@musnows/scriverse 0.7.2 → 0.7.4

package/dist/app.js

@@ -10,18 +10,22 @@ import { tmpdir } from "node:os";
 import { pipeline } from "node:stream/promises";
 import { z, ZodError } from "zod";
 import { AI_PROVIDER_PROTOCOLS } from "./ai-protocol.js";
+import { aiConversationExportContentDisposition, exportAiConversationMarkdown } from "./ai-conversation-export.js";
+import { DEFAULT_AI_STREAM_IDLE_TIMEOUT_MS } from "./ai-stream-timeout.js";
 import { AttachmentStorage } from "./attachment-storage.js";
 import { AiManager } from "./ai.js";
 import { resolveMaxAgentToolCallLimit } from "./ai-tool-results.js";
+import { CHARACTER_EXTRACTION_MAX_ALIASES, CHARACTER_EXTRACTION_MAX_CANDIDATES, CHARACTER_EXTRACTION_MAX_IDENTITY_LENGTH, CHARACTER_EXTRACTION_MAX_NAME_LENGTH, CHARACTER_EXTRACTION_MAX_SPECIES_LENGTH } from "./character-extraction.js";
 import { CredentialVault } from "./credential-vault.js";
 import { Database } from "./database.js";
 import { assertSafeDocxArchive } from "./docx-security.js";
-import { DRAFT_SETTING_MODULES, TASK_TYPES } from "./domain.js";
+import { EPUB_MIME_TYPE, epubContentDisposition } from "./epub-export.js";
+import { CREATABLE_ANALYSIS_TASK_TYPES, DRAFT_SETTING_MODULES, TASK_TYPES } from "./domain.js";
 import { AppError } from "./errors.js";
 import { isOfficialGoogleVertexBaseUrl, parseGoogleServiceAccount } from "./google-vertex-auth.js";
-import { HYBRID_SEARCH_TYPES } from "./hybrid-search.js";
+import { HYBRID_SEARCH_TYPES, MAXIMUM_WORK_SEARCH_QUERY_LENGTH } from "./hybrid-search.js";
 import { applyImportFileHints, parseNovelText } from "./parser.js";
-import { aiConversationTaskTypes, attachmentPermissionModules, Store, versionedEntityTypes } from "./store.js";
+import { aiConversationTaskTypes, attachmentPermissionModules, RECYCLE_BIN_RETENTION_DAYS, Store, versionedEntityTypes } from "./store.js";
 import { paginated, parsePagination } from "./pagination.js";
 import { normalizeUploadFileName } from "./utils.js";
 import { assertSafeAiEndpoint, assertSafeS3Endpoint, createApiRateLimitMiddleware, createAuthenticationRateLimitMiddleware, createBasicAuthMiddleware, createCaptchaRateLimitMiddleware, createExpensiveApiRateLimitMiddleware, createSameOriginMiddleware, createSecurityHeadersMiddleware, createUploadRateLimitMiddleware, enforceCaseInsensitiveRouting, normalizeApiPath, resolveTrustProxySetting, verifySetupToken } from "./security.js";
@@ -34,11 +38,15 @@ import { currentRequestActor, runWithRequestActor } from "./request-context.js";
 import { S3BackupManager } from "./s3-backup.js";
 import { APP_VERSION } from "./version.js";
 import { ReleaseUpdateChecker } from "./release-update.js";
+import { DEFAULT_IMAGE_UPLOAD_LIMITS, formatUploadLimit } from "./upload-limits.js";
 import { canReadWorkModule, canWriteWorkModule, fullWorkModulePermissions, proseReplacementPermissionModules } from "./work-permissions.js";
-import { CollaborationPresence, entityEditorPageKey, presencePageKinds } from "./collaboration-presence.js";
+import { CollaborationPresence, editorPageKey, entityEditorPageKey, modulePageKey, presencePageKinds } from "./collaboration-presence.js";
+import { PresenceStore } from "./presence-store.js";
 import { analysisTaskReadModules, clearSessionCookie, createCliApiScopeMiddleware, createUserSessionMiddleware, createWorkAuthorizationMiddleware, relationshipAnalysisReadModules, setSessionCookie, UserAuthService } from "./user-auth.js";
 const nonEmpty = z.string().trim().min(1);
 const identifier = z.string().trim().min(1).max(200);
+const idempotencyKeySchema = z.string().trim().min(16).max(128)
+    .regex(/^[A-Za-z0-9][A-Za-z0-9._:-]*$/u, "幂等键只能包含英文字母、数字、点、下划线、冒号和短横线");
 const optionalStrings = z.array(z.string()).optional();
 const jsonObject = z.record(z.string(), z.unknown());
 const chapterTypeSchema = z.enum(["正文", "设定", "作者的话", "其他"]);
@@ -47,6 +55,34 @@ const versionedEntityTypeSchema = z.enum(versionedEntityTypes);
 const attachmentPermissionModuleSchema = z.enum(attachmentPermissionModules);
 const maximumImportedTextLength = 20_000_000;
 const maximumKnowledgeSectionsLength = 4_000_000;
+function stableJson(value) {
+    if (Array.isArray(value))
+        return `[${value.map((item) => stableJson(item)).join(",")}]`;
+    if (value && typeof value === "object") {
+        return `{${Object.entries(value)
+            .filter(([, item]) => item !== undefined)
+            .sort(([left], [right]) => left.localeCompare(right))
+            .map(([key, item]) => `${JSON.stringify(key)}:${stableJson(item)}`)
+            .join(",")}}`;
+    }
+    return JSON.stringify(value) ?? "null";
+}
+function assertImageUploadSize(byteLength, maximumBytes, message) {
+    if (byteLength <= maximumBytes)
+        return;
+    throw new AppError(413, "IMAGE_TOO_LARGE", message);
+}
+function uploadSizeError(pathname, limits) {
+    if (pathname === "/api/auth/avatar")
+        return { code: "IMAGE_TOO_LARGE", message: `头像图片不能超过 ${formatUploadLimit(limits.avatarBytes)}` };
+    if (/^\/api\/works\/[^/]+\/cover$/u.test(pathname)) {
+        return { code: "IMAGE_TOO_LARGE", message: `封面图片不能超过 ${formatUploadLimit(limits.coverBytes)}` };
+    }
+    if (/^\/api\/works\/[^/]+\/attachments$/u.test(pathname)) {
+        return { code: "ATTACHMENT_TOO_LARGE", message: `图片附件不能超过 ${formatUploadLimit(limits.attachmentBytes)}` };
+    }
+    return null;
+}
 const captchaFields = {
     captchaId: z.string().trim().min(1).max(200),
     captchaAnswer: z.string().trim().min(1).max(16)
@@ -153,7 +189,7 @@ const settingSchema = z.object({
 const globalReplaceSchema = z.object({
     find: z.string().min(1).max(500),
     replacement: z.string().max(200_000),
-    scope: z.enum(["prose", "settings", "prose-and-settings"]).default("prose")
+    scope: z.enum(["prose", "settings", "prose-and-settings"])
 }).strict();
 const draftSchema = z.object({
     draftType: z.enum(["prose", "setting"]),
@@ -446,6 +482,12 @@ const s3BackupRunQuerySchema = z.object({
     afterSequence: z.coerce.number().int().min(0).optional(),
     limit: z.coerce.number().int().min(1).max(100).optional()
 }).strict();
+const s3BackupEncryptionSchema = z.object({
+    enabled: z.boolean()
+}).strict();
+const s3BackupEncryptionConfirmationSchema = z.object({
+    confirmationToken: z.string().regex(/^[A-Za-z0-9_-]{43}$/u, "备份加密确认令牌格式无效")
+}).strict();
 const aiToolCallResultSchema = z.object({
     id: z.string().min(1).max(300),
     name: z.string().min(1).max(200),
@@ -517,7 +559,8 @@ const contextSchema = z.object({
     includeBookSummary: z.boolean().optional(),
     includeSettingInfo: z.boolean().optional()
 });
-const analysisTaskTypeSchema = z.enum(["structure", "chapter-analysis", "character-extraction", "character-summary", "character-identity-audit", "timeline-analysis", "worldview-analysis", "setting-extraction", "consistency-check", "report-update", "book-analysis"]);
+/** 创建任务 API 的分析类型校验：仅允许可新建类型，历史类型在运行层保留防御性拒绝。 */
+export const creatableAnalysisTaskTypeSchema = z.enum(CREATABLE_ANALYSIS_TASK_TYPES);
 const relationshipSourceRefSchema = z.object({
     sourceType: z.string().trim().min(1).max(50).regex(/^[a-z][a-z-]*$/u),
     sourceId: identifier,
@@ -561,7 +604,7 @@ const relationshipAnalysisScopeSchema = z.object({
 });
 const analysisTaskSchema = z.union([
     z.object({ taskType: z.literal("relationship-analysis"), scope: relationshipAnalysisScopeSchema.optional(), modelId: identifier.optional() }).strict(),
-    z.object({ taskType: analysisTaskTypeSchema, scope: jsonObject.optional(), modelId: identifier.optional() }).strict().superRefine((input, context) => {
+    z.object({ taskType: creatableAnalysisTaskTypeSchema, scope: jsonObject.optional(), modelId: identifier.optional() }).strict().superRefine((input, context) => {
         if (input.scope?.includeAllSettings !== undefined) {
             context.addIssue({ code: z.ZodIssueCode.custom, path: ["scope", "includeAllSettings"], message: "包含所有设定仅支持人物关系分析" });
         }
@@ -582,12 +625,53 @@ const analysisTaskSchema = z.union([
         }
     })
 ]);
+const characterExtractionSelectionSchema = z.object({
+    candidateId: z.string().trim().min(1).max(100).regex(/^[A-Za-z0-9_-]+$/u),
+    action: z.enum(["create", "merge", "skip"]),
+    targetCharacterId: identifier.optional(),
+    name: z.string().trim().min(1).max(CHARACTER_EXTRACTION_MAX_NAME_LENGTH).optional(),
+    aliases: z.array(z.string().trim().min(1).max(CHARACTER_EXTRACTION_MAX_NAME_LENGTH))
+        .max(CHARACTER_EXTRACTION_MAX_ALIASES).optional(),
+    species: z.string().trim().max(CHARACTER_EXTRACTION_MAX_SPECIES_LENGTH).optional(),
+    attributes: z.object({
+        identity: z.string().trim().max(CHARACTER_EXTRACTION_MAX_IDENTITY_LENGTH).optional()
+    }).strict().optional()
+}).strict().superRefine((selection, context) => {
+    if (selection.action === "merge" && !selection.targetCharacterId) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ["targetCharacterId"], message: "合并角色候选必须选择目标角色" });
+    }
+    if (selection.action !== "merge" && selection.targetCharacterId !== undefined) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ["targetCharacterId"], message: "只有合并操作可以指定目标角色" });
+    }
+});
+const characterExtractionApplySchema = z.object({
+    previewToken: z.string().regex(/^[a-f0-9]{64}$/u),
+    selections: z.array(characterExtractionSelectionSchema).min(1).max(CHARACTER_EXTRACTION_MAX_CANDIDATES)
+}).strict().superRefine((input, context) => {
+    const candidateIds = input.selections.map((selection) => selection.candidateId);
+    if (new Set(candidateIds).size !== candidateIds.length) {
+        context.addIssue({ code: z.ZodIssueCode.custom, path: ["selections"], message: "角色候选不能重复" });
+    }
+});
+export const RUNTIME_BACKUP_IDLE_TIMEOUT_MS = 9_000;
 function data(response, value, status = 200) {
     response.status(status).json({ data: value });
 }
 function noContent(response) {
     response.status(204).end();
 }
+async function sendEpub(response, archive, title, fallbackStem) {
+    response.type(EPUB_MIME_TYPE);
+    response.setHeader("Content-Disposition", epubContentDisposition(title, fallbackStem));
+    response.setHeader("Cache-Control", "private, no-store");
+    await pipeline(archive.generateNodeStream({
+        type: "nodebuffer",
+        // 逐条目压缩后再写入，确保首个 mimetype 本地头包含确定长度且没有额外字段。
+        streamFiles: false,
+        compression: "DEFLATE",
+        compressionOptions: { level: 6 }
+    }), response);
+}
 function parse(schema, value) {
     return schema.parse(value);
 }
@@ -790,11 +874,18 @@ function redactSuggestion(record, permissions) {
     };
 }
 function redactAiConversationMessage(item, permissions) {
-    if (permissions.prose !== "none")
-        return item;
     const message = recordValue(item);
     if (!message)
         return item;
+    if (permissions.prose !== "none") {
+        if (permissions.characters !== "none")
+            return item;
+        const metadata = recordValue(message.metadata);
+        if (!metadata || !("mentionCharacterIds" in metadata))
+            return item;
+        const { mentionCharacterIds: _mentionCharacterIds, ...readableMetadata } = metadata;
+        return { ...message, metadata: readableMetadata };
+    }
     return {
         ...message,
         content: proseRestrictedPlaceholder,
@@ -807,25 +898,25 @@ function redactAiConversationMessage(item, permissions) {
 function redactAiConversation(record, permissions) {
     const readableRecord = permissions.characters === "none" ? { ...record, roleplayCharacter: null } : record;
     const scopedRecord = redactAiCallContext(readableRecord, permissions);
-    if (permissions.prose !== "none")
-        return scopedRecord;
     const result = {
-        ...scopedRecord,
-        title: proseRestrictedPlaceholder
+        ...scopedRecord
     };
-    if (typeof result.preview === "string" && result.preview.length > 0) {
-        result.preview = proseRestrictedPlaceholder;
-    }
-    if (Array.isArray(result.messages)) {
+    if ((permissions.prose === "none" || permissions.characters === "none") && Array.isArray(result.messages)) {
         result.messages = result.messages.map((item) => redactAiConversationMessage(item, permissions));
     }
     const messagesPage = recordValue(result.messagesPage);
-    if (messagesPage && Array.isArray(messagesPage.items)) {
+    if ((permissions.prose === "none" || permissions.characters === "none") && messagesPage && Array.isArray(messagesPage.items)) {
         result.messagesPage = {
             ...messagesPage,
             items: messagesPage.items.map((item) => redactAiConversationMessage(item, permissions))
         };
     }
+    if (permissions.prose !== "none")
+        return result;
+    result.title = proseRestrictedPlaceholder;
+    if (typeof result.preview === "string" && result.preview.length > 0) {
+        result.preview = proseRestrictedPlaceholder;
+    }
     return { ...result, restricted: true };
 }
 /** SSE 错误事件只暴露 AppError 的公开信息；AI_CALL_FAILED 的 failure 已在 AI 层完成密钥脱敏。 */
@@ -843,7 +934,9 @@ export function publicAiStreamError(error) {
             ...(typeof details?.providerName === "string" ? { providerName: details.providerName } : {}),
             ...(typeof details?.providerId === "string" ? { providerId: details.providerId } : {}),
             ...(typeof details?.modelId === "string" ? { modelId: details.modelId } : {}),
-            ...(typeof details?.modelRecordId === "string" ? { modelRecordId: details.modelRecordId } : {})
+            ...(typeof details?.modelRecordId === "string" ? { modelRecordId: details.modelRecordId } : {}),
+            ...(typeof details?.phase === "string" ? { phase: details.phase } : {}),
+            ...(typeof details?.idleTimeoutSeconds === "number" ? { idleTimeoutSeconds: details.idleTimeoutSeconds } : {})
         };
     }
     return { code: "AI_STREAM_FAILED", message: "AI 流式调用失败" };
@@ -865,6 +958,7 @@ function redactVersionSnapshots(value, mapper) {
     });
 }
 export function createRuntime(options) {
+    const uploadLimits = options.uploadLimits ?? DEFAULT_IMAGE_UPLOAD_LIMITS;
     logger.info("runtime.initializing", {
         databasePath: options.databasePath,
         serveUi: options.serveUi ?? true,
@@ -878,19 +972,35 @@ export function createRuntime(options) {
     const temporaryAttachmentRoot = options.databasePath === ":memory:" && !options.attachmentDirectory
         ? mkdtempSync(join(tmpdir(), "scriverse-attachments-"))
         : null;
-    const attachmentStorage = new AttachmentStorage(options.attachmentDirectory ?? temporaryAttachmentRoot ?? join(dirname(options.databasePath), "attachments"));
+    const attachmentStorage = new AttachmentStorage(options.attachmentDirectory ?? temporaryAttachmentRoot ?? join(dirname(options.databasePath), "attachments"), uploadLimits.attachmentBytes);
     mkdirSync(attachmentStorage.temporaryDirectory, { recursive: true, mode: 0o700 });
     const auth = new UserAuthService(database);
-    const collaborationPresence = new CollaborationPresence();
-    const publishRelationshipChange = (workId, relationshipId) => {
+    const collaborationPresence = new CollaborationPresence(45_000, Date.now, 120_000, 50, { store: new PresenceStore(database) });
+    const publishCollaborativeChange = (workId, pageKey, options = {}) => {
         const actor = currentRequestActor();
-        if (!actor || !workId || !relationshipId)
+        if (!actor || !workId || !pageKey)
             return;
-        collaborationPresence.publishChange(workId, entityEditorPageKey("relationship", relationshipId), {
+        collaborationPresence.publishChange(workId, pageKey, {
             userId: actor.userId,
             displayName: actor.displayName
-        });
+        }, options);
+    };
+    const publishEditorChange = (workId, chapterId, options = {}) => {
+        if (!chapterId)
+            return;
+        publishCollaborativeChange(workId, editorPageKey(chapterId), options);
     };
+    const publishEntityChange = (workId, module, resourceId, options = {}) => {
+        if (!resourceId)
+            return;
+        publishCollaborativeChange(workId, entityEditorPageKey(module, resourceId), options);
+    };
+    const publishModuleChange = (workId, module, options = {}) => {
+        if (!module)
+            return;
+        publishCollaborativeChange(workId, modulePageKey(module), options);
+    };
+    const deletedPageChange = { action: "delete", pageDeleted: true };
     const getDevelopmentUser = () => options.devAuthBypass
         ? auth.listUsers().find((user) => user.status === "active") ?? null
         : null;
@@ -942,7 +1052,9 @@ export function createRuntime(options) {
         timeoutMs: options.releaseCheckTimeoutMs,
         retries: options.releaseCheckRetries
     });
-    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
+    const ai = new AiManager(store, credentialVault, options.fetchImpl ?? fetch, options.developmentServer === true
+        ? undefined
+        : options.security ? (url) => assertSafeAiEndpoint(url, options.security?.allowPrivateAiEndpoints) : undefined, (task, actor) => {
         const requiredModules = analysisTaskReadModules(task.taskType, task.scope);
         const creator = actor ? null : database.get("SELECT created_by_user_id FROM analysis_tasks WHERE id = ?", String(task.id));
         const userId = actor?.userId ?? (typeof creator?.created_by_user_id === "string" ? creator.created_by_user_id : null);
@@ -955,7 +1067,7 @@ export function createRuntime(options) {
             read: requiredModules,
             write: ["ai-analysis"]
         }, false, actor?.allowAdminAccess ?? false);
-    }, attachmentStorage);
+    }, attachmentStorage, { interactiveStreamIdleTimeoutMs: options.aiStreamIdleTimeoutMs ?? DEFAULT_AI_STREAM_IDLE_TIMEOUT_MS });
     const app = express();
     enforceCaseInsensitiveRouting(app);
     const upload = multer({
@@ -964,18 +1076,18 @@ export function createRuntime(options) {
     });
     const coverUpload = multer({
         storage: multer.memoryStorage(),
-        limits: { fileSize: 5 * 1024 * 1024, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
+        limits: { fileSize: uploadLimits.coverBytes + 1, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
     });
     const avatarUpload = multer({
         storage: multer.memoryStorage(),
-        limits: { fileSize: 5 * 1024 * 1024, files: 1, fields: 1, fieldSize: 1024, parts: 2, headerPairs: 50 }
+        limits: { fileSize: uploadLimits.avatarBytes + 1, files: 1, fields: 1, fieldSize: 1024, parts: 2, headerPairs: 50 }
     });
     const attachmentUpload = multer({
         storage: multer.diskStorage({
             destination: attachmentStorage.temporaryDirectory,
             filename: (_request, _file, callback) => callback(null, randomUUID())
         }),
-        limits: { fileSize: 30 * 1024 * 1024, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
+        limits: { fileSize: uploadLimits.attachmentBytes + 1, files: 1, fields: 4, fieldSize: 16 * 1024, parts: 5, headerPairs: 100 }
     });
     app.disable("x-powered-by");
     const trustProxy = resolveTrustProxySetting(options.security?.trustProxy);
@@ -993,7 +1105,8 @@ export function createRuntime(options) {
             version: APP_VERSION,
             protocol: "openai-chat-completions",
             protocols: [...AI_PROVIDER_PROTOCOLS],
-            development: options.developmentServer === true
+            development: options.developmentServer === true,
+            uploadLimits
         });
     });
     app.get("/api/update-check", async (_request, response) => {
@@ -1086,7 +1199,8 @@ export function createRuntime(options) {
         if (!request.authUser)
             throw new AppError(401, "AUTH_REQUIRED", "请先登录");
         if (!request.file)
-            throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG 或 WebP 头像");
+            throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG、WebP 或 GIF 头像");
+        assertImageUploadSize(request.file.buffer.byteLength, uploadLimits.avatarBytes, `头像图片不能超过 ${formatUploadLimit(uploadLimits.avatarBytes)}`);
         try {
             const metadata = readRasterImageMetadata(request.file.buffer);
             const updated = database.transaction(() => {
@@ -1172,6 +1286,23 @@ export function createRuntime(options) {
         const pagination = parsePagination(request.query);
         data(response, pagination ? store.listWorksPage(pagination) : store.listWorks());
     });
+    app.get("/api/recycle-bin/works", (_request, response) => {
+        data(response, { retentionDays: RECYCLE_BIN_RETENTION_DAYS, works: store.listDeletedWorks() });
+    });
+    app.post("/api/recycle-bin/works/:workId/restore", (request, response) => {
+        if (request.authUser)
+            auth.assertDeletedWorkAccess(request.authUser, request.params.workId, request.authMethod !== "api-key");
+        const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        data(response, store.restoreWork(request.params.workId, input.expectedVersionNo));
+    });
+    app.delete("/api/recycle-bin/works/:workId/permanent", async (request, response) => {
+        if (request.authUser)
+            auth.assertDeletedWorkAccess(request.authUser, request.params.workId, request.authMethod !== "api-key");
+        const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        store.permanentlyDeleteWork(request.params.workId, input.expectedVersionNo);
+        await cleanupAttachments();
+        noContent(response);
+    });
     app.post("/api/works", (request, response) => data(response, store.createWork(parse(workSchema, request.body)), 201));
     app.post("/api/works/import", upload.single("file"), async (request, response) => {
         if (!request.file)
@@ -1256,7 +1387,6 @@ export function createRuntime(options) {
     app.delete("/api/works/:workId", async (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
         store.deleteWork(request.params.workId, input.expectedVersionNo);
-        await cleanupAttachments();
         noContent(response);
     });
     app.get("/api/works/:workId/cover", (request, response) => {
@@ -1271,8 +1401,11 @@ export function createRuntime(options) {
         if (!request.file)
             throw new AppError(400, "FILE_REQUIRED", "请选择 PNG、JPEG 或 WebP 封面");
         const bytes = request.file.buffer;
+        assertImageUploadSize(bytes.byteLength, uploadLimits.coverBytes, `封面图片不能超过 ${formatUploadLimit(uploadLimits.coverBytes)}`);
         try {
             const metadata = readRasterImageMetadata(bytes);
+            if (metadata.mimeType === "image/gif")
+                throw new AppError(415, "UNSUPPORTED_COVER_FORMAT", "封面不支持 GIF 图片");
             const expectedVersionNo = parse(expectedVersionNoSchema, request.body.expectedVersionNo);
             data(response, store.setWorkCover(String(request.params.workId), metadata.mimeType, bytes, expectedVersionNo));
         }
@@ -1333,11 +1466,31 @@ export function createRuntime(options) {
             ? store.listVolumeChaptersPage(request.params.volumeId, pagination)
             : store.listVolumeChapters(request.params.volumeId));
     });
+    app.head("/api/volumes/:volumeId/export", (request, response) => {
+        parse(z.enum(["epub"]), request.query.format ?? "epub");
+        store.getVolume(request.params.volumeId);
+        noContent(response);
+    });
+    app.get("/api/volumes/:volumeId/export", async (request, response) => {
+        parse(z.enum(["epub"]), request.query.format ?? "epub");
+        const exported = await store.exportVolumeEpub(request.params.volumeId);
+        await sendEpub(response, exported.archive, exported.title, `volume-${request.params.volumeId}`);
+    });
     app.delete("/api/volumes/:volumeId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
         store.deleteVolume(request.params.volumeId, input.expectedVersionNo);
         noContent(response);
     });
+    app.post("/api/volumes/:volumeId/restore", (request, response) => {
+        const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        data(response, store.restoreVolume(request.params.volumeId, input.expectedVersionNo));
+    });
+    app.delete("/api/volumes/:volumeId/permanent", async (request, response) => {
+        const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        store.permanentlyDeleteVolume(request.params.volumeId, input.expectedVersionNo);
+        await cleanupAttachments();
+        noContent(response);
+    });
     app.post("/api/works/:workId/chapters", (request, response) => {
         const input = parse(z.object({ volumeId: identifier, title: nonEmpty.max(300), content: z.string().max(2_000_000).optional(), chapterType: chapterTypeSchema.optional() }), request.body);
         data(response, store.createChapter(request.params.workId, input), 201);
@@ -1348,16 +1501,22 @@ export function createRuntime(options) {
             ? store.listDeletedChaptersPage(request.params.workId, pagination)
             : store.listDeletedChapters(request.params.workId));
     });
+    app.get("/api/works/:workId/recycle-bin", (request, response) => {
+        data(response, store.getRecycleBin(request.params.workId));
+    });
     app.get("/api/chapters/:chapterId", (request, response) => data(response, store.getChapter(request.params.chapterId)));
     app.patch("/api/chapters/:chapterId", (request, response) => {
         const input = parse(z.object({ title: nonEmpty.max(300).optional(), content: z.string().max(2_000_000).optional(), excludedFromAnalysis: z.boolean().optional(), chapterType: chapterTypeSchema.optional(), source: z.enum(["manual", "auto"]).optional(), changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const { source, changeNote, expectedVersionNo, ...chapterInput } = input;
         const chapter = store.saveChapter(request.params.chapterId, chapterInput, source ?? "manual", null, changeNote, expectedVersionNo);
+        publishEditorChange(String(chapter.workId), String(chapter.id));
         data(response, chapter);
     });
     app.delete("/api/chapters/:chapterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const chapter = store.getChapter(request.params.chapterId);
         store.deleteChapter(request.params.chapterId, input.expectedVersionNo);
+        publishEditorChange(String(chapter.workId), String(chapter.id), deletedPageChange);
         noContent(response);
     });
     app.delete("/api/chapters/:chapterId/permanent", (request, response) => {
@@ -1424,6 +1583,9 @@ export function createRuntime(options) {
         const pagination = parsePagination(request.query);
         data(response, pagination ? store.listChapterOutlinesPage(request.params.workId, pagination) : store.listChapterOutlines(request.params.workId));
     });
+    app.get("/api/works/:workId/outline-board", (request, response) => {
+        data(response, store.getChapterOutlineBoard(request.params.workId));
+    });
     app.get("/api/chapters/:chapterId/outline", (request, response) => data(response, store.getChapterOutline(request.params.chapterId)));
     app.put("/api/chapters/:chapterId/outline", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(chapterOutlineSchema.extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
@@ -1435,6 +1597,13 @@ export function createRuntime(options) {
         store.deleteChapterOutline(request.params.chapterId, input.expectedVersionNo);
         noContent(response);
     });
+    app.get("/api/works/:workId/chapters/:chapterId/foreshadow-reminders", (request, response) => {
+        data(response, store.listChapterForeshadowReminders(request.params.workId, request.params.chapterId));
+    });
+    app.post("/api/works/:workId/chapters/:chapterId/foreshadow-reminders/:foreshadowId/resolve", (request, response) => {
+        const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        data(response, store.resolveChapterForeshadowReminder(request.params.workId, request.params.chapterId, request.params.foreshadowId, input.expectedVersionNo));
+    });
     app.get("/api/works/:workId/foreshadows", (request, response) => {
         const query = parse(z.object({
             status: z.enum(["all", "unresolved", "resolved"]).default("all"),
@@ -1518,11 +1687,14 @@ export function createRuntime(options) {
     app.patch("/api/settings/:settingId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(settingSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const setting = store.updateSetting(request.params.settingId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(setting.workId), "setting", String(setting.id));
         data(response, setting);
     });
     app.delete("/api/settings/:settingId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const setting = store.getSetting(request.params.settingId);
         store.deleteSetting(request.params.settingId, input.expectedVersionNo);
+        publishEntityChange(String(setting.workId), "setting", String(setting.id), deletedPageChange);
         noContent(response);
     });
     app.get("/api/works/:workId/characters", (request, response) => {
@@ -1548,6 +1720,7 @@ export function createRuntime(options) {
     app.patch("/api/characters/:characterId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterUpdateSchema.extend({ expectedVersionNo: expectedVersionNoSchema }), request.body);
         const character = store.updateCharacter(request.params.characterId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(character.workId), "character", String(character.id));
         data(response, redactCharacterLinks(character, requestPermissions(request)));
     });
     app.get("/api/characters/:characterId/versions", (request, response) => {
@@ -1563,7 +1736,9 @@ export function createRuntime(options) {
     });
     app.delete("/api/characters/:characterId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const character = store.getCharacter(request.params.characterId);
         store.deleteCharacter(request.params.characterId, input.expectedVersionNo);
+        publishEntityChange(String(character.workId), "character", String(character.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/characters/:characterId/merge", (request, response) => {
@@ -1596,11 +1771,17 @@ export function createRuntime(options) {
     app.patch("/api/character-sections/:sectionId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(characterProfileSectionSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const section = store.updateCharacterProfileSection(request.params.sectionId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(section.workId), "character", String(section.characterId));
         data(response, section);
     });
     app.delete("/api/character-sections/:sectionId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const section = store.getCharacterProfileSection(request.params.sectionId);
         store.deleteCharacterProfileSection(request.params.sectionId, input.expectedVersionNo);
+        publishEntityChange(String(section.workId), "character", String(section.characterId), {
+            action: "delete",
+            label: "角色档案章节"
+        });
         noContent(response);
     });
     app.get("/api/character-sections/:sectionId/versions", (request, response) => {
@@ -1699,11 +1880,14 @@ export function createRuntime(options) {
     app.patch("/api/races/:raceId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(raceSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const race = store.updateRace(request.params.raceId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(race.workId), "race", String(race.id));
         data(response, redactRaceMembers(race, requestPermissions(request)));
     });
     app.delete("/api/races/:raceId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const race = store.getRace(request.params.raceId);
         store.deleteRace(request.params.raceId, input.expectedVersionNo);
+        publishEntityChange(String(race.workId), "race", String(race.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/races/:raceId/merge", (request, response) => {
@@ -1729,11 +1913,14 @@ export function createRuntime(options) {
     app.patch("/api/organizations/:organizationId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(organizationSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const organization = store.updateOrganization(request.params.organizationId, input, "manual", null, changeNote, expectedVersionNo);
+        publishEntityChange(String(organization.workId), "organization", String(organization.id));
         data(response, redactOrganizationMembers(organization, requestPermissions(request)));
     });
     app.delete("/api/organizations/:organizationId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const organization = store.getOrganization(request.params.organizationId);
         store.deleteOrganization(request.params.organizationId, input.expectedVersionNo);
+        publishEntityChange(String(organization.workId), "organization", String(organization.id), deletedPageChange);
         noContent(response);
     });
     app.post("/api/organizations/:organizationId/merge", (request, response) => {
@@ -1754,11 +1941,14 @@ export function createRuntime(options) {
     app.patch("/api/timeline-tracks/:trackId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineTrackSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const track = store.updateTimelineTrack(request.params.trackId, input, "manual", null, changeNote, expectedVersionNo);
+        publishModuleChange(String(track.workId), "timeline");
         data(response, track);
     });
     app.delete("/api/timeline-tracks/:trackId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const track = store.getTimelineTrack(request.params.trackId);
         store.deleteTimelineTrack(request.params.trackId, input.expectedVersionNo);
+        publishModuleChange(String(track.workId), "timeline", { action: "delete", label: "时间轴轨道" });
         noContent(response);
     });
     app.get("/api/works/:workId/timeline", (request, response) => {
@@ -1786,6 +1976,7 @@ export function createRuntime(options) {
     app.patch("/api/timeline/:eventId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(timelineSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const event = store.updateTimelineEvent(request.params.eventId, input, "manual", null, changeNote, expectedVersionNo);
+        publishModuleChange(String(event.workId), "timeline");
         data(response, event);
     });
     app.post("/api/timeline/:eventId/split", (request, response) => {
@@ -1803,7 +1994,9 @@ export function createRuntime(options) {
     });
     app.delete("/api/timeline/:eventId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
+        const event = store.getTimelineEvent(request.params.eventId);
         store.deleteTimelineEvent(request.params.eventId, input.expectedVersionNo);
+        publishModuleChange(String(event.workId), "timeline", { action: "delete", label: "时间轴事件" });
         noContent(response);
     });
     app.get("/api/works/:workId/relationships", (request, response) => {
@@ -1823,14 +2016,14 @@ export function createRuntime(options) {
     app.patch("/api/relationships/:relationshipId", (request, response) => {
         const { changeNote, expectedVersionNo, ...input } = parse(relationshipSchema.partial().extend({ changeNote: changeNoteSchema, expectedVersionNo: expectedVersionNoSchema }).strict(), request.body);
         const relationship = store.updateRelationship(request.params.relationshipId, input, "manual", null, changeNote, expectedVersionNo);
-        publishRelationshipChange(String(relationship.workId), String(relationship.id));
+        publishEntityChange(String(relationship.workId), "relationship", String(relationship.id));
         data(response, relationship);
     });
     app.delete("/api/relationships/:relationshipId", (request, response) => {
         const input = parse(z.object({ expectedVersionNo: expectedVersionNoSchema }).strict(), request.body ?? {});
         const relationship = store.getRelationship(request.params.relationshipId);
         store.deleteRelationship(request.params.relationshipId, input.expectedVersionNo);
-        publishRelationshipChange(String(relationship.workId), String(relationship.id));
+        publishEntityChange(String(relationship.workId), "relationship", String(relationship.id), deletedPageChange);
         noContent(response);
     });
     app.get("/api/entity-versions/:entityType/:entityId", (request, response) => {
@@ -1917,6 +2110,9 @@ export function createRuntime(options) {
         data(response, ai.resumeAutoRun(request.params.workId));
     });
     app.get("/api/tasks/:taskId/detail", (request, response) => data(response, redactTaskCharacterNames(store.getTaskDetail(request.params.taskId), requestPermissions(request))));
+    app.get("/api/tasks/:taskId/character-extraction/preview", (request, response) => {
+        data(response, ai.getCharacterExtractionPreview(request.params.taskId));
+    });
     app.get("/api/tasks/:taskId/result", (request, response) => {
         const task = store.getTaskResultPayload(request.params.taskId);
         const permissions = requestPermissions(request);
@@ -1958,6 +2154,14 @@ export function createRuntime(options) {
         data(response, redactTaskCharacterNames(ai.rerunTask(request.params.taskId, input.modelId), requestPermissions(request)), 201);
     });
     app.post("/api/tasks/:taskId/cancel", (request, response) => data(response, redactTaskCharacterNames(ai.cancelTask(request.params.taskId), requestPermissions(request))));
+    app.post("/api/tasks/:taskId/character-extraction/apply", (request, response) => {
+        const input = parse(characterExtractionApplySchema, request.body);
+        const applied = ai.applyCharacterExtractionPreview(request.params.taskId, input.previewToken, input.selections);
+        const characterIds = Array.isArray(applied.characterIds) ? applied.characterIds.filter((value) => typeof value === "string") : [];
+        for (const characterId of characterIds)
+            publishEntityChange(String(store.getTask(request.params.taskId).workId), "character", characterId);
+        data(response, applied);
+    });
     app.post("/api/tasks/:taskId/relationship-changes/apply", (request, response) => {
         parse(z.object({}).strict(), request.body ?? {});
         const applied = ai.applyRelationshipChangePreview(request.params.taskId);
@@ -1992,6 +2196,17 @@ export function createRuntime(options) {
     app.patch("/api/platform/ui-settings", (request, response) => {
         data(response, store.updatePlatformUiSettings(parse(platformUiSettingsSchema, request.body)));
     });
+    app.get("/api/platform/backups/encryption", (_request, response) => {
+        data(response, backups.getEncryptionState());
+    });
+    app.post("/api/platform/backups/encryption", (request, response) => {
+        const input = parse(s3BackupEncryptionSchema, request.body);
+        data(response, backups.setEncryptionEnabled(input.enabled));
+    });
+    app.post("/api/platform/backups/encryption/confirm", (request, response) => {
+        const input = parse(s3BackupEncryptionConfirmationSchema, request.body);
+        data(response, backups.confirmEncryptionEnabled(input.confirmationToken));
+    });
     app.get("/api/platform/backups/targets", (_request, response) => data(response, backups.listTargets()));
     app.post("/api/platform/backups/targets", (request, response) => {
         data(response, backups.createTarget(parse(s3BackupTargetBaseSchema, request.body)), 201);
@@ -2084,10 +2299,26 @@ export function createRuntime(options) {
         const permissions = requestPermissions(request, String(conversation.workId));
         data(response, redactAiConversation(conversation, permissions));
     });
+    app.get("/api/ai-conversations/:conversationId/export", (request, response) => {
+        const conversation = store.getAiConversation(request.params.conversationId);
+        const permissions = requestPermissions(request, String(conversation.workId));
+        const readableConversation = redactAiConversation(conversation, permissions);
+        response.type("text/markdown; charset=utf-8");
+        response.setHeader("Content-Disposition", aiConversationExportContentDisposition(readableConversation));
+        response.send(exportAiConversationMarkdown(readableConversation));
+    });
     app.post("/api/ai-conversations/:conversationId/fork", (request, response) => {
-        const input = parse(z.object({ messageId: identifier, title: z.string().max(200).optional() }), request.body);
-        const forked = store.forkAiConversation(request.params.conversationId, input.messageId, input.title);
-        const permissions = requestPermissions(request, String(forked.workId));
+        const input = parse(z.object({
+            messageId: identifier,
+            title: z.string().max(200).optional(),
+            requestId: identifier.optional()
+        }).strict(), request.body);
+        const sourceConversation = store.getAiConversationSummary(request.params.conversationId);
+        const permissions = requestPermissions(request, String(sourceConversation.workId));
+        if (sourceConversation.roleplayCharacter && !canReadWorkModule(permissions, "characters")) {
+            throw new AppError(403, "WORK_MODULE_READ_DENIED", "你没有读取“角色”模块的权限");
+        }
+        const forked = store.forkAiConversation(request.params.conversationId, input.messageId, input.title, input.requestId);
         data(response, redactAiConversation(forked, permissions), 201);
     });
     app.patch("/api/ai-conversations/:conversationId/task-type", (request, response) => {
@@ -2119,6 +2350,9 @@ export function createRuntime(options) {
                 outputTokens: z.number().int().min(0).max(10_000_000).optional(),
                 cacheHitPercent: z.number().min(0).max(100).optional(),
                 processDurationMs: z.number().int().min(0).max(86_400_000).optional(),
+                interrupted: z.boolean().optional(),
+                interruptionCode: z.string().max(100).optional(),
+                interruptionMessage: z.string().max(500).optional(),
                 toolCalls: z.array(aiToolCallResultSchema).max(12).optional(),
                 processSteps: z.array(aiProcessStepSchema).max(50).optional()
             }).optional()
@@ -2179,13 +2413,19 @@ export function createRuntime(options) {
         ai.deleteProvider(request.params.providerId);
         noContent(response);
     });
-    app.post("/api/providers/:providerId/test", async (request, response) => data(response, await ai.testProvider(request.params.providerId)));
+    app.post("/api/providers/:providerId/test", async (request, response) => {
+        parse(z.object({}).strict(), request.body ?? {});
+        data(response, await ai.testProvider(request.params.providerId));
+    });
     app.get("/api/providers/:providerId/models", (request, response) => {
         const pagination = parsePagination(request.query);
         data(response, pagination ? ai.listModelsPage(request.params.providerId, pagination) : ai.listModels(request.params.providerId));
     });
     app.post("/api/providers/:providerId/models", (request, response) => data(response, ai.createModel(request.params.providerId, parse(modelSchema, request.body)), 201));
-    app.post("/api/models/:modelId/test", async (request, response) => data(response, await ai.testModel(request.params.modelId)));
+    app.post("/api/models/:modelId/test", async (request, response) => {
+        parse(z.object({}).strict(), request.body ?? {});
+        data(response, await ai.testModel(request.params.modelId));
+    });
     app.get("/api/models/:modelId", (request, response) => data(response, ai.getModel(request.params.modelId)));
     app.patch("/api/models/:modelId", (request, response) => data(response, ai.updateModel(request.params.modelId, parse(modelSchema.partial(), request.body))));
     app.delete("/api/models/:modelId", (request, response) => {
@@ -2246,44 +2486,161 @@ export function createRuntime(options) {
             conversationId: identifier.optional(),
             currentMessageId: identifier.optional()
         }), request.body);
+        const providedIdempotencyKey = request.get("Idempotency-Key");
+        const idempotencyKey = providedIdempotencyKey
+            ? parse(idempotencyKeySchema, providedIdempotencyKey)
+            : randomUUID();
+        const actorScope = request.authUser ? `user:${request.authUser.userId}` : "auth-disabled";
+        const requestHash = store.hashContent(stableJson({ workId: request.params.workId, ...input }));
         const citations = input.citations ?? [];
         for (const citation of citations) {
             if (store.getChapter(citation.chapterId).workId !== request.params.workId)
                 throw new AppError(400, "CITATION_WORK_MISMATCH", "引用章节不属于当前作品");
         }
+        const resolvedInstruction = instructionWithCitations(input.instruction, citations);
+        const existingRequest = store.findAiConversationStreamRequest(actorScope, request.params.workId, idempotencyKey);
+        if (existingRequest && input.conversationId && existingRequest.conversationId !== input.conversationId) {
+            throw new AppError(409, "IDEMPOTENCY_KEY_REUSED", "该请求标识已用于另一项 AI 对话请求");
+        }
+        const conversation = existingRequest
+            ? store.getAiConversationSummary(existingRequest.conversationId)
+            : input.conversationId
+                ? store.getAiConversationSummary(input.conversationId)
+                : store.createAiConversation(request.params.workId);
+        if (String(conversation.workId) !== request.params.workId) {
+            throw new AppError(400, "CONVERSATION_WORK_MISMATCH", "AI 对话不属于当前作品");
+        }
+        const conversationId = String(conversation.id);
+        const permissions = requestPermissions(request, request.params.workId);
         const controller = new AbortController();
         response.on("close", () => {
             if (!response.writableEnded)
                 controller.abort(new Error("浏览器已中断流式请求"));
         });
-        response.status(200);
-        response.setHeader("Content-Type", "text/event-stream; charset=utf-8");
-        response.setHeader("Cache-Control", "no-cache, no-transform");
-        response.setHeader("Connection", "keep-alive");
-        response.setHeader("X-Accel-Buffering", "no");
-        response.flushHeaders();
+        let streamRequestId = null;
+        let streamRequestFinished = false;
+        let lastStreamLeaseTouchAt = Date.now();
+        const startStream = () => {
+            if (response.headersSent)
+                return;
+            response.status(200);
+            response.setHeader("Content-Type", "text/event-stream; charset=utf-8");
+            response.setHeader("Cache-Control", "no-cache, no-transform");
+            response.setHeader("Connection", "keep-alive");
+            response.setHeader("X-Accel-Buffering", "no");
+            response.flushHeaders();
+        };
         const sendEvent = (event, payload) => {
+            if (streamRequestId && Date.now() - lastStreamLeaseTouchAt >= 30_000) {
+                store.touchAiConversationStreamRequest(streamRequestId);
+                lastStreamLeaseTouchAt = Date.now();
+            }
             if (!response.writableEnded && !response.destroyed)
                 response.write(`event: ${event}\ndata: ${JSON.stringify(payload)}\n\n`);
         };
-        sendEvent("ready", { streaming: true });
         try {
-            const conversation = input.conversationId
-                ? store.getAiConversationSummary(input.conversationId)
-                : store.createAiConversation(request.params.workId);
-            if (String(conversation.workId) !== request.params.workId) {
-                throw new AppError(400, "CONVERSATION_WORK_MISMATCH", "AI 对话不属于当前作品");
+            if (!existingRequest) {
+                store.assertAiConversationStreamAvailable(conversationId);
+                const inspection = ai.inspectConversationContext({
+                    conversationId,
+                    workId: request.params.workId,
+                    modelId: input.modelId,
+                    scope: input.scope,
+                    instruction: resolvedInstruction,
+                    excludeConversationMessageId: input.currentMessageId
+                });
+                if (inspection.action === "warn") {
+                    const prepared = await ai.prepareConversationContext({
+                        conversationId,
+                        workId: request.params.workId,
+                        modelId: input.modelId,
+                        scope: input.scope,
+                        instruction: resolvedInstruction,
+                        excludeConversationMessageId: input.currentMessageId
+                    });
+                    startStream();
+                    sendEvent("ready", { streaming: true, idempotencyKey });
+                    sendEvent("context", {
+                        ...prepared,
+                        conversation: redactAiConversation({
+                            ...store.getAiConversationSummary(conversationId),
+                            contextWarningPending: true
+                        }, permissions)
+                    });
+                    return;
+                }
             }
-            const conversationId = String(conversation.id);
-            const permissions = requestPermissions(request, request.params.workId);
+            const resolvedScope = input.currentMessageId
+                ? input.scope
+                : ai.resolveInstructionMentions({
+                    workId: request.params.workId,
+                    taskType: "chat",
+                    instruction: resolvedInstruction,
+                    scope: input.scope,
+                    conversationId
+                });
+            const mentionCharacterIds = [...new Set([
+                    ...(resolvedScope.characterIds ?? []),
+                    ...(resolvedScope.mentionCharacterIds ?? [])
+                ])];
+            const begun = store.beginAiConversationStreamRequest({
+                workId: request.params.workId,
+                conversationId,
+                actorScope,
+                idempotencyKey,
+                requestHash,
+                userMessage: {
+                    content: input.instruction,
+                    citations,
+                    ...(input.currentMessageId ? { existingMessageId: input.currentMessageId } : {}),
+                    ...(mentionCharacterIds.length ? { metadata: { mentionCharacterIds } } : {})
+                }
+            });
+            streamRequestId = begun.request.id;
+            startStream();
+            sendEvent("ready", { streaming: begun.disposition === "started", idempotencyKey });
+            if (begun.disposition !== "started") {
+                streamRequestFinished = true;
+                if (begun.userMessage) {
+                    sendEvent("user_message", { message: redactAiConversationMessage(begun.userMessage, permissions), replayed: true });
+                }
+                if (begun.request.status === "completed" && begun.assistantMessage) {
+                    const content = String(begun.assistantMessage.content ?? "");
+                    if (content)
+                        sendEvent("delta", { delta: content, replayed: true });
+                    sendEvent("complete", {
+                        replayed: true,
+                        conversationId,
+                        conversationTitle: store.getAiConversationSummary(conversationId).title,
+                        messageId: begun.assistantMessage.id,
+                        messageCreatedAt: begun.assistantMessage.createdAt
+                    });
+                }
+                else {
+                    sendEvent("request_status", {
+                        code: begun.request.status === "in_progress"
+                            ? "AI_IDEMPOTENT_REQUEST_IN_PROGRESS"
+                            : "AI_IDEMPOTENT_REQUEST_TERMINAL",
+                        message: begun.request.status === "in_progress"
+                            ? "相同请求正在处理中，请等待当前响应结束"
+                            : "相同请求已经结束，不会再次调用 AI",
+                        status: begun.request.status,
+                        terminalReason: begun.request.terminalReason
+                    });
+                }
+                return;
+            }
+            const currentMessageId = String(begun.userMessage?.id ?? input.currentMessageId ?? "");
+            if (begun.userMessage)
+                sendEvent("user_message", { message: redactAiConversationMessage(begun.userMessage, permissions) });
             const prepared = await ai.prepareConversationContext({
                 conversationId,
                 workId: request.params.workId,
                 modelId: input.modelId,
                 scope: input.scope,
-                instruction: instructionWithCitations(input.instruction, citations),
-                excludeConversationMessageId: input.currentMessageId
-            });
+                instruction: resolvedInstruction,
+                excludeConversationMessageId: currentMessageId
+            }, { skipWarning: true });
             sendEvent("context", {
                 ...prepared,
                 conversation: redactAiConversation({
@@ -2291,21 +2648,10 @@ export function createRuntime(options) {
                     contextWarningPending: prepared.action === "warn"
                 }, permissions)
             });
-            if (prepared.action === "warn")
-                return;
-            const userMessage = input.currentMessageId
-                ? null
-                : store.addAiConversationMessage(conversationId, {
-                    role: "user",
-                    content: input.instruction,
-                    citations
-                });
-            const currentMessageId = input.currentMessageId ?? String(userMessage?.id ?? "");
-            if (userMessage)
-                sendEvent("user_message", { message: redactAiConversationMessage(userMessage, permissions) });
             const suggestion = await ai.createStreamingChat({
                 workId: request.params.workId,
-                instruction: instructionWithCitations(input.instruction, citations),
+                instruction: resolvedInstruction,
+                // 仍由生成路径基于原始范围持久化累计注入，保证预解析不会吞掉本轮自动命中。
                 scope: input.scope,
                 signal: controller.signal,
                 onToolCall: (toolCall, round) => sendEvent("tool_call", { ...toolCall, round }),
@@ -2317,6 +2663,13 @@ export function createRuntime(options) {
                 ...(input.modelId ? { modelId: input.modelId } : {}),
                 ...(input.parameters ? { parameters: input.parameters } : {})
             }, (delta) => sendEvent("delta", { delta }));
+            const assistantMessageId = typeof suggestion.conversationMessage === "object" && suggestion.conversationMessage !== null
+                ? String(suggestion.conversationMessage.id ?? "")
+                : "";
+            if (!stopping) {
+                store.finishAiConversationStreamRequest(streamRequestId, "completed", "completed", assistantMessageId || undefined);
+            }
+            streamRequestFinished = true;
             sendEvent("complete", {
                 suggestionId: suggestion.id,
                 callId: suggestion.callId,
@@ -2339,6 +2692,18 @@ export function createRuntime(options) {
             });
         }
         catch (error) {
+            if (streamRequestId && !streamRequestFinished && !stopping) {
+                const code = error instanceof AppError ? error.code : "AI_STREAM_FAILED";
+                const status = code === "AI_STREAM_IDLE_TIMEOUT"
+                    ? "timed_out"
+                    : code === "AI_STREAM_REQUEST_CANCELLED" || controller.signal.aborted
+                        ? "cancelled"
+                        : "failed";
+                store.finishAiConversationStreamRequest(streamRequestId, status, code);
+                streamRequestFinished = true;
+            }
+            if (!response.headersSent)
+                throw error;
             if (!controller.signal.aborted) {
                 logger.error("ai.stream.failed", {
                     workId: request.params.workId,
@@ -2348,7 +2713,13 @@ export function createRuntime(options) {
             }
         }
         finally {
-            if (!response.writableEnded && !response.destroyed)
+            if (streamRequestId && !streamRequestFinished && !stopping) {
+                store.finishAiConversationStreamRequest(streamRequestId, "cancelled", "stream_closed");
+                streamRequestFinished = true;
+            }
+            if (stopping)
+                streamRequestFinished = true;
+            if (response.headersSent && !response.writableEnded && !response.destroyed)
                 response.end();
         }
     });
@@ -2389,7 +2760,7 @@ export function createRuntime(options) {
     });
     app.get("/api/works/:workId/search", async (request, response) => {
         const query = parse(z.object({
-            q: z.string().trim().min(1).max(500),
+            q: z.string().trim().min(1).max(MAXIMUM_WORK_SEARCH_QUERY_LENGTH),
             type: z.enum(HYBRID_SEARCH_TYPES).optional(),
             limit: z.coerce.number().int().min(1).max(100).optional()
         }).strict(), request.query);
@@ -2400,8 +2771,13 @@ export function createRuntime(options) {
             includeAgentHistory: permissions["ai-chat"] !== "none"
         }));
     });
+    app.head("/api/works/:workId/export", (request, response) => {
+        parse(z.enum(["epub"]), request.query.format ?? "epub");
+        store.getWork(request.params.workId);
+        noContent(response);
+    });
     app.get("/api/works/:workId/export", async (request, response) => {
-        const format = parse(z.enum(["json", "txt", "markdown", "docx"]), request.query.format ?? "json");
+        const format = parse(z.enum(["json", "txt", "markdown", "docx", "epub"]), request.query.format ?? "json");
         if (format === "json") {
             response.setHeader("Content-Disposition", `attachment; filename=novel-${request.params.workId}.json`);
             data(response, store.exportWork(request.params.workId));
@@ -2427,6 +2803,11 @@ export function createRuntime(options) {
             response.send(await store.exportDocx(request.params.workId));
             return;
         }
+        if (format === "epub") {
+            const exported = await store.exportEpub(request.params.workId);
+            await sendEpub(response, exported.archive, exported.title, `novel-${request.params.workId}`);
+            return;
+        }
         response.type("text/plain");
         response.setHeader("Content-Disposition", `attachment; filename=novel-${request.params.workId}.txt`);
         response.send(store.exportText(request.params.workId, format));
@@ -2513,6 +2894,13 @@ export function createRuntime(options) {
         }
         if (error instanceof multer.MulterError) {
             logger.warn("http.request.upload_rejected", { ...commonFields, uploadCode: error.code });
+            if (error.code === "LIMIT_FILE_SIZE") {
+                const sizeError = uploadSizeError(request.path, uploadLimits);
+                if (sizeError) {
+                    response.status(413).json({ error: sizeError });
+                    return;
+                }
+            }
             response.status(400).json({ error: { code: "UPLOAD_ERROR", message: error.message } });
             return;
         }
@@ -2532,7 +2920,7 @@ export function createRuntime(options) {
                 logger.error("http.request.application_error", logFields);
             else
                 logger.warn("http.request.application_error", logFields);
-            if (error.code === "LOGIN_LOCKED" && error.details && typeof error.details === "object") {
+            if ((error.code === "LOGIN_LOCKED" || error.status === 429) && error.details && typeof error.details === "object") {
                 const retryAfterSeconds = Number(error.details.retryAfterSeconds);
                 if (Number.isInteger(retryAfterSeconds) && retryAfterSeconds > 0) {
                     response.setHeader("Retry-After", String(retryAfterSeconds));
@@ -2551,14 +2939,44 @@ export function createRuntime(options) {
     });
     backups.startScheduler();
     logger.info("runtime.ready", { serveUi: options.serveUi ?? true });
-    return { app, database, store, ai, backups, auth, attachmentStorage, cleanupAttachments, close: () => {
+    let closePromise = null;
+    let stopping = false;
+    let closed = false;
+    const close = () => {
+        if (closed)
+            return Promise.resolve();
+        if (closePromise)
+            return closePromise;
+        if (!stopping) {
+            stopping = true;
             logger.info("runtime.closing");
             backups.dispose();
             ai.dispose();
-            database.close();
-            if (temporaryAttachmentRoot)
-                rmSync(temporaryAttachmentRoot, { recursive: true, force: true });
-            logger.info("runtime.closed");
-        } };
+            const cancelledStreamRequests = store.cancelActiveAiConversationStreamRequests();
+            if (cancelledStreamRequests > 0)
+                logger.info("ai.stream.requests_cancelled", { count: cancelledStreamRequests });
+        }
+        closePromise = (async () => {
+            try {
+                await backups.waitForIdle(RUNTIME_BACKUP_IDLE_TIMEOUT_MS);
+                collaborationPresence.close();
+                database.close();
+                if (temporaryAttachmentRoot)
+                    rmSync(temporaryAttachmentRoot, { recursive: true, force: true });
+                closed = true;
+                logger.info("runtime.closed");
+            }
+            catch (error) {
+                logger.error("runtime.close_failed", { error: sanitizeError(error) });
+                throw error;
+            }
+            finally {
+                if (!closed)
+                    closePromise = null;
+            }
+        })();
+        return closePromise;
+    };
+    return { app, database, store, ai, backups, auth, attachmentStorage, cleanupAttachments, close };
 }
 //# sourceMappingURL=app.js.map