收敛 content→可读文本为单一口径并强制传 manifest（review 第 2、3 条）

- directCodexContentToPromptText 的 assets 改为必填，去掉 = [] 默认值：漏传素材清单从运行期文案退化变回编译期错误 - queuedChatTurnLabel 的 assets 与 ComposerTurnQueue 的 assets 属性同样必填，队列 chip 与消息正文共用同一个派生（chip 只多做压单行与限长） - 断言改为显式传 [] 或 manifest：resourceReferences、chat-composer 用例按新签名收敛 - 更新 pitfalls 条目与 decision-log（canonical content 有效性只判整条 content、投影逐字透传、可读文本单一口径必填 assets）
放宽 DirectProject content 校验为「整条判定」并按逐字投影（review 第 1 条，① 口径）
2026-09-17 14:02:21 +08:00 · 2026-09-17 14:01:41 +08:00 · 2026-09-16 21:26:53 +08:00 · 2026-09-16 21:25:38 +08:00 · 2026-09-16 21:24:41 +08:00 · 2026-09-16 18:51:08 +08:00
387 changed files with 13271 additions and 26852 deletions
@@ -32,7 +32,7 @@ Prefer `scripts/genarrative_external_api.py` for runnable REST calls. It uses on
 - Use stable references such as `objectKey`, project resource ID, or asset ID where each operation permits them. Image edit/redraw is stricter: `sourceReferenceId` accepts only a registered project resource ID or asset ID; upload confirmation alone is not enough. Use `/assets/read-url` only for temporary preview/download access.
 - Preserve both warning channels after completion. A general `warning` can coexist with `sliceWarning`; do not discard either.
 - Do not invent missing derivatives. A source-preserved warning means the main source remains usable but requested post-processing failed. A slice warning means the complete transparent sheet is usable but individual slices are absent.
- Icon spritesheet generation requires an explicit `sliceMode` and has no default. Use `sliceMode="grid"` with the `gridX` and `gridY` the requirement actually names (1-32 each) only for equal grid cells or fixed slots; use `sliceMode="connected-components"` for free-form sheets or an open number of subjects, and constrain the count with `sliceCount` instead of inventing grid dimensions. `connected-components` must not carry `gridX`/`gridY`; an omitted, contradictory, or misapplied declaration returns 400 before billing.
+- Icon spritesheet generation accepts `sliceMode="connected-components"` (default alpha-connectivity detection) or `sliceMode="grid"`. Grid mode requires `gridX` and `gridY` (1-32); use `sliceCount` only to constrain connected-component output.
 - For successful `style="pixelArt"`, treat completed-result and nested resource/asset dimensions as the final logical-grid PNG dimensions. They may differ from `size`, `imageSize`, the provider image, and `canvasCompletion.placeholder`; do not rescale or reject the artifact to match those inputs.
 - Keep generated artifacts in the canvas and asset library together. Character animation accepts `assetFolderId` and `assetLabel`; its completed result directly returns the final `assetKind="character-animation"` resource and asset with formal sequence fields. Do not create a duplicate first-frame record.
@@ -94,7 +94,7 @@ For image edit/redraw, confirming an upload is not sufficient: create a project
 The icon-spritesheet primary `referenceId` is intentionally stricter than ordinary image references: it accepts only a current-owner project resource ID or asset ID whose authoritative `assetKind` is `icon-spec`. It does not accept an `objectKey`, URL, Data URL, or Blob URL.
-`sliceMode` is required and has no default, so every request must state it. Use `"connected-components"` to detect independent opaque regions by alpha connectivity, or `"grid"` with positive `gridX` and `gridY` values (maximum 32 each) only when the requirement names equal grid cells or fixed slots; the dimensions must come from that requirement. `connected-components` must not carry `gridX`/`gridY`, and `sliceCount` constrains the connected-component result instead of expressing a grid. Omitting `sliceMode`, or contradicting the declared mode with grid dimensions, returns 400 before pricing, enqueueing, or any provider call.
+`sliceMode` controls atlas splitting. Use `"connected-components"` (default) to detect independent opaque regions by alpha connectivity, or `"grid"` with positive `gridX` and `gridY` values (maximum 32 each). `sliceCount` optionally constrains the connected-component result.
 ## Common Values
@@ -79,9 +79,9 @@ Keep the existing autonomous-build task graph. Do not add a parallel task system
 1. `art-director` generates `assets/art-spec.png` with image generation, `kind: "spec"`, then registers it as `assetKind: "icon-spec"`. This image is the authoritative visual spec; `generationInputs.artSpec` is supporting structured context.
 2. `design-foundation` generates `assets/ui-prototype.png` with `kind: "ui-design"`, using the registered art-spec resource ID in `referenceImageSrcs`.
-3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. `sliceMode` is required and has no default: send `sliceMode: "grid"` with `gridX`/`gridY` only when the requirement itself fixes the slots or names the column/row count, and otherwise send `sliceMode: "connected-components"` (with `sliceCount` when a subject count must be constrained); never invent a grid to express "kinds of assets", and never send `gridX`/`gridY` with `connected-components`.
+3. `art-asset-plan` generates transparent `assets/art-spritesheet.png` through icon spritesheet generation, using the same registered art-spec resource ID as `referenceId` plus concrete `iconDescriptions`. For a fixed four-category game contract it may send `sliceMode: "grid"`; for free-form assets use `sliceMode: "connected-components"` (the default).
-For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. When the requirement fixes grid slots, require the response `sliceMode` to match the declared `grid` request and exactly `gridX × gridY` slices before registering the local runtime sheet; a connected-components request is instead judged by its own `sliceCount` or by the requirement, and both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
+For a playable Canvas game, do not stop at generation. Make `code-prototype` depend on `art-asset-plan` and consume the persisted `iconImageSrcs` slices for core players, blocks or targets, scene obstacles, and feedback. When using the fixed four-category contract, require response `sliceMode: "grid"` and exactly four slices before registering the local runtime sheet; both fewer and extra components fail closed. Treat `art-spec.png` as reference-only. A full-sheet `<img>`, CSS background, path-only mention, guessed equal-grid crop, or code-drawn replacement for core entities is not runtime asset use. If slicing produces `sliceWarning`, keep the complete transparent sheet as a valid editor artifact, but fail the playable game asset gate until real slice files or verified atlas coordinates exist; never invent coordinates or replace the icon-spritesheet route with ordinary image generation.
 Never use `assets/ui-prototype.png` as the spritesheet visual-spec reference. UI extraction is outside this canonical DAG.
@@ -617,7 +617,6 @@ class GenarrativeExternalClient:
        self,
        reference_id: str,
        icon_descriptions: list[str],
        slice_mode: str,
        **fields: Any,
    ) -> Any:
        reference_id = normalize_optional_text(reference_id)
@@ -626,20 +625,6 @@ class GenarrativeExternalClient:
        descriptions = [item.strip() for item in icon_descriptions if item.strip()]
        if not descriptions:
            raise GenarrativeApiError("icon_descriptions must contain at least one non-empty item")
        slice_mode = normalize_optional_text(slice_mode)
        if slice_mode not in ("connected-components", "grid"):
            raise GenarrativeApiError(
                "slice_mode must be declared explicitly as 'connected-components' or 'grid'; the API has no default"
            )
        grid_x = fields.get("gridX")
        grid_y = fields.get("gridY")
        if slice_mode == "grid":
            if grid_x is None or grid_y is None:
                raise GenarrativeApiError("slice_mode='grid' requires both gridX and gridY")
        elif grid_x is not None or grid_y is not None:
            raise GenarrativeApiError(
                "slice_mode='connected-components' must not carry gridX/gridY"
            )
        label = fields.get("assetLabel", "图标图集")
        self._apply_canvas_session_fields(fields, label, 1024, 1024)
        fields.setdefault("screenColor", "auto")
@@ -650,7 +635,6 @@ class GenarrativeExternalClient:
                **fields,
                "referenceId": reference_id,
                "iconDescriptions": descriptions,
                "sliceMode": slice_mode,
            },
            idempotency_key=idempotency_key,
        )
@@ -895,9 +879,9 @@ def _self_test() -> None:
    client.generate_icon_spritesheet(
        "editor-resource-spec",
        ["蛇头向上", "蛇身直线", "转角", "尾部", "四类食物"],
        "connected-components",
        canvasSession=session,
        assetLabel="贪吃蛇透明图集",
        sliceMode="connected-components",
        referenceId="must-not-override-explicit-reference",
        iconDescriptions=["不得覆盖显式图标描述"],
    )
@@ -158,15 +158,6 @@ ALIYUN_OSS_POST_EXPIRE_SECONDS="600"
 ALIYUN_OSS_POST_MAX_SIZE_BYTES="20971520"
 ALIYUN_OSS_SUCCESS_ACTION_STATUS="200"
 # AGC 项目定时快照上传目标。对象只落在服务端私有前缀
 # `agc/project-snapshots/v1/{user}/{project}/` 下，客户端直传票据不覆盖该前缀。
 # bucket 与凭据可以与资源 bucket 分离；凭据未设置时回退使用 ALIYUN_OSS_ACCESS_KEY_*，
 # 但 bucket / endpoint 默认指向 AGC 发行 bucket，需要该凭据具备目标 bucket 的 PutObject 权限。
 GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_BUCKET="agc-dev"
 GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ENDPOINT="oss-rg-china-mainland.aliyuncs.com"
 GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_ID=""
 GENARRATIVE_AGC_PROJECT_SNAPSHOT_OSS_ACCESS_KEY_SECRET=""
 # BgFilter 受限资源 worker。父 api-server / external-generation-worker 与唯一的
 # `GENARRATIVE_PROCESS_ROLE=bgfilter-worker` 进程必须使用同一个内部 Token。
 # `npm run dev` 与 `npm run dev:api-server` 都会自动带起并验活唯一 worker，不要再开第二个终端重复启动。
@@ -7,10 +7,6 @@ on:
  pull_request:
  workflow_dispatch:
 concurrency:
  group: project-ci-${{ github.event.pull_request.number || github.ref }}
  cancel-in-progress: true
 permissions:
  contents: read
@@ -1,4 +1 @@
 # Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
 # 子进程（npm、lint-staged、测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
 unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run format:staged
@@ -1,4 +1 @@
 # Git 在链接工作树里执行 Hook 时会注入 GIT_DIR 等仓库定位变量，优先级高于 cwd；
 # 钩子链（npm → check:repository-ci → 测试夹具）会继承它们并写到真实仓库，故在入口统一清除。
 unset GIT_DIR GIT_WORK_TREE GIT_INDEX_FILE GIT_COMMON_DIR GIT_PREFIX GIT_CONFIG_PARAMETERS GIT_CEILING_DIRECTORIES
 npm run check:pre-push-master -- "$@"
@@ -38,7 +38,6 @@ vi.mock('../api/adminApiClient', () => ({
 interface MockIntersectionObserverController {
  enter: (target: Element) => void;
  enterAll: (targets: Element[]) => void;
  isObserved: (target: Element) => boolean;
 }
@@ -107,25 +106,6 @@ function installIntersectionObserverMock(): MockIntersectionObserverController {
        );
      });
    },
    enterAll(targets) {
      act(() => {
        for (const target of targets) {
          const record = observed.get(target);
          if (!record) {
            throw new Error('目标缩略图尚未进入 IntersectionObserver');
          }
          record.callback(
            [
              {
                isIntersecting: true,
                target,
              } as IntersectionObserverEntry,
            ],
            record.observer,
          );
        }
      });
    },
    isObserved(target) {
      return observed.has(target);
    },
@@ -773,10 +753,10 @@ test('后台素材查询为大量同时可见的缩略图持续错峰换签', as
  const thumbnails = entries.map((entry) =>
    thumbnailElementForLabel(entry.label),
  );
-  for (const thumbnail of thumbnails) {
+  thumbnails.forEach((thumbnail) => {
    expect(observer.isObserved(thumbnail)).toBe(true);
-  }
+    observer.enter(thumbnail);
-  observer.enterAll(thumbnails);
+  });
  await act(async () => {
    await Promise.resolve();
  });
@@ -796,7 +776,7 @@ test('后台素材查询为大量同时可见的缩略图持续错峰换签', as
    await vi.advanceTimersByTimeAsync(200);
  });
  expect(getAdminAssetReadUrl).toHaveBeenCalledTimes(105);
-}, 10_000);
+});
 test('后台素材查询读取更多后为新进入可视区域的素材换签', async () => {
  const observer = installIntersectionObserverMock();
@@ -2,8 +2,6 @@
  "schemaVersion": "game-creator-config.v2",
  "agentMode": "codex_app_server",
  "llm": {
    "customEnabled": false,
    "visibleModels": [],
    "apiKey": "",
    "baseUrl": "https://dev.genarrative.world/gpt/v1",
    "model": "gpt-6-astra",
@@ -15,7 +13,7 @@
    "autoCompactTokenLimit": 64000,
    "toolOutputTokenLimit": 12000,
    "requestTimeoutMs": 180000,
-    "maxRetries": 10,
+    "maxRetries": 2,
    "retryBackoffMs": 500
  },
  "agentLlm": {}
@@ -1,7 +1,7 @@
 {
  "name": "@genarrative/ai-game-creator-shell",
  "private": true,
-  "version": "0.1.47",
+  "version": "0.1.29",
  "type": "module",
  "scripts": {
    "dev": "node scripts/start-tauri-dev.mjs",
@@ -47,7 +47,6 @@
    "@tauri-apps/plugin-dialog": "^2.7.2",
    "@tauri-apps/plugin-http": "^2.5.9",
    "@tauri-apps/plugin-opener": "~2",
    "@tauri-apps/plugin-updater": "2.11.0",
    "@vitejs/plugin-react": "^5.0.4",
    "focus-trap-react": "^12.0.3",
    "lexical": "^0.47.0",
@@ -58,10 +57,8 @@
    "react-colorful": "^5.8.0",
    "react-dom": "^19.0.0",
    "react-markdown": "^10.1.0",
    "react-window": "^1.8.11",
    "rehype-highlight": "^7.0.2",
    "remark-gfm": "^4.0.1",
    "three": "^0.184.0",
    "vite": "^6.2.0",
    "zustand": "^5.0.14"
  },
@@ -73,8 +70,6 @@
    "@testing-library/user-event": "^14.6.1",
    "@types/react": "^19.2.14",
    "@types/react-dom": "^19.2.3",
    "@types/three": "^0.184.1",
    "@types/react-window": "^1.8.8",
    "tailwindcss": "^4.1.14",
    "typescript": "~5.8.2",
    "vitest": "^0.34.6"
@@ -957,6 +957,9 @@ async function runInteractiveCargo(cliArguments, setActiveChild) {
  return result;
 }
 // 立项策划跑 standard 档，`agent.delegate` 这类动作按项目权限策略必须逐个确认，
 // 而确认和问询都只从 CLI 的 stdin 读。自主构建档没有这一步，所以只有 --plan 需要
 // 一个把「人坐在终端前敲 approve」自动化掉的应答器；判据本身仍然走后端确认命令。
 const swarmConfirmationPromptPattern = /输入 approve 或 reject：$/u;
 const swarmUserInputPromptPattern = /请选择 1-\d+，或直接输入其他答案：$/u;
@@ -121,10 +121,6 @@ const allowedUncalledTauriCommands = [
  'open_game_creator_launcher_window',
  'open_game_creator_workspace_window',
  'read_direct_project_conversation',
  // 项目定时快照上传只在 Rust 侧触发（周期定时器 / 工作区窗口关闭）与排障调用；
  // 按产品口径不做客户端可见界面，因此同 `open_game_creator_*_window` 一样按 native-only 登记。
  'read_local_project_snapshot_state',
  'sync_local_project_snapshot',
  'reset_design_agent_session',
  'stop_local_game_preview_if_matches',
  'start_game_creator_external_mcp',
@@ -1553,11 +1549,13 @@ if (!viteConfigSource.includes('allow: [repoRoot]')) {
  );
 }
-if (!(
+if (
-  tauriConfig.build?.beforeDevCommand?.includes(
+  !(
-    'run ai-game-creator-shell:dev-server',
+    tauriConfig.build?.beforeDevCommand?.includes(
-  ) || tauriConfig.build?.beforeDevCommand?.includes('run agc:serve')
+      'run ai-game-creator-shell:dev-server',
-)) {
+    ) || tauriConfig.build?.beforeDevCommand?.includes('run agc:serve')
  )
 ) {
  throw new Error(
    'AI game creator shell beforeDevCommand must start the selected Vite dev server',
  );
@@ -724,7 +724,6 @@ function canvasAssetCall(agentId) {
    assetKind: 'art-spritesheet',
    assetLabel: '游戏首版核心美术素材',
    replaceExisting: false,
    sliceMode: 'connected-components',
  });
 }
@@ -2692,7 +2691,7 @@ function createDeterministicCanvasFixture(apiKey) {
          'deterministic spritesheet fixture',
        model: 'deterministic-canvas-v1',
        provider: 'deterministic-loopback',
-        sliceMode: 'connected-components',
+        sliceLayout: 'grid-2x2',
        spritesheetResource: {
          resourceId,
          projectId,
@@ -1,20 +0,0 @@
 /**
 * `agc` 开发启动下发给 Vite 的客户端特性开关默认值。
 *
 * 开发态默认关闭客户端更新检查：`npm run agc` / `agc:serve` 启动的客户端不请求 OSS
 * 更新清单，也不显示更新入口。需要联调更新流程时显式传
 * `VITE_AGC_ENABLE_APP_UPDATE_CHECK=1`；此处不覆盖已经显式配置的取值。
 */
 const agcAppUpdateCheckEnvKey = 'VITE_AGC_ENABLE_APP_UPDATE_CHECK';
 function withAgcDevFeatureFlags(env = process.env) {
  if (String(env[agcAppUpdateCheckEnvKey] ?? '').trim()) {
    return env;
  }
  return {
    ...env,
    [agcAppUpdateCheckEnvKey]: '0',
  };
 }
 export { agcAppUpdateCheckEnvKey, withAgcDevFeatureFlags };
@@ -1,27 +0,0 @@
 /**
 * 发布上传的 OSS 命令行整理：把 ossutil 参数与凭据整理成可执行或可打印的形式，
 * 便于在 dry-run 下核对将要执行的上传，同时保证任何输出都不回显凭据明文。
 */
 const redactedCredential = '<redacted>';
 export function readReleaseDryRun(env = process.env) {
  const value = env.AGC_RELEASE_DRY_RUN?.trim().toLowerCase();
  return value === '1' || value === 'true';
 }
 function quoteArgument(value) {
  return /[\s"']/u.test(value) ? JSON.stringify(value) : value;
 }
 export function formatOssutilCommand({ binary, args, endpoint, credentials }) {
  const parts = [binary, ...args, '--endpoint', endpoint];
  if (credentials) {
    parts.push(
      '--access-key-id',
      redactedCredential,
      '--access-key-secret',
      redactedCredential,
    );
  }
  return parts.map(quoteArgument).join(' ');
 }
@@ -1,44 +0,0 @@
 import assert from 'node:assert/strict';
 import { readFileSync } from 'node:fs';
 import { test } from 'node:test';
 import { formatOssutilCommand, readReleaseDryRun } from './release-oss.mjs';
 test('dry run only accepts explicit truthy values', () => {
  assert.equal(readReleaseDryRun({}), false);
  assert.equal(readReleaseDryRun({ AGC_RELEASE_DRY_RUN: '1' }), true);
  assert.equal(readReleaseDryRun({ AGC_RELEASE_DRY_RUN: ' true ' }), true);
  assert.equal(readReleaseDryRun({ AGC_RELEASE_DRY_RUN: '0' }), false);
  assert.equal(readReleaseDryRun({ AGC_RELEASE_DRY_RUN: '' }), false);
 });
 test('printed upload command keeps arguments and hides credentials', () => {
  const command = formatOssutilCommand({
    binary: 'ossutil',
    args: [
      'cp',
      '--force',
      '陶泥儿 0.1.48.exe',
      'oss://agc-dev/agc/dev-win/x.exe',
    ],
    endpoint: 'oss-rg-china-mainland.aliyuncs.com',
    credentials: true,
  });
  assert.match(command, /^ossutil cp --force /u);
  assert.match(command, /"陶泥儿 0\.1\.48\.exe"/u);
  assert.match(command, /oss:\/\/agc-dev\/agc\/dev-win\/x\.exe/u);
  assert.match(
    command,
    /--access-key-id <redacted> --access-key-secret <redacted>/u,
  );
 });
 test('uploader gates every ossutil call behind the dry run switch', () => {
  const source = readFileSync(
    new URL('./release-upload.mjs', import.meta.url),
    'utf8',
  );
  assert.match(source, /const dryRun = readReleaseDryRun\(\);/u);
  assert.match(source, /if \(dryRun\) \{/u);
  assert.match(source, /dry-run：未写入任何 OSS 对象/u);
 });
@@ -1,8 +1,6 @@
 import { spawnSync } from 'node:child_process';
 import path from 'node:path';
 import { formatOssutilCommand, readReleaseDryRun } from './release-oss.mjs';
 const bucket = process.env.AGC_OSS_BUCKET?.trim() || 'agc-dev';
 const endpoint =
  process.env.AGC_OSS_ENDPOINT?.trim() || 'oss-rg-china-mainland.aliyuncs.com';
@@ -10,7 +8,6 @@ if (!/^[a-z0-9][a-z0-9.-]{1,62}$/u.test(bucket) || /[\r\n\0]/u.test(endpoint)) {
  throw new Error('OSS bucket 或 endpoint 配置无效');
 }
 process.env.AGC_UPDATE_OSS_BASE_URL ||= `https://${bucket}.${endpoint}/agc`;
 const dryRun = readReleaseDryRun();
 const { generateUpdateManifest, prepareReleaseVersion, runTauriBuild } =
  await import('./build-release.mjs');
@@ -22,18 +19,6 @@ function runOssutil(args) {
  if (Boolean(accessKeyId) !== Boolean(accessKeySecret)) {
    throw new Error('OSS AccessKey ID 和 Secret 必须同时提供');
  }
  if (dryRun) {
    // 演练：只打印将要执行的上传，凭据以占位符呈现，不写入 OSS。
    console.log(
      `[dry-run] ${formatOssutilCommand({
        binary,
        args,
        endpoint,
        credentials: Boolean(accessKeyId),
      })}`,
    );
    return;
  }
  const credentialArgs = accessKeyId
    ? ['--access-key-id', accessKeyId, '--access-key-secret', accessKeySecret]
    : [];
@@ -53,40 +38,11 @@ function runOssutil(args) {
 await prepareReleaseVersion();
 runTauriBuild([]);
-const { artifact, channel, legacyManifestPath, manifest, manifestPath } =
+const { artifact, manifestPath, manifest } = generateUpdateManifest();
-  await generateUpdateManifest();
+const artifactKey = `agc/${manifest.version}/${path.basename(artifact)}`;
 const artifactKey = `agc/${channel}/${manifest.version}/${path.basename(artifact)}`;
 // Jenkins/ossutil 默认会在目标对象已存在时交互询问并按默认值跳过；
 // 发布清单是固定的 latest 指针，必须显式覆盖，否则流水线会误报成功但远端仍保留旧版本。
 runOssutil(['cp', '--force', artifact, `oss://${bucket}/${artifactKey}`]);
-runOssutil([
+runOssutil(['cp', '--force', manifestPath, `oss://${bucket}/agc/latest.json`]);
  'cp',
  '--force',
  `${artifact}.sig`,
  `oss://${bucket}/${artifactKey}.sig`,
 ]);
 runOssutil([
  'cp',
  '--force',
  manifestPath,
  `oss://${bucket}/agc/${channel}/latest.json`,
 ]);
 console.log(`[ai-game-creator-shell] 已上传 oss://${bucket}/${artifactKey}`);
-console.log(
+console.log(`[ai-game-creator-shell] 已上传 oss://${bucket}/agc/latest.json`);
  `[ai-game-creator-shell] 已上传 oss://${bucket}/agc/${channel}/latest.json`,
 );
 if (legacyManifestPath) {
  // 迁移桥：让仍走旧 sha256 清单的已发布客户端升级到新协议，一个版本周期后删除。
  runOssutil([
    'cp',
    '--force',
    legacyManifestPath,
    `oss://${bucket}/agc/latest.json`,
  ]);
  console.log(
    `[ai-game-creator-shell] 已上传迁移指针 oss://${bucket}/agc/latest.json`,
  );
 }
 if (dryRun) {
  console.log('[ai-game-creator-shell] dry-run：未写入任何 OSS 对象');
 }
@@ -3,7 +3,6 @@ import http from 'node:http';
 import net from 'node:net';
 import { fileURLToPath } from 'node:url';
 import { withAgcDevFeatureFlags } from './dev-feature-flags.mjs';
 import { resolveAgcDevEndpoint, withAgcDevEndpointEnv } from './dev-port.mjs';
 const appRoot = fileURLToPath(new URL('..', import.meta.url));
@@ -105,7 +104,7 @@ const child = spawn(
  ],
  {
    cwd: appRoot,
-    env: withAgcDevFeatureFlags(withAgcDevEndpointEnv(endpoint)),
+    env: withAgcDevEndpointEnv(endpoint),
    stdio: 'inherit',
    // Node 18.20+/20+/24 on Windows rejects spawning .cmd (npm.cmd) without a shell (EINVAL).
    shell: true,
@@ -11,7 +11,6 @@ import {
  stopWindowsProcessTree,
  stopWindowsWorktreeProcesses,
 } from '../../../scripts/dev-windows-process.mjs';
 import { withAgcDevFeatureFlags } from './dev-feature-flags.mjs';
 import {
  agcVitePortEnvKey,
  readAgcDevEndpoint,
@@ -979,10 +978,7 @@ async function startVite(apiTarget, endpoint = readAgcDevEndpoint()) {
      '--port',
      String(endpoint.port),
    ],
-    {
+    { cwd: appRoot, env: withAgcDevEndpointEnv(endpoint) },
      cwd: appRoot,
      env: withAgcDevFeatureFlags(withAgcDevEndpointEnv(endpoint)),
    },
  );
 }
@@ -1192,7 +1188,7 @@ async function main() {
 function isDirectModuleExecution() {
  return Boolean(
    process.argv[1] &&
-    resolve(process.argv[1]) === fileURLToPath(import.meta.url),
+      resolve(process.argv[1]) === fileURLToPath(import.meta.url),
  );
 }
@@ -1,113 +0,0 @@
 import assert from 'node:assert/strict';
 import { mkdir, mkdtemp, rm, writeFile } from 'node:fs/promises';
 import { tmpdir } from 'node:os';
 import { dirname, join } from 'node:path';
 import { test } from 'node:test';
 import { setTimeout as delay } from 'node:timers/promises';
 import { fileURLToPath } from 'node:url';
 import { createServer, loadConfigFromFile, normalizePath } from 'vite';
 test(
  'AGC 排除 Rust 构建目录且保留源码与共享组件监听',
  { timeout: 30_000 },
  async () => {
    const loaded = await loadConfigFromFile(
      { command: 'serve', mode: 'development' },
      fileURLToPath(new URL('../vite.config.ts', import.meta.url)),
    );
    assert.ok(loaded);
    assert.notEqual(loaded.config.server?.watch, null);
    assert.notEqual(loaded.config.server?.hmr, false);
    assert.ok(
      [loaded.config.server?.watch?.ignored]
        .flat()
        .includes('**/src-tauri/target/**'),
    );
    const fixture = await mkdtemp(join(tmpdir(), 'agc-vite-watch-'));
    const root = join(fixture, 'apps', 'ai-game-creator-shell');
    const source = join(root, 'src', 'main.js');
    const css = join(root, 'src', 'styles.css');
    const shared = join(fixture, 'packages', 'shared', 'src', 'component.js');
    const target = join(root, 'src-tauri', 'target');
    const artifact = join(target, 'debug', 'incremental', 'cache.bin');
    let server;
    try {
      for (const file of [source, css, shared, artifact]) {
        await mkdir(dirname(file), { recursive: true });
        await writeFile(
          file,
          file === css ? 'body { color: red; }' : 'export default 1;',
        );
      }
      // 使用真实 Vite watcher 和实际配置，仅将扫描根替换为小型夹具；
      // 不加载业务插件、后端或原生窗口，也不扫描开发机上的大型 target。
      server = await createServer({
        configFile: false,
        envFile: false,
        root,
        logLevel: 'silent',
        server: {
          watch: loaded.config.server?.watch,
          middlewareMode: true,
          hmr: false,
          fs: { allow: [fixture] },
        },
        optimizeDeps: { noDiscovery: true, include: [] },
      });
      const waitForWatchedFile = async (file) => {
        const normalized = normalizePath(file);
        for (let attempt = 0; attempt < 100; attempt += 1) {
          if (
            Object.entries(server.watcher.getWatched()).some(
              ([directory, names]) =>
                names.some(
                  (name) => normalizePath(join(directory, name)) === normalized,
                ),
            )
          )
            return;
          await delay(50);
        }
        assert.fail(`源码必须仍被监听：${normalized}`);
      };
      await waitForWatchedFile(source);
      // 真实模块转换应将 root 外的共享源码加入监听。
      await server.transformRequest(`/@fs/${normalizePath(shared)}`);
      for (const file of [source, css, shared]) {
        const normalized = normalizePath(file);
        await waitForWatchedFile(file);
        const changed = new Promise((resolve, reject) => {
          const timer = setTimeout(() => {
            server.watcher.off('change', onChange);
            reject(new Error(`未收到源码变更：${normalized}`));
          }, 5_000);
          function onChange(path) {
            if (normalizePath(path) !== normalized) return;
            clearTimeout(timer);
            server.watcher.off('change', onChange);
            resolve();
          }
          server.watcher.on('change', onChange);
        });
        await writeFile(
          file,
          file === css ? 'body { color: blue; }' : 'export default 2;',
        );
        await changed;
      }
      const targetPath = normalizePath(target);
      const targetDirectories = Object.keys(server.watcher.getWatched())
        .map(normalizePath)
        .filter(
          (path) => path === targetPath || path.startsWith(`${targetPath}/`),
        );
      assert.deepEqual(targetDirectories, [], 'Rust target 不应创建目录监听器');
    } finally {
      await server?.close();
      await rm(fixture, { recursive: true, force: true });
    }
  },
 );
@@ -814,16 +814,6 @@ dependencies = [
 "url",
 ]
 [[package]]
 name = "core-foundation"
 version = "0.9.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "91e195e091a93c46f7102ec7818a2aa394e1e1771c3ab4825963fa03e45afb8f"
 dependencies = [
 "core-foundation-sys",
 "libc",
 ]
 [[package]]
 name = "core-foundation"
 version = "0.10.1"
@@ -847,7 +837,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "064badf302c3194842cf2c5d61f56cc88e54a759313879cdf03abdd27d0c3b97"
 dependencies = [
 "bitflags 2.13.0",
- "core-foundation 0.10.1",
+ "core-foundation",
 "core-graphics-types",
 "foreign-types 0.5.0",
 "libc",
@@ -860,7 +850,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3d44a101f213f6c4cdc1853d4b78aef6db6bdfa3468798cc1d9912f4735013eb"
 dependencies = [
 "bitflags 2.13.0",
- "core-foundation 0.10.1",
+ "core-foundation",
 "libc",
 ]
@@ -1415,16 +1405,6 @@ dependencies = [
 "winapi",
 ]
 [[package]]
 name = "filetime"
 version = "0.2.29"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5c287a33c7f0a620c38e641e7f60827713987b3c0f26e8ddc9462cc69cf75759"
 dependencies = [
 "cfg-if",
 "libc",
 ]
 [[package]]
 name = "find-msvc-tools"
 version = "0.1.9"
@@ -1745,7 +1725,7 @@ dependencies = [
 [[package]]
 name = "genarrative-ai-game-creator-shell"
-version = "0.1.47"
+version = "0.1.29"
 dependencies = [
 "agent-runtime-core",
 "axum",
@@ -1767,6 +1747,7 @@ dependencies = [
 "oxc_parser",
 "oxc_semantic",
 "oxc_span",
 "percent-encoding",
 "platform-agent",
 "platform-llm",
 "portable-pty",
@@ -1785,7 +1766,6 @@ dependencies = [
 "tauri-plugin-dialog",
 "tauri-plugin-http",
 "tauri-plugin-opener",
 "tauri-plugin-updater",
 "tempfile",
 "tokio",
 "toml 0.8.2",
@@ -1796,7 +1776,7 @@ dependencies = [
 "url",
 "uuid",
 "windows-sys 0.61.2",
- "zip 2.4.2",
+ "zip",
 ]
 [[package]]
@@ -2240,11 +2220,9 @@ dependencies = [
 "percent-encoding",
 "pin-project-lite",
 "socket2",
 "system-configuration",
 "tokio",
 "tower-service",
 "tracing",
 "windows-registry",
 ]
 [[package]]
@@ -2528,36 +2506,6 @@ dependencies = [
 "windows-sys 0.45.0",
 ]
 [[package]]
 name = "jni"
 version = "0.22.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "5efd9a482cf3a427f00d6b35f14332adc7902ce91efb778580e180ff90fa3498"
 dependencies = [
 "cfg-if",
 "combine",
 "jni-macros",
 "jni-sys 0.4.1",
 "log",
 "simd_cesu8",
 "thiserror 2.0.18",
 "walkdir",
 "windows-link 0.2.1",
 ]
 [[package]]
 name = "jni-macros"
 version = "0.22.4"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a00109accc170f0bdb141fed3e393c565b6f5e072365c3bd58f5b062591560a3"
 dependencies = [
 "proc-macro2",
 "quote",
 "rustc_version",
 "simd_cesu8",
 "syn 2.0.118",
 ]
 [[package]]
 name = "jni-sys"
 version = "0.3.1"
@@ -2871,12 +2819,6 @@ dependencies = [
 "unicase",
 ]
 [[package]]
 name = "minisign-verify"
 version = "0.2.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "22f9645cb765ea72b8111f36c522475d2daa0d22c957a9826437e97534bc4e9e"
 [[package]]
 name = "miniz_oxide"
 version = "0.8.9"
@@ -3292,18 +3234,6 @@ dependencies = [
 "objc2-core-foundation",
 ]
 [[package]]
 name = "objc2-osa-kit"
 version = "0.3.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f112d1746737b0da274ef79a23aac283376f335f4095a083a267a082f21db0c0"
 dependencies = [
 "bitflags 2.13.0",
 "objc2",
 "objc2-app-kit",
 "objc2-foundation",
 ]
 [[package]]
 name = "objc2-quartz-core"
 version = "0.3.2"
@@ -3448,20 +3378,6 @@ dependencies = [
 "windows-sys 0.61.2",
 ]
 [[package]]
 name = "osakit"
 version = "0.3.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "732c71caeaa72c065bb69d7ea08717bd3f4863a4f451402fc9513e29dbd5261b"
 dependencies = [
 "objc2",
 "objc2-foundation",
 "objc2-osa-kit",
 "serde",
 "serde_json",
 "thiserror 2.0.18",
 ]
 [[package]]
 name = "outref"
 version = "0.5.2"
@@ -4444,20 +4360,15 @@ dependencies = [
 "http-body",
 "http-body-util",
 "hyper",
 "hyper-rustls",
 "hyper-util",
 "js-sys",
 "log",
 "percent-encoding",
 "pin-project-lite",
 "rustls",
 "rustls-pki-types",
 "rustls-platform-verifier",
 "serde",
 "serde_json",
 "sync_wrapper",
 "tokio",
 "tokio-rustls",
 "tokio-util",
 "tower",
 "tower-http",
@@ -4571,33 +4482,6 @@ dependencies = [
 "zeroize",
 ]
 [[package]]
 name = "rustls-platform-verifier"
 version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "26d1e2536ce4f35f4846aa13bff16bd0ff40157cdb14cc056c7b14ba41233ba0"
 dependencies = [
 "core-foundation 0.10.1",
 "core-foundation-sys",
 "jni 0.22.4",
 "log",
 "once_cell",
 "rustls",
 "rustls-native-certs",
 "rustls-platform-verifier-android",
 "rustls-webpki",
 "security-framework",
 "security-framework-sys",
 "webpki-root-certs",
 "windows-sys 0.61.2",
 ]
 [[package]]
 name = "rustls-platform-verifier-android"
 version = "0.1.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "f87165f0995f63a9fbeea62b64d10b4d9d8e78ec6d7d51fb2125fda7bb36788f"
 [[package]]
 name = "rustls-webpki"
 version = "0.103.13"
@@ -4725,7 +4609,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b7f4bc775c73d9a02cde8bf7b2ec4c9d12743edf609006c7facc23998404cd1d"
 dependencies = [
 "bitflags 2.13.0",
- "core-foundation 0.10.1",
+ "core-foundation",
 "core-foundation-sys",
 "libc",
 "security-framework-sys",
@@ -5068,22 +4952,6 @@ version = "0.3.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "703d5c7ef118737c72f1af64ad2f6f8c5e1921f818cdcb97b8fe6fc69bf66214"
 [[package]]
 name = "simd_cesu8"
 version = "1.2.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "11031e251abf8611c80f460e19dbdeb54a66db918e49c65a7065b46ac7aec520"
 dependencies = [
 "rustc_version",
 "simdutf8",
 ]
 [[package]]
 name = "simdutf8"
 version = "0.1.5"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e3a9fe34e3e7a50316060351f37187a3f546bce95496156754b601a5fa71b76e"
 [[package]]
 name = "similar"
 version = "2.7.0"
@@ -5307,27 +5175,6 @@ dependencies = [
 "syn 2.0.118",
 ]
 [[package]]
 name = "system-configuration"
 version = "0.7.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "a13f3d0daba03132c0aa9767f98351b3488edc2c100cda2d2ec2b04f3d8d3c8b"
 dependencies = [
 "bitflags 2.13.0",
 "core-foundation 0.9.4",
 "system-configuration-sys",
 ]
 [[package]]
 name = "system-configuration-sys"
 version = "0.6.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "8e1d1b10ced5ca923a1fcb8d03e96b8d3268065d724548c0211415ff6ac6bac4"
 dependencies = [
 "core-foundation-sys",
 "libc",
 ]
 [[package]]
 name = "system-deps"
 version = "6.2.2"
@@ -5349,7 +5196,7 @@ checksum = "d1c93047acf68669466a34690ac58cca7010bd1b201e1ec86f1fd0a75d3dd4a9"
 dependencies = [
 "bitflags 2.13.0",
 "block2",
- "core-foundation 0.10.1",
+ "core-foundation",
 "core-graphics",
 "crossbeam-channel",
 "dbus",
@@ -5359,7 +5206,7 @@ dependencies = [
 "gdkwayland-sys",
 "gdkx11-sys",
 "gtk",
- "jni 0.21.1",
+ "jni",
 "libc",
 "log",
 "ndk",
@@ -5392,17 +5239,6 @@ dependencies = [
 "syn 2.0.118",
 ]
 [[package]]
 name = "tar"
 version = "0.4.46"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "3f6221d9a6003c78398e3b239969f352578258df48c8eb051caadae0015bc840"
 dependencies = [
 "filetime",
 "libc",
 "xattr",
 ]
 [[package]]
 name = "target-lexicon"
 version = "0.12.16"
@@ -5426,7 +5262,7 @@ dependencies = [
 "gtk",
 "heck 0.5.0",
 "http",
- "jni 0.21.1",
+ "jni",
 "libc",
 "log",
 "mime",
@@ -5641,39 +5477,6 @@ dependencies = [
 "zbus",
 ]
 [[package]]
 name = "tauri-plugin-updater"
 version = "2.11.0"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b28d8cabdeb0564f03ae261963de4bc3d98321cd3d213e76a81b7d344e5df606"
 dependencies = [
 "base64 0.22.1",
 "dirs",
 "flate2",
 "futures-util",
 "http",
 "infer",
 "log",
 "minisign-verify",
 "osakit",
 "percent-encoding",
 "reqwest 0.13.4",
 "rustls",
 "semver",
 "serde",
 "serde_json",
 "tar",
 "tauri",
 "tauri-plugin",
 "tempfile",
 "thiserror 2.0.18",
 "time",
 "tokio",
 "url",
 "windows-sys 0.60.2",
 "zip 4.6.1",
 ]
 [[package]]
 name = "tauri-runtime"
 version = "2.11.3"
@@ -5684,7 +5487,7 @@ dependencies = [
 "dpi",
 "gtk",
 "http",
- "jni 0.21.1",
+ "jni",
 "objc2",
 "objc2-ui-kit",
 "objc2-web-kit",
@@ -5707,7 +5510,7 @@ checksum = "fe41e015bf8fc4d6477ff4926a0ef769dc64ff34c7b0038b6f7cacae892acb5c"
 dependencies = [
 "gtk",
 "http",
- "jni 0.21.1",
+ "jni",
 "log",
 "objc2",
 "objc2-app-kit",
@@ -6783,15 +6586,6 @@ dependencies = [
 "system-deps",
 ]
 [[package]]
 name = "webpki-root-certs"
 version = "1.0.9"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "b96554aa2acc8ccdb7e1c9a58a7a68dd5d13bccc69cd124cb09406db612a1c9b"
 dependencies = [
 "rustls-pki-types",
 ]
 [[package]]
 name = "webpki-roots"
 version = "1.0.9"
@@ -7398,7 +7192,7 @@ dependencies = [
 "gtk",
 "http",
 "javascriptcore-rs",
- "jni 0.21.1",
+ "jni",
 "libc",
 "ndk",
 "objc2",
@@ -7462,16 +7256,6 @@ version = "0.13.2"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "ea6fc2961e4ef194dcbfe56bb845534d0dc8098940c7e5c012a258bfec6701bd"
 [[package]]
 name = "xattr"
 version = "1.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
 dependencies = [
 "libc",
 "rustix",
 ]
 [[package]]
 name = "yoke"
 version = "0.8.3"
@@ -7653,18 +7437,6 @@ dependencies = [
 "zopfli",
 ]
 [[package]]
 name = "zip"
 version = "4.6.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "caa8cd6af31c3b31c6631b8f483848b91589021b28fffe50adada48d4f4d2ed1"
 dependencies = [
 "arbitrary",
 "crc32fast",
 "indexmap 2.14.0",
 "memchr",
 ]
 [[package]]
 name = "zmij"
 version = "1.0.21"
@@ -1,14 +1,11 @@
 [package]
 name = "genarrative-ai-game-creator-shell"
-version = "0.1.47"
+version = "0.1.29"
 edition = "2021"
 publish = false
 [features]
 default = []
 # 模板库假数据注入（仅本地页面压测/演示用）：只有显式开启该 feature 才会编译并在读取清单后
 # 把条目循环补齐成假数据；计数由 AGC_TEMPLATE_LIBRARY_SYNTHETIC_COUNT 控制（默认 1000）。
 template-library-fixtures = []
 cocos-editor = ["cocos-editor-bridge/process-discovery"]
 cocos-editor-execute = ["cocos-editor", "cocos-editor-bridge/windows-bootstrap"]
 cocos-editor-injection = ["cocos-editor-execute", "cocos-editor-bridge/windows-injection"]
@@ -33,11 +30,7 @@ chromiumoxide = "0.9.1"
 futures = "0.3"
 getrandom = "0.3"
 http = "1"
-# `tga` / `tiff` / `hdr` 只服务资源画布的只读预览：引擎图像容器（Cocos 的
+image = { version = "0.25", default-features = false, features = ["jpeg", "png", "webp"] }
 # .tga/.tif/.hdr 等）在浏览器里没有解码器，必须先在原生侧转码成 PNG 再送给前端。
 # 刻意不开 `exr`：它要求 `exr ^1.74.0`，当前依赖源只能到 1.73，打不开就先让
 # `.exr` 走「类型卡」而不是留一半解不出来的预览分支。
 image = { version = "0.25", default-features = false, features = ["jpeg", "png", "webp", "tga", "tiff", "hdr"] }
 jsonschema = { version = "0.49.3", default-features = false }
 oxc_allocator = "0.143.0"
 oxc_ast = "0.143.0"
@@ -54,6 +47,7 @@ similar = "2.7"
 platform-llm = { path = "../../../server-rs/crates/platform-llm" }
 platform-agent = { path = "../../../server-rs/crates/platform-agent" }
 portable-pty = "0.9"
 percent-encoding = "2"
 reqwest = { version = "0.12", default-features = false, features = ["json", "multipart", "native-tls", "stream"] }
 regex = "1"
 shared-contracts = { path = "../../../server-rs/crates/shared-contracts", default-features = false }
@@ -61,7 +55,6 @@ tauri = { version = "2.11.2", features = [] }
 tauri-plugin-dialog = "2.7.1"
 tauri-plugin-http = { version = "2.5.9", default-features = false, features = ["charset", "cookies", "http2", "rustls-tls"] }
 tauri-plugin-opener = "2"
 tauri-plugin-updater = "2.11.0"
 tempfile = "3"
 toml = "0.8"
 ttf-parser = "0.25.1"
--- a/Show More
+++ b/Show More