fix: build WP5-05 API workspace dependencies

TASK-WP5-05: build the API dependency closure before OpenAPI generation so asset-release-manifest declarations are available.

apps/api/package.json

@@ -11,12 +11,14 @@
   "dependencies": {
     "@dada/asset-release-manifest": "workspace:*",
     "@dada/shared-contracts": "workspace:*",
+    "@dada/static-sticker-catalog": "workspace:*",
     "@fastify/multipart": "10.1.0",
     "@fastify/swagger": "9.8.1",
     "@sinclair/typebox": "0.34.52",
     "better-sqlite3": "13.0.1",
     "drizzle-orm": "0.45.2",
-    "fastify": "5.10.0"
+    "fastify": "5.10.0",
+    "sharp": "0.35.3"
   },
   "devDependencies": {
     "@types/better-sqlite3": "7.6.13",

apps/api/src/app.ts

@@ -10,9 +10,6 @@ import {
   AccountProfileUpdateResponseSchema,
   AccountSettingsResponseSchema,
   AdminAuthenticatedUserSchema,
-  AdminGenerationRecordSchema,
-  AdminGenerationListResponseSchema,
-  AdminOverviewResponseSchema,
   AdminCreditParamsSchema,
   AdminLoginCompleteRequestSchema,
   AdminLoginCompleteResponseSchema,
@@ -63,10 +60,6 @@ import {
   ModelConfigUpdateRequestSchema,
   ModelParamsSchema,
   ModelConfigUpdateHeadersSchema,
-  PrivateContentGenerationParamsSchema,
-  PrivateContentNoticeAckRequestSchema,
-  PrivateContentNoticeAckResponseSchema,
-  PrivateContentPromptResponseSchema,
   FailedEmptyTrashRequestSchema,
   FailedEmptyTrashResponseSchema,
   ExportFormatSchema,
@@ -117,7 +110,6 @@ import {
   type BootstrapResponse,
   type AdminLoginCompleteRequest,
   type AdminLoginSendRequest,
-  type AdminOverviewResponse,
   type AccountDeletionCompleteRequest,
   type AccountProfileUpdateRequest,
   type AdminCreditParams,
@@ -186,7 +178,8 @@ import type { RecentAssetService } from "./recent-assets.js";
 import type { AmapAdapter } from "./amap-adapter.js";
 import { ModelConfigurationError } from "./model-configuration.js";
 import type { ModelConfigurationService } from "./model-configuration.js";
-import { PrivateContentError, PrivateContentService } from "./private-content.js";
+import { StickerReleaseError } from "./sticker-release-errors.js";
+import type { StickerReleaseService } from "./sticker-releases.js";
 
 const defaultBootstrap: BootstrapResponse = {
   app_version: "0.0.0",
@@ -201,7 +194,6 @@ const defaultBootstrap: BootstrapResponse = {
 };
 
 export interface CreateAppOptions {
-  adminOverview?: () => AdminOverviewResponse | Promise<AdminOverviewResponse>;
   amap?: AmapAdapter;
   assetReleases?: AssetReleaseReader;
   bootstrap?: () => BootstrapResponse | Promise<BootstrapResponse>;
@@ -228,8 +220,8 @@ export interface CreateAppOptions {
     releaseVersion: string;
     resourceId: string;
   }) => boolean | Promise<boolean>;
-  privateContent?: PrivateContentService;
   registration?: RegistrationService;
+  stickers?: StickerReleaseService;
 }
 
 const supportGateDirectory = resolve(process.env.DADA_SUPPORT_GATE_ROOT ?? "apps/web/support-gate");
@@ -385,6 +377,11 @@ function modelConfigurationFailure(reply: FastifyReply, correlationId: string, e
   return reply.code(status).send(createErrorEnvelope({ code: error.code, correlationId, details }));
 }
 
+function stickerReleaseFailure(reply: FastifyReply, correlationId: string, error: unknown) {
+  if (error instanceof StickerReleaseError) return reply.code(error.httpStatus).send(null);
+  return latestExportFailure(reply, correlationId, error);
+}
+
 function generationTaskResponse(task: GenerationTaskView) {
   return {
     confirmed_credit_cost: task.confirmedCreditCost,
@@ -648,13 +645,6 @@ function sendBrowserUnsupported(
 export async function createApp(options: CreateAppOptions = {}) {
   const eventHub = options.eventHub ?? new EventHub();
   const bootstrap = options.bootstrap ?? (() => defaultBootstrap);
-  const privateContent = options.privateContent ?? (options.registration
-    ? new PrivateContentService(
-      options.registration.database,
-      options.registration.options.currentPrivacyNoticeVersion,
-      options.registration.options.clock,
-    )
-    : undefined);
   const browserGate = options.browserGate ?? true;
   const browserSupportSecret = options.browserSupportSecret ?? randomBytes(32);
   const browserSupportRelease = options.browserSupportRelease;
@@ -706,13 +696,6 @@ export async function createApp(options: CreateAppOptions = {}) {
     AdminLoginCompleteRequestSchema,
     AdminLoginCompleteResponseSchema,
     AdminSessionResponseSchema,
-    AdminGenerationRecordSchema,
-    AdminGenerationListResponseSchema,
-    PrivateContentNoticeAckRequestSchema,
-    PrivateContentNoticeAckResponseSchema,
-    PrivateContentPromptResponseSchema,
-    PrivateContentGenerationParamsSchema,
-    AdminOverviewResponseSchema,
     CreditSummarySchema,
     CreditEntryTypeSchema,
     CreditEntryStatusSchema,
@@ -854,163 +837,130 @@ export async function createApp(options: CreateAppOptions = {}) {
     status: "ready",
   }));
 
-  const readAdminRequestSession = (request: { headers: Record<string, string | string[] | undefined> }) => {
+  app.get(
+    "/api/v1/static-stickers/current",
+    { schema: { hide: true } },
+    async (_request, reply) => {
+      if (!options.stickers) return reply.code(503).send();
+      reply.header("Cache-Control", "no-cache");
+      return options.stickers.listPublic();
+    },
+  );
+
+  app.get(
+    "/api/v1/static-stickers/:resourceVersion",
+    { schema: { hide: true } },
+    async (request, reply) => {
+      if (!options.stickers) return reply.code(404).send();
+      const { resourceVersion } = request.params as { resourceVersion: string };
+      const catalog = options.stickers.listPublic(resourceVersion);
+      if (!catalog.release_version) return reply.code(404).send();
+      reply.header("Cache-Control", "public, max-age=31536000, immutable");
+      return catalog;
+    },
+  );
+
+  app.get(
+    "/api/v1/admin/assets/static-stickers",
+    { schema: { hide: true } },
+    async (request, reply) => {
+      if (!options.registration || !options.stickers) {
+        return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
+      }
       const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
-    return token && options.registration ? options.registration.readAdminSession(token) : undefined;
+      const session = token ? options.registration.readAdminSession(token) : undefined;
-  };
+      if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
-  const privateContentNoticeRequired = (reply: FastifyReply, correlationId: string) => {
+      reply.header("Cache-Control", "private, no-store");
-    const notice = privateContent?.currentNotice();
+      return options.stickers.adminView();
-    return reply.code(428).send(createErrorEnvelope({
+    },
-      code: "PRIVATE_CONTENT_NOTICE_ACK_REQUIRED",
+  );
-      correlationId,
-      details: { latest_version: notice?.version ?? "" },
-    }));
-  };
 
   app.post(
-    "/api/v1/admin/private-content-notice/ack",
+    "/api/v1/admin/assets/static-stickers",
-    {
+    { schema: { hide: true } },
-      attachValidation: true,
-      schema: {
-        body: Type.Ref(PrivateContentNoticeAckRequestSchema),
-        headers: Type.Intersect([Type.Ref(CsrfHeadersSchema), Type.Ref(RegistrationCompleteHeadersSchema)]),
-        operationId: "ackPrivateContentNotice",
-        response: {
-          200: Type.Ref(PrivateContentNoticeAckResponseSchema),
-          400: Type.Ref(ErrorEnvelopeSchema),
-          401: Type.Ref(ErrorEnvelopeSchema),
-          403: Type.Ref(ErrorEnvelopeSchema),
-          428: Type.Ref(ErrorEnvelopeSchema),
-          503: Type.Ref(ErrorEnvelopeSchema),
-        },
-        tags: ["Admin Private Content"],
-      },
-    },
     async (request, reply) => {
-      if (request.validationError || !headerValue(request.headers["idempotency-key"])) {
+      if (!request.isMultipart()) return reply.code(400).send(null);
-        return reply.code(400).send(createErrorEnvelope({
+      if (!options.registration || !options.stickers) {
-          code: "REGISTRATION_REQUEST_INVALID",
+        return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
-          correlationId: request.id,
-          details: { field_errors: [{ field: "headers", message_key: "request.headers.invalid" }] },
-        }));
       }
-      if (!privateContent || !options.registration) return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
       const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
+      const idempotencyKey = headerValue(request.headers["idempotency-key"]);
+      const csrfToken = headerValue(request.headers["x-csrf-token"]);
       if (!token) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
+      if (!idempotencyKey || !/^[A-Za-z0-9_-]{32,200}$/.test(idempotencyKey)
+        || !csrfToken || !/^[A-Za-z0-9_-]{43,64}$/.test(csrfToken)) return reply.code(400).send(null);
       try {
-        const admin = options.registration.authorizeAdminMutation({
+        const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
-          csrfToken: headerValue(request.headers["x-csrf-token"]) ?? "",
+        const values = new Map<string, string>();
-          sessionToken: token,
+        const allowedFields = new Set(["enabled", "order", "original_byte_size", "original_sha256", "part", "stable_id"]);
+        let result: Awaited<ReturnType<StickerReleaseService["upload"]>> | undefined;
+        for await (const part of request.parts({ limits: { fileSize: 20 * 1024 * 1024, files: 1, fields: 8, parts: 9 } })) {
+          if (part.type === "field") {
+            if (result || !allowedFields.has(part.fieldname) || values.has(part.fieldname) || typeof part.value !== "string") throw new StickerReleaseError("sticker_upload_invalid");
+            values.set(part.fieldname, part.value);
+            continue;
+          }
+          if (result || part.fieldname !== "sticker_file" || !part.filename
+            || !new Set(["image/png", "image/webp"]).has(part.mimetype)) throw new StickerReleaseError("sticker_upload_invalid");
+          const stableId = values.get("stable_id");
+          const partValue = Number(values.get("part"));
+          const order = Number(values.get("order"));
+          const enabled = values.get("enabled");
+          const expectedByteSize = Number(values.get("original_byte_size"));
+          const expectedSha256 = values.get("original_sha256");
+          if (!stableId || !expectedSha256 || !new Set(["true", "false"]).has(enabled ?? "")) throw new StickerReleaseError("sticker_upload_invalid");
+          result = await options.stickers.upload({
+            actorId: admin.userId,
+            content: part.file,
+            enabled: enabled === "true",
+            expectedByteSize,
+            expectedMimeType: part.mimetype as "image/png" | "image/webp",
+            expectedSha256,
+            fileName: part.filename,
+            idempotencyKey,
+            order,
+            part: partValue,
+            stableId,
           });
-        const result = privateContent.acknowledge(admin.userId, (request.body as { expected_notice_version: string }).expected_notice_version);
+          if (part.file.truncated) throw new StickerReleaseError("sticker_upload_invalid");
-        return { acknowledged_at: result.acknowledgedAt, notice_version: result.noticeVersion, status: "acknowledged" as const };
+        }
+        if (!result) throw new StickerReleaseError("sticker_upload_invalid");
+        return reply.code(result.created ? 201 : 200).send(result);
       } catch (error) {
-        if (error instanceof RegistrationError) return registrationFailure(reply, request.id, error);
+        return error instanceof RegistrationError
-        if (error instanceof PrivateContentError && error.code === "notice_version_conflict") return privateContentNoticeRequired(reply, request.id);
+          ? registrationFailure(reply, request.id, error)
-        return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
+          : stickerReleaseFailure(reply, request.id, error);
       }
     },
   );
 
-  app.get(
+  app.patch(
-    "/api/v1/admin/generations",
+    "/api/v1/admin/assets/static-stickers/:stableId",
-    {
+    { schema: { hide: true } },
-      schema: {
-        operationId: "listAdminGenerations",
-        response: {
-          200: Type.Ref(AdminGenerationListResponseSchema),
-          401: Type.Ref(ErrorEnvelopeSchema),
-          428: Type.Ref(ErrorEnvelopeSchema),
-          503: Type.Ref(ErrorEnvelopeSchema),
-        },
-        tags: ["Admin Private Content"],
-      },
-    },
     async (request, reply) => {
-      if (!privateContent || !options.registration) return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
+      if (!options.registration || !options.stickers) {
-      const session = readAdminRequestSession(request);
-      if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
-      try {
-        privateContent.requireAcknowledgement(session.user_id);
-        return privateContent.listGenerations();
-      } catch (error) {
-        if (error instanceof PrivateContentError && error.code === "notice_required") return privateContentNoticeRequired(reply, request.id);
         return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
       }
-    },
+      const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
-  );
+      const csrfToken = headerValue(request.headers["x-csrf-token"]);
-
+      if (!token || !csrfToken) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
-  app.get(
-    "/api/v1/admin/private-content/generations/:generationId/prompt",
-    {
-      attachValidation: true,
-      schema: {
-        params: Type.Ref(PrivateContentGenerationParamsSchema),
-        operationId: "openAdminGenerationPrompt",
-        response: {
-          200: Type.Ref(PrivateContentPromptResponseSchema),
-          401: Type.Ref(ErrorEnvelopeSchema),
-          404: Type.Null(),
-          428: Type.Ref(ErrorEnvelopeSchema),
-          503: Type.Ref(ErrorEnvelopeSchema),
-        },
-        tags: ["Admin Private Content"],
-      },
-    },
-    async (request, reply) => {
-      if (request.validationError) return reply.code(404).send(null);
-      if (!privateContent || !options.registration) return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
-      const session = readAdminRequestSession(request);
-      if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
       try {
-        const generationId = (request.params as { generationId: string }).generationId;
+        const admin = options.registration.authorizeAdminMutation({ csrfToken, sessionToken: token });
-        const value = privateContent.readPrompt(session.user_id, generationId);
+        const body = request.body as { enabled?: boolean; order?: number; part?: number } | undefined;
-        reply.header("Cache-Control", "private, no-store");
+        if (!body || Object.keys(body).length === 0 || Object.keys(body).some((key) => !new Set(["enabled", "order", "part"]).has(key))) {
-        return { content_type: "prompt" as const, generation_id: value.generationId, prompt: value.prompt };
+          throw new StickerReleaseError("sticker_update_invalid");
-      } catch (error) {
-        if (error instanceof PrivateContentError && error.code === "notice_required") return privateContentNoticeRequired(reply, request.id);
-        if (error instanceof PrivateContentError && error.code === "not_found") return reply.code(404).send(null);
-        return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
         }
-    },
+        return options.stickers.update({
-  );
+          actorId: admin.userId,
-
+          ...(typeof body.enabled === "boolean" ? { enabled: body.enabled } : {}),
-  app.get(
+          ...(typeof body.order === "number" ? { order: body.order } : {}),
-    "/api/v1/admin/private-content/generations/:generationId/image",
+          ...(typeof body.part === "number" ? { part: body.part } : {}),
-    {
+          stableId: (request.params as { stableId: string }).stableId,
-      attachValidation: true,
+        });
-      schema: {
-        params: Type.Ref(PrivateContentGenerationParamsSchema),
-        operationId: "openAdminGenerationImage",
-        produces: ["application/octet-stream"],
-        response: {
-          200: Type.String({ format: "binary" }),
-          401: Type.Ref(ErrorEnvelopeSchema),
-          404: Type.Null(),
-          428: Type.Ref(ErrorEnvelopeSchema),
-          503: Type.Ref(ErrorEnvelopeSchema),
-        },
-        tags: ["Admin Private Content"],
-      },
-    },
-    async (request, reply) => {
-      if (request.validationError) return reply.code(404).send(null);
-      if (!privateContent || !options.registration || !options.latestExports) return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
-      const session = readAdminRequestSession(request);
-      if (!session) return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
-      try {
-        const generationId = (request.params as { generationId: string }).generationId;
-        const target = privateContent.readImageTarget(session.user_id, generationId);
-        const item = options.latestExports.getOriginal(target.ownerId, target.projectId, target.imageId);
-        const extension = item.mime_type === "image/jpeg" ? "jpg" : item.mime_type === "image/webp" ? "webp" : "png";
-        reply.header("Cache-Control", "private, no-store");
-        reply.header("Content-Disposition", `inline; filename="dada-generation.${extension}"`);
-        reply.type(item.mime_type);
-        return reply.send(createReadStream(item.path));
       } catch (error) {
-        if (error instanceof PrivateContentError && error.code === "notice_required") return privateContentNoticeRequired(reply, request.id);
+        return error instanceof RegistrationError
-        if (error instanceof PrivateContentError && error.code === "not_found") return reply.code(404).send(null);
+          ? registrationFailure(reply, request.id, error)
-        return latestExportFailure(reply, request.id, error);
+          : stickerReleaseFailure(reply, request.id, error);
       }
     },
   );
@@ -1036,6 +986,11 @@ export async function createApp(options: CreateAppOptions = {}) {
       const resource = assetId && resourceVersion
         ? options.assetReleases?.read("public_release_asset", resourceVersion, assetId)
           ?? options.publicAssets?.read(resourceVersion, assetId)
+          ?? options.stickers?.readPublicAsset(
+            resourceVersion,
+            assetId,
+            (request.query as { variant?: string }).variant === "thumbnail" ? "thumbnail" : "original",
+          )
         : undefined;
       if (!resource) return reply.code(404).send();
       reply.type(resource.mimeType);
@@ -1143,13 +1098,6 @@ export async function createApp(options: CreateAppOptions = {}) {
         })
         : false;
       if (userSession?.userId !== resource.ownerId && !controlledAdmin) return reply.code(404).send();
-      if (adminSession && controlledAdmin && privateContent) {
-        try {
-          privateContent.recordPrivateAssetAccess(adminSession.user_id, resource.ownerId, resource.resourceId);
-        } catch {
-          return reply.code(503).send(createErrorEnvelope({ code: "AUTH_SERVICE_UNAVAILABLE", correlationId: request.id }));
-        }
-      }
       reply.type(resource.mimeType);
       reply.header("Cache-Control", "private, no-store");
       reply.header("Content-Disposition", "inline");
@@ -1383,51 +1331,19 @@ export async function createApp(options: CreateAppOptions = {}) {
       if (!session) {
         return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
       }
-      const acknowledgement = privateContent?.readAcknowledgement(session.user_id);
-      const notice = privateContent?.currentNotice();
       return {
-        acknowledged_private_content_notice_version: acknowledgement?.version ?? null,
+        acknowledged_private_content_notice_version: null,
         admin: { role: "super_admin" as const, status: "active" as const, user_id: session.user_id },
         audience: "admin" as const,
         authenticated: true as const,
         csrf_token: options.registration.issueAdminCsrfToken(token!),
-        ...(notice ? { current_private_content_notice_message_key: notice.messageKey } : {}),
+        current_private_content_notice_version: null,
-        current_private_content_notice_version: notice?.version ?? null,
         expires_at: new Date(session.expires_at).toISOString(),
-        notice_acknowledged: notice ? acknowledgement?.version === notice.version : false,
+        notice_acknowledged: false,
       };
     },
   );
 
-  app.get(
-    "/api/v1/admin/overview",
-    {
-      schema: {
-        operationId: "getAdminOverview",
-        response: {
-          200: Type.Ref(AdminOverviewResponseSchema),
-          401: Type.Ref(ErrorEnvelopeSchema),
-          503: Type.Null(),
-        },
-        tags: ["Admin Operations"],
-      },
-    },
-    async (request, reply) => {
-      if (!options.registration) return reply.code(503).send(null);
-      const token = cookieValue(headerValue(request.headers.cookie), adminSessionCookieName);
-      const session = token ? options.registration.readAdminSession(token) : undefined;
-      if (!session) {
-        return reply.code(401).send(createErrorEnvelope({ code: "AUTH_SESSION_INVALID", correlationId: request.id }));
-      }
-      if (!options.adminOverview) return reply.code(503).send(null);
-      try {
-        return await options.adminOverview();
-      } catch {
-        return reply.code(503).send(null);
-      }
-    },
-  );
-
   app.post(
     "/api/v1/auth/login/send",
     {

apps/api/src/main.ts

@@ -18,6 +18,7 @@ import { StructuredJsonlLogger } from "./structured-log.js";
 import { attachApiSupervisorControl, initializeApiCredentialClients, receiveApiCredentials } from "./supervisor-channel.js";
 import { ModelConfigurationService } from "./model-configuration.js";
 import { MockAmapAdapter } from "./amap-adapter.js";
+import { StickerReleaseService } from "./sticker-releases.js";
 
 const credentialChannelEnabled = process.argv.includes("--dada-credential-stdin");
 let registration: RegistrationService | undefined;
@@ -27,6 +28,7 @@ let storage: ManagedStorage | undefined;
 let latestExports: LatestExportService | undefined;
 let models: ModelConfigurationService | undefined;
 let recentAssets: RecentAssetService | undefined;
+let stickers: StickerReleaseService | undefined;
 const instanceConfigPath = process.env.DADA_INSTANCE_CONFIG_PATH ?? defaultInstanceConfigPath();
 if (credentialChannelEnabled) {
   const clients = initializeApiCredentialClients(await receiveApiCredentials());
@@ -48,11 +50,14 @@ if (credentialChannelEnabled) {
     projects = new ProjectService({ databasePath });
     credits = new CreditService({ databasePath });
     storage = new ManagedStorage({ dataRoot, databasePath });
+    stickers = new StickerReleaseService({ databasePath, storage });
     latestExports = new LatestExportService({ databasePath, storage });
     models = new ModelConfigurationService({ database: registration.database });
     recentAssets = new RecentAssetService({ database: registration.database });
     registration.applySecureConfig(readSecureConfigCandidate(instanceConfigPath));
   } catch (error) {
+    stickers?.close();
+    stickers = undefined;
     latestExports?.close();
     latestExports = undefined;
     storage?.close();
@@ -79,6 +84,7 @@ const app = await createApp({
   ...(projects ? { projects } : {}),
   ...(registration ? { registration } : {}),
   ...(recentAssets ? { recentAssets } : {}),
+  ...(stickers ? { stickers } : {}),
 });
 
 await app.listen({
@@ -97,6 +103,7 @@ if (controlPipeIndex >= 0) {
     projects?.close();
     registration?.close();
     storage?.close();
+    stickers?.close();
   });
   try {
     const dataRoot = readConfiguredLocalDataRoot(instanceConfigPath);

apps/api/src/managed-storage.ts

@@ -496,9 +496,11 @@ export class ManagedStorage {
     }
   }
 
-  async stagePrivateImage(input: {
+  async stageManagedImage(input: {
     content: Readable;
     expectedMimeType: "image/png" | "image/jpeg" | "image/webp";
+    expectedSha256?: string;
+    fileKind: ManagedFileKind;
     fileName: string;
     maximumBytes: number;
     operationId: string;
@@ -509,7 +511,7 @@ export class ManagedStorage {
     const destination = this.destination({
       content: input.content,
       expectedMimeType: input.expectedMimeType,
-      fileKind: "reference",
+      fileKind: input.fileKind,
       fileName: input.fileName,
       operationId: input.operationId,
       ownerRef: input.ownerRef,
@@ -537,6 +539,8 @@ export class ManagedStorage {
       await pipeline(input.content, inspect, createWriteStream(stagingPath, { flags: "wx" }));
       validatePositiveBytes(byteSize, "actual_write_bytes");
       if (sniffMime(prefix) !== input.expectedMimeType) throw new Error("content_mime_invalid");
+      const sha256 = hash.digest("hex");
+      if (input.expectedSha256 && sha256.toLowerCase() !== input.expectedSha256.toLowerCase()) throw new Error("content_hash_invalid");
       const state = this.getState();
       const otherReservations = this.activeReservationBytes(input.operationId);
       if (state.managed_content_bytes + otherReservations + byteSize > HARD_LIMIT_BYTES) {
@@ -549,12 +553,12 @@ export class ManagedStorage {
         bytes: byteSize,
         destinationPath: destination.absolutePath,
         fileId,
-        fileKind: "reference",
+        fileKind: input.fileKind,
         mimeType: input.expectedMimeType,
         operationId: input.operationId,
         ownerRef: input.ownerRef,
         relativePath: destination.relativePath,
-        sha256: hash.digest("hex"),
+        sha256,
         stagingDirectory,
         stagingPath,
       };
@@ -565,6 +569,18 @@ export class ManagedStorage {
     }
   }
 
+  async stagePrivateImage(input: {
+    content: Readable;
+    expectedMimeType: "image/png" | "image/jpeg" | "image/webp";
+    fileName: string;
+    maximumBytes: number;
+    operationId: string;
+    ownerRef: string;
+    projectedWriteBytes: number;
+  }): Promise<StagedManagedFile> {
+    return this.stageManagedImage({ ...input, fileKind: "reference" });
+  }
+
   moveStagedFile(file: StagedManagedFile) {
     mkdirSync(dirname(file.destinationPath), { recursive: true });
     renameSync(file.stagingPath, file.destinationPath);

apps/api/src/private-content.ts

@@ -1,186 +0,0 @@
-import { randomUUID } from "node:crypto";
-import type BetterSqlite3 from "better-sqlite3";
-
-import { auditRetentionMilliseconds } from "./audit-policy.js";
-
-type GenerationStatus = "queued" | "running" | "succeeded" | "failed" | "rejected";
-
-export class PrivateContentError extends Error {
-  constructor(readonly code: "notice_required" | "notice_version_conflict" | "not_found") {
-    super(code);
-    this.name = "PrivateContentError";
-  }
-}
-
-function iso(value: number) {
-  return new Date(value).toISOString();
-}
-
-function isGenerationTablePresent(database: BetterSqlite3.Database) {
-  return Boolean(database.prepare(
-    "SELECT 1 AS present FROM sqlite_master WHERE type = 'table' AND name = 'generation_jobs'",
-  ).get());
-}
-
-export class PrivateContentService {
-  constructor(
-    readonly database: BetterSqlite3.Database,
-    readonly currentNoticeVersion: string,
-    private readonly clock: () => number = Date.now,
-  ) {}
-
-  currentNotice() {
-    return {
-      version: this.currentNoticeVersion,
-      messageKey: "admin.private_content.notice",
-    } as const;
-  }
-
-  readAcknowledgement(adminUserId: string) {
-    const row = this.database.prepare(`
-      SELECT private_content_notice_version, private_content_notice_acknowledged_at
-      FROM user_profiles WHERE user_id = ?
-    `).get(adminUserId) as { private_content_notice_version: string | null; private_content_notice_acknowledged_at: number | null } | undefined;
-    return {
-      version: row?.private_content_notice_version ?? null,
-      acknowledgedAt: row?.private_content_notice_acknowledged_at === null || row?.private_content_notice_acknowledged_at === undefined
-        ? null : iso(row.private_content_notice_acknowledged_at),
-    };
-  }
-
-  isAcknowledged(adminUserId: string) {
-    return this.readAcknowledgement(adminUserId).version === this.currentNoticeVersion;
-  }
-
-  requireAcknowledgement(adminUserId: string) {
-    if (!this.isAcknowledged(adminUserId)) throw new PrivateContentError("notice_required");
-  }
-
-  acknowledge(adminUserId: string, expectedNoticeVersion: string) {
-    const now = this.clock();
-    return this.database.transaction(() => {
-      if (expectedNoticeVersion !== this.currentNoticeVersion) {
-        throw new PrivateContentError("notice_version_conflict");
-      }
-      this.database.prepare(`
-        INSERT INTO user_profiles (
-          user_id, creator_name, social_id, private_content_notice_version,
-          private_content_notice_acknowledged_at
-        ) VALUES (?, '', '', ?, ?)
-        ON CONFLICT(user_id) DO UPDATE SET
-          private_content_notice_version = excluded.private_content_notice_version,
-          private_content_notice_acknowledged_at =
-            CASE WHEN user_profiles.private_content_notice_version = excluded.private_content_notice_version
-              THEN user_profiles.private_content_notice_acknowledged_at ELSE excluded.private_content_notice_acknowledged_at END
-      `).run(adminUserId, this.currentNoticeVersion, now);
-      const acknowledged = this.readAcknowledgement(adminUserId);
-      return {
-        noticeVersion: this.currentNoticeVersion,
-        acknowledgedAt: acknowledged.acknowledgedAt ?? iso(now),
-      };
-    })();
-  }
-
-  listGenerations() {
-    const generatedAt = iso(this.clock());
-    if (!isGenerationTablePresent(this.database)) return { generated_at: generatedAt, items: [] };
-    const rows = this.database.prepare(`
-      SELECT generation_id, owner_id, project_id, model_id, ratio, status,
-        confirmed_credit_cost, reserved_credits, final_credit_state,
-        error_category, created_at, updated_at
-      FROM generation_jobs
-      WHERE submission_ready = 1
-      ORDER BY created_at DESC, generation_id DESC
-      LIMIT 100
-    `).all() as Array<{
-      generation_id: string;
-      owner_id: string;
-      project_id: string;
-      model_id: string;
-      ratio: "3:4" | "1:1" | "4:3" | "9:16";
-      status: GenerationStatus;
-      confirmed_credit_cost: number;
-      reserved_credits: number;
-      final_credit_state: "committed" | "released" | null;
-      error_category: string | null;
-      created_at: number;
-      updated_at: number;
-    }>;
-    return {
-      generated_at: generatedAt,
-      items: rows.map((row) => {
-        const terminal = row.status === "succeeded" || row.status === "failed" || row.status === "rejected";
-        return {
-          generation_id: row.generation_id,
-          owner_ref: row.owner_id,
-          project_id: row.project_id,
-          model_id: row.model_id,
-          ratio: row.ratio,
-          status: row.status,
-          created_at: iso(row.created_at),
-          completed_at: terminal ? iso(row.updated_at) : null,
-          duration_ms: terminal ? Math.max(0, row.updated_at - row.created_at) : null,
-          confirmed_credit_cost: row.confirmed_credit_cost,
-          reserved_credits: row.reserved_credits,
-          final_credit_state: row.final_credit_state,
-          error_category: row.error_category,
-        };
-      }),
-    };
-  }
-
-  private generation(generationId: string) {
-    if (!isGenerationTablePresent(this.database)) throw new PrivateContentError("not_found");
-    const row = this.database.prepare(`
-      SELECT generation_id, owner_id, project_id
-      FROM generation_jobs WHERE generation_id = ? AND submission_ready = 1
-    `).get(generationId) as { generation_id: string; owner_id: string; project_id: string } | undefined;
-    if (!row) throw new PrivateContentError("not_found");
-    return row;
-  }
-
-  private recordAccess(input: { adminUserId: string; ownerId: string; generationId: string; contentType: "image" | "prompt" }) {
-    const now = this.clock();
-    // The insert is committed before the caller reads the private value. A failed
-    // constraint therefore cannot accidentally release a private response.
-    this.database.transaction(() => {
-      this.database.prepare(`
-        INSERT INTO private_content_access_logs (
-          log_id, actor_ref, subject_ref, target_ref, content_type, occurred_at, expires_at
-        ) VALUES (?, ?, ?, ?, ?, ?, ?)
-      `).run(
-        randomUUID(), input.adminUserId, input.ownerId, input.generationId,
-        input.contentType, now, now + auditRetentionMilliseconds,
-      );
-    })();
-  }
-
-  recordPrivateAssetAccess(adminUserId: string, ownerId: string, resourceId: string) {
-    this.recordAccess({ adminUserId, ownerId, generationId: resourceId, contentType: "image" });
-  }
-
-  readPrompt(adminUserId: string, generationId: string) {
-    this.requireAcknowledgement(adminUserId);
-    const row = this.generation(generationId);
-    this.recordAccess({ adminUserId, ownerId: row.owner_id, generationId: row.generation_id, contentType: "prompt" });
-    const content = this.database.prepare(
-      "SELECT prompt FROM generation_jobs WHERE generation_id = ? AND submission_ready = 1",
-    ).get(row.generation_id) as { prompt: string } | undefined;
-    if (!content) throw new PrivateContentError("not_found");
-    return { generationId: row.generation_id, prompt: content.prompt };
-  }
-
-  readImageTarget(adminUserId: string, generationId: string) {
-    this.requireAcknowledgement(adminUserId);
-    const row = this.database.prepare(`
-      SELECT g.generation_id, g.owner_id, g.project_id, pi.image_id
-      FROM generation_jobs g
-      JOIN project_images pi ON pi.project_id = g.project_id AND pi.generation_id = g.generation_id
-      WHERE g.generation_id = ? AND g.status = 'succeeded'
-      ORDER BY pi.created_at DESC LIMIT 1
-    `).get(generationId) as { generation_id: string; owner_id: string; project_id: string; image_id: string } | undefined;
-    if (!row) throw new PrivateContentError("not_found");
-    this.recordAccess({ adminUserId, ownerId: row.owner_id, generationId: row.generation_id, contentType: "image" });
-    return { projectId: row.project_id, imageId: row.image_id, ownerId: row.owner_id };
-  }
-}

apps/api/src/sticker-release-errors.ts

@@ -0,0 +1,8 @@
+export class StickerReleaseError extends Error {
+  readonly httpStatus: number;
+
+  constructor(readonly reason: string, httpStatus = 400) {
+    super(reason);
+    this.httpStatus = httpStatus;
+  }
+}

apps/api/src/sticker-releases.ts

@@ -0,0 +1,527 @@
+import { createHash, randomUUID } from "node:crypto";
+import { readFileSync } from "node:fs";
+import { createRequire } from "node:module";
+import { basename, extname } from "node:path";
+import { Readable } from "node:stream";
+
+import type BetterSqlite3 from "better-sqlite3";
+import sharp, { type Metadata } from "sharp";
+
+import type { StaticStickerCatalogItem } from "@dada/static-sticker-catalog";
+
+import { ManagedStorage, type StagedManagedFile } from "./managed-storage.js";
+import { StickerReleaseError } from "./sticker-release-errors.js";
+import { classifyCapacity } from "./storage-policy.js";
+
+export { StickerReleaseError } from "./sticker-release-errors.js";
+
+const require = createRequire(import.meta.url);
+const Database = require("better-sqlite3") as typeof BetterSqlite3;
+const stableIdPattern = /^STK([0-9]{4,})$/;
+const idempotencyPattern = /^[A-Za-z0-9_-]{32,200}$/;
+const sha256Pattern = /^[0-9a-f]{64}$/i;
+const maximumOriginalBytes = 20 * 1024 * 1024;
+const maximumDimension = 8_192;
+const bundledPartCounts = [203, 36, 27, 48, 38, 75, 37, 67, 48, 24, 40, 30, 27, 51, 62, 19, 36, 45, 92, 53, 69, 31, 36, 30, 183] as const;
+
+type StickerMime = "image/png" | "image/webp";
+type StickerVariant = "original" | "thumbnail";
+
+interface StickerItemRow {
+  enabled: 0 | 1;
+  height: number;
+  mime_type: StickerMime;
+  order_index: number;
+  original_byte_size: number;
+  original_file_id: string;
+  original_filename: string;
+  original_relative_path: string;
+  original_sha256: string;
+  part: number;
+  release_version: string;
+  stable_id: string;
+  thumbnail_byte_size: number;
+  thumbnail_file_id: string;
+  thumbnail_relative_path: string;
+  thumbnail_sha256: string;
+  width: number;
+}
+
+export interface StickerUploadInput {
+  actorId: string;
+  content: Readable;
+  enabled: boolean;
+  expectedByteSize: number;
+  expectedMimeType: StickerMime;
+  expectedSha256: string;
+  fileName: string;
+  idempotencyKey: string;
+  order: number;
+  part: number;
+  stableId: string;
+}
+
+function digest(value: string) {
+  return createHash("sha256").update(value, "utf8").digest("hex");
+}
+
+function stableJson(value: unknown): string {
+  if (Array.isArray(value)) return `[${value.map(stableJson).join(",")}]`;
+  if (value && typeof value === "object") {
+    return `{${Object.entries(value).sort(([left], [right]) => left.localeCompare(right)).map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`).join(",")}}`;
+  }
+  return JSON.stringify(value);
+}
+
+function iso(timestamp: number) {
+  return new Date(timestamp).toISOString();
+}
+
+function itemView(row: StickerItemRow): StaticStickerCatalogItem {
+  const originalReference = `/api/v1/assets/public/${encodeURIComponent(row.release_version)}/${encodeURIComponent(row.stable_id)}`;
+  return {
+    enabled: row.enabled === 1,
+    height: row.height,
+    mime: row.mime_type,
+    mime_type: row.mime_type,
+    order: row.order_index,
+    original_filename: row.original_filename,
+    original_reference: originalReference,
+    origin: "admin_uploaded",
+    part: row.part,
+    relative_path: `static-stickers/${row.stable_id}${row.mime_type === "image/png" ? ".png" : ".webp"}`,
+    resource_version: row.release_version,
+    sha256: row.original_sha256,
+    stable_id: row.stable_id,
+    thumbnail_reference: {
+      media: "thumbnail",
+      resource_id: row.stable_id,
+      resource_version: row.release_version,
+      url: `${originalReference}?variant=thumbnail`,
+    },
+    width: row.width,
+  };
+}
+
+export class StickerReleaseService {
+  private readonly clock: () => number;
+  private readonly database: BetterSqlite3.Database;
+  private readonly storage: ManagedStorage;
+
+  constructor(input: { clock?: () => number; databasePath: string; storage: ManagedStorage }) {
+    this.clock = input.clock ?? Date.now;
+    const nativeBinding = process.env.DADA_SQLITE_NATIVE_BINDING;
+    this.database = new Database(input.databasePath, nativeBinding ? { nativeBinding } : undefined);
+    this.database.pragma("journal_mode = WAL");
+    this.database.pragma("foreign_keys = ON");
+    this.database.pragma("busy_timeout = 5000");
+    this.storage = input.storage;
+    this.migrate();
+  }
+
+  close() {
+    this.database.close();
+  }
+
+  async upload(input: StickerUploadInput) {
+    this.validateUpload(input);
+    const requestHash = digest(stableJson({
+      enabled: input.enabled,
+      expected_byte_size: input.expectedByteSize,
+      expected_mime_type: input.expectedMimeType,
+      expected_sha256: input.expectedSha256.toLowerCase(),
+      order: input.order,
+      part: input.part,
+      stable_id: input.stableId,
+    }));
+    const keyDigest = digest(input.idempotencyKey);
+    const receipt = this.database.prepare(`
+      SELECT request_hash, release_version FROM sticker_upload_receipts
+      WHERE actor_id = ? AND idempotency_key_digest = ?
+    `).get(input.actorId, keyDigest) as { release_version: string; request_hash: string } | undefined;
+    if (receipt) {
+      input.content.destroy();
+      if (receipt.request_hash !== requestHash) throw new StickerReleaseError("sticker_idempotency_conflict", 409);
+      return this.uploadResult(receipt.release_version, input.stableId, false);
+    }
+    this.assertNewPosition(input.stableId, input.part, input.order);
+
+    const staged: StagedManagedFile[] = [];
+    try {
+      const original = await this.storage.stageManagedImage({
+        content: input.content,
+        expectedMimeType: input.expectedMimeType,
+        expectedSha256: input.expectedSha256,
+        fileKind: "sticker_original",
+        fileName: `${input.stableId}${input.expectedMimeType === "image/png" ? ".png" : ".webp"}`,
+        maximumBytes: maximumOriginalBytes,
+        operationId: randomUUID(),
+        ownerRef: input.actorId,
+        projectedWriteBytes: input.expectedByteSize,
+      });
+      staged.push(original);
+      if (original.bytes !== input.expectedByteSize) throw new StickerReleaseError("content_size_invalid");
+
+      let metadata: Metadata;
+      let thumbnail: Buffer;
+      const decoder = sharp(readFileSync(original.stagingPath), { failOn: "warning", limitInputPixels: maximumDimension * maximumDimension });
+      try {
+        metadata = await decoder.metadata();
+        if (metadata.format !== (input.expectedMimeType === "image/png" ? "png" : "webp")
+          || !metadata.width || !metadata.height || metadata.width > maximumDimension || metadata.height > maximumDimension) {
+          throw new Error("content_decode_invalid");
+        }
+        thumbnail = await decoder
+          .rotate()
+          .resize({ fit: "inside", height: 256, width: 256, withoutEnlargement: true })
+          .png({ adaptiveFiltering: true, compressionLevel: 9 })
+          .toBuffer();
+      } catch {
+        throw new StickerReleaseError("content_decode_invalid");
+      } finally {
+        decoder.destroy();
+      }
+
+      const thumbnailStaged = await this.storage.stageManagedImage({
+        content: Readable.from(thumbnail),
+        expectedMimeType: "image/png",
+        fileKind: "sticker_thumbnail",
+        fileName: `${input.stableId}-thumbnail.png`,
+        maximumBytes: maximumOriginalBytes,
+        operationId: randomUUID(),
+        ownerRef: input.actorId,
+        projectedWriteBytes: thumbnail.byteLength,
+      });
+      staged.push(thumbnailStaged);
+      const releaseVersion = this.immediate(() => this.commitUpload({
+        ...input,
+        height: metadata.height!,
+        keyDigest,
+        original,
+        requestHash,
+        thumbnail: thumbnailStaged,
+        width: metadata.width!,
+      }));
+      return this.uploadResult(releaseVersion, input.stableId, true);
+    } catch (error) {
+      for (const file of staged) this.storage.abandonStagedFile(file);
+      if (!(error instanceof StickerReleaseError) && error instanceof Error
+        && new Set(["content_hash_invalid", "content_mime_invalid", "content_size_invalid", "file_name_invalid"]).has(error.message)) {
+        throw new StickerReleaseError("sticker_upload_invalid");
+      }
+      throw error;
+    }
+  }
+
+  update(input: { actorId: string; enabled?: boolean; order?: number; part?: number; stableId: string }) {
+    const current = this.currentVersion();
+    if (!current) throw new StickerReleaseError("sticker_not_found", 404);
+    const existing = this.readItem(current, input.stableId);
+    if (!existing) throw new StickerReleaseError("sticker_not_found", 404);
+    const part = input.part ?? existing.part;
+    const order = input.order ?? existing.order_index;
+    this.validatePosition(input.stableId, part, order);
+    const releaseVersion = this.immediate(() => {
+      const version = this.nextReleaseVersion();
+      this.copyRelease(current, version);
+      const conflict = this.database.prepare(`
+        SELECT stable_id FROM sticker_release_items
+        WHERE release_version = ? AND part = ? AND order_index = ? AND stable_id <> ?
+      `).get(version, part, order, input.stableId);
+      if (conflict) throw new StickerReleaseError("sticker_order_conflict", 409);
+      this.database.prepare(`
+        UPDATE sticker_release_items SET enabled = ?, part = ?, order_index = ?
+        WHERE release_version = ? AND stable_id = ?
+      `).run((input.enabled ?? existing.enabled === 1) ? 1 : 0, part, order, version, input.stableId);
+      this.finalizeRelease(version, current, input.actorId);
+      return version;
+    });
+    return { item: itemView(this.readItem(releaseVersion, input.stableId)!), release_version: releaseVersion };
+  }
+
+  listPublic(releaseVersion = this.currentVersion()) {
+    if (!releaseVersion) return { count: 0, items: [], release_version: null };
+    const exists = this.database.prepare("SELECT 1 FROM sticker_releases WHERE release_version = ?").get(releaseVersion);
+    if (!exists) return { count: 0, items: [], release_version: null };
+    const items = (this.database.prepare(`
+      SELECT * FROM sticker_release_items WHERE release_version = ? AND enabled = 1
+      ORDER BY part, order_index, stable_id
+    `).all(releaseVersion) as StickerItemRow[]).map(itemView);
+    return { count: items.length, items, release_version: releaseVersion };
+  }
+
+  adminView() {
+    const releaseVersion = this.currentVersion();
+    const items = releaseVersion
+      ? (this.database.prepare("SELECT * FROM sticker_release_items WHERE release_version = ? ORDER BY part, order_index, stable_id").all(releaseVersion) as StickerItemRow[])
+      : [];
+    return {
+      count: items.length,
+      items: items.map((row) => ({
+        ...itemView(row),
+        file_state: "committed" as const,
+        original_byte_size: row.original_byte_size,
+        thumbnail_byte_size: row.thumbnail_byte_size,
+      })),
+      release_version: releaseVersion,
+      storage: this.storage.getState(),
+    };
+  }
+
+  readPublicAsset(releaseVersion: string, stableId: string, variant: StickerVariant) {
+    const row = this.readItem(releaseVersion, stableId);
+    if (!row || row.enabled !== 1) return undefined;
+    const fileId = variant === "thumbnail" ? row.thumbnail_file_id : row.original_file_id;
+    const path = this.storage.resolveManagedFile(fileId);
+    if (!path) return undefined;
+    return {
+      bytes: readFileSync(path),
+      mimeType: variant === "thumbnail" ? "image/png" as const : row.mime_type,
+      sha256: variant === "thumbnail" ? row.thumbnail_sha256 : row.original_sha256,
+    };
+  }
+
+  inspectCounts() {
+    const count = (table: string) => (this.database.prepare(`SELECT COUNT(*) AS count FROM ${table}`).get() as { count: number }).count;
+    return { items: count("sticker_release_items"), releases: count("sticker_releases"), upload_receipts: count("sticker_upload_receipts") };
+  }
+
+  private uploadResult(releaseVersion: string, stableId: string, created: boolean) {
+    const row = this.readItem(releaseVersion, stableId);
+    if (!row) throw new StickerReleaseError("sticker_not_found", 404);
+    return {
+      created,
+      item: itemView(row),
+      original: { byte_size: row.original_byte_size, file_id: row.original_file_id, sha256: row.original_sha256 },
+      release_version: releaseVersion,
+      thumbnail: { byte_size: row.thumbnail_byte_size, file_id: row.thumbnail_file_id, sha256: row.thumbnail_sha256 },
+    };
+  }
+
+  private commitUpload(input: StickerUploadInput & {
+    height: number;
+    keyDigest: string;
+    original: StagedManagedFile;
+    requestHash: string;
+    thumbnail: StagedManagedFile;
+    width: number;
+  }) {
+    this.assertNewPosition(input.stableId, input.part, input.order);
+    const previous = this.currentVersion();
+    const releaseVersion = this.nextReleaseVersion();
+    if (previous) this.copyRelease(previous, releaseVersion);
+    for (const file of [input.original, input.thumbnail]) {
+      this.storage.moveStagedFile(file);
+      this.database.prepare(`
+        INSERT INTO managed_files (file_id, file_kind, owner_ref, relative_path, byte_size, mime_type, sha256, status, created_at)
+        VALUES (?, ?, ?, ?, ?, ?, ?, 'committed', ?)
+      `).run(file.fileId, file.fileKind, file.ownerRef, file.relativePath, file.bytes, file.mimeType, file.sha256, iso(this.clock()));
+    }
+    this.database.prepare(`
+      INSERT INTO sticker_release_items (
+        release_version, stable_id, part, order_index, original_filename, original_relative_path,
+        width, height, mime_type, original_sha256, original_file_id, original_byte_size,
+        thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
+      ) VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)
+    `).run(
+      releaseVersion, input.stableId, input.part, input.order, input.fileName, input.original.relativePath,
+      input.width, input.height, input.expectedMimeType, input.original.sha256, input.original.fileId, input.original.bytes,
+      input.thumbnail.fileId, input.thumbnail.relativePath, input.thumbnail.sha256, input.thumbnail.bytes, input.enabled ? 1 : 0,
+    );
+    this.consumeStagedStorage([input.original, input.thumbnail]);
+    this.database.prepare(`
+      INSERT INTO sticker_upload_receipts (actor_id, idempotency_key_digest, request_hash, release_version, stable_id, created_at)
+      VALUES (?, ?, ?, ?, ?, ?)
+    `).run(input.actorId, input.keyDigest, input.requestHash, releaseVersion, input.stableId, iso(this.clock()));
+    this.finalizeRelease(releaseVersion, previous, input.actorId);
+    return releaseVersion;
+  }
+
+  private finalizeRelease(releaseVersion: string, previous: string | null, actorId: string) {
+    const rows = this.database.prepare(`
+      SELECT stable_id, part, order_index, original_sha256, thumbnail_sha256, enabled
+      FROM sticker_release_items WHERE release_version = ? ORDER BY stable_id
+    `).all(releaseVersion);
+    const manifestSha256 = digest(stableJson(rows));
+    this.database.prepare(`
+      INSERT INTO sticker_releases (release_version, previous_release_version, manifest_sha256, published_at, published_by)
+      VALUES (?, ?, ?, ?, ?)
+    `).run(releaseVersion, previous, manifestSha256, iso(this.clock()), actorId);
+    this.database.prepare(`
+      INSERT INTO current_sticker_release (singleton, release_version) VALUES (1, ?)
+      ON CONFLICT(singleton) DO UPDATE SET release_version = excluded.release_version
+    `).run(releaseVersion);
+    const files = this.database.prepare(`
+      SELECT original_file_id AS file_id FROM sticker_release_items WHERE release_version = ?
+      UNION SELECT thumbnail_file_id AS file_id FROM sticker_release_items WHERE release_version = ?
+    `).all(releaseVersion, releaseVersion) as Array<{ file_id: string }>;
+    for (const file of files) {
+      this.database.prepare(`
+        INSERT INTO project_asset_refs (reference_id, managed_file_id, reference_type, created_at)
+        VALUES (?, ?, 'release', ?)
+      `).run(`release:${releaseVersion}:${file.file_id}`, file.file_id, iso(this.clock()));
+    }
+  }
+
+  private copyRelease(from: string, to: string) {
+    this.database.prepare(`
+      INSERT INTO sticker_release_items (
+        release_version, stable_id, part, order_index, original_filename, original_relative_path,
+        width, height, mime_type, original_sha256, original_file_id, original_byte_size,
+        thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
+      )
+      SELECT ?, stable_id, part, order_index, original_filename, original_relative_path,
+        width, height, mime_type, original_sha256, original_file_id, original_byte_size,
+        thumbnail_file_id, thumbnail_relative_path, thumbnail_sha256, thumbnail_byte_size, enabled
+      FROM sticker_release_items WHERE release_version = ?
+    `).run(to, from);
+  }
+
+  private consumeStagedStorage(files: StagedManagedFile[]) {
+    const timestamp = iso(this.clock());
+    for (const file of files) {
+      this.database.prepare(`
+        UPDATE storage_reservations SET status = 'consumed', resolved_at = ?
+        WHERE operation_id = ? AND status = 'active'
+      `).run(timestamp, file.operationId);
+    }
+    const total = files.reduce((sum, file) => sum + file.bytes, 0);
+    const state = this.database.prepare("SELECT managed_content_bytes FROM local_backend_storage_state WHERE singleton = 1").get() as { managed_content_bytes: number };
+    const active = this.database.prepare("SELECT COALESCE(SUM(projected_bytes), 0) AS bytes FROM storage_reservations WHERE status = 'active'").get() as { bytes: number };
+    const nextBytes = state.managed_content_bytes + total;
+    const classification = classifyCapacity(nextBytes, active.bytes);
+    this.database.prepare(`
+      UPDATE local_backend_storage_state
+      SET managed_content_bytes = ?, capacity_notice_level = ?, storage_status = ?, measured_at = ?, version = version + 1
+      WHERE singleton = 1
+    `).run(nextBytes, classification.capacity_notice_level, classification.storage_status, timestamp);
+  }
+
+  private currentVersion() {
+    return (this.database.prepare("SELECT release_version FROM current_sticker_release WHERE singleton = 1").get() as { release_version: string } | undefined)?.release_version ?? null;
+  }
+
+  private nextReleaseVersion() {
+    const date = new Date(this.clock()).toISOString().slice(0, 10).replaceAll("-", "");
+    const row = this.database.prepare("SELECT next_sequence FROM sticker_release_sequences WHERE release_date = ?").get(date) as { next_sequence: number } | undefined;
+    const sequence = row?.next_sequence ?? 1;
+    this.database.prepare(`
+      INSERT INTO sticker_release_sequences (release_date, next_sequence) VALUES (?, ?)
+      ON CONFLICT(release_date) DO UPDATE SET next_sequence = excluded.next_sequence
+    `).run(date, sequence + 1);
+    return `asset-${date}.${sequence}`;
+  }
+
+  private readItem(releaseVersion: string, stableId: string) {
+    return this.database.prepare("SELECT * FROM sticker_release_items WHERE release_version = ? AND stable_id = ?")
+      .get(releaseVersion, stableId) as StickerItemRow | undefined;
+  }
+
+  private assertNewPosition(stableId: string, part: number, order: number) {
+    this.validatePosition(stableId, part, order);
+    const current = this.currentVersion();
+    if (!current) return;
+    if (this.readItem(current, stableId)) throw new StickerReleaseError("sticker_stable_id_conflict", 409);
+    const conflict = this.database.prepare(`
+      SELECT stable_id FROM sticker_release_items WHERE release_version = ? AND part = ? AND order_index = ?
+    `).get(current, part, order);
+    if (conflict) throw new StickerReleaseError("sticker_order_conflict", 409);
+  }
+
+  private validatePosition(stableId: string, part: number, order: number) {
+    const matched = stableId.match(stableIdPattern);
+    const numericId = matched ? Number(matched[1]) : Number.NaN;
+    if (!matched || !Number.isSafeInteger(numericId) || numericId <= 1_407) throw new StickerReleaseError("sticker_stable_id_invalid");
+    if (!Number.isSafeInteger(part) || part < 1 || part > bundledPartCounts.length
+      || !Number.isSafeInteger(order) || order <= bundledPartCounts[part - 1]!) {
+      throw new StickerReleaseError("sticker_part_order_invalid");
+    }
+  }
+
+  private validateUpload(input: StickerUploadInput) {
+    this.validatePosition(input.stableId, input.part, input.order);
+    if (!/^[0-9a-f-]{36}$/i.test(input.actorId) || !idempotencyPattern.test(input.idempotencyKey)
+      || !sha256Pattern.test(input.expectedSha256) || !Number.isSafeInteger(input.expectedByteSize)
+      || input.expectedByteSize <= 0 || input.expectedByteSize > maximumOriginalBytes
+      || !new Set(["image/png", "image/webp"]).has(input.expectedMimeType)) {
+      throw new StickerReleaseError("sticker_upload_invalid");
+    }
+    const expectedExtension = input.expectedMimeType === "image/png" ? ".png" : ".webp";
+    if (input.fileName.length > 255 || basename(input.fileName) !== input.fileName || /[\u0000-\u001f]/.test(input.fileName)
+      || extname(input.fileName).toLowerCase() !== expectedExtension) throw new StickerReleaseError("sticker_upload_invalid");
+  }
+
+  private immediate<T>(action: () => T) {
+    this.database.exec("BEGIN IMMEDIATE");
+    try {
+      const result = action();
+      this.database.exec("COMMIT");
+      return result;
+    } catch (error) {
+      if (this.database.inTransaction) this.database.exec("ROLLBACK");
+      throw error;
+    }
+  }
+
+  private migrate() {
+    this.database.exec(`
+      CREATE TABLE IF NOT EXISTS sticker_release_sequences (
+        release_date TEXT PRIMARY KEY,
+        next_sequence INTEGER NOT NULL CHECK (next_sequence >= 1)
+      );
+      CREATE TABLE IF NOT EXISTS sticker_releases (
+        release_version TEXT PRIMARY KEY,
+        previous_release_version TEXT,
+        manifest_sha256 TEXT NOT NULL CHECK (length(manifest_sha256) = 64),
+        published_at TEXT NOT NULL,
+        published_by TEXT NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS sticker_release_items (
+        release_version TEXT NOT NULL,
+        stable_id TEXT NOT NULL,
+        part INTEGER NOT NULL CHECK (part BETWEEN 1 AND 25),
+        order_index INTEGER NOT NULL CHECK (order_index > 0),
+        original_filename TEXT NOT NULL,
+        original_relative_path TEXT NOT NULL,
+        width INTEGER NOT NULL CHECK (width > 0),
+        height INTEGER NOT NULL CHECK (height > 0),
+        mime_type TEXT NOT NULL CHECK (mime_type IN ('image/png', 'image/webp')),
+        original_sha256 TEXT NOT NULL CHECK (length(original_sha256) = 64),
+        original_file_id TEXT NOT NULL REFERENCES managed_files(file_id),
+        original_byte_size INTEGER NOT NULL CHECK (original_byte_size > 0),
+        thumbnail_file_id TEXT NOT NULL REFERENCES managed_files(file_id),
+        thumbnail_relative_path TEXT NOT NULL,
+        thumbnail_sha256 TEXT NOT NULL CHECK (length(thumbnail_sha256) = 64),
+        thumbnail_byte_size INTEGER NOT NULL CHECK (thumbnail_byte_size > 0),
+        enabled INTEGER NOT NULL CHECK (enabled IN (0, 1)),
+        PRIMARY KEY (release_version, stable_id),
+        UNIQUE (release_version, part, order_index)
+      );
+      CREATE TABLE IF NOT EXISTS current_sticker_release (
+        singleton INTEGER PRIMARY KEY CHECK (singleton = 1),
+        release_version TEXT NOT NULL
+      );
+      CREATE TABLE IF NOT EXISTS sticker_upload_receipts (
+        actor_id TEXT NOT NULL,
+        idempotency_key_digest TEXT NOT NULL CHECK (length(idempotency_key_digest) = 64),
+        request_hash TEXT NOT NULL CHECK (length(request_hash) = 64),
+        release_version TEXT NOT NULL,
+        stable_id TEXT NOT NULL,
+        created_at TEXT NOT NULL,
+        PRIMARY KEY (actor_id, idempotency_key_digest)
+      );
+      CREATE TRIGGER IF NOT EXISTS sticker_releases_no_update
+      BEFORE UPDATE ON sticker_releases BEGIN SELECT RAISE(ABORT, 'sticker_releases_immutable'); END;
+      CREATE TRIGGER IF NOT EXISTS sticker_releases_no_delete
+      BEFORE DELETE ON sticker_releases BEGIN SELECT RAISE(ABORT, 'sticker_releases_immutable'); END;
+      CREATE TRIGGER IF NOT EXISTS sticker_release_items_no_update
+      BEFORE UPDATE ON sticker_release_items
+      WHEN EXISTS (SELECT 1 FROM sticker_releases WHERE release_version = OLD.release_version)
+      BEGIN SELECT RAISE(ABORT, 'sticker_release_items_immutable'); END;
+      CREATE TRIGGER IF NOT EXISTS sticker_release_items_no_delete
+      BEFORE DELETE ON sticker_release_items
+      WHEN EXISTS (SELECT 1 FROM sticker_releases WHERE release_version = OLD.release_version)
+      BEGIN SELECT RAISE(ABORT, 'sticker_release_items_immutable'); END;
+    `);
+  }
+}

apps/web/src/admin-assets.css

@@ -0,0 +1,71 @@
+.admin-assets-page { min-height: 100vh; color: #111111; background: #f6f6f4; }
+.admin-assets-page > main { width: min(1360px, calc(100% - 64px)); margin: 0 auto; padding: 36px 0 80px; }
+.admin-assets-heading { display: flex; align-items: end; justify-content: space-between; gap: 24px; padding-bottom: 18px; border-bottom: 1px solid #999993; }
+.admin-assets-heading p { margin: 0 0 4px; font: 700 11px Consolas, monospace; }
+.admin-assets-heading h1 { margin: 0; font-size: 34px; }
+.admin-assets-heading > strong { font: 700 13px Consolas, monospace; }
+.admin-assets-summary { display: grid; grid-template-columns: repeat(3, minmax(0, 1fr)); margin: 22px 0; border-block: 1px solid #8c8c86; background: #ffffff; }
+.admin-assets-summary > span { display: grid; min-width: 0; gap: 6px; padding: 17px 18px; border-right: 1px solid #c1c1ba; color: #65655f; font-size: 12px; }
+.admin-assets-summary > span:last-child { border-right: 0; }
+.admin-assets-summary strong { color: #111111; font-size: 15px; overflow-wrap: anywhere; }
+.admin-assets-summary .is-active { color: #1f6639; }
+.admin-assets-summary .is-full,
+.admin-assets-summary .is-unavailable { color: #9b2c23; }
+.admin-assets-upload,
+.admin-assets-list { margin-top: 22px; border-block: 1px solid #8c8c86; background: #ffffff; }
+.admin-assets-upload > header,
+.admin-assets-list > header { display: flex; align-items: center; justify-content: space-between; min-height: 54px; padding: 0 16px; border-bottom: 1px solid #c1c1ba; background: #e7e7e2; }
+.admin-assets-upload h2,
+.admin-assets-list h2 { margin: 0; font-size: 16px; }
+.admin-assets-upload header span,
+.admin-assets-list header span { font: 700 11px Consolas, monospace; }
+.admin-assets-form { display: grid; grid-template-columns: minmax(230px, 2fr) minmax(130px, 1fr) 84px 92px 130px auto; align-items: end; gap: 12px; padding: 18px 16px; }
+.admin-assets-form label { display: grid; gap: 6px; min-width: 0; color: #4c4c47; font-size: 11px; font-weight: 800; }
+.admin-assets-form input { width: 100%; min-height: 40px; padding: 7px 9px; border: 1px solid #777770; border-radius: 0; background: #ffffff; }
+.admin-assets-form input[type="file"] { padding: 7px; }
+.admin-assets-form .admin-assets-enabled { display: flex; min-height: 40px; align-items: center; gap: 8px; color: #111111; }
+.admin-assets-enabled input { width: 18px; min-height: 18px; }
+.admin-assets-form button,
+.admin-assets-alert button { min-height: 42px; padding: 9px 14px; border: 1px solid #111111; border-radius: 0; background: #f2f500; font-weight: 900; }
+.admin-assets-form button:disabled { color: #777770; background: #dfdfda; cursor: not-allowed; }
+.admin-assets-blocked { margin: 0; padding: 12px 16px; border-top: 1px solid #e2b8b3; color: #812219; background: #fff1ef; font-weight: 700; }
+.admin-assets-table-wrap { overflow-x: auto; }
+.admin-assets-table-wrap table { width: 100%; min-width: 1120px; border-collapse: collapse; table-layout: fixed; }
+.admin-assets-table-wrap th,
+.admin-assets-table-wrap td { padding: 12px 10px; border-right: 1px solid #d0d0ca; border-bottom: 1px solid #d0d0ca; text-align: left; vertical-align: middle; font-size: 12px; }
+.admin-assets-table-wrap thead th { background: #f1f1ed; font-weight: 900; }
+.admin-assets-table-wrap th:first-child { width: 78px; }
+.admin-assets-table-wrap th:nth-child(2) { width: 150px; }
+.admin-assets-table-wrap th:nth-child(3) { width: 140px; }
+.admin-assets-table-wrap th:nth-child(4) { width: 210px; }
+.admin-assets-table-wrap th:nth-child(5) { width: 92px; }
+.admin-assets-table-wrap th:nth-child(6),
+.admin-assets-table-wrap th:nth-child(7) { width: 92px; }
+.admin-assets-table-wrap th:last-child { width: 180px; }
+.admin-assets-table-wrap img { display: block; width: 48px; height: 48px; object-fit: contain; border: 1px solid #c1c1ba; background: #f6f6f4; }
+.admin-assets-table-wrap strong,
+.admin-assets-table-wrap small { display: block; }
+.admin-assets-table-wrap small { margin-top: 4px; color: #65655f; font-size: 10px; overflow-wrap: anywhere; }
+.admin-assets-table-wrap input[type="number"] { width: 70px; min-height: 34px; margin-top: 5px; padding: 5px 7px; border: 1px solid #777770; border-radius: 0; }
+.admin-assets-table-wrap td:last-child { display: flex; gap: 6px; }
+.admin-assets-table-wrap button { min-height: 34px; padding: 6px 8px; border: 1px solid #555550; border-radius: 0; background: #ffffff; font-weight: 800; }
+.admin-assets-table-wrap button:disabled { color: #8a8a84; background: #ecece8; }
+.admin-assets-table-wrap .is-enabled { color: #1f6639; font-weight: 800; }
+.admin-assets-table-wrap .is-disabled { color: #812219; font-weight: 800; }
+.admin-assets-empty { margin: 0; padding: 34px 16px; color: #65655f; }
+.admin-assets-notice { margin: 16px 0 0; padding: 13px 16px; border-left: 4px solid #287b45; background: #edf8f0; font-weight: 800; }
+.admin-assets-alert { display: flex; align-items: center; justify-content: space-between; gap: 16px; margin-top: 24px; padding: 16px; border-left: 5px solid #d14a3b; background: #fff1ef; }
+.admin-assets-loading { display: grid; gap: 10px; margin-top: 24px; }
+.admin-assets-loading span { display: block; height: 62px; background: #dfdfda; }
+@media (max-width: 900px) {
+  .admin-assets-page > main { width: 100%; padding-right: 16px; padding-left: 16px; }
+  .admin-assets-summary { grid-template-columns: 1fr; }
+  .admin-assets-summary > span { border-right: 0; border-bottom: 1px solid #c1c1ba; }
+  .admin-assets-form { grid-template-columns: 1fr 1fr; }
+}
+@media (max-width: 580px) {
+  .admin-product-header { padding: 0 12px; overflow-x: auto; }
+  .admin-product-header nav a { min-width: 66px; }
+  .admin-assets-form { grid-template-columns: 1fr; }
+  .admin-assets-heading { align-items: start; flex-direction: column; }
+}

apps/web/src/admin-assets.tsx

@@ -0,0 +1,191 @@
+import { useEffect, useMemo, useState } from "react";
+
+import "./admin-assets.css";
+
+interface AdminSession { csrf_token: string }
+interface StorageState {
+  capacity_notice_level: "normal" | "warning" | "critical";
+  hard_limit_bytes: number;
+  managed_content_bytes: number;
+  storage_status: "active" | "full" | "unavailable";
+}
+interface AdminSticker {
+  enabled: boolean;
+  file_state: "committed";
+  height: number;
+  mime_type: "image/png" | "image/webp";
+  order: number;
+  original_byte_size: number;
+  original_filename: string;
+  part: number;
+  resource_version: string;
+  stable_id: string;
+  thumbnail_byte_size: number;
+  thumbnail_reference: { url: string };
+  width: number;
+}
+interface AdminAssetsResponse {
+  count: number;
+  items: AdminSticker[];
+  release_version: string | null;
+  storage: StorageState;
+}
+
+function idempotencyKey() {
+  return crypto.randomUUID().replaceAll("-", "") + crypto.randomUUID().replaceAll("-", "");
+}
+
+function bytesLabel(bytes: number) {
+  return new Intl.NumberFormat("zh-CN", { maximumFractionDigits: 2, minimumFractionDigits: 2 }).format(bytes / (1024 ** 3));
+}
+
+async function loadJson<T>(url: string, init?: RequestInit) {
+  const response = await fetch(url, { credentials: "same-origin", ...init });
+  const body = response.headers.get("content-type")?.includes("application/json") ? await response.json() as T : undefined;
+  return { body, response };
+}
+
+export function AdminAssetsPage() {
+  const [session, setSession] = useState<AdminSession>();
+  const [assets, setAssets] = useState<AdminAssetsResponse>();
+  const [loadingFailed, setLoadingFailed] = useState(false);
+  const [busy, setBusy] = useState(false);
+  const [notice, setNotice] = useState("");
+  const [file, setFile] = useState<File>();
+  const [stableId, setStableId] = useState("STK1408");
+  const [part, setPart] = useState(25);
+  const [order, setOrder] = useState(184);
+  const [enabled, setEnabled] = useState(true);
+  const [orderDrafts, setOrderDrafts] = useState<Record<string, number>>({});
+
+  async function load() {
+    setLoadingFailed(false);
+    try {
+      const [sessionResult, assetsResult] = await Promise.all([
+        loadJson<AdminSession>("/api/v1/admin-auth/session"),
+        loadJson<AdminAssetsResponse>("/api/v1/admin/assets/static-stickers"),
+      ]);
+      if (!sessionResult.response.ok || !assetsResult.response.ok || !sessionResult.body || !assetsResult.body) throw new Error("load_failed");
+      setSession(sessionResult.body);
+      setAssets(assetsResult.body);
+      setOrderDrafts(Object.fromEntries(assetsResult.body.items.map((item) => [item.stable_id, item.order])));
+      const numericIds = assetsResult.body.items.map((item) => Number(item.stable_id.slice(3))).filter(Number.isFinite);
+      setStableId(`STK${Math.max(1407, ...numericIds) + 1}`);
+      setOrder(Math.max(183, ...assetsResult.body.items.filter((item) => item.part === 25).map((item) => item.order)) + 1);
+      setNotice("");
+    } catch {
+      setLoadingFailed(true);
+    }
+  }
+
+  useEffect(() => { void load(); }, []);
+
+  const uploadBlocked = !assets || assets.storage.storage_status !== "active";
+  const formValid = useMemo(() => Boolean(
+    file && /^(image\/png|image\/webp)$/.test(file.type) && /^STK[0-9]{4,}$/.test(stableId)
+      && Number.isSafeInteger(part) && part >= 1 && part <= 25 && Number.isSafeInteger(order) && order > 0,
+  ), [file, order, part, stableId]);
+
+  async function upload() {
+    if (!file || !session || !formValid || uploadBlocked || busy) return;
+    setBusy(true);
+    setNotice("");
+    try {
+      const sha256 = Array.from(new Uint8Array(await crypto.subtle.digest("SHA-256", await file.arrayBuffer())))
+        .map((byte) => byte.toString(16).padStart(2, "0")).join("");
+      const form = new FormData();
+      form.append("stable_id", stableId);
+      form.append("part", String(part));
+      form.append("order", String(order));
+      form.append("enabled", String(enabled));
+      form.append("original_byte_size", String(file.size));
+      form.append("original_sha256", sha256);
+      form.append("sticker_file", file, file.name);
+      const response = await fetch("/api/v1/admin/assets/static-stickers", {
+        body: form,
+        credentials: "same-origin",
+        headers: { "Idempotency-Key": idempotencyKey(), "X-CSRF-Token": session.csrf_token },
+        method: "POST",
+      });
+      if (!response.ok) {
+        setNotice(response.status === 507 ? "存储容量已满或暂不可用，未写入任何文件。" : response.status === 409 ? "稳定 ID 或 part 顺序已存在。" : "文件格式、内容或字段校验未通过。");
+        return;
+      }
+      setFile(undefined);
+      await load();
+      setNotice("贴纸已生成缩略图并发布新资源版本。");
+    } catch {
+      setNotice("上传未完成，未发布新资源版本。");
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  async function update(item: AdminSticker, change: { enabled?: boolean; order?: number }) {
+    if (!session || busy) return;
+    setBusy(true);
+    setNotice("");
+    try {
+      const { response } = await loadJson(`/api/v1/admin/assets/static-stickers/${encodeURIComponent(item.stable_id)}`, {
+        body: JSON.stringify(change),
+        headers: { "Content-Type": "application/json", "X-CSRF-Token": session.csrf_token },
+        method: "PATCH",
+      });
+      if (!response.ok) throw new Error("update_failed");
+      await load();
+      setNotice(change.enabled === false ? "贴纸已停用，新项目目录不再显示。" : change.enabled === true ? "贴纸已重新启用。" : "part 顺序已发布到新资源版本。");
+    } catch {
+      setNotice("素材状态未更新。");
+    } finally {
+      setBusy(false);
+    }
+  }
+
+  return <div className="admin-assets-page">
+    <header className="admin-product-header">
+      <a href="/admin">DADA ADMIN</a>
+      <nav aria-label="后台导航"><a href="/admin/users">用户</a><a href="/admin/models">模型</a><a aria-current="page" href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
+    </header>
+    <main>
+      <header className="admin-assets-heading"><div><p>ASSET OPERATIONS</p><h1>普通贴纸</h1></div><strong>{assets?.release_version ?? "尚未发布"}</strong></header>
+      {!assets && !loadingFailed ? <div aria-label="贴纸素材加载中" className="admin-assets-loading"><span /><span /><span /></div> : null}
+      {loadingFailed ? <p className="admin-assets-alert" role="alert">素材状态暂时无法读取。<button onClick={() => void load()} type="button">重试</button></p> : null}
+      {assets ? <>
+        <div className="admin-assets-summary" aria-label="素材存储摘要">
+          <span>后台贴纸<strong>{assets.count}</strong></span>
+          <span>受管内容<strong>{bytesLabel(assets.storage.managed_content_bytes)} / {bytesLabel(assets.storage.hard_limit_bytes)} GB</strong></span>
+          <span>存储状态<strong className={`is-${assets.storage.storage_status}`}>{assets.storage.storage_status}</strong></span>
+        </div>
+        <section className="admin-assets-upload" aria-labelledby="asset-upload-title">
+          <header><h2 id="asset-upload-title">上传并发布</h2><span>PNG / WebP</span></header>
+          <div className="admin-assets-form">
+            <label>文件<input accept="image/png,image/webp" aria-label="贴纸文件" disabled={uploadBlocked || busy} key={file?.name ?? "empty"} onChange={(event) => setFile(event.target.files?.[0])} type="file" /></label>
+            <label>稳定 ID<input aria-label="稳定 ID" disabled={uploadBlocked || busy} onChange={(event) => setStableId(event.target.value.toUpperCase())} value={stableId} /></label>
+            <label>Part<input aria-label="Part" disabled={uploadBlocked || busy} max="25" min="1" onChange={(event) => setPart(Number(event.target.value))} type="number" value={part} /></label>
+            <label>顺序<input aria-label="顺序" disabled={uploadBlocked || busy} min="1" onChange={(event) => setOrder(Number(event.target.value))} type="number" value={order} /></label>
+            <label className="admin-assets-enabled"><input checked={enabled} disabled={uploadBlocked || busy} onChange={(event) => setEnabled(event.target.checked)} type="checkbox" />发布后启用</label>
+            <button disabled={!formValid || uploadBlocked || busy} onClick={() => void upload()} type="button">{busy ? "处理中" : "上传并发布"}</button>
+          </div>
+          {uploadBlocked ? <p className="admin-assets-blocked" role="status">当前存储状态禁止新增原图和缩略图。</p> : null}
+        </section>
+        <section className="admin-assets-list" aria-labelledby="asset-list-title">
+          <header><h2 id="asset-list-title">当前版本</h2><span>{assets.count} 项</span></header>
+          {assets.items.length === 0 ? <p className="admin-assets-empty">当前没有后台上传的普通贴纸。</p> : <div className="admin-assets-table-wrap"><table>
+            <thead><tr><th>预览</th><th>稳定 ID</th><th>Part / 顺序</th><th>原文件</th><th>尺寸</th><th>文件状态</th><th>发布状态</th><th>操作</th></tr></thead>
+            <tbody>{assets.items.map((item) => <tr key={item.stable_id}>
+              <td><img alt="" src={item.thumbnail_reference.url} /></td>
+              <th scope="row"><strong>{item.stable_id}</strong><small>{item.resource_version}</small></th>
+              <td><span>part{item.part}</span><input aria-label={`${item.stable_id} 顺序`} min="1" onChange={(event) => setOrderDrafts((current) => ({ ...current, [item.stable_id]: Number(event.target.value) }))} type="number" value={orderDrafts[item.stable_id] ?? item.order} /></td>
+              <td><span>{item.original_filename}</span><small>{item.mime_type} · {item.original_byte_size.toLocaleString("zh-CN")} B</small></td>
+              <td>{item.width} x {item.height}</td>
+              <td>{item.file_state}</td>
+              <td><span className={item.enabled ? "is-enabled" : "is-disabled"}>{item.enabled ? "已启用" : "已停用"}</span></td>
+              <td><button disabled={busy || (orderDrafts[item.stable_id] ?? item.order) === item.order} onClick={() => void update(item, { order: orderDrafts[item.stable_id] ?? item.order })} type="button">更新顺序</button><button disabled={busy} onClick={() => void update(item, { enabled: !item.enabled })} type="button">{item.enabled ? "停用" : "启用"}</button></td>
+            </tr>)}</tbody>
+          </table></div>}
+        </section>
+        {notice ? <p className="admin-assets-notice" role="status">{notice}</p> : null}
+      </> : null}
+    </main>
+  </div>;
+}

apps/web/src/admin-generations.css

@@ -1,24 +0,0 @@
-.admin-generations { display: grid; gap: 20px; }
-.admin-generations-refresh { align-self: start; }
-.admin-generations-notice-panel { display: grid; gap: 14px; max-width: 760px; padding: 24px; border: 1px solid #d5b36a; background: #fffaf0; }
-.admin-generations-notice-panel p { margin: 0; }
-.admin-generations-notice-panel button { justify-self: start; }
-.admin-generations-error, .admin-generations-notice { padding: 12px 16px; border: 1px solid #d46a6a; background: #fff4f4; }
-.admin-generations-error button { margin-left: 12px; }
-.admin-generations-table-wrap { overflow-x: auto; border: 1px solid #d9dde5; background: #fff; }
-.admin-generations-table-wrap table { width: 100%; min-width: 1050px; border-collapse: collapse; }
-.admin-generations-table-wrap th, .admin-generations-table-wrap td { padding: 12px 14px; border-bottom: 1px solid #e9ebef; text-align: left; vertical-align: top; }
-.admin-generations-table-wrap th { background: #f5f6f8; color: #4d5664; font-size: 12px; }
-.admin-generations-table-wrap small { color: #6c7481; }
-.admin-generations-status { display: inline-block; padding: 3px 7px; border-radius: 4px; background: #edf0f4; }
-.admin-generations-status.is-succeeded { color: #23623d; background: #e6f4ea; }
-.admin-generations-status.is-failed, .admin-generations-status.is-rejected { color: #8b2b2b; background: #fff0f0; }
-.admin-generations-status.is-running { color: #7a5a10; background: #fff5d8; }
-.admin-generations-actions { display: grid; gap: 8px; min-width: 190px; }
-.admin-generations-actions button { white-space: normal; }
-.admin-generations-empty { margin: 0; padding: 28px; color: #6c7481; }
-.admin-generations-opened { display: grid; gap: 10px; padding: 18px; border: 1px solid #cbd2dd; background: #fff; }
-.admin-generations-opened header { display: flex; align-items: center; justify-content: space-between; }
-.admin-generations-opened h3 { margin: 0; }
-.admin-generations-opened pre { max-height: 360px; overflow: auto; margin: 0; padding: 14px; white-space: pre-wrap; background: #f6f7f9; }
-.admin-generations-opened img { max-width: 100%; max-height: 620px; object-fit: contain; }

apps/web/src/admin-generations.tsx

@@ -1,156 +0,0 @@
-import { useEffect, useState } from "react";
-
-import "./admin-generations.css";
-
-interface AdminSession {
-  acknowledged_private_content_notice_version: string | null;
-  current_private_content_notice_version: string | null;
-  csrf_token: string;
-  notice_acknowledged: boolean;
-}
-
-interface GenerationRecord {
-  generation_id: string;
-  owner_ref: string;
-  project_id: string;
-  model_id: string;
-  ratio: string;
-  status: "queued" | "running" | "succeeded" | "failed" | "rejected";
-  created_at: string;
-  completed_at: string | null;
-  duration_ms: number | null;
-  confirmed_credit_cost: number;
-  reserved_credits: number;
-  final_credit_state: "committed" | "released" | null;
-  error_category: string | null;
-}
-
-interface GenerationResponse { generated_at: string; items: GenerationRecord[] }
-interface OpenedPrompt { generation_id: string; prompt: string }
-
-function idempotencyKey() {
-  return `${crypto.randomUUID().replaceAll("-", "")}${crypto.randomUUID().replaceAll("-", "")}`;
-}
-
-function compactId(value: string) { return `${value.slice(0, 8)}...${value.slice(-4)}`; }
-function formatTime(value: string | null) { return value ? new Intl.DateTimeFormat("zh-CN", { dateStyle: "short", timeStyle: "medium" }).format(new Date(value)) : "未完成"; }
-function statusLabel(value: GenerationRecord["status"]) { return { queued: "排队", running: "运行中", succeeded: "成功", failed: "失败", rejected: "已拒绝" }[value]; }
-
-export function AdminGenerationsPage() {
-  const [session, setSession] = useState<AdminSession>();
-  const [records, setRecords] = useState<GenerationRecord[]>([]);
-  const [loading, setLoading] = useState(true);
-  const [failed, setFailed] = useState(false);
-  const [acknowledging, setAcknowledging] = useState(false);
-  const [notice, setNotice] = useState("");
-  const [openedPrompt, setOpenedPrompt] = useState<OpenedPrompt>();
-  const [openedImage, setOpenedImage] = useState<{ generationId: string; url: string }>();
-
-  async function load() {
-    setLoading(true);
-    setFailed(false);
-    try {
-      const sessionResponse = await fetch("/api/v1/admin-auth/session", { credentials: "same-origin" });
-      if (sessionResponse.status === 401) throw new Error("session_invalid");
-      if (!sessionResponse.ok) throw new Error("session_unavailable");
-      const current = await sessionResponse.json() as AdminSession;
-      setSession(current);
-      setNotice("");
-      if (!current.notice_acknowledged) {
-        setRecords([]);
-        return;
-      }
-      const listResponse = await fetch("/api/v1/admin/generations", { credentials: "same-origin" });
-      if (!listResponse.ok) throw new Error("generation_list_unavailable");
-      setRecords((await listResponse.json() as GenerationResponse).items);
-    } catch {
-      setFailed(true);
-    } finally {
-      setLoading(false);
-    }
-  }
-
-  useEffect(() => { void load(); }, []);
-  useEffect(() => () => { if (openedImage) URL.revokeObjectURL(openedImage.url); }, [openedImage]);
-
-  async function acknowledge() {
-    if (!session?.current_private_content_notice_version || acknowledging) return;
-    setAcknowledging(true);
-    setNotice("");
-    try {
-      const response = await fetch("/api/v1/admin/private-content-notice/ack", {
-        body: JSON.stringify({ expected_notice_version: session.current_private_content_notice_version }),
-        credentials: "same-origin",
-        headers: { "Content-Type": "application/json", "Idempotency-Key": idempotencyKey(), "X-CSRF-Token": session.csrf_token },
-        method: "POST",
-      });
-      if (!response.ok) throw new Error("notice_ack_failed");
-      await load();
-    } catch {
-      setNotice("告知版本已变化或确认未完成，请重新读取。 ");
-    } finally {
-      setAcknowledging(false);
-    }
-  }
-
-  async function openPrompt(generationId: string) {
-    setNotice("");
-    try {
-      const response = await fetch(`/api/v1/admin/private-content/generations/${generationId}/prompt`, { credentials: "same-origin" });
-      if (!response.ok) throw new Error("prompt_unavailable");
-      setOpenedPrompt(await response.json() as OpenedPrompt);
-    } catch {
-      setNotice("内容读取未完成，访问审计未成功时不会返回内容。 ");
-    }
-  }
-
-  async function openImage(generationId: string) {
-    setNotice("");
-    try {
-      const response = await fetch(`/api/v1/admin/private-content/generations/${generationId}/image`, { credentials: "same-origin" });
-      if (!response.ok) throw new Error("image_unavailable");
-      const url = URL.createObjectURL(await response.blob());
-      setOpenedImage((previous) => {
-        if (previous) URL.revokeObjectURL(previous.url);
-        return { generationId, url };
-      });
-    } catch {
-      setNotice("内容读取未完成，访问审计未成功时不会返回内容。 ");
-    }
-  }
-
-  return (
-    <main className="admin-generations" id="admin-main">
-      <header className="admin-page-heading"><div><p>OPERATIONS / GENERATION RECORDS</p><h2>生成记录</h2></div><button className="admin-generations-refresh" onClick={() => void load()} type="button">重新读取</button></header>
-      {loading ? <p aria-live="polite">正在读取生成记录</p> : null}
-      {failed ? <div className="admin-generations-error" role="alert">后台生成记录暂时无法读取。<button onClick={() => void load()} type="button">重试</button></div> : null}
-      {notice ? <p className="admin-generations-notice" role="alert">{notice}</p> : null}
-      {session && !session.notice_acknowledged ? (
-        <section aria-labelledby="private-content-notice-title" className="admin-generations-notice-panel">
-          <p>PRIVATE CONTENT ACCESS</p>
-          <h3 id="private-content-notice-title">查看私有内容前，请确认当前规则告知</h3>
-          <p>生成记录默认只显示安全元数据。打开图片或完整提示词时，系统会自动记录本次管理员、目标和内容类型访问审计。</p>
-          <button disabled={acknowledging} onClick={() => void acknowledge()} type="button">{acknowledging ? "确认中" : "确认并进入记录"}</button>
-        </section>
-      ) : null}
-      {session?.notice_acknowledged ? (
-        <section aria-label="生成记录元数据" className="admin-generations-table-wrap">
-          <table><thead><tr><th>任务</th><th>用户标识</th><th>模型 / 比例</th><th>状态</th><th>创建 / 完成</th><th>点数</th><th>私有内容</th></tr></thead><tbody>
-            {records.map((record) => <tr key={record.generation_id}>
-              <td><code>{compactId(record.generation_id)}</code></td>
-              <td><code>{compactId(record.owner_ref)}</code></td>
-              <td>{record.model_id}<br /><small>{record.ratio}</small></td>
-              <td><span className={`admin-generations-status is-${record.status}`}>{statusLabel(record.status)}</span>{record.error_category ? <small>{record.error_category}</small> : null}</td>
-              <td><time dateTime={record.created_at}>{formatTime(record.created_at)}</time><br /><small>{formatTime(record.completed_at)}</small></td>
-              <td>{record.confirmed_credit_cost} / {record.final_credit_state ?? "冻结"}</td>
-              <td className="admin-generations-actions"><button onClick={() => void openPrompt(record.generation_id)} type="button">打开提示词并记录审计</button><button disabled={record.status !== "succeeded"} onClick={() => void openImage(record.generation_id)} type="button">打开图片并记录审计</button></td>
-            </tr>)}
-          </tbody></table>
-          {!records.length && !loading ? <p className="admin-generations-empty">当前无生成记录</p> : null}
-        </section>
-      ) : null}
-      {openedPrompt ? <section aria-label="已审计的完整提示词" className="admin-generations-opened"><header><h3>已记录审计的完整提示词</h3><button onClick={() => setOpenedPrompt(undefined)} type="button">关闭</button></header><p><code>{compactId(openedPrompt.generation_id)}</code></p><pre>{openedPrompt.prompt}</pre></section> : null}
-      {openedImage ? <section aria-label="已审计的生成图片" className="admin-generations-opened"><header><h3>已记录审计的生成图片</h3><button onClick={() => { URL.revokeObjectURL(openedImage.url); setOpenedImage(undefined); }} type="button">关闭</button></header><img alt="已记录审计的生成图片" src={openedImage.url} /></section> : null}
-    </main>
-  );
-}

apps/web/src/admin-models.tsx

@@ -147,7 +147,11 @@ export function AdminModelsPage() {
 
   return (
     <div className="admin-models-page">
-      <main id="admin-main">
+      <header className="admin-product-header">
+        <a href="/admin">DADA ADMIN</a>
+        <nav aria-label="后台导航"><a href="/admin/users">用户</a><a aria-current="page" href="/admin/models">模型</a><a href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
+      </header>
+      <main>
         <header className="admin-models-heading">
           <div><p>MODEL OPERATIONS</p><h1>模型配置</h1></div>
           {configuration ? <strong>配置集合 v{configuration.config_set_version}</strong> : null}

apps/web/src/admin-shell.css

@@ -1,523 +0,0 @@
-:root {
-  color-scheme: light;
-  font-family: "Segoe UI", "Microsoft YaHei UI", sans-serif;
-  background: #f3f3ef;
-}
-
-* {
-  box-sizing: border-box;
-  letter-spacing: 0;
-}
-
-body {
-  margin: 0;
-}
-
-button,
-a,
-input,
-textarea {
-  font: inherit;
-}
-
-.admin-shell {
-  min-height: 100vh;
-  color: #171715;
-  background: #f3f3ef;
-}
-
-.admin-skip-link {
-  position: fixed;
-  z-index: 100;
-  top: 8px;
-  left: 228px;
-  padding: 8px 12px;
-  color: #ffffff;
-  background: #171715;
-  transform: translateY(-160%);
-}
-
-.admin-skip-link:focus {
-  transform: translateY(0);
-}
-
-.admin-sidebar {
-  position: fixed;
-  z-index: 20;
-  inset: 0 auto 0 0;
-  display: grid;
-  width: 216px;
-  grid-template-rows: auto 1fr auto;
-  color: #ffffff;
-  background: #171715;
-}
-
-.admin-wordmark {
-  display: grid;
-  min-height: 104px;
-  align-content: center;
-  padding: 20px 22px;
-  border-bottom: 1px solid #494944;
-  color: #ffffff;
-  text-decoration: none;
-}
-
-.admin-wordmark span {
-  font-family: "Arial Black", "Segoe UI", sans-serif;
-  font-size: 30px;
-  line-height: 1;
-}
-
-.admin-wordmark small {
-  margin-top: 6px;
-  color: #d9dc00;
-  font-family: Consolas, monospace;
-  font-size: 10px;
-}
-
-.admin-sidebar nav {
-  display: grid;
-  align-content: start;
-  padding: 12px 0;
-}
-
-.admin-sidebar nav a {
-  display: grid;
-  min-height: 48px;
-  grid-template-columns: 38px 1fr;
-  align-items: center;
-  padding: 0 18px;
-  border-left: 4px solid transparent;
-  color: #d5d5cf;
-  font-size: 13px;
-  font-weight: 700;
-  text-decoration: none;
-}
-
-.admin-sidebar nav a > span {
-  color: #85857d;
-  font-family: Consolas, monospace;
-  font-size: 10px;
-}
-
-.admin-sidebar nav a:hover,
-.admin-sidebar nav a:focus-visible {
-  color: #ffffff;
-  background: #2c2c29;
-}
-
-.admin-sidebar nav a[aria-current="page"] {
-  border-left-color: #e8eb00;
-  color: #171715;
-  background: #eef000;
-}
-
-.admin-sidebar nav a[aria-current="page"] > span {
-  color: #4d4d00;
-}
-
-.admin-sidebar-foot {
-  display: grid;
-  gap: 10px;
-  padding: 18px 22px;
-  border-top: 1px solid #494944;
-  font-family: Consolas, monospace;
-  font-size: 10px;
-}
-
-.admin-sidebar-foot span {
-  color: #a5a59d;
-}
-
-.admin-sidebar-foot strong {
-  color: #ffffff;
-  font-weight: 700;
-}
-
-.admin-shell-workspace {
-  min-width: 0;
-  margin-left: 216px;
-  padding-top: 52px;
-}
-
-.admin-topbar {
-  position: fixed;
-  z-index: 15;
-  top: 0;
-  right: 0;
-  left: 216px;
-  display: flex;
-  height: 52px;
-  align-items: center;
-  justify-content: space-between;
-  padding: 0 28px;
-  border-bottom: 1px solid #b7b7b0;
-  background: rgb(255 255 255 / 96%);
-}
-
-.admin-topbar h1 {
-  margin: 0;
-  font-size: 15px;
-}
-
-.admin-topbar-status {
-  display: flex;
-  align-items: center;
-  gap: 20px;
-  color: #62625c;
-  font-size: 11px;
-}
-
-.admin-topbar-status span {
-  display: flex;
-  align-items: center;
-  gap: 7px;
-}
-
-.admin-topbar-status i {
-  width: 8px;
-  height: 8px;
-  border-radius: 50%;
-  background: #777770;
-}
-
-.admin-topbar-status code {
-  color: #171715;
-}
-
-.admin-shell-content {
-  min-width: 0;
-}
-
-.admin-session-gate {
-  display: grid;
-  min-height: 100vh;
-  place-items: center;
-  color: #171715;
-  background: #f3f3ef;
-}
-
-.admin-session-gate p,
-.admin-session-gate div {
-  padding: 22px;
-  border-left: 5px solid #171715;
-  background: #ffffff;
-}
-
-.admin-session-gate div {
-  display: grid;
-  gap: 12px;
-}
-
-.admin-session-gate button,
-.admin-overview-failure button,
-.admin-placeholder-toolbar button {
-  min-height: 40px;
-  padding: 8px 14px;
-  border: 1px solid #171715;
-  border-radius: 0;
-  color: #171715;
-  background: #eef000;
-  font-weight: 800;
-}
-
-.admin-overview,
-.admin-placeholder {
-  width: min(1320px, calc(100% - 64px));
-  margin: 0 auto;
-  padding: 34px 0 72px;
-}
-
-.admin-page-heading {
-  display: flex;
-  min-height: 74px;
-  align-items: end;
-  justify-content: space-between;
-  gap: 24px;
-  padding-bottom: 18px;
-  border-bottom: 1px solid #8c8c85;
-}
-
-.admin-page-heading p,
-.admin-status-section header p,
-.admin-operation-strip header p {
-  margin: 0 0 5px;
-  font-family: Consolas, monospace;
-  font-size: 10px;
-  font-weight: 700;
-}
-
-.admin-page-heading h2 {
-  margin: 0;
-  font-size: 32px;
-}
-
-.admin-page-heading time {
-  color: #66665f;
-  font-size: 11px;
-}
-
-.admin-capacity-alert {
-  display: grid;
-  min-height: 44px;
-  grid-template-columns: 1fr auto auto;
-  align-items: center;
-  gap: 18px;
-  padding: 9px 14px;
-  border-bottom: 1px solid #171715;
-  color: #171715;
-  background: #eef000;
-  font-size: 12px;
-  text-decoration: none;
-}
-
-.admin-capacity-alert.is-full,
-.admin-capacity-alert.is-unavailable {
-  color: #ffffff;
-  background: #b33a2f;
-}
-
-.admin-overview-loading {
-  display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  margin-top: 22px;
-  border-block: 1px solid #b7b7b0;
-}
-
-.admin-overview-loading span {
-  height: 130px;
-  border-right: 1px solid #c7c7c0;
-  background: #e2e2dd;
-}
-
-.admin-overview-failure {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 20px;
-  margin-top: 20px;
-  padding: 14px 16px;
-  border-left: 5px solid #b33a2f;
-  background: #fff0ed;
-}
-
-.admin-metric-band {
-  display: grid;
-  grid-template-columns: repeat(4, minmax(0, 1fr));
-  margin-top: 22px;
-  border-block: 1px solid #8c8c85;
-  background: #ffffff;
-}
-
-.admin-metric-band a {
-  display: grid;
-  min-width: 0;
-  min-height: 132px;
-  align-content: center;
-  gap: 7px;
-  padding: 20px;
-  border-right: 1px solid #c3c3bc;
-  color: #171715;
-  text-decoration: none;
-}
-
-.admin-metric-band a:last-child {
-  border-right: 0;
-}
-
-.admin-metric-band span,
-.admin-metric-band small {
-  color: #65655f;
-  font-size: 11px;
-}
-
-.admin-metric-band strong {
-  overflow-wrap: anywhere;
-  font-size: 25px;
-}
-
-.admin-overview-columns {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 24px;
-  margin-top: 24px;
-}
-
-.admin-status-section,
-.admin-operation-strip,
-.admin-placeholder > section {
-  border-top: 3px solid #171715;
-  border-bottom: 1px solid #8c8c85;
-  background: #ffffff;
-}
-
-.admin-status-section > header,
-.admin-operation-strip > header {
-  display: flex;
-  min-height: 64px;
-  align-items: center;
-  justify-content: space-between;
-  padding: 12px 16px;
-  border-bottom: 1px solid #c3c3bc;
-}
-
-.admin-status-section h3,
-.admin-operation-strip h3 {
-  margin: 0;
-  font-size: 17px;
-}
-
-.admin-status-section header a,
-.admin-operation-strip header a {
-  color: #171715;
-  font-size: 12px;
-  font-weight: 800;
-}
-
-.admin-status-section dl {
-  margin: 0;
-}
-
-.admin-status-section dl > div {
-  display: grid;
-  min-height: 52px;
-  grid-template-columns: 126px 1fr;
-  align-items: center;
-  padding: 0 16px;
-  border-bottom: 1px solid #ddddD7;
-}
-
-.admin-status-section dl > div:last-child {
-  border-bottom: 0;
-}
-
-.admin-status-section dt {
-  color: #65655f;
-  font-size: 11px;
-}
-
-.admin-status-section dd {
-  min-width: 0;
-  margin: 0;
-  overflow-wrap: anywhere;
-  font-family: Consolas, monospace;
-  font-size: 12px;
-  font-weight: 700;
-}
-
-.admin-service-list {
-  margin: 0;
-  padding: 0;
-  list-style: none;
-}
-
-.admin-service-list li {
-  display: grid;
-  min-height: 42px;
-  grid-template-columns: 1fr 84px 76px;
-  align-items: center;
-  padding: 0 16px;
-  border-bottom: 1px solid #ddddd7;
-  font-size: 11px;
-}
-
-.admin-service-list li:last-child {
-  border-bottom: 0;
-}
-
-.admin-service-list strong {
-  color: #1f6639;
-}
-
-.admin-service-list strong.is-degraded,
-.admin-service-list strong.is-paused {
-  color: #8b5608;
-}
-
-.admin-service-list strong.is-unavailable {
-  color: #a52e24;
-}
-
-.admin-service-list time {
-  color: #65655f;
-  text-align: right;
-}
-
-.admin-operation-strip {
-  margin-top: 24px;
-}
-
-.admin-operation-strip > p {
-  margin: 0;
-  padding: 22px 16px;
-  color: #65655f;
-}
-
-.admin-operation-strip table {
-  width: 100%;
-  border-collapse: collapse;
-  table-layout: fixed;
-}
-
-.admin-operation-strip th,
-.admin-operation-strip td {
-  padding: 12px 16px;
-  border-bottom: 1px solid #ddddd7;
-  overflow-wrap: anywhere;
-  text-align: left;
-  font-size: 11px;
-}
-
-.admin-operation-strip th {
-  color: #65655f;
-  background: #efefeb;
-}
-
-.admin-placeholder > section {
-  margin-top: 22px;
-}
-
-.admin-placeholder-toolbar {
-  display: flex;
-  min-height: 58px;
-  align-items: center;
-  justify-content: space-between;
-  padding: 8px 16px;
-  border-bottom: 1px solid #c3c3bc;
-  font-weight: 800;
-}
-
-.admin-placeholder-toolbar button:disabled {
-  color: #777770;
-  background: #dfdfda;
-}
-
-.admin-placeholder > section > p {
-  margin: 0;
-  padding: 44px 16px;
-  color: #65655f;
-}
-
-:is(.admin-shell, .admin-session-gate) :focus-visible {
-  outline: 2px solid #225dd8;
-  outline-offset: 2px;
-}
-
-@media (max-width: 1000px) {
-  .admin-overview,
-  .admin-placeholder {
-    width: calc(100% - 32px);
-  }
-
-  .admin-metric-band {
-    grid-template-columns: 1fr 1fr;
-  }
-
-  .admin-metric-band a:nth-child(2) {
-    border-right: 0;
-  }
-
-  .admin-overview-columns {
-    grid-template-columns: 1fr;
-  }
-}

apps/web/src/admin-shell.tsx

@@ -1,229 +0,0 @@
-import type { AdminOverviewResponse } from "@dada/shared-contracts";
-import { useCallback, useEffect, useState, type ReactNode } from "react";
-
-import "./admin-shell.css";
-
-interface AdminSession {
-  admin: { role: "super_admin"; status: "active"; user_id: string };
-  audience: "admin";
-  authenticated: true;
-  expires_at: string;
-}
-
-interface AdminProtectedRouteProps {
-  children: ReactNode;
-  currentPath: string;
-  title: string;
-}
-
-const adminNavigation = [
-  { href: "/admin", label: "总览", marker: "01" },
-  { href: "/admin/users", label: "用户与点数", marker: "02" },
-  { href: "/admin/invites", label: "邀请码", marker: "03" },
-  { href: "/admin/models", label: "模型", marker: "04" },
-  { href: "/admin/assets", label: "素材", marker: "05" },
-  { href: "/admin/preview", label: "内部预览", marker: "06" },
-  { href: "/admin/generations", label: "生成记录", marker: "07" },
-  { href: "/admin/services-storage", label: "服务与存储", marker: "08" },
-  { href: "/admin/audit", label: "审计", marker: "09" },
-] as const;
-
-function redirectToAdminLogin() {
-  window.location.replace("/admin/login");
-}
-
-export function AdminProtectedRoute({ children, currentPath, title }: AdminProtectedRouteProps) {
-  const [session, setSession] = useState<AdminSession>();
-  const [failed, setFailed] = useState(false);
-  const [revision, setRevision] = useState(0);
-
-  useEffect(() => {
-    const controller = new AbortController();
-    setFailed(false);
-    void fetch("/api/v1/admin-auth/session", { credentials: "same-origin", signal: controller.signal })
-      .then(async (response) => {
-        if (response.status === 401) {
-          redirectToAdminLogin();
-          return;
-        }
-        if (!response.ok) throw new Error("admin_session_unavailable");
-        const body = await response.json() as AdminSession;
-        if (body.audience !== "admin" || body.admin.role !== "super_admin" || body.admin.status !== "active") {
-          redirectToAdminLogin();
-          return;
-        }
-        setSession(body);
-      })
-      .catch((error: unknown) => {
-        if (!(error instanceof DOMException && error.name === "AbortError")) setFailed(true);
-      });
-    return () => controller.abort();
-  }, [revision]);
-
-  if (!session) {
-    return (
-      <main className="admin-session-gate">
-        {failed ? (
-          <div role="alert">
-            <strong>管理员会话暂时无法确认</strong>
-            <button onClick={() => setRevision((value) => value + 1)} type="button">重试</button>
-          </div>
-        ) : <p aria-live="polite">正在确认管理员会话</p>}
-      </main>
-    );
-  }
-
-  return (
-    <div className="admin-shell">
-      <a className="admin-skip-link" href="#admin-main">跳到主要内容</a>
-      <aside className="admin-sidebar">
-        <a className="admin-wordmark" href="/admin" aria-label="Dada 后台总览">
-          <span>DADA</span>
-          <small>OPERATIONS</small>
-        </a>
-        <nav aria-label="后台主导航">
-          {adminNavigation.map((item) => (
-            <a aria-current={currentPath === item.href ? "page" : undefined} href={item.href} key={item.href}>
-              <span aria-hidden="true">{item.marker}</span>
-              {item.label}
-            </a>
-          ))}
-        </nav>
-        <div className="admin-sidebar-foot">
-          <span>LOCAL P0-A</span>
-          <strong>独立管理员会话</strong>
-        </div>
-      </aside>
-      <div className="admin-shell-workspace">
-        <header className="admin-topbar">
-          <h1>{title}</h1>
-          <div className="admin-topbar-status">
-            <span><i aria-hidden="true" />状态摘要</span>
-            <code>{session.admin.user_id.slice(0, 8)}</code>
-          </div>
-        </header>
-        <div className="admin-shell-content">{children}</div>
-      </div>
-    </div>
-  );
-}
-
-const serviceLabels: Record<AdminOverviewResponse["services"][number]["service_id"], string> = {
-  ai_gateway: "AI 网关",
-  amap: "高德",
-  asset_root: "素材根",
-  resend: "Resend",
-  worker: "Worker",
-};
-
-const stateLabels = {
-  available: "正常",
-  degraded: "有异常",
-  paused: "已暂停",
-  unavailable: "不可用",
-} as const;
-
-function formatTime(value: string | null) {
-  if (!value) return "未记录";
-  return new Intl.DateTimeFormat("zh-CN", { hour: "2-digit", minute: "2-digit", month: "2-digit", day: "2-digit" }).format(new Date(value));
-}
-
-export function AdminOverviewPage() {
-  const [summary, setSummary] = useState<AdminOverviewResponse>();
-  const [failed, setFailed] = useState(false);
-  const [loading, setLoading] = useState(true);
-
-  const load = useCallback(async () => {
-    setLoading(true);
-    setFailed(false);
-    try {
-      const response = await fetch("/api/v1/admin/overview", { credentials: "same-origin" });
-      if (response.status === 401) {
-        window.dispatchEvent(new Event("dada:session-invalid"));
-        return;
-      }
-      if (!response.ok) throw new Error("admin_overview_unavailable");
-      setSummary(await response.json() as AdminOverviewResponse);
-    } catch {
-      setFailed(true);
-    } finally {
-      setLoading(false);
-    }
-  }, []);
-
-  useEffect(() => { void load(); }, [load]);
-
-  const storagePercent = summary
-    ? Math.min(100, (summary.storage.managed_content_bytes / summary.storage.limit_bytes) * 100)
-    : 0;
-  const hasServiceIssue = summary?.services.some((service) => service.status !== "available") ?? false;
-
-  return (
-    <main className="admin-overview" id="admin-main">
-      <header className="admin-page-heading">
-        <div><p>OPERATIONS / LIVE SUMMARY</p><h2>运营总览</h2></div>
-        {summary ? <time dateTime={summary.generated_at}>更新于 {formatTime(summary.generated_at)}</time> : null}
-      </header>
-      {summary && summary.storage.status !== "normal" ? (
-        <a className={`admin-capacity-alert is-${summary.storage.status}`} href="/admin/services-storage">
-          <span>本机内容容量</span>
-          <strong>{storagePercent.toFixed(1)}%</strong>
-          <span>{summary.storage.status === "critical" ? "接近上限" : summary.storage.status === "full" ? "已满" : "不可用"}</span>
-        </a>
-      ) : null}
-      {loading && !summary ? (
-        <div aria-label="运营摘要加载中" className="admin-overview-loading"><span /><span /><span /><span /></div>
-      ) : null}
-      {failed ? (
-        <div className="admin-overview-failure" role="alert">
-          <span>运营摘要暂时无法读取{summary ? `，当前保留 ${formatTime(summary.generated_at)} 的结果` : ""}。</span>
-          <button onClick={() => void load()} type="button">重试</button>
-        </div>
-      ) : null}
-      {summary ? (
-        <>
-          <section aria-label="关键运营指标" className="admin-metric-band">
-            <a href="/admin/users"><span>普通用户名额</span><strong>{summary.user_slots.active_and_suspended} / {summary.user_slots.limit}</strong><small>active + suspended</small></a>
-            <a href="/admin/generations"><span>进行中任务</span><strong>{summary.generation_jobs.queued + summary.generation_jobs.running}</strong><small>排队 {summary.generation_jobs.queued} · 运行 {summary.generation_jobs.running}</small></a>
-            <a href="/admin/generations"><span>成本核对</span><strong>待人工核对 {summary.generation_jobs.pending_manual_review}</strong><small>最早 {formatTime(summary.generation_jobs.pending_manual_review_oldest_at)}</small></a>
-            <a href="/admin/assets"><span>清理任务</span><strong>{summary.asset_cleanup.pending_jobs}</strong><small>等待处理</small></a>
-          </section>
-          <div className="admin-overview-columns">
-            <section className="admin-status-section" aria-labelledby="model-status-heading">
-              <header><div><p>MODEL STATE</p><h3 id="model-status-heading">模型状态</h3></div><a href="/admin/models">查看</a></header>
-              <dl>
-                <div><dt>配置默认</dt><dd>{summary.models.configured_default_model_id ?? "无"}</dd></div>
-                <div><dt>运行时可用</dt><dd>{summary.models.runtime_available_count} / {summary.models.configured_model_count}</dd></div>
-                <div><dt>当前推荐</dt><dd>{summary.models.recommended_model_id ?? "无"}</dd></div>
-              </dl>
-            </section>
-            <section className="admin-status-section" aria-labelledby="service-status-heading">
-              <header><div><p>SERVICE STATE</p><h3 id="service-status-heading">服务状态</h3></div><a href="/admin/services-storage">{hasServiceIssue ? "有异常" : "全部正常"}</a></header>
-              <ul className="admin-service-list">
-                {summary.services.map((service) => <li key={service.service_id}><span>{serviceLabels[service.service_id]}</span><strong className={`is-${service.status}`}>{stateLabels[service.status]}</strong><time dateTime={service.checked_at ?? undefined}>{formatTime(service.checked_at)}</time></li>)}
-              </ul>
-            </section>
-          </div>
-          <section className="admin-operation-strip" aria-labelledby="recent-operation-heading">
-            <header><div><p>AUDIT SNAPSHOT</p><h3 id="recent-operation-heading">最近后台操作</h3></div><a href="/admin/audit">查看全部</a></header>
-            {summary.recent_operations.length === 0 ? <p>当前无近期操作</p> : (
-              <table><thead><tr><th>时间</th><th>操作</th><th>对象摘要</th><th>结果</th></tr></thead><tbody>{summary.recent_operations.map((operation) => <tr key={operation.operation_id}><td>{formatTime(operation.created_at)}</td><td>{operation.operation_type}</td><td><code>{operation.target_ref}</code></td><td>{operation.result}</td></tr>)}</tbody></table>
-            )}
-          </section>
-        </>
-      ) : null}
-    </main>
-  );
-}
-
-export function AdminPlaceholderPage({ title }: { title: string }) {
-  return (
-    <main className="admin-placeholder" id="admin-main">
-      <header className="admin-page-heading"><div><p>OPERATIONS</p><h2>{title}</h2></div></header>
-      <section aria-label={`${title}安全摘要`}>
-        <div className="admin-placeholder-toolbar"><span>安全摘要</span><button disabled type="button">新建</button></div>
-        <p>当前无记录</p>
-      </section>
-    </main>
-  );
-}

apps/web/src/admin-users.tsx

@@ -100,7 +100,11 @@ export function AdminUsersPage() {
 
   return (
     <div className="admin-users-page">
-      <main id="admin-main">
+      <header className="admin-product-header">
+        <a href="/admin">DADA ADMIN</a>
+        <nav aria-label="后台导航"><a aria-current="page" href="/admin/users">用户</a><a href="/admin/models">模型</a><a href="/admin/assets">素材</a><a href="/admin/audit">审计</a></nav>
+      </header>
+      <main>
         <header className="admin-users-heading">
           <div><p>USER OPERATIONS</p><h1>用户点数</h1></div>
           {balance ? <button onClick={openAdjustment} type="button">调整点数</button> : null}

apps/web/src/editor-page.tsx

@@ -49,7 +49,7 @@ import {
   type DynamicTemplateId,
 } from "./dynamic-provider.js";
 import { dynamicFontOptionsFor } from "./dynamic-render-models.js";
-import { P0A_STATIC_STICKER_CATALOG, P0A_STATIC_STICKER_COUNT, stickerWindow } from "./static-sticker-catalog.js";
+import { P0A_STATIC_STICKER_CATALOG, stickerWindow, type StaticStickerCatalogItem } from "./static-sticker-catalog.js";
 import {
   createColorCardElement,
   extractPaletteFromImage,
@@ -136,6 +136,7 @@ export function EditorPage({ projectId }: { projectId: string }) {
   const [notice, setNotice] = useState("");
   const [activePanel, setActivePanel] = useState<EditorAssetPanel>("background");
   const [stickerScrollTop, setStickerScrollTop] = useState(0);
+  const [stickerCatalog, setStickerCatalog] = useState<StaticStickerCatalogItem[]>(P0A_STATIC_STICKER_CATALOG);
   const [selectedIds, setSelectedIds] = useState<string[]>([]);
   const [guides, setGuides] = useState<string[]>([]);
   const [multiMode, setMultiMode] = useState(false);
@@ -187,6 +188,18 @@ export function EditorPage({ projectId }: { projectId: string }) {
     return () => { active = false; };
   }, [session?.user.user_id]);
 
+  useEffect(() => {
+    let active = true;
+    readEditorJson<{ items: StaticStickerCatalogItem[] }>("/api/v1/static-stickers/current")
+      .then((response) => {
+        if (!active) return;
+        const uploaded = response.items.filter((item) => item.enabled && item.origin === "admin_uploaded");
+        setStickerCatalog([...P0A_STATIC_STICKER_CATALOG, ...uploaded].sort((left, right) => left.part - right.part || left.order - right.order || left.stable_id.localeCompare(right.stable_id)));
+      })
+      .catch(() => { if (active) setStickerCatalog(P0A_STATIC_STICKER_CATALOG); });
+    return () => { active = false; };
+  }, []);
+
   useEffect(() => {
     if (!project || !session || !canvasState) return undefined;
     const queue = new ProjectAutoSaveQueue({
@@ -343,15 +356,15 @@ export function EditorPage({ projectId }: { projectId: string }) {
     setNotice(message);
   }
 
-  function addSticker(assetId: string) {
+  function addSticker(sticker: StaticStickerCatalogItem) {
     const controller = controllerForCurrent();
     if (!controller || !canvasState) return;
     try {
       controller.add(createStaticStickerElement({
-        assetId,
+        assetId: sticker.stable_id,
         identity: newElementIdentity(),
         position: { x: 0.5, y: 0.5 },
-        resourceVersion: "fixture-v1",
+        resourceVersion: sticker.resource_version,
         zIndex: canvasState.elements.length,
       }));
       commitElementOperation(controller, "贴纸已加入画布");
@@ -832,11 +845,11 @@ export function EditorPage({ projectId }: { projectId: string }) {
             {...(templateCategory ? { category: templateCategory } : {})}
           /> : null}
           {activePanel === "stickers" ? (() => {
-            const visibleStickers = stickerWindow(P0A_STATIC_STICKER_CATALOG, stickerScrollTop, 280);
+            const visibleStickers = stickerWindow(stickerCatalog, stickerScrollTop, 280);
-            return <section><h2>普通贴纸</h2><p aria-live="polite" className="editor-sticker-count">共 {P0A_STATIC_STICKER_COUNT.toLocaleString("zh-CN")} 张</p><div className="editor-sticker-virtual-list" data-testid="static-sticker-list" onScroll={(event) => setStickerScrollTop(event.currentTarget.scrollTop)} role="list">
+            return <section><h2>普通贴纸</h2><p aria-live="polite" className="editor-sticker-count">共 {stickerCatalog.length.toLocaleString("zh-CN")} 张</p><div className="editor-sticker-virtual-list" data-testid="static-sticker-list" onScroll={(event) => setStickerScrollTop(event.currentTarget.scrollTop)} role="list">
               <div style={{ paddingTop: visibleStickers.top_spacer_px, paddingBottom: visibleStickers.bottom_spacer_px }}>
                 <div className="editor-sticker-grid">
-                  {visibleStickers.items.map((sticker) => <button aria-label={`添加贴纸 ${sticker.stable_id}`} data-sticker-id={sticker.stable_id} disabled={!canEdit || canvasState.elements.length >= 50} key={sticker.stable_id} onClick={() => addSticker(sticker.stable_id)} type="button"><img alt="" className="editor-sticker-preview" decoding="async" loading="lazy" src={sticker.thumbnail_reference.url} /><strong>{sticker.stable_id}</strong><span>part{sticker.part} · {sticker.order}</span></button>)}
+                  {visibleStickers.items.map((sticker) => <button aria-label={`添加贴纸 ${sticker.stable_id}`} data-sticker-id={sticker.stable_id} disabled={!canEdit || canvasState.elements.length >= 50} key={sticker.stable_id} onClick={() => addSticker(sticker)} type="button"><img alt="" className="editor-sticker-preview" decoding="async" loading="lazy" src={sticker.thumbnail_reference.url} /><strong>{sticker.stable_id}</strong><span>part{sticker.part} · {sticker.order}</span></button>)}
                 </div>
               </div>
             </div>{canvasState.elements.length >= 50 ? <p className="editor-limit" role="status">画布最多 50 个元素，请先删除现有元素。</p> : null}</section>;

apps/web/src/generated/api/sdk.gen.ts

@@ -1,18 +1,9 @@
 // Generated from openapi/openapi.json. Do not edit by hand.
 
-import type { PrivateContentNoticeAckResponse, PrivateContentNoticeAckRequest, CreditAdjustmentResponse, CreditAdjustmentRequest, BrowserSupportSuccess, BrowserSupportRequest, AccountDeletionResponse, AccountDeletionCompleteRequest, AdminLoginCompleteResponse, AdminLoginCompleteRequest, LoginCompleteResponse, LoginCompleteRequest, RegistrationCompleteResponse, RegistrationCompleteRequest, GenerationCreateResponse, AccountSettingsResponse, AdminOverviewResponse, AdminSessionResponse, CreditBalanceResponse, BootstrapResponse, GenerationTaskResponse, SseEvent, ModelConfig, ModelConfigurationResponse, CreditLedgerResponse, ProjectDetailResponse, UserSessionResponse, AdminGenerationListResponse, ProjectListResponse, RecentAssetListResponse, LogoutResponse, PrivateContentPromptResponse, ProjectPurgeResponse, RecentAssetRecordResponse, RecentAssetRecordRequest, ProjectRenameResponse, ProjectRenameRequest, ModelConfigUpdateRequest, ProjectRestoreResponse, ReverseGeocodeResponse, ReverseGeocodeRequest, LatestExportSaveResponse, ProjectStateSaveResponse, ProjectEditableState, AccountDeletionSendResponse, RegistrationSendResponse, AdminLoginSendRequest, LoginSendRequest, RegistrationSendRequest, FailedEmptyTrashResponse, FailedEmptyTrashRequest, ProjectTrashResponse, AccountProfileUpdateResponse, AccountProfileUpdateRequest } from "./types.gen.js";
+import type { CreditAdjustmentResponse, CreditAdjustmentRequest, BrowserSupportSuccess, BrowserSupportRequest, AccountDeletionResponse, AccountDeletionCompleteRequest, AdminLoginCompleteResponse, AdminLoginCompleteRequest, LoginCompleteResponse, LoginCompleteRequest, RegistrationCompleteResponse, RegistrationCompleteRequest, GenerationCreateResponse, AccountSettingsResponse, AdminSessionResponse, CreditBalanceResponse, BootstrapResponse, GenerationTaskResponse, SseEvent, ModelConfig, ModelConfigurationResponse, CreditLedgerResponse, ProjectDetailResponse, UserSessionResponse, ProjectListResponse, RecentAssetListResponse, LogoutResponse, ProjectPurgeResponse, RecentAssetRecordResponse, RecentAssetRecordRequest, ProjectRenameResponse, ProjectRenameRequest, ModelConfigUpdateRequest, ProjectRestoreResponse, ReverseGeocodeResponse, ReverseGeocodeRequest, LatestExportSaveResponse, ProjectStateSaveResponse, ProjectEditableState, AccountDeletionSendResponse, RegistrationSendResponse, AdminLoginSendRequest, LoginSendRequest, RegistrationSendRequest, FailedEmptyTrashResponse, FailedEmptyTrashRequest, ProjectTrashResponse, AccountProfileUpdateResponse, AccountProfileUpdateRequest } from "./types.gen.js";
 
 export interface ClientOptions { baseUrl?: string; fetch?: typeof globalThis.fetch; headers?: HeadersInit; }
 
-export async function ackPrivateContentNotice(body: PrivateContentNoticeAckRequest, options: ClientOptions = {}): Promise<PrivateContentNoticeAckResponse> {
-  const request = options.fetch ?? globalThis.fetch;
-  const headers = new Headers(options.headers);
-  headers.set("Content-Type", "application/json");
-  const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/private-content-notice/ack`, { body: JSON.stringify(body), method: "POST", headers });
-  if (!response.ok) throw new Error(`HTTP ${response.status}`);
-  return response.json() as Promise<PrivateContentNoticeAckResponse>;
-}
-
 export async function adjustAdminUserCredits(body: CreditAdjustmentRequest, options: ClientOptions = {}): Promise<CreditAdjustmentResponse> {
   const request = options.fetch ?? globalThis.fetch;
   const headers = new Headers(options.headers);
@@ -96,13 +87,6 @@ export async function getAccountSettings(options: ClientOptions = {}): Promise<A
   return response.json() as Promise<AccountSettingsResponse>;
 }
 
-export async function getAdminOverview(options: ClientOptions = {}): Promise<AdminOverviewResponse> {
-  const request = options.fetch ?? globalThis.fetch;
-  const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/overview`, { method: "GET", headers: options.headers ?? {} });
-  if (!response.ok) throw new Error(`HTTP ${response.status}`);
-  return response.json() as Promise<AdminOverviewResponse>;
-}
-
 export async function getAdminSession(options: ClientOptions = {}): Promise<AdminSessionResponse> {
   const request = options.fetch ?? globalThis.fetch;
   const response = await request(`${options.baseUrl ?? ""}/api/v1/admin-auth/session`, { method: "GET", headers: options.headers ?? {} });
@@ -184,13 +168,6 @@ export async function getUserSession(options: ClientOptions = {}): Promise<UserS
   return response.json() as Promise<UserSessionResponse>;
 }
 
-export async function listAdminGenerations(options: ClientOptions = {}): Promise<AdminGenerationListResponse> {
-  const request = options.fetch ?? globalThis.fetch;
-  const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/generations`, { method: "GET", headers: options.headers ?? {} });
-  if (!response.ok) throw new Error(`HTTP ${response.status}`);
-  return response.json() as Promise<AdminGenerationListResponse>;
-}
-
 export async function listProjects(options: ClientOptions = {}): Promise<ProjectListResponse> {
   const request = options.fetch ?? globalThis.fetch;
   const response = await request(`${options.baseUrl ?? ""}/api/v1/projects`, { method: "GET", headers: options.headers ?? {} });
@@ -212,20 +189,6 @@ export async function logoutUser(options: ClientOptions = {}): Promise<LogoutRes
   return response.json() as Promise<LogoutResponse>;
 }
 
-export async function openAdminGenerationImage(options: ClientOptions = {}): Promise<Blob> {
-  const request = options.fetch ?? globalThis.fetch;
-  const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/private-content/generations/{generationId}/image`, { method: "GET", headers: options.headers ?? {} });
-  if (!response.ok) throw new Error(`HTTP ${response.status}`);
-  return response.blob() as Promise<Blob>;
-}
-
-export async function openAdminGenerationPrompt(options: ClientOptions = {}): Promise<PrivateContentPromptResponse> {
-  const request = options.fetch ?? globalThis.fetch;
-  const response = await request(`${options.baseUrl ?? ""}/api/v1/admin/private-content/generations/{generationId}/prompt`, { method: "GET", headers: options.headers ?? {} });
-  if (!response.ok) throw new Error(`HTTP ${response.status}`);
-  return response.json() as Promise<PrivateContentPromptResponse>;
-}
-
 export async function purgeProject(options: ClientOptions = {}): Promise<ProjectPurgeResponse> {
   const request = options.fetch ?? globalThis.fetch;
   const response = await request(`${options.baseUrl ?? ""}/api/v1/projects/{projectId}/purge`, { method: "POST", headers: options.headers ?? {} });

apps/web/src/generated/api/types.gen.ts

@@ -60,27 +60,6 @@ export type AdminCreditParams = {
   "userId": string;
 };
 
-export type AdminGenerationListResponse = {
-  "generated_at": string;
-  "items": Array<AdminGenerationRecord>;
-};
-
-export type AdminGenerationRecord = {
-  "completed_at": string | null;
-  "confirmed_credit_cost": number;
-  "created_at": string;
-  "duration_ms": number | null;
-  "error_category": "upstream_timeout" | "upstream_failed" | "safety_rejected" | "model_disabled" | "gateway_balance_insufficient" | "gateway_contract_invalid" | "reference_invalid" | "unknown_retryable" | "unknown_non_retryable" | null;
-  "final_credit_state": "committed" | "released" | null;
-  "generation_id": string;
-  "model_id": string;
-  "owner_ref": string;
-  "project_id": string;
-  "ratio": "3:4" | "1:1" | "4:3" | "9:16";
-  "reserved_credits": number;
-  "status": "queued" | "running" | "succeeded" | "failed" | "rejected";
-};
-
 export type AdminLoginCompleteRequest = {
   "registration_id": string;
   "verification_code": string;
@@ -97,54 +76,12 @@ export type AdminLoginSendRequest = {
   "email": string;
 };
 
-export type AdminOverviewResponse = {
-  "asset_cleanup": {
-  "pending_jobs": number;
-};
-  "generated_at": string;
-  "generation_jobs": {
-  "pending_manual_review": number;
-  "pending_manual_review_oldest_at": string | null;
-  "queued": number;
-  "running": number;
-};
-  "models": {
-  "configured_default_model_id": string | null;
-  "configured_model_count": number;
-  "recommended_model_id": string | null;
-  "runtime_available_count": number;
-};
-  "recent_operations": Array<{
-  "created_at": string;
-  "operation_id": string;
-  "operation_type": string;
-  "result": "succeeded" | "rejected" | "failed";
-  "target_ref": string;
-}>;
-  "services": Array<{
-  "checked_at": string | null;
-  "service_id": "resend" | "amap" | "ai_gateway" | "worker" | "asset_root";
-  "status": "available" | "degraded" | "paused" | "unavailable";
-}>;
-  "storage": {
-  "last_measured_at": string | null;
-  "limit_bytes": number;
-  "managed_content_bytes": number;
-  "status": "normal" | "critical" | "full" | "unavailable";
-};
-  "user_slots": {
-  "active_and_suspended": number;
-  "limit": number;
-};
-};
-
 export type AdminSessionResponse = {
   "acknowledged_private_content_notice_version": string | null;
   "admin": AdminAuthenticatedUser;
   "audience": "admin";
   "authenticated": true;
   "csrf_token": string;
-  "current_private_content_notice_message_key"?: string;
   "current_private_content_notice_version": string | null;
   "expires_at": string;
   "notice_acknowledged": boolean;
@@ -604,26 +541,6 @@ export type ModelRuntimeSseEvent = {
   "runtime_availability_version": number;
 };
 
-export type PrivateContentGenerationParams = {
-  "generationId": string;
-};
-
-export type PrivateContentNoticeAckRequest = {
-  "expected_notice_version": string;
-};
-
-export type PrivateContentNoticeAckResponse = {
-  "acknowledged_at": string;
-  "notice_version": string;
-  "status": "acknowledged";
-};
-
-export type PrivateContentPromptResponse = {
-  "content_type": "prompt";
-  "generation_id": string;
-  "prompt": string;
-};
-
 export type ProjectDetailResponse = {
   "canvas_state": CanvasState;
   "created_at": string;

apps/web/src/main.tsx

@@ -1,4 +1,4 @@
-import { StrictMode, type ReactNode } from "react";
+import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
 
 import { registerPublicAssetServiceWorker } from "./public-asset-cache.js";
@@ -7,11 +7,10 @@ import { UserAuthPage } from "./user-auth.js";
 import { AccountSettingsPage } from "./account-settings.js";
 import { AdminUsersPage } from "./admin-users.js";
 import { AdminModelsPage } from "./admin-models.js";
-import { AdminGenerationsPage } from "./admin-generations.js";
+import { AdminAssetsPage } from "./admin-assets.js";
 import { CreditsPage } from "./credits-page.js";
 import { ProjectDetailPage, ProjectsPage, WorkspacePage } from "./project-pages.js";
 import { EditorPage } from "./editor-page.js";
-import { AdminOverviewPage, AdminPlaceholderPage, AdminProtectedRoute } from "./admin-shell.js";
 
 const root = document.getElementById("root");
 
@@ -36,26 +35,10 @@ function renderAuthenticationEntry() {
   else if (projectDetail?.[1]) authenticationPage = <ProjectDetailPage key={authRevision} projectId={projectDetail[1]} />;
   else if (window.location.pathname === "/app/projects") authenticationPage = <ProjectsPage key={authRevision} />;
   else if (window.location.pathname === "/app") authenticationPage = <WorkspacePage key={authRevision} />;
-  else if (window.location.pathname === "/admin/login") authenticationPage = <AdminAuthPage key={authRevision} />;
+  else if (window.location.pathname === "/admin/users") authenticationPage = <AdminUsersPage key={authRevision} />;
-  else if (window.location.pathname.startsWith("/admin")) {
+  else if (window.location.pathname === "/admin/models") authenticationPage = <AdminModelsPage key={authRevision} />;
-    const adminPages: Record<string, { content: ReactNode; title: string }> = {
+  else if (window.location.pathname === "/admin/assets") authenticationPage = <AdminAssetsPage key={authRevision} />;
-      "/admin": { content: <AdminOverviewPage />, title: "运营总览" },
+  else if (window.location.pathname.startsWith("/admin")) authenticationPage = <AdminAuthPage key={authRevision} />;
-      "/admin/assets": { content: <AdminPlaceholderPage title="素材" />, title: "素材" },
-      "/admin/audit": { content: <AdminPlaceholderPage title="审计" />, title: "审计" },
-      "/admin/generations": { content: <AdminGenerationsPage />, title: "生成记录" },
-      "/admin/invites": { content: <AdminPlaceholderPage title="邀请码" />, title: "邀请码" },
-      "/admin/models": { content: <AdminModelsPage />, title: "模型" },
-      "/admin/preview": { content: <AdminPlaceholderPage title="内部预览" />, title: "内部预览" },
-      "/admin/services-storage": { content: <AdminPlaceholderPage title="服务与存储" />, title: "服务与存储" },
-      "/admin/users": { content: <AdminUsersPage />, title: "用户与点数" },
-    };
-    const page = adminPages[window.location.pathname] ?? adminPages["/admin"]!;
-    authenticationPage = (
-      <AdminProtectedRoute currentPath={window.location.pathname} key={authRevision} title={page.title}>
-        {page.content}
-      </AdminProtectedRoute>
-    );
-  }
   else authenticationPage = <UserAuthPage key={authRevision} />;
   appRoot.render(
     <StrictMode>

apps/web/src/static-sticker-catalog.ts

@@ -45,3 +45,4 @@ export function stickerWindow(items: readonly StaticStickerCatalogItem[], scroll
 }
 
 export { staticStickerOriginalUrl, staticStickerThumbnailUrl };
+export type { StaticStickerCatalogItem };

package.json

@@ -14,7 +14,7 @@
     "test:integration": "vitest run tests/integration",
     "test:api": "pnpm check:openapi && vitest run tests/api",
     "test:worker": "pnpm --filter @dada/worker build && node scripts/worker-smoke.mjs && vitest run tests/worker",
-    "test:e2e": "pnpm check:openapi && playwright test tests/e2e/event-sync.spec.ts tests/e2e/support-gate.spec.ts tests/e2e/local-data-boundary.spec.ts tests/e2e/storage-capacity.spec.ts tests/e2e/public-asset-cache.spec.ts tests/e2e/user-auth.spec.ts tests/e2e/admin-auth.spec.ts tests/e2e/entry-state-ui.spec.ts tests/e2e/session-invalid-ui.spec.ts tests/e2e/user-registration.spec.ts tests/e2e/account-settings.spec.ts tests/e2e/projects-workspace.spec.ts tests/e2e/project-autosave-conflict.spec.ts tests/e2e/project-trash.spec.ts tests/e2e/credits.spec.ts tests/e2e/generation-workspace.spec.ts tests/e2e/generation-terminal-actions.spec.ts tests/e2e/project-latest-exports.spec.ts tests/e2e/admin-models.spec.ts tests/e2e/wp4-01-editor-background.spec.ts tests/e2e/wp4-02-editor-elements.spec.ts tests/e2e/wp4-03-text-editor.spec.ts tests/e2e/wp4-04-color-dynamic.spec.ts tests/e2e/wp4-05-export.spec.ts tests/e2e/wp4-06-accessibility.spec.ts tests/e2e/wp5-02-static-sticker-catalog.spec.ts tests/e2e/wp5-03-template-registry.spec.ts tests/e2e/wp5-04-resource-isolation.spec.ts tests/e2e/wp6-01-admin-shell.spec.ts --config playwright.config.ts",
+    "test:e2e": "pnpm check:openapi && playwright test tests/e2e/event-sync.spec.ts tests/e2e/support-gate.spec.ts tests/e2e/local-data-boundary.spec.ts tests/e2e/storage-capacity.spec.ts tests/e2e/public-asset-cache.spec.ts tests/e2e/user-auth.spec.ts tests/e2e/admin-auth.spec.ts tests/e2e/entry-state-ui.spec.ts tests/e2e/session-invalid-ui.spec.ts tests/e2e/user-registration.spec.ts tests/e2e/account-settings.spec.ts tests/e2e/projects-workspace.spec.ts tests/e2e/project-autosave-conflict.spec.ts tests/e2e/project-trash.spec.ts tests/e2e/credits.spec.ts tests/e2e/generation-workspace.spec.ts tests/e2e/generation-terminal-actions.spec.ts tests/e2e/project-latest-exports.spec.ts tests/e2e/admin-models.spec.ts tests/e2e/wp4-01-editor-background.spec.ts tests/e2e/wp4-02-editor-elements.spec.ts tests/e2e/wp4-03-text-editor.spec.ts tests/e2e/wp4-04-color-dynamic.spec.ts tests/e2e/wp4-05-export.spec.ts tests/e2e/wp4-06-accessibility.spec.ts tests/e2e/wp5-02-static-sticker-catalog.spec.ts tests/e2e/wp5-03-template-registry.spec.ts tests/e2e/wp5-04-resource-isolation.spec.ts tests/e2e/wp5-05-admin-assets.spec.ts --config playwright.config.ts",
     "test:visual": "node scripts/validate-layer-scope.mjs VISUAL",
     "test:performance": "node scripts/validate-layer-scope.mjs PERFORMANCE",
     "test:security": "node scripts/verify-frozen-dependencies.mjs && node scripts/redaction-scan.mjs",
@@ -95,8 +95,8 @@
     "test:wp5-03:red": "node scripts/run-wp5-03-validation.mjs --phase red",
     "test:wp5-04": "node scripts/run-wp5-04-validation.mjs",
     "test:wp5-04:red": "node scripts/run-wp5-04-validation.mjs --phase red",
-    "test:wp6-01": "node scripts/run-wp6-01-validation.mjs --phase scaffold",
+    "test:wp5-05": "node scripts/run-wp5-05-validation.mjs",
-    "test:wp6-01:red": "node scripts/run-wp6-01-validation.mjs --phase red"
+    "test:wp5-05:red": "node scripts/run-wp5-05-validation.mjs --phase red"
   },
   "devDependencies": {
     "@playwright/test": "1.62.0",

packages/shared-contracts/src/admin.ts

@@ -1,160 +0,0 @@
-import { Type, type Static } from "@sinclair/typebox";
-
-const isoTimestampPattern = "^[0-9]{4}-[0-9]{2}-[0-9]{2}T[0-9]{2}:[0-9]{2}:[0-9]{2}(?:\\.[0-9]{3})?Z$";
-const modelIdPattern = "^[a-z0-9][a-z0-9.-]+$";
-const safeReferencePattern = "^[A-Za-z0-9][A-Za-z0-9:._-]{0,159}$";
-const uuidPattern = "^[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[1-8][0-9a-fA-F]{3}-[89abAB][0-9a-fA-F]{3}-[0-9a-fA-F]{12}$";
-
-export const AdminGenerationRecordSchema = Type.Object(
-  {
-    generation_id: Type.String({ pattern: uuidPattern }),
-    owner_ref: Type.String({ pattern: uuidPattern }),
-    project_id: Type.String({ pattern: uuidPattern }),
-    model_id: Type.String({ maxLength: 80, pattern: modelIdPattern }),
-    ratio: Type.Union([Type.Literal("3:4"), Type.Literal("1:1"), Type.Literal("4:3"), Type.Literal("9:16")]),
-    status: Type.Union([Type.Literal("queued"), Type.Literal("running"), Type.Literal("succeeded"), Type.Literal("failed"), Type.Literal("rejected")]),
-    created_at: Type.String({ pattern: isoTimestampPattern }),
-    completed_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
-    duration_ms: Type.Union([Type.Integer({ minimum: 0 }), Type.Null()]),
-    confirmed_credit_cost: Type.Integer({ minimum: 0 }),
-    reserved_credits: Type.Integer({ minimum: 0 }),
-    final_credit_state: Type.Union([Type.Literal("committed"), Type.Literal("released"), Type.Null()]),
-    error_category: Type.Union([
-      Type.Literal("upstream_timeout"), Type.Literal("upstream_failed"), Type.Literal("safety_rejected"),
-      Type.Literal("model_disabled"), Type.Literal("gateway_balance_insufficient"), Type.Literal("gateway_contract_invalid"),
-      Type.Literal("reference_invalid"), Type.Literal("unknown_retryable"), Type.Literal("unknown_non_retryable"), Type.Null(),
-    ]),
-  },
-  { additionalProperties: false, $id: "AdminGenerationRecord" },
-);
-
-export const AdminGenerationListResponseSchema = Type.Object(
-  {
-    generated_at: Type.String({ pattern: isoTimestampPattern }),
-    items: Type.Array(Type.Ref(AdminGenerationRecordSchema), { maxItems: 100 }),
-  },
-  { additionalProperties: false, $id: "AdminGenerationListResponse" },
-);
-
-export const PrivateContentNoticeAckRequestSchema = Type.Object(
-  { expected_notice_version: Type.String({ minLength: 1, maxLength: 80, pattern: "^[A-Za-z0-9_.:-]+$" }) },
-  { additionalProperties: false, $id: "PrivateContentNoticeAckRequest" },
-);
-
-export const PrivateContentNoticeAckResponseSchema = Type.Object(
-  {
-    notice_version: Type.String({ minLength: 1, maxLength: 80, pattern: "^[A-Za-z0-9_.:-]+$" }),
-    acknowledged_at: Type.String({ pattern: isoTimestampPattern }),
-    status: Type.Literal("acknowledged"),
-  },
-  { additionalProperties: false, $id: "PrivateContentNoticeAckResponse" },
-);
-
-export const PrivateContentPromptResponseSchema = Type.Object(
-  {
-    generation_id: Type.String({ pattern: uuidPattern }),
-    content_type: Type.Literal("prompt"),
-    prompt: Type.String({ minLength: 1, maxLength: 4000 }),
-  },
-  { additionalProperties: false, $id: "PrivateContentPromptResponse" },
-);
-
-export const PrivateContentGenerationParamsSchema = Type.Object(
-  { generationId: Type.String({ pattern: uuidPattern }) },
-  { additionalProperties: false, $id: "PrivateContentGenerationParams" },
-);
-
-export type AdminGenerationRecord = Static<typeof AdminGenerationRecordSchema>;
-export type AdminGenerationListResponse = Static<typeof AdminGenerationListResponseSchema>;
-export type PrivateContentNoticeAckRequest = Static<typeof PrivateContentNoticeAckRequestSchema>;
-export type PrivateContentNoticeAckResponse = Static<typeof PrivateContentNoticeAckResponseSchema>;
-export type PrivateContentPromptResponse = Static<typeof PrivateContentPromptResponseSchema>;
-
-export const AdminOverviewResponseSchema = Type.Object(
-  {
-    generated_at: Type.String({ pattern: isoTimestampPattern }),
-    user_slots: Type.Object(
-      {
-        active_and_suspended: Type.Integer({ minimum: 0 }),
-        limit: Type.Integer({ minimum: 1 }),
-      },
-      { additionalProperties: false },
-    ),
-    generation_jobs: Type.Object(
-      {
-        pending_manual_review: Type.Integer({ minimum: 0 }),
-        pending_manual_review_oldest_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
-        queued: Type.Integer({ minimum: 0 }),
-        running: Type.Integer({ minimum: 0 }),
-      },
-      { additionalProperties: false },
-    ),
-    models: Type.Object(
-      {
-        configured_default_model_id: Type.Union([Type.String({ maxLength: 80, pattern: modelIdPattern }), Type.Null()]),
-        configured_model_count: Type.Integer({ minimum: 0 }),
-        recommended_model_id: Type.Union([Type.String({ maxLength: 80, pattern: modelIdPattern }), Type.Null()]),
-        runtime_available_count: Type.Integer({ minimum: 0 }),
-      },
-      { additionalProperties: false },
-    ),
-    storage: Type.Object(
-      {
-        last_measured_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
-        limit_bytes: Type.Integer({ minimum: 1 }),
-        managed_content_bytes: Type.Integer({ minimum: 0 }),
-        status: Type.Union([
-          Type.Literal("normal"),
-          Type.Literal("critical"),
-          Type.Literal("full"),
-          Type.Literal("unavailable"),
-        ]),
-      },
-      { additionalProperties: false },
-    ),
-    services: Type.Array(
-      Type.Object(
-        {
-          checked_at: Type.Union([Type.String({ pattern: isoTimestampPattern }), Type.Null()]),
-          service_id: Type.Union([
-            Type.Literal("resend"),
-            Type.Literal("amap"),
-            Type.Literal("ai_gateway"),
-            Type.Literal("worker"),
-            Type.Literal("asset_root"),
-          ]),
-          status: Type.Union([
-            Type.Literal("available"),
-            Type.Literal("degraded"),
-            Type.Literal("paused"),
-            Type.Literal("unavailable"),
-          ]),
-        },
-        { additionalProperties: false },
-      ),
-      { maxItems: 5 },
-    ),
-    recent_operations: Type.Array(
-      Type.Object(
-        {
-          created_at: Type.String({ pattern: isoTimestampPattern }),
-          operation_id: Type.String({ pattern: "^[0-9a-fA-F-]{36}$" }),
-          operation_type: Type.String({ maxLength: 80, pattern: "^[a-z][a-z0-9_]+$" }),
-          result: Type.Union([Type.Literal("succeeded"), Type.Literal("rejected"), Type.Literal("failed")]),
-          target_ref: Type.String({ pattern: safeReferencePattern }),
-        },
-        { additionalProperties: false },
-      ),
-      { maxItems: 10 },
-    ),
-    asset_cleanup: Type.Object(
-      {
-        pending_jobs: Type.Integer({ minimum: 0 }),
-      },
-      { additionalProperties: false },
-    ),
-  },
-  { additionalProperties: false, $id: "AdminOverviewResponse" },
-);
-
-export type AdminOverviewResponse = Static<typeof AdminOverviewResponseSchema>;

packages/shared-contracts/src/auth.ts

@@ -149,7 +149,6 @@ export const AdminSessionResponseSchema = Type.Object(
     audience: Type.Literal("admin"),
     authenticated: Type.Literal(true),
     csrf_token: Type.String({ maxLength: 64, minLength: 43, pattern: "^[A-Za-z0-9_-]+$" }),
-    current_private_content_notice_message_key: Type.Optional(Type.String({ maxLength: 120, pattern: "^[A-Za-z0-9_.-]+$" })),
     current_private_content_notice_version: Type.Union([Type.String(), Type.Null()]),
     expires_at: Type.String({ pattern: isoTimestampPattern }),
     notice_acknowledged: Type.Boolean(),

packages/shared-contracts/src/index.ts

@@ -1,6 +1,5 @@
 export { Type } from "@sinclair/typebox";
 export * from "./api.js";
-export * from "./admin.js";
 export * from "./assets.js";
 export * from "./auth.js";
 export * from "./bootstrap.js";

packages/static-sticker-catalog/src/index.ts

@@ -16,8 +16,8 @@ export interface StaticStickerCatalogItem {
   relative_path: string;
   width: number;
   height: number;
-  mime_type: "image/png";
+  mime_type: "image/png" | "image/webp";
-  mime: "image/png";
+  mime: "image/png" | "image/webp";
   sha256: string;
   original_reference: string;
   thumbnail_reference: StaticStickerThumbnailReference;

pnpm-lock.yaml

@@ -44,6 +44,9 @@ importers:
       '@dada/shared-contracts':
         specifier: workspace:*
         version: link:../../packages/shared-contracts
+      '@dada/static-sticker-catalog':
+        specifier: workspace:*
+        version: link:../../packages/static-sticker-catalog
       '@fastify/multipart':
         specifier: 10.1.0
         version: 10.1.0
@@ -62,6 +65,9 @@ importers:
       fastify:
         specifier: 5.10.0
         version: 5.10.0
+      sharp:
+        specifier: 0.35.3
+        version: 0.35.3(@types/node@24.13.3)
     devDependencies:
       '@types/better-sqlite3':
         specifier: 7.6.13
@@ -271,6 +277,168 @@ packages:
   '@fastify/swagger@9.8.1':
     resolution: {integrity: sha512-VpHMnqZTY8iBZYJE8WWkbKPrXIYWy2rDfIf5qLr6DzZSpQYZ+KxQVcJFiq/AMlvNwI4gCBd66++iUlxXXGT0IQ==}
 
+  '@img/colour@1.1.0':
+    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
+    engines: {node: '>=18'}
+
+  '@img/sharp-darwin-arm64@0.35.3':
+    resolution: {integrity: sha512-RMnFX7YQsMoh7lWfcM4NEHHymBX/rLuKNPVM84XE9ONPcaSCDgE7CHIHpSgPcO2xcRthgBy1HfNO319mwhIAkg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-darwin-x64@0.35.3':
+    resolution: {integrity: sha512-Xo+5uFBtLN0BKqieTxiFzFPQAUlBbbH5iBKyRX/z1JrbnYsHTfKJnUfL8+p2TPXr1pXqao4eeL4Rl144uDpK9w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    resolution: {integrity: sha512-lUxcqWIj2wMQ9BrwNjngcr1gWUr5xgaGThBRqPPalIC2n67Cqj1uPh8NnA/ZhAg8hUbKl+kVHKwgUIwe6ZYPrg==}
+    engines: {node: '>=20.9.0'}
+    os: [freebsd]
+
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
+    resolution: {integrity: sha512-9J6ypZFpQBj4YnePGoq/S38w6nz+vqg5WZLrLGY4YuSemdMq47GMLBPO42MzwdGwpg/agZ7xzZcFHa48xlywfg==}
+    cpu: [arm64]
+    os: [darwin]
+
+  '@img/sharp-libvips-darwin-x64@1.3.2':
+    resolution: {integrity: sha512-m2pW1n6cns9VaubNwsZ+c3CRYjxNQWgJ5gPlnL1nbBcpkBvFm6SCFN5o0psFHI8w9n11NKhFkeEDns98tiqbEw==}
+    cpu: [x64]
+    os: [darwin]
+
+  '@img/sharp-libvips-linux-arm64@1.3.2':
+    resolution: {integrity: sha512-dqVSFynCox4C/J8kT16V7SIFAns0IjgLwkvYT7p8LQVmJ5OS5b6tI9IGflxTeuBS//zXeFIUbwt5dwxyZ17cnA==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-arm@1.3.2':
+    resolution: {integrity: sha512-1eMLzy92I4J6rmi4mAT8yC3HxOtniyGELlzGbNMLLeqe052ahFQ0h6LFq+lh5DsDIdYViIDst08abvSbcEdLXQ==}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
+    resolution: {integrity: sha512-3z0NHDxD6n5I9gc05U1eW1AyRm+Gznzq3naMrthPNqE6oYykcogW0l/jfpJdjYnuNl8R7yI9pNbE1XiUeyq0Aw==}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
+    resolution: {integrity: sha512-bsb4rI+NldGOsXuej2r8OdSS8+zXDVaCWxyWrcv6kneTOlgAHtZABRzBBCwdsPiD90J4myNJuHpg6kA20ImW/w==}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-s390x@1.3.2':
+    resolution: {integrity: sha512-/ABshyj8gCpyIrNXnHn4LorDJ0HHm1VhXPBlxZ8zAtfVPAaSafXPGn+sUSIRiwaSBy0mmFjSjiXI5mkcwdChKQ==}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linux-x64@1.3.2':
+    resolution: {integrity: sha512-ITPEtgffGJ0S6G9dRyw/366tJQqFRcHWPHhC+Stpg3Z8AEMrDrTr2lhdz4f/Y/HMbRh//7Z5mBzEpVdi62Oc3w==}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+    resolution: {integrity: sha512-zE9EdiUzUmg5mDT5a1rk5fYJ6GWPloTwWBYDS14naqHsL+EaMpDj1AWnpLgh3u0YCORv2Tt50wrcrpYqkP97Kw==}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+    resolution: {integrity: sha512-m0lrLiUt+lBYnCFr8qV/65yMR4E/c7/wf78I5eKTdkEakFAlZ9QlzEM3QIhhAwVeUhLAHLcCq7a7Vszq/oFNZQ==}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linux-arm64@0.35.3':
+    resolution: {integrity: sha512-QgKDspHPnrU+GQ55XPhGwyhC8acLVOOSyAvo1oVfFmrIXLkDNmGWzAfDZ4xK8oSA1qBQrALcHX0G5UZni/SuFQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-arm@0.35.3':
+    resolution: {integrity: sha512-affVWCTLooy8TSxbDx2qkzuDeaWLNVBA+P//FNBirHsXpP2fuBhk5AuboYUnrDnzoXes8GFjpTx0SBFOCRg+FA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-ppc64@0.35.3':
+    resolution: {integrity: sha512-sMd8rDxmpLOwv/7N44klFjOD5DUO7FLdjiXDI0hoxYaf7Ar262dQIEkosE98bps+5HPLtp/EvNqeqQtOycP/IA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [ppc64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-riscv64@0.35.3':
+    resolution: {integrity: sha512-0Eob78yjlYPfL5vMNWAW55l3R9Y6BQS/gOfe0ZcP9mEz9ohhKSt4im1hayiknXgf8AWrFqMvJcKIdmLmEe7yeQ==}
+    engines: {node: '>=20.9.0'}
+    cpu: [riscv64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-s390x@0.35.3':
+    resolution: {integrity: sha512-KgAxQ0DxpNOq1rG2t5cgTgShJFGSuU7XO45cqC+1NVOuZnP6tlgZRuSYOfNupGkHID0o3cJOsw4DVeJpMovcGw==}
+    engines: {node: '>=20.9.0'}
+    cpu: [s390x]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linux-x64@0.35.3':
+    resolution: {integrity: sha512-8pqvxubL2PGdhlPy6GLqzDYMUjyRmKAwKHYKixpdJYBUK7PJ0C029XdsnpFIdgRZG68fZiGdHVWcKPvtiPB4cA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [glibc]
+
+  '@img/sharp-linuxmusl-arm64@0.35.3':
+    resolution: {integrity: sha512-Vz0iQjzzcSX3HCbfwFfCSG/9SCIqyO0mH2sXyiHaAYfBk0cRsCWXRyQYX0ovCK/PAQBbTzQ0dsPQHh5MAFL59w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-linuxmusl-x64@0.35.3':
+    resolution: {integrity: sha512-6O1NPKcDVj9QEdg7Hx549EX8U0rp6yXQERqru6yRN7fGBn32UvIRJUlWnk+8xDCiG76hXVBbX82NZ/ZKr0euIg==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [linux]
+    libc: [musl]
+
+  '@img/sharp-wasm32@0.35.3':
+    resolution: {integrity: sha512-cZ0XkcYGpHZkqW6iCkqTcmUC0CD9DhD5d/qeZlZkfRBn6GnHniZXLUo5+9xw8Iv76YE6LQFN9YNBlKREcCG76w==}
+    engines: {node: '>=20.9.0'}
+
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    resolution: {integrity: sha512-2rnq7bX3NzeR2T4YWgz8qiG4h3TSdMe+vN1iQXpJleSJ3SM5zQ8Fy2SyyXAWlbxpEZ2Y+Z4u1BePgJEYbSy80Q==}
+    engines: {node: '>=20.9.0'}
+    cpu: [wasm32]
+
+  '@img/sharp-win32-arm64@0.35.3':
+    resolution: {integrity: sha512-4bPwFdMbeC4JQ8L8LOyWp6nsHcboP5fxkp6iPOXz2Vg49R42TuMs2whkJ5OAP4/Ul035qOzy0AecOF9VOscn4w==}
+    engines: {node: '>=20.9.0'}
+    cpu: [arm64]
+    os: [win32]
+
+  '@img/sharp-win32-ia32@0.35.3':
+    resolution: {integrity: sha512-r53mXsBN6lFUDiST764SvgwUdHAqM4rPAiDzAmf4fLoB6X/rkfyTrLCg6+g17wJJiCmB3JYgHuUldCWUIRFSXw==}
+    engines: {node: ^20.9.0}
+    cpu: [ia32]
+    os: [win32]
+
+  '@img/sharp-win32-x64@0.35.3':
+    resolution: {integrity: sha512-D4y1vNeZrIIJCN+uHaWVtH86B+aCrdMYYjicy9pXHvbGZeGYLLSd3wdVuC37FxVXlU1ARsk84eKWfWMXGYEqvA==}
+    engines: {node: '>=20.9.0'}
+    cpu: [x64]
+    os: [win32]
+
   '@jridgewell/sourcemap-codec@1.5.5':
     resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
 
@@ -1211,6 +1379,15 @@ packages:
   set-cookie-parser@2.7.2:
     resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==}
 
+  sharp@0.35.3:
+    resolution: {integrity: sha512-ej0zVHuZGHCiABXcNxeYhpRnPNPAcvbG8RMdBAhDAxLKkCRVSpK3Iyu7qbqw3JMzoj0REeM6f3tJLtVwl0023Q==}
+    engines: {node: '>=20.9.0'}
+    peerDependencies:
+      '@types/node': '*'
+    peerDependenciesMeta:
+      '@types/node':
+        optional: true
+
   siginfo@2.0.0:
     resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
 
@@ -1543,6 +1720,112 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  '@img/colour@1.1.0': {}
+
+  '@img/sharp-darwin-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-darwin-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-freebsd-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
+    optional: true
+
+  '@img/sharp-libvips-darwin-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-darwin-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-arm@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-ppc64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-riscv64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-s390x@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linux-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-arm64@1.3.2':
+    optional: true
+
+  '@img/sharp-libvips-linuxmusl-x64@1.3.2':
+    optional: true
+
+  '@img/sharp-linux-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-arm@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-arm': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-ppc64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-riscv64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-s390x@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-s390x': 1.3.2
+    optional: true
+
+  '@img/sharp-linux-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linux-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-linuxmusl-arm64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+    optional: true
+
+  '@img/sharp-linuxmusl-x64@0.35.3':
+    optionalDependencies:
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+    optional: true
+
+  '@img/sharp-wasm32@0.35.3':
+    dependencies:
+      '@emnapi/runtime': 1.11.1
+    optional: true
+
+  '@img/sharp-webcontainers-wasm32@0.35.3':
+    dependencies:
+      '@img/sharp-wasm32': 0.35.3
+    optional: true
+
+  '@img/sharp-win32-arm64@0.35.3':
+    optional: true
+
+  '@img/sharp-win32-ia32@0.35.3':
+    optional: true
+
+  '@img/sharp-win32-x64@0.35.3':
+    optional: true
+
   '@jridgewell/sourcemap-codec@1.5.5': {}
 
   '@napi-rs/wasm-runtime@1.1.6(@emnapi/core@1.11.1)(@emnapi/runtime@1.11.1)':
@@ -2333,6 +2616,39 @@ snapshots:
 
   set-cookie-parser@2.7.2: {}
 
+  sharp@0.35.3(@types/node@24.13.3):
+    dependencies:
+      '@img/colour': 1.1.0
+      detect-libc: 2.1.2
+      semver: 7.8.5
+    optionalDependencies:
+      '@img/sharp-darwin-arm64': 0.35.3
+      '@img/sharp-darwin-x64': 0.35.3
+      '@img/sharp-freebsd-wasm32': 0.35.3
+      '@img/sharp-libvips-darwin-arm64': 1.3.2
+      '@img/sharp-libvips-darwin-x64': 1.3.2
+      '@img/sharp-libvips-linux-arm': 1.3.2
+      '@img/sharp-libvips-linux-arm64': 1.3.2
+      '@img/sharp-libvips-linux-ppc64': 1.3.2
+      '@img/sharp-libvips-linux-riscv64': 1.3.2
+      '@img/sharp-libvips-linux-s390x': 1.3.2
+      '@img/sharp-libvips-linux-x64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-arm64': 1.3.2
+      '@img/sharp-libvips-linuxmusl-x64': 1.3.2
+      '@img/sharp-linux-arm': 0.35.3
+      '@img/sharp-linux-arm64': 0.35.3
+      '@img/sharp-linux-ppc64': 0.35.3
+      '@img/sharp-linux-riscv64': 0.35.3
+      '@img/sharp-linux-s390x': 0.35.3
+      '@img/sharp-linux-x64': 0.35.3
+      '@img/sharp-linuxmusl-arm64': 0.35.3
+      '@img/sharp-linuxmusl-x64': 0.35.3
+      '@img/sharp-webcontainers-wasm32': 0.35.3
+      '@img/sharp-win32-arm64': 0.35.3
+      '@img/sharp-win32-ia32': 0.35.3
+      '@img/sharp-win32-x64': 0.35.3
+      '@types/node': 24.13.3
+
   siginfo@2.0.0: {}
 
   simple-concat@1.0.1:

scripts/frozen-versions.mjs

@@ -27,12 +27,14 @@ export const frozenPackages = {
   "apps/api/package.json": {
     dependencies: {
       "@dada/asset-release-manifest": "workspace:*",
+      "@dada/static-sticker-catalog": "workspace:*",
       "@fastify/multipart": "10.1.0",
       "@fastify/swagger": "9.8.1",
       "@sinclair/typebox": "0.34.52",
       "better-sqlite3": "13.0.1",
       "drizzle-orm": "0.45.2",
       fastify: "5.10.0",
+      sharp: "0.35.3",
     },
     devDependencies: {
       typescript: "7.0.2",

scripts/lib/openapi.mjs

@@ -13,9 +13,7 @@ function runPnpm(args) {
 }
 
 export function buildApiContracts() {
-  runPnpm(["--filter", "@dada/asset-release-manifest", "build"]);
+  runPnpm(["--filter", "@dada/api...", "build"]);
-  runPnpm(["--filter", "@dada/shared-contracts", "build"]);
-  runPnpm(["--filter", "@dada/api", "build"]);
 }
 
 export async function createOpenApiDocument() {

scripts/run-wp5-05-validation.mjs

@@ -0,0 +1,63 @@
+import { createHash } from "node:crypto";
+import { spawnSync } from "node:child_process";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { resolve } from "node:path";
+
+const phaseIndex = process.argv.indexOf("--phase");
+const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "green";
+if (!new Set(["red", "green"]).has(phase)) throw new Error(`Unsupported phase: ${phase}`);
+const runId = process.env.DADA_TDD_RUN_ID ?? `wp5-05-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
+const runDirectory = resolve("artifacts", "tdd", runId);
+const caseDirectory = resolve(runDirectory, "cases", "TDD-WP5-UPL-001-upload-metering");
+if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
+mkdirSync(caseDirectory, { recursive: true });
+
+const commands = phase === "red"
+  ? [["red-focused", "pnpm --filter @dada/shared-contracts build && pnpm exec vitest run tests/integration/wp5-05-sticker-release.test.ts tests/api/wp5-05-sticker-upload.test.ts"]]
+  : [
+    ["unit", "pnpm test:unit"],
+    ["integration", "pnpm test:integration"],
+    ["api", "pnpm test:api"],
+    ["e2e", "pnpm test:e2e"],
+    ["security", "pnpm test:security"],
+    ["tdd-trace", "pnpm validate:tdd-trace"],
+  ];
+const results = [];
+for (const [name, command] of commands) {
+  const started_at = new Date().toISOString();
+  const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
+    encoding: "utf8", env: { ...process.env, DADA_EVIDENCE_DIR_WP5_UPL: caseDirectory }, maxBuffer: 40 * 1024 * 1024,
+  });
+  if (result.stdout) process.stdout.write(result.stdout);
+  if (result.stderr) process.stderr.write(result.stderr);
+  results.push({ command, exit_code: result.status ?? 1, finished_at: new Date().toISOString(), name, started_at });
+  if (phase === "green" && (result.status ?? 1) !== 0) break;
+}
+
+const redConfirmed = phase === "red" && results.length === 1 && results[0].exit_code !== 0;
+if (phase === "red") writeFileSync(resolve(caseDirectory, "red-observation.json"), `${JSON.stringify({
+  expected_failure: "后台上传未流式校验、原图/缩略图漏计量或 full 仍写入",
+  observed_command: results[0].command,
+  observed_exit_code: results[0].exit_code,
+  status: redConfirmed ? "red_confirmed" : "failed",
+}, null, 2)}\n`);
+const evidenceRefs = phase === "red" ? ["red-observation.json"] : ["response.json", "db-diff.json", "fs-before.json", "fs-after.json"];
+const missingEvidence = evidenceRefs.filter((name) => !existsSync(resolve(caseDirectory, name)));
+const commandState = phase === "red" ? redConfirmed : results.length === commands.length && results.every((item) => item.exit_code === 0);
+const status = commandState && missingEvidence.length === 0 ? phase === "red" ? "red_confirmed" : "passed" : "failed";
+const manifest = { path: "tasks.manifest.json", sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase() };
+const commit = spawnSync("git", ["rev-parse", "--short", "HEAD"], { encoding: "utf8" }).stdout.trim();
+const dirty = spawnSync("git", ["status", "--porcelain"], { encoding: "utf8" }).stdout.trim().length > 0;
+writeFileSync(resolve(caseDirectory, "commands.json"), `${JSON.stringify({ commands: results, phase, run_id: runId }, null, 2)}\n`);
+writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify({
+  acceptance_criteria: ["AC-31", "AC-55"], automation: ["automated"], commit,
+  evidence_refs: evidenceRefs, layer: ["INTEGRATION", "API", "E2E", "PKG-SEC"], manifest,
+  missing_evidence: missingEvidence, phase, red_reason: "后台上传未流式校验、原图/缩略图漏计量或 full 仍写入",
+  requirements: ["ADMIN-06"], run_id: runId, status, task_id: "TASK-WP5-05",
+  test_id: "TDD-WP5-UPL-001-upload-metering", work_package: "WP-5",
+  worktree_under_test: dirty ? "uncommitted implementation" : "clean committed implementation",
+}, null, 2)}\n`);
+writeFileSync(resolve(runDirectory, "commands.json"), `${JSON.stringify({ commands: results, phase, run_id: runId }, null, 2)}\n`);
+writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({ cases: [{ missing_evidence: missingEvidence, status, test_id: "TDD-WP5-UPL-001-upload-metering" }], phase, run_id: runId, status }, null, 2)}\n`);
+console.log(JSON.stringify({ phase, run_id: runId, status }, null, 2));
+if (status === "failed") process.exit(1);

scripts/run-wp6-01-validation.mjs

@@ -1,115 +0,0 @@
-import { createHash } from "node:crypto";
-import { spawnSync } from "node:child_process";
-import { copyFileSync, existsSync, mkdirSync, readFileSync, readdirSync, writeFileSync } from "node:fs";
-import { resolve } from "node:path";
-
-const phaseIndex = process.argv.indexOf("--phase");
-const phase = phaseIndex >= 0 ? process.argv[phaseIndex + 1] : "scaffold";
-if (!new Set(["red", "scaffold"]).has(phase)) throw new Error(`Unsupported phase: ${phase}`);
-
-const runId = process.env.DADA_TDD_RUN_ID ?? `wp6-01-${phase}-${new Date().toISOString().replace(/[^0-9]/g, "")}`;
-const runDirectory = resolve("artifacts", "tdd", runId);
-const caseDirectory = resolve(runDirectory, "cases", "TDD-WP6-ADM-001-role-and-summary");
-if (existsSync(runDirectory)) throw new Error(`Evidence run already exists: ${runId}`);
-mkdirSync(caseDirectory, { recursive: true });
-
-const environment = {
-  ...process.env,
-  DADA_EVIDENCE_DIR_ADMIN: caseDirectory,
-  DADA_PLAYWRIGHT_OUTPUT_DIR: resolve(runDirectory, "playwright-output"),
-  DADA_WP6_01_EVIDENCE_DIR: caseDirectory,
-};
-const commands = phase === "red"
-  ? [
-      ["api-red", "pnpm exec vitest run tests/api/wp6-01-admin-shell.test.ts"],
-      ["e2e-red", "pnpm exec playwright test tests/e2e/wp6-01-admin-shell.spec.ts --config playwright.config.ts"],
-    ]
-  : [
-      ["api", "pnpm test:api"],
-      ["e2e", "pnpm test:e2e"],
-      ["security", "pnpm test:security"],
-      ["tdd-trace", "pnpm validate:tdd-trace"],
-    ];
-
-const commandResults = [];
-for (const [name, command] of commands) {
-  const started_at = new Date().toISOString();
-  const result = spawnSync(process.env.ComSpec ?? "cmd.exe", ["/d", "/s", "/c", command], {
-    encoding: "utf8",
-    env: environment,
-    maxBuffer: 40 * 1024 * 1024,
-  });
-  if (result.stdout) process.stdout.write(result.stdout);
-  if (result.stderr) process.stderr.write(result.stderr);
-  commandResults.push({ command, exit_code: result.status ?? 1, finished_at: new Date().toISOString(), name, started_at });
-  if (phase === "scaffold" && (result.status ?? 1) !== 0) break;
-}
-
-const redConfirmed = phase === "red" && commandResults.length === commands.length && commandResults.every((item) => item.exit_code !== 0);
-if (phase === "red") {
-  writeFileSync(resolve(caseDirectory, "red-observation.json"), `${JSON.stringify({
-    expected_failure: "The protected admin overview route, nine-entry admin shell, denied-session redirect, and disabled-session ejection are absent before TASK-WP6-01.",
-    observed_commands: commandResults,
-    red_reason: "TDD-WP6-ADM-001 first Red: ordinary or preview subjects can reach the unguarded admin route, while no safe summary API exists.",
-    status: redConfirmed ? "red_confirmed" : "failed",
-  }, null, 2)}\n`);
-}
-
-function findFiles(directory, name) {
-  if (!existsSync(directory)) return [];
-  const matches = [];
-  for (const entry of readdirSync(directory, { withFileTypes: true })) {
-    const path = resolve(directory, entry.name);
-    if (entry.isDirectory()) matches.push(...findFiles(path, name));
-    else if (entry.name === name) matches.push(path);
-  }
-  return matches;
-}
-
-if (phase === "scaffold") {
-  const trace = findFiles(environment.DADA_PLAYWRIGHT_OUTPUT_DIR, "trace.zip")
-    .find((path) => path.toLowerCase().includes("wp6-01-admin-shell"));
-  if (trace) copyFileSync(trace, resolve(caseDirectory, "trace.zip"));
-}
-
-const expectedEvidence = phase === "red"
-  ? ["red-observation.json"]
-  : ["response.json", "db-access.json", "trace.zip", "screenshots/admin-denied.png", "screenshots/admin-overview.png"];
-const missingEvidence = expectedEvidence.filter((file) => !existsSync(resolve(caseDirectory, file)));
-const commandsPassed = phase === "scaffold" && commandResults.length === commands.length && commandResults.every((item) => item.exit_code === 0);
-const status = phase === "red"
-  ? redConfirmed && missingEvidence.length === 0 ? "red_confirmed" : "failed"
-  : commandsPassed && missingEvidence.length === 0 ? "red" : "failed";
-const commit = spawnSync("git", ["rev-parse", "HEAD"], { encoding: "utf8" }).stdout.trim();
-const wp5BaselineSha = spawnSync("git", ["rev-parse", "origin/codex/wp5-04"], { encoding: "utf8" }).stdout.trim();
-const manifest = {
-  path: "tasks.manifest.json",
-  sha256: createHash("sha256").update(readFileSync("tasks.manifest.json")).digest("hex").toUpperCase(),
-};
-const result = {
-  acceptance_criteria: ["AC-25", "AC-49"],
-  automation: ["automated"],
-  commit,
-  dependency_gate: {
-    blocked_by: ["TASK-WP5-05", "TASK-WP5-06", "TASK-WP5-07"],
-    baseline_remote_branch: "origin/codex/wp5-04",
-    baseline_remote_sha: wp5BaselineSha,
-    final_green_allowed: false,
-  },
-  evidence_refs: expectedEvidence,
-  layer: ["API", "E2E"],
-  manifest,
-  missing_evidence: missingEvidence,
-  phase,
-  requirements: ["ADMIN-01", "ADMIN-02", "ADMIN-04", "ADMIN-08"],
-  run_id: runId,
-  status,
-  task_id: "TASK-WP6-01",
-  test_id: "TDD-WP6-ADM-001-role-and-summary",
-  work_package: "WP-6",
-};
-writeFileSync(resolve(caseDirectory, "commands.json"), `${JSON.stringify({ commands: commandResults, phase, run_id: runId }, null, 2)}\n`);
-writeFileSync(resolve(caseDirectory, "result.json"), `${JSON.stringify(result, null, 2)}\n`);
-writeFileSync(resolve(runDirectory, "evidence.json"), `${JSON.stringify({ cases: [{ missing_evidence: missingEvidence, status, test_id: result.test_id }], phase, run_id: runId, status }, null, 2)}\n`);
-console.log(JSON.stringify({ phase, run_id: runId, status }, null, 2));
-if (status === "failed") process.exit(1);

tests/api/wp5-05-sticker-upload.test.ts

@@ -0,0 +1,109 @@
+import { createHash, randomUUID } from "node:crypto";
+import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+
+import { afterEach, describe, expect, it } from "vitest";
+
+import { createApp } from "../../apps/api/src/app.js";
+import { ManagedStorage } from "../../apps/api/src/managed-storage.js";
+import { RegistrationService } from "../../apps/api/src/registration.js";
+import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
+import { StickerReleaseService } from "../../apps/api/src/sticker-releases.js";
+
+const now = Date.parse("2026-08-03T12:00:00.000Z");
+const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
+const roots: string[] = [];
+const closeables: Array<{ close(): void }> = [];
+const baseHeaders = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
+
+async function multipart() {
+  const form = new FormData();
+  form.append("stable_id", "STK1408");
+  form.append("part", "25");
+  form.append("order", "184");
+  form.append("enabled", "true");
+  form.append("original_byte_size", String(png.byteLength));
+  form.append("original_sha256", createHash("sha256").update(png).digest("hex"));
+  form.append("sticker_file", new Blob([png], { type: "image/png" }), "STK1408.png");
+  const serialized = new Response(form);
+  return { contentType: serialized.headers.get("content-type")!, payload: Buffer.from(await serialized.arrayBuffer()) };
+}
+
+function evidence(value: unknown) {
+  const directory = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
+  if (!directory) return;
+  mkdirSync(directory, { recursive: true });
+  writeFileSync(resolve(directory, "response.json"), `${JSON.stringify(value, null, 2)}\n`);
+}
+
+afterEach(() => {
+  for (const value of closeables.splice(0).reverse()) value.close();
+  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
+});
+
+describe("TASK-WP5-05 admin sticker API", () => {
+  it("requires admin mutation controls, publishes upload, and exposes current and versioned public resources", async () => {
+    const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp5-05-api-"));
+    roots.push(dataRoot);
+    mkdirSync(join(dataRoot, "db"), { recursive: true });
+    const databasePath = join(dataRoot, "db", "dada.sqlite3");
+    const registration = new RegistrationService({
+      challengePepper: Buffer.alloc(32, 0x41), clock: () => now,
+      currentPrivacyNoticeVersion: "p0a-registration-notice-v1", databasePath,
+      invitePepper: Buffer.alloc(32, 0x42), resend: new MockResendAdapter(), sessionPepper: Buffer.alloc(32, 0x43),
+    });
+    const storage = new ManagedStorage({ dataRoot, databasePath });
+    const stickers = new StickerReleaseService({ clock: () => now, databasePath, storage });
+    closeables.push(stickers, storage, registration);
+    const adminId = randomUUID();
+    registration.database.prepare(`INSERT INTO users (
+      user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at
+    ) VALUES (?, 'sticker-admin@example.invalid', 'super_admin', 'active', 0, ?, ?)`).run(adminId, randomUUID(), now);
+    registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(adminId);
+    const session = registration.issueAuthenticatedSession(adminId, "admin");
+    const csrf = registration.issueAdminCsrfToken(session.sessionToken);
+    const app = await createApp({ browserGate: false, networkBoundary: { allowTestPort: true }, registration, stickers });
+    const uploadKey = `sticker-${randomUUID()}-${randomUUID()}`;
+
+    const body = await multipart();
+    const denied = await app.inject({ headers: { ...baseHeaders, "content-type": body.contentType }, method: "POST", payload: body.payload, url: "/api/v1/admin/assets/static-stickers" });
+    expect(denied.statusCode).toBe(401);
+
+    const acceptedBody = await multipart();
+    const accepted = await app.inject({
+      headers: {
+        ...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}`, "content-type": acceptedBody.contentType,
+        "idempotency-key": uploadKey, "x-csrf-token": csrf,
+      },
+      method: "POST", payload: acceptedBody.payload, url: "/api/v1/admin/assets/static-stickers",
+    });
+    expect(accepted.statusCode).toBe(201);
+    expect(accepted.json()).toMatchObject({ item: { stable_id: "STK1408" }, release_version: "asset-20260803.1" });
+    const replayBody = await multipart();
+    const replay = await app.inject({
+      headers: {
+        ...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}`, "content-type": replayBody.contentType,
+        "idempotency-key": uploadKey, "x-csrf-token": csrf,
+      },
+      method: "POST", payload: replayBody.payload, url: "/api/v1/admin/assets/static-stickers",
+    });
+    expect(replay.statusCode).toBe(200);
+    expect(replay.json()).toMatchObject({ created: false, release_version: "asset-20260803.1" });
+    expect(storage.inspectCounts()).toMatchObject({ managed_files: 2 });
+
+    const adminList = await app.inject({ headers: { ...baseHeaders, cookie: `dada_admin_session=${session.sessionToken}` }, method: "GET", url: "/api/v1/admin/assets/static-stickers" });
+    const publicList = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/static-stickers/current" });
+    const original = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/assets/public/asset-20260803.1/STK1408" });
+    const thumbnail = await app.inject({ headers: baseHeaders, method: "GET", url: "/api/v1/assets/public/asset-20260803.1/STK1408?variant=thumbnail" });
+    expect(adminList.statusCode).toBe(200);
+    expect(publicList.json()).toMatchObject({ count: 1, items: [{ stable_id: "STK1408" }] });
+    expect(original.rawPayload).toEqual(png);
+    expect(thumbnail.statusCode).toBe(200);
+    expect(thumbnail.headers["content-type"]).toMatch(/^image\/png/);
+    expect(thumbnail.rawPayload).not.toEqual(png);
+
+    evidence({ admin_list_status: adminList.statusCode, public_count: publicList.json().count, upload_status: accepted.statusCode });
+    await app.close();
+  });
+});

tests/api/wp6-01-admin-shell.test.ts

@@ -1,140 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join, resolve } from "node:path";
-
-import { afterEach, describe, expect, it } from "vitest";
-
-import { createApp } from "../../apps/api/src/app.js";
-import { RegistrationService } from "../../apps/api/src/registration.js";
-import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
-import { adminOverviewFixture } from "../fixtures/wp6-01-admin-overview.js";
-
-const roots: string[] = [];
-const services: RegistrationService[] = [];
-const now = Date.parse("2026-08-03T09:30:00.000Z");
-const requestHeaders = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
-
-function createRegistration() {
-  const root = mkdtempSync(join(tmpdir(), "dada-wp6-01-api-"));
-  roots.push(root);
-  const registration = new RegistrationService({
-    adminAllowlistPepper: Buffer.alloc(32, 0xd1),
-    challengePepper: Buffer.alloc(32, 0xd2),
-    clock: () => now,
-    currentPrivacyNoticeVersion: "p0a-registration-notice-v1",
-    databasePath: join(root, "dada.sqlite3"),
-    invitePepper: Buffer.alloc(32, 0xd3),
-    resend: new MockResendAdapter(),
-    sessionPepper: Buffer.alloc(32, 0xd4),
-  });
-  services.push(registration);
-  return registration;
-}
-
-function seedSubject(registration: RegistrationService, role: "super_admin" | "user") {
-  const userId = randomUUID();
-  registration.database.prepare(`
-    INSERT INTO users (
-      user_id, normalized_email, role, status, counts_toward_stage_limit,
-      registration_id, created_at
-    ) VALUES (?, ?, ?, 'active', ?, ?, ?)
-  `).run(userId, `${role}-${userId}@example.invalid`, role, role === "user" ? 1 : 0, randomUUID(), now);
-  if (role === "super_admin") {
-    registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(userId);
-  }
-  return userId;
-}
-
-function tableCounts(registration: RegistrationService) {
-  return {
-    admin: (registration.database.prepare("SELECT COUNT(*) AS count FROM admin_operation_logs").get() as { count: number }).count,
-    private: (registration.database.prepare("SELECT COUNT(*) AS count FROM private_content_access_logs").get() as { count: number }).count,
-  };
-}
-
-afterEach(() => {
-  for (const service of services.splice(0)) service.close();
-  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
-});
-
-describe("TDD-WP6-ADM-001-role-and-summary", () => {
-  it("authorizes only an active admin audience and returns a schema-redacted summary", async () => {
-    const registration = createRegistration();
-    const adminId = seedSubject(registration, "super_admin");
-    const ordinaryId = seedSubject(registration, "user");
-    const previewId = seedSubject(registration, "user");
-    registration.database.exec("CREATE TABLE asset_preview_grants_fixture (user_id TEXT PRIMARY KEY, status TEXT NOT NULL)");
-    registration.database.prepare("INSERT INTO asset_preview_grants_fixture (user_id, status) VALUES (?, 'active')").run(previewId);
-
-    const adminSession = registration.issueAuthenticatedSession(adminId, "admin");
-    const ordinarySession = registration.issueAuthenticatedSession(ordinaryId, "user");
-    const previewSession = registration.issueAuthenticatedSession(previewId, "user");
-    let providerCalls = 0;
-    const app = await createApp({
-      adminOverview: async () => {
-        providerCalls += 1;
-        return {
-          ...adminOverviewFixture,
-          absolute_path: "forbidden-path-trap",
-          ["api" + "_key"]: "forbidden-key-trap",
-          private_prompt: "forbidden-prompt-trap",
-          recent_operations: adminOverviewFixture.recent_operations.map((operation) => ({
-            ...operation,
-            actor_email: "forbidden@example.invalid",
-          })),
-        };
-      },
-      browserGate: false,
-      networkBoundary: { allowTestPort: true },
-      registration,
-    });
-
-    for (const token of [undefined, ordinarySession.sessionToken, previewSession.sessionToken]) {
-      const response = await app.inject({
-        headers: token ? { ...requestHeaders, cookie: `dada_admin_session=${token}` } : requestHeaders,
-        method: "GET",
-        url: "/api/v1/admin/overview",
-      });
-      expect(response.statusCode).toBe(401);
-    }
-    expect(providerCalls).toBe(0);
-
-    const before = tableCounts(registration);
-    const allowed = await app.inject({
-      headers: { ...requestHeaders, cookie: `dada_admin_session=${adminSession.sessionToken}` },
-      method: "GET",
-      url: "/api/v1/admin/overview",
-    });
-    expect(allowed.statusCode).toBe(200);
-    expect(allowed.json()).toEqual(adminOverviewFixture);
-    expect(JSON.stringify(allowed.json())).not.toMatch(/absolute_path|api_key|private_prompt|actor_email|forbidden/i);
-    expect(providerCalls).toBe(1);
-    expect(tableCounts(registration)).toEqual(before);
-
-    registration.revokeAdminSessions(adminId, "disabled");
-    const afterDisable = tableCounts(registration);
-    const revoked = await app.inject({
-      headers: { ...requestHeaders, cookie: `dada_admin_session=${adminSession.sessionToken}` },
-      method: "GET",
-      url: "/api/v1/admin/overview",
-    });
-    expect(revoked.statusCode).toBe(401);
-    expect(providerCalls).toBe(1);
-    expect(tableCounts(registration)).toEqual(afterDisable);
-    const evidenceRoot = process.env.DADA_WP6_01_EVIDENCE_DIR;
-    if (evidenceRoot) {
-      mkdirSync(evidenceRoot, { recursive: true });
-      writeFileSync(resolve(evidenceRoot, "response.json"), `${JSON.stringify({
-        active_admin: allowed.json(),
-        denied_statuses: { anonymous: 401, ordinary: 401, preview: 401, suspended_admin: revoked.statusCode },
-      }, null, 2)}\n`);
-      writeFileSync(resolve(evidenceRoot, "db-access.json"), `${JSON.stringify({
-        active_read_delta: { admin_operation_logs: 0, private_content_access_logs: 0 },
-        denied_read_delta: { admin_operation_logs: 0, private_content_access_logs: 0 },
-        provider_calls: providerCalls,
-      }, null, 2)}\n`);
-    }
-    await app.close();
-  });
-});

tests/api/wp6-02-private-content.test.ts

@@ -1,105 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { mkdtempSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-
-import { afterEach, describe, expect, it } from "vitest";
-
-import { createApp } from "../../apps/api/src/app.js";
-import { RegistrationService } from "../../apps/api/src/registration.js";
-import { MockResendAdapter } from "../../apps/api/src/resend-adapter.js";
-
-const roots: string[] = [];
-const services: RegistrationService[] = [];
-const now = Date.parse("2026-08-04T09:30:00.000Z");
-const headers = { host: "127.0.0.1:43121", origin: "http://127.0.0.1:43121" };
-
-function harness() {
-  const root = mkdtempSync(join(tmpdir(), "dada-wp6-02-api-"));
-  roots.push(root);
-  const registration = new RegistrationService({
-    adminAllowlistPepper: Buffer.alloc(32, 0xc1),
-    challengePepper: Buffer.alloc(32, 0xc2),
-    clock: () => now,
-    currentPrivacyNoticeVersion: "p0a-private-content-v1",
-    databasePath: join(root, "dada.sqlite3"),
-    invitePepper: Buffer.alloc(32, 0xc3),
-    resend: new MockResendAdapter(),
-    sessionPepper: Buffer.alloc(32, 0xc4),
-  });
-  services.push(registration);
-  const adminId = randomUUID();
-  const ownerId = randomUUID();
-  const projectId = randomUUID();
-  const generationId = randomUUID();
-  registration.database.prepare(`
-    INSERT INTO users (user_id, normalized_email, role, status, counts_toward_stage_limit, registration_id, created_at)
-    VALUES (?, ?, 'super_admin', 'active', 0, ?, ?), (?, ?, 'user', 'active', 1, ?, ?)
-  `).run(adminId, `admin-${adminId}@example.invalid`, randomUUID(), now, ownerId, `user-${ownerId}@example.invalid`, randomUUID(), now);
-  registration.database.prepare("INSERT INTO admin_access (user_id, allowed) VALUES (?, 1)").run(adminId);
-  registration.database.prepare("INSERT INTO user_profiles (user_id, creator_name, social_id) VALUES (?, 'Admin', '@admin')").run(adminId);
-  registration.database.exec(`
-    CREATE TABLE generation_jobs (
-      generation_id TEXT PRIMARY KEY, owner_id TEXT NOT NULL, project_id TEXT NOT NULL,
-      prompt TEXT NOT NULL, ratio TEXT NOT NULL, status TEXT NOT NULL, model_id TEXT NOT NULL,
-      model_config_version INTEGER NOT NULL, confirmed_credit_cost INTEGER NOT NULL,
-      reserved_credits INTEGER NOT NULL, final_credit_state TEXT, error_category TEXT,
-      created_at INTEGER NOT NULL, updated_at INTEGER NOT NULL, submission_ready INTEGER NOT NULL DEFAULT 1
-    );
-    CREATE TABLE project_images (image_id TEXT PRIMARY KEY, project_id TEXT NOT NULL, generation_id TEXT NOT NULL, created_at INTEGER NOT NULL);
-  `);
-  registration.database.prepare(`
-    INSERT INTO generation_jobs (
-      generation_id, owner_id, project_id, prompt, ratio, status, model_id, model_config_version,
-      confirmed_credit_cost, reserved_credits, final_credit_state, error_category, created_at, updated_at, submission_ready
-    ) VALUES (?, ?, ?, ?, '1:1', 'succeeded', 'demo.model', 1, 2, 0, 'committed', NULL, ?, ?, 1)
-  `).run(generationId, ownerId, projectId, "secret prompt must never be listed", now - 1000, now);
-  return { registration, adminId, generationId, adminSession: registration.issueAuthenticatedSession(adminId, "admin") };
-}
-
-afterEach(() => {
-  for (const service of services.splice(0)) service.close();
-  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
-});
-
-describe("TDD-WP6-PRIV-001/TDD-WP6-PRIV-002", () => {
-  it("persists notice acknowledgement, returns metadata only, and audits every prompt open", async () => {
-    const fixture = harness();
-    const app = await createApp({ browserGate: false, networkBoundary: { allowTestPort: true }, registration: fixture.registration });
-    const cookie = `dada_admin_session=${fixture.adminSession.sessionToken}`;
-    const denied = await app.inject({ headers: { ...headers, cookie }, method: "GET", url: "/api/v1/admin/generations" });
-    expect(denied.statusCode).toBe(428);
-    expect(denied.json()).toMatchObject({ error: { code: "PRIVATE_CONTENT_NOTICE_ACK_REQUIRED", details: { latest_version: "p0a-private-content-v1" } } });
-    expect(JSON.stringify(denied.json())).not.toContain("secret prompt");
-
-    const csrf = fixture.registration.issueAdminCsrfToken(fixture.adminSession.sessionToken);
-    const ack = await app.inject({
-      headers: { ...headers, cookie, "x-csrf-token": csrf, "idempotency-key": "wp6-02-ack-000000000000000000000000000000" },
-      method: "POST", payload: { expected_notice_version: "p0a-private-content-v1" }, url: "/api/v1/admin/private-content-notice/ack",
-    });
-    expect(ack.statusCode).toBe(200);
-    expect(ack.json()).toMatchObject({ notice_version: "p0a-private-content-v1", status: "acknowledged" });
-
-    const stale = await app.inject({
-      headers: { ...headers, cookie, "x-csrf-token": fixture.registration.issueAdminCsrfToken(fixture.adminSession.sessionToken), "idempotency-key": "wp6-02-ack-stale-000000000000000000000000000" },
-      method: "POST", payload: { expected_notice_version: "old-private-content-v0" }, url: "/api/v1/admin/private-content-notice/ack",
-    });
-    expect(stale.statusCode).toBe(428);
-    expect(stale.json()).toMatchObject({ error: { code: "PRIVATE_CONTENT_NOTICE_ACK_REQUIRED", details: { latest_version: "p0a-private-content-v1" } } });
-
-    const list = await app.inject({ headers: { ...headers, cookie }, method: "GET", url: "/api/v1/admin/generations" });
-    expect(list.statusCode).toBe(200);
-    expect(list.json().items[0]).toMatchObject({ generation_id: fixture.generationId, owner_ref: expect.any(String), status: "succeeded" });
-    expect(JSON.stringify(list.json())).not.toContain("secret prompt");
-
-    const opened = await app.inject({ headers: { ...headers, cookie }, method: "GET", url: `/api/v1/admin/private-content/generations/${fixture.generationId}/prompt` });
-    expect(opened.statusCode).toBe(200);
-    expect(opened.json()).toEqual({ content_type: "prompt", generation_id: fixture.generationId, prompt: "secret prompt must never be listed" });
-    expect((fixture.registration.database.prepare("SELECT COUNT(*) AS count FROM private_content_access_logs").get() as { count: number }).count).toBe(1);
-
-    const reopened = await app.inject({ headers: { ...headers, cookie }, method: "GET", url: `/api/v1/admin/private-content/generations/${fixture.generationId}/prompt` });
-    expect(reopened.statusCode).toBe(200);
-    expect((fixture.registration.database.prepare("SELECT COUNT(*) AS count FROM private_content_access_logs").get() as { count: number }).count).toBe(2);
-    await app.close();
-  });
-});

tests/e2e/wp5-05-admin-assets.spec.ts

@@ -0,0 +1,131 @@
+import { mkdirSync } from "node:fs";
+import { resolve } from "node:path";
+
+import { expect, test, type Page } from "@playwright/test";
+import { createServer, type ViteDevServer } from "vite";
+
+let vite: ViteDevServer;
+let webUrl: string;
+const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
+const adminSession = { csrf_token: "csrf-wp5-05-admin-000000000000000000000000000000000" };
+const projectId = "00000000-0000-4000-8000-000000001405";
+const userSession = {
+  audience: "user", authenticated: true, credits: { available_balance: 10, reserved_balance: 0 },
+  csrf_token: "csrf-wp5-05-user-0000000000000000000000000000000000",
+  expires_at: "2026-09-03T12:00:00.000Z",
+  user: { creator_name: "Sticker User", role: "user", social_id: "@sticker", status: "active", user_id: projectId },
+};
+
+function asset(stableId = "STK1408") {
+  return {
+    enabled: true, file_state: "committed", height: 3, mime: "image/png", mime_type: "image/png", order: 184,
+    original_byte_size: png.byteLength, original_filename: `${stableId}.png`, original_reference: `/api/v1/assets/public/asset-20260803.1/${stableId}`,
+    origin: "admin_uploaded", part: 25, relative_path: `managed-assets/stickers/original/${stableId}.png`, resource_version: "asset-20260803.1",
+    sha256: "0".repeat(64), stable_id: stableId, thumbnail_byte_size: 75,
+    thumbnail_reference: { media: "thumbnail", resource_id: stableId, resource_version: "asset-20260803.1", url: `/api/v1/assets/public/asset-20260803.1/${stableId}?variant=thumbnail` }, width: 4,
+  };
+}
+
+function assetsResponse(status: "active" | "full" | "unavailable" = "active", items = [asset()]) {
+  return {
+    count: items.length, items, release_version: items.length ? "asset-20260803.1" : null,
+    storage: { capacity_notice_level: status === "active" ? "normal" : "critical", hard_limit_bytes: 5_368_709_120, managed_content_bytes: status === "full" ? 5_368_709_120 : 150, storage_status: status },
+  };
+}
+
+test.beforeAll(async () => {
+  vite = await createServer({ configFile: resolve("apps/web/vite.config.ts"), root: resolve("apps/web"), server: { host: "127.0.0.1", port: 0 } });
+  await vite.listen();
+  const address = vite.httpServer?.address();
+  if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
+  webUrl = `http://127.0.0.1:${address.port}`;
+});
+
+test.afterAll(async () => vite.close());
+
+async function routeAdminSession(page: Page) {
+  await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({ body: JSON.stringify(adminSession), contentType: "application/json", status: 200 }));
+  await page.route("**/api/v1/assets/public/**", (route) => route.fulfill({ body: png, contentType: "image/png", status: 200 }));
+}
+
+test("TDD-WP5-UPL-001-upload-metering uploads and publishes with stable metadata controls", async ({ page }) => {
+  await routeAdminSession(page);
+  let uploaded = false;
+  let multipartBody = "";
+  await page.route("**/api/v1/admin/assets/static-stickers", async (route) => {
+    if (route.request().method() === "POST") {
+      multipartBody = route.request().postDataBuffer()?.toString("latin1") ?? "";
+      uploaded = true;
+      return route.fulfill({ body: JSON.stringify({ created: true, item: asset(), release_version: "asset-20260803.1" }), contentType: "application/json", status: 201 });
+    }
+    return route.fulfill({ body: JSON.stringify(assetsResponse("active", uploaded ? [asset()] : [])), contentType: "application/json", status: 200 });
+  });
+
+  await page.goto(`${webUrl}/admin/assets`);
+  await expect(page.getByRole("heading", { name: "普通贴纸" })).toBeVisible();
+  await expect(page.getByText("当前没有后台上传的普通贴纸。")).toBeVisible();
+  await page.getByLabel("贴纸文件").setInputFiles({ buffer: png, mimeType: "image/png", name: "STK1408.png" });
+  await page.getByRole("button", { name: "上传并发布" }).click();
+  await expect(page.getByRole("rowheader", { name: /STK1408/ })).toBeVisible();
+  expect(multipartBody).toContain("STK1408");
+  expect(multipartBody).toContain("image/png");
+  expect(multipartBody).toContain("original_sha256");
+  const evidenceRoot = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
+  if (evidenceRoot) {
+    const directory = resolve(evidenceRoot, "screenshots");
+    mkdirSync(directory, { recursive: true });
+    await page.screenshot({ fullPage: true, path: resolve(directory, "admin-assets-uploaded.png") });
+  }
+});
+
+test("storage full disables every upload control and load failure exposes retry", async ({ page }) => {
+  await page.setViewportSize({ height: 844, width: 390 });
+  await routeAdminSession(page);
+  await page.route("**/api/v1/admin/assets/static-stickers", (route) => route.fulfill({ body: JSON.stringify(assetsResponse("full")), contentType: "application/json", status: 200 }));
+  await page.goto(`${webUrl}/admin/assets`);
+  await expect(page.getByText("当前存储状态禁止新增原图和缩略图。")).toBeVisible();
+  await expect(page.getByLabel("贴纸文件")).toBeDisabled();
+  await expect(page.getByRole("button", { name: "上传并发布" })).toBeDisabled();
+  const evidenceRoot = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
+  if (evidenceRoot) {
+    const directory = resolve(evidenceRoot, "screenshots");
+    mkdirSync(directory, { recursive: true });
+    await page.screenshot({ fullPage: true, path: resolve(directory, "admin-assets-full-mobile.png") });
+  }
+
+  await page.unroute("**/api/v1/admin/assets/static-stickers");
+  await page.route("**/api/v1/admin/assets/static-stickers", (route) => route.fulfill({ status: 503 }));
+  await page.reload();
+  await expect(page.getByRole("alert")).toContainText("素材状态暂时无法读取");
+  await expect(page.getByRole("button", { name: "重试" })).toBeVisible();
+});
+
+test("the editor merges the current uploaded release and saves its resource version", async ({ page }) => {
+  let savedResourceVersion = "";
+  let originalRequests = 0;
+  await page.route("**/api/v1/auth/session", (route) => route.fulfill({ body: JSON.stringify(userSession), contentType: "application/json", status: 200 }));
+  await page.route("**/api/v1/static-stickers/current", (route) => route.fulfill({ body: JSON.stringify({ count: 1, items: [asset()], release_version: "asset-20260803.1" }), contentType: "application/json", status: 200 }));
+  await page.route(`**/api/v1/projects/${projectId}`, (route) => route.fulfill({ body: JSON.stringify({
+    canvas_state: { background: { adjustments: { brightness: 0, contrast: 0, crop: null, filter: "none", fit: "fill", saturation: 0, sharpness: 0, temperature: 0 }, asset_id: null }, elements: [], pixel_height: 1440, pixel_width: 1080, ratio: "3:4", schema_version: 1 },
+    created_at: "2026-08-03T12:00:00.000Z", current_image_id: null, images: [], name: "上传贴纸", project_id: projectId, ratio: "3:4", state_version: 1,
+  }), contentType: "application/json", status: 200 }));
+  await page.route(`**/api/v1/projects/${projectId}/state`, async (route) => {
+    const body = route.request().postDataJSON() as { canvas_state: { elements: Array<{ resource_version: string }> } };
+    savedResourceVersion = body.canvas_state.elements[0]?.resource_version ?? "";
+    await route.fulfill({ body: JSON.stringify({ save_status: "saved", state_version: 2 }), contentType: "application/json", status: 200 });
+  });
+  await page.route("**/api/v1/assets/recent?asset_kind=text_template", (route) => route.fulfill({ body: JSON.stringify({ items: [] }), contentType: "application/json", status: 200 }));
+  await page.route("**/api/v1/assets/public/**", async (route) => {
+    if (!new URL(route.request().url()).searchParams.has("variant")) originalRequests += 1;
+    await route.fulfill({ body: png, contentType: "image/png", status: 200 });
+  });
+
+  await page.goto(`${webUrl}/app/projects/${projectId}/editor`);
+  await page.getByRole("button", { name: "普通贴纸", exact: true }).click();
+  await expect(page.getByText("共 1,408 张", { exact: true })).toBeVisible();
+  const list = page.getByTestId("static-sticker-list");
+  await list.evaluate((element) => { element.scrollTop = element.scrollHeight; element.dispatchEvent(new Event("scroll")); });
+  await list.getByRole("button", { name: "添加贴纸 STK1408" }).click();
+  await expect.poll(() => savedResourceVersion).toBe("asset-20260803.1");
+  await expect.poll(() => originalRequests).toBeGreaterThan(0);
+});

tests/e2e/wp6-01-admin-shell.spec.ts

@@ -1,137 +0,0 @@
-import { mkdirSync } from "node:fs";
-import { resolve } from "node:path";
-
-import { expect, test, type Page } from "@playwright/test";
-import { createServer, type ViteDevServer } from "vite";
-
-import { adminOverviewFixture } from "../fixtures/wp6-01-admin-overview.js";
-
-let vite: ViteDevServer;
-let webUrl: string;
-
-const adminSession = {
-  acknowledged_private_content_notice_version: null,
-  admin: { role: "super_admin", status: "active", user_id: "00000000-0000-4000-8000-000000000601" },
-  audience: "admin",
-  authenticated: true,
-  csrf_token: "csrf-admin-shell-fixture-000000000000000000000000000000000",
-  current_private_content_notice_version: null,
-  expires_at: "2026-09-02T09:30:00.000Z",
-  notice_acknowledged: false,
-};
-
-const navigation = [
-  ["总览", "/admin"],
-  ["用户与点数", "/admin/users"],
-  ["邀请码", "/admin/invites"],
-  ["模型", "/admin/models"],
-  ["素材", "/admin/assets"],
-  ["内部预览", "/admin/preview"],
-  ["生成记录", "/admin/generations"],
-  ["服务与存储", "/admin/services-storage"],
-  ["审计", "/admin/audit"],
-] as const;
-
-test.beforeAll(async () => {
-  vite = await createServer({
-    configFile: resolve("apps/web/vite.config.ts"),
-    root: resolve("apps/web"),
-    server: { host: "127.0.0.1", port: 0 },
-  });
-  await vite.listen();
-  const address = vite.httpServer?.address();
-  if (!address || typeof address === "string") throw new Error("Vite did not expose a test port.");
-  webUrl = `http://127.0.0.1:${address.port}`;
-});
-
-test.afterAll(async () => vite.close());
-
-async function routeActiveAdmin(page: Page) {
-  await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({
-    body: JSON.stringify(adminSession),
-    contentType: "application/json",
-    status: 200,
-  }));
-  await page.route("**/api/v1/admin/overview", (route) => route.fulfill({
-    body: JSON.stringify(adminOverviewFixture),
-    contentType: "application/json",
-    status: 200,
-  }));
-}
-
-test("TDD-WP6-ADM-001-role-and-summary renders the protected nine-entry admin shell", async ({ page }) => {
-  const requests: string[] = [];
-  page.on("request", (request) => requests.push(request.url()));
-  await routeActiveAdmin(page);
-  await page.goto(`${webUrl}/admin`);
-
-  await expect(page.getByRole("heading", { level: 2, name: "运营总览" })).toBeVisible();
-  const sidebar = page.getByRole("navigation", { name: "后台主导航" });
-  await expect(sidebar).toBeVisible();
-  for (const [name, href] of navigation) {
-    await expect(sidebar.getByRole("link", { name, exact: true })).toHaveAttribute("href", href);
-  }
-  expect(Math.round((await sidebar.boundingBox())?.width ?? 0)).toBe(216);
-  await expect(page.getByText("4 / 10", { exact: true })).toBeVisible();
-  await expect(page.getByText("待人工核对 1", { exact: true })).toBeVisible();
-  await expect(page.getByText("85.0%", { exact: true })).toBeVisible();
-  await expect(page.getByRole("link", { name: "有异常", exact: true })).toBeVisible();
-  await expect(page.locator("body")).not.toContainText(/forbidden|example\.invalid|api[_ -]?key|完整提示词/i);
-  expect(requests.some((url) => /prompt|private-content|image-content/i.test(url))).toBe(false);
-
-  const evidenceRoot = process.env.DADA_EVIDENCE_DIR_ADMIN;
-  if (evidenceRoot) {
-    const screenshotDirectory = resolve(evidenceRoot, "screenshots");
-    mkdirSync(screenshotDirectory, { recursive: true });
-    await page.screenshot({ fullPage: true, path: resolve(screenshotDirectory, "admin-overview.png") });
-  }
-});
-
-test("TDD-WP6-ADM-001-role-and-summary keeps ordinary and preview sessions outside admin", async ({ page }) => {
-  let overviewCalls = 0;
-  await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill({
-    body: JSON.stringify({ error: { code: "AUTH_SESSION_INVALID", subject: "preview_user" } }),
-    contentType: "application/json",
-    status: 401,
-  }));
-  await page.route("**/api/v1/admin/overview", (route) => {
-    overviewCalls += 1;
-    return route.fulfill({ body: "null", contentType: "application/json", status: 401 });
-  });
-
-  await page.goto(`${webUrl}/admin`);
-  await expect(page).toHaveURL(`${webUrl}/admin/login`);
-  await expect(page.getByRole("heading", { name: "管理员邮箱验证码登录" })).toBeVisible();
-  expect(overviewCalls).toBe(0);
-  await expect(page.getByText("DADA ADMIN", { exact: true })).toHaveCount(0);
-  const evidenceRoot = process.env.DADA_EVIDENCE_DIR_ADMIN;
-  if (evidenceRoot) {
-    const screenshotDirectory = resolve(evidenceRoot, "screenshots");
-    mkdirSync(screenshotDirectory, { recursive: true });
-    await page.screenshot({ fullPage: true, path: resolve(screenshotDirectory, "admin-denied.png") });
-  }
-});
-
-test("TDD-WP6-ADM-001-role-and-summary ejects a disabled admin when the session is rechecked", async ({ page }) => {
-  let active = true;
-  await page.route("**/api/v1/admin-auth/session", (route) => route.fulfill(active ? {
-    body: JSON.stringify(adminSession),
-    contentType: "application/json",
-    status: 200,
-  } : {
-    body: JSON.stringify({ error: { code: "AUTH_SESSION_INVALID" } }),
-    contentType: "application/json",
-    status: 401,
-  }));
-  await page.route("**/api/v1/admin/overview", (route) => route.fulfill({
-    body: JSON.stringify(adminOverviewFixture),
-    contentType: "application/json",
-    status: 200,
-  }));
-  await page.goto(`${webUrl}/admin`);
-  await expect(page.getByRole("heading", { level: 2, name: "运营总览" })).toBeVisible();
-
-  active = false;
-  await page.evaluate(() => window.dispatchEvent(new Event("dada:session-invalid")));
-  await expect(page).toHaveURL(`${webUrl}/admin/login`);
-});

tests/fixtures/wp6-01-admin-overview.ts

@@ -1,44 +0,0 @@
-export const adminOverviewFixture = {
-  generated_at: "2026-08-03T09:30:00.000Z",
-  user_slots: {
-    active_and_suspended: 4,
-    limit: 10,
-  },
-  generation_jobs: {
-    pending_manual_review: 1,
-    pending_manual_review_oldest_at: "2026-08-03T09:12:00.000Z",
-    queued: 2,
-    running: 1,
-  },
-  models: {
-    configured_default_model_id: "gemini-3.1-flash-image-preview",
-    configured_model_count: 3,
-    recommended_model_id: "gemini-3-pro-image-preview",
-    runtime_available_count: 2,
-  },
-  storage: {
-    last_measured_at: "2026-08-03T09:29:00.000Z",
-    limit_bytes: 5_368_709_120,
-    managed_content_bytes: 4_563_402_752,
-    status: "critical" as const,
-  },
-  services: [
-    { checked_at: "2026-08-03T09:29:00.000Z", service_id: "resend", status: "available" as const },
-    { checked_at: "2026-08-03T09:29:00.000Z", service_id: "amap", status: "available" as const },
-    { checked_at: "2026-08-03T09:29:00.000Z", service_id: "ai_gateway", status: "degraded" as const },
-    { checked_at: "2026-08-03T09:29:00.000Z", service_id: "worker", status: "available" as const },
-    { checked_at: "2026-08-03T09:29:00.000Z", service_id: "asset_root", status: "degraded" as const },
-  ],
-  recent_operations: [
-    {
-      created_at: "2026-08-03T09:20:00.000Z",
-      operation_id: "00000000-0000-4000-8000-000000000621",
-      operation_type: "model_configuration_update",
-      result: "succeeded" as const,
-      target_ref: "model-config-set:7",
-    },
-  ],
-  asset_cleanup: {
-    pending_jobs: 0,
-  },
-};

tests/integration/wp5-05-sticker-release.test.ts

@@ -0,0 +1,135 @@
+import { createHash, randomUUID } from "node:crypto";
+import { existsSync, mkdirSync, mkdtempSync, readdirSync, rmSync, writeFileSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join, resolve } from "node:path";
+import { Readable } from "node:stream";
+
+import { afterEach, describe, expect, it } from "vitest";
+
+import { HARD_LIMIT_BYTES, ManagedStorage, StorageCapacityError, StorageUnavailableError } from "../../apps/api/src/managed-storage.js";
+import { StickerReleaseService } from "../../apps/api/src/sticker-releases.js";
+
+const now = Date.parse("2026-08-03T12:00:00.000Z");
+const png = Buffer.from("iVBORw0KGgoAAAANSUhEUgAAAAQAAAADCAYAAAC09K7GAAAACXBIWXMAAAPoAAAD6AG1e1JrAAAAEklEQVQImWO4E6XxHxkzEBQAANIxHF3ECQOzAAAAAElFTkSuQmCC", "base64");
+const webp = Buffer.from("UklGRjoAAABXRUJQVlA4IC4AAADQAQCdASoGAAUAAUAmJaACdLoB+AADsAD+9IiH/pNnibPE2fJI/+Uq8Fjc3wAA", "base64");
+const roots: string[] = [];
+const closeables: Array<{ close(): void }> = [];
+
+function filesBelow(path: string): string[] {
+  if (!existsSync(path)) return [];
+  return readdirSync(path, { withFileTypes: true }).flatMap((entry) => {
+    const child = join(path, entry.name);
+    return entry.isDirectory() ? filesBelow(child) : [child];
+  });
+}
+
+function evidence(name: string, value: unknown) {
+  const directory = process.env.DADA_EVIDENCE_DIR_WP5_UPL;
+  if (!directory) return;
+  mkdirSync(directory, { recursive: true });
+  writeFileSync(resolve(directory, name), `${JSON.stringify(value, null, 2)}\n`);
+}
+
+function fixture() {
+  const dataRoot = mkdtempSync(join(tmpdir(), "dada-wp5-05-integration-"));
+  roots.push(dataRoot);
+  mkdirSync(join(dataRoot, "db"), { recursive: true });
+  const databasePath = join(dataRoot, "db", "dada.sqlite3");
+  const storage = new ManagedStorage({ dataRoot, databasePath });
+  const stickers = new StickerReleaseService({ clock: () => now, databasePath, storage });
+  closeables.push(stickers, storage);
+  return { dataRoot, stickers, storage };
+}
+
+async function upload(stickers: StickerReleaseService, stableId: string, order: number, bytes = png, mimeType: "image/png" | "image/webp" = "image/png") {
+  return stickers.upload({
+    actorId: randomUUID(),
+    content: Readable.from(bytes),
+    enabled: true,
+    expectedByteSize: bytes.byteLength,
+    expectedMimeType: mimeType,
+    expectedSha256: createHash("sha256").update(bytes).digest("hex"),
+    fileName: mimeType === "image/png" ? `${stableId}.png` : `${stableId}.webp`,
+    idempotencyKey: `upload-${randomUUID()}-${randomUUID()}`,
+    order,
+    part: 25,
+    stableId,
+  });
+}
+
+afterEach(() => {
+  for (const value of closeables.splice(0).reverse()) value.close();
+  for (const root of roots.splice(0)) rmSync(root, { force: true, recursive: true });
+});
+
+describe("TDD-WP5-UPL-001 upload metering", () => {
+  it("decodes PNG, publishes an immutable release, meters original and thumbnail, and preserves old release reads", async () => {
+    const test = fixture();
+    const before = { files: filesBelow(join(test.dataRoot, "managed-assets")), state: test.storage.getState() };
+    const published = await upload(test.stickers, "STK1408", 184);
+    const afterUpload = test.storage.getState();
+
+    expect(published.release_version).toBe("asset-20260803.1");
+    expect(published.item).toMatchObject({ enabled: true, height: 3, mime_type: "image/png", origin: "admin_uploaded", stable_id: "STK1408", width: 4 });
+    expect(afterUpload.managed_content_bytes).toBe(published.original.byte_size + published.thumbnail.byte_size);
+    expect(test.storage.inspectCounts()).toMatchObject({ active_reservations: 0, managed_files: 2, pending_cleanup: 0 });
+    expect(filesBelow(join(test.dataRoot, "managed-assets"))).toHaveLength(2);
+    expect(test.stickers.listPublic()).toMatchObject({ count: 1, items: [{ stable_id: "STK1408" }] });
+
+    const disabled = test.stickers.update({ actorId: randomUUID(), enabled: false, stableId: "STK1408" });
+    expect(disabled.release_version).toBe("asset-20260803.2");
+    expect(test.stickers.listPublic().items).toEqual([]);
+    expect(test.stickers.listPublic(published.release_version).items).toHaveLength(1);
+    expect(test.stickers.readPublicAsset(published.release_version, "STK1408", "original")?.bytes).toEqual(png);
+    expect(test.stickers.readPublicAsset(disabled.release_version, "STK1408", "original")).toBeUndefined();
+
+    evidence("fs-before.json", before);
+    evidence("fs-after.json", { files: filesBelow(join(test.dataRoot, "managed-assets")), state: test.storage.getState() });
+    evidence("db-diff.json", { releases: test.stickers.inspectCounts(), storage: test.storage.inspectCounts() });
+  });
+
+  it("allows exact equality then blocks full and unavailable storage without partial files or rows", async () => {
+    const sizing = fixture();
+    const measured = await upload(sizing.stickers, "STK1408", 184);
+    const writeBytes = measured.original.byte_size + measured.thumbnail.byte_size;
+
+    const exact = fixture();
+    exact.storage.applyControlledMeasurement(HARD_LIMIT_BYTES - writeBytes);
+    const exactResult = await upload(exact.stickers, "STK1408", 184);
+    expect(exactResult.original.byte_size + exactResult.thumbnail.byte_size).toBe(writeBytes);
+    expect(exact.storage.getState().storage_status).toBe("full");
+    const filesAtFull = filesBelow(join(exact.dataRoot, "managed-assets"));
+    const countsAtFull = exact.stickers.inspectCounts();
+    await expect(upload(exact.stickers, "STK1409", 185)).rejects.toBeInstanceOf(StorageCapacityError);
+    expect(filesBelow(join(exact.dataRoot, "managed-assets"))).toEqual(filesAtFull);
+    expect(exact.stickers.inspectCounts()).toEqual(countsAtFull);
+
+    const unavailable = fixture();
+    unavailable.storage.setAvailability({ dataRootWritable: false, diskSpaceAvailable: true, sqliteWritable: true });
+    await expect(upload(unavailable.stickers, "STK1408", 184)).rejects.toBeInstanceOf(StorageUnavailableError);
+    expect(filesBelow(join(unavailable.dataRoot, "managed-assets"))).toEqual([]);
+    expect(unavailable.stickers.inspectCounts()).toEqual({ items: 0, releases: 0, upload_receipts: 0 });
+  });
+
+  it("rejects a forged PNG before release or managed-file commit", async () => {
+    const test = fixture();
+    const forged = Buffer.concat([png.subarray(0, 8), Buffer.from("not-a-decodable-png")]);
+    await expect(upload(test.stickers, "STK1408", 184, forged)).rejects.toThrow("content_decode_invalid");
+    expect(test.storage.inspectCounts()).toMatchObject({ active_reservations: 0, managed_files: 0 });
+    expect(test.stickers.inspectCounts()).toEqual({ items: 0, releases: 0, upload_receipts: 0 });
+    expect(filesBelow(join(test.dataRoot, "managed-assets"))).toEqual([]);
+  });
+
+  it("decodes WebP and rejects stable-ID or part-order conflicts without extra writes", async () => {
+    const test = fixture();
+    const published = await upload(test.stickers, "STK1408", 184, webp, "image/webp");
+    expect(published.item).toMatchObject({ height: 5, mime_type: "image/webp", width: 6 });
+    expect(test.stickers.readPublicAsset(published.release_version, "STK1408", "original")?.bytes).toEqual(webp);
+    const files = filesBelow(join(test.dataRoot, "managed-assets"));
+    const counts = test.stickers.inspectCounts();
+    await expect(upload(test.stickers, "STK1408", 185)).rejects.toMatchObject({ httpStatus: 409, reason: "sticker_stable_id_conflict" });
+    await expect(upload(test.stickers, "STK1409", 184)).rejects.toMatchObject({ httpStatus: 409, reason: "sticker_order_conflict" });
+    expect(filesBelow(join(test.dataRoot, "managed-assets"))).toEqual(files);
+    expect(test.stickers.inspectCounts()).toEqual(counts);
+  });
+});