refactor: 将客服后端重构为宿主可嵌入模块

- 注入数据库、运行时配置、统一响应、文件存储和平台 AI 能力，补充业务读写工具与客户快捷操作契约。

- 移除模块内重复的组织、客户、工单、标签、技能、旧工作流、MCP 和迁移实现，将身份权限与业务主体交由宿主管理。

- 使用 libSQL 重构向量存储，并完善图片消息、访客身份、排队调度、企业微信和支持聊天页面。

- 统一 HTTP、DTO 与 WebSocket 的 snake_case 协议，补齐模块初始化、业务动作和公共载荷等回归测试。

internal/ai/tooling/registry_test.go

@@ -7,34 +7,6 @@ import (
 	"code.tczkiot.com/wlw/ai-agent/internal/pkg/toolx"
 )
 
-func TestRegistryResolvesRegisteredToolPolicy(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve(toolx.GraphCreateTicketConfirm.Code)
-	if err != nil {
-		t.Fatalf("Resolve returned error: %v", err)
-	}
-	if definition.RiskLevel != RiskLevelWrite || !definition.RequireConfirmation || definition.MaxCallsPerRun != 1 {
-		t.Fatalf("unexpected definition: %#v", definition)
-	}
-	if err := DefaultRegistry.Authorize(definition, Policy{AllowedToolCodes: []string{toolx.GraphCreateTicketConfirm.Code}}); err == nil {
-		t.Fatal("expected confirmation requirement")
-	}
-}
-
-func TestRegistryIncludesGraphInputSchemaAndRiskPolicy(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve(toolx.GraphCreateTicketConfirm.Code)
-	if err != nil {
-		t.Fatalf("Resolve returned error: %v", err)
-	}
-	if definition.InputSchema["type"] != "object" || len(definition.InputSchema["required"].([]string)) != 2 {
-		t.Fatalf("unexpected graph schema: %#v", definition.InputSchema)
-	}
-	if err := DefaultPolicyGuard.Authorize(Invocation{Definition: definition, Policy: Policy{
-		AllowedToolCodes: []string{definition.Code}, AllowedRiskLevels: []string{RiskLevelRead}, Confirmed: true,
-	}}); err == nil || !strings.Contains(err.Error(), "risk level") {
-		t.Fatalf("expected risk policy rejection, got %v", err)
-	}
-}
-
 func TestRegistryRequiresConfirmationForHandoff(t *testing.T) {
 	definition, err := DefaultRegistry.Resolve(toolx.GraphHandoffConversation.Code)
 	if err != nil {
@@ -48,29 +20,9 @@ func TestRegistryRequiresConfirmationForHandoff(t *testing.T) {
 	}
 }
 
-func TestRegistryIncludesAllTicketDraftToolInputs(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve(toolx.GraphPrepareTicketDraft.Code)
-	if err != nil {
-		t.Fatalf("Resolve returned error: %v", err)
-	}
-	properties, _ := definition.InputSchema["properties"].(map[string]any)
-	for _, key := range []string{"title", "description", "issue", "impact", "expectedOutcome", "currentAttempt"} {
-		if _, ok := properties[key]; !ok {
-			t.Fatalf("ticket draft schema missing %q: %#v", key, definition.InputSchema)
-		}
-	}
-}
-
-func TestRegistryTreatsAdministratorSelectedMCPToolsAsAllowedTools(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve("knowledge/search")
-	if err != nil {
-		t.Fatalf("Resolve returned error: %v", err)
-	}
-	if definition.RiskLevel != RiskLevelRead || definition.RequireConfirmation {
-		t.Fatalf("unexpected MCP definition: %#v", definition)
-	}
-	if err := DefaultRegistry.Authorize(definition, Policy{AllowedToolCodes: []string{"knowledge/search"}, AllowedRiskLevels: []string{RiskLevelRead}}); err != nil {
-		t.Fatalf("Authorize returned error: %v", err)
+func TestRegistryRejectsUnregisteredDynamicTool(t *testing.T) {
+	if _, err := DefaultRegistry.Resolve("knowledge/search"); err == nil {
+		t.Fatal("expected unregistered dynamic tool to be rejected")
 	}
 }
 
@@ -91,19 +43,33 @@ func TestNormalizeCustomerReplyRejectsSecretAndNormalizesText(t *testing.T) {
 	}
 }
 
-func TestMCPExecutorAllowsSelectedToolThroughAuthorization(t *testing.T) {
-	executor := NewMCPExecutor(DefaultRegistry, nil)
-	_, _, err := executor.Execute(t.Context(), "knowledge/search", nil, Policy{
-		AllowedToolCodes:  []string{"knowledge/search"},
-		AllowedRiskLevels: []string{RiskLevelRead},
-	})
-	if err == nil || !strings.Contains(err.Error(), "runtime is not configured") {
-		t.Fatalf("expected authorization to pass before the missing runtime error, got %v", err)
+func TestNormalizeCustomerReplyRedactsRestrictedNetworkPolicy(t *testing.T) {
+	reply, err := NormalizeCustomerReply("剩余流量：10GB\n当前已限速至128kbps\n请重启设备后重试")
+	if err != nil {
+		t.Fatalf("NormalizeCustomerReply() error = %v", err)
+	}
+	if strings.Contains(reply, "限速") || strings.Contains(reply, "128kbps") {
+		t.Fatalf("restricted network policy leaked: %q", reply)
+	}
+	for _, expected := range []string{"剩余流量：10GB", "请重启设备后重试", restrictedNetworkPolicyFallback} {
+		if !strings.Contains(reply, expected) {
+			t.Fatalf("expected %q in sanitized reply: %q", expected, reply)
+		}
+	}
+}
+
+func TestNormalizeCustomerReplyHidesThrottlingDenial(t *testing.T) {
+	reply, err := NormalizeCustomerReply("当前没有限速。")
+	if err != nil {
+		t.Fatalf("NormalizeCustomerReply() error = %v", err)
+	}
+	if reply != restrictedNetworkPolicyFallback {
+		t.Fatalf("unexpected restricted-policy fallback: %q", reply)
 	}
 }
 
 func TestPolicyGuardRejectsTotalCallsAndOversizedArguments(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve("knowledge/search")
+	definition, err := DefaultRegistry.Resolve(toolx.BuiltinKnowledgeRetrieve.Code)
 	if err != nil {
 		t.Fatalf("Resolve returned error: %v", err)
 	}
@@ -120,21 +86,3 @@ func TestPolicyGuardRejectsTotalCallsAndOversizedArguments(t *testing.T) {
 		t.Fatalf("expected argument size rejection, got %v", err)
 	}
 }
-
-func TestPolicyGuardRejectsToolOutsideSelectedSkillWhitelist(t *testing.T) {
-	definition, err := DefaultRegistry.Resolve("knowledge/search")
-	if err != nil {
-		t.Fatalf("Resolve returned error: %v", err)
-	}
-	err = DefaultPolicyGuard.Authorize(Invocation{
-		Definition: definition,
-		Policy: Policy{
-			AllowedToolCodes:      []string{"knowledge/search"},
-			SkillAllowedToolCodes: []string{"customer/profile"},
-			Confirmed:             true,
-		},
-	})
-	if err == nil || !strings.Contains(err.Error(), "selected skill") {
-		t.Fatalf("expected skill whitelist rejection, got %v", err)
-	}
-}