dsh-novel-write-engine 0.1.0 → 0.1.2

package/lib/index.js

@@ -350,7 +350,7 @@ function applyExclusions(dimensions, exclusions) {
 	const canonical = (location) => {
 		if (typeof location !== "string") return "";
 		const paragraph = /第\s*(\d+)\s*段/.exec(location);
-		return paragraph === null ? location.trim() : `paragraph:${paragraph[1]}`;
+		return paragraph === null ? location.trim() : `paragraph:${Number(paragraph[1])}`;
 	};
 	const deductionsOf = (dimension) => {
 		if (typeof dimension !== "object" || dimension === null) return [];
@@ -648,27 +648,28 @@ function nextStage(stage, op, openBlockers) {
 function availableOps(stage) {
 	return TRANSITIONS.filter((transition) => transition.from === stage).map((transition) => transition.op);
 }
-/** Whether the review/revise retry budget is spent. */
-function roundsExhausted(rounds) {
+/** Whether one retry budget (or, without a counter, any budget) is spent. */
+function roundsExhausted(rounds, counter) {
+	if (counter !== void 0) return rounds[counter] >= LIMITS.maxRounds;
 	return rounds.review >= LIMITS.maxRounds || rounds.revise >= LIMITS.maxRounds || rounds.check >= LIMITS.maxRounds;
 }
 /** The operation a stage expects next, used by `advise` and the status `next` block. */
 const STAGE_NEXT = {
 	idle: {
 		tool: "novel_plan_world",
-		reason: "call novel_brief P1, then submit the world plan"
+		reason: "submit the world plan"
 	},
 	P2: {
 		tool: "novel_plan_chapter",
-		reason: "call novel_brief P2, then submit the chapter plan"
+		reason: "submit the chapter plan"
 	},
 	P3: {
 		tool: "novel_write_draft",
-		reason: "call novel_brief P3, then submit the draft"
+		reason: "submit the draft"
 	},
 	P4: {
 		tool: "novel_review",
-		reason: "call novel_brief P4, then submit the scored review"
+		reason: "submit the scored review"
 	},
 	P5: {
 		tool: "novel_revise",
@@ -676,11 +677,11 @@ const STAGE_NEXT = {
 	},
 	P6: {
 		tool: "novel_check",
-		reason: "run the consistency check, then archive"
+		reason: "run the consistency check"
 	},
 	ready_to_archive: {
-		tool: "novel_brief",
-		reason: "all gates pass; call novel_brief P8, then archive the chapter"
+		tool: "novel_archive",
+		reason: "all gates pass; archive the chapter with its state_delta"
 	},
 	done: {
 		tool: "novel_plan_world",
@@ -1022,10 +1023,16 @@ const adjectiveDensity = (ctx) => {
 	return [v(SEMANTIC_RULES.ADJECTIVE_DENSITY, "advisory", 1, `adjectives every ${(100 / density).toFixed(1)} chars; limit is ${max}%`)];
 };
 const slidingWindows = (text, size) => {
-	if (text.length <= size) return [text];
+	const positions = [];
+	for (let index = 0; index < text.length; index += 1) if (/\S/.test(text[index])) positions.push(index);
+	if (positions.length <= size) return [text];
 	const windows = [];
-	for (let start = 0; start + size <= text.length; start += 1) windows.push(text.slice(start, start + size));
-	const tail = text.slice(text.length - size);
+	for (let startIndex = 0; startIndex + size <= positions.length; startIndex += 1) {
+		const start = positions[startIndex];
+		const end = startIndex + size < positions.length ? positions[startIndex + size] : text.length;
+		windows.push(text.slice(start, end));
+	}
+	const tail = text.slice(positions[positions.length - size]);
 	if (windows[windows.length - 1] !== tail) windows.push(tail);
 	return windows;
 };
@@ -1063,7 +1070,23 @@ const duplicateParagraph = (ctx) => {
 	const previous = ctx.evidence.previousTexts.length > 0 ? ctx.evidence.previousTexts : ctx.evidence.previousText === null ? [] : [ctx.evidence.previousText];
 	if (previous.length === 0) return [];
 	const minChars = ctx.rulepack.crosschapter.duplicate_min_chars;
-	const longParagraphs = (text) => splitParagraphs(text).filter((paragraph) => Array.from(paragraph.replace(/\s+/g, "")).length >= minChars).join("\n\n");
+	const longParagraphs = (text) => {
+		const units = [];
+		let buffer = "";
+		for (const paragraph of splitParagraphs(text)) {
+			buffer += paragraph;
+			if (Array.from(buffer.replace(/\s+/g, "")).length >= minChars) {
+				units.push(buffer);
+				buffer = "";
+			}
+		}
+		if (buffer !== "") {
+			if (units.length === 0) {
+				if (Array.from(buffer.replace(/\s+/g, "")).length >= minChars) units.push(buffer);
+			} else units[units.length - 1] += buffer;
+		}
+		return units.join("\n\n");
+	};
 	const best = maxParagraphSimilarity(longParagraphs(ctx.text), previous.map((text) => longParagraphs(text)).filter((text) => text !== ""));
 	if (best < ctx.rulepack.crosschapter.duplicate_advisory) return [];
 	const severity = best >= ctx.rulepack.crosschapter.duplicate_similarity ? "blocker" : "advisory";
@@ -1087,10 +1110,18 @@ const revisitedTooSoon = (ctx) => {
 	}).map((item) => v(CROSS_RULES.FS_REVISITED_TOO_SOON, "advisory", 1, `foreshadow ${item.id} reappears after ${ctx.chapter - item.last_touched} chapters (minimum ${min})`));
 };
 const resourceMismatch = (ctx) => {
-	return (ctx.summary?.resource_changes ?? []).flatMap((change) => {
+	const changes = ctx.summary?.resource_changes ?? [];
+	const positive = /(增加|多了|得到|获得|赚|加|上升|增|\+)/;
+	const negative = /(减少|少了|失去|消耗|花|损失|下降|减|-|−)/;
+	return changes.flatMap((change) => {
 		if (change.delta === 0) return [];
-		const magnitude = String(Math.abs(change.delta));
-		return ctx.text.includes(change.character) && ctx.text.includes(magnitude) ? [] : [v(CROSS_RULES.RESOURCE_MISMATCH, "advisory", 1, `${change.character}'s ${change.resource} change (${change.delta}) is not stated in the text`)];
+		const magnitude = Math.abs(change.delta);
+		return [...ctx.text.matchAll(/\d+/g)].some((match) => {
+			if (Number(match[0]) !== magnitude) return false;
+			const index = match.index ?? 0;
+			const window = ctx.text.slice(Math.max(0, index - 80), Math.min(ctx.text.length, index + match[0].length + 80));
+			return window.includes(change.character) && window.includes(change.resource) && (change.delta > 0 ? positive : negative).test(window);
+		}) ? [] : [v(CROSS_RULES.RESOURCE_MISMATCH, "advisory", 1, `${change.character}'s ${change.resource} change (${change.delta}) is not stated with the right sign in the text`)];
 	});
 };
 const timeRegression = (ctx) => {
@@ -1246,6 +1277,11 @@ const lexiconCodes = /* @__PURE__ */ new Set([
 	"GOD_VIEW",
 	"CONCLUSION_FIRST"
 ]);
+const integrityCodes = new Set(Object.values(CROSS_RULES));
+/** Which runCheck scope owns one machine finding. */
+function scopeOfRule(code) {
+	return integrityCodes.has(code) ? "integrity" : "content";
+}
 /**
 * Run the deterministic pass. Format and punctuation run before the lexicon so
 * the report reads in the order an author fixes things; the lexicon runs last
@@ -1340,7 +1376,7 @@ function resolveInside(root, relativePath) {
 	const absoluteRoot = resolve(root);
 	const absolute = resolve(absoluteRoot, relativePath);
 	const inside = relative(absoluteRoot, absolute);
-	if (inside === "" || inside.startsWith("..") || isAbsolute(inside)) throw new EngineFaultError(ERROR_CODES.PATH_ESCAPE, `refusing path "${relativePath}": escapes project root`);
+	if (inside === "" || inside === ".." || inside.startsWith(`..${sep}`) || isAbsolute(inside)) throw new EngineFaultError(ERROR_CODES.PATH_ESCAPE, `refusing path "${relativePath}": escapes project root`);
 	return absolute;
 }
 // src/store/migrate.ts
@@ -1415,6 +1451,7 @@ const SCHEMAS = {
 		rounds: req("object"),
 		briefs: req("object"),
 		blocking: req("array"),
+		review_digest: f("string"),
 		last_action: f("any")
 	},
 	chapters: { chapters: req("array") },
@@ -1726,10 +1763,11 @@ function narrow(kind, value) {
 	if (typeof version !== "number" || !Number.isInteger(version)) return invalid$1(kind, "missing schema_version");
 	if (version > 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_TOO_NEW, `refusing ${kind}: schema_version ${version} is newer than supported 1`, "upgrade the plugin; the file was left untouched");
 	if (version !== 1) invalid$1(kind, `unsupported schema_version ${version}`);
+	if (!Object.hasOwn(SCHEMAS, kind)) invalid$1(kind, `unknown document kind "${String(kind)}"`);
 	const schema = SCHEMAS[kind];
 	for (const key of Object.keys(record)) {
 		if (key === "schema_version") continue;
-		if (!(key in schema)) invalid$1(kind, `unknown key "${key}"`);
+		if (!Object.hasOwn(schema, key)) invalid$1(kind, `unknown key "${key}"`);
 	}
 	for (const [key, field] of Object.entries(schema)) {
 		const fieldValue = record[key];
@@ -1836,7 +1874,12 @@ var FsStore = class {
 	async readDoc(relativePath, kind) {
 		const text = await this.readText(relativePath);
 		if (text === null) return null;
-		const parsed = parse(text);
+		let parsed;
+		try {
+			parsed = parse(text);
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${relativePath} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix the YAML syntax; the engine will not rewrite a document it cannot parse", { cause: error });
+		}
 		return narrow(kind, (typeof parsed === "object" && parsed !== null && typeof parsed.schema_version === "number" ? parsed.schema_version : 1) < 1 ? migrateDocument(parsed, MIGRATIONS, 1) : parsed);
 	}
 	/** Write text atomically: temp file, fsync, rename, directory fsync. */
@@ -2080,6 +2123,9 @@ async function recoverPending(store) {
 /** Throw before a write when the journal or the last commit is inconsistent. */
 async function assertJournalConsistent(store) {
 	await recoverPending(store);
+	const { records } = await readJournal(store);
+	const committed = new Set(records.filter((record) => record.status === "committed" && record.op !== "lock_reclaimed").map((record) => record.txid));
+	for (const entry of await store.list(STAGING_DIR)) if (committed.has(entry)) await store.removeTree(joinRel(STAGING_DIR, entry)).catch(() => void 0);
 	const { malformed, mismatches } = await reconcileJournal(store);
 	assertJournalHealthy(malformed);
 	if (mismatches.length > 0) {
@@ -2113,6 +2159,8 @@ var KeyedMutex = class {
 		return this.tails.size;
 	}
 };
+/** Nonces this process currently holds; same-pid locks not in this set are stale. */
+const liveNonces = /* @__PURE__ */ new Set();
 const isLockRecord = (value) => typeof value === "object" && value !== null && typeof value.pid === "number" && typeof value.startedAt === "string" && (value.nonce === void 0 || typeof value.nonce === "string");
 const processAlive = (pid) => {
 	if (pid === process.pid) return true;
@@ -2155,6 +2203,7 @@ var FileLock = class {
 			}
 			await handle.close();
 			this.held = record;
+			if (record.nonce !== void 0) liveNonces.add(record.nonce);
 			return;
 		} catch (error) {
 			if (error.code !== "EEXIST") throw error;
@@ -2168,7 +2217,8 @@ var FileLock = class {
 		const record = await this.read();
 		const held = this.held;
 		this.held = null;
-		if (record !== null && held !== null && record.pid === held.pid && record.nonce === held.nonce) await promises.rm(this.absolutePath, { force: true });
+		if (held?.nonce !== void 0) liveNonces.delete(held.nonce);
+		if (record !== null && held !== null && record.pid === held.pid && record.nonce === held.nonce) await promises.rm(this.absolutePath, { force: true }).catch(() => void 0);
 	}
 	/** Read the current lock record, or null when absent/held by a foreign process. */
 	async read() {
@@ -2199,30 +2249,25 @@ var FileLock = class {
 		}
 		if (record === null) {
 			if (Date.now() - mtimeMs <= this.staleMs) return false;
-		} else {
-			const age = Date.now() - Date.parse(record.startedAt);
-			if (!(!Number.isFinite(age) || !processAlive(record.pid))) return false;
-		}
+		} else if (record.pid === process.pid) {
+			if (record.nonce !== void 0 && liveNonces.has(record.nonce)) return false;
+		} else if (processAlive(record.pid)) return false;
 		const claimPath = `${this.absolutePath}.reclaim-${randomUUID()}`;
 		try {
-			await promises.rename(this.absolutePath, claimPath);
+			await promises.link(this.absolutePath, claimPath);
 		} catch (error) {
 			if (error.code === "ENOENT") return true;
 			throw error;
 		}
-		let moved = null;
-		moved = await this.readAt(claimPath);
+		const moved = await this.readAt(claimPath);
 		const claimMtime = await promises.stat(claimPath).then((info) => info.mtimeMs).catch(() => Date.now());
 		if (!(record === null ? moved === null && Date.now() - claimMtime > this.staleMs : moved !== null && moved.pid === record.pid && moved.startedAt === record.startedAt && moved.nonce === record.nonce)) {
-			try {
-				await promises.link(claimPath, this.absolutePath);
-				await promises.rm(claimPath, { force: true });
-			} catch {
-				await promises.rm(claimPath, { force: true }).catch(() => void 0);
-			}
+			await promises.rm(claimPath, { force: true }).catch(() => void 0);
 			return false;
 		}
-		await promises.rm(claimPath, { force: true });
+		const current = await this.readAt(this.absolutePath);
+		if (record === null ? current === null : current !== null && current.pid === record.pid && current.startedAt === record.startedAt && current.nonce === record.nonce) await promises.rm(this.absolutePath, { force: true }).catch(() => void 0);
+		await promises.rm(claimPath, { force: true }).catch(() => void 0);
 		await this.onReclaim?.(record);
 		return true;
 	}
@@ -2294,6 +2339,12 @@ async function restoreTargets(store, renamed, before) {
 * that terminal row).
 */
 async function runTransaction(store, input) {
+	const staged = /* @__PURE__ */ new Set();
+	for (const file of input.files) {
+		if (staged.has(file.path)) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `transaction ${input.txid} stages ${file.path} more than once`, "each target may appear once per transaction; merge the writes before staging");
+		if (file.text !== void 0 && file.bytes !== void 0) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `transaction ${input.txid} stages both text and bytes for ${file.path}`, "choose one representation per staged file");
+		staged.add(file.path);
+	}
 	const staging = stagingDir(input.txid);
 	const expected = /* @__PURE__ */ new Map();
 	const before = /* @__PURE__ */ new Map();
@@ -2416,8 +2467,13 @@ var ProjectRegistry = class {
 	async read() {
 		const text = await this.store.readText(REGISTRY_FILE);
 		if (text === null) return empty();
-		const raw = parse(text);
-		if (typeof raw !== "object" || raw === null) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not an object`);
+		let raw;
+		try {
+			raw = parse(text);
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix or delete the registry file; projects on disk are unaffected", { cause: error });
+		}
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not an object`);
 		const record = raw;
 		if (record.schema_version !== 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} has an unsupported schema_version`);
 		return {
@@ -2786,11 +2842,7 @@ var BriefLibrary = class {
 		};
 	}
 };
-const hash = (text) => {
-	let value = 0;
-	for (let index = 0; index < text.length; index += 1) value = Math.imul(31, value) + text.charCodeAt(index) | 0;
-	return `fnv:${(value >>> 0).toString(16)}`;
-};
+const hash = (text) => `sha256:${createHash("sha256").update(text, "utf8").digest("hex")}`;
 // src/engine/context.ts
 const compactSummary = (row) => ({
 	num: row.num,
@@ -2813,7 +2865,7 @@ const pendingForeshadows = (ledger) => ledger.items.filter((item) => item.status
 * pack is the minimum project state the model needs to apply them without
 * guessing who exists, what was locked, or what the previous chapter ended on.
 */
-function briefContext(input) {
+function unbudgetedBriefContext(input) {
 	const previousEnding = input.previousText === null ? "" : input.previousText.trim().slice(-400);
 	const base = {
 		project: {
@@ -2825,7 +2877,10 @@ function briefContext(input) {
 		chapter: input.chapter,
 		stage: input.pipeline.stage,
 		scene_distribution: sceneDistribution(input.chapters),
-		previous_ending: previousEnding
+		previous_ending: previousEnding,
+		...input.plan_error === void 0 || input.plan_error === null ? {} : { plan_error: input.plan_error },
+		...input.review_error === void 0 || input.review_error === null ? {} : { review_error: input.review_error },
+		...input.check_error === void 0 || input.check_error === null ? {} : { check_error: input.check_error }
 	};
 	switch (input.stage) {
 		case "P1": return {
@@ -2853,6 +2908,7 @@ function briefContext(input) {
 			...base,
 			text: input.text ?? "",
 			summary: input.plan?.summary ?? null,
+			plan: input.plan,
 			machine: input.machine ?? null,
 			characters: input.characters.characters,
 			check: input.check,
@@ -2864,6 +2920,7 @@ function briefContext(input) {
 		case "P5": return {
 			...base,
 			text: input.text ?? "",
+			plan: input.plan,
 			machine: input.machine ?? null,
 			review: input.review,
 			issues: input.review?.issues ?? []
@@ -2871,6 +2928,7 @@ function briefContext(input) {
 		case "P6": return {
 			...base,
 			text: input.text ?? "",
+			plan: input.plan,
 			machine: input.machine ?? null,
 			characters: input.characters.characters,
 			world: input.world,
@@ -2888,6 +2946,7 @@ function briefContext(input) {
 		};
 		case "P8": return {
 			...base,
+			plan: input.plan,
 			check: input.check,
 			review: input.review,
 			summary: input.plan?.summary ?? null,
@@ -2897,6 +2956,238 @@ function briefContext(input) {
 		default: return base;
 	}
 }
+/** Per-stage context budgets, measured in JSON characters (metadata excluded). */
+const CONTEXT_BUDGETS = {
+	P1: 6e3,
+	P2: 8e3,
+	P3: 16e3,
+	P4: 24e3,
+	P5: 24e3,
+	P6: 32e3,
+	P8: 12e3
+};
+const asRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value) ? value : null;
+const asArray = (value) => Array.isArray(value) ? value : null;
+const jsonSize = (value) => Array.from(JSON.stringify(value)).length;
+const mentionScore = (mentioned, value) => value !== "" && mentioned.includes(value) ? 1 : 0;
+/**
+* Apply the stage budget after the stage-specific pack exists. Protected keys
+* are never candidates; optional ledgers are trimmed round-robin so one large
+* list cannot starve every other kind of context.
+*/
+function withContextBudget(stage, raw) {
+	const context = structuredClone(raw);
+	const budget = CONTEXT_BUDGETS[stage] ?? 8e3;
+	const protectedKeys = [
+		"project",
+		"chapter",
+		"stage",
+		"previous_ending",
+		"text",
+		"plan",
+		"precheck",
+		"review",
+		"check",
+		"machine",
+		"summary"
+	];
+	const mentioned = [
+		typeof context.text === "string" ? context.text : "",
+		JSON.stringify(context.plan ?? ""),
+		JSON.stringify(context.review ?? ""),
+		JSON.stringify(context.check ?? ""),
+		JSON.stringify(context.summary ?? "")
+	].join("\n");
+	const omitted = {};
+	const truncated = /* @__PURE__ */ new Set();
+	const candidates = [];
+	const stableKey = (value) => {
+		const row = asRecord(value);
+		if (row === null) return JSON.stringify(value) ?? "";
+		for (const key of [
+			"id",
+			"name",
+			"title"
+		]) {
+			const item = row[key];
+			if (typeof item === "string" && item !== "") return item;
+		}
+		return JSON.stringify(row);
+	};
+	const compareText = (left, right) => left < right ? -1 : left > right ? 1 : 0;
+	const addArray = (key, array, rank, tie = stableKey) => {
+		let prepared = false;
+		const sort = () => {
+			if (prepared) return;
+			prepared = true;
+			array()?.sort((left, right) => {
+				const byRank = rank(right) - rank(left);
+				return byRank !== 0 ? byRank : compareText(tie(left), tie(right));
+			});
+		};
+		candidates.push({
+			key,
+			count: () => array()?.length ?? 0,
+			trim: () => {
+				sort();
+				const list = array();
+				if (list === null || list.length === 0) return false;
+				list.pop();
+				return true;
+			},
+			prepare: sort
+		});
+	};
+	const addObject = (key, map, rank) => {
+		let keys = null;
+		const ensure = () => {
+			const target = map();
+			keys ??= target === null ? [] : Object.keys(target);
+			keys.sort((left, right) => {
+				const byRank = rank(right, map()?.[right]) - rank(left, map()?.[left]);
+				return byRank !== 0 ? byRank : compareText(left, right);
+			});
+			return keys;
+		};
+		candidates.push({
+			key,
+			count: () => Object.keys(map() ?? {}).length,
+			trim: () => {
+				const target = map();
+				if (target === null) return false;
+				const keyToDelete = ensure().pop();
+				if (keyToDelete === void 0 || !Object.hasOwn(target, keyToDelete)) return false;
+				delete target[keyToDelete];
+				return true;
+			},
+			prepare: ensure
+		});
+	};
+	const chapter = (value) => asRecord(value)?.num ?? 0;
+	addArray("characters", () => asArray(context.characters), (value) => {
+		const row = asRecord(value);
+		const name = typeof row?.name === "string" ? row.name : "";
+		return mentionScore(mentioned, name) * 1e3 + Number(row?.first_appearance ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return typeof row?.name === "string" ? row.name : stableKey(value);
+	});
+	const world = asRecord(context.world);
+	for (const key of [
+		"locations",
+		"abilities",
+		"artifacts",
+		"factions",
+		"rules"
+	]) addArray(`world.${key}`, () => asArray(world?.[key]), (value) => {
+		const row = asRecord(value);
+		const name = typeof row?.name === "string" ? row.name : "";
+		return mentionScore(mentioned, name) * 1e3 + Number(row?.first_appearance ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return typeof row?.name === "string" ? row.name : stableKey(value);
+	});
+	const locks = asRecord(context.locks);
+	for (const key of ["characters", "locations"]) addObject(`locks.${key}`, () => asRecord(locks?.[key]), (name) => mentionScore(mentioned, name) * 1e3);
+	addArray("open_foreshadows", () => asArray(context.open_foreshadows), (value) => {
+		const row = asRecord(value);
+		const title = typeof row?.title === "string" ? row.title : "";
+		return mentionScore(mentioned, title) * 1e3 - Number(row?.last_touched ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return `${typeof row?.title === "string" ? row.title : ""}\u0000${typeof row?.id === "string" ? row.id : ""}`;
+	});
+	const foreshadows = asRecord(context.foreshadows);
+	addArray("foreshadows", () => asArray(foreshadows?.items), (value) => {
+		const row = asRecord(value);
+		const title = typeof row?.title === "string" ? row.title : "";
+		const id = typeof row?.id === "string" ? row.id : "";
+		return Math.max(mentionScore(mentioned, title), mentionScore(mentioned, id)) * 1e3 - Number(row?.last_touched ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return `${typeof row?.id === "string" ? row.id : ""}\u0000${typeof row?.title === "string" ? row.title : ""}`;
+	});
+	addArray("timeline", () => asArray(context.timeline), (value) => {
+		const row = asRecord(value);
+		const text = `${String(row?.description ?? "")}${String(row?.location ?? "")}`;
+		return mentionScore(mentioned, text) * 1e3 + Number(row?.chapter ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return `${typeof row?.id === "string" ? row.id : ""}\u0000${String(row?.chapter ?? "")}`;
+	});
+	const relationships = asRecord(context.relationships);
+	addArray("relationships", () => asArray(relationships?.items), (value) => {
+		const row = asRecord(value);
+		const text = `${String(row?.a ?? "")}${String(row?.b ?? "")}`;
+		return mentionScore(mentioned, text) * 1e3 + Number(row?.since ?? 0);
+	}, (value) => {
+		const row = asRecord(value);
+		return `${typeof row?.id === "string" ? row.id : ""}\u0000${String(row?.a ?? "")}\u0000${String(row?.b ?? "")}`;
+	});
+	addArray("recent_summaries", () => asArray(context.recent_summaries), (value) => chapter(value), (value) => String(chapter(value)).padStart(8, "0"));
+	addArray("score_history", () => asArray(context.score_history), (value) => Number(asRecord(value)?.num ?? 0), (value) => String(Number(asRecord(value)?.num ?? 0)).padStart(8, "0"));
+	for (const candidate of candidates) candidate.prepare();
+	const used = () => {
+		const measure = { ...context };
+		delete measure.context_meta;
+		return jsonSize(measure);
+	};
+	const buildMeta = (finalUsed) => ({
+		version: 1,
+		stage,
+		budget,
+		used: finalUsed,
+		over_budget: false,
+		protected: protectedKeys,
+		truncated: [...truncated].sort(),
+		omitted: Object.fromEntries(Object.entries(omitted).sort(([left], [right]) => left.localeCompare(right))),
+		strategy: "stage-v1"
+	});
+	const totalWith = (finalUsed, meta) => jsonSize({
+		...context,
+		context_meta: {
+			...meta,
+			used: finalUsed
+		}
+	});
+	let finalUsed = used();
+	let metaBase = buildMeta(finalUsed);
+	while (totalWith(finalUsed, metaBase) > budget) {
+		let changed = false;
+		for (const candidate of candidates) {
+			finalUsed = used();
+			metaBase = buildMeta(finalUsed);
+			if (totalWith(finalUsed, metaBase) <= budget) break;
+			if (candidate.count() === 0) continue;
+			candidate.prepare();
+			if (candidate.trim()) {
+				omitted[candidate.key] = (omitted[candidate.key] ?? 0) + 1;
+				truncated.add(candidate.key);
+				changed = true;
+			}
+		}
+		finalUsed = used();
+		metaBase = buildMeta(finalUsed);
+		if (!changed) break;
+	}
+	const overBudget = totalWith(finalUsed, metaBase) > budget;
+	const meta = {
+		...metaBase,
+		over_budget: overBudget
+	};
+	return {
+		...context,
+		context_meta: meta
+	};
+}
+/**
+* Build the stage-specific context pack plus the deterministic budget report.
+* The budget report is part of the brief digest; a truncated pack cannot be
+* silently mistaken for the full ledger set.
+*/
+function briefContext(input) {
+	return withContextBudget(input.stage, unbudgetedBriefContext(input));
+}
 // src/engine/state-delta.ts
 const SECTIONS = [
 	"characters",
@@ -2911,6 +3202,15 @@ const ACTIONS = [
 	"no_change"
 ];
 const isRecord = (value) => typeof value === "object" && value !== null && !Array.isArray(value);
+/** Define an own property even for names such as `__proto__` or `constructor`. */
+const setOwn = (record, key, value) => {
+	Object.defineProperty(record, key, {
+		value,
+		enumerable: true,
+		configurable: true,
+		writable: true
+	});
+};
 function fail$1(detail) {
 	throw new EngineInputError(ERROR_CODES.DELTA_UNVERIFIED, `state_delta is incomplete: ${detail}`, "declare every entity the chapter touched as created, updated, or no_change with a reason");
 }
@@ -2961,7 +3261,7 @@ function applyStateDelta(input) {
 	const foreshadows = structuredClone(input.foreshadows);
 	const timeline = structuredClone(input.timeline);
 	const relationships = structuredClone(input.relationships);
-	const assigned = {};
+	const assigned = Object.create(null);
 	const appeared = [...new Set(summary.characters_appeared)];
 	const byName = new Map(characters.characters.map((character) => [character.name, character]));
 	const narrator = input.narrator ?? "";
@@ -2973,7 +3273,7 @@ function applyStateDelta(input) {
 	};
 	for (const name of appeared) {
 		if (!appearsInManuscript(name)) fail$1(`character "${name}" is listed in characters_appeared but does not appear in the manuscript`);
-		if (delta.characters[name] === void 0) fail$1(`character "${name}" appeared in the chapter but is not declared in characters`);
+		if (!Object.hasOwn(delta.characters, name)) fail$1(`character "${name}" appeared in the chapter but is not declared in characters`);
 	}
 	for (const [name, raw] of Object.entries(delta.characters)) {
 		const declared = entry(raw, `characters.${name}`);
@@ -3020,7 +3320,7 @@ function applyStateDelta(input) {
 	}
 	for (const change of summary.resource_changes) {
 		if (!isRecord(change) || typeof change.character !== "string" || change.character.trim() === "" || typeof change.resource !== "string" || change.resource.trim() === "" || !Number.isInteger(change.delta) || typeof change.reason !== "string" || change.reason.trim() === "") fail$1("every resource_changes entry must declare character/resource/delta/reason");
-		if (delta.characters[change.character] === void 0) fail$1(`resource change for "${change.character}" has no character declaration`);
+		if (!Object.hasOwn(delta.characters, change.character)) fail$1(`resource change for "${change.character}" has no character declaration`);
 		if (delta.characters[change.character].action === "no_change") fail$1(`resource change for "${change.character}" conflicts with a no_change declaration`);
 		const character = byName.get(change.character);
 		if (character === void 0) fail$1(`resource change names unknown character "${change.character}"`);
@@ -3067,8 +3367,8 @@ function applyStateDelta(input) {
 		["artifact", summary.new_elements.artifacts]
 	]) for (const name of names) {
 		if (!input.text.includes(name)) fail$1(`summary lists new ${kind} "${name}" but the manuscript never mentions it`);
+		if (!Object.hasOwn(delta.world, name)) fail$1(`summary lists new ${kind} "${name}" but world.${name} is not declared`);
 		const declared = delta.world[name];
-		if (declared === void 0) fail$1(`summary lists new ${kind} "${name}" but world.${name} is not declared`);
 		if (declared.action !== "created") fail$1(`world.${name} is new in this chapter; its action must be created`);
 		if (declared.kind !== void 0 && declared.kind !== kind) fail$1(`world.${name} is declared as ${declared.kind} but the summary lists it as ${kind}`);
 	}
@@ -3086,9 +3386,19 @@ function applyStateDelta(input) {
 		}
 		const existing = findWorld(name);
 		if (declared.action === "created") {
+			if (name.trim() === "") fail$1("a created world entity has an empty name");
 			if (existing !== null) fail$1(`world entity "${name}" already exists; use updated or no_change`);
+			if (!input.text.includes(name)) fail$1(`world entity "${name}" is created but does not appear in the manuscript`);
 			const kind = declared.kind ?? expected;
 			if (kind === null) fail$1(`world.${name} must declare kind (location|ability|artifact|faction|rule)`);
+			if (![
+				"location",
+				"ability",
+				"artifact",
+				"faction",
+				"rule"
+			].includes(kind)) fail$1(`world.${name} has unknown kind "${String(kind)}"`);
+			if (expected === null && (kind === "location" || kind === "ability" || kind === "artifact")) fail$1(`world.${name} is created but is not listed in summary.new_elements`);
 			if (kind === "location") world.locations.push({
 				name,
 				first_appearance: chapter,
@@ -3099,10 +3409,10 @@ function applyStateDelta(input) {
 				changes: []
 			});
 			else world[kind === "ability" ? "abilities" : kind === "artifact" ? "artifacts" : kind === "faction" ? "factions" : "rules"].push({
+				...declared.detail ?? {},
 				name,
 				first_appearance: chapter,
-				description: declared.description ?? "",
-				...declared.detail ?? {}
+				description: declared.description ?? ""
 			});
 			continue;
 		}
@@ -3124,35 +3434,45 @@ function applyStateDelta(input) {
 			}
 		}
 	}
-	for (const name of appeared) if (locks.characters[name] === void 0) {
+	for (const name of appeared) if (!Object.hasOwn(locks.characters, name)) {
 		const character = byName.get(name);
-		locks.characters[name] = {
+		setOwn(locks.characters, name, {
 			first_appearance: character.first_appearance,
 			locked_at: chapter,
 			appearance: appearanceOf(input.text, name, name === narratorName ? narratorAliases : [])
-		};
+		});
 	}
-	for (const location of world.locations) if (locks.locations[location.name] === void 0) locks.locations[location.name] = {
+	for (const location of world.locations) if (!Object.hasOwn(locks.locations, location.name)) setOwn(locks.locations, location.name, {
 		first_appearance: location.first_appearance,
 		locked_at: chapter,
 		layout: location.layout,
 		capacity: location.capacity
-	};
+	});
 	locks.locked_at_chapter = Math.max(locks.locked_at_chapter, chapter);
 	const byId = new Map(foreshadows.items.map((item) => [item.id, item]));
 	const plantedKeys = /* @__PURE__ */ new Set();
 	for (const plant of summary.foreshadows.planted) {
 		if (plant.key.trim() === "") fail$1("a planted foreshadow has an empty key");
+		if (byId.has(plant.key)) fail$1(`foreshadow key "${plant.key}" collides with an existing id`);
 		if (plantedKeys.has(plant.key)) fail$1(`foreshadow key "${plant.key}" is planted twice`);
 		plantedKeys.add(plant.key);
+		if (!Object.hasOwn(delta.foreshadows, plant.key)) fail$1(`foreshadows.${plant.key} is not declared`);
 		const declared = entry(delta.foreshadows[plant.key], `foreshadows.${plant.key}`);
 		requireReason(declared, `foreshadows.${plant.key}`);
 		if (declared.action !== "created") fail$1(`foreshadows.${plant.key} is planted; its action must be created`);
+		if (typeof plant.title !== "string" || plant.title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty summary title`);
+		if (!input.text.includes(plant.title)) fail$1(`planted foreshadow summary title "${plant.title}" does not appear in the manuscript`);
+		if (declared.title !== void 0 && typeof declared.title !== "string") fail$1(`foreshadows.${plant.key}.title must be a string`);
+		const title = declared.title ?? plant.title;
+		if (title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty title`);
+		if (!input.text.includes(title)) fail$1(`planted foreshadow "${title}" does not appear in the manuscript`);
 		const allocated = allocateIds("FS", foreshadows.next_seq, 1);
+		const id = allocated.ids[0];
+		if (byId.has(id)) fail$1(`foreshadows.next_seq is behind the ledger; ${id} already exists`);
 		foreshadows.next_seq = allocated.nextSeq;
 		const item = {
-			id: allocated.ids[0],
-			title: declared.title ?? plant.title,
+			id,
+			title,
 			planted: chapter,
 			last_touched: chapter,
 			status: "planted",
@@ -3165,12 +3485,14 @@ function applyStateDelta(input) {
 		assigned[plant.key] = item.id;
 	}
 	for (const advance of summary.foreshadows.advanced) {
+		if (!Object.hasOwn(delta.foreshadows, advance.key)) fail$1(`foreshadows.${advance.key} is not declared`);
 		const declared = entry(delta.foreshadows[advance.key], `foreshadows.${advance.key}`);
 		requireReason(declared, `foreshadows.${advance.key}`);
 		if (declared.action !== "updated") fail$1(`foreshadows.${advance.key} is advanced; its action must be updated`);
 		const id = assigned[advance.key] ?? advance.key;
 		const item = byId.get(id);
 		if (item === void 0) fail$1(`foreshadow "${advance.key}" does not exist; no fallback is allowed`);
+		if (item.status === "resolved") fail$1(`foreshadow "${advance.key}" is already resolved`);
 		item.last_touched = chapter;
 		item.status = "advanced";
 		item.advance_log.push({
@@ -3181,12 +3503,14 @@ function applyStateDelta(input) {
 		assigned[advance.key] = item.id;
 	}
 	for (const key of summary.foreshadows.resolved) {
+		if (!Object.hasOwn(delta.foreshadows, key)) fail$1(`foreshadows.${key} is not declared`);
 		const declared = entry(delta.foreshadows[key], `foreshadows.${key}`);
 		requireReason(declared, `foreshadows.${key}`);
 		if (declared.action !== "updated") fail$1(`foreshadows.${key} is resolved; its action must be updated`);
 		const id = assigned[key] ?? key;
 		const item = byId.get(id);
 		if (item === void 0) fail$1(`foreshadow "${key}" does not exist; no fallback is allowed`);
+		if (item.status === "resolved") fail$1(`foreshadow "${key}" is already resolved`);
 		item.status = "resolved";
 		item.last_touched = chapter;
 		item.resolved_at = chapter;
@@ -3218,8 +3542,9 @@ function applyStateDelta(input) {
 		const declared = entry(delta.timeline[key], `timeline.${key}`);
 		if (declared.action !== "created") fail$1(`timeline.${key} is a new event; its action must be created`);
 		const allocated = allocateIds("TE", timeline.next_seq, 1);
-		timeline.next_seq = allocated.nextSeq;
 		const id = allocated.ids[0];
+		if (timeline.items.some((item) => item.id === id)) fail$1(`timeline.next_seq is behind the ledger; ${id} already exists`);
+		timeline.next_seq = allocated.nextSeq;
 		timeline.items.push({
 			id,
 			chapter,
@@ -3246,8 +3571,9 @@ function applyStateDelta(input) {
 			if (existing !== void 0) fail$1(`relationship ${pairKey(a, b)} already exists`);
 			if (typeof declared.type !== "string" || declared.type.trim() === "") fail$1(`relationships.${key} is created but has no type`);
 			const allocated = allocateIds("RL", relationships.next_seq, 1);
-			relationships.next_seq = allocated.nextSeq;
 			const id = allocated.ids[0];
+			if (relationships.items.some((item) => item.id === id)) fail$1(`relationships.next_seq is behind the ledger; ${id} already exists`);
+			relationships.next_seq = allocated.nextSeq;
 			relationships.items.push({
 				id,
 				a,
@@ -3301,6 +3627,23 @@ function evidenceQuote(value) {
 	candidate = candidate.replace(/^[「『“"']/, "").replace(/[」』”"']$/, "").trim();
 	return candidate;
 }
+/** Sentence spans, including the terminating punctuation, for evidence de-duplication. */
+function sentenceSpans(text) {
+	const spans = [];
+	let start = 0;
+	for (let index = 0; index < text.length; index += 1) if ("。！？!?".includes(text[index])) {
+		spans.push({
+			start,
+			end: index + 1
+		});
+		start = index + 1;
+	}
+	if (start < text.length) spans.push({
+		start,
+		end: text.length
+	});
+	return spans;
+}
 /**
 * Validate the model-supplied L2 semantic items. Evidence must be a real
 * substring of the manuscript; a failed verdict is itself a blocking finding.
@@ -3309,6 +3652,10 @@ function evidenceQuote(value) {
 function evaluateSemantic(text, items) {
 	const blocking = [];
 	const seen = /* @__PURE__ */ new Set();
+	const seenQuotes = /* @__PURE__ */ new Set();
+	const spans = [];
+	const sentences = sentenceSpans(text);
+	const usedSentences = /* @__PURE__ */ new Set();
 	for (const [index, item] of items.entries()) {
 		const where = `semantic[${index}]`;
 		if (typeof item !== "object" || item === null) {
@@ -3353,11 +3700,11 @@ function evaluateSemantic(text, items) {
 			continue;
 		}
 		const quote = evidenceQuote(item.evidence);
-		if (Array.from(quote).length < 4) {
+		if (Array.from(quote).length < 8) {
 			blocking.push({
 				code: "SEMANTIC_EVIDENCE_INVALID",
 				scope: "check",
-				detail: `${item.id} quotes fewer than 4 characters`
+				detail: `${item.id} quotes fewer than 8 characters`
 			});
 			continue;
 		}
@@ -3369,6 +3716,40 @@ function evaluateSemantic(text, items) {
 			});
 			continue;
 		}
+		if (seenQuotes.has(quote)) {
+			blocking.push({
+				code: "SEMANTIC_EVIDENCE_INVALID",
+				scope: "check",
+				detail: `${item.id} repeats another semantic item's quote; each check needs distinct evidence`
+			});
+			continue;
+		}
+		let start = text.indexOf(quote);
+		let sentence = -1;
+		while (start !== -1) {
+			const end = start + quote.length;
+			const overlaps = spans.some((span) => start < span.end && span.start < end);
+			const sentenceIndex = sentences.findIndex((candidate) => start >= candidate.start && end <= candidate.end);
+			if (!overlaps && sentenceIndex !== -1 && !usedSentences.has(sentenceIndex)) {
+				sentence = sentenceIndex;
+				break;
+			}
+			start = text.indexOf(quote, start + 1);
+		}
+		if (start === -1 || sentence === -1) {
+			blocking.push({
+				code: "SEMANTIC_EVIDENCE_INVALID",
+				scope: "check",
+				detail: `${item.id} cites overlapping text or the same sentence as another check; each check needs a distinct passage`
+			});
+			continue;
+		}
+		spans.push({
+			start,
+			end: start + quote.length
+		});
+		usedSentences.add(sentence);
+		seenQuotes.add(quote);
 		if (item.verdict === "fail") blocking.push({
 			code: "SEMANTIC_CHECK_FAILED",
 			scope: "check",
@@ -3421,6 +3802,7 @@ const wordCount = (input) => {
 };
 /** PG-04: format blockers must be zero before length is judged. */
 const format = (input, options) => {
+	if (input.scope !== void 0 && !input.scope.includes("content")) return [];
 	const violations = runRules([
 		"MD_CONTAMINATION",
 		"ILLEGAL_QUOTE",
@@ -3501,6 +3883,7 @@ const summarySchema = (input) => {
 	if (!isText(summary.opening)) problems.push("opening must be text");
 	else {
 		const opening = summary.opening;
+		if (Array.from(opening).length < LIMITS.minQuoteChars) problems.push(`opening must be at least ${LIMITS.minQuoteChars} characters`);
 		if (!splitParagraphs(input.text).slice(0, 2).some((paragraph) => paragraph.includes(opening))) problems.push("opening must be quoted from the first two paragraphs");
 	}
 	const continuity = summary.continuity;
@@ -3537,6 +3920,7 @@ const score = (input, options) => {
 	if (review === null) return [block("PG-07", "no review document supplied")];
 	if (!Array.isArray(review.dimensions)) return [block("PG-07", "review dimensions must be an array")];
 	const problems = reviewArithmeticProblems(review.dimensions, review.total);
+	if (applyExclusions(review.dimensions, options.rulepack.exclusions).dropped > 0) problems.push("review contains mutually exclusive or duplicate deductions; resubmit it through novel_review");
 	if (review.content_hash !== sha256(input.text)) problems.push("review content_hash does not match the current manuscript");
 	const paragraphCount = splitParagraphs(input.text).length;
 	for (const dimension of review.dimensions) {
@@ -3616,18 +4000,22 @@ const readingProof = (input) => {
 		ending
 	]) if (problem !== null) problems.push(problem);
 	const paragraphs = splitParagraphs(input.text).length;
-	if (input.proof.opening.paragraph > 2) problems.push("the opening quote must come from the first two paragraphs");
-	if (input.proof.ending.paragraph < Math.max(1, paragraphs - 1)) problems.push("the ending quote must come from the last two paragraphs");
 	const actuals = [
 		input.proof.opening,
 		input.proof.middle,
 		input.proof.ending
 	].map((reference) => actualParagraph(input.text, reference));
+	if (actuals[0] > 2) problems.push("the opening quote must come from the first two paragraphs");
+	const middleMin = paragraphs <= 4 ? 2 : 3;
+	const middleMax = paragraphs <= 4 ? Math.max(2, paragraphs - 1) : paragraphs - 2;
+	if (actuals[1] > 0 && (actuals[1] < middleMin || actuals[1] > middleMax)) problems.push("the middle quote must come from the body of the chapter, not its first or last edges");
+	if (actuals[2] > 0 && actuals[2] < Math.max(1, paragraphs - 1)) problems.push("the ending quote must come from the last two paragraphs");
 	if (new Set(actuals.filter((index) => index > 0)).size < 3) problems.push("the three quotes must come from three distinct paragraphs");
 	return problems.length === 0 ? [] : [block("PG-09", problems.join("; "), "quote at least 12 characters from the real paragraph you read")];
 };
 /** PG-10: cross-chapter reconciliation must be clean. */
 const consistency = (input, options) => {
+	if (input.scope !== void 0 && !input.scope.includes("integrity")) return [];
 	const violations = runRules([
 		"DUPLICATE_PARAGRAPH",
 		"FORESHADOW_DORMANT",
@@ -3662,8 +4050,9 @@ const consistency = (input, options) => {
 /** PG-11: the review/revise budget is enforced by the engine, not self-reported. */
 const rounds = (input) => {
 	if (!(input.operation === "submitReview" || input.operation === "submitRevision" || input.operation === "runCheck")) return [];
-	if (!roundsExhausted(input.rounds)) return [];
-	return [block("PG-11", `round limits reached (review ${input.rounds.review}, revise ${input.rounds.revise}, check ${input.rounds.check})`, "call novel_rollback to restart the chapter; the manuscript is kept for reference")];
+	const counter = input.operation === "submitReview" ? "review" : input.operation === "submitRevision" ? "revise" : "check";
+	if (!roundsExhausted(input.rounds, counter)) return [];
+	return [block("PG-11", `round limits reached for ${counter} (review ${input.rounds.review}, revise ${input.rounds.revise}, check ${input.rounds.check})`, "call novel_rollback to restart the chapter; the manuscript is kept for reference")];
 };
 /** PG-12: the archive transaction's preconditions, checked before staging. */
 const archiveAtomic = (input) => {
@@ -3753,6 +4142,7 @@ function applicableGates(input) {
 			"PG-06",
 			"PG-07",
 			"PG-08",
+			"PG-09",
 			"PG-10",
 			"PG-12"
 		];
@@ -3784,7 +4174,7 @@ const STAGE_TO_PHASE = {
 	P4: "P4",
 	P5: "P5",
 	P6: "P6",
-	ready_to_archive: "P8",
+	ready_to_archive: "P7",
 	done: "P9"
 };
 /** The nine-phase progress strip: phases before the active one are done. */
@@ -3818,23 +4208,6 @@ function projectChapter(record) {
 		details: record.summary.events.join("；").slice(0, 240)
 	};
 }
-/** Status report used by the tool and by commands; one function, three callers. */
-function projectStatus(snapshot, next) {
-	return {
-		project: {
-			title: snapshot.title,
-			genre: snapshot.genre,
-			platform: snapshot.platform,
-			root: snapshot.root
-		},
-		chapter: snapshot.chapter,
-		stage: snapshot.stage,
-		rounds: { ...snapshot.rounds },
-		blocking: snapshot.blocking,
-		metrics: null,
-		next
-	};
-}
 function projectSummary(snapshot) {
 	return {
 		schemaVersion: 1,
@@ -3979,6 +4352,17 @@ const ROUND_TRANSITIONS = {
 	P5: "P5",
 	P6: "P6"
 };
+/** Forward order of stages; rollback may only move to an equal or earlier rank. */
+const STAGE_RANK = {
+	idle: 0,
+	P2: 1,
+	P3: 2,
+	P4: 3,
+	P5: 4,
+	P6: 5,
+	ready_to_archive: 6,
+	done: 7
+};
 const MUTABLE_STATE = {
 	[joinRel(STATE_DIR, STATE_FILES.pipeline)]: "pipeline",
 	[joinRel(STATE_DIR, STATE_FILES.chapters)]: "chapters",
@@ -4013,6 +4397,20 @@ var EngineService = class {
 	/** Compiled on first use so `apply()` performs no IO. */
 	rulepackSource;
 	compiled = null;
+	disposed = false;
+	/**
+	* Release in-process caches on host teardown. The engine owns no file
+	* handles, so this is deliberately synchronous and idempotent; it prevents a
+	* disposed instance from keeping project stores and replay results alive.
+	*/
+	dispose() {
+		if (this.disposed) return;
+		this.disposed = true;
+		this.stores.clear();
+		this.replay.clear();
+		this.lastRoot = null;
+		this.compiled = null;
+	}
 	get rulepack() {
 		this.compiled ??= this.rulepackSource();
 		return this.compiled;
@@ -4052,6 +4450,8 @@ var EngineService = class {
 	async initProject(input) {
 		const title = typeof input.title === "string" ? input.title.trim() : "";
 		if (title === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "title must not be empty");
+		if (input.author !== void 0 && typeof input.author !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "author must be a string");
+		if (input.description !== void 0 && typeof input.description !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "description must be a string");
 		if (!GENRES.includes(input.genre)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown genre "${String(input.genre)}"`, `allowed: ${GENRES.join(", ")}`);
 		if (!PLATFORMS.includes(input.platform)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown platform "${String(input.platform)}"`, `allowed: ${PLATFORMS.join(", ")}`);
 		if (input.words_per_chapter !== void 0) {
@@ -4119,6 +4519,7 @@ var EngineService = class {
 		});
 	}
 	async getStatus(input = {}) {
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		const chapter = input.chapter ?? snapshot.pipeline.chapter;
 		const metrics = await this.metricsFor(snapshot, chapter);
@@ -4132,9 +4533,11 @@ var EngineService = class {
 					root: snapshot.root
 				},
 				chapter,
+				active_chapter: snapshot.pipeline.chapter,
 				stage: snapshot.pipeline.stage,
 				rounds: { ...snapshot.pipeline.rounds },
-				blocking: snapshot.pipeline.blocking,
+				blocking: this.effectiveBlocking(snapshot),
+				state_errors: this.stateErrors(snapshot),
 				metrics,
 				next
 			},
@@ -4148,6 +4551,7 @@ var EngineService = class {
 			revision: 1,
 			warnings: []
 		};
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		return {
 			data: countWordMetrics((input.chapter === void 0 ? snapshot.text : await this.readChapter(snapshot, input.chapter)) ?? ""),
@@ -4156,6 +4560,7 @@ var EngineService = class {
 		};
 	}
 	async queryState(input) {
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		const chapter = input.chapter ?? snapshot.pipeline.chapter;
 		const store = this.storeFor(snapshot.root);
@@ -4206,12 +4611,12 @@ var EngineService = class {
 				warnings: []
 			};
 			case "review": return {
-				data: snapshot.review,
+				data: chapter === snapshot.pipeline.chapter ? snapshot.review : await store.readDoc(reviewFile(chapter), "review"),
 				revision: snapshot.pipeline.revision,
 				warnings: []
 			};
 			case "check": return {
-				data: snapshot.check,
+				data: chapter === snapshot.pipeline.chapter ? snapshot.check : await store.readDoc(checkFile(chapter), "check"),
 				revision: snapshot.pipeline.revision,
 				warnings: []
 			};
@@ -4223,7 +4628,7 @@ var EngineService = class {
 			case "planWorld": {
 				const raw = await store.readText(planWorldFile(chapter));
 				return {
-					data: raw === null ? null : parseYamlLoose(raw),
+					data: raw === null ? null : parsePlanYaml(raw, planWorldFile(chapter)),
 					revision: snapshot.pipeline.revision,
 					warnings: []
 				};
@@ -4231,7 +4636,7 @@ var EngineService = class {
 			case "planChapter": {
 				const raw = await store.readText(planChapterFile(chapter));
 				return {
-					data: raw === null ? null : parseYamlLoose(raw),
+					data: raw === null ? null : parsePlanYaml(raw, planChapterFile(chapter)),
 					revision: snapshot.pipeline.revision,
 					warnings: []
 				};
@@ -4249,59 +4654,65 @@ var EngineService = class {
 				tool: next.tool,
 				args: next.args,
 				reason: next.reason,
-				blocking: snapshot.pipeline.blocking
+				blocking: this.effectiveBlocking(snapshot),
+				state_errors: this.stateErrors(snapshot)
 			},
 			revision: snapshot.pipeline.revision,
 			warnings: []
 		};
 	}
 	async getBrief(input) {
-		const snapshot = await this.load(input.root);
-		const chapter = input.chapter ?? snapshot.pipeline.chapter;
-		const context = this.briefContextFor(input.stage, snapshot, chapter);
-		const digest = this.briefDigest(input.stage, snapshot, context);
-		const variables = this.briefVariables(snapshot, chapter);
-		const rendered = this.briefs.render(input.stage, variables);
-		const fields = {
-			stage: input.stage,
-			chapter,
-			digest,
-			min_words: snapshot.project.targets.words_per_chapter[0],
-			min_score: this.config.quality.minScore,
-			scene_types: [
-				"战斗/动作章",
-				"日常过渡章",
-				"情感爆发章",
-				"纯叙事章"
-			],
-			platform_style: this.rulepack.platform[snapshot.project.platform],
-			genre_guide: this.rulepack.genres[snapshot.project.genre],
-			/** P4 must apply exclusions before its arithmetic closes. */
-			score_exclusions: this.rulepack.exclusions,
-			next_tool: NEXT_TOOL_BY_BRIEF[input.stage]
-		};
-		const existing = snapshot.pipeline.briefs[input.stage];
-		if (existing !== void 0 && existing.digest === digest) return {
-			data: {
-				stage: input.stage,
-				chapter,
-				digest,
-				title: rendered.title,
-				content: rendered.content,
-				content_hash: rendered.contentHash,
-				fields,
-				context
-			},
-			revision: snapshot.pipeline.revision,
-			warnings: []
-		};
+		await this.load(input.root);
 		return this.mutate({
 			root: input.root,
 			op: "getBrief",
-			run: async (fresh, ctx) => {
-				const nextPipeline = pipelineWith(fresh, ctx.revision, {
+			run: async (snapshot, context) => {
+				const chapter = input.chapter ?? snapshot.pipeline.chapter;
+				if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `brief ${input.stage} belongs to active chapter ${snapshot.pipeline.chapter}, not ${chapter}`, `omit chapter or pass ${snapshot.pipeline.chapter}`);
+				const contextPack = this.briefContextFor(input.stage, snapshot, chapter);
+				const digest = this.briefDigest(input.stage, snapshot, contextPack);
+				const variables = this.briefVariables(snapshot, chapter);
+				const rendered = this.briefs.render(input.stage, variables);
+				const fields = {
+					stage: input.stage,
+					chapter,
+					digest,
+					min_words: snapshot.project.targets.words_per_chapter[0],
+					min_score: this.config.quality.minScore,
+					scene_types: [
+						"战斗/动作章",
+						"日常过渡章",
+						"情感爆发章",
+						"纯叙事章"
+					],
+					platform_style: this.rulepack.platform[snapshot.project.platform],
+					genre_guide: this.rulepack.genres[snapshot.project.genre],
+					/** P4 must apply exclusions before its arithmetic closes. */
+					score_exclusions: this.rulepack.exclusions,
+					next_tool: NEXT_TOOL_BY_BRIEF[input.stage],
+					...snapshot.planError === null ? {} : { plan_error: snapshot.planError },
+					...snapshot.reviewError === null ? {} : { review_error: snapshot.reviewError },
+					...snapshot.checkError === null ? {} : { check_error: snapshot.checkError }
+				};
+				const data = {
+					stage: input.stage,
+					chapter,
+					digest,
+					title: rendered.title,
+					content: rendered.content,
+					content_hash: rendered.contentHash,
+					fields,
+					context: contextPack
+				};
+				const existing = snapshot.pipeline.briefs[input.stage];
+				if (existing !== void 0 && existing.digest === digest) return {
+					files: [],
+					data,
+					replay: true
+				};
+				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					briefs: {
-						...fresh.pipeline.briefs,
+						...snapshot.pipeline.briefs,
 						[input.stage]: {
 							issued_at: this.now().toISOString(),
 							digest
@@ -4315,22 +4726,27 @@ var EngineService = class {
 						text: yaml(nextPipeline)
 					}],
 					backup: false,
-					data: {
-						stage: input.stage,
-						chapter,
-						digest,
-						title: rendered.title,
-						content: rendered.content,
-						content_hash: rendered.contentHash,
-						fields,
-						context
-					}
+					data
 				};
 			}
 		});
 	}
 	async submitWorldPlan(input) {
 		if (typeof input.objective !== "string" || input.objective.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "world plan objective must not be empty");
+		const constraints = stringList(input.constraints, "constraints");
+		const continuity_notes = stringList(input.continuity_notes, "continuity_notes");
+		const characters = objectList(input.characters, "characters");
+		for (const [index, character] of characters.entries()) {
+			requireText(character, "name", `characters[${index}].name`);
+			requireText(character, "role", `characters[${index}].role`);
+			requireText(character, "current_state", `characters[${index}].current_state`);
+		}
+		const locations = objectList(input.locations, "locations");
+		for (const [index, location] of locations.entries()) {
+			requireText(location, "name", `locations[${index}].name`);
+			requireText(location, "layout", `locations[${index}].layout`);
+			if (typeof location.capacity !== "number" || !Number.isFinite(location.capacity)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `locations[${index}].capacity must be a finite number`);
+		}
 		return this.mutate({
 			root: input.root,
 			op: "submitWorldPlan",
@@ -4341,10 +4757,10 @@ var EngineService = class {
 				const plan = {
 					chapter,
 					objective: input.objective,
-					constraints: input.constraints,
-					characters: input.characters,
-					locations: input.locations,
-					continuity_notes: input.continuity_notes
+					constraints,
+					characters,
+					locations,
+					continuity_notes
 				};
 				const path = planWorldFile(chapter);
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
@@ -4379,6 +4795,13 @@ var EngineService = class {
 	}
 	async submitChapterPlan(input) {
 		if (typeof input.title !== "string" || input.title.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "chapter plan title must not be empty");
+		const titleBody = input.title.replace(/^第\s*\d+\s*章\s*/, "").trim();
+		const titleLength = Array.from(titleBody).length;
+		if (titleLength < 4 || titleLength > 8) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter plan title body must be 4..8 characters, got ${titleLength}`, "use the same 4..8 character body the P3 title rule will judge");
+		if (typeof input.narrator !== "string" || input.narrator.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "chapter plan narrator must not be empty");
+		const beats = stringList(input.beats, "beats");
+		if (beats.length < 5 || beats.length > 8) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter plan beats must contain 5..8 non-empty items, got ${beats.length}`, "write the five to eight causal beats the P2 task book requires");
+		for (const [field, value] of [["opening", input.opening], ["ending", input.ending]]) if (typeof value !== "string" || value.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter plan ${field} must not be empty`);
 		if (!SCENE_TYPES.includes(input.scene_type)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown scene_type "${String(input.scene_type)}"`, `allowed: ${SCENE_TYPES.join(", ")}`);
 		if (!Array.isArray(input.target_words) || input.target_words.length !== 2) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "target_words must be [min, max] positive integers with min <= max");
 		const [min, max] = input.target_words;
@@ -4394,6 +4817,7 @@ var EngineService = class {
 				const plan = {
 					...input,
 					chapter,
+					beats,
 					schema_version: 1
 				};
 				delete plan.root;
@@ -4451,7 +4875,7 @@ var EngineService = class {
 				const planPath = planChapterFile(chapter);
 				const planText = await context.store.readText(planPath);
 				const mergedPlan = {
-					...(planText === null ? null : parseYamlLoose(planText)) ?? {
+					...(planText === null ? null : parsePlanYaml(planText, planPath)) ?? {
 						schema_version: 1,
 						chapter
 					},
@@ -4527,6 +4951,11 @@ var EngineService = class {
 						"fix"
 					]) if (typeof issue[field] !== "string" || issue[field].trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${issue.id} has no ${field}`, "every issue needs id, severity, status, dimension, location, problem and fix");
 					if (issue.evidence !== void 0 && typeof issue.evidence !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${issue.id} evidence must be a string`, "quote the revised text as evidence, or omit the field");
+					if (issue.severity === "blocker" && issue.status === "waived") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${issue.id} is a blocker and cannot be waived`, "fix the issue and quote the revised text, or keep it open");
+					if (this.rulepack.quality.dimensions.find((item) => item.id === issue.dimension) === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${issue.id} references unknown dimension "${issue.dimension}"`, `use one of: ${this.rulepack.quality.dimensions.map((item) => item.id).join(", ")}`);
+					const paragraph = parseParagraphLocation(issue.location);
+					const paragraphCount = splitParagraphs(text).length;
+					if (paragraph === null || paragraph < 1 || paragraph > paragraphCount) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${issue.id} location "${issue.location}" is outside the chapter`, `use 第 1 段 .. 第 ${paragraphCount} 段`);
 				}
 				const review = {
 					schema_version: 1,
@@ -4559,6 +4988,7 @@ var EngineService = class {
 					detail: `score ${input.total} is below the minimum ${this.config.quality.minScore}`,
 					hint: "revise the chapter and submit a new P4 review"
 				});
+				const reviewDigest = sha256(stableJson(review));
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: next,
 					rounds: {
@@ -4566,7 +4996,8 @@ var EngineService = class {
 						review: snapshot.pipeline.rounds.review + 1
 					},
 					blocking,
-					last_action: action("novel_review", this.now(), sha256(stableJson(review)))
+					review_digest: reviewDigest,
+					last_action: action("novel_review", this.now(), reviewDigest)
 				});
 				return {
 					files: [{
@@ -4629,7 +5060,15 @@ var EngineService = class {
 							seen.add(submitted.id);
 							const before = byId.get(submitted.id);
 							if (before === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `revision references unknown issue ${submitted.id}`, "only update issues from the current review; new issues belong in the next review");
-							if (before.severity === "blocker" && submitted.severity !== "blocker") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${submitted.id} is a blocker and cannot be downgraded`, "keep severity blocker and mark it fixed with evidence");
+							for (const field of [
+								"dimension",
+								"location",
+								"problem",
+								"fix"
+							]) if (submitted[field] !== void 0 && submitted[field] !== before[field]) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${submitted.id} cannot change its ${field} during revision`, "only status and evidence may change; new findings belong in the next review");
+							if (submitted.severity !== void 0 && submitted.severity !== before.severity) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${submitted.id} cannot change severity during revision`, "only status and evidence may change; a blocker stays a blocker until re-reviewed");
+							if (before.severity === "blocker" && submitted.severity !== void 0 && submitted.severity !== "blocker") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${submitted.id} is a blocker and cannot be downgraded`, "keep severity blocker and mark it fixed with evidence");
+							if (before.severity === "blocker" && submitted.status === "waived") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `issue ${submitted.id} is a blocker and cannot be waived`, "keep severity blocker and mark it fixed with evidence");
 							const index = issues.findIndex((issue) => issue.id === submitted.id);
 							issues[index] = {
 								...before,
@@ -4669,11 +5108,12 @@ var EngineService = class {
 						revise: snapshot.pipeline.rounds.revise + 1
 					},
 					blocking: [],
+					...patchedReview === null ? {} : { review_digest: sha256(stableJson(patchedReview)) },
 					last_action: action("novel_revise", this.now(), sha256(input.content))
 				});
 				const planPath = planChapterFile(input.chapter);
 				const planText = await context.store.readText(planPath);
-				const plan = planText === null ? null : parseYamlLoose(planText);
+				const plan = planText === null ? null : parsePlanYaml(planText, planPath);
 				const files = [{
 					path: chapterFile(input.chapter),
 					text: input.content
@@ -4706,12 +5146,13 @@ var EngineService = class {
 		});
 	}
 	async runCheck(input) {
+		const scope = normalizeCheckScope(input.scope);
 		return this.mutate({
 			root: input.root,
 			op: "runCheck",
 			key: (snapshot) => `check:${input.chapter}:${sha256(snapshot.text ?? "")}:${sha256(stableJson({
 				semantic: input.semantic ?? [],
-				scope: input.scope ?? []
+				scope
 			}))}`,
 			run: async (snapshot, context) => {
 				this.assertChapter(snapshot, input.chapter);
@@ -4721,20 +5162,25 @@ var EngineService = class {
 					briefStage: "P6",
 					text,
 					proof: snapshot.review?.proof ?? null,
-					semantic
+					semantic,
+					scope
 				});
 				const machine = this.machine(snapshot, text, { summary: snapshot.plan?.summary ?? null });
-				const machineBlocking = machine.violations.filter((violation) => violation.severity === "blocker");
+				const scopedMachine = {
+					...machine,
+					violations: machine.violations.filter((violation) => scope.includes(scopeOfRule(violation.code)))
+				};
+				const machineBlocking = scopedMachine.violations.filter((violation) => violation.severity === "blocker");
 				const semanticResult = evaluateSemantic(text, semantic);
 				const verdict = machineBlocking.length === 0 && !semanticResult.failed ? "pass" : "fail";
 				const check = {
 					schema_version: 1,
 					chapter: input.chapter,
-					scope: input.scope ?? ["content", "integrity"],
+					scope,
 					content_hash: sha256(text),
 					machine: {
-						violations: machine.violations,
-						metrics: machine.metrics
+						violations: scopedMachine.violations,
+						metrics: scopedMachine.metrics
 					},
 					semantic: { items: semantic },
 					verdict
@@ -4745,7 +5191,7 @@ var EngineService = class {
 					scope: "check",
 					detail: violation.detail
 				})), ...semanticResult.blocking] : [];
-				let nextPipeline = pipelineWith(snapshot, context.revision, {
+				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: nextStage,
 					rounds: {
 						...snapshot.pipeline.rounds,
@@ -4754,24 +5200,6 @@ var EngineService = class {
 					blocking: blockingItems,
 					last_action: action("novel_check", this.now(), sha256(text))
 				});
-				if (verdict === "fail" && nextPipeline.briefs.P6 !== void 0) {
-					const postCheck = {
-						...snapshot,
-						check,
-						pipeline: nextPipeline
-					};
-					const digest = this.briefDigest("P6", postCheck, this.briefContextFor("P6", postCheck, input.chapter));
-					nextPipeline = {
-						...nextPipeline,
-						briefs: {
-							...nextPipeline.briefs,
-							P6: {
-								...nextPipeline.briefs.P6,
-								digest
-							}
-						}
-					};
-				}
 				return {
 					files: [{
 						path: checkFile(input.chapter),
@@ -4783,11 +5211,11 @@ var EngineService = class {
 					data: {
 						chapter: input.chapter,
 						verdict,
-						violations: machine.violations.length,
-						metrics: machine.metrics,
+						violations: scopedMachine.violations.length,
+						metrics: scopedMachine.metrics,
 						stage: nextStage
 					},
-					warnings: machineWarnings(machine)
+					warnings: machineWarnings(scopedMachine)
 				};
 			}
 		});
@@ -4808,7 +5236,8 @@ var EngineService = class {
 			run: async (snapshot, context) => {
 				const already = snapshot.chapters.chapters.find((record) => record.num === input.chapter);
 				if (already !== void 0) {
-					if (already.archive_digest !== void 0 && already.archive_digest !== archiveDigest) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} is already archived with a different state_delta`, "archive is idempotent by chapter; start the next chapter instead of replaying old data");
+					if (already.archive_digest === void 0) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} has no archive_digest; the index entry is not trustworthy`, "restore the chapter index from backups/ or re-archive from the original manuscript");
+					if (already.archive_digest !== archiveDigest) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${input.chapter} is already archived with a different state_delta`, "archive is idempotent by chapter; start the next chapter instead of replaying old data");
 					const archivedText = await this.readChapter(snapshot, input.chapter);
 					if (archivedText === null || sha256(archivedText) !== already.content_hash) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `archived chapter ${input.chapter} no longer matches its index`, "restore the chapter from backups/ before retrying");
 					return {
@@ -4827,11 +5256,14 @@ var EngineService = class {
 				const text = snapshot.text ?? "";
 				const summary = snapshot.plan?.summary;
 				if (summary === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "the draft has no summary; resubmit the draft with a summary", "call novel_write_draft with the full summary block");
+				if (snapshot.review !== null && snapshot.pipeline.review_digest === void 0) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "the stored review has no review_digest; it predates digest-bound reviews and cannot be archived blindly", "re-run novel_review for this chapter, then re-run the archive");
+				if (snapshot.review !== null && snapshot.pipeline.review_digest !== void 0 && snapshot.pipeline.review_digest !== sha256(stableJson(snapshot.review))) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "the stored review changed after submission; its digest no longer matches", "re-run novel_review instead of editing reviews/ directly");
 				await this.assertGates(snapshot, "archiveChapter", {
 					briefStage: "P8",
 					text,
 					summary,
-					review: snapshot.review
+					review: snapshot.review,
+					proof: snapshot.review?.proof ?? null
 				});
 				if (text === "") throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${input.chapter} has no draft`);
 				const archiveBlockers = this.machine(snapshot, text, { summary }).violations.filter((violation) => violation.severity === "blocker");
@@ -4992,7 +5424,7 @@ var EngineService = class {
 		if (typeof input.content !== "object" || input.content === null || Array.isArray(input.content)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend content must be an object");
 		const resolvedRoot = await this.resolveRoot(input.root);
 		const absolute = this.storeFor(resolvedRoot).path(input.path);
-		const kind = MUTABLE_STATE[input.path];
+		const kind = Object.hasOwn(MUTABLE_STATE, input.path) ? MUTABLE_STATE[input.path] : void 0;
 		if (kind === void 0 || absolute.length === 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `amend can only target state documents: ${Object.keys(MUTABLE_STATE).join(", ")}`, "edit novel content through the draft/revision tools, not amend");
 		return this.mutate({
 			root: resolvedRoot,
@@ -5041,6 +5473,7 @@ var EngineService = class {
 				this.assertChapter(snapshot, input.chapter);
 				if (!Object.prototype.hasOwnProperty.call(ROUND_TRANSITIONS, input.toStage)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown rollback target "${String(input.toStage)}"`, `allowed targets: ${Object.keys(ROUND_TRANSITIONS).join(", ")}`);
 				const stage = ROUND_TRANSITIONS[input.toStage];
+				if (STAGE_RANK[stage] > STAGE_RANK[snapshot.pipeline.stage]) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `cannot roll back from ${snapshot.pipeline.stage} to later stage ${stage}`, "rollback only moves to the current stage or an earlier one; use the normal stage tools to advance");
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					chapter: input.chapter,
 					stage,
@@ -5259,6 +5692,7 @@ var EngineService = class {
 			revision: snapshot.pipeline.revision,
 			warnings: []
 		};
+		if (!Object.hasOwn(STATE_FILES, input.kind)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown state document "${String(input.kind)}"`, `allowed documents: ${Object.values(STATE_FILES).join(", ")}`);
 		const path = joinRel(STATE_DIR, STATE_FILES[input.kind]);
 		return await this.mutate({
 			root: input.root,
@@ -5296,7 +5730,7 @@ var EngineService = class {
 			title: (snapshot.plan?.title ?? "").replace(/^第\s*\d+\s*章\s*/, "").trim() || `第${snapshot.pipeline.chapter}章`,
 			wordCount: draftWords,
 			score: snapshot.review?.total ?? 0,
-			status: snapshot.pipeline.blocking.length > 0 ? "blocked" : "draft",
+			status: this.effectiveBlocking(snapshot).length > 0 ? "blocked" : "draft",
 			details: (snapshot.plan?.summary?.events ?? []).join("；").slice(0, 240)
 		};
 		return {
@@ -5308,7 +5742,7 @@ var EngineService = class {
 			stage: snapshot.pipeline.stage,
 			revision: snapshot.pipeline.revision,
 			rounds: snapshot.pipeline.rounds,
-			blocking: snapshot.pipeline.blocking,
+			blocking: this.effectiveBlocking(snapshot),
 			next: finished ? void 0 : this.nextStep(snapshot),
 			finished,
 			chapters: archived,
@@ -5318,31 +5752,224 @@ var EngineService = class {
 		};
 	}
 	nextStep(snapshot) {
-		if (snapshot.pipeline.blocking.length > 0) {
-			const first = snapshot.pipeline.blocking[0];
-			return {
-				tool: "novel_status",
-				args: {},
-				reason: `${first.code}: ${first.detail}${first.hint === void 0 ? "" : ` (${first.hint})`}`
-			};
+		const stage = snapshot.pipeline.stage;
+		const chapter = snapshot.pipeline.chapter;
+		if (this.stateErrors(snapshot).length > 0) {
+			const recovery = this.recoveryFor(snapshot);
+			const target = recovery.args.to_stage;
+			if (STAGE_RANK[ROUND_TRANSITIONS[target]] < STAGE_RANK[stage]) return recovery;
 		}
+		const reviewDigest = this.reviewDigestProblem(snapshot);
+		if (reviewDigest !== null) return {
+			tool: "novel_rollback",
+			args: {
+				chapter,
+				to_stage: "P4"
+			},
+			reason: `${reviewDigest.code}: ${reviewDigest.detail}; ${reviewDigest.hint}`
+		};
+		const step = STAGE_NEXT[stage];
 		const target = snapshot.project.targets.total_chapters;
-		if (snapshot.pipeline.stage === "done" && target !== null && snapshot.chapters.chapters.length >= target) return {
+		if (stage === "done" && target !== null && snapshot.chapters.chapters.length >= target) return {
 			tool: "novel_export",
 			args: { kind: "epub" },
 			reason: "全书已完成；可导出成书，或结束本书"
 		};
-		const step = STAGE_NEXT[snapshot.pipeline.stage];
-		const args = snapshot.pipeline.stage === "ready_to_archive" ? {
-			stage: "P8",
-			chapter: snapshot.pipeline.chapter
-		} : { chapter: snapshot.pipeline.chapter };
+		const roundsBlock = this.roundsLimitBlock(snapshot);
+		if (roundsBlock !== null) return {
+			tool: "novel_rollback",
+			args: {
+				chapter,
+				to_stage: "P4"
+			},
+			reason: `${roundsBlock.code}: ${roundsBlock.detail}; ${roundsBlock.hint ?? ""}`.trim()
+		};
+		const first = this.effectiveBlocking(snapshot)[0];
+		const detail = first === void 0 ? "" : `${first.code}: ${first.detail}${first.hint === void 0 ? "" : ` (${first.hint})`}`;
+		const briefStage = STATUS_BRIEF[stage];
+		const followUp = (stage === "P5" || stage === "P6") && snapshot.pipeline.blocking.length > 0 ? "novel_revise" : step.tool;
+		if (briefStage !== null && !this.briefIsCurrent(snapshot, briefStage)) return {
+			tool: "novel_brief",
+			args: {
+				stage: briefStage,
+				chapter
+			},
+			reason: detail === "" ? `fetch the ${briefStage} brief before ${followUp}` : `${detail}; fetch the ${briefStage} brief, then ${followUp}`
+		};
+		if (stage === "P6" && snapshot.checkError !== null) return {
+			tool: "novel_check",
+			args: this.nextArgs("P6", chapter),
+			reason: `CHECK_UNREADABLE@${checkFile(chapter)}; repair the check with novel_check before any stale revision blocker`
+		};
+		if (snapshot.pipeline.blocking.length > 0) {
+			if (stage === "P5" || stage === "P6") return {
+				tool: "novel_revise",
+				args: { chapter },
+				reason: `${detail}; fix it with novel_revise`
+			};
+			return {
+				tool: step.tool,
+				args: this.nextArgs(stage, chapter),
+				reason: `${detail}; ${step.reason}`
+			};
+		}
 		return {
 			tool: step.tool,
-			args,
+			args: this.nextArgs(stage, chapter),
 			reason: step.reason
 		};
 	}
+	/** A computed blocker for the retry budget the next operation would consume. */
+	roundsLimitBlock(snapshot) {
+		const stage = snapshot.pipeline.stage;
+		if (![
+			"P4",
+			"P5",
+			"P6"
+		].includes(stage)) return null;
+		const counter = stage === "P4" ? "review" : stage === "P5" ? "revise" : "check";
+		if (!roundsExhausted(snapshot.pipeline.rounds, counter)) return null;
+		return {
+			code: "PG-11",
+			scope: "rounds",
+			detail: `round limit reached for ${counter} (review ${snapshot.pipeline.rounds.review}, revise ${snapshot.pipeline.rounds.revise}, check ${snapshot.pipeline.rounds.check})`,
+			hint: "call novel_rollback with to_stage P4; the manuscript is kept for reference"
+		};
+	}
+	/** Pipeline blockers plus budget exhaustion, so status/panel cannot say "all clear". */
+	effectiveBlocking(snapshot) {
+		const state = this.stateErrors(snapshot).map((error) => ({
+			code: "STATE_UNREADABLE",
+			scope: "state",
+			detail: `${error.code}: ${error.message}`,
+			hint: this.recoveryFor(snapshot).reason
+		}));
+		const extra = this.roundsLimitBlock(snapshot);
+		const reviewDigest = this.reviewDigestProblem(snapshot);
+		const base = [
+			...state,
+			...reviewDigest === null ? [] : [reviewDigest],
+			...snapshot.pipeline.blocking
+		];
+		if (extra === null) return base;
+		return base.some((item) => item.code === extra.code) ? base : [...base, extra];
+	}
+	/**
+	* A review that exists but cannot be tied to the pipeline digest would let a
+	* hand-edited review pass archive. Archive already fails closed; status and
+	* next must surface the same repair path instead of pointing at the archive
+	* command forever.
+	*/
+	reviewDigestProblem(snapshot) {
+		if (snapshot.pipeline.stage !== "ready_to_archive" || snapshot.review === null) return null;
+		const chapter = snapshot.pipeline.chapter;
+		const hint = "call novel_rollback with to_stage P4, then re-run novel_review before archiving";
+		if (snapshot.pipeline.review_digest === void 0) return {
+			code: "REVIEW_DIGEST_MISSING",
+			scope: "state",
+			detail: `review ${reviewFile(chapter)} has no pipeline.review_digest; it predates digest-bound reviews`,
+			hint
+		};
+		if (snapshot.pipeline.review_digest !== sha256(stableJson(snapshot.review))) return {
+			code: "REVIEW_DIGEST_MISMATCH",
+			scope: "state",
+			detail: `review ${reviewFile(chapter)} changed after submission; its digest no longer matches`,
+			hint
+		};
+		return null;
+	}
+	stateErrors(snapshot) {
+		const errors = [];
+		const chapter = snapshot.pipeline.chapter;
+		if (snapshot.planError !== null) errors.push({
+			path: planChapterFile(chapter),
+			code: "PLAN_UNREADABLE",
+			message: snapshot.planError
+		});
+		if (snapshot.reviewError !== null) errors.push({
+			path: reviewFile(chapter),
+			code: "REVIEW_UNREADABLE",
+			message: snapshot.reviewError
+		});
+		if (snapshot.checkError !== null) errors.push({
+			path: checkFile(chapter),
+			code: "CHECK_UNREADABLE",
+			message: snapshot.checkError
+		});
+		return errors;
+	}
+	/** The earliest rebuild point for the current state damage. */
+	recoveryFor(snapshot) {
+		const chapter = snapshot.pipeline.chapter;
+		const errors = this.stateErrors(snapshot);
+		const desired = snapshot.planError !== null ? "P2" : snapshot.reviewError !== null ? "P4" : "P6";
+		const target = this.clampRollbackTarget(snapshot.pipeline.stage, desired);
+		const action = STAGE_RANK[ROUND_TRANSITIONS[target]] < STAGE_RANK[snapshot.pipeline.stage] ? `rollback to ${target} and rebuild through the normal stage tools` : `repair the file at ${snapshot.pipeline.stage} with its normal stage tool`;
+		return {
+			tool: "novel_rollback",
+			args: {
+				chapter,
+				to_stage: target
+			},
+			reason: `${errors.map((error) => `${error.code}@${error.path}`).join("; ")}; ${action}`
+		};
+	}
+	/** Never point at a stage later than the current one; rollback only moves backward. */
+	clampRollbackTarget(stage, desired) {
+		if (STAGE_RANK[ROUND_TRANSITIONS[desired]] <= STAGE_RANK[stage]) return desired;
+		return {
+			idle: "P1",
+			P2: "P2",
+			P3: "P3",
+			P4: "P4",
+			P5: "P5",
+			P6: "P6",
+			ready_to_archive: "P6",
+			done: "P6"
+		}[stage];
+	}
+	/** State damage that makes this operation unsafe to start. */
+	stateGateBlock(snapshot, operation) {
+		const planSensitive = [
+			"submitDraft",
+			"submitReview",
+			"submitRevision",
+			"runCheck",
+			"archiveChapter"
+		];
+		const reviewSensitive = [
+			"submitRevision",
+			"runCheck",
+			"archiveChapter"
+		];
+		const checkSensitive = ["archiveChapter"];
+		const relevant = [];
+		if (snapshot.planError !== null && planSensitive.includes(operation)) relevant.push(...this.stateErrors(snapshot).filter((error) => error.code === "PLAN_UNREADABLE"));
+		if (snapshot.reviewError !== null && reviewSensitive.includes(operation)) relevant.push(...this.stateErrors(snapshot).filter((error) => error.code === "REVIEW_UNREADABLE"));
+		if (snapshot.checkError !== null && checkSensitive.includes(operation)) relevant.push(...this.stateErrors(snapshot).filter((error) => error.code === "CHECK_UNREADABLE"));
+		return relevant.map((error) => ({
+			code: "STATE_UNREADABLE",
+			scope: "state",
+			detail: `${error.code}: ${error.message}`,
+			hint: this.recoveryFor(snapshot).reason
+		}));
+	}
+	/** Whether the stored brief still signs the current snapshot. */
+	briefIsCurrent(snapshot, stage) {
+		const record = snapshot.pipeline.briefs[stage];
+		if (record === void 0) return false;
+		const context = this.briefContextFor(stage, snapshot, snapshot.pipeline.chapter);
+		return record.digest === this.briefDigest(stage, snapshot, context);
+	}
+	/** Arguments valid for the tool `STAGE_NEXT` recommends at this stage. */
+	nextArgs(stage, chapter) {
+		switch (stage) {
+			case "idle":
+			case "P2":
+			case "done": return {};
+			default: return { chapter };
+		}
+	}
 	async metricsFor(snapshot, chapter) {
 		if (chapter === snapshot.pipeline.chapter && snapshot.text !== null) return countWordMetrics(snapshot.text);
 		const text = await this.readChapter(snapshot, chapter);
@@ -5360,7 +5987,8 @@ var EngineService = class {
 	}
 	async chaptersForExport(snapshot, chapter) {
 		const records = snapshot.chapters.chapters;
-		if (chapter !== void 0 && !records.some((record) => record.num === chapter)) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not in the archive index`, "archive the chapter first, or export all archived chapters");
+		const activeDraft = chapter !== void 0 && chapter === snapshot.pipeline.chapter && snapshot.text !== null;
+		if (chapter !== void 0 && !records.some((record) => record.num === chapter) && !activeDraft) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not archived and is not the active draft`, "archive the chapter first, or pass the active chapter to export its draft");
 		const selected = chapter === void 0 ? records : records.filter((record) => record.num === chapter);
 		const chapters = [];
 		for (const record of selected) {
@@ -5372,7 +6000,7 @@ var EngineService = class {
 				text
 			});
 		}
-		if (chapters.length === 0 && snapshot.text !== null && chapter === void 0) chapters.push({
+		if (chapters.length === 0 && snapshot.text !== null && (chapter === void 0 || chapter === snapshot.pipeline.chapter)) chapters.push({
 			num: snapshot.pipeline.chapter,
 			title: snapshot.plan?.title ?? "未命名",
 			text: snapshot.text
@@ -5419,8 +6047,11 @@ var EngineService = class {
 			timeline: snapshot.timeline,
 			relationships: snapshot.relationships,
 			plan: snapshot.plan,
+			plan_error: snapshot.planError,
 			review: snapshot.review,
+			review_error: snapshot.reviewError,
 			check: snapshot.check,
+			check_error: snapshot.checkError,
 			text: snapshot.text,
 			machine,
 			previousText: snapshot.previousText,
@@ -5435,6 +6066,7 @@ var EngineService = class {
 			chapter: snapshot.pipeline.chapter,
 			pipelineStage: snapshot.pipeline.stage,
 			rounds: snapshot.pipeline.rounds,
+			min_score: this.config.quality.minScore,
 			rulepack: `${this.rulepack.name}@${this.rulepack.version}`,
 			context
 		}));
@@ -5455,6 +6087,8 @@ var EngineService = class {
 	async assertGates(snapshot, operation, extras) {
 		const text = extras.text ?? snapshot.text ?? "";
 		if (!canRun(snapshot.pipeline.stage, operation)) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `${operation} is not allowed at stage ${snapshot.pipeline.stage}`, "call novel_status to see the next legal step");
+		const stateBlocking = this.stateGateBlock(snapshot, operation);
+		if (stateBlocking.length > 0) throw new EngineBlockedError(ERROR_CODES.GATE_BLOCKED, `${operation} blocked by unreadable state: ${stateBlocking[0].detail}`, stateBlocking, this.recoveryFor(snapshot).reason);
 		const archive = operation === "archiveChapter" ? {
 			chapterExists: snapshot.chapters.chapters.some((record) => record.num === snapshot.pipeline.chapter),
 			checkPassed: snapshot.check?.verdict === "pass",
@@ -5478,6 +6112,7 @@ var EngineService = class {
 			check: extras.check ?? snapshot.check,
 			semantic: extras.semantic ?? [],
 			proof: extras.proof ?? null,
+			scope: extras.scope,
 			rounds: snapshot.pipeline.rounds,
 			archive,
 			evidence: {
@@ -5509,8 +6144,11 @@ var EngineService = class {
 			throw new EngineBlockedError(result.blocking.every((item) => item.code === "PG-09") ? ERROR_CODES.READING_PROOF_INVALID : ERROR_CODES.GATE_BLOCKED, `${operation} blocked by ${result.blocking.length} gate(s), first: ${first.code} ${first.detail}`, result.blocking, result.blocking.map((item) => `${item.code}: ${item.hint ?? item.detail}`).join(" | "));
 		}
 	}
-	assertChapter(snapshot, chapter) {
+	assertChapterParameter(chapter) {
 		if (!Number.isInteger(chapter) || chapter < 1) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter must be a positive integer (got ${String(chapter)})`);
+	}
+	assertChapter(snapshot, chapter) {
+		this.assertChapterParameter(chapter);
 		if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not the active chapter (${snapshot.pipeline.chapter})`, "archive the active chapter before starting the next one");
 	}
 	async load(root, retries = 1) {
@@ -5554,9 +6192,22 @@ var EngineService = class {
 			if (previous !== null) previousTexts.push(previous);
 		}
 		const planRaw = await store.readText(planChapterFile(chapter));
-		const plan = planRaw === null ? null : parseYamlLoose(planRaw);
-		const review = await store.readDoc(reviewFile(chapter), "review");
-		const check = await store.readDoc(checkFile(chapter), "check");
+		let plan = null;
+		let planError = null;
+		if (planRaw !== null) try {
+			const parsed = parsePlanYaml(planRaw, planChapterFile(chapter));
+			validateStoredChapterPlan(parsed, planChapterFile(chapter));
+			plan = parsed;
+		} catch (error) {
+			if (error instanceof EngineFaultError && error.code === ERROR_CODES.SCHEMA_TOO_NEW) throw error;
+			planError = errorMessage(error);
+		}
+		const reviewRead = await this.recoverableDoc(store, reviewFile(chapter), "review");
+		const checkRead = await this.recoverableDoc(store, checkFile(chapter), "check");
+		const review = reviewRead.value;
+		const reviewError = reviewRead.error;
+		const check = checkRead.value;
+		const checkError = checkRead.error;
 		const latest = await store.readDoc(joinRel(STATE_DIR, STATE_FILES.pipeline), "pipeline");
 		if (latest === null || latest.revision !== pipeline.revision) {
 			if (retries > 0) return this.load(store.root, retries - 1);
@@ -5579,10 +6230,28 @@ var EngineService = class {
 			previousText,
 			previousTexts,
 			plan,
+			planError,
 			review,
-			check
+			reviewError,
+			check,
+			checkError
 		};
 	}
+	/** Read a review/check without letting one corrupt file wedge every read. */
+	async recoverableDoc(store, path, kind) {
+		try {
+			return {
+				value: await store.readDoc(path, kind),
+				error: null
+			};
+		} catch (error) {
+			if (error instanceof EngineFaultError && error.code === ERROR_CODES.SCHEMA_TOO_NEW) throw error;
+			return {
+				value: null,
+				error: errorMessage(error)
+			};
+		}
+	}
 	async mutate(options) {
 		const root = await this.resolveRoot(options.root);
 		const signal = this.signalContext.getStore();
@@ -5739,8 +6408,11 @@ var EngineService = class {
 			previousText: null,
 			previousTexts: [],
 			plan: null,
+			planError: null,
 			review: null,
-			check: null
+			reviewError: null,
+			check: null,
+			checkError: null
 		};
 	}
 };
@@ -5753,6 +6425,17 @@ const NEXT_TOOL_BY_BRIEF = {
 	P6: "novel_check",
 	P8: "novel_archive"
 };
+/** The task book each stage must see before its next write operation. */
+const STATUS_BRIEF = {
+	idle: "P1",
+	P2: "P2",
+	P3: "P3",
+	P4: "P4",
+	P5: "P5",
+	P6: "P6",
+	ready_to_archive: "P8",
+	done: "P1"
+};
 const yaml = (value) => stringify(value, { lineWidth: 0 });
 const emptyChapters = () => ({
 	schema_version: 1,
@@ -5778,6 +6461,7 @@ const pipelineWith = (snapshot, revision, patch) => ({
 	rounds: snapshot.pipeline.rounds,
 	briefs: snapshot.pipeline.briefs,
 	blocking: snapshot.pipeline.blocking,
+	review_digest: snapshot.pipeline.review_digest,
 	last_action: snapshot.pipeline.last_action,
 	...patch
 });
@@ -5817,7 +6501,65 @@ const stableJson = (value) => {
 	};
 	return JSON.stringify(normalize(value));
 };
-const parseYamlLoose = (text) => parse(text);
+const errorMessage = (error) => error instanceof Error ? `${error.message}${error.cause instanceof Error ? `: ${error.cause.message}` : ""}` : String(error);
+/** Validate the shape a stored chapter plan must have before any stage uses it. */
+const validateStoredChapterPlan = (plan, path) => {
+	const fail = (detail) => {
+		throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${path} is not a usable chapter plan: ${detail}`);
+	};
+	const rawVersion = plan.schema_version;
+	if (rawVersion !== void 0) {
+		const version = typeof rawVersion === "number" ? rawVersion : null;
+		if (version === null) fail("schema_version must be a positive integer");
+		const checkedVersion = version;
+		if (!Number.isInteger(checkedVersion) || checkedVersion < 1) fail("schema_version must be a positive integer");
+		if (checkedVersion > 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_TOO_NEW, `${path} uses schema_version ${checkedVersion}, newer than supported 1`, "upgrade the plugin; the plan was left untouched");
+		if (checkedVersion !== 1) fail(`schema_version must be 1`);
+	}
+	if (!Number.isInteger(plan.chapter) || plan.chapter < 1) fail("chapter must be a positive integer");
+	for (const key of [
+		"title",
+		"narrator",
+		"opening",
+		"ending"
+	]) if (typeof plan[key] !== "string" || plan[key].trim() === "") fail(`${key} must be non-empty`);
+	if (!SCENE_TYPES.includes(plan.scene_type)) fail(`unknown scene_type "${String(plan.scene_type)}"`);
+	if (!Array.isArray(plan.beats) || plan.beats.some((beat) => typeof beat !== "string")) fail("beats must be a string array");
+	if (!Array.isArray(plan.target_words) || plan.target_words.length !== 2 || plan.target_words.some((value) => !Number.isInteger(value) || value <= 0)) fail("target_words must be [min, max] positive integers");
+	if (plan.summary !== void 0 && (typeof plan.summary !== "object" || plan.summary === null)) fail("summary must be an object when present");
+};
+const CHECK_SCOPES = ["content", "integrity"];
+const normalizeCheckScope = (value) => {
+	if (value === void 0) return [...CHECK_SCOPES];
+	if (!Array.isArray(value) || value.length === 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "scope must contain at least one of content, integrity");
+	const unique = [...new Set(value)];
+	for (const scope of unique) if (scope !== "content" && scope !== "integrity") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown check scope "${String(scope)}"`, `allowed: ${CHECK_SCOPES.join(", ")}`);
+	return CHECK_SCOPES.filter((scope) => unique.includes(scope));
+};
+const stringList = (value, field) => {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((item) => typeof item !== "string" || item.trim() === "")) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `${field} must be an array of non-empty strings`);
+	return value;
+};
+const objectList = (value, field) => {
+	if (value === void 0) return [];
+	if (!Array.isArray(value) || value.some((item) => typeof item !== "object" || item === null || Array.isArray(item))) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `${field} must be an array of objects`);
+	return value;
+};
+const requireText = (object, key, path) => {
+	if (typeof object[key] !== "string" || object[key].trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `${path} must be a non-empty string`);
+};
+/** Parse a plan file with a machine code instead of leaking a YAML parser error. */
+const parsePlanYaml = (text, path) => {
+	let parsed;
+	try {
+		parsed = parse(text);
+	} catch (error) {
+		throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${path} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix the plan YAML; the engine will not silently discard a corrupt plan", { cause: error });
+	}
+	if (typeof parsed !== "object" || parsed === null || Array.isArray(parsed)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${path} must be a YAML mapping`, "rewrite the plan as a mapping (title, scene_type, narrator, ...)");
+	return parsed;
+};
 /** Line diff with a shared prefix/suffix, enough for revision review. */
 function diffLines(before, after) {
 	const left = before === "" ? [] : before.split("\n");
@@ -5867,7 +6609,10 @@ const asJson = (value, field) => {
 };
 /** Turn an engine failure into the message shape tools surface. */
 const fail = (error) => {
-	if (error instanceof EngineError) throw new Error(`[${error.code}] ${error.message}${error.hint === void 0 ? "" : ` — ${error.hint}`}`);
+	if (error instanceof EngineError) {
+		const blocking = error instanceof EngineBlockedError && error.blocking.length > 0 ? `\nblocking: ${JSON.stringify(error.blocking)}` : "";
+		throw new Error(`[${error.code}] ${error.message}${error.hint === void 0 ? "" : ` — ${error.hint}`}${blocking}`);
+	}
 	throw error;
 };
 /** Wrap an execute body with cancellation and a machine-code error. */
@@ -5921,7 +6666,7 @@ const stringArray = {
 };
 const root = {
 	type: "string",
-	description: "Project root; defaults to the configured root."
+	description: "Project root. When omitted, resolves to the last active project, then the registry active root, then the configured projectRoot; pass it explicitly when several projects exist."
 };
 /**
 * The eighteen tools are thin adapters: narrow parameters, call one service
@@ -5980,8 +6725,11 @@ function createNovelTools(engine) {
 				schema: { type: "json" },
 				render: (_args, raw) => {
 					const value = payload(raw);
+					const active = value.active_chapter ?? value.chapter;
+					const where = active === value.chapter ? `第 ${value.chapter} 章` : `当前第 ${active} 章 · 查询第 ${value.chapter} 章字数`;
 					return text([
-						`《${value.project.title}》 第 ${value.chapter} 章 · ${value.stage}`,
+						`《${value.project.title}》 ${where} · ${value.stage}`,
+						...value.rounds === void 0 ? [] : [`轮次：评审 ${value.rounds.review} / 修订 ${value.rounds.revise} / 校验 ${value.rounds.check}`],
 						value.blocking.length === 0 ? "门控：全部通过" : `门控：${value.blocking.length} 条阻塞`,
 						...value.blocking.map((item) => `  - ${item.code}: ${item.detail}`),
 						`下一步：${value.next.tool} — ${value.next.reason}`
@@ -6017,7 +6765,7 @@ function createNovelTools(engine) {
 				schema: { type: "json" },
 				render: (_args, raw) => {
 					const value = payload(raw);
-					return text(`${value.content}\n\n---\nbrief digest: ${value.digest}${value.context === void 0 ? "" : `\ncontext:\n${JSON.stringify(value.context, null, 2)}`}`);
+					return text(`${value.content}\n\n---\nbrief digest: ${value.digest}${value.fields === void 0 ? "" : `\nfields:\n${JSON.stringify(value.fields)}`}${value.context === void 0 ? "" : `\ncontext:\n${JSON.stringify(value.context)}`}`);
 				}
 			},
 			execute: guarded(async (args) => engine.getBrief({
@@ -6440,6 +7188,11 @@ function createNovelTools(engine) {
 	];
 }
 // src/commands/admin.ts
+/** Registry commands need an explicit root; do not pass undefined into path.resolve. */
+const rootArg = (args) => {
+	if (typeof args.root !== "string" || args.root.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "registry operation requires a non-empty root", "pass {\"root\":\"/absolute/project/path\"}");
+	return args.root;
+};
 /**
 * The ten tools hidden when `tools.mode=core`, plus the explicit
 * registry/settings-pack operations that are command-only by design (§6.8).
@@ -6471,9 +7224,9 @@ const OPERATIONS$1 = {
 	novel_pipeline: (engine, args) => engine.advise(args),
 	novel_state: (engine, args) => engine.queryState(args),
 	novel_registry_list: (engine) => engine.listProjects(),
-	novel_registry_register: (engine, args) => engine.registerProject({ root: args.root }),
-	novel_registry_activate: (engine, args) => engine.setActiveProject({ root: args.root }),
-	novel_registry_forget: (engine, args) => engine.forgetProject({ root: args.root }),
+	novel_registry_register: (engine, args) => engine.registerProject({ root: rootArg(args) }),
+	novel_registry_activate: (engine, args) => engine.setActiveProject({ root: rootArg(args) }),
+	novel_registry_forget: (engine, args) => engine.forgetProject({ root: rootArg(args) }),
 	novel_import: (engine, args) => engine.importPack(args)
 };
 const ADMIN_OPERATION_NAMES = Object.keys(OPERATIONS$1);
@@ -6500,7 +7253,7 @@ function parseAdminArguments(raw, operation) {
 }
 /** Run one hidden operation and render its payload for the command result. */
 async function runAdminOperation(engine, operation, rawArguments) {
-	const handler = OPERATIONS$1[operation];
+	const handler = Object.hasOwn(OPERATIONS$1, operation) ? OPERATIONS$1[operation] : void 0;
 	if (handler === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, `未知子命令 "${operation}"`, `available: ${ADMIN_OPERATION_NAMES.join(", ")}`);
 	const parsed = parseAdminArguments(rawArguments, operation);
 	const result = await handler(engine, parsed.root === void 0 && typeof parsed.project_root === "string" ? {
@@ -7200,6 +7953,7 @@ function apply(ctx, config) {
 		ctx.emit?.(event.name, event.payload);
 	};
 	const engine = new EngineService(engineConfig, () => loadRulepack(), { onEvent: emit });
+	ctx.effect(() => () => engine.dispose(), `${name}: engine dispose`);
 	ctx.provide?.("novelEngine", engine);
 	for (const tool of createNovelTools(engine)) {
 		if (toolsMode === "core" && !CORE_TOOLS.includes(tool.name)) continue;
@@ -7241,4 +7995,4 @@ function connectionFence(scope) {
 	}
 	if (Object.prototype.hasOwnProperty.call(candidate, "connection")) return candidate.connection;
 }
-export { BriefLibrary, Config, ERROR_CODES, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, OPERATIONS, PLATFORMS, SCENE_TYPES, SCHEMA_VERSION, applicableGates, apply, blockedError, briefStageFor, chapterHeading, evaluateGates, faultError, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, projectChapter, projectChapters, projectGates, projectStatus, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, verifyReference };
+export { BriefLibrary, Config, ERROR_CODES, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, OPERATIONS, PLATFORMS, SCENE_TYPES, SCHEMA_VERSION, applicableGates, apply, blockedError, briefStageFor, chapterHeading, evaluateGates, faultError, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, projectChapter, projectChapters, projectGates, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, verifyReference };