Files

pqhuy1987 9941e352bc [CLAUDE] Docs: S69 session-end closeout — Văn phòng số golive + PE cờ gấp/ngưỡng (Run #305-308)

Flush docs sau buổi sản phẩm cực lớn (4 deploy prod-verified, 2 workflow fan-out).

- STATUS.md + HANDOFF.md: S69 header + Recently Done + In-Progress + count (Mig 52→53 · test 286→306 · menu 53→54 · gotcha 66→68 · bundle BgNCjwsG/CBvh0vtf Run #308) + Phase (Văn phòng số golive + PE cờ gấp/ngưỡng).
- gotchas.md: +2 (#67 Tailwind accent palette thiếu-stop vỡ-màu-im-lặng · #68 stale-diagnostic-background-agent → chỉ tin build sau-cùng).
- session log 2026-06-17-S69-vanphong-golive-pe-urgent-threshold.md.
- CLAUDE.md (root): Mig 53 · PE module +Mig 53 · test 306 · gotcha 68.
- ef-core-migration SKILL: +Mig 53 row AddPeUrgentAndCeoApprovalThreshold + count 52→53 (H1 flush).
- harvest: cicd-monitor MEMORY #308 (H2 orphan commit). H2 GATE PASS · H1 0 new-alloc.

curate-debt P1 next session: cicd-monitor 65.2KB worst. C (chuyển phiếu→dự án) chờ anh Kiệt spec.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

2026-06-17 14:00:45 +07:00

100 KiB

Raw Blame History

STATUS — Snapshot hiện tại

Update rule: trước khi bắt đầu 1 task → ghi row 🔥 In Progress. Xong → ✅ Recently Done. Tiering rule (S40): chỉ giữ state hiện tại + 3 session gần nhất ở file này. Session cũ hơn → docs/changelog/sessions/. Full history pre-S40 → docs/_archive/STATUS-preS40-fullhistory.md. (Tránh over-context — xóa double, không cắt nội dung.)

Last updated: 2026-06-17 (S69 — Văn phòng số (E-Office) port + golive + PE cờ gấp/ngưỡng CCM — 4 deploy prod-verified Run #305→#308, HMW-mode ON, 2 workflow fan-out + ~14 spawn: foundation PURO (shared PageHeader/KpiCard/WidgetCard + Dashboard 2-cột + sync fe-admin index.css đóng drift S66-S68) #305 → re-skin TRỌN 10 page PURO layout + CSS Hồ sơ NS, phẫu-thuật-giữ-100%-logic (reviewer verify api/queryKey byte-identical) #306 → Office golive public SeedAllRolesOfficeModulePermissionsAsync read+create 16-key allow-list mọi role (mirror S65 pattern, chạy SAU revoke; excluded Off_PhongHop_Manage/Off_AttendanceReport/Off_ChamCong giữ ẩn; cicd DB-verify 16/16×13 role) #307 → PE cờ gấp PRO/CCM + CCM duyệt-final theo ngưỡng giá trị Mig 53 (anh Kiệt FDC sau họp sếp) #308. State THẬT: Mig 53 · 88 bảng · 306 test (45D+261I) · 68 gotcha · menu 54 · bundle admin BgNCjwsG/user CBvh0vtf Run #308. 2 gotcha NEW (#67 Tailwind accent palette thiếu-stop vỡ-màu-im-lặng · #68 stale-diagnostic-background-agent). 2 truncation #53 (impl-backend positional-record + impl-frontend) → em main recover-disk + self-gate (cả 2 build PASS sau-cùng). C (sau duyệt → chuyển phiếu đến dự án) chờ anh Kiệt spec form. → session log 2026-06-17-S69-vanphong-golive-pe-urgent-threshold.md. Prev S68 — Hồ sơ NS header chi tiết NV: làm nổi bật + fix tên render đen→trắng — em main solo, 3 commit (2 FE 6983609+37752eb · 1 docs 11bc96d), 2 deploy prod-verified Run #303-304 (anh UAT realtime): tên text-xl extrabold+drop-shadow · dòng meta text-[13px] font-medium trắng-đậm · badge pill màu theo trạng thái (#303); anh báo "tên đen nền xanh ko nổi bật" → diagnose rule h1-h4{color:#0b1220} viết NGOÀI @layer thắng text-white (Tailwind v4 unlayered > all layers, gotcha #66 NEW) → ép text-white! + thu nhỏ text-lg (#304, grep dist confirm !important). Bootstrap: 2 monitor RE-REPORT CLEAN + 2 doc-drift fix (dep-audit 64→65 · root CLAUDE 263→286, H1 flag). State THẬT: Mig 52 · 88 bảng · 286 test · 66 gotcha · menu 53 · bundle admin CNUv1jxY/user CpOskeS1 Run #304. ⚠️ curate-debt P1: cicd-monitor 44.1KB (worst). Prev S67: buổi sản phẩm LỚN, 6 deploy prod-verified Run #297→#302 (anh + anh Kiệt FDC UAT realtime, HMW-mode ON): fe-user Hồ sơ NS đồng nhất font + chữ đen→xanh đậm brand-800 (#297 ab4e681) · fe-admin mirror master-detail + accent tokens index.css [đóng pending lớn nhất HRM go-live, page SHA256 ×2] (#298 292d64d) · +23 test-after HRM [Dept cycle-guard · PE HoSoLink absolute-set · HRM-perm seed] → 263→286 (#299 bcd619d) · list flex-row gọn [bảng 3-cột→flex-row, overflow-x-hidden → hết tràn ngang rail] + đồng nhất cỡ chữ [18/14/13/11px] ×2 app (#300 91aaf05) · PE Link hồ sơ auto-detect http(s)→hyperlink/O:\→Copy (#301 6df1b2d) → render link file:// bấm-thử + Copy (#302 536dd6b). Workflow research 3 investigator-api (auto-mở O:\ từ web): default browser CHẶN https→file://; chỉ Edge GPO IntranetFileLinksEnabled (Edge-only, Intranet Zone, 1 GPO domain zero-per-machine) = one-click thật — Chrome không có; .url-download zero-install nhưng 2-click. State THẬT: Mig 52 · 88 bảng · 286 test (45D+241I) · 65 gotcha · menu 53 · bundle admin CcrZqfht/user DniDFUB_ (#302). test-specialist truncated return #53 → em main recover-disk (3 file test đủ + 286 verify); 0 production bug. ⚠️ curate-debt: cicd-monitor 39.8KB + inv-codebase 39.4KB over-cap. Prev S66 — session-end closeout em-main-solo, 0 product-sub: adopt Harness-8 all-inherit (7 sub demoted claude-opus-4-8→inherit → cả 11 = inherit, gỡ two-tier Harness-4) + cicd-monitor L1 curate 86.8→28.9KB (byte-exact sed → archive/2026-06.md, incl #291 forensic) + ef-core skill doc-flush Mig 50→52 (H1 drift, +Mig 51/52 rows) + check-email AI_INFRA (0 thư mới se-directed). ~17 file docs/gov/config, 0 production code → state THẬT GIỮ NGUYÊN: Mig 52 · 88 bảng · 263 test · 65 gotcha · menu 53 · bundle admin BDwV5d0X/user DbVv6rsf. ⚠️ Restart CLI để H8 runtime (frontmatter no hot-reload) + reviewer Category 6 (S64 pending). adap-report 2026-06-16-Governance-harness-8-all-inherit-workflow-fastest + email-back ai_infra (hash fa7f690d round-trip MATCH). Prev S65 — HRM go-live: public Hồ sơ Nhân sự + trang master-detail giống NamGroup + Department hierarchy + PE Link hồ sơ, ~6 deploy prod-verified Run #289→#295, anh + anh Kiệt FDC UAT realtime): (1) public Hồ sơ Nhân sự mọi role — SeedAllRolesHrmProfileReadPermissionsAsync grant CanRead Hrm+Hrm_HoSo 13 role chạy SAU revoke S58 (upgrade-only; EmployeesController policy-based Hrm_HoSo.Read mở luôn API không hardcode Roles), giữ ẩn Dashboard NS, Run #289; (2) redesign màu foundation fe-user — accent palette teal/violet/amberx/greenx + .app-gradient-brand/.card-accent/.icon-chip + heading 700, brand #1F7DC1 + Be Vietnam Pro giữ, Run #290; (3) Department hierarchy Mig 51 AddDepartmentParentId (ParentId loose-Guid no-FK + GET /departments/tree ráp cây in-memory + rollup count theo User.DepartmentId + cycle-guard HashSet) + picker "Phòng cha" fe-admin (self-service org chart) + Update cycle-guard, Run #292; (4) Hồ sơ Nhân sự master-detail giống NamGroup — EmployeesListPage rewrite: 3-panel→2-cột (cây tổ chức gốc "SOLUTION COMPANY" + list chồng TRÁI · chi tiết 5 tab PHẢI) + tô màu accent, giữ 100% 5 satellite CRUD (16 endpoint), Run #293/#294/#295; (5) PE mục "e. Link hồ sơ" Mig 52 AddHoSoLinkToPurchaseEvaluation (HoSoLink string? hyperlink NAS + <a> target_blank rel-noopener + null-safe) + rename "Dự trù PRO"→"Ngân sách PRO" (row+badge) ×2 app SHA256-mirror, Run #293. State THẬT: Mig 52 · 88 bảng · 263 test (45D+218I) · 65 gotcha · menu 53 · bundle admin BDwV5d0X/user DbVv6rsf (Run #295 456c7a7 Employee-refine — user rotate CZfo_PFZ→DbVv6rsf, cicd PASS). 🔥 Workflow fan-out chạy THẬT lần đầu (pe-hoso-link-rename-pro BE∥FE→review) — parallel disjoint-file OK, NHƯNG FE+reviewer return-RỖNG #53 → em main recover-disk + self-gate (bắt badge "DỰ TRÙ PRO" sót rename); verdict: fan-out cho parallelism nhưng reviewer-stage không tin được trong harness này → verify-heavy task vẫn tự gác = tương đương spawn lẻ (feedback_workflow_fanout_reliability). gotcha #65 NEW (build csproj con ≠ dotnet build slnx gồm tests → miss test-compile khi đổi chữ ký record command → CI CS7036 Run #291 FAIL-gated). Prev S64 adopt Harness-7 writing-quality floor — em main solo, commit 6afde19 docs/gov-only, 0 sub spawn: rules.md §1.1 outward-VN-full-grammar + reviewer Category 6 + adap-report + email ai_infra; broadcast body-hash a4580ea9 verified-MATCH KHÔNG mis-stamp [false-mismatch = gotcha #61 PS5.1 UTF-8 decode của em]. Prev S63 docs-closeout bù S60/S61/S62 — State THẬT: Mig 50 · 88 bảng · 263 test (45D+218I) · 64 gotcha · menu 53 · bundle admin 0xKYGhhf/user C81ZdG9G Run #286; S60-62 = PE ràng buộc gửi-duyệt + bypass drafter (S60) · gỡ "Từ chối" (S60) · Mig 50 ngân sách per-gói-thầu Excel anh Kiệt + XÓA module Budget cũ (S61) · vượt-NS cảnh-báo-mềm cho lưu (S62); + reconcile stray reviewer cwd-misland; session log 2026-06-12-S60-S62-pe-budget-workitem-softwarning.md). Prev Session 59 ( 10 đợt ship prod-verified: 8 Run PASS + 2 cancelled-supersede-benign #273→#282 (run_number API — dải đếm khác #38x S58, cùng pipeline; 2 cancel = push-đè khi UAT góp ý realtime, ancestor-verified): (1) wipe transactional testing data theo anh Kiệt FDC — 10 PE + 7 HĐ [DEMO] + 64 notif + 1 AwV2 cũ inactive = 0, reset PeSeq/CtSeq → phiếu thật đầu tiên team tạo chiều nay = PE/2026/A/001 ✓, app-recycle KHÔNG resurrect (DemoSeed gate held), uploads orphan dọn (56882ac #273); (2+3) PE tree Panel 1 chốt 4 tầng "📅 Năm > 📁 Dự án > 🧱 Hạng mục > Phiếu" (anh chốt follow-up sau bản gộp "Dự án (Năm)"; yearGroups useMemo, expand-key v3, FE-only — list DTO đã có workItemName S57bis) (0eafcd3 #274); (4) dọn 15 mã hạng mục demo tự chế theo chị Trà Sol "xóa cái đám phần thô phần hoàn thiện… MÀ ANH TỰ ĐẺ RA" — WorkItems 86→71, GỠ HẲN block seed demo khỏi DbInitializer, đối chiếu 71/71 khớp bảng PMH từng dòng (bbd1554 #275, bundle frozen BE-only); (5) rename 71 mã đúng format PMH anh Kiệt chốt "MÃ CV gồm chữ MEP-SUB-1 rồi tên 1 MEP Sub MEP (Full) — đúng kiểu vậy" → MAT-n/SUB-n/MEP-SUB-n/MEP-EQU-n + Name "STT nhóm tên"; DB-trước-code-sau (gotcha #62 NEW — seed per-code idempotent, sai thứ tự = 142 rows) + sqlcmd -f 65001 (gotcha #61 NEW — verify data qua API JSON, KHÔNG tin console mojibake) + FE sort numeric ×3 ×2 app (c869d26 #276); (6) UAT 6 vòng 11 điểm: NEW ui/SearchableSelect combobox gõ-lọc BỎ DẤU (fold NFD — Hạng mục/Dự án/NCC) + auto Địa điểm từ Project.Location + điều khoản TT Textarea đa dòng (faed59f #277) · anh chốt: ẩn cả Trả lại+Từ chối khi người duyệt = người soạn (drafterUserId match) + quick-add NCC ngay form (SuppliersController POST hạ → any-auth, PUT/DELETE giữ khóa — cicd authz probe live 4/4: 401 unauth/201 nv.test/403 delete/cleanup) + upload multiple files ×2 chỗ (9c330d2 #278) · vòng 3-6 realtime (f21c55d #279-cancelled / 69997da #280 / 80b64dd #281-cancelled / 792c030 #282 FINAL): bảng NCC table-fixed width từng cột (file dài hết vỡ layout) + bỏ ô "Tên" ngân sách nhập tay (chỉ còn Số tiền, hasManual detect theo amount) + GỠ field "Điều khoản thanh toán" khỏi TẤT CẢ form phiếu (cột per-NCC + display phiếu cũ GIỮ) + bỏ nút "+ Thêm hạng mục" (1 phiếu = 1 hạng mục header). Bundle FINAL admin B1DtNT9C/user D6uF3Mln (Run #282). Test 240 ×2 local + 8× CI gate. 0/14 spawn truncated (lần đầu sau nhiều session). → session log 2026-06-11-S59-wipe-tree-pmh-uat-batch.md. Prev S58 (2026-06-11 — 4 việc prod-verified Run #382/#383/#384: lock-demo-user fix + tạm ẩn HRM/Office/Cá nhân + Danh mục cuối sidebar + fe-user redesign theo UI/UX guide AI_INFRA. Việc 1 — lock fix (Run #382, 5998163 ~3m31s): Run #381 cicd phát hiện S57bis lock = NO-OP (14 email named-person là population Dev-only). Recon dump prod: demo thật = 20 UAT-matrix {dept}.{nv,pp,tp}@+bod.{1,2}@ tạo TAY 05-13; root cause sâu = DemoUserPassword 11 ký tự < prod RequiredLength=12 → CreateAsync silent-fail MỌI startup từ trước tới giờ (= root cause "helpdesk inert phòng IT 0 user" S56). Fix: union 20 email + password 12 ký tự. Prod sau deploy: 55 user / 21 active / 34 locked — 20 UAT + 14 named-person locked ✓, nv.cao/nv.truong CREATED+ACTIVE (helpdesk S56 RESOLVED) ✓, 5 real staff created ✓, guard admin/catalog.manager/nv.test/chuong.phan-typo active ✓ (anh chốt 3 quyết định AskUserQuestion). Bundle FROZEN. gotcha #60 NEW (seed silent-fail vs prod password policy — dump population thật trước khi lock/seed-by-email). +Closeout S57bis residual: gotcha #59 commit, 4 spawn-record on-behalf (H2 4-MISS), H1 5-patch doc-drift, test 240 re-verified local. Prev S57bis (2026-06-11 sáng) — PE gắn Hạng mục công việc (Mig 49) + mở quyền Pe all-role + menu "Cá nhân" + khóa demo user (sếp Zalo deadline 15:00): commit 17b23a4 (Harness-4 two-tier runtime-VERIFIED spawn-test 2 chiều) + dd117b7 (product) → Run #381 PASS ~4m25s. Mig 49 AddWorkItemToPurchaseEvaluation: PE.WorkItemId Guid? loose-Guid KHÔNG FK vật lý (convention PE — database-agent design) + IX + validator NotEmpty create + FK-guard handler Conflict + UpdateDraft null-safe. FE ×2 app PeWorkspaceCreateView/PeHeaderForm (SHA256 identical)/PeDetailTabs "Dự án – Hạng mục". Pe_* 11 key CanRead+CanCreate mọi role (130 rows/13 role — Pe_* leaf KHÔNG nằm MenuKeys.All, build qua factory). Menu Personal root@30 + Chấm công re-parent + Master write-lock Admin,CatalogManager ×3 controller. Test 228→240 (+12 PeWorkItemGuardTests). Bundle rotate cả 2: admin CP4CB1ym / user BmZ3VHnm. 2 builder truncated #53 + reviewer die-0-byte ×2 → em main solo vá cross-stack + self-gate. Excel (3) đối chiếu = NO-CHANGE (S55 data identical). Prev S56 — Pre-golive verify sweep + golive-harden 4 fix — HMW 2-workflow, prod-verified: commit a20cde8 → Run #379 PASS ~4m20s. WF1 pre-golive-verify 7-stream song song + adversarial → 6 PASS/1 CONCERN/0 blocker = GO; key finds = ops not code (prod IT-dept 0 active user → helpdesk inert + S43 LeaveBalance lost-update còn nguyên). WF2 golive-harden fix 4: #3 LeaveBalance lost-update→atomic ExecuteUpdateAsync+Serializable tx (NO mig, exactly-once nguyên) · #5 ItTicket authz Forbidden-trước-NotFound (fail-closed) · #6 DocxRenderer null-guard (2 warn→0) · #4 Travel/Vehicle ApproveV2 +4 smoke. Test 216→228. Bundle FROZEN 4SUwDLD8/XdKzt9LL (BE-only). sys.tables re-ground 92→93 (cicd ground-truth, Mig 48 col-only). reviewer stage StructuredOutput-fail→em main đỡ cross-stack review (3 diff clean) + bump Serializable đóng MAJOR. gotcha #58 NEW (EF read-modify-write lost-update→ExecuteUpdate atomic). 2 ops VPS pending (gán user phòng IT + tzutil UTC+7). FE Phase 2 redesign deferred (recon ready). Prev S55 — Nạp master data thật từ Excel + Project +4 cột (Mig 48), HMW-mode ON: commit 69cb393 → Run #377 PASS ~4m33s, prod-verified. Anh giao file Excel "HẠNG MỤC CÔNG VIỆC DỰ ÁN" → /ultra-on "workflow làm xong hết". Nạp 62 dự án + 71 hạng mục + 3 NCC vào Project/WorkItem/Supplier qua SeedRealMasterDataAsync (per-code idempotent, UNGATED → coexist demo, tự lên prod). Mig 48 AddProjectMasterFields: Project +4 cột nullable (Year/Investor/Location/Package, NO new table). FE ProjectsPage form +4 input ×2 app SHA256 mirror. Test 216 (compile-fix MasterCatalogFilteredUniqueTests +4 null args, no new test). Bundle admin DmjI8Cmn→B-d6893W/user YxL_MljK→XdKzt9LL (cả 2 rotate). Prod verify: Mig 48 applied · Projects spot-6/6 · WorkItems VT/TP/MEP/TB=71 · Suppliers 3 · CAL01.Investor="Công ty TNHH Calofic". 2 agent return truncated (implementer-backend + reviewer, gotcha #53) → em main disk/runtime-recover (build/test/sqlcmd/git truth); cicd verdict-FIRST → PASS clean no-truncate. Data-quality catch: MEP col gộp 2 nhóm + divider "THIẾT BỊ" → split đúng 71/4-category. Provenance scripts/master-import-data.generated.md. Prev S54 — IT staff tự reassign ticket (cross-stack authz, HMW-mode ON): 1 code commit ca4b602 → Run #376 PASS ~4m18s, prod-verified. Cho tổ IT (dept Code=="IT") + Admin reassign ItTicket trên CẢ 2 app. BE: NEW GetAssignableItStaffQuery capability endpoint {canReassign,staff} + AssignItTicketHandler authz Admin-OR-dept-IT (Forbidden) + assignee-must-IT (Conflict) + controller /assign hạ [Authorize(Roles=Admin)]→[Authorize] (handler fine-grained). FE: fe-admin+fe-user ItTicketsPage SHA256-identical (REVERSE S53 divergence) gate nút by canReassign, dropdown từ /assignable-staff (không /users). Test 203→216 (+13 authz guard test-before-merge). NO migration (DepartmentId reuse). Bundle admin DfCfHUE9→DmjI8Cmn / user _3S0BPJ2→YxL_MljK (cả 2 rotate). 6-agent fan-out (BE∥FE→test→reviewer→cicd) + em main reconcile stray-memory residual (3 agent ghi MEMORY nhầm src/Backend/.claude → harvest về canonical). reviewer PASS 0 blocker (role-string "Admin" chain-verified). Task 1 Phase 9 Ops KHÔNG làm (anh dừng). flag: cicd sys.tables=93 vs STATUS 92 → monthly audit re-ground.) Prev S53 (gotcha #57 EXT Master Mig 47 + P11-D reassign-UI fe-admin + P11-E menu + database-agent verified-runtime: 44b9e54 Run #260 + dbf6648 Run #261, test→203, bundle→DfCfHUE9). Prev S52 (Phase 11 P11-D+E+F deployed + database-agent adopt, HMW-mode ON): 3 commit — e9ee97f (database-agent DB1–DB11 read-advisory, roster 10→11, executed-file CHỜ restart) + 6a66429 Wave 1 (P11-E AttendanceReport+Excel+OtPolicy multiplier + P11-F MaTicket codegen, migration-free) + dcf76f8 Wave 2 (P11-D ItTicket round-robin assign dept-IT + SLA timer, Mig 46). Test 186→200. Bundle admin DYfjnpY0/user _3S0BPJ2 (cả 2 deploy verified curl độc lập — Wave 1 BE 401 wired + Wave 2 /assign 401 + Mig 46 applied health-200). ⚠️ Session-limit hit giữa Wave 2 → recovery: BE/test verify-on-disk + em main solo FE redo + curl-self-verify thay cicd-spawn (multi-agent resilience, git/disk/prod = source-of-truth). RAG recovered (chunk 2416 rerank live) nhưng stale 05-29. Prev S51: P11-C Vehicle+Driver.)

🎯 CURRENT STATE (verified S40)

Metric	Value	Note
Migrations	53	+S69: Mig 53 `AddPeUrgentAndCeoApprovalThreshold` (PE +IsUrgentByPro/Ccm cờ gấp + ApprovalWorkflow +CeoApprovalThreshold ngưỡng CCM duyệt-final · 3 AddColumn no new table). Prev S65: Mig 51 `AddDepartmentParentId` (Department.ParentId loose-Guid no-FK — org-tree) + Mig 52 `AddHoSoLinkToPurchaseEvaluation` (PE HoSoLink nvarchar(1000) hyperlink NAS) — cả 2 AddColumn-only, no new table (tables giữ 88). Prev Mig 50 `ReplaceBudgetModuleWithPeWorkItemBudgets` (bảng `PeWorkItemBudgets` per-gói-thầu + DROP module Budget cũ + backfill BudgetManual→BudgetPeriod TRƯỚC DropColumn + DROP PE/Contracts.BudgetId; gotcha #63/#64). Prev Mig 49 PE WorkItemId (S57bis)
SQL tables	88	re-ground S62 (cicd `sys.tables` Run #286 — Mig 50 XÓA module Budget (drop nhiều bảng) + CREATE `PeWorkItemBudgets` → net 93→88)
Master data (prod)	71 WorkItems PMH-only S59	62 Projects + WorkItems = ĐÚNG 71 mã PMH (S59: wipe 15 demo + rename format anh Kiệt `MAT-1..16`/`SUB-1..30`/`MEP-SUB-1..9`/`MEP-EQU-1..16`, Name "STT nhóm tên") + Suppliers 22 (3 real + demo; POST mở any-auth S59 quick-add). Transactional testing data wiped S59 (PE/HĐ/Notif = 0 baseline, phiếu thật từ A/001). Provenance `scripts/master-import-data.generated.md`
API endpoints	~253	+1 S54 `GET /it-tickets/assignable-staff` (capability endpoint); +3 S52 (attendances/report + report/excel + it-tickets/{id}/assign)
FE pages	68	unchanged S54 (ItTicketsPage reassign = in-place 2 app); +1 S52 AttendanceReportPage
Menu keys	54	+1 S69 `Off_Dashboard` (landing Văn phòng số). Prev re-ground S61 (`MenuKeys.cs` const — Mig 50 gỡ 4 `Bg_*` Budget menu cũ). Prev 57 (S58)
Tests	306 PASS	45 Domain + 261 Infra · 0 fail / 0 skip · S69 +20 (Office-golive OfficeModulePermissionSeed 6 + PE PeCcmThresholdFinalize 5 + PeUrgentToggleAuthz 9) · S67 +23 HRM test-after (DepartmentTreeTests 8 cycle-guard/rollup + PeHoSoLinkTests 9 absolute-set + HrmProfilePermissionSeedTests 6 reflection-seed) → 286 · S61 +22 `PeWorkItemBudgetTests` −14 `BudgetPolicyTests` −1 → 263 · S60 +14 `PeSubmitGuardAndBypassTests` +2 spec → 256 (Domain 58→45 do drop Budget module tests)
Gotchas	68	+2 S69: #67 Tailwind v4 accent palette thiếu stop (teal/violet/amberx/greenx chỉ 50/100/500/600/700; dùng -300 → teal/violet rơi DEFAULT Tailwind sai-hệ, amberx/greenx drop hẳn — build PASS, phải soi dist CSS) · #68 IDE TS diagnostic giữa background-agent/workflow = snapshot dở-dang (TS server bắn mỗi save), chỉ tin build SẠCH sau-cùng (2× session này: re-skin + PE-FE đều false-alarm). Prev +1 S68 #66 Tailwind v4 rule element thô `h1-h4{color:#0b1220}` viết NGOÀI `@layer` thắng utility `text-white` → heading render đen; fix ĐIỂM `text-white!` (important, grep dist confirm), KHÔNG move `@layer` (load-bearing ~30+ heading toàn app). Prev +1 S65 #65 build csproj con (vd `SolutionErp.Api.csproj`) ≠ `dotnet build SolutionErp.slnx` (gồm tests) → miss test-compile khi đổi chữ ký record command (CreateDepartmentCommand +ParentId) → CI CS7036 FAIL-gated Run #291 (deploy chặn, prod nguyên — test-gate làm đúng việc). Fix: build full slnx trước push BE signature-change. Prev +2 S61: #63 EF scaffold tự sinh `RenameColumn` SAI-semantics khi drop+add cùng type (test xanh không bắt — SQLite EnsureCreated không replay migration) · #64 `dotnet ef database update` áp Design-DB 0-rows ≠ Dev-DB → data-migrate `Sql()` chạy thật lần đầu trên prod. Prev +2 S59 (#61 sqlcmd `-f 65001` · #62 rename natural-key UPDATE trước deploy)
User memory	21	+1 S64 `feedback_harness7_outward_writing_quality` (outward full-grammar VN · internal compressed — asymmetric). Prev re-grounded S54 (H1 disk-count base 19); +1 S54 `feedback_agent_cwd_relative_memory_misland`
Skills	6	3 domain + 3 ops
Sub-agents	11	all-inherit top-tier (Harness-8 S66 06-16 — thay thế two-tier H4): em main Fable 5 (1M) Max (fallback Opus 4.8 1M, Fable suspended H5) · cả 11 sub `model: inherit` (7 demoted `claude-opus-4-8` flip S66; SE không có helper/gopher rẻ → cả 11 lên top-tier) · effort Max. 9 product/quality + 2 monitor INFORM-only. Nấc H8 = executed-file VERIFIED-pending-restart. Prev two-tier H4 runtime-verified S57bis (spawn-test 2 chiều).
RAG chunks	2423	re-check S63 (`list_projects` — alive, +3 vs S58). Stale `last_indexed 05-29` (S42-S62 via store_memory stopgap; full re-index = AI_INFRA op cần VOYAGE_API_KEY).

Bundle hash live (prod): admin BgNCjwsG · user CBvh0vtf (S69 — Run #308 PE cờ gấp + ngưỡng CCM; chuỗi 4 deploy session: #305 Văn phòng số foundation → #306 re-skin 10 page → #307 Office golive (BE-only) Wt54PHYl/B99fMU6X → #308 BgNCjwsG/CBvh0vtf). Prev S68 — admin CNUv1jxY · user CpOskeS1 (S68 — Run #304 37752eb fix tên đen→trắng; chuỗi #303 6983609 D532XZKG/CuFaBoWt → #304 CNUv1jxY/CpOskeS1, cicd PASS each). Prev S67 — admin CcrZqfht/user DniDFUB_ (S67 — 6 deploy Run #297→#302; admin rotate chuỗi #298xkSz9BfE→#300PxiZQkaw→#301I1fpLeYw→#302**CcrZqfht** · user #297BumgrwCJ→#300B36hGoKd→#301DrQYkzh0→#302**DniDFUB_**; #299 tests BE-only cả 2 frozen, cicd PASS each). Prev S65 — admin BDwV5d0X/user DbVv6rsf (Run #293-295). Prev S62 admin 0xKYGhhf/user C81ZdG9G (Run #286). Prev S59: admin B1DtNT9C · user D6uF3Mln (Run #282 792c030 FINAL — bỏ nút Thêm hạng mục; ships kèm 80b64dd gỡ Điều khoản TT, #281 cancelled-benign ancestor-verified). Chuỗi S59 cùng ngày: #280 69997da (BKy_8OO9/XcZ6PRyA, ships kèm f21c55d table-fixed #279-cancelled) · #278 9c330d2 self-approve+quick-add-NCC (BSh2fG2X/D22KfpPc, authz probe 4/4) · #277 faed59f SearchableSelect (ex7Tc92G/DzUeSk96) · #276 c869d26 rename 71 PMH (BBA0KSWu/DzdTI18G) · #275 bbd1554 dọn demo WorkItems (FROZEN BE-only) · #274 0eafcd3 tree 4 tầng (DuU7OTym/DWyeTzf3) · #273 56882ac wipe + tree v1 (R9uGRxvw/DikfX1RD). Prev S58: Run #386 3ebaf84 admin DMm9rtNA/user BUkOMn_Y (chi tiết session log S58). Phase: ✅ Phase 10 COMPLETE · ✅ Phase 11 product backlog ĐÓNG TRỌN · ✅ Văn phòng số (E-Office) golive S69 (foundation PURO + re-skin 10 page + public read+create 16-key allow-list mọi role) prod-verified · ✅ PE cờ gấp PRO/CCM + CCM duyệt-final theo ngưỡng (Mig 53 S69) prod-verified · 🚫 Phase 9 Ops blocked (anh main coordinate — anh dừng).

⚠️ Count drift fixed S40: endpoints ~223→211, FE pages 53→65, menu keys 85→~53. Tables 84 confirmed correct (DbSet 77 + Identity 7). 3 số "khó fake" (mig/gotcha/git) luôn đúng. Cause: số "incremented mỗi session" over/under-count optimistic — re-ground định kỳ.

🔥 In Progress (S69)

Task	Owner	Status
S69 — Văn phòng số port + golive (#305→#307) + PE cờ gấp/ngưỡng CCM (#308 Mig 53) — 4 deploy prod-verified, HMW-mode ON, 2 workflow fan-out + ~14 spawn. Foundation PURO + re-skin 10 page + Office public 16-key allow-list + PE cờ gấp/threshold. 2 gotcha NEW (#67/#68) · 2 truncation #53 recover-disk. NEXT (anh/anh Kiệt UAT): cấu hình "Ngưỡng giá trị gói CEO" trong Workflow Designer + test cờ gấp PRO/CCM; xác nhận: quy trình đặt CCM(CostControl)-trước-CEO + CEO = role Director (notify đích). NEXT (em): 🔴 curate cicd-monitor 65.2KB (worst, trend tăng) + inv-codebase 47 + reviewer 43.5 + impl-be 33 over-cap · doc-flush docs/CLAUDE.md full + schema-diagram §16+. C (sau duyệt → chuyển phiếu đến dự án) chờ anh Kiệt spec form. → session log `2026-06-17-S69-vanphong-golive-pe-urgent-threshold.md`.	👤 + ~14 sub	✅
S68 — Hồ sơ NS header chi tiết NV: nổi bật (size/weight/badge màu) + fix tên đen→trắng (gotcha #66) — em main solo, 3 commit (FE `6983609`+`37752eb` · docs `11bc96d`), 2 deploy prod-verified Run #303-304 (anh UAT realtime): tên `text-xl extrabold`+drop-shadow · meta `text-[13px] font-medium` trắng-đậm · badge pill màu emerald/amber/slate theo trạng thái (#303 `D532XZKG`/`CuFaBoWt`) → anh báo "tên đen nền xanh ko nổi bật" → rule `h1-h4{color:#0b1220}` unlayered thắng `text-white` (Tailwind v4) → ép `text-white!` + thu nhỏ `text-lg` (#304 `CNUv1jxY`/`CpOskeS1`). Bootstrap: 2 monitor RE-REPORT CLEAN + 2 doc-drift fix (dep-audit 64→65, root CLAUDE 263→286). NEXT (anh): xác nhận mắt tên trắng+gọn ưng chưa (muốn nhỏ hơn→`text-base`; màu nhấn nếu cần). NEXT (em): 🔴 curate cicd-monitor 44.1KB + inv-codebase 38.5 + reviewer 35.4 + impl-backend 30.7 over-cap · doc-flush docs/CLAUDE.md count + schema §16+. → session log `2026-06-16-S68-hoso-header-name-color-fix.md`.	👤 + 3 sub	✅
S67 — Hồ sơ NS visual polish (font/màu/list) + fe-admin mirror + PE Link hồ sơ auto-detect/file-link + research auto-open — 6 deploy prod-verified #297→#302 (anh + anh Kiệt FDC UAT realtime): font/màu xanh đậm fe-user (#297) · fe-admin mirror master-detail + accent tokens index.css (#298) · +23 test→286 (#299) · list flex-row hết tràn ngang + đồng nhất cỡ (#300) · PE Link auto-detect web/Copy (#301) → link file:// bấm-thử (#302). Research 3-agent: auto-mở `O:\` = chỉ Edge GPO `IntranetFileLinksEnabled`. test-specialist trunc #53→recover-disk. bundle `CcrZqfht`/`DniDFUB_`. NEXT (anh): ① bấm thử link `O:\` (mở/no-op) báo em môi trường · ② IT-guide Edge GPO nếu muốn 1-click `O:\` · ③ visual list+màu ưng chưa (đổi `brand-700` nếu muốn nhạt hơn). NEXT (em): curate cicd-monitor 39.8KB + inv-codebase 39.4KB over-cap · doc-flush docs/CLAUDE.md count + schema-diagram §16+. → session log `2026-06-16-S67-hoso-visual-pe-link-research.md`.	👤 + 4 sub	✅
S65 — HRM go-live: public Hồ sơ Nhân sự + trang master-detail giống NamGroup + Department hierarchy + PE Link hồ sơ — ~6 deploy prod-verified Run #289→#295 (anh + anh Kiệt FDC UAT realtime): HRM public read 13 role (#289) · foundation màu fe-user (#290) · Mig 51 Department.ParentId + picker phòng cha fe-admin (#292) · Employee 3-panel→2-cột 5-tab + tô màu + gốc cây "SOLUTION COMPANY" (#293/#294/#295) · Mig 52 PE HoSoLink hyperlink NAS + rename "Dự trù PRO"→"Ngân sách PRO" (#293). Workflow fan-out chạy THẬT lần đầu (PE) — FE+reviewer empty-return → em main recover-disk + self-gate. gotcha #65. NEXT: mirror Employee page→fe-admin · test-after (HoSoLink/ParentId/HRM-perm) · cicd-monitor 82KB curate P1. → session log `2026-06-16-S65-hrm-golive-employee-masterdetail-pe-link.md`.	👤 + 9 sub	✅
S64 adopt Harness-7 (writing-quality floor) — em main solo (0 sub), commit `6afde19` docs/gov-only: `rules.md §1.1` (O1 outward tiếng Việt full-grammar · O2 asymmetric nội-bộ-giữ-nén §6.4/§6.5 · O3 reviewer-gate) + reviewer Category 6 (verified-pending-restart) + adap-report + email se→ai_infra (`7e4f91f1` self-verified MATCH). Broadcast `a4580ea9` verified KHÔNG mis-stamp (gotcha #61 UTF-8). NEXT: restart CLI activate Category 6.	👤	✅
(S63 docs-closeout S60-62 + adopt Harness 5/6 ✅ — [adap-apply H5 model-fallback (SE đã de-facto Opus 4.8 1M do Fable down 06-12, book caveat + session-start BƯỚC 0.6) + H6 governed-ultracode (auto-HMW mode-ON + hmw.js role-less→inherit; H6.7 đã sẵn) → 2 adap-report + email ai_infra] · reconcile stray reviewer cwd-misland (2 file → canonical + xóa stray) + commit harvest (cicd MEMORY Run #286 + gotcha #63/#64) + count-flush 4 file (ef-core/README/dep-audit/CLAUDE root) + session-log bù `2026-06-12-S60-S62-`. S60-62 product ĐÓNG TRỌN prod-verified:* Mig 50 ngân sách per-gói-thầu (Excel anh Kiệt) + XÓA module Budget cũ + gỡ "Từ chối" + vượt-NS cảnh-báo-mềm. 🔴 Ops còn — của anh (giữ từ S58/S59): (1) `tzutil /g` VPS · (2) anh Chương email → dọn typo · (3) báo 5 real staff password `User@1234567` · (4) gán người thật CNTT → lock nv.cao/nv.truong. NEXT (anh pick): test-after guard suppliers authz + LockDemoSampleUsers · F4 approver-edit-budget UI (BE sẵn scope, chờ anh Kiệt) · PE panels polish · monthly audit 2026-07-01 (STATUS/HANDOFF re-tier trim S53-S56 → logs · curate L1 cicd-monitor 63.6KB over-cap lần 5 + investigator-codebase 32.7KB · schema-diagram §16+ Mig 32-50 ERD). · Prev S59 ĐÓNG TRỌN 10 đợt Run #273→#282 (8 PASS + 2 cancelled-benign): wipe testing data (phiếu thật đầu = PE/2026/A/001 ✓) · tree 4 tầng Năm>Dự án>Hạng mục · 71 mã PMH chuẩn (wipe 15 demo + rename format anh Kiệt) · UAT 6 vòng 11 điểm (SearchableSelect gõ-lọc bỏ dấu + auto địa điểm + ẩn nút self-approve + quick-add NCC + multi-file + bảng NCC table-fixed + bỏ ô Tên ngân sách + GỠ field Điều khoản TT mọi form + bỏ nút Thêm hạng mục). Bundle FINAL `B1DtNT9C`/`D6uF3Mln`. 🔴 Ops còn — của anh (giữ từ S58): (1) `tzutil /g` VPS → confirm `SE Asia Standard Time` · (2) xác nhận anh Chương email nào → dọn `chuong.phan@solution.com.vn` typo · (3) báo 5 real staff password mặc định `User@1234567` + yêu cầu đổi · (4) khi gán người thật vào CNTT → thêm nv.cao/nv.truong vào lock list. NEXT (anh pick): test-after guard (🟪 test-specialist: `LockDemoSampleUsersAsync` S58 + suppliers asymmetric authz POST-open/PUT-DELETE-locked S59) · PE panels polish sâu (PeDetailTabs 111KB session riêng) · FE PermissionGuard per-route khi golive HRM/Office (flip revoke) · Phase 9 Ops (SMTP/backup/creds/UAT) · monthly audit 2026-07-01 (STATUS/HANDOFF re-tier — defer ×2, ƯU TIÊN · curate L1 cicd-monitor ~56KB (S59 +9 cicd-spawn, H2-đo 54KB + 2 entry cuối) + investigator-codebase 32.9KB · schema-diagram §16+ Mig 32-49 ERD debt). → session log `2026-06-11-S59-wipe-tree-pmh-uat-batch.md`)	👤	✅

S40 done: ✅ Consolidation (d2f52ba) · ✅ Curate 4 agent MEMORY >25KB→<8.4KB (78c9de3) · ✅ RAG catch-up chunk S37-S40 (rerank 0.867) · ✅ AI_INFRA bulletin 2026-05-29 adopt 4/4 (MỤC2 Tiered Memory Policy v1 6f08d1f + MỤC3 /session-start+/session-end slash commands c8ff5e1). ⏳ Full RAG re-index = AI_INFRA op (cần VOYAGE_API_KEY).

⚙️ NEW slash command (.claude/commands/) — anh main restart CLI để activate (không hot-reload) → session sau gõ /session-start + /session-end thay paste prompt thủ công.

✅ Recently Done (newest on top — 3 session; cũ hơn → session logs)

S69 (2026-06-17) — ✅ Văn phòng số (E-Office) port + golive + PE cờ gấp/ngưỡng CCM — 4 deploy prod-verified Run #305→#308 (HMW-mode ON, 2 workflow fan-out)

#305 a8bbdae Văn phòng số foundation (workflow office-puro-foundation 5-agent): sync fe-admin/index.css ← fe-user (đóng drift S66-S68 + gotcha #66 fix) + 3 shared component PageHeader/KpiCard/WidgetCard (×2 SHA256, tái dùng token Hồ sơ NS) + OfficeDashboardPage 2-cột widget kiểu PURO HomePage (reuse data hooks, no BE) + menu key Off_Dashboard (no-mig idempotent seed, giữ ẩn). em main fix KpiCard activeBorder -300→-500 (gotcha #67 — Tailwind accent palette thiếu stop).
#306 c556f6c re-skin TRỌN 10 page (workflow office-puro-reskin-all 7 designer song song write-only + reviewer): Đề xuất(List/Create/Detail)/Đơn từ/Ticket/Danh bạ/Phòng họp/Báo cáo CC → PURO layout + CSS Hồ sơ NS, phẫu thuật giữ 100% logic (reviewer verify mọi api.*/queryKey byte-identical HEAD vs working). em main build-tập-trung + mirror SHA256 ×2 + recover stale-diagnostic (gotcha #68). 9 page fe-user↔fe-admin SHA256-identical.
#307 1f8947e Office golive public (+6 test): SeedAllRolesOfficeModulePermissionsAsync grant read+create 16-key allow-list mọi role (mirror S65 HRM pattern, chạy SAU revoke để thắng). Excluded (giữ ẩn): Off_PhongHop_Manage (admin CRUD) + Off_AttendanceReport (riêng tư) + Off_ChamCong (Cá nhân). reviewer PASS security (cascade-safe: Off KHÔNG phải inherit-root → excluded-3 giữ false; no write-path: controller [Authorize(Roles=Admin)] độc lập menu-key). cicd DB-verify 16/16 × 13 role, excluded-3 = 0, HRM/Personal vẫn ẩn, admin không hạ.
#308 ebd7e1c PE cờ gấp + CCM duyệt-final theo ngưỡng (Mig 53, anh Kiệt FDC sau họp sếp, +14 test): ApprovalWorkflow +CeoApprovalThreshold (admin nhập Designer, null=luồng cũ rollout-an-toàn); ApproveV2Async: actor role CostControl + winnerQuoteTotal (tổng giá NCC chọn) < ngưỡng → DaDuyet bỏ CEO (Q4 theo role). PE +IsUrgentByPro(đỏ)/IsUrgentByCcm(xanh); endpoint PUT /urgent role-gated (PRO/CCM/Admin) + notify CEO (Director) khi bật, visibility-only (Q3 không đổi luồng). FE ×2: Designer ô ngưỡng + PE detail cờ gấp toggle/badge + hint giá-trị-vs-ngưỡng + list badge. Test PeCcmThresholdFinalize 5 (load-bearing: CCM dưới ngưỡng → DaDuyet skip CEO) + PeUrgentToggleAuthz 9. reviewer PASS security. C (sau duyệt → chuyển phiếu đến dự án) chờ anh Kiệt spec form.
§L: 2 gotcha NEW (#67 Tailwind palette-thiếu-stop · #68 stale-diagnostic-background-agent). 2 truncation #53 (impl-backend positional-record DTO mid-fix + impl-frontend) → em main recover-disk + tự viết endpoint cờ gấp (agent chưa kịp) + tự fix 2 CS7036. H2 GATE PASS (1 non-block: PE-CCM-threshold test-covered not standalone-reviewed). State: Mig 53 · 88 bảng · 306 test · 68 gotcha · menu 54 · bundle BgNCjwsG/CBvh0vtf. ⚠️ curate-debt P1: cicd-monitor 65.2KB (worst, trend 41→54→56→61→62→65) + inv-codebase 47 + reviewer 43.5 + impl-be 33. → session log 2026-06-17-S69-vanphong-golive-pe-urgent-threshold.md.

S68 (2026-06-16) — ✅ Hồ sơ NS header chi tiết NV: làm nổi bật + fix tên render đen→trắng — em main solo, 2 deploy prod-verified Run #303-304 (anh UAT realtime, HMW-mode ON)

Bootstrap (/session-start): 2 monitor RE-REPORT CLEAN — 🟫 H1 roster 11/11 model: inherit confirmed trên disk (Harness-8 runtime-landed, hết "pending-restart"), ef-core skill FRESH (Mig 52), plugin 18/15/3; flag 1 stale dep-audit SKILL:153 (64→65) + drift-correction: curate-debt = 4 agent over-cap, không phải 2 (S67 sót reviewer 35.4 + impl-backend 30.7). ⬜ H2 0-orphan · 0-corruption · 5-trục PASS (S67 harvest landed trọn). → em main patch 2 doc-drift 11bc96d (dep-audit 64→65 + root CLAUDE test 263→286).
#303 6983609 header polish ×2 app SHA256: tên NV text-lg→text-xl font-extrabold+drop-shadow-sm · dòng meta text-xs text-white/85 → text-[13px] font-medium text-white (to+đục+dày nét, mã NV font-semibold) · badge trạng thái từ pill trắng-mờ chìm → pill đặc màu theo status (EmployeeStatusColor emerald/amber/slate + chấm bg-current + shadow). Build×2 PASS, bundle D532XZKG/CuFaBoWt, cicd Run #303 PASS.
#304 37752eb fix tên ĐEN→TRẮNG (gotcha #66 NEW): anh UAT báo "tên màu đen nền xanh ko nổi bật" — screenshot: <h2 text-white> render đen dù <div text-white> (meta cùng banner) trắng → diagnose index.css:79 h1,h2,h3,h4{color:#0b1220} viết NGOÀI @layer thắng utility (Tailwind v4: unlayered > all layers). Đo blast-radius (grep '<h[1-4][^>]*text-': ~30+ heading toàn app bị ép #0b1220 dù gắn text-slate/brand) → KHÔNG move @layer (load-bearing), fix ĐIỂM text-white! (grep dist CSS confirm color:var(--color-white)!important) + thu nhỏ text-lg font-bold. Build×2 PASS, bundle CNUv1jxY/CpOskeS1, cicd Run #304 PASS.
§L: 0 production-bug RCA — iter-1 (tên to+đen) = pre-existing black amplified, KHÔNG phải defect mới (bình thường cho UI iterate live UAT, authed page không screenshot dev-rig được gotcha #3). Guard mới = gotcha #66. harvest: cicd self-record ×2 (#303/#304, tự FIFO-trim S74→pointer) + H1/H2 proxy spawn-record (INFORM bootstrap). 0 zero-byte · 0 stray-path. State: Mig 52 · 88 bảng · 286 test · 66 gotcha · menu 53 · bundle CNUv1jxY/CpOskeS1. ⚠️ curate-debt P1: cicd-monitor 44.1KB (worst, +#303/#304). → session log 2026-06-16-S68-hoso-header-name-color-fix.md.

S67 (2026-06-16) — ✅ Hồ sơ NS visual polish (font/màu/list) + fe-admin mirror + PE Link hồ sơ auto-detect/file-link + research auto-open — 6 deploy prod-verified Run #297→#302 (anh + anh Kiệt FDC UAT realtime, HMW-mode ON)

#297 ab4e681 fe-user Hồ sơ NS: đồng nhất font/size (mono value 12→14px) + chữ value/tên đen slate-900→xanh đậm brand-800 (#175685, WCAG-AA ~7.4:1) qua component Field dùng-chung (1 sửa = ~40 ô đổi) + 9 vị trí tên/heading/inline. Label accent giữ.
#298 292d64d fe-admin mirror master-detail: vá index.css (+4 accent palette teal/violet/amberx/greenx + .icon-chip/.app-gradient-brand/.card-accent/.stat-value) TRƯỚC rồi cp page fe-user→fe-admin (1602 dòng, SHA256 identical). Đóng pending lớn nhất HRM go-live. recon investigator-codebase: token-parity gap = bẫy "vỡ màu im lặng" (Tailwind v4 token thiếu → class emit-rỗng).
#299 bcd619d +23 test-after HRM → 286 (45D+241I): DepartmentTreeTests 8 (cây/rollup/inactive/orphan + cycle-guard self/con/cháu-sâu/clear) · PeHoSoLinkTests 9 (persist/null/1000 + update absolute-set — bắt spec-drift: HoSoLink KHÔNG null-safe, gửi null=clear) · HrmProfilePermissionSeedTests 6 (reflection private-static revoke→seed chain). test-specialist truncated return #53 → em main recover-disk (3 file đủ + dotnet test 286 PASS).
#300 91aaf05 list pane gọn + đồng nhất cỡ ×2 app: bảng 3-cột (tràn ngang rail 22rem → thanh cuộn ngang) → flex-row 1-ô/dòng truncate + overflow-x-hidden = hết tràn. Thang cỡ chặt 18/14/13/11px (header text-xl→lg). SHA256 ×2.
#301 6df1b2d PE Link hồ sơ auto-detect (anh Kiệt FDC): http(s)→hyperlink bấm-mở (SharePoint OK) / O:\-ổ-mạng→chữ+nút Copy (navigator.clipboard). SHA256 ×2.
#302 536dd6b Link O:\ render file:// bấm-thử + Copy dự phòng (toFileUrl O:\→file:///O:/). Workflow research 3 investigator-api: default browser CHẶN https→file:// (Chrome/Edge/FF 76+); chỉ Edge GPO IntranetFileLinksEnabled (Edge-only, Intranet Zone, 1 GPO domain zero-per-machine) = one-click thật; .url-download zero-install nhưng 2-click+SmartScreen; extension/registry = per-máy.
§L: 0 RCA (guard giữ — #53 truncate recover, cwd-after-build git-add minor). harvest: 3 sub self-record (cicd/inv-codebase/inv-api) + test-specialist proxy-record (trunc #53). State: Mig 52 · 88 bảng · 286 test · 65 gotcha · menu 53 · bundle CcrZqfht/DniDFUB_. ⚠️ curate-debt: cicd-monitor 39.8KB + inv-codebase 39.4KB over-cap → next session. → session log 2026-06-16-S67-hoso-visual-pe-link-research.md.

S66 (2026-06-16) — ✅ Session-start/end closeout em-main-solo (0 product-sub): adopt Harness-8 all-inherit + cicd-monitor L1 curate + ef-core doc-flush + check-email AI_INFRA

Bootstrap (/session-start): 2 monitor RE-REPORT — 🟫 H1 roster 11=11 clean + plugin 18/15/3 + ef-core SKILL stuck Mig 50 (TRUE 52) ×5 cites drift → flushed; ⬜ H2 0-orphan (S65 PE fan-out fully harvested+committed) + flagged cicd-monitor L1 86.8KB (2.9× cap) P1 GẤP.
cicd-monitor L1 curate 86.8→28.9KB (66% giảm): byte-exact sed move Run #286→#232 → archive/2026-06.md (incl #291 forensic [lesson=gotcha #65] + #383 ex-VỊ-TRÍ-LẠC); baseline + 6 runs #289-#295 giữ; essentials Mig 50→52 + bundle-live S70 #295. Reliability fix (25KB auto-inject cap: trước chỉ ~30% file inject).
H1 doc-flush: ef-core-migration SKILL +Mig 51/52 rows + 5 count-flush (50→52); skills/README.md ×2 + root CLAUDE.md gotcha 64→65 + schema-diagram pending 32-50→32-52.
check-email AI_INFRA: 0 thư mới se-directed (UI/UX guide đã xử lý S58). Phát hiện broadcast MỚI outbox/all → /adap-apply.
adopt Harness-8 (all-inherit + workflow-fastest) [🔴 BẮT BUỘC, PROJECT-FIT 6/6]: 7 sub demoted claude-opus-4-8→inherit (cả 11=inherit, gỡ two-tier H4; SE không có helper/gopher rẻ) + agents/README.md codify (header+S66 note+ASCII) + hmw.js comment (logic vốn defer frontmatter) + adap-report + email-back ai_infra (hash fa7f690d round-trip MATCH). Nấc executed-file VERIFIED-pending-restart. Runtime chưa đổi (inherit=Opus 4.8 vì Fable down H5); giá trị forward-looking + H5.6 restore gọn hơn. H8.2 workflow-fastest codified (song song tối đa, KHÔNG hạ model).
§L: AS scan 0 RCA · harvest GATE PASS 5/5 (no wave) · 2 monitor spawn-record on-behalf · tooling CHỐT (H8 roster change). State THẬT GIỮ NGUYÊN (0 production code): Mig 52 · 88 bảng · 263 test · 65 gotcha · menu 53 · bundle BDwV5d0X/DbVv6rsf. ⚠️ Restart CLI → H8 runtime + reviewer Cat-6. → session log 2026-06-16-S66-closeout-harness8-cicd-curate.md.

S65 (2026-06-16) — ✅ HRM go-live + Hồ sơ Nhân sự master-detail (giống NamGroup) + Department hierarchy + PE Link hồ sơ — ~6 deploy prod-verified Run #289→#295 (anh + anh Kiệt FDC UAT realtime)

#289 public Hồ sơ Nhân sự mọi role (4004481): SeedAllRolesHrmProfileReadPermissionsAsync grant CanRead Hrm+Hrm_HoSo 13 role chạy SAU revoke S58 (upgrade-only nâng false→true row prod đã có; EmployeesController policy-based Hrm_HoSo.Read mở luôn API không hardcode Roles → gotcha #44 family CLEAN). Giữ ẩn Dashboard NS + Hrm_Config*. reviewer PASS 7/7. cicd: non-admin GET /employees 200 (was 403) · POST/PUT/DELETE 403 · DB 13 role CanRead=1.
#290 redesign màu foundation fe-user (c98030f, 14 file): accent palette teal/violet/amberx/greenx (né trùng Tailwind) + .app-gradient-brand/.card-accent/.icon-chip/.stat-value + heading 600→700; Button gradient · Input/Select focus-glow · DataTable thead gradient · Dialog title-bar. brand #1F7DC1 + Be Vietnam Pro GIỮ; variant keys STABLE (build PASS = type-contract intact).
#292 Department hierarchy (0f44d97 + 6ce5803 test-fix, Mig 51 AddDepartmentParentId): ParentId loose-Guid no-FK + GET /departments/tree (ráp cây in-memory + đếm NV active theo User.DepartmentId [EmployeeProfile KHÔNG có DepartmentId] + rollup + cycle-guard HashSet) + Create/Update +ParentId + Update cycle-guard (chặn tự-cha + vòng A→B→A). Picker "Phòng cha" fe-admin (8c8179c, self-service, exclude-self). gotcha #65 (Run #291 CS7036 — build csproj con lọt test-compile, fix +5th arg → Run #292 PASS).
#293 Employee 3-panel + PE Link hồ sơ (318860a Phase B + 5a0aaa4 PE): EmployeesListPage rewrite master-detail (cây tổ chức + list + chi tiết 5 tab, giữ 100% 5 satellite CRUD = 16 endpoint) · Mig 52 AddHoSoLinkToPurchaseEvaluation (PE +HoSoLink hyperlink NAS <a target=_blank rel=noopener> null-safe) + rename "Dự trù PRO"→"Ngân sách PRO" ×2 app SHA256-mirror. Workflow fan-out pe-hoso-link-rename-pro (BE∥FE→review) — FE+reviewer empty-return #53 → em main recover-disk + self-gate (bắt badge sót rename) → feedback_workflow_fanout_reliability.
#294 gốc cây "SOLUTION COMPANY" (ec517f7): gộp "Tất cả phòng ban" + list phẳng thành 1 node gốc công ty (chevron + bấm=tất cả) chứa phòng ban toả xuống (cha-con giống NamGroup).
#295 Employee refine 2-cột + màu (456c7a7): anh góp ý live — layout 2 cột (cây+list TRÁI chồng · detail PHẢI rộng) + tô màu panel chi tiết (accent icon-chip/heading/rail). Designer self-caught 2 bug (accent -800 không có → -700; rail before:content).
Bundle final: admin BDwV5d0X / user DbVv6rsf. State: Mig 52 · 88 bảng · 263 test · 65 gotcha · menu 53. Test 263 unchanged (test-after defer, BE changes 0 test break). → session log 2026-06-16-S65-hrm-golive-employee-masterdetail-pe-link.md.

S64 (2026-06-15) — ✅ Adopt Harness-7 (writing-quality floor) + check-email ai_infra — em main solo, 1 commit

check-email ai_infra: 0 email mới directed-to-se; UI/UX guide (S58) intact (whole-file hash MATCH). Anh chỉ: broadcast cho-mọi-sister ở outbox/all/ (kênh /adap-apply), KHÔNG phải outbox/se/.
Adopt Harness-7 (6afde19, 6 file +106/−1): broadcast mới duy nhất trong outbox/all (13 vs 12 đã applied). Rule canonical rules.md §1.1 (O1 outward tiếng Việt câu-hoàn-chỉnh + đủ-dấu-câu + đúng-ngữ-pháp · O2 asymmetric — nội bộ giữ lối nén §6.4/§6.5 · O3 reviewer Category 6 + lead self-check). README Upgrade S64. adap-report + email se→ai_infra (7e4f91f1 self-verified MATCH). PROJECT-FIT 6/6 áp trọn.
Body-hash lesson (gotcha #61 family): broadcast content_sha256 a4580ea9 verify đầu báo "mismatch" = LỖI CỦA EM (PS5.1 Get-Content -Raw đọc UTF-8-no-BOM bằng Windows-1252 → decode sai tiếng Việt); đọc [IO.File]::ReadAllText UTF-8 → MATCH tuyệt đối. → KHÔNG mis-stamp / tamper (khác adap-request S63 eol=lf vốn class thật). Lesson: verify body-hash trên Windows phải đọc UTF-8 tường minh.
Nấc: rule + reviewer wiring = executed-file · lead self-check = verified-live (session này) · reviewer Category 6 thực thi = verified-pending-restart (agent .md no hot-reload). State unchanged (docs/gov-only): Mig 50 · 88 bảng · 263 test (N/A re-run) · 64 gotcha · menu 53 · RAG 2423. → session log 2026-06-15-S64-harness-7-adopt.md.

S63 (2026-06-15) — ✅ Docs-closeout S60-62 (bù 3 session) + adopt Harness 5+6 + .gitattributes eol=lf — 3 commit em-main solo

Closeout S60-62 (5e6dcc1): drift bắt ở /session-start (git log: docs dừng S59 vs HEAD S62 + Mig 50). Reconcile stray reviewer cwd-misland (2 file con→canonical + pointer no-overwrite, xóa fe-admin/.claude) · commit harvest (cicd MEMORY Run #286 + gotcha #63/#64) · count-flush 4 file (Mig 49→50 · tables 93→88 · test 240→263 · gotcha 62→64 · menu 57→53 · Budget module REMOVED→PeWorkItemBudgets) · session-log bù 2026-06-12-S60-S62-*.
Adopt Harness 5+6 (dbbf89a): H5 model-fallback (SE đã de-facto Opus 4.8 1M do Fable down 06-12 — book caveat agents/README + session-start BƯỚC 0.6; KHÔNG RCA/memory-permanent) · H6 governed-ultracode (H6.1 auto-HMW mode-ON + hmw.js role-less→inherit; H6.7 role/memory-fidelity đã sẵn S49) · 2 adap-report + email ai_infra (8a247984 spec-canonical self-verified, sửa mis-stamp S58).
.gitattributes (08c7036): broadcasts/** eol=lf (ổn định email body-hash cross-checkout) + adap-request federated (mis-stamp CLASS → propose floor eol=lf lên AI_INFRA).
State: test 263 (N/A re-run — 0 code change) · RAG 2423 · lead Opus 4.8 1M (H5 fallback, Fable down). ⚠️ Anh RESTART CLI activate session-start BƯỚC 0.6 + ultra-on H6.1 (command no hot-reload; hmw.js H6.2 đã live). → session log S60-62 + 2 adap-report + 1 adap-request.

S60–S62 (2026-06-12→06-13) — ✅ PE workflow polish + ngân sách per-gói-thầu (Mig 50, XÓA module Budget) + soft-warning vượt NS — 4 commit prod-verified Run ~#283→#286 [docs viết bù S63]

S60 37122f0+6db195d: ràng buộc gửi duyệt đủ 4 thông tin mục 3 (đơn vị được chọn + giá chào>0 + ngân sách + bảng so sánh đính kèm, áp cả Admin) + rename mục 3 "Đơn vị NCC/TP được chọn" + bypass drafter-in-chain V2 bước-đầu (audit 3 tầng) · gỡ hành động "Từ chối" khỏi cả 4 policy (chỉ còn Duyệt/Trả lại, guard chặn TuChoi mọi caller). Test 240→256.
S61 79ef8da Mig 50 ReplaceBudgetModuleWithPeWorkItemBudgets: bảng PeWorkItemBudgets per-gói-thầu (Dự án×Hạng mục, UNIQUE filtered) + XÓA module Budget cũ + drop PE/Contracts.BudgetId + backfill BudgetManual→BudgetPeriod TRƯỚC DropColumn (phiếu UAT giữ số) + bảng "Tổng hợp ngân sách trình ký" 2-block 9-dòng Excel anh Kiệt + nhập role PRO/CCM (Forbidden fail-closed) + XÓA FE budgets pages/types/menu Bg_*. Test → 263 (45D+218I). database-agent advise (no FK vật lý · DropIndex trước DropColumn SQL 5074 · IN-list). gotcha #63 (EF RenameColumn sai-semantics) + #64 (Design-DB 0-rows ≠ Dev-DB data-migrate).
S62 7926c21: vượt ngân sách = cảnh báo mềm (gỡ validator ExpectedRemaining>=0, allowNegative row8, banner amber) — mirror LeaveBalance allow-negative. Reviewer PASS 0 issue. cicd Run #286 bundle admin 0xKYGhhf/user C81ZdG9G, DATA-PRESERVE 8/8 phiếu giữ số (gồm phiếu 1.243.820.600 đ anh Kiệt).
⚠️ docs closeout muộn: 3 session ship code KHÔNG closeout → drift S59→S62 bắt ở S63 /session-start (git log). Reconcile stray reviewer (cwd-misland S62) + count-flush. → session log 2026-06-12-S60-S62-pe-budget-workitem-softwarning.md.

S59 (2026-06-11 chiều→tối) — ✅ Wipe testing data + PE tree 4 tầng + 71 mã PMH + 6 vòng UAT — 10 đợt prod-verified Run #273→#282 (8 PASS + 2 cancelled-benign)

Đợt 1 — wipe (anh Kiệt "xoá các cái testing trước đi em", 56882ac #273): recon → anh chốt scope (AskUserQuestion) → scripts/s59-wipe-testing-data.sql: 10 PE + child 252 + 7 HĐ [DEMO] + 64 notif + 1 AwV2 inactive = 0 · reset PeSeq/CtSeq (generator INSERT-if-missing → mã từ 001) · KEEP master 70/86/22 + users 55 + 7 workflow ghim · uploads orphan dọn. App-recycle KHÔNG resurrect. Team vào testing chiều: phiếu thật đầu tiên = PE/2026/A/001 ✓.
Đợt 2+3 — tree Panel 1 (0eafcd3 #274): v1 "Dự án (Năm) > Hạng mục" theo anh Kiệt → anh chốt follow-up 4 tầng 📅 Năm (DESC) > 📁 Dự án (A-Z) > 🧱 Hạng mục > phiếu. FE-only (list DTO có workItemName S57bis), expand-key v3, SHA256 mirror ×2.
Đợt 4 — dọn 15 mã demo (chị Trà Sol, bbd1554 #275): WorkItems 86→71 (Phần thô/Hoàn thiện/Cơ điện/Khác = mã "tự đẻ") + GỠ HẲN seed demo block DbInitializer (diệt gốc DB-mới) · đối chiếu 71/71 khớp bảng PMH từng dòng · LocalDB Dev sync · bundle FROZEN (BE-only) · recycle giữ 71.
Đợt 5 — rename 71 mã format PMH (anh Kiệt "đúng kiểu vậy", c869d26 #276): VT→MAT-n · TP→SUB-n · MEP-0n→MEP-SUB-n · TB→MEP-EQU-n, Name "STT nhóm tên" ("1 MEP Sub MEP (Full)"). DB-trước-code-sau (gotcha #62: seed per-code idempotent — sai thứ tự = 142 rows; Run #276 verify đúng 71) · sqlcmd -f 65001 + verify data qua API JSON (gotcha #61) · FE sort numeric ×3 · spec provenance sync.
Đợt 6+7 — UAT vòng 1+2 (faed59f #277 + 9c330d2 #278): NEW ui/SearchableSelect (~140 LOC no-lib, fold bỏ dấu "be tong"→"Bê tông", keyboard, clear) áp Hạng mục/Dự án/NCC ×2 form · auto Địa điểm từ Project.Location (track lastAutoLoc, không đè tay) · anh chốt ×2 (AskUserQuestion): ẩn Trả lại+Từ chối khi drafter tự duyệt + quick-add NCC (POST /suppliers any-auth, PUT/DELETE giữ khóa — cicd authz probe live 4/4: 401/201/403/cleanup-204) · upload multiple files (báo giá + bảng so sánh).
Đợt 8-10 — UAT vòng 3-6 realtime (f21c55d #279-cancelled → 69997da #280 → 80b64dd #281-cancelled → 792c030 #282 FINAL): bảng NCC table-fixed + width % từng cột + min-w-860 (file đính kèm tên dài hết vỡ layout, chip/email truncate kích hoạt) · bỏ ô "Tên" ngân sách nhập tay (user không hiểu — chỉ còn Số tiền; hasManual detect theo amount cho phiếu name-null) · GỠ field "Điều khoản thanh toán" khỏi TẤT CẢ form phiếu (Create + HeaderForm + inline-edit, PAYMENT_PRESETS drop −142 LOC; cột per-NCC + display read-only phiếu cũ GIỮ) · bỏ nút "+ Thêm hạng mục" (1 phiếu = 1 hạng mục header, AddItemDialog giữ dead để flip lại). 2 cancelled = Gitea concurrency push-đè khi UAT góp ý realtime — ancestor-verified preserved, pattern #385 S58.
Quality: test 240/240 ×2 local + 8× CI gate · 0/14 spawn truncated (H1×2+H2×2+recon+cicd×9 — verdict-FIRST + scoped prompt works) · 3 SQL script committed vào repo · Suppliers note: GET list = page (đếm thật qua DB 22).
⚠️ Carry: test-after guard suppliers authz + LockDemoSampleUsers · cicd-monitor L1 ~56KB curate monthly. → session log 2026-06-11-S59-wipe-tree-pmh-uat-batch.md.

S58 chiều (2026-06-11) — ✅ Tạm ẩn modules + Danh mục cuối (Run #383) + fe-user redesign guide AI_INFRA (Run #384)

Ẩn + thu hồi quyền (anh yêu cầu từ screenshot eoffice, commit 6c5fd26 → Run #383 PASS): NEW RevokeTemporarilyHiddenModulesAsync — set 4 cờ CRUD=false mọi role TRỪ Admin trên Hrm* + Off* + Personal (menu tự ẩn 2 app; giữ row flip-lại-nhanh khi golive) + grant seed thu hẹp scope (không re-grant). Menu Master Order 20→80 (Danh mục cuối sidebar). Prod verified: non-Admin CanRead=0 · Admin giữ 29 · Pe 120 · Master 48 · menu-tree đối chứng 2 chiều (nv.test mất 3 nhóm, admin còn). User thường eoffice giờ chỉ thấy: Hộp thư · Quy trình chọn TP-NCC · Danh mục (cuối). ⚠️ Mức che = menu + permission matrix; URL gõ trực tiếp chưa chặn (FE không PermissionGuard per-route — chấp nhận "tạm ẩn", note sẵn khi golive flip lại).
/check-email ai_infra: nhận 2026-06-11-ui-ux-design-guide (hash ✓✓ whole-file + body, processed) — UI/UX Design Guide canonical 13 mục (anh-approved, lineage NAMGROUP→BVAAU→AI_INFRA) + FYI lỗi stamp hash email H4-report SE (không tamper — lesson stamp lần send tới) + ACK H4 ACCEPT (SE = sister đầu tiên trọn vòng H4.7 email-back).
fe-user redesign (commit e959f72 → Run #384 PASS): 🩷 frontend-designer 14 file (index.css + 6 ui primitives + 6 shell + LoginPage) — density-first theo guide, BRAND GIỮ #1F7DC1 + Be Vietnam Pro + slate. Variant/size keys + props STABLE, RowActions/RowActionButton additive. Build ×2 PASS. Bundle asymmetric đúng: user CKjwqnGL rotate / admin CP4CB1ym frozen; brand verified trong HTML+CSS prod. ⚠️ Designer truncated #53 lần 2 liên tiếp cùng điểm (trước FD2 screenshot) → em main disk-recover + self-gate (lesson: emit file-list verdict TRƯỚC screenshot loop — ghi MEMORY nó).
Brand polish "thấy rõ" (anh: "có thấy khác gì đâu, trang trí lên 1 tý" — commit ea793a4, 8 file ×2 app, em main solo): dải gradient brand 4px đỉnh app + logo zone sidebar tint brand-50 + PageHeader accent bar dọc + thead mọi DataTable bg-brand-50/60 text-brand-700 + TopBar title semibold. Lý do anh chưa thấy đợt đầu: density tinh tế + PE panels (chỗ anh nhìn) chưa đụng (file shared 111KB).
PE gộp "Tên gói thầu" = chọn Hạng mục công việc (anh Kiệt FDC Zalo 14:06: "hạng mục chính là tên gói thầu, cho chọn chỗ đó" — commit 3ebaf84 → Run #386 PASS): PeWorkspaceCreateView + PeHeaderForm — field "a. Tên gói thầu" Input tay → 1 Select từ 71 hạng mục ([Category] Code — Name), chọn 1 phát set cả workItemId + tenGoiThau (= tên hạng mục); gỡ field "c" S57bis (trùng ý nghĩa). Phiếu cũ: option "Giữ nguyên: «tên cũ»" — không ép, PUT null-safe. NO BE change. SHA256 mirror ×2 app ✓. Run #385 cancelled supersede-benign (cicd ancestor-verified polish intact #386).

S58 (2026-06-11) — ✅ Fix lock-demo-user prod NO-OP + password-seed root-cause — prod-verified Run #382

Commit 5998163 (1 file DbInitializer.cs +28/-5) → Run #382 PASS ~3m31s, prod-verified. Anh: /session-start → bootstrap phát hiện Run #381 PARTIAL (lock NO-OP) + 2 file dirty S57bis → recon → anh chốt 3 quyết định (AskUserQuestion): union+password-fix · giữ chuong.phan-typo · giữ nv.test.
Root cause 2 tầng (🟦 recon dump prod + Dev + git pickaxe): (1) lock list 14 email named-person = population Dev-only — demo prod thật = 20 UAT-matrix {dept}.{nv,pp,tp}@+bod.{1,2}@ tạo TAY 05-13 chưa từng trong code; (2) DemoUserPassword 11 ký tự < prod RequiredLength=12 → CreateAsync silent-fail mọi startup từ trước tới giờ (LogWarning-only) = root cause "helpdesk inert phòng IT 0 user" S56 + 5 real staff thiếu account.
Fix: union 20 email (exact-email, KHÔNG pattern — binh.le@ người thật sát scheme demo) + password → User@1234567 12 ký tự. 🟩 cicd Run #382 PASS: prod Users 55/21 active/34 locked · 20 UAT + 14 named-person locked · nv.cao/nv.truong CREATED+ACTIVE (ops S56 "gán user IT" RESOLVED) · 5 real staff created · guard 6/6 active · nv.test login 200 · bundle FROZEN CP4CB1ym/BmZ3VHnm · Mig giữ 49 · 93 tables.
Closeout kèm: gotcha #59 (PS5.1 git commit -F) + #60 (seed silent-fail vs password policy) NEW · 4 spawn-record on-behalf APPEND (database-agent/implementer-backend/implementer-frontend/reviewer — H2 4-MISS đóng) · H1 doc-drift 5-patch (ef-core +row Mig 49, skills/README, dep-audit, CLAUDE.md root) · menu keys re-ground 57 · test 240 re-verified local · bundle hash curl-verified.
⚠️ Lessons: test xanh + deploy PASS + health 200 ≠ data tồn tại — seed IdentityResult silent-fail chỉ lộ khi dump population env đích (cicd PASS+PARTIAL + recon = tầng bắt được, CI gate không). Trade-off deadline: ship trước, test-specialist guard test sau (test-after, list-data fix).

2 commit 17b23a4 (governance) + dd117b7 (product, 26 file +7.4K) → Run #381 PASS ~4m25s (Run #380 cancelled superseded — đúng). Sếp Zalo 11:02-11:17 deadline 15:00: mapping master data + phân quyền PE all-user + flow tạo phiếu chọn Dự án→Hạng mục→NCC + clear data cũ. Anh chốt: khóa CHỈ user sample · quyền Xem+Tạo · 1 phiếu 1 hạng mục header-level.
Mig 49 AddWorkItemToPurchaseEvaluation (🔵 database-agent design): PE.WorkItemId Guid? loose-Guid KHÔNG FK vật lý (convention PE — ProjectId/SelectedSupplierId đều loose) + IX + validator NotEmpty create-only (DB nullable backward-compat 4 phiếu cũ) + FK-guard AnyAsync(IsActive)→Conflict + UpdateDraft null-safe. WorkItems = catalog GLOBAL → 2 dropdown độc lập, "Dự án (năm) – Hạng mục" = chuỗi ghép. 3 projection LEFT-join.
FE ×2 app: PeWorkspaceCreateView select "c. Hạng mục " + PeHeaderForm (SHA256 IDENTICAL) + PeDetailTabs subtitle. Pe_ all-role: 11 key CanRead+CanCreate=true 13 role (130 rows, upgrade-only — Pe_* leaf KHÔNG nằm MenuKeys.All, build qua factory; PeWf_*/AwV2 GIỮ Admin). Menu "Cá nhân" Personal root@30 + Chấm công re-parent + HrmConfig→Master + Master write-lock Admin,CatalogManager ×3 controller. LockDemoSampleUsersAsync 14 email (→ NO-OP prod, RESOLVED S58). Excel (3) đối chiếu = NO-CHANGE.
Test 228→240 (+12 PeWorkItemGuardTests — finding: NotEmpty() trên Guid? không chặn Guid.Empty → handler guard locked 2 test). Harness-4 runtime-VERIFIED spawn-test 2 chiều (H1 claude-opus-4-8[1m] + H2 claude-fable-5[1m]) + email-back AI_INFRA.
⚠️ Lessons: 2 builder return-truncated #53 (BE trước Mig, FE giữa mirror) + reviewer die-0-byte ×2 (class mới resume-kill) → em main solo vá cross-stack + self-gate evidence-checklist. Session đóng VỘI sau commit → 2 file dirty (gotcha #59 + cicd Run #381 entry) trôi sang S58 harvest. → session log 2026-06-11-S57bis-pe-workitem-perm-golive-prep.md.

S56 (2026-06-09) — ✅ Pre-golive verify sweep + golive-harden 4 fix — HMW 2-workflow, prod-verified

2 Workflow fan-out + 1 code commit a20cde8 → Gitea Run #379 PASS ~4m20s, prod-verified. Anh: /session-start → hỏi NAMGROUP UI density-first → "Tiếp Phase 2 redesign" (dismiss scope → defer) → "kiểm tra lại tính năng + master data, sắp golive" + /ultra-on → "fix hết workflow luôn" → /session-end.
WF1 pre-golive-verify (7 stream song song → adversarial-per-issue): prod-truth(🟩cicd) · schema(🔵database-agent) · 4× logic(🟦investigator) · authz-curl(🟥reviewer). 6/7 PASS · 1 CONCERN(non-blocker) · 0 blocker · 8 issue (adversarial confirm 6 real, refute 2 false-pos). Verdict GO. Insight: phát hiện đáng giá nhất = ops/data, không phải bug code — prod phòng IT (CNTT) tồn tại nhưng 0 active user → ItTicket auto-assign/reassign/SLA-notify đều inert (chỉ live-curl+sqlcmd thấy, test xanh không bắt). + S43 LeaveBalance lost-update còn nguyên + master-data idempotency PROVEN.
WF2 golive-harden (Design→Build→Test→Review∥): #3 LeaveBalance lost-update → database-agent design atomic ExecuteUpdateAsync+Serializable tx (NO migration, exactly-once Status!=DaGuiDuyet:296 nguyên, server-side UPDATE SET UsedDays=UsedDays+n race-free) · #5 ItTicket AssignItTicketHandler authz Forbidden-trước-NotFound (fail-closed, hết existence-oracle) · #6 DocxRenderer null-guard MainDocumentPart+Document (CS8602 2→0) · #4 Travel/Vehicle ApproveV2 +4 smoke test (trước đó 0 coverage).
Test 216→228 (+12). Build 0 warn. Bundle FROZEN admin 4SUwDLD8/user XdKzt9LL (BE-only đúng). Mig 48 unchanged. sys.tables re-ground 92→93 (cicd ground-truth — Mig 48 col-only, prior under-count).
🟥 reviewer stage StructuredOutput-FAIL → em main đỡ cross-stack review (đọc 3 production diff = clean). 🔵 database-agent review PASS nêu 1 MAJOR (tx READ COMMITTED vs convention Serializable + rare auto-create-race) → em main bump IsolationLevel.Serializable đóng nốt + align convention. 🟩 cicd Run #379 PASS: test 228 · health 200 ×3 · bundle frozen verified 3× · endpoint 401 (control 404 chứng minh auth thật) · Mig 48 top.
⚠️ Lessons: (1) workflow-agent StructuredOutput-fail = class mới của agent-return-unreliable → em main đỡ qua git-diff/disk truth (extends feedback_agent_kill_recovery). (2) workflow-agent self-write MEMORY (G-015 residual — sub giữ Write dù MODE-A) → em main verify sane + bundle harvest commit. (3) gotcha #58 NEW. (4) HMW full-cycle: verify→fix→review→em-main-đỡ→re-verify→ship→cicd-PASS — adversarial tách-vai bắt lỗ phụ build+test-xanh không thấy.
🔴 NEXT: 2 ops VPS (gán user IT + tzutil) · FE Phase 2 (recon ready) · Phase 9 Ops · monthly audit 2026-07-01. → session log 2026-06-09-S56-pre-golive-verify-harden.md.

S55 cont. (2026-06-09) — ✅ Phase 1 FE redesign fe-admin (density-first, giữ brand) — HMW-mode ON, prod-verified

Commit 7feb53e → Gitea Run #378 PASS ~4m24s, prod-verified. Anh: /check-email NAMGROUP (nhận bộ quy ước UI density-first) → "thiết kế lại giao diện cho đẹp hơn, tham khảo NAMGROUP, cho designer làm, workflow plan + làm luôn".
🩷 frontend-designer redesign 14 file fe-admin (Phase 1 foundation): index.css density heading-ladder + .label-eyebrow util (drop font-bold) · 6 UI primitive (Button/Input/Label/Select/Textarea/Dialog → text-xs font-semibold, py-1.5 ≤36px, rounded-lg, brand focus-ring) · 6 shell (DataTable sticky-thead+RowActions / Layout brand-rail / TopBar / PageHeader / PhaseBadge / EmptyState) · DashboardPage flagship (KPI cards + brand-50 icon chips + uppercase labels + accent bars).
GIỮ brand #1F7DC1 + Be Vietnam Pro (NAMGROUP nói brand=Solution tự quyết → chỉ mượn cấu trúc density). Visual-only, functionality nguyên (Button variant/size keys stable 51 call-sites, props/forwardRef intact).
🟥 reviewer PASS 0 blocker (regression all-preserved, brand-confirmed index.css:3/22/34, exactly 14 file) — 2 minor a11y defer (slate-400 hint nhỏ). 🟩 cicd Run #378: admin bundle B-d6893W→4SUwDLD8, user XdKzt9LL UNCHANGED (asymmetric FE-admin-only verify), no mig, health 200.
⚠️ 2 agent truncated (designer + reviewer-#1, gotcha #53) → em main recover disk (build+login-visual+diff-review). Dashboard live-screenshot bị chặn dev auth-rig (API HTTPS vs proxy HTTP + protected route) → xem live qua deploy. Designer rig-gotcha #3 logged. ⬜ Phase 2 (Suppliers/Projects/Contracts pages) + Phase 3 (mirror fe-user) pending. → session log 2026-06-09-S55-master-data-import.md (redesign §).

S55 (2026-06-09) — ✅ Nạp master data thật từ Excel + Project +4 cột (Mig 48) — HMW-mode ON, prod-verified

Commit 69cb393 → Gitea Run #377 PASS ~4m33s, prod-verified. Anh: /session-start → giao file Excel "HẠNG MỤC CÔNG VIỆC DỰ ÁN" → "nạp master data vào đi nhé" → /ultra-on "workflow làm xong hết".
Nạp 3 nguồn thật (Excel 7-sheet → loadable): 62 Projects (Mã+Năm; ~6 có CĐT/địa điểm/gói thầu) · 71 WorkItems hạng mục (Vật tư16/Thầu phụ30/MEP9/Thiết bị16) · 3 Suppliers (TRUONGGIANG/TANPHU/TGN). WorkItem master ĐÃ tồn tại → no new table cho hạng mục.
🟨 BE: Project.cs +4 prop nullable (Year/Investor/Location/Package) + ProjectConfiguration maxlen 250/500/300 + Mig 48 AddProjectMasterFields (3-file, 4 AddColumn reversible) + ProjectFeatures DTO/Create/Update +4 + SeedRealMasterDataAsync (62+71+3 tuple-loop per-code idempotent, wired UNGATED line 118 sau SeedCatalogsAsync → reaches prod, coexist demo).
🟧 FE: ProjectsPage.tsx form +4 input (Năm/Chủ đầu tư/Địa điểm/Gói thầu) + bonus cột "Chủ đầu tư" + types/master.ts +4 — 2 app SHA256-identical. npm build ×2 PASS.
Verify: build 0-err · test 216 PASS (compile-fix MasterCatalogFilteredUniqueTests +4 null args, no new test) · runtime Dev proof (data landed, Investor col works) · cicd Run #377 PASS (Mig 48 applied prod · Projects spot-6/6 · WorkItems 71 · Suppliers 3 · CAL01.Investor exact · bundle admin B-d6893W/user XdKzt9LL · health 200).
Decisions (anh chốt): Q1 thêm cột thật+migration (không Note-pack) · Q2 cả 3 → Dev+deploy prod. FLOCK01 collision → per-code skip (demo wins). Prod totals: Projects=70 (62 real+8 demo), WorkItems=86.
⚠️ 2 agent return truncated (implementer-backend + reviewer, gotcha #53) → em main recover qua disk/runtime truth (feedback_agent_kill_recovery); cicd verdict-FIRST → PASS clean. Data-quality catch: MEP col gộp MEP-Sub+THIẾT BỊ divider → split đúng. → session log 2026-06-09-S55-master-data-import.md.

S54 (2026-06-08) — ✅ IT staff tự reassign ticket (cross-stack authz, HMW-mode ON) — 1 commit prod-verified

Commit ca4b602 → Gitea Run #376 PASS ~4m18s, prod-verified. Anh: /session-start → "2 xong sau đó là 1" (task 2 reassign trước, task 1 Phase 9 Ops sau) → task 2 done, task 1 anh dừng → /session-end.
Feature (cho tổ IT tự reassign — KHÔNG chỉ Admin như S53): "IT staff" = User.DepartmentId == Department(Code=="IT").Id (reuse round-robin S52 predicate). Cross-stack, NO migration (DepartmentId reuse), no menu change.
🟨 BE (WorkflowAppsFeatures.cs REGION 5 + ItTicketsController.cs): NEW GetAssignableItStaffQuery→AssignableStaffResult{CanReassign,Staff} capability endpoint ([Authorize] any-auth, trả {false,[]} cho người ngoài → 0 silent-403 chống gotcha #44) + AssignItTicketHandler authz Admin-OR-dept-IT (ForbiddenException) + assignee-must-IT (ConflictException) + controller /assign hạ [Authorize(Roles="Admin")]→[Authorize] (handler enforce fine-grained data-driven).
🟧 FE (2 app): ItTicketsPage.tsx SHA256-identical 4bcaf2f… — REVERSE divergence S53 (cả 2 cùng gate nút by BE-computed canReassign, dropdown từ /assignable-staff thay /users). +2 type AssignableStaff/AssignableStaffResult. npm build ×2 PASS.
🟪 Test (ItTicketReassignAuthzTests.cs): +13 (203→216) test-before-merge SECURITY — GetAssignableItStaff 6 (canReassign matrix + 0-leak empty + inactive-excluded) + AssignItTicket 7 (Forbidden guard-proof by-contrast + Conflict assignee-not-IT + side-effect no-mutation). No prod bug.
🟥 reviewer PASS 0 blocker/0 major/1 minor: điểm chí mạng role-string "Admin" chain-verified real (AppRoles.Admin→SeedRoles Role.Name→JwtTokenService Claim(ClaimTypes.Role)→cu.Roles — decoy "QTV" chỉ ShortName, không vào JWT). Fail-closed verified, defense-in-depth nguyên.
🟩 cicd Run #376: test 216 · bundle admin DfCfHUE9→DmjI8Cmn/user _3S0BPJ2→YxL_MljK (cả 2 rotate) · smoke health 200 + /assignable-staff 401 + /assign 401(body) · Mig giữ 47. Note: 411-bodyless-PUT = IIS Content-Length pre-[Authorize] (không phải routing miss).
⚠️ Residual caught + fixed (em main single-writer): 3 agent (BE/FE/test) ghi MEMORY nhầm src/Backend/.claude/ (cwd-relative Write khi cd subdir) → em main git-status scan bắt stray + reconcile 2 pattern file về canonical + APPEND S54 delta vào 3 canonical MEMORY (harvest B2/B3). → memory feedback_agent_cwd_relative_memory_misland.
📌 flag monthly audit 2026-07-01: cicd đo sys.tables=93 vs STATUS 92 → ✅ RECONCILED S56 (93 authoritative, cicd ground-truth Run #379; Mig 48 col-only added no table — STATUS Current State updated 92→93).
→ session log 2026-06-08-S54-it-ticket-reassign-cross-stack.md.

2 code commit deployed prod: 44b9e54 Task B (Mig 47 FilterMasterCatalogUniqueIndexesByIsDeleted — Department/Supplier/Project filtered-unique Code, gotcha #57 EXT) Run #260 · dbf6648 Task C+D Run #261. Test 200→203 (+3 MasterCatalogFilteredUniqueTests RED→GREEN). Bundle admin DYfjnpY0→DfCfHUE9 (rotated C+D FE) · user _3S0BPJ2 unchanged.
Bootstrap: database-agent verified-runtime (first real spawn since S52 adopt → caught Mig 46 committed-but-unapplied-local drift that 203 SQLite-tests + CI-applied-prod both MISS → bonus closed via Mig 47 deploy applying 46+47 to LocalDB Dev+Design). H1+H2 monitors re-reported (S52 closeout debt cleared; H2 confirmed S52 proxy-append present, 0 orphan).
Task B (Mig 47, Run #260): workflow 🟪 test-specialist → 🟨 implementer-backend → 🟥 reviewer (PASS 0 issues). 3 prod indexes filter_definition NULL→([IsDeleted]=(0)) live. gotcha #57 EXT cumulative now 6× (Holiday 43 + 3 HRM 45 + 3 Master 47) — backlog CLOSED. Root cause: app dup-check AnyAsync(Code==req) đi qua HasQueryFilter(!IsDeleted) (bỏ qua soft-deleted) nhưng bare unique index đếm cả → delete+re-add = UNIQUE-500 reachable.
Task C+D (dbf6648, Run #261): workflow 🟨 implementer-backend → 🟧 implementer-frontend → 🟥 reviewer (PASS 0 issues). C = ItTicket admin reassign dialog (fe-admin only, intentional mirror-break; reuse PUT /assign + GET /users). D = Off_AttendanceReport menu leaf (order 8, no migration — DbInitializer idempotent seed, admin-perm auto via All[], menu-key byte-identical 5 mirror points). Prod: menu row seeded + admin bundle rotated + smoke 200/401.
Doc-drift E: H1 top-5 patched (ef-core skill 43→47, agents/README roster 10→11, CLAUDE.md root 45→47 mig + 186→203 test, docs/CLAUDE.md 56→57 + 91→92 ERD). database-agent adap-report → verified-runtime.
⚠️ cicd-monitor truncated 2× (gotcha #53/#55; C+D verify cut mid-Q3) → recovered via curl-self-verify (Gitea run + bundle hashes public; menu-row from agent's pre-truncation sqlcmd). feedback_agent_kill_recovery reinforced.
→ session log 2026-06-08-S53-gotcha57-ext-p11-cd-closeout.md.

S52 (2026-06-08) — 🎉 Phase 11 product backlog ĐÓNG TRỌN (P11-D+E+F deployed) + database-agent adopt — HMW-mode ON, session-limit recovery

3 commit deployed prod: e9ee97f (database-agent governance .md, CI-skip) + 6a66429 Wave 1 (P11-E+F code) + dcf76f8 Wave 2 (P11-D, Mig 46). Test 186→191→200. Bundle admin DYfjnpY0/user _3S0BPJ2 (cả 2 rotate; deploy verified curl độc lập — không cicd-spawn do limit).
🔌 database-agent adopt (AI_INFRA broadcast 2026-06-08-Agent-database-codebase-agents): floor DB1–DB11 READ-advisory tier (implementer-backend vẫn author file) · skill sql-database-assistant+ef-core-migration · color OMIT (8 standard hết → mirror monitor precedent) · store_memory strip · DB11 RowVersion tie-in vá S43 lost-update gap. codebase-agent SKIP n-a (investigator cover + csharp-lsp Windows no-op). Roster 10→11. Nấc executed-file → 🔴 CHỜ CLI restart verified-runtime. adap-report 5-trường LOCK written.
P11-F MaTicket codegen (Wave 1): WorkflowAppCodeGen.GenerateMaDonTuAsync(db,"IT",clock.Now.Year,...) gen-on-Create (kanban no-workflow, khác Leave/OT gen-on-Submit), IT/2026/NNN Serializable atomic. Migration-free.
P11-E AttendanceReport (Wave 1): GetAttendanceReportQuery monthly aggregate (day-type weekday/weekend/holiday OT × OtPolicy multiplier, classify in-memory không EF-translate .DayOfWeek) + AttendanceReportExcelExporter (ClosedXML, sync no-DB) + 2 endpoint Admin-only + fe-admin AttendanceReportPage (download authed api.get(blob)). Migration-free. Holiday.Date=DateOnly (agent verify source-of-truth, không tin spec mù).
P11-D ItTicket assign+SLA (Wave 2, Mig 46 AddSlaFieldsToItTicket): round-robin least-loaded dept-"IT" (DbInitializer seed dept IT + 2 sample staff nv.cao/nv.truong, ordering sau SeedDemoUsers vì reconcile dept) + SlaDueAt theo Priority (Urgent4/High8/Medium24/Low72h) + ItTicketSlaJob (breach+warning notify, KHÔNG auto-transition — khác Contract) + PUT /assign admin override + FE badge 2-app SHA256 mirror.
⚠️ Session-limit hit giữa Wave 2 (3 agent killed: FE/test/cicd) → recovery (multi-agent resilience proof): Wave 2 BE/test verify-on-disk (build 0-err + 200 test) + em main solo FE redo (gotcha #53-class fallback) + curl-self-verify Wave 1+2 deploy thay cicd-spawn. Lesson: git/disk/prod = source-of-truth, KHÔNG agent return-message.
reviewer (Wave 1) PASS — independent re-verify (build/test/tsc) + gotcha #44 role-string "Admin" disarmed (decoy "QTV"=display-code KHÔNG phải role-name). Wave 2 = em main self-review (seed↔query dept-code cross-check PASS, nv.cao/nv.truong tồn tại) do limit pressure.
→ session log 2026-06-08-S52-phase11-def-close-database-agent.md.

S51 (2026-06-08) — ✅ P11-C Vehicle+Driver catalogs (Mig 44) + gotcha #57 ext 3 HRM catalog (Mig 45) — HMW fan-out, deployed prod

Commit 30a99aa → Gitea Run #371 PASS ~4m18s, verified prod. HMW-mode ON, 7-agent fan-out: 🟦 recon → 🟨 BE ∥ 🟧 FE (parallel file-disjoint) → 🟪 test-before → 🟥 reviewer → 🟩 cicd. RAG/Qdrant DOWN cả session → ground-truth on-disk (đáng tin hơn stale RAG index 05-29).
Mig 44 AddVehicleAndDriverCatalogs — 2 catalog table (Vehicles + Drivers, AuditableEntity), filtered-unique Code day-1 (gotcha #57 từ đầu). Extend HrmConfigs declarative: BE Region 5/6 CRUD (mirror LeaveType) + Controller +2 route-group (8 endpoint, GET public / write Roles=Admin) + MenuKeys +2 +All (auto Admin perm) + DbInitializer idempotent seed 2 veh/2 drv. FE KIND_CONFIG +2 kind ×2 app (SHA256 mirror) + 4-place (types/page/menuKeys/Layout staticMap), :kind-driven (no new App.tsx route). Tables 91→92 (cicd sys.tables ground-truth).
Mig 45 FilterHrmCatalogUniqueIndexesByIsDeleted (bundled gotcha #57) — LeaveType + ShiftPattern + OtPolicy bare .IsUnique() → .HasFilter("[IsDeleted]=0"). OtPolicy BỊ BỎ SÓT khỏi backlog "2 catalog" → em main bắt được khi grep toàn bộ config (= 3 HRM catalog). test-before: +5 HrmConfigFilteredUniqueTests (181→186), RED→GREEN observed.
🟥 reviewer caught 1 MAJOR (pre-commit): Driver FE↔BE required-field mismatch (FE optional vs BE NotEmpty+NOT NULL) — root = inconsistent em-main brief across BE/FE → fixed (FE +required:true). Lesson: parallel fan-out → shared-contract inconsistency chỉ lộ lúc integration; green tests ≠ correct contract.
🟩 cicd Run #371 PASS: test 186 · Mig 44+45 prod · 5 IX_*_Code filtered ([IsDeleted]=(0)) live (3 HRM was NULL) · bundle rotate admin Cg9mvltU/user YgqDvsqr · health 200 · /hrm-configs/{vehicles,drivers} 401 unauth + 200 authed (2 seed each).
gotcha #57 EXT (investigator audit complete): Department/Supplier/Project (Master, confirmed-reachable via global query-filter quirk) → worktree session Mig 46 (3 idx). ContractClause/MeetingRoom/EmployeeProfile = SKIP (not reachable). → session log 2026-06-08-S51-p11c-vehicle-driver-gotcha57.md.

S50 (2026-06-07) — ✅ S49 Harness 1·2·3 verified-runtime closeout (HMW-mode ON · infra-finish, no product code, CI-skip)

/session-start bootstrap → spawned 2 monitor sub (tooling-auditor H1 + harvest-curator H2) RE-REPORT → verified-runtime CONFIRMED (S49 milestone (a) closed). H1 caught 3 doc-freshness drifts → em main patched (plugin 15→18 · skill-index 31→43 mig + 49→57 gotcha · verified-runtime markers). H2 harvest 🟢 clean (0-byte/orphan/corruption=0). Test gate 181 PASS, RAG 2415.
(b) H2 wave-mode VERIFIED — wave-run h2-verify (Workflow Run wf_b7e4d6ef-787, 2-agent: investigator-codebase read-only + test-specialist write-direct). B6 isolation HELD: git status = 6-baseline only (0 canonical/agent-memory leak), sub-MDs gitignored, chunk 2415→2415 (0 rogue RAG write). B4 both-paths exercised. Bonus: gotcha #57 confirmed open + exact coords (LeaveTypeConfiguration.cs:19 + ShiftPatternConfiguration.cs:19 vs fixed HolidayConfiguration.cs:18).
(c) H3 email send-path VERIFIED — /send-email ai_infra handshake → broadcasts/outbox/ai_infra/, body SHA256 c9656c19… self-verified MATCH + _index.md OUTBOUND logged. AI_INFRA /check-email se pull = their step (completes 2-way byte-identical proof).
§L.b(d)(f)(g) session-end: H2 GATE PASS 5/5 + B5 wave-gom (2 sub-MD → agent-memory/{investigator-codebase,test-specialist}). H1 freshness CHỐT (3 drifts patched, 0 new-alloc). 4 sub spawn-records all nấc=verified. Rig fact: Bash subs = /usr/bin/bash not PowerShell → POSIX only. → session log 2026-06-07-S50-harness-verified-runtime.md.

S49 (2026-06-07) — 🌐 AI_INFRA Harness 1·2·3 adopt (HMW-mode ON · governance/infra, no product code, CI-skip)

HMW-mode BẬT (/ultra-on → marker .claude/hmw-mode.on gitignored) → anh /adap-apply harness 1·2·3. Recon fan-out 4 read-only agent @P2 (3× investigator-codebase H1/H2/H3 gap + 1× investigator-api plugin/skill audit · return-delta · 367K tok · ~4m46s) → em main single-writer WRITE ~25 file. Containment audit post-P2: git-diff = 1 file-write (inv-api self-MEMORY, benign verified) + chunk-count 2414=2414 (0 RAG-write) → defense-in-depth proven (sub giữ Bash/Write — G-015).
Harness 1 (Self-observability): roster 8→10 — NEW 2 sub TÁCH BIỆT (anh-mandate) tooling-auditor (H1 tooling/docs-freshness 4-mặt skill·sub-role·plugin·docs) + harvest-curator (H2 harvest-integrity 5-trục), INFORM-only (4 RAG-read, NO store_memory/Write). Wire session-start.md Phase 2.1.1 RE-REPORT + session-end.md §L.b 6→7-step (H2 5-trục GATE + H1 chốt + B5 wave-gom). H3 plugin/skill = gộp-vai doc (0 agent mới — code-modernization/code-reviewer KHÔNG enable).
Harness 2 (wave-folder isolation): hmw.js +wave-mode (subMdPath schema + tool-aware writeGuard) · .gitignore +wave-*/+agent-teams/ (B6 VERIFIED git check-ignore) · NEW .claude/workflows/README.md convention. A agent-team = n-a (Windows in-process, convention-ready).
Harness 3 (email channel): NEW broadcasts/ (outbox/{6 others+all}/ + inbox/{6 others}/ + _index + inbox/README + 13 .gitkeep, committed not-gitignored) + 2 cmd send/check-email (self=se, 6 others short-id {ai_infra,vipix,dyd,namgroup,ashico,bvaau}) + fix adap-apply.md base-path → outbox/all/ (latent bug đóng luôn).
3 adap-report docs/governance/adap-reports/2026-06-07-Agent-harness-{1,2,3}.md (nấc executed-file/verified-pending + evidence + tailored/skip + G-015 honest-caveat). 🟥 reviewer P4 PASS all 3 — no blocker (genuinely tailored not copy-paste · B6 git-check-ignore verified · SHA256 byte-identical · 1 MINOR pre-existing README diagram drift → fixed). Test 181 unchanged (no .cs). 🔴 NEXT: anh restart CLI → activate 2 sub + 2 cmd + hmw.js wave-mode → spawn-test confirm verified-runtime. → session log 2026-06-07-S49-harness-1-2-3-adopt.md.

CLI restart confirmed done (registry has frontend-designer + adap-* cmds + 8 subs sans store_memory) → S47 "verified-pending" upgraded. /adap-apply all-pending = 0 new (all 3 applied S47); /adap-report all-applied → re-assessed + updated 3 reports honest (§C5/G-015).
#1 store_memory strip → VERIFIED-runtime: grep agents tools: = 0 · loaded registry grants 0 store_memory to all 8 subs. NOT "read-only" (subs keep Bash/Write — defense-in-depth caveat holds).
#2 frontend-designer → FD2 loop VERIFIED-RAN (🩷 first real spawn, background): full loop on fe-user /login — DS read (Tailwind v4 CSS-first) → Vite dev → Playwright screenshot 375+1440 → viewed PNGs → FD4 rubric all-PASS → 1-line contrast fix → re-shot → build PASS. em main mirrored fix to fe-admin (parity). 2 Vite-dev rig gotchas + Tailwind-v4 fact in FD MEMORY.
#3 Gov-v2 delta → CLOSED (executed-file): NEW docs/governance/error-ledger.md (blameless RCA E-001..E-004 + Active-Guards 2-strike index + §L.a AS-1..AS-9 deterministic-detect + 3-ledger triad map) + §L.b 6-step wired session-end.md Phase 1.5 (ran live this session = demo).
Code: fe-{admin,user}/src/pages/LoginPage.tsx subtitle text-slate-500→600 (a11y contrast ~7.5:1). Build × 2 PASS 0 TS error. Test 181 unchanged (FE-only, no .cs). Commit 350b2bf → 🟩 cicd Run #369 PASS (~4m13s · bundle admin DPPTx2Kw/user CjoUEsoV rotated · Mig stays 43 · health 200 ×4). → session log 2026-06-02-S48-adap-verify-fd2-error-ledger.md.

S47 (2026-06-02) — 🔌 AI_INFRA adap-* adoption channel + 3 broadcasts (infra/governance, no product code)

Federated adoption channel installed (AI_INFRA relay): 3 slash-commands forked → .claude/commands/adap-{apply,report,request}.md. Read AI_INFRA broadcasts/outbox/ read-only (§J2) → apply own repo → docs/governance/adap-reports/<id>.md (5-field LOCK); AI_INFRA /adap-audit reads cross-repo 2-way. 0 agents spawned (em main solo — governance task).
#1 store_memory strip — removed from ALL 8 subs' tools: → lead (em main) = sole RAG-writer (failure-safe). 4 RAG-read retained ×8. agents/README.md synced + G-015 note (NOT "read-only" — subs keep Bash/Write). Corroborates SE S41 re-bootstrap-loss lesson.
#2 frontend-designer (8th agent, pink) — adopted (user call), forked AI_INFRA canonical FD1–FD10 visual-verification floor (Playwright screenshot ≥2 viewport → rubric → fix). Tailored SE stack + use-existing-DS (#1F7DC1/Be Vietnam Pro) + boundary ⟂ implementer-frontend (design/UX vs mechanical-mirror). memory seed + roster doc 7→8.
#3 Gov-v2 — already-applied S44 (ae30f8f); delta report flags 1 gap (no formal error-ledger/§L.b checklist — defer).
Nấc all executed-file / verified-pending (restart + spawn-test). Test 181 unchanged (no product code). CI-skip (all .md). → session log 2026-06-02-S47-aiinfra-adap-channel.md · memory feedback_aiinfra_adap_channel · restart-batching lesson (front-load .md edits → 1 restart).

S46 (2026-06-01) — 🧹 Memory integrity repair (no code, docs-only)

/session-start audit caught 2 user-memory files at 0 bytes (S45 close-out truncation, gotcha #53): MEMORY.md index + feedback_background_spawn_visibility.md. Empty index = S46 bootstrap chạy KHÔNG có memory auto-inject (degrade thầm lặng).
Repaired (👤 em main solo): rebuilt MEMORY.md index (14 entries: 8 feedback + 3 project + 2 pattern) · repopulate feedback_background_spawn_visibility từ HANDOFF/STATUS S45 ref (marked reconstructed) · NEW feedback_session_end_memory_write_verify (verify byte>0 sau closeout Write). 0 empty .md remain (verified find -size 0).
No production/repo code touched. Memory files ngoài repo (~/.claude/.../memory/) — không git-tracked → repo unchanged từ S45 7fbe05a. Test gate re-confirm 181 PASS (58+123) lúc bootstrap.
Residual: STATUS "27 user memory" stale → corrected 14. Recommend thêm verify-byte-count step vào /session-end skill mechanism (AI_INFRA op per charter v2) — auto-catch class lỗi này.

S45 (2026-06-01) — 🧪 HRM test-gap stabilization + Holiday drift fix (Mig 43)

2 commit 051b62b (Tests) + 0c5a014 (Mig 43) → push → Gitea Run #368 PASS, verified prod. "Stabilize before extend": đóng 3 test-gap deferred S35-S38 TRƯỚC khi chồng schema mới.
+27 test (154→181): Gap1 Holiday composite UNIQUE (7) · Gap2 EmployeeSatellite FK-invariant+soft-delete+cascade (10) · Gap3 gotcha #44 authz regression HrmConfigs+Employees (10). 🟪 test-specialist viết (return truncated gotcha #53 → 👤 em main verify-on-disk + proxy MEMORY).
Mig 43 FilterHolidayUniqueIndexByIsDeleted (👤 em main solo, bug-fix chain): Gap1 test lòi drift — Holiday DB UNIQUE (Year,Date) unfiltered vs handler !IsDeleted → admin xoá+thêm lại ngày lễ cùng date = 500 reachable. Fix .HasFilter("[IsDeleted]=0") (khớp pattern 13× sẵn có). Flip Case 7 assert success. Table vẫn 91 (index-only).
🟩 cicd Run #368 PASS ~4m20s: test gate 181 · Mig 43 applied prod · IX_Holidays_Year_Date filter=([IsDeleted]=(0)) live (was NULL) · FE bundle UNCHANGED Krjvg_3j/6sNStgxa (đúng — BE-only) · health 200 · 0 regression.
🟦 investigator P11-C pre-flight (Vehicle+Driver catalog): chưa có master → extend HrmConfigs +2 kind declarative, Mig 44, giữ VehicleBooking free-text. gotcha #57 caught: LeaveType.Code + ShiftPattern.Code cũng unfiltered (backlog).
gotcha #57 NEW (soft-delete UNIQUE phải .HasFilter). Process: foreground spawn = im lặng = "looks frozen" → đẩy background + report-ngay (feedback_background_spawn_visibility).

S44 (2026-06-01) — 🗓️ Monthly drift audit + AI_INFRA bundle 06-01 adoption (docs-only, CI-skip)

Cadence audit (cron 2026-06-01) + adopt AI_INFRA bundle 06-01 (federated, team chọn full scope). 🟦 investigator-codebase drift scan (read-only, ground-truth verified) → 👤 em main patch. No code touched → 154 test PASS unchanged.
42 count-drift fixes: CLAUDE.md root + docs/CLAUDE.md + ef-core-migration SKILL + dependency-audit-erp SKILL + schema-diagram + database-guide — 40→42 mig · 84/59/55/47→91 tables · 130/111→154 test · 52/49→56 gotcha.
Schema-diagram: migration table extended Mig 17-42 (was stop ở 16) + total 55→91; detailed-§ gap (Mig 27-42 modules) flagged explicit (không silent → deferred backlog). ef-core SKILL migration history extended Mig 27-42.
AI_INFRA bundle: §A RAG T1/T2 auto-ack · §B Gov-v2 align (no new layer) · §C hygiene 7/7 agent-mem L1 ≤16KB, "25KB"→"~30KB tiered" wording ×7 · §D #4 self-sustaining adoption-report step → /session-end (skip #1 đã có / #3 helper) · §E report + §F ledger docs/governance/.

S43 (2026-05-30) — 🔄 Phase 11 P11-B: LeaveBalance business logic (trừ phép + số dư)

Commit 82d7fcf → Gitea #367 PASS ~4m08s, deployed prod. 7-agent (recon → BE → FE ∥ test → reviewer → cicd), agents Max → 0 bug lọt.
Mig 42 AddLeaveBalances (additive): LeaveBalances (User×LeaveType×Year + Entitled/Used/Adjustment, UNIQUE composite + FK LeaveTypes Restrict). 90→91 tables.
Trừ phép: hook ApproveLeaveRequestHandler nhánh terminal DaDuyet — exactly-once (guard chặn re-approve), upsert auto-create từ DaysPerYear, UsedDays += NumDays, Year=StartDate.Year. Policy cho phép âm + cảnh báo (anh chốt).
FK invariant guard (em Max-review thêm sau test reveal): Create + UpdateDraft validate LeaveTypeId tồn tại → ConflictException (đóng cửa, tránh 500 kẹt đơn lúc deduction FK insert).
CQRS LeaveBalanceFeatures.cs: GetMy (self lazy-merge active LeaveType) + GetUser (admin) + Adjust (admin upsert). Embed balance NGƯỜI TẠO vào leave detail (approver xem đúng).
FE: WorkflowAppDetailPage ×2 block "Số dư phép" + cảnh báo vượt (kind=leave, SHA256 identical, tích hợp trang đơn nghỉ — không trang riêng).
Test: 144→154 (+11 LeaveBalance/guard + repair 2 template terminal FK). Reviewer Max PASS (deduction exactly-once + FK fully closed; 2 minor defer: concurrency lost-update no-RowVersion + stale comment).
Verified prod: Mig 42 applied, LeaveBalances UNIQUE+FK ✓, /leave-balances/my 200 → 5 LeaveType lazy-default, bundle rotate.

S42 (2026-05-30) — 🔄 Phase 11 P11-A: wire ApproveV2 + LevelOpinions 4 WorkflowApps module

Commit e7b66cd (Gitea #364) + fix 75df04e (#365) → PASS, deployed prod. Cookie-cutter mirror Proposal (Mig 38). 7-agent end-to-end (recon → BE×3 → FE → test → reviewer → cicd). (Run-id "#250" memory truncated ghi sai → Max re-verify reconcile #364/#365.)
Mig 41 WireWorkflowAppsApprovalV2 (additive): +4 bảng {Leave,Ot,Travel,Vehicle}LevelOpinions (UNIQUE composite + Cascade/Restrict) + WorkflowAppCodeSequences (shared atomic MaDonTu) + 4 cột RejectedFromStatus + enum TravelRequest=9.
BE: 30 handler (LeaveOt + TravelVehicle ApprovalFeatures.cs) — GetById/Update/Submit/Approve(UPSERT+advance)/Reject/Return + verify ApplicableType per module. 8 controller route. Seed 4 WF mẫu (QT-NP/OT/CT/XE-V2-001, AppType 5/6/7/9) — gotcha #51 INFRASTRUCTURE-gated PASS prod.
FE: WorkflowAppDetailPage.tsx declarative 4-kind (admin+user SHA256 identical) — workflow status + opinion timeline + Submit/Approve/Reject/Return actions; gỡ banner skeleton + row nav.
Test: +11 WorkflowAppApproveV2Tests (130→141) — state machine + UPSERT invariant + guards + forbidden + placeholder + codegen. No prod bug.
Verified: Mig 41 applied prod (5 bảng EXIST) · bundle rotate cả 2 app · 4 endpoint live · seed prod · reviewer checklist (no copy-paste bug, [Authorize] OK).
⚠️ Gotcha #53/#55 tái diễn 3× session này (FE + reviewer + cicd-monitor truncate output cuối) — mỗi lần recover qua MEMORY + em main manual verify. Anti-truncation lesson reinforced.
🔬 Max re-review (agents chạy High) phát hiện + fix 2 bug FE picker (chưa commit lúc deploy đầu): (#1) pinWorkflow PUT /{id} partial → 400 validator; (#2) fetch expect array nhưng endpoint trả {types} object → picker rỗng. Fix: thêm endpoint chuyên dụng PUT /{id}/workflow (set workflow only, verify ApplicableType) + sửa fetch mirror PE/Contract data.types.find().history.filter(isUserSelectable). +3 test SetWorkflow (141→144). Bonus phát hiện: ProposalCreatePage (S37) có bug #2 có sẵn → spawn task riêng.
📌 Follow-up minor (non-blocking): known-minor unreachable (Reject/Return actor-check khi CurrentApprovalLevelOrder null) · deploy.yml stale comment "54/17 test" (cosmetic) · test Travel/Vehicle mirror pending (Leave full + Ot smoke có).

S41 (2026-05-29) — RAG corpus cleanup (w/ AI_INFRA)

AI_INFRA RAG audit → SE-side prep: .claude/rag.json exclude root-anchored→**/-anchored (defeats gotcha #10: node_modules/**+docs/_archive/** weren't matching nested paths) + retired stale _decision_log "+321%/11,922".
store_memory reconcile (anti-data-loss, NAMGROUP lesson): unified at-risk rule = content reproducible từ file {exists ∧ matches corpus glob ∧ not excluded}. 5/5 accounted: 3 broadcasts disk-twinned + 16a6b6db audit-response twin-safe + 0307141b S37-S40 catch-up promoted-to-disk (docs/changelog/sessions/2026-05-29-S37-S40-rag-catchup.md — anchor was virtual, not real STATUS section).
AI_INFRA re-bootstrap host-side --config: 3080→2406 (−674 junk), node_modules=0 / _archive=0 / manual-marker=0, user-memory 60 chunks (slug fix). SE post-verify PASS (promoted catch-up returns file-indexed real heading, not (manual)). Commits 282cbd0+e8cbbe5 pushed (docs/infra → CI skip).
⏳ Standing infra backlog (AI_INFRA, non-blocking): bootstrap glob→0 warn · auto_reindex hook fire · search_code corpus gap (src/.cs+fe/.tsx, v0 design) · registry sync.

S40 (2026-05-29) — Init audit + doc consolidation

7-agent smoke verify (🟪 test-specialist + 🟦 investigator-api load OK), RAG re-rank PASS (top 0.8789 Voyage rerank-2.5), 130 test confirm.
Doc consolidation: STATUS 170KB→5.7KB + HANDOFF 224KB→3.4KB (archive full → docs/_archive/). Count re-ground (endpoints 211, FE pages 65, menu ~53; tables 84 confirmed). Stale credential admin@solutionerp.local→admin@solutions.com.vn fixed. CLAUDE.md root patch (mig/table/test).
Curate 4 agent MEMORY >25KB→<8.4KB (~130KB→41KB, foundation preserved + verbatim git). RAG store_memory S37-S40 catch-up chunk. 2 commit push d2f52ba+78c9de3 (docs-only CI skip).

S39 (2026-05-29) — ⚙️ INFRA: Opus 4.8 1M + Multi-agent 4→7 + budget +50%

Pure infra/governance, 1 commit fd0554a (docs CI skip). Model default Opus 4.8 1M. investigator→codebase+api · implementer→backend+frontend · +test-specialist (purple). 5 RAG MCP/agent. 2 gotcha NEW #54 (529 fallback) + #55 (truncation mid-exploration). CLI restart → registry hot-reload (done S40).
→ docs/changelog/sessions/2026-05-29-S36-S39-phase10-complete-7agent.md

S38 (2026-05-28) — 🎊 PHASE 10 COMPLETE 11/11 (SKELETON combo)

Mig 39+40 + BE ~1100 LOC + FE 5 file × 2 app + 8 menu. Run #247 PASS 3m25s. G-O4/O5/O6/P1/H3 skeleton. Trade-off DEFER Phase 11: ApproveV2 wire + LevelOpinions per-module + LeaveBalance + CodeGen atomic + Vehicle/Driver catalog + ItTicket auto-assign/SLA.
→ same session log

🎯 Next up

✅ Phase 11 — Polish/wire skeleton (COMPLETE S52)

✅ P11-A wire ApproveV2 + LevelOpinions 4 module — DONE S42 (prod).
✅ P11-B LeaveBalance business logic — DONE S43 (Mig 42, prod).
✅ P11-C Vehicle+Driver catalog — DONE S51 (Mig 44/45, prod).
✅ P11-D ItTicket round-robin assign + SLA timer — DONE S52 (Mig 46, dcf76f8, prod). Dept-IT pool + ItTicketSlaJob no-auto-transition. Follow-up minor: reassign-UI defer (endpoint /assign sẵn).
✅ P11-E AttendanceReport + Excel + OtPolicy multiplier — DONE S52 (6a66429, prod). Admin-only, weighted-OT-hours (no salary field → quy-đổi-giờ not pay, MVP). Follow-up: menu-key promote (hiện via button).
✅ P11-F CodeGen atomic MaTicket — DONE S52 (6a66429, prod). gen-on-Create IT/2026/NNN.

🔧 Maintenance backlog

RAG re-ingest solution_erp S42-S43 content (store_memory stopgap live; full re-index = AI_INFRA op)
✅ gotcha #57 LeaveType+ShiftPattern+OtPolicy filtered-unique DONE S51 (Mig 45, 3 HRM catalog — OtPolicy bị bỏ sót khỏi backlog "2 catalog", bắt được via grep + test-before 5 case). ⬜ EXT (worktree session, Mig 46): Department/Supplier/Project (Master, confirmed-reachable via global query-filter quirk); ContractClause/MeetingRoom/EmployeeProfile = SKIP (audit-verified not-reachable).
Skill + doc drift audit cron — ✅ 2026-06-01 DONE (S44) — 42 count-drift fixes + AI_INFRA bundle adopt; next 2026-07-01

🚫 Phase 9 Ops (blocked — anh main coordinate)

SMTP email outbound · Rotate prod creds · SQL auto-backup (backup-sql.ps1 ready, chờ Task Scheduler register) · UAT 2-3 user 1 tuần

🚨 Blockers / risks

⚠️ Email SMTP chưa có — blocker notification outbound
⚠️ Credentials trong chat — rotate trước go-live thật
⚠️ SQL backup chưa auto — risk data loss (script ready, chờ register)
⚠️ UAT real user chưa chạy — risk edge-case bug
⚠️ Cert api.solutions.com.vn expire ~2026-07-23 (auto-renew ~06-23)

🔑 Credentials + URLs

Prod login: admin@solutions.com.vn / Admin@123456   (⚠️ rotate sau login đầu)

API prod https://api.solutions.com.vn (/health/live + /health/ready) · dev http://localhost:5443 (/swagger)
Admin FE prod https://admin.solutions.com.vn · dev :8082
User FE prod https://eoffice.solutions.com.vn · dev :8080
Gitea https://git.baocaogiaoduc.vn/vietreport-admin/solution-erp · SSH ssh vietreport-vps
SQL prod .\SQLEXPRESS / SolutionErp · dev (localdb)\MSSQLLocalDB / SolutionErp_Dev

Session history: S0→S39 full detail trong docs/changelog/sessions/ + docs/_archive/STATUS-preS40-fullhistory.md. File này chỉ giữ state hiện tại + 3 session gần nhất.

100 KiB Raw Blame History Unescape Escape