docs(integration): record Square auth main promotion

.project-docs/30-worklog/current-state.md

@@ -5,8 +5,9 @@ This file is the integrated default-branch snapshot. Feature tasks record progre
 ## Integrated Through
 
 - Square-auth lifecycle source commit `dc776ff` from feature task
-  `20260819-square-auth-proxy-client-8c4f2a` is integrated on the candidate `main`
-  tree through merge `f52c2c8`. Desktop login, refresh, and logout now use fixed
+  `20260819-square-auth-proxy-client-8c4f2a` was merged as `f52c2c8` and promoted
+  from verified candidate `e7ec12d` to local `main` by integration task
+  `20260819-promote-square-auth-client-73e4c1`. Desktop login, refresh, and logout now use fixed
   Works Square endpoints; Electron Main remains the sole token owner, persists
   rotated credentials before exposing the refreshed session, and keeps the
   existing seven-day inactivity boundary. The client no longer embeds a

.project-docs/30-worklog/tasks/20260819-integrate-square-auth-client-2f7c9a.md

@@ -1,45 +0,0 @@
-# Task: Integrate Square auth proxy into Makelore main
-
-## Identity
-
-- Task ID: 20260819-integrate-square-auth-client-2f7c9a
-- Mode: Integration
-- Branch: codex/20260819-integrate-square-auth-client-2f7c9a-integrate-square-auth-client
-- Worktree: D:\Datas\OthersProjects\makelore-integrate-square-auth-2f7c9a
-- Base commit: 1907924203a1a998182c8e44e8884682ef216d95
-- Owner: codex-root
-- Status: Ready for Integration
-
-## Scope
-
-- Integrate feature commit `dc776ff` from task `20260819-square-auth-proxy-client-8c4f2a` into `main` based at `1907924`.
-- Promote the desktop authentication lifecycle boundary into canonical project memory.
-- Re-run merged-tree authentication and static verification before attempting a default-branch fast-forward.
-
-## Intent And Constraints
-
-- Keep Renderer credential-free and Electron Main as the sole owner of access/refresh token persistence and idle-session cleanup.
-- Route login, refresh, and logout through fixed Works Square endpoints; do not restore the embedded OAuth client secret or direct custom-service refresh.
-- Preserve the unrelated untracked task record in the primary `main` worktree; do not adopt or overwrite another task's work without explicit authorization.
-
-## Outcome
-
-- Merged source commit `dc776ff` into the isolated candidate integration branch as merge commit `f52c2c8` without conflicts.
-- Promoted the Square-owned desktop authentication lifecycle boundary into the canonical current state, architecture flow, system boundary, decision index, and ADR-004.
-- The candidate tree is verified. Local `main` still points to `1907924`; the user explicitly authorized preserving the unrelated task record and transferring its primary-worktree ownership to a separate promotion integration task.
-
-## Verification
-
-- `pnpm exec vitest run tests/unit/works-square-session.test.ts tests/unit/auth-routes.test.ts`: 56 passed.
-- `pnpm exec vitest run`: 184 test files and 2,190 tests passed.
-- `pnpm run typecheck`: passed.
-- `git diff --check`: passed before task-record finalization.
-
-## Follow-ups
-
-- A separate promotion integration task will adopt the authorized primary `main` worktree and fast-forward it to this candidate.
-- Deploy and smoke-test the matching Works Square server endpoints before releasing a desktop build.
-
-## Promotion Candidates
-
-- None; the accepted boundary is already promoted in this integration worktree.

.project-docs/30-worklog/tasks/20260819-promote-square-auth-client-73e4c1.md

@@ -0,0 +1,45 @@
+# Task: Promote Square auth client candidate to main
+
+## Identity
+
+- Task ID: 20260819-promote-square-auth-client-73e4c1
+- Mode: Integration
+- Branch: main
+- Worktree: D:\Datas\OthersProjects\makelore
+- Base commit: 1907924203a1a998182c8e44e8884682ef216d95
+- Owner: codex-root
+- Status: Completed
+
+## Scope
+
+- Fast-forward local `main` from `1907924` to verified candidate `e7ec12d`.
+- Keep the accepted Square authentication boundary and code changes while replacing the candidate integration task record with this promotion task record.
+- Verify the final default-branch tree and project-document ownership gates.
+
+## Intent And Constraints
+
+- Preserve `.project-docs/30-worklog/tasks/20260819-package-learning-off-115-9c4d.md` exactly as authorized; it is not part of this promotion.
+- Do not merge unrelated branches or push to a remote.
+- Keep Renderer credential-free, Main as session owner, and all login/refresh/logout traffic behind Works Square.
+
+## Outcome
+
+- Fast-forwarded local `main` from `1907924` to verified Square-auth candidate `e7ec12d` without conflicts.
+- Replaced the candidate integration task record with this promotion record and updated canonical current state to identify the local `main` promotion.
+- Preserved `.project-docs/30-worklog/tasks/20260819-package-learning-off-115-9c4d.md` as an unrelated untracked file and did not stage, edit, or delete it.
+
+## Verification
+
+- Final `main`: focused Works-session/auth-route suite passed 56/56 using the candidate worktree's lock-equivalent Vitest 4.1.1 binary.
+- Final `main`: TypeScript `--noEmit` passed using the same verified candidate toolchain.
+- Candidate full suite passed 184 test files and 2,190 tests before promotion.
+- `git diff --check` passed.
+- The normal pnpm wrapper stopped before test execution because the primary worktree's existing `node_modules` metadata would require a non-interactive purge; no dependency directory was removed or changed by this task.
+
+## Follow-ups
+
+- Deploy and smoke-test the matching Works Square server endpoints before releasing a desktop build.
+
+## Promotion Candidates
+
+- None; this task promotes an already accepted and documented integration candidate.