docs: reconcile authenticated SSR production state

.project-docs/30-worklog/tasks/20260816-integrate-auth-ssr-9d7e4c2a.md

@@ -0,0 +1,51 @@
+# Task: Integrate authenticated SSR fix into main
+
+## Identity
+
+- Task ID: 20260816-integrate-auth-ssr-9d7e4c2a
+- Mode: Integration
+- Branch: codex/20260816-integrate-auth-ssr-9d7e4c2a-integrate-auth-ssr
+- Worktree: D:\Datas\OthersProjects\NianAIGC-integrate-auth-ssr-9d7e4c2a
+- Base commit: 498c2fa2423abb1706f92f27ef7c1e71fc7345ca
+- Owner: codex
+- Status: In Progress
+
+## Scope
+
+- Integrate completed feature commit `498c2fa` (`20260816-fix-authenticated-ssr-6c3f8a21`) into `main` without mixing unrelated ready or planning tasks.
+- Reconcile canonical project memory with the now-implemented Next.js SSR-to-Go identity boundary and database-free production Web workload.
+- Re-run repository and project-document gates, complete read-only review, and advance the reviewed integration commit to `main`.
+
+## Intent And Constraints
+
+- Use the serialized Integration Gate and this dedicated worktree; do not mutate the occupied `main` worktree before a separately owned final fast-forward step.
+- Integrate only the authenticated SSR fix and necessary canonical-memory reconciliation; the source task record remains read-only in this task baseline.
+- Preserve accepted ADR-003 and DEP-001 semantics: production Next.js serves pages/SSR and calls Go over internal HTTP; Go owns database-backed authorization and the Web workload receives no database credentials.
+- Treat the diagnosis promotion candidate as satisfied by the public-seam regression suite and retain a durable deployment commitment for authenticated SSR smoke testing.
+- Do not merge the unrelated provider-settings or other ready task branches.
+
+## Outcome
+
+- Completed feature commit `498c2fa` is the verified baseline of this Integration Gate; its source task record remains unchanged.
+- The user confirmed that `https://nianxxaigc.nianxx.cn` is the production environment and that the currently running revision is the first deployment. Canonical memory is therefore being reconciled as a live production remediation, not as a future first deployment.
+- Canonical current state, task history, system overview, module map, data flow, and commitments now describe the implemented production SSR-to-Go identity bridge, database-free Web workload, local direct-store fallback, and required authenticated `/create` rollout smoke test.
+- No unrelated ready/planning task branch was merged. Creating the reviewed integration documentation commit and advancing it to `main` remain the final steps.
+
+## Verification
+
+- Source feature final `sol_reviewer`: PASS for Standards and Spec.
+- `cmd /c npm.cmd test` — 58 files and 183 tests passed on commit `498c2fa` in this integration worktree.
+- `cmd /c npx.cmd tsc --noEmit --incremental false` — passed.
+- `cmd /c npm.cmd run deploy:check` — `ACK manifest assertions passed (9 files)`.
+- `cmd /c npm.cmd run build` — Next.js 15.5.18 production build passed; `/create` remains dynamically server-rendered.
+- Canonical-memory reconciliation ran `git diff --check` successfully and touched only the six authorized canonical files.
+- `uv run python .../check_project_docs.py` — passed in the correctly based integration worktree.
+- `uv run python .../check_doc_drift.py --task-id 20260816-integrate-auth-ssr-9d7e4c2a` — passed; only this integration task record and authorized canonical documents changed relative to `498c2fa`.
+
+## Follow-ups
+
+- Build and publish the updated Web image, apply the checked-in ACK configuration, and complete the open authenticated `/create` smoke-test commitment before declaring the production remediation complete.
+
+## Promotion Candidates
+
+- None. This integration applies the already accepted ADR-003/DEP-001 boundary and records the remaining deployment verification obligation.