P0-P8: Full V1.0.0 Alpha implementation + audit reports

Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/runtime/src/index.ts

@@ -0,0 +1,78 @@
+// AirCoding Runtime Package
+// Main export barrel for @aircoding/runtime
+
+// Storage layer
+export { DatabaseManager, createDatabaseManager } from './storage/DatabaseManager.js'
+export { MigrationRunner } from './storage/MigrationRunner.js'
+export { Recovery, createRecovery } from './storage/Recovery.js'
+export * from './storage/assertEnum.js'
+
+// Project management
+export { ProjectStore, createProjectStore } from './project/ProjectStore.js'
+export { ProjectLocator, createProjectLocator } from './project/ProjectLocator.js'
+export { ProjectInitializer, createProjectInitializer } from './project/ProjectInitializer.js'
+
+// Session management
+export { SessionManager, createSessionManager } from './sessions/SessionManager.js'
+
+// Artifact and evidence management
+export { ArtifactStore, createArtifactStore } from './artifacts/ArtifactStore.js'
+export { EvidenceStore, createEvidenceStore } from './artifacts/EvidenceStore.js'
+
+// Event system
+export { EventIngestor, eventIngestor } from './events/EventIngestor.js'
+
+// Security
+export { PathClassifier, createPathClassifier } from './security/PathClassifier.js'
+export { CommandRiskAnalyzer, createCommandRiskAnalyzer } from './security/CommandRiskAnalyzer.js'
+export { SecretRedactor, createSecretRedactor, get_shared_redactor } from './security/SecretRedactor.js'
+export { PermissionEngine, createPermissionEngine, DEFAULT_PROFILES } from './security/PermissionEngine.js'
+
+// Tools
+export { ToolRegistry, createToolRegistry } from './tools/ToolRegistry.js'
+export { BuiltInToolRegistrar, register_builtin_tools } from './tools/BuiltInToolRegistrar.js'
+
+// Capabilities
+export { CapabilityManifestValidator, createCapabilityManifestValidator } from './capabilities/CapabilityManifestValidator.js'
+export { CapabilityRegistry, createCapabilityRegistry } from './capabilities/CapabilityRegistry.js'
+
+// Context
+export { PromptLayerLoader, createPromptLayerLoader } from './context/PromptLayerLoader.js'
+export { CompactionPolicy, createCompactionPolicy } from './context/CompactionPolicy.js'
+export { ContextAssembler, createContextAssembler } from './context/ContextAssembler.js'
+
+// Workers
+export { WorkerProtocol } from './workers/WorkerProtocol.js'
+export { WorkerProcess } from './workers/WorkerProcess.js'
+export { WorkerManager } from './workers/WorkerManager.js'
+
+// Scheduler
+export { Scheduler } from './scheduler/Scheduler.js'
+export { TaskGraph } from './scheduler/TaskGraph.js'
+export { WavePlanner } from './scheduler/WavePlanner.js'
+export { RetryPlanner } from './scheduler/RetryPlanner.js'
+export { AgentMonitor } from './scheduler/AgentMonitor.js'
+export { WorkspaceManager } from './scheduler/WorkspaceManager.js'
+
+// Projection
+export { ProjectionStore } from './projection/ProjectionStore.js'
+
+// Agents
+export { MainAgent } from './agents/main/MainAgent.js'
+export { ArchitectureDesigner } from './agents/architecture/ArchitectureDesigner.js'
+
+// Knowledge
+export { DebugKnowledgeStore } from './knowledge/DebugKnowledgeStore.js'
+export { LearnedMemoryStore } from './knowledge/LearnedMemoryStore.js'
+
+// Logging
+export { Logger } from './logging/Logger.js'
+export { DeveloperLogEncryptor } from './logging/DeveloperLogEncryptor.js'
+
+// Doctor
+export { DoctorService } from './doctor/DoctorService.js'
+
+// App
+export { RuntimeApp, createRuntimeApp } from './app/RuntimeApp.js'
+export { ServiceRegistry } from './app/ServiceRegistry.js'
+export type { ServiceGraph } from './app/ServiceRegistry.js'