修复游戏创作工作流与UI图集事务

将固定图片规则降为默认合同并允许Supervisor持久委派扩展UI图集
修复条件Graph路由、终态投影、steer窗口和manifest只读刷新
将UI主图、切片、manifest与Agent DB审计收口为可恢复事务
加固跨平台句柄、journal重放、残留隔离和Agent DB容量门禁
补充工作流、事务恢复、Provider与项目夹具回归
同步技术方案与团队共享决策

.codex/skills/genarrative-external-editor-api/SKILL.md

@@ -17,7 +17,7 @@ Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses on
 2. Before the first generation in a new conversation, obtain a canvas name unless an existing `projectId` and `assetFolderId` were supplied. Create or reuse a project and a same-name asset-library folder. Retain `canvasName`, `projectId`, `assetFolderId`, and the current art spec.
 3. Normalize art requests into a reusable spec. Ask only for missing values that block the selected operation. Reuse the spec until the user changes its style, subject family, palette, format, or constraints.
 4. Infer the operation from the user's intent. Do not ask the user to select an API unless two operations would produce materially different artifacts.
-5. If a reference exists only as a local file, upload and confirm it first. Pass the stable returned `objectKey` to operations that accept object references; never substitute a temporary signed URL. For an icon-spritesheet primary spec, additionally create a project resource or asset record with `assetKind="icon-spec"`, then pass the returned resource or asset ID as `referenceId`.
+5. If a reference exists only as a local file, upload and confirm it first. Pass the stable returned `objectKey` to generation; never substitute a temporary signed URL.
 6. For generation endpoints that support the fields, include `projectId`, `assetFolderId`, an asset label, and `canvasCompletion` so the result enters both the canvas and its same-name library folder.
 7. Treat every generation POST as asynchronous. Send one stable `Idempotency-Key` per logical request, retain the returned `operationId`, and poll the returned `statusUrl` or `GET /api/external/v1/generations/{operationId}` according to `pollAfterMs`.
 8. Consume `result` only after `status=completed`. On `failed`, surface the safe error. On a client timeout or lost response, retain the operation/key; do not create a replacement request.
@@ -27,12 +27,11 @@ Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses on
 ## Essential Invariants
 
 - Authenticate MCP and business API calls with `Authorization: Bearer <tnr_sk_...>`. Never ask the user to paste a key into chat or place one in repository files.
-- All nine generation POST routes require `Idempotency-Key` and return HTTP `202`; `202` is durable acceptance, not a media result.
+- All eight generation POST routes require `Idempotency-Key` and return HTTP `202`; `202` is durable acceptance, not a media result.
 - Retry an uncertain submission only with the exact same body and the same idempotency key. A polling timeout is not permission to generate again.
-- Use stable references such as `objectKey`, project resource ID, or asset ID where each operation permits them. Image edit/redraw is stricter: `sourceReferenceId` accepts only a registered project resource ID or asset ID; upload confirmation alone is not enough. Use `/assets/read-url` only for temporary preview/download access.
+- Use stable references such as `objectKey`, project resource ID, or asset ID in generation requests. Use `/assets/read-url` only for temporary preview/download access.
 - Preserve both warning channels after completion. A general `warning` can coexist with `sliceWarning`; do not discard either.
 - Do not invent missing derivatives. A source-preserved warning means the main source remains usable but requested post-processing failed. A slice warning means the complete transparent sheet is usable but individual slices are absent.
-- For successful `style="pixelArt"`, treat completed-result and nested resource/asset dimensions as the final logical-grid PNG dimensions. They may differ from `size`, `imageSize`, the provider image, and `canvasCompletion.placeholder`; do not rescale or reject the artifact to match those inputs.
 - Keep generated artifacts in the canvas and asset library together. Character animation accepts `assetFolderId` and `assetLabel`; its completed result directly returns the final `assetKind="character-animation"` resource and asset with formal sequence fields. Do not create a duplicate first-frame record.
 
 ## Documentation Navigation
@@ -106,21 +105,6 @@ client.generate_image(
 )
 ```
 
-For background removal, pass a stable owner-scoped object key, project resource ID, or asset ID; the helper keeps the same asynchronous submission and polling contract:
-
-```python
-session = client.prepare_canvas_session("去背景画布")
-client.remove_background(
-    "editor-upload/object.png",
-    source_width=720,
-    source_height=1280,
-    canvasSession=session,
-    assetLabel="去背景结果",
-)
-```
-
-Background removal preserves the source pixel size. For normal canvas placement with `canvasSession`, pass the real `source_width` and `source_height`, or provide both `canvasWidth` and `canvasHeight`; the helper rejects missing dimensions instead of guessing a square placeholder. `assetKind` may only describe a static image and must match the authoritative source record. Prefer a project resource ID or asset ID when the same object key has multiple semantic registrations; for a raw object key outside in-place replacement, pass `sourceResourceId` to disambiguate. Passing `targetLayerId` selects in-place replacement: the helper retains the session's project/library context but does not inject `canvasCompletion`, and it rejects an explicit `canvasCompletion` combined with `targetLayerId`. The target layer must point to the same authoritative object as the source, and the server durably binds a raw object key to that target resource for Worker revalidation.
-
 Helper convenience methods wait locally, but the server still uses short asynchronous submit/status requests. For durable caller-controlled orchestration, call `submit_generation`, persist its `operationId` and idempotency key, then call `get_generation` or `wait_for_generation`.
 
 For character animation, pass the canvas session and asset label to `animate_character`. The helper submits asynchronously and returns the completed compact result containing the authoritative formal `resource` and `asset`; do not synthesize a library asset from the first frame.

.codex/skills/genarrative-external-editor-api/references/api-operations.md

@@ -8,7 +8,7 @@ All paths below are relative to `https://www.genarrative.world`. Discovery and S
 
 | Operation | Method and path | Minimum input |
 | --- | --- | --- |
-| List projects | `GET /api/external/v1/editor/projects` | Authentication; optional `view=full\|summary` (default `full`) |
+| List projects | `GET /api/external/v1/editor/projects` | Authentication |
 | Create project | `POST /api/external/v1/editor/projects` | Optional `title` |
 | Load recent project | `GET /api/external/v1/editor/projects/recent` | Authentication |
 | Get project | `GET /api/external/v1/editor/projects/{projectId}` | `projectId` |
@@ -19,13 +19,6 @@ All paths below are relative to `https://www.genarrative.world`. Discovery and S
 
 Canvas save uses optimistic revision control. Pass the last authoritative `expectedRevision`; on conflict, reload instead of replaying a stale full layout.
 
-Project listing supports two views:
-
-- `view=full` is the REST default and returns the complete project, canvas, layers, and resources.
-- `view=summary` returns only `projectId`, `title`, `updatedAt`, and nullable `cover`, so callers can display, search, disambiguate same-name projects, and select a safe target without loading every canvas snapshot.
-- Hosted MCP `list_editor_projects` always uses `summary`; call `get_editor_project` after selecting a `projectId` when complete authoritative state is required.
-- `cover` contains only `resourceId`, stable `objectKey`, dimensions, and `updatedAt`. It never embeds image bytes, a Data URL, or a signed URL. To display it, pass `cover.objectKey` to `get_external_asset_read_url`; signed URLs are temporary and must not be persisted or reused as generation references.
-
 ## Asset and Upload Operations
 
 | Operation | Method and path | Minimum input |
@@ -50,16 +43,15 @@ Every generation row requires a stable `Idempotency-Key` header and returns HTTP
 | Capability | POST path | Required body fields | Common optional body fields |
 | --- | --- | --- | --- |
 | Image generation | `/api/external/v1/editor/images/generations` | `prompt` | `kind`, `style`, `model`, `aspectRatio`, `imageSize`, `size`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
-| Image edit/redraw | `/api/external/v1/editor/images/edits` | `prompt`, `sourceReferenceId` | `referenceImageSrcs`, `model`, `size`, `projectId`, `assetFolderId`, `assetLabel`, `targetLayerId`, `canvasCompletion` |
-| Background removal | `/api/external/v1/editor/images/background-removals` | `sourceImageSrc` | `projectId`, `sourceResourceId`, `targetLayerId`, static-image `assetKind`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
-| Icon spritesheet | `/api/external/v1/editor/icon-spritesheets/generations` | `referenceId`, `iconDescriptions` | `sliceLayout`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion` |
+| Image edit/redraw | `/api/external/v1/editor/images/edits` | `prompt`, `sourceImageSrc` | `referenceImageSrcs`, `model`, `size`, `projectId`, `assetFolderId`, `assetLabel`, `sourceResourceId`, `targetLayerId`, `canvasCompletion` |
+| Icon spritesheet | `/api/external/v1/editor/icon-spritesheets/generations` | `referenceImageSrc`, `iconDescriptions` | `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion` |
 | UI asset extraction | `/api/external/v1/editor/ui-designs/assets/extractions` | `sourceImageSrc`, `aspectRatio`, `imageSize` | `screenColor`, `model`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `spritesheetLabel`, `canvasCompletion` |
 | Character animation | `/api/external/v1/editor/character-animations/generations` | `sourceLayerId`, `sourceImageSrc`, `sourceWidth`, `sourceHeight`, `promptText`, `resolution`, `ratio`, `frameCount`, `durationSeconds`, `model` | `projectId`, `sourceResourceId`, `assetFolderId`, `assetLabel`, `canvasCompletion` |
 | Video generation | `/api/external/v1/editor/videos/generations` | `prompt`, `model`, `aspectRatio`, `durationSeconds`, `resolution`, `mode`, `sound` | `referenceImageSrcs`, `referenceVideoSrcs`, `referenceAudioSrcs`, `webSearchEnabled`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion` |
-| Sound effect | `/api/external/v1/editor/audios/sound-effects/generations` | `prompt` | `model`, `duration`, `loop`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
+| Sound effect | `/api/external/v1/editor/audios/sound-effects/generations` | `prompt`, `duration` | `model`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
 | Background music | `/api/external/v1/editor/audios/background-music/generations` | `gptDescriptionPrompt`, `makeInstrumental` | `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
 
-Poll all nine through:
+Poll all eight through:
 
 ```text
 GET /api/external/v1/generations/{operationId}
@@ -73,35 +65,29 @@ Supply the `operationId` returned by submission. Poll no faster than `pollAfterM
 - Pass `assetFolderId` plus `assetLabel` for image, edit, icon spritesheet, video, sound effect, and BGM operations when supported.
 - UI extraction uses `assetFolderId` and `spritesheetLabel`.
 - Character animation accepts `assetFolderId` and `assetLabel`. Its completed compact result directly returns the final `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`; never create a duplicate first-frame resource or asset.
-- Background removal derives the final static-image `assetKind` from the authoritative source record. A conflicting request kind or any video, audio, animation, or image-sequence kind returns `400` before queueing. Without `canvasCompletion`, `targetLayerId` must point to the same authoritative object as `sourceImageSrc` (prefer `assetObjectId`, otherwise canonical bucket/object key).
 - If a caller must manually create a `character-animation` resource or asset, put the authoritative frames and total sequence duration in `imageSequenceFrames` and `imageSequenceDurationMs`. Keep `generationInputs` replayable: it must not contain legacy runtime fields such as `characterAnimation`, `frames`, `previewVideoPath`, `frameCount`, `fps`, or `durationSeconds`.
 - Reload project/library state after completion when full current state is required.
 
 ## Reference Field Mapping
 
-After confirming a local upload, pass its stable `objectKey` into operations that accept object references:
+After confirming a local upload, pass its stable `objectKey` into:
 
 | Target capability | Field |
 | --- | --- |
 | Image generation | `referenceImageSrcs` |
-| Image edit/redraw | `sourceReferenceId` must be a registered project resource ID or asset ID; additional references remain in `referenceImageSrcs` |
-| Icon spritesheet | Register the primary spec as an `assetKind="icon-spec"` project resource or asset, then pass its returned ID as `referenceId`; additional style references remain in `referenceImageSrcs` |
+| Image edit/redraw | `sourceImageSrc`; additional references in `referenceImageSrcs` |
+| Icon spritesheet | `referenceImageSrc`; additional style references in `referenceImageSrcs` |
 | UI design extraction | `sourceImageSrc`; additional references in `referenceImageSrcs` |
 | Character animation | `sourceImageSrc` |
 | Video with image references | `referenceImageSrcs` |
 
-For image edit/redraw, confirming an upload is not sufficient: create a project resource or asset-library record first, then pass that record's ID as `sourceReferenceId`. The main source never accepts objectKey, URL, Data URL, or Blob URL. Use video/audio reference arrays only with models that support them. Do not pass an expiring signed read URL as a generation reference.
-
-The icon-spritesheet primary `referenceId` is intentionally stricter than ordinary image references: it accepts only a current-owner project resource ID or asset ID whose authoritative `assetKind` is `icon-spec`. It does not accept an `objectKey`, URL, Data URL, or Blob URL.
-
-`sliceLayout: "grid-2x2"` is an opt-in contract for four fixed game-runtime assets. The provider prompt and server persistence both preserve the ordered slots left-top, right-top, left-bottom, right-bottom. Omit it to retain the default connected-component slicing behaviour for ordinary free-form icon sheets.
+Use video/audio reference arrays only with models that support them. Do not pass an expiring signed read URL as a generation reference.
 
 ## Common Values
 
 Use OpenAPI as the final authority; these common values are a routing aid:
 
 - Image `kind`: `spec`, `character`, `quick-edit`, `ui-design`, `publication-material`; ordinary image generation may omit it.
-- External v1 currently has no structured game-scene generation operation. Do not send `kind: "scene"` or `assetKind: "scene"` through generic image generation; the server rejects both before queueing.
 - Image `model`: `gpt-image-2`, `gemini-3.1-flash-image-preview`, `nanobanana2`, `nano-banana`.
 - Image `aspectRatio`: `1:1`, `2:3`, `3:2`, `9:16`, `16:9`.
 - Image `imageSize`: `0.5K`, `1K`, `2K`.
@@ -109,7 +95,6 @@ Use OpenAPI as the final authority; these common values are a routing aid:
 - Video `aspectRatio`: `16:9`, `9:16`, `1:1`, `4:3`, `3:4`, `21:9`.
 - Video `resolution`: `480p`, `720p`, `1080p`; `mode`: `std`; `sound`: `on` or `off`.
 - Character animation uses `model: "seedance2.0-fast"`; `resolution`: `480p` or `720p`; `frameCount`: `32`, `40`, or `48`; `durationSeconds`: `4`, `5`, or `6`; `ratio`: `same`, `1:1`, `4:3`, `16:9`, `9:16`, or `3:4`.
-- Sound effect uses canonical model `eleven_text_to_sound_v2`; omit `duration` or send `null` for automatic duration, otherwise send a finite `0.5-30` number. `loop` defaults to `false` and remains independent from Prompt text.
 - UI extraction uses `aspectRatio: "1:1"`; use `imageSize: "1K"` for normal/small extraction and `2K` for dense designs.
 
 Do not hard-code this list as a replacement client schema. In particular, the top-level image `style` field is intentionally extensible; see `requests-and-outputs.md` for its fallback behavior.

.codex/skills/genarrative-external-editor-api/references/capability-routing.md

@@ -47,7 +47,6 @@ Infer what is already clear and ask only for missing fields that block the selec
 | --- | --- |
 | Generate a background, character, spec, UI mockup, or publication image | Image generation |
 | Redraw, retouch, or replace an existing image | Image edit |
-| Remove the background from an existing image | Background removal |
 | Generate from a local reference | Upload and confirm the local file, then image generation or edit |
 | Build a reusable transparent icon/game atlas from a visual spec | Icon spritesheet generation |
 | Extract marked assets from an existing UI design | UI design asset extraction |
@@ -79,9 +78,9 @@ Keep the existing autonomous-build task graph. Do not add a parallel task system
 
 1. `art-director` generates `assets/art-spec.png` with image generation, `kind: "spec"`, then registers it as `assetKind: "icon-spec"`. This image is the authoritative visual spec; `generationInputs.artSpec` is supporting structured context.
 2. `design-foundation` generates `assets/ui-prototype.png` with `kind: "ui-design"`, using the registered art-spec resource ID in `referenceImageSrcs`.
-3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. For the four-category game contract it must also send `sliceLayout: "grid-2x2"`; this is an explicit fixed-slot contract, not a client-side guessed crop.
+3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceImageSrc` plus concrete `iconDescriptions`.
 
-For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. For the four-category game-chat contract, require response `sliceLayout: "grid-2x2"` and exactly four slices before registering the local runtime sheet; both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
+For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. For the four-category game-chat contract, require exactly four slices before registering the local runtime sheet; both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
 
 Never use `assets/ui-prototype.png` as the spritesheet visual-spec reference. UI extraction is outside this canonical DAG.
 

.codex/skills/genarrative-external-editor-api/references/requests-and-outputs.md

@@ -15,7 +15,7 @@ Use this reference to build generation payloads, carry canvas/library context, p
 
 ## Asynchronous Submission
 
-All nine generation POST routes require `Idempotency-Key` and return HTTP `202` with an `ExternalEditorGenerationSubmissionResponse` shaped like:
+All eight generation POST routes require `Idempotency-Key` and return HTTP `202` with an `ExternalEditorGenerationSubmissionResponse` shaped like:
 
 ```json
 {
@@ -71,8 +71,6 @@ status = client.get_generation(operation_id)
 completed = client.wait_for_generation(operation_id)
 ```
 
-Background removal uses the same submission and polling state machine. `sourceImageSrc` must be a stable owner-scoped object key, project resource ID, or asset ID; never pass a Data URL, Blob URL, or expiring signed URL. An explicit resource ID or asset ID is resolved before any object-key fallback. If a raw object key has multiple registrations with conflicting authoritative metadata, pass `sourceResourceId` to disambiguate or the server returns `400`. Use `projectId + canvasCompletion` for normal canvas placement. When `canvasCompletion` is absent, `projectId + targetLayerId` replaces an existing resource-backed layer and is rejected before queueing if the target is invalid; for a raw object key, the target resource becomes the durable source binding rechecked by the Worker. If both placement fields are absent, the server does not add the result to the canvas. The completed compact result contains the stable output object key, dimensions, and persisted resource/asset references when requested.
-
 ## Canvas and Asset-Library Completion
 
 For endpoints that support these fields, include:
@@ -98,9 +96,7 @@ A minimal `canvasCompletion` is:
 }
 ```
 
-`dialogId` is optional. The placeholder supplies canvas placement and completion coordinates; it is not a final media pixel-size constraint. For successful pixel-art snapping, the result layer uses the final logical-grid PNG dimensions even when they differ from the placeholder. Do not reconstruct canvas state from completion results. Reload the project and asset library when complete authoritative snapshots are needed.
-
-Background removal preserves the source image dimensions. For normal canvas placement, the Python helper therefore requires the real `source_width` and `source_height` whenever `canvasSession` is used without an explicit `canvasWidth` plus `canvasHeight`; it never substitutes a square default. Passing `targetLayerId` instead selects in-place replacement, so the helper keeps the session's project/library fields without injecting `canvasCompletion` and rejects callers that explicitly combine both placement modes. The request `assetKind` is optional, static-image only, and must equal the authoritative source type when one exists. An in-place target must resolve to the same authoritative source object; a raw object key is bound to that target resource instead of relying on project-list order.
+`dialogId` is optional. Do not reconstruct canvas state from completion results. Reload the project and asset library when complete authoritative snapshots are needed.
 
 Character animation accepts `assetFolderId` and `assetLabel` and persists the final transparent sequence directly. Its completed compact result includes the authoritative `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`. Use those records directly and never synthesize a duplicate asset from the first frame.
 
@@ -108,8 +104,6 @@ For the lower-level asset/resource creation endpoints, `generationInputs` is rep
 
 ## Art Spec and Image Request
 
-Generic External v1 image generation does not expose the main-site structured game-scene contract. `kind: "scene"` and `assetKind: "scene"` are both invalid and return HTTP `400` before any generation job is queued. Do not replace the structured scene fields and server-owned prompt assembly with a generic image prompt.
-
 Carry the current art spec in `generationInputs.artSpec` and reflect important constraints in the prompt:
 
 ```json
@@ -149,7 +143,7 @@ Carry the current art spec in `generationInputs.artSpec` and reflect important c
 The top-level `style` field is not the art spec's visual-style prose. It appends a short server-side clause to the prompt sent to the provider and enables deterministic post-processing:
 
 - Omitted, `null`, empty string, or `"none"`: no clause is appended and no post-processing runs, without warning.
-- `"pixelArt"`: append one short pixel-art line to the end of the prompt sent to the provider, and enable pixel-art snapping, for ordinary image generation, `kind: "character"`, and icon spritesheet generation. On successful snapping, each detected grid cell becomes one output pixel and the logical-grid PNG is persisted directly; it is not resized back to `size`, `imageSize`, the provider image, or `canvasCompletion.placeholder`. The line is appended, not substituted — the rest of your prompt is unchanged. For the exact per-kind wording, read the `style` field description in the OpenAPI document; it is the contract, and this guide deliberately does not copy it.
+- `"pixelArt"`: append one short pixel-art line to the end of the prompt sent to the provider, and enable pixel-art snapping, for ordinary image generation, `kind: "character"`, and icon spritesheet generation. The line is appended, not substituted — the rest of your prompt is unchanged. For the exact per-kind wording, read the `style` field description in the OpenAPI document; it is the contract, and this guide deliberately does not copy it.
 - Unknown strings, or `"pixelArt"` on unsupported kinds such as `spec`, `quick-edit`, `ui-design`, or `publication-material`: continue without style processing and return `warning.code: "unsupported-image-style"`.
 - Non-string JSON values: malformed request, HTTP `400`.
 
@@ -173,10 +167,6 @@ client.generate_image(
 )
 ```
 
-Image edit/redraw has a stricter main-source identity rule. After upload confirmation, create either a project resource or an asset-library record and pass its `resourceId` or `assetId` as `sourceReferenceId`. Do not pass the uploaded objectKey as the main source; objectKey remains valid only for auxiliary `referenceImageSrcs` where the OpenAPI permits it.
-
-Icon spritesheet generation has a stricter primary-spec contract. After upload confirmation, create a project resource or asset record with `assetKind: "icon-spec"`, retain its returned `resourceId` or `assetId`, and pass that ID as `referenceId`. The primary spec does not accept the uploaded `objectKey` directly; only additional style references may continue to use stable object keys in `referenceImageSrcs`.
-
 For character animation from a local-only source, use actual dimensions and a stable synthetic layer ID:
 
 ```json
@@ -202,8 +192,7 @@ Do not guess dimensions or pass a temporary signed read URL. See `authentication
 
 The completed `result` may contain stable artifact fields such as:
 
-- `objectKey`, media type, dimensions, or task ID. For successful `pixelArt`, image `width`/`height`, icon `spritesheetWidth`/`spritesheetHeight`, and nested resource/asset dimensions are the actual final logical-grid PNG dimensions rather than requested, provider, or placeholder dimensions.
-- Sound-effect `durationSeconds` is the probed MP3 duration and `loop` is the frozen request boolean; neither is inferred from Prompt text.
+- `objectKey`, media type, dimensions, or task ID.
 - `resource`, `resourceId`, or equivalent canvas reference.
 - `asset`, `assetId`, or equivalent library reference.
 - `spritesheetResource`, `spritesheetAsset`, and stable spritesheet metadata.
@@ -215,10 +204,6 @@ It deliberately excludes a complete project/canvas/library snapshot, Data URL, B
 
 Interpret warnings only after the query reaches `status=completed`. The query-level `warning` is display-ready text. Compact `result.warning` and `result.sliceWarning` preserve structured artifact semantics.
 
-### Delivery-size normalization result before pixel-art snapping
-
-`result.warning.code: "dimension-restore-fallback"` records only the delivery-size normalization result established before any subsequent `pixelArt` snapping: the provider image could not be safely normalized, so its dimensions were preserved at that processing boundary. It does not describe or constrain the dimensions after `pixelArt`; if snapping succeeds, use the completed result's actual logical-grid dimensions as authoritative.
-
 ### Source-preserved post-processing failure
 
 When `result.warning.code` is `postprocess-failed-source-preserved`:

.codex/skills/genarrative-external-editor-api/scripts/genarrative_external_api.py

@@ -548,80 +548,22 @@ class GenarrativeExternalClient:
             idempotency_key=idempotency_key,
         )
 
-    def edit_image(self, prompt: str, source_reference_id: str, **fields: Any) -> Any:
-        source_reference_id = source_reference_id.strip()
-        if not source_reference_id:
-            raise GenarrativeApiError("source_reference_id must be a registered resource or asset ID")
+    def edit_image(self, prompt: str, source_image_src: str, **fields: Any) -> Any:
         self._apply_canvas_session_fields(fields, prompt, 1024, 1024)
         prompt = self._apply_art_spec(fields, prompt)
         idempotency_key = fields.pop("idempotencyKey", None)
         return self.submit_and_wait_generation(
             "/api/external/v1/editor/images/edits",
-            {"prompt": prompt, "sourceReferenceId": source_reference_id, **fields},
-            idempotency_key=idempotency_key,
-        )
-
-    def remove_background(
-        self,
-        source_image_src: str,
-        source_width: int | None = None,
-        source_height: int | None = None,
-        **fields: Any,
-    ) -> Any:
-        source_image_src = normalize_optional_text(source_image_src)
-        if not source_image_src:
-            raise GenarrativeApiError(
-                "source_image_src must be an owner-scoped object key, resource ID, or asset ID"
-            )
-        if (source_width is None) != (source_height is None):
-            raise GenarrativeApiError("source_width and source_height must be provided together")
-        if source_width is not None and (
-            source_width <= 0 or source_height is None or source_height <= 0
-        ):
-            raise GenarrativeApiError("source_width and source_height must be positive integers")
-        session = fields.get("canvasSession")
-        if session is None:
-            session = fields.get("canvas_session")
-        target_layer_id = normalize_optional_text(fields.get("targetLayerId"))
-        if target_layer_id and fields.get("canvasCompletion") is not None:
-            raise GenarrativeApiError(
-                "targetLayerId and canvasCompletion are mutually exclusive for background removal"
-            )
-        canvas_width = fields.get("canvasWidth")
-        canvas_height = fields.get("canvasHeight")
-        if (canvas_width is None) != (canvas_height is None):
-            raise GenarrativeApiError("canvasWidth and canvasHeight must be provided together")
-        if session is not None and canvas_width is None and not target_layer_id:
-            if source_width is None or source_height is None:
-                raise GenarrativeApiError(
-                    "remove_background requires source_width and source_height when canvasSession is used without canvasWidth/canvasHeight"
-                )
-            fields["canvasWidth"] = source_width
-            fields["canvasHeight"] = source_height
-        self._apply_canvas_session_fields(
-            fields,
-            fields.get("assetLabel", "去背景结果"),
-            source_width or 1,
-            source_height or 1,
-        )
-        if target_layer_id:
-            fields.pop("canvasCompletion", None)
-        idempotency_key = fields.pop("idempotencyKey", None)
-        return self.submit_and_wait_generation(
-            "/api/external/v1/editor/images/background-removals",
-            {"sourceImageSrc": source_image_src, **fields},
+            {"prompt": prompt, "sourceImageSrc": source_image_src, **fields},
             idempotency_key=idempotency_key,
         )
 
     def generate_icon_spritesheet(
         self,
-        reference_id: str,
+        reference_image_src: str,
         icon_descriptions: list[str],
         **fields: Any,
     ) -> Any:
-        reference_id = normalize_optional_text(reference_id)
-        if not reference_id:
-            raise GenarrativeApiError("reference_id must be a registered icon-spec resource or asset ID")
         descriptions = [item.strip() for item in icon_descriptions if item.strip()]
         if not descriptions:
             raise GenarrativeApiError("icon_descriptions must contain at least one non-empty item")
@@ -632,9 +574,9 @@ class GenarrativeExternalClient:
         return self.submit_and_wait_generation(
             "/api/external/v1/editor/icon-spritesheets/generations",
             {
-                **fields,
-                "referenceId": reference_id,
+                "referenceImageSrc": reference_image_src,
                 "iconDescriptions": descriptions,
+                **fields,
             },
             idempotency_key=idempotency_key,
         )
@@ -707,19 +649,13 @@ class GenarrativeExternalClient:
             idempotency_key=idempotency_key,
         )
 
-    def generate_sound_effect(
-        self,
-        prompt: str,
-        duration: float | None = None,
-        loop: bool = False,
-        **fields: Any,
-    ) -> Any:
+    def generate_sound_effect(self, prompt: str, duration: int, **fields: Any) -> Any:
         self._apply_canvas_session_fields(fields, prompt, 360, 120)
         prompt = self._apply_art_spec(fields, prompt)
         idempotency_key = fields.pop("idempotencyKey", None)
         return self.submit_and_wait_generation(
             "/api/external/v1/editor/audios/sound-effects/generations",
-            {"prompt": prompt, "duration": duration, "loop": loop, **fields},
+            {"prompt": prompt, "duration": duration, **fields},
             idempotency_key=idempotency_key,
         )
 
@@ -739,14 +675,11 @@ def _self_test() -> None:
         b"\x89PNG\r\n\x1a\n\x00\x00\x00\rIHDR"
         b"\x00\x00\x00\x02\x00\x00\x00\x03\x08\x06\x00\x00\x00"
     )
-    with tempfile.NamedTemporaryFile(suffix="Hero Image.png", delete=False) as fh:
+    with tempfile.NamedTemporaryFile(suffix="Hero Image.png") as fh:
         fh.write(png)
-        temp_path = fh.name
-    try:
-        assert image_dimensions(temp_path) == (2, 3)
-        assert source_layer_id_from_path(temp_path).startswith("external-reference-")
-    finally:
-        Path(temp_path).unlink(missing_ok=True)
+        fh.flush()
+        assert image_dimensions(fh.name) == (2, 3)
+        assert source_layer_id_from_path(fh.name).startswith("external-reference-")
     assert unwrap_envelope({"ok": True, "data": {"upload": 1}}) == {"upload": 1}
     client = GenarrativeExternalClient(api_key="test")
     session = {"projectId": "proj-demo", "assetFolderId": "editor-asset-folder-demo"}
@@ -828,64 +761,14 @@ def _self_test() -> None:
     assert len(result["asset"]["imageSequenceFrames"]) == 2
     assert result["asset"]["imageSequenceDurationMs"] == 4000
     calls.clear()
-    background_result = client.remove_background(
-        "uploads/source.png",
-        720,
-        1280,
-        canvasSession=session,
-        assetLabel="去背景结果",
-    )
-    assert background_result["taskId"] == "task-demo"
-    assert calls[0]["path"] == "/api/external/v1/editor/images/background-removals"
-    assert calls[0]["body"]["sourceImageSrc"] == "uploads/source.png"
-    assert calls[0]["body"]["projectId"] == "proj-demo"
-    assert calls[0]["body"]["assetFolderId"] == "editor-asset-folder-demo"
-    assert calls[0]["body"]["assetLabel"] == "去背景结果"
-    assert calls[0]["body"]["canvasCompletion"]["title"] == "去背景结果"
-    assert calls[0]["body"]["canvasCompletion"]["placeholder"]["width"] == 720
-    assert calls[0]["body"]["canvasCompletion"]["placeholder"]["height"] == 1280
-    calls.clear()
-    client.remove_background(
-        "uploads/source.png",
-        canvasSession=session,
-        targetLayerId="layer-1",
-        assetLabel="原位去背景结果",
-    )
-    assert calls[0]["body"]["projectId"] == "proj-demo"
-    assert calls[0]["body"]["assetFolderId"] == "editor-asset-folder-demo"
-    assert calls[0]["body"]["assetLabel"] == "原位去背景结果"
-    assert calls[0]["body"]["targetLayerId"] == "layer-1"
-    assert "canvasCompletion" not in calls[0]["body"]
-    calls.clear()
-    try:
-        client.remove_background(
-            "uploads/source.png",
-            canvasSession=session,
-            targetLayerId="layer-1",
-            canvasCompletion={"title": "冲突完成指令"},
-        )
-    except GenarrativeApiError as error:
-        assert "targetLayerId and canvasCompletion are mutually exclusive" in str(error)
-    else:
-        raise AssertionError("background removal must reject conflicting canvas placement modes")
-    assert calls == []
-    try:
-        client.remove_background("uploads/source.png", canvasSession=session)
-    except GenarrativeApiError as error:
-        assert "source_width and source_height" in str(error)
-    else:
-        raise AssertionError("canvas background removal must not guess source dimensions")
-    assert calls == []
     client.generate_icon_spritesheet(
         "editor-resource-spec",
         ["蛇头向上", "蛇身直线", "转角", "尾部", "四类食物"],
         canvasSession=session,
         assetLabel="贪吃蛇透明图集",
-        referenceId="must-not-override-explicit-reference",
-        iconDescriptions=["不得覆盖显式图标描述"],
     )
     assert calls[0]["path"] == "/api/external/v1/editor/icon-spritesheets/generations"
-    assert calls[0]["body"]["referenceId"] == "editor-resource-spec"
+    assert calls[0]["body"]["referenceImageSrc"] == "editor-resource-spec"
     assert calls[0]["body"]["screenColor"] == "auto"
     assert calls[0]["body"]["iconDescriptions"][0] == "蛇头向上"
     assert calls[1]["path"] == "/api/external/v1/generations/task-operation-demo"

.env.example

@@ -130,11 +130,6 @@ VECTOR_ENGINE_BASE_URL="https://api.vectorengine.cn"
 VECTOR_ENGINE_API_KEY=""
 VECTOR_ENGINE_IMAGE_REQUEST_TIMEOUT_MS="1000000"
 
-# ElevenLabs editor sound-effect generation is server-side only.
-ELEVENLABS_BASE_URL="https://api.elevenlabs.io"
-ELEVENLABS_API_KEY=""
-ELEVENLABS_REQUEST_TIMEOUT_MS="180000"
-
 # 阿里云 OSS 配置。
 # Rust `server-rs` 的 `api-server` 会优先从 `.env` / `.env.local` 读取这些变量，
 # 用于签发浏览器 PostObject 直传票据，并保持 `/generated-*` 旧路径习惯。

.eslintrc.cjs

@@ -46,7 +46,6 @@ module.exports = {
     {
       files: [
         'apps/admin-web/src/pages/*.tsx',
-        'src/components/platform-entry/PlatformActiveMobileWelcomeDialog.tsx',
         'src/components/platform-entry/PlatformMobileHomeWelcomeDialog.tsx',
       ],
       rules: {
@@ -73,7 +72,6 @@ module.exports = {
         'src/components/image-editor/**/*.{ts,tsx}',
         'src/components/project/**/*.{ts,tsx}',
         'src/components/platform-entry/PlatformActiveProfileView*.tsx',
-        'src/components/platform-entry/PlatformActiveMobileWelcomeDialog*.tsx',
         'src/components/platform-entry/PlatformEntryActiveFlowShell*.tsx',
         'src/components/platform-entry/PlatformEntryFlowShell.tsx',
         'src/components/platform-entry/PlatformProfileApiKeysModal.tsx',
@@ -163,7 +161,6 @@ module.exports = {
     'server-rs/target',
     'server-rs/target-*',
     'apps/desktop-shell/src-tauri/target',
-    'apps/ai-game-creator-shell/src/features/ui-editor/types/**',
     'target',
     'src/main.tsx',
     'src/App.tsx',

.gitea/workflows/project-ci.yml

@@ -4,6 +4,7 @@ on:
   push:
     branches:
       - master
+      - codex/ai-game-creator-app
   pull_request:
   workflow_dispatch:
 
@@ -58,16 +59,6 @@ jobs:
           else
             base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
           fi
-          resolved_base_ref="$(git rev-parse --verify "${base_ref}^{commit}" 2>/dev/null || true)"
-          head_ref="$(git rev-parse HEAD)"
-          if [[ "${resolved_base_ref}" == "${head_ref}" ]]; then
-            resolved_base_ref="$(git rev-parse --verify HEAD^ 2>/dev/null || true)"
-          fi
-          if [[ -z "${resolved_base_ref}" ]]; then
-            echo 'comparison base must resolve to a commit distinct from HEAD.' >&2
-            exit 1
-          fi
-          base_ref="${resolved_base_ref}"
           if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
             && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
             echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
@@ -78,8 +69,23 @@ jobs:
       - name: Install npm dependencies
         run: bash scripts/ci-npm-ci-with-retry.sh
 
-      - name: Run repository checks
-        run: npm run check:repository-ci
+      - name: Run repository lint gates
+        run: npm run lint
+
+      - name: Build web applications
+        run: npm run build
+
+      - name: Validate content data
+        run: npm run check:content
+
+      - name: Check committed whitespace
+        shell: bash
+        run: |
+          set -euo pipefail
+          base_ref="${SPACETIME_SCHEMA_BASE_REF:-}"
+          test -n "${base_ref}"
+          git cat-file -e "${base_ref}^{commit}"
+          git diff --check "${base_ref}"...HEAD
 
   frontend-tests:
     name: Frontend tests
@@ -97,6 +103,9 @@ jobs:
       - name: Install npm dependencies
         run: bash scripts/ci-npm-ci-with-retry.sh
 
+      - name: Install AI game creator dependencies
+        run: bash scripts/ci-npm-ci-with-retry.sh --prefix apps/ai-game-creator-shell
+
       - name: Run frontend and script tests
         run: npm run test
 
@@ -142,16 +151,6 @@ jobs:
           else
             base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
           fi
-          resolved_base_ref="$(git rev-parse --verify "${base_ref}^{commit}" 2>/dev/null || true)"
-          head_ref="$(git rev-parse HEAD)"
-          if [[ "${resolved_base_ref}" == "${head_ref}" ]]; then
-            resolved_base_ref="$(git rev-parse --verify HEAD^ 2>/dev/null || true)"
-          fi
-          if [[ -z "${resolved_base_ref}" ]]; then
-            echo 'comparison base must resolve to a commit distinct from HEAD.' >&2
-            exit 1
-          fi
-          base_ref="${resolved_base_ref}"
           if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
             && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
             echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
@@ -207,12 +206,14 @@ jobs:
       - name: Install npm dependencies
         run: bash scripts/ci-npm-ci-with-retry.sh
 
+      - name: Install AI game creator dependencies
+        run: bash scripts/ci-npm-ci-with-retry.sh --prefix apps/ai-game-creator-shell
+
       - name: Prepare native Rust dependencies
         shell: bash
         run: |
           set -euo pipefail
           for manifest_path in \
-            server-rs/Cargo.toml \
             apps/desktop-shell/src-tauri/Cargo.toml \
             apps/ai-game-creator-shell/src-tauri/Cargo.toml; do
             for attempt in $(seq 1 5); do

.gitignore

@@ -34,19 +34,11 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/target/
 /apps/ai-game-creator-shell/src-tauri/gen/
 /apps/ai-game-creator-shell/src-tauri/logs/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex.exe
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/manifest.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/bin/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-path/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-resources/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-package.json
 /apps/ai-game-creator-shell/logs/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json
 /apps/mobile-shell/.expo/
 /apps/mobile-shell/.expo-export-smoke/
-/apps/preview-deployer-web/dist/
-/apps/preview-deployer-web/node_modules/
 /server-rs/.spacetimedb/
 /server-rs/.data/
 /public/generated-animations
@@ -54,8 +46,6 @@ temp*build*/
 /public/generated-characters
 /.codex-temp
 /.app/
-/.jenkins-source-commit
-/.jenkins-spacetime-schema-base
 /target/
 /logs
 /.claude/settings.local.json

.hermes/skills/genarrative-dev-stack-port-routing/SKILL.md

@@ -2,7 +2,7 @@
 name: genarrative-dev-stack-port-routing
 short_description: 修改 Genarrative 本地 dev 启动端口、代理目标、端口冲突处理时使用。
 description: 在 Genarrative 中修改 npm run dev / dev:spacetime / dev:api-server / dev:bgfilter-worker / dev:web / dev:admin-web 的本地启动端口、端口可用性探测、端口漂移、SpacetimeDB publish server、Rust 进程环境变量、Vite 代理目标和后台 admin-web 启动串联时使用。
-version: 1.2.0
+version: 1.1.0
 author: Hermes Agent
 license: MIT
 metadata:
@@ -17,7 +17,7 @@ metadata:
 
 ## 适用场景
 
-- 修改 `scripts/dev.mjs`、`scripts/dev-utils.mjs`、`scripts/dev-stack-port-utils.mjs` 或 AI 游戏创作客户端 dev 启动器。
+- 修改 `scripts/dev.mjs`、`scripts/dev-utils.mjs`、`scripts/dev-stack-port-utils.mjs`。
 - 处理 `3000`、`3101`、`3102`、`8082` 等端口被占用导致本地开发栈启动失败。
 - 排查 Vite 代理仍指向旧 api-server 端口、前端打开了旧 dev server、后台代理错配。
 - 调整 SpacetimeDB standalone、publish、Rust `api-server`、主站 Vite、后台 Vite 的启动顺序。
@@ -32,11 +32,10 @@ metadata:
 3. SpacetimeDB standalone：`3101`，健康检查为 `http://127.0.0.1:<spacetime-port>/v1/ping`。
 4. 后台 Vite：`3102`，后台地址为 `http://127.0.0.1:<admin-web-port>/admin/`。
 5. 独立 BgFilter worker：`8083`，就绪检查为 `http://127.0.0.1:<bgfilter-worker-port>/readyz`。
-6. AI 游戏创作 Vite：非 Linux 兼容首选 `3080`；Linux 使用当前用户端口段的 `start + 5`。
 
 端口不可用时，脚本会从优先端口开始向后寻找可用端口。后续流程必须以解析后的实际端口为准，不能继续使用默认端口。
 
-Linux 多用户并发开发时，`GENARRATIVE_DEV_PORT_RANGE` 或 `--port-range` 会先向系统级注册表 `/var/tmp/genarrative-dev-port-ranges/registry.json` 申请一个端口段，再把该段映射为 `web = start`、`api = start + 1`、`spacetime = start + 2`、`adminWeb = start + 3`、`bgfilterWorker = start + 4`、`agcVite = start + 5`。注册表锁文件是 `/var/tmp/genarrative-dev-port-ranges/registry.lock`，可通过 `GENARRATIVE_DEV_PORT_RANGE_REGISTRY_DIR` 覆盖目录。自动分配从 `10000-10099` 起，每次占用 100 个端口块，后续块按 `10100-10199`、`10200-10299` 递增；当前口径是“一个用户固定占用一个段，后续启动继续复用这段并在段内漂移”；该注册表只在 Linux 上生效；Windows 继续沿用原有统一端口探测和漂移逻辑，不读系统级注册表。
+Linux 多用户并发开发时，`GENARRATIVE_DEV_PORT_RANGE` 或 `--port-range` 会先向系统级注册表 `/var/tmp/genarrative-dev-port-ranges/registry.json` 申请一个端口段，再把该段映射为 `web = start`、`api = start + 1`、`spacetime = start + 2`、`adminWeb = start + 3`、`bgfilterWorker = start + 4`。注册表锁文件是 `/var/tmp/genarrative-dev-port-ranges/registry.lock`，可通过 `GENARRATIVE_DEV_PORT_RANGE_REGISTRY_DIR` 覆盖目录。自动分配从 `10000-10099` 起，每次占用 100 个端口块，后续块按 `10100-10199`、`10200-10299` 递增；当前口径是“一个用户固定占用一个段，后续启动继续复用这段并在段内漂移”；该注册表只在 Linux 上生效；Windows 继续沿用原有统一端口探测和漂移逻辑，不读系统级注册表。
 
 ## 实现入口
 
@@ -52,12 +51,9 @@ Linux 多用户并发开发时，`GENARRATIVE_DEV_PORT_RANGE` 或 `--port-range`
 - `scripts/dev.mjs`
   - 解析 CLI 参数后统一计算 client host、端口、`SPACETIME_SERVER`、`RUST_SERVER_TARGET`。
   - 完整栈按 SpacetimeDB、publish、BgFilter worker readiness、api-server readiness、主站 Vite、后台 Vite 顺序启动。
-  - Linux 下会先申请系统级端口段并映射成六个预留槽位；主 dev 栈使用前五个，AGC Vite 使用 `start + 5`，自动分配从 `10000-10099` 起。Windows 的主 dev 栈和 AGC 则各自沿用统一端口探测与漂移逻辑。
+  - Linux 下会先申请系统级端口段并把它映射成五个 dev 端口；自动分配从 `10000-10099` 起，Windows 则把第五个服务纳入原有统一参数解析与端口漂移逻辑。
   - 完整栈和 `dev:api-server` 把两个 Rust 进程作为同一重启单元，先全部停止，再先启动 BgFilter worker、后启动 api-server；不要为同一份 Rust 源码创建两个并发 `cargo` watcher。
   - 单模块命令复用同一套参数和 env 解析。
-- `apps/ai-game-creator-shell/scripts/dev-port.mjs`
-  - 复用系统级用户端口段，解析 AGC Vite 的 `start + 5` 首选槽位。
-  - 把最终端口通过 `GENARRATIVE_AGC_VITE_PORT` 同步给 `beforeDevCommand` 和配套后端端口解析器，通过 Tauri CLI `--config` 同步 `build.devUrl`，并通过 Vite CLI `--port` 同步 `strictPort` 监听。
 
 ## 必须保持的传递链路
 
@@ -73,7 +69,6 @@ Linux 多用户并发开发时，`GENARRATIVE_DEV_PORT_RANGE` 或 `--port-range`
 8. 后台 Vite：`ADMIN_API_TARGET`、`GENARRATIVE_API_TARGET`、`GENARRATIVE_API_PORT`、`--port=${ADMIN_WEB_PORT}`。
 9. 控制台日志：`[dev:ports]` 和 `[dev] web/admin web/api-server/bgfilter-worker/spacetime` 必须显示最终实际地址。
 10. Linux 端口段注册：`[dev] port-range:` 与 `[dev] port-range-registry:` 只在 Linux 输出，Windows 不应依赖系统级注册表。
-11. AI 游戏创作客户端：外层启动器解析最终 AGC Vite 端口后，通过 Tauri CLI `--config` 覆盖 `build.devUrl`，把同一 `GENARRATIVE_AGC_VITE_PORT` 传给 `beforeDevCommand` 与配套后端端口解析器，并用 Vite CLI `--port` 启动严格监听；后端端口漂移必须跳过该预留端口。
 
 如果只改了其中一段，通常会出现：浏览器打开的前端可用，但 `/api/*` 代理到旧端口；后台页面可用但后台 API 失败；SpacetimeDB 启动在新端口但 publish 仍发往旧端口。
 
@@ -133,7 +128,6 @@ node scripts/dev-stack-port-utils.mjs resolve-dev-stack spacetime:127.0.0.1:0 ap
 - [ ] `npm run dev` 的 SpacetimeDB、publish、api-server、主站 Vite、后台 Vite 都使用实际端口。
 - [ ] BgFilter worker 在 api-server 前 ready，父子共享实际 base URL / Token，Rust watch 只触发一次组合重启。
 - [ ] `npm run dev:web` 在主站端口不可用时能切换到可用端口。
-- [ ] `npm run agc` 在 Linux 使用用户段 `start + 5`，Tauri、Vite、marker 和预检使用同一最终端口。
 - [ ] 文档同步更新 `docs/【开发运维】本地开发验证与生产运维-2026-05-15.md`。
 - [ ] 长期踩坑同步更新 `docs/project-memory/shared-memory/pitfalls.md`。
 - [ ] 修改中文文件后运行 `npm run check:encoding`。

.husky/pre-commit

@@ -1 +0,0 @@
-npm run format:staged

.husky/pre-push

@@ -1 +0,0 @@
-npm run check:pre-push-master -- "$@"

.prettierignore

@@ -3,7 +3,6 @@ node_modules
 .git
 .codex-logs
 public/Icons
-apps/ai-game-creator-shell/src/features/ui-editor/types/
 media
 *.log
 .preview.*

AGENTS.md

@@ -26,13 +26,6 @@
 - 后续新增 Markdown 文档文件名必须以分类标签开头，格式为 `【标签名】中文标题-日期.md`；历史文档不要求批量重命名，除非本次任务明确涉及。
 - 工程修改要同步更新对应 `docs/` 文档；产生长期有效的架构约定、接口变化、排障经验、开发流程或协作规则时，同步更新 `docs/project-memory/shared-memory/`。
 - 默认保持系统简洁：优先复用、修改、扩展现有系统、页面和公共组件，不新建平行系统或平行页面。
-- UI 开发优先复用现有公共组件；发现跨页面或跨端重复的视觉/交互模式时，先抽取到 `packages/shared` 共享组件库并让现有页面迁移使用，禁止在业务页复制同类 UI。共享组件只承载通用表现与交互，不下沉领域规则、后端副作用或正式业务状态。
-- 对已明确退役且不存在现役调用方、公开契约、持久化数据、活跃实例或迁移要求的对象，坚持“四不写”：
-  1. 不写历史兼容代码。
-  2. 不写用于维持退役行为的防御性兼容测试。
-  3. 不写仅说明其曾存在或已删除的墓碑注释。
-  4. 不写仅记录其已删除的墓碑文档；直接将权威文档更新为当前状态。
-- 公开 API、持久化数据、SpacetimeDB schema、跨版本重放、活跃实例和正式迁移不适用“四不写”；必要兼容应最小化、白名单化并配套契约或迁移测试，迁移完成后同步删除兼容实现与对应测试。
 - UI 面板中不要默认写功能说明、规则描述或开发解释文案；移动端优先，同时保证网页端可正常显示和操作。
 - 点击按钮弹出独立面板的设计，不要实现成在当前面板下面追加内容。
 

README.md

@@ -1,14 +1,17 @@
-# Genarrative / 陶泥儿
+# AI Native Visual RPG
 
-一个 AI 原生互动内容与小游戏平台，当前主站聚焦图片画布创作、项目与素材管理，以及账号、钱包和后台管理等平台公共能力。
+一个以“AI 叙事 + 本地规则 + 像素演出”为核心的视觉 RPG 原型。
 
 当前已经具备这些主要能力：
 
-- 图片画布编辑、项目与素材管理
-- 图片、视频、音频等外部生成任务
-- 账号、钱包、充值、兑换码与个人资料
-- 后台运营、配置与生产运维工具
-- AI 游戏创作独立 App
+- 世界与角色选择
+- AI 剧情推进与流式对话
+- 战斗演出、NPC 战斗、切磋
+- NPC 交易、送礼、求助、招募
+- 宝藏交互
+- 同伴跟随与战斗
+- 游戏主流程内嵌的角色资产工坊、自定义世界实体编辑与角色形象编辑
+- 自动存档与继续游戏
 
 ## 运行
 
@@ -24,13 +27,14 @@
 npm install
 ```
 
-该命令会按根 `package.json` 的 npm workspaces 一次安装主站、Admin、Mobile、Desktop、AGC、Preview Deployer、内部 packages 与工具依赖；仓库只使用根 `package-lock.json`，不要在子目录单独执行 `npm install` / `npm ci` 或提交嵌套 lockfile。
-
 准备环境变量：
 
 - 复制 `.env.example` 为 `.env.local`
-- 只填写本次联调所需配置；不要提交 `.env.local`、密钥、Token 或其它本地认证信息
-- api-server 环境变量和 Provider 配置以 `.env.example` 及当前开发运维文档为准
+- 填入 `LLM_API_KEY` / `ARK_API_KEY`
+- 按需设置 `VITE_LLM_MODEL`
+- 如需启用阿里云短信验证码登录，填写 `ALIYUN_SMS_ACCESS_KEY_ID`、`ALIYUN_SMS_ACCESS_KEY_SECRET`，并确认 `SMS_AUTH_PROVIDER="aliyun"`
+- 本地联调短信登录时，建议将 `VITE_AUTH_ALLOW_DEV_GUEST` 设为 `false`，避免开发模式自动进入游客账号而跳过登录页
+- 如需打印完整 prompt/output，可把 `VITE_LLM_DEBUG_LOG` 设为 `true`
 
 启动开发环境：
 
@@ -65,30 +69,59 @@ npm run lint
 npm run check:encoding
 ```
 
+内容引用校验：
+
+```bash
+npm run check:data
+```
+
+编辑器 override 校验：
+
+```bash
+npm run check:overrides
+```
+
+关键内容 smoke 检查：
+
+```bash
+npm run check:smoke
+```
+
+一键内容检查：
+
+```bash
+npm run check:content
+```
+
 ## 主要结构
 
 主运行时：
 
-- [src/active-main.tsx](./src/active-main.tsx)
-- [src/ActiveApp.tsx](./src/ActiveApp.tsx)
+- [src/App.tsx](./src/App.tsx)
 - [src/AuthenticatedApp.tsx](./src/AuthenticatedApp.tsx)
-- [src/routing/activeAppRoutes.tsx](./src/routing/activeAppRoutes.tsx)
-- [src/components/platform-entry/PlatformEntryActiveFlowShell.tsx](./src/components/platform-entry/PlatformEntryActiveFlowShell.tsx)
+- [src/routing/appRoutes.tsx](./src/routing/appRoutes.tsx)
+- [src/hooks/useCombatFlow.ts](./src/hooks/useCombatFlow.ts)
 
-创作与项目能力：
+主流程内嵌编辑能力：
 
 - [src/components/image-editor/ImageCanvasEditorView.tsx](./src/components/image-editor/ImageCanvasEditorView.tsx)
-- [src/components/creation-home/CreationLandingView.tsx](./src/components/creation-home/CreationLandingView.tsx)
-- [src/components/project/ProjectGalleryView.tsx](./src/components/project/ProjectGalleryView.tsx)
+- [src/components/rpg-creation-editor/RpgCreationEntityEditorModal.tsx](./src/components/rpg-creation-editor/RpgCreationEntityEditorModal.tsx)
+- [src/components/rpg-creation-asset-studio/RpgCreationRoleAssetStudioModal.tsx](./src/components/rpg-creation-asset-studio/RpgCreationRoleAssetStudioModal.tsx)
+
+核心数据：
+
+- [src/data/scenePresets.ts](./src/data/scenePresets.ts)
+- [src/data/characterPresets.ts](./src/data/characterPresets.ts)
+- [src/data/npcInteractions.ts](./src/data/npcInteractions.ts)
+- [src/data/treasureInteractions.ts](./src/data/treasureInteractions.ts)
 
 ## 文档入口
 
-`docs/` 已在 `2026-08-25` 按当前代码与运行态重新收口。旧 PRD、设计、审计、阶段计划和技术流水账不再作为实现依据；专题文档的现役清单统一从 `docs/README.md` 进入：
+`docs/` 已在 `2026-05-15` 完成压缩整理，旧 PRD、设计、审计、阶段计划和技术流水账不再作为实现依据。当前只读取：
 
 - [docs/README.md](./docs/README.md)：当前文档总入口。
 - [docs/【项目基线】当前产品与工程约束-2026-05-15.md](./docs/【项目基线】当前产品与工程约束-2026-05-15.md)：产品、命名、UI、协作和废弃路线。
 - [docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md](./docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md)：DDD 边界、API 分组、SpacetimeDB schema 规则和表目录。
-- [docs/【玩法创作】平台入口与玩法链路-2026-05-15.md](./docs/【玩法创作】平台入口与玩法链路-2026-05-15.md)：平台现役入口、项目页和画布链路。
+- [docs/【玩法创作】平台入口与玩法链路-2026-05-15.md](./docs/【玩法创作】平台入口与玩法链路-2026-05-15.md)：创作入口、草稿架和各玩法当前口径。
 - [docs/【开发运维】本地开发验证与生产运维-2026-05-15.md](./docs/【开发运维】本地开发验证与生产运维-2026-05-15.md)：本地启动、检查、部署、埋点和运营查询。
-- [docs/project-memory/README.md](./docs/project-memory/README.md)：团队共享的当前项目记忆、决策和未关闭事项。
 - [UI_CODING_STANDARD.md](./UI_CODING_STANDARD.md)：像素 UI 资产与编码规范。

UI_CODING_STANDARD.md

@@ -1,6 +1,6 @@
 # UI Coding Standard
 
-> **当前文档入口**：项目文档总入口为 `docs/README.md`；UI 资产和 9-slice 规则以本文为准，平台级 UI 约束见 `docs/【项目基线】当前产品与工程约束-2026-05-15.md`，专题方案只从总入口读取。
+> **当前文档入口**：项目文档已压缩到 `docs/README.md` 和 4 份当前文档；UI 资产和 9-slice 规则以本文为准，平台级 UI 约束见 `docs/【项目基线】当前产品与工程约束-2026-05-15.md`。
 
 ## Goal
 

apps/admin-web/package.json

@@ -10,7 +10,6 @@
     "preview": "vite preview --host 127.0.0.1"
   },
   "dependencies": {
-    "@genarrative/shared": "0.1.0",
     "@vitejs/plugin-react": "^5.0.4",
     "lucide-react": "^0.546.0",
     "react": "^19.0.0",
@@ -18,11 +17,8 @@
     "vite": "^6.2.0"
   },
   "devDependencies": {
-    "@testing-library/react": "^16.3.2",
-    "@testing-library/user-event": "^14.6.1",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
-    "typescript": "~5.8.2",
-    "vitest": "^0.34.6"
+    "typescript": "~5.8.2"
   }
 }

apps/ai-game-creator-shell/game-creator.config.json

@@ -1,12 +1,11 @@
 {
-  "agentMode": "codex_app_server",
   "llm": {
     "apiKey": "",
-    "baseUrl": "https://dev.genarrative.world/gpt/v1",
-    "model": "gpt-5.6-sol",
+    "baseUrl": "https://api.openai.com/v1",
+    "model": "gpt-4.1",
     "apiKind": "openai_responses",
-    "reasoningEffort": "max",
-    "stream": true,
+    "reasoningEffort": "high",
+    "stream": false,
     "webSearchEnabled": false,
     "contextWindowTokens": 128000,
     "autoCompactTokenLimit": 64000,
@@ -16,7 +15,9 @@
     "retryBackoffMs": 500
   },
   "agentLlm": {},
-  "planning": {
-    "capabilityEnabled": true
-  }
+  "editorApi": {
+    "baseUrl": "http://127.0.0.1:8082",
+    "apiKey": ""
+  },
+  "mcpServers": {}
 }

apps/ai-game-creator-shell/index.html

@@ -4,7 +4,7 @@
     <meta charset="UTF-8" />
     <meta name="viewport" content="width=device-width, initial-scale=1.0" />
     <link rel="icon" href="data:," />
-    <title>陶泥儿</title>
+    <title>AI 游戏创作</title>
   </head>
   <body>
     <div id="root"></div>

apps/ai-game-creator-shell/package.json

@@ -1,13 +1,15 @@
 {
   "name": "@genarrative/ai-game-creator-shell",
   "private": true,
-  "version": "0.1.8",
+  "version": "0.1.0",
   "type": "module",
   "scripts": {
     "dev": "node scripts/start-tauri-dev.mjs",
+    "game-chat": "node scripts/start-tauri-dev.mjs --game-chat",
     "dev-server": "node scripts/start-dev-server.mjs",
     "dev-stack": "node scripts/start-dev-stack.mjs",
     "build": "npm --prefix ../.. exec tauri -- build",
+    "build:game-chat-release": "npm --prefix ../.. exec tauri -- build --config src-tauri/tauri.game-chat-release.conf.json --bundles nsis --features game-chat-release",
     "llm-status": "node scripts/run-cli-with-config.mjs --llm-status",
     "agent-task": "node scripts/run-cli-with-config.mjs --agent-task",
     "chat": "node scripts/run-cli-with-config.mjs --swarm-chat",
@@ -15,8 +17,6 @@
     "config": "node scripts/game-creator-config-wizard.mjs",
     "test:chat": "node scripts/agent-swarm-test-chat.mjs --task \"制作一个可直接试玩的原创植物塔防小游戏：玩家选择并放置原创守卫阻挡敌人，完成波次后可以进入下一关并重新开始。主题、单位名称与视觉语言必须原创，不使用任何现有游戏角色、单位名、Logo 或受保护视觉语言。请自主完成正式产物、静态检查和双视口试玩验证。\" --no-open",
     "test:chat:manual": "node scripts/agent-swarm-test-chat.mjs",
-    "test:plan": "node scripts/agent-swarm-test-chat.mjs --plan --task \"我想做一款原创横版像素解谜小游戏，主角是一个能操控自己影子的小机器人，影子可以变成平台和开关。请完成立项策划并给出 Fast GDD。主题、角色名与视觉语言必须原创，不使用任何现有游戏角色、名称、Logo 或受保护视觉语言。\"",
-    "test:plan:manual": "node scripts/agent-swarm-test-chat.mjs --plan",
     "agent-run": "node scripts/run-cli-with-config.mjs --agent-run",
     "agent-run:smoke": "node scripts/smoke-agent-run-local-provider.mjs",
     "agent-runtime:real-e2e": "node scripts/agent-runtime-real-e2e.mjs",
@@ -31,27 +31,17 @@
     "agent-runtime:supervisor-swarm-tool-plan-handoff-runner-kill-real-e2e": "node scripts/agent-runtime-real-e2e.mjs --suite supervisor-swarm-tool-plan-handoff-runner-kill",
     "agent-runtime:steer-real-e2e": "node scripts/agent-runtime-steer-real-e2e.mjs",
     "agent-runtime:steer-runner-kill-real-e2e": "node scripts/agent-runtime-real-e2e.mjs --suite steer-runner-kill",
-    "typecheck": "tsc -p tsconfig.json --noEmit && node scripts/check-config.mjs"
+    "typecheck": "node ../../node_modules/typescript/bin/tsc -p tsconfig.json --noEmit && node scripts/check-config.mjs"
   },
   "dependencies": {
-    "@cubone/react-file-manager": "^1.35.0",
-    "@genarrative/image-canvas-core": "0.1.0",
-    "@genarrative/image-canvas-react": "0.1.0",
-    "@genarrative/shared": "0.1.0",
     "@lexical/react": "^0.47.0",
     "@lexical/utils": "^0.47.0",
-    "@tauri-apps/api": "^2.11.1",
     "@tauri-apps/plugin-clipboard-manager": "2.3.2",
-    "@tauri-apps/plugin-dialog": "^2.7.2",
-    "@tauri-apps/plugin-http": "^2.5.9",
     "@tauri-apps/plugin-opener": "~2",
     "@vitejs/plugin-react": "^5.0.4",
-    "focus-trap-react": "^12.0.3",
     "lexical": "^0.47.0",
     "lucide-react": "^0.546.0",
     "react": "^19.0.0",
-    "react-arborist": "^3.16.0",
-    "react-colorful": "^5.8.0",
     "react-dom": "^19.0.0",
     "react-markdown": "^10.1.0",
     "remark-gfm": "^4.0.1",
@@ -59,15 +49,11 @@
     "zustand": "^5.0.14"
   },
   "devDependencies": {
-    "@openai/codex": "0.147.0",
     "@tailwindcss/vite": "^4.1.14",
     "@tauri-apps/cli": "^2.11.2",
-    "@testing-library/react": "^16.3.2",
-    "@testing-library/user-event": "^14.6.1",
     "@types/react": "^19.2.14",
     "@types/react-dom": "^19.2.3",
     "tailwindcss": "^4.1.14",
-    "typescript": "~5.8.2",
-    "vitest": "^0.34.6"
+    "typescript": "~5.8.2"
   }
 }

apps/ai-game-creator-shell/scripts/agent-runtime-real-e2e/assertions/runtime.mjs

@@ -73,7 +73,8 @@ export function isCatalogBoundToolPlanFunctionName(name, protocol) {
   if (protocol !== 'native_runtime_tools') return false;
   return (
     ['update_agent_plan', 'respond_to_user'].includes(name) ||
-    name.startsWith('runtime_tool_')
+    name.startsWith('runtime_tool_') ||
+    name.startsWith('mcp_tool_')
   );
 }
 
@@ -2405,36 +2406,11 @@ export function isolatedJoinDeliveryTarget(delivery) {
   return target;
 }
 
-function runtimeMessageCorrelationId(agentId, sessionId, runId) {
-  return createHash('sha256')
+export function finalMessageId(agentId, sessionId, runId) {
+  const fingerprint = createHash('sha256')
     .update(`${agentId}\n${sessionId}\n${runId}`)
     .digest('hex');
-}
-
-export function finalMessageId(agentId, sessionId, runId) {
-  return `agent-finalization-${runtimeMessageCorrelationId(
-    agentId,
-    sessionId,
-    runId,
-  ).slice(0, 32)}`;
-}
-
-export function runtimePublicStatusMessageId(
-  agentId,
-  sessionId,
-  runId,
-  status,
-) {
-  const correlationId = runtimeMessageCorrelationId(
-    agentId,
-    sessionId,
-    runId,
-  ).slice(0, 32);
-  const statusFingerprint = createHash('sha256')
-    .update(status)
-    .digest('hex')
-    .slice(0, 16);
-  return `runtime-public-status-${correlationId}-${statusFingerprint}`;
+  return `agent-finalization-${fingerprint.slice(0, 32)}`;
 }
 
 export function backgroundTaskMessageId(agentId, sessionId, runId, source) {
@@ -2468,10 +2444,7 @@ export function disposableProjectPathVariants() {
 }
 
 export function formalConfigPathVariants() {
-  return absolutePathVariants(
-    state.options?.configDir,
-    state.isolatedRunner?.appDataDir,
-  );
+  return absolutePathVariants(state.options?.configDir);
 }
 
 export function absolutePathVariants(...values) {

apps/ai-game-creator-shell/scripts/agent-runtime-real-e2e/entry.mjs

@@ -20,15 +20,7 @@ import {
   stopOwnedIsolatedRunner,
 } from './harness/app-data.mjs';
 import { loadConfig, parseArguments } from './harness/config.mjs';
-import {
-  activeInteractiveCliSessions,
-  captureOwnedProcessCleanupSnapshot,
-  closeInteractiveCli,
-  destroyInteractiveCliOutputStreams,
-  interactiveCliOutput,
-  verifyOwnedProcessCleanupSnapshot,
-  waitForInteractiveCliStdioClose,
-} from './harness/process.mjs';
+import { closeInteractiveCli } from './harness/process.mjs';
 import { checkPrerequisites } from './harness/project.mjs';
 import {
   buildSummary,
@@ -65,6 +57,14 @@ import {
   isGoalRuntimeSuite,
   runGoalRuntimeE2e,
 } from './suites/goal.mjs';
+import {
+  collectPartialMcpEvidence,
+  emptyMcpEvidence,
+  isMcpRuntimeSuite,
+  mcpPrivateValues,
+  runMcpRuntimeE2e,
+  stopMcpHttpFixture,
+} from './suites/mcp.mjs';
 import {
   collectPartialParallelReadEvidence,
   emptyParallelReadEvidence,
@@ -175,6 +175,7 @@ if (selfTestRequested) {
     if (isContextCompactionSuite()) {
       state.evidence = emptyContextCompactionEvidence();
     }
+    if (isMcpRuntimeSuite()) state.evidence = emptyMcpEvidence();
     if (isUserInputRuntimeSuite()) state.evidence = emptyUserInputEvidence();
     if (isScopedAgentsSuite()) state.evidence = emptyScopedAgentsEvidence();
     if (isProjectSkillSuite()) state.evidence = emptyProjectSkillEvidence();
@@ -192,6 +193,7 @@ if (selfTestRequested) {
     if (
       isWebSearchSuite() ||
       isContextCompactionSuite() ||
+      isMcpRuntimeSuite() ||
       isUserInputRuntimeSuite() ||
       isScopedAgentsSuite() ||
       isProjectSkillSuite() ||
@@ -232,6 +234,8 @@ if (selfTestRequested) {
         await runWebSearchE2e();
       } else if (isContextCompactionSuite()) {
         await runContextCompactionE2e();
+      } else if (isMcpRuntimeSuite()) {
+        await runMcpRuntimeE2e();
       } else if (isUserInputRuntimeSuite()) {
         await runUserInputRuntimeE2e();
       } else if (isScopedAgentsSuite()) {
@@ -262,21 +266,6 @@ if (selfTestRequested) {
     recordError(error?.code ?? 'unexpected-error', error);
   } finally {
     state.cleanupInProgress = true;
-    const stateTrackedInteractiveCliSessions = new Set(
-      [
-        state.userInputCliSession,
-        state.supervisorAutonomousPlayableCliSession,
-        state.supervisorSwarmCliSession,
-      ].filter(Boolean),
-    );
-    const interactiveCliSessions = [
-      ...new Set([
-        ...stateTrackedInteractiveCliSessions,
-        ...activeInteractiveCliSessions,
-      ]),
-    ];
-    const supervisorAutonomousPlayableCliSession =
-      state.supervisorAutonomousPlayableCliSession;
     if (isUserInputRuntimeSuite() && state.userInputCliSession) {
       try {
         await closeInteractiveCli(state.userInputCliSession);
@@ -322,51 +311,25 @@ if (selfTestRequested) {
       }
       state.supervisorSwarmCliSession = null;
     }
-    for (const session of interactiveCliSessions) {
-      if (stateTrackedInteractiveCliSessions.has(session)) continue;
+    if (isMcpRuntimeSuite() && state.mcp.httpFixture) {
       try {
-        await closeInteractiveCli(session);
+        await stopMcpHttpFixture();
+        state.evidence.httpFixtureStopped = true;
       } catch (error) {
         state.status = 'FAIL';
-        recordError('interactive-cli-cleanup-failed', error);
-      }
-    }
-    if (
-      isSupervisorAutonomousPlayableLaneDefenseSuite() &&
-      state.isolatedRunner.appDataDir
-    ) {
-      try {
-        const runnerPid = state.isolatedRunner.current?.pid ?? null;
-        const helperPid =
-          state.isolatedRunner.current?.killHandle?.child?.pid ?? null;
-        state.supervisorAutonomousPlayable.ownedProcessCleanupSnapshot =
-          await captureOwnedProcessCleanupSnapshot({
-            runnerPid,
-            helperPids: Number.isSafeInteger(helperPid) ? [helperPid] : [],
-            rootPids: [
-              ...interactiveCliSessions.map((session) => session.child?.pid),
-              ...[...activeCommandChildren].map((child) => child.pid),
-            ].filter((pid) => Number.isSafeInteger(pid) && pid > 0),
-          });
-        const observed =
-          state.supervisorAutonomousPlayable.ownedProcessCleanupSnapshot
-            .observedCounts;
-        assert(
-          observed.runner === 1 && observed.helper === 1,
-          'supervisor-autonomous-playable-owned-process-snapshot-incomplete',
-        );
-      } catch (error) {
-        state.status = 'FAIL';
-        recordError(
-          'supervisor-autonomous-playable-owned-process-snapshot-failed',
-          error,
-        );
+        recordError('mcp-http-fixture-cleanup-failed', error);
       }
     }
     if (isIsolatedRunnerSuite() && state.isolatedRunner.appDataDir) {
       try {
         await stopOwnedIsolatedRunner();
         state.isolatedRunner.stopped = true;
+        state.isolatedRunner.cleanupPerformed =
+          await removeIsolatedSuiteAppData();
+        if (!state.isolatedRunner.cleanupPerformed) {
+          state.status = 'FAIL';
+          recordError('isolated-appdata-cleanup-sentinel-missing');
+        }
       } catch (error) {
         state.status = 'FAIL';
         const safeCleanupErrorCode =
@@ -379,51 +342,8 @@ if (selfTestRequested) {
           state.isolatedRunner.current?.killHandle,
         ).catch(() => {});
       }
-    }
-    for (const session of interactiveCliSessions) {
-      try {
-        await waitForInteractiveCliStdioClose(session, 10_000);
-      } catch (error) {
-        destroyInteractiveCliOutputStreams(session);
-        state.status = 'FAIL';
-        recordError(
-          error?.code === 'interactive-cli-stdio-close-timeout'
-            ? error.code
-            : 'interactive-cli-stdio-cleanup-failed',
-          error,
-        );
-      }
-    }
-    if (supervisorAutonomousPlayableCliSession) {
-      state.supervisorAutonomousPlayable.cliOutput = interactiveCliOutput(
-        supervisorAutonomousPlayableCliSession,
-      );
-    }
-    if (isIsolatedRunnerSuite() && state.isolatedRunner.appDataDir) {
-      if (state.isolatedRunner.stopped) {
-        try {
-          state.isolatedRunner.cleanupPerformed =
-            await removeIsolatedSuiteAppData();
-          if (!state.isolatedRunner.cleanupPerformed) {
-            state.status = 'FAIL';
-            recordError('isolated-appdata-cleanup-sentinel-missing');
-          }
-        } catch (error) {
-          state.status = 'FAIL';
-          const safeCleanupErrorCode =
-            isNonEmptyString(error?.code) &&
-            /^(?:isolated|source)-[a-z0-9-]+$/u.test(error.code)
-              ? error.code
-              : 'isolated-appdata-cleanup-failed';
-          recordError(safeCleanupErrorCode, error);
-        }
-      }
       const killMethod =
-        state.isolatedRunner.pidfdClaimCount > 0
-          ? process.platform === 'win32'
-            ? 'windows-process-handle'
-            : 'linux-pidfd'
-          : null;
+        state.isolatedRunner.pidfdClaimCount > 0 ? 'linux-pidfd' : null;
       if (isSteerRunnerKillSuite()) {
         state.evidence.steerRunnerStopped = state.isolatedRunner.stopped;
         state.evidence.steerAppDataCleanupPerformed =
@@ -500,6 +420,28 @@ if (selfTestRequested) {
           state.status = 'FAIL';
           recordError('web-search-formal-config-cli-call-detected');
         }
+      } else if (isMcpRuntimeSuite()) {
+        state.evidence.mcpRunnerStopped = state.isolatedRunner.stopped;
+        state.evidence.mcpAppDataCleanupPerformed =
+          state.isolatedRunner.cleanupPerformed;
+        state.evidence.mcpRunnerKillMethod = killMethod;
+        state.evidence.mcpRunnerPidfdClaimCount =
+          state.isolatedRunner.pidfdClaimCount;
+        state.evidence.mcpRunnerPidfdSignalCount =
+          state.isolatedRunner.pidfdSignalCount;
+        state.evidence.formalConfigCliCallCount =
+          state.isolatedRunner.sourceConfigCliCallCount;
+        state.evidence.sourceRunnerEndpointUnchanged =
+          state.isolatedRunner.sourceRunnerEndpointUnchanged;
+        state.evidence.sourceConfigReplicaCount =
+          state.isolatedRunner.configLinks.length;
+        state.evidence.sourceConfigReplicasVerified =
+          state.isolatedRunner.sourceConfigLinksVerified;
+        state.evidence.isolatedAppDataUsed = true;
+        if (state.isolatedRunner.sourceConfigCliCallCount > 0) {
+          state.status = 'FAIL';
+          recordError('mcp-formal-config-cli-call-detected');
+        }
       } else if (isUserInputRuntimeSuite()) {
         state.evidence.userInputRunnerStopped = state.isolatedRunner.stopped;
         state.evidence.userInputAppDataCleanupPerformed =
@@ -719,61 +661,6 @@ if (selfTestRequested) {
         );
       }
     }
-    if (
-      isSupervisorAutonomousPlayableLaneDefenseSuite() &&
-      state.isolatedRunner.appDataDir
-    ) {
-      const snapshot =
-        state.supervisorAutonomousPlayable.ownedProcessCleanupSnapshot;
-      if (snapshot) {
-        try {
-          const cleanup = await verifyOwnedProcessCleanupSnapshot(snapshot);
-          state.evidence.ownedProcessIdentityCaptured = true;
-          state.evidence.ownedRunnerObservedCount =
-            snapshot.observedCounts.runner;
-          state.evidence.ownedHelperObservedCount =
-            snapshot.observedCounts.helper;
-          state.evidence.ownedNodeDescendantObservedCount =
-            snapshot.observedCounts.node;
-          state.evidence.ownedBrowserDescendantObservedCount =
-            snapshot.observedCounts.browser;
-          state.evidence.ownedCommandDescendantObservedCount =
-            snapshot.observedCounts.command;
-          state.evidence.ownedRunnerResidualCount =
-            cleanup.residualCounts.runner;
-          state.evidence.ownedHelperResidualCount =
-            cleanup.residualCounts.helper;
-          state.evidence.ownedNodeDescendantResidualCount =
-            cleanup.residualCounts.node;
-          state.evidence.ownedBrowserDescendantResidualCount =
-            cleanup.residualCounts.browser;
-          state.evidence.ownedCommandDescendantResidualCount =
-            cleanup.residualCounts.command;
-          state.evidence.activeCommandChildrenAfterCleanup =
-            cleanup.activeCommandChildCount;
-          state.evidence.activeInteractiveCliSessionsAfterCleanup =
-            cleanup.activeInteractiveCliSessionCount;
-          state.evidence.ownedProcessCleanupPassed = cleanup.clean;
-          if (!cleanup.clean) {
-            state.status = 'FAIL';
-            recordError(
-              'supervisor-autonomous-playable-owned-process-residual-detected',
-            );
-          }
-        } catch (error) {
-          state.status = 'FAIL';
-          recordError(
-            'supervisor-autonomous-playable-owned-process-verification-failed',
-            error,
-          );
-        }
-      } else {
-        state.status = 'FAIL';
-        recordError(
-          'supervisor-autonomous-playable-owned-process-snapshot-missing',
-        );
-      }
-    }
     if (
       isSteerRunnerKillSuite() &&
       state.projectRoot &&
@@ -836,6 +723,16 @@ if (selfTestRequested) {
         recordError('context-compaction-partial-evidence-read-failed', error);
       }
     }
+    if (isMcpRuntimeSuite() && state.projectRoot && state.status !== 'PASS') {
+      try {
+        state.evidence = {
+          ...state.evidence,
+          ...(await collectPartialMcpEvidence()),
+        };
+      } catch (error) {
+        recordError('mcp-partial-evidence-read-failed', error);
+      }
+    }
     if (
       isUserInputRuntimeSuite() &&
       state.projectRoot &&
@@ -1062,6 +959,19 @@ if (selfTestRequested) {
         report = JSON.stringify(summary, null, 2);
       }
     }
+    if (isMcpRuntimeSuite()) {
+      state.mcp.reportLeakCount = countExactSecrets(
+        Buffer.from(report),
+        mcpPrivateValues(),
+      );
+      state.evidence.mcpReportLeakCount = state.mcp.reportLeakCount;
+      if (state.mcp.reportLeakCount > 0) {
+        state.status = 'FAIL';
+        recordError('mcp-private-context-report-leak-detected');
+        summary = buildSummary();
+        report = JSON.stringify(summary, null, 2);
+      }
+    }
     if (isUserInputRuntimeSuite()) {
       state.userInput.reportLeakCount = countExactSecrets(
         Buffer.from(report),
@@ -1164,6 +1074,7 @@ if (selfTestRequested) {
     if (
       isWebSearchSuite() ||
       isContextCompactionSuite() ||
+      isMcpRuntimeSuite() ||
       isUserInputRuntimeSuite() ||
       isScopedAgentsSuite() ||
       isProjectSkillSuite() ||
@@ -1211,6 +1122,9 @@ if (selfTestRequested) {
     const remainingWebSearchReportLeakCount = isWebSearchSuite()
       ? countExactSecrets(Buffer.from(report), webSearchPrivateLeakValues())
       : 0;
+    const remainingMcpReportLeakCount = isMcpRuntimeSuite()
+      ? countExactSecrets(Buffer.from(report), mcpPrivateValues())
+      : 0;
     const remainingUserInputReportLeakCount = isUserInputRuntimeSuite()
       ? countExactSecrets(
           Buffer.from(report),
@@ -1246,6 +1160,7 @@ if (selfTestRequested) {
     const remainingFormalConfigPathReportLeakCount =
       isWebSearchSuite() ||
       isContextCompactionSuite() ||
+      isMcpRuntimeSuite() ||
       isUserInputRuntimeSuite() ||
       isScopedAgentsSuite() ||
       isProjectSkillSuite() ||
@@ -1259,6 +1174,7 @@ if (selfTestRequested) {
       remainingProjectPathReportLeakCount > 0 ||
       remainingResponseStreamReportLeakCount > 0 ||
       remainingWebSearchReportLeakCount > 0 ||
+      remainingMcpReportLeakCount > 0 ||
       remainingUserInputReportLeakCount > 0 ||
       remainingScopedAgentsReportLeakCount > 0 ||
       remainingProjectSkillReportLeakCount > 0 ||
@@ -1273,26 +1189,27 @@ if (selfTestRequested) {
           ? 'disposable-project-path-report-redaction-required'
           : remainingResponseStreamReportLeakCount > 0
             ? 'response-stream-report-redaction-required'
-            : remainingUserInputReportLeakCount > 0
-              ? 'user-input-report-redaction-required'
-              : remainingScopedAgentsReportLeakCount > 0
-                ? 'scoped-agents-report-redaction-required'
-                : remainingProjectSkillReportLeakCount > 0
-                  ? 'project-skill-report-redaction-required'
-                  : remainingParallelReadReportLeakCount > 0
-                    ? 'parallel-read-report-redaction-required'
-                    : remainingSupervisorAutonomousPlayableReportLeakCount > 0
-                      ? 'supervisor-autonomous-playable-report-redaction-required'
-                      : remainingSupervisorSwarmReportLeakCount > 0
-                        ? 'supervisor-swarm-report-redaction-required'
-                        : remainingFormalConfigPathReportLeakCount > 0
-                          ? 'formal-config-path-report-redaction-required'
-                          : 'web-search-report-redaction-required',
+            : remainingMcpReportLeakCount > 0
+              ? 'mcp-report-redaction-required'
+              : remainingUserInputReportLeakCount > 0
+                ? 'user-input-report-redaction-required'
+                : remainingScopedAgentsReportLeakCount > 0
+                  ? 'scoped-agents-report-redaction-required'
+                  : remainingProjectSkillReportLeakCount > 0
+                    ? 'project-skill-report-redaction-required'
+                    : remainingParallelReadReportLeakCount > 0
+                      ? 'parallel-read-report-redaction-required'
+                      : remainingSupervisorAutonomousPlayableReportLeakCount > 0
+                        ? 'supervisor-autonomous-playable-report-redaction-required'
+                        : remainingSupervisorSwarmReportLeakCount > 0
+                          ? 'supervisor-swarm-report-redaction-required'
+                          : remainingFormalConfigPathReportLeakCount > 0
+                            ? 'formal-config-path-report-redaction-required'
+                            : 'web-search-report-redaction-required',
       );
       const safeSummary = {
         status: state.status,
         suite: state.suite,
-        providerUsed: false,
         blocked: state.blocked,
         cleanup: {
           performed: state.cleanupPerformed,
@@ -1302,6 +1219,7 @@ if (selfTestRequested) {
           projectPathReportLeakCount: remainingProjectPathReportLeakCount,
           responseStreamReportLeakCount: remainingResponseStreamReportLeakCount,
           webSearchReportLeakCount: remainingWebSearchReportLeakCount,
+          mcpReportLeakCount: remainingMcpReportLeakCount,
           userInputReportLeakCount: remainingUserInputReportLeakCount,
           scopedAgentsReportLeakCount: remainingScopedAgentsReportLeakCount,
           projectSkillReportLeakCount: remainingProjectSkillReportLeakCount,