Merge branch 'master' into fix/ref-persistent

限制附件元数据格式与长度
校验 inline 附件名称和媒体类型的控制字符、格式与长度。共享附件清洗上限常量并补充异常元数据拒绝测试。
2026-09-18 14:58:55 +08:00 · 2026-09-18 14:29:12 +08:00 · 2026-09-18 14:29:12 +08:00 · 2026-09-18 14:29:12 +08:00 · 2026-09-18 14:29:12 +08:00 · 2026-09-18 14:25:40 +08:00
650 changed files with 23531 additions and 64237 deletions
@@ -235,10 +235,6 @@ VITE_DEBUG_MODE=""
 # This is read by api-server and exposed through /api/runtime/frontend-config.
 GENARRATIVE_ENABLE_IMAGE_EDITOR_AGENT_SIDEBAR="false"

-# 官网客户端下载检测渠道：dev、release 或自定义渠道；修改后重启 API 服务。
-# Windows/macOS 是系统维度，不填写 dev-win/dev-mac。
-GENARRATIVE_CLIENT_DOWNLOAD_CHANNEL="dev"
-
 # Optional: official VikingDB credentials for regenerating build-tag similarities
 # with the Python embedding script. The script auto-loads `.env.local` and uses
 # the fixed `bge-large-zh` embedding model.
@@ -23,6 +23,3 @@
 *.meta text
 *.anim text
 *.controller text
-
-# Rust ts-rs 生成的共享契约：保留在仓库中供 TS 消费，但不作为手写源文件统计。
-packages/shared/src/contracts/generated/** linguist-generated=true
@@ -221,7 +221,8 @@ jobs:
      - name: Run AI game creator shell agent-run smoke
        run: npm run check:native-shells:agc-rust-smoke

-  # AGC 壳依赖的共享 / 平台和编辑器插件 crate 各自预热独立 manifest，再运行对应测试。
+  # AGC 壳依赖的共享 / 平台 crate 测试用的是 server-rs workspace 与两个无锁独立 crate
+  # 的 manifest，属另一套依赖图，因此单独一个 job 预热、单独跑。
  ai-game-creator-shell-rust-crates:
    name: AI game creator shell Rust crates
    runs-on: genarrative-ci
@@ -262,15 +263,13 @@ jobs:
          # `cargo test --manifest-path` 单独跑这两个 crate。不在这里预热的话，这两条测试
          # 会在测试阶段自己 `Updating crates.io index`，crates.io 一抖动整条 job 就红
          # （见 #327 / PR #316 run 1950）。
-          # Cocos 插件也使用独立且未提交的锁文件，一并预热。
-          # 这些 crate 都没有提交 Cargo.lock，所以这里只能做不带锁标志的 fetch：
+          # 两个 crate 都没有提交 Cargo.lock，所以这里只能做不带锁标志的 fetch：
          # 加锁标志会因为缺少锁文件直接失败。生成的 Cargo.lock 落在两个 crate 目录内，
          # 已被各自的 .gitignore 忽略，只留在容器里；随后的测试阶段因此能用锁定版本
          # 解析，不再触碰 registry index。
          for manifest_path in \
            server-rs/crates/agent-runtime-core/Cargo.toml \
-            server-rs/crates/agent-runtime-orchestration/Cargo.toml \
-            plugins/agc-cocos-editor/native/cocos-editor-bridge/Cargo.toml; do
+            server-rs/crates/agent-runtime-orchestration/Cargo.toml; do
            for attempt in $(seq 1 5); do
              if cargo fetch \
                --target x86_64-unknown-linux-gnu \
@@ -285,40 +284,6 @@ jobs:
            done
          done

-      - name: Prepare Unity plugin Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path plugins/agc-unity-editor/native/unity-editor-bridge/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'Unity plugin Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
-      - name: Prepare Godot plugin Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path plugins/agc-godot-editor/native/godot-editor-bridge/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'Godot plugin Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
      - name: Run AI game creator shell shared crate gates
        run: npm run check:native-shells:agc-rust-crates

@@ -47,13 +47,7 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-package.json
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/manifest.json
 /apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/NOTICE.md
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-arm64/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-x64/
 /plugins/agc-cocos-editor/native/payload/
-/plugins/agc-unity-editor/dotnet/**/bin/
-/plugins/agc-unity-editor/dotnet/**/obj/
-/plugins/agc-unity-editor/dotnet/publish/
-/plugins/agc-unity-editor/dotnet/native-build/
 /apps/ai-game-creator-shell/logs/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json
@@ -1,14 +1,5 @@
 {
  "singleQuote": true,
  "semi": true,
-  "trailingComma": "all",
-  "overrides": [
-    {
-      "files": "packages/shared/src/contracts/generated/**/*.ts",
-      "options": {
-        "printWidth": 1000,
-        "singleQuote": false
-      }
-    }
-  ]
+  "trailingComma": "all"
 }
@@ -4,13 +4,12 @@

 - 本文件只保留 Agent 进入仓库后必须立即遵守的最高优先级规则；完整执行细则见 [`docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md`](docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md)。
 - 团队级长期项目记忆位于 [`docs/project-memory/`](docs/project-memory/)，供 3 名开发人员和各自本地 Agent 通过 Git 同步。
- [`.codex/`](.codex/) 保存仓库级 Codex 工具资源，例如 skills、plugins、hooks 和配置模板；长期项目知识写入 `docs/` 与 `docs/project-memory/`。
+- [`.codex/`](.codex/) 只保存仓库级 Codex 工具资源，例如 skills、plugins、hooks 和配置模板；长期项目知识不要写入 `.codex/`。
 - 若 `docs/project-memory/shared-memory/` 与当前代码或最新 `docs/` 冲突，以代码和最新 `docs/` 为准，并同步修正过期共享记忆。

 ## 开始任务前

- 先写清一句话交付结果、验收判据和修改范围，再按“必须项 / 风险项 / 可选项”排序；优先完成修改、定向验证和边界检查组成的最小闭环。设置时间盒和检查点，新增发现只有在影响交付判据时才扩大范围，其余记录为后续事项。
- Agent 可见内容直接描述当前任务、输入和成功条件，细节按调用需要提供。
+- 先写清一句话交付结果、验收判据和不做项，再按“必须项 / 风险项 / 可选项”排序；优先完成修改、定向验证和边界检查组成的最小闭环。设置时间盒和检查点，新增发现只有在影响交付判据时才扩大范围，否则记录为后续事项；工具探测、历史整理或验证便利不能自行改变任务目标。
 - 简单自包含任务可以直接执行；复杂开发、跨模块修改、后端 / UI / 文档体系调整前，按顺序读取：
  1. 本文件。
  2. [`docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md`](docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md)。
@@ -24,20 +23,24 @@

 - 禁止提交个人 `~/.codex` 配置、`.env`、API Key、Token、Cookie、会话记录、认证文件、本地私密路径、构建产物、日志、缓存和数据库 dump。
 - 不要在 `.gitignore` 中新增 `.env.local`。
- 现有中文文案、注释、剧情和文档保持中文；看到乱码时先确认真实编码并恢复正确中文。
- 修改包含中文的文件时优先局部补丁；修改后优先运行仓库编码检查。
- 新增 Markdown 文档文件名必须以分类标签开头，格式为 `【标签名】中文标题-日期.md`。
+- 不要擅自把现有中文文案、注释、剧情或文档改写成英文；看到中文乱码时先确认真实编码，不要沿用乱码或用英文替换。
+- 修改包含中文的文件时优先局部补丁，避免整文件重写；修改后优先运行仓库编码检查。
+- 后续新增 Markdown 文档文件名必须以分类标签开头，格式为 `【标签名】中文标题-日期.md`；历史文档不要求批量重命名，除非本次任务明确涉及。
 - 工程修改要同步更新对应 `docs/` 文档；产生长期有效的架构约定、接口变化、排障经验、开发流程或协作规则时，同步更新 `docs/project-memory/shared-memory/`。
- 默认保持系统简洁：优先复用、修改、扩展现有系统、页面和公共组件。
- UI 开发优先复用现有公共组件；发现跨页面或跨端重复的视觉/交互模式时，先抽取到 `packages/shared` 共享组件库并让现有页面迁移使用。共享组件承载通用表现与交互，领域规则、后端副作用和正式业务状态由后端负责。
- 对已明确退役且不存在现役调用方、公开契约、持久化数据、活跃实例或迁移要求的对象，直接清理实现、专属测试和说明，将权威文档更新为当前状态；历史由 Git 保存。
- 公开 API、持久化数据、SpacetimeDB schema、跨版本重放、活跃实例和正式迁移按实际需求保留最小、白名单化的兼容，并配套契约或迁移测试；迁移完成后同步删除兼容实现与对应测试。
- UI 面板优先呈现任务内容与操作，说明按当前操作需要提供；移动端优先，同时保证网页端可正常显示和操作。
- 点击按钮弹出的独立面板使用弹窗、抽屉、popover 或页面级 portal。
+- 默认保持系统简洁：优先复用、修改、扩展现有系统、页面和公共组件，不新建平行系统或平行页面。
+- UI 开发优先复用现有公共组件；发现跨页面或跨端重复的视觉/交互模式时，先抽取到 `packages/shared` 共享组件库并让现有页面迁移使用，禁止在业务页复制同类 UI。共享组件只承载通用表现与交互，不下沉领域规则、后端副作用或正式业务状态。
+- 对已明确退役且不存在现役调用方、公开契约、持久化数据、活跃实例或迁移要求的对象，坚持“四不写”：
+  1. 不写历史兼容代码。
+  2. 不写用于维持退役行为的防御性兼容测试。
+  3. 不写仅说明其曾存在或已删除的墓碑注释。
+  4. 不写仅记录其已删除的墓碑文档；直接将权威文档更新为当前状态。
+- 公开 API、持久化数据、SpacetimeDB schema、跨版本重放、活跃实例和正式迁移不适用“四不写”；必要兼容应最小化、白名单化并配套契约或迁移测试，迁移完成后同步删除兼容实现与对应测试。
+- UI 面板中不要默认写功能说明、规则描述或开发解释文案；移动端优先，同时保证网页端可正常显示和操作。
+- 点击按钮弹出独立面板的设计，不要实现成在当前面板下面追加内容。

 ## 任务路由

- Issue 使用自托管 Gitea；优先用 Gitea UI/API 或 `tea` CLI。默认 triage 标签：`needs-triage`、`needs-info`、`ready-for-agent`、`ready-for-human`、`wontfix`。
+- Issue 使用自托管 Gitea；优先用 Gitea UI/API 或 `tea` CLI，不使用 GitHub `gh` 或 GitLab `glab`，除非仓库已迁移。默认 triage 标签：`needs-triage`、`needs-info`、`ready-for-agent`、`ready-for-human`、`wontfix`。
 - 需要仓库级 Codex skills/plugins 时，再读取 [`.codex/README.md`](.codex/README.md)。
 - 涉及 AI 游戏创作独立 App、多智能体 Runtime、本地项目产物或本地 HTTP 预览时，先读取 [`docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md`](docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md)。
 - 新增、补齐、迁移或重构玩法入口、玩法类型、创作工作台、生成页、结果页、发布、运行态、作品架、广场或公开 read model 前，必须读取并按 [`genarrative-play-type-integration`](.codex/skills/genarrative-play-type-integration/SKILL.md) 执行。
@@ -47,10 +50,10 @@
 ## 后端红线

 - 后端最新技术约束以 [`docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md`](docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md) 为准。
- 后端路线固定为 `server-rs + Axum + SpacetimeDB`。
+- 后端路线固定为 `server-rs + Axum + SpacetimeDB`；旧 `server-node`、Express、PostgreSQL、Go 服务端、`maincloud` / `Maincloud` / `MAINCLOUD` 只作为历史残留，不作为兼容目标。
 - DDD 分层边界按总纲执行：领域规则沉到 `module-*`，SpacetimeDB 表和事务编排留在 `spacetime-module`，后端访问 SpacetimeDB 统一经 `spacetime-client` facade，HTTP/SSE/BFF 留在 `api-server`，外部副作用留在 `platform-*`，前后端 DTO 留在 `shared-contracts`。
- 前端负责表现、交互和临时 UI 状态；正式业务状态与规则以后端投影和后端 API 为准。
- 契约、路由、DTO 去留和 breaking change 以当前后端架构文档、`server-rs/crates/api-server/src/app.rs`、`shared-contracts` 和 `packages/shared` 为准。
+- 前端只做表现、交互和临时 UI 状态，不承接正式业务真相，不绕过后端投影或后端 API 直接实现业务规则。
+- 契约、路由、DTO 去留和 breaking change 以当前后端架构文档、`server-rs/crates/api-server/src/app.rs`、`shared-contracts` 和 `packages/shared` 为准；不得在前端、`api-server` 或临时兼容层中重新发明旧接口。
 - 凡修改 `/api/external/v1` 的路由、HTTP 方法、请求 / 响应 DTO、请求头、状态码、鉴权或异步语义，必须在同一次变更中同步更新权威契约 [`docs/openapi/genarrative-external-v1.openapi.json`](docs/openapi/genarrative-external-v1.openapi.json) 及对应契约测试；Rust 实现与 OpenAPI 未保持一致时任务不得视为完成。
 - SpacetimeDB 已有表新增字段时，字段必须放在 Rust 表结构体最后，并设置明确默认值；需要删除、改名、重排或改类型时，必须先询问用户并确认迁移计划。
 - 修改 SpacetimeDB schema 后必须同步 `migration.rs`、表目录和生成绑定，并运行 `npm run check:spacetime-schema`。
@@ -32,8 +32,6 @@ import type {
  AdminLoginResponse,
  AdminMeResponse,
  AdminOverviewResponse,
-  AdminProjectSnapshotListQuery,
-  AdminProjectSnapshotListResponse,
  AdminRechargeOrderListQuery,
  AdminRechargeOrderListResponse,
  AdminRechargeRefundActionResponse,
@@ -200,92 +198,6 @@ export function listAdminAccounts(token: string) {
  return request<AdminAccountListResponse>('/admin/api/accounts', { token });
 }

-export function listAdminProjectSnapshots(
-  token: string,
-  query: AdminProjectSnapshotListQuery = {},
-  signal?: AbortSignal,
-) {
-  const params = new URLSearchParams();
-  if (query.cursor) params.set('cursor', query.cursor);
-  params.set('limit', String(query.limit ?? 20));
-  return request<AdminProjectSnapshotListResponse>(
-    `/admin/api/project-snapshots?${params.toString()}`,
-    { token, signal },
-  );
-}
-
-export async function downloadAdminProjectSnapshot(
-  token: string,
-  userId: string,
-  projectId: string,
-  signal?: AbortSignal,
-) {
-  const path = `/admin/api/project-snapshots/${encodeURIComponent(userId)}/${encodeURIComponent(projectId)}/download`;
-  const response = await fetch(buildRequestUrl(path), {
-    headers: {
-      Authorization: `Bearer ${token.trim()}`,
-      Accept: 'application/zip',
-      [API_RESPONSE_ENVELOPE_HEADER]: 'v1',
-    },
-    signal,
-  });
-  if (!response.ok) {
-    const responseText = await response.text();
-    throw buildAdminApiError(
-      response,
-      parseJsonResponse(responseText),
-      responseText,
-    );
-  }
-  const contentType = response.headers
-    .get('content-type')
-    ?.split(';')[0]
-    ?.trim()
-    .toLowerCase();
-  if (contentType !== 'application/zip') {
-    await response.body?.cancel();
-    throw new AdminApiError({
-      message: '下载失败：服务端未返回 ZIP 工程文件',
-      status: response.status,
-      code: 'INVALID_PROJECT_ARCHIVE_RESPONSE',
-    });
-  }
-  return {
-    blob: await response.blob(),
-    filename: projectArchiveFilename(
-      response.headers.get('content-disposition'),
-    ),
-  };
-}
-
-function projectArchiveFilename(contentDisposition: string | null): string {
-  const extended = contentDisposition?.match(
-    /(?:^|;)\s*filename\*=UTF-8'[^']*'([^;]+)/i,
-  );
-  const ordinary = contentDisposition?.match(
-    /(?:^|;)\s*filename=(?:"((?:[^"\\]|\\.)*)"|([^;]+))/i,
-  );
-  let filename =
-    ordinary?.[1]?.replace(/\\(.)/g, '$1') ?? ordinary?.[2]?.trim() ?? '';
-  if (extended?.[1]) {
-    try {
-      filename = decodeURIComponent(extended[1].trim());
-    } catch {
-      // 非法扩展编码继续使用普通文件名。
-    }
-  }
-  const safeName = Array.from(filename, (character) => {
-    const code = character.charCodeAt(0);
-    return code < 32 || code === 127 ? '_' : character;
-  })
-    .join('')
-    .replace(/[<>:"/\\|?*]/g, '_')
-    .trim()
-    .replace(/[. ]+$/, '');
-  if (!safeName || safeName.length > 240) return 'project.zip';
-  return /\.zip$/i.test(safeName) ? safeName : `${safeName}.zip`;
-}
-
 export function createAdminAccount(
  token: string,
  payload: AdminCreateAccountRequest,
@@ -96,27 +96,6 @@ export interface AdminMeResponse {
  admin: AdminSessionPayload;
 }

-export interface AdminProjectSnapshotEntry {
-  userId: string;
-  projectId: string;
-  projectName: string | null;
-  syncRevision: number;
-  syncedAtMs: number;
-  fileCount: number;
-  totalBytes: number;
-  status: 'ready' | 'partial' | 'unverified';
-}
-
-export interface AdminProjectSnapshotListQuery {
-  cursor?: string | null;
-  limit?: number;
-}
-
-export interface AdminProjectSnapshotListResponse {
-  items: AdminProjectSnapshotEntry[];
-  nextCursor: string | null;
-}
-
 export interface AdminErrorReportEntry {
  batchId: string;
  eventCount: number;
@@ -1,128 +0,0 @@
-import { afterEach, expect, test, vi } from 'vitest';
-
-import {
-  downloadAdminProjectSnapshot,
-  listAdminProjectSnapshots,
-} from './adminApiClient';
-
-afterEach(() => {
-  vi.unstubAllGlobals();
-});
-
-test('项目列表携带分页与后台授权，解析标准响应', async () => {
-  const payload = { items: [], nextCursor: 'next' };
-  const fetchMock = vi
-    .fn()
-    .mockResolvedValue(
-      new Response(JSON.stringify({ ok: true, data: payload })),
-    );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  expect(
-    await listAdminProjectSnapshots(
-      'admin-token',
-      { cursor: 'user/a+项目', limit: 20 },
-      controller.signal,
-    ),
-  ).toEqual(payload);
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/project-snapshots?cursor=user%2Fa%2B%E9%A1%B9%E7%9B%AE&limit=20',
-    expect.objectContaining({
-      headers: expect.objectContaining({ Authorization: 'Bearer admin-token' }),
-      signal: controller.signal,
-    }),
-  );
-});
-
-test('ZIP 下载以授权请求读取并优先保留中文附件名', async () => {
-  const fetchMock = vi.fn().mockResolvedValue(
-    new Response('PK\u0003\u0004', {
-      headers: {
-        'content-type': 'application/zip',
-        'content-disposition':
-          "attachment; filename=project.zip; filename*=UTF-8''%E4%B8%89%E6%B6%88-r2.zip",
-      },
-    }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  const archive = await downloadAdminProjectSnapshot(
-    'admin-token',
-    'user/a',
-    'project/b',
-    controller.signal,
-  );
-  expect(archive.filename).toBe('三消-r2.zip');
-  expect(archive.blob.type).toBe('application/zip');
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/project-snapshots/user%2Fa/project%2Fb/download',
-    expect.objectContaining({
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        Accept: 'application/zip',
-      }),
-      signal: controller.signal,
-    }),
-  );
-});
-
-test.each([
-  ['attachment; filename="工程.zip"; filename*=UTF-8\'\'%broken', '工程.zip'],
-  ['attachment; filename="../secret.zip"', '.._secret.zip'],
-  ["attachment; filename*=UTF-8''unsafe%00%1F%7F.zip", 'unsafe___.zip'],
-  [null, 'project.zip'],
-])('ZIP 附件名兼容安全回退 %s', async (header, expected) => {
-  const headers: Record<string, string> = { 'content-type': 'application/zip' };
-  // Response 的 Headers 只接受 Latin-1；真实 UTF-8 文件名使用 filename*。
-  if (header)
-    headers['content-disposition'] = header.replace('工程', 'project');
-  vi.stubGlobal(
-    'fetch',
-    vi.fn().mockResolvedValue(new Response('PK', { headers })),
-  );
-  expect(
-    (await downloadAdminProjectSnapshot('token', 'user', 'project')).filename,
-  ).toBe(expected.replace('工程', 'project'));
-});
-
-test.each([401, 403, 409, 500])(
-  '下载 HTTP %s 保留后台错误，不返回 ZIP',
-  async (status) => {
-    vi.stubGlobal(
-      'fetch',
-      vi.fn().mockResolvedValue(
-        new Response(
-          JSON.stringify({
-            ok: false,
-            error: { code: 'SNAPSHOT_FAILURE', message: '工程尚未同步完成' },
-          }),
-          {
-            status,
-            headers: { 'content-type': 'application/json' },
-          },
-        ),
-      ),
-    );
-    await expect(
-      downloadAdminProjectSnapshot('token', 'user', 'project'),
-    ).rejects.toMatchObject({
-      status,
-      code: 'SNAPSHOT_FAILURE',
-      message: '工程尚未同步完成',
-    });
-  },
-);
-
-test('200 JSON 或 HTML 不能被保存为成功 ZIP', async () => {
-  vi.stubGlobal(
-    'fetch',
-    vi.fn().mockResolvedValue(
-      new Response('{"ok":false}', {
-        headers: { 'content-type': 'application/json' },
-      }),
-    ),
-  );
-  await expect(
-    downloadAdminProjectSnapshot('token', 'user', 'project'),
-  ).rejects.toMatchObject({ code: 'INVALID_PROJECT_ARCHIVE_RESPONSE' });
-});
@@ -31,7 +31,6 @@ import { AdminInviteCodePage } from '../pages/AdminInviteCodePage';
 import { AdminLoginPage } from '../pages/AdminLoginPage';
 import { AdminOverviewPage } from '../pages/AdminOverviewPage';
 import { AdminProfileWalletConfigPage } from '../pages/AdminProfileWalletConfigPage';
-import { AdminProjectSnapshotsPage } from '../pages/AdminProjectSnapshotsPage';
 import { AdminRechargeOrderPage } from '../pages/AdminRechargeOrderPage';
 import { AdminRechargeProductPage } from '../pages/AdminRechargeProductPage';
 import { AdminRedeemCodePage } from '../pages/AdminRedeemCodePage';
@@ -309,12 +308,6 @@ export function AdminApp() {
      {activeRouteId === 'accounts' ? (
        <AdminAccountsPage token={token} onUnauthorized={handleUnauthorized} />
      ) : null}
-      {activeRouteId === 'project-snapshots' ? (
-        <AdminProjectSnapshotsPage
-          token={token}
-          onUnauthorized={handleUnauthorized}
-        />
-      ) : null}
    </AdminShell>
  );
 }
@@ -4,7 +4,6 @@ import {
  Bug,
  Coins,
  Database,
-  FolderArchive,
  GitBranch,
  Images,
  LayoutDashboard,
@@ -50,7 +49,6 @@ const routeIcons = {
  'editor-generation-pricing': Coins,
  'editor-showcase': Star,
  'editor-assets': Images,
-  'project-snapshots': FolderArchive,
  accounts: Users,
  'agc-models': ListChecks,
 } satisfies Record<AdminRouteId, typeof LayoutDashboard>;
@@ -122,28 +122,3 @@ test('零权限 member 不回落到 Dashboard', () => {
  expect(routes).toEqual([]);
  expect(resolveAccessibleAdminRoute('#dashboard', routes)).toBeNull();
 });
-
-test('项目工程入口对 owner 与已授权 member 开放且可分配权限', () => {
-  const route = {
-    id: 'project-snapshots',
-    label: '项目工程',
-    hash: '#project-snapshots',
-  };
-  expect(adminRoutes.filter((item) => !item.ownerOnly)).toContainEqual(route);
-  expect(resolveAdminRoute('#project-snapshots')).toBe('project-snapshots');
-  expect(
-    getAccessibleAdminRoutes({ accountRole: 'owner', tabPermissions: [] }),
-  ).toContainEqual(route);
-  expect(
-    getAccessibleAdminRoutes({
-      accountRole: 'member',
-      tabPermissions: ['project-snapshots'],
-    }),
-  ).toEqual([route]);
-  expect(
-    getAccessibleAdminRoutes({
-      accountRole: 'member',
-      tabPermissions: ['tracking'],
-    }),
-  ).not.toContainEqual(route);
-});
@@ -16,7 +16,6 @@ export type AdminRouteId =
  | 'editor-generation-pricing'
  | 'editor-showcase'
  | 'editor-assets'
-  | 'project-snapshots'
  | 'agc-models'
  | 'accounts';

@@ -55,7 +54,6 @@ export const adminRoutes: AdminRouteDefinition[] = [
  { id: 'agc-models', label: 'AGC 模型', hash: '#agc-models', ownerOnly: true },
  { id: 'editor-showcase', label: '精选审核', hash: '#editor-showcase' },
  { id: 'editor-assets', label: '素材查询', hash: '#editor-assets' },
-  { id: 'project-snapshots', label: '项目工程', hash: '#project-snapshots' },
  { id: 'accounts', label: '账号管理', hash: '#accounts', ownerOnly: true },
 ];

@@ -154,27 +154,6 @@ test('灰度发布页可通过功能入口生成画布 Agent Gate Key', async ()
  );
 });

-test('灰度发布页可选择模板库并默认启用零比例灰度', async () => {
-  const user = userEvent.setup();
-  render(
-    <AdminGrayReleaseConfigPage token="admin-token" onUnauthorized={vi.fn()} />,
-  );
-  await screen.findByRole('button', { name: 'editor.new-toolbar' });
-  await user.selectOptions(screen.getByLabelText('Gate Key 前缀'), ['agc']);
-  expect((screen.getByLabelText('Gate Key') as HTMLInputElement).value).toBe(
-    'agc:template-library',
-  );
-  expect(
-    (screen.getByLabelText('Gate Key 目标') as HTMLSelectElement).value,
-  ).toBe('template-library');
-  expect((screen.getByLabelText('启用') as HTMLInputElement).checked).toBe(
-    true,
-  );
-  expect((screen.getByLabelText('灰度比例') as HTMLInputElement).value).toBe(
-    '0',
-  );
-});
-
 test('灰度发布页保存时转换数组和百分比', async () => {
  const user = userEvent.setup();
  vi.mocked(upsertAdminFeatureGateConfig).mockResolvedValueOnce({
@@ -27,17 +27,9 @@ interface GateTargetOption {

 const GATE_PREFIX_LABELS: Record<string, string> = {
  'image-editor': '画布',
-  agc: '客户端',
 };

 const FIXED_GATE_TARGETS: GateTargetOption[] = [
-  {
-    prefix: 'agc',
-    suffix: 'template-library',
-    key: 'agc:template-library',
-    label: '模板库',
-    description: '客户端模板库灰度',
-  },
  {
    prefix: 'image-editor',
    suffix: 'agent-sidebar',
@@ -188,7 +180,7 @@ export function AdminGrayReleaseConfigPage({
    setSelectedGateKey('');
    setGatePrefix(option.prefix);
    setGateKey(option.key);
-    setEnabled(option.key === 'agc:template-library');
+    setEnabled(false);
    setRolloutPercent('0');
    setAllowUserIds('');
    setAllowUserTags('');
@@ -1,288 +0,0 @@
-// @vitest-environment jsdom
-import {
-  act,
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-  within,
-} from '@testing-library/react';
-import { afterEach, beforeEach, expect, test, vi } from 'vitest';
-
-import {
-  AdminApiError,
-  downloadAdminProjectSnapshot,
-  listAdminProjectSnapshots,
-} from '../api/adminApiClient';
-import type { AdminProjectSnapshotEntry } from '../api/adminApiTypes';
-import { AdminProjectSnapshotsPage } from './AdminProjectSnapshotsPage';
-
-vi.mock('../api/adminApiClient', async () => ({
-  ...(await vi.importActual<typeof import('../api/adminApiClient')>(
-    '../api/adminApiClient',
-  )),
-  downloadAdminProjectSnapshot: vi.fn(),
-  listAdminProjectSnapshots: vi.fn(),
-}));
-
-const entry: AdminProjectSnapshotEntry = {
-  userId: 'user-1',
-  projectId: 'project-1',
-  projectName: '三消工程',
-  syncRevision: 3,
-  syncedAtMs: 1_700_000_000_000,
-  fileCount: 12,
-  totalBytes: 2048,
-  status: 'ready',
-};
-
-beforeEach(() => {
-  vi.mocked(listAdminProjectSnapshots)
-    .mockReset()
-    .mockResolvedValue({ items: [entry], nextCursor: null });
-  vi.mocked(downloadAdminProjectSnapshot).mockReset();
-});
-afterEach(() => {
-  cleanup();
-  vi.restoreAllMocks();
-  vi.unstubAllGlobals();
-  vi.useRealTimers();
-});
-
-test('按项目展示完整性并限制未完成工程下载', async () => {
-  vi.mocked(listAdminProjectSnapshots).mockResolvedValue({
-    items: [
-      entry,
-      {
-        ...entry,
-        projectId: 'partial-project',
-        projectName: '未完成工程',
-        status: 'partial',
-      },
-      {
-        ...entry,
-        projectId: 'legacy-project',
-        projectName: null,
-        status: 'unverified',
-      },
-    ],
-    nextCursor: null,
-  });
-  render(<AdminProjectSnapshotsPage token="token" onUnauthorized={vi.fn()} />);
-  const completeRow = (await screen.findByText('三消工程')).closest('tr')!;
-  expect(within(completeRow).getByText('2 KiB')).toBeTruthy();
-  expect(
-    within(completeRow)
-      .getByRole('button', { name: '下载完整工程' })
-      .hasAttribute('disabled'),
-  ).toBe(false);
-  expect(
-    screen.getByRole('button', { name: '同步未完成' }).hasAttribute('disabled'),
-  ).toBe(true);
-  expect(screen.getByText('完整性未知')).toBeTruthy();
-  expect(
-    screen
-      .getByRole('button', { name: '下载已存文件' })
-      .hasAttribute('disabled'),
-  ).toBe(false);
-});
-
-test('加载更多合并项目，刷新失败保留列表和错误，重试从首页开始', async () => {
-  vi.mocked(listAdminProjectSnapshots)
-    .mockResolvedValueOnce({ items: [entry], nextCursor: 'page-2' })
-    .mockResolvedValueOnce({
-      items: [{ ...entry, projectId: 'project-2', projectName: '第二工程' }],
-      nextCursor: null,
-    })
-    .mockRejectedValueOnce(new Error('远端清单读取失败'))
-    .mockResolvedValueOnce({ items: [], nextCursor: null });
-  render(<AdminProjectSnapshotsPage token="token" onUnauthorized={vi.fn()} />);
-  fireEvent.click(await screen.findByRole('button', { name: '加载更多' }));
-  await screen.findByText('第二工程');
-  expect(listAdminProjectSnapshots).toHaveBeenNthCalledWith(
-    2,
-    'token',
-    { cursor: 'page-2', limit: 20 },
-    expect.any(AbortSignal),
-  );
-  expect(screen.getByText('三消工程')).toBeTruthy();
-  fireEvent.click(screen.getByRole('button', { name: '刷新' }));
-  await screen.findByRole('alert');
-  expect(screen.getByText('第二工程')).toBeTruthy();
-  expect(screen.queryByText('暂无已上传项目')).toBeNull();
-  fireEvent.click(screen.getByRole('button', { name: '刷新' }));
-  await screen.findByText('暂无已上传项目');
-  expect(listAdminProjectSnapshots).toHaveBeenLastCalledWith(
-    'token',
-    { cursor: null, limit: 20 },
-    expect.any(AbortSignal),
-  );
-});
-
-test('下载使用返回的中文文件名，随后释放对象 URL', async () => {
-  const createObjectURL = vi.fn(() => 'blob:archive');
-  const revokeObjectURL = vi.fn();
-  vi.stubGlobal(
-    'URL',
-    class extends URL {
-      static createObjectURL = createObjectURL;
-      static revokeObjectURL = revokeObjectURL;
-    },
-  );
-  let savedFilename = '';
-  let savedHref = '';
-  vi.spyOn(HTMLAnchorElement.prototype, 'click').mockImplementation(function (
-    this: HTMLAnchorElement,
-  ) {
-    savedFilename = this.download;
-    savedHref = this.href;
-  });
-  const blob = new Blob(['PK'], { type: 'application/zip' });
-  vi.mocked(downloadAdminProjectSnapshot).mockResolvedValue({
-    blob,
-    filename: '三消工程-r3.zip',
-  });
-  render(<AdminProjectSnapshotsPage token="token" onUnauthorized={vi.fn()} />);
-  const button = await screen.findByRole('button', { name: '下载完整工程' });
-  vi.useFakeTimers();
-  await act(async () => {
-    fireEvent.click(button);
-  });
-  expect(savedFilename).toBe('三消工程-r3.zip');
-  expect(savedHref).toBe('blob:archive');
-  expect(createObjectURL).toHaveBeenCalledWith(blob);
-  expect(downloadAdminProjectSnapshot).toHaveBeenCalledWith(
-    'token',
-    'user-1',
-    'project-1',
-    expect.any(AbortSignal),
-  );
-  act(() => vi.advanceTimersByTime(1000));
-  expect(revokeObjectURL).toHaveBeenCalledWith('blob:archive');
-});
-
-test('取消下载中止请求且不显示错误，卸载中止列表请求', async () => {
-  vi.mocked(downloadAdminProjectSnapshot).mockImplementation(
-    (_token, _user, _project, signal) =>
-      new Promise((_resolve, reject) => {
-        signal?.addEventListener('abort', () =>
-          reject(new DOMException('Aborted', 'AbortError')),
-        );
-      }),
-  );
-  const view = render(
-    <AdminProjectSnapshotsPage token="token" onUnauthorized={vi.fn()} />,
-  );
-  fireEvent.click(await screen.findByRole('button', { name: '下载完整工程' }));
-  fireEvent.click(await screen.findByRole('button', { name: '取消下载' }));
-  expect(
-    vi.mocked(downloadAdminProjectSnapshot).mock.calls[0]?.[3]?.aborted,
-  ).toBe(true);
-  await waitFor(() => expect(screen.queryByRole('alert')).toBeNull());
-  vi.mocked(listAdminProjectSnapshots).mockReturnValue(new Promise(() => {}));
-  fireEvent.click(screen.getByRole('button', { name: '刷新' }));
-  const signal = vi.mocked(listAdminProjectSnapshots).mock.calls.at(-1)?.[2];
-  view.unmount();
-  expect(signal?.aborted).toBe(true);
-});
-
-test('下载登录失效走现有会话处理，403 错误保留页面', async () => {
-  const onUnauthorized = vi.fn();
-  vi.mocked(downloadAdminProjectSnapshot)
-    .mockRejectedValueOnce(
-      new AdminApiError({ status: 403, message: '无项目工程权限' }),
-    )
-    .mockRejectedValueOnce(
-      new AdminApiError({ status: 401, message: '已过期' }),
-    );
-  render(
-    <AdminProjectSnapshotsPage token="token" onUnauthorized={onUnauthorized} />,
-  );
-  fireEvent.click(await screen.findByRole('button', { name: '下载完整工程' }));
-  expect(await screen.findByText('无项目工程权限')).toBeTruthy();
-  expect(onUnauthorized).not.toHaveBeenCalled();
-  fireEvent.click(screen.getByRole('button', { name: '下载完整工程' }));
-  await waitFor(() =>
-    expect(onUnauthorized).toHaveBeenCalledWith('登录状态已失效'),
-  );
-});
-
-test('首次列表失败显示错误而非空项目，401 失效回到会话处理', async () => {
-  const onUnauthorized = vi.fn();
-  vi.mocked(listAdminProjectSnapshots)
-    .mockRejectedValueOnce(new Error('清单存储不可用'))
-    .mockRejectedValueOnce(
-      new AdminApiError({ status: 401, message: '已过期' }),
-    );
-  render(
-    <AdminProjectSnapshotsPage token="token" onUnauthorized={onUnauthorized} />,
-  );
-  await screen.findByText('清单存储不可用');
-  expect(screen.queryByText('暂无已上传项目')).toBeNull();
-  fireEvent.click(screen.getByRole('button', { name: '刷新' }));
-  await waitFor(() =>
-    expect(onUnauthorized).toHaveBeenCalledWith('登录状态已失效'),
-  );
-});
-
-test('更换登录令牌丢弃旧列表和晚返回请求', async () => {
-  let finishOldRequest!: (value: {
-    items: AdminProjectSnapshotEntry[];
-    nextCursor: null;
-  }) => void;
-  vi.mocked(listAdminProjectSnapshots)
-    .mockReturnValueOnce(
-      new Promise((resolve) => {
-        finishOldRequest = resolve;
-      }),
-    )
-    .mockResolvedValueOnce({
-      items: [{ ...entry, projectName: '新账号工程' }],
-      nextCursor: null,
-    });
-  const onUnauthorized = vi.fn();
-  const view = render(
-    <AdminProjectSnapshotsPage
-      token="old-token"
-      onUnauthorized={onUnauthorized}
-    />,
-  );
-  const oldSignal = vi.mocked(listAdminProjectSnapshots).mock.calls[0]?.[2];
-  view.rerender(
-    <AdminProjectSnapshotsPage
-      token="new-token"
-      onUnauthorized={onUnauthorized}
-    />,
-  );
-  await screen.findByText('新账号工程');
-  expect(oldSignal?.aborted).toBe(true);
-  await act(async () => {
-    finishOldRequest({ items: [entry], nextCursor: null });
-  });
-  expect(screen.queryByText('三消工程')).toBeNull();
-  expect(screen.getByText('新账号工程')).toBeTruthy();
-});
-
-test('卸载后完成的下载不会创建浏览器文件', async () => {
-  let finishDownload!: (value: { blob: Blob; filename: string }) => void;
-  vi.mocked(downloadAdminProjectSnapshot).mockReturnValue(
-    new Promise((resolve) => {
-      finishDownload = resolve;
-    }),
-  );
-  const click = vi
-    .spyOn(HTMLAnchorElement.prototype, 'click')
-    .mockImplementation(() => {});
-  const view = render(
-    <AdminProjectSnapshotsPage token="token" onUnauthorized={vi.fn()} />,
-  );
-  fireEvent.click(await screen.findByRole('button', { name: '下载完整工程' }));
-  const signal = vi.mocked(downloadAdminProjectSnapshot).mock.calls[0]?.[3];
-  view.unmount();
-  expect(signal?.aborted).toBe(true);
-  await act(async () => {
-    finishDownload({ blob: new Blob(['PK']), filename: 'old.zip' });
-  });
-  expect(click).not.toHaveBeenCalled();
-});
@@ -1,270 +0,0 @@
-import { Download, RefreshCcw, X } from 'lucide-react';
-import { useCallback, useEffect, useRef, useState } from 'react';
-
-import {
-  downloadAdminProjectSnapshot,
-  listAdminProjectSnapshots,
-} from '../api/adminApiClient';
-import type { AdminProjectSnapshotEntry } from '../api/adminApiTypes';
-import { handlePageError } from './pageUtils';
-
-interface AdminProjectSnapshotsPageProps {
-  token: string;
-  onUnauthorized: (message?: string) => void;
-}
-
-const snapshotStatuses = {
-  ready: {
-    label: '已同步',
-    className: 'admin-status-ok',
-    action: '下载完整工程',
-  },
-  partial: {
-    label: '同步未完成',
-    className: 'admin-status-pending',
-    action: '同步未完成',
-  },
-  unverified: {
-    label: '完整性未知',
-    className: 'admin-status-pending',
-    action: '下载已存文件',
-  },
-};
-
-export function AdminProjectSnapshotsPage({
-  token,
-  onUnauthorized,
-}: AdminProjectSnapshotsPageProps) {
-  const [items, setItems] = useState<AdminProjectSnapshotEntry[]>([]);
-  const [nextCursor, setNextCursor] = useState<string | null>(null);
-  const [isLoading, setIsLoading] = useState(false);
-  const [hasLoaded, setHasLoaded] = useState(false);
-  const [errorMessage, setErrorMessage] = useState('');
-  const [downloadingKey, setDownloadingKey] = useState<string | null>(null);
-  const listController = useRef<AbortController | null>(null);
-  const downloadController = useRef<AbortController | null>(null);
-
-  const loadPage = useCallback(
-    async (cursor: string | null = null) => {
-      listController.current?.abort();
-      const controller = new AbortController();
-      listController.current = controller;
-      setIsLoading(true);
-      setErrorMessage('');
-      try {
-        const response = await listAdminProjectSnapshots(
-          token,
-          { cursor, limit: 20 },
-          controller.signal,
-        );
-        if (controller.signal.aborted) return;
-        setItems((current) => {
-          if (!cursor) return response.items;
-          const entries = new Map(
-            current.map((entry) => [snapshotKey(entry), entry]),
-          );
-          response.items.forEach((entry) =>
-            entries.set(snapshotKey(entry), entry),
-          );
-          return [...entries.values()];
-        });
-        setNextCursor(response.nextCursor);
-        setHasLoaded(true);
-      } catch (error: unknown) {
-        if (!controller.signal.aborted)
-          handlePageError(error, onUnauthorized, setErrorMessage);
-      } finally {
-        if (listController.current === controller) {
-          listController.current = null;
-          setIsLoading(false);
-        }
-      }
-    },
-    [token, onUnauthorized],
-  );
-
-  useEffect(() => {
-    setItems([]);
-    setNextCursor(null);
-    setHasLoaded(false);
-    setDownloadingKey(null);
-    void loadPage();
-    return () => {
-      listController.current?.abort();
-      listController.current = null;
-      downloadController.current?.abort();
-      downloadController.current = null;
-    };
-  }, [loadPage]);
-
-  async function downloadProject(entry: AdminProjectSnapshotEntry) {
-    if (downloadController.current || entry.status === 'partial') return;
-    const controller = new AbortController();
-    downloadController.current = controller;
-    setDownloadingKey(snapshotKey(entry));
-    setErrorMessage('');
-    try {
-      const archive = await downloadAdminProjectSnapshot(
-        token,
-        entry.userId,
-        entry.projectId,
-        controller.signal,
-      );
-      if (controller.signal.aborted) return;
-      const objectUrl = URL.createObjectURL(archive.blob);
-      const link = document.createElement('a');
-      link.href = objectUrl;
-      link.download = archive.filename;
-      document.body.append(link);
-      try {
-        link.click();
-      } finally {
-        link.remove();
-        // 给浏览器时间接管下载，随后释放临时 URL。
-        setTimeout(() => URL.revokeObjectURL(objectUrl), 1000);
-      }
-    } catch (error: unknown) {
-      if (!controller.signal.aborted)
-        handlePageError(error, onUnauthorized, setErrorMessage);
-    } finally {
-      if (downloadController.current === controller) {
-        downloadController.current = null;
-        setDownloadingKey(null);
-      }
-    }
-  }
-
-  function cancelDownload() {
-    downloadController.current?.abort();
-    downloadController.current = null;
-    setDownloadingKey(null);
-  }
-
-  return (
-    <section className="admin-page admin-page-wide">
-      <div className="admin-page-heading">
-        <h2>项目工程</h2>
-        <button
-          className="admin-secondary-button"
-          disabled={isLoading}
-          type="button"
-          onClick={() => void loadPage()}
-        >
-          <RefreshCcw size={17} aria-hidden="true" />
-          <span>{isLoading ? '加载中' : '刷新'}</span>
-        </button>
-      </div>
-      {errorMessage ? (
-        <div className="admin-alert" role="alert">
-          {errorMessage}
-        </div>
-      ) : null}
-      <section
-        className="admin-panel admin-stack"
-        aria-label="项目工程列表"
-        aria-busy={isLoading}
-      >
-        <div className="admin-table-wrap">
-          <table className="admin-table admin-project-snapshot-table">
-            <thead>
-              <tr>
-                <th>项目</th>
-                <th>用户 ID</th>
-                <th>同步时间</th>
-                <th>文件数</th>
-                <th>体积</th>
-                <th>完整性</th>
-                <th>操作</th>
-              </tr>
-            </thead>
-            <tbody>
-              {items.map((entry) => {
-                const status = snapshotStatuses[entry.status];
-                const isDownloading = downloadingKey === snapshotKey(entry);
-                return (
-                  <tr key={snapshotKey(entry)}>
-                    <td data-label="项目">
-                      <strong>{entry.projectName || entry.projectId}</strong>
-                      <small>{entry.projectId}</small>
-                    </td>
-                    <td data-label="用户 ID">{entry.userId}</td>
-                    <td data-label="同步时间">
-                      <span>
-                        {new Date(entry.syncedAtMs).toLocaleString('zh-CN', {
-                          hour12: false,
-                        })}
-                        <small>版本 {entry.syncRevision}</small>
-                      </span>
-                    </td>
-                    <td data-label="文件数">
-                      {entry.fileCount.toLocaleString('zh-CN')}
-                    </td>
-                    <td data-label="体积">{formatBytes(entry.totalBytes)}</td>
-                    <td data-label="完整性">
-                      <span className={`admin-status ${status.className}`}>
-                        {status.label}
-                      </span>
-                    </td>
-                    <td data-label="操作">
-                      {isDownloading ? (
-                        <button
-                          className="admin-secondary-button"
-                          type="button"
-                          onClick={cancelDownload}
-                        >
-                          <X size={16} aria-hidden="true" />
-                          <span>取消下载</span>
-                        </button>
-                      ) : (
-                        <button
-                          className="admin-secondary-button"
-                          disabled={
-                            entry.status === 'partial' ||
-                            downloadingKey !== null
-                          }
-                          type="button"
-                          onClick={() => void downloadProject(entry)}
-                        >
-                          <Download size={16} aria-hidden="true" />
-                          <span>{status.action}</span>
-                        </button>
-                      )}
-                    </td>
-                  </tr>
-                );
-              })}
-            </tbody>
-          </table>
-        </div>
-        {hasLoaded && items.length === 0 && !errorMessage ? (
-          <p className="admin-muted-text">暂无已上传项目</p>
-        ) : null}
-        {nextCursor ? (
-          <div className="admin-action-row">
-            <button
-              className="admin-secondary-button"
-              disabled={isLoading}
-              type="button"
-              onClick={() => void loadPage(nextCursor)}
-            >
-              {isLoading ? '加载中' : '加载更多'}
-            </button>
-          </div>
-        ) : null}
-      </section>
-    </section>
-  );
-}
-
-function snapshotKey(entry: AdminProjectSnapshotEntry) {
-  return `${entry.userId}/${entry.projectId}`;
-}
-
-function formatBytes(bytes: number) {
-  const units = ['B', 'KiB', 'MiB', 'GiB'];
-  const unit = Math.min(
-    Math.floor(Math.log2(Math.max(1, bytes)) / 10),
-    units.length - 1,
-  );
-  return `${(bytes / 1024 ** unit).toLocaleString('zh-CN', { maximumFractionDigits: 1 })} ${units[unit]}`;
-}
@@ -1452,112 +1452,6 @@ button:disabled {
  min-width: 1180px;
 }

-.admin-project-snapshot-table {
-  min-width: 0;
-  table-layout: fixed;
-}
-
-.admin-project-snapshot-table th,
-.admin-project-snapshot-table td {
-  overflow-wrap: anywhere;
-}
-
-.admin-project-snapshot-table th:first-child {
-  width: 20%;
-}
-
-.admin-project-snapshot-table th:nth-child(2) {
-  width: 14%;
-}
-
-.admin-project-snapshot-table th:nth-child(3) {
-  width: 18%;
-}
-
-.admin-project-snapshot-table th:nth-child(4) {
-  width: 7%;
-}
-
-.admin-project-snapshot-table th:nth-child(5) {
-  width: 9%;
-}
-
-.admin-project-snapshot-table th:nth-child(6) {
-  width: 12%;
-}
-
-.admin-project-snapshot-table th:last-child {
-  width: 20%;
-}
-
-@media (max-width: 1200px) {
-  .admin-project-snapshot-table,
-  .admin-project-snapshot-table tbody {
-    display: block;
-  }
-
-  .admin-project-snapshot-table thead {
-    display: none;
-  }
-
-  .admin-project-snapshot-table tr {
-    display: grid;
-    grid-template-columns: minmax(0, 1fr) minmax(0, 1fr);
-    gap: 10px 16px;
-    border-bottom: 1px solid #eaded2;
-    padding: 18px 0;
-  }
-
-  .admin-project-snapshot-table tr:first-child {
-    padding-top: 0;
-  }
-
-  .admin-project-snapshot-table tr:last-child {
-    border-bottom: 0;
-    padding-bottom: 0;
-  }
-
-  .admin-project-snapshot-table td {
-    display: flex;
-    min-width: 0;
-    align-items: baseline;
-    gap: 8px;
-    border: 0;
-    padding: 0;
-    font-size: 14px;
-  }
-
-  .admin-project-snapshot-table td::before {
-    flex-shrink: 0;
-    color: #8f7868;
-    font-size: 12px;
-    content: attr(data-label);
-  }
-
-  .admin-project-snapshot-table td:first-child,
-  .admin-project-snapshot-table td:nth-child(2),
-  .admin-project-snapshot-table td:nth-child(3),
-  .admin-project-snapshot-table td:nth-child(6),
-  .admin-project-snapshot-table td:last-child {
-    grid-column: 1 / -1;
-  }
-
-  .admin-project-snapshot-table td:first-child {
-    display: block;
-    font-size: 16px;
-  }
-
-  .admin-project-snapshot-table td:first-child::before,
-  .admin-project-snapshot-table td:last-child::before {
-    display: none;
-  }
-
-  .admin-project-snapshot-table td:last-child button {
-    width: 100%;
-    justify-content: center;
-  }
-}
-
 .admin-recharge-table {
  min-width: 1080px;
  table-layout: fixed;
@@ -1,330 +0,0 @@
-/**
- * AGC 总版本号（发号源）。
- *
- * 唯一事实源是 OSS 对象 `agc/global-version.json`；渠道清单只写各自本次拿到的号。
- * 仓库里的 5 个版本文件仍由构建改写，但只作构建输入参考，不作为事实源。
- *
- * 发号顺序固定为「先写总号 → 再构建 → 再发渠道清单」：任何一步失败都不回滚，
- * 只烧号。这样渠道之间不会复用同一个号，代价是可能出现空洞。
- */
-import { spawnSync } from 'node:child_process';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-
-export const AGC_GLOBAL_VERSION_OBJECT_KEY = 'agc/global-version.json';
-const defaultOssBaseUrl =
-  'https://agc-dev.oss-rg-china-mainland.aliyuncs.com/agc';
-const versionPattern = /^\d+\.\d+\.\d+$/u;
-
-function trimTrailingSlashes(value) {
-  return value.replace(/\/+$/u, '');
-}
-
-export function ossBaseUrl(env = process.env) {
-  return trimTrailingSlashes(
-    env.AGC_UPDATE_OSS_BASE_URL?.trim() || defaultOssBaseUrl,
-  );
-}
-
-export function globalVersionUrl(env = process.env) {
-  return `${ossBaseUrl(env)}/global-version.json`;
-}
-
-export function parseVersion(value, label) {
-  if (typeof value !== 'string' || !versionPattern.test(value.trim())) {
-    throw new Error(`${label} 不是有效的三段版本号：${String(value)}`);
-  }
-  return value.trim();
-}
-
-export function compareVersions(left, right) {
-  const leftParts = parseVersion(left, '左版本').split('.').map(Number);
-  const rightParts = parseVersion(right, '右版本').split('.').map(Number);
-  for (let index = 0; index < 3; index += 1) {
-    if (leftParts[index] !== rightParts[index]) {
-      return leftParts[index] > rightParts[index] ? 1 : -1;
-    }
-  }
-  return 0;
-}
-
-/** 取较大版本；任一为空时返回另一个。 */
-export function maxVersion(...versions) {
-  return versions
-    .filter((value) => typeof value === 'string' && value.trim())
-    .map((value) => parseVersion(value, '候选版本'))
-    .reduce(
-      (best, current) =>
-        best == null || compareVersions(current, best) > 0 ? current : best,
-      null,
-    );
-}
-
-export function nextVersion(current) {
-  const [major, minor, patch] = parseVersion(current, '总版本')
-    .split('.')
-    .map(Number);
-  if (patch === Number.MAX_SAFE_INTEGER) {
-    throw new Error(`版本号 patch 已达到上限：${current}`);
-  }
-  return `${major}.${minor}.${patch + 1}`;
-}
-
-export function readReleaseDryRun(env = process.env) {
-  const value = env.AGC_RELEASE_DRY_RUN?.trim().toLowerCase();
-  return value === '1' || value === 'true';
-}
-
-async function fetchJson(url, label, { fetchImpl = fetch } = {}) {
-  let response;
-  try {
-    response = await fetchImpl(url, {
-      headers: { Accept: 'application/json' },
-    });
-  } catch (error) {
-    throw new Error(`读取 ${label} 失败：${error.message}`);
-  }
-  if (response.status === 404) return null;
-  if (!response.ok) {
-    throw new Error(`读取 ${label} 失败：HTTP ${response.status}`);
-  }
-  try {
-    return await response.json();
-  } catch (error) {
-    throw new Error(`${label} 不是有效 JSON：${error.message}`);
-  }
-}
-
-/** 渠道清单版本；缺失或 404 时返回 null（首次启用渠道）。 */
-export async function readChannelVersion(channel, options = {}) {
-  const payload = await fetchJson(
-    `${ossBaseUrl(options.env)}/${channel}/latest.json`,
-    `${channel} 渠道清单`,
-    options,
-  );
-  if (payload == null) return null;
-  const version = typeof payload.version === 'string' ? payload.version : '';
-  if (!version) {
-    throw new Error(`${channel} 渠道清单缺少 version 字段`);
-  }
-  return parseVersion(version, `${channel} 渠道清单 version`);
-}
-
-/** 旧协议迁移指针 `agc/latest.json`；只在迁移窗口内存在，仅参与播种。 */
-export async function readLegacyPointerVersion(options = {}) {
-  const payload = await fetchJson(
-    `${ossBaseUrl(options.env)}/latest.json`,
-    'OSS 迁移指针',
-    options,
-  );
-  if (payload == null) return null;
-  const version = typeof payload.version === 'string' ? payload.version : '';
-  return version ? parseVersion(version, 'OSS 迁移指针 version') : null;
-}
-
-export async function readGlobalVersion(options = {}) {
-  const payload = await fetchJson(
-    globalVersionUrl(options.env),
-    'AGC 总版本号',
-    options,
-  );
-  if (payload == null) return null;
-  const version = typeof payload.version === 'string' ? payload.version : '';
-  if (!version) {
-    throw new Error('AGC 总版本号对象缺少 version 字段');
-  }
-  return {
-    ...payload,
-    version: parseVersion(version, 'AGC 总版本号 version'),
-  };
-}
-
-/**
- * 一次性播种基线：仓库当前版本、渠道清单与旧迁移指针里的最大值。
- * 基线本身不发给客户端，首个发放号是 baseline + 1。
- */
-export async function resolveSeedBaseline({
-  channels = ['dev-win', 'dev-mac'],
-  repoVersion = null,
-  env = process.env,
-  fetchImpl = fetch,
-} = {}) {
-  const candidates = [];
-  if (repoVersion) candidates.push(parseVersion(repoVersion, '仓库当前版本'));
-  for (const channel of channels) {
-    const version = await readChannelVersion(channel, { env, fetchImpl });
-    if (version) candidates.push(version);
-  }
-  const legacy = await readLegacyPointerVersion({ env, fetchImpl });
-  if (legacy) candidates.push(legacy);
-  const baseline = maxVersion(...candidates);
-  if (!baseline) {
-    throw new Error('无法确定总版本号播种基线：仓库版本与渠道清单都不可用');
-  }
-  return baseline;
-}
-
-/**
- * 组装 ossutil 参数。
- *
- * 该桶与凭据按 v1 签名使用（ossutil v2 默认 v4，缺 region 会直接失败），
- * 因此默认显式传 `--sign-version v1`；需要 v4 时用 `AGC_OSS_SIGN_VERSION=v4`
- * 并同时给 `AGC_OSS_REGION`。
- */
-export function buildOssutilArgs({
-  args,
-  endpoint,
-  accessKeyId,
-  accessKeySecret,
-  env = process.env,
-}) {
-  const finalArgs = [...args, '--endpoint', endpoint];
-  const region = env.AGC_OSS_REGION?.trim();
-  if (region) finalArgs.push('--region', region);
-  finalArgs.push('--sign-version', env.AGC_OSS_SIGN_VERSION?.trim() || 'v1');
-  if (accessKeyId) {
-    finalArgs.push(
-      '--access-key-id',
-      accessKeyId,
-      '--access-key-secret',
-      accessKeySecret,
-    );
-  }
-  return finalArgs;
-}
-
-function runOssutil(args, { env = process.env } = {}) {
-  const binary = env.OSSUTIL_BIN?.trim() || 'ossutil';
-  const endpoint =
-    env.AGC_OSS_ENDPOINT?.trim() || 'oss-rg-china-mainland.aliyuncs.com';
-  const accessKeyId = env.AGC_OSS_ACCESS_KEY_ID?.trim();
-  const accessKeySecret = env.AGC_OSS_ACCESS_KEY_SECRET;
-  if (Boolean(accessKeyId) !== Boolean(accessKeySecret)) {
-    throw new Error('OSS AccessKey ID 和 Secret 必须同时提供');
-  }
-  const result = spawnSync(
-    binary,
-    buildOssutilArgs({
-      args,
-      endpoint,
-      accessKeyId,
-      accessKeySecret,
-      env,
-    }),
-    { stdio: 'inherit', shell: false, env },
-  );
-  if (result.error) {
-    throw new Error(`无法执行 ${binary}，请先安装并配置 ossutil`);
-  }
-  if (result.status !== 0) {
-    throw new Error(`${binary} 执行失败，退出码 ${result.status}`);
-  }
-}
-
-/** 写入总版本号对象；dry-run 下只打印将要执行的上传。 */
-export function writeGlobalVersion(payload, options = {}) {
-  const { env = process.env, dryRun = readReleaseDryRun(env) } = options;
-  const bucket = env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
-  const body = Buffer.from(`${JSON.stringify(payload, null, 2)}\n`, 'utf8');
-  const tempDirectory = fs.mkdtempSync(
-    path.join(os.tmpdir(), 'agc-global-version-'),
-  );
-  const tempPath = path.join(tempDirectory, 'global-version.json');
-  try {
-    fs.writeFileSync(tempPath, body);
-    const ossUrl = `oss://${bucket}/${AGC_GLOBAL_VERSION_OBJECT_KEY}`;
-    if (dryRun) {
-      console.log(
-        `[dry-run] 不写总版本号：${ossUrl} <- ${JSON.stringify(payload)}`,
-      );
-      return { written: false, objectUrl: ossUrl, payload };
-    }
-    runOssutil(['cp', '--force', tempPath, ossUrl], { env });
-    return { written: true, objectUrl: ossUrl, payload };
-  } finally {
-    fs.rmSync(tempDirectory, { force: true, recursive: true });
-  }
-}
-
-/**
- * 发一次号并写回总版本号对象。
- *
- * 写后回读校验：若远端值与自己写下的不一致，说明有并发发号，按失败关闭处理
- * （号已烧，不重试、不回滚），由人工确认后再发。
- */
-export async function issueGlobalVersion({
-  channel,
-  commit = null,
-  buildId = null,
-  repoVersion = null,
-  env = process.env,
-  fetchImpl = fetch,
-  now = () => new Date().toISOString(),
-  writeImpl = writeGlobalVersion,
-} = {}) {
-  if (!channel) throw new Error('发号必须显式指定 channel');
-  const dryRun = readReleaseDryRun(env);
-  const current = await readGlobalVersion({ env, fetchImpl });
-  let baseline = current?.version ?? null;
-  let seeded = false;
-  if (!baseline) {
-    baseline = await resolveSeedBaseline({ repoVersion, env, fetchImpl });
-    seeded = true;
-  }
-  const issued = nextVersion(baseline);
-  const payload = {
-    version: issued,
-    updatedAt: now(),
-    channel,
-    commit,
-    buildId,
-  };
-  console.log(
-    `[agc-global-version] ${
-      seeded ? `按播种基线 ${baseline} 首发` : `总号 ${baseline}`
-    } -> ${issued}（channel=${channel} dry-run=${dryRun}）`,
-  );
-  writeImpl(payload, { env, dryRun });
-  if (!dryRun) {
-    const stored = await readGlobalVersion({ env, fetchImpl });
-    if (!stored || stored.version !== issued) {
-      throw new Error(
-        `总版本号写后回读不一致：期望 ${issued}，远端 ${
-          stored?.version ?? '不存在'
-        }；可能存在并发发号，本次构建失败关闭`,
-      );
-    }
-  }
-  return issued;
-}
-
-/** 渠道高水位断言：请求号低于本渠道清单版本即失败关闭。 */
-export function assertRequestedVersionNotBelowChannel({
-  requested,
-  channelVersion,
-  channel,
-}) {
-  const requestedVersion = parseVersion(requested, '请求版本');
-  if (channelVersion == null) return requestedVersion;
-  const current = parseVersion(channelVersion, `${channel} 渠道版本`);
-  if (compareVersions(requestedVersion, current) < 0) {
-    throw new Error(
-      `请求版本 ${requestedVersion} 低于 ${channel} 渠道当前清单版本 ${current}；拒绝回退发布`,
-    );
-  }
-  return requestedVersion;
-}
-
-/** 只读预览：不写回、不烧号。 */
-export async function previewNextGlobalVersion(options = {}) {
-  const current = await readGlobalVersion(options);
-  const baseline =
-    current?.version ??
-    (await resolveSeedBaseline({
-      repoVersion: options.repoVersion,
-      env: options.env,
-      fetchImpl: options.fetchImpl,
-    }));
-  return nextVersion(baseline);
-}
@@ -1,211 +0,0 @@
-import assert from 'node:assert/strict';
-import { test } from 'node:test';
-
-import {
-  assertRequestedVersionNotBelowChannel,
-  buildOssutilArgs,
-  issueGlobalVersion,
-  maxVersion,
-  nextVersion,
-  previewNextGlobalVersion,
-  resolveSeedBaseline,
-} from './agc-global-version.mjs';
-
-function jsonResponse(payload, status = 200) {
-  return {
-    ok: status >= 200 && status < 300,
-    status,
-    json: async () => payload,
-  };
-}
-
-/** 以 URL 为键的假 OSS：只读 fetch + 记录写入。 */
-function createFakeOss({ objects = {} } = {}) {
-  const state = { ...objects };
-  const writes = [];
-  return {
-    state,
-    writes,
-    fetchImpl: async (url) => {
-      const key = String(url).replace(/^https?:\/\/[^/]+\//u, '');
-      if (!(key in state)) return jsonResponse(null, 404);
-      return jsonResponse(state[key]);
-    },
-    writeImpl: (payload, options = {}) => {
-      writes.push({ payload, dryRun: Boolean(options.dryRun) });
-      if (!options.dryRun) state['agc/global-version.json'] = payload;
-      return { written: !options.dryRun, payload };
-    },
-  };
-}
-
-test('播种基线取仓库版本、各渠道清单与旧迁移指针的最大值', async () => {
-  const oss = createFakeOss({
-    objects: {
-      'agc/dev-win/latest.json': { version: '0.1.57' },
-      'agc/dev-mac/latest.json': { version: '0.1.12' },
-      'agc/latest.json': { version: '0.1.60' },
-    },
-  });
-  assert.equal(
-    await resolveSeedBaseline({
-      repoVersion: '0.1.48',
-      env: {},
-      fetchImpl: oss.fetchImpl,
-    }),
-    '0.1.60',
-  );
-  assert.equal(maxVersion('0.1.9', '0.1.10', null), '0.1.10');
-});
-
-test('无总号时按播种基线发首号，并把总号写回唯一事实源', async () => {
-  const oss = createFakeOss({
-    objects: {
-      'agc/dev-win/latest.json': { version: '0.1.57' },
-      'agc/dev-mac/latest.json': { version: '0.1.12' },
-    },
-  });
-  const issued = await issueGlobalVersion({
-    channel: 'dev-win',
-    commit: 'a'.repeat(40),
-    buildId: '319',
-    repoVersion: '0.1.48',
-    env: {},
-    fetchImpl: oss.fetchImpl,
-    writeImpl: oss.writeImpl,
-    now: () => '2026-09-20T00:00:00.000Z',
-  });
-  assert.equal(issued, '0.1.58');
-  assert.deepEqual(
-    oss.writes.map((entry) => entry.payload.version),
-    ['0.1.58'],
-  );
-  assert.equal(oss.state['agc/global-version.json'].version, '0.1.58');
-  assert.equal(oss.state['agc/global-version.json'].channel, 'dev-win');
-  assert.equal(oss.state['agc/global-version.json'].buildId, '319');
-});
-
-test('已有总号时只递增，不再回看渠道清单', async () => {
-  const oss = createFakeOss({
-    objects: {
-      'agc/global-version.json': { version: '0.2.7' },
-      // 渠道清单被手工改小也不能把总号拉回去。
-      'agc/dev-win/latest.json': { version: '0.1.10' },
-    },
-  });
-  const issued = await issueGlobalVersion({
-    channel: 'dev-mac',
-    env: {},
-    fetchImpl: oss.fetchImpl,
-    writeImpl: oss.writeImpl,
-  });
-  assert.equal(issued, '0.2.8');
-  assert.equal(oss.state['agc/global-version.json'].version, '0.2.8');
-});
-
-test('dry-run 只预览下一位，不写回、不烧号', async () => {
-  const oss = createFakeOss({
-    objects: { 'agc/global-version.json': { version: '0.3.4' } },
-  });
-  const preview = await previewNextGlobalVersion({
-    env: {},
-    fetchImpl: oss.fetchImpl,
-  });
-  assert.equal(preview, '0.3.5');
-  assert.equal(oss.writes.length, 0);
-
-  const issued = await issueGlobalVersion({
-    channel: 'dev-win',
-    env: { AGC_RELEASE_DRY_RUN: '1' },
-    fetchImpl: oss.fetchImpl,
-    writeImpl: oss.writeImpl,
-  });
-  assert.equal(issued, '0.3.5');
-  assert.deepEqual(
-    oss.writes.map((entry) => entry.dryRun),
-    [true],
-  );
-  assert.equal(oss.state['agc/global-version.json'].version, '0.3.4');
-});
-
-test('传入低于本渠道清单的号时失败关闭', () => {
-  assert.equal(
-    assertRequestedVersionNotBelowChannel({
-      requested: '0.1.60',
-      channelVersion: '0.1.60',
-      channel: 'dev-win',
-    }),
-    '0.1.60',
-  );
-  assert.throws(
-    () =>
-      assertRequestedVersionNotBelowChannel({
-        requested: '0.1.59',
-        channelVersion: '0.1.60',
-        channel: 'dev-win',
-      }),
-    /低于 dev-win 渠道当前清单版本/u,
-  );
-  assert.equal(
-    assertRequestedVersionNotBelowChannel({
-      requested: '0.1.1',
-      channelVersion: null,
-      channel: 'dev-mac',
-    }),
-    '0.1.1',
-  );
-});
-
-test('写后回读不一致（并发发号）时失败关闭', async () => {
-  const oss = createFakeOss({
-    objects: { 'agc/global-version.json': { version: '0.5.1' } },
-  });
-  await assert.rejects(
-    issueGlobalVersion({
-      channel: 'dev-win',
-      env: {},
-      // 模拟另一个发号进程在写入后覆盖了总号。
-      writeImpl: (payload, options) => {
-        const result = oss.writeImpl(payload, options);
-        // 另一个发号进程紧随其后覆盖总号。
-        oss.state['agc/global-version.json'] = { version: '0.5.9' };
-        return result;
-      },
-      fetchImpl: oss.fetchImpl,
-    }),
-    /写后回读不一致/u,
-  );
-});
-
-test('nextVersion 只在 patch 位递增', () => {
-  assert.equal(nextVersion('0.1.9'), '0.1.10');
-  assert.equal(nextVersion('1.0.0'), '1.0.1');
-  assert.throws(() => nextVersion('0.1'), /不是有效的三段版本号/u);
-});
-
-test('ossutil 参数默认使用 v1 签名，并可按需带 region 与 v4', () => {
-  const base = {
-    args: [
-      'cp',
-      '--force',
-      '/tmp/a.json',
-      'oss://agc-dev/agc/global-version.json',
-    ],
-    endpoint: 'oss-rg-china-mainland.aliyuncs.com',
-    accessKeyId: 'id',
-    accessKeySecret: 'secret',
-    env: {},
-  };
-  const v1 = buildOssutilArgs(base);
-  assert.equal(v1[v1.indexOf('--sign-version') + 1], 'v1');
-  assert.ok(!v1.includes('--region'));
-  assert.equal(v1[v1.indexOf('--access-key-id') + 1], 'id');
-  assert.equal(v1[v1.indexOf('--access-key-secret') + 1], 'secret');
-
-  const v4 = buildOssutilArgs({
-    ...base,
-    env: { AGC_OSS_SIGN_VERSION: 'v4', AGC_OSS_REGION: 'cn-beijing' },
-  });
-  assert.equal(v4[v4.indexOf('--region') + 1], 'cn-beijing');
-  assert.equal(v4[v4.indexOf('--sign-version') + 1], 'v4');
-});
@@ -676,11 +676,11 @@ async function runSelfTest() {
      designFoundationAssetCall?.arguments?.input?.outputPath ===
        'assets/ui-prototype.png' &&
      designFoundationAssetCall.arguments.input.aspectRatio === '16:9' &&
-      designFoundationAssetCall.arguments.input.assetKind === 'ui-design' &&
+      designFoundationAssetCall.arguments.input.assetKind === 'ui-prototype' &&
      artAssetPlanAssetCall?.arguments?.input?.outputPath ===
        'assets/art-spritesheet.png' &&
      artAssetPlanAssetCall.arguments.input.aspectRatio === '1:1' &&
-      artAssetPlanAssetCall.arguments.input.assetKind === 'icon-spritesheet',
+      artAssetPlanAssetCall.arguments.input.assetKind === 'art-spritesheet',
    'self-test-visual-assets-invalid',
  );

@@ -70,7 +70,7 @@ const requiredFormalArtifactSpecs = [
  { path: 'game/balance.json', kind: 'json' },
  { path: 'assets/manifest.art.json', kind: 'json' },
  { path: 'assets/manifest.audio.json', kind: 'json' },
-  { path: 'game/index.html', kind: 'file' },
+  { path: 'game/index.html', kind: 'game-entry' },
  { path: 'exports/README.md', kind: 'file' },
 ];
 const editorImageArtifactSpecs = [
@@ -957,6 +957,9 @@ async function runInteractiveCargo(cliArguments, setActiveChild) {
  return result;
 }

+// 立项策划跑 standard 档，`agent.delegate` 这类动作按项目权限策略必须逐个确认，
+// 而确认和问询都只从 CLI 的 stdin 读。自主构建档没有这一步，所以只有 --plan 需要
+// 一个把「人坐在终端前敲 approve」自动化掉的应答器；判据本身仍然走后端确认命令。
 const swarmConfirmationPromptPattern = /输入 approve 或 reject：$/u;
 const swarmUserInputPromptPattern = /请选择 1-\d+，或直接输入其他答案：$/u;

@@ -1,280 +0,0 @@
-import assert from 'node:assert/strict';
-import { execFileSync, spawnSync } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import fs from 'node:fs';
-import os from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-
-import {
-  generateUpdateManifest,
-  prepareReleaseVersion,
-  resolveReleaseContext,
-  resolveReleasePartition,
-  runTauriBuild,
-} from './build-release.mjs';
-import { readReleaseDryRun, uploadReleaseArtifacts } from './release-oss.mjs';
-import {
-  readUpdaterPubkey,
-  verifyUpdaterSignature,
-} from './verify-updater-signature.mjs';
-
-/**
- * AGC macOS 分区（`<channel>-mac`）发布入口：构建 universal 包 → 双架构 smoke → 生成 universal DMG
- * → 生成分区清单 latest.json → 用产物内烘焙的公钥验签 → 按 dry-run 决定是否上传 OSS。
- *
- * 边界：
- * - Apple 签名与公证暂缺：本入口剥离 `APPLE_*` 凭据让 Tauri 跳过 Apple 签名，但**不能传
- *   `--no-sign`** —— 该标志同时会跳过 updater 的 minisign 签名，产物就没有 `.sig`；
- *   未签名 + 未公证必须显式记录而非静默通过；
- * - 更新包签名（TAURI_SIGNING_PRIVATE_KEY，minisign）是硬需求：缺了客户端一律拒绝安装，
- *   因此构建前要求凭据存在，构建后用内置公钥复核 `.sig` 才允许继续上传；
- * - 未通过验签绝不写 OSS：上传顺序为更新包、签名、首装包，全部成功后才覆盖渠道清单指针。
- */
-const appRoot = fileURLToPath(new URL('..', import.meta.url));
-const repoRoot = path.resolve(appRoot, '../..');
-
-/**
- * 产品名只从 Tauri 配置读取：它同时决定 `*.app` 目录名、updater 归档名与 DMG 卷名。
- * 写死会在改名后让入口静默找错对象（清理、打包、归档三处一起失效）。
- */
-function readProductName() {
-  const read = (file) =>
-    JSON.parse(fs.readFileSync(path.join(appRoot, 'src-tauri', file), 'utf8'));
-  const base = read('tauri.conf.json');
-  const macosPath = path.join(appRoot, 'src-tauri', 'tauri.macos.conf.json');
-  const productName = fs.existsSync(macosPath)
-    ? (read('tauri.macos.conf.json').productName ?? base.productName)
-    : base.productName;
-  assert.ok(
-    typeof productName === 'string' && productName.trim().length > 0,
-    'Tauri 配置缺少 productName',
-  );
-  return productName;
-}
-
-const productName = readProductName();
-const appBundleName = `${productName}.app`;
-const updaterArtifactName = `${productName}.app.tar.gz`;
-assert.equal(process.platform, 'darwin', '只能在 macOS Agent 执行');
-assert.equal(
-  process.env.JENKINS_URL?.length > 0,
-  true,
-  '此入口仅用于 Jenkins 独立工作区',
-);
-assert.equal(
-  fs.realpathSync(process.env.WORKSPACE || '.'),
-  fs.realpathSync(repoRoot),
-  '必须在 Jenkins workspace 根目录执行',
-);
-const space = fs.statfsSync(repoRoot);
-assert.ok(
-  space.bavail * space.bsize >= 8 * 1024 ** 3,
-  '构建前至少需要 8 GiB 可用空间；禁止自动清理开发缓存',
-);
-
-// 仅剥离 Apple 签名/公证变量：本节点没有证书，误用只会让构建失败；
-// 更新包签名与 OSS 凭据必须保留，它们是本入口发布能力的组成部分。
-for (const key of Object.keys(process.env)) {
-  if (/^APPLE_/u.test(key)) delete process.env[key];
-}
-assert.ok(
-  process.env.TAURI_SIGNING_PRIVATE_KEY?.length > 0 ||
-    process.env.TAURI_SIGNING_PRIVATE_KEY_PATH?.length > 0,
-  '缺少更新包签名私钥（TAURI_SIGNING_PRIVATE_KEY / _PATH）：无签名的更新包会被客户端拒绝，禁止继续',
-);
-
-const bucket = process.env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
-const endpoint =
-  process.env.AGC_OSS_ENDPOINT?.trim() || 'oss-rg-china-mainland.aliyuncs.com';
-if (!/^[a-z0-9][a-z0-9.-]{1,62}$/u.test(bucket) || /[\r\n\0]/u.test(endpoint)) {
-  throw new Error('OSS bucket 或 endpoint 配置无效');
-}
-process.env.AGC_UPDATE_OSS_BASE_URL ||= `https://${bucket}.${endpoint}/agc`;
-const dryRun = readReleaseDryRun();
-
-process.env.CARGO_TARGET_DIR = path.join(appRoot, 'src-tauri/target');
-const context = resolveReleaseContext(['--target=universal-apple-darwin']);
-const partition = resolveReleasePartition(context.channel, context.target);
-const version = await prepareReleaseVersion(context);
-// 首装包名必须保持 `<产品名>_<版本>_universal.dmg`：清单侧按该后缀唯一匹配本次产物。
-const firstInstallName = `${productName}_${version}_universal.dmg`;
-
-// 幂等边界：workspace 会保留上一轮产物。先删掉本次将要写出的对象，否则
-//  1) hdiutil 会因同名 DMG 已存在直接失败（首次实跑即命中）；
-//  2) 上一轮遗留的 `.sig` 会让验签门禁把「本轮其实没签」判成通过。
-// 只删本次要写出的确切路径，不动其它版本产物与编译缓存。
-const macosBundle = path.join(context.bundleRoot, 'macos');
-for (const stale of [
-  path.join(macosBundle, updaterArtifactName),
-  path.join(macosBundle, `${updaterArtifactName}.sig`),
-  path.join(macosBundle, `${firstInstallName}`),
-  path.join(macosBundle, `${firstInstallName}.sha256`),
-  path.join(context.bundleRoot, 'latest.json'),
-  path.join(context.bundleRoot, 'release-notes.txt'),
-]) {
-  fs.rmSync(stale, { force: true });
-}
-
-const args = [
-  '--target=universal-apple-darwin',
-  '--bundles',
-  'app',
-  '--ci',
-  // 刻意不传 `--no-sign`：它会连带跳过 updater 签名，而客户端强制校验更新包签名。
-  // Apple 侧改为剥离 APPLE_* 凭据，未配置身份时 Tauri 不签名也不失败。
-  // 基础配置已开启；这里显式声明，避免被其它配置来源关掉后静默失去更新能力。
-  '--config',
-  '{"bundle":{"createUpdaterArtifacts":true}}',
-];
-const command = (binary, argv, options = {}) =>
-  execFileSync(binary, argv, { cwd: repoRoot, stdio: 'inherit', ...options });
-runTauriBuild(args, context);
-
-const app = path.join(context.bundleRoot, 'macos', appBundleName);
-for (const architecture of ['arm64', 'x86_64']) {
-  command(process.execPath, [
-    path.join(appRoot, 'scripts/check-macos-bundle.mjs'),
-    app,
-    architecture,
-    '--universal',
-  ]);
-}
-
-// DMG 放在 bundle 根目录下：渠道清单的首装包选择会扫描该目录，命名必须匹配 `_<version>_universal.dmg`。
-const dmgDirectory = path.join(context.bundleRoot, 'macos');
-fs.mkdirSync(dmgDirectory, { recursive: true });
-const dmg = path.join(dmgDirectory, firstInstallName);
-const stage = fs.mkdtempSync(path.join(os.tmpdir(), 'agc-ci-dmg-'));
-try {
-  command('ditto', [app, path.join(stage, appBundleName)]);
-  fs.symlinkSync('/Applications', path.join(stage, 'Applications'));
-  command('hdiutil', [
-    'create',
-    // 前面已删除同名对象；这里再要求显式覆盖，避免残留文件让构建以「文件已存在」失败。
-    '-ov',
-    '-volname',
-    productName,
-    '-srcfolder',
-    stage,
-    '-format',
-    'UDZO',
-    dmg,
-  ]);
-  command('hdiutil', ['verify', dmg]);
-} finally {
-  fs.rmSync(stage, { recursive: true, force: true });
-}
-
-const release = await generateUpdateManifest(context);
-assert.equal(
-  path.resolve(release.downloadArtifact),
-  path.resolve(dmg),
-  '首装包必须锁定本次生成的 universal DMG',
-);
-
-// 上传前门禁：用产物里烘焙的公钥复核更新包签名。验不过就停在这里，绝不写 OSS。
-const signature = verifyUpdaterSignature({
-  artifactPath: release.artifact,
-  signaturePath: `${release.artifact}.sig`,
-  pubkey: readUpdaterPubkey(),
-});
-console.log(
-  `[agc-macos] 更新包签名校验通过：alg=${signature.algorithm}，keyId=${signature.keyId}`,
-);
-
-const artifacts = path.join(repoRoot, 'artifacts');
-// 只清理本 Job 的归档输出，不能把上次 DMG 当成本次成功产物。
-fs.rmSync(artifacts, { recursive: true, force: true });
-fs.mkdirSync(artifacts, { recursive: true });
-const sha256 = (file) => {
-  const hash = createHash('sha256');
-  hash.update(fs.readFileSync(file));
-  return hash.digest('hex');
-};
-const dmgHash = sha256(dmg);
-fs.writeFileSync(`${dmg}.sha256`, `${dmgHash}  ${path.basename(dmg)}\n`);
-
-const uploadPlan = uploadReleaseArtifacts(release, {
-  bucket,
-  endpoint,
-  binary: process.env.OSSUTIL_BIN?.trim() || 'ossutil',
-  accessKeyId: process.env.AGC_OSS_ACCESS_KEY_ID?.trim(),
-  accessKeySecret: process.env.AGC_OSS_ACCESS_KEY_SECRET,
-  dryRun,
-});
-
-const archived = [
-  dmg,
-  `${dmg}.sha256`,
-  release.manifestPath,
-  release.notesPath,
-  `${release.artifact}.sig`,
-];
-for (const file of archived) {
-  fs.copyFileSync(file, path.join(artifacts, path.basename(file)));
-}
-
-const commit = execFileSync('git', ['rev-parse', 'HEAD'], {
-  cwd: repoRoot,
-  encoding: 'utf8',
-}).trim();
-// Apple 签名状态必须实测：剥离 APPLE_* 后 Tauri 通常跳过签名，但节点若装了 Developer ID
-// 证书仍可能签上，硬编码 appleSigned=false 会把「其实签了」写成假事实。
-const signatureProbe = spawnSync('codesign', ['-dv', '--verbose=2', app], {
-  encoding: 'utf8',
-});
-const signatureText = `${signatureProbe.stdout ?? ''}${signatureProbe.stderr ?? ''}`;
-const appleSigned = /Authority=Developer ID Application/u.test(signatureText);
-const appleSignatureKind = appleSigned
-  ? 'developer-id'
-  : /Signature=adhoc/u.test(signatureText)
-    ? 'adhoc'
-    : 'unsigned';
-fs.writeFileSync(
-  path.join(artifacts, 'build-manifest.json'),
-  `${JSON.stringify(
-    {
-      version,
-      commit,
-      target: context.target,
-      channel: context.channel,
-      // Apple 签名与公证暂缺：显式记录为未验证项，不静默通过。
-      appleSigned,
-      appleSignatureKind,
-      notarized: false,
-      dryRun,
-      uploaded: !dryRun,
-      updaterSignature: {
-        algorithm: signature.algorithm,
-        keyId: signature.keyId,
-        verified: true,
-      },
-      oss: {
-        bucket,
-        endpoint,
-        partition,
-        latest: `oss://${bucket}/agc/${partition}/latest.json`,
-        objects: uploadPlan.map(({ destination }) => destination),
-      },
-      artifacts: {
-        updater: path.basename(release.artifact),
-        updaterSha256: sha256(release.artifact),
-        updaterBytes: fs.statSync(release.artifact).size,
-        updaterSignature: path.basename(`${release.artifact}.sig`),
-        firstInstall: path.basename(dmg),
-        firstInstallSha256: dmgHash,
-        manifest: 'latest.json',
-      },
-      smokes: ['arm64', 'x86_64'],
-      intelSmoke: process.arch === 'arm64' ? 'Rosetta' : 'native',
-    },
-    null,
-    2,
-  )}\n`,
-);
-console.log(
-  dryRun
-    ? `[agc-macos] dry-run 完成：${partition} 分区产物与清单已生成，未写入 OSS`
-    : `[agc-macos] ${partition} 分区更新包、签名、首装包与清单已上传 OSS`,
-);
@@ -5,10 +5,6 @@ import os from 'node:os';
 import path from 'node:path';
 import { fileURLToPath } from 'node:url';

-import {
-  assertRequestedVersionNotBelowChannel,
-  issueGlobalVersion as issueAgcGlobalVersion,
-} from './agc-global-version.mjs';
 import {
  defaultEditorFeatures,
  withDefaultCargoFeatures,
@@ -46,12 +42,16 @@ function explicitBuildTarget(args) {
 }

 function validateReleaseTarget(target) {
+  if (target === 'universal-apple-darwin') {
+    throw new Error(
+      '内置 Codex 资源仅支持 macOS 单架构构建，请使用 aarch64-apple-darwin 或 x86_64-apple-darwin',
+    );
+  }
  if (
    ![
      'x86_64-pc-windows-msvc',
      'aarch64-apple-darwin',
      'x86_64-apple-darwin',
-      'universal-apple-darwin',
    ].includes(target)
  ) {
    throw new Error(`不支持的发布目标：${target}`);
@@ -68,7 +68,7 @@ export function resolveReleaseContext(args = [], env = process.env) {
  );
  return Object.freeze({
    target,
-    channel: resolveReleaseChannel(env),
+    channel: resolveReleaseChannel(env, target),
    bundleRoot: path.join(
      appRoot,
      'src-tauri',
@@ -87,14 +87,14 @@ const cargoLockPath = path.join(appRoot, 'src-tauri', 'Cargo.lock');
 const defaultOssBaseUrl =
  'https://agc-dev.oss-rg-china-mainland.aliyuncs.com/agc';

-const reservedChannelNames = new Set([
-  'win',
-  'mac',
-  'windows',
-  'macos',
-  'darwin',
-  'linux',
-]);
+/**
+ * 发布渠道 → 目标平台。渠道名会进入 OSS 路径并烘焙进客户端端点，
+ * 一旦发布就不能改名（改名等于已发布客户端再也找不到更新）。
+ */
+const releaseChannels = {
+  'dev-win': 'windows',
+  'dev-mac': 'darwin',
+};

 /**
 * 影响 Windows 客户端产物的路径。调度管线的发布范围判定与这里的提交摘要必须
@@ -105,8 +105,6 @@ export const agcReleasePathPatterns = [
  'packages/',
  'server-rs/crates/',
  'plugins/agc-cocos-editor/',
-  'plugins/agc-unity-editor/',
-  'plugins/agc-godot-editor/',
  'apps/desktop-shell/src-tauri/icons/',
  'package.json',
  'package-lock.json',
@@ -163,45 +161,46 @@ export function resolveReleasePlatform(target = defaultTarget()) {
  throw new Error(`不支持的发布目标：${target}`);
 }

-export function resolveReleaseChannel(env = process.env) {
-  const channel = env.AGC_UPDATE_CHANNEL?.trim() ?? 'dev';
-  if (
-    !/^[a-z][a-z0-9-]{0,31}$/u.test(channel) ||
-    channel.endsWith('-') ||
-    reservedChannelNames.has(channel) ||
-    /-(win|mac)$/u.test(channel)
-  ) {
+export function resolveReleaseChannel(
+  env = process.env,
+  target = defaultTarget(),
+) {
+  const platform = resolveReleasePlatform(target);
+  const requested = env.AGC_UPDATE_CHANNEL?.trim();
+  if (requested) {
+    const channelPlatform = releaseChannels[requested];
+    if (!channelPlatform) {
+      throw new Error(
+        `未知发布渠道 ${requested}；当前支持：${Object.keys(releaseChannels).join('、')}`,
+      );
+    }
+    if (channelPlatform !== platform) {
+      throw new Error(
+        `渠道 ${requested} 只能用于 ${channelPlatform} 目标，当前构建目标为 ${target}`,
+      );
+    }
+    return requested;
+  }
+  const defaultChannel = Object.entries(releaseChannels).find(
+    ([, channelPlatform]) => channelPlatform === platform,
+  )?.[0];
+  if (!defaultChannel) {
    throw new Error(
-      '发布渠道无效：请使用 dev、release 或最多 32 位的小写字母、数字和连字符名称，系统名称不属于渠道',
+      `目标 ${target} 没有默认发布渠道，请显式设置 AGC_UPDATE_CHANNEL`,
    );
  }
-  return channel;
+  return defaultChannel;
 }

-/** 系统分区延续已发布客户端端点，渠道本身不包含系统。 */
-export function resolveReleasePartition(
-  channel = resolveReleaseChannel(),
-  target = defaultTarget(),
-) {
-  channel = resolveReleaseChannel({ AGC_UPDATE_CHANNEL: channel });
-  validateReleaseTarget(target);
-  return `${channel}-${resolveReleasePlatform(target) === 'windows' ? 'win' : 'mac'}`;
-}
-
-export function updateManifestUrl(
-  channel = resolveReleaseChannel(),
-  target = defaultTarget(),
-) {
-  return `${ossBaseUrl()}/${resolveReleasePartition(channel, target)}/latest.json`;
+export function updateManifestUrl(channel = resolveReleaseChannel()) {
+  return `${ossBaseUrl()}/${channel}/latest.json`;
 }

 /**
- * universal 主程序与双目录原生资源共用一个更新包；单架构只登记实际目标。
+ * 单架构产物只登记实际目标，不能把同一原生资源映射为另一架构。
 */
 export function resolveManifestPlatformKeys(target = defaultTarget()) {
  validateReleaseTarget(target);
-  if (target === 'universal-apple-darwin')
-    return ['darwin-aarch64', 'darwin-x86_64'];
  if (target === 'aarch64-apple-darwin') return ['darwin-aarch64'];
  if (target === 'x86_64-apple-darwin') return ['darwin-x86_64'];
  if (target.includes('windows')) {
@@ -245,8 +244,8 @@ async function readManifestVersion(manifestUrl, label) {
 }

 /** 上一次发布的渠道清单：拿版本做高水位、拿 commit 生成自动更新摘要。 */
-async function readRemoteChannelManifest(channel, target) {
-  return fetchManifest(updateManifestUrl(channel, target), 'OSS 渠道清单');
+async function readRemoteChannelManifest(channel = resolveReleaseChannel()) {
+  return fetchManifest(updateManifestUrl(channel), 'OSS 渠道清单');
 }

 /**
@@ -258,17 +257,14 @@ async function readRemoteChannelManifest(channel, target) {
 */
 export async function resolvePreviousReleaseCommit(
  channel = resolveReleaseChannel(),
-  {
-    override = process.env.AGC_UPDATE_PREVIOUS_COMMIT,
-    target = defaultTarget(),
-  } = {},
+  { override = process.env.AGC_UPDATE_PREVIOUS_COMMIT } = {},
 ) {
  const explicit = override?.trim();
  if (explicit && /^[0-9a-f]{7,40}$/u.test(explicit)) {
    return explicit;
  }
  try {
-    const manifest = await readRemoteChannelManifest(channel, target);
+    const manifest = await readRemoteChannelManifest(channel);
    const commit =
      typeof manifest?.commit === 'string' ? manifest.commit.trim() : '';
    return /^[0-9a-f]{7,40}$/u.test(commit) ? commit : null;
@@ -290,14 +286,12 @@ export async function resolvePreviousReleaseCommit(
 */
 export async function resolveRemoteHighWaterVersion(
  channel = resolveReleaseChannel(),
-  target = defaultTarget(),
 ) {
  const channelVersion = await readManifestVersion(
-    updateManifestUrl(channel, target),
+    updateManifestUrl(channel),
    'OSS 渠道清单',
  );
-  if (channel !== 'dev' || resolveReleasePlatform(target) !== 'windows')
-    return channelVersion;
+  if (channel !== 'dev-win') return channelVersion;
  const legacyVersion = await readManifestVersion(
    legacyBridgeManifestUrl(),
    'OSS 迁移指针',
@@ -314,35 +308,14 @@ function replaceVersionLine(source, version, pattern, label) {
  return source.replace(pattern, `$1${version}$3`);
 }

-/**
- * 版本来源固定为 OSS 总版本号（`agc/global-version.json`）：
- * - CI 统一构建由发号 Job 先发号，再通过 AGC_RELEASE_VERSION 透传给各渠道；
- * - 未传入时（本地手工兜底）由本函数现场发号并写回总号；
- * - 渠道高水位只做断言：传入号低于本渠道清单版本即失败关闭。
- */
 export async function prepareReleaseVersion(context = resolveReleaseContext()) {
-  const { channel, target } = context;
+  const { channel } = context;
  const localVersion = parseVersion(readPackageJson().version, '本地版本');
-  const remoteVersion = await resolveRemoteHighWaterVersion(channel, target);
+  const remoteVersion = await resolveRemoteHighWaterVersion(channel);
  const requestedVersion = process.env.AGC_RELEASE_VERSION?.trim();
  const nextVersion = requestedVersion
-    ? assertRequestedVersionNotBelowChannel({
-        requested: requestedVersion,
-        channelVersion: remoteVersion,
-        channel,
-      })
-    : await issueAgcGlobalVersion({
-        channel,
-        commit:
-          process.env.COMMIT_HASH?.trim() ||
-          process.env.GIT_COMMIT?.trim() ||
-          null,
-        buildId:
-          process.env.BUILD_NUMBER?.trim() ||
-          process.env.AGC_BUILD_ID?.trim() ||
-          null,
-        repoVersion: localVersion,
-      });
+    ? parseVersion(requestedVersion, '指定版本')
+    : nextPatchVersion(localVersion, remoteVersion);

  const packageSource = fs.readFileSync(packageJsonPath, 'utf8');
  fs.writeFileSync(
@@ -401,8 +374,8 @@ export async function prepareReleaseVersion(context = resolveReleaseContext()) {

  console.log(
    requestedVersion
-      ? `[ai-game-creator-shell] 渠道 ${channel} 使用发号 Job 下发的总号 ${nextVersion}（本渠道清单 ${remoteVersion ?? '不存在'} / 仓库 ${localVersion}）`
-      : `[ai-game-creator-shell] 渠道 ${channel} 本地兜底发号 ${nextVersion}（本渠道清单 ${remoteVersion ?? '不存在'} / 仓库 ${localVersion}）`,
+      ? `[ai-game-creator-shell] 渠道 ${channel} 使用指定版本 ${nextVersion}（本地 ${localVersion} / OSS ${remoteVersion ?? '不存在'}）`
+      : `[ai-game-creator-shell] 渠道 ${channel} 版本 ${localVersion} / OSS ${remoteVersion ?? '不存在'} -> ${nextVersion}`,
  );
  return nextVersion;
 }
@@ -427,27 +400,24 @@ export function buildTauriBuildArguments(
 }

 /** 渠道端点必须由构建期注入：官方更新插件的端点配置不支持运行期改渠道。 */
-export function createChannelConfig(
-  channel = resolveReleaseChannel(),
-  target = defaultTarget(),
-) {
+export function createChannelConfig(channel = resolveReleaseChannel()) {
  return {
    plugins: {
      updater: {
-        endpoints: [updateManifestUrl(channel, target)],
+        endpoints: [updateManifestUrl(channel)],
      },
    },
  };
 }

-function writeChannelConfigFile(channel, target) {
+function writeChannelConfigFile(channel) {
  const configPath = path.join(
    os.tmpdir(),
-    `agc-tauri-channel-${channel}-${target}.json`,
+    `agc-tauri-channel-${channel}.json`,
  );
  fs.writeFileSync(
    configPath,
-    `${JSON.stringify(createChannelConfig(channel, target), null, 2)}\n`,
+    `${JSON.stringify(createChannelConfig(channel), null, 2)}\n`,
  );
  return configPath;
 }
@@ -464,8 +434,8 @@ export function runTauriBuild(
    throw new Error('构建参数与发布上下文目标不一致');
  }
  const tauriArguments = buildTauriBuildArguments(args, context.target);
-  const { channel, target } = context;
-  const configPath = writeChannelConfigFile(channel, target);
+  const { channel } = context;
+  const configPath = writeChannelConfigFile(channel);
  console.log(
    `[ai-game-creator-shell] 渠道 ${channel} 端点配置：${configPath}`,
  );
@@ -530,53 +500,6 @@ export function selectReleaseArtifact(files, target = defaultTarget()) {
  );
 }

-export function selectFirstInstallArtifact(
-  files,
-  { target, version, artifact },
-) {
-  validateReleaseTarget(target);
-  let selected;
-  if (target.includes('windows')) {
-    selected = artifact;
-    if (!selected?.endsWith('.exe')) {
-      throw new Error('Windows 首装包必须复用本次 NSIS .exe 更新包');
-    }
-  } else if (target === 'universal-apple-darwin') {
-    // universal 主程序只产出一个 DMG，aarch64 与 x86_64 首装共用它（命名见 build-macos-ci.mjs）。
-    const suffix = `_${version}_universal.dmg`;
-    const candidates = files.filter((file) =>
-      path.basename(file).endsWith(suffix),
-    );
-    if (candidates.length !== 1) {
-      throw new Error(
-        `首装 DMG 必须唯一匹配本次版本 ${version} 的 universal 产物，找到 ${candidates.length} 个`,
-      );
-    }
-    selected = candidates[0];
-  } else {
-    // Tauri DMG 文件名使用 aarch64 / x64，而 updater 的 Intel 平台键是 x86_64。
-    const architecture = target.startsWith('aarch64') ? 'aarch64' : 'x64';
-    const suffix = `_${version}_${architecture}.dmg`;
-    const candidates = files.filter((file) =>
-      path.basename(file).endsWith(suffix),
-    );
-    if (candidates.length !== 1) {
-      throw new Error(
-        `首装 DMG 必须唯一匹配本次版本 ${version} 和架构 ${architecture}，找到 ${candidates.length} 个`,
-      );
-    }
-    selected = candidates[0];
-  }
-  if (
-    !fs.existsSync(selected) ||
-    !fs.statSync(selected).isFile() ||
-    fs.statSync(selected).size === 0
-  ) {
-    throw new Error(`首装包不存在或为空：${selected}`);
-  }
-  return selected;
-}
-
 function readUpdaterSignature(artifactPath) {
  const signaturePath = `${artifactPath}.sig`;
  if (!fs.existsSync(signaturePath)) {
@@ -593,36 +516,27 @@ export function createUpdateManifest(
  artifactPath,
  {
    target = defaultTarget(),
-    channel = resolveReleaseChannel(),
+    channel = resolveReleaseChannel(process.env, target),
    publishedAt = new Date().toISOString(),
    notes = readReleaseNotes(),
    commit = readHeadCommit(),
-    downloadArtifact,
  } = {},
 ) {
  validateReleaseTarget(target);
-  const partition = resolveReleasePartition(channel, target);
+  resolveReleaseChannel({ AGC_UPDATE_CHANNEL: channel }, target);
  const signature = readUpdaterSignature(artifactPath);
  const version = readPackageJson().version;
-  const firstInstallArtifact = selectFirstInstallArtifact(
-    downloadArtifact ? [downloadArtifact] : [],
-    { target, version, artifact: artifactPath },
-  );
  const fileName = path.basename(artifactPath);
-  const url = `${ossBaseUrl()}/${partition}/${encodeURIComponent(version)}/${encodeURIComponent(fileName)}`;
-  const downloadUrl = `${ossBaseUrl()}/${partition}/${encodeURIComponent(version)}/${encodeURIComponent(path.basename(firstInstallArtifact))}`;
+  const url = `${ossBaseUrl()}/${channel}/${encodeURIComponent(version)}/${encodeURIComponent(fileName)}`;
  const platforms = {};
-  const downloads = {};
  for (const key of resolveManifestPlatformKeys(target)) {
    platforms[key] = { signature, url };
-    downloads[key] = { url: downloadUrl };
  }
  return {
    version,
    ...(notes ? { notes } : {}),
    pub_date: publishedAt,
    platforms,
-    downloads,
    // 非标准字段：更新插件会忽略，发布脚本用它定位下一次自动更新摘要的起点。
    ...(commit ? { commit } : {}),
  };
@@ -743,22 +657,14 @@ export function formatRecentReleaseNotes(commits) {
 /** 旧协议（sha256）清单：只用于把已发布客户端带到新渠道协议，一个版本周期后整条删除。 */
 export function createLegacyUpdateManifest(
  artifactPath,
-  {
-    channel = resolveReleaseChannel(),
-    target = defaultTarget(),
-    notes = readReleaseNotes(),
-  } = {},
+  { channel = resolveReleaseChannel(), notes = readReleaseNotes() } = {},
 ) {
-  const partition = resolveReleasePartition(channel, target);
-  if (partition !== 'dev-win') {
-    throw new Error('旧协议迁移清单只属于 dev 渠道的 Windows 系统');
-  }
  const bytes = fs.readFileSync(artifactPath);
  const version = readPackageJson().version;
  const fileName = path.basename(artifactPath);
  return {
    version,
-    downloadUrl: `${ossBaseUrl()}/${partition}/${encodeURIComponent(version)}/${encodeURIComponent(fileName)}`,
+    downloadUrl: `${ossBaseUrl()}/${channel}/${encodeURIComponent(version)}/${encodeURIComponent(fileName)}`,
    sha256: createHash('sha256').update(bytes).digest('hex'),
    size: bytes.length,
    ...(notes ? { releaseNotes: notes } : {}),
@@ -769,20 +675,12 @@ export async function generateUpdateManifest(
  context = resolveReleaseContext(),
 ) {
  const { channel, target, bundleRoot } = context;
-  const files = listFiles(bundleRoot);
-  const artifact = selectReleaseArtifact(files, target);
+  const artifact = selectReleaseArtifact(listFiles(bundleRoot), target);
  if (!artifact) {
    throw new Error(`未找到可发布的 AGC 安装包：${bundleRoot}`);
  }
-  const downloadArtifact = selectFirstInstallArtifact(files, {
-    target,
-    version: readPackageJson().version,
-    artifact,
-  });
  const manualNotes = readReleaseNotes();
-  const previousCommit = await resolvePreviousReleaseCommit(channel, {
-    target,
-  });
+  const previousCommit = await resolvePreviousReleaseCommit(channel);
  const commits = collectReleaseCommits(previousCommit);
  const recentCommits = previousCommit ? null : collectRecentReleaseCommits();
  const notes =
@@ -794,12 +692,7 @@ export async function generateUpdateManifest(
      `[ai-game-creator-shell] 未生成自动更新摘要（上一发布 commit=${previousCommit ?? '未知'}，客户端相关提交=${commits ? commits.length : '不可判定'}，最近提交=${recentCommits ? recentCommits.length : '不可判定'}）`,
    );
  }
-  const manifest = createUpdateManifest(artifact, {
-    channel,
-    target,
-    notes,
-    downloadArtifact,
-  });
+  const manifest = createUpdateManifest(artifact, { channel, target, notes });
  const manifestPath = path.join(bundleRoot, 'latest.json');
  fs.writeFileSync(manifestPath, `${JSON.stringify(manifest, null, 2)}\n`);
  const notesPath = path.join(bundleRoot, 'release-notes.txt');
@@ -808,8 +701,8 @@ export async function generateUpdateManifest(
    notes ? `${notes}\n` : '（本次没有可用的更新摘要）\n',
  );
  const legacyManifest =
-    channel === 'dev' && resolveReleasePlatform(target) === 'windows'
-      ? createLegacyUpdateManifest(artifact, { channel, target, notes })
+    channel === 'dev-win'
+      ? createLegacyUpdateManifest(artifact, { channel, notes })
      : null;
  const legacyManifestPath = legacyManifest
    ? path.join(bundleRoot, 'legacy-latest.json')
@@ -824,7 +717,6 @@ export async function generateUpdateManifest(
    `[ai-game-creator-shell] 渠道 ${channel}：已生成 ${manifestPath}`,
  );
  console.log(`[ai-game-creator-shell] 安装包：${artifact}`);
-  console.log(`[ai-game-creator-shell] 首装包：${downloadArtifact}`);
  console.log(
    manualNotes
      ? '[ai-game-creator-shell] 更新摘要：使用 AGC_UPDATE_RELEASE_NOTES 手动文案'
@@ -840,9 +732,7 @@ export async function generateUpdateManifest(
  }
  return {
    channel,
-    target,
    artifact,
-    downloadArtifact,
    manifest,
    manifestPath,
    notes,
--- a/Show More
+++ b/Show More