Merge branch 'codex/dev' into codex/backend-rewrite-spacetimedb

# Conflicts:
#	docs/technical/README.md
#	server-node/src/modules/assets/qwenSpriteRoutes.ts
#	src/components/CustomWorldResultView.test.tsx
#	src/components/CustomWorldResultView.tsx
#	src/components/custom-world-agent/CustomWorldAgentDraftDetailPanel.tsx
#	src/components/game-shell/PreGameSelectionFlow.agent.interaction.test.tsx
#	src/components/rpg-creation-asset-studio/RpgCreationRoleAssetStudioModalImpl.tsx
#	src/components/rpg-creation-editor/RpgCreationEntityEditorShared.tsx
#	src/components/rpg-entry/RpgEntryCharacterSelectView.tsx
#	src/components/rpg-entry/RpgEntryHomeView.tsx
#	src/services/apiClient.ts
#	src/tools/QwenSpriteSheetTool.tsx

src/services/authService.ts

@@ -25,6 +25,7 @@ import {
   ApiClientError,
   clearStoredAccessToken,
   clearStoredAutoAuthCredentials,
+  emitAuthStateChange,
   getStoredAutoAuthCredentials,
   requestJson,
   setStoredAccessToken,
@@ -120,8 +121,9 @@ export function createAutoAuthCredentials(): AutoAuthCredentials {
 }
 
 export function clearAuthSession() {
-  clearStoredAccessToken();
-  clearStoredAutoAuthCredentials();
+  clearStoredAccessToken({ emit: false });
+  clearStoredAutoAuthCredentials({ emit: false });
+  emitAuthStateChange();
 }
 
 export async function sendPhoneLoginCode(
@@ -320,6 +322,10 @@ export async function getCurrentAuthUser(): Promise<AuthSessionSnapshot> {
       method: 'GET',
     },
     '读取当前用户失败',
+    {
+      // 会话恢复阶段允许 401 作为“未登录”信号，不应再广播一次全局鉴权事件。
+      notifyAuthStateChange: false,
+    },
   );
 
   return {