fix(jd): register Guanghu source push route

server-tools/lake-lamp-authz/repo-push-broker.test.js

@@ -41,6 +41,37 @@ test("repository resolution is exact and returns an explicit unregistered receip
   );
 });
 
+test("Guanghu Ice Heart resolves only through its public code-channel URL", () => {
+  const registry = {
+    "bingshuo/guanghu-ice-heart": {
+      branches: ["main"],
+      remote: "file:///var/lib/guanghu/personas/guanghu/hlcc-v16.0.1/data/repositories/bingshuo/guanghu-ice-heart.git",
+      source_urls: [
+        "https://guanghulab.com/code/bingshuo/guanghu-ice-heart.git",
+      ],
+    },
+  };
+  assert.deepEqual(
+    resolveRepository(
+      "https://guanghulab.com/code/bingshuo/guanghu-ice-heart.git",
+      registry,
+    ),
+    {
+      ok: true,
+      diagnostic_code: "repository_registered",
+      repo: "bingshuo/guanghu-ice-heart",
+      branches: ["main"],
+    },
+  );
+  assert.equal(
+    resolveRepository(
+      "https://guanghulab.com/fifth-domain/bingshuo/guanghu-ice-heart.git",
+      registry,
+    ).diagnostic_code,
+    "repository_not_registered",
+  );
+});
+
 test("receiver permits only an allowlisted fast-forward bundle with an exact base", async () => {
   const uploadDir = fs.mkdtempSync(path.join(os.tmpdir(), "lake-lamp-upload-"));
   const bundle = path.join(uploadDir, "one.bundle"); fs.writeFileSync(bundle, "bundle");