chore(deno): migrate toolchain from Node 24 + pnpm to Deno 2.9.7 + TypeScript 7.0.2 (W1.5)

- root deno.json workspace (nodeModulesDir auto), npm versions registered once in imports, deno.lock;
  remove pnpm-lock/pnpm-workspace/root package.json; members keep minimal package.json (name/type/exports)
- tasks: dev, typecheck (tsc 7.0.2 per member + deno check), lint/fmt (biome, useImportExtensions),
  test (vitest via deno), check:tokens, build (web + deno compile), ci, db:migrate/reset, gen:types
- tsconfig base moved to config/ (no root tsconfig.json); deno types -> types/deno.d.ts; web drops baseUrl
- server: Deno.serve entry with graceful shutdown, --role migrate|preflight|probe, WEB_ROOT static SPA hosting;
  drop @hono/node-server, tsx, esbuild build.mjs
- logger: redact child() bindings and serialize err by message/stack; sync stdout destination; tests
- relative imports get explicit extensions (sites/mp-sync paths left for follow-up)
- crash-recovery tests spawn `deno run -A`; tasks tests use unique per-file schemas
- single-container Dockerfile + entrypoint (migrate -> preflight -> api+worker watchdog), docker-compose.yml
- docs: README, runbook, ADR-001 superseded, plan §1 validation row

Co-Authored-By: Claude Fable 5.1 <[email protected]>

packages/agent/src/index.ts

@@ -1,16 +1,16 @@
 // @umt/agent 公开入口。Pi SDK 类型只出现在 src/pi/*,这里只导出本包自有接口。
 export const PACKAGE_NAME = "@umt/agent";
 
-export { CapabilityError, type CapabilityErrorCode, isCapabilityError } from "./capability/errors";
+export { CapabilityError, type CapabilityErrorCode, isCapabilityError } from "./capability/errors.ts";
 export {
   CapabilityRegistry,
   type CapabilityRegistryOptions,
   defaultIdempotencyKey,
   type RegisteredCapability,
   stableStringify,
-} from "./capability/registry";
-export { capabilityIdToToolName, isCapabilityId, toolNameToCapabilityId } from "./capability/tool-name";
-export * from "./capability/types";
+} from "./capability/registry.ts";
+export { capabilityIdToToolName, isCapabilityId, toolNameToCapabilityId } from "./capability/tool-name.ts";
+export * from "./capability/types.ts";
 export {
   type CreateFakeRuntimeOptions,
   createFakeRuntime,
@@ -21,16 +21,16 @@ export {
   type FakeStep,
   type FakeToolCall,
   type FakeToolResult,
-} from "./pi/fake";
+} from "./pi/fake.ts";
 export {
   checkToolCall,
   DEFAULT_COMPACTION_INSTRUCTIONS,
   PiAgentRuntime,
   type PiAgentRuntimeOptions,
-} from "./pi/runtime";
-export { sessionPathFor } from "./pi/session";
-export { isSensitiveKey, REDACTED, redactForModel, redactString, summarizeForLog } from "./redact";
-export * from "./runtime/port";
+} from "./pi/runtime.ts";
+export { sessionPathFor } from "./pi/session.ts";
+export { isSensitiveKey, REDACTED, redactForModel, redactString, summarizeForLog } from "./redact.ts";
+export * from "./runtime/port.ts";
 export {
   type AgentSettings,
   AgentSettingsSchema,
@@ -39,5 +39,5 @@ export {
   type ResolvedAgentSettings,
   resolveAgentSettings,
   THINKING_LEVELS,
-} from "./settings";
-export { buildSystemPrompt, type SystemPromptInput } from "./system-prompt";
+} from "./settings.ts";
+export { buildSystemPrompt, type SystemPromptInput } from "./system-prompt.ts";