feat(web): live step list, option choice card and inline approval card; drop run mode switch

- session page shows the agent.plan TodoList (drawer: one-line progress); options and approval
  cards sit at their step; composer has a "先看方案再执行" toggle instead of the mode switch
- settings expose option timeout, timeout action and approval validity; quick goals follow glossary

Co-Authored-By: Claude Opus 5.5 <[email protected]>

apps/web/app/routes/console/agent.tsx

@@ -18,7 +18,10 @@ export default function AgentPage() {
 
   return (
     <>
-      <PageHeader title="Agent 会话" description="交代目标,Agent 在授权范围内执行并汇报。只要方案时只调查,不执行。" />
+      <PageHeader
+        title="Agent 会话"
+        description="交代目标，Agent 列出步骤后在授权范围内执行并汇报；需要审批的动作停在对应步骤等你批准。"
+      />
       {mock ? (
         <div className="mb-4 flex flex-wrap items-center gap-3 rounded-xl border border-warning/40 bg-warning/10 px-4 py-3 text-caption text-warning">
           <FlaskConical className="h-4 w-4 shrink-0" />
@@ -37,9 +40,9 @@ export default function AgentPage() {
             <h2 className="mb-3 text-body font-medium text-foreground">新会话</h2>
             <GoalComposer
               pending={create.isPending}
-              onSubmit={(goal, mode) =>
+              onSubmit={(goal, opts) =>
                 create.mutate(
-                  { goal, mode },
+                  { goal, ...opts },
                   {
                     onSuccess: (run) => navigate(`/console/agent/${run.id}${mock ? "?mock=1" : ""}`),
                     onError: (e) => toast.error(errorMessage(e)),
@@ -51,7 +54,9 @@ export default function AgentPage() {
           <div className="flex gap-3 rounded-xl border border-border/70 p-4 text-caption text-muted-foreground">
             <ShieldCheck aria-hidden className="mt-0.5 size-4 shrink-0" />
             <div className="space-y-1">
-              <p>每次工具调用都经服务端授权校验,不在白名单或没有授权的调用会被拒绝并在对话里标出。</p>
+              <p>
+                每次工具调用都经服务端授权校验。控制台发起的会话里，没有持续授权的下载、整理、策略发布会在对应步骤出审批卡。
+              </p>
               <p>汇报分两栏:模型自述仅供参考,"系统核实的结果"取自下载计划、下载任务和整理记录。</p>
             </div>
           </div>