P0-P8: Full V1.0.0 Alpha implementation + audit reports

Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/runtime/src/knowledge/LearnedMemoryStore.ts

@@ -0,0 +1,87 @@
+/**
+ * LearnedMemoryStore - Learned memory storage
+ * DD §11.3. INV-2: single writer; outbox model.
+ *
+ * @module packages/runtime/src/knowledge/LearnedMemoryStore
+ */
+
+import { existsSync, mkdirSync } from 'fs'
+import { join } from 'path'
+import { Database } from 'bun:sqlite'
+
+export interface MemoryEntry {
+  id: string
+  type: 'pattern' | 'rule' | 'skill' | 'experience'
+  title: string
+  content: string
+  source_task_ids: string
+  project_id: string
+  status: 'draft' | 'promoted' | 'archived'
+  created_at: string
+  promoted_at?: string
+  archived_at?: string
+  metadata_json?: string
+}
+
+export class LearnedMemoryStore {
+  private db: Database | null = null
+  private db_path: string
+
+  constructor(project_root: string) {
+    this.db_path = join(project_root, '.air', 'shared', 'learned-memory.db')
+  }
+
+  open(): void {
+    const dir = join(this.db_path, '..')
+    if (!existsSync(dir)) mkdirSync(dir, { recursive: true })
+
+    this.db = new Database(this.db_path)
+    this.db.exec(`
+      CREATE TABLE IF NOT EXISTS learned_memory (
+        id TEXT PRIMARY KEY,
+        type TEXT NOT NULL,
+        title TEXT NOT NULL,
+        content TEXT NOT NULL,
+        source_task_ids TEXT NOT NULL,
+        project_id TEXT NOT NULL,
+        status TEXT DEFAULT 'draft',
+        created_at TEXT NOT NULL,
+        promoted_at TEXT,
+        archived_at TEXT,
+        metadata_json TEXT
+      );
+      CREATE INDEX IF NOT EXISTS idx_memory_type ON learned_memory(type);
+      CREATE INDEX IF NOT EXISTS idx_memory_status ON learned_memory(status);
+    `)
+  }
+
+  /**
+   * Insert a memory entry.
+   * INV-2: External write first → then emit memory.promoted via outbox.
+   */
+  insert(entry: MemoryEntry): void {
+    if (!this.db) throw new Error('Store not opened')
+    const stmt = this.db.prepare(`
+      INSERT INTO learned_memory (id, type, title, content, source_task_ids, project_id, status, created_at, promoted_at, archived_at, metadata_json)
+      VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `)
+    stmt.run(entry.id, entry.type, entry.title, entry.content, entry.source_task_ids, entry.project_id, entry.status, entry.created_at, entry.promoted_at, entry.archived_at, entry.metadata_json)
+  }
+
+  lookup_by_type(type: string): MemoryEntry[] {
+    if (!this.db) return []
+    return this.db.prepare('SELECT * FROM learned_memory WHERE type = ? AND status != ? ORDER BY created_at DESC').all(type, 'archived') as MemoryEntry[]
+  }
+
+  update_status(id: string, status: 'promoted' | 'archived'): void {
+    if (!this.db) return
+    const field = status === 'promoted' ? 'promoted_at' : 'archived_at'
+    this.db.prepare(`UPDATE learned_memory SET status = ?, ${field} = ? WHERE id = ?`).run(status, new Date().toISOString(), id)
+  }
+
+  scan_stale(days_stale: number = 90): MemoryEntry[] {
+    if (!this.db) return []
+    const cutoff = new Date(Date.now() - days_stale * 86400000).toISOString()
+    return this.db.prepare('SELECT * FROM learned_memory WHERE status = ? AND promoted_at < ?').all('promoted', cutoff) as MemoryEntry[]
+  }
+}