合并 master 并保留游戏分发功能

- 合并 origin/master（含 429f991bd 定向回滚、Godot 原生绑定迁移与策划 Agent 模型控件）。 - 回滚提交删除的游戏分发代码按功能面补回：SpacetimeDB 模块注册与迁移表、api-server 路由与权限映射、后台审核页、AGC 发布命令与 payload 类型、SelectionStage 的 games 阶段、ProjectSupervisorView 的 overlay 挂载点、主站路由与标题、Cargo 依赖与锁、vite/vitest 代理与 tailwind source。 - 保留 master 的 Godot C++ 迁移（移除旧 vendored GDExtension、新的 composer 控件布局）与其它 master 侧改动。 - 修正 master 自带的红灯断言：/api/creation-entry 已被 api-server 列入退役路由，dev 中间件按退役路径 404，测试改为断言不进入代理。 - 验证：cargo check（api-server / spacetime-module / spacetime-client / AGC 壳）、cargo test（api-server 游戏分发 17、module-game-distribution 11、AGC 本地导出 7）、全量 vitest 4557 passed、两端 typecheck、eslint、rustfmt、编码、文档索引与 SpacetimeDB schema guard。
把游戏分发客户端纳入 ESLint 边界
2026-09-21 00:20:45 +08:00 · 2026-09-20 22:56:43 +08:00 · 2026-09-20 22:49:56 +08:00 · 2026-09-20 22:45:50 +08:00 · 2026-09-20 22:34:33 +08:00 · 2026-09-20 22:19:50 +08:00
566 changed files with 25633 additions and 67271 deletions
@@ -4,5 +4,3 @@
 src/components/AdventurePanel.tsx
 src/data/customWorldCharacterLoadout.ts
 dist_check_monster_position/**
-# 固定上游UTF-8测试刻意包含U+FFFD；upstream-integrity.test.mjs逐字节验证来源hash。
-apps/ai-game-creator-shell/src-tauri/vendor/codex-utils-path-uri/src/api_path_string_tests.rs
@@ -213,6 +213,8 @@ module.exports = {
    '!src/services/clipboard.test.ts',
    '!src/services/frontendRuntimeConfigService.ts',
    '!src/services/frontendRuntimeConfigService.test.ts',
+    '!src/services/gameDistributionClient.ts',
+    '!src/services/gameDistributionClient.test.ts',
    '!src/services/sseStream.ts',
    '!src/services/sseStream.test.ts',
    'src/AdventurePanel.tsx',
@@ -31,26 +31,28 @@ env:
  RUSTC_WRAPPER: ''
  CARGO_BUILD_RUSTC_WRAPPER: ''

-# job 声明顺序就是 runner 领取顺序，因此把两条最长尾的客户端 Rust lane 排在前面，
+# job 声明顺序就是 runner 领取顺序，因此把最长尾的客户端 Rust 门禁排在前面，
 # 让它在最少的等待下占用并发槽位；其余 job 按时长递减排列。
 #
 # 客户端（微信壳 / Expo 移动壳 / Tauri 桌面壳 / AI 游戏创作壳）门禁原先全部串在
 # `Native shell tests` 一个 job 里，实测 18 分 37 秒。现在按门禁组拆成一个分组一个 job：
 # `Native shell tests`（契约 + H5 / 微信 / 移动 / 桌面壳门禁 + 发布构建 smoke）、
 # `AI game creator shell web tests`（typecheck + 壳内测试）、`AI game creator shell
-# Rust lane 1/2`、`lane 2/2`（每条 lane 顺序运行两片 AGC 壳 bin 单测）、`AI game creator
-# shell Rust smoke`（agent-run smoke）与 `AI game creator shell Rust crates`（AGC 壳依赖的
+# Rust shard 1/4` 到 `4/4`（AGC 壳 bin 单测按名单分 4 片）、`AI game creator shell
+# Rust smoke`（agent-run smoke）与 `AI game creator shell Rust crates`（AGC 壳依赖的
 # 共享 / 平台 crate 测试）。各自的命令与拆分前逐一对应，本地
 # `npm run check:native-shells` 仍是同一条串行序列。
 #
-# AGC 壳的 bin 单测（2466 条）仍按名单分 4 片、片内保持 `--test-threads=1`；两条 lane
-# 各自顺序运行两片，让一次 job 只做一次依赖预热，同时避免同一容器内多进程并行争抢
-# 共享 HOME、target 与固定临时路径。每个分片调用仍会自校验「片并集等于全集且互斥」。
+# AGC 壳的 bin 单测（2466 条）按名单分 4 片、一片一个 job：片内保持 `--test-threads=1`
+# （当年线程并行会互相干扰的是进程内后台锁与异步终态），片与片之间靠 job 级并发摊开。
+# 不要改回「一个 job 里多进程并行这几片」：同一容器内它们会争抢共享 HOME、target 与固定
+# 临时路径，实测比整套串行还慢。每个分片 job 都会自校验「片并集等于全集且互斥」。
 jobs:
-  # AGC 壳自身的 Rust bin 单测由两条 lane 承载，每条 lane 顺序运行两片；这里不装 npm
-  # 依赖：壳 Rust 门禁只用 cargo 与 node 内建模块，也只需要 AGC 壳自己那份锁定依赖。
-  ai-game-creator-shell-rust-lane-1:
-    name: AI game creator shell Rust lane 1/2
+  # AGC 壳自身的 Rust bin 单测分片，4 片各自独立 job 并发执行、片内仍保持
+  # `--test-threads=1`。这里不装 npm 依赖：壳 Rust 门禁只用 cargo 与 node 内建模块，
+  # 也只需要 AGC 壳自己那份锁定依赖。
+  ai-game-creator-shell-rust-shard-1:
+    name: AI game creator shell Rust shard 1/4
    runs-on: genarrative-ci
    steps:
      - name: Checkout full history from Gitea
@@ -85,11 +87,41 @@ jobs:
      - name: Run AI game creator shell Rust shard 1/4
        run: npm run check:native-shells:agc-rust-shard-1

+  ai-game-creator-shell-rust-shard-2:
+    name: AI game creator shell Rust shard 2/4
+    runs-on: genarrative-ci
+    steps:
+      - name: Checkout full history from Gitea
+        env:
+          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
+          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
+        run: genarrative-gitea-checkout
+
+      - name: Validate preinstalled CI job image and sandbox
+        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
+
+      - name: Prepare AI game creator shell Rust dependencies
+        shell: bash
+        run: |
+          set -euo pipefail
+          for attempt in $(seq 1 5); do
+            if cargo fetch --locked \
+              --target x86_64-unknown-linux-gnu \
+              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
+              break
+            fi
+            if [[ "${attempt}" -eq 5 ]]; then
+              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
+              exit 1
+            fi
+            sleep $((attempt * 2))
+          done
+
      - name: Run AI game creator shell Rust shard 2/4
        run: npm run check:native-shells:agc-rust-shard-2

-  ai-game-creator-shell-rust-lane-2:
-    name: AI game creator shell Rust lane 2/2
+  ai-game-creator-shell-rust-shard-3:
+    name: AI game creator shell Rust shard 3/4
    runs-on: genarrative-ci
    steps:
      - name: Checkout full history from Gitea
@@ -121,6 +153,36 @@ jobs:
      - name: Run AI game creator shell Rust shard 3/4
        run: npm run check:native-shells:agc-rust-shard-3

+  ai-game-creator-shell-rust-shard-4:
+    name: AI game creator shell Rust shard 4/4
+    runs-on: genarrative-ci
+    steps:
+      - name: Checkout full history from Gitea
+        env:
+          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
+          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
+        run: genarrative-gitea-checkout
+
+      - name: Validate preinstalled CI job image and sandbox
+        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
+
+      - name: Prepare AI game creator shell Rust dependencies
+        shell: bash
+        run: |
+          set -euo pipefail
+          for attempt in $(seq 1 5); do
+            if cargo fetch --locked \
+              --target x86_64-unknown-linux-gnu \
+              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
+              break
+            fi
+            if [[ "${attempt}" -eq 5 ]]; then
+              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
+              exit 1
+            fi
+            sleep $((attempt * 2))
+          done
+
      - name: Run AI game creator shell Rust shard 4/4
        run: npm run check:native-shells:agc-rust-shard-4

@@ -47,16 +47,12 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-package.json
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/manifest.json
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/NOTICE.md
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-arm64/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-x64/
 /plugins/agc-cocos-editor/native/payload/
 /plugins/agc-unity-editor/dotnet/**/bin/
 /plugins/agc-unity-editor/dotnet/**/obj/
 /plugins/agc-unity-editor/dotnet/publish/
 /plugins/agc-unity-editor/dotnet/native-build/
 /apps/ai-game-creator-shell/logs/
-/apps/ai-game-creator-shell/src-tauri/resources/node-runtime/
-/apps/ai-game-creator-shell/src-tauri/resources/node-runtime-staging-*/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json
 /apps/mobile-shell/.expo/
@@ -3,15 +3,15 @@ import { afterEach, expect, test, vi } from 'vitest';
 import {
  createAdminAccount,
  executeAdminRechargeRefund,
-  getAdminAgcTemplates,
  getAdminFeatureGateConfig,
  getAdminUserDetail,
-  importAdminAgcTemplates,
+  listAdminGameDistributionReviews,
  listAdminRechargeOrders,
  reconcileAdminUserConsumption,
  resolveAdminRechargeRefundManualReview,
+  reviewAdminGameDistributionVersion,
+  suspendAdminGameDistributionGame,
  updateAdminAccount,
-  updateAdminAgcTemplate,
  uploadAdminEditorShowcaseCampaignImage,
  upsertAdminFeatureGateConfig,
  upsertProfileWalletConfig,
@@ -21,95 +21,6 @@ afterEach(() => {
  vi.unstubAllGlobals();
 });

-test('模板管理读取和更新复用认证封装，提交 revision 和封面但不提交 ZIP 或版本', async () => {
-  const library = { revision: 'revision-new', writable: true, templates: [] };
-  const fetchMock = vi.fn().mockImplementation(
-    async () =>
-      new Response(JSON.stringify({ ok: true, data: library }), {
-        status: 200,
-      }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  expect(await getAdminAgcTemplates('admin-token', controller.signal)).toEqual(
-    library,
-  );
-  const update = {
-    expectedRevision: 'revision-old',
-    title: '空白模板',
-    summary: '简介',
-    tags: ['2D'],
-    enabled: true,
-    cover: { contentType: 'image/png', dataBase64: 'aW1hZ2U=' },
-  };
-  expect(
-    await updateAdminAgcTemplate('admin-token', 'template/1', update),
-  ).toEqual(library);
-  expect(fetchMock.mock.calls[0]).toEqual([
-    '/admin/api/agc-templates',
-    expect.objectContaining({
-      method: 'GET',
-      signal: controller.signal,
-      headers: expect.objectContaining({ Authorization: 'Bearer admin-token' }),
-    }),
-  ]);
-  expect(fetchMock.mock.calls[1]).toEqual([
-    '/admin/api/agc-templates/template%2F1',
-    expect.objectContaining({
-      method: 'PUT',
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        'Content-Type': 'application/json',
-      }),
-      body: JSON.stringify(update),
-    }),
-  ]);
-});
-
-test('模板批量导入走 multipart，不预设 JSON Content-Type', async () => {
-  const imported = {
-    revision: 'rev-2',
-    writable: true,
-    templates: [],
-    imported: [
-      {
-        id: 'alpha',
-        templateVersion: '0.1.0',
-        zipSizeBytes: 4,
-        zipSha256: 'a'.repeat(64),
-        reusedObjects: false,
-      },
-    ],
-  };
-  const fetchMock = vi
-    .fn()
-    .mockImplementation(
-      async () =>
-        new Response(JSON.stringify({ ok: true, data: imported }), {
-          status: 200,
-        }),
-    );
-  vi.stubGlobal('fetch', fetchMock);
-
-  const form = new FormData();
-  form.append(
-    'manifest',
-    JSON.stringify({ expectedRevision: 'rev-1', templates: [] }),
-  );
-  form.append(
-    'zip_0',
-    new File([new Uint8Array([1])], 'alpha.zip', { type: 'application/zip' }),
-  );
-
-  expect(await importAdminAgcTemplates('admin-token', form)).toEqual(imported);
-  const [url, init] = fetchMock.mock.calls[0]!;
-  expect(url).toBe('/admin/api/agc-templates/import');
-  expect(init.method).toBe('POST');
-  expect(init.body).toBe(form);
-  expect(init.headers).not.toHaveProperty('Content-Type');
-  expect(init.headers.Authorization).toBe('Bearer admin-token');
-});
-
 test('后台账号创建和更新同时携带 Tab 与独立操作权限', async () => {
  const fetchMock = vi.fn().mockImplementation(() =>
    Promise.resolve(
@@ -456,3 +367,134 @@ test('退款人工复核使用独立 resolve 管理员路由', async () => {
    }),
  );
 });
+
+test('游戏审核列表与审核动作使用约定的 URL、方法和幂等键', async () => {
+  const fetchMock = vi.fn().mockImplementation(() =>
+    Promise.resolve(
+      new Response(JSON.stringify({ entries: [], nextCursor: null }), {
+        status: 200,
+      }),
+    ),
+  );
+  vi.stubGlobal('fetch', fetchMock);
+
+  await listAdminGameDistributionReviews('admin-token');
+  await reviewAdminGameDistributionVersion(
+    'admin-token',
+    'gamever/1',
+    'game-review-key-1',
+    {
+      decision: 'approve',
+      expectedPublicationRevision: 3,
+      entryUrl: 'https://games.example.test/releases/game_1/index.html',
+    },
+  );
+
+  expect(fetchMock.mock.calls[0]?.[0]).toBe(
+    '/admin/api/game-distribution/reviews?limit=48',
+  );
+  expect(fetchMock.mock.calls[1]?.[0]).toBe(
+    '/admin/api/game-distribution/versions/gamever%2F1/review',
+  );
+  expect(fetchMock.mock.calls[1]?.[1]).toEqual(
+    expect.objectContaining({
+      method: 'POST',
+      headers: expect.objectContaining({
+        Authorization: 'Bearer admin-token',
+        'Idempotency-Key': 'game-review-key-1',
+      }),
+      body: JSON.stringify({
+        decision: 'approve',
+        expectedPublicationRevision: 3,
+        entryUrl: 'https://games.example.test/releases/game_1/index.html',
+      }),
+    }),
+  );
+});
+
+test('安全下架请求携带公开修订号、原因与幂等键', async () => {
+  const fetchMock = vi.fn().mockImplementation(() =>
+    Promise.resolve(
+      new Response(JSON.stringify({ game: {}, replayed: false }), {
+        status: 200,
+      }),
+    ),
+  );
+  vi.stubGlobal('fetch', fetchMock);
+
+  await suspendAdminGameDistributionGame(
+    'admin-token',
+    'game/1',
+    'game-suspend-key-1',
+    { expectedPublicationRevision: 7, reason: '版权投诉' },
+  );
+
+  expect(fetchMock.mock.calls[0]?.[0]).toBe(
+    '/admin/api/game-distribution/games/game%2F1/suspend',
+  );
+  expect(fetchMock.mock.calls[0]?.[1]).toEqual(
+    expect.objectContaining({
+      method: 'POST',
+      headers: expect.objectContaining({
+        Authorization: 'Bearer admin-token',
+        'Idempotency-Key': 'game-suspend-key-1',
+      }),
+      body: JSON.stringify({
+        expectedPublicationRevision: 7,
+        reason: '版权投诉',
+      }),
+    }),
+  );
+
+  expect(() =>
+    suspendAdminGameDistributionGame('admin-token', '  ', 'key', {
+      expectedPublicationRevision: 1,
+    }),
+  ).toThrow('缺少游戏 ID');
+  expect(() =>
+    suspendAdminGameDistributionGame('admin-token', 'game-1', '  ', {
+      expectedPublicationRevision: 1,
+    }),
+  ).toThrow('下架幂等键必须是 1 到 128 个字符');
+  expect(fetchMock).toHaveBeenCalledTimes(1);
+});
+
+test('游戏审核拒绝请求携带理由，空幂等键在本地失败关闭', async () => {
+  const fetchMock = vi.fn().mockImplementation(() =>
+    Promise.resolve(
+      new Response(JSON.stringify({ version: {}, replayed: false }), {
+        status: 200,
+      }),
+    ),
+  );
+  vi.stubGlobal('fetch', fetchMock);
+
+  await reviewAdminGameDistributionVersion(
+    'admin-token',
+    'version-1',
+    'game-review-key-2',
+    {
+      decision: 'reject',
+      expectedPublicationRevision: 0,
+      reviewReason: '运行时报错',
+    },
+  );
+  expect(fetchMock.mock.calls[0]?.[1]).toEqual(
+    expect.objectContaining({
+      body: JSON.stringify({
+        decision: 'reject',
+        expectedPublicationRevision: 0,
+        reviewReason: '运行时报错',
+      }),
+    }),
+  );
+
+  expect(() =>
+    reviewAdminGameDistributionVersion('admin-token', 'version-1', '   ', {
+      decision: 'reject',
+      expectedPublicationRevision: 0,
+      reviewReason: 'x',
+    }),
+  ).toThrow('审核幂等键必须是 1 到 128 个字符');
+  expect(fetchMock).toHaveBeenCalledTimes(1);
+});
@@ -1,6 +1,5 @@
 import type {
  AdminAccountListResponse,
-  AdminAgcTemplateLibraryResponse,
  AdminConfirmEditorShowcaseCampaignImageUploadRequest,
  AdminCreateAccountRequest,
  AdminCreateAccountResponse,
@@ -30,7 +29,9 @@ import type {
  AdminExternalApiKeyListQuery,
  AdminExternalApiKeyListResponse,
  AdminFeatureGateConfigResponse,
-  AdminImportAgcTemplatesResponse,
+  AdminGameDistributionReviewListResponse,
+  AdminGameDistributionReviewRequest,
+  AdminGameDistributionReviewResponse,
  AdminLoginResponse,
  AdminMeResponse,
  AdminOverviewResponse,
@@ -49,7 +50,6 @@ import type {
  AdminTrackingEventListResponse,
  AdminUpdateAccountRequest,
  AdminUpdateAccountResponse,
-  AdminUpdateAgcTemplateRequest,
  AdminUploadedEditorShowcaseCampaignImage,
  AdminUpsertEditorShowcaseCampaignRequest,
  AdminUpsertFeatureGateConfigRequest,
@@ -88,8 +88,6 @@ interface AdminRequestOptions {
  method?: string;
  token?: string;
  body?: unknown;
-  /** multipart 表单：交给浏览器自己带 boundary，不能预设 Content-Type。 */
-  formData?: FormData;
  headers?: Record<string, string>;
  signal?: AbortSignal;
 }
@@ -177,8 +175,6 @@ export async function request<T>(
  if (typeof options.body !== 'undefined') {
    headers['Content-Type'] = 'application/json';
    init.body = JSON.stringify(options.body);
-  } else if (options.formData) {
-    init.body = options.formData;
  }

  const response = await fetch(buildRequestUrl(path), init);
@@ -1184,32 +1180,71 @@ export function saveAgcModelCatalog(
  );
 }

-export function getAdminAgcTemplates(token: string, signal?: AbortSignal) {
-  return request<AdminAgcTemplateLibraryResponse>('/admin/api/agc-templates', {
-    token,
-    signal,
-  });
-}
-
-export function updateAdminAgcTemplate(
-  token: string,
-  id: string,
-  body: AdminUpdateAgcTemplateRequest,
-) {
-  return request<AdminAgcTemplateLibraryResponse>(
-    `/admin/api/agc-templates/${encodeURIComponent(id)}`,
-    { token, method: 'PUT', body },
+export function listAdminGameDistributionReviews(token: string, limit = 48) {
+  const normalizedLimit = Number.isFinite(limit)
+    ? Math.min(Math.max(Math.trunc(limit), 1), 48)
+    : 48;
+  return request<AdminGameDistributionReviewListResponse>(
+    `/admin/api/game-distribution/reviews?limit=${normalizedLimit}`,
+    { token },
  );
 }

-/** 批量导入模板包：manifest 与 zip_N / cover_N 一起走 multipart，一批一次锁一次提交。 */
-export function importAdminAgcTemplates(token: string, formData: FormData) {
-  return request<AdminImportAgcTemplatesResponse>(
-    '/admin/api/agc-templates/import',
+/**
+ * 审核游戏发行版本。幂等键由调用方生成并在同一次提交内复用，避免重复点击产生
+ * 两条审核结论。
+ */
+/**
+ * 安全下架整个游戏。管理员下架同样要求 CAS 修订号与幂等键，避免并发审核互相覆盖。
+ */
+export function suspendAdminGameDistributionGame(
+  token: string,
+  gameId: string,
+  idempotencyKey: string,
+  payload: import('./adminApiTypes').AdminGameDistributionSuspendRequest,
+) {
+  const normalizedGameId = gameId.trim();
+  const normalizedKey = idempotencyKey.trim();
+  if (!normalizedGameId) {
+    throw new Error('缺少游戏 ID');
+  }
+  if (!normalizedKey || normalizedKey.length > 128) {
+    throw new Error('下架幂等键必须是 1 到 128 个字符');
+  }
+  return request<
+    import('./adminApiTypes').AdminGameDistributionSuspendResponse
+  >(
+    `/admin/api/game-distribution/games/${encodeURIComponent(normalizedGameId)}/suspend`,
    {
-      token,
      method: 'POST',
-      formData,
+      token,
+      headers: { 'Idempotency-Key': normalizedKey },
+      body: payload,
+    },
+  );
+}
+
+export function reviewAdminGameDistributionVersion(
+  token: string,
+  versionId: string,
+  idempotencyKey: string,
+  payload: AdminGameDistributionReviewRequest,
+) {
+  const normalizedVersionId = versionId.trim();
+  const normalizedKey = idempotencyKey.trim();
+  if (!normalizedVersionId) {
+    throw new Error('缺少发行版本 ID');
+  }
+  if (!normalizedKey || normalizedKey.length > 128) {
+    throw new Error('审核幂等键必须是 1 到 128 个字符');
+  }
+  return request<AdminGameDistributionReviewResponse>(
+    `/admin/api/game-distribution/versions/${encodeURIComponent(normalizedVersionId)}/review`,
+    {
+      method: 'POST',
+      token,
+      headers: { 'Idempotency-Key': normalizedKey },
+      body: payload,
    },
  );
 }
@@ -144,8 +144,6 @@ export interface AdminErrorReportListResponse {
 }

 export interface AdminErrorReportDetail extends AdminErrorReportEntry {
-  firstFingerprint?: string;
-  firstSource?: string;
  note?: string;
  events: Array<Record<string, unknown>>;
  logNames: string[];
@@ -1034,66 +1032,47 @@ export interface AdminAgcModelCatalog {
  models: AdminAgcModel[];
 }

-export interface AdminAgcTemplatePayload {
-  id: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  runtime: string;
-  engine: string;
-  engineVersion: string;
-  templateVersion: string;
-  enabled: boolean;
-  coverUrl: string;
-  zipSizeBytes: number;
+export interface AdminGameDistributionReviewEntry {
+  versionId: string;
+  gameId: string;
+  versionNumber: number;
+  packageSha256: string;
+  packageBytes: number;
+  status: string;
+  publicationRevision: number;
+  reviewReason: string | null;
+  createdAt: string;
+  updatedAt: string;
 }

-export interface AdminAgcTemplateLibraryResponse {
-  revision: string;
-  writable: boolean;
-  templates: AdminAgcTemplatePayload[];
+export interface AdminGameDistributionReviewListResponse {
+  entries: AdminGameDistributionReviewEntry[];
+  nextCursor: string | null;
 }

-export interface AdminUpdateAgcTemplateRequest {
-  expectedRevision: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  enabled: boolean;
-  cover?: {
-    contentType: string;
-    dataBase64: string;
+export interface AdminGameDistributionReviewRequest {
+  decision: 'approve' | 'reject';
+  expectedPublicationRevision: number;
+  reviewReason?: string;
+  entryUrl?: string;
+}
+
+export interface AdminGameDistributionReviewResponse {
+  version: AdminGameDistributionReviewEntry;
+  replayed: boolean;
+}
+
+export interface AdminGameDistributionSuspendRequest {
+  expectedPublicationRevision: number;
+  reason?: string;
+}
+
+export interface AdminGameDistributionSuspendResponse {
+  game: {
+    id: string;
+    title: string;
+    status: string;
+    publicationRevision: number;
  };
-}
-
-export interface AdminImportAgcTemplateItemPayload {
-  id: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  runtime: string;
-  engine: string;
-  engineVersion: string;
-  templateVersion: string;
-  entry: string;
-  zipField: string;
-  coverField: string;
-}
-
-export interface AdminImportAgcTemplatesManifest {
-  expectedRevision: string;
-  templates: AdminImportAgcTemplateItemPayload[];
-}
-
-export interface AdminImportAgcTemplateResult {
-  id: string;
-  templateVersion: string;
-  zipSizeBytes: number;
-  zipSha256: string;
-  reusedObjects: boolean;
-}
-
-export interface AdminImportAgcTemplatesResponse
-  extends AdminAgcTemplateLibraryResponse {
-  imported: AdminImportAgcTemplateResult[];
+  replayed: boolean;
 }
@@ -19,7 +19,6 @@ import {
 } from '../auth/adminAuthStore';
 import { AdminAccountsPage } from '../pages/AdminAccountsPage';
 import { AdminAgcModelsPage } from '../pages/AdminAgcModelsPage';
-import { AdminAgcTemplatesPage } from '../pages/AdminAgcTemplatesPage';
 import { AdminDashboardPage } from '../pages/AdminDashboardPage';
 import { AdminDatabaseTablesPage } from '../pages/AdminDatabaseTablesPage';
 import { AdminDebugHttpPage } from '../pages/AdminDebugHttpPage';
@@ -27,6 +26,7 @@ import { AdminEditorAssetQueryPage } from '../pages/AdminEditorAssetQueryPage';
 import { AdminEditorGenerationPricingPage } from '../pages/AdminEditorGenerationPricingPage';
 import { AdminEditorShowcaseReviewPage } from '../pages/AdminEditorShowcaseReviewPage';
 import { AdminErrorReportsPage } from '../pages/AdminErrorReportsPage';
+import { AdminGameDistributionReviewPage } from '../pages/AdminGameDistributionReviewPage';
 import { AdminGrayReleaseConfigPage } from '../pages/AdminGrayReleaseConfigPage';
 import { AdminInviteCodePage } from '../pages/AdminInviteCodePage';
 import { AdminLoginPage } from '../pages/AdminLoginPage';
@@ -295,14 +295,14 @@ export function AdminApp() {
      {activeRouteId === 'agc-models' ? (
        <AdminAgcModelsPage token={token} onUnauthorized={handleUnauthorized} />
      ) : null}
-      {activeRouteId === 'agc-templates' ? (
-        <AdminAgcTemplatesPage
+      {activeRouteId === 'editor-showcase' ? (
+        <AdminEditorShowcaseReviewPage
          token={token}
          onUnauthorized={handleUnauthorized}
        />
      ) : null}
-      {activeRouteId === 'editor-showcase' ? (
-        <AdminEditorShowcaseReviewPage
+      {activeRouteId === 'game-distribution' ? (
+        <AdminGameDistributionReviewPage
          token={token}
          onUnauthorized={handleUnauthorized}
        />
@@ -5,6 +5,7 @@ import {
  Coins,
  Database,
  FolderArchive,
+  Gamepad2,
  GitBranch,
  Images,
  LayoutDashboard,
@@ -49,11 +50,11 @@ const routeIcons = {
  'recharge-orders': ReceiptText,
  'editor-generation-pricing': Coins,
  'editor-showcase': Star,
+  'game-distribution': Gamepad2,
  'editor-assets': Images,
  'project-snapshots': FolderArchive,
  accounts: Users,
  'agc-models': ListChecks,
-  'agc-templates': Images,
 } satisfies Record<AdminRouteId, typeof LayoutDashboard>;

 export function AdminShell({
@@ -148,29 +148,23 @@ test('项目工程入口对 owner 与已授权 member 开放且可分配权限',
  ).not.toContainEqual(route);
 });

-test('模板管理只对 owner 或具有 agc-templates 权限的 member 可见', () => {
+test('后台游戏审核路由可通过导航和 hash 访问', () => {
  expect(adminRoutes).toContainEqual({
-    id: 'agc-templates',
-    label: '模板管理',
-    hash: '#agc-templates',
+    id: 'game-distribution',
+    label: '游戏审核',
+    hash: '#game-distribution',
  });
-  expect(resolveAdminRoute('#agc-templates')).toBe('agc-templates');
-  expect(routeHash('agc-templates')).toBe('#agc-templates');
-  expect(
-    getAccessibleAdminRoutes({ accountRole: 'owner', tabPermissions: [] }).some(
-      (route) => route.id === 'agc-templates',
-    ),
-  ).toBe(true);
-  expect(
-    getAccessibleAdminRoutes({
-      accountRole: 'member',
-      tabPermissions: ['agc-templates'],
-    }).map((route) => route.id),
-  ).toEqual(['agc-templates']);
-  expect(
-    getAccessibleAdminRoutes({
-      accountRole: 'member',
-      tabPermissions: ['editor-assets'],
-    }).some((route) => route.id === 'agc-templates'),
-  ).toBe(false);
+  expect(resolveAdminRoute('#game-distribution')).toBe('game-distribution');
+  expect(routeHash('game-distribution')).toBe('#game-distribution');
+});
+
+test('member 可单独获得游戏审核 Tab 权限', () => {
+  const routes = getAccessibleAdminRoutes({
+    accountRole: 'member',
+    tabPermissions: ['game-distribution'],
+  });
+  expect(routes.map((route) => route.id)).toEqual(['game-distribution']);
+  expect(resolveAccessibleAdminRoute('#game-distribution', routes)).toBe(
+    'game-distribution',
+  );
 });
@@ -15,10 +15,10 @@ export type AdminRouteId =
  | 'recharge-orders'
  | 'editor-generation-pricing'
  | 'editor-showcase'
+  | 'game-distribution'
  | 'editor-assets'
  | 'project-snapshots'
  | 'agc-models'
-  | 'agc-templates'
  | 'accounts';

 export type AdminTabPermission = Exclude<
@@ -54,8 +54,8 @@ export const adminRoutes: AdminRouteDefinition[] = [
    hash: '#editor-generation-pricing',
  },
  { id: 'agc-models', label: 'AGC 模型', hash: '#agc-models', ownerOnly: true },
-  { id: 'agc-templates', label: '模板管理', hash: '#agc-templates' },
  { id: 'editor-showcase', label: '精选审核', hash: '#editor-showcase' },
+  { id: 'game-distribution', label: '游戏审核', hash: '#game-distribution' },
  { id: 'editor-assets', label: '素材查询', hash: '#editor-assets' },
  { id: 'project-snapshots', label: '项目工程', hash: '#project-snapshots' },
  { id: 'accounts', label: '账号管理', hash: '#accounts', ownerOnly: true },
@@ -1,4 +1,3 @@
-import '@genarrative/shared/styles.css';
 import './styles/admin.css';

 import { StrictMode } from 'react';
@@ -1,18 +0,0 @@
-import { describe, expect, it } from 'vitest';
-
-import {
-  formatAdminTimestamp,
-  parseAdminTimestamp,
-} from './AdminErrorReportsPage';
-
-describe('错误报告时间格式化', () => {
-  it('解析 SpacetimeDB seconds.microsZ 时间', () => {
-    expect(parseAdminTimestamp('1778207451.731746Z')).toBe(1778207451731);
-  });
-
-  it('解析微秒字符串并拒绝无效时间', () => {
-    expect(parseAdminTimestamp('1778207451731746')).toBe(1778207451731);
-    expect(formatAdminTimestamp('not-a-date')).toBe('-');
-    expect(formatAdminTimestamp('999999999999999999999999')).toBe('-');
-  });
-});
@@ -17,57 +17,6 @@ type Props = { token: string; onUnauthorized: (message?: string) => void };

 const ADMIN_ERROR_REPORT_STATUSES = ['new', 'in-progress', 'resolved'] as const;
 const ERROR_REPORT_PAGE_SIZE = 50;
-const ERROR_REPORT_STATUS_LABELS: Record<string, string> = {
-  new: '待处理',
-  'in-progress': '处理中',
-  resolved: '已解决',
-};
-
-export function parseAdminTimestamp(value: string | null | undefined) {
-  const normalized = value?.trim() ?? '';
-  if (/^-?\d+\.\d{6}Z$/u.test(normalized)) {
-    const [secondsText, microsText] = normalized.slice(0, -1).split('.');
-    const seconds = Number(secondsText);
-    const micros = Number(microsText);
-    return Number.isFinite(seconds) && Number.isFinite(micros)
-      ? seconds * 1000 + Math.floor(micros / 1000)
-      : Number.NaN;
-  }
-  if (/^-?\d+$/u.test(normalized)) {
-    const numeric = Number(normalized);
-    if (!Number.isFinite(numeric)) return Number.NaN;
-    if (Math.abs(numeric) >= 1e14) return Math.floor(numeric / 1000);
-    if (Math.abs(numeric) >= 1e11) return numeric;
-    return numeric * 1000;
-  }
-  return Date.parse(normalized);
-}
-
-export function formatAdminTimestamp(value: string | null | undefined) {
-  const timestamp = parseAdminTimestamp(value);
-  if (!Number.isFinite(timestamp)) return '-';
-  const date = new Date(timestamp);
-  if (!Number.isFinite(date.getTime())) return '-';
-  try {
-    return new Intl.DateTimeFormat('zh-CN', {
-      year: 'numeric',
-      month: '2-digit',
-      day: '2-digit',
-      hour: '2-digit',
-      minute: '2-digit',
-      second: '2-digit',
-    }).format(date);
-  } catch {
-    return '-';
-  }
-}
-
-function eventText(event: Record<string, unknown>, key: string) {
-  const value = event[key];
-  return typeof value === 'string' || typeof value === 'number'
-    ? String(value)
-    : '';
-}

 export function AdminErrorReportsPage({ token, onUnauthorized }: Props) {
  const [reports, setReports] = useState<AdminErrorReportEntry[]>([]);
@@ -80,24 +29,6 @@ export function AdminErrorReportsPage({ token, onUnauthorized }: Props) {
  const [pageInfo, setPageInfo] = useState({ total: 0, hasMore: false });
  const openReportRequestId = useRef(0);
  const loadRequestId = useRef(0);
-  const detailCloseButtonRef = useRef<HTMLButtonElement | null>(null);
-
-  useEffect(() => {
-    if (!selected) return;
-    const previousFocus = document.activeElement as HTMLElement | null;
-    const focusFrame = window.requestAnimationFrame(() => {
-      detailCloseButtonRef.current?.focus();
-    });
-    const handleEscape = (event: KeyboardEvent) => {
-      if (event.key === 'Escape') setSelected(null);
-    };
-    window.addEventListener('keydown', handleEscape);
-    return () => {
-      window.cancelAnimationFrame(focusFrame);
-      window.removeEventListener('keydown', handleEscape);
-      previousFocus?.focus?.();
-    };
-  }, [selected]);

  const load = useCallback(async () => {
    const requestId = ++loadRequestId.current;
@@ -253,15 +184,9 @@ export function AdminErrorReportsPage({ token, onUnauthorized }: Props) {
                <td>{report.batchId}</td>
                <td>{report.eventCount}</td>
                <td>{report.source ?? '-'}</td>
-                <td>
-                  <span
-                    className={`admin-error-report-status is-${report.status}`}
-                  >
-                    {ERROR_REPORT_STATUS_LABELS[report.status] ?? report.status}
-                  </span>
-                </td>
+                <td>{report.status}</td>
                <td>{report.userId}</td>
-                <td>{formatAdminTimestamp(report.createdAt)}</td>
+                <td>{new Date(report.createdAt).toLocaleString()}</td>
              </tr>
            ))}
          </tbody>
@@ -299,173 +224,66 @@ export function AdminErrorReportsPage({ token, onUnauthorized }: Props) {
          className="admin-detail-modal"
          role="dialog"
          aria-label="错误报告详情"
-          aria-modal="true"
-          onMouseDown={(event) => {
-            if (event.target === event.currentTarget) setSelected(null);
-          }}
        >
-          <div className="admin-detail-modal__panel admin-error-report-detail">
-            <header className="admin-error-report-detail__header">
-              <div className="admin-error-report-detail__heading">
-                <span className="admin-error-report-detail__eyebrow">
-                  错误报告详情
-                </span>
-                <h2>{selected.batchId}</h2>
-                <div className="admin-error-report-detail__badges">
-                  <span
-                    className={`admin-error-report-status is-${selected.status}`}
-                  >
-                    {ERROR_REPORT_STATUS_LABELS[selected.status] ??
-                      selected.status}
-                  </span>
-                  <span className="admin-error-report-detail__badge">
-                    {selected.firstSource ?? selected.source ?? '未知来源'}
-                  </span>
-                </div>
-              </div>
-              <button
-                type="button"
-                className="admin-error-report-detail__close"
-                ref={detailCloseButtonRef}
-                onClick={() => setSelected(null)}
-                aria-label="关闭错误报告详情"
-              >
-                ×
+          <div className="admin-detail-modal__panel">
+            <header>
+              <h2>{selected.batchId}</h2>
+              <button type="button" onClick={() => setSelected(null)}>
+                关闭
              </button>
            </header>
-            <div className="admin-error-report-detail__summary">
-              <div>
-                <span>用户</span>
-                <strong>{selected.userId}</strong>
-              </div>
-              <div>
-                <span>发生时间</span>
-                <strong>{formatAdminTimestamp(selected.createdAt)}</strong>
-              </div>
-              <div>
-                <span>错误事件</span>
-                <strong>{selected.eventCount}</strong>
-              </div>
-              <div>
-                <span>应用日志</span>
-                <strong>{selected.logCount}</strong>
-              </div>
+            <p>
+              用户：{selected.userId} · 事件：{selected.eventCount} · 日志：
+              {selected.logCount}
+            </p>
+            <pre>{JSON.stringify(selected.events.slice(0, 20), null, 2)}</pre>
+            {selected.userDescription ? (
+              <p>用户描述：{selected.userDescription}</p>
+            ) : null}
+            <label className="admin-detail-modal__note">
+              处理备注
+              <textarea
+                value={selected.note ?? ''}
+                onChange={(event) =>
+                  setSelected((current) =>
+                    current
+                      ? { ...current, note: event.target.value }
+                      : current,
+                  )
+                }
+                maxLength={2000}
+                rows={4}
+                placeholder="记录处理结论或后续跟进事项"
+                disabled={busy}
+              />
+            </label>
+            <div className="admin-detail-modal__actions">
+              <select
+                value={selected.status}
+                onChange={(event) => void saveStatus(event.target.value)}
+                disabled={busy}
+              >
+                {ADMIN_ERROR_REPORT_STATUSES.map((value) => (
+                  <option key={value} value={value}>
+                    {value}
+                  </option>
+                ))}
+              </select>
+              <button
+                type="button"
+                onClick={() => void saveStatus(selected.status)}
+                disabled={busy}
+              >
+                保存备注
+              </button>
+              <button
+                type="button"
+                onClick={() => void download(selected.batchId)}
+                disabled={downloading}
+              >
+                {downloading ? '下载中…' : '下载诊断包'}
+              </button>
            </div>
-            <div className="admin-error-report-detail__body">
-              <section className="admin-error-report-detail__section">
-                <div className="admin-error-report-detail__section-heading">
-                  <div>
-                    <h3>错误事件</h3>
-                    <span>展示最近 20 条，完整内容请下载诊断包。</span>
-                  </div>
-                  <span className="admin-error-report-detail__count">
-                    {selected.events.length} 条
-                  </span>
-                </div>
-                <div className="admin-error-report-event-list">
-                  {selected.events.length === 0 ? (
-                    <p className="admin-error-report-detail__empty">
-                      归档中没有可展示的错误事件。
-                    </p>
-                  ) : null}
-                  {selected.events.slice(0, 20).map((event, index) => {
-                    const message = eventText(event, 'message') || '未知错误';
-                    const stack = eventText(event, 'stack');
-                    const occurredAt = eventText(event, 'occurredAt');
-                    return (
-                      <article
-                        className="admin-error-report-event"
-                        key={`${index}-${message}`}
-                      >
-                        <div className="admin-error-report-event__topline">
-                          <span className="admin-error-report-event__index">
-                            #{index + 1}
-                          </span>
-                          <span>{eventText(event, 'source') || 'client'}</span>
-                          <span>{eventText(event, 'count') || '1'} 次</span>
-                          <time>{formatAdminTimestamp(occurredAt)}</time>
-                        </div>
-                        <p className="admin-error-report-event__message">
-                          {message}
-                        </p>
-                        {eventText(event, 'fingerprint') ? (
-                          <code>{eventText(event, 'fingerprint')}</code>
-                        ) : null}
-                        {stack ? (
-                          <details>
-                            <summary>查看调用栈</summary>
-                            <pre>{stack}</pre>
-                          </details>
-                        ) : null}
-                      </article>
-                    );
-                  })}
-                </div>
-              </section>
-              {selected.userDescription ? (
-                <section className="admin-error-report-detail__section">
-                  <div className="admin-error-report-detail__section-heading">
-                    <div>
-                      <h3>用户描述</h3>
-                    </div>
-                  </div>
-                  <p className="admin-error-report-detail__description">
-                    {selected.userDescription}
-                  </p>
-                </section>
-              ) : null}
-              <section className="admin-error-report-detail__section admin-error-report-detail__section--note">
-                <label className="admin-detail-modal__note">
-                  <span>处理备注</span>
-                  <textarea
-                    value={selected.note ?? ''}
-                    onChange={(event) =>
-                      setSelected((current) =>
-                        current
-                          ? { ...current, note: event.target.value }
-                          : current,
-                      )
-                    }
-                    maxLength={2000}
-                    rows={4}
-                    placeholder="记录处理结论或后续跟进事项"
-                    disabled={busy}
-                  />
-                </label>
-              </section>
-            </div>
-            <footer className="admin-error-report-detail__footer">
-              <label className="admin-error-report-detail__status-field">
-                状态
-                <select
-                  value={selected.status}
-                  onChange={(event) => void saveStatus(event.target.value)}
-                  disabled={busy}
-                >
-                  {ADMIN_ERROR_REPORT_STATUSES.map((value) => (
-                    <option key={value} value={value}>
-                      {ERROR_REPORT_STATUS_LABELS[value]}
-                    </option>
-                  ))}
-                </select>
-              </label>
-              <div className="admin-error-report-detail__footer-actions">
-                <button
-                  type="button"
-                  onClick={() => void saveStatus(selected.status)}
-                  disabled={busy}
-                >
-                  {busy ? '保存中…' : '保存备注'}
-                </button>
-                <button
-                  type="button"
-                  onClick={() => void download(selected.batchId)}
-                  disabled={downloading}
-                >
-                  {downloading ? '下载中…' : '下载诊断包'}
-                </button>
-              </div>
-            </footer>
          </div>
        </div>
      ) : null}
@@ -0,0 +1,186 @@
+/* @vitest-environment jsdom */
+
+import { fireEvent, render, screen, waitFor } from '@testing-library/react';
+import { beforeEach, expect, test, vi } from 'vitest';
+
+import {
+  listAdminGameDistributionReviews,
+  reviewAdminGameDistributionVersion,
+  suspendAdminGameDistributionGame,
+} from '../api/adminApiClient';
+import type { AdminGameDistributionReviewEntry } from '../api/adminApiTypes';
+import {
+  AdminGameDistributionReviewPage,
+  resolveGameReleaseEntryUrlError,
+} from './AdminGameDistributionReviewPage';
+
+vi.mock('../api/adminApiClient', () => ({
+  isAdminApiError: vi.fn(
+    (error: unknown) =>
+      typeof error === 'object' &&
+      error !== null &&
+      'status' in error &&
+      typeof error.status === 'number',
+  ),
+  formatAdminApiError: vi.fn((error: unknown) =>
+    error instanceof Error ? error.message : '请求失败',
+  ),
+  listAdminGameDistributionReviews: vi.fn(),
+  reviewAdminGameDistributionVersion: vi.fn(),
+  suspendAdminGameDistributionGame: vi.fn(),
+}));
+
+const entry: AdminGameDistributionReviewEntry = {
+  versionId: 'version-1',
+  gameId: 'game_1',
+  versionNumber: 2,
+  packageSha256: 'a'.repeat(64),
+  packageBytes: 2048,
+  status: 'pending_review',
+  publicationRevision: 4,
+  reviewReason: null,
+  createdAt: '2026-09-20T08:00:00Z',
+  updatedAt: '2026-09-20T08:00:00Z',
+};
+
+beforeEach(() => {
+  vi.mocked(listAdminGameDistributionReviews).mockReset();
+  vi.mocked(reviewAdminGameDistributionVersion).mockReset();
+  vi.mocked(suspendAdminGameDistributionGame).mockReset();
+  vi.mocked(listAdminGameDistributionReviews).mockResolvedValue({
+    entries: [entry],
+    nextCursor: null,
+  });
+});
+
+test('发行入口必须是带完整来源的 HTTPS 地址', () => {
+  expect(resolveGameReleaseEntryUrlError('')).toBe('请填写发行入口');
+  expect(
+    resolveGameReleaseEntryUrlError('http://games.test/a/index.html'),
+  ).toBe('发行入口必须以 https:// 开头');
+  expect(
+    resolveGameReleaseEntryUrlError('https://games.test/a/index.html?token=1'),
+  ).toBe('发行入口不能包含 query 或 fragment');
+  expect(
+    resolveGameReleaseEntryUrlError('https://u:p@games.test/a/index.html'),
+  ).toBe('发行入口不能包含凭据');
+  expect(
+    resolveGameReleaseEntryUrlError('https://games.test/a/index.html'),
+  ).toBe('');
+});
+
+test('通过审核时提交当前 publicationRevision 与发行入口并刷新列表', async () => {
+  vi.mocked(reviewAdminGameDistributionVersion).mockResolvedValue({
+    version: { ...entry, status: 'published' },
+    replayed: false,
+  });
+
+  render(
+    <AdminGameDistributionReviewPage
+      token="admin-token"
+      onUnauthorized={vi.fn()}
+    />,
+  );
+  await screen.findByText('game_1');
+
+  fireEvent.change(screen.getByLabelText('发行入口'), {
+    target: { value: 'https://games.test/releases/game_1/index.html' },
+  });
+  fireEvent.click(screen.getByRole('button', { name: '通过' }));
+
+  await waitFor(() =>
+    expect(reviewAdminGameDistributionVersion).toHaveBeenCalledTimes(1),
+  );
+  const [token, versionId, idempotencyKey, payload] =
+    vi.mocked(reviewAdminGameDistributionVersion).mock.calls[0] ?? [];
+  expect(token).toBe('admin-token');
+  expect(versionId).toBe('version-1');
+  expect(String(idempotencyKey)).toContain('version-1');
+  expect(payload).toEqual({
+    decision: 'approve',
+    expectedPublicationRevision: 4,
+    entryUrl: 'https://games.test/releases/game_1/index.html',
+  });
+  await waitFor(() =>
+    expect(vi.mocked(listAdminGameDistributionReviews)).toHaveBeenCalledTimes(
+      2,
+    ),
+  );
+});
+
+test('缺少拒绝理由时不调用审核接口', async () => {
+  render(
+    <AdminGameDistributionReviewPage
+      token="admin-token"
+      onUnauthorized={vi.fn()}
+    />,
+  );
+  await screen.findByText('game_1');
+
+  fireEvent.click(screen.getByRole('button', { name: '拒绝' }));
+
+  expect(await screen.findByText('拒绝审核必须填写理由')).toBeTruthy();
+  expect(reviewAdminGameDistributionVersion).not.toHaveBeenCalled();
+});
+
+test('安全下架需要二次确认，并携带公开修订号与原因', async () => {
+  vi.mocked(suspendAdminGameDistributionGame).mockResolvedValue({
+    game: {
+      id: 'game_1',
+      title: '测试游戏',
+      status: 'suspended',
+      publicationRevision: 5,
+    },
+    replayed: false,
+  });
+
+  render(
+    <AdminGameDistributionReviewPage
+      token="admin-token"
+      onUnauthorized={vi.fn()}
+    />,
+  );
+  await screen.findByText('game_1');
+
+  fireEvent.change(screen.getByLabelText('下架原因'), {
+    target: { value: '盗用素材' },
+  });
+  fireEvent.click(screen.getByRole('button', { name: '安全下架' }));
+
+  // 第一次点击只弹出确认面板，不直接调用后端。
+  expect(suspendAdminGameDistributionGame).not.toHaveBeenCalled();
+  expect(await screen.findByRole('dialog')).toBeTruthy();
+
+  fireEvent.click(screen.getByRole('button', { name: '确认' }));
+
+  await waitFor(() =>
+    expect(suspendAdminGameDistributionGame).toHaveBeenCalledTimes(1),
+  );
+  const [token, gameId, idempotencyKey, payload] =
+    vi.mocked(suspendAdminGameDistributionGame).mock.calls[0] ?? [];
+  expect(token).toBe('admin-token');
+  expect(gameId).toBe('game_1');
+  expect(String(idempotencyKey)).toContain('game_1');
+  expect(payload).toEqual({
+    expectedPublicationRevision: 4,
+    reason: '盗用素材',
+  });
+  expect(await screen.findByText(/已安全下架/u)).toBeTruthy();
+});
+
+test('取消确认时不下架', async () => {
+  render(
+    <AdminGameDistributionReviewPage
+      token="admin-token"
+      onUnauthorized={vi.fn()}
+    />,
+  );
+  await screen.findByText('game_1');
+
+  fireEvent.click(screen.getByRole('button', { name: '安全下架' }));
+  await screen.findByRole('dialog');
+  fireEvent.click(screen.getByRole('button', { name: '取消' }));
+
+  await waitFor(() => expect(screen.queryByRole('dialog')).toBeNull());
+  expect(suspendAdminGameDistributionGame).not.toHaveBeenCalled();
+});
@@ -0,0 +1,365 @@
+import { RefreshCcw } from 'lucide-react';
+import { useCallback, useEffect, useState } from 'react';
+
+import {
+  listAdminGameDistributionReviews,
+  reviewAdminGameDistributionVersion,
+  suspendAdminGameDistributionGame,
+} from '../api/adminApiClient';
+import type { AdminGameDistributionReviewEntry } from '../api/adminApiTypes';
+import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
+import { handlePageError } from './pageUtils';
+
+interface AdminGameDistributionReviewPageProps {
+  token: string;
+  onUnauthorized: (message?: string) => void;
+}
+
+function formatBytes(value: number) {
+  if (value >= 1024 * 1024) {
+    return `${(value / (1024 * 1024)).toFixed(1)} MiB`;
+  }
+  if (value >= 1024) {
+    return `${(value / 1024).toFixed(1)} KiB`;
+  }
+  return `${value} B`;
+}
+
+function formatTime(value: string) {
+  const parsed = new Date(value);
+  if (Number.isNaN(parsed.getTime())) return value;
+  return parsed.toLocaleString('zh-CN', { hour12: false });
+}
+
+function createSuspendIdempotencyKey(gameId: string) {
+  const random =
+    typeof crypto !== 'undefined' && 'randomUUID' in crypto
+      ? crypto.randomUUID()
+      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+  return `game-suspend-${gameId}-${random}`.slice(0, 128);
+}
+
+function createReviewIdempotencyKey(versionId: string) {
+  const random =
+    typeof crypto !== 'undefined' && 'randomUUID' in crypto
+      ? crypto.randomUUID()
+      : `${Date.now()}-${Math.random().toString(16).slice(2)}`;
+  return `game-review-${versionId}-${random}`.slice(0, 128);
+}
+
+export function resolveGameReleaseEntryUrlError(value: string) {
+  const normalized = value.trim();
+  if (!normalized) return '请填写发行入口';
+  if (!normalized.startsWith('https://')) {
+    return '发行入口必须以 https:// 开头';
+  }
+  if (normalized.includes('?') || normalized.includes('#')) {
+    return '发行入口不能包含 query 或 fragment';
+  }
+  try {
+    const parsed = new URL(normalized);
+    if (parsed.username || parsed.password) {
+      return '发行入口不能包含凭据';
+    }
+  } catch {
+    return '发行入口不是合法 URL';
+  }
+  return '';
+}
+
+export function AdminGameDistributionReviewPage({
+  token,
+  onUnauthorized,
+}: AdminGameDistributionReviewPageProps) {
+  const [entries, setEntries] = useState<AdminGameDistributionReviewEntry[]>(
+    [],
+  );
+  const [isLoading, setIsLoading] = useState(false);
+  const [busyVersionId, setBusyVersionId] = useState('');
+  const [errorMessage, setErrorMessage] = useState('');
+  const [statusMessage, setStatusMessage] = useState('');
+  const [entryUrlByVersion, setEntryUrlByVersion] = useState<
+    Record<string, string>
+  >({});
+  const [reasonByVersion, setReasonByVersion] = useState<
+    Record<string, string>
+  >({});
+  const [suspendReasonByGame, setSuspendReasonByGame] = useState<
+    Record<string, string>
+  >({});
+  const [busyGameId, setBusyGameId] = useState('');
+  const writeConfirm = useAdminWriteConfirm();
+
+  const loadReviews = useCallback(async () => {
+    setIsLoading(true);
+    setErrorMessage('');
+    try {
+      const response = await listAdminGameDistributionReviews(token);
+      setEntries(response.entries);
+    } catch (error) {
+      handlePageError(error, onUnauthorized, setErrorMessage);
+    } finally {
+      setIsLoading(false);
+    }
+  }, [token, onUnauthorized]);
+
+  useEffect(() => {
+    void loadReviews();
+  }, [loadReviews]);
+
+  async function submitReview(
+    entry: AdminGameDistributionReviewEntry,
+    decision: 'approve' | 'reject',
+  ) {
+    const entryUrl = (entryUrlByVersion[entry.versionId] ?? '').trim();
+    const reason = (reasonByVersion[entry.versionId] ?? '').trim();
+    if (decision === 'approve') {
+      const invalid = resolveGameReleaseEntryUrlError(entryUrl);
+      if (invalid) {
+        setErrorMessage(invalid);
+        return;
+      }
+    } else if (!reason) {
+      setErrorMessage('拒绝审核必须填写理由');
+      return;
+    }
+    setBusyVersionId(entry.versionId);
+    setErrorMessage('');
+    setStatusMessage('');
+    try {
+      await reviewAdminGameDistributionVersion(
+        token,
+        entry.versionId,
+        createReviewIdempotencyKey(entry.versionId),
+        decision === 'approve'
+          ? {
+              decision,
+              expectedPublicationRevision: entry.publicationRevision,
+              entryUrl,
+            }
+          : {
+              decision,
+              expectedPublicationRevision: entry.publicationRevision,
+              reviewReason: reason,
+            },
+      );
+      setStatusMessage(
+        decision === 'approve'
+          ? `版本 v${entry.versionNumber} 已通过审核`
+          : `版本 v${entry.versionNumber} 已拒绝`,
+      );
+      await loadReviews();
+    } catch (error) {
+      handlePageError(error, onUnauthorized, setErrorMessage);
+    } finally {
+      setBusyVersionId('');
+    }
+  }
+
+  /**
+   * 管理员安全下架：先二次确认，再带当前公开修订号调用后端；并发审核导致修订号变化时
+   * 由服务端返回冲突，前端只提示刷新，不静默重试。
+   */
+  async function suspendGame(entry: AdminGameDistributionReviewEntry) {
+    const reason = (suspendReasonByGame[entry.gameId] ?? '').trim();
+    const confirmed = await writeConfirm.confirmWrite({
+      action: '安全下架游戏',
+      target: `${entry.gameId}（版本 v${entry.versionNumber}）`,
+    });
+    if (!confirmed) return;
+    setBusyGameId(entry.gameId);
+    setErrorMessage('');
+    setStatusMessage('');
+    try {
+      await suspendAdminGameDistributionGame(
+        token,
+        entry.gameId,
+        createSuspendIdempotencyKey(entry.gameId),
+        {
+          expectedPublicationRevision: entry.publicationRevision,
+          ...(reason ? { reason } : {}),
+        },
+      );
+      setStatusMessage(`游戏 ${entry.gameId} 已安全下架，发行入口已关闭`);
+      setSuspendReasonByGame((current) => ({ ...current, [entry.gameId]: '' }));
+      await loadReviews();
+    } catch (error) {
+      handlePageError(error, onUnauthorized, setErrorMessage);
+    } finally {
+      setBusyGameId('');
+    }
+  }
+
+  return (
+    <section className="admin-page admin-page-wide">
+      <div className="admin-page-heading">
+        <h1>游戏审核</h1>
+        <button
+          type="button"
+          className="admin-secondary-button"
+          onClick={() => void loadReviews()}
+          disabled={isLoading}
+        >
+          <RefreshCcw aria-hidden="true" />
+          刷新
+        </button>
+      </div>
+
+      {errorMessage ? (
+        <div className="admin-alert admin-alert-warning" role="alert">
+          {errorMessage}
+        </div>
+      ) : null}
+      {statusMessage ? (
+        <div className="admin-alert admin-alert-success" role="status">
+          {statusMessage}
+        </div>
+      ) : null}
+
+      <div className="admin-panel">
+        <div className="admin-panel-heading">
+          <h2>待审版本</h2>
+          <span className="admin-muted-text">共 {entries.length} 条</span>
+        </div>
+
+        {isLoading ? (
+          <p className="admin-muted-text">正在加载待审版本…</p>
+        ) : null}
+
+        {!isLoading && entries.length === 0 ? (
+          <p className="admin-muted-text">当前没有待审核的游戏版本。</p>
+        ) : null}
+
+        {!isLoading && entries.length > 0 ? (
+          <div className="admin-table-wrap">
+            <table className="admin-table admin-table-wide">
+              <thead>
+                <tr>
+                  <th>游戏</th>
+                  <th>版本</th>
+                  <th>发行包</th>
+                  <th>提交时间</th>
+                  <th>审核</th>
+                </tr>
+              </thead>
+              <tbody>
+                {entries.map((entry) => {
+                  const busy = busyVersionId === entry.versionId;
+                  return (
+                    <tr key={entry.versionId}>
+                      <td>
+                        <code>{entry.gameId}</code>
+                      </td>
+                      <td>
+                        v{entry.versionNumber}
+                        <div className="admin-muted-text">{entry.status}</div>
+                        {entry.reviewReason ? (
+                          <div className="admin-muted-text">
+                            {entry.reviewReason}
+                          </div>
+                        ) : null}
+                      </td>
+                      <td>
+                        {formatBytes(entry.packageBytes)}
+                        <div className="admin-muted-text">
+                          <code>{entry.packageSha256.slice(0, 12)}</code>
+                        </div>
+                      </td>
+                      <td>{formatTime(entry.createdAt)}</td>
+                      <td>
+                        <div className="admin-action-row">
+                          <div className="admin-field">
+                            <label
+                              htmlFor={`game-release-url-${entry.versionId}`}
+                            >
+                              发行入口
+                            </label>
+                            <input
+                              id={`game-release-url-${entry.versionId}`}
+                              value={entryUrlByVersion[entry.versionId] ?? ''}
+                              placeholder="https://"
+                              onChange={(event) =>
+                                setEntryUrlByVersion((current) => ({
+                                  ...current,
+                                  [entry.versionId]: event.target.value,
+                                }))
+                              }
+                              disabled={busy}
+                            />
+                          </div>
+                          <button
+                            type="button"
+                            className="admin-primary-button"
+                            disabled={busy}
+                            onClick={() => void submitReview(entry, 'approve')}
+                          >
+                            通过
+                          </button>
+                          <div className="admin-field">
+                            <label
+                              htmlFor={`game-reject-reason-${entry.versionId}`}
+                            >
+                              拒绝理由
+                            </label>
+                            <input
+                              id={`game-reject-reason-${entry.versionId}`}
+                              value={reasonByVersion[entry.versionId] ?? ''}
+                              onChange={(event) =>
+                                setReasonByVersion((current) => ({
+                                  ...current,
+                                  [entry.versionId]: event.target.value,
+                                }))
+                              }
+                              disabled={busy}
+                            />
+                          </div>
+                          <button
+                            type="button"
+                            className="admin-ghost-button"
+                            disabled={busy}
+                            onClick={() => void submitReview(entry, 'reject')}
+                          >
+                            拒绝
+                          </button>
+                          <div className="admin-field">
+                            <label
+                              htmlFor={`game-suspend-reason-${entry.versionId}`}
+                            >
+                              下架原因
+                            </label>
+                            <input
+                              id={`game-suspend-reason-${entry.versionId}`}
+                              value={suspendReasonByGame[entry.gameId] ?? ''}
+                              onChange={(event) =>
+                                setSuspendReasonByGame((current) => ({
+                                  ...current,
+                                  [entry.gameId]: event.target.value,
+                                }))
+                              }
+                              disabled={busy}
+                            />
+                          </div>
+                          <button
+                            type="button"
+                            className="admin-danger-button"
+                            disabled={busy || busyGameId === entry.gameId}
+                            onClick={() => void suspendGame(entry)}
+                          >
+                            {busyGameId === entry.gameId
+                              ? '正在下架…'
+                              : '安全下架'}
+                          </button>
+                        </div>
+                      </td>
+                    </tr>
+                  );
+                })}
+              </tbody>
+            </table>
+          </div>
+        ) : null}
+      </div>
+      {writeConfirm.confirmDialog}
+    </section>
+  );
+}
@@ -1,155 +0,0 @@
-// @vitest-environment jsdom
-import { describe, expect, it } from 'vitest';
-
-import {
-  attachCoverFiles,
-  buildTemplateImportFormData,
-  deriveTemplateUploadRow,
-  parseTemplateTags,
-  sanitizeTemplateId,
-  TEMPLATE_IMPORT_MAX_BATCH,
-  type TemplateUploadRow,
-  validateTemplateUploadRows,
-} from './adminAgcTemplateUploadModel';
-
-function zipFile(name: string) {
-  return new File([new Uint8Array([0x50, 0x4b, 0x03, 0x04])], name, {
-    type: 'application/zip',
-  });
-}
-
-function coverFile(name: string) {
-  return new File([new Uint8Array([0x89, 0x50, 0x4e, 0x47])], name, {
-    type: 'image/png',
-  });
-}
-
-function row(zipName: string, patch: Partial<TemplateUploadRow> = {}) {
-  return { ...deriveTemplateUploadRow(zipFile(zipName)), ...patch };
-}
-
-describe('sanitizeTemplateId', () => {
-  it('lowercases, keeps whitelisted characters and drops traversal', () => {
-    expect(sanitizeTemplateId('Cocos Empty 2D.zip')).toBe('cocos-empty-2d');
-    expect(sanitizeTemplateId('../../evil.zip')).toBe('evil');
-    expect(sanitizeTemplateId('a..b.zip')).toBe('a.b');
-    expect(sanitizeTemplateId('__hidden__')).toBe('hidden__');
-    expect(sanitizeTemplateId(`${'x'.repeat(90)}.zip`)).toHaveLength(64);
-  });
-});
-
-describe('deriveTemplateUploadRow', () => {
-  it('starts from safe defaults so a batch only needs covers attached', () => {
-    const derived = row('my-template.zip');
-    expect(derived.id).toBe('my-template');
-    expect(derived.title).toBe('my-template');
-    expect(derived.runtime).toBe('html');
-    expect(derived.templateVersion).toBe('0.1.0');
-    expect(derived.entry).toBe('index.html');
-    expect(derived.coverFile).toBeNull();
-  });
-});
-
-describe('attachCoverFiles', () => {
-  it('matches covers by template id and ignores non-image files', () => {
-    const rows = [row('alpha.zip'), row('beta.zip')];
-    const covers = [
-      coverFile('alpha.png'),
-      coverFile('beta.webp'),
-      coverFile('notes.txt'),
-    ];
-
-    const next = attachCoverFiles(rows, covers);
-
-    expect(next[0]?.coverFile?.name).toBe('alpha.png');
-    expect(next[1]?.coverFile?.name).toBe('beta.webp');
-  });
-
-  it('keeps an already matched cover when the new selection has no partner', () => {
-    const rows = [row('alpha.zip', { coverFile: coverFile('alpha.png') })];
-    const next = attachCoverFiles(rows, [coverFile('other.png')]);
-    expect(next[0]?.coverFile?.name).toBe('alpha.png');
-  });
-});
-
-describe('validateTemplateUploadRows', () => {
-  it('accepts a complete batch', () => {
-    const rows = [
-      row('alpha.zip', { coverFile: coverFile('alpha.png') }),
-      row('beta.zip', { coverFile: coverFile('beta.png'), runtime: 'cocos' }),
-    ];
-    expect(validateTemplateUploadRows(rows)).toEqual({});
-  });
-
-  it('reports missing cover, duplicate id and invalid fields per row', () => {
-    const rows = [
-      row('alpha.zip'),
-      row('alpha.zip', { coverFile: coverFile('alpha.png'), key: 'second' }),
-      row('gamma.zip', {
-        coverFile: coverFile('gamma.png'),
-        runtime: 'docker',
-        templateVersion: 'Bad Version',
-        entry: '../escape.js',
-        title: '   ',
-      }),
-    ];
-    const errors = validateTemplateUploadRows(rows);
-    expect(errors['alpha.zip']).toContain('缺少封面');
-    expect(errors.second).toContain('ID 在本批次内重复');
-    expect(errors['gamma.zip']).toContain('名称必须是 1-80 个字符');
-  });
-
-  it('rejects a batch larger than the server limit', () => {
-    const rows = Array.from(
-      { length: TEMPLATE_IMPORT_MAX_BATCH + 1 },
-      (_, index) =>
-        row(`template-${index}.zip`, {
-          coverFile: coverFile(`template-${index}.png`),
-        }),
-    );
-    const errors = validateTemplateUploadRows(rows);
-    expect(Object.keys(errors)).toHaveLength(TEMPLATE_IMPORT_MAX_BATCH + 1);
-    expect(errors['template-0.zip']).toContain('单批最多上传');
-  });
-});
-
-describe('buildTemplateImportFormData', () => {
-  it('writes manifest field names and attaches zip / cover per row', () => {
-    const rows = [
-      row('alpha.zip', {
-        coverFile: coverFile('alpha.png'),
-        tags: '起步, 起步 2d',
-        title: ' Alpha ',
-      }),
-      row('beta.zip', { coverFile: coverFile('beta.png') }),
-    ];
-
-    const form = buildTemplateImportFormData('a'.repeat(64), rows);
-    const manifest = JSON.parse(String(form.get('manifest')));
-
-    expect(manifest.expectedRevision).toBe('a'.repeat(64));
-    expect(manifest.templates).toHaveLength(2);
-    expect(manifest.templates[0]).toMatchObject({
-      id: 'alpha',
-      title: 'Alpha',
-      tags: ['起步', '2d'],
-      zipField: 'zip_0',
-      coverField: 'cover_0',
-    });
-    expect(manifest.templates[1]).toMatchObject({
-      id: 'beta',
-      zipField: 'zip_1',
-      coverField: 'cover_1',
-    });
-    expect((form.get('zip_0') as File).name).toBe('alpha.zip');
-    expect((form.get('cover_1') as File).name).toBe('beta.png');
-  });
-
-  it('parses tags with dedupe and caps them at the server limit', () => {
-    expect(parseTemplateTags(' a, a，b  c ')).toEqual(['a', 'b', 'c']);
-    const many = Array.from({ length: 20 }, (_, index) => `t${index}`).join(
-      ',',
-    );
-    expect(parseTemplateTags(many)).toHaveLength(16);
-  });
-});
@@ -1,191 +0,0 @@
-import type {
-  AdminImportAgcTemplateItemPayload,
-  AdminImportAgcTemplatesManifest,
-} from '../api/adminApiTypes';
-
-/** 与服务端 module-assets 的导入上限保持一致；超出请分批或改走 CLI。 */
-export const TEMPLATE_IMPORT_MAX_BATCH = 20;
-export const TEMPLATE_UPLOAD_RUNTIMES = [
-  'html',
-  'unity',
-  'godot',
-  'cocos',
-] as const;
-const TEMPLATE_ID_PATTERN = /^[a-z0-9][a-z0-9._-]{0,63}$/u;
-const TEMPLATE_VERSION_PATTERN = /^[a-z0-9][a-z0-9._-]{0,31}$/u;
-const ENTRY_PATTERN = /^(?![\\/:])(?!.*\.\.)[^\s\\:]+$/u;
-const COVER_EXTENSION_PATTERN = /\.(png|jpe?g|webp)$/iu;
-
-export interface TemplateUploadRow {
-  /** 稳定行标识：用 ZIP 文件名，重选文件后不会串行。 */
-  key: string;
-  zipFile: File;
-  coverFile: File | null;
-  id: string;
-  title: string;
-  summary: string;
-  tags: string;
-  runtime: string;
-  engine: string;
-  engineVersion: string;
-  templateVersion: string;
-  entry: string;
-}
-
-/** 文件名 → 模板 ID：小写、只留白名单字符，并去掉 `..` 与开头的非字母数字。 */
-export function sanitizeTemplateId(value: string) {
-  return value
-    .replace(/\.zip$/iu, '')
-    .trim()
-    .toLowerCase()
-    .replace(/\.{2,}/gu, '.')
-    .replace(/[^a-z0-9._-]+/gu, '-')
-    .replace(/^[^a-z0-9]+/u, '')
-    .slice(0, 64);
-}
-
-export function deriveTemplateUploadRow(zipFile: File): TemplateUploadRow {
-  const id = sanitizeTemplateId(zipFile.name);
-  return {
-    key: zipFile.name,
-    zipFile,
-    coverFile: null,
-    id,
-    title: id,
-    summary: '',
-    tags: '',
-    runtime: 'html',
-    engine: '',
-    engineVersion: '',
-    templateVersion: '0.1.0',
-    entry: 'index.html',
-  };
-}
-
-/** 封面按「与模板 ID 同名的图片」匹配，一次多选即可覆盖整批。 */
-export function attachCoverFiles(
-  rows: TemplateUploadRow[],
-  coverFiles: File[],
-): TemplateUploadRow[] {
-  const covers = new Map<string, File>();
-  for (const file of coverFiles) {
-    if (!COVER_EXTENSION_PATTERN.test(file.name)) continue;
-    const stem = sanitizeTemplateId(
-      file.name.replace(COVER_EXTENSION_PATTERN, ''),
-    );
-    if (!covers.has(stem)) covers.set(stem, file);
-  }
-  return rows.map((row) => {
-    const matched = covers.get(row.id.trim().toLowerCase()) ?? null;
-    return matched ? { ...row, coverFile: matched } : row;
-  });
-}
-
-export function parseTemplateTags(value: string) {
-  const seen = new Set<string>();
-  const tags: string[] = [];
-  for (const raw of value.split(/[,，\s]+/u)) {
-    const tag = raw.trim();
-    if (!tag || seen.has(tag)) continue;
-    seen.add(tag);
-    tags.push(tag);
-  }
-  return tags.slice(0, 16);
-}
-
-/** 逐行校验：返回 row.key → 错误文案；空对象表示整批可以提交。 */
-export function validateTemplateUploadRows(
-  rows: TemplateUploadRow[],
-): Record<string, string> {
-  const errors: Record<string, string> = {};
-  const seen = new Set<string>();
-  const fail = (row: TemplateUploadRow, message: string) => {
-    if (!errors[row.key]) errors[row.key] = message;
-  };
-  if (rows.length === 0) return errors;
-  if (rows.length > TEMPLATE_IMPORT_MAX_BATCH) {
-    for (const row of rows) {
-      fail(row, `单批最多上传 ${TEMPLATE_IMPORT_MAX_BATCH} 个模板`);
-    }
-    return errors;
-  }
-  for (const row of rows) {
-    const id = row.id.trim();
-    if (!TEMPLATE_ID_PATTERN.test(id)) {
-      fail(
-        row,
-        'ID 必须是 1-64 位小写字母、数字、点、下划线或连字符，且以字母数字开头',
-      );
-    } else if (seen.has(id)) {
-      fail(row, 'ID 在本批次内重复');
-    } else {
-      seen.add(id);
-    }
-    if (!row.title.trim() || row.title.trim().length > 80) {
-      fail(row, '名称必须是 1-80 个字符');
-    }
-    if (row.summary.trim().length > 1000) {
-      fail(row, '简介最多 1000 个字符');
-    }
-    if (!TEMPLATE_VERSION_PATTERN.test(row.templateVersion.trim())) {
-      fail(row, '版本号必须是 1-32 位小写字母、数字、点、下划线或连字符');
-    }
-    if (
-      !TEMPLATE_UPLOAD_RUNTIMES.includes(
-        row.runtime as (typeof TEMPLATE_UPLOAD_RUNTIMES)[number],
-      )
-    ) {
-      fail(row, `运行时只能是 ${TEMPLATE_UPLOAD_RUNTIMES.join(' / ')}`);
-    }
-    if (!ENTRY_PATTERN.test(row.entry.trim())) {
-      fail(row, 'entry 必须是模板包内的相对路径');
-    }
-    if (!row.coverFile) {
-      fail(row, '缺少封面：请上传与模板 ID 同名的 PNG / JPEG / WebP');
-    }
-  }
-  return errors;
-}
-
-export function buildTemplateImportManifest(
-  expectedRevision: string,
-  rows: TemplateUploadRow[],
-): AdminImportAgcTemplatesManifest {
-  return {
-    expectedRevision,
-    templates: rows.map((row, index) => {
-      const item: AdminImportAgcTemplateItemPayload = {
-        id: row.id.trim(),
-        title: row.title.trim(),
-        summary: row.summary.trim(),
-        tags: parseTemplateTags(row.tags),
-        runtime: row.runtime,
-        engine: row.engine.trim(),
-        engineVersion: row.engineVersion.trim(),
-        templateVersion: row.templateVersion.trim(),
-        entry: row.entry.trim(),
-        zipField: `zip_${index}`,
-        coverField: `cover_${index}`,
-      };
-      return item;
-    }),
-  };
-}
-
-export function buildTemplateImportFormData(
-  expectedRevision: string,
-  rows: TemplateUploadRow[],
-): FormData {
-  const form = new FormData();
-  form.append(
-    'manifest',
-    JSON.stringify(buildTemplateImportManifest(expectedRevision, rows)),
-  );
-  rows.forEach((row, index) => {
-    form.append(`zip_${index}`, row.zipFile, row.zipFile.name);
-    if (row.coverFile) {
-      form.append(`cover_${index}`, row.coverFile, row.coverFile.name);
-    }
-  });
-  return form;
-}
@@ -9,7 +9,6 @@
    "dev-stack": "node scripts/start-dev-stack.mjs",
    "build": "node scripts/build-release.mjs",
    "release:upload": "node scripts/release-upload.mjs",
-    "nsis:prepare": "node scripts/ensure-nsis-toolset.mjs",
    "skill-pack:check": "node scripts/check-skill-pack.mjs",
    "skill-pack:sync": "node scripts/check-skill-pack.mjs --write",
    "skill-pack:test": "node --test scripts/check-skill-pack.test.mjs",
@@ -67,16 +66,15 @@
    "zustand": "^5.0.14"
  },
  "devDependencies": {
-    "@openai/codex": "0.155.1",
+    "@openai/codex": "0.147.0",
    "@tailwindcss/vite": "^4.1.14",
    "@tauri-apps/cli": "^2.11.2",
    "@testing-library/react": "^16.3.2",
    "@testing-library/user-event": "^14.6.1",
    "@types/react": "^19.2.14",
    "@types/react-dom": "^19.2.3",
-    "@types/react-window": "^1.8.8",
    "@types/three": "^0.184.1",
-    "jszip": "^3.10.1",
+    "@types/react-window": "^1.8.8",
    "tailwindcss": "^4.1.14",
    "typescript": "~5.8.2",
    "vitest": "^0.34.6"
@@ -1,285 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync, spawnSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import {
-  generateUpdateManifest,
-  prepareReleaseVersion,
-  resolveManifestPlatformKeys,
-  resolveReleaseContext,
-  resolveReleasePartition,
-  runTauriBuild,
-} from './build-release.mjs';
-import { readReleaseDryRun, uploadReleaseArtifacts } from './release-oss.mjs';
-import {
-  readUpdaterPubkey,
-  verifyUpdaterSignature,
-} from './verify-updater-signature.mjs';
-
-/**
- * AGC macOS 分区（`<channel>-mac`）发布入口：构建 arm64 单架构包 → arm64 隔离 smoke → 生成 arm64 DMG
- * → 生成分区清单 latest.json → 用产物内烘焙的公钥验签 → 按 dry-run 决定是否上传 OSS。
- *
- * 边界：
- * - 只出 Apple Silicon（arm64）单架构：清单只登记 `darwin-aarch64`。Intel 侧要可用，前提是随包 Node
- *   也能按架构各带一份（`stage-node-runtime.mjs` 对 universal 目标失败关闭）；在实现之前**不得**
- *   把 arm64 产物登记成 `darwin-x86_64`，否则 Intel 客户端会装到跑不起来的包。
- * - Apple 签名与公证暂缺：本入口剥离 `APPLE_*` 凭据让 Tauri 跳过 Apple 签名，但**不能传
- *   `--no-sign`** —— 该标志同时会跳过 updater 的 minisign 签名，产物就没有 `.sig`；
- *   未签名 + 未公证必须显式记录而非静默通过；
- * - 更新包签名（TAURI_SIGNING_PRIVATE_KEY，minisign）是硬需求：缺了客户端一律拒绝安装，
- *   因此构建前要求凭据存在，构建后用内置公钥复核 `.sig` 才允许继续上传；
- * - 未通过验签绝不写 OSS：上传顺序为更新包、签名、首装包，全部成功后才覆盖渠道清单指针。
- */
-const appRoot = fileURLToPath(new URL('..', import.meta.url));
-const repoRoot = path.resolve(appRoot, '../..');
-
-/**
- * 产品名只从 Tauri 配置读取：它同时决定 `*.app` 目录名、updater 归档名与 DMG 卷名。
- * 写死会在改名后让入口静默找错对象（清理、打包、归档三处一起失效）。
- */
-function readProductName() {
-  const read = (file) =>
-    JSON.parse(fs.readFileSync(path.join(appRoot, 'src-tauri', file), 'utf8'));
-  const base = read('tauri.conf.json');
-  const macosPath = path.join(appRoot, 'src-tauri', 'tauri.macos.conf.json');
-  const productName = fs.existsSync(macosPath)
-    ? (read('tauri.macos.conf.json').productName ?? base.productName)
-    : base.productName;
-  assert.ok(
-    typeof productName === 'string' && productName.trim().length > 0,
-    'Tauri 配置缺少 productName',
-  );
-  return productName;
-}
-
-const productName = readProductName();
-const appBundleName = `${productName}.app`;
-const updaterArtifactName = `${productName}.app.tar.gz`;
-assert.equal(process.platform, 'darwin', '只能在 macOS Agent 执行');
-assert.equal(
-  process.env.JENKINS_URL?.length > 0,
-  true,
-  '此入口仅用于 Jenkins 独立工作区',
-);
-assert.equal(
-  fs.realpathSync(process.env.WORKSPACE || '.'),
-  fs.realpathSync(repoRoot),
-  '必须在 Jenkins workspace 根目录执行',
-);
-const space = fs.statfsSync(repoRoot);
-assert.ok(
-  space.bavail * space.bsize >= 8 * 1024 ** 3,
-  '构建前至少需要 8 GiB 可用空间；禁止自动清理开发缓存',
-);
-
-// 仅剥离 Apple 签名/公证变量：本节点没有证书，误用只会让构建失败；
-// 更新包签名与 OSS 凭据必须保留，它们是本入口发布能力的组成部分。
-for (const key of Object.keys(process.env)) {
-  if (/^APPLE_/u.test(key)) delete process.env[key];
-}
-assert.ok(
-  process.env.TAURI_SIGNING_PRIVATE_KEY?.length > 0 ||
-    process.env.TAURI_SIGNING_PRIVATE_KEY_PATH?.length > 0,
-  '缺少更新包签名私钥（TAURI_SIGNING_PRIVATE_KEY / _PATH）：无签名的更新包会被客户端拒绝，禁止继续',
-);
-
-const bucket = process.env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
-const endpoint =
-  process.env.AGC_OSS_ENDPOINT?.trim() || 'oss-rg-china-mainland.aliyuncs.com';
-if (!/^[a-z0-9][a-z0-9.-]{1,62}$/u.test(bucket) || /[\r\n\0]/u.test(endpoint)) {
-  throw new Error('OSS bucket 或 endpoint 配置无效');
-}
-process.env.AGC_UPDATE_OSS_BASE_URL ||= `https://${bucket}.${endpoint}/agc`;
-const dryRun = readReleaseDryRun();
-
-process.env.CARGO_TARGET_DIR = path.join(appRoot, 'src-tauri/target');
-// 单架构目标：清单侧 `resolveManifestPlatformKeys` 只为它登记 darwin-aarch64。
-const macTarget = 'aarch64-apple-darwin';
-const context = resolveReleaseContext([`--target=${macTarget}`]);
-const partition = resolveReleasePartition(context.channel, context.target);
-const version = await prepareReleaseVersion(context);
-// 首装包名必须让清单侧的单架构分支唯一匹配：`<产品名>_<版本>_<架构>.dmg`，
-// 架构段用 Tauri 的 aarch64 口径（不是 updater 平台键的 arm64 / x86_64）。
-const firstInstallName = `${productName}_${version}_aarch64.dmg`;
-
-// 幂等边界：workspace 会保留上一轮产物。先删掉本次将要写出的对象，否则
-//  1) hdiutil 会因同名 DMG 已存在直接失败（首次实跑即命中）；
-//  2) 上一轮遗留的 `.sig` 会让验签门禁把「本轮其实没签」判成通过。
-// 只删本次要写出的确切路径，不动其它版本产物与编译缓存。
-const macosBundle = path.join(context.bundleRoot, 'macos');
-for (const stale of [
-  path.join(macosBundle, updaterArtifactName),
-  path.join(macosBundle, `${updaterArtifactName}.sig`),
-  path.join(macosBundle, `${firstInstallName}`),
-  path.join(macosBundle, `${firstInstallName}.sha256`),
-  path.join(context.bundleRoot, 'latest.json'),
-  path.join(context.bundleRoot, 'release-notes.txt'),
-]) {
-  fs.rmSync(stale, { force: true });
-}
-
-const args = [
-  `--target=${macTarget}`,
-  '--bundles',
-  'app',
-  '--ci',
-  // 刻意不传 `--no-sign`：它会连带跳过 updater 签名，而客户端强制校验更新包签名。
-  // Apple 侧改为剥离 APPLE_* 凭据，未配置身份时 Tauri 不签名也不失败。
-  // 基础配置已开启；这里显式声明，避免被其它配置来源关掉后静默失去更新能力。
-  '--config',
-  '{"bundle":{"createUpdaterArtifacts":true}}',
-];
-const command = (binary, argv, options = {}) =>
-  execFileSync(binary, argv, { cwd: repoRoot, stdio: 'inherit', ...options });
-runTauriBuild(args, context);
-
-const app = path.join(context.bundleRoot, 'macos', appBundleName);
-command(process.execPath, [
-  path.join(appRoot, 'scripts/check-macos-bundle.mjs'),
-  app,
-  'arm64',
-]);
-
-// DMG 放在 bundle 根目录下：渠道清单的首装包选择会扫描该目录，命名必须匹配 `_<version>_aarch64.dmg`。
-const dmgDirectory = path.join(context.bundleRoot, 'macos');
-fs.mkdirSync(dmgDirectory, { recursive: true });
-const dmg = path.join(dmgDirectory, firstInstallName);
-const stage = fs.mkdtempSync(path.join(os.tmpdir(), 'agc-ci-dmg-'));
-try {
-  command('ditto', [app, path.join(stage, appBundleName)]);
-  fs.symlinkSync('/Applications', path.join(stage, 'Applications'));
-  command('hdiutil', [
-    'create',
-    // 前面已删除同名对象；这里再要求显式覆盖，避免残留文件让构建以「文件已存在」失败。
-    '-ov',
-    '-volname',
-    productName,
-    '-srcfolder',
-    stage,
-    '-format',
-    'UDZO',
-    dmg,
-  ]);
-  command('hdiutil', ['verify', dmg]);
-} finally {
-  fs.rmSync(stage, { recursive: true, force: true });
-}
-
-const release = await generateUpdateManifest(context);
-assert.equal(
-  path.resolve(release.downloadArtifact),
-  path.resolve(dmg),
-  '首装包必须锁定本次生成的 arm64 DMG',
-);
-
-// 上传前门禁：用产物里烘焙的公钥复核更新包签名。验不过就停在这里，绝不写 OSS。
-const signature = verifyUpdaterSignature({
-  artifactPath: release.artifact,
-  signaturePath: `${release.artifact}.sig`,
-  pubkey: readUpdaterPubkey(),
-});
-console.log(
-  `[agc-macos] 更新包签名校验通过：alg=${signature.algorithm}，keyId=${signature.keyId}`,
-);
-
-const artifacts = path.join(repoRoot, 'artifacts');
-// 只清理本 Job 的归档输出，不能把上次 DMG 当成本次成功产物。
-fs.rmSync(artifacts, { recursive: true, force: true });
-fs.mkdirSync(artifacts, { recursive: true });
-const sha256 = (file) => {
-  const hash = createHash('sha256');
-  hash.update(fs.readFileSync(file));
-  return hash.digest('hex');
-};
-const dmgHash = sha256(dmg);
-fs.writeFileSync(`${dmg}.sha256`, `${dmgHash}  ${path.basename(dmg)}\n`);
-
-const uploadPlan = uploadReleaseArtifacts(release, {
-  bucket,
-  endpoint,
-  binary: process.env.OSSUTIL_BIN?.trim() || 'ossutil',
-  accessKeyId: process.env.AGC_OSS_ACCESS_KEY_ID?.trim(),
-  accessKeySecret: process.env.AGC_OSS_ACCESS_KEY_SECRET,
-  dryRun,
-});
-
-const archived = [
-  dmg,
-  `${dmg}.sha256`,
-  release.manifestPath,
-  release.notesPath,
-  `${release.artifact}.sig`,
-];
-for (const file of archived) {
-  fs.copyFileSync(file, path.join(artifacts, path.basename(file)));
-}
-
-const commit = execFileSync('git', ['rev-parse', 'HEAD'], {
-  cwd: repoRoot,
-  encoding: 'utf8',
-}).trim();
-// Apple 签名状态必须实测：剥离 APPLE_* 后 Tauri 通常跳过签名，但节点若装了 Developer ID
-// 证书仍可能签上，硬编码 appleSigned=false 会把「其实签了」写成假事实。
-const signatureProbe = spawnSync('codesign', ['-dv', '--verbose=2', app], {
-  encoding: 'utf8',
-});
-const signatureText = `${signatureProbe.stdout ?? ''}${signatureProbe.stderr ?? ''}`;
-const appleSigned = /Authority=Developer ID Application/u.test(signatureText);
-const appleSignatureKind = appleSigned
-  ? 'developer-id'
-  : /Signature=adhoc/u.test(signatureText)
-    ? 'adhoc'
-    : 'unsigned';
-fs.writeFileSync(
-  path.join(artifacts, 'build-manifest.json'),
-  `${JSON.stringify(
-    {
-      version,
-      commit,
-      target: context.target,
-      channel: context.channel,
-      // Apple 签名与公证暂缺：显式记录为未验证项，不静默通过。
-      appleSigned,
-      appleSignatureKind,
-      notarized: false,
-      dryRun,
-      uploaded: !dryRun,
-      updaterSignature: {
-        algorithm: signature.algorithm,
-        keyId: signature.keyId,
-        verified: true,
-      },
-      oss: {
-        bucket,
-        endpoint,
-        partition,
-        latest: `oss://${bucket}/agc/${partition}/latest.json`,
-        objects: uploadPlan.map(({ destination }) => destination),
-      },
-      artifacts: {
-        updater: path.basename(release.artifact),
-        updaterSha256: sha256(release.artifact),
-        updaterBytes: fs.statSync(release.artifact).size,
-        updaterSignature: path.basename(`${release.artifact}.sig`),
-        firstInstall: path.basename(dmg),
-        firstInstallSha256: dmgHash,
-        manifest: 'latest.json',
-      },
-      // 单架构发布：只跑 arm64 隔离 smoke；Intel 未支持（清单里没有 darwin-x86_64 键）。
-      smokes: ['arm64'],
-      manifestPlatformKeys: resolveManifestPlatformKeys(context.target),
-    },
-    null,
-    2,
-  )}\n`,
-);
-console.log(
-  dryRun
-    ? `[agc-macos] dry-run 完成：${partition} 分区产物与清单已生成，未写入 OSS`
-    : `[agc-macos] ${partition} 分区更新包、签名、首装包与清单已上传 OSS`,
-);
@@ -13,8 +13,6 @@ import {
  defaultEditorFeatures,
  withDefaultCargoFeatures,
 } from './cargo-features.mjs';
-import { prepareNsisToolsetForRelease } from './nsis-toolset.mjs';
-import { stageNodeRuntime } from './stage-node-runtime.mjs';

 const appRoot = fileURLToPath(new URL('..', import.meta.url));
 // 提交摘要里的 pathspec 与 `git log` 都以仓库根为基准，不能在应用目录里执行。
@@ -48,12 +46,16 @@ function explicitBuildTarget(args) {
 }

 function validateReleaseTarget(target) {
+  if (target === 'universal-apple-darwin') {
+    throw new Error(
+      '内置 Codex 资源仅支持 macOS 单架构构建，请使用 aarch64-apple-darwin 或 x86_64-apple-darwin',
+    );
+  }
  if (
    ![
      'x86_64-pc-windows-msvc',
      'aarch64-apple-darwin',
      'x86_64-apple-darwin',
-      'universal-apple-darwin',
    ].includes(target)
  ) {
    throw new Error(`不支持的发布目标：${target}`);
@@ -198,12 +200,10 @@ export function updateManifestUrl(
 }

 /**
- * universal 主程序与双目录原生资源共用一个更新包；单架构只登记实际目标。
+ * 单架构产物只登记实际目标，不能把同一原生资源映射为另一架构。
 */
 export function resolveManifestPlatformKeys(target = defaultTarget()) {
  validateReleaseTarget(target);
-  if (target === 'universal-apple-darwin')
-    return ['darwin-aarch64', 'darwin-x86_64'];
  if (target === 'aarch64-apple-darwin') return ['darwin-aarch64'];
  if (target === 'x86_64-apple-darwin') return ['darwin-x86_64'];
  if (target.includes('windows')) {
@@ -442,25 +442,22 @@ export function createChannelConfig(
  };
 }

-function writeChannelConfigFile(channel, target, includeNodeRuntime = false) {
+function writeChannelConfigFile(channel, target) {
  const configPath = path.join(
    os.tmpdir(),
    `agc-tauri-channel-${channel}-${target}.json`,
  );
-  const config = createChannelConfig(channel, target);
-  // 普通 cargo test/dev 不要求发行资源；只有完成 staging 的发行构建加入映射。
-  if (includeNodeRuntime)
-    config.bundle = {
-      resources: { 'resources/node-runtime': 'game-runtime/node' },
-    };
-  fs.writeFileSync(configPath, `${JSON.stringify(config, null, 2)}\n`);
+  fs.writeFileSync(
+    configPath,
+    `${JSON.stringify(createChannelConfig(channel, target), null, 2)}\n`,
+  );
  return configPath;
 }

 export function runTauriBuild(
  args = [],
  context = resolveReleaseContext(args),
-  { spawn = spawnSync, stageRuntime = stageNodeRuntime } = {},
+  { spawn = spawnSync } = {},
 ) {
  if (
    explicitBuildTarget(args) &&
@@ -470,12 +467,7 @@ export function runTauriBuild(
  }
  const tauriArguments = buildTauriBuildArguments(args, context.target);
  const { channel, target } = context;
-  if (!args.includes('--no-bundle')) stageRuntime(target);
-  const configPath = writeChannelConfigFile(
-    channel,
-    target,
-    !args.includes('--no-bundle'),
-  );
+  const configPath = writeChannelConfigFile(channel, target);
  console.log(
    `[ai-game-creator-shell] 渠道 ${channel} 端点配置：${configPath}`,
  );
@@ -491,17 +483,7 @@ export function runTauriBuild(
  const result = spawn(
    npmCommand,
    ['--prefix', '../..', 'exec', 'tauri', '--', ...tauriArguments],
-    {
-      cwd: appRoot,
-      stdio: 'inherit',
-      shell: process.platform === 'win32',
-      env: {
-        ...process.env,
-        // Vite embeds the platform API origin in the packaged renderer. The
-        // release channel and updater channel therefore cannot drift apart.
-        VITE_AGC_PLATFORM_CHANNEL: channel,
-      },
-    },
+    { cwd: appRoot, stdio: 'inherit', shell: process.platform === 'win32' },
  );
  if (result.error) throw result.error;
  if (result.status !== 0) process.exit(result.status ?? 1);
@@ -561,18 +543,6 @@ export function selectFirstInstallArtifact(
    if (!selected?.endsWith('.exe')) {
      throw new Error('Windows 首装包必须复用本次 NSIS .exe 更新包');
    }
-  } else if (target === 'universal-apple-darwin') {
-    // universal 主程序只产出一个 DMG，aarch64 与 x86_64 首装共用它（命名见 build-macos-ci.mjs）。
-    const suffix = `_${version}_universal.dmg`;
-    const candidates = files.filter((file) =>
-      path.basename(file).endsWith(suffix),
-    );
-    if (candidates.length !== 1) {
-      throw new Error(
-        `首装 DMG 必须唯一匹配本次版本 ${version} 的 universal 产物，找到 ${candidates.length} 个`,
-      );
-    }
-    selected = candidates[0];
  } else {
    // Tauri DMG 文件名使用 aarch64 / x64，而 updater 的 Intel 平台键是 x86_64。
    const architecture = target.startsWith('aarch64') ? 'aarch64' : 'x64';
@@ -878,19 +848,14 @@ export async function buildRelease(
  args = [],
  {
    prepareVersion = prepareReleaseVersion,
-    prepareToolset = prepareNsisToolsetForRelease,
    build = runTauriBuild,
    generateManifest = generateUpdateManifest,
  } = {},
 ) {
  const context = resolveReleaseContext(args);
-  const bundling = !args.includes('--no-bundle');
-  if (bundling) await prepareVersion(context);
-  // Tauri bundler 下载 NSIS 工具链时不重试，网络截断会直接毁掉整次打包；
-  // 因此打包前先在 Windows 目标上预置（详见 nsis-toolset.mjs）。
-  if (bundling) await prepareToolset(context, { bundling });
+  if (!args.includes('--no-bundle')) await prepareVersion(context);
  build(args, context);
-  if (bundling) return generateManifest(context);
+  if (!args.includes('--no-bundle')) return generateManifest(context);
 }

 if (
@@ -45,22 +45,19 @@ const packageVersion = JSON.parse(
 ).version;

 function createDmgFixture(root, target, version = packageVersion) {
-  const architecture = target.startsWith('aarch64')
-    ? 'aarch64'
-    : target === universalTarget
-      ? 'universal'
-      : 'x64';
+  const architecture = target.startsWith('aarch64') ? 'aarch64' : 'x64';
  const dmg = path.join(root, `陶泥儿_${version}_${architecture}.dmg`);
  writeFileSync(dmg, 'first installation disk image');
  return dmg;
 }

-test('native sidecar builds accept universal and each macOS architecture', () => {
-  for (const target of [
-    universalTarget,
-    'aarch64-apple-darwin',
-    'x86_64-apple-darwin',
-  ]) {
+test('native sidecar builds reject universal targets and accept each macOS architecture', () => {
+  assert.throws(() => buildTauriBuildArguments([], universalTarget), /单架构/);
+  assert.throws(
+    () => buildTauriBuildArguments(['--target=universal-apple-darwin']),
+    /单架构/,
+  );
+  for (const target of ['aarch64-apple-darwin', 'x86_64-apple-darwin']) {
    assert.deepEqual(buildTauriBuildArguments([], target), [
      'build',
      '--target',
@@ -204,29 +201,8 @@ test('channel manifest URL and build-time endpoint follow the channel', () => {
  });
 });

-test('packaged renderer receives the same channel as the updater manifest', () => {
-  const context = resolveReleaseContext([], {
-    AGC_BUILD_TARGET: windowsTarget,
-    AGC_UPDATE_CHANNEL: 'release',
-  });
-  let spawnOptions;
-  runTauriBuild([], context, {
-    // 必须 stub：真实 staging 会用宿主平台（如 macOS 的 darwin/arm64）去对默认的
-    // Windows 目标做一致性校验，在非 Windows 主机上直接失败——本用例只关心渠道注入。
-    stageRuntime: () => {},
-    spawn: (_binary, _args, options) => {
-      spawnOptions = options;
-      return { status: 0 };
-    },
-  });
-  assert.equal(spawnOptions?.env?.VITE_AGC_PLATFORM_CHANNEL, 'release');
-});
-
-test('macOS manifests advertise exactly the architectures actually built', () => {
-  assert.deepEqual(resolveManifestPlatformKeys(universalTarget), [
-    'darwin-aarch64',
-    'darwin-x86_64',
-  ]);
+test('macOS manifests only advertise the architecture actually built', () => {
+  assert.throws(() => resolveManifestPlatformKeys(universalTarget), /单架构/);
  assert.deepEqual(resolveManifestPlatformKeys('aarch64-apple-darwin'), [
    'darwin-aarch64',
  ]);
@@ -270,6 +246,7 @@ test('release context resolves explicit targets before environment/default and f
    ['--target='],
    ['--target', '--no-bundle'],
    ['--target', windowsTarget, '--target=aarch64-apple-darwin'],
+    ['--target', universalTarget],
    ['--target', 'unknown'],
  ])
    assert.throws(() => resolveReleaseContext(args, {}));
@@ -302,7 +279,6 @@ test('explicit macOS target drives version lookup, Tauri endpoint, artifact and
            build: (args, context) => {
              seenContexts.push(context);
              runTauriBuild(args, context, {
-                stageRuntime: () => {},
                spawn: (_binary, command) => {
                  const configIndex = command.lastIndexOf('--config');
                  const config = JSON.parse(
@@ -485,8 +461,8 @@ test('invalid target or platform used as channel fails before any release side e
    },
  };
  await assert.rejects(
-    () => buildRelease(['--target', 'unknown'], sideEffects),
-    /不支持的发布目标/,
+    () => buildRelease(['--target', universalTarget], sideEffects),
+    /单架构/,
  );
  await withEnv({ AGC_UPDATE_CHANNEL: 'dev-win' }, () =>
    assert.rejects(
@@ -497,43 +473,6 @@ test('invalid target or platform used as channel fails before any release side e
  assert.equal(touched, false);
 });

-test('universal uses the Mac channel and the same signed artifact for both architectures', () => {
-  const context = resolveReleaseContext(['--target', universalTarget], {
-    AGC_BUILD_TARGET: windowsTarget,
-  });
-  // 渠道本身不含系统：分区由渠道 + 目标推导，二者不能混为一谈。
-  assert.equal(context.channel, 'dev');
-  assert.equal(
-    resolveReleasePartition(context.channel, context.target),
-    'dev-mac',
-  );
-  assert.ok(context.bundleRoot.includes(universalTarget));
-  withSignedArtifact('陶泥儿.app.tar.gz', (artifact) => {
-    const manifest = createUpdateManifest(artifact, {
-      ...context,
-      downloadArtifact: createDmgFixture(
-        path.dirname(artifact),
-        universalTarget,
-      ),
-    });
-    assert.deepEqual(Object.keys(manifest.platforms), [
-      'darwin-aarch64',
-      'darwin-x86_64',
-    ]);
-    assert.deepEqual(
-      manifest.platforms['darwin-aarch64'],
-      manifest.platforms['darwin-x86_64'],
-    );
-    assert.match(manifest.platforms['darwin-aarch64'].url, /\/dev-mac\//);
-    // 两个平台键共用同一个 universal 首装包，不能要求出两份架构 DMG。
-    assert.deepEqual(
-      manifest.downloads['darwin-aarch64'].url,
-      manifest.downloads['darwin-x86_64'].url,
-    );
-    assert.match(manifest.downloads['darwin-aarch64'].url, /_universal\.dmg$/u);
-  });
-});
-
 test('Windows remains the default and explicit Windows overrides macOS environment', () => {
  const files = ['/tmp/mac.app.tar.gz', '/tmp/windows.exe', '/tmp/mac.dmg'];
  for (const context of [
@@ -551,7 +490,6 @@ test('Windows remains the default and explicit Windows overrides macOS environme
      ['--target', windowsTarget, '--config', 'user-config.json'],
      context,
      {
-        stageRuntime: () => {},
        spawn: (_binary, command) => {
          assert.ok(
            command.includes(
@@ -590,117 +528,6 @@ test('no-bundle smoke skips version writes and manifest generation', async () =>
  assert.deepEqual(steps, ['dev']);
 });

-test('Windows 打包在 Tauri 构建前预置 NSIS 工具链', async () => {
-  const events = [];
-  await buildRelease(['--target', windowsTarget], {
-    prepareVersion: () => {
-      events.push('version');
-    },
-    prepareToolset: (context, options) => {
-      events.push(`toolset:${context.target}:${options.bundling}`);
-    },
-    build: () => {
-      events.push('build');
-    },
-    generateManifest: () => {
-      events.push('manifest');
-    },
-  });
-  assert.deepEqual(events, [
-    'version',
-    `toolset:${windowsTarget}:true`,
-    'build',
-    'manifest',
-  ]);
-});
-
-test('NSIS 工具链预置失败即失败关闭，不进入 Tauri 构建', async () => {
-  const events = [];
-  await assert.rejects(
-    buildRelease(['--target', windowsTarget], {
-      prepareVersion: () => {
-        events.push('version');
-      },
-      prepareToolset: () => {
-        throw new Error('NSIS 工具链预置失败：下载 nsis-3.11.zip 失败');
-      },
-      build: () => {
-        events.push('build');
-      },
-      generateManifest: () => {
-        events.push('manifest');
-      },
-    }),
-    /NSIS 工具链预置失败/u,
-  );
-  assert.deepEqual(events, ['version']);
-});
-
-test('--no-bundle 不预置 NSIS 工具链', async () => {
-  const steps = [];
-  await buildRelease(['--no-bundle', '--target', windowsTarget], {
-    prepareVersion: () => {
-      steps.push('version');
-    },
-    prepareToolset: () => {
-      steps.push('toolset');
-    },
-    build: () => {
-      steps.push('build');
-    },
-    generateManifest: () => {
-      steps.push('manifest');
-    },
-  });
-  assert.deepEqual(steps, ['build']);
-});
-
-test('release stages Node before Tauri and injects its resource mapping only for bundles', () => {
-  const context = resolveReleaseContext(['--target', windowsTarget]);
-  const events = [];
-  runTauriBuild(['--target', windowsTarget], context, {
-    stageRuntime(target) {
-      assert.equal(target, windowsTarget);
-      events.push('stage');
-    },
-    spawn(_binary, args) {
-      events.push('build');
-      const config = JSON.parse(
-        readFileSync(args[args.lastIndexOf('--config') + 1], 'utf8'),
-      );
-      assert.deepEqual(config.bundle.resources, {
-        'resources/node-runtime': 'game-runtime/node',
-      });
-      return { status: 0 };
-    },
-  });
-  assert.deepEqual(events, ['stage', 'build']);
-  runTauriBuild(['--no-bundle', '--target', windowsTarget], context, {
-    stageRuntime() {
-      assert.fail('no-bundle must not stage resources');
-    },
-    spawn(_binary, args) {
-      const config = JSON.parse(
-        readFileSync(args[args.lastIndexOf('--config') + 1], 'utf8'),
-      );
-      assert.equal(config.bundle, undefined);
-      return { status: 0 };
-    },
-  });
-  assert.throws(
-    () =>
-      runTauriBuild(['--target', windowsTarget], context, {
-        stageRuntime() {
-          throw new Error('missing runtime');
-        },
-        spawn() {
-          assert.fail('invalid runtime must prevent build');
-        },
-      }),
-    /missing runtime/,
-  );
-});
-
 test('channel manifest carries version, platform keys and signature', () => {
  withSignedArtifact('陶泥儿_0.1.48_x64-setup.exe', (artifact) => {
    withEnv({ AGC_UPDATE_RELEASE_NOTES: '修复与改进' }, () => {
@@ -804,7 +631,6 @@ for (const channel of ['release', 'beta-2']) {
              '2.3.4',
            );
            runTauriBuild([`--target=${target}`], context, {
-              stageRuntime: () => {},
              spawn: (_binary, command) => {
                const config = JSON.parse(
                  readFileSync(
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
kdletters	5ac7f65c92	合并 master 并保留游戏分发功能 - 合并 origin/master（含 `429f991bd` 定向回滚、Godot 原生绑定迁移与策划 Agent 模型控件）。 - 回滚提交删除的游戏分发代码按功能面补回：SpacetimeDB 模块注册与迁移表、api-server 路由与权限映射、后台审核页、AGC 发布命令与 payload 类型、SelectionStage 的 games 阶段、ProjectSupervisorView 的 overlay 挂载点、主站路由与标题、Cargo 依赖与锁、vite/vitest 代理与 tailwind source。 - 保留 master 的 Godot C++ 迁移（移除旧 vendored GDExtension、新的 composer 控件布局）与其它 master 侧改动。 - 修正 master 自带的红灯断言：/api/creation-entry 已被 api-server 列入退役路由，dev 中间件按退役路径 404，测试改为断言不进入代理。 - 验证：cargo check（api-server / spacetime-module / spacetime-client / AGC 壳）、cargo test（api-server 游戏分发 17、module-game-distribution 11、AGC 本地导出 7）、全量 vitest 4557 passed、两端 typecheck、eslint、rustfmt、编码、文档索引与 SpacetimeDB schema guard。	2026-09-21 00:20:45 +08:00
kdletters	2f0e2a48a3	把游戏分发客户端纳入 ESLint 边界 - `.eslintrc.cjs`：`src/services/gameDistributionClient.ts` 及其测试加入活跃服务白名单，不再被遗留忽略列表吞掉。 - 客户端：按仓库规则修掉排序与未使用类型导入（顺带移除两个只在 re-export 中出现的多余导入）。 - 修复 `scripts/vite-retired-css-plugin.test.ts` 的边界门禁：活跃模块不得停留在 ESLint 忽略名单里。	2026-09-20 22:56:43 +08:00
kdletters	00b96f244d	补齐 AGC 素材直传的错误文案与能力作用域验证 - AGC：直传对象存储抛错（能力作用域拒绝、网络不可达、请求被取消）时统一转成中文可操作文案，不再把英文插件错误原样暴露给作者。 - 测试：新增直传抛错的单测，确认失败时不再登记素材。 - 文档：记录用 tauri-plugin-http 同一套 urlpattern 逻辑验证 `https://.aliyuncs.com/` 命中 dev/生产 OSS 桶且拒绝无关主机，并说明桌面端真实执行仍需在装有 AGC 的机器上补跑。	2026-09-20 22:49:56 +08:00
kdletters	0dde6ee501	打磨封面与截图的文件选择交互 - 网页发布页：封面与截图改用透明 input 覆盖自定义胶囊按钮，点击命中原生控件；上传后不再出现「未选择任何文件」与「已选择」互相矛盾的状态。 - AGC 发布面板：同一处理，按钮文案随状态在「选择封面图片 / 更换封面图片」「添加截图 / 截图已满 6 张」之间切换。 - 文档：实施计划补充真实浏览器发布链路证据（网页上传封面 → my-games 待审 → 版本 frozenMetadata 指向本次上传素材）与交互打磨记录。	2026-09-20 22:45:50 +08:00
kdletters	4a91e5865a	创建游戏同步校验封面与截图素材归属 - 服务端：抽出 `resolve_owned_game_media`，创建游戏与创建版本复用同一素材校验；不存在的素材返回 400，借用他人素材返回 403，避免游戏行先落一个无效素材 ID。 - 脚本：新增 `npm run check:game-distribution-media-e2e`（`scripts/check-game-distribution-media-e2e.mjs`），在本地 dev 栈上跑真实素材直传、冻结、审核生效、匿名换签读与发行网关的可重复检查。 - 文档：后端数据契约补充创建游戏的素材复核口径，实施计划记录真实本地栈 27 项媒体验证与真实浏览器封面/截图展示证据。	2026-09-20 22:34:33 +08:00
kdletters	4a2b270714	补齐游戏分发封面与截图的冻结、上传与展示 - 服务端：游戏表追加可空 cover_object_key / screenshots_json，版本表追加可空 metadata_json，创建版本时校验必需封面、最多 6 张截图与图片素材归属，并从素材记录派生对象键生成冻结资料。 - 服务端：审核通过时把冻结资料整体生效到游戏行；只有已公开且存在有效活动版本的游戏，其封面/截图素材才在 /api/assets/read-url 获得匿名读授权。 - 服务端：作者与管理员回读版本时追加 frozenMetadata，带回封面与截图素材 ID 供续发复用，公开投影仍只暴露对象键。 - 网页：/games/publish 新增「封面与截图」区，复用平台图片直传与 confirm 通道，缺封面或截图超量在发请求前拦截，更新版本时按冻结资料回填且不要求重新上传。 - 网页：游戏广场卡片与详情页 hero 换签展示真实封面，详情页新增可点击的截图缩略图条，无素材或换签失败时静默回退原有渐变占位。 - AGC：发布面板支持封面必选与截图最多 6 张，新增素材直传服务并在创建游戏前拦截缺封面，同一文件重复提交复用素材 ID。 - AGC：http 能力作用域新增阿里云 OSS 直传地址，客户端同时校验直传目标必须是平台素材存储。 - 契约与文档：同步 shared-contracts、packages/shared 契约，更新 SpacetimeDB 迁移注释、后端架构、玩法链路与实施计划文档，并补齐网页端与 AGC 定向测试。	2026-09-20 22:19:50 +08:00
kdletters	789aef4ce5	补齐游戏分发结构化可观测事件 - api-server 游戏分发模块新增 package_confirmed/package_rejected/version_submitted/version_cancelled 事件，带 request_id、game_id、version_id、耗时与体积/文件数（不记录凭据、URL 与文件内容） - 新增 review_backlog_listed（审核积压）、review_decided（审核结论与公开修订号）、game_unpublished/game_suspended（撤销传播）与 publish_switch_blocked/unavailable（开关拦截）事件 - 发行网关拒绝路径补 debug 级 release_rejected（cookie、扩展名、未公开、非公开版本）便于排查发行 4xx - 运维文档给出可直接 grep 的事件名与关键字段，实施计划记录真实栈复跑证据	2026-09-20 21:30:32 +08:00
kdletters	7ff6e46774	修复分支上的格式与导入排序门禁问题 - 用 rustfmt 修正 AGC Tauri 导出包测试的断言排版 - 按 simple-import-sort 修正 AGC App.tsx 导入顺序与 packages/shared 导出顺序	2026-09-20 21:17:27 +08:00
kdletters	2254831db5	补充游戏内真实触屏输入的运行时证据 - 用 CDP Input.dispatchTouchEvent 向游玩页 iframe 派发真实 touchStart/touchEnd，沙箱内探测包收到 touchstart/touchend/pointerdown(pointerType=touch)/click 并命中目标元素 - 记录触摸模拟必须在 iframe 文档创建前启用的踩坑口径	2026-09-20 21:11:37 +08:00
kdletters	64425e8d1a	Merge commit 'a2acfa9a6' into codex/game-distribution	2026-09-20 20:59:58 +08:00
kdletters	328ac31844	恢复游戏分发完整实现（特性分支） - 主站：游戏广场、详情、在线游玩、网页发布与作者中心，以及共享契约与客户端服务 - 后端：module-game-distribution 领域层、SpacetimeDB 表/迁移/绑定、spacetime-client facade、api-server 路由与发行网关 - 后台：游戏审核页（待审列表、通过/拒绝、安全下架） - AGC：发布面板、本地导出包读取命令与发布服务，含默认跳过的真实链路测试 - 运维：发行来源 nginx 模板与门禁、game-distribution:publish 灰度发布开关、OSS PutObject 受控重试 - 文档：主规范、里程碑与实施计划、决策日志与踩坑记录	2026-09-20 20:49:42 +08:00