建立ToolDbProcessPort合约层

结论：已新增ToolDbProcessPort合约、OPFS tool DB flat-file/transcript store和Node/WASM gates，baseline保持28/28/131/0且promotion继续锁定。

wasm-port/runtime/sdk/README.md

@@ -126,6 +126,9 @@ import {
   createProjectReleaseReadinessArtifactValidationSummaryViewModel,
   createProjectReleaseReadinessReport,
   createProjectReleaseReadinessSummaryViewModel,
+  createLinuxCncToolDbProcessPort,
+  createToolDbProcessDiagnostics,
+  createToolDbTransactionPlan,
   createSessionSnapshot,
   defaultMachinePaths,
   gcodeFilenameFromProgramPath,
@@ -143,6 +146,8 @@ import {
   loadMachineSessionSnapshot,
   loadMachineTextFiles,
   loadMachineToolTableFromOpfs,
+  loadToolDbFile,
+  loadToolDbTranscript,
   loadTextFile,
   machineFilePaths,
   machineIniPath,
@@ -183,9 +188,15 @@ import {
   saveMachineSessionSnapshot,
   saveMachineTextFiles,
   saveSessionSnapshot,
+  saveToolDbFile,
+  saveToolDbTranscript,
   saveTextFile,
   sessionSnapshotPath,
+  toolDbFilePath,
+  toolDbRootPath,
+  toolDbTranscriptPath,
   toolTablePath,
+  validateToolDbTranscript,
   validateIniPanelShellWorkflowOverviewReleaseReadinessArtifactJson,
   validateSessionSnapshot,
 } from "./src/index.js";
@@ -534,6 +545,7 @@ private module paths:
 - `getOpfsRoot()`, `saveTextFile()`, and `loadTextFile()` for browser OPFS text
   persistence.
 - `machineIniPath()`, `toolTablePath()`, `parameterFilePath()`,
+  `toolDbRootPath()`, `toolDbFilePath()`, `toolDbTranscriptPath()`,
   `gcodeProgramPath()`, `sessionSnapshotPath()`, `defaultMachinePaths()`, and
   `normalizeOpfsPath()` for stable OPFS path construction.
 - `createMachineSessionSnapshotPayload()`, `createSessionSnapshot()`,
@@ -552,6 +564,14 @@ private module paths:
 - `restoreMachineParametersFromOpfs()`, `loadMachineToolTableFromOpfs()`, and
   `loadMachineSessionFromOpfs()` for loading OPFS machine state into the
   LinuxCNC-backed interpreter SDK.
+- `createLinuxCncToolDbProcessPort()`, `createToolDbTransactionPlan()`,
+  `validateToolDbTranscript()`, and `createToolDbProcessDiagnostics()` for the
+  LinuxCNC-owned tool DB process port contract. Contract-only mode does not run
+  `DB_PROGRAM`, does not parse `.tbl` as a fallback, and keeps execution and
+  promotion disabled.
+- `saveToolDbFile()`, `loadToolDbFile()`, `saveToolDbTranscript()`, and
+  `loadToolDbTranscript()` for OPFS persistence of the DB flat file and protocol
+  transcript artifacts.
 
 These helpers only move and validate host files. Parameter and tool-table
 effects still come from the LinuxCNC-backed interpreter SDK methods they call.