@gobing-ai/knowledge-kit 0.0.21 → 0.0.22

package/plugins/publishings/wechatmp-pub/dist/index.js

@@ -21781,6 +21781,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21809,14 +21825,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21842,44 +21859,83 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 // ../../packages/kk-core/src/render-md.ts
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
-class FakeFileCliTransport {
-  kind = "file-cli";
-  callLogs;
+class FakeTransportCore {
+  callLogs = [];
   nextResult;
-  constructor() {
-    this.callLogs = [];
-  }
   setNextResult(result) {
     this.nextResult = result;
   }
-  async publish(payload) {
+  async publish(payload, defaultResult) {
     this.callLogs.push({
       timestamp: new Date().toISOString(),
       payload
     });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-file-cli",
       url: "https://example.com/published-post",
       id: "fake-id-123",
       message: "Published offline via FakeFileCliTransport"
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
+  }
+}
+
+class FakeBrowserTransport {
+  kind = "browser";
+  driver;
+  core = new FakeTransportCore;
+  constructor(driver = "agent") {
+    this.driver = driver;
+  }
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
+      ok: true,
+      target: "fake-browser",
+      url: "https://example.com/browser-draft",
+      id: "fake-browser-id-123",
+      message: "Published offline via FakeBrowserTransport",
+      metadata: { driver: this.driver }
+    });
+  }
+  getCallLogs() {
+    return this.core.getCallLogs();
+  }
+  reset() {
+    this.core.reset();
   }
 }
 
 // ../../plugins/publishings/wechatmp-pub/src/index.ts
 var TARGET = "wechatmp";
 var TOKEN_URL = "https://api.weixin.qq.com/cgi-bin/token";
+var REQUEST_TIMEOUT_MS = 120000;
 var DRAFT_ADD_URL = "https://api.weixin.qq.com/cgi-bin/draft/add";
 var APP_ID_ENV = "WECHAT_APP_ID";
 var APP_SECRET_ENV = "WECHAT_APP_SECRET";
@@ -21887,7 +21943,7 @@ function fail(error51) {
   return ResultSchema.parse({ ok: false, target: TARGET, error: error51 });
 }
 function escapeHtml(text) {
-  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;");
+  return text.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
 }
 function markdownToWechatHtml(markdown) {
   const lines = markdown.replace(/\r\n/g, `
@@ -21903,7 +21959,7 @@ function markdownToWechatHtml(markdown) {
       listType = null;
     }
   };
-  const inline = (text) => escapeHtml(text).replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>").replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
+  const inline = (text) => escapeHtml(text).replace(/\*\*([^*]+)\*\*/g, "<strong>$1</strong>").replace(/\*([^*]+)\*/g, "<em>$1</em>").replace(/`([^`]+)`/g, "<code>$1</code>").replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_m, text2, href) => /^https?:\/\//i.test(href) ? `<a href="${href}">${text2}</a>` : text2);
   for (const line of lines) {
     if (line.startsWith("```")) {
       if (inCode) {
@@ -22027,7 +22083,7 @@ class WechatDraftApiTransport {
     }
     try {
       const tokenUrl = `${TOKEN_URL}?grant_type=client_credential&appid=${encodeURIComponent(appId ?? "")}&secret=${encodeURIComponent(appSecret ?? "")}`;
-      const tokenResponse = await fetch(tokenUrl);
+      const tokenResponse = await fetch(tokenUrl, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
       const tokenJson = await tokenResponse.json();
       if (typeof tokenJson.access_token !== "string") {
         return fail(`WeChat token request failed: ${typeof tokenJson.errmsg === "string" ? tokenJson.errmsg : "missing access_token"}`);
@@ -22035,7 +22091,8 @@ class WechatDraftApiTransport {
       const draftResponse = await fetch(`${DRAFT_ADD_URL}?access_token=${encodeURIComponent(tokenJson.access_token)}`, {
         method: "POST",
         headers: { "Content-Type": "application/json" },
-        body: JSON.stringify(articles)
+        body: JSON.stringify(articles),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
       });
       const draftJson = await draftResponse.json();
       if (typeof draftJson.media_id !== "string") {

package/plugins/publishings/wechatmp-pub/src/index.ts

@@ -7,6 +7,9 @@ import { echoError } from '@gobing-ai/ts-utils';
 
 const TARGET = 'wechatmp';
 const TOKEN_URL = 'https://api.weixin.qq.com/cgi-bin/token';
+
+/** Per-request timeout (ms) for WeChat HTTP calls — Bun's `fetch` has no default deadline (R5). */
+const REQUEST_TIMEOUT_MS = 120_000;
 const DRAFT_ADD_URL = 'https://api.weixin.qq.com/cgi-bin/draft/add';
 const APP_ID_ENV = 'WECHAT_APP_ID';
 const APP_SECRET_ENV = 'WECHAT_APP_SECRET';
@@ -32,7 +35,7 @@ function fail(error: string): Result {
 }
 
 function escapeHtml(text: string): string {
-    return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;');
+    return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;');
 }
 
 /**
@@ -58,7 +61,12 @@ export function markdownToWechatHtml(markdown: string): string {
             .replace(/\*\*([^*]+)\*\*/g, '<strong>$1</strong>')
             .replace(/\*([^*]+)\*/g, '<em>$1</em>')
             .replace(/`([^`]+)`/g, '<code>$1</code>')
-            .replace(/\[([^\]]+)\]\(([^)]+)\)/g, '<a href="$2">$1</a>');
+            // `href` is already HTML-escaped (inline() escapes before replacing), so a `"` can no
+            // longer close the attribute. The scheme allowlist is still required: escaping does not
+            // neutralise `javascript:`. Non-http(s) links degrade to their label text.
+            .replace(/\[([^\]]+)\]\(([^)]+)\)/g, (_m, text: string, href: string) =>
+                /^https?:\/\//i.test(href) ? `<a href="${href}">${text}</a>` : text,
+            );
 
     for (const line of lines) {
         if (line.startsWith('```')) {
@@ -197,7 +205,7 @@ export class WechatDraftApiTransport implements PublishTransport {
 
         try {
             const tokenUrl = `${TOKEN_URL}?grant_type=client_credential&appid=${encodeURIComponent(appId ?? '')}&secret=${encodeURIComponent(appSecret ?? '')}`;
-            const tokenResponse = await fetch(tokenUrl);
+            const tokenResponse = await fetch(tokenUrl, { signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS) });
             const tokenJson = (await tokenResponse.json()) as {
                 access_token?: unknown;
                 errmsg?: unknown;
@@ -214,6 +222,7 @@ export class WechatDraftApiTransport implements PublishTransport {
                     method: 'POST',
                     headers: { 'Content-Type': 'application/json' },
                     body: JSON.stringify(articles),
+                    signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
                 },
             );
             const draftJson = (await draftResponse.json()) as {

package/plugins/publishings/x-pub/dist/index.js

@@ -21782,6 +21782,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21810,14 +21826,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21844,78 +21861,78 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
 import { homedir } from "os";
-import { join } from "path";
+import { join, resolve } from "path";
 
-class FakeFileCliTransport {
-  kind = "file-cli";
-  callLogs;
+class FakeTransportCore {
+  callLogs = [];
   nextResult;
-  constructor() {
-    this.callLogs = [];
-  }
   setNextResult(result) {
     this.nextResult = result;
   }
-  async publish(payload) {
+  async publish(payload, defaultResult) {
     this.callLogs.push({
       timestamp: new Date().toISOString(),
       payload
     });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-file-cli",
       url: "https://example.com/published-post",
       id: "fake-id-123",
       message: "Published offline via FakeFileCliTransport"
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 
 class FakeBrowserTransport {
   kind = "browser";
   driver;
-  callLogs;
-  nextResult;
+  core = new FakeTransportCore;
   constructor(driver = "agent") {
     this.driver = driver;
-    this.callLogs = [];
   }
   setNextResult(result) {
-    this.nextResult = result;
+    this.core.setNextResult(result);
   }
   async publish(payload) {
-    this.callLogs.push({
-      timestamp: new Date().toISOString(),
-      payload
-    });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-browser",
       url: "https://example.com/browser-draft",
       id: "fake-browser-id-123",
       message: "Published offline via FakeBrowserTransport",
       metadata: { driver: this.driver }
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 function resolveBrowserProfileDir(channel, override) {
@@ -21924,12 +21941,13 @@ function resolveBrowserProfileDir(channel, override) {
     if (trimmed.startsWith("~/")) {
       return join(homedir(), trimmed.slice(2));
     }
-    return trimmed;
+    return resolve(trimmed);
   }
   return join(homedir(), ".config", "kk", "browser-profiles", channel);
 }
 
 // ../../plugins/publishings/x-pub/src/index.ts
+var REQUEST_TIMEOUT_MS = 120000;
 var TARGET = "x";
 var TWEETS_URL = "https://api.twitter.com/2/tweets";
 var TOKEN_ENVS = ["X_API_KEY", "X_API_SECRET", "X_ACCESS_TOKEN", "X_ACCESS_TOKEN_SECRET"];
@@ -21991,7 +22009,8 @@ class XPostApiTransport {
           Authorization: authorization,
           "Content-Type": "application/json"
         },
-        body: JSON.stringify({ text: text.slice(0, 280) })
+        body: JSON.stringify({ text: text.slice(0, 280) }),
+        signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS)
       });
       if (!response.ok) {
         const errorText = (await response.text()).slice(0, 1000);

package/plugins/publishings/x-pub/src/index.ts

@@ -13,6 +13,9 @@ import {
 import { createNodeFileSystem } from '@gobing-ai/ts-runtime';
 import { echoError } from '@gobing-ai/ts-utils';
 
+/** Per-request timeout (ms) for the X API call — Bun's `fetch` has no default deadline (R5). */
+const REQUEST_TIMEOUT_MS = 120_000;
+
 const TARGET = 'x';
 const TWEETS_URL = 'https://api.twitter.com/2/tweets';
 const TOKEN_ENVS = ['X_API_KEY', 'X_API_SECRET', 'X_ACCESS_TOKEN', 'X_ACCESS_TOKEN_SECRET'] as const;
@@ -98,6 +101,7 @@ export class XPostApiTransport implements PublishTransport {
                     'Content-Type': 'application/json',
                 },
                 body: JSON.stringify({ text: text.slice(0, 280) }),
+                signal: AbortSignal.timeout(REQUEST_TIMEOUT_MS),
             });
             if (!response.ok) {
                 const errorText = (await response.text()).slice(0, 1000);

package/plugins/publishings/xhs-pub/dist/index.js

@@ -21781,6 +21781,22 @@ var ResultSchema = exports_external.object({
   error: exports_external.string().optional(),
   metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
 });
+var TargetOutcomeSchema = exports_external.object({
+  target: exports_external.string(),
+  ok: exports_external.boolean(),
+  status: exports_external.enum(["published", "failed", "skipped"]),
+  url: exports_external.string().optional(),
+  id: exports_external.string().optional(),
+  error: exports_external.string().optional(),
+  durationMs: exports_external.number().optional(),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
+var AggregateResultSchema = exports_external.object({
+  ok: exports_external.boolean(),
+  summary: exports_external.object({ total: exports_external.number(), succeeded: exports_external.number(), failed: exports_external.number(), skipped: exports_external.number() }),
+  targets: exports_external.array(TargetOutcomeSchema),
+  metadata: exports_external.record(exports_external.string(), exports_external.unknown()).optional()
+});
 var DocListSchema = exports_external.array(DocSchema);
 var omniVoiceGenContentSchema = ContentSchema.extend({
   format: exports_external.literal("audio"),
@@ -21809,14 +21825,15 @@ var PluginKindSchema = exports_external.enum(PLUGIN_KINDS);
 // ../../packages/kk-core/src/manifest.ts
 init_zod();
 var OperationIOSchema = exports_external.enum(["doc-list", "markdown"]);
-var PluginManifestSchema = exports_external.object({
+var PluginOperationSchema = exports_external.object({ input: OperationIOSchema, output: OperationIOSchema });
+var PluginManifestSchema = exports_external.looseObject({
   name: exports_external.string().min(1),
   kind: PluginKindSchema,
   entry: exports_external.string().min(1),
   version: exports_external.string().optional(),
   description: exports_external.string().optional(),
-  operations: exports_external.record(exports_external.string(), exports_external.object({ input: OperationIOSchema, output: OperationIOSchema })).optional()
-}).passthrough();
+  operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
+});
 // ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
@@ -21843,42 +21860,78 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
 import { homedir } from "os";
-import { join } from "path";
+import { join, resolve } from "path";
+
+class FakeTransportCore {
+  callLogs = [];
+  nextResult;
+  setNextResult(result) {
+    this.nextResult = result;
+  }
+  async publish(payload, defaultResult) {
+    this.callLogs.push({
+      timestamp: new Date().toISOString(),
+      payload
+    });
+    return this.nextResult ?? defaultResult;
+  }
+  getCallLogs() {
+    return this.callLogs;
+  }
+  reset() {
+    this.callLogs = [];
+    this.nextResult = undefined;
+  }
+}
+
+class FakeFileCliTransport {
+  kind = "file-cli";
+  core = new FakeTransportCore;
+  setNextResult(result) {
+    this.core.setNextResult(result);
+  }
+  async publish(payload) {
+    return this.core.publish(payload, {
+      ok: true,
+      target: "fake-file-cli",
+      url: "https://example.com/published-post",
+      id: "fake-id-123",
+      message: "Published offline via FakeFileCliTransport"
+    });
+  }
+  getCallLogs() {
+    return this.core.getCallLogs();
+  }
+  reset() {
+    this.core.reset();
+  }
+}
+
 class FakeBrowserTransport {
   kind = "browser";
   driver;
-  callLogs;
-  nextResult;
+  core = new FakeTransportCore;
   constructor(driver = "agent") {
     this.driver = driver;
-    this.callLogs = [];
   }
   setNextResult(result) {
-    this.nextResult = result;
+    this.core.setNextResult(result);
   }
   async publish(payload) {
-    this.callLogs.push({
-      timestamp: new Date().toISOString(),
-      payload
-    });
-    if (this.nextResult) {
-      return this.nextResult;
-    }
-    return {
+    return this.core.publish(payload, {
       ok: true,
       target: "fake-browser",
       url: "https://example.com/browser-draft",
       id: "fake-browser-id-123",
       message: "Published offline via FakeBrowserTransport",
       metadata: { driver: this.driver }
-    };
+    });
   }
   getCallLogs() {
-    return this.callLogs;
+    return this.core.getCallLogs();
   }
   reset() {
-    this.callLogs = [];
-    this.nextResult = undefined;
+    this.core.reset();
   }
 }
 function resolveBrowserProfileDir(channel, override) {
@@ -21887,7 +21940,7 @@ function resolveBrowserProfileDir(channel, override) {
     if (trimmed.startsWith("~/")) {
       return join(homedir(), trimmed.slice(2));
     }
-    return trimmed;
+    return resolve(trimmed);
   }
   return join(homedir(), ".config", "kk", "browser-profiles", channel);
 }