dsh-novel-write-engine 0.1.0 → 0.1.1

package/lib/index.js

@@ -350,7 +350,7 @@ function applyExclusions(dimensions, exclusions) {
 	const canonical = (location) => {
 		if (typeof location !== "string") return "";
 		const paragraph = /第\s*(\d+)\s*段/.exec(location);
-		return paragraph === null ? location.trim() : `paragraph:${paragraph[1]}`;
+		return paragraph === null ? location.trim() : `paragraph:${Number(paragraph[1])}`;
 	};
 	const deductionsOf = (dimension) => {
 		if (typeof dimension !== "object" || dimension === null) return [];
@@ -648,27 +648,28 @@ function nextStage(stage, op, openBlockers) {
 function availableOps(stage) {
 	return TRANSITIONS.filter((transition) => transition.from === stage).map((transition) => transition.op);
 }
-/** Whether the review/revise retry budget is spent. */
-function roundsExhausted(rounds) {
+/** Whether one retry budget (or, without a counter, any budget) is spent. */
+function roundsExhausted(rounds, counter) {
+	if (counter !== void 0) return rounds[counter] >= LIMITS.maxRounds;
 	return rounds.review >= LIMITS.maxRounds || rounds.revise >= LIMITS.maxRounds || rounds.check >= LIMITS.maxRounds;
 }
 /** The operation a stage expects next, used by `advise` and the status `next` block. */
 const STAGE_NEXT = {
 	idle: {
 		tool: "novel_plan_world",
-		reason: "call novel_brief P1, then submit the world plan"
+		reason: "submit the world plan"
 	},
 	P2: {
 		tool: "novel_plan_chapter",
-		reason: "call novel_brief P2, then submit the chapter plan"
+		reason: "submit the chapter plan"
 	},
 	P3: {
 		tool: "novel_write_draft",
-		reason: "call novel_brief P3, then submit the draft"
+		reason: "submit the draft"
 	},
 	P4: {
 		tool: "novel_review",
-		reason: "call novel_brief P4, then submit the scored review"
+		reason: "submit the scored review"
 	},
 	P5: {
 		tool: "novel_revise",
@@ -676,11 +677,11 @@ const STAGE_NEXT = {
 	},
 	P6: {
 		tool: "novel_check",
-		reason: "run the consistency check, then archive"
+		reason: "run the consistency check"
 	},
 	ready_to_archive: {
-		tool: "novel_brief",
-		reason: "all gates pass; call novel_brief P8, then archive the chapter"
+		tool: "novel_archive",
+		reason: "all gates pass; archive the chapter with its state_delta"
 	},
 	done: {
 		tool: "novel_plan_world",
@@ -1063,7 +1064,23 @@ const duplicateParagraph = (ctx) => {
 	const previous = ctx.evidence.previousTexts.length > 0 ? ctx.evidence.previousTexts : ctx.evidence.previousText === null ? [] : [ctx.evidence.previousText];
 	if (previous.length === 0) return [];
 	const minChars = ctx.rulepack.crosschapter.duplicate_min_chars;
-	const longParagraphs = (text) => splitParagraphs(text).filter((paragraph) => Array.from(paragraph.replace(/\s+/g, "")).length >= minChars).join("\n\n");
+	const longParagraphs = (text) => {
+		const units = [];
+		let buffer = "";
+		for (const paragraph of splitParagraphs(text)) {
+			buffer += paragraph;
+			if (Array.from(buffer.replace(/\s+/g, "")).length >= minChars) {
+				units.push(buffer);
+				buffer = "";
+			}
+		}
+		if (buffer !== "") {
+			if (units.length === 0) {
+				if (Array.from(buffer.replace(/\s+/g, "")).length >= minChars) units.push(buffer);
+			} else units[units.length - 1] += buffer;
+		}
+		return units.join("\n\n");
+	};
 	const best = maxParagraphSimilarity(longParagraphs(ctx.text), previous.map((text) => longParagraphs(text)).filter((text) => text !== ""));
 	if (best < ctx.rulepack.crosschapter.duplicate_advisory) return [];
 	const severity = best >= ctx.rulepack.crosschapter.duplicate_similarity ? "blocker" : "advisory";
@@ -1340,7 +1357,7 @@ function resolveInside(root, relativePath) {
 	const absoluteRoot = resolve(root);
 	const absolute = resolve(absoluteRoot, relativePath);
 	const inside = relative(absoluteRoot, absolute);
-	if (inside === "" || inside.startsWith("..") || isAbsolute(inside)) throw new EngineFaultError(ERROR_CODES.PATH_ESCAPE, `refusing path "${relativePath}": escapes project root`);
+	if (inside === "" || inside === ".." || inside.startsWith(`..${sep}`) || isAbsolute(inside)) throw new EngineFaultError(ERROR_CODES.PATH_ESCAPE, `refusing path "${relativePath}": escapes project root`);
 	return absolute;
 }
 // src/store/migrate.ts
@@ -1415,6 +1432,7 @@ const SCHEMAS = {
 		rounds: req("object"),
 		briefs: req("object"),
 		blocking: req("array"),
+		review_digest: f("string"),
 		last_action: f("any")
 	},
 	chapters: { chapters: req("array") },
@@ -1726,10 +1744,11 @@ function narrow(kind, value) {
 	if (typeof version !== "number" || !Number.isInteger(version)) return invalid$1(kind, "missing schema_version");
 	if (version > 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_TOO_NEW, `refusing ${kind}: schema_version ${version} is newer than supported 1`, "upgrade the plugin; the file was left untouched");
 	if (version !== 1) invalid$1(kind, `unsupported schema_version ${version}`);
+	if (!Object.hasOwn(SCHEMAS, kind)) invalid$1(kind, `unknown document kind "${String(kind)}"`);
 	const schema = SCHEMAS[kind];
 	for (const key of Object.keys(record)) {
 		if (key === "schema_version") continue;
-		if (!(key in schema)) invalid$1(kind, `unknown key "${key}"`);
+		if (!Object.hasOwn(schema, key)) invalid$1(kind, `unknown key "${key}"`);
 	}
 	for (const [key, field] of Object.entries(schema)) {
 		const fieldValue = record[key];
@@ -1836,7 +1855,12 @@ var FsStore = class {
 	async readDoc(relativePath, kind) {
 		const text = await this.readText(relativePath);
 		if (text === null) return null;
-		const parsed = parse(text);
+		let parsed;
+		try {
+			parsed = parse(text);
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${relativePath} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix the YAML syntax; the engine will not rewrite a document it cannot parse", { cause: error });
+		}
 		return narrow(kind, (typeof parsed === "object" && parsed !== null && typeof parsed.schema_version === "number" ? parsed.schema_version : 1) < 1 ? migrateDocument(parsed, MIGRATIONS, 1) : parsed);
 	}
 	/** Write text atomically: temp file, fsync, rename, directory fsync. */
@@ -2080,6 +2104,9 @@ async function recoverPending(store) {
 /** Throw before a write when the journal or the last commit is inconsistent. */
 async function assertJournalConsistent(store) {
 	await recoverPending(store);
+	const { records } = await readJournal(store);
+	const committed = new Set(records.filter((record) => record.status === "committed" && record.op !== "lock_reclaimed").map((record) => record.txid));
+	for (const entry of await store.list(STAGING_DIR)) if (committed.has(entry)) await store.removeTree(joinRel(STAGING_DIR, entry)).catch(() => void 0);
 	const { malformed, mismatches } = await reconcileJournal(store);
 	assertJournalHealthy(malformed);
 	if (mismatches.length > 0) {
@@ -2113,6 +2140,8 @@ var KeyedMutex = class {
 		return this.tails.size;
 	}
 };
+/** Nonces this process currently holds; same-pid locks not in this set are stale. */
+const liveNonces = /* @__PURE__ */ new Set();
 const isLockRecord = (value) => typeof value === "object" && value !== null && typeof value.pid === "number" && typeof value.startedAt === "string" && (value.nonce === void 0 || typeof value.nonce === "string");
 const processAlive = (pid) => {
 	if (pid === process.pid) return true;
@@ -2155,6 +2184,7 @@ var FileLock = class {
 			}
 			await handle.close();
 			this.held = record;
+			if (record.nonce !== void 0) liveNonces.add(record.nonce);
 			return;
 		} catch (error) {
 			if (error.code !== "EEXIST") throw error;
@@ -2168,7 +2198,8 @@ var FileLock = class {
 		const record = await this.read();
 		const held = this.held;
 		this.held = null;
-		if (record !== null && held !== null && record.pid === held.pid && record.nonce === held.nonce) await promises.rm(this.absolutePath, { force: true });
+		if (held?.nonce !== void 0) liveNonces.delete(held.nonce);
+		if (record !== null && held !== null && record.pid === held.pid && record.nonce === held.nonce) await promises.rm(this.absolutePath, { force: true }).catch(() => void 0);
 	}
 	/** Read the current lock record, or null when absent/held by a foreign process. */
 	async read() {
@@ -2199,30 +2230,25 @@ var FileLock = class {
 		}
 		if (record === null) {
 			if (Date.now() - mtimeMs <= this.staleMs) return false;
-		} else {
-			const age = Date.now() - Date.parse(record.startedAt);
-			if (!(!Number.isFinite(age) || !processAlive(record.pid))) return false;
-		}
+		} else if (record.pid === process.pid) {
+			if (record.nonce !== void 0 && liveNonces.has(record.nonce)) return false;
+		} else if (processAlive(record.pid)) return false;
 		const claimPath = `${this.absolutePath}.reclaim-${randomUUID()}`;
 		try {
-			await promises.rename(this.absolutePath, claimPath);
+			await promises.link(this.absolutePath, claimPath);
 		} catch (error) {
 			if (error.code === "ENOENT") return true;
 			throw error;
 		}
-		let moved = null;
-		moved = await this.readAt(claimPath);
+		const moved = await this.readAt(claimPath);
 		const claimMtime = await promises.stat(claimPath).then((info) => info.mtimeMs).catch(() => Date.now());
 		if (!(record === null ? moved === null && Date.now() - claimMtime > this.staleMs : moved !== null && moved.pid === record.pid && moved.startedAt === record.startedAt && moved.nonce === record.nonce)) {
-			try {
-				await promises.link(claimPath, this.absolutePath);
-				await promises.rm(claimPath, { force: true });
-			} catch {
-				await promises.rm(claimPath, { force: true }).catch(() => void 0);
-			}
+			await promises.rm(claimPath, { force: true }).catch(() => void 0);
 			return false;
 		}
-		await promises.rm(claimPath, { force: true });
+		const current = await this.readAt(this.absolutePath);
+		if (record === null ? current === null : current !== null && current.pid === record.pid && current.startedAt === record.startedAt && current.nonce === record.nonce) await promises.rm(this.absolutePath, { force: true }).catch(() => void 0);
+		await promises.rm(claimPath, { force: true }).catch(() => void 0);
 		await this.onReclaim?.(record);
 		return true;
 	}
@@ -2294,6 +2320,12 @@ async function restoreTargets(store, renamed, before) {
 * that terminal row).
 */
 async function runTransaction(store, input) {
+	const staged = /* @__PURE__ */ new Set();
+	for (const file of input.files) {
+		if (staged.has(file.path)) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `transaction ${input.txid} stages ${file.path} more than once`, "each target may appear once per transaction; merge the writes before staging");
+		if (file.text !== void 0 && file.bytes !== void 0) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `transaction ${input.txid} stages both text and bytes for ${file.path}`, "choose one representation per staged file");
+		staged.add(file.path);
+	}
 	const staging = stagingDir(input.txid);
 	const expected = /* @__PURE__ */ new Map();
 	const before = /* @__PURE__ */ new Map();
@@ -2416,8 +2448,13 @@ var ProjectRegistry = class {
 	async read() {
 		const text = await this.store.readText(REGISTRY_FILE);
 		if (text === null) return empty();
-		const raw = parse(text);
-		if (typeof raw !== "object" || raw === null) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not an object`);
+		let raw;
+		try {
+			raw = parse(text);
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix or delete the registry file; projects on disk are unaffected", { cause: error });
+		}
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not an object`);
 		const record = raw;
 		if (record.schema_version !== 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} has an unsupported schema_version`);
 		return {
@@ -2786,11 +2823,7 @@ var BriefLibrary = class {
 		};
 	}
 };
-const hash = (text) => {
-	let value = 0;
-	for (let index = 0; index < text.length; index += 1) value = Math.imul(31, value) + text.charCodeAt(index) | 0;
-	return `fnv:${(value >>> 0).toString(16)}`;
-};
+const hash = (text) => `sha256:${createHash("sha256").update(text, "utf8").digest("hex")}`;
 // src/engine/context.ts
 const compactSummary = (row) => ({
 	num: row.num,
@@ -2825,7 +2858,8 @@ function briefContext(input) {
 		chapter: input.chapter,
 		stage: input.pipeline.stage,
 		scene_distribution: sceneDistribution(input.chapters),
-		previous_ending: previousEnding
+		previous_ending: previousEnding,
+		...input.plan_error === void 0 || input.plan_error === null ? {} : { plan_error: input.plan_error }
 	};
 	switch (input.stage) {
 		case "P1": return {
@@ -2911,6 +2945,15 @@ const ACTIONS = [
 	"no_change"
 ];
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** Define an own property even for names such as `__proto__` or `constructor`. */
+const setOwn = (record, key, value) => {
+	Object.defineProperty(record, key, {
+		value,
+		enumerable: true,
+		configurable: true,
+		writable: true
+	});
+};
 function fail$1(detail) {
 	throw new EngineInputError(ERROR_CODES.DELTA_UNVERIFIED, `state_delta is incomplete: ${detail}`, "declare every entity the chapter touched as created, updated, or no_change with a reason");
 }
@@ -2961,7 +3004,7 @@ function applyStateDelta(input) {
 	const foreshadows = structuredClone(input.foreshadows);
 	const timeline = structuredClone(input.timeline);
 	const relationships = structuredClone(input.relationships);
-	const assigned = {};
+	const assigned = Object.create(null);
 	const appeared = [...new Set(summary.characters_appeared)];
 	const byName = new Map(characters.characters.map((character) => [character.name, character]));
 	const narrator = input.narrator ?? "";
@@ -2973,7 +3016,7 @@ function applyStateDelta(input) {
 	};
 	for (const name of appeared) {
 		if (!appearsInManuscript(name)) fail$1(`character "${name}" is listed in characters_appeared but does not appear in the manuscript`);
-		if (delta.characters[name] === void 0) fail$1(`character "${name}" appeared in the chapter but is not declared in characters`);
+		if (!Object.hasOwn(delta.characters, name)) fail$1(`character "${name}" appeared in the chapter but is not declared in characters`);
 	}
 	for (const [name, raw] of Object.entries(delta.characters)) {
 		const declared = entry(raw, `characters.${name}`);
@@ -3020,7 +3063,7 @@ function applyStateDelta(input) {
 	}
 	for (const change of summary.resource_changes) {
 		if (!isRecord(change) || typeof change.character !== "string" || change.character.trim() === "" || typeof change.resource !== "string" || change.resource.trim() === "" || !Number.isInteger(change.delta) || typeof change.reason !== "string" || change.reason.trim() === "") fail$1("every resource_changes entry must declare character/resource/delta/reason");
-		if (delta.characters[change.character] === void 0) fail$1(`resource change for "${change.character}" has no character declaration`);
+		if (!Object.hasOwn(delta.characters, change.character)) fail$1(`resource change for "${change.character}" has no character declaration`);
 		if (delta.characters[change.character].action === "no_change") fail$1(`resource change for "${change.character}" conflicts with a no_change declaration`);
 		const character = byName.get(change.character);
 		if (character === void 0) fail$1(`resource change names unknown character "${change.character}"`);
@@ -3067,8 +3110,8 @@ function applyStateDelta(input) {
 		["artifact", summary.new_elements.artifacts]
 	]) for (const name of names) {
 		if (!input.text.includes(name)) fail$1(`summary lists new ${kind} "${name}" but the manuscript never mentions it`);
+		if (!Object.hasOwn(delta.world, name)) fail$1(`summary lists new ${kind} "${name}" but world.${name} is not declared`);
 		const declared = delta.world[name];
-		if (declared === void 0) fail$1(`summary lists new ${kind} "${name}" but world.${name} is not declared`);
 		if (declared.action !== "created") fail$1(`world.${name} is new in this chapter; its action must be created`);
 		if (declared.kind !== void 0 && declared.kind !== kind) fail$1(`world.${name} is declared as ${declared.kind} but the summary lists it as ${kind}`);
 	}
@@ -3086,9 +3129,19 @@ function applyStateDelta(input) {
 		}
 		const existing = findWorld(name);
 		if (declared.action === "created") {
+			if (name.trim() === "") fail$1("a created world entity has an empty name");
 			if (existing !== null) fail$1(`world entity "${name}" already exists; use updated or no_change`);
+			if (!input.text.includes(name)) fail$1(`world entity "${name}" is created but does not appear in the manuscript`);
 			const kind = declared.kind ?? expected;
 			if (kind === null) fail$1(`world.${name} must declare kind (location|ability|artifact|faction|rule)`);
+			if (![
+				"location",
+				"ability",
+				"artifact",
+				"faction",
+				"rule"
+			].includes(kind)) fail$1(`world.${name} has unknown kind "${String(kind)}"`);
+			if (expected === null && (kind === "location" || kind === "ability" || kind === "artifact")) fail$1(`world.${name} is created but is not listed in summary.new_elements`);
 			if (kind === "location") world.locations.push({
 				name,
 				first_appearance: chapter,
@@ -3099,10 +3152,10 @@ function applyStateDelta(input) {
 				changes: []
 			});
 			else world[kind === "ability" ? "abilities" : kind === "artifact" ? "artifacts" : kind === "faction" ? "factions" : "rules"].push({
+				...declared.detail ?? {},
 				name,
 				first_appearance: chapter,
-				description: declared.description ?? "",
-				...declared.detail ?? {}
+				description: declared.description ?? ""
 			});
 			continue;
 		}
@@ -3124,35 +3177,45 @@ function applyStateDelta(input) {
 			}
 		}
 	}
-	for (const name of appeared) if (locks.characters[name] === void 0) {
+	for (const name of appeared) if (!Object.hasOwn(locks.characters, name)) {
 		const character = byName.get(name);
-		locks.characters[name] = {
+		setOwn(locks.characters, name, {
 			first_appearance: character.first_appearance,
 			locked_at: chapter,
 			appearance: appearanceOf(input.text, name, name === narratorName ? narratorAliases : [])
-		};
+		});
 	}
-	for (const location of world.locations) if (locks.locations[location.name] === void 0) locks.locations[location.name] = {
+	for (const location of world.locations) if (!Object.hasOwn(locks.locations, location.name)) setOwn(locks.locations, location.name, {
 		first_appearance: location.first_appearance,
 		locked_at: chapter,
 		layout: location.layout,
 		capacity: location.capacity
-	};
+	});
 	locks.locked_at_chapter = Math.max(locks.locked_at_chapter, chapter);
 	const byId = new Map(foreshadows.items.map((item) => [item.id, item]));
 	const plantedKeys = /* @__PURE__ */ new Set();
 	for (const plant of summary.foreshadows.planted) {
 		if (plant.key.trim() === "") fail$1("a planted foreshadow has an empty key");
+		if (byId.has(plant.key)) fail$1(`foreshadow key "${plant.key}" collides with an existing id`);
 		if (plantedKeys.has(plant.key)) fail$1(`foreshadow key "${plant.key}" is planted twice`);
 		plantedKeys.add(plant.key);
+		if (!Object.hasOwn(delta.foreshadows, plant.key)) fail$1(`foreshadows.${plant.key} is not declared`);
 		const declared = entry(delta.foreshadows[plant.key], `foreshadows.${plant.key}`);
 		requireReason(declared, `foreshadows.${plant.key}`);
 		if (declared.action !== "created") fail$1(`foreshadows.${plant.key} is planted; its action must be created`);
+		if (typeof plant.title !== "string" || plant.title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty summary title`);
+		if (!input.text.includes(plant.title)) fail$1(`planted foreshadow summary title "${plant.title}" does not appear in the manuscript`);
+		if (declared.title !== void 0 && typeof declared.title !== "string") fail$1(`foreshadows.${plant.key}.title must be a string`);
+		const title = declared.title ?? plant.title;
+		if (title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty title`);
+		if (!input.text.includes(title)) fail$1(`planted foreshadow "${title}" does not appear in the manuscript`);
 		const allocated = allocateIds("FS", foreshadows.next_seq, 1);
+		const id = allocated.ids[0];
+		if (byId.has(id)) fail$1(`foreshadows.next_seq is behind the ledger; ${id} already exists`);
 		foreshadows.next_seq = allocated.nextSeq;
 		const item = {
-			id: allocated.ids[0],
-			title: declared.title ?? plant.title,
+			id,
+			title,
 			planted: chapter,
 			last_touched: chapter,
 			status: "planted",
@@ -3165,12 +3228,14 @@ function applyStateDelta(input) {
 		assigned[plant.key] = item.id;
 	}
 	for (const advance of summary.foreshadows.advanced) {
+		if (!Object.hasOwn(delta.foreshadows, advance.key)) fail$1(`foreshadows.${advance.key} is not declared`);
 		const declared = entry(delta.foreshadows[advance.key], `foreshadows.${advance.key}`);
 		requireReason(declared, `foreshadows.${advance.key}`);
 		if (declared.action !== "updated") fail$1(`foreshadows.${advance.key} is advanced; its action must be updated`);
 		const id = assigned[advance.key] ?? advance.key;
 		const item = byId.get(id);
 		if (item === void 0) fail$1(`foreshadow "${advance.key}" does not exist; no fallback is allowed`);
+		if (item.status === "resolved") fail$1(`foreshadow "${advance.key}" is already resolved`);
 		item.last_touched = chapter;
 		item.status = "advanced";
 		item.advance_log.push({
@@ -3181,12 +3246,14 @@ function applyStateDelta(input) {
 		assigned[advance.key] = item.id;
 	}
 	for (const key of summary.foreshadows.resolved) {
+		if (!Object.hasOwn(delta.foreshadows, key)) fail$1(`foreshadows.${key} is not declared`);
 		const declared = entry(delta.foreshadows[key], `foreshadows.${key}`);
 		requireReason(declared, `foreshadows.${key}`);
 		if (declared.action !== "updated") fail$1(`foreshadows.${key} is resolved; its action must be updated`);
 		const id = assigned[key] ?? key;
 		const item = byId.get(id);
 		if (item === void 0) fail$1(`foreshadow "${key}" does not exist; no fallback is allowed`);
+		if (item.status === "resolved") fail$1(`foreshadow "${key}" is already resolved`);
 		item.status = "resolved";
 		item.last_touched = chapter;
 		item.resolved_at = chapter;
@@ -3218,8 +3285,9 @@ function applyStateDelta(input) {
 		const declared = entry(delta.timeline[key], `timeline.${key}`);
 		if (declared.action !== "created") fail$1(`timeline.${key} is a new event; its action must be created`);
 		const allocated = allocateIds("TE", timeline.next_seq, 1);
-		timeline.next_seq = allocated.nextSeq;
 		const id = allocated.ids[0];
+		if (timeline.items.some((item) => item.id === id)) fail$1(`timeline.next_seq is behind the ledger; ${id} already exists`);
+		timeline.next_seq = allocated.nextSeq;
 		timeline.items.push({
 			id,
 			chapter,
@@ -3246,8 +3314,9 @@ function applyStateDelta(input) {
 			if (existing !== void 0) fail$1(`relationship ${pairKey(a, b)} already exists`);
 			if (typeof declared.type !== "string" || declared.type.trim() === "") fail$1(`relationships.${key} is created but has no type`);
 			const allocated = allocateIds("RL", relationships.next_seq, 1);
-			relationships.next_seq = allocated.nextSeq;
 			const id = allocated.ids[0];
+			if (relationships.items.some((item) => item.id === id)) fail$1(`relationships.next_seq is behind the ledger; ${id} already exists`);
+			relationships.next_seq = allocated.nextSeq;
 			relationships.items.push({
 				id,
 				a,
@@ -3301,6 +3370,23 @@ function evidenceQuote(value) {
 	candidate = candidate.replace(/^[「『“"']/, "").replace(/[」』”"']$/, "").trim();
 	return candidate;
 }
+/** Sentence spans, including the terminating punctuation, for evidence de-duplication. */
+function sentenceSpans(text) {
+	const spans = [];
+	let start = 0;
+	for (let index = 0; index < text.length; index += 1) if ("。！？!?".includes(text[index])) {
+		spans.push({
+			start,
+			end: index + 1
+		});
+		start = index + 1;
+	}
+	if (start < text.length) spans.push({
+		start,
+		end: text.length
+	});
+	return spans;
+}
 /**
 * Validate the model-supplied L2 semantic items. Evidence must be a real
 * substring of the manuscript; a failed verdict is itself a blocking finding.
@@ -3309,6 +3395,10 @@ function evidenceQuote(value) {
 function evaluateSemantic(text, items) {
 	const blocking = [];
 	const seen = /* @__PURE__ */ new Set();
+	const seenQuotes = /* @__PURE__ */ new Set();
+	const spans = [];
+	const sentences = sentenceSpans(text);
+	const usedSentences = /* @__PURE__ */ new Set();
 	for (const [index, item] of items.entries()) {
 		const where = `semantic[${index}]`;
 		if (typeof item !== "object" || item === null) {
@@ -3353,11 +3443,11 @@ function evaluateSemantic(text, items) {
 			continue;
 		}
 		const quote = evidenceQuote(item.evidence);
-		if (Array.from(quote).length < 4) {
+		if (Array.from(quote).length < 8) {
 			blocking.push({
 				code: "SEMANTIC_EVIDENCE_INVALID",
 				scope: "check",
-				detail: `${item.id} quotes fewer than 4 characters`
+				detail: `${item.id} quotes fewer than 8 characters`
 			});
 			continue;
 		}
@@ -3369,6 +3459,40 @@ function evaluateSemantic(text, items) {
 			});
 			continue;
 		}
+		if (seenQuotes.has(quote)) {
+			blocking.push({
+				code: "SEMANTIC_EVIDENCE_INVALID",
+				scope: "check",
+				detail: `${item.id} repeats another semantic item's quote; each check needs distinct evidence`
+			});
+			continue;
+		}
+		let start = text.indexOf(quote);
+		let sentence = -1;
+		while (start !== -1) {
+			const end = start + quote.length;
+			const overlaps = spans.some((span) => start < span.end && span.start < end);
+			const sentenceIndex = sentences.findIndex((candidate) => start >= candidate.start && end <= candidate.end);
+			if (!overlaps && sentenceIndex !== -1 && !usedSentences.has(sentenceIndex)) {
+				sentence = sentenceIndex;
+				break;
+			}
+			start = text.indexOf(quote, start + 1);
+		}
+		if (start === -1 || sentence === -1) {
+			blocking.push({
+				code: "SEMANTIC_EVIDENCE_INVALID",
+				scope: "check",
+				detail: `${item.id} cites overlapping text or the same sentence as another check; each check needs a distinct passage`
+			});
+			continue;
+		}
+		spans.push({
+			start,
+			end: start + quote.length
+		});
+		usedSentences.add(sentence);
+		seenQuotes.add(quote);
 		if (item.verdict === "fail") blocking.push({
 			code: "SEMANTIC_CHECK_FAILED",
 			scope: "check",
@@ -3501,6 +3625,7 @@ const summarySchema = (input) => {
 	if (!isText(summary.opening)) problems.push("opening must be text");
 	else {
 		const opening = summary.opening;
+		if (Array.from(opening).length < LIMITS.minQuoteChars) problems.push(`opening must be at least ${LIMITS.minQuoteChars} characters`);
 		if (!splitParagraphs(input.text).slice(0, 2).some((paragraph) => paragraph.includes(opening))) problems.push("opening must be quoted from the first two paragraphs");
 	}
 	const continuity = summary.continuity;
@@ -3537,6 +3662,7 @@ const score = (input, options) => {
 	if (review === null) return [block("PG-07", "no review document supplied")];
 	if (!Array.isArray(review.dimensions)) return [block("PG-07", "review dimensions must be an array")];
 	const problems = reviewArithmeticProblems(review.dimensions, review.total);
+	if (applyExclusions(review.dimensions, options.rulepack.exclusions).dropped > 0) problems.push("review contains mutually exclusive or duplicate deductions; resubmit it through novel_review");
 	if (review.content_hash !== sha256(input.text)) problems.push("review content_hash does not match the current manuscript");
 	const paragraphCount = splitParagraphs(input.text).length;
 	for (const dimension of review.dimensions) {
@@ -3616,13 +3742,16 @@ const readingProof = (input) => {
 		ending
 	]) if (problem !== null) problems.push(problem);
 	const paragraphs = splitParagraphs(input.text).length;
-	if (input.proof.opening.paragraph > 2) problems.push("the opening quote must come from the first two paragraphs");
-	if (input.proof.ending.paragraph < Math.max(1, paragraphs - 1)) problems.push("the ending quote must come from the last two paragraphs");
 	const actuals = [
 		input.proof.opening,
 		input.proof.middle,
 		input.proof.ending
 	].map((reference) => actualParagraph(input.text, reference));
+	if (actuals[0] > 2) problems.push("the opening quote must come from the first two paragraphs");
+	const middleMin = paragraphs <= 4 ? 2 : 3;
+	const middleMax = paragraphs <= 4 ? Math.max(2, paragraphs - 1) : paragraphs - 2;
+	if (actuals[1] > 0 && (actuals[1] < middleMin || actuals[1] > middleMax)) problems.push("the middle quote must come from the body of the chapter, not its first or last edges");
+	if (actuals[2] > 0 && actuals[2] < Math.max(1, paragraphs - 1)) problems.push("the ending quote must come from the last two paragraphs");
 	if (new Set(actuals.filter((index) => index > 0)).size < 3) problems.push("the three quotes must come from three distinct paragraphs");
 	return problems.length === 0 ? [] : [block("PG-09", problems.join("; "), "quote at least 12 characters from the real paragraph you read")];
 };
@@ -3662,8 +3791,9 @@ const consistency = (input, options) => {
 /** PG-11: the review/revise budget is enforced by the engine, not self-reported. */
 const rounds = (input) => {
 	if (!(input.operation === "submitReview" || input.operation === "submitRevision" || input.operation === "runCheck")) return [];
-	if (!roundsExhausted(input.rounds)) return [];
-	return [block("PG-11", `round limits reached (review ${input.rounds.review}, revise ${input.rounds.revise}, check ${input.rounds.check})`, "call novel_rollback to restart the chapter; the manuscript is kept for reference")];
+	const counter = input.operation === "submitReview" ? "review" : input.operation === "submitRevision" ? "revise" : "check";
+	if (!roundsExhausted(input.rounds, counter)) return [];
+	return [block("PG-11", `round limits reached for ${counter} (review ${input.rounds.review}, revise ${input.rounds.revise}, check ${input.rounds.check})`, "call novel_rollback to restart the chapter; the manuscript is kept for reference")];
 };
 /** PG-12: the archive transaction's preconditions, checked before staging. */
 const archiveAtomic = (input) => {
@@ -3753,6 +3883,7 @@ function applicableGates(input) {
 			"PG-06",
 			"PG-07",
 			"PG-08",
+			"PG-09",
 			"PG-10",
 			"PG-12"
 		];
@@ -3818,23 +3949,6 @@ function projectChapter(record) {
 		details: record.summary.events.join("；").slice(0, 240)
 	};
 }
-/** Status report used by the tool and by commands; one function, three callers. */
-function projectStatus(snapshot, next) {
-	return {
-		project: {
-			title: snapshot.title,
-			genre: snapshot.genre,
-			platform: snapshot.platform,
-			root: snapshot.root
-		},
-		chapter: snapshot.chapter,
-		stage: snapshot.stage,
-		rounds: { ...snapshot.rounds },
-		blocking: snapshot.blocking,
-		metrics: null,
-		next
-	};
-}
 function projectSummary(snapshot) {
 	return {
 		schemaVersion: 1,
@@ -4013,6 +4127,20 @@ var EngineService = class {
 	/** Compiled on first use so `apply()` performs no IO. */
 	rulepackSource;
 	compiled = null;
+	disposed = false;
+	/**
+	* Release in-process caches on host teardown. The engine owns no file
+	* handles, so this is deliberately synchronous and idempotent; it prevents a
+	* disposed instance from keeping project stores and replay results alive.
+	*/
+	dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.stores.clear();
+		this.replay.clear();
+		this.lastRoot = null;
+		this.compiled = null;
+	}
 	get rulepack() {
 		this.compiled ??= this.rulepackSource();
 		return this.compiled;
@@ -4119,6 +4247,7 @@ var EngineService = class {
 		});
 	}
 	async getStatus(input = {}) {
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		const chapter = input.chapter ?? snapshot.pipeline.chapter;
 		const metrics = await this.metricsFor(snapshot, chapter);
@@ -4132,9 +4261,10 @@ var EngineService = class {
 					root: snapshot.root
 				},
 				chapter,
+				active_chapter: snapshot.pipeline.chapter,
 				stage: snapshot.pipeline.stage,
 				rounds: { ...snapshot.pipeline.rounds },
-				blocking: snapshot.pipeline.blocking,
+				blocking: this.effectiveBlocking(snapshot),
 				metrics,
 				next
 			},
@@ -4148,6 +4278,7 @@ var EngineService = class {
 			revision: 1,
 			warnings: []
 		};
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		return {
 			data: countWordMetrics((input.chapter === void 0 ? snapshot.text : await this.readChapter(snapshot, input.chapter)) ?? ""),
@@ -4156,6 +4287,7 @@ var EngineService = class {
 		};
 	}
 	async queryState(input) {
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		const chapter = input.chapter ?? snapshot.pipeline.chapter;
 		const store = this.storeFor(snapshot.root);
@@ -4206,12 +4338,12 @@ var EngineService = class {
 				warnings: []
 			};
 			case "review": return {
-				data: snapshot.review,
+				data: chapter === snapshot.pipeline.chapter ? snapshot.review : await store.readDoc(reviewFile(chapter), "review"),
 				revision: snapshot.pipeline.revision,
 				warnings: []
 			};
 			case "check": return {
-				data: snapshot.check,
+				data: chapter === snapshot.pipeline.chapter ? snapshot.check : await store.readDoc(checkFile(chapter), "check"),
 				revision: snapshot.pipeline.revision,
 				warnings: []
 			};
@@ -4223,7 +4355,7 @@ var EngineService = class {
 			case "planWorld": {
 				const raw = await store.readText(planWorldFile(chapter));
 				return {
-					data: raw === null ? null : parseYamlLoose(raw),
+					data: raw === null ? null : parsePlanYaml(raw, planWorldFile(chapter)),
 					revision: snapshot.pipeline.revision,
 					warnings: []
 				};
@@ -4231,7 +4363,7 @@ var EngineService = class {
 			case "planChapter": {
 				const raw = await store.readText(planChapterFile(chapter));
 				return {
-					data: raw === null ? null : parseYamlLoose(raw),
+					data: raw === null ? null : parsePlanYaml(raw, planChapterFile(chapter)),
 					revision: snapshot.pipeline.revision,
 					warnings: []
 				};
@@ -4249,59 +4381,62 @@ var EngineService = class {
 				tool: next.tool,
 				args: next.args,
 				reason: next.reason,
-				blocking: snapshot.pipeline.blocking
+				blocking: this.effectiveBlocking(snapshot)
 			},
 			revision: snapshot.pipeline.revision,
 			warnings: []
 		};
 	}
 	async getBrief(input) {
-		const snapshot = await this.load(input.root);
-		const chapter = input.chapter ?? snapshot.pipeline.chapter;
-		const context = this.briefContextFor(input.stage, snapshot, chapter);
-		const digest = this.briefDigest(input.stage, snapshot, context);
-		const variables = this.briefVariables(snapshot, chapter);
-		const rendered = this.briefs.render(input.stage, variables);
-		const fields = {
-			stage: input.stage,
-			chapter,
-			digest,
-			min_words: snapshot.project.targets.words_per_chapter[0],
-			min_score: this.config.quality.minScore,
-			scene_types: [
-				"战斗/动作章",
-				"日常过渡章",
-				"情感爆发章",
-				"纯叙事章"
-			],
-			platform_style: this.rulepack.platform[snapshot.project.platform],
-			genre_guide: this.rulepack.genres[snapshot.project.genre],
-			/** P4 must apply exclusions before its arithmetic closes. */
-			score_exclusions: this.rulepack.exclusions,
-			next_tool: NEXT_TOOL_BY_BRIEF[input.stage]
-		};
-		const existing = snapshot.pipeline.briefs[input.stage];
-		if (existing !== void 0 && existing.digest === digest) return {
-			data: {
-				stage: input.stage,
-				chapter,
-				digest,
-				title: rendered.title,
-				content: rendered.content,
-				content_hash: rendered.contentHash,
-				fields,
-				context
-			},
-			revision: snapshot.pipeline.revision,
-			warnings: []
-		};
+		await this.load(input.root);
 		return this.mutate({
 			root: input.root,
 			op: "getBrief",
-			run: async (fresh, ctx) => {
-				const nextPipeline = pipelineWith(fresh, ctx.revision, {
+			run: async (snapshot, context) => {
+				const chapter = input.chapter ?? snapshot.pipeline.chapter;
+				if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `brief ${input.stage} belongs to active chapter ${snapshot.pipeline.chapter}, not ${chapter}`, `omit chapter or pass ${snapshot.pipeline.chapter}`);
+				const contextPack = this.briefContextFor(input.stage, snapshot, chapter);
+				const digest = this.briefDigest(input.stage, snapshot, contextPack);
+				const variables = this.briefVariables(snapshot, chapter);
+				const rendered = this.briefs.render(input.stage, variables);
+				const fields = {
+					stage: input.stage,
+					chapter,
+					digest,
+					min_words: snapshot.project.targets.words_per_chapter[0],
+					min_score: this.config.quality.minScore,
+					scene_types: [
+						"战斗/动作章",
+						"日常过渡章",
+						"情感爆发章",
+						"纯叙事章"
+					],
+					platform_style: this.rulepack.platform[snapshot.project.platform],
+					genre_guide: this.rulepack.genres[snapshot.project.genre],
+					/** P4 must apply exclusions before its arithmetic closes. */
+					score_exclusions: this.rulepack.exclusions,
+					next_tool: NEXT_TOOL_BY_BRIEF[input.stage],
+					...snapshot.planError === null ? {} : { plan_error: snapshot.planError }
+				};
+				const data = {
+					stage: input.stage,
+					chapter,
+					digest,
+					title: rendered.title,
+					content: rendered.content,
+					content_hash: rendered.contentHash,
+					fields,
+					context: contextPack
+				};
+				const existing = snapshot.pipeline.briefs[input.stage];
+				if (existing !== void 0 && existing.digest === digest) return {
+					files: [],
+					data,
+					replay: true
+				};
+				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					briefs: {
-						...fresh.pipeline.briefs,
+						...snapshot.pipeline.briefs,
 						[input.stage]: {
 							issued_at: this.now().toISOString(),
 							digest
@@ -4315,16 +4450,7 @@ var EngineService = class {
 						text: yaml(nextPipeline)
 					}],
 					backup: false,
-					data: {
-						stage: input.stage,
-						chapter,
-						digest,
-						title: rendered.title,
-						content: rendered.content,
-						content_hash: rendered.contentHash,
-						fields,
-						context
-					}
+					data
 				};
 			}
 		});
@@ -4451,7 +4577,7 @@ var EngineService = class {
 				const planPath = planChapterFile(chapter);
 				const planText = await context.store.readText(planPath);
 				const mergedPlan = {
-					...(planText === null ? null : parseYamlLoose(planText)) ?? {
+					...(planText === null ? null : parsePlanYaml(planText, planPath)) ?? {
 						schema_version: 1,
 						chapter
 					},
@@ -4559,6 +4685,7 @@ var EngineService = class {
 					detail: `score ${input.total} is below the minimum ${this.config.quality.minScore}`,
 					hint: "revise the chapter and submit a new P4 review"
 				});
+				const reviewDigest = sha256(stableJson(review));
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: next,
 					rounds: {
@@ -4566,7 +4693,8 @@ var EngineService = class {
 						review: snapshot.pipeline.rounds.review + 1
 					},
 					blocking,
-					last_action: action("novel_review", this.now(), sha256(stableJson(review)))
+					review_digest: reviewDigest,
+					last_action: action("novel_review", this.now(), reviewDigest)
 				});
 				return {
 					files: [{
@@ -4669,11 +4797,12 @@ var EngineService = class {
 						revise: snapshot.pipeline.rounds.revise + 1
 					},
 					blocking: [],
+					...patchedReview === null ? {} : { review_digest: sha256(stableJson(patchedReview)) },
 					last_action: action("novel_revise", this.now(), sha256(input.content))
 				});
 				const planPath = planChapterFile(input.chapter);
 				const planText = await context.store.readText(planPath);
-				const plan = planText === null ? null : parseYamlLoose(planText);
+				const plan = planText === null ? null : parsePlanYaml(planText, planPath);
 				const files = [{
 					path: chapterFile(input.chapter),
 					text: input.content
@@ -4745,7 +4874,7 @@ var EngineService = class {
 					scope: "check",
 					detail: violation.detail
 				})), ...semanticResult.blocking] : [];
-				let nextPipeline = pipelineWith(snapshot, context.revision, {
+				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: nextStage,
 					rounds: {
 						...snapshot.pipeline.rounds,
@@ -4754,24 +4883,6 @@ var EngineService = class {
 					blocking: blockingItems,
 					last_action: action("novel_check", this.now(), sha256(text))
 				});
-				if (verdict === "fail" && nextPipeline.briefs.P6 !== void 0) {
-					const postCheck = {
-						...snapshot,
-						check,
-						pipeline: nextPipeline
-					};
-					const digest = this.briefDigest("P6", postCheck, this.briefContextFor("P6", postCheck, input.chapter));
-					nextPipeline = {
-						...nextPipeline,
-						briefs: {
-							...nextPipeline.briefs,
-							P6: {
-								...nextPipeline.briefs.P6,
-								digest
-							}
-						}
-					};
-				}
 				return {
 					files: [{
 						path: checkFile(input.chapter),
@@ -4808,7 +4919,8 @@ var EngineService = class {
 			run: async (snapshot, context) => {
 				const already = snapshot.chapters.chapters.find((record) => record.num === input.chapter);
 				if (already !== void 0) {
-					if (already.archive_digest !== void 0 && already.archive_digest !== archiveDigest) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} is already archived with a different state_delta`, "archive is idempotent by chapter; start the next chapter instead of replaying old data");
+					if (already.archive_digest === void 0) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} has no archive_digest; the index entry is not trustworthy`, "restore the chapter index from backups/ or re-archive from the original manuscript");
+					if (already.archive_digest !== archiveDigest) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} is already archived with a different state_delta`, "archive is idempotent by chapter; start the next chapter instead of replaying old data");
 					const archivedText = await this.readChapter(snapshot, input.chapter);
 					if (archivedText === null || sha256(archivedText) !== already.content_hash) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `archived chapter ${input.chapter} no longer matches its index`, "restore the chapter from backups/ before retrying");
 					return {
@@ -4827,11 +4939,13 @@ var EngineService = class {
 				const text = snapshot.text ?? "";
 				const summary = snapshot.plan?.summary;
 				if (summary === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "the draft has no summary; resubmit the draft with a summary", "call novel_write_draft with the full summary block");
+				if (snapshot.review !== null && snapshot.pipeline.review_digest !== void 0 && snapshot.pipeline.review_digest !== sha256(stableJson(snapshot.review))) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "the stored review changed after submission; its digest no longer matches", "re-run novel_review instead of editing reviews/ directly");
 				await this.assertGates(snapshot, "archiveChapter", {
 					briefStage: "P8",
 					text,
 					summary,
-					review: snapshot.review
+					review: snapshot.review,
+					proof: snapshot.review?.proof ?? null
 				});
 				if (text === "") throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${input.chapter} has no draft`);
 				const archiveBlockers = this.machine(snapshot, text, { summary }).violations.filter((violation) => violation.severity === "blocker");
@@ -4992,7 +5106,7 @@ var EngineService = class {
 		if (typeof input.content !== "object" || input.content === null || Array.isArray(input.content)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend content must be an object");
 		const resolvedRoot = await this.resolveRoot(input.root);
 		const absolute = this.storeFor(resolvedRoot).path(input.path);
-		const kind = MUTABLE_STATE[input.path];
+		const kind = Object.hasOwn(MUTABLE_STATE, input.path) ? MUTABLE_STATE[input.path] : void 0;
 		if (kind === void 0 || absolute.length === 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `amend can only target state documents: ${Object.keys(MUTABLE_STATE).join(", ")}`, "edit novel content through the draft/revision tools, not amend");
 		return this.mutate({
 			root: resolvedRoot,
@@ -5259,6 +5373,7 @@ var EngineService = class {
 			revision: snapshot.pipeline.revision,
 			warnings: []
 		};
+		if (!Object.hasOwn(STATE_FILES, input.kind)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown state document "${String(input.kind)}"`, `allowed documents: ${Object.values(STATE_FILES).join(", ")}`);
 		const path = joinRel(STATE_DIR, STATE_FILES[input.kind]);
 		return await this.mutate({
 			root: input.root,
@@ -5308,7 +5423,7 @@ var EngineService = class {
 			stage: snapshot.pipeline.stage,
 			revision: snapshot.pipeline.revision,
 			rounds: snapshot.pipeline.rounds,
-			blocking: snapshot.pipeline.blocking,
+			blocking: this.effectiveBlocking(snapshot),
 			next: finished ? void 0 : this.nextStep(snapshot),
 			finished,
 			chapters: archived,
@@ -5318,31 +5433,93 @@ var EngineService = class {
 		};
 	}
 	nextStep(snapshot) {
-		if (snapshot.pipeline.blocking.length > 0) {
-			const first = snapshot.pipeline.blocking[0];
-			return {
-				tool: "novel_status",
-				args: {},
-				reason: `${first.code}: ${first.detail}${first.hint === void 0 ? "" : ` (${first.hint})`}`
-			};
-		}
+		const stage = snapshot.pipeline.stage;
+		const chapter = snapshot.pipeline.chapter;
+		const step = STAGE_NEXT[stage];
 		const target = snapshot.project.targets.total_chapters;
-		if (snapshot.pipeline.stage === "done" && target !== null && snapshot.chapters.chapters.length >= target) return {
+		if (stage === "done" && target !== null && snapshot.chapters.chapters.length >= target) return {
 			tool: "novel_export",
 			args: { kind: "epub" },
 			reason: "全书已完成；可导出成书，或结束本书"
 		};
-		const step = STAGE_NEXT[snapshot.pipeline.stage];
-		const args = snapshot.pipeline.stage === "ready_to_archive" ? {
-			stage: "P8",
-			chapter: snapshot.pipeline.chapter
-		} : { chapter: snapshot.pipeline.chapter };
+		const roundsBlock = this.roundsLimitBlock(snapshot);
+		if (roundsBlock !== null) return {
+			tool: "novel_rollback",
+			args: {
+				chapter,
+				to_stage: "P4"
+			},
+			reason: `${roundsBlock.code}: ${roundsBlock.detail}; ${roundsBlock.hint ?? ""}`.trim()
+		};
+		const first = this.effectiveBlocking(snapshot)[0];
+		const detail = first === void 0 ? "" : `${first.code}: ${first.detail}${first.hint === void 0 ? "" : ` (${first.hint})`}`;
+		const briefStage = STATUS_BRIEF[stage];
+		const followUp = (stage === "P5" || stage === "P6") && snapshot.pipeline.blocking.length > 0 ? "novel_revise" : step.tool;
+		if (briefStage !== null && !this.briefIsCurrent(snapshot, briefStage)) return {
+			tool: "novel_brief",
+			args: {
+				stage: briefStage,
+				chapter
+			},
+			reason: detail === "" ? `fetch the ${briefStage} brief before ${followUp}` : `${detail}; fetch the ${briefStage} brief, then ${followUp}`
+		};
+		if (snapshot.pipeline.blocking.length > 0) {
+			if (stage === "P5" || stage === "P6") return {
+				tool: "novel_revise",
+				args: { chapter },
+				reason: `${detail}; fix it with novel_revise`
+			};
+			return {
+				tool: step.tool,
+				args: this.nextArgs(stage, chapter),
+				reason: `${detail}; ${step.reason}`
+			};
+		}
 		return {
 			tool: step.tool,
-			args,
+			args: this.nextArgs(stage, chapter),
 			reason: step.reason
 		};
 	}
+	/** A computed blocker for the retry budget the next operation would consume. */
+	roundsLimitBlock(snapshot) {
+		const stage = snapshot.pipeline.stage;
+		if (![
+			"P4",
+			"P5",
+			"P6"
+		].includes(stage)) return null;
+		const counter = stage === "P4" ? "review" : stage === "P5" ? "revise" : "check";
+		if (!roundsExhausted(snapshot.pipeline.rounds, counter)) return null;
+		return {
+			code: "PG-11",
+			scope: "rounds",
+			detail: `round limit reached for ${counter} (review ${snapshot.pipeline.rounds.review}, revise ${snapshot.pipeline.rounds.revise}, check ${snapshot.pipeline.rounds.check})`,
+			hint: "call novel_rollback with to_stage P4; the manuscript is kept for reference"
+		};
+	}
+	/** Pipeline blockers plus budget exhaustion, so status/panel cannot say "all clear". */
+	effectiveBlocking(snapshot) {
+		const extra = this.roundsLimitBlock(snapshot);
+		if (extra === null) return snapshot.pipeline.blocking;
+		return snapshot.pipeline.blocking.some((item) => item.code === extra.code) ? snapshot.pipeline.blocking : [...snapshot.pipeline.blocking, extra];
+	}
+	/** Whether the stored brief still signs the current snapshot. */
+	briefIsCurrent(snapshot, stage) {
+		const record = snapshot.pipeline.briefs[stage];
+		if (record === void 0) return false;
+		const context = this.briefContextFor(stage, snapshot, snapshot.pipeline.chapter);
+		return record.digest === this.briefDigest(stage, snapshot, context);
+	}
+	/** Arguments valid for the tool `STAGE_NEXT` recommends at this stage. */
+	nextArgs(stage, chapter) {
+		switch (stage) {
+			case "idle":
+			case "P2":
+			case "done": return {};
+			default: return { chapter };
+		}
+	}
 	async metricsFor(snapshot, chapter) {
 		if (chapter === snapshot.pipeline.chapter && snapshot.text !== null) return countWordMetrics(snapshot.text);
 		const text = await this.readChapter(snapshot, chapter);
@@ -5360,7 +5537,8 @@ var EngineService = class {
 	}
 	async chaptersForExport(snapshot, chapter) {
 		const records = snapshot.chapters.chapters;
-		if (chapter !== void 0 && !records.some((record) => record.num === chapter)) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not in the archive index`, "archive the chapter first, or export all archived chapters");
+		const activeDraft = chapter !== void 0 && chapter === snapshot.pipeline.chapter && snapshot.text !== null;
+		if (chapter !== void 0 && !records.some((record) => record.num === chapter) && !activeDraft) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not archived and is not the active draft`, "archive the chapter first, or pass the active chapter to export its draft");
 		const selected = chapter === void 0 ? records : records.filter((record) => record.num === chapter);
 		const chapters = [];
 		for (const record of selected) {
@@ -5372,7 +5550,7 @@ var EngineService = class {
 				text
 			});
 		}
-		if (chapters.length === 0 && snapshot.text !== null && chapter === void 0) chapters.push({
+		if (chapters.length === 0 && snapshot.text !== null && (chapter === void 0 || chapter === snapshot.pipeline.chapter)) chapters.push({
 			num: snapshot.pipeline.chapter,
 			title: snapshot.plan?.title ?? "未命名",
 			text: snapshot.text
@@ -5419,6 +5597,7 @@ var EngineService = class {
 			timeline: snapshot.timeline,
 			relationships: snapshot.relationships,
 			plan: snapshot.plan,
+			plan_error: snapshot.planError,
 			review: snapshot.review,
 			check: snapshot.check,
 			text: snapshot.text,
@@ -5435,6 +5614,7 @@ var EngineService = class {
 			chapter: snapshot.pipeline.chapter,
 			pipelineStage: snapshot.pipeline.stage,
 			rounds: snapshot.pipeline.rounds,
+			min_score: this.config.quality.minScore,
 			rulepack: `${this.rulepack.name}@${this.rulepack.version}`,
 			context
 		}));
@@ -5509,8 +5689,11 @@ var EngineService = class {
 			throw new EngineBlockedError(result.blocking.every((item) => item.code === "PG-09") ? ERROR_CODES.READING_PROOF_INVALID : ERROR_CODES.GATE_BLOCKED, `${operation} blocked by ${result.blocking.length} gate(s), first: ${first.code} ${first.detail}`, result.blocking, result.blocking.map((item) => `${item.code}: ${item.hint ?? item.detail}`).join(" | "));
 		}
 	}
-	assertChapter(snapshot, chapter) {
+	assertChapterParameter(chapter) {
 		if (!Number.isInteger(chapter) || chapter < 1) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter must be a positive integer (got ${String(chapter)})`);
+	}
+	assertChapter(snapshot, chapter) {
+		this.assertChapterParameter(chapter);
 		if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not the active chapter (${snapshot.pipeline.chapter})`, "archive the active chapter before starting the next one");
 	}
 	async load(root, retries = 1) {
@@ -5554,7 +5737,13 @@ var EngineService = class {
 			if (previous !== null) previousTexts.push(previous);
 		}
 		const planRaw = await store.readText(planChapterFile(chapter));
-		const plan = planRaw === null ? null : parseYamlLoose(planRaw);
+		let plan = null;
+		let planError = null;
+		if (planRaw !== null) try {
+			plan = parsePlanYaml(planRaw, planChapterFile(chapter));
+		} catch (error) {
+			planError = error instanceof Error ? error.message : String(error);
+		}
 		const review = await store.readDoc(reviewFile(chapter), "review");
 		const check = await store.readDoc(checkFile(chapter), "check");
 		const latest = await store.readDoc(joinRel(STATE_DIR, STATE_FILES.pipeline), "pipeline");
@@ -5579,6 +5768,7 @@ var EngineService = class {
 			previousText,
 			previousTexts,
 			plan,
+			planError,
 			review,
 			check
 		};
@@ -5739,6 +5929,7 @@ var EngineService = class {
 			previousText: null,
 			previousTexts: [],
 			plan: null,
+			planError: null,
 			review: null,
 			check: null
 		};
@@ -5753,6 +5944,17 @@ const NEXT_TOOL_BY_BRIEF = {
 	P6: "novel_check",
 	P8: "novel_archive"
 };
+/** The task book each stage must see before its next write operation. */
+const STATUS_BRIEF = {
+	idle: "P1",
+	P2: "P2",
+	P3: "P3",
+	P4: "P4",
+	P5: "P5",
+	P6: "P6",
+	ready_to_archive: "P8",
+	done: "P1"
+};
 const yaml = (value) => stringify(value, { lineWidth: 0 });
 const emptyChapters = () => ({
 	schema_version: 1,
@@ -5778,6 +5980,7 @@ const pipelineWith = (snapshot, revision, patch) => ({
 	rounds: snapshot.pipeline.rounds,
 	briefs: snapshot.pipeline.briefs,
 	blocking: snapshot.pipeline.blocking,
+	review_digest: snapshot.pipeline.review_digest,
 	last_action: snapshot.pipeline.last_action,
 	...patch
 });
@@ -5817,7 +6020,17 @@ const stableJson = (value) => {
 	};
 	return JSON.stringify(normalize(value));
 };
-const parseYamlLoose = (text) => parse(text);
+/** Parse a plan file with a machine code instead of leaking a YAML parser error. */
+const parsePlanYaml = (text, path) => {
+	let parsed;
+	try {
+		parsed = parse(text);
+	} catch (error) {
+		throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${path} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix the plan YAML; the engine will not silently discard a corrupt plan", { cause: error });
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${path} must be a YAML mapping`, "rewrite the plan as a mapping (title, scene_type, narrator, ...)");
+	return parsed;
+};
 /** Line diff with a shared prefix/suffix, enough for revision review. */
 function diffLines(before, after) {
 	const left = before === "" ? [] : before.split("\n");
@@ -5867,7 +6080,10 @@ const asJson = (value, field) => {
 };
 /** Turn an engine failure into the message shape tools surface. */
 const fail = (error) => {
-	if (error instanceof EngineError) throw new Error(`[${error.code}] ${error.message}${error.hint === void 0 ? "" : ` — ${error.hint}`}`);
+	if (error instanceof EngineError) {
+		const blocking = error instanceof EngineBlockedError && error.blocking.length > 0 ? `\nblocking: ${JSON.stringify(error.blocking)}` : "";
+		throw new Error(`[${error.code}] ${error.message}${error.hint === void 0 ? "" : ` — ${error.hint}`}${blocking}`);
+	}
 	throw error;
 };
 /** Wrap an execute body with cancellation and a machine-code error. */
@@ -5921,7 +6137,7 @@ const stringArray = {
 };
 const root = {
 	type: "string",
-	description: "Project root; defaults to the configured root."
+	description: "Project root. When omitted, resolves to the last active project, then the registry active root, then the configured projectRoot; pass it explicitly when several projects exist."
 };
 /**
 * The eighteen tools are thin adapters: narrow parameters, call one service
@@ -5980,8 +6196,11 @@ function createNovelTools(engine) {
 				schema: { type: "json" },
 				render: (_args, raw) => {
 					const value = payload(raw);
+					const active = value.active_chapter ?? value.chapter;
+					const where = active === value.chapter ? `第 ${value.chapter} 章` : `当前第 ${active} 章 · 查询第 ${value.chapter} 章字数`;
 					return text([
-						`《${value.project.title}》 第 ${value.chapter} 章 · ${value.stage}`,
+						`《${value.project.title}》 ${where} · ${value.stage}`,
+						...value.rounds === void 0 ? [] : [`轮次：评审 ${value.rounds.review} / 修订 ${value.rounds.revise} / 校验 ${value.rounds.check}`],
 						value.blocking.length === 0 ? "门控：全部通过" : `门控：${value.blocking.length} 条阻塞`,
 						...value.blocking.map((item) => `  - ${item.code}: ${item.detail}`),
 						`下一步：${value.next.tool} — ${value.next.reason}`
@@ -6017,7 +6236,7 @@ function createNovelTools(engine) {
 				schema: { type: "json" },
 				render: (_args, raw) => {
 					const value = payload(raw);
-					return text(`${value.content}\n\n---\nbrief digest: ${value.digest}${value.context === void 0 ? "" : `\ncontext:\n${JSON.stringify(value.context, null, 2)}`}`);
+					return text(`${value.content}\n\n---\nbrief digest: ${value.digest}${value.fields === void 0 ? "" : `\nfields:\n${JSON.stringify(value.fields)}`}${value.context === void 0 ? "" : `\ncontext:\n${JSON.stringify(value.context)}`}`);
 				}
 			},
 			execute: guarded(async (args) => engine.getBrief({
@@ -6440,6 +6659,11 @@ function createNovelTools(engine) {
 	];
 }
 // src/commands/admin.ts
+/** Registry commands need an explicit root; do not pass undefined into path.resolve. */
+const rootArg = (args) => {
+	if (typeof args.root !== "string" || args.root.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "registry operation requires a non-empty root", "pass {\"root\":\"/absolute/project/path\"}");
+	return args.root;
+};
 /**
 * The ten tools hidden when `tools.mode=core`, plus the explicit
 * registry/settings-pack operations that are command-only by design (§6.8).
@@ -6471,9 +6695,9 @@ const OPERATIONS$1 = {
 	novel_pipeline: (engine, args) => engine.advise(args),
 	novel_state: (engine, args) => engine.queryState(args),
 	novel_registry_list: (engine) => engine.listProjects(),
-	novel_registry_register: (engine, args) => engine.registerProject({ root: args.root }),
-	novel_registry_activate: (engine, args) => engine.setActiveProject({ root: args.root }),
-	novel_registry_forget: (engine, args) => engine.forgetProject({ root: args.root }),
+	novel_registry_register: (engine, args) => engine.registerProject({ root: rootArg(args) }),
+	novel_registry_activate: (engine, args) => engine.setActiveProject({ root: rootArg(args) }),
+	novel_registry_forget: (engine, args) => engine.forgetProject({ root: rootArg(args) }),
 	novel_import: (engine, args) => engine.importPack(args)
 };
 const ADMIN_OPERATION_NAMES = Object.keys(OPERATIONS$1);
@@ -6500,7 +6724,7 @@ function parseAdminArguments(raw, operation) {
 }
 /** Run one hidden operation and render its payload for the command result. */
 async function runAdminOperation(engine, operation, rawArguments) {
-	const handler = OPERATIONS$1[operation];
+	const handler = Object.hasOwn(OPERATIONS$1, operation) ? OPERATIONS$1[operation] : void 0;
 	if (handler === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, `未知子命令 "${operation}"`, `available: ${ADMIN_OPERATION_NAMES.join(", ")}`);
 	const parsed = parseAdminArguments(rawArguments, operation);
 	const result = await handler(engine, parsed.root === void 0 && typeof parsed.project_root === "string" ? {
@@ -7200,6 +7424,7 @@ function apply(ctx, config) {
 		ctx.emit?.(event.name, event.payload);
 	};
 	const engine = new EngineService(engineConfig, () => loadRulepack(), { onEvent: emit });
+	ctx.effect(() => () => engine.dispose(), `${name}: engine dispose`);
 	ctx.provide?.("novelEngine", engine);
 	for (const tool of createNovelTools(engine)) {
 		if (toolsMode === "core" && !CORE_TOOLS.includes(tool.name)) continue;
@@ -7241,4 +7466,4 @@ function connectionFence(scope) {
 	}
 	if (Object.prototype.hasOwnProperty.call(candidate, "connection")) return candidate.connection;
 }
-export { BriefLibrary, Config, ERROR_CODES, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, OPERATIONS, PLATFORMS, SCENE_TYPES, SCHEMA_VERSION, applicableGates, apply, blockedError, briefStageFor, chapterHeading, evaluateGates, faultError, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, projectChapter, projectChapters, projectGates, projectStatus, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, verifyReference };
+export { BriefLibrary, Config, ERROR_CODES, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, OPERATIONS, PLATFORMS, SCENE_TYPES, SCHEMA_VERSION, applicableGates, apply, blockedError, briefStageFor, chapterHeading, evaluateGates, faultError, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, projectChapter, projectChapters, projectGates, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, verifyReference };