cleanup

CHANGELOG.md

@@ -6,9 +6,12 @@ This file is the running release and change log for MRP Codex. Keep it updated w
 
 ### Added
 
+- Session review cues on admin auth sessions, including flagged stale activity, multi-session counts, and multi-IP warnings
+- Session filters and text search for admin-side access review across user, email, IP, user agent, and review reasons
 - Shared destructive-action confirmation dialog with impact and recovery guidance for high-risk operational actions
 - Typed confirmation for sensitive admin actions such as account deactivation, current-session revocation, and terminal manufacturing/inventory postings
 - Destructive-action confirmation and recovery coverage for sales approvals, quote conversion, purchase receiving, purchase status changes, and shipment status changes
+- Destructive-action confirmation coverage for project customer/document unlinking and embedded form-row removals in sales, purchasing, inventory, and warehouse editors
 - Persisted auth-session tracking with admin visibility into active, expired, and revoked sign-ins
 - Admin-side session revocation controls plus server-side logout that invalidates the current JWT-backed session
 - Shared shortage and readiness rollups across dashboard, planning, project detail, purchasing detail, and manufacturing detail
@@ -51,7 +54,9 @@ This file is the running release and change log for MRP Codex. Keep it updated w
 
 ### Changed
 
-- Admin, sales, purchasing, shipping, inventory, manufacturing, and attachment workflows now use explicit destructive-action confirmation and recovery messaging instead of immediate irreversible clicks
+- `ROADMAP.md` now tracks remaining work only, and shipped phase history now lives in `SHIPPED.md`
+- Admin diagnostics now summarizes sessions that need review, and startup now prunes old expired or revoked auth-session records
+- Admin, sales, purchasing, shipping, inventory, manufacturing, project, warehouse, and attachment workflows now use explicit destructive-action confirmation and recovery messaging instead of immediate irreversible clicks
 - Admin operations now combine user management with live session visibility so operators can inspect and revoke sign-ins without changing user records
 - JWT authentication now validates against persisted session records and inactive users lose access immediately instead of waiting for token expiry
 - The dashboard now treats Projects as a live first-class module alongside CRM, inventory, sales, and shipping