标注模型下载的重复 task 查询

在 download_model 增加 TODO，说明 SDK 只提供 download_model(&Task) 因而必须再取一次 task 若将来 SDK 支持按 URL 下载，可直接使用 snapshot 中的模型 URL 省掉这次请求
移除 TripoUrl 的 Display 实现
2026-09-19 14:17:31 +08:00 · 2026-09-19 14:17:00 +08:00 · 2026-09-19 14:16:39 +08:00 · 2026-09-19 14:14:55 +08:00 · 2026-09-19 14:14:14 +08:00 · 2026-09-19 13:17:58 +08:00
462 changed files with 11556 additions and 45814 deletions
@@ -23,6 +23,3 @@
 *.meta text
 *.anim text
 *.controller text
-
-# Rust ts-rs 生成的共享契约：保留在仓库中供 TS 消费，但不作为手写源文件统计。
-packages/shared/src/contracts/generated/** linguist-generated=true
@@ -221,7 +221,8 @@ jobs:
      - name: Run AI game creator shell agent-run smoke
        run: npm run check:native-shells:agc-rust-smoke

-  # AGC 壳依赖的共享 / 平台和编辑器插件 crate 各自预热独立 manifest，再运行对应测试。
+  # AGC 壳依赖的共享 / 平台 crate 测试用的是 server-rs workspace 与两个无锁独立 crate
+  # 的 manifest，属另一套依赖图，因此单独一个 job 预热、单独跑。
  ai-game-creator-shell-rust-crates:
    name: AI game creator shell Rust crates
    runs-on: genarrative-ci
@@ -262,15 +263,13 @@ jobs:
          # `cargo test --manifest-path` 单独跑这两个 crate。不在这里预热的话，这两条测试
          # 会在测试阶段自己 `Updating crates.io index`，crates.io 一抖动整条 job 就红
          # （见 #327 / PR #316 run 1950）。
-          # Cocos 插件也使用独立且未提交的锁文件，一并预热。
-          # 这些 crate 都没有提交 Cargo.lock，所以这里只能做不带锁标志的 fetch：
+          # 两个 crate 都没有提交 Cargo.lock，所以这里只能做不带锁标志的 fetch：
          # 加锁标志会因为缺少锁文件直接失败。生成的 Cargo.lock 落在两个 crate 目录内，
          # 已被各自的 .gitignore 忽略，只留在容器里；随后的测试阶段因此能用锁定版本
          # 解析，不再触碰 registry index。
          for manifest_path in \
            server-rs/crates/agent-runtime-core/Cargo.toml \
-            server-rs/crates/agent-runtime-orchestration/Cargo.toml \
-            plugins/agc-cocos-editor/native/cocos-editor-bridge/Cargo.toml; do
+            server-rs/crates/agent-runtime-orchestration/Cargo.toml; do
            for attempt in $(seq 1 5); do
              if cargo fetch \
                --target x86_64-unknown-linux-gnu \
@@ -285,23 +284,6 @@ jobs:
            done
          done

-      - name: Prepare Unity plugin Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path plugins/agc-unity-editor/native/unity-editor-bridge/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'Unity plugin Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
      - name: Run AI game creator shell shared crate gates
        run: npm run check:native-shells:agc-rust-crates

@@ -41,19 +41,7 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-resources/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-package.json
 /apps/ai-game-creator-shell/src-tauri/resources/plugins/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/bin/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-path/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-resources/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-package.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/manifest.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/NOTICE.md
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-arm64/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-x64/
 /plugins/agc-cocos-editor/native/payload/
-/plugins/agc-unity-editor/dotnet/**/bin/
-/plugins/agc-unity-editor/dotnet/**/obj/
-/plugins/agc-unity-editor/dotnet/publish/
-/plugins/agc-unity-editor/dotnet/native-build/
 /apps/ai-game-creator-shell/logs/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json
@@ -1,14 +1,5 @@
 {
  "singleQuote": true,
  "semi": true,
-  "trailingComma": "all",
-  "overrides": [
-    {
-      "files": "packages/shared/src/contracts/generated/**/*.ts",
-      "options": {
-        "printWidth": 1000,
-        "singleQuote": false
-      }
-    }
-  ]
+  "trailingComma": "all"
 }
@@ -50,6 +50,24 @@ _Avoid_: 为每个玩法单独发明素材流水线、把系列素材建模成

 ## Language

+### 3D Model Generation
+
+**3D 模型生成操作**:
+由文本提示驱动、可异步查询并最终产生模型文件的 provider-neutral 操作；操作状态和产品资源结果分开建模。
+_Avoid_: 直接把第三方 provider task 当作产品资源、把模型 URL 当作永久资源地址
+
+**Provider task**:
+第三方 3D 生成平台返回的任务引用与任务快照，只存在于 provider adapter 的 Rust 边界内；它不是 Genarrative 的内部操作 ID。
+_Avoid_: 把 Tripo task ID 当作稳定产品 operationId、让 SDK 类型穿透 api-server
+
+**临时 provider URL**:
+第三方任务完成后返回的短时模型下载地址，必须通过显式下载流程转换为本地或持久化资源，不能直接当作长期资产地址。
+_Avoid_: 永久 OSS URL、资源 ID
+
+**模型 artifact**:
+由 text-to-model、image-to-model 或 multiview-to-model 任务产生、待应用层登记和持久化的模型文件结果；provider adapter 只提供可下载结果，不负责生成 resourceId 或 assetId。
+_Avoid_: 仅 UI 中展示的模型链接、没有来源任务的静态文件
+
 ### Puzzle Clear

 **拼消消**:
@@ -172,20 +190,6 @@ _Avoid_: 多步骤向导、完整规则编辑器、拖拽编辑器
 Bark Battle 平台作品闭环按契约与领域规则、后端存储/API、最小前端纵切、投影体验、收口验证的顺序推进。
 _Avoid_: mock 先行堆积、前后端各自发散、先做排行榜 UI

-## 项目开发对话（DirectProject）
-
-**项目对话历史**:
-AGC 本地项目内 Codex 原始对话条目的持久集合，是聊天展示、工具卡片和线程恢复注入的唯一持久事实源。
-_Avoid_: 会话缓存、展示态历史、按 UI 需要另存的对话副本
-
-**运行态事件**:
-Thread Manager 向订阅者推送的当前回合原始事件流，只服务运行期间与短期断线恢复，不替代项目对话历史。
-_Avoid_: 进度通知、快照轮询、第二套历史
-
-**聊天投影**:
-把项目对话历史条目与运行态事件转换成消息气泡和工具卡片的读取期转换；不持久化，也不构成事实源。
-_Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
-
 ## Relationships

 - 一个 **汪汪声浪大作战** 单局包含多个 **有效声浪触发**。
@@ -220,5 +224,3 @@ _Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
 - “入口闭环”曾可能只指内部 demo 或单个详情 CTA；已解析为 **正式作品入口闭环**，不新增独立专区或活动页。
 - “创作编辑”曾可能指多步骤向导或完整编辑器；已解析为 **轻配置编辑流程**，使用单页表单 + 预览卡片完成保存草稿、发布和发布后跳转作品详情。
 - “实施顺序”曾可能按 UI 或功能并行发散；已解析为契约/领域规则先行，再做后端存储/API，随后打通最小前端纵切，最后补投影体验与收口验证。
- “回合进度事件”曾同时指 Direct turn update 与 Thread Manager 运行态事件；已解析为 AGC 项目开发对话只保留 **运行态事件**。
- “哪些消息可显示”曾可能由后端历史分页判断；已解析为可见性判断属于 **聊天投影**，后端只按原始条目分页，前端负责跳过不可显示条目并推进分页锚点。
@@ -1,7 +1,7 @@
 {
  "name": "@genarrative/ai-game-creator-shell",
  "private": true,
-  "version": "0.1.67",
+  "version": "0.1.47",
  "type": "module",
  "scripts": {
    "dev": "node scripts/start-tauri-dev.mjs",
@@ -676,11 +676,11 @@ async function runSelfTest() {
      designFoundationAssetCall?.arguments?.input?.outputPath ===
        'assets/ui-prototype.png' &&
      designFoundationAssetCall.arguments.input.aspectRatio === '16:9' &&
-      designFoundationAssetCall.arguments.input.assetKind === 'ui-design' &&
+      designFoundationAssetCall.arguments.input.assetKind === 'ui-prototype' &&
      artAssetPlanAssetCall?.arguments?.input?.outputPath ===
        'assets/art-spritesheet.png' &&
      artAssetPlanAssetCall.arguments.input.aspectRatio === '1:1' &&
-      artAssetPlanAssetCall.arguments.input.assetKind === 'icon-spritesheet',
+      artAssetPlanAssetCall.arguments.input.assetKind === 'art-spritesheet',
    'self-test-visual-assets-invalid',
  );

@@ -70,7 +70,7 @@ const requiredFormalArtifactSpecs = [
  { path: 'game/balance.json', kind: 'json' },
  { path: 'assets/manifest.art.json', kind: 'json' },
  { path: 'assets/manifest.audio.json', kind: 'json' },
-  { path: 'game/index.html', kind: 'file' },
+  { path: 'game/index.html', kind: 'game-entry' },
  { path: 'exports/README.md', kind: 'file' },
 ];
 const editorImageArtifactSpecs = [
@@ -1,218 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import {
-  generateUpdateManifest,
-  prepareReleaseVersion,
-  resolveReleaseContext,
-  runTauriBuild,
-} from './build-release.mjs';
-import { readReleaseDryRun, uploadReleaseArtifacts } from './release-oss.mjs';
-import {
-  readUpdaterPubkey,
-  verifyUpdaterSignature,
-} from './verify-updater-signature.mjs';
-
-/**
- * AGC macOS 渠道（dev-mac）发布入口：构建 universal 包 → 双架构 smoke → 生成 universal DMG
- * → 生成渠道清单 latest.json → 用产物内烘焙的公钥验签 → 按 dry-run 决定是否上传 OSS。
- *
- * 边界：
- * - Apple 签名与公证暂缺，产物为未签名 + 未公证（`--no-sign`），必须显式记录而非静默通过；
- * - 更新包签名（TAURI_SIGNING_PRIVATE_KEY，minisign）是硬需求：缺了客户端一律拒绝安装，
- *   因此构建前要求凭据存在，构建后用内置公钥复核 `.sig` 才允许继续上传；
- * - 未通过验签绝不写 OSS：上传顺序为更新包、签名、首装包，全部成功后才覆盖渠道清单指针。
- */
-const appRoot = fileURLToPath(new URL('..', import.meta.url));
-const repoRoot = path.resolve(appRoot, '../..');
-assert.equal(process.platform, 'darwin', '只能在 macOS Agent 执行');
-assert.equal(
-  process.env.JENKINS_URL?.length > 0,
-  true,
-  '此入口仅用于 Jenkins 独立工作区',
-);
-assert.equal(
-  fs.realpathSync(process.env.WORKSPACE || '.'),
-  fs.realpathSync(repoRoot),
-  '必须在 Jenkins workspace 根目录执行',
-);
-const space = fs.statfsSync(repoRoot);
-assert.ok(
-  space.bavail * space.bsize >= 8 * 1024 ** 3,
-  '构建前至少需要 8 GiB 可用空间；禁止自动清理开发缓存',
-);
-
-// 仅剥离 Apple 签名/公证变量：本节点没有证书，误用只会让构建失败；
-// 更新包签名与 OSS 凭据必须保留，它们是本入口发布能力的组成部分。
-for (const key of Object.keys(process.env)) {
-  if (/^APPLE_/u.test(key)) delete process.env[key];
-}
-assert.ok(
-  process.env.TAURI_SIGNING_PRIVATE_KEY?.length > 0 ||
-    process.env.TAURI_SIGNING_PRIVATE_KEY_PATH?.length > 0,
-  '缺少更新包签名私钥（TAURI_SIGNING_PRIVATE_KEY / _PATH）：无签名的更新包会被客户端拒绝，禁止继续',
-);
-
-const bucket = process.env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
-const endpoint =
-  process.env.AGC_OSS_ENDPOINT?.trim() || 'oss-rg-china-mainland.aliyuncs.com';
-if (!/^[a-z0-9][a-z0-9.-]{1,62}$/u.test(bucket) || /[\r\n\0]/u.test(endpoint)) {
-  throw new Error('OSS bucket 或 endpoint 配置无效');
-}
-process.env.AGC_UPDATE_OSS_BASE_URL ||= `https://${bucket}.${endpoint}/agc`;
-const dryRun = readReleaseDryRun();
-
-process.env.CARGO_TARGET_DIR = path.join(appRoot, 'src-tauri/target');
-const context = resolveReleaseContext(['--target=universal-apple-darwin']);
-const version = await prepareReleaseVersion(context);
-
-const args = [
-  '--target=universal-apple-darwin',
-  '--bundles',
-  'app',
-  '--ci',
-  '--no-sign',
-  // 基础配置已开启；这里显式声明，避免被其它配置来源关掉后静默失去更新能力。
-  '--config',
-  '{"bundle":{"createUpdaterArtifacts":true}}',
-];
-const command = (binary, argv, options = {}) =>
-  execFileSync(binary, argv, { cwd: repoRoot, stdio: 'inherit', ...options });
-runTauriBuild(args, context);
-
-const app = path.join(context.bundleRoot, 'macos/陶泥儿.app');
-for (const architecture of ['arm64', 'x86_64']) {
-  command(process.execPath, [
-    path.join(appRoot, 'scripts/check-macos-bundle.mjs'),
-    app,
-    architecture,
-    '--universal',
-  ]);
-}
-
-// DMG 放在 bundle 根目录下：渠道清单的首装包选择会扫描该目录，命名必须匹配 `_<version>_universal.dmg`。
-const dmgDirectory = path.join(context.bundleRoot, 'macos');
-fs.mkdirSync(dmgDirectory, { recursive: true });
-const dmg = path.join(dmgDirectory, `陶泥儿_${version}_universal.dmg`);
-const stage = fs.mkdtempSync(path.join(os.tmpdir(), 'agc-ci-dmg-'));
-try {
-  command('ditto', [app, path.join(stage, '陶泥儿.app')]);
-  fs.symlinkSync('/Applications', path.join(stage, 'Applications'));
-  command('hdiutil', [
-    'create',
-    '-volname',
-    '陶泥儿',
-    '-srcfolder',
-    stage,
-    '-format',
-    'UDZO',
-    dmg,
-  ]);
-  command('hdiutil', ['verify', dmg]);
-} finally {
-  fs.rmSync(stage, { recursive: true, force: true });
-}
-
-const release = await generateUpdateManifest(context);
-assert.equal(
-  path.resolve(release.downloadArtifact),
-  path.resolve(dmg),
-  '首装包必须锁定本次生成的 universal DMG',
-);
-
-// 上传前门禁：用产物里烘焙的公钥复核更新包签名。验不过就停在这里，绝不写 OSS。
-const signature = verifyUpdaterSignature({
-  artifactPath: release.artifact,
-  signaturePath: `${release.artifact}.sig`,
-  pubkey: readUpdaterPubkey(),
-});
-console.log(
-  `[agc-macos] 更新包签名校验通过：alg=${signature.algorithm}，keyId=${signature.keyId}`,
-);
-
-const artifacts = path.join(repoRoot, 'artifacts');
-// 只清理本 Job 的归档输出，不能把上次 DMG 当成本次成功产物。
-fs.rmSync(artifacts, { recursive: true, force: true });
-fs.mkdirSync(artifacts, { recursive: true });
-const sha256 = (file) => {
-  const hash = createHash('sha256');
-  hash.update(fs.readFileSync(file));
-  return hash.digest('hex');
-};
-const dmgHash = sha256(dmg);
-fs.writeFileSync(`${dmg}.sha256`, `${dmgHash}  ${path.basename(dmg)}\n`);
-
-const uploadPlan = uploadReleaseArtifacts(release, {
-  bucket,
-  endpoint,
-  binary: process.env.OSSUTIL_BIN?.trim() || 'ossutil',
-  accessKeyId: process.env.AGC_OSS_ACCESS_KEY_ID?.trim(),
-  accessKeySecret: process.env.AGC_OSS_ACCESS_KEY_SECRET,
-  dryRun,
-});
-
-const archived = [
-  dmg,
-  `${dmg}.sha256`,
-  release.manifestPath,
-  release.notesPath,
-  `${release.artifact}.sig`,
-];
-for (const file of archived) {
-  fs.copyFileSync(file, path.join(artifacts, path.basename(file)));
-}
-
-const commit = execFileSync('git', ['rev-parse', 'HEAD'], {
-  cwd: repoRoot,
-  encoding: 'utf8',
-}).trim();
-fs.writeFileSync(
-  path.join(artifacts, 'build-manifest.json'),
-  `${JSON.stringify(
-    {
-      version,
-      commit,
-      target: context.target,
-      channel: context.channel,
-      // Apple 签名与公证暂缺：显式记录为未验证项，不静默通过。
-      appleSigned: false,
-      notarized: false,
-      dryRun,
-      uploaded: !dryRun,
-      updaterSignature: {
-        algorithm: signature.algorithm,
-        keyId: signature.keyId,
-        verified: true,
-      },
-      oss: {
-        bucket,
-        endpoint,
-        latest: `oss://${bucket}/agc/${context.channel}/latest.json`,
-        objects: uploadPlan.map(({ destination }) => destination),
-      },
-      artifacts: {
-        updater: path.basename(release.artifact),
-        updaterSha256: sha256(release.artifact),
-        updaterBytes: fs.statSync(release.artifact).size,
-        updaterSignature: path.basename(`${release.artifact}.sig`),
-        firstInstall: path.basename(dmg),
-        firstInstallSha256: dmgHash,
-        manifest: 'latest.json',
-      },
-      smokes: ['arm64', 'x86_64'],
-      intelSmoke: process.arch === 'arm64' ? 'Rosetta' : 'native',
-    },
-    null,
-    2,
-  )}\n`,
-);
-console.log(
-  dryRun
-    ? `[agc-macos] dry-run 完成：${context.channel} 渠道产物与清单已生成，未写入 OSS`
-    : `[agc-macos] ${context.channel} 渠道更新包、签名、首装包与清单已上传 OSS`,
-);
@@ -14,67 +14,16 @@ const appRoot = fileURLToPath(new URL('..', import.meta.url));
 // 提交摘要里的 pathspec 与 `git log` 都以仓库根为基准，不能在应用目录里执行。
 const repoRoot = path.resolve(appRoot, '..', '..');
 const defaultReleaseTarget = 'x86_64-pc-windows-msvc';
-function defaultTarget() {
-  return process.env.AGC_BUILD_TARGET?.trim() || defaultReleaseTarget;
-}
-
-function explicitBuildTarget(args) {
-  let target;
-  const separator = args.indexOf('--');
-  const options = separator < 0 ? args : args.slice(0, separator);
-  for (let index = 0; index < options.length; index += 1) {
-    const argument = options[index];
-    let value;
-    if (argument === '--target' || argument === '-t') {
-      value = options[++index];
-    } else if (argument.startsWith('--target=')) {
-      value = argument.slice('--target='.length);
-    } else {
-      continue;
-    }
-    if (!value?.trim() || value.startsWith('-')) {
-      throw new Error('--target 缺少有效目标');
-    }
-    if (target !== undefined) throw new Error('不能重复指定 --target');
-    target = value.trim();
-  }
-  return target;
-}
-
-function validateReleaseTarget(target) {
-  if (
-    ![
-      'x86_64-pc-windows-msvc',
-      'aarch64-apple-darwin',
-      'x86_64-apple-darwin',
-      'universal-apple-darwin',
-    ].includes(target)
-  ) {
-    throw new Error(`不支持的发布目标：${target}`);
-  }
-  return target;
-}
-
-/** 在入口冻结目标；所有发布步骤共享同一上下文，不再各自读取默认目标。 */
-export function resolveReleaseContext(args = [], env = process.env) {
-  const target = validateReleaseTarget(
-    explicitBuildTarget(args) ||
-      env.AGC_BUILD_TARGET?.trim() ||
-      defaultReleaseTarget,
-  );
-  return Object.freeze({
-    target,
-    channel: resolveReleaseChannel(env, target),
-    bundleRoot: path.join(
-      appRoot,
-      'src-tauri',
-      'target',
-      target,
-      'release',
-      'bundle',
-    ),
-  });
-}
+const releaseTarget =
+  process.env.AGC_BUILD_TARGET?.trim() || defaultReleaseTarget;
+const bundleRoot = path.join(
+  appRoot,
+  'src-tauri',
+  'target',
+  releaseTarget,
+  'release',
+  'bundle',
+);
 const packageJsonPath = path.join(appRoot, 'package.json');
 const rootPackageLockPath = path.resolve(appRoot, '../..', 'package-lock.json');
 const tauriConfigPath = path.join(appRoot, 'src-tauri', 'tauri.conf.json');
@@ -101,7 +50,6 @@ export const agcReleasePathPatterns = [
  'packages/',
  'server-rs/crates/',
  'plugins/agc-cocos-editor/',
-  'plugins/agc-unity-editor/',
  'apps/desktop-shell/src-tauri/icons/',
  'package.json',
  'package-lock.json',
@@ -151,7 +99,7 @@ export function nextPatchVersion(localVersion, remoteVersion) {
  return `${major}.${minor}.${patch + 1}`;
 }

-export function resolveReleasePlatform(target = defaultTarget()) {
+export function resolveReleasePlatform(target = releaseTarget) {
  if (target.includes('windows')) return 'windows';
  if (target.includes('apple-darwin')) return 'darwin';
  if (target.includes('linux')) return 'linux';
@@ -160,7 +108,7 @@ export function resolveReleasePlatform(target = defaultTarget()) {

 export function resolveReleaseChannel(
  env = process.env,
-  target = defaultTarget(),
+  target = releaseTarget,
 ) {
  const platform = resolveReleasePlatform(target);
  const requested = env.AGC_UPDATE_CHANNEL?.trim();
@@ -194,12 +142,13 @@ export function updateManifestUrl(channel = resolveReleaseChannel()) {
 }

 /**
- * universal 主程序与双目录原生资源共用一个更新包；单架构只登记实际目标。
+ * 更新插件按运行时平台键查找清单条目：universal macOS 包同时挂
+ * `darwin-aarch64` 与 `darwin-x86_64`，单架构目标只挂对应键。
 */
-export function resolveManifestPlatformKeys(target = defaultTarget()) {
-  validateReleaseTarget(target);
-  if (target === 'universal-apple-darwin')
+export function resolveManifestPlatformKeys(target = releaseTarget) {
+  if (target === 'universal-apple-darwin') {
    return ['darwin-aarch64', 'darwin-x86_64'];
+  }
  if (target === 'aarch64-apple-darwin') return ['darwin-aarch64'];
  if (target === 'x86_64-apple-darwin') return ['darwin-x86_64'];
  if (target.includes('windows')) {
@@ -307,8 +256,8 @@ function replaceVersionLine(source, version, pattern, label) {
  return source.replace(pattern, `$1${version}$3`);
 }

-export async function prepareReleaseVersion(context = resolveReleaseContext()) {
-  const { channel } = context;
+export async function prepareReleaseVersion() {
+  const channel = resolveReleaseChannel();
  const localVersion = parseVersion(readPackageJson().version, '本地版本');
  const remoteVersion = await resolveRemoteHighWaterVersion(channel);
  const requestedVersion = process.env.AGC_RELEASE_VERSION?.trim();
@@ -381,14 +330,18 @@ export async function prepareReleaseVersion(context = resolveReleaseContext()) {

 export function buildTauriBuildArguments(
  args = [],
-  target = defaultTarget(),
+  target = releaseTarget,
  platform = process.platform,
 ) {
  const noBundle = args.includes('--no-bundle');
-  const explicitTarget = explicitBuildTarget(args);
+  const targetIndex = args.indexOf('--target');
+  const explicitTarget =
+    targetIndex >= 0
+      ? args[targetIndex + 1]
+      : args
+          .find((value) => value.startsWith('--target='))
+          ?.slice('--target='.length);
  const targetArgs = noBundle || explicitTarget ? [] : ['--target', target];
-  if (!noBundle || explicitTarget)
-    validateReleaseTarget(explicitTarget || target);
  const features = defaultEditorFeatures(
    explicitTarget || (noBundle ? platform : target),
  );
@@ -421,33 +374,18 @@ function writeChannelConfigFile(channel) {
  return configPath;
 }

-export function runTauriBuild(
-  args = [],
-  context = resolveReleaseContext(args),
-  { spawn = spawnSync } = {},
-) {
-  if (
-    explicitBuildTarget(args) &&
-    explicitBuildTarget(args) !== context.target
-  ) {
-    throw new Error('构建参数与发布上下文目标不一致');
+export function runTauriBuild(args = []) {
+  const tauriArguments = buildTauriBuildArguments(args);
+  if (!tauriArguments.includes('--config') && !tauriArguments.includes('-c')) {
+    const channel = resolveReleaseChannel();
+    const configPath = writeChannelConfigFile(channel);
+    console.log(
+      `[ai-game-creator-shell] 渠道 ${channel} 端点配置：${configPath}`,
+    );
+    tauriArguments.push('--config', configPath);
  }
-  const tauriArguments = buildTauriBuildArguments(args, context.target);
-  const { channel } = context;
-  const configPath = writeChannelConfigFile(channel);
-  console.log(
-    `[ai-game-creator-shell] 渠道 ${channel} 端点配置：${configPath}`,
-  );
-  // 最后合并渠道配置，防止用户配置中的端点与实际发布目标分叉。
-  const separator = tauriArguments.indexOf('--');
-  tauriArguments.splice(
-    separator < 0 ? tauriArguments.length : separator,
-    0,
-    '--config',
-    configPath,
-  );
  const npmCommand = process.platform === 'win32' ? 'npm.cmd' : 'npm';
-  const result = spawn(
+  const result = spawnSync(
    npmCommand,
    ['--prefix', '../..', 'exec', 'tauri', '--', ...tauriArguments],
    { cwd: appRoot, stdio: 'inherit', shell: process.platform === 'win32' },
@@ -464,11 +402,11 @@ function listFiles(root) {
  });
 }

-function artifactPriority(filePath, target) {
+function artifactPriority(filePath) {
  const name = path.basename(filePath).toLowerCase();
-  if (target.includes('windows')) return name.endsWith('.exe') ? 0 : 99;
+  if (releaseTarget.includes('windows')) return name.endsWith('.exe') ? 0 : 99;
  // 更新链路要的是 updater 产物（macOS 为 .app.tar.gz），dmg 只作人工分发。
-  if (target.includes('apple-darwin')) {
+  if (releaseTarget.includes('apple-darwin')) {
    return name.endsWith('.app.tar.gz') ? 0 : 99;
  }
  if (name.endsWith('.appimage.tar.gz')) return 0;
@@ -478,8 +416,7 @@ function artifactPriority(filePath, target) {
  return 99;
 }

-export function selectReleaseArtifact(files, target = defaultTarget()) {
-  validateReleaseTarget(target);
+export function selectReleaseArtifact(files) {
  const explicit = process.env.AGC_UPDATE_ARTIFACT?.trim();
  if (explicit) {
    const resolved = path.resolve(explicit);
@@ -490,62 +427,14 @@ export function selectReleaseArtifact(files, target = defaultTarget()) {
  }
  return (
    [...files]
-      .filter((filePath) => artifactPriority(filePath, target) < 99)
+      .filter((filePath) => artifactPriority(filePath) < 99)
      .sort((left, right) => {
-        const priority =
-          artifactPriority(left, target) - artifactPriority(right, target);
+        const priority = artifactPriority(left) - artifactPriority(right);
        return priority || left.localeCompare(right);
      })[0] ?? null
  );
 }

-export function selectFirstInstallArtifact(
-  files,
-  { target, version, artifact },
-) {
-  validateReleaseTarget(target);
-  let selected;
-  if (target.includes('windows')) {
-    selected = artifact;
-    if (!selected?.endsWith('.exe')) {
-      throw new Error('Windows 首装包必须复用本次 NSIS .exe 更新包');
-    }
-  } else if (target === 'universal-apple-darwin') {
-    // universal 主程序只产出一个 DMG，aarch64 与 x86_64 首装共用它（命名见 build-macos-ci.mjs）。
-    const suffix = `_${version}_universal.dmg`;
-    const candidates = files.filter((file) =>
-      path.basename(file).endsWith(suffix),
-    );
-    if (candidates.length !== 1) {
-      throw new Error(
-        `首装 DMG 必须唯一匹配本次版本 ${version} 的 universal 产物，找到 ${candidates.length} 个`,
-      );
-    }
-    selected = candidates[0];
-  } else {
-    // Tauri DMG 文件名使用 aarch64 / x64，而 updater 的 Intel 平台键是 x86_64。
-    const architecture = target.startsWith('aarch64') ? 'aarch64' : 'x64';
-    const suffix = `_${version}_${architecture}.dmg`;
-    const candidates = files.filter((file) =>
-      path.basename(file).endsWith(suffix),
-    );
-    if (candidates.length !== 1) {
-      throw new Error(
-        `首装 DMG 必须唯一匹配本次版本 ${version} 和架构 ${architecture}，找到 ${candidates.length} 个`,
-      );
-    }
-    selected = candidates[0];
-  }
-  if (
-    !fs.existsSync(selected) ||
-    !fs.statSync(selected).isFile() ||
-    fs.statSync(selected).size === 0
-  ) {
-    throw new Error(`首装包不存在或为空：${selected}`);
-  }
-  return selected;
-}
-
 function readUpdaterSignature(artifactPath) {
  const signaturePath = `${artifactPath}.sig`;
  if (!fs.existsSync(signaturePath)) {
@@ -561,37 +450,26 @@ function readUpdaterSignature(artifactPath) {
 export function createUpdateManifest(
  artifactPath,
  {
-    target = defaultTarget(),
-    channel = resolveReleaseChannel(process.env, target),
+    channel = resolveReleaseChannel(),
+    target = releaseTarget,
    publishedAt = new Date().toISOString(),
    notes = readReleaseNotes(),
    commit = readHeadCommit(),
-    downloadArtifact,
  } = {},
 ) {
-  validateReleaseTarget(target);
-  resolveReleaseChannel({ AGC_UPDATE_CHANNEL: channel }, target);
  const signature = readUpdaterSignature(artifactPath);
  const version = readPackageJson().version;
-  const firstInstallArtifact = selectFirstInstallArtifact(
-    downloadArtifact ? [downloadArtifact] : [],
-    { target, version, artifact: artifactPath },
-  );
  const fileName = path.basename(artifactPath);
  const url = `${ossBaseUrl()}/${channel}/${encodeURIComponent(version)}/${encodeURIComponent(fileName)}`;
-  const downloadUrl = `${ossBaseUrl()}/${channel}/${encodeURIComponent(version)}/${encodeURIComponent(path.basename(firstInstallArtifact))}`;
  const platforms = {};
-  const downloads = {};
  for (const key of resolveManifestPlatformKeys(target)) {
    platforms[key] = { signature, url };
-    downloads[key] = { url: downloadUrl };
  }
  return {
    version,
    ...(notes ? { notes } : {}),
    pub_date: publishedAt,
    platforms,
-    downloads,
    // 非标准字段：更新插件会忽略，发布脚本用它定位下一次自动更新摘要的起点。
    ...(commit ? { commit } : {}),
  };
@@ -726,20 +604,12 @@ export function createLegacyUpdateManifest(
  };
 }

-export async function generateUpdateManifest(
-  context = resolveReleaseContext(),
-) {
-  const { channel, target, bundleRoot } = context;
-  const files = listFiles(bundleRoot);
-  const artifact = selectReleaseArtifact(files, target);
+export async function generateUpdateManifest() {
+  const channel = resolveReleaseChannel();
+  const artifact = selectReleaseArtifact(listFiles(bundleRoot));
  if (!artifact) {
    throw new Error(`未找到可发布的 AGC 安装包：${bundleRoot}`);
  }
-  const downloadArtifact = selectFirstInstallArtifact(files, {
-    target,
-    version: readPackageJson().version,
-    artifact,
-  });
  const manualNotes = readReleaseNotes();
  const previousCommit = await resolvePreviousReleaseCommit(channel);
  const commits = collectReleaseCommits(previousCommit);
@@ -753,12 +623,7 @@ export async function generateUpdateManifest(
      `[ai-game-creator-shell] 未生成自动更新摘要（上一发布 commit=${previousCommit ?? '未知'}，客户端相关提交=${commits ? commits.length : '不可判定'}，最近提交=${recentCommits ? recentCommits.length : '不可判定'}）`,
    );
  }
-  const manifest = createUpdateManifest(artifact, {
-    channel,
-    target,
-    notes,
-    downloadArtifact,
-  });
+  const manifest = createUpdateManifest(artifact, { channel, notes });
  const manifestPath = path.join(bundleRoot, 'latest.json');
  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
  const notesPath = path.join(bundleRoot, 'release-notes.txt');
@@ -783,7 +648,6 @@ export async function generateUpdateManifest(
    `[ai-game-creator-shell] 渠道 ${channel}：已生成 ${manifestPath}`,
  );
  console.log(`[ai-game-creator-shell] 安装包：${artifact}`);
-  console.log(`[ai-game-creator-shell] 首装包：${downloadArtifact}`);
  console.log(
    manualNotes
      ? '[ai-game-creator-shell] 更新摘要：使用 AGC_UPDATE_RELEASE_NOTES 手动文案'
@@ -800,7 +664,6 @@ export async function generateUpdateManifest(
  return {
    channel,
    artifact,
-    downloadArtifact,
    manifest,
    manifestPath,
    notes,
@@ -812,24 +675,12 @@ export async function generateUpdateManifest(
  };
 }

-export async function buildRelease(
-  args = [],
-  {
-    prepareVersion = prepareReleaseVersion,
-    build = runTauriBuild,
-    generateManifest = generateUpdateManifest,
-  } = {},
-) {
-  const context = resolveReleaseContext(args);
-  if (!args.includes('--no-bundle')) await prepareVersion(context);
-  build(args, context);
-  if (!args.includes('--no-bundle')) return generateManifest(context);
-}
-
 if (
  process.argv[1] &&
  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
 ) {
  const args = process.argv.slice(2);
-  await buildRelease(args);
+  if (!args.includes('--no-bundle')) await prepareReleaseVersion();
+  runTauriBuild(args);
+  if (!args.includes('--no-bundle')) await generateUpdateManifest();
 }
@@ -14,8 +14,6 @@ import { fileURLToPath } from 'node:url';

 import {
  agcReleasePathPatterns,
-  buildRelease,
-  buildTauriBuildArguments,
  collectRecentReleaseCommits,
  collectReleaseCommits,
  compareVersions,
@@ -24,49 +22,17 @@ import {
  createUpdateManifest,
  formatRecentReleaseNotes,
  formatReleaseNotes,
-  generateUpdateManifest,
  nextPatchVersion,
  resolveManifestPlatformKeys,
  resolvePreviousReleaseCommit,
  resolveReleaseChannel,
-  resolveReleaseContext,
  resolveRemoteHighWaterVersion,
-  runTauriBuild,
-  selectFirstInstallArtifact,
  selectReleaseArtifact,
  updateManifestUrl,
 } from './build-release.mjs';

 const windowsTarget = 'x86_64-pc-windows-msvc';
 const universalTarget = 'universal-apple-darwin';
-const packageVersion = JSON.parse(
-  readFileSync(new URL('../package.json', import.meta.url), 'utf8'),
-).version;
-
-function createDmgFixture(root, target, version = packageVersion) {
-  const architecture = target.startsWith('aarch64')
-    ? 'aarch64'
-    : target === universalTarget
-      ? 'universal'
-      : 'x64';
-  const dmg = path.join(root, `陶泥儿_${version}_${architecture}.dmg`);
-  writeFileSync(dmg, 'first installation disk image');
-  return dmg;
-}
-
-test('native sidecar builds accept universal and each macOS architecture', () => {
-  for (const target of [
-    universalTarget,
-    'aarch64-apple-darwin',
-    'x86_64-apple-darwin',
-  ]) {
-    assert.deepEqual(buildTauriBuildArguments([], target), [
-      'build',
-      '--target',
-      target,
-    ]);
-  }
-});

 function withEnv(overrides, run) {
  const previous = new Map();
@@ -166,364 +132,16 @@ test('channel manifest URL and build-time endpoint follow the channel', () => {
  });
 });

-test('macOS manifests advertise exactly the architectures actually built', () => {
+test('universal macOS builds publish one artifact under both platform keys', () => {
  assert.deepEqual(resolveManifestPlatformKeys(universalTarget), [
    'darwin-aarch64',
    'darwin-x86_64',
  ]);
-  assert.deepEqual(resolveManifestPlatformKeys('aarch64-apple-darwin'), [
-    'darwin-aarch64',
-  ]);
-  assert.deepEqual(resolveManifestPlatformKeys('x86_64-apple-darwin'), [
-    'darwin-x86_64',
-  ]);
  assert.deepEqual(resolveManifestPlatformKeys(windowsTarget), [
    'windows-x86_64',
  ]);
 });

-test('release context resolves explicit targets before environment/default and fails closed', () => {
-  for (const args of [
-    ['--target', 'aarch64-apple-darwin'],
-    ['--target=aarch64-apple-darwin'],
-    ['-t', 'aarch64-apple-darwin'],
-  ]) {
-    for (const env of [{}, { AGC_BUILD_TARGET: windowsTarget }]) {
-      const context = resolveReleaseContext(args, env);
-      assert.equal(context.target, 'aarch64-apple-darwin');
-      assert.equal(context.channel, 'dev-mac');
-      assert.match(
-        context.bundleRoot.replaceAll('\\', '/'),
-        /target\/aarch64-apple-darwin\/release\/bundle$/,
-      );
-      assert.ok(Object.isFrozen(context));
-    }
-    assert.throws(
-      () => resolveReleaseContext(args, { AGC_UPDATE_CHANNEL: 'dev-win' }),
-      /只能用于 windows/,
-    );
-  }
-  assert.equal(resolveReleaseContext([], {}).target, windowsTarget);
-  assert.equal(
-    resolveReleaseContext([], { AGC_BUILD_TARGET: 'x86_64-apple-darwin' })
-      .channel,
-    'dev-mac',
-  );
-  for (const args of [
-    ['--target'],
-    ['--target='],
-    ['--target', '--no-bundle'],
-    ['--target', windowsTarget, '--target=aarch64-apple-darwin'],
-    ['--target', 'unknown'],
-  ])
-    assert.throws(() => resolveReleaseContext(args, {}));
-});
-
-test('explicit macOS target drives version lookup, Tauri endpoint, artifact and manifest together', async () => {
-  const calls = [];
-  const seenContexts = [];
-  await withStubbedFetch(
-    (url) => {
-      calls.push(url);
-      assert.match(url, /\/dev-mac\/latest\.json$/);
-      return jsonResponse({ version: '0.1.67' });
-    },
-    () =>
-      withEnv(
-        { AGC_BUILD_TARGET: undefined, AGC_UPDATE_CHANNEL: undefined },
-        () =>
-          buildRelease(['--target', 'aarch64-apple-darwin'], {
-            prepareVersion: async (context) => {
-              seenContexts.push(context);
-              assert.equal(
-                await resolveRemoteHighWaterVersion(context.channel),
-                '0.1.67',
-              );
-            },
-            build: (args, context) => {
-              seenContexts.push(context);
-              runTauriBuild(args, context, {
-                spawn: (_binary, command) => {
-                  const configIndex = command.lastIndexOf('--config');
-                  const config = JSON.parse(
-                    readFileSync(command[configIndex + 1], 'utf8'),
-                  );
-                  assert.match(
-                    config.plugins.updater.endpoints[0],
-                    /\/dev-mac\/latest\.json$/,
-                  );
-                  assert.ok(command.includes('aarch64-apple-darwin'));
-                  assert.ok(
-                    !command.includes('--features=cocos-editor-execute'),
-                  );
-                  return { status: 0 };
-                },
-              });
-            },
-            generateManifest: (context) => {
-              seenContexts.push(context);
-              withSignedArtifact('陶泥儿.app.tar.gz', (artifact) => {
-                assert.equal(
-                  selectReleaseArtifact(
-                    ['/tmp/win.exe', artifact, '/tmp/mac.dmg'],
-                    context.target,
-                  ),
-                  artifact,
-                );
-                const manifest = createUpdateManifest(artifact, {
-                  ...context,
-                  downloadArtifact: createDmgFixture(
-                    path.dirname(artifact),
-                    context.target,
-                  ),
-                });
-                assert.deepEqual(Object.keys(manifest.platforms), [
-                  'darwin-aarch64',
-                ]);
-                assert.match(
-                  manifest.platforms['darwin-aarch64'].url,
-                  /\/dev-mac\//,
-                );
-              });
-            },
-          }),
-      ),
-  );
-  assert.equal(calls.length, 1, 'Mac 不应读取 Windows 迁移指针');
-  assert.equal(seenContexts.length, 3);
-  assert.ok(seenContexts.every((context) => context === seenContexts[0]));
-});
-
-for (const target of ['aarch64-apple-darwin', 'x86_64-apple-darwin']) {
-  test(`real manifest writer publishes the ${target} updater and first installer separately`, async () => {
-    const root = mkdtempSync(path.join(os.tmpdir(), 'agc-mac-manifest-'));
-    try {
-      const artifact = path.join(root, '陶泥儿.app.tar.gz');
-      writeFileSync(artifact, 'mac package');
-      writeFileSync(`${artifact}.sig`, 'mac signature');
-      writeFileSync(path.join(root, 'windows.exe'), 'wrong platform');
-      const downloadArtifact = createDmgFixture(root, target);
-      const context = {
-        ...resolveReleaseContext([`--target=${target}`], {}),
-        bundleRoot: root,
-      };
-      const result = await withStubbedFetch(
-        (url) => {
-          assert.match(url, /\/dev-mac\/latest\.json$/);
-          return jsonResponse({}, 404);
-        },
-        () => generateUpdateManifest(context),
-      );
-      assert.equal(result.artifact, artifact);
-      assert.equal(result.downloadArtifact, downloadArtifact);
-      assert.equal(result.manifestPath, path.join(root, 'latest.json'));
-      assert.equal(result.legacyManifestPath, null);
-      const key = target.startsWith('aarch64')
-        ? 'darwin-aarch64'
-        : 'darwin-x86_64';
-      assert.deepEqual(Object.keys(result.manifest.platforms), [key]);
-      assert.deepEqual(Object.keys(result.manifest.downloads), [key]);
-      assert.match(
-        result.manifest.platforms[key].url,
-        /\/dev-mac\/.*\.app\.tar\.gz$/,
-      );
-      assert.equal(
-        decodeURIComponent(
-          new URL(result.manifest.downloads[key].url).pathname,
-        ),
-        `/agc/dev-mac/${packageVersion}/${path.basename(downloadArtifact)}`,
-      );
-      assert.deepEqual(
-        JSON.parse(readFileSync(result.manifestPath, 'utf8')),
-        result.manifest,
-      );
-    } finally {
-      rmSync(root, { recursive: true, force: true });
-    }
-  });
-}
-
-test('DMG selection ignores other versions and architectures but rejects missing, empty and ambiguous current packages', () => {
-  const root = mkdtempSync(path.join(os.tmpdir(), 'agc-dmg-selection-'));
-  try {
-    const target = 'aarch64-apple-darwin';
-    const options = {
-      target,
-      version: '2.3.4',
-      artifact: path.join(root, '陶泥儿.app.tar.gz'),
-    };
-    const oldVersion = createDmgFixture(root, target, '2.3.3');
-    const wrongArchitecture = createDmgFixture(
-      root,
-      'x86_64-apple-darwin',
-      '2.3.4',
-    );
-    assert.throws(() => selectFirstInstallArtifact([], options), /找到 0 个/u);
-    assert.throws(
-      () =>
-        selectFirstInstallArtifact([oldVersion, wrongArchitecture], options),
-      /找到 0 个/u,
-    );
-    const current = createDmgFixture(root, target, '2.3.4');
-    assert.equal(
-      selectFirstInstallArtifact(
-        [oldVersion, wrongArchitecture, current],
-        options,
-      ),
-      current,
-    );
-    writeFileSync(current, '');
-    assert.throws(
-      () => selectFirstInstallArtifact([current], options),
-      /不存在或为空/u,
-    );
-    writeFileSync(current, 'valid dmg');
-    const second = path.join(root, '另一包_2.3.4_aarch64.dmg');
-    writeFileSync(second, 'ambiguous dmg');
-    assert.throws(
-      () => selectFirstInstallArtifact([current, second], options),
-      /找到 2 个/u,
-    );
-  } finally {
-    rmSync(root, { recursive: true, force: true });
-  }
-});
-
-test('manifest writer refuses to create latest when the current Mac DMG is missing', async () => {
-  const root = mkdtempSync(path.join(os.tmpdir(), 'agc-missing-dmg-'));
-  try {
-    const artifact = path.join(root, '陶泥儿.app.tar.gz');
-    writeFileSync(artifact, 'updater archive');
-    writeFileSync(`${artifact}.sig`, 'signature');
-    const context = {
-      ...resolveReleaseContext(['--target=aarch64-apple-darwin'], {}),
-      bundleRoot: root,
-    };
-    await assert.rejects(
-      () => generateUpdateManifest(context),
-      /首装 DMG 必须唯一匹配/u,
-    );
-    assert.throws(() => readFileSync(path.join(root, 'latest.json')), {
-      code: 'ENOENT',
-    });
-  } finally {
-    rmSync(root, { recursive: true, force: true });
-  }
-});
-
-test('invalid target or mismatched channel fails before any release side effect', async () => {
-  let touched = false;
-  const sideEffects = {
-    prepareVersion: () => {
-      touched = true;
-    },
-    build: () => {
-      touched = true;
-    },
-    generateManifest: () => {
-      touched = true;
-    },
-  };
-  await assert.rejects(
-    () => buildRelease(['--target', 'unknown'], sideEffects),
-    /不支持的发布目标/,
-  );
-  await withEnv({ AGC_UPDATE_CHANNEL: 'dev-win' }, () =>
-    assert.rejects(
-      () => buildRelease(['--target=aarch64-apple-darwin'], sideEffects),
-      /只能用于 windows/,
-    ),
-  );
-  assert.equal(touched, false);
-});
-
-test('universal uses the Mac channel and the same signed artifact for both architectures', () => {
-  const context = resolveReleaseContext(['--target', universalTarget], {
-    AGC_BUILD_TARGET: windowsTarget,
-  });
-  assert.equal(context.channel, 'dev-mac');
-  assert.ok(context.bundleRoot.includes(universalTarget));
-  withSignedArtifact('陶泥儿.app.tar.gz', (artifact) => {
-    const manifest = createUpdateManifest(artifact, {
-      ...context,
-      downloadArtifact: createDmgFixture(
-        path.dirname(artifact),
-        universalTarget,
-      ),
-    });
-    assert.deepEqual(Object.keys(manifest.platforms), [
-      'darwin-aarch64',
-      'darwin-x86_64',
-    ]);
-    assert.deepEqual(
-      manifest.platforms['darwin-aarch64'],
-      manifest.platforms['darwin-x86_64'],
-    );
-    assert.match(manifest.platforms['darwin-aarch64'].url, /\/dev-mac\//);
-    // 两个平台键共用同一个 universal 首装包，不能要求出两份架构 DMG。
-    assert.deepEqual(
-      manifest.downloads['darwin-aarch64'].url,
-      manifest.downloads['darwin-x86_64'].url,
-    );
-    assert.match(manifest.downloads['darwin-aarch64'].url, /_universal\.dmg$/u);
-  });
-});
-
-test('Windows remains the default and explicit Windows overrides macOS environment', () => {
-  const files = ['/tmp/mac.app.tar.gz', '/tmp/windows.exe', '/tmp/mac.dmg'];
-  for (const context of [
-    resolveReleaseContext([], {}),
-    resolveReleaseContext(['--target', windowsTarget], {
-      AGC_BUILD_TARGET: 'aarch64-apple-darwin',
-    }),
-  ]) {
-    assert.equal(context.channel, 'dev-win');
-    assert.equal(
-      selectReleaseArtifact(files, context.target),
-      '/tmp/windows.exe',
-    );
-    runTauriBuild(
-      ['--target', windowsTarget, '--config', 'user-config.json'],
-      context,
-      {
-        spawn: (_binary, command) => {
-          assert.ok(
-            command.includes(
-              '--features=cocos-editor-execute,unity-editor-execute',
-            ),
-          );
-          assert.ok(command.includes('user-config.json'));
-          const configIndex = command.lastIndexOf('--config');
-          const config = JSON.parse(
-            readFileSync(command[configIndex + 1], 'utf8'),
-          );
-          assert.match(
-            config.plugins.updater.endpoints[0],
-            /\/dev-win\/latest\.json$/,
-          );
-          return { status: 0 };
-        },
-      },
-    );
-  }
-});
-
-test('no-bundle smoke skips version writes and manifest generation', async () => {
-  const steps = [];
-  await buildRelease(['--no-bundle', '--target=aarch64-apple-darwin'], {
-    prepareVersion: () => {
-      steps.push('version');
-    },
-    build: (_args, context) => {
-      steps.push(context.channel);
-    },
-    generateManifest: () => {
-      steps.push('manifest');
-    },
-  });
-  assert.deepEqual(steps, ['dev-mac']);
-});
-
 test('channel manifest carries version, platform keys and signature', () => {
  withSignedArtifact('陶泥儿_0.1.48_x64-setup.exe', (artifact) => {
    withEnv({ AGC_UPDATE_RELEASE_NOTES: '修复与改进' }, () => {
@@ -536,9 +154,6 @@ test('channel manifest carries version, platform keys and signature', () => {
      assert.equal(manifest.notes, '修复与改进');
      assert.equal(manifest.pub_date, '2026-09-17T00:00:00.000Z');
      assert.deepEqual(Object.keys(manifest.platforms), ['windows-x86_64']);
-      assert.deepEqual(manifest.downloads, {
-        'windows-x86_64': { url: manifest.platforms['windows-x86_64'].url },
-      });
      assert.equal(
        manifest.platforms['windows-x86_64'].signature,
        'signature-content',
@@ -719,18 +334,17 @@ test('recent commit fallback marks that entries may repeat the previous release'
  }
 });

-test('release entry forwards the built artifacts and dry-run mode to the uploader', () => {
+test('release upload forces overwrite for artifact, signature and channel pointers', () => {
  const source = readFileSync(
    new URL('./release-upload.mjs', import.meta.url),
    'utf8',
  );
-  assert.match(
-    source,
-    /const release = await buildRelease\(process\.argv\.slice\(2\)\)/u,
+  assert.equal(
+    (source.match(/runOssutil\(\[\s*'cp',\s*'--force'/gu) ?? []).length,
+    4,
  );
-  assert.match(source, /uploadReleaseArtifacts\(release, \{/u);
-  assert.match(source, /const dryRun = readReleaseDryRun\(\);/u);
-  assert.ok(source.includes('\n  dryRun,\n'));
+  assert.match(source, /agc\/\$\{channel\}\/latest\.json/u);
+  assert.match(source, /agc\/latest\.json/u);
 });

 test('release notes list client commits with short sha and bound their size', () => {
@@ -19,6 +19,6 @@ export function withDefaultCargoFeatures(argv, features) {

 export function defaultEditorFeatures(target) {
  return target === 'win32' || target.includes('windows')
-    ? ['cocos-editor-execute', 'unity-editor-execute']
+    ? ['cocos-editor-execute']
    : [];
 }
@@ -9,7 +9,7 @@ test('Windows release includes the same editor feature as development', () => {
    buildTauriBuildArguments([], 'x86_64-pc-windows-msvc', 'win32'),
    [
      'build',
-      '--features=cocos-editor-execute,unity-editor-execute',
+      '--features=cocos-editor-execute',
      '--target',
      'x86_64-pc-windows-msvc',
    ],
@@ -35,12 +35,6 @@ const windowsTauriConfig = JSON.parse(
    'utf8',
  ),
 );
-const macosTauriConfig = JSON.parse(
-  fs.readFileSync(
-    new URL('../src-tauri/tauri.macos.conf.json', import.meta.url),
-    'utf8',
-  ),
-);
 const cargoManifestSource = fs.readFileSync(
  new URL('../src-tauri/Cargo.toml', import.meta.url),
  'utf8',
@@ -143,6 +137,7 @@ const allowedUncalledTauriCommands = [
  'reload_agc_plugin',
  'call_agc_plugin',
  'read_agc_plugin_panel',
+  'set_agc_plugin_project_path',
  'set_agc_plugin_enabled',
 ];
 const sourceExtensions = new Set([
@@ -1363,39 +1358,6 @@ if (windowsTauriConfig.bundle?.useLocalToolsDir !== true) {
    'AI game creator shell Windows Tauri config must cache bundling tools in the project target directory',
  );
 }
-assert.deepEqual(
-  macosTauriConfig.bundle?.resources,
-  Object.fromEntries([
-    ...['darwin-arm64', 'darwin-x64'].flatMap((arch) =>
-      [
-        'bin/codex',
-        'bin/codex-code-mode-host',
-        'codex-path/rg',
-        'codex-resources/zsh/bin/zsh',
-        'codex-package.json',
-        'NOTICE.md',
-        'manifest.json',
-      ].map((file) => [
-        `resources/codex/mac-native/${arch}/${file}`,
-        `coding-agent/mac-native/${arch}/${file}`,
-      ]),
-    ),
-    ['resources/plugins', 'plugins'],
-  ]),
-  'macOS must bundle the complete native Codex layout and plugin workspace',
-);
-assert.deepEqual(
-  macosTauriConfig.plugins?.updater?.endpoints,
-  [
-    'https://agc-dev.oss-rg-china-mainland.aliyuncs.com/agc/dev-mac/latest.json',
-  ],
-  'macOS local builds must not use the Windows update channel',
-);
-assert.equal(
-  macosTauriConfig.bundle?.macOS?.minimumSystemVersion,
-  '15.0',
-  'macOS deployment baseline must cover the bundled native zsh requirement',
-);

 if (tauriConfig.app?.withGlobalTauri !== true) {
  throw new Error(
@@ -1760,7 +1722,7 @@ for (const snippet of [
  'fn append_local_permission_log_at(',
  '"command.auto"',
  'GameCreationAppPermission::Auto',
-  'fn game_creator_bundled_codex_cli_path',
+  'GAME_CREATOR_BUNDLED_CODEX_CLI_RELATIVE_PATH',
  'validate_game_creator_bundled_codex_cli',
  '内置 Codex CLI 完整性校验失败',
 ]) {
@@ -1,250 +0,0 @@
-import assert from 'node:assert/strict';
-import { spawn, spawnSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-
-// 只操作临时复制品；不启动 GUI、不读取开发机凭据、不访问 Provider。
-assert.equal(process.platform, 'darwin', '此验证必须在 macOS 执行');
-const source = path.resolve(process.argv[2] || '');
-const architecture =
-  process.argv[3] || (process.arch === 'arm64' ? 'arm64' : 'x86_64');
-assert.ok(
-  ['arm64', 'x86_64'].includes(architecture),
-  '架构只接受 arm64 / x86_64',
-);
-const requireUniversal = process.argv.includes('--universal');
-assert.ok(
-  source.endsWith('.app') && fs.statSync(source).isDirectory(),
-  '请传入 .app 绝对路径',
-);
-const root = fs.realpathSync(
-  fs.mkdtempSync(path.join(os.tmpdir(), 'agc-macos-bundle-')),
-);
-const app = path.join(root, '陶泥儿 隔离测试.app');
-const home = path.join(root, 'home');
-const config = path.join(root, 'config');
-const tmp = path.join(root, 'tmp');
-const codexHome = path.join(root, 'codex-home');
-for (const directory of [home, config, tmp, codexHome]) {
-  fs.mkdirSync(directory, { mode: 0o700 });
-}
-const env = {
-  HOME: home,
-  PATH: '/usr/bin:/bin',
-  TMPDIR: tmp,
-  CODEX_HOME: codexHome,
-};
-
-function run(command, args) {
-  // 只强制被测应用切片；本机 Xcode 检查工具可能仅提供宿主架构。
-  const useSlice = command.startsWith(`${app}${path.sep}`);
-  const result = spawnSync(
-    useSlice ? '/usr/bin/arch' : command,
-    useSlice ? [`-${architecture}`, command, ...args] : args,
-    {
-      cwd: root,
-      env,
-      encoding: 'utf8',
-      timeout: 120_000,
-      maxBuffer: 1024 * 1024,
-    },
-  );
-  assert.ifError(result.error);
-  return result;
-}
-
-async function hashFile(file) {
-  const hash = createHash('sha256');
-  for await (const chunk of fs.createReadStream(file)) hash.update(chunk);
-  return hash.digest('hex');
-}
-
-async function handshake(executable) {
-  const child = spawn(executable, ['app-server'], {
-    cwd: root,
-    env,
-    stdio: ['pipe', 'pipe', 'pipe'],
-  });
-  let buffered = '';
-  let stderrBytes = 0;
-  try {
-    await new Promise((resolve, reject) => {
-      const timer = setTimeout(
-        () => reject(new Error('app-server 初始化超时')),
-        120_000,
-      );
-      const finish = (error) => {
-        clearTimeout(timer);
-        if (error) reject(error);
-        else resolve();
-      };
-      child.on('error', finish);
-      child.on('exit', (code) =>
-        finish(new Error(`app-server 提前退出 ${code}`)),
-      );
-      child.stderr.on('data', (chunk) => {
-        stderrBytes += chunk.length;
-        if (stderrBytes > 1024 * 1024)
-          finish(new Error('app-server stderr 超限'));
-      });
-      child.stdout.on('data', (chunk) => {
-        buffered += chunk.toString('utf8');
-        if (buffered.length > 1024 * 1024)
-          return finish(new Error('app-server stdout 超限'));
-        let end;
-        while ((end = buffered.indexOf('\n')) >= 0) {
-          const line = buffered.slice(0, end);
-          buffered = buffered.slice(end + 1);
-          try {
-            const message = JSON.parse(line);
-            if (message.id !== 1) continue;
-            assert.ok(message.result?.userAgent, '初始化必须返回真实服务身份');
-            assert.equal(message.error, undefined);
-            child.stdin.write(`${JSON.stringify({ method: 'initialized' })}\n`);
-            finish();
-          } catch (error) {
-            finish(error);
-          }
-        }
-      });
-      child.stdin.on('error', finish);
-      child.stdin.write(
-        `${JSON.stringify({
-          id: 1,
-          method: 'initialize',
-          params: {
-            clientInfo: {
-              name: 'agc_bundle_smoke',
-              title: 'AGC bundle smoke',
-              version: '1',
-            },
-            capabilities: { experimentalApi: true },
-          },
-        })}\n`,
-      );
-    });
-  } finally {
-    if (child.exitCode === null && child.signalCode === null) {
-      await new Promise((resolve) => {
-        const timer = setTimeout(() => child.kill('SIGKILL'), 3000);
-        child.once('exit', () => {
-          clearTimeout(timer);
-          resolve();
-        });
-        child.kill('SIGTERM');
-      });
-    }
-  }
-}
-
-try {
-  fs.cpSync(source, app, { recursive: true });
-  const resources = path.join(app, 'Contents/Resources');
-  const platform = architecture === 'arm64' ? 'darwin-arm64' : 'darwin-x64';
-  const bundle = path.join(resources, 'coding-agent/mac-native', platform);
-  const executable = path.join(bundle, 'bin/codex');
-  const main = path.join(
-    app,
-    'Contents/MacOS/genarrative-ai-game-creator-shell',
-  );
-  const mainArchitectures = run('/usr/bin/lipo', ['-archs', main]);
-  assert.equal(mainArchitectures.status, 0);
-  assert.ok(mainArchitectures.stdout.split(/\s+/).includes(architecture));
-  if (requireUniversal) {
-    assert.deepEqual(mainArchitectures.stdout.trim().split(/\s+/).sort(), [
-      'arm64',
-      'x86_64',
-    ]);
-    for (const platform of ['darwin-arm64', 'darwin-x64']) {
-      assert.ok(
-        fs.existsSync(
-          path.join(
-            resources,
-            'coding-agent/mac-native',
-            platform,
-            'manifest.json',
-          ),
-        ),
-      );
-    }
-  }
-  const manifest = JSON.parse(
-    fs.readFileSync(path.join(bundle, 'manifest.json'), 'utf8'),
-  );
-  assert.equal(manifest.schemaVersion, 'genarrative-codex-sidecar.v2');
-  assert.equal(manifest.platform, platform);
-  assert.equal(manifest.version, 'codex-cli 0.147.0');
-  const components = [
-    'bin/codex',
-    'bin/codex-code-mode-host',
-    'codex-path/rg',
-    'codex-resources/zsh/bin/zsh',
-    'codex-package.json',
-  ];
-  assert.deepEqual(Object.keys(manifest.files).sort(), [...components].sort());
-  for (const component of components) {
-    const file = path.join(bundle, component);
-    assert.equal(await hashFile(file), manifest.files[component], component);
-    if (component !== 'codex-package.json') {
-      fs.accessSync(file, fs.constants.X_OK);
-      const arch = run('/usr/bin/lipo', ['-archs', file]);
-      assert.equal(arch.status, 0, component);
-      assert.equal(arch.stdout.trim(), architecture, component);
-    }
-  }
-  assert.ok(fs.existsSync(path.join(bundle, 'NOTICE.md')));
-  const plugin = path.join(resources, 'plugins/agc-cocos-editor');
-  for (const file of [
-    'plugin.json',
-    'src/entry.mjs',
-    'panels/cocos-editor.html',
-  ]) {
-    assert.ok(fs.existsSync(path.join(plugin, file)), file);
-  }
-  const packageFiles = fs.readdirSync(resources, { recursive: true });
-  assert.ok(
-    !packageFiles.some((file) =>
-      /(^|\/)(\.env[^/]*|auth\.json|node_modules|target|\.git)(\/|$)|\.(exe|dll)$/.test(
-        file,
-      ),
-    ),
-  );
-  assert.equal(run(executable, ['--version']).stdout.trim(), manifest.version);
-  assert.equal(
-    run(path.join(bundle, 'codex-path/rg'), ['--version']).status,
-    0,
-  );
-  assert.equal(
-    run(path.join(bundle, 'codex-resources/zsh/bin/zsh'), ['--version']).status,
-    0,
-  );
-
-  // 使用正式 AGC 查找/校验入口，而非只证明 sidecar 可以独立执行。
-  const status = run(main, ['--config-dir', config, '--llm-status']);
-  const statusText = `${status.stdout}\n${status.stderr}`;
-  assert.ok(!statusText.includes('Codex CLI 未安装'), statusText);
-  assert.ok(
-    statusText.includes('authentication-required'),
-    '隔离账号应仅被登录门禁拒绝',
-  );
-  await handshake(executable);
-
-  // 临时复制品缺少辅助程序时，正式入口必须拒绝内置程序；PATH 无全局 Codex 可兜底。
-  fs.renameSync(
-    path.join(bundle, 'bin/codex-code-mode-host'),
-    path.join(root, 'saved-code-mode-host'),
-  );
-  const broken = run(main, ['--config-dir', config, '--llm-status']);
-  assert.notEqual(broken.status, 0);
-  assert.match(`${broken.stdout}\n${broken.stderr}`, /Codex CLI 未安装/);
-  console.log(
-    `PASS (${architecture}): 隔离安装包资源、架构、摘要、权限、正式 Codex 查找、app-server 握手及缺组件拒绝`,
-  );
-  console.log(
-    '未验证：GUI、真实登录/Provider 对话、Cocos macOS 原生桥接；插件 Node 仍为外部前提',
-  );
-} finally {
-  fs.rmSync(root, { recursive: true, force: true });
-}
@@ -290,7 +290,7 @@ function deterministicArtManifest(
          {
            id: 'garden-guardians-spritesheet',
            path: 'assets/art-spritesheet.png',
-            kind: 'icon-spritesheet',
+            kind: 'art-spritesheet',
            usage: ['defenders', 'enemies', 'battlefield-ui'],
            source: 'canvas',
            status: 'ready',
@@ -710,7 +710,7 @@ function canvasAssetCall(agentId) {
      outputPath: 'assets/ui-prototype.png',
      aspectRatio: '16:9',
      imageSize: '2K',
-      assetKind: 'ui-design',
+      assetKind: 'ui-prototype',
      assetLabel: '游戏横屏界面原型图',
      replaceExisting: false,
    });
@@ -721,7 +721,7 @@ function canvasAssetCall(agentId) {
    outputPath: 'assets/art-spritesheet.png',
    aspectRatio: '1:1',
    imageSize: '1K',
-    assetKind: 'icon-spritesheet',
+    assetKind: 'art-spritesheet',
    assetLabel: '游戏首版核心美术素材',
    replaceExisting: false,
    sliceMode: 'connected-components',
@@ -830,12 +830,12 @@ function missingGeneratedVisualAssetObservation(context, agentId) {
    },
    'design-foundation': {
      path: 'assets/ui-prototype.png',
-      kind: 'ui-design',
+      kind: 'ui-prototype',
      summary: '策划界面原型图尚未按正式视觉流程生成并登记，不能完成任务',
    },
    'art-asset-plan': {
      path: 'assets/art-spritesheet.png',
-      kind: 'icon-spritesheet',
+      kind: 'art-spritesheet',
      summary: '首版美术素材图尚未按正式视觉流程生成并登记，不能完成任务',
    },
  }[agentId];
@@ -2667,7 +2667,7 @@ function createDeterministicCanvasFixture(apiKey) {
          asset: {
            assetId: `asset-${sliceImageId}`,
            assetObjectId: sliceAssetObjectId,
-            assetKind: 'icon',
+            assetKind: 'art-spritesheet-slice',
            projectId,
            taskId,
          },
@@ -2707,7 +2707,7 @@ function createDeterministicCanvasFixture(apiKey) {
        spritesheetAsset: {
          assetId: `asset-${imageId}`,
          assetObjectId,
-          assetKind: 'icon-spritesheet',
+          assetKind: 'art-spritesheet',
          projectId,
          taskId,
        },
@@ -2749,7 +2749,7 @@ function createDeterministicCanvasFixture(apiKey) {
      const assetObjectId = `asset-object-${imageId}`;
      const resourceId = `resource-${imageId}`;
      const assetKind =
-        typeof body?.assetKind === 'string' ? body.assetKind : 'image';
+        typeof body?.assetKind === 'string' ? body.assetKind : 'game-art';
      images.set(imageId, {
        ...image,
        objectKey,
@@ -1,134 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-const appRoot = fileURLToPath(new URL('..', import.meta.url));
-const repoRoot = path.resolve(appRoot, '../..');
-const platforms = {
-  arm64: 'aarch64-apple-darwin',
-  x64: 'x86_64-apple-darwin',
-};
-
-export function lockedMacPackage(lock, arch, version) {
-  assert.ok(Object.hasOwn(platforms, arch), '未知 macOS 架构');
-  const alias = `@openai/codex-darwin-${arch}`;
-  const entry = lock.packages?.[`node_modules/${alias}`];
-  assert.equal(
-    entry?.version,
-    `${version}-darwin-${arch}`,
-    '原生依赖必须与应用锁定版本一致',
-  );
-  assert.deepEqual(entry.os, ['darwin']);
-  assert.deepEqual(entry.cpu, [arch]);
-  const url = new URL(entry.resolved);
-  assert.equal(url.protocol, 'https:');
-  assert.equal(
-    url.hostname,
-    'registry.npmjs.org',
-    '只下载锁定的官方 npm 原生包',
-  );
-  assert.equal(url.username + url.password + url.search + url.hash, '');
-  assert.match(entry.integrity, /^sha512-[A-Za-z0-9+/]+={0,2}$/);
-  return { alias, target: platforms[arch], ...entry };
-}
-
-export function verifyPackageIntegrity(bytes, expected) {
-  const actual = `sha512-${createHash('sha512').update(bytes).digest('base64')}`;
-  assert.equal(actual, expected, 'Codex 下载包 lockfile integrity 不匹配');
-}
-
-export function validateArchiveListing(listing) {
-  const files = listing.trim().split(/\r?\n/u);
-  assert.ok(files.length > 0);
-  for (const file of files) {
-    assert.ok(file.startsWith('package/'), '原生包必须只有 package 根目录');
-    assert.ok(
-      !file.split('/').includes('..') && !file.includes('\\'),
-      '压缩包路径不安全',
-    );
-  }
-}
-
-export async function prepareMacosCodex() {
-  assert.equal(process.platform, 'darwin', '该入口仅用于 macOS 构建机');
-  const lock = JSON.parse(
-    fs.readFileSync(path.join(repoRoot, 'package-lock.json'), 'utf8'),
-  );
-  const app = JSON.parse(
-    fs.readFileSync(path.join(appRoot, 'package.json'), 'utf8'),
-  );
-  const version = app.devDependencies['@openai/codex'];
-  assert.match(version, /^\d+\.\d+\.\d+$/u, 'Codex 必须锁定精确版本');
-  const cache = path.join(appRoot, 'src-tauri/target/.macos-native-cache');
-  fs.mkdirSync(cache, { recursive: true });
-  for (const arch of Object.keys(platforms)) {
-    const entry = lockedMacPackage(lock, arch, version);
-    const archive = path.join(cache, `codex-${entry.version}.tgz`);
-    if (!fs.existsSync(archive)) {
-      const response = await fetch(entry.resolved, {
-        signal: AbortSignal.timeout(300_000),
-      });
-      assert.ok(response.ok, `原生包下载失败 HTTP ${response.status}`);
-      const bytes = Buffer.from(await response.arrayBuffer());
-      verifyPackageIntegrity(bytes, entry.integrity);
-      const partial = `${archive}.${process.pid}.tmp`;
-      fs.writeFileSync(partial, bytes);
-      fs.renameSync(partial, archive);
-    }
-    verifyPackageIntegrity(fs.readFileSync(archive), entry.integrity);
-    validateArchiveListing(
-      execFileSync('tar', ['-tzf', archive], { encoding: 'utf8' }),
-    );
-    // 拒绝链接、设备及其它特殊条目，不能让 tar 在包目录之外写入。
-    const entries = execFileSync('tar', ['-tvzf', archive], {
-      encoding: 'utf8',
-    });
-    assert.ok(
-      entries
-        .trim()
-        .split(/\r?\n/u)
-        .every((line) => /^[-d]/u.test(line)),
-      '原生包禁止链接或特殊文件',
-    );
-    const parent = path.join(repoRoot, 'node_modules/@openai');
-    fs.mkdirSync(parent, { recursive: true });
-    const stage = fs.mkdtempSync(path.join(parent, '.mac-native-'));
-    try {
-      execFileSync(
-        'tar',
-        ['-xzf', archive, '-C', stage, '--strip-components=1'],
-        { stdio: 'pipe' },
-      );
-      const metadata = JSON.parse(
-        fs.readFileSync(
-          path.join(stage, 'vendor', entry.target, 'codex-package.json'),
-          'utf8',
-        ),
-      );
-      assert.equal(metadata.version, version);
-      assert.equal(metadata.target, entry.target);
-      assert.equal(metadata.entrypoint, 'bin/codex');
-      const destination = path.join(repoRoot, 'node_modules', entry.alias);
-      assert.ok(
-        !fs.existsSync(destination) ||
-          !fs.lstatSync(destination).isSymbolicLink(),
-        '拒绝覆盖链接依赖',
-      );
-      fs.rmSync(destination, { recursive: true, force: true });
-      fs.renameSync(stage, destination);
-    } finally {
-      fs.rmSync(stage, { recursive: true, force: true });
-    }
-    console.log(`[macOS Codex] ${entry.version}: lockfile integrity 已验证`);
-  }
-}
-
-if (
-  process.argv[1] &&
-  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
-) {
-  await prepareMacosCodex();
-}
@@ -1,110 +0,0 @@
-import assert from 'node:assert/strict';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import { test } from 'node:test';
-
-import {
-  lockedMacPackage,
-  validateArchiveListing,
-  verifyPackageIntegrity,
-} from './prepare-macos-codex.mjs';
-
-const lock = JSON.parse(
-  fs.readFileSync(new URL('../../../package-lock.json', import.meta.url)),
-);
-const version = JSON.parse(
-  fs.readFileSync(new URL('../package.json', import.meta.url)),
-).devDependencies['@openai/codex'];
-
-test('both macOS dependencies resolve from the lockfile without floating versions', () => {
-  assert.equal(
-    lockedMacPackage(lock, 'arm64', version).target,
-    'aarch64-apple-darwin',
-  );
-  assert.equal(
-    lockedMacPackage(lock, 'x64', version).target,
-    'x86_64-apple-darwin',
-  );
-  assert.throws(() => lockedMacPackage(lock, 'other', version));
-  assert.throws(() => lockedMacPackage(lock, 'x64', '0.0.0'));
-});
-
-test('native package integrity rejects tampering', () => {
-  const bytes = Buffer.from('pinned package');
-  const integrity = `sha512-${createHash('sha512').update(bytes).digest('base64')}`;
-  verifyPackageIntegrity(bytes, integrity);
-  assert.throws(() =>
-    verifyPackageIntegrity(Buffer.from('modified'), integrity),
-  );
-});
-
-test('archive traversal and non-package entries fail closed', () => {
-  validateArchiveListing(
-    'package/package.json\npackage/vendor/target/bin/codex\n',
-  );
-  for (const listing of [
-    '',
-    '/tmp/payload',
-    'package/../private',
-    'other/file',
-    'package/..\\file',
-  ]) {
-    assert.throws(() => validateArchiveListing(listing));
-  }
-});
-
-test('CI pipeline is manual, publishes the dev-mac channel and never reuses a developer workspace', () => {
-  const pipeline = fs.readFileSync(
-    new URL(
-      '../../../jenkins/Jenkinsfile.ai-game-creator-shell-macos-build',
-      import.meta.url,
-    ),
-    'utf8',
-  );
-  for (const required of [
-    'genarrative-agc-macos',
-    'disableConcurrentBuilds()',
-    '$AGC_AGENT_ROOT',
-    'StrictHostKeyChecking=yes',
-    'git merge-base --is-ancestor',
-    'allowEmptyArchive: false',
-    "AGC_UPDATE_CHANNEL = 'dev-mac'",
-    "string(credentialsId: 'AgcUpdaterSigningKey'",
-    "string(credentialsId: 'AgcUpdaterSigningKeyPassword'",
-    "string(credentialsId: 'AliyunAccessKeyId'",
-    "string(credentialsId: 'AliyunaccessKeySecret'",
-    'AGC_RELEASE_VERSION',
-    'OSSUTIL_BIN',
-  ]) {
-    assert.ok(pipeline.includes(required), required);
-  }
-  // dry-run 必须是默认值：不显式取消勾选就不得写入 OSS。
-  assert.match(
-    pipeline,
-    /booleanParam\(name: 'AGC_RELEASE_DRY_RUN', defaultValue: true/u,
-  );
-  for (const forbidden of [
-    'triggers {',
-    'cron(',
-    'pollSCM(',
-    'git clean -fdx',
-    // release:upload 会重新触发一次完整构建，既翻倍耗时也绕过本 Job 的验签门禁。
-    'release:upload',
-  ]) {
-    assert.ok(!pipeline.includes(forbidden), forbidden);
-  }
-});
-
-test('macOS release entry verifies the updater signature before uploading', () => {
-  const entry = fs.readFileSync(
-    new URL('./build-macos-ci.mjs', import.meta.url),
-    'utf8',
-  );
-  const verifyIndex = entry.indexOf('verifyUpdaterSignature({');
-  const uploadIndex = entry.indexOf('uploadReleaseArtifacts(release');
-  assert.ok(verifyIndex > 0, '必须调用更新包验签');
-  assert.ok(uploadIndex > 0, '必须调用 OSS 上传');
-  assert.ok(verifyIndex < uploadIndex, '必须先验签再上传，验不过不得写 OSS');
-  // 无签名私钥时禁止构建：未签名的更新包会被客户端一律拒绝。
-  assert.ok(entry.includes('TAURI_SIGNING_PRIVATE_KEY'));
-});
@@ -1,6 +1,3 @@
-import { spawnSync } from 'node:child_process';
-import path from 'node:path';
-
 /**
 * 发布上传的 OSS 命令行整理：把 ossutil 参数与凭据整理成可执行或可打印的形式，
 * 便于在 dry-run 下核对将要执行的上传，同时保证任何输出都不回显凭据明文。
@@ -28,89 +25,3 @@ export function formatOssutilCommand({ binary, args, endpoint, credentials }) {
  }
  return parts.map(quoteArgument).join(' ');
 }
-
-export function createReleaseUploadPlan(
-  {
-    artifact,
-    downloadArtifact,
-    channel,
-    manifest,
-    manifestPath,
-    legacyManifestPath,
-  },
-  bucket,
-) {
-  if (!artifact || !downloadArtifact || !manifestPath || !manifest?.version) {
-    throw new Error('发布结果缺少更新包、首装包或清单');
-  }
-  const prefix = `oss://${bucket}/agc/${channel}`;
-  const artifacts = [
-    ...new Set(
-      [artifact, `${artifact}.sig`, downloadArtifact].map((file) =>
-        path.resolve(file),
-      ),
-    ),
-  ];
-  const plan = artifacts.map((source) => ({
-    source,
-    destination: `${prefix}/${manifest.version}/${path.basename(source)}`,
-  }));
-  plan.push({ source: manifestPath, destination: `${prefix}/latest.json` });
-  if (legacyManifestPath) {
-    plan.push({
-      source: legacyManifestPath,
-      destination: `oss://${bucket}/agc/latest.json`,
-    });
-  }
-  return plan;
-}
-
-export function uploadReleaseArtifacts(
-  release,
-  {
-    bucket,
-    endpoint,
-    binary = 'ossutil',
-    accessKeyId,
-    accessKeySecret,
-    dryRun = false,
-    spawn = spawnSync,
-    log = console.log,
-  },
-) {
-  if (Boolean(accessKeyId) !== Boolean(accessKeySecret)) {
-    throw new Error('OSS AccessKey ID 和 Secret 必须同时提供');
-  }
-  const plan = createReleaseUploadPlan(release, bucket);
-  for (const { source, destination } of plan) {
-    // 全部安装对象成功后才执行 latest 指针；失败立即终止，不发布悬空链接。
-    const args = ['cp', '--force', source, destination];
-    if (dryRun) {
-      log(
-        `[dry-run] ${formatOssutilCommand({ binary, args, endpoint, credentials: Boolean(accessKeyId) })}`,
-      );
-      continue;
-    }
-    const credentials = accessKeyId
-      ? ['--access-key-id', accessKeyId, '--access-key-secret', accessKeySecret]
-      : [];
-    const result = spawn(
-      binary,
-      [...args, '--endpoint', endpoint, ...credentials],
-      {
-        stdio: 'inherit',
-        shell: false,
-      },
-    );
-    if (result.error)
-      throw new Error(`无法执行 ${binary}，请先安装并配置 ossutil`);
-    if (result.status !== 0) {
-      throw new Error(
-        `OSS 上传失败（退出码 ${result.status ?? 1}）：${destination}`,
-      );
-    }
-    log(`[ai-game-creator-shell] 已上传 ${destination}`);
-  }
-  if (dryRun) log('[ai-game-creator-shell] dry-run：未写入任何 OSS 对象');
-  return plan;
-}
@@ -1,15 +1,8 @@
 import assert from 'node:assert/strict';
-import { mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
+import { readFileSync } from 'node:fs';
 import { test } from 'node:test';

-import {
-  createReleaseUploadPlan,
-  formatOssutilCommand,
-  readReleaseDryRun,
-  uploadReleaseArtifacts,
-} from './release-oss.mjs';
+import { formatOssutilCommand, readReleaseDryRun } from './release-oss.mjs';

 test('dry run only accepts explicit truthy values', () => {
  assert.equal(readReleaseDryRun({}), false);
@@ -40,158 +33,12 @@ test('printed upload command keeps arguments and hides credentials', () => {
  );
 });

-function withReleaseFixture(channel, architecture, run) {
-  const root = mkdtempSync(path.join(os.tmpdir(), 'agc-upload-plan-'));
-  try {
-    const artifact = path.join(
-      root,
-      channel === 'dev-win'
-        ? '陶泥儿_1.2.3_x64-setup.exe'
-        : '陶泥儿.app.tar.gz',
-    );
-    const downloadArtifact =
-      channel === 'dev-win'
-        ? artifact
-        : path.join(root, `陶泥儿_1.2.3_${architecture}.dmg`);
-    const manifestPath = path.join(root, 'latest.json');
-    const legacyManifestPath =
-      channel === 'dev-win' ? path.join(root, 'legacy-latest.json') : null;
-    for (const file of [
-      artifact,
-      `${artifact}.sig`,
-      downloadArtifact,
-      manifestPath,
-      legacyManifestPath,
-    ].filter(Boolean)) {
-      writeFileSync(file, 'fixture');
-    }
-    return run({
-      artifact,
-      downloadArtifact,
-      channel,
-      manifest: { version: '1.2.3' },
-      manifestPath,
-      legacyManifestPath,
-    });
-  } finally {
-    rmSync(root, { recursive: true, force: true });
-  }
-}
-
-const uploadOptions = {
-  bucket: 'agc-dev',
-  endpoint: 'oss-rg-china-mainland.aliyuncs.com',
-  log: () => {},
-};
-
-for (const architecture of ['aarch64', 'x64']) {
-  test(`uploads every ${architecture} Mac object before the channel pointer`, () => {
-    withReleaseFixture('dev-mac', architecture, (release) => {
-      const calls = [];
-      uploadReleaseArtifacts(release, {
-        ...uploadOptions,
-        spawn: (binary, args, options) => {
-          assert.equal(binary, 'ossutil');
-          assert.equal(options.shell, false);
-          assert.deepEqual(args.slice(0, 2), ['cp', '--force']);
-          calls.push({ source: args[2], destination: args[3] });
-          return { status: 0 };
-        },
-      });
-      assert.deepEqual(
-        calls.map(({ source }) => source),
-        [
-          release.artifact,
-          `${release.artifact}.sig`,
-          release.downloadArtifact,
-          release.manifestPath,
-        ],
-      );
-      assert.equal(
-        calls[2].destination,
-        `oss://agc-dev/agc/dev-mac/1.2.3/陶泥儿_1.2.3_${architecture}.dmg`,
-      );
-      assert.equal(
-        calls[3].destination,
-        'oss://agc-dev/agc/dev-mac/latest.json',
-      );
-    });
-  });
-}
-
-test('Windows uploads the shared installer once and publishes migration metadata last', () => {
-  withReleaseFixture('dev-win', 'x64', (release) => {
-    const plan = createReleaseUploadPlan(release, 'agc-dev');
-    assert.deepEqual(
-      plan.map(({ source }) => source),
-      [
-        release.artifact,
-        `${release.artifact}.sig`,
-        release.manifestPath,
-        release.legacyManifestPath,
-      ],
-    );
-    assert.equal(plan.at(-1).destination, 'oss://agc-dev/agc/latest.json');
-    const calls = [];
-    uploadReleaseArtifacts(release, {
-      ...uploadOptions,
-      spawn: (_binary, args) => {
-        assert.deepEqual(args.slice(0, 2), ['cp', '--force']);
-        calls.push(args[3]);
-        return { status: 0 };
-      },
-    });
-    assert.deepEqual(
-      calls,
-      plan.map(({ destination }) => destination),
-    );
-  });
-});
-
-for (const failedArtifactIndex of [0, 1, 2]) {
-  test(`failed Mac object ${failedArtifactIndex} prevents both later objects and latest publication`, () => {
-    withReleaseFixture('dev-mac', 'aarch64', (release) => {
-      const destinations = [];
-      assert.throws(
-        () =>
-          uploadReleaseArtifacts(release, {
-            ...uploadOptions,
-            spawn: (_binary, args) => {
-              destinations.push(args[3]);
-              return {
-                status: destinations.length - 1 === failedArtifactIndex ? 1 : 0,
-              };
-            },
-          }),
-        /OSS 上传失败/u,
-      );
-      assert.equal(destinations.length, failedArtifactIndex + 1);
-      assert.ok(
-        destinations.every(
-          (destination) => !destination.endsWith('/latest.json'),
-        ),
-      );
-    });
-  });
-}
-
-test('dry run prints the complete plan without spawning uploads or exposing credentials', () => {
-  withReleaseFixture('dev-mac', 'aarch64', (release) => {
-    const output = [];
-    uploadReleaseArtifacts(release, {
-      ...uploadOptions,
-      dryRun: true,
-      accessKeyId: 'fixture-id',
-      accessKeySecret: 'fixture-secret',
-      spawn: () => assert.fail('dry run must never execute ossutil'),
-      log: (line) => output.push(line),
-    });
-    assert.equal(
-      output.filter((line) => line.startsWith('[dry-run]')).length,
-      4,
-    );
-    assert.match(output.join('\n'), /\.dmg/u);
-    assert.match(output.at(-1), /未写入任何 OSS 对象/u);
-    assert.doesNotMatch(output.join('\n'), /fixture-id|fixture-secret|已上传/u);
-  });
+test('uploader gates every ossutil call behind the dry run switch', () => {
+  const source = readFileSync(
+    new URL('./release-upload.mjs', import.meta.url),
+    'utf8',
+  );
+  assert.match(source, /const dryRun = readReleaseDryRun\(\);/u);
+  assert.match(source, /if \(dryRun\) \{/u);
+  assert.match(source, /dry-run：未写入任何 OSS 对象/u);
 });
@@ -1,4 +1,7 @@
-import { readReleaseDryRun, uploadReleaseArtifacts } from './release-oss.mjs';
+import { spawnSync } from 'node:child_process';
+import path from 'node:path';
+
+import { formatOssutilCommand, readReleaseDryRun } from './release-oss.mjs';

 const bucket = process.env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
 const endpoint =
@@ -9,14 +12,81 @@ if (!/^[a-z0-9][a-z0-9.-]{1,62}$/u.test(bucket) || /[\r\n\0]/u.test(endpoint)) {
 process.env.AGC_UPDATE_OSS_BASE_URL ||= `https://${bucket}.${endpoint}/agc`;
 const dryRun = readReleaseDryRun();

-const { buildRelease } = await import('./build-release.mjs');
+const { generateUpdateManifest, prepareReleaseVersion, runTauriBuild } =
+  await import('./build-release.mjs');

-const release = await buildRelease(process.argv.slice(2));
-uploadReleaseArtifacts(release, {
-  bucket,
-  endpoint,
-  binary: process.env.OSSUTIL_BIN?.trim() || 'ossutil',
-  accessKeyId: process.env.AGC_OSS_ACCESS_KEY_ID?.trim(),
-  accessKeySecret: process.env.AGC_OSS_ACCESS_KEY_SECRET,
-  dryRun,
-});
+function runOssutil(args) {
+  const binary = process.env.OSSUTIL_BIN?.trim() || 'ossutil';
+  const accessKeyId = process.env.AGC_OSS_ACCESS_KEY_ID?.trim();
+  const accessKeySecret = process.env.AGC_OSS_ACCESS_KEY_SECRET;
+  if (Boolean(accessKeyId) !== Boolean(accessKeySecret)) {
+    throw new Error('OSS AccessKey ID 和 Secret 必须同时提供');
+  }
+  if (dryRun) {
+    // 演练：只打印将要执行的上传，凭据以占位符呈现，不写入 OSS。
+    console.log(
+      `[dry-run] ${formatOssutilCommand({
+        binary,
+        args,
+        endpoint,
+        credentials: Boolean(accessKeyId),
+      })}`,
+    );
+    return;
+  }
+  const credentialArgs = accessKeyId
+    ? ['--access-key-id', accessKeyId, '--access-key-secret', accessKeySecret]
+    : [];
+  const result = spawnSync(
+    binary,
+    [...args, '--endpoint', endpoint, ...credentialArgs],
+    {
+      stdio: 'inherit',
+      shell: false,
+    },
+  );
+  if (result.error) {
+    throw new Error(`无法执行 ${binary}，请先安装并配置 ossutil`);
+  }
+  if (result.status !== 0) process.exit(result.status ?? 1);
+}
+
+await prepareReleaseVersion();
+runTauriBuild([]);
+const { artifact, channel, legacyManifestPath, manifest, manifestPath } =
+  await generateUpdateManifest();
+const artifactKey = `agc/${channel}/${manifest.version}/${path.basename(artifact)}`;
+// Jenkins/ossutil 默认会在目标对象已存在时交互询问并按默认值跳过；
+// 发布清单是固定的 latest 指针，必须显式覆盖，否则流水线会误报成功但远端仍保留旧版本。
+runOssutil(['cp', '--force', artifact, `oss://${bucket}/${artifactKey}`]);
+runOssutil([
+  'cp',
+  '--force',
+  `${artifact}.sig`,
+  `oss://${bucket}/${artifactKey}.sig`,
+]);
+runOssutil([
+  'cp',
+  '--force',
+  manifestPath,
+  `oss://${bucket}/agc/${channel}/latest.json`,
+]);
+console.log(`[ai-game-creator-shell] 已上传 oss://${bucket}/${artifactKey}`);
+console.log(
+  `[ai-game-creator-shell] 已上传 oss://${bucket}/agc/${channel}/latest.json`,
+);
+if (legacyManifestPath) {
+  // 迁移桥：让仍走旧 sha256 清单的已发布客户端升级到新协议，一个版本周期后删除。
+  runOssutil([
+    'cp',
+    '--force',
+    legacyManifestPath,
+    `oss://${bucket}/agc/latest.json`,
+  ]);
+  console.log(
+    `[ai-game-creator-shell] 已上传迁移指针 oss://${bucket}/agc/latest.json`,
+  );
+}
+if (dryRun) {
+  console.log('[ai-game-creator-shell] dry-run：未写入任何 OSS 对象');
+}
@@ -1,10 +1,7 @@
 import { resolve } from 'node:path';
 import { fileURLToPath } from 'node:url';

-import {
-  defaultEditorFeatures,
-  withDefaultCargoFeatures,
-} from './cargo-features.mjs';
+import { withDefaultCargoFeatures } from './cargo-features.mjs';
 import {
  readAgcDevEndpoint,
  resolveAgcDevEndpoint,
@@ -50,8 +47,9 @@ function buildTauriArguments(argv, devUrl = readAgcDevEndpoint().url) {
  ];
 }

-// 开发和发行构建使用同一平台编辑器 feature 集合。
-// 可用 AGC_DEV_CARGO_FEATURES（逗号分隔）覆盖，传空串即关闭。
+// `agc_cocos_execute` 与 Cocos 编辑器适配器只在 `cocos-editor-execute` feature 下
+// 注册。开发构建默认在 Windows 打开它，否则 Agent 的工具清单里根本没有该工具，
+// 只能退化成改写脚本。可用 AGC_DEV_CARGO_FEATURES（逗号分隔）覆盖，传空串即关闭。
 function readDevCargoFeatures(env = process.env) {
  const override = env.AGC_DEV_CARGO_FEATURES;
  if (override !== undefined) {
@@ -60,7 +58,7 @@ function readDevCargoFeatures(env = process.env) {
      .map((value) => value.trim())
      .filter(Boolean);
  }
-  return defaultEditorFeatures(process.platform);
+  return process.platform === 'win32' ? ['cocos-editor-execute'] : [];
 }

 function withDevCargoFeatures(argv, features = readDevCargoFeatures()) {
@@ -1,177 +0,0 @@
-import {
-  createHash,
-  createPublicKey,
-  verify as cryptoVerify,
-} from 'node:crypto';
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-/**
- * 更新包签名门禁：用产物里烘焙的 updater 公钥校验 `.sig`，
- * 防止「发布出去的更新包没人装得上」——客户端校验失败会直接拒绝安装，
- * 而且公钥发布后不可更换，所以必须在构建期、上传前就失败关闭。
- *
- * 格式说明（与 Tauri 2 的实际产出对齐，均为实测）：
- * - `tauri.conf.json` 的 `plugins.updater.pubkey` 是「minisign 公钥文本」的 base64；
- * - 产物旁的 `<artifact>.sig` 是「minisign 签名文本」的 base64；
- * - 公钥 blob 42 字节（alg `Ed` + 8 字节 keyId + 32 字节 Ed25519 公钥）；
- * - 签名 blob 74 字节（alg `Ed` 或 `ED` + 8 字节 keyId + 64 字节签名）；
- * - Tauri 产出的是 `ED`：先对文件做 BLAKE2b-512，再对摘要做 Ed25519 签名。
- */
-const appRoot = fileURLToPath(new URL('..', import.meta.url));
-const defaultTauriConfigPath = path.join(appRoot, 'src-tauri/tauri.conf.json');
-const defaultMacosConfigPath = path.join(
-  appRoot,
-  'src-tauri/tauri.macos.conf.json',
-);
-
-const PUBLIC_KEY_ALGORITHM = 'Ed';
-const RAW_ALGORITHM = 'Ed';
-const PREHASHED_ALGORITHM = 'ED';
-
-function unwrapMinisignText(value, label) {
-  if (typeof value !== 'string' || value.trim().length === 0) {
-    throw new Error(`${label} 为空`);
-  }
-  const trimmed = value.trim();
-  if (trimmed.startsWith('untrusted comment:')) return trimmed;
-  const decoded = Buffer.from(trimmed, 'base64').toString('utf8');
-  if (!decoded.startsWith('untrusted comment:')) {
-    throw new Error(`${label} 不是 minisign 内容（缺少 untrusted comment 头）`);
-  }
-  return decoded;
-}
-
-function contentLines(text) {
-  return text
-    .split('\n')
-    .map((line) => line.trim())
-    .filter((line) => line.length > 0);
-}
-
-/** 解析 updater 公钥（`tauri.conf.json` 里的 base64 值或 minisign 文本）。 */
-export function decodeUpdaterPublicKey(value, label = 'updater 公钥') {
-  const lines = contentLines(unwrapMinisignText(value, label));
-  if (lines.length < 2) throw new Error(`${label} 缺少密钥内容行`);
-  const blob = Buffer.from(lines[1], 'base64');
-  if (blob.length !== 42) {
-    throw new Error(
-      `${label} 长度异常：期望 42 字节，实际 ${blob.length} 字节`,
-    );
-  }
-  const algorithm = blob.subarray(0, 2).toString('latin1');
-  if (algorithm !== PUBLIC_KEY_ALGORITHM) {
-    throw new Error(`${label} 算法不受支持：${algorithm}`);
-  }
-  return { algorithm, keyId: blob.subarray(2, 10), key: blob.subarray(10) };
-}
-
-/** 解析 `.sig`（base64 值或 minisign 文本）。 */
-export function decodeUpdaterSignature(value, label = '更新包签名') {
-  const lines = contentLines(unwrapMinisignText(value, label));
-  if (lines.length < 2) throw new Error(`${label} 缺少签名内容行`);
-  const blob = Buffer.from(lines[1], 'base64');
-  if (blob.length !== 74) {
-    throw new Error(
-      `${label} 长度异常：期望 74 字节，实际 ${blob.length} 字节`,
-    );
-  }
-  const algorithm = blob.subarray(0, 2).toString('latin1');
-  if (algorithm !== RAW_ALGORITHM && algorithm !== PREHASHED_ALGORITHM) {
-    throw new Error(`${label} 算法不受支持：${algorithm}`);
-  }
-  return {
-    algorithm,
-    keyId: blob.subarray(2, 10),
-    signature: blob.subarray(10),
-    trustedComment: lines[2] ?? '',
-  };
-}
-
-function publicKeyObject(rawKey) {
-  return createPublicKey({
-    key: { kty: 'OKP', crv: 'Ed25519', x: rawKey.toString('base64url') },
-    format: 'jwk',
-  });
-}
-
-/**
- * 校验更新包签名；任何不一致都抛错（调用方据此失败关闭）。
- */
-export function verifyUpdaterSignature({
-  artifactPath,
-  signaturePath,
-  pubkey,
-}) {
-  const publicKey = decodeUpdaterPublicKey(pubkey);
-  const signature = decodeUpdaterSignature(
-    fs.readFileSync(signaturePath, 'utf8'),
-  );
-  if (!publicKey.keyId.equals(signature.keyId)) {
-    throw new Error(
-      `更新包签名与内置公钥的 keyId 不一致：公钥 ${publicKey.keyId.toString('hex')}，签名 ${signature.keyId.toString('hex')}；` +
-        '签名私钥与产物内烘焙的公钥不是同一对，发布后客户端会拒绝安装',
-    );
-  }
-  const payload = fs.readFileSync(artifactPath);
-  const message =
-    signature.algorithm === PREHASHED_ALGORITHM
-      ? createHash('blake2b512').update(payload).digest()
-      : payload;
-  if (
-    !cryptoVerify(
-      null,
-      message,
-      publicKeyObject(publicKey.key),
-      signature.signature,
-    )
-  ) {
-    throw new Error(
-      `更新包签名校验失败：${path.basename(artifactPath)}；该产物无法被客户端接受`,
-    );
-  }
-  return {
-    algorithm: signature.algorithm,
-    keyId: publicKey.keyId.toString('hex'),
-    trustedComment: signature.trustedComment,
-  };
-}
-
-/**
- * 读取该平台生效的 updater 公钥：macOS 配置可覆盖基础配置，与构建期行为一致。
- */
-export function readUpdaterPubkey({
-  configPath = defaultTauriConfigPath,
-  platformConfigPath = defaultMacosConfigPath,
-} = {}) {
-  const readPubkey = (file) => {
-    if (!fs.existsSync(file)) return null;
-    const config = JSON.parse(fs.readFileSync(file, 'utf8'));
-    return config?.plugins?.updater?.pubkey ?? null;
-  };
-  const pubkey = readPubkey(platformConfigPath) ?? readPubkey(configPath);
-  if (!pubkey) throw new Error('未在 Tauri 配置中找到 plugins.updater.pubkey');
-  return pubkey;
-}
-
-if (
-  process.argv[1] &&
-  path.resolve(process.argv[1]) === fileURLToPath(import.meta.url)
-) {
-  const [artifactPath, signaturePath = `${artifactPath}.sig`] =
-    process.argv.slice(2);
-  if (!artifactPath) {
-    throw new Error(
-      '用法：node verify-updater-signature.mjs <更新包> [<签名文件>]',
-    );
-  }
-  const result = verifyUpdaterSignature({
-    artifactPath,
-    signaturePath,
-    pubkey: readUpdaterPubkey(),
-  });
-  console.log(
-    `[agc-macos] 更新包签名校验通过：${path.basename(artifactPath)}（alg=${result.algorithm}，keyId=${result.keyId}）`,
-  );
-}
@@ -1,182 +0,0 @@
-import assert from 'node:assert/strict';
-import {
-  createHash,
-  generateKeyPairSync,
-  randomBytes,
-  sign as cryptoSign,
-} from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import test from 'node:test';
-
-import {
-  decodeUpdaterPublicKey,
-  decodeUpdaterSignature,
-  readUpdaterPubkey,
-  verifyUpdaterSignature,
-} from './verify-updater-signature.mjs';
-
-/**
- * 用进程内生成的 Ed25519 密钥自造 minisign 结构，
- * 覆盖 Tauri 实际使用的 `ED`（BLAKE2b-512 预哈希）与 `Ed`（原文）两种模式。
- */
-function createKeyMaterial() {
-  const { publicKey, privateKey } = generateKeyPairSync('ed25519');
-  const rawKey = Buffer.from(
-    publicKey.export({ format: 'jwk' }).x,
-    'base64url',
-  );
-  const keyId = randomBytes(8);
-  const pubkey = Buffer.from(
-    `untrusted comment: minisign public key: ${keyId.reverse().toString('hex').toUpperCase()}\n` +
-      `${Buffer.concat([Buffer.from('Ed'), keyId, rawKey]).toString('base64')}\n`,
-  ).toString('base64');
-  return { privateKey, keyId, rawKey, pubkey };
-}
-
-function signFixture({ privateKey, keyId }, payload, algorithm) {
-  const message =
-    algorithm === 'ED'
-      ? createHash('blake2b512').update(payload).digest()
-      : payload;
-  const signature = cryptoSign(null, message, privateKey);
-  const blob = Buffer.concat([Buffer.from(algorithm), keyId, signature]);
-  const globalSignature = cryptoSign(null, blob, privateKey);
-  return Buffer.from(
-    'untrusted comment: signature from tauri secret key\n' +
-      `${blob.toString('base64')}\n` +
-      'trusted comment: timestamp:0\tfile:fixture\n' +
-      `${globalSignature.toString('base64')}\n`,
-  ).toString('base64');
-}
-
-function withFixture(run) {
-  const directory = fs.mkdtempSync(path.join(os.tmpdir(), 'agc-sig-test-'));
-  try {
-    const artifactPath = path.join(directory, 'app.app.tar.gz');
-    fs.writeFileSync(artifactPath, 'update payload');
-    return run({ directory, artifactPath });
-  } finally {
-    fs.rmSync(directory, { recursive: true, force: true });
-  }
-}
-
-test('接受 Tauri 实际使用的 ED（BLAKE2b-512 预哈希）签名', () => {
-  withFixture(({ directory, artifactPath }) => {
-    const material = createKeyMaterial();
-    const signaturePath = path.join(directory, 'app.app.tar.gz.sig');
-    fs.writeFileSync(
-      signaturePath,
-      signFixture(material, fs.readFileSync(artifactPath), 'ED'),
-    );
-    const result = verifyUpdaterSignature({
-      artifactPath,
-      signaturePath,
-      pubkey: material.pubkey,
-    });
-    assert.equal(result.algorithm, 'ED');
-    assert.equal(result.keyId, material.keyId.toString('hex'));
-  });
-});
-
-test('接受原文 Ed 签名，两种算法互不通用', () => {
-  withFixture(({ directory, artifactPath }) => {
-    const material = createKeyMaterial();
-    const payload = fs.readFileSync(artifactPath);
-    const signaturePath = path.join(directory, 'app.app.tar.gz.sig');
-    fs.writeFileSync(signaturePath, signFixture(material, payload, 'Ed'));
-    assert.equal(
-      verifyUpdaterSignature({
-        artifactPath,
-        signaturePath,
-        pubkey: material.pubkey,
-      }).algorithm,
-      'Ed',
-    );
-    // 原文模式下签名的是别的载荷时必须失败：证明确实在校验内容而非只看结构。
-    fs.writeFileSync(
-      signaturePath,
-      signFixture(material, Buffer.from('别的载荷'), 'Ed'),
-    );
-    assert.throws(
-      () =>
-        verifyUpdaterSignature({
-          artifactPath,
-          signaturePath,
-          pubkey: material.pubkey,
-        }),
-      /签名校验失败/u,
-    );
-  });
-});
-
-test('产物被篡改时失败关闭', () => {
-  withFixture(({ directory, artifactPath }) => {
-    const material = createKeyMaterial();
-    const signaturePath = path.join(directory, 'app.app.tar.gz.sig');
-    fs.writeFileSync(
-      signaturePath,
-      signFixture(material, fs.readFileSync(artifactPath), 'ED'),
-    );
-    fs.writeFileSync(artifactPath, 'tampered payload');
-    assert.throws(
-      () =>
-        verifyUpdaterSignature({
-          artifactPath,
-          signaturePath,
-          pubkey: material.pubkey,
-        }),
-      /签名校验失败/u,
-    );
-  });
-});
-
-test('签名私钥与内置公钥不是同一对时给出明确错误', () => {
-  withFixture(({ directory, artifactPath }) => {
-    const signing = createKeyMaterial();
-    const baked = createKeyMaterial();
-    const signaturePath = path.join(directory, 'app.app.tar.gz.sig');
-    fs.writeFileSync(
-      signaturePath,
-      signFixture(signing, fs.readFileSync(artifactPath), 'ED'),
-    );
-    assert.throws(
-      () =>
-        verifyUpdaterSignature({
-          artifactPath,
-          signaturePath,
-          pubkey: baked.pubkey,
-        }),
-      /keyId 不一致/u,
-    );
-  });
-});
-
-test('公钥或签名格式非法时拒绝解析', () => {
-  assert.throws(() => decodeUpdaterPublicKey(''), /为空/u);
-  assert.throws(
-    () => decodeUpdaterPublicKey('bm90IGEgbWluaXNpZ24ga2V5'),
-    /不是 minisign 内容/u,
-  );
-  assert.throws(
-    () =>
-      decodeUpdaterPublicKey(
-        Buffer.from('untrusted comment: x\nAAAA\n').toString('base64'),
-      ),
-    /长度异常/u,
-  );
-  assert.throws(
-    () =>
-      decodeUpdaterSignature(
-        Buffer.from('untrusted comment: x\nAAAA\n').toString('base64'),
-      ),
-    /长度异常/u,
-  );
-});
-
-test('仓库里配置的 updater 公钥可被解析（两平台共用）', () => {
-  const decoded = decodeUpdaterPublicKey(readUpdaterPubkey());
-  assert.equal(decoded.algorithm, 'Ed');
-  assert.equal(decoded.key.length, 32);
-});
@@ -1745,7 +1745,7 @@ dependencies = [

 [[package]]
 name = "genarrative-ai-game-creator-shell"
-version = "0.1.67"
+version = "0.1.47"
 dependencies = [
 "agent-runtime-core",
 "axum",
@@ -1793,7 +1793,6 @@ dependencies = [
 "ttf-parser",
 "typed_floats",
 "unicode-normalization",
- "unity-editor-bridge",
 "url",
 "uuid",
 "windows-sys 0.61.2",
@@ -3932,7 +3931,6 @@ dependencies = [
 "serde",
 "serde_json",
 "tokio",
- "tracing",
 ]

 [[package]]
@@ -6410,16 +6408,6 @@ version = "0.2.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"

-[[package]]
-name = "unity-editor-bridge"
-version = "0.1.0"
-dependencies = [
- "editor-adapter-api",
- "serde",
- "serde_json",
- "windows-sys 0.61.2",
-]
-
 [[package]]
 name = "unsafe-libyaml"
 version = "0.2.11"
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
k88936	0c4b1c34d9	标注模型下载的重复 task 查询 Project CI / AI game creator shell Rust shard 2/4 (pull_request) Successful in 7m17s Details Project CI / AI game creator shell Rust shard 3/4 (pull_request) Successful in 7m19s Details Project CI / AI game creator shell Rust shard 4/4 (pull_request) Successful in 7m31s Details Project CI / AI game creator shell Rust shard 1/4 (pull_request) Successful in 7m39s Details Project CI / Backend tests (pull_request) Failing after 10s Details Project CI / AI game creator shell Rust smoke (pull_request) Successful in 2m3s Details Project CI / Repository checks (pull_request) Failing after 10s Details Project CI / AI game creator shell Rust crates (pull_request) Successful in 2m36s Details Project CI / Native shell tests (pull_request) Failing after 11m43s Details Project CI / AI game creator shell web tests (pull_request) Failing after 10m21s Details Project CI / Frontend tests (pull_request) Successful in 12m23s Details 在 download_model 增加 TODO，说明 SDK 只提供 download_model(&Task) 因而必须再取一次 task 若将来 SDK 支持按 URL 下载，可直接使用 snapshot 中的模型 URL 省掉这次请求	2026-09-19 14:17:31 +08:00
k88936	3c1059aa39	移除 TripoUrl 的 Display 实现删除 TripoUrl 的 Display，避免 `{}` 这类通用格式化输出带签名的完整 URL 完整 URL 仍可通过 as_str() 显式读取，日志与调试统一走 redacted() 或脱敏后的 Debug 技术方案文档补充该收敛说明	2026-09-19 14:17:00 +08:00
k88936	1392303f1c	请求契约把 model 改为必填字段三个生成请求的 model 由 Option<Model3dModelVersion> 改为必填 Model3dModelVersion，并同步重新生成 TypeScript 绑定 validate_generation_options 不再重复校验 model 缺失，直接由必填的 model 推导 family 三个 client 的 to_sdk_params 改为直接提交模型版本字符串冒烟示例与技术方案文档同步为必填写法	2026-09-19 14:16:39 +08:00
k88936	12512f26b2	multiview 输入拒绝未知字段 Model3dMultiviewInputs 增加 deny_unknown_fields，与 Model3dMultiviewToModelRequest 的严格反序列化保持一致未知视图键（例如拼写错误的 righ）不再被静默丢弃，避免用少于调用方预期的视图提交任务 ts-rs 12 不支持 enum 级该属性，构建时会打印一条可忽略的告警，已在代码注释说明	2026-09-19 14:14:55 +08:00
k88936	800da43a8d	说明生成结果 DTO 的 number 精度边界为 poll_after_ms、updated_at_micros、size_bytes 补充注释，说明其量级远低于 2^53，按 TS number 导出即可精确表示重新生成 TypeScript 绑定，把上述说明同步为 JSDoc 技术方案补充同一说明，明确不做 bigint/string 特殊处理	2026-09-19 14:14:14 +08:00
k88936	b703f0c374	同步Tripo集成文档的契约导出与脱敏说明补充 TripoUrl 脱敏输出与 as_str 读取完整 URL 的说明补充请求可选字段在 TypeScript 绑定中为 field?: T \| null 及 model3d barrel 导出入口补充 ts-rs 生成后需 prettier 格式化再提交的流程说明	2026-09-19 13:17:58 +08:00
k88936	b87d9358e5	对齐 Api 与 Request 的可重试状态码 TripoError::is_retryable 的 Api 分支补充 408 与 425，与 Request 分支的可重试集合保持一致	2026-09-19 13:15:31 +08:00
k88936	f4996d7ac2	auto_size 仅在显式开启时按模型能力拦截 validate_generation_options 中 auto_size 的 H25 校验由 is_some() 改为 == Some(true) auto_size: false 不再被当作启用，与 quad、smart_low_poly、generate_parts 的取值语义保持一致	2026-09-19 13:15:00 +08:00
k88936	09ef92420f	multiview 复用统一的 task_id 校验删除 submit_multiview_to_model 中重复的空白判断，改为调用 common::validate_task_id task_id 非法时的错误字段由 Inputs 改为更精确的 TaskId，与 get_task、download_model 保持一致	2026-09-19 13:14:32 +08:00
k88936	091938ed59	multiview 提交前裁剪 task_id to_sdk_params 改为提交 task_id.trim()，与 task_id.trim().is_empty() 的校验使用同一份标准化输入带前后空白的 task_id 不再原样转发给 Provider	2026-09-19 13:13:54 +08:00
k88936	ddb8b9e8ba	multiview 空白视图按未提供处理 to_sdk_params 新增 optional_view，将仅含空白的 left、back、right 归一化为未提供空白视图不再以 Some(FileInput) 形式提交，与提交前“至少两个视图”的校验保持一致	2026-09-19 13:13:35 +08:00
k88936	230e4d49f2	image_to_model 提交前统一使用裁剪后的输入 to_sdk_params 改为传入 request.input.trim()，与提交前的空值校验使用同一份标准化输入带前后空白的输入不再原样转发给 Provider	2026-09-19 13:12:50 +08:00
k88936	6c209b115a	冒烟示例在任务未完成时跳过下载并继续后续入口轮询改用 throw_on_failure=false，失败终态交回示例按 status 判定而不是直接返回错误非 Completed 的任务打印 status 与 failure 后 continue，避免一个入口失败中断其余入口的冒烟	2026-09-19 13:12:23 +08:00
k88936	b631125a16	冒烟示例不再输出完整下载地址产物行改用 TripoUrl::redacted()，避免把带签名的下载 URL 写入标准输出	2026-09-19 13:07:41 +08:00
k88936	771ff88440	脱敏 TripoUrl 的 Debug 输出为 TripoUrl 手写 Debug 实现，改用隐藏 query 与 fragment 的脱敏形式新增 TripoUrl::redacted 提供日志用脱敏 URL，完整 URL 仍由 as_str 显式读取 TripoTaskSnapshot、TripoTaskOutput、TripoDownloadedModel 的调试输出随之不再暴露带签名的下载地址	2026-09-19 13:07:41 +08:00
k88936	950209f038	为 model3d 请求契约的可选字段补充 ts(optional) 为 image_to_model、multiview_to_model、text_to_model 三个请求的可选字段添加 ts(optional = nullable) multiview 视图分支的 left、back、right 同步标记为可选重新生成 packages/shared/src/contracts/model3d 下的 TypeScript 绑定，使 TS 侧可按 serde 语义省略字段	2026-09-19 13:07:41 +08:00
k88936	42a5929a73	清理 model3d 请求契约中冗余的 serde(default) 移除 image_to_model、multiview_to_model、text_to_model 三个请求结构体 Option 字段上的 serde(default) 同步移除 multiview 视图分支中三个可选视图的 serde(default) serde 对 Option 字段本身即按 None 处理缺失字段，生成的 TypeScript 绑定保持不变	2026-09-19 13:07:41 +08:00
k88936	eda9da4d8d	单点维护 model3d 的 ts-rs 导出根目录在 model3d/mod.rs 新增 model3d_ts_export_dir 宏，集中定义仓库相对导出根路径 common、image_to_model、multiview_to_model、text_to_model 改为调用宏并只声明各自子目录名	2026-09-19 13:07:41 +08:00
k88936	35be25dbd6	补齐 model3d 契约在 packages/shared 的导出入口新增 packages/shared/src/contracts/model3d/index.ts 聚合 ts-rs 生成的 3D 生成契约类型 contracts/index.ts 增加 export type * from './model3d' src/index.ts 增加 export type * from './contracts/model3d'	2026-09-19 13:02:01 +08:00
k88936	da9ee65119	记录Tripo真实冒烟结果结构 Project CI / AI game creator shell Rust shard 3/4 (pull_request) Successful in 7m41s Details Project CI / AI game creator shell Rust shard 2/4 (pull_request) Successful in 7m48s Details Project CI / AI game creator shell Rust shard 4/4 (pull_request) Successful in 7m50s Details Project CI / AI game creator shell Rust shard 1/4 (pull_request) Successful in 8m0s Details Project CI / Backend tests (pull_request) Failing after 11s Details Project CI / AI game creator shell Rust smoke (pull_request) Successful in 2m17s Details Project CI / Repository checks (pull_request) Failing after 10s Details Project CI / AI game creator shell Rust crates (pull_request) Successful in 2m29s Details Project CI / Frontend tests (pull_request) Successful in 14m49s Details Project CI / AI game creator shell web tests (pull_request) Failing after 18m48s Details Project CI / Native shell tests (pull_request) Failing after 27m31s Details 保留三个生成入口的脱敏真实结果形状与下载产物信息使用实际可访问的 Rustacean 图片完成 image 与 multiview 示例同步严格 endpoint 结果契约和真实 Provider 验收文档	2026-09-18 21:42:17 +08:00
k88936	527706b84e	按接口收紧Tripo任务结果类型为 text、image、multiview 三类生成定义独立必填结果结构以枚举关联任务类型与具体结果并对缺失字段失败关闭将通用 URL 类型由 TripoModelUrl 更名为 TripoUrl	2026-09-18 21:37:38 +08:00
k88936	a4beb53dc6	完善Tripo冒烟CLI产物流程等待三类生成任务完成并打印映射后的输出完成后下载模型产物到当前目录并输出文件信息仅在示例内部使用SDK轮询器，不扩展平台公共接口	2026-09-18 18:51:49 +08:00
k88936	25314d9a4a	新增Tripo三类生成冒烟CLI 增加仅通过环境变量配置的 Tripo generation example 顺序提交 text、image、multiview 三类任务并执行单次状态查询保持无命令行参数且不调用 SDK 轮询接口	2026-09-18 18:42:58 +08:00
k88936	5be4a51ac1	完善Tripo枚举与参数组合校验 Project CI / AI game creator shell Rust shard 3/4 (pull_request) Successful in 7m19s Details Project CI / AI game creator shell Rust shard 2/4 (pull_request) Successful in 7m22s Details Project CI / AI game creator shell Rust shard 4/4 (pull_request) Successful in 7m26s Details Project CI / Backend tests (pull_request) Failing after 11s Details Project CI / AI game creator shell Rust shard 1/4 (pull_request) Successful in 7m38s Details Project CI / AI game creator shell Rust smoke (pull_request) Successful in 2m1s Details Project CI / Repository checks (pull_request) Failing after 15s Details Project CI / AI game creator shell Rust crates (pull_request) Successful in 2m54s Details Project CI / Native shell tests (pull_request) Failing after 3m5s Details Project CI / AI game creator shell web tests (pull_request) Failing after 2m13s Details Project CI / Frontend tests (pull_request) Successful in 5m44s Details 按提供的 Tripo 文档补齐 compression、texture quality 与 texture version 枚举移除未在三个生成接口出现的 style 占位字段并同步 Rust/TypeScript contracts 增加模型版本、纹理版本、生成部件、quad、smart-low-poly 与 face limit 的副作用前校验同步 Provider 技术方案和 ADR	2026-09-18 17:23:55 +08:00
k88936	37b355a814	接入Tripo三类3D生成Provider 加入固定 revision 的 tripo-rust-sdk 与 platform-tripo workspace crate 实现 text-to-model、image-to-model、multiview-to-model 提交、通用任务查询和显式模型下载抽取通用任务类型、状态映射、输出 URL 校验与 SDK 错误归一，保持 wait_for_task 不对外暴露同步 Provider 边界文档并暂不接入 api-server	2026-09-18 16:02:13 +08:00
k88936	1c4009ea3b	建立3D生成目录化契约新增 model3d common、text-to-model、image-to-model、multiview-to-model Rust contracts 通过 ts-rs 按目录生成 TypeScript bindings，移除依赖 barrel 的组织方式增加 model3d contracts 定向生成脚本	2026-09-18 15:59:19 +08:00