Draft: establish Gitoxide-backed Write/Edit acceptance

[zhiiw]

Summary

Close the Gitoxide-backed managed Write/Edit acceptance and recovery path without reintroducing a Git CLI dependency.

This is a stacked API-level Draft. It composes the already separated M2 authorities; final delivery must still be rebuilt from the latest main after its prerequisites land.

Primary invariant

After managed T1, one Runtime-owned immutable result can reach exactly one terminal state:

• workspace_successor_committed
• no_workspace_change_committed
• operation_failed_no_effect_committed
• unsettled

A changed success follows exactly:

immutable accepted tree -> pure transform -> candidate ref/receipt -> atomic SQLite T2 + successor + head -> accepted-ref CAS projection

The candidate is evidence, RuntimeEvents/SQLite are accepted truth, and projection recovery never re-runs Write/Edit.

Scope

• explicit persisted managed-coding-v1 profile exposing only Write/Edit;
• recoverable Gitoxide baseline import and exact session reopen;
• Runtime-owned strict JSON result and four terminal states;
• atomic no-effect and successor settlement;
• accepted-ref projection reconciliation;
• real helper session test and child-process kill after SQLite successor commit but before ref promotion.

Status

Draft. Desktop/CLI selection UX is not enabled here. SHA-256 repositories remain fail-closed. M3 has not started.

中文说明

摘要

本堆叠 Draft 闭合 Gitoxide 版 managed Write/Edit 接受与恢复链，不重新引入 Git CLI。前置合并后，最终交付仍需从最新 main 重建。

主要不变量

managed T1 之后，Runtime-owned immutable result 只能进入四种互斥终态：successor committed、no workspace change、failed with no effect、unsettled。

发生内容变化时，唯一链路是：

immutable accepted tree -> pure transform -> candidate ref/receipt -> SQLite 原子提交 T2 + successor + head -> accepted-ref CAS projection

candidate 只是证据；RuntimeEvents/SQLite 才是 accepted truth；投影恢复绝不重跑 Write/Edit。

范围

• 显式持久化 managed-coding-v1 profile，仅开放 Write/Edit；
• 可恢复的 Gitoxide baseline import 和精确 session reopen；
• Runtime-owned strict JSON result 与四终态结算；
• no-effect/successor 原子提交；
• accepted-ref 投影收敛；
• 真实 helper session 测试，以及 SQLite successor 已提交、ref 尚未推进时杀子进程并重开的测试。

当前仍是 Draft：Desktop/CLI 选择入口尚未开启；SHA-256 repository 继续 fail closed；M3 尚未开始。

[zhiiw]

Closed as an obsolete extraction/integration slice. The current delivery path is the merged Gitoxide foundation followed by #40 -> #41 -> #42. This PR remains available as design and implementation history.

中文说明

该 PR 属于旧 extraction/integration 栈，现已失去独立合并价值。当前交付路径是已合并的 Gitoxide 基础，然后依次审查 #40 → #41 → #42。这里继续保留设计、实现与审查历史。