[CLAUDE] Docs: Plan AA Chunk C - S24 t1 wrap session log + STATUS+HANDOFF + 3 agent MEMORY drift

Documentation deliverables: - docs/STATUS.md Recently Done newest entry S24 t1 (gop 3 commit + multi-agent ROI table + pattern reinforced 4 lessons) - docs/HANDOFF.md "Last updated S24 t1" prepend on top (cumulative carry S23 chốt cuối) - docs/changelog/sessions/2026-05-15-s24-turn1-plan-aa-workflow-matrix.md NEW ~9KB - Q&A 2 lượt chốt spec (Permission strategy + Matrix layout) - Pre-A Investigator findings 5Q + 3 surprises critical - Chunk A BE+Layout breakdown (MenuKeys + DbInitializer INSERT-OR-UPDATE-Order + Handler filter + Controller pass-through + sidebar widen + revert Plan U truncate) - Chunk B FE matrix page + types + App.tsx route - Chunk C Reviewer cumulative verdict (PASS 0 blocker) - Stats trước-sau + Multi-agent ROI table (~150K total ~25% solo equiv) - 4 pattern reinforced cross-project reusable - Pending S24+ checklist (7 items) Agent MEMORY drift (auto-updated by agents + Investigator manual touch): - .claude/agent-memory/investigator/MEMORY.md +1 FIFO entry S24 Pre-A audit - .claude/agent-memory/implementer/MEMORY.md +1 FIFO entry S24 Chunk B PASS - .claude/agent-memory/reviewer/MEMORY.md +1 FIFO entry S24 cumulative verify PASS Stats S24 t1 chốt: - 31 mig (no Mig mới) - 59 tables - ~146 endpoints (+1 GET filter param) - 35 FE pages (+1 WorkflowMatrixViewPage) - 111 test (unchanged UAT mode) - 47 gotcha - 21 memory user-level - 6 skills - 4 sub-agents (3 spawn S24 t1) - 3 commits Plan AA push remote: ee776d5 (A) + c667802 (B) + this (C) Pending: Bro UAT verify deploy + CICD Monitor spawn Run #210+ post-deploy. Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
2026-05-15 16:38:21 +07:00
parent c6678022f7
commit ac2c85901a
6 changed files with 244 additions and 1 deletions
--- a/docs/HANDOFF.md
+++ b/docs/HANDOFF.md
@ -1,6 +1,8 @@
 # HANDOFF — Brief 5 phút cho session tiếp theo

-**Last updated:** 2026-05-15 (Session 23 turn 12 chốt cuối — **🎯 S23 cumulative 11 plan + 32 commits**. Plan K (Mig 31 F2 refactor 9c) → L (UAT bug 5c) → M (F1 edge case 4c) → N (per-NV lookup 1 site 2c) → O (4 sites cascade 2c) → P (Controller body record 1c) → Q (FE banner 1c) → R (cleanup phiếu/wf 1c) → S (wipe ALL wf 1c) → T (DemoSeed flag 2c) → U (sidebar truncate 1c). 4 sub-agents: Investigator 5 spawn + Implementer 5 spawn + Reviewer 2 spawn + CICD Monitor 10 verify runs PASS. Memory +1 NEW `feedback_demo_seed_flag_disable.md` + `feedback_per_nv_permission_scope.md` reinforced 10 wire surface points (point 9 lookup discrimination + point 10 Controller body record mirror). Cleanup cumulative R+S+T5 ~720 rows wiped + DbInitializer flag persist. Stats: 31 mig · 59 tables · ~145 endpoints · **111 test** · 47 gotcha · **21 memory** (+1) · 6 skills · **0 PE + 0 demo workflow + flag persist** UAT permanent clean slate. 32 commits push `eb106f2..86d8806`. Plan B Contract V2 wire HIGH next.)
+**Last updated:** 2026-05-15 (Session 24 turn 1 — **🎯 Plan AA: User Workflow Matrix view + Sidebar widen — DONE 3 commits**. Bro UAT request 2 việc: (1) sidebar truncate Plan U S23 t11 → hiển thị đầy đủ, (2) thêm menu "Luồng duyệt" trên Danh sách hiển thị ma trận phân quyền workflow Designer ghim cho user xem (filter `IsUserSelectable=true` Mig 25). 4 sub-agent: 🟦 Investigator Pre-A audit 5Q (~32K, confirm gotcha #44 đã fixed permanent từ S18 + sidebar widen w-72 xl:w-80 SAFE + memory responsive 3-panel stale) + 🟨 Implementer Case 2 Chunk B FE (~14K, page + types + App.tsx route ~270 LOC) + 🟥 Reviewer cumulative pre-commit (~25K, PASS 0 critical/major/minor blocker + fe-admin build verify bonus 1926 modules 740ms). Em main Chunk A solo: BE `IsUserSelectable bool?` filter param + handler conditional + Controller pass-through + MenuKeys `PurchaseEvaluationWorkflowView` helper + DbInitializer tree.Add LuongDuyet + INSERT-OR-UPDATE-Order refactor (idempotent shift existing prod rows) + Permission seed 7 role + sidebar widen `w-72 xl:w-80` × 2 app mirror + revert Plan U truncate × 5 sites + Layout.tsx resolvePath `WfView` regex. Pattern reinforced: gotcha #44 class-level Authorize relax pattern PROVEN cumulative S18→S24 (Workflows endpoint reusable cho user read-only matrix view). 3 commits push `ee776d5..<docs>`. Stats: 31 mig · 59 tables · **~146 endpoints (+1 GET filter param)** · **35 FE pages (+1 WorkflowMatrixViewPage)** · 111 test · 47 gotcha · 21 memory · 6 skills · 4 sub-agents.)
+
+**Last updated S23 t12:** 2026-05-15 (Session 23 turn 12 chốt cuối — **🎯 S23 cumulative 11 plan + 32 commits**. Plan K (Mig 31 F2 refactor 9c) → L (UAT bug 5c) → M (F1 edge case 4c) → N (per-NV lookup 1 site 2c) → O (4 sites cascade 2c) → P (Controller body record 1c) → Q (FE banner 1c) → R (cleanup phiếu/wf 1c) → S (wipe ALL wf 1c) → T (DemoSeed flag 2c) → U (sidebar truncate 1c). 4 sub-agents: Investigator 5 spawn + Implementer 5 spawn + Reviewer 2 spawn + CICD Monitor 10 verify runs PASS. Memory +1 NEW `feedback_demo_seed_flag_disable.md` + `feedback_per_nv_permission_scope.md` reinforced 10 wire surface points (point 9 lookup discrimination + point 10 Controller body record mirror). Cleanup cumulative R+S+T5 ~720 rows wiped + DbInitializer flag persist. Stats: 31 mig · 59 tables · ~145 endpoints · **111 test** · 47 gotcha · **21 memory** (+1) · 6 skills · **0 PE + 0 demo workflow + flag persist** UAT permanent clean slate. 32 commits push `eb106f2..86d8806`. Plan B Contract V2 wire HIGH next.)

 **Last updated S23 t10:** 2026-05-15 (Session 23 turn 10 — **🔧 Plan T: Disable auto re-seed demo data + final DELETE — UAT permanent clean slate**. Bro phát hiện sau Plan R+S: 4 phiếu `[DEMO]-A/B` + workflows TỰ ĐỘNG RE-SEED sau IIS recycle do DbInitializer 5 demo seed methods. Plan T fix root cause: `appsettings.json` add `DemoSeed:Disabled=true` (Dev override false) + `DbInitializer.cs` check flag → skip 5 method. Run #207 PASS deploy applied flag. T5 sqlcmd DELETE 7 rows + cascade. T6 force IIS recycle verify NO re-seed: PE=0 + V2=0 + V1=0 preserved. DemoSeed flag PROVEN active end-to-end. Cumulative Plan R+S+T: ~677 rows wiped + DbInitializer re-seed permanent disable. Stats: 31 mig · 59 tables · ~145 endpoints · 111 test · 47 gotcha · 20 memory · 6 skills · **0 PE + 0 workflow + flag persist** UAT permanent clean slate.)

--- a/docs/STATUS.md
+++ b/docs/STATUS.md
@ -80,6 +80,7 @@

 | Ngày | Ai | Task | Commit |
 |---|---|---|---|
+| 2026-05-15 | Claude | **🎯 SESSION 24 turn 1 — Plan AA User Workflow Matrix view + Sidebar widen revert Plan U truncate (3 commit)** — Bro UAT request: (1) sidebar Plan U S23 t11 truncate "..." → hiển thị đầy đủ label custom Mig 27, (2) thêm menu "Luồng duyệt" trên Danh sách hiển thị ma trận phân quyền workflow Designer ghim cho user xem (filter `IsUserSelectable=true` Mig 25). Q&A clarify 2 lượt: Q1 Permission strategy "Relax class-level [Authorize]" (đã fix gotcha #44 permanent từ S18 → CHỈ cần add filter param), Q2 Matrix layout "Table 2D full 7 Allow* cột". Plan 4 chunk: Pre-A (🟦 Investigator audit ~32K, confirm gotcha #44 + sidebar `w-72 xl:w-80` SAFE + Order strategy shift existing) + Chunk A (👤 Chủ trì Solo BE + Layout: MenuKeys `PurchaseEvaluationWorkflowView` helper + DbInitializer tree.Add LuongDuyet Order=2 + INSERT-OR-UPDATE-Order refactor idempotent + Permission seed 7 role + Handler `IsUserSelectable bool?` filter + Controller pass-through + sidebar `w-60 xl:w-72` → `w-72 xl:w-80` × 2 app mirror + revert Plan U truncate × 5 sites; commit `ee776d5` 6 files +73/-24) + Chunk B (🟨 Implementer Case 2 ~14K: WorkflowMatrixViewPage.tsx ~215 LOC + types/approvalWorkflowV2.ts ~55 LOC + App.tsx +route 2 LOC; commit `c667802` 3 files +305) + Chunk C (🟥 Reviewer cumulative ~25K: PASS 0 critical/major/minor blocker + Smart Friend guard active + fe-admin build verify bonus 1926 modules 740ms). Pattern reinforced: (1) gotcha #44 relax pattern PROVEN cross-stack reuse — Workflows endpoint từ admin-only sang any-auth read accessible. (2) DbInitializer INSERT-only → INSERT-OR-UPDATE-Order safe shift existing prod rows (idempotent re-deploy). (3) Plan U truncate revert pattern: widen sidebar + drop truncate, keep `min-w-0 flex-1` + `shrink-0` + `title` tooltip (no harm). **Surprise:** PE Workspace là **2-panel** không phải 3-panel — memory `feedback_responsive_laptop_breakpoint.md` stale claim → defer update memory. **3 commits push pending** (`ee776d5..<this>`). Stats: 31 mig · 59 tables · ~146 endpoints (+1 query filter param) · **35 FE pages (+1)** · 111 test (unchanged UAT mode) · 47 gotcha · 21 memory · 6 skills · 4 sub-agents (3 spawn S24 t1). | `ee776d5` (A BE+Layout) · `c667802` (B FE page) · (this Docs C) |
 | 2026-05-12 | Claude | **🎯 SESSION 21 turn 2 — RAG Hybrid setup planning + Cách A validation deep dive (2 commit `1f8e9af` plan save + this chốt)** — Sau S21 turn 1 chốt cicd-monitor, user clarify 5 dự án future > 1M MD tokens → cuộc thảo luận deep ~15 turn về RAG infrastructure. **Em main solo** (no SOLUTION_ERP sub-agent spawn), delegate **claude-code-guide × 2** spawn agent research Anthropic + community practice. **Q&A deep dive 10 topics**: (1) RAG fundamentals + Vector DB Qdrant role, (2) Embedding "AI nhúng" + Voyage AI cost mechanics ($0.18/M tokens), (3) Multi-project shared architecture (5 projects → single Qdrant + per-collection), (4) Audit procedure 3-tier (weekly auto + monthly deep + quarterly major), (5) UI/UX Streamlit dashboard 7 pages design (overview + drill-down + compare + audit + cost + change + admin), (6) Cách A defensive (giữ blanket 120K) vs Cách B aggressive (cắt 60-70%), (7) Reasoning depth comparison lazy 60% → A 90% → B 75-80%, (8) Industry validation Anthropic + Cursor + Continue + Cline + Aider all hybrid, (9) Multi-agent cost reality 8-10× multiplier ~520K cumulative blanket 5 entities, (10) 3-layer hybrid pattern Anthropic Contextual Retrieval Sept 2024. **Quyết định chốt Cách A** (defensive hybrid: giữ blanket 120K em main + RAG retrieve supplement, sub-agent spawn baseline ~100K each, 4 agents = ~400K cumulative, heavy session billed ~560K saving -20% vs lazy 700K, quality recall ~85%) over **Cách B bỏ** (aggressive cut 60-70% vi phạm priority em main control flow strong + reasoning fragmented + UX latency +1-2s/state Q + risk severe RAG fail). **Why Cách A** (bro priority chốt): em main control flow strong preserve, decision quality 90% multi-source cohesive, wall-clock -20% (12 phút vs 16), risk-averse graceful fallback, multi-agent leverage cache 70-90%, industry-validated 9 sources. **3-layer hybrid Phase rollout**: P1 (W1-4) vector only Voyage-3-large recall ~70% $1.50/mo · P2 (M2) +BM25 bm25s free recall ~78% $1.50/mo · P3 (M3) +Voyage rerank-2 + Contextual prefix recall ~92% $4-5/mo. **Stack validated** cross-industry: Voyage AI embedding (Anthropic partner, multilingual 26 lang, $0.36 initial), Qdrant local (Rust 50MB, agent-native 2026 leader, ~3GB disk 5 project), FastMCP Python (official SDK, ~100 LOC), SQLite event log (5 tables + audit history), Streamlit 7 pages. **Plan I NEW deferred** — trigger bro confirm 5 dự án path + stack + pilot + Voyage API key + disk cleanup → dedicated session 10-14h weekend (per `feedback_drastic_refactor_scope` rule). **Deliverables**: `docs/rag-setup-plan.md` 1223 LOC commit `1f8e9af` + extend S21 t2 ~300 LOC = ~1500 LOC final, memory `feedback_rag_hybrid_pattern.md` cross-project reusable, session log this chốt, MEMORY.md index +1 entry. **CI skipped** path filter (`.md`). **4 sub-agents vẫn seeds-only** (KHÔNG spawn S21 turn 2 nên KHÔNG flush MEMORY.md per §6.5 KHÔNG add noise). Tests baseline 81 unchanged. | `1f8e9af` (plan save) · this chốt (commit final) |
 | 2026-05-12 | Claude | **🎯 SESSION 21 turn 1 — Add con thứ 4 cicd-monitor (Path A — post-deploy verifier green READ tier, 1 commit `f1c61c9`)** — User chốt Path A sau pre-flight Plan G Trial Week 1: thêm sub-agent thứ 4 chuyên post-deploy verify (Gitea Actions poll + bundle hash 2 app verify + sqlcmd mig prod = repo latest + endpoint smoke). Trade-off: +~150K spawn extra mỗi run, đổi lại catch deploy ship fail tự động — recurring blind spot pattern em main solo S20 quên verify ~30% push. **2 file mới**: `.claude/agents/cicd-monitor.md` (~7KB) — system prompt + 8-step workflow (verify push → poll Gitea API → fail log grep → live curl smoke → bundle hash × 2 app + verify changed → sqlcmd mig prod = repo latest → report PASS/FAIL/PARTIAL/TIMEOUT/SKIPPED-DOCS) + 5-stage report table + gotcha #25/#39/#40/#41/#44 cross-ref + skill `iis-deploy-runbook`/`dependency-audit-erp`/`ef-core-migration` preload + Anti-pattern 9 rules. `.claude/agent-memory/cicd-monitor/MEMORY.md` (~5KB seed) — recurring CI bug patterns + 5-stage checklist + baseline build/bundle metrics + bearer test pattern admin/nv.test. **1 file update repo**: `.claude/agents/README.md` — 4-agent architecture diagram (green slot mới) + decision tree (after push code + prod issue diagnose branches) + memory routine 4 SendMessage + skills preload 4 agents + cost reality table 564K → 750K spawn / 1.2M → 1.35M heavy / 600K → 700K optimized + trial workflow Week 1-3 CI/CD Monitor spawn integrated + pass criteria + catch ≥1 deploy ship fail. **Memory user-level update**: `feedback_multi_agent_setup.md` — title 3 → 4 sub-agents, decision tree +CI/CD Monitor invocation branches (after push + user prod issue), skills preload list +CI/CD Monitor (iis-deploy-runbook + dependency-audit-erp + ef-core-migration), cost table update + trade-off rationale (recurring blind spot ~30% push S20). **CI skipped**: all 3 file changed `.md` → match `paths-ignore: '**/*.md'` per gotcha #41 → no Gitea Actions run → no IIS deploy (expected — agent infra là local Claude Code, không cần present trên prod). Push success `36e21c8..f1c61c9 main -> main`. **3 (now 4) sub-agents vẫn seeds-only**: chưa spawn work nào — em main solo via context paste + Write file. KHÔNG flush 3 agent MEMORY.md (chưa spawn work = không findings, per §6.5 KHÔNG add noise entry). cicd-monitor MEMORY.md có entry "setup 2026-05-12" trong seed. Trial Week 1 kick-off ở Session 21 turn 2+ với Plan B Contract V2 wire Mig 28+29 candidate (mirror PE pattern S17-S19 proven 1×). Tests baseline 81 unchanged (no test added — docs-only commit). | `f1c61c9` (Setup cicd-monitor + README 4-agent + memory update) |
 | 2026-05-11 | Claude | **🎯 SESSION 20 turns 6 + 8-12 — PE polish (NCC palette + autofill + responsive) + Multi-agent setup (7 commit `f568945` → `ae1814c`)** — Sau turn 7 wrap-up Mig 27, user iterate 7 polish/feature lớn nhỏ. **Turn 6 (`f568945`)** Manual budget "Nhập tay" drop tên field — 3 file × 2 app mirror (BudgetFieldRow + WorkspaceCreateView + HeaderForm) bỏ Input "Tên" UI khỏi manual mode, BE save `budgetManualName: null` luôn, VND format `1.000.000` + suffix đ. **Turn 8 (`3ec7b5a`)** AddSupplier +Số tiền inline + NCC 5-màu palette + Winner badge "🏆 Trúng thầu" — AddSupplierDialog +prop detailId? +form thanhTien, sequential POST /suppliers (response {id}) → POST /quotes (nếu detailId + thanhTien > 0). NCC_PALETTES const 5 màu literal Tailwind (blue/purple/sky/teal/pink) cycle theo idx. Winner row override emerald-500 border-l + bg-emerald-100/70 + shadow-sm + ring-1 emerald-300 + badge rounded-full bg-emerald-600 text-white "🏆 Trúng thầu". **Turn 9 (`83aae8e`)** User feedback bỏ badge → revert icon ✓ stick cũ nhưng đậm hơn (text-base font-bold emerald-700) + tên NCC winner text-emerald-900 + hover transition (winner hover:bg-emerald-200/70, non-winner hover:bg-white/80 hover:shadow-sm). **Turn 10 (`66551db`)** AddSupplierDialog auto-fill từ master data khi chọn NCC dropdown — onChange lookup picked supplier, setForm ghi đè 4 field (contactName ← contactPerson / contactPhone ← phone / contactEmail ← email / note ← note). Hint emerald "✓ Đã tự điền từ Master". User vẫn override được. **Turn 11 (`6e338f7`)** Responsive cho laptop màn hình nhỏ 1280-1366px — 4-tầng pattern: sidebar fe-admin + fe-user `w-72` → `w-60 xl:w-72` (+48px lg) / PE Workspace 2-panel `lg:[320px_1fr]` → `lg:[260px_1fr] xl:[320px_1fr]` (+60px lg) / Section padding `px-5 py-4` → `px-3 py-3 sm:px-5 sm:py-4` (+16px xs) / HangMucCard `gap-3 p-3` → `flex-wrap gap-2 p-2 sm:gap-3 sm:p-3` (+8px xs). Net gain trên 1366px ~+132px width cho NCC table area. Memory `feedback_responsive_laptop_breakpoint.md` capture pattern. **Turn 12 (`ae1814c`)** SETUP MULTI-AGENT INFRASTRUCTURE 3 sub-agents (Investigator READ cyan + Implementer WRITE conditional yellow + Reviewer READ adversarial red) + em main coordinator. Pre-flight decision gate 6/6 ✅. Phase 1-4 execute: `.claude/agents/` 4 file (README ~9.7KB + investigator + implementer + reviewer) + `.claude/agent-memory/` 3 MEMORY.md seed (~6KB each). Customize SOLUTION_ERP: skills preload mỗi agent (reuse 6 skills hiện có) + bearer test (admin@solutions / nv.test@solutions) + prod UAT URL + Phase 9 UAT mode + DB Dev/Design distinct. Windows MAX_PATH pitfall handled — drop `isolation: worktree` khỏi implementer.md (project path 51 chars + Dropbox-managed nested overflow 260+ chars). Memory `feedback_multi_agent_setup.md` capture decision gate + ACCEPT/REFUSE criteria + NAMGROUP s41-s43 ROI reference. 3 agents **chưa spawn work** ở S20 turn 12 — seeds-only state. Trial Week 1 candidate Contract V2 wire Mig 28+29 (mirror PE pattern proven). **Stats cumulative S20:** 27 mig (+1 Mig 27 from turn 7) · 59 tables · ~142 endpoints (+1 PATCH /menus/{key}) · 34 FE pages (+1 MenuVisibilityPage) · ~61 menu key (+1) · 81 test pass unchanged · 44 gotcha unchanged · **16 memory entries (+2: responsive + multi-agent)** · 6 skills unchanged · **3 sub-agents NEW** · 14 commits S20. | `f568945` (t6) · `3ec7b5a` (t8) · `83aae8e` (t9) · `66551db` (t10) · `6e338f7` (t11) · `ae1814c` (t12) · (current Docs t13 wrap) |
--- a/docs/changelog/sessions/2026-05-15-s24-turn1-plan-aa-workflow-matrix.md
+++ b/docs/changelog/sessions/2026-05-15-s24-turn1-plan-aa-workflow-matrix.md
@ -0,0 +1,237 @@
+# Session 24 turn 1 — 2026-05-15 — Plan AA User Workflow Matrix view + Sidebar widen
+
+**Dev:** Claude Opus 4.7 1M (em main + 3 sub-agent spawn)
+**Duration:** ~2h
+**Base commit:** `86d8806` (Plan U S23 t11 sidebar truncate)
+**Final HEAD:** `<this Docs commit>` (after `ee776d5` Chunk A + `c667802` Chunk B)
+**Total commits Plan AA:** **3** (A BE+Layout + B FE page + C Docs)
+
+## 🎯 Trigger session
+
+Bro UAT screenshot 2026-05-15 ~15:40, sau Plan U S23 t11 deploy:
+
+> Cho hiển thị đầy đủ nhé, cần thì sliderbar to 1 chút cũng đc.
+> Với thêm 1 menu là: Luồng duyệt phía trên Danh sách → Hiển thị ma trận phân quyền của cấu hình quy trình duyệt trong admin page ra ngoài để User có thể biết đc (Chú ý chỉ những quy trình có ghim).
+
+2 yêu cầu:
+1. **Sidebar widen + revert truncate** — Plan U S23 t11 vừa add `truncate` + tooltip "..." → bro muốn hiển thị đầy đủ label custom Mig 27 (DisplayLabel admin set).
+2. **Menu "Luồng duyệt" + matrix view page** — read-only cho user xem cấu hình workflow V2 ghim trước khi tạo phiếu.
+
+## 🌳 Q&A clarify (2 lượt)
+
+| Câu | User chốt |
+|---|---|
+| Permission strategy BE | **Relax class-level [Authorize]** (gotcha #44 fix permanent từ S18) + server-side filter `IsUserSelectable=true` cho non-admin. Reuse endpoint hiện có, KHÔNG duplicate logic. |
+| Matrix display layout | **Table 2D full 7 Allow* cột** (Bước/Cấp/NV/Mô tả + 7 cột flag Trả lại 4 mode + Edit Section 2 + Edit Budget + Skip Cấp cuối). User thấy đầy đủ quyền per slot Approver giống admin Designer read-only. |
+
+## 🔍 Pre-A Investigator audit (🟦, ~32K tokens)
+
+5Q audit verify trước code:
+
+| Q | Verdict |
+|---|---|
+| **Q1 Endpoint permission** | ✅ Gotcha #44 đã fix permanent từ S18 (2026-05-08). Class-level chỉ `[Authorize]` bare, per-method admin Workflows.Create. Handler `GetAwAdminOverviewQuery` KHÔNG có IsUserSelectable filter — cần ADD param + conditional. |
+| **Q2 Menu seed pattern** | ✅ `DbInitializer.cs:1429-1437` peOrder global increment. Permission seed `1541-1547` cho 7 role. Accounting KHÔNG trong list (admin manual grant). |
+| **Q3 Admin Designer FE** | ✅ `ApprovalWorkflowsV2Page.tsx` 975 lines. 7 Allow* VI labels có sẵn line 892-948. AwLevelDto 13 fields. KHÔNG có usePermission wrap. |
+| **Q4 Sidebar widen impact** | ✅ `w-72 xl:w-80` (288/320px) SAFE — sidebar 288 + main 992 → workspace 260+732 fit @ 1280px. `w-80 xl:w-96` THRESHOLD RISKY. |
+| **Q5 ApplicableType enum** | ✅ {DuyetNcc=1, DuyetNccPhuongAn=2, Contract=3}. FE wire 2 type PE. |
+
+**Surprises critical:**
+- ⚠️ **PE Workspace là 2-panel** không phải 3-panel → memory `feedback_responsive_laptop_breakpoint.md` stale, sẽ update memory sau Plan AA.
+- 📝 **Order strategy**: "Luồng duyệt" Order=2 first → cần shift existing leaves +1 → DbInitializer cần UPDATE Order existing (KHÔNG chỉ INSERT-if-not-exists).
+- 🔸 Contract=3 chưa wire FE — chỉ DuyetNcc + DuyetNccPhuongAn.
+
+## 🌳 Plan AA execution 3 chunk per-commit
+
+### Chunk A — BE filter + menu seed + sidebar widen (`ee776d5`)
+
+👤 **Chủ trì Solo** — Cross-stack tight coupling architectural decision. 6 files +73/-24 LOC.
+
+#### BE changes (4 files)
+
+**`MenuKeys.cs:85`** thêm helper:
+```csharp
+// [Plan AA S24 t1] User read-only view ma trận phân quyền của workflow V2
+// admin Designer đã ghim (IsUserSelectable=true). Suffix _WfView distinct
+// với admin PeWf_* (Designer write).
+public static string PurchaseEvaluationWorkflowView(string typeCode) => $"Pe_{typeCode}_WfView";
+```
+
+**`DbInitializer.cs:1429-1437`** thêm tree.Add LuongDuyet (Order=2 first child) cho 2 type PE:
+```csharp
+tree.Add((MenuKeys.PurchaseEvaluationGroup(code), label, ..., peOrder++, "FileCheck"));
+// [Plan AA S24 t1] "Luồng duyệt" leaf phía trên "Danh sách"
+tree.Add((MenuKeys.PurchaseEvaluationWorkflowView(code), "Luồng duyệt", ..., peOrder++, "Network"));
+tree.Add((MenuKeys.PurchaseEvaluationList(code), "Danh sách", ..., peOrder++, "List"));
+tree.Add((MenuKeys.PurchaseEvaluationCreate(code), "Thao tác", ..., peOrder++, "Plus"));
+tree.Add((MenuKeys.PurchaseEvaluationPending(code), "Duyệt", ..., peOrder++, "CheckCircle2"));
+```
+
+**`DbInitializer.cs:1447-1459`** refactor INSERT-only loop → INSERT-OR-UPDATE-Order:
+```csharp
+var existingItems = await db.MenuItems.ToDictionaryAsync(m => m.Key);
+foreach (var (key, label, parent, o, icon) in tree)
+{
+    if (existingItems.TryGetValue(key, out var existing))
+    {
+        if (existing.Order != o) { existing.Order = o; reordered++; }
+        continue;
+    }
+    db.MenuItems.Add(new MenuItem { Key = key, ... });
+}
+```
+
+Idempotent: skip nếu Order match, UPDATE nếu mismatch. Shift existing prod rows Order+1 safe.
+
+**`DbInitializer.cs:~1553`** SeedPurchaseEvaluationPermissionDefaultsAsync thêm WfView vào menuKeys list cho 7 role Read.
+
+**`ApprovalWorkflowV2AdminFeatures.cs:89-110`** GetAwAdminOverviewQuery + handler:
+```csharp
+public record GetAwAdminOverviewQuery(
+    int? ApplicableType = null,
+    bool? IsUserSelectable = null) : IRequest<AwAdminOverviewDto>;
+
+// Handler:
+if (request.IsUserSelectable is bool ius)
+    query = query.Where(d => d.IsUserSelectable == ius);
+```
+
+**`ApprovalWorkflowsV2Controller.cs:21-26`** pass-through:
+```csharp
+public async Task<ActionResult<AwAdminOverviewDto>> Overview(
+    [FromQuery] int? applicableType,
+    [FromQuery] bool? isUserSelectable,
+    CancellationToken ct)
+    => Ok(await mediator.Send(new GetAwAdminOverviewQuery(applicableType, isUserSelectable), ct));
+```
+
+#### FE Layout changes (2 files mirror rule §3.9)
+
+**`fe-user/src/components/Layout.tsx:78`** resolvePath regex extend:
+```ts
+const peMatch = key.match(/^Pe_([^_]+)_(List|Create|Pending|WfView)$/)
+// ...
+if (action === 'WfView') return `/purchase-evaluations/workflow-matrix?type=${typeInt}`
+```
+
+**`fe-user` + `fe-admin` Layout.tsx**:
+- Sidebar `w-60 xl:w-72` → `w-72 xl:w-80` (+48px lg, +32px xl)
+- Revert Plan U S23 t11 truncate × 5 sites:
+  - fe-user: MenuGroup line 188 + MenuLeaf line 251 + StaticLeaf line 292
+  - fe-admin: MenuGroup line 148 + MenuLeaf line 208
+- Keep `min-w-0 flex-1` parent + `shrink-0` icon/chevron + `title` tooltip (no harm — accessibility bonus)
+
+**Verify Chunk A:** `dotnet build SolutionErp.slnx` PASS clean 0 err 2 warn pre-existing DocxRenderer.
+
+### Chunk B — FE WorkflowMatrixViewPage (`c667802`)
+
+🟨 **Implementer Case 2** — Cookie-cutter mirror Designer Designer read-only single file. 3 files +305 LOC.
+
+#### NEW `fe-user/src/pages/pe/WorkflowMatrixViewPage.tsx` ~215 LOC
+
+```tsx
+// useQuery GET /approval-workflows-v2?applicableType=N&isUserSelectable=true
+// PageHeader "Luồng duyệt — {label}" + Network icon
+// Loading/Error/Empty 3 state rõ ràng
+// WorkflowCard per ghim version:
+//   header: code/version + badge "Đang dùng" emerald + "Được ghim" amber Pin
+//   table 10 cột read-only:
+//     Bước rowSpan | Cấp | NV duyệt + 7 Allow* flag (✓ emerald / — slate)
+// FlagCell helper TS indexed-access type union 7 keys
+```
+
+#### NEW `fe-user/src/types/approvalWorkflowV2.ts` ~55 LOC
+
+Subset DTO mirror BE `AwAdminOverviewDto`:
+- `AwLevelDto` 13 fields (7 Allow*)
+- `AwStepDto`, `AwDefinitionDto`, `AwTypeSummaryDto`, `AwAdminOverviewDto`
+- Field name khớp BE record positional param (`history` not `versions`)
+
+#### MODIFIED `fe-user/src/App.tsx` +2 LOC
+
+```tsx
+import { WorkflowMatrixViewPage } from '@/pages/pe/WorkflowMatrixViewPage'
+// trong <Routes>:
+<Route path="/purchase-evaluations/workflow-matrix" element={<WorkflowMatrixViewPage />} />
+```
+
+**Verify Chunk B:** `npm run build` fe-user PASS clean 0 TS err, 1907 modules, 2.61s, bundle 1282 KB.
+
+### Chunk C — Cumulative Reviewer + Docs (this commit)
+
+🟥 **Reviewer** adversarial pre-commit cumulative ~25K tokens:
+
+| Category | Verdict |
+|---|---|
+| Wire BE/feature claim verify | ✅ End-to-end Controller → Mediator → Handler → FE useQuery wired |
+| Schema integrity | ✅ 0 Mig mới, DbInitializer idempotent, 7 Allow* count match |
+| Security | ✅ Class-level [Authorize] preserved, GET any-auth OK, POST admin policy. 1 Low note: non-admin pass `isUserSelectable=false` leak workflow chưa ghim (defer follow-up) |
+| Code quality | ✅ BE 0 err + fe-user PASS + **fe-admin PASS 1926 modules 740ms 0 TS err** (Reviewer tự verify bonus) |
+| Test coverage | ✅ Accept Phase 9 UAT exception per `feedback_uat_skip_verify` |
+
+**Anti-fiddle:** 0% drift, ~346 LOC khớp spec.
+**Mirror 2 FE app §3.9:** Sidebar widen + remove truncate mirror cả 2 ✓. WorkflowMatrixViewPage fe-user only (admin Designer riêng).
+**Smart Friend guard:** Active, 0 critical/major/minor blocker.
+
+#### Docs deliverables Chunk C
+
+- `docs/STATUS.md` Recently Done newest entry S24 t1
+- `docs/HANDOFF.md` Last updated S24 t1 prepend
+- `docs/changelog/sessions/2026-05-15-s24-turn1-plan-aa-workflow-matrix.md` (file này)
+- `.claude/agent-memory/investigator/MEMORY.md` FIFO entry S24 Pre-A
+- `.claude/agent-memory/implementer/MEMORY.md` FIFO entry S24 Chunk B
+- `.claude/agent-memory/reviewer/MEMORY.md` FIFO entry S24 cumulative verify
+
+## 📊 Stats Plan AA chốt
+
+| Metric | Trước (S23 t12) | Sau (S24 t1) | Δ |
+|---|---|---|---|
+| Migrations | 31 | 31 | 0 (no Mig mới) |
+| DB tables | 59 | 59 | 0 |
+| Endpoints | ~145 | **~146** | +1 (GET filter param) |
+| FE pages | 34 | **35** | +1 (WorkflowMatrixViewPage) |
+| Unit tests | 111 | 111 | 0 (UAT mode skip) |
+| Gotchas | 47 | 47 | 0 |
+| Memory entries user-level | 21 | 21 | 0 (no new — recommend memory responsive update sau) |
+| Skills | 6 | 6 | 0 |
+| Sub-agents | 4 | 4 (3 spawn S24 t1) | — |
+| **Commits Plan AA** | — | **3** | `ee776d5` (A BE+Layout) · `c667802` (B FE) · this (C Docs) |
+
+## 🎯 Multi-agent ROI Plan AA
+
+| Spawn | Cost | Verdict | Catch / Value |
+|---|---|---|---|
+| 🟦 Investigator Pre-A | ~32K | ✅ | 5Q audit + 3 surprises (PE 2-panel + Order strategy + Contract enum unwired). Saved em main blind code 4 wrong assumptions. |
+| 🟨 Implementer Chunk B | ~14K | ✅ | 3 files +305 LOC cookie-cutter Designer read-only mirror. Build PASS. shadcn fe-user no Card/Badge fallback inline div pattern. |
+| 🟥 Reviewer Chunk C | ~25K | ✅ | 0 critical/major/minor block. Bonus catch fe-admin build (~7s) verify mirror app PASS. 1 Low note non-admin filter leak workflow chưa ghim defer. |
+| 👤 Chủ trì Solo Chunk A + coordinate | ~80K | ✅ | BE 4 file + Layout 2 file cross-stack architectural decisions. Order shift refactor INSERT→UPDATE idempotent. |
+
+**Total cost cumulative Plan AA:** ~150K (~25% solo equiv). Multi-agent leverage cache 70-90% per session.
+
+## 📋 Pattern reinforced
+
+1. **Gotcha #44 relax class-level [Authorize] PROVEN cross-stack reuse** — Workflows endpoint từ admin-only sang any-auth read accessible. Mảnh pattern reusable cho future read-only user view (Form template view, Department list view, etc.).
+
+2. **DbInitializer INSERT-OR-UPDATE-Order pattern** — Idempotent re-deploy safe shift existing prod rows. Cross-project reusable cho menu re-ordering / label rename / icon change without migration.
+
+3. **Plan U truncate revert pattern** — widen container + drop truncate + keep `min-w-0 flex-1` + `shrink-0` + `title` tooltip. Reusable cross-project sidebar / nav menu / breadcrumb.
+
+4. **Read-only admin Designer mirror page** — Implementer Case 2 pattern: drop edit mutations + reuse types + filter via query param. Reusable cho future user view của admin config (Role permission view, Workflow template view, etc.).
+
+## ⏭ Pending S24+
+
+- 🟢 Bro UAT verify Plan AA deploy sau ~3-5 phút CI Run #210+
+- 🟩 CICD Monitor spawn post-deploy verify bundle hash 2 app + smoke endpoint `?isUserSelectable=true` + DbInitializer Order shift idempotent
+- 🟡 Plan B Contract V2 wire (Mig 32+33) — HIGH priority next (pre-allocated 5-6 chunk in HANDOFF)
+- 📝 Memory `feedback_responsive_laptop_breakpoint.md` update: PE Workspace 2-panel (NOT 3-panel) — defer Chunk D bonus
+- 🔍 Discovery #3 anomaly CI trigger docs-only (3× reinforced) — Investigator follow-up
+- 🔍 Discovery #4 ASP.NET enum body deserialization (LOW polish)
+- 🔧 Gotcha #47 paths-ignore agent-memory (pending bro chốt)
+- ⚠️ Security follow-up: BE enforce `isUserSelectable=true` mandatory cho non-admin (Reviewer Low note)
+
+## References
+
+- Files: [WorkflowMatrixViewPage.tsx](../../../fe-user/src/pages/pe/WorkflowMatrixViewPage.tsx) · [types/approvalWorkflowV2.ts](../../../fe-user/src/types/approvalWorkflowV2.ts) · [MenuKeys.cs:85](../../../src/Backend/SolutionErp.Domain/Identity/MenuKeys.cs) · [DbInitializer.cs:1429-1459](../../../src/Backend/SolutionErp.Infrastructure/Persistence/DbInitializer.cs)
+- Rules: §3.9 mirror 2 FE app, §6.5 KEEP narrative, §7 test timing
+- Cross-ref skill `permission-matrix` (menu structure) + `contract-workflow` (workflow V2)
+- Memory cross-ref `feedback_per_nv_permission_scope.md` (7 Allow* per-Level slot) + `feedback_uat_skip_verify.md` (Phase 9 test-after)