feat: M4 文风 + M5 生成/多provider/Skill + Kimi Code 订阅接入 + 本地联调修复

M4（文风）: style-auditor 双轨（提取指纹/漂移第四审）+ jobs 长任务框架(zombie reaper) + 回炉 refine + GET /style read-back。
M5（生成+扩展）: worldbuilder/character-gen（入库 continuity 409 gate + partition_writes 白名单 + schema→JSONB 形变）；
  网关多 provider 回退链/熔断/能力降级（Anthropic/Gemini 适配器）；Skill registry + 表权限沙箱 + 规则；
  前端 角色生成器/世界观/Codex/规则页/技能库/⌘K 命令面板。
K1（Kimi Code 订阅接入）: OAuth device-flow（kimi-code）+ 静态 Console key（kimi-code-key）两路径；
  coding 端点 KimiCLI 伪造头（实测 UA allow-list 门禁，缺则 403）+ JSON 模式结构化（thinking ⊥ tool_choice）。
本地联调修复: CORS 中间件；assemble 注入 premise+「写第N章」指令（修空 prompt 400）；
  GET /outline·/draft read-back + 大纲/工作台/审稿页重载；写页 client/server 常量边界 + notFound 健壮化；
  字数 toLocaleString locale 水合；审稿页终稿从已存草稿 seed（修 accept 422）。
门禁: backend ruff/mypy(157)/alembic 无漂移/pytest 451 · frontend lint/tsc/vitest/build。

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

packages/db/migrations/versions/1f011c42bd4d_provider_credentials_oauth_columns.py

@@ -0,0 +1,47 @@
+"""provider_credentials oauth columns
+
+Revision ID: 1f011c42bd4d
+Revises: 220ca2e3d53f
+Create Date: 2026-06-19 15:25:05.499145
+"""
+
+from __future__ import annotations
+
+from collections.abc import Sequence
+
+import sqlalchemy as sa
+from alembic import op
+from sqlalchemy.dialects import postgresql
+
+revision: str = "1f011c42bd4d"
+down_revision: str | None = "220ca2e3d53f"
+branch_labels: str | Sequence[str] | None = None
+depends_on: str | Sequence[str] | None = None
+
+
+def upgrade() -> None:
+    op.add_column(
+        "provider_credentials",
+        sa.Column("auth_type", sa.Text(), server_default=sa.text("'api_key'"), nullable=False),
+    )
+    op.add_column(
+        "provider_credentials",
+        sa.Column("oauth_enc", sa.LargeBinary(), nullable=True),
+    )
+    op.alter_column(
+        "provider_credentials",
+        "api_key_enc",
+        existing_type=postgresql.BYTEA(),
+        nullable=True,
+    )
+
+
+def downgrade() -> None:
+    op.alter_column(
+        "provider_credentials",
+        "api_key_enc",
+        existing_type=postgresql.BYTEA(),
+        nullable=False,
+    )
+    op.drop_column("provider_credentials", "oauth_enc")
+    op.drop_column("provider_credentials", "auth_type")

packages/db/ww_db/models.py

@@ -180,7 +180,9 @@ class ProviderCredential(UuidPk, CreatedAt, Base):
         ForeignKey("projects.id", ondelete="CASCADE")
     )
     provider: Mapped[str] = mapped_column(Text, nullable=False)
-    api_key_enc: Mapped[bytes] = mapped_column(LargeBinary, nullable=False)
+    auth_type: Mapped[str] = mapped_column(Text, nullable=False, server_default=text("'api_key'"))
+    api_key_enc: Mapped[bytes | None] = mapped_column(LargeBinary, nullable=True)
+    oauth_enc: Mapped[bytes | None] = mapped_column(LargeBinary, nullable=True)
 
 
 class TierRouting(UuidPk, Base):