P0-P8: Full V1.0.0 Alpha implementation + audit reports

Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/runtime/src/tools/BuiltInToolRegistrar.ts

@@ -0,0 +1,83 @@
+/**
+ * BuiltInToolRegistrar - Registers all built-in tools into ToolRegistry
+ *
+ * Implements T-214: Registers T-206..T-213 tools into ToolRegistry
+ *
+ * @module packages/runtime/src/tools/BuiltInToolRegistrar
+ */
+
+import { ToolRegistry } from './ToolRegistry.js'
+import { fs_read, fs_write, fs_edit, fs_patch, fs_list, createFsExecutors } from './fs/index.js'
+import { shell_run, createShellExecutor } from './shell/index.js'
+import { git_status, git_diff, git_commit, git_branch, git_merge, createGitExecutor } from './git/index.js'
+import { project_rules, project_context, createProjectExecutor } from './project/index.js'
+import { artifact_create, artifact_read, createArtifactExecutor } from './artifact/index.js'
+import { context_assemble, context_compact, createContextExecutor } from './context/index.js'
+import { permission_check, permission_prompt, createPermissionExecutor } from './permission/index.js'
+import { doctor_check, doctor_fix, createDoctorExecutor } from './doctor/index.js'
+
+/**
+ * Register all built-in tools into a ToolRegistry instance.
+ */
+export class BuiltInToolRegistrar {
+  private registry: ToolRegistry
+
+  constructor(registry: ToolRegistry) {
+    this.registry = registry
+  }
+
+  /**
+   * Register all built-in tools.
+   */
+  register_all(project_root: string): void {
+    // FS Tools (T-206)
+    this.register_tool(fs_read, createFsExecutors(project_root)['fs.read'])
+    this.register_tool(fs_write, createFsExecutors(project_root)['fs.write'])
+    this.register_tool(fs_edit, createFsExecutors(project_root)['fs.edit'])
+    this.register_tool(fs_patch, createFsExecutors(project_root)['fs.patch'])
+    this.register_tool(fs_list, createFsExecutors(project_root)['fs.list'])
+
+    // Shell Tool (T-207)
+    this.register_tool(shell_run, createShellExecutor(project_root)['shell.run'])
+
+    // Git Tools (T-208)
+    this.register_tool(git_status, createGitExecutor(project_root)['git.status'])
+    this.register_tool(git_diff, createGitExecutor(project_root)['git.diff'])
+    this.register_tool(git_commit, createGitExecutor(project_root)['git.commit'])
+    this.register_tool(git_branch, createGitExecutor(project_root)['git.branch'])
+    this.register_tool(git_merge, createGitExecutor(project_root)['git.merge'])
+
+    // Project Tools (T-209)
+    this.register_tool(project_rules, createProjectExecutor(project_root)['project.rules'])
+    this.register_tool(project_context, createProjectExecutor(project_root)['project.context'])
+
+    // Artifact Tools (T-210)
+    this.register_tool(artifact_create, createArtifactExecutor()['artifact.create'])
+    this.register_tool(artifact_read, createArtifactExecutor()['artifact.read'])
+
+    // Context Tools (T-211)
+    this.register_tool(context_assemble, createContextExecutor()['context.assemble'])
+    this.register_tool(context_compact, createContextExecutor()['context.compact'])
+
+    // Permission Tools (T-212)
+    this.register_tool(permission_check, createPermissionExecutor()['permission.check'])
+    this.register_tool(permission_prompt, createPermissionExecutor()['permission.prompt'])
+
+    // Doctor Tools (T-213)
+    this.register_tool(doctor_check, createDoctorExecutor()['doctor.check'])
+    this.register_tool(doctor_fix, createDoctorExecutor()['doctor.fix'])
+  }
+
+  /**
+   * Register a single tool with its executor.
+   */
+  private register_tool(definition: typeof fs_read, executor: (call: any) => any): void {
+    this.registry.register(definition.name, definition, executor)
+  }
+}
+
+export function register_builtin_tools(registry: ToolRegistry, project_root: string): BuiltInToolRegistrar {
+  const registrar = new BuiltInToolRegistrar(registry)
+  registrar.register_all(project_root)
+  return registrar
+}