@musnows/scriverse 0.7.1 → 0.7.3

package/dist/app.js

@@ -16,7 +16,7 @@ import { resolveMaxAgentToolCallLimit } from "./ai-tool-results.js";
 import { CredentialVault } from "./credential-vault.js";
 import { Database } from "./database.js";
 import { assertSafeDocxArchive } from "./docx-security.js";
-import { DRAFT_SETTING_MODULES, TASK_TYPES } from "./domain.js";
+import { CREATABLE_ANALYSIS_TASK_TYPES, DRAFT_SETTING_MODULES, TASK_TYPES } from "./domain.js";
 import { AppError } from "./errors.js";
 import { isOfficialGoogleVertexBaseUrl, parseGoogleServiceAccount } from "./google-vertex-auth.js";
 import { HYBRID_SEARCH_TYPES } from "./hybrid-search.js";
@@ -34,8 +34,10 @@ import { currentRequestActor, runWithRequestActor } from "./request-context.js";
 import { S3BackupManager } from "./s3-backup.js";
 import { APP_VERSION } from "./version.js";
 import { ReleaseUpdateChecker } from "./release-update.js";
+import { DEFAULT_IMAGE_UPLOAD_LIMITS, formatUploadLimit } from "./upload-limits.js";
 import { canReadWorkModule, canWriteWorkModule, fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
-import { CollaborationPresence, entityEditorPageKey, presencePageKinds } from "./collaboration-presence.js";
+import { CollaborationPresence, editorPageKey, entityEditorPageKey, modulePageKey, presencePageKinds } from "./collaboration-presence.js";
+import { PresenceStore } from "./presence-store.js";
 import { analysisTaskReadModules, clearSessionCookie, createCliApiScopeMiddleware, createUserSessionMiddleware, createWorkAuthorizationMiddleware, relationshipAnalysisReadModules, setSessionCookie, UserAuthService } from "./user-auth.js";
 const nonEmpty = z.string().trim().min(1);
 const identifier = z.string().trim().min(1).max(200);
@@ -47,6 +49,22 @@ const versionedEntityTypeSchema = z.enum(versionedEntityTypes);
 const attachmentPermissionModuleSchema = z.enum(attachmentPermissionModules);
 const maximumImportedTextLength = 20_000_000;
 const maximumKnowledgeSectionsLength = 4_000_000;
+function assertImageUploadSize(byteLength, maximumBytes, message) {
+    if (byteLength <= maximumBytes)
+        return;
+    throw new AppError(413, "IMAGE_TOO_LARGE", message);
+}
+function uploadSizeError(pathname, limits) {
+    if (pathname === "/api/auth/avatar")
+        return { code: "IMAGE_TOO_LARGE", message: `头像图片不能超过 ${formatUploadLimit(limits.avatarBytes)}` };
+    if (/^\/api\/works\/[^/]+\/cover$/u.test(pathname)) {
+        return { code: "IMAGE_TOO_LARGE", message: `封面图片不能超过 ${formatUploadLimit(limits.coverBytes)}` };
+    }
+    if (/^\/api\/works\/[^/]+\/attachments$/u.test(pathname)) {
+        return { code: "ATTACHMENT_TOO_LARGE", message: `图片附件不能超过 ${formatUploadLimit(limits.attachmentBytes)}` };
+    }
+    return null;
+}
 const captchaFields = {
     captchaId: z.string().trim().min(1).max(200),
     captchaAnswer: z.string().trim().min(1).max(16)
@@ -153,7 +171,7 @@ const settingSchema = z.object({
 const globalReplaceSchema = z.object({
     find: z.string().min(1).max(500),
     replacement: z.string().max(200_000),
-    scope: z.enum(["prose", "settings", "prose-and-settings"]).default("prose")
+    scope: z.enum(["prose", "settings", "prose-and-settings"])
 }).strict();
 const draftSchema = z.object({
     draftType: z.enum(["prose", "setting"]),
@@ -389,7 +407,16 @@ const platformPageSizesSchema = z.object({
 const platformUiSettingsSchema = z.object({
     toastPosition: z.enum(["bottom-right", "top-right"]).optional(),
     pageSizes: platformPageSizesSchema.optional(),
-    galaxyFrameRate: z.union([z.literal(24), z.literal(30), z.literal(60)]).optional()
+    galaxyFrameRate: z.union([
+        z.literal(24),
+        z.literal(30),
+        z.literal(60),
+        z.literal(90),
+        z.literal(120),
+        z.literal(144),
+        z.literal(165),
+        z.literal(240)
+    ]).optional()
 }).strict().refine((input) => input.toastPosition !== undefined || input.pageSizes !== undefined || input.galaxyFrameRate !== undefined, {
     message: "至少需要提供一项界面设置"
 });
@@ -437,6 +464,12 @@ const s3BackupRunQuerySchema = z.object({
     afterSequence: z.coerce.number().int().min(0).optional(),
     limit: z.coerce.number().int().min(1).max(100).optional()
 }).strict();
+const s3BackupEncryptionSchema = z.object({
+    enabled: z.boolean()
+}).strict();
+const s3BackupEncryptionConfirmationSchema = z.object({
+    confirmationToken: z.string().regex(/^[A-Za-z0-9_-]{43}$/u, "备份加密确认令牌格式无效")
+}).strict();
 const aiToolCallResultSchema = z.object({
     id: z.string().min(1).max(300),
     name: z.string().min(1).max(200),
@@ -508,7 +541,8 @@ const contextSchema = z.object({
     includeBookSummary: z.boolean().optional(),
     includeSettingInfo: z.boolean().optional()
 });
-const analysisTaskTypeSchema = z.enum(["structure", "chapter-analysis", "character-extraction", "character-summary", "character-identity-audit", "timeline-analysis", "worldview-analysis", "setting-extraction", "consistency-check", "report-update", "book-analysis"]);
+/** 创建任务 API 的分析类型校验：仅允许可新建类型，历史类型在运行层保留防御性拒绝。 */
+export const creatableAnalysisTaskTypeSchema = z.enum(CREATABLE_ANALYSIS_TASK_TYPES);
 const relationshipSourceRefSchema = z.object({
     sourceType: z.string().trim().min(1).max(50).regex(/^[a-z][a-z-]*$/u),
     sourceId: identifier,
@@ -552,7 +586,7 @@ const relationshipAnalysisScopeSchema = z.object({
 });
 const analysisTaskSchema = z.union([
     z.object({ taskType: z.literal("relationship-analysis"), scope: relationshipAnalysisScopeSchema.optional(), modelId: identifier.optional() }).strict(),
-    z.object({ taskType: analysisTaskTypeSchema, scope: jsonObject.optional(), modelId: identifier.optional() }).strict().superRefine((input, context) => {
+    z.object({ taskType: creatableAnalysisTaskTypeSchema, scope: jsonObject.optional(), modelId: identifier.optional() }).strict().superRefine((input, context) => {
         if (input.scope?.includeAllSettings !== undefined) {
             context.addIssue({ code: z.ZodIssueCode.custom, path: ["scope", "includeAllSettings"], message: "包含所有设定仅支持人物关系分析" });
         }
@@ -573,6 +607,7 @@ const analysisTaskSchema = z.union([
         }
     })
 ]);
+export const RUNTIME_BACKUP_IDLE_TIMEOUT_MS = 9_000;
 function data(response, value, status = 200) {
     response.status(status).json({ data: value });
 }
@@ -781,11 +816,18 @@ function redactSuggestion(record, permissions) {
     };
 }
 function redactAiConversationMessage(item, permissions) {
-    if (permissions.prose !== "none")
-        return item;
     const message = recordValue(item);
     if (!message)
         return item;
+    if (permissions.prose !== "none") {
+        if (permissions.characters !== "none")
+            return item;
+        const metadata = recordValue(message.metadata);
+        if (!metadata || !("mentionCharacterIds" in metadata))
+            return item;
+        const { mentionCharacterIds: _mentionCharacterIds, ...readableMetadata } = metadata;
+        return { ...message, metadata: readableMetadata };
+    }
     return {
         ...message,
         content: proseRestrictedPlaceholder,
@@ -798,25 +840,25 @@ function redactAiConversationMessage(item, permissions) {
 function redactAiConversation(record, permissions) {
     const readableRecord = permissions.characters === "none" ? { ...record, roleplayCharacter: null } : record;
     const scopedRecord = redactAiCallContext(readableRecord, permissions);
-    if (permissions.prose !== "none")
-        return scopedRecord;
     const result = {
-        ...scopedRecord,
-        title: proseRestrictedPlaceholder
+        ...scopedRecord
     };
-    if (typeof result.preview === "string" && result.preview.length > 0) {
-        result.preview = proseRestrictedPlaceholder;
-    }
-    if (Array.isArray(result.messages)) {
+    if ((permissions.prose === "none" || permissions.characters === "none") && Array.isArray(result.messages)) {
         result.messages = result.messages.map((item) => redactAiConversationMessage(item, permissions));
     }
     const messagesPage = recordValue(result.messagesPage);
-    if (messagesPage && Array.isArray(messagesPage.items)) {
+    if ((permissions.prose === "none" || permissions.characters === "none") && messagesPage && Array.isArray(messagesPage.items)) {
         result.messagesPage = {
             ...messagesPage,
             items: messagesPage.items.map((item) => redactAiConversationMessage(item, permissions))
         };
     }
+    if (permissions.prose !== "none")
+        return result;
+    result.title = proseRestrictedPlaceholder;
+    if (typeof result.preview === "string" && result.preview.length > 0) {
+        result.preview = proseRestrictedPlaceholder;
+    }
     return { ...result, restricted: true };
 }
 /** SSE 错误事件只暴露 AppError 的公开信息；AI_CALL_FAILED 的 failure 已在 AI 层完成密钥脱敏。 */
@@ -856,6 +898,7 @@ function redactVersionSnapshots(value, mapper) {
     });
 }
 export function createRuntime(options) {
+    const uploadLimits = options.uploadLimits ?? DEFAULT_IMAGE_UPLOAD_LIMITS;
     logger.info("runtime.initializing", {
         databasePath: options.databasePath,
         serveUi: options.serveUi ?? true,
@@ -869,19 +912,35 @@ export function createRuntime(options) {
     const temporaryAttachmentRoot = options.databasePath === ":memory:" && !options.attachmentDirectory
         ? mkdtempSync(join(tmpdir(), "scriverse-attachments-"))
         : null;
-    const attachmentStorage = new AttachmentStorage(options.attachmentDirectory ?? temporaryAttachmentRoot ?? join(dirname(options.databasePath), "attachments"));
+    const attachmentStorage = new AttachmentStorage(options.attachmentDirectory ?? temporaryAttachmentRoot ?? join(dirname(options.databasePath), "attachments"), uploadLimits.attachmentBytes);
     mkdirSync(attachmentStorage.temporaryDirectory, { recursive: true, mode: 0o700 });
     const auth = new UserAuthService(database);
-    const collaborationPresence = new CollaborationPresence();
-    const publishRelationshipChange = (workId, relationshipId) => {
+    const collaborationPresence = new CollaborationPresence(45_000, Date.now, 120_000, 50, { store: new PresenceStore(database) });
+    const publishCollaborativeChange = (workId, pageKey, options = {}) => {
         const actor = currentRequestActor();
-        if (!actor || !workId || !relationshipId)
+        if (!actor || !workId || !pageKey)
             return;
-        collaborationPresence.publishChange(workId, entityEditorPageKey("relationship", relationshipId), {
+        collaborationPresence.publishChange(workId, pageKey, {
             userId: actor.userId,
             displayName: actor.displayName
-        });
+        }, options);
     };
+    const publishEditorChange = (workId, chapterId, options = {}) => {
+        if (!chapterId)
+            return;
+        publishCollaborativeChange(workId, editorPageKey(chapterId), options);
+    };
+    const publishEntityChange = (workId, module, resourceId, options = {}) => {
+        if (!resourceId)
+            return;
+        publishCollaborativeChange(workId, entityEditorPageKey(module, resourceId), options);
+    };
+    const publishModuleChange = (workId, module, options = {}) => {
+        if (!module)
+            return;
+        publishCollaborativeChange(workId, modulePageKey(module), options);
+    };
+    const deletedPageChange = { action: "delete", pageDeleted: true };
     const getDevelopmentUser = () => options.devAuthBypass
         ? auth.listUsers().find((user) => user.status === "active") ?? null
         : null;
@@ -933,7 +992,9 @@ export function createRuntime(options) {
         timeoutMs: options.releaseCheckTimeoutMs,
         retries: options.releaseCheckRetries
     });
-    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
+    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.developmentServer === true
+        ? undefined
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
         const requiredModules = analysisTaskReadModules(task.taskType, task.scope);
         const creator = actor ? null : database.get("SELECT created_by_user_id FROM analysis_tasks WHERE id = ?", String(task.id));
         const userId = actor?.userId ?? (typeof creator?.created_by_user_id === "string" ? creator.created_by_user_id : null);
@@ -955,18 +1016,18 @@ export function createRuntime(options) {
     });
     const coverUpload = multer({
         storage: multer.memoryStorage(),
-        limits: { fileSize: 5 * 1024 * 1024, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
+        limits: { fileSize: uploadLimits.coverBytes + 1, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
     });
     const avatarUpload = multer({
         storage: multer.memoryStorage(),
-        limits: { fileSize: 5 * 1024 * 1024, files: 1, fields: 1, fieldSize: 1024, parts: 2, headerPairs: 50 }
+        limits: { fileSize: uploadLimits.avatarBytes + 1, files: 1, fields: 1, fieldSize: 1024, parts: 2, headerPairs: 50 }
     });
     const attachmentUpload = multer({
         storage: multer.diskStorage({
             destination: attachmentStorage.temporaryDirectory,
             filename: (_request, _file, callback) => callback(null, randomUUID())
         }),
-        limits: { fileSize: 30 * 1024 * 1024, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
+        limits: { fileSize: uploadLimits.attachmentBytes + 1, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
     });
     app.disable("x-powered-by");
     const trustProxy = resolveTrustProxySetting(options.security?.trustProxy);
@@ -984,7 +1045,8 @@ export function createRuntime(options) {
             version: APP_VERSION,
             protocol: "openai-chat-completions",
             protocols: [...AI_PROVIDER_PROTOCOLS],
-            development: options.developmentServer === true
+            development: options.developmentServer === true,
+            uploadLimits
         });
     });
     app.get("/api/update-check", async (_request, response) => {
@@ -1077,7 +1139,8 @@ export function createRuntime(options) {
         if (!request.authUser)
             throw new AppError(401, "AUTH_REQUIRED", "请先登录");
         if (!request.file)
-            throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG 或 WebP 头像");
+            throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG、WebP 或 GIF 头像");
+        assertImageUploadSize(request.file.buffer.byteLength, uploadLimits.avatarBytes, `头像图片不能超过 ${formatUploadLimit(uploadLimits.avatarBytes)}`);
         try {
             const metadata = readRasterImageMetadata(request.file.buffer);
             const updated = database.transaction(() => {
@@ -1262,8 +1325,11 @@ export function createRuntime(options) {
         if (!request.file)
             throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG 或 WebP 封面");
         const bytes = request.file.buffer;
+        assertImageUploadSize(bytes.byteLength, uploadLimits.coverBytes, `封面图片不能超过 ${formatUploadLimit(uploadLimits.coverBytes)}`);
         try {
             const metadata = readRasterImageMetadata(bytes);
+            if (metadata.mimeType === "image/gif")
+                throw new AppError(415, "UNSUPPORTED_COVER_FORMAT", "封面不支持 GIF 图片");
             const expectedVersionNo = parse(expectedVersionNoSchema, request.body.expectedVersionNo);
             data(response, store.setWorkCover(String(request.params.workId), metadata.mimeType, bytes, expectedVersionNo));
         }
@@ -1344,11 +1410,14 @@ export function createRuntime(options) {
         const input = parse(z.object({ title: nonEmpty.max(300).optional(), content: z.string().max(2_000_000).optional(), excludedFromAnalysis: z.boolean().optional(), chapterType: chapterTypeSchema.optional(), source: z.enum(["manual", "auto"]).optional(), changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const { source, changeNote, expectedVersionNo, ...chapterInput } = input;
         const chapter = store.saveChapter(request.params.chapterId, chapterInput, source ?? "manual", null, changeNote, expectedVersionNo);
+        publishEditorChange(String(chapter.workId), String(chapter.id));
         data(response, chapter);
     });
     app.delete("/api/chapters/:chapterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const chapter = store.getChapter(request.params.chapterId);
         store.deleteChapter(request.params.chapterId, input.expectedVersionNo);
+        publishEditorChange(String(chapter.workId), String(chapter.id), deletedPageChange);
         noContent(response);
     });
     app.delete("/api/chapters/:chapterId/permanent", (request, response) => {
@@ -1509,11 +1578,14 @@ export function createRuntime(options) {
     app.patch("/api/settings/:settingId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(settingSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const setting = store.updateSetting(request.params.settingId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(setting.workId), "setting", String(setting.id));
         data(response, setting);
     });
     app.delete("/api/settings/:settingId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const setting = store.getSetting(request.params.settingId);
         store.deleteSetting(request.params.settingId, input.expectedVersionNo);
+        publishEntityChange(String(setting.workId), "setting", String(setting.id), deletedPageChange);
         noContent(response);
     });
     app.get("/api/works/:workId/characters", (request, response) => {
@@ -1539,6 +1611,7 @@ export function createRuntime(options) {
     app.patch("/api/characters/:characterId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterUpdateSchema.extend({ expectedVersionNo: expectedVersionNoSchema }), request.body);
         const character = store.updateCharacter(request.params.characterId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(character.workId), "character", String(character.id));
         data(response, redactCharacterLinks(character, requestPermissions(request)));
     });
     app.get("/api/characters/:characterId/versions", (request, response) => {
@@ -1554,7 +1627,9 @@ export function createRuntime(options) {
     });
     app.delete("/api/characters/:characterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const character = store.getCharacter(request.params.characterId);
         store.deleteCharacter(request.params.characterId, input.expectedVersionNo);
+        publishEntityChange(String(character.workId), "character", String(character.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/characters/:characterId/merge", (request, response) => {
@@ -1587,11 +1662,17 @@ export function createRuntime(options) {
     app.patch("/api/character-sections/:sectionId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterProfileSectionSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const section = store.updateCharacterProfileSection(request.params.sectionId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(section.workId), "character", String(section.characterId));
         data(response, section);
     });
     app.delete("/api/character-sections/:sectionId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const section = store.getCharacterProfileSection(request.params.sectionId);
         store.deleteCharacterProfileSection(request.params.sectionId, input.expectedVersionNo);
+        publishEntityChange(String(section.workId), "character", String(section.characterId), {
+            action: "delete",
+            label: "角色档案章节"
+        });
         noContent(response);
     });
     app.get("/api/character-sections/:sectionId/versions", (request, response) => {
@@ -1690,11 +1771,14 @@ export function createRuntime(options) {
     app.patch("/api/races/:raceId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(raceSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const race = store.updateRace(request.params.raceId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(race.workId), "race", String(race.id));
         data(response, redactRaceMembers(race, requestPermissions(request)));
     });
     app.delete("/api/races/:raceId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const race = store.getRace(request.params.raceId);
         store.deleteRace(request.params.raceId, input.expectedVersionNo);
+        publishEntityChange(String(race.workId), "race", String(race.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/races/:raceId/merge", (request, response) => {
@@ -1720,11 +1804,14 @@ export function createRuntime(options) {
     app.patch("/api/organizations/:organizationId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(organizationSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const organization = store.updateOrganization(request.params.organizationId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(organization.workId), "organization", String(organization.id));
         data(response, redactOrganizationMembers(organization, requestPermissions(request)));
     });
     app.delete("/api/organizations/:organizationId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const organization = store.getOrganization(request.params.organizationId);
         store.deleteOrganization(request.params.organizationId, input.expectedVersionNo);
+        publishEntityChange(String(organization.workId), "organization", String(organization.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/organizations/:organizationId/merge", (request, response) => {
@@ -1745,11 +1832,14 @@ export function createRuntime(options) {
     app.patch("/api/timeline-tracks/:trackId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineTrackSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const track = store.updateTimelineTrack(request.params.trackId, input, "manual", null, changeNote, expectedVersionNo);
+        publishModuleChange(String(track.workId), "timeline");
         data(response, track);
     });
     app.delete("/api/timeline-tracks/:trackId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const track = store.getTimelineTrack(request.params.trackId);
         store.deleteTimelineTrack(request.params.trackId, input.expectedVersionNo);
+        publishModuleChange(String(track.workId), "timeline", { action: "delete", label: "时间轴轨道" });
         noContent(response);
     });
     app.get("/api/works/:workId/timeline", (request, response) => {
@@ -1777,6 +1867,7 @@ export function createRuntime(options) {
     app.patch("/api/timeline/:eventId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const event = store.updateTimelineEvent(request.params.eventId, input, "manual", null, changeNote, expectedVersionNo);
+        publishModuleChange(String(event.workId), "timeline");
         data(response, event);
     });
     app.post("/api/timeline/:eventId/split", (request, response) => {
@@ -1794,7 +1885,9 @@ export function createRuntime(options) {
     });
     app.delete("/api/timeline/:eventId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const event = store.getTimelineEvent(request.params.eventId);
         store.deleteTimelineEvent(request.params.eventId, input.expectedVersionNo);
+        publishModuleChange(String(event.workId), "timeline", { action: "delete", label: "时间轴事件" });
         noContent(response);
     });
     app.get("/api/works/:workId/relationships", (request, response) => {
@@ -1814,14 +1907,14 @@ export function createRuntime(options) {
     app.patch("/api/relationships/:relationshipId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(relationshipSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const relationship = store.updateRelationship(request.params.relationshipId, input, "manual", null, changeNote, expectedVersionNo);
-        publishRelationshipChange(String(relationship.workId), String(relationship.id));
+        publishEntityChange(String(relationship.workId), "relationship", String(relationship.id));
         data(response, relationship);
     });
     app.delete("/api/relationships/:relationshipId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
         const relationship = store.getRelationship(request.params.relationshipId);
         store.deleteRelationship(request.params.relationshipId, input.expectedVersionNo);
-        publishRelationshipChange(String(relationship.workId), String(relationship.id));
+        publishEntityChange(String(relationship.workId), "relationship", String(relationship.id), deletedPageChange);
         noContent(response);
     });
     app.get("/api/entity-versions/:entityType/:entityId", (request, response) => {
@@ -1983,6 +2076,17 @@ export function createRuntime(options) {
     app.patch("/api/platform/ui-settings", (request, response) => {
         data(response, store.updatePlatformUiSettings(parse(platformUiSettingsSchema, request.body)));
     });
+    app.get("/api/platform/backups/encryption", (_request, response) => {
+        data(response, backups.getEncryptionState());
+    });
+    app.post("/api/platform/backups/encryption", (request, response) => {
+        const input = parse(s3BackupEncryptionSchema, request.body);
+        data(response, backups.setEncryptionEnabled(input.enabled));
+    });
+    app.post("/api/platform/backups/encryption/confirm", (request, response) => {
+        const input = parse(s3BackupEncryptionConfirmationSchema, request.body);
+        data(response, backups.confirmEncryptionEnabled(input.confirmationToken));
+    });
     app.get("/api/platform/backups/targets", (_request, response) => data(response, backups.listTargets()));
     app.post("/api/platform/backups/targets", (request, response) => {
         data(response, backups.createTarget(parse(s3BackupTargetBaseSchema, request.body)), 201);
@@ -2242,6 +2346,7 @@ export function createRuntime(options) {
             if (store.getChapter(citation.chapterId).workId !== request.params.workId)
                 throw new AppError(400, "CITATION_WORK_MISMATCH", "引用章节不属于当前作品");
         }
+        const resolvedInstruction = instructionWithCitations(input.instruction, citations);
         const controller = new AbortController();
         response.on("close", () => {
             if (!response.writableEnded)
@@ -2272,7 +2377,7 @@ export function createRuntime(options) {
                 workId: request.params.workId,
                 modelId: input.modelId,
                 scope: input.scope,
-                instruction: instructionWithCitations(input.instruction, citations),
+                instruction: resolvedInstruction,
                 excludeConversationMessageId: input.currentMessageId
             });
             sendEvent("context", {
@@ -2284,19 +2389,34 @@ export function createRuntime(options) {
             });
             if (prepared.action === "warn")
                 return;
+            const resolvedScope = input.currentMessageId
+                ? input.scope
+                : ai.resolveInstructionMentions({
+                    workId: request.params.workId,
+                    taskType: "chat",
+                    instruction: resolvedInstruction,
+                    scope: input.scope,
+                    conversationId
+                });
+            const mentionCharacterIds = [...new Set([
+                    ...(resolvedScope.characterIds ?? []),
+                    ...(resolvedScope.mentionCharacterIds ?? [])
+                ])];
             const userMessage = input.currentMessageId
                 ? null
                 : store.addAiConversationMessage(conversationId, {
                     role: "user",
                     content: input.instruction,
-                    citations
+                    citations,
+                    ...(mentionCharacterIds.length ? { metadata: { mentionCharacterIds } } : {})
                 });
             const currentMessageId = input.currentMessageId ?? String(userMessage?.id ?? "");
             if (userMessage)
                 sendEvent("user_message", { message: redactAiConversationMessage(userMessage, permissions) });
             const suggestion = await ai.createStreamingChat({
                 workId: request.params.workId,
-                instruction: instructionWithCitations(input.instruction, citations),
+                instruction: resolvedInstruction,
+                // 仍由生成路径基于原始范围持久化累计注入，保证预解析不会吞掉本轮自动命中。
                 scope: input.scope,
                 signal: controller.signal,
                 onToolCall: (toolCall, round) => sendEvent("tool_call", { ...toolCall, round }),
@@ -2504,6 +2624,13 @@ export function createRuntime(options) {
         }
         if (error instanceof multer.MulterError) {
             logger.warn("http.request.upload_rejected", { ...commonFields, uploadCode: error.code });
+            if (error.code === "LIMIT_FILE_SIZE") {
+                const sizeError = uploadSizeError(request.path, uploadLimits);
+                if (sizeError) {
+                    response.status(413).json({ error: sizeError });
+                    return;
+                }
+            }
             response.status(400).json({ error: { code: "UPLOAD_ERROR", message: error.message } });
             return;
         }
@@ -2542,14 +2669,41 @@ export function createRuntime(options) {
     });
     backups.startScheduler();
     logger.info("runtime.ready", { serveUi: options.serveUi ?? true });
-    return { app, database, store, ai, backups, auth, attachmentStorage, cleanupAttachments, close: () => {
+    let closePromise = null;
+    let stopping = false;
+    let closed = false;
+    const close = () => {
+        if (closed)
+            return Promise.resolve();
+        if (closePromise)
+            return closePromise;
+        if (!stopping) {
+            stopping = true;
             logger.info("runtime.closing");
             backups.dispose();
             ai.dispose();
-            database.close();
-            if (temporaryAttachmentRoot)
-                rmSync(temporaryAttachmentRoot, { recursive: true, force: true });
-            logger.info("runtime.closed");
-        } };
+        }
+        closePromise = (async () => {
+            try {
+                await backups.waitForIdle(RUNTIME_BACKUP_IDLE_TIMEOUT_MS);
+                collaborationPresence.close();
+                database.close();
+                if (temporaryAttachmentRoot)
+                    rmSync(temporaryAttachmentRoot, { recursive: true, force: true });
+                closed = true;
+                logger.info("runtime.closed");
+            }
+            catch (error) {
+                logger.error("runtime.close_failed", { error: sanitizeError(error) });
+                throw error;
+            }
+            finally {
+                if (!closed)
+                    closePromise = null;
+            }
+        })();
+        return closePromise;
+    };
+    return { app, database, store, ai, backups, auth, attachmentStorage, cleanupAttachments, close };
 }
 //# sourceMappingURL=app.js.map