dsh-plugin-lookatstudy 0.22.0 → 0.22.2

package/lib/index.mjs

@@ -1,10 +1,10 @@
-import { n as inflateZlib } from "./inflate-DIKUrTRi.mjs";
-import { t as extractArticle } from "./html-article-Da8ksU0i.mjs";
-import { existsSync, mkdirSync, readFileSync, renameSync, writeFileSync } from "node:fs";
+import { n as inflateZlib } from "./inflate-C-hhR5be.mjs";
+import { t as extractArticle } from "./html-article-k4tDTqDh.mjs";
+import { closeSync, copyFileSync, existsSync, fsyncSync, mkdirSync, openSync, readFileSync, renameSync, statSync, writeFileSync } from "node:fs";
 import { basename, dirname, join, relative, sep } from "node:path";
 import z from "@deepseek-ai/schemastery";
-import { fileURLToPath } from "node:url";
 import { createHash, randomBytes } from "node:crypto";
+import { fileURLToPath } from "node:url";
 import https from "node:https";
 import { homedir } from "node:os";
 import { readFile, readdir } from "node:fs/promises";
@@ -82,7 +82,6 @@ const ZH = {
 	"quiz.right": "答对了",
 	"quiz.wrong": "答错了",
 	"quiz.youChose": "你选了",
-	"quiz.answer": "正确答案",
 	"quiz.hook": "练习卡完成：{correct}/{total} 正确。请简短点评，针对错题讲讲思路。",
 	"quiz.action.explain-wrong": "讲讲错题",
 	"quiz.action.retry": "再来一组",
@@ -118,8 +117,6 @@ const ZH = {
 	"review.nudge.go": "去复习",
 	"rail.search.jump": "打开这一课",
 	"proposal.banner": "《{lesson}》可以提前毕业了",
-	"proposal.accept": "接受",
-	"proposal.decline": "再练练",
 	"proposal.accept.msg": "我接受《{lesson}》的掌握度提议，帮我标记为掌握。",
 	"proposal.decline.msg": "《{lesson}》我先再练练，暂不接受提前毕业。",
 	"tutor.thinking": "导师思考中…",
@@ -400,7 +397,7 @@ const ZH = {
 	"exam.leave.message": "考试进行中——现在离开,未答的题将按错计分。",
 	"exam.leave.confirm": "离开并结算",
 	"exam.leave.cancel": "继续答题",
-	"prompt.exam.bank": "请为「{section}」的章节测验出题:先用 study_view 读一遍本节课时,再按各课时的知识点用 study_exam_bank_apply 一次性提交整份题库(单选 5-15 题,kcTitle 必须用本节的概念标题,每题附一句话解析)。题库就绪后告诉我可以开考。",
+	"prompt.exam.bank": "请为「{section}」的章节测验出题:先用 study_lesson 读一遍本节课时,再按各课时的知识点用 study_exam_bank_apply 一次性提交整份题库(单选 5-15 题,kcTitle 必须用本节的概念标题,每题附一句话解析)。题库就绪后告诉我可以开考。",
 	"prompt.review": "开始今天的复习,从最到期的课时开始",
 	"prompt.proposal.accept": "接受提案 {id} —— 确认标记这课为已掌握",
 	"prompt.proposal.decline": "拒绝提案 {id} —— 我想再练练"
@@ -445,7 +442,6 @@ const EN = {
 	"quiz.right": "Correct",
 	"quiz.wrong": "Wrong",
 	"quiz.youChose": "You chose",
-	"quiz.answer": "Answer",
 	"quiz.hook": "Practice card finished: {correct}/{total} correct. Please comment briefly and walk through the wrong ones.",
 	"quiz.action.explain-wrong": "Explain my wrong answers",
 	"quiz.action.retry": "Another set",
@@ -481,8 +477,6 @@ const EN = {
 	"review.nudge.go": "Review now",
 	"rail.search.jump": "Open this lesson",
 	"proposal.banner": "{lesson} is ready to graduate early",
-	"proposal.accept": "Accept",
-	"proposal.decline": "Keep practicing",
 	"proposal.accept.msg": "I accept the mastery proposal for \"{lesson}\" — mark it mastered.",
 	"proposal.decline.msg": "I want more practice on \"{lesson}\" before graduating.",
 	"tutor.thinking": "The tutor is thinking…",
@@ -763,7 +757,7 @@ const EN = {
 	"exam.leave.message": "The exam is in progress — leaving now counts unanswered questions as wrong.",
 	"exam.leave.confirm": "Leave & settle",
 	"exam.leave.cancel": "Keep answering",
-	"prompt.exam.bank": "Author the section exam bank for \"{section}\": read this section's lessons with study_view, then submit the full multiple-choice set in one study_exam_bank_apply call (5-15 single-choice questions, kcTitle must be one of the section's concept titles, one-line explanation each). Tell me when the bank is ready.",
+	"prompt.exam.bank": "Author the section exam bank for \"{section}\": read this section's lessons with study_lesson, then submit the full multiple-choice set in one study_exam_bank_apply call (5-15 single-choice questions, kcTitle must be one of the section's concept titles, one-line explanation each). Tell me when the bank is ready.",
 	"prompt.review": "Start today's review, from the most overdue lesson first",
 	"prompt.proposal.accept": "Accept proposal {id} — confirm marking this lesson as mastered",
 	"prompt.proposal.decline": "Reject proposal {id} — I want to practice more"
@@ -1072,7 +1066,7 @@ function coursePackMarkdown(course) {
 		for (const lesson of section.lessons) {
 			if (lesson.kind === "exam") continue;
 			out.push(`### ${lesson.title}`, "");
-			const body = lesson.body.replace(/\s+$/, "");
+			const body = lesson.body.replace(/\s+$/, "").split("\n").map((line) => /^#{1,3}(\s|$)/.test(line) ? `\\${line}` : line).join("\n");
 			if (body !== "") out.push(body, "");
 		}
 	}
@@ -1513,10 +1507,12 @@ function emptyState() {
 		focus: null,
 		memoryGlobal: null,
 		memoryPatterns: {},
+		frictionGlobal: [],
 		artifacts: {},
 		proposals: [],
 		lessonSessions: {},
 		lessonThreads: {},
+		trash: [],
 		lastConsolidatedAt: null,
 		xp: {
 			total: 0,
@@ -1543,14 +1539,48 @@ function resolveStatePath(configured) {
 	return join(dshHome, "lookatstudy-plugin", "state.json");
 }
 /**
-* Load persisted state; a missing file yields empty state, a corrupt file fails loud.
+* Load persisted state; a missing file yields empty state, and an unusable
+* file (torn bytes, future version) recovers from `.bak` or degrades to a
+* fresh state instead of throwing out of the host's apply() (audit A3).
 * v1 → v2 migration: `completed` lessons become `mastered`, lessons gain `kind`
-* (default `study`). Newer files than this code knows are rejected.
+* (default `study`).
 * @param path - state-file path.
 * @returns the loaded state.
 */
 function loadState(path) {
-	if (!existsSync(path)) return emptyState();
+	if (existsSync(path)) try {
+		return parseStateFile(path);
+	} catch (error) {
+		const message = error instanceof Error ? error.message : String(error);
+		const backup = loadBackup(path);
+		if (backup !== null) {
+			console.error(`lookatstudy-plugin: state file unusable (${message}); recovered from ${path}.bak`);
+			return backup;
+		}
+		console.error(`lookatstudy-plugin: state file unusable (${message}) and no backup survived — quarantining it and starting fresh (${path})`);
+		quarantine(path);
+		return emptyState();
+	}
+	return loadBackup(path) ?? emptyState();
+}
+function loadBackup(path) {
+	const bak = `${path}.bak`;
+	if (!existsSync(bak)) return null;
+	try {
+		return parseStateFile(bak);
+	} catch {
+		return null;
+	}
+}
+function quarantine(path) {
+	try {
+		renameSync(path, `${path}.corrupt-${Date.now().toString(36)}`);
+	} catch (error) {
+		console.error(`lookatstudy-plugin: could not quarantine the unusable state file (${String(error)})`);
+	}
+}
+/** Parse + migrate one state file; malformed bytes, shapes, and future versions throw. */
+function parseStateFile(path) {
 	let parsed;
 	try {
 		parsed = JSON.parse(readFileSync(path, "utf8"));
@@ -1588,6 +1618,7 @@ function loadState(path) {
 		focus: raw.focus ?? null,
 		memoryGlobal: raw.memoryGlobal ?? null,
 		memoryPatterns: raw.memoryPatterns ?? {},
+		frictionGlobal: raw.frictionGlobal ?? [],
 		proposals: raw.proposals ?? [],
 		lessonSessions: raw.lessonSessions ?? {},
 		lessonThreads: (() => {
@@ -1620,6 +1651,7 @@ function loadState(path) {
 			return groups;
 		})(),
 		artifacts: raw.artifacts ?? {},
+		trash: raw.trash ?? [],
 		lastConsolidatedAt: raw.lastConsolidatedAt ?? null,
 		xp: raw.xp ?? {
 			total: 0,
@@ -1635,15 +1667,41 @@ function loadState(path) {
 	};
 }
 /**
-* Persist state atomically (write a sibling temp file, then rename).
+* Persist state atomically. The tmp file carries pid + random bytes so
+* processes sharing one state.json (multi-profile installs) never interleave
+* on the same temp path — a fixed name let one writer rename the other's
+* half-written bytes into place; the previous generation is kept one deep as
+* `.bak` for loadState recovery; the rename retries through the Windows
+* AV/indexer EPERM window (audit A3).
 * @param path - state-file path.
 * @param state - state to persist.
 */
 function saveState(path, state) {
 	mkdirSync(dirname(path), { recursive: true });
-	const tmp = `${path}.tmp`;
+	const tmp = `${path}.${process.pid}-${randomBytes(4).toString("hex")}.tmp`;
 	writeFileSync(tmp, `${JSON.stringify(state, null, 2)}\n`, "utf8");
-	renameSync(tmp, path);
+	try {
+		const fd = openSync(tmp, "r+");
+		try {
+			fsyncSync(fd);
+		} finally {
+			closeSync(fd);
+		}
+	} catch {}
+	if (existsSync(path)) try {
+		copyFileSync(path, `${path}.bak`);
+	} catch {}
+	for (let attempt = 0;; attempt++) try {
+		renameSync(tmp, path);
+		return;
+	} catch (error) {
+		const code = error.code;
+		if ((code === "EPERM" || code === "EACCES" || code === "EBUSY") && attempt < 5) {
+			Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, 20 * (attempt + 1));
+			continue;
+		}
+		throw error;
+	}
 }
 /**
 * Slugify a course title into an id prefix: lowercase alphanumerics joined by `-`.
@@ -1693,8 +1751,13 @@ function freshLesson(title, anchor, body, kind = "study") {
 */
 function importCourse(state, parsed, source, sourceRef, languageTarget) {
 	const base = slugify(parsed.title);
-	const sameTitle = state.courses.find((c) => c.id === base && c.title === parsed.title);
-	if (sameTitle !== void 0) return sameTitle;
+	if (source !== "markdown") {
+		const sameIdentity = state.courses.find((c) => c.source === source && c.sourceRef === sourceRef && c.title === parsed.title);
+		if (sameIdentity !== void 0) return sameIdentity;
+	} else {
+		const sameTitle = state.courses.find((c) => c.source === "markdown" && c.title === parsed.title);
+		if (sameTitle !== void 0) return sameTitle;
+	}
 	let id = base;
 	for (let n = 2; state.courses.some((c) => c.id === id); n++) id = `${base}-${String(n)}`;
 	const course = {
@@ -1738,16 +1801,88 @@ function importCourse(state, parsed, source, sourceRef, languageTarget) {
 	return course;
 }
 /**
-* Drop a course from state; unknown ids fail loud.
+* Delete one course — into the restorable trash (audit B7), carrying its
+* proposals, artifacts, thread groups, legacy bindings, pattern memory, and
+* focus so a restore is total (this also leaves no orphan sediment behind —
+* audit C17). Unknown ids fail loud.
 * @param state - state to mutate.
 * @param courseId - course to remove.
 */
 function deleteCourse(state, courseId) {
 	const i = state.courses.findIndex((c) => c.id === courseId);
 	if (i < 0) throw new Error(`lookatstudy-plugin: unknown course id ${JSON.stringify(courseId)}`);
-	state.courses.splice(i, 1);
-	state.proposals = state.proposals.filter((p) => !p.lessonId.startsWith(`${courseId}:`));
-	for (const lessonId of Object.keys(state.artifacts)) if (lessonId.startsWith(`${courseId}:`)) delete state.artifacts[lessonId];
+	const [course] = state.courses.splice(i, 1);
+	const prefix = `${courseId}:`;
+	const lessonThreads = [];
+	for (const key of Object.keys(state.lessonThreads)) if (key.startsWith(prefix)) {
+		lessonThreads.push([key, state.lessonThreads[key]]);
+		delete state.lessonThreads[key];
+	}
+	const lessonSessions = [];
+	for (const key of Object.keys(state.lessonSessions)) if (key.startsWith(prefix)) {
+		lessonSessions.push([key, state.lessonSessions[key]]);
+		delete state.lessonSessions[key];
+	}
+	const artifacts = [];
+	for (const key of Object.keys(state.artifacts)) if (key.startsWith(prefix)) {
+		artifacts.push([key, state.artifacts[key]]);
+		delete state.artifacts[key];
+	}
+	const proposals = state.proposals.filter((p) => p.lessonId.startsWith(prefix));
+	state.proposals = state.proposals.filter((p) => !p.lessonId.startsWith(prefix));
+	const pattern = state.memoryPatterns[courseId];
+	const memoryPattern = pattern !== void 0 ? [courseId, pattern] : null;
+	if (pattern !== void 0) delete state.memoryPatterns[courseId];
+	const focusLessonId = state.focus !== null && state.focus.lessonId.startsWith(prefix) ? state.focus.lessonId : null;
+	if (focusLessonId !== null) state.focus = null;
+	state.trash = [{
+		deletedAt: (/* @__PURE__ */ new Date()).toISOString(),
+		course,
+		proposals,
+		artifacts,
+		lessonThreads,
+		lessonSessions,
+		memoryPattern,
+		focusLessonId
+	}, ...state.trash ?? []].slice(0, 10);
+}
+/**
+* Restore one course from the trash with all its sediment. The slug may have
+* been re-taken while trashed — the tree is re-id'd and every carried key
+* remapped in that case. Unknown ids fail loud with the restorable list.
+* @param state - state to mutate.
+* @param courseId - trashed course to restore.
+* @returns the restored course.
+*/
+function restoreCourse(state, courseId) {
+	state.trash ??= [];
+	const i = state.trash.findIndex((t) => t.course.id === courseId);
+	if (i < 0) throw new Error(`lookatstudy-plugin: no trashed course ${JSON.stringify(courseId)} (restorable: ${state.trash.map((t) => t.course.id).join(", ") || "none"})`);
+	const entry = state.trash.splice(i, 1)[0];
+	const course = entry.course;
+	const oldId = course.id;
+	let id = oldId;
+	for (let n = 2; state.courses.some((c) => c.id === id); n++) id = `${oldId}-${String(n)}`;
+	if (id !== oldId) {
+		course.id = id;
+		const remap = (key) => key.startsWith(`${oldId}:`) ? `${id}${key.slice(oldId.length)}` : key;
+		course.sections.forEach((section, si) => section.lessons.forEach((lesson, li) => {
+			lesson.id = `${id}:${si}:${li}`;
+		}));
+		for (const p of entry.proposals) p.lessonId = remap(p.lessonId);
+		entry.artifacts = entry.artifacts.map(([k, v]) => [remap(k), v]);
+		entry.lessonThreads = entry.lessonThreads.map(([k, v]) => [remap(k), v]);
+		entry.lessonSessions = entry.lessonSessions.map(([k, v]) => [remap(k), v]);
+		if (entry.focusLessonId !== null) entry.focusLessonId = remap(entry.focusLessonId);
+	}
+	state.courses.push(course);
+	for (const p of entry.proposals) state.proposals.push(p);
+	for (const [key, list] of entry.artifacts) state.artifacts[key] = [...state.artifacts[key] ?? [], ...list];
+	for (const [key, group] of entry.lessonThreads) state.lessonThreads[key] = group;
+	for (const [key, sessionId] of entry.lessonSessions) state.lessonSessions[key] = sessionId;
+	if (entry.memoryPattern !== null) state.memoryPatterns[course.id] = entry.memoryPattern[1];
+	if (entry.focusLessonId !== null && state.focus === null) state.focus = { lessonId: entry.focusLessonId };
+	return course;
 }
 /**
 * Locate a course; unknown ids fail loud.
@@ -1897,6 +2032,7 @@ function applyProgression(ref, now) {
 */
 function attemptLesson(state, lessonId, now) {
 	const ref = findLesson(state, lessonId);
+	if (ref.lesson.kind === "exam") throw new Error(`lookatstudy-plugin: exam node ${JSON.stringify(lessonId)} never enters the study state machine (it stays available; the exam surface is the bank + attempt flow)`);
 	if (ref.lesson.status === "locked") throw new Error(`lookatstudy-plugin: lesson ${JSON.stringify(lessonId)} is locked; complete earlier lessons first`);
 	if (ref.lesson.status !== "available") return {
 		ref,
@@ -1969,7 +2105,7 @@ function applyExamBank(state, lessonId, questions, now) {
 		if (typeof q?.prompt !== "string" || q.prompt.trim() === "") throw new Error(`lookatstudy-plugin: question ${String(i)} has an empty prompt`);
 		if (!Array.isArray(q.options) || q.options.length < 2 || q.options.some((o) => typeof o !== "string" || o.trim() === "")) throw new Error(`lookatstudy-plugin: question ${String(i)} needs 2+ non-empty options`);
 		if (!Number.isInteger(q.answer) || q.answer < 0 || q.answer >= q.options.length) throw new Error(`lookatstudy-plugin: question ${String(i)} answer index ${String(q.answer)} is out of range`);
-		if (q.kcTitle !== void 0 && q.kcTitle !== null && q.kcTitle !== "" && !kcUnion.has(q.kcTitle)) throw new Error(`lookatstudy-plugin: question ${String(i)} kcTitle ${JSON.stringify(q.kcTitle)} is not in the section's concept union ${JSON.stringify([...kcUnion])} — read the section lessons with study_view before authoring`);
+		if (q.kcTitle !== void 0 && q.kcTitle !== null && q.kcTitle !== "" && !kcUnion.has(q.kcTitle)) throw new Error(`lookatstudy-plugin: question ${String(i)} kcTitle ${JSON.stringify(q.kcTitle)} is not in the section's concept union ${JSON.stringify([...kcUnion])} — read the section lessons with study_lesson before authoring`);
 		return {
 			id: `q${String(i)}`,
 			prompt: q.prompt,
@@ -1989,10 +2125,12 @@ function applyExamBank(state, lessonId, questions, now) {
 		kcCount: new Set(bank.map((q) => q.kcTitle).filter((k) => k !== null)).size
 	};
 }
-/** Drop the bank back to idle (regenerate; history snapshots stay self-contained). */
+/** Drop the bank back to idle (regenerate; open attempts settle against their
+* snapshots first — audit C16: never cross-grade a live attempt). */
 function regenerateExamBank(state, lessonId) {
 	const ref = findLesson(state, lessonId);
 	if (ref.lesson.kind !== "exam") throw new Error(`lookatstudy-plugin: lesson ${JSON.stringify(lessonId)} is not an exam node`);
+	settleDanglingAttempts(state, lessonId);
 	ref.lesson.examBank = {
 		status: "idle",
 		questions: []
@@ -2001,7 +2139,12 @@ function regenerateExamBank(state, lessonId) {
 /** Settle every dangling attempt of the lesson (grade dead — unanswered = wrong). */
 function settleDanglingAttempts(state, lessonId) {
 	const ref = findLesson(state, lessonId);
-	for (const attempt of ref.lesson.examAttemptLog ?? []) if (attempt.finishedAt === null) submitExamAttempt(state, lessonId, attempt.id, true, /* @__PURE__ */ new Date());
+	let changed = false;
+	for (const attempt of ref.lesson.examAttemptLog ?? []) if (attempt.finishedAt === null) {
+		submitExamAttempt(state, lessonId, attempt.id, true, /* @__PURE__ */ new Date());
+		changed = true;
+	}
+	return changed;
 }
 /** Open a new attempt against the ready bank (dangling ones are graded dead first). */
 function startExamAttempt(state, lessonId, now) {
@@ -2021,9 +2164,14 @@ function startExamAttempt(state, lessonId, now) {
 		totalCount: null,
 		stars: null,
 		terminated: false,
-		perQuestion: null
+		perQuestion: null,
+		snapshot: ref.lesson.examBank.questions.map((q) => ({
+			...q,
+			options: [...q.options]
+		}))
 	};
-	ref.lesson.examAttemptLog = [...log, attempt];
+	const kept = [...log, attempt];
+	ref.lesson.examAttemptLog = kept.length > 20 ? kept.slice(kept.length - 20) : kept;
 	return {
 		attemptId: attempt.id,
 		questions: ref.lesson.examBank.questions
@@ -2035,7 +2183,7 @@ function recordExamAnswer(state, lessonId, attemptId, questionId, answer) {
 	const attempt = ref.lesson.examAttemptLog?.find((a) => a.id === attemptId);
 	if (attempt === void 0) throw new Error(`lookatstudy-plugin: exam attempt ${JSON.stringify(attemptId)} not found on ${JSON.stringify(lessonId)}`);
 	if (attempt.finishedAt !== null) throw new Error(`lookatstudy-plugin: exam attempt ${JSON.stringify(attemptId)} already finished`);
-	const question = ref.lesson.examBank?.questions.find((q) => q.id === questionId);
+	const question = (attempt.snapshot ?? (ref.lesson.examBank?.status === "ready" ? ref.lesson.examBank.questions : [])).find((q) => q.id === questionId);
 	if (question === void 0) throw new Error(`lookatstudy-plugin: exam question ${JSON.stringify(questionId)} not in the bank`);
 	if (answer !== "" && (!/^\d+$/.test(answer) || Number(answer) >= question.options.length)) throw new Error(`lookatstudy-plugin: exam answer ${JSON.stringify(answer)} is not an option index of ${JSON.stringify(questionId)}`);
 	attempt.answers = {
@@ -2049,8 +2197,7 @@ function submitExamAttempt(state, lessonId, attemptId, terminated, now) {
 	const attempt = ref.lesson.examAttemptLog?.find((a) => a.id === attemptId);
 	if (attempt === void 0) throw new Error(`lookatstudy-plugin: exam attempt ${JSON.stringify(attemptId)} not found on ${JSON.stringify(lessonId)}`);
 	if (attempt.finishedAt !== null) throw new Error(`lookatstudy-plugin: exam attempt ${JSON.stringify(attemptId)} already finished`);
-	const bank = ref.lesson.examBank;
-	const perQuestion = (bank?.status === "ready" ? bank.questions : []).map((q) => {
+	const perQuestion = (attempt.snapshot ?? (ref.lesson.examBank?.status === "ready" ? ref.lesson.examBank.questions : [])).map((q) => {
 		const user = attempt.answers[q.id] ?? "";
 		return {
 			exerciseId: q.id,
@@ -2100,6 +2247,7 @@ function submitExamAttempt(state, lessonId, attemptId, terminated, now) {
 */
 function recordAnswer(state, lessonId, correct, concept, now) {
 	const ref = findLesson(state, lessonId);
+	if (ref.lesson.kind === "exam") throw new Error(`lookatstudy-plugin: exam node ${JSON.stringify(lessonId)} takes exam attempts (start/submit), not study_record_answer`);
 	if (ref.lesson.status === "locked") throw new Error(`lookatstudy-plugin: lesson ${JSON.stringify(lessonId)} is locked; open it with study_lesson first`);
 	if (ref.lesson.status === "available") ref.lesson.status = "in_progress";
 	const kcIndex = concept === void 0 ? void 0 : ref.lesson.concepts?.findIndex((c) => c.title === concept);
@@ -2164,6 +2312,7 @@ function recordAnswer(state, lessonId, correct, concept, now) {
 * with the active pointer so pre-0.22 readers never disagree.
 */
 function bindLessonThread(state, lessonId, sessionId, title) {
+	findLesson(state, lessonId);
 	state.lessonThreads ??= {};
 	const group = state.lessonThreads[lessonId] ?? {
 		active: null,
@@ -2287,7 +2436,10 @@ function addFriction(state, lessonId, category, summary, now) {
 		summary,
 		at: now.toISOString()
 	};
-	if (lessonId === null) return;
+	if (lessonId === null) {
+		state.frictionGlobal = [...state.frictionGlobal ?? [], entry].slice(-50);
+		return;
+	}
 	const ref = findLesson(state, lessonId);
 	ref.lesson.friction.push(entry);
 	if (ref.lesson.friction.length > FRICTION_CAP) ref.lesson.friction.splice(0, ref.lesson.friction.length - FRICTION_CAP);
@@ -2308,7 +2460,8 @@ function setMemory(state, category, content, lessonId) {
 		return prev;
 	}
 	if (category === "pattern") {
-		const course = findCourse(state, lessonId === void 0 ? "" : lessonId.slice(0, lessonId.lastIndexOf(":")));
+		const cut = lessonId === void 0 ? -1 : lessonId.indexOf(":");
+		const course = findCourse(state, cut === -1 ? lessonId ?? "" : lessonId.slice(0, cut));
 		const prev = state.memoryPatterns[course.id] ?? null;
 		state.memoryPatterns[course.id] = content;
 		return prev;
@@ -2371,7 +2524,7 @@ function recordArtifact(state, lessonId, artifact) {
 		created: false
 	};
 	const next = [...existing, artifact];
-	state.artifacts[lessonId] = next;
+	state.artifacts[lessonId] = next.length > 100 ? next.slice(next.length - 100) : next;
 	return {
 		artifact,
 		created: true
@@ -2452,6 +2605,11 @@ function resolveProposal(state, proposalId, accept, now) {
 		}
 	}
 	proposal.status = accept ? "applied" : "rejected";
+	const resolved = state.proposals.filter((p) => p.status !== "pending");
+	if (resolved.length > 20) {
+		const keep = new Set(resolved.slice(resolved.length - 20).map((p) => p.id));
+		state.proposals = state.proposals.filter((p) => p.status === "pending" || keep.has(p.id));
+	}
 	return proposal;
 }
 /**
@@ -2640,6 +2798,18 @@ function gatherConsolidationWindow(state, capPerLesson = 10) {
 	const entries = [];
 	let frictionCount = 0;
 	let practiceCount = 0;
+	for (const f of state.frictionGlobal ?? []) {
+		if (since !== null && f.at <= since) continue;
+		entries.push({
+			lessonId: "",
+			lessonTitle: "(课级)",
+			kind: "friction",
+			category: f.category,
+			text: f.summary ?? "(no summary)",
+			at: f.at
+		});
+		frictionCount++;
+	}
 	for (const course of state.courses) for (const section of course.sections) for (const lesson of section.lessons) {
 		let perLesson = 0;
 		const collect = (kind, at, push) => {
@@ -2918,6 +3088,49 @@ function workbenchState(state, now) {
 	};
 }
 const JSON_HEADERS = { "content-type": "application/json; charset=utf-8" };
+/** Local hostnames the panel is ever legitimately served from (audit A2). */
+const LOCAL_HOSTNAMES = /* @__PURE__ */ new Set([
+	"localhost",
+	"127.0.0.1",
+	"[::1]",
+	"::1"
+]);
+function headerValue(req, name) {
+	const raw = req.headers?.[name];
+	const value = Array.isArray(raw) ? raw[0] ?? "" : raw;
+	return typeof value === "string" ? value : "";
+}
+/** Hostname of the Host header with the port stripped (IPv6 brackets kept). */
+function hostNameOf(req) {
+	const host = headerValue(req, "host").toLowerCase().trim();
+	if (host.startsWith("[")) return host.slice(0, host.indexOf("]") + 1);
+	return host.split(":")[0] ?? "";
+}
+function originIsLocal(origin) {
+	try {
+		return LOCAL_HOSTNAMES.has(new URL(origin).hostname.toLowerCase());
+	} catch {
+		return false;
+	}
+}
+/**
+* Audit A2: the host does not token-guard plugin routes, so the dashboard
+* gates itself. Every request must name a local Host header (kills DNS
+* rebinding reads); mutating POSTs must additionally carry the plugin marker
+* header `x-lks-request` — a drive-by page can still smuggle a no-preflight
+* text/plain POST at us, but it cannot add that header. GETs stay
+* marker-free because `<img>` tags (attachment thumbnails) cannot send
+* custom headers; the Host check still applies to them.
+*/
+function requestPassesGate(req) {
+	if (!LOCAL_HOSTNAMES.has(hostNameOf(req))) return false;
+	if (req.method === "POST") {
+		if (headerValue(req, "x-lks-request") !== "1") return false;
+		const origin = headerValue(req, "origin").trim();
+		if (origin !== "" && !originIsLocal(origin)) return false;
+	}
+	return true;
+}
 function sendJson(res, status, value) {
 	res.writeHead(status, JSON_HEADERS).end(JSON.stringify(value));
 }
@@ -2930,7 +3143,9 @@ function sendJson(res, status, value) {
 */
 async function readJsonBodySafe(req, res, maxBytes = 65536) {
 	try {
-		return await readJsonBody(req, maxBytes);
+		const value = await readJsonBody(req, maxBytes);
+		if (value === null || typeof value !== "object" || Array.isArray(value)) throw new Error("request body must be a JSON object");
+		return value;
 	} catch (error) {
 		sendJson(res, 400, {
 			ok: false,
@@ -2943,20 +3158,30 @@ async function readJsonBodySafe(req, res, maxBytes = 65536) {
 function readJsonBody(req, maxBytes = 65536) {
 	return new Promise((resolve, reject) => {
 		const chunks = [];
+		let received = 0;
+		let settled = false;
+		const done = (err, value) => {
+			if (settled) return;
+			settled = true;
+			if (err !== null) reject(err);
+			else resolve(value);
+		};
 		req.on("data", (chunk) => {
+			if (settled) return;
 			chunks.push(chunk);
-			if (chunks.reduce((n, c) => n + c.length, 0) > maxBytes) {
-				reject(/* @__PURE__ */ new Error("request body too large"));
-				return;
-			}
+			received += chunk.length;
+			if (received > maxBytes) done(/* @__PURE__ */ new Error("request body too large"));
 		});
 		req.on("end", () => {
+			if (settled) return;
 			try {
-				resolve(JSON.parse(Buffer.concat(chunks).toString("utf8")));
+				done(null, JSON.parse(Buffer.concat(chunks).toString("utf8")));
 			} catch {
-				reject(/* @__PURE__ */ new Error("request body is not valid JSON"));
+				done(/* @__PURE__ */ new Error("request body is not valid JSON"));
 			}
 		});
+		req.on("error", () => done(/* @__PURE__ */ new Error("request aborted")));
+		req.on("aborted", () => done(/* @__PURE__ */ new Error("request aborted")));
 	});
 }
 /**
@@ -2981,14 +3206,30 @@ function registerDashboard(webServer, deps) {
 		kind: "prefix",
 		path: "/lookatstudy",
 		handler: async (req, res) => {
+			if (!requestPassesGate(req)) {
+				sendJson(res, 403, {
+					ok: false,
+					error: "forbidden"
+				});
+				return;
+			}
 			const pathname = new URL(req.url ?? "/", "http://x").pathname;
 			if (req.method === "GET" && pathname === "/lookatstudy/api/state") {
-				sendJson(res, 200, {
+				const payload = JSON.stringify({
 					...workbenchState(deps.store.get(), /* @__PURE__ */ new Date()),
 					statePath: deps.statePath,
 					version: pluginVersion(),
 					model: await modelInfo()
 				});
+				const etag = `"${createHash("sha1").update(payload).digest("hex")}"`;
+				if (headerValue(req, "if-none-match") === etag) {
+					res.writeHead(304, { etag }).end();
+					return;
+				}
+				res.writeHead(200, {
+					...JSON_HEADERS,
+					etag
+				}).end(payload);
 				return;
 			}
 			if (req.method === "GET" && pathname === "/lookatstudy/api/search") {
@@ -3073,6 +3314,32 @@ function registerDashboard(webServer, deps) {
 				}
 				return;
 			}
+			if (req.method === "POST" && pathname === "/lookatstudy/api/course/restore") {
+				const body = await readJsonBodySafe(req, res);
+				if (body === void 0) return;
+				if (typeof body.courseId !== "string") {
+					sendJson(res, 400, {
+						ok: false,
+						error: "courseId (string) required"
+					});
+					return;
+				}
+				try {
+					const course = restoreCourse(deps.store.get(), body.courseId);
+					deps.store.save();
+					sendJson(res, 200, {
+						ok: true,
+						courseId: course.id,
+						title: course.title
+					});
+				} catch (error) {
+					sendJson(res, 404, {
+						ok: false,
+						error: error instanceof Error ? error.message : String(error)
+					});
+				}
+				return;
+			}
 			if (req.method === "POST" && pathname === "/lookatstudy/api/note/delete") {
 				const body = await readJsonBodySafe(req, res);
 				if (body === void 0) return;
@@ -3203,8 +3470,7 @@ function registerDashboard(webServer, deps) {
 					return;
 				}
 				try {
-					settleDanglingAttempts(deps.store.get(), lessonId);
-					deps.store.save();
+					if (settleDanglingAttempts(deps.store.get(), lessonId)) deps.store.save();
 					const ref = findLesson(deps.store.get(), lessonId);
 					if (ref.lesson.kind !== "exam") throw new Error("not an exam node");
 					const bank = ref.lesson.examBank;
@@ -3372,7 +3638,15 @@ function registerDashboard(webServer, deps) {
 					return;
 				}
 				const title = typeof body.title === "string" ? body.title : null;
-				bindLessonThread(deps.store.get(), body.lessonId, body.sessionId, title);
+				try {
+					bindLessonThread(deps.store.get(), body.lessonId, body.sessionId, title);
+				} catch (error) {
+					sendJson(res, 404, {
+						ok: false,
+						error: error instanceof Error ? error.message : String(error)
+					});
+					return;
+				}
 				deps.store.save();
 				sendJson(res, 200, { ok: true });
 				return;
@@ -3912,7 +4186,7 @@ async function scanFolder(rootDir, onProgress, options) {
 	for (const doc of dedupedDocs) {
 		if (doc.kind !== "pptx") continue;
 		try {
-			const { parsePptx } = await import("./pptx-parser-B9IDkiGM.mjs");
+			const { parsePptx } = await import("./pptx-parser-BooxpGV4.mjs");
 			const result = await parsePptx(await readFile(join(rootDir, doc.path)));
 			for (const img of result.images ?? []) pptxImages.push({
 				path: `${doc.path}#slide${img.slideNumber}.png`,
@@ -4101,19 +4375,20 @@ async function readFileWithKind(absPath, kind, parsePdf) {
 		const { parsePdfText } = await Promise.resolve().then(() => pdf_text_exports);
 		return parsePdfText(buf);
 	}
+	if (statSync(absPath).size > 67108864) throw new Error(`文件超过 64MiB 上限 (audit B11): ${absPath}`);
 	if (kind === "pptx") {
 		const buf = await readFile(absPath);
-		const { parsePptx } = await import("./pptx-parser-B9IDkiGM.mjs");
+		const { parsePptx } = await import("./pptx-parser-BooxpGV4.mjs");
 		return (await parsePptx(buf)).markdown;
 	}
 	if (kind === "docx") {
 		const buf = await readFile(absPath);
-		const { parseDocx } = await import("./docx-parser-BhyqPImb.mjs");
+		const { parseDocx } = await import("./docx-parser-BB_sCd8F.mjs");
 		return parseDocx(buf).replace(/^(#{1,5}) /gm, (m) => `#${m}`);
 	}
 	if (kind === "epub") {
 		const buf = await readFile(absPath);
-		const { parseEpubFlat } = await import("./epub-parser-oH96guBW.mjs");
+		const { parseEpubFlat } = await import("./epub-parser-B7JEfgSO.mjs");
 		return parseEpubFlat(buf);
 	}
 	if (kind === "ipynb") {
@@ -4281,7 +4556,16 @@ function findStandaloneImages(images, docs) {
 //#region src/vendor/repo-fetcher.ts
 /** CDN URL 构造 */
 function cdnUrl(owner, repo, branch, path) {
-	return `https://cdn.jsdelivr.net/gh/${owner}/${repo}@${branch}/${path.replace(/^\.\//, "").replace(/^\//, "")}`;
+	const segments = [];
+	for (const seg of path.split("/")) {
+		if (seg === "" || seg === ".") continue;
+		if (seg === "..") {
+			segments.pop();
+			continue;
+		}
+		segments.push(seg);
+	}
+	return `https://cdn.jsdelivr.net/gh/${owner}/${repo}@${branch}/${segments.join("/")}`;
 }
 /** 代码文件扩展名（代码即教学内容） */
 const CODE_EXTENSIONS = [
@@ -4541,7 +4825,7 @@ async function fetchRepoFileTree(owner, repo, branch, _fetchFn, signal) {
 	const apiUrl = `https://api.github.com/repos/${owner}/${repo}/git/trees/${branch}?recursive=1`;
 	try {
 		const r = await httpsGet(apiUrl, {
-			rejectUnauthorized: false,
+			rejectUnauthorized: process.env.LKS_INSECURE_TLS !== "1",
 			deadlineMs: 24e4,
 			signal
 		});
@@ -4558,7 +4842,7 @@ async function fetchRepoFileTree(owner, repo, branch, _fetchFn, signal) {
 	}
 	try {
 		const r2 = await httpsGet(`https://data.jsdelivr.com/v1/packages/gh/${owner}/${repo}@${branch}?structure=flat`, {
-			rejectUnauthorized: false,
+			rejectUnauthorized: process.env.LKS_INSECURE_TLS !== "1",
 			signal
 		});
 		if (r2.ok && r2.body) {
@@ -4940,6 +5224,117 @@ function normalizeUrlIdentity(url) {
 	}
 }
 //#endregion
+//#region src/vendor/net-guard.ts
+/**
+* Audit B6 (2026-09-14): the article/subtitle fetch paths take tutor- and
+* user-supplied URLs, and the host process runs with the user's full network
+* reach — an unguarded GET is an SSRF primitive against the local (formerly
+* unauthenticated) dashboard, cloud metadata, and LAN devices. Three guards:
+*   1. literal private/loopback addresses are refused (DNS names are NOT
+*      resolved — documented boundary: a public DNS name pointing inward
+*      still passes);
+*   2. redirects are followed MANUALLY with a per-hop re-check (a public URL
+*      302-ing to 169.254.169.254 must not be followed blindly);
+*   3. response bodies are stream-read under a hard byte cap before they
+*      enter memory as text.
+* @module dsh-plugin-lookatstudy/net-guard
+*/
+/** Private/loopback IPv4 literal? */
+function isPrivateIPv4(host) {
+	const m = host.match(/^(\d{1,3})\.(\d{1,3})\.(\d{1,3})\.(\d{1,3})$/);
+	if (m === null) return false;
+	const octets = m.slice(1).map(Number);
+	if (octets.some((o) => o > 255)) return false;
+	const [a, b] = octets;
+	if (a === 0 || a === 10 || a === 127) return true;
+	if (a === 169 && b === 254) return true;
+	if (a === 172 && b >= 16 && b <= 31) return true;
+	if (a === 192 && b === 168) return true;
+	if (a === 100 && b >= 64 && b <= 127) return true;
+	return false;
+}
+/** Private/loopback hostname? Literal IPs and localhost only (no DNS resolution). */
+function isPrivateHostname(hostname) {
+	const host = hostname.toLowerCase().replace(/^\[|\]$/g, "");
+	if (host === "" || host === "localhost" || host.endsWith(".localhost")) return true;
+	if (host.includes(":")) {
+		if (host === "::1" || host === "::") return true;
+		const first = host.split(":")[0] ?? "";
+		if (/^fe[89ab]/.test(first)) return true;
+		if (/^f[cd]/.test(first)) return true;
+		const v4mapped = host.match(/(\d{1,3}(?:\.\d{1,3}){3})$/);
+		if (v4mapped !== null) return isPrivateIPv4(v4mapped[1]);
+		return false;
+	}
+	return isPrivateIPv4(host);
+}
+/** Parse and refuse non-public fetch targets; returns the parsed URL. */
+function assertPublicHttpUrl(url) {
+	let parsed;
+	try {
+		parsed = new URL(url);
+	} catch {
+		throw new Error(`lookatstudy-plugin: not a valid URL: ${JSON.stringify(url)}`);
+	}
+	if (parsed.protocol !== "http:" && parsed.protocol !== "https:") throw new Error(`lookatstudy-plugin: refusing non-http(s) fetch target ${JSON.stringify(url)}`);
+	if (isPrivateHostname(parsed.hostname)) throw new Error(`lookatstudy-plugin: refusing to fetch a private/loopback address (SSRF guard): ${parsed.hostname}`);
+	return parsed;
+}
+/**
+* Fetch one URL as text under the guards: manual redirects re-checked per
+* hop, declared content-length pre-check, stream-read truncated at the cap.
+* Non-2xx (after the redirect hops) throws, matching the article path's
+* honest-failure contract.
+*/
+async function guardedFetchText(url, deps = {}) {
+	const doFetch = deps.fetchImpl ?? fetch;
+	const maxBytes = deps.maxBytes ?? 2097152;
+	const maxRedirects = deps.maxRedirects ?? 5;
+	let current = assertPublicHttpUrl(url).toString();
+	for (let hop = 0;; hop++) {
+		const resp = await doFetch(current, {
+			headers: deps.headers,
+			redirect: "manual",
+			signal: deps.signal
+		});
+		if (resp.status === 301 || resp.status === 302 || resp.status === 303 || resp.status === 307 || resp.status === 308) {
+			const location = resp.headers.get("location");
+			if (location === null) throw new Error(`lookatstudy-plugin: redirect without a Location header (HTTP ${resp.status})`);
+			if (hop >= maxRedirects) throw new Error("lookatstudy-plugin: too many redirects");
+			current = assertPublicHttpUrl(new URL(location, current).toString()).toString();
+			continue;
+		}
+		if (!resp.ok) throw new Error(`lookatstudy-plugin: page fetch failed (HTTP ${resp.status}): ${current}`);
+		const declaredRaw = resp.headers.get("content-length");
+		if (declaredRaw !== null && /^\d+$/.test(declaredRaw) && Number(declaredRaw) > maxBytes) throw new Error(`lookatstudy-plugin: response declares ${declaredRaw} bytes, over the ${maxBytes} byte cap: ${current}`);
+		const reader = resp.body?.getReader();
+		if (reader === void 0) return await resp.text();
+		const chunks = [];
+		let total = 0;
+		let capped = false;
+		for (;;) {
+			const { done, value } = await reader.read();
+			if (done) break;
+			chunks.push(value);
+			total += value.length;
+			if (total > maxBytes) {
+				capped = true;
+				break;
+			}
+		}
+		if (capped) await reader.cancel().catch(() => {});
+		const bytes = new Uint8Array(Math.min(total, maxBytes));
+		let off = 0;
+		for (const chunk of chunks) {
+			if (off >= bytes.length) break;
+			const take = Math.min(chunk.length, bytes.length - off);
+			bytes.set(chunk.subarray(0, take), off);
+			off += take;
+		}
+		return new TextDecoder("utf-8").decode(bytes);
+	}
+}
+//#endregion
 //#region src/vendor/pdf-text.ts
 var pdf_text_exports = /* @__PURE__ */ __exportAll({
 	normalizeRadicals: () => normalizeRadicals,
@@ -4967,22 +5362,105 @@ function decodeHexString(s) {
 	for (const b of bytes) if (b >= 32 && b < 127) out += String.fromCharCode(b);
 	return out;
 }
-/** Pull text out of one decoded content stream. */
+/** Pull text out of one decoded content stream. Linear hand-rolled scan —
+*  the original regex alternation backtracked catastrophically on real
+*  papers' content streams (an unclosed `[` made the lazy TJ arm rescan
+*  megabytes; found 2026-09-14 when the livetest refresh wedged the host for
+*  10+ CPU-minutes on a real arXiv PDF while even a watchdog timer could not
+*  fire — the loop blocked the event loop synchronously). */
+function readLiteral(src, i) {
+	let depth = 1;
+	let j = i + 1;
+	let raw = "";
+	while (j < src.length) {
+		const c = src[j];
+		if (c === "\\") {
+			raw += src.slice(j, j + 2);
+			j += 2;
+			continue;
+		}
+		if (c === "(") {
+			depth++;
+			raw += c;
+			j++;
+			continue;
+		}
+		if (c === ")") {
+			depth--;
+			if (depth === 0) {
+				j++;
+				break;
+			}
+			raw += c;
+			j++;
+			continue;
+		}
+		raw += c;
+		j++;
+	}
+	return {
+		text: decodePdfString(raw),
+		next: j
+	};
+}
+function readHex(src, i) {
+	const close = src.indexOf(">", i);
+	if (close === -1) return {
+		text: decodeHexString(src.slice(i + 1)),
+		next: src.length
+	};
+	return {
+		text: decodeHexString(src.slice(i + 1, close)),
+		next: close + 1
+	};
+}
+function skipWs(src, i) {
+	while (i < src.length && /\s/.test(src[i])) i++;
+	return i;
+}
+function readWord(src, i) {
+	let j = i;
+	while (j < src.length && /[A-Za-z0-9*'"]/.test(src[j])) j++;
+	return src.slice(i, j);
+}
 function textFromContentStream(content) {
 	if (!/BT[\s\S]*?ET/.test(content)) return "";
 	let out = "";
-	const re = /\(((?:\\.|[^\\()])*)\)\s*(Tj|'|")|<([0-9a-fA-F\s]+)>\s*(Tj|'|")|\[((?:\(.*?\)|<[0-9a-fA-F\s]+>|[^\]])*?)\]\s*TJ/g;
-	let m;
-	while ((m = re.exec(content)) !== null) if (m[1] !== void 0) {
-		out += decodePdfString(m[1]);
-		if (m[2] === "'" || m[2] === "\"") out += "\n";
-	} else if (m[3] !== void 0) {
-		out += decodeHexString(m[3]);
-		if (m[4] === "'" || m[4] === "\"") out += "\n";
-	} else if (m[5] !== void 0) {
-		const partRe = /\(((?:\\.|[^\\()])*)\)|<([0-9a-fA-F\s]+)>/g;
-		let pm;
-		while ((pm = partRe.exec(m[5])) !== null) out += pm[1] !== void 0 ? decodePdfString(pm[1]) : decodeHexString(pm[2] ?? "");
+	let i = 0;
+	const n = content.length;
+	while (i < n) {
+		const c = content[i];
+		if (c === "[") {
+			const parts = [];
+			let j = i + 1;
+			while (j < n && content[j] !== "]") {
+				const d = content[j];
+				if (d === "(") {
+					const r = readLiteral(content, j);
+					parts.push(r.text);
+					j = r.next;
+				} else if (d === "<") {
+					const r = readHex(content, j);
+					parts.push(r.text);
+					j = r.next;
+				} else j++;
+			}
+			if (j >= n) break;
+			if (readWord(content, skipWs(content, j + 1)) === "TJ") out += parts.join("");
+			i = j + 1;
+			continue;
+		}
+		if (c === "(" || c === "<") {
+			const r = c === "(" ? readLiteral(content, i) : readHex(content, i);
+			const op = readWord(content, skipWs(content, r.next));
+			if (op === "Tj" || op === "'" || op === "\"") {
+				out += r.text;
+				if (op !== "Tj") out += "\n";
+			}
+			i = r.next;
+			continue;
+		}
+		i++;
 	}
 	return out;
 }
@@ -5422,10 +5900,18 @@ async function fetchBilibiliSubtitles(url, fetchFn, signal, opts) {
 			missing.push(t.name);
 			continue;
 		}
-		const raw = await (await fetchFn(lane.url.startsWith("//") ? `https:${lane.url}` : lane.url, {
-			signal,
-			headers: BILI_HEADERS
-		})).text();
+		const subUrl = lane.url.startsWith("//") ? `https:${lane.url}` : lane.url;
+		let raw = "";
+		try {
+			raw = await guardedFetchText(subUrl, {
+				fetchImpl: fetchFn,
+				signal,
+				headers: BILI_HEADERS
+			});
+		} catch {
+			missing.push(t.name);
+			continue;
+		}
 		let text = "";
 		try {
 			text = (JSON.parse(raw).body ?? []).map((b) => (b.content ?? "").trim()).filter(Boolean).join("");
@@ -5743,6 +6229,8 @@ function extractHeadings(content) {
 function findTitleIndex(headings, anchor) {
 	const anchorClean = anchor.replace(/^#{1,3}\s+/, "").toLowerCase().trim();
 	if (anchorClean === "") return -1;
+	const exact = headings.filter((h) => h.title.toLowerCase().trim() === anchorClean);
+	if (exact.length === 1) return headings.indexOf(exact[0]);
 	for (let i = 0; i < headings.length; i++) {
 		const titleLower = headings[i].title.toLowerCase();
 		if (titleLower.includes(anchorClean) || anchorClean.includes(titleLower)) return i;
@@ -6017,8 +6505,15 @@ function sanitizeQuiz(raw) {
 	list.slice(0, MAX_QUESTIONS).forEach((q, index) => {
 		const item = q ?? {};
 		const prompt = typeof item.prompt === "string" ? item.prompt.trim() : "";
-		const options = Array.isArray(item.options) ? item.options.map((o) => typeof o === "string" ? o.trim() : "").filter((o) => o !== "") : [];
-		const answer = typeof item.answer === "number" && Number.isInteger(item.answer) ? item.answer : -1;
+		const kept = [];
+		const indexMap = /* @__PURE__ */ new Map();
+		for (const [i, o] of (Array.isArray(item.options) ? item.options : []).entries()) if (typeof o === "string" && o.trim() !== "") {
+			indexMap.set(i, kept.length);
+			kept.push(o.trim());
+		}
+		const options = kept;
+		const rawAnswer = typeof item.answer === "number" && Number.isInteger(item.answer) ? item.answer : -1;
+		const answer = indexMap.get(rawAnswer) ?? -1;
 		const explanation = typeof item.explanation === "string" ? item.explanation.trim() : "";
 		if (prompt === "") {
 			warnings.push(`question ${index + 1}: empty prompt dropped`);
@@ -6359,6 +6854,12 @@ function signalFetch(signal, baseFetch) {
 		signal
 	});
 }
+/** Audit B7: imported bodies are untrusted input landing in the tutor's
+*  context — the in-prompt lesson body and the in-chat course pack are capped
+*  (the panel always renders the full content; oversized packs download from
+*  the panel's course export instead of riding the conversation). */
+const LESSON_BODY_PROMPT_CAP = 24e3;
+const EXPORT_PROMPT_CAP = 1e5;
 /** Total over a missing `meta` (events logged before a presentationMeta existed): renders nothing instead of throwing into the presenter fallback. */
 const textBlocks = (lines) => (lines ?? []).map((text) => ({
 	type: "text",
@@ -6381,6 +6882,8 @@ function studyTools(store, deps = {}) {
 	let pendingDesign = null;
 	/** Which context-budget part of the pending brief the tutor last asked for. */
 	let pendingPart = 1;
+	/** Audit B7: outstanding delete confirmations (courseId → token + expiry). */
+	const pendingDeletes = /* @__PURE__ */ new Map();
 	/** Run a mutating state operation and persist. */
 	const mutate = (fn) => {
 		const result = fn(store.get());
@@ -6417,13 +6920,11 @@ function studyTools(store, deps = {}) {
 			}
 		}
 	} };
-	const importPresent = {
-		presentationMeta: (_args, value) => importLines(value),
-		presentResult: (_args, result) => ({
-			card: "generic",
-			content: textBlocks(result.meta)
-		})
-	};
+	const importPresentationMeta = (_args, value) => importLines(value);
+	const importPresent = { presentResult: (_args, result) => ({
+		card: "generic",
+		content: textBlocks(result.meta)
+	}) };
 	const importMarkdown = defineTool({
 		name: "study_import_markdown",
 		description: "Import pasted markdown as a structured course: H2 (##) becomes a section, H3 (###) a lesson. Use for notes, single long documents, or content fetched by other means.",
@@ -6440,6 +6941,7 @@ function studyTools(store, deps = {}) {
 		},
 		output: {
 			...importOutput,
+			presentationMeta: importPresentationMeta,
 			render: (_args, value) => [{
 				type: "text",
 				text: `Imported course “${value.title}” (${value.sections} sections, ${value.lessons} lessons). First lesson: “${value.firstLessonTitle}” (id ${value.firstLessonId}).`
@@ -6522,6 +7024,10 @@ function studyTools(store, deps = {}) {
 				type: "integer",
 				required: true
 			},
+			designSeq: {
+				type: "integer",
+				description: "Pending-design sequence (audit C29): renders detect stale briefs."
+			},
 			part: {
 				type: "integer",
 				description: "Brief part this call rendered (context-budget batching)."
@@ -6533,17 +7039,23 @@ function studyTools(store, deps = {}) {
 		}
 	}] } };
 	/** Shared render: the brief rides the design_required branch; imported stays the old summary. */
+	/** Audit C29: every brief carries a sequence number; renders of a stale
+	*  value (a newer import replaced the pending design) say so instead of
+	*  presenting the wrong brief. */
+	let designSeq = 0;
+	const setPendingDesign = (pd) => {
+		pendingDesign = pd;
+		designSeq += 1;
+	};
 	const designOrImportedRender = (_args, value) => [{
 		type: "text",
-		text: value.status === "design_required" ? pendingDesign === null ? "Course design required — the brief is no longer pending; call the import tool again to re-fetch it." : renderDesignBrief(pendingDesign, pendingPart) : `Imported course “${value.title}” (${value.sections} sections, ${value.lessons} lessons). First lesson: “${value.firstLessonTitle}” (id ${value.firstLessonId}).`
+		text: value.status === "design_required" ? pendingDesign === null ? "Course design required — the brief is no longer pending; call the import tool again to re-fetch it." : typeof value.designSeq === "number" && value.designSeq !== designSeq ? "This design brief is STALE — a newer import replaced the pending design. Call the import tool again for the fresh brief; do not design against this one." : renderDesignBrief(pendingDesign, pendingPart) : `Imported course “${value.title}” (${value.sections} sections, ${value.lessons} lessons). First lesson: “${value.firstLessonTitle}” (id ${value.firstLessonId}).`
 	}];
-	const designOrImportedPresent = {
-		presentationMeta: (_args, value) => value.status === "design_required" ? designBriefLines(value) : importLines(value),
-		presentResult: (_args, result) => ({
-			card: "generic",
-			content: textBlocks(result.meta)
-		})
-	};
+	const designOrImportedPresentationMeta = (_args, value) => value.status === "design_required" ? designBriefLines(value) : importLines(value);
+	const designOrImportedPresent = { presentResult: (_args, result) => ({
+		card: "generic",
+		content: textBlocks(result.meta)
+	}) };
 	const importFolder = defineTool({
 		name: "study_import_folder",
 		description: "Start importing a local folder: scans markdown, txt, html, Jupyter notebooks, rst/Rmd/org/adoc, and 30+ code file types (PDF/PPTX unsupported), then returns a design brief — the TUTOR designs the course structure from it and applies the result with study_apply_design (fully offline). Re-importing an already-imported path returns the existing course directly.",
@@ -6564,6 +7076,7 @@ function studyTools(store, deps = {}) {
 		},
 		output: {
 			...designOrImportedOutput,
+			presentationMeta: designOrImportedPresentationMeta,
 			render: designOrImportedRender
 		},
 		async execute(args) {
@@ -6578,10 +7091,11 @@ function studyTools(store, deps = {}) {
 			const docs = inventory.docs;
 			if (docs.length === 0) throw new Error(`lookatstudy-plugin: no importable files found in ${args.path}`);
 			const title = args.title ?? basename(args.path.replaceAll("\\", "/"));
-			pendingDesign = buildPendingDesignFromFolder(args.path, title, docs, {
+			const pd = buildPendingDesignFromFolder(args.path, title, docs, {
 				translations: inventory.translations,
 				images: inventory.images
 			});
+			setPendingDesign(pd);
 			const localImages = /* @__PURE__ */ new Map();
 			for (const img of inventory.images) {
 				if (img.absPath === "" || img.source === "pdf_page") continue;
@@ -6591,9 +7105,9 @@ function studyTools(store, deps = {}) {
 					localImages.set(img.path, `data:${img.mime};base64,${buf.toString("base64")}`);
 				} catch {}
 			}
-			if (localImages.size > 0) pendingDesign.localImages = localImages;
+			if (localImages.size > 0) pd.localImages = localImages;
 			pendingPart = part;
-			return designRequiredValue(pendingDesign, part);
+			return designRequiredValue(pd, part);
 		},
 		timeoutMs: 6e4,
 		presentCall: (args) => ({
@@ -6611,6 +7125,7 @@ function studyTools(store, deps = {}) {
 		pd.partCount = partCount;
 		return {
 			status: "design_required",
+			designSeq,
 			repo: pd.repo,
 			branch: pd.branch,
 			courseTitle: partCount > 1 ? `${pd.courseTitle} (part ${part})` : pd.courseTitle,
@@ -6626,18 +7141,20 @@ function studyTools(store, deps = {}) {
 	*  study_import_url's github branch (routing is the only difference). */
 	const runGithubImport = async (url, branch, exec, part = 1) => {
 		const { owner, repo } = parseGithubUrl(url);
+		const canonicalRef = `https://github.com/${owner}/${repo}`;
 		const resolvedBranch = branch ?? "main";
 		const fetchFn = signalFetch(exec.signal, baseFetch);
-		const existing = part <= 1 ? store.get().courses.find((c) => c.source === "github" && c.sourceRef === url) : void 0;
+		const existing = part <= 1 ? store.get().courses.find((c) => c.source === "github" && c.sourceRef === canonicalRef) : void 0;
 		if (existing !== void 0) return {
 			status: "imported",
 			...toImportValue(existing)
 		};
 		const inventory = await fetchRepoInventory(owner, repo, resolvedBranch, fetchFn, void 0, exec.signal);
-		pendingDesign = buildPendingDesign(url, owner, repo, inventory, await fetchFileOutlines(inventory.fileList.map((f) => f.path), owner, repo, inventory.branch, fetchFn, void 0, exec.signal));
-		if (pendingDesign.files.length === 0) throw new Error("lookatstudy-plugin: course files were discovered but no outlines could be fetched (CDN unreachable?)");
+		const pd = buildPendingDesign(canonicalRef, owner, repo, inventory, await fetchFileOutlines(inventory.fileList.map((f) => f.path), owner, repo, inventory.branch, fetchFn, void 0, exec.signal));
+		setPendingDesign(pd);
+		if (pd.files.length === 0) throw new Error("lookatstudy-plugin: course files were discovered but no outlines could be fetched (CDN unreachable?)");
 		pendingPart = part;
-		return designRequiredValue(pendingDesign, part);
+		return designRequiredValue(pd, part);
 	};
 	const importGithub = defineTool({
 		name: "study_import_github",
@@ -6659,6 +7176,7 @@ function studyTools(store, deps = {}) {
 		},
 		output: {
 			...designOrImportedOutput,
+			presentationMeta: designOrImportedPresentationMeta,
 			render: designOrImportedRender
 		},
 		execute: (args, exec) => runGithubImport(args.url, args.branch, exec, args.part ?? 1),
@@ -6686,6 +7204,7 @@ function studyTools(store, deps = {}) {
 		},
 		output: {
 			...designOrImportedOutput,
+			presentationMeta: designOrImportedPresentationMeta,
 			render: designOrImportedRender
 		},
 		async execute(args, exec) {
@@ -6711,26 +7230,28 @@ function studyTools(store, deps = {}) {
 
 ${p.text}`));
 					if (docs.length === 0) throw new Error("lookatstudy-plugin: CC subtitle text was empty after chunking");
-					pendingDesign = buildPendingDesignFromUrl(identity, cc.title, docs);
+					const pd = buildPendingDesignFromUrl(identity, cc.title, docs);
+					setPendingDesign(pd);
 					pendingPart = part;
-					return designRequiredValue(pendingDesign, part);
+					return designRequiredValue(pd, part);
 				}
 				throw new Error(`lookatstudy-plugin: ${route.url} 是视频链接(YouTube/抖音需要 yt-dlp,插件环境不可用)。请让学习者把字幕/文稿粘贴进来,用 study_import_markdown 导入。`);
 			}
 			if (route.flavor === "arxiv") {
+				const part = args.part ?? 1;
+				const existingEarly = part <= 1 ? store.get().courses.find((c) => c.source === "url" && c.sourceRef === route.url) : void 0;
+				if (existingEarly !== void 0) return {
+					status: "imported",
+					...toImportValue(existingEarly)
+				};
 				const text = parsePdfText(await downloadToBuffer(route.pdfUrl, fetchFn, { signal: exec.signal }));
 				if (!text || text.replace(/\s+/g, "").length < 200) throw new Error("lookatstudy-plugin: arXiv PDF has no extractable text layer (scanned/image PDF) — try the HTML version or paste the abstract as markdown");
 				const docs = prepareSingleDoc(`arxiv-${route.arxivId}`, `# arXiv:${route.arxivId}\n\n${text}`);
 				if (docs.length === 0) throw new Error("lookatstudy-plugin: arXiv PDF text was empty after chunking");
-				const part = args.part ?? 1;
-				const existing = part <= 1 ? store.get().courses.find((c) => c.source === "url" && c.sourceRef === route.url) : void 0;
-				if (existing !== void 0) return {
-					status: "imported",
-					...toImportValue(existing)
-				};
-				pendingDesign = buildPendingDesignFromUrl(route.url, `arXiv:${route.arxivId}`, docs);
+				const pd = buildPendingDesignFromUrl(route.url, `arXiv:${route.arxivId}`, docs);
+				setPendingDesign(pd);
 				pendingPart = part;
-				return designRequiredValue(pendingDesign, part);
+				return designRequiredValue(pd, part);
 			}
 			const part = args.part ?? 1;
 			const identity = normalizeUrlIdentity(route.url);
@@ -6739,16 +7260,18 @@ ${p.text}`));
 				status: "imported",
 				...toImportValue(existing)
 			};
-			const resp = await fetchFn(route.url, { headers: { "User-Agent": "Mozilla/5.0 (compatible; LookatStudyPlugin/0.9)" } });
-			if (!resp.ok) throw new Error(`lookatstudy-plugin: page fetch failed (HTTP ${resp.status}): ${route.url}`);
-			const html = await resp.text();
+			const html = await guardedFetchText(route.url, {
+				fetchImpl: fetchFn,
+				headers: { "User-Agent": "Mozilla/5.0 (compatible; LookatStudyPlugin/0.9)" }
+			});
 			const article = extractArticle(html, route.url);
 			if (article === null) throw new Error(`lookatstudy-plugin: ${route.url} does not look like an article page (no readable body found) — login walls, indexes and app shells are rejected honestly rather than imported as noise`);
 			const docs = prepareSingleDoc(article.title.slice(0, 60), article.markdown);
 			if (docs.length === 0) throw new Error("lookatstudy-plugin: article body was empty after chunking");
-			pendingDesign = buildPendingDesignFromUrl(identity, article.title, docs);
+			const pd = buildPendingDesignFromUrl(identity, article.title, docs);
+			setPendingDesign(pd);
 			pendingPart = part;
-			return designRequiredValue(pendingDesign, part);
+			return designRequiredValue(pd, part);
 		},
 		timeoutMs: 18e4,
 		presentCall: (args) => ({
@@ -6833,11 +7356,11 @@ ${p.text}`));
 						required: true
 					},
 					firstLessonId: {
-						type: "string",
+						oneOf: [{ type: "string" }, { type: "null" }],
 						required: true
 					},
 					firstLessonTitle: {
-						type: "string",
+						oneOf: [{ type: "string" }, { type: "null" }],
 						required: true
 					},
 					droppedLessons: {
@@ -6894,7 +7417,7 @@ ${p.text}`));
 					created: state.courses.length > before
 				};
 			});
-			pendingDesign = null;
+			setPendingDesign(null);
 			pendingPart = 1;
 			return {
 				...value,
@@ -6908,7 +7431,6 @@ ${p.text}`));
 			title: "Apply course design",
 			kind: "edit"
 		}),
-		presentationMeta: (_args, value) => [...importLines(value), ...value.droppedLessons > 0 ? [`${value.droppedLessons} dropped (files outside the brief)`] : []],
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7100,6 +7622,7 @@ ${p.text}`));
 			description: "Course id from an import result or study_courses."
 		} },
 		output: {
+			presentationMeta: (_args, value) => mapLines(value),
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7202,7 +7725,6 @@ ${p.text}`));
 			title: `Course map: ${args.courseId}`,
 			kind: "read"
 		}),
-		presentationMeta: (_args, value) => mapLines(value),
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7419,12 +7941,13 @@ ${p.text}`));
 			},
 			render: (_args, value) => [{
 				type: "text",
-				text: `Lesson “${value.title}” — ${value.courseTitle} / ${value.sectionTitle}\nstatus ${value.status}${value.masteryPct === null ? "" : `, mastery ${value.masteryPct}%`}, ${value.correctCount}/${value.attempts} answers correct\nstrategy: ${value.strategy}\n` + (value.concepts === null ? "" : `concepts: ${value.concepts.map((c) => `${c.title} ${c.masteryPct}%${c.weak ? " ⚡weak" : ""}`).join(" · ")}\n`) + (value.examGuide === void 0 ? "" : `exam: ${value.examGuide.questionCount} questions (${value.examGuide.kcCount} KCs); per-question time ${value.examGuide.timeLimitRule}; stars ${value.examGuide.starsRule}\n`) + `starters: ${value.starters.map((s) => s.label).join(" / ")}\n\n${value.body}${value.nextLessonId === null ? "\n\n(this is the last lesson)" : `\n\n(next lesson: ${value.nextLessonId})`}`
+				text: `Lesson “${value.title}” — ${value.courseTitle} / ${value.sectionTitle}\nstatus ${value.status}${value.masteryPct === null ? "" : `, mastery ${value.masteryPct}%`}, ${value.correctCount}/${value.attempts} answers correct\nstrategy: ${value.strategy}\n` + (value.concepts === null ? "" : `concepts: ${value.concepts.map((c) => `${c.title} ${c.masteryPct}%${c.weak ? " ⚡weak" : ""}`).join(" · ")}\n`) + (value.examGuide === void 0 ? "" : `exam: ${value.examGuide.questionCount} questions (${value.examGuide.kcCount} KCs); per-question time ${value.examGuide.timeLimitRule}; stars ${value.examGuide.starsRule}\n`) + `starters: ${value.starters.map((s) => s.label).join(" / ")}\n\n` + (value.body.length > LESSON_BODY_PROMPT_CAP ? `${value.body.slice(0, LESSON_BODY_PROMPT_CAP)}\n…(lesson body truncated at ${LESSON_BODY_PROMPT_CAP} chars — the full body renders in the study panel)` : value.body) + `${value.nextLessonId === null ? "\n\n(this is the last lesson)" : `\n\n(next lesson: ${value.nextLessonId})`}`
 			}]
 		},
 		async execute(args) {
 			return mutate((state) => {
-				const { ref } = attemptLesson(state, args.lessonId, /* @__PURE__ */ new Date());
+				const ref = findLesson(state, args.lessonId);
+				if (ref.lesson.kind !== "exam") attemptLesson(state, args.lessonId, /* @__PURE__ */ new Date());
 				state.focus = { lessonId: ref.lesson.id };
 				return toLessonValue(ref, state);
 			});
@@ -7467,6 +7990,7 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => [answerLine(value)],
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7577,7 +8101,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Record answer (${args.correct ? "correct" : "incorrect"}): ${args.lessonId}`
 		}),
-		presentationMeta: (_args, value) => [answerLine(value)],
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7604,6 +8127,7 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => [`${value.stars}★`],
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7669,7 +8193,7 @@ ${p.text}`));
 				text: `Exam result: ${value.stars}★ (best ${value.bestStars}★, attempt ${value.attempts}). Offer the learner: ${value.actions.map((a) => a.label).join(" / ")}.` + (value.nextLessonId === null ? "" : ` Next topic: ${value.nextLessonId}.`)
 			}]
 		},
-		execute(args) {
+		async execute(args) {
 			return mutate((state) => {
 				const r = recordExamResult(state, args.lessonId, args.correct, args.total);
 				const actions = getPostQuizActions({
@@ -7706,7 +8230,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Exam result: ${args.correct}/${args.total}`
 		}),
-		presentationMeta: (_args, value) => [`${value.stars}★`],
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7714,7 +8237,7 @@ ${p.text}`));
 	});
 	const examBankApplyTool = defineTool({
 		name: "study_exam_bank_apply",
-		description: "Author the question bank for a section exam node (exam-v2). The exam page asks for a bank when the learner opens it; call this once with the full multiple-choice set. Question count follows planExamQuota on the section's KC union (clamp 5-15); each kcTitle MUST be one of the section lessons' concept titles (anti-hallucination — unknown KC titles are rejected; read the section with study_view first). On a validation error the tutor fixes the bank and simply calls again. The learner answers in the exam page; grading is automatic (unanswered = wrong, best-of stars kept).",
+		description: "Author the question bank for a section exam node (exam-v2). The exam page asks for a bank when the learner opens it; call this once with the full multiple-choice set. Question count follows planExamQuota on the section's KC union (clamp 5-15); each kcTitle MUST be one of the section lessons' concept titles (anti-hallucination — unknown KC titles are rejected; read the section lessons with study_lesson first). On a validation error the tutor fixes the bank and simply calls again. The learner answers in the exam page; grading is automatic (unanswered = wrong, best-of stars kept).",
 		parameters: {
 			lessonId: {
 				type: "string",
@@ -7758,6 +8281,7 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => [`${value.questionCount}Q`],
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7785,7 +8309,7 @@ ${p.text}`));
 				text: `Exam bank ready: ${value.questionCount} questions across ${value.kcCount} knowledge components. The exam page settles into its ready state — tell the learner to hit 开始考试.`
 			}]
 		},
-		execute(args) {
+		async execute(args) {
 			return mutate((state) => {
 				const r = applyExamBank(state, args.lessonId, args.questions, /* @__PURE__ */ new Date());
 				return {
@@ -7800,7 +8324,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Exam bank: ${Array.isArray(args.questions) ? String(args.questions.length) : "?"} questions`
 		}),
-		presentationMeta: (_args, value) => [`${value.questionCount}Q`],
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7815,6 +8338,7 @@ ${p.text}`));
 			description: "Lesson to complete."
 		} },
 		output: {
+			presentationMeta: (_args, value) => completeLines(value),
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7869,7 +8393,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Complete lesson: ${args.lessonId}`
 		}),
-		presentationMeta: (_args, value) => completeLines(value),
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7883,6 +8406,7 @@ ${p.text}`));
 			description: "Restrict to one course; omit to scan all courses."
 		} },
 		output: {
+			presentationMeta: (_args, value) => dueLines(value),
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -7944,7 +8468,6 @@ ${p.text}`));
 			title: "List due reviews",
 			kind: "search"
 		}),
-		presentationMeta: (_args, value) => dueLines(value),
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -7967,6 +8490,7 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => [reviewLine(value)],
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -8024,7 +8548,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Record review (quality ${args.quality}): ${args.lessonId}`
 		}),
-		presentationMeta: (_args, value) => [reviewLine(value)],
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks(result.meta)
@@ -8032,37 +8555,86 @@ ${p.text}`));
 	});
 	const deleteCourseTool = defineTool({
 		name: "study_delete_course",
-		description: "Delete one course and all its progress. Ask the learner before calling.",
-		parameters: { courseId: {
-			type: "string",
-			required: true,
-			description: "Course to delete."
-		} },
+		description: "Delete one course and all its progress — TWO steps by design (audit B7): a call without confirmToken only queues the deletion and returns the token; ask the learner, and re-call with the token verbatim to execute. Deleted courses land in the restorable trash (study_restore_course), so nothing is gone forever.",
+		parameters: {
+			courseId: {
+				type: "string",
+				required: true,
+				description: "Course to delete."
+			},
+			confirmToken: {
+				type: "string",
+				description: "The token from the confirm_required result, echoed verbatim after the learner confirms."
+			}
+		},
 		output: {
 			schema: {
 				type: "object",
 				additionalProperties: false,
 				properties: {
-					deletedCourseId: {
+					status: {
+						type: "string",
+						required: true,
+						description: "confirm_required | deleted"
+					},
+					courseId: {
 						type: "string",
 						required: true
 					},
+					title: {
+						type: "string",
+						description: "Present on confirm_required."
+					},
+					lessons: {
+						type: "integer",
+						description: "Present on confirm_required."
+					},
+					confirmToken: {
+						type: "string",
+						description: "Present on confirm_required — echo it in the second call."
+					},
+					deletedCourseId: {
+						type: "string",
+						description: "Present on deleted."
+					},
 					remaining: {
 						type: "integer",
-						required: true
+						description: "Present on deleted."
 					}
 				}
 			},
-			render: (_args, value) => [{
+			render: (_args, value) => value.status === "confirm_required" ? [{
+				type: "text",
+				text: `Course “${value.title}” (${value.lessons} lessons, all progress) is queued for deletion. Ask the learner; on their explicit confirmation re-call study_delete_course with the confirmToken. Deletions land in the restorable trash (study_restore_course).`
+			}] : [{
 				type: "text",
-				text: `Deleted course ${value.deletedCourseId}. ${value.remaining} courses remain.`
+				text: `Deleted course ${value.deletedCourseId}. ${value.remaining} courses remain. Recoverable from the trash via study_restore_course.`
 			}]
 		},
 		async execute(args) {
 			return mutate((state) => {
-				findCourse(state, args.courseId);
+				const course = findCourse(state, args.courseId);
+				const pending = pendingDeletes.get(args.courseId);
+				const now = Date.now();
+				if (typeof args.confirmToken !== "string" || pending === void 0 || pending.token !== args.confirmToken || pending.expires < now) {
+					const token = randomBytes(8).toString("hex");
+					pendingDeletes.set(args.courseId, {
+						token,
+						expires: now + 3e5
+					});
+					return {
+						status: "confirm_required",
+						courseId: course.id,
+						title: course.title,
+						lessons: course.sections.flatMap((s) => s.lessons).length,
+						confirmToken: token
+					};
+				}
+				pendingDeletes.delete(args.courseId);
 				deleteCourse(state, args.courseId);
 				return {
+					status: "deleted",
+					courseId: args.courseId,
 					deletedCourseId: args.courseId,
 					remaining: state.courses.length
 				};
@@ -8075,6 +8647,59 @@ ${p.text}`));
 			rawInput: args.courseId
 		})
 	});
+	const restoreCourseTool = defineTool({
+		name: "study_restore_course",
+		description: "Restore a deleted course from the trash — progress, notes, exam banks, and thread groups all come back. A miss lists the restorable ids in its error. The trash keeps the 10 most recent deletes.",
+		parameters: { courseId: {
+			type: "string",
+			required: true,
+			description: "Trashed course id to restore."
+		} },
+		output: {
+			schema: {
+				type: "object",
+				additionalProperties: false,
+				properties: {
+					restoredCourseId: {
+						type: "string",
+						required: true
+					},
+					title: {
+						type: "string",
+						required: true
+					},
+					lessonCount: {
+						type: "integer",
+						required: true
+					},
+					remainingTrash: {
+						type: "integer",
+						required: true
+					}
+				}
+			},
+			render: (_args, value) => [{
+				type: "text",
+				text: `Restored course “${value.title}” from the trash (${value.lessonCount} lessons back; ${value.remainingTrash} still trashed).`
+			}]
+		},
+		async execute(args) {
+			return mutate((state) => {
+				const course = restoreCourse(state, args.courseId);
+				return {
+					restoredCourseId: course.id,
+					title: course.title,
+					lessonCount: course.sections.flatMap((s) => s.lessons).length,
+					remainingTrash: (state.trash ?? []).length
+				};
+			});
+		},
+		presentCall: (args) => ({
+			card: "generic",
+			title: `Restore course: ${args.courseId}`,
+			kind: "read"
+		})
+	});
 	const defineConceptsTool = defineTool({
 		name: "study_define_concepts",
 		description: "Define a lesson's knowledge components — the 2–7 independently quizzable units mastery tracks. Call this the FIRST time you teach a lesson, derived from its content. Titles ≤10 characters; descriptions say what understanding this concept means. Lesson mastery is the WEAKEST concept; cover weak ones (⚡) first when quizzing.",
@@ -8178,6 +8803,12 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => ({
+				kind: "study-proposal-created",
+				proposalId: value.proposalId,
+				lessonTitle: value.lessonTitle,
+				rationale: value.rationale
+			}),
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -8226,12 +8857,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Propose mastery: ${args.lessonId}`
 		}),
-		presentationMeta: (_args, value) => ({
-			kind: "study-proposal-created",
-			proposalId: value.proposalId,
-			lessonTitle: value.lessonTitle,
-			rationale: value.rationale
-		}),
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks([`🎓 Proposed mastery for “${result.meta?.lessonTitle ?? "lesson"}”: ${result.meta?.rationale ?? ""}`])
@@ -8253,6 +8878,11 @@ ${p.text}`));
 			}
 		},
 		output: {
+			presentationMeta: (_args, value) => ({
+				kind: "study-proposal-resolved",
+				proposalId: value.proposalId,
+				status: value.status
+			}),
 			schema: {
 				type: "object",
 				additionalProperties: false,
@@ -8291,11 +8921,6 @@ ${p.text}`));
 			card: "generic",
 			title: `Resolve proposal: ${args.proposalId}`
 		}),
-		presentationMeta: (_args, value) => ({
-			kind: "study-proposal-resolved",
-			proposalId: value.proposalId,
-			status: value.status
-		}),
 		presentResult: (_args, result) => ({
 			card: "generic",
 			content: textBlocks([`Proposal ${result.meta?.proposalId ?? "?"} ${result.meta?.status ?? ""}.`])
@@ -8444,7 +9069,7 @@ ${p.text}`));
 				text: `Translation stored for “${value.lessonTitle}” (${value.lang}, ${value.chars} chars) — the blackboard now interleaves the original with it.`
 			}]
 		},
-		execute(args) {
+		async execute(args) {
 			return mutate((state) => {
 				const ref = findLesson(state, args.lessonId);
 				if (args.markdown.trim() === "") throw new Error("lookatstudy-plugin: translation markdown is empty");
@@ -8534,7 +9159,7 @@ ${p.text}`));
 				text: `Consolidation window since ${value.since ?? "(beginning)"}: ${value.counts.friction} friction, ${value.counts.practice} practice entries.` + (value.entries.length === 0 ? " Nothing to distill — tell the learner their memory is up to date." : " Distill these into 0–3 study_remember writes (global / pattern / lesson), then summarize in one line.")
 			}]
 		},
-		execute() {
+		async execute() {
 			return mutate((state) => {
 				const window = gatherConsolidationWindow(state);
 				const watermark = (/* @__PURE__ */ new Date()).toISOString();
@@ -8584,26 +9209,30 @@ ${p.text}`));
 					markdown: {
 						type: "string",
 						required: true
+					},
+					truncated: {
+						type: "boolean",
+						description: "true when the in-chat markdown was capped — the complete pack downloads from the study panel instead."
 					}
 				}
 			},
 			render: (_args, value) => [{
 				type: "text",
-				text: `Course pack “${value.title}” — ${value.lessonCount} lessons, ${value.chars} chars. Give the learner the markdown below (copyable); importing it goes through study_import_markdown.
-
-` + value.markdown
+				text: `Course pack “${value.title}” — ${value.lessonCount} lessons, ${value.chars} chars. ` + (value.truncated === true ? "The pack exceeds the in-chat cap — only its head is shown; the complete file downloads from the study panel (course card → 导出课程包).\n\n" : "Give the learner the markdown below (copyable); importing it goes through study_import_markdown.\n\n") + value.markdown
 			}]
 		},
-		execute(args) {
+		async execute(args) {
 			const course = findCourse(store.get(), args.courseId);
-			const markdown = courseToPackMarkdown(course);
+			const full = courseToPackMarkdown(course);
 			const lessonCount = course.sections.reduce((n, sec) => n + sec.lessons.filter((l) => l.kind !== "exam").length, 0);
+			const truncated = full.length > EXPORT_PROMPT_CAP;
 			return {
 				courseId: course.id,
 				title: course.title,
 				lessonCount,
-				chars: markdown.length,
-				markdown
+				chars: full.length,
+				markdown: truncated ? `${full.slice(0, EXPORT_PROMPT_CAP)}\n…(pack truncated at ${EXPORT_PROMPT_CAP} chars)` : full,
+				truncated
 			};
 		},
 		isConcurrencySafe: () => true,
@@ -8936,24 +9565,28 @@ ${p.text}`));
 			title: `Generate practice card: ${typeof args.title === "string" ? args.title : "练习"} (${args.questions?.length ?? 0} questions)`
 		})
 	});
-	/** Record one sanitized artifact on its lesson (shared by the artifact tools). */
-	const recordSanitized = (lessonId, result, type) => mutate((state) => {
-		const id = artifactId(type, result.data);
-		const stored = recordArtifact(state, lessonId, {
-			id,
-			artifactType: type,
-			title: typeof result.data.title === "string" ? result.data.title : type,
-			createdAt: (/* @__PURE__ */ new Date()).toISOString(),
-			hash: id.slice(type.length + 1),
-			data: result.data
+	/** Record one sanitized artifact on its lesson (shared by the artifact tools).
+	*  C23: generic over the sanitized shape so each tool's execute returns its
+	*  own literal (checked against the tool's inferred output type). */
+	const recordSanitized = async (lessonId, result, type) => {
+		return await mutate((state) => {
+			const id = artifactId(type, result.data);
+			const stored = recordArtifact(state, lessonId, {
+				id,
+				artifactType: type,
+				title: typeof result.data.title === "string" ? result.data.title : type,
+				createdAt: (/* @__PURE__ */ new Date()).toISOString(),
+				hash: id.slice(type.length + 1),
+				data: result.data
+			});
+			return {
+				artifactType: type,
+				artifactId: stored.artifact.id,
+				created: stored.created,
+				...stored.artifact.data
+			};
 		});
-		return {
-			artifactType: type,
-			artifactId: stored.artifact.id,
-			created: stored.created,
-			...stored.artifact.data
-		};
-	});
+	};
 	return [
 		importMarkdown,
 		importFolder,
@@ -8970,6 +9603,7 @@ ${p.text}`));
 		dueReviewsTool,
 		recordReviewTool,
 		deleteCourseTool,
+		restoreCourseTool,
 		defineConceptsTool,
 		proposeMasteryTool,
 		resolveProposalTool,
@@ -9475,6 +10109,18 @@ function soulText(state) {
 	return state.active ? SOULS[state.mode] : "";
 }
 /**
+* Audit B7: imported titles, friction summaries, and proposal rationales are
+* untrusted text (repo names, article titles, repo-derived content) landing
+* in the per-turn system prompt — flatten to one line, strip control
+* characters, and cap the length so nothing can forge prompt structure
+* mid-section (newlines + fake section markers).
+*/
+function sanitizePromptText(value, max = 120) {
+	if (value === null || value === void 0) return "";
+	const flat = value.replace(/[\u0000-\u001f\u007f]+/g, " ").replace(/\s+/g, " ").trim();
+	return flat.length > max ? `${flat.slice(0, max)}…` : flat;
+}
+/**
 * Render the learner snapshot (LookatStudy's per-turn volatile tail) as the
 * dynamic runtime context: focus, strategy band, concepts with weak flags,
 * recent friction, memory slots, due count, pending proposal. Dormant
@@ -9485,18 +10131,18 @@ function snapshotSectionText(state) {
 	const snap = learnerSnapshot(state, /* @__PURE__ */ new Date());
 	if (snap.focus === null) return snap.dueCount === 0 ? "" : `【学习者当前状态】\n今日待复习: ${snap.dueCount} 项(study_due_reviews)`;
 	const lines = ["【学习者当前状态】"];
-	lines.push(`焦点: ${snap.focus.courseTitle} [courseId ${snap.focus.courseId}] / ${snap.focus.lessonTitle} [lessonId ${snap.focus.lessonId}](${snap.focus.status}${snap.focus.masteryPct === null ? "" : `, 掌握度 ${snap.focus.masteryPct}%`})`);
+	lines.push(`焦点: ${sanitizePromptText(snap.focus.courseTitle)} [courseId ${snap.focus.courseId}] / ${sanitizePromptText(snap.focus.lessonTitle)} [lessonId ${snap.focus.lessonId}](${snap.focus.status}${snap.focus.masteryPct === null ? "" : `, 掌握度 ${snap.focus.masteryPct}%`})`);
 	if (snap.strategy !== null) lines.push(`教学策略: ${snap.strategy}`);
-	if (snap.concepts !== null && snap.concepts.length > 0) lines.push(`知识点(课级掌握度 = 最薄弱知识点): ${snap.concepts.map((c) => `${c.title} ${c.masteryPct}%${c.weak ? " ⚡薄弱" : ""}`).join(" · ")}`);
-	if (snap.friction.length > 0) lines.push(`近期卡点(共 ${snap.friction.length} 条): ${snap.friction.map((f) => `${f.category}${f.summary === null ? "" : `: ${f.summary}`}`).join(" / ")}`);
+	if (snap.concepts !== null && snap.concepts.length > 0) lines.push(`知识点(课级掌握度 = 最薄弱知识点): ${snap.concepts.map((c) => `${sanitizePromptText(c.title)} ${c.masteryPct}%${c.weak ? " ⚡薄弱" : ""}`).join(" · ")}`);
+	if (snap.friction.length > 0) lines.push(`近期卡点(共 ${snap.friction.length} 条): ${snap.friction.map((f) => `${f.category}${f.summary === null ? "" : `: ${sanitizePromptText(f.summary, 80)}`}`).join(" / ")}`);
 	const memory = [
-		snap.memoryGlobal === null ? "" : `整体: ${snap.memoryGlobal}`,
-		snap.memoryLesson === null ? "" : `本课: ${snap.memoryLesson}`,
-		snap.memoryPattern === null ? "" : `模式: ${snap.memoryPattern}`
+		snap.memoryGlobal === null ? "" : `整体: ${sanitizePromptText(snap.memoryGlobal, 200)}`,
+		snap.memoryLesson === null ? "" : `本课: ${sanitizePromptText(snap.memoryLesson, 200)}`,
+		snap.memoryPattern === null ? "" : `模式: ${sanitizePromptText(snap.memoryPattern, 200)}`
 	].filter(Boolean);
 	if (memory.length > 0) lines.push(`记忆: ${memory.join(" | ")}`);
 	if (snap.dueCount > 0) lines.push(`今日待复习: ${snap.dueCount} 项`);
-	if (snap.pendingProposal !== null) lines.push(`待决提案 ${snap.pendingProposal.id}: ${snap.pendingProposal.rationale}(等学习者表态)`);
+	if (snap.pendingProposal !== null) lines.push(`待决提案 ${snap.pendingProposal.id}: ${sanitizePromptText(snap.pendingProposal.rationale, 160)}(等学习者表态)`);
 	const focusCourse = state.courses.find((c) => c.id === snap.focus?.courseId);
 	if (focusCourse?.languageTarget != null && focusCourse.languageTarget !== "") {
 		const t = localeToLanguageName(focusCourse.languageTarget);