feat: Cloud Hypervisor 执行器生产级 v1（cloud-hypervisor）

单任务单 VM：API 唤醒（preflight→vmm.ping→vm.create→vm.boot→SSH 就绪）、
暂停/快照/休眠等价/关闭/回收、预热快照池、每任务磁盘 copy、容量与磁盘配额门、
受控 egress fail-closed、VM 事件审计与分类失败；worker/server/autoscaler 接线
（executor=cloud-hypervisor，任务内 LLM 不可自选）；默认关闭，不进生产路由。
未做真实 VM 验证：生产主机与本 VM 均无 /dev/kvm、无嵌套虚拟化，验证为 mock +
干跑命令 + 单元测试；真 VM、快照恢复、压测、安全审计见
docs/chv-production-readiness.md。CI 账单故障仍是硬门禁，本提交只到 PR OPEN。

cloud/worker.py

@@ -195,7 +195,8 @@ from cloud.pr_exec import (claim_pr_job, execute_task_pr, finish_pr_job,
                            mark_pr_job_needs_local_worker)
 from cloud.queue import budget_exceeded, ready_tasks
 from cloud.repos import RepoError, checkout_dir, resolve_repo
-from cloud.sandbox import CloudExecutor, DockerExecutor, LocalExecutor
+from cloud.sandbox import CloudExecutor, CloudHypervisorExecutor, \
+    DockerExecutor, LocalExecutor
 from cloud.uploads import upload_root as _upload_root
 from cloud.sandbox import _default_runner as _sandbox_default_runner
 from cloud.caps import effective_capacity, resolve_capacity
@@ -506,6 +507,24 @@ class Worker:
                 self.executor.ignore_host_budget = self.ignore_host_budget
             except Exception:
                 pass
+        # CHV 审计转发：VM 生命周期事件（启动/暂停/恢复/快照/
+        # 销毁/失败）经本回调进 AuthStore 审计（_audit 本身
+        # best-effort，失败不影响任务）。时间线展示 VM 事件时
+        # 读审计表即可，不另起一套 VM 事件表；成本/配额仍走
+        # worker 现有 quota 语义，本回调绝不记账。
+        if isinstance(self.executor, CloudHypervisorExecutor):
+            def _chv_audit(event, task, detail, kind=None):
+                try:
+                    project_id = task.get("project_id") \
+                        if isinstance(task, dict) else None
+                    self._audit(project_id, "chv_vm_" + event,
+                                detail or "")
+                except Exception:
+                    pass
+            try:
+                self.executor.audit_callback = _chv_audit
+            except Exception:
+                pass
         self._cost_store = cost_store
         self._cancel_requested = set()
         # 真取消用：process_factory 可注入（单测用它返回一个假长跑
@@ -2409,12 +2428,15 @@ class Worker:
     # -- 缺 key 门 ------------------------------------------------------
     def _executor_name(self):
         """执行器名：DockerExecutor -> docker，CloudExecutor -> cloud，
-        其它 -> local。cloud 绝不能回落成 local，否则 cloud worker
+        CloudHypervisorExecutor -> cloud-hypervisor，其它 -> local。
+        cloud/cloud-hypervisor 绝不能回落成 local，否则该 worker
         会认领 local 池的任务，池过滤就失效了。"""
         if isinstance(self.executor, DockerExecutor):
             return "docker"
         if isinstance(self.executor, CloudExecutor):
             return "cloud"
+        if isinstance(self.executor, CloudHypervisorExecutor):
+            return "cloud-hypervisor"
         return "local"
     def key_available(self):
         """只查存在性：名在环境里且值非空即 True；值本身绝不返回。"""
@@ -6756,7 +6778,12 @@ def _build_cli_executor(args, host_py):
     docker 时返回 DockerExecutor（env_key 名用 Worker 的解析规则，
     值本身绝不从这里传——DockerExecutor 只查存在性，-e 只传名），
     cloud 时返回 CloudExecutor（通用 HTTP runner，未配 endpoint
-    时执行即明确失败，绝不降级）。"""
+    时执行即明确失败，绝不降级），cloud-hypervisor 时返回
+    CloudHypervisorExecutor（配置走 CHV_* 环境变量，缺依赖时
+    执行即明确失败，绝不降级；任务内 LLM 不可自选它，见
+    sandbox.py 该类 docstring）。"""
+    if getattr(args, "executor", "local") == "cloud-hypervisor":
+        return CloudHypervisorExecutor()
     if getattr(args, "executor", "local") == "cloud":
         return CloudExecutor()
     if getattr(args, "executor", "local") != "docker":
@@ -6834,11 +6861,15 @@ def main(argv=None):
                              "的 max_daily_turns 预算照常生效（双重门）")
     parser.add_argument("--max-tasks", type=int, default=None)
     parser.add_argument("--executor", default="local",
-                        choices=["local", "docker", "cloud"],
+                        choices=["local", "docker", "cloud",
+                                 "cloud-hypervisor"],
                         help="执行器：local 调 host.py 子进程；docker"
                              " 调 DockerExecutor（无 docker 时任务"
                              "明确失败，不静默降级）；cloud 调通用"
-                             " HTTP runner（需 CLOUD_RUNNER_ENDPOINT）")
+                             " HTTP runner（需 CLOUD_RUNNER_ENDPOINT）；"
+                             "cloud-hypervisor 调 CloudHypervisorExecutor"
+                             "（VM 内经 SSH 调 host.py，配置走 CHV_*"
+                             " 环境变量，缺依赖时任务明确失败）")
     parser.add_argument("--worker-id", default=None,
                         help="多 worker 池身份（默认：主机名-进程号；"
                              "生产部署应配稳定 id，否则重启后旧行变 stale）")