dsh-novel-write-engine 0.2.0 → 0.2.2

package/lib/index.js

@@ -9,9 +9,14 @@ import { fileURLToPath } from "node:url";
 import { deflateRawSync } from "node:zlib";
 import { defineTool } from "@deepseek-ai/dsh-tools";
 // src/constants.ts
+/** Panel and session identifiers. */
+const PLUGIN_NAME = "dsh-novel-write-engine";
 const PANEL_ID = "novel-workshop";
 const PANEL_ROUTE = "/api/novel-write-engine/panel";
 const SKILL_NAME = "novel-write-engine";
+const REMOTE_VERSION = 4;
+/** The panel is a recent-history view; the wire payload and UI use one cap. */
+const PANEL_CHAPTER_LIMIT = 30;
 /** Project-relative locations. Every write goes through these constants. */
 const PROJECT_FILE = "novel.yaml";
 const OUTLINE_FILE = "outline/outline.yaml";
@@ -23,9 +28,16 @@ const REVIEW_DIR = "reviews";
 const CHECK_DIR = "checks";
 const EXPORT_DIR = "exports";
 const BACKUP_DIR = "backups";
+const HISTORY_DIR = "history";
+/** Brief receipts are append-only evidence, separate from content transactions. */
+const BRIEF_RECEIPTS_FILE = "state/briefs.yaml";
+const OUTLINE_DIR = "outline";
 const LOCK_FILE = ".engine.lock";
 const STAGING_DIR = ".staging";
 const REGISTRY_FILE = "projects.yaml";
+const SESSION_BINDINGS_FILE = "session-bindings.yaml";
+const METADATA_LOCK_FILE = ".metadata.lock";
+const ARCHIVE_DIGESTS_FILE = "state/archive-digests.json";
 /** Files owned by the engine under `state/`. */
 const STATE_FILES = {
 	pipeline: "pipeline.yaml",
@@ -47,6 +59,21 @@ const planWorldFile = (chapter) => `${PLAN_DIR}/ch${String(chapter).padStart(3,
 const planChapterFile = (chapter) => `${PLAN_DIR}/ch${String(chapter).padStart(3, "0")}.chapter.yaml`;
 const reviewFile = (chapter) => `${REVIEW_DIR}/ch${String(chapter).padStart(3, "0")}.review.yaml`;
 const checkFile = (chapter) => `${CHECK_DIR}/ch${String(chapter).padStart(3, "0")}.check.yaml`;
+/** Immutable-ish prior versions; the primary paths always hold the current one. */
+const historyChapter = (chapter) => `ch${String(chapter).padStart(3, "0")}`;
+const historyRevision = (revision) => `r${String(Math.max(0, revision)).padStart(4, "0")}`;
+const reviewHistoryFile = (chapter, revision) => `${HISTORY_DIR}/reviews/${historyChapter(chapter)}.${historyRevision(revision)}.review.yaml`;
+const checkHistoryFile = (chapter, revision) => `${HISTORY_DIR}/checks/${historyChapter(chapter)}.${historyRevision(revision)}.check.yaml`;
+const chapterHistoryFile = (chapter, revision) => `${HISTORY_DIR}/chapters/${historyChapter(chapter)}.${historyRevision(revision)}.md`;
+const deprecatedHistoryFile = (chapter, revision) => `${HISTORY_DIR}/deprecated/${historyChapter(chapter)}.${historyRevision(revision)}.md`;
+const planHistoryFile = (chapter, revision) => `${HISTORY_DIR}/plans/${historyChapter(chapter)}.${historyRevision(revision)}.chapter.yaml`;
+const HISTORY_KINDS = [
+	"reviews",
+	"checks",
+	"chapters",
+	"deprecated",
+	"plans"
+];
 /** Limits that are structural, not taste. */
 const LIMITS = {
 	/** P4 <-> P5/P6 retries before a forced rollback. */
@@ -72,6 +99,11 @@ const LIMITS = {
 	maxWorldbookTextChars: 2e3,
 	maxSearchQueryChars: 200
 };
+/** Re-exported enums make adapter code readable without importing types twice. */
+const SCENE_TYPE_DEFAULT = "日常过渡章";
+const DEFAULT_GENRE = "都市现代";
+const DEFAULT_PLATFORM = "fanqie";
+const INITIAL_STAGE = "idle";
 /** The order used to render the nine-phase progress strip. */
 const PHASE_STRIP = [
 	"P1",
@@ -84,6 +116,37 @@ const PHASE_STRIP = [
 	"P8",
 	"P9"
 ];
+/** Tool names, kept here so the arch test can assert one namespace. */
+const TOOL_NAMES = [
+	"novel_init",
+	"novel_status",
+	"novel_brief",
+	"novel_plan_world",
+	"novel_plan_chapter",
+	"novel_write_draft",
+	"novel_review",
+	"novel_revise",
+	"novel_check",
+	"novel_archive",
+	"novel_word_count",
+	"novel_state",
+	"novel_amend",
+	"novel_rollback",
+	"novel_diff",
+	"novel_export",
+	"novel_audit",
+	"novel_pipeline",
+	"novel_blueprint",
+	"novel_outline",
+	"novel_outline_import",
+	"novel_worldbook",
+	"novel_search",
+	"novel_doctor",
+	"novel_report",
+	"novel_guide",
+	"novel_reopen",
+	"novel_restore"
+];
 /** The ten high-frequency tools kept when `tools.mode = core`. */
 const CORE_TOOLS = [
 	"novel_init",
@@ -134,7 +197,7 @@ const SCENE_TYPES = [
 	"情感爆发章",
 	"纯叙事章"
 ];
-/** All thirty-one service operations (22 inherited from 0.1.x, 9 book-level). */
+/** All thirty-two service operations (22 inherited + 9 book-level + restoreBackup). */
 const OPERATIONS = [
 	"initProject",
 	"archiveChapter",
@@ -166,11 +229,15 @@ const OPERATIONS = [
 	"panelSummary",
 	"panelChapters",
 	"panelGates",
-	"stats"
+	"stats",
+	"restoreBackup"
 ];
 /** Error families map one-to-one to the three repair actions a caller can take. */
 const ERROR_CODES = {
 	PROJECT_NOT_FOUND: "ENGINE_PROJECT_NOT_FOUND",
+	PROJECT_AMBIGUOUS: "ENGINE_PROJECT_AMBIGUOUS",
+	PROJECT_MISSING: "ENGINE_PROJECT_MISSING",
+	PROJECT_IDENTITY_MISMATCH: "ENGINE_PROJECT_IDENTITY_MISMATCH",
 	PROJECT_EXISTS: "ENGINE_PROJECT_EXISTS",
 	STAGE_ORDER: "ENGINE_STAGE_ORDER",
 	GATE_BLOCKED: "ENGINE_GATE_BLOCKED",
@@ -676,8 +743,10 @@ const STAGE_NEXT = {
 const CJK = /[\u4e00-\u9fff\u3400-\u4dbf\uf900-\ufaff]/g;
 const ENGLISH_WORD = /[A-Za-z]+/g;
 const NUMBER = /(?<![A-Za-z0-9])[0-9]+(?![A-Za-z0-9])/g;
-const CHINESE_PUNCT = /[\u3000-\u303f\uff00-\uffef]/g;
-const ENGLISH_PUNCT = /[^\p{L}\p{N}_\s\u3000-\u303f\uff00-\uffef]/gu;
+const CHINESE_PUNCT = /[\u3000-\u303f\uff00-\uffef\u2018\u2019\u201c\u201d\u2014\u2026]/g;
+const ENGLISH_PUNCT = /[^\p{L}\p{N}_\s\u3000-\u303f\uff00-\uffef\u2018\u2019\u201c\u201d\u2014\u2026]/gu;
+/** A line participates in dialogue if it contains any of the four common quote pairs. */
+const DIALOGUE_MARKS = /["“”「」『』]/;
 const matchCount = (text, pattern) => text.match(pattern)?.length ?? 0;
 /**
 * The one word-count rule of the engine.
@@ -694,15 +763,17 @@ function countWordMetrics(text) {
 	const numbers = matchCount(text, NUMBER);
 	const chinesePunct = matchCount(text, CHINESE_PUNCT);
 	const englishPunct = matchCount(text, ENGLISH_PUNCT);
-	const dialogueLines = nonEmptyLines.filter((line) => line.includes("\"")).length;
+	const dialogueLines = nonEmptyLines.filter((line) => DIALOGUE_MARKS.test(line)).length;
 	const paragraphs = splitParagraphs(text);
+	const punctuation = chinesePunct + englishPunct;
 	return {
-		total_word_count: cjkChars + englishWords + numbers + chinesePunct + englishPunct,
+		total_word_count: cjkChars + englishWords + numbers + punctuation,
 		cjk_chars: cjkChars,
 		english_words: englishWords,
 		numbers,
 		chinese_punct: chinesePunct,
 		english_punct: englishPunct,
+		punctuation_chars: punctuation,
 		non_ws_chars: matchCount(text, /\S/g),
 		total_lines: lines.length,
 		non_empty_lines: nonEmptyLines.length,
@@ -768,7 +839,10 @@ const SEMANTIC_RULES = {
 	ADJECTIVE_DENSITY: "ADJECTIVE_DENSITY",
 	PLEASURE_DENSITY: "PLEASURE_DENSITY",
 	SENSORY_DENSITY: "SENSORY_DENSITY",
-	WATER_WORDS: "WATER_WORDS"
+	WATER_WORDS: "WATER_WORDS",
+	DIALOGUE_RATIO: "DIALOGUE_RATIO",
+	NUMERIC_CONTRADICTION: "NUMERIC_CONTRADICTION",
+	NUMERIC_FACT_MISMATCH: "NUMERIC_FACT_MISMATCH"
 };
 /** Cross-chapter families. */
 const CROSS_RULES = {
@@ -1040,6 +1114,142 @@ const slidingWindows = (text, size) => {
 	if (windows[windows.length - 1] !== tail) windows.push(tail);
 	return windows;
 };
+const dialogueRatio = (ctx) => {
+	const target = ctx.targets?.dialogue_ratio;
+	if (target === void 0) return [];
+	const ratio = countWordMetrics(ctx.text).dialogue_ratio;
+	if (ratio >= target[0] && ratio <= target[1]) return [];
+	return [v(SEMANTIC_RULES.DIALOGUE_RATIO, "advisory", 1, `dialogue ratio ${Math.round(ratio * 1e3) / 10}% is outside target ${Math.round(target[0] * 1e3) / 10}%..${Math.round(target[1] * 1e3) / 10}% (quoted lines / non-empty lines)`)];
+};
+const CN_DIGITS = {
+	零: 0,
+	一: 1,
+	二: 2,
+	两: 2,
+	三: 3,
+	四: 4,
+	五: 5,
+	六: 6,
+	七: 7,
+	八: 8,
+	九: 9
+};
+const CN_UNITS = {
+	十: 10,
+	百: 100,
+	千: 1e3,
+	万: 1e4
+};
+/** Parse a small Chinese/Arabic number; null means the token was not a number. */
+function parseSmallNumber(raw) {
+	if (/^\d+(?:\.\d+)?$/.test(raw)) return Number(raw);
+	let total = 0;
+	let section = 0;
+	let digit = null;
+	for (const char of raw) {
+		if (char in CN_DIGITS) {
+			digit = CN_DIGITS[char];
+			continue;
+		}
+		const unit = CN_UNITS[char];
+		if (unit === void 0) return null;
+		if (unit === 1e4) {
+			section = (section + (digit ?? 0)) * unit;
+			total += section;
+			section = 0;
+			digit = null;
+		} else {
+			section += (digit ?? 1) * unit;
+			digit = null;
+		}
+	}
+	return total + section + (digit ?? 0);
+}
+const NUMBER_TOKEN = "[零一二两三四五六七八九十百千万]+|\\d+(?:\\.\\d+)?";
+const DISTANCE_RE = new RegExp(`(${NUMBER_TOKEN})\\s*(海里|公里|千米|米|里)`, "g");
+const DURATION_RE = new RegExp(`(${NUMBER_TOKEN})\\s*个?\\s*(小时|钟头|分钟)`, "g");
+const SPEED_RE = new RegExp(`(?:时速|每小时|速度(?:是|为)?)\\s*(${NUMBER_TOKEN})\\s*(海里|公里|千米|米)`, "g");
+const METRES = {
+	米: 1,
+	里: 500,
+	公里: 1e3,
+	千米: 1e3,
+	海里: 1852
+};
+const HOURS = {
+	分钟: 1 / 60,
+	小时: 1,
+	钟头: 1
+};
+const collect = (text, pattern, units) => {
+	const result = [];
+	for (const match of text.matchAll(pattern)) {
+		const value = parseSmallNumber(match[1] ?? "");
+		if (value === null || units[match[2] ?? ""] === void 0) continue;
+		result.push({
+			value,
+			unit: match[2],
+			index: match.index ?? 0,
+			raw: match[0]
+		});
+	}
+	return result;
+};
+const numericContradiction = (ctx) => {
+	const explicit = collect(ctx.text, SPEED_RE, METRES).map((quantity) => ({
+		at: quantity.index,
+		kmh: quantity.value * METRES[quantity.unit] / 1e3,
+		raw: quantity.raw
+	}));
+	const distances = collect(ctx.text, DISTANCE_RE, METRES);
+	const durations = collect(ctx.text, DURATION_RE, HOURS);
+	const speeds = [];
+	if (distances.length > 0 && durations.length > 0) for (const distance of distances) {
+		const nearest = durations.map((duration) => ({
+			duration,
+			distance: Math.abs(duration.index - distance.index)
+		})).sort((left, right) => left.distance - right.distance)[0];
+		if (nearest === void 0 || nearest.distance > 60) continue;
+		const metres = distance.value * METRES[distance.unit];
+		const hours = nearest.duration.value * HOURS[nearest.duration.unit];
+		if (hours <= 0) continue;
+		speeds.push({
+			at: Math.min(distance.index, nearest.duration.index),
+			kmh: metres / 1e3 / hours,
+			raw: `${distance.raw} / ${nearest.duration.raw}`
+		});
+	}
+	const anchors = explicit.length > 0 ? explicit : speeds;
+	if (anchors.length < 2) return [];
+	const positive = anchors.filter((anchor) => anchor.kmh > 0);
+	if (positive.length < 2) return [];
+	const min = Math.min(...positive.map((anchor) => anchor.kmh));
+	const max = Math.max(...positive.map((anchor) => anchor.kmh));
+	if (max / Math.max(1e-4, min) < 1.5) return [];
+	const firstNeedle = positive[0].raw.split(" / ")[0];
+	const paragraphIndex = splitParagraphs(ctx.text).findIndex((paragraph) => paragraph.includes(firstNeedle));
+	return [v(SEMANTIC_RULES.NUMERIC_CONTRADICTION, "advisory", Math.max(1, paragraphIndex + 1), `numeric statements imply different speeds (${min.toFixed(1)}–${max.toFixed(1)} km/h): ${positive.slice(0, 3).map((anchor) => anchor.raw).join("; ")}`)];
+};
+const escapePattern = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
+const numericFactMismatch = (ctx) => {
+	if (ctx.facts === void 0 || ctx.facts.length === 0) return [];
+	const results = [];
+	const paragraphs = splitParagraphs(ctx.text);
+	for (const fact of ctx.facts) {
+		if (fact.alias.trim() === "" || !Number.isFinite(fact.value)) continue;
+		const tolerance = fact.tolerance ?? 0;
+		const pattern = new RegExp(`${escapePattern(fact.alias)}\\s*(?:是|为|约|有|：|:)?\\s*(${NUMBER_TOKEN})\\s*${escapePattern(fact.unit)}`, "g");
+		for (const match of ctx.text.matchAll(pattern)) {
+			const value = parseSmallNumber(match[1] ?? "");
+			if (value === null) continue;
+			if (Math.abs(value - fact.value) <= tolerance) continue;
+			const paragraph = paragraphs.findIndex((candidate) => candidate.includes(match[0]));
+			results.push(v(SEMANTIC_RULES.NUMERIC_FACT_MISMATCH, "advisory", Math.max(1, paragraph + 1), `"${fact.alias}" declares ${fact.value}${fact.unit}, text shows ${value}${fact.unit}`));
+			break;
+		}
+	}
+	return results;
+};
 const pleasureDensity = (ctx) => {
 	const { min, keywords, window } = ctx.rulepack.semantics.pleasure_density;
 	if (keywords.length === 0) return [];
@@ -1238,6 +1448,9 @@ const BUILTIN_RULES = {
 	[SEMANTIC_RULES.PLEASURE_DENSITY]: pleasureDensity,
 	[SEMANTIC_RULES.SENSORY_DENSITY]: sensoryDensity,
 	[SEMANTIC_RULES.WATER_WORDS]: waterWords,
+	[SEMANTIC_RULES.DIALOGUE_RATIO]: dialogueRatio,
+	[SEMANTIC_RULES.NUMERIC_CONTRADICTION]: numericContradiction,
+	[SEMANTIC_RULES.NUMERIC_FACT_MISMATCH]: numericFactMismatch,
 	[CROSS_RULES.DUPLICATE_PARAGRAPH]: duplicateParagraph,
 	[CROSS_RULES.FORESHADOW_DORMANT]: foreshadowDormant,
 	[CROSS_RULES.FS_REVISITED_TOO_SOON]: revisitedTooSoon,
@@ -1455,6 +1668,7 @@ const SCHEMAS = {
 		rounds: req("object"),
 		briefs: req("object"),
 		blocking: req("array"),
+		draft: f("object"),
 		review_digest: f("string"),
 		last_action: f("any")
 	},
@@ -1510,6 +1724,7 @@ const SCHEMAS = {
 		content_hash: req("string"),
 		machine: req("object"),
 		semantic: req("object"),
+		acknowledged: f("array"),
 		verdict: req("string", { enum: ["pass", "fail"] })
 	},
 	worldPlan: {
@@ -1546,6 +1761,7 @@ const SCHEMAS = {
 		characters: req("array"),
 		glossary: req("array"),
 		backstory: req("array"),
+		facts: f("array"),
 		themes: req("array")
 	}
 };
@@ -1625,6 +1841,26 @@ const validateNested = (kind, record) => {
 			if (targets.total_chapters !== null) integerAt(kind, targets.total_chapters, "targets.total_chapters");
 			return;
 		}
+		case "pipeline": {
+			const rounds = objectAt(kind, record.rounds, "rounds");
+			for (const key of [
+				"review",
+				"revise",
+				"check"
+			]) integerAt(kind, rounds[key], `rounds.${key}`);
+			if (rounds.rollbacks !== void 0) integerAt(kind, rounds.rollbacks, "rounds.rollbacks");
+			if (record.draft !== void 0) {
+				const draft = objectAt(kind, record.draft, "draft");
+				integerAt(kind, draft.chapter, "draft.chapter");
+				stringAt(kind, draft.title, "draft.title");
+				stringAt(kind, draft.scene_type, "draft.scene_type");
+				stringAt(kind, draft.narrator, "draft.narrator");
+				stringAt(kind, draft.content_hash, "draft.content_hash");
+				stringAt(kind, draft.updated_at, "draft.updated_at");
+				validateSummary(kind, draft.summary, "draft.summary");
+			}
+			return;
+		}
 		case "chapters":
 			validateRecords(kind, record.chapters, "chapters", (row, path) => {
 				integerAt(kind, row.num, `${path}.num`);
@@ -1641,6 +1877,17 @@ const validateNested = (kind, record) => {
 				validateSummary(kind, row.summary, `${path}.summary`);
 				if (row.assigned_ids !== void 0) objectAt(kind, row.assigned_ids, `${path}.assigned_ids`);
 				optionalString(kind, row.archive_digest, `${path}.archive_digest`);
+				optionalString(kind, row.final_check, `${path}.final_check`);
+				optionalString(kind, row.archived_at, `${path}.archived_at`);
+				if (row.rounds !== void 0) {
+					const rounds = objectAt(kind, row.rounds, `${path}.rounds`);
+					for (const key of [
+						"review",
+						"revise",
+						"check"
+					]) integerAt(kind, rounds[key], `${path}.rounds.${key}`);
+					if (rounds.rollbacks !== void 0) integerAt(kind, rounds.rollbacks, `${path}.rounds.rollbacks`);
+				}
 			});
 			return;
 		case "characters":
@@ -1699,6 +1946,7 @@ const validateNested = (kind, record) => {
 				integerAt(kind, row.last_touched, `${path}.last_touched`);
 				stringAt(kind, row.status, `${path}.status`);
 				stringAt(kind, row.description, `${path}.description`);
+				optionalString(kind, row.anchor, `${path}.anchor`);
 				listAt(kind, row.advance_log, `${path}.advance_log`);
 			});
 			return;
@@ -1982,6 +2230,61 @@ var FsStore = class {
 			throw error;
 		}
 	}
+	/**
+	* Directory entries without following symlinks. Used by bounded workspace
+	* discovery so a symlinked child is never mistaken for a project.
+	*/
+	async entries(relativeDir) {
+		try {
+			const absolute = relativeDir === "." ? resolve(this.root) : await this.safePath(relativeDir);
+			return (await promises.readdir(absolute, { withFileTypes: true })).map((entry) => ({
+				name: entry.name,
+				directory: entry.isDirectory(),
+				symbolicLink: entry.isSymbolicLink()
+			})).sort((a, b) => a.name < b.name ? -1 : a.name > b.name ? 1 : 0);
+		} catch (error) {
+			if (isMissing(error)) return [];
+			throw error;
+		}
+	}
+	/**
+	* Metadata for a path without following the final symlink. A scandir probe
+	* only needs to know that a candidate is a real directory; it must not read
+	* through a link to decide that.
+	*/
+	async lstat(relativePath) {
+		try {
+			const info = await promises.lstat(relativePath === "." ? resolve(this.root) : this.path(relativePath));
+			return {
+				directory: info.isDirectory(),
+				symbolicLink: info.isSymbolicLink(),
+				file: info.isFile()
+			};
+		} catch (error) {
+			if (isMissing(error)) return null;
+			throw error;
+		}
+	}
+	/**
+	* Follow a project-root symlink when classifying the root itself. Child
+	* discovery still uses lstat/entries, so a symlinked *subdirectory* remains
+	* out of workspace scans. The device/inode pair lets a transaction detect a
+	* root that was deleted and recreated under the same path.
+	*/
+	async statRoot() {
+		try {
+			const info = await promises.stat(resolve(this.root));
+			return {
+				directory: info.isDirectory(),
+				dev: info.dev,
+				ino: info.ino,
+				birthtimeMs: info.birthtimeMs
+			};
+		} catch (error) {
+			if (isMissing(error)) return null;
+			throw error;
+		}
+	}
 	async readText(relativePath) {
 		try {
 			return await promises.readFile(await this.safePath(relativePath), "utf8");
@@ -2002,10 +2305,33 @@ var FsStore = class {
 		}
 		return narrow(kind, (typeof parsed === "object" && parsed !== null && typeof parsed.schema_version === "number" ? parsed.schema_version : 1) < 1 ? migrateDocument(parsed, MIGRATIONS, 1) : parsed);
 	}
+	/**
+	* Create missing directories below the store root without ever recreating the
+	* root itself. `mkdir(..., {recursive:true})` silently recreates a deleted
+	* project directory; walking one segment at a time makes the first missing
+	* root fail with ENOENT and keeps deleted projects deleted.
+	*/
+	async ensureParent(absolutePath) {
+		const root = resolve(this.root);
+		const parent = dirname(absolutePath);
+		const rel = relative(root, parent);
+		if (rel === "" || rel === ".") return;
+		let current = root;
+		for (const segment of rel.split(sep)) {
+			if (segment === "") continue;
+			current = join(current, segment);
+			try {
+				await promises.mkdir(current);
+			} catch (error) {
+				if (error.code === "EEXIST") continue;
+				throw error;
+			}
+		}
+	}
 	/** Write text atomically: temp file, fsync, rename, directory fsync. */
 	async writeText(relativePath, text) {
 		const absolute = await this.safePath(relativePath);
-		await promises.mkdir(dirname(absolute), { recursive: true });
+		await this.ensureParent(absolute);
 		const temp = `${absolute}.${randomUUID()}.tmp`;
 		try {
 			const handle = await promises.open(temp, "w");
@@ -2042,7 +2368,7 @@ var FsStore = class {
 	/** Raw append used only by the journal (JSONL is append-only by design). */
 	async appendText(relativePath, text) {
 		const absolute = await this.safePath(relativePath);
-		await promises.mkdir(dirname(absolute), { recursive: true });
+		await this.ensureParent(absolute);
 		const handle = await promises.open(absolute, "a+");
 		try {
 			const info = await handle.stat();
@@ -2069,7 +2395,7 @@ var FsStore = class {
 	}
 	async writeBytes(relativePath, bytes) {
 		const absolute = await this.safePath(relativePath);
-		await promises.mkdir(dirname(absolute), { recursive: true });
+		await this.ensureParent(absolute);
 		const temp = `${absolute}.${randomUUID()}.tmp`;
 		try {
 			const handle = await promises.open(temp, "w");
@@ -2153,17 +2479,29 @@ async function readJournal(store) {
 				status: raw.status
 			};
 			if (typeof raw.reason === "string") record.reason = raw.reason;
+			if (typeof raw.code === "string") record.code = raw.code;
+			if (typeof raw.hint === "string") record.hint = raw.hint;
+			if (typeof raw.stage === "string") record.stage = raw.stage;
+			if (raw.attempt === true) record.attempt = true;
+			if (Array.isArray(raw.blocking)) record.blocking = raw.blocking.map((item) => typeof item === "object" && item !== null ? item : null).filter((item) => item !== null);
 			if (typeof raw.hashes === "object" && raw.hashes !== null && !Array.isArray(raw.hashes)) record.hashes = Object.fromEntries(Object.entries(raw.hashes).filter((entry) => typeof entry[1] === "string"));
 			if (typeof raw.before === "object" && raw.before !== null && !Array.isArray(raw.before)) record.before = Object.fromEntries(Object.entries(raw.before).filter((entry) => entry[1] === null || typeof entry[1] === "string"));
 			records.push(record);
 			if (record.status !== "pending") rows.push({
+				seq: rows.length + 1,
 				at: record.at,
 				op: record.op,
 				chapter: record.chapter,
 				revision: record.revision,
 				txid: record.txid,
 				status: record.status,
-				files: record.files
+				files: record.files,
+				...record.code === void 0 ? {} : { code: record.code },
+				...record.reason === void 0 ? {} : { reason: record.reason },
+				...record.hint === void 0 ? {} : { hint: record.hint },
+				...record.stage === void 0 ? {} : { stage: record.stage },
+				...record.attempt === true ? { attempt: true } : {},
+				...record.blocking === void 0 ? {} : { blocking: record.blocking }
 			});
 		} catch {
 			malformed += 1;
@@ -2187,7 +2525,7 @@ function assertJournalHealthy(malformed) {
 async function reconcileJournal(store) {
 	const { records, malformed } = await readJournal(store);
 	const expected = /* @__PURE__ */ new Map();
-	const tracked = (path) => (path === "novel.yaml" || path.startsWith("state/") || path === "outline/outline.yaml" || path === "outline/worldbook.yaml") && path !== "state/archive-digests.json";
+	const tracked = (path) => (path === "novel.yaml" || path.startsWith("state/") || path === "outline/outline.yaml" || path === "outline/worldbook.yaml") && path !== "state/archive-digests.json" && path !== "state/briefs.yaml";
 	for (const record of records) {
 		if (record.status !== "committed" || record.hashes === void 0) continue;
 		for (const [path, hash] of Object.entries(record.hashes)) {
@@ -2254,6 +2592,7 @@ async function recoverPending(store) {
 		await appendJournal(store, {
 			...last,
 			status: "aborted",
+			code: ERROR_CODES.TXN_ABORTED,
 			reason: "recovered: the process stopped before the transaction renamed a target"
 		});
 		await store.removeTree(joinRel(STAGING_DIR, last.txid)).catch(() => void 0);
@@ -2480,6 +2819,7 @@ const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
 // src/store/backup.ts
 /** Marks a directory this engine owns; user files under backups/ are never pruned. */
 const BACKUP_MARKER = ".engine-backup";
+const BACKUP_MANIFEST = "manifest.json";
 /** Backup transaction directories, newest first by filesystem mtime. */
 async function listBackups(store) {
 	const entries = [];
@@ -2487,13 +2827,51 @@ async function listBackups(store) {
 		const info = await store.stat(joinRel(BACKUP_DIR, name));
 		if (info === null || !info.isDirectory) continue;
 		if (!await store.exists(joinRel("backups", name, ".engine-backup"))) continue;
+		const raw = await store.readText(joinRel(BACKUP_DIR, name, BACKUP_MANIFEST));
+		let manifest = null;
+		if (raw !== null) try {
+			manifest = JSON.parse(raw);
+		} catch {
+			manifest = null;
+		}
+		const fileNames = Array.isArray(manifest?.files) ? manifest.files.filter((file) => typeof file === "string") : [];
 		entries.push({
 			name,
-			mtimeMs: info.mtimeMs
+			mtimeMs: info.mtimeMs,
+			txid: typeof manifest?.txid === "string" ? manifest.txid : name,
+			op: typeof manifest?.op === "string" ? manifest.op : null,
+			chapter: typeof manifest?.chapter === "number" ? manifest.chapter : null,
+			revision: typeof manifest?.revision === "number" ? manifest.revision : null,
+			at: typeof manifest?.at === "string" ? manifest.at : null,
+			reason: typeof manifest?.reason === "string" ? manifest.reason : null,
+			files: fileNames
 		});
 	}
 	return entries.sort((left, right) => right.mtimeMs - left.mtimeMs);
 }
+/** Read one manifest, refusing a directory this engine did not create. */
+async function readBackupManifest(store, name) {
+	if (!/^[0-9a-f-]{36}$/i.test(name)) return null;
+	if (!await store.exists(joinRel("backups", name, ".engine-backup"))) return null;
+	const raw = await store.readText(joinRel(BACKUP_DIR, name, BACKUP_MANIFEST));
+	if (raw === null) return null;
+	try {
+		const value = JSON.parse(raw);
+		if (value.schema_version !== 1 || typeof value.txid !== "string" || typeof value.op !== "string" || typeof value.chapter !== "number" || typeof value.revision !== "number" || typeof value.at !== "string" || !Array.isArray(value.files)) return null;
+		return {
+			schema_version: 1,
+			txid: value.txid,
+			op: value.op,
+			chapter: value.chapter,
+			revision: value.revision,
+			at: value.at,
+			...typeof value.reason === "string" ? { reason: value.reason } : {},
+			files: value.files.filter((file) => typeof file === "string")
+		};
+	} catch {
+		return null;
+	}
+}
 /**
 * Keep the newest `keep` backup directories. Only directories directly under
 * `backups/` are considered, and only directories this engine created are
@@ -2557,8 +2935,37 @@ async function runTransaction(store, input) {
 	let journaledCommitted = false;
 	let backupMarked = false;
 	let backupComplete = false;
+	let rootDisappeared = false;
+	let rootIdentity = null;
+	const rootKey = (info) => `${info.dev}:${info.ino}:${info.birthtimeMs}`;
+	const rootUnavailable = async () => {
+		try {
+			const info = await store.statRoot();
+			return info === null || !info.directory || rootIdentity !== null && rootKey(info) !== rootIdentity;
+		} catch {
+			return false;
+		}
+	};
+	const assertRootPresent = async () => {
+		const info = await store.statRoot();
+		if (info === null || !info.directory) {
+			rootDisappeared = true;
+			throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, "the project root disappeared during the transaction", "restore the directory/mount and retry; the engine will not recreate a deleted project");
+		}
+		const key = rootKey(info);
+		if (rootIdentity === null) {
+			rootIdentity = key;
+			return;
+		}
+		if (key !== rootIdentity) {
+			rootDisappeared = true;
+			throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, "the project root was replaced during the transaction", "restore the original directory/mount and retry; the engine will not write into a replacement project");
+		}
+	};
 	try {
+		await assertRootPresent();
 		for (const file of input.files) {
+			await assertRootPresent();
 			const target = joinRel(staging, file.path);
 			if (file.bytes !== void 0) await store.writeBytes(target, file.bytes);
 			else await store.writeText(target, file.text ?? "");
@@ -2571,6 +2978,7 @@ async function runTransaction(store, input) {
 			if (sha256(stagedBytes.toString("base64")) !== expected.get(file.path)) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `staged copy of ${file.path} failed verification`);
 		}
 		if (input.afterVerify !== void 0) await input.afterVerify();
+		await assertRootPresent();
 		for (const file of input.files) before.set(file.path, await store.readBytes(file.path));
 		for (const file of input.files) {
 			const existing = before.get(file.path);
@@ -2585,6 +2993,16 @@ async function runTransaction(store, input) {
 				await store.writeBytes(joinRel(stagingBackup, file.path), existing);
 			}
 			await store.writeText(joinRel(stagingBackup, BACKUP_MARKER), "1");
+			await store.writeText(joinRel(stagingBackup, BACKUP_MANIFEST), `${JSON.stringify({
+				schema_version: 1,
+				txid: input.txid,
+				op: input.op,
+				chapter: input.chapter,
+				revision: input.revision,
+				at: (/* @__PURE__ */ new Date()).toISOString(),
+				...input.reason === void 0 ? {} : { reason: input.reason },
+				files: input.files.filter((file) => before.get(file.path) !== null && before.get(file.path) !== void 0).map((file) => file.path)
+			}, null, 2)}\n`);
 			const targetBackup = store.path(backupDir(input.txid));
 			await promises.mkdir(dirname(targetBackup), { recursive: true });
 			await promises.rename(store.path(stagingBackup), targetBackup);
@@ -2592,6 +3010,7 @@ async function runTransaction(store, input) {
 			backupMarked = true;
 			backupComplete = true;
 		}
+		await assertRootPresent();
 		const beforeHashes = Object.fromEntries(input.files.map((file) => {
 			const bytes = before.get(file.path);
 			return [file.path, bytes === null || bytes === void 0 ? null : sha256(Buffer.from(bytes).toString("base64"))];
@@ -2609,6 +3028,7 @@ async function runTransaction(store, input) {
 			...input.reason === void 0 ? {} : { reason: input.reason }
 		});
 		for (const [index, file] of input.files.entries()) {
+			await assertRootPresent();
 			const from = await store.safePath(joinRel(staging, file.path));
 			const to = await store.safePath(file.path);
 			await promises.mkdir(dirname(to), { recursive: true });
@@ -2617,6 +3037,7 @@ async function runTransaction(store, input) {
 			renamed.push(file.path);
 			if (input.afterRename !== void 0) await input.afterRename(file.path, index);
 		}
+		await assertRootPresent();
 		for (const directory of targetDirectories) await syncDirectory(directory);
 		for (const file of input.files) if (await store.hashBytes(file.path) !== expected.get(file.path)) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `readback of ${file.path} does not match what was staged`, "the file on disk was modified by another process during the commit");
 		await appendJournal(store, {
@@ -2638,13 +3059,14 @@ async function runTransaction(store, input) {
 			force: true
 		}).catch(() => void 0);
 	} catch (error) {
-		const rollbackProblem = await restoreTargets(store, renamed, before);
-		if (rollbackProblem === null) await promises.rm(store.path(staging), {
+		if (!rootDisappeared) rootDisappeared = await rootUnavailable();
+		const rollbackProblem = rootDisappeared ? null : await restoreTargets(store, renamed, before);
+		if (!rootDisappeared && rollbackProblem === null) await promises.rm(store.path(staging), {
 			recursive: true,
 			force: true
 		}).catch(() => void 0);
-		if (input.backup && (!backupMarked || !backupComplete && renamed.length === 0)) await store.removeTree(backupDir(input.txid)).catch(() => void 0);
-		if (!journaledCommitted) await appendJournal(store, {
+		if (!rootDisappeared && input.backup && (!backupMarked || !backupComplete && renamed.length === 0)) await store.removeTree(backupDir(input.txid)).catch(() => void 0);
+		if (!journaledCommitted && !rootDisappeared) await appendJournal(store, {
 			txid: input.txid,
 			at: (/* @__PURE__ */ new Date()).toISOString(),
 			op: input.op,
@@ -2652,6 +3074,7 @@ async function runTransaction(store, input) {
 			revision: input.revision,
 			files: input.files.map((file) => file.path),
 			status: "aborted",
+			code: error instanceof EngineError ? error.code : ERROR_CODES.TXN_ABORTED,
 			reason: error instanceof Error ? error.message : String(error)
 		}, { repairTrailing: true }).catch(() => void 0);
 		const suffix = rollbackProblem === null ? "" : `; compensation was incomplete: ${rollbackProblem}; do not retry until the files are restored`;
@@ -2663,7 +3086,7 @@ async function runTransaction(store, input) {
 	}
 }
 // src/store/registry.ts
-const empty = () => ({
+const empty$1 = () => ({
 	schema_version: 1,
 	active: null,
 	projects: []
@@ -2680,7 +3103,7 @@ var ProjectRegistry = class {
 	/** Read the registry; a missing file is an empty registry, a corrupt one is a fault. */
 	async read() {
 		const text = await this.store.readText(REGISTRY_FILE);
-		if (text === null) return empty();
+		if (text === null) return empty$1();
 		let raw;
 		try {
 			raw = parse(text);
@@ -2690,20 +3113,45 @@ var ProjectRegistry = class {
 		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} is not an object`);
 		const record = raw;
 		if (record.schema_version !== 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE} has an unsupported schema_version`);
+		const projects = [];
+		const indexes = /* @__PURE__ */ new Map();
+		if (record.projects !== void 0 && !Array.isArray(record.projects)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${REGISTRY_FILE}.projects must be an array`, "fix or delete the registry file; projects on disk are unaffected");
+		if (Array.isArray(record.projects)) for (const value of record.projects) {
+			if (typeof value !== "object" || value === null || Array.isArray(value)) continue;
+			const entry = value;
+			if (typeof entry.root !== "string" || entry.root === "") continue;
+			if (typeof entry.title !== "string") continue;
+			const normalized = {
+				root: resolve(entry.root),
+				title: entry.title,
+				...typeof entry.created_at === "string" && entry.created_at !== "" ? { created_at: entry.created_at } : {},
+				updated_at: typeof entry.updated_at === "string" ? entry.updated_at : ""
+			};
+			const existing = indexes.get(normalized.root);
+			if (existing === void 0) {
+				indexes.set(normalized.root, projects.length);
+				projects.push(normalized);
+			} else projects[existing] = normalized;
+		}
 		return {
 			schema_version: 1,
-			active: typeof record.active === "string" ? record.active : null,
-			projects: Array.isArray(record.projects) ? record.projects.filter((entry) => typeof entry === "object" && entry !== null && typeof entry.root === "string" && typeof entry.title === "string") : []
+			active: typeof record.active === "string" && record.active.trim() !== "" ? resolve(record.active) : null,
+			projects
 		};
 	}
 	/** Insert or update one project row. */
 	async register(entry) {
 		const document = await this.read();
+		const root = resolve(entry.root);
+		const previous = document.projects.find((candidate) => candidate.root === root);
+		const created_at = entry.created_at ?? previous?.created_at;
 		const row = {
-			...entry,
+			root,
+			title: entry.title,
+			...created_at === void 0 || created_at === "" ? {} : { created_at },
 			updated_at: (/* @__PURE__ */ new Date()).toISOString()
 		};
-		const rows = document.projects.filter((candidate) => candidate.root !== entry.root);
+		const rows = document.projects.filter((candidate) => candidate.root !== root);
 		rows.push(row);
 		const next = {
 			...document,
@@ -2716,7 +3164,7 @@ var ProjectRegistry = class {
 	async setActive(root) {
 		const next = {
 			...await this.read(),
-			active: root
+			active: resolve(root)
 		};
 		await this.write(next);
 		return next;
@@ -2724,10 +3172,11 @@ var ProjectRegistry = class {
 	/** Drop a row; the project on disk is untouched. */
 	async forget(root) {
 		const document = await this.read();
+		const target = resolve(root);
 		const next = {
 			...document,
-			projects: document.projects.filter((entry) => entry.root !== root),
-			active: document.active === root ? null : document.active
+			projects: document.projects.filter((entry) => entry.root !== target),
+			active: document.active === target ? null : document.active
 		};
 		await this.write(next);
 		return next;
@@ -2736,6 +3185,132 @@ var ProjectRegistry = class {
 		await this.store.writeText(REGISTRY_FILE, stringify(document, { lineWidth: 0 }));
 	}
 };
+// src/store/bindings.ts
+const empty = () => ({
+	schema_version: 1,
+	bindings: []
+});
+const sources = /* @__PURE__ */ new Set([
+	"explicit",
+	"init",
+	"command"
+]);
+const row = (value) => {
+	if (typeof value !== "object" || value === null || Array.isArray(value)) return null;
+	const record = value;
+	if (typeof record.session_id !== "string" || record.session_id === "") return null;
+	if (typeof record.root !== "string" || record.root === "") return null;
+	const source = typeof record.source === "string" && sources.has(record.source) ? record.source : "explicit";
+	return {
+		session_id: record.session_id,
+		root: resolve(record.root),
+		title: typeof record.title === "string" ? record.title : "",
+		project_created_at: typeof record.project_created_at === "string" ? record.project_created_at : "",
+		bound_at: typeof record.bound_at === "string" ? record.bound_at : "",
+		source
+	};
+};
+/**
+* Session-scoped project choices. This file is convenience state, never project
+* truth: deleting it loses no book, and a corrupt file is a hard read error
+* rather than a silent "no bindings" that could write into another project.
+*/
+var SessionBindings = class {
+	store;
+	options;
+	constructor(store, options = {}) {
+		this.store = store;
+		this.options = options;
+	}
+	async read() {
+		const text = await this.store.readText(SESSION_BINDINGS_FILE);
+		if (text === null) return empty();
+		let raw;
+		try {
+			raw = parse(text);
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${SESSION_BINDINGS_FILE} is not valid YAML: ${error instanceof Error ? error.message : String(error)}`, "fix or delete the session binding file; projects on disk are unaffected", { cause: error });
+		}
+		if (typeof raw !== "object" || raw === null || Array.isArray(raw)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${SESSION_BINDINGS_FILE} is not an object`);
+		const record = raw;
+		if (record.schema_version !== 1) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${SESSION_BINDINGS_FILE} has an unsupported schema_version`);
+		if (record.bindings !== void 0 && !Array.isArray(record.bindings)) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${SESSION_BINDINGS_FILE}.bindings must be an array`, "fix or delete the session binding file; projects on disk are unaffected");
+		const bindings = [];
+		const indexes = /* @__PURE__ */ new Map();
+		for (const candidate of record.bindings ?? []) {
+			const parsed = row(candidate);
+			if (parsed === null) continue;
+			const existing = indexes.get(parsed.session_id);
+			if (existing === void 0) {
+				indexes.set(parsed.session_id, bindings.length);
+				bindings.push(parsed);
+			} else bindings[existing] = parsed;
+		}
+		return {
+			schema_version: 1,
+			bindings
+		};
+	}
+	async get(sessionId) {
+		return (await this.read()).bindings.find((entry) => entry.session_id === sessionId);
+	}
+	async list() {
+		return (await this.read()).bindings;
+	}
+	/**
+	* Insert or update one session's choice. A byte-for-byte equivalent binding
+	* does not touch the file, so a read-only operation can call this safely.
+	*/
+	async bind(input) {
+		const document = await this.read();
+		const root = resolve(input.root);
+		const existing = document.bindings.find((entry) => entry.session_id === input.session_id);
+		if (existing !== void 0 && existing.root === root && existing.title === input.title && existing.project_created_at === input.project_created_at) return {
+			binding: existing,
+			document,
+			changed: false
+		};
+		const binding = {
+			session_id: input.session_id,
+			root,
+			title: input.title,
+			project_created_at: input.project_created_at,
+			bound_at: (this.options.now ?? (() => /* @__PURE__ */ new Date()))().toISOString(),
+			source: input.source
+		};
+		const next = {
+			schema_version: 1,
+			bindings: existing === void 0 ? [...document.bindings, binding] : document.bindings.map((entry) => entry.session_id === input.session_id ? binding : entry)
+		};
+		await this.write(next);
+		return {
+			binding,
+			document: next,
+			changed: true
+		};
+	}
+	/** Remove one session binding; a missing row is a no-op. */
+	async clear(sessionId) {
+		const document = await this.read();
+		const bindings = document.bindings.filter((entry) => entry.session_id !== sessionId);
+		if (bindings.length === document.bindings.length) return {
+			document,
+			changed: false
+		};
+		const next = {
+			schema_version: 1,
+			bindings
+		};
+		await this.write(next);
+		return {
+			document: next,
+			changed: true
+		};
+	}
+	async write(document) {
+		await this.store.writeText(SESSION_BINDINGS_FILE, stringify(document, { lineWidth: 0 }));
+	}
+};
 // src/assets.ts
 /**
 * The only reader of bundled assets. `apply()` performs no IO; the engine and
@@ -3124,6 +3699,7 @@ function emptyWorldbook(now) {
 		characters: [],
 		glossary: [],
 		backstory: [],
+		facts: [],
 		themes: []
 	};
 }
@@ -3132,15 +3708,28 @@ function outlineCard(document, chapter) {
 	return document.chapters.find((card) => card.num === chapter) ?? null;
 }
 /** A compact progress view used by status, the panel and the report. */
-function outlineSummary(document, archivedCount) {
+function outlineSummary(document, archivedCount, target = null, archivedNumbers) {
 	const planned = document.chapters.filter((card) => card.status === "planned").length;
 	const archived = document.chapters.filter((card) => card.status === "archived").length;
+	const total = document.chapters.length;
+	const missingCards = target === null ? 0 : Math.max(0, target - total);
+	const plannedCoverage = target === null || target === 0 ? null : Math.min(1, total / target);
+	const archivedCoverage = target === null || target === 0 ? null : Math.min(1, archived / target);
+	const archivedSet = archivedNumbers === void 0 ? null : new Set(archivedNumbers);
+	const matchedCards = archivedSet === null ? archived : document.chapters.filter((card) => card.status === "archived" && archivedSet.has(card.num)).length;
+	const archivedDenominator = archivedSet === null ? archivedCount : archivedSet.size;
+	const cardCoverage = archivedDenominator === 0 ? 1 : Math.min(1, matchedCards / archivedDenominator);
 	return {
-		present: bookPlanPresent(document.book) || document.volumes.length > 0 || document.chapters.length > 0,
-		total: document.chapters.length,
+		present: bookPlanPresent(document.book) || document.volumes.length > 0 || total > 0,
+		target,
+		total,
 		planned,
 		archived,
-		coverage: archivedCount === 0 ? 0 : Math.min(1, archived / archivedCount),
+		missingCards,
+		plannedCoverage,
+		archivedCoverage,
+		coverage: plannedCoverage ?? (archivedDenominator === 0 ? 0 : cardCoverage),
+		cardCoverage,
 		volumes: document.volumes.length
 	};
 }
@@ -3469,6 +4058,7 @@ function mergeWorldbook(existing, patch, now) {
 		characters: [...existing.characters],
 		glossary: [...existing.glossary],
 		backstory: [...existing.backstory],
+		facts: [...existing.facts ?? []],
 		themes: [...existing.themes]
 	};
 	if (patch.premise !== void 0) result.premise = optionalText(patch.premise, "premise", LIMITS.maxWorldbookTextChars);
@@ -3534,6 +4124,26 @@ function mergeWorldbook(existing, patch, now) {
 		time: text$1(raw.time, `backstory[${index}].time`, 120),
 		event: text$1(raw.event, `backstory[${index}].event`, LIMITS.maxWorldbookTextChars)
 	}));
+	if (patch.facts !== void 0) {
+		result.facts = records(patch.facts, "facts").map((raw, index) => {
+			const value = raw.value;
+			if (typeof value !== "number" || !Number.isFinite(value)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `facts[${index}].value must be a finite number`);
+			const tolerance = raw.tolerance ?? 0;
+			if (typeof tolerance !== "number" || !Number.isFinite(tolerance) || tolerance < 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `facts[${index}].tolerance must be a non-negative number`);
+			return {
+				alias: text$1(raw.alias, `facts[${index}].alias`, 120),
+				value,
+				unit: text$1(raw.unit, `facts[${index}].unit`, 40),
+				tolerance,
+				...raw.note === void 0 ? {} : { note: optionalText(raw.note, `facts[${index}].note`) }
+			};
+		});
+		const seenFacts = /* @__PURE__ */ new Set();
+		for (const fact of result.facts) {
+			if (seenFacts.has(fact.alias)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `facts contains duplicate "${fact.alias}"`);
+			seenFacts.add(fact.alias);
+		}
+	}
 	return result;
 }
 /** Validate a worldbook loaded from disk. */
@@ -3552,6 +4162,7 @@ function validateWorldbookDocument(value, now) {
 			"characters",
 			"glossary",
 			"backstory",
+			"facts",
 			"themes"
 		]);
 		for (const key of Object.keys(value)) if (!allowedTopLevel.has(key)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `outline/worldbook.yaml has unknown key "${key}"`);
@@ -3672,14 +4283,16 @@ function outlineDrift(document, records) {
 }
 /** Counts for status/panel/report; no IO. */
 function worldbookCounts(document) {
+	const facts = document.facts?.length ?? 0;
 	return {
-		present: document.premise !== "" || document.setting !== "" || document.themes.length > 0 || document.characters.length > 0 || document.locations.length > 0 || document.factions.length > 0 || document.rules.length > 0 || document.glossary.length > 0 || document.backstory.length > 0,
+		present: document.premise !== "" || document.setting !== "" || document.themes.length > 0 || document.characters.length > 0 || document.locations.length > 0 || document.factions.length > 0 || document.rules.length > 0 || document.glossary.length > 0 || document.backstory.length > 0 || facts > 0,
 		characters: document.characters.length,
 		locations: document.locations.length,
 		factions: document.factions.length,
 		rules: document.rules.length,
 		glossary: document.glossary.length,
-		backstory: document.backstory.length
+		backstory: document.backstory.length,
+		facts
 	};
 }
 const pick = (values, mentioned, key, limit) => {
@@ -3728,6 +4341,13 @@ function worldbookBrief(document, mentioned, names) {
 		backstory: document.backstory.slice(0, 3).map((entry) => ({
 			time: entry.time,
 			event: clip(entry.event, 160)
+		})),
+		facts: (document.facts ?? []).slice(0, 20).map((fact) => ({
+			alias: clip(fact.alias, 120),
+			value: fact.value,
+			unit: clip(fact.unit, 40),
+			tolerance: fact.tolerance ?? 0,
+			...fact.note === void 0 ? {} : { note: clip(fact.note, 160) }
 		}))
 	};
 }
@@ -4095,14 +4715,18 @@ function buildBookReport(input) {
 		role: character.role,
 		appearances: appearances.get(character.name) ?? 0,
 		last_seen: Math.max(character.updated_at, lastAppearance.get(character.name) ?? 0)
-	})).sort((left, right) => right.appearances - left.appearances || right.last_seen - left.last_seen || left.name.localeCompare(right.name, "zh-CN")).slice(0, 10);
+	})).sort((left, right) => right.appearances - left.appearances || right.last_seen - left.last_seen || compareText(left.name, right.name)).slice(0, 10);
 	const latestChapter = records.length === 0 ? 0 : records[records.length - 1].num;
 	const open = input.foreshadows.items.filter((item) => item.status !== "resolved");
 	const dormant = open.filter((item) => item.status === "dormant");
 	const overdue = open.filter((item) => latestChapter - item.last_touched >= input.foreshadowDormantAfter);
 	const relationshipTypes = {};
 	for (const relationship of input.relationships.items) relationshipTypes[relationship.type] = (relationshipTypes[relationship.type] ?? 0) + 1;
-	const outline = outlineSummary(input.outline, records.length);
+	const outline = outlineSummary(input.outline, records.length, input.targetChapters, records.map((record) => record.num));
+	const averageWords = records.length === 0 ? 0 : Math.round(words / records.length);
+	const remainingChapters = input.targetChapters === null ? null : Math.max(0, input.targetChapters - records.length);
+	const minimumRemaining = remainingChapters === null ? null : remainingChapters * input.project.targets.words_per_chapter[0];
+	const averageRemaining = remainingChapters === null ? null : remainingChapters * (records.length === 0 ? input.project.targets.words_per_chapter[0] : averageWords);
 	const drift = outlineDrift(input.outline, records);
 	const volumeCounts = input.outline.volumes.map((volume) => {
 		const cards = input.outline.chapters.filter((card) => card.num >= volume.start_chapter && card.num <= volume.end_chapter);
@@ -4128,16 +4752,25 @@ function buildBookReport(input) {
 			archived: records.length,
 			target: input.targetChapters,
 			words,
-			average_words: records.length === 0 ? 0 : Math.round(words / records.length),
-			percent: input.targetChapters === null || input.targetChapters === 0 ? 0 : Math.min(100, Math.round(records.length / input.targetChapters * 100)),
-			remaining_words: input.targetChapters === null ? null : Math.max(0, (input.targetChapters - records.length) * input.project.targets.words_per_chapter[0])
+			average_words: averageWords,
+			percent: input.targetChapters === null || input.targetChapters === 0 ? 0 : Math.min(100, Math.round(records.length / input.targetChapters * 1e3) / 10),
+			remaining_words: averageRemaining,
+			remaining_words_min: minimumRemaining,
+			remaining_words_average: averageRemaining,
+			remaining_words_basis: input.targetChapters === null ? "none" : records.length === 0 ? "minimum_target" : "actual_average"
 		},
 		outline: {
 			present: outline.present,
 			strict: input.outline.book.strict,
+			target: outline.target,
+			total: outline.total,
 			planned: outline.planned,
 			archived: outline.archived,
+			missing_cards: outline.missingCards,
+			planned_coverage: outline.plannedCoverage,
+			archived_coverage: outline.archivedCoverage,
 			coverage: outline.coverage,
+			card_coverage: outline.cardCoverage,
 			volumes: volumeCounts,
 			drift
 		},
@@ -4153,7 +4786,22 @@ function buildBookReport(input) {
 				id,
 				average: Math.round(value.total / value.samples * 10) / 10,
 				samples: value.samples
-			})).sort((left, right) => left.id.localeCompare(right.id, "zh-CN"))
+			})).sort((left, right) => compareText(left.id, right.id))
+		},
+		effort: {
+			reviews: records.reduce((total, record) => total + (record.rounds?.review ?? 0), 0),
+			revisions: records.reduce((total, record) => total + (record.rounds?.revise ?? 0), 0),
+			checks: records.reduce((total, record) => total + (record.rounds?.check ?? 0), 0),
+			rollbacks: records.reduce((total, record) => total + (record.rounds?.rollbacks ?? 0), 0),
+			chapters: records.map((record) => ({
+				num: record.num,
+				reviews: record.rounds?.review ?? 0,
+				revisions: record.rounds?.revise ?? 0,
+				checks: record.rounds?.check ?? 0,
+				rollbacks: record.rounds?.rollbacks ?? 0,
+				final_check: record.final_check ?? null,
+				archived_at: record.archived_at ?? null
+			}))
 		},
 		pacing: {
 			scene_types: sceneTypes,
@@ -4171,7 +4819,7 @@ function buildBookReport(input) {
 			dormant: dormant.length,
 			overdue: overdue.length,
 			resolved: input.foreshadows.items.length - open.length,
-			oldest: [...open].sort((left, right) => left.last_touched - right.last_touched || left.id.localeCompare(right.id)).slice(0, 5).map((item) => ({
+			oldest: [...open].sort((left, right) => left.last_touched - right.last_touched || compareText(left.id, right.id)).slice(0, 5).map((item) => ({
 				id: item.id,
 				title: item.title,
 				last_touched: item.last_touched,
@@ -4455,6 +5103,10 @@ function searchSnapshot(input) {
 			...input.worldbook.backstory.map((entry) => ({
 				title: entry.time,
 				source: `${entry.time}\n${entry.event}`
+			})),
+			...(input.worldbook.facts ?? []).map((fact) => ({
+				title: fact.alias,
+				source: `${fact.alias}\n${fact.value} ${fact.unit}${fact.tolerance === void 0 ? "" : ` ±${fact.tolerance}`}\n${fact.note ?? ""}`
 			}))
 		];
 		for (const entry of entries) {
@@ -4529,6 +5181,58 @@ function searchSnapshot(input) {
 		results
 	};
 }
+// src/engine/history.ts
+const PATTERN = /^ch(?<chapter>\d{3,})\.r(?<revision>\d+)\.(?<suffix>review\.yaml|check\.yaml|chapter\.yaml|md)$/;
+const kindOf = (directory, suffix) => {
+	if (directory === "reviews") return suffix === "review.yaml";
+	if (directory === "checks") return suffix === "check.yaml";
+	if (directory === "plans") return suffix === "chapter.yaml";
+	return suffix === "md";
+};
+/**
+* List prior versions, newest revision first. Files beyond the visible cap are
+* still on disk: history is evidence, not a cache, and this function never
+* deletes it.
+*/
+async function listHistory(store, chapter) {
+	const entries = [];
+	for (const kind of HISTORY_KINDS) {
+		const names = await store.list(joinRel(HISTORY_DIR, kind));
+		for (const name of names) {
+			const match = PATTERN.exec(name);
+			if (match === null) continue;
+			const suffix = match.groups.suffix;
+			if (!kindOf(kind, suffix)) continue;
+			const num = Number(match.groups.chapter);
+			const revision = Number(match.groups.revision);
+			if (chapter !== void 0 && num !== chapter) continue;
+			const path = joinRel(HISTORY_DIR, kind, name);
+			const text = await store.readText(path);
+			entries.push({
+				kind,
+				chapter: num,
+				revision,
+				path,
+				chars: text?.length ?? 0
+			});
+		}
+	}
+	return entries.sort((left, right) => left.chapter - right.chapter || right.revision - left.revision || compareText(left.kind, right.kind));
+}
+/** Read every prior version of one kind for a chapter, oldest first. */
+async function historyTexts(store, kind, chapter, entries) {
+	const entriesForChapter = (entries ?? await listHistory(store, chapter)).filter((entry) => entry.kind === kind && entry.chapter === chapter);
+	const result = [];
+	for (const entry of entriesForChapter) {
+		const text = await store.readText(entry.path);
+		if (text !== null) result.push({
+			path: entry.path,
+			revision: entry.revision,
+			text
+		});
+	}
+	return result.sort((left, right) => left.revision - right.revision);
+}
 // src/engine/brief.ts
 const TITLES = {
 	P1: "P1 世界观约束",
@@ -5285,8 +5989,12 @@ const requireReason = (value, where) => {
 	if (value.action !== "no_change") return;
 	if (typeof value.reason !== "string" || value.reason.trim() === "") fail$1(`${where} is no_change but has no reason`);
 };
+/** A one-character anchor is indistinguishable from a substring accident. */
+const ANCHOR_MIN_CHARS = 8;
+const anchorIsStrong = (value) => typeof value === "string" && Array.from(value.trim()).length >= ANCHOR_MIN_CHARS;
 const requireForeshadowFields = (value, where) => {
 	if (value.title !== void 0 && typeof value.title !== "string") fail$1(`${where}.title must be a string`);
+	if (value.anchor !== void 0 && !anchorIsStrong(value.anchor)) fail$1(`${where}.anchor must be a verbatim quote of at least ${ANCHOR_MIN_CHARS} characters`);
 	if (value.description !== void 0 && typeof value.description !== "string") fail$1(`${where}.description must be a string`);
 	if (value.note !== void 0 && typeof value.note !== "string") fail$1(`${where}.note must be a string`);
 	if (value.new_info !== void 0 && typeof value.new_info !== "boolean") fail$1(`${where}.new_info must be a boolean`);
@@ -5297,6 +6005,32 @@ const appearanceOf = (text, name, aliases = []) => {
 	return Array.from(source).slice(0, 120).join("");
 };
 const named = (value) => isRecord(value) && typeof value.name === "string";
+const ROLE_ALIASES = {
+	主角: "protagonist",
+	男主角: "protagonist",
+	女主: "protagonist",
+	女主角: "protagonist",
+	男主: "protagonist",
+	主人公: "protagonist",
+	protagonist: "protagonist",
+	配角: "supporting",
+	重要配角: "supporting",
+	男二: "supporting",
+	女二: "supporting",
+	supporting: "supporting",
+	反派: "antagonist",
+	antagonist: "antagonist",
+	龙套: "extra",
+	路人: "extra",
+	extra: "extra"
+};
+/** Keep one canonical role vocabulary instead of letting free text reach reports. */
+const normalizeRole = (value, fallback) => {
+	const canonicalFallback = ROLE_ALIASES[fallback] ?? "extra";
+	const trimmed = value?.trim() ?? "";
+	if (trimmed === "") return canonicalFallback;
+	return ROLE_ALIASES[trimmed] ?? canonicalFallback;
+};
 /**
 * Apply the archive reconciliation sheet. Every ledger entity the summary
 * mentions must be declared; unknown keys are refused instead of being
@@ -5358,9 +6092,10 @@ function applyStateDelta(input) {
 		if (declared.action === "created") {
 			if (existing !== void 0) fail$1(`character "${name}" already exists; use updated or no_change`);
 			if (!appeared.includes(name)) fail$1(`character "${name}" is created but does not appear in characters_appeared`);
+			const hinted = normalizeRole(input.roleHints?.[name], name === narratorName || name === narrator ? "protagonist" : "extra");
 			const created = {
 				name,
-				role: declared.role ?? "extra",
+				role: normalizeRole(declared.role, hinted),
 				first_appearance: chapter,
 				profile: declared.profile ?? {},
 				current_state: declared.current_state ?? {},
@@ -5373,7 +6108,7 @@ function applyStateDelta(input) {
 		}
 		if (existing === void 0) fail$1(`character "${name}" does not exist; created must be used first`);
 		if (declared.action === "updated") {
-			if (declared.role !== void 0) existing.role = declared.role;
+			if (declared.role !== void 0) existing.role = normalizeRole(declared.role, existing.role);
 			if (declared.profile !== void 0) existing.profile = {
 				...existing.profile,
 				...declared.profile
@@ -5542,11 +6277,15 @@ function applyStateDelta(input) {
 		requireForeshadowFields(declared, `foreshadows.${plant.key}`);
 		if (declared.action !== "created") fail$1(`foreshadows.${plant.key} is planted; its action must be created`);
 		if (typeof plant.title !== "string" || plant.title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty summary title`);
-		if (!input.text.includes(plant.title)) fail$1(`planted foreshadow summary title "${plant.title}" does not appear in the manuscript`);
+		if (plant.anchor !== void 0 && !anchorIsStrong(plant.anchor)) fail$1(`foreshadow "${plant.key}" anchor must be a verbatim quote of at least ${ANCHOR_MIN_CHARS} characters`);
 		if (declared.title !== void 0 && typeof declared.title !== "string") fail$1(`foreshadows.${plant.key}.title must be a string`);
 		const title = declared.title ?? plant.title;
 		if (title.trim() === "") fail$1(`foreshadow "${plant.key}" has an empty title`);
-		if (!input.text.includes(title)) fail$1(`planted foreshadow "${title}" does not appear in the manuscript`);
+		const anchor = declared.anchor ?? plant.anchor;
+		if (anchor === void 0) {
+			if (!input.text.includes(plant.title)) fail$1(`planted foreshadow summary title "${plant.title}" has no anchor and does not appear verbatim in the manuscript`);
+			if (!input.text.includes(title)) fail$1(`planted foreshadow "${title}" has no anchor and does not appear verbatim in the manuscript; add a verbatim anchor or keep the title as text`);
+		} else if (!input.text.includes(anchor)) fail$1(`planted foreshadow "${title}" anchor "${anchor}" does not appear verbatim in the manuscript`);
 		const allocated = allocateIds("FS", foreshadows.next_seq, 1);
 		const id = allocated.ids[0];
 		if (byId.has(id)) fail$1(`foreshadows.next_seq is behind the ledger; ${id} already exists`);
@@ -5559,6 +6298,7 @@ function applyStateDelta(input) {
 			status: "planted",
 			resolved_at: null,
 			description: declared.description ?? plant.description,
+			...anchor === void 0 ? {} : { anchor },
 			advance_log: []
 		};
 		foreshadows.items.push(item);
@@ -5884,7 +6624,7 @@ const wordCount = (input) => {
 	if (min <= 0) return [];
 	const metrics = countWordMetrics(input.text);
 	if (metrics.total_word_count >= min) return [];
-	return [block("PG-03", `text has ${metrics.total_word_count} words, minimum is ${min}`, `write at least ${min - metrics.total_word_count} more words, then call novel_word_count to verify`)];
+	return [block("PG-03", `text has ${metrics.total_word_count} counted words (${metrics.cjk_chars} 汉字 + ${metrics.punctuation_chars} 标点 + ${metrics.english_words} 英文词 + ${metrics.numbers} 数字), minimum is ${min}`, `the engine counts punctuation as words; write at least ${min - metrics.total_word_count} more counted words, then call novel_word_count to verify the same metric`)];
 };
 /** PG-04: format blockers must be zero before length is judged. */
 const format = (input, options) => {
@@ -6289,6 +7029,17 @@ function briefStageFor(operation, stage) {
 	}
 }
 // src/engine/projections.ts
+/** One shared prompt template for `/novel resume` and the panel copy button. */
+function formatResumePrompt(input) {
+	return [
+		`请继续《${input.title}》。`,
+		`项目根：${input.root}（第一次工具调用必须显式传 project_root=${input.root}）。`,
+		`当前第 ${input.chapter} 章，阶段 ${input.stage}。`,
+		`下一步：${input.nextTool}。`,
+		"先调用 novel_status 核对项目根与书名，再按 novel_pipeline 的下一步执行；",
+		"只操作这个项目，不要读取或写入其他书。"
+	].join("\n");
+}
 const STAGE_TO_PHASE = {
 	idle: "P1",
 	P2: "P2",
@@ -6332,8 +7083,9 @@ function projectChapter(record) {
 }
 function projectSummary(snapshot) {
 	return {
-		schemaVersion: 2,
+		schemaVersion: 4,
 		panelId: PANEL_ID,
+		root: snapshot.root,
 		title: snapshot.title,
 		genre: snapshot.genre,
 		platform: snapshot.platform,
@@ -6375,40 +7127,280 @@ function projectChapters(snapshot) {
 		details: draft.details
 	});
 	return {
-		schemaVersion: 2,
+		schemaVersion: 4,
 		panelId: PANEL_ID,
 		rows
 	};
 }
 function projectGates(snapshot) {
 	return {
-		schemaVersion: 2,
+		schemaVersion: 4,
 		panelId: PANEL_ID,
 		stage: snapshot.stage,
 		blocking: snapshot.blocking,
 		explanations: snapshot.blocking.map((item) => `${item.code}${item.scope === void 0 ? "" : ` (${item.scope})`}: ${item.detail}`)
 	};
 }
-// src/engine/state.ts
-/** A pipeline document for a brand-new project. */
-function emptyPipeline(patch) {
+// src/engine/project-selection.ts
+const MAX_SCAN_CANDIDATES = 50;
+const errorText = (error) => error instanceof Error ? error.message : String(error);
+/** Filesystem access failures are unreadable; parse/schema faults are damage. */
+const unreadableFsError = (error) => {
+	const code = error.code;
+	return typeof code === "string" && [
+		"EACCES",
+		"EPERM",
+		"EIO",
+		"EBUSY",
+		"ELOOP",
+		"EMFILE",
+		"ENFILE",
+		"EISDIR"
+	].includes(code);
+};
+/**
+* True when anything survives in the project directory besides novel.yaml.
+* Kept next to inspection so the panel, resolver and scanner agree on what
+* "a project used to be here" means.
+*/
+async function hasProjectState(store) {
+	const stateFiles = [
+		STATE_FILES.pipeline,
+		STATE_FILES.chapters,
+		STATE_FILES.characters,
+		STATE_FILES.world,
+		STATE_FILES.locks,
+		STATE_FILES.timeline,
+		STATE_FILES.foreshadows,
+		STATE_FILES.relationships,
+		STATE_FILES.handoff
+	].map((file) => joinRel(STATE_DIR, file));
+	stateFiles.push(joinRel(STATE_DIR, STATE_FILES.journal), ARCHIVE_DIGESTS_FILE, BRIEF_RECEIPTS_FILE);
+	return (await Promise.all(stateFiles.map((path) => store.exists(path)))).some(Boolean) || (await store.list("chapters")).length > 0 || (await store.list("plans")).length > 0 || (await store.list("reviews")).length > 0 || (await store.list("checks")).length > 0 || await store.exists("outline/outline.yaml") || await store.exists("outline/worldbook.yaml");
+}
+/**
+* Inspect one candidate without constructing a full Snapshot. `ok` and
+* `damaged` are both project evidence; only `not-project`/`missing` are absent.
+*/
+async function inspectProject(root) {
+	const absolute = resolve(root);
+	const store = new FsStore(absolute);
+	let directory;
+	try {
+		const info = await store.statRoot();
+		if (info === null) return {
+			root: absolute,
+			state: "missing",
+			title: "（项目目录不存在）"
+		};
+		directory = info.directory;
+	} catch (error) {
+		return {
+			root: absolute,
+			state: "unreadable",
+			title: "（项目目录不可读）",
+			error: errorText(error)
+		};
+	}
+	if (!directory) return {
+		root: absolute,
+		state: "not-project",
+		title: "（不是项目目录）"
+	};
+	let projectExists;
+	try {
+		projectExists = await store.exists(PROJECT_FILE);
+	} catch (error) {
+		return {
+			root: absolute,
+			state: "unreadable",
+			title: "（项目文件不可读）",
+			error: errorText(error)
+		};
+	}
+	if (projectExists) try {
+		const project = await store.readDoc(PROJECT_FILE, "project");
+		if (project === null) return {
+			root: absolute,
+			state: "damaged",
+			title: "（项目文件不可读）",
+			error: `${PROJECT_FILE} disappeared during inspection`
+		};
+		return {
+			root: absolute,
+			state: "ok",
+			title: typeof project.title === "string" ? project.title : "",
+			...typeof project.created_at === "string" && project.created_at !== "" ? { created_at: project.created_at } : {}
+		};
+	} catch (error) {
+		return {
+			root: absolute,
+			state: unreadableFsError(error) ? "unreadable" : "damaged",
+			title: "（项目文件不可读）",
+			error: errorText(error)
+		};
+	}
+	try {
+		if (await hasProjectState(store)) return {
+			root: absolute,
+			state: "damaged",
+			title: "（项目文件缺失）",
+			error: `${PROJECT_FILE} is missing`
+		};
+	} catch (error) {
+		return {
+			root: absolute,
+			state: "unreadable",
+			title: "（项目目录不可读）",
+			error: errorText(error)
+		};
+	}
 	return {
-		schema_version: 1,
-		revision: patch.revision,
-		chapter: patch.chapter,
-		stage: patch.stage,
-		rounds: patch.rounds ?? {
-			review: 0,
-			revise: 0,
-			check: 0
-		},
-		briefs: patch.briefs ?? {},
-		blocking: patch.blocking ?? [],
-		last_action: patch.last_action ?? null
+		root: absolute,
+		state: "not-project",
+		title: "（不是项目）"
 	};
 }
-/** Every state document a project starts with, keyed by file base name. */
-function emptyDocuments() {
+/**
+* Enumerate the finite workspace shape: cwd, cwd/novel and direct child
+* directories. No ancestor walk, no recursion, and no symlink directory is
+* followed. `truncated` is explicit rather than a silent 50-row cut.
+*/
+async function scanWorkspace(cwd, limit = MAX_SCAN_CANDIDATES) {
+	const base = resolve(cwd);
+	const store = new FsStore(base);
+	const roots = [base];
+	const add = (path) => {
+		const absolute = resolve(path);
+		if (!roots.includes(absolute)) roots.push(absolute);
+	};
+	try {
+		const novel = await store.lstat("novel");
+		if (novel !== null && novel.directory && !novel.symbolicLink) add(join(base, "novel"));
+		for (const entry of await store.entries(".")) {
+			if (!entry.directory || entry.symbolicLink) continue;
+			add(join(base, entry.name));
+		}
+	} catch {}
+	const bounded = Math.max(1, limit);
+	const candidates = [];
+	let truncated = false;
+	for (const root of roots) try {
+		const inspection = await inspectProject(root);
+		if (inspection.state === "not-project" || inspection.state === "missing") continue;
+		if (candidates.length >= bounded) {
+			truncated = true;
+			break;
+		}
+		candidates.push(inspection);
+	} catch (error) {
+		if (candidates.length >= bounded) {
+			truncated = true;
+			break;
+		}
+		candidates.push({
+			root,
+			state: "unreadable",
+			title: "（项目目录不可读）",
+			error: errorText(error)
+		});
+	}
+	return {
+		candidates,
+		truncated
+	};
+}
+/**
+* One/many/none classification with the §6.4 short-circuit order:
+* cwd itself, then cwd/novel, then exactly one readable direct child. Damaged
+* projects are not workspace discovery candidates; scan may still list them.
+*/
+async function discoverWorkspace(cwd) {
+	const base = resolve(cwd);
+	const direct = await inspectProject(base);
+	if (direct.state === "ok") return {
+		kind: "one",
+		root: direct.root
+	};
+	const store = new FsStore(base);
+	const nested = join(base, "novel");
+	try {
+		const info = await store.lstat("novel");
+		if (info !== null && info.directory && !info.symbolicLink) {
+			const candidate = await inspectProject(nested);
+			if (candidate.state === "ok") return {
+				kind: "one",
+				root: candidate.root
+			};
+		}
+	} catch {
+		return { kind: "none" };
+	}
+	const roots = [];
+	try {
+		for (const entry of await store.entries(".")) {
+			if (!entry.directory || entry.symbolicLink) continue;
+			const candidate = await inspectProject(join(base, entry.name)).catch(() => null);
+			if (candidate?.state !== "ok") continue;
+			roots.push(candidate.root);
+			if (roots.length > 50) break;
+		}
+	} catch {
+		return { kind: "none" };
+	}
+	if (roots.length === 0) return { kind: "none" };
+	if (roots.length === 1) return {
+		kind: "one",
+		root: roots[0]
+	};
+	return {
+		kind: "many",
+		roots
+	};
+}
+function describeCandidates(candidates) {
+	return candidates.map((candidate) => {
+		return `- ${candidate.title === void 0 || candidate.title === "" ? "（无标题）" : candidate.title}${candidate.state === void 0 ? "" : ` [${candidate.state}]`}: ${candidate.root}`;
+	}).join("\n");
+}
+function ambiguousError(candidates) {
+	const list = describeCandidates(candidates);
+	return new EngineInputError(ERROR_CODES.PROJECT_AMBIGUOUS, `multiple projects are available; choose one explicitly:\n${list}`, "pass project_root on the next tool call, or use /novel use <path|title>. The registry active project is not used as a silent default for an Agent session.");
+}
+function projectNotFoundError(root) {
+	return new EngineInputError(ERROR_CODES.PROJECT_NOT_FOUND, `no novel project at ${resolve(root)}`, "call novel_init to create one, pass the correct project_root, or run /novel scan to discover projects");
+}
+function missingProjectError(input) {
+	const title = input.lastTitle === void 0 || input.lastTitle === "" ? "" : `《${input.lastTitle}》`;
+	const moved = input.movedTo === void 0 ? "" : ` A project with the same created_at is registered at ${input.movedTo};`;
+	return new EngineFaultError(ERROR_CODES.PROJECT_MISSING, `the project ${title} bound to this session is missing: ${input.selection.root}.${moved} projects are never switched automatically`, `restore the directory or mount, then retry; or explicitly run /novel use <new path> or pass project_root. The binding is kept.${input.movedTo === void 0 ? "" : ` Candidate moved project: ${input.movedTo}.`}`, input.cause === void 0 ? void 0 : { cause: input.cause });
+}
+function identityMismatchError(input) {
+	const expected = input.selection.created_at ?? "（unknown）";
+	const actual = input.actualCreatedAt ?? "（unknown）";
+	const title = input.actualTitle === void 0 || input.actualTitle === "" ? "" : `《${input.actualTitle}》`;
+	return new EngineInputError(ERROR_CODES.PROJECT_IDENTITY_MISMATCH, `the path ${input.selection.root} now contains a different project ${title} (created_at ${actual}; this session is bound to ${expected})`, "the binding was not switched and no write was attempted. Run /novel use <path> or pass project_root to confirm the replacement; old bindings keep failing closed.");
+}
+// src/engine/state.ts
+/** A pipeline document for a brand-new project. */
+function emptyPipeline(patch) {
+	return {
+		schema_version: 1,
+		revision: patch.revision,
+		chapter: patch.chapter,
+		stage: patch.stage,
+		rounds: patch.rounds ?? {
+			review: 0,
+			revise: 0,
+			check: 0
+		},
+		briefs: patch.briefs ?? {},
+		blocking: patch.blocking ?? [],
+		last_action: patch.last_action ?? null
+	};
+}
+/** Every state document a project starts with, keyed by file base name. */
+function emptyDocuments() {
 	return {
 		"chapters.yaml": {
 			schema_version: 1,
@@ -6497,7 +7489,7 @@ const STAGE_RANK = {
 	done: 7
 };
 /** Internal, journal-tracked archive idempotency ledger; not a user state doc. */
-const ARCHIVE_DIGESTS = joinRel(STATE_DIR, "archive-digests.json");
+const ARCHIVE_DIGESTS = ARCHIVE_DIGESTS_FILE;
 const LEDGER_PATHS = {
 	chapters: joinRel(STATE_DIR, STATE_FILES.chapters),
 	characters: joinRel(STATE_DIR, STATE_FILES.characters),
@@ -6535,8 +7527,8 @@ var EngineService = class {
 	briefContextCache = /* @__PURE__ */ new WeakMap();
 	briefs;
 	now;
-	/** The project this process last touched; the panel follows it without a workspace hint. */
-	lastRoot = null;
+	metadataMutex = new KeyedMutex();
+	callerContext = new AsyncLocalStorage();
 	constructor(config, rulepack, options = {}) {
 		this.config = config;
 		this.rulepackSource = typeof rulepack === "function" ? rulepack : () => rulepack;
@@ -6558,7 +7550,6 @@ var EngineService = class {
 		this.disposed = true;
 		this.stores.clear();
 		this.replay.clear();
-		this.lastRoot = null;
 		this.compiled = null;
 	}
 	get rulepack() {
@@ -6571,23 +7562,171 @@ var EngineService = class {
 	withSignal(signal, task) {
 		return this.signalContext.run(signal, task);
 	}
+	/** Bind the calling Agent session and cwd to every engine operation in `task`. */
+	withCaller(caller, task) {
+		return this.callerContext.run(caller, task);
+	}
+	caller() {
+		return this.callerContext.getStore();
+	}
 	/** The configured default project root. */
 	defaultRoot() {
 		return resolve(this.config.projectRoot);
 	}
+	/** Resolve a caller-supplied root against the session cwd, like /novel use. */
+	resolveProjectPath(root) {
+		const caller = this.caller();
+		return resolve(caller?.cwd ?? process.cwd(), root);
+	}
+	/** The resolved metadata directory; resolves relative config once per call. */
+	stateRoot() {
+		return this.config.stateDir === "" ? resolve(homedir(), ".dsh", "novel-write-engine") : resolve(this.config.stateDir);
+	}
+	stateStore() {
+		return new FsStore(this.stateRoot());
+	}
+	bindings() {
+		return new SessionBindings(this.stateStore(), { now: this.now });
+	}
 	/**
-	* Resolve an omitted root through the cross-project registry. The registry is
-	* convenience state, so a corrupt or unreadable registry falls back to the
-	* configured root instead of making every call fail.
+	* Serialize metadata read-modify-write across sessions and processes. The
+	* project manuscript lock is a different lock; a slow write never blocks a
+	* registry update.
 	*/
-	async resolveRoot(root) {
-		if (root !== void 0) return resolve(root);
-		if (this.lastRoot !== null) return this.lastRoot;
+	withMetadataLock(task) {
+		const directory = this.stateRoot();
+		return this.metadataMutex.run(directory, async () => {
+			ensureDirAt(directory);
+			const lock = new FileLock(join(directory, METADATA_LOCK_FILE));
+			try {
+				await lock.acquire();
+			} catch (error) {
+				if (error instanceof EngineFaultError && error.code === ERROR_CODES.LOCK_TIMEOUT) throw new EngineFaultError(ERROR_CODES.LOCK_TIMEOUT, "timed out waiting for the project metadata lock", "another DSH instance is writing project registration or session bindings; retry after it finishes", { cause: error });
+				throw error;
+			}
+			try {
+				return await task();
+			} finally {
+				await lock.release();
+			}
+		});
+	}
+	async inspectConfigRoot() {
 		try {
-			const document = await this.registry().read();
-			if (document.active !== null) return resolve(document.active);
-		} catch {}
-		return resolve(this.config.projectRoot);
+			const inspection = await inspectProject(this.defaultRoot());
+			return inspection.state === "ok" || inspection.state === "damaged" || inspection.state === "unreadable" ? inspection : null;
+		} catch (error) {
+			throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `cannot inspect the configured projectRoot ${this.defaultRoot()}: ${errorMessage(error)}`, "fix the configured path or permissions; no project was selected", { cause: error });
+		}
+	}
+	/**
+	* Resolve the four-layer choice: explicit, session binding, bounded workspace
+	* discovery, then registry/config defaults. There is deliberately no
+	* process-global "last project" layer.
+	*/
+	/** Doctor/guide may run before any project exists; that is not a failure. */
+	async resolveRootForInspection(root) {
+		let selection;
+		try {
+			selection = await this.resolveRoot(root);
+		} catch (error) {
+			if (root === void 0 && error instanceof EngineError && error.code === ERROR_CODES.PROJECT_NOT_FOUND) return {
+				root: this.defaultRoot(),
+				source: "config"
+			};
+			throw error;
+		}
+		if (root === void 0 && selection.source === "session") {
+			const inspection = await inspectProject(selection.root);
+			if (inspection.state === "missing") throw missingProjectError({
+				selection,
+				lastTitle: selection.title,
+				movedTo: await this.movedProjectHint(selection)
+			});
+			if (inspection.state === "not-project") throw projectNotFoundError(selection.root);
+			if (inspection.state === "unreadable") throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `the project bound to this session is unreadable: ${inspection.error ?? selection.root}`, "fix the directory permissions, or explicitly rebind with /novel use after the project is readable");
+		}
+		return selection;
+	}
+	async resolveRoot(root) {
+		if (root !== void 0) return {
+			root: this.resolveProjectPath(root),
+			source: "explicit"
+		};
+		const caller = this.caller();
+		if (caller?.sessionId !== void 0) {
+			const binding = await this.bindings().get(caller.sessionId);
+			if (binding !== void 0) return {
+				root: binding.root,
+				source: "session",
+				title: binding.title,
+				created_at: binding.project_created_at
+			};
+			if (caller.cwd !== void 0 && caller.cwd !== "") {
+				const found = await discoverWorkspace(caller.cwd);
+				if (found.kind === "one") return {
+					root: found.root,
+					source: "workspace"
+				};
+				if (found.kind === "many") throw ambiguousError(await Promise.all(found.roots.map(async (candidate) => {
+					const inspection = await inspectProject(candidate);
+					return {
+						root: inspection.root,
+						title: inspection.title,
+						state: inspection.state
+					};
+				})));
+			}
+		}
+		const document = await this.registry().read();
+		const candidates = document.projects.map((entry) => ({
+			root: entry.root,
+			title: entry.title
+		}));
+		const ambiguous = async () => {
+			return ambiguousError(await Promise.all(document.projects.map(async (entry) => {
+				const inspection = await inspectProject(entry.root).catch(() => null);
+				return {
+					root: entry.root,
+					title: entry.title,
+					...inspection === null ? {} : { state: inspection.state }
+				};
+			})));
+		};
+		if (caller?.sessionId !== void 0) {
+			if (candidates.length === 1) return {
+				root: candidates[0].root,
+				source: "single"
+			};
+			if (candidates.length > 1) throw await ambiguous();
+			const config = await this.inspectConfigRoot();
+			if (config !== null) {
+				if (config.state === "unreadable") throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `the configured projectRoot is unreadable: ${config.error ?? this.defaultRoot()}`, "fix the configured path or permissions");
+				return {
+					root: config.root,
+					source: "config"
+				};
+			}
+			throw projectNotFoundError(this.defaultRoot());
+		}
+		if (document.active !== null) return {
+			root: document.active,
+			source: "active"
+		};
+		const config = await this.inspectConfigRoot();
+		if (config !== null) {
+			if (config.state === "unreadable") throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `the configured projectRoot is unreadable: ${config.error ?? this.defaultRoot()}`, "fix the configured path or permissions");
+			return {
+				root: config.root,
+				source: "config"
+			};
+		}
+		if (candidates.length === 1) return {
+			root: candidates[0].root,
+			source: "single"
+		};
+		if (candidates.length > 1) throw await ambiguous();
+		throw projectNotFoundError(this.defaultRoot());
 	}
 	storeFor(root) {
 		const absolute = resolve(root ?? this.config.projectRoot);
@@ -6597,6 +7736,69 @@ var EngineService = class {
 		this.stores.set(absolute, store);
 		return store;
 	}
+	/** Persist one explicit choice for this DSH session. */
+	async bindSelection(root, title, projectCreatedAt, source) {
+		const caller = this.caller();
+		if (caller?.sessionId === void 0) return;
+		const existing = await this.bindings().get(caller.sessionId);
+		if (existing !== void 0 && existing.root === resolve(root) && existing.title === title && existing.project_created_at === projectCreatedAt) return;
+		await this.withMetadataLock(() => this.bindings().bind({
+			session_id: caller.sessionId,
+			root,
+			title,
+			project_created_at: projectCreatedAt,
+			source
+		}));
+	}
+	/**
+	* Best-effort discovery bookkeeping. A metadata failure must never turn a
+	* successful project read/write into a failure; the registry is convenience.
+	*/
+	async autoRegister(snapshot) {
+		if (snapshot.projectError !== null) return;
+		try {
+			const known = (await this.registry().read()).projects.find((entry) => entry.root === snapshot.root);
+			const sameRow = known !== void 0 && known.title === snapshot.project.title && (known.created_at ?? "") === (snapshot.project.created_at ?? "");
+			const differentIdentity = known !== void 0 && known.created_at !== void 0 && known.created_at !== "" && known.created_at !== snapshot.project.created_at;
+			if (sameRow || differentIdentity) return;
+			await this.withMetadataLock(async () => {
+				const lockedRegistry = this.registry();
+				const existing = (await lockedRegistry.read()).projects.find((entry) => entry.root === snapshot.root);
+				if (existing !== void 0) {
+					if (existing.created_at !== void 0 && existing.created_at !== "" && existing.created_at !== snapshot.project.created_at) return;
+					if (existing.title === snapshot.project.title && (existing.created_at ?? "") === (snapshot.project.created_at ?? "")) return;
+				}
+				await lockedRegistry.register({
+					root: snapshot.root,
+					title: snapshot.project.title,
+					created_at: snapshot.project.created_at
+				});
+			});
+		} catch {}
+	}
+	/** Record the session binding/registration implied by a successful selection. */
+	async recordSelection(selection, snapshot, options = {}) {
+		if (this.caller()?.sessionId === void 0) return;
+		if ((options.bind ?? (options.bindSource !== void 0 || selection.source === "explicit")) && snapshot.projectError === null) await this.bindSelection(snapshot.root, snapshot.project.title, snapshot.project.created_at, options.bindSource ?? "explicit");
+		if (options.register ?? (selection.source === "explicit" || selection.source === "workspace")) await this.autoRegister(snapshot);
+	}
+	/**
+	* Read paths may record convenience metadata, but a corrupt or read-only
+	* state directory must not turn a successful explicit-root read into a
+	* failure. Resolution without an explicit root still reads the binding
+	* fail-closed; writes use recordSelection directly and report a committed
+	* mutation with a warning if its metadata update fails.
+	*/
+	async recordSelectionBestEffort(selection, snapshot) {
+		try {
+			await this.recordSelection(selection, snapshot);
+		} catch {}
+	}
+	/** Registration/activation/use need a readable project identity. */
+	assertProjectHealthy(snapshot, operation) {
+		if (snapshot.projectError === null) return;
+		throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `${operation} requires a readable novel.yaml: ${snapshot.projectError}`, "repair the project definition with novel_status + novel_amend using an explicit project_root; the registry/binding was not changed");
+	}
 	async initProject(input) {
 		const title = typeof input.title === "string" ? input.title.trim() : "";
 		if (title === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "title must not be empty");
@@ -6615,10 +7817,16 @@ var EngineService = class {
 			const [min, max] = input.dialogue_ratio;
 			if (!Number.isFinite(min) || !Number.isFinite(max) || min < 0 || max > 1 || max < min) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "dialogue_ratio must be [min, max] within 0..1 with min <= max");
 		}
-		return this.mutate({
-			root: input.root,
+		const selection = {
+			root: input.root === void 0 ? this.defaultRoot() : this.resolveProjectPath(input.root),
+			source: input.root === void 0 ? "config" : "explicit"
+		};
+		const result = await this.mutate({
+			selection,
 			op: "initProject",
-			key: () => `init:${resolve(input.root ?? this.config.projectRoot)}`,
+			bindOnSuccess: false,
+			registerOnSuccess: false,
+			key: () => `init:${selection.root}`,
 			run: async (_snapshot, context) => {
 				if (await context.store.exists("novel.yaml")) throw new EngineInputError(ERROR_CODES.PROJECT_EXISTS, `a project already exists at ${context.store.root}`, "use a different directory, or call novel_status to inspect the existing project");
 				const project = {
@@ -6675,6 +7883,13 @@ var EngineService = class {
 							path: PROJECT_FILE,
 							text: yaml(project)
 						},
+						{
+							path: BRIEF_RECEIPTS_FILE,
+							text: yaml({
+								schema_version: 1,
+								receipts: []
+							})
+						},
 						{
 							path: joinRel(STATE_DIR, STATE_FILES.pipeline),
 							text: yaml(pipeline)
@@ -6698,11 +7913,32 @@ var EngineService = class {
 						title: project.title,
 						chapter: 1,
 						stage: "idle"
-					}
+					},
+					warnings: [...project.author.trim() === "" ? [{
+						code: "PROJECT_AUTHOR_EMPTY",
+						message: "作者为空；proposal 与导出会缺作者，可用 novel_amend 补 novel.yaml.author"
+					}] : [], ...project.description.trim() === "" ? [{
+						code: "PROJECT_DESCRIPTION_EMPTY",
+						message: "简介为空；proposal 与导出会缺简介，可用 novel_amend 补 novel.yaml.description"
+					}] : []]
 				};
 			},
 			emptyAllowed: true
 		});
+		const created = await this.loadAt({
+			root: result.data.root,
+			source: "explicit"
+		});
+		await this.autoRegister(created);
+		try {
+			await this.bindSelection(created.root, created.project.title, created.project.created_at, "init");
+		} catch (error) {
+			result.warnings.push({
+				code: "SESSION_BINDING_FAILED",
+				message: `project was created, but the session binding could not be written: ${errorMessage(error)}`
+			});
+		}
+		return result;
 	}
 	async submitBookPlan(input) {
 		const allowed = /* @__PURE__ */ new Set([
@@ -7023,6 +8259,7 @@ var EngineService = class {
 			"characters",
 			"glossary",
 			"backstory",
+			"facts",
 			"themes"
 		]);
 		const keys = Object.entries(input).filter(([key, value]) => key !== "root" && value !== void 0).map(([key]) => key);
@@ -7050,9 +8287,10 @@ var EngineService = class {
 					locations: worldbook.locations.length,
 					characters: worldbook.characters.length,
 					glossary: worldbook.glossary.length,
-					backstory: worldbook.backstory.length
+					backstory: worldbook.backstory.length,
+					facts: (worldbook.facts ?? []).length
 				};
-				const entries = counts.characters + counts.locations + counts.factions + counts.rules + counts.glossary + counts.backstory;
+				const entries = counts.characters + counts.locations + counts.factions + counts.rules + counts.glossary + counts.backstory + counts.facts;
 				const nextPipeline = pipelineWith(snapshot, context.revision, { last_action: action("novel_worldbook", this.now(), shortDigest(stableJson(input))) });
 				return {
 					files: [{
@@ -7092,6 +8330,7 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "reopenChapter",
+			chapter: input.chapter,
 			reason,
 			key: () => `reopen:${input.chapter}:${shortDigest(reason)}`,
 			run: async (snapshot, context) => {
@@ -7116,7 +8355,7 @@ var EngineService = class {
 				if (changedAfterArchive.length > 0) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `refusing to reopen: ${changedAfterArchive.join(", ")} changed after chapter ${input.chapter} was archived`, "move the amended files aside or restore the archived versions first; reopening would overwrite them silently");
 				const files = [];
 				for (const path of archive.files) {
-					if (path === joinRel("state", STATE_FILES.pipeline) || path === "outline/outline.yaml") continue;
+					if (path === joinRel("state", STATE_FILES.pipeline) || path === "outline/outline.yaml" || path === planChapterFile(input.chapter)) continue;
 					const hasBeforeEntry = beforeHashes !== void 0 && Object.hasOwn(beforeHashes, path);
 					const expectedBefore = hasBeforeEntry ? beforeHashes[path] : void 0;
 					if (hasBeforeEntry && expectedBefore === null) {
@@ -7180,6 +8419,15 @@ var EngineService = class {
 					briefs: {},
 					blocking: [],
 					review_digest: void 0,
+					draft: {
+						chapter: input.chapter,
+						title: stripChapterPrefix(plan.title),
+						scene_type: plan.scene_type,
+						narrator: plan.narrator,
+						summary: record.summary,
+						content_hash: record.content_hash,
+						updated_at: reopenedAt
+					},
 					last_action: action("novel_reopen", this.now(), shortDigest(reason))
 				});
 				delete nextPipeline.review_digest;
@@ -7213,6 +8461,126 @@ var EngineService = class {
 		});
 	}
 	/**
+	* Restore one active chapter from a backup transaction. Archived chapters
+	* are refused: their manuscript hash is bound by the index, so restoring
+	* behind the index would corrupt the project. Reopen first, then restore.
+	*/
+	async restoreBackup(input) {
+		if (typeof input.txid !== "string" || !/^[0-9a-f-]{36}$/i.test(input.txid)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "restore txid must be a transaction UUID");
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
+		if (input.paths !== void 0 && (!Array.isArray(input.paths) || input.paths.length === 0)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "restore paths must be a non-empty array");
+		return this.mutate({
+			root: input.root,
+			op: "restoreBackup",
+			chapter: input.chapter,
+			reason: `restore backup ${input.txid}`,
+			run: async (snapshot, context) => {
+				const manifest = await readBackupManifest(context.store, input.txid);
+				if (manifest === null) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} has no readable manifest`, "list backups with novel_state {kind:\"backups\"}; only marked engine backups can be restored");
+				const chapter = input.chapter ?? snapshot.pipeline.chapter;
+				if (snapshot.chapters.chapters.some((record) => record.num === chapter)) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is archived; restoring it behind the index would break its content hash`, "call novel_reopen for the chapter, then restore the backup");
+				if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not the active chapter ${snapshot.pipeline.chapter}; restore only the active chapter`, "switch the active chapter first, or restore files from the active chapter");
+				if (manifest.chapter !== chapter) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} belongs to chapter ${manifest.chapter}, not chapter ${chapter}`, "choose a backup whose manifest chapter matches the active chapter");
+				const fileFor = (path) => `backups/${input.txid}/${path}`;
+				const allowed = [
+					chapterFile(chapter),
+					planChapterFile(chapter),
+					planWorldFile(chapter),
+					reviewFile(chapter),
+					checkFile(chapter)
+				];
+				const requested = input.paths ?? allowed.filter((path) => manifest.files.includes(path));
+				for (const path of requested) if (!allowed.includes(path)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `restore path ${path} is not a chapter file for chapter ${chapter}`, `allowed: ${allowed.join(", ")}`);
+				if (requested.length === 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} contains no restorable file for chapter ${chapter}`, "choose a backup whose files include the chapter you are restoring");
+				const files = [];
+				let restoredReview = null;
+				let restoredCheck = null;
+				for (const path of requested) {
+					if (!manifest.files.includes(path)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} manifest does not record ${path}`, "restore only files that the transaction captured as pre-images");
+					const text = await context.store.readText(fileFor(path));
+					if (text === null) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} does not contain ${path}`, "the file was created by that transaction, so it has no pre-image to restore");
+					const kind = path === planChapterFile(chapter) ? "chapterPlan" : path === planWorldFile(chapter) ? "worldPlan" : path === reviewFile(chapter) ? "review" : path === checkFile(chapter) ? "check" : null;
+					if (kind !== null) try {
+						const parsed = parse(text);
+						const row = recordOf(parsed);
+						if (row === null) throw new Error("document is not a mapping");
+						if (kind === "chapterPlan") {
+							validateStoredChapterPlan(row, path);
+							if (row.chapter !== chapter) throw new Error(`document belongs to chapter ${String(row.chapter)}, not ${chapter}`);
+						} else if (kind === "worldPlan") {
+							validateWorldPlanShape(narrow("worldPlan", parsed), path);
+							if (row.chapter !== chapter) throw new Error(`document belongs to chapter ${String(row.chapter)}, not ${chapter}`);
+						} else {
+							const restored = narrow(kind, parsed);
+							if (restored.chapter !== chapter) throw new Error(`document belongs to chapter ${String(restored.chapter)}, not ${chapter}`);
+							if (kind === "review") restoredReview = restored;
+							if (kind === "check") restoredCheck = restored;
+						}
+					} catch (error) {
+						throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `backup ${input.txid} contains an invalid ${kind} document: ${errorMessage(error)}`, "restore a different backup or repair the file manually");
+					}
+					files.push({
+						path,
+						text
+					});
+				}
+				const clearDraft = requested.includes(chapterFile(chapter)) || requested.includes(planChapterFile(chapter));
+				const nextPipeline = pipelineWith(snapshot, context.revision, { last_action: action("novel_restore", this.now(), shortDigest(input.txid)) });
+				if (clearDraft) delete nextPipeline.draft;
+				if (restoredReview !== null) nextPipeline.review_digest = sha256(stableJson(restoredReview));
+				if (restoredReview !== null || restoredCheck !== null) {
+					const effectiveReview = restoredReview ?? snapshot.review;
+					const effectiveCheck = restoredCheck ?? snapshot.check;
+					const reviewBlocking = effectiveReview === null ? [] : [...effectiveReview.issues.filter((issue) => issue.severity === "blocker" && issue.status !== "fixed").map((issue) => ({
+						code: `ISSUE-${issue.id}`,
+						scope: issue.dimension,
+						detail: `${issue.problem} → ${issue.fix}`,
+						hint: issue.location
+					})), ...effectiveReview.total < this.config.quality.minScore ? [{
+						code: "SCORE-BELOW-MIN",
+						scope: "quality",
+						detail: `score ${effectiveReview.total} is below the minimum ${this.config.quality.minScore}`,
+						hint: "revise the chapter and submit a new P4 review"
+					}] : []];
+					const checkMatches = effectiveCheck !== null && effectiveCheck.content_hash === sha256(snapshot.text ?? "");
+					const checkBlocking = effectiveCheck === null || !checkMatches || effectiveCheck.verdict === "pass" ? [] : [...effectiveCheck.machine.violations.map((violation) => ({
+						code: violation.code,
+						scope: "check",
+						detail: violation.detail
+					})), ...evaluateSemantic(snapshot.text ?? "", effectiveCheck.semantic.items).blocking];
+					nextPipeline.blocking = [...reviewBlocking, ...checkBlocking];
+				}
+				files.push({
+					path: joinRel(STATE_DIR, STATE_FILES.pipeline),
+					text: yaml(nextPipeline)
+				});
+				return {
+					files,
+					backup: true,
+					data: {
+						txid: input.txid,
+						chapter,
+						restored: requested
+					},
+					warnings: clearDraft ? [{
+						code: "RESTORE_DRAFT_CLEARED",
+						message: "the restored manuscript/plan invalidated the live draft summary; call novel_rollback to P3, then submit novel_write_draft again"
+					}] : [],
+					event: {
+						name: "novel/restored",
+						payload: {
+							schemaVersion: 1,
+							projectRoot: snapshot.root,
+							txid: input.txid,
+							chapter,
+							paths: requested
+						}
+					}
+				};
+			}
+		});
+	}
+	/**
 	* Read-only paths must surface a committed-journal mismatch. The write path
 	* already fails closed; without this, status recommends the next write and
 	* the model only learns about the mismatch when that write aborts.
@@ -7256,10 +8624,32 @@ var EngineService = class {
 			}];
 		}
 	}
+	/**
+	* Count every committed attempt for one chapter, not just the loop since the
+	* last rollback. `pipeline.rounds` is deliberately reset by rollback to keep
+	* the retry budget fair; it is not the chapter's lifetime effort.
+	*/
+	async lifetimeRounds(snapshot, chapter) {
+		const { rows } = await readJournal(this.storeFor(snapshot.root));
+		const committed = (op) => rows.filter((row) => row.status === "committed" && row.chapter === chapter && row.op === op).length;
+		return {
+			review: Math.max(snapshot.pipeline.rounds.review, committed("submitReview")),
+			revise: Math.max(snapshot.pipeline.rounds.revise, committed("submitRevision")),
+			check: Math.max(snapshot.pipeline.rounds.check, committed("runCheck")),
+			rollbacks: committed("rollback")
+		};
+	}
 	async getStatus(input = {}) {
 		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
-		const chapter = input.chapter ?? snapshot.pipeline.chapter;
+		return this.statusFor(snapshot, input.chapter ?? snapshot.pipeline.chapter);
+	}
+	/**
+	* Build a status report from an already-loaded snapshot. This deliberately
+	* has no selection side effect: read-only callers such as /novel resume must
+	* not register or bind the project just by reading it.
+	*/
+	async statusFor(snapshot, chapter) {
 		const metrics = await this.metricsFor(snapshot, chapter);
 		const journal = await this.journalBlocking(snapshot);
 		const next = journal.length > 0 && this.stateErrors(snapshot).length === 0 ? {
@@ -7281,6 +8671,10 @@ var EngineService = class {
 				rounds: { ...snapshot.pipeline.rounds },
 				blocking: [...this.effectiveBlocking(snapshot), ...journal],
 				state_errors: this.stateErrors(snapshot),
+				selection: {
+					source: snapshot.selection.source,
+					root: snapshot.selection.root
+				},
 				metrics,
 				...snapshot.handoff === null ? {} : (() => {
 					const position = projectHandoff(snapshot.handoff, snapshot.pipeline.chapter);
@@ -7316,6 +8710,7 @@ var EngineService = class {
 		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
 		const snapshot = await this.load(input.root);
 		const chapter = input.chapter ?? snapshot.pipeline.chapter;
+		if (input.revision !== void 0 && input.kind !== "history") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "revision is only meaningful for kind:\"history\"", "request history with chapter+revision, or omit revision for current documents");
 		const store = this.storeFor(snapshot.root);
 		const ledgerPath = LEDGER_PATHS[input.kind];
 		if (ledgerPath !== void 0) {
@@ -7333,7 +8728,10 @@ var EngineService = class {
 		}
 		switch (input.kind) {
 			case "pipeline": return {
-				data: snapshot.pipeline,
+				data: {
+					...snapshot.pipeline,
+					briefs: snapshot.briefs
+				},
 				revision: snapshot.pipeline.revision,
 				warnings: []
 			};
@@ -7428,6 +8826,66 @@ var EngineService = class {
 					revision: snapshot.pipeline.revision,
 					warnings: []
 				};
+			case "briefs": {
+				const receipts = await this.readBriefReceipts(store);
+				if (receipts.receipts.length > 0) return {
+					data: receipts,
+					revision: snapshot.pipeline.revision,
+					warnings: []
+				};
+				return {
+					data: {
+						schema_version: 1,
+						receipts: Object.entries(snapshot.briefs).map(([stage, receipt]) => ({
+							chapter: snapshot.pipeline.chapter,
+							stage,
+							digest: receipt.digest,
+							issued_at: receipt.issued_at
+						}))
+					},
+					revision: snapshot.pipeline.revision,
+					warnings: []
+				};
+			}
+			case "history": {
+				const entries = await listHistory(store, input.chapter);
+				if (input.revision !== void 0) {
+					if (!Number.isInteger(input.revision) || input.revision < 1) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "history revision must be a positive integer");
+					const matching = entries.filter((entry) => entry.chapter === chapter && entry.revision === input.revision);
+					const contents = [];
+					for (const entry of matching) contents.push({
+						...entry,
+						text: await store.readText(entry.path)
+					});
+					return {
+						data: {
+							schema_version: 1,
+							chapter,
+							revision: input.revision,
+							files: contents
+						},
+						revision: snapshot.pipeline.revision,
+						warnings: []
+					};
+				}
+				return {
+					data: {
+						schema_version: 1,
+						entries,
+						total: entries.length
+					},
+					revision: snapshot.pipeline.revision,
+					warnings: []
+				};
+			}
+			case "backups": return {
+				data: {
+					schema_version: 1,
+					backups: await listBackups(store)
+				},
+				revision: snapshot.pipeline.revision,
+				warnings: []
+			};
 			case "review":
 				if (chapter === snapshot.pipeline.chapter && snapshot.reviewError !== null) return {
 					data: {
@@ -7609,13 +9067,14 @@ var EngineService = class {
 		};
 	}
 	async doctor(input = {}) {
-		const root = await this.resolveRoot(input.root);
+		const selection = await this.resolveRootForInspection(input.root);
+		const root = selection.root;
 		const store = this.storeFor(root);
 		const checks = [];
 		const add = (check) => {
 			checks.push(check);
 		};
-		if (!await store.exists("novel.yaml") && !await this.projectStateExists(store)) {
+		if (!await store.exists("novel.yaml") && !await hasProjectState(store)) {
 			add({
 				id: "project",
 				severity: "error",
@@ -7640,7 +9099,8 @@ var EngineService = class {
 		}
 		let snapshot;
 		try {
-			snapshot = await this.load(root);
+			snapshot = await this.loadAt(selection);
+			await this.recordSelectionBestEffort(selection, snapshot);
 		} catch (error) {
 			add({
 				id: "load",
@@ -7774,13 +9234,14 @@ var EngineService = class {
 		const archivedCards = new Set(snapshot.outline.chapters.filter((card) => card.status === "archived").map((card) => card.num));
 		const missingCards = archivedRecords.filter((record) => !archivedCards.has(record.num));
 		const extraCards = [...archivedCards].filter((num) => !archivedRecords.some((record) => record.num === num));
-		const coverage = archivedRecords.length === 0 ? 0 : (archivedRecords.length - missingCards.length) / archivedRecords.length;
+		const outlineProgress = outlineSummary(snapshot.outline, archivedRecords.length, snapshot.project.targets.total_chapters, archivedRecords.map((record) => record.num));
+		const percentText = (value) => value === null ? "—" : `${Math.round(value * 1e3) / 10}%`;
 		add({
 			id: "outline-coverage",
-			severity: missingCards.length === 0 && extraCards.length === 0 ? "ok" : "warning",
+			severity: missingCards.length === 0 && extraCards.length === 0 && (outlineProgress.target === null || outlineProgress.missingCards === 0) ? "ok" : "warning",
 			title: "大纲覆盖率",
-			detail: archivedRecords.length === 0 ? "0%（暂无已归档章节）" : `${Math.round(coverage * 100)}% · ${missingCards.length} 章缺卡 · ${extraCards.length} 张卡无正文`,
-			...missingCards.length === 0 && extraCards.length === 0 ? {} : { hint: `missing cards: ${missingCards.map((record) => record.num).join(", ") || "none"}; extra cards: ${extraCards.join(", ") || "none"}` }
+			detail: `规划覆盖 ${percentText(outlineProgress.plannedCoverage)}（${outlineProgress.total}/${outlineProgress.target ?? "不限"} 张卡）· 归档覆盖 ${percentText(outlineProgress.archivedCoverage)}（${archivedRecords.length}/${outlineProgress.target ?? "不限"} 章）· ${outlineProgress.missingCards} 章缺卡 · ${missingCards.length} 章有正文无卡 · ${extraCards.length} 张卡无正文`,
+			...missingCards.length === 0 && extraCards.length === 0 && (outlineProgress.target === null || outlineProgress.missingCards === 0) ? {} : { hint: `缺卡章节数 ${outlineProgress.missingCards}; archived chapters without a card: ${missingCards.map((record) => record.num).join(", ") || "none"}; cards without a manuscript: ${extraCards.join(", ") || "none"}` }
 		});
 		const stageMissing = [];
 		switch (snapshot.pipeline.stage) {
@@ -7815,11 +9276,20 @@ var EngineService = class {
 			detail: stageMissing.length === 0 ? `${snapshot.pipeline.stage} 阶段所需产物齐全` : `缺少：${stageMissing.join("、")}`,
 			...stageMissing.length === 0 ? {} : { hint: "use novel_brief/novel_status to rebuild the missing stage product" }
 		});
+		const restoreCandidates = /* @__PURE__ */ new Set([
+			chapterFile(snapshot.pipeline.chapter),
+			planChapterFile(snapshot.pipeline.chapter),
+			planWorldFile(snapshot.pipeline.chapter),
+			reviewFile(snapshot.pipeline.chapter),
+			checkFile(snapshot.pipeline.chapter)
+		]);
+		const activeRestorable = backups.find((entry) => entry.op !== null && entry.chapter === snapshot.pipeline.chapter && entry.files.some((path) => restoreCandidates.has(path)));
 		add({
 			id: "backups",
 			severity: "info",
 			title: "备份",
-			detail: `${backups.length} backup snapshot(s)`
+			detail: backups.length === 0 ? "0 个备份快照" : `${backups.length} 个备份快照；最新：${backups[0].op ?? "旧版备份"}${backups[0].chapter === null ? "" : ` · 第 ${backups[0].chapter} 章`} · ${backups[0].files.length} 个文件`,
+			...backups.length === 0 ? {} : activeRestorable !== void 0 ? { hint: `用 novel_state {kind:"backups"} 列出；用 novel_restore {txid:"${activeRestorable.name}"} 恢复活动章` } : backups[0].op === null || backups[0].files.length === 0 ? { hint: "最新备份没有 manifest 或没有可恢复的 pre-image，只能列出；它不是 novel_restore 的候选" } : { hint: "最新备份不属于活动章或没有本章可恢复的 pre-image；用 novel_state {kind:\"backups\"} 列出，归档章先 novel_reopen" }
 		});
 		const locked = await store.exists(LOCK_FILE);
 		add({
@@ -7875,13 +9345,25 @@ var EngineService = class {
 		const store = this.storeFor(snapshot.root);
 		const reviews = [];
 		const reviewIssues = [];
+		const historicalEntries = await listHistory(store);
 		for (const record of snapshot.chapters.chapters) try {
 			const review = await store.readDoc(reviewFile(record.num), "review");
 			if (review === null) reviewIssues.push(`chapter ${record.num}: review is missing`);
 			else reviews.push(review);
+			for (const historical of await historyTexts(store, "reviews", record.num, historicalEntries)) try {
+				const parsed = narrow("review", parse(historical.text));
+				reviews.push(parsed);
+			} catch (error) {
+				reviewIssues.push(`chapter ${record.num} ${historical.path}: ${errorMessage(error)}`);
+			}
 		} catch (error) {
 			reviewIssues.push(`chapter ${record.num}: ${errorMessage(error)}`);
 		}
+		const uniqueReviews = /* @__PURE__ */ new Map();
+		for (const review of reviews) {
+			const key = stableJson(review);
+			if (!uniqueReviews.has(key)) uniqueReviews.set(key, review);
+		}
 		const journal = await readJournal(store);
 		const report = buildBookReport({
 			project: snapshot.project,
@@ -7896,7 +9378,7 @@ var EngineService = class {
 			timeline: snapshot.timeline,
 			foreshadows: snapshot.foreshadows,
 			relationships: snapshot.relationships,
-			reviews,
+			reviews: [...uniqueReviews.values()],
 			activity: journal.rows.slice(-8),
 			targetChapters: snapshot.project.targets.total_chapters,
 			minScore: this.config.quality.minScore,
@@ -7913,9 +9395,10 @@ var EngineService = class {
 		};
 	}
 	async guide(input = {}) {
-		const root = await this.resolveRoot(input.root);
+		const selection = await this.resolveRootForInspection(input.root);
+		const root = selection.root;
 		const store = this.storeFor(root);
-		if (!await store.exists("novel.yaml") && !await this.projectStateExists(store)) return {
+		if (!await store.exists("novel.yaml") && !await hasProjectState(store)) return {
 			data: buildGuide({
 				projectPresent: false,
 				chapter: 1,
@@ -7971,7 +9454,8 @@ var EngineService = class {
 			revision: 1,
 			warnings: []
 		};
-		const snapshot = await this.load(root);
+		const snapshot = await this.loadAt(selection);
+		await this.recordSelectionBestEffort(selection, snapshot);
 		const target = snapshot.project.targets.total_chapters;
 		const finished = snapshot.pipeline.stage === "done" && target !== null && snapshot.chapters.chapters.length >= target;
 		const journalBlocking = await this.journalBlocking(snapshot);
@@ -8007,6 +9491,8 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "getBrief",
+			chapter: input.chapter,
+			advanceRevision: false,
 			run: async (snapshot, context) => {
 				const chapter = input.chapter ?? snapshot.pipeline.chapter;
 				if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `brief ${input.stage} belongs to active chapter ${snapshot.pipeline.chapter}, not ${chapter}`, `omit chapter or pass ${snapshot.pipeline.chapter}`);
@@ -8019,6 +9505,20 @@ var EngineService = class {
 					chapter,
 					digest,
 					min_words: snapshot.project.targets.words_per_chapter[0],
+					max_words: snapshot.project.targets.words_per_chapter[1],
+					word_count_policy: {
+						metric: "total_word_count",
+						includes_punctuation: true,
+						formula: "cjk_chars + english_words + numbers + punctuation_chars",
+						note: "引擎与商业平台一致把标点计入字数；brief/status/check 的 min_words 都是这个口径"
+					},
+					dialogue_ratio_target: snapshot.project.targets.dialogue_ratio,
+					dialogue_ratio_metric: "含引号行数 / 非空行数",
+					delta_rules: {
+						title_is_a_label: true,
+						anchor_required_for_verification: true,
+						rule: "伏笔 title 可以写成可读短语；要逐字校验请在 anchor 里放正文原句（至少 8 个字符）。缺 anchor 时 title 必须逐字出现在正文。"
+					},
 					min_score: this.config.quality.minScore,
 					scene_types: [
 						"战斗/动作章",
@@ -8051,26 +9551,28 @@ var EngineService = class {
 					fields,
 					context: contextPack
 				};
-				const existing = snapshot.pipeline.briefs[input.stage];
+				const existing = snapshot.briefs[input.stage];
 				if (existing !== void 0 && existing.digest === digest) return {
 					files: [],
 					data,
 					replay: true
 				};
-				const nextPipeline = pipelineWith(snapshot, context.revision, {
-					briefs: {
-						...snapshot.pipeline.briefs,
-						[input.stage]: {
-							issued_at: this.now().toISOString(),
-							digest
-						}
-					},
-					last_action: action("novel_brief", this.now(), digest)
+				const issuedAt = this.now().toISOString();
+				const receiptDocument = await this.readBriefReceipts(context.store);
+				receiptDocument.receipts.push({
+					chapter,
+					stage: input.stage,
+					digest,
+					issued_at: issuedAt
 				});
+				const receipts = receiptDocument.receipts;
 				return {
 					files: [{
-						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
-						text: yaml(nextPipeline)
+						path: BRIEF_RECEIPTS_FILE,
+						text: yaml({
+							schema_version: 1,
+							receipts
+						})
 					}],
 					backup: false,
 					data
@@ -8139,6 +9641,7 @@ var EngineService = class {
 						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
 						text: yaml(nextPipeline)
 					}],
+					backup: snapshot.worldPlan !== null,
 					data: {
 						chapter,
 						stage: "P2",
@@ -8193,13 +9696,21 @@ var EngineService = class {
 					last_action: action("novel_plan_chapter", this.now(), shortDigest(stableJson(plan)))
 				});
 				return {
-					files: [{
-						path,
-						text: yaml(plan)
-					}, {
-						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
-						text: yaml(nextPipeline)
-					}],
+					files: [
+						...snapshot.plan === null ? [] : [{
+							path: planHistoryFile(chapter, snapshot.pipeline.revision),
+							text: yaml(snapshot.plan)
+						}],
+						{
+							path,
+							text: yaml(plan)
+						},
+						{
+							path: joinRel(STATE_DIR, STATE_FILES.pipeline),
+							text: yaml(nextPipeline)
+						}
+					],
+					backup: snapshot.plan !== null,
 					data: {
 						chapter,
 						stage: "P3",
@@ -8217,6 +9728,7 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "submitDraft",
+			chapter: input.chapter,
 			key: () => `draft:${input.chapter}:${sha256(stableJson({
 				content: input.content,
 				chapter_title: input.chapter_title,
@@ -8242,31 +9754,32 @@ var EngineService = class {
 					summary: input.summary
 				});
 				const chapter = input.chapter;
-				const plan = snapshot.plan;
-				if (plan === null) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${chapter} has no usable plan`, "rollback to P2 and submit novel_plan_chapter; the draft was not written");
-				const mergedPlan = {
-					...plan,
+				if (snapshot.plan === null) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `chapter ${chapter} has no usable plan`, "rollback to P2 and submit novel_plan_chapter; the draft was not written");
+				const draft = {
+					chapter,
 					title: input.chapter_title,
 					scene_type: input.scene_type,
 					narrator: input.narrator,
-					summary: input.summary
+					summary: input.summary,
+					content_hash: sha256(input.content),
+					updated_at: this.now().toISOString()
 				};
-				const planPath = planChapterFile(chapter);
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: "P4",
+					draft,
 					blocking: [],
 					last_action: action("novel_write_draft", this.now(), sha256(input.content))
 				});
 				return {
 					files: [
+						...snapshot.text === null ? [] : [{
+							path: chapterHistoryFile(chapter, snapshot.pipeline.revision),
+							text: snapshot.text
+						}],
 						{
 							path: chapterFile(chapter),
 							text: input.content
 						},
-						{
-							path: planPath,
-							text: yaml(mergedPlan)
-						},
 						{
 							path: joinRel(STATE_DIR, STATE_FILES.pipeline),
 							text: yaml(nextPipeline)
@@ -8287,6 +9800,7 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "submitReview",
+			chapter: input.chapter,
 			key: (snapshot) => `review:${input.chapter}:${sha256(snapshot.text ?? "")}:${sha256(stableJson({
 				dimensions: input.dimensions,
 				issues: input.issues,
@@ -8368,13 +9882,21 @@ var EngineService = class {
 					last_action: action("novel_review", this.now(), reviewDigest)
 				});
 				return {
-					files: [{
-						path: reviewFile(input.chapter),
-						text: yaml(review)
-					}, {
-						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
-						text: yaml(nextPipeline)
-					}],
+					files: [
+						...snapshot.review === null ? [] : [{
+							path: reviewHistoryFile(input.chapter, snapshot.pipeline.revision),
+							text: yaml(snapshot.review)
+						}],
+						{
+							path: reviewFile(input.chapter),
+							text: yaml(review)
+						},
+						{
+							path: joinRel(STATE_DIR, STATE_FILES.pipeline),
+							text: yaml(nextPipeline)
+						}
+					],
+					backup: snapshot.review !== null,
 					data: {
 						chapter: input.chapter,
 						round: review.round,
@@ -8391,16 +9913,31 @@ var EngineService = class {
 		});
 	}
 	async submitRevision(input) {
+		const hasContent = typeof input.content === "string" && input.content.trim() !== "";
+		const hasPatch = input.patch !== void 0;
+		if (hasContent === hasPatch) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "novel_revise requires exactly one of content or patch", "send the full revised text, or a patch with expected_hash and unique edits");
+		if (hasPatch) {
+			const patch = input.patch;
+			if (patch === null || typeof patch !== "object" || !Array.isArray(patch.edits) || patch.edits.length === 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "patch.edits must be a non-empty array");
+			if (typeof patch.expected_hash !== "string" || patch.expected_hash.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "patch.expected_hash must be the sha256 of the current manuscript", "read novel_status or the current manuscript, then hash the exact text");
+			for (const [index, edit] of patch.edits.entries()) {
+				if (typeof edit !== "object" || edit === null || typeof edit.old_text !== "string" || edit.old_text === "" || typeof edit.new_text !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch.edits[${index}] needs non-empty old_text and a string new_text`);
+				if (edit.occurrence !== void 0 && (!Number.isInteger(edit.occurrence) || edit.occurrence < 1)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch.edits[${index}].occurrence must be a positive integer`);
+			}
+		}
 		return this.mutate({
 			root: input.root,
 			op: "submitRevision",
-			key: () => `revision:${input.chapter}:${sha256(input.content)}:${sha256(stableJson({
+			chapter: input.chapter,
+			key: () => `revision:${input.chapter}:${sha256(input.content ?? stableJson(input.patch))}:${sha256(stableJson({
 				summary: input.summary,
 				issues: input.issues,
 				proof: input.proof
 			}))}`,
 			run: async (snapshot, context) => {
 				this.assertChapter(snapshot, input.chapter);
+				const revisedContent = input.patch === void 0 ? input.content : applyRevisionPatch(snapshot.text ?? "", input.patch);
+				if (revisedContent.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "revision content must not be empty");
 				let patchedReview = null;
 				if (snapshot.review !== null) {
 					const original = snapshot.review.issues;
@@ -8450,6 +9987,7 @@ var EngineService = class {
 						issues
 					};
 				}
+				const reviewChanged = patchedReview !== null && (snapshot.review === null || stableJson(patchedReview) !== stableJson(snapshot.review));
 				if (patchedReview !== null) try {
 					narrow("review", patchedReview);
 				} catch (error) {
@@ -8457,46 +9995,65 @@ var EngineService = class {
 				}
 				await this.assertGates(snapshot, "submitRevision", {
 					briefStage: briefStageFor("submitRevision", snapshot.pipeline.stage),
-					text: input.content,
+					text: revisedContent,
 					summary: input.summary,
 					summaryProvided: input.summary !== void 0,
 					review: patchedReview,
 					proof: input.proof
 				});
-				if (input.summary === void 0 && snapshot.plan?.summary !== void 0) {
-					const opening = snapshot.plan.summary.opening;
-					if (!openingInFirstTwoParagraphs(input.content, opening)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "summary omitted, but the stored opening no longer appears in the revised first two paragraphs", "resubmit novel_revise with a summary whose opening quotes the revised text");
+				const inheritedSummary = snapshot.pipeline.draft?.summary ?? snapshot.plan?.summary;
+				if (input.summary === void 0 && inheritedSummary !== void 0) {
+					const opening = inheritedSummary.opening;
+					if (!openingInFirstTwoParagraphs(revisedContent, opening)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "summary omitted, but the stored opening no longer appears in the revised first two paragraphs", "resubmit novel_revise with a summary whose opening quotes the revised text");
 				}
-				const machine = this.machine(snapshot, input.content, { summary: input.summary ?? snapshot.plan?.summary ?? null });
+				const effectiveSummary = input.summary ?? inheritedSummary;
+				if (effectiveSummary === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "the revised draft has no summary", "resubmit novel_revise with the ten-field summary");
+				const machine = this.machine(snapshot, revisedContent, { summary: effectiveSummary });
+				const baseDraft = snapshot.pipeline.draft ?? {
+					chapter: input.chapter,
+					title: snapshot.plan?.title ?? `第${input.chapter}章`,
+					scene_type: snapshot.plan?.scene_type ?? "日常过渡章",
+					narrator: snapshot.plan?.narrator ?? "",
+					summary: effectiveSummary,
+					content_hash: sha256(snapshot.text ?? ""),
+					updated_at: this.now().toISOString()
+				};
 				const nextStage$1 = nextStage(snapshot.pipeline.stage, "submitRevision", 0);
 				const nextPipeline = pipelineWith(snapshot, context.revision, {
 					stage: nextStage$1,
+					draft: {
+						...baseDraft,
+						summary: effectiveSummary,
+						content_hash: sha256(revisedContent),
+						updated_at: this.now().toISOString()
+					},
 					rounds: {
 						...snapshot.pipeline.rounds,
 						revise: snapshot.pipeline.rounds.revise + 1
 					},
 					blocking: [],
-					...patchedReview === null ? {} : { review_digest: sha256(stableJson(patchedReview)) },
-					last_action: action("novel_revise", this.now(), sha256(input.content))
-				});
-				const planPath = planChapterFile(input.chapter);
-				const planText = await context.store.readText(planPath);
-				const plan = planText === null ? null : parsePlanYaml(planText, planPath);
-				const files = [{
-					path: chapterFile(input.chapter),
-					text: input.content
-				}, {
-					path: joinRel(STATE_DIR, STATE_FILES.pipeline),
-					text: yaml(nextPipeline)
-				}];
-				if (plan !== null && input.summary !== void 0) files.push({
-					path: planPath,
-					text: yaml({
-						...plan,
-						summary: input.summary
-					})
+					...patchedReview === null || !reviewChanged && snapshot.pipeline.review_digest !== void 0 ? {} : { review_digest: sha256(stableJson(patchedReview)) },
+					last_action: action("novel_revise", this.now(), sha256(revisedContent))
 				});
-				if (patchedReview !== null && patchedReview !== snapshot.review) files.push({
+				const files = [
+					...snapshot.text === null ? [] : [{
+						path: chapterHistoryFile(input.chapter, snapshot.pipeline.revision),
+						text: snapshot.text
+					}],
+					...snapshot.review === null || !reviewChanged ? [] : [{
+						path: reviewHistoryFile(input.chapter, snapshot.pipeline.revision),
+						text: yaml(snapshot.review)
+					}],
+					{
+						path: chapterFile(input.chapter),
+						text: revisedContent
+					},
+					{
+						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
+						text: yaml(nextPipeline)
+					}
+				];
+				if (reviewChanged && patchedReview !== null) files.push({
 					path: reviewFile(input.chapter),
 					text: yaml(patchedReview)
 				});
@@ -8518,9 +10075,11 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "runCheck",
+			chapter: input.chapter,
 			key: (snapshot) => `check:${input.chapter}:${sha256(snapshot.text ?? "")}:${sha256(stableJson({
 				semantic: input.semantic ?? [],
-				scope
+				scope,
+				acknowledge: input.acknowledge ?? []
 			}))}`,
 			run: async (snapshot, context) => {
 				this.assertChapter(snapshot, input.chapter);
@@ -8539,6 +10098,13 @@ var EngineService = class {
 					violations: machine.violations.filter((violation) => scope.includes(scopeOfRule(violation.code)))
 				};
 				const machineBlocking = scopedMachine.violations.filter((violation) => violation.severity === "blocker");
+				const machineAdvisories = scopedMachine.violations.filter((violation) => violation.severity === "advisory");
+				const advisoryCodes = [...new Set(machineAdvisories.map((violation) => violation.code))];
+				const requestedAck = Array.isArray(input.acknowledge) ? input.acknowledge : [];
+				const unknownAck = requestedAck.filter((code) => !advisoryCodes.includes(code));
+				if (unknownAck.length > 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `cannot acknowledge non-advisory finding(s): ${unknownAck.join(", ")}`, `advisory codes in this run: ${advisoryCodes.join(", ") || "none"}; blockers and unknown codes cannot be acknowledged`);
+				const priorAck = snapshot.check !== null && snapshot.check.content_hash === sha256(text) ? snapshot.check.acknowledged ?? [] : [];
+				const acknowledged = [.../* @__PURE__ */ new Set([...priorAck, ...requestedAck])].filter((code) => advisoryCodes.includes(code));
 				const semanticResult = evaluateSemantic(text, semantic);
 				const verdict = machineBlocking.length === 0 && !semanticResult.failed ? "pass" : "fail";
 				const check = {
@@ -8547,10 +10113,12 @@ var EngineService = class {
 					scope,
 					content_hash: sha256(text),
 					machine: {
-						violations: scopedMachine.violations,
+						violations: machineBlocking,
+						advisories: machineAdvisories,
 						metrics: scopedMachine.metrics
 					},
 					semantic: { items: semantic },
+					...acknowledged.length === 0 ? {} : { acknowledged },
 					verdict
 				};
 				try {
@@ -8575,24 +10143,42 @@ var EngineService = class {
 					last_action: action("novel_check", this.now(), sha256(text))
 				});
 				return {
-					files: [{
-						path: checkFile(input.chapter),
-						text: yaml(check)
-					}, {
-						path: joinRel(STATE_DIR, STATE_FILES.pipeline),
-						text: yaml(nextPipeline)
-					}],
+					files: [
+						...snapshot.check === null ? [] : [{
+							path: checkHistoryFile(input.chapter, snapshot.pipeline.revision),
+							text: yaml(snapshot.check)
+						}],
+						{
+							path: checkFile(input.chapter),
+							text: yaml(check)
+						},
+						{
+							path: joinRel(STATE_DIR, STATE_FILES.pipeline),
+							text: yaml(nextPipeline)
+						}
+					],
+					backup: snapshot.check !== null,
 					data: {
 						chapter: input.chapter,
 						verdict,
-						violations: scopedMachine.violations.length,
+						violations: machineBlocking.length,
+						advisories: machineAdvisories.filter((violation) => !acknowledged.includes(violation.code)).length,
+						advisory_codes: advisoryCodes,
+						acknowledged,
 						metrics: scopedMachine.metrics,
 						stage: nextStage$2
 					},
-					warnings: [...machineWarnings(scopedMachine), ...verdict === "pass" && !fullScope ? [{
-						code: "CHECK_SCOPE_PARTIAL",
-						message: `scope ${scope.join("+")} passed, but archive requires content+integrity; the pipeline stays at P6`
-					}] : []]
+					warnings: [
+						...machineWarnings(scopedMachine, acknowledged),
+						...acknowledged.length === 0 ? [] : [{
+							code: "CHECK_ADVISORY_ACKNOWLEDGED",
+							message: `已记录知悉：${acknowledged.join(", ")}；advisory 不阻塞归档`
+						}],
+						...verdict === "pass" && !fullScope ? [{
+							code: "CHECK_SCOPE_PARTIAL",
+							message: `scope ${scope.join("+")} passed, but archive requires content+integrity; the pipeline stays at P6`
+						}] : []
+					]
 				};
 			}
 		});
@@ -8607,6 +10193,7 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "archiveChapter",
+			chapter: input.chapter,
 			key: (snapshot) => {
 				const archived = snapshot.chapters.chapters.find((record) => record.num === input.chapter);
 				return `archive:${input.chapter}:${archived?.content_hash ?? sha256(snapshot.text ?? "")}:${archiveDigest}`;
@@ -8633,7 +10220,8 @@ var EngineService = class {
 				this.assertChapter(snapshot, input.chapter);
 				this.assertChapterWithinTarget(snapshot, input.chapter, "novel_archive");
 				const text = snapshot.text ?? "";
-				const summary = snapshot.plan?.summary;
+				const draft = snapshot.pipeline.draft;
+				const summary = draft?.summary ?? snapshot.plan?.summary;
 				if (summary === void 0) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "the draft has no summary; resubmit the draft with a summary", "call novel_write_draft with the full summary block");
 				if (snapshot.review !== null && snapshot.pipeline.review_digest === void 0) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "the stored review has no review_digest; it predates digest-bound reviews and cannot be archived blindly", "re-run novel_review for this chapter, then re-run the archive");
 				if (snapshot.review !== null && snapshot.pipeline.review_digest !== void 0 && snapshot.pipeline.review_digest !== sha256(stableJson(snapshot.review))) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "the stored review changed after submission; its digest no longer matches", "re-run novel_review instead of editing reviews/ directly");
@@ -8644,6 +10232,10 @@ var EngineService = class {
 					review: snapshot.review,
 					proof: snapshot.review?.proof ?? null
 				});
+				if (draft !== void 0) {
+					if (draft.chapter !== input.chapter) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `pipeline draft belongs to chapter ${draft.chapter}, but chapter ${input.chapter} is being archived`, "re-open the intended chapter or resubmit the draft before archiving");
+					if (draft.content_hash !== sha256(text)) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, "the manuscript changed after its draft summary was written; the summary and title cannot be sealed against this text", "restore the manuscript to the draft version, or call novel_write_draft / novel_revise again before archiving");
+				}
 				if (text === "") throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${input.chapter} has no draft`);
 				const archiveBlockers = this.machine(snapshot, text, { summary }).violations.filter((violation) => violation.severity === "blocker");
 				if (archiveBlockers.length > 0) throw new EngineBlockedError(ERROR_CODES.GATE_BLOCKED, `archiveChapter blocked by ${archiveBlockers.length} machine finding(s), first: ${archiveBlockers[0].code}`, archiveBlockers.map((violation) => ({
@@ -8659,7 +10251,7 @@ var EngineService = class {
 				const metrics = countWordMetrics(text);
 				const score = snapshot.review?.total ?? 0;
 				const chapter = input.chapter;
-				const storedTitle = stripTitlePrefix(snapshot.plan?.title ?? "");
+				const storedTitle = stripTitlePrefix(snapshot.pipeline.draft?.title ?? snapshot.plan?.title ?? "");
 				const record = {
 					num: chapter,
 					title: storedTitle === "" ? `第${chapter}章` : storedTitle,
@@ -8667,13 +10259,16 @@ var EngineService = class {
 					word_count: metrics.total_word_count,
 					dialogue_lines: metrics.dialogue_lines,
 					dialogue_ratio: metrics.dialogue_ratio,
-					scene_type: snapshot.plan?.scene_type ?? "日常过渡章",
-					narrator: snapshot.plan?.narrator ?? "",
+					scene_type: snapshot.pipeline.draft?.scene_type ?? snapshot.plan?.scene_type ?? "日常过渡章",
+					narrator: snapshot.pipeline.draft?.narrator ?? snapshot.plan?.narrator ?? "",
 					score,
 					status: "reviewed",
 					content_hash: sha256(text),
 					summary
 				};
+				const roleHints = {};
+				for (const character of snapshot.worldbook.characters) if (character.role !== "") roleHints[character.name] = character.role;
+				for (const character of snapshot.worldPlan?.characters ?? []) if (character.role !== "") roleHints[character.name] = character.role;
 				const ledger = applyStateDelta({
 					chapter,
 					text,
@@ -8685,11 +10280,15 @@ var EngineService = class {
 					foreshadows: snapshot.foreshadows,
 					timeline: snapshot.timeline,
 					relationships: snapshot.relationships,
-					narrator: snapshot.plan?.narrator ?? null
+					narrator: snapshot.pipeline.draft?.narrator ?? snapshot.plan?.narrator ?? null,
+					roleHints
 				});
 				record.assigned_ids = ledger.assigned;
 				record.archive_digest = archiveDigest;
 				const archivedAt = this.now().toISOString();
+				record.rounds = await this.lifetimeRounds(snapshot, chapter);
+				record.final_check = snapshot.check?.verdict ?? "fail";
+				record.archived_at = archivedAt;
 				const outline = markOutlineArchived(snapshot.outline, record, archivedAt, snapshot.project.targets.words_per_chapter);
 				this.assertOutlineWritable(snapshot, outline, "novel_archive");
 				const foreshadows = ledger.foreshadows;
@@ -8730,6 +10329,7 @@ var EngineService = class {
 					blocking: [],
 					last_action: action("novel_archive", this.now(), sha256(text))
 				});
+				delete nextPipeline.draft;
 				assertArchiveDocuments([
 					["chapters", chapters],
 					["characters", ledger.characters],
@@ -8742,12 +10342,18 @@ var EngineService = class {
 				]);
 				const archiveDigests = await this.readArchiveDigests(context.store, snapshot);
 				archiveDigests[String(chapter)] = archiveDigest;
+				const planText = await context.store.readText(planChapterFile(chapter));
+				if (planText === null) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `chapter ${chapter} has no stored plan; archiving would not be able to prove it later`, "restore the plan from backups/ before archiving");
 				return {
 					files: [
 						{
 							path: chapterFile(chapter),
 							text
 						},
+						{
+							path: planChapterFile(chapter),
+							text: planText
+						},
 						{
 							path: joinRel(STATE_DIR, STATE_FILES.chapters),
 							text: yaml(chapters)
@@ -8818,7 +10424,8 @@ var EngineService = class {
 		if (typeof input.path !== "string" || input.path.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend path must be a non-empty string");
 		if (typeof input.reason !== "string" || input.reason.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend requires a reason");
 		if (typeof input.content !== "object" || input.content === null || Array.isArray(input.content)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend content must be an object");
-		const resolvedRoot = await this.resolveRoot(input.root);
+		const selection = await this.resolveRoot(input.root);
+		const resolvedRoot = selection.root;
 		const store = this.storeFor(resolvedRoot);
 		const absolute = store.path(input.path);
 		const kind = Object.hasOwn(MUTABLE_STATE, input.path) ? MUTABLE_STATE[input.path] : void 0;
@@ -8829,11 +10436,10 @@ var EngineService = class {
 			if (await this.stateDocIsUnreadable(store, path, docKind)) repairPaths.push(path);
 		}
 		return this.mutate({
-			root: resolvedRoot,
+			selection,
 			op: "amend",
 			reason: input.reason,
 			...repairPaths.length === 0 ? {} : { repairPaths },
-			key: (snapshot) => `amend:${input.path}:${snapshot.pipeline.revision}`,
 			run: async (snapshot, context) => {
 				if (input.reason.trim() === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "amend requires a reason", "state the intent so the journal explains the change");
 				if (kind === "pipeline") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "pipeline cannot be amended directly", "use novel_rollback or the stage operations");
@@ -8966,8 +10572,9 @@ var EngineService = class {
 		return this.mutate({
 			root: input.root,
 			op: "rollback",
+			chapter: input.chapter,
 			reason: input.reason,
-			key: () => `rollback:${input.chapter}:${input.toStage}`,
+			key: (snapshot) => `rollback:${input.chapter}:${input.toStage}:${sha256(snapshot.text ?? "")}`,
 			run: async (snapshot, context) => {
 				this.assertChapter(snapshot, input.chapter);
 				if (!Object.prototype.hasOwnProperty.call(ROUND_TRANSITIONS, input.toStage)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `unknown rollback target "${String(input.toStage)}"`, `allowed targets: ${Object.keys(ROUND_TRANSITIONS).join(", ")}`);
@@ -8985,15 +10592,31 @@ var EngineService = class {
 					blocking: [],
 					last_action: action("novel_rollback", this.now(), shortDigest(input.reason ?? ""))
 				});
+				delete nextPipeline.draft;
+				if (stage !== "idle" && stage !== "P2" && snapshot.pipeline.draft !== void 0) nextPipeline.draft = snapshot.pipeline.draft;
 				const files = [{
 					path: joinRel(STATE_DIR, STATE_FILES.pipeline),
 					text: yaml(nextPipeline)
 				}];
 				const current = await context.store.readText(chapterFile(input.chapter));
-				if (current !== null) files.push({
-					path: deprecatedChapterFile(input.chapter),
-					text: current
-				});
+				if (current !== null) {
+					files.push({
+						path: chapterFile(input.chapter),
+						text: current
+					});
+					files.push({
+						path: deprecatedChapterFile(input.chapter),
+						text: current
+					});
+					files.push({
+						path: chapterHistoryFile(input.chapter, snapshot.pipeline.revision),
+						text: current
+					});
+					files.push({
+						path: deprecatedHistoryFile(input.chapter, snapshot.pipeline.revision),
+						text: current
+					});
+				}
 				return {
 					files,
 					backup: true,
@@ -9010,15 +10633,8 @@ var EngineService = class {
 		if (input.before !== void 0 && typeof input.before !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "diff before must be a string");
 		if (input.after !== void 0 && typeof input.after !== "string") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "diff after must be a string");
 		if (input.before !== void 0 && input.after !== void 0) {
-			let chapter = input.chapter;
-			let revision = 1;
-			if (chapter === void 0) try {
-				const snapshot = await this.load(input.root);
-				chapter = snapshot.pipeline.chapter;
-				revision = snapshot.pipeline.revision;
-			} catch {
-				chapter = 0;
-			}
+			const chapter = input.chapter ?? 0;
+			const revision = 1;
 			const report = diffLines(input.before, input.after);
 			return {
 				data: {
@@ -9074,8 +10690,21 @@ var EngineService = class {
 		});
 		const requested = input.limit ?? 50;
 		const limit = Number.isFinite(requested) ? Math.max(0, Math.min(1e3, Math.floor(requested))) : 50;
+		if (input.chapter !== void 0) this.assertChapterParameter(input.chapter);
+		if (input.cursor !== void 0 && (!Number.isInteger(input.cursor) || input.cursor < 0)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "audit cursor must be a non-negative integer");
+		if (input.since !== void 0 && Number.isNaN(Date.parse(input.since))) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "audit since must be an ISO timestamp");
+		if (input.until !== void 0 && Number.isNaN(Date.parse(input.until))) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "audit until must be an ISO timestamp");
+		const filtered = rows.filter((row) => {
+			if (input.chapter !== void 0 && row.chapter !== input.chapter) return false;
+			if (input.op !== void 0 && row.op !== input.op) return false;
+			if (input.status !== void 0 && row.status !== input.status) return false;
+			if (input.since !== void 0 && Date.parse(row.at) < Date.parse(input.since)) return false;
+			if (input.until !== void 0 && Date.parse(row.at) > Date.parse(input.until)) return false;
+			if (input.cursor !== void 0 && (row.seq ?? 0) <= input.cursor) return false;
+			return true;
+		});
 		return {
-			data: limit === 0 ? [] : rows.slice(-limit),
+			data: limit === 0 ? [] : input.cursor === void 0 ? filtered.slice(-limit) : filtered.slice(0, limit),
 			revision: snapshot.pipeline.revision,
 			warnings
 		};
@@ -9262,20 +10891,162 @@ var EngineService = class {
 	async panelGates(input = {}) {
 		return projectGates(await this.panelSnapshot(input.root));
 	}
-	/** One snapshot, three projections: the panel never mixes revisions. */
+	/**
+	* Build the read-only panel payload. The query root is accepted only when it
+	* is registered, active or the configured root; arbitrary paths never reach
+	* the filesystem from the panel route.
+	*/
 	async panelBundle(input = {}) {
-		const snapshot = await this.panelSnapshot(input.root);
+		const registry = await this.registry().read();
+		const active = registry.active;
+		const rows = /* @__PURE__ */ new Map();
+		const add = (option) => {
+			if (!rows.has(option.root)) rows.set(option.root, option);
+		};
+		const optionFor = async (root, registered, fallbackTitle, expectedCreatedAt) => {
+			const inspection = await inspectProject(root);
+			const state = inspection.state === "ok" ? "ok" : inspection.state === "damaged" ? "damaged" : inspection.state === "unreadable" ? "unreadable" : "missing";
+			const sameIdentity = expectedCreatedAt === void 0 || expectedCreatedAt === "" || inspection.created_at === expectedCreatedAt;
+			const title = inspection.state === "ok" && inspection.title !== "" && sameIdentity ? inspection.title : fallbackTitle !== void 0 && fallbackTitle !== "" ? fallbackTitle : inspection.title;
+			return {
+				root: inspection.root,
+				title,
+				active: active === inspection.root,
+				registered,
+				state
+			};
+		};
+		for (const entry of registry.projects) add(await optionFor(entry.root, true, entry.title, entry.created_at));
+		if (active !== null && !rows.has(active)) {
+			const known = registry.projects.find((entry) => entry.root === active);
+			add(await optionFor(active, known !== void 0, known?.title, known?.created_at));
+		}
+		const configured = this.defaultRoot();
+		if (!rows.has(configured)) {
+			const option = await optionFor(configured, false);
+			if (option.state !== "missing" || active === configured) add(option);
+		}
+		const selectedRoot = input.root === void 0 ? void 0 : resolve(input.root);
+		if (selectedRoot !== void 0 && !rows.has(selectedRoot) && selectedRoot === configured) add(await optionFor(configured, false));
+		const projects = [...rows.values()].sort((left, right) => compareText(left.root, right.root));
+		let selection;
+		if (selectedRoot !== void 0) {
+			if (!rows.has(selectedRoot)) return {
+				projects,
+				selection: {
+					root: selectedRoot,
+					source: "query"
+				},
+				missing: {
+					root: selectedRoot,
+					title: "（未登记的项目）",
+					code: ERROR_CODES.PROJECT_NOT_FOUND,
+					reason: "not_registered",
+					hint: "用 /novel scan --register 或 /novel admin novel_registry_register 登记后刷新；面板不会读取任意路径。"
+				}
+			};
+			selection = {
+				root: selectedRoot,
+				source: "query"
+			};
+		} else if (active !== null) selection = {
+			root: active,
+			source: "active"
+		};
+		else if (registry.projects.length === 1) selection = {
+			root: registry.projects[0].root,
+			source: "single"
+		};
+		else if (rows.has(configured) && !registry.projects.some((entry) => entry.root === configured)) selection = {
+			root: configured,
+			source: "config"
+		};
+		else selection = {
+			root: null,
+			source: "none"
+		};
+		if (selection.root === null) return {
+			projects,
+			selection,
+			...projects.length === 0 ? {
+				empty: true,
+				error: "还没有项目：调用 novel_init 创建。"
+			} : {}
+		};
+		const option = rows.get(selection.root);
+		const inspection = await inspectProject(selection.root);
+		if (option.state === "missing" || option.state === "unreadable" || inspection.state === "not-project") return {
+			projects,
+			selection,
+			missing: {
+				root: selection.root,
+				title: option.title,
+				code: inspection.state === "not-project" ? ERROR_CODES.PROJECT_NOT_FOUND : ERROR_CODES.PROJECT_MISSING,
+				reason: inspection.state === "not-project" ? "not-project" : inspection.state === "unreadable" ? "unreadable" : "missing",
+				hint: inspection.state === "not-project" ? "目录存在，但没有 novel.yaml 或项目状态；请恢复项目定义，或改选其他项目。" : inspection.state === "unreadable" ? "目录不可读；请修复权限或 IO 错误后刷新，登记行和面板偏好会保留。" : "项目目录不在了；请恢复目录或挂载后刷新，登记行和面板偏好会保留。"
+			}
+		};
+		let snapshot;
+		try {
+			snapshot = await this.panelSnapshot(selection.root);
+		} catch (error) {
+			if (error instanceof EngineError && (error.code === ERROR_CODES.PROJECT_MISSING || error.code === ERROR_CODES.PROJECT_NOT_FOUND)) return {
+				projects,
+				selection,
+				missing: {
+					root: selection.root,
+					title: option.title,
+					code: error.code === ERROR_CODES.PROJECT_MISSING ? ERROR_CODES.PROJECT_MISSING : ERROR_CODES.PROJECT_NOT_FOUND,
+					reason: "missing",
+					hint: error.hint ?? "项目目录不在了；请恢复目录或挂载后刷新，登记行和面板偏好会保留。"
+				}
+			};
+			throw error;
+		}
+		const summary = projectSummary(snapshot);
+		const resume = summary.next === void 0 ? void 0 : { text: formatResumePrompt({
+			title: summary.title,
+			root: summary.root,
+			chapter: summary.chapter,
+			stage: summary.stage,
+			nextTool: summary.next.tool
+		}) };
 		return {
-			summary: projectSummary(snapshot),
+			projects,
+			selection,
+			summary,
 			chapters: projectChapters(snapshot),
-			gates: projectGates(snapshot)
+			gates: projectGates(snapshot),
+			...resume === void 0 ? {} : { resume }
+		};
+	}
+	/** Read-only resume text shared with the panel copy button. */
+	async resumePrompt(input = {}) {
+		if (this.caller()?.sessionId === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, "resume requires an Agent session", "run /novel resume from an Agent conversation");
+		const selection = await this.resolveRoot(input.root);
+		const snapshot = await this.loadAt(selection);
+		const status = await this.statusFor(snapshot, snapshot.pipeline.chapter);
+		const nextTool = status.data.next?.tool;
+		return {
+			data: {
+				text: nextTool === void 0 ? null : formatResumePrompt({
+					title: status.data.project.title,
+					root: status.data.project.root,
+					chapter: status.data.chapter,
+					stage: status.data.stage,
+					nextTool
+				}),
+				selection: status.data.selection
+			},
+			revision: status.revision,
+			warnings: []
 		};
 	}
 	async stats(input = {}) {
 		const snapshot = await this.load(input.root);
 		const totalWords = snapshot.chapters.chapters.reduce((total, chapter) => total + chapter.word_count, 0);
 		const scores = snapshot.chapters.chapters.map((chapter) => chapter.score);
-		const outline = outlineSummary(snapshot.outline, snapshot.chapters.chapters.length);
+		const outline = outlineSummary(snapshot.outline, snapshot.chapters.chapters.length, snapshot.project.targets.total_chapters, snapshot.chapters.chapters.map((record) => record.num));
 		const counts = worldbookCounts(snapshot.worldbook);
 		return {
 			totalWords,
@@ -9286,51 +11057,299 @@ var EngineService = class {
 			lastScore: scores.length === 0 ? 0 : scores[scores.length - 1],
 			openForeshadows: snapshot.foreshadows.items.filter((item) => item.status !== "resolved").length,
 			plannedChapters: outline.planned,
-			outlineCoverage: outline.coverage,
+			totalCards: outline.total,
+			outlineCoverage: outline.plannedCoverage,
+			archivedCoverage: outline.archivedCoverage,
+			missingCards: outline.missingCards,
 			blueprintReady: bookPlanPresent(snapshot.outline.book),
-			worldbookEntries: counts.characters + counts.locations + counts.factions + counts.rules + counts.glossary + counts.backstory,
+			worldbookEntries: counts.characters + counts.locations + counts.factions + counts.rules + counts.glossary + counts.backstory + counts.facts,
 			strictOutline: snapshot.outline.book.strict,
 			targetChapters: snapshot.project.targets.total_chapters
 		};
 	}
 	registry() {
-		return new ProjectRegistry(new FsStore(this.config.stateDir === "" ? join(homedir(), ".dsh", "novel-write-engine") : this.config.stateDir));
+		return new ProjectRegistry(this.stateStore());
 	}
-	/** List known projects (convenience only; a project opens without a row). */
+	/** List known projects with a cheap directory state for the panel/command. */
 	async listProjects() {
 		const document = await this.registry().read();
+		const projects = await Promise.all(document.projects.map(async (entry) => {
+			const inspection = await inspectProject(entry.root);
+			const sameIdentity = entry.created_at === void 0 || entry.created_at === "" || inspection.created_at === entry.created_at;
+			return {
+				...entry,
+				...inspection.state === "ok" && inspection.title !== "" && sameIdentity ? { title: inspection.title } : {},
+				state: inspection.state
+			};
+		}));
 		return {
 			active: document.active,
-			projects: document.projects
+			projects
 		};
 	}
-	/** Record the current project in the registry. */
+	/**
+	* Record an explicit project row. An unchanged duplicate is a no-op; a path
+	* reused by another project updates the row and reports `replaced`.
+	*/
 	async registerProject(input = {}) {
-		const snapshot = await this.load(input.root);
-		const document = await this.registry().register({
-			root: snapshot.root,
-			title: snapshot.project.title
-		});
-		return {
-			active: document.active,
-			projects: document.projects
+		const selection = input.root === void 0 ? await this.resolveRoot(void 0) : {
+			root: this.resolveProjectPath(input.root),
+			source: "explicit"
 		};
+		const snapshot = await this.loadAt(selection);
+		this.assertProjectHealthy(snapshot, "novel_registry_register");
+		return this.withMetadataLock(async () => {
+			const registry = this.registry();
+			const document = await registry.read();
+			const previous = document.projects.find((entry) => entry.root === snapshot.root);
+			const replaced = previous !== void 0 && previous.created_at !== void 0 && previous.created_at !== "" && previous.created_at !== snapshot.project.created_at;
+			if (!replaced && previous !== void 0 && previous.title === snapshot.project.title && (previous.created_at ?? "") === (snapshot.project.created_at ?? "")) return {
+				active: document.active,
+				projects: document.projects,
+				replaced: false
+			};
+			const next = await registry.register({
+				root: snapshot.root,
+				title: snapshot.project.title,
+				created_at: snapshot.project.created_at
+			});
+			return {
+				active: next.active,
+				projects: next.projects,
+				replaced
+			};
+		});
 	}
-	/** Choose the default project for future convenience calls. */
+	/** Choose the panel/default project. This never binds the current session. */
 	async setActiveProject(input) {
-		const document = await this.registry().setActive(resolve(input.root));
-		this.lastRoot = document.active === null ? null : resolve(document.active);
-		return { active: document.active };
+		const selection = {
+			root: this.resolveProjectPath(input.root),
+			source: "explicit"
+		};
+		const snapshot = await this.loadAt(selection);
+		this.assertProjectHealthy(snapshot, "novel_registry_activate");
+		return this.withMetadataLock(async () => {
+			const registry = this.registry();
+			const previous = (await registry.read()).projects.find((entry) => entry.root === snapshot.root);
+			const replaced = previous !== void 0 && previous.created_at !== void 0 && previous.created_at !== "" && previous.created_at !== snapshot.project.created_at;
+			await registry.register({
+				root: snapshot.root,
+				title: snapshot.project.title,
+				created_at: snapshot.project.created_at
+			});
+			return {
+				active: (await registry.setActive(snapshot.root)).active,
+				replaced
+			};
+		});
 	}
-	/** Forget a registry row; the project directory is never touched. */
+	/** Forget a registry row; the project directory and bindings are never touched. */
 	async forgetProject(input) {
-		const document = await this.registry().forget(resolve(input.root));
-		if (this.lastRoot === resolve(input.root)) this.lastRoot = document.active === null ? null : resolve(document.active);
+		return this.withMetadataLock(async () => {
+			const document = await this.registry().forget(this.resolveProjectPath(input.root));
+			return {
+				active: document.active,
+				projects: document.projects
+			};
+		});
+	}
+	/**
+	* Bounded workspace scan. Normal mode is read-only; `register` updates only
+	* healthy, newly discovered rows, never active or session bindings.
+	*/
+	async scanProjects(input) {
+		const cwd = resolve(input.cwd);
+		const scan = await scanWorkspace(cwd);
+		const before = await this.registry().read();
+		const registeredRoots = new Set(before.projects.map((entry) => entry.root));
+		const candidates = scan.candidates.map((candidate) => ({
+			...candidate,
+			registered: registeredRoots.has(candidate.root)
+		}));
+		if (input.register !== true) return {
+			cwd,
+			candidates,
+			truncated: scan.truncated,
+			added: [],
+			already: [],
+			skipped: [],
+			identity_changed: []
+		};
+		const loaded = /* @__PURE__ */ new Map();
+		const skipped = [];
+		for (const candidate of candidates) {
+			if (candidate.state !== "ok") {
+				skipped.push({
+					root: candidate.root,
+					reason: candidate.state === "damaged" ? `damaged: ${candidate.error ?? "novel.yaml is missing/unreadable"}` : candidate.state === "unreadable" ? `unreadable: ${candidate.error ?? "permission or IO error"}` : `not a project (${candidate.state})`
+				});
+				continue;
+			}
+			if (registeredRoots.has(candidate.root)) continue;
+			try {
+				const snapshot = await this.loadAt({
+					root: candidate.root,
+					source: "explicit"
+				});
+				if (snapshot.projectError !== null) {
+					skipped.push({
+						root: candidate.root,
+						reason: `damaged: ${snapshot.projectError}`
+					});
+					continue;
+				}
+				loaded.set(candidate.root, snapshot);
+			} catch (error) {
+				skipped.push({
+					root: candidate.root,
+					reason: errorMessage(error)
+				});
+			}
+		}
+		const added = [];
+		const already = [];
+		const identityChanged = [];
+		await this.withMetadataLock(async () => {
+			const registry = this.registry();
+			const document = await registry.read();
+			for (const candidate of candidates) {
+				if (candidate.state !== "ok") continue;
+				const existing = document.projects.find((entry) => entry.root === candidate.root);
+				if (existing !== void 0) {
+					candidate.registered = true;
+					already.push(candidate.root);
+					const previousCreatedAt = existing.created_at ?? "";
+					const currentCreatedAt = candidate.created_at ?? "";
+					if (previousCreatedAt !== "" && previousCreatedAt !== currentCreatedAt) {
+						identityChanged.push(candidate.root);
+						candidate.identity_changed = true;
+						candidate.reason = "registered under a different created_at (or the replacement has none); not overwritten. Run explicit register/activate to confirm the replacement.";
+						continue;
+					}
+					if (candidate.title !== "" && (existing.title !== candidate.title || previousCreatedAt !== currentCreatedAt)) try {
+						await registry.register({
+							root: candidate.root,
+							title: candidate.title,
+							created_at: candidate.created_at
+						});
+					} catch (error) {
+						skipped.push({
+							root: candidate.root,
+							reason: `registry update failed: ${errorMessage(error)}`
+						});
+					}
+					continue;
+				}
+				const snapshot = loaded.get(candidate.root);
+				if (snapshot === void 0) continue;
+				try {
+					await registry.register({
+						root: snapshot.root,
+						title: snapshot.project.title,
+						created_at: snapshot.project.created_at
+					});
+					added.push(candidate.root);
+					candidate.registered = true;
+					candidate.title = snapshot.project.title;
+					candidate.created_at = snapshot.project.created_at;
+				} catch (error) {
+					skipped.push({
+						root: candidate.root,
+						reason: `registry write failed: ${errorMessage(error)}`
+					});
+				}
+			}
+		});
 		return {
-			active: document.active,
-			projects: document.projects
+			cwd,
+			candidates,
+			truncated: scan.truncated,
+			added,
+			already,
+			skipped,
+			identity_changed: identityChanged
+		};
+	}
+	/** Current session binding, or the inferred fallback when none is set. */
+	async currentProject() {
+		const caller = this.caller();
+		if (caller?.sessionId === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, "currentProject requires an Agent session", "run /novel current from an Agent conversation");
+		const binding = await this.bindings().get(caller.sessionId);
+		if (binding !== void 0) {
+			const inspection = await inspectProject(binding.root).catch(() => null);
+			return {
+				selection: {
+					root: binding.root,
+					source: "session",
+					title: binding.title,
+					created_at: binding.project_created_at
+				},
+				bound: true,
+				...inspection === null ? {} : { state: inspection.state }
+			};
+		}
+		try {
+			return {
+				selection: await this.resolveRoot(void 0),
+				bound: false
+			};
+		} catch (error) {
+			return {
+				selection: null,
+				bound: false,
+				error: errorMessage(error)
+			};
+		}
+	}
+	/** Explicitly switch this session; failure leaves the old binding untouched. */
+	async useProject(input) {
+		const caller = this.caller();
+		if (caller?.sessionId === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, "useProject requires an Agent session", "run /novel use from an Agent conversation");
+		const target = input.target.trim().replace(/^(["'])(.*)\1$/u, "$2");
+		if (target === "") throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, "use requires a path, title or \".\"");
+		let root;
+		if (target === ".") {
+			if (caller.cwd === void 0 || caller.cwd === "") throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, "use \".\" requires a working directory", "run the command from a project workspace, or pass an explicit path");
+			const found = await discoverWorkspace(caller.cwd);
+			if (found.kind === "many") throw ambiguousError(found.roots.map((candidate) => ({ root: candidate })));
+			if (found.kind === "none") throw projectNotFoundError(caller.cwd);
+			root = found.root;
+		} else {
+			const candidate = resolve(caller.cwd ?? process.cwd(), target);
+			const inspection = await inspectProject(candidate).catch(() => null);
+			if (inspection !== null && inspection.state !== "not-project" && inspection.state !== "missing") root = candidate;
+			else {
+				const matches = (await this.registry().read()).projects.filter((entry) => entry.title === target);
+				if (matches.length > 1) throw new EngineInputError(ERROR_CODES.PROJECT_AMBIGUOUS, `multiple registered projects are named "${target}":\n${describeCandidates(matches)}`, "use the full project path instead of the title");
+				root = matches[0]?.root;
+			}
+		}
+		if (root === void 0) throw new EngineInputError(ERROR_CODES.PROJECT_NOT_FOUND, `no registered project or readable directory matches "${target}"`, "run /novel projects or /novel scan to see available projects");
+		const selection = {
+			root,
+			source: "explicit"
+		};
+		const snapshot = await this.loadAt(selection);
+		this.assertProjectHealthy(snapshot, "novel_use");
+		await this.bindSelection(snapshot.root, snapshot.project.title, snapshot.project.created_at, "command");
+		await this.autoRegister(snapshot);
+		return {
+			selection: {
+				root: snapshot.root,
+				source: "explicit",
+				title: snapshot.project.title,
+				created_at: snapshot.project.created_at
+			},
+			title: snapshot.project.title,
+			created_at: snapshot.project.created_at
 		};
 	}
+	/** Clear only this session's choice; never touches a project or registry row. */
+	async unbindProject() {
+		const caller = this.caller();
+		if (caller?.sessionId === void 0) throw new EngineInputError(ERROR_CODES.CONFIG_INVALID, "unbindProject requires an Agent session", "run /novel unbind from an Agent conversation");
+		return { cleared: (await this.withMetadataLock(() => this.bindings().clear(caller.sessionId))).changed };
+	}
 	/**
 	* Import one ledger from a settings pack. Always previews with a diff; a
 	* dry run never writes, and an apply is a normal transaction.
@@ -9448,7 +11467,7 @@ var EngineService = class {
 		throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `state/${STATE_FILES.chapters} is unreadable; ${operation} cannot preserve archived outline cards`, `repair state/${STATE_FILES.chapters} with novel_amend before ${operation}`);
 	}
 	bookStatus(snapshot) {
-		const summary = outlineSummary(snapshot.outline, snapshot.chapters.chapters.length);
+		const summary = outlineSummary(snapshot.outline, snapshot.chapters.chapters.length, snapshot.project.targets.total_chapters, snapshot.chapters.chapters.map((record) => record.num));
 		const counts = worldbookCounts(snapshot.worldbook);
 		return {
 			premise: snapshot.outline.book.premise,
@@ -9456,10 +11475,15 @@ var EngineService = class {
 			strict: snapshot.outline.book.strict,
 			outline: {
 				present: snapshot.outlinePresent && summary.present,
+				target: summary.target,
 				total: summary.total,
 				planned: summary.planned,
 				archived: summary.archived,
+				missing_cards: summary.missingCards,
+				planned_coverage: summary.plannedCoverage,
+				archived_coverage: summary.archivedCoverage,
 				coverage: summary.coverage,
+				card_coverage: summary.cardCoverage,
 				volumes: summary.volumes,
 				current: outlineCard(snapshot.outline, snapshot.pipeline.chapter)
 			},
@@ -9470,12 +11494,14 @@ var EngineService = class {
 				factions: counts.factions,
 				rules: counts.rules,
 				glossary: counts.glossary,
-				backstory: counts.backstory
+				backstory: counts.backstory,
+				facts: counts.facts
 			}
 		};
 	}
 	async panelSnapshot(root) {
-		const snapshot = await this.load(root);
+		const selection = await this.resolveRoot(root);
+		const snapshot = await this.loadAt(selection);
 		const archived = snapshot.chapters.chapters;
 		const archivedCurrent = archived.some((chapter) => chapter.num === snapshot.pipeline.chapter);
 		const target = snapshot.project.targets.total_chapters;
@@ -9483,7 +11509,7 @@ var EngineService = class {
 		const draftWords = snapshot.text === null ? 0 : countWordMetrics(snapshot.text).total_word_count;
 		const journal = await readJournal(this.storeFor(snapshot.root));
 		const journalBlocking = await this.journalBlocking(snapshot);
-		const outline = outlineSummary(snapshot.outline, archived.length);
+		const outline = outlineSummary(snapshot.outline, archived.length, target, archived.map((record) => record.num));
 		const counts = worldbookCounts(snapshot.worldbook);
 		const scores = archived.slice(-10).map((chapter) => chapter.score);
 		const blocking = [...this.effectiveBlocking(snapshot), ...journalBlocking];
@@ -9496,10 +11522,15 @@ var EngineService = class {
 			target,
 			outline: {
 				present: snapshot.outlinePresent && outline.present,
+				target: outline.target,
 				total: outline.total,
 				planned: outline.planned,
 				archived: outline.archived,
+				missing_cards: outline.missingCards,
+				planned_coverage: outline.plannedCoverage,
+				archived_coverage: outline.archivedCoverage,
 				coverage: outline.coverage,
+				card_coverage: outline.cardCoverage,
 				volumes: snapshot.outline.volumes.map((volume) => {
 					const cards = snapshot.outline.chapters.filter((card) => card.num >= volume.start_chapter && card.num <= volume.end_chapter);
 					return {
@@ -9518,7 +11549,8 @@ var EngineService = class {
 				factions: counts.factions,
 				rules: counts.rules,
 				glossary: counts.glossary,
-				backstory: counts.backstory
+				backstory: counts.backstory,
+				facts: counts.facts
 			}
 		};
 		const qualityScores = scores.slice(-5);
@@ -9609,6 +11641,16 @@ var EngineService = class {
 				to_stage: target
 			};
 		}
+		const draft = snapshot.pipeline.draft;
+		if (draft !== void 0 && (draft.chapter !== snapshot.pipeline.chapter || draft.content_hash !== sha256(text))) return {
+			item: {
+				code: "DRAFT_STALE",
+				scope: "archive",
+				detail: "the manuscript or active chapter no longer matches its draft summary",
+				hint: "call novel_rollback to P3 and submit novel_write_draft again"
+			},
+			to_stage: "P3"
+		};
 		const summary = snapshot.plan?.summary ?? null;
 		const blockers = this.machine(snapshot, text, { summary }).violations.filter((violation) => violation.severity === "blocker");
 		if (blockers.length > 0) return {
@@ -10030,8 +12072,31 @@ var EngineService = class {
 		}));
 	}
 	/** Whether the stored brief still signs the current snapshot. */
+	async readBriefReceipts(store) {
+		const raw = await store.readText(BRIEF_RECEIPTS_FILE);
+		if (raw === null) return {
+			schema_version: 1,
+			receipts: []
+		};
+		try {
+			const parsed = parse(raw);
+			if (parsed === null || !Array.isArray(parsed.receipts)) return {
+				schema_version: 1,
+				receipts: []
+			};
+			return {
+				schema_version: 1,
+				receipts: parsed.receipts.filter((receipt) => typeof receipt === "object" && receipt !== null && Number.isInteger(receipt.chapter) && typeof receipt.stage === "string" && typeof receipt.digest === "string" && typeof receipt.issued_at === "string")
+			};
+		} catch {
+			return {
+				schema_version: 1,
+				receipts: []
+			};
+		}
+	}
 	briefIsCurrent(snapshot, stage) {
-		const record = snapshot.pipeline.briefs[stage];
+		const record = snapshot.briefs[stage];
 		if (record === void 0) return false;
 		const context = this.briefContextFor(stage, snapshot, snapshot.pipeline.chapter);
 		return record.digest === this.briefDigest(stage, snapshot, context);
@@ -10117,6 +12182,8 @@ var EngineService = class {
 			genre: snapshot.project.genre,
 			sceneType: extra.sceneType ?? snapshot.plan?.scene_type ?? "日常过渡章",
 			rulepack: this.rulepack,
+			targets: snapshot.project.targets,
+			facts: snapshot.worldbook.facts ?? [],
 			summary: extra.summary ?? snapshot.plan?.summary ?? null,
 			evidence: {
 				characters: snapshot.characters.characters.length > 0 ? snapshot.characters : null,
@@ -10222,13 +12289,16 @@ var EngineService = class {
 			text,
 			chapter: snapshot.pipeline.chapter,
 			project: snapshot.project,
-			pipeline: snapshot.pipeline,
+			pipeline: {
+				...snapshot.pipeline,
+				briefs: snapshot.briefs
+			},
 			chapters: snapshot.chapters,
 			briefDigest: extras.briefDigest ?? (extras.briefStage === void 0 || extras.briefStage === null ? null : this.briefDigest(extras.briefStage, snapshot, this.briefContextFor(extras.briefStage, snapshot, snapshot.pipeline.chapter))),
 			briefStage: extras.briefStage ?? briefStageFor(operation, snapshot.pipeline.stage),
-			draftTitle: composeTitle(snapshot.pipeline.chapter, extras.draftTitle ?? snapshot.plan?.title ?? null, this.rulepack.format.title.pattern),
-			sceneType: extras.sceneType ?? snapshot.plan?.scene_type ?? null,
-			summary: extras.summary ?? snapshot.plan?.summary ?? null,
+			draftTitle: composeTitle(snapshot.pipeline.chapter, extras.draftTitle ?? snapshot.pipeline.draft?.title ?? snapshot.plan?.title ?? null, this.rulepack.format.title.pattern),
+			sceneType: extras.sceneType ?? snapshot.pipeline.draft?.scene_type ?? snapshot.plan?.scene_type ?? null,
+			summary: extras.summary ?? snapshot.pipeline.draft?.summary ?? snapshot.plan?.summary ?? null,
 			summaryProvided: extras.summaryProvided,
 			review: extras.review ?? snapshot.review,
 			check: extras.check ?? snapshot.check,
@@ -10282,22 +12352,6 @@ var EngineService = class {
 		this.assertChapterParameter(chapter);
 		if (chapter !== snapshot.pipeline.chapter) throw new EngineInputError(ERROR_CODES.STAGE_ORDER, `chapter ${chapter} is not the active chapter (${snapshot.pipeline.chapter})`, "archive the active chapter before starting the next one");
 	}
-	/** True when anything survives in the project directory besides novel.yaml. */
-	async projectStateExists(store) {
-		const stateFiles = [
-			STATE_FILES.pipeline,
-			STATE_FILES.chapters,
-			STATE_FILES.characters,
-			STATE_FILES.world,
-			STATE_FILES.locks,
-			STATE_FILES.timeline,
-			STATE_FILES.foreshadows,
-			STATE_FILES.relationships,
-			STATE_FILES.handoff
-		].map((file) => joinRel(STATE_DIR, file));
-		stateFiles.push(joinRel(STATE_DIR, STATE_FILES.journal), ARCHIVE_DIGESTS);
-		return (await Promise.all(stateFiles.map((path) => store.exists(path)))).some(Boolean) || (await store.list("chapters")).length > 0 || (await store.list("plans")).length > 0 || (await store.list("reviews")).length > 0 || (await store.list("checks")).length > 0 || await store.exists("outline/outline.yaml") || await store.exists("outline/worldbook.yaml");
-	}
 	/** A live writer lock makes a read-only snapshot potentially torn. */
 	async lockIsLive(store) {
 		const text = await store.readText(LOCK_FILE);
@@ -10308,8 +12362,34 @@ var EngineService = class {
 		const info = await store.stat(LOCK_FILE);
 		return info !== null && Date.now() - info.mtimeMs < 1e3;
 	}
-	async load(root, retries = 1, allowLock = false) {
-		const store = this.storeFor(await this.resolveRoot(root));
+	/** Resolve a selection, load it, then persist the explicit choice (best effort). */
+	async load(root) {
+		const selection = await this.resolveRoot(root);
+		const snapshot = await this.loadAt(selection);
+		await this.recordSelectionBestEffort(selection, snapshot);
+		return snapshot;
+	}
+	/** Load exactly one already-resolved selection; never writes a binding. */
+	async movedProjectHint(selection) {
+		if (selection.created_at === void 0 || selection.created_at === "") return void 0;
+		try {
+			return (await this.registry().read()).projects.find((entry) => entry.root !== selection.root && entry.created_at !== void 0 && entry.created_at === selection.created_at)?.root;
+		} catch {
+			return;
+		}
+	}
+	async loadAt(selection, retries = 1, allowLock = false) {
+		const store = this.storeFor(selection.root);
+		if (selection.source === "session") {
+			const inspection = await inspectProject(selection.root);
+			if (inspection.state === "missing") throw missingProjectError({
+				selection,
+				lastTitle: selection.title,
+				movedTo: await this.movedProjectHint(selection)
+			});
+			if (inspection.state === "not-project") throw projectNotFoundError(selection.root);
+			if (inspection.state === "unreadable") throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `the project bound to this session is unreadable: ${inspection.error ?? selection.root}`, "fix the directory permissions, or explicitly rebind with /novel use after the project is readable");
+		}
 		if (!allowLock && await this.lockIsLive(store)) {
 			for (let attempt = 0; attempt < 10; attempt += 1) {
 				await new Promise((resolve) => setTimeout(resolve, 25));
@@ -10318,10 +12398,17 @@ var EngineService = class {
 			if (await this.lockIsLive(store)) throw new EngineFaultError(ERROR_CODES.TXN_IN_PROGRESS, "a writer is changing this project; the read-only snapshot would be torn", "retry after the write finishes; do not interpret this snapshot as stable");
 		}
 		const projectExists = await store.exists(PROJECT_FILE);
-		if (!projectExists && !await this.projectStateExists(store)) throw new EngineInputError(ERROR_CODES.PROJECT_NOT_FOUND, `no novel project at ${store.root}`, "call novel_init to create one, or pass the correct project root");
+		if (!projectExists && !await hasProjectState(store)) {
+			if (selection.source === "session") throw missingProjectError({
+				selection,
+				lastTitle: selection.title
+			});
+			throw projectNotFoundError(store.root);
+		}
 		let project = {
 			...ENGINE_PROJECT_INITIAL,
-			title: "（项目文件不可读）"
+			title: "（项目文件不可读）",
+			created_at: ""
 		};
 		let projectError = projectExists ? null : `${PROJECT_FILE} is missing`;
 		if (projectExists) try {
@@ -10332,8 +12419,28 @@ var EngineService = class {
 			if (error instanceof EngineFaultError && (error.code === ERROR_CODES.SCHEMA_TOO_NEW || error.code === ERROR_CODES.PATH_ESCAPE)) throw error;
 			projectError = errorMessage(error);
 		}
+		if (projectError === null && selection.created_at !== void 0 && selection.created_at !== "") {
+			if (project.created_at === "" || project.created_at !== selection.created_at) throw identityMismatchError({
+				selection,
+				actualCreatedAt: project.created_at,
+				actualTitle: project.title
+			});
+		}
 		const pipeline = await store.readDoc(joinRel(STATE_DIR, STATE_FILES.pipeline), "pipeline");
 		if (pipeline === null) throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, "state/pipeline.yaml is missing");
+		let briefs = pipeline.briefs;
+		const briefsRaw = await store.readText(BRIEF_RECEIPTS_FILE);
+		if (briefsRaw !== null) try {
+			const parsed = parse(briefsRaw);
+			if (parsed !== null && Array.isArray(parsed.receipts)) {
+				const next = {};
+				for (const receipt of parsed.receipts) if (typeof receipt === "object" && receipt !== null && Number.isInteger(receipt.chapter) && typeof receipt.stage === "string" && typeof receipt.digest === "string" && typeof receipt.issued_at === "string") next[receipt.stage] = {
+					digest: receipt.digest,
+					issued_at: receipt.issued_at
+				};
+				briefs = next;
+			}
+		} catch {}
 		const ledgerErrors = [];
 		const ledger = async (path, kind, code, fallback) => {
 			const read = await this.recoverableDoc(store, path, kind);
@@ -10422,6 +12529,10 @@ var EngineService = class {
 			const parsed = parsePlanYaml(planRaw, planChapterFile(chapter));
 			validateStoredChapterPlan(parsed, planChapterFile(chapter));
 			plan = parsed;
+			if (pipeline.draft !== void 0 && pipeline.draft.chapter === chapter) plan = {
+				...plan,
+				summary: pipeline.draft.summary
+			};
 		} catch (error) {
 			if (error instanceof EngineFaultError && error.code === ERROR_CODES.SCHEMA_TOO_NEW) throw error;
 			planError = errorMessage(error);
@@ -10451,19 +12562,20 @@ var EngineService = class {
 		if (check === null && checkError === null && pipeline.stage === "ready_to_archive") checkError = `${checkFile(chapter)} is missing`;
 		const latest = await store.readDoc(joinRel(STATE_DIR, STATE_FILES.pipeline), "pipeline");
 		if (latest === null || latest.revision !== pipeline.revision) {
-			if (retries > 0) return this.load(store.root, retries - 1, allowLock);
+			if (retries > 0) return this.loadAt(selection, retries - 1, allowLock);
 			throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, "the project changed while its snapshot was being read", "retry the read; if it keeps moving, wait for the writer to finish");
 		}
 		if (!allowLock && await this.lockIsLive(store)) {
-			if (retries > 0) return this.load(store.root, retries - 1, false);
+			if (retries > 0) return this.loadAt(selection, retries - 1, false);
 			throw new EngineFaultError(ERROR_CODES.TXN_IN_PROGRESS, "a writer started while the snapshot was being read; the snapshot is torn", "retry after the write finishes; do not interpret this snapshot as stable");
 		}
-		this.lastRoot = store.root;
 		return {
 			root: store.root,
+			selection,
 			project,
 			projectError,
 			pipeline,
+			briefs,
 			chapters,
 			characters,
 			world,
@@ -10524,7 +12636,8 @@ var EngineService = class {
 		}
 	}
 	async mutate(options) {
-		const root = await this.resolveRoot(options.root);
+		const selection = options.selection ?? await this.resolveRoot(options.root);
+		const root = selection.root;
 		const signal = this.signalContext.getStore();
 		const abortIfNeeded = () => {
 			if (signal?.aborted === true) throw new EngineFaultError(ERROR_CODES.TXN_ABORTED, `${options.op} was aborted before commit`, "retry the call if you still want the write");
@@ -10533,9 +12646,24 @@ var EngineService = class {
 		return this.mutex.run(root, async () => {
 			if (options.emptyAllowed === true) ensureDirAt(root);
 			const store = this.storeFor(root);
+			if (options.emptyAllowed !== true && selection.source === "session") {
+				const inspection = await inspectProject(selection.root);
+				if (inspection.state === "missing") throw missingProjectError({
+					selection,
+					lastTitle: selection.title,
+					movedTo: await this.movedProjectHint(selection)
+				});
+				if (inspection.state === "not-project") throw projectNotFoundError(selection.root);
+				if (inspection.state === "unreadable") throw new EngineFaultError(ERROR_CODES.SCHEMA_INVALID, `the project bound to this session is unreadable: ${inspection.error ?? selection.root}`, "fix the directory permissions, or explicitly rebind with /novel use after the project is readable");
+				if (inspection.state === "damaged" && selection.created_at !== void 0 && selection.created_at !== "") throw identityMismatchError({
+					selection,
+					actualTitle: inspection.title
+				});
+			}
 			const journalPath = joinRel(STATE_DIR, STATE_FILES.journal);
 			const journalWasPresent = await store.exists(journalPath);
 			const projectExists = await store.exists(PROJECT_FILE);
+			if (options.emptyAllowed !== true && !projectExists && !await hasProjectState(store)) throw projectNotFoundError(root);
 			if (options.emptyAllowed === true && projectExists) throw new EngineInputError(ERROR_CODES.PROJECT_EXISTS, `a project already exists at ${store.root}`, "use a different directory, or call novel_status to inspect the existing project");
 			if (options.emptyAllowed !== true && projectExists && !await store.exists(joinRel("state", STATE_FILES.journal))) throw new EngineFaultError(ERROR_CODES.JOURNAL_MISSING, "state/journal.jsonl is missing; journal integrity and crash recovery are unavailable", "restore state/journal.jsonl from a backup before writing; a project with novel.yaml must have its audit journal");
 			const lock = new FileLock(join(root, LOCK_FILE), void 0, void 0, async (record) => {
@@ -10565,11 +12693,11 @@ var EngineService = class {
 							STATE_FILES.relationships,
 							STATE_FILES.handoff
 						].map((file) => joinRel(STATE_DIR, file));
-						stateFiles.push(joinRel(STATE_DIR, STATE_FILES.journal), ARCHIVE_DIGESTS);
+						stateFiles.push(joinRel(STATE_DIR, STATE_FILES.journal), ARCHIVE_DIGESTS, BRIEF_RECEIPTS_FILE);
 						const stateCandidates = journalWasPresent ? stateFiles : stateFiles.filter((path) => path !== joinRel(STATE_DIR, STATE_FILES.journal));
 						if ((await Promise.all(stateCandidates.map((file) => store.exists(file)))).some(Boolean) || (await store.list("chapters")).length > 0 || (await store.list("plans")).length > 0 || (await store.list("reviews")).length > 0 || (await store.list("checks")).length > 0 || await store.exists("outline/outline.yaml") || await store.exists("outline/worldbook.yaml")) throw new EngineInputError(ERROR_CODES.PROJECT_EXISTS, "state documents exist but novel.yaml is missing; refusing to overwrite the project", "restore novel.yaml, or initialize a new empty directory");
 						await assertJournalConsistent(store);
-						const created = await options.run(this.emptySnapshot(root), {
+						const created = await options.run(this.emptySnapshot(root, selection), {
 							store,
 							revision: 1
 						});
@@ -10584,7 +12712,6 @@ var EngineService = class {
 							...options.reason === void 0 ? {} : { reason: options.reason }
 						});
 						this.replay.clear();
-						this.lastRoot = root;
 						return {
 							data: created.data,
 							revision: 1,
@@ -10593,7 +12720,11 @@ var EngineService = class {
 					}
 				}
 				await assertJournalConsistent(store, options.repairPaths ?? []);
-				const snapshot = await this.load(root, 1, true);
+				const snapshot = await this.loadAt(selection, 1, true);
+				if (selection.source === "session" && selection.created_at !== void 0 && selection.created_at !== "" && snapshot.projectError !== null) throw identityMismatchError({
+					selection,
+					actualTitle: snapshot.project.title
+				});
 				const key = options.key?.(snapshot);
 				if (key !== void 0) {
 					const cached = this.replay.get(`${root}|${options.op}|${key}`);
@@ -10603,12 +12734,32 @@ var EngineService = class {
 						replayed: true
 					};
 				}
-				const revision = snapshot.pipeline.revision + 1;
+				const revision = options.advanceRevision === false ? snapshot.pipeline.revision : snapshot.pipeline.revision + 1;
 				abortIfNeeded();
-				const outcome = await options.run(snapshot, {
-					store,
-					revision
-				});
+				let outcome;
+				try {
+					outcome = await options.run(snapshot, {
+						store,
+						revision
+					});
+				} catch (error) {
+					await appendJournal(store, {
+						txid: randomUUID(),
+						at: this.now().toISOString(),
+						op: options.op,
+						chapter: options.chapter ?? snapshot.pipeline.chapter,
+						revision: snapshot.pipeline.revision,
+						files: [],
+						status: "aborted",
+						reason: errorMessage(error),
+						attempt: true,
+						stage: snapshot.pipeline.stage,
+						...error instanceof EngineError ? { code: error.code } : {},
+						...error instanceof EngineError && error.hint !== void 0 ? { hint: error.hint } : {},
+						...error instanceof EngineBlockedError ? { blocking: error.blocking } : {}
+					}).catch(() => void 0);
+					throw error;
+				}
 				if (outcome.replay === true) return {
 					data: outcome.data,
 					revision: snapshot.pipeline.revision,
@@ -10619,7 +12770,7 @@ var EngineService = class {
 				await runTransaction(store, {
 					txid: randomUUID(),
 					op: options.op,
-					chapter: snapshot.pipeline.chapter,
+					chapter: options.chapter ?? snapshot.pipeline.chapter,
 					revision,
 					files: outcome.files,
 					backup: outcome.backup ?? false,
@@ -10632,6 +12783,21 @@ var EngineService = class {
 					revision,
 					warnings: outcome.warnings ?? []
 				};
+				let metadataSnapshot = snapshot;
+				if ((options.bindOnSuccess !== false || options.registerOnSuccess !== false) && outcome.files.some((file) => file.path === "novel.yaml")) try {
+					metadataSnapshot = await this.loadAt(selection, 1, true);
+				} catch {}
+				try {
+					await this.recordSelection(selection, metadataSnapshot, {
+						bind: options.bindOnSuccess,
+						register: options.registerOnSuccess
+					});
+				} catch (error) {
+					result.warnings.push({
+						code: "SESSION_BINDING_FAILED",
+						message: `project write committed, but project selection metadata could not be written: ${errorMessage(error)}`
+					});
+				}
 				if (key !== void 0) {
 					this.invalidateReplay(root, options.op);
 					this.replay.set(`${root}|${options.op}|${key}`, result);
@@ -10651,9 +12817,10 @@ var EngineService = class {
 			if (contentChanging || !key.includes("|export|")) this.replay.delete(key);
 		}
 	}
-	emptySnapshot(root) {
+	emptySnapshot(root, selection) {
 		return {
 			root,
+			selection,
 			project: { ...ENGINE_PROJECT_INITIAL },
 			projectError: null,
 			pipeline: emptyPipeline({
@@ -10661,6 +12828,7 @@ var EngineService = class {
 				chapter: 1,
 				stage: "idle"
 			}),
+			briefs: {},
 			chapters: emptyChapters(),
 			characters: emptyCharacters(),
 			world: emptyWorld(),
@@ -10728,6 +12896,38 @@ const STATUS_BRIEF = {
 	done: "P1"
 };
 const yaml = (value) => stringify(value, { lineWidth: 0 });
+/** Apply a patch only to the exact manuscript the caller hashed. */
+function applyRevisionPatch(text, patch) {
+	const actual = sha256(text);
+	if (actual !== patch.expected_hash) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch expected_hash ${patch.expected_hash} does not match the current manuscript ${actual}`, "read the current text and compute its sha256 again; nothing was written");
+	const planned = [];
+	for (const [index, edit] of patch.edits.entries()) {
+		const positions = [];
+		let cursor = 0;
+		while (cursor <= text.length) {
+			const found = text.indexOf(edit.old_text, cursor);
+			if (found === -1) break;
+			positions.push(found);
+			cursor = found + 1;
+		}
+		const expectedOccurrence = edit.occurrence ?? 1;
+		if (edit.occurrence === void 0 && positions.length !== 1) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch.edits[${index}] matches ${positions.length} place(s); a unique old_text is required`, "include more surrounding text, or set occurrence explicitly");
+		if (positions.length < expectedOccurrence) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch.edits[${index}].occurrence ${expectedOccurrence} exceeds ${positions.length} match(es)`);
+		const start = positions[expectedOccurrence - 1];
+		const current = {
+			index,
+			start,
+			end: start + edit.old_text.length,
+			newText: edit.new_text
+		};
+		if (planned.some((other) => current.start < other.end && other.start < current.end)) throw new EngineInputError(ERROR_CODES.SCHEMA_INVALID, `patch.edits[${index}] overlaps another edit; overlapping edits cannot be applied atomically`, "merge overlapping edits into one old_text/new_text pair; nothing was written");
+		planned.push(current);
+	}
+	planned.sort((left, right) => right.start - left.start);
+	let next = text;
+	for (const edit of planned) next = `${next.slice(0, edit.start)}${edit.newText}${next.slice(edit.end)}`;
+	return next;
+}
 const emptyChapters = () => ({
 	schema_version: 1,
 	chapters: []
@@ -10752,6 +12952,7 @@ const pipelineWith = (snapshot, revision, patch) => ({
 	rounds: snapshot.pipeline.rounds,
 	briefs: snapshot.pipeline.briefs,
 	blocking: snapshot.pipeline.blocking,
+	...snapshot.pipeline.draft === void 0 ? {} : { draft: snapshot.pipeline.draft },
 	review_digest: snapshot.pipeline.review_digest,
 	last_action: snapshot.pipeline.last_action,
 	...patch
@@ -10775,7 +12976,7 @@ const action = (op, at, digest) => ({
 	at: at.toISOString(),
 	digest
 });
-const machineWarnings = (machine) => machine.violations.filter((violation) => violation.severity === "advisory").slice(0, 5).map((violation) => ({
+const machineWarnings = (machine, acknowledged = []) => machine.violations.filter((violation) => violation.severity === "advisory" && !acknowledged.includes(violation.code)).slice(0, 5).map((violation) => ({
 	code: violation.code,
 	message: `${violation.detail} (paragraph ${violation.location.paragraph})`
 }));
@@ -10940,7 +13141,10 @@ const amendProblems = (kind, oldDocument, nextDocument, snapshot, path, archived
 				"narrator",
 				"score",
 				"status",
-				"summary"
+				"summary",
+				"rounds",
+				"final_check",
+				"archived_at"
 			]) if (stableJson(before[field]) !== stableJson(after[field])) problems.push(`archived chapter ${String(before.num)} cannot change its ${field}`);
 		}
 		return problems;
@@ -11354,14 +13558,22 @@ const fail = (error) => {
 	}
 	throw error;
 };
-/** Wrap an execute body with cancellation and a machine-code error. */
-const makeGuarded = (engine) => (body) => async (args, exec) => {
+/** Wrap an execute body with caller context, cancellation and a machine-code error. */
+const makeGuarded = (engine, workingDirectory) => (body) => async (args, exec) => {
+	const caller = {};
+	if (typeof exec?.agent?.id === "string" && exec.agent.id !== "") caller.sessionId = exec.agent.id;
+	if (exec?.agent !== void 0 && workingDirectory !== void 0) try {
+		caller.cwd = await workingDirectory.ensure(exec.agent, exec.signal);
+	} catch {}
 	try {
-		return await engine.withSignal(exec?.signal, () => body(args));
+		const invoke = () => engine.withSignal(exec?.signal, () => body(args));
+		const withCaller = engine.withCaller;
+		return await (typeof withCaller === "function" ? withCaller.call(engine, caller, invoke) : invoke());
 	} catch (error) {
 		return fail(error);
 	}
 };
+const percent = (value) => `${Math.round(value * 1e3) / 10}%`;
 const text = (value) => [{
 	type: "text",
 	text: typeof value === "string" ? value : JSON.stringify(value, null, 2)
@@ -11405,14 +13617,22 @@ const stringArray = {
 };
 const root = {
 	type: "string",
-	description: "Project root. When omitted, resolves to the last active project, then the registry active root, then the configured projectRoot; pass it explicitly when several projects exist."
+	description: "Project root. Passing it selects this project for the current session and persists the choice. When omitted: session binding -> unique project in the workspace -> single registered project -> configured projectRoot -> error. Multiple projects require an explicit choice."
+};
+const initRoot = {
+	type: "string",
+	description: "Project root for the new project. Passing it creates the project there. When omitted, only the configured projectRoot is used; novel_init does not follow the session binding, workspace discovery or registry active. The created project is bound to the current session on success."
+};
+const utilityRoot = {
+	type: "string",
+	description: "Project root for the project-backed mode of this tool. Text-only word_count/diff calls ignore it and do not create a session binding; use a project-backed call when you want to select a book."
 };
 /**
-* The twenty-seven tools are thin adapters: narrow parameters, call one service
+* The twenty-eight tools are thin adapters: narrow parameters, call one service
 * operation, render the canonical value. They never read a file.
 */
-function createNovelTools(engine) {
-	const guarded = makeGuarded(engine);
+function createNovelTools(engine, options = {}) {
+	const guarded = makeGuarded(engine, options.workingDirectory);
 	return [
 		defineTool({
 			name: "novel_init",
@@ -11451,7 +13671,7 @@ function createNovelTools(engine) {
 				selling_points: stringArray,
 				ending: { type: "string" },
 				strict_outline: { type: "boolean" },
-				project_root: root
+				project_root: initRoot
 			},
 			output: jsonOutput,
 			execute: guarded(async (args) => engine.initProject({
@@ -11489,10 +13709,12 @@ function createNovelTools(engine) {
 					const where = active === value.chapter ? `第 ${value.chapter} 章` : `当前第 ${active} 章 · 查询第 ${value.chapter} 章字数`;
 					return text([
 						`《${value.project.title}》 ${where} · ${value.stage}`,
+						...value.selection === void 0 ? [] : [`项目根 ${value.selection.root} · 选择来源 ${value.selection.source}`],
 						...value.rounds === void 0 ? [] : [`轮次：评审 ${value.rounds.review} / 修订 ${value.rounds.revise} / 校验 ${value.rounds.check}`],
 						value.blocking.length === 0 ? "门控：全部通过" : `门控：${value.blocking.length} 条阻塞`,
 						...value.blocking.map((item) => `  - ${item.code}: ${item.detail}`),
-						...value.book === void 0 ? [] : [`全书：大纲 ${value.book.outline.total} 张卡（已归档 ${value.book.outline.archived}，覆盖率 ${Math.round(value.book.outline.coverage * 100)}%）· 世界观 ${value.book.worldbook.characters} 角色 / ${value.book.worldbook.locations} 地点 / ${value.book.worldbook.factions} 势力 / ${value.book.worldbook.rules} 规则${value.book.strict ? " · 严格大纲" : ""}`, `当前章卡：${value.book.outline.current === null ? "（无）" : `第${value.book.outline.current.num}章 ${value.book.outline.current.title} · ${value.book.outline.current.scene_type} · ${value.book.outline.current.target_words[0]}-${value.book.outline.current.target_words[1]} 字`}`],
+						...value.metrics === null || value.metrics === void 0 ? [] : [`字数：${value.metrics.total_word_count}（汉字 ${value.metrics.cjk_chars} + 标点 ${value.metrics.punctuation_chars} + 英文词/数字，含标点）`],
+						...value.book === void 0 ? [] : [`全书：大纲 ${value.book.outline.total} 张卡（规划覆盖 ${value.book.outline.planned_coverage === null || value.book.outline.planned_coverage === void 0 ? "—" : percent(value.book.outline.planned_coverage)} · 归档覆盖 ${value.book.outline.archived_coverage === null || value.book.outline.archived_coverage === void 0 ? "—" : percent(value.book.outline.archived_coverage)}${(value.book.outline.missing_cards ?? 0) > 0 ? ` · 缺卡 ${value.book.outline.missing_cards}` : ""}）· 世界观 ${value.book.worldbook.characters} 角色 / ${value.book.worldbook.locations} 地点 / ${value.book.worldbook.factions} 势力 / ${value.book.worldbook.rules} 规则${value.book.strict ? " · 严格大纲" : ""}`, `当前章卡：${value.book.outline.current === null ? "（无）" : `第${value.book.outline.current.num}章 ${value.book.outline.current.title} · ${value.book.outline.current.scene_type} · ${value.book.outline.current.target_words[0]}-${value.book.outline.current.target_words[1]} 字`}`],
 						`下一步：${value.next.tool} — ${value.next.reason}`
 					].join("\n"));
 				}
@@ -11701,7 +13923,11 @@ function createNovelTools(engine) {
 				},
 				content: {
 					type: "string",
-					required: true
+					description: "Full revised text; mutually exclusive with patch."
+				},
+				patch: {
+					type: "json",
+					description: "Patch mode: {expected_hash, edits:[{old_text,new_text,occurrence?}]}; edits must be unique unless occurrence is set."
 				},
 				summary: { type: "json" },
 				issues: {
@@ -11718,7 +13944,8 @@ function createNovelTools(engine) {
 			output: jsonOutput,
 			execute: guarded(async (args) => engine.submitRevision({
 				chapter: args.chapter,
-				content: args.content,
+				...args.content === void 0 ? {} : { content: args.content },
+				...args.patch === void 0 ? {} : { patch: asJson(args.patch, "patch") },
 				summary: asJson(args.summary, "summary"),
 				issues: asJson(args.issues, "issues"),
 				proof: asJson(args.proof, "proof"),
@@ -11739,6 +13966,11 @@ function createNovelTools(engine) {
 					required: true,
 					description: "Exactly the five P6 semantic items, each with a verbatim evidence quote."
 				},
+				acknowledge: {
+					type: "array",
+					items: { type: "string" },
+					description: "Advisory codes read and accepted; blockers cannot be acknowledged."
+				},
 				project_root: root
 			},
 			output: jsonOutput,
@@ -11746,12 +13978,13 @@ function createNovelTools(engine) {
 				chapter: args.chapter,
 				scope: args.scope,
 				semantic: asJson(args.semantic, "semantic"),
+				...args.acknowledge === void 0 ? {} : { acknowledge: args.acknowledge },
 				root: args.project_root
 			}))
 		}),
 		defineTool({
 			name: "novel_archive",
-			description: "Archive the active chapter: all gates run, then one transaction writes the index, five ledgers and handoff.",
+			description: "Archive the active chapter: all gates run, then one transaction writes the index, eight ledgers and handoff.",
 			parameters: {
 				chapter: {
 					type: "integer",
@@ -11788,7 +14021,7 @@ function createNovelTools(engine) {
 			parameters: {
 				text: { type: "string" },
 				chapter: { type: "integer" },
-				project_root: root
+				project_root: utilityRoot
 			},
 			output: jsonOutput,
 			execute: guarded(async (args) => engine.countWords({
@@ -11799,7 +14032,7 @@ function createNovelTools(engine) {
 		}),
 		defineTool({
 			name: "novel_state",
-			description: "Read a state document (ledgers, plans, review, check, outline, worldbook) without touching the manuscript.",
+			description: "Read a state document (ledgers, plans, review, check, outline, worldbook), list brief receipts, revision history or backup manifests without touching the manuscript.",
 			parameters: {
 				kind: {
 					type: "string",
@@ -11820,10 +14053,14 @@ function createNovelTools(engine) {
 						"planWorld",
 						"planChapter",
 						"outline",
-						"worldbook"
+						"worldbook",
+						"history",
+						"backups",
+						"briefs"
 					]
 				},
 				chapter: { type: "integer" },
+				revision: { type: "integer" },
 				include_summary: {
 					type: "boolean",
 					description: "For kind=chapters: include the full ten-field summary (default compact)."
@@ -11839,6 +14076,7 @@ function createNovelTools(engine) {
 			execute: guarded(async (args) => engine.queryState({
 				kind: args.kind,
 				chapter: args.chapter,
+				...args.revision === void 0 ? {} : { revision: args.revision },
 				...args.include_summary === void 0 ? {} : { include_summary: args.include_summary },
 				...args.chapter_range === void 0 ? {} : { chapter_range: args.chapter_range },
 				root: args.project_root
@@ -11921,7 +14159,7 @@ function createNovelTools(engine) {
 				chapter: { type: "integer" },
 				before: { type: "string" },
 				after: { type: "string" },
-				project_root: root
+				project_root: utilityRoot
 			},
 			output: jsonOutput,
 			execute: guarded(async (args) => engine.diff({
@@ -11959,14 +14197,29 @@ function createNovelTools(engine) {
 		}),
 		defineTool({
 			name: "novel_audit",
-			description: "Read the append-only journal as an audit trail of every committed and aborted transaction.",
+			description: "Read the append-only journal, including refused gate attempts, with chapter/op/status/time filters and a revision cursor.",
 			parameters: {
 				limit: { type: "integer" },
+				cursor: { type: "integer" },
+				chapter: { type: "integer" },
+				op: { type: "string" },
+				status: {
+					type: "string",
+					enum: ["committed", "aborted"]
+				},
+				since: { type: "string" },
+				until: { type: "string" },
 				project_root: root
 			},
 			output: jsonOutput,
 			execute: guarded(async (args) => engine.auditHistory({
 				limit: args.limit,
+				cursor: args.cursor,
+				chapter: args.chapter,
+				op: args.op,
+				status: args.status,
+				since: args.since,
+				until: args.until,
 				root: args.project_root
 			}))
 		}),
@@ -12083,6 +14336,10 @@ function createNovelTools(engine) {
 				characters: { type: "json" },
 				glossary: { type: "json" },
 				backstory: { type: "json" },
+				facts: {
+					type: "json",
+					description: "Declared numeric canon: [{alias,value,unit,tolerance?,note?}]."
+				},
 				themes: stringArray,
 				project_root: root
 			},
@@ -12096,6 +14353,7 @@ function createNovelTools(engine) {
 				characters: asJson(args.characters, "characters"),
 				glossary: asJson(args.glossary, "glossary"),
 				backstory: asJson(args.backstory, "backstory"),
+				...args.facts === void 0 ? {} : { facts: asJson(args.facts, "facts") },
 				themes: args.themes,
 				root: args.project_root
 			}))
@@ -12171,6 +14429,30 @@ function createNovelTools(engine) {
 				reason: args.reason,
 				root: args.project_root
 			}))
+		}),
+		defineTool({
+			name: "novel_restore",
+			description: "Restore an active chapter file from a marked backup transaction. Archived chapters are refused; use novel_reopen first. Every restore is itself journaled and backed up.",
+			parameters: {
+				txid: {
+					type: "string",
+					required: true
+				},
+				chapter: { type: "integer" },
+				paths: {
+					type: "array",
+					items: { type: "string" },
+					description: "Project-relative chapter files; omitted restores every restorable chapter file that the backup manifest records."
+				},
+				project_root: root
+			},
+			output: jsonOutput,
+			execute: guarded(async (args) => engine.restoreBackup({
+				txid: args.txid,
+				chapter: args.chapter,
+				...args.paths === void 0 ? {} : { paths: args.paths },
+				root: args.project_root
+			}))
 		})
 	];
 }
@@ -12214,7 +14496,7 @@ const rootArg = (args) => {
 	return args.root;
 };
 /**
-* The seventeen tools hidden when `tools.mode=core`, plus the explicit
+* The eighteen tools hidden when `tools.mode=core`, plus the explicit
 * registry/settings-pack operations that are command-only by design (§6.8).
 * They stay reachable through `/novel admin <operation> <json>`; the caller
 * supplies the same arguments the tool schema would have accepted.
@@ -12242,9 +14524,23 @@ const OPERATIONS$1 = {
 	novel_report: (engine, args) => engine.report(args),
 	novel_guide: (engine, args) => engine.guide(args),
 	novel_reopen: (engine, args) => engine.reopenChapter(args),
+	novel_restore: (engine, args) => engine.restoreBackup(args),
 	novel_registry_list: (engine) => engine.listProjects(),
-	novel_registry_register: (engine, args) => engine.registerProject({ root: rootArg(args) }),
-	novel_registry_activate: (engine, args) => engine.setActiveProject({ root: rootArg(args) }),
+	novel_registry_register: async (engine, args) => {
+		const result = await engine.registerProject({ root: rootArg(args) });
+		return {
+			...result,
+			...result.replaced ? { message: "原路径已换成另一本书；登记行已更新。已有会话绑定仍会按 created_at 拒绝，请重新 /novel use。" } : {}
+		};
+	},
+	novel_registry_activate: async (engine, args) => {
+		const result = await engine.setActiveProject({ root: rootArg(args) });
+		return {
+			...result,
+			message: "active 只影响面板默认；当前会话没有切换。写作请用 /novel use 或显式 project_root。",
+			...result.replaced ? { replacement: "原路径已换成另一本书；登记行已更新，旧会话绑定仍需重新 /novel use。" } : {}
+		};
+	},
 	novel_registry_forget: (engine, args) => engine.forgetProject({ root: rootArg(args) }),
 	novel_import: (engine, args) => engine.importPack(args)
 };
@@ -12305,16 +14601,18 @@ const bad = (text) => ({
 	text
 });
 const failure = (error) => error instanceof EngineError ? bad(`[${error.code}] ${error.message}${error.hint === void 0 ? "" : ` — ${error.hint}`}`) : bad(String(error));
+const formatPercent = (value) => value === null || value === void 0 ? "—" : `${Math.round(value * 1e3) / 10}%`;
 const statusText = async (engine) => {
 	const { data } = await engine.getStatus({});
 	return [
 		`《${data.project.title}》 ${data.project.genre} · ${data.project.platform}`,
 		`第 ${data.chapter} 章 · 阶段 ${data.stage}`,
+		...data.selection === void 0 ? [] : [`项目根 ${data.selection.root} · 选择来源 ${data.selection.source}`],
 		`轮次 评审 ${data.rounds.review} / 修订 ${data.rounds.revise} / 校验 ${data.rounds.check}`,
-		data.metrics === null ? "字数 —" : `字数 ${data.metrics.total_word_count}`,
+		data.metrics === null ? "字数 —" : `字数 ${data.metrics.total_word_count}（汉字 ${data.metrics.cjk_chars} + 标点 ${data.metrics.punctuation_chars}，含标点）`,
 		data.blocking.length === 0 ? "门控 全部通过" : `门控 ${data.blocking.length} 条阻塞：`,
 		...data.blocking.map((item) => `  - ${item.code}: ${item.detail}`),
-		...data.book === void 0 ? [] : [`全书：大纲 ${data.book.outline.total} 张卡（已归档 ${data.book.outline.archived}，覆盖率 ${Math.round(data.book.outline.coverage * 100)}%）· 世界观 ${data.book.worldbook.characters} 角色 / ${data.book.worldbook.locations} 地点 / ${data.book.worldbook.factions} 势力 / ${data.book.worldbook.rules} 规则${data.book.strict ? " · 严格大纲" : ""}`, ...data.book.outline.current === null ? ["当前章卡：（无）"] : [`当前章卡：第${data.book.outline.current.num}章 ${data.book.outline.current.title} · ${data.book.outline.current.scene_type} · ${data.book.outline.current.target_words[0]}-${data.book.outline.current.target_words[1]} 字`]],
+		...data.book === void 0 ? [] : [`全书：大纲 ${data.book.outline.total} 张卡（规划覆盖 ${formatPercent(data.book.outline.planned_coverage)} · 归档覆盖 ${formatPercent(data.book.outline.archived_coverage)}${data.book.outline.missing_cards > 0 ? ` · 缺卡 ${data.book.outline.missing_cards}` : ""}）· 世界观 ${data.book.worldbook.characters} 角色 / ${data.book.worldbook.locations} 地点 / ${data.book.worldbook.factions} 势力 / ${data.book.worldbook.rules} 规则${data.book.strict ? " · 严格大纲" : ""}`, ...data.book.outline.current === null ? ["当前章卡：（无）"] : [`当前章卡：第${data.book.outline.current.num}章 ${data.book.outline.current.title} · ${data.book.outline.current.scene_type} · ${data.book.outline.current.target_words[0]}-${data.book.outline.current.target_words[1]} 字`]],
 		`下一步 ${data.next.tool}：${data.next.reason}`
 	].join("\n");
 };
@@ -12328,6 +14626,12 @@ const usage = () => [
 	"/novel doctor        项目体检",
 	"/novel search <词>   搜索正文/大纲/世界观/台账",
 	"/novel export md|txt|epub|outline|worldbook|proposal",
+	"/novel projects      列出项目与目录状态",
+	"/novel current       当前会话绑定与选择来源",
+	"/novel use <path|title|.>  切换当前会话项目",
+	"/novel unbind        清除当前会话绑定（不删项目）",
+	"/novel scan [--register]   扫描工作区候选",
+	"/novel resume        输出可粘贴的续写指令",
 	"/novel admin         隐藏操作与参数说明",
 	"/novel admin <op> <json>  执行隐藏操作",
 	"/novel-next          等价于 /novel next",
@@ -12335,9 +14639,10 @@ const usage = () => [
 	"/novel-export <kind>",
 	"/novel-admin [<op> <json>]"
 ].join("\n");
-/** The five slash commands; every one calls a service operation, none touches a file. */
-function createCommands(engine) {
-	const dispatch = async (raw, signal) => {
+/** Every command calls a service operation; none touches a file directly. */
+function createCommands(engine, host = {}) {
+	const dispatch = async (invocation) => {
+		const { rawInput: raw, signal } = invocation;
 		if (signal.aborted) return bad("已取消");
 		const [head = "", ...rest] = raw.trim().split(/\s+/).filter((part) => part !== "");
 		try {
@@ -12351,7 +14656,7 @@ function createCommands(engine) {
 				}
 				case "stats": {
 					const stats = await engine.stats({});
-					return ok(`章节 ${stats.chapters} 章 · 总字数 ${stats.totalWords} · 平均分 ${stats.averageScore} · 未回收伏笔 ${stats.openForeshadows} · 大纲 ${stats.plannedChapters} 卡（覆盖 ${Math.round(stats.outlineCoverage * 100)}%）· 蓝图 ${stats.blueprintReady ? "就绪" : "未就绪"} · 严格 ${stats.strictOutline ? "开" : "关"} · 目标 ${stats.targetChapters ?? "未设"} 章 · 世界观 ${stats.worldbookEntries} 条 · revision ${stats.revision} · 规则包 ${stats.rulepack}`);
+					return ok(`章节 ${stats.chapters} 章 · 总字数 ${stats.totalWords} · 平均分 ${stats.averageScore} · 未回收伏笔 ${stats.openForeshadows} · 大纲 ${stats.totalCards} 卡（规划覆盖 ${formatPercent(stats.outlineCoverage)} · 归档覆盖 ${formatPercent(stats.archivedCoverage)}${stats.missingCards > 0 ? ` · 缺卡 ${stats.missingCards}` : ""}）· 蓝图 ${stats.blueprintReady ? "就绪" : "未就绪"} · 严格 ${stats.strictOutline ? "开" : "关"} · 目标 ${stats.targetChapters ?? "未设"} 章 · 世界观 ${stats.worldbookEntries} 条 · revision ${stats.revision} · 规则包 ${stats.rulepack}`);
 				}
 				case "outline": {
 					const status = await engine.getStatus({});
@@ -12365,7 +14670,7 @@ function createCommands(engine) {
 					if (book === void 0) return ok("这本书还没有书级规划数据。");
 					return ok([
 						`蓝图：${book.premise === "" ? "（空）" : book.premise}`,
-						`大纲：${book.outline.total} 张卡 · 已归档 ${book.outline.archived} · 覆盖率 ${Math.round(book.outline.coverage * 100)}% · 严格模式 ${book.strict ? "开" : "关"}`,
+						`大纲：${book.outline.total} 张卡 · 规划覆盖 ${formatPercent(book.outline.planned_coverage)} · 归档覆盖 ${formatPercent(book.outline.archived_coverage)}${book.outline.missing_cards > 0 ? ` · 缺卡 ${book.outline.missing_cards}` : ""} · 严格模式 ${book.strict ? "开" : "关"}`,
 						`当前章卡：${book.outline.current === null ? "（无）" : `第${book.outline.current.num}章 ${book.outline.current.title} / ${book.outline.current.scene_type}`}`,
 						`世界观：${book.worldbook.characters} 角色 · ${book.worldbook.locations} 地点 · ${book.worldbook.factions} 势力 · ${book.worldbook.rules} 规则`
 					].join("\n"));
@@ -12411,6 +14716,78 @@ function createCommands(engine) {
 					const { data } = await engine.export({ kind });
 					return ok(`已导出 ${data.kind}：${data.files.join(", ")}`);
 				}
+				case "projects": {
+					const list = await engine.listProjects();
+					let current;
+					try {
+						const selection = await engine.currentProject();
+						current = selection.bound ? selection.selection?.root : void 0;
+					} catch {}
+					const lines = [
+						`项目 ${list.projects.length} 个${list.active === null ? "" : ` · 面板默认 ${list.active}`}`,
+						...list.projects.map((project) => {
+							const marks = [
+								...project.root === current ? ["*"] : [],
+								...project.root === list.active ? ["P"] : [],
+								...project.state === "ok" ? [] : ["!"]
+							].join("");
+							const state = project.state === "ok" ? "" : ` [${project.state}]`;
+							return `${marks === "" ? "  " : marks} 《${project.title}》 — ${project.root}${state}`;
+						}),
+						"* 当前会话 · P 面板默认 · ! 目录缺失/待修复"
+					];
+					return ok(lines.join("\n"));
+				}
+				case "current": {
+					const current = await engine.currentProject();
+					if (current.selection === null) return ok(`当前会话未绑定；也没有可唯一推导的项目。${current.error === void 0 ? "" : `\n${current.error}`}\n运行 /novel use <path|title|.> 选择项目。`);
+					return ok(current.bound ? [
+						`当前会话绑定《${current.selection.title ?? ""}》${current.state === void 0 || current.state === "ok" ? "" : ` [${current.state}]`}`,
+						`项目根 ${current.selection.root}`,
+						...current.state === "missing" ? ["项目目录不在了；绑定保留，恢复目录后可继续，或 /novel unbind 后重选。"] : current.state === "not-project" ? ["目录存在，但没有 novel.yaml 或项目状态；请恢复项目定义或重新选择。"] : current.state === "damaged" ? ["项目定义不可读；先用显式 project_root 的 novel_amend 修复。"] : current.state === "unreadable" ? ["项目目录不可读；修复权限或 IO 错误后再试。"] : []
+					].join("\n") : `当前会话未绑定；将按 ${current.selection.source} 推导到 ${current.selection.root}\n要固定选择，运行 /novel use ${current.selection.root}`);
+				}
+				case "use": {
+					const target = raw.trim().slice(3).trim();
+					if (target === "") return bad("用法：/novel use <path|title|.>");
+					const result = await engine.useProject({ target });
+					return ok(`当前会话已切换到《${result.title}》\n项目根 ${result.selection.root}\n面板 active 未改变；后续工具调用会默认使用这本书。`);
+				}
+				case "unbind": {
+					const result = await engine.unbindProject();
+					return ok(result.cleared ? "已清除当前会话绑定；项目和注册表未改动。" : "当前会话没有绑定；项目和注册表未改动。");
+				}
+				case "scan": {
+					const flags = rest.filter((part) => part.startsWith("--"));
+					const positional = rest.filter((part) => !part.startsWith("--"));
+					if (flags.filter((flag) => flag !== "--register").length > 0 || positional.length > 0) return bad("用法：/novel scan [--register]；scan 不接受路径参数");
+					const cwd = invocation.cwd;
+					if (cwd === void 0 || cwd === "") return bad("请在项目工作区中执行 /novel scan");
+					const register = flags.includes("--register");
+					const result = await engine.scanProjects({
+						cwd,
+						register
+					});
+					const lines = [`扫描到 ${result.candidates.length} 个候选；${result.candidates.filter((row) => row.registered).length} 个已登记${result.truncated ? "（只显示前 50 个，请缩小工作区）" : ""}`, ...result.candidates.map((candidate) => {
+						const state = candidate.state === "ok" ? "" : ` [${candidate.state}]`;
+						const registered = candidate.registered ? " 已登记" : "";
+						const identity = candidate.identity_changed === true ? " ! identity_changed" : "";
+						return `- 《${candidate.title}》 — ${candidate.root}${state}${registered}${identity}`;
+					})];
+					if (result.candidates.length === 0) lines.push("未发现项目；检查当前目录，或用 novel_init 创建第一本书。");
+					if (register) {
+						lines.push(`登记结果：新增 ${result.added.length} · 已存在 ${result.already.length} · 跳过 ${result.skipped.length}`);
+						if (result.identity_changed.length > 0) lines.push(`identity_changed：${result.identity_changed.join(", ")}；这些行没有被覆盖，请用显式 register/activate 确认替换。`);
+						for (const skipped of result.skipped) lines.push(`跳过 ${skipped.root}：${skipped.reason}`);
+						lines.push("登记不等于选择，写作请用 /novel use 或 project_root。");
+					}
+					return ok(lines.join("\n"));
+				}
+				case "resume": {
+					const { data } = await engine.resumePrompt({});
+					if (data.text === null) return bad("当前项目没有可续写的下一步；先用 /novel status 查看项目状态。");
+					return ok(data.text);
+				}
 				case "admin": {
 					if (rest.length === 0) return ok(adminHelp());
 					const text = raw.trim();
@@ -12427,12 +14804,27 @@ function createCommands(engine) {
 			return failure(error);
 		}
 	};
+	const withInvocation = async (invocation, task) => {
+		const caller = {};
+		if (typeof invocation.agent?.id === "string" && invocation.agent.id !== "") caller.sessionId = invocation.agent.id;
+		if (invocation.cwd !== void 0 && invocation.cwd !== "") caller.cwd = invocation.cwd;
+		else if (invocation.agent !== void 0 && host.workingDirectory !== void 0) try {
+			caller.cwd = await host.workingDirectory.ensure(invocation.agent, invocation.signal);
+		} catch {}
+		const enriched = {
+			...invocation,
+			...caller.cwd === void 0 ? {} : { cwd: caller.cwd }
+		};
+		const run = () => task(enriched);
+		const withCaller = engine.withCaller;
+		return typeof withCaller === "function" ? withCaller.call(engine, caller, run) : run();
+	};
 	return [
 		{
 			name: "novel",
 			description: "Novel engine: status, next step, stats, export and admin help.",
-			input: { hint: "[status|next|stats|export <kind>|admin]" },
-			handler: (invocation) => dispatch(invocation.rawInput, invocation.signal)
+			input: { hint: "[status|next|stats|projects|current|use|unbind|scan|resume|export <kind>|admin]" },
+			handler: (invocation) => dispatch(invocation)
 		},
 		{
 			name: "novel-next",
@@ -12454,7 +14846,7 @@ function createCommands(engine) {
 				if (invocation.signal.aborted) return bad("已取消");
 				try {
 					const stats = await engine.stats({});
-					return ok(`章节 ${stats.chapters} 章 · 总字数 ${stats.totalWords} · 平均分 ${stats.averageScore} · 未回收伏笔 ${stats.openForeshadows} · 大纲 ${stats.plannedChapters} 卡（覆盖 ${Math.round(stats.outlineCoverage * 100)}%）· 蓝图 ${stats.blueprintReady ? "就绪" : "未就绪"} · 严格 ${stats.strictOutline ? "开" : "关"} · 目标 ${stats.targetChapters ?? "未设"} 章 · 世界观 ${stats.worldbookEntries} 条 · revision ${stats.revision} · 规则包 ${stats.rulepack}`);
+					return ok(`章节 ${stats.chapters} 章 · 总字数 ${stats.totalWords} · 平均分 ${stats.averageScore} · 未回收伏笔 ${stats.openForeshadows} · 大纲 ${stats.totalCards} 卡（规划覆盖 ${formatPercent(stats.outlineCoverage)} · 归档覆盖 ${formatPercent(stats.archivedCoverage)}${stats.missingCards > 0 ? ` · 缺卡 ${stats.missingCards}` : ""}）· 蓝图 ${stats.blueprintReady ? "就绪" : "未就绪"} · 严格 ${stats.strictOutline ? "开" : "关"} · 目标 ${stats.targetChapters ?? "未设"} 章 · 世界观 ${stats.worldbookEntries} 条 · revision ${stats.revision} · 规则包 ${stats.rulepack}`);
 				} catch (error) {
 					return failure(error);
 				}
@@ -12501,7 +14893,10 @@ function createCommands(engine) {
 				}
 			}
 		}
-	];
+	].map((command) => ({
+		...command,
+		handler: (invocation) => withInvocation(invocation, command.handler)
+	}));
 }
 // src/skills/index.ts
 /** Read once at module load; `apply()` itself performs no IO. */
@@ -12517,13 +14912,22 @@ function createSkill() {
 	};
 }
 // src/remote/index.ts
-/** Build the payload from one synchronized snapshot of the project. */
-async function panelPayload(engine) {
+/** Build the payload for one optional panel query root. */
+async function panelPayload(engine, root) {
 	return {
-		schemaVersion: 2,
-		...await engine.panelBundle()
+		...await engine.panelBundle(root === void 0 ? {} : { root }),
+		schemaVersion: 4
 	};
 }
+const queryRoot = (url) => {
+	if (url === void 0 || url === "") return void 0;
+	try {
+		const value = new URL(url, "http://panel.local").searchParams.get("root");
+		return value === null || value.trim() === "" ? void 0 : value;
+	} catch {
+		return;
+	}
+};
 const denyAll = () => 503;
 const rejectionText = {
 	401: "unauthorized",
@@ -12550,7 +14954,7 @@ function panelHandler(engine, guard = denyAll) {
 			return;
 		}
 		try {
-			const payload = await panelPayload(engine);
+			const payload = await panelPayload(engine, queryRoot(request.url));
 			const body = method === "HEAD" ? "" : JSON.stringify(payload);
 			response.statusCode = 200;
 			response.setHeader("content-type", "application/json; charset=utf-8");
@@ -12562,7 +14966,12 @@ function panelHandler(engine, guard = denyAll) {
 				response.setHeader("content-type", "application/json; charset=utf-8");
 				response.setHeader("cache-control", "no-store");
 				response.end(JSON.stringify({
-					schemaVersion: 2,
+					schemaVersion: 4,
+					projects: [],
+					selection: {
+						root: null,
+						source: "none"
+					},
 					error: "还没有项目：调用 novel_init 创建。",
 					empty: true
 				}));
@@ -12572,7 +14981,12 @@ function panelHandler(engine, guard = denyAll) {
 			response.setHeader("content-type", "application/json; charset=utf-8");
 			response.setHeader("cache-control", "no-store");
 			response.end(JSON.stringify({
-				schemaVersion: 2,
+				schemaVersion: 4,
+				projects: [],
+				selection: {
+					root: null,
+					source: "none"
+				},
 				error: error instanceof Error ? error.message : String(error)
 			}));
 		}
@@ -13053,13 +15467,15 @@ function apply(ctx, config) {
 	const engine = new EngineService(engineConfig, () => loadRulepack(), { onEvent: emit });
 	ctx.effect(() => () => engine.dispose(), `${name}: engine dispose`);
 	ctx.provide?.("novelEngine", engine);
-	for (const tool of createNovelTools(engine)) {
+	const serviceOf = ctx.get;
+	const workingDirectory = typeof serviceOf === "function" ? serviceOf.call(ctx, "workingDirectory") : void 0;
+	for (const tool of createNovelTools(engine, { workingDirectory })) {
 		if (toolsMode === "core" && !CORE_TOOLS.includes(tool.name)) continue;
 		ctx.tools.register(tool);
 	}
 	const optional = ctx;
 	optional.inject(["commands"], (commandsCtx) => {
-		for (const command of createCommands(engine)) commandsCtx.effect(() => commandsCtx.commands.register(command), `${name}: command ${command.name}`);
+		for (const command of createCommands(engine, { workingDirectory })) commandsCtx.effect(() => commandsCtx.commands.register(command), `${name}: command ${command.name}`);
 	});
 	optional.inject(["skills"], (skillsCtx) => {
 		skillsCtx.effect(() => skillsCtx.skills.register(createSkill()), `${name}: entry skill`);
@@ -13093,4 +15509,4 @@ function connectionFence(scope) {
 	}
 	if (Object.prototype.hasOwnProperty.call(candidate, "connection")) return candidate.connection;
 }
-export { BriefLibrary, Config, ERROR_CODES, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, OPERATIONS, PLATFORMS, SCENE_TYPES, SCHEMA_VERSION, applicableGates, apply, blockedError, briefStageFor, chapterHeading, evaluateGates, faultError, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, projectChapter, projectChapters, projectGates, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, renderProposal, verifyReference };
+export { ARCHIVE_DIGESTS_FILE, BACKUP_DIR, BRIEF_RECEIPTS_FILE, BriefLibrary, CHAPTERS_DIR, CHECK_DIR, CORE_TOOLS, Config, DEFAULT_GENRE, DEFAULT_PLATFORM, ERROR_CODES, EXPORT_DIR, EngineBlockedError, EngineError, EngineFaultError, EngineInputError, EngineService, GENRES, HISTORY_DIR, HISTORY_KINDS, INITIAL_STAGE, LIMITS, LOCK_FILE, METADATA_LOCK_FILE, OPERATIONS, OUTLINE_DIR, OUTLINE_FILE, PANEL_CHAPTER_LIMIT, PANEL_ID, PANEL_ROUTE, PHASE_STRIP, PLAN_DIR, PLATFORMS, PLUGIN_NAME, PROJECT_FILE, REGISTRY_FILE, REMOTE_VERSION, REVIEW_DIR, SCENE_TYPES, SCENE_TYPE_DEFAULT, SCHEMA_VERSION, SESSION_BINDINGS_FILE, SKILL_NAME, STAGING_DIR, STATE_DIR, STATE_FILES, TOOL_NAMES, WORLDBOOK_FILE, applicableGates, apply, blockedError, briefStageFor, chapterFile, chapterHeading, chapterHistoryFile, checkFile, checkHistoryFile, deprecatedChapterFile, deprecatedHistoryFile, evaluateGates, faultError, formatResumePrompt, gateName, inject, inputError, loadRulepack, name, parseParagraphLocation, phaseStrip, planChapterFile, planHistoryFile, planWorldFile, projectChapter, projectChapters, projectGates, projectSummary, renderBlurb, renderCover, renderEpubChapter, renderMarkdown, renderPlainText, renderProposal, reviewFile, reviewHistoryFile, verifyReference };