@musnows/scriverse 0.6.2 → 0.6.4

package/dist/app.js

@@ -9,6 +9,7 @@ import { rm } from "node:fs/promises";
 import { tmpdir } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { z, ZodError } from "zod";
+import { AI_PROVIDER_PROTOCOLS } from "./ai-protocol.js";
 import { AttachmentStorage } from "./attachment-storage.js";
 import { AiManager } from "./ai.js";
 import { CredentialVault } from "./credential-vault.js";
@@ -16,12 +17,13 @@ import { Database } from "./database.js";
 import { assertSafeDocxArchive } from "./docx-security.js";
 import { DRAFT_SETTING_MODULES, TASK_TYPES } from "./domain.js";
 import { AppError } from "./errors.js";
+import { isOfficialGoogleVertexBaseUrl, parseGoogleServiceAccount } from "./google-vertex-auth.js";
 import { HYBRID_SEARCH_TYPES } from "./hybrid-search.js";
 import { applyImportFileHints, parseNovelText } from "./parser.js";
-import { attachmentPermissionModules, Store, versionedEntityTypes } from "./store.js";
+import { aiConversationTaskTypes, attachmentPermissionModules, Store, versionedEntityTypes } from "./store.js";
 import { paginated, parsePagination } from "./pagination.js";
 import { normalizeUploadFileName } from "./utils.js";
-import { assertSafeAiEndpoint, createApiRateLimitMiddleware, createAuthenticationRateLimitMiddleware, createBasicAuthMiddleware, createSameOriginMiddleware, createSecurityHeadersMiddleware, createUploadRateLimitMiddleware, verifySetupToken } from "./security.js";
+import { assertSafeAiEndpoint, createApiRateLimitMiddleware, createAuthenticationRateLimitMiddleware, createBasicAuthMiddleware, createCaptchaRateLimitMiddleware, createExpensiveApiRateLimitMiddleware, createSameOriginMiddleware, createSecurityHeadersMiddleware, createUploadRateLimitMiddleware, enforceCaseInsensitiveRouting, normalizeApiPath, resolveTrustProxySetting, verifySetupToken } from "./security.js";
 import { ImageCaptchaService } from "./image-captcha.js";
 import { assertSafeImportedPlainText, decodeUtf8ImportedText } from "./import-security.js";
 import { InvalidRasterImageError, readRasterImageMetadata } from "./image-metadata.js";
@@ -37,6 +39,7 @@ const identifier = z.string().trim().min(1).max(200);
 const optionalStrings = z.array(z.string()).optional();
 const jsonObject = z.record(z.string(), z.unknown());
 const chapterTypeSchema = z.enum(["正文", "设定", "作者的话", "其他"]);
+const aiConversationTaskTypeSchema = z.enum(aiConversationTaskTypes);
 const versionedEntityTypeSchema = z.enum(versionedEntityTypes);
 const attachmentPermissionModuleSchema = z.enum(attachmentPermissionModules);
 const maximumImportedTextLength = 20_000_000;
@@ -289,16 +292,54 @@ const reviewSchema = z.object({
     status: z.enum(["pending", "ignored", "fixing", "fixed", "exception"]).optional(),
     resolutionNote: z.string().max(20_000).optional()
 });
-const providerSchema = z.object({
+const providerBaseSchema = z.object({
     name: nonEmpty.max(200),
     baseUrl: z.string().url().refine((value) => value.startsWith("http://") || value.startsWith("https://"), "接口地址必须使用 HTTP 或 HTTPS"),
-    apiKey: nonEmpty.max(10_000),
-    protocol: z.enum(["openai-chat-completions", "anthropic-messages"]).optional(),
+    apiKey: z.string().trim().min(1).max(50_000),
+    protocol: z.enum(AI_PROVIDER_PROTOCOLS).optional(),
     status: z.enum(["enabled", "disabled"]).optional(),
     note: z.string().max(10_000).optional(),
     concurrencyLimit: z.number().int().min(1).max(100).optional(),
     rpmLimit: z.number().int().min(1).max(10_000).optional()
 });
+function refineProviderApiKey(value, ctx) {
+    if (value.protocol === "google-vertex" && value.baseUrl && !isOfficialGoogleVertexBaseUrl(value.baseUrl)) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["baseUrl"],
+            message: "Google Vertex 接口地址必须使用官方 aiplatform.googleapis.com 或 *-aiplatform.googleapis.com 域名"
+        });
+    }
+    if (!value.apiKey)
+        return;
+    const protocol = value.protocol ?? "openai-chat-completions";
+    if (protocol === "google-vertex") {
+        try {
+            parseGoogleServiceAccount(value.apiKey);
+        }
+        catch (error) {
+            ctx.addIssue({
+                code: z.ZodIssueCode.custom,
+                path: ["apiKey"],
+                message: error instanceof AppError ? error.message : "服务账号 JSON 无效"
+            });
+        }
+        return;
+    }
+    if (value.apiKey.length > 10_000) {
+        ctx.addIssue({
+            code: z.ZodIssueCode.custom,
+            path: ["apiKey"],
+            message: "API 密钥过长"
+        });
+    }
+}
+const providerSchema = providerBaseSchema.superRefine((value, ctx) => {
+    refineProviderApiKey(value, ctx);
+});
+const providerUpdateSchema = providerBaseSchema.partial().superRefine((value, ctx) => {
+    refineProviderApiKey(value, ctx);
+});
 const modelSchema = z.object({
     displayName: nonEmpty.max(200),
     modelId: nonEmpty.max(300),
@@ -379,6 +420,7 @@ const aiProcessStepSchema = z.discriminatedUnion("type", [
 ]);
 const workAiSettingsSchema = z.object({
     systemPrompt: z.string().max(100_000).optional(),
+    dailyTokenQuota: z.number().int().min(10_000).max(2_000_000_000).nullable().optional(),
     autoRunEnabled: z.boolean().optional(),
     autoRunConcurrency: z.number().int().min(1).max(8).optional(),
     autoRunBatchLimit: z.number().int().min(1).max(200).optional(),
@@ -386,18 +428,24 @@ const workAiSettingsSchema = z.object({
     autoRunFailureThreshold: z.number().int().min(1).max(10).optional(),
     bookSummaryContextPercent: z.number().int().min(1).max(90).optional(),
     contextCompactThreshold: z.number().int().min(50).max(90).optional(),
+    agentToolCallLimit: z.number().int().min(5).max(48).optional(),
+    agentToolCallGlobalMultiplier: z.number().int().min(1).max(6).optional(),
     agentTools: z.array(z.enum(["story_index", "read_chapters", "grep", "search_story_entities", "read_character_sections", "search_drafts"])).max(6).optional(),
     titleGenerationModelId: z.string().trim().max(200).optional()
 }).strict();
 const contextSchema = z.object({
-    type: z.enum(["none", "selection", "chapter", "volume", "book", "entities"]),
+    type: z.enum(["none", "selection", "chapter", "volume", "book", "settings-catalog", "entities"]),
     chapterId: identifier.optional(),
     volumeId: identifier.optional(),
     selection: z.string().max(200_000).optional(),
     chapterIds: z.array(identifier).max(20).optional(),
     characterIds: optionalStrings,
+    mentionCharacterIds: optionalStrings,
     settingIds: optionalStrings,
-    includeBookSummary: z.boolean().optional()
+    raceIds: optionalStrings,
+    organizationIds: optionalStrings,
+    includeBookSummary: z.boolean().optional(),
+    includeSettingInfo: z.boolean().optional()
 });
 const analysisTaskTypeSchema = z.enum(["structure", "chapter-analysis", "character-extraction", "character-summary", "character-identity-audit", "timeline-analysis", "worldview-analysis", "setting-extraction", "consistency-check", "report-update", "book-analysis"]);
 const relationshipSourceRefSchema = z.object({
@@ -619,6 +667,18 @@ function redactAiCallContext(record, permissions) {
         delete redactedScope.characterIds;
         restricted = true;
     }
+    if (permissions.characters === "none" && "mentionCharacterIds" in redactedScope) {
+        delete redactedScope.mentionCharacterIds;
+        restricted = true;
+    }
+    if (permissions.races === "none" && "raceIds" in redactedScope) {
+        delete redactedScope.raceIds;
+        restricted = true;
+    }
+    if (permissions.organizations === "none" && "organizationIds" in redactedScope) {
+        delete redactedScope.organizationIds;
+        restricted = true;
+    }
     if (permissions.settings === "none" && "settingIds" in redactedScope) {
         delete redactedScope.settingIds;
         restricted = true;
@@ -626,6 +686,90 @@ function redactAiCallContext(record, permissions) {
     result.contextScope = restricted ? { ...redactedScope, restricted: true } : redactedScope;
     return result;
 }
+const proseRestrictedPlaceholder = "（正文读取权限受限）";
+function redactContinuationGuard(record, permissions) {
+    if (permissions.prose !== "none")
+        return record;
+    return {
+        ...record,
+        issues: [],
+        contextRefs: {},
+        failure: null,
+        restricted: true
+    };
+}
+/** 无正文读取权限时移除建议中的原文、指令和检查证据，避免通过 AI 接口绕过 prose=none。 */
+function redactSuggestion(record, permissions) {
+    if (permissions.prose !== "none")
+        return record;
+    const guard = recordValue(record.guard);
+    return {
+        ...record,
+        instruction: proseRestrictedPlaceholder,
+        sourceText: "",
+        ...(guard ? { guard: redactContinuationGuard(guard, permissions) } : {}),
+        restricted: true
+    };
+}
+function redactAiConversationMessage(item, permissions) {
+    if (permissions.prose !== "none")
+        return item;
+    const message = recordValue(item);
+    if (!message)
+        return item;
+    return {
+        ...message,
+        content: proseRestrictedPlaceholder,
+        citations: [],
+        metadata: { restricted: true },
+        restricted: true
+    };
+}
+/** 无正文读取权限时隐藏对话预览与消息正文，避免历史对话泄露章节原文。 */
+function redactAiConversation(record, permissions) {
+    const readableRecord = permissions.characters === "none" ? { ...record, roleplayCharacter: null } : record;
+    const scopedRecord = redactAiCallContext(readableRecord, permissions);
+    if (permissions.prose !== "none")
+        return scopedRecord;
+    const result = {
+        ...scopedRecord,
+        title: proseRestrictedPlaceholder
+    };
+    if (typeof result.preview === "string" && result.preview.length > 0) {
+        result.preview = proseRestrictedPlaceholder;
+    }
+    if (Array.isArray(result.messages)) {
+        result.messages = result.messages.map((item) => redactAiConversationMessage(item, permissions));
+    }
+    const messagesPage = recordValue(result.messagesPage);
+    if (messagesPage && Array.isArray(messagesPage.items)) {
+        result.messagesPage = {
+            ...messagesPage,
+            items: messagesPage.items.map((item) => redactAiConversationMessage(item, permissions))
+        };
+    }
+    return { ...result, restricted: true };
+}
+/** SSE 错误事件只暴露 AppError 的公开信息；AI_CALL_FAILED 的 failure 已在 AI 层完成密钥脱敏。 */
+export function publicAiStreamError(error) {
+    if (error instanceof AppError) {
+        const details = error.details && typeof error.details === "object" && !Array.isArray(error.details)
+            ? error.details
+            : null;
+        return {
+            code: error.code,
+            message: error.message,
+            status: error.status,
+            ...((error.status < 500 || error.code === "AI_CALL_FAILED") && typeof details?.failure === "string" ? { failure: details.failure } : {}),
+            ...(typeof details?.callId === "string" ? { callId: details.callId } : {}),
+            ...(typeof details?.providerName === "string" ? { providerName: details.providerName } : {}),
+            ...(typeof details?.providerId === "string" ? { providerId: details.providerId } : {}),
+            ...(typeof details?.modelId === "string" ? { modelId: details.modelId } : {}),
+            ...(typeof details?.modelRecordId === "string" ? { modelRecordId: details.modelRecordId } : {})
+        };
+    }
+    return { code: "AI_STREAM_FAILED", message: "AI 流式调用失败" };
+}
 function redactMergeRecords(value, mapper) {
     const record = recordValue(value);
     if (!record)
@@ -652,6 +796,7 @@ export function createRuntime(options) {
         sameOriginEnforced: options.security?.enforceSameOrigin ?? true
     });
     const database = new Database(options.databasePath);
+    const bootId = randomUUID();
     const temporaryAttachmentRoot = options.databasePath === ":memory:" && !options.attachmentDirectory
         ? mkdtempSync(join(tmpdir(), "scriverse-attachments-"))
         : null;
@@ -722,6 +867,7 @@ export function createRuntime(options) {
         }, false, actor?.allowAdminAccess ?? false);
     });
     const app = express();
+    enforceCaseInsensitiveRouting(app);
     const upload = multer({
         storage: multer.memoryStorage(),
         limits: { fileSize: 30 * 1024 * 1024, files: 1, fields: 10, fieldSize: 64 * 1024, parts: 11, headerPairs: 100 }
@@ -742,22 +888,28 @@ export function createRuntime(options) {
         limits: { fileSize: 30 * 1024 * 1024, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
     });
     app.disable("x-powered-by");
-    if (options.security?.trustProxy !== undefined)
-        app.set("trust proxy", options.security.trustProxy);
+    const trustProxy = resolveTrustProxySetting(options.security?.trustProxy);
+    if (options.security?.trustProxy === true) {
+        logger.warn("security.trust_proxy.coerced", { from: true, to: 1 });
+    }
+    if (trustProxy !== undefined)
+        app.set("trust proxy", trustProxy);
     app.use(createRequestLoggingMiddleware());
     app.use(createSecurityHeadersMiddleware());
     app.get("/api/health", (_request, response) => {
         data(response, {
             status: "ok",
+            bootId,
             version: APP_VERSION,
             protocol: "openai-chat-completions",
-            protocols: ["openai-chat-completions", "anthropic-messages"],
+            protocols: [...AI_PROVIDER_PROTOCOLS],
             development: options.developmentServer === true
         });
     });
     if (options.security?.auth)
         app.use(createBasicAuthMiddleware(options.security.auth));
     app.use(createAuthenticationRateLimitMiddleware());
+    app.use(createCaptchaRateLimitMiddleware());
     app.use(createApiRateLimitMiddleware(options.security?.apiRateLimit, options.security?.apiRateWindowMs));
     if (options.security?.enforceSameOrigin ?? true)
         app.use(createSameOriginMiddleware());
@@ -769,12 +921,12 @@ export function createRuntime(options) {
         const setupTokenRequired = setupRequired && Boolean(options.security?.setupToken);
         const developmentUser = getDevelopmentUser();
         if (!session && developmentUser) {
-            data(response, { authenticated: true, user: developmentUser, csrfToken: null, setupRequired: false, setupTokenRequired: false, registrationOpen });
+            data(response, { authenticated: true, user: developmentUser, csrfToken: null, bootId, setupRequired: false, setupTokenRequired: false, registrationOpen });
             return;
         }
         data(response, session
-            ? { authenticated: true, user: session.user, csrfToken: session.csrfToken, setupRequired: false, setupTokenRequired: false, registrationOpen }
-            : { authenticated: false, user: null, csrfToken: null, setupRequired, setupTokenRequired, registrationOpen });
+            ? { authenticated: true, user: session.user, csrfToken: session.csrfToken, bootId, setupRequired: false, setupTokenRequired: false, registrationOpen }
+            : { authenticated: false, user: null, csrfToken: null, bootId, setupRequired, setupTokenRequired, registrationOpen });
     });
     app.get("/api/auth/captcha", (_request, response) => {
         data(response, captcha.create());
@@ -808,6 +960,7 @@ export function createRuntime(options) {
         resolveBypassUser: getDevelopmentUser
     }));
     app.use(createUploadRateLimitMiddleware());
+    app.use(createExpensiveApiRateLimitMiddleware());
     app.use(createCliApiScopeMiddleware(options.disableUserAuth));
     app.use(createWorkAuthorizationMiddleware(auth, options.disableUserAuth));
     app.get("/api/cli/session", (request, response) => {
@@ -916,6 +1069,8 @@ export function createRuntime(options) {
     app.patch("/api/users/:userId", (request, response) => {
         if (!request.authUser)
             throw new AppError(401, "AUTH_REQUIRED", "请先登录");
+        if (request.authUser.role !== "admin")
+            throw new AppError(403, "ADMIN_REQUIRED", "该操作仅限系统管理员");
         const updated = auth.updateUser(request.authUser, request.params.userId, parse(userUpdateSchema, request.body));
         store.audit(null, "user.updated", "user", updated.userId, { role: updated.role, status: updated.status });
         data(response, updated);
@@ -1780,19 +1935,47 @@ export function createRuntime(options) {
             page: request.query.page ?? "1",
             limit: request.query.limit ?? "20"
         }) ?? { page: 1, limit: 20, offset: 0 };
-        data(response, store.listAiConversationsPage(request.params.workId, pagination));
+        const permissions = requestPermissions(request, request.params.workId);
+        data(response, mapRecords(store.listAiConversationsPage(request.params.workId, pagination), (conversation) => (redactAiConversation(conversation, permissions))));
     });
     app.post("/api/works/:workId/ai-conversations", (request, response) => {
-        const input = parse(z.object({ title: z.string().max(200).optional() }), request.body ?? {});
-        data(response, store.createAiConversation(request.params.workId, input.title), 201);
+        const input = parse(z.object({
+            title: z.string().max(200).optional(),
+            taskType: aiConversationTaskTypeSchema.optional()
+        }).strict(), request.body ?? {});
+        data(response, store.createAiConversation(request.params.workId, input.title, input.taskType), 201);
     });
     app.get("/api/ai-conversations/:conversationId", (request, response) => {
         const pagination = parsePagination(request.query);
-        data(response, pagination ? store.getAiConversationPage(request.params.conversationId, pagination) : store.getAiConversation(request.params.conversationId));
+        const conversation = pagination
+            ? store.getAiConversationPage(request.params.conversationId, pagination)
+            : store.getAiConversation(request.params.conversationId);
+        const permissions = requestPermissions(request, String(conversation.workId));
+        data(response, redactAiConversation(conversation, permissions));
     });
     app.post("/api/ai-conversations/:conversationId/fork", (request, response) => {
         const input = parse(z.object({ messageId: identifier, title: z.string().max(200).optional() }), request.body);
-        data(response, store.forkAiConversation(request.params.conversationId, input.messageId, input.title), 201);
+        const forked = store.forkAiConversation(request.params.conversationId, input.messageId, input.title);
+        const permissions = requestPermissions(request, String(forked.workId));
+        data(response, redactAiConversation(forked, permissions), 201);
+    });
+    app.patch("/api/ai-conversations/:conversationId/task-type", (request, response) => {
+        const input = parse(z.object({ taskType: aiConversationTaskTypeSchema }).strict(), request.body);
+        const updated = store.setAiConversationTaskType(request.params.conversationId, input.taskType);
+        const permissions = requestPermissions(request, String(updated.workId));
+        data(response, redactAiConversation(updated, permissions));
+    });
+    app.patch("/api/ai-conversations/:conversationId/context-scope", (request, response) => {
+        const input = parse(z.object({ scope: contextSchema }).strict(), request.body);
+        const updated = store.setAiConversationContextScope(request.params.conversationId, input.scope);
+        const permissions = requestPermissions(request, String(updated.workId));
+        data(response, redactAiConversation(updated, permissions));
+    });
+    app.patch("/api/ai-conversations/:conversationId/roleplay", (request, response) => {
+        const input = parse(z.object({ characterId: identifier.nullable() }).strict(), request.body);
+        const updated = store.setAiConversationRoleplayCharacter(request.params.conversationId, input.characterId);
+        const permissions = requestPermissions(request, String(updated.workId));
+        data(response, redactAiConversation(updated, permissions));
     });
     app.post("/api/ai-conversations/:conversationId/messages", (request, response) => {
         const input = parse(z.object({
@@ -1809,7 +1992,10 @@ export function createRuntime(options) {
                 processSteps: z.array(aiProcessStepSchema).max(50).optional()
             }).optional()
         }), request.body);
-        data(response, store.addAiConversationMessage(request.params.conversationId, input), 201);
+        const message = store.addAiConversationMessage(request.params.conversationId, input);
+        const conversation = store.getAiConversationSummary(request.params.conversationId);
+        const permissions = requestPermissions(request, String(conversation.workId));
+        data(response, redactAiConversationMessage(message, permissions), 201);
     });
     app.post("/api/ai-conversations/:conversationId/context/prepare", async (request, response) => {
         const input = parse(z.object({
@@ -1857,7 +2043,7 @@ export function createRuntime(options) {
         data(response, ai.createProvider(parse(providerSchema, request.body)), 201);
     });
     app.get("/api/providers/:providerId", (request, response) => data(response, ai.getProvider(request.params.providerId)));
-    app.patch("/api/providers/:providerId", (request, response) => data(response, ai.updateProvider(request.params.providerId, parse(providerSchema.partial(), request.body))));
+    app.patch("/api/providers/:providerId", (request, response) => data(response, ai.updateProvider(request.params.providerId, parse(providerUpdateSchema, request.body))));
     app.delete("/api/providers/:providerId", (request, response) => {
         ai.deleteProvider(request.params.providerId);
         noContent(response);
@@ -1891,7 +2077,10 @@ export function createRuntime(options) {
     app.get("/api/works/:workId/suggestions", (request, response) => {
         const status = typeof request.query.status === "string" ? request.query.status : undefined;
         const pagination = parsePagination(request.query);
-        data(response, pagination ? ai.listSuggestionsPage(request.params.workId, pagination, status) : ai.listSuggestions(request.params.workId, status));
+        const permissions = requestPermissions(request, request.params.workId);
+        data(response, pagination
+            ? mapRecords(ai.listSuggestionsPage(request.params.workId, pagination, status), (suggestion) => redactSuggestion(suggestion, permissions))
+            : ai.listSuggestions(request.params.workId, status).map((suggestion) => redactSuggestion(suggestion, permissions)));
     });
     app.post("/api/works/:workId/suggestions", async (request, response) => {
         const input = parse(z.object({
@@ -1907,14 +2096,14 @@ export function createRuntime(options) {
             if (store.getChapter(citation.chapterId).workId !== request.params.workId)
                 throw new AppError(400, "CITATION_WORK_MISMATCH", "引用章节不属于当前作品");
         }
-        data(response, await ai.createSuggestion({
+        data(response, redactSuggestion(await ai.createSuggestion({
             workId: request.params.workId,
             taskType: input.taskType,
             instruction: instructionWithCitations(input.instruction, citations),
             scope: input.scope,
             ...(input.modelId ? { modelId: input.modelId } : {}),
             ...(input.parameters ? { parameters: input.parameters } : {})
-        }), 201);
+        }), requestPermissions(request, request.params.workId)), 201);
     });
     app.post("/api/works/:workId/chat/stream", async (request, response) => {
         const input = parse(z.object({
@@ -1955,6 +2144,7 @@ export function createRuntime(options) {
                 throw new AppError(400, "CONVERSATION_WORK_MISMATCH", "AI 对话不属于当前作品");
             }
             const conversationId = String(conversation.id);
+            const permissions = requestPermissions(request, request.params.workId);
             const prepared = await ai.prepareConversationContext({
                 conversationId,
                 workId: request.params.workId,
@@ -1965,10 +2155,10 @@ export function createRuntime(options) {
             });
             sendEvent("context", {
                 ...prepared,
-                conversation: {
+                conversation: redactAiConversation({
                     ...store.getAiConversationSummary(conversationId),
                     contextWarningPending: prepared.action === "warn"
-                }
+                }, permissions)
             });
             if (prepared.action === "warn")
                 return;
@@ -1981,7 +2171,7 @@ export function createRuntime(options) {
                 });
             const currentMessageId = input.currentMessageId ?? String(userMessage?.id ?? "");
             if (userMessage)
-                sendEvent("user_message", { message: userMessage });
+                sendEvent("user_message", { message: redactAiConversationMessage(userMessage, permissions) });
             const suggestion = await ai.createStreamingChat({
                 workId: request.params.workId,
                 instruction: instructionWithCitations(input.instruction, citations),
@@ -2019,20 +2209,11 @@ export function createRuntime(options) {
         }
         catch (error) {
             if (!controller.signal.aborted) {
-                const details = error instanceof AppError && error.details && typeof error.details === "object" && !Array.isArray(error.details)
-                    ? error.details
-                    : null;
-                sendEvent("error", {
-                    code: error instanceof AppError ? error.code : "AI_STREAM_FAILED",
-                    message: error instanceof Error ? error.message : "AI 流式调用失败",
-                    ...(error instanceof AppError ? { status: error.status } : {}),
-                    ...(typeof details?.failure === "string" ? { failure: details.failure } : {}),
-                    ...(typeof details?.callId === "string" ? { callId: details.callId } : {}),
-                    ...(typeof details?.providerName === "string" ? { providerName: details.providerName } : {}),
-                    ...(typeof details?.providerId === "string" ? { providerId: details.providerId } : {}),
-                    ...(typeof details?.modelId === "string" ? { modelId: details.modelId } : {}),
-                    ...(typeof details?.modelRecordId === "string" ? { modelRecordId: details.modelRecordId } : {})
+                logger.error("ai.stream.failed", {
+                    workId: request.params.workId,
+                    error: sanitizeError(error)
                 });
+                sendEvent("error", publicAiStreamError(error));
             }
         }
         finally {
@@ -2040,22 +2221,34 @@ export function createRuntime(options) {
                 response.end();
         }
     });
-    app.get("/api/suggestions/:suggestionId", (request, response) => data(response, ai.getSuggestion(request.params.suggestionId)));
+    app.get("/api/suggestions/:suggestionId", (request, response) => {
+        const suggestion = ai.getSuggestion(request.params.suggestionId);
+        const permissions = requestPermissions(request, String(suggestion.workId));
+        data(response, redactSuggestion(suggestion, permissions));
+    });
     app.get("/api/suggestions/:suggestionId/guards", (request, response) => {
         const pagination = parsePagination(request.query);
-        data(response, pagination
+        const suggestion = ai.getSuggestion(request.params.suggestionId);
+        const permissions = requestPermissions(request, String(suggestion.workId));
+        data(response, mapRecords(pagination
             ? store.listContinuationGuardsPage(request.params.suggestionId, pagination)
-            : store.listContinuationGuards(request.params.suggestionId));
+            : store.listContinuationGuards(request.params.suggestionId), (guard) => redactContinuationGuard(guard, permissions)));
     });
     app.post("/api/suggestions/:suggestionId/guard", async (request, response) => {
         const input = parse(z.object({ content: z.string().max(2_000_000).optional() }), request.body ?? {});
-        data(response, await ai.runSuggestionGuard(request.params.suggestionId, input.content), 201);
+        const suggestion = ai.getSuggestion(request.params.suggestionId);
+        const permissions = requestPermissions(request, String(suggestion.workId));
+        data(response, redactContinuationGuard(await ai.runSuggestionGuard(request.params.suggestionId, input.content), permissions), 201);
     });
     app.post("/api/suggestions/:suggestionId/accept", (request, response) => {
         const input = parse(z.object({ content: z.string().max(2_000_000).optional() }), request.body ?? {});
         data(response, ai.acceptSuggestion(request.params.suggestionId, input.content));
     });
-    app.post("/api/suggestions/:suggestionId/reject", (request, response) => data(response, ai.rejectSuggestion(request.params.suggestionId)));
+    app.post("/api/suggestions/:suggestionId/reject", (request, response) => {
+        const suggestion = ai.rejectSuggestion(request.params.suggestionId);
+        const permissions = requestPermissions(request, String(suggestion.workId));
+        data(response, redactSuggestion(suggestion, permissions));
+    });
     app.get("/api/works/:workId/ai-calls", (request, response) => {
         const pagination = parsePagination(request.query);
         const permissions = requestPermissions(request, request.params.workId);
@@ -2072,7 +2265,7 @@ export function createRuntime(options) {
         data(response, await ai.searchWork(request.params.workId, query.q, { type: query.type, limit: query.limit }));
     });
     app.get("/api/works/:workId/export", async (request, response) => {
-        const format = parse(z.enum(["json", "txt", "markdown"]), request.query.format ?? "json");
+        const format = parse(z.enum(["json", "txt", "markdown", "docx"]), request.query.format ?? "json");
         if (format === "json") {
             response.setHeader("Content-Disposition", `attachment; filename=novel-${request.params.workId}.json`);
             data(response, store.exportWork(request.params.workId));
@@ -2092,6 +2285,12 @@ export function createRuntime(options) {
             }), response);
             return;
         }
+        if (format === "docx") {
+            response.type("application/vnd.openxmlformats-officedocument.wordprocessingml.document");
+            response.setHeader("Content-Disposition", `attachment; filename=novel-${request.params.workId}.docx`);
+            response.send(await store.exportDocx(request.params.workId));
+            return;
+        }
         response.type("text/plain");
         response.setHeader("Content-Disposition", `attachment; filename=novel-${request.params.workId}.txt`);
         response.send(store.exportText(request.params.workId, format));
@@ -2151,7 +2350,7 @@ export function createRuntime(options) {
             setHeaders: setStaticCacheControl
         }));
         app.get("/{*path}", (request, response, next) => {
-            if (request.path.startsWith("/api/"))
+            if (normalizeApiPath(request.path).startsWith("/api/"))
                 return next();
             sendIndexHtml(request, response);
         });