@mogragsigma/dsh-dual-host-plugin 0.0.0-stage → 0.33.2

package/bundle/cordis.patch.yml

@@ -0,0 +1,5 @@
+# Official bundle selection loads the native setup owner and its declared Web client.
+# Empty configuration discovers capabilities; it never consents to mutations.
+- insert:
+    - id: dual-host-onboarding
+      name: '@mogragsigma/dsh-dual-host-plugin'

package/bundle/delivery-approval.js

@@ -0,0 +1,133 @@
+// Ledger bridge. Constructed only by the opt-in delivery runtime; never writes Git.
+// Stage is operator/runtime-only: public proposals accept an opaque reference, not objects or approval flags.
+import {randomUUID} from 'node:crypto';
+import {canonical,digest} from './approval-ledger.js';
+import {verifyObjects} from './delivery-object-plan.js';
+const fail=code=>{throw Error('DELIVERY_APPROVAL_'+code);};
+const proofHash=r=>digest({task_id:r.task_id,spec_revision:r.spec_revision,task_hash:r.task_hash,proposal:JSON.parse(r.proposal),repository_revision:r.repository_revision,expires:r.expires});
+const same=(a,b)=>canonical(a)===canonical(b);
+export class DeliveryApproval {
+ constructor({ledger,preview,journal,enabled=false}){
+  this.l=ledger;this.db=ledger.db;this.preview=preview;this.j=journal;this.enabled=enabled;
+  if(journal.db!==this.db||preview.db!==this.db)fail('DATABASE_MISMATCH');
+  this.db.exec(`CREATE TABLE IF NOT EXISTS delivery_approval_plans(id TEXT PRIMARY KEY,event_id TEXT UNIQUE NOT NULL,
+   task_id TEXT NOT NULL,event_fingerprint TEXT NOT NULL,snapshot TEXT NOT NULL,created INTEGER NOT NULL);`);
+  this.db.exec(`CREATE TABLE IF NOT EXISTS delivery_plan_objects(plan_id TEXT NOT NULL,ordinal INTEGER NOT NULL,
+   oid TEXT NOT NULL,type TEXT NOT NULL,bytes BLOB NOT NULL,PRIMARY KEY(plan_id,ordinal),UNIQUE(plan_id,oid));`);
+ }
+ sourceEvidence(p){
+  // Completed development is historical evidence. Superseding its approval must not erase it.
+  const r=this.db.prepare('SELECT * FROM development_requests WHERE id=?').get(p.request_id);
+  if(!r||r.task_id!==p.task_id||r.state!=='completed'||r.approval_id!==p.source_approval.id||r.expected_hash!==p.tested_content.sha256)fail('SOURCE_CHANGED');
+  const a=this.l.row(r.approval_id);if(a.task_id!==p.task_id||a.spec_revision!==p.spec_revision||a.proposal_hash!==p.source_approval.proposal_hash||proofHash(a)!==a.proposal_hash)fail('SOURCE_CHANGED');
+  const operations=this.db.prepare('SELECT * FROM development_operations WHERE request_id=? ORDER BY id').all(r.id);
+  const writes=this.db.prepare('SELECT * FROM development_writes WHERE request_id=? ORDER BY id').all(r.id);
+  if(operations.some(o=>o.state!=='closed')||writes.some(w=>w.state!=='applied'))fail('SOURCE_CHANGED');
+  const commands=this.db.prepare('SELECT * FROM development_commands WHERE request_id=? ORDER BY id').all(r.id);
+  const safe=this.db.prepare("SELECT data FROM development_events WHERE request_id=? AND type='safe_point' ORDER BY seq DESC LIMIT 1").get(r.id);
+  return digest({request:r,operations,writes,commands,safe,source_approval_hash:a.proposal_hash});
+ }
+ stage({event_id,task_id,preview_id,fingerprint,resource,workspace_identity,plan,objects}){
+  if(this.enabled!==true)fail('DISABLED');
+  if(typeof event_id!=='string'||!event_id.trim()||event_id.length>256||/[\x00-\x1f\x7f]/.test(event_id))fail('INVALID_EVENT');
+  return this.l.store.tx(()=>{
+   const intent=this.j.prepare({task_id,resource,workspace_identity,plan,objects});
+   const event_fingerprint=digest({task_id,preview_id,fingerprint,intent});
+   const old=this.db.prepare('SELECT * FROM delivery_approval_plans WHERE event_id=?').get(event_id);
+   if(old){if(old.event_fingerprint!==event_fingerprint)fail('EVENT_CONFLICT');const s=this.stored(task_id,old.id,JSON.parse(old.snapshot).fingerprint);return {reference:this.reference(s),replayed:true,grants_execution:false};}
+   const p=this.preview.stored(task_id,preview_id,fingerprint),head=this.l.catalog.head(task_id);
+   if(head.legacy||head.spec_revision!==p.spec_revision||this.l.store.task(task_id).blocked)fail('TASK_CHANGED');
+   const checked=this.preview.checked(p),changes=p.files.map(f=>({path:f.path,action:f.approved_action,before_sha256:f.before_sha256,after_sha256:f.after_sha256})).sort((a,b)=>a.path<b.path?-1:a.path>b.path?1:0);
+   if(p.repository.url!==resource||p.workspace_branch!==plan.branch||p.baseline_commit!==plan.parent||
+    !same({kind:p.tested_content.kind,sha256:p.tested_content.sha256},plan.tested_content)||!same(changes,plan.changes)||!same(checked.w.identity(),workspace_identity))fail('PREVIEW_MISMATCH');
+   // The private read adapter re-compiles against actual bytes; preview metadata alone is insufficient.
+   this.j.readiness(intent);
+   const body={schema:1,kind:'commit-approval-plan-v1',id:'commit-plan-'+randomUUID(),task_id,spec_revision:p.spec_revision,task_hash:digest(head.goal),
+    preview_id:p.id,preview_fingerprint:p.fingerprint,repository:structuredClone(p.repository),policy:structuredClone(checked.a.proposal.model_policy),
+    source_evidence_hash:this.sourceEvidence(p),intent,created:this.l.now()};
+   const s={...body,fingerprint:digest(body)};
+   this.db.prepare('INSERT INTO delivery_approval_plans VALUES (?,?,?,?,?,?)').run(s.id,event_id,task_id,event_fingerprint,canonical(s),s.created);
+   const put=this.db.prepare('INSERT INTO delivery_plan_objects VALUES (?,?,?,?,?)');
+   objects.forEach((o,n)=>put.run(s.id,n,o.oid,o.type,Buffer.from(o.data)));
+   return {reference:this.reference(s),replayed:false,grants_execution:false};
+  });
+ }
+ reference(s){return {kind:'commit-execution-reference-v1',plan_id:s.id,fingerprint:s.fingerprint};}
+ objects(s){
+  // Durable exact bytes allow queue admission while the workspace is busy. No
+  // regeneration from mutable worktree contents, and no caller-supplied objects.
+  const rows=this.db.prepare('SELECT oid,type,bytes FROM delivery_plan_objects WHERE plan_id=? ORDER BY ordinal').all(s.id);
+  const objects=rows.map(o=>({oid:o.oid,type:o.type,data:Buffer.from(o.bytes)}));
+  verifyObjects(s.intent.plan,objects);return objects;
+ }
+ stored(task,id,fingerprint){
+  const row=this.db.prepare('SELECT * FROM delivery_approval_plans WHERE id=?').get(id);if(!row||row.task_id!==task)fail('PLAN_NOT_FOUND');
+  const s=JSON.parse(row.snapshot),{fingerprint:hash,...body}=s,{fingerprint:ih,...ib}=s.intent??{}, {fingerprint:ph,...pb}=s.intent?.plan??{};
+  if(s.id!==id||s.task_id!==task||s.kind!=='commit-approval-plan-v1'||s.schema!==1||hash!==fingerprint||digest(body)!==hash||digest(ib)!==ih||digest(pb)!==ph)fail('PLAN_CHANGED');return s;
+ }
+ current(s,revision){
+  const h=this.l.catalog.head(s.task_id),p=this.preview.stored(s.task_id,s.preview_id,s.preview_fingerprint);
+  if(s.spec_revision!==revision||h.spec_revision!==revision||digest(h.goal)!==s.task_hash||
+   this.l.store.task(s.task_id).revision!==s.intent.task_revision||this.sourceEvidence(p)!==s.source_evidence_hash)fail('SOURCE_CHANGED');
+  return p;
+ }
+ snapshot(s){
+  const p=s.intent.plan;
+  return {kind:'commit-execution-v1',plan_id:s.id,fingerprint:s.fingerprint,intent_fingerprint:s.intent.fingerprint,plan_fingerprint:p.fingerprint,
+   preview_id:s.preview_id,preview_fingerprint:s.preview_fingerprint,task_revision:s.spec_revision,workspace_revision:s.intent.task_revision,
+   repository_fingerprint:s.repository.fingerprint,workspace_branch:p.branch,baseline_commit:p.parent,computed_commit_oid:p.computed_commit_oid,
+   tree_oid:p.tree_oid,format:p.format,manifest_sha256:p.manifest_sha256,tested_content:structuredClone(p.tested_content),
+   files_digest:digest(p.changes),file_count:p.changes.length,author:structuredClone(p.author),committer:structuredClone(p.committer),
+   timestamp:p.when,commit_message:p.message,source_evidence_hash:s.source_evidence_hash,execution:'requires_runtime_gate',
+   hooks:false,filters:false,signed:false,max_commits:1,push:false,publish:false,deploy:false};
+ }
+ approvalSnapshot(task,revision,reference,repository,policy){
+  if(reference.kind!=='commit-execution-reference-v1')return this.preview.approvalSnapshot(task,revision,reference,repository,policy);
+  if(this.enabled!==true)fail('DISABLED');const s=this.stored(task,reference.plan_id,reference.fingerprint),p=this.current(s,revision);
+  if(!same(s.repository,repository)||!same(s.policy,policy))fail('BINDING_CHANGED');
+  this.preview.checked(p);this.j.readiness(s.intent);return this.snapshot(s);
+ }
+ matches(task,revision,plan){
+  if(plan?.kind!=='commit-execution-v1')return this.preview.matches(task,revision,plan);
+  try{const s=this.stored(task,plan.plan_id,plan.fingerprint);this.current(s,revision);return same(this.snapshot(s),plan);}catch{return false;}
+ }
+ decisionProof(r){
+  const d=this.db.prepare('SELECT * FROM approval_decisions WHERE id=?').get(r.decision_id);
+  if(!d||d.request_id!==r.id||d.action!=='approve'||!d.principal)fail('PROOF_REQUIRED');
+  if(d.credential_id?.startsWith('chat:')){
+   const proof=this.db.prepare('SELECT * FROM approval_chat_proofs WHERE challenge_id=?').get(d.challenge_id);
+   const b=proof&&this.db.prepare('SELECT * FROM approval_chat_bindings WHERE id=? AND disabled=0').get(proof.binding_hash);
+   const route=this.db.prepare('SELECT * FROM approval_chat_deliveries WHERE request_id=?').get(r.id);
+   if(!proof||!b||!route)fail('PROOF_REQUIRED');const p=JSON.parse(proof.proof),binding=JSON.parse(b.binding);
+   if(proof.proof_hash!==d.proof_hash||digest(p)!==d.proof_hash||d.credential_id!=='chat:'+b.id||digest(binding)!==b.id||
+    p.provider!=='feishu'||p.binding_hash!==b.id||p.request_id!==r.id||p.proposal_hash!==r.proposal_hash||p.actor!==binding.approverOpenId||
+    d.principal!==`feishu:${binding.appId}:${binding.approverOpenId}`||p.message_id!==proof.message_id||p.parent_id!==route.message_id||
+    p.prompt_version!==route.prompt_version||route.binding_hash!==b.id||route.state!=='sent'||
+    (p.interpretation?(p.interpretation.intent!=='approve'||p.interpretation.unconditional!==true):!['确定','/yes'].includes(p.text?.trim())))fail('PROOF_REQUIRED');
+  }else{
+   const c=this.db.prepare('SELECT * FROM approval_credentials WHERE id=? AND disabled=0').get(d.credential_id);
+   const q=this.db.prepare('SELECT * FROM approval_challenges WHERE id=?').get(d.challenge_id);
+   if(!c||c.principal!==d.principal||q?.kind!=='decision'||q.used!==1)fail('PROOF_REQUIRED');
+   const binding=JSON.parse(q.binding),result=JSON.parse(q.result??'null');
+   if(binding.request_id!==r.id||binding.action!=='approve'||binding.proposal_hash!==r.proposal_hash||result?.proof_hash!==d.proof_hash)fail('PROOF_REQUIRED');
+  }
+  return {decision_id:d.id,proof_hash:d.proof_hash};
+ }
+ readSnapshot(fn){
+  // Can run inside the journal's write transaction. A nested BEGIN would break enqueue/acquire.
+  const name='delivery_authority_'+randomUUID().replaceAll('-','');this.db.exec('SAVEPOINT '+name);
+  try{const result=fn();this.db.exec('RELEASE '+name);return result;}catch(e){this.db.exec('ROLLBACK TO '+name);this.db.exec('RELEASE '+name);throw e;}
+ }
+ authorize({approval_id,intent}){
+  if(this.enabled!==true)fail('DISABLED');
+  return this.readSnapshot(()=>{
+   const r=this.l.row(approval_id),v=this.l.view(approval_id),p=v.proposal.delivery;
+   if(v.state!=='approved'||!same(v.proposal.scopes,['commit'])||p?.kind!=='commit-execution-v1'||proofHash(r)!==r.proposal_hash)fail('EXECUTION_APPROVAL_REQUIRED');
+   const s=this.stored(r.task_id,p.plan_id,p.fingerprint);
+   if(!same(s.intent,intent)||!same(s.policy,v.proposal.model_policy)||!same(s.repository,v.proposal.repository))fail('INTENT_CHANGED');
+   const proof=this.decisionProof(r);
+   return {kind:'delivery-execution-v1',scope:'commit',execution:true,approval_id:r.id,task_id:r.task_id,task_revision:intent.task_revision,
+    intent_fingerprint:intent.fingerprint,authority_hash:digest({approval_id:r.id,proposal_hash:r.proposal_hash,intent_fingerprint:intent.fingerprint,...proof})};
+  });
+ }
+}

package/bundle/delivery-artifacts.js

@@ -0,0 +1,52 @@
+// A durable push journal is the registry. Read-only derived entries survive a
+// crash without a second INSERT/HTTP transaction and never renew task binding.
+import {canonical,digest} from './approval-ledger.js';
+import {deliveryAction} from './delivery-state.js';
+import {repositoryURL} from './repository-gitee.js';
+const same=(a,b)=>canonical(a)===canonical(b);
+const has=(db,t)=>!!db.prepare("SELECT 1 FROM sqlite_master WHERE type='table' AND name=?").get(t);
+const proofHash=r=>digest({task_id:r.task_id,spec_revision:r.spec_revision,task_hash:r.task_hash,proposal:JSON.parse(r.proposal),repository_revision:r.repository_revision,expires:r.expires});
+function authority(db,row,intent,scope){
+ const a=db.prepare('SELECT * FROM approval_requests WHERE id=? AND task_id=?').get(row.approval_id,row.task_id);
+ if(!a||proofHash(a)!==a.proposal_hash)return null;
+ const p=JSON.parse(a.proposal),d=p.delivery;
+ if(!same(p.scopes,[scope])||d?.kind!==scope+'-execution-v1'||d.intent_fingerprint!==intent.fingerprint||d.plan_fingerprint!==intent.plan.fingerprint)return null;
+ // Historical authority, not a new grant. Later expiry/revocation cannot erase
+ // an already observed effect; the exact approving decision must still exist.
+ const decisions=db.prepare("SELECT id,proof_hash FROM approval_decisions WHERE request_id=? AND action='approve' ORDER BY created DESC LIMIT 100").all(a.id);
+ if(!decisions.some(x=>digest({approval_id:a.id,proposal_hash:a.proposal_hash,intent_fingerprint:intent.fingerprint,decision_id:x.id,proof_hash:x.proof_hash})===row.authority_hash))return null;
+ return {a,p};
+}
+export function deliveryArtifact(g,task,id){
+ if(!/^artifact-delivery-[a-f0-9-]{36}$/.test(id??''))return null;
+ const db=g.store?.db,action=id.slice('artifact-'.length);
+ if(!db||!['delivery_actions','approval_requests','approval_decisions'].every(t=>has(db,t)))return null;
+ try{
+  const view=deliveryAction(g,task,action);if(view?.kind!=='push'||view.state!=='completed'||view.remote_acceptance!=='ref_observed')return null;
+  const row=db.prepare('SELECT * FROM delivery_actions WHERE id=? AND task_id=?').get(action,task),i=JSON.parse(row.intent),p=i.plan;
+  const source=db.prepare('SELECT * FROM delivery_actions WHERE id=? AND task_id=?').get(p.source_action_id,task),commit=deliveryAction(g,task,p.source_action_id);
+  if(!source||commit?.state!=='completed'||commit.commit_oid!==p.commit_oid)return null;
+  const ci=JSON.parse(source.intent),cp=ci.plan,cr=JSON.parse(source.result);
+  if(ci.fingerprint!==p.source_intent_fingerprint||digest(cr)!==p.source_result_fingerprint||cp.tree_oid!==p.tree_oid||cp.parent!==p.parent_oid||
+   cp.branch!==p.branch||ci.resource!==i.resource||!same(ci.workspace_identity,i.workspace_identity)||!Array.isArray(cp.changes)||!cp.changes.length||cp.changes.length>128)return null;
+  const pushAuth=authority(db,row,i,'push'),commitAuth=authority(db,source,ci,'commit');
+  if(!pushAuth||!commitAuth||pushAuth.a.spec_revision!==commitAuth.a.spec_revision||!same(pushAuth.p.repository,commitAuth.p.repository))return null;
+  const binding=pushAuth.p.repository;
+  if(binding?.provider!=='gitee'||binding.repository_id!==p.repository_id||binding.url!==repositoryURL(p.url).url||binding.base_sha!==p.parent_oid||
+   pushAuth.a.repository_revision!==binding.binding_revision||commitAuth.p.delivery.files_digest!==digest(cp.changes))return null;
+  const changes={create:0,modify:0,delete:0};for(const f of cp.changes){if(!Object.hasOwn(changes,f.action))return null;changes[f.action]++;}
+  const proof=digest({push_intent:i.fingerprint,push_result:JSON.parse(row.result),commit_intent:ci.fingerprint,commit_result:cr,
+   push_authority:row.authority_hash,commit_authority:source.authority_hash,repository:binding,spec_revision:pushAuth.a.spec_revision});
+  return {id,task_id:task,kind:'gitee_delivery',name:'交付成果 · '+p.commit_oid.slice(0,12),
+   description:`本任务已推送 ${cp.changes.length} 项文件变更（新增 ${changes.create}、修改 ${changes.modify}、删除 ${changes.delete}）到 ${p.branch}。入口为固定提交的完整变更页；不代表发布、部署或整项长期任务完成。`,
+   spec_revision:pushAuth.a.spec_revision,created_at:view.remote_observed_at,repository:{...binding,base_sha:p.commit_oid,branch:p.branch},
+   repository_origin:binding,delivery:{action_id:action,commit_action_id:source.id,commit_oid:p.commit_oid,tree_oid:p.tree_oid,parent_oid:p.parent_oid,changes,proof_hash:proof},size:null,sha256:proof};
+ }catch{return null;}
+}
+export function deliveryArtifactList(g,task){
+ const db=g.store?.db;if(!db||!has(db,'delivery_actions'))return {items:[],total:0};
+ const where="task_id=? AND state='completed' AND json_extract(intent,'$.kind')='push-execution-intent-v1'";
+ try{const rows=db.prepare('SELECT id FROM delivery_actions WHERE '+where+' ORDER BY seq DESC LIMIT 100').all(task);
+  return {items:rows.map(r=>deliveryArtifact(g,task,'artifact-'+r.id)).filter(Boolean),total:db.prepare('SELECT count(*) n FROM delivery_actions WHERE '+where).get(task).n};
+ }catch{return {items:[],total:0,error:'ARTIFACT_DELIVERY_EVIDENCE_UNAVAILABLE'};}
+}

package/bundle/delivery-commit.js

@@ -0,0 +1,125 @@
+import {managedTaskBranch} from './task-branch.js';
+// Internal actual commit adapter, disabled by default and not wired to a public entry.
+// Unit tests replace both Git and filesystem effects; no real Git-write acceptance yet.
+import {constants,openSync,closeSync,fstatSync,lstatSync,realpathSync,writeSync,fsyncSync,ftruncateSync,renameSync,unlinkSync} from 'node:fs';
+import {join} from 'node:path';
+import {createHash} from 'node:crypto';
+import {canonical} from './approval-ledger.js';
+import {verifyObjects} from './delivery-object-plan.js';
+import {compileIndex} from './delivery-index.js';
+import {DeliveryGitRead} from './delivery-git-read.js';
+import {execFileDrained} from './drained-process.js';
+const fail=code=>{throw Error('DELIVERY_COMMIT_'+code);};
+const sha=b=>createHash('sha256').update(b).digest('hex');
+const syncDir=p=>{const fd=openSync(p,'r');try{fsyncSync(fd);}finally{closeSync(fd);}};
+const statId=s=>({device:String(s.dev),inode:String(s.ino)});
+const writeAll=(fd,data)=>{let at=0;while(at<data.length){const n=writeSync(fd,data,at,data.length-at,at);if(n<1)fail('SHORT_WRITE');at+=n;}};
+export class DeliveryGitLease {
+ constructor(identity,tag,onLock=()=>{}){this.identity=structuredClone(identity);this.gd=join(identity.root,'.git');this.tag=tag;this.onLock=onLock;this.handles=new Map();}
+ checkRoot(){
+  for(const [path,id] of [[this.identity.root,this.identity.directory],[this.gd,this.identity.git_directory]]){
+   const s=lstatSync(path,{bigint:true});if(!s.isDirectory()||s.isSymbolicLink()||realpathSync(path)!==path||canonical(statId(s))!==canonical(id))fail('DIRECTORY_CHANGED');
+  }
+ }
+ assert(){this.checkRoot();for(const [name,h] of this.handles){
+  const s=lstatSync(join(this.gd,name),{bigint:true}),fd=fstatSync(h.fd,{bigint:true});
+  if(!s.isFile()||s.isSymbolicLink()||s.nlink!==1n||canonical(statId(s))!==canonical(h.identity)||canonical(statId(fd))!==canonical(h.identity))fail('LOCK_CHANGED');
+ }}
+ proofs(){return Object.fromEntries([...this.handles].map(([n,h])=>[n,{...h.identity}]));}
+ open(){
+  this.checkRoot();if(this.handles.size)fail('LEASE_ALREADY_OPEN');
+  // Do not hold HEAD.lock: Git may need it for a branch transaction. HEAD is rechecked;
+  // standard checkout is excluded by index.lock, not by an OS isolation guarantee.
+  for(const name of ['config.lock','index.lock']){
+   this.assert();const fd=openSync(join(this.gd,name),constants.O_RDWR|constants.O_CREAT|constants.O_EXCL|constants.O_NOFOLLOW,0o600);
+   let identity;try{identity=statId(fstatSync(fd,{bigint:true}));}catch(e){closeSync(fd);throw e;}this.handles.set(name,{fd,identity});
+   writeAll(fd,Buffer.from(canonical(this.tag)+'\n'));fsyncSync(fd);syncDir(this.gd);this.onLock(name,identity);
+  }this.assert();
+ }
+ installIndex(bytes){
+  this.assert();const h=this.handles.get('index.lock');if(!h||!Buffer.isBuffer(bytes))fail('INDEX_LOCK_REQUIRED');
+  ftruncateSync(h.fd,0);writeAll(h.fd,bytes);fsyncSync(h.fd);this.assert();
+  renameSync(join(this.gd,'index.lock'),join(this.gd,'index'));
+  this.handles.delete('index.lock');try{closeSync(h.fd);}finally{syncDir(this.gd);}
+ }
+ release(){
+  this.assert();for(const [name,h] of [...this.handles].reverse()){
+   this.assert();unlinkSync(join(this.gd,name));this.handles.delete(name);try{closeSync(h.fd);}finally{syncDir(this.gd);}
+  }
+ }
+ abandon(){for(const h of this.handles.values()){try{closeSync(h.fd);}catch{}}this.handles.clear();} // Never unlink an uncertain lock.
+}
+export function commitCommand(kind,plan,object){
+ const oid=x=>typeof x==='string'&&new RegExp('^[a-f0-9]{'+(plan.format==='sha256'?64:40)+'}$').test(x);
+ if(!['sha1','sha256'].includes(plan?.format)||!managedTaskBranch(plan.branch)||!oid(plan.parent)||!oid(plan.computed_commit_oid))fail('COMMAND_DENIED');
+ if(kind==='object'&&object&&Buffer.isBuffer(object.data)&&['blob','tree','commit'].includes(object.type)&&plan.objects.some(o=>o.oid===object.oid&&o.type===object.type&&o.bytes===object.data?.length))return ['hash-object','-w','-t',object.type,'--stdin','--no-filters'];
+ if(kind==='reference'&&object===undefined)return ['update-ref','--no-deref','-m','DSH approved delivery','refs/heads/'+plan.branch,plan.computed_commit_oid,plan.parent];
+ fail('COMMAND_DENIED');
+}
+export class DeliveryCommit {
+ constructor({journal,binding,enabled=false,externalDrained=()=>false},io={}){
+  this.j=journal;this.enabled=enabled;this.binding=structuredClone(binding);this.active=false;this.lease=null;this.action=null;
+  this.reader=io.reader??new DeliveryGitRead({binding,drained:()=>externalDrained()===true&&(!this.action||!journal.unfinished(this.action)),ownedLocks:()=>this.lease?.proofs()??{}});
+  this.makeLease=io.makeLease??((identity,tag,onLock)=>new DeliveryGitLease(identity,tag,onLock));
+  this.runGit=io.runGit??((args,input,signal,observer,plan)=>execFileDrained('/usr/bin/git',[
+   '--git-dir='+join(binding.root,'.git'),'--work-tree='+binding.root,
+   '-c','core.hooksPath=/dev/null','-c','core.fsmonitor=false','-c','core.untrackedCache=false','-c','gc.auto=0','-c','maintenance.auto=false',
+   '-c','core.fsync=loose-object,reference','-c','core.fsyncMethod=fsync',...args],{
+    cwd:binding.root,timeout:10000,maxBuffer:1048576,killSignal:'SIGKILL',signal,
+    env:{PATH:'/usr/bin:/bin',LC_ALL:'C',GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_SYSTEM:'/dev/null',GIT_CONFIG_GLOBAL:'/dev/null',GIT_OPTIONAL_LOCKS:'0',GIT_NO_REPLACE_OBJECTS:'1',GIT_TERMINAL_PROMPT:'0',GIT_LITERAL_PATHSPECS:'1',
+     GIT_COMMITTER_NAME:plan.committer.name,GIT_COMMITTER_EMAIL:plan.committer.email,GIT_COMMITTER_DATE:'@'+plan.when+' +0000'}},input,observer));
+ }
+ fsOperation(id,epoch,kind,fn){
+  const op=this.j.startOperation(id,epoch,kind);let code=1,async=false;try{const result=fn();if(result&&typeof result.then==='function'){async=true;fail('ASYNC_FS_DENIED');}code=0;return result;}finally{if(!async)this.j.closed(op,{code});}
+ }
+ async gitOperation(id,epoch,kind,plan,object,signal){
+  const args=commitCommand(kind,plan,object),op=this.j.startOperation(id,epoch,kind,object?{oid:object.oid}:{});
+  let output;try{output=await this.runGit(args,object?.data,signal,{
+   onSpawn:({pid})=>{if(pid!==null)this.j.spawned(op,pid);},onClose:result=>this.j.closed(op,result)},plan);
+  }catch(e){
+   const r=this.j.operation(op);if(e?.drained===true&&r.state==='intent'&&r.pid===null)this.j.closed(op,{code:null});throw e;
+  }
+  const closed=this.j.operation(op);if(closed.state!=='closed')fail('DRAIN_UNKNOWN');if(closed.code!==0||closed.signal!==null)fail('PROCESS_FAILED');
+  if(kind==='object'&&Buffer.from(output??'').toString('ascii').trim()!==object.oid)fail('OBJECT_RESULT_MISMATCH');
+ }
+ guard(id,epoch,intent,baseline,index,phase){
+  this.j.effectAuthority(id,epoch);if(this.j.unfinished(id))fail('DRAIN_UNKNOWN');this.lease.assert();
+  const s=this.reader.capture(intent),p=intent.plan,updated=phase==='referenced'||phase==='indexed';
+  if(s.head_oid!==(updated?p.computed_commit_oid:p.parent)||s.ref_oid!==(updated?p.computed_commit_oid:p.parent)||
+   s.metadata.config_sha256!==baseline.metadata.config_sha256||s.metadata.head_sha256!==baseline.metadata.head_sha256||
+   s.index_tree_oid!==(phase==='indexed'?p.tree_oid:baseline.parent_tree_oid)||
+   s.metadata.index_sha256!==(phase==='indexed'?sha(index.bytes):baseline.metadata.index_sha256))fail('STATE_CHANGED');
+  if(phase==='locked'&&s.fingerprint!==baseline.fingerprint)fail('BEFORE_SNAPSHOT_CHANGED');
+  if(phase!=='locked'&&s.objects_present.length!==p.objects.length)fail('OBJECTS_INCOMPLETE');
+ }
+ async execute(id,epoch,objects,{signal}={}){
+  if(this.enabled!==true)fail('DISABLED');if(this.active)fail('IN_FLIGHT');if(signal?.aborted)fail('CANCELLED');
+  this.active=true;let dispatched=false,intent;
+  try{
+   const row=this.j.fence(id,epoch);if(row.dispatched)fail('ALREADY_DISPATCHED');intent=this.j.intent(row);
+   if(this.binding.root!==intent.workspace_identity.root||this.binding.url!==intent.resource||this.binding.branch!==intent.plan.branch||this.binding.base_sha!==intent.plan.parent)fail('BINDING_CHANGED');
+   const copy=objects.map(o=>({oid:o.oid,type:o.type,data:Buffer.from(o.data)}));verifyObjects(intent.plan,copy);const index=compileIndex(intent.plan,copy);
+   const baseline=JSON.parse(row.before_snapshot??'null');this.j.markDispatched(id,epoch);dispatched=true;this.action=id;
+   this.j.event(id,'index_planned',{epoch,plan_fingerprint:intent.plan.fingerprint,tree_oid:index.tree_oid,sha256:sha(index.bytes),bytes:index.bytes.length});
+   this.lease=this.makeLease(intent.workspace_identity,{action_id:id,epoch,intent_fingerprint:intent.fingerprint},(name,identity)=>this.j.event(id,'lock_owned',{epoch,name,identity}));
+   this.fsOperation(id,epoch,'lock',()=>this.lease.open());this.guard(id,epoch,intent,baseline,index,'locked');
+   const present=new Set(baseline.objects_present);
+   for(const object of copy){
+    if(present.has(object.oid))continue;if(signal?.aborted)fail('CANCELLED');
+    this.j.effectAuthority(id,epoch);this.lease.assert();await this.gitOperation(id,epoch,'object',intent.plan,object,signal);
+   }
+   this.guard(id,epoch,intent,baseline,index,'objects');if(signal?.aborted)fail('CANCELLED');
+   await this.gitOperation(id,epoch,'reference',intent.plan,undefined,signal);
+   this.guard(id,epoch,intent,baseline,index,'referenced');if(signal?.aborted)fail('CANCELLED');
+   this.fsOperation(id,epoch,'index',()=>this.lease.installIndex(index.bytes));this.guard(id,epoch,intent,baseline,index,'indexed');
+   this.fsOperation(id,epoch,'unlock',()=>this.lease.release());this.reader.observe(intent);return this.j.finish(id,epoch);
+  }catch(e){
+   if(!dispatched)throw e;
+   // Cleanup only our inode-bound locks after all operations are closed. Revocation
+   // stops new effects but does not prevent this cleanup; uncertain child => keep locks.
+   if(this.lease&&!this.j.unfinished(id))try{this.fsOperation(id,epoch,'unlock',()=>this.lease.release());}catch{}
+   try{this.j.recordFailure(id,epoch);}catch{} // A lost owner never steals the new task fence.
+   return {...this.j.view(id),review_required:true,error:'DELIVERY_COMMIT_UNCERTAIN'};
+  }finally{this.lease?.abandon();this.lease=null;this.action=null;this.active=false;}
+ }
+}

package/bundle/delivery-contract.js

@@ -0,0 +1,42 @@
+// Opaque input only: all file, branch and baseline identities come from the
+// immutable server preview. This is an approval record, never an execution API.
+export function deliveryReference(v){
+ if(['commit-execution-reference-v1','push-execution-reference-v1'].includes(v?.kind)){
+  const prefix=v.kind==='push-execution-reference-v1'?'push':'commit';
+  if(Object.keys(v).sort().join(',')!=='fingerprint,kind,plan_id'||!new RegExp('^'+prefix+'-plan-[a-f0-9-]{36}$').test(v.plan_id??'')||!/^[a-f0-9]{64}$/.test(v.fingerprint??''))throw Error('DELIVERY_INVALID_APPROVAL_REFERENCE');
+  return {kind:v.kind,plan_id:v.plan_id,fingerprint:v.fingerprint};
+ }
+ if(!v||typeof v!=='object'||Array.isArray(v)||Object.keys(v).some(k=>!['preview_id','fingerprint','commit_message'].includes(k))||typeof v.preview_id!=='string'||!/^delivery-[a-f0-9-]{36}$/.test(v.preview_id)||!/^[a-f0-9]{64}$/.test(v.fingerprint??'')||typeof v.commit_message!=='string'||!v.commit_message.trim()||v.commit_message.length>2000||/[\x00-\x09\x0b-\x1f\x7f]/.test(v.commit_message))throw Error('DELIVERY_INVALID_APPROVAL_REFERENCE');
+ return {preview_id:v.preview_id,fingerprint:v.fingerprint,commit_message:v.commit_message};
+}
+const previewReferenceSchema={type:'object',properties:{preview_id:{type:'string'},fingerprint:{type:'string'},commit_message:{type:'string',minLength:1,maxLength:2000}},required:['preview_id','fingerprint','commit_message'],additionalProperties:false};
+export function deliveryLabel(p){
+ if(p.kind==='push-execution-v1')return [
+  '限定推送授权：仅将已完成本地提交推送至下列唯一远端分支；批准不等于已发送或已被远端接受。',
+  '仓库：'+p.repository_url+'（仓库 ID '+p.repository_id+'）','目标分支：'+p.workspace_branch,
+  '远端预期旧值：'+(p.expected_remote_oid??'准备时确认该分支不存在'),'已完成本地提交：'+p.commit_oid,'目标树：'+p.tree_oid,
+  '测试内容：'+p.tested_content.kind+' / '+p.tested_content.sha256,'准备时间：'+new Date(p.prepared_at).toISOString(),
+  '审批计划指纹：'+p.fingerprint,
+  '远端旧值是准备时的观察，不保证仍然新鲜。执行前重新核对仓库身份、引用、祖先关系、工作区和进程排空，并以精确旧值条件更新。',
+  '最多发送一次；不重写历史、不删除引用、不推标签，不执行 hooks、不生成推送签名。发送未知不得重试，须独立回读核对。',
+  '不包含新建提交、开发修改、发布或部署；远端引用已匹配也不代表运行环境已经采用。'
+ ].join('\n');
+ if(p.kind==='commit-execution-v1')return [
+  '限定提交授权：仅云端独立工作区的一次本地提交；批准不等于已执行。',
+  '目标分支：'+p.workspace_branch,'预期父提交：'+p.baseline_commit,
+  '计算提交OID（尚不证明落盘）：'+p.computed_commit_oid,'目标树：'+p.tree_oid,
+  '作者：'+JSON.stringify(p.author),'提交者：'+JSON.stringify(p.committer),'固定提交时间：'+new Date(p.timestamp*1000).toISOString(),
+  '精确文件集合：'+p.file_count+' 项；摘要 '+p.files_digest,'测试内容：'+p.tested_content.kind+' / '+p.tested_content.sha256,
+  '提交说明：'+JSON.stringify(p.commit_message),'审批计划指纹：'+p.fingerprint,
+  '请按任务名称查看对应完整预览；摘要不代表已读全文。仅绑定所列内容和元数据，不授权修改文件。',
+  '该适配不执行 Git hooks／filters，不生成签名；引用和索引不是同一原子操作，部分结果须待核对。',
+  '实际执行仍须单次额度、排队持权、现场与进程排空门禁；不包含推送、发布或部署。'
+ ].join('\n');
+ return `拟提交交付（仅记账，不执行）：${p.workspace_branch}\n基线提交：${p.baseline_commit}\n测试内容 SHA256：${p.tested_content_sha256}\n精确文件集合：${p.file_count} 项，其中 ${p.changed_files} 项变化；集合摘要 ${p.files_digest}\n提交说明：${JSON.stringify(p.commit_message)}\n预览指纹：${p.fingerprint}\n请在双端工作台按任务名称查看对应预览和完整文件分页；摘要不代表全文已审阅。批准绑定上述内容，不是当前工作区的持锁保证；审批查询不会自动重验文件。提交执行器关闭，不包含推送、发布或部署。`;
+}
+
+export const deliveryReferenceSchema={oneOf:[previewReferenceSchema,{type:'object',properties:{kind:{enum:['commit-execution-reference-v1','push-execution-reference-v1']},plan_id:{type:'string'},fingerprint:{type:'string'}},required:['kind','plan_id','fingerprint'],additionalProperties:false}]};
+export const commitExecution=p=>p?.delivery?.kind==='commit-execution-v1';
+export const pushExecution=p=>p?.delivery?.kind==='push-execution-v1';
+export const deliveryExecution=p=>commitExecution(p)||pushExecution(p);
+export const approvalTitle=p=>pushExecution(p)?'【DSH 方案确认 · 限定推送授权】':commitExecution(p)?'【DSH 方案确认 · 限定提交授权】':p.development?'【DSH 方案确认 · 受限开发授权】':'【DSH 方案确认 · 当前仅记账，不执行】';

package/bundle/delivery-git-read.js

@@ -0,0 +1,217 @@
+import {managedTaskBranch} from './task-branch.js';
+// Private bounded read-only Git observer. No command here can update an object, ref or index.
+import {execFileSync} from 'node:child_process';
+import {constants,lstatSync,fstatSync,realpathSync,openSync,readSync,closeSync,readdirSync} from 'node:fs';
+import {join} from 'node:path';
+import {createHash} from 'node:crypto';
+import {canonical,digest} from './approval-ledger.js';
+import {developmentPath} from './development-plan.js';
+import {repositoryURL,repositoryBranch} from './repository-gitee.js';
+import {compileCommit,gitObject,indexTree} from './delivery-object-plan.js';
+const fail=code=>{throw Error('DELIVERY_GIT_'+code);};
+const sha=b=>createHash('sha256').update(b).digest('hex');
+const same=(a,b)=>canonical(a)===canonical(b);
+const validOID=x=>typeof x==='string'&&/^(?:[a-f0-9]{40}|[a-f0-9]{64})$/.test(x);
+const stamp=s=>[String(s.dev),String(s.ino),String(s.size),String(s.mtimeNs),String(s.ctimeNs)].join(':');
+const exists=p=>{try{return lstatSync(p);}catch(e){if(e.code==='ENOENT')return null;throw e;}};
+function bytes(path,limit){
+ const before=lstatSync(path,{bigint:true});
+ if(!before.isFile()||before.nlink!==1n||before.size>BigInt(limit)||realpathSync(path)!==path)fail('FILE_UNSAFE');
+ const fd=openSync(path,constants.O_RDONLY|constants.O_NOFOLLOW);
+ try{
+  if(stamp(fstatSync(fd,{bigint:true}))!==stamp(before))fail('FILE_CHANGED');
+  const b=Buffer.alloc(Number(before.size)+1);let n=0,got;
+  while(n<b.length&&(got=readSync(fd,b,n,b.length-n,null))>0)n+=got;
+  if(n!==Number(before.size)||stamp(fstatSync(fd,{bigint:true}))!==stamp(before)||stamp(lstatSync(path,{bigint:true}))!==stamp(before))fail('FILE_CHANGED');
+  return b.subarray(0,n);
+ }finally{closeSync(fd);}
+}
+function physicalIdentity(b){
+ const dir=p=>{const s=lstatSync(p,{bigint:true});if(!s.isDirectory()||s.isSymbolicLink()||realpathSync(p)!==p)fail('DIRECTORY_UNSAFE');return {device:String(s.dev),inode:String(s.ino)};};
+ return {root:b.root,directory:dir(b.root),git_directory:dir(join(b.root,'.git')),url:b.url,branch:b.branch,base_sha:b.base_sha};
+}
+function inventory(root){
+ const out=[];let total=0;
+ const walk=(dir,prefix='')=>{
+  const before=lstatSync(dir,{bigint:true});if(!before.isDirectory()||realpathSync(dir)!==dir)fail('DIRECTORY_UNSAFE');
+  for(const name of readdirSync(dir).sort()){
+   if(!prefix&&name==='.git')continue;const path=prefix+name;developmentPath(path);const absolute=join(dir,name),s=lstatSync(absolute);
+   if(s.isSymbolicLink())fail('FILE_UNSAFE');if(s.isDirectory()){walk(absolute,path+'/');continue;}
+   const data=bytes(absolute,8388608);total+=data.length;if(total>33554432||out.length>=4096)fail('LIMIT');
+   out.push({path,bytes:data,mode:s.mode&0o111?0o755:0o644});
+  }
+  if(stamp(lstatSync(dir,{bigint:true}))!==stamp(before))fail('DIRECTORY_CHANGED');
+ };walk(root);return out;
+}
+function metadata(root,owned={}){
+ const gd=join(root,'.git');
+ for(const p of ['commondir','gitdir','shallow','info/grafts','objects/info/alternates','objects/info/http-alternates','refs/replace','worktrees','reftable'])if(exists(join(gd,p)))fail('REPOSITORY_LAYOUT_UNSUPPORTED');
+ if(Object.keys(owned).some(p=>!['index.lock','config.lock'].includes(p)))fail('LOCK_PROOF_INVALID');
+ const own=p=>{const expected=Object.hasOwn(owned,p)?owned[p]:null;if(!expected)return false;const s=lstatSync(join(gd,p),{bigint:true});
+  if(!s.isFile()||s.isSymbolicLink()||s.nlink!==1n||String(s.dev)!==expected.device||String(s.ino)!==expected.inode)fail('LOCK_PROOF_CHANGED');return true;};
+ for(const p of ['index.lock','HEAD.lock','config.lock'])if(!own(p)&&exists(join(gd,p)))fail('LOCKED');
+ // Reject links/hardlinks before Git can follow object, pack or reference paths.
+ let count=0;const layout=[];const walk=(dir,depth=0)=>{if(depth>64)fail('LIMIT');for(const name of readdirSync(dir).sort()){
+  if(++count>65536)fail('LIMIT');const p=join(dir,name),s=lstatSync(p);
+  if(dir===gd&&own(name))continue;if(name.endsWith('.lock'))fail('LOCKED');
+  if(s.isSymbolicLink()||(!s.isDirectory()&&(!s.isFile()||s.nlink!==1)))fail('REPOSITORY_LAYOUT_UNSUPPORTED');
+  layout.push({path:p.slice(gd.length+1),kind:s.isDirectory()?'directory':'file',mode:s.mode&0o777,size:s.isDirectory()?null:s.size});
+  if(s.isDirectory())walk(p,depth+1);
+ }};walk(gd);
+ return {layout_sha256:digest(layout),config_sha256:sha(bytes(join(gd,'config'),262144)),index_sha256:exists(join(gd,'index'))?sha(bytes(join(gd,'index'),8388608)):null,head_sha256:sha(bytes(join(gd,'HEAD'),2048))};
+}
+function config(raw,url){
+ const seen=new Set();let origin=false;
+ const values={
+  'core.repositoryformatversion':/^[01]$/,'core.filemode':/^(true|false)$/,'core.bare':/^false$/,
+  'core.logallrefupdates':/^(true|false)$/,'core.ignorecase':/^(true|false)$/,'core.precomposeunicode':/^(true|false)$/,
+  'extensions.objectformat':/^(sha1|sha256)$/,'remote.origin.fetch':/^\+refs\/heads\/\*:refs\/remotes\/origin\/\*$/,
+  'user.name':/^[^\x00-\x1f\x7f]{1,256}$/,'user.email':/^[^\x00-\x1f\x7f]{1,254}$/
+ };
+ for(const item of raw.toString('utf8').split('\0').filter(Boolean)){
+  const at=item.indexOf('\n');if(at<1)fail('CONFIG_UNSUPPORTED');const key=item.slice(0,at),value=item.slice(at+1);
+  if(seen.has(key))fail('CONFIG_UNSUPPORTED');seen.add(key);
+  if(key==='remote.origin.url'){try{if(repositoryURL(value).url!==url)fail('REMOTE_CHANGED');}catch{fail('REMOTE_CHANGED');}origin=true;}
+  else if(key==='remote.origin.fetch'&&value!=='+refs/heads/*:refs/remotes/origin/*'){
+   const m=/^\+refs\/heads\/(.+):refs\/remotes\/origin\/(.+)$/.exec(value);
+   if(!m||m[1]!==m[2])fail('CONFIG_UNSUPPORTED');
+   try{repositoryBranch(m[1]);}catch{fail('CONFIG_UNSUPPORTED');}
+  }else if(/^branch\.(.+)\.(remote|merge)$/.test(key)){
+   const m=/^branch\.(.+)\.(remote|merge)$/.exec(key);
+   try{repositoryBranch(m[1]);if(m[2]==='remote'?value!=='origin':!value.startsWith('refs/heads/'))fail('CONFIG_UNSUPPORTED');if(m[2]==='merge')repositoryBranch(value.slice(11));}catch{fail('CONFIG_UNSUPPORTED');}
+  }else if(!Object.hasOwn(values,key)||!values[key].test(value))fail('CONFIG_UNSUPPORTED');
+ }
+ if(!origin)fail('REMOTE_CHANGED');
+}
+function entries(raw,index=false){
+ const out=[],str=raw.toString('utf8');if(!Buffer.from(str).equals(raw))fail('PATH_ENCODING');
+ for(const record of str.split('\0').filter(Boolean)){
+  const m=(index?/^(100644|100755) ([a-f0-9]{40}|[a-f0-9]{64}) 0\t(.+)$/u:/^(100644|100755) blob ([a-f0-9]{40}|[a-f0-9]{64})\t(.+)$/u).exec(record);
+  if(!m)fail('TREE_UNSUPPORTED');developmentPath(m[3]);out.push({mode:m[1]==='100755'?0o755:0o644,oid:m[2],path:m[3]});
+ }return out;
+}
+export function parseBatch(raw,oids,format){
+ const out=new Map();let at=0;
+ for(const oid of oids){
+  const end=raw.indexOf(10,at);if(end<0)fail('OBJECT_INVALID');const h=raw.subarray(at,end).toString('ascii');at=end+1;
+  if(h===oid+' missing'){out.set(oid,null);continue;}
+  const m=/^([a-f0-9]+) (blob|tree|commit) ([0-9]+)$/.exec(h);if(!m||m[1]!==oid)fail('OBJECT_INVALID');
+  const size=Number(m[3]);if(!Number.isSafeInteger(size)||size>40000000||at+size>=raw.length||raw[at+size]!==10)fail('OBJECT_INVALID');
+  const obj=gitObject(m[2],raw.subarray(at,at+size),format);if(obj.oid!==oid)fail('OBJECT_INVALID');out.set(oid,obj);at+=size+1;
+ }if(at!==raw.length)fail('OBJECT_INVALID');return out;
+}
+export function readOnlyCommand(kind,arg){
+ const simple={config:['config','--local','--no-includes','--null','--list'],format:['rev-parse','--show-object-format'],branch:['symbolic-ref','--quiet','HEAD'],head:['rev-parse','--verify','HEAD'],index:['ls-files','--stage','-z'],flags:['ls-files','-v','-z'],batch:['cat-file','--batch']};
+ if(Object.hasOwn(simple,kind)&&arg===undefined)return simple[kind];
+ if(kind==='ref'&&managedTaskBranch(arg))return ['rev-parse','--verify','refs/heads/'+arg];
+ if(validOID(arg)&&kind==='tree')return ['ls-tree','-r','-z',arg];
+ if(validOID(arg)&&kind==='root-tree')return ['rev-parse','--verify',arg+'^{tree}'];
+ fail('READ_COMMAND_DENIED');
+}
+export function validateGitBaseline(intent,s){
+ const {fingerprint,...body}=s??{},p=intent.plan;
+ if(!fingerprint||digest(body)!==fingerprint||s.kind!=='git-state-v1'||s.intent_fingerprint!==intent.fingerprint||
+  !same(s.workspace_identity,intent.workspace_identity)||s.branch!==p.branch||s.head_oid!==p.parent||s.ref_oid!==p.parent||
+  !validOID(s.parent_tree_oid)||s.index_tree_oid!==s.parent_tree_oid||s.manifest_sha256!==p.manifest_sha256||
+  !s.metadata||Object.keys(s.metadata).sort().join(',')!=='config_sha256,head_sha256,index_sha256,layout_sha256'||
+  Object.entries(s.metadata).some(([k,v])=>k==='index_sha256'&&v===null?s.index_tree_oid!==indexTree([],p.format):typeof v!=='string'||!/^[a-f0-9]{64}$/.test(v))||
+  !Array.isArray(s.objects_present)||new Set(s.objects_present).size!==s.objects_present.length||
+  !same(s.objects_present,[...s.objects_present].sort())||s.objects_present.some(oid=>!p.objects.some(o=>o.oid===oid)))fail('BASELINE_REQUIRED');
+ return s;
+}
+export class DeliveryGitRead {
+ constructor({binding,drained=()=>false,ownedLocks=()=>({})},io={}){
+  if(!binding||typeof binding.root!=='string'||!binding.root.startsWith('/')||binding.root.endsWith('/')||repositoryURL(binding.url).url!==binding.url||
+   !managedTaskBranch(binding.branch)||!validOID(binding.base_sha))fail('BINDING');
+  this.b=structuredClone(binding);this.drained=drained;
+  this.identity=()=>io.identity?io.identity():physicalIdentity(this.b);
+  this.inventory=()=>io.inventory?io.inventory():inventory(this.b.root);
+  this.metadata=()=>io.metadata?io.metadata():metadata(this.b.root,ownedLocks());
+  this.execute=io.execute??((args,input)=>execFileSync('/usr/bin/git',args,{cwd:this.b.root,input,timeout:10000,maxBuffer:67108864,
+   env:{PATH:'/usr/bin:/bin',GIT_CONFIG_NOSYSTEM:'1',GIT_CONFIG_SYSTEM:'/dev/null',GIT_CONFIG_GLOBAL:'/dev/null',GIT_OPTIONAL_LOCKS:'0',GIT_NO_REPLACE_OBJECTS:'1',GIT_TERMINAL_PROMPT:'0',GIT_LITERAL_PATHSPECS:'1',LC_ALL:'C'},stdio:['pipe','pipe','pipe']}));
+ }
+ read(kind,arg,input){
+  const command=readOnlyCommand(kind,arg);
+  if(kind!=='batch'&&input!==undefined)fail('READ_COMMAND_DENIED');
+  if(kind==='batch'&&(!Buffer.isBuffer(input)||input.length>5000000||!input.toString('ascii').split('\n').filter(Boolean).every(validOID)))fail('READ_COMMAND_DENIED');
+  try{return Buffer.from(this.execute(['--git-dir='+join(this.b.root,'.git'),'--work-tree='+this.b.root,
+   '-c','core.hooksPath=/dev/null','-c','core.fsmonitor=false','-c','core.untrackedCache=false','-c','gc.auto=0','-c','maintenance.auto=false',...command],input));}
+  catch{fail('READ_FAILED');}
+ }
+ objects(oids,format){if(!oids.length)return new Map();return parseBatch(this.read('batch',undefined,Buffer.from(oids.join('\n')+'\n')),oids,format);}
+ ancestor(older,newer,format='sha1'){
+  if(!['sha1','sha256'].includes(format)||![older,newer].every(v=>typeof v==='string'&&new RegExp('^[a-f0-9]{'+(format==='sha1'?40:64)+'}$').test(v)))fail('ANCESTRY_INPUT');
+  if(this.drained()!==true)fail('DRAIN_REQUIRED');
+  const seen=new Set(),queue=[newer];let found=false;
+  // Read verified raw commit objects, not rev-list helpers, replacements or network fetches.
+  for(let at=0;at<queue.length;at++){
+   const id=queue[at];if(seen.has(id))continue;if(seen.size>=16384)fail('ANCESTRY_LIMIT');seen.add(id);
+   const object=this.objects([id],format).get(id);if(object?.type!=='commit')fail('ANCESTRY_OBJECT');
+   const end=object.data.indexOf(Buffer.from('\n\n'));if(end<0||end>1048576)fail('ANCESTRY_OBJECT');
+   const lines=object.data.subarray(0,end).toString('utf8').split('\n'),oid=new RegExp('^[a-f0-9]{'+(format==='sha1'?40:64)+'}$');
+   if(!lines[0].startsWith('tree ')||!oid.test(lines[0].slice(5)))fail('ANCESTRY_OBJECT');
+   const parents=lines.filter(x=>x.startsWith('parent ')).map(x=>x.slice(7));
+   if(parents.length>16||parents.some(x=>!oid.test(x)))fail('ANCESTRY_OBJECT');
+   if(id===older){found=true;break;}queue.push(...parents);
+  }
+  if(this.drained()!==true)fail('DRAIN_REQUIRED');return found;
+ }
+ compile(input){
+  // Inputs are resolved by the runtime from an immutable, checked preview and
+  // operator-configured author identity. This reads only; staging rechecks the
+  // complete preflight again before persisting the approval plan.
+  if(this.drained()!==true)fail('DRAIN_REQUIRED');
+  if(input.parent!==this.b.base_sha||input.branch!==this.b.branch)fail('BINDING');
+  const identity=this.identity(),meta=this.metadata();config(this.read('config'),this.b.url);
+  const format=this.read('format').toString('ascii').trim();
+  if(this.read('branch').toString('ascii').trim()!=='refs/heads/'+this.b.branch||
+   this.read('head').toString('ascii').trim()!==input.parent||this.read('ref',this.b.branch).toString('ascii').trim()!==input.parent)fail('BASELINE_CHANGED');
+  const base=entries(this.read('tree',input.parent)),raw=this.objects([...new Set(base.map(x=>x.oid))],format);
+  if(this.read('root-tree',input.parent).toString('ascii').trim()!==indexTree(base,format))fail('BASELINE_TREE_UNSUPPORTED');
+  const baseline=base.map(x=>{const o=raw.get(x.oid);if(o?.type!=='blob')fail('BASELINE_OBJECT');return {path:x.path,mode:x.mode,bytes:o.data};});
+  const compiled=compileCommit({...input,format,baseline,files:this.inventory()});
+  if(!same(identity,this.identity())||!same(meta,this.metadata())||this.drained()!==true)fail('STATE_CHANGED');
+  return {...compiled,workspace_identity:identity};
+ }
+ capture(intent){
+  const {fingerprint,...body}=intent??{},p=intent?.plan,{fingerprint:pf,...pb}=p??{};
+  if(intent?.kind!=='commit-execution-intent-v1'||digest(body)!==fingerprint||digest(pb)!==pf||p.kind!=='commit-objects-v1'||p.persisted!==false||p.grants_execution!==false)fail('INTENT_CHANGED');
+  if(this.drained()!==true)fail('DRAIN_REQUIRED');
+  const identity=this.identity(),meta=this.metadata();if(!same(identity,intent.workspace_identity)||this.b.url!==intent.resource||this.b.branch!==p.branch||this.b.base_sha!==p.parent)fail('WORKSPACE_CHANGED');
+  config(this.read('config'),this.b.url);const format=this.read('format').toString('ascii').trim();if(format!==p.format)fail('FORMAT_CHANGED');
+  const branch=this.read('branch').toString('ascii').trim();if(branch!=='refs/heads/'+p.branch)fail('BRANCH_CHANGED');
+  const head=this.read('head').toString('ascii').trim(),ref=this.read('ref',p.branch).toString('ascii').trim();if(!validOID(head)||!validOID(ref))fail('REFERENCE_INVALID');
+  const baseEntries=entries(this.read('tree',p.parent)),baseObjects=this.objects([...new Set(baseEntries.map(x=>x.oid))],format);
+  if(this.read('root-tree',p.parent).toString('ascii').trim()!==indexTree(baseEntries,format))fail('BASELINE_TREE_UNSUPPORTED');
+  const baseline=baseEntries.map(x=>{const o=baseObjects.get(x.oid);if(!o||o.type!=='blob')fail('BASELINE_OBJECT');return {path:x.path,mode:x.mode,bytes:o.data};});
+  const actual=this.inventory(),compiled=compileCommit({format,parent:p.parent,branch:p.branch,baseline,files:actual,changes:p.changes,tested_content:p.tested_content,author:p.author,committer:p.committer,when:p.when,message:p.message});
+  if(compiled.plan.fingerprint!==p.fingerprint)fail('PLAN_CHANGED');
+  const index=entries(this.read('index'),true),tree=indexTree(index,format),flags=this.read('flags').toString('utf8').split('\0').filter(Boolean);
+  if(flags.length!==index.length||!same(flags.map(x=>{if(!x.startsWith('H '))fail('INDEX_FLAGS_UNSUPPORTED');return x.slice(2);}).sort(),index.map(x=>x.path).sort()))fail('INDEX_FLAGS_UNSUPPORTED');
+  const objects=this.objects(p.objects.map(x=>x.oid),format);
+  for(const o of p.objects){const got=objects.get(o.oid);if(got&&(got.type!==o.type||got.data.length!==o.bytes))fail('OBJECT_INVALID');}
+  if(!same(identity,this.identity())||!same(meta,this.metadata())||this.read('head').toString('ascii').trim()!==head||
+   this.read('ref',p.branch).toString('ascii').trim()!==ref||this.read('branch').toString('ascii').trim()!==branch||this.drained()!==true)fail('STATE_CHANGED');
+  const second=this.inventory();if(!same(actual.map(x=>({path:x.path,mode:x.mode,hash:sha(x.bytes)})),second.map(x=>({path:x.path,mode:x.mode,hash:sha(x.bytes)}))))fail('WORKTREE_CHANGED');
+  const state={kind:'git-state-v1',intent_fingerprint:fingerprint,workspace_identity:identity,branch:p.branch,head_oid:head,ref_oid:ref,index_tree_oid:tree,
+   parent_tree_oid:indexTree(baseEntries,format),manifest_sha256:p.manifest_sha256,metadata:meta,objects_present:p.objects.filter(x=>objects.get(x.oid)).map(x=>x.oid).sort()};
+  return {...state,fingerprint:digest(state)};
+ }
+ preflight(intent){
+  const s=this.capture(intent),p=intent.plan;
+  if(s.head_oid!==p.parent||s.ref_oid!==p.parent||s.index_tree_oid!==s.parent_tree_oid)fail('BASELINE_CHANGED');
+  validateGitBaseline(intent,s);
+  return {intent_fingerprint:intent.fingerprint,drained:true,manifest_sha256:s.manifest_sha256,workspace_identity:s.workspace_identity,branch:p.branch,parent:p.parent,baseline:s};
+ }
+ observe(intent){
+  const s=this.capture(intent),p=intent.plan;
+  if(s.head_oid!==p.computed_commit_oid||s.ref_oid!==p.computed_commit_oid||s.index_tree_oid!==p.tree_oid||s.objects_present.length!==p.objects.length)fail('NOT_APPLIED');
+  return {kind:'commit-readback-v1',intent_fingerprint:intent.fingerprint,drained:true,object_exists:true,head_oid:s.head_oid,ref_oid:s.ref_oid,
+   commit_oid:p.computed_commit_oid,tree_oid:p.tree_oid,index_tree_oid:s.index_tree_oid,branch:p.branch,parent:p.parent,manifest_sha256:s.manifest_sha256,workspace_identity:s.workspace_identity};
+ }
+ unchanged(intent,baseline){
+  validateGitBaseline(intent,baseline);const {fingerprint}=baseline;
+  const current=this.preflight(intent).baseline;if(!same(current,baseline))fail('EFFECT_UNKNOWN');
+  return {kind:'commit-not-applied-v1',intent_fingerprint:intent.fingerprint,baseline_fingerprint:fingerprint,drained:true,unchanged:true,object_presence_unchanged:true};
+ }
+}