@c4a/context-cli 0.6.1-beta.5 → 0.6.1-beta.6

package/README.md

@@ -150,7 +150,7 @@ context source add file [YYYYMMDD] --module <module> --local <file-or-folder>
 context source add lark [YYYYMMDD] --module <module> --url <lark-url>
 context source add batch [YYYYMMDD] --input <yaml-or-json>
 context source remove <source-id> --format json          # preview
-context source remove <source-id> --yes --format json    # apply after reference checks
+context source remove <source-id> --yes --plan-digest <preview-digest> --format json
 context source ensure [source]
 context source inspect [source]
 

package/README.zh-CN.md

@@ -116,7 +116,7 @@ context source add file [YYYYMMDD] --module <module> --local <file-or-folder>
 context source add lark [YYYYMMDD] --module <module> --url <lark-url>
 context source add batch [YYYYMMDD] --input <yaml-or-json>
 context source remove <source-id> --format json          # 预览
-context source remove <source-id> --yes --format json    # 引用检查通过后执行
+context source remove <source-id> --yes --plan-digest <预览摘要> --format json
 context source ensure [source]
 context source inspect [source]
 

package/cli.js

@@ -17936,6 +17936,7 @@ function renderAgents(projectName, language) {
       "- 来源边界、正文读取、提取范围、语义分类、结构确认、Review 和包形态均是显式门禁，除非当前 Route 已证明可以继续。",
       "- 不得根据目录、文件名、URL、示例或旧会话推断用户决定；没有明确授权时不得对来源仓库执行 clone、fetch、checkout、install、build、test 或脚本。",
       "- 生命周期写入必须使用 Context CLI，不得用临时脚本修改 `sources/`、`knowledge/`、`dist/` 或 `.tmp/context-runtime/`。",
+      "- 飞书采集只在 `evidence_status: error` 时停止；`projection_status: generic|warning` 表示原始 XML 已保留且可继续。不得在用户工作区修补 CLI 或手改快照来增加 renderer。",
       "- Agent 编写的临时输入优先放在 `.tmp/agent-payloads/`；这是推荐而非强制。不要自行创建 `inputs/` 等顶层临时目录。",
       "- 普通 Review 使用用户原样提供的 Payload；托管批准只能使用托管 status 返回的 revision-bound 原子命令。",
       "- Route 允许时，只读证据可以并行；注册、stage、confirm、Review apply、close 和 build 必须串行。",
@@ -17972,6 +17973,7 @@ function renderAgents(projectName, language) {
     "- Source boundaries, source-body reads, extraction scope, semantic classification, structure confirmation, Review, and package shape remain explicit gates unless the current route proves otherwise.",
     "- Never infer source or review decisions from repository layout, filenames, URLs, examples, or prior conversations. Never clone, fetch, checkout, install, build, test, or run source-repository scripts without explicit authority.",
     "- Use Context CLI for lifecycle writes. Do not inspect or repair `sources/`, `knowledge/`, `dist/`, or `.tmp/context-runtime/` with ad hoc scripts.",
+    "- Stop Lark capture only for `evidence_status: error`. A `projection_status` of `generic` or `warning` means the original XML is preserved and the route may continue. Never patch the CLI or edit snapshots in a user workspace to add a renderer.",
     "- Prefer `.tmp/agent-payloads/` for Agent-authored transient command inputs. This is a recommendation, not a CLI requirement; explicit custom paths remain valid. Avoid inventing top-level scratch directories such as `inputs/`.",
     "- Review uses the user's exact Payload in ordinary mode. Managed approval uses only the revision-bound atomic command returned by managed status.",
     "- Evidence reads may be parallel when the route says so; registry, stage, confirm, Review apply, close, and build mutations are serial.",
@@ -45952,6 +45954,7 @@ function fidelityIssues(value, field) {
     }
     return {
       severity: item.severity,
+      impact: item.impact === "evidence" || item.impact === "projection" ? item.impact : item.severity === "error" ? "evidence" : "projection",
       code: requiredString(item.code, `${field}[${index}].code`),
       block_type: requiredString(item.block_type, `${field}[${index}].block_type`),
       count: item.count,
@@ -45983,11 +45986,29 @@ function parseDocumentCaptureFidelity(value, field) {
       throw new TypeError(`${field} does not close for ${blockType}: discovered ${discoveredCount}, converted ${converted[blockType] ?? 0}, skipped ${skippedCount}`);
     }
   }
-  const status = issues.some((issue) => issue.severity === "error") ? "error" : issues.length > 0 ? "warning" : "complete";
+  const evidenceStatus = issues.some((issue) => issue.impact === "evidence" && issue.severity === "error") ? "error" : "complete";
+  const projectionIssues = issues.filter((issue) => issue.impact === "projection");
+  const inferredProjectionStatus = projectionIssues.some((issue) => issue.severity === "error") ? "error" : projectionIssues.some((issue) => issue.code === "lark.capture.generic-projection") ? "generic" : projectionIssues.length > 0 ? "warning" : "complete";
+  const projectionStatus = value.projection_status === "complete" || value.projection_status === "generic" || value.projection_status === "warning" || value.projection_status === "error" ? value.projection_status : inferredProjectionStatus;
+  const status = evidenceStatus === "error" || projectionStatus === "error" ? "error" : issues.length > 0 ? "warning" : "complete";
   if (value.status !== status) {
     throw new TypeError(`${field}.status must be ${status} for its issues`);
   }
-  return { status, discovered, converted, skipped, issues };
+  if (value.evidence_status !== undefined && value.evidence_status !== evidenceStatus) {
+    throw new TypeError(`${field}.evidence_status must be ${evidenceStatus} for its issues`);
+  }
+  if (value.projection_status !== undefined && value.projection_status !== inferredProjectionStatus) {
+    throw new TypeError(`${field}.projection_status must be ${inferredProjectionStatus} for its issues`);
+  }
+  return {
+    status,
+    evidence_status: evidenceStatus,
+    projection_status: projectionStatus,
+    discovered,
+    converted,
+    skipped,
+    issues
+  };
 }
 
 // ../extract/src/documentEvidence.ts
@@ -62934,7 +62955,7 @@ function batchIdentity(sourceName) {
     return;
   return { batch, module };
 }
-function parseBatchManifest(value) {
+function parseDocumentSnapshotBatchManifest(value) {
   if (value === null || typeof value !== "object" || Array.isArray(value)) {
     throw new TypeError("document snapshot batch manifest must be an object");
   }
@@ -62958,7 +62979,7 @@ function findDocumentSnapshotForSource(value, sourceName) {
     const identity = batchIdentity(sourceName);
     if (identity === undefined)
       throw new TypeError(`batch manifest cannot resolve non-batch source: ${sourceName}`);
-    const batch = parseBatchManifest(value);
+    const batch = parseDocumentSnapshotBatchManifest(value);
     const snapshot2 = batch.sources[identity.module];
     if (snapshot2 === undefined)
       return null;
@@ -62991,7 +63012,7 @@ function updateDocumentManifestFile(input) {
   const identity = batchIdentity(input.snapshot.source_name);
   if (identity === undefined)
     return input.snapshot;
-  const existing = input.current === null ? undefined : parseBatchManifest(input.current);
+  const existing = input.current === null ? undefined : parseDocumentSnapshotBatchManifest(input.current);
   if (existing !== undefined && (existing.source_type !== input.snapshot.source_type || existing.batch !== identity.batch)) {
     throw new TypeError(`document snapshot batch identity mismatch for ${input.snapshot.source_name}`);
   }
@@ -63005,6 +63026,36 @@ function updateDocumentManifestFile(input) {
     }).sort(([left], [right]) => left.localeCompare(right)))
   };
 }
+function removeDocumentSnapshotFromManifestFile(input) {
+  if (input.current === null) {
+    return { snapshot: null, next: null, remainingSources: 0 };
+  }
+  if (input.current !== null && typeof input.current === "object" && !Array.isArray(input.current) && input.current.schema_version === DOCUMENT_SNAPSHOT_BATCH_SCHEMA_VERSION) {
+    const identity = batchIdentity(input.sourceName);
+    if (identity === undefined)
+      throw new TypeError(`batch manifest cannot resolve non-batch source: ${input.sourceName}`);
+    const batch = parseDocumentSnapshotBatchManifest(input.current);
+    if (batch.batch !== identity.batch) {
+      throw new TypeError(`document snapshot batch identity mismatch for ${input.sourceName}`);
+    }
+    const snapshot2 = batch.sources[identity.module] ?? null;
+    if (snapshot2 !== null && snapshot2.source_name !== input.sourceName) {
+      throw new TypeError(`document snapshot batch source entry does not match ${input.sourceName}`);
+    }
+    const sources = Object.fromEntries(Object.entries(batch.sources).filter(([module]) => module !== identity.module).sort(([left], [right]) => left.localeCompare(right)));
+    const remainingSources = Object.keys(sources).length;
+    return {
+      snapshot: snapshot2,
+      next: remainingSources === 0 ? null : { ...batch, sources },
+      remainingSources
+    };
+  }
+  const snapshot = parseDocumentSnapshotManifest(input.current);
+  if (snapshot.source_name !== input.sourceName) {
+    throw new TypeError(`document snapshot is for ${snapshot.source_name}, expected ${input.sourceName}`);
+  }
+  return { snapshot, next: null, remainingSources: 0 };
+}
 function renderDocumentManifestFile(value) {
   return `${JSON.stringify(value, null, 2)}
 `;
@@ -63520,11 +63571,11 @@ function documentSnapshotFidelityState(manifest) {
   const report = manifest.metadata?.capture?.fidelity;
   if (report === undefined)
     return { blocking: [], warnings: [] };
-  const render = (severity) => report.issues.filter((issue) => issue.severity === severity).map((issue) => `${issue.code}: ${issue.block_type} × ${issue.count}: ${issue.reason}`);
+  const render = (predicate) => report.issues.filter(predicate).map((issue) => `${issue.code}: ${issue.block_type} × ${issue.count}: ${issue.reason}`);
   return {
     report,
-    blocking: render("error"),
-    warnings: render("warning")
+    blocking: render((issue) => issue.impact === "evidence" && issue.severity === "error"),
+    warnings: render((issue) => issue.impact === "projection" || issue.severity === "warning")
   };
 }
 
@@ -84000,7 +84051,7 @@ async function documentSourceStatus(projectRoot, type, source3) {
     source: source3,
     snapshotConfigured: readiness.snapshotConfigured
   }) : null;
-  const agentHints = readiness.ready ? [] : [readiness.captureFidelity?.status === "error" ? "document-capture-fidelity-blocked" : "document-source-not-captured"];
+  const agentHints = readiness.ready ? [] : [readiness.captureFidelity?.evidence_status === "error" ? "document-capture-fidelity-recapture-required" : "document-source-not-captured"];
   if (documentSiteHint !== null)
     agentHints.push(documentSiteHint);
   return {
@@ -84097,7 +84148,7 @@ function documentSnapshotReadiness(input) {
       return {
         ready: false,
         diagnostics: fidelity.blocking,
-        workspaceDiagnostics: fidelity.blocking,
+        workspaceDiagnostics: [],
         ...fidelity.report !== undefined ? { captureFidelity: fidelity.report } : {}
       };
     }
@@ -84112,7 +84163,7 @@ function documentSnapshotReadiness(input) {
     }
     return {
       ready: true,
-      diagnostics: [],
+      diagnostics: fidelity.warnings,
       workspaceDiagnostics: [],
       snapshotHash: manifest.snapshot_hash,
       ...fidelity.report !== undefined ? { captureFidelity: fidelity.report } : {},
@@ -84318,6 +84369,8 @@ function workspaceStateValid(observation) {
   return true;
 }
 function blockingVerificationClear(observation) {
+  if (observation.capturedDocumentSources < observation.documentSources.length)
+    return true;
   if (observation.verifyErrors === 0)
     return true;
   if (verifyErrorsAreCloseRepairable(observation.verifyIssues))
@@ -84325,6 +84378,8 @@ function blockingVerificationClear(observation) {
   return onlySourceDriftErrors(observation.verifyIssues);
 }
 function evidenceMaintenanceClear(observation) {
+  if (observation.capturedDocumentSources < observation.documentSources.length)
+    return true;
   return observation.evidenceWarnings !== "orphaned" && observation.evidenceWarnings !== "stale";
 }
 function proseDeclarationsComplete(observation) {
@@ -84877,7 +84932,7 @@ function rootDiagnostics(observation) {
       message: "Approved knowledge changed and its deterministic structure projection must be refreshed.",
       count: observation.projectionRefreshIssues
     });
-  } else if (observation.verifyErrors > 0) {
+  } else if (observation.verifyErrors > 0 && observation.capturedDocumentSources === observation.documentSources.length) {
     diagnostics.push({
       code: "diagnostic.verify-failed",
       severity: "error",
@@ -85282,8 +85337,8 @@ function renderSources(status) {
   const repositories = status.sources.map((source3) => `${inline(source3.name)} — ready=${inline(source3.ready)}, ref=${inline(source3.ref)}, scope-match=${inline(source3.scopeMatches)}` + (source3.subpath === undefined ? "" : `, subpath=${inline(source3.subpath)}`));
   const documents = status.documentSources.map((source3) => {
     const fidelity = source3.captureFidelity;
-    const summary = fidelity === undefined ? "fidelity=unavailable" : `fidelity=${inline(fidelity.status)}, discovered=${Object.values(fidelity.discovered).reduce((sum, count) => sum + count, 0)}, converted=${Object.values(fidelity.converted).reduce((sum, count) => sum + count, 0)}, skipped=${fidelity.skipped.reduce((sum, item) => sum + item.count, 0)}`;
-    const issues = fidelity?.issues.map((issue) => `${inline(issue.severity)} ${inline(issue.code)} ${inline(issue.block_type)} (${issue.count}) — ${issue.reason}`) ?? [];
+    const summary = fidelity === undefined ? "fidelity=unavailable" : `fidelity=${inline(fidelity.status)}, evidence=${inline(fidelity.evidence_status)}, projection=${inline(fidelity.projection_status)}, discovered=${Object.values(fidelity.discovered).reduce((sum, count) => sum + count, 0)}, converted=${Object.values(fidelity.converted).reduce((sum, count) => sum + count, 0)}, skipped=${fidelity.skipped.reduce((sum, item) => sum + item.count, 0)}`;
+    const issues = fidelity?.issues.map((issue) => `${inline(issue.severity)} ${inline(issue.impact)} ${inline(issue.code)} ${inline(issue.block_type)} (${issue.count}) — ${issue.reason}`) ?? [];
     return [
       `${inline(`${source3.type}:${source3.name}`)} — captured=${inline(source3.snapshotReady)}, manifest=${inline(source3.manifest)}, ${summary}`,
       ...issues.map((issue) => `  - ${issue}`)
@@ -85717,7 +85772,7 @@ function compileStatusRouting(input) {
   };
 }
 function pendingDocumentCaptureCommands(input) {
-  const pendingSources = input.documentSources.filter((source3) => !source3.snapshotReady && source3.captureFidelity?.status !== "error");
+  const pendingSources = input.documentSources.filter((source3) => !source3.snapshotReady);
   const phaseIds = [];
   const missingSources = [];
   for (const source3 of pendingSources) {
@@ -86187,7 +86242,15 @@ function receiptSetPath(receipts) {
 async function writeReceiptContinuation(input) {
   const path4 = receiptSetPath(input.receipts);
   await writeJsonAtomic(join46(input.projectRoot, path4), input.receipts);
-  const command2 = [
+  const command2 = input.managed ? [
+    "context",
+    "--workflow-resource-receipts",
+    shellQuote6(`@${path4}`),
+    "run",
+    authorityCommandOptions(input.authorities, "resource").trim(),
+    "--until blocked-or-complete",
+    "--format json"
+  ].filter((item) => item.length > 0).join(" ") : [
     "context status",
     authorityCommandOptions(input.authorities, "resource").trim(),
     "--resource-receipts",
@@ -86261,6 +86324,7 @@ async function materializeContextWorkflowResource(input) {
   const afterReadReceipts = mergedReceipts(input.resourceReceipts, receiptCandidate);
   const continuation = await writeReceiptContinuation({
     projectRoot: found.projectRoot,
+    managed: input.managed === true,
     authorities,
     receipts: afterReadReceipts
   });
@@ -86313,6 +86377,7 @@ async function acknowledgeCurrentWorkflowResources(input) {
   };
   const continuation = await writeReceiptContinuation({
     projectRoot: found.projectRoot,
+    managed: input.managed === true,
     authorities,
     receipts: normalizedReceipts
   });
@@ -86467,9 +86532,11 @@ async function existingFileKind(path4) {
     const stats = await lstat2(path4);
     if (stats.isFile())
       return "file";
+    if (stats.isDirectory())
+      return "directory";
     if (stats.isSymbolicLink())
       return "symlink";
-    throw new TypeError(`atomic file batch target is not a file: ${path4}`);
+    throw new TypeError(`atomic file batch target has an unsupported filesystem kind: ${path4}`);
   } catch (error) {
     if (error instanceof Error && "code" in error && (error.code === "ENOENT" || error.code === "ENOTDIR")) {
       return "missing";
@@ -90046,6 +90113,7 @@ class XMLParser {
 }
 
 // src/lib/larkDocxXml.ts
+var LARK_EMPTY_SUB_PAGE_LIST_CODE = "lark.capture.sub-page-list-empty";
 var parser = new XMLParser({
   preserveOrder: true,
   ignoreAttributes: false,
@@ -90090,22 +90158,25 @@ class FidelityTracker {
       reason,
       count: (current2?.count ?? 0) + 1
     });
-    const issueKey = `${severity}\x00${blockType}\x00${reason}`;
+    const code3 = severity === "error" ? "lark.capture.fidelity-loss" : "lark.capture.unsupported-empty-block";
+    const issueKey = `${severity}\x00${code3}\x00${blockType}\x00${reason}`;
     const issue = this.issues.get(issueKey);
     this.issues.set(issueKey, {
       severity,
-      code: severity === "error" ? "lark.capture.fidelity-loss" : "lark.capture.unsupported-empty-block",
+      impact: "projection",
+      code: code3,
       block_type: blockType,
       count: (issue?.count ?? 0) + 1,
       reason
     });
   }
-  flag(blockType, reason, severity) {
-    const issueKey = `${severity}\x00${blockType}\x00${reason}`;
+  flag(blockType, reason, severity, code3 = severity === "error" ? "lark.capture.fidelity-loss" : "lark.capture.fidelity-warning", impact = severity === "error" ? "evidence" : "projection") {
+    const issueKey = `${severity}\x00${impact}\x00${code3}\x00${blockType}\x00${reason}`;
     const issue = this.issues.get(issueKey);
     this.issues.set(issueKey, {
       severity,
-      code: severity === "error" ? "lark.capture.fidelity-loss" : "lark.capture.fidelity-warning",
+      impact,
+      code: code3,
       block_type: blockType,
       count: (issue?.count ?? 0) + 1,
       reason
@@ -90130,8 +90201,19 @@ class FidelityTracker {
       }
     }
     const issues = [...this.issues.values()].sort((left, right) => left.severity.localeCompare(right.severity) || left.block_type.localeCompare(right.block_type));
-    const status = issues.some((issue) => issue.severity === "error") ? "error" : issues.length > 0 ? "warning" : "complete";
-    return { status, discovered, converted, skipped, issues };
+    const evidenceStatus = issues.some((issue) => issue.impact === "evidence" && issue.severity === "error") ? "error" : "complete";
+    const projectionIssues = issues.filter((issue) => issue.impact === "projection");
+    const projectionStatus = projectionIssues.some((issue) => issue.severity === "error") ? "error" : projectionIssues.some((issue) => issue.code === "lark.capture.generic-projection") ? "generic" : projectionIssues.length > 0 ? "warning" : "complete";
+    const status = evidenceStatus === "error" || projectionStatus === "error" ? "error" : issues.length > 0 ? "warning" : "complete";
+    return {
+      status,
+      evidence_status: evidenceStatus,
+      projection_status: projectionStatus,
+      discovered,
+      converted,
+      skipped,
+      issues
+    };
   }
 }
 function sortedCounts(counts2) {
@@ -90190,7 +90272,16 @@ function stableDocumentUrl(sourceUrl, fileType, docId) {
   return `lark:${fileType ?? "document"}:${docId}`;
 }
 function resourceIdentity(kind, attrs) {
-  const kindCandidates = kind === "cite" ? [attrs["doc-id"]] : kind === "base" || kind === "sheet" ? [attrs["table-id"], attrs["sheet-id"]] : [];
+  if (kind === "bookmark")
+    return;
+  if (kind === "poll")
+    return attrs.id;
+  if (kind === "synced-reference") {
+    const sourceToken = attrs["src-token"];
+    const sourceBlockId = attrs["src-block-id"];
+    return sourceToken !== undefined && sourceBlockId !== undefined ? `${sourceToken}#${sourceBlockId}` : undefined;
+  }
+  const kindCandidates = kind === "cite" || kind === "document" ? [attrs["doc-id"]] : kind === "base" || kind === "sheet" ? [attrs["table-id"], attrs["sheet-id"]] : [];
   const candidates = [
     attrs.token,
     attrs["file-token"],
@@ -90199,7 +90290,7 @@ function resourceIdentity(kind, attrs) {
     attrs["obj-token"],
     attrs["source-id"],
     attrs["chat-id"],
-    attrs.id,
+    ...kind === "document" ? [] : [attrs.id],
     ...kindCandidates,
     attrs.src
   ];
@@ -90366,21 +90457,157 @@ ${safeFence(source3, attrs.type === "mermaid" ? "mermaid" : "text")}
 
 > ${title}${details.length > 0 ? ` — ${details}` : ""} (${resource.locator})
 
+`;
+}
+function renderSubPage(nodes, attrs, ctx) {
+  const title = attrs.title ?? (normalizeInline(textContent(nodes)) || "Untitled subpage");
+  const docId = attrs["doc-id"] ?? attrs.token;
+  const resource = addResource(ctx, "sub-page", "document", attrs, title);
+  if (docId === undefined) {
+    ctx.tracker.flag("sub-page", "sub-page has no doc-id or token", "error");
+    return `${escapeMarkdownLabel(title)} <!-- ${resource.locator} -->`;
+  }
+  const target = stableDocumentUrl(ctx.sourceUrl, attrs["file-type"], docId);
+  return `[${escapeMarkdownLabel(title)}](${target}) <!-- ${resource.locator} -->`;
+}
+function renderSubPageList(nodes, ctx) {
+  if (!nodes.some((node3) => elementName(node3) === "sub-page")) {
+    ctx.tracker.flag("sub-page-list", "sub-page-list returned no sub-page entries; child navigation completeness cannot be verified", "error", LARK_EMPTY_SUB_PAGE_LIST_CODE);
+  }
+  const lines = [];
+  for (const node3 of nodes) {
+    const name2 = elementName(node3);
+    if (name2 === undefined)
+      continue;
+    const rendered = normalizeMarkdown2(renderNode(node3, { ...ctx, mode: "inline" }));
+    if (rendered.length === 0)
+      continue;
+    lines.push(name2 === "sub-page" ? `- ${rendered}` : rendered);
+  }
+  return lines.length === 0 ? "" : `
+
+${lines.join(`
+`)}
+
+`;
+}
+function renderBookmark(nodes, attrs, ctx) {
+  const href = attrs.href ?? attrs.url;
+  const title = attrs.name ?? attrs.title ?? (normalizeInline(textContent(nodes)) || href) ?? "Bookmark";
+  const resource = addResource(ctx, "bookmark", "bookmark", attrs, title);
+  if (href === undefined || isTransientMediaUrl(href)) {
+    ctx.tracker.flag("bookmark", "bookmark has no stable non-transient URL", "error");
+    return `
+
+> Bookmark: ${escapeMarkdownLabel(title)} <!-- ${resource.locator} -->
+
+`;
+  }
+  return `
+
+> Bookmark: [${escapeMarkdownLabel(title)}](${href}) <!-- ${resource.locator} -->
+
+`;
+}
+function renderSyncedReference(attrs, ctx) {
+  const sourceToken = attrs["src-token"];
+  const sourceBlockId = attrs["src-block-id"];
+  const title = attrs.title ?? attrs.name ?? "Synced reference";
+  const resource = addResource(ctx, "synced_reference", "synced-reference", attrs, title);
+  if (sourceToken === undefined || sourceBlockId === undefined) {
+    ctx.tracker.flag("synced_reference", "synced_reference requires both src-token and src-block-id", "error");
+    return `
+
+> ${escapeMarkdownLabel(title)} <!-- ${resource.locator} -->
+
+`;
+  }
+  const target = `${stableDocumentUrl(ctx.sourceUrl, "docx", sourceToken)}#${encodeURIComponent(sourceBlockId)}`;
+  return `
+
+> [${escapeMarkdownLabel(title)}](${target}) <!-- ${resource.locator} -->
+
+`;
+}
+function renderChecklistItem(blockType, nodes, attrs, ctx) {
+  const done = attrs.done;
+  const checked = attrs.checked;
+  const state = done ?? checked;
+  const stateIsValid = (state === "true" || state === "false") && (done === undefined || checked === undefined || done === checked);
+  const body = normalizeInline(renderChildren(nodes, { ...ctx, mode: "inline" }));
+  if (!stateIsValid) {
+    ctx.tracker.flag(blockType, `${blockType} requires one unambiguous boolean done or checked attribute`, "warning", "lark.capture.checkbox-state-invalid", "projection");
+    return `
+- [?] ${body}
+`;
+  }
+  return `
+- [${state === "true" ? "x" : " "}] ${body}
+`;
+}
+function meaningfulAttributes(attrs, excluded) {
+  return Object.entries(attrs).filter(([key, value]) => value.length > 0 && !PRESENTATION_ONLY_ATTRIBUTES.has(key) && !excluded.has(key)).sort(([left], [right]) => left.localeCompare(right));
+}
+function auditableAttributes(attrs) {
+  return Object.entries(attrs).filter(([, value]) => value.length > 0).map(([key, value]) => [key, isTransientMediaUrl(value) ? "[redacted-transient-url]" : value]).sort(([left], [right]) => left.localeCompare(right));
+}
+function renderPollOption(blockType, nodes, attrs, ctx) {
+  const body = normalizeInline(renderChildren(nodes, { ...ctx, mode: "inline" }));
+  const label3 = body || attrs.name || attrs.title || attrs.label || attrs.value;
+  const details = meaningfulAttributes(attrs, new Set(["name", "title", "label", "value"])).map(([key, value]) => `${key}=${value}`);
+  if (label3 === undefined && details.length === 0) {
+    ctx.tracker.flag(blockType, `${blockType} has no visible label or metadata`, "warning", "lark.capture.poll-option-empty", "projection");
+  }
+  const rendered = [label3 ?? "Unnamed option", ...details.length > 0 ? [`(${details.join(", ")})`] : []].join(" ");
+  return `
+- ${rendered}
+`;
+}
+function renderPoll(nodes, attrs, ctx) {
+  const title = attrs.name ?? attrs.title ?? "Untitled poll";
+  const resource = addResource(ctx, "poll", "poll", attrs, title);
+  const href = attrs.href ?? attrs.url;
+  const label3 = href !== undefined && !isTransientMediaUrl(href) ? `[${escapeMarkdownLabel(title)}](${href})` : escapeMarkdownLabel(title);
+  const details = meaningfulAttributes(attrs, new Set(["name", "title", "href", "url"])).map(([key, value]) => `${key}=${value}`);
+  const children = normalizeMarkdown2(renderChildren(nodes, { ...ctx, mode: "block" }));
+  const lines = [
+    `> Lark poll (non-interactive): ${label3} <!-- ${resource.locator} -->`,
+    ...details.length > 0 ? [`> Exported attributes: ${details.join(", ")}`] : [],
+    ...children.length === 0 ? ["> Options and results are not present in the exported XML."] : [children]
+  ];
+  return `
+
+${lines.join(`
+`)}
+
 `;
 }
 function renderUnknown(name2, nodes, attrs, ctx) {
   const body = normalizeMarkdown2(renderChildren(nodes, ctx));
-  const meaningfulAttrs = Object.keys(attrs).filter((key) => !PRESENTATION_ONLY_ATTRIBUTES.has(key));
-  if (body.length === 0 && meaningfulAttrs.length === 0) {
+  const exportedAttrs = auditableAttributes(attrs);
+  if (body.length === 0 && exportedAttrs.length === 0) {
     ctx.tracker.skip(name2, "unknown empty block omitted", "warning");
     return "";
   }
-  ctx.tracker.skip(name2, "unknown non-empty block requires an explicit deterministic renderer", "error");
+  ctx.tracker.convert(name2);
+  ctx.tracker.flag(name2, "block was preserved through the generic non-interactive projection; inspect source.xml for the original structure", "warning", "lark.capture.generic-projection", "projection");
+  const digest4 = createHash20("sha256").update(JSON.stringify({ name: name2, attributes: exportedAttrs, text: normalizeInline(textContent(nodes)) }), "utf8").digest("hex").slice(0, 12);
+  const locator = `lark:block:${name2}:${digest4}`;
+  ctx.resources.push({
+    kind: "embed",
+    locator,
+    title: name2,
+    attributes: Object.fromEntries(exportedAttrs)
+  });
+  const lines = [
+    `> Lark block (generic projection): \`${name2}\` <!-- ${locator} -->`,
+    ...exportedAttrs.length > 0 ? [`> Exported attributes: ${JSON.stringify(Object.fromEntries(exportedAttrs))}`] : [],
+    ...body.length > 0 ? [body] : []
+  ];
   return `
 
-> Unsupported Lark block \`${name2}\`; review the captured XML evidence before continuing.${body.length > 0 ? `
-> ${body.replace(/\n/gu, `
-> `)}` : ""}
+${lines.join(`
+`)}
 
 `;
 }
@@ -90397,6 +90624,22 @@ function renderNode(node3, ctx) {
     ctx.tracker.convert(name2);
     return renderResource(name2, nodes, attrs, ctx);
   }
+  if (name2 === "sub-page") {
+    ctx.tracker.convert(name2);
+    return renderSubPage(nodes, attrs, ctx);
+  }
+  if (name2 === "sub-page-list") {
+    ctx.tracker.convert(name2);
+    return renderSubPageList(nodes, ctx);
+  }
+  if (name2 === "bookmark") {
+    ctx.tracker.convert(name2);
+    return renderBookmark(nodes, attrs, ctx);
+  }
+  if (name2 === "synced_reference") {
+    ctx.tracker.convert(name2);
+    return renderSyncedReference(attrs, ctx);
+  }
   if (name2 === "title" || /^h[1-9]$/u.test(name2) || name2 === "heading") {
     ctx.tracker.convert(name2);
     const level = name2 === "title" ? 1 : name2 === "heading" ? Number(attrs.level ?? 2) : Number(name2.slice(1));
@@ -90506,12 +90749,21 @@ ${body.split(`
     ctx.tracker.convert(name2);
     return "";
   }
-  if (name2 === "todo") {
+  if (name2 === "checkbox" || name2 === "todo") {
     ctx.tracker.convert(name2);
-    const checked = attrs.done === "true" || attrs.checked === "true";
-    return `
-- [${checked ? "x" : " "}] ${normalizeInline(renderChildren(nodes, { ...ctx, mode: "inline" }))}
-`;
+    return renderChecklistItem(name2, nodes, attrs, ctx);
+  }
+  if (name2 === "poll") {
+    if (nodes.length === 0 && Object.keys(attrs).length === 0) {
+      ctx.tracker.skip(name2, "empty poll omitted because the export contains no identity or content", "warning");
+      return "";
+    }
+    ctx.tracker.convert(name2);
+    return renderPoll(nodes, attrs, ctx);
+  }
+  if (["option", "poll-option", "poll_option", "choice"].includes(name2)) {
+    ctx.tracker.convert(name2);
+    return renderPollOption(name2, nodes, attrs, ctx);
   }
   if (["mention", "person", "emoji"].includes(name2)) {
     ctx.tracker.convert(name2);
@@ -90553,6 +90805,7 @@ function projectLarkDocxXml(input) {
 // src/lib/feishu.ts
 var LARK_BIN = "lark-cli";
 var MAX_FETCH_PAGES = 50;
+var MAX_STRUCTURAL_FETCH_ATTEMPTS = 2;
 
 class LarkCliNotInstalledError extends Error {
   constructor() {
@@ -90754,6 +91007,8 @@ function extractDocsFetchAssets(payload) {
 function emptyFidelityReport() {
   return {
     status: "complete",
+    evidence_status: "complete",
+    projection_status: "complete",
     discovered: {},
     converted: {},
     skipped: [],
@@ -90785,37 +91040,35 @@ function fidelityReportAsset(report) {
   return {
     path: "capture-fidelity.json",
     bytes: Buffer.from(`${JSON.stringify({
-      schema_version: "context.lark-capture-fidelity.v1",
+      schema_version: "context.lark-capture-fidelity.v2",
       ...report
     }, null, 2)}
 `, "utf8"),
     mediaType: "application/vnd.context.lark-capture-fidelity+json",
     source: {
       kind: "capture-fidelity",
-      status: report.status
+      status: report.status,
+      evidence_status: report.evidence_status,
+      projection_status: report.projection_status
     }
   };
 }
-async function fetchFeishuDocSnapshot(input, runner2 = defaultRunner) {
+async function fetchDocsResponse(input, docsFetchPlan, runner2) {
   const chunks = [];
   let contentFormat;
   let title;
   let revisionId;
   let unsupportedShape;
   const assets = [];
-  const docsFetchPlan = await resolveDocsFetchPlan(input.docsApiVersion ?? "auto", runner2);
   let nextOffset;
   for (let page = 0;page < MAX_FETCH_PAGES; page++) {
     const args = ["docs", "+fetch", "--as", "user", "--doc", input.url, "--detail", "full", "--format", "json"];
-    if (docsFetchPlan.apiVersion === "v2") {
+    if (docsFetchPlan.apiVersion === "v2")
       args.push("--api-version", "v2");
-    }
-    if (docsFetchPlan.docFormat === "xml") {
+    if (docsFetchPlan.docFormat === "xml")
       args.push("--doc-format", "xml");
-    }
-    if (nextOffset !== undefined) {
+    if (nextOffset !== undefined)
       args.push("--offset", String(nextOffset));
-    }
     const result = await runner2(args);
     if (result.exitCode !== 0) {
       throw new LarkCliError(docsFetchFailureMessage(result.stderr, docsFetchPlan.apiVersion), result.exitCode, result.stderr);
@@ -90826,9 +91079,8 @@ async function fetchFeishuDocSnapshot(input, runner2 = defaultRunner) {
       throw new LarkCliError("lark-cli docs +fetch changed content format between pages", 0, "");
     }
     contentFormat = extracted.format;
-    if (page === 0 && extracted.title !== undefined) {
+    if (page === 0 && extracted.title !== undefined)
       title = extracted.title;
-    }
     revisionId ??= extractDocsFetchRevisionId(payload);
     assets.push(...extractDocsFetchAssets(payload));
     if (extracted.body !== undefined && extracted.body.length > 0) {
@@ -90846,19 +91098,42 @@ async function fetchFeishuDocSnapshot(input, runner2 = defaultRunner) {
       throw new LarkCliError(`${LARK_BIN} docs +fetch exceeded ${MAX_FETCH_PAGES} pagination calls; likely a server-side issue`, 0, "");
     }
   }
-  const fetchedBody = chunks.join(`
+  const body = chunks.join(`
 
 `);
-  if (fetchedBody.trim().length === 0 && (title === undefined || title.length === 0)) {
+  if (body.trim().length === 0 && (title === undefined || title.length === 0)) {
     if (unsupportedShape !== undefined) {
       throw new LarkCliError(`${LARK_BIN} docs +fetch returned an unsupported payload shape (${unsupportedShape}). Expected data.markdown or data.document.content; this is a format adapter issue, not a permission error.`, 0, "");
     }
     throw new LarkCliError("document is empty — it may not exist or you lack permission", 0, "");
   }
-  let body = fetchedBody;
+  return {
+    body,
+    contentFormat,
+    ...title !== undefined ? { title } : {},
+    ...revisionId !== undefined ? { revisionId } : {},
+    assets
+  };
+}
+function hasEmptySubPageList(projection) {
+  return projection.fidelity.issues.some((issue) => issue.code === LARK_EMPTY_SUB_PAGE_LIST_CODE);
+}
+async function fetchFeishuDocSnapshot(input, runner2 = defaultRunner) {
+  const docsFetchPlan = await resolveDocsFetchPlan(input.docsApiVersion ?? "auto", runner2);
+  let fetched = await fetchDocsResponse(input, docsFetchPlan, runner2);
+  let projection;
+  for (let attempt = 0;attempt < MAX_STRUCTURAL_FETCH_ATTEMPTS && fetched.contentFormat === "xml"; attempt++) {
+    projection = projectLarkDocxXml({ xml: fetched.body, sourceUrl: input.url });
+    if (!hasEmptySubPageList(projection) || attempt === MAX_STRUCTURAL_FETCH_ATTEMPTS - 1)
+      break;
+    fetched = await fetchDocsResponse(input, docsFetchPlan, runner2);
+  }
+  let body = fetched.body;
+  let title = fetched.title;
+  const revisionId = fetched.revisionId;
+  const assets = [...fetched.assets];
   let fidelity = emptyFidelityReport();
-  if (contentFormat === "xml") {
-    const projection = projectLarkDocxXml({ xml: fetchedBody, sourceUrl: input.url });
+  if (projection !== undefined) {
     body = projection.markdown;
     title ??= projection.title;
     fidelity = projection.fidelity;
@@ -91206,6 +91481,21 @@ async function runCaptureLarkPhaseUnlocked(input) {
       next: `fix write permissions or restore ${materializedAt}, then rerun context run capture:lark:${resolved.sourceName}`
     });
   }
+  if (fetched.fidelity.evidence_status === "error") {
+    throw new ContextError(ExitCode.WorkspaceStateError, `lark source ${resolved.sourceName} audit snapshot was preserved, but capture fidelity validation failed`, {
+      category: ErrorCategory.PartialFailure,
+      code: "lark.capture.fidelity-loss",
+      sourceName: resolved.sourceName,
+      snapshot: {
+        manifest: manifestPath,
+        materializedAt,
+        snapshot_hash: manifest.snapshot_hash,
+        changed
+      },
+      issues: fetched.fidelity.issues.filter((issue) => issue.impact === "evidence"),
+      next: "context status --format json"
+    });
+  }
   return {
     kind: "document.capture.lark.result",
     source: {
@@ -97480,6 +97770,13 @@ function selectAutomaticWorkflowCommand(status) {
       stop: blockedStop(status, "workflow.until.route-not-immediate", "The current route requires a decision or authority that is not resolved.")
     };
   }
+  const unreadRequired = route.resources.required.filter((resource) => resource.read_state === "read-required");
+  if (unreadRequired.length > 0) {
+    return {
+      state: "blocked",
+      stop: blockedStop(status, "workflow.until.agent-context-required", `Read the current route's required resources before automatic execution: ${unreadRequired.map((resource) => resource.id).join(", ")}.`)
+    };
+  }
   const commands = route.commands.filter((item) => item.availability === "immediate");
   if (commands.length !== 1) {
     return {
@@ -98375,10 +98672,10 @@ async function documentSnapshotState(input) {
     if (fidelity.blocking.length > 0) {
       return {
         snapshotReady: false,
-        state: "workspace-state-invalid",
+        state: "needs-capture",
         manifest,
         diagnostics: fidelity.blocking,
-        next: `context source inspect ${input.source.name} --format json`,
+        next: `context run capture:${input.sourceType}:${input.source.name}`,
         ...fidelity.report !== undefined ? { captureFidelity: fidelity.report } : {}
       };
     }
@@ -98913,6 +99210,7 @@ async function registerSourceBatch(input) {
 
 // src/project/sourceRemoval.ts
 import { existsSync as existsSync38 } from "node:fs";
+import { createHash as createHash25 } from "node:crypto";
 import { readFile as readFile42, readdir as readdir18, rm as rm15 } from "node:fs/promises";
 import { isAbsolute as isAbsolute10, join as join61, relative as relative15, resolve as resolve25, sep as sep3 } from "node:path";
 var import_yaml34 = __toESM(require_dist3(), 1);
@@ -99009,7 +99307,8 @@ async function resolveRemovableSource(projectRoot, selector) {
       name: source3.name,
       ...source3.namespace !== undefined ? { namespace: source3.namespace } : {},
       ...source3.module !== undefined ? { module: source3.module } : {},
-      materializedAt: source3.materializedAt
+      materializedAt: source3.materializedAt,
+      ...source3.snapshot?.manifest !== undefined ? { manifest: source3.snapshot.manifest } : {}
     })),
     ...registry2.larks.map((source3) => ({
       type: "lark",
@@ -99017,7 +99316,8 @@ async function resolveRemovableSource(projectRoot, selector) {
       name: source3.name,
       ...source3.namespace !== undefined ? { namespace: source3.namespace } : {},
       ...source3.module !== undefined ? { module: source3.module } : {},
-      materializedAt: source3.materializedAt
+      materializedAt: source3.materializedAt,
+      ...source3.snapshot?.manifest !== undefined ? { manifest: source3.snapshot.manifest } : {}
     }))
   ].filter((source3) => source3.id === selector || source3.name === selector);
   if (matches.length === 0) {
@@ -99056,18 +99356,14 @@ function removeDocumentEntry(document4, source3) {
   });
   return { ...record, sources: nextSources };
 }
-async function removeRegistryEntry(projectRoot, source3) {
-  if (source3.type === "repo") {
-    const registry2 = await readRepoRegistry(projectRoot);
-    await writeRepoRegistry(projectRoot, {
-      repos: registry2.repos.filter((entry) => entry.name !== source3.name && entry.id !== source3.id)
-    });
-    return;
-  }
+async function registryRemovalWrite(projectRoot, source3) {
   const path4 = registryPath2(source3.type);
   const absolutePath = join61(projectRoot, path4);
   const document4 = existsSync38(absolutePath) ? import_yaml34.default.parse(await readFile42(absolutePath, "utf8")) : { sources: [] };
-  await atomicWriteFile(absolutePath, import_yaml34.default.stringify(removeDocumentEntry(document4, source3)));
+  return {
+    path: absolutePath,
+    bytes: import_yaml34.default.stringify(removeDocumentEntry(document4, source3))
+  };
 }
 function safeManagedMaterializedPath(projectRoot, source3) {
   if (isAbsolute10(source3.materializedAt))
@@ -99080,6 +99376,158 @@ function safeManagedMaterializedPath(projectRoot, source3) {
   }
   return absolute;
 }
+function safeManagedManifestPath(projectRoot, source3) {
+  const manifest = source3.manifest ?? join61(source3.materializedAt, "manifest.json");
+  if (isAbsolute10(manifest))
+    throw unsafeOwnership(source3, manifest);
+  const absolute = resolve25(projectRoot, manifest);
+  const expectedRoot = resolve25(projectRoot, "sources", source3.type);
+  const rel = relative15(expectedRoot, absolute);
+  if (rel.length === 0 || rel === ".." || rel.startsWith(`..${sep3}`) || isAbsolute10(rel)) {
+    throw unsafeOwnership(source3, manifest);
+  }
+  return absolute;
+}
+function safeManagedSnapshotChild(projectRoot, source3, path4) {
+  const materializedRoot = safeManagedMaterializedPath(projectRoot, source3);
+  if (materializedRoot === undefined || isAbsolute10(path4))
+    throw unsafeOwnership(source3, path4);
+  const absolute = resolve25(materializedRoot, path4);
+  const rel = relative15(materializedRoot, absolute);
+  if (rel.length === 0 || rel === ".." || rel.startsWith(`..${sep3}`) || isAbsolute10(rel)) {
+    throw unsafeOwnership(source3, path4);
+  }
+  return absolute;
+}
+function unsafeOwnership(source3, path4) {
+  return new ContextError(ExitCode.WorkspaceStateError, `source '${source3.name}' has an unsafe managed path`, {
+    category: ErrorCategory.WorkspaceStateInvalid,
+    code: "source-remove-ownership-invalid",
+    source: `${source3.type}:${source3.name}`,
+    path: path4,
+    next: "Repair the source registry or snapshot manifest, then preview source removal again."
+  });
+}
+function projectRelative(projectRoot, path4) {
+  return relative15(projectRoot, path4).split(sep3).join("/");
+}
+function digest4(value) {
+  return `sha256:${createHash25("sha256").update(JSON.stringify(value)).digest("hex")}`;
+}
+async function sharedMaterializedOwners(projectRoot, source3) {
+  const target = safeManagedMaterializedPath(projectRoot, source3);
+  if (target === undefined)
+    return [];
+  const registry2 = await loadSourcesRegistry({ rootDir: projectRoot });
+  const entries = source3.type === "repo" ? registry2.repos : source3.type === "file" ? registry2.files : registry2.larks;
+  return entries.filter((entry) => entry.name !== source3.name && safeManagedMaterializedPath(projectRoot, {
+    type: source3.type,
+    id: entry.id,
+    name: entry.name,
+    materializedAt: entry.materializedAt
+  }) === target).map((entry) => `${source3.type}:${entry.name}`).sort();
+}
+function documentOwnedPaths(projectRoot, source3, snapshot) {
+  return [...new Set([
+    ...snapshot.files.map((entry) => entry.path),
+    ...snapshot.assets?.map((entry) => entry.path) ?? [],
+    ...snapshot.metadata?.capture?.routeFiles?.map((entry) => entry.path) ?? []
+  ].map((path4) => safeManagedSnapshotChild(projectRoot, source3, path4)))].sort();
+}
+async function createRemovalPlan(projectRoot, selector) {
+  const source3 = await resolveRemovableSource(projectRoot, selector);
+  const references = await collectSourceReferences(projectRoot, source3);
+  const registryWrite = await registryRemovalWrite(projectRoot, source3);
+  const sharedMaterializedBy = await sharedMaterializedOwners(projectRoot, source3);
+  const absoluteRemovals = [];
+  let manifestWrite;
+  let cleanup = {
+    mode: "registry-only",
+    sharedMaterializedBy,
+    filesToRemove: [],
+    directoriesToRemove: []
+  };
+  if (source3.type === "file" || source3.type === "lark") {
+    const manifestPath = safeManagedManifestPath(projectRoot, source3);
+    let removal;
+    try {
+      removal = removeDocumentSnapshotFromManifestFile({
+        current: await readDocumentManifestFile(manifestPath),
+        sourceName: source3.name
+      });
+    } catch (error) {
+      const message = error instanceof Error ? error.message : String(error);
+      throw new ContextError(ExitCode.WorkspaceStateError, `cannot prove snapshot ownership for '${source3.name}': ${message}`, {
+        category: ErrorCategory.WorkspaceStateInvalid,
+        code: "source-remove-ownership-invalid",
+        source: `${source3.type}:${source3.name}`,
+        manifest: projectRelative(projectRoot, manifestPath),
+        next: "Repair or recapture the source snapshot, then preview source removal again."
+      });
+    }
+    if (removal.snapshot !== null) {
+      absoluteRemovals.push(...documentOwnedPaths(projectRoot, source3, removal.snapshot));
+      if (removal.next === null) {
+        absoluteRemovals.push(manifestPath);
+      } else {
+        manifestWrite = { path: manifestPath, bytes: renderDocumentManifestFile(removal.next) };
+      }
+      cleanup = {
+        mode: "document-snapshot",
+        sharedMaterializedBy,
+        manifest: projectRelative(projectRoot, manifestPath),
+        manifestEntry: source3.name,
+        filesToRemove: absoluteRemovals.filter((path4) => path4 !== manifestPath).map((path4) => projectRelative(projectRoot, path4)),
+        directoriesToRemove: []
+      };
+    }
+  } else {
+    const materializedPath = safeManagedMaterializedPath(projectRoot, source3);
+    if (materializedPath !== undefined && sharedMaterializedBy.length === 0 && existsSync38(materializedPath)) {
+      absoluteRemovals.push(materializedPath);
+      cleanup = {
+        mode: "exclusive-materialization",
+        sharedMaterializedBy,
+        filesToRemove: [],
+        directoriesToRemove: [projectRelative(projectRoot, materializedPath)]
+      };
+    }
+  }
+  const planDigest = digest4({
+    source: source3,
+    registry: registryPath2(source3.type),
+    registryBytes: registryWrite.bytes,
+    references,
+    cleanup,
+    manifestBytes: manifestWrite?.bytes ?? null
+  });
+  const next = references.length > 0 ? `Remove all listed references, then preview context source remove '${source3.id}' --format json again.` : `context source remove '${source3.id}' --yes --plan-digest '${planDigest}' --format json`;
+  return {
+    action: "preview",
+    source: source3,
+    registry: registryPath2(source3.type),
+    materialized: source3.materializedAt,
+    references,
+    plan_digest: planDigest,
+    cleanup,
+    next,
+    registryWrite,
+    ...manifestWrite !== undefined ? { manifestWrite } : {},
+    absoluteRemovals: [...new Set(absoluteRemovals)].sort()
+  };
+}
+function publicRemovalResult(plan, action) {
+  return {
+    action,
+    source: plan.source,
+    registry: plan.registry,
+    materialized: plan.materialized,
+    references: plan.references,
+    plan_digest: plan.plan_digest,
+    cleanup: plan.cleanup,
+    ...action === "preview" && plan.next !== undefined ? { next: plan.next } : {}
+  };
+}
 async function pruneExtractRuntime(projectRoot, source3) {
   const fingerprintPath = join61(projectRoot, ".tmp/context-runtime/extract/source-fingerprints.json");
   const removedPhaseIds = new Set;
@@ -99130,34 +99578,43 @@ async function pruneExtractRuntime(projectRoot, source3) {
   await visit3(snapshotRoot);
 }
 async function removeProjectSource(input) {
-  const source3 = await resolveRemovableSource(input.projectRoot, input.selector);
-  const references = await collectSourceReferences(input.projectRoot, source3);
-  const result = {
-    action: input.apply ? "removed" : "preview",
-    source: source3,
-    registry: registryPath2(source3.type),
-    materialized: source3.materializedAt,
-    references,
-    ...!input.apply ? { next: `Remove all listed references, then run context source remove '${source3.id}' --yes --format json.` } : {}
-  };
-  if (!input.apply)
-    return result;
-  if (references.length > 0) {
-    throw new ContextError(ExitCode.WorkspaceStateError, `source '${source3.name}' is still referenced`, {
-      category: ErrorCategory.WorkspaceStateInvalid,
-      code: "source-remove-referenced",
-      source: `${source3.type}:${source3.name}`,
-      references,
-      next: `Remove the listed project/candidate/knowledge references, then rerun context source remove '${source3.id}' --yes --format json.`
+  if (!input.apply) {
+    return publicRemovalResult(await createRemovalPlan(input.projectRoot, input.selector), "preview");
+  }
+  if (input.planDigest === undefined) {
+    throw new ContextError(ExitCode.UserError, "source removal requires a digest-bound preview", {
+      category: ErrorCategory.UserInputInvalid,
+      code: "source-remove-plan-required",
+      next: `Run context source remove '${input.selector}' --format json, inspect cleanup, then execute its next command.`
     });
   }
   return withProjectWriteLock(input.projectRoot, "source-remove", async () => {
-    await removeRegistryEntry(input.projectRoot, source3);
-    const managed = safeManagedMaterializedPath(input.projectRoot, source3);
-    if (managed !== undefined)
-      await rm15(managed, { recursive: true, force: true });
-    await pruneExtractRuntime(input.projectRoot, source3);
-    return result;
+    const plan = await createRemovalPlan(input.projectRoot, input.selector);
+    if (plan.plan_digest !== input.planDigest) {
+      throw new ContextError(ExitCode.WorkspaceStateError, "source removal preview is stale", {
+        category: ErrorCategory.WorkspaceStateInvalid,
+        code: "source-remove-plan-stale",
+        expected: input.planDigest,
+        actual: plan.plan_digest,
+        next: `Run context source remove '${plan.source.id}' --format json again and inspect the new cleanup plan.`
+      });
+    }
+    if (plan.references.length > 0) {
+      throw new ContextError(ExitCode.WorkspaceStateError, `source '${plan.source.name}' is still referenced`, {
+        category: ErrorCategory.WorkspaceStateInvalid,
+        code: "source-remove-referenced",
+        source: `${plan.source.type}:${plan.source.name}`,
+        references: plan.references,
+        next: `Remove the listed project/candidate/knowledge references, then preview context source remove '${plan.source.id}' --format json again.`
+      });
+    }
+    await applyAtomicFileBatch({
+      transactionRoot: join61(input.projectRoot, ".tmp", "context-runtime", "source-remove-transactions"),
+      writes: [plan.registryWrite, ...plan.manifestWrite !== undefined ? [plan.manifestWrite] : []],
+      removals: plan.absoluteRemovals
+    });
+    await pruneExtractRuntime(input.projectRoot, plan.source);
+    return publicRemovalResult(plan, "removed");
   });
 }
 
@@ -99490,14 +99947,15 @@ the CLI derives a lowercase path-safe module and rejects duplicate batch identit
     const format = assertChoice(options.format, ["json", "yaml"], "--format");
     writeFormatted(projectSource, format);
   });
-  source3.command("remove <id>").description("Preview or remove one unreferenced source and its managed snapshot").option("--yes", "apply the removal after reference checks").option("--format <format>", "output format: json | yaml | table", "json").action(async (id2, ...args) => {
+  source3.command("remove <id>").description("Preview or remove one unreferenced source and its managed snapshot").option("--yes", "apply the removal after reference checks").option("--plan-digest <digest>", "bind --yes to the exact previewed cleanup plan").option("--format <format>", "output format: json | yaml | table", "json").action(async (id2, ...args) => {
     const options = actionOptions(...args);
     const projectRoot = requireProjectRoot(process.cwd(), "source remove");
     const format = assertChoice(options.format, DATA_FORMATS, "--format");
     const result = await removeProjectSource({
       projectRoot,
       selector: id2,
-      apply: options.yes === true
+      apply: options.yes === true,
+      ...typeof options.planDigest === "string" ? { planDigest: options.planDigest } : {}
     });
     writeFormatted(result, format);
   });

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@c4a/context-cli",
-  "version": "0.6.1-beta.5",
+  "version": "0.6.1-beta.6",
   "type": "module",
   "description": "Local CLI for capturing, compiling, and governing knowledge workspaces",
   "license": "MIT",
@@ -21,7 +21,7 @@
   },
   "dependencies": {
     "@c4a/agent-graph": "0.2.3",
-    "@c4a/context": "0.6.1-beta.5",
+    "@c4a/context": "0.6.1-beta.6",
     "commander": "^11.0.0",
     "fast-xml-parser": "^5.10.1",
     "handlebars": "^4.7.8",

package/plugins/VERSION

@@ -1 +1 @@
-0.6.1-beta.5
+0.6.1-beta.6

package/plugins/claude/.claude-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
-  "version": "0.6.1-beta.5",
+  "version": "0.6.1-beta.6",
   "author": {
     "name": "c4a"
   },

package/plugins/codex/.codex-plugin/plugin.json

@@ -1,6 +1,6 @@
 {
   "name": "context",
-  "version": "0.6.1-beta.5",
+  "version": "0.6.1-beta.6",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "c4a"
@@ -18,7 +18,7 @@
   "skills": "./skills/",
   "interface": {
     "displayName": "C4A Context",
-    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.5",
+    "shortDescription": "Initialize and advance a local, source-linked project knowledge workspace.\nv0.6.1-beta.6",
     "longDescription": "Create a Context workspace and use agent-guided next steps to register sources, run extraction, review candidates, build package outputs, and verify health without silently mutating source repositories.",
     "developerName": "c4a",
     "category": "Productivity",

package/plugins/cursor/.cursor-plugin/plugin.json

@@ -1,7 +1,7 @@
 {
   "name": "context",
   "displayName": "C4A Context",
-  "version": "0.6.1-beta.5",
+  "version": "0.6.1-beta.6",
   "description": "Maintain a project-local knowledge workspace through init and next-step agent guidance.",
   "author": {
     "name": "Context4AI",

package/providers/context/graphs/workspace.yaml

@@ -129,8 +129,8 @@ nodes:
     resources:
       required:
         - resources/procedures/prose-compile.md
-        - resources/views/structure-current.yaml
       recommended:
+        - resources/views/structure-current.yaml
         - resources/semantic/compile/index.md
 
   - id: resume-review-current-batch

package/providers/context/manifest.json

@@ -2,14 +2,14 @@
   "schema": "agent-graph.bundle.v1",
   "provider": {
     "id": "c4a/context",
-    "version": "0.6.1-beta.5"
+    "version": "0.6.1-beta.6"
   },
   "providerManifest": "provider.yaml",
   "graphs": [
     {
       "id": "workspace",
       "path": "graphs/workspace.yaml",
-      "digest": "sha256:9f434f63af920ad70aee7bb7b74c3a4be2ecfdad1c9c39a5ee0927f917857325"
+      "digest": "sha256:4b344cb9ecc03990f2a2f35aca372949917510f5957c4760fe69a651368eddbc"
     }
   ],
   "actions": [
@@ -153,7 +153,7 @@
     {
       "id": "context.sdk.project-api",
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:c3a306c5022de31f501211a23bdbceb741d6069b087c138a6db70bd8071e87dd"
+      "digest": "sha256:9ab0be26aeccea79f561c7ecd01636beb97b7088ea1ddb141c3cbc96af758508"
     },
     {
       "id": "context.sdk.template-variables",
@@ -313,17 +313,17 @@
     {
       "id": "procedure.prose-compile",
       "path": "resources/procedures/prose-compile.md",
-      "digest": "sha256:a0b2a8142f964732fb634d47f8e0af094a7377ce939b111de8c8f40df7dede02"
+      "digest": "sha256:c36ba3dcf9aa11a8759afaab2c9a99859c31acaf5f06456c4e0e6793130b7d6e"
     },
     {
       "id": "procedure.source-boundary",
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:ccd32232599c90312a1fac930363bc7486ede1842a702a524cdc2fe4ce9a1467"
+      "digest": "sha256:99097947961d7fa5b17f9e6b9c9471aac38cec1943bd7feb414b21d6a1e26a49"
     },
     {
       "id": "procedure.source-capture-detailed",
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:c62f54d99adc3d4e7902e10ed3bf4ca066ddb5d85949d8ea44e6800f8c699c3f"
+      "digest": "sha256:0cf764a43c33fbcf86b32a3731fec5905ebf0d312b7939059aae99a6ab0532e2"
     },
     {
       "id": "procedure.verify-and-repair",
@@ -447,11 +447,11 @@
     },
     {
       "path": "graphs/workspace.yaml",
-      "digest": "sha256:9f434f63af920ad70aee7bb7b74c3a4be2ecfdad1c9c39a5ee0927f917857325"
+      "digest": "sha256:4b344cb9ecc03990f2a2f35aca372949917510f5957c4760fe69a651368eddbc"
     },
     {
       "path": "provider.yaml",
-      "digest": "sha256:6c17411a95ef31e6b29eff1bc4a2ed89421cb126852cfaffd6fb5c553ef96cd8"
+      "digest": "sha256:ad1b825734418814f1ac3673d329070228b6b8004cd821c39a3224c6d30935dd"
     },
     {
       "path": "resources/diagnostics/projection-stale.md",
@@ -511,7 +511,7 @@
     },
     {
       "path": "resources/manuals/reference/project-api.md",
-      "digest": "sha256:c3a306c5022de31f501211a23bdbceb741d6069b087c138a6db70bd8071e87dd"
+      "digest": "sha256:9ab0be26aeccea79f561c7ecd01636beb97b7088ea1ddb141c3cbc96af758508"
     },
     {
       "path": "resources/manuals/reference/template-variables.md",
@@ -555,15 +555,15 @@
     },
     {
       "path": "resources/procedures/prose-compile.md",
-      "digest": "sha256:a0b2a8142f964732fb634d47f8e0af094a7377ce939b111de8c8f40df7dede02"
+      "digest": "sha256:c36ba3dcf9aa11a8759afaab2c9a99859c31acaf5f06456c4e0e6793130b7d6e"
     },
     {
       "path": "resources/procedures/source-boundary.md",
-      "digest": "sha256:ccd32232599c90312a1fac930363bc7486ede1842a702a524cdc2fe4ce9a1467"
+      "digest": "sha256:99097947961d7fa5b17f9e6b9c9471aac38cec1943bd7feb414b21d6a1e26a49"
     },
     {
       "path": "resources/procedures/source-capture-detailed.md",
-      "digest": "sha256:c62f54d99adc3d4e7902e10ed3bf4ca066ddb5d85949d8ea44e6800f8c699c3f"
+      "digest": "sha256:0cf764a43c33fbcf86b32a3731fec5905ebf0d312b7939059aae99a6ab0532e2"
     },
     {
       "path": "resources/procedures/verify-and-repair.md",
@@ -633,5 +633,5 @@
   "graphDependencies": {
     "workspace": []
   },
-  "digest": "sha256:219c68c8c55ac6cfe34d968bc96271fc418ad31f0b6bf4c5ef48998292a2dad9"
+  "digest": "sha256:9496e5137e372e4711605465046811bf322c53603bc7b8c5fbfa07df0862d0eb"
 }

package/providers/context/provider.yaml

@@ -1,6 +1,6 @@
 schema: agent-graph.provider.v1
 id: c4a/context
-version: 0.6.1-beta.5
+version: 0.6.1-beta.6
 name: Context workflow
 description: Internal work contract for Context knowledge workspaces.
 graphs:

package/providers/context/resources/manuals/reference/project-api.md

@@ -343,9 +343,12 @@ redacted XML audit asset, projects supported blocks deterministically into
 readable Markdown, and registers external resources such as document citations,
 images, video, whiteboards, and Base references in the snapshot manifest even
 when their binary content is not downloaded. The projection does not infer or
-summarize document meaning. Its fidelity report closes discovered blocks against
-converted and intentionally skipped blocks; a non-empty unsupported block is a
-fidelity error and prevents downstream Review until capture support is fixed.
+summarize document meaning. Its fidelity report closes discovered blocks
+against converted and intentionally skipped blocks and reports evidence
+completeness separately from Markdown projection quality. Unknown non-empty XML
+blocks receive a generic, auditable, non-interactive projection and do not block
+downstream work. Missing source content or unresolved external-resource identity
+remains an evidence error and prevents downstream Review.
 Snapshot files live under `sources/lark/<date>/` as sibling document files
 tracked by one date-level `manifest.json`. Access credentials and transient
 signed media URLs are not written into the workspace.

package/providers/context/resources/procedures/prose-compile.md

@@ -15,6 +15,9 @@ by the current Route. Do not create compile-action payloads or rewrite source
 content.
 
 One compile command validates every owned view first, then atomically
-materializes the source/collection candidate batch. Re-evaluate the workspace
-afterward so another structure slot can be routed to its own phase. Do not open
-a partial Review while planned views remain.
+materializes the source/collection candidate batch. In an explicitly managed
+conversation, the host loop may continue across the remaining deterministic
+compile slots after this procedure has been read; it re-evaluates revision and
+validation state after every write. The current structure view is optional
+inspection context because the CLI consumes the confirmed structure directly.
+Do not open a partial Review while planned views remain.

package/providers/context/resources/procedures/source-boundary.md

@@ -34,7 +34,12 @@ To retire a registered source, first run `context source remove <source-id>
 --format json`. This is a read-only preview that lists every project, candidate,
 or approved-knowledge reference. Only after those references are intentionally
 resolved may the route use `--yes`; the CLI never silently deletes referenced
-knowledge or another source's materialized files.
+knowledge or another source's materialized files. Execute the exact
+digest-bound command returned by the preview. For a shared document batch, the
+manifest entry is the ownership boundary: removal deletes only that entry and
+its explicitly listed files/assets. An uncaptured module has no manifest entry,
+so removal is registry-only; the shared date directory is never inferred as
+module-owned.
 
 Repository readiness checks are mechanical and may run after the boundary is
 registered. Clone, fetch, checkout, install, build, test, and other external

package/providers/context/resources/procedures/source-capture-detailed.md

@@ -54,12 +54,15 @@ contract, so any manual edit breaks idempotency.
 Lark capture obtains the structured XML representation and produces two
 separate artifacts: XML audit evidence and a deterministic readable Markdown
 projection. Do not treat raw XML as Markdown and do not rewrite it yourself.
-Inspect the returned fidelity status and diagnostics. Warnings describe an
-explicitly skipped empty block; errors mean non-empty evidence or a resource
-locator could not be preserved and the workflow must not proceed to Align,
-Compile, or Review. The CLI, not the plugin, parses the document. The plugin
-only displays the structured counts and diagnostics returned by the current
-source resource.
+Inspect `evidence_status` and `projection_status` separately. An evidence error
+means the source body, external content, or a stable resource locator could not
+be preserved, so the workflow must not proceed to Align, Compile, or Review.
+A projection warning or `generic` status means the original XML is preserved
+and a deterministic non-interactive Markdown fallback was emitted; report the
+diagnostic, but continue through the Route. The CLI, not the plugin, parses the
+document. The plugin only displays the structured counts and diagnostics
+returned by the current source resource. Do not patch the CLI or edit snapshots
+to add a renderer from a user workspace.
 
 ### Code capture diagnostics