cleanup

README.md

@@ -5,7 +5,7 @@ Foundation release for a modular Manufacturing Resource Planning platform built
 ## Documentation Maintenance
 
 - Keep [CHANGELOG.md](D:/CODING/mrp-codex/CHANGELOG.md) updated for shipped features, workflow changes, and notable operational updates.
-- Keep [README.md](D:/CODING/mrp-codex/README.md), [INSTRUCTIONS.md](D:/CODING/mrp-codex/INSTRUCTIONS.md), [STRUCTURE.md](D:/CODING/mrp-codex/STRUCTURE.md), [ROADMAP.md](D:/CODING/mrp-codex/ROADMAP.md), and [UNRAID.md](D:/CODING/mrp-codex/UNRAID.md) aligned when changes affect their scope.
+- Keep [README.md](D:/CODING/mrp-codex/README.md), [INSTRUCTIONS.md](D:/CODING/mrp-codex/INSTRUCTIONS.md), [STRUCTURE.md](D:/CODING/mrp-codex/STRUCTURE.md), [ROADMAP.md](D:/CODING/mrp-codex/ROADMAP.md), [SHIPPED.md](D:/CODING/mrp-codex/SHIPPED.md), and [UNRAID.md](D:/CODING/mrp-codex/UNRAID.md) aligned when changes affect their scope.
 
 Current foundation scope includes:
 
@@ -31,8 +31,8 @@ Current foundation scope includes:
 - pegged WO/PO supply tracking back to sales demand with preferred-vendor sourcing on inventory items
 - shared shortage and readiness rollups across dashboard, planning, projects, purchasing, and manufacturing
 - admin diagnostics with runtime footprint, record counts, and recent audit-trail visibility
-- admin user management with account creation, activation, role assignment, role-permission editing, and session visibility/revocation
-- safer destructive-action confirmations and recovery messaging across admin, sales, purchasing, shipping, inventory, manufacturing, and attachment workflows
+- admin user management with account creation, activation, role assignment, role-permission editing, session visibility/revocation, review filtering, and unusual-access cues
+- safer destructive-action confirmations and recovery messaging across admin, sales, purchasing, shipping, inventory, manufacturing, projects, warehouse/form editors, and attachment workflows
 - CRM and shipping audit coverage plus startup validation surfaced through the admin diagnostics page
 - backup/restore guidance, richer startup diagnostics, and exportable support bundles in the admin diagnostics workflow
 - backup verification checklist and restore-drill runbook surfaced in admin diagnostics
@@ -42,6 +42,8 @@ Current foundation scope includes:
 
 ## Product Map
 
+Shipped phase history now lives in [SHIPPED.md](D:/CODING/mrp-codex/SHIPPED.md). [ROADMAP.md](D:/CODING/mrp-codex/ROADMAP.md) now tracks remaining work only.
+
 Current completed foundation areas:
 
 - dashboard foundation
@@ -58,14 +60,14 @@ Current completed foundation areas:
 
 Near-term priorities:
 
-1. Deeper session history, filtering, and admin-side access review polish
-2. Extend destructive-action safety coverage into remaining project and form-edit removal workflows
+1. Support-log filtering, retention controls, and broader support-package polish
+2. Revision comparison UX for changed sales and purchasing documents
 
 Revisit / deferred items:
 
 - local Windows Prisma migration reliability
-- deeper session history, filtering, and admin-side access review polish
-- safer destructive-action confirmations and recovery messaging
+- support-log filtering, retention controls, and broader support-package polish
+- revision comparison UX for changed sales and purchasing documents
 
 Dashboard direction:
 
@@ -354,6 +356,7 @@ As of March 15, 2026, the latest committed domain migrations include:
 - inventory transfers and reservations
 - audit trail and diagnostics foundation
 - auth-session visibility and revocation
+- session review filters, unusual-access cues, and startup pruning of stale expired/revoked session records
 - supply pegging and preferred-vendor sourcing
 
 Recent roadmap-driving migrations should always be applied before validating new CRM, inventory, sales, shipping, or purchasing features in a running environment.
@@ -368,8 +371,10 @@ The current admin operations slice supports:
 - prefilled work-order and purchase-order draft launch paths from sales-order demand-planning recommendations
 - shared shortage/readiness rollups across planning, project, purchasing, dashboard, and manufacturing views
 - a dedicated user-management page for account creation, activation, role assignment, password reset-style updates, role-permission administration, and session visibility/revocation
+- session review filters and flagged cues for stale activity, multi-session overlap, and multi-IP access patterns
 - CRM customer/vendor changes and shipping mutations now flow into the shared audit trail
 - startup validation now checks storage paths, writable storage readiness, database connectivity, client bundle readiness, Chromium availability, and risky production defaults during server boot
+- startup now prunes stale expired or revoked auth-session records before serving requests
 - backup and restore guidance now surfaces directly in diagnostics, along with exportable support bundles for support handoff
 - support logs now capture startup warnings, HTTP failures, and server errors for admin-side debugging review
 - backup verification items and restore-drill expected outcomes now live in the admin runbook surface
@@ -377,8 +382,8 @@ The current admin operations slice supports:
 
 Current follow-up direction:
 
-- deeper session history, filtering, and admin-side access review polish
-- extend destructive-action safety coverage into remaining project and form-edit removal workflows
+- support-log filtering, retention controls, and broader support-package polish
+- revision comparison UX for changed sales and purchasing documents
 
 ## UI Notes