M5：百工与司命——能力注册表、授契行契请命、禁域裁决与观察标证

- 百工域 domains/baigong：capabilities（统一能力契约：执行类型 builtin/qiankun/mcp/http + 四维风险标注 + 来源版本）、mandates（授契 grant / 行契 charter 预算时间窗，撤销立即生效）、tool_calls（净化摘要 + 观察标证）；请命复用 pending_confirmations 加 expires_at/brief_json（超时=拒绝执行 HJ-1302，六要素说明）
- 司命裁决器 siming.py：四维取最高档（能力/数据/后果/情境）；禁域为代码常量不可配置（递归删根/格式化/写裸设备/fork 炸弹、file:// 协议、密钥材料外发）——专项测试断言恶意标注与篡改对象仍拒 HJ-1301
- 执行链：禁域→裁决（HJ-1303 未授契拒且双留痕）→请命→执行（乾坤经 SandboxClient HMAC；MCP 经 call_tool；内置无副作用）→净化标证（观察非事实，敏感遮蔽+体量截断）→行动账
- MCP 登记/启停/刷新自动派生与撤下 capabilities（博闻登记接入点）；内置能力种子（echo/datetime/qiankun.shell/web.fetch）
- 端点：/capabilities /mandates /petitions /tool-calls + /tools 兼容投影；前端百工页四区（能力目录四维标注/授契行契/请命批准拒绝/行动账观察标证）
- 退役：modules/safety|skills|tool_runtime|agent、application/tool_runtime、services/skills|safety、tool_policies/skills/model_endpoint_overrides 表（迁移 006）、前端 SkillManager/ToolsConsole/旧 tools 页
- 验收（test_baigong_siming 四用例）：未授契被拒留痕、请命超时不执行、禁域不可关闭、结果为观察不入忆；后端 454、前端 220、BFF 4、神识 5 包全绿（2 个预存环境失败不变）

backend/tests/services/test_skills_service.py

@@ -1,75 +0,0 @@
-"""Skill 服务测试（CRUD + 关键词触发匹配）。"""
-
-import pytest
-
-from app.core.errors import AppError
-from app.services import skills as skills_service
-
-
-async def _create(
-    name: str = "coding",
-    trigger: str = "代码,编程",
-    status: str = "enabled",
-) -> None:
-    await skills_service.create_skill(
-        name=name,
-        description="代码辅助",
-        trigger=trigger,
-        prompt_fragment="你是代码助手",
-        tool_bindings=["read_file"],
-        risk_level="L1",
-        status=status,
-    )
-
-
-@pytest.mark.asyncio
-async def test_create_and_list() -> None:
-    resp = await skills_service.create_skill(
-        name="coding",
-        trigger="代码",
-        prompt_fragment="你是代码助手",
-        tool_bindings=["read_file"],
-    )
-    assert resp.name == "coding"
-    assert resp.tool_bindings == ["read_file"]
-
-    listed = await skills_service.list_skills()
-    assert len(listed) == 1
-
-
-@pytest.mark.asyncio
-async def test_create_duplicate_name_conflicts() -> None:
-    await _create("dup")
-    with pytest.raises(AppError):
-        await _create("dup")
-
-
-@pytest.mark.asyncio
-async def test_update_skill_status() -> None:
-    await _create()
-    listed = await skills_service.list_skills()
-    sid = listed[0].id
-
-    updated = await skills_service.update_skill(sid, status="disabled")
-    assert updated.status == "disabled"
-
-
-@pytest.mark.asyncio
-async def test_match_active_skills() -> None:
-    await _create("coding", trigger="代码,编程")
-    await _create("weather", trigger="天气", status="disabled")
-
-    matched = await skills_service.match_active_skills("帮我写代码")
-    assert len(matched) == 1
-    assert matched[0].name == "coding"
-    assert matched[0].prompt_fragment == "你是代码助手"
-
-
-@pytest.mark.asyncio
-async def test_delete_skill() -> None:
-    await _create()
-    listed = await skills_service.list_skills()
-    sid = listed[0].id
-
-    await skills_service.delete_skill(sid)
-    assert await skills_service.get_skill(sid) is None