P0-P8: Full V1.0.0 Alpha implementation + audit reports

Implements 123 tasks across 9 phases (T-001..T-809) totaling 146 source files.

Monorepo (P0):
- 7-package Bun + Turborepo + TypeScript monorepo
- dependency-cruiser enforcing 7 forbidden edges + 5 deep-import rules

Contracts (P0):
- 16 type files (ids/error/event/runtime/ipc/task/worker-result/tool/artifact/evidence/project/provider/permission/ui/capability/platform)

Storage & Events (P1):
- DatabaseManager + MigrationRunner (19 tables, 22 indexes, 5 schema_meta seeds)
- 16 repositories (Repository<T,I,U> pattern, INV-1 status columns via EventStore.project only)
- EventSchemaRegistry (54 durable + 7 ephemeral), EventStore, EventBus, EventIngestor
- Project/Session/Artifact/Evidence stores + 8-step Recovery

Tools & Permission (P2):
- PathClassifier (8 categories), CommandRiskAnalyzer (10 categories), SecretRedactor
- PermissionEngine 6-layer evaluation (capability→profile→task_scope→risk→credential→user_prompt)
- ToolRegistry with 20+ tools across fs/shell/git/project/artifact/context/permission/doctor
- CapabilityManifestValidator + CapabilityRegistry

LLM & Context (P3):
- ModelConfigLoader, CapabilityMatrix, AnthropicCanonicalConverter
- AnthropicAdapter + OpenAICompatibleAdapter
- ProviderManager facade
- PromptLayerLoader (L0/L1/L3/L5), CompactionPolicy, ContextAssembler

Worker IPC & Scheduler (P4):
- WorkerProtocol (NDJSON), WorkerProcess (exit codes 0-5), WorkerManager (spawn/handshake)
- WorkerRuntime (INV-3: IPC only, no direct fs/shell/SQLite)
- 5 worker roles (Executor/Reviewer/Debugger/Compactor/ExperienceMiner)
- TaskGraph, WavePlanner, RetryPlanner, AgentMonitor, WorkspaceManager
- Scheduler (state machine), 8-step Recovery

C++ Toolchain (P5):
- DiagnosticParser, CppProjectDetector, CMakeConfigurator, CppBuilder
- CppTestRunner, CppcheckRunner, ClangdClient
- CppToolRegistrar + capability manifest

Projection & TUI (P6):
- ProjectionStore (hydrate/apply/snapshot/subscribe)
- TuiApp + 8 components (Session/Task/Agent/Tool/Diff/Evidence/Permission/Blocker/Hud)
- ProjectionClient in-process ref

Agents & Knowledge (P7):
- MainAgent, ArchitectureDesigner
- DebugKnowledgeStore + LearnedMemoryStore (single-writer, outbox model)
- Role integration wiring

CLI & Doctor & Release (P8):
- Logger + DeveloperLogEncryptor (AES-256-GCM)
- DoctorService (self_bootstrap first)
- RuntimeApp + ServiceRegistry
- 11 CLI commands: run/init/doctor/provider/resume/compact/history/session/restore/e2e/release
- CliEntrypoint + air<TODO>

Audit (in AirPlan/docs/):
- Deepseek开发阶段审计.md (97 findings)
- Opus开发阶段审计.md (140+ findings, 18 P0 blockers)
- MiniMaxM3开发阶段审计.md (18 P0 blockers, focuses on executability)
- AirPlan/TODO.md (technical debt + 42 TODOs by phase)

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

packages/tui/src/ProjectionClient.ts

@@ -0,0 +1,38 @@
+/**
+ * ProjectionClient - In-process projection consumer
+ * DD §13.2. Direct ref (not IPC). TUI imports ONLY contracts + this client.
+ *
+ * @module packages/tui/src/ProjectionClient
+ */
+
+import type { SessionProjection, ProjectionSubscriber } from './types.js'
+
+export class ProjectionClient {
+  private snapshot: SessionProjection | null = null
+  private subscribers: Set<ProjectionSubscriber> = new Set()
+
+  /**
+   * Receive and cache a projection snapshot.
+   */
+  receive_snapshot(projection: SessionProjection): void {
+    this.snapshot = projection
+    for (const sub of this.subscribers) {
+      sub(projection)
+    }
+  }
+
+  /**
+   * Subscribe to projection updates.
+   */
+  subscribe(subscriber: ProjectionSubscriber): () => void {
+    this.subscribers.add(subscriber)
+    return () => this.subscribers.delete(subscriber)
+  }
+
+  /**
+   * Get current snapshot.
+   */
+  get_snapshot(): SessionProjection | null {
+    return this.snapshot
+  }
+}

packages/tui/src/TuiApp.tsx

@@ -0,0 +1,82 @@
+/**
+ * TuiApp - Main TUI application shell
+ * DD §13.2. Uses OpenTUI @opentui/* as renderer (npm-dep, do NOT reimplement).
+ *
+ * @module packages/tui/src/TuiApp
+ */
+
+import { ProjectionClient } from './ProjectionClient.js'
+import { SessionView } from './components/SessionView.js'
+import { TaskListView } from './components/TaskListView.js'
+import { AgentStatusView } from './components/AgentStatusView.js'
+import { HudView } from './components/HudView.js'
+import type { SessionProjection } from './types.js'
+
+export interface TuiAppProps {
+  client: ProjectionClient
+}
+
+export interface TuiAppState {
+  projection: SessionProjection | null
+  active_view: 'tasks' | 'agents' | 'tools' | 'diff'
+}
+
+export class TuiApp {
+  private client: ProjectionClient
+  private state: TuiAppState
+  private unsubscribe: (() => void) | null = null
+
+  constructor(props: TuiAppProps) {
+    this.client = props.client
+    this.state = { projection: null, active_view: 'tasks' }
+  }
+
+  /**
+   * Start the TUI application.
+   * TODO(P6): Initialize OpenTUI renderer and start render loop.
+   */
+  async start(): Promise<void> {
+    this.unsubscribe = this.client.subscribe((projection) => {
+      this.state.projection = projection
+      this.render()
+    })
+
+    // Initial snapshot
+    const snapshot = this.client.get_snapshot()
+    if (snapshot) {
+      this.state.projection = snapshot
+      this.render()
+    }
+  }
+
+  /**
+   * Stop the TUI application.
+   */
+  stop(): void {
+    this.unsubscribe?.()
+    this.unsubscribe = null
+  }
+
+  /**
+   * Set active view.
+   */
+  set_view(view: TuiAppState['active_view']): void {
+    this.state.active_view = view
+    this.render()
+  }
+
+  /**
+   * Render the current state.
+   * TODO(P6): Use OpenTUI renderer instead of console output.
+   */
+  private render(): void {
+    // STUB: Would render via OpenTUI components
+    const p = this.state.projection
+    if (!p) {
+      console.log('[TUI] No projection data')
+      return
+    }
+
+    console.log(`[TUI] Session: ${p.session_id} | Status: ${p.status} | Tasks: ${p.tasks.length} | Agents: ${p.agents.length}`)
+  }
+}

packages/tui/src/components/AgentStatusView.tsx

@@ -0,0 +1,26 @@
+/**
+ * AgentStatusView - Render agent status
+ * INV: renders projection only; never mutates domain tables.
+ *
+ * @module packages/tui/src/components/AgentStatusView
+ */
+
+import type { AgentProjection } from '../types.js'
+
+export interface AgentStatusViewProps {
+  agents: AgentProjection[]
+}
+
+export function AgentStatusView({ agents }: AgentStatusViewProps): string {
+  if (agents.length === 0) return '(no agents)'
+
+  const lines: string[] = ['Agents:', '']
+
+  for (const agent of agents) {
+    const status_icon = agent.status === 'running' ? '🟢' : agent.status === 'completed' ? '✅' : agent.status === 'error' ? '🔴' : '⚪'
+    const heartbeat = agent.last_heartbeat ? ` (hb: ${agent.last_heartbeat})` : ''
+    lines.push(`  ${status_icon} ${agent.id}  [${agent.type}]${heartbeat}`)
+  }
+
+  return lines.join('\n')
+}

packages/tui/src/components/BlockerReport.tsx

@@ -0,0 +1,33 @@
+/**
+ * BlockerReport - Render blocker report
+ *
+ * @module packages/tui/src/components/BlockerReport
+ */
+
+export interface BlockerReportProps {
+  task_id: string
+  title: string
+  reason: string
+  escalation: 'none' | 'architecture_designer' | 'main_agent' | 'user'
+  suggestions?: string[]
+}
+
+export function BlockerReport({ task_id, title, reason, escalation, suggestions }: BlockerReportProps): string {
+  const lines: string[] = [
+    '🚫 BLOCKER DETECTED',
+    `Task:   ${task_id}`,
+    `Title:  ${title}`,
+    `Reason: ${reason}`,
+    `Escalated to: ${escalation}`,
+    ''
+  ]
+
+  if (suggestions && suggestions.length > 0) {
+    lines.push('Suggestions:')
+    for (const s of suggestions) lines.push(`  • ${s}`)
+  } else {
+    lines.push('(no automated suggestions available)')
+  }
+
+  return lines.join('\n')
+}

packages/tui/src/components/DiffView.tsx

@@ -0,0 +1,47 @@
+/**
+ * DiffView + EvidenceView - Render diffs and link to artifacts/evidence
+ * Code-view §7 rule 5: link back to artifact/evidence refs.
+ *
+ * @module packages/tui/src/components/DiffView
+ */
+
+export interface DiffViewProps {
+  file: string
+  diff_content: string
+  artifact_refs?: string[]
+  evidence_refs?: string[]
+}
+
+export function DiffView({ file, diff_content, artifact_refs, evidence_refs }: DiffViewProps): string {
+  const lines: string[] = [`Diff: ${file}`, '']
+
+  const diff_lines = diff_content.split('\n')
+  for (const line of diff_lines.slice(0, 50)) { // Cap at 50 lines
+    if (line.startsWith('+')) lines.push(`  \x1b[32m${line}\x1b[0m`)
+    else if (line.startsWith('-')) lines.push(`  \x1b[31m${line}\x1b[0m`)
+    else lines.push(`  ${line}`)
+  }
+
+  if (artifact_refs && artifact_refs.length > 0) {
+    lines.push('', 'Artifacts:')
+    for (const ref of artifact_refs) lines.push(`  📎 ${ref}`)
+  }
+
+  if (evidence_refs && evidence_refs.length > 0) {
+    lines.push('', 'Evidence:')
+    for (const ref of evidence_refs) lines.push(`  🔗 ${ref}`)
+  }
+
+  return lines.join('\n')
+}
+
+export interface EvidenceViewProps {
+  entity_type: string
+  entity_id: string
+  evidence_kind: string
+  filepath: string
+}
+
+export function EvidenceView({ entity_type, entity_id, evidence_kind, filepath }: EvidenceViewProps): string {
+  return `Evidence: ${evidence_kind} for ${entity_type}/${entity_id}\n  Path: ${filepath}`
+}

packages/tui/src/components/HudView.tsx

@@ -0,0 +1,42 @@
+/**
+ * HudView - Heads-up display with presets
+ * DD §13.2. HUD presets: Full/Essential/Minimal.
+ * Reference: claude-hud pattern (behavioral, no code reuse).
+ *
+ * @module packages/tui/src/components/HudView
+ */
+
+export type HudPreset = 'full' | 'essential' | 'minimal'
+
+export interface HudViewProps {
+  preset: HudPreset
+  session_status: string
+  task_count: number
+  running_agents: number
+  token_usage?: { current: number; max: number }
+}
+
+export function HudView({ preset, session_status, task_count, running_agents, token_usage }: HudViewProps): string {
+  const status_icon = session_status === 'active' ? '🟢' : '🟡'
+
+  const components: string[] = []
+
+  if (preset === 'full' || preset === 'essential') {
+    components.push(`${status_icon} ${session_status}`)
+    components.push(`Tasks: ${task_count}`)
+    components.push(`Agents: ${running_agents}`)
+  }
+
+  if (preset === 'full') {
+    if (token_usage) {
+      const pct = Math.round((token_usage.current / token_usage.max) * 100)
+      components.push(`Tokens: ${token_usage.current}/${token_usage.max} (${pct}%)`)
+    }
+  }
+
+  if (preset === 'minimal') {
+    components.push(`${status_icon}`)
+  }
+
+  return components.join(' │ ')
+}

packages/tui/src/components/PermissionPrompt.tsx

@@ -0,0 +1,29 @@
+/**
+ * PermissionPrompt - Render permission request
+ * Emits via UiCommandChannel only (never private services).
+ *
+ * @module packages/tui/src/components/PermissionPrompt
+ */
+
+export interface PermissionPromptProps {
+  tool_name: string
+  reason: string
+  risk_score: number
+  on_allow: () => void
+  on_deny: () => void
+  on_always_allow?: () => void
+}
+
+export function PermissionPrompt({ tool_name, reason, risk_score, on_allow, on_deny, on_always_allow }: PermissionPromptProps): string {
+  const risk_bar = '█'.repeat(Math.min(10, Math.ceil(risk_score / 10))) + '░'.repeat(Math.max(0, 10 - Math.ceil(risk_score / 10)))
+
+  return [
+    '═══ Permission Required ═══',
+    `Tool:   ${tool_name}`,
+    `Reason: ${reason}`,
+    `Risk:   [${risk_bar}] ${risk_score}/100`,
+    '',
+    '[A] Allow  [D] Deny  [S] Allow Always',
+    '═══════════════════════════'
+  ].join('\n')
+}

packages/tui/src/components/SessionView.tsx

@@ -0,0 +1,25 @@
+/**
+ * SessionView - Render session projection
+ * INV: renders projection only; never mutates domain tables.
+ *
+ * @module packages/tui/src/components/SessionView
+ */
+
+import type { SessionProjection } from '../types.js'
+
+export interface SessionViewProps {
+  projection: SessionProjection
+}
+
+export function SessionView({ projection }: SessionViewProps): string {
+  const lines: string[] = [
+    `Session: ${projection.session_id}`,
+    `Project: ${projection.project_id}`,
+    `Status:  ${projection.status}`,
+    `Title:   ${projection.title || '(none)'}`,
+    `Tasks:   ${projection.tasks.length}`,
+    `Agents:  ${projection.agents.length}`,
+    ''
+  ]
+  return lines.join('\n')
+}

packages/tui/src/components/TaskListView.tsx

@@ -0,0 +1,25 @@
+/**
+ * TaskListView - Render task list
+ * INV: renders projection only; never mutates domain tables.
+ *
+ * @module packages/tui/src/components/TaskListView
+ */
+
+import type { TaskProjection } from '../types.js'
+
+export interface TaskListViewProps {
+  tasks: TaskProjection[]
+}
+
+export function TaskListView({ tasks }: TaskListViewProps): string {
+  if (tasks.length === 0) return '(no tasks)'
+
+  const lines: string[] = ['Tasks:', '']
+
+  for (const task of tasks) {
+    const status_icon = task.status === 'completed' ? '✅' : task.status === 'failed' ? '❌' : task.status === 'running' ? '🔄' : '⏳'
+    lines.push(`  ${status_icon} ${task.id}  [${task.type}] ${task.title}  (${task.status}, retries: ${task.retry_count})`)
+  }
+
+  return lines.join('\n')
+}

packages/tui/src/components/ToolRunView.tsx

@@ -0,0 +1,27 @@
+/**
+ * ToolRunView - Render tool/command runs
+ * INV: renders projection only; never mutates domain tables.
+ *
+ * @module packages/tui/src/components/ToolRunView
+ */
+
+export interface ToolRunProps {
+  id: string
+  tool_name: string
+  status: string
+  started_at: string
+  completed_at?: string
+  duration_ms?: number
+}
+
+export function ToolRunView({ runs }: { runs: ToolRunProps[] }): string {
+  if (runs.length === 0) return '(no tool runs)'
+
+  const lines: string[] = ['Tool Runs:', '']
+  for (const run of runs) {
+    const status_icon = run.status === 'ok' ? '✅' : run.status === 'error' ? '❌' : '🔄'
+    const dur = run.duration_ms ? ` (${run.duration_ms}ms)` : ''
+    lines.push(`  ${status_icon} ${run.tool_name} [${run.status}]${dur}`)
+  }
+  return lines.join('\n')
+}

packages/tui/src/index.ts

@@ -0,0 +1,38 @@
+/**
+ * TUI package — Terminal UI components
+ *
+ * INV-4: TUI imports ONLY contracts + ProjectionClient.
+ * Uses OpenTUI @opentui/* as renderer (npm-dep, do NOT reimplement).
+ *
+ * @module packages/tui
+ */
+
+export { ProjectionClient } from './ProjectionClient.js'
+export { TuiApp } from './TuiApp.js'
+export type { TuiAppProps, TuiAppState } from './TuiApp.js'
+
+export { SessionView } from './components/SessionView.js'
+export type { SessionViewProps } from './components/SessionView.js'
+
+export { TaskListView } from './components/TaskListView.js'
+export type { TaskListViewProps } from './components/TaskListView.js'
+
+export { AgentStatusView } from './components/AgentStatusView.js'
+export type { AgentStatusViewProps } from './components/AgentStatusView.js'
+
+export { ToolRunView } from './components/ToolRunView.js'
+export type { ToolRunProps } from './components/ToolRunView.js'
+
+export { DiffView, EvidenceView } from './components/DiffView.js'
+export type { DiffViewProps, EvidenceViewProps } from './components/DiffView.js'
+
+export { PermissionPrompt } from './components/PermissionPrompt.js'
+export type { PermissionPromptProps } from './components/PermissionPrompt.js'
+
+export { BlockerReport } from './components/BlockerReport.js'
+export type { BlockerReportProps } from './components/BlockerReport.js'
+
+export { HudView } from './components/HudView.js'
+export type { HudViewProps, HudPreset } from './components/HudView.js'
+
+export type { SessionProjection, TaskProjection, AgentProjection, ProjectionSubscriber } from './types.js'

packages/tui/src/types.ts

@@ -0,0 +1,37 @@
+/**
+ * TUI shared types
+ * TUI imports ONLY contracts. No runtime imports.
+ *
+ * @module packages/tui/src/types
+ */
+
+import type { SessionID, ProjectID, TaskID, AgentID, ToolRunID, ISOTimeString } from '@aircoding/contracts'
+
+export interface SessionProjection {
+  session_id: SessionID
+  project_id: ProjectID
+  status: string
+  title?: string
+  tasks: TaskProjection[]
+  agents: AgentProjection[]
+}
+
+export interface TaskProjection {
+  id: TaskID
+  type: string
+  status: string
+  title: string
+  retry_count: number
+  attempts: number
+  created_at: string
+}
+
+export interface AgentProjection {
+  id: AgentID
+  type: string
+  status: string
+  task_id?: TaskID
+  last_heartbeat?: string
+}
+
+export type ProjectionSubscriber = (projection: SessionProjection) => void