refactor(tools): move generic runtime assembly contracts

docs/architecture/core-decomposition.md

@@ -66,7 +66,7 @@ Rust 编译和链接面。
 | `bitfun-agent-stream` | Stream 聚合和 stream-focused 测试 | done：stream 聚合已独立 |
 | `bitfun-runtime-ports` | 面向 service/agent 边界的轻量跨层 DTO 和 trait | partial：DTO/trait-only 边界已建立，包含 agent submission/transcript/cancel、remote state、runtime event 与 remote image attachment 契约；不拥有 runtime 实现 |
 | `bitfun-agent-runtime` | Sessions、execution、coordination、agent system | target：crate 尚不存在，agent runtime 仍在 core |
-| `bitfun-agent-tools` | 轻量 tool DTO / contract、portable tool context facts / provider、runtime restriction、pure manifest/exposure and GetToolSpec presentation/schema/static metadata/detail/result assembly / execution-plan contract、provider-backed GetToolSpec execution result helper、generic contextual manifest resolver、generic catalog snapshot provider / GetToolSpec catalog provider、generic registry / static-provider / dynamic-provider container | partial：product registry snapshot access、`ToolUseContext` adapter、`GetToolSpec` Tool impl 和 concrete tools 仍在 core；core 当前把内置工具列表收敛为 core-owned static provider group，并只通过 `PortableToolContextProvider` 提供 `ToolContextFacts` 只读投影 |
+| `bitfun-agent-tools` | 轻量 tool DTO / contract、portable tool context facts / provider、runtime restriction、pure manifest/exposure and GetToolSpec presentation/schema/static metadata/detail/result assembly / execution-plan contract、provider-backed GetToolSpec execution result helper、generic contextual manifest resolver、generic catalog snapshot provider / GetToolSpec catalog provider、generic registry / static-provider / dynamic-provider / decorator-ref / snapshot-decorator adapter / runtime assembly container、generic readonly/enabled snapshot filter | partial：product registry snapshot access、`ToolUseContext` adapter、`GetToolSpec` Tool impl 和 concrete tools 仍在 core；core 当前把内置工具列表保留为 core-owned static provider group，但 static-provider 安装 assembly、decorator reference、generic snapshot decorator adapter 与 readonly/enabled 过滤规则已委托给 `bitfun-agent-tools` |
 | `bitfun-tool-packs` | 由 feature group 隔离的具体工具实现 | target/scaffold：仅提供 basic / git / mcp / browser-web / computer-use / image-analysis / miniapp / agent-control feature-group 元数据，不得声明 concrete tools 已迁移 |
 | `bitfun-services-core` | Config、session、workspace、storage、filesystem、system services | partial：部分 pure helper 已迁出；config/workspace/filesystem runtime 多数仍在 core |
 | `bitfun-services-integrations` | Git、MCP、remote SSH、remote connect、file watch integrations | partial：MCP runtime 已迁入；remote SSH 仍只迁移低风险 contracts/helpers；remote-connect 已拥有 wire DTO、request builder、tracker state / registry lifecycle 与 tracker event reduction，dispatcher/product execution 仍在 core |
@@ -146,7 +146,8 @@ owner 边界，否则不要把一个 feature group 继续拆成更小的 crate
   继续迁移前必须证明 prompt-visible manifest、expanded/collapsed exposure、unlock state
   与 desktop/MCP/ACP tool catalog 等价。
 - 当前 tool runtime 外移的低风险入口是 `StaticToolProvider` / `install_static_provider`
-  合约归属 `bitfun-agent-tools`，并让 core 通过 `runtime_assembly.rs` + `static_providers.rs`
+  / `ToolRuntimeAssembly` 合约归属 `bitfun-agent-tools`，并让 core 通过
+  `runtime_assembly.rs` + `static_providers.rs`
   将内置工具列表收敛为 `core.basic`、`core.agent`、`core.session`、`core.integration`
   provider group。
   这不代表 concrete tools、`ToolUseContext`、product registry snapshot adapter 或
@@ -230,14 +231,20 @@ owner 边界，否则不要把一个 feature group 继续拆成更小的 crate
   - H1：tool runtime owner 迁移。当前只完成迁移前/迁移中边界收敛：`bitfun-agent-tools`
     承载 provider-neutral tool contract、generic registry/static/dynamic provider、
     contextual manifest resolver、GetToolSpec presentation/schema/static metadata/detail/
-    result assembly / execution-plan helper 和 provider-backed execution result helper；
+    result assembly / execution-plan helper、provider-backed execution result helper，
+    generic decorator reference / snapshot-decorator adapter / static-provider runtime assembly
+    container，以及 generic readonly/enabled registry snapshot filter；
     core 仍持有 `ToolUseContext`、runtime manifest assembly、`GetToolSpecTool`
-    Tool impl、collapsed unlock state source、snapshot decorator 与 concrete tools。
+    Tool impl、collapsed unlock state source、product snapshot wrapper adapter 与 concrete tools。
     已合入 PR #803 把 core `Tool` 到 provider-neutral contract 的 adapter 收敛到
     `tool_adapter.rs`，把 product catalog / manifest / GetToolSpec catalog-detail provider
     收敛到 `catalog_provider.rs`；本阶段把 provider-neutral GetToolSpec static metadata /
     tool-use message / execution plan / result assembly 与 provider-backed execution result helper 收敛到
-    `bitfun-agent-tools`，core 只保留 product provider/context 注入和错误映射，不改变工具行为。
+    `bitfun-agent-tools`；本阶段继续把 static-provider 安装 assembly 委托到
+    `ToolRuntimeAssembly`，core 只保留 concrete provider groups、product snapshot wrapper
+    adapter、product provider/context 注入和错误映射；本阶段也把 decorator reference
+    contract、generic snapshot decorator adapter 与 readonly enabled filtering 的通用规则委托给
+    `bitfun-agent-tools`，不改变工具行为。
   - H2：product-domain runtime owner 迁移。MiniApp / function-agent 的纯 DTO/helper/port
     facade 已外移，filesystem IO、worker process、host dispatch、built-in asset seeding /
     marker IO、prompt template、JSON extraction、error mapping、Git/AI 调用仍显式