Put work items in the state store, and bind the log to them (M1.1)

Development Plan M1.1, as discussed.

- Schema v4: a work_items table (id, scope, title, status, outcome,
  position, data) and an agent row whose active_item points at one
  (NULL: idle). Canonical events and intents carry their work item, and
  events their actor. Older stores are refused with a clear message:
  there was no production data, so no migration (the mechanism stays).
- The log is reached through a Transcript bound to one work item and
  one actor: store.transcript(item, actor) reads only that item and
  writes with both. The planner, executor, delegation and expert desk
  get one per call from the orchestrator instead of holding the store,
  so a component can neither read another task's events (the planner
  read every earlier task's, #78) nor write without attribution.
  store.all_events() is kept for readers that span items (evaluation
  capture, dumps). Intents are begun through the transcript or with
  work_item=, so each belongs to its item.
- The orchestrator opens a work item on 'use', closes it with its
  outcome (completed or abandoned), and carries what the operator said
  while idle into the new item as copies with their origin, so a task
  sent before 'use' is still planned from (D1). control.py keeps its
  state machine through get_state()/transition(), now over the active
  work item, until M2.6 retires it.
- nisse_dev.dump shows work items and each event's item and actor.

Tests: test_work_items.py (scoping, attribution, intent ownership,
restart, outcomes, carried messages, a second task never seeing the
first); the suites updated for the per-call transcript.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01PPQ14L3LikyefCMFBqEbKE

nisse-dev/tests/test_evals.py

@@ -27,10 +27,10 @@ def record_pair(
     role: str = "helper",
     status: str = "handback",
 ) -> int:
-    store.append_event(
+    store.transcript("t", "helper").append(
         DelegationStarted(brief=brief, role=role, model=model, caps={"turns": 5})
     )
-    store.append_event(
+    store.transcript("t", "helper").append(
         DelegationCompleted(
             handback="what changed: greet.py",
             artifacts=["greet.py"],
@@ -39,7 +39,7 @@ def record_pair(
             exit_status=status,
         )
     )
-    return store.read_events()[-1].id
+    return store.all_events()[-1].id
 
 
 def test_pairs_a_start_with_its_completion(store: StateStore) -> None:
@@ -55,16 +55,18 @@ def test_pairs_a_start_with_its_completion(store: StateStore) -> None:
 def test_unpaired_start_is_skipped(store: StateStore) -> None:
     # A crash mid-delegation leaves a start with no completion; a half-formed
     # record would pollute the set L9 exists to make trustworthy.
-    store.append_event(
+    store.transcript("t", "helper").append(
         DelegationStarted(brief="died", role="helper", model="m", caps={})
     )
     assert collect(store) == []
 
 
 def test_unrelated_events_between_the_pair_are_ignored(store: StateStore) -> None:
-    store.append_event(DelegationStarted(brief="b", role="helper", model="m", caps={}))
-    store.append_event(AssistantText(text="working", model="m"))
-    store.append_event(
+    store.transcript("t", "helper").append(
+        DelegationStarted(brief="b", role="helper", model="m", caps={})
+    )
+    store.transcript("t", "helper").append(AssistantText(text="working", model="m"))
+    store.transcript("t", "helper").append(
         DelegationCompleted(
             handback="done",
             artifacts=[],
@@ -103,7 +105,7 @@ def test_consults_and_delegations_share_the_set(store: StateStore) -> None:
 
 def test_collect_can_start_after_a_marker(store: StateStore) -> None:
     record_pair(store, brief="old")
-    marker = store.read_events()[-1].id
+    marker = store.all_events()[-1].id
     record_pair(store, brief="new")
     assert [r.brief for r in collect(store, after=marker)] == ["new"]