feat(agent): layered system prompt, environment facts and intent-routed skills

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/agent/test/redact.test.ts

@@ -63,12 +63,13 @@ describe("buildSystemPrompt", () => {
       role: "媒体库自动化助手",
       goal: "把 Dune 1080p 收进来",
       constraints: ["只给方案,不执行"],
+      capabilities: ["download.list", "download.inspect", "inventory.query"],
     });
     expect(p).toContain("你是媒体库自动化助手");
     expect(p).toContain("把 Dune 1080p 收进来");
     expect(p).toContain("证据");
     expect(p).toContain("不得声称用户已授权");
-    expect(p).toContain("“已提交”不等于“已入库”");
+    expect(p).toContain("「已提交」不等于「已入库」");
     expect(p).toMatch(/网页、RSS.*不可信数据/);
     expect(p).toMatch(/不得输出.*凭证.*passkey/);
     // AG-3:探查查询、参数类型、中文思考与汇报、被打断时的中文小结