同步 AGC 0.1.6 主线

合并最新 master 的标准版版本升级

保留 Game Chat 完全删除并更新版本一致性门禁

纳入资源编辑与直接运行时修复

apps/ai-game-creator-shell/package.json

@@ -1,7 +1,7 @@
 {
   "name": "@genarrative/ai-game-creator-shell",
   "private": true,
-  "version": "0.1.5",
+  "version": "0.1.6",
   "type": "module",
   "scripts": {
     "dev": "node scripts/start-tauri-dev.mjs",

apps/ai-game-creator-shell/scripts/check-config.mjs

@@ -1544,11 +1544,11 @@ if (
 }
 
 if (
-  tauriConfig.version !== '0.1.5' ||
-  packageConfig.version !== '0.1.5' ||
-  cargoPackageVersion !== '0.1.5'
+  tauriConfig.version !== '0.1.6' ||
+  packageConfig.version !== '0.1.6' ||
+  cargoPackageVersion !== '0.1.6'
 ) {
-  throw new Error('AI game creator standard release must remain version 0.1.5');
+  throw new Error('AI game creator standard release must remain version 0.1.6');
 }
 
 const devServerSource = fs.readFileSync(

apps/ai-game-creator-shell/src-tauri/Cargo.lock

@@ -1695,7 +1695,7 @@ dependencies = [
 
 [[package]]
 name = "genarrative-ai-game-creator-shell"
-version = "0.1.5"
+version = "0.1.6"
 dependencies = [
  "agent-runtime-core",
  "axum",

apps/ai-game-creator-shell/src-tauri/Cargo.toml

@@ -1,6 +1,6 @@
 [package]
 name = "genarrative-ai-game-creator-shell"
-version = "0.1.5"
+version = "0.1.6"
 edition = "2021"
 publish = false
 

apps/ai-game-creator-shell/src-tauri/src/agent/direct_runtime.rs

@@ -13,7 +13,7 @@ const MAX_DIRECT_HOME_ATTACHMENT_MEDIA_TYPE_CHARS: usize = 96;
 const MIN_DIRECT_CLIENT_TURN_ID_CHARS: usize = 6;
 const MAX_DIRECT_CLIENT_TURN_ID_CHARS: usize = 160;
 const DIRECT_TAONIER_IDENTITY_GUIDANCE: &str = "对外身份合同：你是“陶泥儿”，是 Genarrative 的游戏创作助手。用户询问你是谁、你的名称或能力时，以陶泥儿的身份回答；不要把 Codex、ChatGPT、OpenAI、模型、通用 AI 助手或内部执行智能体当作自己的名称或对外身份。Codex app-server 仅是客户端内部执行技术；只有用户明确询问底层实现时才可如实说明，同时仍以陶泥儿自称。";
-const DIRECT_AGC_ENGINEERING_GUIDANCE: &str = "AGC 工程合同：当前 Codex cwd 是项目真实 `game/` 源码目录，只允许把项目源码写入该目录；`../assets/` 只能按审核 Skill 或 `agc_tools` 返回的相对路径使用，不要用原生文件/命令工具遍历父目录；`.agent/` 和项目根由客户端维护，不能请求扩权或直接改写。DirectProject 提供 Codex 原生文件、搜索、命令、图片查看、Skill，以及经审核的 `agc_tools` MCP；浏览器试玩、平台美术、资源登记和搜索等带 AGC 账本的动作使用 `agc_tools`。按用户意图自行选择并执行，不要等待 Supervisor、harness 或宿主规划器。不要读取或输出凭据、Token、Cookie、auth.json、.env 或宿主私密路径。项目锁、付费提交、幂等账本、下载校验和客户端投影仍由客户端确定性掌管。游戏文件真实变化后由客户端登记资源和版本，Codex 不直接保存或伪造项目版本。";
+const DIRECT_AGC_ENGINEERING_GUIDANCE: &str = "AGC 工程合同：当前 Codex cwd 是项目真实 `game/` 源码目录，只允许把项目源码写入该目录；原生文件工具、原生 patch 和命令参数中的文件路径必须相对于当前 cwd：合法写法是 `index.html`、`style.css`、`game.js`，禁止写 `game/index.html`、`../game/index.html`、项目根绝对路径或任何其它父目录路径；`game/...` 只用于 AGC 回执、manifest 和客户端投影，不用于 cwd 内的原生 patch。`../assets/` 只能按审核 Skill 或 `agc_tools` 返回的相对路径使用，不要用原生文件/命令工具遍历父目录；`.agent/` 和项目根由客户端维护，不能请求扩权或直接改写。DirectProject 提供 Codex 原生文件、搜索、命令、图片查看、Skill，以及经审核的 `agc_tools` MCP；浏览器试玩、平台美术、资源登记和搜索等带 AGC 账本的动作使用 `agc_tools`。按用户意图自行选择并执行，不要等待 Supervisor、harness 或宿主规划器。不要读取或输出凭据、Token、Cookie、auth.json、.env 或宿主私密路径。项目锁、付费提交、幂等账本、下载校验和客户端投影仍由客户端确定性掌管。游戏文件真实变化后由客户端登记资源和版本，Codex 不直接保存或伪造项目版本。";
 const DIRECT_CODEX_ART_SPEC_ASSET_PATH: &str = "assets/art-spec.png";
 const DIRECT_CODEX_BACKGROUND_ASSET_PATH: &str = "assets/direct-game-background.png";
 const DIRECT_CODEX_SPRITESHEET_ASSET_PATH: &str = "assets/art-spritesheet.png";
@@ -4406,6 +4406,8 @@ mod tests {
         assert!(!prompt.contains("你是 Codex"));
         assert!(prompt.contains("不要等待 Supervisor"));
         assert!(prompt.contains("提示词与技能"));
+        assert!(prompt.contains("合法写法是 `index.html`、`style.css`、`game.js`"));
+        assert!(prompt.contains("禁止写 `game/index.html`、`../game/index.html`"));
     }
 
     #[test]

apps/ai-game-creator-shell/src-tauri/src/project/resource_editor.rs

@@ -4732,6 +4732,21 @@ fn resource_edit_pending_is_visible_to_current_principal(
     }
 }
 
+/// A task-scoped Developer Key is deliberately independent from the GUI's platform session.
+/// When credentials are already resolved for the current operation, an absent session means
+/// Developer mode and must not be filled from the process-global account snapshot.
+fn select_resource_edit_frozen_platform_session(
+    remote_credentials: Option<&(String, String, Option<PlatformSessionSnapshot>)>,
+    is_remote_media: bool,
+    current_session: Option<PlatformSessionSnapshot>,
+) -> Option<PlatformSessionSnapshot> {
+    match remote_credentials {
+        Some((_, _, frozen_session)) => frozen_session.clone(),
+        None if is_remote_media => current_session,
+        None => None,
+    }
+}
+
 pub(crate) async fn request_resource_edit_service_identity_confirmation_at(
     input: RequestResourceEditServiceIdentityConfirmationInput,
 ) -> Result<ResourceEditServiceIdentityConfirmation, String> {
@@ -5201,16 +5216,11 @@ pub(crate) async fn derive_local_project_resource_at(
     } else {
         None
     };
-    let frozen_platform_session = remote_credentials
-        .as_ref()
-        .and_then(|(_, _, session)| session.clone())
-        .or_else(|| {
-            input
-                .edit_kind
-                .is_remote_media()
-                .then(current_platform_session)
-                .flatten()
-        });
+    let frozen_platform_session = select_resource_edit_frozen_platform_session(
+        remote_credentials.as_ref(),
+        input.edit_kind.is_remote_media(),
+        current_platform_session(),
+    );
     if input.edit_kind.is_remote_media()
         && ledger.platform_owner_user_id.is_some()
         && frozen_platform_session.is_none()
@@ -5337,6 +5347,41 @@ mod tests {
 
     const PROJECT_ID: &str = "resource-editor-test-project";
 
+    #[test]
+    fn developer_credentials_do_not_inherit_gui_platform_session() {
+        let gui_session = PlatformSessionSnapshot {
+            user_id: "gui-owner".to_string(),
+            access_token: "gui-token".to_string(),
+            api_base_url: "https://dev.genarrative.world".to_string(),
+            generation: 7,
+        };
+        let developer_credentials = (
+            "https://dev.genarrative.world".to_string(),
+            "tnr_sk_direct_fixture".to_string(),
+            None,
+        );
+        assert_eq!(
+            select_resource_edit_frozen_platform_session(
+                Some(&developer_credentials),
+                true,
+                Some(gui_session.clone()),
+            ),
+            None,
+            "Developer Key mode must not be paired with the GUI token snapshot"
+        );
+
+        let platform_credentials = (
+            gui_session.api_base_url.clone(),
+            gui_session.access_token.clone(),
+            Some(gui_session.clone()),
+        );
+        assert_eq!(
+            select_resource_edit_frozen_platform_session(Some(&platform_credentials), true, None,),
+            Some(gui_session),
+            "platform mode must retain the session captured with its credentials"
+        );
+    }
+
     async fn with_test_external_editor_credentials<T>(
         api_base_url: &str,
         api_key: &str,

apps/ai-game-creator-shell/src-tauri/tauri.conf.json

@@ -1,7 +1,7 @@
 {
   "$schema": "https://schema.tauri.app/config/2",
   "productName": "Genarrative AI Game Creator",
-  "version": "0.1.5",
+  "version": "0.1.6",
   "identifier": "world.genarrative.ai-game-creator",
   "build": {
     "beforeDevCommand": "npm --prefix ../.. run agc:serve",