共享 CanvasWorld 统一超采样

默认以 2 倍内容分辨率渲染并保持 viewport.scale 的最终视觉比例用反向 stroke-width 抵消资源卡 SVG 图标的超采样线宽补充共享 CanvasWorld 超采样契约测试
补充共享画布超采样决策文档
2026-09-05 12:45:00 +08:00 · 2026-09-05 12:43:22 +08:00 · 2026-09-05 12:42:42 +08:00
2569 changed files with 227899 additions and 379467 deletions
@@ -5,7 +5,6 @@
 ## 目录约定

 - `.codex/skills/` 是项目专属 skill 根目录。每个 skill 以目录中的 `SKILL.md` 为入口，配套的参考资料和脚本放在同一目录下。
- `spec-driven-development` 负责跨模块、公开契约、SpacetimeDB、AGC/Runtime 和复杂 UI 任务的规范先行与逐里程碑验收；具体规则以 `docs/` 下的 SDD 工作流和模板为准。
 - `.codex/plugins/` 保存随仓库分发的项目插件资源及其参考资料。当前的 `game-studio` 插件提供浏览器游戏设计、原型、2D/3D 技术栈、素材管线和 playtest 工作流；是否启用遵循当前 Codex 的插件加载机制，不依赖旧工具的环境变量或个人配置脚本。
 - `.codex/hooks/`、`.codex/environments/` 等目录保存项目工具链所需的 hooks 和环境模板；它们不替代项目代码中的运行时配置。
 - 长期有效的产品、架构、接口、排障和协作知识统一放在 `docs/` 与 `docs/project-memory/`，不复制到本目录。
@@ -41,14 +41,3 @@
 ## 注意

 不同 enum 的 variant 顺序必须以生成 binding 或 module 源码为准，不能复用其他 enum 的索引映射。
-
-## 通用表查询页的枚举展示（2026-09-23 起）
-
-后台“表查询”（`#tables`）不再逐表硬编码枚举映射，改为按 schema 自动解析：
-
- api-server 在 `server-rs/crates/api-server/src/admin.rs` 读取 schema 的 `typespace.types` 和表的 `product_type_ref`，对每个“`Sum` 且所有变体都是单元变体（`Product.elements` 为空）”的列生成 `列名 -> [按变体索引排列的展示名]`，变体名归一到 snake_case。
- `Option<枚举>` 列单独标记为可空：`[0, [索引, []]]` 出变体名，`[1, []]` 仍是空值。`Option<普通值>` 与带载荷的 Sum 直接跳过，交回通用解码，避免把普通 `Option` 列误标成枚举名。
- 映射同时应用到 `cells` 与 `raw`，因此关键词搜索、结构化筛选、稳定排序解析到的都是展示名。
- 单变体枚举也要出名字；变体索引顺序以 schema 为准，不依赖生成 binding 的副本。
-
-因此新增表或新增枚举列无需再改后端映射，只要模块已发布且 schema 可读；如果 schema 读取失败，表查询会以“表不存在”失败，而不是退回展示数字。定向验证：`cargo test -p api-server --manifest-path server-rs/Cargo.toml --bin api-server admin_database`。
@@ -5,42 +5,130 @@ description: Guide use of Genarrative's hosted external editor/canvas MCP or asy

 # Genarrative External Editor API

-Use Genarrative to manage canvas projects and asset-library records, generate images, character animations, videos, and audio, and edit images. Discover the hosted integration at `https://www.genarrative.world/api/external/v1/agent-integration.json`.
+Discover the live integration through `GET https://www.genarrative.world/api/external/v1/agent-integration.json`. Treat `GET https://www.genarrative.world/api/external/v1/openapi.json` as the field-level source of truth. In this repository, the same contract is `docs/openapi/genarrative-external-v1.openapi.json`.

-Connect to `https://www.genarrative.world/api/external/v1/mcp` using Streamable HTTP and a Bearer API Key. Read tool descriptions and input schemas from `tools/list`; read the documents below through `resources/read` when needed. The hosted service needs no local MCP server. For direct REST, use the live `/api/external/v1/openapi.json` contract (in this repository: `docs/openapi/genarrative-external-v1.openapi.json`).
+Prefer the hosted Streamable HTTP MCP at `https://www.genarrative.world/api/external/v1/mcp` when the Agent supports remote MCP with a custom Bearer token. It exposes the External v1 operations as tools and the Skill documentation as resources; it does not require a local MCP server. Use this complete Skill package when remote MCP is unavailable or local-file upload needs client-side orchestration.

-## Working with the Service
+Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses only Python stdlib, reads the local private API Key file, keeps the production base URL fixed, uploads local references, and wraps asynchronous submission, polling, and result retrieval.

- Select tools by the requested outcome. Use `find_canvas_projects` and `find_assets` to locate existing context; create projects or folders only when the task needs them. A folder need not have the same name as the project.
- For generation, specify project, library, and `canvasCompletion` fields only as supported by the selected tool and needed for the requested destination. Do not duplicate records already created by generation.
- Upload local references using `prepare_asset_upload`: request a ticket, transfer the file from the client, then confirm the object. Confirmation does not create a canvas layer or a project/library record. Use the reference type accepted by the target tool; some operations require a registered resource or asset ID rather than an object key.
- Generation is paid and asynchronous. Keep one stable `idempotencyKey` per logical generation and retain the returned `operationId`. Call `check_generation` according to `pollAfterMs`; consume `result` only after `completed`, and report the safe error on `failed`. A polling timeout does not justify another generation.
- Read actual artifacts and warnings before claiming the requested deliverable is complete. Use project/library reads for complete persisted records, and `find_assets` with `action=get_download_url` for temporary media access.
- Keep API Keys and temporary upload/download credentials out of chat, repository files, and logs. Business calls operate within the API Key's owner and scopes.
+## Workflow
+
+1. Discover the integration manifest. Choose hosted MCP when supported; otherwise use the helper or direct REST.
+2. Before the first generation in a new conversation, obtain a canvas name unless an existing `projectId` and `assetFolderId` were supplied. Create or reuse a project and a same-name asset-library folder. Retain `canvasName`, `projectId`, `assetFolderId`, and the current art spec.
+3. Normalize art requests into a reusable spec. Ask only for missing values that block the selected operation. Reuse the spec until the user changes its style, subject family, palette, format, or constraints.
+4. Infer the operation from the user's intent. Do not ask the user to select an API unless two operations would produce materially different artifacts.
+5. If a reference exists only as a local file, upload and confirm it first. Pass the stable returned `objectKey` to operations that accept object references; never substitute a temporary signed URL. For an icon-spritesheet primary spec, additionally create a project resource or asset record with `assetKind="icon-spec"`, then pass the returned resource or asset ID as `referenceId`.
+6. For generation endpoints that support the fields, include `projectId`, `assetFolderId`, an asset label, and `canvasCompletion` so the result enters both the canvas and its same-name library folder.
+7. Treat every generation POST as asynchronous. Send one stable `Idempotency-Key` per logical request, retain the returned `operationId`, and poll the returned `statusUrl` or `GET /api/external/v1/generations/{operationId}` according to `pollAfterMs`.
+8. Consume `result` only after `status=completed`. On `failed`, surface the safe error. On a client timeout or lost response, retain the operation/key; do not create a replacement request.
+9. Reload the normal project or asset-library read endpoint when the caller needs complete authoritative state. Generation results are intentionally compact.
+10. Stay within `/api/external/v1`. Never call internal workers, queues, admin/profile APIs, or SpacetimeDB endpoints unless the user explicitly changes scope.
+
+## Essential Invariants
+
+- Authenticate MCP and business API calls with `Authorization: Bearer <tnr_sk_...>`. Never ask the user to paste a key into chat or place one in repository files.
+- All nine generation POST routes require `Idempotency-Key` and return HTTP `202`; `202` is durable acceptance, not a media result.
+- Retry an uncertain submission only with the exact same body and the same idempotency key. A polling timeout is not permission to generate again.
+- Use stable references such as `objectKey`, project resource ID, or asset ID where each operation permits them. Image edit/redraw is stricter: `sourceReferenceId` accepts only a registered project resource ID or asset ID; upload confirmation alone is not enough. Use `/assets/read-url` only for temporary preview/download access.
+- Preserve both warning channels after completion. A general `warning` can coexist with `sliceWarning`; do not discard either.
+- Do not invent missing derivatives. A source-preserved warning means the main source remains usable but requested post-processing failed. A slice warning means the complete transparent sheet is usable but individual slices are absent.
+- For successful `style="pixelArt"`, treat completed-result and nested resource/asset dimensions as the final logical-grid PNG dimensions. They may differ from `size`, `imageSize`, the provider image, and `canvasCompletion.placeholder`; do not rescale or reject the artifact to match those inputs.
+- Keep generated artifacts in the canvas and asset library together. Character animation accepts `assetFolderId` and `assetLabel`; its completed result directly returns the final `assetKind="character-animation"` resource and asset with formal sequence fields. Do not create a duplicate first-frame record.

 ## Documentation Navigation

-Read the reference relevant to the current operation; exact input fields and enums come from the tool schema or OpenAPI.
+Read only the references needed for the task, but always verify exact schemas and enums against live OpenAPI:

-| Need | Reference | MCP resource URI |
-| --- | --- | --- |
-| Choose tools and actions by user intent | [Capability routing](references/capability-routing.md) | `genarrative://external-editor/skill/references/capability-routing.md` |
-| Map tool calls to REST operations | [API operations](references/api-operations.md) | `genarrative://external-editor/skill/references/api-operations.md` |
-| Configure credentials, upload files, handle retries and deletion | [Authentication and safety](references/authentication-and-safety.md) | `genarrative://external-editor/skill/references/authentication-and-safety.md` |
-| Construct requests, poll results, place media, handle warnings | [Requests and outputs](references/requests-and-outputs.md) | `genarrative://external-editor/skill/references/requests-and-outputs.md` |
+- `references/capability-routing.md`: read before selecting an MCP tool or REST operation, creating a canvas session, or working in the AI game creator visual DAG.
+- `references/api-operations.md`: read when constructing project, canvas, asset-library, upload, generation, or generation-status calls.
+- `references/authentication-and-safety.md`: read before handling credentials, local files, OSS form upload, retries, private media, or logs.
+- `references/requests-and-outputs.md`: read before building generation payloads, polling, interpreting compact results, applying canvas completion, or handling post-processing warnings.

-`genarrative://external-editor/usage` contains the short service instructions; `genarrative://external-editor/openapi` contains the REST contract. This entry is available at `genarrative://external-editor/skill`. Reading a resource does not install the downloadable Skill or its Python helper.
+The hosted MCP exposes the same documents through:

-## Direct REST and Local Helpers
+- `genarrative://external-editor/skill`
+- `genarrative://external-editor/skill/references/capability-routing.md`
+- `genarrative://external-editor/skill/references/api-operations.md`
+- `genarrative://external-editor/skill/references/authentication-and-safety.md`
+- `genarrative://external-editor/skill/references/requests-and-outputs.md`
+- `genarrative://external-editor/openapi`

-When remote MCP is unavailable or local-file orchestration needs a helper, the complete package is available at `GET /api/external/v1/skill.zip`; the raw entry is at `GET /api/external/v1/skill/SKILL.md`. Verify the archive SHA-256 against the integration manifest before installing. The archive includes this entry, four references, `scripts/genarrative_external_api.py`, and `agents/openai.yaml`. Discovery and documentation downloads are public; MCP and business calls require authentication.
+## Hosted Integration Discovery

-The Python stdlib helper reads the private API Key file described in [authentication and safety](references/authentication-and-safety.md) and uses the production base URL. For a read-only smoke test:
+- Manifest: `GET /api/external/v1/agent-integration.json`.
+- Hosted MCP: `POST /api/external/v1/mcp`, Streamable HTTP, same Bearer API Key.
+- OpenAPI: `GET /api/external/v1/openapi.json`.
+- Raw Skill entry: `GET /api/external/v1/skill/SKILL.md`.
+- Complete Skill archive: `GET /api/external/v1/skill.zip`.
+
+The archive contains this main file, four one-level references, the Python helper, and `agents/openai.yaml`. Verify its SHA-256 against `agent-integration.json` before installing. Discovery, OpenAPI, and Skill downloads are public; MCP and business operations require authentication.
+
+## Python Helper
+
+Store the API Key outside the repository at `~/.config/genarrative/external-editor-api.json`:
+
+```json
+{
+  "apiKey": "tnr_sk_..."
+}
+```
+
+Set restrictive permissions where possible, then smoke-test without printing the key:

 ```bash
+chmod 600 ~/.config/genarrative/external-editor-api.json
 python3 .codex/skills/genarrative-external-editor-api/scripts/genarrative_external_api.py list-projects
 ```

-Its `prepare_canvas_session` convenience method creates or reuses a project and a same-name folder. Use it only when that organization matches the task; it is not a prerequisite for MCP or REST calls. Convenience generation methods wait locally while the server uses short asynchronous submit/status requests. Use `submit_generation`, `get_generation`, and `wait_for_generation` for caller-controlled orchestration; see [requests and outputs](references/requests-and-outputs.md).
+For a canvas-backed generation:

-Stay within `/api/external/v1` for this integration. Internal workers, queues, admin/profile APIs, and SpacetimeDB endpoints are outside this contract.
+```python
+from genarrative_external_api import GenarrativeExternalClient
+
+client = GenarrativeExternalClient()
+session = client.prepare_canvas_session("新画板")
+client.generate_image(
+    "生成一张 16:9 幻想森林游戏背景",
+    canvasSession=session,
+    assetLabel="森林背景",
+    aspectRatio="16:9",
+    imageSize="1K",
+    artSpec={
+        "assetType": "background",
+        "subject": "幻想森林主视觉",
+        "style": "手绘游戏概念图",
+        "palette": "翡翠绿与金色光斑",
+        "composition": "横版，中心留出角色站位",
+        "format": "16:9, 1K",
+        "constraints": "无文字、无 UI 按钮",
+        "references": [],
+    },
+)
+```
+
+For background removal, pass a stable owner-scoped object key, project resource ID, or asset ID; the helper keeps the same asynchronous submission and polling contract:
+
+```python
+session = client.prepare_canvas_session("去背景画布")
+client.remove_background(
+    "editor-upload/object.png",
+    source_width=720,
+    source_height=1280,
+    canvasSession=session,
+    assetLabel="去背景结果",
+)
+```
+
+Background removal preserves the source pixel size. For normal canvas placement with `canvasSession`, pass the real `source_width` and `source_height`, or provide both `canvasWidth` and `canvasHeight`; the helper rejects missing dimensions instead of guessing a square placeholder. `assetKind` may only describe a static image and must match the authoritative source record. Prefer a project resource ID or asset ID when the same object key has multiple semantic registrations; for a raw object key outside in-place replacement, pass `sourceResourceId` to disambiguate. Passing `targetLayerId` selects in-place replacement: the helper retains the session's project/library context but does not inject `canvasCompletion`, and it rejects an explicit `canvasCompletion` combined with `targetLayerId`. The target layer must point to the same authoritative object as the source, and the server durably binds a raw object key to that target resource for Worker revalidation.
+
+Helper convenience methods wait locally, but the server still uses short asynchronous submit/status requests. For durable caller-controlled orchestration, call `submit_generation`, persist its `operationId` and idempotency key, then call `get_generation` or `wait_for_generation`.
+
+For character animation, pass the canvas session and asset label to `animate_character`. The helper submits asynchronously and returns the completed compact result containing the authoritative formal `resource` and `asset`; do not synthesize a library asset from the first frame.
+
+## Guardrails
+
+- Do not change the fixed production base URL in generated examples.
+- Do not move the API Key into environment variables, source files, generated projects, logs, docs, screenshots, or shell snippets containing literal secrets.
+- Do not treat a Data URL, Blob URL, expiring signed URL, worker lease, or provider diagnostic as a durable result.
+- Do not reconstruct authoritative canvas, resource, or library snapshots from a compact generation response.
+- Do not replace icon-spritesheet generation with ordinary image generation when the deliverable requires a reusable transparent atlas.
@@ -4,44 +4,6 @@ Use this reference after selecting a capability. Treat `GET /api/external/v1/ope

 All paths below are relative to `https://www.genarrative.world`. Discovery and Skill download routes are public. Project, asset, upload, generation, and generation-query operations require the Bearer API Key.

-## MCP Tool to API Map
-
-The hosted MCP offers the following tools. Choose the task tool when its action matches the request; the operation tool calls the indicated REST operation directly. Task tools with actions take `{ "action": "...", "input": { ... } }`; tools without actions take the operation fields directly. `idempotencyKey` is top-level in task tools. Operation tools use `body`, `pathParameters`, and `queryParameters` wrappers from their live input schemas. Read the live tool schema and OpenAPI for exact required fields.
-
-| REST operation | Task tool (action) | Operation tool |
-| --- | --- | --- |
-| `GET /api/external/v1/openapi.json` | — | `get_external_open_api_json` |
-| `GET /api/external/v1/editor/projects` | `find_canvas_projects` (`list`) | `list_editor_projects` |
-| `GET /api/external/v1/editor/projects/recent` | `find_canvas_projects` (`recent`) | `load_recent_editor_project` |
-| `GET /api/external/v1/editor/projects/{projectId}` | `find_canvas_projects` (`get`), `find_assets` (`get_project_resources`), `edit_canvas` (`get`) | `get_editor_project` |
-| `POST /api/external/v1/editor/projects` | `manage_canvas_projects` (`create`) | `create_editor_project` |
-| `PATCH /api/external/v1/editor/projects/{projectId}/metadata` | `manage_canvas_projects` (`rename`) | `rename_editor_project` |
-| `DELETE /api/external/v1/editor/projects/{projectId}` | `delete_resources` (`delete_project`) | `delete_editor_project` |
-| `PATCH /api/external/v1/editor/projects/{projectId}/canvas` | `edit_canvas` (`save_layout`) | `save_editor_project_canvas` |
-| `POST /api/external/v1/editor/projects/{projectId}/resources` | `edit_canvas` (`register_resource`) | `create_editor_project_resource` |
-| `POST /api/external/v1/assets/direct-upload-tickets` | `prepare_asset_upload` (`create_upload_ticket`) | `create_external_direct_upload_ticket` |
-| `POST /api/external/v1/assets/objects/confirm` | `prepare_asset_upload` (`confirm_upload`) | `confirm_external_asset_object` |
-| `GET /api/external/v1/assets/read-url` | `find_assets` (`get_download_url`) | `get_external_asset_read_url` |
-| `GET /api/external/v1/editor/assets/library` | `find_assets` (`list_library`) | `get_editor_asset_library` |
-| `POST /api/external/v1/editor/assets/folders` | `organize_asset_library` (`create_folder`) | `create_editor_asset_folder` |
-| `PATCH /api/external/v1/editor/assets/folders/{folderId}` | `organize_asset_library` (`update_folder`) | `update_editor_asset_folder` |
-| `DELETE /api/external/v1/editor/assets/folders/{folderId}` | `delete_resources` (`delete_folder`) | `delete_editor_asset_folder` |
-| `POST /api/external/v1/editor/assets` | `organize_asset_library` (`create_asset`) | `create_editor_asset` |
-| `PATCH /api/external/v1/editor/assets/{assetId}` | `organize_asset_library` (`update_asset`) | `update_editor_asset` |
-| `DELETE /api/external/v1/editor/assets/{assetId}` | `delete_resources` (`delete_asset`) | `delete_editor_asset` |
-| `POST /api/external/v1/editor/images/generations` | `generate_image`, `modify_image` (`variation`, fixed `kind="quick-edit"`) | `generate_external_editor_image` |
-| `POST /api/external/v1/editor/images/edits` | `modify_image` (`edit`) | `edit_external_editor_image` |
-| `POST /api/external/v1/editor/images/background-removals` | `modify_image` (`remove_background`) | `remove_external_editor_image_background` |
-| `POST /api/external/v1/editor/icon-spritesheets/generations` | `generate_icon_spritesheet` | `generate_external_editor_icon_spritesheet` |
-| `POST /api/external/v1/editor/ui-designs/assets/extractions` | `extract_ui_assets` | `extract_external_editor_ui_design_assets` |
-| `POST /api/external/v1/editor/character-animations/generations` | `generate_character_animation` | `generate_external_editor_character_animation` |
-| `POST /api/external/v1/editor/videos/generations` | `generate_video` | `generate_external_editor_video` |
-| `POST /api/external/v1/editor/audios/sound-effects/generations` | `generate_audio` (`sound_effect`) | `generate_external_editor_sound_effect` |
-| `POST /api/external/v1/editor/audios/background-music/generations` | `generate_audio` (`background_music`) | `generate_external_editor_background_music` |
-| `GET /api/external/v1/generations/{operationId}` | `check_generation` | `get_external_editor_generation_job` |
-
-The public `agent-integration.json`, `skill/SKILL.md`, and `skill.zip` routes and the MCP transport route are HTTP entry points, not callable MCP tools. The hosted resource URIs remain `genarrative://external-editor/skill`, `genarrative://external-editor/skill/references/capability-routing.md`, `genarrative://external-editor/skill/references/api-operations.md`, `genarrative://external-editor/skill/references/authentication-and-safety.md`, `genarrative://external-editor/skill/references/requests-and-outputs.md`, and `genarrative://external-editor/openapi`.
-
 ## Project and Canvas Operations

 | Operation            | Method and path                                               | Minimum input                                                  |
@@ -61,7 +23,7 @@ Project listing supports two views:

 - `view=full` is the REST default and returns the complete project, canvas, layers, and resources.
 - `view=summary` returns only `projectId`, `title`, `updatedAt`, and nullable `cover`, so callers can display, search, disambiguate same-name projects, and select a safe target without loading every canvas snapshot.
- Hosted MCP `list_editor_projects` and `find_canvas_projects` (`list`) use `summary`; call `get_editor_project` or `find_canvas_projects` (`get`) after selecting a `projectId` when complete authoritative state is required.
+- Hosted MCP `list_editor_projects` always uses `summary`; call `get_editor_project` after selecting a `projectId` when complete authoritative state is required.
 - `cover` contains only `resourceId`, stable `objectKey`, dimensions, and `updatedAt`. It never embeds image bytes, a Data URL, or a signed URL. To display it, pass `cover.objectKey` to `get_external_asset_read_url`; signed URLs are temporary and must not be persisted or reused as generation references.

 ## Asset and Upload Operations
@@ -80,7 +42,6 @@ Project listing supports two views:
 | Delete asset record         | `DELETE /api/external/v1/editor/assets/{assetId}`          | `assetId`                                                        |

 Upload is a three-step client flow: create a ticket, POST the file and returned fields directly to the OSS form endpoint, then confirm the returned `objectKey`. See `authentication-and-safety.md` before implementing this flow.
-`prepare_asset_upload` handles the ticket and confirmation as separate calls; it does not send local bytes to OSS or automatically register a project resource, asset record, or canvas layer. `manage_canvas_projects` (`create`) likewise does not create a same-name asset folder. Register or organize records only when the task needs them.

 ## Generation Operations

@@ -91,7 +52,7 @@ Every generation row requires a stable `Idempotency-Key` header and returns HTTP
 | Image generation    | `/api/external/v1/editor/images/generations`                  | `prompt`                                                                                                                                        | `kind`, `style`, `model`, `aspectRatio`, `imageSize`, `size`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
 | Image edit/redraw   | `/api/external/v1/editor/images/edits`                        | `prompt`, `sourceReferenceId`                                                                                                                   | `referenceImageSrcs`, `model`, `size`, `projectId`, `assetFolderId`, `assetLabel`, `targetLayerId`, `canvasCompletion`                                                 |
 | Background removal  | `/api/external/v1/editor/images/background-removals`          | `sourceImageSrc`                                                                                                                                | `projectId`, `sourceResourceId`, `targetLayerId`, static-image `assetKind`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs`                      |
-| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`, `sliceMode`                                                                                                  | `gridX`, `gridY`, `sliceCount`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
+| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`                                                                                                               | `sliceLayout`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
 | UI asset extraction | `/api/external/v1/editor/ui-designs/assets/extractions`       | `sourceImageSrc`, `aspectRatio`, `imageSize`                                                                                                    | `screenColor`, `model`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `spritesheetLabel`, `canvasCompletion`                                                     |
 | Character animation | `/api/external/v1/editor/character-animations/generations`    | `sourceLayerId`, `sourceImageSrc`, `sourceWidth`, `sourceHeight`, `promptText`, `resolution`, `ratio`, `frameCount`, `durationSeconds`, `model` | `projectId`, `sourceResourceId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                                                                                     |
 | Video generation    | `/api/external/v1/editor/videos/generations`                  | `prompt`, `model`, `aspectRatio`, `durationSeconds`, `resolution`, `mode`, `sound`                                                              | `referenceImageSrcs`, `referenceVideoSrcs`, `referenceAudioSrcs`, `webSearchEnabled`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                   |
@@ -108,10 +69,10 @@ Supply the `operationId` returned by submission. Poll no faster than `pollAfterM

 ## Canvas and Library Field Rules

- Pass `projectId` and `canvasCompletion` when the task calls for generated output in a canvas.
- Pass `assetFolderId` plus the relevant label field when the task calls for a library record. Neither destination requires the other, and their names need not match.
+- Pass `projectId` and `canvasCompletion` to write generated output into the canvas.
+- Pass `assetFolderId` plus `assetLabel` for image, edit, icon spritesheet, video, sound effect, and BGM operations when supported.
 - UI extraction uses `assetFolderId` and `spritesheetLabel`.
- Character animation accepts `assetFolderId` and `assetLabel` and persists the generated sequence. Consume returned artifacts and persisted identities; never create a duplicate first-frame resource or asset.
+- Character animation accepts `assetFolderId` and `assetLabel`. Its completed compact result directly returns the final `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`; never create a duplicate first-frame resource or asset.
 - Background removal derives the final static-image `assetKind` from the authoritative source record. A conflicting request kind or any video, audio, animation, or image-sequence kind returns `400` before queueing. Without `canvasCompletion`, `targetLayerId` must point to the same authoritative object as `sourceImageSrc` (prefer `assetObjectId`, otherwise canonical bucket/object key).
 - If a caller must manually create a `character-animation` resource or asset, put the authoritative frames and total sequence duration in `imageSequenceFrames` and `imageSequenceDurationMs`. Keep `generationInputs` replayable: it must not contain legacy runtime fields such as `characterAnimation`, `frames`, `previewVideoPath`, `frameCount`, `fps`, or `durationSeconds`.
 - Reload project/library state after completion when full current state is required.
@@ -133,7 +94,7 @@ For image edit/redraw, confirming an upload is not sufficient: create a project

 The icon-spritesheet primary `referenceId` is intentionally stricter than ordinary image references: it accepts only a current-owner project resource ID or asset ID whose authoritative `assetKind` is `icon-spec`. It does not accept an `objectKey`, URL, Data URL, or Blob URL.

-`sliceMode` is required and has no default, so every request must state it. Use `"connected-components"` to detect independent opaque regions by alpha connectivity, or `"grid"` with positive `gridX` and `gridY` values (maximum 32 each) only when the requirement names equal grid cells or fixed slots; the dimensions must come from that requirement. `connected-components` must not carry `gridX`/`gridY`, and `sliceCount` constrains the connected-component result instead of expressing a grid. Omitting `sliceMode`, or contradicting the declared mode with grid dimensions, returns 400 before pricing, enqueueing, or any provider call.
+`sliceLayout: "grid-2x2"` is an opt-in contract for four fixed game-runtime assets. The provider prompt and server persistence both preserve the ordered slots left-top, right-top, left-bottom, right-bottom. Omit it to retain the default connected-component slicing behaviour for ordinary free-form icon sheets.

 ## Common Values

@@ -21,7 +21,7 @@ Authorization: Bearer <tnr_sk_...>

 Guide a logged-in user to create a key in the product UI under `开发者 API Key`. The raw key is shown only once. Never ask the user to paste it into chat.

-For hosted MCP, configure the Bearer token in the client's private connection settings. For the bundled REST helper, store it outside repositories in the user's private JSON file:
+Store it outside repositories in the user's private JSON file:

 ```text
 ~/.config/genarrative/external-editor-api.json
@@ -61,7 +61,7 @@ The OpenAPI document, integration manifest, raw Skill entry, and Skill archive a

 For each logical generation:

-1. Create one printable ASCII key of 1-128 bytes. MCP takes `idempotencyKey` at the top level of the tool arguments (outside `input`); REST takes the `Idempotency-Key` header.
+1. Create one printable ASCII `Idempotency-Key` of 1-128 bytes.
 2. Persist the key with the exact request body and returned `operationId`.
 3. If submission transport fails or the response is lost, resend only the exact same body with the same key.
 4. Never allocate a new key merely because the outcome is unknown.
@@ -69,21 +69,15 @@ For each logical generation:

 Treat a different body under the same key as invalid. Do not automatically replay a failed terminal generation unless the user intentionally requests a new logical generation.

-Keep the API operation as well as the request and key unchanged across a submission retry. A different tool name does not create a separate idempotency namespace. When an operation ID is known, query `check_generation` directly. A rejected submission is not permission to switch keys and generate again.
-
-`manage_canvas_projects/create`, `edit_canvas/register_resource`, and `organize_asset_library/create_folder` accept optional top-level `idempotencyKey`. Other non-generation actions do not accept it; in particular, `create_asset` is not an idempotent generation submission.
-
 ## Local Reference Upload

 Do not ask the user to convert local files to base64. Upload from the Agent/client machine:

 1. Detect the original filename, MIME type, byte length, and image dimensions when relevant.
-2. Call `prepare_asset_upload` with `action=create_upload_ticket` and the ticket body in `input` (REST: `POST /api/external/v1/assets/direct-upload-tickets`).
+2. Create a ticket with `POST /api/external/v1/assets/direct-upload-tickets`.
 3. POST all returned non-null `formFields` and the file part named `file` directly to `upload.host`.
-4. Call `prepare_asset_upload` with `action=confirm_upload` and the confirmation body in `input` (REST: `POST /api/external/v1/assets/objects/confirm`).
-5. Pass the confirmed stable `objectKey` where the selected tool permits it. For operations requiring a registered source, register a project resource or asset first and use its ID.
-
-The MCP tool does not transfer file bytes and does not accept a local path or base64. The client needs an HTTP/file-transfer capability for step 3. Object ownership comes from the API Key; do not supply `ownerUserId`. Confirmation alone creates neither a library record nor a canvas layer.
+4. Confirm the object with `POST /api/external/v1/assets/objects/confirm`.
+5. Pass the confirmed stable `objectKey` to the selected editor operation.

 For a private reference image, use a ticket body shaped like:

@@ -113,7 +107,7 @@ Confirm with the actual file metadata:

 `contentLength` is a JSON number in bytes, not a quoted string. Never invent `sourceWidth` or `sourceHeight`; read them from the local image or ask the user if they cannot be determined.

-For character animation, use source identity and dimensions from the actual selected resource; do not invent an existing canvas layer. The bundled local-file helper can maintain its own stable source label, which is not evidence of a persisted canvas layer.
+For character animation, reuse a real canvas layer ID when available. For a local-only source, derive a stable synthetic `sourceLayerId`, such as `external-reference-hero`, from the filename and keep it unchanged across retries.

 The bundled helper implements ticket creation, a stdlib multipart upload, confirmation, dimension detection for common formats, and stable source-layer IDs:

@@ -132,7 +126,7 @@ Do not print the complete confirmation response if it may contain temporary acce
 - Use `objectKey`, project resource ID, asset ID, or an allowed durable public URL for generation input.
 - Use a Data URL only when the endpoint explicitly allows it and the caller has a deliberate reason; do not persist it as a durable output.
 - Never use a Blob URL outside the browser process that created it.
- Use `find_assets` with `action=get_download_url` (REST: `GET /api/external/v1/assets/read-url`) to obtain a short-lived `signedUrl` for display/download. This returns a URL; the client still performs any download.
+- Use `GET /api/external/v1/assets/read-url` to obtain a short-lived `signedUrl` for display/download.
 - Never store or feed an expiring signed URL back into generation when a stable `objectKey` exists.

 ## Logging and Command Safety
@@ -145,8 +139,6 @@ Do not print the complete confirmation response if it may contain temporary acce

 ## Scope and Retry Guardrails

- Generation spends account credits. Respect the user's authorized task and scope; do not restart generation merely because a requested derivative is missing.
- For `delete_resources`, identify the precise IDs and obtain authorization for the actual deletion scope. Project deletion cascades to its default canvas and project-resource metadata. Folder deletion moves its assets to the default folder; the default folder cannot be deleted. Deleting a folder or asset record does not delete the underlying OSS file.
 - Do not use account JWT/profile endpoints as the default external integration. Logged-in profile APIs may create/revoke developer keys, but they are outside this external editor contract.
 - Do not call internal workers, queues, SpacetimeDB, or admin endpoints.
 - Do not bypass upload confirmation or invent an object key.
@@ -10,17 +10,21 @@ Use this reference to translate user intent into a hosted MCP tool or its corres
 - Public contract: `GET /api/external/v1/openapi.json`.
 - Skill fallback: `GET /api/external/v1/skill/SKILL.md` or `GET /api/external/v1/skill.zip`.

-Prefer MCP when the Agent supports a remote endpoint plus a custom Bearer token. Prefer the complete Skill and Python helper when MCP is unavailable or a client-side local-file upload must be orchestrated. Choose a task-oriented tool below for ordinary requests, or the corresponding operation tool in [API Operations](api-operations.md) when the request needs direct control of one REST call. All 44 tools remain available. Discover the live tool schema before calling it; OpenAPI remains the field-level authority. The public discovery and Skill download routes are listed below, but are not MCP tools.
+Prefer MCP when the Agent supports a remote endpoint plus a custom Bearer token. Prefer the complete Skill and Python helper when MCP is unavailable or a client-side local-file upload must be orchestrated. The MCP tool names are derived from OpenAPI `operationId` values in snake case; select by capability instead of memorizing the name.

-## Project and Asset Destination
+## Canvas Session

-Use `find_canvas_projects` (`action=list`, `recent`, or `get`) to locate an existing canvas when the request involves one. Use `manage_canvas_projects` (`create` or `rename`) only when the user needs a project created or renamed. A new project does not create an asset folder automatically. Use `find_assets` and `organize_asset_library` when the task involves library records or folders. A project and folder may have different names, and either may be unnecessary for a standalone generation.
+Before the first generation in a new conversation, obtain a canvas name unless the user already supplied an existing `projectId` and `assetFolderId`.

-For generation, pass `projectId` with `canvasCompletion` when the result should enter a canvas, and `assetFolderId` with the endpoint's label field when it should enter the library. Use both only when the task requires both destinations. Character animation returns its final resource and asset directly when those destinations are requested; do not duplicate its first frame.
+1. List or create a project. When creating one, use the canvas name as `title`.
+2. Read the asset library. Reuse a folder with the same label or create one with the canvas name.
+3. Retain `canvasName`, `projectId`, `assetFolderId`, and the current art spec in conversation state.
+
+Generated artifacts must enter both the current canvas and its same-name library folder whenever the endpoint supports that invariant. Pass `projectId`, `assetFolderId`, the endpoint's label field, and `canvasCompletion`. Character animation returns the final formal resource and asset directly; use those records and never create a duplicate from the first frame.

 ## Art Spec Routing

-For a series of related art requests, an optional reusable spec can carry the shared requirements:
+Before art generation, normalize the user's request into:

 ```json
 {
@@ -39,48 +43,48 @@ Infer what is already clear and ask only for missing fields that block the selec

 ## Intent Map

-| User intent | MCP tool and action |
-| --- | --- |
-| Find, open, create, or rename a canvas project | `find_canvas_projects` (`list`, `recent`, `get`); `manage_canvas_projects` (`create`, `rename`) |
-| Read project resources or library records | `find_assets` (`get_project_resources`, `list_library`) |
-| Create or change folders and asset records | `organize_asset_library` (`create_folder`, `update_folder`, `create_asset`, `update_asset`) |
-| Upload a local image/audio/video asset | `prepare_asset_upload` (`create_upload_ticket`), client-side OSS form upload, then `prepare_asset_upload` (`confirm_upload`) |
-| Register existing media in a project, read a canvas, or save its full layout | `edit_canvas` (`register_resource`, `get`, `save_layout`) |
-| Generate a background, character, spec, UI mockup, or publication image | `generate_image` |
-| Retouch an existing image, make a reference variation, or remove its background | `modify_image` (`edit`, `variation`, `remove_background`) |
-| Build a transparent icon/game atlas from a registered visual spec | `generate_icon_spritesheet` |
-| Generate marked assets from an existing UI design | `extract_ui_assets` |
-| Animate a character into frames | `generate_character_animation` |
-| Generate video | `generate_video` |
-| Generate a sound effect or background music | `generate_audio` (`sound_effect`, `background_music`) |
-| Check generation progress or retrieve its result | `check_generation` |
-| Obtain temporary access to private media | `find_assets` (`get_download_url`) |
-| Delete an exact project, folder, or asset record | `delete_resources` (`delete_project`, `delete_folder`, `delete_asset`) |
-
-For tools with actions, send `{ "action": "...", "input": { ... } }`; place `idempotencyKey` at the top level when supported or required. Tools without actions accept operation fields directly, with `idempotencyKey` at the top level for generation. The direct operation tools use `body`, `pathParameters`, and `queryParameters` wrappers as shown by their live schemas.
+| User intent                                                             | MCP/REST capability                                              |
+| ----------------------------------------------------------------------- | ---------------------------------------------------------------- |
+| Generate a background, character, spec, UI mockup, or publication image | Image generation                                                 |
+| Redraw, retouch, or replace an existing image                           | Image edit                                                       |
+| Remove the background from an existing image                            | Background removal                                               |
+| Generate from a local reference                                         | Upload and confirm the local file, then image generation or edit |
+| Build a reusable transparent icon/game atlas from a visual spec         | Icon spritesheet generation                                      |
+| Extract marked assets from an existing UI design                        | UI design asset extraction                                       |
+| Animate a character into frames                                         | Character animation generation                                   |
+| Generate video                                                          | Video generation                                                 |
+| Generate a sound effect                                                 | Sound-effect generation                                          |
+| Generate background music/BGM                                           | Background-music generation                                      |
+| Upload a local image/audio/video asset                                  | Upload ticket -> OSS form upload -> object confirm               |
+| Save viewport/layers                                                    | Canvas save                                                      |
+| Create, load, rename, or delete a canvas                                | Project operations                                               |
+| Organize folders and asset records                                      | Asset-library operations                                         |
+| Obtain temporary access to private media                                | Signed read URL                                                  |
+| Check generation progress or retrieve its result                        | Generation query                                                 |

 Do not present an API menu unless the request is genuinely ambiguous. Ask a follow-up when two routes create different artifacts, for example “处理这张图” could mean edit, extract marked UI assets, or use it as a reference for a new generation.

 ## Route-Specific Decisions

- Use `modify_image` `edit` when the requested output modifies a registered source image. Use `variation` when reference images should guide a new `quick-edit` image; it is image generation with fixed `kind="quick-edit"`. Use `remove_background` for a static source image. With `projectId`, `targetLayerId` may replace a matching existing layer when no explicit `canvasCompletion` is supplied.
+- Use image edit when the requested output replaces or modifies a source image. With `projectId`, pass `targetLayerId` to replace an existing layer when no explicit `canvasCompletion` is supplied.
 - Use icon spritesheet generation for a transparent reusable atlas when a stable visual-spec reference and concrete `iconDescriptions` exist. Do not use ordinary image generation just because it can draw several objects.
 - Use UI extraction only for an existing UI design image with red-box annotations. It is not UI generation.
- Character animation requires a real `sourceLayerId`, source image, and dimensions from an existing resource. A local-only file must first be uploaded and registered where needed; do not invent a layer ID.
+- Use a project layer ID as character animation `sourceLayerId` when one exists. For a local-only source, derive a stable synthetic ID from the filename.
 - For video with image/video/audio references, use a Seedance 2.0-family model; default to `seedance2.0-fast`, `mode: "std"`, and explicit `sound`.
- `prepare_asset_upload` obtains a ticket and confirms an uploaded object; it does not transfer the file or register a project resource, asset record, or canvas layer. Use `edit_canvas` `register_resource` or `organize_asset_library` `create_asset` only when the task needs those records.
- Use temporary signed URLs only for preview/download. Feed stable `objectKey` or registered resource/asset identifiers into generation as each operation permits.
+- Use `signedUrl` only for preview/download. Feed stable `objectKey` or registered resource/asset identifiers into generation.

-## Example: Reusable Icon Assets
+## AI Game Creator Canonical Visual DAG

-When the task needs a visual spec and a reusable icon atlas:
+Keep the existing autonomous-build task graph. Do not add a parallel task system or collapse these artifacts into one ordinary generation request:

-1. Reuse an existing registered `icon-spec`, or generate the requested spec using `generate_image` with `kind=spec` and register it as `assetKind=icon-spec` if necessary.
-2. Call `generate_icon_spritesheet` with that registered ID as `referenceId`, concrete `iconDescriptions`, and explicit `sliceMode`. Choose `grid` only for requested equal cells or fixed slots and provide those `gridX`/`gridY` values; otherwise use `connected-components`, optionally with `sliceCount`.
-3. Query `check_generation` and inspect the full sheet and actual slices. Preserve warnings; a usable full sheet does not imply that individual slices exist. Use returned slice identities and dimensions rather than guessing crop coordinates.
+1. `art-director` generates `assets/art-spec.png` with image generation, `kind: "spec"`, then registers it as `assetKind: "icon-spec"`. This image is the authoritative visual spec; `generationInputs.artSpec` is supporting structured context.
+2. `design-foundation` generates `assets/ui-prototype.png` with `kind: "ui-design"`, using the registered art-spec resource ID in `referenceImageSrcs`.
+3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. For the four-category game contract it must also send `sliceLayout: "grid-2x2"`; this is an explicit fixed-slot contract, not a client-side guessed crop.

-An ordinary UI mockup or uploaded image is not automatically an `icon-spec`. For extracting marked components from a UI design, use `extract_ui_assets`, which includes generation and does not promise pixel-exact cropping.
+For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. For the four-category game-chat contract, require response `sliceLayout: "grid-2x2"` and exactly four slices before registering the local runtime sheet; both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
+
+Never use `assets/ui-prototype.png` as the spritesheet visual-spec reference. UI extraction is outside this canonical DAG.

 ## Scope Boundary

-Stay within `/api/external/v1`. Do not invent worker, queue, runtime task-list, admin, profile, or SpacetimeDB calls. The only external generation query is `GET /api/external/v1/generations/{operationId}`. The hosted MCP also exposes the Skill and OpenAPI resources at `genarrative://external-editor/skill`, its four `skill/references/*.md` URIs, and `genarrative://external-editor/openapi`; keep those URI names unchanged.
+Stay within `/api/external/v1`. Do not invent worker, queue, runtime task-list, admin, profile, or SpacetimeDB calls. The only external generation query is `GET /api/external/v1/generations/{operationId}`.
@@ -4,46 +4,15 @@ Use this reference to build generation payloads, carry canvas/library context, p

 ## Contents

- [MCP Argument Shapes](#mcp-argument-shapes)
 - [Asynchronous Submission](#asynchronous-submission)
 - [Polling State Machine](#polling-state-machine)
 - [Canvas and Asset-Library Completion](#canvas-and-asset-library-completion)
- [Saving Existing Canvas Layout](#saving-existing-canvas-layout)
 - [Art Spec and Image Request](#art-spec-and-image-request)
 - [Local Reference Requests](#local-reference-requests)
 - [Compact Completed Result](#compact-completed-result)
 - [Warning Semantics](#warning-semantics)
 - [Output Handling Checklist](#output-handling-checklist)

-## MCP Argument Shapes
-
-Pass these objects as the `arguments` of the named tool in `tools/call`. They are not REST request envelopes.
-
-Single-function tools take business fields directly. For example, `generate_image`:
-
-```json
-{
-  "prompt": "一张横版幻想森林背景，无文字",
-  "aspectRatio": "16:9",
-  "imageSize": "1K",
-  "idempotencyKey": "forest-image-001"
-}
-```
-
-Multi-function tools take `action` and `input`. A generation key stays outside `input`. For example, `generate_audio`:
-
-```json
-{
-  "action": "sound_effect",
-  "input": {"prompt": "轻柔的游戏菜单确认音", "duration": 1},
-  "idempotencyKey": "menu-sound-001"
-}
-```
-
-Keys above identify distinct example requests; create and persist your own key for each new logical generation. An action with no business fields still requires `input: {}`, such as `find_canvas_projects` with `action=list`. Use only fields belonging to the selected action; do not combine branches. REST examples below use the business body directly and put the key in the HTTP header instead.
-
-MCP returns business data in `structuredContent`, without the REST `data` envelope. Check `isError` before using it; an HTTP-successful MCP exchange can still carry a tool error. Generation acceptance contains an `operationId`, not the final media.
-
 ## Asynchronous Submission

 All nine generation POST routes require `Idempotency-Key` and return HTTP `202` with an `ExternalEditorGenerationSubmissionResponse` shaped like:
@@ -81,7 +50,7 @@ Persist the key, exact request body, and `operationId`. If submission outcome is

 ## Polling State Machine

-With MCP, call `check_generation` with `{"operationId":"<returned operationId>"}`. Each call queries once and does not wait for completion. With REST, poll `statusUrl` or `GET /api/external/v1/generations/{operationId}`. Query no faster than `pollAfterMs`:
+Poll `statusUrl`, or `GET /api/external/v1/generations/{operationId}`, no faster than `pollAfterMs`:

 - `queued` / `running`: retain `operationId`; show `phaseLabel`, `phaseDetail`, and `progress` when present; wait before querying again.
 - `completed`: consume the compact `result` and all warning fields, then stop polling.
@@ -106,10 +75,10 @@ Background removal uses the same submission and polling state machine. `sourceIm

 ## Canvas and Asset-Library Completion

-Choose destinations according to the task. Locate an existing project with `find_canvas_projects` and inspect folders with `find_assets/list_library`; create missing destinations with `manage_canvas_projects/create` and `organize_asset_library/create_folder` only when needed. Project creation does not create a folder. For endpoints that support the requested destinations, include:
+For endpoints that support these fields, include:

 - `projectId`: target canvas project.
- `assetFolderId`: target asset-library folder; its name need not match the project.
+- `assetFolderId`: folder whose label matches the canvas name.
 - `assetLabel` or UI extraction's `spritesheetLabel`: user-visible library label.
 - `canvasCompletion`: backend canvas placement instructions.

@@ -133,24 +102,15 @@ A minimal `canvasCompletion` is:

 Background removal preserves the source image dimensions. For normal canvas placement, the Python helper therefore requires the real `source_width` and `source_height` whenever `canvasSession` is used without an explicit `canvasWidth` plus `canvasHeight`; it never substitutes a square default. Passing `targetLayerId` instead selects in-place replacement, so the helper keeps the session's project/library fields without injecting `canvasCompletion` and rejects callers that explicitly combine both placement modes. The request `assetKind` is optional, static-image only, and must equal the authoritative source type when one exists. An in-place target must resolve to the same authoritative source object; a raw object key is bound to that target resource instead of relying on project-list order.

-Character animation accepts `assetFolderId` and `assetLabel` and persists the generated sequence. Consume the returned animation artifacts and persisted identities; do not synthesize a duplicate animation asset from the first frame. Use complete project/library records when complete persisted state is needed.
+Character animation accepts `assetFolderId` and `assetLabel` and persists the final transparent sequence directly. Its completed compact result includes the authoritative `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`. Use those records directly and never synthesize a duplicate asset from the first frame.

 For the lower-level asset/resource creation endpoints, `generationInputs` is replayable request context rather than a media-runtime container. When `assetKind` is `character-animation`, the server rejects legacy runtime keys including `characterAnimation`, `frames`, `previewVideoPath`, `frameCount`, `fps`, and `durationSeconds`; send the formal sequence through `imageSequenceFrames` and `imageSequenceDurationMs`. Internal processing audit keys such as `screenColorHex`, `mattingProvider`, and `mattingModel` are removed before persistence.

-## Saving Existing Canvas Layout
-
-1. Call `edit_canvas` with `action=get` and `input.projectId` to read the latest project and canvas revision.
-2. Build the intended complete `viewport` and `layers`, preserving unrelated layers. `save_layout` replaces the layout; it is not a one-layer patch.
-3. Call `edit_canvas` with `action=save_layout` and `input` containing `projectId`, the read `expectedRevision`, and the complete `viewport` and `layers`.
-4. On a revision conflict, reread and reconcile with the current layout before retrying. Do not blindly resend stale layers with a refreshed revision.
-
-`edit_canvas/register_resource` registers existing media but does not create a canvas layer. `organize_asset_library/create_asset` creates metadata but does not upload or generate media. For generated media placement, prefer the generation tool's supported `canvasCompletion`; inspect returned identities before registering anything again.
-
 ## Art Spec and Image Request

 Generic External v1 image generation does not expose the main-site structured game-scene contract. `kind: "scene"` and `assetKind: "scene"` are both invalid and return HTTP `400` before any generation job is queued. Do not replace the structured scene fields and server-owned prompt assembly with a generic image prompt.

-When maintaining a reusable art spec, carry it in `generationInputs.artSpec` and reflect important constraints in the prompt. This is an example with both canvas and library destinations, not a requirement for every generation:
+Carry the current art spec in `generationInputs.artSpec` and reflect important constraints in the prompt:

 ```json
 {
@@ -217,11 +177,11 @@ Image edit/redraw has a stricter main-source identity rule. After upload confirm

 Icon spritesheet generation has a stricter primary-spec contract. After upload confirmation, create a project resource or asset record with `assetKind: "icon-spec"`, retain its returned `resourceId` or `assetId`, and pass that ID as `referenceId`. The primary spec does not accept the uploaded `objectKey` directly; only additional style references may continue to use stable object keys in `referenceImageSrcs`.

-For character animation, use the selected source identity and actual dimensions. The following is a business-body example; `generate_character_animation` also requires a top-level `idempotencyKey`:
+For character animation from a local-only source, use actual dimensions and a stable synthetic layer ID:

 ```json
 {
-  "sourceLayerId": "<selected source layer ID>",
+  "sourceLayerId": "external-reference-hero",
  "sourceImageSrc": "<confirmed objectKey>",
  "sourceWidth": 720,
  "sourceHeight": 1280,
@@ -249,7 +209,7 @@ The completed `result` may contain stable artifact fields such as:
 - `spritesheetResource`, `spritesheetAsset`, and stable spritesheet metadata.
 - `warning` and `sliceWarning` structures.

-It deliberately excludes a complete project/canvas/library snapshot, Data URL, Blob URL, expiring signed URL, worker lease, queue state, and internal provider diagnostics. Use `find_assets/get_download_url` for temporary access to a stable `objectKey` (REST: `/assets/read-url`). Reading a record or obtaining a URL does not itself inspect or download the media.
+It deliberately excludes a complete project/canvas/library snapshot, Data URL, Blob URL, expiring signed URL, worker lease, queue state, and internal provider diagnostics. Use `/assets/read-url` for temporary access to a stable `objectKey`.

 ## Warning Semantics

@@ -617,7 +617,6 @@ class GenarrativeExternalClient:
        self,
        reference_id: str,
        icon_descriptions: list[str],
-        slice_mode: str,
        **fields: Any,
    ) -> Any:
        reference_id = normalize_optional_text(reference_id)
@@ -626,20 +625,6 @@ class GenarrativeExternalClient:
        descriptions = [item.strip() for item in icon_descriptions if item.strip()]
        if not descriptions:
            raise GenarrativeApiError("icon_descriptions must contain at least one non-empty item")
-        slice_mode = normalize_optional_text(slice_mode)
-        if slice_mode not in ("connected-components", "grid"):
-            raise GenarrativeApiError(
-                "slice_mode must be declared explicitly as 'connected-components' or 'grid'; the API has no default"
-            )
-        grid_x = fields.get("gridX")
-        grid_y = fields.get("gridY")
-        if slice_mode == "grid":
-            if grid_x is None or grid_y is None:
-                raise GenarrativeApiError("slice_mode='grid' requires both gridX and gridY")
-        elif grid_x is not None or grid_y is not None:
-            raise GenarrativeApiError(
-                "slice_mode='connected-components' must not carry gridX/gridY"
-            )
        label = fields.get("assetLabel", "图标图集")
        self._apply_canvas_session_fields(fields, label, 1024, 1024)
        fields.setdefault("screenColor", "auto")
@@ -650,7 +635,6 @@ class GenarrativeExternalClient:
                **fields,
                "referenceId": reference_id,
                "iconDescriptions": descriptions,
-                "sliceMode": slice_mode,
            },
            idempotency_key=idempotency_key,
        )
@@ -895,7 +879,6 @@ def _self_test() -> None:
    client.generate_icon_spritesheet(
        "editor-resource-spec",
        ["蛇头向上", "蛇身直线", "转角", "尾部", "四类食物"],
-        "connected-components",
        canvasSession=session,
        assetLabel="贪吃蛇透明图集",
        referenceId="must-not-override-explicit-reference",
@@ -904,7 +887,6 @@ def _self_test() -> None:
    assert calls[0]["path"] == "/api/external/v1/editor/icon-spritesheets/generations"
    assert calls[0]["body"]["referenceId"] == "editor-resource-spec"
    assert calls[0]["body"]["screenColor"] == "auto"
-    assert calls[0]["body"]["sliceMode"] == "connected-components"
    assert calls[0]["body"]["iconDescriptions"][0] == "蛇头向上"
    assert calls[1]["path"] == "/api/external/v1/generations/task-operation-demo"
    print("self-test ok")
@@ -1,43 +0,0 @@
---
-name: spec-driven-development
-description: 在 Genarrative 中处理跨模块功能、公开 API/DTO、SpacetimeDB schema、AGC/Runtime 或复杂 UI 状态链路时，按主规范、里程碑规范、单里程碑实现计划和验收证据推进；小型局部修复不触发。
-license: MIT
-metadata:
-  codex:
-    tags: [SDD, 规范驱动开发, 主规范, 里程碑, 验收]
---
-
-# SDD 规范驱动开发
-
-本 skill 把 Genarrative 的复杂任务路由到规范先行、单里程碑交付的工作流。权威规则和模板分别见：
-
- `docs/【协作规范】规范驱动开发工作流-2026-09-12.md`
- `docs/project-memory/shared-memory/【模板】规范驱动开发主规范与里程碑模板-2026-09-12.md`
-
-## 触发条件
-
-使用本 skill 的任务包括：
-
- 跨前端、`api-server`、`platform-*`、`spacetime-client`、`spacetime-module` 或 `module-*` 的功能。
- `/api/external/v1`、共享 DTO、OpenAPI、SpacetimeDB schema、迁移或跨版本重放合同变化。
- AGC / DirectProject、Agent Runtime、工具白名单、审批、持久化恢复或资源工作流变化。
- 复杂 UI 状态链路、入口/页面生命周期变化，或需要多个独立验收面的功能。
-
-文案、单文件局部修复、无行为变化重构和一次性诊断继续使用轻量流程；执行中一旦触及公开行为或跨模块合同，切换到本 skill。
-
-## 执行要求
-
-1. 检查工作树，读取当前专题、源码、测试、契约和历史决策；写清交付结果、验收判据和不做项。
-2. 找到或更新唯一主规范。主规范描述行为合同、边界、非目标、兼容/迁移和证据，不绑定实现细节。
-3. 在 `docs/project-memory/plans/` 创建一个或多个 `【里程碑】中文标题-YYYY-MM-DD.md`，填写 `Version`、`Status`、`Date`、`Parent Spec`、范围、依赖和验收标准；评审通过前不写业务代码。
-4. 每次只选择一个已评审里程碑，创建对应的 `【实施计划】中文标题-YYYY-MM-DD.md`，明确修改边界、顺序、验证命令、风险和回滚点。
-5. 发现行为需要变化时，严格按 `主规范 → 尚未实现的里程碑规范 → 当前实现计划 → 代码与测试` 更新。
-6. 完成一个里程碑后，提供主规范/里程碑逐条对照、自动化验证、必要运行时 smoke、边界验证和未验证项；未验收不得推进下一个里程碑。
-7. 全部验收通过后，将持久结论合并回主规范，删除已完成的临时计划，并检查文档、契约、测试和提交边界一致。
-
-## 约束
-
- 里程碑和实现计划是开发期协调文件，完成或取消后删除；阶段编号和临时名称不得进入产品代码、用户文档、测试名称或提交标题。
- 活动计划可以提交以便团队同步，但不得把一次性实现步骤写进长期规范。
- 继续遵守现有 API、SpacetimeDB、AGC、编码和中文文档约束；本 skill 不替代专题门禁。
- 文档任务至少运行 `npm run check:doc-index`、`npm run check:encoding` 和 `git diff --check`；代码任务再运行范围匹配的测试、类型检查、schema/OpenAPI 或运行时 smoke。
@@ -30,3 +30,8 @@ server-rs/.data
 server-rs/.spacetimedb

 public/generated-*
+
+scripts/loadtest/data/*.local.json
+scripts/loadtest/data/k6-*.log
+scripts/loadtest/data/k6-*summary*.md
+scripts/loadtest/data/latest-*-prefix.txt
@@ -4,5 +4,3 @@
 src/components/AdventurePanel.tsx
 src/data/customWorldCharacterLoadout.ts
 dist_check_monster_position/**
-# 固定上游UTF-8测试刻意包含U+FFFD；upstream-integrity.test.mjs逐字节验证来源hash。
-apps/ai-game-creator-shell/src-tauri/vendor/codex-utils-path-uri/src/api_path_string_tests.rs
@@ -1,18 +1,13 @@
 # Server-side OpenAI-compatible LLM endpoint base URL.
-LLM_BASE_URL="https://api.tiantoken.com/v1"
+LLM_BASE_URL="https://api.vectorengine.cn/v1"

 # Server-side API key used by the local Vite proxy.
-# Recommended: set `LLM_API_KEY` locally, or use `TIANTOKEN_API_KEY`
+# Recommended: set `LLM_API_KEY` locally, or use `VECTOR_ENGINE_API_KEY`
 # through the Rust api-server proxy.
 # Legacy compatibility: `VITE_LLM_API_KEY` is still supported by the proxy,
 # but it should not be relied on by browser code.
 LLM_API_KEY=""

-# Router account provisioning secret (server-side only). Prefer the protected
-# file form in production; never expose either value to clients or commit it.
-GENARRATIVE_LLM_ROUTER_PROVISIONING_SECRET=""
-GENARRATIVE_LLM_ROUTER_PROVISIONING_SECRET_FILE=""
-
 # Optional frontend override for the local proxy path.
 VITE_LLM_PROXY_BASE_URL="/api/llm"

@@ -122,7 +117,7 @@ WECHAT_MINIPROGRAM_MESSAGE_ENCODING_AES_KEY=""
 # Model name for chat completions.
 VITE_LLM_MODEL="gpt-5.4-mini"
 GENARRATIVE_LLM_PROVIDER="openai-compatible"
-GENARRATIVE_LLM_BASE_URL="https://api.tiantoken.com/v1"
+GENARRATIVE_LLM_BASE_URL="https://api.vectorengine.cn/v1"
 GENARRATIVE_LLM_API_KEY=""
 GENARRATIVE_LLM_MODEL="gpt-5.4-mini"

@@ -130,15 +125,10 @@ GENARRATIVE_LLM_MODEL="gpt-5.4-mini"
 DASHSCOPE_BASE_URL="https://dashscope.aliyuncs.com/api/v1"
 DASHSCOPE_API_KEY="YOUR_DASHSCOPE_API_KEY"

-# Tiantoken LLM and GPT-image-2 / Gemini image generation config.
-TIANTOKEN_BASE_URL="https://api.tiantoken.com"
-TIANTOKEN_API_KEY=""
-TIANTOKEN_IMAGE_REQUEST_TIMEOUT_MS="1000000"
-
-# VectorEngine is retained for Suno audio generation only.
+# VectorEngine LLM and GPT-image-2 / Gemini image generation config.
 VECTOR_ENGINE_BASE_URL="https://api.vectorengine.cn"
 VECTOR_ENGINE_API_KEY=""
-VECTOR_ENGINE_AUDIO_REQUEST_TIMEOUT_MS="180000"
+VECTOR_ENGINE_IMAGE_REQUEST_TIMEOUT_MS="1000000"

 # ElevenLabs editor sound-effect generation is server-side only.
 ELEVENLABS_BASE_URL="https://api.elevenlabs.io"
@@ -158,15 +148,6 @@ ALIYUN_OSS_POST_EXPIRE_SECONDS="600"
 ALIYUN_OSS_POST_MAX_SIZE_BYTES="20971520"
 ALIYUN_OSS_SUCCESS_ACTION_STATUS="200"

-# AGC 项目定时快照上传目标。对象只落在服务端私有前缀
-# `agc/project-snapshots/v1/{user}/{project}/` 下，客户端直传票据不覆盖该前缀。
-# bucket 与凭据可以与资源 bucket 分离；凭据未设置时回退使用 ALIYUN_OSS_ACCESS_KEY_*，
-# 但 bucket / endpoint 默认指向 AGC 发行 bucket，需要该凭据具备目标 bucket 的 PutObject 权限。
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_BUCKET="agc-dev"
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ENDPOINT="oss-rg-china-mainland.aliyuncs.com"
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_ID=""
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_SECRET=""
-
 # BgFilter 受限资源 worker。父 api-server / external-generation-worker 与唯一的
 # `GENARRATIVE_PROCESS_ROLE=bgfilter-worker` 进程必须使用同一个内部 Token。
 # `npm run dev` 与 `npm run dev:api-server` 都会自动带起并验活唯一 worker，不要再开第二个终端重复启动。
@@ -235,12 +216,6 @@ VITE_DEBUG_MODE=""
 # This is read by api-server and exposed through /api/runtime/frontend-config.
 GENARRATIVE_ENABLE_IMAGE_EDITOR_AGENT_SIDEBAR="false"

-# 官网客户端下载检测渠道：dev、release 或自定义渠道；修改后重启 API 服务。
-# Windows/macOS 是系统维度，不填写 dev-win/dev-mac。
-# 客户端埋点也复用该渠道：dev 对应 https://dev.genarrative.world，release 对应 https://www.genarrative.world。
-# 埋点不接受其它渠道；本地 dev 且 GENARRATIVE_ENV 为 development（默认）/test/container 时允许 loopback 地址及可变端口。
-GENARRATIVE_CLIENT_DOWNLOAD_CHANNEL="dev"
-
 # Optional: official VikingDB credentials for regenerating build-tag similarities
 # with the Python embedding script. The script auto-loads `.env.local` and uses
 # the fixed `bge-large-zh` embedding model.
@@ -164,7 +164,6 @@ module.exports = {
    'server-rs/target-*',
    'apps/desktop-shell/src-tauri/target',
    'apps/ai-game-creator-shell/src/features/ui-editor/types/**',
-    'apps/ai-game-creator-shell/src/features/project-workspace/generated/**',
    'target',
    'src/main.tsx',
    'src/App.tsx',
@@ -213,8 +212,6 @@ module.exports = {
    '!src/services/clipboard.test.ts',
    '!src/services/frontendRuntimeConfigService.ts',
    '!src/services/frontendRuntimeConfigService.test.ts',
-    '!src/services/gameDistributionClient.ts',
-    '!src/services/gameDistributionClient.test.ts',
    '!src/services/sseStream.ts',
    '!src/services/sseStream.test.ts',
    'src/AdventurePanel.tsx',
@@ -365,6 +362,7 @@ module.exports = {
    'src/types.ts',
    'src/types/**',
    'src/uiAssets.ts',
+    'scripts/loadtest/**',
    'packages/shared/src/contracts/jumpHop.ts',
    'packages/shared/src/contracts/match3dAgent.ts',
    'packages/shared/src/contracts/match3dRuntime.ts',
@@ -23,6 +23,3 @@
 *.meta text
 *.anim text
 *.controller text
-
-# Rust ts-rs 生成的共享契约：保留在仓库中供 TS 消费，但不作为手写源文件统计。
-packages/shared/src/contracts/generated/** linguist-generated=true
@@ -40,23 +40,7 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-path/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-resources/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-package.json
-/apps/ai-game-creator-shell/src-tauri/resources/plugins/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/bin/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-path/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-resources/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-package.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/manifest.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/NOTICE.md
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-arm64/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/darwin-x64/
-/plugins/agc-cocos-editor/native/payload/
-/plugins/agc-unity-editor/dotnet/**/bin/
-/plugins/agc-unity-editor/dotnet/**/obj/
-/plugins/agc-unity-editor/dotnet/publish/
-/plugins/agc-unity-editor/dotnet/native-build/
 /apps/ai-game-creator-shell/logs/
-/apps/ai-game-creator-shell/src-tauri/resources/node-runtime/
-/apps/ai-game-creator-shell/src-tauri/resources/node-runtime-staging-*/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json
 /apps/mobile-shell/.expo/
@@ -65,7 +49,6 @@ temp*build*/
 /apps/preview-deployer-web/node_modules/
 /server-rs/.spacetimedb/
 /server-rs/.data/
-**/server-rs/.data/
 /public/generated-animations
 /public/generated-character-drafts
 /public/generated-characters
@@ -89,3 +72,11 @@ nohup.out
 spacetime.local.json
 deploy/container/api-server.env
 deploy/container/worker-smoke/
+
+# Local load-test data extracted from private migration files
+scripts/loadtest/data/*.local.json
+
+# Local load-test run artifacts
+scripts/loadtest/data/k6-*.log
+scripts/loadtest/data/k6-*summary*.md
+scripts/loadtest/data/latest-*-prefix.txt
@@ -1,4 +1 @@
-# Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
-# 子进程（npm、lint-staged、测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
-unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run format:staged
@@ -1,4 +1 @@
-# Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
-# 钩子链（npm → check:repository-ci → 测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
-unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run check:pre-push-master -- "$@"
@@ -1,14 +1,5 @@
 {
  "singleQuote": true,
  "semi": true,
-  "trailingComma": "all",
-  "overrides": [
-    {
-      "files": "packages/shared/src/contracts/generated/**/*.ts",
-      "options": {
-        "printWidth": 1000,
-        "singleQuote": false
-      }
-    }
-  ]
+  "trailingComma": "all"
 }
@@ -4,40 +4,42 @@

 - 本文件只保留 Agent 进入仓库后必须立即遵守的最高优先级规则；完整执行细则见 [`docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md`](docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md)。
 - 团队级长期项目记忆位于 [`docs/project-memory/`](docs/project-memory/)，供 3 名开发人员和各自本地 Agent 通过 Git 同步。
- [`.codex/`](.codex/) 保存仓库级 Codex 工具资源，例如 skills、plugins、hooks 和配置模板；长期项目知识写入 `docs/` 与 `docs/project-memory/`。
+- [`.codex/`](.codex/) 只保存仓库级 Codex 工具资源，例如 skills、plugins、hooks 和配置模板；长期项目知识不要写入 `.codex/`。
 - 若 `docs/project-memory/shared-memory/` 与当前代码或最新 `docs/` 冲突，以代码和最新 `docs/` 为准，并同步修正过期共享记忆。

 ## 开始任务前

- 先写清一句话交付结果、验收判据和修改范围，再按“必须项 / 风险项 / 可选项”排序；优先完成修改、定向验证和边界检查组成的最小闭环。设置时间盒和检查点，新增发现只有在影响交付判据时才扩大范围，其余记录为后续事项。
- Agent 可见内容直接描述当前任务、输入和成功条件，细节按调用需要提供。
+- 先写清一句话交付结果、验收判据和不做项，再按“必须项 / 风险项 / 可选项”排序；优先完成修改、定向验证和边界检查组成的最小闭环。设置时间盒和检查点，新增发现只有在影响交付判据时才扩大范围，否则记录为后续事项；工具探测、历史整理或验证便利不能自行改变任务目标。
 - 简单自包含任务可以直接执行；复杂开发、跨模块修改、后端 / UI / 文档体系调整前，按顺序读取：
  1. 本文件。
  2. [`docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md`](docs/【协作规范】Agent工作入口与执行准则-2026-06-22.md)。
  3. [`docs/project-memory/README.md`](docs/project-memory/README.md)、[`project-overview.md`](docs/project-memory/shared-memory/project-overview.md)、[`team-conventions.md`](docs/project-memory/shared-memory/team-conventions.md)、[`development-workflow.md`](docs/project-memory/shared-memory/development-workflow.md)。
  4. 与任务相关的 [`decision-log.md`](docs/project-memory/shared-memory/decision-log.md)、[`pitfalls.md`](docs/project-memory/shared-memory/pitfalls.md)、[`docs/README.md`](docs/README.md) 和当前专题文档。
 - 落地工程修改前，先确认是否已有足够具体的 PRD、技术方案或当前融合文档；文档仍存在编码级歧义时，先补文档再编码。
- 跨模块功能、公开 API/DTO、SpacetimeDB schema、AGC/Runtime 或复杂 UI 状态链路必须按 [`docs/【协作规范】规范驱动开发工作流-2026-09-12.md`](docs/【协作规范】规范驱动开发工作流-2026-09-12.md) 先完成主规范、里程碑规范和单里程碑实现计划；评审与验收门禁未通过前不得进入下一里程碑。局部修复、文案和无行为变化重构继续走轻量流程。
 - 本仓库的本地 RAG 位于 [`scripts/rag/`](scripts/rag/)；RAG 只作为候选上下文，不替代打开源文件核对。默认不安装 RAG 运行时依赖，需要启用时必须先询问用户，并只安装到 gitignored 的 `.rag/runtime/`。

 ## 绝对约束

 - 禁止提交个人 `~/.codex` 配置、`.env`、API Key、Token、Cookie、会话记录、认证文件、本地私密路径、构建产物、日志、缓存和数据库 dump。
 - 不要在 `.gitignore` 中新增 `.env.local`。
- 现有中文文案、注释、剧情和文档保持中文；看到乱码时先确认真实编码并恢复正确中文。
- 修改包含中文的文件时优先局部补丁；修改后优先运行仓库编码检查。
- 新增 Markdown 文档文件名必须以分类标签开头，格式为 `【标签名】中文标题-日期.md`。
+- 不要擅自把现有中文文案、注释、剧情或文档改写成英文；看到中文乱码时先确认真实编码，不要沿用乱码或用英文替换。
+- 修改包含中文的文件时优先局部补丁，避免整文件重写；修改后优先运行仓库编码检查。
+- 后续新增 Markdown 文档文件名必须以分类标签开头，格式为 `【标签名】中文标题-日期.md`；历史文档不要求批量重命名，除非本次任务明确涉及。
 - 工程修改要同步更新对应 `docs/` 文档；产生长期有效的架构约定、接口变化、排障经验、开发流程或协作规则时，同步更新 `docs/project-memory/shared-memory/`。
- 默认保持系统简洁：优先复用、修改、扩展现有系统、页面和公共组件。
- UI 开发优先复用现有公共组件；发现跨页面或跨端重复的视觉/交互模式时，先抽取到 `packages/shared` 共享组件库并让现有页面迁移使用。共享组件承载通用表现与交互，领域规则、后端副作用和正式业务状态由后端负责。
- 对已明确退役且不存在现役调用方、公开契约、持久化数据、活跃实例或迁移要求的对象，直接清理实现、专属测试和说明，将权威文档更新为当前状态；历史由 Git 保存。
- 公开 API、持久化数据、SpacetimeDB schema、跨版本重放、活跃实例和正式迁移按实际需求保留最小、白名单化的兼容，并配套契约或迁移测试；迁移完成后同步删除兼容实现与对应测试。
- UI 面板优先呈现任务内容与操作，说明按当前操作需要提供；移动端优先，同时保证网页端可正常显示和操作。
- 点击按钮弹出的独立面板使用弹窗、抽屉、popover 或页面级 portal。
+- 默认保持系统简洁：优先复用、修改、扩展现有系统、页面和公共组件，不新建平行系统或平行页面。
+- UI 开发优先复用现有公共组件；发现跨页面或跨端重复的视觉/交互模式时，先抽取到 `packages/shared` 共享组件库并让现有页面迁移使用，禁止在业务页复制同类 UI。共享组件只承载通用表现与交互，不下沉领域规则、后端副作用或正式业务状态。
+- 对已明确退役且不存在现役调用方、公开契约、持久化数据、活跃实例或迁移要求的对象，坚持“四不写”：
+  1. 不写历史兼容代码。
+  2. 不写用于维持退役行为的防御性兼容测试。
+  3. 不写仅说明其曾存在或已删除的墓碑注释。
+  4. 不写仅记录其已删除的墓碑文档；直接将权威文档更新为当前状态。
+- 公开 API、持久化数据、SpacetimeDB schema、跨版本重放、活跃实例和正式迁移不适用“四不写”；必要兼容应最小化、白名单化并配套契约或迁移测试，迁移完成后同步删除兼容实现与对应测试。
+- UI 面板中不要默认写功能说明、规则描述或开发解释文案；移动端优先，同时保证网页端可正常显示和操作。
+- 点击按钮弹出独立面板的设计，不要实现成在当前面板下面追加内容。

 ## 任务路由

- Issue 使用自托管 Gitea；优先用 Gitea UI/API 或 `tea` CLI。默认 triage 标签：`needs-triage`、`needs-info`、`ready-for-agent`、`ready-for-human`、`wontfix`。
+- Issue 使用自托管 Gitea；优先用 Gitea UI/API 或 `tea` CLI，不使用 GitHub `gh` 或 GitLab `glab`，除非仓库已迁移。默认 triage 标签：`needs-triage`、`needs-info`、`ready-for-agent`、`ready-for-human`、`wontfix`。
 - 需要仓库级 Codex skills/plugins 时，再读取 [`.codex/README.md`](.codex/README.md)。
 - 涉及 AI 游戏创作独立 App、多智能体 Runtime、本地项目产物或本地 HTTP 预览时，先读取 [`docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md`](docs/technical/【技术方案】AI游戏创作智能体App实施计划-2026-06-24.md)。
 - 新增、补齐、迁移或重构玩法入口、玩法类型、创作工作台、生成页、结果页、发布、运行态、作品架、广场或公开 read model 前，必须读取并按 [`genarrative-play-type-integration`](.codex/skills/genarrative-play-type-integration/SKILL.md) 执行。
@@ -47,10 +49,10 @@
 ## 后端红线

 - 后端最新技术约束以 [`docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md`](docs/【后端架构】server-rs与SpacetimeDB数据契约-2026-05-15.md) 为准。
- 后端路线固定为 `server-rs + Axum + SpacetimeDB`。
+- 后端路线固定为 `server-rs + Axum + SpacetimeDB`；旧 `server-node`、Express、PostgreSQL、Go 服务端、`maincloud` / `Maincloud` / `MAINCLOUD` 只作为历史残留，不作为兼容目标。
 - DDD 分层边界按总纲执行：领域规则沉到 `module-*`，SpacetimeDB 表和事务编排留在 `spacetime-module`，后端访问 SpacetimeDB 统一经 `spacetime-client` facade，HTTP/SSE/BFF 留在 `api-server`，外部副作用留在 `platform-*`，前后端 DTO 留在 `shared-contracts`。
- 前端负责表现、交互和临时 UI 状态；正式业务状态与规则以后端投影和后端 API 为准。
- 契约、路由、DTO 去留和 breaking change 以当前后端架构文档、`server-rs/crates/api-server/src/app.rs`、`shared-contracts` 和 `packages/shared` 为准。
+- 前端只做表现、交互和临时 UI 状态，不承接正式业务真相，不绕过后端投影或后端 API 直接实现业务规则。
+- 契约、路由、DTO 去留和 breaking change 以当前后端架构文档、`server-rs/crates/api-server/src/app.rs`、`shared-contracts` 和 `packages/shared` 为准；不得在前端、`api-server` 或临时兼容层中重新发明旧接口。
 - 凡修改 `/api/external/v1` 的路由、HTTP 方法、请求 / 响应 DTO、请求头、状态码、鉴权或异步语义，必须在同一次变更中同步更新权威契约 [`docs/openapi/genarrative-external-v1.openapi.json`](docs/openapi/genarrative-external-v1.openapi.json) 及对应契约测试；Rust 实现与 OpenAPI 未保持一致时任务不得视为完成。
 - SpacetimeDB 已有表新增字段时，字段必须放在 Rust 表结构体最后，并设置明确默认值；需要删除、改名、重排或改类型时，必须先询问用户并确认迁移计划。
 - 修改 SpacetimeDB schema 后必须同步 `migration.rs`、表目录和生成绑定，并运行 `npm run check:spacetime-schema`。
@@ -48,23 +48,6 @@ _Avoid_: 无来源的静态素材、只显示在 UI 但不落工程资源记录
 一组同类素材的统一批量生成方式，采用批量规划、sheet 生图、后端切图、透明化、OSS 持久化和局部重生成的通用流水线。
 _Avoid_: 为每个玩法单独发明素材流水线、把系列素材建模成任一玩法专属 DTO

-**UI 设计文档**:
-AGC 本地项目里 `kind=ui-design-doc`、`mediaType=application/json` 的界面编辑载体，保存设计图集合、UI 树、组件绑定和 State revision；一份文档可同时承载多张设计图与各自的结构树，不强制收敛成一棵树。
-_Avoid_: 把 UI 设计图当成设计文档、给设计文档再套一层「页面」概念
-
-**设计图**:
-UI 设计文档里的一张参考界面图，以它在 manifest 中的资产 ID 作为文档内身份，附带像素尺寸与像素比；文档内的每棵树都必须引用文档里已存在的设计图。
-_Avoid_: 用文件名当设计图身份、设计图与设计文档同一概念
-
-**UI 工作流步骤**:
-对一份 UI 设计文档执行的一次受控处理阶段，当前只有「结构识别」与「素材切分」两步；步骤产物只有在写入文档并保存后才算完成。
-_Avoid_: 把单次工具调用当成步骤、把中间产物当成步骤完成
-
-**工作流检查点日志**:
-一份 UI 设计文档旁按行追加的恢复用日志，每完成一个工作流步骤追加一行；某步是否有对应行即代表该步是否完成，恢复时从第一个缺失的行继续。
-_Avoid_: 每步一个 sidecar 状态机、把切分专用的 SeparationState 泛化成通用检查点
-
-
 ## Language

 ### Puzzle Clear
@@ -189,104 +172,6 @@ _Avoid_: 多步骤向导、完整规则编辑器、拖拽编辑器
 Bark Battle 平台作品闭环按契约与领域规则、后端存储/API、最小前端纵切、投影体验、收口验证的顺序推进。
 _Avoid_: mock 先行堆积、前后端各自发散、先做排行榜 UI

-## 项目开发对话（DirectProject）
-
-**DirectProject 专属聊天模块**:
-AGC 普通项目聊天的独立容器，拥有 DirectProject 的聊天状态、运行态订阅、历史读取、待发消息队列的投影、附件和中止交互，并把聊天投影交给专属表现层渲染；它不承接 Supervisor、Design Agent 或 Planning V2 的运行态。
-_Avoid_: 把 DirectProject 作为项目总控聊天的一个布尔分支、把四种 Agent 会话抽象成同一事实源
-
-**项目工作台布局**:
-承载本地项目的资源工作区、项目级工具和独立聊天产品路径的外层界面；布局拥有跨面板的账户/钱包入口，聊天模块只负责项目对话，不嵌套账户展示。
-_Avoid_: 把钱包入口塞进聊天设置、让聊天组件拥有工作台级账户状态
-
-**项目对话历史**:
-AGC 本地项目内 Codex 原始对话条目的持久集合，是聊天展示、工具卡片和线程恢复注入的唯一持久事实源。
-_Avoid_: 会话缓存、展示态历史、按 UI 需要另存的对话副本
-
-**运行态事件**:
-Thread Manager 向订阅者推送的当前回合原始事件流，只服务运行期间与短期断线恢复，不替代项目对话历史。
-_Avoid_: 进度通知、快照轮询、第二套历史
-
-**逻辑回合**:
-Thread Manager 拥有的一对回合边界（开始与结束），由放行动作开启、由这一轮的占用对象写出，不镜像 Codex 原生回合；界面忙碌态与回合结果只认它。
-_Avoid_: Codex 原生回合、原生日志、进程生命周期
-
-**待发消息队列**:
-Thread Manager 按项目持有的待发用户消息序列，只支持按入队顺序追加与按身份移除，状态由运行态事件派生，不落盘、不构成第二份事实源。
-_Avoid_: 前端本地队列、队列副本、待发消息的持久化记录
-
-**待发消息**:
-已经通过入队检查、等待被放行的用户消息；它在放行之前不是回合，不写用户条目、不产生回合事件。
-_Avoid_: 回合、在途回合、草稿
-
-**入队**:
-把一条用户消息交给宿主的动作：宿主跑完入队检查后把它放进待发消息队列；入队成立只表示这条消息会按顺序被放行。
-_Avoid_: 发送成功、已经开跑、回合成立
-
-**入队失败**:
-入队检查未通过（身份、形状、容量、权限、目录、参数、工程准备未就绪）时拒绝这次请求，只回一条可展示原因，不入队、不产生回合事件，也不写用户条目。
-_Avoid_: 回合失败、执行失败、失败事件
-
-**放行**:
-Thread Manager 在一个回合收口之后把队首的待发消息送进回合：同一临界区里登记占用、落盘用户条目、发出逻辑回合开始事件并起整轮；放行之后的结果只由运行态事件回答。
-_Avoid_: 前端放行、定时轮询、放行失败
-
-**在途回合**:
-界面本地已经入队、宿主还没有对应回合开始事件的那一小段状态。
-_Avoid_: 运行中回合、乐观锁、前端发送队列
-
-**聊天投影**:
-把项目对话历史条目与运行态事件转换成消息气泡和工具卡片的读取期转换；不持久化，也不构成事实源。
-_Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
-
-**项目对话输入**:
-AGC 项目对话的输入只有自然语言回合（含 `@` 素材引用与附件）；需要动作时由 Runtime 工具与确认卡承接，不从输入文本解析控制词。
-_Avoid_: 斜杠命令、聊天命令草稿、命令发现列表
-
-**项目命令 id**:
-AGC 运行期工具与项目权限策略使用的稳定标识（`GAME_CREATION_APP_COMMANDS` 与 `GameCreationAppPermission`），由 Rust 运行期策略校验与 App 权限审计 / 项目前置条件判定消费，不是用户输入语法。
-_Avoid_: 把命令 id 当作可输入的聊天命令、为权限位补聊天入口
-
-**引用候选**:
-输入区可以命中的对象集合（`@` 素材、`$` Skill），由宿主按种类注入；输入区不判断候选属于哪一类。
-_Avoid_: 输入区自己读项目清单或应用目录、把候选取值写死在组件里
-
-**引用 provider**:
-一种引用种类向输入区提供的全部能力：触发符、候选、身份解析与正文文本形态；每种引用各一份，宿主按需选择性注入。
-_Avoid_: 一个总装对象决定所有种类、输入区按种类分叉、provider 之间互相知道对方
-
-**静默 provider**:
-不提供候选、只负责已有引用身份与文本形态的 provider；附件与运行画面区域属于这一类，只能由外部插入或草稿回填进入正文。
-_Avoid_: 给附件或运行画面区域造候选、为它们保留输入区内的专门分支
-
-**引用文本语法**:
-引用在正文文本里的形态（`@显示名` / `$名称` / `@附件名`）及其反解析；出站与解析必须同一口径，token 前后各留一个空白。
-_Avoid_: 出站与解析各写一套、在空白边界之外再补兼容别名、让解析依赖具体种类的字段
-
-**引用名**:
-引用自己的名字，同时就是它在正文里的 token（资源显示名、Skill 名、附件名）；内部不允许出现空白，空白统一经 `normalizeMentionName` 折成 `-`。
-_Avoid_: 名字与 token 各存一份、靠补兼容别名或 `resourceId` 兜底来消化空白
-
-**引用候选枚举**:
-一种引用种类当前就绪的全部可引用对象，与候选菜单共用同一份集合；区别只在没有查询过滤和条数上限。
-_Avoid_: 拿菜单查询当枚举、为粘贴另建一份候选清单
-
-**引用粘贴解析**:
-把粘贴进来的纯文本按引用文本语法反解析回正文引用；只有身份唯一且逐字确认的 token 才成为引用，其余按原文保留。
-_Avoid_: 猜文件名或路径、为不确定的 token 挑一个候选、改写用户粘贴的其余文字
-
-**引用输入区**:
-只负责编辑与渲染引用的共享输入组件；候选、身份解析与文本语法都来自注入的 provider，它不持有项目清单、不访问后端。
-_Avoid_: 输入区自己拉 Skill 目录、把选择器面板塞在输入区内部
-
-**引用选择器**:
-宿主渲染的独立面板，自己拿数据与筛选状态，确认后把选中的引用交给输入区的插入缝。
-_Avoid_: 输入区自带面板、每个宿主各画一个、绕开插入缝另开第二条通道
-
-**附件芯片**:
-聊天附件在正文里的唯一表示；附件导入成功即以芯片进入正文，正文之外不存在第二份附件状态。
-_Avoid_: 待发送附件列表与正文芯片并存、提交时再拼一遍附件
-
 ## Relationships

 - 一个 **汪汪声浪大作战** 单局包含多个 **有效声浪触发**。
@@ -302,11 +187,6 @@ _Avoid_: 待发送附件列表与正文芯片并存、提交时再拼一遍附
 - **个人历史成绩** 由最近记录列表和个人最佳摘要组成，只允许本人查看；排行榜只公开入榜胜利成绩。
 - **正式作品入口闭环** 必须覆盖创作入口、作品详情 CTA、广场/作品卡片、我的作品/个人作品架、稳定作品 ID runtime 路由和 `work_play_start` 埋点。
 - **Phase 2 实施顺序** 固定为：契约与领域规则 → SpacetimeDB 表/reducer 与 api-server BFF → 最小前端纵切 → 投影与列表体验 → 收口验证。
- **引用输入区** 由宿主注入的若干 **引用 provider** 组成；**引用候选** 与 **引用文本语法** 都来自 provider，输入区不判断引用种类。
- **引用选择器** 不属于 **引用输入区**：它自己拿数据，确认后只通过输入区的插入缝交付引用。
- 只有带触发符的 **引用 provider** 会产生候选；**静默 provider** 没有触发符，只能由外部插入或草稿回填进入正文。
- **引用粘贴解析** 与出站显示是同一条 **引用文本语法** 的两端；**静默 provider** 的 token（`@附件名` / `@区域标签`）没有候选，因此粘贴时不重建。
- **附件芯片** 是本轮附件的唯一事实源；附件导入失败时不产生芯片。

 ## Example dialogue

@@ -326,5 +206,3 @@ _Avoid_: 待发送附件列表与正文芯片并存、提交时再拼一遍附
 - “入口闭环”曾可能只指内部 demo 或单个详情 CTA；已解析为 **正式作品入口闭环**，不新增独立专区或活动页。
 - “创作编辑”曾可能指多步骤向导或完整编辑器；已解析为 **轻配置编辑流程**，使用单页表单 + 预览卡片完成保存草稿、发布和发布后跳转作品详情。
 - “实施顺序”曾可能按 UI 或功能并行发散；已解析为契约/领域规则先行，再做后端存储/API，随后打通最小前端纵切，最后补投影体验与收口验证。
- “回合进度事件”曾同时指 Direct turn update 与 Thread Manager 运行态事件；已解析为 AGC 项目开发对话只保留 **运行态事件**。
- “哪些消息可显示”曾可能由后端历史分页判断；已解析为可见性判断属于 **聊天投影**，后端只按原始条目分页，前端负责跳过不可显示条目并推进分页锚点。
@@ -3,21 +3,12 @@ import { afterEach, expect, test, vi } from 'vitest';
 import {
  createAdminAccount,
  executeAdminRechargeRefund,
-  getAdminAgcTemplates,
  getAdminFeatureGateConfig,
  getAdminUserDetail,
-  importAdminAgcTemplates,
-  listAdminAgcTrackingEvents,
-  listAdminGameDistributionGames,
-  listAdminGameDistributionReviews,
  listAdminRechargeOrders,
  reconcileAdminUserConsumption,
  resolveAdminRechargeRefundManualReview,
-  restoreAdminGameDistributionGame,
-  reviewAdminGameDistributionVersion,
-  suspendAdminGameDistributionGame,
  updateAdminAccount,
-  updateAdminAgcTemplate,
  uploadAdminEditorShowcaseCampaignImage,
  upsertAdminFeatureGateConfig,
  upsertProfileWalletConfig,
@@ -27,117 +18,6 @@ afterEach(() => {
  vi.unstubAllGlobals();
 });

-test('客户端埋点查询传递筛选和游标并复用后台认证', async () => {
-  const payload = { entries: [], nextCursor: null };
-  const fetchMock = vi.fn().mockResolvedValue(
-    new Response(JSON.stringify({ ok: true, data: payload }), {
-      status: 200,
-    }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-  expect(
-    await listAdminAgcTrackingEvents('token', {
-      userId: 'user+1',
-      projectId: 'project-1',
-      cursor: 'page/2',
-      limit: 50,
-    }),
-  ).toEqual(payload);
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/agc/tracking-events?userId=user%2B1&projectId=project-1&cursor=page%2F2&limit=50',
-    expect.objectContaining({
-      headers: expect.objectContaining({ Authorization: 'Bearer token' }),
-    }),
-  );
-});
-
-test('模板管理读取和更新复用认证封装，提交 revision 和封面但不提交 ZIP 或版本', async () => {
-  const library = { revision: 'revision-new', writable: true, templates: [] };
-  const fetchMock = vi.fn().mockImplementation(
-    async () =>
-      new Response(JSON.stringify({ ok: true, data: library }), {
-        status: 200,
-      }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  expect(await getAdminAgcTemplates('admin-token', controller.signal)).toEqual(
-    library,
-  );
-  const update = {
-    expectedRevision: 'revision-old',
-    title: '空白模板',
-    summary: '简介',
-    tags: ['2D'],
-    enabled: true,
-    cover: { contentType: 'image/png', dataBase64: 'aW1hZ2U=' },
-  };
-  expect(
-    await updateAdminAgcTemplate('admin-token', 'template/1', update),
-  ).toEqual(library);
-  expect(fetchMock.mock.calls[0]).toEqual([
-    '/admin/api/agc-templates',
-    expect.objectContaining({
-      method: 'GET',
-      signal: controller.signal,
-      headers: expect.objectContaining({ Authorization: 'Bearer admin-token' }),
-    }),
-  ]);
-  expect(fetchMock.mock.calls[1]).toEqual([
-    '/admin/api/agc-templates/template%2F1',
-    expect.objectContaining({
-      method: 'PUT',
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        'Content-Type': 'application/json',
-      }),
-      body: JSON.stringify(update),
-    }),
-  ]);
-});
-
-test('模板批量导入走 multipart，不预设 JSON Content-Type', async () => {
-  const imported = {
-    revision: 'rev-2',
-    writable: true,
-    templates: [],
-    imported: [
-      {
-        id: 'alpha',
-        templateVersion: '0.1.0',
-        zipSizeBytes: 4,
-        zipSha256: 'a'.repeat(64),
-        reusedObjects: false,
-      },
-    ],
-  };
-  const fetchMock = vi.fn().mockImplementation(
-    async () =>
-      new Response(JSON.stringify({ ok: true, data: imported }), {
-        status: 200,
-      }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-
-  const form = new FormData();
-  form.append(
-    'manifest',
-    JSON.stringify({ expectedRevision: 'rev-1', templates: [] }),
-  );
-  form.append(
-    'zip_0',
-    new File([new Uint8Array([1])], 'alpha.zip', { type: 'application/zip' }),
-  );
-
-  expect(await importAdminAgcTemplates('admin-token', form)).toEqual(imported);
-  const [url, init] = fetchMock.mock.calls[0]!;
-  expect(url).toBe('/admin/api/agc-templates/import');
-  expect(init.method).toBe('POST');
-  expect(init.body).toBe(form);
-  expect(init.headers).not.toHaveProperty('Content-Type');
-  expect(init.headers.Authorization).toBe('Bearer admin-token');
-});
-
 test('后台账号创建和更新同时携带 Tab 与独立操作权限', async () => {
  const fetchMock = vi.fn().mockImplementation(() =>
    Promise.resolve(
@@ -484,211 +364,3 @@ test('退款人工复核使用独立 resolve 管理员路由', async () => {
    }),
  );
 });
-
-test('游戏审核列表与审核动作使用约定的 URL、方法和幂等键', async () => {
-  const fetchMock = vi.fn().mockImplementation(() =>
-    Promise.resolve(
-      new Response(JSON.stringify({ entries: [], nextCursor: null }), {
-        status: 200,
-      }),
-    ),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-
-  await listAdminGameDistributionReviews('admin-token');
-  await reviewAdminGameDistributionVersion(
-    'admin-token',
-    'gamever/1',
-    'game-review-key-1',
-    {
-      decision: 'approve',
-      expectedPublicationRevision: 3,
-    },
-  );
-
-  expect(fetchMock.mock.calls[0]?.[0]).toBe(
-    '/admin/api/game-distribution/reviews?limit=48',
-  );
-  expect(fetchMock.mock.calls[1]?.[0]).toBe(
-    '/admin/api/game-distribution/versions/gamever%2F1/review',
-  );
-  expect(fetchMock.mock.calls[1]?.[1]).toEqual(
-    expect.objectContaining({
-      method: 'POST',
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        'Idempotency-Key': 'game-review-key-1',
-      }),
-      body: JSON.stringify({
-        decision: 'approve',
-        expectedPublicationRevision: 3,
-      }),
-    }),
-  );
-});
-
-test('游戏管理列表与恢复动作使用约定的 URL、方法和幂等键', async () => {
-  const fetchMock = vi
-    .fn()
-    .mockResolvedValueOnce(
-      new Response(JSON.stringify({ ok: true, data: { games: [] } }), {
-        status: 200,
-      }),
-    )
-    .mockResolvedValueOnce(
-      new Response(
-        JSON.stringify({
-          ok: true,
-          data: {
-            game: {
-              id: 'game/1',
-              title: '测试游戏',
-              status: 'published',
-              publicationRevision: 10,
-            },
-            replayed: false,
-          },
-        }),
-        { status: 200 },
-      ),
-    );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-
-  await listAdminGameDistributionGames(
-    'admin-token',
-    { limit: 80 },
-    controller.signal,
-  );
-  await restoreAdminGameDistributionGame(
-    'admin-token',
-    ' game/1 ',
-    ' game-restore-key-1 ',
-    { expectedPublicationRevision: 9 },
-  );
-
-  expect(fetchMock.mock.calls[0]?.[0]).toBe(
-    '/admin/api/game-distribution/games?limit=50',
-  );
-  expect(fetchMock.mock.calls[0]?.[1]).toEqual(
-    expect.objectContaining({
-      method: 'GET',
-      signal: controller.signal,
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-      }),
-    }),
-  );
-  expect(fetchMock.mock.calls[1]?.[0]).toBe(
-    '/admin/api/game-distribution/games/game%2F1/restore',
-  );
-  expect(fetchMock.mock.calls[1]?.[1]).toEqual(
-    expect.objectContaining({
-      method: 'POST',
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        'Idempotency-Key': 'game-restore-key-1',
-      }),
-      body: JSON.stringify({ expectedPublicationRevision: 9 }),
-    }),
-  );
-
-  expect(() =>
-    restoreAdminGameDistributionGame('admin-token', '  ', 'key', {
-      expectedPublicationRevision: 9,
-    }),
-  ).toThrow('缺少游戏 ID');
-  expect(() =>
-    restoreAdminGameDistributionGame('admin-token', 'game-1', '  ', {
-      expectedPublicationRevision: 9,
-    }),
-  ).toThrow('恢复幂等键必须是 1 到 128 个字符');
-  expect(fetchMock).toHaveBeenCalledTimes(2);
-});
-
-test('安全下架请求携带公开修订号、原因与幂等键', async () => {
-  const fetchMock = vi.fn().mockImplementation(() =>
-    Promise.resolve(
-      new Response(JSON.stringify({ game: {}, replayed: false }), {
-        status: 200,
-      }),
-    ),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-
-  await suspendAdminGameDistributionGame(
-    'admin-token',
-    'game/1',
-    'game-suspend-key-1',
-    { expectedPublicationRevision: 7, reason: '版权投诉' },
-  );
-
-  expect(fetchMock.mock.calls[0]?.[0]).toBe(
-    '/admin/api/game-distribution/games/game%2F1/suspend',
-  );
-  expect(fetchMock.mock.calls[0]?.[1]).toEqual(
-    expect.objectContaining({
-      method: 'POST',
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        'Idempotency-Key': 'game-suspend-key-1',
-      }),
-      body: JSON.stringify({
-        expectedPublicationRevision: 7,
-        reason: '版权投诉',
-      }),
-    }),
-  );
-
-  expect(() =>
-    suspendAdminGameDistributionGame('admin-token', '  ', 'key', {
-      expectedPublicationRevision: 1,
-    }),
-  ).toThrow('缺少游戏 ID');
-  expect(() =>
-    suspendAdminGameDistributionGame('admin-token', 'game-1', '  ', {
-      expectedPublicationRevision: 1,
-    }),
-  ).toThrow('下架幂等键必须是 1 到 128 个字符');
-  expect(fetchMock).toHaveBeenCalledTimes(1);
-});
-
-test('游戏审核拒绝请求携带理由，空幂等键在本地失败关闭', async () => {
-  const fetchMock = vi.fn().mockImplementation(() =>
-    Promise.resolve(
-      new Response(JSON.stringify({ version: {}, replayed: false }), {
-        status: 200,
-      }),
-    ),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-
-  await reviewAdminGameDistributionVersion(
-    'admin-token',
-    'version-1',
-    'game-review-key-2',
-    {
-      decision: 'reject',
-      expectedPublicationRevision: 0,
-      reviewReason: '运行时报错',
-    },
-  );
-  expect(fetchMock.mock.calls[0]?.[1]).toEqual(
-    expect.objectContaining({
-      body: JSON.stringify({
-        decision: 'reject',
-        expectedPublicationRevision: 0,
-        reviewReason: '运行时报错',
-      }),
-    }),
-  );
-
-  expect(() =>
-    reviewAdminGameDistributionVersion('admin-token', 'version-1', '   ', {
-      decision: 'reject',
-      expectedPublicationRevision: 0,
-      reviewReason: 'x',
-    }),
-  ).toThrow('审核幂等键必须是 1 到 128 个字符');
-  expect(fetchMock).toHaveBeenCalledTimes(1);
-});
@@ -1,8 +1,5 @@
 import type {
  AdminAccountListResponse,
-  AdminAgcTemplateLibraryResponse,
-  AdminAgcTrackingEventListResponse,
-  AdminAgcTrackingEventQuery,
  AdminConfirmEditorShowcaseCampaignImageUploadRequest,
  AdminCreateAccountRequest,
  AdminCreateAccountResponse,
@@ -29,22 +26,10 @@ import type {
  AdminErrorReportDetail,
  AdminErrorReportEntry,
  AdminErrorReportListResponse,
-  AdminExternalApiKeyListQuery,
-  AdminExternalApiKeyListResponse,
  AdminFeatureGateConfigResponse,
-  AdminGameDistributionGameListResponse,
-  AdminGameDistributionRestoreRequest,
-  AdminGameDistributionRestoreResponse,
-  AdminGameDistributionReviewListResponse,
-  AdminGameDistributionReviewRequest,
-  AdminGameDistributionReviewResponse,
-  AdminImportAgcTemplatesResponse,
  AdminLoginResponse,
  AdminMeResponse,
  AdminOverviewResponse,
-  AdminProjectSnapshotChannelsResponse,
-  AdminProjectSnapshotListQuery,
-  AdminProjectSnapshotListResponse,
  AdminRechargeOrderListQuery,
  AdminRechargeOrderListResponse,
  AdminRechargeRefundActionResponse,
@@ -58,7 +43,6 @@ import type {
  AdminTrackingEventListResponse,
  AdminUpdateAccountRequest,
  AdminUpdateAccountResponse,
-  AdminUpdateAgcTemplateRequest,
  AdminUploadedEditorShowcaseCampaignImage,
  AdminUpsertEditorShowcaseCampaignRequest,
  AdminUpsertFeatureGateConfigRequest,
@@ -97,8 +81,6 @@ interface AdminRequestOptions {
  method?: string;
  token?: string;
  body?: unknown;
-  /** multipart 表单：交给浏览器自己带 boundary，不能预设 Content-Type。 */
-  formData?: FormData;
  headers?: Record<string, string>;
  signal?: AbortSignal;
 }
@@ -186,8 +168,6 @@ export async function request<T>(
  if (typeof options.body !== 'undefined') {
    headers['Content-Type'] = 'application/json';
    init.body = JSON.stringify(options.body);
-  } else if (options.formData) {
-    init.body = options.formData;
  }

  const response = await fetch(buildRequestUrl(path), init);
@@ -216,107 +196,6 @@ export function listAdminAccounts(token: string) {
  return request<AdminAccountListResponse>('/admin/api/accounts', { token });
 }

-export function listAdminProjectSnapshots(
-  token: string,
-  query: AdminProjectSnapshotListQuery = {},
-  signal?: AbortSignal,
-) {
-  const params = new URLSearchParams();
-  if (query.cursor) params.set('cursor', query.cursor);
-  if (query.channel) params.set('channel', query.channel);
-  params.set('limit', String(query.limit ?? 20));
-  return request<AdminProjectSnapshotListResponse>(
-    `/admin/api/project-snapshots?${params.toString()}`,
-    { token, signal },
-  );
-}
-
-export function getAdminProjectSnapshotChannels(
-  token: string,
-  signal?: AbortSignal,
-) {
-  return request<AdminProjectSnapshotChannelsResponse>(
-    '/admin/api/project-snapshots/channels',
-    { token, signal },
-  );
-}
-
-export async function downloadAdminProjectSnapshot(
-  token: string,
-  channel: string,
-  userId: string,
-  projectId: string,
-  signal?: AbortSignal,
-) {
-  const params = new URLSearchParams();
-  if (channel) params.set('channel', channel);
-  const query = params.toString();
-  const path = `/admin/api/project-snapshots/${encodeURIComponent(userId)}/${encodeURIComponent(projectId)}/download${query ? `?${query}` : ''}`;
-  const response = await fetch(buildRequestUrl(path), {
-    headers: {
-      Authorization: `Bearer ${token.trim()}`,
-      Accept: 'application/zip',
-      [API_RESPONSE_ENVELOPE_HEADER]: 'v1',
-    },
-    signal,
-  });
-  if (!response.ok) {
-    const responseText = await response.text();
-    throw buildAdminApiError(
-      response,
-      parseJsonResponse(responseText),
-      responseText,
-    );
-  }
-  const contentType = response.headers
-    .get('content-type')
-    ?.split(';')[0]
-    ?.trim()
-    .toLowerCase();
-  if (contentType !== 'application/zip') {
-    await response.body?.cancel();
-    throw new AdminApiError({
-      message: '下载失败：服务端未返回 ZIP 工程文件',
-      status: response.status,
-      code: 'INVALID_PROJECT_ARCHIVE_RESPONSE',
-    });
-  }
-  return {
-    blob: await response.blob(),
-    filename: projectArchiveFilename(
-      response.headers.get('content-disposition'),
-    ),
-  };
-}
-
-function projectArchiveFilename(contentDisposition: string | null): string {
-  const extended = contentDisposition?.match(
-    /(?:^|;)\s*filename\*=UTF-8'[^']*'([^;]+)/i,
-  );
-  const ordinary = contentDisposition?.match(
-    /(?:^|;)\s*filename=(?:"((?:[^"\\]|\\.)*)"|([^;]+))/i,
-  );
-  let filename =
-    ordinary?.[1]?.replace(/\\(.)/g, '$1') ?? ordinary?.[2]?.trim() ?? '';
-  if (extended?.[1]) {
-    try {
-      filename = decodeURIComponent(extended[1].trim());
-    } catch {
-      // 非法扩展编码继续使用普通文件名。
-    }
-  }
-  const safeName = Array.from(filename, (character) => {
-    const code = character.charCodeAt(0);
-    return code < 32 || code === 127 ? '_' : character;
-  })
-    .join('')
-    .replace(/[<>:"/\\|?*]/g, '_')
-    .trim()
-    .replace(/[. ]+$/, '');
-  if (!safeName || safeName.length > 240) return 'project.zip';
-  return /\.zip$/i.test(safeName) ? safeName : `${safeName}.zip`;
-}
-
 export function createAdminAccount(
  token: string,
  payload: AdminCreateAccountRequest,
@@ -370,16 +249,6 @@ export function getAdminDatabaseTableRows(
  );
 }

-export function getAdminExternalApiKeys(
-  token: string,
-  query: AdminExternalApiKeyListQuery = {},
-) {
-  return request<AdminExternalApiKeyListResponse>(
-    `/admin/api/external-api-keys${buildExternalApiKeyQuery(query)}`,
-    { token },
-  );
-}
-
 export function debugAdminHttp(token: string, payload: AdminDebugHttpRequest) {
  return request<AdminDebugHttpResponse>('/admin/api/debug/http', {
    method: 'POST',
@@ -414,31 +283,6 @@ export function listAdminTrackingEventKeys(token: string) {
  );
 }

-export function listAdminAgcTrackingEvents(
-  token: string,
-  query: AdminAgcTrackingEventQuery = {},
-) {
-  return request<AdminAgcTrackingEventListResponse>(
-    `/admin/api/agc/tracking-events${buildQueryString((params) => {
-      for (const key of [
-        'userId',
-        'projectId',
-        'creativeTaskId',
-        'agentRunId',
-        'eventName',
-        'clientVersion',
-        'startTime',
-        'endTime',
-        'cursor',
-      ] as const) {
-        appendQueryParam(params, key, query[key]);
-      }
-      appendNumericQueryParam(params, 'limit', query.limit);
-    })}`,
-    { token },
-  );
-}
-
 export function listAdminErrorReports(
  token: string,
  query: {
@@ -1084,28 +928,6 @@ function buildDatabaseTableRowsQuery(query: AdminDatabaseTableRowsQuery) {
  return queryString ? `?${queryString}` : '';
 }

-function buildExternalApiKeyQuery(query: AdminExternalApiKeyListQuery) {
-  const params = new URLSearchParams();
-  appendQueryParam(params, 'ownerUserId', query.ownerUserId);
-  appendQueryParam(params, 'publicUserCode', query.publicUserCode);
-  appendQueryParam(params, 'keyId', query.keyId);
-  appendQueryParam(params, 'name', query.name);
-  appendQueryParam(params, 'keyPrefix', query.keyPrefix);
-  appendQueryParam(params, 'createdAfter', query.createdAfter);
-  appendQueryParam(params, 'createdBefore', query.createdBefore);
-  appendQueryParam(params, 'status', query.status);
-  if (typeof query.limit === 'number' && Number.isFinite(query.limit)) {
-    params.set('limit', String(Math.floor(query.limit)));
-  }
-  if (typeof query.offset === 'number' && Number.isFinite(query.offset)) {
-    params.set('offset', String(Math.floor(query.offset)));
-  }
-  appendQueryParam(params, 'sortColumn', query.sortColumn);
-  appendQueryParam(params, 'sortDirection', query.sortDirection);
-  const queryString = params.toString();
-  return queryString ? `?${queryString}` : '';
-}
-
 function buildEditorAssetListQuery(query: AdminEditorAssetListQuery) {
  const params = new URLSearchParams();
  appendQueryParam(params, 'cursor', query.cursor);
@@ -1216,158 +1038,3 @@ function buildAdminApiError(
 function isRecord(value: unknown): value is Record<string, unknown> {
  return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-export function getAgcModelCatalog(token: string) {
-  return request<import('./adminApiTypes').AdminAgcModelCatalog>(
-    '/admin/api/agc-models',
-    { token },
-  );
-}
-
-export function saveAgcModelCatalog(
-  token: string,
-  body: import('./adminApiTypes').AdminAgcModelCatalog,
-) {
-  return request<import('./adminApiTypes').AdminAgcModelCatalog>(
-    '/admin/api/agc-models',
-    { token, method: 'PUT', body },
-  );
-}
-
-export function listAdminGameDistributionReviews(token: string, limit = 48) {
-  const normalizedLimit = Number.isFinite(limit)
-    ? Math.min(Math.max(Math.trunc(limit), 1), 48)
-    : 48;
-  return request<AdminGameDistributionReviewListResponse>(
-    `/admin/api/game-distribution/reviews?limit=${normalizedLimit}`,
-    { token },
-  );
-}
-
-export function listAdminGameDistributionGames(
-  token: string,
-  options: { limit?: number } = {},
-  signal?: AbortSignal,
-) {
-  const requestedLimit = options.limit ?? 50;
-  const normalizedLimit = Number.isFinite(requestedLimit)
-    ? Math.min(Math.max(Math.trunc(requestedLimit), 1), 50)
-    : 50;
-  return request<AdminGameDistributionGameListResponse>(
-    `/admin/api/game-distribution/games?limit=${normalizedLimit}`,
-    { token, signal },
-  );
-}
-
-export function restoreAdminGameDistributionGame(
-  token: string,
-  gameId: string,
-  idempotencyKey: string,
-  payload: AdminGameDistributionRestoreRequest,
-) {
-  const normalizedGameId = gameId.trim();
-  const normalizedKey = idempotencyKey.trim();
-  if (!normalizedGameId) {
-    throw new Error('缺少游戏 ID');
-  }
-  if (!normalizedKey || normalizedKey.length > 128) {
-    throw new Error('恢复幂等键必须是 1 到 128 个字符');
-  }
-  return request<AdminGameDistributionRestoreResponse>(
-    `/admin/api/game-distribution/games/${encodeURIComponent(normalizedGameId)}/restore`,
-    {
-      method: 'POST',
-      token,
-      headers: { 'Idempotency-Key': normalizedKey },
-      body: payload,
-    },
-  );
-}
-
-/**
- * 审核游戏发行版本。幂等键由调用方生成并在同一次提交内复用，避免重复点击产生
- * 两条审核结论。
- */
-/**
- * 安全下架整个游戏。管理员下架同样要求 CAS 修订号与幂等键，避免并发审核互相覆盖。
- */
-export function suspendAdminGameDistributionGame(
-  token: string,
-  gameId: string,
-  idempotencyKey: string,
-  payload: import('./adminApiTypes').AdminGameDistributionSuspendRequest,
-) {
-  const normalizedGameId = gameId.trim();
-  const normalizedKey = idempotencyKey.trim();
-  if (!normalizedGameId) {
-    throw new Error('缺少游戏 ID');
-  }
-  if (!normalizedKey || normalizedKey.length > 128) {
-    throw new Error('下架幂等键必须是 1 到 128 个字符');
-  }
-  return request<
-    import('./adminApiTypes').AdminGameDistributionSuspendResponse
-  >(
-    `/admin/api/game-distribution/games/${encodeURIComponent(normalizedGameId)}/suspend`,
-    {
-      method: 'POST',
-      token,
-      headers: { 'Idempotency-Key': normalizedKey },
-      body: payload,
-    },
-  );
-}
-
-export function reviewAdminGameDistributionVersion(
-  token: string,
-  versionId: string,
-  idempotencyKey: string,
-  payload: AdminGameDistributionReviewRequest,
-) {
-  const normalizedVersionId = versionId.trim();
-  const normalizedKey = idempotencyKey.trim();
-  if (!normalizedVersionId) {
-    throw new Error('缺少发行版本 ID');
-  }
-  if (!normalizedKey || normalizedKey.length > 128) {
-    throw new Error('审核幂等键必须是 1 到 128 个字符');
-  }
-  return request<AdminGameDistributionReviewResponse>(
-    `/admin/api/game-distribution/versions/${encodeURIComponent(normalizedVersionId)}/review`,
-    {
-      method: 'POST',
-      token,
-      headers: { 'Idempotency-Key': normalizedKey },
-      body: payload,
-    },
-  );
-}
-
-export function getAdminAgcTemplates(token: string, signal?: AbortSignal) {
-  return request<AdminAgcTemplateLibraryResponse>('/admin/api/agc-templates', {
-    token,
-    signal,
-  });
-}
-
-export function updateAdminAgcTemplate(
-  token: string,
-  id: string,
-  body: AdminUpdateAgcTemplateRequest,
-) {
-  return request<AdminAgcTemplateLibraryResponse>(
-    `/admin/api/agc-templates/${encodeURIComponent(id)}`,
-    { token, method: 'PUT', body },
-  );
-}
-
-/** 批量导入模板包：manifest 与 zip_N / cover_N 一起走 multipart，一批一次锁一次提交。 */
-export function importAdminAgcTemplates(token: string, formData: FormData) {
-  return request<AdminImportAgcTemplatesResponse>(
-    '/admin/api/agc-templates/import',
-    {
-      token,
-      method: 'POST',
-      formData,
-    },
-  );
-}
@@ -96,36 +96,6 @@ export interface AdminMeResponse {
  admin: AdminSessionPayload;
 }

-export interface AdminProjectSnapshotEntry {
-  userId: string;
-  projectId: string;
-  projectName: string | null;
-  syncRevision: number;
-  syncedAtMs: number;
-  fileCount: number;
-  totalBytes: number;
-  status: 'ready' | 'partial' | 'unverified';
-  channel: string;
-  authorDisplayName?: string | null;
-  authorPublicUserCode?: string | null;
-}
-
-export interface AdminProjectSnapshotListQuery {
-  cursor?: string | null;
-  limit?: number;
-  channel?: string | null;
-}
-
-export interface AdminProjectSnapshotListResponse {
-  items: AdminProjectSnapshotEntry[];
-  nextCursor: string | null;
-}
-
-export interface AdminProjectSnapshotChannelsResponse {
-  defaultChannel: string;
-  channels: string[];
-}
-
 export interface AdminErrorReportEntry {
  batchId: string;
  eventCount: number;
@@ -153,8 +123,6 @@ export interface AdminErrorReportListResponse {
 }

 export interface AdminErrorReportDetail extends AdminErrorReportEntry {
-  firstFingerprint?: string;
-  firstSource?: string;
  note?: string;
  events: Array<Record<string, unknown>>;
  logNames: string[];
@@ -193,10 +161,7 @@ export interface AdminDashboardRangePayload {

 export interface AdminDashboardMetricsPayload {
  generatedAssets: number;
-  /** 已对冲退还（生成失败 / 精选审核返还 / LLM Router 冲正）的净消耗泥点。 */
  consumedMudPoints: number;
-  /** 同期退还泥点，用于核对「消耗 + 退还」的毛消耗口径。 */
-  refundedMudPoints: number;
  totalRegisteredUsers: number;
  newRegisteredUsers: number;
  newUserPaymentConversion: AdminDashboardPaymentConversionPayload;
@@ -310,51 +275,6 @@ export interface AdminDatabaseTableStatPayload {
  errorMessage: string | null;
 }

-export interface AdminExternalApiKeyListQuery {
-  ownerUserId?: string;
-  publicUserCode?: string;
-  keyId?: string;
-  name?: string;
-  keyPrefix?: string;
-  createdAfter?: string;
-  createdBefore?: string;
-  status?: 'active' | 'revoked';
-  limit?: number;
-  offset?: number;
-  sortColumn?:
-    | 'keyId'
-    | 'ownerUserId'
-    | 'name'
-    | 'keyPrefix'
-    | 'createdAt'
-    | 'lastUsedAt'
-    | 'updatedAt';
-  sortDirection?: 'asc' | 'desc';
-}
-
-export interface AdminExternalApiKeyPayload {
-  keyId: string;
-  ownerUserId: string;
-  name: string;
-  keyPrefix: string;
-  scopes: string[];
-  createdAt: string;
-  lastUsedAt: string | null;
-  revokedAt: string | null;
-  updatedAt: string;
-  status: 'active' | 'revoked';
-}
-
-export interface AdminExternalApiKeyListResponse {
-  keys: AdminExternalApiKeyPayload[];
-  total: number;
-  limit: number;
-  offset: number;
-  scannedCount: number;
-  scanLimit: number;
-  scanLimitReached: boolean;
-}
-
 export interface AdminDebugHeaderInput {
  name: string;
  value: string;
@@ -823,44 +743,6 @@ export interface AdminTrackingEventListResponse {
  entries: AdminTrackingEventEntryPayload[];
 }

-export interface AdminAgcTrackingEventQuery {
-  userId?: string;
-  projectId?: string;
-  creativeTaskId?: string;
-  agentRunId?: string;
-  eventName?: string;
-  clientVersion?: string;
-  startTime?: string;
-  endTime?: string;
-  cursor?: string;
-  limit?: number;
-}
-
-export interface AdminAgcTrackingEventEntry {
-  eventId: string;
-  schemaVersion: number;
-  eventName: string;
-  eventTime: string;
-  userId: string;
-  editorSessionId: string;
-  projectId: string | null;
-  creativeTaskId: string | null;
-  agentRunId: string | null;
-  agentTurnId: string | null;
-  status: string | null;
-  errorCode: string | null;
-  source: string;
-  clientVersion: string;
-  properties: Record<string, unknown>;
-  batchId: string;
-  receivedAt: string;
-}
-
-export interface AdminAgcTrackingEventListResponse {
-  entries: AdminAgcTrackingEventEntry[];
-  nextCursor: string | null;
-}
-
 export interface AdminTrackingEventKeyPayload {
  eventKey: string;
  eventTitle: string;
@@ -958,8 +840,6 @@ export interface AdminRechargeOrderEntryPayload {
  productTitle: string;
  productKind: string;
  amountCents: number;
-  /** 真实支付金额（分）：未支付 / 已关闭 / 已过期订单固定为 0，不能拿订单金额当实付。 */
-  paidAmountCents: number;
  status: string;
  paymentChannel: string;
  paidAtMicros?: number | null;
@@ -999,8 +879,6 @@ export interface AdminUserDetailResponse {
  phoneBound: boolean;
  wechatBound: boolean;
  historicalConsumedPoints: number;
-  /** 累计充值金额（分）：读取失败或命中读取上限时为 null，前端按未知展示。 */
-  cumulativeRechargedCents?: number | null;
  canReconcileConsumption: boolean;
  wallet: AdminProfileWalletPayload;
  rechargeOrders: AdminRechargeOrderEntryPayload[];
@@ -1075,174 +953,3 @@ export interface AdminRechargeRefundActionResponse {
 export interface AdminWalletRestrictionResponse {
  wallet: AdminProfileWalletPayload;
 }
-export interface AdminAgcModel {
-  id: string;
-  alias: string;
-  modelId: string;
-  enabled: boolean;
-}
-
-export interface AdminAgcModelCatalog {
-  revision: number;
-  defaultModelId: string;
-  models: AdminAgcModel[];
-}
-
-export interface AdminGameDistributionReviewEntry {
-  versionId: string;
-  gameId: string;
-  versionNumber: number;
-  packageSha256: string;
-  packageBytes: number;
-  status: string;
-  publicationRevision: number;
-  reviewReason: string | null;
-  createdAt: string;
-  updatedAt: string;
-}
-
-export interface AdminGameDistributionReviewListResponse {
-  entries: AdminGameDistributionReviewEntry[];
-  nextCursor: string | null;
-}
-
-export interface AdminGameDistributionReviewRequest {
-  decision: 'approve' | 'reject';
-  expectedPublicationRevision: number;
-  reviewReason?: string;
-}
-
-export interface AdminGameDistributionReviewResponse {
-  version: AdminGameDistributionReviewEntry;
-  replayed: boolean;
-}
-
-export interface AdminGameDistributionSuspendRequest {
-  expectedPublicationRevision: number;
-  reason?: string;
-}
-
-export interface AdminGameDistributionSuspendResponse {
-  game: {
-    id: string;
-    title: string;
-    status: string;
-    publicationRevision: number;
-  };
-  replayed: boolean;
-}
-
-export interface AdminGameDistributionGameVersionEntry {
-  versionId: string;
-  gameId: string;
-  versionNumber: number;
-  status: string;
-  reviewReason: string | null;
-  packageBytes: number;
-  packageSha256: string;
-  createdAt: string;
-  updatedAt: string;
-  reviewedAt: string | null;
-  publishedAt: string | null;
-  entryUrl: string | null;
-}
-
-export interface AdminGameDistributionGameEntry {
-  gameId: string;
-  title: string;
-  author: {
-    id: string;
-    name: string;
-    avatarUrl: string | null;
-  };
-  status: string;
-  versionCount: number;
-  playCount: number;
-  activeVersionId: string | null;
-  publicationRevision: number;
-  createdAt: string;
-  updatedAt: string;
-  versions: AdminGameDistributionGameVersionEntry[];
-}
-
-export interface AdminGameDistributionGameListResponse {
-  games: AdminGameDistributionGameEntry[];
-}
-
-export interface AdminGameDistributionRestoreRequest {
-  expectedPublicationRevision: number;
-}
-
-export interface AdminGameDistributionRestoreResponse {
-  game: {
-    id: string;
-    title: string;
-    status: string;
-    publicationRevision: number;
-  };
-  replayed: boolean;
-}
-
-export interface AdminAgcTemplatePayload {
-  id: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  runtime: string;
-  engine: string;
-  engineVersion: string;
-  templateVersion: string;
-  enabled: boolean;
-  coverUrl: string;
-  zipSizeBytes: number;
-}
-
-export interface AdminAgcTemplateLibraryResponse {
-  revision: string;
-  writable: boolean;
-  templates: AdminAgcTemplatePayload[];
-}
-
-export interface AdminUpdateAgcTemplateRequest {
-  expectedRevision: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  enabled: boolean;
-  cover?: {
-    contentType: string;
-    dataBase64: string;
-  };
-}
-
-export interface AdminImportAgcTemplateItemPayload {
-  id: string;
-  title: string;
-  summary: string;
-  tags: string[];
-  runtime: string;
-  engine: string;
-  engineVersion: string;
-  templateVersion: string;
-  entry: string;
-  zipField: string;
-  coverField: string;
-}
-
-export interface AdminImportAgcTemplatesManifest {
-  expectedRevision: string;
-  templates: AdminImportAgcTemplateItemPayload[];
-}
-
-export interface AdminImportAgcTemplateResult {
-  id: string;
-  templateVersion: string;
-  zipSizeBytes: number;
-  zipSha256: string;
-  reusedObjects: boolean;
-}
-
-export interface AdminImportAgcTemplatesResponse
-  extends AdminAgcTemplateLibraryResponse {
-  imported: AdminImportAgcTemplateResult[];
-}
@@ -1,148 +0,0 @@
-import { afterEach, expect, test, vi } from 'vitest';
-
-import {
-  downloadAdminProjectSnapshot,
-  getAdminProjectSnapshotChannels,
-  listAdminProjectSnapshots,
-} from './adminApiClient';
-
-afterEach(() => {
-  vi.unstubAllGlobals();
-});
-
-test('项目列表携带分页与后台授权，解析标准响应', async () => {
-  const payload = { items: [], nextCursor: 'next' };
-  const fetchMock = vi
-    .fn()
-    .mockResolvedValue(
-      new Response(JSON.stringify({ ok: true, data: payload })),
-    );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  expect(
-    await listAdminProjectSnapshots(
-      'admin-token',
-      { cursor: 'user/a+项目', limit: 20, channel: 'release' },
-      controller.signal,
-    ),
-  ).toEqual(payload);
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/project-snapshots?cursor=user%2Fa%2B%E9%A1%B9%E7%9B%AE&channel=release&limit=20',
-    expect.objectContaining({
-      headers: expect.objectContaining({ Authorization: 'Bearer admin-token' }),
-      signal: controller.signal,
-    }),
-  );
-});
-
-test('渠道列表按后台授权读取，解析本部署渠道', async () => {
-  const payload = { defaultChannel: 'release', channels: ['dev', 'release'] };
-  const fetchMock = vi
-    .fn()
-    .mockResolvedValue(
-      new Response(JSON.stringify({ ok: true, data: payload })),
-    );
-  vi.stubGlobal('fetch', fetchMock);
-  expect(await getAdminProjectSnapshotChannels('admin-token')).toEqual(payload);
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/project-snapshots/channels',
-    expect.objectContaining({
-      headers: expect.objectContaining({ Authorization: 'Bearer admin-token' }),
-    }),
-  );
-});
-
-test('ZIP 下载以授权请求读取并优先保留中文附件名', async () => {
-  const fetchMock = vi.fn().mockResolvedValue(
-    new Response('PK\u0003\u0004', {
-      headers: {
-        'content-type': 'application/zip',
-        'content-disposition':
-          "attachment; filename=project.zip; filename*=UTF-8''%E4%B8%89%E6%B6%88-r2.zip",
-      },
-    }),
-  );
-  vi.stubGlobal('fetch', fetchMock);
-  const controller = new AbortController();
-  const archive = await downloadAdminProjectSnapshot(
-    'admin-token',
-    'release',
-    'user/a',
-    'project/b',
-    controller.signal,
-  );
-  expect(archive.filename).toBe('三消-r2.zip');
-  expect(archive.blob.type).toBe('application/zip');
-  expect(fetchMock).toHaveBeenCalledWith(
-    '/admin/api/project-snapshots/user%2Fa/project%2Fb/download?channel=release',
-    expect.objectContaining({
-      headers: expect.objectContaining({
-        Authorization: 'Bearer admin-token',
-        Accept: 'application/zip',
-      }),
-      signal: controller.signal,
-    }),
-  );
-});
-
-test.each([
-  ['attachment; filename="工程.zip"; filename*=UTF-8\'\'%broken', '工程.zip'],
-  ['attachment; filename="../secret.zip"', '.._secret.zip'],
-  ["attachment; filename*=UTF-8''unsafe%00%1F%7F.zip", 'unsafe___.zip'],
-  [null, 'project.zip'],
-])('ZIP 附件名兼容安全回退 %s', async (header, expected) => {
-  const headers: Record<string, string> = { 'content-type': 'application/zip' };
-  // Response 的 Headers 只接受 Latin-1；真实 UTF-8 文件名使用 filename*。
-  if (header)
-    headers['content-disposition'] = header.replace('工程', 'project');
-  vi.stubGlobal(
-    'fetch',
-    vi.fn().mockResolvedValue(new Response('PK', { headers })),
-  );
-  expect(
-    (await downloadAdminProjectSnapshot('token', 'release', 'user', 'project'))
-      .filename,
-  ).toBe(expected.replace('工程', 'project'));
-});
-
-test.each([401, 403, 409, 500])(
-  '下载 HTTP %s 保留后台错误，不返回 ZIP',
-  async (status) => {
-    vi.stubGlobal(
-      'fetch',
-      vi.fn().mockResolvedValue(
-        new Response(
-          JSON.stringify({
-            ok: false,
-            error: { code: 'SNAPSHOT_FAILURE', message: '工程尚未同步完成' },
-          }),
-          {
-            status,
-            headers: { 'content-type': 'application/json' },
-          },
-        ),
-      ),
-    );
-    await expect(
-      downloadAdminProjectSnapshot('token', 'release', 'user', 'project'),
-    ).rejects.toMatchObject({
-      status,
-      code: 'SNAPSHOT_FAILURE',
-      message: '工程尚未同步完成',
-    });
-  },
-);
-
-test('200 JSON 或 HTML 不能被保存为成功 ZIP', async () => {
-  vi.stubGlobal(
-    'fetch',
-    vi.fn().mockResolvedValue(
-      new Response('{"ok":false}', {
-        headers: { 'content-type': 'application/json' },
-      }),
-    ),
-  );
-  await expect(
-    downloadAdminProjectSnapshot('token', 'release', 'user', 'project'),
-  ).rejects.toMatchObject({ code: 'INVALID_PROJECT_ARCHIVE_RESPONSE' });
-});
--- a/Show More
+++ b/Show More
Author	SHA1	Message	Date
k88936	f24949f732	共享 CanvasWorld 统一超采样 Project CI / Repository checks (pull_request) Successful in 2m45s Details Project CI / Frontend tests (pull_request) Failing after 2m52s Details Project CI / Native shell tests (pull_request) Failing after 5m49s Details Project CI / Backend tests (pull_request) Successful in 7m24s Details 默认以 2 倍内容分辨率渲染并保持 viewport.scale 的最终视觉比例用反向 stroke-width 抵消资源卡 SVG 图标的超采样线宽补充共享 CanvasWorld 超采样契约测试	2026-09-05 12:45:00 +08:00
k88936	a3dfd37576	补充共享画布超采样决策文档记录 CanvasWorld 默认 2 倍超采样与 viewport.scale 视觉比例契约记录资源页继续使用 12000 正方形 world 且不新增矩形尺寸 API 记录 SVG 描边与资源页迁移验收边界	2026-09-05 12:43:22 +08:00
k88936	fb8720e3af	资源页复用共享 CanvasWorld 移除项目开发页自有 world 变换与动态矩形尺寸通过共享 CanvasWorld 提供资源卡控件反向缩放变量	2026-09-05 12:42:42 +08:00