删掉 ADR 0002 文末多余的空行，让 diff --check 通过

- docs/adr/0002：去掉文件末尾多出的一个空行，文件以单个换行结尾；正文内容不变
Merge remote-tracking branch 'origin/master' into feat/tribo3d-integeration
2026-09-24 21:34:22 +08:00 · 2026-09-24 21:18:31 +08:00 · 2026-09-24 21:14:19 +08:00 · 2026-09-24 21:12:43 +08:00 · 2026-09-24 21:11:56 +08:00 · 2026-09-24 21:07:09 +08:00
581 changed files with 41546 additions and 16440 deletions
@@ -5,131 +5,42 @@ description: Guide use of Genarrative's hosted external editor/canvas MCP or asy

 # Genarrative External Editor API

-Discover the live integration through `GET https://www.genarrative.world/api/external/v1/agent-integration.json`. Treat `GET https://www.genarrative.world/api/external/v1/openapi.json` as the field-level source of truth. In this repository, the same contract is `docs/openapi/genarrative-external-v1.openapi.json`.
+Use Genarrative to manage canvas projects and asset-library records, generate images, character animations, videos, and audio, and edit images. Discover the hosted integration at `https://www.genarrative.world/api/external/v1/agent-integration.json`.

-Prefer the hosted Streamable HTTP MCP at `https://www.genarrative.world/api/external/v1/mcp` when the Agent supports remote MCP with a custom Bearer token. It exposes the External v1 operations as tools and the Skill documentation as resources; it does not require a local MCP server. Use this complete Skill package when remote MCP is unavailable or local-file upload needs client-side orchestration.
+Connect to `https://www.genarrative.world/api/external/v1/mcp` using Streamable HTTP and a Bearer API Key. Read tool descriptions and input schemas from `tools/list`; read the documents below through `resources/read` when needed. The hosted service needs no local MCP server. For direct REST, use the live `/api/external/v1/openapi.json` contract (in this repository: `docs/openapi/genarrative-external-v1.openapi.json`).

-Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses only Python stdlib, reads the local private API Key file, keeps the production base URL fixed, uploads local references, and wraps asynchronous submission, polling, and result retrieval.
+## Working with the Service

-## Workflow
-
-1. Discover the integration manifest. Choose hosted MCP when supported; otherwise use the helper or direct REST.
-2. Before the first generation in a new conversation, obtain a canvas name unless an existing `projectId` and `assetFolderId` were supplied. Create or reuse a project and a same-name asset-library folder. Retain `canvasName`, `projectId`, `assetFolderId`, and the current art spec.
-3. Normalize art requests into a reusable spec. Ask only for missing values that block the selected operation. Reuse the spec until the user changes its style, subject family, palette, format, or constraints.
-4. Infer the operation from the user's intent. Do not ask the user to select an API unless two operations would produce materially different artifacts.
-5. If a reference exists only as a local file, upload and confirm it first. Pass the stable returned `objectKey` to operations that accept object references; never substitute a temporary signed URL. For an icon-spritesheet primary spec, additionally create a project resource or asset record with `assetKind="icon-spec"`, then pass the returned resource or asset ID as `referenceId`.
-6. For generation endpoints that support the fields, include `projectId`, `assetFolderId`, an asset label, and `canvasCompletion` so the result enters both the canvas and its same-name library folder.
-7. Treat every generation POST as asynchronous. Send one stable `Idempotency-Key` per logical request, retain the returned `operationId`, and poll the returned `statusUrl` or `GET /api/external/v1/generations/{operationId}` according to `pollAfterMs`.
-8. Consume `result` only after `status=completed`. On `failed`, surface the safe error. On a client timeout or lost response, retain the operation/key; do not create a replacement request.
-9. Reload the normal project or asset-library read endpoint when the caller needs complete authoritative state. Generation results are intentionally compact.
-10. Stay within `/api/external/v1`. Never call internal workers, queues, admin/profile APIs, or SpacetimeDB endpoints unless the user explicitly changes scope.
-
-## Essential Invariants
-
- Authenticate MCP and business API calls with `Authorization: Bearer <tnr_sk_...>`. Never ask the user to paste a key into chat or place one in repository files.
- All nine generation POST routes require `Idempotency-Key` and return HTTP `202`; `202` is durable acceptance, not a media result.
- Retry an uncertain submission only with the exact same body and the same idempotency key. A polling timeout is not permission to generate again.
- Use stable references such as `objectKey`, project resource ID, or asset ID where each operation permits them. Image edit/redraw is stricter: `sourceReferenceId` accepts only a registered project resource ID or asset ID; upload confirmation alone is not enough. Use `/assets/read-url` only for temporary preview/download access.
- Preserve both warning channels after completion. A general `warning` can coexist with `sliceWarning`; do not discard either.
- Do not invent missing derivatives. A source-preserved warning means the main source remains usable but requested post-processing failed. A slice warning means the complete transparent sheet is usable but individual slices are absent.
- Icon spritesheet generation requires an explicit `sliceMode` and has no default. Use `sliceMode="grid"` with the `gridX` and `gridY` the requirement actually names (1-32 each) only for equal grid cells or fixed slots; use `sliceMode="connected-components"` for free-form sheets or an open number of subjects, and constrain the count with `sliceCount` instead of inventing grid dimensions. `connected-components` must not carry `gridX`/`gridY`; an omitted, contradictory, or misapplied declaration returns 400 before billing.
- For successful `style="pixelArt"`, treat completed-result and nested resource/asset dimensions as the final logical-grid PNG dimensions. They may differ from `size`, `imageSize`, the provider image, and `canvasCompletion.placeholder`; do not rescale or reject the artifact to match those inputs.
- Keep generated artifacts in the canvas and asset library together. Character animation accepts `assetFolderId` and `assetLabel`; its completed result directly returns the final `assetKind="character-animation"` resource and asset with formal sequence fields. Do not create a duplicate first-frame record.
+- Select tools by the requested outcome. Use `find_canvas_projects` and `find_assets` to locate existing context; create projects or folders only when the task needs them. A folder need not have the same name as the project.
+- For generation, specify project, library, and `canvasCompletion` fields only as supported by the selected tool and needed for the requested destination. Do not duplicate records already created by generation.
+- Upload local references using `prepare_asset_upload`: request a ticket, transfer the file from the client, then confirm the object. Confirmation does not create a canvas layer or a project/library record. Use the reference type accepted by the target tool; some operations require a registered resource or asset ID rather than an object key.
+- Generation is paid and asynchronous. Keep one stable `idempotencyKey` per logical generation and retain the returned `operationId`. Call `check_generation` according to `pollAfterMs`; consume `result` only after `completed`, and report the safe error on `failed`. A polling timeout does not justify another generation.
+- Read actual artifacts and warnings before claiming the requested deliverable is complete. Use project/library reads for complete persisted records, and `find_assets` with `action=get_download_url` for temporary media access.
+- Keep API Keys and temporary upload/download credentials out of chat, repository files, and logs. Business calls operate within the API Key's owner and scopes.

 ## Documentation Navigation

-Read only the references needed for the task, but always verify exact schemas and enums against live OpenAPI:
+Read the reference relevant to the current operation; exact input fields and enums come from the tool schema or OpenAPI.

- `references/capability-routing.md`: read before selecting an MCP tool or REST operation, creating a canvas session, or working in the AI game creator visual DAG.
- `references/api-operations.md`: read when constructing project, canvas, asset-library, upload, generation, or generation-status calls.
- `references/authentication-and-safety.md`: read before handling credentials, local files, OSS form upload, retries, private media, or logs.
- `references/requests-and-outputs.md`: read before building generation payloads, polling, interpreting compact results, applying canvas completion, or handling post-processing warnings.
+| Need | Reference | MCP resource URI |
+| --- | --- | --- |
+| Choose tools and actions by user intent | [Capability routing](references/capability-routing.md) | `genarrative://external-editor/skill/references/capability-routing.md` |
+| Map tool calls to REST operations | [API operations](references/api-operations.md) | `genarrative://external-editor/skill/references/api-operations.md` |
+| Configure credentials, upload files, handle retries and deletion | [Authentication and safety](references/authentication-and-safety.md) | `genarrative://external-editor/skill/references/authentication-and-safety.md` |
+| Construct requests, poll results, place media, handle warnings | [Requests and outputs](references/requests-and-outputs.md) | `genarrative://external-editor/skill/references/requests-and-outputs.md` |

-The hosted MCP exposes the same documents through:
+`genarrative://external-editor/usage` contains the short service instructions; `genarrative://external-editor/openapi` contains the REST contract. This entry is available at `genarrative://external-editor/skill`. Reading a resource does not install the downloadable Skill or its Python helper.

- `genarrative://external-editor/skill`
- `genarrative://external-editor/skill/references/capability-routing.md`
- `genarrative://external-editor/skill/references/api-operations.md`
- `genarrative://external-editor/skill/references/authentication-and-safety.md`
- `genarrative://external-editor/skill/references/requests-and-outputs.md`
- `genarrative://external-editor/openapi`
+## Direct REST and Local Helpers

-## Hosted Integration Discovery
+When remote MCP is unavailable or local-file orchestration needs a helper, the complete package is available at `GET /api/external/v1/skill.zip`; the raw entry is at `GET /api/external/v1/skill/SKILL.md`. Verify the archive SHA-256 against the integration manifest before installing. The archive includes this entry, four references, `scripts/genarrative_external_api.py`, and `agents/openai.yaml`. Discovery and documentation downloads are public; MCP and business calls require authentication.

- Manifest: `GET /api/external/v1/agent-integration.json`.
- Hosted MCP: `POST /api/external/v1/mcp`, Streamable HTTP, same Bearer API Key.
- OpenAPI: `GET /api/external/v1/openapi.json`.
- Raw Skill entry: `GET /api/external/v1/skill/SKILL.md`.
- Complete Skill archive: `GET /api/external/v1/skill.zip`.
-
-The archive contains this main file, four one-level references, the Python helper, and `agents/openai.yaml`. Verify its SHA-256 against `agent-integration.json` before installing. Discovery, OpenAPI, and Skill downloads are public; MCP and business operations require authentication.
-
-## Python Helper
-
-Store the API Key outside the repository at `~/.config/genarrative/external-editor-api.json`:
-
-```json
-{
-  "apiKey": "tnr_sk_..."
-}
-```
-
-Set restrictive permissions where possible, then smoke-test without printing the key:
+The Python stdlib helper reads the private API Key file described in [authentication and safety](references/authentication-and-safety.md) and uses the production base URL. For a read-only smoke test:

 ```bash
-chmod 600 ~/.config/genarrative/external-editor-api.json
 python3 .codex/skills/genarrative-external-editor-api/scripts/genarrative_external_api.py list-projects
 ```

-For a canvas-backed generation:
+Its `prepare_canvas_session` convenience method creates or reuses a project and a same-name folder. Use it only when that organization matches the task; it is not a prerequisite for MCP or REST calls. Convenience generation methods wait locally while the server uses short asynchronous submit/status requests. Use `submit_generation`, `get_generation`, and `wait_for_generation` for caller-controlled orchestration; see [requests and outputs](references/requests-and-outputs.md).

-```python
-from genarrative_external_api import GenarrativeExternalClient
-
-client = GenarrativeExternalClient()
-session = client.prepare_canvas_session("新画板")
-client.generate_image(
-    "生成一张 16:9 幻想森林游戏背景",
-    canvasSession=session,
-    assetLabel="森林背景",
-    aspectRatio="16:9",
-    imageSize="1K",
-    artSpec={
-        "assetType": "background",
-        "subject": "幻想森林主视觉",
-        "style": "手绘游戏概念图",
-        "palette": "翡翠绿与金色光斑",
-        "composition": "横版，中心留出角色站位",
-        "format": "16:9, 1K",
-        "constraints": "无文字、无 UI 按钮",
-        "references": [],
-    },
-)
-```
-
-For background removal, pass a stable owner-scoped object key, project resource ID, or asset ID; the helper keeps the same asynchronous submission and polling contract:
-
-```python
-session = client.prepare_canvas_session("去背景画布")
-client.remove_background(
-    "editor-upload/object.png",
-    source_width=720,
-    source_height=1280,
-    canvasSession=session,
-    assetLabel="去背景结果",
-)
-```
-
-Background removal preserves the source pixel size. For normal canvas placement with `canvasSession`, pass the real `source_width` and `source_height`, or provide both `canvasWidth` and `canvasHeight`; the helper rejects missing dimensions instead of guessing a square placeholder. `assetKind` may only describe a static image and must match the authoritative source record. Prefer a project resource ID or asset ID when the same object key has multiple semantic registrations; for a raw object key outside in-place replacement, pass `sourceResourceId` to disambiguate. Passing `targetLayerId` selects in-place replacement: the helper retains the session's project/library context but does not inject `canvasCompletion`, and it rejects an explicit `canvasCompletion` combined with `targetLayerId`. The target layer must point to the same authoritative object as the source, and the server durably binds a raw object key to that target resource for Worker revalidation.
-
-Helper convenience methods wait locally, but the server still uses short asynchronous submit/status requests. For durable caller-controlled orchestration, call `submit_generation`, persist its `operationId` and idempotency key, then call `get_generation` or `wait_for_generation`.
-
-For character animation, pass the canvas session and asset label to `animate_character`. The helper submits asynchronously and returns the completed compact result containing the authoritative formal `resource` and `asset`; do not synthesize a library asset from the first frame.
-
-## Guardrails
-
- Do not change the fixed production base URL in generated examples.
- Do not move the API Key into environment variables, source files, generated projects, logs, docs, screenshots, or shell snippets containing literal secrets.
- Do not treat a Data URL, Blob URL, expiring signed URL, worker lease, or provider diagnostic as a durable result.
- Do not reconstruct authoritative canvas, resource, or library snapshots from a compact generation response.
- Do not replace icon-spritesheet generation with ordinary image generation when the deliverable requires a reusable transparent atlas.
+Stay within `/api/external/v1` for this integration. Internal workers, queues, admin/profile APIs, and SpacetimeDB endpoints are outside this contract.
@@ -4,6 +4,44 @@ Use this reference after selecting a capability. Treat `GET /api/external/v1/ope

 All paths below are relative to `https://www.genarrative.world`. Discovery and Skill download routes are public. Project, asset, upload, generation, and generation-query operations require the Bearer API Key.

+## MCP Tool to API Map
+
+The hosted MCP offers the following tools. Choose the task tool when its action matches the request; the operation tool calls the indicated REST operation directly. Task tools with actions take `{ "action": "...", "input": { ... } }`; tools without actions take the operation fields directly. `idempotencyKey` is top-level in task tools. Operation tools use `body`, `pathParameters`, and `queryParameters` wrappers from their live input schemas. Read the live tool schema and OpenAPI for exact required fields.
+
+| REST operation | Task tool (action) | Operation tool |
+| --- | --- | --- |
+| `GET /api/external/v1/openapi.json` | — | `get_external_open_api_json` |
+| `GET /api/external/v1/editor/projects` | `find_canvas_projects` (`list`) | `list_editor_projects` |
+| `GET /api/external/v1/editor/projects/recent` | `find_canvas_projects` (`recent`) | `load_recent_editor_project` |
+| `GET /api/external/v1/editor/projects/{projectId}` | `find_canvas_projects` (`get`), `find_assets` (`get_project_resources`), `edit_canvas` (`get`) | `get_editor_project` |
+| `POST /api/external/v1/editor/projects` | `manage_canvas_projects` (`create`) | `create_editor_project` |
+| `PATCH /api/external/v1/editor/projects/{projectId}/metadata` | `manage_canvas_projects` (`rename`) | `rename_editor_project` |
+| `DELETE /api/external/v1/editor/projects/{projectId}` | `delete_resources` (`delete_project`) | `delete_editor_project` |
+| `PATCH /api/external/v1/editor/projects/{projectId}/canvas` | `edit_canvas` (`save_layout`) | `save_editor_project_canvas` |
+| `POST /api/external/v1/editor/projects/{projectId}/resources` | `edit_canvas` (`register_resource`) | `create_editor_project_resource` |
+| `POST /api/external/v1/assets/direct-upload-tickets` | `prepare_asset_upload` (`create_upload_ticket`) | `create_external_direct_upload_ticket` |
+| `POST /api/external/v1/assets/objects/confirm` | `prepare_asset_upload` (`confirm_upload`) | `confirm_external_asset_object` |
+| `GET /api/external/v1/assets/read-url` | `find_assets` (`get_download_url`) | `get_external_asset_read_url` |
+| `GET /api/external/v1/editor/assets/library` | `find_assets` (`list_library`) | `get_editor_asset_library` |
+| `POST /api/external/v1/editor/assets/folders` | `organize_asset_library` (`create_folder`) | `create_editor_asset_folder` |
+| `PATCH /api/external/v1/editor/assets/folders/{folderId}` | `organize_asset_library` (`update_folder`) | `update_editor_asset_folder` |
+| `DELETE /api/external/v1/editor/assets/folders/{folderId}` | `delete_resources` (`delete_folder`) | `delete_editor_asset_folder` |
+| `POST /api/external/v1/editor/assets` | `organize_asset_library` (`create_asset`) | `create_editor_asset` |
+| `PATCH /api/external/v1/editor/assets/{assetId}` | `organize_asset_library` (`update_asset`) | `update_editor_asset` |
+| `DELETE /api/external/v1/editor/assets/{assetId}` | `delete_resources` (`delete_asset`) | `delete_editor_asset` |
+| `POST /api/external/v1/editor/images/generations` | `generate_image`, `modify_image` (`variation`, fixed `kind="quick-edit"`) | `generate_external_editor_image` |
+| `POST /api/external/v1/editor/images/edits` | `modify_image` (`edit`) | `edit_external_editor_image` |
+| `POST /api/external/v1/editor/images/background-removals` | `modify_image` (`remove_background`) | `remove_external_editor_image_background` |
+| `POST /api/external/v1/editor/icon-spritesheets/generations` | `generate_icon_spritesheet` | `generate_external_editor_icon_spritesheet` |
+| `POST /api/external/v1/editor/ui-designs/assets/extractions` | `extract_ui_assets` | `extract_external_editor_ui_design_assets` |
+| `POST /api/external/v1/editor/character-animations/generations` | `generate_character_animation` | `generate_external_editor_character_animation` |
+| `POST /api/external/v1/editor/videos/generations` | `generate_video` | `generate_external_editor_video` |
+| `POST /api/external/v1/editor/audios/sound-effects/generations` | `generate_audio` (`sound_effect`) | `generate_external_editor_sound_effect` |
+| `POST /api/external/v1/editor/audios/background-music/generations` | `generate_audio` (`background_music`) | `generate_external_editor_background_music` |
+| `GET /api/external/v1/generations/{operationId}` | `check_generation` | `get_external_editor_generation_job` |
+
+The public `agent-integration.json`, `skill/SKILL.md`, and `skill.zip` routes and the MCP transport route are HTTP entry points, not callable MCP tools. The hosted resource URIs remain `genarrative://external-editor/skill`, `genarrative://external-editor/skill/references/capability-routing.md`, `genarrative://external-editor/skill/references/api-operations.md`, `genarrative://external-editor/skill/references/authentication-and-safety.md`, `genarrative://external-editor/skill/references/requests-and-outputs.md`, and `genarrative://external-editor/openapi`.
+
 ## Project and Canvas Operations

 | Operation            | Method and path                                               | Minimum input                                                  |
@@ -23,7 +61,7 @@ Project listing supports two views:

 - `view=full` is the REST default and returns the complete project, canvas, layers, and resources.
 - `view=summary` returns only `projectId`, `title`, `updatedAt`, and nullable `cover`, so callers can display, search, disambiguate same-name projects, and select a safe target without loading every canvas snapshot.
- Hosted MCP `list_editor_projects` always uses `summary`; call `get_editor_project` after selecting a `projectId` when complete authoritative state is required.
+- Hosted MCP `list_editor_projects` and `find_canvas_projects` (`list`) use `summary`; call `get_editor_project` or `find_canvas_projects` (`get`) after selecting a `projectId` when complete authoritative state is required.
 - `cover` contains only `resourceId`, stable `objectKey`, dimensions, and `updatedAt`. It never embeds image bytes, a Data URL, or a signed URL. To display it, pass `cover.objectKey` to `get_external_asset_read_url`; signed URLs are temporary and must not be persisted or reused as generation references.

 ## Asset and Upload Operations
@@ -42,6 +80,7 @@ Project listing supports two views:
 | Delete asset record         | `DELETE /api/external/v1/editor/assets/{assetId}`          | `assetId`                                                        |

 Upload is a three-step client flow: create a ticket, POST the file and returned fields directly to the OSS form endpoint, then confirm the returned `objectKey`. See `authentication-and-safety.md` before implementing this flow.
+`prepare_asset_upload` handles the ticket and confirmation as separate calls; it does not send local bytes to OSS or automatically register a project resource, asset record, or canvas layer. `manage_canvas_projects` (`create`) likewise does not create a same-name asset folder. Register or organize records only when the task needs them.

 ## Generation Operations

@@ -52,7 +91,7 @@ Every generation row requires a stable `Idempotency-Key` header and returns HTTP
 | Image generation    | `/api/external/v1/editor/images/generations`                  | `prompt`                                                                                                                                        | `kind`, `style`, `model`, `aspectRatio`, `imageSize`, `size`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
 | Image edit/redraw   | `/api/external/v1/editor/images/edits`                        | `prompt`, `sourceReferenceId`                                                                                                                   | `referenceImageSrcs`, `model`, `size`, `projectId`, `assetFolderId`, `assetLabel`, `targetLayerId`, `canvasCompletion`                                                 |
 | Background removal  | `/api/external/v1/editor/images/background-removals`          | `sourceImageSrc`                                                                                                                                | `projectId`, `sourceResourceId`, `targetLayerId`, static-image `assetKind`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs`                      |
-| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`                                                                                                               | `sliceMode`, `gridX`, `gridY`, `sliceCount`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
+| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`, `sliceMode`                                                                                                  | `gridX`, `gridY`, `sliceCount`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
 | UI asset extraction | `/api/external/v1/editor/ui-designs/assets/extractions`       | `sourceImageSrc`, `aspectRatio`, `imageSize`                                                                                                    | `screenColor`, `model`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `spritesheetLabel`, `canvasCompletion`                                                     |
 | Character animation | `/api/external/v1/editor/character-animations/generations`    | `sourceLayerId`, `sourceImageSrc`, `sourceWidth`, `sourceHeight`, `promptText`, `resolution`, `ratio`, `frameCount`, `durationSeconds`, `model` | `projectId`, `sourceResourceId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                                                                                     |
 | Video generation    | `/api/external/v1/editor/videos/generations`                  | `prompt`, `model`, `aspectRatio`, `durationSeconds`, `resolution`, `mode`, `sound`                                                              | `referenceImageSrcs`, `referenceVideoSrcs`, `referenceAudioSrcs`, `webSearchEnabled`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                   |
@@ -69,10 +108,10 @@ Supply the `operationId` returned by submission. Poll no faster than `pollAfterM

 ## Canvas and Library Field Rules

- Pass `projectId` and `canvasCompletion` to write generated output into the canvas.
- Pass `assetFolderId` plus `assetLabel` for image, edit, icon spritesheet, video, sound effect, and BGM operations when supported.
+- Pass `projectId` and `canvasCompletion` when the task calls for generated output in a canvas.
+- Pass `assetFolderId` plus the relevant label field when the task calls for a library record. Neither destination requires the other, and their names need not match.
 - UI extraction uses `assetFolderId` and `spritesheetLabel`.
- Character animation accepts `assetFolderId` and `assetLabel`. Its completed compact result directly returns the final `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`; never create a duplicate first-frame resource or asset.
+- Character animation accepts `assetFolderId` and `assetLabel` and persists the generated sequence. Consume returned artifacts and persisted identities; never create a duplicate first-frame resource or asset.
 - Background removal derives the final static-image `assetKind` from the authoritative source record. A conflicting request kind or any video, audio, animation, or image-sequence kind returns `400` before queueing. Without `canvasCompletion`, `targetLayerId` must point to the same authoritative object as `sourceImageSrc` (prefer `assetObjectId`, otherwise canonical bucket/object key).
 - If a caller must manually create a `character-animation` resource or asset, put the authoritative frames and total sequence duration in `imageSequenceFrames` and `imageSequenceDurationMs`. Keep `generationInputs` replayable: it must not contain legacy runtime fields such as `characterAnimation`, `frames`, `previewVideoPath`, `frameCount`, `fps`, or `durationSeconds`.
 - Reload project/library state after completion when full current state is required.
@@ -21,7 +21,7 @@ Authorization: Bearer <tnr_sk_...>

 Guide a logged-in user to create a key in the product UI under `开发者 API Key`. The raw key is shown only once. Never ask the user to paste it into chat.

-Store it outside repositories in the user's private JSON file:
+For hosted MCP, configure the Bearer token in the client's private connection settings. For the bundled REST helper, store it outside repositories in the user's private JSON file:

 ```text
 ~/.config/genarrative/external-editor-api.json
@@ -61,7 +61,7 @@ The OpenAPI document, integration manifest, raw Skill entry, and Skill archive a

 For each logical generation:

-1. Create one printable ASCII `Idempotency-Key` of 1-128 bytes.
+1. Create one printable ASCII key of 1-128 bytes. MCP takes `idempotencyKey` at the top level of the tool arguments (outside `input`); REST takes the `Idempotency-Key` header.
 2. Persist the key with the exact request body and returned `operationId`.
 3. If submission transport fails or the response is lost, resend only the exact same body with the same key.
 4. Never allocate a new key merely because the outcome is unknown.
@@ -69,15 +69,21 @@ For each logical generation:

 Treat a different body under the same key as invalid. Do not automatically replay a failed terminal generation unless the user intentionally requests a new logical generation.

+Keep the API operation as well as the request and key unchanged across a submission retry. A different tool name does not create a separate idempotency namespace. When an operation ID is known, query `check_generation` directly. A rejected submission is not permission to switch keys and generate again.
+
+`manage_canvas_projects/create`, `edit_canvas/register_resource`, and `organize_asset_library/create_folder` accept optional top-level `idempotencyKey`. Other non-generation actions do not accept it; in particular, `create_asset` is not an idempotent generation submission.
+
 ## Local Reference Upload

 Do not ask the user to convert local files to base64. Upload from the Agent/client machine:

 1. Detect the original filename, MIME type, byte length, and image dimensions when relevant.
-2. Create a ticket with `POST /api/external/v1/assets/direct-upload-tickets`.
+2. Call `prepare_asset_upload` with `action=create_upload_ticket` and the ticket body in `input` (REST: `POST /api/external/v1/assets/direct-upload-tickets`).
 3. POST all returned non-null `formFields` and the file part named `file` directly to `upload.host`.
-4. Confirm the object with `POST /api/external/v1/assets/objects/confirm`.
-5. Pass the confirmed stable `objectKey` to the selected editor operation.
+4. Call `prepare_asset_upload` with `action=confirm_upload` and the confirmation body in `input` (REST: `POST /api/external/v1/assets/objects/confirm`).
+5. Pass the confirmed stable `objectKey` where the selected tool permits it. For operations requiring a registered source, register a project resource or asset first and use its ID.
+
+The MCP tool does not transfer file bytes and does not accept a local path or base64. The client needs an HTTP/file-transfer capability for step 3. Object ownership comes from the API Key; do not supply `ownerUserId`. Confirmation alone creates neither a library record nor a canvas layer.

 For a private reference image, use a ticket body shaped like:

@@ -107,7 +113,7 @@ Confirm with the actual file metadata:

 `contentLength` is a JSON number in bytes, not a quoted string. Never invent `sourceWidth` or `sourceHeight`; read them from the local image or ask the user if they cannot be determined.

-For character animation, reuse a real canvas layer ID when available. For a local-only source, derive a stable synthetic `sourceLayerId`, such as `external-reference-hero`, from the filename and keep it unchanged across retries.
+For character animation, use source identity and dimensions from the actual selected resource; do not invent an existing canvas layer. The bundled local-file helper can maintain its own stable source label, which is not evidence of a persisted canvas layer.

 The bundled helper implements ticket creation, a stdlib multipart upload, confirmation, dimension detection for common formats, and stable source-layer IDs:

@@ -126,7 +132,7 @@ Do not print the complete confirmation response if it may contain temporary acce
 - Use `objectKey`, project resource ID, asset ID, or an allowed durable public URL for generation input.
 - Use a Data URL only when the endpoint explicitly allows it and the caller has a deliberate reason; do not persist it as a durable output.
 - Never use a Blob URL outside the browser process that created it.
- Use `GET /api/external/v1/assets/read-url` to obtain a short-lived `signedUrl` for display/download.
+- Use `find_assets` with `action=get_download_url` (REST: `GET /api/external/v1/assets/read-url`) to obtain a short-lived `signedUrl` for display/download. This returns a URL; the client still performs any download.
 - Never store or feed an expiring signed URL back into generation when a stable `objectKey` exists.

 ## Logging and Command Safety
@@ -139,6 +145,8 @@ Do not print the complete confirmation response if it may contain temporary acce

 ## Scope and Retry Guardrails

+- Generation spends account credits. Respect the user's authorized task and scope; do not restart generation merely because a requested derivative is missing.
+- For `delete_resources`, identify the precise IDs and obtain authorization for the actual deletion scope. Project deletion cascades to its default canvas and project-resource metadata. Folder deletion moves its assets to the default folder; the default folder cannot be deleted. Deleting a folder or asset record does not delete the underlying OSS file.
 - Do not use account JWT/profile endpoints as the default external integration. Logged-in profile APIs may create/revoke developer keys, but they are outside this external editor contract.
 - Do not call internal workers, queues, SpacetimeDB, or admin endpoints.
 - Do not bypass upload confirmation or invent an object key.
@@ -10,21 +10,17 @@ Use this reference to translate user intent into a hosted MCP tool or its corres
 - Public contract: `GET /api/external/v1/openapi.json`.
 - Skill fallback: `GET /api/external/v1/skill/SKILL.md` or `GET /api/external/v1/skill.zip`.

-Prefer MCP when the Agent supports a remote endpoint plus a custom Bearer token. Prefer the complete Skill and Python helper when MCP is unavailable or a client-side local-file upload must be orchestrated. The MCP tool names are derived from OpenAPI `operationId` values in snake case; select by capability instead of memorizing the name.
+Prefer MCP when the Agent supports a remote endpoint plus a custom Bearer token. Prefer the complete Skill and Python helper when MCP is unavailable or a client-side local-file upload must be orchestrated. Choose a task-oriented tool below for ordinary requests, or the corresponding operation tool in [API Operations](api-operations.md) when the request needs direct control of one REST call. All 44 tools remain available. Discover the live tool schema before calling it; OpenAPI remains the field-level authority. The public discovery and Skill download routes are listed below, but are not MCP tools.

-## Canvas Session
+## Project and Asset Destination

-Before the first generation in a new conversation, obtain a canvas name unless the user already supplied an existing `projectId` and `assetFolderId`.
+Use `find_canvas_projects` (`action=list`, `recent`, or `get`) to locate an existing canvas when the request involves one. Use `manage_canvas_projects` (`create` or `rename`) only when the user needs a project created or renamed. A new project does not create an asset folder automatically. Use `find_assets` and `organize_asset_library` when the task involves library records or folders. A project and folder may have different names, and either may be unnecessary for a standalone generation.

-1. List or create a project. When creating one, use the canvas name as `title`.
-2. Read the asset library. Reuse a folder with the same label or create one with the canvas name.
-3. Retain `canvasName`, `projectId`, `assetFolderId`, and the current art spec in conversation state.
-
-Generated artifacts must enter both the current canvas and its same-name library folder whenever the endpoint supports that invariant. Pass `projectId`, `assetFolderId`, the endpoint's label field, and `canvasCompletion`. Character animation returns the final formal resource and asset directly; use those records and never create a duplicate from the first frame.
+For generation, pass `projectId` with `canvasCompletion` when the result should enter a canvas, and `assetFolderId` with the endpoint's label field when it should enter the library. Use both only when the task requires both destinations. Character animation returns its final resource and asset directly when those destinations are requested; do not duplicate its first frame.

 ## Art Spec Routing

-Before art generation, normalize the user's request into:
+For a series of related art requests, an optional reusable spec can carry the shared requirements:

 ```json
 {
@@ -43,48 +39,48 @@ Infer what is already clear and ask only for missing fields that block the selec

 ## Intent Map

-| User intent                                                             | MCP/REST capability                                              |
-| ----------------------------------------------------------------------- | ---------------------------------------------------------------- |
-| Generate a background, character, spec, UI mockup, or publication image | Image generation                                                 |
-| Redraw, retouch, or replace an existing image                           | Image edit                                                       |
-| Remove the background from an existing image                            | Background removal                                               |
-| Generate from a local reference                                         | Upload and confirm the local file, then image generation or edit |
-| Build a reusable transparent icon/game atlas from a visual spec         | Icon spritesheet generation                                      |
-| Extract marked assets from an existing UI design                        | UI design asset extraction                                       |
-| Animate a character into frames                                         | Character animation generation                                   |
-| Generate video                                                          | Video generation                                                 |
-| Generate a sound effect                                                 | Sound-effect generation                                          |
-| Generate background music/BGM                                           | Background-music generation                                      |
-| Upload a local image/audio/video asset                                  | Upload ticket -> OSS form upload -> object confirm               |
-| Save viewport/layers                                                    | Canvas save                                                      |
-| Create, load, rename, or delete a canvas                                | Project operations                                               |
-| Organize folders and asset records                                      | Asset-library operations                                         |
-| Obtain temporary access to private media                                | Signed read URL                                                  |
-| Check generation progress or retrieve its result                        | Generation query                                                 |
+| User intent | MCP tool and action |
+| --- | --- |
+| Find, open, create, or rename a canvas project | `find_canvas_projects` (`list`, `recent`, `get`); `manage_canvas_projects` (`create`, `rename`) |
+| Read project resources or library records | `find_assets` (`get_project_resources`, `list_library`) |
+| Create or change folders and asset records | `organize_asset_library` (`create_folder`, `update_folder`, `create_asset`, `update_asset`) |
+| Upload a local image/audio/video asset | `prepare_asset_upload` (`create_upload_ticket`), client-side OSS form upload, then `prepare_asset_upload` (`confirm_upload`) |
+| Register existing media in a project, read a canvas, or save its full layout | `edit_canvas` (`register_resource`, `get`, `save_layout`) |
+| Generate a background, character, spec, UI mockup, or publication image | `generate_image` |
+| Retouch an existing image, make a reference variation, or remove its background | `modify_image` (`edit`, `variation`, `remove_background`) |
+| Build a transparent icon/game atlas from a registered visual spec | `generate_icon_spritesheet` |
+| Generate marked assets from an existing UI design | `extract_ui_assets` |
+| Animate a character into frames | `generate_character_animation` |
+| Generate video | `generate_video` |
+| Generate a sound effect or background music | `generate_audio` (`sound_effect`, `background_music`) |
+| Check generation progress or retrieve its result | `check_generation` |
+| Obtain temporary access to private media | `find_assets` (`get_download_url`) |
+| Delete an exact project, folder, or asset record | `delete_resources` (`delete_project`, `delete_folder`, `delete_asset`) |
+
+For tools with actions, send `{ "action": "...", "input": { ... } }`; place `idempotencyKey` at the top level when supported or required. Tools without actions accept operation fields directly, with `idempotencyKey` at the top level for generation. The direct operation tools use `body`, `pathParameters`, and `queryParameters` wrappers as shown by their live schemas.

 Do not present an API menu unless the request is genuinely ambiguous. Ask a follow-up when two routes create different artifacts, for example “处理这张图” could mean edit, extract marked UI assets, or use it as a reference for a new generation.

 ## Route-Specific Decisions

- Use image edit when the requested output replaces or modifies a source image. With `projectId`, pass `targetLayerId` to replace an existing layer when no explicit `canvasCompletion` is supplied.
+- Use `modify_image` `edit` when the requested output modifies a registered source image. Use `variation` when reference images should guide a new `quick-edit` image; it is image generation with fixed `kind="quick-edit"`. Use `remove_background` for a static source image. With `projectId`, `targetLayerId` may replace a matching existing layer when no explicit `canvasCompletion` is supplied.
 - Use icon spritesheet generation for a transparent reusable atlas when a stable visual-spec reference and concrete `iconDescriptions` exist. Do not use ordinary image generation just because it can draw several objects.
 - Use UI extraction only for an existing UI design image with red-box annotations. It is not UI generation.
- Use a project layer ID as character animation `sourceLayerId` when one exists. For a local-only source, derive a stable synthetic ID from the filename.
+- Character animation requires a real `sourceLayerId`, source image, and dimensions from an existing resource. A local-only file must first be uploaded and registered where needed; do not invent a layer ID.
 - For video with image/video/audio references, use a Seedance 2.0-family model; default to `seedance2.0-fast`, `mode: "std"`, and explicit `sound`.
- Use `signedUrl` only for preview/download. Feed stable `objectKey` or registered resource/asset identifiers into generation.
+- `prepare_asset_upload` obtains a ticket and confirms an uploaded object; it does not transfer the file or register a project resource, asset record, or canvas layer. Use `edit_canvas` `register_resource` or `organize_asset_library` `create_asset` only when the task needs those records.
+- Use temporary signed URLs only for preview/download. Feed stable `objectKey` or registered resource/asset identifiers into generation as each operation permits.

-## AI Game Creator Canonical Visual DAG
+## Example: Reusable Icon Assets

-Keep the existing autonomous-build task graph. Do not add a parallel task system or collapse these artifacts into one ordinary generation request:
+When the task needs a visual spec and a reusable icon atlas:

-1. `art-director` generates `assets/art-spec.png` with image generation, `kind: "spec"`, then registers it as `assetKind: "icon-spec"`. This image is the authoritative visual spec; `generationInputs.artSpec` is supporting structured context.
-2. `design-foundation` generates `assets/ui-prototype.png` with `kind: "ui-design"`, using the registered art-spec resource ID in `referenceImageSrcs`.
-3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. `sliceMode` is required and has no default: send `sliceMode: "grid"` with `gridX`/`gridY` only when the requirement itself fixes the slots or names the column/row count, and otherwise send `sliceMode: "connected-components"` (with `sliceCount` when a subject count must be constrained); never invent a grid to express "kinds of assets", and never send `gridX`/`gridY` with `connected-components`.
+1. Reuse an existing registered `icon-spec`, or generate the requested spec using `generate_image` with `kind=spec` and register it as `assetKind=icon-spec` if necessary.
+2. Call `generate_icon_spritesheet` with that registered ID as `referenceId`, concrete `iconDescriptions`, and explicit `sliceMode`. Choose `grid` only for requested equal cells or fixed slots and provide those `gridX`/`gridY` values; otherwise use `connected-components`, optionally with `sliceCount`.
+3. Query `check_generation` and inspect the full sheet and actual slices. Preserve warnings; a usable full sheet does not imply that individual slices exist. Use returned slice identities and dimensions rather than guessing crop coordinates.

-For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. When the requirement fixes grid slots, require the response `sliceMode` to match the declared `grid` request and exactly `gridX × gridY` slices before registering the local runtime sheet; a connected-components request is instead judged by its own `sliceCount` or by the requirement, and both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
-
-Never use `assets/ui-prototype.png` as the spritesheet visual-spec reference. UI extraction is outside this canonical DAG.
+An ordinary UI mockup or uploaded image is not automatically an `icon-spec`. For extracting marked components from a UI design, use `extract_ui_assets`, which includes generation and does not promise pixel-exact cropping.

 ## Scope Boundary

-Stay within `/api/external/v1`. Do not invent worker, queue, runtime task-list, admin, profile, or SpacetimeDB calls. The only external generation query is `GET /api/external/v1/generations/{operationId}`.
+Stay within `/api/external/v1`. Do not invent worker, queue, runtime task-list, admin, profile, or SpacetimeDB calls. The only external generation query is `GET /api/external/v1/generations/{operationId}`. The hosted MCP also exposes the Skill and OpenAPI resources at `genarrative://external-editor/skill`, its four `skill/references/*.md` URIs, and `genarrative://external-editor/openapi`; keep those URI names unchanged.
@@ -4,15 +4,46 @@ Use this reference to build generation payloads, carry canvas/library context, p

 ## Contents

+- [MCP Argument Shapes](#mcp-argument-shapes)
 - [Asynchronous Submission](#asynchronous-submission)
 - [Polling State Machine](#polling-state-machine)
 - [Canvas and Asset-Library Completion](#canvas-and-asset-library-completion)
+- [Saving Existing Canvas Layout](#saving-existing-canvas-layout)
 - [Art Spec and Image Request](#art-spec-and-image-request)
 - [Local Reference Requests](#local-reference-requests)
 - [Compact Completed Result](#compact-completed-result)
 - [Warning Semantics](#warning-semantics)
 - [Output Handling Checklist](#output-handling-checklist)

+## MCP Argument Shapes
+
+Pass these objects as the `arguments` of the named tool in `tools/call`. They are not REST request envelopes.
+
+Single-function tools take business fields directly. For example, `generate_image`:
+
+```json
+{
+  "prompt": "一张横版幻想森林背景，无文字",
+  "aspectRatio": "16:9",
+  "imageSize": "1K",
+  "idempotencyKey": "forest-image-001"
+}
+```
+
+Multi-function tools take `action` and `input`. A generation key stays outside `input`. For example, `generate_audio`:
+
+```json
+{
+  "action": "sound_effect",
+  "input": {"prompt": "轻柔的游戏菜单确认音", "duration": 1},
+  "idempotencyKey": "menu-sound-001"
+}
+```
+
+Keys above identify distinct example requests; create and persist your own key for each new logical generation. An action with no business fields still requires `input: {}`, such as `find_canvas_projects` with `action=list`. Use only fields belonging to the selected action; do not combine branches. REST examples below use the business body directly and put the key in the HTTP header instead.
+
+MCP returns business data in `structuredContent`, without the REST `data` envelope. Check `isError` before using it; an HTTP-successful MCP exchange can still carry a tool error. Generation acceptance contains an `operationId`, not the final media.
+
 ## Asynchronous Submission

 All nine generation POST routes require `Idempotency-Key` and return HTTP `202` with an `ExternalEditorGenerationSubmissionResponse` shaped like:
@@ -50,7 +81,7 @@ Persist the key, exact request body, and `operationId`. If submission outcome is

 ## Polling State Machine

-Poll `statusUrl`, or `GET /api/external/v1/generations/{operationId}`, no faster than `pollAfterMs`:
+With MCP, call `check_generation` with `{"operationId":"<returned operationId>"}`. Each call queries once and does not wait for completion. With REST, poll `statusUrl` or `GET /api/external/v1/generations/{operationId}`. Query no faster than `pollAfterMs`:

 - `queued` / `running`: retain `operationId`; show `phaseLabel`, `phaseDetail`, and `progress` when present; wait before querying again.
 - `completed`: consume the compact `result` and all warning fields, then stop polling.
@@ -75,10 +106,10 @@ Background removal uses the same submission and polling state machine. `sourceIm

 ## Canvas and Asset-Library Completion

-For endpoints that support these fields, include:
+Choose destinations according to the task. Locate an existing project with `find_canvas_projects` and inspect folders with `find_assets/list_library`; create missing destinations with `manage_canvas_projects/create` and `organize_asset_library/create_folder` only when needed. Project creation does not create a folder. For endpoints that support the requested destinations, include:

 - `projectId`: target canvas project.
- `assetFolderId`: folder whose label matches the canvas name.
+- `assetFolderId`: target asset-library folder; its name need not match the project.
 - `assetLabel` or UI extraction's `spritesheetLabel`: user-visible library label.
 - `canvasCompletion`: backend canvas placement instructions.

@@ -102,15 +133,24 @@ A minimal `canvasCompletion` is:

 Background removal preserves the source image dimensions. For normal canvas placement, the Python helper therefore requires the real `source_width` and `source_height` whenever `canvasSession` is used without an explicit `canvasWidth` plus `canvasHeight`; it never substitutes a square default. Passing `targetLayerId` instead selects in-place replacement, so the helper keeps the session's project/library fields without injecting `canvasCompletion` and rejects callers that explicitly combine both placement modes. The request `assetKind` is optional, static-image only, and must equal the authoritative source type when one exists. An in-place target must resolve to the same authoritative source object; a raw object key is bound to that target resource instead of relying on project-list order.

-Character animation accepts `assetFolderId` and `assetLabel` and persists the final transparent sequence directly. Its completed compact result includes the authoritative `assetKind="character-animation"` resource and asset with `imageSequenceFrames` and `imageSequenceDurationMs`. Use those records directly and never synthesize a duplicate asset from the first frame.
+Character animation accepts `assetFolderId` and `assetLabel` and persists the generated sequence. Consume the returned animation artifacts and persisted identities; do not synthesize a duplicate animation asset from the first frame. Use complete project/library records when complete persisted state is needed.

 For the lower-level asset/resource creation endpoints, `generationInputs` is replayable request context rather than a media-runtime container. When `assetKind` is `character-animation`, the server rejects legacy runtime keys including `characterAnimation`, `frames`, `previewVideoPath`, `frameCount`, `fps`, and `durationSeconds`; send the formal sequence through `imageSequenceFrames` and `imageSequenceDurationMs`. Internal processing audit keys such as `screenColorHex`, `mattingProvider`, and `mattingModel` are removed before persistence.

+## Saving Existing Canvas Layout
+
+1. Call `edit_canvas` with `action=get` and `input.projectId` to read the latest project and canvas revision.
+2. Build the intended complete `viewport` and `layers`, preserving unrelated layers. `save_layout` replaces the layout; it is not a one-layer patch.
+3. Call `edit_canvas` with `action=save_layout` and `input` containing `projectId`, the read `expectedRevision`, and the complete `viewport` and `layers`.
+4. On a revision conflict, reread and reconcile with the current layout before retrying. Do not blindly resend stale layers with a refreshed revision.
+
+`edit_canvas/register_resource` registers existing media but does not create a canvas layer. `organize_asset_library/create_asset` creates metadata but does not upload or generate media. For generated media placement, prefer the generation tool's supported `canvasCompletion`; inspect returned identities before registering anything again.
+
 ## Art Spec and Image Request

 Generic External v1 image generation does not expose the main-site structured game-scene contract. `kind: "scene"` and `assetKind: "scene"` are both invalid and return HTTP `400` before any generation job is queued. Do not replace the structured scene fields and server-owned prompt assembly with a generic image prompt.

-Carry the current art spec in `generationInputs.artSpec` and reflect important constraints in the prompt:
+When maintaining a reusable art spec, carry it in `generationInputs.artSpec` and reflect important constraints in the prompt. This is an example with both canvas and library destinations, not a requirement for every generation:

 ```json
 {
@@ -177,11 +217,11 @@ Image edit/redraw has a stricter main-source identity rule. After upload confirm

 Icon spritesheet generation has a stricter primary-spec contract. After upload confirmation, create a project resource or asset record with `assetKind: "icon-spec"`, retain its returned `resourceId` or `assetId`, and pass that ID as `referenceId`. The primary spec does not accept the uploaded `objectKey` directly; only additional style references may continue to use stable object keys in `referenceImageSrcs`.

-For character animation from a local-only source, use actual dimensions and a stable synthetic layer ID:
+For character animation, use the selected source identity and actual dimensions. The following is a business-body example; `generate_character_animation` also requires a top-level `idempotencyKey`:

 ```json
 {
-  "sourceLayerId": "external-reference-hero",
+  "sourceLayerId": "<selected source layer ID>",
  "sourceImageSrc": "<confirmed objectKey>",
  "sourceWidth": 720,
  "sourceHeight": 1280,
@@ -209,7 +249,7 @@ The completed `result` may contain stable artifact fields such as:
 - `spritesheetResource`, `spritesheetAsset`, and stable spritesheet metadata.
 - `warning` and `sliceWarning` structures.

-It deliberately excludes a complete project/canvas/library snapshot, Data URL, Blob URL, expiring signed URL, worker lease, queue state, and internal provider diagnostics. Use `/assets/read-url` for temporary access to a stable `objectKey`.
+It deliberately excludes a complete project/canvas/library snapshot, Data URL, Blob URL, expiring signed URL, worker lease, queue state, and internal provider diagnostics. Use `find_assets/get_download_url` for temporary access to a stable `objectKey` (REST: `/assets/read-url`). Reading a record or obtaining a URL does not itself inspect or download the media.

 ## Warning Semantics

@@ -145,6 +145,15 @@ ELEVENLABS_BASE_URL="https://api.elevenlabs.io"
 ELEVENLABS_API_KEY=""
 ELEVENLABS_REQUEST_TIMEOUT_MS="180000"

+# Tripo 3D 生成：地址与密钥必须显式给出，没有内置默认值。
+# 缺任意一个，会提交或会执行 3D job 的进程（api / external-generation-worker / all）
+# 在启动期直接拒绝启动——不会带着未知网关或空密钥把进程跑起来。
+TRIPO_BASE_URL="https://openapi.tripo3d.com/v3"
+TRIPO_API_KEY=""
+# 两个运行旋钮可缺省（沿用内置值）；显式给出时会校验，非法即拒绝启动。
+TRIPO_REQUEST_TIMEOUT_MS="60000"
+TRIPO_RETRIES="2"
+
 # 阿里云 OSS 配置。
 # Rust `server-rs` 的 `api-server` 会优先从 `.env` / `.env.local` 读取这些变量，
 # 用于签发浏览器 PostObject 直传票据，并保持 `/generated-*` 旧路径习惯。
@@ -65,6 +65,7 @@ temp*build*/
 /apps/preview-deployer-web/node_modules/
 /server-rs/.spacetimedb/
 /server-rs/.data/
+**/server-rs/.data/
 /public/generated-animations
 /public/generated-character-drafts
 /public/generated-characters
@@ -48,8 +48,109 @@ _Avoid_: 无来源的静态素材、只显示在 UI 但不落工程资源记录
 一组同类素材的统一批量生成方式，采用批量规划、sheet 生图、后端切图、透明化、OSS 持久化和局部重生成的通用流水线。
 _Avoid_: 为每个玩法单独发明素材流水线、把系列素材建模成任一玩法专属 DTO

+**UI 设计文档**:
+AGC 本地项目里 `kind=ui-design-doc`、`mediaType=application/json` 的界面编辑载体，保存设计图集合、UI 树、组件绑定和 State revision；一份文档可同时承载多张设计图与各自的结构树，不强制收敛成一棵树。
+_Avoid_: 把 UI 设计图当成设计文档、给设计文档再套一层「页面」概念
+
+**设计图**:
+UI 设计文档里的一张参考界面图，以它在 manifest 中的资产 ID 作为文档内身份，附带像素尺寸与像素比；文档内的每棵树都必须引用文档里已存在的设计图。
+_Avoid_: 用文件名当设计图身份、设计图与设计文档同一概念
+
+**UI 工作流步骤**:
+对一份 UI 设计文档执行的一次受控处理阶段，当前只有「结构识别」与「素材切分」两步；步骤产物只有在写入文档并保存后才算完成。
+_Avoid_: 把单次工具调用当成步骤、把中间产物当成步骤完成
+
+**工作流检查点日志**:
+一份 UI 设计文档旁按行追加的恢复用日志，每完成一个工作流步骤追加一行；某步是否有对应行即代表该步是否完成，恢复时从第一个缺失的行继续。
+_Avoid_: 每步一个 sidecar 状态机、把切分专用的 SeparationState 泛化成通用检查点
+
+
 ## Language

+### 3D Model Generation
+
+**3D 模型生成操作**:
+由文本提示或平台图片引用驱动、可异步查询并最终产生模型文件的 provider-neutral 操作；操作状态和产品资源结果分开建模。
+_Avoid_: 直接把第三方 provider task 当作产品资源、把模型 URL 当作永久资源地址
+
+**Provider task**:
+第三方 3D 生成平台返回的任务引用与任务快照，只存在于 provider adapter 的 Rust 边界内；它不是 Genarrative 的内部操作 ID。
+_Avoid_: 把 Tripo task ID 当作稳定产品 operationId、让 SDK 类型穿透 api-server
+
+**临时 provider URL**:
+第三方任务完成后返回的短时模型下载地址，必须通过显式下载流程转换为本地或持久化资源，不能直接当作长期资产地址。
+_Avoid_: 永久 OSS URL、资源 ID
+
+**模型 artifact**:
+由 text-to-model、image-to-model 或 multiview-to-model 任务产生、待应用层登记和持久化的模型文件结果；provider adapter 只提供可下载结果，不负责生成 resourceId 或 assetId。
+_Avoid_: 仅 UI 中展示的模型链接、没有来源任务的静态文件
+
+**Tripo API facade**:
+面向站内已认证调用方的全新 Tripo 3D 生成 API 上下文，负责把 API operation、用户归属、异步状态、产物持久化和正式资源引用连接起来；它独立于历史 Hyper3D adapter，不复用其路由、契约或实现。
+_Avoid_: 把 Tripo API 当成 Hyper3D 的 provider 替换、让 Hyper3D 路由悄悄切换到 Tripo
+
+**Tripo operation**:
+Genarrative 为一次 Tripo 生成请求分配的内部异步操作标识；客户端只看到 operationId，Tripo provider task 只作为服务端 checkpoint 保存，二者不是同一个 ID。
+_Avoid_: 将 Tripo taskId 直接当公开 operationId、把 SDK task 状态模型穿透到 API
+
+**模型产物持久化**:
+Tripo 任务完成后，服务端下载模型与预览、写入受控对象存储并登记资源元数据，成功后才把 Tripo operation 置为 completed；本期按完整字节写入，流式上传是后续目标。
+_Avoid_: 返回临时签名 URL作为永久资源、在 API handler 中把完整模型读成 Vec<u8>
+
+**3D provider 配置门禁**:
+Tripo 网关与密钥的可用性在「会提交或会执行 3D job 的进程」（`api` / `external-generation-worker` / `all`）启动期判定：`TRIPO_BASE_URL` 与 `TRIPO_API_KEY` 没有内置默认值，缺失、空白或网关非法即拒绝启动；请求期返回 503 只是第二道防线，不承担发现部署缺失的职责。
+_Avoid_: 内置默认网关、缺配置时静默沿用某个地址或兜底密钥、把「少配置」留到用户提交后才发现
+
+**3D 生成底价**:
+一次 3D 生成在指定端点和模型版本下、按是否带贴图区分的基准泥点价，不包含任何叠加项，也不随请求的其它参数变化。
+_Avoid_: 把底价与加价项合并成一个档位价、把 provider 的 credit 数值当底价
+
+**3D 生成加价项**:
+叠加在底价之上、由请求参数判定的可选泥点加价；每个端点各自持有一份加价项价目，同一加价项在不同端点可以是不同价。
+_Avoid_: 全局唯一一份加价项价目、按用途而不是按请求参数判定加价
+
+**定价配置归一化**:
+读取持久化定价时把它与当前契约对齐的过程：缺的键用受控默认值补齐，契约之外的遗留键剔除并告警；它只发生在读取方向，写入方向仍要求完整合法。
+_Avoid_: 把「省略即沿用」当作保存语义、把归一化当成静默改价
+
+**模型生成落点**:
+3D 生成结果要进入的平台容器，调用方必须在工程资源与素材库资产之间显式二选一；工程分支可附带画布占位框回填，素材库分支必须给出目录与标签。
+_Avoid_: 两个都不给就默认落素材库、把落点混进 provider 请求参数
+
+**模型输入资源引用**:
+image-to-model 请求对平台已有图片的明确 tagged 引用，可指向项目资源或素材库资产；服务端负责 owner 校验和 OSS 对象解析，不接受把多种来源塞进裸 `input` 字符串。
+_Avoid_: 任意远程 URL、data URL、未区分语义的 resourceId/assetId 字符串
+
+**3D 模型生成工具**:
+图片画布工程里从底部工具栏打开、给出「文生 3D 模型」与「图生 3D 模型」两个子项的画布生成工具；提交后按画布既有生成链路的占位框、任务侧栏与失败退款口径推进，产物落成 **3D 模型资源**。
+_Avoid_: 独立 3D 生成页、把 3D 生成做成玩法类型或作品、把 3D 生成接进画布 Agent 对话
+
+**3D 生成定价**:
+3D 模型生成工具在提交前展示的泥点价格，来自编辑器生成定价查询的 `model3d` 段；该段缺失即入口不可提交，前端不内置兜底数值。该段的权威事实源是 SpacetimeDB 定价表里的两段强类型列，公开读取时投影回迁移前的旧形状。
+_Avoid_: 前端写死 3D 价格、借用图片模型的兜底定价配置、按 0 元放行、把内部两段结构直接暴露给画布
+
+**定价版本（乐观锁）**:
+后台读取完整模型定价时一并拿到的版本号（SpacetimeDB 行的更新时间微秒值），保存时必须原样回传；与服务端当前版本不一致即整笔拒绝并返回 409，提示重新读取，避免静默覆盖他人的改价。
+_Avoid_: 在前端自造或缓存该版本、把版本不匹配当成可重试的普通失败、把「省略字段」当成「沿用当前值」
+
+### 3D 模型资源预览
+
+**3D 模型资源**:
+类别为 `model3d` 的平台资源 / 素材，一个资源同时持有模型本体与模型预览图两个对象；客户端默认消费预览图，模型本体只在 3D 查看器里加载。
+_Avoid_: 只有模型文件的资源、把模型本体当图片素材、为模型新增并列媒体类型
+
+**模型预览图**:
+3D 模型资源的静态代表图，落在资源投影的 `imageSrc` 与 `thumbnailSrc` 上，供画布卡片、素材缩略图、后台列表和精选卡片使用。
+_Avoid_: 用模型本体充当预览、按需实时渲染缩略图、把预览图当模型真相
+
+**模型本体**:
+3D 模型资源里的可下载模型文件，只由资源的 `objectKey` 指向，格式以对象内容类型为准。
+_Avoid_: 把模型本体当图片地址、用预览图字段承载模型文件、按文件扩展名推断格式
+
+**3D 查看器预览**:
+在资源上打开模态把模型本体交给 3D 查看器渲染的只读能力，不修改资源、不产出新资源，也不是画布图层本身的编辑操作。
+_Avoid_: 在画布里内联渲染模型、把预览当编辑、为预览产出新资源
+
 ### Puzzle Clear

 **拼消消**:
@@ -190,6 +291,22 @@ _Avoid_: 会话缓存、展示态历史、按 UI 需要另存的对话副本
 Thread Manager 向订阅者推送的当前回合原始事件流，只服务运行期间与短期断线恢复，不替代项目对话历史。
 _Avoid_: 进度通知、快照轮询、第二套历史

+**逻辑回合**:
+Thread Manager 拥有的一对回合边界（开始与结束），由接单动作开启、由这一轮的占用对象写出，不镜像 Codex 原生回合；界面忙碌态与回合结果只认它。
+_Avoid_: Codex 原生回合、原生日志、进程生命周期
+
+**接单**:
+把一条用户消息交给宿主开始执行的动作，成立即表示这一轮已经存在；此后结果只由运行态事件回答。
+_Avoid_: 发送成功、命令调用、接口返回
+
+**拒单**:
+接单成立之前拒绝这次请求（并发、权限、目录、参数、工程准备未就绪），只回一条可展示原因，不产生回合事件，也不写用户条目。
+_Avoid_: 回合失败、执行失败、失败事件
+
+**在途回合**:
+界面本地已经把这条用户消息发出去、宿主还没有对应回合开始事件的那一小段状态。
+_Avoid_: 运行中回合、乐观锁、发送队列
+
 **聊天投影**:
 把项目对话历史条目与运行态事件转换成消息气泡和工具卡片的读取期转换；不持久化，也不构成事实源。
 _Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
@@ -60,6 +60,7 @@ import type {
  AdminUpdateAccountResponse,
  AdminUpdateAgcTemplateRequest,
  AdminUploadedEditorShowcaseCampaignImage,
+  AdminUpsertEditorGenerationPricingRequest,
  AdminUpsertEditorShowcaseCampaignRequest,
  AdminUpsertFeatureGateConfigRequest,
  AdminUpsertProfileInviteCodeRequest,
@@ -519,7 +520,7 @@ export function getAdminEditorGenerationPricing(token: string) {

 export function upsertAdminEditorGenerationPricing(
  token: string,
-  payload: EditorGenerationPricingConfigPayload,
+  payload: AdminUpsertEditorGenerationPricingRequest,
 ) {
  return request<EditorGenerationPricingConfigPayload>(
    '/admin/api/editor-generation-pricing',
@@ -431,8 +431,43 @@ export interface EditorGenerationModelPricingPayload {
  prices?: Record<string, number>;
 }

+/** 某个 3D 模型版本在「无贴图 / 带贴图」两种形态下的泥点底价。 */
+export interface EditorGenerationModel3dVersionPricePayload {
+  noTexture: number;
+  texture: number;
+}
+
+/**
+ * 单个 3D 生成端点的整套定价：模型版本底价 + 该端点自己的加价项价目。
+ *
+ * 键集合由后端契约决定，后台只改数值：模型版本键与加价项键都直接来自接口返回，
+ * 不在前端硬编码清单，也不能新增、删除或停用。
+ */
+export interface EditorGenerationModel3dEndpointPricingPayload {
+  versionPrices: Record<string, EditorGenerationModel3dVersionPricePayload>;
+  addOnPrices: Record<string, number>;
+}
+
+/** 3D 生成定价段：两个端点并列，各持自己的设置。 */
+export interface EditorGenerationModel3dPricingPayload {
+  textToModelPricing: EditorGenerationModel3dEndpointPricingPayload;
+  imageToModelPricing: EditorGenerationModel3dEndpointPricingPayload;
+}
+
 export interface EditorGenerationPricingConfigPayload {
  models: Record<string, EditorGenerationModelPricingPayload>;
+  /** 后端尚未配置 3D 段时缺省；缺失即 3D 生成不可提交，后台也不能新建整段。 */
+  model3d?: EditorGenerationModel3dPricingPayload | null;
+}
+
+/**
+ * 后台保存定价的请求体：`models` 与 3D 两段都必须显式给出。
+ *
+ * 不带定价版本：保存即整段覆盖，服务端不比对版本（后台同时只有一个管理员在操作）。
+ */
+export interface AdminUpsertEditorGenerationPricingRequest {
+  models: Record<string, EditorGenerationModelPricingPayload>;
+  model3d: EditorGenerationModel3dPricingPayload | null;
 }

 export interface AdminEditorAssetListQuery {
@@ -0,0 +1,131 @@
+import type {
+  EditorGenerationModel3dPricingPayload,
+  EditorGenerationModel3dVersionPricePayload,
+} from '../api/adminApiTypes';
+import {
+  EDITOR_MODEL3D_ENDPOINT_SECTIONS,
+  editorModel3dAddOnLabel,
+  updateEditorModel3dEndpointPricing,
+} from './adminEditorGenerationPricing';
+import { parsePositiveInteger } from './pageUtils';
+
+/**
+ * 一个模型版本的两个底价字段。两栏只有字段键与展示名不同，用描述表驱动渲染，
+ * 避免两段近乎相同的 JSX 各自演化。
+ */
+const VERSION_PRICE_FIELDS = [
+  { key: 'noTexture', label: '无贴图' },
+  { key: 'texture', label: '带贴图' },
+] as const satisfies ReadonlyArray<{
+  key: keyof EditorGenerationModel3dVersionPricePayload;
+  label: string;
+}>;
+
+interface AdminEditorGenerationModel3dPricingSectionProps {
+  model3d: EditorGenerationModel3dPricingPayload;
+  onChange: (next: EditorGenerationModel3dPricingPayload) => void;
+}
+
+/**
+ * 3D 生成定价区块：按端点分成「文生 3D」与「图生 3D」两组，每组是该端点自己的
+ * 「模型版本 × {无贴图, 带贴图}」底价表与加价项单值输入。
+ *
+ * 键集合全部来自接口返回，后台只能改数值：不能新增、删除键，也不能停用整段。
+ */
+export function AdminEditorGenerationModel3dPricingSection({
+  model3d,
+  onChange,
+}: AdminEditorGenerationModel3dPricingSectionProps) {
+  function updateEndpoint(
+    section: (typeof EDITOR_MODEL3D_ENDPOINT_SECTIONS)[number]['key'],
+    updater: Parameters<typeof updateEditorModel3dEndpointPricing>[2],
+  ) {
+    onChange(updateEditorModel3dEndpointPricing(model3d, section, updater));
+  }
+
+  return (
+    <section className="admin-panel admin-pricing-model-card">
+      <div className="admin-pricing-model-heading">
+        <strong>3D 生成定价</strong>
+        <span className="admin-pricing-unit">按次</span>
+      </div>
+      <p className="admin-pricing-model3d-hint">
+        模型版本与加价项由后端契约给出，只能改数值；两段必须完整给出，缺失即 3D
+        生成不可提交。
+      </p>
+      <div className="admin-pricing-grid">
+        {EDITOR_MODEL3D_ENDPOINT_SECTIONS.map(({ key, label }) => (
+          <section className="admin-panel admin-pricing-model-card" key={key}>
+            <div className="admin-pricing-model-heading">
+              <strong>{label}</strong>
+            </div>
+            <div className="admin-pricing-model3d-list">
+              {Object.entries(model3d[key].versionPrices).map(
+                ([version, price]) => (
+                  <div className="admin-pricing-model3d-row" key={version}>
+                    <span className="admin-pricing-model3d-row-label">
+                      {version}
+                    </span>
+                    {VERSION_PRICE_FIELDS.map(
+                      ({ key: field, label: fieldLabel }) => (
+                        <label className="admin-field" key={field}>
+                          <span>{fieldLabel}</span>
+                          <input
+                            aria-label={`${label} ${version} ${fieldLabel}`}
+                            min={1}
+                            step={1}
+                            type="number"
+                            value={price[field]}
+                            onChange={(event) =>
+                              updateEndpoint(key, (current) => ({
+                                ...current,
+                                versionPrices: {
+                                  ...current.versionPrices,
+                                  [version]: {
+                                    ...price,
+                                    [field]: parsePositiveInteger(
+                                      event.target.value,
+                                    ),
+                                  },
+                                },
+                              }))
+                            }
+                          />
+                        </label>
+                      ),
+                    )}
+                  </div>
+                ),
+              )}
+            </div>
+            <div className="admin-form-row">
+              {Object.entries(model3d[key].addOnPrices).map(
+                ([addOn, price]) => (
+                  <label className="admin-field" key={addOn}>
+                    <span>{editorModel3dAddOnLabel(addOn)}</span>
+                    <input
+                      aria-label={`${label} ${editorModel3dAddOnLabel(addOn)}`}
+                      min={1}
+                      step={1}
+                      type="number"
+                      value={price}
+                      onChange={(event) =>
+                        updateEndpoint(key, (current) => ({
+                          ...current,
+                          addOnPrices: {
+                            ...current.addOnPrices,
+                            [addOn]: parsePositiveInteger(event.target.value),
+                          },
+                        }))
+                      }
+                    />
+                  </label>
+                ),
+              )}
+            </div>
+          </section>
+        ))}
+      </div>
+    </section>
+  );
+}
@@ -11,14 +11,16 @@ import {
 import type { EditorGenerationPricingConfigPayload } from '../api/adminApiTypes';
 import { AdminEditorGenerationPricingPage } from './AdminEditorGenerationPricingPage';

-vi.mock('../api/adminApiClient', () => ({
-  formatAdminApiError: vi.fn((error: unknown) =>
-    error instanceof Error ? error.message : '请求失败',
-  ),
-  getAdminEditorGenerationPricing: vi.fn(),
-  isAdminApiError: vi.fn(() => false),
-  upsertAdminEditorGenerationPricing: vi.fn(),
-}));
+vi.mock('../api/adminApiClient', async () => {
+  const actual = await vi.importActual<typeof import('../api/adminApiClient')>(
+    '../api/adminApiClient',
+  );
+  return {
+    ...actual,
+    getAdminEditorGenerationPricing: vi.fn(),
+    upsertAdminEditorGenerationPricing: vi.fn(),
+  };
+});

 const pricing: EditorGenerationPricingConfigPayload = {
  models: {
@@ -41,36 +43,78 @@ const pricing: EditorGenerationPricingConfigPayload = {
    'audio1.0': { unit: 'perGeneration', price: 5 },
    'chirp-v5': { unit: 'perGeneration', price: 12 },
  },
+  model3d: {
+    textToModelPricing: {
+      versionPrices: {
+        'v3.1-20260211': { noTexture: 8, texture: 16 },
+        'P2-20260801': { noTexture: 80, texture: 88 },
+      },
+      addOnPrices: {
+        hdTexture: 8,
+        ultraTexture: 16,
+        quadMesh: 4,
+        generateParts: 16,
+      },
+    },
+    imageToModelPricing: {
+      versionPrices: {
+        'v3.1-20260211': { noTexture: 16, texture: 24 },
+        'P2-20260801': { noTexture: 80, texture: 88 },
+      },
+      addOnPrices: {
+        hdTexture: 8,
+        ultraTexture: 16,
+        quadMesh: 4,
+        generateParts: 16,
+      },
+    },
+  },
 };

+function savedPricing(
+  overrides: Partial<EditorGenerationPricingConfigPayload> = {},
+) {
+  return {
+    ...pricing,
+    ...overrides,
+  };
+}
+
 beforeEach(() => {
  vi.clearAllMocks();
  vi.mocked(getAdminEditorGenerationPricing).mockResolvedValue(pricing);
-  vi.mocked(upsertAdminEditorGenerationPricing).mockResolvedValue({
-    ...pricing,
-    models: {
-      ...pricing.models,
-      'gpt-image-2': {
-        unit: 'perGeneration',
-        prices: { '1K': 20, '2K': 58 },
+  vi.mocked(upsertAdminEditorGenerationPricing).mockResolvedValue(
+    savedPricing({
+      models: {
+        ...pricing.models,
+        'gpt-image-2': {
+          unit: 'perGeneration',
+          prices: { '1K': 20, '2K': 58 },
+        },
      },
-    },
-  });
+    }),
+  );
 });

-test('模型定价后台按模型展示单位并保存尺寸定价', async () => {
-  const user = userEvent.setup();
+async function renderPage() {
  render(
    <AdminEditorGenerationPricingPage
      token="admin-token"
      onUnauthorized={vi.fn()}
    />,
  );
+  await screen.findByText('3D 生成定价');
+}
+
+test('模型定价后台按模型展示单位并保存尺寸定价', async () => {
+  const user = userEvent.setup();
+  await renderPage();

  expect((await screen.findAllByText('按次')).length).toBeGreaterThan(0);
  expect(screen.getAllByText('按秒').length).toBeGreaterThan(0);
-  const gptImage2kInput = screen.getByLabelText('gpt-image-2 2K');
-  fireEvent.change(gptImage2kInput, { target: { value: '58' } });
+  fireEvent.change(screen.getByLabelText('gpt-image-2 2K'), {
+    target: { value: '58' },
+  });
  await user.click(screen.getByRole('button', { name: '保存定价' }));
  await user.click(screen.getByRole('button', { name: '确认' }));

@@ -90,3 +134,82 @@ test('模型定价后台按模型展示单位并保存尺寸定价', async () =>
    );
  });
 });
+
+test('3D 区块按端点渲染版本底价与加价项，并随保存回传整段与定价版本', async () => {
+  const user = userEvent.setup();
+  await renderPage();
+
+  expect(screen.getByText('文生 3D')).toBeTruthy();
+  expect(screen.getByText('图生 3D')).toBeTruthy();
+  expect(screen.getAllByText('高清贴图').length).toBeGreaterThan(0);
+
+  fireEvent.change(screen.getByLabelText('文生 3D v3.1-20260211 带贴图'), {
+    target: { value: '18' },
+  });
+  fireEvent.change(screen.getByLabelText('图生 3D P2-20260801 无贴图'), {
+    target: { value: '86' },
+  });
+  fireEvent.change(screen.getByLabelText('文生 3D 四边形网格'), {
+    target: { value: '6' },
+  });
+
+  await user.click(screen.getByRole('button', { name: '保存定价' }));
+  await user.click(screen.getByRole('button', { name: '确认' }));
+
+  await waitFor(() => {
+    expect(upsertAdminEditorGenerationPricing).toHaveBeenCalledWith(
+      'admin-token',
+      expect.objectContaining({
+        model3d: {
+          textToModelPricing: expect.objectContaining({
+            versionPrices: expect.objectContaining({
+              'v3.1-20260211': { noTexture: 8, texture: 18 },
+            }),
+            addOnPrices: expect.objectContaining({ quadMesh: 6 }),
+          }),
+          imageToModelPricing: expect.objectContaining({
+            versionPrices: expect.objectContaining({
+              'P2-20260801': { noTexture: 86, texture: 88 },
+            }),
+          }),
+        },
+      }),
+    );
+  });
+});
+
+test('数值小于 1 时禁用保存并给出中文提示', async () => {
+  const user = userEvent.setup();
+  await renderPage();
+
+  fireEvent.change(screen.getByLabelText('文生 3D 四边形网格'), {
+    target: { value: '0' },
+  });
+
+  expect(await screen.findByText(/以下价格必须是不小于 1 的整数/)).toBeTruthy();
+  const saveButton = screen.getByRole('button', {
+    name: '保存定价',
+  }) as HTMLButtonElement;
+  expect(saveButton.disabled).toBe(true);
+  await user.click(saveButton);
+  expect(upsertAdminEditorGenerationPricing).not.toHaveBeenCalled();
+});
+
+test('后端未配置 3D 段时给出提示并禁止保存', async () => {
+  vi.mocked(getAdminEditorGenerationPricing).mockResolvedValue({
+    ...pricing,
+    model3d: null,
+  });
+  render(
+    <AdminEditorGenerationPricingPage
+      token="admin-token"
+      onUnauthorized={vi.fn()}
+    />,
+  );
+
+  expect(await screen.findByText(/当前部署未配置 3D 定价段/)).toBeTruthy();
+  expect(
+    (screen.getByRole('button', { name: '保存定价' }) as HTMLButtonElement)
+      .disabled,
+  ).toBe(true);
+});
@@ -6,12 +6,18 @@ import {
  upsertAdminEditorGenerationPricing,
 } from '../api/adminApiClient';
 import type {
+  EditorGenerationModel3dPricingPayload,
  EditorGenerationModelPricingPayload,
  EditorGenerationPricingConfigPayload,
  EditorGenerationPricingUnitPayload,
 } from '../api/adminApiTypes';
 import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
-import { handlePageError } from './pageUtils';
+import { AdminEditorGenerationModel3dPricingSection } from './AdminEditorGenerationModel3dPricingSection';
+import {
+  buildAdminEditorGenerationPricingRequest,
+  collectInvalidEditorGenerationPricingLabels,
+} from './adminEditorGenerationPricing';
+import { handlePageError, parsePositiveInteger } from './pageUtils';

 interface AdminEditorGenerationPricingPageProps {
  token: string;
@@ -20,6 +26,7 @@ interface AdminEditorGenerationPricingPageProps {

 const emptyPricing: EditorGenerationPricingConfigPayload = {
  models: {},
+  model3d: null,
 };

 const unitLabels: Record<EditorGenerationPricingUnitPayload, string> = {
@@ -57,7 +64,7 @@ export function AdminEditorGenerationPricingPage({

  async function handleSave(event: FormEvent<HTMLFormElement>) {
    event.preventDefault();
-    if (isSaving) {
+    if (isSaving || !canSave) {
      return;
    }
    setErrorMessage('');
@@ -71,7 +78,12 @@ export function AdminEditorGenerationPricingPage({

    setIsSaving(true);
    try {
-      setPricing(await upsertAdminEditorGenerationPricing(token, pricing));
+      setPricing(
+        await upsertAdminEditorGenerationPricing(
+          token,
+          buildAdminEditorGenerationPricingRequest(pricing),
+        ),
+      );
    } catch (error: unknown) {
      handlePageError(error, onUnauthorized, setErrorMessage);
    } finally {
@@ -120,6 +132,15 @@ export function AdminEditorGenerationPricingPage({
    });
  }

+  function updateModel3dPrice(next: EditorGenerationModel3dPricingPayload) {
+    setPricing((current) => ({ ...current, model3d: next }));
+  }
+
+  const invalidPriceLabels =
+    collectInvalidEditorGenerationPricingLabels(pricing);
+  const isModel3dMissing = !pricing.model3d;
+  const canSave = invalidPriceLabels.length === 0 && !isModel3dMissing;
+
  return (
    <section className="admin-page admin-page-wide">
      <div className="admin-page-heading">
@@ -144,6 +165,20 @@ export function AdminEditorGenerationPricingPage({
        </div>
      ) : null}

+      {isModel3dMissing ? (
+        <div className="admin-alert" role="status">
+          当前部署未配置 3D 定价段（缺失即 3D
+          生成不可提交）：需先由受控默认配置提供两段价格，
+          后台不在页面里新建或停用整段。
+        </div>
+      ) : null}
+
+      {invalidPriceLabels.length > 0 ? (
+        <div className="admin-alert" role="status">
+          {`以下价格必须是不小于 1 的整数：${invalidPriceLabels.join('、')}`}
+        </div>
+      ) : null}
+
      <form className="admin-stack" onSubmit={handleSave}>
        <div className="admin-pricing-model-list admin-pricing-model-list--single">
          {Object.entries(pricing.models).map(([model, modelPricing]) =>
@@ -156,9 +191,16 @@ export function AdminEditorGenerationPricingPage({
          )}
        </div>

+        {pricing.model3d ? (
+          <AdminEditorGenerationModel3dPricingSection
+            model3d={pricing.model3d}
+            onChange={updateModel3dPrice}
+          />
+        ) : null}
+
        <button
          className="admin-primary-button"
-          disabled={isSaving}
+          disabled={isSaving || !canSave}
          type="submit"
        >
          <Save size={17} aria-hidden="true" />
@@ -223,8 +265,3 @@ function renderModelPricingCard({
    </section>
  );
 }
-
-function parsePositiveInteger(value: string) {
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : 0;
-}
@@ -7,7 +7,7 @@ import {
 } from '../api/adminApiClient';
 import type { ProfileWalletConfigAdminResponse } from '../api/adminApiTypes';
 import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
-import { handlePageError } from './pageUtils';
+import { handlePageError, parsePositiveInteger } from './pageUtils';

 interface AdminProfileWalletConfigPageProps {
  token: string;
@@ -197,8 +197,3 @@ export function AdminProfileWalletConfigPage({
    </section>
  );
 }
-
-function parsePositiveInteger(value: string) {
-  const parsed = Number(value);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : 0;
-}
@@ -11,7 +11,7 @@ import type {
  ProfileRechargeProductKind,
 } from '../api/adminApiTypes';
 import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
-import { handlePageError } from './pageUtils';
+import { handlePageError, parsePositiveInteger } from './pageUtils';

 interface AdminRechargeProductPageProps {
  token: string;
@@ -546,11 +546,6 @@ function formatPrice(priceCents: number) {
  return `¥${(priceCents / 100).toFixed(2)}`;
 }

-function parsePositiveInteger(value: string) {
-  const parsed = parseInteger(value);
-  return parsed > 0 ? parsed : 0;
-}
-
 function parseNonNegativeInteger(value: string) {
  const parsed = parseInteger(value);
  return parsed > 0 ? parsed : 0;
@@ -12,7 +12,7 @@ import type {
  ProfileRedeemCodeMode,
 } from '../api/adminApiTypes';
 import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
-import { handlePageError, splitLines } from './pageUtils';
+import { handlePageError, parsePositiveInteger, splitLines } from './pageUtils';

 interface AdminRedeemCodePageProps {
  token: string;
@@ -422,11 +422,6 @@ export function AdminRedeemCodePage({
  );
 }

-function parsePositiveInteger(value: string) {
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : 0;
-}
-
 function redeemModeLabel(value: ProfileRedeemCodeMode) {
  return redeemModes.find((item) => item.value === value)?.label ?? value;
 }
@@ -19,7 +19,7 @@ import {
  filterAdminTrackingEventKeyOptions,
  findAdminTrackingEventDefinition,
 } from '../config/trackingEventDefinitions';
-import { handlePageError } from './pageUtils';
+import { handlePageError, parsePositiveInteger } from './pageUtils';

 interface AdminTaskConfigPageProps {
  token: string;
@@ -571,11 +571,6 @@ export function AdminTaskConfigPage({
  );
 }

-function parsePositiveInteger(value: string) {
-  const parsed = Number.parseInt(value, 10);
-  return Number.isFinite(parsed) && parsed > 0 ? parsed : 0;
-}
-
 function parseInteger(value: string) {
  const parsed = Number.parseInt(value, 10);
  return Number.isFinite(parsed) ? parsed : 0;
@@ -0,0 +1,87 @@
+import { expect, test } from 'vitest';
+
+import type { EditorGenerationPricingConfigPayload } from '../api/adminApiTypes';
+import {
+  buildAdminEditorGenerationPricingRequest,
+  collectInvalidEditorGenerationPricingLabels,
+  editorModel3dAddOnLabel,
+} from './adminEditorGenerationPricing';
+import { parsePositiveInteger } from './pageUtils';
+
+function pricingFixture(): EditorGenerationPricingConfigPayload {
+  return {
+    models: {
+      'gpt-image-2': { unit: 'perGeneration', prices: { '1K': 3, '2K': 5 } },
+      'audio1.0': { unit: 'perGeneration', price: 5 },
+    },
+    model3d: {
+      textToModelPricing: {
+        versionPrices: { 'v3.1-20260211': { noTexture: 8, texture: 16 } },
+        addOnPrices: { hdTexture: 8, unknownAddOn: 7 },
+      },
+      imageToModelPricing: {
+        versionPrices: { 'v3.1-20260211': { noTexture: 16, texture: 24 } },
+        addOnPrices: { hdTexture: 8 },
+      },
+    },
+  };
+}
+
+test('数值解析把空串、非数字、小数与 0 收敛成 0', () => {
+  expect(parsePositiveInteger('12')).toBe(12);
+  expect(parsePositiveInteger('')).toBe(0);
+  expect(parsePositiveInteger('abc')).toBe(0);
+  expect(parsePositiveInteger('12abc')).toBe(0);
+  expect(parsePositiveInteger('3.9')).toBe(0);
+  expect(parsePositiveInteger('0')).toBe(0);
+  expect(parsePositiveInteger('-3')).toBe(0);
+});
+
+test('未登记的 3D 加价项键回退显示原键名', () => {
+  expect(editorModel3dAddOnLabel('hdTexture')).toBe('高清贴图');
+  expect(editorModel3dAddOnLabel('unknownAddOn')).toBe('unknownAddOn');
+});
+
+test('校验覆盖模型档位与 3D 两段的全部数值', () => {
+  expect(collectInvalidEditorGenerationPricingLabels(pricingFixture())).toEqual(
+    [],
+  );
+
+  const invalid = pricingFixture();
+  const invalidImagePricing = invalid.models['gpt-image-2'];
+  const invalidTextEndpoint = invalid.model3d?.textToModelPricing;
+  const invalidImageEndpoint = invalid.model3d?.imageToModelPricing;
+  if (
+    !invalidImagePricing?.prices ||
+    !invalidTextEndpoint ||
+    !invalidImageEndpoint
+  ) {
+    throw new Error('夹具必须包含图片档位与 3D 两段');
+  }
+  const imageVersionPrice = invalidImageEndpoint.versionPrices['v3.1-20260211'];
+  if (!imageVersionPrice) {
+    throw new Error('夹具必须包含图生 3D 的版本底价');
+  }
+  invalidImagePricing.prices['2K'] = 0;
+  invalidTextEndpoint.addOnPrices.hdTexture = 0;
+  imageVersionPrice.noTexture = 0;
+  expect(collectInvalidEditorGenerationPricingLabels(invalid)).toEqual([
+    'gpt-image-2 2K',
+    '文生 3D 高清贴图',
+    '图生 3D v3.1-20260211 无贴图',
+  ]);
+});
+
+test('保存请求整段回传两段且不带定价版本，3D 缺失时回传 null', () => {
+  const pricing = pricingFixture();
+  expect(buildAdminEditorGenerationPricingRequest(pricing)).toEqual({
+    models: pricing.models,
+    model3d: pricing.model3d,
+  });
+  expect(
+    buildAdminEditorGenerationPricingRequest({ ...pricing, model3d: null }),
+  ).toEqual({
+    models: pricing.models,
+    model3d: null,
+  });
+});
@@ -0,0 +1,115 @@
+import type {
+  AdminUpsertEditorGenerationPricingRequest,
+  EditorGenerationModel3dEndpointPricingPayload,
+  EditorGenerationModel3dPricingPayload,
+  EditorGenerationPricingConfigPayload,
+} from '../api/adminApiTypes';
+
+/** 3D 端点在两个并列段里的字段名与后台展示名。 */
+export const EDITOR_MODEL3D_ENDPOINT_SECTIONS = [
+  { key: 'textToModelPricing', label: '文生 3D' },
+  { key: 'imageToModelPricing', label: '图生 3D' },
+] as const satisfies ReadonlyArray<{
+  key: keyof EditorGenerationModel3dPricingPayload;
+  label: string;
+}>;
+
+/**
+ * 3D 加价项键到中文标签。键来自接口返回，这里只负责展示；遇到未登记的键回退显示原键名，
+ * 不因为标签缺失就把该项漏掉。
+ */
+const EDITOR_MODEL3D_ADD_ON_LABELS: Record<string, string> = {
+  hdTexture: '高清贴图',
+  ultraTexture: '超高清贴图',
+  hdGeometry: '高清几何',
+  quadMesh: '四边形网格',
+  smartLowPoly: '智能低面',
+  generateParts: '分件生成',
+};
+
+export function editorModel3dAddOnLabel(addOn: string) {
+  return EDITOR_MODEL3D_ADD_ON_LABELS[addOn] ?? addOn;
+}
+
+export function isPositiveMudPoints(value: number | null | undefined) {
+  return typeof value === 'number' && Number.isInteger(value) && value >= 1;
+}
+
+/**
+ * 提交前校验：所有泥点数值都必须是不小于 1 的整数，返回不合法项的展示名。
+ *
+ * 后端仍会独立校验一遍；这里只是不把明显非法的 payload 发出去，避免保存后才报错。
+ */
+export function collectInvalidEditorGenerationPricingLabels(
+  pricing: EditorGenerationPricingConfigPayload,
+) {
+  const labels: string[] = [];
+  for (const [model, modelPricing] of Object.entries(pricing.models)) {
+    const tieredPrices = modelPricing.prices;
+    // `prices: {}` 没有档位可校验，不能算「这一项走分层计价」——否则底价会被顺手跳过校验。
+    if (tieredPrices && Object.keys(tieredPrices).length > 0) {
+      for (const [tier, price] of Object.entries(tieredPrices)) {
+        if (!isPositiveMudPoints(price)) {
+          labels.push(`${model} ${tier}`);
+        }
+      }
+      continue;
+    }
+    if (!isPositiveMudPoints(modelPricing.price)) {
+      labels.push(`${model} 泥点`);
+    }
+  }
+
+  const model3d = pricing.model3d;
+  if (model3d) {
+    for (const { key, label } of EDITOR_MODEL3D_ENDPOINT_SECTIONS) {
+      // 段与子表都来自接口返回：缺段或缺子表时只跳过这一段，不能让整页校验崩掉。
+      const endpointPricing = model3d[key];
+      if (!endpointPricing) {
+        continue;
+      }
+      for (const [version, price] of Object.entries(
+        endpointPricing.versionPrices ?? {},
+      )) {
+        if (!isPositiveMudPoints(price.noTexture)) {
+          labels.push(`${label} ${version} 无贴图`);
+        }
+        if (!isPositiveMudPoints(price.texture)) {
+          labels.push(`${label} ${version} 带贴图`);
+        }
+      }
+      for (const [addOn, price] of Object.entries(
+        endpointPricing.addOnPrices ?? {},
+      )) {
+        if (!isPositiveMudPoints(price)) {
+          labels.push(`${label} ${editorModel3dAddOnLabel(addOn)}`);
+        }
+      }
+    }
+  }
+  return labels;
+}
+
+/**
+ * 组装保存请求：`models` 与 3D 两段整段回传，不带定价版本（保存即覆盖，服务端不比对版本）。
+ * 3D 段缺失时回传 `null`——服务端会以 400 拒绝，后台不允许在这里静默新建或丢弃整段。
+ */
+export function buildAdminEditorGenerationPricingRequest(
+  pricing: EditorGenerationPricingConfigPayload,
+): AdminUpsertEditorGenerationPricingRequest {
+  return {
+    models: pricing.models,
+    model3d: pricing.model3d ?? null,
+  };
+}
+
+/** 单个端点段的不可变更新：底价与加价项各改一处，其余原样保留。 */
+export function updateEditorModel3dEndpointPricing(
+  model3d: EditorGenerationModel3dPricingPayload,
+  section: keyof EditorGenerationModel3dPricingPayload,
+  updater: (
+    current: EditorGenerationModel3dEndpointPricingPayload,
+  ) => EditorGenerationModel3dEndpointPricingPayload,
+): EditorGenerationModel3dPricingPayload {
+  return { ...model3d, [section]: updater(model3d[section]) };
+}
@@ -1,5 +1,18 @@
 import { formatAdminApiError, isAdminApiError } from '../api/adminApiClient';

+/**
+ * 泥点 / 积分类输入框文本转正整数：空串、非数字、小数、0 与负数一律收敛成 0，
+ * 由各页的提交前校验拦住。
+ *
+ * 用 `Number` 而不是 `parseInt`：`parseInt` 会把 `3.9` 截成 3、`12abc` 截成 12，
+ * 等于把编辑中的半截输入静默当成合法值存下去；再用 `isSafeInteger` 挡掉超出安全整数
+ * 范围的值（那种值在别处会被静默改写）。后台各页统一用这一份，不再各写一遍。
+ */
+export function parsePositiveInteger(value: string) {
+  const parsed = Number(value);
+  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : 0;
+}
+
 export function handlePageError(
  error: unknown,
  onUnauthorized: (message?: string) => void,
@@ -2972,6 +2972,34 @@ button:disabled {
  gap: 10px;
 }

+.admin-pricing-model3d-list {
+  display: grid;
+  gap: 10px;
+}
+
+.admin-pricing-model3d-row {
+  display: grid;
+  grid-template-columns: minmax(0, 1.2fr) repeat(2, minmax(0, 1fr));
+  align-items: end;
+  gap: 10px;
+}
+
+.admin-pricing-model3d-row-label {
+  color: #5c3a26;
+  font-size: 13px;
+  font-weight: 700;
+  line-height: 1.4;
+  overflow-wrap: anywhere;
+  padding-bottom: 10px;
+}
+
+.admin-pricing-model3d-hint {
+  color: #7b5a45;
+  font-size: 13px;
+  line-height: 1.5;
+  margin: 0;
+}
+
 .admin-pricing-unit {
  flex: 0 0 auto;
  border-radius: 999px;
@@ -3022,6 +3050,7 @@ button:disabled {
  .admin-two-column-wide,
  .admin-accounts-layout,
  .admin-pricing-grid,
+  .admin-pricing-model3d-row,
  .admin-form-row,
  .admin-filter-grid,
  .admin-table-query-grid,
@@ -6,7 +6,7 @@
    "visibleModels": [],
    "apiKey": "",
    "baseUrl": "https://dev.genarrative.world/gpt/v1",
-    "model": "gpt-6-astra",
+    "model": "platform-default",
    "apiKind": "openai_responses",
    "reasoningEffort": "max",
    "stream": true,
@@ -157,11 +157,8 @@ const allowedUncalledTauriCommands = [
  'set_active_game_creator_agent_session',
  'start_game_creator_agent_goal',
  'start_game_creator_supervisor_runtime_task',
-  // TODO: Remove the retired binding command after the legacy runtime path is removed.
-  'bind_components',
  'chat_with_game_creator_agent',
  'check_ui_editor_font_glyph_coverage',
-  'create_ui_design_resource',
  // 图片类生成的同步变体：GUI 已改为 `start_local_project_asset_generation` + 项目内任务账本
  // （提交即返回、后台生成）。这条命令**没有生产调用方**，只有 Rust 集成测试
  // （`src/tests/project.rs`）与 `commands.rs` 单测在调；待后续批次删除，或改为转调
@@ -1497,6 +1494,15 @@ if (defaultAppConfig.llm?.apiKey !== '') {
  throw new Error('AI game creator shell default llm.apiKey must stay empty');
 }

+// 首次启动模板必须写入官方路由占位模型（与 config.rs 的
+// OFFICIAL_LLM_ROUTER_DEFAULT_MODEL 同源）：钉死具体上游模型名会随上游目录
+// 变动失效，留空则首启配置不合法。
+if (defaultAppConfig.llm?.model !== 'platform-default') {
+  throw new Error(
+    'AI game creator shell default llm.model must stay the official route placeholder',
+  );
+}
+
 if (defaultAppConfig.agentMode !== 'codex_app_server') {
  throw new Error(
    'AI game creator shell default agentMode must be codex_app_server',
@@ -6312,8 +6312,7 @@ dependencies = [
 [[package]]
 name = "ts-rs"
 version = "12.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "756050066659291d47a554a9f558125db17428b073c5ffce1daf5dcb0f7231d8"
+source = "git+https://github.com/Aleph-Alpha/ts-rs?rev=fd8679ef20f866f747c046b30bd29c15e3d7a003#fd8679ef20f866f747c046b30bd29c15e3d7a003"
 dependencies = [
 "thiserror 2.0.18",
 "ts-rs-macros 12.0.1",
@@ -6334,9 +6333,9 @@ dependencies = [
 [[package]]
 name = "ts-rs-macros"
 version = "12.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38d90eea51bc7988ef9e674bf80a85ba6804739e535e9cab48e4bb34a8b652aa"
+source = "git+https://github.com/Aleph-Alpha/ts-rs?rev=fd8679ef20f866f747c046b30bd29c15e3d7a003#fd8679ef20f866f747c046b30bd29c15e3d7a003"
 dependencies = [
+ "indexmap 2.14.0",
 "proc-macro2",
 "quote",
 "syn 2.0.118",
@@ -29,7 +29,10 @@ tauri-build = { version = "2.6.2", features = [] }
 [dependencies]
 codex-patch-parser = { path = "vendor/codex-patch-parser" }
 chrono = { version = "0.4", default-features = false, features = ["std"] }
-ts-rs = "12.0.1"
+# 与 server-rs 同一口径：已发布的 ts-rs 12.0.1 解析不了 enum 级 `serde(deny_unknown_fields)`
+# （见 agent/direct_codex_user_item/model.rs），上游修复 #491 未发版，故固定到该 commit；
+# 等 crates.io 发布 > 12.0.1 后改回 registry 版本。不要改用 `no-serde-warnings` 关告警。
+ts-rs = { git = "https://github.com/Aleph-Alpha/ts-rs", rev = "fd8679ef20f866f747c046b30bd29c15e3d7a003" }
 typed_floats = { version = "1.0.7", features = ["serde"] }
 nalgebra = { version = "0.35.0", features = ["serde-serialize"] }
 agent-runtime-core = { path = "../../../server-rs/crates/agent-runtime-core" }
@@ -66,7 +69,7 @@ platform-agent = { path = "../../../server-rs/crates/platform-agent" }
 portable-pty = "0.9"
 reqwest = { version = "0.12", default-features = false, features = ["json", "multipart", "native-tls", "stream"] }
 regex = "1"
-shared-contracts = { path = "../../../server-rs/crates/shared-contracts", default-features = false, features = ["ts-bindings"] }
+shared-contracts = { path = "../../../server-rs/crates/shared-contracts", default-features = false }
 tauri = { version = "2.11.2", features = [] }
 tauri-plugin-dialog = "2.7.1"
 tauri-plugin-http = { version = "2.5.9", default-features = false, features = ["charset", "cookies", "http2", "rustls-tls"] }
--- a/Show More
+++ b/Show More