187 changed files with 6653 additions and 39136 deletions
@@ -174,6 +174,14 @@ _Avoid_: mock 先行堆积、前后端各自发散、先做排行榜 UI

 ## 项目开发对话（DirectProject）

+**DirectProject 专属聊天模块**:
+AGC 普通项目聊天的独立容器，拥有 DirectProject 的聊天状态、运行态订阅、历史读取、发送队列、附件和中止交互，并把聊天投影交给专属表现层渲染；它不承接 Supervisor、Design Agent 或 Planning V2 的运行态。
+_Avoid_: 把 DirectProject 作为项目总控聊天的一个布尔分支、把四种 Agent 会话抽象成同一事实源
+
+**项目工作台布局**:
+承载本地项目的资源工作区、项目级工具和独立聊天产品路径的外层界面；布局拥有跨面板的账户/钱包入口，聊天模块只负责项目对话，不嵌套账户展示。
+_Avoid_: 把钱包入口塞进聊天设置、让聊天组件拥有工作台级账户状态
+
 **项目对话历史**:
 AGC 本地项目内 Codex 原始对话条目的持久集合，是聊天展示、工具卡片和线程恢复注入的唯一持久事实源。
 _Avoid_: 会话缓存、展示态历史、按 UI 需要另存的对话副本
@@ -86,10 +86,6 @@ const appInvokeSources = readSourceFiles(
  new URL('../src/', import.meta.url),
  new Set(['.ts', '.tsx']),
 );
-const appEntrypointSource = fs.readFileSync(
-  new URL('../src/main.tsx', import.meta.url),
-  'utf8',
-);
 const tauriHandlerSource = fs.readFileSync(
  new URL('../src-tauri/src/main.rs', import.meta.url),
  'utf8',
@@ -114,6 +110,52 @@ const rustSharedContractSource = fs.readFileSync(
 );
 const allowedUncalledTauriCommands = [
  'append_direct_project_conversation_message',
+  // Supervisor 调试窗口、开发者面板、专业 Agent 对话与旧命令聊天的前端调用方已随
+  // Supervisor 前端链路整体删除；命令本身仍注册在 Rust 侧并由 native Runtime、CLI
+  // swarm 与 Rust 测试使用，保留 present，仅不再出现在 App 前端源码里。
+  'answer_game_creator_agent_runtime_user_input',
+  'cancel_game_creator_agent_runtime_task',
+  'chat_with_game_creator_role_agent',
+  'chat_with_game_creator_role_agent_stream',
+  'check_game_creator_llm_config',
+  'confirm_game_creator_agent_runtime_task',
+  // 下面两条命令前端、native Runtime 与 CLI swarm 都没有调用方，只有 Rust 测试直接
+  // 调用命令函数本身；保留注册是为了不动本地记忆 / 本地文件这两块 native 能力。
+  'delete_local_game_memory',
+  'delete_local_project_file',
+  'diff_local_project_checkpoint',
+  'get_game_creation_agent_capabilities',
+  'get_limited_local_commands',
+  'list_local_project_export_packages',
+  // 前端画板导出包入口已不再调用它，Rust 侧也只剩命令注册；若确认这条能力退役，
+  // 需要连同 main.rs 注册、commands.rs 实现和前端调用方用例一起删除。
+  'pick_local_file',
+  'read_game_creator_agent_runtime',
+  'read_local_agent_memory',
+  'read_local_game_memory',
+  'reject_game_creator_agent_runtime_task',
+  'retry_game_creator_agent_runtime_task',
+  'schedule_game_creator_agent_ready_tasks',
+  'start_game_creator_agent_runtime_task',
+  'steer_game_creator_agent_runtime_task',
+  'write_local_agent_memory',
+  'write_local_game_memory',
+  'write_local_project_file',
+  // Agent 运行时会话 / 目标 / 协作命令由 native 侧与 CLI swarm 驱动，前端没有调用方。
+  'archive_game_creator_agent_session',
+  'clear_game_creator_agent_goal',
+  'compact_game_creator_agent_runtime_context',
+  'confirm_retry_game_creator_agent_runtime_task',
+  'create_game_creator_agent_session',
+  'edit_game_creator_agent_goal',
+  'fork_game_creator_agent_session',
+  'list_game_creator_agent_sessions',
+  'pause_game_creator_agent_goal',
+  'read_game_creator_agent_goal',
+  'resume_game_creator_agent_goal',
+  'set_active_game_creator_agent_session',
+  'start_game_creator_agent_goal',
+  'start_game_creator_supervisor_runtime_task',
  // TODO: Remove the retired binding command after the legacy runtime path is removed.
  'bind_components',
  'chat_with_game_creator_agent',
@@ -1412,13 +1454,7 @@ const eventCapability = JSON.parse(
 );
 const eventCapabilityWindows = new Set(eventCapability.windows ?? []);
 const eventCapabilityPermissions = new Set(eventCapability.permissions ?? []);
-for (const windowLabel of [
-  'client',
-  'developer',
-  'main',
-  'launcher',
-  'supervisor-chat',
-]) {
+for (const windowLabel of ['client', 'main', 'launcher']) {
  if (!eventCapabilityWindows.has(windowLabel)) {
    throw new Error(
      `AI game creator shell event capability missing window: ${windowLabel}`,
@@ -1801,20 +1837,6 @@ if (
  );
 }

-for (const snippet of [
-  'import.meta.env.DEV',
-  'supervisorChatMode',
-  'supervisorChatOnly',
-  'open_project_supervisor_chat_window',
-  'index.html?supervisor-chat&projectPath=',
-]) {
-  if (!`${appEntrypointSource}\n${tauriRustSource}`.includes(snippet)) {
-    throw new Error(
-      `AI game creator shell developer window guardrail drifted: ${snippet}`,
-    );
-  }
-}
-
 if (tauriHandlerSource.includes('open_developer_window(app.handle())?')) {
  throw new Error(
    'AI game creator normal startup must not automatically open the developer window',
@@ -1853,25 +1875,16 @@ for (const snippet of [
  'function needsInitializedChatProject',
  'function resolvePendingCommandProjectPath',
  'resolveChatProjectPath(localProject) ?? draftProjectPath',
-  '`permission.cancel ${command.id} missing-project`',
  "'/remember [short|long|blackboard] 内容：追加短期、长期或黑板记忆'",
  "'/memory-set [short|long|blackboard] 内容：覆盖保存对应记忆'",
  'function parseRememberInput',
  "'/trace 或 /loop：查看最近一次 Agent loop trace'",
-  'async function executeAgentTraceChat',
-  "relativePath: '.agent/logs/command.log'",
  "'permission.pending'",
  "'permission.confirm'",
  "'permission.cancel'",
  "'command.auto'",
  "'agent.run_status'",
  'function summarizeAgentRunTrace',
-  '工具调用：${agentRunTrace.toolCallCount}/${agentRunTrace.maxToolCalls}',
-  'agentRunTrace.error ?',
-  'className="trace-error"',
-  'agentRunTrace.taskGraph.repairRoutes.map',
-  "in: ${step.inputPaths.join(', ') || 'none'}",
-  "out: ${step.outputPaths.join(', ') || 'none'}",
 ]) {
  if (!appSource.includes(snippet)) {
    throw new Error(
@@ -1,7 +0,0 @@
-{
-  "$schema": "../gen/schemas/desktop-schema.json",
-  "identifier": "developer",
-  "description": "开发窗口允许打开本地素材选择对话框。",
-  "windows": ["developer"],
-  "permissions": ["dialog:allow-open"]
-}
@@ -2,6 +2,6 @@
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "events",
  "description": "允许客户端窗口订阅并取消订阅 Rust Runtime 事件。",
-  "windows": ["client", "developer", "main", "launcher", "supervisor-chat"],
+  "windows": ["client", "main", "launcher"],
  "permissions": ["core:event:allow-listen", "core:event:allow-unlisten"]
 }
@@ -2,7 +2,7 @@
  "$schema": "../gen/schemas/desktop-schema.json",
  "identifier": "window-chrome",
  "description": "自绘标题栏允许执行当前窗口的基础控制和拖拽。",
-  "windows": ["client", "developer", "main", "launcher", "supervisor-chat"],
+  "windows": ["client", "main", "launcher"],
  "permissions": [
    "core:window:allow-close",
    "core:window:allow-is-maximized",
@@ -1133,7 +1133,6 @@ fn direct_codex_thread_delta_event(
 ) -> DirectThreadEvent {
    DirectThreadEvent::item_delta(item_id, kind, direct_thread_delta_text(root, delta))
 }
-
 /// 通知 → 回合事件的唯一分类函数：运行态读取器与单测共用这一份。
 ///
 /// 读取器只负责"必须有 turnId 才处理"的前置条件与节流（活动 / 正文），分类不在这里之外
@@ -2961,8 +2960,22 @@ impl CodexAppServerConnection {
            codex_app_server_text_prompt(&request)
                .map_err(platform_llm::LlmError::InvalidRequest)?
        };
-        let input =
-            codex_app_server_turn_input(&request, &prompt, &self.inner.workspace_path).await?;
+        let input = if self.inner.workspace_mode == CodexAppServerWorkspaceMode::DirectProject {
+            if let Some(item) = direct_user_item {
+                let canonical: DirectCodexUserItem = serde_json::from_value(item.clone())
+                    .map_err(|error| platform_llm::LlmError::InvalidRequest(error.to_string()))?;
+                direct_codex_user_item_to_codex_turn_input(
+                    &self.inner.workspace_path,
+                    &canonical,
+                    self.inner._skill_roots.as_deref().unwrap_or_default(),
+                )
+                .map_err(platform_llm::LlmError::InvalidRequest)?
+            } else {
+                codex_app_server_turn_input(&request, &prompt, &self.inner.workspace_path).await?
+            }
+        } else {
+            codex_app_server_turn_input(&request, &prompt, &self.inner.workspace_path).await?
+        };
        let _direct_tool_bridge_turn_guard =
            if self.inner.workspace_mode == CodexAppServerWorkspaceMode::DirectProject {
                Some(
@@ -2,9 +2,9 @@
 //! 有项目路径或导入状态时输出路径映射；否则保持首页元数据文案。不灌正文。

 pub(crate) const MAX_DIRECT_CODEX_ATTACHMENTS: usize = 8;
-const MAX_DIRECT_CODEX_ATTACHMENT_NAME_CHARS: usize = 160;
-const MAX_DIRECT_CODEX_ATTACHMENT_MEDIA_TYPE_CHARS: usize = 96;
-const MAX_DIRECT_CODEX_ATTACHMENT_LOCAL_PATH_CHARS: usize = 512;
+pub(crate) const MAX_DIRECT_CODEX_ATTACHMENT_NAME_CHARS: usize = 160;
+pub(crate) const MAX_DIRECT_CODEX_ATTACHMENT_MEDIA_TYPE_CHARS: usize = 96;
+pub(crate) const MAX_DIRECT_CODEX_ATTACHMENT_LOCAL_PATH_CHARS: usize = 512;

 const HOME_ATTACHMENT_HEADER: &str =
    "[首页附件说明：当前尚未打开项目，以下仅为附件元数据，附件内容尚不可读取]";
@@ -5,11 +5,11 @@ mod validation;
 mod wire;

 pub(crate) use model::{
-    DirectCodexUserContentPart, DirectCodexUserItem, DirectCodexUserMessageItem,
-    DirectCodexUserRole, DirectCodexUserRuntimeRegionPart,
+    DirectCodexUserAttachmentReferencePart, DirectCodexUserContentPart, DirectCodexUserItem,
+    DirectCodexUserMessageItem, DirectCodexUserRole, DirectCodexUserRuntimeRegionPart,
 };
 pub(crate) use validation::validate_direct_codex_user_item;
 pub(crate) use wire::{
-    direct_codex_user_item_to_prompt, direct_codex_user_item_to_response_item,
-    direct_codex_user_item_to_wire_input,
+    direct_codex_user_item_to_codex_turn_input, direct_codex_user_item_to_prompt,
+    direct_codex_user_item_to_response_item, direct_codex_user_item_to_wire_input,
 };
@@ -4,7 +4,7 @@ use ts_rs::TS;
 /// DirectProject 本轮 user input 的唯一结构化入口。
 #[derive(Clone, Debug, Deserialize, Serialize, TS)]
 #[serde(tag = "type", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectCodexUserItem {
    #[serde(rename = "message")]
    Message(DirectCodexUserMessageItem),
@@ -12,7 +12,7 @@ pub(crate) enum DirectCodexUserItem {

 #[derive(Clone, Debug, Deserialize, Serialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectCodexUserMessageItem {
    pub(crate) role: DirectCodexUserRole,
    pub(crate) content: Vec<DirectCodexUserContentPart>,
@@ -21,26 +21,43 @@ pub(crate) struct DirectCodexUserMessageItem {

 #[derive(Clone, Debug, Deserialize, Serialize, TS)]
 #[serde(rename_all = "lowercase")]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectCodexUserRole {
    User,
 }

 #[derive(Clone, Debug, Deserialize, Serialize, TS)]
 #[serde(tag = "type", rename_all_fields = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectCodexUserContentPart {
    #[serde(rename = "input_text")]
    InputText { text: String },
    #[serde(rename = "agc_resource_reference")]
    AgcResourceReference { resource_id: String },
+    #[serde(rename = "agc_skill_reference")]
+    AgcSkillReference { name: String },
    #[serde(rename = "agc_runtime_region_reference")]
    AgcRuntimeRegionReference(DirectCodexUserRuntimeRegionPart),
+    /// Uploaded project attachment kept inline in canonical content.
+    #[serde(rename = "agc_attachment_reference")]
+    AgcAttachmentReference(DirectCodexUserAttachmentReferencePart),
 }

 #[derive(Clone, Debug, Deserialize, Serialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
+pub(crate) struct DirectCodexUserAttachmentReferencePart {
+    pub(crate) name: String,
+    pub(crate) media_type: String,
+    #[ts(type = "number")]
+    pub(crate) size: u64,
+    pub(crate) local_path: String,
+    pub(crate) status: String,
+}
+
+#[derive(Clone, Debug, Deserialize, Serialize, TS)]
+#[serde(rename_all = "camelCase", deny_unknown_fields)]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectCodexUserRuntimeRegionPart {
    pub(crate) label: String,
    #[serde(default)]
@@ -4,15 +4,20 @@ use super::model::{
 };
 use crate::agent::{
    read_manifest_for_project, sanitize_attachment_local_path, GameCreationAppManifest,
+    MAX_DIRECT_CODEX_ATTACHMENTS, MAX_DIRECT_CODEX_ATTACHMENT_MEDIA_TYPE_CHARS,
+    MAX_DIRECT_CODEX_ATTACHMENT_NAME_CHARS,
 };
 use std::path::Path;

 pub(crate) const MAX_DIRECT_CODEX_REFERENCES: usize = 32;
+// Skill 引用也是非文本 part，但没有走 reference_count：它每一条都会触发一次
+// `root/<name>/SKILL.md` 文件探测并往 turn input 里加一项，所以单独设上限。
+pub(crate) const MAX_DIRECT_CODEX_SKILL_REFERENCES: usize = 32;

 pub(crate) fn validate_direct_codex_user_item(
    root: &Path,
    item: &DirectCodexUserItem,
-) -> Result<(), String> {
+) -> Result<GameCreationAppManifest, String> {
    let DirectCodexUserItem::Message(message) = item;
    if !matches!(message.role, DirectCodexUserRole::User) {
        return Err("DirectProject 只接受 user message item".to_string());
@@ -20,32 +25,98 @@ pub(crate) fn validate_direct_codex_user_item(
    if message.id.trim().is_empty() {
        return Err("DirectProject user item 缺少稳定 id".to_string());
    }
-    if message.content.is_empty() {
+    // 有效输入只判一整条 content：单个纯空白 `input_text` 是合法 part —— 编辑器里的段落
+    // 分隔、软换行与 chip 后的分隔空格就是这样落进 canonical content 的，前端不为它过滤。
+    if !content_has_meaningful_input(&message.content) {
        return Err("DirectProject user item content 不能为空".to_string());
    }
    let manifest = read_manifest_for_project(root)?;
    let mut reference_count = 0usize;
+    let mut attachment_count = 0usize;
+    let mut skill_count = 0usize;
    for part in &message.content {
        match part {
-            DirectCodexUserContentPart::InputText { text } => {
-                if text.trim().is_empty() {
-                    return Err("DirectProject input_text 不能为空".to_string());
-                }
-            }
+            DirectCodexUserContentPart::InputText { .. } => {}
            DirectCodexUserContentPart::AgcResourceReference { resource_id } => {
                reference_count = reference_count.saturating_add(1);
                validate_resource_id_and_manifest(&manifest, resource_id)?;
            }
+            DirectCodexUserContentPart::AgcSkillReference { name } => {
+                skill_count = skill_count.saturating_add(1);
+                if skill_count > MAX_DIRECT_CODEX_SKILL_REFERENCES {
+                    return Err(format!(
+                        "一次最多引用 {MAX_DIRECT_CODEX_SKILL_REFERENCES} 个 Skill"
+                    ));
+                }
+                let name = name.trim();
+                if name.is_empty()
+                    || name.chars().count() > 120
+                    || matches!(name, "." | "..")
+                    || name.chars().any(|character| {
+                        character.is_control()
+                            || character.is_whitespace()
+                            || matches!(character, '/' | '\\' | ':' | '$')
+                    })
+                {
+                    return Err("引用的 Skill 名称无效，请移除后重新选择".to_string());
+                }
+            }
            DirectCodexUserContentPart::AgcRuntimeRegionReference(reference) => {
                reference_count = reference_count.saturating_add(1);
                validate_runtime_region_reference(&manifest, reference)?;
            }
+            DirectCodexUserContentPart::AgcAttachmentReference(reference) => {
+                attachment_count = attachment_count.saturating_add(1);
+                if attachment_count > MAX_DIRECT_CODEX_ATTACHMENTS {
+                    return Err(format!(
+                        "一次最多携带 {MAX_DIRECT_CODEX_ATTACHMENTS} 个附件"
+                    ));
+                }
+                if reference.name.trim().is_empty() {
+                    return Err("附件缺少文件名".to_string());
+                }
+                let name = reference.name.trim();
+                if name.chars().count() > MAX_DIRECT_CODEX_ATTACHMENT_NAME_CHARS
+                    || name.chars().any(char::is_control)
+                {
+                    return Err("附件文件名无效或过长".to_string());
+                }
+                let media_type = reference.media_type.trim();
+                if media_type.is_empty()
+                    || media_type.chars().count() > MAX_DIRECT_CODEX_ATTACHMENT_MEDIA_TYPE_CHARS
+                    || media_type.chars().any(|character| {
+                        !(character.is_ascii_alphanumeric()
+                            || matches!(character, '/' | '+' | '-' | '.' | '_'))
+                    })
+                {
+                    return Err("附件媒体类型无效或过长".to_string());
+                }
+                let status = reference.status.trim();
+                if status == "imported" && reference.local_path.trim().is_empty() {
+                    return Err("已导入附件缺少项目路径".to_string());
+                }
+                if !reference.local_path.trim().is_empty() {
+                    sanitize_attachment_local_path(&reference.local_path)
+                        .ok_or_else(|| "附件项目路径无效".to_string())?;
+                }
+                if !matches!(status, "imported" | "failed") {
+                    return Err("附件状态无效".to_string());
+                }
+            }
        }
    }
    if reference_count > MAX_DIRECT_CODEX_REFERENCES {
        return Err(format!("一次最多引用 {MAX_DIRECT_CODEX_REFERENCES} 个素材"));
    }
-    Ok(())
+    Ok(manifest)
+}
+
+/// 整条 content 是否还有有效输入：任何一段非空白文本、或任何一个非文本 part 都算。
+pub(crate) fn content_has_meaningful_input(content: &[DirectCodexUserContentPart]) -> bool {
+    content.iter().any(|part| match part {
+        DirectCodexUserContentPart::InputText { text } => !text.trim().is_empty(),
+        _ => true,
+    })
 }

 pub(crate) fn validate_resource_id_and_manifest(
@@ -86,3 +157,173 @@ fn validate_runtime_region_reference(
    }
    Ok(())
 }
+
+#[cfg(test)]
+mod tests {
+    use super::{
+        content_has_meaningful_input, validate_direct_codex_user_item,
+        MAX_DIRECT_CODEX_SKILL_REFERENCES,
+    };
+    use crate::agent::direct_codex_user_item::model::DirectCodexUserContentPart;
+    use serde_json::json;
+
+    fn input_text(text: &str) -> DirectCodexUserContentPart {
+        DirectCodexUserContentPart::InputText {
+            text: text.to_string(),
+        }
+    }
+
+    #[test]
+    fn only_all_blank_content_counts_as_empty_input() {
+        // 空数组与「整条只有空白」是同一种空输入。
+        assert!(!content_has_meaningful_input(&[]));
+        assert!(!content_has_meaningful_input(&[input_text(" \n ")]));
+        assert!(!content_has_meaningful_input(&[
+            input_text("\n"),
+            input_text("  "),
+        ]));
+    }
+
+    #[test]
+    fn whitespace_parts_are_valid_next_to_meaningful_input() {
+        // 段落分隔 / 软换行 / chip 后的分隔空格都是合法的单个 part。
+        assert!(content_has_meaningful_input(&[
+            input_text("\n"),
+            input_text("看"),
+        ]));
+        assert!(content_has_meaningful_input(&[
+            input_text("看"),
+            input_text("\n\n"),
+        ]));
+    }
+
+    #[test]
+    fn non_text_parts_always_count_as_input() {
+        assert!(content_has_meaningful_input(&[
+            DirectCodexUserContentPart::AgcResourceReference {
+                resource_id: "asset-hero".to_string(),
+            },
+        ]));
+    }
+
+    #[test]
+    fn inline_attachment_count_is_bounded_independently() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "validation-test", "校验测试")
+            .expect("init project");
+        let content = (0..=crate::agent::MAX_DIRECT_CODEX_ATTACHMENTS)
+            .map(|index| {
+                json!({
+                    "type": "agc_attachment_reference",
+                    "name": format!("attachment-{index}.txt"),
+                    "mediaType": "text/plain",
+                    "size": 1,
+                    "localPath": "",
+                    "status": "failed"
+                })
+            })
+            .collect::<Vec<_>>();
+        let item = serde_json::from_value(json!({
+            "type": "message",
+            "role": "user",
+            "content": content,
+            "id": "turn-1:user"
+        }))
+        .expect("deserialize user item");
+        let error = validate_direct_codex_user_item(root.path(), &item)
+            .expect_err("too many inline attachments must be rejected");
+        assert!(error.contains("最多携带"), "{error}");
+    }
+
+    #[test]
+    fn imported_attachment_requires_a_project_path() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "validation-test", "校验测试")
+            .expect("init project");
+        let item = serde_json::from_value(json!({
+            "type": "message",
+            "role": "user",
+            "content": [{
+                "type": "agc_attachment_reference",
+                "name": "attachment.txt",
+                "mediaType": "text/plain",
+                "size": 1,
+                "localPath": "",
+                "status": "imported"
+            }],
+            "id": "turn-1:user"
+        }))
+        .expect("deserialize user item");
+        let error = validate_direct_codex_user_item(root.path(), &item)
+            .expect_err("imported attachment without a project path must fail");
+        assert!(error.contains("缺少项目路径"), "{error}");
+    }
+
+    #[test]
+    fn inline_skill_reference_count_is_bounded_independently() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "validation-test", "校验测试")
+            .expect("init project");
+        let content = (0..=MAX_DIRECT_CODEX_SKILL_REFERENCES)
+            .map(|index| json!({ "type": "agc_skill_reference", "name": format!("skill-{index}") }))
+            .collect::<Vec<_>>();
+        let item = serde_json::from_value(json!({
+            "type": "message",
+            "role": "user",
+            "content": content,
+            "id": "turn-1:user"
+        }))
+        .expect("deserialize user item");
+        let error = validate_direct_codex_user_item(root.path(), &item)
+            .expect_err("too many skill references must be rejected");
+        assert!(error.contains("最多引用"), "{error}");
+    }
+
+    #[test]
+    fn attachment_name_and_media_type_are_bounded_and_well_formed() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "validation-test", "校验测试")
+            .expect("init project");
+        let long_name = "a".repeat(crate::agent::MAX_DIRECT_CODEX_ATTACHMENT_NAME_CHARS + 1);
+        let cases = [
+            (
+                json!({
+                    "name": "bad\nname.txt",
+                    "mediaType": "text/plain"
+                }),
+                "文件名",
+            ),
+            (
+                json!({
+                    "name": "ok.txt",
+                    "mediaType": "text/plain\nsecret"
+                }),
+                "媒体类型",
+            ),
+            (
+                json!({
+                    "name": long_name,
+                    "mediaType": "text/plain"
+                }),
+                "文件名",
+            ),
+        ];
+        for (metadata, expected) in cases {
+            let mut value = metadata;
+            value["type"] = json!("agc_attachment_reference");
+            value["size"] = json!(1);
+            value["localPath"] = json!("");
+            value["status"] = json!("failed");
+            let item = serde_json::from_value(json!({
+                "type": "message",
+                "role": "user",
+                "content": [value],
+                "id": "turn-1:user"
+            }))
+            .expect("deserialize user item");
+            let error = validate_direct_codex_user_item(root.path(), &item)
+                .expect_err("invalid attachment metadata must fail");
+            assert!(error.contains(expected), "{error}");
+        }
+    }
+}
@@ -1,6 +1,12 @@
-use super::model::{DirectCodexUserContentPart, DirectCodexUserItem};
+use super::model::{
+    DirectCodexUserAttachmentReferencePart, DirectCodexUserContentPart, DirectCodexUserItem,
+    DirectCodexUserRuntimeRegionPart,
+};
 use super::validation::validate_direct_codex_user_item;
-use crate::agent::{read_manifest_for_project, sanitize_attachment_local_path};
+use crate::agent::{
+    sanitize_attachment_local_path, sanitize_attachment_media_type, sanitize_attachment_name,
+    GameCreationAppManifest,
+};
 use serde_json::Value;
 use std::path::Path;

@@ -51,54 +57,90 @@ fn direct_codex_user_item_to_response_content(
        .collect()
 }

+fn resource_reference_summary(
+    manifest: &GameCreationAppManifest,
+    resource_id: &str,
+) -> Result<String, String> {
+    let resource_id = resource_id.trim();
+    let asset = manifest
+        .assets
+        .iter()
+        .find(|asset| asset.id == resource_id)
+        .ok_or_else(|| "引用的素材已不存在，请移除后重新选择".to_string())?;
+    let path = sanitize_attachment_local_path(&asset.local_path)
+        .ok_or_else(|| "引用的素材路径无效，请移除后重新选择".to_string())?;
+    Ok(format!(
+        "[素材引用 resourceId={resource_id}；项目路径={path}]"
+    ))
+}
+
+fn runtime_region_summary(reference: &DirectCodexUserRuntimeRegionPart) -> String {
+    let resources = reference
+        .resource_ids
+        .iter()
+        .map(|id| id.trim())
+        .collect::<Vec<_>>()
+        .join(",");
+    let mut summary = format!("[运行画面区域：名称={} ", reference.label.trim());
+    if let Some(run_id) = reference.run_id.as_deref() {
+        summary.push_str(&format!("运行标识={} ", run_id.trim()));
+    }
+    if let Some(role) = reference.element_role.as_deref() {
+        summary.push_str(&format!("角色={} ", role.trim()));
+    }
+    if let Some(text) = reference.text.as_deref() {
+        summary.push_str(&format!("文本={} ", text.trim()));
+    }
+    if !resources.is_empty() {
+        summary.push_str(&format!("关联素材={resources}"));
+    }
+    summary.push(']');
+    summary
+}
+
+/// 附件引用的安全摘要。
+///
+/// turn 输入与 history/prompt 投影共用这一份清洗：文件名取 basename 并去控制字符、
+/// media type 与项目路径同样过白名单，避免两条路径对同一个引用给出不同摘要。
+fn attachment_reference_summary(reference: &DirectCodexUserAttachmentReferencePart) -> String {
+    let name = sanitize_attachment_name(&reference.name);
+    let media_type = sanitize_attachment_media_type(&reference.media_type);
+    let mut summary = format!(
+        "[附件：名称={name}；类型={media_type}；大小={} 字节",
+        reference.size
+    );
+    if let Some(local_path) = sanitize_attachment_local_path(&reference.local_path) {
+        summary.push_str(&format!("；项目路径={local_path}"));
+    }
+    summary.push_str(&format!("；状态={}", reference.status.trim()));
+    summary.push(']');
+    summary
+}
+
 /// 将 canonical user item 转为 app-server `turn/start.input` 可接受的文本数组。
 /// AGC 私有 part 只在这里投影为安全摘要，canonical item 本身不被修改。
 pub(crate) fn direct_codex_user_item_to_wire_input(
    root: &Path,
    item: &DirectCodexUserItem,
 ) -> Result<Value, String> {
-    validate_direct_codex_user_item(root, item)?;
-    let manifest = read_manifest_for_project(root)?;
+    // validate 已经读过清单并返回它，不要再读一次（seed task 变更也会被重复触发）。
+    let manifest = validate_direct_codex_user_item(root, item)?;
    let DirectCodexUserItem::Message(message) = item;
    let mut input = Vec::with_capacity(message.content.len());
    for part in &message.content {
        let text = match part {
            DirectCodexUserContentPart::InputText { text } => text.clone(),
            DirectCodexUserContentPart::AgcResourceReference { resource_id } => {
-                let asset = manifest
-                    .assets
-                    .iter()
-                    .find(|asset| asset.id == resource_id.trim())
-                    .ok_or_else(|| "引用的素材已不存在，请移除后重新选择".to_string())?;
-                let path = sanitize_attachment_local_path(&asset.local_path)
-                    .ok_or_else(|| "引用的素材路径无效，请移除后重新选择".to_string())?;
-                format!(
-                    "[素材引用 resourceId={}；项目路径={path}]",
-                    resource_id.trim()
-                )
+                resource_reference_summary(&manifest, resource_id)?
+            }
+            DirectCodexUserContentPart::AgcSkillReference { name } => {
+                format!("${}", name.trim())
            }
            DirectCodexUserContentPart::AgcRuntimeRegionReference(reference) => {
-                let resources = reference
-                    .resource_ids
-                    .iter()
-                    .map(|id| id.trim())
-                    .collect::<Vec<_>>()
-                    .join(",");
-                let mut summary = format!("[运行画面区域：名称={} ", reference.label.trim());
-                if let Some(run_id) = reference.run_id.as_deref() {
-                    summary.push_str(&format!("运行标识={} ", run_id.trim()));
-                }
-                if let Some(role) = reference.element_role.as_deref() {
-                    summary.push_str(&format!("角色={} ", role.trim()));
-                }
-                if let Some(text) = reference.text.as_deref() {
-                    summary.push_str(&format!("文本={} ", text.trim()));
-                }
-                if !resources.is_empty() {
-                    summary.push_str(&format!("关联素材={resources}"));
-                }
-                summary.push(']');
-                summary
+                runtime_region_summary(reference)
+            }
+            DirectCodexUserContentPart::AgcAttachmentReference(reference) => {
+                attachment_reference_summary(reference)
            }
        };
        input.push(serde_json::json!({ "type": "text", "text": text }));
@@ -106,6 +148,55 @@ pub(crate) fn direct_codex_user_item_to_wire_input(
    Ok(Value::Array(input))
 }

+pub(crate) fn direct_codex_user_item_to_codex_turn_input(
+    root: &Path,
+    item: &DirectCodexUserItem,
+    skill_roots: &[std::path::PathBuf],
+) -> Result<Value, String> {
+    let manifest = validate_direct_codex_user_item(root, item)?;
+    let DirectCodexUserItem::Message(message) = item;
+    let mut input = Vec::with_capacity(message.content.len());
+    for part in &message.content {
+        match part {
+            DirectCodexUserContentPart::InputText { text } => {
+                input.push(serde_json::json!({ "type": "text", "text": text }));
+            }
+            DirectCodexUserContentPart::AgcResourceReference { resource_id } => {
+                input.push(serde_json::json!({
+                    "type": "text",
+                    "text": resource_reference_summary(&manifest, resource_id)?,
+                }));
+            }
+            DirectCodexUserContentPart::AgcSkillReference { name } => {
+                let name = name.trim();
+                let path = skill_roots
+                    .iter()
+                    .map(|root| root.join(name).join("SKILL.md"))
+                    .find(|path| path.is_file())
+                    .ok_or_else(|| "引用的 Skill 当前不可用，请重新选择".to_string())?;
+                input.push(serde_json::json!({
+                    "type": "skill",
+                    "name": name,
+                    "path": path,
+                }));
+            }
+            DirectCodexUserContentPart::AgcRuntimeRegionReference(reference) => {
+                input.push(serde_json::json!({
+                    "type": "text",
+                    "text": runtime_region_summary(reference),
+                }));
+            }
+            DirectCodexUserContentPart::AgcAttachmentReference(reference) => {
+                input.push(serde_json::json!({
+                    "type": "text",
+                    "text": attachment_reference_summary(reference),
+                }));
+            }
+        }
+    }
+    Ok(Value::Array(input))
+}
+
 pub(crate) fn direct_codex_user_item_to_prompt(
    root: &Path,
    item: &DirectCodexUserItem,
@@ -130,7 +221,8 @@ pub(crate) fn direct_codex_user_item_to_prompt(

 #[cfg(test)]
 mod tests {
-    use super::direct_codex_user_item_to_response_item;
+    use super::{direct_codex_user_item_to_response_item, direct_codex_user_item_to_wire_input};
+    use crate::agent::direct_codex_user_item::model::DirectCodexUserItem;
    use serde_json::json;
    use std::path::Path;

@@ -174,4 +266,99 @@ mod tests {
        .expect_err("history item without type must fail");
        assert!(error.contains("缺少 type"), "{error}");
    }
+
+    #[test]
+    fn attachment_parts_remain_in_canonical_order_when_projected() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "wire-test", "wire 投影测试")
+            .expect("init project");
+        let item = json!({
+            "type": "message",
+            "role": "user",
+            "id": "turn-1:user",
+            "content": [
+                {"type": "input_text", "text": "先看"},
+                {"type": "agc_attachment_reference", "name": "notes.txt", "mediaType": "text/plain", "size": 4, "localPath": "assets/notes.txt", "status": "imported"}
+            ]
+        });
+        let projected = direct_codex_user_item_to_response_item(root.path(), &item)
+            .expect("user response item should project");
+        let content = projected["content"].as_array().expect("content array");
+        assert_eq!(content.len(), 2);
+        assert!(content[0]["text"].as_str().unwrap().contains("先看"));
+        assert!(content[1]["text"].as_str().unwrap().contains("notes.txt"));
+    }
+
+    #[test]
+    fn attachment_metadata_is_sanitized_before_prompt_projection() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "wire-test", "wire 投影测试")
+            .expect("init project");
+        let item = json!({
+            "type": "message",
+            "role": "user",
+            "id": "turn-1:user",
+            "content": [{
+                "type": "agc_attachment_reference",
+                "name": "C:\\tmp\\notes.md",
+                "mediaType": "text/plain",
+                "size": 4,
+                "localPath": "assets\\.\\notes.txt",
+                "status": "imported"
+            }]
+        });
+        let wire = super::direct_codex_user_item_to_wire_input(
+            root.path(),
+            &serde_json::from_value(item).expect("deserialize user item"),
+        )
+        .expect("attachment metadata should project");
+        let text = wire[0]["text"].as_str().expect("wire text");
+        assert!(text.contains("名称=notes.md"), "{text}");
+        assert!(text.contains("类型=text/plain"), "{text}");
+        assert!(text.contains("项目路径=assets/notes.txt"), "{text}");
+    }
+
+    #[test]
+    fn whitespace_only_text_parts_survive_validation() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "wire-test", "wire 投影测试")
+            .expect("init project");
+        let item: DirectCodexUserItem = serde_json::from_value(json!({
+            "type": "message",
+            "role": "user",
+            "id": "turn-1:user",
+            "content": [
+                {"type": "input_text", "text": "先看"},
+                {"type": "input_text", "text": "\n"},
+                {"type": "input_text", "text": "   "}
+            ]
+        }))
+        .expect("deserialize user item");
+        let wire = direct_codex_user_item_to_wire_input(root.path(), &item)
+            .expect("whitespace-only part next to real text must pass");
+        let parts = wire.as_array().expect("wire input array");
+        assert_eq!(parts.len(), 3);
+        assert_eq!(parts[1]["text"].as_str(), Some("\n"));
+        assert_eq!(parts[2]["text"].as_str(), Some("   "));
+    }
+
+    #[test]
+    fn all_blank_content_is_rejected() {
+        let root = tempfile::tempdir().expect("temp project");
+        crate::init_local_game_project_at(root.path(), "wire-test", "wire 投影测试")
+            .expect("init project");
+        let item: DirectCodexUserItem = serde_json::from_value(json!({
+            "type": "message",
+            "role": "user",
+            "id": "turn-1:user",
+            "content": [
+                {"type": "input_text", "text": "\n"},
+                {"type": "input_text", "text": "  "}
+            ]
+        }))
+        .expect("deserialize user item");
+        let error = direct_codex_user_item_to_wire_input(root.path(), &item)
+            .expect_err("all-blank content must fail closed");
+        assert!(error.contains("不能为空"), "{error}");
+    }
 }
@@ -31,10 +31,9 @@ pub(crate) fn normalize_direct_client_turn_id(
 pub(crate) async fn chat_with_game_creator_direct_codex(
    project_path: String,
    prompt: String,
-    mut user_item: DirectCodexUserItem,
+    user_item: DirectCodexUserItem,
    creation_type: Option<String>,
    client_turn_id: Option<String>,
-    attachments: Option<Vec<DirectCodexTurnAttachment>>,
 ) -> Result<String, String> {
    let root = Path::new(project_path.trim());
    let turn_id = normalize_direct_client_turn_id(client_turn_id.as_deref())?;
@@ -43,34 +42,9 @@ pub(crate) async fn chat_with_game_creator_direct_codex(
        redact_agent_runtime_error(root, &format!("恢复上一轮陶泥儿整包事务失败：{error}"), 500)
    })?;
    let turn_emitter = DirectGameCreatorTurnUpdateEmitter::new(root, turn_id.clone());
-    let mut audit = DirectCodexTurnAudit::start(
-        root,
-        &turn_id,
-        &prompt,
-        attachments.as_deref().unwrap_or_default(),
-    );
-    let attachments = attachments.unwrap_or_default();
-    if !attachments.is_empty() {
-        let attachment_context =
-            render_direct_codex_user_prompt("", &attachments).map_err(|error| {
-                audit.finish(false);
-                error
-            })?;
-        let DirectCodexUserItem::Message(message) = &mut user_item;
-        message.content.push(DirectCodexUserContentPart::InputText {
-            text: attachment_context,
-        });
-    }
-    validate_direct_codex_user_item(root, &user_item).map_err(|error| {
-        audit.finish(false);
-        error
-    })?;
-    let user_prompt = direct_codex_user_item_to_prompt(root, &user_item).map_err(|error| {
-        audit.finish(false);
-        error
-    })?;
+    validate_direct_codex_user_item(root, &user_item)?;
+    let user_prompt = direct_codex_user_item_to_prompt(root, &user_item)?;
    if user_prompt.trim().is_empty() {
-        audit.finish(false);
        return Err("聊天内容不能为空".to_string());
    }
    let canonical_user_item =
@@ -80,18 +54,15 @@ pub(crate) async fn chat_with_game_creator_direct_codex(
        &user_prompt,
        creation_type.as_deref(),
        Some(&turn_emitter),
-        Some(&mut audit),
+        // DirectProject 的完整回合权威已经落在 project.jsonl；不再创建平行审计日志。
+        None,
        canonical_user_item,
    )
    .await
    {
        Ok(reply) => reply,
-        Err(error) => {
-            audit.finish(false);
-            return Err(error);
-        }
+        Err(error) => return Err(error),
    };
-    audit.finish(true);
    turn_emitter.emit("completed", Some("none"), Some(reply.clone()), None);
    Ok(reply)
 }
@@ -1,6 +1,6 @@
 //! DirectProject 聊天事件的线上模型与投影。
 //!
-//! 前端消费的类型由 ts-rs 导出到 `src/features/project-workspace/generated/`，
+//! 前端消费的类型由 ts-rs 导出到 `src/view/project-development/chat/generated/`，
 //! 与 Rust 定义同源：加一个字段不会只改一边。
 //!
 //! 本模块只做三件事：挑字段、脱敏、截断。工具卡片的 `kind`、标题、折叠摘要、可见性与
@@ -29,7 +29,7 @@ const DIRECT_THREAD_PATH_MAX_CHARS: usize = 300;
 /// 一条文件变更。
 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectThreadFileChange {
    pub(crate) path: String,
    /// `add` | `update` | `delete`
@@ -45,7 +45,7 @@ pub(crate) struct DirectThreadFileChange {
 /// 而 Tauri 的 JSON 通道传过来的是 `number`，因此统一标 `#[ts(as = "f64")]` 对齐。
 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(tag = "itemType", rename_all_fields = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectThreadItem {
    #[serde(rename = "message")]
    Message {
@@ -162,7 +162,7 @@ impl DirectThreadItem {
 /// 增量正文属于哪类条目。
 #[derive(Clone, Copy, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase")]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectThreadDeltaKind {
    /// assistant 正文。
    Message,
@@ -173,7 +173,7 @@ pub(crate) enum DirectThreadDeltaKind {
 /// 审批 / 提问请求与解决：本轮只透传，不并入聊天状态。
 #[derive(Clone, Copy, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase")]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectThreadRequestKind {
    #[serde(rename = "approval.requested")]
    ApprovalRequested,
@@ -203,7 +203,7 @@ impl DirectThreadRequestKind {
 /// 生命周期事件在序列中的位置给出，`turn_id` 对前端没有任何额外信息。
 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(tag = "type", rename_all_fields = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) enum DirectThreadEvent {
    #[serde(rename = "turn.started")]
    TurnStarted,
@@ -283,7 +283,7 @@ impl DirectThreadEvent {

 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectThreadSubscriptionBootstrap {
    pub(crate) subscription_id: String,
    /// 首屏历史锚点：`project.jsonl` 里最后一条原始 item id。
@@ -295,14 +295,14 @@ pub(crate) struct DirectThreadSubscriptionBootstrap {

 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectThreadConsumeResult {
    pub(crate) events: Vec<DirectThreadEvent>,
 }

 #[derive(Clone, Debug, Eq, PartialEq, Serialize, Deserialize, TS)]
 #[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/features/project-workspace/generated/"))]
+#[ts(export, export_to = concat!(env!("CARGO_MANIFEST_DIR"), "/../src/view/project-development/chat/generated/"))]
 pub(crate) struct DirectThreadHistorySlice {
    /// 脱敏条目，顺序即文件顺序；与运行态事件里的条目同形。
    pub(crate) items: Vec<DirectThreadItem>,
@@ -1,4 +1,4 @@
-use serde::Deserialize;
+use serde::{Deserialize, Serialize};
 use sha2::{Digest, Sha256};
 use std::borrow::Cow;
 use std::collections::BTreeSet;
@@ -121,6 +121,13 @@ struct AgcSkillManifestEntry {
    sha256: String,
 }

+#[derive(Clone, Debug, Serialize)]
+#[serde(rename_all = "camelCase")]
+pub(crate) struct AgcSkillCatalogEntry {
+    pub(crate) name: String,
+    pub(crate) description: String,
+}
+
 fn is_safe_skill_relative_path(value: &str) -> bool {
    let path = Path::new(value);
    !value.is_empty()
@@ -234,6 +241,21 @@ pub(crate) fn agc_skill_pack_fingerprint() -> Result<String, String> {
    Ok(format!("{:x}", Sha256::digest(canonical_manifest.as_ref())))
 }

+/// 返回当前客户端随 AGC 一起启用的内置 Skill 候选。
+///
+/// 前端不得复制审核清单；Skill 名称和描述统一从经过校验的资源 manifest 派生。
+#[tauri::command]
+pub(crate) fn list_agc_skill_catalog() -> Result<Vec<AgcSkillCatalogEntry>, String> {
+    Ok(validated_skill_pack_manifest()?
+        .skills
+        .into_iter()
+        .map(|entry| AgcSkillCatalogEntry {
+            name: entry.name,
+            description: entry.purpose,
+        })
+        .collect())
+}
+
 pub(crate) fn render_agc_skill_pack_index() -> Result<String, String> {
    let manifest = validated_skill_pack_manifest()?;
    let mut lines = vec![format!(
@@ -328,6 +350,19 @@ mod tests {
        }
    }

+    #[test]
+    fn skill_catalog_is_derived_from_the_validated_manifest() {
+        let catalog = list_agc_skill_catalog().expect("skill catalog");
+        assert_eq!(catalog.len(), AGC_SKILL_PACK_EXPECTED_NAMES.len());
+        for expected_name in AGC_SKILL_PACK_EXPECTED_NAMES {
+            let entry = catalog
+                .iter()
+                .find(|entry| entry.name == expected_name)
+                .expect("expected bundled skill");
+            assert!(!entry.description.trim().is_empty());
+        }
+    }
+
    #[test]
    fn skill_content_digest_is_stable_across_lf_and_crlf() {
        fn digest(bytes: &[u8]) -> String {
@@ -2518,6 +2518,7 @@ fn main() {
            pick_client_extension_file,
            pick_client_extension_directory,
            list_client_extensions,
+            list_agc_skill_catalog,
            import_client_extension,
            set_client_extension_enabled,
            rename_client_extension,
@@ -2664,7 +2665,6 @@ fn main() {
            write_project_permission_policy,
            open_game_creator_workspace_window,
            open_game_creator_launcher_window,
-            open_project_supervisor_chat_window,
            start_local_game_preview,
            activate_local_game_preview,
            stop_local_game_preview,
@@ -451,18 +451,6 @@ fn dispatch_static_delegate_plain_repair(
    )
 }

-#[test]
-fn supervisor_chat_window_carries_encoded_project_path() {
-    assert_eq!(
-        supervisor_chat_window_url("/tmp/AI Game 项目").to_string(),
-        "index.html?supervisor-chat&projectPath=%2Ftmp%2FAI%20Game%20%E9%A1%B9%E7%9B%AE"
-    );
-    assert_eq!(
-        supervisor_chat_window_url("/tmp/a&b?#%+c").to_string(),
-        "index.html?supervisor-chat&projectPath=%2Ftmp%2Fa%26b%3F%23%25%2Bc"
-    );
-}
-
 #[test]
 fn project_supervisor_runtime_id_is_normalized_and_collected() {
    let root = unique_project_path();
@@ -119,13 +119,6 @@ pub(crate) fn launcher_window_url() -> tauri::WebviewUrl {
    tauri::WebviewUrl::App(PathBuf::from("index.html?launcher"))
 }

-pub(crate) fn supervisor_chat_window_url(project_path: &str) -> tauri::WebviewUrl {
-    tauri::WebviewUrl::App(PathBuf::from(format!(
-        "index.html?supervisor-chat&projectPath={}",
-        percent_encode_query_value(project_path)
-    )))
-}
-
 pub(crate) fn validate_workspace_window_project_path(project_path: &str) -> Result<&str, String> {
    let project_path = project_path.trim();
    if project_path.is_empty() {
@@ -193,52 +186,3 @@ pub(crate) fn open_game_creator_launcher_window(
    window.close().map_err(|error| error.to_string())?;
    Ok(())
 }
-
-#[tauri::command]
-pub(crate) fn open_project_supervisor_chat_window(
-    app: tauri::AppHandle,
-    project_path: String,
-) -> Result<(), String> {
-    let project_path = validate_workspace_window_project_path(&project_path)?;
-    #[cfg(not(debug_assertions))]
-    {
-        let _ = app;
-        let _ = project_path;
-        return Err("项目总控对话窗口仅在开发构建中可用".to_string());
-    }
-    #[cfg(debug_assertions)]
-    {
-        if let Some(existing) = app.get_webview_window("supervisor-chat") {
-            let mut current_url = existing.url().map_err(|error| error.to_string())?;
-            let current_project_path = current_url
-                .query_pairs()
-                .find_map(|(key, value)| (key == "projectPath").then(|| value.into_owned()));
-            if current_project_path.as_deref() != Some(project_path) {
-                current_url.set_query(Some(&format!(
-                    "supervisor-chat&projectPath={}",
-                    percent_encode_query_value(project_path)
-                )));
-                current_url.set_fragment(None);
-                existing
-                    .navigate(current_url)
-                    .map_err(|error| error.to_string())?;
-            }
-            existing.show().map_err(|error| error.to_string())?;
-            existing.unminimize().map_err(|error| error.to_string())?;
-            existing.set_focus().map_err(|error| error.to_string())?;
-            return Ok(());
-        }
-        tauri::WebviewWindowBuilder::new(
-            &app,
-            "supervisor-chat",
-            supervisor_chat_window_url(project_path),
-        )
-        .title("项目总控 Agent 对话")
-        .decorations(false)
-        .inner_size(820.0, 720.0)
-        .min_inner_size(560.0, 480.0)
-        .build()
-        .map_err(|error| error.to_string())?;
-        Ok(())
-    }
-}
@@ -9,24 +9,11 @@ export function createLocalProjectId(): string {
  return `local-project-${crypto.randomUUID()}`;
 }

-export const AGENT_RUN_HISTORY_MAX_COUNT = 100;
-export const AGENT_RUN_HISTORY_INITIAL_VISIBLE_COUNT = 20;
-export const AGENT_RUN_HISTORY_VISIBLE_STEP = 20;
 export const CONVERSATION_INITIAL_VISIBLE_COUNT = 20;
 export const CONVERSATION_VISIBLE_STEP = 20;
 /** 一次翻页操作最多连拉几页：见 ADR「分页锚点取原始条目 id」。 */
 export const DIRECT_HISTORY_MAX_PAGES_PER_ACTION = 5;
 export const AGENT_CHAT_SCROLL_BOTTOM_THRESHOLD = 48;
-export const PROJECT_SUPERVISOR_AGENT_ID = 'project-supervisor';
-/**
- * 立项策划链路的 run `source`。
- *
- * 这是全前端唯一的字面量出处：`AgentRuntimeState.source` 在类型上只是 `string`，
- * 改名不会有任何编译期提示，所以判据必须收敛到这一个常量上。`as const` 让它同时
- * 能充当 `ProjectSupervisorRuntimeSubmission['source']` 的成员。
- */
-export const PROJECT_SUPERVISOR_PLAN_SOURCE =
-  'project-supervisor-plan' as const;
 export const launcherNotifications: Array<{
  label: string;
  detail: string;
@@ -0,0 +1,22 @@
+/**
+ * 入口首轮需求的认领记录。
+ *
+ * 首页/立项链路把同一条首轮需求带进工作台，DirectProject 与立项策划是同一页面上的
+ * 不同入口；认领按页面保存并按「项目路径 + claimScope」去重，保证同一条需求只被一个
+ * 入口发出。
+ */
+const initialTurnClaimsByPage = new WeakMap<Window, Set<string>>();
+
+export function claimInitialTurnForPage(projectPath: string, scope = '') {
+  let claimedProjectPaths = initialTurnClaimsByPage.get(window);
+  if (!claimedProjectPaths) {
+    claimedProjectPaths = new Set<string>();
+    initialTurnClaimsByPage.set(window, claimedProjectPaths);
+  }
+  const claimKey = `${projectPath}\u0000${scope}`;
+  if (claimedProjectPaths.has(claimKey)) {
+    return false;
+  }
+  claimedProjectPaths.add(claimKey);
+  return true;
+}
@@ -0,0 +1,102 @@
+import { LexicalComposer } from '@lexical/react/LexicalComposer';
+import { useLexicalComposerContext } from '@lexical/react/LexicalComposerContext';
+import { ContentEditable } from '@lexical/react/LexicalContentEditable';
+import { LexicalErrorBoundary } from '@lexical/react/LexicalErrorBoundary';
+import { OnChangePlugin } from '@lexical/react/LexicalOnChangePlugin';
+import { RichTextPlugin } from '@lexical/react/LexicalRichTextPlugin';
+import {
+  COMMAND_PRIORITY_HIGH,
+  type EditorState,
+  KEY_ENTER_COMMAND,
+  type Klass,
+  type LexicalNode,
+} from 'lexical';
+import type { ReactElement, ReactNode, Ref } from 'react';
+import { useEffect } from 'react';
+
+type RichTextInputProps = {
+  namespace: string;
+  nodes: Klass<LexicalNode>[];
+  initialEditorState?: EditorState | null;
+  contentEditable?: ReactElement<typeof ContentEditable>;
+  placeholder?: ReactElement;
+  containerClassName?: string;
+  containerRef?: Ref<HTMLDivElement>;
+  disabled?: boolean;
+  onChange?: (editorState: EditorState) => void;
+  onEnter?: () => void;
+  children?: ReactNode;
+};
+
+function SubmitOnEnter({ onEnter }: { onEnter?: () => void }) {
+  const [editor] = useLexicalComposerContext();
+
+  useEffect(() => {
+    if (!onEnter) return undefined;
+    return editor.registerCommand(
+      KEY_ENTER_COMMAND,
+      (event) => {
+        if (!event || event.shiftKey || event.isComposing) return false;
+        event.preventDefault();
+        onEnter();
+        return true;
+      },
+      COMMAND_PRIORITY_HIGH,
+    );
+  }, [editor, onEnter]);
+
+  return null;
+}
+
+function SetEditorEditable({ disabled }: { disabled: boolean }) {
+  const [editor] = useLexicalComposerContext();
+
+  useEffect(() => {
+    editor.setEditable(!disabled);
+  }, [disabled, editor]);
+
+  return null;
+}
+
+export default function RichTextInput({
+  namespace,
+  nodes,
+  initialEditorState,
+  contentEditable = <ContentEditable />,
+  placeholder,
+  containerClassName,
+  containerRef,
+  disabled = false,
+  onChange,
+  onEnter,
+  children,
+}: RichTextInputProps) {
+  return (
+    <LexicalComposer
+      initialConfig={{
+        namespace,
+        nodes,
+        editorState: initialEditorState ?? undefined,
+        onError: (error) => {
+          throw error;
+        },
+      }}
+    >
+      <div
+        ref={containerRef}
+        className={containerClassName}
+        data-disabled={disabled ? 'true' : undefined}
+      >
+        <RichTextPlugin
+          contentEditable={contentEditable}
+          placeholder={placeholder}
+          ErrorBoundary={LexicalErrorBoundary}
+        />
+        {children}
+        <SetEditorEditable disabled={disabled} />
+        <SubmitOnEnter onEnter={onEnter} />
+        {onChange ? <OnChangePlugin onChange={onChange} /> : null}
+      </div>
+    </LexicalComposer>
+  );
+}
@@ -1,2 +1 @@
 export * from './model';
-export * from './panels';
--- a/Show More
+++ b/Show More