[CLAUDE] Docs: chốt session 2026-04-23 tối — UAT-ready 100%

5 commit feature work session 2 (072ad6d → bcdc007) — clear hết task
pending high-impact, sẵn sàng UAT.

## Session log mới

`docs/changelog/sessions/2026-04-23-2200-roles-demo-pending-cleanup.md`
~270 dòng — outcome A→G (RolesPage + 7 demo HĐ + User-kind guard +
Warning SLA + Edit detail + Master expand + Deps script), stats,
architectural notes, next priority.

## STATUS.md

- Last updated 2026-04-23 22:30 — UAT-ready 100%
- Header phase: "Pending tasks cleared — UAT-ready"
- 5 Recently Done row mới (RolesPage, demo HĐ, user-kind+SLA, edit
  detail+deps, master expand+backfill)
- Cumulative table thêm cột "+RolesPg+Demo+Pending":
  - LOC ~7800 → ~8800
  - Endpoints ~80 → ~93
  - FE pages ~22 → ~23 (RolesPage)
  - Scripts 4 → 5 (deps-audit.ps1)
  - Demo data 5+3 → 15+8+7+13+4 (NCC/Project/HĐ/User/Catalogs)
  - Commits ~47 → ~52
- Session log link mới
- Skills count = 14 file

## HANDOFF.md

- TL;DR cập nhật: UAT-ready 100%, demo data đầy đủ inventory
- Phase table thêm 6 row Done (RolesPage, demo HĐ, user-kind+SLA,
  edit detail, master expand, deps script)
- Git state 8 commit gần nhất

## migration-todos.md

- Section "Session 2026-04-23 (tối)" với 8 ticked checkbox + commit refs
- 3 Roles CRUD checkbox legacy → ticked với commit 072ad6d ref

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

docs/changelog/migration-todos.md

@@ -78,7 +78,7 @@
 - [x] FE Admin: Layout menu động từ `/api/menus/me` + recursive nested + filterForAdmin
 - [x] FE User: trang "HĐ của tôi" list + filter `?type=X` — Tier 3
 - [x] FE Admin: Users management page (tạo user + gán role + reset password + unlock)
-- [ ] FE Admin: Roles CRUD — optional (12 role seed đủ dùng)
+- [x] FE Admin: Roles CRUD `/system/roles` — admin thêm custom role ngoài 12 hardcoded (commit 072ad6d)
 - [x] Route guard theo role admin-only — PermissionGuard ở button level
 
 ### Exit criteria Phase 1
@@ -241,7 +241,7 @@
 - [x] IDOR check ContractsController — user Drafter chỉ xem HĐ mình tạo hoặc role eligible phase (`ListContractsQueryHandler` + `GetContractQueryHandler`)
 - [x] Admin mặc định warning log (`DbInitializer.WarnDefaultAdminPasswordAsync`)
 - [ ] Dependencies scan vào CI (`dotnet list package --vulnerable --include-transitive`, `npm audit --audit-level=high`)
-- [ ] BE Roles CRUD (Create/Rename/Delete custom role) + FE `/system/roles` — optional, 12 role seed đủ dùng
+- [x] BE Roles CRUD (Create/UpdateLabels/Delete custom role) + FE `/system/roles` — Name FK không đổi, ShortName+Description editable (commit 072ad6d)
 
 ## Skill governance (recurring)
 
@@ -253,6 +253,17 @@
 - [ ] **Audit 2026-07-01**
 - [ ] (lập lại mỗi tháng đầu)
 
+## Session 2026-04-23 (tối) — RolesPage + Demo data + Clear pending tasks
+
+- [x] **RolesPage CRUD** `/system/roles` — 12 hardcoded + custom (`072ad6d`)
+- [x] **Seed 7 demo HĐ** varied phases + details + comments + approvals (`8bc9565`)
+- [x] **User-kind approver runtime guard** trong TransitionAsync (`4edcd58`)
+- [x] **Warning 20% SLA** notification trong SlaExpiryJob (`4edcd58`)
+- [x] **Edit detail row inline** — 7 typed UpdateXxxDetail + EditRowDialog (`e53cd3a`)
+- [x] **Deps audit helper** `scripts/deps-audit.ps1` (`e53cd3a`)
+- [x] **Master expand** 5→15 NCC + 3→8 Project (per-Code idempotent) (`bcdc007`)
+- [x] **Backfill demo HĐ** supplier+project diverse theo loại (`bcdc007`)
+
 ## Session 2026-04-23 (chiều) — Toolkit + 4-bảng + Master Catalogs + Roles VN
 
 - [x] **3-panel layout HĐ list/inbox/thao tác** (commits b75448e/89c7e88/8c4b4da)
@@ -288,7 +299,7 @@
 ## Post-launch (Phase 6+ — future)
 
 - [ ] **Email outbox** (MailKit + SMTP) — blocked chờ SMTP config
-- [ ] **Roles CRUD** — admin tạo custom role ngoài 12 hardcoded
+- [x] **Roles CRUD** — admin tạo custom role ngoài 12 hardcoded (commit 072ad6d)
 - [ ] **User-kind approver runtime** — data model có, guard cần wire
 - [ ] E-signature integration (VNPT CA hoặc FPT CA)
 - [ ] Tích hợp Bravo / SAP ERP import NCC