docs(makelore): record platform auth rollback

.project-docs/30-worklog/tasks/20261011-integrate-rollback-makelore-c9d8e7f6.md

@@ -0,0 +1,98 @@
+# Task: Integrate Makelore platform SSO rollback
+
+## Identity
+
+- Task ID: 20261011-integrate-rollback-makelore-c9d8e7f6
+- Mode: Integration
+- Branch: codex/20261011-integrate-rollback-makelore-c9d8e7f6-integrate-makelore-rollback-c9d8e7f6
+- Worktree: C:\Users\7brot\.codex-worktrees\makelore\20261011-integrate-rollback-makelore-c9d8e7f6
+- Base commit: f2a0eefc9ec5dfc2a09c15745b4786bc61682968
+- Owner: codex
+- Status: Ready for Integration
+
+## Scope
+
+- Integrate the completed Makelore rollback commit `e28beff` from
+  `20261011-rollback-makelore-platform-auth-7c4e9a2b` onto the local `main`
+  baseline `f2a0eefc9ec5dfc2a09c15745b4786bc61682968`.
+- Reconcile the canonical OIDC claims in ADR-004, the decision index, data
+  flow, system overview, and current state so they describe the restored
+  Works Square legacy login boundary after this rollback.
+- Preserve the original SSO source and former integration task records as
+  historical evidence. The three known primary-checkout task documents are
+  outside this worktree and must remain byte-for-byte unchanged and excluded
+  from the integration commit.
+
+## Intent And Constraints
+
+- The user explicitly authorized the account-iteration rollback and local
+  integration. This task changes only the Makelore client rollback and its
+  canonical project-memory reconciliation; it does not touch one-feel,
+  Yuxi, LMS, payment behavior, real accounts, deployment, or remotes.
+- Source task records and peer worktrees are read-only. Do not reset, delete
+  branches, clean unknown files, or alter the Makelore primary checkout.
+- Keep the existing Works Square password/mobile facade, refresh, logout, and
+  remembered-password boundary as the current desktop authentication contract.
+
+## Project Context Loaded
+
+- Concurrent Task Gate: Passed. `check_project_docs.py` passed; this task
+  owns the isolated managed worktree and the integration lock.
+- Planning Gate: Passed after reading `read-before-planning.md`,
+  `memory-index.md`, this task record, project positioning, current state,
+  decision index, system overview, and the completed rollback source record.
+- Relevant peer scope: the rollback source is ready for integration and its
+  only canonical conflict is the now-stale platform OIDC description. Other
+  active Makelore tasks concern unrelated product areas and do not overlap
+  these authentication or canonical-memory paths.
+
+## Implementation Plan
+
+1. Cherry-pick the completed rollback commit and confirm only the documented
+   client, test, and README paths are reversed.
+2. Restore the canonical authentication description to the pre-OIDC
+   Works Square boundary, then add a current-state entry for this rollback
+   with source, verification, and the unresolved future SSO decision.
+3. Run whitespace, project-document drift, and focused regression checks that
+   distinguish restored legacy authentication from removed platform OIDC.
+4. Record the integration outcome, verification, preserved primary contents,
+   and follow-ups in this task record; complete the integration registration.
+
+## Outcome
+
+- Cherry-picked rollback commit `e28beff` as `45198ae`; the Makelore client
+  application, focused tests, and README now match the pre-SSO code baseline.
+- Reconciled ADR-004, the decision index, data flow, system overview, and
+  current state to make the Works Square legacy password/mobile login,
+  refresh, and logout boundary current again. The prior OIDC records remain
+  historical source evidence and are explicitly marked as superseded in the
+  current-state entry.
+- The Makelore primary checkout was not edited by this task. Its three known
+  untracked project task documents remain preserved and excluded from this
+  integration.
+
+## Verification
+
+- Concurrent and Planning Gates passed.
+- Source verification is recorded in
+  `20261011-rollback-makelore-platform-auth-7c4e9a2b`: 60 focused tests,
+  typecheck, scoped lint, `git diff --check`, and a renderer-only Vite build
+  passed; the normal D: output build was blocked by `ENOSPC`.
+- Integration verification passed: `git diff --name-status
+  87d3f03d751b93b607e56d3667c3655f2a03a792 HEAD -- .` excluding
+  `.project-docs/**` returned no paths, `git diff --check` passed, and
+  `check_doc_drift.py --task-id 20261011-integrate-rollback-makelore-c9d8e7f6`
+  passed. The isolated integration worktree has no dependency installation,
+  so the source test evidence was reused rather than rerunning the same suite.
+
+## Follow-ups
+
+- A future platform SSO implementation requires a new explicit design and
+  integration decision; this rollback leaves the client on the legacy path.
+- Re-run a normal Vite output build when D: has sufficient free space.
+
+## Promotion Candidates
+
+- None pending; the accepted rollback reconciliation is recorded in the
+  canonical documents above. The historical OIDC source and prior integration
+  task remain read-only evidence.