docs: record account permission UI integration

.project-docs/30-worklog/tasks/20260902-integrate-account-permission-ui-e4c8a17b.md

@@ -0,0 +1,54 @@
+# Task: Integrate account permission UI fix
+
+## Identity
+
+- Task ID: 20260902-integrate-account-permission-ui-e4c8a17b
+- Mode: Integration
+- Branch: codex/20260902-integrate-account-permission-ui-e4c8a17b-integrate-account-permission-ui-e4c8a17b
+- Worktree: /Users/inmanx/Documents/lwltAPI-integrate-account-permission-ui-e4c8a17b
+- Base commit: a618d3dd9fd8aa4e6f9a22e81b9b65452185b86a
+- Owner: codex
+- Status: In progress
+
+## Scope
+
+- Integrate source commit `b26001e039eaee51a3588f06194e0db9d8c72457` from task `20260902-account-permission-ui-6c9e21ad` into the latest `origin/main` baseline.
+- Keep the source task record intact on its source branch, merge the account-permission UI correction and regression coverage, and record the integrated commit in canonical current state.
+- Run the required project-document and full repository verification, then advance `origin/main` with normal non-force pushes and verify its final commit.
+
+## Intent And Constraints
+
+- The user explicitly authorized merging the completed account-permission UI fix into `main` and pushing it to the repository.
+- Preserve AUTH-001, all three roles, all 18 route-grant semantics, account ownership, APIs, and runtime behavior; this integration changes only the task-permission editor presentation, cache token, and regression coverage.
+- Keep every operation inside the exclusively owned integration worktree because the main checkout remains owned and contains another task's record.
+- Do not read `.env`, deploy, restart services, access ERP, or mutate real accounts, tasks, channels, database state, or other external runtime state.
+- Use a normal non-force push only after confirming `origin/main` has not advanced beyond the recorded base.
+
+## Outcome
+
+- Verified that source commit `b26001e` is the sole commit above `origin/main` and that `origin/main` is its direct ancestor; the six-file source diff passed `git diff --check`.
+- Merged the source branch without conflict through merge commit `336ca6e7de9aba1123451a066902a520a3963563`, keeping the source task record on its source branch as required by the Integration Gate.
+- Added the source and merge facts to canonical current state without changing AUTH-001 or business rules because the source task has no promotion candidate and preserves authorization semantics.
+- The fully merged tree passed repository hygiene, type checking, control-plane and legacy regressions, and production build; remote synchronization is in progress.
+
+## Verification
+
+- Source task verification: focused account authorization 11/11, control plane 159/159, legacy 265/265, repository/type/build checks, and desktop/narrow browser geometry and pointer-interaction checks passed.
+- Integration source audit: `origin/main` was `a618d3dd9fd8aa4e6f9a22e81b9b65452185b86a`, source was `b26001e039eaee51a3588f06194e0db9d8c72457`, and `git merge-base --is-ancestor origin/main <source>` passed.
+- `node --run check:repo`: 10 passed, 0 failed.
+- `node --run check`: passed.
+- `node --run test:control-plane`: 159 passed, 0 failed.
+- `node --run test:legacy`: 265 passed, 0 failed.
+- `node --run build`: passed.
+- `check_project_docs.py`: passed.
+- `check_doc_drift.py --task-id 20260902-integrate-account-permission-ui-e4c8a17b`: passed after retaining the source task record only on its source branch.
+- `git diff --check` passed, and conflict-marker scanning returned no matches.
+- Final remote-ref verification is pending.
+
+## Follow-ups
+
+- No runtime rollout is included; a service restart or deployment remains separately authorized work if needed.
+
+## Promotion Candidates
+
+- None recorded.