@waterwx/dsh-novel-forge 2.1.4 → 2.2.0

package/lib/index.js

@@ -3975,6 +3975,24 @@ function isRetryableLlmError(error) {
 	return RETRYABLE_PATTERNS.some((re) => re.test(message));
 }
 /**
+* 判断一次失败是「取消」（作者关页面 / 主动中断）还是模型故障。
+*
+* 取消有两种现场：适配器给出 `aborted` 收尾块，或抛出 `AbortError` / 本插件自己的
+* 断开错误。它必须和真实失败分开记账——否则面板「本次运行失败 N 次」会把作者的正常
+* 中断统计成模型不稳定，进而误导备用模型档位判断（与规则 1「用户取消不重试」同一口径）。
+*
+* @param input 收尾块 kind（字符串）或捕获到的异常。
+* @returns 属于取消时为 true。
+*/
+function isCancellation(input) {
+	if (typeof input === "string") return input === "aborted";
+	if (input instanceof Error) {
+		if (input.name === "AbortError") return true;
+		return /已取消|用户取消|客户端已断开|\baborted\b/i.test(input.message);
+	}
+	return false;
+}
+/**
 * 判断是否应当切换到备用模型。
 *
 * @param fallbackModel 配置的备用模型（空串 = 未配置）。
@@ -4205,6 +4223,16 @@ function applyModelCapability(base, model, options = {}) {
 //#endregion
 //#region src/stream-fallback.ts
 /**
+* 统一的取消错误：与 `DOMException('AbortError')` 同名，便于上层用 `name` 判定。
+* @param reason 取消原因（signal.reason，或适配器抛出的原始异常）。
+*/
+function abortError(reason) {
+	if (reason instanceof Error) return reason;
+	const err = new Error(typeof reason === "string" ? reason : "客户端已断开连接");
+	err.name = "AbortError";
+	return err;
+}
+/**
 * 执行流式生成，主模型失败且「一个字都没产出」时换备用模型重试一次。
 *
 * 第三泛型（`TNext`）取 `unknown` 而非 `void`：三处调用方的外层生成器都声明为
@@ -4215,11 +4243,13 @@ function applyModelCapability(base, model, options = {}) {
 * @throws 两次都失败时抛最后一次的错误；成功但文本过短时抛「结果过短」。
 */
 async function* streamWithFallback(options) {
-	const { ctx, config, request, liveLabel, maxTokensError, minChars } = options;
+	const { ctx, config, request, liveLabel, maxTokensError, minChars, signal } = options;
 	const primaryModel = request.model ?? config.model;
 	let text = "";
 	let lastError;
+	const abortedByCaller = () => signal?.aborted === true;
 	for (let attempt = 0; attempt < 2; attempt++) {
+		if (abortedByCaller()) throw abortError(signal?.reason);
 		const model = attempt === 0 ? primaryModel : (config.fallbackModel ?? "").trim();
 		if (model === "") break;
 		const live = beginLiveCall({
@@ -4231,29 +4261,44 @@ async function* streamWithFallback(options) {
 		const assembler = new BlockAssembler();
 		let produced = 0;
 		const converged = applyModelCapability(request, model, { maxTokensFor: (m) => fullTextBudget(config, m, primaryModel) });
-		for await (const chunk of ctx.llm.stream(converged)) {
-			assembler.push(chunk);
-			if (chunk.type === "text-delta") {
-				produced += chunk.text.length;
-				markFirstToken(live);
-				yield {
-					frame: "delta",
-					text: chunk.text
-				};
+		try {
+			for await (const chunk of ctx.llm.stream(signal === void 0 ? converged : {
+				...converged,
+				signal
+			})) {
+				assembler.push(chunk);
+				if (chunk.type === "text-delta") {
+					produced += chunk.text.length;
+					markFirstToken(live);
+					yield {
+						frame: "delta",
+						text: chunk.text
+					};
+				}
 			}
+		} catch (error) {
+			const aborted = isCancellation(error) || abortedByCaller();
+			endLiveCall(live, assembler, {
+				chars: produced,
+				phase: aborted ? "cancelled" : "failed",
+				error: error instanceof Error ? error.message : String(error)
+			});
+			if (aborted) throw abortError(signal?.reason ?? error);
+			throw error;
 		}
 		const finish = assembler.finish;
 		lastError = void 0;
-		if (finish.kind === "error" || finish.kind === "aborted") lastError = /* @__PURE__ */ new Error(`${liveLabel}失败（${finish.kind}）: ${finish.failure.message}`);
+		if (finish.kind === "error" || finish.kind === "aborted") lastError = /* @__PURE__ */ new Error(`${isCancellation(finish.kind) ? "已取消" : `${liveLabel}失败`}（${finish.kind}）: ${finish.failure.message}`);
 		else if (finish.kind === "max-tokens") lastError = new Error(maxTokensError);
 		text = assembler.blocks().filter((block) => block.type === "text").map((block) => block.text).join("\n").trim();
+		const cancelled = lastError !== void 0 && isCancellation(lastError);
 		endLiveCall(live, assembler, lastError === void 0 ? {
 			chars: text.length,
 			preview: text.slice(0, 320),
 			phase: text === "" ? "failed" : "completed"
 		} : {
 			chars: text.length,
-			phase: "failed",
+			phase: cancelled ? "cancelled" : "failed",
 			error: lastError.message
 		});
 		if (lastError === void 0) break;
@@ -5368,6 +5413,8 @@ const NOVEL_API = {
 	chapterCheck: "/api/dsh-novel-forge/chapter/check",
 	/** 保存手动编辑的正文（自动备份 .bak）。 */
 	chapterSave: "/api/dsh-novel-forge/chapter/save",
+	/** 补写本章计划的固定六项（目标 / 必达 / 保持 / 硬事实 / 结尾钩子 / 剧情要点）。 */
+	chapterPlan: "/api/dsh-novel-forge/chapter/plan",
 	assistant: "/api/dsh-novel-forge/assistant",
 	assistantHistory: "/api/dsh-novel-forge/assistant-history",
 	/** 清空助手对话记录。 */
@@ -5647,26 +5694,44 @@ function saveProject(outputDir, project) {
 	writeFileSync(tmp, data, "utf8");
 	renameSync(tmp, target);
 }
+/** `mergeVolatileFromDisk` 会覆盖的易变字段的全集（也是 `keep` 的合法取值域）。 */
+const VOLATILE_FIELDS = [
+	"bible",
+	"roles",
+	"plotlines",
+	"roleStatus",
+	"blurb",
+	"coverPath",
+	"facts",
+	"assets",
+	"world",
+	"volumes"
+];
 /**
 * 并发保护：长任务（章节计划生成/正文生成）在内存中持有旧快照，
 * 期间其他请求可能修改了「易变字段」（道藏/角色库/剧情线/人物志存档/简介/封面）。
 * 保存前用磁盘最新版本合并这些字段，避免旧快照覆盖新修改（曾导致角色卡丢失）。
-* 注意：调用方若自己修改了这些字段，不要使用本函数。
+*
+* ⚠️ `keep` 不是可选的礼貌参数，而是本函数唯一的正确用法保证：
+* 调用方只要自己写过这些字段中的任何一个（哪怕只是 `project.plotlines[0].chapters.push(no)`），
+* **必须**把它列进 `keep`，否则本函数会用磁盘旧值把本轮成果整块覆盖掉。
+* 历史上正是漏了 `facts` / `plotlines`，导致作者复盘回灌的事实与剧情线关联被静默丢弃。
+*
+* @param outputDir - 项目目录。
+* @param project - 待保存的内存项目（原地修改）。
+* @param keep - 本次调用方已自行修改过的易变字段，这些字段不从磁盘覆盖。
 */
-function mergeVolatileFromDisk(outputDir, project) {
+function mergeVolatileFromDisk(outputDir, project, keep = []) {
 	try {
 		const disk = loadProject(outputDir);
 		if (disk === void 0) return;
-		project.bible = disk.bible;
-		project.roles = disk.roles;
-		project.plotlines = disk.plotlines;
-		project.roleStatus = disk.roleStatus;
-		project.blurb = disk.blurb;
-		project.coverPath = disk.coverPath;
-		project.facts = disk.facts;
-		project.assets = disk.assets;
-		project.world = disk.world;
-		project.volumes = disk.volumes;
+		const skip = new Set(keep);
+		const target = project;
+		const source = disk;
+		for (const field of VOLATILE_FIELDS) {
+			if (skip.has(field)) continue;
+			target[field] = source[field];
+		}
 	} catch {}
 }
 /**
@@ -6051,6 +6116,22 @@ function readChapterFile(outputDir, chapter) {
 	if (!existsSync(path)) return void 0;
 	return readFileSync(path, "utf8");
 }
+/**
+* 章节正文的**写盘时间**（文件 mtime，ISO）—— 面板「今日产出 / 日环比」的唯一本地事实来源。
+*
+* 为什么不把它写进 novel-project.json：它是**派生数据**。落盘后一旦文件被外部替换、
+* 从备份回拷、或手工改名，存档里的时间戳就开始撒谎；mtime 永远跟着真实文件走。
+* 代价是每次 /status 要对每个有正文的章 stat 一次 —— 本地磁盘上是微秒级，
+* 相对它换来的"今天的产出是真的"，这个代价可以接受。
+*/
+function chapterWrittenAt(outputDir, chapter) {
+	if (chapter.file === void 0) return void 0;
+	try {
+		return statSync(join(outputDir, chapter.file)).mtime.toISOString();
+	} catch {
+		return;
+	}
+}
 /** Create a fresh project from an outline. */
 function createProject(outline, outlinePath) {
 	const now = (/* @__PURE__ */ new Date()).toISOString();
@@ -6105,15 +6186,26 @@ async function complete(ctx, config, options) {
 			...converged.reasoningEffort === void 0 ? {} : { reasoningEffort: ReasoningEffortId(converged.reasoningEffort) }
 		};
 		const assembler = new BlockAssembler();
-		for await (const chunk of ctx.llm.stream(request)) {
-			if (chunk.type === "text-delta") markFirstToken(live);
-			assembler.push(chunk);
+		try {
+			for await (const chunk of ctx.llm.stream(options.signal === void 0 ? request : {
+				...request,
+				signal: options.signal
+			})) {
+				if (chunk.type === "text-delta") markFirstToken(live);
+				assembler.push(chunk);
+			}
+		} catch (error) {
+			endLiveCall(live, assembler, {
+				phase: isCancellation(error) ? "cancelled" : "failed",
+				error: error.message
+			});
+			throw error;
 		}
 		const finish = assembler.finish;
 		if (finish.kind === "error" || finish.kind === "aborted") {
-			const message = `LLM 调用失败（${finish.kind}）: ${finish.failure.message}`;
+			const message = `${isCancellation(finish.kind) ? "调用已取消" : "LLM 调用失败"}（${finish.kind}）: ${finish.failure.message}`;
 			endLiveCall(live, assembler, {
-				phase: "failed",
+				phase: isCancellation(finish.kind) ? "cancelled" : "failed",
 				error: message
 			});
 			throw new Error(message);
@@ -8075,7 +8167,7 @@ function rewriteSystemPrompt(project, targetChars, beforeChapter) {
 * untouched (local revision). Without `target`, the whole chapter is
 * rewritten. Yields delta text; persists when done.
 */
-async function* rewriteChapterStream(ctx, config, project, outputDir, chapterNo, instructions, target) {
+async function* rewriteChapterStream(ctx, config, project, outputDir, chapterNo, instructions, target, signal) {
 	const chapter = project.chapters.find((c) => c.no === chapterNo);
 	if (chapter === void 0) throw new NovelActionError("contract", `章节 ${chapterNo} 不在计划中`);
 	const body = readChapterFile(outputDir, chapter);
@@ -8160,6 +8252,7 @@ async function* rewriteChapterStream(ctx, config, project, outputDir, chapterNo,
 		ctx,
 		config,
 		request,
+		signal,
 		liveLabel: `修订 · 第${chapterNo}章`,
 		liveUser: messages[0]?.content !== void 0 ? JSON.stringify(messages[0].content).slice(0, 2e3) : void 0,
 		maxTokensError: "修订输出达到 maxTokens 上限，请增大配置后重试",
@@ -8205,7 +8298,7 @@ function polishSystemPrompt(project) {
 }
 /** Stream a chapter polish (de-AI-ify). Draft-mode: the polished body lands
 *  in `chapter.pendingDraft` and is only applied on draft/apply. */
-async function* polishChapterStream(ctx, config, project, outputDir, chapterNo) {
+async function* polishChapterStream(ctx, config, project, outputDir, chapterNo, signal) {
 	const chapter = project.chapters.find((c) => c.no === chapterNo);
 	if (chapter === void 0) throw new NovelActionError("contract", `章节 ${chapterNo} 不在计划中`);
 	const body = readChapterFile(outputDir, chapter);
@@ -8234,6 +8327,7 @@ async function* polishChapterStream(ctx, config, project, outputDir, chapterNo)
 		ctx,
 		config,
 		request,
+		signal,
 		liveLabel: `去 AI 味润色 · 第${chapterNo}章`,
 		liveUser: body.slice(0, 2e3),
 		maxTokensError: "润色输出达到 maxTokens 上限，请增大配置后重试",
@@ -8254,7 +8348,7 @@ function countHanzi(text) {
 	return m === null ? 0 : m.length;
 }
 /** Generate one chapter (streaming). Yields progress frames; persists when done. */
-async function* generateChapterStream(ctx, config, project, outputDir, chapterNo) {
+async function* generateChapterStream(ctx, config, project, outputDir, chapterNo, signal) {
 	const chapter = project.chapters.find((c) => c.no === chapterNo);
 	if (chapter === void 0) throw new NovelActionError("contract", `章节 ${chapterNo} 不在计划中`);
 	let continuity = "";
@@ -8341,6 +8435,7 @@ async function* generateChapterStream(ctx, config, project, outputDir, chapterNo
 		ctx,
 		config,
 		request,
+		signal,
 		liveLabel: `正文生成 · 第${chapter.no}章`,
 		liveUser: user,
 		maxTokensError: "达到 maxTokens 上限，正文可能不完整，请增大 maxTokens 后重试",
@@ -8410,7 +8505,7 @@ async function summarizeChapter(ctx, config, project, outputDir, chapterNo) {
 * 反向推大纲：从已写章节正文反推出全书总纲（分卷 + 章节要点 + 主线/人物弧线/伏笔清单）。
 * 两阶段：分批提取章节事件摘要 → 汇总生成大纲。不修改章节/设定，只返回大纲文本。
 */
-async function reverseOutlineFromChapters(ctx, config, project, outputDir, onProgress) {
+async function reverseOutlineFromChapters(ctx, config, project, outputDir, onProgress, signal) {
 	const written = project.chapters.filter((c) => c.status !== "pending" && c.status !== "generating" && c.status !== "error").filter((c) => readChapterFile(outputDir, c) !== void 0).sort((a, b) => a.no - b.no);
 	if (written.length === 0) throw new NovelActionError("contract", "本书还没有已写章节，无法反推大纲");
 	const BATCH = 10;
@@ -8425,7 +8520,8 @@ async function reverseOutlineFromChapters(ctx, config, project, outputDir, onPro
 			}).join("\n\n---\n\n"),
 			temperature: .2,
 			maxTokens: Math.max(config.maxTokens, 3e3),
-			reasoning: config.analysisReasoning ?? "low"
+			reasoning: config.analysisReasoning ?? "low",
+			signal
 		});
 		notes.push(note.trim());
 		onProgress?.(Math.min(i + BATCH, total), total, "章节摘要");
@@ -8443,7 +8539,8 @@ async function reverseOutlineFromChapters(ctx, config, project, outputDir, onPro
 		user: notes.join("\n\n"),
 		temperature: .4,
 		maxTokens: Math.max(config.maxTokens, 6e3),
-		reasoning: config.analysisReasoning ?? "low"
+		reasoning: config.analysisReasoning ?? "low",
+		signal
 	});
 	onProgress?.(total, total, "完成");
 	return outline.trim();
@@ -8712,12 +8809,19 @@ async function rewriteAdaptationBook(ctx, config, text, mappings, rules, options
 		].filter((s) => s !== "").join("\n\n");
 		let body = "";
 		try {
+			if (options.signal?.aborted === true) return {
+				adaptedText: adaptedParts.join("\n"),
+				rewritten,
+				skipped,
+				hits
+			};
 			body = stripRewriteHeading(await complete(ctx, config, {
 				system,
 				user,
 				temperature: .7,
 				maxTokens: Math.max(config.maxTokens, Math.min(16e3, c.body.length * 3)),
-				reasoning: config.analysisReasoning ?? "low"
+				reasoning: config.analysisReasoning ?? "low",
+				signal: options.signal
 			}));
 			if (body.length < 50) body = "";
 		} catch {
@@ -10532,15 +10636,19 @@ function revisionTodoText(item) {
 /**
 * 选出生产单下一章要处理的章。
 *
-* 三种章：已 `approved` 快进；连败达上限的熔断跳过；其余为下一章。
+* 四种章：已 `approved` 快进；已列入 `pendingManual` 的快进（人工已接管）；
+* 连败达上限的熔断跳过；其余为下一章。
 *
 * @param chapters - 全书章节计划。
 * @param currentNo - 当前章号（含）。
 * @param endNo - 区间终点（含）。
 * @param failedAttempts - 章号 → 已失败次数（来自 `RunState.failedAttempts`）。
+* @param pendingManual - 已列入待人工的章号（来自 `RunState.pendingManual`）。
+*   必须传入，否则重写 N 轮仍不过的章会被反复选中，每轮烧两次 rewrite + 两次 verify。
 */
-function pickNextChapter(chapters, currentNo, endNo, failedAttempts) {
+function pickNextChapter(chapters, currentNo, endNo, failedAttempts, pendingManual = []) {
 	const circuitBroken = [];
+	const manual = new Set(pendingManual);
 	let advanceTo = currentNo - 1;
 	for (let no = currentNo; no <= endNo; no++) {
 		const ch = chapters.find((c) => c.no === no);
@@ -10549,6 +10657,10 @@ function pickNextChapter(chapters, currentNo, endNo, failedAttempts) {
 			advanceTo = no;
 			continue;
 		}
+		if (manual.has(no)) {
+			advanceTo = no;
+			continue;
+		}
 		const attempts = failedAttempts[String(no)] ?? 0;
 		if (attempts >= 3) {
 			circuitBroken.push({
@@ -10768,7 +10880,7 @@ var ProductionRunner = class {
 					this.persist();
 					break;
 				}
-				const picked = pickNextChapter(project.chapters, this.state.currentNo, this.state.endNo, this.state.failedAttempts ?? {});
+				const picked = pickNextChapter(project.chapters, this.state.currentNo, this.state.endNo, this.state.failedAttempts ?? {}, this.state.pendingManual ?? []);
 				if (picked.advanceTo >= this.state.currentNo) this.state.currentNo = picked.advanceTo;
 				for (const skipped of picked.circuitBroken) this.skipFailedChapter(skipped.chapter, skipped.attempts);
 				if (picked.next === void 0) {
@@ -10903,11 +11015,12 @@ var ProductionRunner = class {
 							text
 						});
 					}
-					mergeVolatileFromDisk(outputDir, project);
+					mergeVolatileFromDisk(outputDir, project, ["plotlines", "facts"]);
 					saveProject(outputDir, project);
 				}
 			} catch (e) {
 				console.warn("[dsh-novel-forge] run author review:", e.message);
+				this.log(`第${no}章 作者复盘失败（正文已保留，可稍后补跑复盘）：${e.message}`);
 			}
 		} catch (error) {
 			chapter.status = "error";
@@ -10973,8 +11086,15 @@ var ProductionRunner = class {
 				baseReport: verify
 			});
 		}
-		if (this.state !== null) this.state.pendingManual.push(no);
-		this.log(`第${no}章  2 轮修订仍不过 → 保留草稿待人工`);
+		if (this.state !== null) {
+			if (!this.state.pendingManual.includes(no)) {
+				this.state.pendingManual.push(no);
+				this.state.pendingManual.sort((a, b) => a - b);
+			}
+			this.state.currentNo = no + 1;
+			this.persist();
+		}
+		this.log(`第${no}章  2 轮修订仍不过 → 保留草稿待人工（已跳过，可修正后单独重试该章）`);
 	}
 	applyDraft(project, chapter, draft, report) {
 		const config = this.deps.getConfig();
@@ -11937,7 +12057,7 @@ function historyToMessages(history) {
 	return messages;
 }
 /** One non-streaming LLM chat turn (used inside the tool loop). */
-async function chatOnce(ctx, config, system, history) {
+async function chatOnce(ctx, config, system, history, signal) {
 	const messages = historyToMessages(history);
 	const last = messages[messages.length - 1];
 	if (last?.role === "user" && Array.isArray(last.content)) {
@@ -11972,15 +12092,27 @@ async function chatOnce(ctx, config, system, history) {
 			user: messages.map((m) => JSON.stringify(m.content)).join(" / ").slice(0, 8e3)
 		});
 		const assembler = new BlockAssembler();
-		for await (const chunk of ctx.llm.stream(request)) {
-			if (chunk.type === "text-delta") markFirstToken(live);
-			assembler.push(chunk);
+		try {
+			for await (const chunk of ctx.llm.stream(signal === void 0 ? request : {
+				...request,
+				signal
+			})) {
+				if (chunk.type === "text-delta") markFirstToken(live);
+				assembler.push(chunk);
+			}
+		} catch (error) {
+			endLiveCall(live, assembler, {
+				phase: isCancellation(error) || signal?.aborted === true ? "cancelled" : "failed",
+				error: error instanceof Error ? error.message : String(error)
+			});
+			throw error;
 		}
 		const finish = assembler.finish;
 		if (finish.kind === "error" || finish.kind === "aborted") {
-			const message = `助手调用失败（${finish.kind}）: ${finish.failure.message}`;
+			const cancelled = isCancellation(finish.kind);
+			const message = `${cancelled ? "助手对话已取消" : "助手调用失败"}（${finish.kind}）: ${finish.failure.message}`;
 			endLiveCall(live, assembler, {
-				phase: "failed",
+				phase: cancelled ? "cancelled" : "failed",
 				error: message
 			});
 			throw new Error(message);
@@ -12004,7 +12136,7 @@ async function chatOnce(ctx, config, system, history) {
 	}, runOnce);
 }
 /** Run one user turn. Yields stream frames; persists history. */
-async function* runAssistantTurn(ctx, config, project, outputDir, userMessage) {
+async function* runAssistantTurn(ctx, config, project, outputDir, userMessage, signal) {
 	const history = loadAssistantHistory(outputDir);
 	const stage = computeBookStage(project);
 	const strictStage = isGenericContinue(userMessage);
@@ -12071,7 +12203,8 @@ async function* runAssistantTurn(ctx, config, project, outputDir, userMessage) {
 	};
 	for (;;) {
 		if (iterations++ > 20) break;
-		const reply = await chatOnce(ctx, config, system, history);
+		if (signal?.aborted === true) throw new Error("客户端已断开连接");
+		const reply = await chatOnce(ctx, config, system, history, signal);
 		if (reply.length > 120 && /^[0-9a-fA-F\s]+$/.test(reply.slice(0, 2e3))) {
 			garbleCount++;
 			if (garbleCount >= 2) {
@@ -12805,6 +12938,12 @@ function addGlobalMode(m) {
 //#region src/routes.ts
 /** Cap on JSON request bodies (generous: cover images travel as base64). */
 const MAX_JSON_BODY_BYTES = 64 * 1024 * 1024;
+/** 允许「服务器本地文件」模式导入的扩展名：纯文本小说。不含 docx/pdf 等二进制。 */
+const IMPORTABLE_EXTENSIONS = [
+	".txt",
+	".md",
+	".markdown"
+];
 /** 包内置风格效果图目录（assets/styles，随 npm 包分发）。 */
 /** 解析请求级目标书目录：优先按请求携带的 bookId 查书架，否则回退全局 active 书目录。 */
 function resolveOutputDir(config, bookId) {
@@ -12814,6 +12953,42 @@ function resolveOutputDir(config, bookId) {
 	}
 	return config.outputDir;
 }
+/**
+* 校验一个「客户端自报的目录」是否确实是已登记的书目录。
+*
+* 背景：部分路由（封面读取等）历史上直接采信 `?dir=` 参数拼路径读文件。
+* 本服务只有 loopback 围栏、没有 token，而围栏允许 `Origin` 缺失的请求
+* （非浏览器客户端、curl、恶意扩展都能过），所以形如
+* `GET /cover?dir=C:/Users/x` 会让服务读出该目录下任意 `novel-project.json`
+* 指向的文件并 base64 回吐。
+*
+* 正确做法不是「校验路径合法」（攻击者可以传任意合法路径），而是
+* **只承认自己登记过的目录**：书架里的每本书 + 设置里的默认输出目录。
+* 攻击者能传的值因此被压缩到一个可枚举的集合内。
+*
+* @returns 归一化后的目录；不在白名单内返回 undefined。
+*/
+function resolveRegisteredDir(config, requested) {
+	if (requested === null || requested === "") return config.outputDir;
+	let normalized;
+	try {
+		normalized = resolve(requested).replace(/[\\/]+$/, "");
+	} catch {
+		return;
+	}
+	const store = loadBookshelf();
+	const allowed = [config.outputDir, ...store.books.map((b) => b.outputDir)];
+	for (const dir of allowed) {
+		if (dir === "") continue;
+		let candidate;
+		try {
+			candidate = resolve(dir).replace(/[\\/]+$/, "");
+		} catch {
+			continue;
+		}
+		if (candidate.toLowerCase() === normalized.toLowerCase()) return candidate;
+	}
+}
 /** Loopback-only fence (mirrors the family plugins' pairing routes). */
 function isLoopbackRequest(request) {
 	const address = request.socket.remoteAddress;
@@ -12861,6 +13036,50 @@ async function readJsonBody(req) {
 		return;
 	}
 }
+/**
+* 把「客户端是否还在听」绑成一个 `AbortSignal`。
+*
+* ## 为什么必须有
+*
+* Node 的 `res.write()` 对已销毁的 socket **不抛异常也不返回 false** ——
+* 请求处理器会继续跑完。7 条 NDJSON 路由此前零 `close` 监听，于是：
+* 浏览器关标签页 → `for await (const step of generateChapterStream(...))`
+* 继续跑完整章生成（2-5 分钟，maxTokens 常 20000），审稿、复盘、落盘全部照跑。
+* **「关掉页面」不等于「停止烧 token」**，而且 `chapter.status` 已被写盘为
+* `generating`，只能靠 `/status` 的 10 分钟兜底复位。
+*
+* 宿主 SDK 明确约定「implementations must honor `options.signal`」
+* （`@deepseek-ai/dsh-llm` `LLMAdapter.stream` 文档），所以只要把 signal
+* 一路传到 `ctx.llm.stream` 就能真正掐断。
+*
+* ## 用法
+*
+* ```ts
+* const abort = abortOnClientClose(req, res)
+* try {
+*   for await (const step of generateChapterStream(ctx, config, project, dir, no, abort.signal)) { ... }
+* } catch (err) {
+*   if (isAbortError(err)) return   // 客户端主动断开：静默收尾，不回错误帧
+*   ...
+* }
+* ```
+*
+* @returns controller；`signal` 传给下游，`aborted` 可直接判断。
+*/
+function abortOnClientClose(req, res) {
+	const controller = new AbortController();
+	const onClose = () => {
+		if (!res.writableEnded) controller.abort(/* @__PURE__ */ new Error("客户端已断开连接"));
+	};
+	res.once("close", onClose);
+	req.once("aborted", onClose);
+	return controller;
+}
+/** 判断错误是否为「客户端断开」导致的中止（据此静默收尾而不是回错误帧）。 */
+function isAbortError(err) {
+	if (err instanceof Error && (err.name === "AbortError" || err.message.includes("客户端已断开连接"))) return true;
+	return false;
+}
 /** Default chapter count for planning when the request omits it. */
 const DEFAULT_PLAN_COUNT = 30;
 /**
@@ -12906,15 +13125,39 @@ function makeRoutes(deps) {
 		return true;
 	};
 	/** Load (and sync) the project, or respond 400. */
-	const requireProject = (res) => {
-		const config = getConfig();
-		const project = loadProject(config.outputDir);
+	/**
+	* 取本次请求的目标项目。
+	*
+	* 目录解析与 {@link resolveOutputDir} 同源：按请求携带的 `bookId` 查书架，
+	* 未携带才回退全局 active 书。**此前本函数只看 `getConfig().outputDir`**，
+	* 而约一半路由走它、另一半走 resolveOutputDir，前端每个请求都带 bookId
+	* 却被后端一半静默忽略 —— 多书场景下对非激活书调用会写到激活书目录。
+	*
+	* 顺带修掉写盘副作用：`syncProjectWithDisk` 无条件更新 `updatedAt`，
+	* 使 `saveProject` 的 no-op 检测永不命中，于是每个「读」请求都在重写整个
+	* novel-project.json（长篇项目可达数MB，每 4 秒一次）。这里改成
+	* 同步后按内容比对，仅在真的变化时落盘。
+	*
+	* @param req - 用于解析 `bookId`（GET 查 query，POST 查 body 由调用方保证）。
+	* @param res - 用于回写错误。
+	* @param body - POST 请求体（可能含 bookId）。
+	*/
+	const requireProjectAt = (req, res, body) => {
+		const outputDir = resolveOutputDir(getConfig(), body?.bookId ?? (() => {
+			try {
+				return new URL(req.url ?? "/", "http://localhost").searchParams.get("bookId") ?? void 0;
+			} catch {
+				return;
+			}
+		})() ?? void 0);
+		const project = loadProject(outputDir);
 		if (project === void 0) {
 			writeJson(res, 400, { error: "输出目录中没有项目，请先加载大纲" });
 			return;
 		}
-		syncProjectWithDisk(project, config.outputDir);
-		saveProject(config.outputDir, project);
+		const before = JSON.stringify(project);
+		syncProjectWithDisk(project, outputDir);
+		if (JSON.stringify(project) !== before) saveProject(outputDir, project);
 		return project;
 	};
 	const statusRoute = {
@@ -12939,6 +13182,11 @@ function makeRoutes(deps) {
 				syncProjectWithDisk(project, outputDir);
 				saveProject(outputDir, project);
 			}
+			const writtenAtByNo = /* @__PURE__ */ new Map();
+			for (const c of project?.chapters ?? []) {
+				const at = chapterWrittenAt(outputDir, c);
+				if (at !== void 0) writtenAtByNo.set(c.no, at);
+			}
 			const slim = new URL(req.url ?? "/", "http://localhost").searchParams.get("slim") === "1";
 			const truncations = [];
 			let projectPayload;
@@ -12958,7 +13206,8 @@ function makeRoutes(deps) {
 						review: c.review !== void 0 ? {
 							score: c.review.score,
 							passed: c.review.passed
-						} : void 0
+						} : void 0,
+						writtenAt: writtenAtByNo.get(c.no)
 					})),
 					createdAt: project.createdAt,
 					updatedAt: project.updatedAt
@@ -12969,6 +13218,10 @@ function makeRoutes(deps) {
 				if (allFacts.length > shownFacts.length) truncations.push(`编年录：共 ${allFacts.length} 条，仅返回最近 ${shownFacts.length} 条（较早 ${allFacts.length - shownFacts.length} 条未返回）`);
 				projectPayload = {
 					...project,
+					chapters: project.chapters.map((c) => ({
+						...c,
+						writtenAt: writtenAtByNo.get(c.no)
+					})),
 					facts: shownFacts
 				};
 			}
@@ -13183,46 +13436,18 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
-			const liveSession = nextSessionId();
-			emitLive({
-				type: "session_started",
-				sessionId: liveSession,
-				label: "正文生成",
-				model: config.generateModel || config.model,
-				at: (/* @__PURE__ */ new Date()).toISOString(),
-				context: {
-					interactionId: liveSession,
-					taskId: `ch-${no}`
-				}
-			});
-			emitLive({
-				type: "phase_changed",
-				sessionId: liveSession,
-				phase: "streaming",
-				phaseMessage: "模型正在返回正文",
-				at: (/* @__PURE__ */ new Date()).toISOString()
-			});
+			const abort = abortOnClientClose(req, res);
 			try {
 				send({
 					type: "start",
 					no,
 					title: chapter.title
 				});
-				let genChars = 0;
-				for await (const step of generateChapterStream(ctx, config, project, config.outputDir, no)) if (step.frame === "delta") {
-					send({
-						type: "delta",
-						text: step.text
-					});
-					genChars += step.text.length;
-					emitLive({
-						type: "output_delta",
-						sessionId: liveSession,
-						content: step.text,
-						totalChars: genChars,
-						at: (/* @__PURE__ */ new Date()).toISOString()
-					});
-				} else if (step.frame === "done") send({
+				for await (const step of generateChapterStream(ctx, config, project, config.outputDir, no, abort.signal)) if (step.frame === "delta") send({
+					type: "delta",
+					text: step.text
+				});
+				else if (step.frame === "done") send({
 					type: "done",
 					no,
 					file: step.file,
@@ -13230,14 +13455,6 @@ function makeRoutes(deps) {
 					title: chapter.title,
 					warn: step.warn
 				});
-				emitLive({
-					type: "session_completed",
-					sessionId: liveSession,
-					totalChars: genChars,
-					preview: "",
-					at: (/* @__PURE__ */ new Date()).toISOString(),
-					phase: "completed"
-				});
 				try {
 					const wantTimeline = config.autoTimeline ?? true;
 					await summarizeFactsAndTimeline(ctx, config, project, config.outputDir, no, {
@@ -13274,7 +13491,7 @@ function makeRoutes(deps) {
 						const review = await authorReviewChapter(ctx, config, project, no, currentBody, prevTail);
 						chapter.authorReview = review;
 						if (review.advancedLines !== void 0) autoLinkPlotlines(project, no, review.advancedLines);
-						mergeVolatileFromDisk(config.outputDir, project);
+						mergeVolatileFromDisk(config.outputDir, project, ["plotlines"]);
 						saveProject(config.outputDir, project);
 						send({
 							type: "author-review",
@@ -13287,6 +13504,14 @@ function makeRoutes(deps) {
 				}
 				res.end();
 			} catch (error) {
+				if (isAbortError(error)) {
+					chapter.status = "pending";
+					chapter.generatingAt = void 0;
+					chapter.error = void 0;
+					syncProjectWithDisk(project, config.outputDir);
+					saveProject(config.outputDir, project);
+					return;
+				}
 				chapter.status = "error";
 				chapter.error = error.message;
 				mergeVolatileFromDisk(config.outputDir, project);
@@ -13362,8 +13587,9 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
+			const abort = abortOnClientClose(req, res);
 			try {
-				for await (const step of rewriteChapterStream(ctx, config, project, config.outputDir, no, body?.instructions ?? "", body?.target)) if (step.frame === "delta") send({
+				for await (const step of rewriteChapterStream(ctx, config, project, config.outputDir, no, body?.instructions ?? "", body?.target, abort.signal)) if (step.frame === "delta") send({
 					type: "delta",
 					text: step.text
 				});
@@ -13375,6 +13601,7 @@ function makeRoutes(deps) {
 				});
 				res.end();
 			} catch (error) {
+				if (isAbortError(error)) return;
 				if (!res.writableEnded) {
 					send({
 						type: "error",
@@ -13417,8 +13644,9 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
+			const abort = abortOnClientClose(req, res);
 			try {
-				for await (const step of polishChapterStream(ctx, config, project, config.outputDir, no)) if (step.frame === "delta") send({
+				for await (const step of polishChapterStream(ctx, config, project, config.outputDir, no, abort.signal)) if (step.frame === "delta") send({
 					type: "delta",
 					text: step.text
 				});
@@ -13430,6 +13658,7 @@ function makeRoutes(deps) {
 				});
 				res.end();
 			} catch (error) {
+				if (isAbortError(error)) return;
 				if (!res.writableEnded) {
 					send({
 						type: "error",
@@ -13448,7 +13677,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (!Number.isInteger(body?.chapterNo)) {
@@ -13499,7 +13728,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (!Number.isInteger(body?.chapterNo)) {
@@ -13525,7 +13754,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (!Number.isInteger(body?.chapterNo)) {
@@ -13669,7 +13898,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			const text = body?.text?.trim() ?? "";
@@ -13691,7 +13920,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (!Number.isInteger(body?.chapterNo)) {
@@ -13762,8 +13991,9 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
+			const abort = abortOnClientClose(req, res);
 			try {
-				for await (const step of runAssistantTurn(ctx, config, project, outputDir, message)) if (step.frame === "delta") send({
+				for await (const step of runAssistantTurn(ctx, config, project, outputDir, message, abort.signal)) if (step.frame === "delta") send({
 					type: "delta",
 					text: step.text
 				});
@@ -13786,6 +14016,7 @@ function makeRoutes(deps) {
 				send({ type: "done" });
 				res.end();
 			} catch (error) {
+				if (isAbortError(error)) return;
 				if (!res.writableEnded) {
 					send({
 						type: "error",
@@ -14923,6 +15154,10 @@ function makeRoutes(deps) {
 					writeJson(res, 400, { error: "filePath 不能为空（或请上传文件内容）" });
 					return;
 				}
+				if (!IMPORTABLE_EXTENSIONS.includes(extname(filePath).toLowerCase())) {
+					writeJson(res, 400, { error: `仅支持纯文本小说文件（${IMPORTABLE_EXTENSIONS.join(" / ")}）` });
+					return;
+				}
 				if (!existsSync(filePath)) {
 					writeJson(res, 400, { error: `文件不存在：${filePath}` });
 					return;
@@ -15026,7 +15261,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			try {
 				const cards = await refreshCharacters(ctx, config, project, config.outputDir);
@@ -15046,7 +15281,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			try {
 				writeJson(res, 200, {
@@ -15065,7 +15300,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			if (project.bible === void 0) {
 				writeJson(res, 400, { error: "尚未生成道藏，请先生成" });
@@ -15100,7 +15335,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			try {
@@ -15134,8 +15369,11 @@ function makeRoutes(deps) {
 					writeJson(res, 403, { error: "forbidden: loopback-only" });
 					return;
 				}
-				const dirParam = new URL(req.url ?? "/", "http://localhost").searchParams.get("dir");
-				const targetDir = dirParam !== null && dirParam !== "" ? dirParam : config.outputDir;
+				const targetDir = resolveRegisteredDir(config, new URL(req.url ?? "/", "http://localhost").searchParams.get("dir"));
+				if (targetDir === void 0) {
+					writeJson(res, 400, { error: "dir 不是已登记的书籍目录" });
+					return;
+				}
 				const coverPath = loadProject(targetDir)?.coverPath;
 				if (coverPath === void 0 || coverPath === "") {
 					writeJson(res, 200, { dataUrl: null });
@@ -15151,7 +15389,7 @@ function makeRoutes(deps) {
 			}
 			if (req.method === "POST") {
 				if (!guard(req, res, "POST")) return;
-				const project = requireProject(res);
+				const project = requireProjectAt(req, res);
 				if (project === void 0) return;
 				const body = await readJsonBody(req);
 				try {
@@ -15207,7 +15445,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			try {
@@ -15239,7 +15477,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const bookName = (await readJsonBody(req))?.bookName?.trim();
 			if (bookName === void 0 || bookName === "") {
@@ -15261,7 +15499,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (project.plotlines === void 0) project.plotlines = [];
@@ -15390,7 +15628,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			const hits = [];
@@ -15444,7 +15682,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			if (project.roles === void 0) project.roles = [];
@@ -15482,7 +15720,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const no = (await readJsonBody(req))?.chapterNo;
 			if (!Number.isInteger(no) || no === void 0 || no < 1) {
@@ -15512,7 +15750,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const no = (await readJsonBody(req))?.chapterNo;
 			if (!Number.isInteger(no) || no === void 0 || no < 1) {
@@ -15533,6 +15771,73 @@ function makeRoutes(deps) {
 			});
 		}
 	};
+	/**
+	* 补写本章计划（方案 §7「左侧章节计划」六项）。
+	*
+	* 这些字段原本只有规划步骤会写：AI 排偏了，作者却没有纠正入口，而它们正是生成
+	* 与审稿的锚点（见 engine 的本章义务合约拼装）。上限与规划步骤保持一致 ——
+	* 否则「手动能写 10 条、AI 一重排只剩 4 条」就是静默丢数据；超限必然回写 notices。
+	*/
+	const chapterPlanRoute = {
+		kind: "exact",
+		path: NOVEL_API.chapterPlan,
+		handler: async (req, res) => {
+			if (!guard(req, res, "POST")) return;
+			const config = getConfig();
+			const project = requireProjectAt(req, res);
+			if (project === void 0) return;
+			const body = await readJsonBody(req);
+			const no = body?.chapterNo;
+			if (!Number.isInteger(no) || no === void 0 || no < 1) {
+				writeJson(res, 400, { error: "chapterNo 须为正整数" });
+				return;
+			}
+			const chapter = project.chapters.find((c) => c.no === no);
+			if (chapter === void 0) {
+				writeJson(res, 404, { error: `章节 ${no} 不在计划中` });
+				return;
+			}
+			const patch = body?.patch;
+			if (patch === null || typeof patch !== "object") {
+				writeJson(res, 400, { error: "patch 须为对象" });
+				return;
+			}
+			const notices = [];
+			const oneLine = (label, raw, max) => {
+				if (typeof raw !== "string") return void 0;
+				const value = raw.trim();
+				if (value.length <= max) return value;
+				notices.push(`${label}：${value.length} 字已裁到 ${max} 字`);
+				return value.slice(0, max);
+			};
+			const items = (label, raw, max) => {
+				if (!Array.isArray(raw)) return void 0;
+				const value = raw.filter((x) => typeof x === "string" && x.trim() !== "").map((x) => x.trim());
+				if (value.length <= max) return value;
+				notices.push(`${label}：${value.length} 条只保留前 ${max} 条`);
+				return value.slice(0, max);
+			};
+			const obligation = oneLine("本章目标", patch.obligation, 200);
+			if (obligation !== void 0) chapter.obligation = obligation === "" ? void 0 : obligation;
+			const mustAdvance = items("本章必达项", patch.mustAdvance, 4);
+			if (mustAdvance !== void 0) chapter.mustAdvance = mustAdvance;
+			const mustPreserve = items("必须保持", patch.mustPreserve, 4);
+			if (mustPreserve !== void 0) chapter.mustPreserve = mustPreserve;
+			const hardFacts = items("人物硬事实", patch.characterHardFacts, 6);
+			if (hardFacts !== void 0) chapter.characterHardFacts = hardFacts;
+			const endingHook = oneLine("结尾钩子", patch.endingHook, 120);
+			if (endingHook !== void 0) chapter.endingHook = endingHook === "" ? void 0 : endingHook;
+			const beats = oneLine("剧情推进", patch.beats, 2e3);
+			if (beats !== void 0) chapter.beats = beats;
+			project.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+			saveProject(config.outputDir, project);
+			writeJson(res, 200, {
+				ok: true,
+				chapter,
+				notices
+			});
+		}
+	};
 	/** 作者复盘补跑：对已写章节补齐 authorReview（body.chapterNo=单章 JSON，缺省=全书 NDJSON 流）。 */
 	const reviewBackfillRoute = {
 		kind: "exact",
@@ -15540,9 +15845,10 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
+			const abort = abortOnClientClose(req, res);
 			/** 对一章执行作者复盘（读取已落盘正文，不改变章节状态/正文）。 */
 			const runOne = async (chapter) => {
 				const currentBody = readChapterFile(config.outputDir, chapter);
@@ -15552,6 +15858,7 @@ function makeRoutes(deps) {
 					const prev = project.chapters.find((c) => c.no === chapter.no - 1);
 					if (prev !== void 0) prevTail = stripChapterHeadings(readChapterFile(config.outputDir, prev) ?? "").slice(-600);
 				}
+				if (abort.signal.aborted) throw new Error("客户端已断开连接");
 				return authorReviewChapter(ctx, config, project, chapter.no, currentBody, prevTail);
 			};
 			if (typeof body?.chapterNo === "number" && body.chapterNo > 0) {
@@ -15726,7 +16033,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			res.writeHead(200, {
 				"content-type": "application/x-ndjson; charset=utf-8",
@@ -15737,6 +16044,7 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
+			const abort = abortOnClientClose(req, res);
 			try {
 				const outline = await reverseOutlineFromChapters(ctx, config, project, config.outputDir, (done, total, phase) => {
 					send({
@@ -15745,7 +16053,7 @@ function makeRoutes(deps) {
 						total,
 						phase
 					});
-				});
+				}, abort.signal);
 				project.outline = outline;
 				project.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
 				saveProject(config.outputDir, project);
@@ -15755,6 +16063,7 @@ function makeRoutes(deps) {
 					chars: outline.length
 				});
 			} catch (error) {
+				if (isAbortError(error)) return;
 				send({
 					type: "error",
 					no: 0,
@@ -15865,7 +16174,7 @@ function makeRoutes(deps) {
 		handler: async (req, res) => {
 			if (!guard(req, res, "POST")) return;
 			const config = getConfig();
-			const project = requireProject(res);
+			const project = requireProjectAt(req, res);
 			if (project === void 0) return;
 			const body = await readJsonBody(req);
 			try {
@@ -15875,8 +16184,16 @@ function makeRoutes(deps) {
 			}
 		}
 	};
-	/** 生产单执行器（单例）：计划补足 → 逐章生成 → 被拒分级处理 → 断点续跑。 */
-	const runner = new ProductionRunner({
+	/**
+	* 生产单执行器：计划补足 → 逐章生成 → 被拒分级处理 → 断点续跑。
+	*
+	* 必须由调用方（index.ts）持有并注入，**不要在这里 new**：
+	* 本工厂每次 `sync()` 都会重建，藏在闭包里的 runner 会被丢掉——
+	* 旧实例的 `loop()` 仍在跑并继续写盘，而新实例 `isWorking()` 恒 false，
+	* 于是 `moveOutputDir` 的「正在生产则拒绝迁移」守卫直接失效。
+	* 测试可省略本项，内部自建一个一次性实例。
+	*/
+	const runner = deps.runner ?? new ProductionRunner({
 		ctx,
 		getConfig
 	});
@@ -16232,11 +16549,13 @@ function makeRoutes(deps) {
 			const send = (frame) => {
 				res.write(JSON.stringify(frame) + "\n");
 			};
+			const abort = abortOnClientClose(req, res);
 			try {
 				const result = await rewriteAdaptationBook(ctx, getConfig(), text, mappings, body?.rules, {
 					maxChapters: body?.maxChapters,
 					startNo: body?.startNo,
 					endNo: body?.endNo,
+					signal: abort.signal,
 					onProgress: (info) => send({
 						type: "progress",
 						completed: info.completed,
@@ -16245,6 +16564,7 @@ function makeRoutes(deps) {
 						title: info.title
 					})
 				});
+				if (abort.signal.aborted) return;
 				send({
 					type: "done",
 					result: {
@@ -16257,6 +16577,7 @@ function makeRoutes(deps) {
 					}
 				});
 			} catch (err) {
+				if (isAbortError(err)) return;
 				send({
 					type: "error",
 					message: err instanceof Error ? err.message : String(err)
@@ -16470,6 +16791,7 @@ function makeRoutes(deps) {
 		reviewBackfillRoute,
 		chapterResetRoute,
 		chapterApproveRoute,
+		chapterPlanRoute,
 		configRoute,
 		moveOutputDirRoute,
 		bookSettingsRoute,
@@ -16845,6 +17167,21 @@ function apply(ctx, config) {
 	};
 	let disposeSection;
 	let disposeRoutes;
+	/**
+	* 生产单 runner 单例：**必须在 makeRoutes 之外**持有。
+	*
+	* 此前 runner 在 makeRoutes 工厂体内 `new`，而 `sync()` 每次配置变更都会
+	* 重新 makeRoutes + dispose 全部旧路由 —— 于是：
+	* 1. 旧 runner 的 `loop()` 仍在跑并继续 saveProject（失去引用但不停止），同时
+	* 2. 新 runner 的 `isWorking()` 恒为 false，`moveOutputDir` 的守卫失效 →
+	*    可以边迁移目录边写盘。
+	* 提到这里之后，sync() 只重建路由表，runner 及其内存状态（working / 当前章 /
+	* 暂停标志）跨重注册保持连续。
+	*/
+	const runner = new ProductionRunner({
+		ctx,
+		getConfig: resolve
+	});
 	const sync = () => {
 		if (disposeSection !== void 0) {
 			disposeSection();
@@ -16866,7 +17203,8 @@ function apply(ctx, config) {
 			getConfig: resolve,
 			patchConfig,
 			rawConfig: () => current(),
-			settingsNs
+			settingsNs,
+			runner
 		});
 		disposeRoutes = ctx.effect(() => {
 			const disposers = routes.map((route) => ctx.webServer.register(route));