@gobing-ai/knowledge-kit 0.0.31 → 0.0.32

package/plugins/publishings/wechatmp-pub/src/modes.ts

@@ -0,0 +1,403 @@
+import { isAbsolute } from 'node:path';
+import type { Content } from '@gobing-ai/kk-core';
+import { createNodeFileSystem } from '@gobing-ai/ts-runtime';
+
+/**
+ * The wechatmp channel's publishing TYPES, declared and validated (ADR-029).
+ *
+ * One plugin per channel: the four console modes a single authenticated MP session offers
+ * (文章 / 贴图 / 视频 / 播客, `createType` 0/8/5/7) are `operations` of this plugin — selected from
+ * `options.operation ?? content.metadata.operation`, resolved against {@link WECHATMP_OPERATIONS},
+ * and refused by name **before** a browser is launched or a profile is resolved. Each operation owns
+ * its own entry, artifact set, limits and flow (`./flow`); the channel owns the profile dir,
+ * session, preflight and `Content → Result` mapping (`./index`).
+ *
+ * Labels, routes and constraints come from the live console walk
+ * (`docs/design/wechatmp-ui-discovery.md`). Everything here is pre-browser: it decides whether the
+ * run is allowed to open a session at all.
+ */
+
+export const TARGET = 'wechatmp';
+
+/** Console entry; it redirects to `/cgi-bin/home?…&token=<N>` for an authenticated session. */
+export const CONSOLE_URL = 'https://mp.weixin.qq.com/';
+/** The authenticated console home fragment — the readiness signal the preflight and flow share. */
+export const CONSOLE_HOME_FRAGMENT = '/cgi-bin/home';
+
+export const WECHATMP_OPERATIONS = ['文章', '贴图', '视频', '播客'] as const;
+
+export type WechatmpOperation = (typeof WECHATMP_OPERATIONS)[number];
+
+/**
+ * No operation requested ⇒ 文章. The daily workflow's `wechat-publish` state dispatches this plugin
+ * without one (`kk-workflow-stages.ts` `daily-publish-wechat`), and its packaged `Content` is the
+ * episode article.
+ */
+export const DEFAULT_WECHATMP_OPERATION: WechatmpOperation = '文章';
+
+/**
+ * `createType` per mode. Verified for all four on the live console (discovery §2): each creation
+ * type lands on the same editor route with its own value.
+ */
+export const CREATE_TYPES: Record<WechatmpOperation, number> = {
+    文章: 0,
+    贴图: 8,
+    视频: 5,
+    播客: 7,
+};
+
+/**
+ * The editor route template (discovery §2), minus `createType` / `token` / `timestamp`. A stored
+ * editor URL is NOT reusable (W2): the token is per-session and the timestamp is per-visit.
+ */
+export const EDITOR_ROUTE = '/cgi-bin/appmsg?t=media/appmsg_edit_v2&action=edit&isNew=1&type=77';
+
+/** Every console route carries the per-session token (discovery §1), so it is read, never stored. */
+const CONSOLE_TOKEN_PATTERN = /[?&]token=([0-9]+)/;
+
+/** The token carried by a console URL, or `undefined` when the URL is not an authenticated route. */
+export function readConsoleToken(url: string): string | undefined {
+    return CONSOLE_TOKEN_PATTERN.exec(url)?.[1];
+}
+
+/**
+ * The editor deep-link for one mode, built at run time from the console's own session token
+ * (discovery §1: "the token is per-session, so stored console URLs cannot be reused verbatim") and
+ * a freshly generated `timestamp` — never a baked-in one.
+ */
+export function editorUrl(operation: WechatmpOperation, token: string, timestamp: number = Date.now()): string {
+    const base = `${CONSOLE_URL.replace(/\/$/, '')}${EDITOR_ROUTE}`;
+    return `${base}&createType=${CREATE_TYPES[operation]}&token=${encodeURIComponent(token)}&lang=zh_CN&timestamp=${timestamp}`;
+}
+
+/** The `createType` an editor URL reports, or `undefined` when it does not carry the field. */
+export function readCreateType(url: string): number | undefined {
+    const found = /[?&]createType=([0-9]+)/.exec(url)?.[1];
+    return found === undefined ? undefined : Number(found);
+}
+
+/** Exit-early resolution of the requested operation (ADR-029 dispatch). */
+export function resolveWechatmpOperation(
+    options?: Record<string, unknown>,
+    content?: Content,
+): { operation: WechatmpOperation; error?: undefined } | { operation?: undefined; error: string } {
+    const raw = options?.operation ?? content?.metadata?.operation;
+    if (raw === undefined) return { operation: DEFAULT_WECHATMP_OPERATION };
+    if (typeof raw !== 'string' || !(WECHATMP_OPERATIONS as readonly string[]).includes(raw)) {
+        return {
+            error: `unsupported operation '${String(raw)}' for ${TARGET}: expected one of ${WECHATMP_OPERATIONS.join(', ')}`,
+        };
+    }
+    return { operation: raw as WechatmpOperation };
+}
+
+/** Extensions the editor's image input accepts (`accept="image/gif,image/jpeg,image/jpg,image/png,image/svg,image/webp"`). */
+const IMAGE_EXTENSIONS = /\.(png|jpe?g|gif|webp|svg)$/i;
+const IMAGE_LIST = 'png|jpg|jpeg|gif|webp|svg';
+/**
+ * Video extensions for the 视频 media modal. The walk recorded the modal's controls (`本地上传`,
+ * `确定`) but not its picker's `accept` list, so this set is the union MP's own video surfaces
+ * accept — the live dogfood confirms it.
+ */
+const VIDEO_EXTENSIONS = /\.(mp4|mov|flv|f4v|mkv|m4v|mpg|mpeg|ts)$/i;
+const VIDEO_LIST = 'mp4|mov|flv|f4v|mkv|m4v|mpg|mpeg|ts';
+/** Audio extensions for the 播客 media modal (`上传音频`; the walk recorded no `accept` list). */
+const AUDIO_EXTENSIONS = /\.(mp3|wav|aac|flac|m4a)$/i;
+const AUDIO_LIST = 'mp3|wav|aac|flac|m4a';
+
+/**
+ * The 贴图 image ceiling. The walk recorded **no** cap (discovery §3/§5.2 name none) and this
+ * repository does not invent platform limits, so none is enforced — the constant is the recorded
+ * absence, and the live dogfood is where a real cap would be entered.
+ */
+export const STICKER_IMAGE_MAX: number | undefined = undefined;
+
+/** The 摘要 derivation's cap (the pre-ADR-029 heuristic: the body's first non-empty line, ≤54 chars). */
+const DERIVED_DIGEST_MAX = 54;
+
+/** Per-mode field ceilings, as recorded by the console walk (discovery §3/§5.2). */
+export interface ModeLimits {
+    /** Title characters: 0/64 for 文章, 0/20 for 视频/播客. Absent = no recorded ceiling. */
+    titleMax?: number;
+    /** The mode refuses an untitled draft: the title placeholder is 请在这里输入标题, not （选填）. */
+    titleRequired?: boolean;
+    /** 摘要 characters (`textarea#js_description`, 0/120). */
+    digestMax?: number;
+    /** 作者 characters (`input#author`, 0/8, labelled 原创 and gated on 原创 verification). */
+    authorMax?: number;
+}
+
+export const MODE_LIMITS: Record<WechatmpOperation, ModeLimits> = {
+    // 文章: title 0/64 required, 摘要 0/120 选填, 作者 0/8 (discovery §5.2).
+    文章: { titleRequired: true, titleMax: 64, digestMax: 120, authorMax: 8 },
+    // 贴图: the title block is `请在这里输入标题（选填）` (no required flag, no recorded ceiling).
+    贴图: { authorMax: 8 },
+    // 视频 / 播客: the same editor route with a 0/20 title limit (discovery §5.2).
+    视频: { titleMax: 20, authorMax: 8 },
+    播客: { titleMax: 20, authorMax: 8 },
+};
+
+/**
+ * A validated mode input: the operation plus the artifacts and fields that mode requires.
+ * Discriminated on `operation` so every flow narrows to exactly the artifacts it may use.
+ */
+export type ModeInput =
+    | { operation: '文章'; images: string[]; digest?: string }
+    | { operation: '贴图'; images: string[] }
+    | { operation: '视频'; video: string }
+    | { operation: '播客'; audio: string; cover: string };
+
+/** Validated artifacts in attachment order — the evidence a Result reports. */
+export function artifactPaths(input: ModeInput): string[] {
+    switch (input.operation) {
+        case '文章':
+            return input.images;
+        case '贴图':
+            return input.images;
+        case '视频':
+            return [input.video];
+        case '播客':
+            return [input.audio, input.cover];
+    }
+}
+
+/** The body image the cover panel's 默认首图为封面 rule turns into the mode's cover. */
+export function coverPath(input: ModeInput): string | undefined {
+    return input.operation === '文章' || input.operation === '贴图' ? input.images[0] : undefined;
+}
+
+interface MediaSpec {
+    /** `metadata` key the artifact is read from. */
+    key: 'video' | 'audio' | 'coverImage';
+    /** Error prefix, e.g. `video validation`. */
+    label: string;
+    extensions: RegExp;
+    /** Accepted extensions for the error text. */
+    list: string;
+}
+
+/**
+ * Reads one local media artifact out of `Content.metadata`. The repo spells a single artifact
+ * either bare (`metadata.coverImage`) or as a `{ path }` descriptor, so both are accepted here;
+ * the error always names the `metadata` key.
+ */
+async function resolveMediaPath(content: Content, spec: MediaSpec): Promise<{ path?: string; error?: string }> {
+    const raw = content.metadata?.[spec.key];
+    const path =
+        typeof raw === 'string'
+            ? raw
+            : typeof (raw as { path?: unknown } | undefined)?.path === 'string'
+              ? ((raw as { path: string }).path as string)
+              : undefined;
+    if (path === undefined || path.length === 0) {
+        return {
+            error: `${spec.label}: Content.metadata.${spec.key} is required (absolute path to an existing ${spec.list} file)`,
+        };
+    }
+    if (!isAbsolute(path)) {
+        return { error: `${spec.label}: Content.metadata.${spec.key} must be absolute, got '${path}'` };
+    }
+    if (!spec.extensions.test(path)) {
+        return {
+            error: `${spec.label}: Content.metadata.${spec.key} has unsupported extension (expected ${spec.list}): '${path}'`,
+        };
+    }
+    if (!(await createNodeFileSystem().exists(path))) {
+        return { error: `${spec.label}: Content.metadata.${spec.key} does not exist: '${path}'` };
+    }
+    return { path };
+}
+
+/**
+ * The body-image set for the two image-carrying modes, in attachment order.
+ *
+ * `metadata.images` is the repo's ordered convention (xhs reads the same key). The daily MP stage
+ * instead supplies `metadata.wechatmp.coverPath` — the operator's cover — which is attached FIRST
+ * because the cover panel states 默认首图为封面 (discovery §5.2): the first body image is the cover.
+ */
+async function resolveBodyImages(content: Content): Promise<{ paths?: string[]; error?: string }> {
+    const ordered = content.metadata?.images;
+    if (ordered !== undefined && !Array.isArray(ordered)) {
+        return { error: 'images validation: metadata.images must be an array' };
+    }
+    const descriptors = Array.isArray(ordered) ? ordered : [];
+    const cover =
+        typeof content.metadata?.wechatmp === 'object' && content.metadata.wechatmp !== null
+            ? (content.metadata.wechatmp as Record<string, unknown>).coverPath
+            : undefined;
+    const candidates: Array<{ path: string; what: string }> = [];
+    if (typeof cover === 'string' && cover.length > 0)
+        candidates.push({ path: cover, what: 'metadata.wechatmp.coverPath' });
+    for (const [index, image] of descriptors.entries()) {
+        const path = typeof image === 'string' ? image : (image as { path?: unknown })?.path;
+        if (typeof path !== 'string' || path.length === 0) {
+            return { error: `images validation: images[${index}] carries no path` };
+        }
+        candidates.push({ path, what: `metadata.images[${index}]` });
+    }
+
+    const paths: string[] = [];
+    for (const { path, what } of candidates) {
+        if (!isAbsolute(path)) {
+            return { error: `images validation: ${what} must be absolute, got '${path}'` };
+        }
+        if (!IMAGE_EXTENSIONS.test(path)) {
+            return {
+                error: `images validation: ${what} has unsupported extension (expected ${IMAGE_LIST}): '${path}'`,
+            };
+        }
+        if (!(await createNodeFileSystem().exists(path))) {
+            return { error: `images validation: ${what} does not exist: '${path}'` };
+        }
+        paths.push(path);
+    }
+    return { paths };
+}
+
+/**
+ * The 摘要 for 文章: `metadata.digest` when the operator sets one, else the body's first non-empty
+ * line (the pre-ADR-029 derivation, kept). `textarea#js_description` is 0/120 and 选填.
+ */
+export function deriveDigest(content: Content): string | undefined {
+    const explicit = content.metadata?.digest;
+    if (typeof explicit === 'string') return explicit;
+    const body = content.body ?? '';
+    const first = body
+        .split('\n')
+        .map((line) => line.trim())
+        .find((line) => line !== '');
+    return first === undefined ? undefined : first.slice(0, DERIVED_DIGEST_MAX);
+}
+
+/**
+ * `publishStatus` is the operator's explicit live-publish request: absent means draft, `public`
+ * means the flow may click the console's 发表 control, and anything else is refused here — before a
+ * browser opens, so a typo can never reach a real publish control (ADR-022/ADR-026).
+ */
+function validatePublishStatus(content: Content): { error?: string } {
+    const status = content.metadata?.publishStatus;
+    if (status !== undefined && status !== 'draft' && status !== 'public') {
+        return {
+            error: `publishStatus validation: unknown publishStatus '${String(status)}' (expected 'draft' or 'public')`,
+        };
+    }
+    return {};
+}
+
+function validateTitle(content: Content, operation: WechatmpOperation): { error?: string } {
+    const limits = MODE_LIMITS[operation];
+    const title = content.title ?? '';
+    if (limits.titleRequired === true && title.trim().length === 0) {
+        return {
+            error: `title validation: Content.title is required for ${operation} (the editor's placeholder is 请在这里输入标题)`,
+        };
+    }
+    if (limits.titleMax !== undefined && title.length > limits.titleMax) {
+        return {
+            error: `title validation: Content.title is ${title.length} chars but ${operation} accepts ≤${limits.titleMax}`,
+        };
+    }
+    return {};
+}
+
+function validateDigest(content: Content, operation: WechatmpOperation): { digest?: string; error?: string } {
+    const max = MODE_LIMITS[operation].digestMax;
+    if (max === undefined) return {};
+    const digest = deriveDigest(content);
+    if (digest !== undefined && digest.length > max) {
+        return { error: `digest validation: the 摘要 is ${digest.length} chars but ${operation} accepts ≤${max}` };
+    }
+    return digest === undefined ? {} : { digest };
+}
+
+function validateAuthor(content: Content, operation: WechatmpOperation): { author?: string; error?: string } {
+    const max = MODE_LIMITS[operation].authorMax;
+    const author = content.metadata?.author;
+    if (typeof author !== 'string' || author.length === 0) return {};
+    if (max !== undefined && author.length > max) {
+        return {
+            error: `author validation: Content.metadata.author is ${author.length} chars but ${operation} accepts ≤${max}`,
+        };
+    }
+    return { author };
+}
+
+export type ModeValidation = { input: ModeInput; error?: undefined } | { input?: undefined; error: string };
+
+/**
+ * Pre-browser validation for the requested operation: what it needs, and whether it fits.
+ *
+ * A failure here is returned as `ok:false` naming the missing artifact, field or limit — the run
+ * never opens a browser or resolves a profile for input the console cannot accept. The 视频/播客
+ * media modal covers the save bar (discovery §5.1), so a missing artifact must be caught here and
+ * not after a console visit.
+ */
+export async function validateModeInput(operation: WechatmpOperation, content: Content): Promise<ModeValidation> {
+    const status = validatePublishStatus(content);
+    if (status.error) return { error: status.error };
+    const title = validateTitle(content, operation);
+    if (title.error) return { error: title.error };
+    const author = validateAuthor(content, operation);
+    if (author.error) return { error: author.error };
+
+    switch (operation) {
+        case '文章': {
+            if ((content.body ?? '').trim().length === 0) {
+                return { error: 'body validation: Content.body is required for 文章' };
+            }
+            const digest = validateDigest(content, operation);
+            if (digest.error) return { error: digest.error };
+            const images = await resolveBodyImages(content);
+            if (images.error) return { error: images.error };
+            if ((images.paths ?? []).length === 0) {
+                return {
+                    error: 'cover validation: 文章 takes its cover from a body image (默认首图为封面) but none was supplied — set metadata.wechatmp.coverPath or metadata.images[]',
+                };
+            }
+            return {
+                input: {
+                    operation,
+                    images: images.paths ?? [],
+                    ...(digest.digest === undefined ? {} : { digest: digest.digest }),
+                },
+            };
+        }
+        case '贴图': {
+            const images = await resolveBodyImages(content);
+            if (images.error) return { error: images.error };
+            if ((images.paths ?? []).length === 0) {
+                return {
+                    error: 'image validation: 贴图 requires at least one image (metadata.images[] or metadata.wechatmp.coverPath)',
+                };
+            }
+            return { input: { operation, images: images.paths ?? [] } };
+        }
+        case '视频': {
+            const video = await resolveMediaPath(content, {
+                key: 'video',
+                label: 'video validation',
+                extensions: VIDEO_EXTENSIONS,
+                list: VIDEO_LIST,
+            });
+            if (video.error) return { error: video.error };
+            return { input: { operation, video: video.path ?? '' } };
+        }
+        case '播客': {
+            const audio = await resolveMediaPath(content, {
+                key: 'audio',
+                label: 'audio validation',
+                extensions: AUDIO_EXTENSIONS,
+                list: AUDIO_LIST,
+            });
+            if (audio.error) return { error: audio.error };
+            const cover = await resolveMediaPath(content, {
+                key: 'coverImage',
+                label: 'cover validation',
+                extensions: IMAGE_EXTENSIONS,
+                list: IMAGE_LIST,
+            });
+            if (cover.error) return { error: cover.error };
+            return { input: { operation, audio: audio.path ?? '', cover: cover.path ?? '' } };
+        }
+    }
+}

package/plugins/publishings/wechatmp-pub/src/page.ts

@@ -0,0 +1,260 @@
+import { trySelectors } from '@gobing-ai/publish-harness';
+import { waitUntil } from '@gobing-ai/publish-harness/browser';
+
+/**
+ * The console's page seam (ADR-029) and the probes every wechatmp operation shares.
+ *
+ * `WechatPage` is deliberately a structural subset of the Playwright `Page`: the flows are driven
+ * through it so the offline tests can script the console (fake page) instead of launching a
+ * browser, while the shared `@gobing-ai/publish-harness/browser` helpers (pasteHtml, uploadFile,
+ * expectOutcome, readScopedSignal) reach the same object through the type-level bridge in `./flow`.
+ *
+ * `OpenedConsole` is context-level, not page-level, because the console opens the editor in a NEW
+ * TAB (discovery §1: `pages()` becomes 2 after a creation-type click) — a flow bound to one page
+ * object never sees the editor, so the seam has to expose the sibling pages.
+ */
+
+export const POLL_MS = 500;
+export const STEP_TIMEOUT_MS = 30_000;
+
+/** The playwright-shaped locator surface the flows and the shared helpers read. */
+export interface WechatLocator {
+    count(): Promise<number>;
+    isVisible(options?: { timeout?: number }): Promise<boolean>;
+    fill(text: string, options?: { timeout?: number }): Promise<void>;
+    click(options?: { timeout?: number; force?: boolean }): Promise<void>;
+    /**
+     * Type into the element. Both ProseMirror blocks (title and body) register content only from
+     * real input events — a value set leaves the editor empty, so the save has nothing to persist.
+     */
+    type?(text: string, options?: { timeout?: number; delay?: number }): Promise<void>;
+    /** Wait for an element state; the enrichment rail waits on dialogs and pickers. */
+    waitFor?(options?: { state?: 'attached' | 'detached' | 'visible' | 'hidden'; timeout?: number }): Promise<void>;
+    textContent?(): Promise<string>;
+    /** A form control's value — how the `textarea#title` mirror trap is detected (discovery §5.2). */
+    inputValue?(): Promise<string>;
+}
+
+export interface WechatPage {
+    goto(url: string, options?: { timeout?: number }): Promise<void>;
+    locator(selector: string): { first(): WechatLocator; count(): Promise<number> };
+    setInputFiles(selector: string, paths: readonly string[] | string): Promise<void>;
+    url(): string;
+    /** Page-side script evaluation; the enrichment rail's commit checks run through it. */
+    evaluate(expression: string): Promise<unknown>;
+    waitForTimeout?(ms: number): Promise<void>;
+    /** A page-level key press (the enrichment rail's dialog sweep). */
+    press?(key: string): Promise<void>;
+    /** The page's frames, for naming what a failed read actually contained. */
+    frames?(): WechatFrame[];
+}
+
+/** One frame of the console page: enough to name it and count a signal inside it. */
+export interface WechatFrame {
+    url(): string;
+    locator(selector: string): { count(): Promise<number> };
+}
+
+/** One browser context: the console home, plus every page it holds (the editor opens in a new tab). */
+export interface OpenedConsole {
+    /** The entry page the flows start from — the console home, where the 草稿箱 lives. */
+    page: WechatPage;
+    /** Every page the context holds, entry first. */
+    pages(): WechatPage[];
+    /** Opens an extra tab; the token-derived editor fallback uses it so the home stays readable. */
+    newPage(): Promise<WechatPage>;
+    close(): Promise<void>;
+}
+
+export type OpenConsole = (profileDir: string) => Promise<OpenedConsole>;
+
+/** A selector with an ATTACHED match (hidden inputs included), or `undefined` at the deadline. */
+async function tryFindAttachedSelector(
+    page: WechatPage,
+    selectors: readonly string[],
+    timeoutMs = STEP_TIMEOUT_MS,
+): Promise<string | undefined> {
+    let found: string | undefined;
+    await waitUntil(async () => {
+        for (const selector of selectors) {
+            const attached = await page
+                .locator(selector)
+                .count()
+                .catch(() => 0);
+            if (attached > 0) {
+                found = selector;
+                return true;
+            }
+        }
+        return false;
+    }, timeoutMs);
+    return found;
+}
+
+/** A selector with a VISIBLE match, or `undefined` at the deadline (the menu renders closed). */
+export async function tryFindSelector(
+    page: WechatPage,
+    selectors: readonly string[],
+    timeoutMs = STEP_TIMEOUT_MS,
+): Promise<string | undefined> {
+    let found: string | undefined;
+    await waitUntil(async () => {
+        const result = await trySelectors(page, selectors).catch(() => ({ found: false, selector: null }));
+        if (result.found && result.selector) {
+            found = result.selector;
+            return true;
+        }
+        return false;
+    }, timeoutMs);
+    return found;
+}
+
+/** Polls until a visible match exists, then throws naming `what`, the candidates and the deadline. */
+export async function findSelector(
+    page: WechatPage,
+    selectors: readonly string[],
+    what: string,
+    timeoutMs = STEP_TIMEOUT_MS,
+): Promise<string> {
+    const found = await tryFindSelector(page, selectors, timeoutMs);
+    if (found === undefined) {
+        throw new Error(`${what}: none of [${selectors.join(' | ')}] visible within ${timeoutMs}ms`);
+    }
+    return found;
+}
+
+/**
+ * Polls until an ATTACHED match exists, then throws naming `what`.
+ *
+ * Attachment — not visibility — is the rule for upload inputs: the media modals hide the real
+ * `input[type=file]` behind a styled control, and `trySelectors` filters on visibility by default.
+ */
+export async function findAttachedSelector(
+    page: WechatPage,
+    selectors: readonly string[],
+    what: string,
+    timeoutMs = STEP_TIMEOUT_MS,
+): Promise<string> {
+    const found = await tryFindAttachedSelector(page, selectors, timeoutMs);
+    if (found === undefined) {
+        throw new Error(`${what}: none of [${selectors.join(' | ')}] attached within ${timeoutMs}ms`);
+    }
+    return found;
+}
+
+/**
+ * Follow the tab a creation-type click opens (discovery §1: "`ctx.pages()` becomes 2 … any walker
+ * must follow the newest page"). Returns `undefined` at the deadline instead of quietly staying on
+ * the entry page — a flow that keeps driving the console home would type into nothing.
+ */
+export async function followNewPage(
+    pages: () => WechatPage[],
+    before: number,
+    timeoutMs: number,
+): Promise<WechatPage | undefined> {
+    const opened = await waitUntil(async () => pages().length > before, timeoutMs);
+    if (!opened) return undefined;
+    const all = pages();
+    return all[all.length - 1];
+}
+
+/** Click the first match of `selector`, waiting for actionability within the step timeout. */
+export async function clickSelector(page: WechatPage, selector: string, timeoutMs = STEP_TIMEOUT_MS): Promise<void> {
+    await page.locator(selector).first().click({ timeout: timeoutMs });
+}
+
+/** Fill the first match of `selector`; no `force`, so a covered control is never written through. */
+export async function fillSelector(page: WechatPage, selector: string, value: string): Promise<void> {
+    await page.locator(selector).first().fill(value);
+}
+
+interface PlaywrightLike {
+    goto(url: string, options?: Record<string, unknown>): Promise<unknown>;
+    locator(selector: string): {
+        count(): Promise<number>;
+        first(): {
+            count(): Promise<number>;
+            isVisible(options?: { timeout?: number }): Promise<boolean>;
+            fill(text: string, options?: Record<string, unknown>): Promise<void>;
+            click(options?: Record<string, unknown>): Promise<void>;
+            pressSequentially(text: string, options?: { delay?: number }): Promise<void>;
+            waitFor(options?: Record<string, unknown>): Promise<void>;
+            textContent(): Promise<string | null>;
+            inputValue(): Promise<string>;
+        };
+    };
+    setInputFiles(selector: string, paths: readonly string[] | string): Promise<void>;
+    url(): string;
+    evaluate(expression: string): Promise<unknown>;
+    waitForTimeout(ms: number): Promise<void>;
+    keyboard: { press(key: string): Promise<void> };
+}
+
+/** The production adapter: the structural seam over a real Playwright page. */
+/** The raw Playwright frame surface the inventory needs (see `wrapPlaywrightPage`). */
+interface RawFrame {
+    url(): string;
+    locator(selector: string): { count(): Promise<number> };
+}
+
+export function wrapPlaywrightPage(raw: unknown): WechatPage {
+    const pw = raw as PlaywrightLike;
+    return {
+        goto: (url, options) => pw.goto(url, { waitUntil: 'domcontentloaded', ...options }).then(() => undefined),
+        locator: (selector) => ({
+            count: () => pw.locator(selector).count(),
+            first: () => {
+                const loc = pw.locator(selector).first();
+                return {
+                    count: () => loc.count(),
+                    isVisible: (options) => loc.isVisible(options),
+                    fill: (text, options) => loc.fill(text, options),
+                    click: (options) => loc.click(options),
+                    type: (text, options) => loc.pressSequentially(text, options),
+                    waitFor: (options) => loc.waitFor(options),
+                    textContent: async () => (await loc.textContent()) ?? '',
+                    inputValue: () => loc.inputValue(),
+                };
+            },
+        }),
+        setInputFiles: (selector, paths) => pw.setInputFiles(selector, paths),
+        url: () => pw.url(),
+        evaluate: (expression) => pw.evaluate(expression),
+        waitForTimeout: (ms) => pw.waitForTimeout(ms),
+        press: (key) => pw.keyboard.press(key),
+        // MP's console renders some lists inside frames, and the flows must be able to NAME what they
+        // actually saw when a read comes back empty (2026-10-05: the 草稿箱 row existed and no
+        // main-frame read found it). Only the two calls the inventory needs are exposed.
+        frames: () => {
+            const source = raw as { frames?: () => RawFrame[] };
+            return (source.frames?.() ?? []).map((frame) => ({
+                url: () => frame.url(),
+                locator: (selector: string) => ({ count: () => frame.locator(selector).count() }),
+            }));
+        },
+    };
+}
+
+/**
+ * Wrap one browser context as the launcher seam. Wrappers are cached per raw page, so
+ * `pages()[0]` and `page` are the same object by reference — the flows take the newest page and
+ * compare page identity, and a second wrapper would break that check.
+ */
+export function wrapPlaywrightContext(raw: unknown, entryPage: unknown): OpenedConsole {
+    const context = raw as { pages(): unknown[]; newPage(): Promise<unknown>; close(): Promise<void> };
+    const cache = new WeakMap<object, WechatPage>();
+    const wrap = (page: unknown): WechatPage => {
+        const key = page as object;
+        const cached = cache.get(key);
+        if (cached !== undefined) return cached;
+        const wrapped = wrapPlaywrightPage(page);
+        cache.set(key, wrapped);
+        return wrapped;
+    };
+    return {
+        page: wrap(entryPage),
+        pages: () => context.pages().map(wrap),
+        newPage: async () => wrap(await context.newPage()),
+        close: () => context.close(),
+    };
+}

package/plugins/publishings/wechatmp-pub/src/profile-check.ts

@@ -1,4 +1,5 @@
 import { resolveBrowserProfileDir } from '@gobing-ai/publish-harness';
+import { waitUntil } from '@gobing-ai/publish-harness/browser';
 import { openPersistentBrowser } from '@gobing-ai/ts-browser-automation';
 import { echo } from '@gobing-ai/ts-utils';
 import { checkWechatSession, storageStatePath } from './index';
@@ -19,11 +20,12 @@ try {
         try {
             const page = context.pages()[0] ?? (await context.newPage());
             await page.goto(CONSOLE_URL);
-            const deadline = Date.now() + LOGIN_TIMEOUT_MS;
-            while (!page.url().includes(LOGGED_IN_FRAGMENT)) {
-                if (Date.now() > deadline) throw new Error(`QR scan not completed within ${LOGIN_TIMEOUT_MS / 1000}s`);
-                await new Promise((resolve) => setTimeout(resolve, 1000));
-            }
+            const ready = await waitUntil(
+                () => Promise.resolve(page.url().includes(LOGGED_IN_FRAGMENT)),
+                LOGIN_TIMEOUT_MS,
+                1000,
+            );
+            if (!ready) throw new Error(`QR scan not completed within ${LOGIN_TIMEOUT_MS / 1000}s`);
             await page.waitForTimeout(10_000); // settle: let the console finish its post-auth Set-Cookies
             // The Chromium profile store drops the grant cookies on restart even though they carry
             // multi-day expiries — the durable session artifact is the captured storageState file,