@gobing-ai/knowledge-kit 0.0.19 → 0.0.22

package/plugins/publishings/podcast-pub/dist/index.js

@@ -21746,7 +21746,7 @@ var init_file_system_node = () => {};
 // ../../plugins/publishings/podcast-pub/src/index.ts
 import { readFileSync as readFileSync2 } from "fs";
 import { readFile } from "fs/promises";
-import { dirname as dirname2 } from "path";
+import { basename, dirname as dirname2, extname as extname2 } from "path";
 import { parseArgs } from "util";
 
 // ../../packages/kk-core/src/kinds.ts
@@ -21783,6 +21783,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21811,14 +21827,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21844,41 +21861,82 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 // ../../packages/kk-core/src/render-md.ts
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
-class FakeFileCliTransport {
-  kind = "file-cli";
-  callLogs;
+class FakeTransportCore {
+  callLogs = [];
   nextResult;
-  constructor() {
-    this.callLogs = [];
-  }
   setNextResult(result) {
     this.nextResult = result;
   }
-  async publish(payload) {
+  async publish(payload, defaultResult) {
     this.callLogs.push({
       timestamp: new Date().toISOString(),
       payload
     });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-file-cli",
       url: "https://example.com/published-post",
       id: "fake-id-123",
       message: "Published offline via FakeFileCliTransport"
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 
+class FakeBrowserTransport {
+  kind = "browser";
+  driver;
+  core = new FakeTransportCore;
+  constructor(driver = "agent") {
+    this.driver = driver;
+  }
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
+      ok: true,
+      target: "fake-browser",
+      url: "https://example.com/browser-draft",
+      id: "fake-browser-id-123",
+      message: "Published offline via FakeBrowserTransport",
+      metadata: { driver: this.driver }
+    });
+  }
+  getCallLogs() {
+    return this.core.getCallLogs();
+  }
+  reset() {
+    this.core.reset();
+  }
+}
+
+// ../../plugins/publishings/podcast-pub/src/map.ts
+import { extname } from "path";
+
 // ../../plugins/publishings/podcast-pub/src/show-notes.ts
 function escapeHtml(value) {
   return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;");
@@ -21942,27 +22000,37 @@ function computeAudioOffsets(docs, segments) {
     return fallback();
   return starts;
 }
+var isHttpUrl = (u) => /^https?:\/\//i.test(u.trim());
+var TIMELINE_STYLE = `<style>
+.kk-tl{margin:1em 0}
+.kk-tl-row{display:flex;gap:12px;padding:10px 0;border-bottom:1px solid rgba(128,128,128,.25)}
+.kk-tl-t{flex:0 0 56px;font-variant-numeric:tabular-nums;font-weight:700;color:#0969da}
+.kk-tl-body{flex:1;min-width:0}
+.kk-tl-title{font-weight:600}
+.kk-tl-brief{margin:4px 0 0;color:#666;font-size:.95em}
+</style>`;
+var TIMELINE_TAG = /^<\/?(?:div|p|a)(?:\s+(?:class="kk-tl(?:-[a-z]+)?"|href="https?:\/\/[^"<>\s]*"|target="_blank"|rel="noopener"))*\s*>$/;
+function isGeneratedTimeline(block) {
+  const rest = block.replace(TIMELINE_STYLE, "");
+  if (rest.includes("<style") || rest.includes("<!--"))
+    return false;
+  return (rest.match(/<[^>]*>/g) ?? []).every((tag) => TIMELINE_TAG.test(tag)) && !/<(?![^>]*>)/.test(rest);
+}
 function renderTimelineHtml(docs, offsets, articleUrl) {
   const rows = docs.map((d, i) => {
     const title = escapeHtml(d.title ?? `\u6761\u76EE ${i + 1}`);
     const brief = escapeHtml(itemBrief(d));
     const at = formatOffset(offsets[i] ?? Number.NaN);
-    const link = d.sourceUri ? ` <a href="${escapeHtml(d.sourceUri)}" target="_blank" rel="noopener">\u6765\u6E90</a>` : "";
+    const link = d.sourceUri && isHttpUrl(d.sourceUri) ? ` <a href="${escapeHtml(d.sourceUri)}" target="_blank" rel="noopener">\u6765\u6E90</a>` : "";
     return `
     <div class="kk-tl-row"><div class="kk-tl-t">${at}</div><div class="kk-tl-body"><div class="kk-tl-title">${i + 1}. ${title}${link}</div><p class="kk-tl-brief">${brief}</p></div></div>`;
   }).join("");
+  const articleTail = isHttpUrl(articleUrl) ? `<p>\u5B8C\u6574\u56FE\u6587\u7248\uFF1A<a href="${escapeHtml(articleUrl)}" target="_blank" rel="noopener">${escapeHtml("\u672C\u671F\u5B8C\u6574\u6587\u7AE0")}</a></p>` : `<p>${escapeHtml("\u672C\u671F\u5B8C\u6574\u6587\u7AE0")}</p>`;
   return `<!--kk:timeline-->
-<style>
-.kk-tl{margin:1em 0}
-.kk-tl-row{display:flex;gap:12px;padding:10px 0;border-bottom:1px solid rgba(128,128,128,.25)}
-.kk-tl-t{flex:0 0 56px;font-variant-numeric:tabular-nums;font-weight:700;color:#0969da}
-.kk-tl-body{flex:1;min-width:0}
-.kk-tl-title{font-weight:600}
-.kk-tl-brief{margin:4px 0 0;color:#666;font-size:.95em}
-</style>
+${TIMELINE_STYLE}
 <div class="kk-tl">${rows}
 </div>
-<p>\u5B8C\u6574\u56FE\u6587\u7248\uFF1A<a href="${escapeHtml(articleUrl)}" target="_blank" rel="noopener">${escapeHtml("\u672C\u671F\u5B8C\u6574\u6587\u7AE0")}</a></p>
+${articleTail}
 <!--/kk:timeline-->`;
 }
 function renderShowNotesHtml(markdown) {
@@ -21976,6 +22044,15 @@ function renderShowNotesHtml(markdown) {
       paragraph = [];
     }
   };
+  const escapeBufferedTimeline = () => {
+    for (const l of timeline) {
+      const t = l.trim();
+      if (t.length > 0)
+        paragraph.push(t);
+    }
+    timeline.length = 0;
+    flush();
+  };
   for (const rawLine of markdown.split(`
 `)) {
     const line = rawLine.trim();
@@ -21987,6 +22064,14 @@ function renderShowNotesHtml(markdown) {
     if (inTimeline) {
       if (line === "<!--/kk:timeline-->") {
         inTimeline = false;
+        if (isGeneratedTimeline(timeline.join(`
+`))) {
+          blocks.push(timeline.join(`
+`));
+          timeline.length = 0;
+        } else {
+          escapeBufferedTimeline();
+        }
         continue;
       }
       timeline.push(rawLine);
@@ -22010,8 +22095,7 @@ function renderShowNotesHtml(markdown) {
   }
   flush();
   if (timeline.length > 0)
-    blocks.push(timeline.join(`
-`));
+    escapeBufferedTimeline();
   return blocks.join(`
 `);
 }
@@ -22059,6 +22143,7 @@ function renderShowNotesMarkdown(docs, opts) {
 }
 
 // ../../plugins/publishings/podcast-pub/src/map.ts
+var COVER_EXTS = new Set([".png", ".jpg", ".jpeg", ".webp", ".gif"]);
 var AUDIO_MIME_BY_EXTENSION = {
   ".mp3": "audio/mpeg",
   ".wav": "audio/wav",
@@ -22108,6 +22193,9 @@ function mapContentToEpisode(content) {
   const link = articleUrl && articleUrl.length > 0 ? articleUrl : undefined;
   const coverImage = typeof metadata.coverImage === "string" ? metadata.coverImage.trim() : undefined;
   const imageUrl = coverImage?.startsWith("http") ? coverImage : undefined;
+  if (coverImage && coverImage.length > 0 && !imageUrl && !COVER_EXTS.has(extname(coverImage).toLowerCase())) {
+    throw new Error(`invalid metadata.coverImage: expected an http(s) URL or a local image (${[...COVER_EXTS].join(", ")}), got '${coverImage}'`);
+  }
   const imagePath = !imageUrl && coverImage && coverImage.length > 0 ? coverImage : undefined;
   let datePublishedMs;
   const publishedAt = metadata.publishedAt;
@@ -22314,6 +22402,13 @@ function resolveClient() {
 function fail(error51) {
   return ResultSchema.parse({ ok: false, target: TARGET, error: error51 });
 }
+var COVER_MIME = {
+  ".png": "image/png",
+  ".jpg": "image/jpeg",
+  ".jpeg": "image/jpeg",
+  ".webp": "image/webp",
+  ".gif": "image/gif"
+};
 function resolveOperation(options) {
   const raw = options.operation ?? "publish";
   if (typeof raw !== "string" || !OPERATIONS.includes(raw)) {
@@ -22492,14 +22587,15 @@ async function publishEpisode(client, payload, options) {
   await client.uploadBytes(prepared.presignedUrl, bytes, episode.audio.mimeType);
   let imageUrl = episode.imageUrl;
   if (episode.imagePath && !imageUrl) {
+    const imageMime = COVER_MIME[extname2(episode.imagePath).toLowerCase()] ?? "image/png";
     const imageBytes = new Uint8Array(await readFile(episode.imagePath));
     const imagePrepared = await client.prepareUpload({
       category: "image",
-      full_local_file_path: episode.imagePath,
+      full_local_file_path: basename(episode.imagePath),
       size: imageBytes.byteLength,
-      type: "image/png"
+      type: imageMime
     });
-    await client.uploadBytes(imagePrepared.presignedUrl, imageBytes, "image/png");
+    await client.uploadBytes(imagePrepared.presignedUrl, imageBytes, imageMime);
     imageUrl = imagePrepared.mediaUrl;
   }
   const item = await client.updateItem(itemId, {

package/plugins/publishings/podcast-pub/src/index.ts

@@ -1,6 +1,6 @@
 import { readFileSync } from 'node:fs';
 import { readFile } from 'node:fs/promises';
-import { dirname } from 'node:path';
+import { basename, dirname, extname } from 'node:path';
 import { parseArgs } from 'node:util';
 import { type Content, ContentSchema, DocListSchema, type Result, ResultSchema } from '@gobing-ai/kk-core';
 import { FakeFileCliTransport, type PublishTransport, type PublishTransportPayload } from '@gobing-ai/publish-harness';
@@ -75,6 +75,18 @@ function fail(error: string): Result {
     return ResultSchema.parse({ ok: false, target: TARGET, error });
 }
 
+/**
+ * Local-cover MIME by extension. `map.ts` has already rejected anything outside this set (R4), so
+ * the fallback is unreachable in practice; it keeps the field non-empty for the type system.
+ */
+const COVER_MIME: Record<string, string> = {
+    '.png': 'image/png',
+    '.jpg': 'image/jpeg',
+    '.jpeg': 'image/jpeg',
+    '.webp': 'image/webp',
+    '.gif': 'image/gif',
+};
+
 /** Parses and routes `options.operation`; unknown or misplaced values fail loud. */
 function resolveOperation(options: PodcastPubOptions): { operation: Operation } | { error: string } {
     const raw = options.operation ?? 'publish';
@@ -333,17 +345,20 @@ async function publishEpisode(
     });
     await client.uploadBytes(prepared.presignedUrl, bytes, episode.audio.mimeType);
 
-    // Phase 2b: upload a local cover via the presigned image flow (no item_id needed).
+    // Phase 2b: upload a local cover via the presigned image flow (no item_id needed). Only the
+    // basename is sent as `full_local_file_path`, and the MIME follows the real extension rather
+    // than assuming PNG (R4).
     let imageUrl = episode.imageUrl;
     if (episode.imagePath && !imageUrl) {
+        const imageMime = COVER_MIME[extname(episode.imagePath).toLowerCase()] ?? 'image/png';
         const imageBytes = new Uint8Array(await readFile(episode.imagePath));
         const imagePrepared = await client.prepareUpload({
             category: 'image',
-            full_local_file_path: episode.imagePath,
+            full_local_file_path: basename(episode.imagePath),
             size: imageBytes.byteLength,
-            type: 'image/png',
+            type: imageMime,
         });
-        await client.uploadBytes(imagePrepared.presignedUrl, imageBytes, 'image/png');
+        await client.uploadBytes(imagePrepared.presignedUrl, imageBytes, imageMime);
         imageUrl = imagePrepared.mediaUrl;
     }
 

package/plugins/publishings/podcast-pub/src/map.ts

@@ -1,6 +1,10 @@
+import { extname } from 'node:path';
 import type { Content } from '@gobing-ai/kk-core';
 import { renderShowNotesHtml } from './show-notes';
 
+/** Local-cover extensions accepted from `metadata.coverImage` (R4); anything else is rejected. */
+const COVER_EXTS = new Set(['.png', '.jpg', '.jpeg', '.webp', '.gif']);
+
 /** Resolved episode fields derived from a Content payload (design D6). */
 export interface EpisodeMapping {
     /** Episode title: `content.title`, else the first `#` heading, else validation error. */
@@ -107,6 +111,13 @@ export function mapContentToEpisode(content: Content): EpisodeMapping {
     // microfeed keeps remote image URLs verbatim (`image` field); a local cover file
     // goes through the presigned image upload flow (no item_id required) instead.
     const imageUrl = coverImage?.startsWith('http') ? coverImage : undefined;
+    // `coverImage` is agent-steerable via article metadata, so a local path must be a known image
+    // extension — otherwise an arbitrary file (/etc/passwd) would be read and uploaded (R4).
+    if (coverImage && coverImage.length > 0 && !imageUrl && !COVER_EXTS.has(extname(coverImage).toLowerCase())) {
+        throw new Error(
+            `invalid metadata.coverImage: expected an http(s) URL or a local image (${[...COVER_EXTS].join(', ')}), got '${coverImage}'`,
+        );
+    }
     const imagePath = !imageUrl && coverImage && coverImage.length > 0 ? coverImage : undefined;
 
     let datePublishedMs: number | undefined;

package/plugins/publishings/podcast-pub/src/show-notes.ts

@@ -95,6 +95,37 @@ export function computeAudioOffsets(
     return starts;
 }
 
+const isHttpUrl = (u: string): boolean => /^https?:\/\//i.test(u.trim());
+
+/** The exact `<style>` block {@link renderTimelineHtml} emits; reused by the marker validator. */
+const TIMELINE_STYLE = `<style>
+.kk-tl{margin:1em 0}
+.kk-tl-row{display:flex;gap:12px;padding:10px 0;border-bottom:1px solid rgba(128,128,128,.25)}
+.kk-tl-t{flex:0 0 56px;font-variant-numeric:tabular-nums;font-weight:700;color:#0969da}
+.kk-tl-body{flex:1;min-width:0}
+.kk-tl-title{font-weight:600}
+.kk-tl-brief{margin:4px 0 0;color:#666;font-size:.95em}
+</style>`;
+
+/**
+ * Tags {@link renderTimelineHtml} can emit: `div`/`p`/`a` carrying only the exact class, href,
+ * target, and rel attributes it produces. Anything else inside a marker block is attacker-supplied.
+ */
+const TIMELINE_TAG =
+    /^<\/?(?:div|p|a)(?:\s+(?:class="kk-tl(?:-[a-z]+)?"|href="https?:\/\/[^"<>\s]*"|target="_blank"|rel="noopener"))*\s*>$/;
+
+/**
+ * A marker block is trusted only if it is markup {@link renderTimelineHtml} could have produced.
+ * The markers are a legitimate cross-process channel (see {@link renderShowNotesHtml}), so the
+ * block is validated rather than stripped: a comment or `<style` inside it is an injection attempt,
+ * and any leftover stray `<` means the block is not well-formed generator output.
+ */
+function isGeneratedTimeline(block: string): boolean {
+    const rest = block.replace(TIMELINE_STYLE, '');
+    if (rest.includes('<style') || rest.includes('<!--')) return false;
+    return (rest.match(/<[^>]*>/g) ?? []).every((tag) => TIMELINE_TAG.test(tag)) && !/<(?![^>]*>)/.test(rest);
+}
+
 /**
  * Brief-mode timeline block: two-column HTML (offset left, title + briefing right),
  * marked `<!--kk:timeline-->` so {@link renderShowNotesHtml} passes it through
@@ -108,25 +139,24 @@ function renderTimelineHtml(docs: Doc[], offsets: number[], articleUrl: string):
             const title = escapeHtml(d.title ?? `条目 ${i + 1}`);
             const brief = escapeHtml(itemBrief(d));
             const at = formatOffset(offsets[i] ?? Number.NaN);
-            const link = d.sourceUri
-                ? ` <a href="${escapeHtml(d.sourceUri)}" target="_blank" rel="noopener">来源</a>`
-                : '';
+            // A `sourceUri` that is not http(s) (e.g. `javascript:`) must not become a live href;
+            // escaping alone does not neutralise a scheme, so the link is dropped instead (R2).
+            const link =
+                d.sourceUri && isHttpUrl(d.sourceUri)
+                    ? ` <a href="${escapeHtml(d.sourceUri)}" target="_blank" rel="noopener">来源</a>`
+                    : '';
             return `
     <div class="kk-tl-row"><div class="kk-tl-t">${at}</div><div class="kk-tl-body"><div class="kk-tl-title">${i + 1}. ${title}${link}</div><p class="kk-tl-brief">${brief}</p></div></div>`;
         })
         .join('');
+    const articleTail = isHttpUrl(articleUrl)
+        ? `<p>完整图文版：<a href="${escapeHtml(articleUrl)}" target="_blank" rel="noopener">${escapeHtml('本期完整文章')}</a></p>`
+        : `<p>${escapeHtml('本期完整文章')}</p>`;
     return `<!--kk:timeline-->
-<style>
-.kk-tl{margin:1em 0}
-.kk-tl-row{display:flex;gap:12px;padding:10px 0;border-bottom:1px solid rgba(128,128,128,.25)}
-.kk-tl-t{flex:0 0 56px;font-variant-numeric:tabular-nums;font-weight:700;color:#0969da}
-.kk-tl-body{flex:1;min-width:0}
-.kk-tl-title{font-weight:600}
-.kk-tl-brief{margin:4px 0 0;color:#666;font-size:.95em}
-</style>
+${TIMELINE_STYLE}
 <div class="kk-tl">${rows}
 </div>
-<p>完整图文版：<a href="${escapeHtml(articleUrl)}" target="_blank" rel="noopener">${escapeHtml('本期完整文章')}</a></p>
+${articleTail}
 <!--/kk:timeline-->`;
 }
 
@@ -150,6 +180,17 @@ export function renderShowNotesHtml(markdown: string): string {
         }
     };
 
+    // Escape every buffered timeline line through the normal paragraph path. Used when the block
+    // fails {@link isGeneratedTimeline} and for a marker that is never closed.
+    const escapeBufferedTimeline = () => {
+        for (const l of timeline) {
+            const t = l.trim();
+            if (t.length > 0) paragraph.push(t);
+        }
+        timeline.length = 0;
+        flush();
+    };
+
     for (const rawLine of markdown.split('\n')) {
         const line = rawLine.trim();
         if (line === '<!--kk:timeline-->') {
@@ -160,6 +201,17 @@ export function renderShowNotesHtml(markdown: string): string {
         if (inTimeline) {
             if (line === '<!--/kk:timeline-->') {
                 inTimeline = false;
+                // The marker is a legitimate cross-process channel: renderShowNotesMarkdown writes
+                // the timeline into markdown, and that markdown later arrives as metadata.showNotes.
+                // Stripping the markers would break the feature, so the block is validated against
+                // the generator's own grammar instead — anything renderTimelineHtml could not have
+                // produced is escaped line by line rather than passed through (R2).
+                if (isGeneratedTimeline(timeline.join('\n'))) {
+                    blocks.push(timeline.join('\n'));
+                    timeline.length = 0;
+                } else {
+                    escapeBufferedTimeline();
+                }
                 continue;
             }
             timeline.push(rawLine);
@@ -182,7 +234,8 @@ export function renderShowNotesHtml(markdown: string): string {
         paragraph.push(line);
     }
     flush();
-    if (timeline.length > 0) blocks.push(timeline.join('\n'));
+    // An unclosed marker never reaches the closing branch above — escape whatever it buffered.
+    if (timeline.length > 0) escapeBufferedTimeline();
     return blocks.join('\n');
 }
 

package/plugins/publishings/qiita-pub/dist/index.js

@@ -21781,6 +21781,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21809,14 +21825,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21842,43 +21859,82 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 // ../../packages/kk-core/src/render-md.ts
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
-class FakeFileCliTransport {
-  kind = "file-cli";
-  callLogs;
+class FakeTransportCore {
+  callLogs = [];
   nextResult;
-  constructor() {
-    this.callLogs = [];
-  }
   setNextResult(result) {
     this.nextResult = result;
   }
-  async publish(payload) {
+  async publish(payload, defaultResult) {
     this.callLogs.push({
       timestamp: new Date().toISOString(),
       payload
     });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-file-cli",
       url: "https://example.com/published-post",
       id: "fake-id-123",
       message: "Published offline via FakeFileCliTransport"
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
+  }
+}
+
+class FakeBrowserTransport {
+  kind = "browser";
+  driver;
+  core = new FakeTransportCore;
+  constructor(driver = "agent") {
+    this.driver = driver;
+  }
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
+      ok: true,
+      target: "fake-browser",
+      url: "https://example.com/browser-draft",
+      id: "fake-browser-id-123",
+      message: "Published offline via FakeBrowserTransport",
+      metadata: { driver: this.driver }
+    });
+  }
+  getCallLogs() {
+    return this.core.getCallLogs();
+  }
+  reset() {
+    this.core.reset();
   }
 }
 
 // ../../plugins/publishings/qiita-pub/src/index.ts
 var QIITA_ITEMS_URL = "https://qiita.com/api/v2/items";
+var REQUEST_TIMEOUT_MS = 120000;
 function slugify2(str) {
   return str.toLowerCase().replace(/[^\w\s-]/g, "").trim().replace(/[\s_]+/g, "-");
 }
@@ -21944,6 +22000,7 @@ class QiitaApiTransport {
           Authorization: `Bearer ${token}`,
           "Content-Type": "application/json"
         },
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
         body: JSON.stringify({
           title: fields.title,
           body: payload.content.body,

package/plugins/publishings/qiita-pub/src/index.ts

@@ -8,6 +8,9 @@ import { echoError } from '@gobing-ai/ts-utils';
 /** Qiita API v2 article-create endpoint (audited from wt-publish-to-qiita). */
 const QIITA_ITEMS_URL = 'https://qiita.com/api/v2/items';
 
+/** Per-request timeout (ms) for the Qiita call — Bun's `fetch` has no default deadline (R5). */
+const REQUEST_TIMEOUT_MS = 120_000;
+
 /**
  * Converts a string into a lowercase hyphenated tag (slug) per the publish spec tags convention.
  * Qiita tag names allow only alphanumeric, hyphen, and underscore, so the slugified form is
@@ -131,6 +134,7 @@ export class QiitaApiTransport implements PublishTransport {
                     Authorization: `Bearer ${token}`,
                     'Content-Type': 'application/json',
                 },
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
                 body: JSON.stringify({
                     title: fields.title,
                     body: payload.content.body,