refactor(types): comprehensive TypeScript type system improvements

Major type system refactoring and error fixes across the codebase:

**Type System Improvements:**
- Extended OpenFangStreamEvent with 'connected' and 'agents_updated' event types
- Added GatewayPong interface for WebSocket pong responses
- Added index signature to MemorySearchOptions for Record compatibility
- Fixed RawApproval interface with hand_name, run_id properties

**Gateway & Protocol Fixes:**
- Fixed performHandshake nonce handling in gateway-client.ts
- Fixed onAgentStream callback type definitions
- Fixed HandRun runId mapping to handle undefined values
- Fixed Approval mapping with proper default values

**Memory System Fixes:**
- Fixed MemoryEntry creation with required properties (lastAccessedAt, accessCount)
- Replaced getByAgent with getAll method in vector-memory.ts
- Fixed MemorySearchOptions type compatibility

**Component Fixes:**
- Fixed ReflectionLog property names (filePath→file, proposedContent→suggestedContent)
- Fixed SkillMarket suggestSkills async call arguments
- Fixed message-virtualization useRef generic type
- Fixed session-persistence messageCount type conversion

**Code Cleanup:**
- Removed unused imports and variables across multiple files
- Consolidated StoredError interface (removed duplicate)
- Deleted obsolete test files (feedbackStore.test.ts, memory-index.test.ts)

**New Features:**
- Added browser automation module (Tauri backend)
- Added Active Learning Panel component
- Added Agent Onboarding Wizard
- Added Memory Graph visualization
- Added Personality Selector
- Added Skill Market store and components

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

desktop/src/store/connectionStore.ts

@@ -14,7 +14,7 @@ import {
 import {
   isTauriRuntime,
   prepareLocalGatewayForTauri,
-  getLocalGatewayStatus,
+  getLocalGatewayStatus as fetchLocalGatewayStatus,
   startLocalGateway as startLocalGatewayCommand,
   stopLocalGateway as stopLocalGatewayCommand,
   restartLocalGateway as restartLocalGatewayCommand,
@@ -23,6 +23,7 @@ import {
   getUnsupportedLocalGatewayStatus,
   type LocalGatewayStatus,
 } from '../lib/tauri-gateway';
+import { useConfigStore } from './configStore';
 
 // === Types ===
 
@@ -59,18 +60,6 @@ function requiresLocalDevicePairing(error: unknown): boolean {
   return message.includes('pairing required');
 }
 
-/**
- * Calculate security level based on enabled layer count.
- */
-function calculateSecurityLevel(enabledCount: number, totalCount: number): 'critical' | 'high' | 'medium' | 'low' {
-  if (totalCount === 0) return 'low';
-  const ratio = enabledCount / totalCount;
-  if (ratio >= 0.875) return 'critical'; // 14-16 layers
-  if (ratio >= 0.625) return 'high';     // 10-13 layers
-  if (ratio >= 0.375) return 'medium';   // 6-9 layers
-  return 'low';                          // 0-5 layers
-}
-
 /**
  * Check if a URL is a loopback address.
  */
@@ -187,7 +176,7 @@ export const useConnectionStore = create<ConnectionStore>((set, get) => {
         // Check local gateway first if in Tauri
         if (isTauriRuntime()) {
           try {
-            const localStatus = await getLocalGatewayStatus();
+            const localStatus = await fetchLocalGatewayStatus();
             const localUrl = getLocalGatewayConnectUrl(localStatus);
             if (localUrl) {
               candidates.push(localUrl);
@@ -198,7 +187,7 @@ export const useConnectionStore = create<ConnectionStore>((set, get) => {
         }
 
         // Add quick config gateway URL if available
-        const quickConfigGatewayUrl = get().quickConfig?.gatewayUrl?.trim();
+        const quickConfigGatewayUrl = useConfigStore.getState().quickConfig?.gatewayUrl?.trim();
         if (quickConfigGatewayUrl) {
           candidates.push(quickConfigGatewayUrl);
         }
@@ -233,7 +222,7 @@ export const useConnectionStore = create<ConnectionStore>((set, get) => {
         }
 
         // Resolve effective token: param > quickConfig > localStorage > local auth
-        let effectiveToken = token || get().quickConfig?.gatewayToken || getStoredGatewayToken();
+        let effectiveToken = token || useConfigStore.getState().quickConfig?.gatewayToken || getStoredGatewayToken();
         if (!effectiveToken && isTauriRuntime()) {
           try {
             const localAuth = await getLocalGatewayAuth();
@@ -246,7 +235,7 @@ export const useConnectionStore = create<ConnectionStore>((set, get) => {
           }
         }
 
-        console.log('[ConnectionStore] Connecting with token:', effectiveToken ? `${effectiveToken.substring(0, 8)}...` : '(empty)');
+        console.log('[ConnectionStore] Connecting with token:', effectiveToken ? '[REDACTED]' : '(empty)');
 
         const candidateUrls = await resolveCandidates();
         let lastError: unknown = null;
@@ -327,7 +316,7 @@ export const useConnectionStore = create<ConnectionStore>((set, get) => {
 
       set({ localGatewayBusy: true });
       try {
-        const status = await getLocalGatewayStatus();
+        const status = await fetchLocalGatewayStatus();
         set({ localGateway: status, localGatewayBusy: false });
         return status;
       } catch (err: unknown) {