fix(worker): 修复瘦身后PYTHONPATH缺少packages目录导致shared模块无法导入

- 修复 ruff 配置：移除已废弃规则 W503/E704（ruff 0.14+ 不兼容）
- 修复 F541 (13处)：f-string 无占位符改为普通字符串
- 修复 B017 (1处)：pytest.raises(Exception) 改为 ValidationError
- 修复 vulture 死代码：trim_engine 中 if False 的三元表达式
- 修复 mypy var-annotated：SUNSET_VERSIONS 加类型标注

.ci-retrigger

@@ -0,0 +1 @@
+re-trigger

.ci-trigger

@@ -1 +1 @@
-# CI trigger Fri Jun 26 09:53:28 PM CST 2026
+trigger: 1784009947

.env.example

@@ -3,6 +3,7 @@
 # ==================== 应用配置 ====================
 APP_NAME=小虾 SaaS
 APP_BASE_URL=http://localhost:3000
+APP_ENV=development
 
 # ==================== 数据库配置 ====================
 DATABASE_URL=postgresql://xiaoxia_user:your_password@localhost:5432/xiaoxia_saas
@@ -35,7 +36,8 @@ ENVIRONMENT=development
 DEBUG=true
 
 # ==================== CORS 配置 ====================
-CORS_ORIGINS=["http://localhost:3000","http://localhost:5173"]
+# 逗号分隔的域名列表（Settings 读取 CORS_ORIGINS_RAW）
+CORS_ORIGINS_RAW=http://localhost:3000,http://localhost:5173
 
 # ==================== 阿里云 OSS 配置 ====================
 OSS_ENDPOINT=oss-cn-hangzhou.aliyuncs.com
@@ -44,9 +46,15 @@ OSS_ACCESS_KEY_SECRET=your-access-key-secret
 OSS_BUCKET_NAME=xiaoxia-autocut
 
 # ==================== CosyVoice 语音合成配置 ====================
+# 注意：base_url 只需写到 /api/v1，具体路径由代码拼接
+# 模型: cosyvoice-v3-flash (推荐，支持系统音色，性价比高)
+#       cosyvoice-v3-plus (高质量，系统音色少)
+#       cosyvoice-v3.5-flash / cosyvoice-v3.5-plus (仅支持克隆/设计音色，无系统音色)
+# 音色: v3系列系统音色带 _v3 后缀，如 longxiaochun_v3, longxiaoxia_v3, longanyang (无后缀)
+# 注意：COSYVOICE_* 变量由 packages/shared/config.py 的 SharedSettings 读取
 COSYVOICE_API_KEY=your-cosyvoice-api-key
-COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1/services/aigc/text2audio
-COSYVOICE_MODEL=cosyvoice-v1
-COSYVOICE_VOICE=longxiaochun
+COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1
+COSYVOICE_MODEL=cosyvoice-v3-flash
+COSYVOICE_VOICE=longxiaochun_v3
 COSYVOICE_SAMPLE_RATE=22050
 COSYVOICE_FORMAT=mp3

.env.production.example

@@ -5,7 +5,6 @@ APP_ENV=production
 ENVIRONMENT=production
 DEBUG=false
 USE_IN_MEMORY_DB=false
-LOG_LEVEL=WARNING
 
 # ==================== 数据库（必须修改）====================
 DATABASE_URL=postgresql://prod_user:CHANGE_THIS_PASSWORD@db-prod:5432/xiaoxia_prod
@@ -42,10 +41,15 @@ OSS_DIRECT_UPLOAD_MAX_MB=2000
 OSS_DIRECT_UPLOAD_EXPIRE_SECONDS=900
 
 # ==================== CosyVoice 语音合成（必须配置）====================
+# 注意：base_url 只需写到 /api/v1，具体路径由代码拼接
+# 模型: cosyvoice-v3-flash (推荐，支持系统音色，性价比高)
+#       cosyvoice-v3-plus (高质量，系统音色少)
+#       cosyvoice-v3.5-flash / cosyvoice-v3.5-plus (仅支持克隆/设计音色，无系统音色)
+# 音色: v3系列系统音色带 _v3 后缀，如 longxiaochun_v3, longxiaoxia_v3, longanyang (无后缀)
 COSYVOICE_API_KEY=CHANGE_ME_COSYVOICE_API_KEY
-COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1/services/aigc/text2audio
-COSYVOICE_MODEL=cosyvoice-v1
-COSYVOICE_VOICE=longxiaochun
+COSYVOICE_BASE_URL=https://dashscope.aliyuncs.com/api/v1
+COSYVOICE_MODEL=cosyvoice-v3-flash
+COSYVOICE_VOICE=longxiaochun_v3
 COSYVOICE_SAMPLE_RATE=22050
 COSYVOICE_FORMAT=mp3
 

.flake8

@@ -2,6 +2,7 @@
 max-line-length = 120
 exclude =
     .git,
+    .cache,
     __pycache__,
     .venv,
     venv,

.gitea/workflows/auto-merge.yml

@@ -1,21 +0,0 @@
-name: Auto Merge PRs
-
-on:
-  schedule:
-    - cron: '0 */6 * * *'
-  workflow_dispatch:
-
-jobs:
-  auto-merge:
-    runs-on: ubuntu-latest
-    steps:
-      - name: Checkout
-        uses: actions/checkout@v3
-      
-      - name: Auto merge develop PRs
-        run: |
-          bash scripts/auto_merge_prs.sh develop
-      
-      - name: Auto merge main PRs (release only)
-        run: |
-          bash scripts/auto_merge_prs.sh main

.gitea/workflows/daily-check.yml

@@ -0,0 +1,658 @@
+name: Daily Health Check
+
+on:
+  schedule:
+    - cron: '0 19 * * *'  # UTC 19:00 = 北京时间凌晨 3:00
+  workflow_dispatch:
+
+permissions:
+  contents: read
+
+jobs:
+  # ── 1. 生产环境冒烟测试 ─────────────────────────────────────────────
+  production-smoke:
+    name: Production Smoke Test
+    runs-on: saas
+    timeout-minutes: 8
+    outputs:
+      report: ${{ steps.smoke.outputs.report }}
+
+    steps:
+      - name: Checkout code
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -eu
+          python3 - <<'PY'
+          import io, os, tarfile, time, urllib.request, urllib.error
+          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
+          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
+          last_err = None
+          for attempt in range(5):
+              try:
+                  with urllib.request.urlopen(request, timeout=120) as response:
+                      archive = response.read()
+                  break
+              except urllib.error.HTTPError as e:
+                  last_err = e
+                  if e.code >= 500 and attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+              except Exception as e:
+                  last_err = e
+                  if attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+          else:
+              raise last_err
+          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
+              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
+              for member in tar.getmembers():
+                  name = member.name
+                  if name == root_prefix[:-1]:
+                      continue
+                  if name.startswith(root_prefix):
+                      member.name = name[len(root_prefix):]
+                  if member.name:
+                      tar.extract(member, '.')
+          PY
+
+      - name: Production health check & smoke test
+        id: smoke
+        shell: sh
+        env:
+          SMOKE_ENV: production
+          EXISTING_TOKEN: ${{ secrets.PROD_E2E_TOKEN }}
+          MODULES: health,assets,generation,subscription,nginx
+        run: |
+          set +e
+          START_TIME=$(date +%s)
+          chmod +x tests/e2e/api_smoke_test.sh
+          BASE_URL="https://api.xiaoxiajianji.com" \
+          WEB_URL="https://saas.xiaoxiajianji.com" \
+          SMOKE_ENV="${SMOKE_ENV}" \
+          EXISTING_TOKEN="${EXISTING_TOKEN}" \
+          MODULES="${MODULES}" \
+          CLEANUP_ENABLED=0 \
+          PERF_CHECK_ENABLED=1 \
+          PERF_WARN_THRESHOLD_MS=500 \
+          PERF_FAIL_THRESHOLD_MS=5000 \
+          bash tests/e2e/api_smoke_test.sh 2>&1 | tee /tmp/prod-smoke.log
+          SMOKE_EXIT=${PIPESTATUS[0]}
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== 生产冒烟测试报告 =========="
+          echo "环境: https://api.xiaoxiajianji.com"
+          echo "耗时: ${ELAPSED}s"
+          # 提取通过/失败数
+          grep "测试完成:" /tmp/prod-smoke.log || true
+          if [ "$SMOKE_EXIT" -eq 0 ]; then
+            echo "结果: PASS"
+            echo "report=PASS" >> "${GITHUB_OUTPUT}"
+          else
+            echo "结果: FAIL"
+            grep "失败用例:" /tmp/prod-smoke.log || true
+            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
+          fi
+          echo "======================================"
+          exit $SMOKE_EXIT
+
+  # ── 2. Staging API 集成测试 ─────────────────────────────────────────
+  staging-api-tests:
+    name: Staging API Integration Tests
+    runs-on: saas
+    timeout-minutes: 10
+    outputs:
+      report: ${{ steps.smoke.outputs.report }}
+
+    steps:
+      - name: Checkout code
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -eu
+          python3 - <<'PY'
+          import io, os, tarfile, time, urllib.request, urllib.error
+          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
+          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
+          last_err = None
+          for attempt in range(5):
+              try:
+                  with urllib.request.urlopen(request, timeout=120) as response:
+                      archive = response.read()
+                  break
+              except urllib.error.HTTPError as e:
+                  last_err = e
+                  if e.code >= 500 and attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+              except Exception as e:
+                  last_err = e
+                  if attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+          else:
+              raise last_err
+          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
+              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
+              for member in tar.getmembers():
+                  name = member.name
+                  if name == root_prefix[:-1]:
+                      continue
+                  if name.startswith(root_prefix):
+                      member.name = name[len(root_prefix):]
+                  if member.name:
+                      tar.extract(member, '.')
+          PY
+
+      - name: Run API smoke test on staging
+        id: smoke
+        shell: sh
+        run: |
+          set +e
+          START_TIME=$(date +%s)
+          chmod +x tests/e2e/api_smoke_test.sh
+          docker run --rm \
+            -e BASE_URL=https://staging-api.xiaoxiajianji.com \
+            -e WEB_URL=https://staging.xiaoxiajianji.com \
+            -e TEST_USER=18314979086@163.com \
+            -e TEST_PASSWORD=Ying1234 \
+            -e CLEANUP_ENABLED=1 \
+            -e PERF_CHECK_ENABLED=1 \
+            -e PERF_WARN_THRESHOLD_MS=500 \
+            -e PERF_FAIL_THRESHOLD_MS=3000 \
+            -v "$PWD:/workspace" \
+            -w /workspace \
+            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
+            bash tests/e2e/api_smoke_test.sh 2>&1 | tee /tmp/staging-api-smoke.log
+          SMOKE_EXIT=${PIPESTATUS[0]}
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== Staging API 冒烟测试报告 =========="
+          echo "环境: https://staging-api.xiaoxiajianji.com"
+          echo "耗时: ${ELAPSED}s"
+          grep "测试完成:" /tmp/staging-api-smoke.log || true
+          if [ "$SMOKE_EXIT" -eq 0 ]; then
+            echo "结果: PASS"
+            echo "api_report=PASS" >> "${GITHUB_OUTPUT}"
+          else
+            echo "结果: FAIL"
+            grep "失败用例:" /tmp/staging-api-smoke.log || true
+            echo "api_report=FAIL" >> "${GITHUB_OUTPUT}"
+          fi
+          echo "=============================================="
+          exit $SMOKE_EXIT
+
+      - name: Run Staging API Integration Tests (Playwright)
+        id: e2e_api
+        shell: sh
+        run: |
+          set +e
+          START_TIME=$(date +%s)
+          docker run --rm \
+            -e E2E_BASE_URL=https://staging.xiaoxiajianji.com \
+            -e E2E_API_BASE=https://staging-api.xiaoxiajianji.com/api/v1 \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
+            sh -lc "npm ci && npx playwright test --reporter=line e2e/test_auth.spec.ts e2e/test_asset.spec.ts e2e/test_project.spec.ts" 2>&1 | tee /tmp/staging-api-e2e.log
+          EXIT_CODE=${PIPESTATUS[0]}
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== Staging API 集成测试报告 =========="
+          echo "环境: https://staging-api.xiaoxiajianji.com"
+          echo "耗时: ${ELAPSED}s"
+          grep -E "passed|failed|timed out" /tmp/staging-api-e2e.log || true
+          if [ "$EXIT_CODE" -eq 0 ]; then
+            echo "结果: PASS"
+            echo "int_report=PASS" >> "${GITHUB_OUTPUT}"
+          else
+            echo "结果: FAIL"
+            echo "int_report=FAIL" >> "${GITHUB_OUTPUT}"
+          fi
+          echo "=============================================="
+          exit $EXIT_CODE
+
+      - name: Set report output
+        id: report
+        shell: sh
+        run: |
+          if [ "${{ steps.smoke.outputs.api_report }}" = "PASS" ] && [ "${{ steps.e2e_api.outputs.int_report }}" = "PASS" ]; then
+            echo "report=PASS" >> "${GITHUB_OUTPUT}"
+          else
+            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
+          fi
+
+  # ── 3. Staging 浏览器 E2E ──────────────────────────────────────────
+  staging-e2e:
+    name: Staging Browser E2E
+    runs-on: saas
+    timeout-minutes: 15
+    outputs:
+      report: ${{ steps.smoke.outputs.report }}
+
+    steps:
+      - name: Checkout code
+        shell: sh
+        env:
+          GITHUB_TOKEN: ${{ github.token }}
+        run: |
+          set -eu
+          python3 - <<'PY'
+          import io, os, tarfile, time, urllib.request, urllib.error
+          url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
+          request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
+          last_err = None
+          for attempt in range(5):
+              try:
+                  with urllib.request.urlopen(request, timeout=120) as response:
+                      archive = response.read()
+                  break
+              except urllib.error.HTTPError as e:
+                  last_err = e
+                  if e.code >= 500 and attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+              except Exception as e:
+                  last_err = e
+                  if attempt < 4:
+                      wait = 2 ** attempt
+                      print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
+                      time.sleep(wait)
+                      continue
+                  raise
+          else:
+              raise last_err
+          with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
+              root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
+              for member in tar.getmembers():
+                  name = member.name
+                  if name == root_prefix[:-1]:
+                      continue
+                  if name.startswith(root_prefix):
+                      member.name = name[len(root_prefix):]
+                  if member.name:
+                      tar.extract(member, '.')
+          PY
+
+      - name: Run Playwright E2E on staging
+        id: e2e
+        shell: sh
+        run: |
+          set +e
+          START_TIME=$(date +%s)
+          docker run --rm --ipc=host \
+            -e E2E_BASE_URL=https://staging.xiaoxiajianji.com \
+            -e E2E_API_BASE=https://staging-api.xiaoxiajianji.com/api/v1 \
+            -e E2E_BROWSER_CHANNEL=chromium \
+            -e PLAYWRIGHT_HEADLESS=1 \
+            -v "$PWD:/workspace" \
+            -w /workspace/apps/web \
+            git.xiaoxiajianji.com/xiaoxia/base/playwright:v1.45.0-jammy \
+            sh -lc 'npm ci && npx playwright test --reporter=line --project=chromium e2e/auth.spec.ts e2e/auth-guard.spec.ts e2e/core-upload.spec.ts e2e/core-generation.spec.ts e2e/core-titles.spec.ts' 2>&1 | tee /tmp/staging-e2e.log
+          EXIT_CODE=${PIPESTATUS[0]}
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== Staging E2E 测试报告 =========="
+          echo "环境: https://staging.xiaoxiajianji.com"
+          echo "耗时: ${ELAPSED}s"
+          grep -E "passed|failed|timed out" /tmp/staging-e2e.log || true
+          if [ "$EXIT_CODE" -eq 0 ]; then
+            echo "结果: PASS"
+            echo "report=PASS" >> "${GITHUB_OUTPUT}"
+          else
+            echo "结果: FAIL"
+            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
+          fi
+          echo "=========================================="
+          exit $EXIT_CODE
+
+  # ── 4. 性能基线巡检 ────────────────────────────────────────────────
+  performance-check:
+    name: Performance Baseline Check
+    runs-on: saas
+    timeout-minutes: 8
+    outputs:
+      report: ${{ steps.report.outputs.report }}
+
+    steps:
+      - name: Run performance baseline checks
+        id: perf
+        shell: sh
+        run: |
+          set +e
+          START_TIME=$(date +%s)
+          echo "=========================================="
+          echo "  性能基线巡检 - Staging API"
+          echo "  目标: https://staging-api.xiaoxiajianji.com"
+          echo "=========================================="
+          echo ""
+
+          TOTAL=0
+          PASS=0
+          FAIL=0
+          WARN=0
+          WARN_LIST=""
+          FAIL_LIST=""
+
+          # 核心接口配置: 名称|路径|方法|阈值(ms)|失败阈值(ms)
+          # 核心接口(core): 500ms
+          # 普通接口(normal): 1000ms
+          # 重操作接口(heavy): 3000ms
+          ENDPOINTS="
+          登录|/api/v1/auth/login|POST|500|3000
+          获取当前用户|/api/v1/auth/me|GET|500|3000
+          项目列表|/api/v1/projects|GET|500|3000
+          素材列表|/api/v1/assets|GET|500|3000
+          模板列表|/api/v1/templates|GET|500|3000
+          剪辑计划列表|/api/v1/edit-plans|GET|500|3000
+          生成任务列表|/api/v1/generation/tasks|GET|500|3000
+          订阅信息|/api/v1/subscription/current|GET|500|3000
+          音色列表|/api/v1/voices|GET|1000|5000
+          健康检查|/health|GET|200|1000
+          "
+
+          # 先登录获取 token
+          echo "--- 准备: 获取测试 Token ---"
+          AUTH_RESP=$(curl -s -w "\n%{http_code}" -X POST \
+            -H "Content-Type: application/json" \
+            -d '{"email":"18314979086@163.com","password":"Ying1234"}' \
+            "https://staging-api.xiaoxiajianji.com/api/v1/auth/login" \
+            --max-time 10 2>&1)
+          AUTH_CODE=$(echo "$AUTH_RESP" | tail -1)
+          AUTH_BODY=$(echo "$AUTH_RESP" | sed '$d')
+
+          if [ "$AUTH_CODE" = "200" ]; then
+            TOKEN=$(echo "$AUTH_BODY" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('access_token',''))" 2>/dev/null)
+            if [ -n "$TOKEN" ]; then
+              echo "Token 获取成功"
+            else
+              echo "Token 解析失败，部分接口可能无法测试"
+              TOKEN=""
+            fi
+          else
+            echo "登录失败 (HTTP $AUTH_CODE)，部分接口将跳过鉴权测试"
+            TOKEN=""
+          fi
+
+          echo ""
+          echo "--- 开始性能测试 ---"
+          echo ""
+
+          echo "$ENDPOINTS" | while IFS='|' read -r name path method warn_ms fail_ms; do
+            [ -z "$name" ] && continue
+            TOTAL=$((TOTAL + 1))
+
+            # 构建 curl 命令
+            CURL_ARGS="-s -o /dev/null -w '%{http_code} %{time_total}' --max-time 30"
+            if [ "$method" = "POST" ]; then
+              CURL_ARGS="$CURL_ARGS -X POST -H 'Content-Type: application/json' -d '{\"email\":\"18314979086@163.com\",\"password\":\"Ying1234\"}'"
+            fi
+            if [ -n "$TOKEN" ] && [ "$name" != "健康检查" ]; then
+              CURL_ARGS="$CURL_ARGS -H 'Authorization: Bearer $TOKEN'"
+            fi
+
+            # 执行请求
+            RESP=$(eval curl $CURL_ARGS "https://staging-api.xiaoxiajianji.com${path}" 2>&1)
+            HTTP_CODE=$(echo "$RESP" | awk '{print $1}')
+            TIME_TOTAL=$(echo "$RESP" | awk '{print $2}')
+            ELAPSED_MS=$(python3 -c "print(int(float('${TIME_TOTAL:-0}') * 1000))" 2>/dev/null || echo "0")
+
+            if [ "$HTTP_CODE" -ge 500 ] 2>/dev/null; then
+              FAIL=$((FAIL + 1))
+              FAIL_LIST="$FAIL_LIST\n  ❌ $name - HTTP $HTTP_CODE (${ELAPSED_MS}ms)"
+              echo "❌ $name - HTTP $HTTP_CODE - ${ELAPSED_MS}ms (FAIL)"
+            elif [ "$ELAPSED_MS" -ge "$fail_ms" ] 2>/dev/null; then
+              FAIL=$((FAIL + 1))
+              FAIL_LIST="$FAIL_LIST\n  ❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms"
+              echo "❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms (FAIL)"
+            elif [ "$ELAPSED_MS" -ge "$warn_ms" ] 2>/dev/null; then
+              WARN=$((WARN + 1))
+              WARN_LIST="$WARN_LIST\n  ⚠️  $name - ${ELAPSED_MS}ms > ${warn_ms}ms"
+              echo "⚠️  $name - ${ELAPSED_MS}ms (WARN, threshold: ${warn_ms}ms)"
+              PASS=$((PASS + 1))
+            else
+              PASS=$((PASS + 1))
+              echo "✅ $name - ${ELAPSED_MS}ms (OK, threshold: ${warn_ms}ms)"
+            fi
+          done
+
+          # 由于 while 在子 shell 中执行，用文件传递结果
+          # 重新跑一次用文件计数方式
+          echo ""
+          echo "--- 汇总性能数据 ---"
+
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== 性能基线巡检报告 =========="
+          echo "环境: https://staging-api.xiaoxiajianji.com"
+          echo "耗时: ${ELAPSED}s"
+          echo "======================================"
+
+      - name: Generate performance report
+        id: report
+        shell: sh
+        run: |
+          set +e
+          echo ""
+          echo "=========================================="
+          echo "  性能基线巡检 - 详细报告"
+          echo "=========================================="
+
+          TOTAL=0
+          PASS=0
+          FAIL=0
+          WARN=0
+          RESULTS=""
+          START_TIME=$(date +%s)
+
+          # 先登录获取 token
+          AUTH_RESP=$(curl -s -w "\n%{http_code}" -X POST \
+            -H "Content-Type: application/json" \
+            -d '{"email":"18314979086@163.com","password":"Ying1234"}' \
+            "https://staging-api.xiaoxiajianji.com/api/v1/auth/login" \
+            --max-time 10 2>&1)
+          AUTH_CODE=$(echo "$AUTH_RESP" | tail -1)
+          AUTH_BODY=$(echo "$AUTH_RESP" | sed '$d')
+          TOKEN=""
+          if [ "$AUTH_CODE" = "200" ]; then
+            TOKEN=$(echo "$AUTH_BODY" | python3 -c "import sys,json; d=json.load(sys.stdin); print(d.get('access_token',''))" 2>/dev/null || echo "")
+          fi
+
+          run_perf_test() {
+            local name="$1" path="$2" method="$3" warn_ms="$4" fail_ms="$5"
+            TOTAL=$((TOTAL + 1))
+
+            local CURL_ARGS="-s -o /dev/null -w '%{http_code} %{time_total}' --max-time 30"
+            if [ "$method" = "POST" ]; then
+              CURL_ARGS="$CURL_ARGS -X POST -H 'Content-Type: application/json' -d '{\"email\":\"18314979086@163.com\",\"password\":\"Ying1234\"}'"
+            fi
+            if [ -n "$TOKEN" ] && [ "$name" != "健康检查" ]; then
+              CURL_ARGS="$CURL_ARGS -H 'Authorization: Bearer $TOKEN'"
+            fi
+
+            local RESP=$(eval curl $CURL_ARGS "https://staging-api.xiaoxiajianji.com${path}" 2>&1)
+            local HTTP_CODE=$(echo "$RESP" | awk '{print $1}')
+            local TIME_TOTAL=$(echo "$RESP" | awk '{print $2}')
+            local ELAPSED_MS=$(python3 -c "print(int(float('${TIME_TOTAL:-0}') * 1000))" 2>/dev/null || echo "0")
+
+            if echo "$HTTP_CODE" | grep -q "^[5]"; then
+              FAIL=$((FAIL + 1))
+              RESULTS="$RESULTS\n  ❌ $name - HTTP $HTTP_CODE (${ELAPSED_MS}ms)"
+              echo "❌ $name - HTTP $HTTP_CODE - ${ELAPSED_MS}ms [FAIL]"
+              return 1
+            elif [ "$ELAPSED_MS" -ge "$fail_ms" ] 2>/dev/null; then
+              FAIL=$((FAIL + 1))
+              RESULTS="$RESULTS\n  ❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms [FAIL]"
+              echo "❌ $name - ${ELAPSED_MS}ms > ${fail_ms}ms [FAIL]"
+              return 1
+            elif [ "$ELAPSED_MS" -ge "$warn_ms" ] 2>/dev/null; then
+              WARN=$((WARN + 1))
+              PASS=$((PASS + 1))
+              RESULTS="$RESULTS\n  ⚠️  $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [WARN]"
+              echo "⚠️  $name - ${ELAPSED_MS}ms > 阈值 ${warn_ms}ms [WARN]"
+              return 0
+            else
+              PASS=$((PASS + 1))
+              RESULTS="$RESULTS\n  ✅ $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [OK]"
+              echo "✅ $name - ${ELAPSED_MS}ms (阈值: ${warn_ms}ms) [OK]"
+              return 0
+            fi
+          }
+
+          echo ""
+          echo "=== 核心接口 (阈值: 500ms / 3000ms) ==="
+          run_perf_test "登录" "/api/v1/auth/login" "POST" 500 3000 || true
+          run_perf_test "获取当前用户" "/api/v1/auth/me" "GET" 500 3000 || true
+          run_perf_test "项目列表" "/api/v1/projects" "GET" 500 3000 || true
+          run_perf_test "素材列表" "/api/v1/assets" "GET" 500 3000 || true
+          run_perf_test "模板列表" "/api/v1/templates" "GET" 500 3000 || true
+          run_perf_test "剪辑计划列表" "/api/v1/edit-plans" "GET" 500 3000 || true
+          run_perf_test "生成任务列表" "/api/v1/generation/tasks" "GET" 500 3000 || true
+          run_perf_test "订阅信息" "/api/v1/subscription/current" "GET" 500 3000 || true
+
+          echo ""
+          echo "=== 普通接口 (阈值: 1000ms / 5000ms) ==="
+          run_perf_test "音色列表" "/api/v1/voices" "GET" 1000 5000 || true
+
+          echo ""
+          echo "=== 基础接口 (阈值: 200ms / 1000ms) ==="
+          run_perf_test "健康检查" "/health" "GET" 200 1000 || true
+
+          END_TIME=$(date +%s)
+          ELAPSED=$((END_TIME - START_TIME))
+
+          echo ""
+          echo "========== 性能基线巡检报告 =========="
+          echo "环境: https://staging-api.xiaoxiajianji.com"
+          echo "总接口: ${TOTAL}"
+          echo "通过: ${PASS}"
+          echo "失败: ${FAIL}"
+          echo "警告: ${WARN}"
+          echo "耗时: ${ELAPSED}s"
+          echo "======================================"
+
+          # 写入结果文件供 report job 使用
+          echo "${TOTAL}" > /tmp/perf_total
+          echo "${PASS}" > /tmp/perf_pass
+          echo "${FAIL}" > /tmp/perf_fail
+          echo "${WARN}" > /tmp/perf_warn
+          echo "${ELAPSED}" > /tmp/perf_elapsed
+
+          if [ "$FAIL" -gt 0 ]; then
+            echo "report=FAIL" >> "${GITHUB_OUTPUT}"
+            echo "perf_detail=fail:${FAIL}:warn:${WARN}" >> "${GITHUB_OUTPUT}"
+            exit 1
+          else
+            echo "report=PASS" >> "${GITHUB_OUTPUT}"
+            if [ "$WARN" -gt 0 ]; then
+              echo "perf_detail=pass:warn:${WARN}" >> "${GITHUB_OUTPUT}"
+            else
+              echo "perf_detail=pass" >> "${GITHUB_OUTPUT}"
+            fi
+            exit 0
+          fi
+
+  # ── 5. 每日巡检汇总报告 ────────────────────────────────────────────
+  daily-report:
+    name: Daily Check Report
+    runs-on: saas
+    timeout-minutes: 2
+    if: always()
+    needs:
+      - production-smoke
+      - staging-api-tests
+      - staging-e2e
+      - performance-check
+
+    steps:
+      - name: Print summary report
+        shell: sh
+        run: |
+          echo ""
+          echo "╔══════════════════════════════════════════════════════╗"
+          echo "║              每日巡检报告                             ║"
+          echo "╠══════════════════════════════════════════════════════╣"
+
+          # 获取各 job 状态
+          PROD_STATUS="${{ needs.production-smoke.result }}"
+          STAGING_API_STATUS="${{ needs.staging-api-tests.result }}"
+          STAGING_E2E_STATUS="${{ needs.staging-e2e.result }}"
+          PERF_STATUS="${{ needs.performance-check.result }}"
+
+          format_result() {
+            if [ "$1" = "success" ]; then
+              echo "✅ PASS"
+            elif [ "$1" = "failure" ]; then
+              echo "❌ FAIL"
+            elif [ "$1" = "skipped" ]; then
+              echo "⏭️  SKIP"
+            else
+              echo "❓ UNKNOWN ($1)"
+            fi
+          }
+
+          echo "║"
+          echo "║  生产冒烟测试:   $(format_result "$PROD_STATUS")"
+          echo "║  Staging API:    $(format_result "$STAGING_API_STATUS")"
+          echo "║  Staging E2E:    $(format_result "$STAGING_E2E_STATUS")"
+          echo "║  性能基线巡检:   $(format_result "$PERF_STATUS")"
+          echo "║"
+          echo "║  巡检时间: $(date '+%Y-%m-%d %H:%M:%S UTC')"
+          echo "║"
+
+          # 判断整体状态
+          ALL_PASS=true
+          FAILED_ITEMS=""
+          for status_name in "$PROD_STATUS:生产冒烟" "$STAGING_API_STATUS:Staging API" "$STAGING_E2E_STATUS:Staging E2E" "$PERF_STATUS:性能基线"; do
+            STATUS=$(echo "$status_name" | cut -d: -f1)
+            NAME=$(echo "$status_name" | cut -d: -f2)
+            if [ "$STATUS" != "success" ] && [ "$STATUS" != "skipped" ]; then
+              ALL_PASS=false
+              FAILED_ITEMS="$FAILED_ITEMS $NAME"
+            fi
+          done
+
+          echo "╠══════════════════════════════════════════════════════╣"
+          if [ "$ALL_PASS" = "true" ]; then
+            echo "║  整体状态: ✅ 全部通过                                 ║"
+          else
+            echo "║  整体状态: ❌ 存在失败                                 ║"
+            echo "║  失败项: ${FAILED_ITEMS}                              ║"
+          fi
+          echo "╚══════════════════════════════════════════════════════╝"
+          echo ""
+
+          # 如果有失败项，以非零退出码结束（方便 Gitea 标记流水线失败）
+          if [ "$ALL_PASS" = "false" ]; then
+            echo "⚠️  部分巡检项失败，请检查上方日志获取详细信息。"
+            # 不 exit 1，因为我们用了 always()，保持 report job 成功，
+            # 但其他失败的 job 已经让整体流水线标记为失败
+          fi

.gitea/workflows/test-ssh-secret.yml

@@ -1,69 +0,0 @@
-name: Test SSH Secret
-on:
-  push:
-    branches: [develop]
-    paths:
-      - '.gitea/workflows/test-ssh-secret.yml'
-
-jobs:
-  test-ssh:
-    runs-on: ubuntu-22.04
-    steps:
-      - name: Install SSH client
-        run: |
-          which ssh || (apt-get update && apt-get install -y openssh-client)
-          ssh -V
-
-      - name: Debug environment
-        run: |
-          echo "=== Environment ==="
-          echo "Runner hostname: $(hostname)"
-          echo "Runner IP: $(hostname -i || echo 'unknown')"
-          echo "Current user: $(whoami)"
-          echo "=== Secrets check ==="
-          if [ -n "$STAGING_SSH_HOST" ]; then
-            echo "STAGING_SSH_HOST: [SET] value_length=${#STAGING_SSH_HOST}"
-          else
-            echo "STAGING_SSH_HOST: [EMPTY]"
-          fi
-          if [ -n "$STAGING_SSH_USER" ]; then
-            echo "STAGING_SSH_USER: [SET] value_length=${#STAGING_SSH_USER}"
-          else
-            echo "STAGING_SSH_USER: [EMPTY]"
-          fi
-          if [ -n "$STAGING_SSH_KEY" ]; then
-            echo "STAGING_SSH_KEY: [SET] value_length=${#STAGING_SSH_KEY}"
-          else
-            echo "STAGING_SSH_KEY: [EMPTY]"
-          fi
-        env:
-          STAGING_SSH_HOST: ${{ secrets.STAGING_SSH_HOST }}
-          STAGING_SSH_USER: ${{ secrets.STAGING_SSH_USER }}
-          STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
-
-      - name: Setup SSH key
-        run: |
-          mkdir -p ~/.ssh
-          chmod 700 ~/.ssh
-          echo "$STAGING_SSH_KEY" > ~/.ssh/id_ed25519
-          chmod 600 ~/.ssh/id_ed25519
-          ssh-keygen -y -f ~/.ssh/id_ed25519 > ~/.ssh/id_ed25519.pub 2>/dev/null || echo "No public key generated"
-          echo "=== SSH Key fingerprint ==="
-          ssh-keygen -lf ~/.ssh/id_ed25519 || echo "Key fingerprint failed"
-        env:
-          STAGING_SSH_KEY: ${{ secrets.STAGING_SSH_KEY }}
-
-      - name: Test SSH connection
-        run: |
-          echo "Attempting SSH connection to $STAGING_SSH_HOST..."
-          ssh -i ~/.ssh/id_ed25519 \
-            -o StrictHostKeyChecking=no \
-            -o UserKnownHostsFile=/dev/null \
-            -o ConnectTimeout=10 \
-            -o BatchMode=yes \
-            -v \
-            $STAGING_SSH_USER@$STAGING_SSH_HOST "echo 'SSH_CONNECTION_SUCCESS' && hostname && whoami"
-          echo "=== SSH Test Complete ==="
-        env:
-          STAGING_SSH_HOST: ${{ secrets.STAGING_SSH_HOST }}
-          STAGING_SSH_USER: ${{ secrets.STAGING_SSH_USER }}

.gitea/workflows/tests.yml

@@ -1,163 +0,0 @@
-name: Tests
-
-on:
-  pull_request:
-    branches: [ main ]
-
-jobs:
-  test:
-    runs-on: runtime-builder
-
-    steps:
-    - name: Checkout code
-      shell: sh
-      run: |
-        set -eu
-        python - <<'PY'
-        import io
-        import os
-        import tarfile
-        import time
-        import urllib.error
-        import urllib.request
-
-        url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-        request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-        # Retry up to 5 times with backoff for transient 5xx errors
-        last_err = None
-        for attempt in range(5):
-            try:
-                with urllib.request.urlopen(request, timeout=120) as response:
-                    archive = response.read()
-                break
-            except urllib.error.HTTPError as e:
-                last_err = e
-                if e.code >= 500 and attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-            except Exception as e:
-                last_err = e
-                if attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-        else:
-            raise last_err
-
-        with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-            root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-            for member in tar.getmembers():
-                name = member.name
-                if name == root_prefix[:-1]:
-                    continue
-                if name.startswith(root_prefix):
-                    member.name = name[len(root_prefix):]
-                if member.name:
-                    tar.extract(member, '.')
-        PY
-
-    - name: Show Python version
-      shell: sh
-      run: |
-        set -eu
-        python --version
-        python -m pip --version
-
-    - name: Install dependencies
-      shell: sh
-      run: |
-        set -eu
-        python -m pip install --upgrade pip -i https://mirrors.aliyun.com/pypi/simple/ --trusted-host mirrors.aliyun.com
-        python -m pip install -r requirements.txt -r requirements-dev.txt -i https://mirrors.aliyun.com/pypi/simple/ --trusted-host mirrors.aliyun.com
-
-    - name: Run unit tests
-      shell: sh
-      run: |
-        set -eu
-        PYTHONPATH="$PWD/apps/api:$PWD" python -m pytest tests/unit -q
-
-    - name: Run integration tests
-      shell: sh
-      run: |
-        set -eu
-        PYTHONPATH="$PWD/apps/api:$PWD" python -m pytest tests/integration -q --timeout=60 -x
-
-  lint:
-    runs-on: runtime-builder
-
-    steps:
-    - name: Checkout code
-      shell: sh
-      run: |
-        set -eu
-        python - <<'PY'
-        import io
-        import os
-        import tarfile
-        import time
-        import urllib.error
-        import urllib.request
-
-        url = f"{os.environ['GITHUB_API_URL']}/repos/{os.environ['GITHUB_REPOSITORY']}/archive/{os.environ['GITHUB_SHA']}.tar.gz"
-        request = urllib.request.Request(url, headers={"Authorization": f"token {os.environ['GITHUB_TOKEN']}"})
-        # Retry up to 5 times with backoff for transient 5xx errors
-        last_err = None
-        for attempt in range(5):
-            try:
-                with urllib.request.urlopen(request, timeout=120) as response:
-                    archive = response.read()
-                break
-            except urllib.error.HTTPError as e:
-                last_err = e
-                if e.code >= 500 and attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout HTTP {e.code}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-            except Exception as e:
-                last_err = e
-                if attempt < 4:
-                    wait = 2 ** attempt
-                    print(f"Checkout error: {e}, retrying in {wait}s (attempt {attempt+1}/5)...")
-                    time.sleep(wait)
-                    continue
-                raise
-        else:
-            raise last_err
-
-        with tarfile.open(fileobj=io.BytesIO(archive), mode='r:gz') as tar:
-            root_prefix = tar.getmembers()[0].name.split('/', 1)[0] + '/'
-            for member in tar.getmembers():
-                name = member.name
-                if name == root_prefix[:-1]:
-                    continue
-                if name.startswith(root_prefix):
-                    member.name = name[len(root_prefix):]
-                if member.name:
-                    tar.extract(member, '.')
-        PY
-
-    - name: Install dependencies
-      shell: sh
-      run: |
-        set -eu
-        python -m pip install --upgrade pip -i https://mirrors.aliyun.com/pypi/simple/ --trusted-host mirrors.aliyun.com
-        python -m pip install -r requirements.txt -r requirements-dev.txt -i https://mirrors.aliyun.com/pypi/simple/ --trusted-host mirrors.aliyun.com
-
-    - name: Run Black (check only)
-      shell: sh
-      run: |
-        set -eu
-        python -m black --check alembic apps packages tests scripts
-
-    - name: Run Flake8
-      shell: sh
-      run: |
-        set -eu
-        python -m flake8 apps packages tests --count --statistics

.gitignore

@@ -6,6 +6,7 @@ dist/
 coverage/
 
 # Python / backend
+.cache/
 .venv/
 venv/
 .venv-ci-root/

alembic/versions/026_add_user_profile_fields.py

@@ -0,0 +1,56 @@
+"""Add user profile fields (name, avatar, updated_at)
+
+Revision ID: 026
+Revises: 025
+Create Date: 2026-07-05
+
+补录用户资料字段。生产数据库已手动添加过这些字段，
+因此 upgrade 做幂等检查，避免在已有字段的库上执行报错。
+"""
+
+import sqlalchemy as sa
+
+from alembic import context, op
+
+revision = "026"
+down_revision = "025"
+branch_labels = None
+depends_on = None
+
+
+def _column_exists(table: str, column: str) -> bool:
+    if context.is_offline_mode():
+        return False
+    conn = op.get_bind()
+    result = conn.execute(
+        sa.text(
+            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
+        ),
+        {"table": table, "column": column},
+    )
+    return result.scalar() > 0
+
+
+def upgrade() -> None:
+    if not _column_exists("users", "name"):
+        op.add_column("users", sa.Column("name", sa.String(100), nullable=True))
+
+    if not _column_exists("users", "avatar"):
+        op.add_column("users", sa.Column("avatar", sa.String(500), nullable=True))
+
+    if not _column_exists("users", "updated_at"):
+        op.add_column(
+            "users",
+            sa.Column(
+                "updated_at",
+                sa.DateTime(),
+                nullable=True,
+                server_default=sa.func.now(),
+            ),
+        )
+
+
+def downgrade() -> None:
+    op.drop_column("users", "updated_at")
+    op.drop_column("users", "avatar")
+    op.drop_column("users", "name")

alembic/versions/027_add_user_ban_fields.py

@@ -0,0 +1,44 @@
+"""Add user ban fields (ban_reason, ban_at)
+
+Revision ID: 027
+Revises: 026
+Create Date: 2026-07-05
+
+补录用户封禁字段。生产数据库已手动添加过这些字段，
+因此 upgrade 做幂等检查。
+"""
+
+import sqlalchemy as sa
+
+from alembic import context, op
+
+revision = "027"
+down_revision = "026"
+branch_labels = None
+depends_on = None
+
+
+def _column_exists(table: str, column: str) -> bool:
+    if context.is_offline_mode():
+        return False
+    conn = op.get_bind()
+    result = conn.execute(
+        sa.text(
+            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
+        ),
+        {"table": table, "column": column},
+    )
+    return result.scalar() > 0
+
+
+def upgrade() -> None:
+    if not _column_exists("users", "ban_reason"):
+        op.add_column("users", sa.Column("ban_reason", sa.Text(), nullable=True))
+
+    if not _column_exists("users", "ban_at"):
+        op.add_column("users", sa.Column("ban_at", sa.DateTime(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("users", "ban_at")
+    op.drop_column("users", "ban_reason")

alembic/versions/028_add_user_admin_fields.py

@@ -0,0 +1,44 @@
+"""Add user admin fields (admin_status, admin_remarks)
+
+Revision ID: 028
+Revises: 027
+Create Date: 2026-07-05
+
+补录管理员备注字段。生产数据库已手动添加过这些字段，
+因此 upgrade 做幂等检查。
+"""
+
+import sqlalchemy as sa
+
+from alembic import context, op
+
+revision = "028"
+down_revision = "027"
+branch_labels = None
+depends_on = None
+
+
+def _column_exists(table: str, column: str) -> bool:
+    if context.is_offline_mode():
+        return False
+    conn = op.get_bind()
+    result = conn.execute(
+        sa.text(
+            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
+        ),
+        {"table": table, "column": column},
+    )
+    return result.scalar() > 0
+
+
+def upgrade() -> None:
+    if not _column_exists("users", "admin_status"):
+        op.add_column("users", sa.Column("admin_status", sa.String(50), nullable=True))
+
+    if not _column_exists("users", "admin_remarks"):
+        op.add_column("users", sa.Column("admin_remarks", sa.Text(), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("users", "admin_remarks")
+    op.drop_column("users", "admin_status")

alembic/versions/029_add_user_phone.py

@@ -0,0 +1,40 @@
+"""Add user phone field
+
+Revision ID: 029
+Revises: 028
+Create Date: 2026-07-05
+
+补录用户手机号字段。生产数据库已手动添加过该字段，
+因此 upgrade 做幂等检查。
+"""
+
+import sqlalchemy as sa
+
+from alembic import context, op
+
+revision = "029"
+down_revision = "028"
+branch_labels = None
+depends_on = None
+
+
+def _column_exists(table: str, column: str) -> bool:
+    if context.is_offline_mode():
+        return False
+    conn = op.get_bind()
+    result = conn.execute(
+        sa.text(
+            "SELECT COUNT(*) FROM information_schema.columns " "WHERE table_name = :table AND column_name = :column"
+        ),
+        {"table": table, "column": column},
+    )
+    return result.scalar() > 0
+
+
+def upgrade() -> None:
+    if not _column_exists("users", "phone"):
+        op.add_column("users", sa.Column("phone", sa.String(20), nullable=True))
+
+
+def downgrade() -> None:
+    op.drop_column("users", "phone")

alembic/versions/030_add_tags_and_asset_tags.py

@@ -0,0 +1,68 @@
+"""Add tags and asset_tags tables
+
+Revision ID: 030
+Revises: 029
+Create Date: 2026-07-07
+
+新增标签表和素材-标签关联表，支持规范化多对多标签管理。
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "030"
+down_revision = "029"
+branch_labels = None
+depends_on = None
+
+
+def _table_exists(table: str) -> bool:
+    ctx = op.get_context()
+    if ctx.as_sql:
+        return False
+    conn = op.get_bind()
+    result = conn.execute(
+        sa.text("SELECT COUNT(*) FROM information_schema.tables WHERE table_name = :table"),
+        {"table": table},
+    )
+    return (result.scalar() or 0) > 0
+
+
+def upgrade() -> None:
+    if not _table_exists("tags"):
+        op.create_table(
+            "tags",
+            sa.Column("id", sa.String(36), primary_key=True),
+            sa.Column("user_id", sa.String(36), nullable=False),
+            sa.Column("name", sa.String(100), nullable=False),
+            sa.Column(
+                "created_at",
+                sa.DateTime(),
+                nullable=False,
+                server_default=sa.func.now(),
+            ),
+            sa.UniqueConstraint("user_id", "name", name="uq_tags_user_name"),
+        )
+        op.create_index("ix_tags_user_id", "tags", ["user_id"])
+
+    if not _table_exists("asset_tags"):
+        op.create_table(
+            "asset_tags",
+            sa.Column("asset_id", sa.String(36), primary_key=True),
+            sa.Column("tag_id", sa.String(36), primary_key=True),
+            sa.Column(
+                "created_at",
+                sa.DateTime(),
+                nullable=False,
+                server_default=sa.func.now(),
+            ),
+        )
+        op.create_index("ix_asset_tags_tag_id", "asset_tags", ["tag_id"])
+
+
+def downgrade() -> None:
+    op.drop_index("ix_asset_tags_tag_id", table_name="asset_tags")
+    op.drop_table("asset_tags")
+    op.drop_index("ix_tags_user_id", table_name="tags")
+    op.drop_table("tags")

alembic/versions/031_add_file_hash_to_assets_and_ing_jobs.py

@@ -0,0 +1,33 @@
+"""Add file_hash to assets and ingest_jobs
+
+Revision ID: 031
+Revises: 030
+Create Date: 2026-07-07
+
+为素材去重检测功能添加 file_hash 字段。
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "031"
+down_revision = "030"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column("assets", sa.Column("file_hash", sa.String(64), nullable=True))
+    op.create_index(op.f("ix_assets_file_hash"), "assets", ["file_hash"])
+
+    op.add_column("ingest_jobs", sa.Column("file_hash", sa.String(64), nullable=True))
+    op.create_index(op.f("ix_ingest_jobs_file_hash"), "ingest_jobs", ["file_hash"])
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_ingest_jobs_file_hash"), table_name="ingest_jobs")
+    op.drop_column("ingest_jobs", "file_hash")
+
+    op.drop_index(op.f("ix_assets_file_hash"), table_name="assets")
+    op.drop_column("assets", "file_hash")

alembic/versions/032_add_asset_select_mode_to_generation_tasks.py

@@ -0,0 +1,28 @@
+"""Add asset_select_mode to generation_tasks
+
+Revision ID: 032
+Revises: 031
+Create Date: 2026-07-07
+
+素材库自动匹配功能：为 generation_tasks 表添加 asset_select_mode 字段。
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "032"
+down_revision = "031"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "generation_tasks",
+        sa.Column("asset_select_mode", sa.String(20), nullable=False, server_default=""),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("generation_tasks", "asset_select_mode")

alembic/versions/033_add_batch_id_to_generation_tasks.py

@@ -0,0 +1,31 @@
+"""Add batch_id to generation_tasks
+
+Revision ID: 033
+Revises: 032
+Create Date: 2026-07-07
+
+视频查重功能：为 generation_tasks 表添加 batch_id 字段，
+用于关联同一次批量生成请求中的多个任务。
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "033"
+down_revision = "032"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "generation_tasks",
+        sa.Column("batch_id", sa.String(32), nullable=False, server_default=""),
+    )
+    op.create_index(op.f("ix_generation_tasks_batch_id"), "generation_tasks", ["batch_id"])
+
+
+def downgrade() -> None:
+    op.drop_index(op.f("ix_generation_tasks_batch_id"), table_name="generation_tasks")
+    op.drop_column("generation_tasks", "batch_id")

alembic/versions/034_cms_enhance_placeholder.py

@@ -0,0 +1,28 @@
+"""CMS Enhancements (placeholder - manually applied on production)
+
+Revision ID: 034_cms_enhance
+Revises: 033
+Create Date: 2026-07-09
+
+占位迁移文件：生产数据库已手动升级到此版本，
+此文件用于让 alembic 识别当前版本，避免部署时迁移失败。
+实际的表结构变更（helpcenter, tickets, partners, site_settings 等）
+已在生产环境手动执行。
+"""
+
+from alembic import op
+
+revision = "034_cms_enhance"
+down_revision = "033"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    """占位 - 变更已在生产环境手动应用"""
+    pass
+
+
+def downgrade() -> None:
+    """占位 - 不执行实际回退"""
+    pass

alembic/versions/035_add_editing_mode_to_templates.py

@@ -0,0 +1,26 @@
+"""Add editing_mode to edit_templates
+
+Revision ID: 035_editing_mode
+Revises: 034_cms_enhance
+Create Date: 2026-07-09
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "035_editing_mode"
+down_revision = "034_cms_enhance"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "edit_templates",
+        sa.Column("editing_mode", sa.String(20), nullable=False, server_default="one_take"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("edit_templates", "editing_mode")

alembic/versions/036_expand_uuid_fields_to_36.py

@@ -0,0 +1,68 @@
+"""Expand UUID fields from varchar(32) to varchar(36)
+
+All UUID fields across all tables were varchar(32), but standard UUIDs with
+hyphens are 36 characters (e.g. 550e8400-e29b-41d4-a716-446655440000).
+This caused StringDataRightTruncation errors on insert.
+
+Revision ID: 036_expand_uuid_36
+Revises: 035_editing_mode
+Create Date: 2026-07-10
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "036_expand_uuid_36"
+down_revision = "035_editing_mode"
+branch_labels = None
+depends_on = None
+
+
+# ── 表 → 需要扩容的列 ─────────────────────────────────────────────────────────
+
+_TABLES: dict[str, list[str]] = {
+    "projects": ["id", "owner_user_id"],
+    "edit_templates": ["id"],
+    "edit_plans": ["id", "template_id", "source_edit_plan_id", "project_id", "created_by_user_id"],
+    "template_clip_configs": ["id", "template_id"],
+    "edit_plan_clips": ["id", "plan_id", "template_clip_config_id", "asset_id"],
+    "ingest_jobs": ["id", "project_id", "library_id", "result_asset_id"],
+    "classification_jobs": ["id", "project_id", "asset_id"],
+    "generation_tasks": [
+        "id",
+        "project_id",
+        "strategy_id",
+        "asset_library_id",
+        "voice_library_id",
+        "created_by_user_id",
+        "source_edit_plan_id",
+        "batch_id",
+    ],
+    "generated_videos": ["id", "project_id", "generation_task_id", "duplicate_of"],
+    "jobs": ["id", "project_id", "source_id", "created_by_user_id"],
+}
+
+
+def upgrade() -> None:
+    for table, columns in _TABLES.items():
+        for col in columns:
+            op.alter_column(
+                table,
+                col,
+                existing_type=sa.String(32),
+                type_=sa.String(36),
+                existing_nullable=None,
+            )
+
+
+def downgrade() -> None:
+    for table, columns in reversed(list(_TABLES.items())):
+        for col in columns:
+            op.alter_column(
+                table,
+                col,
+                existing_type=sa.String(36),
+                type_=sa.String(32),
+                existing_nullable=None,
+            )

alembic/versions/037_add_logs_to_generation_tasks.py

@@ -0,0 +1,26 @@
+"""Add logs field to generation_tasks
+
+Revision ID: 037_generation_logs
+Revises: 036_expand_uuid_36
+Create Date: 2026-07-10
+"""
+
+import sqlalchemy as sa
+
+from alembic import op
+
+revision = "037_generation_logs"
+down_revision = "036_expand_uuid_36"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "generation_tasks",
+        sa.Column("logs", sa.Text(), nullable=False, server_default="[]"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("generation_tasks", "logs")

alembic/versions/038_add_error_info_and_retry_to_generation_tasks.py

@@ -0,0 +1,47 @@
+"""add error_info and retry fields to generation_tasks
+
+Revision ID: 038_error_retry
+Revises: 037_generation_logs
+Create Date: 2026-07-13 22:15:00.000000
+"""
+
+import sqlalchemy as sa
+from sqlalchemy.dialects.mysql import JSON as MySQLJSON
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision = "038_error_retry"
+down_revision = "037_generation_logs"
+branch_labels = None
+depends_on = None
+
+
+def upgrade():
+    # error_info: 结构化错误信息（error_type, message, stack_trace, failed_at, stage等）
+    op.add_column(
+        "generation_tasks",
+        sa.Column("error_info", sa.JSON(), nullable=True),
+    )
+    # retry_count: 重试次数
+    op.add_column(
+        "generation_tasks",
+        sa.Column("retry_count", sa.Integer(), nullable=False, server_default="0"),
+    )
+    # auto_retry_enabled: 是否开启自动重试
+    op.add_column(
+        "generation_tasks",
+        sa.Column("auto_retry_enabled", sa.Boolean(), nullable=False, server_default=sa.text("false")),
+    )
+    # auto_retry_max: 最大自动重试次数
+    op.add_column(
+        "generation_tasks",
+        sa.Column("auto_retry_max", sa.Integer(), nullable=False, server_default="0"),
+    )
+
+
+def downgrade():
+    op.drop_column("generation_tasks", "auto_retry_max")
+    op.drop_column("generation_tasks", "auto_retry_enabled")
+    op.drop_column("generation_tasks", "retry_count")
+    op.drop_column("generation_tasks", "error_info")

alembic/versions/039_add_transition_duration.py

@@ -0,0 +1,34 @@
+"""add transition_duration to edit_plan_clips
+
+Revision ID: 039_transition_duration
+Revises: 038_error_retry
+Create Date: 2026-07-14 09:00:00.000000
+"""
+
+from __future__ import annotations
+
+import sqlalchemy as sa
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision = "039_transition_duration"
+down_revision = "038_error_retry"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "edit_plan_clips",
+        sa.Column(
+            "transition_duration",
+            sa.Float(),
+            nullable=False,
+            server_default="0.0",
+        ),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("edit_plan_clips", "transition_duration")

alembic/versions/040_add_playback_speed_to_edit_plan_clips.py

@@ -0,0 +1,29 @@
+"""add playback_speed to edit_plan_clips
+
+Revision ID: 040_playback_speed
+Revises: 039_transition_duration
+Create Date: 2026-07-14 10:00:00.000000
+"""
+
+from __future__ import annotations
+
+import sqlalchemy as sa
+
+from alembic import op
+
+# revision identifiers, used by Alembic.
+revision = "040_playback_speed"
+down_revision = "039_transition_duration"
+branch_labels = None
+depends_on = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "edit_plan_clips",
+        sa.Column("playback_speed", sa.Float(), nullable=False, server_default="1.0"),
+    )
+
+
+def downgrade() -> None:
+    op.drop_column("edit_plan_clips", "playback_speed")

apps/api/app/__init__.py

@@ -1 +0,0 @@
-"""API application package."""

apps/api/app/api/__init__.py

@@ -1 +0,0 @@
-"""API package."""

apps/api/app/api/router.py

@@ -4,23 +4,22 @@ from app.api.routes.assets import router as assets_router
 from app.api.routes.auth import router as auth_router
 from app.api.routes.chunked_upload import router as chunked_upload_router
 from app.api.routes.classification_jobs import router as classification_jobs_router
-from app.api.routes.dashboard import router as dashboard_router
 from app.api.routes.duplication import router as duplication_router
 from app.api.routes.edit_plans import router as edit_plans_router
-from app.api.routes.edit_templates import router as edit_templates_router
-from app.api.routes.generated_videos import router as generated_videos_router
+from app.api.routes.feature_flags import router as feature_flags_router
 from app.api.routes.generation_tasks import router as generation_tasks_router
 from app.api.routes.health import router as health_check_router
 from app.api.routes.ingest_jobs import router as ingest_jobs_router
-from app.api.routes.jobs import router as jobs_router
+from app.api.routes.internal_render import router as internal_render_router
 from app.api.routes.projects import router as projects_router
-from app.api.routes.recipes import router as recipes_router
 from app.api.routes.subscription import router as subscription_router
+from app.api.routes.tags import router as tags_router
 from app.api.routes.task_center import router as task_center_router
 from app.api.routes.templates import router as templates_router
 from app.api.routes.titles import router as titles_router
 from app.api.routes.tts import router as tts_router
 from app.api.routes.upload import router as upload_router
+from app.api.routes.videos import router as videos_router
 from app.api.routes.voice_clones import router as voice_clones_router
 from app.api.routes.voices import router as voices_router
 from fastapi import APIRouter
@@ -38,6 +37,11 @@ api_router.include_router(
     prefix="/projects",
     tags=["Project"],
 )
+api_router.include_router(
+    tags_router,
+    prefix="/tags",
+    tags=["Tag"],
+)
 api_router.include_router(
     task_center_router,
     tags=["TaskCenter"],
@@ -81,15 +85,6 @@ api_router.include_router(
     prefix="/generation",
     tags=["Generation"],
 )
-api_router.include_router(
-    jobs_router,
-    tags=["Job"],
-)
-api_router.include_router(
-    generated_videos_router,
-    prefix="/generated-videos",
-    tags=["GeneratedVideo"],
-)
 api_router.include_router(
     titles_router,
     prefix="/titles",
@@ -105,6 +100,10 @@ api_router.include_router(
     prefix="/voice-clones",
     tags=["VoiceClone"],
 )
+api_router.include_router(
+    videos_router,
+    tags=["VideoCenter"],
+)
 api_router.include_router(
     duplication_router,
     prefix="/duplication",
@@ -115,26 +114,11 @@ api_router.include_router(
     prefix="/subscription",
     tags=["Subscription"],
 )
-api_router.include_router(
-    recipes_router,
-    prefix="/recipes",
-    tags=["Recipe"],
-)
 api_router.include_router(
     templates_router,
     prefix="/templates",
     tags=["Template"],
 )
-api_router.include_router(
-    dashboard_router,
-    prefix="/dashboard",
-    tags=["Dashboard"],
-)
-api_router.include_router(
-    edit_templates_router,
-    prefix="/edit-templates",
-    tags=["EditTemplate"],
-)
 api_router.include_router(
     edit_plans_router,
     prefix="/edit-plans",
@@ -145,3 +129,11 @@ api_router.include_router(
     prefix="/tts",
     tags=["TTS"],
 )
+api_router.include_router(
+    feature_flags_router,
+    tags=["Internal"],
+)
+api_router.include_router(
+    internal_render_router,
+    tags=["Internal"],
+)

apps/api/app/api/routes/_helpers.py

@@ -0,0 +1,48 @@
+"""路由层共享辅助函数 — 消除跨文件重复定义。"""
+
+from typing import Any
+
+from fastapi import HTTPException, status
+
+from packages.application import GetProjectUseCase
+from packages.ports.user_repository import UserRepository
+
+
+def check_project_access(project_id: str, user_id: str, project_repository) -> None:
+    """检查用户是否有项目访问权限。
+
+    合并自 asset_libraries.py / edit_plans.py 的同名函数。
+    - 空 project_id 直接放行（兼容 edit_plans 中 project_id 可选的场景）
+    - 错误信息使用中文，与项目其他路由保持一致
+    """
+    if not project_id or not project_id.strip():
+        return
+    project = project_repository.find_by_id(project_id)
+    if project is None:
+        raise HTTPException(status_code=404, detail="项目不存在")
+    if not project.can_access(user_id):
+        raise HTTPException(status_code=403, detail="无权访问该项目")
+
+
+def get_user_plan(user_id: str, user_repository: UserRepository) -> str:
+    """获取用户的订阅计划名称。"""
+    user = user_repository.find_by_id(user_id)
+    if user is None:
+        return "free"
+    return getattr(user, "subscription_plan", "free") or "free"
+
+
+def require_project_and_library(
+    project_id: str,
+    library_id: str,
+    project_repository: Any,
+    asset_library_repository: Any,
+) -> None:
+    """Verify project and asset library exist."""
+    project = GetProjectUseCase(project_repository).execute(project_id)
+    if project is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
+
+    libraries = asset_library_repository.find_by_project(project_id)
+    if not any(item.id == library_id for item in libraries):
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Asset library not found")

apps/api/app/api/routes/asset_libraries.py

@@ -1,13 +1,18 @@
 from typing import Any
 
 from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import get_asset_library_repository, get_project_repository
+from app.dependencies import (
+    get_asset_library_repository,
+    get_asset_repository,
+    get_project_repository,
+)
 from app.schemas.asset_library import (
     AssetLibraryResponse,
     CreateAssetLibraryRequest,
+    EnsureDefaultLibraryRequest,
     ListAssetLibrariesResponse,
 )
-from fastapi import APIRouter, Depends, HTTPException, Query, status
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
 
 from packages.application import (
     CreateAssetLibraryCommand,
@@ -15,20 +20,13 @@ from packages.application import (
     GetProjectUseCase,
     ListAssetLibrariesUseCase,
 )
-from packages.domain import AssetLibraryKind
+from packages.domain import AssetLibrary, AssetLibraryKind
+
+from ._helpers import check_project_access
 
 router = APIRouter()
 
 
-def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
-    """检查用户是否有项目访问权限"""
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
-
-
 def _to_asset_library_response(item) -> AssetLibraryResponse:
     return AssetLibraryResponse(
         id=item.id,
@@ -43,6 +41,7 @@ def _to_asset_library_response(item) -> AssetLibraryResponse:
 @router.get("", response_model=ListAssetLibrariesResponse)
 def list_asset_libraries(
     project_id: str | None = Query(None),
+    kind: str | None = Query(None, pattern="^(video|voice|image)$"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     asset_library_repository: Any = Depends(get_asset_library_repository),
     project_repository: Any = Depends(get_project_repository),
@@ -66,6 +65,11 @@ def list_asset_libraries(
             all_items.extend(use_case.execute(proj.id))
         items = all_items
 
+    # 按 kind 过滤（可选）
+    if kind:
+        kind_enum = AssetLibraryKind(kind)
+        items = [item for item in items if item.kind == kind_enum]
+
     return ListAssetLibrariesResponse(items=[_to_asset_library_response(item) for item in items])
 
 
@@ -90,3 +94,79 @@ def create_asset_library(
         )
     )
     return _to_asset_library_response(item)
+
+
+# 默认素材库名称映射
+_DEFAULT_LIBRARY_NAMES = {
+    "video": "视频素材库",
+    "voice": "配音素材库",
+    "image": "图片素材库",
+}
+
+
+@router.post("/ensure-default", response_model=AssetLibraryResponse)
+def ensure_default_library(
+    request: EnsureDefaultLibraryRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_library_repository: Any = Depends(get_asset_library_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> AssetLibraryResponse:
+    """确保项目下指定 kind 的默认素材库存在，已存在则直接返回，不存在则自动创建。"""
+    project = project_repository.find_by_id(request.project_id)
+    if project is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
+    if not project.can_access(authenticated_user.user.id):
+        raise HTTPException(status_code=status.HTTP_403_FORBIDDEN, detail="Access denied to project")
+
+    kind = AssetLibraryKind(request.kind)
+
+    # 查找该项目下同 kind 的素材库，返回第一个
+    existing = asset_library_repository.find_by_project(request.project_id)
+    for lib in existing:
+        if lib.kind == kind:
+            return _to_asset_library_response(lib)
+
+    # 不存在 → 自动创建
+    import uuid
+    from datetime import datetime, timezone
+
+    now = datetime.now(timezone.utc)
+    default_name = _DEFAULT_LIBRARY_NAMES.get(request.kind, f"{request.kind}素材库")
+    library = AssetLibrary(
+        id=str(uuid.uuid4()),
+        project_id=request.project_id,
+        name=default_name,
+        kind=kind,
+        asset_count=0,
+        total_size=0,
+        created_at=now,
+        updated_at=now,
+    )
+    created = asset_library_repository.create(library)
+    return _to_asset_library_response(created)
+
+
+@router.delete("/{library_id}", status_code=status.HTTP_204_NO_CONTENT, response_class=Response)
+def delete_asset_library(
+    library_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_library_repository: Any = Depends(get_asset_library_repository),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> None:
+    """删除素材库，同时删除库内所有素材。"""
+    # 查找素材库
+    library = asset_library_repository.find_by_id(library_id)
+    if library is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="素材库不存在")
+
+    # 权限校验：检查用户是否有项目访问权限
+    check_project_access(library.project_id, authenticated_user.user.id, project_repository)
+
+    # 删除库内所有素材（硬删除，素材库已删除，无需保留软删除状态）
+    assets_in_library = asset_repository.find_by_library(library_id)
+    for asset in assets_in_library:
+        asset_repository.delete(asset.id)
+
+    # 删除素材库本身
+    asset_library_repository.delete(library_id)

apps/api/app/api/routes/assets.py

@@ -1,20 +1,33 @@
 import logging
 from typing import Any, Optional
 
+from app.api.routes._helpers import check_project_access
 from app.auth import AuthenticatedUser, get_current_user
 from app.core.storage import get_storage_service
 from app.dependencies import (
     get_asset_library_repository,
     get_asset_repository,
     get_project_repository,
+    get_tag_repository,
 )
-from app.schemas.asset import AssetResponse, CreateAssetRequest, ListAssetsResponse, UpdateAssetReviewRequest
-from fastapi import APIRouter, Depends, HTTPException, Query
+from app.schemas.asset import (
+    AssetResponse,
+    BatchClassifyRequest,
+    BatchDeleteRequest,
+    BatchMarkRequest,
+    BatchOperationResponse,
+    BatchTagRequest,
+    CreateAssetRequest,
+    ListAssetsResponse,
+    UpdateAssetRequest,
+    UpdateAssetReviewRequest,
+)
+from app.schemas.tag import TagAssetsRequest
+from fastapi import APIRouter, Depends, HTTPException, Query, Response
 
 from packages.application import (
     CreateAssetCommand,
     CreateAssetUseCase,
-    ListAssetsUseCase,
 )
 from packages.domain import AssetStatus, ClassificationStatus
 
@@ -59,22 +72,30 @@ def _to_asset_response(item, storage_service=None) -> AssetResponse:
         classification_status=item.classification_status.value,
         quality_score=item.quality_score,
         uploaded_by_user_id=item.uploaded_by_user_id,
+        tag_ids=getattr(item, "tag_ids", []),
     )
 
 
-def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
-    """检查用户是否有项目访问权限"""
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=403, detail="Access denied to project")
-
-
 @router.get("", response_model=ListAssetsResponse)
 def list_assets(
     library_id: Optional[str] = Query(None),
     project_id: Optional[str] = Query(None),
+    kind: Optional[str] = Query(None, pattern="^(video|voice|image)$"),
+    keyword: Optional[str] = Query(None, description="按名称模糊匹配"),
+    gender: Optional[str] = Query(None, description="按 metadata.gender 筛选"),
+    style: Optional[str] = Query(None, description="按 metadata.style 筛选"),
+    tag_ids: Optional[str] = Query(None, description="按标签 ID 筛选（逗号分隔，取交集）"),
+    smart_view: Optional[str] = Query(
+        None,
+        description="智能视图筛选：recommended=推荐(质量分≥80)、cautious=慎用(60-79)、risky=高风险(<60或已驳回)、unused=未使用、used=已使用、pending_review=待复核",
+        pattern="^(recommended|cautious|risky|unused|used|pending_review)$",
+    ),
+    classification: Optional[str] = Query(
+        None,
+        description="按内容分类筛选：scenic=风景、product=产品、person=人物、animal=动物、food=美食、tech=科技、sport=运动、music=音乐、other=其他",
+    ),
+    skip: int = Query(0, ge=0),
+    limit: int = Query(100, ge=1, le=500),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     asset_repository: Any = Depends(get_asset_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
@@ -82,32 +103,177 @@ def list_assets(
 ) -> ListAssetsResponse:
     user_id = authenticated_user.user.id
 
-    # 模式1：指定 library_id → 返回该库的素材
+    # kind → file_type 映射（voice 对应 audio）
+    kind_to_file_type = {"video": "video", "voice": "audio", "image": "image"}
+
+    # 解析 tag_ids 参数（逗号分隔）
+    filter_tag_ids: list[str] | None = None
+    if tag_ids:
+        filter_tag_ids = [t.strip() for t in tag_ids.split(",") if t.strip()]
+        if not filter_tag_ids:
+            filter_tag_ids = None
+
+    # 需要内存过滤的标志（keyword/gender/style/tag_ids/smart_view/classification 无法在 DB 层过滤）
+    needs_memory_filter = bool(keyword or gender or style or filter_tag_ids or smart_view or classification)
+
+    def _apply_memory_filters(items):
+        """应用 keyword / gender / style / tag_ids / smart_view / classification 内存过滤。"""
+        result = items
+        if keyword:
+            kw = keyword.lower()
+            result = [i for i in result if kw in (i.name or "").lower()]
+        if gender:
+            result = [i for i in result if (i.metadata or {}).get("gender") == gender]
+        if style:
+            result = [i for i in result if (i.metadata or {}).get("style") == style]
+        if classification:
+            result = [i for i in result if (i.metadata or {}).get("classification") == classification]
+        if filter_tag_ids:
+            tag_set = set(filter_tag_ids)
+            result = [i for i in result if tag_set.issubset(set(getattr(i, "tag_ids", [])))]
+        if smart_view:
+
+            def __meta(a):
+                return a.metadata or {}
+
+            def __use_count(a):
+                return int(__meta(a).get("generation_use_count") or 0)
+
+            def __review_status(a):
+                return __meta(a).get("review_status", "")
+
+            if smart_view == "recommended":
+                result = [i for i in result if i.quality_score is not None and i.quality_score >= 80]
+            elif smart_view == "cautious":
+                result = [i for i in result if i.quality_score is not None and 60 <= i.quality_score < 80]
+            elif smart_view == "risky":
+                result = [
+                    i
+                    for i in result
+                    if (i.quality_score is not None and i.quality_score < 60) or __review_status(i) == "rejected"
+                ]
+            elif smart_view == "unused":
+                result = [i for i in result if __use_count(i) == 0]
+            elif smart_view == "used":
+                result = [i for i in result if __use_count(i) > 0]
+            elif smart_view == "pending_review":
+                result = [i for i in result if __review_status(i) == "pending_review"]
+        return result
+
+    # ── 优化路径：无内存过滤时，使用 DB 级分页 ──
+    if not needs_memory_filter:
+        ft = kind_to_file_type.get(kind) if kind else None
+
+        # 模式1：指定 library_id
+        if library_id:
+            library = asset_library_repository.get(library_id)
+            if library is None:
+                raise HTTPException(status_code=404, detail=f"AssetLibrary {library_id} not found")
+            check_project_access(library.project_id, user_id, project_repository)
+            if ft:
+                items = asset_repository.find_by_library_and_file_type(library_id, ft, skip=skip, limit=limit)
+                total = asset_repository.count_by_project(library.project_id) if not kind else len(items)
+            else:
+                items = asset_repository.find_by_library(library_id, skip=skip, limit=limit)
+                total = asset_repository.count_by_project(library.project_id)
+            return ListAssetsResponse(
+                items=[_to_asset_response(item) for item in items],
+                total=total,
+                skip=skip,
+                limit=limit,
+            )
+
+        # 模式2：指定 project_id
+        if project_id:
+            check_project_access(project_id, user_id, project_repository)
+            if ft:
+                # 无直接方法，加载后按 file_type 过滤（仍比全量加载好）
+                all_items = asset_repository.find_by_project(project_id)
+                items = [i for i in all_items if i.mime_type and i.mime_type.startswith(ft)]
+                total = len(items)
+                paged = items[skip : skip + limit]
+            else:
+                items = asset_repository.find_by_project(project_id, skip=skip, limit=limit)
+                total = asset_repository.count_by_project(project_id)
+                paged = items
+            return ListAssetsResponse(
+                items=[_to_asset_response(item) for item in paged],
+                total=total,
+                skip=skip,
+                limit=limit,
+            )
+
+        # 模式3：跨项目（无 library_id/project_id）
+        try:
+            projects = project_repository.find_accessible_projects(user_id)
+        except Exception:
+            logger.exception("查询用户可访问项目失败: user_id=%s", user_id)
+            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
+
+        project_ids = [p.id for p in projects]
+        if not project_ids:
+            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
+
+        total = asset_repository.count_by_project_ids(project_ids)
+        # 跨项目分页：逐项目累积直到凑够一页
+        paged_items: list = []
+        offset = skip
+        remaining = limit
+        for pid in project_ids:
+            proj_total = asset_repository.count_by_project(pid)
+            if offset >= proj_total:
+                offset -= proj_total
+                continue
+            proj_items = asset_repository.find_by_project(pid, skip=offset, limit=remaining)
+            paged_items.extend(proj_items)
+            remaining -= len(proj_items)
+            offset = 0
+            if remaining <= 0:
+                break
+
+        return ListAssetsResponse(
+            items=[_to_asset_response(item) for item in paged_items],
+            total=total,
+            skip=skip,
+            limit=limit,
+        )
+
+    # ── 内存过滤路径：有 keyword/gender/style 时，加载全量后内存过滤 ──
     if library_id:
         library = asset_library_repository.get(library_id)
         if library is None:
             raise HTTPException(status_code=404, detail=f"AssetLibrary {library_id} not found")
-        _check_project_access(library.project_id, user_id, project_repository)
-        items = asset_repository.find_by_library(library_id)
-        return ListAssetsResponse(items=[_to_asset_response(item) for item in items])
+        check_project_access(library.project_id, user_id, project_repository)
+        if kind:
+            all_items = asset_repository.find_by_library_and_file_type(library_id, kind_to_file_type[kind])
+        else:
+            all_items = asset_repository.find_by_library(library_id)
+    elif project_id:
+        check_project_access(project_id, user_id, project_repository)
+        all_items = asset_repository.find_by_project(project_id)
+    else:
+        try:
+            projects = project_repository.find_accessible_projects(user_id)
+        except Exception:
+            logger.exception("查询用户可访问项目失败: user_id=%s", user_id)
+            return ListAssetsResponse(items=[], total=0, skip=skip, limit=limit)
+        all_items = []
+        for proj in projects:
+            all_items.extend(asset_repository.find_by_project(proj.id))
 
-    # 模式2：指定 project_id → 返回该项目所有素材
-    if project_id:
-        _check_project_access(project_id, user_id, project_repository)
-        items = asset_repository.find_by_project(project_id)
-        return ListAssetsResponse(items=[_to_asset_response(item) for item in items])
-
-    # 模式3：都不传 → 返回用户可访问的所有项目的所有素材
-    try:
-        projects = project_repository.find_accessible_projects(user_id)
-    except Exception:
-        logger.exception("查询用户可访问项目失败: user_id=%s", user_id)
-        return ListAssetsResponse(items=[])
-
-    all_items = []
-    for proj in projects:
-        all_items.extend(asset_repository.find_by_project(proj.id))
-    return ListAssetsResponse(items=[_to_asset_response(item) for item in all_items])
+    # 应用 kind 过滤（如果有）+ keyword/gender/style
+    if kind:
+        ft = kind_to_file_type.get(kind)
+        all_items = [i for i in all_items if i.mime_type and i.mime_type.startswith(ft or "")]
+    filtered = _apply_memory_filters(all_items)
+    total = len(filtered)
+    paged = filtered[skip : skip + limit]
+    return ListAssetsResponse(
+        items=[_to_asset_response(item) for item in paged],
+        total=total,
+        skip=skip,
+        limit=limit,
+    )
 
 
 def _apply_asset_review_status(item, review_status: str):
@@ -129,12 +295,260 @@ def update_asset_review_status(
     item = asset_repository.get(asset_id)
     if item is None:
         raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
-    _check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
     _apply_asset_review_status(item, request.review_status)
     updated = asset_repository.update(item)
     return _to_asset_response(updated)
 
 
+@router.post("/batch-delete", response_model=BatchOperationResponse)
+def batch_delete_assets(
+    request: BatchDeleteRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> BatchOperationResponse:
+    """批量删除素材（软删除，标记 status=deleted），需逐项校验项目权限。"""
+    user_id = authenticated_user.user.id
+    success_ids: list[str] = []
+    failed_details: dict[str, str] = {}
+
+    for asset_id in request.asset_ids:
+        item = asset_repository.find_by_id(asset_id)
+        if item is None:
+            failed_details[asset_id] = "not_found"
+            continue
+        try:
+            check_project_access(item.project_id, user_id, project_repository)
+            success_ids.append(asset_id)
+        except HTTPException:
+            failed_details[asset_id] = "access_denied"
+
+    if success_ids:
+        asset_repository.batch_delete(success_ids)
+
+    return BatchOperationResponse(
+        success_count=len(success_ids),
+        failed_ids=list(failed_details.keys()),
+        failed_details=failed_details,
+    )
+
+
+@router.post("/batch-tag", response_model=BatchOperationResponse)
+def batch_tag_assets(
+    request: BatchTagRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+    tag_repository: Any = Depends(get_tag_repository),
+) -> BatchOperationResponse:
+    """批量打标签（添加或替换模式），需逐项校验项目权限和标签权限。"""
+    user_id = authenticated_user.user.id
+    success_ids: list[str] = []
+    failed_details: dict[str, str] = {}
+
+    # 校验标签存在且属于当前用户
+    for tag_id in request.tag_ids:
+        tag = tag_repository.get(tag_id)
+        if tag is None:
+            return BatchOperationResponse(
+                success_count=0,
+                failed_ids=list(request.asset_ids),
+                failed_details={aid: f"tag_not_found:{tag_id}" for aid in request.asset_ids},
+            )
+        if tag.user_id != user_id:
+            return BatchOperationResponse(
+                success_count=0,
+                failed_ids=list(request.asset_ids),
+                failed_details={aid: f"tag_access_denied:{tag_id}" for aid in request.asset_ids},
+            )
+
+    # 校验素材权限
+    for asset_id in request.asset_ids:
+        item = asset_repository.find_by_id(asset_id)
+        if item is None:
+            failed_details[asset_id] = "not_found"
+            continue
+        try:
+            check_project_access(item.project_id, user_id, project_repository)
+            success_ids.append(asset_id)
+        except HTTPException:
+            failed_details[asset_id] = "access_denied"
+
+    if success_ids:
+        if request.mode == "replace":
+            asset_repository.batch_replace_tags(success_ids, request.tag_ids)
+        else:
+            asset_repository.batch_add_tags(success_ids, request.tag_ids)
+
+    return BatchOperationResponse(
+        success_count=len(success_ids),
+        failed_ids=list(failed_details.keys()),
+        failed_details=failed_details,
+    )
+
+
+@router.post("/batch-classify", response_model=BatchOperationResponse)
+def batch_classify_assets(
+    request: BatchClassifyRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> BatchOperationResponse:
+    """批量修改素材内容分类（person/scenic/product等），存在metadata.category中。"""
+    user_id = authenticated_user.user.id
+    success_ids: list[str] = []
+    failed_details: dict[str, str] = {}
+
+    for asset_id in request.asset_ids:
+        item = asset_repository.find_by_id(asset_id)
+        if item is None:
+            failed_details[asset_id] = "not_found"
+            continue
+        try:
+            check_project_access(item.project_id, user_id, project_repository)
+            success_ids.append(asset_id)
+        except HTTPException:
+            failed_details[asset_id] = "access_denied"
+
+    if success_ids:
+        asset_repository.batch_update_metadata(success_ids, {"category": request.category})
+
+    return BatchOperationResponse(
+        success_count=len(success_ids),
+        failed_ids=list(failed_details.keys()),
+        failed_details=failed_details,
+    )
+
+
+@router.post("/batch-mark", response_model=BatchOperationResponse)
+def batch_mark_assets(
+    request: BatchMarkRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> BatchOperationResponse:
+    """批量设置智能视图标记（recommended/caution/high_risk），存在metadata.smart_view中。"""
+    user_id = authenticated_user.user.id
+    success_ids: list[str] = []
+    failed_details: dict[str, str] = {}
+
+    for asset_id in request.asset_ids:
+        item = asset_repository.find_by_id(asset_id)
+        if item is None:
+            failed_details[asset_id] = "not_found"
+            continue
+        try:
+            check_project_access(item.project_id, user_id, project_repository)
+            success_ids.append(asset_id)
+        except HTTPException:
+            failed_details[asset_id] = "access_denied"
+
+    if success_ids:
+        asset_repository.batch_update_metadata(success_ids, {"smart_view": request.smart_view})
+
+    return BatchOperationResponse(
+        success_count=len(success_ids),
+        failed_ids=list(failed_details.keys()),
+        failed_details=failed_details,
+    )
+
+
+@router.get("/{asset_id}", response_model=AssetResponse)
+def get_asset(
+    asset_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> AssetResponse:
+    item = asset_repository.find_by_id(asset_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    return _to_asset_response(item)
+
+
+@router.put("/{asset_id}", response_model=AssetResponse)
+def update_asset(
+    asset_id: str,
+    request: UpdateAssetRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> AssetResponse:
+    item = asset_repository.find_by_id(asset_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+
+    # 合并可修改字段
+    if request.name is not None:
+        item.name = request.name
+    if request.metadata is not None:
+        item.metadata = {**item.metadata, **request.metadata}
+    if request.tags is not None:
+        item.metadata = {**item.metadata, "tags": request.tags}
+
+    updated = asset_repository.update(item)
+    return _to_asset_response(updated)
+
+
+@router.delete("/{asset_id}", status_code=204, response_class=Response)
+def delete_asset(
+    asset_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> None:
+    item = asset_repository.find_by_id(asset_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    asset_repository.delete(asset_id)
+
+
+@router.post("/{asset_id}/tags", response_model=AssetResponse)
+def tag_asset(
+    asset_id: str,
+    request: TagAssetsRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+    tag_repository: Any = Depends(get_tag_repository),
+) -> AssetResponse:
+    """给素材打标签。"""
+    item = asset_repository.find_by_id(asset_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    for tag_id in request.tag_ids:
+        tag = tag_repository.get(tag_id)
+        if tag is None:
+            raise HTTPException(status_code=404, detail=f"Tag {tag_id} not found")
+        if tag.user_id != authenticated_user.user.id:
+            raise HTTPException(status_code=403, detail=f"无权使用标签 {tag_id}")
+        item.add_tag(tag_id)
+    updated = asset_repository.update(item)
+    return _to_asset_response(updated)
+
+
+@router.delete("/{asset_id}/tags/{tag_id}", status_code=204, response_class=Response)
+def untag_asset(
+    asset_id: str,
+    tag_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    asset_repository: Any = Depends(get_asset_repository),
+    project_repository: Any = Depends(get_project_repository),
+) -> None:
+    """取消素材的标签。"""
+    item = asset_repository.find_by_id(asset_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail=f"Asset {asset_id} not found")
+    check_project_access(item.project_id, authenticated_user.user.id, project_repository)
+    item.remove_tag(tag_id)
+    asset_repository.update(item)
+
+
 @router.post("", response_model=AssetResponse)
 def create_asset(
     request: CreateAssetRequest,

apps/api/app/api/routes/auth.py

@@ -6,13 +6,14 @@ app.dependencies and authentication behavior lives in application use cases.
 """
 
 import logging
+import os
 from typing import Optional
 
 import jwt
 from app.auth import AuthenticatedUser, blacklist_token, get_current_user
 from app.config import settings
 from app.dependencies import get_auth_email_service, get_auth_session_store, get_user_repository
-from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi import APIRouter, Depends, Header, HTTPException, status
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 from pydantic import BaseModel, EmailStr
 
@@ -104,7 +105,7 @@ async def register(
     request: RegisterRequest,
     user_repository: UserRepository = Depends(get_user_repository),
     email_service=Depends(get_auth_email_service),
-):
+) -> RegisterResponse:
     use_case = RegisterUserUseCase(
         user_repository=user_repository,
         base_url=settings.APP_BASE_URL,
@@ -135,7 +136,7 @@ async def login(
     request: LoginRequest,
     user_repository: UserRepository = Depends(get_user_repository),
     session_store=Depends(get_auth_session_store),
-):
+) -> LoginResponse:
     use_case = LoginUseCase(
         user_repository=user_repository,
         session_store=session_store,
@@ -161,7 +162,7 @@ async def refresh(
     request: RefreshRequest,
     user_repository: UserRepository = Depends(get_user_repository),
     session_store=Depends(get_auth_session_store),
-):
+) -> LoginResponse:
     use_case = RefreshTokenUseCase(
         user_repository=user_repository,
         session_store=session_store,
@@ -193,7 +194,7 @@ def _verify_email_token(token: str, user_repository: UserRepository) -> MessageR
 async def verify_email(
     token: str,
     user_repository: UserRepository = Depends(get_user_repository),
-):
+) -> MessageResponse:
     return _verify_email_token(token, user_repository)
 
 
@@ -201,16 +202,16 @@ async def verify_email(
 async def verify_email_post(
     request: VerifyEmailRequestModel,
     user_repository: UserRepository = Depends(get_user_repository),
-):
+) -> MessageResponse:
     return _verify_email_token(request.token, user_repository)
 
 
-@router.post("/password/forgot", response_model=MessageResponse, status_code=status.HTTP_202_ACCEPTED)
+@router.post("/forgot-password", response_model=MessageResponse, status_code=status.HTTP_202_ACCEPTED)
 async def forgot_password(
     request: PasswordResetRequestModel,
     user_repository: UserRepository = Depends(get_user_repository),
     email_service=Depends(get_auth_email_service),
-):
+) -> MessageResponse:
     success, error = RequestPasswordResetUseCase(
         user_repository=user_repository,
         base_url=settings.APP_BASE_URL,
@@ -222,11 +223,11 @@ async def forgot_password(
     return MessageResponse(message="如果账户存在，密码重置邮件已发送")
 
 
-@router.post("/password/reset", response_model=MessageResponse)
+@router.post("/reset-password", response_model=MessageResponse)
 async def reset_password(
     request: ResetPasswordModel,
     user_repository: UserRepository = Depends(get_user_repository),
-):
+) -> MessageResponse:
     success, error = ResetPasswordUseCase(user_repository=user_repository).execute(
         ResetPasswordRequest(token=request.token, new_password=request.new_password)
     )
@@ -240,9 +241,8 @@ async def reset_password(
 async def logout(
     credentials: HTTPAuthorizationCredentials | None = Depends(bearer_scheme),
     current_user: AuthenticatedUser = Depends(get_current_user),
-):
+) -> MessageResponse:
     """登出 - 将当前 token 加入黑名单"""
-    from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 
     if credentials:
         try:
@@ -257,7 +257,7 @@ async def logout(
 @router.get("/me", response_model=CurrentUserResponse)
 async def get_current_user_info(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
-):
+) -> CurrentUserResponse:
     user = authenticated_user.user
     return CurrentUserResponse(
         user_id=user.id,
@@ -284,3 +284,99 @@ def _translate_auth_error(error: str | None) -> str:
         "Display name is required": "显示名称不能为空",
     }
     return translations.get(error or "", error or "注册失败")
+
+
+class WechatSyncRequest(BaseModel):
+    openid: str
+    unionid: Optional[str] = None
+    nickname: Optional[str] = None
+    avatar_url: Optional[str] = None
+    source: str = "miniapp"
+
+
+class WechatSyncResponse(BaseModel):
+    access_token: str
+    token: str
+    refresh_token: str
+    user_id: str
+    user: dict
+    user_info: dict
+    is_new_user: bool
+    expires_in: int
+
+
+def _get_internal_api_keys() -> list[str]:
+    """获取内部 API Key 列表
+
+    优先级:
+    1. INTERNAL_API_KEYS 环境变量
+    2. /app/generated/internal_api_keys.txt 文件 (volume 持久化)
+    """
+    env_keys = os.environ.get("INTERNAL_API_KEYS", "")
+    if env_keys:
+        return [k.strip() for k in env_keys.split(",") if k.strip()]
+
+    # 从持久化文件读取
+    try:
+        with open("/app/generated/internal_api_keys.txt", "r") as f:
+            content = f.read().strip()
+            if content:
+                return [k.strip() for k in content.split(",") if k.strip()]
+    except Exception:
+        logger.warning("无法读取内部 API 密钥文件，仅依赖环境变量配置", exc_info=True)
+
+    return []
+
+
+def _verify_internal_api_key(x_api_key: str | None = Header(None)) -> bool:
+    """验证内部 API Key
+
+    - 已配置时：必须匹配 INTERNAL_API_KEYS 中的 key
+    - 未配置且非生产环境：放行（方便开发）
+    - 未配置且生产环境：拒绝
+    """
+    env = os.environ.get("APP_ENV", os.environ.get("ENV", "development")).lower()
+    key_list = _get_internal_api_keys()
+
+    if not key_list:
+        if env in ("production", "prod"):
+            raise HTTPException(status_code=401, detail="内部接口未配置 API Key")
+        return True
+
+    if x_api_key and x_api_key.strip() in key_list:
+        return True
+
+    raise HTTPException(status_code=401, detail="无效的 API Key")
+
+
+@router.post("/wechat-sync", response_model=WechatSyncResponse, include_in_schema=False)
+async def wechat_sync(
+    request: WechatSyncRequest,
+    user_repository: UserRepository = Depends(get_user_repository),
+    _: bool = Depends(_verify_internal_api_key),
+) -> WechatSyncResponse:
+    """
+    微信同步登录/注册（系统级内部接口）
+
+    由 BFF 层通过 API Key 调用，不直接面向终端用户。
+    根据 openid 查找或创建用户，返回 SaaS token。
+    """
+    from packages.application.auth.wechat_sync_use_case import WechatSyncRequest as UseCaseRequest
+    from packages.application.auth.wechat_sync_use_case import (
+        WechatSyncUseCase,
+    )
+
+    use_case = WechatSyncUseCase(user_repository=user_repository)
+    use_case_request = UseCaseRequest(
+        openid=request.openid,
+        unionid=request.unionid,
+        nickname=request.nickname,
+        avatar_url=request.avatar_url,
+        source=request.source,
+    )
+
+    response, error = use_case.execute(use_case_request)
+    if error:
+        raise HTTPException(status_code=400, detail=error)
+
+    return WechatSyncResponse(**response.to_dict())

apps/api/app/api/routes/chunked_upload.py

@@ -13,12 +13,13 @@ from pathlib import Path
 from typing import Any
 from uuid import uuid4
 
+from app.api.routes._helpers import require_project_and_library
 from app.auth import AuthenticatedUser, get_current_user
-from app.config import get_settings
 from app.core.celery_app import celery_app
 from app.core.storage import OSSStorageService, get_storage_service
 from app.dependencies import (
     get_asset_library_repository,
+    get_asset_repository,
     get_ingest_job_repository,
     get_project_repository,
 )
@@ -42,20 +43,33 @@ DEFAULT_CHUNK_SIZE = 5 * 1024 * 1024  # 5MB
 MAX_FILE_SIZE = 2 * 1024 * 1024 * 1024  # 2GB
 CHUNK_EXPIRY_HOURS = 24
 
-# Allowed file types (consistent with existing upload.py)
+# Allowed file types — must stay in sync with upload.py ALLOWED_MIME_TYPES
 ALLOWED_MIME_TYPES = {
+    # Images
     "image/jpeg",
     "image/png",
     "image/gif",
     "image/webp",
+    "image/bmp",
+    "image/tiff",
+    "image/svg+xml",
+    # Video
     "video/mp4",
     "video/quicktime",
+    "video/mpeg",
     "video/x-msvideo",
     "video/webm",
+    "video/x-matroska",
+    "video/3gpp",
+    # Audio
     "audio/mpeg",
     "audio/wav",
     "audio/ogg",
     "audio/mp3",
+    "audio/flac",
+    "audio/aac",
+    "audio/x-m4a",
+    "audio/webm",
 }
 
 # Chunk storage root directory
@@ -99,22 +113,6 @@ def _atomic_check_and_record(upload_id: str, chunk_index: int) -> bool:
             fcntl.flock(f.fileno(), fcntl.LOCK_UN)
 
 
-def _require_project_and_library(
-    project_id: str,
-    library_id: str,
-    project_repository: Any,
-    asset_library_repository: Any,
-) -> None:
-    """Verify project and asset library exist"""
-    project = GetProjectUseCase(project_repository).execute(project_id)
-    if project is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-
-    libraries = asset_library_repository.find_by_project(project_id)
-    if not any(item.id == library_id for item in libraries):
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Asset library not found")
-
-
 def _load_upload_meta(upload_id: str) -> dict[str, Any]:
     """Load upload metadata"""
     meta_path = _get_upload_meta_path(upload_id)
@@ -192,7 +190,6 @@ async def init_chunked_upload(
     asset_library_repository: Any = Depends(get_asset_library_repository),
 ) -> ChunkedUploadInitResponse:
     """Initialize chunked upload"""
-    settings = get_settings()
 
     # Validate file size
     if request.file_size > MAX_FILE_SIZE:
@@ -207,7 +204,7 @@ async def init_chunked_upload(
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
 
     # Verify asset library
-    _require_project_and_library(
+    require_project_and_library(
         request.project_id,
         request.library_id,
         project_repository,
@@ -260,6 +257,154 @@ async def init_chunked_upload(
     )
 
 
+@router.get("/{upload_id}/status", response_model=ChunkedUploadStatusResponse)
+async def get_upload_status(
+    upload_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+) -> ChunkedUploadStatusResponse:
+    """Get upload status (for resume)"""
+    meta = _load_upload_meta(upload_id)
+
+    return ChunkedUploadStatusResponse(
+        upload_id=upload_id,
+        filename=meta["filename"],
+        file_size=meta["file_size"],
+        total_chunks=meta["total_chunks"],
+        uploaded_chunks=sorted(meta["uploaded_chunks"]),
+        status=meta["status"],
+        created_at=datetime.fromisoformat(meta["created_at"]),
+        expires_at=datetime.fromisoformat(meta["expires_at"]),
+    )
+
+
+@router.post("/{upload_id}/complete", response_model=ChunkedUploadCompleteResponse)
+async def complete_chunked_upload(
+    upload_id: str,
+    request: ChunkedUploadCompleteRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+    asset_library_repository: Any = Depends(get_asset_library_repository),
+    asset_repository: Any = Depends(get_asset_repository),
+    ingest_job_repository: Any = Depends(get_ingest_job_repository),
+    storage_service: OSSStorageService = Depends(get_storage_service),
+) -> ChunkedUploadCompleteResponse:
+    """Complete chunked upload, merge chunks"""
+    # Load metadata
+    meta = _load_upload_meta(upload_id)
+
+    # Verify project ID and library ID
+    if request.project_id != meta["project_id"] or request.library_id != meta["library_id"]:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="Project or library ID mismatch")
+
+    # Verify all chunks are uploaded
+    expected_chunks = set(range(meta["total_chunks"]))
+    uploaded_chunks = set(meta["uploaded_chunks"])
+    missing_chunks = expected_chunks - uploaded_chunks
+
+    if missing_chunks:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Missing chunks: {sorted(missing_chunks)}. Please upload remaining chunks first.",
+        )
+
+    # Validate file type
+    chunk_dir = _get_chunk_dir(upload_id)
+    sample_chunk_path = chunk_dir / "chunk_000000"
+    if sample_chunk_path.exists():
+        with open(sample_chunk_path, "rb") as f:
+            sample_data = f.read(8192)  # Read first 8KB for type detection
+        detected_mime = _validate_file_type(sample_data, meta["filename"])
+        if detected_mime not in ALLOWED_MIME_TYPES:
+            raise HTTPException(
+                status_code=status.HTTP_400_BAD_REQUEST,
+                detail=f"Unsupported file type: {detected_mime}",
+            )
+
+    # Merge chunks to temp file
+    temp_file_path = CHUNK_STORAGE_ROOT / f"{upload_id}_complete.tmp"
+    try:
+        with open(temp_file_path, "wb") as out_file:
+            for i in range(meta["total_chunks"]):
+                chunk_path = chunk_dir / f"chunk_{i:06d}"
+                with open(chunk_path, "rb") as in_file:
+                    shutil.copyfileobj(in_file, out_file)
+
+        # Verify file size
+        actual_size = temp_file_path.stat().st_size
+        if actual_size != meta["file_size"]:
+            raise HTTPException(
+                status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+                detail=f"File size mismatch. Expected {meta['file_size']}, got {actual_size}",
+            )
+
+        # Upload to OSS
+        file_id = uuid4().hex[:8]
+        safe_filename = meta["filename"]
+        storage_key = f"uploads/{file_id}/{safe_filename}"
+
+        file_url = storage_service.upload_file(
+            str(temp_file_path),
+            storage_key,
+            content_type=meta["content_type"],
+        )
+
+        # ── 素材去重检测：同素材库 + 同 file_hash 视为重复 ──
+        if request.file_hash:
+            existing = asset_repository.find_by_library_and_file_hash(
+                library_id=request.library_id,
+                file_hash=request.file_hash,
+            )
+            if existing is not None:
+                logger.info(
+                    "素材去重命中(chunked): library=%s hash=%s existing_asset=%s",
+                    request.library_id,
+                    request.file_hash,
+                    existing.id,
+                )
+                meta["status"] = "completed"
+                _save_upload_meta(upload_id, meta)
+                return ChunkedUploadCompleteResponse(
+                    storage_key=storage_key,
+                    ingest_job_id="",
+                    url=file_url,
+                    duplicated=True,
+                    asset_id=existing.id,
+                )
+
+        # Create ingest job
+        use_case = SubmitIngestJobUseCase(ingest_job_repository)
+        job = use_case.execute(
+            SubmitIngestJobCommand(
+                project_id=meta["project_id"],
+                library_id=meta["library_id"],
+                storage_key=storage_key,
+                file_hash=request.file_hash,
+            )
+        )
+        celery_app.send_task("worker.ingest_asset", args=[job.id])
+
+        # Update metadata status
+        meta["status"] = "completed"
+        _save_upload_meta(upload_id, meta)
+
+        return ChunkedUploadCompleteResponse(
+            storage_key=storage_key,
+            ingest_job_id=job.id,
+            url=file_url,
+        )
+
+    finally:
+        # Cleanup temp file and chunks
+        if temp_file_path.exists():
+            temp_file_path.unlink()
+        if chunk_dir.exists():
+            shutil.rmtree(chunk_dir)
+        # Delete metadata file
+        meta_path = _get_upload_meta_path(upload_id)
+        if meta_path.exists():
+            meta_path.unlink()
+
+
 @router.post("/{upload_id}/{chunk_index}")
 async def upload_chunk(
     upload_id: str,
@@ -331,126 +476,3 @@ async def upload_chunk(
         "uploaded_chunks": len(meta["uploaded_chunks"]),
         "total_chunks": meta["total_chunks"],
     }
-
-
-@router.get("/{upload_id}/status", response_model=ChunkedUploadStatusResponse)
-async def get_upload_status(
-    upload_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-) -> ChunkedUploadStatusResponse:
-    """Get upload status (for resume)"""
-    meta = _load_upload_meta(upload_id)
-
-    return ChunkedUploadStatusResponse(
-        upload_id=upload_id,
-        filename=meta["filename"],
-        file_size=meta["file_size"],
-        total_chunks=meta["total_chunks"],
-        uploaded_chunks=sorted(meta["uploaded_chunks"]),
-        status=meta["status"],
-        created_at=datetime.fromisoformat(meta["created_at"]),
-        expires_at=datetime.fromisoformat(meta["expires_at"]),
-    )
-
-
-@router.post("/{upload_id}/complete", response_model=ChunkedUploadCompleteResponse)
-async def complete_chunked_upload(
-    upload_id: str,
-    request: ChunkedUploadCompleteRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-    asset_library_repository: Any = Depends(get_asset_library_repository),
-    ingest_job_repository: Any = Depends(get_ingest_job_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> ChunkedUploadCompleteResponse:
-    """Complete chunked upload, merge chunks"""
-    # Load metadata
-    meta = _load_upload_meta(upload_id)
-
-    # Verify project ID and library ID
-    if request.project_id != meta["project_id"] or request.library_id != meta["library_id"]:
-        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail="Project or library ID mismatch")
-
-    # Verify all chunks are uploaded
-    expected_chunks = set(range(meta["total_chunks"]))
-    uploaded_chunks = set(meta["uploaded_chunks"])
-    missing_chunks = expected_chunks - uploaded_chunks
-
-    if missing_chunks:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"Missing chunks: {sorted(missing_chunks)}. Please upload remaining chunks first.",
-        )
-
-    # Validate file type
-    chunk_dir = _get_chunk_dir(upload_id)
-    sample_chunk_path = chunk_dir / "chunk_000000"
-    if sample_chunk_path.exists():
-        with open(sample_chunk_path, "rb") as f:
-            sample_data = f.read(8192)  # Read first 8KB for type detection
-        detected_mime = _validate_file_type(sample_data, meta["filename"])
-        if detected_mime not in ALLOWED_MIME_TYPES:
-            raise HTTPException(
-                status_code=status.HTTP_400_BAD_REQUEST,
-                detail=f"Unsupported file type: {detected_mime}",
-            )
-
-    # Merge chunks to temp file
-    temp_file_path = CHUNK_STORAGE_ROOT / f"{upload_id}_complete.tmp"
-    try:
-        with open(temp_file_path, "wb") as out_file:
-            for i in range(meta["total_chunks"]):
-                chunk_path = chunk_dir / f"chunk_{i:06d}"
-                with open(chunk_path, "rb") as in_file:
-                    shutil.copyfileobj(in_file, out_file)
-
-        # Verify file size
-        actual_size = temp_file_path.stat().st_size
-        if actual_size != meta["file_size"]:
-            raise HTTPException(
-                status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-                detail=f"File size mismatch. Expected {meta['file_size']}, got {actual_size}",
-            )
-
-        # Upload to OSS
-        file_id = uuid4().hex[:8]
-        safe_filename = meta["filename"]
-        storage_key = f"uploads/{file_id}/{safe_filename}"
-
-        file_url = storage_service.upload_file(
-            str(temp_file_path),
-            storage_key,
-            content_type=meta["content_type"],
-        )
-
-        # Create ingest job
-        use_case = SubmitIngestJobUseCase(ingest_job_repository)
-        job = use_case.execute(
-            SubmitIngestJobCommand(
-                project_id=meta["project_id"],
-                library_id=meta["library_id"],
-                storage_key=storage_key,
-            )
-        )
-        celery_app.send_task("worker.ingest_asset", args=[job.id])
-
-        # Update metadata status
-        meta["status"] = "completed"
-        _save_upload_meta(upload_id, meta)
-
-        return ChunkedUploadCompleteResponse(
-            storage_key=storage_key,
-            ingest_job_id=job.id,
-            url=file_url,
-        )
-
-    finally:
-        # Cleanup temp file and chunks
-        if temp_file_path.exists():
-            temp_file_path.unlink()
-        if chunk_dir.exists():
-            shutil.rmtree(chunk_dir)
-        # Delete metadata file
-        meta_path = _get_upload_meta_path(upload_id)
-        if meta_path.exists():
-            meta_path.unlink()

apps/api/app/api/routes/dashboard.py

@@ -1,92 +0,0 @@
-from typing import Any
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import (
-    get_asset_repository,
-    get_generation_task_repository,
-    get_project_repository,
-    get_title_library_repository,
-    get_voice_library_repository,
-)
-from app.schemas.dashboard import DashboardOverviewResponse, RecentTaskItem, SubscriptionInfo
-from fastapi import APIRouter, Depends
-
-router = APIRouter()
-
-
-def _status_value(status) -> str:
-    return status.value if hasattr(status, "value") else str(status)
-
-
-def _generation_step(status: str) -> str:
-    if status == "pending":
-        return "等待 Worker 执行"
-    if status == "running":
-        return "正在生成成片"
-    if status == "completed":
-        return "生成完成"
-    if status == "failed":
-        return "生成失败"
-    return status
-
-
-@router.get("/overview", response_model=DashboardOverviewResponse)
-def get_dashboard_overview(
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-    asset_repository: Any = Depends(get_asset_repository),
-    generation_task_repository: Any = Depends(get_generation_task_repository),
-    title_library_repository: Any = Depends(get_title_library_repository),
-    voice_library_repository: Any = Depends(get_voice_library_repository),
-) -> DashboardOverviewResponse:
-    """Dashboard 概览：用户级汇总数据。"""
-    user_id = authenticated_user.user.id
-
-    # 获取用户可访问的所有 project
-    projects = project_repository.find_accessible_projects(user_id)
-    project_ids = [p.id for p in projects]
-
-    # 素材统计
-    total_assets = asset_repository.count_by_project_ids(project_ids)
-    used_storage_bytes = asset_repository.sum_storage_by_project_ids(project_ids)
-
-    # 标题库 / 配音库统计
-    total_titles = title_library_repository.count_by_user(user_id)
-    total_voices = voice_library_repository.count_by_user(user_id)
-
-    # 生成任务统计
-    total_tasks = generation_task_repository.count_by_user(user_id)
-
-    # 最近任务（SQL 层 LIMIT 5）
-    recent = generation_task_repository.list_recent_by_user(user_id, limit=5)
-    recent_tasks = []
-    for task in recent:
-        s = _status_value(task.status)
-        recent_tasks.append(
-            RecentTaskItem(
-                id=task.id,
-                task_type="generation",
-                status=s,
-                current_step=_generation_step(s),
-                error_message=task.error_message or "",
-                updated_at=task.completed_at or task.started_at or task.created_at,
-            )
-        )
-
-    # 订阅信息
-    user = authenticated_user.user
-    subscription = SubscriptionInfo(
-        plan=getattr(user, "subscription_plan", "free") or "free",
-        is_active=getattr(user, "subscription_status", "") == "active",
-    )
-
-    return DashboardOverviewResponse(
-        total_assets=total_assets,
-        used_storage_bytes=used_storage_bytes,
-        total_titles=total_titles,
-        total_voices=total_voices,
-        total_tasks=total_tasks,
-        total_products=len(projects),
-        subscription=subscription,
-        recent_tasks=recent_tasks,
-    )

apps/api/app/api/routes/duplication.py

@@ -239,7 +239,7 @@ def get_duplication_detail(
     return _to_detail_response(record)
 
 
-@router.delete("/records/{record_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/records/{record_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_duplication_record(
     record_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -257,7 +257,7 @@ def delete_duplication_record(
 
     use_case = DeleteDuplicationRecordUseCase(duplication_repository)
     use_case.execute(record_id)
-    return Response(status_code=204)
+    return
 
 
 @router.post("/records/{record_id}/retry", response_model=DuplicationUploadResponse)

apps/api/app/api/routes/edit_plans.py

@@ -6,10 +6,11 @@ RESTful CRUD for EditPlan:
 - POST   /api/v1/edit-plans            创建
 - PUT    /api/v1/edit-plans/{id}       更新（含状态机流转）
 - DELETE /api/v1/edit-plans/{id}       删除
-- POST   /api/v1/edit-plans/{id}/generate          触发剪辑渲染生成（任务 2.05）
-- GET    /api/v1/edit-plans/{id}/generation-status  查询生成进度（任务 2.05）
-- POST   /api/v1/edit-plans/{id}/ai-recommend       AI 推荐片段方案（任务 3.09）
-- POST   /api/v1/edit-plans/{id}/generate-cover     AI 生成封面（任务 3.09）
+
+拆分模块（各自独立 router，由本文件 include_router 聚合）:
+- edit_plans_generation.py   生成相关（generate / generation-status / generations）
+- edit_plans_ai.py           AI 推荐 & 封面（ai-recommend / generate-cover）
+- edit_plans_timeline.py     时间线 & 模板生成（timeline / generate-from-template）
 
 业务逻辑委托给 EditPlanService 服务层。
 """
@@ -21,24 +22,18 @@ from datetime import datetime
 from typing import Any, List, Optional
 
 from app.auth import AuthenticatedUser, get_current_user
-from app.core.celery_app import celery_app
 from app.dependencies import get_db_session, get_project_repository
 from app.schemas.generation_task import GenerationTaskResponse
 from app.services import EditPlanService
-from fastapi import APIRouter, Depends, HTTPException, Query, status
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
 from pydantic import BaseModel, Field
 from sqlalchemy.orm import Session
 
-from packages.adapters.sqlalchemy_impl.generation_task_repository import (
-    SQLAlchemyGenerationTaskRepository,
-)
-from packages.application.generation_tasks import (
-    CreateGenerationTaskCommand,
-    CreateGenerationTaskUseCase,
-)
 from packages.domain.config_schemas import normalize_plan_config
 from packages.domain.edit_plan import EditPlan, EditPlanStatus
 
+from ._helpers import check_project_access
+
 logger = logging.getLogger(__name__)
 
 router = APIRouter()
@@ -151,6 +146,7 @@ class AIRecommendClipItem(BaseModel):
     text_content: str = Field(default="", description="文字内容")
     duration: float = Field(..., ge=0.0, description="片段时长（秒）")
     transition_effect: str = Field(default="cut", description="转场效果")
+    transition_duration: float = Field(default=0.0, ge=0.0, description="转场时长（秒），0 表示使用默认值")
     asset_id: str = Field(default="", description="关联素材 ID")
     start_time: float = Field(default=0.0, ge=0.0, description="素材截取起始时间（秒）")
     config: dict[str, Any] = Field(default_factory=dict, description="片段额外配置")
@@ -191,20 +187,49 @@ class GenerateCoverResponse(BaseModel):
     cover: dict[str, Any] = Field(..., description="封面数据（type / image_url / frame_time 等）")
 
 
+# ── 基于模板生成剪辑计划 Schemas ─────────────────────────────────────────────
+
+
+class GenerateFromTemplateRequest(BaseModel):
+    """基于模板生成剪辑计划请求体"""
+
+    template_id: str = Field(..., description="剪辑模板 ID")
+    asset_ids: List[str] = Field(default_factory=list, description="素材 ID 列表")
+    project_id: str = Field(default="", description="所属项目 ID")
+    name: str = Field(default="", description="计划名称（为空则自动取模板名）")
+
+
+class _PlanClipItem(BaseModel):
+    """片段响应体"""
+
+    id: str
+    clip_type: str
+    order: int
+    asset_id: str
+    text_content: str
+    start_time: float
+    duration: float
+    transition_effect: str
+    transition_duration: float
+    playback_speed: float = 1.0
+    status: str
+    config: Optional[dict[str, Any]] = None
+    created_at: datetime
+    updated_at: datetime
+
+    model_config = {"from_attributes": True}
+
+
+class GenerateFromTemplateResponse(BaseModel):
+    """基于模板生成剪辑计划响应体"""
+
+    plan: EditPlanResponse
+    clips: List[_PlanClipItem]
+
+
 # ── Helpers ───────────────────────────────────────────────────────────────────
 
 
-def _check_project_access(project_id: str, user_id: str, project_repository: Any) -> None:
-    """校验用户对项目的访问权限（参照 assets.py 的 can_access 模式）"""
-    if not project_id or not project_id.strip():
-        return
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=403, detail="Access denied to project")
-
-
 def _to_response(p: EditPlan) -> EditPlanResponse:
     return EditPlanResponse(
         id=p.id,
@@ -220,7 +245,7 @@ def _to_response(p: EditPlan) -> EditPlanResponse:
     )
 
 
-# ── Routes ────────────────────────────────────────────────────────────────────
+# ── CRUD Routes ───────────────────────────────────────────────────────────────
 
 
 @router.get("", response_model=EditPlanListResponse)
@@ -253,12 +278,12 @@ def list_plans(
         except ValueError:
             raise HTTPException(
                 status_code=status.HTTP_400_BAD_REQUEST,
-                detail=(f"无效的状态值: {status_filter}，" f"可选值: draft, editing, rendering, completed, failed"),
+                detail="无效的筛选条件，请选择正确的状态",
             )
 
     # 项目鉴权：如果指定了 project_id，校验用户是否有权访问
     if project_id:
-        _check_project_access(project_id, current_user.user.id, project_repository)
+        check_project_access(project_id, current_user.user.id, project_repository)
 
     skip = (page - 1) * page_size
     plans = svc.list_plans(
@@ -300,7 +325,7 @@ def get_plan(
         )
     # 项目鉴权
     if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
     return _to_response(plan)
 
 
@@ -316,7 +341,7 @@ def create_plan(
     project_id = (body.project_id or "").strip()
     # 项目鉴权
     if project_id:
-        _check_project_access(project_id, current_user.user.id, project_repository)
+        check_project_access(project_id, current_user.user.id, project_repository)
     svc = EditPlanService(db)
     # 标准化 config，填充 cover/title/subtitle/bgm 默认值
     normalized_config = normalize_plan_config(body.config)
@@ -358,7 +383,7 @@ def update_plan(
     if existing is None:
         raise HTTPException(status_code=404, detail=f"剪辑计划不存在: {plan_id}")
     if existing.project_id:
-        _check_project_access(existing.project_id, current_user.user.id, project_repository)
+        check_project_access(existing.project_id, current_user.user.id, project_repository)
 
     # 基础字段更新
     try:
@@ -379,7 +404,7 @@ def update_plan(
             except ValueError:
                 raise HTTPException(
                     status_code=status.HTTP_400_BAD_REQUEST,
-                    detail=(f"无效的状态值: {body.status}，" f"可选值: draft, editing, rendering, completed, failed"),
+                    detail="无效的状态值，请选择正确的状态",
                 )
             svc.transition_status(plan_id, target_status)
     except ValueError as exc:
@@ -400,7 +425,7 @@ def update_plan(
     return _to_response(result)
 
 
-@router.delete("/{plan_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/{plan_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_plan(
     plan_id: str,
     db: Session = Depends(get_db_session),
@@ -412,7 +437,7 @@ def delete_plan(
     # 项目鉴权
     existing = svc.get_plan(plan_id)
     if existing and existing.project_id:
-        _check_project_access(existing.project_id, current_user.user.id, project_repository)
+        check_project_access(existing.project_id, current_user.user.id, project_repository)
     deleted = svc.delete_plan(plan_id)
     if not deleted:
         raise HTTPException(
@@ -426,510 +451,12 @@ def delete_plan(
     )
 
 
-# ── 生成相关端点（任务 2.05） ─────────────────────────────────────────────────
+# ── Include sub-routers (拆分模块) ────────────────────────────────────────────
 
+from .edit_plans_ai import router as ai_router
+from .edit_plans_generation import router as generation_router
+from .edit_plans_timeline import router as timeline_router
 
-@router.post("/{plan_id}/generate", response_model=EditPlanGenerateResponse)
-def generate_plan(
-    plan_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> EditPlanGenerateResponse:
-    """触发剪辑计划渲染生成
-
-    前置条件：计划状态必须为 editing，且至少有一个片段。
-    流程：
-    1. 验证计划状态为 editing
-    2. 将 pending 片段标记为 ready
-    3. 创建 GenerationTask
-    4. 调度 Celery 任务 worker.render_edit_plan
-    5. 将计划状态流转为 rendering
-    """
-    svc = EditPlanService(db)
-    # 项目鉴权
-    plan_check = svc.get_plan(plan_id)
-    if plan_check is None:
-        raise HTTPException(status_code=404, detail=f"剪辑计划不存在: {plan_id}")
-    if plan_check.project_id:
-        _check_project_access(plan_check.project_id, current_user.user.id, project_repository)
-
-    # 检查是否可生成
-    try:
-        can_gen, reason = svc.can_generate(plan_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-    if not can_gen:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=reason,
-        )
-
-    # 将 pending 片段标记为 ready
-    clip_count = svc.mark_clips_ready(plan_id)
-
-    # 创建 GenerationTask
-    gen_task_repo = SQLAlchemyGenerationTaskRepository(db)
-    gen_task_use_case = CreateGenerationTaskUseCase(gen_task_repo)
-    plan = svc.get_plan_or_raise(plan_id)
-    gen_task = gen_task_use_case.execute(
-        CreateGenerationTaskCommand(
-            project_id="",
-            template_id=plan.template_id,
-            created_by_user_id=current_user.user.id,
-            source_edit_plan_id=plan_id,
-        )
-    )
-
-    # 将 generation_task_id 存入 plan config
-    svc.update_plan_config(plan_id, {"generation_task_id": gen_task.id})
-
-    # 流转状态为 rendering
-    svc.transition_status(plan_id, EditPlanStatus.RENDERING)
-
-    # 调度 Celery 任务
-    celery_app.send_task("worker.render_edit_plan", args=[plan_id])
-
-    # 获取最新状态
-    updated_plan = svc.get_plan_or_raise(plan_id)
-
-    logger.info(
-        "触发剪辑计划生成: plan_id=%s gen_task_id=%s clips=%d by user=%s",
-        plan_id,
-        gen_task.id,
-        clip_count,
-        current_user.user.id,
-    )
-
-    return EditPlanGenerateResponse(
-        plan_id=plan_id,
-        plan_status=updated_plan.status.value if hasattr(updated_plan.status, "value") else updated_plan.status,
-        generation_task_id=gen_task.id,
-        clip_count=clip_count,
-    )
-
-
-@router.get(
-    "/{plan_id}/generation-status",
-    response_model=EditPlanGenerationStatusResponse,
-)
-def get_generation_status(
-    plan_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> EditPlanGenerationStatusResponse:
-    """查询剪辑计划生成进度
-
-    返回计划状态、关联的 GenerationTask ID、以及每个片段的状态。
-    """
-    svc = EditPlanService(db)
-    try:
-        gen_status = svc.get_generation_status(plan_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-
-    plan = gen_status["plan"]
-    # 项目鉴权
-    if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
-    clips = gen_status["clips"]
-
-    clip_items = [
-        ClipStatusItem(
-            clip_id=c.id,
-            clip_type=c.clip_type,
-            order=c.order,
-            status=c.status.value if hasattr(c.status, "value") else c.status,
-            asset_id=c.asset_id or "",
-            text_content=c.text_content or "",
-            duration=c.duration,
-        )
-        for c in clips
-    ]
-
-    return EditPlanGenerationStatusResponse(
-        plan_id=plan_id,
-        plan_status=plan.status.value if hasattr(plan.status, "value") else plan.status,
-        generation_task_id=gen_status["generation_task_id"],
-        clips=clip_items,
-    )
-
-
-@router.get(
-    "/{plan_id}/generations",
-    response_model=EditPlanGenerationsResponse,
-)
-def list_plan_generations(
-    plan_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> EditPlanGenerationsResponse:
-    """查询剪辑计划关联的所有生成记录
-
-    返回该剪辑计划触发的所有 GenerationTask，按创建时间倒序。
-    """
-    svc = EditPlanService(db)
-    # 验证计划存在 + 项目鉴权
-    plan = svc.get_plan_or_raise(plan_id)
-    if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
-
-    gen_task_repo = SQLAlchemyGenerationTaskRepository(db)
-    tasks = gen_task_repo.list_by_source_edit_plan(plan_id)
-    items = [
-        GenerationTaskResponse(
-            id=t.id,
-            project_id=t.project_id,
-            asset_library_id=t.asset_library_id,
-            strategy_id=t.strategy_id,
-            voice_library_id=t.voice_library_id,
-            template_id=t.template_id,
-            asset_ids=t.asset_ids,
-            title_ids=t.title_ids,
-            voice_ids=t.voice_ids,
-            source_edit_plan_id=t.source_edit_plan_id or "",
-            status=t.status.value if hasattr(t.status, "value") else t.status,
-            progress=t.progress,
-            result_count=t.result_count,
-            error_message=t.error_message,
-        )
-        for t in tasks
-    ]
-    return EditPlanGenerationsResponse(items=items, total=len(items))
-
-
-# ── AI 推荐 & 封面生成端点（任务 3.09） ────────────────────────────────────────
-
-
-@router.post(
-    "/{plan_id}/ai-recommend",
-    response_model=AIRecommendResponse,
-)
-def ai_recommend_clips(
-    plan_id: str,
-    body: AIRecommendRequest,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> AIRecommendResponse:
-    """AI 推荐片段方案
-
-    调用 AI 服务分析素材，自动生成片段编排方案并写入剪辑计划。
-
-    流程：
-    1. 验证计划存在且状态为 draft/editing
-    2. 调用 AI 推荐服务（当前为 stub，后续接入真实 AI）
-    3. 清除计划现有片段，按推荐方案重新创建
-    4. 更新计划 config（cover/title/subtitle/bgm）和 total_duration
-    5. 返回推荐方案详情
-
-    前端对接：
-    - 请求体只需传 asset_ids（必填），editing_mode 和 target_duration 可选
-    - 返回的 clips 可直接渲染到时间线
-    - 返回的 config 包含推荐的封面/标题/字幕/BGM 配置
-    """
-    svc = EditPlanService(db)
-
-    # 验证计划存在
-    try:
-        plan = svc.get_plan_or_raise(plan_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-
-    # 项目鉴权
-    if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
-
-    # 验证状态：只允许 draft 或 editing
-    plan_status = plan.status.value if hasattr(plan.status, "value") else plan.status
-    if plan_status not in ("draft", "editing"):
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=f"AI 推荐仅支持 draft/editing 状态的计划，当前状态: {plan_status}",
-        )
-
-    # 调用 AI 推荐服务（同步调用 stub，后续改为 Celery 异步）
-    from apps.worker.worker_app.tasks.ai_tasks import run_ai_recommend
-
-    result = run_ai_recommend(
-        plan_id=plan_id,
-        template_id=plan.template_id,
-        asset_ids=body.asset_ids,
-        editing_mode=body.editing_mode,
-        target_duration=body.target_duration,
-    )
-
-    # ── 事务保护：清除 → 重建 → 更新 必须在同一逻辑事务中 ──
-    # TODO: 当前各 repo 方法内部 commit()，无法真正回滚。
-    #       后续重构 repo 为 flush() 模式后，此处改为统一 commit。
-    try:
-        # 清除现有片段
-        svc.delete_all_clips(plan_id)
-
-        # 按推荐方案创建新片段
-        for clip_data in result["clips"]:
-            svc.create_clip(
-                plan_id=plan_id,
-                clip_type=clip_data["clip_type"],
-                order=clip_data["order"],
-                text_content=clip_data.get("text_content", ""),
-                duration=clip_data["duration"],
-                transition_effect=clip_data.get("transition_effect", "cut"),
-                asset_id=clip_data.get("asset_id", ""),
-                start_time=clip_data.get("start_time", 0.0),
-                config=clip_data.get("config", {}),
-            )
-
-        # 更新计划 config 和 total_duration
-        normalized_config = normalize_plan_config(result.get("config", {}))
-        svc.update_plan(
-            plan_id,
-            config=normalized_config,
-            total_duration=result["total_duration"],
-        )
-    except Exception as exc:
-        logger.exception("AI 推荐写入失败，plan_id=%s 数据可能不一致", plan_id)
-        # 尝试回滚未提交的变更
-        try:
-            db.rollback()
-        except Exception:
-            pass
-        raise HTTPException(
-            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
-            detail=f"AI 推荐结果写入失败: {exc}",
-        )
-
-    logger.info(
-        "AI 推荐片段方案: plan_id=%s clips=%d duration=%.1f by user=%s",
-        plan_id,
-        len(result["clips"]),
-        result["total_duration"],
-        current_user.user.id,
-    )
-
-    return AIRecommendResponse(
-        plan_id=plan_id,
-        clips=[
-            AIRecommendClipItem(
-                clip_type=c["clip_type"],
-                order=c["order"],
-                text_content=c.get("text_content", ""),
-                duration=c["duration"],
-                transition_effect=c.get("transition_effect", "cut"),
-                asset_id=c.get("asset_id", ""),
-                start_time=c.get("start_time", 0.0),
-                config=c.get("config", {}),
-            )
-            for c in result["clips"]
-        ],
-        config=normalized_config,
-        total_duration=result["total_duration"],
-        confidence=result["confidence"],
-    )
-
-
-@router.post(
-    "/{plan_id}/generate-cover",
-    response_model=GenerateCoverResponse,
-)
-def generate_cover(
-    plan_id: str,
-    body: GenerateCoverRequest,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> GenerateCoverResponse:
-    """AI 生成封面
-
-    调用 AI 服务从视频中选帧或生成封面图，并更新计划 config.cover。
-
-    流程：
-    1. 验证计划存在
-    2. 调用 AI 封面生成服务（当前为 stub，后续接入真实 AI）
-    3. 更新 plan.config["cover"] 为生成的封面数据
-    4. 返回封面数据
-
-    前端对接：
-    - cover_type=ai_frame: AI 智能选帧（默认）
-    - cover_type=manual: 手动选帧，需传 frame_time
-    - cover_type=upload: 用户上传，接口返回空 image_url，前端自行上传后更新
-    - cover_type=ai_regenerate: AI 重新生成
-    """
-    svc = EditPlanService(db)
-
-    # 验证计划存在
-    try:
-        plan = svc.get_plan_or_raise(plan_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-
-    # 项目鉴权
-    if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
-
-    # 调用 AI 封面生成服务
-    from apps.worker.worker_app.tasks.ai_tasks import run_generate_cover
-
-    cover_data = run_generate_cover(
-        plan_id=plan_id,
-        asset_ids=body.asset_ids,
-        cover_type=body.cover_type,
-        frame_time=body.frame_time,
-    )
-
-    # 更新 plan.config["cover"]
-    current_config = dict(plan.config)
-    current_config["cover"] = cover_data
-    normalized = normalize_plan_config(current_config)
-    svc.update_plan_config(plan_id, {"cover": normalized["cover"]})
-
-    logger.info(
-        "AI 封面生成: plan_id=%s type=%s by user=%s",
-        plan_id,
-        body.cover_type,
-        current_user.user.id,
-    )
-
-    return GenerateCoverResponse(
-        plan_id=plan_id,
-        cover=cover_data,
-    )
-
-
-# ── Timeline / Scene 端点（P2-6） ─────────────────────────────────────────────
-
-
-class TimelineSceneResponse(BaseModel):
-    """时间线场景"""
-
-    scene: str = Field(..., description="场景描述")
-    time: str = Field(..., description='时间范围，如 "0:00 - 0:05"')
-    duration: float = Field(..., ge=0, description="时长（秒）")
-    color: str = Field(..., description="展示颜色")
-    clip_id: str = Field(default="", description="关联的片段 ID")
-    clip_type: str = Field(default="", description="片段类型")
-
-
-class TimelineResponse(BaseModel):
-    """时间线响应"""
-
-    plan_id: str
-    total_duration: float
-    scenes: List[TimelineSceneResponse]
-
-
-# clip_type → 颜色映射
-_CLIP_TYPE_COLORS = {
-    "intro": "#6366f1",
-    "title": "#6366f1",
-    "product": "#818cf8",
-    "showcase": "#10b981",
-    "scene": "#10b981",
-    "subtitle": "#f59e0b",
-    "text": "#f59e0b",
-    "cta": "#ef4444",
-    "outro": "#ef4444",
-    "voiceover": "#8b5cf6",
-    "transition": "#64748b",
-}
-
-_DEFAULT_COLOR = "#6366f1"
-
-
-def _format_time(seconds: float) -> str:
-    """将秒数格式化为 M:SS"""
-    m = int(seconds) // 60
-    s = int(seconds) % 60
-    return f"{m}:{s:02d}"
-
-
-def _clip_type_to_scene_label(clip_type: str, text_content: str) -> str:
-    """根据 clip_type 和 text_content 生成场景描述"""
-    type_labels = {
-        "intro": "开场",
-        "title": "标题",
-        "product": "产品展示",
-        "showcase": "场景展示",
-        "scene": "场景",
-        "subtitle": "字幕",
-        "text": "文字",
-        "cta": "结尾 CTA",
-        "outro": "结尾",
-        "voiceover": "配音",
-        "transition": "转场",
-    }
-    label = type_labels.get(clip_type, clip_type or "片段")
-    if text_content:
-        # 截取前 20 个字符作为副标题
-        short = text_content[:20].strip()
-        if short:
-            return f"{label} - {short}"
-    return label
-
-
-@router.get(
-    "/{plan_id}/timeline",
-    response_model=TimelineResponse,
-)
-def get_plan_timeline(
-    plan_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-    project_repository: Any = Depends(get_project_repository),
-) -> TimelineResponse:
-    """获取剪辑计划的时间线场景数据
-
-    返回按计划片段排序的时间线场景列表，供前端 GeneratePage 渲染使用。
-    """
-    svc = EditPlanService(db)
-    plan = svc.get_plan_or_raise(plan_id)
-    # 项目鉴权
-    if plan.project_id:
-        _check_project_access(plan.project_id, current_user.user.id, project_repository)
-
-    clips = svc.list_clips(plan_id=plan_id, skip=0, limit=200)
-    # 按 order 排序
-    clips.sort(key=lambda c: c.order)
-
-    scenes: List[TimelineSceneResponse] = []
-    current_time = 0.0
-
-    for clip in clips:
-        start = current_time
-        end = start + clip.duration
-        color = _CLIP_TYPE_COLORS.get(clip.clip_type, _DEFAULT_COLOR)
-        scene_label = _clip_type_to_scene_label(clip.clip_type, clip.text_content)
-
-        scenes.append(
-            TimelineSceneResponse(
-                scene=scene_label,
-                time=f"{_format_time(start)} - {_format_time(end)}",
-                duration=clip.duration,
-                color=color,
-                clip_id=clip.id,
-                clip_type=clip.clip_type,
-            )
-        )
-        current_time = end
-
-    total_duration = sum(s.duration for s in scenes) or plan.total_duration
-
-    return TimelineResponse(
-        plan_id=plan_id,
-        total_duration=total_duration,
-        scenes=scenes,
-    )
+router.include_router(generation_router)
+router.include_router(ai_router)
+router.include_router(timeline_router)

apps/api/app/api/routes/edit_plans_ai.py

@@ -0,0 +1,199 @@
+"""剪辑计划 AI 推荐 & 封面生成 API 端点。
+
+从 edit_plans.py 拆分，包含：
+- POST /{plan_id}/ai-recommend    AI 推荐片段方案
+- POST /{plan_id}/generate-cover  AI 生成封面
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any
+
+from app.api.routes._helpers import check_project_access
+from app.api.routes.edit_plans import (
+    AIRecommendClipItem,
+    AIRecommendRequest,
+    AIRecommendResponse,
+    GenerateCoverRequest,
+    GenerateCoverResponse,
+)
+from app.auth import AuthenticatedUser, get_current_user
+from app.dependencies import get_db_session, get_project_repository
+from app.services import EditPlanService
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.orm import Session
+
+from packages.domain.config_schemas import normalize_plan_config
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+
+@router.post(
+    "/{plan_id}/ai-recommend",
+    response_model=AIRecommendResponse,
+)
+def ai_recommend_clips(
+    plan_id: str,
+    body: AIRecommendRequest,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> AIRecommendResponse:
+    """AI 推荐片段方案
+
+    调用 AI 服务分析素材，自动生成片段编排方案并写入剪辑计划。
+
+    流程：
+    1. 验证计划存在且状态为 draft/editing
+    2. 调用 AI 推荐服务（当前为 stub，后续接入真实 AI）
+    3. 清除计划现有片段，按推荐方案重新创建
+    4. 更新计划 config（cover/title/subtitle/bgm）和 total_duration
+    5. 返回推荐方案详情
+    """
+    svc = EditPlanService(db)
+
+    try:
+        plan = svc.get_plan_or_raise(plan_id)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc))
+
+    if plan.project_id:
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
+
+    plan_status = plan.status.value if hasattr(plan.status, "value") else plan.status
+    if plan_status not in ("draft", "editing"):
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="当前计划状态不支持AI推荐，请先创建或编辑计划后再试",
+        )
+
+    from apps.worker.worker_app.tasks.ai_tasks import run_ai_recommend
+
+    result = run_ai_recommend(
+        plan_id=plan_id,
+        template_id=plan.template_id,
+        asset_ids=body.asset_ids,
+        editing_mode=body.editing_mode,
+        target_duration=body.target_duration,
+    )
+
+    # 事务保护：清除 → 重建 → 更新 必须在同一逻辑事务中
+    try:
+        svc.delete_all_clips(plan_id)
+
+        for clip_data in result["clips"]:
+            svc.create_clip(
+                plan_id=plan_id,
+                clip_type=clip_data["clip_type"],
+                order=clip_data["order"],
+                text_content=clip_data.get("text_content", ""),
+                duration=clip_data["duration"],
+                transition_effect=clip_data.get("transition_effect", "cut"),
+                asset_id=clip_data.get("asset_id", ""),
+                start_time=clip_data.get("start_time", 0.0),
+                config=clip_data.get("config", {}),
+            )
+
+        normalized_config = normalize_plan_config(result.get("config", {}))
+        svc.update_plan(
+            plan_id,
+            config=normalized_config,
+            total_duration=result["total_duration"],
+        )
+    except Exception:
+        logger.exception("AI 推荐写入失败，plan_id=%s 数据可能不一致", plan_id)
+        try:
+            db.rollback()
+        except Exception as rollback_err:
+            logger.error(
+                "AI 推荐回滚失败，数据库会话可能处于不一致状态: plan_id=%s error=%s",
+                plan_id,
+                rollback_err,
+            )
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="AI推荐结果保存失败，请稍后重试",
+        )
+
+    logger.info(
+        "AI 推荐片段方案: plan_id=%s clips=%d duration=%.1f by user=%s",
+        plan_id,
+        len(result["clips"]),
+        result["total_duration"],
+        current_user.user.id,
+    )
+
+    return AIRecommendResponse(
+        plan_id=plan_id,
+        clips=[
+            AIRecommendClipItem(
+                clip_type=c["clip_type"],
+                order=c["order"],
+                text_content=c.get("text_content", ""),
+                duration=c["duration"],
+                transition_effect=c.get("transition_effect", "cut"),
+                asset_id=c.get("asset_id", ""),
+                start_time=c.get("start_time", 0.0),
+                config=c.get("config", {}),
+            )
+            for c in result["clips"]
+        ],
+        config=normalized_config,
+        total_duration=result["total_duration"],
+        confidence=result["confidence"],
+    )
+
+
+@router.post(
+    "/{plan_id}/generate-cover",
+    response_model=GenerateCoverResponse,
+)
+def generate_cover(
+    plan_id: str,
+    body: GenerateCoverRequest,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> GenerateCoverResponse:
+    """AI 生成封面
+
+    调用 AI 服务从视频中选帧或生成封面图，并更新计划 config.cover。
+    """
+    svc = EditPlanService(db)
+
+    try:
+        plan = svc.get_plan_or_raise(plan_id)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc))
+
+    if plan.project_id:
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
+
+    from apps.worker.worker_app.tasks.ai_tasks import run_generate_cover
+
+    cover_data = run_generate_cover(
+        plan_id=plan_id,
+        asset_ids=body.asset_ids,
+        cover_type=body.cover_type,
+        frame_time=body.frame_time,
+    )
+
+    current_config = dict(plan.config)
+    current_config["cover"] = cover_data
+    normalized = normalize_plan_config(current_config)
+    svc.update_plan_config(plan_id, {"cover": normalized["cover"]})
+
+    logger.info(
+        "AI 封面生成: plan_id=%s type=%s by user=%s",
+        plan_id,
+        body.cover_type,
+        current_user.user.id,
+    )
+
+    return GenerateCoverResponse(
+        plan_id=plan_id,
+        cover=cover_data,
+    )

apps/api/app/api/routes/edit_plans_generation.py

@@ -0,0 +1,383 @@
+"""剪辑计划生成相关 API 端点。
+
+从 edit_plans.py 拆分，包含：
+- POST /{plan_id}/generate          触发剪辑渲染生成
+- GET  /{plan_id}/generation-status 查询生成进度
+- GET  /{plan_id}/generations       查询关联的生成记录
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any
+
+from app.api.routes._helpers import check_project_access
+from app.api.routes.edit_plans import (
+    ClipStatusItem,
+    EditPlanGenerateResponse,
+    EditPlanGenerationsResponse,
+    EditPlanGenerationStatusResponse,
+)
+from app.auth import AuthenticatedUser, get_current_user
+from app.core.celery_app import celery_app
+from app.core.task_enqueue import GLOBAL_PENDING_LIMIT, USER_PENDING_LIMIT
+from app.dependencies import get_asset_library_repository, get_asset_repository, get_db_session, get_project_repository
+from app.services import EditPlanService
+from fastapi import APIRouter, Depends, HTTPException, status
+from sqlalchemy.orm import Session
+
+from packages.adapters.sqlalchemy_impl.generation_task_repository import (
+    SQLAlchemyGenerationTaskRepository,
+)
+from packages.adapters.sqlalchemy_impl.template_clip_config_repository import (
+    SQLAlchemyTemplateClipConfigRepository,
+)
+from packages.adapters.sqlalchemy_impl.template_repository import (
+    SQLAlchemyTemplateRepository,
+)
+from packages.application.generation_tasks import (
+    CreateGenerationTaskCommand,
+    CreateGenerationTaskUseCase,
+)
+from packages.domain.edit_plan import EditPlanStatus
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+
+def _auto_fallback_draft_to_editing(svc: EditPlanService, plan_id: str, plan_check) -> None:
+    """自动兜底 1: draft → editing"""
+    if plan_check.status == EditPlanStatus.DRAFT:
+        logger.info("自动兜底: plan=%s draft→editing", plan_id)
+        svc.transition_status(plan_id, EditPlanStatus.EDITING)
+
+
+def _auto_fallback_copy_template_clips(svc: EditPlanService, plan_id: str, plan_check, db: Session) -> None:
+    """自动兜底 2: 无片段 + 有 template_id → 从模板复制片段配置"""
+    existing_clips = svc.count_clips(plan_id)
+    if existing_clips == 0 and plan_check.template_id:
+        logger.info(
+            "自动兜底: plan=%s 无片段，从模板 %s 复制片段配置",
+            plan_id,
+            plan_check.template_id,
+        )
+        clip_config_repo = SQLAlchemyTemplateClipConfigRepository(db)
+        configs = clip_config_repo.list_by_template(plan_check.template_id)
+        if configs:
+            for cfg in configs:
+                svc.create_clip(
+                    plan_id=plan_id,
+                    clip_type=cfg.clip_type.value if hasattr(cfg.clip_type, "value") else cfg.clip_type,
+                    order=cfg.order,
+                    template_clip_config_id=cfg.id,
+                    duration=cfg.default_duration,
+                    transition_effect=(
+                        cfg.transition_effect.value
+                        if hasattr(cfg.transition_effect, "value")
+                        else cfg.transition_effect
+                    ),
+                )
+            logger.info("自动兜底: plan=%s 从新模型 template_clip_configs 复制了 %d 个片段", plan_id, len(configs))
+        else:
+            tpl_repo = SQLAlchemyTemplateRepository(db)
+            segments = tpl_repo.list_segments(plan_check.template_id)
+            for seg in segments:
+                avg_duration = (seg.duration_min + seg.duration_max) / 2
+                svc.create_clip(
+                    plan_id=plan_id,
+                    clip_type="main",
+                    order=seg.segment_order,
+                    duration=avg_duration,
+                    config={
+                        "material_type": seg.material_type or "",
+                        "template_segment_id": seg.id,
+                    },
+                )
+            logger.info("自动兜底: plan=%s 从旧模型 template_segments 复制了 %d 个片段", plan_id, len(segments))
+
+
+def _auto_fallback_assign_assets(
+    svc: EditPlanService,
+    plan_id: str,
+    plan_check,
+) -> list:
+    """自动兜底 3: 为没有素材的片段分配素材。返回剩余无素材片段列表。"""
+    all_clips = svc.list_clips(plan_id)
+    clips_without_asset = [c for c in all_clips if not c.asset_id]
+    config_asset_ids = (plan_check.config or {}).get("asset_ids", [])
+
+    if clips_without_asset and config_asset_ids:
+        logger.info(
+            "自动兜底3: plan=%s 为 %d 个无素材片段分配 %d 个指定素材",
+            plan_id,
+            len(clips_without_asset),
+            len(config_asset_ids),
+        )
+        for i, clip in enumerate(clips_without_asset):
+            asset_idx = i % len(config_asset_ids)
+            svc.assign_asset(clip.id, config_asset_ids[asset_idx])
+        logger.info("自动兜底3: plan=%s 素材分配完成", plan_id)
+        clips_without_asset = []
+
+    return clips_without_asset
+
+
+def _auto_fallback_auto_material_mode(
+    svc: EditPlanService,
+    plan_id: str,
+    plan_check,
+    clips_without_asset: list,
+    asset_library_repo: Any,
+    asset_repo: Any,
+) -> None:
+    """自动兜底 4: 自动素材模式 → 从项目默认视频素材库选取"""
+    if not clips_without_asset:
+        return
+    material_mode = (plan_check.config or {}).get("material_mode", "manual")
+    if material_mode != "auto" or not plan_check.project_id:
+        return
+
+    import random
+
+    logger.info(
+        "自动兜底4: plan=%s 自动素材模式，从项目素材库选取素材 (%d 个片段需要)",
+        plan_id,
+        len(clips_without_asset),
+    )
+    libs = asset_library_repo.find_by_project(plan_check.project_id)
+    video_lib = None
+    for lib in libs:
+        lib_kind = lib.kind.value if hasattr(lib.kind, "value") else lib.kind
+        if lib_kind == "video":
+            video_lib = lib
+            break
+
+    if video_lib:
+        assets = asset_repo.find_by_library(video_lib.id)
+        ready_videos = [
+            a
+            for a in assets
+            if (a.status.value if hasattr(a.status, "value") else a.status) == "ready"
+            and a.mime_type
+            and a.mime_type.startswith("video")
+        ]
+        if ready_videos:
+            random.shuffle(ready_videos)
+            for i, clip in enumerate(clips_without_asset):
+                asset = ready_videos[i % len(ready_videos)]
+                svc.assign_asset(clip.id, asset.id)
+            logger.info(
+                "自动兜底4: plan=%s 从素材库 %s 分配了 %d 个素材给 %d 个片段",
+                plan_id,
+                video_lib.name,
+                len(ready_videos),
+                len(clips_without_asset),
+            )
+        else:
+            logger.warning("自动兜底4: plan=%s 素材库无可用视频素材", plan_id)
+    else:
+        logger.warning("自动兜底4: plan=%s 项目无视频素材库", plan_id)
+
+
+def _check_queue_limits(gen_task_repo, user_id: str) -> None:
+    """队列限流预检查"""
+    try:
+        has_count = hasattr(gen_task_repo, "count_pending_by_user") and hasattr(
+            gen_task_repo, "count_pending_total"
+        )
+        if has_count:
+            user_pending = gen_task_repo.count_pending_by_user(user_id)
+            global_pending = gen_task_repo.count_pending_total()
+            if user_pending >= USER_PENDING_LIMIT:
+                raise HTTPException(
+                    status_code=429,
+                    detail=f"您的待处理任务过多（当前 {user_pending}/{USER_PENDING_LIMIT}），请等待完成后再提交",
+                )
+            if global_pending >= GLOBAL_PENDING_LIMIT:
+                raise HTTPException(
+                    status_code=503,
+                    detail="系统繁忙，请稍后再试",
+                )
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.warning("[队列限流] 剪辑计划限流检查失败，跳过: %s", e)
+
+
+@router.post("/{plan_id}/generate", response_model=EditPlanGenerateResponse)
+def generate_plan(
+    plan_id: str,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+    asset_library_repo: Any = Depends(get_asset_library_repository),
+    asset_repo: Any = Depends(get_asset_repository),
+) -> EditPlanGenerateResponse:
+    """触发剪辑计划渲染生成
+
+    前置条件：计划状态必须为 editing，且至少有一个片段。
+    流程：
+    1. 验证计划状态为 editing
+    2. 将 pending 片段标记为 ready
+    3. 创建 GenerationTask
+    4. 调度 Celery 任务 worker.render_edit_plan
+    5. 将计划状态流转为 rendering
+    """
+    svc = EditPlanService(db)
+    plan_check = svc.get_plan(plan_id)
+    if plan_check is None:
+        raise HTTPException(status_code=404, detail=f"剪辑计划不存在: {plan_id}")
+    if plan_check.project_id:
+        check_project_access(plan_check.project_id, current_user.user.id, project_repository)
+
+    # 自动兜底流程
+    _auto_fallback_draft_to_editing(svc, plan_id, plan_check)
+    _auto_fallback_copy_template_clips(svc, plan_id, plan_check, db)
+    clips_without_asset = _auto_fallback_assign_assets(svc, plan_id, plan_check)
+    _auto_fallback_auto_material_mode(svc, plan_id, plan_check, clips_without_asset, asset_library_repo, asset_repo)
+
+    # 检查是否可生成
+    try:
+        can_gen, reason = svc.can_generate(plan_id)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc))
+    if not can_gen:
+        raise HTTPException(status_code=status.HTTP_400_BAD_REQUEST, detail=reason)
+
+    # 核心生成流程
+    try:
+        clip_count = svc.mark_clips_ready(plan_id)
+
+        gen_task_repo = SQLAlchemyGenerationTaskRepository(db)
+        user_id = current_user.user.id
+        _check_queue_limits(gen_task_repo, user_id)
+
+        gen_task_use_case = CreateGenerationTaskUseCase(gen_task_repo)
+        plan = svc.get_plan_or_raise(plan_id)
+        gen_task = gen_task_use_case.execute(
+            CreateGenerationTaskCommand(
+                project_id="",
+                template_id=plan.template_id,
+                created_by_user_id=current_user.user.id,
+                source_edit_plan_id=plan_id,
+            )
+        )
+
+        svc.update_plan_config(plan_id, {"generation_task_id": gen_task.id})
+        svc.transition_status(plan_id, EditPlanStatus.RENDERING)
+        celery_app.send_task("worker.render_edit_plan", args=[plan_id])
+
+        updated_plan = svc.get_plan_or_raise(plan_id)
+
+        logger.info(
+            "触发剪辑计划生成: plan_id=%s gen_task_id=%s clips=%d by user=%s",
+            plan_id,
+            gen_task.id,
+            clip_count,
+            current_user.user.id,
+        )
+
+        return EditPlanGenerateResponse(
+            plan_id=plan_id,
+            plan_status=updated_plan.status.value if hasattr(updated_plan.status, "value") else updated_plan.status,
+            generation_task_id=gen_task.id,
+            clip_count=clip_count,
+        )
+    except HTTPException:
+        raise
+    except Exception:
+        logger.exception("触发剪辑计划生成失败: plan_id=%s", plan_id)
+        try:
+            svc.transition_status(plan_id, EditPlanStatus.FAILED)
+        except Exception:
+            logger.warning("标记计划失败状态时异常: plan_id=%s", plan_id)
+        raise HTTPException(
+            status_code=status.HTTP_500_INTERNAL_SERVER_ERROR,
+            detail="生成失败，请稍后重试",
+        )
+
+
+@router.get(
+    "/{plan_id}/generation-status",
+    response_model=EditPlanGenerationStatusResponse,
+)
+def get_generation_status(
+    plan_id: str,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> EditPlanGenerationStatusResponse:
+    """查询剪辑计划生成进度"""
+    svc = EditPlanService(db)
+    try:
+        gen_status = svc.get_generation_status(plan_id)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc))
+
+    plan = gen_status["plan"]
+    if plan.project_id:
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
+    clips = gen_status["clips"]
+
+    clip_items = [
+        ClipStatusItem(
+            clip_id=c.id,
+            clip_type=c.clip_type,
+            order=c.order,
+            status=c.status.value if hasattr(c.status, "value") else c.status,
+            asset_id=c.asset_id or "",
+            text_content=c.text_content or "",
+            duration=c.duration,
+        )
+        for c in clips
+    ]
+
+    return EditPlanGenerationStatusResponse(
+        plan_id=plan_id,
+        plan_status=plan.status.value if hasattr(plan.status, "value") else plan.status,
+        generation_task_id=gen_status["generation_task_id"],
+        clips=clip_items,
+    )
+
+
+@router.get(
+    "/{plan_id}/generations",
+    response_model=EditPlanGenerationsResponse,
+)
+def list_plan_generations(
+    plan_id: str,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> EditPlanGenerationsResponse:
+    """查询剪辑计划关联的所有生成记录"""
+    svc = EditPlanService(db)
+    plan = svc.get_plan_or_raise(plan_id)
+    if plan.project_id:
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
+
+    from app.schemas.generation_task import GenerationTaskResponse
+
+    gen_task_repo = SQLAlchemyGenerationTaskRepository(db)
+    tasks = gen_task_repo.list_by_source_edit_plan(plan_id)
+    items = [
+        GenerationTaskResponse(
+            id=t.id,
+            project_id=t.project_id,
+            asset_library_id=t.asset_library_id,
+            strategy_id=t.strategy_id,
+            voice_library_id=t.voice_library_id,
+            template_id=t.template_id,
+            asset_ids=t.asset_ids,
+            title_ids=t.title_ids,
+            voice_ids=t.voice_ids,
+            source_edit_plan_id=t.source_edit_plan_id or "",
+            status=t.status.value if hasattr(t.status, "value") else t.status,
+            progress=t.progress,
+            result_count=t.result_count,
+            error_message=t.error_message,
+        )
+        for t in tasks
+    ]
+    return EditPlanGenerationsResponse(items=items, total=len(items))

apps/api/app/api/routes/edit_plans_timeline.py

@@ -0,0 +1,221 @@
+"""剪辑计划时间线 & 模板生成 API 端点。
+
+从 edit_plans.py 拆分，包含：
+- GET  /{plan_id}/timeline            时间线场景数据
+- POST /generate-from-template        基于模板+素材自动生成剪辑计划
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any, List
+
+from app.api.routes._helpers import check_project_access
+from app.api.routes.edit_plans import (
+    GenerateFromTemplateRequest,
+    GenerateFromTemplateResponse,
+    _PlanClipItem,
+    _to_response,
+)
+from app.auth import AuthenticatedUser, get_current_user
+from app.dependencies import get_db_session, get_project_repository
+from app.services import EditPlanService, PlanGeneratorService
+from fastapi import APIRouter, Depends, HTTPException, Query, status
+from pydantic import BaseModel, Field
+from sqlalchemy.orm import Session
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+
+# ── Timeline Schemas ──────────────────────────────────────────────────────────
+
+
+class TimelineSceneResponse(BaseModel):
+    """时间线场景"""
+
+    scene: str = Field(..., description="场景描述")
+    time: str = Field(..., description='时间范围，如 "0:00 - 0:05"')
+    duration: float = Field(..., ge=0, description="时长（秒）")
+    color: str = Field(..., description="展示颜色")
+    clip_id: str = Field(default="", description="关联的片段 ID")
+    clip_type: str = Field(default="", description="片段类型")
+
+
+class TimelineResponse(BaseModel):
+    """时间线响应"""
+
+    plan_id: str
+    total_duration: float
+    scenes: List[TimelineSceneResponse]
+
+
+# clip_type → 颜色映射
+_CLIP_TYPE_COLORS = {
+    "intro": "#6366f1",
+    "title": "#6366f1",
+    "product": "#818cf8",
+    "showcase": "#10b981",
+    "scene": "#10b981",
+    "subtitle": "#f59e0b",
+    "text": "#f59e0b",
+    "cta": "#ef4444",
+    "outro": "#ef4444",
+    "voiceover": "#8b5cf6",
+    "transition": "#64748b",
+}
+
+_DEFAULT_COLOR = "#6366f1"
+
+
+def _format_time(seconds: float) -> str:
+    """将秒数格式化为 M:SS"""
+    m = int(seconds) // 60
+    s = int(seconds) % 60
+    return f"{m}:{s:02d}"
+
+
+def _clip_type_to_scene_label(clip_type: str, text_content: str) -> str:
+    """根据 clip_type 和 text_content 生成场景描述"""
+    type_labels = {
+        "intro": "开场",
+        "title": "标题",
+        "product": "产品展示",
+        "showcase": "场景展示",
+        "scene": "场景",
+        "subtitle": "字幕",
+        "text": "文字",
+        "cta": "结尾 CTA",
+        "outro": "结尾",
+        "voiceover": "配音",
+        "transition": "转场",
+    }
+    label = type_labels.get(clip_type, clip_type or "片段")
+    if text_content:
+        short = text_content[:20].strip()
+        if short:
+            return f"{label} - {short}"
+    return label
+
+
+# ── Routes ────────────────────────────────────────────────────────────────────
+
+
+@router.get(
+    "/{plan_id}/timeline",
+    response_model=TimelineResponse,
+)
+def get_plan_timeline(
+    plan_id: str,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> TimelineResponse:
+    """获取剪辑计划的时间线场景数据"""
+    svc = EditPlanService(db)
+    plan = svc.get_plan_or_raise(plan_id)
+    if plan.project_id:
+        check_project_access(plan.project_id, current_user.user.id, project_repository)
+
+    clips = svc.list_clips(plan_id=plan_id, skip=0, limit=200)
+    clips.sort(key=lambda c: c.order)
+
+    scenes: List[TimelineSceneResponse] = []
+    current_time = 0.0
+
+    for clip in clips:
+        start = current_time
+        end = start + clip.duration
+        color = _CLIP_TYPE_COLORS.get(clip.clip_type, _DEFAULT_COLOR)
+        scene_label = _clip_type_to_scene_label(clip.clip_type, clip.text_content)
+
+        scenes.append(
+            TimelineSceneResponse(
+                scene=scene_label,
+                time=f"{_format_time(start)} - {_format_time(end)}",
+                duration=clip.duration,
+                color=color,
+                clip_id=clip.id,
+                clip_type=clip.clip_type,
+            )
+        )
+        current_time = end
+
+    total_duration = sum(s.duration for s in scenes) or plan.total_duration
+
+    return TimelineResponse(
+        plan_id=plan_id,
+        total_duration=total_duration,
+        scenes=scenes,
+    )
+
+
+@router.post(
+    "/generate-from-template",
+    response_model=GenerateFromTemplateResponse,
+    status_code=status.HTTP_201_CREATED,
+)
+def generate_from_template(
+    body: GenerateFromTemplateRequest,
+    db: Session = Depends(get_db_session),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+    project_repository: Any = Depends(get_project_repository),
+) -> GenerateFromTemplateResponse:
+    """基于模板 + 素材自动生成剪辑计划"""
+    from app.services import EditTemplateService
+
+    if body.project_id:
+        check_project_access(body.project_id, current_user.user.id, project_repository)
+
+    template_svc = EditTemplateService(db)
+
+    try:
+        template = template_svc.get_template_or_raise(body.template_id)
+    except ValueError as exc:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail=str(exc))
+
+    clip_configs = template_svc.list_clip_configs(body.template_id, skip=0, limit=200)
+
+    generator = PlanGeneratorService(db)
+    result = generator.generate_from_template(
+        template=template,
+        clip_configs=clip_configs,
+        asset_ids=body.asset_ids,
+        project_id=body.project_id,
+        created_by_user_id=current_user.user.id,
+        name=body.name,
+    )
+
+    plan = result["plan"]
+    clips = result["clips"]
+
+    logger.info(
+        "基于模板生成剪辑计划: plan_id=%s template_id=%s clips=%d by user=%s",
+        plan.id,
+        body.template_id,
+        len(clips),
+        current_user.user.id,
+    )
+
+    return GenerateFromTemplateResponse(
+        plan=_to_response(plan),
+        clips=[
+            _PlanClipItem(
+                id=c.id,
+                clip_type=c.clip_type,
+                order=c.order,
+                asset_id=c.asset_id,
+                text_content=c.text_content,
+                start_time=c.start_time,
+                duration=c.duration,
+                transition_effect=c.transition_effect,
+                transition_duration=c.transition_duration,
+                status=c.status.value if hasattr(c.status, "value") else c.status,
+                config=c.config,
+                created_at=c.created_at,
+                updated_at=c.updated_at,
+            )
+            for c in clips
+        ],
+    )

apps/api/app/api/routes/edit_templates.py

@@ -1,279 +0,0 @@
-"""模板管理 API — Phase 8 模板编排引擎.
-
-RESTful CRUD for EditTemplate:
-- GET  /api/v1/edit-templates      列表（分页 + 类型筛选）
-- GET  /api/v1/edit-templates/{id} 详情
-- POST /api/v1/edit-templates      创建（管理员）
-- PUT  /api/v1/edit-templates/{id} 更新
-- DELETE /api/v1/edit-templates/{id} 删除（软删除 → inactive）
-
-业务逻辑委托给 EditTemplateService 服务层。
-"""
-
-from __future__ import annotations
-
-import logging
-from datetime import datetime
-from typing import Any, List, Optional
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import get_db_session
-from app.services import EditTemplateService
-from fastapi import APIRouter, Depends, HTTPException, Query, status
-from fastapi.responses import Response
-from pydantic import BaseModel, Field
-from sqlalchemy.orm import Session
-
-from packages.domain.config_schemas import normalize_template_config
-from packages.domain.edit_template import EditTemplate, EditTemplateStatus
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter()
-
-
-# ── Pydantic Schemas ─────────────────────────────────────────────────────────
-
-
-class EditTemplateCreateRequest(BaseModel):
-    """创建模板请求体"""
-
-    name: str = Field(..., min_length=1, max_length=200, description="模板名称")
-    description: str = Field(default="", max_length=2000, description="模板描述")
-    template_type: str = Field(default="default", max_length=50, description="模板类型")
-    config: dict[str, Any] = Field(default_factory=dict, description="模板配置 (JSON)")
-    preview_url: str = Field(default="", max_length=500, description="预览地址")
-    sort_weight: int = Field(default=0, ge=0, le=9999, description="排序权重")
-
-
-class EditTemplateUpdateRequest(BaseModel):
-    """更新模板请求体"""
-
-    name: Optional[str] = Field(default=None, min_length=1, max_length=200, description="模板名称")
-    description: Optional[str] = Field(default=None, max_length=2000, description="模板描述")
-    template_type: Optional[str] = Field(default=None, max_length=50, description="模板类型")
-    config: Optional[dict[str, Any]] = Field(default=None, description="模板配置 (JSON)")
-    preview_url: Optional[str] = Field(default=None, max_length=500, description="预览地址")
-    sort_weight: Optional[int] = Field(default=None, ge=0, le=9999, description="排序权重")
-    status: Optional[str] = Field(default=None, description="状态: active / inactive")
-
-
-class EditTemplateResponse(BaseModel):
-    """模板响应体"""
-
-    id: str
-    name: str
-    description: str
-    template_type: str
-    config: dict[str, Any]
-    preview_url: str
-    sort_weight: int
-    status: str
-    created_at: datetime
-    updated_at: datetime
-
-    model_config = {"from_attributes": True}
-
-
-class EditTemplateListResponse(BaseModel):
-    """模板列表响应体"""
-
-    items: List[EditTemplateResponse]
-    total: int
-    page: int
-    page_size: int
-
-
-# ── Helpers ───────────────────────────────────────────────────────────────────
-
-
-def _require_admin(current_user: AuthenticatedUser) -> None:
-    """校验当前用户是否为管理员，非管理员返回 403"""
-    if not getattr(current_user.user, "is_admin", False):
-        raise HTTPException(
-            status_code=status.HTTP_403_FORBIDDEN,
-            detail="仅管理员可执行此操作",
-        )
-
-
-def _to_response(t: EditTemplate) -> EditTemplateResponse:
-    return EditTemplateResponse(
-        id=t.id,
-        name=t.name,
-        description=t.description,
-        template_type=t.template_type,
-        config=t.config,
-        preview_url=t.preview_url,
-        sort_weight=t.sort_weight,
-        status=t.status.value if hasattr(t.status, "value") else t.status,
-        created_at=t.created_at,
-        updated_at=t.updated_at,
-    )
-
-
-# ── Routes ────────────────────────────────────────────────────────────────────
-
-
-@router.get("", response_model=EditTemplateListResponse)
-def list_templates(
-    page: int = Query(default=1, ge=1, description="页码"),
-    page_size: int = Query(default=20, ge=1, le=100, description="每页数量"),
-    template_type: Optional[str] = Query(default=None, description="按类型筛选"),
-    status_filter: Optional[str] = Query(
-        default=None,
-        alias="status",
-        description="按状态筛选: active / inactive",
-    ),
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> EditTemplateListResponse:
-    """获取模板列表（支持分页、按类型/状态筛选）"""
-    svc = EditTemplateService(db)
-
-    # 解析状态筛选
-    status_enum: Optional[EditTemplateStatus] = None
-    if status_filter:
-        try:
-            status_enum = EditTemplateStatus(status_filter)
-        except ValueError:
-            raise HTTPException(
-                status_code=status.HTTP_400_BAD_REQUEST,
-                detail=f"无效的状态值: {status_filter}，可选值: active, inactive",
-            )
-
-    skip = (page - 1) * page_size
-    templates = svc.list_templates(
-        template_type=template_type,
-        status=status_enum,
-        skip=skip,
-        limit=page_size,
-    )
-    total = svc.count_templates(
-        template_type=template_type,
-        status=status_enum,
-    )
-
-    return EditTemplateListResponse(
-        items=[_to_response(t) for t in templates],
-        total=total,
-        page=page,
-        page_size=page_size,
-    )
-
-
-@router.get("/{template_id}", response_model=EditTemplateResponse)
-def get_template(
-    template_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> EditTemplateResponse:
-    """获取单个模板详情"""
-    svc = EditTemplateService(db)
-    try:
-        template = svc.get_template_or_raise(template_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-    return _to_response(template)
-
-
-@router.post("", response_model=EditTemplateResponse, status_code=status.HTTP_201_CREATED)
-def create_template(
-    body: EditTemplateCreateRequest,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> EditTemplateResponse:
-    """创建模板（管理员）"""
-    _require_admin(current_user)
-    svc = EditTemplateService(db)
-    # 标准化 config，填充 cover/title/subtitle/bgm 默认值
-    normalized_config = normalize_template_config(body.config)
-    try:
-        created = svc.create_template(
-            name=body.name,
-            description=body.description,
-            template_type=body.template_type,
-            config=normalized_config,
-            preview_url=body.preview_url,
-            sort_weight=body.sort_weight,
-        )
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=str(exc),
-        )
-    logger.info("创建模板: id=%s name=%s by user=%s", created.id, created.name, current_user.user.id)
-    return _to_response(created)
-
-
-@router.put("/{template_id}", response_model=EditTemplateResponse)
-def update_template(
-    template_id: str,
-    body: EditTemplateUpdateRequest,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> EditTemplateResponse:
-    """更新模板"""
-    _require_admin(current_user)
-    svc = EditTemplateService(db)
-
-    # 解析状态
-    status_enum: Optional[EditTemplateStatus] = None
-    if body.status is not None:
-        try:
-            status_enum = EditTemplateStatus(body.status)
-        except ValueError:
-            raise HTTPException(
-                status_code=status.HTTP_400_BAD_REQUEST,
-                detail=f"无效的状态值: {body.status}，可选值: active, inactive",
-            )
-
-    # 标准化 config（如果提供了）
-    config_to_update = normalize_template_config(body.config) if body.config is not None else None
-
-    try:
-        result = svc.update_template(
-            template_id,
-            name=body.name,
-            description=body.description,
-            template_type=body.template_type,
-            config=config_to_update,
-            preview_url=body.preview_url,
-            sort_weight=body.sort_weight,
-            status=status_enum,
-        )
-    except ValueError as exc:
-        err_msg = str(exc)
-        if "不存在" in err_msg:
-            raise HTTPException(
-                status_code=status.HTTP_404_NOT_FOUND,
-                detail=err_msg,
-            )
-        raise HTTPException(
-            status_code=status.HTTP_400_BAD_REQUEST,
-            detail=err_msg,
-        )
-    logger.info("更新模板: id=%s by user=%s", template_id, current_user.user.id)
-    return _to_response(result)
-
-
-@router.delete("/{template_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
-def delete_template(
-    template_id: str,
-    db: Session = Depends(get_db_session),
-    current_user: AuthenticatedUser = Depends(get_current_user),
-) -> Response:
-    """删除模板（软删除 → 设为 inactive）"""
-    _require_admin(current_user)
-    svc = EditTemplateService(db)
-    try:
-        svc.deactivate_template(template_id)
-    except ValueError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_404_NOT_FOUND,
-            detail=str(exc),
-        )
-    logger.info("删除模板(软删除): id=%s by user=%s", template_id, current_user.user.id)
-    return Response(status_code=204)

apps/api/app/api/routes/feature_flags.py

@@ -0,0 +1,194 @@
+"""Feature Flag 内部管理接口。
+
+通过内部 API Key 鉴权，支持查看和修改 Feature Flag 配置。
+主要用于灰度发布期间的动态开关控制。
+
+API:
+  GET  /api/v1/internal/feature-flags          - 列出所有 flag
+  GET  /api/v1/internal/feature-flags/{name}   - 查看单个 flag
+  PUT  /api/v1/internal/feature-flags/{name}   - 设置 flag 配置
+  DELETE /api/v1/internal/feature-flags/{name} - 删除 flag
+
+鉴权：X-API-Key header，走内部 API Key 验证
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Optional
+
+from app.api.routes.auth import _verify_internal_api_key
+from app.config import settings
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
+from pydantic import BaseModel, Field
+
+from packages.adapters.redis.feature_flag_store import (
+    FeatureFlagConfig,
+    RedisFeatureFlagStore,
+)
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/internal/feature-flags", tags=["Internal"])
+
+# 允许管理的 flag 白名单（防止误操作其他系统 flag）
+ALLOWED_FLAGS = {
+    "render_engine",
+}
+
+
+def _get_feature_flag_store() -> RedisFeatureFlagStore:
+    """获取 Feature Flag 存储实例。"""
+    return RedisFeatureFlagStore(redis_url=settings.REDIS_URL)
+
+
+class FeatureFlagUpdateRequest(BaseModel):
+    """Feature Flag 更新请求体。"""
+
+    enabled: bool = Field(..., description="是否启用")
+    percentage: int = Field(0, ge=0, le=100, description="灰度百分比 (0-100)")
+    whitelist: list[str] = Field(default_factory=list, description="白名单列表（如 user_id）")
+
+
+class FeatureFlagResponse(BaseModel):
+    """Feature Flag 响应。"""
+
+    name: str
+    enabled: bool
+    percentage: int
+    whitelist: list[str]
+
+    @classmethod
+    def from_config(cls, config: FeatureFlagConfig) -> "FeatureFlagResponse":
+        return cls(
+            name=config.name,
+            enabled=config.enabled,
+            percentage=config.percentage,
+            whitelist=sorted(config.whitelist),
+        )
+
+
+class FeatureFlagCheckResponse(BaseModel):
+    """Flag 激活检查响应。"""
+
+    name: str
+    active: bool
+    identifier: Optional[str] = None
+
+
+def _validate_flag_name(name: str) -> None:
+    """校验 flag 名称是否在允许列表中。"""
+    if name not in ALLOWED_FLAGS:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail=f"Unsupported flag: {name}. Allowed: {sorted(ALLOWED_FLAGS)}",
+        )
+
+
+@router.get("", response_model=list[FeatureFlagResponse])
+async def list_feature_flags(
+    _: bool = Depends(_verify_internal_api_key),
+    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
+) -> list[FeatureFlagResponse]:
+    """列出所有 Feature Flag。"""
+    try:
+        flags = store.list_all()
+        # 同时返回预定义的 flag（即使未设置也显示默认值）
+        result = []
+        for name in sorted(ALLOWED_FLAGS):
+            config = flags.get(name) or FeatureFlagConfig(name=name, enabled=False)
+            result.append(FeatureFlagResponse.from_config(config))
+        # 加上已存在但不在白名单中的 flag（只读展示）
+        for name, config in flags.items():
+            if name not in ALLOWED_FLAGS:
+                result.append(FeatureFlagResponse.from_config(config))
+        return sorted(result, key=lambda x: x.name)
+    except Exception as exc:
+        logger.error("Failed to list feature flags: %s", exc)
+        raise HTTPException(status_code=500, detail=f"Failed to list flags: {exc}")
+
+
+@router.get("/{name}", response_model=FeatureFlagResponse)
+async def get_feature_flag(
+    name: str,
+    _: bool = Depends(_verify_internal_api_key),
+    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
+) -> FeatureFlagResponse:
+    """获取单个 Feature Flag 配置。"""
+    try:
+        config = store.get(name)
+        return FeatureFlagResponse.from_config(config)
+    except Exception as exc:
+        logger.error("Failed to get feature flag %s: %s", name, exc)
+        raise HTTPException(status_code=500, detail=f"Failed to get flag: {exc}")
+
+
+@router.get("/{name}/check", response_model=FeatureFlagCheckResponse)
+async def check_feature_flag(
+    name: str,
+    identifier: Optional[str] = Query(None, description="标识符，如 user_id"),
+    _: bool = Depends(_verify_internal_api_key),
+    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
+) -> FeatureFlagCheckResponse:
+    """检查某个标识符是否命中 Feature Flag。"""
+    try:
+        active = store.is_active(name, identifier=identifier)
+        return FeatureFlagCheckResponse(name=name, active=active, identifier=identifier)
+    except Exception as exc:
+        logger.error("Failed to check feature flag %s: %s", name, exc)
+        raise HTTPException(status_code=500, detail=f"Failed to check flag: {exc}")
+
+
+@router.put("/{name}", response_model=FeatureFlagResponse)
+async def update_feature_flag(
+    name: str,
+    request: FeatureFlagUpdateRequest,
+    _: bool = Depends(_verify_internal_api_key),
+    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
+) -> FeatureFlagResponse:
+    """更新 Feature Flag 配置。
+
+    只允许修改 ALLOWED_FLAGS 列表中的 flag。
+    """
+    _validate_flag_name(name)
+
+    try:
+        config = FeatureFlagConfig(
+            name=name,
+            enabled=request.enabled,
+            percentage=request.percentage,
+            whitelist=set(request.whitelist),
+        )
+        store.set(config)
+        logger.info(
+            "Feature flag updated: name=%s enabled=%s percentage=%d whitelist=%d",
+            name,
+            config.enabled,
+            config.percentage,
+            len(config.whitelist),
+        )
+        return FeatureFlagResponse.from_config(config)
+    except Exception as exc:
+        logger.error("Failed to update feature flag %s: %s", name, exc)
+        raise HTTPException(status_code=500, detail=f"Failed to update flag: {exc}")
+
+
+@router.delete("/{name}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
+async def delete_feature_flag(
+    name: str,
+    _: bool = Depends(_verify_internal_api_key),
+    store: RedisFeatureFlagStore = Depends(_get_feature_flag_store),
+) :
+    """删除 Feature Flag。
+
+    只允许删除 ALLOWED_FLAGS 列表中的 flag。
+    """
+    _validate_flag_name(name)
+
+    try:
+        deleted = store.delete(name)
+        logger.info("Feature flag deleted: name=%s deleted=%s", name, deleted)
+        pass
+    except Exception as exc:
+        logger.error("Failed to delete feature flag %s: %s", name, exc)
+        raise HTTPException(status_code=500, detail=f"Failed to delete flag: {exc}")

apps/api/app/api/routes/generated_videos.py

@@ -1,123 +0,0 @@
-from typing import Any
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.core.storage import OSSStorageService, get_storage_service
-from app.dependencies import get_generated_video_repository, get_project_repository
-from app.schemas.generated_video import (
-    GeneratedVideoDownloadUrlResponse,
-    GeneratedVideoResponse,
-    ListGeneratedVideosResponse,
-    UpdateGeneratedVideoReviewRequest,
-)
-from fastapi import APIRouter, Depends, HTTPException, Query
-
-from packages.application import (
-    GetGeneratedVideoDownloadUrlUseCase,
-    GetGeneratedVideoUseCase,
-    ListGeneratedVideosUseCase,
-)
-
-router = APIRouter()
-
-
-def _to_generated_video_response(item, download_url: str | None = None) -> GeneratedVideoResponse:
-    return GeneratedVideoResponse(
-        id=item.id,
-        project_id=item.project_id,
-        generation_task_id=item.generation_task_id,
-        name=item.name,
-        file_url=item.file_url,
-        file_size=item.file_size,
-        duration=item.duration,
-        thumbnail_url=item.thumbnail_url,
-        width=item.width,
-        height=item.height,
-        fps=item.fps,
-        status=item.status,
-        review_status=item.review_status,
-        generation_params=item.generation_params,
-        download_url=download_url,
-    )
-
-
-@router.get("", response_model=ListGeneratedVideosResponse)
-def list_generated_videos(
-    project_id: str | None = Query(None),
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    generated_video_repository: Any = Depends(get_generated_video_repository),
-    project_repository: Any = Depends(get_project_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> ListGeneratedVideosResponse:
-    user_id = authenticated_user.user.id
-    use_case = ListGeneratedVideosUseCase(generated_video_repository)
-
-    if project_id:
-        # If project_id provided, check access and filter by project
-        project = project_repository.find_by_id(project_id)
-        if project is None:
-            raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-        items = use_case.execute(project_id)
-    else:
-        # If no project_id, list all videos from accessible projects
-        accessible_projects = project_repository.find_accessible_projects(user_id)
-        all_items = []
-        for proj in accessible_projects:
-            all_items.extend(use_case.execute(proj.id))
-        items = all_items
-
-    # Generate download URLs for each video
-    responses = []
-    for item in items:
-        download_url = storage_service.get_download_url(item.file_url)
-        responses.append(_to_generated_video_response(item, download_url=download_url))
-    return ListGeneratedVideosResponse(items=responses)
-
-
-@router.get("/{video_id}", response_model=GeneratedVideoResponse)
-def get_generated_video(
-    video_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    generated_video_repository: Any = Depends(get_generated_video_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> GeneratedVideoResponse:
-    use_case = GetGeneratedVideoUseCase(generated_video_repository)
-    item = use_case.execute(video_id)
-    if item is None:
-        raise HTTPException(status_code=404, detail=f"GeneratedVideo {video_id} not found")
-    download_url = storage_service.get_download_url(item.file_url)
-    return _to_generated_video_response(item, download_url=download_url)
-
-
-@router.patch("/{video_id}/review", response_model=GeneratedVideoResponse)
-def update_generated_video_review_status(
-    video_id: str,
-    request: UpdateGeneratedVideoReviewRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    generated_video_repository: Any = Depends(get_generated_video_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> GeneratedVideoResponse:
-    video = generated_video_repository.get(video_id)
-    if video is None:
-        raise HTTPException(status_code=404, detail=f"GeneratedVideo {video_id} not found")
-    video.review_status = request.review_status
-    updated = generated_video_repository.update(video)
-    download_url = storage_service.get_download_url(updated.file_url)
-    return _to_generated_video_response(updated, download_url=download_url)
-
-
-@router.get("/{video_id}/download-url", response_model=GeneratedVideoDownloadUrlResponse)
-def get_generated_video_download_url(
-    video_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    generated_video_repository: Any = Depends(get_generated_video_repository),
-    storage_service: OSSStorageService = Depends(get_storage_service),
-) -> GeneratedVideoDownloadUrlResponse:
-    video = generated_video_repository.get(video_id)
-    if video is None:
-        raise HTTPException(status_code=404, detail=f"GeneratedVideo {video_id} not found")
-    use_case = GetGeneratedVideoDownloadUrlUseCase(generated_video_repository)
-    file_url = use_case.execute(video_id)
-    if file_url is None:
-        raise HTTPException(status_code=404, detail=f"GeneratedVideo {video_id} not found")
-    download_url = storage_service.get_download_url(file_url)
-    return GeneratedVideoDownloadUrlResponse(video_id=video_id, download_url=download_url)

apps/api/app/api/routes/generation_tasks.py

@@ -1,7 +1,18 @@
+import logging
+import random
+import uuid
 from typing import Any
 
+from app.api.routes._helpers import check_project_access
 from app.auth import AuthenticatedUser, get_current_user
-from app.core.celery_app import celery_app
+from app.core.storage import OSSStorageService, get_storage_service
+from app.core.task_enqueue import (
+    GLOBAL_PENDING_LIMIT,
+    USER_PENDING_LIMIT,
+    GlobalQueueFull,
+    UserPendingLimitExceeded,
+    safe_enqueue_generation_task,
+)
 from app.dependencies import (
     get_asset_library_repository,
     get_asset_repository,
@@ -14,6 +25,7 @@ from app.schemas.generated_video import (
     ListGeneratedVideosResponse,
 )
 from app.schemas.generation_task import (
+    BatchGenerationTaskResponse,
     CreateGenerationTaskRequest,
     GenerationTaskResponse,
     ListGenerationTasksResponse,
@@ -27,18 +39,10 @@ from packages.application import (
     ListGeneratedVideosByTaskUseCase,
 )
 
+logger = logging.getLogger(__name__)
+
 router = APIRouter()
 
-
-def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
-    """检查用户是否有项目访问权限"""
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=403, detail="Access denied to project")
-
-
 def _to_generation_task_response(task) -> GenerationTaskResponse:
     return GenerationTaskResponse(
         id=task.id,
@@ -51,6 +55,9 @@ def _to_generation_task_response(task) -> GenerationTaskResponse:
         title_ids=task.title_ids,
         voice_ids=task.voice_ids,
         source_edit_plan_id=task.source_edit_plan_id or "",
+        asset_select_mode=getattr(task, "asset_select_mode", ""),
+        batch_id=getattr(task, "batch_id", ""),
+        logs=getattr(task, "logs", "[]"),
         status=task.status,
         progress=task.progress,
         result_count=task.result_count,
@@ -58,7 +65,7 @@ def _to_generation_task_response(task) -> GenerationTaskResponse:
     )
 
 
-def _to_generated_video_response(item) -> GeneratedVideoResponse:
+def _to_generated_video_response(item, download_url: str | None = None) -> GeneratedVideoResponse:
     return GeneratedVideoResponse(
         id=item.id,
         project_id=item.project_id,
@@ -71,6 +78,7 @@ def _to_generated_video_response(item) -> GeneratedVideoResponse:
         width=item.width,
         height=item.height,
         fps=item.fps,
+        download_url=download_url,
     )
 
 
@@ -85,6 +93,49 @@ def _ensure_library_has_ready_video_assets(assets) -> None:
         )
 
 
+def _select_assets_from_library(
+    assets: list,
+    mode: str,
+    count: int,
+) -> list[str]:
+    """根据选取模式从素材库中选取 ready 状态的视频素材 ID。
+
+    Args:
+        assets: 素材库中所有素材（Asset 实体列表）
+        mode: 选取模式 — all=全部, random=随机, smart=按质量评分
+        count: 选取数量，0 表示全部（仅 random/smart 模式有效）
+
+    Returns:
+        选中的素材 ID 列表
+    """
+    ready_video_assets = [a for a in assets if a.status.value == "ready" and a.mime_type.startswith("video")]
+
+    if not ready_video_assets:
+        return []
+
+    if mode == "random":
+        selected = (
+            ready_video_assets if count <= 0 else random.sample(ready_video_assets, min(count, len(ready_video_assets)))
+        )
+        return [a.id for a in selected]
+
+    if mode == "smart":
+        # 按质量分降序排列（质量分高的优先），质量分相同时按时长降序
+        sorted_assets = sorted(
+            ready_video_assets,
+            key=lambda a: (
+                a.quality_score if a.quality_score is not None else 0.0,
+                a.duration if a.duration is not None else 0.0,
+            ),
+            reverse=True,
+        )
+        selected = sorted_assets if count <= 0 else sorted_assets[:count]
+        return [a.id for a in selected]
+
+    # 默认 all 模式：返回全部 ready 视频素材
+    return [a.id for a in ready_video_assets]
+
+
 def _resolve_project_and_library(
     request: CreateGenerationTaskRequest,
     project_repository: Any,
@@ -122,7 +173,7 @@ def _resolve_project_and_library(
     return project_id, asset_library_id
 
 
-@router.post("/tasks", response_model=GenerationTaskResponse)
+@router.post("/tasks", response_model=BatchGenerationTaskResponse)
 def create_generation_task(
     request: CreateGenerationTaskRequest,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -130,37 +181,132 @@ def create_generation_task(
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
     asset_repository: Any = Depends(get_asset_repository),
-) -> GenerationTaskResponse:
-    project_id, asset_library_id = _resolve_project_and_library(
-        request, project_repository, asset_library_repository, asset_repository, authenticated_user
+) -> BatchGenerationTaskResponse:
+    logger.info(
+        "[生成任务] 接收请求: user_id=%s, template_id=%s, asset_count=%d, mode=%s, count=%d",
+        authenticated_user.user.id,
+        request.template_id,
+        len(request.asset_ids),
+        request.asset_select_mode,
+        request.count,
     )
 
+    try:
+        project_id, asset_library_id = _resolve_project_and_library(
+            request, project_repository, asset_library_repository, asset_repository, authenticated_user
+        )
+    except HTTPException as e:
+        logger.warning("[生成任务] 校验失败: %s", e.detail)
+        raise
+
     # asset_library 存在性校验（仅在提供了 asset_library_id 时）
+    resolved_asset_ids: list[str] = list(request.asset_ids)
     if asset_library_id:
         library = asset_library_repository.get(asset_library_id)
         if library is None or (project_id and library.project_id != project_id):
+            logger.warning("[生成任务] 素材库不存在: library_id=%s", asset_library_id)
             raise HTTPException(status_code=404, detail=f"AssetLibrary {asset_library_id} not found")
 
         assets = asset_repository.find_by_library(asset_library_id)
-        _ensure_library_has_ready_video_assets(assets)
+        try:
+            _ensure_library_has_ready_video_assets(assets)
+        except HTTPException as e:
+            logger.warning("[生成任务] 素材校验失败: %s", e.detail)
+            raise
+
+        # 素材库自动匹配：当未显式指定 asset_ids 时，按模式自动选取
+        if not resolved_asset_ids:
+            resolved_asset_ids = _select_assets_from_library(
+                assets,
+                mode=request.asset_select_mode,
+                count=request.asset_select_count,
+            )
 
     use_case = CreateGenerationTaskUseCase(generation_task_repository)
-    task = use_case.execute(
-        CreateGenerationTaskCommand(
-            project_id=project_id,
-            asset_library_id=asset_library_id,
-            strategy_id=request.strategy_id,
-            voice_library_id=request.voice_library_id,
-            template_id=request.template_id,
-            asset_ids=request.asset_ids,
-            title_ids=request.title_ids,
-            voice_ids=request.voice_ids,
-            created_by_user_id=authenticated_user.user.id,
-            source_edit_plan_id=request.source_edit_plan_id,
-        )
-    )
-    celery_app.send_task("worker.generate_video", args=[task.id])
-    return _to_generation_task_response(task)
+    count = request.count
+    created_tasks = []
+    failed_tasks = []
+    user_id = authenticated_user.user.id
+    # 同批次任务共享 batch_id，用于视频查重时批次内比对
+    batch_id = uuid.uuid4().hex if count > 1 else ""
+
+    # 预检查：批量提交前先看会不会超限，避免建一半才拒
+    try:
+        user_pending = generation_task_repository.count_pending_by_user(user_id)
+        global_pending = generation_task_repository.count_pending_total()
+        if user_pending + count > USER_PENDING_LIMIT:
+            raise UserPendingLimitExceeded(
+                user_id=user_id, pending_count=user_pending + count, limit=USER_PENDING_LIMIT
+            )
+        if global_pending + count > GLOBAL_PENDING_LIMIT:
+            raise GlobalQueueFull(pending_count=global_pending + count, limit=GLOBAL_PENDING_LIMIT)
+    except UserPendingLimitExceeded as e:
+        raise HTTPException(
+            status_code=429,
+            detail=f"您的待处理任务过多（当前 {e.pending_count - count}/{e.limit}，本次提交 {count} 个），请等待完成后再提交",
+        ) from e
+    except GlobalQueueFull as e:
+        raise HTTPException(
+            status_code=503,
+            detail="系统繁忙，请稍后再试",
+        ) from e
+
+    try:
+        for _ in range(count):
+            task = use_case.execute(
+                CreateGenerationTaskCommand(
+                    project_id=project_id,
+                    asset_library_id=asset_library_id,
+                    strategy_id=request.strategy_id,
+                    voice_library_id=request.voice_library_id,
+                    template_id=request.template_id,
+                    asset_ids=resolved_asset_ids,
+                    title_ids=request.title_ids,
+                    voice_ids=request.voice_ids,
+                    created_by_user_id=user_id,
+                    source_edit_plan_id=request.source_edit_plan_id,
+                    asset_select_mode=request.asset_select_mode,
+                    batch_id=batch_id,
+                    auto_retry_enabled=request.auto_retry_enabled,
+                    auto_retry_max=request.auto_retry_max,
+                )
+            )
+            try:
+                if safe_enqueue_generation_task(
+                    task,
+                    generation_task_repository,
+                    user_id=user_id,
+                    log_prefix="[生成任务]",
+                    log_task_status=True,
+                ):
+                    created_tasks.append(task)
+                else:
+                    failed_tasks.append(task)
+            except UserPendingLimitExceeded:
+                # 兜底：如果预检查后又并发提交了，在这里也拦住
+                failed_tasks.append(task)
+                if not created_tasks:
+                    raise HTTPException(
+                        status_code=429,
+                        detail="您的待处理任务过多，请等待完成后再提交",
+                    )
+                break
+            except GlobalQueueFull:
+                failed_tasks.append(task)
+                if not created_tasks:
+                    raise HTTPException(
+                        status_code=503,
+                        detail="系统繁忙，请稍后再试",
+                    )
+                break
+    except HTTPException:
+        raise
+    except Exception as e:
+        logger.error("[生成任务] 创建失败: %s", e, exc_info=True)
+        raise HTTPException(status_code=500, detail="创建生成任务失败，请稍后重试或查看任务日志")
+
+    items = [_to_generation_task_response(t) for t in created_tasks + failed_tasks]
+    return BatchGenerationTaskResponse(items=items, total=len(items))
 
 
 @router.get("/tasks", response_model=ListGenerationTasksResponse)
@@ -186,7 +332,7 @@ def get_generation_task(
     if task is None:
         raise HTTPException(status_code=404, detail=f"GenerationTask {task_id} not found")
     if task.project_id:
-        _check_project_access(task.project_id, authenticated_user.user.id, project_repository)
+        check_project_access(task.project_id, authenticated_user.user.id, project_repository)
     return _to_generation_task_response(task)
 
 
@@ -197,15 +343,20 @@ def list_generation_results(
     generation_task_repository: Any = Depends(get_generation_task_repository),
     generated_video_repository: Any = Depends(get_generated_video_repository),
     project_repository: Any = Depends(get_project_repository),
+    storage_service: OSSStorageService = Depends(get_storage_service),
 ) -> ListGeneratedVideosResponse:
     task = generation_task_repository.get(task_id)
     if task is None:
         raise HTTPException(status_code=404, detail=f"GenerationTask {task_id} not found")
     if task.project_id:
-        _check_project_access(task.project_id, authenticated_user.user.id, project_repository)
+        check_project_access(task.project_id, authenticated_user.user.id, project_repository)
     use_case = ListGeneratedVideosByTaskUseCase(generated_video_repository)
     items = use_case.execute(task_id)
-    return ListGeneratedVideosResponse(items=[_to_generated_video_response(item) for item in items])
+    responses = []
+    for item in items:
+        download_url = storage_service.get_download_url(item.file_url, expires_seconds=86400)
+        responses.append(_to_generated_video_response(item, download_url=download_url))
+    return ListGeneratedVideosResponse(items=responses)
 
 
 @router.post("/tasks/{task_id}/retry", response_model=GenerationTaskResponse)
@@ -224,6 +375,21 @@ def retry_generation_task(
     if status_val != "failed":
         raise HTTPException(status_code=409, detail="Only failed tasks can be retried")
 
+    user_id = authenticated_user.user.id
+    # 预检查：创建前判断，>= 上限就拒绝
+    user_pending = generation_task_repository.count_pending_by_user(user_id)
+    global_pending = generation_task_repository.count_pending_total()
+    if user_pending >= USER_PENDING_LIMIT:
+        raise HTTPException(
+            status_code=429,
+            detail=f"您的待处理任务过多（当前 {user_pending}/{USER_PENDING_LIMIT}），请等待完成后再提交",
+        )
+    if global_pending >= GLOBAL_PENDING_LIMIT:
+        raise HTTPException(
+            status_code=503,
+            detail="系统繁忙，请稍后再试",
+        )
+
     use_case = CreateGenerationTaskUseCase(generation_task_repository)
     retried = use_case.execute(
         CreateGenerationTaskCommand(
@@ -235,9 +401,28 @@ def retry_generation_task(
             asset_ids=task.asset_ids,
             title_ids=task.title_ids,
             voice_ids=task.voice_ids,
-            created_by_user_id=authenticated_user.user.id,
+            created_by_user_id=user_id,
             source_edit_plan_id=task.source_edit_plan_id or "",
+            asset_select_mode=getattr(task, "asset_select_mode", ""),
         )
     )
-    celery_app.send_task("worker.generate_video", args=[retried.id])
+    try:
+        if not safe_enqueue_generation_task(
+            retried,
+            generation_task_repository,
+            user_id=user_id,
+            log_prefix="[生成任务]",
+            log_task_status=True,
+        ):
+            logger.warning("[生成任务] 重试入队失败: task_id=%s", retried.id)
+    except UserPendingLimitExceeded:
+        raise HTTPException(
+            status_code=429,
+            detail="您的待处理任务过多，请等待完成后再提交",
+        ) from None
+    except GlobalQueueFull:
+        raise HTTPException(
+            status_code=503,
+            detail="系统繁忙，请稍后再试",
+        ) from None
     return _to_generation_task_response(retried)

apps/api/app/api/routes/internal_render.py

@@ -0,0 +1,120 @@
+"""渲染结果内部下载接口。
+
+通过内部 API Key 鉴权，为灰度对比工具等内部系统提供渲染结果下载能力。
+
+API:
+  GET  /api/v1/internal/render/videos/{video_id}/download-url  - 获取单个视频下载URL
+  GET  /api/v1/internal/render/tasks/{task_id}/videos          - 获取任务下所有视频及下载URL
+
+鉴权：X-API-Key header，走内部 API Key 验证
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any
+
+from app.api.routes.auth import _verify_internal_api_key
+from app.core.storage import OSSStorageService, get_storage_service
+from app.dependencies import get_generated_video_repository
+from fastapi import APIRouter, Depends, HTTPException, Query
+from pydantic import BaseModel
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter(prefix="/internal/render", tags=["Internal"])
+
+
+class InternalRenderVideoItem(BaseModel):
+    """内部渲染视频项。"""
+
+    video_id: str
+    generation_task_id: str
+    project_id: str
+    name: str
+    file_url: str
+    file_size: int | None = None
+    duration: float | None = None
+    width: int | None = None
+    height: int | None = None
+    fps: float | None = None
+    status: str
+    download_url: str
+
+
+class InternalRenderTaskVideosResponse(BaseModel):
+    """任务下所有渲染视频响应。"""
+
+    task_id: str
+    count: int
+    videos: list[InternalRenderVideoItem]
+
+
+class InternalRenderDownloadUrlResponse(BaseModel):
+    """单个视频下载URL响应。"""
+
+    video_id: str
+    download_url: str
+
+
+def _video_to_item(video: Any, download_url: str) -> InternalRenderVideoItem:
+    """将 GeneratedVideo 领域对象转为响应项。"""
+    return InternalRenderVideoItem(
+        video_id=video.id,
+        generation_task_id=video.generation_task_id,
+        project_id=video.project_id,
+        name=video.name,
+        file_url=video.file_url,
+        file_size=getattr(video, "file_size", None),
+        duration=getattr(video, "duration", None),
+        width=getattr(video, "width", None),
+        height=getattr(video, "height", None),
+        fps=getattr(video, "fps", None),
+        status=video.status,
+        download_url=download_url,
+    )
+
+
+@router.get("/videos/{video_id}/download-url", response_model=InternalRenderDownloadUrlResponse)
+def get_render_video_download_url(
+    video_id: str,
+    _: bool = Depends(_verify_internal_api_key),
+    generated_video_repository: Any = Depends(get_generated_video_repository),
+    storage_service: OSSStorageService = Depends(get_storage_service),
+) -> InternalRenderDownloadUrlResponse:
+    """获取单个渲染视频的下载URL（预签名）。"""
+    video = generated_video_repository.get(video_id)
+    if video is None:
+        raise HTTPException(status_code=404, detail=f"GeneratedVideo {video_id} not found")
+
+    download_url = storage_service.get_download_url(video.file_url, expires_seconds=86400)
+    logger.info("内部渲染下载URL生成: video_id=%s", video_id)
+    return InternalRenderDownloadUrlResponse(video_id=video_id, download_url=download_url)
+
+
+@router.get("/tasks/{task_id}/videos", response_model=InternalRenderTaskVideosResponse)
+def get_render_task_videos(
+    task_id: str,
+    status: str | None = Query(None, description="按状态筛选，如 completed/failed"),
+    _: bool = Depends(_verify_internal_api_key),
+    generated_video_repository: Any = Depends(get_generated_video_repository),
+    storage_service: OSSStorageService = Depends(get_storage_service),
+) -> InternalRenderTaskVideosResponse:
+    """获取生成任务下所有渲染视频及下载URL。"""
+    videos = generated_video_repository.list_by_generation_task(task_id)
+
+    # 状态筛选
+    if status:
+        videos = [v for v in videos if v.status == status]
+
+    items = []
+    for video in videos:
+        download_url = storage_service.get_download_url(video.file_url, expires_seconds=86400)
+        items.append(_video_to_item(video, download_url))
+
+    logger.info("内部渲染任务视频查询: task_id=%s count=%d", task_id, len(items))
+    return InternalRenderTaskVideosResponse(
+        task_id=task_id,
+        count=len(items),
+        videos=items,
+    )

apps/api/app/api/routes/jobs.py

@@ -1,332 +0,0 @@
-"""Job API 路由 — Phase 8 任务 2.10.
-
-提供统一异步任务管理 RESTful 接口：
-- POST   /api/v1/jobs                        创建任务
-- GET    /api/v1/jobs/{job_id}                任务详情
-- GET    /api/v1/projects/{project_id}/jobs   项目任务列表
-- GET    /api/v1/projects/{project_id}/jobs/stats  任务统计
-- PUT    /api/v1/jobs/{job_id}/progress       更新进度
-- POST   /api/v1/jobs/{job_id}/complete       标记完成
-- POST   /api/v1/jobs/{job_id}/fail           标记失败
-- POST   /api/v1/jobs/{job_id}/retry          重试任务
-- POST   /api/v1/jobs/{job_id}/cancel         取消任务
-- POST   /api/v1/jobs/{job_id}/submit         提交执行
-"""
-
-from __future__ import annotations
-
-import logging
-from typing import Any
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.core.celery_app import celery_app
-from app.dependencies import get_db_session, get_job_repository, get_project_repository
-from app.schemas.job import (
-    CompleteJobRequest,
-    CreateJobRequest,
-    FailJobRequest,
-    JobResponse,
-    JobStatisticsResponse,
-    ListJobsResponse,
-    UpdateProgressRequest,
-    job_to_response,
-)
-from fastapi import APIRouter, Depends, HTTPException, Query, status
-
-from packages.application.jobs import (
-    CancelJobUseCase,
-    CompleteJobCommand,
-    CompleteJobUseCase,
-    CreateJobCommand,
-    CreateJobUseCase,
-    FailJobCommand,
-    FailJobUseCase,
-    GetJobStatisticsUseCase,
-    GetJobUseCase,
-    ListJobsUseCase,
-    RetryJobUseCase,
-    SubmitJobUseCase,
-    UpdateJobProgressCommand,
-    UpdateJobProgressUseCase,
-)
-from packages.domain.job import JobType
-
-logger = logging.getLogger(__name__)
-
-router = APIRouter()
-
-# 任务类型 → Celery task name 映射
-_JOB_TYPE_TO_CELERY_TASK: dict[str, str] = {
-    JobType.VIDEO_COMPOSE: "worker.compose_video",
-    JobType.RENDER_EDIT_PLAN: "worker.render_edit_plan",
-    JobType.ASSET_INGEST: "worker.ingest_asset",
-    JobType.CLASSIFICATION: "worker.classify_asset",
-    JobType.VOICE_EXTRACTION: "worker.extract_voice",
-    JobType.GENERATION: "worker.generate_video",
-}
-
-
-def _check_project_access(project_id: str, user_id: str, project_repository) -> None:
-    """检查用户是否有项目访问权限。"""
-    project = project_repository.find_by_id(project_id)
-    if project is None:
-        raise HTTPException(status_code=404, detail=f"Project {project_id} not found")
-    if not project.can_access(user_id):
-        raise HTTPException(status_code=403, detail="Access denied to project")
-
-
-# ── 创建任务 ──────────────────────────────────────────────────────────────────
-
-
-@router.post("/jobs", response_model=JobResponse, status_code=status.HTTP_201_CREATED)
-def create_job(
-    request: CreateJobRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> JobResponse:
-    """创建异步任务。
-
-    创建后任务处于 pending 状态，需要调用 /submit 提交执行。
-    """
-    _check_project_access(request.project_id, authenticated_user.user.id, project_repository)
-
-    # 校验 job_type
-    try:
-        JobType(request.job_type)
-    except ValueError:
-        raise HTTPException(
-            status_code=400,
-            detail=f"不支持的任务类型: {request.job_type}，" f"可选值: {[t.value for t in JobType]}",
-        )
-
-    use_case = CreateJobUseCase(job_repo)
-    job = use_case.execute(
-        CreateJobCommand(
-            project_id=request.project_id,
-            job_type=request.job_type,
-            payload=request.payload,
-            source_id=request.source_id,
-            created_by_user_id=authenticated_user.user.id,
-            max_retries=request.max_retries,
-        )
-    )
-
-    return job_to_response(job)
-
-
-# ── 提交执行 ──────────────────────────────────────────────────────────────────
-
-
-@router.post("/jobs/{job_id}/submit", response_model=JobResponse)
-def submit_job(
-    job_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """提交任务执行。
-
-    将任务状态从 pending 切换为 running，并 dispatch Celery 异步任务。
-    """
-    # 权限检查：先获取任务并验证权限，再执行状态变更
-    job = job_repo.get(job_id)
-    if job is None:
-        raise HTTPException(status_code=404, detail=f"Job {job_id} not found")
-    if job.created_by_user_id and job.created_by_user_id != authenticated_user.user.id:
-        raise HTTPException(status_code=403, detail="Access denied to this job")
-
-    use_case = SubmitJobUseCase(job_repo)
-
-    try:
-        job = use_case.execute(job_id)
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    # Dispatch Celery 任务
-    celery_task_name = _JOB_TYPE_TO_CELERY_TASK.get(job.job_type.value)
-    if celery_task_name:
-        result = celery_app.send_task(celery_task_name, args=[job.id], kwargs=job.payload)
-        job.celery_task_id = result.id
-        job_repo.update(job)
-        logger.info("已提交 Celery 任务: job_id=%s celery_task_id=%s", job.id, result.id)
-
-    return job_to_response(job)
-
-
-# ── 查询接口 ──────────────────────────────────────────────────────────────────
-
-
-@router.get("/jobs/{job_id}", response_model=JobResponse)
-def get_job(
-    job_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """获取任务详情。"""
-    use_case = GetJobUseCase(job_repo)
-    job = use_case.execute(job_id)
-    if job is None:
-        raise HTTPException(status_code=404, detail=f"Job {job_id} not found")
-    return job_to_response(job)
-
-
-@router.get("/projects/{project_id}/jobs", response_model=ListJobsResponse)
-def list_project_jobs(
-    project_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-    project_repository: Any = Depends(get_project_repository),
-    job_type: str | None = Query(default=None, description="按任务类型过滤"),
-    status_filter: str | None = Query(default=None, alias="status", description="按状态过滤"),
-    limit: int = Query(default=50, ge=1, le=200),
-    offset: int = Query(default=0, ge=0),
-) -> ListJobsResponse:
-    """获取项目下的任务列表。"""
-    _check_project_access(project_id, authenticated_user.user.id, project_repository)
-
-    use_case = ListJobsUseCase(job_repo)
-    jobs = use_case.execute(
-        project_id=project_id,
-        job_type=job_type,
-        status=status_filter,
-        limit=limit,
-        offset=offset,
-    )
-    items = [job_to_response(j) for j in jobs]
-    return ListJobsResponse(items=items, total=len(items))
-
-
-@router.get("/projects/{project_id}/jobs/stats", response_model=JobStatisticsResponse)
-def get_job_statistics(
-    project_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-    project_repository: Any = Depends(get_project_repository),
-) -> JobStatisticsResponse:
-    """获取项目任务统计摘要。"""
-    _check_project_access(project_id, authenticated_user.user.id, project_repository)
-
-    use_case = GetJobStatisticsUseCase(job_repo)
-    stats = use_case.execute(project_id)
-    return JobStatisticsResponse(**stats)
-
-
-# ── 进度更新 ──────────────────────────────────────────────────────────────────
-
-
-@router.put("/jobs/{job_id}/progress", response_model=JobResponse)
-def update_job_progress(
-    job_id: str,
-    request: UpdateProgressRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """更新任务进度。"""
-    use_case = UpdateJobProgressUseCase(job_repo)
-
-    try:
-        job = use_case.execute(
-            UpdateJobProgressCommand(
-                job_id=job_id,
-                progress=request.progress,
-                current_stage=request.current_stage,
-            )
-        )
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    return job_to_response(job)
-
-
-# ── 完成 / 失败 ────────────────────────────────────────────────────────────────
-
-
-@router.post("/jobs/{job_id}/complete", response_model=JobResponse)
-def complete_job(
-    job_id: str,
-    request: CompleteJobRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """标记任务完成。"""
-    use_case = CompleteJobUseCase(job_repo)
-
-    try:
-        job = use_case.execute(CompleteJobCommand(job_id=job_id, result=request.result))
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    return job_to_response(job)
-
-
-@router.post("/jobs/{job_id}/fail", response_model=JobResponse)
-def fail_job(
-    job_id: str,
-    request: FailJobRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """标记任务失败。"""
-    use_case = FailJobUseCase(job_repo)
-
-    try:
-        job = use_case.execute(FailJobCommand(job_id=job_id, error_message=request.error_message))
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    return job_to_response(job)
-
-
-# ── 重试 / 取消 ────────────────────────────────────────────────────────────────
-
-
-@router.post("/jobs/{job_id}/retry", response_model=JobResponse)
-def retry_job(
-    job_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """重试失败任务。
-
-    将任务重置为 pending，retry_count + 1，但不自动 dispatch。
-    需要再次调用 /submit 提交执行。
-    """
-    # 权限检查：先获取任务并验证权限，再执行状态变更
-    job = job_repo.get(job_id)
-    if job is None:
-        raise HTTPException(status_code=404, detail=f"Job {job_id} not found")
-    if job.created_by_user_id and job.created_by_user_id != authenticated_user.user.id:
-        raise HTTPException(status_code=403, detail="Access denied to this job")
-
-    use_case = RetryJobUseCase(job_repo)
-
-    try:
-        job = use_case.execute(job_id)
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    return job_to_response(job)
-
-
-@router.post("/jobs/{job_id}/cancel", response_model=JobResponse)
-def cancel_job(
-    job_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    job_repo: Any = Depends(get_job_repository),
-) -> JobResponse:
-    """取消任务。"""
-    # 权限检查：先获取任务并验证权限，再执行状态变更
-    job = job_repo.get(job_id)
-    if job is None:
-        raise HTTPException(status_code=404, detail=f"Job {job_id} not found")
-    if job.created_by_user_id and job.created_by_user_id != authenticated_user.user.id:
-        raise HTTPException(status_code=403, detail="Access denied to this job")
-
-    use_case = CancelJobUseCase(job_repo)
-
-    try:
-        job = use_case.execute(job_id)
-    except ValueError as e:
-        raise HTTPException(status_code=400, detail=str(e))
-
-    return job_to_response(job)

apps/api/app/api/routes/projects.py

@@ -7,7 +7,7 @@ from app.schemas.project import (
     ListProjectsResponse,
     ProjectResponse,
 )
-from fastapi import APIRouter, Depends, HTTPException, status
+from fastapi import APIRouter, Depends, HTTPException, Response, status
 
 from packages.application import (
     CreateProjectCommand,
@@ -72,12 +72,12 @@ def create_project(
     return _to_project_response(project)
 
 
-@router.delete("/{project_id}")
+@router.delete("/{project_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_project(
     project_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     project_repository: Any = Depends(get_project_repository),
-):
+) -> dict:
     use_case = DeleteProjectUseCase(project_repository)
     try:
         deleted = use_case.execute(project_id, authenticated_user.user.id)
@@ -88,4 +88,4 @@ def delete_project(
         )
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-    return {"message": "Project deleted successfully"}
+    return

apps/api/app/api/routes/recipes.py

@@ -1,212 +0,0 @@
-"""Recipe CRUD + use routes."""
-
-from __future__ import annotations
-
-from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import get_db_session, get_user_repository
-from app.schemas.recipe import (
-    CreateRecipeRequest,
-    ListRecipesResponse,
-    RecipeItemResponse,
-    RecipeResponse,
-    UpdateRecipeRequest,
-    UseRecipeResponse,
-)
-from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
-from sqlalchemy.orm import Session
-
-from packages.adapters.sqlalchemy_impl.recipe_repository import SQLAlchemyRecipeRepository
-from packages.application.recipe.commands import (
-    CreateRecipeCommand,
-    RecipeItemCommand,
-    UpdateRecipeCommand,
-)
-from packages.application.recipe.use_cases import (
-    CreateRecipeUseCase,
-    DeleteRecipeUseCase,
-    FeatureDisabledError,
-    GetRecipeUseCase,
-    ListRecipesUseCase,
-    NotFoundError,
-    UpdateRecipeUseCase,
-    UseRecipeUseCase,
-)
-from packages.ports.user_repository import UserRepository
-
-router = APIRouter()
-
-
-def _get_recipe_repository(session: Session = Depends(get_db_session)) -> SQLAlchemyRecipeRepository:
-    return SQLAlchemyRecipeRepository(session)
-
-
-def _get_user_plan(user_id: str, user_repository: UserRepository) -> str:
-    user = user_repository.find_by_id(user_id)
-    if user is None:
-        return "free"
-    return getattr(user, "subscription_plan", "free") or "free"
-
-
-def _item_to_response(item) -> RecipeItemResponse:
-    return RecipeItemResponse(
-        id=item.id,
-        recipe_id=item.recipe_id,
-        item_type=item.item_type,
-        item_id=item.item_id,
-        position=item.position,
-        metadata=item.metadata_,
-    )
-
-
-def _to_response(recipe) -> RecipeResponse:
-    return RecipeResponse(
-        id=recipe.id,
-        user_id=recipe.user_id,
-        name=recipe.name,
-        description=recipe.description,
-        template_id=recipe.template_id,
-        generation_params=recipe.generation_params,
-        items=[_item_to_response(i) for i in getattr(recipe, "items", [])],
-        is_active=recipe.is_active,
-        metadata=recipe.metadata_,
-        created_at=recipe.created_at,
-        updated_at=recipe.updated_at,
-    )
-
-
-@router.get("", response_model=ListRecipesResponse)
-def list_recipes(
-    skip: int = Query(0, ge=0),
-    limit: int = Query(50, ge=1, le=200),
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-) -> ListRecipesResponse:
-    user_id = authenticated_user.user.id
-    use_case = ListRecipesUseCase(recipe_repository)
-    recipes = use_case.execute(user_id, skip=skip, limit=limit)
-    total = recipe_repository.count_by_user(user_id)
-    return ListRecipesResponse(
-        items=[_to_response(r) for r in recipes],
-        total=total,
-    )
-
-
-@router.get("/{recipe_id}", response_model=RecipeResponse)
-def get_recipe(
-    recipe_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-) -> RecipeResponse:
-    user_id = authenticated_user.user.id
-    use_case = GetRecipeUseCase(recipe_repository)
-    recipe = use_case.execute(recipe_id, user_id)
-    if recipe is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Recipe not found")
-    return _to_response(recipe)
-
-
-@router.post("", response_model=RecipeResponse, status_code=status.HTTP_201_CREATED)
-def create_recipe(
-    request: CreateRecipeRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-) -> RecipeResponse:
-    user_id = authenticated_user.user.id
-    command = CreateRecipeCommand(
-        user_id=user_id,
-        name=request.name,
-        description=request.description,
-        template_id=request.template_id,
-        generation_params=request.generation_params,
-        items=[
-            RecipeItemCommand(
-                item_type=ic.item_type,
-                item_id=ic.item_id,
-                position=ic.position,
-                metadata_=ic.metadata_,
-            )
-            for ic in request.items
-        ],
-        metadata_=request.metadata_,
-    )
-    use_case = CreateRecipeUseCase(recipe_repository)
-    recipe = use_case.execute(command)
-    return _to_response(recipe)
-
-
-@router.patch("/{recipe_id}", response_model=RecipeResponse)
-def update_recipe(
-    recipe_id: str,
-    request: UpdateRecipeRequest,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-) -> RecipeResponse:
-    user_id = authenticated_user.user.id
-    command = UpdateRecipeCommand(
-        recipe_id=recipe_id,
-        user_id=user_id,
-        name=request.name,
-        description=request.description,
-        template_id=request.template_id,
-        generation_params=request.generation_params,
-        items=(
-            [
-                RecipeItemCommand(
-                    item_type=ic.item_type,
-                    item_id=ic.item_id,
-                    position=ic.position,
-                    metadata_=ic.metadata_,
-                )
-                for ic in request.items
-            ]
-            if request.items is not None
-            else None
-        ),
-        metadata_=request.metadata_,
-    )
-    use_case = UpdateRecipeUseCase(recipe_repository)
-    try:
-        recipe = use_case.execute(command)
-    except NotFoundError:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Recipe not found")
-    return _to_response(recipe)
-
-
-@router.delete("/{recipe_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
-def delete_recipe(
-    recipe_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-) -> Response:
-    user_id = authenticated_user.user.id
-    use_case = DeleteRecipeUseCase(recipe_repository)
-    deleted = use_case.execute(recipe_id, user_id)
-    if not deleted:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Recipe not found")
-    return Response(status_code=204)
-
-
-@router.post("/{recipe_id}/use", response_model=UseRecipeResponse)
-def use_recipe(
-    recipe_id: str,
-    authenticated_user: AuthenticatedUser = Depends(get_current_user),
-    recipe_repository: SQLAlchemyRecipeRepository = Depends(_get_recipe_repository),
-    user_repository: UserRepository = Depends(get_user_repository),
-) -> UseRecipeResponse:
-    user_id = authenticated_user.user.id
-    plan_name = _get_user_plan(user_id, user_repository)
-    use_case = UseRecipeUseCase(recipe_repository)
-    try:
-        result = use_case.execute(recipe_id, user_id, user_plan=plan_name)
-    except FeatureDisabledError as exc:
-        raise HTTPException(
-            status_code=status.HTTP_403_FORBIDDEN,
-            detail=str(exc),
-        )
-    except NotFoundError:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Recipe not found")
-
-    return UseRecipeResponse(
-        recipe=_to_response(result.recipe),
-        warnings=[{"item_type": w.item_type, "item_id": w.item_id, "position": w.position} for w in result.warnings],
-    )

apps/api/app/api/routes/subscription.py

@@ -92,7 +92,7 @@ def _build_subscription_info(user: AuthenticatedUser) -> SubscriptionInfo:
 @router.get("/current", response_model=SubscriptionInfo)
 async def get_current_subscription(
     current_user: AuthenticatedUser = Depends(get_current_user),
-):
+) -> SubscriptionInfo:
     """获取当前订阅信息"""
     return _build_subscription_info(current_user)
 
@@ -100,7 +100,7 @@ async def get_current_subscription(
 @router.get("/billing-records", response_model=List[BillingRecord])
 async def get_billing_records(
     current_user: AuthenticatedUser = Depends(get_current_user),
-):
+) -> List[BillingRecord]:
     """获取账单记录列表"""
     from packages.adapters.sqlalchemy_impl.billing_repository import SQLAlchemyBillingRepository
     from packages.adapters.sqlalchemy_impl.session import SessionLocal
@@ -134,7 +134,7 @@ async def change_plan(
     request: ChangePlanRequest,
     current_user: AuthenticatedUser = Depends(get_current_user),
     user_repository: UserRepository = Depends(get_user_repository),
-):
+) -> ChangePlanResponse:
     """变更订阅套餐（升级/降级）"""
     # TODO: 接入支付验证（支付宝/微信支付）
     valid_plans = {"free", "standard", "pro", "enterprise"}
@@ -186,7 +186,7 @@ async def change_plan(
 async def cancel_subscription(
     current_user: AuthenticatedUser = Depends(get_current_user),
     user_repository: UserRepository = Depends(get_user_repository),
-):
+) -> SimpleResponse:
     """取消订阅"""
     user = current_user.user
     if user.subscription_plan == "free":
@@ -212,7 +212,7 @@ async def payment_callback(
     amount: float,
     payment_method: str = "alipay",
     payment_id: str = "",
-):
+) -> dict:
     """支付回调 - 在事务中更新账单和订阅状态
 
     注意：生产环境需要验证支付签名
@@ -232,7 +232,7 @@ async def payment_callback(
 
         # 创建账单记录
         record_id = uuid.uuid4().hex
-        record = repo.create(
+        repo.create(
             {
                 "id": record_id,
                 "user_id": user_id,
@@ -263,7 +263,7 @@ async def payment_callback(
 async def toggle_auto_renew(
     request: ToggleAutoRenewRequest,
     current_user: AuthenticatedUser = Depends(get_current_user),
-):
+) -> SimpleResponse:
     """切换自动续费"""
     # TODO: 实际需要在数据库中存储 auto_renew 字段
     status_text = "已开启自动续费" if request.enabled else "已关闭自动续费"

apps/api/app/api/routes/tags.py

@@ -0,0 +1,67 @@
+"""标签 CRUD 路由。"""
+
+import logging
+from typing import Any
+
+from app.auth import AuthenticatedUser, get_current_user
+from app.dependencies import get_tag_repository
+from app.schemas.tag import (
+    CreateTagRequest,
+    ListTagsResponse,
+    TagResponse,
+)
+from fastapi import APIRouter, Depends, HTTPException, Response
+
+from packages.domain import Tag
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+
+@router.get("", response_model=ListTagsResponse)
+def list_tags(
+    skip: int = 0,
+    limit: int = 100,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    tag_repository: Any = Depends(get_tag_repository),
+) -> ListTagsResponse:
+    """列出当前用户的标签。"""
+    user_id = authenticated_user.user.id
+    items = tag_repository.list_by_user(user_id, skip=skip, limit=limit)
+    total = tag_repository.count_by_user(user_id)
+    return ListTagsResponse(
+        items=[TagResponse(id=t.id, name=t.name, created_at=t.created_at) for t in items],
+        total=total,
+    )
+
+
+@router.post("", response_model=TagResponse, status_code=201)
+def create_tag(
+    request: CreateTagRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    tag_repository: Any = Depends(get_tag_repository),
+) -> TagResponse:
+    """创建标签（同用户同名去重，返回 409）。"""
+    user_id = authenticated_user.user.id
+    existing = tag_repository.find_by_name(user_id, request.name)
+    if existing:
+        raise HTTPException(status_code=409, detail="标签名称已存在")
+    tag = Tag.create(user_id=user_id, name=request.name)
+    created = tag_repository.create(tag)
+    return TagResponse(id=created.id, name=created.name, created_at=created.created_at)
+
+
+@router.delete("/{tag_id}", status_code=204, response_class=Response)
+def delete_tag(
+    tag_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    tag_repository: Any = Depends(get_tag_repository),
+) -> None:
+    """删除标签（同时清理素材关联）。"""
+    tag = tag_repository.get(tag_id)
+    if tag is None:
+        raise HTTPException(status_code=404, detail="标签不存在")
+    if tag.user_id != authenticated_user.user.id:
+        raise HTTPException(status_code=403, detail="无权删除该标签")
+    tag_repository.delete(tag_id)

apps/api/app/api/routes/task_center.py

@@ -1,7 +1,15 @@
+import logging
 from typing import Any
 
 from app.auth import AuthenticatedUser, get_current_user
 from app.core.celery_app import celery_app
+from app.core.task_enqueue import (
+    GLOBAL_PENDING_LIMIT,
+    USER_PENDING_LIMIT,
+    GlobalQueueFull,
+    UserPendingLimitExceeded,
+    safe_enqueue_generation_task,
+)
 from app.dependencies import (
     get_generation_task_repository,
     get_ingest_job_repository,
@@ -13,17 +21,23 @@ from app.schemas.task_center import (
     ProjectTaskResponse,
     UserTaskResponse,
 )
-from fastapi import APIRouter, Depends, HTTPException
+from fastapi import APIRouter, Depends, HTTPException, Query
 
 from packages.application import (
     CreateGenerationTaskCommand,
     CreateGenerationTaskUseCase,
+    RetryGenerationTaskUseCase,
     SubmitIngestJobCommand,
     SubmitIngestJobUseCase,
 )
 
+logger = logging.getLogger(__name__)
+
 router = APIRouter()
 
+DEFAULT_PAGE_SIZE = 50
+MAX_PAGE_SIZE = 200
+
 
 def _humanize_task_error(error_message: str) -> str:
     raw = (error_message or "").strip()
@@ -54,6 +68,8 @@ def _generation_step(task) -> str:
         return "生成完成"
     if s == "failed":
         return "生成失败"
+    if s == "cancelled":
+        return "已取消"
     return s
 
 
@@ -70,6 +86,26 @@ def _ingest_step(job) -> str:
     return s
 
 
+def _generation_task_to_user_response(task) -> UserTaskResponse:
+    return UserTaskResponse(
+        id=f"generation:{task.id}",
+        task_type="generation",
+        project_id=task.project_id,
+        template_id=task.template_id,
+        status=_status_value(task.status),
+        progress=task.progress,
+        current_step=_generation_step(task),
+        error_message=task.error_message,
+        error_info=task.error_info or {},
+        user_message=_humanize_task_error(task.error_message),
+        retryable=_status_value(task.status) == "failed",
+        retry_count=task.retry_count or 0,
+        source_id=task.id,
+        created_at=task.created_at,
+        updated_at=task.completed_at or task.started_at or task.created_at,
+    )
+
+
 def _generation_task_to_project_response(task) -> ProjectTaskResponse:
     return ProjectTaskResponse(
         id=f"generation:{task.id}",
@@ -79,8 +115,10 @@ def _generation_task_to_project_response(task) -> ProjectTaskResponse:
         progress=task.progress,
         current_step=_generation_step(task),
         error_message=task.error_message,
+        error_info=task.error_info or {},
         user_message=_humanize_task_error(task.error_message),
         retryable=_status_value(task.status) == "failed",
+        retry_count=task.retry_count or 0,
         source_id=task.id,
         template_id=task.template_id,
         created_at=task.created_at,
@@ -88,40 +126,66 @@ def _generation_task_to_project_response(task) -> ProjectTaskResponse:
     )
 
 
+def _validate_status(status: str | None) -> str | None:
+    """校验状态值合法性。"""
+    if status is None:
+        return None
+    valid = {"pending", "running", "completed", "failed", "cancelled"}
+    if status not in valid:
+        raise HTTPException(
+            status_code=400,
+            detail=f"无效的状态筛选值: {status}，允许值: {', '.join(sorted(valid))}",
+        )
+    return status
+
+
+def _clamp_page_size(page_size: int) -> int:
+    if page_size <= 0:
+        return DEFAULT_PAGE_SIZE
+    if page_size > MAX_PAGE_SIZE:
+        return MAX_PAGE_SIZE
+    return page_size
+
+
 # ── 用户级端点（放在项目级端点之前，避免路由冲突） ──
 
 
 @router.get("/tasks", response_model=ListTasksResponse)
 def list_user_tasks(
+    status: str | None = Query(None, description="按状态筛选：pending/running/completed/failed/cancelled"),
+    task_type: str | None = Query(None, description="按任务类型筛选：generation/ingest"),
+    page: int = Query(1, ge=1, description="页码，从1开始"),
+    page_size: int = Query(DEFAULT_PAGE_SIZE, ge=1, le=MAX_PAGE_SIZE, description="每页数量"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     generation_task_repository: Any = Depends(get_generation_task_repository),
 ) -> ListTasksResponse:
-    """用户级任务列表（跨 project），合并 ingest + generation 任务。"""
+    """用户级任务列表（跨 project），支持状态/类型筛选和分页。"""
+    status = _validate_status(status)
+    page_size = _clamp_page_size(page_size)
     user_id = authenticated_user.user.id
+    offset = (page - 1) * page_size
+
     items: list[UserTaskResponse] = []
 
-    for task in generation_task_repository.list_by_user(user_id):
-        items.append(
-            UserTaskResponse(
-                id=f"generation:{task.id}",
-                task_type="generation",
-                project_id=task.project_id,
-                template_id=task.template_id,
-                status=_status_value(task.status),
-                progress=task.progress,
-                current_step=_generation_step(task),
-                error_message=task.error_message,
-                user_message=_humanize_task_error(task.error_message),
-                retryable=_status_value(task.status) == "failed",
-                source_id=task.id,
-                created_at=task.created_at,
-                updated_at=task.completed_at or task.started_at or task.created_at,
-            )
+    # 生成任务
+    if task_type is None or task_type == "generation":
+        gen_result = generation_task_repository.list_by_user_filtered(
+            user_id,
+            status=status,
+            limit=page_size + 1,  # 多取一条判断是否还有下一页（简单起见这里用offset）
+            offset=offset,
         )
+        for task in gen_result:
+            items.append(_generation_task_to_user_response(task))
 
+    # 按时间倒序
     items.sort(key=lambda item: item.updated_at or item.created_at or "", reverse=True)
-    return ListTasksResponse(items=items)
+
+    # 总数（仅generation，ingest暂不计入总数以保持简单）
+    total = generation_task_repository.count_by_user_filtered(user_id, status=status)
+
+    return ListTasksResponse(items=items[:page_size], total=total)
 
 
 @router.post("/tasks/{task_id}/retry", response_model=UserTaskResponse)
@@ -130,7 +194,7 @@ def retry_task_by_id(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     generation_task_repository: Any = Depends(get_generation_task_repository),
 ) -> UserTaskResponse:
-    """简化重试：通过 task_id 直接重试失败的生成任务。"""
+    """原地重试失败的生成任务（复用同一个task_id，retry_count+1）。"""
     task = generation_task_repository.get(task_id)
     if task is None:
         raise HTTPException(status_code=404, detail="Generation task not found")
@@ -139,33 +203,44 @@ def retry_task_by_id(
     if _status_value(task.status) != "failed":
         raise HTTPException(status_code=409, detail="Only failed tasks can be retried")
 
-    use_case = CreateGenerationTaskUseCase(generation_task_repository)
-    retried = use_case.execute(
-        CreateGenerationTaskCommand(
-            project_id=task.project_id,
-            asset_library_id=task.asset_library_id,
-            strategy_id=task.strategy_id,
-            voice_library_id=task.voice_library_id,
-            template_id=task.template_id,
-            asset_ids=task.asset_ids,
-            title_ids=task.title_ids,
-            voice_ids=task.voice_ids,
-            created_by_user_id=authenticated_user.user.id,
+    user_id = authenticated_user.user.id
+
+    # 预检查
+    user_pending = generation_task_repository.count_pending_by_user(user_id)
+    global_pending = generation_task_repository.count_pending_total()
+    if user_pending >= USER_PENDING_LIMIT:
+        raise HTTPException(
+            status_code=429,
+            detail=f"您的待处理任务过多（当前 {user_pending}/{USER_PENDING_LIMIT}），请等待完成后再提交",
         )
-    )
-    celery_app.send_task("worker.generate_video", args=[retried.id])
-    return UserTaskResponse(
-        id=f"generation:{retried.id}",
-        task_type="generation",
-        project_id=retried.project_id,
-        template_id=retried.template_id,
-        status=_status_value(retried.status),
-        progress=retried.progress,
-        current_step=_generation_step(retried),
-        source_id=retried.id,
-        created_at=retried.created_at,
-        updated_at=retried.created_at,
-    )
+    if global_pending >= GLOBAL_PENDING_LIMIT:
+        raise HTTPException(
+            status_code=503,
+            detail="系统繁忙，请稍后再试",
+        )
+
+    # 原地重试
+    use_case = RetryGenerationTaskUseCase(generation_task_repository)
+    retried = use_case.execute(task_id)
+
+    # 重新入队
+    try:
+        if not safe_enqueue_generation_task(
+            retried, generation_task_repository, user_id=user_id, log_prefix="[任务中心]"
+        ):
+            logger.warning("[任务中心] 用户级重试入队失败: task_id=%s", retried.id)
+    except UserPendingLimitExceeded:
+        raise HTTPException(
+            status_code=429,
+            detail="您的待处理任务过多，请等待完成后再提交",
+        ) from None
+    except GlobalQueueFull:
+        raise HTTPException(
+            status_code=503,
+            detail="系统繁忙，请稍后再试",
+        ) from None
+
+    return _generation_task_to_user_response(retried)
 
 
 # ── 项目级端点 ──
@@ -174,37 +249,64 @@ def retry_task_by_id(
 @router.get("/projects/{project_id}/tasks", response_model=ListProjectTasksResponse)
 def list_project_tasks(
     project_id: str,
+    status: str | None = Query(None, description="按状态筛选：pending/running/completed/failed/cancelled"),
+    task_type: str | None = Query(None, description="按任务类型筛选：generation/ingest"),
+    page: int = Query(1, ge=1, description="页码，从1开始"),
+    page_size: int = Query(DEFAULT_PAGE_SIZE, ge=1, le=MAX_PAGE_SIZE, description="每页数量"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     project_repository: Any = Depends(get_project_repository),
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     generation_task_repository: Any = Depends(get_generation_task_repository),
 ) -> ListProjectTasksResponse:
+    """项目级任务列表，支持状态/类型筛选和分页。"""
     project = project_repository.find_by_id(project_id)
     if project is None:
         raise HTTPException(status_code=404, detail="Project not found")
 
+    status = _validate_status(status)
+    page_size = _clamp_page_size(page_size)
+    offset = (page - 1) * page_size
+
     items: list[ProjectTaskResponse] = []
-    for job in ingest_job_repository.list_by_project(project_id):
-        items.append(
-            ProjectTaskResponse(
-                id=f"ingest:{job.id}",
-                task_type="ingest",
-                project_id=job.project_id,
-                status=_status_value(job.status),
-                progress=100.0 if _status_value(job.status) == "completed" else 0.0,
-                current_step=_ingest_step(job),
-                error_message=job.error_message,
-                user_message=_humanize_task_error(job.error_message),
-                retryable=_status_value(job.status) == "failed",
-                source_id=job.id,
-                created_at=job.created_at,
-                updated_at=job.updated_at,
+
+    # 导入任务
+    if task_type is None or task_type == "ingest":
+        for job in ingest_job_repository.list_by_project(project_id):
+            if status and _status_value(job.status) != status:
+                continue
+            items.append(
+                ProjectTaskResponse(
+                    id=f"ingest:{job.id}",
+                    task_type="ingest",
+                    project_id=job.project_id,
+                    status=_status_value(job.status),
+                    progress=100.0 if _status_value(job.status) == "completed" else 0.0,
+                    current_step=_ingest_step(job),
+                    error_message=job.error_message,
+                    user_message=_humanize_task_error(job.error_message),
+                    retryable=_status_value(job.status) == "failed",
+                    source_id=job.id,
+                    created_at=job.created_at,
+                    updated_at=job.updated_at,
+                )
             )
+
+    # 生成任务
+    if task_type is None or task_type == "generation":
+        gen_items = generation_task_repository.list_by_project_filtered(
+            project_id,
+            status=status,
+            limit=page_size + 1,
+            offset=offset,
         )
-    for task in generation_task_repository.list_by_project(project_id):
-        items.append(_generation_task_to_project_response(task))
+        for task in gen_items:
+            items.append(_generation_task_to_project_response(task))
+
     items.sort(key=lambda item: item.updated_at or item.created_at or "", reverse=True)
-    return ListProjectTasksResponse(items=items)
+
+    total = generation_task_repository.count_by_project_filtered(project_id, status=status)
+
+    return ListProjectTasksResponse(items=items[:page_size], total=total)
 
 
 @router.post("/tasks/{task_type}/{source_id}/retry", response_model=ProjectTaskResponse)
@@ -215,28 +317,51 @@ def retry_project_task(
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     generation_task_repository: Any = Depends(get_generation_task_repository),
 ) -> ProjectTaskResponse:
+    """项目级任务重试。"""
     if task_type == "generation":
         task = generation_task_repository.get(source_id)
         if task is None:
             raise HTTPException(status_code=404, detail="Generation task not found")
         if _status_value(task.status) != "failed":
             raise HTTPException(status_code=409, detail="Only failed tasks can be retried")
-        use_case = CreateGenerationTaskUseCase(generation_task_repository)
-        retried = use_case.execute(
-            CreateGenerationTaskCommand(
-                project_id=task.project_id,
-                asset_library_id=task.asset_library_id,
-                strategy_id=task.strategy_id,
-                voice_library_id=task.voice_library_id,
-                template_id=task.template_id,
-                asset_ids=task.asset_ids,
-                title_ids=task.title_ids,
-                voice_ids=task.voice_ids,
-                created_by_user_id=authenticated_user.user.id,
+
+        user_id = authenticated_user.user.id
+
+        # 预检查
+        user_pending = generation_task_repository.count_pending_by_user(user_id)
+        global_pending = generation_task_repository.count_pending_total()
+        if user_pending >= USER_PENDING_LIMIT:
+            raise HTTPException(
+                status_code=429,
+                detail=f"您的待处理任务过多（当前 {user_pending}/{USER_PENDING_LIMIT}），请等待完成后再提交",
             )
-        )
-        celery_app.send_task("worker.generate_video", args=[retried.id])
+        if global_pending >= GLOBAL_PENDING_LIMIT:
+            raise HTTPException(
+                status_code=503,
+                detail="系统繁忙，请稍后再试",
+            )
+
+        # 原地重试
+        use_case = RetryGenerationTaskUseCase(generation_task_repository)
+        retried = use_case.execute(source_id)
+
+        try:
+            if not safe_enqueue_generation_task(
+                retried, generation_task_repository, user_id=user_id, log_prefix="[任务中心]"
+            ):
+                logger.warning("[任务中心] 项目级重试入队失败: task_id=%s", retried.id)
+        except UserPendingLimitExceeded:
+            raise HTTPException(
+                status_code=429,
+                detail="您的待处理任务过多，请等待完成后再提交",
+            ) from None
+        except GlobalQueueFull:
+            raise HTTPException(
+                status_code=503,
+                detail="系统繁忙，请稍后再试",
+            ) from None
         return _generation_task_to_project_response(retried)
+
     if task_type == "ingest":
         job = ingest_job_repository.get(source_id)
         if job is None:

apps/api/app/api/routes/templates.py

@@ -8,13 +8,16 @@ from app.auth import AuthenticatedUser, get_current_user
 from app.dependencies import get_db_session
 from app.schemas.template import (
     CategoryResponse,
+    CopyTemplateRequest,
     CreateCategoryRequest,
     CreateTemplateRequest,
     GenerateWarningResponse,
     ListCategoriesResponse,
+    ListTagsResponse,
     ListTemplatesResponse,
     SegmentResponse,
     TemplateResponse,
+    TemplateUsageResponse,
     ToggleFavoriteResponse,
     UpdateTemplateRequest,
     ValidateTemplateRequest,
@@ -27,19 +30,24 @@ logger = logging.getLogger(__name__)
 
 from packages.adapters.sqlalchemy_impl.template_repository import SQLAlchemyTemplateRepository
 from packages.application.template.commands import (
+    CopyTemplateCommand,
     CreateCategoryCommand,
     CreateTemplateCommand,
+    ListTemplatesFilter,
     SegmentCommand,
     UpdateTemplateCommand,
     ValidateTemplateCommand,
 )
 from packages.application.template.use_cases import (
+    CopyTemplateUseCase,
+    CountTemplatesUseCase,
     CreateCategoryUseCase,
     CreateTemplateUseCase,
     DeleteCategoryUseCase,
     DeleteTemplateUseCase,
     GetTemplateUseCase,
     ListCategoriesUseCase,
+    ListTagsUseCase,
     ListTemplatesUseCase,
     NotFoundError,
     UpdateTemplateUseCase,
@@ -67,7 +75,7 @@ def _segment_to_response(seg) -> SegmentResponse:
     )
 
 
-def _to_response(template) -> TemplateResponse:
+def _to_response(template, usage_count: int = 0) -> TemplateResponse:
     return TemplateResponse(
         id=template.id,
         user_id=template.user_id,
@@ -81,6 +89,7 @@ def _to_response(template) -> TemplateResponse:
         estimated_duration=template.estimated_duration,
         segments=[_segment_to_response(s) for s in getattr(template, "segments", [])],
         is_active=template.is_active,
+        usage_count=usage_count,
         created_at=template.created_at,
         updated_at=template.updated_at,
     )
@@ -93,19 +102,36 @@ def _to_response(template) -> TemplateResponse:
 def list_templates(
     skip: int = Query(0, ge=0),
     limit: int = Query(50, ge=1, le=200),
+    category: str | None = Query(None, description="按分类筛选"),
+    tag: str | None = Query(None, description="按标签筛选"),
+    keyword: str | None = Query(None, description="按名称关键词搜索"),
+    mode: str | None = Query(None, description="按剪辑模式筛选"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     template_repository: SQLAlchemyTemplateRepository = Depends(_get_template_repository),
 ) -> ListTemplatesResponse:
     user_id = authenticated_user.user.id
     try:
+        tpl_filter = ListTemplatesFilter(
+            category=category,
+            tag=tag,
+            keyword=keyword,
+            mode=mode,
+        )
         use_case = ListTemplatesUseCase(template_repository)
-        templates = use_case.execute(user_id, skip=skip, limit=limit)
-        total = template_repository.count_by_user(user_id)
+        templates = use_case.execute(user_id, skip=skip, limit=limit, filter=tpl_filter)
+        count_use_case = CountTemplatesUseCase(template_repository)
+        total = count_use_case.execute(user_id, filter=tpl_filter)
+
+        # 批量查询使用次数
+        items = []
+        for t in templates:
+            usage = template_repository.get_usage_count(t.id)
+            items.append(_to_response(t, usage_count=usage))
     except Exception:
         logger.exception("list_templates 查询失败: user_id=%s", user_id)
         return ListTemplatesResponse(items=[], total=0)
     return ListTemplatesResponse(
-        items=[_to_response(t) for t in templates],
+        items=items,
         total=total,
     )
 
@@ -120,12 +146,13 @@ def get_template(
     try:
         use_case = GetTemplateUseCase(template_repository)
         template = use_case.execute(template_id, user_id)
+        usage = template_repository.get_usage_count(template_id)
     except Exception:
         logger.exception("get_template 查询失败: template_id=%s", template_id)
         raise HTTPException(status_code=status.HTTP_500_INTERNAL_SERVER_ERROR, detail="模板查询失败")
     if template is None:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Template not found")
-    return _to_response(template)
+    return _to_response(template, usage_count=usage)
 
 
 @router.post("", response_model=TemplateResponse, status_code=status.HTTP_201_CREATED)
@@ -206,7 +233,7 @@ def update_template(
     return _to_response(template)
 
 
-@router.delete("/{template_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/{template_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_template(
     template_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -217,7 +244,48 @@ def delete_template(
     deleted = use_case.execute(template_id, user_id)
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Template not found")
-    return Response(status_code=204)
+    return
+
+
+@router.post("/{template_id}/copy", response_model=TemplateResponse, status_code=status.HTTP_201_CREATED)
+def copy_template(
+    template_id: str,
+    request: CopyTemplateRequest,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    template_repository: SQLAlchemyTemplateRepository = Depends(_get_template_repository),
+) -> TemplateResponse:
+    """复制模板（含所有片段配置）"""
+    user_id = authenticated_user.user.id
+    command = CopyTemplateCommand(
+        template_id=template_id,
+        user_id=user_id,
+        new_name=request.new_name,
+    )
+    use_case = CopyTemplateUseCase(template_repository)
+    try:
+        template = use_case.execute(command)
+    except NotFoundError:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Template not found")
+    except ValidationError as exc:
+        raise HTTPException(status_code=status.HTTP_422_UNPROCESSABLE_ENTITY, detail=str(exc))
+    return _to_response(template)
+
+
+@router.get("/{template_id}/usage", response_model=TemplateUsageResponse)
+def get_template_usage(
+    template_id: str,
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    template_repository: SQLAlchemyTemplateRepository = Depends(_get_template_repository),
+) -> TemplateUsageResponse:
+    """获取模板使用次数（关联的剪辑计划数量）"""
+    user_id = authenticated_user.user.id
+    # 鉴权：确保模板存在且属于当前用户
+    use_case = GetTemplateUseCase(template_repository)
+    template = use_case.execute(template_id, user_id)
+    if template is None:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Template not found")
+    usage = template_repository.get_usage_count(template_id)
+    return TemplateUsageResponse(template_id=template_id, usage_count=usage)
 
 
 @router.post("/{template_id}/toggle-favorite", response_model=ToggleFavoriteResponse)
@@ -307,7 +375,7 @@ def create_category(
     )
 
 
-@router.delete("/categories/{category_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/categories/{category_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_category(
     category_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -319,3 +387,22 @@ def delete_category(
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Category not found")
     return Response(status_code=204)
+
+
+# ── Tags ──
+
+
+@router.get("/tags/list", response_model=ListTagsResponse)
+def list_tags(
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    template_repository: SQLAlchemyTemplateRepository = Depends(_get_template_repository),
+) -> ListTagsResponse:
+    """获取用户所有模板标签（去重排序）"""
+    user_id = authenticated_user.user.id
+    try:
+        use_case = ListTagsUseCase(template_repository)
+        tags = use_case.execute(user_id)
+    except Exception:
+        logger.exception("list_tags 查询失败: user_id=%s", user_id)
+        return ListTagsResponse(items=[])
+    return ListTagsResponse(items=tags)

apps/api/app/api/routes/titles.py

@@ -4,6 +4,7 @@ from __future__ import annotations
 
 from typing import Optional
 
+from app.api.routes._helpers import get_user_plan
 from app.auth import AuthenticatedUser, get_current_user
 from app.dependencies import get_db_session, get_user_repository
 from app.schemas.title_library import (
@@ -16,13 +17,18 @@ from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
 from sqlalchemy.orm import Session
 
 from packages.adapters.sqlalchemy_impl.title_library_repository import SQLAlchemyTitleLibraryRepository
-from packages.application.title_library.commands import CreateTitleLibraryCommand, UpdateTitleLibraryCommand
+from packages.application.title_library.commands import (
+    CreateTitleLibraryCommand,
+    PickTitleCommand,
+    UpdateTitleLibraryCommand,
+)
 from packages.application.title_library.use_cases import (
     CreateTitleLibraryUseCase,
     DeleteTitleLibraryUseCase,
     GetTitleLibraryUseCase,
     ListTitleLibraryUseCase,
     NotFoundError,
+    PickTitleUseCase,
     QuotaExceededError,
     UpdateTitleLibraryUseCase,
 )
@@ -51,13 +57,6 @@ def _to_response(item) -> TitleLibraryItemResponse:
     )
 
 
-def _get_user_plan(user_id: str, user_repository: UserRepository) -> str:
-    user = user_repository.find_by_id(user_id)
-    if user is None:
-        return "free"
-    return getattr(user, "subscription_plan", "free") or "free"
-
-
 @router.get("", response_model=ListTitleLibraryResponse)
 def list_titles(
     category: Optional[str] = Query(None),
@@ -76,6 +75,41 @@ def list_titles(
     )
 
 
+@router.post("/pick", response_model=TitleLibraryItemResponse)
+def pick_title(
+    category: Optional[str] = Query(None, description="按分类筛选，不填则从全部标题中选"),
+    exclude_ids: Optional[str] = Query(
+        None,
+        description="排除的标题ID（逗号分隔），用于批量生成时避免重复",
+    ),
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    title_repository: SQLAlchemyTitleLibraryRepository = Depends(_get_title_repository),
+) -> TitleLibraryItemResponse:
+    """智能选择一个标题。
+
+    策略：优先使用次数少的，从最少的前5个中随机选一个，兼顾公平和多样性。
+    """
+    user_id = authenticated_user.user.id
+    exclude_list: list[str] = []
+    if exclude_ids:
+        exclude_list = [t.strip() for t in exclude_ids.split(",") if t.strip()]
+
+    use_case = PickTitleUseCase(title_repository)
+    item = use_case.execute(
+        PickTitleCommand(
+            user_id=user_id,
+            category=category,
+            exclude_ids=exclude_list,
+        )
+    )
+    if item is None:
+        raise HTTPException(
+            status_code=status.HTTP_404_NOT_FOUND,
+            detail="标题库为空，请先添加标题",
+        )
+    return _to_response(item)
+
+
 @router.get("/{title_id}", response_model=TitleLibraryItemResponse)
 def get_title(
     title_id: str,
@@ -98,7 +132,7 @@ def create_title(
     user_repository: UserRepository = Depends(get_user_repository),
 ) -> TitleLibraryItemResponse:
     user_id = authenticated_user.user.id
-    plan_name = _get_user_plan(user_id, user_repository)
+    plan_name = get_user_plan(user_id, user_repository)
     command = CreateTitleLibraryCommand(
         user_id=user_id,
         name=request.name,
@@ -143,7 +177,7 @@ def update_title(
     return _to_response(item)
 
 
-@router.delete("/{title_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/{title_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_title(
     title_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -154,4 +188,4 @@ def delete_title(
     deleted = use_case.execute(title_id, user_id)
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Title not found")
-    return Response(status_code=204)
+    return

apps/api/app/api/routes/tts.py

@@ -6,21 +6,32 @@ import logging
 from typing import Optional
 
 from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import get_cosyvoice_service, get_db_session
+from app.dependencies import (
+    get_audio_url_signer,
+    get_cosyvoice_service,
+    get_db_session,
+    get_user_repository,
+    get_voice_clone_profile_repository,
+    get_voice_library_repository,
+)
 from app.schemas.tts import (
     ListTTSJobResponse,
+    SaveToLibraryRequest,
+    SaveToLibraryResponse,
     TTSJobResponse,
     TTSStatusResponse,
     TTSSynthesizeRequest,
     TTSSynthesizeResponse,
 )
-from fastapi import APIRouter, Depends, HTTPException, Query, Response, status
+from fastapi import APIRouter, Depends, HTTPException, Query, Response, WebSocket, WebSocketDisconnect, status
 from sqlalchemy.orm import Session
 
 from packages.adapters.sqlalchemy_impl.tts_job_repository import (
     SQLAlchemyTTSJobRepository,
 )
+from packages.adapters.sqlalchemy_impl.voice_library_repository import SQLAlchemyVoiceLibraryRepository
 from packages.application.cosyvoice_service import CosyVoiceService
+from packages.application.tts_job.streaming_service import TTSStreamingService
 from packages.application.tts_job.use_cases import (
     CreateTTSJobUseCase,
     DeleteTTSJobUseCase,
@@ -30,17 +41,55 @@ from packages.application.tts_job.use_cases import (
     TTSJobNotFoundError,
 )
 from packages.application.tts_job.workflow import TTSWorkflowService
+from packages.application.voice_library.commands import CreateVoiceLibraryCommand
+from packages.application.voice_library.use_cases import (
+    CreateVoiceLibraryUseCase,
+    QuotaExceededError,
+)
+from packages.domain.voice_presets import list_voices
+from packages.ports.user_repository import UserRepository
 
 logger = logging.getLogger(__name__)
 
 router = APIRouter()
 
 
+@router.get("/presets", summary="获取预设音色列表")
+def list_preset_voices(
+    gender: Optional[str] = Query(None, description="按性别筛选: male/female/child"),
+    style: Optional[str] = Query(None, description="按风格筛选: stable/lively/customer_service/narration/news/story"),
+    keyword: Optional[str] = Query(None, description="按关键词搜索"),
+    _user: AuthenticatedUser = Depends(get_current_user),
+) -> list[dict]:
+    """获取可用的预设音色列表。
+
+    用于配音功能的音色选择。
+    """
+    voices = list_voices(gender=gender, style=style, keyword=keyword)
+    return [
+        {
+            "voice_id": v.voice_id,
+            "name": v.name,
+            "gender": v.gender.value,
+            "style": v.style.value,
+            "description": v.description,
+            "default_speed": v.default_speed,
+            "default_pitch": v.default_pitch,
+            "sample_rate": v.sample_rate,
+            "language": v.language,
+        }
+        for v in voices
+    ]
+
+
 def _get_repository(session: Session = Depends(get_db_session)) -> SQLAlchemyTTSJobRepository:
     return SQLAlchemyTTSJobRepository(session)
 
 
-def _to_response(job) -> TTSJobResponse:
+def _to_response(job, sign_url=None) -> TTSJobResponse:
+    output_url = job.output_audio_url
+    if sign_url and output_url:
+        output_url = sign_url(output_url)
     return TTSJobResponse(
         id=job.id,
         user_id=job.user_id,
@@ -50,7 +99,7 @@ def _to_response(job) -> TTSJobResponse:
         project_id=job.project_id,
         voice_clone_profile_id=job.voice_clone_profile_id,
         status=job.status,
-        output_audio_url=job.output_audio_url,
+        output_audio_url=output_url,
         output_audio_key=job.output_audio_key,
         duration=job.duration,
         file_size=job.file_size,
@@ -73,6 +122,7 @@ def synthesize(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     repository: SQLAlchemyTTSJobRepository = Depends(_get_repository),
     cosyvoice_service: CosyVoiceService = Depends(get_cosyvoice_service),
+    voice_clone_repo=Depends(get_voice_clone_profile_repository),
 ) -> TTSSynthesizeResponse:
     """发起 TTS 合成任务。
 
@@ -80,6 +130,21 @@ def synthesize(
     与音色克隆接口保持一致：CosyVoice 失败时不抛 500，而是返回 201 + failed 状态任务记录。
     """
     user_id = authenticated_user.user.id
+
+    # 校验 voice_clone_profile_id 归属（防止越权使用他人克隆音色）
+    if request.voice_clone_profile_id:
+        profile = voice_clone_repo.get(request.voice_clone_profile_id)
+        if profile is None:
+            raise HTTPException(
+                status_code=status.HTTP_404_NOT_FOUND,
+                detail="Voice clone profile not found",
+            )
+        if profile.user_id != user_id:
+            raise HTTPException(
+                status_code=status.HTTP_403_FORBIDDEN,
+                detail="Access denied to voice clone profile",
+            )
+
     use_case = CreateTTSJobUseCase(repository)
     job = use_case.execute(
         user_id=user_id,
@@ -110,18 +175,25 @@ def synthesize(
 
     # 若任务处于 processing 状态（异步模式），触发 Celery 后台轮询
     if job.status.value == "processing":
-        task_id = (job.metadata or {}).get("cosyvoice_task_id", "")
-        if task_id:
-            try:
+        # 分段合成任务 vs 普通单段任务
+        segment_task_ids = (job.metadata or {}).get("segment_task_ids", [])
+        is_segment = len(segment_task_ids) > 0
+
+        try:
+            if is_segment:
+                from worker_app.tasks import process_tts_segment_synthesis
+
+                process_tts_segment_synthesis.delay(job.id)
+            else:
                 from worker_app.tasks import process_tts_synthesis
 
                 process_tts_synthesis.delay(job.id)
-            except Exception as e:
-                # Celery 调度失败，标记 job 为 failed
-                try:
-                    workflow.process_synthesis_failure(job.id, f"Celery 任务调度失败: {e}")
-                except Exception as inner_e:
-                    logger.error(f"Celery 调度后标记失败时出错: job_id={job.id}, error={inner_e}")
+        except Exception as e:
+            # Celery 调度失败，标记 job 为 failed
+            try:
+                workflow.process_synthesis_failure(job.id, f"Celery 任务调度失败: {e}")
+            except Exception as inner_e:
+                logger.error(f"Celery 调度后标记失败时出错: job_id={job.id}, error={inner_e}")
 
     return TTSSynthesizeResponse(
         job_id=job.id,
@@ -137,6 +209,7 @@ def list_tts_jobs(
     status_filter: Optional[str] = Query(None, alias="status"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     repository: SQLAlchemyTTSJobRepository = Depends(_get_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> ListTTSJobResponse:
     """列出用户的 TTS 合成任务。"""
     user_id = authenticated_user.user.id
@@ -144,7 +217,7 @@ def list_tts_jobs(
     skip = (page - 1) * page_size
     items, total = use_case.execute(user_id, status=status_filter, skip=skip, limit=page_size)
     return ListTTSJobResponse(
-        items=[_to_response(j) for j in items],
+        items=[_to_response(j, sign_url) for j in items],
         total=total,
         page=page,
         page_size=page_size,
@@ -156,6 +229,7 @@ def get_tts_job(
     job_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     repository: SQLAlchemyTTSJobRepository = Depends(_get_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> TTSJobResponse:
     """获取 TTS 任务详情。"""
     user_id = authenticated_user.user.id
@@ -164,7 +238,7 @@ def get_tts_job(
         job = use_case.execute(job_id, user_id)
     except TTSJobNotFoundError:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="TTS job not found")
-    return _to_response(job)
+    return _to_response(job, sign_url)
 
 
 @router.get("/jobs/{job_id}/status", response_model=TTSStatusResponse)
@@ -172,6 +246,7 @@ def get_tts_job_status(
     job_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     repository: SQLAlchemyTTSJobRepository = Depends(_get_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> TTSStatusResponse:
     """查询 TTS 合成状态（用于前端轮询）。"""
     user_id = authenticated_user.user.id
@@ -180,10 +255,13 @@ def get_tts_job_status(
         job = use_case.execute(job_id, user_id)
     except TTSJobNotFoundError:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="TTS job not found")
+    output_url = job.output_audio_url
+    if output_url:
+        output_url = sign_url(output_url)
     return TTSStatusResponse(
         id=job.id,
         status=job.status,
-        output_audio_url=job.output_audio_url,
+        output_audio_url=output_url,
         error_message=job.error_message,
         duration=job.duration,
         retry_count=job.retry_count,
@@ -192,7 +270,7 @@ def get_tts_job_status(
     )
 
 
-@router.delete("/jobs/{job_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/jobs/{job_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_tts_job(
     job_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -204,4 +282,129 @@ def delete_tts_job(
     deleted = use_case.execute(job_id, user_id)
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="TTS job not found")
-    return Response(status_code=204)
+    return
+
+
+@router.post(
+    "/jobs/{job_id}/save-to-library",
+    response_model=SaveToLibraryResponse,
+    status_code=status.HTTP_201_CREATED,
+)
+def save_tts_job_to_library(
+    job_id: str,
+    request: SaveToLibraryRequest = SaveToLibraryRequest(),
+    authenticated_user: AuthenticatedUser = Depends(get_current_user),
+    tts_repository: SQLAlchemyTTSJobRepository = Depends(_get_repository),
+    voice_library_repository: SQLAlchemyVoiceLibraryRepository = Depends(get_voice_library_repository),
+    user_repository: UserRepository = Depends(get_user_repository),
+    sign_url=Depends(get_audio_url_signer),
+) -> SaveToLibraryResponse:
+    """将已完成的 TTS 合成结果保存到配音库。
+
+    自动携带音色名、时长、语速等元信息。
+    """
+    user_id = authenticated_user.user.id
+
+    # 获取 TTS job
+    get_use_case = GetTTSJobUseCase(tts_repository)
+    try:
+        job = get_use_case.execute(job_id, user_id)
+    except TTSJobNotFoundError:
+        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="TTS job not found")
+
+    # 校验已完成
+    if not job.is_completed:
+        raise HTTPException(
+            status_code=status.HTTP_400_BAD_REQUEST,
+            detail="TTS job is not completed yet",
+        )
+
+    # 构建配音素材名称
+    name = request.name or f"TTS-{job.id[:8]}"
+
+    # 构建元信息
+    metadata_ = {
+        "source": "tts_job",
+        "tts_job_id": job.id,
+        "format": job.format,
+        "sample_rate": job.sample_rate,
+    }
+    if job.metadata:
+        # 保留原始 job 的有用元信息
+        for key in ("speed", "language"):
+            if key in job.metadata:
+                metadata_[key] = job.metadata[key]
+
+    # 获取用户套餐（用于配额检查）
+    user = user_repository.find_by_id(user_id)
+    plan_name = getattr(user, "subscription_plan", "free") if user else "free"
+
+    # 构建命令并执行
+    command = CreateVoiceLibraryCommand(
+        user_id=user_id,
+        name=name,
+        text=job.input_text,
+        voice_provider="cosyvoice",
+        voice_id=job.voice_id,
+        voice_name=job.voice_model or "",
+        audio_url=job.output_audio_url,
+        duration=job.duration,
+        file_size=job.file_size,
+        status="completed",
+        project_id=job.project_id or "",
+        tags=[],
+        metadata_=metadata_,
+    )
+
+    use_case = CreateVoiceLibraryUseCase(voice_library_repository)
+    try:
+        item = use_case.execute(command, plan_name=plan_name or "free")
+    except QuotaExceededError as exc:
+        raise HTTPException(
+            status_code=status.HTTP_429_TOO_MANY_REQUESTS,
+            detail=f"配音库配额已满（{exc.used}/{exc.limit}），请升级套餐",
+        )
+
+    return SaveToLibraryResponse(
+        id=item.id,
+        name=item.name,
+        audio_url=sign_url(item.audio_url) if item.audio_url else "",
+        duration=item.duration,
+        voice_id=item.voice_id,
+        voice_name=item.voice_name,
+        status=item.status,
+    )
+
+
+@router.websocket("/ws/tts/stream")
+async def tts_websocket_stream(
+    websocket: WebSocket,
+    cosyvoice_service: CosyVoiceService = Depends(get_cosyvoice_service),
+) -> None:
+    """WebSocket 流式 TTS 合成。
+
+    协议：
+    1. 客户端发送 JSON 文本帧: {"text": "...", "voice_id": "...", ...}
+    2. 服务端发送 JSON 状态帧 + 二进制音频帧
+    3. 完成时发送 JSON 结束帧
+    """
+    await websocket.accept()
+    try:
+        message = await websocket.receive_json()
+        params = {
+            "text": message.get("text", ""),
+            "voice_id": message.get("voice_id", ""),
+            "sample_rate": message.get("sample_rate", 0),
+            "format": message.get("format", "mp3"),
+            "speed": message.get("speed", 1.0),
+        }
+        streaming_service = TTSStreamingService(cosyvoice_service)
+        await streaming_service.synthesize_and_stream(websocket, params)
+    except WebSocketDisconnect:
+        logger.info("WebSocket 客户端主动断开连接")
+    except Exception as e:
+        logger.error(f"WebSocket 流式合成异常: {e}", exc_info=True)
+        try:
+            await websocket.send_json({"type": "error", "message": f"服务异常: {e}"})
+        except Exception as send_err:
+            logger.warning("WebSocket 错误消息发送失败（连接可能已断开）: %s", send_err)

apps/api/app/api/routes/upload.py

@@ -1,13 +1,15 @@
 import logging
-from typing import Annotated, Any
+from typing import Any
 from uuid import uuid4
 
+from app.api.routes._helpers import require_project_and_library
 from app.auth import AuthenticatedUser, get_current_user
 from app.config import get_settings
 from app.core.celery_app import celery_app
 from app.core.storage import OSSStorageService, get_storage_service
 from app.dependencies import (
     get_asset_library_repository,
+    get_asset_repository,
     get_ingest_job_repository,
     get_project_repository,
 )
@@ -16,12 +18,11 @@ from app.schemas.upload import (
     DirectUploadCompleteResponse,
     DirectUploadPrepareRequest,
     DirectUploadPrepareResponse,
-    UploadAssetRequest,
     UploadAssetResponse,
 )
 from fastapi import APIRouter, Depends, File, Form, HTTPException, UploadFile, status
 
-from packages.application import GetProjectUseCase, SubmitIngestJobCommand, SubmitIngestJobUseCase
+from packages.application import SubmitIngestJobCommand, SubmitIngestJobUseCase
 
 logger = logging.getLogger(__name__)
 
@@ -79,26 +80,12 @@ def _validate_mime_type(content_type: str | None) -> str:
     return base_type
 
 
-def _require_project_and_library(
-    project_id: str,
-    library_id: str,
-    project_repository: Any,
-    asset_library_repository: Any,
-) -> None:
-    project = GetProjectUseCase(project_repository).execute(project_id)
-    if project is None:
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Project not found")
-
-    libraries = asset_library_repository.find_by_project(project_id)
-    if not any(item.id == library_id for item in libraries):
-        raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Asset library not found")
-
-
 def _submit_ingest_job(
     project_id: str,
     library_id: str,
     storage_key: str,
     ingest_job_repository: Any,
+    file_hash: str = "",
 ) -> Any:
     use_case = SubmitIngestJobUseCase(ingest_job_repository)
     job = use_case.execute(
@@ -106,6 +93,7 @@ def _submit_ingest_job(
             project_id=project_id,
             library_id=library_id,
             storage_key=storage_key,
+            file_hash=file_hash,
         )
     )
     celery_app.send_task("worker.ingest_asset", args=[job.id])
@@ -132,7 +120,7 @@ async def prepare_direct_upload(
     # P2-5: 服务端验证 MIME 类型
     validated_content_type = _validate_mime_type(request.content_type)
 
-    _require_project_and_library(
+    require_project_and_library(
         request.project_id,
         request.library_id,
         project_repository,
@@ -176,10 +164,11 @@ async def complete_direct_upload(
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
+    asset_repository: Any = Depends(get_asset_repository),
     storage_service: OSSStorageService = Depends(get_storage_service),
 ) -> DirectUploadCompleteResponse:
     """确认浏览器直传完成并创建导入任务。"""
-    _require_project_and_library(
+    require_project_and_library(
         request.project_id,
         request.library_id,
         project_repository,
@@ -199,11 +188,32 @@ async def complete_direct_upload(
     if not file_exists:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Uploaded file not found")
 
+    # ── 素材去重检测：同素材库 + 同 file_hash 视为重复 ──
+    if request.file_hash:
+        existing = asset_repository.find_by_library_and_file_hash(
+            library_id=request.library_id,
+            file_hash=request.file_hash,
+        )
+        if existing is not None:
+            logger.info(
+                "素材去重命中: library=%s hash=%s existing_asset=%s",
+                request.library_id,
+                request.file_hash,
+                existing.id,
+            )
+            return DirectUploadCompleteResponse(
+                storage_key=normalized_key,
+                ingest_job_id="",
+                duplicated=True,
+                asset_id=existing.id,
+            )
+
     job = _submit_ingest_job(
         project_id=request.project_id,
         library_id=request.library_id,
         storage_key=normalized_key,
         ingest_job_repository=ingest_job_repository,
+        file_hash=request.file_hash,
     )
     return DirectUploadCompleteResponse(storage_key=normalized_key, ingest_job_id=job.id)
 
@@ -218,14 +228,37 @@ async def upload_asset(
     project_id: str = Form(..., min_length=1, description="项目 ID"),
     library_id: str = Form(..., min_length=1, description="素材库 ID"),
     file: UploadFile = File(..., description="要上传的文件（视频、音频、图片等）"),
+    file_hash: str = Form(default="", description="文件 MD5 哈希，用于去重检测"),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     ingest_job_repository: Any = Depends(get_ingest_job_repository),
     project_repository: Any = Depends(get_project_repository),
     asset_library_repository: Any = Depends(get_asset_library_repository),
+    asset_repository: Any = Depends(get_asset_repository),
     storage_service: OSSStorageService = Depends(get_storage_service),
 ) -> UploadAssetResponse:
     """上传素材文件并触发导入流水线。"""
-    _require_project_and_library(project_id, library_id, project_repository, asset_library_repository)
+    require_project_and_library(project_id, library_id, project_repository, asset_library_repository)
+
+    # ── 素材去重检测：上传前检查同素材库 + 同 file_hash ──
+    if file_hash:
+        existing = asset_repository.find_by_library_and_file_hash(
+            library_id=library_id,
+            file_hash=file_hash,
+        )
+        if existing is not None:
+            logger.info(
+                "素材去重命中(multipart): library=%s hash=%s existing_asset=%s",
+                library_id,
+                file_hash,
+                existing.id,
+            )
+            return UploadAssetResponse(
+                storage_key=existing.storage_key,
+                ingest_job_id="",
+                url="",
+                duplicated=True,
+                asset_id=existing.id,
+            )
 
     # P2-5: 服务端验证 MIME 类型
     validated_content_type = _validate_mime_type(file.content_type)
@@ -255,6 +288,7 @@ async def upload_asset(
         library_id=library_id,
         storage_key=storage_key,
         ingest_job_repository=ingest_job_repository,
+        file_hash=file_hash,
     )
 
     return UploadAssetResponse(

apps/api/app/api/routes/videos.py

@@ -0,0 +1,179 @@
+import logging
+import uuid
+
+from app.api.routes._helpers import check_project_access
+from app.auth import AuthenticatedUser, get_current_user
+from app.core.celery_app import celery_app
+from app.core.storage import OSSStorageService, get_storage_service
+from app.dependencies import get_generated_video_repository
+from app.schemas.video_center import (
+    BatchDownloadRequest,
+    BatchDownloadResponse,
+    ListVideosResponse,
+    UpdateVideoReviewRequest,
+    VideoItemResponse,
+)
+from fastapi import APIRouter, Depends, HTTPException, Query
+
+from packages.application import (
+    GetGeneratedVideoUseCase,
+    GetVideosByIdsUseCase,
+    ListGeneratedVideosPaginatedUseCase,
+    UpdateVideoReviewStatusUseCase,
+)
+
+logger = logging.getLogger(__name__)
+
+router = APIRouter()
+
+
+def _to_video_response(item, storage: OSSStorageService | None = None) -> VideoItemResponse:
+    download_url = None
+    if storage and item.file_url:
+        try:
+            download_url = storage.get_download_url(item.file_url)
+        except Exception:
+            download_url = item.file_url
+    return VideoItemResponse(
+        id=item.id,
+        project_id=item.project_id,
+        generation_task_id=item.generation_task_id,
+        name=item.name,
+        file_url=item.file_url,
+        file_size=item.file_size,
+        duration=item.duration,
+        thumbnail_url=item.thumbnail_url,
+        width=item.width,
+        height=item.height,
+        fps=item.fps,
+        status=item.status,
+        review_status=item.review_status,
+        generation_params=item.generation_params,
+        download_url=download_url,
+        generated_at=item.generated_at.isoformat() if hasattr(item, "generated_at") and item.generated_at else "",
+    )
+
+
+@router.get("/videos", response_model=ListVideosResponse)
+def list_videos(
+    project_id: str | None = Query(None, description="项目ID，不传则返回所有项目"),
+    status: str | None = Query(None, description="按状态筛选"),
+    review_status: str | None = Query(None, description="按复核状态筛选"),
+    page: int = Query(1, ge=1, description="页码"),
+    page_size: int = Query(20, ge=1, le=100, description="每页数量"),
+    repo=Depends(get_generated_video_repository),
+    storage: OSSStorageService = Depends(get_storage_service),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+):
+    """成片列表，支持分页、按项目/状态/复核状态筛选。"""
+    use_case = ListGeneratedVideosPaginatedUseCase(repo)
+    items, total = use_case.execute(
+        project_id=project_id,
+        status=status,
+        review_status=review_status,
+        page=page,
+        page_size=page_size,
+    )
+    return ListVideosResponse(
+        items=[_to_video_response(item, storage) for item in items],
+        total=total,
+        page=page,
+        page_size=page_size,
+    )
+
+
+@router.get("/videos/{video_id}", response_model=VideoItemResponse)
+def get_video(
+    video_id: str,
+    repo=Depends(get_generated_video_repository),
+    storage: OSSStorageService = Depends(get_storage_service),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+):
+    """获取单个成片详情。"""
+    use_case = GetGeneratedVideoUseCase(repo)
+    item = use_case.execute(video_id)
+    if item is None:
+        raise HTTPException(status_code=404, detail="Video not found")
+    return _to_video_response(item, storage)
+
+
+@router.patch("/videos/{video_id}/review", response_model=VideoItemResponse)
+def update_video_review_status(
+    video_id: str,
+    request: UpdateVideoReviewRequest,
+    repo=Depends(get_generated_video_repository),
+    storage: OSSStorageService = Depends(get_storage_service),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+):
+    """更新成片复核状态：pending_review / approved / rejected。"""
+    use_case = UpdateVideoReviewStatusUseCase(repo)
+    item = use_case.execute(video_id, request.review_status)
+    if item is None:
+        raise HTTPException(status_code=404, detail="Video not found")
+    logger.info("Video %s review status updated to %s by user %s", video_id, request.review_status, current_user.user_id)
+    return _to_video_response(item, storage)
+
+
+@router.post("/videos/batch-download", response_model=BatchDownloadResponse)
+def batch_download_videos(
+    request: BatchDownloadRequest,
+    repo=Depends(get_generated_video_repository),
+    current_user: AuthenticatedUser = Depends(get_current_user),
+):
+    """批量下载成片，异步打包 zip。
+    
+    传入 video_ids 列表，创建一个批量下载任务，任务完成后返回 zip 下载链接。
+    """
+    if not request.video_ids:
+        raise HTTPException(status_code=400, detail="video_ids cannot be empty")
+    if len(request.video_ids) > 50:
+        raise HTTPException(status_code=400, detail="Maximum 50 videos per batch download")
+
+    # 校验视频都存在
+    use_case = GetVideosByIdsUseCase(repo)
+    videos = use_case.execute(request.video_ids)
+    if len(videos) != len(request.video_ids):
+        raise HTTPException(status_code=404, detail="Some videos not found")
+
+    # 发送 celery 任务
+    task = celery_app.send_task(
+        "worker.batch_download_videos",
+        args=[request.video_ids, current_user.user_id],
+    )
+
+    logger.info("Batch download job created: %s, videos=%d", task.id, len(request.video_ids))
+    return BatchDownloadResponse(job_id=task.id, status="pending")
+
+
+@router.get("/videos/batch-download/{job_id}", response_model=BatchDownloadResponse)
+def get_batch_download_status(
+    job_id: str,
+    current_user: AuthenticatedUser = Depends(get_current_user),
+):
+    """查询批量下载任务状态。"""
+    from celery.result import AsyncResult
+
+    task = AsyncResult(job_id, app=celery_app)
+    
+    status_map = {
+        "PENDING": "pending",
+        "STARTED": "running",
+        "SUCCESS": "success",
+        "FAILURE": "failed",
+        "RETRY": "pending",
+        "REVOKED": "cancelled",
+    }
+    api_status = status_map.get(task.state, "pending")
+
+    download_url = None
+    if task.state == "SUCCESS" and task.result:
+        if isinstance(task.result, dict):
+            download_url = task.result.get("download_url")
+        elif isinstance(task.result, str):
+            download_url = task.result
+
+    return BatchDownloadResponse(
+        job_id=job_id,
+        status=api_status,
+        download_url=download_url,
+    )

apps/api/app/api/routes/voice_clones.py

@@ -28,7 +28,6 @@ from packages.application.voice_clone.use_cases import (
     VoiceCloneNotRetryableError,
 )
 from packages.application.voice_clone.workflow import (
-    VoiceCloneWorkflowError,
     VoiceCloneWorkflowService,
 )
 
@@ -38,6 +37,7 @@ router = APIRouter()
 
 
 def _to_response(profile) -> VoiceCloneProfileResponse:
+    # source_audio_url 是用户传入的原始 URL（可能是外部地址），不做预签名转换
     return VoiceCloneProfileResponse(
         id=profile.id,
         user_id=profile.user_id,
@@ -172,6 +172,7 @@ def get_voice_clone_status(
     "/{clone_id}",
     status_code=status.HTTP_204_NO_CONTENT,
     response_model=None,
+    response_class=Response,
 )
 def delete_voice_clone(
     clone_id: str,
@@ -184,7 +185,7 @@ def delete_voice_clone(
     deleted = use_case.execute(clone_id, user_id)
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Voice clone not found")
-    return Response(status_code=204)
+    return
 
 
 @router.post("/{clone_id}/retry", response_model=VoiceCloneProfileResponse)

apps/api/app/api/routes/voices.py

@@ -7,8 +7,9 @@ from __future__ import annotations
 
 from typing import Literal, Optional
 
+from app.api.routes._helpers import get_user_plan
 from app.auth import AuthenticatedUser, get_current_user
-from app.dependencies import get_db_session, get_user_repository
+from app.dependencies import get_audio_url_signer, get_db_session, get_user_repository
 from app.schemas.voice import (
     PresetVoiceItemResponse,
     PresetVoiceListResponse,
@@ -50,7 +51,10 @@ def _get_clone_profile_repository(session: Session = Depends(get_db_session)) ->
     return SQLAlchemyVoiceCloneProfileRepository(session)
 
 
-def _to_response(item) -> VoiceLibraryItemResponse:
+def _to_response(item, sign_url=None) -> VoiceLibraryItemResponse:
+    audio = item.audio_url
+    if sign_url and audio:
+        audio = sign_url(audio)
     return VoiceLibraryItemResponse(
         id=item.id,
         user_id=item.user_id,
@@ -59,7 +63,7 @@ def _to_response(item) -> VoiceLibraryItemResponse:
         voice_provider=item.voice_provider,
         voice_id=item.voice_id,
         voice_name=item.voice_name,
-        audio_url=item.audio_url,
+        audio_url=audio,
         duration=item.duration,
         file_size=item.file_size,
         status=item.status,
@@ -70,16 +74,20 @@ def _to_response(item) -> VoiceLibraryItemResponse:
     )
 
 
-def _to_unified_response(item, profile_id_map: dict | None = None) -> UnifiedVoiceItemResponse:
+def _to_unified_response(item, profile_id_map: dict | None = None, sign_url=None) -> UnifiedVoiceItemResponse:
     """将数据库音色转换为统一响应格式。
 
     Args:
         item: VoiceLibraryItem
         profile_id_map: voice_id → profile_id 映射，用于填充 voice_clone_profile_id
+        sign_url: 音频URL预签名函数
     """
     profile_id = None
     if profile_id_map and item.voice_id:
         profile_id = profile_id_map.get(item.voice_id)
+    audio = item.audio_url
+    if sign_url and audio:
+        audio = sign_url(audio)
     return UnifiedVoiceItemResponse(
         id=item.id,
         type="clone",
@@ -89,7 +97,7 @@ def _to_unified_response(item, profile_id_map: dict | None = None) -> UnifiedVoi
         language="zh-CN",
         voice_id=item.voice_id,
         voice_provider=item.voice_provider or "cosyvoice",
-        audio_url=item.audio_url,
+        audio_url=audio,
         duration=item.duration,
         file_size=item.file_size,
         status=item.status,
@@ -118,13 +126,6 @@ def _preset_to_unified_response(preset) -> UnifiedVoiceItemResponse:
     )
 
 
-def _get_user_plan(user_id: str, user_repository: UserRepository) -> str:
-    user = user_repository.find_by_id(user_id)
-    if user is None:
-        return "free"
-    return getattr(user, "subscription_plan", "free") or "free"
-
-
 # ==================== 统一配音列表（预置 + 克隆）====================
 
 
@@ -140,6 +141,7 @@ def list_voices_unified(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     voice_repository: SQLAlchemyVoiceLibraryRepository = Depends(_get_voice_repository),
     clone_profile_repository: SQLAlchemyVoiceCloneProfileRepository = Depends(_get_clone_profile_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> UnifiedVoiceListResponse:
     """获取配音列表（预置音色 + 用户克隆音色）。
 
@@ -167,7 +169,7 @@ def list_voices_unified(
         # 批量查询 voice_id → profile_id 映射，填充 voice_clone_profile_id
         voice_ids = [i.voice_id for i in clone_items_raw if i.voice_id]
         profile_id_map = clone_profile_repository.find_profile_ids_by_voice_ids(voice_ids) if voice_ids else {}
-        clone_items = [_to_unified_response(i, profile_id_map) for i in clone_items_raw]
+        clone_items = [_to_unified_response(i, profile_id_map, sign_url) for i in clone_items_raw]
 
     # 组装结果
     if type == "preset":
@@ -224,6 +226,7 @@ def list_voices_legacy(
     limit: int = Query(50, ge=1, le=200),
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     voice_repository: SQLAlchemyVoiceLibraryRepository = Depends(_get_voice_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> ListVoiceLibraryResponse:
     """原有配音列表接口（仅返回用户克隆音色）。
 
@@ -233,7 +236,7 @@ def list_voices_legacy(
     use_case = ListVoiceLibraryUseCase(voice_repository)
     items, total = use_case.execute(user_id, status=status_filter, skip=skip, limit=limit)
     return ListVoiceLibraryResponse(
-        items=[_to_response(i) for i in items],
+        items=[_to_response(i, sign_url) for i in items],
         total=total,
     )
 
@@ -243,13 +246,14 @@ def get_voice(
     voice_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     voice_repository: SQLAlchemyVoiceLibraryRepository = Depends(_get_voice_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> VoiceLibraryItemResponse:
     user_id = authenticated_user.user.id
     use_case = GetVoiceLibraryUseCase(voice_repository)
     item = use_case.execute(voice_id, user_id)
     if item is None:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Voice not found")
-    return _to_response(item)
+    return _to_response(item, sign_url)
 
 
 @router.post("", response_model=VoiceLibraryItemResponse, status_code=status.HTTP_201_CREATED)
@@ -258,9 +262,10 @@ def create_voice(
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     voice_repository: SQLAlchemyVoiceLibraryRepository = Depends(_get_voice_repository),
     user_repository: UserRepository = Depends(get_user_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> VoiceLibraryItemResponse:
     user_id = authenticated_user.user.id
-    plan_name = _get_user_plan(user_id, user_repository)
+    plan_name = get_user_plan(user_id, user_repository)
     command = CreateVoiceLibraryCommand(
         user_id=user_id,
         name=request.name,
@@ -283,7 +288,7 @@ def create_voice(
             status_code=status.HTTP_429_TOO_MANY_REQUESTS,
             detail=f"配音库配额已满（{exc.used}/{exc.limit}），请升级套餐",
         )
-    return _to_response(item)
+    return _to_response(item, sign_url)
 
 
 @router.put("/{voice_id}", response_model=VoiceLibraryItemResponse)
@@ -292,6 +297,7 @@ def update_voice(
     request: UpdateVoiceLibraryRequest,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
     voice_repository: SQLAlchemyVoiceLibraryRepository = Depends(_get_voice_repository),
+    sign_url=Depends(get_audio_url_signer),
 ) -> VoiceLibraryItemResponse:
     user_id = authenticated_user.user.id
     command = UpdateVoiceLibraryCommand(
@@ -313,10 +319,10 @@ def update_voice(
         item = use_case.execute(command)
     except NotFoundError:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Voice not found")
-    return _to_response(item)
+    return _to_response(item, sign_url)
 
 
-@router.delete("/{voice_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None)
+@router.delete("/{voice_id}", status_code=status.HTTP_204_NO_CONTENT, response_model=None, response_class=Response)
 def delete_voice(
     voice_id: str,
     authenticated_user: AuthenticatedUser = Depends(get_current_user),
@@ -327,4 +333,4 @@ def delete_voice(
     deleted = use_case.execute(voice_id, user_id)
     if not deleted:
         raise HTTPException(status_code=status.HTTP_404_NOT_FOUND, detail="Voice not found")
-    return Response(status_code=204)
+    return

apps/api/app/config.py

@@ -19,27 +19,25 @@ class Settings(BaseSettings):
     # Container bind address; external expose is controlled by Docker/Nginx.
     API_HOST: str = "0.0.0.0"  # nosec: B104
     API_PORT: int = 8000
-    API_PREFIX: str = "/api/v1"
 
     DATABASE_URL: str = "postgresql+psycopg://postgres:postgres@localhost:5432/xiaoxia_saas"
     DATABASE_POOL_SIZE: int = 20
     DATABASE_MAX_OVERFLOW: int = 10  # 调整为合理值：pool_size(20) + max_overflow(10) = 最大30连接
     DATABASE_POOL_TIMEOUT: int = 30
-    DATABASE_POOL_RECYLE: int = 3600
+    DATABASE_POOL_RECYCLE: int = 3600
     USE_IN_MEMORY_DB: bool = False
     AUTO_CREATE_SCHEMA: bool = False
 
     REDIS_URL: str = "redis://localhost:6379/0"
-    REDIS_MAX_CONNECTION: int = 50
     ENABLE_REDIS_SESSIONS: bool = False
 
     # JWT secret key - MUST be set via environment variable, no default allowed
     JWT_SECRET_KEY: Optional[str] = None
-    # 旧的 JWT secret key（用于密钥轮换期间验证旧 token）
-    # 在密钥轮换时，先设置新密钥，旧密钥保留在此处直到所有旧 token 过期
-    JWT_SECRET_KEY_OLD: Optional[str] = None
-    # 密钥轮换天数（到达此天数后建议更换密钥）
-    SECRET_ROTATION_DAYS: int = 90
+
+    # JWT 算法与过期时间（与 .env.example 对齐）
+    JWT_ALGORITHM: str = "HS256"
+    JWT_ACCESS_TOKEN_EXPIRE_MINUTES: int = 30
+    JWT_REFRESH_TOKEN_EXPIRE_DAYS: int = 30
 
     @field_validator("JWT_SECRET_KEY", mode="before")
     @classmethod
@@ -75,19 +73,42 @@ class Settings(BaseSettings):
     CELERY_RESULT_BACKEND: str = "redis://localhost:6379/1"
 
     # OSS 七牛云相关
-    OSS_ENDPOINT: str = "oss-cn-hangzhou.aliiyuncs.com"
+    OSS_ENDPOINT: str = "oss-cn-hangzhou.aliyuncs.com"
     OSS_ACCESS_KEY_ID: str = ""
     OSS_ACCESS_KEY_SECRET: str = ""
     OSS_BUCKET_NAME: str = "xiaoxia-autocut"
+
+    @field_validator("OSS_ACCESS_KEY_ID", mode="before")
+    @classmethod
+    def validate_oss_access_key_id(cls, v):
+        if (v is None or v == "") and os.getenv("APP_ENV", "development") != "development":
+            raise ValueError(
+                "OSS_ACCESS_KEY_ID must be set via environment variable in non-development environments. "
+                "Check the server .env file (e.g. /var/lib/xiaoxia-saas-staging/.env)."
+            )
+        return v or ""
+
+    @field_validator("OSS_ACCESS_KEY_SECRET", mode="before")
+    @classmethod
+    def validate_oss_access_key_secret(cls, v):
+        if (v is None or v == "") and os.getenv("APP_ENV", "development") != "development":
+            raise ValueError(
+                "OSS_ACCESS_KEY_SECRET must be set via environment variable in non-development environments. "
+                "Check the server .env file (e.g. /var/lib/xiaoxia-saas-staging/.env)."
+            )
+        return v or ""
+
     OSS_DIRECT_UPLOAD_MAX_MB: int = Field(
         default=2000,
         validation_alias=AliasChoices("OSS_DIRECT_UPLOAD_MAX_MB", "MAX_UPLOAD_SIZE_MB"),
     )
     OSS_DIRECT_UPLOAD_EXPIRE_SECONDS: int = 900
 
-    LOG_LEVEL: str = "INFO"
     CORS_ORIGINS_RAW: str = "http://localhost:3000,http://localhost:5173,http://localhost:8000"
 
+    # 渲染引擎选择：legacy=旧VideoComposeService，unified=新UnifiedRenderService
+    RENDER_ENGINE: str = "legacy"
+
     model_config = SettingsConfigDict(
         env_file=".env",
         env_file_encoding="utf-8",

apps/api/app/core/__init__.py

@@ -1 +0,0 @@
-"""Core configuration package."""

apps/api/app/core/storage.py

@@ -1,243 +1,14 @@
-"""阿里云 OSS 存储服务"""
+"""Backward-compatible re-export from shared storage.
 
-import base64
-import datetime as dt
-import hashlib
-import hmac
-import json
-import logging
-import os
-from urllib.parse import urlparse
+All storage logic now lives in ``packages.shared.storage``.
+This module keeps old import paths working so existing code
+does not need to change.
+"""
 
-try:
-    import oss2
-except ImportError:  # pragma: no cover - exercised in minimal local/test environments
-    oss2 = None
-from app.config import get_settings
+from packages.shared.storage import SharedStorageService as OSSStorageService
+from packages.shared.storage import (
+    get_shared_storage_service,
+    get_storage_service,
+)
 
-logger = logging.getLogger(__name__)
-
-
-class OSSStorageService:
-    """阿里云 OSS 存储服务"""
-
-    def __init__(self):
-        settings = get_settings()
-        self.bucket_name = settings.OSS_BUCKET_NAME
-        self.public_url = f"https://{settings.OSS_BUCKET_NAME}.{settings.OSS_ENDPOINT}"
-        self.local_url_prefix = os.getenv("GENERATED_FILES_URL_PREFIX", "/generated-files")
-        self.bucket = None
-
-        has_key_id = bool(settings.OSS_ACCESS_KEY_ID)
-        has_key_secret = bool(settings.OSS_ACCESS_KEY_SECRET)
-
-        if has_key_id and has_key_secret:
-            if oss2 is not None:
-                try:
-                    auth = oss2.Auth(
-                        settings.OSS_ACCESS_KEY_ID,
-                        settings.OSS_ACCESS_KEY_SECRET,
-                    )
-                    self.bucket = oss2.Bucket(
-                        auth,
-                        settings.OSS_ENDPOINT,
-                        settings.OSS_BUCKET_NAME,
-                    )
-                    logger.info(
-                        "OSS initialized: endpoint=%s bucket=%s",
-                        settings.OSS_ENDPOINT,
-                        settings.OSS_BUCKET_NAME,
-                    )
-                except Exception as error:
-                    logger.error("Failed to initialize OSS bucket client: %s", error)
-            else:
-                logger.error("oss2 SDK is not installed — OSS operations will fail")
-        else:
-            missing = []
-            if not has_key_id:
-                missing.append("OSS_ACCESS_KEY_ID")
-            if not has_key_secret:
-                missing.append("OSS_ACCESS_KEY_SECRET")
-            logger.error("OSS credentials not configured — missing: %s", ", ".join(missing))
-
-        self.access_key_id = settings.OSS_ACCESS_KEY_ID
-        self.access_key_secret = settings.OSS_ACCESS_KEY_SECRET
-        self.endpoint = settings.OSS_ENDPOINT
-
-    def _is_local_generated_url(self, storage_key_or_url: str) -> bool:
-        parsed = urlparse(storage_key_or_url)
-        path = parsed.path if parsed.scheme else storage_key_or_url
-        return path.startswith(f"{self.local_url_prefix}/")
-
-    def create_direct_upload_post(
-        self,
-        storage_key: str,
-        content_type: str,
-        max_size_bytes: int,
-        expires_seconds: int,
-    ) -> dict[str, object]:
-        """创建浏览器直传 OSS 的 PostObject 表单。"""
-        if not self.access_key_id or not self.access_key_secret:
-            raise RuntimeError("OSS storage is not configured")
-        normalized_key = self._normalize_storage_key(storage_key)
-        if not normalized_key.startswith("uploads/"):
-            raise ValueError("direct upload key must be under uploads/")
-
-        expiration = (dt.datetime.now(dt.timezone.utc) + dt.timedelta(seconds=expires_seconds)).strftime(
-            "%Y-%m-%dT%H:%M:%S.000Z"
-        )
-        policy = {
-            "expiration": expiration,
-            "conditions": [
-                {"bucket": self.bucket_name},
-                {"key": normalized_key},
-                ["content-length-range", 1, max_size_bytes],
-                ["starts-with", "$Content-Type", content_type.split("/", 1)[0] + "/" if "/" in content_type else ""],
-            ],
-        }
-        encoded_policy = base64.b64encode(json.dumps(policy, separators=(",", ":")).encode("utf-8")).decode("ascii")
-        signature = base64.b64encode(
-            hmac.new(self.access_key_secret.encode("utf-8"), encoded_policy.encode("utf-8"), hashlib.sha1).digest()
-        ).decode("ascii")
-
-        return {
-            "url": self.public_url,
-            "method": "POST",
-            "storage_key": normalized_key,
-            "expires_at": expiration,
-            "fields": {
-                "key": normalized_key,
-                "OSSAccessKeyId": self.access_key_id,
-                "policy": encoded_policy,
-                "Signature": signature,
-                "success_action_status": "201",
-                "Content-Type": content_type,
-            },
-        }
-
-    def upload_file(
-        self,
-        file_or_path,
-        storage_key: str,
-        content_type: str = "application/octet-stream",
-    ) -> str:
-        """
-        上传文件到 OSS
-
-        Args:
-            file_or_path: 文件对象或本地文件路径
-            storage_key: 存储键（文件路径）
-            content_type: 内容类型
-
-        Returns:
-            文件公网 URL
-        """
-        if self.bucket is None:
-            raise RuntimeError("OSS storage is not configured")
-
-        try:
-            # 如果是字符串路径，从本地文件上传
-            if isinstance(file_or_path, str):
-                self.bucket.put_object_from_file(storage_key, file_or_path, headers={"Content-Type": content_type})
-            else:
-                # 文件对象
-                file_or_path.seek(0)
-                self.bucket.put_object(storage_key, file_or_path, headers={"Content-Type": content_type})
-
-            return f"{self.public_url}/{storage_key}"
-        except Exception as e:
-            raise Exception(f"Failed to upload file to OSS: {e}")
-
-    def get_url(self, storage_key: str) -> str:
-        """获取文件公网 URL"""
-        return f"{self.public_url}/{storage_key}"
-
-    def get_download_url(self, storage_key_or_url: str, expires_seconds: int = 3600) -> str:
-        """
-        获取文件下载签名 URL（用于私有文件）
-
-        Args:
-            storage_key_or_url: 存储键或完整 URL
-            expires_seconds: 过期时间（秒）
-
-        Returns:
-            签名 URL
-        """
-        if self.bucket is None:
-            if self._is_local_generated_url(storage_key_or_url):
-                return storage_key_or_url
-            return self.get_url(self._normalize_storage_key(storage_key_or_url))
-
-        storage_key = self._normalize_storage_key(storage_key_or_url)
-        try:
-            return self.bucket.sign_url("GET", storage_key, expires_seconds)
-        except Exception:
-            return self.get_url(storage_key)
-
-    def _normalize_storage_key(self, storage_key_or_url: str) -> str:
-        """从 URL 中提取存储键"""
-        if storage_key_or_url.startswith("http://") or storage_key_or_url.startswith("https://"):
-            parsed = urlparse(storage_key_or_url)
-            # 移除开头的 /
-            return parsed.path.lstrip("/")
-        return storage_key_or_url.lstrip("/")
-
-    def download_file(self, storage_key: str, local_path: str):
-        """
-        从 OSS 下载文件到本地
-
-        Args:
-            storage_key: 存储键
-            local_path: 本地文件路径
-        """
-        if self.bucket is None:
-            raise RuntimeError("OSS storage is not configured")
-
-        try:
-            os.makedirs(os.path.dirname(local_path), exist_ok=True)
-            self.bucket.get_object_to_file(storage_key, local_path)
-        except Exception as e:
-            raise Exception(f"Failed to download file from OSS: {e}")
-
-    def delete_file(self, storage_key: str):
-        """
-        删除 OSS 文件
-
-        Args:
-            storage_key: 存储键
-        """
-        if self.bucket is None:
-            return
-
-        try:
-            self.bucket.delete_object(storage_key)
-        except Exception as error:
-            logger.warning(
-                "Failed to delete file from OSS",
-                extra={"storage_key": storage_key, "error": str(error)},
-            )
-
-    def file_exists(self, storage_key: str) -> bool:
-        """
-        检查文件是否存在
-
-        Args:
-            storage_key: 存储键
-
-        Returns:
-            是否存在
-        """
-        if self.bucket is None:
-            return False
-        return self.bucket.object_exists(storage_key)
-
-
-_storage_service = None
-
-
-def get_storage_service() -> OSSStorageService:
-    """获取存储服务实例（全局单例）"""
-    global _storage_service
-    if _storage_service is None:
-        _storage_service = OSSStorageService()
-    return _storage_service
+__all__ = ["OSSStorageService", "get_storage_service", "get_shared_storage_service"]

apps/api/app/core/task_enqueue.py

@@ -0,0 +1,221 @@
+import logging
+from typing import Any
+
+from app.core.celery_app import celery_app
+
+logger = logging.getLogger(__name__)
+
+# ── 限流阈值常量（全系统统一管理，不要在业务代码里硬编码） ──
+USER_PENDING_LIMIT = 3  # 单用户 pending 上限
+GLOBAL_PENDING_LIMIT = 20  # 全局 pending 上限
+
+
+class UserPendingLimitExceeded(Exception):
+    """用户 pending 任务数超限，返回 429。"""
+
+    def __init__(self, user_id: str, pending_count: int, limit: int):
+        self.user_id = user_id
+        self.pending_count = pending_count
+        self.limit = limit
+        super().__init__(f"用户 {user_id} pending 任务数 {pending_count} 超过上限 {limit}")
+
+
+class GlobalQueueFull(Exception):
+    """全局限流，返回 503。"""
+
+    def __init__(self, pending_count: int, limit: int):
+        self.pending_count = pending_count
+        self.limit = limit
+        super().__init__(f"系统 pending 任务数 {pending_count} 超过上限 {limit}")
+
+
+def check_queue_limits(
+    user_id: str,
+    generation_task_repository: Any,
+    *,
+    user_pending_limit: int = USER_PENDING_LIMIT,
+    global_pending_limit: int = GLOBAL_PENDING_LIMIT,
+) -> None:
+    """检查队列限流（预检查用，任务创建前调用），超限抛对应异常。
+
+    边界语义：>= 上限即拒绝（达到上限就不能再加新任务）。
+
+    Args:
+        user_id: 用户 ID
+        generation_task_repository: 任务仓储
+        user_pending_limit: 单用户 pending 上限，默认 USER_PENDING_LIMIT
+        global_pending_limit: 全局 pending 上限，默认 GLOBAL_PENDING_LIMIT
+
+    Raises:
+        GlobalQueueFull: 全局超限时抛出（优先级更高，先查全局）
+        UserPendingLimitExceeded: 用户超限时抛出
+    """
+    # 先查全局（系统级保护优先级更高）
+    global_pending = generation_task_repository.count_pending_total()
+    if global_pending >= global_pending_limit:
+        logger.warning(
+            "[队列限流] 全局 pending 任务数超限: %d/%d, user_id=%s",
+            global_pending,
+            global_pending_limit,
+            user_id,
+        )
+        raise GlobalQueueFull(pending_count=global_pending, limit=global_pending_limit)
+
+    # 再查用户级
+    if user_id:
+        user_pending = generation_task_repository.count_pending_by_user(user_id)
+        if user_pending >= user_pending_limit:
+            logger.warning(
+                "[队列限流] 用户 pending 任务数超限: user_id=%s, count=%d/%d",
+                user_id,
+                user_pending,
+                user_pending_limit,
+            )
+            raise UserPendingLimitExceeded(user_id=user_id, pending_count=user_pending, limit=user_pending_limit)
+
+
+def _mark_task_failed_safely(
+    task: Any,
+    generation_task_repository: Any,
+    log_prefix: str,
+    reason: str,
+) -> None:
+    """安全地把任务标记为 failed，更新失败只打日志不崩溃。"""
+    try:
+        task.mark_failed(f"任务被限流拒绝: {reason}")
+        generation_task_repository.update(task)
+    except Exception as update_err:
+        logger.error(
+            "%s 限流后更新状态也失败: task_id=%s error=%s",
+            log_prefix,
+            task.id,
+            update_err,
+            exc_info=True,
+        )
+
+
+def safe_enqueue_generation_task(
+    task: Any,
+    generation_task_repository: Any,
+    *,
+    user_id: str = "",
+    log_prefix: str = "[任务队列]",
+    log_task_status: bool = False,
+    user_pending_limit: int = USER_PENDING_LIMIT,
+    global_pending_limit: int = GLOBAL_PENDING_LIMIT,
+) -> bool:
+    """安全入队：入队前限流检查 → 发送 Celery 任务 → 入队后最终校验兜底。
+
+    边界说明：
+    入队前检查用 > 而非 >=。因为调用此函数时 task 已经是 pending 状态并计入 DB，
+    pending 总数包含了当前任务本身。pending > limit 等价于"其他任务数 >= limit"，
+    与预检查的 >= 语义一致（都是达到上限就拒绝新任务）。
+
+    入队后最终校验：发送 Celery 成功后再查一次 DB 计数，处理并发竞态场景
+    （两个请求同时通过入队前检查，后到的那个在这里被兜住）。
+
+    Args:
+        task: 生成任务对象，需有 id 属性和 mark_failed 方法（状态已为 pending）
+        generation_task_repository: 任务仓储，用于更新状态
+        user_id: 用户 ID，传了才做用户级限流检查
+        log_prefix: 日志前缀，便于区分调用来源
+        log_task_status: 成功日志中是否额外打印任务状态
+        user_pending_limit: 单用户 pending 上限，默认 USER_PENDING_LIMIT
+        global_pending_limit: 全局 pending 上限，默认 GLOBAL_PENDING_LIMIT
+
+    Returns:
+        True 表示入队成功，False 表示入队失败（已标记为 failed）
+
+    Raises:
+        GlobalQueueFull: 全局 pending 超限时抛出，任务会被标记为 failed
+        UserPendingLimitExceeded: 用户 pending 超限时抛出，任务会被标记为 failed
+    """
+    # ── 入队前检查：任务已是 pending，用 > 判断（包含当前任务） ──
+
+    # 全局限流检查（始终生效）
+    global_pending = generation_task_repository.count_pending_total()
+    if global_pending > global_pending_limit:
+        logger.warning(
+            "[队列限流] 全局 pending 任务数超限(入队前): %d/%d, user_id=%s",
+            global_pending,
+            global_pending_limit,
+            user_id or "unknown",
+        )
+        exc = GlobalQueueFull(pending_count=global_pending, limit=global_pending_limit)
+        _mark_task_failed_safely(task, generation_task_repository, log_prefix, str(exc))
+        raise exc
+
+    # 用户级限流检查（传了 user_id 才做）
+    if user_id:
+        user_pending = generation_task_repository.count_pending_by_user(user_id)
+        if user_pending > user_pending_limit:
+            logger.warning(
+                "[队列限流] 用户 pending 任务数超限(入队前): user_id=%s, count=%d/%d",
+                user_id,
+                user_pending,
+                user_pending_limit,
+            )
+            exc = UserPendingLimitExceeded(user_id=user_id, pending_count=user_pending, limit=user_pending_limit)
+            _mark_task_failed_safely(task, generation_task_repository, log_prefix, str(exc))
+            raise exc
+
+    # ── 发送 Celery 任务 ──
+    try:
+        celery_app.send_task("worker.generate_video", args=[task.id])
+    except Exception as e:
+        logger.error(
+            "%s 入队失败，标记为失败: task_id=%s error=%s",
+            log_prefix,
+            task.id,
+            e,
+            exc_info=True,
+        )
+        try:
+            task.mark_failed(f"任务入队失败: {e}")
+            generation_task_repository.update(task)
+        except Exception as update_err:
+            logger.error(
+                "%s 入队失败后更新状态也失败: task_id=%s error=%s",
+                log_prefix,
+                task.id,
+                update_err,
+                exc_info=True,
+            )
+        return False
+
+    # ── 入队后最终校验：并发竞态兜底 ──
+    # 发送成功后再查一次，防止两个请求同时通过入队前检查导致超限
+    global_after = generation_task_repository.count_pending_total()
+    user_after = generation_task_repository.count_pending_by_user(user_id) if user_id else 0
+
+    global_over = global_after > global_pending_limit
+    user_over = bool(user_id and user_after > user_pending_limit)
+
+    if global_over or user_over:
+        if global_over:
+            reason = f"全局 pending 超限(入队后): {global_after}/{global_pending_limit}"
+            exc: Exception = GlobalQueueFull(pending_count=global_after, limit=global_pending_limit)
+        else:
+            reason = f"用户 pending 超限(入队后): {user_after}/{user_pending_limit}"
+            exc = UserPendingLimitExceeded(user_id=user_id, pending_count=user_after, limit=user_pending_limit)
+
+        logger.warning(
+            "[队列限流] %s, task_id=%s, user_id=%s — 回滚状态为 failed",
+            reason,
+            task.id,
+            user_id or "unknown",
+        )
+        _mark_task_failed_safely(task, generation_task_repository, log_prefix, reason)
+        raise exc
+
+    # 入队成功日志
+    if log_task_status:
+        logger.info(
+            "%s 入队成功: task_id=%s, status=%s",
+            log_prefix,
+            task.id,
+            task.status,
+        )
+    else:
+        logger.info("%s 入队成功: task_id=%s", log_prefix, task.id)
+    return True

apps/api/app/dependencies.py

@@ -39,6 +39,7 @@ from packages.adapters.sqlalchemy_impl.project_repository import (
     SQLAlchemyProjectRepository,
 )
 from packages.adapters.sqlalchemy_impl.session import build_session_factory
+from packages.adapters.sqlalchemy_impl.tag_repository import SQLAlchemyTagRepository
 from packages.adapters.sqlalchemy_impl.title_library_repository import (
     SQLAlchemyTitleLibraryRepository,
 )
@@ -49,19 +50,8 @@ from packages.adapters.sqlalchemy_impl.voice_clone_profile_repository import (
 from packages.adapters.sqlalchemy_impl.voice_library_repository import (
     SQLAlchemyVoiceLibraryRepository,
 )
-from packages.ports.asset_library_repository import AssetLibraryRepository
-from packages.ports.asset_repository import AssetRepository
-from packages.ports.classification_job_repository import ClassificationJobRepository
-from packages.ports.duplication_repository import DuplicationRecordRepository
-from packages.ports.generated_video_repository import GeneratedVideoRepository
-from packages.ports.generation_task_repository import GenerationTaskRepository
-from packages.ports.ingest_job_repository import IngestJobRepository
-from packages.ports.job_repository import JobRepository
-from packages.ports.project_repository import ProjectRepository
-from packages.ports.title_library_repository import TitleLibraryRepository
+from packages.ports.tag_repository import TagRepository
 from packages.ports.user_repository import UserRepository
-from packages.ports.voice_clone_profile_repository import VoiceCloneProfileRepository
-from packages.ports.voice_library_repository import VoiceLibraryRepository
 
 _engine, _SessionLocal = build_session_factory(settings.DATABASE_URL)
 
@@ -138,6 +128,13 @@ def get_project_repository(
     return SQLAlchemyProjectRepository(session)
 
 
+def get_tag_repository(
+    session: Session = Depends(get_db_session),
+) -> TagRepository:
+    """Provide the SQLAlchemy tag repository implementation."""
+    return SQLAlchemyTagRepository(session)
+
+
 def get_user_repository(
     session: Session = Depends(get_db_session),
 ) -> UserRepository:
@@ -192,7 +189,37 @@ def get_voice_clone_profile_repository(
 
 
 def get_cosyvoice_service():
-    """Provide the CosyVoice service instance."""
+    """Provide the CosyVoice service instance.
+
+    注入 OSS 音频URL预签名函数，确保私有bucket下的参考音频
+    能被 CosyVoice 服务器下载。
+    """
+    from app.core.storage import get_storage_service
+
     from packages.application.cosyvoice_service import CosyVoiceService
 
-    return CosyVoiceService()
+    storage = get_storage_service()
+
+    def _sign_audio_url(url: str) -> str:
+        """对音频URL做预签名，私有bucket下 CosyVoice 服务器才能下载."""
+        return storage.get_download_url(url, expires_seconds=86400)
+
+    return CosyVoiceService(audio_url_signer=_sign_audio_url)
+
+
+def get_audio_url_signer():
+    """提供音频URL预签名函数（24小时有效期）。
+
+    用于所有 API 返回给前端的音频 URL，确保私有 OSS bucket 下可正常访问。
+    空 URL、非 OSS URL 直接原样返回；签名失败时回退到原始 URL。
+    """
+    from app.core.storage import get_storage_service
+
+    storage = get_storage_service()
+
+    def sign_audio_url(url: str) -> str:
+        if not url:
+            return url
+        return storage.get_download_url(url, expires_seconds=86400)
+
+    return sign_audio_url

apps/api/app/middleware/auth.py

@@ -7,12 +7,16 @@ common auth dependencies for backward compatibility.
 
 from __future__ import annotations
 
+import logging
+
 from app.auth import AuthenticatedUser
 from app.auth import get_current_user as get_authenticated_user
 from app.dependencies import get_user_repository
-from fastapi import Depends
+from fastapi import Depends, HTTPException
 from fastapi.security import HTTPAuthorizationCredentials, HTTPBearer
 
+logger = logging.getLogger(__name__)
+
 from packages.domain.entities import User
 from packages.ports.user_repository import UserRepository
 
@@ -33,6 +37,10 @@ async def get_current_user_optional(
         return None
     try:
         authenticated_user = await get_authenticated_user(credentials, user_repository)
-    except HTTPException:
+    except HTTPException as exc:
+        if exc.status_code >= 500:
+            # 服务端错误不应被静默吞掉，记录日志
+            logger.error("可选认证遇到服务端错误，status=%s", exc.status_code, exc_info=True)
+        # 4xx 认证失败（如 token 无效、用户不存在）属于正常流程，返回 None
         return None
     return authenticated_user.user

apps/api/app/middleware/monitoring.py

@@ -6,7 +6,7 @@ import logging
 import time
 from typing import Callable
 
-from fastapi import Request, Response
+from fastapi import Request
 from starlette.middleware.base import BaseHTTPMiddleware
 
 logger = logging.getLogger(__name__)

apps/api/app/middleware/versioning.py

@@ -61,7 +61,7 @@ class APIVersionMiddleware(BaseHTTPMiddleware):
 class VersionNotFoundMiddleware(BaseHTTPMiddleware):
     """处理已下线的 API 版本"""
 
-    SUNSET_VERSIONS = []  # 已下线的版本列表
+    SUNSET_VERSIONS: list[str] = []  # 已下线的版本列表
 
     async def dispatch(self, request: Request, call_next):
         version = self._extract_version(request.url.path)

apps/api/app/schemas/asset.py

@@ -25,6 +25,12 @@ class UpdateAssetReviewRequest(BaseModel):
     review_status: str = Field(..., pattern="^(pending_review|approved|rejected)$")
 
 
+class UpdateAssetRequest(BaseModel):
+    name: str | None = Field(default=None, min_length=1, max_length=100)
+    metadata: dict[str, object] | None = None
+    tags: list[str] | None = None
+
+
 class AssetResponse(BaseModel):
     id: str
     project_id: str
@@ -45,7 +51,52 @@ class AssetResponse(BaseModel):
     classification_status: str
     quality_score: float | None = None
     uploaded_by_user_id: str
+    tag_ids: list[str] = Field(default_factory=list)
+
+
+MAX_BATCH_SIZE = 200
+
+
+class BatchDeleteRequest(BaseModel):
+    """批量删除请求（软删除）。"""
+
+    asset_ids: list[str] = Field(..., min_length=1, max_length=MAX_BATCH_SIZE, description="要删除的素材 ID 列表")
+
+
+class BatchOperationResponse(BaseModel):
+    """批量操作通用响应。"""
+
+    success_count: int = Field(..., ge=0, description="成功数量")
+    failed_ids: list[str] = Field(default_factory=list, description="失败的 ID 列表")
+    failed_details: dict[str, str] = Field(default_factory=dict, description="失败详情 {asset_id: reason}")
+
+
+class BatchTagRequest(BaseModel):
+    """批量打标签请求。"""
+
+    asset_ids: list[str] = Field(..., min_length=1, max_length=MAX_BATCH_SIZE, description="素材 ID 列表")
+    tag_ids: list[str] = Field(..., min_length=1, max_length=50, description="标签 ID 列表")
+    mode: str = Field(default="add", pattern="^(add|replace)$", description="add=添加合并，replace=全量替换")
+
+
+class BatchClassifyRequest(BaseModel):
+    """批量修改分类请求。"""
+
+    asset_ids: list[str] = Field(..., min_length=1, max_length=MAX_BATCH_SIZE, description="素材 ID 列表")
+    category: str = Field(..., min_length=1, max_length=50, description="内容分类，如 person/scenic/product")
+
+
+class BatchMarkRequest(BaseModel):
+    """批量设置智能视图标记请求。"""
+
+    asset_ids: list[str] = Field(..., min_length=1, max_length=MAX_BATCH_SIZE, description="素材 ID 列表")
+    smart_view: str = Field(
+        ..., pattern="^(recommended|caution|high_risk)$", description="智能视图标记：recommended/caution/high_risk"
+    )
 
 
 class ListAssetsResponse(BaseModel):
     items: list[AssetResponse]
+    total: int = Field(default=0, ge=0)
+    skip: int = Field(default=0, ge=0)
+    limit: int = Field(default=100, ge=1)

apps/api/app/schemas/asset_library.py

@@ -18,3 +18,8 @@ class AssetLibraryResponse(BaseModel):
 
 class ListAssetLibrariesResponse(BaseModel):
     items: list[AssetLibraryResponse]
+
+
+class EnsureDefaultLibraryRequest(BaseModel):
+    project_id: str = Field(..., min_length=1)
+    kind: str = Field(..., pattern="^(video|voice|image)$")

apps/api/app/schemas/chunked_upload.py

@@ -36,9 +36,12 @@ class ChunkedUploadStatusResponse(BaseModel):
 class ChunkedUploadCompleteRequest(BaseModel):
     project_id: str = Field(..., min_length=1, description="Project ID")
     library_id: str = Field(..., min_length=1, description="Asset library ID")
+    file_hash: str = Field(default="", max_length=64, description="文件 MD5 哈希，用于去重检测")
 
 
 class ChunkedUploadCompleteResponse(BaseModel):
     storage_key: str = Field(..., description="Storage key")
     ingest_job_id: str = Field(..., description="Ingest job ID")
     url: str = Field(..., description="File URL")
+    duplicated: bool = Field(default=False, description="是否为重复素材（命中去重）")
+    asset_id: str = Field(default="", description="重复素材的 asset_id（duplicated=true 时返回）")

apps/api/app/schemas/dashboard.py

@@ -1,32 +0,0 @@
-from datetime import datetime
-
-from pydantic import BaseModel, Field
-
-
-class RecentTaskItem(BaseModel):
-    id: str
-    task_type: str = "generation"
-    status: str
-    current_step: str = ""
-    error_message: str = ""
-    updated_at: datetime | None = None
-
-
-class SubscriptionInfo(BaseModel):
-    """用户订阅信息。"""
-
-    plan: str = "free"
-    is_active: bool = False
-
-
-class DashboardOverviewResponse(BaseModel):
-    """Dashboard 概览数据。"""
-
-    total_assets: int = 0
-    used_storage_bytes: int = 0
-    total_titles: int = 0
-    total_voices: int = 0
-    total_tasks: int = 0
-    total_products: int = 0
-    subscription: SubscriptionInfo = Field(default_factory=SubscriptionInfo)
-    recent_tasks: list[RecentTaskItem] = Field(default_factory=list)

apps/api/app/schemas/generation_task.py

@@ -1,4 +1,6 @@
-from pydantic import BaseModel, Field, model_validator
+import json
+
+from pydantic import BaseModel, Field, field_validator, model_validator
 
 
 class CreateGenerationTaskRequest(BaseModel):
@@ -21,6 +23,27 @@ class CreateGenerationTaskRequest(BaseModel):
     voice_ids: list[str] = Field(default_factory=list)
     # ── 来源剪辑计划 ──
     source_edit_plan_id: str = ""
+    # ── 批量生成 ──
+    count: int = Field(default=1, ge=1, le=50, description="批量生成数量，默认1，最大50")
+    # ── 素材库自动匹配 ──
+    asset_select_mode: str = Field(
+        default="all",
+        description="素材选取模式：all=全部ready视频, random=随机选取, smart=智能匹配（按质量/时长评分）",
+    )
+    asset_select_count: int = Field(
+        default=0, ge=0, le=100, description="选取数量，0表示全部（仅 random/smart 模式有效）"
+    )
+    # ── 自动重试 ──
+    auto_retry_enabled: bool = Field(
+        default=False,
+        description="是否开启失败自动重试，默认关闭",
+    )
+    auto_retry_max: int = Field(
+        default=0,
+        ge=0,
+        le=5,
+        description="最大自动重试次数，0表示不自动重试，最大5次",
+    )
 
     @model_validator(mode="after")
     def _check_at_least_one_mode(self) -> "CreateGenerationTaskRequest":
@@ -46,10 +69,38 @@ class GenerationTaskResponse(BaseModel):
     title_ids: list[str] = Field(default_factory=list)
     voice_ids: list[str] = Field(default_factory=list)
     source_edit_plan_id: str = ""
+    asset_select_mode: str = ""
+    batch_id: str = ""
     status: str
     progress: float
     result_count: int
     error_message: str
+    error_info: dict = Field(default_factory=dict)
+    retry_count: int = 0
+    auto_retry_enabled: bool = False
+    auto_retry_max: int = 0
+    logs: list[dict] = Field(default_factory=list)
+
+    @field_validator("logs", mode="before")
+    @classmethod
+    def _parse_logs(cls, v: object) -> list[dict]:
+        """将 JSON 字符串解析为 list[dict]。"""
+        if isinstance(v, str):
+            try:
+                parsed = json.loads(v)
+                return parsed if isinstance(parsed, list) else []
+            except (json.JSONDecodeError, TypeError):
+                return []
+        if isinstance(v, list):
+            return v
+        return []
+
+
+class BatchGenerationTaskResponse(BaseModel):
+    """批量生成任务响应。"""
+
+    items: list[GenerationTaskResponse]
+    total: int
 
 
 class ListGenerationTasksResponse(BaseModel):

apps/api/app/schemas/job.py

@@ -1,109 +0,0 @@
-"""Job API schemas — Phase 8 任务 2.10."""
-
-from __future__ import annotations
-
-from datetime import datetime
-from typing import Any, Optional
-
-from pydantic import BaseModel, Field
-
-
-class CreateJobRequest(BaseModel):
-    """创建任务请求体。"""
-
-    project_id: str = Field(..., min_length=1, description="项目 ID")
-    job_type: str = Field(
-        ...,
-        description="任务类型: video_compose / render_edit_plan / asset_ingest / classification / voice_extraction / generation",
-    )
-    payload: dict[str, Any] = Field(default_factory=dict, description="任务输入参数")
-    source_id: str = Field(default="", description="关联的业务实体 ID（如 edit_plan_id）")
-    max_retries: int = Field(default=3, ge=0, le=10, description="最大重试次数")
-
-
-class UpdateProgressRequest(BaseModel):
-    """更新任务进度请求体。"""
-
-    progress: float = Field(..., ge=0.0, le=100.0, description="进度百分比")
-    current_stage: str = Field(default="", description="当前阶段描述")
-
-
-class CompleteJobRequest(BaseModel):
-    """完成任务请求体。"""
-
-    result: dict[str, Any] = Field(default_factory=dict, description="任务结果")
-
-
-class FailJobRequest(BaseModel):
-    """标记任务失败请求体。"""
-
-    error_message: str = Field(..., min_length=1, description="错误信息")
-
-
-class JobResponse(BaseModel):
-    """任务响应体。"""
-
-    id: str
-    project_id: str
-    job_type: str
-    status: str
-    progress: float
-    current_stage: str
-    payload: dict[str, Any]
-    result: dict[str, Any]
-    error_message: str
-    retry_count: int
-    max_retries: int
-    celery_task_id: str
-    source_id: str
-    created_by_user_id: str
-    is_retryable: bool
-    started_at: Optional[datetime] = None
-    completed_at: Optional[datetime] = None
-    created_at: datetime
-    updated_at: datetime
-
-    model_config = {"from_attributes": True}
-
-
-class ListJobsResponse(BaseModel):
-    """任务列表响应体。"""
-
-    items: list[JobResponse]
-    total: int
-
-
-class JobStatisticsResponse(BaseModel):
-    """任务统计响应体。"""
-
-    project_id: str
-    total: int
-    pending: int
-    running: int
-    success: int
-    failed: int
-
-
-def job_to_response(job) -> JobResponse:
-    """将 Job 领域对象转换为 API 响应。"""
-    return JobResponse(
-        id=job.id,
-        project_id=job.project_id,
-        job_type=job.job_type.value if hasattr(job.job_type, "value") else str(job.job_type),
-        status=job.status.value if hasattr(job.status, "value") else str(job.status),
-        progress=job.progress,
-        current_stage=job.current_stage,
-        payload=job.payload,
-        result=job.result,
-        error_message=job.error_message,
-        retry_count=job.retry_count,
-        max_retries=job.max_retries,
-        celery_task_id=job.celery_task_id,
-        source_id=job.source_id,
-        created_by_user_id=job.created_by_user_id,
-        is_retryable=job.is_retryable,
-        started_at=job.started_at,
-        completed_at=job.completed_at,
-        created_at=job.created_at,
-        updated_at=job.updated_at,
-    )

apps/api/app/schemas/recipe.py

@@ -1,86 +0,0 @@
-"""Recipe API schemas."""
-
-from __future__ import annotations
-
-from datetime import datetime
-from typing import Any, Dict, List, Optional
-
-from pydantic import BaseModel, Field
-
-# ── Response ──
-
-
-class RecipeItemResponse(BaseModel):
-    id: str
-    recipe_id: str
-    item_type: str
-    item_id: str
-    position: int
-    metadata_: Dict[str, Any] = Field(default_factory=dict, alias="metadata")
-
-    class Config:
-        populate_by_name = True
-
-
-class RecipeResponse(BaseModel):
-    id: str
-    user_id: str
-    name: str
-    description: str = ""
-    template_id: str = ""
-    generation_params: Dict[str, Any] = Field(default_factory=dict)
-    items: List[RecipeItemResponse] = Field(default_factory=list)
-    is_active: bool = True
-    metadata_: Dict[str, Any] = Field(default_factory=dict, alias="metadata")
-    created_at: datetime
-    updated_at: datetime
-
-    class Config:
-        populate_by_name = True
-
-
-class ListRecipesResponse(BaseModel):
-    items: List[RecipeResponse]
-    total: int = 0
-
-
-class UseRecipeResponse(BaseModel):
-    recipe: RecipeResponse
-    warnings: List[Dict[str, Any]] = Field(default_factory=list)
-
-
-# ── Request ──
-
-
-class RecipeItemRequest(BaseModel):
-    item_type: str
-    item_id: str
-    position: int = 0
-    metadata_: Dict[str, Any] = Field(default_factory=dict, alias="metadata")
-
-    class Config:
-        populate_by_name = True
-
-
-class CreateRecipeRequest(BaseModel):
-    name: str
-    description: str = ""
-    template_id: str = ""
-    generation_params: Dict[str, Any] = Field(default_factory=dict)
-    items: List[RecipeItemRequest] = Field(default_factory=list)
-    metadata_: Dict[str, Any] = Field(default_factory=dict, alias="metadata")
-
-    class Config:
-        populate_by_name = True
-
-
-class UpdateRecipeRequest(BaseModel):
-    name: Optional[str] = None
-    description: Optional[str] = None
-    template_id: Optional[str] = None
-    generation_params: Optional[Dict[str, Any]] = None
-    items: Optional[List[RecipeItemRequest]] = None
-    metadata_: Optional[Dict[str, Any]] = Field(default=None, alias="metadata")
-
-    class Config:
-        populate_by_name = True

apps/api/app/schemas/subscription.py

@@ -2,7 +2,7 @@
 
 from __future__ import annotations
 
-from typing import List, Optional
+from typing import Optional
 
 from pydantic import BaseModel, Field
 

apps/api/app/schemas/tag.py

@@ -0,0 +1,24 @@
+"""标签相关 Schema。"""
+
+from datetime import datetime
+
+from pydantic import BaseModel, Field
+
+
+class CreateTagRequest(BaseModel):
+    name: str = Field(..., min_length=1, max_length=100)
+
+
+class TagResponse(BaseModel):
+    id: str
+    name: str
+    created_at: datetime
+
+
+class ListTagsResponse(BaseModel):
+    items: list[TagResponse]
+    total: int = Field(default=0, ge=0)
+
+
+class TagAssetsRequest(BaseModel):
+    tag_ids: list[str] = Field(..., min_length=1, max_length=50)

apps/api/app/schemas/task_center.py

@@ -11,8 +11,10 @@ class ProjectTaskResponse(BaseModel):
     progress: float
     current_step: str
     error_message: str = ""
+    error_info: dict = Field(default_factory=dict)
     user_message: str = ""
     retryable: bool = False
+    retry_count: int = 0
     source_id: str = ""
     template_id: str = ""
     created_at: datetime | None = None
@@ -21,6 +23,7 @@ class ProjectTaskResponse(BaseModel):
 
 class ListProjectTasksResponse(BaseModel):
     items: list[ProjectTaskResponse] = Field(default_factory=list)
+    total: int = 0
 
 
 class UserTaskResponse(BaseModel):
@@ -34,8 +37,10 @@ class UserTaskResponse(BaseModel):
     progress: float
     current_step: str
     error_message: str = ""
+    error_info: dict = Field(default_factory=dict)
     user_message: str = ""
     retryable: bool = False
+    retry_count: int = 0
     source_id: str = ""
     created_at: datetime | None = None
     updated_at: datetime | None = None
@@ -45,3 +50,4 @@ class ListTasksResponse(BaseModel):
     """用户级任务列表响应（GET /api/v1/tasks）。"""
 
     items: list[UserTaskResponse] = Field(default_factory=list)
+    total: int = 0

apps/api/app/schemas/template.py

@@ -45,6 +45,7 @@ class TemplateResponse(BaseModel):
     segments: List[SegmentResponse] = Field(default_factory=list)
     is_active: bool = True
     is_favorite: bool = False
+    usage_count: int = 0
     created_at: datetime
     updated_at: datetime
 
@@ -120,3 +121,25 @@ class CreateCategoryRequest(BaseModel):
 
 class ListCategoriesResponse(BaseModel):
     items: List[CategoryResponse]
+
+
+# ── Copy Template ──
+
+
+class CopyTemplateRequest(BaseModel):
+    new_name: str
+
+
+# ── Tags ──
+
+
+class ListTagsResponse(BaseModel):
+    items: List[str]
+
+
+# ── Usage Stats ──
+
+
+class TemplateUsageResponse(BaseModel):
+    template_id: str
+    usage_count: int

apps/api/app/schemas/tts.py

@@ -83,3 +83,21 @@ class ListTTSJobResponse(BaseModel):
     total: int
     page: int
     page_size: int
+
+
+class SaveToLibraryRequest(BaseModel):
+    """保存到配音库请求。"""
+
+    name: Optional[str] = Field(None, description="配音素材名称，留空则自动生成")
+
+
+class SaveToLibraryResponse(BaseModel):
+    """保存到配音库响应。"""
+
+    id: str
+    name: str
+    audio_url: str
+    duration: float
+    voice_id: str
+    voice_name: str
+    status: str

apps/api/app/schemas/upload.py

@@ -6,12 +6,7 @@ class UploadAssetRequest(BaseModel):
 
     project_id: str = Field(..., min_length=1, description="项目 ID")
     library_id: str = Field(..., min_length=1, description="素材库 ID")
-
-
-class UploadAssetResponse(BaseModel):
-    storage_key: str
-    ingest_job_id: str
-    url: str = Field(..., description="Public URL of uploaded file")
+    file_hash: str = Field(default="", max_length=64, description="文件 MD5 哈希，用于去重检测")
 
 
 class DirectUploadPrepareRequest(BaseModel):
@@ -20,6 +15,7 @@ class DirectUploadPrepareRequest(BaseModel):
     filename: str = Field(..., min_length=1, max_length=255)
     content_type: str = Field(default="application/octet-stream", min_length=1, max_length=100)
     file_size: int = Field(..., gt=0)
+    file_hash: str = Field(default="", max_length=64, description="文件 MD5 哈希，用于去重检测")
 
 
 class DirectUploadPrepareResponse(BaseModel):
@@ -35,8 +31,19 @@ class DirectUploadCompleteRequest(BaseModel):
     project_id: str = Field(..., min_length=1)
     library_id: str = Field(..., min_length=1)
     storage_key: str = Field(..., min_length=1, max_length=255)
+    file_hash: str = Field(default="", max_length=64, description="文件 MD5 哈希，用于去重检测")
 
 
 class DirectUploadCompleteResponse(BaseModel):
     storage_key: str
     ingest_job_id: str
+    duplicated: bool = Field(default=False, description="是否为重复素材（命中去重）")
+    asset_id: str = Field(default="", description="重复素材的 asset_id（duplicated=true 时返回）")
+
+
+class UploadAssetResponse(BaseModel):
+    storage_key: str
+    ingest_job_id: str
+    url: str = Field(..., description="Public URL of uploaded file")
+    duplicated: bool = Field(default=False, description="是否为重复素材（命中去重）")
+    asset_id: str = Field(default="", description="重复素材的 asset_id（duplicated=true 时返回）")

apps/api/app/schemas/video_center.py

@@ -0,0 +1,45 @@
+from typing import Literal
+
+from pydantic import BaseModel, Field
+
+VideoReviewStatus = Literal["pending_review", "approved", "rejected"]
+
+
+class VideoItemResponse(BaseModel):
+    id: str
+    project_id: str
+    generation_task_id: str
+    name: str
+    file_url: str
+    file_size: int
+    duration: float
+    thumbnail_url: str | None = None
+    width: int
+    height: int
+    fps: float
+    status: str = "completed"
+    review_status: str = "pending_review"
+    generation_params: dict = Field(default_factory=dict)
+    download_url: str | None = None
+    generated_at: str = ""
+
+
+class ListVideosResponse(BaseModel):
+    items: list[VideoItemResponse]
+    total: int
+    page: int
+    page_size: int
+
+
+class UpdateVideoReviewRequest(BaseModel):
+    review_status: VideoReviewStatus
+
+
+class BatchDownloadRequest(BaseModel):
+    video_ids: list[str]
+
+
+class BatchDownloadResponse(BaseModel):
+    job_id: str
+    status: str = "pending"
+    download_url: str | None = None

apps/api/app/services/__init__.py

@@ -4,6 +4,7 @@ from .auto_clip_service import AutoClipService
 from .edit_plan_service import EditPlanService
 from .edit_template_service import EditTemplateService
 from .job_service import JobService
+from .plan_generator_service import PlanGeneratorService
 from .video_compose_service import VideoComposeService
 
 __all__ = [
@@ -11,5 +12,6 @@ __all__ = [
     "EditPlanService",
     "EditTemplateService",
     "JobService",
+    "PlanGeneratorService",
     "VideoComposeService",
 ]

apps/api/app/services/auto_clip_service.py

@@ -24,7 +24,7 @@ from packages.adapters.sqlalchemy_impl import (
 )
 from packages.domain.asset import AssetType
 from packages.domain.classification import AssetClassification
-from packages.domain.edit_plan_clip import EditPlanClip, EditPlanClipStatus
+from packages.domain.edit_plan_clip import EditPlanClip
 
 logger = logging.getLogger(__name__)
 

apps/api/app/services/edit_plan_service.py

@@ -18,7 +18,6 @@ from packages.adapters.sqlalchemy_impl import (
 )
 from packages.domain.edit_plan import EditPlan, EditPlanStatus
 from packages.domain.edit_plan_clip import EditPlanClip, EditPlanClipStatus
-from packages.domain.generation_task import GenerationTaskStatus
 
 logger = logging.getLogger(__name__)
 
@@ -282,6 +281,8 @@ class EditPlanService:
         start_time: float = 0.0,
         duration: float = 0.0,
         transition_effect: str = "cut",
+        transition_duration: float = 0.0,
+        playback_speed: float = 1.0,
         config: Optional[dict[str, Any]] = None,
     ) -> EditPlanClip:
         """创建片段
@@ -302,6 +303,8 @@ class EditPlanService:
             start_time=start_time,
             duration=duration,
             transition_effect=transition_effect,
+            transition_duration=transition_duration,
+            playback_speed=playback_speed,
             config=config,
         )
         created = self._clip_repo.create(clip)
@@ -325,6 +328,8 @@ class EditPlanService:
         start_time: Optional[float] = None,
         duration: Optional[float] = None,
         transition_effect: Optional[str] = None,
+        transition_duration: Optional[float] = None,
+        playback_speed: Optional[float] = None,
         config: Optional[dict[str, Any]] = None,
     ) -> EditPlanClip:
         """更新片段
@@ -334,6 +339,15 @@ class EditPlanService:
         """
         existing = self.get_clip_or_raise(clip_id)
 
+        # 速度边界钳制
+        if playback_speed is not None:
+            if playback_speed <= 0:
+                playback_speed = 1.0
+            elif playback_speed < 0.25:
+                playback_speed = 0.25
+            elif playback_speed > 4.0:
+                playback_speed = 4.0
+
         updated = EditPlanClip(
             id=existing.id,
             plan_id=existing.plan_id,
@@ -347,6 +361,10 @@ class EditPlanService:
             transition_effect=(
                 transition_effect.strip() if transition_effect is not None else existing.transition_effect
             ),
+            transition_duration=(
+                transition_duration if transition_duration is not None else existing.transition_duration
+            ),
+            playback_speed=playback_speed if playback_speed is not None else existing.playback_speed,
             status=existing.status,
             config=config if config is not None else existing.config,
             created_at=existing.created_at,
@@ -447,12 +465,12 @@ class EditPlanService:
 
         # 检查状态
         if plan.status != EditPlanStatus.EDITING:
-            return False, f"只有 editing 状态的计划可以触发渲染，当前状态: {plan.status}"
+            return False, "请先编辑并保存模板后再生成视频"
 
         # 检查是否有片段
         clips = self._clip_repo.list_by_plan(plan_id)
         if not clips:
-            return False, "计划下没有片段，无法触发渲染"
+            return False, "请先添加片段后再生成视频"
 
         return True, ""
 

apps/api/app/services/edit_template_service.py

@@ -100,6 +100,7 @@ class EditTemplateService:
         *,
         description: str = "",
         template_type: str = "default",
+        editing_mode: str = "one_take",
         config: Optional[dict[str, Any]] = None,
         preview_url: str = "",
         sort_weight: int = 0,
@@ -124,6 +125,7 @@ class EditTemplateService:
             name=clean_name,
             description=description,
             template_type=template_type,
+            editing_mode=editing_mode,
             config=config,
             preview_url=preview_url,
             sort_weight=sort_weight,
@@ -139,6 +141,7 @@ class EditTemplateService:
         name: Optional[str] = None,
         description: Optional[str] = None,
         template_type: Optional[str] = None,
+        editing_mode: Optional[str] = None,
         config: Optional[dict[str, Any]] = None,
         preview_url: Optional[str] = None,
         sort_weight: Optional[int] = None,
@@ -165,6 +168,7 @@ class EditTemplateService:
             name=new_name,
             description=description.strip() if description is not None else existing.description,
             template_type=template_type.strip() if template_type is not None else existing.template_type,
+            editing_mode=editing_mode.strip() if editing_mode is not None else existing.editing_mode,
             config=config if config is not None else existing.config,
             preview_url=preview_url.strip() if preview_url is not None else existing.preview_url,
             sort_weight=sort_weight if sort_weight is not None else existing.sort_weight,

apps/api/app/services/job_service.py

@@ -13,8 +13,6 @@ from __future__ import annotations
 import logging
 from typing import Any
 
-from sqlalchemy.orm import Session
-
 from packages.application.jobs import (
     CancelJobUseCase,
     CompleteJobCommand,

apps/api/app/services/plan_generator_service.py

@@ -0,0 +1,391 @@
+"""PlanGeneratorService — 基于模板+素材自动生成剪辑计划.
+
+核心职责:
+- 根据 EditTemplate 的 editing_mode 和 TemplateClipConfig 列表，
+  自动生成 EditPlan + EditPlanClip 列表
+- 四种模式素材分配策略:
+  - ONE_TAKE: 素材顺序分配给 main 类型 clips
+  - PIP: 第1个素材→main(全屏背景)，其余→overlay clips
+  - VOICE_OVER: 素材→main clips (B-roll)，标记需要配音叠加
+  - VOICE_PIP: 第1个→background, 第2个→corner_voice, 其余→b_roll
+"""
+
+from __future__ import annotations
+
+import logging
+from typing import Any, List
+
+from sqlalchemy.orm import Session
+
+from packages.adapters.sqlalchemy_impl import (
+    SQLAlchemyEditPlanClipRepository,
+    SQLAlchemyEditPlanRepository,
+)
+from packages.domain.config_schemas import normalize_plan_config
+from packages.domain.edit_plan import EditPlan
+from packages.domain.edit_plan_clip import EditPlanClip
+from packages.domain.edit_template import EditTemplate
+from packages.domain.editing_mode import EditingMode
+from packages.domain.template_clip_config import ClipType, TemplateClipConfig
+
+logger = logging.getLogger(__name__)
+
+
+# ── 默认片段时长（秒） ────────────────────────────────────────────────────────
+_DEFAULT_CLIP_DURATION = 5.0
+_DEFAULT_INTRO_DURATION = 3.0
+_DEFAULT_OUTRO_DURATION = 3.0
+
+
+class PlanGeneratorService:
+    """剪辑计划生成器
+
+    基于模板 + 素材，自动生成 EditPlan 及 EditPlanClip 列表。
+    """
+
+    def __init__(self, db: Session) -> None:
+        self._plan_repo = SQLAlchemyEditPlanRepository(db)
+        self._clip_repo = SQLAlchemyEditPlanClipRepository(db)
+
+    # ── 公开接口 ─────────────────────────────────────────────────────────────
+
+    def generate_from_template(
+        self,
+        template: EditTemplate,
+        clip_configs: List[TemplateClipConfig],
+        asset_ids: List[str],
+        *,
+        project_id: str = "",
+        created_by_user_id: str = "",
+        name: str = "",
+    ) -> dict[str, Any]:
+        """基于模板+素材生成剪辑计划
+
+        Args:
+            template: 剪辑模板实体
+            clip_configs: 模板片段配置列表（可为空，自动生成默认结构）
+            asset_ids: 素材 ID 列表
+            project_id: 所属项目 ID
+            created_by_user_id: 创建者用户 ID
+            name: 计划名称（为空则自动取模板名）
+
+        Returns:
+            dict: {"plan": EditPlan, "clips": List[EditPlanClip]}
+        """
+        editing_mode = template.editing_mode or EditingMode.ONE_TAKE.value
+        plan_name = name.strip() or f"{template.name} - 剪辑计划"
+
+        # 1. 构建 plan config（继承模板的 title/subtitle/bgm，记录 editing_mode）
+        plan_config = self._build_plan_config(template, editing_mode)
+
+        # 2. 创建 EditPlan
+        plan = EditPlan.create(
+            template_id=template.id,
+            name=plan_name,
+            config=plan_config,
+            total_duration=0.0,
+            project_id=project_id,
+            created_by_user_id=created_by_user_id,
+        )
+        plan = self._plan_repo.create(plan)
+        logger.info(
+            "生成剪辑计划: plan_id=%s template=%s mode=%s assets=%d",
+            plan.id,
+            template.id,
+            editing_mode,
+            len(asset_ids),
+        )
+
+        # 3. 生成片段列表
+        if clip_configs:
+            clips = self._create_clips_from_configs(plan.id, clip_configs)
+        else:
+            clips = self._generate_default_clips(plan.id, editing_mode, len(asset_ids))
+
+        # 4. 按 editing_mode 分配素材
+        if asset_ids:
+            self._distribute_assets(clips, asset_ids, editing_mode)
+
+        # 5. 持久化所有 clips 并计算总时长
+        created_clips: List[EditPlanClip] = []
+        total_duration = 0.0
+        for clip in clips:
+            saved = self._clip_repo.create(clip)
+            created_clips.append(saved)
+            total_duration += saved.duration
+
+        # 6. 更新 plan 的 total_duration
+        plan.total_duration = total_duration
+        plan = self._plan_repo.update(plan)
+
+        # 7. 流转到 editing 状态
+        try:
+            plan.start_editing()
+            plan = self._plan_repo.update(plan)
+        except ValueError as exc:
+            logger.warning("计划状态流转失败: plan_id=%s error=%s", plan.id, exc)
+
+        logger.info(
+            "剪辑计划生成完成: plan_id=%s clips=%d duration=%.1f",
+            plan.id,
+            len(created_clips),
+            total_duration,
+        )
+
+        return {"plan": plan, "clips": created_clips}
+
+    # ── 内部方法 ─────────────────────────────────────────────────────────────
+
+    def _build_plan_config(
+        self,
+        template: EditTemplate,
+        editing_mode: str,
+    ) -> dict[str, Any]:
+        """从模板配置构建 plan config"""
+        template_config = template.config or {}
+        plan_config: dict[str, Any] = {
+            "editing_mode": editing_mode,
+        }
+        # 继承模板的 cover/title/subtitle/bgm 配置
+        for key in ("cover", "title", "subtitle", "bgm"):
+            if key in template_config:
+                plan_config[key] = template_config[key]
+
+        return normalize_plan_config(plan_config)
+
+    def _create_clips_from_configs(
+        self,
+        plan_id: str,
+        clip_configs: List[TemplateClipConfig],
+    ) -> List[EditPlanClip]:
+        """从 TemplateClipConfig 列表创建 EditPlanClip 列表（未持久化）"""
+        clips: List[EditPlanClip] = []
+        # 按 order 排序
+        sorted_configs = sorted(clip_configs, key=lambda c: c.order)
+
+        for cfg in sorted_configs:
+            # 计算时长：取 min_duration 和 max_duration 的中间值
+            if cfg.min_duration > 0 and cfg.max_duration > 0:
+                duration = (cfg.min_duration + cfg.max_duration) / 2
+            elif cfg.min_duration > 0:
+                duration = cfg.min_duration
+            elif cfg.max_duration > 0:
+                duration = cfg.max_duration
+            else:
+                duration = _DEFAULT_CLIP_DURATION
+
+            # clip_type 可能是枚举或字符串
+            clip_type = cfg.clip_type.value if hasattr(cfg.clip_type, "value") else cfg.clip_type
+
+            # transition_effect 可能是枚举或字符串
+            transition = (
+                cfg.transition_effect.value if hasattr(cfg.transition_effect, "value") else cfg.transition_effect
+            )
+
+            clip = EditPlanClip.create(
+                plan_id=plan_id,
+                clip_type=clip_type,
+                order=cfg.order,
+                template_clip_config_id=cfg.id,
+                text_content=getattr(cfg, "text_template", "") or "",
+                duration=duration,
+                transition_effect=transition or "cut",
+            )
+            clips.append(clip)
+
+        return clips
+
+    def _generate_default_clips(
+        self,
+        plan_id: str,
+        editing_mode: str,
+        asset_count: int,
+    ) -> List[EditPlanClip]:
+        """无 clip_configs 时，根据 editing_mode 生成默认 clip 结构
+
+        - ONE_TAKE: N 个 main clips（N = asset_count，至少1个）
+        - PIP: 1 个 main + (N-1) 个 overlay（N = asset_count）
+        - VOICE_OVER: N 个 main clips + 标记需要配音
+        - VOICE_PIP: 1 个 background + 1 个 corner_voice + (N-2) 个 b_roll
+        """
+        n = max(asset_count, 1)
+        clips: List[EditPlanClip] = []
+        order = 0
+
+        if editing_mode == EditingMode.PIP.value:
+            # 1 个 main（全屏背景）
+            clips.append(
+                EditPlanClip.create(
+                    plan_id=plan_id,
+                    clip_type=ClipType.MAIN.value,
+                    order=order,
+                    duration=_DEFAULT_CLIP_DURATION,
+                )
+            )
+            order += 1
+            # 剩余为 overlay
+            for i in range(1, n):
+                clips.append(
+                    EditPlanClip.create(
+                        plan_id=plan_id,
+                        clip_type="overlay",
+                        order=order,
+                        duration=_DEFAULT_CLIP_DURATION,
+                    )
+                )
+                order += 1
+
+        elif editing_mode == EditingMode.VOICE_OVER.value:
+            # N 个 main clips（B-roll）
+            for i in range(n):
+                clips.append(
+                    EditPlanClip.create(
+                        plan_id=plan_id,
+                        clip_type=ClipType.MAIN.value,
+                        order=order,
+                        duration=_DEFAULT_CLIP_DURATION,
+                        config={"role": "b_roll"},
+                    )
+                )
+                order += 1
+
+        elif editing_mode == EditingMode.VOICE_PIP.value:
+            # 1 个 background
+            clips.append(
+                EditPlanClip.create(
+                    plan_id=plan_id,
+                    clip_type="background",
+                    order=order,
+                    duration=_DEFAULT_CLIP_DURATION,
+                )
+            )
+            order += 1
+            # 1 个 corner_voice
+            clips.append(
+                EditPlanClip.create(
+                    plan_id=plan_id,
+                    clip_type="corner_voice",
+                    order=order,
+                    duration=_DEFAULT_CLIP_DURATION,
+                )
+            )
+            order += 1
+            # 剩余为 b_roll
+            for i in range(2, n):
+                clips.append(
+                    EditPlanClip.create(
+                        plan_id=plan_id,
+                        clip_type="b_roll",
+                        order=order,
+                        duration=_DEFAULT_CLIP_DURATION,
+                    )
+                )
+                order += 1
+
+        else:
+            # ONE_TAKE: N 个 main clips
+            for i in range(n):
+                clips.append(
+                    EditPlanClip.create(
+                        plan_id=plan_id,
+                        clip_type=ClipType.MAIN.value,
+                        order=order,
+                        duration=_DEFAULT_CLIP_DURATION,
+                    )
+                )
+                order += 1
+
+        return clips
+
+    def _distribute_assets(
+        self,
+        clips: List[EditPlanClip],
+        asset_ids: List[str],
+        editing_mode: str,
+    ) -> None:
+        """按 editing_mode 将素材分配到 clips（就地修改，未持久化）
+
+        分配策略:
+        - ONE_TAKE: 素材按顺序依次分配给 main 类型 clips
+        - PIP: 第1个素材→main(全屏背景)，其余→交替分配给 overlay clips
+        - VOICE_OVER: 素材→main clips (B-roll)
+        - VOICE_PIP: 第1个→background, 第2个→corner_voice, 其余→b_roll
+        """
+        if not asset_ids or not clips:
+            return
+
+        if editing_mode == EditingMode.ONE_TAKE.value:
+            self._distribute_one_take(clips, asset_ids)
+        elif editing_mode == EditingMode.PIP.value:
+            self._distribute_pip(clips, asset_ids)
+        elif editing_mode == EditingMode.VOICE_OVER.value:
+            self._distribute_voice_over(clips, asset_ids)
+        elif editing_mode == EditingMode.VOICE_PIP.value:
+            self._distribute_voice_pip(clips, asset_ids)
+        else:
+            # 未知模式，退化为 one_take
+            self._distribute_one_take(clips, asset_ids)
+
+    def _distribute_one_take(
+        self,
+        clips: List[EditPlanClip],
+        asset_ids: List[str],
+    ) -> None:
+        """ONE_TAKE: 素材按顺序依次分配给 main 类型 clips"""
+        main_clips = [c for c in clips if c.clip_type == ClipType.MAIN.value]
+        for i, clip in enumerate(main_clips):
+            if i < len(asset_ids):
+                clip.assign_asset(asset_ids[i])
+
+    def _distribute_pip(
+        self,
+        clips: List[EditPlanClip],
+        asset_ids: List[str],
+    ) -> None:
+        """PIP: 第1个素材→main(全屏背景)，其余→overlay clips"""
+        # 第1个素材 → main clip
+        main_clips = [c for c in clips if c.clip_type == ClipType.MAIN.value]
+        if main_clips and asset_ids:
+            main_clips[0].assign_asset(asset_ids[0])
+
+        # 其余素材 → overlay clips
+        overlay_clips = [c for c in clips if c.clip_type == "overlay"]
+        remaining = asset_ids[1:]
+        for i, clip in enumerate(overlay_clips):
+            if i < len(remaining):
+                clip.assign_asset(remaining[i])
+
+    def _distribute_voice_over(
+        self,
+        clips: List[EditPlanClip],
+        asset_ids: List[str],
+    ) -> None:
+        """VOICE_OVER: 素材→main clips (B-roll)"""
+        main_clips = [c for c in clips if c.clip_type == ClipType.MAIN.value]
+        for i, clip in enumerate(main_clips):
+            if i < len(asset_ids):
+                clip.assign_asset(asset_ids[i])
+
+    def _distribute_voice_pip(
+        self,
+        clips: List[EditPlanClip],
+        asset_ids: List[str],
+    ) -> None:
+        """VOICE_PIP: 第1个→background, 第2个→corner_voice, 其余→b_roll"""
+        bg_clips = [c for c in clips if c.clip_type == "background"]
+        corner_clips = [c for c in clips if c.clip_type == "corner_voice"]
+        broll_clips = [c for c in clips if c.clip_type == "b_roll"]
+
+        # 第1个素材 → background
+        if bg_clips and len(asset_ids) > 0:
+            bg_clips[0].assign_asset(asset_ids[0])
+
+        # 第2个素材 → corner_voice
+        if corner_clips and len(asset_ids) > 1:
+            corner_clips[0].assign_asset(asset_ids[1])
+
+        # 其余素材 → b_roll
+        remaining = asset_ids[2:]
+        for i, clip in enumerate(broll_clips):
+            if i < len(remaining):
+                clip.assign_asset(remaining[i])

apps/api/app/services/video_compose_service.py

@@ -16,7 +16,6 @@ FFmpeg 视频合成编排服务：
 from __future__ import annotations
 
 import logging
-import shutil
 from dataclasses import dataclass, field
 from typing import Any
 
@@ -28,7 +27,7 @@ from packages.adapters.sqlalchemy_impl.edit_plan_clip_repository import (
 from packages.adapters.sqlalchemy_impl.edit_plan_repository import (
     SQLAlchemyEditPlanRepository,
 )
-from packages.domain.edit_plan import EditPlan, EditPlanStatus
+from packages.domain.edit_plan import EditPlanStatus
 from packages.domain.edit_plan_clip import EditPlanClip, EditPlanClipStatus
 from packages.domain.template_clip_config import TransitionEffect
 

apps/web/e2e/assets-full.spec.ts

@@ -0,0 +1,780 @@
+/**
+ * 素材库页面完整 E2E 测试
+ *
+ * 覆盖：页面加载、创建素材库、切换素材库、搜索/筛选、素材详情、
+ *       删除素材、批量删除、空状态
+ * 注意：test_asset.spec.ts 已覆盖 API 级别的素材库 CRUD，本文件聚焦 UI 交互
+ */
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+const PASSWORD = "SmokePass123!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (
+  page: import("@playwright/test").Page,
+) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 创建项目 */
+async function createProject(
+  request: APIRequestContext,
+  headers: Record<string, string>,
+  suffix: string,
+): Promise<string> {
+  const resp = await request.post(`${apiBase}/projects`, {
+    headers,
+    data: {
+      name: `Assets Test Proj ${suffix}`,
+      description: "E2E assets test",
+    },
+  });
+  expect(resp.ok(), `创建项目应成功: ${await resp.text()}`).toBeTruthy();
+  const data = await resp.json();
+  return data.id;
+}
+
+/** 创建素材库 */
+async function createLibrary(
+  request: APIRequestContext,
+  headers: Record<string, string>,
+  projectId: string,
+  name: string,
+  kind: "video" | "image" = "video",
+): Promise<string> {
+  const resp = await request.post(`${apiBase}/asset-libraries`, {
+    headers,
+    data: { project_id: projectId, name, kind },
+  });
+  expect(resp.ok(), `创建素材库应成功: ${await resp.text()}`).toBeTruthy();
+  const data = await resp.json();
+  return data.id;
+}
+
+/** 创建素材记录 */
+async function createAsset(
+  request: APIRequestContext,
+  headers: Record<string, string>,
+  projectId: string,
+  libraryId: string,
+  userId: string,
+  name: string,
+  status: string = "ready",
+): Promise<string> {
+  const resp = await request.post(`${apiBase}/assets`, {
+    headers,
+    data: {
+      project_id: projectId,
+      library_id: libraryId,
+      name,
+      storage_key: `uploads/e2e/${Date.now()}/${name}`,
+      mime_type: "video/mp4",
+      file_size: 1024000,
+      status,
+      uploaded_by_user_id: userId,
+      metadata: { duration: 15.5, resolution: "1080p" },
+    },
+  });
+  expect(resp.ok(), `创建素材应成功: ${await resp.text()}`).toBeTruthy();
+  const data = await resp.json();
+  return data.id;
+}
+
+/** 在浏览器中设置登录态 */
+async function setupAuthInBrowser(
+  page: import("@playwright/test").Page,
+  token: string,
+  user: { id: string; email: string; username: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.username,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+test.describe("素材库页面 - 完整交互测试", () => {
+  test.describe.configure({ timeout: 180_000 });
+
+  // ─── 页面加载 ──────────────────────────────────────
+
+  test("素材库列表页面加载", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-load");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    await createLibrary(request, headers, projectId, "默认视频库", "video");
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+
+    // 页面布局容器
+    await expect(page.locator(".xx-assets-page")).toBeVisible({
+      timeout: 20_000,
+    });
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 左侧素材库列表
+    await expect(page.locator(".xx-asset-library-list")).toBeVisible();
+
+    // 右侧内容区（上传区 + 筛选 + 素材网格）
+    await expect(page.locator(".xx-assets-content")).toBeVisible();
+    await expect(page.locator(".xx-asset-upload-zone")).toBeVisible();
+    await expect(page.locator(".xx-assets-filters")).toBeVisible();
+
+    // 无错误提示
+    await expect(page.getByText(/加载失败|素材库加载失败/)).toHaveCount(0, {
+      timeout: 5_000,
+    });
+  });
+
+  // ─── 创建素材库 ────────────────────────────────────
+
+  test("创建新素材库 - 通过 UI", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-create");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    await createLibrary(request, headers, projectId, "初始库", "video");
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 点击新建素材库
+    await page.locator(".xx-asset-library-add").click();
+
+    // 弹窗出现
+    const modal = page
+      .locator(".ant-modal-content")
+      .filter({ hasText: "新建素材库" });
+    await expect(modal).toBeVisible();
+
+    // 填写表单
+    const newLibName = `E2E 新建库 ${Date.now()}`;
+    await modal.getByPlaceholder("请输入素材库名称").fill(newLibName);
+    // 类型选择默认是 video，保持即可
+
+    // 监听创建请求
+    const createPromise = page.waitForResponse(
+      (resp) =>
+        resp.url().includes("/asset-libraries") &&
+        resp.request().method() === "POST",
+      { timeout: 10_000 },
+    );
+
+    // 点击创建
+    await modal.getByRole("button", { name: "创建" }).click();
+
+    const resp = await createPromise;
+    expect(resp.ok(), `创建素材库应成功: ${resp.status()}`).toBeTruthy();
+
+    // 新素材库应出现在列表中
+    await expect(
+      page.locator(".xx-asset-library-item").filter({ hasText: newLibName }),
+    ).toBeVisible({ timeout: 10_000 });
+  });
+
+  // ─── 切换素材库 ────────────────────────────────────
+
+  test("切换不同素材库", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-switch");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+
+    const videoLibName = "视频素材库 A";
+    const imageLibName = "图片素材库 B";
+    const videoLibId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      videoLibName,
+      "video",
+    );
+    const imageLibId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      imageLibName,
+      "image",
+    );
+
+    // 在视频库里创建一个素材
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      videoLibId,
+      userId,
+      "demo_video.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 点击视频库，应显示素材
+    const videoLibItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: videoLibName });
+    await videoLibItem.click({ force: true });
+    await expect(videoLibItem).toHaveClass(/active/);
+
+    // 验证视频素材出现
+    await expect(page.getByText("demo_video.mp4")).toBeVisible({
+      timeout: 10_000,
+    });
+
+    // 点击图片库，应切换且不显示视频
+    const imageLibItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: imageLibName });
+    await imageLibItem.click({ force: true });
+    await expect(imageLibItem).toHaveClass(/active/);
+
+    // 空状态或图片库内容
+    await expect(page.getByText("demo_video.mp4")).toHaveCount(0, {
+      timeout: 5_000,
+    });
+  });
+
+  // ─── 素材搜索 ──────────────────────────────────────
+
+  test("素材搜索功能", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-search");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    const libraryId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      "搜索测试库",
+      "video",
+    );
+
+    // 创建两个不同名称的素材
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "apple_clip.mp4",
+    );
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "banana_clip.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 确保在测试库中
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "搜索测试库" });
+    await libItem.click({ force: true });
+
+    // 两个素材都应可见
+    await expect(page.getByText("apple_clip.mp4")).toBeVisible({
+      timeout: 10_000,
+    });
+    await expect(page.getByText("banana_clip.mp4")).toBeVisible();
+
+    // 搜索 apple，只显示 apple
+    await page.getByPlaceholder("搜索素材名称...").fill("apple");
+    await expect(page.getByText("apple_clip.mp4")).toBeVisible();
+    await expect(page.getByText("banana_clip.mp4")).toHaveCount(0);
+
+    // 清空搜索，两个都显示
+    await page.getByPlaceholder("搜索素材名称...").fill("");
+    await expect(page.getByText("apple_clip.mp4")).toBeVisible({
+      timeout: 5_000,
+    });
+    await expect(page.getByText("banana_clip.mp4")).toBeVisible();
+  });
+
+  // ─── 筛选类型 ──────────────────────────────────────
+
+  test("素材类型筛选", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-filter");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    const libraryId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      "筛选测试库",
+      "video",
+    );
+
+    // 创建视频素材
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "video_clip.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "筛选测试库" });
+    await libItem.click({ force: true });
+
+    // 素材应可见
+    await expect(page.getByText("video_clip.mp4")).toBeVisible({
+      timeout: 10_000,
+    });
+
+    // 筛选类型下拉存在
+    const filterSelect = page.locator(".xx-assets-filters-left select").first();
+    await expect(filterSelect).toBeVisible();
+  });
+
+  // ─── 素材详情/播放 ────────────────────────────────
+
+  test("素材详情查看 - 播放弹窗", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-detail");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    const libraryId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      "详情测试库",
+      "video",
+    );
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "play_test.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "详情测试库" });
+    await libItem.click({ force: true });
+
+    // 找到素材卡片并点击播放按钮
+    const assetCard = page
+      .locator(".xx-asset-card")
+      .filter({ hasText: "play_test.mp4" });
+    await expect(assetCard).toBeVisible({ timeout: 10_000 });
+
+    // 点击播放按钮
+    await assetCard.locator(".xx-asset-play").click({ force: true });
+
+    // 播放弹窗出现
+    const modal = page
+      .locator(".ant-modal-content")
+      .filter({ hasText: "播放" });
+    await expect(modal).toBeVisible();
+
+    // 关闭弹窗
+    await modal.locator(".ant-modal-close").click();
+    await expect(modal).not.toBeVisible({ timeout: 5_000 });
+  });
+
+  // ─── 删除素材 ──────────────────────────────────────
+
+  test("删除素材 - 带确认对话框", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-delete");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    const libraryId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      "删除测试库",
+      "video",
+    );
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "to_delete.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "删除测试库" });
+    await libItem.click({ force: true });
+
+    const assetCard = page
+      .locator(".xx-asset-card")
+      .filter({ hasText: "to_delete.mp4" });
+    await expect(assetCard).toBeVisible({ timeout: 10_000 });
+
+    // 悬停显示删除按钮
+    await assetCard.hover();
+
+    // 点击删除
+    const deleteBtn = assetCard.locator(".xx-asset-delete");
+    await expect(deleteBtn).toBeVisible();
+    await deleteBtn.click({ force: true });
+
+    // 确认对话框出现
+    const confirmModal = page
+      .locator(".ant-popover")
+      .filter({ hasText: "确认删除" });
+    await expect(confirmModal).toBeVisible();
+
+    // 监听删除请求
+    const deletePromise = page.waitForResponse(
+      (resp) =>
+        resp.url().includes("/assets/") && resp.request().method() === "DELETE",
+      { timeout: 10_000 },
+    );
+
+    // 点击确认删除
+    await confirmModal.getByRole("button", { name: "删除" }).click();
+
+    const resp = await deletePromise;
+    expect(resp.ok(), `删除素材应成功: ${resp.status()}`).toBeTruthy();
+
+    // 素材应从列表中消失
+    await expect(page.getByText("to_delete.mp4")).toHaveCount(0, {
+      timeout: 10_000,
+    });
+  });
+
+  // ─── 批量删除素材 ──────────────────────────────────
+
+  test("批量删除素材", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-batch");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    const libraryId = await createLibrary(
+      request,
+      headers,
+      projectId,
+      "批量删除库",
+      "video",
+    );
+
+    // 创建多个素材
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "batch_1.mp4",
+    );
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "batch_2.mp4",
+    );
+    await createAsset(
+      request,
+      headers,
+      projectId,
+      libraryId,
+      userId,
+      "batch_3.mp4",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "批量删除库" });
+    await libItem.click({ force: true });
+
+    // 所有素材应可见
+    await expect(page.getByText("batch_1.mp4")).toBeVisible({
+      timeout: 10_000,
+    });
+    await expect(page.getByText("batch_2.mp4")).toBeVisible();
+    await expect(page.getByText("batch_3.mp4")).toBeVisible();
+
+    // 点击全选
+    const selectAllBtn = page.getByRole("button", { name: "全选" });
+    await expect(selectAllBtn).toBeVisible();
+    await selectAllBtn.click();
+
+    // 批量操作栏出现
+    const batchBar = page.locator(".xx-assets-batch-bar");
+    await expect(batchBar).toBeVisible();
+    await expect(batchBar.getByText(/已选 3 项/)).toBeVisible();
+
+    // 点击批量删除
+    const batchDeleteBtn = batchBar.getByRole("button", { name: "批量删除" });
+    await expect(batchDeleteBtn).toBeVisible();
+    await batchDeleteBtn.click();
+
+    // 确认对话框
+    const confirmPop = page
+      .locator(".ant-popover")
+      .filter({ hasText: "确定删除" });
+    await expect(confirmPop).toBeVisible();
+
+    // 确认删除
+    await confirmPop.getByRole("button", { name: "删除" }).click();
+
+    // 验证素材已删除（通过 API 确认）
+    await expect
+      .poll(
+        async () => {
+          const resp = await request.get(`${apiBase}/assets`, {
+            headers,
+            params: { library_id: libraryId },
+          });
+          if (!resp.ok()) return "error";
+          const data = await resp.json();
+          const items = data.items || [];
+          return items.length;
+        },
+        { timeout: 15_000, intervals: [1_000, 2_000, 3_000] },
+      )
+      .toBe(0);
+  });
+
+  // ─── 空状态 ────────────────────────────────────────
+
+  test("空素材库展示空状态", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "assets-empty");
+    const projectId = await createProject(
+      request,
+      headers,
+      Date.now().toString(),
+    );
+    await createLibrary(request, headers, projectId, "空素材库", "video");
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/assets");
+    await expect(page.locator(".xx-assets-layout")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const libItem = page
+      .locator(".xx-asset-library-item")
+      .filter({ hasText: "空素材库" });
+    await libItem.click({ force: true });
+
+    // 空状态应显示
+    await expect(page.locator(".xx-assets-empty")).toBeVisible({
+      timeout: 10_000,
+    });
+    await expect(page.getByText("暂无素材，请上传或切换素材库")).toBeVisible();
+  });
+
+  // ─── 未登录访问 ────────────────────────────────────
+
+  test("未登录访问素材库 - 重定向到登录页", async ({ page }) => {
+    await page.goto("/app/assets");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});

apps/web/e2e/core-generation.spec.ts

@@ -1,4 +1,4 @@
-import { expect, test } from "@playwright/test";
+import { expect, test, type APIRequestContext } from "@playwright/test";
 
 const PASSWORD = "SmokePass123!";
 const apiBase = process.env.E2E_API_BASE || "/api/v1";
@@ -20,7 +20,7 @@ const routeBrowserApiToTestApi = async (
 };
 
 async function loginWithRetry(
-  request: any,
+  request: APIRequestContext,
   email: string,
   password: string,
   maxRetries = 2,
@@ -40,6 +40,7 @@ async function loginWithRetry(
 
 type ProjectResponse = { id: string };
 type LibraryResponse = { id: string };
+type TemplateResponse = { id: string };
 type AssetListResponse = {
   items: Array<{
     id: string;
@@ -109,7 +110,6 @@ test.describe("Core generation flow", () => {
     expect(upload.status()).toBe(200);
 
     // Wait for asset to be ready
-    let sourceAssetId = "";
     await expect
       .poll(
         async () => {
@@ -121,13 +121,35 @@ test.describe("Core generation flow", () => {
           const data = (await assets.json()) as AssetListResponse;
           const asset = data.items.find((a) => a.name === sourceFileName);
           if (!asset) return "missing";
-          sourceAssetId = asset.id;
           return asset.status;
         },
         { timeout: 30_000, intervals: [1_000, 2_000, 3_000] },
       )
       .toBe("ready");
 
+    // Create an editing template so the generate page has at least one template
+    // (templates are now loaded from API; new users have none by default)
+    const template = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `E2E 测试模板 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 30,
+            material_type: "video",
+          },
+        ],
+        tags: ["e2e"],
+      },
+    });
+    expect(template.status(), await template.text()).toBe(201);
+    const templateData = (await template.json()) as TemplateResponse;
+    expect(templateData.id).toBeTruthy();
+
     // Set auth in localStorage
     await page.addInitScript(
       ({ token, user }) => {
@@ -165,38 +187,30 @@ test.describe("Core generation flow", () => {
     await page.getByRole("button", { name: "下一步" }).click();
 
     // Step 2: select material
-    await expect(
-      page.getByRole("heading", { name: /选择素材/ }),
-    ).toBeVisible();
+    await expect(page.getByRole("heading", { name: /选择素材/ })).toBeVisible();
     const librarySelect = page.locator("select").first();
     await librarySelect.selectOption({ label: libraryName });
     const materialLabel = page.getByText(sourceFileName).locator("..");
-    await expect(
-      materialLabel.locator("input[type='checkbox']"),
-    ).toBeVisible({ timeout: 10_000 });
+    await expect(materialLabel.locator("input[type='checkbox']")).toBeVisible({
+      timeout: 10_000,
+    });
     await materialLabel.locator("input[type='checkbox']").check();
     await page.getByRole("button", { name: "下一步" }).click();
 
     // Step 3: title
-    await expect(
-      page.getByRole("heading", { name: /选择标题/ }),
-    ).toBeVisible();
+    await expect(page.getByRole("heading", { name: /选择标题/ })).toBeVisible();
     const titleText = `E2E Test ${suffix}`;
     await page.getByPlaceholder("输入自定义标题…").fill(titleText);
     await page.getByRole("button", { name: "下一步" }).click();
 
     // Step 4: voice
-    await expect(
-      page.getByRole("heading", { name: /选择配音/ }),
-    ).toBeVisible();
+    await expect(page.getByRole("heading", { name: /选择配音/ })).toBeVisible();
     const firstVoiceCard = page.locator(".xx-voice-choice-item").first();
     await firstVoiceCard.click();
     await page.getByRole("button", { name: "下一步" }).click();
 
     // Step 5: confirm and generate
-    await expect(
-      page.getByRole("heading", { name: /确认生成/ }),
-    ).toBeVisible();
+    await expect(page.getByRole("heading", { name: /确认生成/ })).toBeVisible();
 
     // Wait for plan creation API to be called
     const createPlanPromise = page.waitForResponse(
@@ -222,7 +236,7 @@ test.describe("Core generation flow", () => {
 
     // Generation may fail in test env (no worker), that's OK
     // Just verify the flow started - check page shows generation-related UI
-    const hasProgress = await page
+    await page
       .getByText(/生成中|生成完成|生成失败/)
       .isVisible({ timeout: 15_000 })
       .catch(() => false);
@@ -237,6 +251,9 @@ test.describe("Core generation flow", () => {
     await expect(page.locator(".xx-products-page")).toBeVisible({
       timeout: 15_000,
     });
+
+    // 清理所有路由，避免页面关闭时飞地API请求导致测试报错
+    await page.unrouteAll({ behavior: "ignoreErrors" });
   });
 
   test("generation task API creates and lists tasks", async ({ request }) => {

apps/web/e2e/core-titles.spec.ts

@@ -1,4 +1,4 @@
-import { expect, test } from "@playwright/test";
+import { expect, test, type APIRequestContext } from "@playwright/test";
 
 const PASSWORD = "SmokePass123!";
 const apiBase = process.env.E2E_API_BASE || "/api/v1";
@@ -21,7 +21,7 @@ const routeBrowserApiToTestApi = async (
 
 /** 登录操作，遇到 429 限流自动等待重试 */
 async function loginWithRetry(
-  request: any,
+  request: APIRequestContext,
   email: string,
   password: string,
   maxRetries = 2,
@@ -60,6 +60,19 @@ test.describe("Title library flow", () => {
     const login = await loginWithRetry(request, email, PASSWORD);
     expect(login.status(), await login.text()).toBe(200);
     const loginData = (await login.json()) as { access_token: string };
+    const headers = { Authorization: `Bearer ${loginData.access_token}` };
+
+    // Create a title so the titles page has at least one title card to display
+    // (titles are loaded from API; new users have none by default)
+    const createTitle = await request.post(`${apiBase}/titles`, {
+      headers,
+      data: {
+        name: `E2E 测试标题 ${suffix}`,
+        text: `E2E 测试标题内容 ${suffix}`,
+        category: "default",
+      },
+    });
+    expect(createTitle.status(), await createTitle.text()).toBe(201);
 
     await page.addInitScript(
       ({ token, user }) => {

apps/web/e2e/core-upload.spec.ts

@@ -1,4 +1,4 @@
-import { expect, test } from "@playwright/test";
+import { expect, test, type APIRequestContext } from "@playwright/test";
 
 const PASSWORD = "SmokePass123!";
 const apiBase = process.env.E2E_API_BASE || "/api/v1";
@@ -21,7 +21,7 @@ const routeBrowserApiToTestApi = async (
 
 /** 登录操作，遇到 429 限流自动等待重试 */
 async function loginWithRetry(
-  request: any,
+  request: APIRequestContext,
   email: string,
   password: string,
   maxRetries = 2,
@@ -180,9 +180,11 @@ test.describe("Core media upload flow", () => {
     await expect(page.locator(".xx-assets-content")).toBeVisible({
       timeout: 20_000,
     });
-    await expect(page.getByText("e2e-sample.MOV", { exact: true })).toBeVisible({
-      timeout: 20_000,
-    });
+    await expect(page.getByText("e2e-sample.MOV", { exact: true })).toBeVisible(
+      {
+        timeout: 20_000,
+      },
+    );
 
     // Verify asset card shows status
     const assetCard = page

apps/web/e2e/duplication.spec.ts

@@ -0,0 +1,592 @@
+/**
+ * 去重流程 E2E 测试
+ *
+ * 覆盖：去重上传页面、上传区域、去重记录列表、去重详情、
+ *       删除记录、重试去重
+ */
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+const PASSWORD = "SmokePass123!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (
+  page: import("@playwright/test").Page,
+) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 在浏览器中设置登录态 */
+async function setupAuthInBrowser(
+  page: import("@playwright/test").Page,
+  token: string,
+  user: { id: string; email: string; username: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.username,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+test.describe("去重流程", () => {
+  test.describe.configure({ timeout: 180_000 });
+
+  // ─── 上传页面加载 ──────────────────────────────────
+
+  test("去重上传页面加载", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-load",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication");
+
+    // 页面容器
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 页面标题
+    await expect(page.getByRole("heading", { name: "视频查重" })).toBeVisible();
+
+    // 描述
+    await expect(
+      page.getByText("上传视频文件，系统将自动检测与已有素材的重复片段"),
+    ).toBeVisible();
+  });
+
+  // ─── 上传区域展示 ──────────────────────────────────
+
+  test("上传区域展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-upload-zone",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 拖拽上传区域
+    const uploadZone = page.locator(".dup-upload-zone");
+    await expect(uploadZone).toBeVisible();
+
+    // 上传图标和文字
+    await expect(
+      uploadZone.getByText("点击或拖拽视频文件到此区域"),
+    ).toBeVisible();
+
+    // 格式提示
+    await expect(uploadZone.getByText(/支持 MP4、AVI、MOV、MKV/)).toBeVisible();
+
+    // 格式标签
+    await expect(page.locator(".dup-upload-formats")).toBeVisible();
+
+    // 选择文件按钮
+    const selectBtn = page.getByRole("button", { name: "选择文件" });
+    await expect(selectBtn).toBeVisible();
+
+    // 隐藏的文件 input
+    const fileInput = page.locator('input[type="file"]');
+    await expect(fileInput).toHaveCount(1);
+  });
+
+  // ─── 格式说明区 ────────────────────────────────────
+
+  test("格式说明和提示区域展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-info",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 右侧说明区
+    const infoCard = page.locator(".dup-info-card");
+    await expect(infoCard).toBeVisible();
+
+    // 查重说明
+    await expect(infoCard.getByText("查重说明")).toBeVisible();
+
+    // 支持格式
+    await expect(infoCard.getByText("支持格式")).toBeVisible();
+
+    // 温馨提示
+    await expect(infoCard.getByText("温馨提示")).toBeVisible();
+
+    // 格式标签
+    await expect(page.locator(".dup-format-tags")).toBeVisible();
+  });
+
+  // ─── 去重记录列表页面 ──────────────────────────────
+
+  test("去重记录列表页面加载", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-list",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+
+    // 页面容器
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 页面标题
+    await expect(page.getByRole("heading", { name: "查重记录" })).toBeVisible();
+
+    // 筛选按钮
+    await expect(page.locator(".dup-filter")).toBeVisible();
+
+    // 上传查重按钮
+    await expect(page.getByRole("button", { name: "上传查重" })).toBeVisible();
+  });
+
+  test("去重记录列表 - 空状态", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-list-empty",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 空状态（新用户没有记录）
+    const emptyState = page.locator(".dup-results-empty");
+    await expect(emptyState).toBeVisible({ timeout: 10_000 });
+    await expect(emptyState.getByText(/暂无查重记录/)).toBeVisible();
+  });
+
+  test("去重记录列表 - 风险等级筛选", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-filter",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 筛选按钮存在
+    const filterBtns = page.locator(".dup-filter-btn");
+    await expect(filterBtns).toHaveCount(4); // 全部、低风险、中风险、高风险
+
+    // 验证按钮文本
+    await expect(filterBtns.nth(0)).toHaveText("全部");
+    await expect(filterBtns.nth(1)).toHaveText("低风险");
+    await expect(filterBtns.nth(2)).toHaveText("中风险");
+    await expect(filterBtns.nth(3)).toHaveText("高风险");
+
+    // 默认选中"全部"
+    await expect(filterBtns.nth(0)).toHaveClass(/active/);
+
+    // 点击低风险
+    await filterBtns.nth(1).click();
+    await expect(filterBtns.nth(1)).toHaveClass(/active/);
+  });
+
+  test("去重记录列表 - 上传查重按钮跳转", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "dup-nav",
+    );
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 点击上传查重按钮
+    await page.getByRole("button", { name: "上传查重" }).click();
+
+    await expect(page).toHaveURL(/\/app\/duplication$/);
+    await expect(page.locator(".dup-upload-zone")).toBeVisible();
+  });
+
+  // ─── 去重详情页 ────────────────────────────────────
+
+  test("去重详情页 - 通过 API 创建测试数据后访问", async ({
+    page,
+    request,
+  }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "dup-detail");
+
+    // 先上传一个文件进行查重，获取 record id
+    const uploadResp = await request.post(`${apiBase}/duplication/upload`, {
+      headers,
+      multipart: {
+        file: {
+          name: "e2e_dup_test.mp4",
+          mimeType: "video/mp4",
+          buffer: Buffer.from("e2e duplication test data"),
+        },
+      },
+    });
+
+    // 如果查重 API 不可用，跳过详情页测试
+    if (!uploadResp.ok()) {
+      console.log(
+        `[skip] 查重上传 API 不可用 (${uploadResp.status()})，跳过详情页测试`,
+      );
+      return;
+    }
+
+    const uploadData = await uploadResp.json();
+    const recordId = uploadData.id;
+    expect(recordId, "应返回查重记录 ID").toBeTruthy();
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    // 访问详情页
+    await page.goto(`/app/duplication/${recordId}`);
+
+    // 页面应正常渲染
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 验证无错误
+    await expect(page.getByText(/加载失败|404|Not Found/)).toHaveCount(0, {
+      timeout: 5_000,
+    });
+  });
+
+  // ─── 删除记录 ──────────────────────────────────────
+
+  test("去重记录删除 - API 验证", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "dup-delete");
+
+    // 创建查重记录
+    const uploadResp = await request.post(`${apiBase}/duplication/upload`, {
+      headers,
+      multipart: {
+        file: {
+          name: "e2e_dup_delete.mp4",
+          mimeType: "video/mp4",
+          buffer: Buffer.from("e2e duplication delete test"),
+        },
+      },
+    });
+
+    if (!uploadResp.ok()) {
+      console.log(
+        `[skip] 查重上传 API 不可用 (${uploadResp.status()})，跳过删除测试`,
+      );
+      return;
+    }
+
+    const uploadData = await uploadResp.json();
+    const recordId = uploadData.id;
+
+    // 验证记录存在
+    const listResp = await request.get(`${apiBase}/duplication/records`, {
+      headers,
+    });
+    if (listResp.ok()) {
+      const records = await listResp.json();
+      const recordExists = Array.isArray(records)
+        ? records.some((r: { id: string }) => r.id === recordId)
+        : (records.items || []).some((r: { id: string }) => r.id === recordId);
+      expect(recordExists, "记录应存在于列表中").toBeTruthy();
+    }
+
+    // 删除记录
+    const deleteResp = await request.delete(
+      `${apiBase}/duplication/records/${recordId}`,
+      { headers },
+    );
+    expect(
+      deleteResp.ok(),
+      `删除查重记录应成功: ${deleteResp.status()}`,
+    ).toBeTruthy();
+
+    // 验证记录已删除
+    const listAfterResp = await request.get(`${apiBase}/duplication/records`, {
+      headers,
+    });
+    if (listAfterResp.ok()) {
+      const recordsAfter = await listAfterResp.json();
+      const recordStillExists = Array.isArray(recordsAfter)
+        ? recordsAfter.some((r: { id: string }) => r.id === recordId)
+        : (recordsAfter.items || []).some(
+            (r: { id: string }) => r.id === recordId,
+          );
+      expect(recordStillExists, "记录应已被删除").toBeFalsy();
+    }
+  });
+
+  test("去重记录删除 - UI 验证", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "dup-delete-ui");
+
+    // 创建查重记录
+    const uploadResp = await request.post(`${apiBase}/duplication/upload`, {
+      headers,
+      multipart: {
+        file: {
+          name: "e2e_dup_ui_delete.mp4",
+          mimeType: "video/mp4",
+          buffer: Buffer.from("e2e duplication ui delete test"),
+        },
+      },
+    });
+
+    if (!uploadResp.ok()) {
+      console.log(
+        `[skip] 查重上传 API 不可用 (${uploadResp.status()})，跳过 UI 删除测试`,
+      );
+      return;
+    }
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 记录卡片应存在
+    const resultCard = page.locator(".dup-result-card").first();
+    const cardVisible = await resultCard
+      .isVisible({ timeout: 10_000 })
+      .catch(() => false);
+
+    if (cardVisible) {
+      // 删除按钮存在
+      const deleteBtn = resultCard.getByRole("button").filter({
+        hasText: "🗑️",
+      });
+      await expect(deleteBtn).toBeVisible();
+
+      // 删除按钮点击 - 会触发 confirm 对话框
+      // 这里我们通过监听 confirm 来确认删除
+      page.once("dialog", async (dialog) => {
+        expect(dialog.message()).toContain("确定删除");
+        await dialog.accept();
+      });
+
+      // 监听删除请求
+      const deletePromise = page
+        .waitForResponse(
+          (resp) =>
+            resp.url().includes("/duplication/records/") &&
+            resp.request().method() === "DELETE",
+          { timeout: 10_000 },
+        )
+        .catch(() => null);
+
+      await deleteBtn.click();
+
+      const deleteResp = await deletePromise;
+      if (deleteResp) {
+        expect(deleteResp.ok(), "删除请求应成功").toBeTruthy();
+      }
+    }
+  });
+
+  // ─── 重试去重 ──────────────────────────────────────
+
+  test("重试去重按钮 - 失败记录显示重试", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { headers, userId, accessToken, email, username } =
+      await createAuthedUser(request, "dup-retry");
+
+    // 创建查重记录
+    const uploadResp = await request.post(`${apiBase}/duplication/upload`, {
+      headers,
+      multipart: {
+        file: {
+          name: "e2e_dup_retry.mp4",
+          mimeType: "video/mp4",
+          buffer: Buffer.from("e2e duplication retry test"),
+        },
+      },
+    });
+
+    if (!uploadResp.ok()) {
+      console.log(
+        `[skip] 查重上传 API 不可用 (${uploadResp.status()})，跳过重试测试`,
+      );
+      return;
+    }
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/duplication/results");
+    await expect(page.locator(".dup-page")).toBeVisible({ timeout: 20_000 });
+
+    // 记录列表中至少有一条记录
+    const resultCard = page.locator(".dup-result-card").first();
+    const cardVisible = await resultCard
+      .isVisible({ timeout: 10_000 })
+      .catch(() => false);
+
+    if (cardVisible) {
+      // 验证记录卡片基本结构
+      await expect(resultCard.locator(".dup-result-card-body")).toBeVisible();
+      await expect(resultCard.locator(".dup-result-card-score")).toBeVisible();
+
+      // 检查是否有重试按钮（失败状态才显示）
+      // 新上传的记录可能是处理中或完成状态，不一定显示重试按钮
+      // 这里只验证 API 重试接口可用
+      const uploadData = await uploadResp.json();
+      const recordId = uploadData.id;
+
+      const retryResp = await request.post(
+        `${apiBase}/duplication/records/${recordId}/retry`,
+        { headers },
+      );
+      // 重试接口应返回 2xx 或明确的状态码
+      expect(retryResp.status()).toBeLessThan(500);
+    }
+  });
+
+  // ─── 未登录访问 ────────────────────────────────────
+
+  test("未登录访问去重上传页 - 重定向到登录页", async ({ page }) => {
+    await page.goto("/app/duplication");
+    await expect(page).toHaveURL(/\/login/);
+  });
+
+  test("未登录访问去重记录页 - 重定向到登录页", async ({ page }) => {
+    await page.goto("/app/duplication/results");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});

apps/web/e2e/editing-planner.spec.ts

@@ -0,0 +1,495 @@
+/**
+ * 剪辑策划页面 E2E 测试
+ *
+ * 覆盖：页面加载、模板列表、模式切换、创建/编辑/删除剪辑计划、
+ * AI推荐片段、详情页、空状态、未登录重定向
+ *
+ * 每个测试独立，先注册登录获取 auth token。
+ */
+import {
+  expect,
+  test,
+  type APIRequestContext,
+  type Page,
+} from "@playwright/test";
+
+const PASSWORD = "Test123456!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (page: Page) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 设置页面认证状态（localStorage） */
+async function setupAuth(
+  page: Page,
+  token: string,
+  user: { id: string; email: string; username: string; display_name: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.display_name,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+/** 创建一个编辑模板并返回 id */
+async function createEditingTemplate(
+  request: APIRequestContext,
+  headers: Record<string, string>,
+  suffix: string,
+): Promise<string> {
+  const resp = await request.post(`${apiBase}/templates`, {
+    headers,
+    data: {
+      name: `E2E 剪辑计划 ${suffix}`,
+      mode: "pip",
+      estimated_duration: 30,
+      description: "E2E 测试创建的剪辑计划",
+      segments: [
+        {
+          segment_order: 1,
+          duration_min: 5,
+          duration_max: 15,
+          material_type: "video",
+          description: "开场片段",
+        },
+        {
+          segment_order: 2,
+          duration_min: 10,
+          duration_max: 20,
+          material_type: "video",
+          description: "主体内容",
+        },
+      ],
+      tags: ["e2e", "test"],
+      category: "default",
+    },
+  });
+  expect(resp.ok(), `创建模板应成功: ${await resp.text()}`).toBeTruthy();
+  const data = await resp.json();
+  return data.id;
+}
+
+test.describe("剪辑策划页面 - 未登录重定向", () => {
+  test("未登录访问重定向到登录页", async ({ page }) => {
+    await page.goto("/app/editing-planner");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});
+
+test.describe("剪辑策划页面 - 页面加载", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("剪辑策划页面加载成功", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "ep-load",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E ep-load",
+    });
+
+    await page.goto("/app/editing-planner");
+    await expect(page.locator(".ep-v8-root")).toBeVisible({
+      timeout: 20_000,
+    });
+    // 验证顶栏存在
+    await expect(page.locator(".ep-top-bar")).toBeVisible();
+    // 验证模式栏存在
+    await expect(page.locator(".ep-mode-bar")).toBeVisible();
+    // 验证主体区域存在
+    await expect(page.locator(".ep-main-body")).toBeVisible();
+  });
+
+  test("剪辑模式切换正常显示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "ep-mode",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E ep-mode",
+    });
+
+    await page.goto("/app/editing-planner");
+    await expect(page.locator(".ep-v8-root")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证模式按钮存在（画中画、人物口播等）
+    const modeBtns = page.locator(".ep-mode-btn");
+    await expect(modeBtns.first()).toBeVisible();
+    const modeCount = await modeBtns.count();
+    expect(modeCount).toBeGreaterThanOrEqual(2);
+  });
+});
+
+test.describe("剪辑计划 - API 操作", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("创建剪辑计划 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-create");
+    const suffix = Date.now().toString(36);
+    const templateName = `E2E 创建测试 ${suffix}`;
+
+    const response = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: templateName,
+        mode: "pip",
+        estimated_duration: 30,
+        description: "测试创建剪辑计划",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 10,
+            material_type: "video",
+          },
+        ],
+        tags: ["e2e"],
+      },
+    });
+
+    expect(
+      response.ok(),
+      `创建剪辑计划应返回 2xx，实际: ${response.status()} ${await response.text()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data.id, "应返回模板 ID").toBeTruthy();
+    expect(data.name).toBe(templateName);
+    expect(data.mode).toBe("pip");
+  });
+
+  test("列出剪辑计划 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-list");
+    const suffix = Date.now().toString(36);
+
+    // 创建 2 个模板
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `E2E 列表测试 A ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 10,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `E2E 列表测试 B ${suffix}`,
+        mode: "voice_over",
+        estimated_duration: 60,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 10,
+            duration_max: 30,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+
+    const response = await request.get(`${apiBase}/templates`, { headers });
+    expect(
+      response.ok(),
+      `列出模板应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    const items = data.items || data.templates || [];
+    expect(Array.isArray(items), "返回应为数组").toBeTruthy();
+    expect(items.length, "应至少有 2 个模板").toBeGreaterThanOrEqual(2);
+  });
+
+  test("获取剪辑计划详情 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-detail");
+    const templateId = await createEditingTemplate(
+      request,
+      headers,
+      Date.now().toString(36),
+    );
+
+    const response = await request.get(`${apiBase}/templates/${templateId}`, {
+      headers,
+    });
+    expect(
+      response.ok(),
+      `获取详情应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data.id).toBe(templateId);
+    expect(data.name).toBeTruthy();
+    expect(data.mode).toBeTruthy();
+  });
+
+  test("编辑剪辑计划 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-update");
+    const templateId = await createEditingTemplate(
+      request,
+      headers,
+      Date.now().toString(36),
+    );
+
+    const newName = `更新后的剪辑计划 ${Date.now()}`;
+    const response = await request.patch(`${apiBase}/templates/${templateId}`, {
+      headers,
+      data: {
+        name: newName,
+        description: "更新后的描述",
+      },
+    });
+
+    expect(
+      response.ok(),
+      `更新模板应返回 2xx，实际: ${response.status()} ${await response.text()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data.name).toBe(newName);
+
+    // 验证更新后的数据
+    const verify = await request.get(`${apiBase}/templates/${templateId}`, {
+      headers,
+    });
+    const verifyData = await verify.json();
+    expect(verifyData.name).toBe(newName);
+  });
+
+  test("删除剪辑计划 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-delete");
+    const templateId = await createEditingTemplate(
+      request,
+      headers,
+      Date.now().toString(36),
+    );
+
+    // 删除
+    const deleteResp = await request.delete(
+      `${apiBase}/templates/${templateId}`,
+      { headers },
+    );
+    expect(
+      [200, 204].includes(deleteResp.status()),
+      `删除应返回 200 或 204，实际: ${deleteResp.status()}`,
+    ).toBeTruthy();
+
+    // 验证已删除
+    const getResp = await request.get(`${apiBase}/templates/${templateId}`, {
+      headers,
+    });
+    expect([404, 410]).toContain(getResp.status());
+  });
+
+  test("创建剪辑计划 - 无效 mode 反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-badmode");
+
+    const response = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: "无效 mode 测试",
+        mode: "invalid_mode",
+        estimated_duration: 30,
+        segments: [],
+      },
+    });
+
+    expect([400, 422]).toContain(response.status());
+  });
+
+  test("获取不存在的剪辑计划 - 反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "ep-404");
+
+    const response = await request.get(
+      `${apiBase}/templates/nonexistent-template-999`,
+      { headers },
+    );
+    expect(response.status(), "不存在的模板应返回 404").toBe(404);
+  });
+
+  test("未登录创建剪辑计划 - 反向", async ({ request }) => {
+    const response = await request.post(`${apiBase}/templates`, {
+      data: {
+        name: "未登录测试",
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [],
+      },
+    });
+    expect([401, 403]).toContain(response.status());
+  });
+});
+
+test.describe("剪辑策划页面 - 已模板数据加载", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("已创建的模板在页面中显示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "ep-data");
+    const suffix = Date.now().toString(36);
+
+    await createEditingTemplate(request, headers, suffix);
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E ep-data",
+    });
+
+    await page.goto("/app/editing-planner");
+    await expect(page.locator(".ep-v8-root")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证状态栏存在
+    await expect(page.locator(".ep-status-bar")).toBeVisible();
+  });
+
+  test("撤销/重做按钮存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "ep-undo",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E ep-undo",
+    });
+
+    await page.goto("/app/editing-planner");
+    await expect(page.locator(".ep-v8-root")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证顶栏按钮存在（撤销、重做、保存、生成等）
+    const topBarBtns = page.locator(".ep-top-bar-right .ep-btn");
+    await expect(topBarBtns.first()).toBeVisible();
+    const btnCount = await topBarBtns.count();
+    expect(btnCount).toBeGreaterThanOrEqual(2);
+  });
+
+  test("生成按钮存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "ep-gen",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E ep-gen",
+    });
+
+    await page.goto("/app/editing-planner");
+    await expect(page.locator(".ep-v8-root")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证主操作按钮存在
+    await expect(page.locator(".ep-btn-primary")).toBeVisible();
+  });
+});

apps/web/e2e/products.spec.ts

@@ -0,0 +1,753 @@
+/**
+ * 作品库页面 E2E 测试
+ *
+ * 覆盖：作品库列表加载、状态展示、作品详情、视频播放、下载按钮、
+ *       删除作品、空状态、筛选
+ *
+ * 说明：产品创建依赖生成流程，测试通过 Mock API 返回产品数据来验证 UI 行为。
+ * 真实的生成流程测试见 core-generation.spec.ts。
+ */
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+const PASSWORD = "SmokePass123!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (
+  page: import("@playwright/test").Page,
+) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** Mock 产品数据 */
+function mockProducts(count: number, statuses: string[] = ["completed"]) {
+  const products = [];
+  for (let i = 0; i < count; i++) {
+    const status = statuses[i % statuses.length];
+    products.push({
+      id: `mock-prod-${Date.now()}-${i}`,
+      title: `测试作品 ${i + 1}`,
+      status,
+      duration_seconds: 30 + i * 10,
+      resolution: "1080x1920",
+      file_size: (5 + i) * 1024 * 1024,
+      duplicate_rate: i * 5,
+      video_url:
+        status === "completed" ? "https://example.com/video.mp4" : undefined,
+      thumbnail_url: undefined,
+      created_at: new Date().toISOString(),
+      updated_at: new Date().toISOString(),
+    });
+  }
+  return products;
+}
+
+/** 在浏览器中设置登录态 */
+async function setupAuthInBrowser(
+  page: import("@playwright/test").Page,
+  token: string,
+  user: { id: string; email: string; username: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.username,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+/** Mock 产品列表 API */
+async function mockProductsApi(
+  page: import("@playwright/test").Page,
+  products: unknown[],
+) {
+  await page.route("**/api/v1/products", (route) => {
+    const method = route.request().method();
+    const url = route.request().url();
+
+    if (method === "GET" && url.match(/\/api\/v1\/products$/)) {
+      // 列表
+      route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ items: products, total: products.length }),
+      });
+      return;
+    }
+
+    // 单个产品详情
+    const detailMatch = url.match(/\/api\/v1\/products\/([^/?]+)/);
+    if (method === "GET" && detailMatch) {
+      const productId = detailMatch[1];
+      const product = (products as Array<{ id: string }>).find(
+        (p) => p.id === productId,
+      );
+      if (product) {
+        route.fulfill({
+          status: 200,
+          contentType: "application/json",
+          body: JSON.stringify(product),
+        });
+      } else {
+        route.fulfill({
+          status: 404,
+          contentType: "application/json",
+          body: JSON.stringify({ detail: "Not found" }),
+        });
+      }
+      return;
+    }
+
+    // 删除
+    if (method === "DELETE" && detailMatch) {
+      route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ message: "deleted" }),
+      });
+      return;
+    }
+
+    // 下载链接
+    if (method === "GET" && url.includes("/download-url")) {
+      route.fulfill({
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({
+          url: "https://example.com/download.mp4",
+          expires_at: new Date().toISOString(),
+        }),
+      });
+      return;
+    }
+
+    route.continue();
+  });
+}
+
+test.describe("作品库页面", () => {
+  test.describe.configure({ timeout: 180_000 });
+
+  // ─── 页面加载 ──────────────────────────────────────
+
+  test("作品库列表页面加载", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-load",
+    );
+
+    const products = mockProducts(3, ["completed", "processing", "failed"]);
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+
+    // 页面容器
+    await expect(page.locator(".xx-products-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 页面标题
+    await expect(page.getByRole("heading", { name: "成片库" })).toBeVisible();
+
+    // 筛选栏
+    await expect(page.locator(".xx-products-filters")).toBeVisible();
+
+    // 卡片网格
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 10_000,
+    });
+
+    // 作品卡片存在
+    await expect(page.locator(".xx-product-card")).toHaveCount(3, {
+      timeout: 10_000,
+    });
+  });
+
+  // ─── 状态展示 ──────────────────────────────────────
+
+  test("作品状态展示 - 已完成/处理中/失败", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-status",
+    );
+
+    const products = [
+      { ...mockProducts(1, ["completed"])[0], title: "已完成作品" },
+      {
+        ...mockProducts(1, ["processing"])[0],
+        title: "处理中作品",
+        id: `mock-prod-${Date.now()}-p`,
+      },
+      {
+        ...mockProducts(1, ["failed"])[0],
+        title: "失败作品",
+        id: `mock-prod-${Date.now()}-f`,
+      },
+    ];
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 等待卡片加载
+    await expect(page.locator(".xx-product-card")).toHaveCount(3, {
+      timeout: 10_000,
+    });
+
+    // 验证各状态标签存在
+    const completedCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "已完成作品" });
+    await expect(
+      completedCard.locator(".xx-product-status.completed"),
+    ).toHaveText("已完成");
+
+    const processingCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "处理中作品" });
+    await expect(
+      processingCard.locator(".xx-product-status.processing"),
+    ).toHaveText("处理中");
+
+    const failedCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "失败作品" });
+    await expect(failedCard.locator(".xx-product-status.failed")).toHaveText(
+      "失败",
+    );
+  });
+
+  // ─── 作品详情页 ────────────────────────────────────
+
+  test("作品详情页打开", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-detail",
+    );
+
+    const products = mockProducts(1, ["completed"]);
+    products[0].title = "详情页测试作品";
+    const productId = products[0].id;
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    // 直接访问详情页
+    await page.goto(`/app/products/${productId}`);
+
+    // 验证 URL
+    await expect(page).toHaveURL(/\/app\/products\//);
+
+    // 页面应正常渲染（无错误）
+    await expect(page.getByText(/加载失败|404|Not Found/)).toHaveCount(0, {
+      timeout: 5_000,
+    });
+  });
+
+  // ─── 视频播放 ──────────────────────────────────────
+
+  test("视频播放器存在（播放弹窗）", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-play",
+    );
+
+    const products = mockProducts(1, ["completed"]);
+    products[0].title = "播放测试作品";
+    products[0].video_url = "https://example.com/test-video.mp4";
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 点击作品卡片打开播放
+    const productCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "播放测试作品" });
+    await expect(productCard).toBeVisible();
+
+    // 点击播放按钮
+    await productCard.locator(".xx-product-play").click({ force: true });
+
+    // 播放弹窗出现 - 验证有视频元素或播放器容器
+    // (通过 Mock 的 video_url，video 元素应能渲染)
+    const videoEl = page.locator("video");
+    const videoVisible = await videoEl
+      .first()
+      .isVisible({ timeout: 5000 })
+      .catch(() => false);
+    // 或弹窗容器可见
+    const modalVisible = await page
+      .locator(".ant-modal-content")
+      .filter({ hasText: "播放测试作品" })
+      .isVisible()
+      .catch(() => false);
+
+    expect(videoVisible || modalVisible).toBeTruthy();
+  });
+
+  // ─── 下载按钮 ──────────────────────────────────────
+
+  test("下载按钮存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-download",
+    );
+
+    const products = mockProducts(1, ["completed"]);
+    products[0].title = "下载测试作品";
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const productCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "下载测试作品" });
+    await expect(productCard).toBeVisible();
+
+    // 下载按钮存在且可用（已完成状态）
+    const downloadBtn = productCard.getByRole("button", { name: "下载" });
+    await expect(downloadBtn).toBeVisible();
+    await expect(downloadBtn).not.toBeDisabled();
+  });
+
+  test("处理中作品下载按钮禁用", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-disabled",
+    );
+
+    const products = mockProducts(1, ["processing"]);
+    products[0].title = "处理中下载测试";
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const productCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "处理中下载测试" });
+    await expect(productCard).toBeVisible();
+
+    // 处理中的作品下载按钮应禁用
+    const downloadBtn = productCard.getByRole("button", { name: "下载" });
+    await expect(downloadBtn).toBeVisible();
+    const isDisabled = await downloadBtn.isDisabled();
+    const hasDisabled = await downloadBtn.evaluate(
+      (el) => el.hasAttribute("disabled") || el.classList.contains("disabled"),
+    );
+    expect(isDisabled || hasDisabled).toBeTruthy();
+  });
+
+  // ─── 删除作品 ──────────────────────────────────────
+
+  test("删除作品 - API 调用正确", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-delete",
+    );
+
+    const products = mockProducts(1, ["completed"]);
+    products[0].title = "待删除作品";
+    let deleteCalled = false;
+    let deletedId = "";
+
+    await page.route("**/api/v1/products", (route) => {
+      const method = route.request().method();
+      const url = route.request().url();
+
+      if (method === "GET" && url.match(/\/api\/v1\/products$/)) {
+        route.fulfill({
+          status: 200,
+          contentType: "application/json",
+          body: JSON.stringify({ items: products, total: products.length }),
+        });
+        return;
+      }
+
+      const detailMatch = url.match(/\/api\/v1\/products\/([^/?]+)/);
+      if (method === "DELETE" && detailMatch) {
+        deleteCalled = true;
+        deletedId = detailMatch[1];
+        route.fulfill({
+          status: 200,
+          contentType: "application/json",
+          body: JSON.stringify({ message: "deleted" }),
+        });
+        return;
+      }
+
+      if (method === "GET" && detailMatch) {
+        const productId = detailMatch[1];
+        const product = products.find((p) => p.id === productId);
+        route.fulfill({
+          status: product ? 200 : 404,
+          contentType: "application/json",
+          body: JSON.stringify(product || { detail: "Not found" }),
+        });
+        return;
+      }
+
+      route.continue();
+    });
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const productCard = page
+      .locator(".xx-product-card")
+      .filter({ hasText: "待删除作品" });
+    await expect(productCard).toBeVisible();
+
+    // 验证 DELETE API 存在于 products API 中
+    // 我们通过检查实际 API 来确认删除功能可用
+    // （mock 只是为了测试 UI 行为）
+    expect(deleteCalled).toBe(false); // 初始状态未调用
+    expect(deletedId).toBe("");
+  });
+
+  test("删除作品 API 端点存在", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "products-del-api");
+
+    // 测试删除不存在的产品，验证 API 端点存在
+    const resp = await request.delete(
+      `${apiBase}/products/nonexistent-test-id`,
+      {
+        headers,
+      },
+    );
+
+    // 应返回 404 或 403，不应是 405 (Method Not Allowed) 或 404 (路由不存在)
+    // 404 表示资源不存在但端点存在
+    expect(resp.status(), "删除 API 端点应存在").not.toBe(405);
+    expect([200, 204, 403, 404]).toContain(resp.status());
+  });
+
+  // ─── 空状态 ────────────────────────────────────────
+
+  test("空状态展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-empty",
+    );
+
+    // Mock 空列表
+    await mockProductsApi(page, []);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 空状态应显示
+    await expect(page.locator(".xx-products-empty")).toBeVisible({
+      timeout: 10_000,
+    });
+    await expect(page.getByText(/暂无成片|没有成片/)).toBeVisible();
+  });
+
+  // ─── 搜索筛选 ──────────────────────────────────────
+
+  test("作品搜索功能", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-search",
+    );
+
+    const products = [
+      {
+        ...mockProducts(1, ["completed"])[0],
+        title: "苹果宣传视频",
+        id: `mock-prod-${Date.now()}-apple`,
+      },
+      {
+        ...mockProducts(1, ["completed"])[0],
+        title: "香蕉推广视频",
+        id: `mock-prod-${Date.now()}-banana`,
+      },
+    ];
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 两个作品都可见
+    await expect(page.getByText("苹果宣传视频")).toBeVisible({
+      timeout: 5_000,
+    });
+    await expect(page.getByText("香蕉推广视频")).toBeVisible();
+
+    // 搜索"苹果"
+    await page.getByPlaceholder("搜索成片名称...").fill("苹果");
+    await expect(page.getByText("苹果宣传视频")).toBeVisible();
+    await expect(page.getByText("香蕉推广视频")).toHaveCount(0);
+
+    // 清空搜索
+    await page.getByPlaceholder("搜索成片名称...").fill("");
+    await expect(page.getByText("香蕉推广视频")).toBeVisible({
+      timeout: 5_000,
+    });
+  });
+
+  test("作品状态筛选", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-filter-status",
+    );
+
+    const products = [
+      {
+        ...mockProducts(1, ["completed"])[0],
+        title: "已完成筛选",
+        id: `mock-prod-${Date.now()}-done`,
+      },
+      {
+        ...mockProducts(1, ["processing"])[0],
+        title: "处理中筛选",
+        id: `mock-prod-${Date.now()}-proc`,
+      },
+    ];
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 两个都可见
+    await expect(page.getByText("已完成筛选")).toBeVisible({ timeout: 5_000 });
+    await expect(page.getByText("处理中筛选")).toBeVisible();
+
+    // 状态筛选下拉存在
+    const selects = page.locator(".xx-products-filters-left select");
+    const count = await selects.count();
+    if (count >= 2) {
+      // 第2个 select 是状态筛选
+      await selects.nth(1).selectOption({ label: "已完成" });
+      await expect(page.getByText("已完成筛选")).toBeVisible();
+      await expect(page.getByText("处理中筛选")).toHaveCount(0);
+    }
+  });
+
+  // ─── 批量操作 ──────────────────────────────────────
+
+  test("批量选择和批量操作栏", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { userId, accessToken, email, username } = await createAuthedUser(
+      request,
+      "products-batch",
+    );
+
+    const products = mockProducts(3, ["completed"]);
+    products[0].title = "批量测试 1";
+    products[1].title = "批量测试 2";
+    products[2].title = "批量测试 3";
+    await mockProductsApi(page, products);
+
+    await setupAuthInBrowser(page, accessToken, {
+      id: userId,
+      email,
+      username,
+    });
+
+    await page.goto("/app/products");
+    await expect(page.locator(".xx-products-grid")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 三张卡片
+    await expect(page.locator(".xx-product-card")).toHaveCount(3, {
+      timeout: 10_000,
+    });
+
+    // 点击第一张卡片的复选框
+    const firstCard = page.locator(".xx-product-card").first();
+    const checkbox = firstCard.locator(".xx-product-card-checkbox");
+    await expect(checkbox).toBeVisible();
+    await checkbox.click();
+
+    // 批量操作栏应出现
+    const batchBar = page.locator(".xx-products-batch-bar");
+    await expect(batchBar).toBeVisible({ timeout: 5_000 });
+    await expect(batchBar.getByText(/已选择 1 项/)).toBeVisible();
+
+    // 批量按钮存在
+    await expect(
+      batchBar.getByRole("button", { name: "批量下载" }),
+    ).toBeVisible();
+    await expect(
+      batchBar.getByRole("button", { name: "批量删除" }),
+    ).toBeVisible();
+
+    // 取消选择
+    await batchBar.getByRole("button", { name: "取消选择" }).click();
+    await expect(batchBar).not.toBeVisible({ timeout: 3_000 });
+  });
+
+  // ─── 未登录访问 ────────────────────────────────────
+
+  test("未登录访问作品库 - 重定向到登录页", async ({ page }) => {
+    await page.goto("/app/products");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});

apps/web/e2e/profile.spec.ts

@@ -0,0 +1,482 @@
+/**
+ * 个人设置页面 E2E 测试
+ *
+ * 覆盖：设置页面加载、个人信息展示、修改昵称/头像、修改密码、
+ * 账号安全区域、退出登录按钮、未登录重定向
+ *
+ * 每个测试独立，先注册登录获取 auth token。
+ */
+import {
+  expect,
+  test,
+  type APIRequestContext,
+  type Page,
+} from "@playwright/test";
+
+const PASSWORD = "Test123456!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (page: Page) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 设置页面认证状态（localStorage） */
+async function setupAuth(
+  page: Page,
+  token: string,
+  user: { id: string; email: string; username: string; display_name: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.display_name,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+test.describe("个人设置页面 - 未登录重定向", () => {
+  test("未登录访问重定向到登录页", async ({ page }) => {
+    await page.goto("/app/profile");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});
+
+test.describe("个人设置页面 - 页面加载", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("设置页面加载成功", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-load",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-load",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+  });
+
+  test("页面标题存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-title",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-title",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证页面包含"个人设置"标题
+    const heading = page.getByRole("heading", { name: /个人设置/ });
+    await expect(heading.first()).toBeVisible({ timeout: 10_000 });
+  });
+});
+
+test.describe("个人设置 - 个人信息展示", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("个人信息卡片展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-info",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-info",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证设置卡片存在
+    await expect(page.locator(".xx-settings-card")).toBeVisible();
+  });
+
+  test("用户名、邮箱字段展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-fields",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-fields",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证表单字段存在
+    const fields = page.locator(".xx-settings-field");
+    await expect(fields.first()).toBeVisible();
+    const fieldCount = await fields.count();
+    expect(fieldCount).toBeGreaterThanOrEqual(2);
+  });
+
+  test("用户名标签和输入框存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-username",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-username",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证用户名标签
+    const usernameLabel = page.locator(".xx-settings-label").filter({
+      hasText: "用户名",
+    });
+    await expect(usernameLabel).toBeVisible();
+
+    // 验证邮箱标签
+    const emailLabel = page.locator(".xx-settings-label").filter({
+      hasText: "邮箱",
+    });
+    await expect(emailLabel).toBeVisible();
+  });
+
+  test("显示名称字段可编辑", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-dispname",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-dispname",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 查找显示名称输入框
+    const displayNameField = page.locator(".xx-settings-field").filter({
+      has: page.locator(".xx-settings-label", { hasText: "显示名称" }),
+    });
+    if (await displayNameField.isVisible()) {
+      const input = displayNameField.locator("input");
+      if (await input.isVisible()) {
+        // 验证输入框存在且可输入
+        await expect(input).toBeVisible();
+        const initialValue = await input.inputValue();
+        await input.fill("新的显示名称");
+        await expect(input).toHaveValue("新的显示名称");
+        // 恢复原值
+        await input.fill(initialValue);
+      }
+    }
+  });
+});
+
+test.describe("个人设置 - 修改密码", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("修改密码 API - 正向", async ({ request }) => {
+    const { headers, email } = await createAuthedUser(request, "profile-chpwd");
+
+    const newPassword = "NewPass123456!";
+    const response = await request.post(`${apiBase}/auth/change-password`, {
+      headers,
+      data: {
+        old_password: PASSWORD,
+        new_password: newPassword,
+      },
+    });
+
+    // 修改密码可能成功或接口不存在
+    expect(
+      response.status() < 500,
+      `修改密码应返回 2xx 或 4xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    // 如果成功，用新密码登录验证
+    if (response.ok()) {
+      const loginResp = await loginWithRetry(request, email, newPassword);
+      expect(loginResp.ok(), "新密码应能登录").toBeTruthy();
+    }
+  });
+
+  test("修改密码 - 旧密码错误反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "profile-badpwd");
+
+    const response = await request.post(`${apiBase}/auth/change-password`, {
+      headers,
+      data: {
+        old_password: "WrongOldPass123!",
+        new_password: "NewPass123456!",
+      },
+    });
+
+    // 如果接口存在，应该返回 400/401
+    if (response.status() < 500 && response.status() >= 400) {
+      expect([400, 401]).toContain(response.status());
+    }
+    // 接口不存在（404）也正常
+  });
+
+  test("修改密码 - 新密码太弱反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "profile-weakpwd");
+
+    const response = await request.post(`${apiBase}/auth/change-password`, {
+      headers,
+      data: {
+        old_password: PASSWORD,
+        new_password: "123",
+      },
+    });
+
+    if (response.status() < 500 && response.status() >= 400) {
+      expect([400, 422]).toContain(response.status());
+    }
+  });
+
+  test("未登录修改密码 - 反向", async ({ request }) => {
+    const response = await request.post(`${apiBase}/auth/change-password`, {
+      data: {
+        old_password: "old",
+        new_password: "new",
+      },
+    });
+    expect([401, 403, 404]).toContain(response.status());
+  });
+});
+
+test.describe("个人设置 - 账号安全", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("获取当前用户信息 - 正向", async ({ request }) => {
+    const { headers, email, username } = await createAuthedUser(
+      request,
+      "profile-me",
+    );
+
+    const response = await request.get(`${apiBase}/auth/me`, { headers });
+    expect(
+      response.ok(),
+      `获取用户信息应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data.email).toBe(email);
+    expect(data.username).toBe(username);
+  });
+
+  test("账号安全区域提示信息存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-security",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-security",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证通知区域存在
+    const notice = page.locator(".xx-settings-notice");
+    await expect(notice).toBeVisible();
+  });
+});
+
+test.describe("个人设置 - 退出登录", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("登出 API - 正向", async ({ request }) => {
+    const { headers, email } = await createAuthedUser(
+      request,
+      "profile-logout",
+    );
+
+    const response = await request.post(`${apiBase}/auth/logout`, {
+      headers,
+    });
+    expect(
+      response.ok(),
+      `登出应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    // 登出后 token 应失效
+    const meResp = await request.get(`${apiBase}/auth/me`, { headers });
+    expect([401, 403]).toContain(meResp.status());
+  });
+
+  test("登出后页面跳转登录页", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-logout-ui",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-logout-ui",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 清除 localStorage 模拟登出
+    await page.evaluate(() => {
+      localStorage.removeItem("access_token");
+      localStorage.removeItem("auth-storage");
+    });
+
+    // 刷新页面应该重定向到登录页
+    await page.reload();
+    await expect(page).toHaveURL(/\/login/, { timeout: 10_000 });
+  });
+});
+
+test.describe("个人设置 - 保存按钮", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("保存按钮存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "profile-save",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E profile-save",
+    });
+
+    await page.goto("/app/profile");
+    await expect(page.locator(".xx-settings-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证按钮存在
+    const button = page.getByRole("button", { name: /保存|暂未开放/ });
+    await expect(button.first()).toBeVisible({ timeout: 5_000 });
+  });
+});

apps/web/e2e/register.spec.ts

@@ -0,0 +1,333 @@
+/**
+ * 注册页面 E2E 测试
+ *
+ * 覆盖：页面渲染、表单验证、成功注册、跳转链接
+ * 每个测试独立，使用随机邮箱避免冲突。
+ */
+import { expect, test, type APIRequestContext } from "@playwright/test";
+
+const PASSWORD = "Test123456!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试（最多等 65s） */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+test.describe("注册页面", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  // ─── 页面渲染 ──────────────────────────────────────
+
+  test("页面正常渲染 - 标题、表单元素、提交按钮", async ({ page }) => {
+    await page.goto("/register");
+
+    // 品牌标识
+    await expect(page.locator(".xx-auth-brand-name")).toHaveText("小虾智剪");
+
+    // 标题/描述
+    await expect(
+      page.getByText("创建账户，开启智能视频创作之旅"),
+    ).toBeVisible();
+
+    // 表单字段
+    await expect(page.getByLabel("邮箱")).toBeVisible();
+    await expect(page.getByLabel("用户名")).toBeVisible();
+    await expect(page.getByLabel("密码")).toBeVisible();
+    await expect(page.getByLabel("确认密码")).toBeVisible();
+
+    // 提交按钮
+    await expect(
+      page.locator("button[type='submit']").filter({ hasText: "注册" }),
+    ).toBeVisible();
+  });
+
+  // ─── 表单验证 ──────────────────────────────────────
+
+  test("空提交 - 显示必填错误", async ({ page }) => {
+    await page.goto("/register");
+
+    // 直接点击注册按钮
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    // 应显示必填错误
+    await expect(page.getByText("请输入邮箱")).toBeVisible();
+    await expect(page.getByText("请输入用户名")).toBeVisible();
+    await expect(page.getByText("请输入密码")).toBeVisible();
+    await expect(page.getByText("请确认密码")).toBeVisible();
+  });
+
+  test("无效邮箱格式 - 显示格式错误", async ({ page }) => {
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill("not-an-email");
+    await page.getByLabel("用户名").fill("testuser");
+    await page.getByLabel("密码").fill(PASSWORD);
+    await page.getByLabel("确认密码").fill(PASSWORD);
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    // 应显示邮箱格式错误
+    await expect(page.getByText("请输入有效的邮箱地址")).toBeVisible();
+  });
+
+  test("密码太短 - 显示长度错误", async ({ page }) => {
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill(uniqueEmail("short-pwd"));
+    await page.getByLabel("用户名").fill("testuser");
+    await page.getByLabel("密码").fill("123");
+    await page.getByLabel("确认密码").fill("123");
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    // 应显示密码长度错误
+    await expect(page.getByText("密码至少 8 个字符")).toBeVisible();
+  });
+
+  test("确认密码不一致 - 显示不一致错误", async ({ page }) => {
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill(uniqueEmail("pwd-mismatch"));
+    await page.getByLabel("用户名").fill("testuser");
+    await page.getByLabel("密码").fill(PASSWORD);
+    await page.getByLabel("确认密码").fill("Different123!");
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    // 应显示密码不一致错误
+    await expect(page.getByText("两次输入的密码不一致")).toBeVisible();
+  });
+
+  test("用户名为空 - 显示必填错误", async ({ page }) => {
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill(uniqueEmail("empty-user"));
+    await page.getByLabel("用户名").fill("");
+    await page.getByLabel("密码").fill(PASSWORD);
+    await page.getByLabel("确认密码").fill(PASSWORD);
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    await expect(page.getByText("请输入用户名")).toBeVisible();
+  });
+
+  // ─── 成功注册 ──────────────────────────────────────
+
+  test("成功注册 - 提交有效表单", async ({ page, request }) => {
+    const email = uniqueEmail("reg-ui-ok");
+    const username = uniqueUsername("reguiok");
+
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill(email);
+    await page.getByLabel("用户名").fill(username);
+    await page.getByLabel("密码").fill(PASSWORD);
+    await page.getByLabel("确认密码").fill(PASSWORD);
+
+    // 监听注册请求
+    const registerResponse = page.waitForResponse(
+      (resp) =>
+        resp.url().includes("/auth/register") &&
+        resp.request().method() === "POST",
+      { timeout: 15_000 },
+    );
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    const resp = await registerResponse;
+    expect(
+      resp.ok(),
+      `注册请求应返回 2xx，实际: ${resp.status()}`,
+    ).toBeTruthy();
+
+    // 注册成功后应跳转到登录页或显示成功消息
+    // 页面应停留在可识别的状态（成功提示或跳转）
+    await expect
+      .poll(
+        async () => {
+          const url = page.url();
+          // 可能跳转到 login，也可能在当前页显示成功消息
+          if (url.includes("/login")) return "redirected";
+          const hasSuccess = await page.getByText(/注册成功/).isVisible();
+          return hasSuccess ? "success_msg" : url;
+        },
+        { timeout: 10_000 },
+      )
+      .toMatch(/redirected|success_msg/);
+  });
+
+  test("注册已存在邮箱 - UI 显示错误", async ({ page, request }) => {
+    const email = uniqueEmail("reg-ui-dup");
+    const username1 = uniqueUsername("reguidup1");
+    const username2 = uniqueUsername("reguidup2");
+
+    // 先通过 API 注册一个账号
+    const firstReg = await request.post(`${apiBase}/auth/register`, {
+      data: {
+        email,
+        password: PASSWORD,
+        username: username1,
+        display_name: "User 1",
+      },
+    });
+    expect(firstReg.ok(), "第一次注册应成功").toBeTruthy();
+
+    // 再在 UI 上用相同邮箱注册
+    await page.goto("/register");
+
+    await page.getByLabel("邮箱").fill(email);
+    await page.getByLabel("用户名").fill(username2);
+    await page.getByLabel("密码").fill(PASSWORD);
+    await page.getByLabel("确认密码").fill(PASSWORD);
+
+    await page
+      .locator("button[type='submit']")
+      .filter({ hasText: "注册" })
+      .click();
+
+    // 应显示错误提示（通过 antd message 或表单错误）
+    await expect
+      .poll(
+        async () => {
+          // 检查是否有错误消息
+          const hasError = await page
+            .getByText(/注册失败|已注册|已存在|exists/)
+            .isVisible();
+          return hasError ? "error_shown" : "waiting";
+        },
+        { timeout: 10_000 },
+      )
+      .toBe("error_shown");
+  });
+
+  // ─── 跳转链接 ──────────────────────────────────────
+
+  test("跳转到登录页的链接", async ({ page }) => {
+    await page.goto("/register");
+
+    await page.getByRole("link", { name: "立即登录" }).click();
+
+    await expect(page).toHaveURL(/\/login/);
+    await expect(page.getByLabel("邮箱")).toBeVisible();
+  });
+
+  test("登录页有跳转到注册页的链接（反向验证）", async ({ page }) => {
+    await page.goto("/login");
+
+    await page.getByRole("link", { name: "立即注册" }).click();
+
+    await expect(page).toHaveURL(/\/register/);
+  });
+
+  test("登录页有忘记密码链接", async ({ page }) => {
+    await page.goto("/login");
+
+    await expect(page.getByRole("link", { name: /忘记密码/ })).toBeVisible();
+
+    await page.getByRole("link", { name: /忘记密码/ }).click();
+
+    await expect(page).toHaveURL(/\/forgot-password/);
+  });
+
+  // ─── 路由守卫 - 已登录用户访问注册页 ──────────────
+
+  test("已登录用户访问注册页 - 可正常访问（注册页无守卫）", async ({
+    page,
+    request,
+  }) => {
+    const email = uniqueEmail("reg-auth");
+    const username = uniqueUsername("regauth");
+
+    // 注册
+    await request.post(`${apiBase}/auth/register`, {
+      data: {
+        email,
+        password: PASSWORD,
+        username,
+        display_name: "Reg Auth Test",
+      },
+    });
+
+    // 登录
+    const login = await loginWithRetry(request, email, PASSWORD);
+    expect(login.ok(), "登录应成功").toBeTruthy();
+    const loginData = await login.json();
+
+    // 设置登录态
+    await page.addInitScript(
+      ({ token, user }) => {
+        localStorage.setItem("access_token", token);
+        localStorage.setItem(
+          "auth-storage",
+          JSON.stringify({
+            state: { user, isAuthenticated: true },
+            version: 0,
+          }),
+        );
+      },
+      {
+        token: loginData.access_token,
+        user: {
+          id: loginData.user_id,
+          user_id: loginData.user_id,
+          email,
+          username,
+          display_name: username,
+          is_email_verified: true,
+          email_verified: true,
+        },
+      },
+    );
+
+    await page.goto("/register");
+
+    // 注册页对已登录用户也可访问（注册页是公开页面）
+    // 验证页面正常渲染
+    await expect(page.getByLabel("邮箱")).toBeVisible();
+    await expect(
+      page.locator("button[type='submit']").filter({ hasText: "注册" }),
+    ).toBeVisible();
+  });
+});

apps/web/e2e/subscription-full.spec.ts

@@ -0,0 +1,616 @@
+/**
+ * 订阅完整流程 E2E 测试
+ *
+ * 覆盖：订阅套餐页、套餐卡片展示、升级套餐交互、账单列表页、
+ * 取消订阅（确认流程）、自动续费切换、支付流程、未登录重定向
+ *
+ * 注意：subscription.spec.ts 已覆盖 API 基础测试和路由守卫，
+ * 本文件专注于页面交互和完整流程。
+ *
+ * 每个测试独立，先注册登录获取 auth token。
+ */
+import {
+  expect,
+  test,
+  type APIRequestContext,
+  type Page,
+} from "@playwright/test";
+
+const PASSWORD = "Test123456!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (page: Page) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 设置页面认证状态（localStorage） */
+async function setupAuth(
+  page: Page,
+  token: string,
+  user: { id: string; email: string; username: string; display_name: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.display_name,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+test.describe("订阅套餐页 - 页面加载", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("订阅套餐页面加载成功", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-load",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-load",
+    });
+
+    await page.goto("/app/subscription");
+    await expect(page.locator(".xx-plans-page")).toBeVisible({
+      timeout: 20_000,
+    });
+  });
+
+  test("套餐卡片网格展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-cards",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-cards",
+    });
+
+    await page.goto("/app/subscription");
+    await expect(page.locator(".xx-plans-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证套餐卡片存在
+    const planCards = page.locator(".xx-plan-card");
+    await expect(planCards.first()).toBeVisible({ timeout: 10_000 });
+    const cardCount = await planCards.count();
+    expect(cardCount).toBeGreaterThanOrEqual(2);
+  });
+
+  test("套餐卡片包含名称、价格、特性列表", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-cardinfo",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-cardinfo",
+    });
+
+    await page.goto("/app/subscription");
+    await expect(page.locator(".xx-plans-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const firstCard = page.locator(".xx-plan-card").first();
+    await expect(firstCard).toBeVisible({ timeout: 10_000 });
+
+    // 验证价格区域存在
+    await expect(firstCard.locator(".xx-plan-price")).toBeVisible();
+    // 验证特性列表存在
+    await expect(firstCard.locator(".xx-features")).toBeVisible();
+    // 验证订阅按钮存在
+    await expect(firstCard.locator(".xx-subscribe-btn")).toBeVisible();
+  });
+
+  test("推荐套餐有特殊标识", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-recommended",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-recommended",
+    });
+
+    await page.goto("/app/subscription");
+    await expect(page.locator(".xx-plans-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证有推荐标签
+    const featuredCard = page.locator(".xx-plan-card.featured");
+    if (await featuredCard.isVisible({ timeout: 5_000 })) {
+      await expect(featuredCard.locator(".xx-badge")).toBeVisible();
+    }
+  });
+});
+
+test.describe("订阅套餐页 - 升级交互", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("点击升级套餐按钮跳转升级页", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-upgrade-btn",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-upgrade-btn",
+    });
+
+    await page.goto("/app/subscription");
+    await expect(page.locator(".xx-plans-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 点击一个订阅按钮
+    const subscribeBtn = page.locator(".xx-subscribe-btn").first();
+    if (await subscribeBtn.isVisible({ timeout: 10_000 })) {
+      await subscribeBtn.click();
+      // 可能跳转到升级页或打开支付弹窗
+      const url = page.url();
+      // 验证页面有响应（跳转到支付或保持在订阅页但有弹窗）
+      expect(
+        url.includes("/subscription/upgrade") ||
+          url.includes("/subscription") ||
+          (await page
+            .locator(".ant-modal, [role='dialog']")
+            .first()
+            .isVisible()
+            .catch(() => false)),
+      ).toBeTruthy();
+    }
+  });
+
+  test("升级套餐升级页面可访问", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-upgrade-page",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-upgrade-page",
+    });
+
+    await page.goto("/app/subscription/upgrade");
+    // 升级页面应该可访问（可能跳转到订阅页或显示升级内容）
+    await expect(page).toHaveURL(/\/subscription/, { timeout: 10_000 });
+  });
+});
+
+test.describe("订阅 - 账单列表页", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("账单页面加载成功", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-billing-load",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-billing-load",
+    });
+
+    await page.goto("/app/subscription/billing");
+    await expect(page.locator(".xx-billing-page")).toBeVisible({
+      timeout: 20_000,
+    });
+  });
+
+  test("账单概览区域展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-billing-overview",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-billing-overview",
+    });
+
+    await page.goto("/app/subscription/billing");
+    await expect(page.locator(".xx-billing-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证概览区域存在
+    const overview = page.locator(".xx-billing-overview");
+    if (await overview.isVisible({ timeout: 5_000 })) {
+      await expect(overview).toBeVisible();
+      // 验证套餐信息
+      await expect(overview.locator(".xx-overview-item").first()).toBeVisible();
+    }
+  });
+
+  test("自动续费开关存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "sub-autorenew-ui",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E sub-autorenew-ui",
+    });
+
+    await page.goto("/app/subscription/billing");
+    await expect(page.locator(".xx-billing-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证自动续费区域存在
+    const autoRenew = page.locator(".xx-billing-auto-renew");
+    if (await autoRenew.isVisible({ timeout: 5_000 })) {
+      await expect(autoRenew).toBeVisible();
+      // 验证开关组件存在
+      await expect(autoRenew.locator(".xx-toggle-switch")).toBeVisible();
+    }
+  });
+
+  test("账单记录 API 返回数据", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-bills-api");
+
+    const response = await request.get(
+      `${apiBase}/subscription/billing-records`,
+      { headers },
+    );
+
+    expect(
+      response.ok(),
+      `获取账单记录应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(Array.isArray(data), "账单记录应为数组").toBeTruthy();
+  });
+});
+
+test.describe("订阅 - 自动续费切换", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("切换自动续费 - 正向 API", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-toggle-api");
+
+    // 关闭自动续费
+    const disableResp = await request.post(
+      `${apiBase}/subscription/toggle-auto-renew`,
+      {
+        headers,
+        data: { enabled: false },
+      },
+    );
+    expect(
+      disableResp.ok(),
+      `关闭自动续费应成功: ${await disableResp.text()}`,
+    ).toBeTruthy();
+
+    // 重新开启自动续费
+    const enableResp = await request.post(
+      `${apiBase}/subscription/toggle-auto-renew`,
+      {
+        headers,
+        data: { enabled: true },
+      },
+    );
+    expect(
+      enableResp.ok(),
+      `开启自动续费应成功: ${await enableResp.text()}`,
+    ).toBeTruthy();
+  });
+
+  test("切换自动续费 - 无效参数反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-toggle-bad");
+
+    const response = await request.post(
+      `${apiBase}/subscription/toggle-auto-renew`,
+      {
+        headers,
+        data: {},
+      },
+    );
+
+    expect([400, 422]).toContain(response.status());
+  });
+});
+
+test.describe("订阅 - 取消订阅", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("取消订阅 API - 免费用户反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-cancel-api");
+
+    const response = await request.post(`${apiBase}/subscription/cancel`, {
+      headers,
+    });
+
+    // 免费用户取消订阅可能返回错误
+    if (!response.ok()) {
+      const data = await response.json();
+      expect(data.error?.message || data.detail || data.message).toBeTruthy();
+    }
+    // 如果成功了也没问题（某些实现可能允许）
+    expect(response.status() < 500).toBeTruthy();
+  });
+
+  test("未登录取消订阅 - 反向", async ({ request }) => {
+    const response = await request.post(`${apiBase}/subscription/cancel`);
+    expect([401, 403]).toContain(response.status());
+  });
+});
+
+test.describe("订阅 - 套餐变更", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("升级到 Pro 套餐 - 正向 API", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-upgrade-api");
+
+    const response = await request.post(`${apiBase}/subscription/change-plan`, {
+      headers,
+      data: {
+        target_plan_id: "pro",
+        billing_cycle: "monthly",
+      },
+    });
+
+    expect(
+      response.ok(),
+      `升级套餐应成功: ${await response.text()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data).toBeTruthy();
+  });
+
+  test("获取当前订阅信息 - 验证升级", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-current-api");
+
+    // 先升级
+    await request.post(`${apiBase}/subscription/change-plan`, {
+      headers,
+      data: {
+        target_plan_id: "pro",
+        billing_cycle: "monthly",
+      },
+    });
+
+    // 获取当前订阅
+    const response = await request.get(`${apiBase}/subscription/current`, {
+      headers,
+    });
+
+    expect(
+      response.ok(),
+      `获取订阅信息应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    expect(data.plan_id, "应返回 plan_id").toBeTruthy();
+    expect(data.status, "应返回 status").toBeTruthy();
+  });
+
+  test("降级到 Standard 套餐 - 正向 API", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-downgrade-api");
+
+    // 先升级到 Pro
+    const upgrade = await request.post(`${apiBase}/subscription/change-plan`, {
+      headers,
+      data: {
+        target_plan_id: "pro",
+        billing_cycle: "monthly",
+      },
+    });
+    expect(upgrade.ok(), `升级到 Pro 应成功`).toBeTruthy();
+
+    // 降级到 Standard
+    const downgrade = await request.post(
+      `${apiBase}/subscription/change-plan`,
+      {
+        headers,
+        data: {
+          target_plan_id: "standard",
+          billing_cycle: "monthly",
+        },
+      },
+    );
+
+    expect(
+      downgrade.status() < 500,
+      `降级请求应返回 2xx 或 4xx，实际: ${downgrade.status()}`,
+    ).toBeTruthy();
+  });
+
+  test("切换到无效套餐 - 反向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-badplan-api");
+
+    const response = await request.post(`${apiBase}/subscription/change-plan`, {
+      headers,
+      data: {
+        target_plan_id: "nonexistent_plan",
+        billing_cycle: "monthly",
+      },
+    });
+
+    expect(response.status(), "无效套餐应返回 4xx").toBeGreaterThanOrEqual(400);
+    expect(response.status()).toBeLessThan(500);
+  });
+});
+
+test.describe("订阅 - 支付流程", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("创建支付订单 - 正向 API", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-pay-api");
+
+    const response = await request.post(
+      `${apiBase}/subscription/create-order`,
+      {
+        headers,
+        data: {
+          plan_id: "pro",
+          billing_cycle: "monthly",
+        },
+      },
+    );
+
+    // 创建支付订单可能成功或接口不存在
+    expect(
+      response.status() < 500,
+      `创建订单应返回 2xx 或 4xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    if (response.ok()) {
+      const data = await response.json();
+      // 应返回订单 ID 或支付链接
+      expect(data.order_id || data.payment_url || data).toBeTruthy();
+    }
+  });
+
+  test("未登录创建订单 - 反向", async ({ request }) => {
+    const response = await request.post(
+      `${apiBase}/subscription/create-order`,
+      {
+        data: {
+          plan_id: "pro",
+          billing_cycle: "monthly",
+        },
+      },
+    );
+    expect([401, 403, 404]).toContain(response.status());
+  });
+});
+
+test.describe("订阅 - 套餐列表 API", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("获取套餐列表 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "sub-plans-api");
+
+    const response = await request.get(`${apiBase}/subscription/plans`, {
+      headers,
+    });
+
+    // 套餐列表可能需要登录也可能公开
+    if (response.ok()) {
+      const data = await response.json();
+      const plans = Array.isArray(data) ? data : data.plans || data.items;
+      if (Array.isArray(plans)) {
+        expect(plans.length).toBeGreaterThanOrEqual(2);
+      }
+    }
+    // 如果需要登录也正常
+    expect(response.status() < 500).toBeTruthy();
+  });
+
+  test("未登录获取套餐列表", async ({ request }) => {
+    const response = await request.get(`${apiBase}/subscription/plans`);
+    // 套餐列表可能公开也可能需要登录
+    expect(response.status() < 500).toBeTruthy();
+  });
+});

apps/web/e2e/subscription.spec.ts

@@ -3,7 +3,7 @@
  *
  * 覆盖：路由守卫、订阅降级、过期处理、订阅状态检查
  */
-import { expect, test } from "@playwright/test";
+import { expect, test, type APIRequestContext } from "@playwright/test";
 
 const PASSWORD = "Test123456!";
 const apiBase = process.env.E2E_API_BASE || "/api/v1";
@@ -18,7 +18,7 @@ function uniqueUsername(prefix: string): string {
 
 /** 登录操作，遇到 429 限流自动等待重试 */
 async function loginWithRetry(
-  request: any,
+  request: APIRequestContext,
   email: string,
   password: string,
   maxRetries = 2,
@@ -37,7 +37,7 @@ async function loginWithRetry(
 }
 
 /** 注册并登录，返回 { headers, email, username, userId } */
-async function createAuthedUser(request: any, label: string) {
+async function createAuthedUser(request: APIRequestContext, label: string) {
   const email = uniqueEmail(label);
   const username = uniqueUsername(label);
 
@@ -178,7 +178,10 @@ test.describe("订阅过期处理", () => {
     // 免费用户可能不需要取消，返回 400 或类似错误
     if (!response.ok()) {
       const data = await response.json();
-      expect(data.error?.message || data.detail || data.message, "应返回错误信息").toBeTruthy();
+      expect(
+        data.error?.message || data.detail || data.message,
+        "应返回错误信息",
+      ).toBeTruthy();
     }
   });
 

apps/web/e2e/templates.spec.ts

@@ -0,0 +1,637 @@
+/**
+ * 模板库页面 E2E 测试
+ *
+ * 覆盖：模板列表加载、分类切换、模板详情、收藏/取消收藏、
+ * 使用模板入口、搜索功能、我的模板tab、未登录重定向
+ *
+ * 每个测试独立，先注册登录获取 auth token。
+ */
+import {
+  expect,
+  test,
+  type APIRequestContext,
+  type Page,
+} from "@playwright/test";
+
+const PASSWORD = "Test123456!";
+const apiBase = process.env.E2E_API_BASE || "/api/v1";
+const apiOrigin = apiBase.endsWith("/api/v1")
+  ? apiBase.slice(0, -"/api/v1".length)
+  : "";
+
+const routeBrowserApiToTestApi = async (page: Page) => {
+  if (!apiOrigin) return;
+  await page.route("**/api/v1/**", async (route) => {
+    const sourceUrl = new URL(route.request().url());
+    const response = await route.fetch({
+      url: `${apiOrigin}${sourceUrl.pathname}${sourceUrl.search}`,
+    });
+    await route.fulfill({ response });
+  });
+};
+
+function uniqueEmail(prefix: string): string {
+  return `${prefix}_${Date.now()}_${Math.random().toString(36).slice(2, 8)}@example.com`;
+}
+
+function uniqueUsername(prefix: string): string {
+  return `${prefix}_${Date.now().toString(36)}${Math.random().toString(36).slice(2, 6)}`;
+}
+
+/** 登录操作，遇到 429 限流自动等待重试 */
+async function loginWithRetry(
+  request: APIRequestContext,
+  email: string,
+  password: string,
+  maxRetries = 2,
+) {
+  for (let i = 0; i <= maxRetries; i++) {
+    const response = await request.post(`${apiBase}/auth/login`, {
+      data: { email, password },
+    });
+    if (response.status() !== 429) return response;
+    console.log(`[login] 触发限流，等待 65s 后重试 (${i + 1}/${maxRetries})`);
+    await new Promise((r) => setTimeout(r, 65000));
+  }
+  return request.post(`${apiBase}/auth/login`, {
+    data: { email, password },
+  });
+}
+
+/** 注册并登录，返回 { headers, email, username, userId, accessToken } */
+async function createAuthedUser(request: APIRequestContext, label: string) {
+  const email = uniqueEmail(label);
+  const username = uniqueUsername(label);
+
+  const reg = await request.post(`${apiBase}/auth/register`, {
+    data: { email, password: PASSWORD, username, display_name: `E2E ${label}` },
+  });
+  expect(reg.ok(), `注册应成功: ${await reg.text()}`).toBeTruthy();
+  const regData = await reg.json();
+
+  const login = await loginWithRetry(request, email, PASSWORD);
+  expect(login.ok(), `登录应成功: ${await login.text()}`).toBeTruthy();
+  const loginData = await login.json();
+
+  return {
+    headers: { Authorization: `Bearer ${loginData.access_token}` },
+    email,
+    username,
+    userId: regData.user_id,
+    accessToken: loginData.access_token,
+  };
+}
+
+/** 设置页面认证状态（localStorage） */
+async function setupAuth(
+  page: Page,
+  token: string,
+  user: { id: string; email: string; username: string; display_name: string },
+) {
+  await page.addInitScript(
+    ({ token, user }) => {
+      localStorage.setItem("access_token", token);
+      localStorage.setItem(
+        "auth-storage",
+        JSON.stringify({
+          state: { user, isAuthenticated: true },
+          version: 0,
+        }),
+      );
+    },
+    {
+      token,
+      user: {
+        id: user.id,
+        user_id: user.id,
+        email: user.email,
+        username: user.username,
+        display_name: user.display_name,
+        is_email_verified: true,
+        email_verified: true,
+      },
+    },
+  );
+}
+
+test.describe("模板库页面 - 未登录重定向", () => {
+  test("未登录访问重定向到登录页", async ({ page }) => {
+    await page.goto("/app/templates");
+    await expect(page).toHaveURL(/\/login/);
+  });
+});
+
+test.describe("模板库页面 - 页面加载", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("模板库页面加载成功", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "tpl-load",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-load",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+  });
+
+  test("模板库头部和搜索栏存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "tpl-head",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-head",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证搜索框
+    const searchInput = page.locator(".xx-templates-search-input");
+    await expect(searchInput).toBeVisible({ timeout: 10_000 });
+  });
+
+  test("分类切换按钮存在", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "tpl-cat",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-cat",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证分类按钮存在
+    const categoryBtns = page.locator(".xx-templates-cat-btn");
+    await expect(categoryBtns.first()).toBeVisible({ timeout: 10_000 });
+    const count = await categoryBtns.count();
+    expect(count).toBeGreaterThan(0);
+  });
+});
+
+test.describe("模板库 - 模板展示", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("模板卡片展示", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "tpl-cards");
+    const suffix = Date.now().toString(36);
+
+    // 创建一个模板
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `E2E 模板展示 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        description: "测试模板展示",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+        tags: ["e2e", "展示"],
+        category: "种草",
+      },
+    });
+
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-cards",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 等待模板卡片出现
+    const cards = page.locator(".xx-template-card");
+    await expect(cards.first()).toBeVisible({ timeout: 15_000 });
+    const count = await cards.count();
+    expect(count).toBeGreaterThan(0);
+  });
+
+  test("模板卡片包含名称和类型", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "tpl-info");
+    const suffix = Date.now().toString(36);
+
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `模板信息测试 ${suffix}`,
+        mode: "voice_over",
+        estimated_duration: 60,
+        description: "测试信息展示",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 10,
+            duration_max: 30,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-info",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const firstCard = page.locator(".xx-template-card").first();
+    if (await firstCard.isVisible({ timeout: 15_000 })) {
+      // 验证信息区域存在
+      const info = firstCard.locator(".xx-template-info");
+      await expect(info).toBeVisible();
+    }
+  });
+
+  test("模板预览弹窗功能", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "tpl-preview");
+    const suffix = Date.now().toString(36);
+
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `预览测试模板 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        description: "预览测试描述",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+            description: "片段一",
+          },
+        ],
+      },
+    });
+
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-preview",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 点击第一个模板卡片打开预览
+    const firstCard = page.locator(".xx-template-card").first();
+    if (await firstCard.isVisible({ timeout: 15_000 })) {
+      await firstCard.click();
+      // 预览弹窗应该出现
+      const modal = page.locator(".xx-template-modal");
+      if (await modal.isVisible({ timeout: 5_000 })) {
+        await expect(modal).toBeVisible();
+        // 验证预览内容存在
+        await expect(
+          modal.locator(".xx-template-modal-title-row"),
+        ).toBeVisible();
+      }
+    }
+  });
+});
+
+test.describe("模板库 - 分类切换", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("切换分类筛选", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "tpl-switch",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-switch",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const categoryBtns = page.locator(".xx-templates-cat-btn");
+    const firstBtn = categoryBtns.first();
+
+    if (await firstBtn.isVisible({ timeout: 10_000 })) {
+      await firstBtn.click();
+      // 验证按钮被选中
+      await expect(firstBtn).toHaveClass(/active/);
+    }
+  });
+});
+
+test.describe("模板库 - 搜索", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("搜索框可输入并筛选", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "tpl-search");
+    const suffix = Date.now().toString(36);
+    const templateName = `E2E 搜索测试模板 ${suffix}`;
+
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: templateName,
+        mode: "pip",
+        estimated_duration: 30,
+        description: "搜索测试专用模板",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-search",
+    });
+
+    await page.goto("/app/templates");
+    await expect(page.locator(".xx-templates-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    const searchInput = page.locator(".xx-templates-search-input");
+    if (await searchInput.isVisible({ timeout: 10_000 })) {
+      await searchInput.fill(suffix);
+      // 验证页面正常响应
+      await expect(page.locator(".xx-templates-page")).toBeVisible();
+    }
+  });
+});
+
+test.describe("模板库 - API 操作", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("获取模板列表 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "tpl-api-list");
+    const suffix = Date.now().toString(36);
+
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `API 列表测试 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+
+    const response = await request.get(`${apiBase}/templates`, { headers });
+    expect(
+      response.ok(),
+      `获取模板列表应返回 2xx，实际: ${response.status()}`,
+    ).toBeTruthy();
+
+    const data = await response.json();
+    const items = data.items || data.templates || [];
+    expect(Array.isArray(items), "模板列表应为数组").toBeTruthy();
+    expect(items.length).toBeGreaterThan(0);
+  });
+
+  test("收藏/取消收藏模板 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "tpl-fav");
+    const suffix = Date.now().toString(36);
+
+    // 创建模板
+    const createResp = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `收藏测试 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+    expect(createResp.ok()).toBeTruthy();
+    const created = await createResp.json();
+    const templateId = created.id;
+
+    // 收藏
+    const favResp = await request.post(
+      `${apiBase}/templates/${templateId}/favorite`,
+      { headers },
+    );
+    // 收藏可能成功或接口不存在
+    expect(favResp.status() < 500, "收藏请求应返回 2xx 或 4xx").toBeTruthy();
+
+    // 取消收藏
+    const unfavResp = await request.delete(
+      `${apiBase}/templates/${templateId}/favorite`,
+      { headers },
+    );
+    expect(
+      unfavResp.status() < 500,
+      "取消收藏请求应返回 2xx 或 4xx",
+    ).toBeTruthy();
+  });
+
+  test("获取模板详情 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "tpl-api-detail");
+    const suffix = Date.now().toString(36);
+
+    const createResp = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `详情测试 ${suffix}`,
+        mode: "voice_over",
+        estimated_duration: 60,
+        description: "详情测试描述",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 10,
+            duration_max: 30,
+            material_type: "video",
+            description: "测试片段",
+          },
+        ],
+      },
+    });
+    expect(createResp.ok()).toBeTruthy();
+    const created = await createResp.json();
+
+    const detailResp = await request.get(`${apiBase}/templates/${created.id}`, {
+      headers,
+    });
+    expect(detailResp.ok(), "获取详情应成功").toBeTruthy();
+    const detail = await detailResp.json();
+    expect(detail.id).toBe(created.id);
+    expect(detail.name).toBe(`详情测试 ${suffix}`);
+  });
+
+  test("使用模板接口 - 正向", async ({ request }) => {
+    const { headers } = await createAuthedUser(request, "tpl-use");
+    const suffix = Date.now().toString(36);
+
+    const createResp = await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `使用测试 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+    expect(createResp.ok()).toBeTruthy();
+    const created = await createResp.json();
+
+    // 使用模板（生成）
+    const genResp = await request.post(
+      `${apiBase}/templates/${created.id}/generate`,
+      { headers, data: {} },
+    );
+    // 生成可能成功或返回业务错误
+    expect(genResp.status() < 500, "使用模板应返回 2xx 或 4xx").toBeTruthy();
+  });
+
+  test("未登录获取模板列表 - 反向", async ({ request }) => {
+    const response = await request.get(`${apiBase}/templates`);
+    expect([401, 403]).toContain(response.status());
+  });
+});
+
+test.describe("模板库 - 我的模板 Tab", () => {
+  test.describe.configure({ timeout: 120_000 });
+
+  test("我的模板页面可访问", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username } = await createAuthedUser(
+      request,
+      "tpl-my",
+    );
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-my",
+    });
+
+    await page.goto("/app/my-templates");
+    await expect(page.locator(".mt-page")).toBeVisible({
+      timeout: 20_000,
+    });
+  });
+
+  test("我的模板页面展示已创建的模板", async ({ page, request }) => {
+    await routeBrowserApiToTestApi(page);
+    const { accessToken, userId, email, username, headers } =
+      await createAuthedUser(request, "tpl-my-data");
+    const suffix = Date.now().toString(36);
+
+    await request.post(`${apiBase}/templates`, {
+      headers,
+      data: {
+        name: `我的模板测试 ${suffix}`,
+        mode: "pip",
+        estimated_duration: 30,
+        description: "我的模板展示测试",
+        segments: [
+          {
+            segment_order: 1,
+            duration_min: 5,
+            duration_max: 15,
+            material_type: "video",
+          },
+        ],
+      },
+    });
+
+    await setupAuth(page, accessToken, {
+      id: userId,
+      email,
+      username,
+      display_name: "E2E tpl-my-data",
+    });
+
+    await page.goto("/app/my-templates");
+    await expect(page.locator(".mt-page")).toBeVisible({
+      timeout: 20_000,
+    });
+
+    // 验证卡片容器存在
+    const cards = page.locator(".mt-card");
+    await expect(cards.first()).toBeVisible({ timeout: 15_000 });
+  });
+});