@gobing-ai/knowledge-kit 0.0.28 → 0.0.30

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -717,6 +717,119 @@ function dailyPlan(args: string[]): void {
     });
 }
 
+/**
+ * Topic-boundary sidecar (task 0189 R2). Sibling of this file; node-builtins-only read.
+ */
+interface TopicBoundaryRule {
+    id: string;
+    reason: string;
+    keywords: string[];
+}
+
+interface TopicBoundarySpec {
+    version: number;
+    scanChars: number;
+    rules: TopicBoundaryRule[];
+    dateConflict: { reason: string };
+}
+
+interface TopicBoundaryExclusion {
+    id: string;
+    title: string;
+    rule: string;
+    reason: string;
+    matched: string;
+}
+
+function readTopicBoundary(): TopicBoundarySpec {
+    const path = join(SCRIPTS_DIR, 'topic-boundary.json');
+    let parsed: TopicBoundarySpec;
+    try {
+        parsed = JSON.parse(readFileSync(path, 'utf-8')) as TopicBoundarySpec;
+    } catch (err: unknown) {
+        failWith(1, `topic-boundary: spec unreadable at ${path}: ${err instanceof Error ? err.message : String(err)}`);
+    }
+    if (!Array.isArray(parsed.rules) || parsed.rules.length === 0) {
+        failWith(1, `topic-boundary: spec at ${path} carries no rules`);
+    }
+    return parsed;
+}
+
+/**
+ * Deterministic topic admission for the AI 乱炖 column (task 0189 R2): an item whose mainline is
+ * political/diplomatic-trade, military, public-policy dispute, or a social public event is
+ * excluded with its ID, rule and matched keyword recorded — sources stay untouched. A date that
+ * contradicts the run (publishedAt after the run date, e.g. an aggregated future-dated draft) is
+ * inadmissible as evidence (R3). Matches scan the title plus the first `scanChars` chars of the
+ * body — precision first: a body-mention far below the fold does not exclude. Matching is
+ * case-insensitive (task 0189 F2: both sides lowercased; zh unaffected) so headline-capitalized
+ * "President"/"Pentagon" still hit the lowercase English keywords in the spec.
+ */
+export function applyTopicBoundary(
+    docs: unknown[],
+    runDate: string,
+    spec: TopicBoundarySpec,
+): {
+    kept: unknown[];
+    excluded: TopicBoundaryExclusion[];
+} {
+    const excluded: TopicBoundaryExclusion[] = [];
+    const kept: unknown[] = [];
+    for (const doc of docs) {
+        const record = (doc ?? {}) as Record<string, unknown>;
+        const title = typeof record.title === 'string' ? record.title : '';
+        const body = typeof record.body === 'string' ? record.body : '';
+        const haystack = `${title}\n${body.slice(0, spec.scanChars)}`;
+        // Case-insensitive comparison (task 0189 F2): spec keywords are lowercase English; the
+        // recorded `matched` stays the spec's keyword verbatim. zh is unaffected by lowercasing.
+        const needle = haystack.toLowerCase();
+        let exclusion: TopicBoundaryExclusion | null = null;
+        for (const rule of spec.rules) {
+            // ASCII keywords must start at a word boundary ("selection" is not "election", "patriot"
+            // is not "riot"); the tail stays open so plurals/inflections still hit. zh keywords have
+            // no word boundaries and keep plain substring matching.
+            const matched = rule.keywords.find((keyword) => {
+                const lower = keyword.toLowerCase();
+                if (lower === '') return false;
+                return /^[a-z]/.test(lower)
+                    ? new RegExp(`\\b${lower.replace(/[.*+?^${}()|[\]\\]/g, '\\$&')}`).test(needle)
+                    : needle.includes(lower);
+            });
+            if (matched !== undefined) {
+                exclusion = { id: String(record.id ?? ''), title, rule: rule.id, reason: rule.reason, matched };
+                break;
+            }
+        }
+        if (exclusion === null) {
+            const publishedAt = metadataOf(record).publishedAt;
+            const stamp = typeof publishedAt === 'string' ? publishedAt : '';
+            const runIso = /^\d{8}$/.test(runDate)
+                ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`
+                : '';
+            if (runIso !== '' && stamp !== '') {
+                const published = new Date(stamp);
+                if (
+                    !Number.isNaN(published.getTime()) &&
+                    // No zone suffix: run_date is a LOCAL day, so its end is local too — a UTC
+                    // cutoff flags same-evening items west of Greenwich as future-dated.
+                    published.getTime() > new Date(`${runIso}T23:59:59`).getTime()
+                ) {
+                    exclusion = {
+                        id: String(record.id ?? ''),
+                        title,
+                        rule: 'date-conflict',
+                        reason: spec.dateConflict.reason,
+                        matched: stamp,
+                    };
+                }
+            }
+        }
+        if (exclusion !== null) excluded.push(exclusion);
+        else kept.push(doc);
+    }
+    return { kept, excluded };
+}
+
 function dailyQcContent(args: string[]): void {
     const [
         workDir = '',
@@ -727,9 +840,11 @@ function dailyQcContent(args: string[]): void {
         minImportance = '',
         minUrgency = '',
         minImpact = '',
+        minEpisodeItems = '',
     ] = args;
     const candidates = join(workDir, '21-plan', `${runDate}_04_quality-control-content_candidates.json`);
     const annotated = join(workDir, '21-plan', `${runDate}_04_quality-control-content_annotated.json`);
+    const exclusions = join(workDir, '21-plan', `${runDate}_04_quality-control-content_exclusions.json`);
     const planContent = join(workDir, '21-plan', `${runDate}_03_plan_content.json`);
     timed(workDir, 'quality-control-content', () => {
         if (isFile(candidates)) {
@@ -756,10 +871,37 @@ function dailyQcContent(args: string[]): void {
                     QC_MIN_IMPORTANCE: minImportance,
                     QC_MIN_URGENCY: minUrgency,
                     QC_MIN_IMPACT: minImpact,
+                    QC_MIN_EPISODE_ITEMS: minEpisodeItems,
                 },
             },
         );
     });
+    // Topic boundary (task 0189 R2) runs on every invocation — re-applying to already-filtered
+    // candidates is a no-op, so cached reruns stay idempotent while a crash between the candidates
+    // write and the exclusions write still converges on the next run. Zero kept docs leaves the
+    // candidates file empty for the workflow's existing done-no-content edge.
+    const boundaryDocs = metadataOf(readJson(candidates)).docs;
+    if (!Array.isArray(boundaryDocs)) return;
+    const { kept, excluded } = applyTopicBoundary(boundaryDocs, runDate, readTopicBoundary());
+    if (excluded.length === 0) return;
+    sted('write', exclusions, () =>
+        writeJsonText(exclusions, {
+            version: 1,
+            runDate,
+            excluded,
+            kept: kept.map((doc) => (doc as { id: string }).id),
+        }),
+    );
+    const content = requireJson(candidates, 'topic-boundary');
+    const meta = content.metadata;
+    if (meta === null || typeof meta !== 'object') {
+        failWith(1, 'topic-boundary: candidates content carries no metadata object');
+    }
+    (meta as Record<string, unknown>).docs = kept;
+    sted('write', candidates, () => writeJsonText(candidates, content));
+    console.log(
+        `topic-boundary: excluded ${excluded.length} item(s): ${excluded.map((entry) => `${entry.id}(${entry.rule})`).join(', ')}`,
+    );
 }
 
 /**
@@ -1090,7 +1232,8 @@ function xhsPlan(planPath: string, count: number): { title: string; body: string
 /**
  * E8: build one `image-gen` envelope per planned card, render them sequentially, and package the
  * ordered card manifest + `Content` that `xhs-pub` consumes. Format, style, provider and model
- * are pinned here (never model-authored), so the series cannot drift from its preset. Resume-safe:
+ * are pinned here (never model-authored), so the series cannot drift from its preset. Card copy
+ * is typeset by image-gen's composer; the provider prompt stays text-free (0181). Resume-safe:
  * a card whose recorded artifact is still on disk is not re-rendered — and not re-billed.
  */
 function dailyXhsRender(args: string[]): void {
@@ -1124,7 +1267,6 @@ function dailyXhsRender(args: string[]): void {
                         headline: card.copy,
                         points: card.points.join('\n'),
                         subject: card.subject,
-                        language: '简体中文',
                         index: card.index,
                     },
                     maxImages: 1,
@@ -1136,8 +1278,10 @@ function dailyXhsRender(args: string[]): void {
                         { id: `xhs-card-${card.index}`, title: runDate, body: '', metadata: { imageGen } },
                     ]),
                 );
-                // Sequential on purpose: one provider call per card, and the first failure stops
-                // the spend — later cards stay unrendered for a resume run to pick up.
+                // Sequential on purpose: one provider call per card (illustration only —
+                // card copy is typeset by image-gen's composer, never prompted), and the
+                // first failure stops the spend — later cards stay unrendered for a resume
+                // run to pick up.
                 kk(['executor', 'run', 'image-gen', '--in', envPath, '--out', out, ...pluginsArgs(pluginsPath)]);
                 artifact = firstArtifact(requireJson(out, 'xhs render'));
             }
@@ -1148,6 +1292,15 @@ function dailyXhsRender(args: string[]): void {
             }
             // `image-gen` writes the artifact beside `--out`; the publisher requires absolute paths.
             const imagePath = resolve(recorded);
+            // 0181: a composed card may also carry the text-free illustration layer; keep
+            // its recorded path so the manifest shows both layers.
+            const rawIllustration: unknown = artifact.illustration;
+            const illustrationPath =
+                typeof rawIllustration === 'object' &&
+                rawIllustration !== null &&
+                typeof (rawIllustration as Record<string, unknown>).path === 'string'
+                    ? resolve((rawIllustration as Record<string, unknown>).path as string)
+                    : undefined;
             sted('write', promptPath, () =>
                 writeRaw(promptPath, typeof artifact.prompt === 'string' ? artifact.prompt : ''),
             );
@@ -1160,6 +1313,7 @@ function dailyXhsRender(args: string[]): void {
                 layout: card.layout,
                 promptPath,
                 imagePath,
+                illustrationPath,
                 status: 'rendered',
             });
         }
@@ -1260,7 +1414,7 @@ function dailyPublishWechat(args: string[]): void {
             original: true,
             aiGenerated: true,
             author: '冰原奔狼',
-            collection: collectionArg || '每日AI资讯',
+            collection: collectionArg || 'AI 乱炖',
             ...(isFile(cover) ? { coverPath: cover } : {}),
             // Audio block at the article top (operator request 2026-09-29): the daily MP3 goes to
             // the 素材库 under the article title; the plugin reuses an existing same-title material.
@@ -1333,6 +1487,9 @@ function dailyScript(args: string[]): void {
             env: {
                 DAILYNEWS_LANGUAGE: language,
                 DAILYNEWS_TITLE: title,
+                // Task 0189: the broadcast greeting carries the episode's run date, not the render
+                // date — a backfilled/retried run must not greet "today".
+                DAILYNEWS_DATE: runDate,
                 VOICEBOX_DEFAULT_PROFILE: voiceProfile,
                 // F613 R4: always passed as absolute paths — spawnPluginEntry runs plugins with
                 // cwd = the plugin package dir, so a relative workDir would silently miss the
@@ -1357,6 +1514,118 @@ function dailyScript(args: string[]): void {
     });
 }
 
+/** Task 0189 R10 artifacts of the content-safety verdict gate (24-script, step 09). */
+function safetyPath(workDir: string, runDate: string, name: string): string {
+    return join(workDir, '24-script', `${runDate}_09_${name}`);
+}
+
+/**
+ * Digest of the exact drafts under review (article Content + VoiceScript). A verdict is only valid
+ * for the bytes it was issued on: the gate and publish-prep both recompute this, so an edit after
+ * PASS — including a HITL edit at `review` — invalidates the stamp instead of riding on it.
+ */
+function safetyDigest(workDir: string, runDate: string): string {
+    const hash = createHash('sha256');
+    for (const path of safetyDraftPaths(workDir, runDate)) {
+        if (!isFile(path)) failWith(1, `safety-review: required draft not found: ${path}`);
+        hash.update(readFileSync(path)).update('\0');
+    }
+    return hash.digest('hex');
+}
+
+/** The drafts under review — the digest's bytes, and the quarantine set on a quality block. */
+function safetyDraftPaths(workDir: string, runDate: string): [string, string] {
+    return [
+        join(workDir, '22-article', `${runDate}_06_article_content.json`),
+        join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`),
+    ];
+}
+
+/**
+ * Open a content-safety review of the current drafts: drop every artifact of an earlier review
+ * (a retry must be re-reviewed on its final version) and write the request the two agent.run
+ * steps read. The program passes context only — platform policy lives in the kk:content-safety
+ * skill's reference files, never here.
+ */
+function dailySafetyPrep(args: string[]): void {
+    const [workDir = '', runDate = '', platforms = ''] = args;
+    timed(workDir, 'safety-review', () => {
+        const digest = safetyDigest(workDir, runDate);
+        for (const name of [
+            'safety-review_report.json',
+            'safety-judge_verdict.json',
+            'safety-judge_status.txt',
+            'safety-judge_stamp.json',
+        ]) {
+            const stale = safetyPath(workDir, runDate, name);
+            if (isFile(stale)) unlinkSync(stale);
+        }
+        const request = safetyPath(workDir, runDate, 'safety-review_request.json');
+        const targets = platforms
+            .split(',')
+            .map((platform) => platform.trim())
+            .filter(Boolean);
+        sted('write', request, () => writeJsonText(request, { digest, platforms: targets, mode: 'detect-only' }));
+    });
+}
+
+/**
+ * Consume the content-safety report and the content-judge verdict into pass|escalate|block (exit 0
+ * in all three — routing is transition-owned). Fail-closed: only an explicit PASS verdict on the
+ * unchanged drafts, with a well-formed report carrying no BLOCK, unblocks; a RISK decision or
+ * `escalate: true` forces the human review regardless of the verdict score.
+ */
+function dailySafetyGate(args: string[]): void {
+    const [workDir = '', runDate = ''] = args;
+    const statusFile = safetyPath(workDir, runDate, 'safety-judge_status.txt');
+    const stampFile = safetyPath(workDir, runDate, 'safety-judge_stamp.json');
+    timed(workDir, 'safety-judge', () => {
+        const request = readJson(safetyPath(workDir, runDate, 'safety-review_request.json'));
+        const report = readJson(safetyPath(workDir, runDate, 'safety-review_report.json'));
+        const verdict = readJson(safetyPath(workDir, runDate, 'safety-judge_verdict.json'));
+        const platforms = Array.isArray(report?.platforms) ? (report.platforms as Record<string, unknown>[]) : [];
+        const decisions = platforms.map((platform) => platform?.decision);
+        const digest = safetyDigest(workDir, runDate);
+        let status = 'block';
+        let reason = 'verdict PASS on unchanged drafts, no BLOCK/RISK';
+        // A digest-mismatch block means the drafts were deliberately edited (HITL): keep them so
+        // a re-run of safety-prep re-reviews the edited version. Any other block means the
+        // content itself is rejected — quarantine the drafts below.
+        let edited = false;
+        if (request?.digest !== digest) {
+            reason = 'drafts changed after the review was requested';
+            edited = true;
+        } else if (decisions.length === 0 || decisions.some((d) => d !== 'OK' && d !== 'RISK' && d !== 'BLOCK'))
+            reason = 'content-safety report missing or malformed';
+        else if (decisions.includes('BLOCK')) reason = 'content-safety report carries a BLOCK decision';
+        else if (verdict?.verdict !== 'PASS')
+            reason = `content-judge verdict is ${typeof verdict?.verdict === 'string' ? verdict.verdict : 'missing or unreadable'}`;
+        else if (verdict?.confidence !== 'HIGH' && verdict?.confidence !== 'MEDIUM' && verdict?.confidence !== 'LOW')
+            reason = 'content-judge verdict is missing a HIGH/MEDIUM/LOW confidence level';
+        else if (decisions.includes('RISK') || report?.escalate === true) {
+            status = 'escalate';
+            reason = 'RISK decision or escalation — human review required';
+        } else status = 'pass';
+        if (status !== 'block') sted('write', stampFile, () => writeJsonText(stampFile, { digest, status }));
+        if (status === 'block' && !edited) {
+            // A quality block poisons the isFile() draft cache: every same-day retry would
+            // re-fail on unchanged bytes (20261002 dogfood — two judge-fail runs replayed until
+            // the drafts were moved by hand). Quarantine (mv, never rm) so the next run
+            // regenerates from scratch; the 09_* verdict artifacts stay in 24-script for audit.
+            const q = join(workDir, '24-script', `.quarantine-${runDate}-judge-block`);
+            mkdirSync(q, { recursive: true });
+            for (const path of safetyDraftPaths(workDir, runDate)) {
+                if (!isFile(path)) continue;
+                let dest = join(q, basename(path));
+                for (let n = 2; isFile(dest); n += 1) dest = join(q, `${n}-${basename(path)}`);
+                renameSync(path, dest);
+            }
+        }
+        sted('write', statusFile, () => writeRaw(statusFile, status));
+        console.log(`safety: status=${status} (${reason}); routing is transition-owned`);
+    });
+}
+
 function dailyWrapDocs(args: string[]): void {
     const [workDir = '', runDate = '', voiceProfile = ''] = args;
     const scriptPath = join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`);
@@ -1417,6 +1686,54 @@ function dailyGenerate(args: string[]): void {
  * `intro_music` empty -> skip. Writes `<stem>.intro.wav` (original render kept), points
  * `audioPath` at the merged file, extends `duration`, marks `introMerged` (idempotent).
  */
+/**
+ * Episode duration gate (standing requirement, 20261002): a daily episode must run 15–20 minutes
+ * (duration is authoritative; the 8–10-item figure is only an estimate). Reads the final audio
+ * content's `metadata.duration` — after the intro sting merged, this is the true episode length —
+ * and fails loud outside `[min, max]` seconds-worth of minutes. A missing duration is a failure,
+ * not a pass: the gate must never silently let an under-length episode through again.
+ */
+function dailyEpisodeDuration(args: string[]): void {
+    const [workDir = '', runDate = '', minArg = '', maxArg = ''] = args;
+    if (!workDir) fail('missing work_dir');
+    if (!runDate) fail('missing run_date');
+    const minMinutes = Number(minArg);
+    const maxMinutes = Number(maxArg);
+    if (!Number.isFinite(minMinutes) || minMinutes <= 0) fail(`invalid min_minutes: ${minArg || '(empty)'}`);
+    if (!Number.isFinite(maxMinutes) || maxMinutes < minMinutes) fail(`invalid max_minutes: ${maxArg || '(empty)'}`);
+    const contentPath = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
+    if (!isFile(contentPath)) failWith(1, `episode-duration: audio content not found: ${contentPath}`);
+    let raw: unknown;
+    try {
+        const parsed = JSON.parse(readFileSync(contentPath, 'utf-8')) as { metadata?: { duration?: unknown } };
+        raw = parsed.metadata?.duration;
+    } catch (error) {
+        if ((error as { code?: string }).code !== undefined) {
+            sted('read', contentPath, () => readFileSync(contentPath, 'utf-8'));
+        }
+        raw = undefined;
+    }
+    const seconds = typeof raw === 'number' ? raw : typeof raw === 'string' && raw.trim() !== '' ? Number(raw) : NaN;
+    if (!Number.isFinite(seconds) || seconds <= 0) {
+        failWith(1, `episode-duration: audio metadata.duration missing or not a number in ${contentPath}`);
+    }
+    const minutes = seconds / 60;
+    const shown = minutes.toFixed(1);
+    if (minutes < minMinutes) {
+        failWith(
+            1,
+            `episode-duration: episode runs ${shown} min, below the ${minMinutes}–${maxMinutes} min requirement (duration is authoritative). The candidate pool is too thin — deepen per-item treatment or add items; do not ship a short episode silently.`,
+        );
+    }
+    if (minutes > maxMinutes) {
+        failWith(
+            1,
+            `episode-duration: episode runs ${shown} min, above the ${minMinutes}–${maxMinutes} min requirement. Trim items or per-item treatment.`,
+        );
+    }
+    console.log(`episode-duration ok: ${shown} min within ${minMinutes}–${maxMinutes} min`);
+}
+
 function dailyIntro(args: string[]): void {
     const [workDir = '', runDate = '', introSrc = ''] = args;
     if (!introSrc || introSrc.trim() === '') {
@@ -1632,6 +1949,13 @@ function dailyPublishPrep(args: string[]): void {
                 coverPath: hasCover ? resolvedCover : undefined,
             },
         };
+        // Task 0189 R10: the last program seam before anything is dispatched. No stamp, or a
+        // stamp issued on different bytes (edited after PASS, or an older draft), never publishes.
+        const stamp = readJson(safetyPath(workDir, runDate, 'safety-judge_stamp.json'));
+        if (stamp === null) failWith(1, 'publish-prep: no content-safety verdict stamp for this run — not publishing');
+        if (stamp.digest !== safetyDigest(workDir, runDate)) {
+            failWith(1, 'publish-prep: drafts changed after the content-safety verdict — re-run the review');
+        }
         sted('write', prepPath, () => writeJsonText(prepPath, merged));
     });
 }
@@ -1681,13 +2005,55 @@ function dailyShowNotes(args: string[]): void {
     timed(workDir, 'show-notes', () => {
         const effective = readJson(article)?.title;
         const titleArg = title !== '' ? title : typeof effective === 'string' ? effective : '';
+        // Boundary-excluded docs must not render into show notes (judge finding 2026-10-02): the
+        // article body's 未写入 note names the dropped ids; filter the plan copy podcast-pub sees.
+        // Inlined parse — this file must not import @gobing-ai/* (header contract); the same note
+        // grammar lives in daily-article-gen's excludedIdsFromNote.
         const postPath = firstPostPath(readJson(result), 'surfdash-pub');
-        kk(['executor', 'run', 'podcast-pub', '--in', plan, '--out', out, ...pluginsArgs(pluginsPath)], {
+        const articleBody = readJson(article)?.body;
+        const excluded = new Set<string>();
+        if (typeof articleBody === 'string') {
+            for (const note of articleBody.matchAll(/未写入[：:](.*)/g)) {
+                for (const id of note[1].matchAll(/(?:[a-zA-Z0-9_-]+:)?[0-9a-f]{16}/g)) {
+                    excluded.add(id[0]);
+                    const colon = id[0].indexOf(':');
+                    if (colon !== -1) excluded.add(id[0].slice(colon + 1));
+                }
+            }
+        }
+        let planIn = plan;
+        if (excluded.size > 0) {
+            const parsed: unknown = readJson(plan);
+            if (Array.isArray(parsed)) {
+                const kept = parsed.filter(
+                    (d) =>
+                        !(
+                            d !== null &&
+                            typeof d === 'object' &&
+                            (excluded.has(String((d as Record<string, unknown>).id)) ||
+                                (String((d as Record<string, unknown>).id).includes(':') &&
+                                    excluded.has(
+                                        String((d as Record<string, unknown>).id).slice(
+                                            String((d as Record<string, unknown>).id).indexOf(':') + 1,
+                                        ),
+                                    )))
+                        ),
+                );
+                if (kept.length !== parsed.length) {
+                    planIn = plan.replace(/\.json$/, '-shownotes.json');
+                    writeJsonText(planIn, kept);
+                }
+            }
+        }
+        kk(['executor', 'run', 'podcast-pub', '--in', planIn, '--out', out, ...pluginsArgs(pluginsPath)], {
             env: {
                 PODCAST_PUB_TITLE: titleArg,
                 PODCAST_PUB_RUN_DATE: runDate,
                 PODCAST_PUB_BRIEF_MODE: 'true',
                 PODCAST_PUB_ARTICLE_POST_PATH: postPath,
+                // Task 0189 R1 / Apple §1.11: AI-voice disclosure in the episode metadata, not only
+                // in the audio sign-off and the article footer.
+                PODCAST_PUB_FOOTER_NOTE: '本期文字由 AI 辅助整理，音频为 AI 合成配音。',
                 ...(isFile(audioContent) ? { PODCAST_PUB_AUDIO_CONTENT: audioContent } : {}),
             },
         });
@@ -1768,7 +2134,22 @@ function dailyPublishClassify(args: string[]): void {
         const status = okCount > 0 && okCount === total ? 'full' : okCount > 0 ? 'partial' : 'none';
         sted('write', result, () => writeJqText(result, { ok: okCount === total && total > 0, targets }));
         sted('write', statusFile, () => writeRaw(statusFile, status));
+        const completeness = publishCompleteness(workDir, runDate);
+        const completenessFile = join(workDir, '31-publish', `${runDate}_17_publish_completeness.json`);
+        sted('write', completenessFile, () => writeJqText(completenessFile, { runDate, ...completeness }));
         console.log(`publish: status=${status} (${okCount}/${total} targets published); routing is transition-owned`);
+        console.log(`publish-completeness: ${completeness.rows.map((row) => `${row.channel}=${row.state}`).join(' ')}`);
+        if (completeness.missing.length > 0) {
+            const details = completeness.rows
+                .filter((row) => row.state !== 'done')
+                .map((row) => `${row.channel}=${row.state}${row.detail === '' ? '' : ` (${row.detail})`}`)
+                .join('; ');
+            console.error(
+                `WARNING: publish completeness — ${completeness.missing.join(', ')} did not complete: ${details}. ` +
+                    'Independent channels never enter publish_status; re-run their stages for this work dir (see ' +
+                    `${completenessFile})`,
+            );
+        }
     });
 }
 
@@ -1779,6 +2160,59 @@ function targetsOf(path: string): Record<string, unknown>[] {
         : [];
 }
 
+/**
+ * The publish tail's independent channels (locales, XHS, WeChat) and the surfdash CMS re-sync never
+ * enter `publish_status` — they are non-blocking by design (ADR-022/025/026). That is also why a
+ * tail driven by hand can skip every one of them and still leave a `full` status file behind:
+ * 20261002 shipped zh-only surfdash with no XHS and no WeChat draft, and nothing in the run's own
+ * artifacts said so. Record each channel's state beside the status file so the gap is visible.
+ */
+function publishCompleteness(
+    workDir: string,
+    runDate: string,
+): { rows: { channel: string; state: string; detail: string }[]; missing: string[] } {
+    const at = (name: string): string => join(workDir, '31-publish', `${runDate}_${name}`);
+    const markerFilled = (path: string): boolean => isFile(path) && readFileSync(path, 'utf-8').trim() !== '';
+    const rows: { channel: string; state: string; detail: string }[] = [];
+    const localesDone = ['en', 'ja'].every((locale) =>
+        markerFilled(at(`20_translate-localize_${locale}-post-path.txt`)),
+    );
+    rows.push({
+        channel: 'locales',
+        state: localesDone ? 'done' : 'not-run',
+        detail: localesDone ? 'en/ja drafts scaffolded' : 'translate markers absent (en/ja never scaffolded)',
+    });
+    const resultChannels: [string, string, string][] = [
+        ['xhs', '19_publish-xhs_result.json', ''],
+        ['wechat', '20_publish-wechat_result.json', ''],
+        ['cms-resync', '23_patch-surfdash_sync-result.json', '23_patch-surfdash_emdash-resync.txt'],
+    ];
+    for (const [channel, resultName, skipMarkerName] of resultChannels) {
+        const result = isFile(at(resultName)) ? readJson(at(resultName)) : null;
+        if (result !== null) {
+            const metadata = (result.metadata ?? {}) as Record<string, unknown>;
+            rows.push({
+                channel,
+                state: result.ok === true ? 'done' : 'failed',
+                detail:
+                    result.ok === true
+                        ? typeof metadata.publishStatus === 'string'
+                            ? metadata.publishStatus
+                            : 'ok'
+                        : String(result.error ?? 'ok=false'),
+            });
+            continue;
+        }
+        const skipMarker = skipMarkerName === '' ? '' : at(skipMarkerName);
+        rows.push(
+            skipMarker !== '' && isFile(skipMarker)
+                ? { channel, state: 'skipped', detail: readFileSync(skipMarker, 'utf-8').trim() }
+                : { channel, state: 'not-run', detail: 'no result artifact' },
+        );
+    }
+    return { rows, missing: rows.filter((row) => row.state !== 'done').map((row) => row.channel) };
+}
+
 function dailyPublishPartial(args: string[]): void {
     const [workDir = '', runDate = ''] = args;
     const result = join(workDir, '31-publish', `${runDate}_17_publish_result.json`);
@@ -1843,9 +2277,11 @@ function dailyPatchSurfdash(args: string[]): void {
         const localCover = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
         const dateIso = `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`;
         const crossLink: Record<string, string> = {
-            zh: `🎧 本期已同步制作为播客节目，[点击收听《每日 AI 资讯 · ${dateIso}》](${showNotesUrl})。`,
-            en: `🎧 This episode is also available as a podcast: [listen to the Daily AI Briefing · ${dateIso}](${showNotesUrl}).`,
-            ja: `🎧 本エピソードはポッドキャストでも配信中：[Daily AI Briefing · ${dateIso} を聴く](${showNotesUrl})。`,
+            // Task 0189 R4: cross-links carry the column's episode-title pattern, not the retired
+            // news-bulletin name (the VoiceScript episode title is episodeTitle(lead, date)).
+            zh: `🎧 本期已同步制作为播客节目，[点击收听《AI 乱炖 · ${dateIso}》](${showNotesUrl})。`,
+            en: `🎧 This episode is also available as a podcast: [listen to AI 乱炖 · ${dateIso}](${showNotesUrl}).`,
+            ja: `🎧 本エピソードはポッドキャストでも配信中：[AI 乱炖 · ${dateIso} を聴く](${showNotesUrl})。`,
         };
         let changed = 0;
         for (const [locale, dir] of [
@@ -1916,6 +2352,11 @@ function dailyPatchSurfdash(args: string[]): void {
         // changed===0 early-return so re-runs heal rows an earlier commit left stale
         // (20260925/20260929). Fixture tests pass no plugins-path and must not shell out.
         if (pluginsPath === '') {
+            // A missing plugins-path silently drops the CMS re-sync, and the CMS cards then keep the
+            // pre-patch `./assets/cover.png` the deployed worker cannot serve (20261002 lost its
+            // cover this way). Leave a marker for the classify step's completeness report.
+            const skipMarker = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_emdash-resync.txt`);
+            sted('write', skipMarker, () => writeRaw(skipMarker, 'skipped: no plugins-path\n'));
             console.log('patch-surfdash: no plugins-path — skip emdash re-sync');
         } else {
             const syncIn = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_sync.json`);
@@ -2109,7 +2550,8 @@ function dailyTranslateSync(args: string[]): void {
 
 const [stage, ...rest] = process.argv.slice(2);
 
-// Imported as a module (unit tests reach `dedupPlanByTitle`) → exports only, never a stage run;
+// Imported as a module (unit tests reach `dedupPlanByTitle` / `applyTopicBoundary`) → exports
+// only, never a stage run;
 // executed as the entrypoint → dispatch.
 if (import.meta.main)
     switch (stage) {
@@ -2192,6 +2634,12 @@ if (import.meta.main)
         case 'daily-script':
             dailyScript(rest);
             break;
+        case 'daily-safety-prep':
+            dailySafetyPrep(rest);
+            break;
+        case 'daily-safety-gate':
+            dailySafetyGate(rest);
+            break;
         case 'daily-wrap-docs':
             dailyWrapDocs(rest);
             break;
@@ -2201,6 +2649,9 @@ if (import.meta.main)
         case 'daily-intro':
             dailyIntro(rest);
             break;
+        case 'daily-episode-duration':
+            dailyEpisodeDuration(rest);
+            break;
         case 'daily-quality-report':
             dailyQualityReport(rest);
             break;