refactor(contracts,agent): single capability spec and agent run event definitions in contracts

B3: CapabilityDescriptor gains replay; CapabilitySpec + capabilitySpec(id) assemble
CAPABILITY_CATALOG + CAPABILITY_IO; drop CapabilityDefinition/CapabilityRisk. agent
registry registers contracts CapabilitySpec (kind/allowedKinds instead of its own
scope enum; approve also requires authorize). AgentRun port renamed AgentRunHandle.

B9: contracts AgentRunEvent/AgentRunEventBody/AgentRunEventRow/AgentUsageTotals with
row and SSE mapping helpers; agent onEvent receives AgentRunEvent, delivered serially
in seq order, firstSeq continues numbering across processes.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/contracts/test/schemas.test.ts

@@ -184,6 +184,18 @@ describe("关键合同行为", () => {
       expect(isSchema(exported[cap.inputSchema]), cap.inputSchema).toBe(true);
       expect(isSchema(exported[cap.outputSchema]), cap.outputSchema).toBe(true);
       expect(exported[cap.inputSchema]).toBe(C.CAPABILITY_IO[cap.id as C.KnownCapabilityId].input);
+      expect(exported[cap.outputSchema]).toBe(C.CAPABILITY_IO[cap.id as C.KnownCapabilityId].output);
+    }
+  });
+
+  it("capabilitySpec 组装目录元数据与真实 schema;有副作用的类别不可重放", () => {
+    for (const id of C.CAPABILITY_IDS) {
+      const spec = C.capabilitySpec(id);
+      const { inputSchema: _i, outputSchema: _o, ...meta } = C.CAPABILITY_CATALOG[id];
+      expect(spec).toMatchObject(meta);
+      expect(spec.inputSchema).toBe(C.CAPABILITY_IO[id].input);
+      expect(spec.outputSchema).toBe(C.CAPABILITY_IO[id].output);
+      if (spec.kind !== "read" && spec.kind !== "preview") expect(spec.replay, id).toBe("never");
     }
   });