From 23a6662c62d881e70ef2a67969e8eb35ed7c83df Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=AB=98=E7=89=A9?= <253518756@qq.com>
Date: Fri, 19 Jun 2026 13:30:40 +0800
Subject: [PATCH 1/3] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E9=9F=B3=E9=A2=91?=
 =?UTF-8?q?=E7=94=9F=E6=88=90=E9=9D=A2=E6=9D=BF=E5=B8=83=E5=B1=80?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

对齐生成游戏音效面板底部参数、模型与生成按钮布局。

固定展示音效 Vidu 模型和背景音乐 Suno 模型。

补充音频生成面板布局回归测试并更新设计文档。
---
 ...��】生成类面板Lovart统一改造方案-2026-06-17.md |  11 +-
 ...�编辑器】画板音乐生成入口设计-2026-06-18.md |  10 +-
 ...ImageCanvasGenerationComposerView.test.tsx |  34 ++++++
 .../ImageCanvasGenerationComposerView.tsx     | 112 +++++++++---------
 4 files changed, 104 insertions(+), 63 deletions(-)

diff --git a/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md b/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
index a0ab7c533..72d0fcbbb 100644
--- a/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
+++ b/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
@@ -12,6 +12,8 @@
 - `生成图标素材`
 - `生成UI设计图`
 - `生成视频`
+- `生成游戏音效`
+- `生成游戏背景音乐`
 - `生成角色动作`
 - `快速编辑`
 
@@ -49,8 +51,8 @@
 ```
 
 - 面板内不显示 `画面比例`、`大小尺寸`、`模型` 等字段标题，只显示当前选择值。
-- 图片类面板把画面比例和大小尺寸合并成一个左下角选项框；视频面板把比例、时长、清晰度合并成一个左下角选项框；音效面板把 type 和 BPM 合并成一个无标题左下角选项框。
-- 模型选项框和生成按钮位于右下角。
+- 图片类面板把画面比例和大小尺寸合并成一个左下角选项框；视频面板把比例、时长、清晰度合并成一个左下角选项框；音效面板把 Vidu duration 合并成一个无标题左下角选项框。
+- 模型选项框和生成按钮位于右下角，模型胶囊紧贴生成按钮；音效固定显示 `Vidu`，背景音乐固定显示 `Suno`，两者均沿用模型按钮样式但不可点击。
 - 点击后以页面级浮层向上弹出独立选项面板；父级面板隐藏或销毁时，选项面板同步销毁。
 - 点击选项只更新字段和选中样式，不收起选项面板；再次点击当前参数按钮可收起。
 - 选项面板打开后，点击父级生成面板内任意非选项框、非触发按钮区域必须收起；点击选项面板自身仍保持打开，便于连续修改。
@@ -58,7 +60,7 @@
 - 模型子面板每行固定一个模型，不用方框包裹模型名；模型名不换行，前置对应模型类型图标，选中项在模型名后用对号标记。
 - 比例选项卡片内展示对应比例的线框。
 - 父级面板、底部选项框、弹出子面板字号保持一致。
-- 底部组合值使用 `·` 分隔，例如 `16:9 · 4秒 · 480p`、`单次·120BPM`。
+- 底部组合值使用 `·` 分隔，例如 `16:9 · 4秒 · 480p`、`16:9 · 1K`。
 - 底部参数热区与生成按钮等高，默认不显示阴影；悬停显示轻量阴影；箭头默认向下，展开后旋转向上。
 - 底边栏中会在上方弹出二级选项的入口不再依赖点击展开。鼠标悬停到入口即可打开二级面板，鼠标离开入口和二级面板后自动收起；当前范围包括 `生成规范` 和 `生成音乐`。
 - 底边栏二级选项面板必须锚定到对应入口按钮本身，不使用屏幕居中或固定底部偏移；移动端窄屏下也应保持跟随入口位置。
@@ -185,7 +187,8 @@
 - 新建空白待生成占位的尺寸必须和面板参数一致；图片类修改比例 / 尺寸、视频修改清晰度后，画布空白占位同步变更且保持中心点。
 - 点击角色图只选中图层并显示工具栏，不自动弹出重绘、快速编辑或角色动画面板；点击工具栏或右键菜单中的 `生成动画` 才创建角色动作占位和面板。
 - 点击 UI 设计图只选中图层并显示工具栏；工具栏在 `去除背景按钮` 后显示 `提取素材`，点击后固定用 `gpt-image-2` 和提示词 `提取画面中的所有独立并整理成spritesheet` 生成 spritesheet，再复用图标素材拆分流程，把 spritesheet 图集和拆分素材都放到画布。
-- 生成游戏音效面板底部不显示 `type` / `tempo` 字段标题，只有一个音效参数按钮；type 只支持 `one-shot` / `loop`，BPM 为 `1-300` 的数字或 `null`，选择后按钮显示 `单次·120BPM` 这类组合值。
+- 生成游戏音效面板底部不显示字段标题，左下角只有一个时长参数按钮，选项为 Vidu duration `2-10` 秒；右下角固定模型胶囊显示 `Vidu` 并紧贴生成按钮。
+- 生成游戏背景音乐面板右下角固定模型胶囊显示 `Suno` 并紧贴生成按钮；`make_instrumental` 不在 UI 中展示。
 - 生成视频结果以视频图层加入画布，画布媒体元素标记为 `画布视频：生成视频 N`。
 - 生成器输入、参数、参考图和占位框在刷新后仍存在；已生成对象的生成器面板继续跟随成品图层。
 - Seedance 2.0 参考视频 / 音频上传不产生 `data:video/*` / 大体积音频 JSON；提交请求优先携带 `objectKey`，后端 Ark body 含 `generate_audio:false` 且不含未确认的 `mode` 字段。
diff --git a/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md b/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
index 777ba88f0..a19c7d6c6 100644
--- a/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
+++ b/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
@@ -13,7 +13,7 @@
    - `生成游戏音效`
    - `生成游戏背景音乐`
 3. 选择某一项后创建独立 `generation-dialog` 画布生成对象，并通过现有 placement 模型避让已有图层和占位。
-4. 面板 UI 复用 `生成角色形象` 的紧凑结构：上方为字段区，底部为参数 / 生成按钮区，不写规则说明类文案。
+4. 面板 UI 复用 `生成角色形象` 的紧凑结构：上方为字段区，底部为参数 / 模型 / 生成按钮区，不写规则说明类文案。音效参数按钮靠左下角，固定模型胶囊紧贴生成按钮；背景音乐同样在右下角显示固定模型胶囊并紧贴生成按钮。
 5. 生成中隐藏设置面板，只保留画布中的音频生成占位；失败后恢复面板并展示短错误。
 
 ## 面板字段
@@ -21,7 +21,7 @@
 ### 生成游戏音效
 
 - `prompt`：用户输入的音效提示词，直接作为 Vidu 文生音频请求的 `prompt` 字段。
-- `model`：固定默认 `audio1.0`，UI 显示为 `Vidu`；暂不展示 Suno 文生音效模型入口。
+- `model`：固定默认 `audio1.0`，UI 以禁用态模型胶囊显示为 `Vidu`，位置紧贴生成按钮；暂不展示 Suno 文生音效模型入口。
 - `duration`：Vidu 音频时长，UI 以一个无标题参数按钮展示，选项范围 `2-10` 秒，默认 `5` 秒。
 - 提交到 VectorEngine 时映射为 Vidu 文生音频字段：`model: "audio1.0"`、`prompt`、`duration`、可选 `seed`。当前编辑器音效固定使用 Vidu `audio1.0`，不再走 Suno `task: "sound"` / `metadata_params` 文生音效契约。
 
@@ -29,7 +29,7 @@
 
 - `gpt_description_prompt`：用户输入的背景音乐提示词。
 - `make_instrumental`：固定传 `true`，不在 UI 中展示为可改字段。
-- 提交到 VectorEngine 时映射为 Suno 纯音乐模式字段：`mv`、`gpt_description_prompt`、`make_instrumental: true`。`mv` 后端固定使用默认 Suno 模型，不在 UI 中展示。
+- 提交到 VectorEngine 时映射为 Suno 纯音乐模式字段：`mv`、`gpt_description_prompt`、`make_instrumental: true`。`mv` 后端固定使用默认 Suno 模型，UI 以禁用态模型胶囊显示 `Suno`。
 - `gpt_description_prompt` 按 Apifox 契约限制 200 字，超出时由 BFF 返回参数错误。
 
 ## 画布数据
@@ -113,10 +113,10 @@ POST /api/editor/audios/background-music/generations
 
 - 底部工具栏显示 `生成音乐`。
 - 点击 `生成音乐` 只出现选项框，不立刻创建占位。
-- 点击 `生成游戏音效` 后出现音效面板，文本字段为 `prompt`；底部只有一个无标题时长参数按钮。
+- 点击 `生成游戏音效` 后出现音效面板，文本字段为 `prompt`；底部左侧只有一个无标题时长参数按钮，右侧为固定 `Vidu` 模型胶囊和生成按钮。
 - 音效时长只提供 `2-10` 秒选项，默认 `5` 秒，提交到 BFF 的字段为 `duration`。
 - 音效面板模型显示 `Vidu`，提交 `model: "audio1.0"`；不显示 Suno 文生音效模型或 Suno 音效入口。
-- 点击 `生成游戏背景音乐` 后出现背景音乐面板，字段为 `gpt_description_prompt`，不展示 `make_instrumental`。
+- 点击 `生成游戏背景音乐` 后出现背景音乐面板，字段为 `gpt_description_prompt`，右侧固定显示 `Suno` 模型胶囊，不展示 `make_instrumental`。
 - 音效提交到 `/api/editor/audios/sound-effects/generations`，背景音乐提交到 `/api/editor/audios/background-music/generations`。
 - 成功后画布新增音频卡，能通过 `<audio controls>` 播放。
 - 成功后的音频卡展示提示词；卡片中央按未悬停图标、悬停播放、播放中暂停切换，播放控件固定在卡片底部。
diff --git a/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx b/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
index cfb35bae3..2c001c323 100644
--- a/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
+++ b/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
@@ -517,8 +517,25 @@ describe('ImageCanvasGenerationComposerView', () => {
     render(<AudioHarness />);
 
     const panel = screen.getByRole('dialog', { name: '生成游戏音效' });
+    const footer = panel.querySelector(
+      '.image-canvas-editor__generation-composer-footer',
+    );
+    expect(footer).toBeTruthy();
+    expect(footer?.children[0]?.className).toContain(
+      'image-canvas-editor__option-popover-anchor--dimensions',
+    );
+    expect(footer?.children[1]?.className).toContain(
+      'image-canvas-editor__option-popover-anchor--model',
+    );
+    expect(footer?.children[2]?.className).toContain(
+      'image-canvas-editor__generation-submit',
+    );
     expect(within(panel).getByRole('textbox', { name: 'prompt' })).toBeTruthy();
     expect(screen.getByLabelText('当前音效模型').textContent).toBe('audio1.0');
+    const soundModelButton = within(panel).getByRole('button', {
+      name: '音效模型 Vidu',
+    });
+    expect((soundModelButton as HTMLButtonElement).disabled).toBe(true);
     expect(within(panel).getByText('Vidu')).toBeTruthy();
     expect(within(panel).queryByText(/Suno/u)).toBeNull();
     expect(
@@ -570,6 +587,23 @@ describe('ImageCanvasGenerationComposerView', () => {
     expect(
       within(panel).getByRole('textbox', { name: 'gpt_description_prompt' }),
     ).toBeTruthy();
+    const footer = panel.querySelector(
+      '.image-canvas-editor__generation-composer-footer',
+    );
+    expect(footer).toBeTruthy();
+    expect(footer?.children[0]?.className).toContain(
+      'image-canvas-editor__option-popover-anchor--model',
+    );
+    expect(footer?.children[1]?.className).toContain(
+      'image-canvas-editor__generation-submit',
+    );
+    const backgroundMusicModelButton = within(panel).getByRole('button', {
+      name: '背景音乐模型 Suno',
+    });
+    expect((backgroundMusicModelButton as HTMLButtonElement).disabled).toBe(
+      true,
+    );
+    expect(within(panel).getByText('Suno')).toBeTruthy();
     expect(within(panel).queryByText('make_instrumental')).toBeNull();
     expect(within(panel).getByRole('button', { name: '生成游戏背景音乐' }).textContent).toBe(
       '生成5泥点',
diff --git a/src/components/image-editor/ImageCanvasGenerationComposerView.tsx b/src/components/image-editor/ImageCanvasGenerationComposerView.tsx
index 1fab35065..5822ad835 100644
--- a/src/components/image-editor/ImageCanvasGenerationComposerView.tsx
+++ b/src/components/image-editor/ImageCanvasGenerationComposerView.tsx
@@ -670,6 +670,10 @@ function ImageCanvasAudioGenerationComposerView({
   const soundDuration = normalizeSoundDuration(dialog.soundDurationSeconds);
   const soundOptionLabel = `${soundDuration}秒`;
   const dialogLabel = isSoundEffect ? '生成游戏音效' : '生成游戏背景音乐';
+  const fixedModelLabel = isSoundEffect ? currentSoundModel.label : 'Suno';
+  const fixedModelAriaLabel = isSoundEffect
+    ? `音效模型 ${fixedModelLabel}`
+    : `背景音乐模型 ${fixedModelLabel}`;
   const cost = isSoundEffect
     ? calculateEditorSoundEffectPrice(soundModel)
     : calculateEditorBackgroundMusicPrice(DEFAULT_BACKGROUND_MUSIC_MODEL);
@@ -737,65 +741,65 @@ function ImageCanvasAudioGenerationComposerView({
       ) : null}
       <div className="image-canvas-editor__generation-composer-footer">
         {isSoundEffect ? (
-          <>
+          <div className="image-canvas-editor__option-popover-anchor image-canvas-editor__option-popover-anchor--dimensions">
             <PlatformInlineOptionButton
-              ref={soundModelButtonRef}
-              className="image-canvas-editor__option-cluster image-canvas-editor__option-cluster--model"
-              aria-label={`音效模型 ${currentSoundModel.label}`}
+              ref={soundOptionsButtonRef}
+              className="image-canvas-editor__option-cluster image-canvas-editor__option-cluster--dimensions"
+              aria-label={`音效时长 ${soundOptionLabel}`}
+              aria-expanded={isSoundOptionsOpen}
               disabled={isGenerating}
+              trailingIcon={<ChevronDown className="h-3 w-3" />}
+              onClick={() => setIsSoundOptionsOpen((isOpen) => !isOpen)}
             >
-              <span className="image-canvas-editor__model-trigger-label">
-                <span
-                  className="image-canvas-editor__model-icon"
-                  aria-hidden="true"
-                >
-                  <Music />
-                </span>
-                <span>{currentSoundModel.label}</span>
-              </span>
+              {soundOptionLabel}
             </PlatformInlineOptionButton>
-            <div className="image-canvas-editor__option-popover-anchor image-canvas-editor__option-popover-anchor--dimensions">
-              <PlatformInlineOptionButton
-                ref={soundOptionsButtonRef}
-                className="image-canvas-editor__option-cluster image-canvas-editor__option-cluster--dimensions"
-                aria-label={`音效时长 ${soundOptionLabel}`}
-                aria-expanded={isSoundOptionsOpen}
-                disabled={isGenerating}
-                trailingIcon={<ChevronDown className="h-3 w-3" />}
-                onClick={() => setIsSoundOptionsOpen((isOpen) => !isOpen)}
-              >
-                {soundOptionLabel}
-              </PlatformInlineOptionButton>
-              {isSoundOptionsOpen
-                ? renderEditorPortal(
-                    <PlatformFloatingMenu
-                      className="image-canvas-editor__option-popover image-canvas-editor__option-popover--audio-options image-canvas-editor__portal-menu"
-                      label="音效时长选项"
-                      placement="top-start"
-                      style={buildPortalMenuStyle(
-                        soundOptionsButtonRef.current,
-                        'above',
-                      )}
-                    >
-                      <div className="image-canvas-editor__option-popover-items image-canvas-editor__audio-type-options">
-                        {SOUND_EFFECT_DURATION_OPTIONS.map((option) => (
-                          <VideoOptionChoice
-                            key={option}
-                            selected={soundDuration === option}
-                            disabled={isGenerating}
-                            ariaLabel={`时长 ${option}秒`}
-                            onClick={() => updateSoundDuration(option)}
-                          >
-                            {option}秒
-                          </VideoOptionChoice>
-                        ))}
-                      </div>
-                    </PlatformFloatingMenu>,
-                  )
-                : null}
-            </div>
-          </>
+            {isSoundOptionsOpen
+              ? renderEditorPortal(
+                  <PlatformFloatingMenu
+                    className="image-canvas-editor__option-popover image-canvas-editor__option-popover--audio-options image-canvas-editor__portal-menu"
+                    label="音效时长选项"
+                    placement="top-start"
+                    style={buildPortalMenuStyle(
+                      soundOptionsButtonRef.current,
+                      'above',
+                    )}
+                  >
+                    <div className="image-canvas-editor__option-popover-items image-canvas-editor__audio-type-options">
+                      {SOUND_EFFECT_DURATION_OPTIONS.map((option) => (
+                        <VideoOptionChoice
+                          key={option}
+                          selected={soundDuration === option}
+                          disabled={isGenerating}
+                          ariaLabel={`时长 ${option}秒`}
+                          onClick={() => updateSoundDuration(option)}
+                        >
+                          {option}秒
+                        </VideoOptionChoice>
+                      ))}
+                    </div>
+                  </PlatformFloatingMenu>,
+                )
+              : null}
+          </div>
         ) : null}
+        <div className="image-canvas-editor__option-popover-anchor image-canvas-editor__option-popover-anchor--model image-canvas-editor__readonly-generation-option">
+          <PlatformInlineOptionButton
+            ref={soundModelButtonRef}
+            className="image-canvas-editor__option-cluster image-canvas-editor__option-cluster--model"
+            aria-label={fixedModelAriaLabel}
+            disabled
+          >
+            <span className="image-canvas-editor__model-trigger-label">
+              <span
+                className="image-canvas-editor__model-icon"
+                aria-hidden="true"
+              >
+                <Music />
+              </span>
+              <span>{fixedModelLabel}</span>
+            </span>
+          </PlatformInlineOptionButton>
+        </div>
         <PlatformActionButton
           type="submit"
           tone="secondary"

From cc3346758cb52b4d717b9a1c14c9dc8d4f797743 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?=E9=AB=98=E7=89=A9?= <253518756@qq.com>
Date: Fri, 19 Jun 2026 14:18:56 +0800
Subject: [PATCH 2/3] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E8=8B=A5=E5=B9=B2bug?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .../shared-memory/decision-log.md             |   2 +-
 docs/project-memory/shared-memory/pitfalls.md |   8 +
 ...架构】图片画布编辑器MVP接入方案-2026-06-11.md |   2 +-
 ...��】生成类面板Lovart统一改造方案-2026-06-17.md |  13 +-
 ...�编辑器】画板音乐生成入口设计-2026-06-18.md |  18 +-
 .../src/character_animation_assets.rs         |   8 +-
 .../src/editor_generation_config.rs           |  29 +-
 .../crates/api-server/src/editor_project.rs   |   4 +-
 .../crates/platform-audio/src/request.rs      |   9 +-
 .../tests/vector_engine_audio.rs              |   2 +
 .../crates/shared-contracts/src/assets.rs     |   6 +-
 ...CanvasBasicGenerationComposerView.test.tsx |   2 +-
 ...asCharacterGenerationComposerView.test.tsx |  28 ++
 ...CanvasEditorGenerationIntegration.test.tsx |   3 +-
 .../ImageCanvasEditorModel.test.ts            |  25 +
 .../image-editor/ImageCanvasEditorModel.ts    |   1 +
 .../ImageCanvasEditorShellView.test.tsx       |   1 +
 .../ImageCanvasEditorView.test.tsx            |  31 ++
 .../image-editor/ImageCanvasEditorView.tsx    |  26 +
 ...ImageCanvasGenerationComposerView.test.tsx |   5 +-
 ...eCanvasGenerationImageOptionsView.test.tsx |   6 +-
 .../ImageCanvasGenerationModel.test.ts        |   6 +-
 .../ImageCanvasGenerationModel.ts             |  21 +-
 ...CanvasIconSpritesheetComposerView.test.tsx |   3 +
 .../ImageCanvasQuickEditPanelView.test.tsx    |   2 +-
 ...mageCanvasSpecGenerationPanelView.test.tsx |   5 +
 .../image-editor/ImageCanvasStageView.tsx     |   7 +
 .../ImageCanvasWorldView.test.tsx             |  30 ++
 .../image-editor/ImageCanvasWorldView.tsx     | 453 ++++++++++++++----
 ...anvasGenerationSubmissionWorkflow.test.tsx |   6 +-
 src/index.css                                 | 108 ++++-
 .../image-editor/editorProjectClient.test.ts  |   8 +-
 32 files changed, 722 insertions(+), 156 deletions(-)

diff --git a/docs/project-memory/shared-memory/decision-log.md b/docs/project-memory/shared-memory/decision-log.md
index 13ecbf4ac..4b0f9e708 100644
--- a/docs/project-memory/shared-memory/decision-log.md
+++ b/docs/project-memory/shared-memory/decision-log.md
@@ -2400,6 +2400,6 @@
 ## 2026-06-19 编辑器游戏音效默认改用 Vidu 文生音频
 
 - 背景：VectorEngine Apifox `创建文生音频任务` 文档明确 Vidu `/ent/v2/text2audio` 请求体使用 `model: "audio1.0"`、`prompt`、`duration` 和可选 `seed`；编辑器此前把游戏音效提交到 Suno `task: "sound"`，与当前游戏音效默认模型要求不一致。
-- 决策：`/editor/canvas` 的 `生成游戏音效` 入口继续保留，但默认且暂时唯一可用模型为 Vidu `audio1.0`，前端请求固定发送 `prompt`、`model: "audio1.0"`、`duration` 和 `priceMudPoints`，面板只显示 `Vidu` 与 `2-10` 秒时长选项，默认 `5` 秒；不再发送或展示 `sound`、`type`、`tempo`、BPM 或 Suno 文生音效入口。后端 `/api/editor/audios/sound-effects/generations` 只接受空模型或 `audio1.0`，拒绝 Suno / `chirp-*`；提交和轮询改走 Vidu `/ent/v2/text2audio` 与 `/ent/v2/tasks/{taskId}/creations`。背景音乐仍保留 Suno `/suno/submit/music`、`/suno/fetch/{taskId}` 和 wav clip 兜底逻辑。
+- 决策：`/editor/canvas` 的 `生成游戏音效` 入口继续保留，但默认且暂时唯一可用模型为 Vidu `audio1.0`，前端请求固定发送 `prompt`、`model: "audio1.0"`、`duration` 和 `priceMudPoints`，面板只显示 `Vidu` 与 `2-10` 秒时长选项，默认 `5` 秒；不再展示 `type`、`tempo`、BPM 或 Suno 文生音效入口。后端 `/api/editor/audios/sound-effects/generations` 只接受空模型或 `audio1.0`，拒绝 Suno / `chirp-*`；提交到 VectorEngine 时对内 `prompt` 同步映射为上游 body 的 `prompt` 与 `sound`，兼容 Apifox 文档和线上网关实际 `missing field sound` 校验；提交和轮询改走 Vidu `/ent/v2/text2audio` 与 `/ent/v2/tasks/{taskId}/creations`。背景音乐仍保留 Suno `/suno/submit/music`、`/suno/fetch/{taskId}` 和 wav clip 兜底逻辑。
 - 影响范围：`server-rs/crates/platform-audio`、`server-rs/crates/api-server/src/vector_engine_audio_generation/generation.rs`、`server-rs/crates/shared-contracts/src/assets.rs`、`src/services/image-editor/editorProjectClient.ts`、`src/components/image-editor/ImageCanvasGeneration*`。
 - 验证方式：`cargo test -p platform-audio --manifest-path server-rs/Cargo.toml --test vector_engine_audio`、`cargo test -p api-server --manifest-path server-rs/Cargo.toml editor_sound_effect`、`cargo test -p shared-contracts --manifest-path server-rs/Cargo.toml editor_audio_requests_and_response_use_canvas_audio_shape`、`npx vitest run src/services/image-editor/editorProjectClient.test.ts src/components/image-editor/ImageCanvasGenerationSubmissionModel.test.ts src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx src/components/image-editor/ImageCanvasGenerationModel.test.ts --reporter=dot`。
diff --git a/docs/project-memory/shared-memory/pitfalls.md b/docs/project-memory/shared-memory/pitfalls.md
index 5b639514f..cafa80ee5 100644
--- a/docs/project-memory/shared-memory/pitfalls.md
+++ b/docs/project-memory/shared-memory/pitfalls.md
@@ -15,6 +15,14 @@
 - 关联：相关文件、文档、提交或 Issue
 ```
 
+## Vidu 文生音频线上网关可能要求 sound 字段
+
+- 现象：画板点击 `生成游戏音效` 后，请求返回 `Failed to deserialize the JSON body into the target type: missing field sound`。
+- 原因：VectorEngine Apifox `创建文生音频任务` 文档仍写 `/ent/v2/text2audio` 使用 `model + prompt + duration`，但线上 Vidu 网关曾按 `sound` 字段反序列化；只发送 `prompt` 会被上游拦截在 JSON 解析阶段。
+- 处理：前端和 BFF 对内继续使用用户语义更清晰的 `prompt`；`platform-audio` 转发到 VectorEngine Vidu 时同时发送 `prompt` 与 `sound`，两者值保持一致。不要把 UI 改回 Suno `task: "sound"`、`type`、`tempo` 或 BPM。
+- 验证：`cargo test -p platform-audio --manifest-path server-rs/Cargo.toml --test vector_engine_audio` 中音效请求体测试必须同时断言 `prompt` 与 `sound`；必要时用线上生成音效 smoke 确认不再出现 `missing field sound`。
+- 关联：`server-rs/crates/platform-audio/src/request.rs`、`server-rs/crates/platform-audio/tests/vector_engine_audio.rs`、`docs/【编辑器】画板音乐生成入口设计-2026-06-18.md`。
+
 ## Suno 任务完成不代表已经拿到 wav 下载地址
 
 - 现象：画板生成背景音乐时，前端报 `音频生成尚未返回可下载地址(requestId:...)`；画板生成音效时，前端可能报 `获取 Suno 音效 wav 失败(requestId:...)`。上游任务可能已经完成，但 wav 下载地址还没就绪。
diff --git a/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md b/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
index 41f06309a..707959d24 100644
--- a/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
+++ b/docs/technical/【前端架构】图片画布编辑器MVP接入方案-2026-06-11.md
@@ -12,7 +12,7 @@
 - 编辑器左侧为图片素材栏，可展开 / 收起；移动端优先保持素材栏可折叠。
 - 中央画布支持背景拖拽平移、滚轮缩放、缩放百分比菜单、显示所有元素和固定比例缩放。
 - 画布左下角提供 Lovart 式状态控件：背景色圆点、素材 / 图层入口、小地图开关；小地图显示图层缩略分布和当前视口框，点击小地图执行显示所有元素。
-- 画布中的图片可展示、悬浮显示图片 Resolution 尺寸与边框，点击后在图片上方显示浮动工具栏；浮动工具栏只保留当前可执行的编辑动作，不放调整 / 复制 / 删除 / 查看信息占位按钮。图片右上角素材类型标签、图片信息角标和悬浮尺寸标签在画布缩小时必须按 viewport 反向缩放，保持屏幕可读尺寸；图片信息角标使用圆形 `i` 图标，不使用中括号或花括号样式。图片不再维护独立展示 `Size` 字段，画布显示宽高统一取 `originalWidth/originalHeight`（图片信息中的 `Resolution`）。
+- 画布中的图片可展示、悬浮显示图片 Resolution 尺寸与边框，点击后在图片上方显示浮动工具栏；浮动工具栏只保留当前可执行的编辑动作，不放调整 / 复制 / 删除 / 查看信息占位按钮。图片右上角素材类型标签、图片信息角标和悬浮尺寸标签在画布缩小时必须按 viewport 反向缩放，保持屏幕可读尺寸；无 `assetKind` 的素材右上角显示 `未知` 标签，点击标签弹出独立标签选择菜单并可写回图层 `assetKind`，不能触发图层选择 / 拖拽事件；图片信息角标使用圆形 `i` 图标，不使用中括号或花括号样式。图片不再维护独立展示 `Size` 字段，画布显示宽高统一取 `originalWidth/originalHeight`（图片信息中的 `Resolution`）。
 - 默认工具为选择模式；底部工具栏采用 AI 画布工作流工具组：选择、抓手、上传、生成图片、生成视频、生成音乐、生成规范、生成角色形象、生成图标素材、生成 UI 设计图。底部栏不再展示文字工具、形状标注工具和导出工具；上传与生成图片之间、生成音乐与生成规范之间各有一个半图标高度分割线。
 - 鼠标中键拖拽始终平移画布；长按 Space 临时进入抓手模式，松开后恢复原工具。
 - 图片拖拽时显示水平 / 垂直吸附参考线，吸附到其它图层或画板的边缘与中心线。
diff --git a/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md b/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
index 72d0fcbbb..819c76180 100644
--- a/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
+++ b/docs/【编辑器】生成类面板Lovart统一改造方案-2026-06-17.md
@@ -117,12 +117,9 @@
 ## 第一版计费配置
 
 ```text
-生成图片：12 泥点
-生成规范：5 泥点
-生成角色形象：12 泥点
-生成图标素材：12 泥点
-生成UI设计图：12 泥点
-生成视频：480p 每秒 10 泥点，720p 每秒 20 泥点
+生成图片 / 生成角色形象 / 生成图标素材 / 生成UI设计图 / 宣发素材 / 快速编辑 / 重绘：nanobanana2 为 12 泥点，gpt-image-2 为 20 泥点
+生成规范：固定 gpt-image-2，5 泥点
+生成视频：seedance2.0-fast 为 480p 每秒 10 / 720p 每秒 20；seedance2.0 为 480p 每秒 12 / 720p 每秒 24；kling3.0 为 480p 每秒 15 / 720p 每秒 30；kling3.0-omni 为 480p 每秒 20 / 720p 每秒 40
 角色动画：480p 每秒 10 泥点，720p 每秒 20 泥点
 生成音效：10 泥点
 生成背景音乐：5 泥点
@@ -130,9 +127,9 @@
 
 当前必须显式覆盖的正式模型定价配置：
 
-- 图片类：`gemini-3.1-flash-image-preview`（UI 显示与历史别名统一为 `nanobanana2`）、`gpt-image-2`。
+- 图片类：`gemini-3.1-flash-image-preview`（UI 显示与历史别名统一为 `nanobanana2`）为 12 泥点；`gpt-image-2` 为 20 泥点。
 - 规范：`gpt-image-2`。
-- 视频：`seedance2.0-fast`、`seedance2.0`、`kling3.0`、`kling3.0-omni`；兼容旧布局回放的 `veo3.1`、`veo3.1-fast` 也要保留定价配置，但前端模型菜单不展示。
+- 视频：`seedance2.0-fast` 为 10 / 20 泥点每秒；`seedance2.0` 为 12 / 24 泥点每秒；`kling3.0` 为 15 / 30 泥点每秒；`kling3.0-omni` 为 20 / 40 泥点每秒。兼容旧布局回放的 `veo3.1`、`veo3.1-fast` 也要保留 10 / 20 泥点每秒定价配置，但前端模型菜单不展示。
 - 角色动画：`seedance2.0-fast`。
 - 音效：`audio1.0`。
 - 背景音乐：`chirp-v5`。
diff --git a/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md b/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
index a19c7d6c6..b62840bd3 100644
--- a/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
+++ b/docs/【编辑器】画板音乐生成入口设计-2026-06-18.md
@@ -20,10 +20,10 @@
 
 ### 生成游戏音效
 
-- `prompt`：用户输入的音效提示词，直接作为 Vidu 文生音频请求的 `prompt` 字段。
+- `prompt`：用户输入的音效提示词。前端与 BFF 对内仍使用 `prompt`，提交到 VectorEngine Vidu 时同时写入 `prompt` 与 `sound` 同值，兼容线上网关对 `sound` 字段的反序列化要求。
 - `model`：固定默认 `audio1.0`，UI 以禁用态模型胶囊显示为 `Vidu`，位置紧贴生成按钮；暂不展示 Suno 文生音效模型入口。
 - `duration`：Vidu 音频时长，UI 以一个无标题参数按钮展示，选项范围 `2-10` 秒，默认 `5` 秒。
-- 提交到 VectorEngine 时映射为 Vidu 文生音频字段：`model: "audio1.0"`、`prompt`、`duration`、可选 `seed`。当前编辑器音效固定使用 Vidu `audio1.0`，不再走 Suno `task: "sound"` / `metadata_params` 文生音效契约。
+- 提交到 VectorEngine 时映射为 Vidu 文生音频字段：`model: "audio1.0"`、`prompt`、`sound: prompt`、`duration`、可选 `seed`。当前编辑器音效固定使用 Vidu `audio1.0`，不再走 Suno `task: "sound"` / `metadata_params` 文生音效契约。
 
 ### 生成游戏背景音乐
 
@@ -42,8 +42,9 @@
 - 新增素材类型：
   - `assetKind="sound-effect"`
   - `assetKind="background-music"`
-- 音频结果以小型音频卡加入画布，卡片底部使用 `<audio controls>` 播放；音频结果当前只保存为画布资源，不进入图片素材库。
-- 音频结果卡片底部显示用户提示词与播放控件，不在卡片左下角或悬停左上角展示时长。
+- 音频结果以小型音频卡加入画布，卡片底部使用融入卡片的自定义播放器组件承载进度、时间和音量，播放 / 暂停只收口到卡片中央图标按钮；音频结果当前只保存为画布资源，不进入图片素材库。
+- 音频结果卡片底部显示用户提示词与播放器辅助控件，不在卡片左下角或悬停左上角展示时长。
+- 音频结果卡片的提示词固定显示在卡片左上角；底部播放器辅助控件仅在鼠标悬停音频卡片时从下方滑入显示，移出后向下滑出收起。
 - 音频卡片中央播放区按状态切换：未悬停且未播放时显示音效 / 背景音乐图标，悬停且未播放时显示播放按钮，播放中始终显示暂停按钮。
 - generated 私有音频资源播放前必须通过 `/api/assets/read-url` 换签；画布卡片不得直接把 `/generated-*` 或 generated OSS 私有地址交给 `<audio>` 裸请求。
 - 音频元数据弹窗使用 `时长`，不使用图片 / 视频的分辨率语义；音频生成占位不显示分辨率或时长角标。
@@ -100,7 +101,7 @@ POST /api/editor/audios/background-music/generations
 - 在 `platform-audio` 增加编辑器专用 body builder 和 submit 函数：
   - 背景音乐 body 使用 `mv`、`gpt_description_prompt`、`make_instrumental`。
   - Suno 音乐接口路径固定为 `/suno/submit/music`；`VECTOR_ENGINE_BASE_URL` 即使配置为带 `/v1` 的图片接口根，也要在 `platform-audio` 中归一为根路径后再拼接，避免误请求 `/v1/suno/submit/music`。
-  - 音效 body 使用 Vidu 文生音频契约：提交 `/ent/v2/text2audio`，请求体包含 `model: "audio1.0"`、`prompt`、`duration` 和可选 `seed`；`model` 和 `prompt` 为必填，`prompt` 最长 1500 字符，`duration` 按 Vidu 文档限制在 `2-10` 秒。
+  - 音效 body 使用 Vidu 文生音频契约：提交 `/ent/v2/text2audio`，请求体包含 `model: "audio1.0"`、`prompt`、`sound: prompt`、`duration` 和可选 `seed`；`model` 和 `prompt` 为文档必填，`sound` 用于兼容线上网关实际校验，`prompt` 最长 1500 字符，`duration` 按 Vidu 文档限制在 `2-10` 秒。
   - 编辑器音效轮询使用 Vidu 路径 `/ent/v2/tasks/{taskId}/creations`，不再使用 Suno `/suno/fetch/{taskId}`；Suno 文生音效 `task: "sound"` 暂不从编辑器入口暴露。
   - Suno 提交成功后的任务 ID 兼容与 wav clip 轮询逻辑只保留给背景音乐链路，避免误伤 `/api/editor/audios/background-music/generations`。
   - VectorEngine 音频响应的 `code` 需要兼容 `"success"`、`"ok"`、`"0"`、`"200"` 以及数字 `0` / `200`；HTTP 非 2xx 时后端错误信息应透出安全的上游状态和短响应摘要，避免前端只显示笼统提交失败。
@@ -115,11 +116,12 @@ POST /api/editor/audios/background-music/generations
 - 点击 `生成音乐` 只出现选项框，不立刻创建占位。
 - 点击 `生成游戏音效` 后出现音效面板，文本字段为 `prompt`；底部左侧只有一个无标题时长参数按钮，右侧为固定 `Vidu` 模型胶囊和生成按钮。
 - 音效时长只提供 `2-10` 秒选项，默认 `5` 秒，提交到 BFF 的字段为 `duration`。
-- 音效面板模型显示 `Vidu`，提交 `model: "audio1.0"`；不显示 Suno 文生音效模型或 Suno 音效入口。
+- 音效面板模型显示 `Vidu`，提交 `model: "audio1.0"`；后端转发到 Vidu 时同时携带 `prompt` 和 `sound`；不显示 Suno 文生音效模型或 Suno 音效入口。
 - 点击 `生成游戏背景音乐` 后出现背景音乐面板，字段为 `gpt_description_prompt`，右侧固定显示 `Suno` 模型胶囊，不展示 `make_instrumental`。
 - 音效提交到 `/api/editor/audios/sound-effects/generations`，背景音乐提交到 `/api/editor/audios/background-music/generations`。
-- 成功后画布新增音频卡，能通过 `<audio controls>` 播放。
-- 成功后的音频卡展示提示词；卡片中央按未悬停图标、悬停播放、播放中暂停切换，播放控件固定在卡片底部。
+- 成功后画布新增音频卡，能通过卡片中央播放按钮播放，底部进度、时间和音量控件可操作。
+- 成功后的音频卡展示提示词；卡片中央按未悬停图标、悬停播放、播放中暂停切换，不在底部重复显示播放 / 暂停按钮，播放器辅助控件直接融入卡片底部。
+- 鼠标未悬停音频卡时底部播放器辅助控件不可见，悬停时从底部滑动显现；提示词位于卡片左上角。
 - 音频卡片、悬停角标和待生成占位不显示时长；信息弹窗显示时长。
 - 音频素材浮动工具栏只显示 `改造` 与 `下载按钮`，`改造` 复用对应生成面板且没有参考图组件。
 - 私有 generated 音频能先换签再预览播放，不出现播放条一直为 `0:00` 的裸路径失败状态。
diff --git a/server-rs/crates/api-server/src/character_animation_assets.rs b/server-rs/crates/api-server/src/character_animation_assets.rs
index faf24d2d9..3b8257c72 100644
--- a/server-rs/crates/api-server/src/character_animation_assets.rs
+++ b/server-rs/crates/api-server/src/character_animation_assets.rs
@@ -4784,7 +4784,7 @@ mod tests {
             resolution: "480p".to_string(),
             mode: "std".to_string(),
             sound: "off".to_string(),
-            price_mud_points: 50,
+            price_mud_points: 100,
             reference_image_srcs: Vec::new(),
             reference_video_srcs: Vec::new(),
             reference_audio_srcs: Vec::new(),
@@ -4796,7 +4796,7 @@ mod tests {
         assert_eq!(normalized.provider_model, EDITOR_VIDEO_MODEL_KLING_3_OMNI);
         assert_eq!(normalized.width, 854);
         assert_eq!(normalized.height, 480);
-        assert_eq!(normalized.price_mud_points, 50);
+        assert_eq!(normalized.price_mud_points, 100);
     }
 
     #[test]
@@ -4831,7 +4831,7 @@ mod tests {
             resolution: "720p".to_string(),
             mode: "std".to_string(),
             sound: "off".to_string(),
-            price_mud_points: 80,
+            price_mud_points: 96,
             reference_image_srcs: Vec::new(),
             reference_video_srcs: Vec::new(),
             reference_audio_srcs: Vec::new(),
@@ -4983,7 +4983,7 @@ mod tests {
             resolution: "480p".to_string(),
             mode: "std".to_string(),
             sound: "off".to_string(),
-            price_mud_points: 40,
+            price_mud_points: 48,
             reference_image_srcs: Vec::new(),
             reference_video_srcs: Vec::new(),
             reference_audio_srcs: vec!["data:audio/wav;base64,audio".to_string()],
diff --git a/server-rs/crates/api-server/src/editor_generation_config.rs b/server-rs/crates/api-server/src/editor_generation_config.rs
index 0e450c82e..48eeb0f5a 100644
--- a/server-rs/crates/api-server/src/editor_generation_config.rs
+++ b/server-rs/crates/api-server/src/editor_generation_config.rs
@@ -7,6 +7,7 @@ const EDITOR_IMAGE_MODEL_NANOBANANA2: &str = "gemini-3.1-flash-image-preview";
 const EDITOR_IMAGE_MODEL_NANOBANANA2_DISPLAY_ALIAS: &str = "nanobanana2";
 const EDITOR_IMAGE_MODEL_NANOBANANA_LEGACY_ALIAS: &str = "nano-banana";
 const EDITOR_IMAGE_MODEL_GENERATION_MUD_POINTS: u32 = 12;
+const EDITOR_IMAGE_MODEL_GPT_IMAGE_2_MUD_POINTS: u32 = 20;
 const EDITOR_SPEC_MODEL_GPT_IMAGE_2_MUD_POINTS: u32 = 5;
 
 pub(crate) const EDITOR_VIDEO_GENERATION_480P_MUD_POINTS_PER_SECOND: u32 = 10;
@@ -29,8 +30,8 @@ const EDITOR_BACKGROUND_MUSIC_MODEL_SUNO_MUD_POINTS: u32 = 5;
 
 pub(crate) fn editor_image_model_generation_mud_points(model: Option<&str>) -> u32 {
     match model.map(str::trim).filter(|value| !value.is_empty()) {
-        Some(EDITOR_IMAGE_MODEL_GPT_IMAGE_2)
-        | Some(EDITOR_IMAGE_MODEL_NANOBANANA2)
+        Some(EDITOR_IMAGE_MODEL_GPT_IMAGE_2) => EDITOR_IMAGE_MODEL_GPT_IMAGE_2_MUD_POINTS,
+        Some(EDITOR_IMAGE_MODEL_NANOBANANA2)
         | Some(EDITOR_IMAGE_MODEL_NANOBANANA2_DISPLAY_ALIAS)
         | Some(EDITOR_IMAGE_MODEL_NANOBANANA_LEGACY_ALIAS) => {
             EDITOR_IMAGE_MODEL_GENERATION_MUD_POINTS
@@ -60,7 +61,7 @@ fn editor_video_model_resolution_mud_points_per_second(
     model: Option<&str>,
     resolution: &str,
 ) -> u32 {
-    let _normalized_model = match model.map(str::trim).filter(|value| !value.is_empty()) {
+    let normalized_model = match model.map(str::trim).filter(|value| !value.is_empty()) {
         Some(
             EDITOR_VIDEO_MODEL_SEEDANCE_2
             | EDITOR_VIDEO_MODEL_SEEDANCE_2_FAST
@@ -71,12 +72,16 @@ fn editor_video_model_resolution_mud_points_per_second(
         ) => model.unwrap_or_default().trim(),
         _ => EDITOR_VIDEO_MODEL_SEEDANCE_2_FAST,
     };
-    let per_second = if resolution == "720p" {
-        EDITOR_VIDEO_GENERATION_720P_MUD_POINTS_PER_SECOND
-    } else {
-        EDITOR_VIDEO_GENERATION_480P_MUD_POINTS_PER_SECOND
+    let (rate_480p, rate_720p) = match normalized_model {
+        EDITOR_VIDEO_MODEL_SEEDANCE_2 => (12, 24),
+        EDITOR_VIDEO_MODEL_KLING_3 => (15, 30),
+        EDITOR_VIDEO_MODEL_KLING_3_OMNI => (20, 40),
+        _ => (
+            EDITOR_VIDEO_GENERATION_480P_MUD_POINTS_PER_SECOND,
+            EDITOR_VIDEO_GENERATION_720P_MUD_POINTS_PER_SECOND,
+        ),
     };
-    per_second
+    if resolution == "720p" { rate_720p } else { rate_480p }
 }
 
 pub(crate) fn editor_video_model_generation_mud_points(
@@ -157,15 +162,15 @@ mod tests {
         );
         assert_eq!(
             editor_video_model_generation_mud_points(Some("seedance2.0"), "720p", 5),
-            100
+            120
         );
         assert_eq!(
             editor_video_model_generation_mud_points(Some("kling3.0"), "480p", 5),
-            50
+            75
         );
         assert_eq!(
             editor_video_model_generation_mud_points(Some("kling3.0-omni"), "720p", 4),
-            80
+            160
         );
         assert_eq!(
             editor_video_model_generation_mud_points(Some("veo3.1"), "480p", 4),
@@ -219,7 +224,7 @@ mod tests {
         );
         assert_eq!(
             editor_image_generation_mud_points(Some("publication-material"), Some("gpt-image-2")),
-            12
+            20
         );
     }
 }
diff --git a/server-rs/crates/api-server/src/editor_project.rs b/server-rs/crates/api-server/src/editor_project.rs
index def2bea84..37a5a06c6 100644
--- a/server-rs/crates/api-server/src/editor_project.rs
+++ b/server-rs/crates/api-server/src/editor_project.rs
@@ -2068,8 +2068,8 @@ mod tests {
             12
         );
         assert_eq!(
-            validate_editor_icon_spritesheet_price(12, Some("gpt-image-2")).unwrap(),
-            12
+            validate_editor_icon_spritesheet_price(20, Some("gpt-image-2")).unwrap(),
+            20
         );
         let error = validate_editor_icon_spritesheet_price(5, Some("gpt-image-2"))
             .expect_err("wrong icon spritesheet price should fail");
diff --git a/server-rs/crates/platform-audio/src/request.rs b/server-rs/crates/platform-audio/src/request.rs
index f3ae56f52..2ecc70265 100644
--- a/server-rs/crates/platform-audio/src/request.rs
+++ b/server-rs/crates/platform-audio/src/request.rs
@@ -47,7 +47,10 @@ pub fn build_sound_effect_task_body(request: SoundEffectTaskRequest) -> Result<V
             "model".to_string(),
             Value::String(VIDU_AUDIO_MODEL.to_string()),
         ),
-        ("prompt".to_string(), Value::String(prompt)),
+        ("prompt".to_string(), Value::String(prompt.clone())),
+        // 中文注释：VectorEngine Apifox 当前仍写 prompt，但线上 Vidu 网关曾返回
+        // missing field sound；同时发送 sound 作为同义字段，兼容网关实际反序列化。
+        ("sound".to_string(), Value::String(prompt)),
         ("duration".to_string(), json!(request.duration)),
     ]);
     if let Some(seed) = request.seed {
@@ -89,7 +92,9 @@ pub fn build_editor_sound_effect_task_body(
     }
     let mut body = Map::from_iter([
         ("model".to_string(), Value::String(model)),
-        ("prompt".to_string(), Value::String(prompt)),
+        ("prompt".to_string(), Value::String(prompt.clone())),
+        // 中文注释：同上，编辑器音效也必须带 sound，避免上游按 sound 字段解析时报缺字段。
+        ("sound".to_string(), Value::String(prompt)),
         ("duration".to_string(), json!(request.duration)),
     ]);
     if let Some(seed) = request.seed {
diff --git a/server-rs/crates/platform-audio/tests/vector_engine_audio.rs b/server-rs/crates/platform-audio/tests/vector_engine_audio.rs
index ad2d36059..bcdee944d 100644
--- a/server-rs/crates/platform-audio/tests/vector_engine_audio.rs
+++ b/server-rs/crates/platform-audio/tests/vector_engine_audio.rs
@@ -142,6 +142,7 @@ fn vidu_sound_effect_request_body_uses_text2audio_contract() {
     assert_eq!(AudioTaskKind::SoundEffect.provider(), "vector-engine-vidu");
     assert_eq!(body["model"], VIDU_AUDIO_MODEL);
     assert_eq!(body["prompt"], "金币掉落叮当声");
+    assert_eq!(body["sound"], "金币掉落叮当声");
     assert_eq!(body["duration"], 5);
     assert!(body.get("mv").is_none());
     assert!(body.get("task").is_none());
@@ -182,6 +183,7 @@ fn editor_sound_effect_request_body_uses_vidu_text2audio_contract() {
 
     assert_eq!(body["model"], VIDU_AUDIO_MODEL);
     assert_eq!(body["prompt"], "金币掉落叮当声");
+    assert_eq!(body["sound"], "金币掉落叮当声");
     assert_eq!(body["duration"], 7);
     assert_eq!(body["seed"], 42);
     assert!(body.get("mv").is_none());
diff --git a/server-rs/crates/shared-contracts/src/assets.rs b/server-rs/crates/shared-contracts/src/assets.rs
index 8cc4bb80d..399d76c3b 100644
--- a/server-rs/crates/shared-contracts/src/assets.rs
+++ b/server-rs/crates/shared-contracts/src/assets.rs
@@ -1040,7 +1040,7 @@ mod tests {
             resolution: "480p".to_string(),
             mode: "std".to_string(),
             sound: "off".to_string(),
-            price_mud_points: 50,
+            price_mud_points: 100,
             reference_image_srcs: Vec::new(),
             reference_video_srcs: Vec::new(),
             reference_audio_srcs: Vec::new(),
@@ -1049,7 +1049,7 @@ mod tests {
 
         assert_eq!(payload["aspectRatio"], json!("16:9"));
         assert_eq!(payload["durationSeconds"], json!(5));
-        assert_eq!(payload["priceMudPoints"], json!(50));
+        assert_eq!(payload["priceMudPoints"], json!(100));
         assert_eq!(payload["model"], json!("kling3.0-omni"));
     }
 
@@ -1101,7 +1101,7 @@ mod tests {
             task_id: "task-1".to_string(),
             duration_seconds: 5,
             resolution: "480p".to_string(),
-            price_mud_points: 50,
+            price_mud_points: 100,
         })
         .expect("response should serialize");
 
diff --git a/src/components/image-editor/ImageCanvasBasicGenerationComposerView.test.tsx b/src/components/image-editor/ImageCanvasBasicGenerationComposerView.test.tsx
index 90677990e..c4484410c 100644
--- a/src/components/image-editor/ImageCanvasBasicGenerationComposerView.test.tsx
+++ b/src/components/image-editor/ImageCanvasBasicGenerationComposerView.test.tsx
@@ -183,7 +183,7 @@ describe('ImageCanvasBasicGenerationComposerView', () => {
 
     expect(screen.getByLabelText('当前模型').textContent).toBe('gpt-image-2');
     const submitButton = within(panel).getByRole('button', { name: '生成' });
-    expect(submitButton.textContent).toBe('生成12泥点');
+    expect(submitButton.textContent).toBe('生成20泥点');
   });
 
   it('clicks the parent generation panel to collapse an opened option panel', () => {
diff --git a/src/components/image-editor/ImageCanvasCharacterGenerationComposerView.test.tsx b/src/components/image-editor/ImageCanvasCharacterGenerationComposerView.test.tsx
index a4e1367f8..b2c162ad8 100644
--- a/src/components/image-editor/ImageCanvasCharacterGenerationComposerView.test.tsx
+++ b/src/components/image-editor/ImageCanvasCharacterGenerationComposerView.test.tsx
@@ -10,6 +10,7 @@ import type {
   UploadTarget,
 } from './ImageCanvasEditorTypes';
 import { ImageCanvasCharacterGenerationComposerView } from './ImageCanvasCharacterGenerationComposerView';
+import { IMAGE_MODEL_GPT_IMAGE_2 } from './ImageCanvasGenerationModel';
 
 function createDialog(
   patch: Partial<GenerateDialogState> = {},
@@ -136,6 +137,33 @@ describe('ImageCanvasCharacterGenerationComposerView', () => {
     );
   });
 
+  it('updates the submit price when switching the character image model', () => {
+    const rememberImageModel = vi.fn();
+    render(
+      <CharacterGenerationHarness
+        initialDialog={createDialog({
+          imageModel: 'gemini-3.1-flash-image-preview',
+          aspectRatio: '1:1',
+          imageSize: '1K',
+        })}
+        onRememberImageModel={rememberImageModel}
+      />,
+    );
+
+    expect(screen.getByRole('button', { name: '生成' }).textContent).toBe(
+      '生成12泥点',
+    );
+    fireEvent.click(
+      screen.getByRole('button', { name: '生成图片模型 nanobanana2' }),
+    );
+    fireEvent.click(screen.getByRole('button', { name: 'gpt-image-2' }));
+
+    expect(rememberImageModel).toHaveBeenCalledWith(IMAGE_MODEL_GPT_IMAGE_2);
+    expect(screen.getByRole('button', { name: '生成' }).textContent).toBe(
+      '生成20泥点',
+    );
+  });
+
   it('routes character reference menus to canvas picking, spec creation and upload', () => {
     const openSpecDialog = vi.fn();
     const requestUpload = vi.fn();
diff --git a/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx b/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
index 34d19c373..b9e4520e7 100644
--- a/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
+++ b/src/components/image-editor/ImageCanvasEditorGenerationIntegration.test.tsx
@@ -1095,7 +1095,7 @@ describe('ImageCanvasEditorView generation integration', () => {
       model: 'gpt-image-2',
       provider: 'VectorEngine',
       taskId: 'icon-gpt-model-1',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
     });
     render(<ImageCanvasEditorView />);
     await screen.findByAltText('画布图片：拼图素材');
@@ -1161,6 +1161,7 @@ describe('ImageCanvasEditorView generation integration', () => {
           model: 'gpt-image-2',
           aspectRatio: '1:1',
           imageSize: '1K',
+          priceMudPoints: 20,
         }),
       );
     });
diff --git a/src/components/image-editor/ImageCanvasEditorModel.test.ts b/src/components/image-editor/ImageCanvasEditorModel.test.ts
index 0bcb5f4c8..1137a648c 100644
--- a/src/components/image-editor/ImageCanvasEditorModel.test.ts
+++ b/src/components/image-editor/ImageCanvasEditorModel.test.ts
@@ -128,6 +128,31 @@ describe('ImageCanvasEditorModel', () => {
     });
   });
 
+  it('hydrates manually selected publication material tags from saved layout', () => {
+    const hydrated = hydrateLayer(
+      {
+        layerId: 'layer-publication',
+        resourceId: 'resource-publication',
+        title: '宣发图',
+        x: 10,
+        y: 20,
+        width: 1024,
+        height: 1024,
+        originalWidth: 1024,
+        originalHeight: 1024,
+        zIndex: 5,
+        sourceType: 'generated',
+        assetKind: 'publication-material',
+      },
+      new Map([['resource-publication', { imageSrc: '/read/publication.png' }]]),
+    );
+
+    expect(hydrated).toMatchObject({
+      id: 'layer-publication',
+      assetKind: 'publication-material',
+    });
+  });
+
   it('hydrates audio media type and sound effect asset kind from saved layout', () => {
     const hydrated = hydrateLayer(
       {
diff --git a/src/components/image-editor/ImageCanvasEditorModel.ts b/src/components/image-editor/ImageCanvasEditorModel.ts
index 3c55776fd..eb5892d4f 100644
--- a/src/components/image-editor/ImageCanvasEditorModel.ts
+++ b/src/components/image-editor/ImageCanvasEditorModel.ts
@@ -666,6 +666,7 @@ export function canvasAssetKindOrNull(value: unknown): CanvasAssetKind | null {
     value === 'icon' ||
     value === 'icon-spritesheet' ||
     value === 'icon-spec' ||
+    value === 'publication-material' ||
     value === 'ui-design' ||
     value === 'video' ||
     value === 'sound-effect' ||
diff --git a/src/components/image-editor/ImageCanvasEditorShellView.test.tsx b/src/components/image-editor/ImageCanvasEditorShellView.test.tsx
index fde9ef05a..c12c02e04 100644
--- a/src/components/image-editor/ImageCanvasEditorShellView.test.tsx
+++ b/src/components/image-editor/ImageCanvasEditorShellView.test.tsx
@@ -159,6 +159,7 @@ function createStageProps(): ImageCanvasStageViewProps {
     onLayerMouseEnter: vi.fn(),
     onLayerMouseLeave: vi.fn(),
     onOpenLayerMetadata: vi.fn(),
+    onUpdateLayerAssetKind: vi.fn(),
     onGenerationFramePointerDown: vi.fn(),
     onActivateGenerationDialog: vi.fn(),
     onCropExpandHandlePointerDown: vi.fn(),
diff --git a/src/components/image-editor/ImageCanvasEditorView.test.tsx b/src/components/image-editor/ImageCanvasEditorView.test.tsx
index 75d87fbe6..98eb60d23 100644
--- a/src/components/image-editor/ImageCanvasEditorView.test.tsx
+++ b/src/components/image-editor/ImageCanvasEditorView.test.tsx
@@ -1031,6 +1031,37 @@ describe('ImageCanvasEditorView', () => {
     );
   });
 
+  it('saves manually selected layer tags in the canvas layout', async () => {
+    render(<ImageCanvasEditorView />);
+
+    const layerButton = await screen.findByRole('button', {
+      name: '选择拼图素材',
+    });
+    fireEvent.click(
+      within(layerButton).getByRole('button', { name: '素材标签：未知' }),
+    );
+    fireEvent.click(
+      within(screen.getByRole('menu', { name: '选择素材标签' })).getByRole(
+        'menuitem',
+        { name: '角色' },
+      ),
+    );
+
+    await waitFor(() => {
+      expect(saveEditorProjectLayoutMock).toHaveBeenCalledWith(
+        'editor-project-default',
+        expect.objectContaining({
+          layers: expect.arrayContaining([
+            expect.objectContaining({
+              title: '拼图素材',
+              assetKind: 'character',
+            }),
+          ]),
+        }),
+      );
+    });
+  });
+
   it('offers Lovart-style zoom menu commands', async () => {
     render(<ImageCanvasEditorView />);
 
diff --git a/src/components/image-editor/ImageCanvasEditorView.tsx b/src/components/image-editor/ImageCanvasEditorView.tsx
index f44139371..77b6803d5 100644
--- a/src/components/image-editor/ImageCanvasEditorView.tsx
+++ b/src/components/image-editor/ImageCanvasEditorView.tsx
@@ -18,6 +18,7 @@ import { resolveContextMenuPosition } from './ImageCanvasEditorModel';
 import { ImageCanvasEditorShellView } from './ImageCanvasEditorShellView';
 import type {
   AssetPointerDragState,
+  CanvasAssetKind,
   CanvasContextMenuState,
   CanvasGenerationDialogState,
   CanvasLayer,
@@ -734,6 +735,30 @@ export function ImageCanvasEditorView() {
     setPendingGenerationDeleteDialog(null);
     removeCanvasGenerationDialog(dialog.id);
   }, [pendingGenerationDeleteDialog, removeCanvasGenerationDialog]);
+  const updateLayerAssetKind = useCallback(
+    (layerId: string, assetKind: CanvasAssetKind | null) => {
+      const targetLayer = layersRef.current.find((layer) => layer.id === layerId);
+      if (!targetLayer || targetLayer.assetKind === assetKind) {
+        return;
+      }
+      captureCanvasHistory();
+      const nextLayer = {
+        ...targetLayer,
+        assetKind,
+      };
+      setLayers((currentLayers) =>
+        currentLayers.map((layer) =>
+          layer.id === layerId ? { ...layer, assetKind } : layer,
+        ),
+      );
+      setMetadataLayer((currentLayer) =>
+        currentLayer?.id === layerId ? nextLayer : currentLayer,
+      );
+      setImageContextMenu(null);
+      setContextMenu(null);
+    },
+    [captureCanvasHistory],
+  );
 
   useImageCanvasKeyboardShortcuts({
     generateDialogRef,
@@ -967,6 +992,7 @@ export function ImageCanvasEditorView() {
       setMetadataLayer(layer);
       selectSingleLayer(layer.id);
     },
+    onUpdateLayerAssetKind: updateLayerAssetKind,
     onGenerationFramePointerDown: handleGenerationFramePointerDown,
     onActivateGenerationDialog: activateCanvasGenerationDialog,
     onCropExpandHandlePointerDown:
diff --git a/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx b/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
index 2c001c323..27d0b4901 100644
--- a/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
+++ b/src/components/image-editor/ImageCanvasGenerationComposerView.test.tsx
@@ -274,7 +274,7 @@ describe('ImageCanvasGenerationComposerView', () => {
       panel.querySelector('.image-canvas-editor__generation-composer-footer'),
     ).toBeTruthy();
     expect(within(panel).getByRole('button', { name: '生成' }).textContent).toBe(
-      '生成12泥点',
+      '生成20泥点',
     );
   });
 
@@ -485,6 +485,9 @@ describe('ImageCanvasGenerationComposerView', () => {
     expect(screen.getByRole('menu', { name: '视频模型选项' })).toBeTruthy();
     expect(screen.getByLabelText('当前视频模型').textContent).toBe('kling3.0');
     expect(screen.getByRole('button', { name: '模型 Kling 3.0' })).toBeTruthy();
+    expect(screen.getByRole('button', { name: '生成视频' }).textContent).toBe(
+      '生成150泥点',
+    );
   });
 
   it('生成游戏音效面板使用 Vidu duration 参数且不再显示类型和 BPM', () => {
diff --git a/src/components/image-editor/ImageCanvasGenerationImageOptionsView.test.tsx b/src/components/image-editor/ImageCanvasGenerationImageOptionsView.test.tsx
index c0f4acc84..9697e9e5c 100644
--- a/src/components/image-editor/ImageCanvasGenerationImageOptionsView.test.tsx
+++ b/src/components/image-editor/ImageCanvasGenerationImageOptionsView.test.tsx
@@ -7,6 +7,7 @@ import { describe, expect, it, vi } from 'vitest';
 import type { GenerateDialogState } from './ImageCanvasEditorTypes';
 import { ImageCanvasGenerationImageOptionsView } from './ImageCanvasGenerationImageOptionsView';
 import {
+  calculateEditorImageGenerationPrice,
   IMAGE_MODEL_GPT_IMAGE_2,
   IMAGE_MODEL_NANOBANANA2,
 } from './ImageCanvasGenerationModel';
@@ -29,7 +30,7 @@ function ImageOptionsHarness({
         setGenerateDialog={setDialog}
         includeDimensions
         onRememberImageModel={onRememberImageModel}
-        cost={12}
+        cost={calculateEditorImageGenerationPrice({ model: dialog.imageModel })}
         submitLabel="生成"
         submitAriaLabel="生成角色形象"
       />
@@ -160,6 +161,9 @@ describe('ImageCanvasGenerationImageOptionsView', () => {
     expect(
       screen.getByRole('button', { name: '生成图片模型 gpt-image-2' }),
     ).toBeTruthy();
+    expect(screen.getByRole('button', { name: '生成角色形象' }).textContent).toBe(
+      '生成20泥点',
+    );
   });
 
   it('renders option menus and shows mud point text in the submit button', () => {
diff --git a/src/components/image-editor/ImageCanvasGenerationModel.test.ts b/src/components/image-editor/ImageCanvasGenerationModel.test.ts
index 53591a484..e5f22bdec 100644
--- a/src/components/image-editor/ImageCanvasGenerationModel.test.ts
+++ b/src/components/image-editor/ImageCanvasGenerationModel.test.ts
@@ -87,6 +87,7 @@ describe('ImageCanvasGenerationModel', () => {
     expect(calculateEditorImageModelPrice(DEFAULT_IMAGE_MODEL)).toBe(
       EDITOR_IMAGE_MODEL_MUD_POINT_CONFIG[DEFAULT_IMAGE_MODEL],
     );
+    expect(calculateEditorImageModelPrice(IMAGE_MODEL_GPT_IMAGE_2)).toBe(20);
     expect(
       calculateEditorImageGenerationPrice({
         kind: 'character',
@@ -111,8 +112,11 @@ describe('ImageCanvasGenerationModel', () => {
     expect(calculateEditorVideoPrice(VIDEO_MODEL_KLING_3, '480p', 4)).toBe(
       EDITOR_VIDEO_MODEL_MUD_POINT_CONFIG[VIDEO_MODEL_KLING_3]['480p'] * 4,
     );
+    expect(calculateEditorVideoPrice(VIDEO_MODEL_KLING_3, '720p', 5)).toBe(
+      150,
+    );
     expect(calculateEditorVideoPrice(VIDEO_MODEL_KLING_3_OMNI, '720p', 5)).toBe(
-      EDITOR_VIDEO_MODEL_MUD_POINT_CONFIG[VIDEO_MODEL_KLING_3_OMNI]['720p'] * 5,
+      200,
     );
     expect(calculateCharacterAnimationPrice(CHARACTER_ANIMATION_MODEL, '720p', 6))
       .toBe(
diff --git a/src/components/image-editor/ImageCanvasGenerationModel.ts b/src/components/image-editor/ImageCanvasGenerationModel.ts
index b544a3e06..1b2a1809a 100644
--- a/src/components/image-editor/ImageCanvasGenerationModel.ts
+++ b/src/components/image-editor/ImageCanvasGenerationModel.ts
@@ -83,7 +83,8 @@ const IMAGE_MODEL_NANOBANANA_ALIASES = new Set([
 export const SPEC_GENERATION_MODEL = IMAGE_MODEL_GPT_IMAGE_2;
 export const EDITOR_IMAGE_MODEL_MUD_POINT_CONFIG = {
   [IMAGE_MODEL_NANOBANANA2]: EDITOR_GENERATION_MUD_POINT_CONFIG.image,
-  [IMAGE_MODEL_GPT_IMAGE_2]: EDITOR_GENERATION_MUD_POINT_CONFIG.image,
+  // 中文注释：gpt-image-2 作为更高成本图片模型独立计费，避免切换模型后按钮价格不变。
+  [IMAGE_MODEL_GPT_IMAGE_2]: 20,
 } as const;
 export const EDITOR_SPEC_MODEL_MUD_POINT_CONFIG = {
   [IMAGE_MODEL_GPT_IMAGE_2]: EDITOR_GENERATION_MUD_POINT_CONFIG.spec,
@@ -284,11 +285,23 @@ const EDITOR_VIDEO_RESOLUTION_RATE_CONFIG = {
   '480p': EDITOR_GENERATION_MUD_POINT_CONFIG.videoPerSecond['480p'],
   '720p': EDITOR_GENERATION_MUD_POINT_CONFIG.videoPerSecond['720p'],
 } as const;
+const EDITOR_VIDEO_STANDARD_RESOLUTION_RATE_CONFIG = {
+  '480p': 12,
+  '720p': 24,
+} as const;
+const EDITOR_VIDEO_KLING_RESOLUTION_RATE_CONFIG = {
+  '480p': 15,
+  '720p': 30,
+} as const;
+const EDITOR_VIDEO_KLING_OMNI_RESOLUTION_RATE_CONFIG = {
+  '480p': 20,
+  '720p': 40,
+} as const;
 export const EDITOR_VIDEO_MODEL_MUD_POINT_CONFIG = {
   [VIDEO_MODEL_SEEDANCE_2_FAST]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
-  [VIDEO_MODEL_SEEDANCE_2]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
-  [VIDEO_MODEL_KLING_3]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
-  [VIDEO_MODEL_KLING_3_OMNI]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
+  [VIDEO_MODEL_SEEDANCE_2]: EDITOR_VIDEO_STANDARD_RESOLUTION_RATE_CONFIG,
+  [VIDEO_MODEL_KLING_3]: EDITOR_VIDEO_KLING_RESOLUTION_RATE_CONFIG,
+  [VIDEO_MODEL_KLING_3_OMNI]: EDITOR_VIDEO_KLING_OMNI_RESOLUTION_RATE_CONFIG,
   // 中文注释：前端不展示 Veo 入口，但类型与后端兼容层仍可接收旧布局回放，定价表必须同步覆盖。
   [VIDEO_MODEL_VEO_3_1]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
   [VIDEO_MODEL_VEO_3_1_FAST]: EDITOR_VIDEO_RESOLUTION_RATE_CONFIG,
diff --git a/src/components/image-editor/ImageCanvasIconSpritesheetComposerView.test.tsx b/src/components/image-editor/ImageCanvasIconSpritesheetComposerView.test.tsx
index a66e6ce5d..3f3f7ab3d 100644
--- a/src/components/image-editor/ImageCanvasIconSpritesheetComposerView.test.tsx
+++ b/src/components/image-editor/ImageCanvasIconSpritesheetComposerView.test.tsx
@@ -186,6 +186,9 @@ describe('ImageCanvasIconSpritesheetComposerView', () => {
     expect(rememberImageModel).toHaveBeenCalledWith('gpt-image-2');
     expect(screen.getByLabelText('当前模型').textContent).toBe('gpt-image-2');
     expect(screen.getByLabelText('当前尺寸').textContent).toBe('1K');
+    expect(screen.getByRole('button', { name: '生成' }).textContent).toBe(
+      '生成20泥点',
+    );
   });
 
   it('disables generation controls and renders failure state', () => {
diff --git a/src/components/image-editor/ImageCanvasQuickEditPanelView.test.tsx b/src/components/image-editor/ImageCanvasQuickEditPanelView.test.tsx
index f2631d588..401ab04d9 100644
--- a/src/components/image-editor/ImageCanvasQuickEditPanelView.test.tsx
+++ b/src/components/image-editor/ImageCanvasQuickEditPanelView.test.tsx
@@ -151,7 +151,7 @@ describe('ImageCanvasQuickEditPanelView', () => {
     );
 
     expect(screen.getByRole('button', { name: '生成' }).textContent).toBe(
-      '生成12泥点',
+      '生成20泥点',
     );
   });
 
diff --git a/src/components/image-editor/ImageCanvasSpecGenerationPanelView.test.tsx b/src/components/image-editor/ImageCanvasSpecGenerationPanelView.test.tsx
index b98e1e9af..12798f497 100644
--- a/src/components/image-editor/ImageCanvasSpecGenerationPanelView.test.tsx
+++ b/src/components/image-editor/ImageCanvasSpecGenerationPanelView.test.tsx
@@ -143,6 +143,11 @@ describe('ImageCanvasSpecGenerationPanelView', () => {
     );
     const submitButton = screen.getByRole('button', { name: '生成UI设计图' });
     expect(submitButton.textContent).toBe('生成12泥点');
+    fireEvent.click(screen.getByRole('button', { name: '生成图片模型 nanobanana2' }));
+    fireEvent.click(screen.getByRole('button', { name: 'gpt-image-2' }));
+    expect(screen.getByRole('button', { name: '生成UI设计图' }).textContent).toBe(
+      '生成20泥点',
+    );
   });
 
   it('renders character spec fields and forwards updates', () => {
diff --git a/src/components/image-editor/ImageCanvasStageView.tsx b/src/components/image-editor/ImageCanvasStageView.tsx
index 7512bd0b3..efd228840 100644
--- a/src/components/image-editor/ImageCanvasStageView.tsx
+++ b/src/components/image-editor/ImageCanvasStageView.tsx
@@ -11,6 +11,7 @@ import { ImageCanvasBottomToolbarView } from './ImageCanvasBottomToolbarView';
 import { ImageCanvasContextMenusView } from './ImageCanvasContextMenusView';
 import type {
   CanvasClipboard,
+  CanvasAssetKind,
   CanvasContextMenuState,
   CanvasGenerationDialogState,
   CanvasLayer,
@@ -88,6 +89,10 @@ export type ImageCanvasStageViewProps = {
   onLayerMouseEnter: (layerId: string) => void;
   onLayerMouseLeave: (layerId: string) => void;
   onOpenLayerMetadata: (layer: CanvasLayer) => void;
+  onUpdateLayerAssetKind: (
+    layerId: string,
+    assetKind: CanvasAssetKind | null,
+  ) => void;
   onGenerationFramePointerDown: (
     event: ReactPointerEvent<HTMLDivElement>,
     dialog: CanvasGenerationDialogState,
@@ -189,6 +194,7 @@ export function ImageCanvasStageView({
   onLayerMouseEnter,
   onLayerMouseLeave,
   onOpenLayerMetadata,
+  onUpdateLayerAssetKind,
   onGenerationFramePointerDown,
   onActivateGenerationDialog,
   onCropExpandHandlePointerDown,
@@ -271,6 +277,7 @@ export function ImageCanvasStageView({
         onLayerMouseEnter={onLayerMouseEnter}
         onLayerMouseLeave={onLayerMouseLeave}
         onOpenLayerMetadata={onOpenLayerMetadata}
+        onUpdateLayerAssetKind={onUpdateLayerAssetKind}
         onGenerationFramePointerDown={onGenerationFramePointerDown}
         onActivateGenerationDialog={onActivateGenerationDialog}
         onCropExpandHandlePointerDown={onCropExpandHandlePointerDown}
diff --git a/src/components/image-editor/ImageCanvasWorldView.test.tsx b/src/components/image-editor/ImageCanvasWorldView.test.tsx
index 1eef92801..52b5ec752 100644
--- a/src/components/image-editor/ImageCanvasWorldView.test.tsx
+++ b/src/components/image-editor/ImageCanvasWorldView.test.tsx
@@ -642,14 +642,37 @@ describe('ImageCanvasWorldView', () => {
     const layerButton = screen.getByRole('button', { name: '选择游戏音效' });
     const audio = within(layerButton).getByLabelText('画布音频：游戏音效');
     expect(audio.tagName.toLowerCase()).toBe('audio');
+    expect(audio.hasAttribute('controls')).toBe(false);
     expect(within(layerButton).queryByAltText('画布图片：游戏音效')).toBeNull();
     expect(within(layerButton).getByText('音效')).toBeTruthy();
     expect(within(layerButton).queryByText(/时长/u)).toBeNull();
+    expect(
+      within(layerButton).getAllByRole('button', { name: /播放|暂停/u }),
+    ).toHaveLength(1);
     expect(
       within(layerButton).getByRole('button', { name: '播放游戏音效' })
         .querySelector('svg')
         ?.getAttribute('class'),
     ).toContain('lucide-volume-2');
+    expect(
+      layerButton
+        .querySelector('.image-canvas-editor__audio-card-controls')
+        ?.className.includes(
+          'image-canvas-editor__audio-card-controls--integrated',
+        ),
+    ).toBe(true);
+    expect(
+      layerButton
+        .querySelector('.image-canvas-editor__audio-card')
+        ?.className.includes(
+          'image-canvas-editor__audio-card--controls-visible',
+        ),
+    ).toBe(false);
+    expect(
+      within(layerButton).getByLabelText('调整游戏音效播放进度'),
+    ).toBeTruthy();
+    expect(within(layerButton).getByLabelText('静音游戏音效')).toBeTruthy();
+    expect(within(layerButton).getByLabelText('调整游戏音效音量')).toBeTruthy();
     expect(
       within(layerButton).queryByText('420 x 120 px'),
     ).toBeNull();
@@ -696,6 +719,13 @@ describe('ImageCanvasWorldView', () => {
     const hoveredLayerButton = screen.getByRole('button', {
       name: '选择游戏背景音乐',
     });
+    expect(
+      hoveredLayerButton
+        .querySelector('.image-canvas-editor__audio-card')
+        ?.className.includes(
+          'image-canvas-editor__audio-card--controls-visible',
+        ),
+    ).toBe(true);
     expect(
       within(hoveredLayerButton)
         .getByRole('button', { name: '播放游戏背景音乐' })
diff --git a/src/components/image-editor/ImageCanvasWorldView.tsx b/src/components/image-editor/ImageCanvasWorldView.tsx
index a7f94f328..74546ccbe 100644
--- a/src/components/image-editor/ImageCanvasWorldView.tsx
+++ b/src/components/image-editor/ImageCanvasWorldView.tsx
@@ -13,8 +13,9 @@ import {
   Sparkles,
   UserRound,
   Volume2,
+  VolumeX,
 } from 'lucide-react';
-import { useRef, useState } from 'react';
+import { useEffect, useRef, useState } from 'react';
 import type {
   CSSProperties,
   KeyboardEvent as ReactKeyboardEvent,
@@ -23,11 +24,16 @@ import type {
 } from 'react';
 
 import { useResolvedAssetReadUrl } from '../../hooks/useResolvedAssetReadUrl';
+import {
+  PlatformFloatingMenu,
+  PlatformFloatingMenuItem,
+} from '../common/PlatformFloatingMenu';
 import { PlatformIconButton } from '../common/PlatformIconButton';
 import { PlatformPillBadge } from '../common/PlatformPillBadge';
 import { PlatformStatusMessage } from '../common/PlatformStatusMessage';
 import { CANVAS_WORLD_SIZE } from './ImageCanvasEditorModel';
 import type {
+  CanvasAssetKind,
   CanvasGenerationDialogState,
   CanvasLayer,
   CanvasMarqueeState,
@@ -40,7 +46,6 @@ import type {
 import {
   getGenerationFrameAriaLabel,
   getGenerationFrameLabel,
-  getLayerKindLabel,
 } from './ImageCanvasGenerationModel';
 
 function getGenerationPlaceholderMeta(dialog: CanvasGenerationDialogState) {
@@ -158,6 +163,55 @@ function buildInverseScaleStyle(
   };
 }
 
+const CANVAS_ASSET_KIND_TAG_OPTIONS: Array<{
+  value: CanvasAssetKind | null;
+  label: string;
+  className: string;
+}> = [
+  { value: null, label: '未知', className: 'unknown' },
+  { value: 'spec', label: '规范', className: 'spec' },
+  { value: 'character', label: '角色', className: 'character' },
+  {
+    value: 'character-animation',
+    label: '动作',
+    className: 'character-animation',
+  },
+  { value: 'icon', label: '图标', className: 'icon' },
+  { value: 'icon-spritesheet', label: '图集', className: 'icon-spritesheet' },
+  { value: 'icon-spec', label: '图标规范', className: 'icon-spec' },
+  {
+    value: 'publication-material',
+    label: '宣发素材',
+    className: 'publication-material',
+  },
+  { value: 'ui-design', label: 'UI设计', className: 'ui-design' },
+  { value: 'video', label: '视频', className: 'video' },
+  { value: 'sound-effect', label: '音效', className: 'sound-effect' },
+  {
+    value: 'background-music',
+    label: '背景音乐',
+    className: 'background-music',
+  },
+];
+
+const UNKNOWN_ASSET_KIND_TAG_OPTION = CANVAS_ASSET_KIND_TAG_OPTIONS[0] as {
+  value: null;
+  label: string;
+  className: string;
+};
+
+function getLayerKindTagMeta(layer: CanvasLayer) {
+  const knownKind = layer.assetKind
+    ? CANVAS_ASSET_KIND_TAG_OPTIONS.find(
+        (option) => option.value === layer.assetKind,
+      )
+    : null;
+  if (knownKind) {
+    return knownKind;
+  }
+  return UNKNOWN_ASSET_KIND_TAG_OPTION;
+}
+
 export type ImageCanvasWorldViewProps = {
   viewport: CanvasViewport;
   snapGuide: SnapGuide | null;
@@ -185,6 +239,10 @@ export type ImageCanvasWorldViewProps = {
   onLayerMouseEnter: (layerId: string) => void;
   onLayerMouseLeave: (layerId: string) => void;
   onOpenLayerMetadata: (layer: CanvasLayer) => void;
+  onUpdateLayerAssetKind: (
+    layerId: string,
+    assetKind: CanvasAssetKind | null,
+  ) => void;
   onGenerationFramePointerDown: (
     event: ReactPointerEvent<HTMLDivElement>,
     dialog: CanvasGenerationDialogState,
@@ -226,6 +284,17 @@ function handleLayerKeyboardActivation(
   event.currentTarget.click();
 }
 
+function handleLayerTagKeyboardActivation(
+  event: ReactKeyboardEvent<HTMLElement>,
+) {
+  if (event.key !== 'Enter' && event.key !== ' ') {
+    return;
+  }
+  event.preventDefault();
+  event.stopPropagation();
+  event.currentTarget.click();
+}
+
 function getLayerMetricLabel(layer: CanvasLayer) {
   return `${Math.round(layer.originalWidth)} x ${Math.round(
     layer.originalHeight,
@@ -240,6 +309,25 @@ function getAudioLayerIcon(layer: CanvasLayer) {
   );
 }
 
+function getAudioDurationSeconds(durationSeconds: CanvasLayer['durationSeconds']) {
+  return typeof durationSeconds === 'number' &&
+    Number.isFinite(durationSeconds) &&
+    durationSeconds > 0
+    ? durationSeconds
+    : 0;
+}
+
+function formatAudioControlTime(seconds: number) {
+  if (!Number.isFinite(seconds) || seconds <= 0) {
+    return '0:00';
+  }
+  const minutes = Math.floor(seconds / 60);
+  const remainingSeconds = Math.floor(seconds % 60)
+    .toString()
+    .padStart(2, '0');
+  return `${minutes}:${remainingSeconds}`;
+}
+
 function ImageCanvasAudioLayerCard({
   layer,
   isHovered,
@@ -253,7 +341,21 @@ function ImageCanvasAudioLayerCard({
     refreshKey: layer.taskId ?? layer.resourceId,
   });
   const prompt = layer.prompt?.trim();
+  const fallbackDuration = getAudioDurationSeconds(layer.durationSeconds);
+  const [currentTime, setCurrentTime] = useState(0);
+  const [duration, setDuration] = useState(fallbackDuration);
+  const [volume, setVolume] = useState(1);
+  const [isMuted, setIsMuted] = useState(false);
   const showPlaybackButton = isPlaying || isHovered;
+  const controlDuration = duration > 0 ? duration : fallbackDuration;
+  const safeCurrentTime =
+    controlDuration > 0 ? Math.min(currentTime, controlDuration) : 0;
+
+  useEffect(() => {
+    setIsPlaying(false);
+    setCurrentTime(0);
+    setDuration(fallbackDuration);
+  }, [fallbackDuration, layer.src]);
 
   const togglePlayback = async () => {
     const audio = audioRef.current;
@@ -271,8 +373,49 @@ function ImageCanvasAudioLayerCard({
     }
   };
 
+  const handleSeekChange = (nextValue: string) => {
+    const nextTime = Number(nextValue);
+    if (!Number.isFinite(nextTime)) {
+      return;
+    }
+    const clampedTime =
+      controlDuration > 0
+        ? Math.min(Math.max(nextTime, 0), controlDuration)
+        : Math.max(nextTime, 0);
+    if (audioRef.current) {
+      audioRef.current.currentTime = clampedTime;
+    }
+    setCurrentTime(clampedTime);
+  };
+
+  const handleVolumeChange = (nextValue: string) => {
+    const nextVolume = Number(nextValue);
+    if (!Number.isFinite(nextVolume)) {
+      return;
+    }
+    const clampedVolume = Math.min(Math.max(nextVolume, 0), 1);
+    if (audioRef.current) {
+      audioRef.current.volume = clampedVolume;
+      audioRef.current.muted = clampedVolume === 0;
+    }
+    setVolume(clampedVolume);
+    setIsMuted(clampedVolume === 0);
+  };
+
+  const toggleMute = () => {
+    const nextMuted = !isMuted;
+    if (audioRef.current) {
+      audioRef.current.muted = nextMuted;
+    }
+    setIsMuted(nextMuted);
+  };
+
   return (
-    <div className="image-canvas-editor__audio-card">
+    <div
+      className={`image-canvas-editor__audio-card ${
+        isHovered ? 'image-canvas-editor__audio-card--controls-visible' : ''
+      }`}
+    >
       <button
         type="button"
         className="image-canvas-editor__audio-card-playback"
@@ -296,19 +439,80 @@ function ImageCanvasAudioLayerCard({
       {prompt ? (
         <span className="image-canvas-editor__audio-card-title">{prompt}</span>
       ) : null}
-      <div className="image-canvas-editor__audio-card-controls">
+      <div
+        className="image-canvas-editor__audio-card-controls image-canvas-editor__audio-card-controls--integrated"
+        onClick={stopMediaEventPropagation}
+        onKeyDown={(event) => event.stopPropagation()}
+        onPointerDown={stopMediaEventPropagation}
+      >
         <audio
           ref={audioRef}
+          className="image-canvas-editor__audio-card-native-control"
           src={resolvedUrl || undefined}
-          controls
           preload="metadata"
           aria-label={`画布音频：${layer.title}`}
           onClick={stopMediaEventPropagation}
           onPointerDown={stopMediaEventPropagation}
+          onLoadedMetadata={(event) => {
+            const nextDuration = event.currentTarget.duration;
+            setDuration(
+              Number.isFinite(nextDuration) && nextDuration > 0
+                ? nextDuration
+                : fallbackDuration,
+            );
+          }}
+          onTimeUpdate={(event) => setCurrentTime(event.currentTarget.currentTime)}
+          onVolumeChange={(event) => {
+            setVolume(event.currentTarget.volume);
+            setIsMuted(event.currentTarget.muted);
+          }}
           onPlay={() => setIsPlaying(true)}
           onPause={() => setIsPlaying(false)}
           onEnded={() => setIsPlaying(false)}
         />
+        <span className="image-canvas-editor__audio-card-time">
+          {formatAudioControlTime(safeCurrentTime)}
+        </span>
+        <input
+          type="range"
+          className="image-canvas-editor__audio-card-progress"
+          min="0"
+          max={controlDuration || 0}
+          step="0.1"
+          value={safeCurrentTime}
+          disabled={!controlDuration}
+          aria-label={`调整${layer.title}播放进度`}
+          onChange={(event) => handleSeekChange(event.currentTarget.value)}
+        />
+        <span className="image-canvas-editor__audio-card-time">
+          {formatAudioControlTime(controlDuration)}
+        </span>
+        <button
+          type="button"
+          className="image-canvas-editor__audio-card-volume-toggle"
+          aria-label={isMuted ? `恢复${layer.title}音量` : `静音${layer.title}`}
+          onClick={(event) => {
+            event.stopPropagation();
+            toggleMute();
+          }}
+          onPointerDown={stopMediaEventPropagation}
+        >
+          {isMuted ? (
+            <VolumeX className="h-3.5 w-3.5" aria-hidden="true" />
+          ) : (
+            <Volume2 className="h-3.5 w-3.5" aria-hidden="true" />
+          )}
+        </button>
+        <input
+          type="range"
+          className="image-canvas-editor__audio-card-volume"
+          min="0"
+          max="1"
+          step="0.01"
+          value={isMuted ? 0 : volume}
+          aria-label={`调整${layer.title}音量`}
+          onChange={(event) => handleVolumeChange(event.currentTarget.value)}
+        />
       </div>
     </div>
   );
@@ -332,12 +536,16 @@ export function ImageCanvasWorldView({
   onLayerMouseEnter,
   onLayerMouseLeave,
   onOpenLayerMetadata,
+  onUpdateLayerAssetKind,
   onGenerationFramePointerDown,
   onActivateGenerationDialog,
   onCropExpandHandlePointerDown,
 }: ImageCanvasWorldViewProps) {
   const inverseScale = getInverseViewportScale(viewport);
   const inverseScaleStyle = buildInverseScaleStyle(inverseScale);
+  const [openLayerKindMenuId, setOpenLayerKindMenuId] = useState<string | null>(
+    null,
+  );
 
   return (
     <div
@@ -370,7 +578,8 @@ export function ImageCanvasWorldView({
         .map((layer) => {
           const isSelected = selectedLayerIds.includes(layer.id);
           const isHovered = hoveredLayerId === layer.id;
-          const kindLabel = getLayerKindLabel(layer);
+          const kindTagMeta = getLayerKindTagMeta(layer);
+          const kindLabel = kindTagMeta.label;
           const mediaTransform =
             layer.flipX || layer.flipY
               ? `scale(${layer.flipX ? -1 : 1}, ${layer.flipY ? -1 : 1})`
@@ -383,102 +592,153 @@ export function ImageCanvasWorldView({
               : null;
           const LayerElement = layer.mediaType === 'audio' ? 'div' : 'button';
           return (
-            <LayerElement
-              key={layer.id}
-              {...(layer.mediaType === 'audio'
-                ? { role: 'button', tabIndex: 0 }
-                : { type: 'button' })}
-              className={`image-canvas-editor__layer ${isSelected ? 'image-canvas-editor__layer--selected' : ''} ${isHovered ? 'image-canvas-editor__layer--hovered' : ''} ${layerGeneratingLabel ? 'image-canvas-editor__layer--generating' : ''} ${layer.locked ? 'image-canvas-editor__layer--locked' : ''}`}
-              style={{
-                left: layer.x,
-                top: layer.y,
-                width: layer.width,
-                height: layer.height,
-                zIndex: layer.zIndex,
-                display: layer.hidden ? 'none' : undefined,
-              }}
-              onPointerDown={(event) => onLayerPointerDown(event, layer)}
-              onClick={(event) => onLayerClick(event, layer)}
-              onContextMenu={(event) => onLayerContextMenu(event, layer)}
-              onKeyDown={
-                layer.mediaType === 'audio'
-                  ? handleLayerKeyboardActivation
-                  : undefined
-              }
-              onMouseEnter={() => onLayerMouseEnter(layer.id)}
-              onMouseLeave={() => onLayerMouseLeave(layer.id)}
-              aria-label={`选择${layer.title}`}
-            >
-              {layer.mediaType === 'audio' ? (
-                <ImageCanvasAudioLayerCard
-                  layer={layer}
-                  isHovered={isHovered}
-                />
-              ) : layer.mediaType === 'video' ? (
-                <video
-                  className="image-canvas-editor__layer-video"
-                  src={layer.src}
-                  controls
-                  playsInline
-                  preload="metadata"
-                  aria-label={`画布视频：${layer.title}`}
-                  style={{ transform: mediaTransform }}
-                  onClick={(event) => event.stopPropagation()}
-                  onPointerDown={(event) => event.stopPropagation()}
-                />
-              ) : (
-                <img
-                  src={layer.src}
-                  alt={`画布图片：${layer.title}`}
-                  style={{ transform: mediaTransform }}
-                />
-              )}
-              {kindLabel ? (
+            <div key={layer.id}>
+              <LayerElement
+                {...(layer.mediaType === 'audio'
+                  ? { role: 'button', tabIndex: 0 }
+                  : { type: 'button' })}
+                className={`image-canvas-editor__layer ${isSelected ? 'image-canvas-editor__layer--selected' : ''} ${isHovered ? 'image-canvas-editor__layer--hovered' : ''} ${layerGeneratingLabel ? 'image-canvas-editor__layer--generating' : ''} ${layer.locked ? 'image-canvas-editor__layer--locked' : ''}`}
+                style={{
+                  left: layer.x,
+                  top: layer.y,
+                  width: layer.width,
+                  height: layer.height,
+                  zIndex: layer.zIndex,
+                  display: layer.hidden ? 'none' : undefined,
+                }}
+                onPointerDown={(event) => onLayerPointerDown(event, layer)}
+                onClick={(event) => {
+                  setOpenLayerKindMenuId(null);
+                  onLayerClick(event, layer);
+                }}
+                onContextMenu={(event) => {
+                  setOpenLayerKindMenuId(null);
+                  onLayerContextMenu(event, layer);
+                }}
+                onKeyDown={
+                  layer.mediaType === 'audio'
+                    ? handleLayerKeyboardActivation
+                    : undefined
+                }
+                onMouseEnter={() => onLayerMouseEnter(layer.id)}
+                onMouseLeave={() => onLayerMouseLeave(layer.id)}
+                aria-label={`选择${layer.title}`}
+              >
+                {layer.mediaType === 'audio' ? (
+                  <ImageCanvasAudioLayerCard
+                    layer={layer}
+                    isHovered={isHovered}
+                  />
+                ) : layer.mediaType === 'video' ? (
+                  <video
+                    className="image-canvas-editor__layer-video"
+                    src={layer.src}
+                    controls
+                    playsInline
+                    preload="metadata"
+                    aria-label={`画布视频：${layer.title}`}
+                    style={{ transform: mediaTransform }}
+                    onClick={(event) => event.stopPropagation()}
+                    onPointerDown={(event) => event.stopPropagation()}
+                  />
+                ) : (
+                  <img
+                    src={layer.src}
+                    alt={`画布图片：${layer.title}`}
+                    style={{ transform: mediaTransform }}
+                  />
+                )}
                 <span
-                  className={`image-canvas-editor__kind-badge image-canvas-editor__kind-badge--${layer.assetKind} image-canvas-editor__kind-badge--beside-info`}
+                  role="button"
+                  tabIndex={0}
+                  aria-label={`素材标签：${kindLabel}`}
+                  className={`image-canvas-editor__kind-badge image-canvas-editor__kind-badge--${kindTagMeta.className} image-canvas-editor__kind-badge--beside-info image-canvas-editor__kind-badge--editable`}
                   style={inverseScaleStyle}
+                  onPointerDown={(event) => event.stopPropagation()}
+                  onClick={(event) => {
+                    event.stopPropagation();
+                    setOpenLayerKindMenuId((currentId) =>
+                      currentId === layer.id ? null : layer.id,
+                    );
+                  }}
+                  onKeyDown={handleLayerTagKeyboardActivation}
                 >
                   {kindLabel}
                 </span>
-              ) : null}
-              <PlatformIconButton
-                asChild="spanButton"
-                variant="darkMini"
-                className="image-canvas-editor__metadata-corner"
-                label={`查看${layer.title}${
-                  layer.mediaType === 'audio'
-                    ? '音频'
-                    : layer.mediaType === 'video'
-                      ? '视频'
-                      : '图片'
-                }信息`}
-                icon={<Info className="h-3 w-3" />}
-                style={inverseScaleStyle}
-                onClick={(event) => {
-                  event.stopPropagation();
-                  onOpenLayerMetadata(layer);
-                }}
-                onPointerDown={(event) => event.stopPropagation()}
-              />
-              {isHovered && layer.mediaType !== 'audio' ? (
-                <PlatformPillBadge
-                  tone="lightOverlay"
-                  size="xs"
-                  className="image-canvas-editor__size-badge"
+                <PlatformIconButton
+                  asChild="spanButton"
+                  variant="darkMini"
+                  className="image-canvas-editor__metadata-corner"
+                  label={`查看${layer.title}${
+                    layer.mediaType === 'audio'
+                      ? '音频'
+                      : layer.mediaType === 'video'
+                        ? '视频'
+                        : '图片'
+                  }信息`}
+                  icon={<Info className="h-3 w-3" />}
                   style={inverseScaleStyle}
+                  onClick={(event) => {
+                    event.stopPropagation();
+                    onOpenLayerMetadata(layer);
+                  }}
+                  onPointerDown={(event) => event.stopPropagation()}
+                />
+                {isHovered && layer.mediaType !== 'audio' ? (
+                  <PlatformPillBadge
+                    tone="lightOverlay"
+                    size="xs"
+                    className="image-canvas-editor__size-badge"
+                    style={inverseScaleStyle}
+                  >
+                    {getLayerMetricLabel(layer)}
+                  </PlatformPillBadge>
+                ) : null}
+                {layerGeneratingLabel ? (
+                  <span
+                    className="image-canvas-editor__generation-frame-progress image-canvas-editor__layer-generating-progress"
+                    role="status"
+                  >
+                    {layerGeneratingLabel}
+                  </span>
+                ) : null}
+              </LayerElement>
+              {openLayerKindMenuId === layer.id ? (
+                <div
+                  className="image-canvas-editor__kind-menu-anchor"
+                  style={{
+                    left: layer.x + layer.width,
+                    top: layer.y,
+                    zIndex: layer.zIndex + 30,
+                    ...inverseScaleStyle,
+                  }}
                 >
-                  {getLayerMetricLabel(layer)}
-                </PlatformPillBadge>
+                  <PlatformFloatingMenu
+                    label="选择素材标签"
+                    placement="bottom-end"
+                    className="image-canvas-editor__kind-menu"
+                  >
+                    {CANVAS_ASSET_KIND_TAG_OPTIONS.map((option) => (
+                      <PlatformFloatingMenuItem
+                        key={option.value ?? 'unknown'}
+                        className={
+                          option.value === (layer.assetKind ?? null)
+                            ? 'image-canvas-editor__kind-menu-item--active'
+                            : undefined
+                        }
+                        onClick={(event) => {
+                          event.stopPropagation();
+                          onUpdateLayerAssetKind(layer.id, option.value);
+                          setOpenLayerKindMenuId(null);
+                        }}
+                      >
+                        {option.label}
+                      </PlatformFloatingMenuItem>
+                    ))}
+                  </PlatformFloatingMenu>
+                </div>
               ) : null}
-              {layerGeneratingLabel ? (
-                <span
-                  className="image-canvas-editor__generation-frame-progress image-canvas-editor__layer-generating-progress"
-                  role="status"
-                >
-                  {layerGeneratingLabel}
-                </span>
-              ) : null}
-            </LayerElement>
+            </div>
           );
         })}
       {canvasMarquee ? (
@@ -605,7 +865,10 @@ export function ImageCanvasWorldView({
                       {`${dialog.placeholder.originalWidth} x ${dialog.placeholder.originalHeight}`}
                     </span>
                   ) : null}
-                  <span className="image-canvas-editor__generation-frame-icon">
+                  <span
+                    className="image-canvas-editor__generation-frame-icon"
+                    style={inverseScaleStyle}
+                  >
                     {placeholderMeta.icon}
                   </span>
                   {dialog.status === 'generating' ? (
diff --git a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
index e77cdb04c..47fb7cd59 100644
--- a/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
+++ b/src/components/image-editor/useImageCanvasGenerationSubmissionWorkflow.test.tsx
@@ -605,7 +605,7 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
       model: 'gpt-image-2',
       provider: 'VectorEngine',
       taskId: 'task-icons',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
       iconImageSrcs: [
         createIconResult('返回按钮', 'data:image/png;base64,back'),
         createIconResult('设置按钮', 'data:image/png;base64,setting'),
@@ -647,7 +647,7 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
           referenceImageSrc: 'data:image/png;base64,spec',
           iconDescriptions: ['返回按钮', '设置按钮'],
           model: 'gpt-image-2',
-          priceMudPoints: 12,
+          priceMudPoints: 20,
         }),
       );
     });
@@ -683,7 +683,7 @@ describe('useImageCanvasGenerationSubmissionWorkflow', () => {
       model: 'gpt-image-2',
       provider: 'VectorEngine',
       taskId: 'task-ui-assets',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
       iconImageSrcs: [
         createIconResult('素材 1', 'data:image/png;base64,asset-1'),
       ],
diff --git a/src/index.css b/src/index.css
index b2aee8900..08f09e7ea 100644
--- a/src/index.css
+++ b/src/index.css
@@ -4445,25 +4445,91 @@ html[data-mobile-keyboard-open='true'] .platform-mobile-bottom-dock {
 }
 
 .image-canvas-editor__audio-card-title {
-  position: relative;
+  position: absolute;
+  left: 0.7rem;
+  top: 0.7rem;
   z-index: 2;
   overflow: hidden;
+  max-width: min(70%, calc(100% - 1.4rem));
   color: #ffffff;
   font-size: 0.74rem;
   font-weight: 800;
   line-height: 1.1;
   text-overflow: ellipsis;
   white-space: nowrap;
+  text-shadow: 0 1px 6px rgba(15, 23, 42, 0.55);
 }
 
 .image-canvas-editor__audio-card-controls {
   position: relative;
   z-index: 2;
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto auto minmax(2rem, 3.8rem);
+  align-items: center;
+  gap: 0.34rem;
+  min-height: 1.85rem;
+  padding: 0.18rem 0;
+  color: rgba(255, 255, 255, 0.92);
+  transform: translateY(calc(100% + 0.7rem));
+  opacity: 0;
+  pointer-events: none;
+  transition:
+    transform 180ms ease,
+    opacity 180ms ease;
+}
+
+.image-canvas-editor__audio-card--controls-visible
+  .image-canvas-editor__audio-card-controls {
+  transform: translateY(0);
+  opacity: 1;
+  pointer-events: auto;
 }
 
 .image-canvas-editor__audio-card audio {
-  width: 100%;
-  height: 1.85rem;
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  opacity: 0;
+  pointer-events: none;
+}
+
+.image-canvas-editor__audio-card-time {
+  min-width: 2.2rem;
+  font-size: 0.58rem;
+  font-weight: 800;
+  font-variant-numeric: tabular-nums;
+  line-height: 1;
+  text-align: center;
+  text-shadow: 0 1px 4px rgba(15, 23, 42, 0.42);
+}
+
+.image-canvas-editor__audio-card-progress,
+.image-canvas-editor__audio-card-volume {
+  min-width: 0;
+  height: 0.35rem;
+  accent-color: #67e8f9;
+  cursor: pointer;
+}
+
+.image-canvas-editor__audio-card-progress:disabled {
+  cursor: default;
+  opacity: 0.45;
+}
+
+.image-canvas-editor__audio-card-volume-toggle {
+  display: grid;
+  width: 1.25rem;
+  height: 1.25rem;
+  place-items: center;
+  border: 0;
+  border-radius: 999px;
+  background: rgba(255, 255, 255, 0.14);
+  color: #ffffff;
+  cursor: pointer;
+}
+
+.image-canvas-editor__audio-card-volume-toggle:hover {
+  background: rgba(255, 255, 255, 0.24);
 }
 
 .image-canvas-editor__layer--hovered,
@@ -4560,6 +4626,8 @@ html[data-mobile-keyboard-open='true'] .platform-mobile-bottom-dock {
   display: grid;
   place-items: center;
   color: #c7c7c7;
+  transform: scale(var(--image-canvas-editor-inverse-scale, 1));
+  transform-origin: center;
 }
 
 .image-canvas-editor__generation-frame--character {
@@ -4910,6 +4978,12 @@ html[data-mobile-keyboard-open='true'] .platform-mobile-bottom-dock {
   transform-origin: top right;
 }
 
+.image-canvas-editor__kind-badge--editable {
+  border: 1px solid rgba(255, 255, 255, 0.72);
+  cursor: pointer;
+  pointer-events: auto;
+}
+
 .image-canvas-editor__kind-badge--beside-info {
   right: var(--image-canvas-editor-beside-kind-offset, 1.95rem);
 }
@@ -4954,6 +5028,16 @@ html[data-mobile-keyboard-open='true'] .platform-mobile-bottom-dock {
   box-shadow: 0 8px 18px rgba(219, 39, 119, 0.24);
 }
 
+.image-canvas-editor__kind-badge--publication-material {
+  background: rgba(219, 39, 119, 0.92);
+  box-shadow: 0 8px 18px rgba(219, 39, 119, 0.24);
+}
+
+.image-canvas-editor__kind-badge--unknown {
+  background: rgba(71, 85, 105, 0.88);
+  box-shadow: 0 8px 18px rgba(71, 85, 105, 0.2);
+}
+
 .image-canvas-editor__kind-badge--video {
   background: rgba(37, 99, 235, 0.92);
   box-shadow: 0 8px 18px rgba(37, 99, 235, 0.24);
@@ -4965,6 +5049,24 @@ html[data-mobile-keyboard-open='true'] .platform-mobile-bottom-dock {
   box-shadow: 0 8px 18px rgba(79, 70, 229, 0.24);
 }
 
+.image-canvas-editor__kind-menu-anchor {
+  position: absolute;
+  width: 0;
+  height: 0;
+  transform: scale(var(--image-canvas-editor-inverse-scale, 1));
+  transform-origin: top right;
+}
+
+.image-canvas-editor__kind-menu {
+  max-height: 16rem;
+  overflow-y: auto;
+}
+
+.image-canvas-editor__kind-menu-item--active {
+  background: #eff6ff;
+  color: #1d4ed8;
+}
+
 .image-canvas-editor__size-badge {
   position: absolute;
   left: var(--image-canvas-editor-corner-offset, 0.35rem);
diff --git a/src/services/image-editor/editorProjectClient.test.ts b/src/services/image-editor/editorProjectClient.test.ts
index e859fa81a..415590b74 100644
--- a/src/services/image-editor/editorProjectClient.test.ts
+++ b/src/services/image-editor/editorProjectClient.test.ts
@@ -633,7 +633,7 @@ describe('editorProjectClient', () => {
       model: 'gpt-image-2',
       provider: 'VectorEngine',
       taskId: 'icon-spritesheet-task-2',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
     });
 
     await generateEditorIconSpritesheet({
@@ -642,7 +642,7 @@ describe('editorProjectClient', () => {
       model: 'gpt-image-2',
       aspectRatio: '1:1',
       imageSize: '2K',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
     });
 
     expect(requestJsonMock).toHaveBeenCalledWith(
@@ -656,7 +656,7 @@ describe('editorProjectClient', () => {
           model: 'gpt-image-2',
           aspectRatio: '1:1',
           imageSize: '2K',
-          priceMudPoints: 12,
+          priceMudPoints: 20,
         }),
       }),
       '生成图标素材失败',
@@ -685,7 +685,7 @@ describe('editorProjectClient', () => {
       model: 'gpt-image-2',
       provider: 'VectorEngine',
       taskId: 'ui-asset-extraction-1',
-      priceMudPoints: 12,
+      priceMudPoints: 20,
     });
 
     const result = await extractEditorUiDesignAssets({

From 95d6bc2ae7d3568556125c08d21f536a003e7e4a Mon Sep 17 00:00:00 2001
From: kdletters <kdletters@qq.com>
Date: Fri, 19 Jun 2026 15:29:30 +0800
Subject: [PATCH 3/3] =?UTF-8?q?=E6=8E=A5=E5=85=A5=E5=A4=96=E9=83=A8=20Open?=
 =?UTF-8?q?API=20=E4=B8=8E=20API=20Key=20=E7=AE=A1=E7=90=86?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

新增外部编辑器 OpenAPI 路由与 openapi.json 导出

新增账号级 API Key 表、鉴权、创建、列表和撤销链路

新增个人中心开发者 API Key 管理弹窗

补充前端契约、客户端方法、测试与项目文档
---
 .../genarrative-external-v1.openapi.json      | 822 ++++++++++++++++++
 .../shared-memory/decision-log.md             |   8 +
 ...�】server-rs与SpacetimeDB数据契约-2026-05-15.md |   7 +
 ...�构】外部OpenAPI与APIKey接入方案-2026-06-19.md | 101 +++
 packages/shared/src/contracts/runtime.ts      |  24 +
 server-rs/crates/api-server/src/app.rs        |   1 +
 .../crates/api-server/src/editor_project.rs   |  62 +-
 .../api-server/src/external_api_auth.rs       |  91 ++
 .../api-server/src/external_api_keys.rs       | 243 ++++++
 .../api-server/src/external_editor_api.rs     | 439 ++++++++++
 server-rs/crates/api-server/src/main.rs       |   3 +
 server-rs/crates/api-server/src/modules.rs    |   1 +
 .../api-server/src/modules/external_api.rs    |  54 ++
 .../crates/api-server/src/modules/profile.rs  |  19 +-
 .../spacetime-client/src/external_api_key.rs  |  94 ++
 server-rs/crates/spacetime-client/src/lib.rs  |  23 +-
 .../crates/spacetime-client/src/mapper.rs     |   8 +
 .../src/mapper/external_api_key.rs            | 118 +++
 .../spacetime-client/src/module_bindings.rs   |  45 +
 ...e_external_api_key_and_return_procedure.rs |  59 ++
 ...e_external_api_key_and_return_procedure.rs |  59 ++
 ...xternal_api_key_authenticate_input_type.rs |  16 +
 .../external_api_key_create_input_type.rs     |  21 +
 .../external_api_key_list_input_type.rs       |  15 +
 .../external_api_key_procedure_result_type.rs |  20 +
 .../external_api_key_revoke_input_type.rs     |  17 +
 .../external_api_key_snapshot_type.rs         |  23 +
 .../module_bindings/external_api_key_table.rs | 190 ++++
 .../module_bindings/external_api_key_type.rs  |  80 ++
 ..._external_api_keys_and_return_procedure.rs |  59 ++
 ...e_external_api_key_and_return_procedure.rs |  59 ++
 .../src/external_api_key_storage.rs           | 312 +++++++
 server-rs/crates/spacetime-module/src/lib.rs  |   2 +
 .../crates/spacetime-module/src/migration.rs  |   1 +
 .../ImageCanvasWorldView.test.tsx             |  35 +-
 .../PlatformProfileApiKeysModal.tsx           | 305 +++++++
 .../RpgEntryHomeView.recharge.test.tsx        |  96 +-
 src/components/rpg-entry/RpgEntryHomeView.tsx |  15 +
 .../rpg-entry/rpgProfileClient.test.ts        |  61 ++
 src/services/rpg-entry/rpgProfileClient.ts    |  42 +
 40 files changed, 3593 insertions(+), 57 deletions(-)
 create mode 100644 docs/openapi/genarrative-external-v1.openapi.json
 create mode 100644 docs/【后端架构】外部OpenAPI与APIKey接入方案-2026-06-19.md
 create mode 100644 server-rs/crates/api-server/src/external_api_auth.rs
 create mode 100644 server-rs/crates/api-server/src/external_api_keys.rs
 create mode 100644 server-rs/crates/api-server/src/external_editor_api.rs
 create mode 100644 server-rs/crates/api-server/src/modules/external_api.rs
 create mode 100644 server-rs/crates/spacetime-client/src/external_api_key.rs
 create mode 100644 server-rs/crates/spacetime-client/src/mapper/external_api_key.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/authenticate_external_api_key_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/create_external_api_key_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_authenticate_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_create_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_list_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_procedure_result_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_revoke_input_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_snapshot_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_table.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/external_api_key_type.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/list_external_api_keys_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-client/src/module_bindings/revoke_external_api_key_and_return_procedure.rs
 create mode 100644 server-rs/crates/spacetime-module/src/external_api_key_storage.rs
 create mode 100644 src/components/platform-entry/PlatformProfileApiKeysModal.tsx

diff --git a/docs/openapi/genarrative-external-v1.openapi.json b/docs/openapi/genarrative-external-v1.openapi.json
new file mode 100644
index 000000000..a733e57a4
--- /dev/null
+++ b/docs/openapi/genarrative-external-v1.openapi.json
@@ -0,0 +1,822 @@
+{
+  "openapi": "3.1.0",
+  "info": {
+    "title": "陶泥儿外部编辑器 OpenAPI",
+    "version": "1.0.0",
+    "description": "外部系统调用陶泥儿图片画布项目、画布布局保存和编辑器美术生图能力的 v1 契约。"
+  },
+  "servers": [
+    {
+      "url": "/",
+      "description": "当前部署环境"
+    }
+  ],
+  "tags": [
+    {
+      "name": "Editor Projects",
+      "description": "图片画布项目"
+    },
+    {
+      "name": "Editor Canvas",
+      "description": "图片画布布局"
+    },
+    {
+      "name": "Editor Images",
+      "description": "编辑器美术生图"
+    },
+    {
+      "name": "API Keys",
+      "description": "登录态 API Key 管理接口，路径位于 /api/profile"
+    }
+  ],
+  "paths": {
+    "/api/external/v1/openapi.json": {
+      "get": {
+        "tags": ["Editor Projects"],
+        "operationId": "getExternalOpenApiJson",
+        "summary": "读取外部 API OpenAPI JSON",
+        "security": [],
+        "responses": {
+          "200": {
+            "description": "OpenAPI 3.1 JSON",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "type": "object"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/external/v1/editor/projects": {
+      "post": {
+        "tags": ["Editor Projects"],
+        "operationId": "createEditorProject",
+        "summary": "创建图片画布项目",
+        "security": [
+          {
+            "ExternalApiKey": []
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExternalEditorProjectCreateRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "已创建项目",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalEditorProjectResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          }
+        }
+      }
+    },
+    "/api/external/v1/editor/projects/{projectId}": {
+      "get": {
+        "tags": ["Editor Projects"],
+        "operationId": "getEditorProject",
+        "summary": "读取图片画布项目",
+        "security": [
+          {
+            "ExternalApiKey": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ProjectId"
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "项目快照",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalEditorProjectResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/api/external/v1/editor/projects/{projectId}/canvas": {
+      "patch": {
+        "tags": ["Editor Canvas"],
+        "operationId": "saveEditorProjectCanvas",
+        "summary": "保存默认画布布局",
+        "security": [
+          {
+            "ExternalApiKey": []
+          }
+        ],
+        "parameters": [
+          {
+            "$ref": "#/components/parameters/ProjectId"
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExternalEditorCanvasSaveRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "保存后的项目快照",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalEditorProjectResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "404": {
+            "$ref": "#/components/responses/NotFound"
+          }
+        }
+      }
+    },
+    "/api/external/v1/editor/images/generations": {
+      "post": {
+        "tags": ["Editor Images"],
+        "operationId": "generateEditorImage",
+        "summary": "生成编辑器美术图片",
+        "security": [
+          {
+            "ExternalApiKey": []
+          }
+        ],
+        "requestBody": {
+          "required": true,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExternalEditorImageGenerationRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "生成结果与落库资源",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalEditorImageGenerationResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "$ref": "#/components/responses/BadRequest"
+          },
+          "401": {
+            "$ref": "#/components/responses/Unauthorized"
+          },
+          "403": {
+            "$ref": "#/components/responses/Forbidden"
+          },
+          "502": {
+            "$ref": "#/components/responses/UpstreamError"
+          }
+        }
+      }
+    },
+    "/api/profile/api-keys": {
+      "get": {
+        "tags": ["API Keys"],
+        "operationId": "listExternalApiKeys",
+        "summary": "列出当前登录账号的外部 API Key",
+        "description": "实际路径为 /api/profile/api-keys，使用登录态 Bearer JWT，不使用外部 API Key。",
+        "security": [
+          {
+            "UserAccessToken": []
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "API Key 列表",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalApiKeyListResponse"
+                }
+              }
+            }
+          }
+        }
+      },
+      "post": {
+        "tags": ["API Keys"],
+        "operationId": "createExternalApiKey",
+        "summary": "创建外部 API Key",
+        "description": "实际路径为 /api/profile/api-keys，明文 apiKey 只在本响应返回一次。",
+        "security": [
+          {
+            "UserAccessToken": []
+          }
+        ],
+        "requestBody": {
+          "required": false,
+          "content": {
+            "application/json": {
+              "schema": {
+                "$ref": "#/components/schemas/ExternalApiKeyCreateRequest"
+              }
+            }
+          }
+        },
+        "responses": {
+          "200": {
+            "description": "新建 API Key",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalApiKeyCreateResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
+    "/api/profile/api-keys/{keyId}": {
+      "delete": {
+        "tags": ["API Keys"],
+        "operationId": "revokeExternalApiKey",
+        "summary": "撤销外部 API Key",
+        "description": "实际路径为 /api/profile/api-keys/{keyId}，使用登录态 Bearer JWT。",
+        "security": [
+          {
+            "UserAccessToken": []
+          }
+        ],
+        "parameters": [
+          {
+            "name": "keyId",
+            "in": "path",
+            "required": true,
+            "schema": {
+              "type": "string"
+            }
+          }
+        ],
+        "responses": {
+          "200": {
+            "description": "已撤销 API Key",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ExternalApiKeyResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    }
+  },
+  "components": {
+    "securitySchemes": {
+      "ExternalApiKey": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "tnr_sk"
+      },
+      "UserAccessToken": {
+        "type": "http",
+        "scheme": "bearer",
+        "bearerFormat": "JWT"
+      }
+    },
+    "parameters": {
+      "ProjectId": {
+        "name": "projectId",
+        "in": "path",
+        "required": true,
+        "schema": {
+          "type": "string"
+        }
+      }
+    },
+    "responses": {
+      "BadRequest": {
+        "description": "请求参数不合法",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "Unauthorized": {
+        "description": "未授权访问",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "Forbidden": {
+        "description": "禁止访问",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "NotFound": {
+        "description": "资源不存在",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      },
+      "UpstreamError": {
+        "description": "上游生成服务失败",
+        "content": {
+          "application/json": {
+            "schema": {
+              "$ref": "#/components/schemas/ErrorResponse"
+            }
+          }
+        }
+      }
+    },
+    "schemas": {
+      "ExternalEditorProjectCreateRequest": {
+        "type": "object",
+        "properties": {
+          "title": {
+            "type": "string",
+            "maxLength": 80
+          }
+        },
+        "additionalProperties": false
+      },
+      "ExternalEditorCanvasSaveRequest": {
+        "type": "object",
+        "required": ["viewport", "layers"],
+        "properties": {
+          "viewport": {
+            "$ref": "#/components/schemas/EditorCanvasViewport"
+          },
+          "layers": {
+            "type": "object",
+            "description": "画布图层 JSON，最大约 256KB。"
+          }
+        },
+        "additionalProperties": false
+      },
+      "ExternalEditorImageGenerationRequest": {
+        "type": "object",
+        "required": ["prompt"],
+        "properties": {
+          "prompt": {
+            "type": "string",
+            "minLength": 1
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "title": {
+            "type": "string",
+            "description": "写入素材库时使用的素材名称。"
+          },
+          "size": {
+            "type": "string",
+            "enum": ["1024x1024", "1536x1024", "1024x1536", "2048x1152", "2048x2048"],
+            "default": "1024x1024"
+          },
+          "referenceImageSrcs": {
+            "type": "array",
+            "maxItems": 5,
+            "items": {
+              "type": "string",
+              "description": "图片 Data URL。"
+            }
+          },
+          "layers": {
+            "type": "object",
+            "description": "可选。带 projectId 时，生图完成后顺带保存画布图层 JSON。"
+          },
+          "viewport": {
+            "$ref": "#/components/schemas/EditorCanvasViewport"
+          }
+        },
+        "additionalProperties": false
+      },
+      "ExternalEditorProjectResponse": {
+        "type": "object",
+        "required": ["project"],
+        "properties": {
+          "project": {
+            "$ref": "#/components/schemas/EditorProject"
+          }
+        }
+      },
+      "ExternalEditorImageGenerationResponse": {
+        "type": "object",
+        "required": [
+          "imageSrc",
+          "width",
+          "height",
+          "prompt",
+          "model",
+          "provider",
+          "taskId",
+          "asset"
+        ],
+        "properties": {
+          "imageSrc": {
+            "type": "string",
+            "description": "生成图片 Data URL。"
+          },
+          "width": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "height": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "prompt": {
+            "type": "string"
+          },
+          "actualPrompt": {
+            "type": ["string", "null"]
+          },
+          "model": {
+            "type": "string"
+          },
+          "provider": {
+            "type": "string"
+          },
+          "taskId": {
+            "type": "string"
+          },
+          "asset": {
+            "$ref": "#/components/schemas/EditorAsset"
+          },
+          "resource": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/EditorProjectResource"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          },
+          "project": {
+            "anyOf": [
+              {
+                "$ref": "#/components/schemas/EditorProject"
+              },
+              {
+                "type": "null"
+              }
+            ]
+          }
+        }
+      },
+      "EditorProject": {
+        "type": "object",
+        "required": ["projectId", "title", "canvas", "viewport", "layers", "resources", "updatedAt"],
+        "properties": {
+          "projectId": {
+            "type": "string"
+          },
+          "title": {
+            "type": "string"
+          },
+          "canvas": {
+            "$ref": "#/components/schemas/EditorCanvas"
+          },
+          "viewport": {
+            "$ref": "#/components/schemas/EditorCanvasViewport"
+          },
+          "layers": {
+            "type": "object"
+          },
+          "resources": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/EditorProjectResource"
+            }
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "EditorCanvas": {
+        "type": "object",
+        "required": ["canvasId", "projectId", "title", "viewport", "layers", "createdAt", "updatedAt"],
+        "properties": {
+          "canvasId": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "title": {
+            "type": "string"
+          },
+          "viewport": {
+            "$ref": "#/components/schemas/EditorCanvasViewport"
+          },
+          "layers": {
+            "type": "object"
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "EditorCanvasViewport": {
+        "type": "object",
+        "required": ["x", "y", "scale"],
+        "properties": {
+          "x": {
+            "type": "number"
+          },
+          "y": {
+            "type": "number"
+          },
+          "scale": {
+            "type": "number",
+            "minimum": 0.01,
+            "maximum": 8
+          }
+        },
+        "additionalProperties": false
+      },
+      "EditorProjectResource": {
+        "type": "object",
+        "required": ["resourceId", "projectId", "imageSrc", "width", "height", "sourceType", "createdAt", "updatedAt"],
+        "properties": {
+          "resourceId": {
+            "type": "string"
+          },
+          "projectId": {
+            "type": "string"
+          },
+          "imageSrc": {
+            "type": "string"
+          },
+          "objectKey": {
+            "type": ["string", "null"]
+          },
+          "assetObjectId": {
+            "type": ["string", "null"]
+          },
+          "width": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "height": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "sourceType": {
+            "type": "string"
+          },
+          "prompt": {
+            "type": ["string", "null"]
+          },
+          "actualPrompt": {
+            "type": ["string", "null"]
+          },
+          "model": {
+            "type": ["string", "null"]
+          },
+          "provider": {
+            "type": ["string", "null"]
+          },
+          "taskId": {
+            "type": ["string", "null"]
+          },
+          "sourceResourceId": {
+            "type": ["string", "null"]
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "EditorAsset": {
+        "type": "object",
+        "required": ["assetId", "folderId", "label", "imageSrc", "width", "height", "sourceType", "createdAt", "updatedAt"],
+        "properties": {
+          "assetId": {
+            "type": "string"
+          },
+          "folderId": {
+            "type": "string"
+          },
+          "label": {
+            "type": "string"
+          },
+          "imageSrc": {
+            "type": "string"
+          },
+          "objectKey": {
+            "type": ["string", "null"]
+          },
+          "assetObjectId": {
+            "type": ["string", "null"]
+          },
+          "width": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "height": {
+            "type": "integer",
+            "minimum": 1
+          },
+          "sourceType": {
+            "type": "string"
+          },
+          "prompt": {
+            "type": ["string", "null"]
+          },
+          "actualPrompt": {
+            "type": ["string", "null"]
+          },
+          "model": {
+            "type": ["string", "null"]
+          },
+          "provider": {
+            "type": ["string", "null"]
+          },
+          "taskId": {
+            "type": ["string", "null"]
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "ExternalApiKeyCreateRequest": {
+        "type": "object",
+        "properties": {
+          "name": {
+            "type": "string",
+            "maxLength": 80
+          }
+        },
+        "additionalProperties": false
+      },
+      "ExternalApiKeyCreateResponse": {
+        "type": "object",
+        "required": ["apiKey", "key"],
+        "properties": {
+          "apiKey": {
+            "type": "string",
+            "description": "仅创建时返回一次。"
+          },
+          "key": {
+            "$ref": "#/components/schemas/ExternalApiKey"
+          }
+        }
+      },
+      "ExternalApiKeyListResponse": {
+        "type": "object",
+        "required": ["keys"],
+        "properties": {
+          "keys": {
+            "type": "array",
+            "items": {
+              "$ref": "#/components/schemas/ExternalApiKey"
+            }
+          }
+        }
+      },
+      "ExternalApiKeyResponse": {
+        "type": "object",
+        "required": ["key"],
+        "properties": {
+          "key": {
+            "$ref": "#/components/schemas/ExternalApiKey"
+          }
+        }
+      },
+      "ExternalApiKey": {
+        "type": "object",
+        "required": ["keyId", "name", "keyPrefix", "scopes", "createdAt", "updatedAt"],
+        "properties": {
+          "keyId": {
+            "type": "string"
+          },
+          "name": {
+            "type": "string"
+          },
+          "keyPrefix": {
+            "type": "string"
+          },
+          "scopes": {
+            "type": "array",
+            "items": {
+              "type": "string"
+            }
+          },
+          "createdAt": {
+            "type": "string",
+            "format": "date-time"
+          },
+          "lastUsedAt": {
+            "type": ["string", "null"],
+            "format": "date-time"
+          },
+          "revokedAt": {
+            "type": ["string", "null"],
+            "format": "date-time"
+          },
+          "updatedAt": {
+            "type": "string",
+            "format": "date-time"
+          }
+        }
+      },
+      "ErrorResponse": {
+        "type": "object",
+        "properties": {
+          "code": {
+            "type": "string"
+          },
+          "message": {
+            "type": "string"
+          },
+          "details": {
+            "type": ["object", "null"]
+          }
+        }
+      }
+    }
+  }
+}
diff --git a/docs/project-memory/shared-memory/decision-log.md b/docs/project-memory/shared-memory/decision-log.md
index 4b0f9e708..f30856498 100644
--- a/docs/project-memory/shared-memory/decision-log.md
+++ b/docs/project-memory/shared-memory/decision-log.md
@@ -16,6 +16,14 @@
 
 ---
 
+## 2026-06-19 外部 OpenAPI 与 API Key 管理走 server-rs 正式链路
+
+- 背景：外部调用方需要稳定调用图片画布项目创建、画布布局保存和编辑器美术生图能力，同时需要可撤销的开发者凭据，不能依赖前端临时状态或人工分发密钥。
+- 决策：外部 API 固定放在 `/api/external/v1` 命名空间，v1 暴露项目创建 / 读取、默认画布保存、编辑器美术生图和 `/api/external/v1/openapi.json`。API Key 管理走登录态 `/api/profile/api-keys`，外部调用使用 `Authorization: Bearer tnr_sk_xxx`；后端只保存 `key_hash` 和 `key_prefix`，明文只在创建响应返回一次。外部 API 鉴权、项目 / 画布 / 素材写回全部经 `api-server -> spacetime-client -> spacetime-module`，生成图片成功后同时写入账号级 `editor_asset`，带 `projectId` 时写入 `editor_project_resource`。
+- 影响范围：`server-rs/crates/api-server/src/external_*`、`server-rs/crates/api-server/src/modules/external_api.rs`、`server-rs/crates/spacetime-module/src/external_api_key_storage.rs`、`server-rs/crates/spacetime-client/src/external_api_key.rs`、`docs/openapi/genarrative-external-v1.openapi.json` 和后端数据契约文档。
+- 验证方式：`cargo test -p api-server external_api --manifest-path server-rs/Cargo.toml`、`cargo test -p api-server external_editor_api --manifest-path server-rs/Cargo.toml`、`cargo check -p api-server --manifest-path server-rs/Cargo.toml`、`npm run check:spacetime-schema`、`npm run check:encoding`、`git diff --check`。
+- 关联文档：`docs/【后端架构】外部OpenAPI与APIKey接入方案-2026-06-19.md`。
+
 ## 2026-06-19 图片画布生成按钮价格统一绑定模型定价配置
 
 - 背景：图片画布的生成图片、生成视频、生成规范、生成角色、生成素材、生成 UI、宣发素材、快速编辑、重绘和音频生成入口都在按钮内显示泥点；如果按钮文案、前端提交和后端校验各自写固定数值，后续调整模型价格会出现展示价、提交价和扣费价不一致。
diff --git a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
index 6d6df13ec..553c2f3bd 100644
--- a/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
+++ b/docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md
@@ -429,6 +429,13 @@ npm run check:server-rs-ddd
 - Rust 结构体：`DatabaseMigrationOperator`
 - 源码：`server-rs/crates/spacetime-module/src/migration.rs`
 
+### `external_api_key`
+
+- Rust 结构体：`ExternalApiKey`
+- 源码：`server-rs/crates/spacetime-module/src/external_api_key_storage.rs`
+- 说明：外部 OpenAPI 调用使用的账号级 API Key 凭据表，只保存 key prefix、SHA-256 hash、作用域、撤销状态和使用时间；明文 Key 只在 `/api/profile/api-keys` 创建接口返回一次，不进入 SpacetimeDB。
+- 索引：`by_external_api_key_owner_user_id` 用于登录态 API Key 列表；`key_hash` 唯一索引用于外部 API 鉴权。
+
 ### `editor_project`
 
 - Rust 结构体：`EditorProject`
diff --git a/docs/【后端架构】外部OpenAPI与APIKey接入方案-2026-06-19.md b/docs/【后端架构】外部OpenAPI与APIKey接入方案-2026-06-19.md
new file mode 100644
index 000000000..34a4b8daf
--- /dev/null
+++ b/docs/【后端架构】外部OpenAPI与APIKey接入方案-2026-06-19.md
@@ -0,0 +1,101 @@
+# 外部 OpenAPI 与 API Key 接入方案
+
+## 背景
+
+外部调用方需要通过稳定 HTTP 契约使用图片画布编辑器内的美术生图能力，并能创建项目、保存画板布局。该能力必须走 `server-rs + Axum + SpacetimeDB` 正式链路，不能把 API Key、画板状态或生成结果放到前端临时状态中。
+
+## v1 范围
+
+本期新增外部 API 命名空间：
+
+```text
+/api/external/v1
+```
+
+v1 只开放以下能力：
+
+- `POST /api/external/v1/editor/projects`：创建图片画布项目。
+- `GET /api/external/v1/editor/projects/{projectId}`：读取项目与默认画布。
+- `PATCH /api/external/v1/editor/projects/{projectId}/canvas`：保存默认画布的 viewport 和 layers。
+- `POST /api/external/v1/editor/images/generations`：调用编辑器美术生图能力；可选传入 `projectId`，生成后自动写入 `editor_project_resource`，同时写入账号级 `editor_asset` 素材库。
+- `GET /api/external/v1/openapi.json`：导出本版本 OpenAPI 3.1 JSON。
+
+管理 API Key 的登录态接口：
+
+```text
+GET    /api/profile/api-keys
+POST   /api/profile/api-keys
+DELETE /api/profile/api-keys/{keyId}
+```
+
+前端入口位于登录后个人中心的 `我的 → 开发者 API Key`，用于查看当前 Key、创建新 Key、复制一次性明文和撤销已创建 Key。
+
+## 鉴权
+
+外部调用使用 Bearer API Key：
+
+```http
+Authorization: Bearer tnr_sk_xxx
+```
+
+规则：
+
+- API Key 归属于 `owner_user_id`，外部接口只能访问该账号自己的项目、画布和生成素材。
+- 明文 Key 只在创建接口返回一次，后端只保存 `key_hash` 与 `key_prefix`。
+- API Key 被撤销后立即不可再用于外部接口。
+- 外部 API 鉴权不复用登录态 JWT，不检查 refresh session；它是独立开发者凭据。
+- OpenAPI JSON 公共可读，不需要鉴权。
+
+## 数据模型
+
+新增 SpacetimeDB private 表：
+
+```text
+external_api_key
+```
+
+字段：
+
+- `key_id`：主键。
+- `owner_user_id`：所属账号。
+- `name`：用户可识别名称。
+- `key_prefix`：前缀片段，用于列表展示和排障。
+- `key_hash`：完整 Key 的 SHA-256 十六进制摘要，唯一。
+- `scopes_json`：作用域 JSON，v1 固定包含 `editor:project`、`editor:canvas`、`editor:image-generate`。
+- `created_at` / `last_used_at` / `revoked_at` / `updated_at`。
+
+SpacetimeDB procedure：
+
+- `create_external_api_key_and_return`
+- `list_external_api_keys_and_return`
+- `revoke_external_api_key_and_return`
+- `authenticate_external_api_key_and_return`
+
+## 生成图落库
+
+外部生图接口复用编辑器内 `VectorEngine` / `gpt-image-2` 生成链路，后端拿到图片后：
+
+1. 通过 OSS / asset object adapter 持久化图片。
+2. 写入 `editor_asset`，让生成图进入账号级素材库。
+3. 如果请求带 `projectId`，写入 `editor_project_resource`。
+4. 返回图片读取地址、素材 ID、资源 ID、尺寸、prompt、model、provider 和 taskId。
+
+如果请求未带 `projectId`，只生成并写入素材库；调用方可随后创建项目或自行保存画板布局。
+
+## OpenAPI 导出
+
+OpenAPI 3.1 JSON 固定落在：
+
+```text
+docs/openapi/genarrative-external-v1.openapi.json
+```
+
+服务端 `GET /api/external/v1/openapi.json` 使用同一份 JSON，通过 `include_str!` 导出，避免运行时生成结果与仓库文档漂移。
+
+## 验收
+
+- API Key 创建只返回一次明文，列表不返回明文。
+- 撤销后的 API Key 调用外部接口返回 `401`。
+- 外部生图成功后，生成结果同时出现在画布资源和账号级素材库。
+- OpenAPI JSON 能被 `serde_json` 解析，且 security scheme 为 Bearer API Key。
+- 修改 SpacetimeDB schema 后运行 `npm run spacetime:generate` 与 `npm run check:spacetime-schema`。
diff --git a/packages/shared/src/contracts/runtime.ts b/packages/shared/src/contracts/runtime.ts
index b0d5c74ca..3e76215b4 100644
--- a/packages/shared/src/contracts/runtime.ts
+++ b/packages/shared/src/contracts/runtime.ts
@@ -75,6 +75,30 @@ export type ProfileWalletLedgerResponse = {
   entries: ProfileWalletLedgerEntry[];
 };
 
+export type ExternalApiKeyProfile = {
+  keyId: string;
+  name: string;
+  keyPrefix: string;
+  scopes: string[];
+  createdAt: string;
+  lastUsedAt: string | null;
+  revokedAt: string | null;
+  updatedAt: string;
+};
+
+export type ExternalApiKeyListResponse = {
+  keys: ExternalApiKeyProfile[];
+};
+
+export type ExternalApiKeyCreateResponse = {
+  apiKey: string;
+  key: ExternalApiKeyProfile;
+};
+
+export type ExternalApiKeyMutationResponse = {
+  key: ExternalApiKeyProfile;
+};
+
 export type ProfileRechargeProductKind = 'points' | 'membership';
 export type ProfileMembershipStatus = 'normal' | 'active';
 export type ProfileMembershipTier = 'normal' | 'month' | 'season' | 'year';
diff --git a/server-rs/crates/api-server/src/app.rs b/server-rs/crates/api-server/src/app.rs
index b4a404abb..e4fa80070 100644
--- a/server-rs/crates/api-server/src/app.rs
+++ b/server-rs/crates/api-server/src/app.rs
@@ -42,6 +42,7 @@ pub fn build_router(state: AppState) -> Router {
         .merge(modules::internal::router(state.clone()))
         .merge(modules::auth::router(state.clone()))
         .merge(modules::profile::router(state.clone()))
+        .merge(modules::external_api::router(state.clone()))
         .merge(modules::assets::router(state.clone()))
         .merge(modules::editor_project::router(state.clone()))
         .merge(modules::platform::router(state.clone()))
diff --git a/server-rs/crates/api-server/src/editor_project.rs b/server-rs/crates/api-server/src/editor_project.rs
index 37a5a06c6..e0d8eed19 100644
--- a/server-rs/crates/api-server/src/editor_project.rs
+++ b/server-rs/crates/api-server/src/editor_project.rs
@@ -54,12 +54,12 @@ use crate::{
     state::AppState,
 };
 
-const EDITOR_PROJECT_ID_PREFIX: &str = "editor-project-";
-const EDITOR_RESOURCE_ID_PREFIX: &str = "editor-resource-";
+pub(crate) const EDITOR_PROJECT_ID_PREFIX: &str = "editor-project-";
+pub(crate) const EDITOR_RESOURCE_ID_PREFIX: &str = "editor-resource-";
 const EDITOR_ASSET_FOLDER_ID_PREFIX: &str = "editor-asset-folder-";
-const EDITOR_ASSET_ID_PREFIX: &str = "editor-asset-";
+pub(crate) const EDITOR_ASSET_ID_PREFIX: &str = "editor-asset-";
 const EDITOR_LAYOUT_MAX_BYTES: usize = 256 * 1024;
-const EDITOR_PROJECT_DEFAULT_TITLE: &str = "未命名画布";
+pub(crate) const EDITOR_PROJECT_DEFAULT_TITLE: &str = "未命名画布";
 const EDITOR_IMAGE_GENERATION_SIZE: &str = "1024x1024";
 const EDITOR_IMAGE_MODEL_NANOBANANA2: &str = "gemini-3.1-flash-image-preview";
 const EDITOR_IMAGE_MODEL_NANOBANANA2_DISPLAY_ALIAS: &str = "nanobanana2";
@@ -88,8 +88,8 @@ pub struct EditorCanvasViewportPayload {
 #[derive(Debug, Deserialize)]
 #[serde(rename_all = "camelCase")]
 pub struct EditorProjectLayoutSaveRequest {
-    viewport: EditorCanvasViewportPayload,
-    layers: Value,
+    pub(crate) viewport: EditorCanvasViewportPayload,
+    pub(crate) layers: Value,
 }
 
 #[derive(Debug, Deserialize)]
@@ -932,13 +932,16 @@ pub async fn generate_editor_image(
         .unwrap_or((1024, 1024));
     let persisted = if is_character_generation {
         Some(
-            persist_editor_character_image(
+            persist_editor_generated_image(
                 &state,
                 authenticated.claims().user_id(),
                 generated.task_id.as_str(),
                 &image,
                 submitted_prompt.as_str(),
                 generated.actual_prompt.as_deref(),
+                EDITOR_CHARACTER_IMAGE_ASSET_KIND,
+                "character-images",
+                EDITOR_CHARACTER_IMAGE_SLOT,
             )
             .await?,
         )
@@ -1345,7 +1348,9 @@ pub async fn extract_editor_ui_design_assets(
     ))
 }
 
-fn editor_project_payload_from_record(record: EditorProjectRecord) -> EditorProjectPayload {
+pub(crate) fn editor_project_payload_from_record(
+    record: EditorProjectRecord,
+) -> EditorProjectPayload {
     let canvas = editor_canvas_payload_from_record(record.canvas);
     EditorProjectPayload {
         project_id: record.project_id,
@@ -1382,7 +1387,7 @@ fn editor_canvas_payload_from_record(record: EditorCanvasRecord) -> EditorCanvas
     }
 }
 
-fn editor_project_resource_payload_from_record(
+pub(crate) fn editor_project_resource_payload_from_record(
     record: EditorProjectResourceRecord,
 ) -> EditorProjectResourcePayload {
     EditorProjectResourcePayload {
@@ -1436,7 +1441,7 @@ fn editor_asset_folder_payload_from_record(
     }
 }
 
-fn editor_asset_payload_from_record(record: EditorAssetRecord) -> EditorAssetPayload {
+pub(crate) fn editor_asset_payload_from_record(record: EditorAssetRecord) -> EditorAssetPayload {
     EditorAssetPayload {
         asset_id: record.asset_id,
         folder_id: record.folder_id,
@@ -1458,7 +1463,7 @@ fn editor_asset_payload_from_record(record: EditorAssetRecord) -> EditorAssetPay
 }
 
 impl EditorCanvasViewportPayload {
-    fn into_record(self) -> EditorCanvasViewportRecord {
+    pub(crate) fn into_record(self) -> EditorCanvasViewportRecord {
         EditorCanvasViewportRecord {
             x: self.x,
             y: self.y,
@@ -1471,7 +1476,7 @@ fn current_owner_user_id(authenticated: &AuthenticatedAccessToken) -> String {
     authenticated.claims().user_id().to_string()
 }
 
-fn serialize_editor_layers(layers: Value) -> Result<String, AppError> {
+pub(crate) fn serialize_editor_layers(layers: Value) -> Result<String, AppError> {
     let payload = serde_json::to_string(&layers).map_err(|error| {
         AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
             "provider": "editor-project",
@@ -1489,13 +1494,13 @@ fn serialize_editor_layers(layers: Value) -> Result<String, AppError> {
     Ok(payload)
 }
 
-fn normalize_optional_string(value: Option<String>) -> Option<String> {
+pub(crate) fn normalize_optional_string(value: Option<String>) -> Option<String> {
     value
         .map(|item| item.trim().to_string())
         .filter(|item| !item.is_empty())
 }
 
-fn sanitize_editor_storage_segment(value: &str, fallback: &str) -> String {
+pub(crate) fn sanitize_editor_storage_segment(value: &str, fallback: &str) -> String {
     let normalized = value
         .trim()
         .chars()
@@ -1620,7 +1625,7 @@ fn prepare_editor_character_image_for_response(
     }
 }
 
-fn data_url_from_image_bytes(mime_type: &str, bytes: &[u8]) -> String {
+pub(crate) fn data_url_from_image_bytes(mime_type: &str, bytes: &[u8]) -> String {
     format!(
         "data:{};base64,{}",
         mime_type,
@@ -1648,18 +1653,21 @@ struct EditorGenerationOptions {
     provider_image_size: &'static str,
 }
 
-struct PersistedEditorGeneratedImage {
-    object_key: String,
-    asset_object_id: String,
+pub(crate) struct PersistedEditorGeneratedImage {
+    pub(crate) object_key: String,
+    pub(crate) asset_object_id: String,
 }
 
-async fn persist_editor_character_image(
+pub(crate) async fn persist_editor_generated_image(
     state: &AppState,
     owner_user_id: &str,
     task_id: &str,
     image: &DownloadedOpenAiImage,
     prompt: &str,
     actual_prompt: Option<&str>,
+    asset_kind: &str,
+    path_kind: &str,
+    slot: &str,
 ) -> Result<PersistedEditorGeneratedImage, AppError> {
     let oss_client = state.oss_client().ok_or_else(|| {
         AppError::from_status(StatusCode::SERVICE_UNAVAILABLE).with_details(json!({
@@ -1672,7 +1680,7 @@ async fn persist_editor_character_image(
             prefix: LegacyAssetPrefix::CharacterDrafts,
             path_segments: vec![
                 "editor".to_string(),
-                "character-images".to_string(),
+                sanitize_editor_storage_segment(path_kind, "generated-images"),
                 sanitize_editor_storage_segment(task_id, "task"),
             ],
             file_stem: "image".to_string(),
@@ -1682,11 +1690,11 @@ async fn persist_editor_character_image(
             },
             access: OssObjectAccess::Private,
             metadata: GeneratedImageAssetAdapterMetadata {
-                asset_kind: Some(EDITOR_CHARACTER_IMAGE_ASSET_KIND.to_string()),
+                asset_kind: Some(asset_kind.to_string()),
                 owner_user_id: Some(owner_user_id.to_string()),
                 entity_kind: Some(EDITOR_CHARACTER_IMAGE_ENTITY_KIND.to_string()),
                 entity_id: Some(task_id.to_string()),
-                slot: Some(EDITOR_CHARACTER_IMAGE_SLOT.to_string()),
+                slot: Some(slot.to_string()),
                 provider: Some("vector-engine".to_string()),
                 task_id: Some(task_id.to_string()),
             },
@@ -1728,7 +1736,7 @@ async fn persist_editor_character_image(
                 head.content_type.or(Some(persisted_mime_type)),
                 head.content_length,
                 Some(actual_prompt.unwrap_or(prompt).to_string()),
-                EDITOR_CHARACTER_IMAGE_ASSET_KIND.to_string(),
+                asset_kind.to_string(),
                 Some(task_id.to_string()),
                 Some(owner_user_id.to_string()),
                 None,
@@ -1751,7 +1759,7 @@ async fn persist_editor_character_image(
     })
 }
 
-fn parse_editor_reference_image(source: &str) -> Result<OpenAiReferenceImage, AppError> {
+pub(crate) fn parse_editor_reference_image(source: &str) -> Result<OpenAiReferenceImage, AppError> {
     let Some((header, data)) = source.trim().split_once(',') else {
         return Err(
             AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
@@ -1803,7 +1811,7 @@ fn parse_editor_reference_image(source: &str) -> Result<OpenAiReferenceImage, Ap
     })
 }
 
-fn map_editor_project_error(error: SpacetimeClientError) -> AppError {
+pub(crate) fn map_editor_project_error(error: SpacetimeClientError) -> AppError {
     match error {
         SpacetimeClientError::Procedure(message) if message.contains("无权") => {
             AppError::from_status(StatusCode::FORBIDDEN).with_details(json!({
@@ -1829,14 +1837,14 @@ fn map_editor_project_error(error: SpacetimeClientError) -> AppError {
     }
 }
 
-fn map_editor_asset_field_error(error: AssetObjectFieldError) -> AppError {
+pub(crate) fn map_editor_asset_field_error(error: AssetObjectFieldError) -> AppError {
     AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
         "provider": "asset-object",
         "message": error.to_string(),
     }))
 }
 
-fn current_utc_micros() -> i64 {
+pub(crate) fn current_utc_micros() -> i64 {
     use std::time::{SystemTime, UNIX_EPOCH};
 
     let duration = SystemTime::now()
diff --git a/server-rs/crates/api-server/src/external_api_auth.rs b/server-rs/crates/api-server/src/external_api_auth.rs
new file mode 100644
index 000000000..e7ee85b29
--- /dev/null
+++ b/server-rs/crates/api-server/src/external_api_auth.rs
@@ -0,0 +1,91 @@
+use axum::{
+    extract::{Request, State},
+    http::{HeaderMap, StatusCode, header::AUTHORIZATION},
+    middleware::Next,
+    response::Response,
+};
+use spacetime_client::ExternalApiKeyAuthenticateRecordInput;
+use tracing::warn;
+
+use crate::{
+    editor_project::current_utc_micros,
+    external_api_keys::{hash_external_api_key, map_external_api_key_error},
+    http_error::AppError,
+    request_context::RequestContext,
+    state::AppState,
+};
+
+#[derive(Clone, Debug)]
+pub struct ExternalApiPrincipal {
+    owner_user_id: String,
+    key_id: String,
+    scopes: Vec<String>,
+}
+
+impl ExternalApiPrincipal {
+    pub fn owner_user_id(&self) -> &str {
+        self.owner_user_id.as_str()
+    }
+
+    pub fn key_id(&self) -> &str {
+        self.key_id.as_str()
+    }
+
+    pub fn has_scope(&self, scope: &str) -> bool {
+        self.scopes.iter().any(|item| item == scope)
+    }
+}
+
+pub async fn require_external_api_key(
+    State(state): State<AppState>,
+    mut request: Request,
+    next: Next,
+) -> Result<Response, AppError> {
+    let request_id = request
+        .extensions()
+        .get::<RequestContext>()
+        .map(|context| context.request_id().to_string())
+        .unwrap_or_else(|| "unknown".to_string());
+    let raw_key = extract_external_api_bearer(request.headers())?;
+    let key = state
+        .spacetime_client()
+        .authenticate_external_api_key(ExternalApiKeyAuthenticateRecordInput {
+            key_hash: hash_external_api_key(raw_key.as_str()),
+            used_at_micros: current_utc_micros(),
+        })
+        .await
+        .map_err(|error| {
+            warn!(
+                %request_id,
+                error = %error,
+                "外部 API Key 校验失败"
+            );
+            map_external_api_key_error(error)
+        })?;
+    let principal = ExternalApiPrincipal {
+        owner_user_id: key.owner_user_id,
+        key_id: key.key_id,
+        scopes: key.scopes,
+    };
+    request.extensions_mut().insert(principal.clone());
+
+    let mut response = next.run(request).await;
+    response.extensions_mut().insert(principal);
+    Ok(response)
+}
+
+fn extract_external_api_bearer(headers: &HeaderMap) -> Result<String, AppError> {
+    let authorization = headers
+        .get(AUTHORIZATION)
+        .and_then(|value| value.to_str().ok())
+        .map(str::trim)
+        .ok_or_else(|| AppError::from_status(StatusCode::UNAUTHORIZED))?;
+
+    authorization
+        .strip_prefix("Bearer ")
+        .or_else(|| authorization.strip_prefix("bearer "))
+        .map(str::trim)
+        .filter(|token| !token.is_empty())
+        .map(ToOwned::to_owned)
+        .ok_or_else(|| AppError::from_status(StatusCode::UNAUTHORIZED))
+}
diff --git a/server-rs/crates/api-server/src/external_api_keys.rs b/server-rs/crates/api-server/src/external_api_keys.rs
new file mode 100644
index 000000000..8b9c99ebf
--- /dev/null
+++ b/server-rs/crates/api-server/src/external_api_keys.rs
@@ -0,0 +1,243 @@
+use axum::{
+    Json,
+    extract::{Extension, Path, State},
+    http::StatusCode,
+};
+use platform_auth::hash_refresh_session_token;
+use serde::{Deserialize, Serialize};
+use serde_json::{Value, json};
+use shared_kernel::{build_prefixed_uuid_id, new_uuid_simple_string};
+use spacetime_client::{
+    ExternalApiKeyCreateRecordInput, ExternalApiKeyRecord, ExternalApiKeyRevokeRecordInput,
+    SpacetimeClientError,
+};
+
+use crate::{
+    api_response::json_success_body, auth::AuthenticatedAccessToken,
+    editor_project::current_utc_micros, http_error::AppError, request_context::RequestContext,
+    state::AppState,
+};
+
+const EXTERNAL_API_KEY_ID_PREFIX: &str = "external-api-key-";
+const EXTERNAL_API_KEY_SECRET_PREFIX: &str = "tnr_sk_";
+const EXTERNAL_API_KEY_PREFIX_VISIBLE_CHARS: usize = 18;
+const EXTERNAL_API_KEY_SCOPES: [&str; 3] =
+    ["editor:project", "editor:canvas", "editor:image-generate"];
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalApiKeyCreateRequest {
+    name: Option<String>,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalApiKeyPayload {
+    key_id: String,
+    name: String,
+    key_prefix: String,
+    scopes: Vec<String>,
+    created_at: String,
+    last_used_at: Option<String>,
+    revoked_at: Option<String>,
+    updated_at: String,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalApiKeyCreateResponse {
+    api_key: String,
+    key: ExternalApiKeyPayload,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalApiKeyListResponse {
+    keys: Vec<ExternalApiKeyPayload>,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalApiKeyResponse {
+    key: ExternalApiKeyPayload,
+}
+
+pub async fn list_external_api_keys(
+    State(state): State<AppState>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(authenticated): Extension<AuthenticatedAccessToken>,
+) -> Result<Json<Value>, AppError> {
+    let keys = state
+        .spacetime_client()
+        .list_external_api_keys(authenticated.claims().user_id().to_string())
+        .await
+        .map_err(map_external_api_key_error)?
+        .into_iter()
+        .map(external_api_key_payload_from_record)
+        .collect();
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalApiKeyListResponse { keys },
+    ))
+}
+
+pub async fn create_external_api_key(
+    State(state): State<AppState>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(authenticated): Extension<AuthenticatedAccessToken>,
+    Json(payload): Json<ExternalApiKeyCreateRequest>,
+) -> Result<Json<Value>, AppError> {
+    let raw_key = generate_external_api_key_secret();
+    let key_prefix = external_api_key_prefix(raw_key.as_str());
+    let key = state
+        .spacetime_client()
+        .create_external_api_key(ExternalApiKeyCreateRecordInput {
+            key_id: build_prefixed_uuid_id(EXTERNAL_API_KEY_ID_PREFIX),
+            owner_user_id: authenticated.claims().user_id().to_string(),
+            name: payload
+                .name
+                .map(|value| value.trim().to_string())
+                .filter(|value| !value.is_empty())
+                .unwrap_or_else(|| "外部 API Key".to_string()),
+            key_prefix,
+            key_hash: hash_external_api_key(raw_key.as_str()),
+            scopes: default_external_api_key_scopes(),
+            now_micros: current_utc_micros(),
+        })
+        .await
+        .map_err(map_external_api_key_error)?;
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalApiKeyCreateResponse {
+            api_key: raw_key,
+            key: external_api_key_payload_from_record(key),
+        },
+    ))
+}
+
+pub async fn revoke_external_api_key(
+    State(state): State<AppState>,
+    Path(key_id): Path<String>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(authenticated): Extension<AuthenticatedAccessToken>,
+) -> Result<Json<Value>, AppError> {
+    let key = state
+        .spacetime_client()
+        .revoke_external_api_key(ExternalApiKeyRevokeRecordInput {
+            key_id,
+            owner_user_id: authenticated.claims().user_id().to_string(),
+            revoked_at_micros: current_utc_micros(),
+        })
+        .await
+        .map_err(map_external_api_key_error)?;
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalApiKeyResponse {
+            key: external_api_key_payload_from_record(key),
+        },
+    ))
+}
+
+pub(crate) fn hash_external_api_key(raw_key: &str) -> String {
+    hash_refresh_session_token(raw_key)
+}
+
+pub(crate) fn default_external_api_key_scopes() -> Vec<String> {
+    EXTERNAL_API_KEY_SCOPES
+        .iter()
+        .map(|scope| (*scope).to_string())
+        .collect()
+}
+
+fn generate_external_api_key_secret() -> String {
+    format!(
+        "{EXTERNAL_API_KEY_SECRET_PREFIX}{}.{}",
+        new_uuid_simple_string(),
+        new_uuid_simple_string()
+    )
+}
+
+fn external_api_key_prefix(raw_key: &str) -> String {
+    raw_key
+        .chars()
+        .take(EXTERNAL_API_KEY_PREFIX_VISIBLE_CHARS)
+        .collect()
+}
+
+fn external_api_key_payload_from_record(record: ExternalApiKeyRecord) -> ExternalApiKeyPayload {
+    ExternalApiKeyPayload {
+        key_id: record.key_id,
+        name: record.name,
+        key_prefix: record.key_prefix,
+        scopes: record.scopes,
+        created_at: record.created_at,
+        last_used_at: record.last_used_at,
+        revoked_at: record.revoked_at,
+        updated_at: record.updated_at,
+    }
+}
+
+pub(crate) fn map_external_api_key_error(error: SpacetimeClientError) -> AppError {
+    match error {
+        SpacetimeClientError::Procedure(message)
+            if message.contains("不存在") || message.contains("已失效") =>
+        {
+            AppError::from_status(StatusCode::UNAUTHORIZED).with_details(json!({
+                "provider": "external-api-key",
+                "message": message,
+            }))
+        }
+        SpacetimeClientError::Procedure(message) if message.contains("无权") => {
+            AppError::from_status(StatusCode::FORBIDDEN).with_details(json!({
+                "provider": "external-api-key",
+                "message": message,
+            }))
+        }
+        SpacetimeClientError::Runtime(message) | SpacetimeClientError::Procedure(message) => {
+            AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
+                "provider": "external-api-key",
+                "message": message,
+            }))
+        }
+        other => AppError::from_status(StatusCode::BAD_GATEWAY).with_details(json!({
+            "provider": "spacetimedb",
+            "message": other.to_string(),
+        })),
+    }
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn generated_external_api_key_uses_public_prefix_only_for_display() {
+        let raw_key = generate_external_api_key_secret();
+        let key_prefix = external_api_key_prefix(raw_key.as_str());
+
+        assert!(raw_key.starts_with(EXTERNAL_API_KEY_SECRET_PREFIX));
+        assert_eq!(
+            key_prefix.chars().count(),
+            EXTERNAL_API_KEY_PREFIX_VISIBLE_CHARS
+        );
+        assert!(raw_key.starts_with(key_prefix.as_str()));
+        assert_ne!(hash_external_api_key(raw_key.as_str()), raw_key);
+    }
+
+    #[test]
+    fn default_external_api_key_scopes_cover_editor_openapi_v1() {
+        let scopes = default_external_api_key_scopes();
+
+        assert_eq!(
+            scopes,
+            vec![
+                "editor:project".to_string(),
+                "editor:canvas".to_string(),
+                "editor:image-generate".to_string(),
+            ]
+        );
+    }
+}
diff --git a/server-rs/crates/api-server/src/external_editor_api.rs b/server-rs/crates/api-server/src/external_editor_api.rs
new file mode 100644
index 000000000..e47f36dcc
--- /dev/null
+++ b/server-rs/crates/api-server/src/external_editor_api.rs
@@ -0,0 +1,439 @@
+use axum::{
+    Json,
+    extract::{Extension, Path, State},
+    http::{StatusCode, header::CONTENT_TYPE},
+    response::{IntoResponse, Response},
+};
+use serde::{Deserialize, Serialize};
+use serde_json::{Value, json};
+use shared_kernel::build_prefixed_uuid_id;
+use spacetime_client::{
+    EditorAssetCreateRecordInput, EditorProjectCreateRecordInput, EditorProjectGetRecordInput,
+    EditorProjectLayoutSaveRecordInput, EditorProjectResourceCreateRecordInput,
+};
+
+use crate::{
+    api_response::json_success_body,
+    editor_project::{
+        EDITOR_ASSET_ID_PREFIX, EDITOR_PROJECT_DEFAULT_TITLE, EDITOR_PROJECT_ID_PREFIX,
+        EDITOR_RESOURCE_ID_PREFIX, EditorAssetPayload, EditorCanvasViewportPayload,
+        EditorProjectPayload, EditorProjectResourcePayload, current_utc_micros,
+        data_url_from_image_bytes, editor_asset_payload_from_record,
+        editor_project_payload_from_record, editor_project_resource_payload_from_record,
+        map_editor_project_error, normalize_optional_string, persist_editor_generated_image,
+        serialize_editor_layers,
+    },
+    external_api_auth::ExternalApiPrincipal,
+    http_error::AppError,
+    openai_image_generation::{
+        GPT_IMAGE_2_MODEL, build_openai_image_http_client,
+        create_openai_image_edit_with_references_and_model,
+        create_openai_image_generation_with_model, require_openai_image_settings,
+    },
+    request_context::RequestContext,
+    state::AppState,
+};
+
+const EXTERNAL_EDITOR_PROVIDER: &str = "external-editor-api";
+const EXTERNAL_EDITOR_IMAGE_ASSET_KIND: &str = "editor_external_image";
+const EXTERNAL_EDITOR_IMAGE_SLOT: &str = "external-image";
+const EXTERNAL_EDITOR_IMAGE_SOURCE_TYPE: &str = "generated";
+const EXTERNAL_EDITOR_IMAGE_PROVIDER: &str = "VectorEngine";
+const EXTERNAL_EDITOR_IMAGE_DEFAULT_SIZE: &str = "1024x1024";
+const SCOPE_EDITOR_PROJECT: &str = "editor:project";
+const SCOPE_EDITOR_CANVAS: &str = "editor:canvas";
+const SCOPE_EDITOR_IMAGE_GENERATE: &str = "editor:image-generate";
+const OPENAPI_JSON: &str =
+    include_str!("../../../../docs/openapi/genarrative-external-v1.openapi.json");
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalEditorProjectCreateRequest {
+    title: Option<String>,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalEditorCanvasSaveRequest {
+    viewport: EditorCanvasViewportPayload,
+    layers: Value,
+}
+
+#[derive(Debug, Deserialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalEditorImageGenerationRequest {
+    prompt: String,
+    project_id: Option<String>,
+    title: Option<String>,
+    size: Option<String>,
+    reference_image_srcs: Option<Vec<String>>,
+    layers: Option<Value>,
+    viewport: Option<EditorCanvasViewportPayload>,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalEditorProjectResponse {
+    project: EditorProjectPayload,
+}
+
+#[derive(Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub struct ExternalEditorImageGenerationResponse {
+    image_src: String,
+    width: u32,
+    height: u32,
+    prompt: String,
+    actual_prompt: Option<String>,
+    model: String,
+    provider: &'static str,
+    task_id: String,
+    asset: EditorAssetPayload,
+    resource: Option<EditorProjectResourcePayload>,
+    project: Option<EditorProjectPayload>,
+}
+
+pub async fn openapi_json() -> Response {
+    (
+        [(CONTENT_TYPE, "application/json; charset=utf-8")],
+        OPENAPI_JSON,
+    )
+        .into_response()
+}
+
+pub async fn create_external_editor_project(
+    State(state): State<AppState>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(principal): Extension<ExternalApiPrincipal>,
+    Json(payload): Json<ExternalEditorProjectCreateRequest>,
+) -> Result<Json<Value>, AppError> {
+    require_scope(&principal, SCOPE_EDITOR_PROJECT)?;
+    let project = state
+        .spacetime_client()
+        .create_editor_project(EditorProjectCreateRecordInput {
+            project_id: build_prefixed_uuid_id(EDITOR_PROJECT_ID_PREFIX),
+            owner_user_id: principal.owner_user_id().to_string(),
+            title: normalize_project_title(payload.title),
+            now_micros: current_utc_micros(),
+        })
+        .await
+        .map_err(map_editor_project_error)?;
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalEditorProjectResponse {
+            project: editor_project_payload_from_record(project),
+        },
+    ))
+}
+
+pub async fn get_external_editor_project(
+    State(state): State<AppState>,
+    Path(project_id): Path<String>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(principal): Extension<ExternalApiPrincipal>,
+) -> Result<Json<Value>, AppError> {
+    require_scope(&principal, SCOPE_EDITOR_PROJECT)?;
+    let project = state
+        .spacetime_client()
+        .get_editor_project(EditorProjectGetRecordInput {
+            project_id,
+            owner_user_id: principal.owner_user_id().to_string(),
+        })
+        .await
+        .map_err(map_editor_project_error)?;
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalEditorProjectResponse {
+            project: editor_project_payload_from_record(project),
+        },
+    ))
+}
+
+pub async fn save_external_editor_canvas(
+    State(state): State<AppState>,
+    Path(project_id): Path<String>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(principal): Extension<ExternalApiPrincipal>,
+    Json(payload): Json<ExternalEditorCanvasSaveRequest>,
+) -> Result<Json<Value>, AppError> {
+    require_scope(&principal, SCOPE_EDITOR_CANVAS)?;
+    let project = state
+        .spacetime_client()
+        .save_editor_project_layout(EditorProjectLayoutSaveRecordInput {
+            project_id,
+            owner_user_id: principal.owner_user_id().to_string(),
+            viewport: payload.viewport.into_record(),
+            layers_json: serialize_editor_layers(payload.layers)?,
+            updated_at_micros: current_utc_micros(),
+        })
+        .await
+        .map_err(map_editor_project_error)?;
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalEditorProjectResponse {
+            project: editor_project_payload_from_record(project),
+        },
+    ))
+}
+
+pub async fn generate_external_editor_image(
+    State(state): State<AppState>,
+    Extension(request_context): Extension<RequestContext>,
+    Extension(principal): Extension<ExternalApiPrincipal>,
+    Json(payload): Json<ExternalEditorImageGenerationRequest>,
+) -> Result<Json<Value>, AppError> {
+    require_scope(&principal, SCOPE_EDITOR_IMAGE_GENERATE)?;
+    let prompt = payload.prompt.trim().to_string();
+    if prompt.is_empty() {
+        return Err(
+            AppError::from_status(StatusCode::BAD_REQUEST).with_details(json!({
+                "provider": EXTERNAL_EDITOR_PROVIDER,
+                "message": "生成提示词不能为空",
+            })),
+        );
+    }
+    let project_id = normalize_optional_string(payload.project_id);
+    let asset_title = normalize_asset_title(payload.title.as_deref(), prompt.as_str());
+    let size = normalize_external_image_size(payload.size.as_deref());
+    let reference_images = payload
+        .reference_image_srcs
+        .unwrap_or_default()
+        .into_iter()
+        .filter_map(|source| {
+            let trimmed = source.trim().to_string();
+            (!trimmed.is_empty()).then_some(trimmed)
+        })
+        .take(5)
+        .map(|source| crate::editor_project::parse_editor_reference_image(source.as_str()))
+        .collect::<Result<Vec<_>, _>>()?;
+    let settings = require_openai_image_settings(&state)?.with_external_api_audit_context(
+        &request_context,
+        Some(principal.owner_user_id().to_string()),
+        project_id.clone(),
+    );
+    let http_client = build_openai_image_http_client(&settings)?;
+    let generated = if reference_images.is_empty() {
+        create_openai_image_generation_with_model(
+            &http_client,
+            &settings,
+            GPT_IMAGE_2_MODEL,
+            prompt.as_str(),
+            None,
+            size.as_str(),
+            1,
+            &[],
+            "外部 OpenAPI 编辑器美术生图",
+        )
+        .await?
+    } else {
+        create_openai_image_edit_with_references_and_model(
+            &http_client,
+            &settings,
+            GPT_IMAGE_2_MODEL,
+            prompt.as_str(),
+            None,
+            size.as_str(),
+            1,
+            reference_images.as_slice(),
+            "外部 OpenAPI 编辑器参考图美术生图",
+        )
+        .await?
+    };
+    let image = generated.images.into_iter().next().ok_or_else(|| {
+        AppError::from_status(StatusCode::BAD_GATEWAY).with_details(json!({
+            "provider": "vector-engine",
+            "message": "VectorEngine 未返回图片",
+        }))
+    })?;
+    let (width, height) = image::load_from_memory(image.bytes.as_slice())
+        .map(|image| (image.width(), image.height()))
+        .unwrap_or((1024, 1024));
+    let image_src = data_url_from_image_bytes(image.mime_type.as_str(), image.bytes.as_slice());
+    let persisted = persist_editor_generated_image(
+        &state,
+        principal.owner_user_id(),
+        generated.task_id.as_str(),
+        &image,
+        prompt.as_str(),
+        generated.actual_prompt.as_deref(),
+        EXTERNAL_EDITOR_IMAGE_ASSET_KIND,
+        "external-images",
+        EXTERNAL_EDITOR_IMAGE_SLOT,
+    )
+    .await?;
+    let now_micros = current_utc_micros();
+    let asset = state
+        .spacetime_client()
+        .create_editor_asset(EditorAssetCreateRecordInput {
+            asset_id: build_prefixed_uuid_id(EDITOR_ASSET_ID_PREFIX),
+            owner_user_id: principal.owner_user_id().to_string(),
+            folder_id: default_asset_folder_id(principal.owner_user_id()),
+            label: asset_title,
+            asset_object_id: Some(persisted.asset_object_id.clone()),
+            image_src: image_src.clone(),
+            object_key: Some(persisted.object_key.clone()),
+            width,
+            height,
+            source_type: EXTERNAL_EDITOR_IMAGE_SOURCE_TYPE.to_string(),
+            prompt: Some(prompt.clone()),
+            actual_prompt: generated.actual_prompt.clone(),
+            model: Some(GPT_IMAGE_2_MODEL.to_string()),
+            provider: Some(EXTERNAL_EDITOR_IMAGE_PROVIDER.to_string()),
+            task_id: Some(generated.task_id.clone()),
+            now_micros,
+        })
+        .await
+        .map_err(map_editor_project_error)?;
+    let resource = if let Some(project_id) = project_id.clone() {
+        Some(
+            state
+                .spacetime_client()
+                .create_editor_project_resource(EditorProjectResourceCreateRecordInput {
+                    resource_id: build_prefixed_uuid_id(EDITOR_RESOURCE_ID_PREFIX),
+                    project_id,
+                    owner_user_id: principal.owner_user_id().to_string(),
+                    asset_object_id: Some(persisted.asset_object_id.clone()),
+                    image_src: image_src.clone(),
+                    object_key: Some(persisted.object_key.clone()),
+                    width,
+                    height,
+                    source_type: EXTERNAL_EDITOR_IMAGE_SOURCE_TYPE.to_string(),
+                    prompt: Some(prompt.clone()),
+                    actual_prompt: generated.actual_prompt.clone(),
+                    model: Some(GPT_IMAGE_2_MODEL.to_string()),
+                    provider: Some(EXTERNAL_EDITOR_IMAGE_PROVIDER.to_string()),
+                    task_id: Some(generated.task_id.clone()),
+                    source_resource_id: None,
+                    updated_at_micros: now_micros,
+                })
+                .await
+                .map_err(map_editor_project_error)?,
+        )
+    } else {
+        None
+    };
+    let project = if let (Some(project_id), Some(layers), Some(viewport)) =
+        (project_id, payload.layers, payload.viewport)
+    {
+        Some(
+            state
+                .spacetime_client()
+                .save_editor_project_layout(EditorProjectLayoutSaveRecordInput {
+                    project_id,
+                    owner_user_id: principal.owner_user_id().to_string(),
+                    viewport: viewport.into_record(),
+                    layers_json: serialize_editor_layers(layers)?,
+                    updated_at_micros: now_micros,
+                })
+                .await
+                .map_err(map_editor_project_error)?,
+        )
+    } else {
+        None
+    };
+
+    Ok(json_success_body(
+        Some(&request_context),
+        ExternalEditorImageGenerationResponse {
+            image_src,
+            width,
+            height,
+            prompt,
+            actual_prompt: generated.actual_prompt,
+            model: GPT_IMAGE_2_MODEL.to_string(),
+            provider: EXTERNAL_EDITOR_IMAGE_PROVIDER,
+            task_id: generated.task_id,
+            asset: editor_asset_payload_from_record(asset),
+            resource: resource.map(editor_project_resource_payload_from_record),
+            project: project.map(editor_project_payload_from_record),
+        },
+    ))
+}
+
+fn require_scope(principal: &ExternalApiPrincipal, scope: &str) -> Result<(), AppError> {
+    if principal.has_scope(scope) {
+        return Ok(());
+    }
+    Err(
+        AppError::from_status(StatusCode::FORBIDDEN).with_details(json!({
+            "provider": EXTERNAL_EDITOR_PROVIDER,
+            "keyId": principal.key_id(),
+            "scope": scope,
+            "message": "API Key 缺少所需权限",
+        })),
+    )
+}
+
+fn normalize_project_title(title: Option<String>) -> String {
+    title
+        .map(|value| value.trim().to_string())
+        .filter(|value| !value.is_empty())
+        .unwrap_or_else(|| EDITOR_PROJECT_DEFAULT_TITLE.to_string())
+}
+
+fn normalize_asset_title(title: Option<&str>, prompt: &str) -> String {
+    title
+        .map(str::trim)
+        .filter(|value| !value.is_empty())
+        .or_else(|| prompt.trim().split('\n').next())
+        .map(|value| value.chars().take(40).collect())
+        .unwrap_or_else(|| "外部生成图片".to_string())
+}
+
+fn normalize_external_image_size(size: Option<&str>) -> String {
+    match size.map(str::trim).filter(|value| !value.is_empty()) {
+        Some(value @ ("1024x1024" | "1536x1024" | "1024x1536" | "2048x1152" | "2048x2048")) => {
+            value.to_string()
+        }
+        _ => EXTERNAL_EDITOR_IMAGE_DEFAULT_SIZE.to_string(),
+    }
+}
+
+fn default_asset_folder_id(owner_user_id: &str) -> String {
+    format!("{owner_user_id}:asset-folder:project")
+}
+
+#[cfg(test)]
+mod tests {
+    use super::*;
+
+    #[test]
+    fn exported_openapi_json_contains_external_editor_routes_and_security() {
+        let parsed: Value = serde_json::from_str(OPENAPI_JSON).expect("openapi json should parse");
+
+        assert_eq!(parsed["openapi"], "3.1.0");
+        assert!(
+            parsed["paths"]
+                .get("/api/external/v1/editor/projects")
+                .is_some()
+        );
+        assert!(
+            parsed["paths"]
+                .get("/api/external/v1/editor/images/generations")
+                .is_some()
+        );
+        assert_eq!(
+            parsed["components"]["securitySchemes"]["ExternalApiKey"]["scheme"],
+            "bearer"
+        );
+    }
+
+    #[test]
+    fn external_image_size_falls_back_to_default_for_unknown_values() {
+        assert_eq!(
+            normalize_external_image_size(Some("1536x1024")),
+            "1536x1024"
+        );
+        assert_eq!(
+            normalize_external_image_size(Some("4096x4096")),
+            EXTERNAL_EDITOR_IMAGE_DEFAULT_SIZE
+        );
+        assert_eq!(
+            normalize_external_image_size(None),
+            EXTERNAL_EDITOR_IMAGE_DEFAULT_SIZE
+        );
+    }
+}
diff --git a/server-rs/crates/api-server/src/main.rs b/server-rs/crates/api-server/src/main.rs
index 7f51e5a64..18666212c 100644
--- a/server-rs/crates/api-server/src/main.rs
+++ b/server-rs/crates/api-server/src/main.rs
@@ -42,6 +42,9 @@ mod edutainment_baby_drawing;
 mod edutainment_baby_object;
 mod error_middleware;
 mod external_api_audit;
+mod external_api_auth;
+mod external_api_keys;
+mod external_editor_api;
 mod external_generation;
 mod external_generation_worker;
 mod external_generation_worker_controller;
diff --git a/server-rs/crates/api-server/src/modules.rs b/server-rs/crates/api-server/src/modules.rs
index c2c71344e..ee51d7682 100644
--- a/server-rs/crates/api-server/src/modules.rs
+++ b/server-rs/crates/api-server/src/modules.rs
@@ -6,6 +6,7 @@ pub mod big_fish;
 pub mod custom_world;
 pub mod editor_project;
 pub mod edutainment;
+pub mod external_api;
 pub mod external_generation;
 pub mod health;
 pub mod internal;
diff --git a/server-rs/crates/api-server/src/modules/external_api.rs b/server-rs/crates/api-server/src/modules/external_api.rs
new file mode 100644
index 000000000..9c09e1d7d
--- /dev/null
+++ b/server-rs/crates/api-server/src/modules/external_api.rs
@@ -0,0 +1,54 @@
+use axum::{
+    Router,
+    extract::DefaultBodyLimit,
+    middleware,
+    routing::{get, patch, post},
+};
+
+use crate::{
+    external_api_auth::require_external_api_key,
+    external_editor_api::{
+        create_external_editor_project, generate_external_editor_image,
+        get_external_editor_project, openapi_json, save_external_editor_canvas,
+    },
+    state::AppState,
+};
+
+const EXTERNAL_EDITOR_IMAGE_REFERENCE_BODY_LIMIT_BYTES: usize = 12 * 1024 * 1024;
+
+pub fn router(state: AppState) -> Router<AppState> {
+    Router::new()
+        .route("/api/external/v1/openapi.json", get(openapi_json))
+        .route(
+            "/api/external/v1/editor/projects",
+            post(create_external_editor_project).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_external_api_key,
+            )),
+        )
+        .route(
+            "/api/external/v1/editor/projects/{project_id}",
+            get(get_external_editor_project).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_external_api_key,
+            )),
+        )
+        .route(
+            "/api/external/v1/editor/projects/{project_id}/canvas",
+            patch(save_external_editor_canvas).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_external_api_key,
+            )),
+        )
+        .route(
+            "/api/external/v1/editor/images/generations",
+            post(generate_external_editor_image)
+                .layer(DefaultBodyLimit::max(
+                    EXTERNAL_EDITOR_IMAGE_REFERENCE_BODY_LIMIT_BYTES,
+                ))
+                .route_layer(middleware::from_fn_with_state(
+                    state,
+                    require_external_api_key,
+                )),
+        )
+}
diff --git a/server-rs/crates/api-server/src/modules/profile.rs b/server-rs/crates/api-server/src/modules/profile.rs
index 54b17f8b9..58b7c1b9e 100644
--- a/server-rs/crates/api-server/src/modules/profile.rs
+++ b/server-rs/crates/api-server/src/modules/profile.rs
@@ -1,10 +1,11 @@
 use axum::{
     Router, middleware,
-    routing::{get, patch, post},
+    routing::{delete, get, patch, post},
 };
 
 use crate::{
     auth::require_bearer_auth,
+    external_api_keys::{create_external_api_key, list_external_api_keys, revoke_external_api_key},
     profile_identity::update_profile_identity,
     runtime_profile::{
         claim_profile_task_reward, confirm_wechat_profile_recharge_order,
@@ -32,6 +33,22 @@ pub fn router(state: AppState) -> Router<AppState> {
                 require_bearer_auth,
             )),
         )
+        .route(
+            "/api/profile/api-keys",
+            get(list_external_api_keys)
+                .post(create_external_api_key)
+                .route_layer(middleware::from_fn_with_state(
+                    state.clone(),
+                    require_bearer_auth,
+                )),
+        )
+        .route(
+            "/api/profile/api-keys/{key_id}",
+            delete(revoke_external_api_key).route_layer(middleware::from_fn_with_state(
+                state.clone(),
+                require_bearer_auth,
+            )),
+        )
         .route(
             "/api/profile/wallet-ledger",
             get(get_profile_wallet_ledger).route_layer(middleware::from_fn_with_state(
diff --git a/server-rs/crates/spacetime-client/src/external_api_key.rs b/server-rs/crates/spacetime-client/src/external_api_key.rs
new file mode 100644
index 000000000..3524f12c0
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/external_api_key.rs
@@ -0,0 +1,94 @@
+use super::*;
+
+impl SpacetimeClient {
+    pub async fn create_external_api_key(
+        &self,
+        input: ExternalApiKeyCreateRecordInput,
+    ) -> Result<ExternalApiKeyRecord, SpacetimeClientError> {
+        let procedure_input = input.into();
+
+        self.call_after_connect(
+            "create_external_api_key_and_return",
+            move |connection, sender| {
+                connection
+                    .procedures()
+                    .create_external_api_key_and_return_then(procedure_input, move |_, result| {
+                        let mapped = result
+                            .map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_external_api_key_single_procedure_result);
+                        send_once(&sender, mapped);
+                    });
+            },
+        )
+        .await
+    }
+
+    pub async fn list_external_api_keys(
+        &self,
+        owner_user_id: String,
+    ) -> Result<Vec<ExternalApiKeyRecord>, SpacetimeClientError> {
+        let procedure_input = ExternalApiKeyListInput { owner_user_id };
+
+        self.call_after_connect(
+            "list_external_api_keys_and_return",
+            move |connection, sender| {
+                connection
+                    .procedures()
+                    .list_external_api_keys_and_return_then(procedure_input, move |_, result| {
+                        let mapped = result
+                            .map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_external_api_key_list_procedure_result);
+                        send_once(&sender, mapped);
+                    });
+            },
+        )
+        .await
+    }
+
+    pub async fn revoke_external_api_key(
+        &self,
+        input: ExternalApiKeyRevokeRecordInput,
+    ) -> Result<ExternalApiKeyRecord, SpacetimeClientError> {
+        let procedure_input = input.into();
+
+        self.call_after_connect(
+            "revoke_external_api_key_and_return",
+            move |connection, sender| {
+                connection
+                    .procedures()
+                    .revoke_external_api_key_and_return_then(procedure_input, move |_, result| {
+                        let mapped = result
+                            .map_err(SpacetimeClientError::from_sdk_error)
+                            .and_then(map_external_api_key_single_procedure_result);
+                        send_once(&sender, mapped);
+                    });
+            },
+        )
+        .await
+    }
+
+    pub async fn authenticate_external_api_key(
+        &self,
+        input: ExternalApiKeyAuthenticateRecordInput,
+    ) -> Result<ExternalApiKeyRecord, SpacetimeClientError> {
+        let procedure_input = input.into();
+
+        self.call_after_connect(
+            "authenticate_external_api_key_and_return",
+            move |connection, sender| {
+                connection
+                    .procedures()
+                    .authenticate_external_api_key_and_return_then(
+                        procedure_input,
+                        move |_, result| {
+                            let mapped = result
+                                .map_err(SpacetimeClientError::from_sdk_error)
+                                .and_then(map_external_api_key_single_procedure_result);
+                            send_once(&sender, mapped);
+                        },
+                    );
+            },
+        )
+        .await
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/lib.rs b/server-rs/crates/spacetime-client/src/lib.rs
index f698df627..08d1f0371 100644
--- a/server-rs/crates/spacetime-client/src/lib.rs
+++ b/server-rs/crates/spacetime-client/src/lib.rs
@@ -37,16 +37,18 @@ pub use mapper::{
     EditorCanvasViewportRecord, EditorProjectCreateRecordInput, EditorProjectDeleteRecordInput,
     EditorProjectGetRecordInput, EditorProjectLayoutSaveRecordInput, EditorProjectRecord,
     EditorProjectRenameRecordInput, EditorProjectResourceCreateRecordInput,
-    EditorProjectResourceRecord, ExternalGenerationJobClaimRecordInput,
-    ExternalGenerationJobCompleteRecordInput, ExternalGenerationJobEnqueueRecordInput,
-    ExternalGenerationJobFailRecordInput, ExternalGenerationJobGetRecordInput,
-    ExternalGenerationJobRecord, ExternalGenerationJobRenewLeaseRecordInput,
-    ExternalGenerationQueueStatsRecord, JumpHopActionRequest, JumpHopActionResponse,
-    JumpHopActionType, JumpHopCharacterAsset, JumpHopDifficulty, JumpHopDraftResponse,
-    JumpHopGalleryCardResponse, JumpHopGalleryDetailResponse, JumpHopGalleryResponse,
-    JumpHopGenerationStatus, JumpHopJumpRequest, JumpHopJumpResponse, JumpHopJumpResult,
-    JumpHopLastJump, JumpHopPath, JumpHopPlatform, JumpHopRestartRunRequest, JumpHopRunResponse,
-    JumpHopRunStatus, JumpHopRuntimeRunSnapshotResponse, JumpHopScoring, JumpHopSessionResponse,
+    EditorProjectResourceRecord, ExternalApiKeyAuthenticateRecordInput,
+    ExternalApiKeyCreateRecordInput, ExternalApiKeyRecord, ExternalApiKeyRevokeRecordInput,
+    ExternalGenerationJobClaimRecordInput, ExternalGenerationJobCompleteRecordInput,
+    ExternalGenerationJobEnqueueRecordInput, ExternalGenerationJobFailRecordInput,
+    ExternalGenerationJobGetRecordInput, ExternalGenerationJobRecord,
+    ExternalGenerationJobRenewLeaseRecordInput, ExternalGenerationQueueStatsRecord,
+    JumpHopActionRequest, JumpHopActionResponse, JumpHopActionType, JumpHopCharacterAsset,
+    JumpHopDifficulty, JumpHopDraftResponse, JumpHopGalleryCardResponse,
+    JumpHopGalleryDetailResponse, JumpHopGalleryResponse, JumpHopGenerationStatus,
+    JumpHopJumpRequest, JumpHopJumpResponse, JumpHopJumpResult, JumpHopLastJump, JumpHopPath,
+    JumpHopPlatform, JumpHopRestartRunRequest, JumpHopRunResponse, JumpHopRunStatus,
+    JumpHopRuntimeRunSnapshotResponse, JumpHopScoring, JumpHopSessionResponse,
     JumpHopSessionSnapshotResponse, JumpHopStartRunRequest, JumpHopStylePreset, JumpHopTileAsset,
     JumpHopTileType, JumpHopWorkDetailResponse, JumpHopWorkMutationResponse,
     JumpHopWorkProfileResponse, JumpHopWorkSummaryResponse, JumpHopWorksResponse,
@@ -125,6 +127,7 @@ pub mod big_fish;
 pub mod combat;
 pub mod custom_world;
 pub mod editor_project;
+pub mod external_api_key;
 pub mod external_generation;
 
 pub mod inventory;
diff --git a/server-rs/crates/spacetime-client/src/mapper.rs b/server-rs/crates/spacetime-client/src/mapper.rs
index f17a6937b..e2dc114d0 100644
--- a/server-rs/crates/spacetime-client/src/mapper.rs
+++ b/server-rs/crates/spacetime-client/src/mapper.rs
@@ -9,6 +9,7 @@ mod combat;
 mod common;
 mod custom_world;
 mod editor_project;
+mod external_api_key;
 mod external_generation;
 
 mod inventory;
@@ -80,6 +81,10 @@ pub use self::editor_project::{
     EditorProjectLayoutSaveRecordInput, EditorProjectRecord, EditorProjectRenameRecordInput,
     EditorProjectResourceCreateRecordInput, EditorProjectResourceRecord,
 };
+pub use self::external_api_key::{
+    ExternalApiKeyAuthenticateRecordInput, ExternalApiKeyCreateRecordInput, ExternalApiKeyRecord,
+    ExternalApiKeyRevokeRecordInput,
+};
 pub use self::external_generation::{
     ExternalGenerationJobClaimRecordInput, ExternalGenerationJobCompleteRecordInput,
     ExternalGenerationJobEnqueueRecordInput, ExternalGenerationJobFailRecordInput,
@@ -203,6 +208,9 @@ pub(crate) use self::editor_project::{
     map_editor_project_optional_procedure_result, map_editor_project_required_procedure_result,
     map_editor_project_resource_procedure_result,
 };
+pub(crate) use self::external_api_key::{
+    map_external_api_key_list_procedure_result, map_external_api_key_single_procedure_result,
+};
 pub(crate) use self::external_generation::{
     map_external_generation_job_claim_result, map_external_generation_job_procedure_result,
     map_external_generation_queue_stats_result,
diff --git a/server-rs/crates/spacetime-client/src/mapper/external_api_key.rs b/server-rs/crates/spacetime-client/src/mapper/external_api_key.rs
new file mode 100644
index 000000000..1092c1f50
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/mapper/external_api_key.rs
@@ -0,0 +1,118 @@
+use super::*;
+
+#[derive(Clone, Debug, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
+pub struct ExternalApiKeyRecord {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub scopes: Vec<String>,
+    pub created_at: String,
+    pub last_used_at: Option<String>,
+    pub revoked_at: Option<String>,
+    pub updated_at: String,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ExternalApiKeyCreateRecordInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub key_hash: String,
+    pub scopes: Vec<String>,
+    pub now_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ExternalApiKeyRevokeRecordInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub revoked_at_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq)]
+pub struct ExternalApiKeyAuthenticateRecordInput {
+    pub key_hash: String,
+    pub used_at_micros: i64,
+}
+
+impl From<ExternalApiKeyCreateRecordInput> for crate::module_bindings::ExternalApiKeyCreateInput {
+    fn from(input: ExternalApiKeyCreateRecordInput) -> Self {
+        Self {
+            key_id: input.key_id,
+            owner_user_id: input.owner_user_id,
+            name: input.name,
+            key_prefix: input.key_prefix,
+            key_hash: input.key_hash,
+            scopes_json: serde_json::to_string(&input.scopes).unwrap_or_else(|_| "[]".to_string()),
+            now_micros: input.now_micros,
+        }
+    }
+}
+
+impl From<ExternalApiKeyRevokeRecordInput> for crate::module_bindings::ExternalApiKeyRevokeInput {
+    fn from(input: ExternalApiKeyRevokeRecordInput) -> Self {
+        Self {
+            key_id: input.key_id,
+            owner_user_id: input.owner_user_id,
+            revoked_at_micros: input.revoked_at_micros,
+        }
+    }
+}
+
+impl From<ExternalApiKeyAuthenticateRecordInput>
+    for crate::module_bindings::ExternalApiKeyAuthenticateInput
+{
+    fn from(input: ExternalApiKeyAuthenticateRecordInput) -> Self {
+        Self {
+            key_hash: input.key_hash,
+            used_at_micros: input.used_at_micros,
+        }
+    }
+}
+
+pub(crate) fn map_external_api_key_single_procedure_result(
+    result: ExternalApiKeyProcedureResult,
+) -> Result<ExternalApiKeyRecord, SpacetimeClientError> {
+    if !result.ok {
+        return Err(SpacetimeClientError::procedure_failed(result.error_message));
+    }
+
+    result
+        .key
+        .map(map_external_api_key_snapshot)
+        .transpose()?
+        .ok_or_else(|| SpacetimeClientError::missing_snapshot("外部 API Key 快照"))
+}
+
+pub(crate) fn map_external_api_key_list_procedure_result(
+    result: ExternalApiKeyProcedureResult,
+) -> Result<Vec<ExternalApiKeyRecord>, SpacetimeClientError> {
+    if !result.ok {
+        return Err(SpacetimeClientError::procedure_failed(result.error_message));
+    }
+
+    result
+        .keys
+        .into_iter()
+        .map(map_external_api_key_snapshot)
+        .collect()
+}
+
+fn map_external_api_key_snapshot(
+    snapshot: ExternalApiKeySnapshot,
+) -> Result<ExternalApiKeyRecord, SpacetimeClientError> {
+    Ok(ExternalApiKeyRecord {
+        key_id: snapshot.key_id,
+        owner_user_id: snapshot.owner_user_id,
+        name: snapshot.name,
+        key_prefix: snapshot.key_prefix,
+        scopes: serde_json::from_str::<Vec<String>>(snapshot.scopes_json.as_str())
+            .map_err(SpacetimeClientError::validation_failed)?,
+        created_at: format_timestamp_micros(snapshot.created_at_micros),
+        last_used_at: snapshot.last_used_at_micros.map(format_timestamp_micros),
+        revoked_at: snapshot.revoked_at_micros.map(format_timestamp_micros),
+        updated_at: format_timestamp_micros(snapshot.updated_at_micros),
+    })
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings.rs b/server-rs/crates/spacetime-client/src/module_bindings.rs
index 9f964c90f..8d6885175 100644
--- a/server-rs/crates/spacetime-client/src/module_bindings.rs
+++ b/server-rs/crates/spacetime-client/src/module_bindings.rs
@@ -101,6 +101,7 @@ pub mod auth_store_snapshot_record_type;
 pub mod auth_store_snapshot_table;
 pub mod auth_store_snapshot_type;
 pub mod auth_store_snapshot_upsert_input_type;
+pub mod authenticate_external_api_key_and_return_procedure;
 pub mod authorize_database_migration_operator_procedure;
 pub mod bark_battle_draft_config_row_type;
 pub mod bark_battle_draft_config_snapshot_type;
@@ -240,6 +241,7 @@ pub mod create_editor_asset_and_return_procedure;
 pub mod create_editor_asset_folder_and_return_procedure;
 pub mod create_editor_project_and_return_procedure;
 pub mod create_editor_project_resource_and_return_procedure;
+pub mod create_external_api_key_and_return_procedure;
 pub mod create_jump_hop_agent_session_procedure;
 pub mod create_match_3_d_agent_session_procedure;
 pub mod create_profile_recharge_order_and_return_procedure;
@@ -397,6 +399,14 @@ pub mod equip_inventory_item_input_type;
 pub mod execute_custom_world_agent_action_procedure;
 pub mod export_auth_store_snapshot_from_tables_procedure;
 pub mod export_database_migration_to_file_procedure;
+pub mod external_api_key_authenticate_input_type;
+pub mod external_api_key_create_input_type;
+pub mod external_api_key_list_input_type;
+pub mod external_api_key_procedure_result_type;
+pub mod external_api_key_revoke_input_type;
+pub mod external_api_key_snapshot_type;
+pub mod external_api_key_table;
+pub mod external_api_key_type;
 pub mod external_generation_job_claim_input_type;
 pub mod external_generation_job_complete_input_type;
 pub mod external_generation_job_enqueue_input_type;
@@ -550,6 +560,7 @@ pub mod list_custom_world_gallery_entries_procedure;
 pub mod list_custom_world_profiles_procedure;
 pub mod list_custom_world_works_procedure;
 pub mod list_editor_projects_and_return_procedure;
+pub mod list_external_api_keys_and_return_procedure;
 pub mod list_jump_hop_works_procedure;
 pub mod list_match_3_d_works_procedure;
 pub mod list_platform_browse_history_procedure;
@@ -869,6 +880,7 @@ pub mod restart_square_hole_run_procedure;
 pub mod resume_profile_save_archive_and_return_procedure;
 pub mod retry_puzzle_clear_level_run_procedure;
 pub mod revoke_database_migration_operator_procedure;
+pub mod revoke_external_api_key_and_return_procedure;
 pub mod rpg_agent_draft_card_kind_type;
 pub mod rpg_agent_draft_card_status_type;
 pub mod rpg_agent_message_kind_type;
@@ -1291,6 +1303,7 @@ pub use auth_store_snapshot_record_type::AuthStoreSnapshotRecord;
 pub use auth_store_snapshot_table::*;
 pub use auth_store_snapshot_type::AuthStoreSnapshot;
 pub use auth_store_snapshot_upsert_input_type::AuthStoreSnapshotUpsertInput;
+pub use authenticate_external_api_key_and_return_procedure::authenticate_external_api_key_and_return;
 pub use authorize_database_migration_operator_procedure::authorize_database_migration_operator;
 pub use bark_battle_draft_config_row_type::BarkBattleDraftConfigRow;
 pub use bark_battle_draft_config_snapshot_type::BarkBattleDraftConfigSnapshot;
@@ -1430,6 +1443,7 @@ pub use create_editor_asset_and_return_procedure::create_editor_asset_and_return
 pub use create_editor_asset_folder_and_return_procedure::create_editor_asset_folder_and_return;
 pub use create_editor_project_and_return_procedure::create_editor_project_and_return;
 pub use create_editor_project_resource_and_return_procedure::create_editor_project_resource_and_return;
+pub use create_external_api_key_and_return_procedure::create_external_api_key_and_return;
 pub use create_jump_hop_agent_session_procedure::create_jump_hop_agent_session;
 pub use create_match_3_d_agent_session_procedure::create_match_3_d_agent_session;
 pub use create_profile_recharge_order_and_return_procedure::create_profile_recharge_order_and_return;
@@ -1587,6 +1601,14 @@ pub use equip_inventory_item_input_type::EquipInventoryItemInput;
 pub use execute_custom_world_agent_action_procedure::execute_custom_world_agent_action;
 pub use export_auth_store_snapshot_from_tables_procedure::export_auth_store_snapshot_from_tables;
 pub use export_database_migration_to_file_procedure::export_database_migration_to_file;
+pub use external_api_key_authenticate_input_type::ExternalApiKeyAuthenticateInput;
+pub use external_api_key_create_input_type::ExternalApiKeyCreateInput;
+pub use external_api_key_list_input_type::ExternalApiKeyListInput;
+pub use external_api_key_procedure_result_type::ExternalApiKeyProcedureResult;
+pub use external_api_key_revoke_input_type::ExternalApiKeyRevokeInput;
+pub use external_api_key_snapshot_type::ExternalApiKeySnapshot;
+pub use external_api_key_table::*;
+pub use external_api_key_type::ExternalApiKey;
 pub use external_generation_job_claim_input_type::ExternalGenerationJobClaimInput;
 pub use external_generation_job_complete_input_type::ExternalGenerationJobCompleteInput;
 pub use external_generation_job_enqueue_input_type::ExternalGenerationJobEnqueueInput;
@@ -1740,6 +1762,7 @@ pub use list_custom_world_gallery_entries_procedure::list_custom_world_gallery_e
 pub use list_custom_world_profiles_procedure::list_custom_world_profiles;
 pub use list_custom_world_works_procedure::list_custom_world_works;
 pub use list_editor_projects_and_return_procedure::list_editor_projects_and_return;
+pub use list_external_api_keys_and_return_procedure::list_external_api_keys_and_return;
 pub use list_jump_hop_works_procedure::list_jump_hop_works;
 pub use list_match_3_d_works_procedure::list_match_3_d_works;
 pub use list_platform_browse_history_procedure::list_platform_browse_history;
@@ -2059,6 +2082,7 @@ pub use restart_square_hole_run_procedure::restart_square_hole_run;
 pub use resume_profile_save_archive_and_return_procedure::resume_profile_save_archive_and_return;
 pub use retry_puzzle_clear_level_run_procedure::retry_puzzle_clear_level_run;
 pub use revoke_database_migration_operator_procedure::revoke_database_migration_operator;
+pub use revoke_external_api_key_and_return_procedure::revoke_external_api_key_and_return;
 pub use rpg_agent_draft_card_kind_type::RpgAgentDraftCardKind;
 pub use rpg_agent_draft_card_status_type::RpgAgentDraftCardStatus;
 pub use rpg_agent_message_kind_type::RpgAgentMessageKind;
@@ -2702,6 +2726,7 @@ pub struct DbUpdate {
     editor_canvas: __sdk::TableUpdate<EditorCanvas>,
     editor_project: __sdk::TableUpdate<EditorProject>,
     editor_project_resource: __sdk::TableUpdate<EditorProjectResource>,
+    external_api_key: __sdk::TableUpdate<ExternalApiKey>,
     external_generation_job: __sdk::TableUpdate<ExternalGenerationJob>,
     inventory_slot: __sdk::TableUpdate<InventorySlot>,
     jump_hop_agent_session: __sdk::TableUpdate<JumpHopAgentSessionRow>,
@@ -2930,6 +2955,9 @@ impl TryFrom<__ws::v2::TransactionUpdate> for DbUpdate {
                 "editor_project_resource" => db_update.editor_project_resource.append(
                     editor_project_resource_table::parse_table_update(table_update)?,
                 ),
+                "external_api_key" => db_update
+                    .external_api_key
+                    .append(external_api_key_table::parse_table_update(table_update)?),
                 "external_generation_job" => db_update.external_generation_job.append(
                     external_generation_job_table::parse_table_update(table_update)?,
                 ),
@@ -3414,6 +3442,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 &self.editor_project_resource,
             )
             .with_updates_by_pk(|row| &row.resource_id);
+        diff.external_api_key = cache
+            .apply_diff_to_table::<ExternalApiKey>("external_api_key", &self.external_api_key)
+            .with_updates_by_pk(|row| &row.key_id);
         diff.external_generation_job = cache
             .apply_diff_to_table::<ExternalGenerationJob>(
                 "external_generation_job",
@@ -3962,6 +3993,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 "editor_project_resource" => db_update
                     .editor_project_resource
                     .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
+                "external_api_key" => db_update
+                    .external_api_key
+                    .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
                 "external_generation_job" => db_update
                     .external_generation_job
                     .append(__sdk::parse_row_list_as_inserts(table_rows.rows)?),
@@ -4347,6 +4381,9 @@ impl __sdk::DbUpdate for DbUpdate {
                 "editor_project_resource" => db_update
                     .editor_project_resource
                     .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
+                "external_api_key" => db_update
+                    .external_api_key
+                    .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
                 "external_generation_job" => db_update
                     .external_generation_job
                     .append(__sdk::parse_row_list_as_deletes(table_rows.rows)?),
@@ -4648,6 +4685,7 @@ pub struct AppliedDiff<'r> {
     editor_canvas: __sdk::TableAppliedDiff<'r, EditorCanvas>,
     editor_project: __sdk::TableAppliedDiff<'r, EditorProject>,
     editor_project_resource: __sdk::TableAppliedDiff<'r, EditorProjectResource>,
+    external_api_key: __sdk::TableAppliedDiff<'r, ExternalApiKey>,
     external_generation_job: __sdk::TableAppliedDiff<'r, ExternalGenerationJob>,
     inventory_slot: __sdk::TableAppliedDiff<'r, InventorySlot>,
     jump_hop_agent_session: __sdk::TableAppliedDiff<'r, JumpHopAgentSessionRow>,
@@ -4954,6 +4992,11 @@ impl<'r> __sdk::AppliedDiff<'r> for AppliedDiff<'r> {
             &self.editor_project_resource,
             event,
         );
+        callbacks.invoke_table_row_callbacks::<ExternalApiKey>(
+            "external_api_key",
+            &self.external_api_key,
+            event,
+        );
         callbacks.invoke_table_row_callbacks::<ExternalGenerationJob>(
             "external_generation_job",
             &self.external_generation_job,
@@ -6046,6 +6089,7 @@ impl __sdk::SpacetimeModule for RemoteModule {
         editor_canvas_table::register_table(client_cache);
         editor_project_table::register_table(client_cache);
         editor_project_resource_table::register_table(client_cache);
+        external_api_key_table::register_table(client_cache);
         external_generation_job_table::register_table(client_cache);
         inventory_slot_table::register_table(client_cache);
         jump_hop_agent_session_table::register_table(client_cache);
@@ -6172,6 +6216,7 @@ impl __sdk::SpacetimeModule for RemoteModule {
         "editor_canvas",
         "editor_project",
         "editor_project_resource",
+        "external_api_key",
         "external_generation_job",
         "inventory_slot",
         "jump_hop_agent_session",
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/authenticate_external_api_key_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/authenticate_external_api_key_and_return_procedure.rs
new file mode 100644
index 000000000..4c3aec34c
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/authenticate_external_api_key_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::external_api_key_authenticate_input_type::ExternalApiKeyAuthenticateInput;
+use super::external_api_key_procedure_result_type::ExternalApiKeyProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct AuthenticateExternalApiKeyAndReturnArgs {
+    pub input: ExternalApiKeyAuthenticateInput,
+}
+
+impl __sdk::InModule for AuthenticateExternalApiKeyAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `authenticate_external_api_key_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait authenticate_external_api_key_and_return {
+    fn authenticate_external_api_key_and_return(&self, input: ExternalApiKeyAuthenticateInput) {
+        self.authenticate_external_api_key_and_return_then(input, |_, _| {});
+    }
+
+    fn authenticate_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyAuthenticateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl authenticate_external_api_key_and_return for super::RemoteProcedures {
+    fn authenticate_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyAuthenticateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ExternalApiKeyProcedureResult>(
+                "authenticate_external_api_key_and_return",
+                AuthenticateExternalApiKeyAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/create_external_api_key_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/create_external_api_key_and_return_procedure.rs
new file mode 100644
index 000000000..daf4a676f
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/create_external_api_key_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::external_api_key_create_input_type::ExternalApiKeyCreateInput;
+use super::external_api_key_procedure_result_type::ExternalApiKeyProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct CreateExternalApiKeyAndReturnArgs {
+    pub input: ExternalApiKeyCreateInput,
+}
+
+impl __sdk::InModule for CreateExternalApiKeyAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `create_external_api_key_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait create_external_api_key_and_return {
+    fn create_external_api_key_and_return(&self, input: ExternalApiKeyCreateInput) {
+        self.create_external_api_key_and_return_then(input, |_, _| {});
+    }
+
+    fn create_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyCreateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl create_external_api_key_and_return for super::RemoteProcedures {
+    fn create_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyCreateInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ExternalApiKeyProcedureResult>(
+                "create_external_api_key_and_return",
+                CreateExternalApiKeyAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_authenticate_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_authenticate_input_type.rs
new file mode 100644
index 000000000..1fec84c0e
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_authenticate_input_type.rs
@@ -0,0 +1,16 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeyAuthenticateInput {
+    pub key_hash: String,
+    pub used_at_micros: i64,
+}
+
+impl __sdk::InModule for ExternalApiKeyAuthenticateInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_create_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_create_input_type.rs
new file mode 100644
index 000000000..7a3081292
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_create_input_type.rs
@@ -0,0 +1,21 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeyCreateInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub key_hash: String,
+    pub scopes_json: String,
+    pub now_micros: i64,
+}
+
+impl __sdk::InModule for ExternalApiKeyCreateInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_list_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_list_input_type.rs
new file mode 100644
index 000000000..52c6cc740
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_list_input_type.rs
@@ -0,0 +1,15 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeyListInput {
+    pub owner_user_id: String,
+}
+
+impl __sdk::InModule for ExternalApiKeyListInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_procedure_result_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_procedure_result_type.rs
new file mode 100644
index 000000000..18feb9522
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_procedure_result_type.rs
@@ -0,0 +1,20 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::external_api_key_snapshot_type::ExternalApiKeySnapshot;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeyProcedureResult {
+    pub ok: bool,
+    pub key: Option<ExternalApiKeySnapshot>,
+    pub keys: Vec<ExternalApiKeySnapshot>,
+    pub error_message: Option<String>,
+}
+
+impl __sdk::InModule for ExternalApiKeyProcedureResult {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_revoke_input_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_revoke_input_type.rs
new file mode 100644
index 000000000..530a2acac
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_revoke_input_type.rs
@@ -0,0 +1,17 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeyRevokeInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub revoked_at_micros: i64,
+}
+
+impl __sdk::InModule for ExternalApiKeyRevokeInput {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_snapshot_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_snapshot_type.rs
new file mode 100644
index 000000000..5e9dc0c4b
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_snapshot_type.rs
@@ -0,0 +1,23 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKeySnapshot {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub scopes_json: String,
+    pub created_at_micros: i64,
+    pub last_used_at_micros: Option<i64>,
+    pub revoked_at_micros: Option<i64>,
+    pub updated_at_micros: i64,
+}
+
+impl __sdk::InModule for ExternalApiKeySnapshot {
+    type Module = super::RemoteModule;
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_table.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_table.rs
new file mode 100644
index 000000000..b07fbdfdd
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_table.rs
@@ -0,0 +1,190 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use super::external_api_key_type::ExternalApiKey;
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+/// Table handle for the table `external_api_key`.
+///
+/// Obtain a handle from the [`ExternalApiKeyTableAccess::external_api_key`] method on [`super::RemoteTables`],
+/// like `ctx.db.external_api_key()`.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.external_api_key().on_insert(...)`.
+pub struct ExternalApiKeyTableHandle<'ctx> {
+    imp: __sdk::TableHandle<ExternalApiKey>,
+    ctx: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the table `external_api_key`.
+///
+/// Implemented for [`super::RemoteTables`].
+pub trait ExternalApiKeyTableAccess {
+    #[allow(non_snake_case)]
+    /// Obtain a [`ExternalApiKeyTableHandle`], which mediates access to the table `external_api_key`.
+    fn external_api_key(&self) -> ExternalApiKeyTableHandle<'_>;
+}
+
+impl ExternalApiKeyTableAccess for super::RemoteTables {
+    fn external_api_key(&self) -> ExternalApiKeyTableHandle<'_> {
+        ExternalApiKeyTableHandle {
+            imp: self.imp.get_table::<ExternalApiKey>("external_api_key"),
+            ctx: std::marker::PhantomData,
+        }
+    }
+}
+
+pub struct ExternalApiKeyInsertCallbackId(__sdk::CallbackId);
+pub struct ExternalApiKeyDeleteCallbackId(__sdk::CallbackId);
+
+impl<'ctx> __sdk::Table for ExternalApiKeyTableHandle<'ctx> {
+    type Row = ExternalApiKey;
+    type EventContext = super::EventContext;
+
+    fn count(&self) -> u64 {
+        self.imp.count()
+    }
+    fn iter(&self) -> impl Iterator<Item = ExternalApiKey> + '_ {
+        self.imp.iter()
+    }
+
+    type InsertCallbackId = ExternalApiKeyInsertCallbackId;
+
+    fn on_insert(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ExternalApiKeyInsertCallbackId {
+        ExternalApiKeyInsertCallbackId(self.imp.on_insert(Box::new(callback)))
+    }
+
+    fn remove_on_insert(&self, callback: ExternalApiKeyInsertCallbackId) {
+        self.imp.remove_on_insert(callback.0)
+    }
+
+    type DeleteCallbackId = ExternalApiKeyDeleteCallbackId;
+
+    fn on_delete(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row) + Send + 'static,
+    ) -> ExternalApiKeyDeleteCallbackId {
+        ExternalApiKeyDeleteCallbackId(self.imp.on_delete(Box::new(callback)))
+    }
+
+    fn remove_on_delete(&self, callback: ExternalApiKeyDeleteCallbackId) {
+        self.imp.remove_on_delete(callback.0)
+    }
+}
+
+pub struct ExternalApiKeyUpdateCallbackId(__sdk::CallbackId);
+
+impl<'ctx> __sdk::TableWithPrimaryKey for ExternalApiKeyTableHandle<'ctx> {
+    type UpdateCallbackId = ExternalApiKeyUpdateCallbackId;
+
+    fn on_update(
+        &self,
+        callback: impl FnMut(&Self::EventContext, &Self::Row, &Self::Row) + Send + 'static,
+    ) -> ExternalApiKeyUpdateCallbackId {
+        ExternalApiKeyUpdateCallbackId(self.imp.on_update(Box::new(callback)))
+    }
+
+    fn remove_on_update(&self, callback: ExternalApiKeyUpdateCallbackId) {
+        self.imp.remove_on_update(callback.0)
+    }
+}
+
+/// Access to the `key_id` unique index on the table `external_api_key`,
+/// which allows point queries on the field of the same name
+/// via the [`ExternalApiKeyKeyIdUnique::find`] method.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.external_api_key().key_id().find(...)`.
+pub struct ExternalApiKeyKeyIdUnique<'ctx> {
+    imp: __sdk::UniqueConstraintHandle<ExternalApiKey, String>,
+    phantom: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+impl<'ctx> ExternalApiKeyTableHandle<'ctx> {
+    /// Get a handle on the `key_id` unique index on the table `external_api_key`.
+    pub fn key_id(&self) -> ExternalApiKeyKeyIdUnique<'ctx> {
+        ExternalApiKeyKeyIdUnique {
+            imp: self.imp.get_unique_constraint::<String>("key_id"),
+            phantom: std::marker::PhantomData,
+        }
+    }
+}
+
+impl<'ctx> ExternalApiKeyKeyIdUnique<'ctx> {
+    /// Find the subscribed row whose `key_id` column value is equal to `col_val`,
+    /// if such a row is present in the client cache.
+    pub fn find(&self, col_val: &String) -> Option<ExternalApiKey> {
+        self.imp.find(col_val)
+    }
+}
+
+/// Access to the `key_hash` unique index on the table `external_api_key`,
+/// which allows point queries on the field of the same name
+/// via the [`ExternalApiKeyKeyHashUnique::find`] method.
+///
+/// Users are encouraged not to explicitly reference this type,
+/// but to directly chain method calls,
+/// like `ctx.db.external_api_key().key_hash().find(...)`.
+pub struct ExternalApiKeyKeyHashUnique<'ctx> {
+    imp: __sdk::UniqueConstraintHandle<ExternalApiKey, String>,
+    phantom: std::marker::PhantomData<&'ctx super::RemoteTables>,
+}
+
+impl<'ctx> ExternalApiKeyTableHandle<'ctx> {
+    /// Get a handle on the `key_hash` unique index on the table `external_api_key`.
+    pub fn key_hash(&self) -> ExternalApiKeyKeyHashUnique<'ctx> {
+        ExternalApiKeyKeyHashUnique {
+            imp: self.imp.get_unique_constraint::<String>("key_hash"),
+            phantom: std::marker::PhantomData,
+        }
+    }
+}
+
+impl<'ctx> ExternalApiKeyKeyHashUnique<'ctx> {
+    /// Find the subscribed row whose `key_hash` column value is equal to `col_val`,
+    /// if such a row is present in the client cache.
+    pub fn find(&self, col_val: &String) -> Option<ExternalApiKey> {
+        self.imp.find(col_val)
+    }
+}
+
+#[doc(hidden)]
+pub(super) fn register_table(client_cache: &mut __sdk::ClientCache<super::RemoteModule>) {
+    let _table = client_cache.get_or_make_table::<ExternalApiKey>("external_api_key");
+    _table.add_unique_constraint::<String>("key_id", |row| &row.key_id);
+    _table.add_unique_constraint::<String>("key_hash", |row| &row.key_hash);
+}
+
+#[doc(hidden)]
+pub(super) fn parse_table_update(
+    raw_updates: __ws::v2::TableUpdate,
+) -> __sdk::Result<__sdk::TableUpdate<ExternalApiKey>> {
+    __sdk::TableUpdate::parse_table_update(raw_updates).map_err(|e| {
+        __sdk::InternalError::failed_parse("TableUpdate<ExternalApiKey>", "TableUpdate")
+            .with_cause(e)
+            .into()
+    })
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for query builder access to the table `ExternalApiKey`.
+///
+/// Implemented for [`__sdk::QueryTableAccessor`].
+pub trait external_api_keyQueryTableAccess {
+    #[allow(non_snake_case)]
+    /// Get a query builder for the table `ExternalApiKey`.
+    fn external_api_key(&self) -> __sdk::__query_builder::Table<ExternalApiKey>;
+}
+
+impl external_api_keyQueryTableAccess for __sdk::QueryTableAccessor {
+    fn external_api_key(&self) -> __sdk::__query_builder::Table<ExternalApiKey> {
+        __sdk::__query_builder::Table::new("external_api_key")
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_type.rs b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_type.rs
new file mode 100644
index 000000000..b0064ea90
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/external_api_key_type.rs
@@ -0,0 +1,80 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+pub struct ExternalApiKey {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub key_hash: String,
+    pub scopes_json: String,
+    pub created_at: __sdk::Timestamp,
+    pub last_used_at: Option<__sdk::Timestamp>,
+    pub revoked_at: Option<__sdk::Timestamp>,
+    pub updated_at: __sdk::Timestamp,
+}
+
+impl __sdk::InModule for ExternalApiKey {
+    type Module = super::RemoteModule;
+}
+
+/// Column accessor struct for the table `ExternalApiKey`.
+///
+/// Provides typed access to columns for query building.
+pub struct ExternalApiKeyCols {
+    pub key_id: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub owner_user_id: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub name: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub key_prefix: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub key_hash: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub scopes_json: __sdk::__query_builder::Col<ExternalApiKey, String>,
+    pub created_at: __sdk::__query_builder::Col<ExternalApiKey, __sdk::Timestamp>,
+    pub last_used_at: __sdk::__query_builder::Col<ExternalApiKey, Option<__sdk::Timestamp>>,
+    pub revoked_at: __sdk::__query_builder::Col<ExternalApiKey, Option<__sdk::Timestamp>>,
+    pub updated_at: __sdk::__query_builder::Col<ExternalApiKey, __sdk::Timestamp>,
+}
+
+impl __sdk::__query_builder::HasCols for ExternalApiKey {
+    type Cols = ExternalApiKeyCols;
+    fn cols(table_name: &'static str) -> Self::Cols {
+        ExternalApiKeyCols {
+            key_id: __sdk::__query_builder::Col::new(table_name, "key_id"),
+            owner_user_id: __sdk::__query_builder::Col::new(table_name, "owner_user_id"),
+            name: __sdk::__query_builder::Col::new(table_name, "name"),
+            key_prefix: __sdk::__query_builder::Col::new(table_name, "key_prefix"),
+            key_hash: __sdk::__query_builder::Col::new(table_name, "key_hash"),
+            scopes_json: __sdk::__query_builder::Col::new(table_name, "scopes_json"),
+            created_at: __sdk::__query_builder::Col::new(table_name, "created_at"),
+            last_used_at: __sdk::__query_builder::Col::new(table_name, "last_used_at"),
+            revoked_at: __sdk::__query_builder::Col::new(table_name, "revoked_at"),
+            updated_at: __sdk::__query_builder::Col::new(table_name, "updated_at"),
+        }
+    }
+}
+
+/// Indexed column accessor struct for the table `ExternalApiKey`.
+///
+/// Provides typed access to indexed columns for query building.
+pub struct ExternalApiKeyIxCols {
+    pub key_hash: __sdk::__query_builder::IxCol<ExternalApiKey, String>,
+    pub key_id: __sdk::__query_builder::IxCol<ExternalApiKey, String>,
+    pub owner_user_id: __sdk::__query_builder::IxCol<ExternalApiKey, String>,
+}
+
+impl __sdk::__query_builder::HasIxCols for ExternalApiKey {
+    type IxCols = ExternalApiKeyIxCols;
+    fn ix_cols(table_name: &'static str) -> Self::IxCols {
+        ExternalApiKeyIxCols {
+            key_hash: __sdk::__query_builder::IxCol::new(table_name, "key_hash"),
+            key_id: __sdk::__query_builder::IxCol::new(table_name, "key_id"),
+            owner_user_id: __sdk::__query_builder::IxCol::new(table_name, "owner_user_id"),
+        }
+    }
+}
+
+impl __sdk::__query_builder::CanBeLookupTable for ExternalApiKey {}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/list_external_api_keys_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/list_external_api_keys_and_return_procedure.rs
new file mode 100644
index 000000000..ca827a562
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/list_external_api_keys_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::external_api_key_list_input_type::ExternalApiKeyListInput;
+use super::external_api_key_procedure_result_type::ExternalApiKeyProcedureResult;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct ListExternalApiKeysAndReturnArgs {
+    pub input: ExternalApiKeyListInput,
+}
+
+impl __sdk::InModule for ListExternalApiKeysAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `list_external_api_keys_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait list_external_api_keys_and_return {
+    fn list_external_api_keys_and_return(&self, input: ExternalApiKeyListInput) {
+        self.list_external_api_keys_and_return_then(input, |_, _| {});
+    }
+
+    fn list_external_api_keys_and_return_then(
+        &self,
+        input: ExternalApiKeyListInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl list_external_api_keys_and_return for super::RemoteProcedures {
+    fn list_external_api_keys_and_return_then(
+        &self,
+        input: ExternalApiKeyListInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ExternalApiKeyProcedureResult>(
+                "list_external_api_keys_and_return",
+                ListExternalApiKeysAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-client/src/module_bindings/revoke_external_api_key_and_return_procedure.rs b/server-rs/crates/spacetime-client/src/module_bindings/revoke_external_api_key_and_return_procedure.rs
new file mode 100644
index 000000000..d893b2180
--- /dev/null
+++ b/server-rs/crates/spacetime-client/src/module_bindings/revoke_external_api_key_and_return_procedure.rs
@@ -0,0 +1,59 @@
+// THIS FILE IS AUTOMATICALLY GENERATED BY SPACETIMEDB. EDITS TO THIS FILE
+// WILL NOT BE SAVED. MODIFY TABLES IN YOUR MODULE SOURCE CODE INSTEAD.
+
+#![allow(unused, clippy::all)]
+use spacetimedb_sdk::__codegen::{self as __sdk, __lib, __sats, __ws};
+
+use super::external_api_key_procedure_result_type::ExternalApiKeyProcedureResult;
+use super::external_api_key_revoke_input_type::ExternalApiKeyRevokeInput;
+
+#[derive(__lib::ser::Serialize, __lib::de::Deserialize, Clone, PartialEq, Debug)]
+#[sats(crate = __lib)]
+struct RevokeExternalApiKeyAndReturnArgs {
+    pub input: ExternalApiKeyRevokeInput,
+}
+
+impl __sdk::InModule for RevokeExternalApiKeyAndReturnArgs {
+    type Module = super::RemoteModule;
+}
+
+#[allow(non_camel_case_types)]
+/// Extension trait for access to the procedure `revoke_external_api_key_and_return`.
+///
+/// Implemented for [`super::RemoteProcedures`].
+pub trait revoke_external_api_key_and_return {
+    fn revoke_external_api_key_and_return(&self, input: ExternalApiKeyRevokeInput) {
+        self.revoke_external_api_key_and_return_then(input, |_, _| {});
+    }
+
+    fn revoke_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyRevokeInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    );
+}
+
+impl revoke_external_api_key_and_return for super::RemoteProcedures {
+    fn revoke_external_api_key_and_return_then(
+        &self,
+        input: ExternalApiKeyRevokeInput,
+
+        __callback: impl FnOnce(
+                &super::ProcedureEventContext,
+                Result<ExternalApiKeyProcedureResult, __sdk::InternalError>,
+            ) + Send
+            + 'static,
+    ) {
+        self.imp
+            .invoke_procedure_with_callback::<_, ExternalApiKeyProcedureResult>(
+                "revoke_external_api_key_and_return",
+                RevokeExternalApiKeyAndReturnArgs { input },
+                __callback,
+            );
+    }
+}
diff --git a/server-rs/crates/spacetime-module/src/external_api_key_storage.rs b/server-rs/crates/spacetime-module/src/external_api_key_storage.rs
new file mode 100644
index 000000000..3b54d2bb0
--- /dev/null
+++ b/server-rs/crates/spacetime-module/src/external_api_key_storage.rs
@@ -0,0 +1,312 @@
+use crate::*;
+
+const EXTERNAL_API_KEY_MAX_NAME_CHARS: usize = 80;
+const EXTERNAL_API_KEY_DEFAULT_NAME: &str = "外部 API Key";
+const EXTERNAL_API_KEY_DEFAULT_SCOPES_JSON: &str =
+    "[\"editor:project\",\"editor:canvas\",\"editor:image-generate\"]";
+
+#[spacetimedb::table(
+    accessor = external_api_key,
+    index(accessor = by_external_api_key_owner_user_id, btree(columns = [owner_user_id]))
+)]
+pub struct ExternalApiKey {
+    #[primary_key]
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    #[unique]
+    pub key_hash: String,
+    pub scopes_json: String,
+    pub created_at: Timestamp,
+    pub last_used_at: Option<Timestamp>,
+    pub revoked_at: Option<Timestamp>,
+    pub updated_at: Timestamp,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeyCreateInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub key_hash: String,
+    pub scopes_json: String,
+    pub now_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeyListInput {
+    pub owner_user_id: String,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeyRevokeInput {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub revoked_at_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeyAuthenticateInput {
+    pub key_hash: String,
+    pub used_at_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeySnapshot {
+    pub key_id: String,
+    pub owner_user_id: String,
+    pub name: String,
+    pub key_prefix: String,
+    pub scopes_json: String,
+    pub created_at_micros: i64,
+    pub last_used_at_micros: Option<i64>,
+    pub revoked_at_micros: Option<i64>,
+    pub updated_at_micros: i64,
+}
+
+#[derive(Clone, Debug, PartialEq, Eq, SpacetimeType)]
+pub struct ExternalApiKeyProcedureResult {
+    pub ok: bool,
+    pub key: Option<ExternalApiKeySnapshot>,
+    pub keys: Vec<ExternalApiKeySnapshot>,
+    pub error_message: Option<String>,
+}
+
+#[spacetimedb::procedure]
+pub fn create_external_api_key_and_return(
+    ctx: &mut ProcedureContext,
+    input: ExternalApiKeyCreateInput,
+) -> ExternalApiKeyProcedureResult {
+    match ctx.try_with_tx(|tx| create_external_api_key(tx, input.clone())) {
+        Ok(key) => external_api_key_single_ok(key),
+        Err(message) => external_api_key_error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn list_external_api_keys_and_return(
+    ctx: &mut ProcedureContext,
+    input: ExternalApiKeyListInput,
+) -> ExternalApiKeyProcedureResult {
+    match ctx.try_with_tx(|tx| list_external_api_keys(tx, input.clone())) {
+        Ok(keys) => external_api_key_list_ok(keys),
+        Err(message) => external_api_key_error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn revoke_external_api_key_and_return(
+    ctx: &mut ProcedureContext,
+    input: ExternalApiKeyRevokeInput,
+) -> ExternalApiKeyProcedureResult {
+    match ctx.try_with_tx(|tx| revoke_external_api_key(tx, input.clone())) {
+        Ok(key) => external_api_key_single_ok(key),
+        Err(message) => external_api_key_error(message),
+    }
+}
+
+#[spacetimedb::procedure]
+pub fn authenticate_external_api_key_and_return(
+    ctx: &mut ProcedureContext,
+    input: ExternalApiKeyAuthenticateInput,
+) -> ExternalApiKeyProcedureResult {
+    match ctx.try_with_tx(|tx| authenticate_external_api_key(tx, input.clone())) {
+        Ok(key) => external_api_key_single_ok(key),
+        Err(message) => external_api_key_error(message),
+    }
+}
+
+fn create_external_api_key(
+    ctx: &ReducerContext,
+    input: ExternalApiKeyCreateInput,
+) -> Result<ExternalApiKeySnapshot, String> {
+    let key_id = normalize_required(&input.key_id, "external_api_key.key_id")?;
+    let owner_user_id = normalize_required(&input.owner_user_id, "external_api_key.owner_user_id")?;
+    let key_prefix = normalize_required(&input.key_prefix, "external_api_key.key_prefix")?;
+    let key_hash = normalize_required(&input.key_hash, "external_api_key.key_hash")?;
+    let scopes_json = normalize_scopes_json(input.scopes_json)?;
+    if ctx.db.external_api_key().key_id().find(&key_id).is_some() {
+        return Err("API Key 已存在".to_string());
+    }
+    if ctx
+        .db
+        .external_api_key()
+        .key_hash()
+        .find(&key_hash)
+        .is_some()
+    {
+        return Err("API Key 摘要已存在".to_string());
+    }
+    let now = Timestamp::from_micros_since_unix_epoch(input.now_micros);
+    ctx.db.external_api_key().insert(ExternalApiKey {
+        key_id: key_id.clone(),
+        owner_user_id,
+        name: normalize_key_name(input.name.as_str()),
+        key_prefix,
+        key_hash,
+        scopes_json,
+        created_at: now,
+        last_used_at: None,
+        revoked_at: None,
+        updated_at: now,
+    });
+    ctx.db
+        .external_api_key()
+        .key_id()
+        .find(&key_id)
+        .map(external_api_key_snapshot_from_row)
+        .ok_or_else(|| "API Key 创建失败".to_string())
+}
+
+fn list_external_api_keys(
+    ctx: &ReducerContext,
+    input: ExternalApiKeyListInput,
+) -> Result<Vec<ExternalApiKeySnapshot>, String> {
+    let owner_user_id = normalize_required(&input.owner_user_id, "external_api_key.owner_user_id")?;
+    let mut keys = ctx
+        .db
+        .external_api_key()
+        .by_external_api_key_owner_user_id()
+        .filter(&owner_user_id)
+        .map(external_api_key_snapshot_from_row)
+        .collect::<Vec<_>>();
+    keys.sort_by(|left, right| {
+        right
+            .created_at_micros
+            .cmp(&left.created_at_micros)
+            .then_with(|| right.key_id.cmp(&left.key_id))
+    });
+    Ok(keys)
+}
+
+fn revoke_external_api_key(
+    ctx: &ReducerContext,
+    input: ExternalApiKeyRevokeInput,
+) -> Result<ExternalApiKeySnapshot, String> {
+    let key_id = normalize_required(&input.key_id, "external_api_key.key_id")?;
+    let owner_user_id = normalize_required(&input.owner_user_id, "external_api_key.owner_user_id")?;
+    let row = ctx
+        .db
+        .external_api_key()
+        .key_id()
+        .find(&key_id)
+        .ok_or_else(|| "API Key 不存在".to_string())?;
+    if row.owner_user_id != owner_user_id {
+        return Err("无权访问该 API Key".to_string());
+    }
+    let now = Timestamp::from_micros_since_unix_epoch(input.revoked_at_micros);
+    ctx.db.external_api_key().key_id().delete(&key_id);
+    ctx.db.external_api_key().insert(ExternalApiKey {
+        revoked_at: row.revoked_at.or(Some(now)),
+        updated_at: now,
+        ..row
+    });
+    ctx.db
+        .external_api_key()
+        .key_id()
+        .find(&key_id)
+        .map(external_api_key_snapshot_from_row)
+        .ok_or_else(|| "API Key 撤销失败".to_string())
+}
+
+fn authenticate_external_api_key(
+    ctx: &ReducerContext,
+    input: ExternalApiKeyAuthenticateInput,
+) -> Result<ExternalApiKeySnapshot, String> {
+    let key_hash = normalize_required(&input.key_hash, "external_api_key.key_hash")?;
+    let row = ctx
+        .db
+        .external_api_key()
+        .key_hash()
+        .find(&key_hash)
+        .ok_or_else(|| "API Key 不存在或已失效".to_string())?;
+    if row.revoked_at.is_some() {
+        return Err("API Key 不存在或已失效".to_string());
+    }
+    let now = Timestamp::from_micros_since_unix_epoch(input.used_at_micros);
+    ctx.db.external_api_key().key_id().delete(&row.key_id);
+    ctx.db.external_api_key().insert(ExternalApiKey {
+        last_used_at: Some(now),
+        updated_at: now,
+        ..row
+    });
+    ctx.db
+        .external_api_key()
+        .key_hash()
+        .find(&key_hash)
+        .map(external_api_key_snapshot_from_row)
+        .ok_or_else(|| "API Key 校验失败".to_string())
+}
+
+fn external_api_key_snapshot_from_row(row: ExternalApiKey) -> ExternalApiKeySnapshot {
+    ExternalApiKeySnapshot {
+        key_id: row.key_id,
+        owner_user_id: row.owner_user_id,
+        name: row.name,
+        key_prefix: row.key_prefix,
+        scopes_json: row.scopes_json,
+        created_at_micros: row.created_at.to_micros_since_unix_epoch(),
+        last_used_at_micros: row
+            .last_used_at
+            .map(|value| value.to_micros_since_unix_epoch()),
+        revoked_at_micros: row
+            .revoked_at
+            .map(|value| value.to_micros_since_unix_epoch()),
+        updated_at_micros: row.updated_at.to_micros_since_unix_epoch(),
+    }
+}
+
+fn normalize_required(value: &str, field: &str) -> Result<String, String> {
+    let normalized = value.trim();
+    if normalized.is_empty() {
+        return Err(format!("{field} 不能为空"));
+    }
+    Ok(normalized.to_string())
+}
+
+fn normalize_key_name(value: &str) -> String {
+    let name = value.trim();
+    if name.is_empty() {
+        return EXTERNAL_API_KEY_DEFAULT_NAME.to_string();
+    }
+    name.chars().take(EXTERNAL_API_KEY_MAX_NAME_CHARS).collect()
+}
+
+fn normalize_scopes_json(value: String) -> Result<String, String> {
+    let normalized = value.trim();
+    if normalized.is_empty() {
+        return Ok(EXTERNAL_API_KEY_DEFAULT_SCOPES_JSON.to_string());
+    }
+    serde_json::from_str::<JsonValue>(normalized)
+        .map_err(|_| "API Key scopes 必须是合法 JSON".to_string())?;
+    Ok(normalized.to_string())
+}
+
+fn external_api_key_single_ok(key: ExternalApiKeySnapshot) -> ExternalApiKeyProcedureResult {
+    ExternalApiKeyProcedureResult {
+        ok: true,
+        key: Some(key),
+        keys: Vec::new(),
+        error_message: None,
+    }
+}
+
+fn external_api_key_list_ok(keys: Vec<ExternalApiKeySnapshot>) -> ExternalApiKeyProcedureResult {
+    ExternalApiKeyProcedureResult {
+        ok: true,
+        key: None,
+        keys,
+        error_message: None,
+    }
+}
+
+fn external_api_key_error(message: String) -> ExternalApiKeyProcedureResult {
+    ExternalApiKeyProcedureResult {
+        ok: false,
+        key: None,
+        keys: Vec::new(),
+        error_message: Some(message),
+    }
+}
diff --git a/server-rs/crates/spacetime-module/src/lib.rs b/server-rs/crates/spacetime-module/src/lib.rs
index 9a839f332..a6fe765b5 100644
--- a/server-rs/crates/spacetime-module/src/lib.rs
+++ b/server-rs/crates/spacetime-module/src/lib.rs
@@ -32,6 +32,7 @@ mod custom_world;
 mod domain_types;
 mod editor_project_storage;
 mod entry;
+mod external_api_key_storage;
 mod external_generation;
 mod gameplay;
 mod jump_hop;
@@ -54,6 +55,7 @@ pub use custom_world::*;
 pub use domain_types::*;
 pub use editor_project_storage::*;
 pub use entry::*;
+pub use external_api_key_storage::*;
 pub use external_generation::*;
 pub use gameplay::*;
 pub use jump_hop::*;
diff --git a/server-rs/crates/spacetime-module/src/migration.rs b/server-rs/crates/spacetime-module/src/migration.rs
index 4f1927027..19eb41724 100644
--- a/server-rs/crates/spacetime-module/src/migration.rs
+++ b/server-rs/crates/spacetime-module/src/migration.rs
@@ -229,6 +229,7 @@ macro_rules! migration_tables {
             asset_object,
             asset_entity_binding,
             asset_event,
+            external_api_key,
             editor_project,
             editor_canvas,
             editor_project_resource,
diff --git a/src/components/image-editor/ImageCanvasWorldView.test.tsx b/src/components/image-editor/ImageCanvasWorldView.test.tsx
index 52b5ec752..9ba108644 100644
--- a/src/components/image-editor/ImageCanvasWorldView.test.tsx
+++ b/src/components/image-editor/ImageCanvasWorldView.test.tsx
@@ -69,7 +69,6 @@ function renderWorldView(
     onLayerMouseEnter: vi.fn(),
     onLayerMouseLeave: vi.fn(),
     onOpenLayerMetadata: vi.fn(),
-    onUpdateLayerAssetKind: vi.fn(),
     onGenerationFramePointerDown: vi.fn(),
     onActivateGenerationDialog: vi.fn(),
     onCropExpandHandlePointerDown: vi.fn(),
@@ -146,27 +145,27 @@ describe('ImageCanvasWorldView', () => {
     expect(screen.getByText('角色')).toBeTruthy();
   });
 
-  it('shows unknown tag for untagged layers and lets users choose a tag', () => {
+  it('shows kind tag for tagged layers and omits the tag for untagged layers', () => {
     const layer = createLayer({ assetKind: null });
-    const { props } = renderWorldView({ layers: [layer] });
-
-    const layerButton = screen.getByRole('button', { name: '选择角色主图' });
-    const unknownTag = within(layerButton).getByRole('button', {
-      name: '素材标签：未知',
+    renderWorldView({
+      layers: [
+        layer,
+        createLayer({
+          id: 'layer-character',
+          resourceId: 'resource-character',
+          title: '角色标签图层',
+          assetKind: 'character',
+        }),
+      ],
     });
 
-    expect(unknownTag.textContent).toBe('未知');
-    expect(unknownTag.style.getPropertyValue('--image-canvas-editor-inverse-scale')).toBe(
-      `${1 / props.viewport.scale}`,
-    );
+    const layerButton = screen.getByRole('button', { name: '选择角色主图' });
+    const characterButton = screen.getByRole('button', {
+      name: '选择角色标签图层',
+    });
 
-    fireEvent.click(unknownTag);
-
-    const menu = screen.getByRole('menu', { name: '选择素材标签' });
-    fireEvent.click(within(menu).getByRole('menuitem', { name: '角色' }));
-
-    expect(props.onUpdateLayerAssetKind).toHaveBeenCalledWith(layer.id, 'character');
-    expect(props.onLayerClick).not.toHaveBeenCalled();
+    expect(within(layerButton).queryByText('未知')).toBeNull();
+    expect(within(characterButton).getByText('角色')).toBeTruthy();
   });
 
   it('renders snap guides, marquee and floating generation status', () => {
diff --git a/src/components/platform-entry/PlatformProfileApiKeysModal.tsx b/src/components/platform-entry/PlatformProfileApiKeysModal.tsx
new file mode 100644
index 000000000..05a8063a6
--- /dev/null
+++ b/src/components/platform-entry/PlatformProfileApiKeysModal.tsx
@@ -0,0 +1,305 @@
+import { KeyRound, ShieldCheck, Trash2 } from 'lucide-react';
+import { useCallback, useEffect, useMemo, useState } from 'react';
+
+import type {
+  ExternalApiKeyCreateResponse,
+  ExternalApiKeyProfile,
+} from '../../../packages/shared/src/contracts/runtime';
+import {
+  createRpgProfileExternalApiKey,
+  listRpgProfileExternalApiKeys,
+  revokeRpgProfileExternalApiKey,
+} from '../../services/rpg-entry/rpgProfileClient';
+import { CopyFeedbackButton } from '../common/CopyFeedbackButton';
+import { PlatformActionButton } from '../common/PlatformActionButton';
+import { PlatformAsyncStatePanel } from '../common/PlatformAsyncStatePanel';
+import { PlatformEmptyState } from '../common/PlatformEmptyState';
+import { PlatformProfileContentRow } from '../common/PlatformProfileContentRow';
+import { PlatformProfileSkeletonList } from '../common/PlatformProfileSkeletonList';
+import { PlatformProfileSummaryHeader } from '../common/PlatformProfileSummaryHeader';
+import { PlatformStatusMessage } from '../common/PlatformStatusMessage';
+import { PlatformTextField } from '../common/PlatformTextField';
+import { useCopyFeedback } from '../common/useCopyFeedback';
+import { formatPlatformWorldTime } from '../rpg-entry/rpgEntryWorldPresentation';
+import { PlatformProfileSecondaryModalShell } from './PlatformProfileModalShell';
+
+type PlatformProfileApiKeysModalProps = {
+  onClose: () => void;
+};
+
+function isActiveExternalApiKey(key: ExternalApiKeyProfile) {
+  return !key.revokedAt;
+}
+
+function buildApiKeyTimeLabel(value: string | null) {
+  return value ? formatPlatformWorldTime(value) : '尚未使用';
+}
+
+function buildApiKeyScopeLabel(scopes: string[]) {
+  return scopes.length > 0 ? scopes.join(' / ') : '默认权限';
+}
+
+/**
+ * 开发者 API Key 管理弹窗。
+ * 明文 Key 只保留在本次创建后的组件状态里，关闭弹窗后即丢弃。
+ */
+export function PlatformProfileApiKeysModal({
+  onClose,
+}: PlatformProfileApiKeysModalProps) {
+  const [keys, setKeys] = useState<ExternalApiKeyProfile[]>([]);
+  const [isLoading, setIsLoading] = useState(true);
+  const [error, setError] = useState<string | null>(null);
+  const [nameInput, setNameInput] = useState('外部 API Key');
+  const [createdKey, setCreatedKey] =
+    useState<ExternalApiKeyCreateResponse | null>(null);
+  const [isCreating, setIsCreating] = useState(false);
+  const [revokingKeyId, setRevokingKeyId] = useState<string | null>(null);
+  const { copyState, copyText } = useCopyFeedback();
+
+  const activeKeys = useMemo(
+    () => keys.filter(isActiveExternalApiKey),
+    [keys],
+  );
+  const shouldShowBlockingError = Boolean(error && !isLoading && keys.length === 0);
+
+  const loadKeys = useCallback(() => {
+    setIsLoading(true);
+    setError(null);
+    void listRpgProfileExternalApiKeys()
+      .then((response) => {
+        setKeys(response.keys);
+      })
+      .catch((loadError: unknown) => {
+        setError(loadError instanceof Error ? loadError.message : '读取 API Key 失败');
+      })
+      .finally(() => setIsLoading(false));
+  }, []);
+
+  useEffect(() => {
+    loadKeys();
+  }, [loadKeys]);
+
+  const createKey = useCallback(() => {
+    if (isCreating) {
+      return;
+    }
+    setIsCreating(true);
+    setError(null);
+    setCreatedKey(null);
+    void createRpgProfileExternalApiKey(nameInput)
+      .then((response) => {
+        setCreatedKey(response);
+        setKeys((current) => [
+          response.key,
+          ...current.filter((key) => key.keyId !== response.key.keyId),
+        ]);
+        setNameInput('外部 API Key');
+      })
+      .catch((createError: unknown) => {
+        setError(
+          createError instanceof Error ? createError.message : '创建 API Key 失败',
+        );
+      })
+      .finally(() => setIsCreating(false));
+  }, [isCreating, nameInput]);
+
+  const revokeKey = useCallback((keyId: string) => {
+    setRevokingKeyId(keyId);
+    setError(null);
+    void revokeRpgProfileExternalApiKey(keyId)
+      .then((response) => {
+        setKeys((current) =>
+          current.map((key) =>
+            key.keyId === response.key.keyId ? response.key : key,
+          ),
+        );
+        setCreatedKey((current) =>
+          current?.key.keyId === response.key.keyId ? null : current,
+        );
+      })
+      .catch((revokeError: unknown) => {
+        setError(
+          revokeError instanceof Error ? revokeError.message : '撤销 API Key 失败',
+        );
+      })
+      .finally(() => setRevokingKeyId(null));
+  }, []);
+
+  return (
+    <PlatformProfileSecondaryModalShell
+      title="开发者 API Key"
+      onClose={onClose}
+      closeLabel="关闭开发者 API Key"
+      closeButtonClassName="bg-white/80"
+      panelClassName="relative !max-h-[min(92vh,44rem)] !max-w-[34rem] bg-[linear-gradient(180deg,#f8fbff_0%,#ffffff_42%,#f8fafc_100%)] text-zinc-950 shadow-2xl !rounded-[1.35rem] sm:!rounded-[1.35rem]"
+      contentClassName="relative max-h-[min(92vh,44rem)] overflow-y-auto px-4 pb-5 pt-4 sm:px-5"
+    >
+      <PlatformProfileSummaryHeader
+        kicker="OPENAPI"
+        title="开发者 API Key"
+        badge={
+          <span className="inline-flex items-center gap-1.5 rounded-full bg-white/76 px-3 py-1 text-xs font-black text-sky-700 shadow-sm ring-1 ring-sky-100">
+            <ShieldCheck className="h-3.5 w-3.5" />
+            {activeKeys.length} 个可用
+          </span>
+        }
+      />
+
+      <div className="mt-5 rounded-[1.1rem] border border-sky-100 bg-white/82 p-3 shadow-sm">
+        <div className="flex items-end gap-2">
+          <label className="min-w-0 flex-1">
+            <span className="mb-1.5 block text-xs font-black text-zinc-500">
+              名称
+            </span>
+            <PlatformTextField
+              value={nameInput}
+              density="compact"
+              tone="sky"
+              onChange={(event) => setNameInput(event.target.value)}
+            />
+          </label>
+          <PlatformActionButton
+            surface="profile"
+            size="sm"
+            className="shrink-0"
+            disabled={isCreating}
+            onClick={createKey}
+          >
+            <KeyRound className="h-4 w-4" />
+            {isCreating ? '创建中' : '创建'}
+          </PlatformActionButton>
+        </div>
+      </div>
+
+      {createdKey ? (
+        <PlatformStatusMessage
+          tone="success"
+          surface="profile"
+          size="sm"
+          className="mt-4 rounded-2xl font-semibold"
+        >
+          <div className="text-xs font-black text-emerald-700">新 Key</div>
+          <div className="mt-2 break-all rounded-xl bg-white/80 px-3 py-2 font-mono text-[12px] text-zinc-800">
+            {createdKey.apiKey}
+          </div>
+          <CopyFeedbackButton
+            state={copyState}
+            idleLabel="复制 Key"
+            actionSurface="profile"
+            actionTone="primary"
+            actionSize="xs"
+            className="mt-3"
+            onClick={() => void copyText(createdKey.apiKey)}
+          />
+        </PlatformStatusMessage>
+      ) : null}
+
+      <PlatformAsyncStatePanel
+        errorState={
+          shouldShowBlockingError ? (
+            <PlatformStatusMessage
+              tone="error"
+              surface="profile"
+              size="xs"
+              className="mt-4 rounded-2xl font-semibold"
+            >
+              <div>{error}</div>
+              <PlatformActionButton
+                surface="profile"
+                size="xs"
+                className="mt-3"
+                onClick={loadKeys}
+              >
+                重新加载
+              </PlatformActionButton>
+            </PlatformStatusMessage>
+          ) : null
+        }
+        isLoading={isLoading}
+        loadingState={
+          <PlatformProfileSkeletonList
+            count={3}
+            containerClassName="mt-5 space-y-3"
+            itemClassName="h-20 rounded-2xl bg-white/70"
+          />
+        }
+        isEmpty={keys.length === 0}
+        emptyState={
+          <PlatformEmptyState
+            surface="subpanel"
+            size="inline"
+            className="mt-5 py-8"
+          >
+            暂无 API Key
+          </PlatformEmptyState>
+        }
+      >
+        {error ? (
+          <PlatformStatusMessage
+            tone="error"
+            surface="profile"
+            size="xs"
+            className="mb-3 rounded-2xl font-semibold"
+          >
+            {error}
+          </PlatformStatusMessage>
+        ) : null}
+        <div className="mt-5 space-y-2.5">
+          {keys.map((key) => {
+            const isActive = isActiveExternalApiKey(key);
+            const isRevoking = revokingKeyId === key.keyId;
+            return (
+              <PlatformProfileContentRow
+                key={key.keyId}
+                surface="flat"
+                radius="xs"
+                padding="none"
+                className="flex items-start justify-between gap-3 px-3 py-3 shadow-sm"
+              >
+                <div className="min-w-0">
+                  <div className="flex min-w-0 items-center gap-2">
+                    <span className="truncate text-sm font-black text-zinc-900">
+                      {key.name}
+                    </span>
+                    <span
+                      className={`shrink-0 rounded-full px-2 py-0.5 text-[10px] font-black ${
+                        isActive
+                          ? 'bg-emerald-50 text-emerald-700'
+                          : 'bg-zinc-100 text-zinc-500'
+                      }`}
+                    >
+                      {isActive ? '可用' : '已撤销'}
+                    </span>
+                  </div>
+                  <div className="mt-1 font-mono text-xs font-semibold text-zinc-500">
+                    {key.keyPrefix}...
+                  </div>
+                  <div className="mt-2 text-[11px] font-semibold text-zinc-400">
+                    {buildApiKeyScopeLabel(key.scopes)}
+                  </div>
+                  <div className="mt-1 text-[11px] font-semibold text-zinc-400">
+                    创建 {buildApiKeyTimeLabel(key.createdAt)} · 最近使用{' '}
+                    {buildApiKeyTimeLabel(key.lastUsedAt)}
+                  </div>
+                </div>
+                {isActive ? (
+                  <PlatformActionButton
+                    surface="profile"
+                    tone="danger"
+                    size="xs"
+                    className="shrink-0"
+                    disabled={isRevoking}
+                    onClick={() => revokeKey(key.keyId)}
+                  >
+                    <Trash2 className="h-3.5 w-3.5" />
+                    {isRevoking ? '撤销中' : '撤销'}
+                  </PlatformActionButton>
+                ) : null}
+              </PlatformProfileContentRow>
+            );
+          })}
+        </div>
+      </PlatformAsyncStatePanel>
+    </PlatformProfileSecondaryModalShell>
+  );
+}
diff --git a/src/components/rpg-entry/RpgEntryHomeView.recharge.test.tsx b/src/components/rpg-entry/RpgEntryHomeView.recharge.test.tsx
index d98027908..b5ef1a8d5 100644
--- a/src/components/rpg-entry/RpgEntryHomeView.recharge.test.tsx
+++ b/src/components/rpg-entry/RpgEntryHomeView.recharge.test.tsx
@@ -52,6 +52,9 @@ const {
   mockGetRpgProfileRechargeCenter,
   mockGetRpgProfileTasks,
   mockGetRpgProfileWalletLedger,
+  mockListRpgProfileExternalApiKeys,
+  mockCreateRpgProfileExternalApiKey,
+  mockRevokeRpgProfileExternalApiKey,
   mockRedeemRpgProfileReferralInviteCode,
   mockWatchWechatRpgProfileRechargeOrder,
 } = vi.hoisted(() => {
@@ -327,6 +330,46 @@ const {
         },
       ],
     })),
+    mockListRpgProfileExternalApiKeys: vi.fn(async () => ({
+      keys: [
+        {
+          keyId: 'api-key-1',
+          name: '默认 Key',
+          keyPrefix: 'tnr_sk_existing_1',
+          scopes: ['editor:project', 'editor:canvas', 'editor:image-generate'],
+          createdAt: '2026-06-19T08:00:00Z',
+          lastUsedAt: null,
+          revokedAt: null,
+          updatedAt: '2026-06-19T08:00:00Z',
+        },
+      ],
+    })),
+    mockCreateRpgProfileExternalApiKey: vi.fn(async () => ({
+      apiKey: 'tnr_sk_created.secret',
+      key: {
+        keyId: 'api-key-created',
+        name: '测试 Key',
+        keyPrefix: 'tnr_sk_created',
+        scopes: ['editor:project', 'editor:canvas', 'editor:image-generate'],
+        createdAt: '2026-06-19T09:00:00Z',
+        lastUsedAt: null,
+        revokedAt: null,
+        updatedAt: '2026-06-19T09:00:00Z',
+      },
+    })),
+    mockRevokeRpgProfileExternalApiKey: vi.fn(async (keyId: string) => ({
+      key: {
+        keyId,
+        name: keyId === 'api-key-created' ? '测试 Key' : '默认 Key',
+        keyPrefix:
+          keyId === 'api-key-created' ? 'tnr_sk_created' : 'tnr_sk_existing_1',
+        scopes: ['editor:project', 'editor:canvas', 'editor:image-generate'],
+        createdAt: '2026-06-19T08:00:00Z',
+        lastUsedAt: null,
+        revokedAt: '2026-06-19T10:00:00Z',
+        updatedAt: '2026-06-19T10:00:00Z',
+      },
+    })),
     mockWatchWechatRpgProfileRechargeOrder: vi.fn(async () => null),
   };
 });
@@ -406,6 +449,9 @@ vi.mock('../../services/rpg-entry/rpgProfileClient', () => ({
   getRpgProfileWalletLedger: mockGetRpgProfileWalletLedger,
   claimRpgProfileTaskReward: mockClaimRpgProfileTaskReward,
   redeemRpgProfileReferralInviteCode: mockRedeemRpgProfileReferralInviteCode,
+  listRpgProfileExternalApiKeys: mockListRpgProfileExternalApiKeys,
+  createRpgProfileExternalApiKey: mockCreateRpgProfileExternalApiKey,
+  revokeRpgProfileExternalApiKey: mockRevokeRpgProfileExternalApiKey,
   getRpgProfileRechargeCenter: mockGetRpgProfileRechargeCenter,
   createRpgProfileRechargeOrder: mockCreateRpgProfileRechargeOrder,
   confirmWechatRpgProfileRechargeOrder:
@@ -3112,7 +3158,10 @@ test('mobile profile page matches the reference layout sections', async () => {
   ).toBeNull();
   expect(
     settingsRegion.querySelectorAll('.platform-profile-settings-row'),
-  ).toHaveLength(1);
+  ).toHaveLength(2);
+  expect(
+    within(settingsRegion).getByRole('button', { name: /开发者 API Key/u }),
+  ).toBeTruthy();
   expect(
     within(settingsRegion).queryByRole('button', { name: /存档/u }),
   ).toBeNull();
@@ -3575,6 +3624,9 @@ test('profile page shows legal entries and hides archive shortcuts', async () =>
   expect(
     within(settingsRegion).getByRole('button', { name: /通用设置/u }),
   ).toBeTruthy();
+  expect(
+    within(settingsRegion).getByRole('button', { name: /开发者 API Key/u }),
+  ).toBeTruthy();
   expect(
     within(settingsRegion).queryByRole('button', { name: /主题设置/u }),
   ).toBeNull();
@@ -3610,6 +3662,48 @@ test('profile page shows legal entries and hides archive shortcuts', async () =>
   expect(await screen.findByRole('dialog', { name: '隐私政策' })).toBeTruthy();
 });
 
+test('profile developer api key entry opens management modal and supports create and revoke', async () => {
+  const user = userEvent.setup();
+
+  renderProfileView();
+
+  await user.click(screen.getByRole('button', { name: /开发者 API Key/u }));
+
+  const dialog = await screen.findByRole('dialog', {
+    name: '开发者 API Key',
+  });
+
+  expect(mockListRpgProfileExternalApiKeys).toHaveBeenCalledTimes(1);
+  expect(within(dialog).getByText('默认 Key')).toBeTruthy();
+  expect(within(dialog).getByText('tnr_sk_existing_1...')).toBeTruthy();
+  expect(within(dialog).queryByText('tnr_sk_created.secret')).toBeNull();
+
+  const nameInput = within(dialog).getByLabelText('名称');
+  await user.clear(nameInput);
+  await user.type(nameInput, '测试 Key');
+  await user.click(within(dialog).getByRole('button', { name: /创建/u }));
+
+  await waitFor(() => {
+    expect(mockCreateRpgProfileExternalApiKey).toHaveBeenCalledWith('测试 Key');
+  });
+  expect(await within(dialog).findByText('tnr_sk_created.secret')).toBeTruthy();
+  expect(within(dialog).getByText('测试 Key')).toBeTruthy();
+
+  const revokeButtons = within(dialog).getAllByRole('button', {
+    name: /撤销/u,
+  });
+  expect(revokeButtons.length).toBeGreaterThan(0);
+  const revokeButton = revokeButtons[0];
+  if (!revokeButton) {
+    throw new Error('撤销按钮不存在');
+  }
+  await user.click(revokeButton);
+  await waitFor(() => {
+    expect(mockRevokeRpgProfileExternalApiKey).toHaveBeenCalled();
+  });
+  expect(within(dialog).getByText('已撤销')).toBeTruthy();
+});
+
 test('shows a reachable login entry outside mobile recommend tab', async () => {
   const user = userEvent.setup();
   const openLoginModal = vi.fn();
diff --git a/src/components/rpg-entry/RpgEntryHomeView.tsx b/src/components/rpg-entry/RpgEntryHomeView.tsx
index 06408b9f5..5a42448ac 100644
--- a/src/components/rpg-entry/RpgEntryHomeView.tsx
+++ b/src/components/rpg-entry/RpgEntryHomeView.tsx
@@ -12,6 +12,7 @@ import {
   Gamepad2,
   GitFork,
   Heart,
+  KeyRound,
   LogIn,
   MessageCircle,
   Palette,
@@ -127,6 +128,7 @@ import {
 } from '../platform-entry/PlatformProfilePrimitives';
 import { PlatformProfileModalShell } from '../platform-entry/PlatformProfileModalShell';
 import { PlatformProfileGenerationQueueCard } from '../platform-entry/PlatformProfileGenerationQueueCard';
+import { PlatformProfileApiKeysModal } from '../platform-entry/PlatformProfileApiKeysModal';
 import { PlatformProfilePlayedWorksModal } from '../platform-entry/PlatformProfilePlayedWorksModal';
 import { PlatformProfileQrScannerModal } from '../platform-entry/PlatformProfileQrScannerModal';
 import { PlatformProfileRechargeModal } from '../platform-entry/PlatformProfileRechargeModal';
@@ -2651,6 +2653,7 @@ export function RpgEntryHomeView({
   });
   const [avatarError, setAvatarError] = useState<string | null>(null);
   const [isSavingAvatar, setIsSavingAvatar] = useState(false);
+  const [isApiKeysModalOpen, setIsApiKeysModalOpen] = useState(false);
   const currentUser = authUi?.user ?? null;
   const isAuthenticated = Boolean(currentUser);
   const {
@@ -4456,6 +4459,11 @@ export function RpgEntryHomeView({
               icon={Settings}
               onClick={() => authUi.openSettingsModal()}
             />
+            <ProfileSettingsRow
+              label="开发者 API Key"
+              icon={KeyRound}
+              onClick={() => setIsApiKeysModalOpen(true)}
+            />
           </section>
 
           <ProfileLegalSection onOpenDocument={setActiveLegalDocumentId} />
@@ -4913,6 +4921,11 @@ export function RpgEntryHomeView({
       }}
     />
   ) : null;
+  const apiKeysModal: ReactNode = isApiKeysModalOpen ? (
+    <PlatformProfileApiKeysModal
+      onClose={() => setIsApiKeysModalOpen(false)}
+    />
+  ) : null;
 
   if (!isDesktopLayout) {
     const isMobileRecommendTab = activeTab === 'home';
@@ -5021,6 +5034,7 @@ export function RpgEntryHomeView({
           ) : null}
           {rewardCodeModal}
           {rechargeModal}
+          {apiKeysModal}
           {rechargePaymentResultModal}
           {qrScannerModal}
           {categoryFilterDialog}
@@ -5178,6 +5192,7 @@ export function RpgEntryHomeView({
       </div>
       {rewardCodeModal}
       {rechargeModal}
+      {apiKeysModal}
       {rechargePaymentResultModal}
       {categoryFilterDialog}
       {isTaskCenterOpen ? (
diff --git a/src/services/rpg-entry/rpgProfileClient.test.ts b/src/services/rpg-entry/rpgProfileClient.test.ts
index 68d292b21..5b46128fe 100644
--- a/src/services/rpg-entry/rpgProfileClient.test.ts
+++ b/src/services/rpg-entry/rpgProfileClient.test.ts
@@ -7,8 +7,11 @@ const { fetchWithApiAuthMock, requestJsonMock } = vi.hoisted(() => ({
 
 import {
   clearRpgProfileBrowseHistory,
+  createRpgProfileExternalApiKey,
   listRpgProfileBrowseHistory,
+  listRpgProfileExternalApiKeys,
   listRpgProfileSaveArchives,
+  revokeRpgProfileExternalApiKey,
   resumeRpgProfileSaveArchive,
   submitRpgProfileFeedback,
   syncRpgProfileBrowseHistory,
@@ -199,6 +202,64 @@ describe('rpgProfileClient save archive routes', () => {
   });
 });
 
+describe('rpgProfileClient external api key routes', () => {
+  beforeEach(() => {
+    requestJsonMock.mockReset();
+    requestJsonMock.mockResolvedValue({ keys: [] });
+  });
+
+  it('lists profile api keys from the profile route', async () => {
+    await listRpgProfileExternalApiKeys();
+
+    expect(requestJsonMock).toHaveBeenCalledWith(
+      '/api/profile/api-keys',
+      expect.objectContaining({ method: 'GET' }),
+      '读取 API Key 失败',
+      expect.objectContaining({
+        retry: expect.objectContaining({ maxRetries: 1 }),
+      }),
+    );
+  });
+
+  it('creates profile api keys through the profile route', async () => {
+    await createRpgProfileExternalApiKey('测试 Key');
+
+    expect(requestJsonMock).toHaveBeenCalledWith(
+      '/api/profile/api-keys',
+      expect.objectContaining({
+        method: 'POST',
+        headers: { 'Content-Type': 'application/json' },
+      }),
+      '创建 API Key 失败',
+      expect.objectContaining({
+        retry: expect.objectContaining({
+          maxRetries: 1,
+          retryUnsafeMethods: true,
+        }),
+      }),
+    );
+    expect(JSON.parse(requestJsonMock.mock.calls[0][1].body)).toEqual({
+      name: '测试 Key',
+    });
+  });
+
+  it('revokes profile api keys through the profile route', async () => {
+    await revokeRpgProfileExternalApiKey('key:1');
+
+    expect(requestJsonMock).toHaveBeenCalledWith(
+      '/api/profile/api-keys/key%3A1',
+      expect.objectContaining({ method: 'DELETE' }),
+      '撤销 API Key 失败',
+      expect.objectContaining({
+        retry: expect.objectContaining({
+          maxRetries: 1,
+          retryUnsafeMethods: true,
+        }),
+      }),
+    );
+  });
+});
+
 describe('rpgProfileClient feedback routes', () => {
   beforeEach(() => {
     requestJsonMock.mockReset();
diff --git a/src/services/rpg-entry/rpgProfileClient.ts b/src/services/rpg-entry/rpgProfileClient.ts
index 8aab97bc9..53f3facad 100644
--- a/src/services/rpg-entry/rpgProfileClient.ts
+++ b/src/services/rpg-entry/rpgProfileClient.ts
@@ -2,6 +2,9 @@ import type {
   ClaimProfileTaskRewardResponse,
   ConfirmWechatProfileRechargeOrderResponse,
   CreateProfileRechargeOrderResponse,
+  ExternalApiKeyCreateResponse,
+  ExternalApiKeyListResponse,
+  ExternalApiKeyMutationResponse,
   PlatformBrowseHistoryBatchSyncRequest,
   PlatformBrowseHistoryResponse,
   PlatformBrowseHistoryWriteEntry,
@@ -79,6 +82,45 @@ export function getRpgProfileWalletLedger(options: RuntimeRequestOptions = {}) {
   );
 }
 
+export function listRpgProfileExternalApiKeys(
+  options: RuntimeRequestOptions = {},
+) {
+  return requestRpgRuntimeJson<ExternalApiKeyListResponse>(
+    '/profile/api-keys',
+    { method: 'GET' },
+    '读取 API Key 失败',
+    options,
+  );
+}
+
+export function createRpgProfileExternalApiKey(
+  name: string,
+  options: RuntimeRequestOptions = {},
+) {
+  return requestRpgRuntimeJson<ExternalApiKeyCreateResponse>(
+    '/profile/api-keys',
+    {
+      method: 'POST',
+      headers: { 'Content-Type': 'application/json' },
+      body: JSON.stringify({ name }),
+    },
+    '创建 API Key 失败',
+    options,
+  );
+}
+
+export function revokeRpgProfileExternalApiKey(
+  keyId: string,
+  options: RuntimeRequestOptions = {},
+) {
+  return requestRpgRuntimeJson<ExternalApiKeyMutationResponse>(
+    `/profile/api-keys/${encodeURIComponent(keyId)}`,
+    { method: 'DELETE' },
+    '撤销 API Key 失败',
+    options,
+  );
+}
+
 export function getRpgProfileRechargeCenter(
   options: RuntimeRequestOptions = {},
 ) {