feat(web): live step list, option choice card and inline approval card; drop run mode switch

- session page shows the agent.plan TodoList (drawer: one-line progress); options and approval
  cards sit at their step; composer has a "先看方案再执行" toggle instead of the mode switch
- settings expose option timeout, timeout action and approval validity; quick goals follow glossary

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/components/settings/agent.tsx

@@ -150,6 +150,27 @@ const ADVANCED_CARD: CardSpec = {
       kind: "number",
       hint: "超时后按「仍在等待」汇报结束",
     },
+    {
+      name: "agent.optionsTimeoutSec",
+      label: "方案选择等待(秒)",
+      kind: "number",
+      hint: "Agent 给出方案后等你选择的最长时间",
+    },
+    {
+      name: "agent.optionsTimeoutAction",
+      label: "超时未选",
+      kind: "select",
+      options: [
+        { value: "recommended", label: "自动选推荐项" },
+        { value: "stop", label: "不选，Agent 收尾" },
+      ],
+    },
+    {
+      name: "agent.approvalTimeoutSec",
+      label: "会话内审批有效期(秒)",
+      kind: "number",
+      hint: "步骤处的审批卡过期未批准，按拒绝处理",
+    },
     {
       name: "agent.sessionDir",
       label: "会话目录",
@@ -168,6 +189,9 @@ const ADVANCED_CARD: CardSpec = {
   fromSettings: (s) => ({
     "agent.goalPollSec": n(s.agent.goalPollSec),
     "agent.goalWaitHours": n(s.agent.goalWaitHours),
+    "agent.optionsTimeoutSec": n(s.agent.optionsTimeoutSec),
+    "agent.optionsTimeoutAction": s.agent.optionsTimeoutAction,
+    "agent.approvalTimeoutSec": n(s.agent.approvalTimeoutSec),
     "agent.sessionDir": s.agent.sessionDir ?? "",
     "agent.fakeScript": s.agent.fakeScript ?? "",
   }),
@@ -175,6 +199,9 @@ const ADVANCED_CARD: CardSpec = {
     agent: {
       goalPollSec: num(v["agent.goalPollSec"]),
       goalWaitHours: num(v["agent.goalWaitHours"]),
+      optionsTimeoutSec: num(v["agent.optionsTimeoutSec"]),
+      optionsTimeoutAction: v["agent.optionsTimeoutAction"] === "stop" ? "stop" : "recommended",
+      approvalTimeoutSec: num(v["agent.approvalTimeoutSec"]),
       sessionDir: str(v["agent.sessionDir"]) || null,
       fakeScript: str(v["agent.fakeScript"]) || null,
     },