feat(agent): capability registry, Pi AgentRuntimePort, fake model provider and redaction guard (W1-5)

- CapabilityRegistry: descriptor(id/version/schema/scope/risk/idempotent/preview/replay),
  invoke = scope limit -> input schema -> server-side authorize -> idempotency key -> handler
  -> output schema -> audit; capability id <-> tool name mapping (download.submit <-> download__submit)
- PiAgentRuntime (pi-agent-core AgentHarness 0.87.1): whitelist tools + before_tool re-check,
  redacted event stream, JSONL session at sessionDir/<runId>.jsonl, resume/abort/compact,
  tool-call/duration/token/cost budgets -> abort + run_failed(budget)
- AgentSettings -> pi-ai createProvider (anthropic / openai-compatible), compaction mapping
- FakeModelProvider + createFakeRuntime (scripted, transcript-derived, survives crash/resume)
- buildSystemPrompt, redactForModel; 27 tests incl. SIGKILL + resume

Co-Authored-By: Claude Fable 5.1 <[email protected]>

packages/agent/test/redact.test.ts

@@ -0,0 +1,76 @@
+import { describe, expect, it } from "vitest";
+import { buildSystemPrompt, REDACTED, redactForModel, redactString, summarizeForLog } from "../src";
+
+describe("redactForModel", () => {
+  it("遮蔽敏感键、含 passkey 的 URL、Bearer、请求头、URL 账号密码", () => {
+    const input = {
+      title: "Dune",
+      cookie: "uid=1; pass=abc",
+      apiKey: "sk-ant-1234567890abcd",
+      api_key: "k",
+      Authorization: "Bearer abcdefghijk",
+      accessToken: "t0k3n",
+      passkey: "p",
+      usage: { totalTokens: 100, inputTokens: 20, maxTokens: 5 },
+      links: [
+        "https://pt.example/download.php?id=9&passkey=0123456789abcdef",
+        "https://mt.example/api/rss?sign=abc&t=1",
+        "http://admin:[email protected]:8080/api/v2",
+      ],
+      log: "fetch failed: Authorization: Basic dXNlcjpwYXNz\nnext",
+      text: "use token=abcdef and key sk-live-ABCDEFGH1234",
+      nested: new Map([["set-cookie", "a=b"]]),
+    };
+    const out = redactForModel(input);
+    const text = JSON.stringify(out);
+    for (const secret of [
+      "uid=1",
+      "sk-ant-",
+      "abcdefghijk",
+      "t0k3n",
+      "0123456789abcdef",
+      "sign=abc",
+      "hunter2",
+      "dXNlcjpwYXNz",
+      "=abcdef",
+      "sk-live",
+    ]) {
+      expect(text).not.toContain(secret);
+    }
+    expect(out.cookie).toBe(REDACTED);
+    expect(out.passkey).toBe(REDACTED);
+    expect(out.usage).toEqual({ totalTokens: 100, inputTokens: 20, maxTokens: 5 });
+    expect(out.links[0]).toBe(`https://pt.example/download.php?id=9&passkey=${REDACTED}`);
+    expect(out.links[2]).toContain("qb.local:8080");
+    expect(out.title).toBe("Dune");
+    expect(input.cookie).toBe("uid=1; pass=abc");
+  });
+
+  it("字符串与摘要截断", () => {
+    expect(redactString("rss https://a.b/rss?rsskey=XYZ&x=1")).toBe(`rss https://a.b/rss?rsskey=${REDACTED}&x=1`);
+    const s = summarizeForLog({ long: "x".repeat(1000) }, 50);
+    expect(s.length).toBeLessThan(80);
+    expect(s).toContain("more");
+    const circular: Record<string, unknown> = { a: 1 };
+    circular.self = circular;
+    expect(summarizeForLog(circular)).toContain("[Circular]");
+  });
+});
+
+describe("buildSystemPrompt", () => {
+  it("包含证据、授权、已提交≠已入库、不可信外部内容、凭证禁令与约束", () => {
+    const p = buildSystemPrompt({
+      role: "媒体库自动化助手",
+      goal: "把 Dune 1080p 收进来",
+      constraints: ["只给方案,不执行"],
+    });
+    expect(p).toContain("你是媒体库自动化助手");
+    expect(p).toContain("把 Dune 1080p 收进来");
+    expect(p).toContain("证据");
+    expect(p).toContain("不得声称用户已授权");
+    expect(p).toContain("“已提交”不等于“已入库”");
+    expect(p).toMatch(/网页、RSS.*不可信数据/);
+    expect(p).toMatch(/不得输出.*凭证.*passkey/);
+    expect(p).toContain("- 只给方案,不执行");
+  });
+});