diff --git a/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/check.jsonl b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/check.jsonl
new file mode 100644
index 00000000..d3455975
--- /dev/null
+++ b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/check.jsonl
@@ -0,0 +1,5 @@
+{"file": ".trellis/spec/hyb-oa/frontend-react-vite-design.md", "reason": "Verify changed pages follow frontend-design plus shared finance/admin surface conventions"}
+{"file": ".trellis/spec/hyb-oa/project-governance.md", "reason": "Verify Trellis flow, approvals and task evidence are complete"}
+{"file": ".trellis/spec/hyb-oa/docs-and-evidence.md", "reason": "Verify evidence paths and summaries avoid sensitive data and absolute local paths"}
+{"file": ".trellis/spec/hyb-oa/security-privacy.md", "reason": "Verify admin/finance evidence does not expose secrets, full accounts, payloads or sensitive business content"}
+{"file": ".trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/research/scope-audit.md", "reason": "Verify implementation matches the agreed Wave4 refresh and Wave5 gap-fill boundary"}
diff --git a/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.jsonl b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.jsonl
new file mode 100644
index 00000000..95089168
--- /dev/null
+++ b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.jsonl
@@ -0,0 +1,5 @@
+{"file": ".trellis/spec/hyb-oa/frontend-react-vite-design.md", "reason": "Wave4-5 frontend design authority, shared finance/admin surface conventions and verification requirements"}
+{"file": ".trellis/spec/hyb-oa/project-governance.md", "reason": "Trellis task contract, approval and commit boundaries for non-trivial implementation"}
+{"file": ".trellis/spec/hyb-oa/deployment-trialrun.md", "reason": "Public deployment and live readiness gates if the frontend changes are released"}
+{"file": ".trellis/spec/hyb-oa/security-privacy.md", "reason": "Finance/admin pages include payment, export, audit and WeCom-related privacy boundaries"}
+{"file": ".trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/research/scope-audit.md", "reason": "Task-specific scope audit distinguishing historical Wave4 from current Wave5 gaps"}
diff --git a/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.md b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.md
new file mode 100644
index 00000000..d8738324
--- /dev/null
+++ b/.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/implement.md
@@ -0,0 +1,96 @@
+# Implementation Plan
+
+## Current Decision
+
+This task completes the remaining frontend wave work by combining:
+
+1. Wave4 finance/operations refresh after the newer Wave0-3 baseline.
+2. Wave5 admin/config gap fill for pages that were not fully covered by the historical Wave4 task.
+
+It is not a blank rebuild of finance/admin pages.
+
+## Recommended Implementation Order
+
+1. Baseline audit:
+ - Compare current finance/admin pages against `frontend-design`, Wave0-3 shell/header conventions and historical Wave4 classes.
+ - Identify pages that need code changes versus pages that only need test coverage.
+2. Wave5 gap pages:
+ - `ApprovalRulesPage`
+ - `PeoplePage`
+ - `OrganizationPage`
+ - `WorkspaceSetupPage`
+3. Wave4 refresh pages:
+ - `PaymentBatchesPage`
+ - `ApOperationsPage`
+ - `InvoicePoolPage`
+4. Regression surfaces:
+ - `UserManagementPage`
+ - `MasterDataPage`
+ - `NotificationChannelsPage`
+ - `SystemSettingsPage`
+ - `FeatureFlagsPage`
+ - `WorkflowDefinitionsPage`
+ - `AuditLogsPage`
+5. Test baseline:
+ - Extend or replace the existing focused Wave4 Playwright spec so it covers Wave4 plus Wave5 gaps.
+ - Keep public deployment gated by explicit approval.
+
+## Guardrails
+
+- No backend, schema, permission, payment-state, approval-rule semantic, WeCom or env changes.
+- Do not remove existing business actions.
+- Payment, export, sync, enable/disable and config-publish actions keep original confirmation and permission behavior.
+- Do not add a new design language; reuse existing finance/admin/ops classes.
+- Do not claim user-test readiness until public deployment and public checks pass.
+
+## Local Verification Plan
+
+```bash
+cd client && npm run typecheck
+cd client && npm run build
+cd client && npx playwright test tests/e2e/pc-finance-admin-visual-wave4.spec.ts --workers=1 --reporter=list
+node scripts/qa/check-ui-design-rules.mjs --strict
+python3 ./.trellis/scripts/task.py validate 05-29-frontend-ux-wave4-5-finance-admin-refresh
+node scripts/qa/check-trellis-governance.mjs
+git diff --check
+```
+
+## Completed Implementation
+
+2026-05-29:
+
+- Refreshed `ApprovalRulesPage` with Wave5 admin summary metrics, a command-oriented creation panel and a cleaner rule-list surface.
+- Refreshed `PeoplePage` to use the shared workspace/header baseline, finance/admin metrics, WeCom HR command surface, filter panel, batch-action panel and focused table container.
+- Refreshed `OrganizationPage` to use the shared management shell, organization summary metrics and admin command panels while keeping hierarchy readability.
+- Refreshed `WorkspaceSetupPage` to use the shared management shell, module visibility metrics, role preset tiles and a focused module table with Chinese visibility labels.
+- Extended `client/tests/e2e/pc-finance-admin-visual-wave4.spec.ts` from historical Wave4 coverage to Wave4-5 coverage.
+- Kept Wave4 finance pages on the existing approved surface; no backend or business-state changes were made.
+
+## Local Verification Result
+
+- `cd client && npm run typecheck` passed.
+- `cd client && npx playwright test tests/e2e/pc-finance-admin-visual-wave4.spec.ts --workers=1 --reporter=list` passed: 3 tests.
+- `cd client && npm run build` passed.
+- `node scripts/qa/check-ui-design-rules.mjs --strict` passed with 0 findings.
+- `python3 ./.trellis/scripts/task.py validate 05-29-frontend-ux-wave4-5-finance-admin-refresh` passed.
+- `node scripts/qa/check-trellis-governance.mjs` passed after task metadata was completed.
+- `git diff --check` passed.
+
+## Spec Update Decision
+
+No `.trellis/spec/` update is needed for this implementation. The task applied existing frontend conventions (`ListWorkspace`, `WorkspaceHeader`, `finance-status-strip`, `admin-command-panel`, `PrimaryTable`) and did not introduce a new reusable frontend contract, API signature, env key, schema, permission rule or deployment behavior.
+
+## Deployment Plan
+
+Only after explicit approval:
+
+```bash
+SYNC_ENV=0 LIVE_SMOKE_BASE_URL=https://oa.hyinda.com bash deploy/trialrun/deploy.sh
+LIVE_SMOKE_BASE_URL=https://oa.hyinda.com bash scripts/qa/run-live-smoke-readiness.sh
+OAOPS1_REPORT_DIR=.trellis/tasks/05-29-frontend-ux-wave4-5-finance-admin-refresh/research/postdeploy-
+ 规则按优先级匹配,只影响新提交单据;历史审批实例不回写。 +
++ 优先级越小越先匹配;启停动作会经过确认。 +
++ 先收窄部门、状态、上级和入职时间,再执行批量动作。 +
++ 查看档案进入个人详情;启停、离职和企微重试会保留操作结果。 +
+{exportError} @@ -636,124 +684,126 @@ export function PeoplePage() { {mapApiMessage(employeesQuery.error, "加载人员列表失败")}
) : null} -+ {workspace.profile} · 单公司 · 账号密码 · 站内通知 · 桌面优先。 +
+主导航只保留高频入口;备用模块保留代码与数据,但默认放在管理员备用区。
++ 主导航只保留高频入口;备用模块保留代码与数据,低频功能默认收进管理区或隐藏。 +