docs: reconcile dashboard query integration

.project-docs/30-worklog/current-state.md

@@ -4,6 +4,7 @@ This file is the integrated default-branch snapshot. Feature tasks record progre
 
 ## Integrated Through
 
+- Source commit `5cbd8f1` from feature task `20260903-dashboard-refresh-no-data-b4e82f1a`, integrated as merge commit `b11dc7b`, for lightweight leadership-dashboard candidate reads that exclude full `operation` JSON, hydrate only the compact `action`/`kind`/`mode` shape needed by unresolved legacy classification, and retain complete payloads only for keyword search and current-page detail.
 - Integration task `20260909-business-instruction-batch-child-7e3c1a94` synchronized operator input catalog/DOCX `0.5.127` with all 19 system routes, adding the copyable `散拼团多个新增子单` entry while keeping that route Program-only and leaving the five Skills at `0.5.126`.
 - Source commit `be17f6c` from feature task `20260908-leader-webhook-api-7c4e9a12`, integrated as merge commit `295409b`, for organization-level external Webhook delivery of privacy-bounded leader summaries, migration `023_leader_summary_webhook_delivery`, and AUTH-005's one-attempt accepted-versus-delivered boundary.
 - Source commit `6ac90f8` from feature task `20260908-shared-child-batch-create-4e7c2a91`, integrated as merge commit `0d20544`, for Program-only `shared_child_order_batch_create`, parser `v1.0.7`, migration `022_shared_child_order_batch_create`, complete pre-write target enumeration, deterministic stop-on-first-non-success execution, and extension `0.5.170`.
@@ -43,7 +44,7 @@ This file is the integrated default-branch snapshot. Feature tasks record progre
 
 ## Current Focus
 
-Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, Skills `0.5.126`, business-instruction `0.5.127`, roster normalizer `v1.4.0`, and migrations through `023_leader_summary_webhook_delivery` safely. The machine registry and operator input catalog contain 19 routes; the external Agent remains limited to its original 18 and the two passenger-list routes plus shared-child batch creation are Program-only. Administrators manage accounts, channels, employee grants, parser routing, automation settings, and audit but never enter the task data plane. Team leads/users own normal task operations through immutable assignment; same-account work remains FIFO and single-active while distinct accounts are independent. Team leads alone receive the read-only assignee-based dashboard. Future privacy-bounded organization summaries use one protected external Webhook and a separate encrypted one-attempt outbox, not a leader AgentBus route. Database migration, extension reload, route grants, service rollout, live ERP validation, and any external Webhook canary remain separately authorized runtime work. Server-side automatic extension updating is not part of the active main line.
+Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, Skills `0.5.126`, business-instruction `0.5.127`, roster normalizer `v1.4.0`, and migrations through `023_leader_summary_webhook_delivery` safely. The machine registry and operator input catalog contain 19 routes; the external Agent remains limited to its original 18 and the two passenger-list routes plus shared-child batch creation are Program-only. Administrators manage accounts, channels, employee grants, parser routing, automation settings, and audit but never enter the task data plane. Team leads/users own normal task operations through immutable assignment; same-account work remains FIFO and single-active while distinct accounts are independent. Team leads alone receive the read-only assignee-based dashboard, whose range-wide candidate pass stays lightweight and reserves full operation/result hydration for search and the current page. Future privacy-bounded organization summaries use one protected external Webhook and a separate encrypted one-attempt outbox, not a leader AgentBus route. Database migration, extension reload, route grants, service rollout, live ERP validation, and any external Webhook canary remain separately authorized runtime work. Server-side automatic extension updating is not part of the active main line.
 
 ## Recently Completed
 
@@ -79,6 +80,7 @@ Operate the repository's current extension `0.5.170`, Program parser `v1.0.7`, S
 - 2026-09-08: Replaced only the leader-summary AgentBus transport with an organization-level external Webhook. AUTH-005 and migration 023 retain future-only encrypted/privacy-bounded projection, mark only strict gateway success as accepted rather than delivered, and terminate rejected or uncertain attempts without automatic retry.
 - 2026-09-08: Removed the deleted external project-document Skill and task-registry requirement; repository-local Git worktree checks and `.project-docs/` remain the active collaboration and memory boundary.
 - 2026-09-09: Advanced the operator input catalog and generated DOCX to `0.5.127`, covering all 19 routes with a new copyable Program-only `散拼团多个新增子单` section while leaving Agent Prompt and Skill packages unchanged.
+- 2026-09-09: Integrated the missed dashboard candidate-query correction so normal date-range reads no longer load complete operation JSON before pagination; unresolved legacy classification receives only its compact required fields, while keyword search and current-page detail keep their existing fidelity.
 
 ## In Progress
 

.project-docs/30-worklog/task-history.md

@@ -17,3 +17,4 @@ This is integrated history. Feature tasks write only their task-scoped records;
 | 2026-09-08 | Shared-child batch creation | Added the nineteenth machine route as Program-only, complete pre-write parent enumeration, ordered stop-on-first-non-success execution, parser `v1.0.7`, migration 022, and extension `0.5.170`. | [Feature task](tasks/20260908-shared-child-batch-create-4e7c2a91.md) |
 | 2026-09-08 | Leader-summary external Webhook | Replaced only the AgentBus summary transport with an organization-level encrypted one-attempt Webhook outbox, migration 023, strict accepted-versus-delivered semantics, and AUTH-005. | [Feature task](tasks/20260908-leader-webhook-api-7c4e9a12.md) |
 | 2026-09-08 | Repository-local project-document governance | Removed the deleted external Skill/task-registry dependency while preserving Git worktree safety checks and `.project-docs/` as canonical memory. | [Integration task](tasks/20260908-remove-maintain-project-docs-requirement-6d8a31f2.md) |
+| 2026-09-09 | Leadership dashboard candidate payload correction | Integrated the previously missed lightweight candidate projection: full operation JSON is excluded before pagination, unresolved legacy classification loads only compact fields, and complete payloads remain search/page scoped. | [Integration task](tasks/20260909-integrate-all-current-changes-8e4c2a71.md) |

.project-docs/30-worklog/tasks/20260909-integrate-all-current-changes-8e4c2a71.md

@@ -0,0 +1,52 @@
+# Task: Integrate all current changes and push main
+
+## Identity
+
+- Task ID: 20260909-integrate-all-current-changes-8e4c2a71
+- Mode: Integration
+- Branch: main
+- Worktree: /Users/inmanx/Documents/lwltAPI
+- Base commit: f0682eea38a87d07b212486a3223c3e2b0a81958
+- Owner: codex
+- Status: Ready to Push
+
+## Scope
+
+- Audit all linked worktrees and local branches against current `main` and `origin/main`.
+- Preserve unknown or unrelated dirty work without stashing, resetting, cleaning, moving, deleting, or silently adopting it.
+- Integrate every distinct, completed, ready-for-integration change into `main`, resolve shared-file conflicts semantically, run repository verification, and push `main` to `origin/main` without force.
+
+## Constraints
+
+- Treat historical diagnosis, rollback, superseded, and patch-equivalent branches as audit context rather than automatic merge candidates.
+- Do not read `.env`, run production migrations, deploy/restart services, reload extensions, access ERP, mutate runtime data, or send external messages.
+- Ask the user before resolving any conflict that changes product behavior, architecture direction, or an accepted decision without a clear existing source of truth.
+
+## Outcome
+
+- Audited 43 linked worktrees and 50 local branches against `main`. Historical diagnosis, rollout, recovery, reverted architecture, superseded integration, patch-equivalent feature branches, and unrelated dirty worktrees were preserved without stashing, resetting, cleaning, moving, deleting, or adopting their changes.
+- Identified one distinct completed product change that remained absent from `main`: source commit `5cbd8f1` from task `20260903-dashboard-refresh-no-data-b4e82f1a`.
+- Integrated that source as merge commit `b11dc7b`. The sole conflict was the dashboard actor join: resolution keeps the active immutable-assignee model from AUTH-004 while removing full `operation` JSON from normal range-wide candidates.
+- Normal candidate reads now omit the full operation payload. Only unresolved legacy rows receive the compact `action`/`kind`/`mode` operation shape required for classification; keyword search and current-page detail retain complete payload fidelity.
+- Added the source task record and immutable timeout evidence to the mainline, then reconciled current state, data flow, task history, and the evidence index.
+- No other ready, distinct product change remained after the branch/worktree audit.
+
+## Verification
+
+- Refreshed `origin` successfully before integration and confirmed local `main` and `origin/main` were both `f0682eea38a87d07b212486a3223c3e2b0a81958`.
+- `git diff --check` and the active-tree merge-marker scan passed.
+- Focused leadership-dashboard regression passed, 5/5.
+- `node --run check:repo` passed, 10/10.
+- `node --run check` passed.
+- `node --run test:control-plane` passed, 183/183.
+- `node --run test:legacy` passed, 278/278.
+- `node --run build` passed.
+- Final remote synchronization and post-push hash verification are pending.
+
+## Follow-ups
+
+- After a separately authorized service rollout/restart, repeat the authenticated 30-day leadership-dashboard request and compare it with the previously successful seven-day baseline. This repository integration does not restart the service or access live task data.
+
+## Promotion Candidates
+
+- None; accepted source facts are promoted directly by this Integration task.