Task: Integrate Square auth proxy into Makelore main

Identity

Task ID: 20260819-integrate-square-auth-client-2f7c9a
Mode: Integration
Branch: codex/20260819-integrate-square-auth-client-2f7c9a-integrate-square-auth-client
Worktree: D:\Datas\OthersProjects\makelore-integrate-square-auth-2f7c9a
Base commit: 1907924203
Owner: codex-root
Status: Ready for Integration

Integrate feature commit dc776ff from task 20260819-square-auth-proxy-client-8c4f2a into main based at 1907924.
Promote the desktop authentication lifecycle boundary into canonical project memory.
Re-run merged-tree authentication and static verification before attempting a default-branch fast-forward.

Keep Renderer credential-free and Electron Main as the sole owner of access/refresh token persistence and idle-session cleanup.
Route login, refresh, and logout through fixed Works Square endpoints; do not restore the embedded OAuth client secret or direct custom-service refresh.
Preserve the unrelated untracked task record in the primary main worktree; do not adopt or overwrite another task's work without explicit authorization.

Merged source commit dc776ff into the isolated candidate integration branch as merge commit f52c2c8 without conflicts.
Promoted the Square-owned desktop authentication lifecycle boundary into the canonical current state, architecture flow, system boundary, decision index, and ADR-004.
The candidate tree is verified. Local main still points to 1907924; the user explicitly authorized preserving the unrelated task record and transferring its primary-worktree ownership to a separate promotion integration task.

pnpm exec vitest run tests/unit/works-square-session.test.ts tests/unit/auth-routes.test.ts: 56 passed.
pnpm exec vitest run: 184 test files and 2,190 tests passed.
pnpm run typecheck: passed.
git diff --check: passed before task-record finalization.

A separate promotion integration task will adopt the authorized primary main worktree and fast-forward it to this candidate.
Deploy and smoke-test the matching Works Square server endpoints before releasing a desktop build.