docs: record account system deployment

.project-docs/30-worklog/tasks/20260901-integrate-account-system-7b2f4d.md

@@ -8,7 +8,7 @@
 - Worktree: /Users/inmanx/Documents/lwltAPI-integrate-account-system-5e8c1a
 - Base commit: 191c1a1aad6f4bb1651143df3e0c1dc98dcd09e0
 - Owner: codex
-- Status: Planning
+- Status: Completed
 
 ## Scope
 
@@ -29,16 +29,39 @@
 
 ## Outcome
 
-- Not completed.
+- Preserved and committed the prior main-sync task record under its original task ownership, released that worktree cleanly, and fast-forwarded the integration base without deleting or adopting foreign changes.
+- Integrated source commit `375fda1` as `191c1a1`, excluding the unrelated roster-workbook and other peer feature tasks. Local `main` was fast-forwarded through `ffda0d5` before runtime migration.
+- Accepted `AUTH-001` and updated the canonical decision index, architecture, data flow, business rules, current state, and evidence index for the fixed internal scope, `admin`/`team_lead`/`user` roles, owner isolation, leadership dashboard, creator/input audit, archive/restore, and non-admin task-route allowlists.
+- Applied migrations `015_account_roles_and_task_audit`, `016_team_lead_operations_dashboard`, and `017_user_business_route_authorizations` to the configured standard database. The existing account migrated as `admin`; no non-admin grant rows were invented.
+- Restarted only the standard `127.0.0.1:8786` control plane. The old server released the listener after `SIGTERM` but remained blocked by long-lived connections; after the new server was listening and the old PID no longer owned the port, the old process tree was force-cleaned. PID `80644` is the sole current 8786 listener.
+- Opened the standard `/accounts` page in the application browser and confirmed the deployed task-authorization panel, operations-dashboard navigation, and versioned application asset. The existing browser session was expired, so no real credentials were read, reset, or submitted.
+- Did not access ERP, trigger business execution, reload the extension, send external messages, or push to the remote repository.
 
 ## Verification
 
-- Not run.
+- `node --run check:repo`: 10/10 passed on the integrated tree after canonical updates.
+- `node --run check`: passed.
+- `node --run test:control-plane`: 153/153 passed.
+- `node --run test:legacy`: 256/256 passed.
+- `node --run build`: passed.
+- `node --check LianSyn-platform/app.js`: passed.
+- `git diff --check`: passed.
+- `check_project_docs.py`: passed.
+- `check_doc_drift.py --task-id 20260901-integrate-account-system-7b2f4d`: passed before final task-record completion.
+- Migration command applied exactly 015–017; a second startup migration reported no pending versions.
+- `/health/live`: HTTP 200 with `ok=true`.
+- `/health/ready`: HTTP 200 with `database=true`, `schema=true`, and required migration `017_user_business_route_authorizations`.
+- Aggregate read-only database verification: one `admin` account, zero team-lead/user accounts, and zero explicit task-route grant rows.
+- `/accounts` and `/operations-dashboard`: HTTP 200; unauthenticated `/api/accounts` and `/api/operations-dashboard`: HTTP 401.
+- Deployed DOM: `任务类型授权`, `保存授权`, and operations-dashboard navigation are present; `app.js` is loaded with `20260901-business-authorization-1`.
+- Process check: only PID `80644` listens on `127.0.0.1:8786`.
 
 ## Follow-ups
 
-- None recorded.
+- The existing administrator should sign in and create representative team-lead/user accounts, assign narrow task grants, and run the non-ERP staging checks recorded in current state. Login was intentionally not simulated because the existing session had expired and this task did not access or reset real credentials.
+- AgentBus remains enabled but disconnected with no active channels, matching the pre-restart readiness state; reconnect/channel configuration was outside this account-system integration.
+- Remote `origin/main` was not pushed because the request authorized synchronization to the local main branch and restart, not a remote repository write.
 
 ## Promotion Candidates
 
-- None recorded.
+- Applied during this Integration task as `AUTH-001` plus canonical architecture, data-flow, business-rule, current-state, and evidence updates; no unresolved promotion remains.