修复拼图生成前订阅授权

新增小程序原生订阅消息授权页，在用户点击后请求生成结果通知授权。

拼图 compile_puzzle_draft 前等待授权页返回或跳过后再发起生成 action。

移除 web-view message 订阅授权路径，改用 storage/hash 回写订阅结果。

补充订阅授权测试、文档和团队踩坑记录。

src/components/platform-entry/usePlatformCreationAgentFlowController.test.tsx

@@ -300,6 +300,91 @@ function ActionCompleteHarness({
   );
 }
 
+function BeforeActionHarness({ events }: { events: string[] }) {
+  const hasOpenedRef = useRef(false);
+  const flow = usePlatformCreationAgentFlowController<
+    ActionTestSession,
+    Record<string, never>,
+    { session: ActionTestSession },
+    TestMessagePayload,
+    { action: string },
+    { session: ActionTestSession }
+  >({
+    client: {
+      createSession: async () => ({
+        session: {
+          sessionId: 'session-1',
+          messages: [],
+          draft: { profileId: 'profile-draft-1' },
+        },
+      }),
+      getSession: async () => ({
+        session: {
+          sessionId: 'session-1',
+          messages: [],
+          draft: { profileId: 'profile-draft-1' },
+        },
+      }),
+      streamMessage: async () => ({
+        sessionId: 'session-1',
+        messages: [],
+        draft: { profileId: 'profile-draft-1' },
+      }),
+      executeAction: async () => {
+        events.push('executeAction');
+        return {
+          session: {
+            sessionId: 'session-1',
+            messages: [],
+            draft: { profileId: 'profile-ready-1' },
+          },
+        };
+      },
+      selectSession: (response) => response.session,
+    },
+    createPayload: {},
+    workspaceStage: 'match3d-agent-workspace',
+    resultStage: 'match3d-result',
+    platformStage: 'platform',
+    isCompileAction: () => true,
+    resolveErrorMessage: (error, fallback) =>
+      error instanceof Error ? error.message : fallback,
+    errorMessages: {
+      open: '打开失败',
+      restoreMissingSession: '缺少会话',
+      restore: '恢复失败',
+      submit: '发送失败',
+      execute: '执行失败',
+    },
+    enterCreateTab: () => {},
+    setSelectionStage: () => {},
+    beforeExecuteAction: async () => {
+      events.push('beforeExecuteAction');
+      await Promise.resolve();
+      events.push('permissionResolved');
+    },
+  });
+
+  useEffect(() => {
+    if (hasOpenedRef.current) {
+      return;
+    }
+    hasOpenedRef.current = true;
+    void flow.openWorkspace({});
+  }, [flow]);
+
+  return (
+    <button
+      type="button"
+      onClick={() => {
+        void flow.executeAction({ action: 'match3d_compile_draft' });
+      }}
+    >
+      执行
+    </button>
+  );
+}
+
 function SessionChangeHarness({
   onSessionChanged,
 }: {
@@ -547,6 +632,28 @@ test('creation agent flow suppresses compile result stage for background complet
   );
 });
 
+test('creation agent flow waits for beforeExecuteAction before network action', async () => {
+  const events: string[] = [];
+
+  render(<BeforeActionHarness events={events} />);
+
+  await waitFor(() => {
+    expect(screen.getByRole('button', { name: '执行' })).toBeTruthy();
+  });
+
+  await act(async () => {
+    screen.getByRole('button', { name: '执行' }).click();
+  });
+
+  await waitFor(() => {
+    expect(events).toEqual([
+      'beforeExecuteAction',
+      'permissionResolved',
+      'executeAction',
+    ]);
+  });
+});
+
 test('creation agent flow notifies session changes after open restore and compile', async () => {
   const onSessionChanged = vi.fn();