@gobing-ai/knowledge-kit 0.0.23 → 0.0.24

package/plugins/publishings/xhs-pub/src/profile-check.ts

@@ -0,0 +1,133 @@
+/**
+ * Read-only XHS profile-session capability (task 0177).
+ *
+ * The publish flow stays headed and unchanged. This module adds the two dogfood
+ * operations around the shared profile (same precedence as the publish flow):
+ *  - `login` recovers an absent/expired session headed via the upstream
+ *    `loginWithProfile`, polled with the same XHS-owned readiness gate the publish
+ *    flow uses;
+ *  - `check` reopens the existing profile headless and reports the session as
+ *    `verified` or `refused` — a site refusal, expired session, or missing profile
+ *    is an explicit failed readiness, never a success. The upstream launcher never
+ *    creates a profile headless, so a check cannot fabricate a session from a
+ *    fresh directory.
+ *
+ * ADR-025 (2026-09-28): the publish flow now runs this same check as a preflight before any headed
+ * visit, and `check` draws on the shared 24h automation budget — the cap bounds total console
+ * visits, not just publishes. The implementation lives in `./index` so both paths share it.
+ *
+ * Manual dogfood: `bun plugins/publishings/xhs-pub/src/profile-check.ts login` then
+ * `bun plugins/publishings/xhs-pub/src/profile-check.ts check` on the same profile;
+ * the full recipe lives in docs/design/xhs-image-cards.md.
+ */
+import { parseArgs } from 'node:util';
+import { resolveBrowserProfileDir } from '@gobing-ai/publish-harness';
+import { type BrowserLauncher, loginWithProfile } from '@gobing-ai/ts-browser-automation';
+import { echo, echoError } from '@gobing-ai/ts-utils';
+import { type AutomationGuard, createAutomationGuard } from './automation-guard';
+import {
+    CHANNEL,
+    checkXhsProfileSession,
+    isXhsConsoleReady,
+    LOGIN_TIMEOUT_MS,
+    PUBLISH_URL,
+    wrapPlaywrightPage,
+} from './index';
+
+export type { ProfileSessionCheck, SessionCheckOptions as ProfileCheckOptions } from './index';
+/**
+ * The session check lives in `./index` with the rest of the console contract (readiness gate,
+ * publish URL, preflight deadline) so the publish preflight and this CLI share one implementation.
+ * Re-exported under the 0177 names, so the operator surface is unchanged.
+ */
+export { checkXhsProfileSession as checkProfileSession };
+
+export interface ProfileLoginOptions {
+    profileDir: string;
+    timeoutMs?: number;
+    launcher?: BrowserLauncher;
+}
+
+/**
+ * Headed one-time login on the channel profile via the upstream helper: the operator
+ * signs in inside the opened window and the promise resolves only once the XHS-owned
+ * readiness gate passes. No credential is read or stored — the profile directory
+ * itself is the login artifact.
+ */
+export async function loginProfile(opts: ProfileLoginOptions): Promise<void> {
+    await loginWithProfile({
+        profileDir: opts.profileDir,
+        url: PUBLISH_URL,
+        isAuthenticated: (page) => isXhsConsoleReady(wrapPlaywrightPage(page)),
+        timeoutMs: opts.timeoutMs ?? LOGIN_TIMEOUT_MS,
+        launcher: opts.launcher,
+    });
+}
+
+/** `login|check [--profile <dir>] [--timeout <ms>]`; profile precedence matches the publish flow. */
+export async function main(
+    argv: string[] = process.argv.slice(2),
+    launcher?: BrowserLauncher,
+    guard: AutomationGuard = createAutomationGuard(),
+): Promise<number> {
+    let command: string;
+    let profileDir: string;
+    let timeoutMs: number | undefined;
+    try {
+        const { positionals, values } = parseArgs({
+            args: argv,
+            allowPositionals: true,
+            options: { profile: { type: 'string' }, timeout: { type: 'string' } },
+        });
+        command = positionals[0] ?? 'check';
+        if (values.timeout !== undefined) {
+            timeoutMs = Number(values.timeout);
+            if (!Number.isFinite(timeoutMs) || timeoutMs < 0) {
+                throw new Error(`--timeout must be a non-negative number of ms, got '${values.timeout}'`);
+            }
+        }
+        const override = values.profile ?? process.env.XHS_PROFILE_DIR ?? process.env.KK_BROWSER_PROFILE_DIR;
+        profileDir = resolveBrowserProfileDir(CHANNEL, override);
+    } catch (error) {
+        echoError(
+            `profile-check: ${error instanceof Error ? error.message : String(error)} — usage: profile-check.ts [login|check] [--profile <dir>] [--timeout <ms>]`,
+        );
+        return 1;
+    }
+    if (command === 'login') {
+        try {
+            await loginProfile({ profileDir, timeoutMs, launcher });
+            echo(`xhs profile login verified: ${profileDir}`);
+            return 0;
+        } catch (error) {
+            echoError(`xhs profile login failed: ${error instanceof Error ? error.message : String(error)}`);
+            return 1;
+        }
+    }
+    if (command !== 'check') {
+        echoError(
+            `profile-check: unknown command '${command}' — usage: profile-check.ts [login|check] [--profile <dir>] [--timeout <ms>]`,
+        );
+        return 1;
+    }
+    // ADR-025: a manual session check is a real console visit, so it draws on the shared 24h
+    // automation budget rather than a separate one. `login` is deliberately uncapped above: it is
+    // operator-interactive, so capping it would only block recovery from an expired session.
+    const cap = guard.allow('check');
+    if (!cap.allowed) {
+        echoError(`profile-check: ${cap.reason}`);
+        return 1;
+    }
+    guard.record('check');
+    const outcome = await checkXhsProfileSession({ profileDir, timeoutMs, launcher });
+    echo(JSON.stringify(outcome));
+    if (outcome.status !== 'verified') {
+        echoError(outcome.detail);
+        return 1;
+    }
+    return 0;
+}
+
+if (import.meta.main) {
+    process.exit(await main());
+}

package/plugins/publishings/zenn-pub/dist/index.js

@@ -14642,6 +14642,72 @@ var init_zod = __esm(() => {
   init_external();
 });
 
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/errors.js
+var ErrorCode;
+var init_errors3 = __esm(() => {
+  ErrorCode = {
+    NotFound: "NOT_FOUND",
+    Validation: "VALIDATION",
+    Conflict: "CONFLICT",
+    Internal: "INTERNAL"
+  };
+});
+
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
+var init_api_response = __esm(() => {
+  init_errors3();
+  API_ERROR_CODES = {
+    SUCCESS: 0,
+    NOT_FOUND: 404,
+    VALIDATION_ERROR: 422,
+    BAD_REQUEST: 400,
+    UNAUTHORIZED: 401,
+    FORBIDDEN: 403,
+    CONFLICT: 409,
+    INTERNAL_ERROR: 500
+  };
+  ERROR_CODE_TO_HTTP = {
+    [ErrorCode.NotFound]: API_ERROR_CODES.NOT_FOUND,
+    [ErrorCode.Validation]: API_ERROR_CODES.VALIDATION_ERROR,
+    [ErrorCode.Conflict]: API_ERROR_CODES.CONFLICT,
+    [ErrorCode.Internal]: API_ERROR_CODES.INTERNAL_ERROR
+  };
+  CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
+});
+
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+var init_cursor = () => {};
+
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+var init_event_severity = () => {};
+
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/output.js
+function processStream(name) {
+  const proc = globalThis.process;
+  const stream = proc?.[name];
+  if (stream === undefined) {
+    throw new Error(`No ${name} target available: set one via setDefaultOutputTargets or pass an explicit target`);
+  }
+  return stream;
+}
+function writeLine(message, target) {
+  target.write(`${message}
+`);
+}
+function echoError(message, target = defaultStderrTarget ?? processStream("stderr")) {
+  writeLine(message, target);
+}
+var defaultStderrTarget;
+
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.11/node_modules/@gobing-ai/ts-utils/dist/index.js
+var init_dist = __esm(() => {
+  init_api_response();
+  init_cursor();
+  init_errors3();
+  init_event_severity();
+});
+
 // ../../node_modules/.bun/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS((exports) => {
   var ALIAS = Symbol.for("yaml.alias");
@@ -17546,15 +17612,15 @@ var require_timestamp = __commonJS((exports) => {
         throw new Error("!!timestamp expects a date, starting with yyyy-mm-dd");
       const [, year, month, day, hour, minute, second] = match.map(Number);
       const millisec = match[7] ? Number((match[7] + "00").substr(1, 3)) : 0;
-      let date5 = Date.UTC(year, month - 1, day, hour || 0, minute || 0, second || 0, millisec);
+      let date6 = Date.UTC(year, month - 1, day, hour || 0, minute || 0, second || 0, millisec);
       const tz = match[8];
       if (tz && tz !== "Z") {
         let d = parseSexagesimal(tz, false);
         if (Math.abs(d) < 30)
           d *= 60;
-        date5 -= 60000 * d;
+        date6 -= 60000 * d;
       }
-      return new Date(date5);
+      return new Date(date6);
     },
     stringify: ({ value }) => value?.toISOString().replace(/(T00:00:00)?\.000Z$/, "") ?? ""
   };
@@ -19414,7 +19480,7 @@ var require_composer = __commonJS((exports) => {
   var node_process = __require("process");
   var directives = require_directives();
   var Document = require_Document();
-  var errors3 = require_errors();
+  var errors4 = require_errors();
   var identity = require_identity();
   var composeDoc = require_compose_doc();
   var resolveEnd = require_resolve_end();
@@ -19465,9 +19531,9 @@ var require_composer = __commonJS((exports) => {
       this.onError = (source, code, message, warning) => {
         const pos = getErrorPos(source);
         if (warning)
-          this.warnings.push(new errors3.YAMLWarning(pos, code, message));
+          this.warnings.push(new errors4.YAMLWarning(pos, code, message));
         else
-          this.errors.push(new errors3.YAMLParseError(pos, code, message));
+          this.errors.push(new errors4.YAMLParseError(pos, code, message));
       };
       this.directives = new directives.Directives({ version: options.version || "1.2" });
       this.options = options;
@@ -19553,7 +19619,7 @@ ${cb}` : comment;
           break;
         case "error": {
           const msg = token.source ? `${token.message}: ${JSON.stringify(token.source)}` : token.message;
-          const error51 = new errors3.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", msg);
+          const error51 = new errors4.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", msg);
           if (this.atDirectives || !this.doc)
             this.errors.push(error51);
           else
@@ -19563,7 +19629,7 @@ ${cb}` : comment;
         case "doc-end": {
           if (!this.doc) {
             const msg = "Unexpected doc-end without preceding document";
-            this.errors.push(new errors3.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", msg));
+            this.errors.push(new errors4.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", msg));
             break;
           }
           this.doc.directives.docEnd = true;
@@ -19578,7 +19644,7 @@ ${end.comment}` : end.comment;
           break;
         }
         default:
-          this.errors.push(new errors3.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", `Unsupported token ${token.type}`));
+          this.errors.push(new errors4.YAMLParseError(getErrorPos(token), "UNEXPECTED_TOKEN", `Unsupported token ${token.type}`));
       }
     }
     *end(forceDoc = false, endOffset = -1) {
@@ -19604,7 +19670,7 @@ ${end.comment}` : end.comment;
 var require_cst_scalar = __commonJS((exports) => {
   var resolveBlockScalar = require_resolve_block_scalar();
   var resolveFlowScalar = require_resolve_flow_scalar();
-  var errors3 = require_errors();
+  var errors4 = require_errors();
   var stringifyString = require_stringifyString();
   function resolveAsScalar(token, strict = true, onError) {
     if (token) {
@@ -19613,7 +19679,7 @@ var require_cst_scalar = __commonJS((exports) => {
         if (onError)
           onError(offset, code, message);
         else
-          throw new errors3.YAMLParseError([offset, offset + 1], code, message);
+          throw new errors4.YAMLParseError([offset, offset + 1], code, message);
       };
       switch (token.type) {
         case "scalar":
@@ -21493,7 +21559,7 @@ var require_parser = __commonJS((exports) => {
 var require_public_api = __commonJS((exports) => {
   var composer = require_composer();
   var Document = require_Document();
-  var errors3 = require_errors();
+  var errors4 = require_errors();
   var log = require_log();
   var identity = require_identity();
   var lineCounter = require_line_counter();
@@ -21510,8 +21576,8 @@ var require_public_api = __commonJS((exports) => {
     const docs = Array.from(composer$1.compose(parser$1.parse(source)));
     if (prettyErrors && lineCounter2)
       for (const doc2 of docs) {
-        doc2.errors.forEach(errors3.prettifyError(source, lineCounter2));
-        doc2.warnings.forEach(errors3.prettifyError(source, lineCounter2));
+        doc2.errors.forEach(errors4.prettifyError(source, lineCounter2));
+        doc2.warnings.forEach(errors4.prettifyError(source, lineCounter2));
       }
     if (docs.length > 0)
       return docs;
@@ -21526,13 +21592,13 @@ var require_public_api = __commonJS((exports) => {
       if (!doc2)
         doc2 = _doc;
       else if (doc2.options.logLevel !== "silent") {
-        doc2.errors.push(new errors3.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
+        doc2.errors.push(new errors4.YAMLParseError(_doc.range.slice(0, 2), "MULTIPLE_DOCS", "Source contains multiple documents; please use YAML.parseAllDocuments()"));
         break;
       }
     }
     if (prettyErrors && lineCounter2) {
-      doc2.errors.forEach(errors3.prettifyError(source, lineCounter2));
-      doc2.warnings.forEach(errors3.prettifyError(source, lineCounter2));
+      doc2.errors.forEach(errors4.prettifyError(source, lineCounter2));
+      doc2.warnings.forEach(errors4.prettifyError(source, lineCounter2));
     }
     return doc2;
   }
@@ -21584,12 +21650,12 @@ var require_public_api = __commonJS((exports) => {
 });
 
 // ../../node_modules/.bun/yaml@2.9.0/node_modules/yaml/dist/index.js
-var composer, Document, Schema, errors3, Alias, identity, Pair, Scalar, YAMLMap, YAMLSeq, cst, lexer, lineCounter, parser, publicApi, visit, $Composer, $Document, $Schema, $YAMLError, $YAMLParseError, $YAMLWarning, $Alias, $isAlias, $isCollection, $isDocument, $isMap, $isNode, $isPair, $isScalar, $isSeq, $Pair, $Scalar, $YAMLMap, $YAMLSeq, $Lexer, $LineCounter, $Parser, $parse, $parseAllDocuments, $parseDocument, $stringify, $visit, $visitAsync;
-var init_dist = __esm(() => {
+var composer, Document, Schema, errors4, Alias, identity, Pair, Scalar, YAMLMap, YAMLSeq, cst, lexer, lineCounter, parser, publicApi, visit, $Composer, $Document, $Schema, $YAMLError, $YAMLParseError, $YAMLWarning, $Alias, $isAlias, $isCollection, $isDocument, $isMap, $isNode, $isPair, $isScalar, $isSeq, $Pair, $Scalar, $YAMLMap, $YAMLSeq, $Lexer, $LineCounter, $Parser, $parse, $parseAllDocuments, $parseDocument, $stringify, $visit, $visitAsync;
+var init_dist2 = __esm(() => {
   composer = require_composer();
   Document = require_Document();
   Schema = require_Schema();
-  errors3 = require_errors();
+  errors4 = require_errors();
   Alias = require_Alias();
   identity = require_identity();
   Pair = require_Pair();
@@ -21605,9 +21671,9 @@ var init_dist = __esm(() => {
   $Composer = composer.Composer;
   $Document = Document.Document;
   $Schema = Schema.Schema;
-  $YAMLError = errors3.YAMLError;
-  $YAMLParseError = errors3.YAMLParseError;
-  $YAMLWarning = errors3.YAMLWarning;
+  $YAMLError = errors4.YAMLError;
+  $YAMLParseError = errors4.YAMLParseError;
+  $YAMLWarning = errors4.YAMLWarning;
   $Alias = Alias.Alias;
   $isAlias = identity.isAlias;
   $isCollection = identity.isCollection;
@@ -21632,10 +21698,10 @@ var init_dist = __esm(() => {
   $visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
-  init_dist();
+  init_dist2();
   init_zod();
   configSchema = exports_external.object({
     app: exports_external.object({
@@ -21656,7 +21722,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -21835,28 +21901,10 @@ var PluginManifestSchema = exports_external.looseObject({
   description: exports_external.string().optional(),
   operations: exports_external.record(exports_external.string(), PluginOperationSchema).optional()
 });
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.4.39/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.11/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.4.67/node_modules/@gobing-ai/ts-utils/dist/output.js
-var defaultStderrTarget;
-function processStream(name) {
-  const proc = globalThis.process;
-  const stream = proc?.[name];
-  if (stream === undefined) {
-    throw new Error(`No ${name} target available: set one via setDefaultOutputTargets or pass an explicit target`);
-  }
-  return stream;
-}
-function writeLine(message, target) {
-  target.write(`${message}
-`);
-}
-function echoError(message, target = defaultStderrTarget ?? processStream("stderr")) {
-  writeLine(message, target);
-}
-
 // ../../packages/kk-core/src/render-md.ts
 if (false) {}
 // ../../packages/publish-harness/src/index.ts
@@ -21934,6 +21982,7 @@ class FakeBrowserTransport {
 }
 
 // ../../plugins/publishings/zenn-pub/src/index.ts
+init_dist();
 var ZENN_CLI_VERSION = "0.5.4";
 function slugify2(str) {
   return str.toLowerCase().replace(/[^\w\s-]/g, "").trim().replace(/[\s_]+/g, "-");

package/plugins/sp/lib/env.ts

@@ -0,0 +1,46 @@
+/**
+ * Vendored env gateway for the sp plugin.
+ *
+ * WHY this copy exists: hooks and scripts in this plugin are bundled
+ * standalone by `superskill install` on targets that have no node_modules —
+ * any `@gobing-ai/*` import fails to resolve there and aborts the install
+ * ("Bundle failed", task 0669). This file mirrors the semantics of the
+ * canonical gateway (`@gobing-ai/ts-utils` dist/env, ts-libs) so the plugin
+ * stays self-contained. Keep in sync when the upstream gateway changes.
+ *
+ * These accessors are node-bun only: on `cloudflare-workers` there is no
+ * `process`; inject config explicitly rather than calling them (ADR-008).
+ */
+
+/**
+ * Read one environment variable. Only an unset variable yields `fallback`;
+ * an empty string is a set value and is returned as-is.
+ */
+export function getEnvVar(name: string, fallback?: string): string | undefined {
+    const raw = process.env[name];
+    return raw === undefined ? fallback : raw;
+}
+
+/**
+ * Read the live environment as a record. The returned object IS `process.env`
+ * (not a copy): whole-record operations see later mutations, which child-spawn
+ * composition relies on. For single variables prefer {@link getEnvVar}.
+ */
+export function getEnvVars(): Record<string, string | undefined> {
+    return process.env;
+}
+
+/**
+ * Set one environment variable through the gateway. Passing `undefined` removes
+ * the key, so the save/restore idiom (`const prev = getEnvVar(k); …
+ * setEnvVar(k, prev)`) restores absence exactly.
+ */
+export function setEnvVar(name: string, value: string | undefined): void {
+    if (value === undefined) delete process.env[name];
+    else process.env[name] = value;
+}
+
+/** Remove one environment variable; a no-op when the key is absent. */
+export function removeEnvVar(name: string): void {
+    delete process.env[name];
+}