feat(memory): Storage — the one byte owner: sealed kinds, Owner, StorageId, StorageClosedException, Heap on every target (SKEEP-003 P2, S1.1a)

[michalharakal]

Summary

SKEEP-003 slice S1.1a (milestone M1 #1002, PRD M1-F1 core): Storage — the one and only owner of bytes (§4.2–4.4, rules 1–2), with the common Heap kind on every target. TensorView (S1.3) interprets a storage; Tensor is the DSL handle over a view — neither owns bytes.

• sk.ainet.lang.memory.Storage (sealed, AutoCloseable, opt-in): id: StorageId, sizeBytes, owner: Owner, domain, scope (derived from the owner), debugOrigin: TensorId?, isAlive, isMutable, checkAlive() → StorageClosedException(id, origin) (not a JVM crash, not silent corruption), idempotent close() (owned = freed exactly once, borrowed = forgotten — lender's bytes untouched, alias = detached; emits TraceEvent.Free), slice(offset, length) → an Owner.Alias view that keeps its parent alive, delegates mutability, and dies with the parent. Kinds: Heap (final, common), OffHeap / Mapped (abstract, bound per platform in [S1.1b] P2: JVM/Android Storage.OffHeap (FFM MemorySegment / direct ByteBuffer) and Storage.Mapped (FileChannel.map) #1019 JVM/Android, [S1.1c] P2: Kotlin/Native and WASM/JS Storage bindings (malloc/mmap; WASM → Heap) #1020 Native/Wasm), Device (placeholder).
• Storage.Heap: one Kotlin array (floats | ints | bytes) + arrayOffset + sizeBytes; floats()/ints()/bytes() allocate owned storage for a ScopeKind and emit TraceEvent.Allocation; wrap(array, …) borrows without copying (the GGUF DEQUANTIZE_TO_FP32 over-allocates: 1.1B Q4_K_M needs >12 GB heap transiently (~4.4 GB legit) #782 copyOf replacement) and is never freed by us. Kernels unwrap once per call (floats/ints/bytes + arrayOffset) — the access-path rule from the Phase-2 spike ([S1.0] P2 spike (decision #6): prototype TensorView/Storage access-path benchmark on JVM + Android, flat-RSS loop — report only #1016).
• Owner (sealed): Owned(scope) | Borrowed(external) | Alias(parent); StorageId monotonic per-process value class (kotlin.concurrent.atomics.AtomicLong); MemoryDomain.HOST_OFFHEAP added (additive; no exhaustive when over the enum exists).
• StorageTest: owned lifecycle with trace events, id monotonicity, borrowed release, alias lifetime/mutability/nesting and invalidation on parent close, slice bounds/alignment, rendering.
• BCV: lang-core jvm dump regenerated (additions only). Nothing consumes Storage yet (façades come in S1.4).

Stacked on #1017 (TraceSink — allocation events); retarget to develop after it merges.

Test plan

Full local gate (scripts/pr-gate.sh, JDK 25); results in the first comment. Targeted: lang-core sk.ainet.lang.memory.* 36/36.

Closes #1018

🤖 Generated with Claude Code

[michalharakal]

Local gate scripts/pr-gate.sh (JDK 25) on 5b9b0e4 (stacked on #1061):

=== pr-gate: JVM tests ===                                      BUILD SUCCESSFUL in 4m 47s
=== pr-gate: apiCheck ===                                       BUILD SUCCESSFUL in 1m 15s
=== pr-gate: verifyNpmPins jsTest wasmJsTest wasmWasiTest ===   BUILD SUCCESSFUL
=== pr-gate: linuxX64Test ===                                   BUILD SUCCESSFUL in 2m 1s
=== pr-gate: assemble ===                                       BUILD SUCCESSFUL
=== pr-gate: :skainet-test:skainet-test-java:test ===           BUILD SUCCESSFUL
pr-gate: all legs passed.

Targeted: lang-core sk.ainet.lang.memory.* 36/36.