P0-P8: Full V1.0.0 Alpha implementation + audit reports

Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/runtime/src/scheduler/RetryPlanner.ts

@@ -0,0 +1,97 @@
+/**
+ * RetryPlanner - Decide retry strategy for failed tasks
+ *
+ * Implements DD §7.4.
+ *
+ * @module packages/runtime/src/scheduler/RetryPlanner
+ */
+
+export type RetryDecision = 'retry' | 'retry_serial' | 'debug' | 'skip' | 'block' | 'cancel'
+
+export interface RetryInput {
+  task_id: string
+  attempt_count: number
+  failure_signature: string
+  failure_summary: string
+  previous_signatures: string[]
+  max_retries: number
+  is_env_error: boolean
+  is_arch_error: boolean
+}
+
+export interface RetryResult {
+  decision: RetryDecision
+  reason: string
+  escalate_to: 'architecture_designer' | 'main_agent' | 'user' | null
+  delay_ms?: number
+}
+
+export class RetryPlanner {
+  private default_max_retries: number
+
+  constructor(default_max_retries: number = 3) {
+    this.default_max_retries = default_max_retries
+  }
+
+  /**
+   * Decide retry strategy based on failure analysis.
+   */
+  decide(input: RetryInput): RetryResult {
+    const max_retries = input.max_retries || this.default_max_retries
+
+    // Env impossibility → block immediately
+    if (input.is_env_error) {
+      return {
+        decision: 'block',
+        reason: 'Environment error — cannot retry until env is fixed',
+        escalate_to: 'user'
+      }
+    }
+
+    // Architecture/interface mismatch → route to ArchitectureDesigner
+    if (input.is_arch_error) {
+      return {
+        decision: 'block',
+        reason: 'Architecture mismatch — routing to ArchitectureDesigner',
+        escalate_to: 'architecture_designer'
+      }
+    }
+
+    // Same failure signature → escalate faster
+    const same_signature_count = input.previous_signatures.filter(s => s === input.failure_signature).length
+    if (same_signature_count >= 2) {
+      return {
+        decision: 'debug',
+        reason: `Same failure signature (${input.failure_signature}) repeated ${same_signature_count + 1} times`,
+        escalate_to: 'main_agent'
+      }
+    }
+
+    // Max retries exceeded
+    if (input.attempt_count >= max_retries) {
+      return {
+        decision: 'cancel',
+        reason: `Max retries (${max_retries}) exceeded`,
+        escalate_to: 'main_agent'
+      }
+    }
+
+    // Serial retry for same-area conflicts
+    if (same_signature_count >= 1) {
+      return {
+        decision: 'retry_serial',
+        reason: `Retrying with serialized execution (conflict detected)`,
+        escalate_to: null,
+        delay_ms: 5000
+      }
+    }
+
+    // Default retry
+    return {
+      decision: 'retry',
+      reason: `Retry attempt ${input.attempt_count + 1}/${max_retries}`,
+      escalate_to: null,
+      delay_ms: Math.min(1000 * Math.pow(2, input.attempt_count), 30000) // Exponential backoff
+    }
+  }
+}