修复: 安全加固+DRY 收敛+文档同步+测试补齐

安全:
- ScriptNode 默认黑名单兜底(rm/del/format/shutdown/mkfs/dd)
- bind_directory 分段 .. 检测替代 contains 子串(对齐 tool_registry)
- ai_providers 白名单移除 api_key(防 update_field 旁路写明文)

DRY:
- useAiEvents 抽 cleanupTerminatedConversation 统一三分支收尾
- 新增 useStoreAction 工具,4 个 store 替换 38 处 try/catch 样板

文档:
- df-core → df-types 批量替换(ARCHITECTURE/PROGRESS/SQLite-CRUD)
- INDEX 补齐 9 漏列文档(单对话并行多轮/跑题试验/工程系统设计等)
- Agent架构说明 死链修复(../构想审查/)
- AI对话引擎工具清单改为数量+按风险分组(不再用固定数字)
- ARCH 状态标签 设计阶段 → Phase 2 验证

测试:
- df-relay 新增 registry_test: ConnRegistry 路由 + RelayState + 16 项单测

src/stores/project/tasks.ts

@@ -1,6 +1,7 @@
 import { taskApi } from '@/api'
 import type { TaskQuery } from '@/api/types'
 import { t } from '@/i18n/i18n-helpers'
+import { runWithCatch } from '@/composables/useStoreAction'
 import { state } from './state'
 
 /** 任务 CRUD 子 store(共享全局 state) */
@@ -16,43 +17,35 @@ export function createTasksStore() {
    * status/keyword 下沉后端 WHERE(P1/P2),取代 Tasks.vue 旧的前端内存 filter。
    */
   async function loadTasks(queryOrProjectId?: TaskQuery | string) {
-    try {
+    await runWithCatch(state, t('tasks.err.loadFailed'), async () => {
       state.tasks = await taskApi.list(queryOrProjectId)
-    } catch (e: any) {
-      state.error = e?.toString() ?? t('tasks.err.loadFailed')
-    }
+    })
   }
 
   async function createTask(input: { project_id: string; title: string; description?: string; priority?: number; branch_name?: string; assignee?: string; idea_id?: string }) {
-    try {
-      const record = await taskApi.create(input)
-      state.tasks.push(record)
-      return record
-    } catch (e: any) {
-      state.error = e?.toString() ?? t('tasks.err.createFailed')
-      return null
-    }
+    const record = await runWithCatch(state, t('tasks.err.createFailed'), async () => {
+      const r = await taskApi.create(input)
+      state.tasks.push(r)
+      return r
+    })
+    return record ?? null
   }
 
   async function updateTask(id: string, field: string, value: string) {
-    try {
+    await runWithCatch(state, t('tasks.err.updateFailed'), async () => {
       await taskApi.update(id, field, value)
       const idx = state.tasks.findIndex(t => t.id === id)
       if (idx >= 0) {
         (state.tasks[idx] as any)[field] = value
       }
-    } catch (e: any) {
-      state.error = e?.toString() ?? t('tasks.err.updateFailed')
-    }
+    })
   }
 
   async function deleteTask(id: string) {
-    try {
+    await runWithCatch(state, t('tasks.err.deleteFailed'), async () => {
       await taskApi.delete(id)
       state.tasks = state.tasks.filter(t => t.id !== id)
-    } catch (e: any) {
-      state.error = e?.toString() ?? t('tasks.err.deleteFailed')
-    }
+    })
   }
 
   return {