browser/openspec/changes/synchronize-run-deployment-execution/tasks.md

1. Task boundaries and contracts

• 1.1 正向提示词：让授权操作者在编辑已停止服务器时读取完整已保存部署配置；让 Run 执行并确认同一冻结修订；开启本机诊断后可直接打印目录和启动命令，且所有成功路径都有自动化验证。
• 1.2 方向提示词：在 platform/ 与 platform_web/ 沿用现有部署 DTO/生命周期/编辑工作流模式；在独立 run.git 的协议和生命周期执行器中实现匹配契约；验证 go test ./...、前端测试/类型检查、scripts/check-structure.sh 与严格 OpenSpec 校验。
• 1.3 任务边界：不把 Run 源码移入 browser 仓库；不输出凭据、运行绑定或环境变量；不让原始目录/命令进入 Platform API、日志回传、任务结果、工件、审计或插件接口；不增加计费、云主机或无关 SaaS 能力。

2. Platform deployment contract

• 2.1 Add typed deployment execution version/receipt contracts and validation for frozen lifecycle jobs.
• 2.2 Require compatible Run capability before lifecycle dispatch and project validated Run confirmation in deployment views.
• 2.3 Add explicit deployment-field clearing and preserve omitted shell values; cover service/API behavior with tests.

3. Platform editor workflow

• 3.1 Automatically retrieve authorized saved inputs when the deployment editor opens and clear them on close.
• 3.2 Display dispatch revision separately from Run-confirmed revision and update frontend tests/types.

4. Independent Run execution

• 4.1 Extend independent run.git protocol and validation with the typed deployment envelope and safe execution receipt.
• 4.2 Execute deployment-aware lifecycle actions using the frozen root, working directory, shell, and commands.
• 4.3 Add opt-in local-only raw startup diagnostics that bypass the upload log sink and exclude credentials/environment values.
• 4.4 Add Run protocol/runtime tests covering execution, receipt fences, enabled diagnostics, and remote-channel redaction.

5. Verification and delivery

• 5.1 Run browser Platform/backend/frontend validation and strict OpenSpec validation.
• 5.2 Run independent Run test suite and inspect both worktrees for scoped changes only.
• 5.3 Stage, commit, and push scoped changes on main in both repositories.