feat(pi-permission-system): AutoReview 改为跟随主模型的对话式工具调用审查

AutoReview：

- 审查器回到 Codex Guardian 风格的对话式审查，默认跟随会话当前主模型
  （每次审查实时读取 ctx.model）；provider/model 必须同时设置才固定审查
  模型，只设其一视为配置错误并转人工。
- 结论只通过 approve / reject 两个工具给出，参数仅 reason；不强制
  toolChoice，正文文本（即使是合法 JSON）一律忽略。
- approve 自动放行；reject 转人工并在弹窗显示理由（标注模型生成）。
  超时、Provider 错误、截断、未调用工具、多次调用、参数无效等异常同样
  转人工，并附固定的系统说明；用户按 Esc 中止时直接拒绝。
- 模型调用改为 modelRegistry.streamSimple(...).result()：Pi 1.3.0 面向
  扩展的 ModelRegistry 没有 completeSimple，原写法在真实环境中每次都会
  转人工。
- 对话记录保留可信度标注；工具结果在有更短的 pi-compaction 摘要时替换
  为摘要；token 估算改为非 ASCII 字符按 1 token 计；预算可配置。
- 同一条用户消息内完全相同的请求只缓存 approve 结论。
- 默认 reasoning low、总超时 30 秒、最多 2 次尝试、maxOutputTokens 4000。

删除：

- 未发布过的 TypeSafe Jev 分类器实现、DenialCircuitBreaker。
- 整个 annotator 机制（model-explanation、注册表、registerAnnotator、
  provider-timeout）；annotators 配置键保留为已弃用并忽略，避免旧配置
  被拒绝。

测试：

- 新增 reviewer / transcript / 弹窗说明 / 默认配置测试；清理重复、恒真
  或只测实现细节的旧测试。
- 使用 deepseek-v4.1-flash 实测 5 个场景各 5 次，25 次结论全部符合预期。

Generated with [Devin](https://devin.ai)

Co-Authored-By: Devin <158243242+devin-ai-integration[bot]@users.noreply.github.com>

pi-permission-system/test/authority/subagent-detection.test.ts

@@ -1,100 +1,41 @@
-import { afterEach, describe, expect, test, vi } from "vitest";
+import { describe, expect, test } from "vitest";
 
 import type { SubagentDetectionContext } from "#src/authority/subagent-context";
 import { SubagentDetection } from "#src/authority/subagent-detection";
 import { SubagentSessionRegistry } from "#src/authority/subagent-registry";
 import { posixPathFlavor } from "#src/path/path-flavor";
 
-afterEach(() => {
-  vi.unstubAllEnvs();
-  vi.restoreAllMocks();
-});
-
-function makeCtx(
-  sessionDir: string | null,
-  sessionId: string = "",
-): SubagentDetectionContext {
+function makeCtx(sessionId: string): SubagentDetectionContext {
   return {
     sessionManager: {
-      getSessionDir: vi.fn(() => sessionDir ?? ""),
-      getSessionId: vi.fn(() => sessionId),
+      getSessionDir: () => "",
+      getSessionId: () => sessionId,
     },
   };
 }
 
 const subagentSessionsDir = "/agent/subagent-sessions";
 
-describe("SubagentDetection", () => {
-  describe("isSubagent", () => {
-    test("returns true for a registered in-process child (registry source)", () => {
-      const registry = new SubagentSessionRegistry();
-      registry.register("child-1", {});
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry,
-      });
-      expect(detection.isSubagent(makeCtx(null, "child-1"))).toBe(true);
-    });
-
-    test("returns true when a subagent env hint is set (env source)", () => {
-      vi.stubEnv("PI_IS_SUBAGENT", "1");
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry: new SubagentSessionRegistry(),
-      });
-      expect(detection.isSubagent(makeCtx("/somewhere/else"))).toBe(true);
-    });
-
-    test("returns true when the session dir is nested under subagentSessionsDir (filesystem source)", () => {
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry: new SubagentSessionRegistry(),
-      });
-      expect(
-        detection.isSubagent(makeCtx(`${subagentSessionsDir}/child-1`)),
-      ).toBe(true);
-    });
-
-    test("returns false when no source matches", () => {
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry: new SubagentSessionRegistry(),
-      });
-      expect(detection.isSubagent(makeCtx("/projects/my-app"))).toBe(false);
+// The detection sources themselves are covered exhaustively in
+// subagent-context.test.ts; these two tests pin the only branches this
+// wrapper owns: registry consult and registry-absent fallback.
+describe("SubagentDetection.isRegisteredChild", () => {
+  test("returns true when the session id is registered", () => {
+    const registry = new SubagentSessionRegistry();
+    registry.register("child-1", {});
+    const detection = new SubagentDetection({
+      subagentSessionsDir,
+      flavor: posixPathFlavor,
+      registry,
     });
+    expect(detection.isRegisteredChild(makeCtx("child-1"))).toBe(true);
   });
 
-  describe("isRegisteredChild", () => {
-    test("returns true when the session id is registered", () => {
-      const registry = new SubagentSessionRegistry();
-      registry.register("child-1", {});
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry,
-      });
-      expect(detection.isRegisteredChild(makeCtx(null, "child-1"))).toBe(true);
-    });
-
-    test("returns false when the session id is not registered", () => {
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-        registry: new SubagentSessionRegistry(),
-      });
-      expect(detection.isRegisteredChild(makeCtx(null, "child-1"))).toBe(false);
-    });
-
-    test("returns false when constructed without a registry", () => {
-      const detection = new SubagentDetection({
-        subagentSessionsDir,
-        flavor: posixPathFlavor,
-      });
-      expect(detection.isRegisteredChild(makeCtx(null, "child-1"))).toBe(false);
+  test("returns false when constructed without a registry", () => {
+    const detection = new SubagentDetection({
+      subagentSessionsDir,
+      flavor: posixPathFlavor,
     });
+    expect(detection.isRegisteredChild(makeCtx("child-1"))).toBe(false);
   });
 });