收口后端创作游玩流程主干

新增 play_flow 统一承接创作游玩与支撑路由
将 app.rs 的逐玩法挂载改为统一主干分发
将平台与资产及个人侧游玩支撑路由迁入 play_flow
抽出 visual_novel 路由模块并复用原有 handler
统一入口熔断路径解析并补充目标回归测试
更新后端契约、玩法链路和团队决策记录

server-rs/crates/api-server/src/runtime_save.rs

@@ -347,8 +347,8 @@ mod tests {
 
     #[tokio::test]
     async fn runtime_snapshot_checkpoint_rejects_legacy_full_snapshot_upload() {
-        let state = seed_authenticated_state().await;
-        let token = issue_access_token(&state);
+        let (state, user_id) = seed_authenticated_state().await;
+        let token = issue_access_token(&state, user_id.as_str());
         let app = build_router(state);
 
         let response = app
@@ -379,8 +379,8 @@ mod tests {
 
     #[tokio::test]
     async fn runtime_snapshot_checkpoint_requires_existing_server_snapshot() {
-        let state = seed_authenticated_state().await;
-        let token = issue_access_token(&state);
+        let (state, user_id) = seed_authenticated_state().await;
+        let token = issue_access_token(&state, user_id.as_str());
         let app = build_router(state);
 
         let response = app
@@ -407,9 +407,9 @@ mod tests {
 
     #[tokio::test]
     async fn runtime_snapshot_checkpoint_rejects_session_mismatch() {
-        let state = seed_authenticated_state().await;
-        seed_runtime_snapshot(&state, "runtime-server", "adventure").await;
-        let token = issue_access_token(&state);
+        let (state, user_id) = seed_authenticated_state().await;
+        seed_runtime_snapshot(&state, user_id.as_str(), "runtime-server", "adventure").await;
+        let token = issue_access_token(&state, user_id.as_str());
         let app = build_router(state);
 
         let response = app
@@ -436,9 +436,9 @@ mod tests {
 
     #[tokio::test]
     async fn runtime_snapshot_checkpoint_uses_persisted_server_snapshot() {
-        let state = seed_authenticated_state().await;
-        seed_runtime_snapshot(&state, "runtime-main", "adventure").await;
-        let token = issue_access_token(&state);
+        let (state, user_id) = seed_authenticated_state().await;
+        seed_runtime_snapshot(&state, user_id.as_str(), "runtime-main", "adventure").await;
+        let token = issue_access_token(&state, user_id.as_str());
         let app = build_router(state);
 
         let response = app
@@ -509,8 +509,8 @@ mod tests {
 
     #[tokio::test]
     async fn resume_profile_save_archive_rejects_blank_world_key() {
-        let state = seed_authenticated_state().await;
-        let token = issue_access_token(&state);
+        let (state, user_id) = seed_authenticated_state().await;
+        let token = issue_access_token(&state, user_id.as_str());
         let app = build_router(state);
 
         let response = app
@@ -529,21 +529,26 @@ mod tests {
         assert_eq!(response.status(), StatusCode::BAD_REQUEST);
     }
 
-    async fn seed_authenticated_state() -> AppState {
+    async fn seed_authenticated_state() -> (AppState, String) {
         let state = AppState::new(AppConfig::default()).expect("state should build");
-        state
+        let user_id = state
             .seed_test_phone_user_with_password("13800138105", "secret123")
             .await
             .id;
-        state
+        (state, user_id)
     }
 
-    async fn seed_runtime_snapshot(state: &AppState, session_id: &str, bottom_tab: &str) {
+    async fn seed_runtime_snapshot(
+        state: &AppState,
+        user_id: &str,
+        session_id: &str,
+        bottom_tab: &str,
+    ) {
         let now = OffsetDateTime::now_utc();
         let now_micros = shared_kernel::offset_datetime_to_unix_micros(now);
         state
             .put_runtime_snapshot_record(
-                "user_00000001".to_string(),
+                user_id.to_string(),
                 now_micros - 2_000_000,
                 bottom_tab.to_string(),
                 json!({
@@ -571,12 +576,12 @@ mod tests {
             .expect("runtime snapshot should seed");
     }
 
-    fn issue_access_token(state: &AppState) -> String {
+    fn issue_access_token(state: &AppState, user_id: &str) -> String {
         let claims = AccessTokenClaims::from_input(
             AccessTokenClaimsInput {
-                user_id: "user_00000001".to_string(),
+                user_id: user_id.to_string(),
                 session_id: state
-                    .seed_test_refresh_session_for_user_id("user_00000001", "sess_runtime_save"),
+                    .seed_test_refresh_session_for_user_id(user_id, "sess_runtime_save"),
                 provider: AuthProvider::Password,
                 roles: vec!["user".to_string()],
                 token_version: 2,