over, artifact off-repo).
+
+**Lesson: implementer added the query-param + admin-page filter but stopped at the ADMIN surface — the whole point (hide from CONSUMERS) needs grep-all-consumer wiring + the create write-path. "Filter added" ≠ "drafts hidden". Green tests covered plumbing not the end-to-end R4/R6 promise.**