@gobing-ai/knowledge-kit 0.0.27 → 0.0.29

package/plugins/kk/plugin.json

@@ -1,5 +1,5 @@
 {
     "name": "kk",
-    "version": "0.0.27",
+    "version": "0.0.29",
     "description": "knowledge-kit Claude Code plugin: skills, commands, subagents, hooks, and rules"
 }

package/plugins/kk/scripts/daily-voice-style.zh.md

@@ -1,33 +1,41 @@
-# 每日AI科技漫谈 · 主持风格契约（zh）
+# AI 乱炖 · 主持风格契约（zh）
 
-`kk-daily-ai-voice` 的每一句口播都受这份契约约束（F613 R1）。`script-write` 提示词与
-`dailynews-gen` 的校验器读取同一份机器可读块，因此提示词与校验永远一致。
+`kk-daily-ai-voice` 的每一句口播都受这份契约约束（F613 R1；0189 R1 改定位）。`script-write`
+提示词与 `dailynews-gen` 的校验器读取同一份机器可读块，因此提示词与校验永远一致。
+
+## 栏目定位（0189 R1）
+
+「AI 乱炖」是「咸话咸说」下的 AI 技术分享栏目，副题「工具、论文与实践随聊」。口播是开发者
+视角的技术分享，不是新闻通报：不播报时事，不以任何代称、绰号或「闲聊」包装政治、外交、
+军事、公共政策争议或社会公共事件主线的内容——这类条目在选题/QC 阶段就应被排除（0189 R2）。
+身份与经历必须真实：只讲真实做过的实测与实践，AI 配音参与按真实程度说明。
 
 ## 人设与语域
 
-- 口语化普通话，第一人称「我」，像一位冷静、有依据的科技播客主播。
+- 口语化普通话，第一人称「我」，像一位冷静、有依据的 AI 技术分享主播。
 - 平实、克制、不炒作：不夸大单一消息的意义，不使用惊叹式渲染或营销话术。
-- 面向普通听众说明「这件事为什么重要」，而不是堆砌术语。
+- 面向普通听众说明「这件事为什么重要」或「怎么用得上」，而不是堆砌术语。
 
 ## 固定开场与收尾
 
 开场问候与收尾致谢由 builder 固定输出，计划文本只填充两者之间的内容，节目身份永不漂移：
 
-- 开场：`大家好，今天是<日期>，欢迎收听由<主持人>为您带来的今日AI科技漫谈。`
+- 开场：`大家好，今天是<日期>，欢迎收听「咸话咸说」的「AI 乱炖」栏目，我是<主持人>。`
 - 收尾：`感谢您的收听，我是<主持人>，祝您拥有充实高效的一天，我们下期节目不见不散！`
 
 ## 段落角色
 
-- `intro`：开场导语，串起今天几条主题，接在固定问候之后，不超过 120 字。
-- `lead`：一句话口语桥段，引出下一条新闻的【标题】；只做铺垫，不得复述标题本身，不超过 60 字。
-- `insight`：只基于这条新闻自身事实的 1–2 句点评，说明它为什么重要；不得挪用其他新闻的话题，不超过 160 字。
+- `intro`：开场导语，串起今天几个主题，接在固定问候之后，不超过 120 字。
+- `lead`：一句话口语桥段，引出下一个主题的【标题】；只做铺垫，不得复述标题本身，不超过 60 字。
+- `insight`：只基于这一条自身可核事实的 1–2 句点评，说明它为什么重要或怎么用得上；不得挪用其他条目的话题，不超过 160 字。
 - `outro`：简短收束语，接在固定致谢之前，不超过 120 字。
 
 ## 机器可读契约
 
 `caps` 是各字段的字数上限；`banned` 是任何计划字段都不得出现的短语——包括旧模板的全部罐头
-点评、旧模板的 首先/接着/最后 开头，以及 0133 的研究脚手架标签与对冲语（校验规则
-`banned:<短语>`）。
+点评、旧模板的 首先/接着/最后 开头、0133 的研究脚手架标签与对冲语（校验规则
+`banned:<短语>`），以及 0189 R4 退役的旧栏目名（「每日 AI 资讯」「AI科技漫谈」
+「AI Daily Briefing」）：任何路径都不得让旧新闻定位复活。
 
 ```json
 {
@@ -46,7 +54,12 @@
     "背景",
     "潜在影响",
     "读者宜另行核实",
-    "仍待验证"
+    "仍待验证",
+    "每日AI资讯",
+    "每日 AI 资讯",
+    "今日AI科技漫谈",
+    "AI科技漫谈",
+    "AI Daily Briefing"
   ]
 }
 ```

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -717,6 +717,119 @@ function dailyPlan(args: string[]): void {
     });
 }
 
+/**
+ * Topic-boundary sidecar (task 0189 R2). Sibling of this file; node-builtins-only read.
+ */
+interface TopicBoundaryRule {
+    id: string;
+    reason: string;
+    keywords: string[];
+}
+
+interface TopicBoundarySpec {
+    version: number;
+    scanChars: number;
+    rules: TopicBoundaryRule[];
+    dateConflict: { reason: string };
+}
+
+interface TopicBoundaryExclusion {
+    id: string;
+    title: string;
+    rule: string;
+    reason: string;
+    matched: string;
+}
+
+function readTopicBoundary(): TopicBoundarySpec {
+    const path = join(SCRIPTS_DIR, 'topic-boundary.json');
+    let parsed: TopicBoundarySpec;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf-8')) as TopicBoundarySpec;
+    } catch (err: unknown) {
+        failWith(1, `topic-boundary: spec unreadable at ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!Array.isArray(parsed.rules) || parsed.rules.length === 0) {
+        failWith(1, `topic-boundary: spec at ${path} carries no rules`);
+    }
+    return parsed;
+}
+
+/**
+ * Deterministic topic admission for the AI 乱炖 column (task 0189 R2): an item whose mainline is
+ * political/diplomatic-trade, military, public-policy dispute, or a social public event is
+ * excluded with its ID, rule and matched keyword recorded — sources stay untouched. A date that
+ * contradicts the run (publishedAt after the run date, e.g. an aggregated future-dated draft) is
+ * inadmissible as evidence (R3). Matches scan the title plus the first `scanChars` chars of the
+ * body — precision first: a body-mention far below the fold does not exclude. Matching is
+ * case-insensitive (task 0189 F2: both sides lowercased; zh unaffected) so headline-capitalized
+ * "President"/"Pentagon" still hit the lowercase English keywords in the spec.
+ */
+export function applyTopicBoundary(
+    docs: unknown[],
+    runDate: string,
+    spec: TopicBoundarySpec,
+): {
+    kept: unknown[];
+    excluded: TopicBoundaryExclusion[];
+} {
+    const excluded: TopicBoundaryExclusion[] = [];
+    const kept: unknown[] = [];
+    for (const doc of docs) {
+        const record = (doc ?? {}) as Record<string, unknown>;
+        const title = typeof record.title === 'string' ? record.title : '';
+        const body = typeof record.body === 'string' ? record.body : '';
+        const haystack = `${title}\n${body.slice(0, spec.scanChars)}`;
+        // Case-insensitive comparison (task 0189 F2): spec keywords are lowercase English; the
+        // recorded `matched` stays the spec's keyword verbatim. zh is unaffected by lowercasing.
+        const needle = haystack.toLowerCase();
+        let exclusion: TopicBoundaryExclusion | null = null;
+        for (const rule of spec.rules) {
+            // ASCII keywords must start at a word boundary ("selection" is not "election", "patriot"
+            // is not "riot"); the tail stays open so plurals/inflections still hit. zh keywords have
+            // no word boundaries and keep plain substring matching.
+            const matched = rule.keywords.find((keyword) => {
+                const lower = keyword.toLowerCase();
+                if (lower === '') return false;
+                return /^[a-z]/.test(lower)
+                    ? new RegExp(`\\b${lower.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`).test(needle)
+                    : needle.includes(lower);
+            });
+            if (matched !== undefined) {
+                exclusion = { id: String(record.id ?? ''), title, rule: rule.id, reason: rule.reason, matched };
+                break;
+            }
+        }
+        if (exclusion === null) {
+            const publishedAt = metadataOf(record).publishedAt;
+            const stamp = typeof publishedAt === 'string' ? publishedAt : '';
+            const runIso = /^\d{8}$/.test(runDate)
+                ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`
+                : '';
+            if (runIso !== '' && stamp !== '') {
+                const published = new Date(stamp);
+                if (
+                    !Number.isNaN(published.getTime()) &&
+                    // No zone suffix: run_date is a LOCAL day, so its end is local too — a UTC
+                    // cutoff flags same-evening items west of Greenwich as future-dated.
+                    published.getTime() > new Date(`${runIso}T23:59:59`).getTime()
+                ) {
+                    exclusion = {
+                        id: String(record.id ?? ''),
+                        title,
+                        rule: 'date-conflict',
+                        reason: spec.dateConflict.reason,
+                        matched: stamp,
+                    };
+                }
+            }
+        }
+        if (exclusion !== null) excluded.push(exclusion);
+        else kept.push(doc);
+    }
+    return { kept, excluded };
+}
+
 function dailyQcContent(args: string[]): void {
     const [
         workDir = '',
@@ -730,6 +843,7 @@ function dailyQcContent(args: string[]): void {
     ] = args;
     const candidates = join(workDir, '21-plan', `${runDate}_04_quality-control-content_candidates.json`);
     const annotated = join(workDir, '21-plan', `${runDate}_04_quality-control-content_annotated.json`);
+    const exclusions = join(workDir, '21-plan', `${runDate}_04_quality-control-content_exclusions.json`);
     const planContent = join(workDir, '21-plan', `${runDate}_03_plan_content.json`);
     timed(workDir, 'quality-control-content', () => {
         if (isFile(candidates)) {
@@ -760,6 +874,32 @@ function dailyQcContent(args: string[]): void {
             },
         );
     });
+    // Topic boundary (task 0189 R2) runs on every invocation — re-applying to already-filtered
+    // candidates is a no-op, so cached reruns stay idempotent while a crash between the candidates
+    // write and the exclusions write still converges on the next run. Zero kept docs leaves the
+    // candidates file empty for the workflow's existing done-no-content edge.
+    const boundaryDocs = metadataOf(readJson(candidates)).docs;
+    if (!Array.isArray(boundaryDocs)) return;
+    const { kept, excluded } = applyTopicBoundary(boundaryDocs, runDate, readTopicBoundary());
+    if (excluded.length === 0) return;
+    sted('write', exclusions, () =>
+        writeJsonText(exclusions, {
+            version: 1,
+            runDate,
+            excluded,
+            kept: kept.map((doc) => (doc as { id: string }).id),
+        }),
+    );
+    const content = requireJson(candidates, 'topic-boundary');
+    const meta = content.metadata;
+    if (meta === null || typeof meta !== 'object') {
+        failWith(1, 'topic-boundary: candidates content carries no metadata object');
+    }
+    (meta as Record<string, unknown>).docs = kept;
+    sted('write', candidates, () => writeJsonText(candidates, content));
+    console.log(
+        `topic-boundary: excluded ${excluded.length} item(s): ${excluded.map((entry) => `${entry.id}(${entry.rule})`).join(', ')}`,
+    );
 }
 
 /**
@@ -1090,7 +1230,8 @@ function xhsPlan(planPath: string, count: number): { title: string; body: string
 /**
  * E8: build one `image-gen` envelope per planned card, render them sequentially, and package the
  * ordered card manifest + `Content` that `xhs-pub` consumes. Format, style, provider and model
- * are pinned here (never model-authored), so the series cannot drift from its preset. Resume-safe:
+ * are pinned here (never model-authored), so the series cannot drift from its preset. Card copy
+ * is typeset by image-gen's composer; the provider prompt stays text-free (0181). Resume-safe:
  * a card whose recorded artifact is still on disk is not re-rendered — and not re-billed.
  */
 function dailyXhsRender(args: string[]): void {
@@ -1124,7 +1265,6 @@ function dailyXhsRender(args: string[]): void {
                         headline: card.copy,
                         points: card.points.join('\n'),
                         subject: card.subject,
-                        language: '简体中文',
                         index: card.index,
                     },
                     maxImages: 1,
@@ -1136,8 +1276,10 @@ function dailyXhsRender(args: string[]): void {
                         { id: `xhs-card-${card.index}`, title: runDate, body: '', metadata: { imageGen } },
                     ]),
                 );
-                // Sequential on purpose: one provider call per card, and the first failure stops
-                // the spend — later cards stay unrendered for a resume run to pick up.
+                // Sequential on purpose: one provider call per card (illustration only —
+                // card copy is typeset by image-gen's composer, never prompted), and the
+                // first failure stops the spend — later cards stay unrendered for a resume
+                // run to pick up.
                 kk(['executor', 'run', 'image-gen', '--in', envPath, '--out', out, ...pluginsArgs(pluginsPath)]);
                 artifact = firstArtifact(requireJson(out, 'xhs render'));
             }
@@ -1148,6 +1290,15 @@ function dailyXhsRender(args: string[]): void {
             }
             // `image-gen` writes the artifact beside `--out`; the publisher requires absolute paths.
             const imagePath = resolve(recorded);
+            // 0181: a composed card may also carry the text-free illustration layer; keep
+            // its recorded path so the manifest shows both layers.
+            const rawIllustration: unknown = artifact.illustration;
+            const illustrationPath =
+                typeof rawIllustration === 'object' &&
+                rawIllustration !== null &&
+                typeof (rawIllustration as Record<string, unknown>).path === 'string'
+                    ? resolve((rawIllustration as Record<string, unknown>).path as string)
+                    : undefined;
             sted('write', promptPath, () =>
                 writeRaw(promptPath, typeof artifact.prompt === 'string' ? artifact.prompt : ''),
             );
@@ -1160,6 +1311,7 @@ function dailyXhsRender(args: string[]): void {
                 layout: card.layout,
                 promptPath,
                 imagePath,
+                illustrationPath,
                 status: 'rendered',
             });
         }
@@ -1233,7 +1385,9 @@ function dailyPublishXhs(args: string[]): void {
  * outcome never enters `publish_status` (surfdash + podcast remain the publication contract).
  */
 function dailyPublishWechat(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', live = 'false'] = args;
+    const [workDirRaw = '', runDate = '', pluginsPath = '', live = 'false', collectionArg = ''] = args;
+    // Metadata carries file paths consumed by the plugin child process (cwd = plugin dir) - never emit relatives.
+    const workDir = resolve(workDirRaw);
     const article = join(workDir, '22-article', `${runDate}_06_article_content.json`);
     const input = join(workDir, '31-publish', `${runDate}_20_publish-wechat_content.json`);
     const result = join(workDir, '31-publish', `${runDate}_20_publish-wechat_result.json`);
@@ -1250,8 +1404,35 @@ function dailyPublishWechat(args: string[]): void {
             return;
         }
         const packaged = requireJson(article, 'publish-wechat');
+        // MP draft enrichment (operator preference 2026-09-29): 原创+作者, 赞赏, 合集, 原文链接
+        // (the surfdash post), AI 生成声明, cover. The brand strings are this daily show's constants.
+        const cover = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
+        const audio = join(workDir, '30-audio', `${runDate}_11_generate_content.mp3`);
+        const wechatmp: Record<string, unknown> = {
+            original: true,
+            aiGenerated: true,
+            author: '冰原奔狼',
+            collection: collectionArg || 'AI 乱炖',
+            ...(isFile(cover) ? { coverPath: cover } : {}),
+            // Audio block at the article top (operator request 2026-09-29): the daily MP3 goes to
+            // the 素材库 under the article title; the plugin reuses an existing same-title material.
+            ...(isFile(audio)
+                ? {
+                      audioPath: audio,
+                      audioTitle: typeof packaged.title === 'string' ? packaged.title : '',
+                      audioCoverPath: isFile(cover) ? cover : '',
+                  }
+                : {}),
+        };
+        // WeChat-only closing line (operator request 2026-09-29): point readers/listeners back to
+        // the show's platforms. Appended to the wechat input body only, never the master article.
+        const outro = '\n\n欲听往期节目，可至小宇宙、Apple Podcast、YouTube 等平台搜索【咸话咸说】。';
         sted('write', input, () =>
-            writeJsonText(input, { ...packaged, metadata: { ...metadataOf(packaged), publishStatus: want } }),
+            writeJsonText(input, {
+                ...packaged,
+                body: `${typeof packaged.body === 'string' ? packaged.body : ''}${outro}`,
+                metadata: { ...metadataOf(packaged), publishStatus: want, wechatmp },
+            }),
         );
         // `soft` keeps the WeChat target non-blocking: the plugin still writes its own failed Result
         // and prints the failing step (session preflight, editor paste, save control), which is what
@@ -1304,6 +1485,9 @@ function dailyScript(args: string[]): void {
             env: {
                 DAILYNEWS_LANGUAGE: language,
                 DAILYNEWS_TITLE: title,
+                // Task 0189: the broadcast greeting carries the episode's run date, not the render
+                // date — a backfilled/retried run must not greet "today".
+                DAILYNEWS_DATE: runDate,
                 VOICEBOX_DEFAULT_PROFILE: voiceProfile,
                 // F613 R4: always passed as absolute paths — spawnPluginEntry runs plugins with
                 // cwd = the plugin package dir, so a relative workDir would silently miss the
@@ -1328,6 +1512,91 @@ function dailyScript(args: string[]): void {
     });
 }
 
+/** Task 0189 R10 artifacts of the content-safety verdict gate (24-script, step 09). */
+function safetyPath(workDir: string, runDate: string, name: string): string {
+    return join(workDir, '24-script', `${runDate}_09_${name}`);
+}
+
+/**
+ * Digest of the exact drafts under review (article Content + VoiceScript). A verdict is only valid
+ * for the bytes it was issued on: the gate and publish-prep both recompute this, so an edit after
+ * PASS — including a HITL edit at `review` — invalidates the stamp instead of riding on it.
+ */
+function safetyDigest(workDir: string, runDate: string): string {
+    const hash = createHash('sha256');
+    for (const path of [
+        join(workDir, '22-article', `${runDate}_06_article_content.json`),
+        join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`),
+    ]) {
+        if (!isFile(path)) failWith(1, `safety-review: required draft not found: ${path}`);
+        hash.update(readFileSync(path)).update('\0');
+    }
+    return hash.digest('hex');
+}
+
+/**
+ * Open a content-safety review of the current drafts: drop every artifact of an earlier review
+ * (a retry must be re-reviewed on its final version) and write the request the two agent.run
+ * steps read. The program passes context only — platform policy lives in the kk:content-safety
+ * skill's reference files, never here.
+ */
+function dailySafetyPrep(args: string[]): void {
+    const [workDir = '', runDate = '', platforms = ''] = args;
+    timed(workDir, 'safety-review', () => {
+        const digest = safetyDigest(workDir, runDate);
+        for (const name of [
+            'safety-review_report.json',
+            'safety-judge_verdict.json',
+            'safety-judge_status.txt',
+            'safety-judge_stamp.json',
+        ]) {
+            const stale = safetyPath(workDir, runDate, name);
+            if (isFile(stale)) unlinkSync(stale);
+        }
+        const request = safetyPath(workDir, runDate, 'safety-review_request.json');
+        const targets = platforms
+            .split(',')
+            .map((platform) => platform.trim())
+            .filter(Boolean);
+        sted('write', request, () => writeJsonText(request, { digest, platforms: targets, mode: 'detect-only' }));
+    });
+}
+
+/**
+ * Consume the content-safety report and the content-judge verdict into pass|escalate|block (exit 0
+ * in all three — routing is transition-owned). Fail-closed: only an explicit PASS verdict on the
+ * unchanged drafts, with a well-formed report carrying no BLOCK, unblocks; a RISK decision or
+ * `escalate: true` forces the human review regardless of the verdict score.
+ */
+function dailySafetyGate(args: string[]): void {
+    const [workDir = '', runDate = ''] = args;
+    const statusFile = safetyPath(workDir, runDate, 'safety-judge_status.txt');
+    const stampFile = safetyPath(workDir, runDate, 'safety-judge_stamp.json');
+    timed(workDir, 'safety-judge', () => {
+        const request = readJson(safetyPath(workDir, runDate, 'safety-review_request.json'));
+        const report = readJson(safetyPath(workDir, runDate, 'safety-review_report.json'));
+        const verdict = readJson(safetyPath(workDir, runDate, 'safety-judge_verdict.json'));
+        const platforms = Array.isArray(report?.platforms) ? (report.platforms as Record<string, unknown>[]) : [];
+        const decisions = platforms.map((platform) => platform?.decision);
+        const digest = safetyDigest(workDir, runDate);
+        let status = 'block';
+        let reason = 'verdict PASS on unchanged drafts, no BLOCK/RISK';
+        if (request?.digest !== digest) reason = 'drafts changed after the review was requested';
+        else if (decisions.length === 0 || decisions.some((d) => d !== 'OK' && d !== 'RISK' && d !== 'BLOCK'))
+            reason = 'content-safety report missing or malformed';
+        else if (decisions.includes('BLOCK')) reason = 'content-safety report carries a BLOCK decision';
+        else if (verdict?.verdict !== 'PASS')
+            reason = `content-judge verdict is ${typeof verdict?.verdict === 'string' ? verdict.verdict : 'missing or unreadable'}`;
+        else if (decisions.includes('RISK') || report?.escalate === true) {
+            status = 'escalate';
+            reason = 'RISK decision or escalation — human review required';
+        } else status = 'pass';
+        if (status !== 'block') sted('write', stampFile, () => writeJsonText(stampFile, { digest, status }));
+        sted('write', statusFile, () => writeRaw(statusFile, status));
+        console.log(`safety: status=${status} (${reason}); routing is transition-owned`);
+    });
+}
+
 function dailyWrapDocs(args: string[]): void {
     const [workDir = '', runDate = '', voiceProfile = ''] = args;
     const scriptPath = join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`);
@@ -1575,6 +1844,17 @@ function dailyPublishPrep(args: string[]): void {
         stampId3Tags(audioFile, typeof article.title === 'string' ? article.title : '', runDate, artist, album);
         const resolvedCover = resolve(coverPath);
         const hasCover = existsSync(resolvedCover);
+        // Daily-show itunes convention: season = year, episode = day-of-year. run_date arrives
+        // dashed (`$(date +%F)`) or digits-only (formatRunDate); map.ts forwards numbers only,
+        // so a malformed run_date omits both tags instead of failing the publish.
+        const digits = runDate.replaceAll(/\D/g, '');
+        const season = Number(digits.slice(0, 4));
+        const month = Number(digits.slice(4, 6));
+        const day = Number(digits.slice(6, 8));
+        const episode =
+            digits.length === 8 && month >= 1 && month <= 12 && day >= 1 && day <= 31
+                ? Math.round((Date.UTC(season, month - 1, day) - Date.UTC(season, 0, 1)) / 86_400_000) + 1
+                : 0;
         // podcast-pub's documented contract reads metadata.coverImage (map.ts); options.coverPath
         // alone was silently dropped by the mapper — episodes published without a cover.
         const merged = {
@@ -1584,6 +1864,7 @@ function dailyPublishPrep(args: string[]): void {
                 audioFile,
                 runDate,
                 ...(hasCover ? { coverImage: resolvedCover } : {}),
+                ...(episode > 0 ? { itunes: { season, episode } } : {}),
             },
             options: {
                 audioFile,
@@ -1591,6 +1872,13 @@ function dailyPublishPrep(args: string[]): void {
                 coverPath: hasCover ? resolvedCover : undefined,
             },
         };
+        // Task 0189 R10: the last program seam before anything is dispatched. No stamp, or a
+        // stamp issued on different bytes (edited after PASS, or an older draft), never publishes.
+        const stamp = readJson(safetyPath(workDir, runDate, 'safety-judge_stamp.json'));
+        if (stamp === null) failWith(1, 'publish-prep: no content-safety verdict stamp for this run — not publishing');
+        if (stamp.digest !== safetyDigest(workDir, runDate)) {
+            failWith(1, 'publish-prep: drafts changed after the content-safety verdict — re-run the review');
+        }
         sted('write', prepPath, () => writeJsonText(prepPath, merged));
     });
 }
@@ -1647,6 +1935,9 @@ function dailyShowNotes(args: string[]): void {
                 PODCAST_PUB_RUN_DATE: runDate,
                 PODCAST_PUB_BRIEF_MODE: 'true',
                 PODCAST_PUB_ARTICLE_POST_PATH: postPath,
+                // Task 0189 R1 / Apple §1.11: AI-voice disclosure in the episode metadata, not only
+                // in the audio sign-off and the article footer.
+                PODCAST_PUB_FOOTER_NOTE: '本期文字由 AI 辅助整理，音频为 AI 合成配音。',
                 ...(isFile(audioContent) ? { PODCAST_PUB_AUDIO_CONTENT: audioContent } : {}),
             },
         });
@@ -1765,7 +2056,7 @@ function dailyPublishPartial(args: string[]): void {
  * Idempotent per post; commits + pushes the surfdash checkout (SURFDASH_AUTO_PUSH=0 keeps commit-only).
  */
 function dailyPatchSurfdash(args: string[]): void {
-    const [workDir = '', runDate = '', surfdashRoot = ''] = args;
+    const [workDir = '', runDate = '', surfdashRoot = '', pluginsPath = ''] = args;
     if (!surfdashRoot || !existsSync(surfdashRoot)) {
         console.log(`patch-surfdash: surfdash root '${surfdashRoot}' not found — skip`);
         return;
@@ -1802,9 +2093,11 @@ function dailyPatchSurfdash(args: string[]): void {
         const localCover = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
         const dateIso = `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`;
         const crossLink: Record<string, string> = {
-            zh: `🎧 本期已同步制作为播客节目，[点击收听《每日 AI 资讯 · ${dateIso}》](${showNotesUrl})。`,
-            en: `🎧 This episode is also available as a podcast: [listen to the Daily AI Briefing · ${dateIso}](${showNotesUrl}).`,
-            ja: `🎧 本エピソードはポッドキャストでも配信中：[Daily AI Briefing · ${dateIso} を聴く](${showNotesUrl})。`,
+            // Task 0189 R4: cross-links carry the column's episode-title pattern, not the retired
+            // news-bulletin name (the VoiceScript episode title is episodeTitle(lead, date)).
+            zh: `🎧 本期已同步制作为播客节目，[点击收听《AI 乱炖 · ${dateIso}》](${showNotesUrl})。`,
+            en: `🎧 This episode is also available as a podcast: [listen to AI 乱炖 · ${dateIso}](${showNotesUrl}).`,
+            ja: `🎧 本エピソードはポッドキャストでも配信中：[AI 乱炖 · ${dateIso} を聴く](${showNotesUrl})。`,
         };
         let changed = 0;
         for (const [locale, dir] of [
@@ -1866,6 +2159,39 @@ function dailyPatchSurfdash(args: string[]): void {
                 changed++;
             }
         }
+        // 20260929 prod feedback: CMS cards (homepage hero/tag/search) read EmDash rows whose
+        // featured_image is snapshotted at translate-sync time — i.e. the pre-patch
+        // `./assets/cover.png`, which the deployed worker does not serve (404). The patch only
+        // rewrites files, so re-sync the EmDash rows from the patched files through the same
+        // `kk executor` path as translate-sync (its plugin child gets EMDASH_API_TOKEN from kk
+        // config; a direct orchestrator spawn gets 403 from prod dev-bypass). Runs before the
+        // changed===0 early-return so re-runs heal rows an earlier commit left stale
+        // (20260925/20260929). Fixture tests pass no plugins-path and must not shell out.
+        if (pluginsPath === '') {
+            console.log('patch-surfdash: no plugins-path — skip emdash re-sync');
+        } else {
+            const syncIn = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_sync.json`);
+            const syncResult = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_sync-result.json`);
+            sted('write', syncIn, () =>
+                writeJqText(syncIn, { body: '', options: { operation: 'sync', postPath: join(slugDir, 'index.md') } }),
+            );
+            const status = kk(
+                ['executor', 'run', 'surfdash-pub', '--in', syncIn, '--out', syncResult, ...pluginsArgs(pluginsPath)],
+                { unset: NESTED_SPUR_UNSET, soft: true },
+            );
+            const result = isFile(syncResult) ? readJson(syncResult) : null;
+            const ok =
+                status === 0 &&
+                result !== null &&
+                (result.ok === true || (result.targets as Array<{ ok?: boolean }> | undefined)?.[0]?.ok === true);
+            if (!ok) {
+                console.log(
+                    `patch-surfdash: WARNING: emdash re-sync failed (exit ${status}) — CMS cards keep the stale cover; fix: kk executor run surfdash-pub --in ${syncIn} --out ${syncResult} --plugins-path ${pluginsPath}`,
+                );
+            } else {
+                console.log('patch-surfdash: emdash rows re-synced from patched files');
+            }
+        }
         if (changed === 0) {
             console.log('patch-surfdash: nothing to change');
             return;
@@ -2035,7 +2361,8 @@ function dailyTranslateSync(args: string[]): void {
 
 const [stage, ...rest] = process.argv.slice(2);
 
-// Imported as a module (unit tests reach `dedupPlanByTitle`) → exports only, never a stage run;
+// Imported as a module (unit tests reach `dedupPlanByTitle` / `applyTopicBoundary`) → exports
+// only, never a stage run;
 // executed as the entrypoint → dispatch.
 if (import.meta.main)
     switch (stage) {
@@ -2118,6 +2445,12 @@ if (import.meta.main)
         case 'daily-script':
             dailyScript(rest);
             break;
+        case 'daily-safety-prep':
+            dailySafetyPrep(rest);
+            break;
+        case 'daily-safety-gate':
+            dailySafetyGate(rest);
+            break;
         case 'daily-wrap-docs':
             dailyWrapDocs(rest);
             break;