feat: 修复审计落差 #1/#2/#3/#6 + 管理面板移动端适配

#1 工具布尔标记生效(agent-106, 安全红线): loop toolSchemas/runToolCalls 加 allow-set 安全门 restrictSchemas/applyToolSecurityGate——群聊/陌生人只暴露允许工具(默认关), 被拒not_allowed软提示+AuditEvent, owner全工具不变; 身份靠 ActorEnv(非提示词)
#2 checkpoint 恢复(agent-109): run.go LoadLatest + resumableStopReason门控(只恢复in-flight工具循环,不出答案不续跑), 幂等不重放副作用, 新会话不误恢复; resume_test 4用例
#3 tool_result(agent-108, 协议层): Anthropic 原生tool_result块(tool_use_id/is_error)非user纯文本 + OpenAI tool消息补tool_call_id; Content加ToolCallID/IsError等; (loop接线层2处留待,见备注)
#6 capacity_awaken推送(agent-107): onCapacity从只Debug改推WS hub(BroadcastCapacityAwaken, sessionId定向+payload对齐前端AwakenPayload)
管理面板移动端(agent-110): AdminApp 汉堡菜单+抽屉侧栏+标题truncate防换行, RBAC守卫不受影响
全仓 build/vet/test绿 + 前端build绿; 前端无涉差异已对齐

备注: #3 loop接线层2处(assistant工具轮append历史 + Message.ToolCallID/IsError)留给后续; #4代审/#5子代理触发/#7拆文件后置(主人说后三不急)

internal/runtime/model/anthropic.go

@@ -304,7 +304,7 @@ func buildAnthropicMessages(msgs []Message) (string, []anthropicMessage, error)
 			}
 			continue
 		}
-		blocks, err := encodeAnthropicContent(m.Content)
+		blocks, err := encodeAnthropicMessage(m)
 		if err != nil {
 			return "", nil, err
 		}
@@ -316,11 +316,13 @@ func buildAnthropicMessages(msgs []Message) (string, []anthropicMessage, error)
 	return sys.String(), out, nil
 }
 
-// messageText concatenates the text parts of a message (used for system prompts).
+// messageText concatenates the text-bearing parts of a message (system prompts
+// and tool-result bodies). Tool-result parts carry their body in Text, so a
+// RoleTool turn's content serializes correctly for OpenAI's tool message.
 func messageText(m Message) string {
 	var b strings.Builder
 	for _, part := range m.Content {
-		if part.Type == ContentTypeText {
+		if part.Type == ContentTypeText || part.Type == ContentTypeToolResult {
 			b.WriteString(part.Text)
 		}
 	}
@@ -340,8 +342,43 @@ func anthropicRole(r Role) string {
 	}
 }
 
+// encodeAnthropicMessage turns a normalized message into Anthropic content
+// blocks. A RoleTool turn is ALWAYS rendered as native tool_result blocks (never
+// a user plain-text turn), because Anthropic requires a tool result to arrive as
+// a tool_result block carrying the tool_use_id and the is_error flag.
+func encodeAnthropicMessage(m Message) ([]any, error) {
+	if m.Role == RoleTool {
+		return encodeAnthropicToolResult(m)
+	}
+	return encodeAnthropicContent(m.Content)
+}
+
+// encodeAnthropicToolResult renders a RoleTool turn as tool_result blocks. Each
+// ContentTypeToolResult part becomes one block; legacy text parts are wrapped as
+// tool_result blocks too so the turn never degrades into a plain user message.
+// The tool_use_id falls back to the message-level ToolCallID when a part does not
+// carry its own.
+func encodeAnthropicToolResult(m Message) ([]any, error) {
+	blocks := make([]any, 0, len(m.Content))
+	for _, p := range m.Content {
+		switch p.Type {
+		case ContentTypeToolResult, ContentTypeText:
+			id := p.ToolCallID
+			if id == "" {
+				id = m.ToolCallID
+			}
+			blocks = append(blocks, AnthropicToolResult(id, p.Text, p.IsError))
+		}
+	}
+	if len(blocks) == 0 {
+		blocks = append(blocks, AnthropicToolResult(m.ToolCallID, "", false))
+	}
+	return blocks, nil
+}
+
 // encodeAnthropicContent turns normalized content parts into Anthropic content
-// blocks.
+// blocks. Text / image / tool_use (assistant) parts are handled here; tool_result
+// parts are rendered at the message level by encodeAnthropicToolResult.
 func encodeAnthropicContent(parts []Content) ([]any, error) {
 	blocks := make([]any, 0, len(parts))
 	for _, p := range parts {
@@ -361,6 +398,19 @@ func encodeAnthropicContent(parts []Content) ([]any, error) {
 					"data":       data,
 				},
 			})
+		case ContentTypeToolCall:
+			args := p.ToolArgs
+			if args == nil {
+				args = map[string]any{}
+			}
+			blocks = append(blocks, map[string]any{
+				"type":  "tool_use",
+				"id":    p.ToolCallID,
+				"name":  p.ToolCallName,
+				"input": args,
+			})
+		case ContentTypeToolResult:
+			blocks = append(blocks, AnthropicToolResult(p.ToolCallID, p.Text, p.IsError))
 		default:
 			return nil, fmt.Errorf("model: %w: unsupported content type %q", ErrBadRequest, p.Type)
 		}
@@ -421,7 +471,7 @@ func responseFromAnthropicWire(wire *anthropicResponse) Response {
 		case "text":
 			b.WriteString(blk.Text)
 		case "tool_use":
-			toolCalls = append(toolCalls, ToolCall{Name: blk.Name, Args: blk.Input})
+			toolCalls = append(toolCalls, ToolCall{Name: blk.Name, ID: blk.ID, Args: blk.Input})
 		}
 	}
 	out.Content = b.String()