共享 CanvasWorld 统一超采样

默认以 2 倍内容分辨率渲染并保持 viewport.scale 的最终视觉比例

用反向 stroke-width 抵消资源卡 SVG 图标的超采样线宽

补充共享 CanvasWorld 超采样契约测试

.codex/README.md

@@ -5,7 +5,6 @@
 ## 目录约定
 
 - `.codex/skills/` 是项目专属 skill 根目录。每个 skill 以目录中的 `SKILL.md` 为入口，配套的参考资料和脚本放在同一目录下。
-- `spec-driven-development` 负责跨模块、公开契约、SpacetimeDB、AGC/Runtime 和复杂 UI 任务的规范先行与逐里程碑验收；具体规则以 `docs/` 下的 SDD 工作流和模板为准。
 - `.codex/plugins/` 保存随仓库分发的项目插件资源及其参考资料。当前的 `game-studio` 插件提供浏览器游戏设计、原型、2D/3D 技术栈、素材管线和 playtest 工作流；是否启用遵循当前 Codex 的插件加载机制，不依赖旧工具的环境变量或个人配置脚本。
 - `.codex/hooks/`、`.codex/environments/` 等目录保存项目工具链所需的 hooks 和环境模板；它们不替代项目代码中的运行时配置。
 - 长期有效的产品、架构、接口、排障和协作知识统一放在 `docs/` 与 `docs/project-memory/`，不复制到本目录。

.codex/skills/genarrative-external-editor-api/SKILL.md

@@ -32,7 +32,6 @@ Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses on
 - Use stable references such as `objectKey`, project resource ID, or asset ID where each operation permits them. Image edit/redraw is stricter: `sourceReferenceId` accepts only a registered project resource ID or asset ID; upload confirmation alone is not enough. Use `/assets/read-url` only for temporary preview/download access.
 - Preserve both warning channels after completion. A general `warning` can coexist with `sliceWarning`; do not discard either.
 - Do not invent missing derivatives. A source-preserved warning means the main source remains usable but requested post-processing failed. A slice warning means the complete transparent sheet is usable but individual slices are absent.
-- Icon spritesheet generation requires an explicit `sliceMode` and has no default. Use `sliceMode="grid"` with the `gridX` and `gridY` the requirement actually names (1-32 each) only for equal grid cells or fixed slots; use `sliceMode="connected-components"` for free-form sheets or an open number of subjects, and constrain the count with `sliceCount` instead of inventing grid dimensions. `connected-components` must not carry `gridX`/`gridY`; an omitted, contradictory, or misapplied declaration returns 400 before billing.
 - For successful `style="pixelArt"`, treat completed-result and nested resource/asset dimensions as the final logical-grid PNG dimensions. They may differ from `size`, `imageSize`, the provider image, and `canvasCompletion.placeholder`; do not rescale or reject the artifact to match those inputs.
 - Keep generated artifacts in the canvas and asset library together. Character animation accepts `assetFolderId` and `assetLabel`; its completed result directly returns the final `assetKind="character-animation"` resource and asset with formal sequence fields. Do not create a duplicate first-frame record.
 

.codex/skills/genarrative-external-editor-api/references/api-operations.md

@@ -52,7 +52,7 @@ Every generation row requires a stable `Idempotency-Key` header and returns HTTP
 | Image generation    | `/api/external/v1/editor/images/generations`                  | `prompt`                                                                                                                                        | `kind`, `style`, `model`, `aspectRatio`, `imageSize`, `size`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs` |
 | Image edit/redraw   | `/api/external/v1/editor/images/edits`                        | `prompt`, `sourceReferenceId`                                                                                                                   | `referenceImageSrcs`, `model`, `size`, `projectId`, `assetFolderId`, `assetLabel`, `targetLayerId`, `canvasCompletion`                                                 |
 | Background removal  | `/api/external/v1/editor/images/background-removals`          | `sourceImageSrc`                                                                                                                                | `projectId`, `sourceResourceId`, `targetLayerId`, static-image `assetKind`, `assetFolderId`, `assetLabel`, `canvasCompletion`, `generationInputs`                      |
-| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`                                                                                                               | `sliceMode`, `gridX`, `gridY`, `sliceCount`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
+| Icon spritesheet    | `/api/external/v1/editor/icon-spritesheets/generations`       | `referenceId`, `iconDescriptions`                                                                                                               | `sliceLayout`, `style`, `referenceImageSrcs`, `screenColor`, `model`, `aspectRatio`, `imageSize`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`       |
 | UI asset extraction | `/api/external/v1/editor/ui-designs/assets/extractions`       | `sourceImageSrc`, `aspectRatio`, `imageSize`                                                                                                    | `screenColor`, `model`, `referenceImageSrcs`, `projectId`, `assetFolderId`, `spritesheetLabel`, `canvasCompletion`                                                     |
 | Character animation | `/api/external/v1/editor/character-animations/generations`    | `sourceLayerId`, `sourceImageSrc`, `sourceWidth`, `sourceHeight`, `promptText`, `resolution`, `ratio`, `frameCount`, `durationSeconds`, `model` | `projectId`, `sourceResourceId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                                                                                     |
 | Video generation    | `/api/external/v1/editor/videos/generations`                  | `prompt`, `model`, `aspectRatio`, `durationSeconds`, `resolution`, `mode`, `sound`                                                              | `referenceImageSrcs`, `referenceVideoSrcs`, `referenceAudioSrcs`, `webSearchEnabled`, `projectId`, `assetFolderId`, `assetLabel`, `canvasCompletion`                   |
@@ -94,7 +94,7 @@ For image edit/redraw, confirming an upload is not sufficient: create a project
 
 The icon-spritesheet primary `referenceId` is intentionally stricter than ordinary image references: it accepts only a current-owner project resource ID or asset ID whose authoritative `assetKind` is `icon-spec`. It does not accept an `objectKey`, URL, Data URL, or Blob URL.
 
-`sliceMode` is required and has no default, so every request must state it. Use `"connected-components"` to detect independent opaque regions by alpha connectivity, or `"grid"` with positive `gridX` and `gridY` values (maximum 32 each) only when the requirement names equal grid cells or fixed slots; the dimensions must come from that requirement. `connected-components` must not carry `gridX`/`gridY`, and `sliceCount` constrains the connected-component result instead of expressing a grid. Omitting `sliceMode`, or contradicting the declared mode with grid dimensions, returns 400 before pricing, enqueueing, or any provider call.
+`sliceLayout: "grid-2x2"` is an opt-in contract for four fixed game-runtime assets. The provider prompt and server persistence both preserve the ordered slots left-top, right-top, left-bottom, right-bottom. Omit it to retain the default connected-component slicing behaviour for ordinary free-form icon sheets.
 
 ## Common Values
 

.codex/skills/genarrative-external-editor-api/references/capability-routing.md

@@ -79,9 +79,9 @@ Keep the existing autonomous-build task graph. Do not add a parallel task system
 
 1. `art-director` generates `assets/art-spec.png` with image generation, `kind: "spec"`, then registers it as `assetKind: "icon-spec"`. This image is the authoritative visual spec; `generationInputs.artSpec` is supporting structured context.
 2. `design-foundation` generates `assets/ui-prototype.png` with `kind: "ui-design"`, using the registered art-spec resource ID in `referenceImageSrcs`.
-3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. `sliceMode` is required and has no default: send `sliceMode: "grid"` with `gridX`/`gridY` only when the requirement itself fixes the slots or names the column/row count, and otherwise send `sliceMode: "connected-components"` (with `sliceCount` when a subject count must be constrained); never invent a grid to express "kinds of assets", and never send `gridX`/`gridY` with `connected-components`.
+3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. For the four-category game contract it must also send `sliceLayout: "grid-2x2"`; this is an explicit fixed-slot contract, not a client-side guessed crop.
 
-For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. When the requirement fixes grid slots, require the response `sliceMode` to match the declared `grid` request and exactly `gridX × gridY` slices before registering the local runtime sheet; a connected-components request is instead judged by its own `sliceCount` or by the requirement, and both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
+For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. For the four-category game-chat contract, require response `sliceLayout: "grid-2x2"` and exactly four slices before registering the local runtime sheet; both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
 
 Never use `assets/ui-prototype.png` as the spritesheet visual-spec reference. UI extraction is outside this canonical DAG.
 

.codex/skills/genarrative-external-editor-api/scripts/genarrative_external_api.py

@@ -617,7 +617,6 @@ class GenarrativeExternalClient:
         self,
         reference_id: str,
         icon_descriptions: list[str],
-        slice_mode: str,
         **fields: Any,
     ) -> Any:
         reference_id = normalize_optional_text(reference_id)
@@ -626,20 +625,6 @@ class GenarrativeExternalClient:
         descriptions = [item.strip() for item in icon_descriptions if item.strip()]
         if not descriptions:
             raise GenarrativeApiError("icon_descriptions must contain at least one non-empty item")
-        slice_mode = normalize_optional_text(slice_mode)
-        if slice_mode not in ("connected-components", "grid"):
-            raise GenarrativeApiError(
-                "slice_mode must be declared explicitly as 'connected-components' or 'grid'; the API has no default"
-            )
-        grid_x = fields.get("gridX")
-        grid_y = fields.get("gridY")
-        if slice_mode == "grid":
-            if grid_x is None or grid_y is None:
-                raise GenarrativeApiError("slice_mode='grid' requires both gridX and gridY")
-        elif grid_x is not None or grid_y is not None:
-            raise GenarrativeApiError(
-                "slice_mode='connected-components' must not carry gridX/gridY"
-            )
         label = fields.get("assetLabel", "图标图集")
         self._apply_canvas_session_fields(fields, label, 1024, 1024)
         fields.setdefault("screenColor", "auto")
@@ -650,7 +635,6 @@ class GenarrativeExternalClient:
                 **fields,
                 "referenceId": reference_id,
                 "iconDescriptions": descriptions,
-                "sliceMode": slice_mode,
             },
             idempotency_key=idempotency_key,
         )
@@ -895,7 +879,6 @@ def _self_test() -> None:
     client.generate_icon_spritesheet(
         "editor-resource-spec",
         ["蛇头向上", "蛇身直线", "转角", "尾部", "四类食物"],
-        "connected-components",
         canvasSession=session,
         assetLabel="贪吃蛇透明图集",
         referenceId="must-not-override-explicit-reference",
@@ -904,7 +887,6 @@ def _self_test() -> None:
     assert calls[0]["path"] == "/api/external/v1/editor/icon-spritesheets/generations"
     assert calls[0]["body"]["referenceId"] == "editor-resource-spec"
     assert calls[0]["body"]["screenColor"] == "auto"
-    assert calls[0]["body"]["sliceMode"] == "connected-components"
     assert calls[0]["body"]["iconDescriptions"][0] == "蛇头向上"
     assert calls[1]["path"] == "/api/external/v1/generations/task-operation-demo"
     print("self-test ok")

.codex/skills/spec-driven-development/SKILL.md

@@ -1,43 +0,0 @@
----
-name: spec-driven-development
-description: 在 Genarrative 中处理跨模块功能、公开 API/DTO、SpacetimeDB schema、AGC/Runtime 或复杂 UI 状态链路时，按主规范、里程碑规范、单里程碑实现计划和验收证据推进；小型局部修复不触发。
-license: MIT
-metadata:
-  codex:
-    tags: [SDD, 规范驱动开发, 主规范, 里程碑, 验收]
----
-
-# SDD 规范驱动开发
-
-本 skill 把 Genarrative 的复杂任务路由到规范先行、单里程碑交付的工作流。权威规则和模板分别见：
-
-- `docs/【协作规范】规范驱动开发工作流-2026-09-12.md`
-- `docs/project-memory/shared-memory/【模板】规范驱动开发主规范与里程碑模板-2026-09-12.md`
-
-## 触发条件
-
-使用本 skill 的任务包括：
-
-- 跨前端、`api-server`、`platform-*`、`spacetime-client`、`spacetime-module` 或 `module-*` 的功能。
-- `/api/external/v1`、共享 DTO、OpenAPI、SpacetimeDB schema、迁移或跨版本重放合同变化。
-- AGC / DirectProject、Agent Runtime、工具白名单、审批、持久化恢复或资源工作流变化。
-- 复杂 UI 状态链路、入口/页面生命周期变化，或需要多个独立验收面的功能。
-
-文案、单文件局部修复、无行为变化重构和一次性诊断继续使用轻量流程；执行中一旦触及公开行为或跨模块合同，切换到本 skill。
-
-## 执行要求
-
-1. 检查工作树，读取当前专题、源码、测试、契约和历史决策；写清交付结果、验收判据和不做项。
-2. 找到或更新唯一主规范。主规范描述行为合同、边界、非目标、兼容/迁移和证据，不绑定实现细节。
-3. 在 `docs/project-memory/plans/` 创建一个或多个 `【里程碑】中文标题-YYYY-MM-DD.md`，填写 `Version`、`Status`、`Date`、`Parent Spec`、范围、依赖和验收标准；评审通过前不写业务代码。
-4. 每次只选择一个已评审里程碑，创建对应的 `【实施计划】中文标题-YYYY-MM-DD.md`，明确修改边界、顺序、验证命令、风险和回滚点。
-5. 发现行为需要变化时，严格按 `主规范 → 尚未实现的里程碑规范 → 当前实现计划 → 代码与测试` 更新。
-6. 完成一个里程碑后，提供主规范/里程碑逐条对照、自动化验证、必要运行时 smoke、边界验证和未验证项；未验收不得推进下一个里程碑。
-7. 全部验收通过后，将持久结论合并回主规范，删除已完成的临时计划，并检查文档、契约、测试和提交边界一致。
-
-## 约束
-
-- 里程碑和实现计划是开发期协调文件，完成或取消后删除；阶段编号和临时名称不得进入产品代码、用户文档、测试名称或提交标题。
-- 活动计划可以提交以便团队同步，但不得把一次性实现步骤写进长期规范。
-- 继续遵守现有 API、SpacetimeDB、AGC、编码和中文文档约束；本 skill 不替代专题门禁。
-- 文档任务至少运行 `npm run check:doc-index`、`npm run check:encoding` 和 `git diff --check`；代码任务再运行范围匹配的测试、类型检查、schema/OpenAPI 或运行时 smoke。

.env.example

@@ -1,18 +1,13 @@
 # Server-side OpenAI-compatible LLM endpoint base URL.
-LLM_BASE_URL="https://api.tiantoken.com/v1"
+LLM_BASE_URL="https://api.vectorengine.cn/v1"
 
 # Server-side API key used by the local Vite proxy.
-# Recommended: set `LLM_API_KEY` locally, or use `TIANTOKEN_API_KEY`
+# Recommended: set `LLM_API_KEY` locally, or use `VECTOR_ENGINE_API_KEY`
 # through the Rust api-server proxy.
 # Legacy compatibility: `VITE_LLM_API_KEY` is still supported by the proxy,
 # but it should not be relied on by browser code.
 LLM_API_KEY=""
 
-# Router account provisioning secret (server-side only). Prefer the protected
-# file form in production; never expose either value to clients or commit it.
-GENARRATIVE_LLM_ROUTER_PROVISIONING_SECRET=""
-GENARRATIVE_LLM_ROUTER_PROVISIONING_SECRET_FILE=""
-
 # Optional frontend override for the local proxy path.
 VITE_LLM_PROXY_BASE_URL="/api/llm"
 
@@ -122,7 +117,7 @@ WECHAT_MINIPROGRAM_MESSAGE_ENCODING_AES_KEY=""
 # Model name for chat completions.
 VITE_LLM_MODEL="gpt-5.4-mini"
 GENARRATIVE_LLM_PROVIDER="openai-compatible"
-GENARRATIVE_LLM_BASE_URL="https://api.tiantoken.com/v1"
+GENARRATIVE_LLM_BASE_URL="https://api.vectorengine.cn/v1"
 GENARRATIVE_LLM_API_KEY=""
 GENARRATIVE_LLM_MODEL="gpt-5.4-mini"
 
@@ -130,15 +125,10 @@ GENARRATIVE_LLM_MODEL="gpt-5.4-mini"
 DASHSCOPE_BASE_URL="https://dashscope.aliyuncs.com/api/v1"
 DASHSCOPE_API_KEY="YOUR_DASHSCOPE_API_KEY"
 
-# Tiantoken LLM and GPT-image-2 / Gemini image generation config.
-TIANTOKEN_BASE_URL="https://api.tiantoken.com"
-TIANTOKEN_API_KEY=""
-TIANTOKEN_IMAGE_REQUEST_TIMEOUT_MS="1000000"
-
-# VectorEngine is retained for Suno audio generation only.
+# VectorEngine LLM and GPT-image-2 / Gemini image generation config.
 VECTOR_ENGINE_BASE_URL="https://api.vectorengine.cn"
 VECTOR_ENGINE_API_KEY=""
-VECTOR_ENGINE_AUDIO_REQUEST_TIMEOUT_MS="180000"
+VECTOR_ENGINE_IMAGE_REQUEST_TIMEOUT_MS="1000000"
 
 # ElevenLabs editor sound-effect generation is server-side only.
 ELEVENLABS_BASE_URL="https://api.elevenlabs.io"
@@ -158,15 +148,6 @@ ALIYUN_OSS_POST_EXPIRE_SECONDS="600"
 ALIYUN_OSS_POST_MAX_SIZE_BYTES="20971520"
 ALIYUN_OSS_SUCCESS_ACTION_STATUS="200"
 
-# AGC 项目定时快照上传目标。对象只落在服务端私有前缀
-# `agc/project-snapshots/v1/{user}/{project}/` 下，客户端直传票据不覆盖该前缀。
-# bucket 与凭据可以与资源 bucket 分离；凭据未设置时回退使用 ALIYUN_OSS_ACCESS_KEY_*，
-# 但 bucket / endpoint 默认指向 AGC 发行 bucket，需要该凭据具备目标 bucket 的 PutObject 权限。
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_BUCKET="agc-dev"
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ENDPOINT="oss-rg-china-mainland.aliyuncs.com"
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_ID=""
-GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_SECRET=""
-
 # BgFilter 受限资源 worker。父 api-server / external-generation-worker 与唯一的
 # `GENARRATIVE_PROCESS_ROLE=bgfilter-worker` 进程必须使用同一个内部 Token。
 # `npm run dev` 与 `npm run dev:api-server` 都会自动带起并验活唯一 worker，不要再开第二个终端重复启动。

.eslintrc.cjs

@@ -164,7 +164,6 @@ module.exports = {
     'server-rs/target-*',
     'apps/desktop-shell/src-tauri/target',
     'apps/ai-game-creator-shell/src/features/ui-editor/types/**',
-    'apps/ai-game-creator-shell/src/features/project-workspace/generated/**',
     'target',
     'src/main.tsx',
     'src/App.tsx',

.gitattributes

@@ -23,6 +23,3 @@
 *.meta text
 *.anim text
 *.controller text
-
-# Rust ts-rs 生成的共享契约：保留在仓库中供 TS 消费，但不作为手写源文件统计。
-packages/shared/src/contracts/generated/** linguist-generated=true

.gitea/workflows/project-ci.yml

@@ -7,10 +7,6 @@ on:
   pull_request:
   workflow_dispatch:
 
-concurrency:
-  group: project-ci-${{ github.event.pull_request.number || github.ref }}
-  cancel-in-progress: true
-
 permissions:
   contents: read
 
@@ -31,28 +27,9 @@ env:
   RUSTC_WRAPPER: ''
   CARGO_BUILD_RUSTC_WRAPPER: ''
 
-# job 声明顺序就是 runner 领取顺序，因此把最长尾的客户端 Rust 门禁排在前面，
-# 让它在最少的等待下占用并发槽位；其余 job 按时长递减排列。
-#
-# 客户端（微信壳 / Expo 移动壳 / Tauri 桌面壳 / AI 游戏创作壳）门禁原先全部串在
-# `Native shell tests` 一个 job 里，实测 18 分 37 秒。现在按门禁组拆成一个分组一个 job：
-# `Native shell tests`（契约 + H5 / 微信 / 移动 / 桌面壳门禁 + 发布构建 smoke）、
-# `AI game creator shell web tests`（typecheck + 壳内测试）、`AI game creator shell
-# Rust shard 1/4` 到 `4/4`（AGC 壳 bin 单测按名单分 4 片）、`AI game creator shell
-# Rust smoke`（agent-run smoke）与 `AI game creator shell Rust crates`（AGC 壳依赖的
-# 共享 / 平台 crate 测试）。各自的命令与拆分前逐一对应，本地
-# `npm run check:native-shells` 仍是同一条串行序列。
-#
-# AGC 壳的 bin 单测（2466 条）按名单分 4 片、一片一个 job：片内保持 `--test-threads=1`
-# （当年线程并行会互相干扰的是进程内后台锁与异步终态），片与片之间靠 job 级并发摊开。
-# 不要改回「一个 job 里多进程并行这几片」：同一容器内它们会争抢共享 HOME、target 与固定
-# 临时路径，实测比整套串行还慢。每个分片 job 都会自校验「片并集等于全集且互斥」。
 jobs:
-  # AGC 壳自身的 Rust bin 单测分片，4 片各自独立 job 并发执行、片内仍保持
-  # `--test-threads=1`。这里不装 npm 依赖：壳 Rust 门禁只用 cargo 与 node 内建模块，
-  # 也只需要 AGC 壳自己那份锁定依赖。
-  ai-game-creator-shell-rust-shard-1:
-    name: AI game creator shell Rust shard 1/4
+  repository-checks:
+    name: Repository checks
     runs-on: genarrative-ci
     steps:
       - name: Checkout full history from Gitea
@@ -64,228 +41,76 @@ jobs:
       - name: Validate preinstalled CI job image and sandbox
         run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
 
-      - name: Prepare AI game creator shell Rust dependencies
+      - name: Resolve comparison base
         shell: bash
         run: |
           set -euo pipefail
-          # AGC 壳有独立 Cargo.lock，其 path 依赖已含 platform-llm、platform-agent、
-          # agent-runtime-core 与 shared-contracts，因此只锁这一份 manifest 就能覆盖壳测试
-          # 与 smoke 的全部第三方依赖；server-rs 那次预热归 crate 级 job，不在这里重复。
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
+          base_ref="$(node -e '
+            const fs = require("node:fs");
+            const event = JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
+            process.stdout.write(event.pull_request?.base?.sha ?? event.before ?? "");
+          ')"
+          if [[ -n "${base_ref}" && ! "${base_ref}" =~ ^0+$ ]]; then
+            git cat-file -e "${base_ref}^{commit}" 2>/dev/null || {
+              echo "comparison base commit is unavailable: ${base_ref}" >&2
               exit 1
-            fi
-            sleep $((attempt * 2))
-          done
+            }
+          else
+            base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
+          fi
+          resolved_base_ref="$(git rev-parse --verify "${base_ref}^{commit}" 2>/dev/null || true)"
+          head_ref="$(git rev-parse HEAD)"
+          if [[ "${resolved_base_ref}" == "${head_ref}" ]]; then
+            resolved_base_ref="$(git rev-parse --verify HEAD^ 2>/dev/null || true)"
+          fi
+          if [[ -z "${resolved_base_ref}" ]]; then
+            echo 'comparison base must resolve to a commit distinct from HEAD.' >&2
+            exit 1
+          fi
+          base_ref="${resolved_base_ref}"
+          if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
+            && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
+            echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
+            exit 1
+          fi
+          echo "SPACETIME_SCHEMA_BASE_REF=${base_ref}" >> "${GITHUB_ENV}"
 
-      - name: Run AI game creator shell Rust shard 1/4
-        run: npm run check:native-shells:agc-rust-shard-1
+      - name: Install npm dependencies
+        run: bash scripts/ci-npm-ci-with-retry.sh
 
-  ai-game-creator-shell-rust-shard-2:
-    name: AI game creator shell Rust shard 2/4
+      - name: Run repository checks
+        run: npm run check:repository-ci
+
+  frontend-tests:
+    name: Frontend tests
     runs-on: genarrative-ci
     steps:
-      - name: Checkout full history from Gitea
+      - name: Checkout source from Gitea
         env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
+          GENARRATIVE_GITEA_FETCH_DEPTH: '1'
           GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
         run: genarrative-gitea-checkout
 
       - name: Validate preinstalled CI job image and sandbox
         run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
 
-      - name: Prepare AI game creator shell Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
+      - name: Install npm dependencies
+        run: bash scripts/ci-npm-ci-with-retry.sh
 
-      - name: Run AI game creator shell Rust shard 2/4
-        run: npm run check:native-shells:agc-rust-shard-2
+      - name: Run frontend and script tests
+        run: npm run test
 
-  ai-game-creator-shell-rust-shard-3:
-    name: AI game creator shell Rust shard 3/4
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
+      - name: Run BgFilter worker smoke harness tests
+        run: npm run bgfilter-worker:smoke-test
 
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
+      - name: Validate production health patrol behavior
+        run: npm run check:production-health-patrol
 
-      - name: Prepare AI game creator shell Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
+      - name: Validate production API release behavior
+        run: npm run check:production-api-release
 
-      - name: Run AI game creator shell Rust shard 3/4
-        run: npm run check:native-shells:agc-rust-shard-3
-
-  ai-game-creator-shell-rust-shard-4:
-    name: AI game creator shell Rust shard 4/4
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Prepare AI game creator shell Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
-      - name: Run AI game creator shell Rust shard 4/4
-        run: npm run check:native-shells:agc-rust-shard-4
-
-  # agent-run smoke 会 spawn `cargo run`（走壳自己的 manifest），同样不装 npm 依赖，
-  # 单独一个 job，免得把已经压到 4 分钟级的片 job 拖长。
-  ai-game-creator-shell-rust-smoke:
-    name: AI game creator shell Rust smoke
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Prepare AI game creator shell Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path apps/ai-game-creator-shell/src-tauri/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'AI game creator shell Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
-      - name: Run AI game creator shell agent-run smoke
-        run: npm run check:native-shells:agc-rust-smoke
-
-  # AGC 壳依赖的共享 / 平台 crate 测试用的是 server-rs workspace 与两个无锁独立 crate
-  # 的 manifest，属另一套依赖图，因此单独一个 job 预热、单独跑。
-  ai-game-creator-shell-rust-crates:
-    name: AI game creator shell Rust crates
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Prepare server-rs Rust dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          for attempt in $(seq 1 5); do
-            if cargo fetch --locked \
-              --target x86_64-unknown-linux-gnu \
-              --manifest-path server-rs/Cargo.toml; then
-              break
-            fi
-            if [[ "${attempt}" -eq 5 ]]; then
-              echo 'server-rs Cargo dependency fetch failed after 5 attempts.' >&2
-              exit 1
-            fi
-            sleep $((attempt * 2))
-          done
-
-      - name: Prepare standalone Rust crate dependencies
-        shell: bash
-        run: |
-          set -euo pipefail
-          # agent-runtime-core / agent-runtime-orchestration 被 server-rs/Cargo.toml 的
-          # exclude 排除，不参与上面的 workspace 锁文件，因此上面那次锁定 fetch 覆盖不到它们；
-          # 而 `npm run ai-game-creator-shell:check:rust:crates` 会用
-          # `cargo test --manifest-path` 单独跑这两个 crate。不在这里预热的话，这两条测试
-          # 会在测试阶段自己 `Updating crates.io index`，crates.io 一抖动整条 job 就红
-          # （见 #327 / PR #316 run 1950）。
-          # 两个 crate 都没有提交 Cargo.lock，所以这里只能做不带锁标志的 fetch：
-          # 加锁标志会因为缺少锁文件直接失败。生成的 Cargo.lock 落在两个 crate 目录内，
-          # 已被各自的 .gitignore 忽略，只留在容器里；随后的测试阶段因此能用锁定版本
-          # 解析，不再触碰 registry index。
-          for manifest_path in \
-            server-rs/crates/agent-runtime-core/Cargo.toml \
-            server-rs/crates/agent-runtime-orchestration/Cargo.toml; do
-            for attempt in $(seq 1 5); do
-              if cargo fetch \
-                --target x86_64-unknown-linux-gnu \
-                --manifest-path "${manifest_path}"; then
-                break
-              fi
-              if [[ "${attempt}" -eq 5 ]]; then
-                echo "standalone crate dependency fetch failed after 5 attempts: ${manifest_path}" >&2
-                exit 1
-              fi
-              sleep $((attempt * 2))
-            done
-          done
-
-      - name: Run AI game creator shell shared crate gates
-        run: npm run check:native-shells:agc-rust-crates
+      - name: Validate production API deploy behavior
+        run: npm run check:production-api-deploy
 
   backend-tests:
     name: Backend tests
@@ -369,8 +194,6 @@ jobs:
       - name: Check SpacetimeDB module
         run: cargo check --locked -p spacetime-module --manifest-path server-rs/Cargo.toml
 
-  # 客户端的壳级与契约门禁：静态契约断言、H5 / 微信 / 移动 / 桌面壳运行时门禁，
-  # 以及依赖发布产物的构建 smoke。
   native-shell-tests:
     name: Native shell tests
     runs-on: genarrative-ci
@@ -392,6 +215,7 @@ jobs:
         run: |
           set -euo pipefail
           for manifest_path in \
+            server-rs/Cargo.toml \
             apps/desktop-shell/src-tauri/Cargo.toml \
             apps/ai-game-creator-shell/src-tauri/Cargo.toml; do
             for attempt in $(seq 1 5); do
@@ -408,118 +232,8 @@ jobs:
             done
           done
 
-      - name: Run native shell contract gates
-        run: npm run check:native-shells:contract
-
       - name: Run native shell gates
-        run: npm run check:native-shells:shells
-
-      - name: Run native shell release build smoke
-        run: npm run check:native-shells:release
+        run: npm run check:native-shells
 
       - name: Ensure native lockfiles are unchanged
         run: git diff --exit-code -- apps/desktop-shell/src-tauri/Cargo.lock apps/ai-game-creator-shell/src-tauri/Cargo.lock
-
-  frontend-tests:
-    name: Frontend tests
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout source from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '1'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Install npm dependencies
-        run: bash scripts/ci-npm-ci-with-retry.sh
-
-      - name: Run frontend and script tests
-        run: npm run test
-
-      - name: Run BgFilter worker smoke harness tests
-        run: npm run bgfilter-worker:smoke-test
-
-      - name: Validate production health patrol behavior
-        run: npm run check:production-health-patrol
-
-      - name: Validate production API release behavior
-        run: npm run check:production-api-release
-
-      - name: Validate production API deploy behavior
-        run: npm run check:production-api-deploy
-
-  repository-checks:
-    name: Repository checks
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Resolve comparison base
-        shell: bash
-        run: |
-          set -euo pipefail
-          base_ref="$(node -e '
-            const fs = require("node:fs");
-            const event = JSON.parse(fs.readFileSync(process.env.GITHUB_EVENT_PATH, "utf8"));
-            process.stdout.write(event.pull_request?.base?.sha ?? event.before ?? "");
-          ')"
-          if [[ -n "${base_ref}" && ! "${base_ref}" =~ ^0+$ ]]; then
-            git cat-file -e "${base_ref}^{commit}" 2>/dev/null || {
-              echo "comparison base commit is unavailable: ${base_ref}" >&2
-              exit 1
-            }
-          else
-            base_ref="$(git merge-base HEAD origin/master 2>/dev/null || git rev-parse HEAD)"
-          fi
-          resolved_base_ref="$(git rev-parse --verify "${base_ref}^{commit}" 2>/dev/null || true)"
-          head_ref="$(git rev-parse HEAD)"
-          if [[ "${resolved_base_ref}" == "${head_ref}" ]]; then
-            resolved_base_ref="$(git rev-parse --verify HEAD^ 2>/dev/null || true)"
-          fi
-          if [[ -z "${resolved_base_ref}" ]]; then
-            echo 'comparison base must resolve to a commit distinct from HEAD.' >&2
-            exit 1
-          fi
-          base_ref="${resolved_base_ref}"
-          if [[ "${GITHUB_EVENT_NAME:-}" == 'pull_request' ]] \
-            && ! git merge-base --is-ancestor "${base_ref}" HEAD; then
-            echo 'pull request head does not contain the latest base commit; update the branch and rerun CI.' >&2
-            exit 1
-          fi
-          echo "SPACETIME_SCHEMA_BASE_REF=${base_ref}" >> "${GITHUB_ENV}"
-
-      - name: Install npm dependencies
-        run: bash scripts/ci-npm-ci-with-retry.sh
-
-      - name: Run repository checks
-        run: npm run check:repository-ci
-
-  # 客户端的 AI 游戏创作壳前端门禁：typecheck 与壳内测试，不触碰 Cargo。
-  ai-game-creator-shell-web-tests:
-    name: AI game creator shell web tests
-    runs-on: genarrative-ci
-    steps:
-      - name: Checkout full history from Gitea
-        env:
-          GENARRATIVE_GITEA_FETCH_DEPTH: '0'
-          GENARRATIVE_GITEA_TOKEN: ${{ github.token }}
-        run: genarrative-gitea-checkout
-
-      - name: Validate preinstalled CI job image and sandbox
-        run: GENARRATIVE_GITEA_CI_CHECK_RUNTIME=1 bash scripts/check-gitea-ci-job-image.sh
-
-      - name: Install npm dependencies
-        run: bash scripts/ci-npm-ci-with-retry.sh
-
-      - name: Run AI game creator shell web gates
-        run: npm run check:native-shells:agc-web

.gitignore

@@ -40,14 +40,6 @@ temp*build*/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-path/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-resources/
 /apps/ai-game-creator-shell/src-tauri/resources/codex/win-x64/codex-package.json
-/apps/ai-game-creator-shell/src-tauri/resources/plugins/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/bin/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-path/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-resources/
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/codex-package.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/manifest.json
-/apps/ai-game-creator-shell/src-tauri/resources/codex/mac-native/NOTICE.md
-/plugins/agc-cocos-editor/native/payload/
 /apps/ai-game-creator-shell/logs/
 /apps/ai-game-creator-shell/.llm-drafts/
 /apps/ai-game-creator-shell/game-creator.config.local.json

.husky/pre-commit

@@ -1,4 +1 @@
-# Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
-# 子进程（npm、lint-staged、测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
-unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run format:staged

.husky/pre-push

@@ -1,4 +1 @@
-# Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
-# 钩子链（npm → check:repository-ci → 测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
-unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run check:pre-push-master -- "$@"

.prettierrc.json

@@ -1,14 +1,5 @@
 {
   "singleQuote": true,
   "semi": true,
-  "trailingComma": "all",
-  "overrides": [
-    {
-      "files": "packages/shared/src/contracts/generated/**/*.ts",
-      "options": {
-        "printWidth": 1000,
-        "singleQuote": false
-      }
-    }
-  ]
+  "trailingComma": "all"
 }

AGENTS.md

@@ -16,7 +16,6 @@
   3. [`docs/project-memory/README.md`](docs/project-memory/README.md)、[`project-overview.md`](docs/project-memory/shared-memory/project-overview.md)、[`team-conventions.md`](docs/project-memory/shared-memory/team-conventions.md)、[`development-workflow.md`](docs/project-memory/shared-memory/development-workflow.md)。
   4. 与任务相关的 [`decision-log.md`](docs/project-memory/shared-memory/decision-log.md)、[`pitfalls.md`](docs/project-memory/shared-memory/pitfalls.md)、[`docs/README.md`](docs/README.md) 和当前专题文档。
 - 落地工程修改前，先确认是否已有足够具体的 PRD、技术方案或当前融合文档；文档仍存在编码级歧义时，先补文档再编码。
-- 跨模块功能、公开 API/DTO、SpacetimeDB schema、AGC/Runtime 或复杂 UI 状态链路必须按 [`docs/【协作规范】规范驱动开发工作流-2026-09-12.md`](docs/【协作规范】规范驱动开发工作流-2026-09-12.md) 先完成主规范、里程碑规范和单里程碑实现计划；评审与验收门禁未通过前不得进入下一里程碑。局部修复、文案和无行为变化重构继续走轻量流程。
 - 本仓库的本地 RAG 位于 [`scripts/rag/`](scripts/rag/)；RAG 只作为候选上下文，不替代打开源文件核对。默认不安装 RAG 运行时依赖，需要启用时必须先询问用户，并只安装到 gitignored 的 `.rag/runtime/`。
 
 ## 绝对约束

CONTEXT.md

@@ -172,20 +172,6 @@ _Avoid_: 多步骤向导、完整规则编辑器、拖拽编辑器
 Bark Battle 平台作品闭环按契约与领域规则、后端存储/API、最小前端纵切、投影体验、收口验证的顺序推进。
 _Avoid_: mock 先行堆积、前后端各自发散、先做排行榜 UI
 
-## 项目开发对话（DirectProject）
-
-**项目对话历史**:
-AGC 本地项目内 Codex 原始对话条目的持久集合，是聊天展示、工具卡片和线程恢复注入的唯一持久事实源。
-_Avoid_: 会话缓存、展示态历史、按 UI 需要另存的对话副本
-
-**运行态事件**:
-Thread Manager 向订阅者推送的当前回合原始事件流，只服务运行期间与短期断线恢复，不替代项目对话历史。
-_Avoid_: 进度通知、快照轮询、第二套历史
-
-**聊天投影**:
-把项目对话历史条目与运行态事件转换成消息气泡和工具卡片的读取期转换；不持久化，也不构成事实源。
-_Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
-
 ## Relationships
 
 - 一个 **汪汪声浪大作战** 单局包含多个 **有效声浪触发**。
@@ -220,5 +206,3 @@ _Avoid_: 投影缓存文件、已脱敏卡片库、第二套 reducer
 - “入口闭环”曾可能只指内部 demo 或单个详情 CTA；已解析为 **正式作品入口闭环**，不新增独立专区或活动页。
 - “创作编辑”曾可能指多步骤向导或完整编辑器；已解析为 **轻配置编辑流程**，使用单页表单 + 预览卡片完成保存草稿、发布和发布后跳转作品详情。
 - “实施顺序”曾可能按 UI 或功能并行发散；已解析为契约/领域规则先行，再做后端存储/API，随后打通最小前端纵切，最后补投影体验与收口验证。
-- “回合进度事件”曾同时指 Direct turn update 与 Thread Manager 运行态事件；已解析为 AGC 项目开发对话只保留 **运行态事件**。
-- “哪些消息可显示”曾可能由后端历史分页判断；已解析为可见性判断属于 **聊天投影**，后端只按原始条目分页，前端负责跳过不可显示条目并推进分页锚点。

apps/admin-web/src/api/adminApiClient.ts

@@ -26,8 +26,6 @@ import type {
   AdminErrorReportDetail,
   AdminErrorReportEntry,
   AdminErrorReportListResponse,
-  AdminExternalApiKeyListQuery,
-  AdminExternalApiKeyListResponse,
   AdminFeatureGateConfigResponse,
   AdminLoginResponse,
   AdminMeResponse,
@@ -251,16 +249,6 @@ export function getAdminDatabaseTableRows(
   );
 }
 
-export function getAdminExternalApiKeys(
-  token: string,
-  query: AdminExternalApiKeyListQuery = {},
-) {
-  return request<AdminExternalApiKeyListResponse>(
-    `/admin/api/external-api-keys${buildExternalApiKeyQuery(query)}`,
-    { token },
-  );
-}
-
 export function debugAdminHttp(token: string, payload: AdminDebugHttpRequest) {
   return request<AdminDebugHttpResponse>('/admin/api/debug/http', {
     method: 'POST',
@@ -940,28 +928,6 @@ function buildDatabaseTableRowsQuery(query: AdminDatabaseTableRowsQuery) {
   return queryString ? `?${queryString}` : '';
 }
 
-function buildExternalApiKeyQuery(query: AdminExternalApiKeyListQuery) {
-  const params = new URLSearchParams();
-  appendQueryParam(params, 'ownerUserId', query.ownerUserId);
-  appendQueryParam(params, 'publicUserCode', query.publicUserCode);
-  appendQueryParam(params, 'keyId', query.keyId);
-  appendQueryParam(params, 'name', query.name);
-  appendQueryParam(params, 'keyPrefix', query.keyPrefix);
-  appendQueryParam(params, 'createdAfter', query.createdAfter);
-  appendQueryParam(params, 'createdBefore', query.createdBefore);
-  appendQueryParam(params, 'status', query.status);
-  if (typeof query.limit === 'number' && Number.isFinite(query.limit)) {
-    params.set('limit', String(Math.floor(query.limit)));
-  }
-  if (typeof query.offset === 'number' && Number.isFinite(query.offset)) {
-    params.set('offset', String(Math.floor(query.offset)));
-  }
-  appendQueryParam(params, 'sortColumn', query.sortColumn);
-  appendQueryParam(params, 'sortDirection', query.sortDirection);
-  const queryString = params.toString();
-  return queryString ? `?${queryString}` : '';
-}
-
 function buildEditorAssetListQuery(query: AdminEditorAssetListQuery) {
   const params = new URLSearchParams();
   appendQueryParam(params, 'cursor', query.cursor);
@@ -1072,19 +1038,3 @@ function buildAdminApiError(
 function isRecord(value: unknown): value is Record<string, unknown> {
   return typeof value === 'object' && value !== null && !Array.isArray(value);
 }
-export function getAgcModelCatalog(token: string) {
-  return request<import('./adminApiTypes').AdminAgcModelCatalog>(
-    '/admin/api/agc-models',
-    { token },
-  );
-}
-
-export function saveAgcModelCatalog(
-  token: string,
-  body: import('./adminApiTypes').AdminAgcModelCatalog,
-) {
-  return request<import('./adminApiTypes').AdminAgcModelCatalog>(
-    '/admin/api/agc-models',
-    { token, method: 'PUT', body },
-  );
-}

apps/admin-web/src/api/adminApiTypes.ts

@@ -275,51 +275,6 @@ export interface AdminDatabaseTableStatPayload {
   errorMessage: string | null;
 }
 
-export interface AdminExternalApiKeyListQuery {
-  ownerUserId?: string;
-  publicUserCode?: string;
-  keyId?: string;
-  name?: string;
-  keyPrefix?: string;
-  createdAfter?: string;
-  createdBefore?: string;
-  status?: 'active' | 'revoked';
-  limit?: number;
-  offset?: number;
-  sortColumn?:
-    | 'keyId'
-    | 'ownerUserId'
-    | 'name'
-    | 'keyPrefix'
-    | 'createdAt'
-    | 'lastUsedAt'
-    | 'updatedAt';
-  sortDirection?: 'asc' | 'desc';
-}
-
-export interface AdminExternalApiKeyPayload {
-  keyId: string;
-  ownerUserId: string;
-  name: string;
-  keyPrefix: string;
-  scopes: string[];
-  createdAt: string;
-  lastUsedAt: string | null;
-  revokedAt: string | null;
-  updatedAt: string;
-  status: 'active' | 'revoked';
-}
-
-export interface AdminExternalApiKeyListResponse {
-  keys: AdminExternalApiKeyPayload[];
-  total: number;
-  limit: number;
-  offset: number;
-  scannedCount: number;
-  scanLimit: number;
-  scanLimitReached: boolean;
-}
-
 export interface AdminDebugHeaderInput {
   name: string;
   value: string;
@@ -998,15 +953,3 @@ export interface AdminRechargeRefundActionResponse {
 export interface AdminWalletRestrictionResponse {
   wallet: AdminProfileWalletPayload;
 }
-export interface AdminAgcModel {
-  id: string;
-  alias: string;
-  modelId: string;
-  enabled: boolean;
-}
-
-export interface AdminAgcModelCatalog {
-  revision: number;
-  defaultModelId: string;
-  models: AdminAgcModel[];
-}

apps/admin-web/src/app/AdminApp.tsx

@@ -18,7 +18,6 @@ import {
   setStoredAdminToken,
 } from '../auth/adminAuthStore';
 import { AdminAccountsPage } from '../pages/AdminAccountsPage';
-import { AdminAgcModelsPage } from '../pages/AdminAgcModelsPage';
 import { AdminDashboardPage } from '../pages/AdminDashboardPage';
 import { AdminDatabaseTablesPage } from '../pages/AdminDatabaseTablesPage';
 import { AdminDebugHttpPage } from '../pages/AdminDebugHttpPage';
@@ -290,9 +289,6 @@ export function AdminApp() {
           onUnauthorized={handleUnauthorized}
         />
       ) : null}
-      {activeRouteId === 'agc-models' ? (
-        <AdminAgcModelsPage token={token} onUnauthorized={handleUnauthorized} />
-      ) : null}
       {activeRouteId === 'editor-showcase' ? (
         <AdminEditorShowcaseReviewPage
           token={token}

apps/admin-web/src/app/AdminShell.tsx

@@ -50,7 +50,6 @@ const routeIcons = {
   'editor-showcase': Star,
   'editor-assets': Images,
   accounts: Users,
-  'agc-models': ListChecks,
 } satisfies Record<AdminRouteId, typeof LayoutDashboard>;
 
 export function AdminShell({

apps/admin-web/src/app/adminRoutes.ts

@@ -16,13 +16,9 @@ export type AdminRouteId =
   | 'editor-generation-pricing'
   | 'editor-showcase'
   | 'editor-assets'
-  | 'agc-models'
   | 'accounts';
 
-export type AdminTabPermission = Exclude<
-  AdminRouteId,
-  'accounts' | 'agc-models'
->;
+export type AdminTabPermission = Exclude<AdminRouteId, 'accounts'>;
 
 /** 后台导航项定义，hash 是浏览器地址栏和移动底栏共用入口。 */
 export interface AdminRouteDefinition {
@@ -51,7 +47,6 @@ export const adminRoutes: AdminRouteDefinition[] = [
     label: '模型定价',
     hash: '#editor-generation-pricing',
   },
-  { id: 'agc-models', label: 'AGC 模型', hash: '#agc-models', ownerOnly: true },
   { id: 'editor-showcase', label: '精选审核', hash: '#editor-showcase' },
   { id: 'editor-assets', label: '素材查询', hash: '#editor-assets' },
   { id: 'accounts', label: '账号管理', hash: '#accounts', ownerOnly: true },

apps/admin-web/src/pages/AdminAgcModelsPage.test.tsx

@@ -1,56 +0,0 @@
-// @vitest-environment jsdom
-import {
-  cleanup,
-  fireEvent,
-  render,
-  screen,
-  waitFor,
-} from '@testing-library/react';
-import { afterEach, expect, test, vi } from 'vitest';
-
-import { getAgcModelCatalog, saveAgcModelCatalog } from '../api/adminApiClient';
-import { AdminAgcModelsPage } from './AdminAgcModelsPage';
-
-vi.mock('../api/adminApiClient', () => ({
-  getAgcModelCatalog: vi.fn(),
-  saveAgcModelCatalog: vi.fn(),
-  isAdminApiError: vi.fn(() => false),
-  formatAdminApiError: vi.fn(() => '保存失败'),
-}));
-vi.mock('../components/useAdminWriteConfirm', () => ({
-  useAdminWriteConfirm: () => ({
-    confirmWrite: async () => true,
-    confirmDialog: null,
-  }),
-}));
-afterEach(cleanup);
-
-test('edits alias and upstream model without changing the stable identifier or revision', async () => {
-  const catalog = {
-    revision: 3,
-    defaultModelId: 'quality',
-    models: [
-      { id: 'quality', alias: '高质量', modelId: 'gpt-6-astra', enabled: true },
-    ],
-  };
-  vi.mocked(getAgcModelCatalog).mockResolvedValue(catalog);
-  vi.mocked(saveAgcModelCatalog).mockImplementation(async (_, input) => ({
-    ...input,
-    revision: 4,
-  }));
-  render(<AdminAgcModelsPage token="test" onUnauthorized={vi.fn()} />);
-  await screen.findByDisplayValue('gpt-6-astra');
-  fireEvent.change(screen.getByLabelText('模型 1 别名'), {
-    target: { value: '精细创作' },
-  });
-  fireEvent.click(screen.getByRole('button', { name: '保存' }));
-  await waitFor(() =>
-    expect(saveAgcModelCatalog).toHaveBeenCalledWith('test', {
-      ...catalog,
-      models: [{ ...catalog.models[0], alias: '精细创作' }],
-    }),
-  );
-  await waitFor(() => {
-    expect(screen.getAllByText('已保存').length).toBeGreaterThanOrEqual(2);
-  });
-});

apps/admin-web/src/pages/AdminAgcModelsPage.tsx

@@ -1,255 +0,0 @@
-import { CircleHelp, Plus, RefreshCcw, Save, Trash2 } from 'lucide-react';
-import { useEffect, useState } from 'react';
-
-import { getAgcModelCatalog, saveAgcModelCatalog } from '../api/adminApiClient';
-import type { AdminAgcModel, AdminAgcModelCatalog } from '../api/adminApiTypes';
-import { useAdminWriteConfirm } from '../components/useAdminWriteConfirm';
-import { handlePageError } from './pageUtils';
-
-export function AdminAgcModelsPage({
-  token,
-  onUnauthorized,
-}: {
-  token: string;
-  onUnauthorized: (message?: string) => void;
-}) {
-  const [catalog, setCatalog] = useState<AdminAgcModelCatalog | null>(null);
-  const [busy, setBusy] = useState(false);
-  const [error, setError] = useState('');
-  const [saved, setSaved] = useState(false);
-  const { confirmWrite, confirmDialog } = useAdminWriteConfirm();
-
-  async function refresh() {
-    if (!token) return;
-    setBusy(true);
-    setError('');
-    setSaved(false);
-    try {
-      setCatalog(await getAgcModelCatalog(token));
-    } catch (error) {
-      handlePageError(error, onUnauthorized, setError);
-    } finally {
-      setBusy(false);
-    }
-  }
-
-  useEffect(() => {
-    void refresh();
-    // eslint-disable-next-line react-hooks/exhaustive-deps
-  }, [token]);
-
-  function update(id: string, patch: Partial<AdminAgcModel>) {
-    setSaved(false);
-    setCatalog(
-      (current) =>
-        current && {
-          ...current,
-          models: current.models.map((model) =>
-            model.id === id ? { ...model, ...patch } : model,
-          ),
-        },
-    );
-  }
-
-  async function save() {
-    if (!catalog || busy) return;
-    if (
-      !(await confirmWrite({
-        action: '保存 AGC 模型目录',
-        target: `${catalog.models.length} 个模型`,
-      }))
-    )
-      return;
-    setBusy(true);
-    setError('');
-    setSaved(false);
-    try {
-      setCatalog(await saveAgcModelCatalog(token, catalog));
-      setSaved(true);
-    } catch (error) {
-      handlePageError(error, onUnauthorized, setError);
-    } finally {
-      setBusy(false);
-    }
-  }
-
-  return (
-    <section className="admin-page admin-page-wide admin-agc-models">
-      <div className="admin-page-heading">
-        <div>
-          <h2>AGC 模型</h2>
-          <p>管理客户端可用模型与用户看到的名称</p>
-        </div>
-        <span className="admin-agc-models-revision">
-          版本 v{catalog?.revision ?? '-'}
-        </span>
-      </div>
-      <div className="admin-agc-models-summary">
-        <div>
-          <span>已启用</span>
-          <strong>
-            {catalog?.models.filter((model) => model.enabled).length ?? 0}
-          </strong>
-        </div>
-        <div>
-          <span>默认模型</span>
-          <strong>
-            {catalog
-              ? (catalog.models.find(
-                  (model) => model.id === catalog.defaultModelId,
-                )?.alias ?? '未设置')
-              : '未设置'}
-          </strong>
-        </div>
-        <div>
-          <span>发布状态</span>
-          <strong>{busy ? '处理中' : saved ? '已保存' : '待修改'}</strong>
-        </div>
-      </div>
-      <section className="admin-panel admin-agc-models-panel">
-        <div className="admin-panel-heading">
-          <div>
-            <h3>模型目录</h3>
-            <span>客户端仅显示别名，实际模型名仅在这里维护</span>
-          </div>
-          <CircleHelp size={17} aria-label="模型目录帮助" />
-        </div>
-        <div className="admin-agc-models-toolbar">
-          <button
-            type="button"
-            title="重新读取"
-            aria-label="重新读取模型"
-            disabled={busy}
-            onClick={() => void refresh()}
-          >
-            <RefreshCcw size={16} />
-          </button>
-          <button
-            type="button"
-            title="添加模型"
-            aria-label="添加模型"
-            disabled={busy || !catalog || catalog.models.length >= 32}
-            onClick={() => {
-              setSaved(false);
-              setCatalog(
-                (current) =>
-                  current && {
-                    ...current,
-                    models: [
-                      ...current.models,
-                      {
-                        id: crypto.randomUUID(),
-                        alias: '',
-                        modelId: '',
-                        enabled: true,
-                      },
-                    ],
-                  },
-              );
-            }}
-          >
-            <Plus size={16} />
-          </button>
-          <button
-            type="button"
-            disabled={busy || !catalog}
-            onClick={() => void save()}
-          >
-            <Save size={16} />
-            保存
-          </button>
-        </div>
-        {error ? <p role="alert">{error}</p> : null}
-        {saved ? <p role="status">已保存</p> : null}
-        {busy ? <p role="status">正在处理</p> : null}
-        <div className="admin-table-wrap admin-agc-models-table">
-          <table className="admin-table admin-agc-models-table-grid">
-            <thead>
-              <tr>
-                <th>别名</th>
-                <th>实际模型名</th>
-                <th>启用</th>
-                <th>默认</th>
-                <th>操作</th>
-              </tr>
-            </thead>
-            <tbody>
-              {catalog?.models.map((model, index) => (
-                <tr key={model.id}>
-                  <td>
-                    <input
-                      aria-label={`模型 ${index + 1} 别名`}
-                      maxLength={40}
-                      required
-                      value={model.alias}
-                      disabled={busy}
-                      onChange={(e) =>
-                        update(model.id, { alias: e.target.value })
-                      }
-                    />
-                  </td>
-                  <td>
-                    <input
-                      aria-label={`模型 ${index + 1} 实际模型名`}
-                      maxLength={200}
-                      required
-                      value={model.modelId}
-                      disabled={busy}
-                      onChange={(e) =>
-                        update(model.id, { modelId: e.target.value })
-                      }
-                    />
-                  </td>
-                  <td>
-                    <input
-                      aria-label={`模型 ${index + 1} 启用`}
-                      type="checkbox"
-                      checked={model.enabled}
-                      disabled={busy || model.id === catalog.defaultModelId}
-                      onChange={(e) =>
-                        update(model.id, { enabled: e.target.checked })
-                      }
-                    />
-                  </td>
-                  <td>
-                    <input
-                      aria-label={`模型 ${index + 1} 默认`}
-                      name="agc-default-model"
-                      type="radio"
-                      checked={model.id === catalog.defaultModelId}
-                      disabled={busy || !model.enabled}
-                      onChange={() => {
-                        setSaved(false);
-                        setCatalog({ ...catalog, defaultModelId: model.id });
-                      }}
-                    />
-                  </td>
-                  <td>
-                    <button
-                      type="button"
-                      title="删除模型"
-                      aria-label={`删除模型 ${index + 1}`}
-                      disabled={busy || model.id === catalog.defaultModelId}
-                      onClick={() => {
-                        setSaved(false);
-                        setCatalog({
-                          ...catalog,
-                          models: catalog.models.filter(
-                            (candidate) => candidate.id !== model.id,
-                          ),
-                        });
-                      }}
-                    >
-                      <Trash2 size={16} />
-                    </button>
-                  </td>
-                </tr>
-              ))}
-            </tbody>
-          </table>
-        </div>
-      </section>
-      {confirmDialog}
-    </section>
-  );
-}

apps/admin-web/src/pages/AdminDatabaseTablesPage.test.tsx

@@ -7,7 +7,6 @@ import { beforeEach, expect, test, vi } from 'vitest';
 import {
   getAdminDatabaseTableRows,
   getAdminDatabaseTables,
-  getAdminExternalApiKeys,
 } from '../api/adminApiClient';
 import type { AdminDatabaseTableRowsResponse } from '../api/adminApiTypes';
 import {
@@ -21,7 +20,6 @@ vi.mock('../api/adminApiClient', () => ({
   ),
   getAdminDatabaseTableRows: vi.fn(),
   getAdminDatabaseTables: vi.fn(),
-  getAdminExternalApiKeys: vi.fn(),
   isAdminApiError: vi.fn(() => false),
 }));
 
@@ -76,7 +74,6 @@ const referralRows = [
 beforeEach(() => {
   vi.clearAllMocks();
   window.location.hash = '#tables?table=profile_referral_relation';
-  vi.mocked(getAdminExternalApiKeys).mockReset();
   vi.mocked(getAdminDatabaseTables).mockResolvedValue({
     fetchErrors: [],
     tables: ['profile_referral_relation'],
@@ -95,55 +92,6 @@ beforeEach(() => {
   });
 });
 
-test('external_api_key 使用专用安全查询且详情不展示原始 JSON', async () => {
-  const user = userEvent.setup();
-  window.location.hash = '#tables?table=external_api_key';
-  vi.mocked(getAdminDatabaseTables).mockResolvedValue({
-    fetchErrors: [],
-    tables: ['external_api_key'],
-  });
-  vi.mocked(getAdminExternalApiKeys).mockResolvedValue({
-    keys: [
-      {
-        keyId: 'external-api-key-1',
-        ownerUserId: 'user-1',
-        name: 'agc_auto_generate',
-        keyPrefix: 'tnr_sk_fixture',
-        scopes: ['llm:responses'],
-        createdAt: '2026-08-29T00:00:00Z',
-        lastUsedAt: null,
-        revokedAt: null,
-        updatedAt: '2026-08-29T00:00:00Z',
-        status: 'active',
-      },
-    ],
-    total: 1,
-    limit: 100,
-    offset: 0,
-    scannedCount: 1,
-    scanLimit: 5000,
-    scanLimitReached: false,
-  });
-
-  render(
-    <AdminDatabaseTablesPage token="admin-token" onUnauthorized={vi.fn()} />,
-  );
-
-  await user.type(screen.getByPlaceholderText('精确 ownerUserId'), 'user-1');
-  await user.click(screen.getByRole('button', { name: '安全查询' }));
-  await waitFor(() => {
-    expect(getAdminExternalApiKeys).toHaveBeenLastCalledWith(
-      'admin-token',
-      expect.objectContaining({ ownerUserId: 'user-1' }),
-    );
-  });
-  expect(await screen.findByText('tnr_sk_fixture')).toBeTruthy();
-  await user.click(screen.getByRole('button', { name: '详情' }));
-  expect(screen.getByRole('dialog')).toBeTruthy();
-  expect(screen.queryByText('复制 JSON')).toBeNull();
-  expect(screen.queryByText('key_hash')).toBeNull();
-});
-
 test('后台表查询页通过页面级固定栏翻页并提示扫描结果可能不完整', async () => {
   const user = userEvent.setup();
   vi.mocked(getAdminDatabaseTableRows).mockResolvedValue({