feat: 落地 Agent 三模式与审批流水线

[SATA260]

改了什么 / What changed

• 三个内置 Agent（ask / plan / agent）共用全量工具表，mode 只冻可执行 Names 与一条 developer 模式规则。
• 审批改成流水线：工具默认 + 参数校验 → 本 Agent Names → Agent Effects 表 → manual / auto / yolo。目录外必须 ask，Agent 表和 yolo 都不能抬成 allow。
• auto 开单后由独立复审模型填单，失败则升级给人；前端拆成工作模式与审批两个菜单。

怎么验证 / How to verify

• cd server && go test ./...
• pnpm test:client
• ask 只能只读问答；plan 只能写 .cursor/*.md
• agent + manual：写文件开审批；拒绝或单个工具失败不打死 Run
• agent + yolo：工作区内写文件直接执行，目录外仍要审批；agent + auto：复审失败时升级成人工审批

相关 Issue / Related issue：#20

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Advanced

Run ID: b30a21b6-395f-4760-9229-7666d91b4d0b

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}