@gobing-ai/knowledge-kit 0.0.31 → 0.0.33

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -57,35 +57,46 @@ import {
 import { homedir } from 'node:os';
 import { basename, dirname, join, relative, resolve } from 'node:path';
 
-const SCRIPTS_DIR = import.meta.dir;
-const VALIDATE_SIDECAR = 'validate-voicescript.ts';
+export const SCRIPTS_DIR = import.meta.dir;
+export const VALIDATE_SIDECAR = 'validate-voicescript.ts';
 const WRAP_SIDECAR = 'wrap-voicescript-doc.ts';
 const RENDER_SIDECAR = 'render-md.ts';
 // F613: the zh style contract the script-write prompt reads (snapshot stage) and dailynews-gen
 // consumes (DAILYNEWS_STYLE_FILE); no workflow var carries an override, so the chain is
 // $KK_WORKFLOWS_DIR -> package copy -> $HOME.
-const STYLE_SIDECAR = 'daily-voice-style.zh.md';
+export const STYLE_SIDECAR = 'daily-voice-style.zh.md';
 const REVISE_COUNT = '.revise-count';
+/** Bounded draft-remediation counter for the daily safety loop (20261005). */
+export const SAFETY_REVISE_COUNT = '.safety-revise-count';
+/**
+ * Verdict criteria that describe *platform admission* (the daily's CN 资质口径 / 播报形态 rules) rather
+ * than a defect in the draft itself. Only these can be answered by dropping a publish target; every
+ * other `fail` is draft integrity, which would ship to the remaining targets too (20261005).
+ */
+export const ADMISSION_CRITERIA = new Set(['jurisdictional-rules']);
+/** content-safety category 3 (可识别个人信息): a draft property, so no target choice answers it. */
+export const PII_FINDING_CATEGORY = 3;
+export const SAFETY_PLATFORM_DECISIONS = new Set(['OK', 'RISK', 'BLOCK']);
 // Post-translation title-dedup threshold (task 0138 R3). ponytail: the 2026-09-16 Gemini 3.8 Live
 // pair measures 0.417 zh title-only Jaccard, the nearest distinct pair 0.1 (4x margin). Character
 // bigrams need same-language input — pre-translate dedup over the mixed-language blend cannot work.
-const DEDUP_TITLE_THRESHOLD = 0.4;
+export const DEDUP_TITLE_THRESHOLD = 0.4;
 // F614: the daily cover renders through the shipped daily-news presets; the brief's subject is
 // the only per-run var. The format/style pins and the subject cap are part of the style
 // contract — changing the look means editing the preset files, not this stage.
-const COVER_FORMAT = 'daily-news-cover';
-const COVER_STYLE = 'daily-news';
-const COVER_SUBJECT_CAP = 240;
+export const COVER_FORMAT = 'daily-news-cover';
+export const COVER_STYLE = 'daily-news';
+export const COVER_SUBJECT_CAP = 240;
 // E8: the XHS card series. Format and style are pinned exactly like the cover's; only the copy is
 // model-authored. `XHS_MAX_CARDS` mirrors the format preset's own series guidance.
-const XHS_FORMAT = 'xhs-card';
-const XHS_MAX_CARDS = 10;
-const XHS_TITLE_CAP = 20;
-const XHS_BODY_CAP = 1000;
-const XHS_ROLES: readonly string[] = ['cover', 'content', 'closing'];
+export const XHS_FORMAT = 'xhs-card';
+export const XHS_MAX_CARDS = 10;
+export const XHS_TITLE_CAP = 20;
+export const XHS_BODY_CAP = 1000;
+export const XHS_ROLES: readonly string[] = ['cover', 'content', 'closing'];
 
 /** One planned card, normalized: `index` zero-padded for the preset's artifact name. */
-interface XhsCard {
+export interface XhsCard {
     index: string;
     role: string;
     copy: string;
@@ -95,7 +106,7 @@ interface XhsCard {
     sourcePoint: string;
 }
 
-function fail(message: string): never {
+export function fail(message: string): never {
     console.error(message);
     process.exit(1);
 }
@@ -116,7 +127,22 @@ async function loadItcStages(): Promise<typeof import('./itc-stages.ts')> {
 }
 
 /** coreutils-style reason for the errno codes the staged file operations can hit. */
-const ERRNO_REASONS: Record<string, string> = {
+
+/**
+ * Load the daily-* helper sibling lazily (task 0211 R7): this runner is resolved — and copied
+ * alone — from installs where the sibling may be absent, so the daily-* stages fail loud with a
+ * remediation path instead of breaking every stage at load.
+ */
+async function loadDailyStages(): Promise<typeof import('./daily-stages.ts')> {
+    try {
+        return await import('./daily-stages.ts');
+    } catch {
+        return fail(
+            'daily-stages.ts not found next to kk-workflow-stages.ts — install or refresh the kk package (bun link in a checkout)',
+        );
+    }
+}
+export const ERRNO_REASONS: Record<string, string> = {
     EACCES: 'Permission denied',
     EROFS: 'Read-only file system',
     ENOSPC: 'No space left on device',
@@ -132,7 +158,7 @@ const ERRNO_REASONS: Record<string, string> = {
  * Run a filesystem operation, turning a failure into the named diagnostic the shell reported
  * (`mkdir: <path>: Permission denied`) instead of an uncaught Bun stack trace.
  */
-function sted(op: string, path: string, run: () => void): void {
+export function sted(op: string, path: string, run: () => void): void {
     try {
         run();
     } catch (error) {
@@ -142,7 +168,7 @@ function sted(op: string, path: string, run: () => void): void {
 }
 
 /** `[ -f ]` semantics: exists AND is a regular file; an unreadable parent answers false, never throws. */
-function isFile(path: string): boolean {
+export function isFile(path: string): boolean {
     try {
         return statSync(path, { throwIfNoEntry: false })?.isFile() === true;
     } catch {
@@ -156,7 +182,7 @@ function isFile(path: string): boolean {
  * before the config-dir copy on purpose (F8 R1) — the shipped bytes win unless the operator elected
  * that directory as an override.
  */
-function resolveSidecar(override: string, sidecar: string): string {
+export function resolveSidecar(override: string, sidecar: string): string {
     if (override && isFile(override)) return override;
     const kkWorkflowsDir = process.env.KK_WORKFLOWS_DIR;
     if (kkWorkflowsDir) {
@@ -173,7 +199,7 @@ function resolveSidecar(override: string, sidecar: string): string {
  * that carries the override (`validate_script` / `wrap_script` / `render_script`) so the diagnostic
  * names the same thing the operator sees in the YAML.
  */
-function requireSidecar(override: string, sidecar: string, label: string): string {
+export function requireSidecar(override: string, sidecar: string, label: string): string {
     const resolved = resolveSidecar(override, sidecar);
     if (!isFile(resolved)) {
         fail(
@@ -211,7 +237,7 @@ function writeJson(path: string, value: Record<string, unknown>): void {
 
 /** `.revise-count` lives at the work_dir root in every workflow that uses it. */
 
-function bumpReviseCount(workDir: string): void {
+export function bumpReviseCount(workDir: string): void {
     const path = join(workDir, '.revise-count');
     let previous = Number.NaN;
     if (isFile(path))
@@ -221,6 +247,14 @@ function bumpReviseCount(workDir: string): void {
     sted('write', path, () => writeFileSync(path, `${(Number.isNaN(previous) ? 0 : previous) + 1}\n`));
 }
 
+/** `0` when `.safety-revise-count` is absent or unparsable: a fresh run revises, it never blocks on state. */
+export function readSafetyReviseCount(workDir: string): number {
+    const path = join(workDir, SAFETY_REVISE_COUNT);
+    if (!isFile(path)) return 0;
+    const value = Number.parseInt(readFileSync(path, 'utf-8'), 10);
+    return Number.isNaN(value) ? 0 : value;
+}
+
 interface PrepareOptions {
     readonly workDirArg: string;
     readonly topic: string;
@@ -343,7 +377,7 @@ function prepareStorm(args: string[]): void {
     writeJson(join(workDir, 'topic.json'), topicFile(query));
 }
 
-function duration(args: string[]): void {
+export function duration(args: string[]): void {
     const [workDirArg = '', targetDurationMin = ''] = args;
     if (!workDirArg) fail('missing work_dir');
     const targetMinutes = Number(targetDurationMin);
@@ -450,7 +484,7 @@ const DAILY_DIRS = [
 ] as const;
 
 /** `date -u +%FT%TZ` — the timestamp grammar the step-timing lines have always used. */
-function utcStamp(): string {
+export function utcStamp(): string {
     return new Date().toISOString().replace(/\.\d{3}Z$/, 'Z');
 }
 
@@ -458,7 +492,7 @@ function utcStamp(): string {
  * The pre-0133 shell wrapped every daily step in `trap … EXIT`, so the timing line lands on failure
  * too. The body signals failure by throwing `failWith`, never by calling `process.exit` directly.
  */
-class StageFailure extends Error {
+export class StageFailure extends Error {
     constructor(
         readonly status: number,
         readonly named: boolean,
@@ -468,11 +502,11 @@ class StageFailure extends Error {
     }
 }
 
-function failWith(status: number, message?: string): never {
+export function failWith(status: number, message?: string): never {
     throw new StageFailure(status, message !== undefined, message ?? `stage failed (status ${status})`);
 }
 
-function appendTiming(workDir: string, step: string, startedAt: string): void {
+export function appendTiming(workDir: string, step: string, startedAt: string): void {
     if (!workDir) return;
     try {
         appendFileSync(
@@ -484,7 +518,7 @@ function appendTiming(workDir: string, step: string, startedAt: string): void {
     }
 }
 
-function timed(workDir: string, step: string, body: () => void): void {
+export function timed(workDir: string, step: string, body: () => void): void {
     const startedAt = utcStamp();
     let status = 0;
     try {
@@ -503,7 +537,7 @@ function timed(workDir: string, step: string, body: () => void): void {
     if (status !== 0) process.exit(status);
 }
 
-function pluginsArgs(pluginsPath: string): string[] {
+export function pluginsArgs(pluginsPath: string): string[] {
     return pluginsPath === '' ? [] : ['--plugins-path', pluginsPath];
 }
 
@@ -512,9 +546,9 @@ function pluginsArgs(pluginsPath: string): string[] {
 // every descendant env; a nested `spur workflow run` — postsurfing's publishing workflow under
 // surfdash-pub — resolves a DIFFERENT digest and refuses to start. Strip both launcher vars at
 // the nested-spur boundary (SPUR_WORKFLOW_RUN_ACTIVE is the older sibling guard, task 0133-era).
-const NESTED_SPUR_UNSET = ['SPUR_WORKFLOW_RUN_ACTIVE', 'SPUR_EXPECTED_DEFINITION_DIGEST'] as const;
+export const NESTED_SPUR_UNSET = ['SPUR_WORKFLOW_RUN_ACTIVE', 'SPUR_EXPECTED_DEFINITION_DIGEST'] as const;
 
-function kk(
+export function kk(
     args: string[],
     options: { env?: Record<string, string>; unset?: readonly string[]; soft?: boolean } = {},
 ): number {
@@ -533,22 +567,22 @@ function kk(
     return status;
 }
 
-function writeJsonText(path: string, value: unknown): void {
+export function writeJsonText(path: string, value: unknown): void {
     // `Bun.write(path, JSON.stringify(value, null, 2))` — no trailing newline.
     writeFileSync(path, JSON.stringify(value, null, 2));
 }
 
-function writeJqText(path: string, value: unknown): void {
+export function writeJqText(path: string, value: unknown): void {
     // `jq … > path` — pretty output WITH the trailing newline jq always prints.
     writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
 }
 
-function writeRaw(path: string, value: string): void {
+export function writeRaw(path: string, value: string): void {
     // `printf '%s' … > path` / `bun -e 'Bun.write'` — no trailing newline.
     writeFileSync(path, value);
 }
 
-function readJson(path: string): Record<string, unknown> | null {
+export function readJson(path: string): Record<string, unknown> | null {
     if (!isFile(path)) return null;
     try {
         return JSON.parse(readFileSync(path, 'utf-8')) as Record<string, unknown>;
@@ -557,7 +591,7 @@ function readJson(path: string): Record<string, unknown> | null {
     }
 }
 
-function metadataOf(value: Record<string, unknown> | null): Record<string, unknown> {
+export function metadataOf(value: Record<string, unknown> | null): Record<string, unknown> {
     const metadata = value?.metadata;
     return metadata !== null && typeof metadata === 'object' ? (metadata as Record<string, unknown>) : {};
 }
@@ -566,14 +600,14 @@ function metadataOf(value: Record<string, unknown> | null): Record<string, unkno
  * Required stage input: a missing or unparsable file fails the stage naming the path, so a
  * run-date/path mismatch surfaces as its real cause instead of a downstream "field missing" error.
  */
-function requireJson(path: string, label: string): Record<string, unknown> {
+export function requireJson(path: string, label: string): Record<string, unknown> {
     const parsed = readJson(path);
     if (parsed === null) failWith(1, `${label}: required input not found or unparsable: ${path}`);
     return parsed;
 }
 
 /** `jq -e '.targets[]? | select(.target == t and .ok == true and .status == "published")'`. */
-function targetPublished(path: string, target: string): boolean {
+export function targetPublished(path: string, target: string): boolean {
     const parsed = readJson(path);
     const targets = parsed?.targets;
     if (!Array.isArray(targets)) return false;
@@ -612,6 +646,19 @@ function dailyPrepare(args: string[]): void {
         sted('write', join(workDir, 'run-date.txt'), () =>
             writeFileSync(join(workDir, 'run-date.txt'), `${dirDate}\n`),
         );
+        // The safety remediation budget belongs to the attempt, not to the day: a fresh run (or a
+        // same-day retry) starts with the full revise allowance instead of inheriting a spent one.
+        sted('write', join(workDir, SAFETY_REVISE_COUNT), () =>
+            writeFileSync(join(workDir, SAFETY_REVISE_COUNT), '0\n'),
+        );
+        // Version-stamp the run: every later stage resolves `kk` from PATH, so name the binary
+        // this run will actually use (20261006 outage: a stale global kk pre-dated the revise
+        // loop and the skew was only visible after the fact).
+        const versionProbe = spawnSync('kk', ['--version'], { encoding: 'utf8', timeout: 10_000 });
+        const kkVersion = versionProbe.status === 0 ? versionProbe.stdout.trim() : 'unknown';
+        sted('write', join(workDir, 'kk-version.txt'), () =>
+            writeFileSync(join(workDir, 'kk-version.txt'), `${kkVersion}\n`),
+        );
         // Anchor for the workflow: shell actions cannot set vars, so the YAML reads the
         // effective work_dir back into vars.work_dir from this cwd-relative file.
         const anchorDir = join('.spur', 'runs', 'kk-daily-ai-voice');
@@ -677,6 +724,35 @@ function resolveWorksDir(): string {
     return join(homedir(), '.config/kk/works');
 }
 
+/**
+ * `collect-prepare <stamp> <limit> <topic> <horizonHours>` — kk-collect's workspace: the pinned stamp
+ * (else the UTC minute, `YYYYMMDDTHHMMZ`), the cwd-relative `.works/kk-collect/<stamp>` work dir, the
+ * anchor files the workflow reads back into vars (shell actions cannot set vars), and the three
+ * source configs `kk executor fan-in --source <plugin>:<file>` requires. Configs go through
+ * `writeJsonText` so a topic carrying quotes or backslashes stays valid JSON.
+ */
+function collectPrepare(args: string[]): void {
+    const [stampArg = '', limit = '', topic = '', horizonHours = ''] = args;
+    const stamp = stampArg || new Date().toISOString().replace(/[-:]/g, '').slice(0, 13).concat('Z');
+    const workDir = join('.works', 'kk-collect', stamp);
+    const anchorDir = join('.spur', 'runs', 'kk-collect');
+    sted('mkdir', join(workDir, '10-ingest'), () => mkdirSync(join(workDir, '10-ingest'), { recursive: true }));
+    sted('mkdir', anchorDir, () => mkdirSync(anchorDir, { recursive: true }));
+    sted('write', join(anchorDir, 'work-dir.txt'), () =>
+        writeFileSync(join(anchorDir, 'work-dir.txt'), `${workDir}\n`),
+    );
+    sted('write', join(anchorDir, 'stamp.txt'), () => writeFileSync(join(anchorDir, 'stamp.txt'), `${stamp}\n`));
+    sted('write', join(workDir, '10-ingest/source.json'), () =>
+        writeJsonText(join(workDir, '10-ingest/source.json'), { limit: Number(limit) }),
+    );
+    sted('write', join(workDir, '10-ingest/last30days.json'), () =>
+        writeJsonText(join(workDir, '10-ingest/last30days.json'), { topic }),
+    );
+    sted('write', join(workDir, '10-ingest/horizon.json'), () =>
+        writeJsonText(join(workDir, '10-ingest/horizon.json'), { hours: Number(horizonHours) }),
+    );
+}
+
 function dailyCollectFacts(args: string[]): void {
     const [workDir = '', runDate = '', pluginsPath = ''] = args;
     const content = join(workDir, '20-facts', `${runDate}_02_collect_content.json`);
@@ -684,7 +760,7 @@ function dailyCollectFacts(args: string[]): void {
     const blended = join(workDir, '10-ingest', `${runDate}_02_collect_blended.json`);
     timed(workDir, 'collect', () => {
         if (isFile(content) && isFile(facts)) {
-            console.log(`core facts cached: ${facts}`);
+            console.error(`core facts cached: ${facts}`);
             return;
         }
         kk(['executor', 'run', 'core-facts-gen', '--in', blended, '--out', content, ...pluginsArgs(pluginsPath)]);
@@ -694,46 +770,20 @@ function dailyCollectFacts(args: string[]): void {
     });
 }
 
-function dailyPlan(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', planMaxItems = ''] = args;
-    const planContent = join(workDir, '21-plan', `${runDate}_03_plan_content.json`);
-    const planDocs = join(workDir, '21-plan', `${runDate}_03_plan_plan.json`);
-    const blended = join(workDir, '10-ingest', `${runDate}_02_collect_blended.json`);
-    timed(workDir, 'plan', () => {
-        if (isFile(planDocs)) {
-            console.log(`plan cached: ${planDocs}`);
-            return;
-        }
-        kk(
-            ['executor', 'run', 'episode-plan-gen', '--in', blended, '--out', planContent, ...pluginsArgs(pluginsPath)],
-            {
-                env: { EPISODE_PLAN_MAX_ITEMS: planMaxItems, EPISODE_PLAN_DATE: runDate },
-            },
-        );
-        const docs = metadataOf(readJson(planContent)).docs;
-        if (!Array.isArray(docs) || docs.length === 0) failWith(1, 'plan: content.metadata.docs missing or empty');
-        sted('write', planDocs, () => writeJsonText(planDocs, docs));
-        if (!isFile(planDocs)) failWith(1, `plan: ${planDocs} not written after episode-plan-gen`);
-    });
-}
-
-/**
- * Topic-boundary sidecar (task 0189 R2). Sibling of this file; node-builtins-only read.
- */
-interface TopicBoundaryRule {
+export interface TopicBoundaryRule {
     id: string;
     reason: string;
     keywords: string[];
 }
 
-interface TopicBoundarySpec {
+export interface TopicBoundarySpec {
     version: number;
     scanChars: number;
     rules: TopicBoundaryRule[];
     dateConflict: { reason: string };
 }
 
-interface TopicBoundaryExclusion {
+export interface TopicBoundaryExclusion {
     id: string;
     title: string;
     rule: string;
@@ -741,7 +791,7 @@ interface TopicBoundaryExclusion {
     matched: string;
 }
 
-function readTopicBoundary(): TopicBoundarySpec {
+export function readTopicBoundary(): TopicBoundarySpec {
     const path = join(SCRIPTS_DIR, 'topic-boundary.json');
     let parsed: TopicBoundarySpec;
     try {
@@ -830,86 +880,7 @@ export function applyTopicBoundary(
     return { kept, excluded };
 }
 
-function dailyQcContent(args: string[]): void {
-    const [
-        workDir = '',
-        runDate = '',
-        pluginsPath = '',
-        qcCategories = '',
-        minQuality = '',
-        minImportance = '',
-        minUrgency = '',
-        minImpact = '',
-        minEpisodeItems = '',
-    ] = args;
-    const candidates = join(workDir, '21-plan', `${runDate}_04_quality-control-content_candidates.json`);
-    const annotated = join(workDir, '21-plan', `${runDate}_04_quality-control-content_annotated.json`);
-    const exclusions = join(workDir, '21-plan', `${runDate}_04_quality-control-content_exclusions.json`);
-    const planContent = join(workDir, '21-plan', `${runDate}_03_plan_content.json`);
-    timed(workDir, 'quality-control-content', () => {
-        if (isFile(candidates)) {
-            console.log(`candidates cached: ${candidates}`);
-            return;
-        }
-        sted('write', annotated, () => writeJqText(annotated, metadataOf(readJson(planContent)).docs ?? null));
-        kk(
-            [
-                'executor',
-                'run',
-                'episode-plan-gen',
-                '--in',
-                annotated,
-                '--out',
-                candidates,
-                ...pluginsArgs(pluginsPath),
-            ],
-            {
-                env: {
-                    EPISODE_PLAN_MODE: 'filter',
-                    QC_CATEGORIES: qcCategories,
-                    QC_MIN_QUALITY: minQuality,
-                    QC_MIN_IMPORTANCE: minImportance,
-                    QC_MIN_URGENCY: minUrgency,
-                    QC_MIN_IMPACT: minImpact,
-                    QC_MIN_EPISODE_ITEMS: minEpisodeItems,
-                },
-            },
-        );
-    });
-    // Topic boundary (task 0189 R2) runs on every invocation — re-applying to already-filtered
-    // candidates is a no-op, so cached reruns stay idempotent while a crash between the candidates
-    // write and the exclusions write still converges on the next run. Zero kept docs leaves the
-    // candidates file empty for the workflow's existing done-no-content edge.
-    const boundaryDocs = metadataOf(readJson(candidates)).docs;
-    if (!Array.isArray(boundaryDocs)) return;
-    const { kept, excluded } = applyTopicBoundary(boundaryDocs, runDate, readTopicBoundary());
-    if (excluded.length === 0) return;
-    sted('write', exclusions, () =>
-        writeJsonText(exclusions, {
-            version: 1,
-            runDate,
-            excluded,
-            kept: kept.map((doc) => (doc as { id: string }).id),
-        }),
-    );
-    const content = requireJson(candidates, 'topic-boundary');
-    const meta = content.metadata;
-    if (meta === null || typeof meta !== 'object') {
-        failWith(1, 'topic-boundary: candidates content carries no metadata object');
-    }
-    (meta as Record<string, unknown>).docs = kept;
-    sted('write', candidates, () => writeJsonText(candidates, content));
-    console.log(
-        `topic-boundary: excluded ${excluded.length} item(s): ${excluded.map((entry) => `${entry.id}(${entry.rule})`).join(', ')}`,
-    );
-}
-
-/**
- * Character-bigram Jaccard over whitespace-normalized, lowercased titles — the twin of
- * episode-plan-gen's `titleSimilarity`. Duplicated on purpose: this file is node-builtins-only
- * (no workspace imports), so it cannot reach that module.
- */
-function titleSimilarity(a: string, b: string): number {
+export function titleSimilarity(a: string, b: string): number {
     const bigrams = (text: string): Set<string> => {
         const normalized = text.replace(/\s+/g, ' ').trim().toLowerCase();
         const out = new Set<string>();
@@ -959,7 +930,7 @@ export function dedupPlanByTitle<T extends { id?: unknown; title?: unknown }>(
  * reads. The sidecar's own stderr carries `content check failed: segment <idx> …`; this adds the
  * stage-level naming so the operator sees which artifact was rejected.
  */
-function assertScriptContent(scriptPath: string): void {
+export function assertScriptContent(scriptPath: string): void {
     // `spawnSync` + `failWith`, deliberately NOT `delegate`: delegate is `never`-returning (it calls
     // process.exit), so using it mid-function would abort the calling stage on SUCCESS — dailyWrapDocs
     // would exit before packaging its docs. A clean exit here falls through to the rest of the stage.
@@ -970,80 +941,7 @@ function assertScriptContent(scriptPath: string): void {
     }
 }
 
-function dailyArticle(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = ''] = args;
-    const articleMd = join(workDir, '22-article', `${runDate}_06_article_article.md`);
-    const articleContent = join(workDir, '22-article', `${runDate}_06_article_content.json`);
-    const planIn = join(workDir, '21-plan', `${runDate}_03_plan_plan.json`);
-    const candidates = join(workDir, '21-plan', `${runDate}_04_quality-control-content_candidates.json`);
-    timed(workDir, 'article', () => {
-        let planUsable = true;
-        const raw = isFile(planIn) ? readFileSync(planIn, 'utf-8') : '';
-        try {
-            JSON.parse(raw);
-        } catch (error) {
-            console.error(
-                `article: plan.json invalid JSON — replacing with untranslated plan (downstream states read this file): ${(error as Error).message}`,
-            );
-            const docs = metadataOf(readJson(candidates)).docs;
-            if (!Array.isArray(docs) || docs.length === 0) {
-                console.error('article: candidates.json metadata.docs missing');
-                planUsable = false;
-            } else {
-                sted('write', planIn, () => writeJsonText(planIn, docs));
-            }
-        }
-        if (!planUsable) failWith(1, 'article: no usable plan input');
-        // R3 (task 0138): dedup runs BEFORE the cache early-return — the script stage reads this same
-        // plan.json and must see one survivor even when the article is already cached. Idempotent:
-        // a no-op once the plan is deduped.
-        const planParsed: unknown = readJson(planIn);
-        if (Array.isArray(planParsed)) {
-            const { kept, dropped } = dedupPlanByTitle(planParsed as Record<string, unknown>[]);
-            if (dropped.length > 0) {
-                sted('write', planIn, () => writeJsonText(planIn, kept));
-                console.error(`article: dropped ${dropped.length} near-duplicate plan item(s): ${dropped.join(', ')}`);
-            }
-        }
-        if (isFile(articleMd)) {
-            console.log(`article cached: ${articleMd}`);
-            return;
-        }
-        // Agent-written prose body (workflow `article-write` state) replaces the mechanical
-        // per-item render when present — the 3-format split: surfdash gets an article,
-        // not a news list (2026-09-16 feedback).
-        const proseBody = join(workDir, '22-article', `${runDate}_06_article-write_body.md`);
-        kk(
-            [
-                'executor',
-                'run',
-                'daily-article-gen',
-                '--in',
-                planIn,
-                '--out',
-                articleContent,
-                ...pluginsArgs(pluginsPath),
-            ],
-            {
-                env: {
-                    ARTICLE_DATE: runDate,
-                    // Plugin entries run with cwd = plugin dir (invoke.ts), so relative
-                    // paths in env must be resolved or the plugin sees ENOENT.
-                    ...(isFile(proseBody) ? { ARTICLE_BODY_FILE: resolve(proseBody) } : {}),
-                },
-            },
-        );
-        const body = readJson(articleContent)?.body;
-        if (typeof body !== 'string') failWith(1, `article: ${articleContent} has no string body`);
-        sted('write', articleMd, () => writeRaw(articleMd, body));
-    });
-}
-
-/**
- * F614 R2/R4: validate the agent-written cover brief in the order R4 names — the first failing
- * check is the fallback reason; `reason: null` carries the trimmed subject.
- */
-function coverBrief(briefPath: string): { reason: string | null; subject: string } {
+export function coverBrief(briefPath: string): { reason: string | null; subject: string } {
     if (!isFile(briefPath)) return { reason: 'missing-brief', subject: '' };
     let parsed: unknown;
     try {
@@ -1061,71 +959,7 @@ function coverBrief(briefPath: string): { reason: string | null; subject: string
     return { reason: null, subject: trimmed };
 }
 
-/**
- * F614 R3: build the image-gen envelope from the day's cover brief and render it. The subject is
- * the only model-authored input (the workflow's brief agent.run wrote it); format, style,
- * provider and model are pinned by this stage so no caller can drift the look. A missing or
- * invalid brief degrades to the format's default subject (R4) — a plugin failure still fails
- * the stage, matching the pre-F614 cover behavior.
- */
-function dailyCover(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', provider = '', model = '', fallback = ''] = args;
-    const briefPath = join(workDir, '23-cover', `${runDate}_07_cover-brief.json`);
-    const envPath = join(workDir, '23-cover', `${runDate}_07_cover_image-gen-in.json`);
-    const contentOut = join(workDir, '23-cover', 'content.json');
-    timed(workDir, 'cover', () => {
-        const brief = coverBrief(briefPath);
-        const vars: Record<string, string> = {};
-        if (brief.reason !== null) {
-            console.error(`cover brief: fallback (${brief.reason})`);
-        } else {
-            vars.subject = brief.subject;
-        }
-        const imageGen: Record<string, unknown> = {
-            job: 'cover',
-            format: COVER_FORMAT,
-            style: COVER_STYLE,
-            vars,
-            maxImages: 1,
-        };
-        if (provider !== '') imageGen.provider = provider;
-        if (model !== '') imageGen.model = model;
-        // D6 0166 R7: runtime-fallback opt-in. '' (the shipped var default) keeps strict fail-fast —
-        // F614's pinned look stays the default; 'true' = retry down AUTO_ORDER; anything else is a
-        // comma-split, trimmed candidate list. Unknown names are rejected by image-gen, not here.
-        if (fallback !== '') {
-            imageGen.fallback =
-                fallback === 'true'
-                    ? true
-                    : fallback
-                          .split(',')
-                          .map((s) => s.trim())
-                          .filter(Boolean);
-        }
-        sted('write', envPath, () =>
-            writeJsonText(envPath, [{ id: 'daily-cover', title: runDate, body: '', metadata: { imageGen } }]),
-        );
-        kk(['executor', 'run', 'image-gen', '--in', envPath, '--out', contentOut, ...pluginsArgs(pluginsPath)]);
-    });
-}
-
-function dailyCoverNormalize(args: string[]): void {
-    const [workDir = '', runDate = ''] = args;
-    // The pre-0133 shell had no timing trap, so this stage is not `timed`; it still fails through
-    // `failWith`, which needs the named-failure handling `timed` gives the other stages.
-    try {
-        coverNormalizeBody(workDir, runDate);
-    } catch (error) {
-        if (error instanceof StageFailure) {
-            if (error.named) console.error(error.message);
-            process.exit(error.status);
-        }
-        console.error((error as Error).message);
-        process.exit(1);
-    }
-}
-
-function coverNormalizeBody(workDir: string, runDate: string): void {
+export function coverNormalizeBody(workDir: string, runDate: string): void {
     // F614 R5: the artifact name follows the format preset (`<stem>-<format>-NN.<ext>`,
     // paths.ts), so normalize reads the path the plugin itself recorded in the manifest instead
     // of a hard-coded name. The legacy content-cover-01.{png,jpg} paths stay as stale cleanup.
@@ -1165,11 +999,11 @@ function coverNormalizeBody(workDir: string, runDate: string): void {
             // `rm -f` is silent when the file is already gone (a renamed source lands here too).
         }
     }
-    console.log(`cover normalized: ${runDate}_07_cover_cover.png`);
+    console.error(`cover normalized: ${runDate}_07_cover_cover.png`);
 }
 
 /** `metadata.images[0]` — the artifact the image-gen plugin recorded for one render. */
-function firstArtifact(content: Record<string, unknown> | null): Record<string, unknown> | null {
+export function firstArtifact(content: Record<string, unknown> | null): Record<string, unknown> | null {
     const images = metadataOf(content).images;
     const first = Array.isArray(images) ? images[0] : undefined;
     return first !== null && typeof first === 'object' ? (first as Record<string, unknown>) : null;
@@ -1181,7 +1015,7 @@ function firstArtifact(content: Record<string, unknown> | null): Record<string,
  * check fails loud naming the field, so an unusable plan skips the XHS target visibly instead of
  * publishing a partial card series (the owning state carries `onError: continue`).
  */
-function xhsPlan(planPath: string, count: number): { title: string; body: string; cards: XhsCard[] } {
+export function xhsPlan(planPath: string, count: number): { title: string; body: string; cards: XhsCard[] } {
     const parsed = requireJson(planPath, 'xhs plan');
     const title = typeof parsed.title === 'string' ? parsed.title.trim() : '';
     if (title === '' || title.length > XHS_TITLE_CAP) {
@@ -1229,293 +1063,14 @@ function xhsPlan(planPath: string, count: number): { title: string; body: string
     return { title, body, cards };
 }
 
-/**
- * E8: build one `image-gen` envelope per planned card, render them sequentially, and package the
- * ordered card manifest + `Content` that `xhs-pub` consumes. Format, style, provider and model
- * are pinned here (never model-authored), so the series cannot drift from its preset. Card copy
- * is typeset by image-gen's composer; the provider prompt stays text-free (0181). Resume-safe:
- * a card whose recorded artifact is still on disk is not re-rendered — and not re-billed.
- */
-function dailyXhsRender(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', countArg = '', style = '', provider = '', model = ''] = args;
-    const count = Number.parseInt(countArg, 10);
-    const planPath = join(workDir, '25-xhs', `${runDate}_18_xhs_plan.json`);
-    const cardsDir = join(workDir, '25-xhs', 'cards');
-    const manifestPath = join(workDir, '25-xhs', 'cards.json');
-    const contentPath = join(workDir, '25-xhs', 'content.json');
-    timed(workDir, 'xhs-render', () => {
-        if (!Number.isInteger(count) || count < 1 || count > XHS_MAX_CARDS) {
-            failWith(1, `xhs render: xhs_cards must be 1..${XHS_MAX_CARDS}, got '${countArg}'`);
-        }
-        const plan = xhsPlan(planPath, count);
-        sted('mkdir', cardsDir, () => mkdirSync(cardsDir, { recursive: true }));
-        const images: Record<string, unknown>[] = [];
-        const cards: Record<string, unknown>[] = [];
-        for (const card of plan.cards) {
-            const out = join(cardsDir, `card-${card.index}.json`);
-            const promptPath = join(cardsDir, `card-${card.index}.prompt.txt`);
-            let artifact = firstArtifact(readJson(out));
-            if (artifact === null || !isFile(typeof artifact.path === 'string' ? artifact.path : '')) {
-                const envPath = join(cardsDir, `card-${card.index}.in.json`);
-                const imageGen: Record<string, unknown> = {
-                    job: 'free',
-                    format: XHS_FORMAT,
-                    style,
-                    vars: {
-                        role: card.role,
-                        layout: card.layout,
-                        headline: card.copy,
-                        points: card.points.join('\n'),
-                        subject: card.subject,
-                        index: card.index,
-                    },
-                    maxImages: 1,
-                };
-                if (provider !== '') imageGen.provider = provider;
-                if (model !== '') imageGen.model = model;
-                sted('write', envPath, () =>
-                    writeJsonText(envPath, [
-                        { id: `xhs-card-${card.index}`, title: runDate, body: '', metadata: { imageGen } },
-                    ]),
-                );
-                // Sequential on purpose: one provider call per card (illustration only —
-                // card copy is typeset by image-gen's composer, never prompted), and the
-                // first failure stops the spend — later cards stay unrendered for a resume
-                // run to pick up.
-                kk(['executor', 'run', 'image-gen', '--in', envPath, '--out', out, ...pluginsArgs(pluginsPath)]);
-                artifact = firstArtifact(requireJson(out, 'xhs render'));
-            }
-            if (artifact === null) failWith(1, `xhs render: card ${card.index} recorded no image artifact (${out})`);
-            const recorded = artifact.path;
-            if (typeof recorded !== 'string' || !isFile(recorded)) {
-                failWith(1, `xhs render: card ${card.index} image artifact is not on disk: '${String(recorded)}'`);
-            }
-            // `image-gen` writes the artifact beside `--out`; the publisher requires absolute paths.
-            const imagePath = resolve(recorded);
-            // 0181: a composed card may also carry the text-free illustration layer; keep
-            // its recorded path so the manifest shows both layers.
-            const rawIllustration: unknown = artifact.illustration;
-            const illustrationPath =
-                typeof rawIllustration === 'object' &&
-                rawIllustration !== null &&
-                typeof (rawIllustration as Record<string, unknown>).path === 'string'
-                    ? resolve((rawIllustration as Record<string, unknown>).path as string)
-                    : undefined;
-            sted('write', promptPath, () =>
-                writeRaw(promptPath, typeof artifact.prompt === 'string' ? artifact.prompt : ''),
-            );
-            images.push({ ...artifact, path: imagePath });
-            cards.push({
-                index: card.index,
-                role: card.role,
-                sourcePoint: card.sourcePoint,
-                copy: card.copy,
-                layout: card.layout,
-                promptPath,
-                imagePath,
-                illustrationPath,
-                status: 'rendered',
-            });
-        }
-        sted('write', manifestPath, () => writeJsonText(manifestPath, { source: planPath, cards }));
-        sted('write', contentPath, () =>
-            writeJsonText(contentPath, {
-                title: plan.title,
-                body: plan.body,
-                format: 'text',
-                metadata: { images, publishStatus: 'draft' },
-            }),
-        );
-        console.log(`xhs render: ${cards.length} cards packaged in card order (${contentPath})`);
-    });
-}
-
-/** A single-target publish Result, not the fan-out aggregate: `ok` plus `metadata.publishStatus`. */
-function resultPublishStatus(path: string): string {
+export function resultPublishStatus(path: string): string {
     const parsed = readJson(path);
     if (parsed?.ok !== true) return '';
     const status = metadataOf(parsed).publishStatus;
     return status === 'public' || status === 'draft' ? status : '';
 }
 
-/**
- * E8: publish the packaged card series through `xhs-pub`'s script driver. Draft by default; live
- * only on an explicit launch-time `xhs_live=true` (ADR-022 — an unattended run never posts live on
- * its own). Non-blocking by operator decision: a missing/expired XHS session or a changed console
- * logs a loud failure and leaves the run alive, and the outcome never enters `publish_status`
- * (surfdash + podcast remain the episode's publication contract).
- */
-function dailyPublishXhs(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', live = 'false'] = args;
-    const content = join(workDir, '25-xhs', 'content.json');
-    const input = join(workDir, '31-publish', `${runDate}_19_publish-xhs_content.json`);
-    const result = join(workDir, '31-publish', `${runDate}_19_publish-xhs_result.json`);
-    const want = live === 'true' ? 'public' : 'draft';
-    timed(workDir, 'publish-xhs', () => {
-        // Cache on the *requested* status: a cached draft must not silently satisfy a later
-        // xhs_live=true re-run (that would report a live post that never happened).
-        if (resultPublishStatus(result) === want) {
-            console.log(`publish-xhs cached: ${want} already recorded in ${result}`);
-            return;
-        }
-        if (!isFile(content)) {
-            console.log(`publish-xhs: no card series at ${content} (render packaged none) — skip`);
-            return;
-        }
-        const packaged = requireJson(content, 'publish-xhs');
-        sted('write', input, () =>
-            writeJsonText(input, { ...packaged, metadata: { ...metadataOf(packaged), publishStatus: want } }),
-        );
-        // `soft` keeps the XHS target non-blocking: the plugin still writes its own failed Result
-        // and prints the failing step (login gate, upload, body, submit control), which is what the
-        // operator needs to re-run — never a silent skip.
-        const status = kk(['executor', 'run', 'xhs-pub', '--in', input, '--out', result, ...pluginsArgs(pluginsPath)], {
-            soft: true,
-        });
-        console.log(
-            status === 0
-                ? `publish-xhs: ${want} dispatched; outcome recorded in ${result}`
-                : `WARNING: publish-xhs — xhs-pub exited ${status}; XHS target skipped (run continues, see ${result})`,
-        );
-    });
-}
-
-/**
- * WeChat MP: drive the console via `wechatmp-pub`'s browser transport and save the article to the
- * draft box (草稿箱). Draft by default; the 发表 flow runs only on an explicit launch-time
- * `wechat_live=true` (ADR-022 rail, same as xhs). Independent and non-blocking like XHS: the
- * outcome never enters `publish_status` (surfdash + podcast remain the publication contract).
- */
-function dailyPublishWechat(args: string[]): void {
-    const [workDirRaw = '', runDate = '', pluginsPath = '', live = 'false', collectionArg = ''] = args;
-    // Metadata carries file paths consumed by the plugin child process (cwd = plugin dir) - never emit relatives.
-    const workDir = resolve(workDirRaw);
-    const article = join(workDir, '22-article', `${runDate}_06_article_content.json`);
-    const input = join(workDir, '31-publish', `${runDate}_20_publish-wechat_content.json`);
-    const result = join(workDir, '31-publish', `${runDate}_20_publish-wechat_result.json`);
-    const want = live === 'true' ? 'public' : 'draft';
-    timed(workDir, 'publish-wechat', () => {
-        // Cache on the *requested* status: a cached draft must not silently satisfy a later
-        // wechat_live=true re-run (that would report a live post that never happened).
-        if (resultPublishStatus(result) === want) {
-            console.log(`publish-wechat cached: ${want} already recorded in ${result}`);
-            return;
-        }
-        if (!isFile(article)) {
-            console.log(`publish-wechat: no article at ${article} — skip`);
-            return;
-        }
-        const packaged = requireJson(article, 'publish-wechat');
-        // MP draft enrichment (operator preference 2026-09-29): 原创+作者, 赞赏, 合集, 原文链接
-        // (the surfdash post), AI 生成声明, cover. The brand strings are this daily show's constants.
-        const cover = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
-        const audio = join(workDir, '30-audio', `${runDate}_11_generate_content.mp3`);
-        const wechatmp: Record<string, unknown> = {
-            original: true,
-            aiGenerated: true,
-            author: '冰原奔狼',
-            collection: collectionArg || 'AI 乱炖',
-            ...(isFile(cover) ? { coverPath: cover } : {}),
-            // Audio block at the article top (operator request 2026-09-29): the daily MP3 goes to
-            // the 素材库 under the article title; the plugin reuses an existing same-title material.
-            ...(isFile(audio)
-                ? {
-                      audioPath: audio,
-                      audioTitle: typeof packaged.title === 'string' ? packaged.title : '',
-                      audioCoverPath: isFile(cover) ? cover : '',
-                  }
-                : {}),
-        };
-        // WeChat-only closing line (operator request 2026-09-29): point readers/listeners back to
-        // the show's platforms. Appended to the wechat input body only, never the master article.
-        const outro = '\n\n欲听往期节目，可至小宇宙、Apple Podcast、YouTube 等平台搜索【咸话咸说】。';
-        sted('write', input, () =>
-            writeJsonText(input, {
-                ...packaged,
-                body: `${typeof packaged.body === 'string' ? packaged.body : ''}${outro}`,
-                metadata: { ...metadataOf(packaged), publishStatus: want, wechatmp },
-            }),
-        );
-        // `soft` keeps the WeChat target non-blocking: the plugin still writes its own failed Result
-        // and prints the failing step (session preflight, editor paste, save control), which is what
-        // the operator needs to re-run — never a silent skip.
-        const status = kk(
-            ['executor', 'run', 'wechatmp-pub', '--in', input, '--out', result, ...pluginsArgs(pluginsPath)],
-            {
-                soft: true,
-            },
-        );
-        console.log(
-            status === 0
-                ? `publish-wechat: ${want} dispatched; outcome recorded in ${result}`
-                : `WARNING: publish-wechat — wechatmp-pub exited ${status}; WeChat target skipped (run continues, see ${result})`,
-        );
-    });
-}
-
-/**
- * F613 R1: snapshot the shipped style contract into the run's work dir. Spur workflows have no
- * workflow-dir var, so the script-write prompt reads this copy — and the snapshot freezes the
- * exact contract the run's plan was written against. Idempotent (an existing snapshot is kept);
- * a missing sidecar is a broken install, so `requireSidecar` fails loud.
- */
-function dailyScriptStyle(args: string[]): void {
-    const [workDir = '', runDate = ''] = args;
-    const snapshot = join(workDir, '24-script', `${runDate}_08_script-write_style.md`);
-    if (isFile(snapshot)) {
-        console.log(`script style cached: ${snapshot}`);
-        return;
-    }
-    const sidecar = requireSidecar('', STYLE_SIDECAR, 'daily-voice-style');
-    const scriptDir = join(workDir, '24-script');
-    sted('mkdir', scriptDir, () => mkdirSync(scriptDir, { recursive: true }));
-    sted('cp', snapshot, () => copyFileSync(sidecar, snapshot));
-    console.log(`script style snapshot: ${snapshot}`);
-}
-
-function dailyScript(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', language = '', title = '', voiceProfile = ''] = args;
-    const yamlOut = join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`);
-    const contentOut = join(workDir, '24-script', `${runDate}_08_script_content.json`);
-    const planIn = join(workDir, '21-plan', `${runDate}_03_plan_plan.json`);
-    timed(workDir, 'script', () => {
-        if (isFile(yamlOut)) {
-            console.log(`voicescript capped by plan: ${yamlOut}`);
-            return;
-        }
-        kk(['executor', 'run', 'dailynews-gen', '--in', planIn, '--out', contentOut, ...pluginsArgs(pluginsPath)], {
-            env: {
-                DAILYNEWS_LANGUAGE: language,
-                DAILYNEWS_TITLE: title,
-                // Task 0189: the broadcast greeting carries the episode's run date, not the render
-                // date — a backfilled/retried run must not greet "today".
-                DAILYNEWS_DATE: runDate,
-                VOICEBOX_DEFAULT_PROFILE: voiceProfile,
-                // F613 R4: always passed as absolute paths — spawnPluginEntry runs plugins with
-                // cwd = the plugin package dir, so a relative workDir would silently miss the
-                // plan; a plan file absent at build time reports missing-plan (template fallback).
-                DAILYNEWS_SCRIPT_PLAN: resolve(join(workDir, '24-script', `${runDate}_08_script-write_plan.json`)),
-                DAILYNEWS_STYLE_FILE: resolve(resolveSidecar('', STYLE_SIDECAR)),
-            },
-        });
-        const body = readJson(contentOut)?.body;
-        if (typeof body !== 'string') failWith(1, `script: ${contentOut} has no string body`);
-        sted('write', yamlOut, () => writeRaw(yamlOut, body));
-        // R3 (task 0139): fresh writes are validated here; the script cache path is covered by
-        // wrap-docs, which runs on every path that reaches audio.
-        try {
-            assertScriptContent(yamlOut);
-        } catch (err) {
-            // A rejected fresh write would otherwise poison the isFile(yamlOut) cache: every
-            // resume skips regeneration and re-fails at wrap-docs. Drop it so retry regenerates.
-            unlinkSync(yamlOut);
-            throw err;
-        }
-    });
-}
-
-/** Task 0189 R10 artifacts of the content-safety verdict gate (24-script, step 09). */
-function safetyPath(workDir: string, runDate: string, name: string): string {
+export function safetyPath(workDir: string, runDate: string, name: string): string {
     return join(workDir, '24-script', `${runDate}_09_${name}`);
 }
 
@@ -1524,7 +1079,7 @@ function safetyPath(workDir: string, runDate: string, name: string): string {
  * for the bytes it was issued on: the gate and publish-prep both recompute this, so an edit after
  * PASS — including a HITL edit at `review` — invalidates the stamp instead of riding on it.
  */
-function safetyDigest(workDir: string, runDate: string): string {
+export function safetyDigest(workDir: string, runDate: string): string {
     const hash = createHash('sha256');
     for (const path of safetyDraftPaths(workDir, runDate)) {
         if (!isFile(path)) failWith(1, `safety-review: required draft not found: ${path}`);
@@ -1534,337 +1089,14 @@ function safetyDigest(workDir: string, runDate: string): string {
 }
 
 /** The drafts under review — the digest's bytes, and the quarantine set on a quality block. */
-function safetyDraftPaths(workDir: string, runDate: string): [string, string] {
+export function safetyDraftPaths(workDir: string, runDate: string): [string, string] {
     return [
         join(workDir, '22-article', `${runDate}_06_article_content.json`),
         join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`),
     ];
 }
 
-/**
- * Open a content-safety review of the current drafts: drop every artifact of an earlier review
- * (a retry must be re-reviewed on its final version) and write the request the two agent.run
- * steps read. The program passes context only — platform policy lives in the kk:content-safety
- * skill's reference files, never here.
- */
-function dailySafetyPrep(args: string[]): void {
-    const [workDir = '', runDate = '', platforms = ''] = args;
-    timed(workDir, 'safety-review', () => {
-        const digest = safetyDigest(workDir, runDate);
-        for (const name of [
-            'safety-review_report.json',
-            'safety-judge_verdict.json',
-            'safety-judge_status.txt',
-            'safety-judge_stamp.json',
-        ]) {
-            const stale = safetyPath(workDir, runDate, name);
-            if (isFile(stale)) unlinkSync(stale);
-        }
-        const request = safetyPath(workDir, runDate, 'safety-review_request.json');
-        const targets = platforms
-            .split(',')
-            .map((platform) => platform.trim())
-            .filter(Boolean);
-        sted('write', request, () => writeJsonText(request, { digest, platforms: targets, mode: 'detect-only' }));
-    });
-}
-
-/**
- * Consume the content-safety report and the content-judge verdict into pass|escalate|block (exit 0
- * in all three — routing is transition-owned). Fail-closed: only an explicit PASS verdict on the
- * unchanged drafts, with a well-formed report carrying no BLOCK, unblocks; a RISK decision or
- * `escalate: true` forces the human review regardless of the verdict score.
- */
-function dailySafetyGate(args: string[]): void {
-    const [workDir = '', runDate = ''] = args;
-    const statusFile = safetyPath(workDir, runDate, 'safety-judge_status.txt');
-    const stampFile = safetyPath(workDir, runDate, 'safety-judge_stamp.json');
-    timed(workDir, 'safety-judge', () => {
-        const request = readJson(safetyPath(workDir, runDate, 'safety-review_request.json'));
-        const report = readJson(safetyPath(workDir, runDate, 'safety-review_report.json'));
-        const verdict = readJson(safetyPath(workDir, runDate, 'safety-judge_verdict.json'));
-        const platforms = Array.isArray(report?.platforms) ? (report.platforms as Record<string, unknown>[]) : [];
-        const decisions = platforms.map((platform) => platform?.decision);
-        const digest = safetyDigest(workDir, runDate);
-        let status = 'block';
-        let reason = 'verdict PASS on unchanged drafts, no BLOCK/RISK';
-        // A digest-mismatch block means the drafts were deliberately edited (HITL): keep them so
-        // a re-run of safety-prep re-reviews the edited version. Any other block means the
-        // content itself is rejected — quarantine the drafts below.
-        let edited = false;
-        if (request?.digest !== digest) {
-            reason = 'drafts changed after the review was requested';
-            edited = true;
-        } else if (decisions.length === 0 || decisions.some((d) => d !== 'OK' && d !== 'RISK' && d !== 'BLOCK'))
-            reason = 'content-safety report missing or malformed';
-        else if (decisions.includes('BLOCK')) reason = 'content-safety report carries a BLOCK decision';
-        else if (verdict?.verdict !== 'PASS')
-            reason = `content-judge verdict is ${typeof verdict?.verdict === 'string' ? verdict.verdict : 'missing or unreadable'}`;
-        else if (verdict?.confidence !== 'HIGH' && verdict?.confidence !== 'MEDIUM' && verdict?.confidence !== 'LOW')
-            reason = 'content-judge verdict is missing a HIGH/MEDIUM/LOW confidence level';
-        else if (decisions.includes('RISK') || report?.escalate === true) {
-            status = 'escalate';
-            reason = 'RISK decision or escalation — human review required';
-        } else status = 'pass';
-        if (status !== 'block') sted('write', stampFile, () => writeJsonText(stampFile, { digest, status }));
-        if (status === 'block' && !edited) {
-            // A quality block poisons the isFile() draft cache: every same-day retry would
-            // re-fail on unchanged bytes (20261002 dogfood — two judge-fail runs replayed until
-            // the drafts were moved by hand). Quarantine (mv, never rm) so the next run
-            // regenerates from scratch; the 09_* verdict artifacts stay in 24-script for audit.
-            const q = join(workDir, '24-script', `.quarantine-${runDate}-judge-block`);
-            mkdirSync(q, { recursive: true });
-            for (const path of safetyDraftPaths(workDir, runDate)) {
-                if (!isFile(path)) continue;
-                let dest = join(q, basename(path));
-                for (let n = 2; isFile(dest); n += 1) dest = join(q, `${n}-${basename(path)}`);
-                renameSync(path, dest);
-            }
-        }
-        sted('write', statusFile, () => writeRaw(statusFile, status));
-        console.log(`safety: status=${status} (${reason}); routing is transition-owned`);
-    });
-}
-
-function dailyWrapDocs(args: string[]): void {
-    const [workDir = '', runDate = '', voiceProfile = ''] = args;
-    const scriptPath = join(workDir, '24-script', `${runDate}_08_script_voicescript.yaml`);
-    const docsPath = join(workDir, '30-audio', `${runDate}_10_wrap-docs_docs.json`);
-    timed(workDir, 'wrap-docs', () => {
-        // R3 (task 0139): the second validator placement — covers a HITL-edited YAML and the
-        // script-stage cache path, neither of which re-enters dailyScript's fresh-write branch.
-        assertScriptContent(scriptPath);
-        const url = new URL(scriptPath, `file://${process.cwd()}/`);
-        const body = readFileSync(decodeURIComponent(url.pathname), 'utf-8');
-        const profile = voiceProfile || process.env.VOICEBOX_DEFAULT_PROFILE || 'robin-news';
-        const doc = {
-            id: createHash('sha256').update(url.href).digest('hex').slice(0, 16),
-            title: 'Daily AI News VoiceScript',
-            sourceUri: url.href,
-            body,
-            mediaType: 'application/yaml',
-            metadata: { voiceProfile: profile },
-        };
-        sted('write', docsPath, () => writeJsonText(docsPath, [doc]));
-    });
-}
-
-function dailyGenerate(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', transcodeMp3 = '', vdriver = ''] = args;
-    // 20260917 review: the workflow picks a voice driver by short name; both drivers' envs are
-    // passed unconditionally so switching `vdriver` needs no shell changes. Unknown -> fail loud.
-    const VOICE_DRIVERS: Record<string, string> = {
-        ominivoice: 'omni-voice-gen',
-        voicebox: 'voice-gen',
-        gemini: 'gemini-tts',
-    };
-    const voiceGenerator = VOICE_DRIVERS[vdriver];
-    if (!voiceGenerator) {
-        failWith(
-            1,
-            `generate: unknown vdriver '${vdriver}' (expected one of: ${Object.keys(VOICE_DRIVERS).join(', ')})`,
-        );
-    }
-    const docs = join(workDir, '30-audio', `${runDate}_10_wrap-docs_docs.json`);
-    const content = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    timed(workDir, 'generate', () => {
-        if (isFile(content) && metadataOf(readJson(content)).qc !== undefined) {
-            const qc = metadataOf(readJson(content)).qc as Record<string, unknown> | undefined;
-            if (qc?.passed === true) {
-                console.log(`audio cached: ${content} (QC passed)`);
-                return;
-            }
-        }
-        kk(['executor', 'run', voiceGenerator, '--in', docs, '--out', content, ...pluginsArgs(pluginsPath)], {
-            env: { VOICE_GEN_MP3: transcodeMp3 },
-        });
-    });
-}
-
-/**
- * 20260917 review #7: prepend the show's 8s intro sting to the generated audio.
- * `intro_music` empty -> skip. Writes `<stem>.intro.wav` (original render kept), points
- * `audioPath` at the merged file, extends `duration`, marks `introMerged` (idempotent).
- */
-/**
- * Episode duration gate (standing requirement, 20261002): a daily episode must run 15–20 minutes
- * (duration is authoritative; the 8–10-item figure is only an estimate). Reads the final audio
- * content's `metadata.duration` — after the intro sting merged, this is the true episode length —
- * and fails loud outside `[min, max]` seconds-worth of minutes. A missing duration is a failure,
- * not a pass: the gate must never silently let an under-length episode through again.
- */
-function dailyEpisodeDuration(args: string[]): void {
-    const [workDir = '', runDate = '', minArg = '', maxArg = ''] = args;
-    if (!workDir) fail('missing work_dir');
-    if (!runDate) fail('missing run_date');
-    const minMinutes = Number(minArg);
-    const maxMinutes = Number(maxArg);
-    if (!Number.isFinite(minMinutes) || minMinutes <= 0) fail(`invalid min_minutes: ${minArg || '(empty)'}`);
-    if (!Number.isFinite(maxMinutes) || maxMinutes < minMinutes) fail(`invalid max_minutes: ${maxArg || '(empty)'}`);
-    const contentPath = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    if (!isFile(contentPath)) failWith(1, `episode-duration: audio content not found: ${contentPath}`);
-    let raw: unknown;
-    try {
-        const parsed = JSON.parse(readFileSync(contentPath, 'utf-8')) as { metadata?: { duration?: unknown } };
-        raw = parsed.metadata?.duration;
-    } catch (error) {
-        if ((error as { code?: string }).code !== undefined) {
-            sted('read', contentPath, () => readFileSync(contentPath, 'utf-8'));
-        }
-        raw = undefined;
-    }
-    const seconds = typeof raw === 'number' ? raw : typeof raw === 'string' && raw.trim() !== '' ? Number(raw) : NaN;
-    if (!Number.isFinite(seconds) || seconds <= 0) {
-        failWith(1, `episode-duration: audio metadata.duration missing or not a number in ${contentPath}`);
-    }
-    const minutes = seconds / 60;
-    const shown = minutes.toFixed(1);
-    if (minutes < minMinutes) {
-        failWith(
-            1,
-            `episode-duration: episode runs ${shown} min, below the ${minMinutes}–${maxMinutes} min requirement (duration is authoritative). The candidate pool is too thin — deepen per-item treatment or add items; do not ship a short episode silently.`,
-        );
-    }
-    if (minutes > maxMinutes) {
-        failWith(
-            1,
-            `episode-duration: episode runs ${shown} min, above the ${minMinutes}–${maxMinutes} min requirement. Trim items or per-item treatment.`,
-        );
-    }
-    console.log(`episode-duration ok: ${shown} min within ${minMinutes}–${maxMinutes} min`);
-}
-
-function dailyIntro(args: string[]): void {
-    const [workDir = '', runDate = '', introSrc = ''] = args;
-    if (!introSrc || introSrc.trim() === '') {
-        console.log('intro-music: intro_music var empty — skip');
-        return;
-    }
-    const contentPath = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    timed(workDir, 'intro-music', () => {
-        const content = requireJson(contentPath, 'intro-music');
-        const meta = metadataOf(content);
-        if (meta.introMerged === true) {
-            console.log(`intro-music cached: ${contentPath}`);
-            return;
-        }
-        // Merge from the raw lossless render; mp3Path is the derived publish artifact.
-        // Preferring mp3Path here made `<stem>.mp3` the concat input while the output
-        // suffix rewrite (`.wav` -> `.intro.wav`) no longer matched, so ffmpeg saw one
-        // path as both input #1 and output and aborted with "same as Input #1".
-        const candidates = [meta.audioPath, meta.mp3Path].filter(
-            (candidate): candidate is string => typeof candidate === 'string' && candidate !== '',
-        );
-        const rawFile = candidates.find((candidate) => existsSync(resolve(candidate))) ?? candidates[0];
-        if (rawFile === undefined) {
-            failWith(1, 'intro-music: voice content carries no mp3Path/audioPath');
-        }
-        const introPath = resolve(introSrc);
-        if (!existsSync(introPath)) failWith(1, `intro-music: intro file not found: ${introPath}`);
-        const mainPath = resolve(rawFile);
-        if (!existsSync(mainPath)) failWith(1, `intro-music: generated audio not found: ${mainPath}`);
-        const mergedPath = `${mainPath.replace(/\.(wav|mp3)$/i, '')}.intro.wav`;
-        const probe = (file: string, entries: string): string =>
-            spawnSync('ffprobe', [
-                '-v',
-                'error',
-                '-select_streams',
-                'a:0',
-                '-show_entries',
-                entries,
-                '-of',
-                'csv=p=0',
-                file,
-            ])
-                .stdout?.toString()
-                .trim() ?? '';
-        const mainDur = Number.parseFloat(probe(mainPath, 'format=duration'));
-        const introDur = Number.parseFloat(probe(introPath, 'format=duration'));
-        if (!Number.isFinite(mainDur) || !Number.isFinite(introDur)) {
-            failWith(1, `intro-music: ffprobe could not read durations (main=${mainDur} intro=${introDur})`);
-        }
-        const rate = probe(mainPath, 'stream=sample_rate') || '24000'; // match the generated audio's rate; mono s16 both sides
-        const norm = (label: string): string =>
-            `[${label}:a]aresample=${rate},aformat=sample_fmts=s16:channel_layouts=mono[${label}]`;
-        const fc = `${norm('0')};${norm('1')};[0][1]concat=n=2:v=0:a=1[out]`;
-        const conv = spawnSync('ffmpeg', [
-            '-y',
-            '-hide_banner',
-            '-loglevel',
-            'error',
-            '-i',
-            introPath,
-            '-i',
-            mainPath,
-            '-filter_complex',
-            fc,
-            '-map',
-            '[out]',
-            '-c:a',
-            'pcm_s16le',
-            mergedPath,
-        ]);
-        if (conv.status !== 0 || !existsSync(mergedPath)) {
-            failWith(1, `intro-music: ffmpeg concat failed: ${conv.stderr?.toString().trim()}`);
-        }
-        if (meta.mp3Path && typeof meta.mp3Path === 'string') {
-            // transcode_mp3=true: keep the mp3 path honest by re-transcoding the merged wav.
-            const mp3 = spawnSync('ffmpeg', [
-                '-y',
-                '-hide_banner',
-                '-loglevel',
-                'error',
-                '-i',
-                mergedPath,
-                '-codec:a',
-                'libmp3lame',
-                '-qscale:a',
-                '2',
-                resolve(meta.mp3Path),
-            ]);
-            if (mp3.status !== 0) failWith(1, `intro-music: mp3 re-transcode failed: ${mp3.stderr?.toString().trim()}`);
-        }
-        const mergedDur = Number.parseFloat(probe(mergedPath, 'format=duration')) || mainDur + introDur;
-        const updated = {
-            ...content,
-            metadata: {
-                ...meta,
-                audioPath: mergedPath,
-                duration: mergedDur,
-                introMerged: true,
-            },
-        };
-        sted('write', contentPath, () => writeJsonText(contentPath, updated));
-        console.log(
-            `intro-music: merged ${introDur.toFixed(1)}s intro -> ${mergedPath} (${mergedDur.toFixed(1)}s total)`,
-        );
-    });
-}
-
-function dailyQualityReport(args: string[]): void {
-    const [workDir = '', runDate = ''] = args;
-    const content = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    timed(workDir, 'quality-control', () => {
-        const qc = metadataOf(readJson(content)).qc as Record<string, unknown> | undefined;
-        console.log('=== Voice Quality Control Report ===');
-        console.log(`Overall Score: ${qc ? qc.overallScore : 100}/100 | Passed: ${qc ? qc.passed : true}`);
-        const issues = qc?.criticalIssues;
-        if (Array.isArray(issues) && issues.length > 0) {
-            console.warn(`QC Issues:\n${issues.map((issue) => `  - ${issue}`).join('\n')}`);
-        } else {
-            console.log('All audio segments passed quality control checks cleanly.');
-        }
-    });
-}
-
-/**
- * 0171 R3: Apple Podcasts reads the enclosure's ID3 tags, so the published MP3 carries
- * title/artist/album/date. `-c copy` moves the audio frames without a re-encode, and the temp
- * file + rename keeps a failed ffmpeg from truncating the episode in place. An empty value
- * omits that tag rather than failing. The caller runs this after intro-music, whose mp3
- * re-transcode would otherwise strip tags stamped earlier.
- */
-function stampId3Tags(audioFile: string, title: string, runDate: string, artist: string, album: string): void {
+export function stampId3Tags(audioFile: string, title: string, runDate: string, artist: string, album: string): void {
     const tmpFile = `${audioFile}.id3.tmp.mp3`;
     const metadata: string[] = [];
     const addTag = (name: string, value: string): void => {
@@ -1899,169 +1131,7 @@ function stampId3Tags(audioFile: string, title: string, runDate: string, artist:
     sted('rename', audioFile, () => renameSync(tmpFile, audioFile));
 }
 
-function dailyPublishPrep(args: string[]): void {
-    const [workDir = '', runDate = '', artist = '', album = ''] = args;
-    const articlePath = join(workDir, '22-article', `${runDate}_06_article_content.json`);
-    const audioPath = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    const prepPath = join(workDir, '31-publish', `${runDate}_13_publish-prep_content.json`);
-    const coverPath = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
-    timed(workDir, 'publish-prep', () => {
-        const article = requireJson(articlePath, 'publish-prep');
-        const audioMeta = metadataOf(readJson(audioPath));
-        const rawFile = audioMeta.mp3Path ?? audioMeta.audioPath;
-        if (typeof rawFile !== 'string' || rawFile === '') {
-            failWith(1, 'publish-prep: voice content carries no mp3Path/audioPath');
-        }
-        const audioFile = resolve(rawFile);
-        // 0171 R2: publish-prep publishes metadata.mp3Path ?? audioPath, so a WAV here means
-        // transcode_mp3 was turned off — the run would ship an enclosure Apple Podcasts rejects.
-        if (!audioFile.endsWith('.mp3')) {
-            failWith(1, `publish-prep: resolved audio is not an MP3 (transcode_mp3 must be "true"): ${audioFile}`);
-        }
-        stampId3Tags(audioFile, typeof article.title === 'string' ? article.title : '', runDate, artist, album);
-        const resolvedCover = resolve(coverPath);
-        const hasCover = existsSync(resolvedCover);
-        // Daily-show itunes convention: season = year, episode = day-of-year. run_date arrives
-        // dashed (`$(date +%F)`) or digits-only (formatRunDate); map.ts forwards numbers only,
-        // so a malformed run_date omits both tags instead of failing the publish.
-        const digits = runDate.replaceAll(/\D/g, '');
-        const season = Number(digits.slice(0, 4));
-        const month = Number(digits.slice(4, 6));
-        const day = Number(digits.slice(6, 8));
-        const episode =
-            digits.length === 8 && month >= 1 && month <= 12 && day >= 1 && day <= 31
-                ? Math.round((Date.UTC(season, month - 1, day) - Date.UTC(season, 0, 1)) / 86_400_000) + 1
-                : 0;
-        // podcast-pub's documented contract reads metadata.coverImage (map.ts); options.coverPath
-        // alone was silently dropped by the mapper — episodes published without a cover.
-        const merged = {
-            ...article,
-            metadata: {
-                ...metadataOf(article),
-                audioFile,
-                runDate,
-                ...(hasCover ? { coverImage: resolvedCover } : {}),
-                ...(episode > 0 ? { itunes: { season, episode } } : {}),
-            },
-            options: {
-                audioFile,
-                durationSec: audioMeta.duration,
-                coverPath: hasCover ? resolvedCover : undefined,
-            },
-        };
-        // Task 0189 R10: the last program seam before anything is dispatched. No stamp, or a
-        // stamp issued on different bytes (edited after PASS, or an older draft), never publishes.
-        const stamp = readJson(safetyPath(workDir, runDate, 'safety-judge_stamp.json'));
-        if (stamp === null) failWith(1, 'publish-prep: no content-safety verdict stamp for this run — not publishing');
-        if (stamp.digest !== safetyDigest(workDir, runDate)) {
-            failWith(1, 'publish-prep: drafts changed after the content-safety verdict — re-run the review');
-        }
-        sted('write', prepPath, () => writeJsonText(prepPath, merged));
-    });
-}
-
-function dailyPublishSurfdash(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = ''] = args;
-    const prep = join(workDir, '31-publish', `${runDate}_13_publish-prep_content.json`);
-    const result = join(workDir, '31-publish', `${runDate}_14_publish-surfdash_result.json`);
-    timed(workDir, 'publish-surfdash', () => {
-        if (targetPublished(result, 'surfdash-pub')) {
-            console.log(`publish-surfdash cached: surfdash target ok in ${result}`);
-            return;
-        }
-        kk(
-            [
-                'executor',
-                'fan-out',
-                '--content',
-                prep,
-                '--target',
-                'surfdash-pub',
-                '--out',
-                result,
-                ...pluginsArgs(pluginsPath),
-            ],
-            {
-                unset: NESTED_SPUR_UNSET,
-                soft: true,
-            },
-        );
-        console.log('publish-surfdash: surfdash target dispatched; classification happens after podcast publish');
-    });
-}
-
-function dailyShowNotes(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', title = ''] = args;
-    const article = join(workDir, '22-article', `${runDate}_06_article_content.json`);
-    // The preceding `publish-surfdash` state writes this artifact; `_17_publish_result.json` does
-    // not exist yet at `show-notes` time (the later `publish` state merges it), so reading it left
-    // PODCAST_PUB_ARTICLE_POST_PATH permanently empty (task 0137).
-    const result = join(workDir, '31-publish', `${runDate}_14_publish-surfdash_result.json`);
-    const out = join(workDir, '31-publish', `${runDate}_15_show-notes_show-notes.md`);
-    const plan = join(workDir, '21-plan', `${runDate}_03_plan_plan.json`);
-    // Generated-episode content carries `metadata.segments[]` — the source of real
-    // audio offsets for the show-notes timeline (jump-to-item timestamps).
-    const audioContent = join(workDir, '30-audio', `${runDate}_11_generate_content.json`);
-    timed(workDir, 'show-notes', () => {
-        const effective = readJson(article)?.title;
-        const titleArg = title !== '' ? title : typeof effective === 'string' ? effective : '';
-        // Boundary-excluded docs must not render into show notes (judge finding 2026-10-02): the
-        // article body's 未写入 note names the dropped ids; filter the plan copy podcast-pub sees.
-        // Inlined parse — this file must not import @gobing-ai/* (header contract); the same note
-        // grammar lives in daily-article-gen's excludedIdsFromNote.
-        const postPath = firstPostPath(readJson(result), 'surfdash-pub');
-        const articleBody = readJson(article)?.body;
-        const excluded = new Set<string>();
-        if (typeof articleBody === 'string') {
-            for (const note of articleBody.matchAll(/未写入[：:](.*)/g)) {
-                for (const id of note[1].matchAll(/(?:[a-zA-Z0-9_-]+:)?[0-9a-f]{16}/g)) {
-                    excluded.add(id[0]);
-                    const colon = id[0].indexOf(':');
-                    if (colon !== -1) excluded.add(id[0].slice(colon + 1));
-                }
-            }
-        }
-        let planIn = plan;
-        if (excluded.size > 0) {
-            const parsed: unknown = readJson(plan);
-            if (Array.isArray(parsed)) {
-                const kept = parsed.filter(
-                    (d) =>
-                        !(
-                            d !== null &&
-                            typeof d === 'object' &&
-                            (excluded.has(String((d as Record<string, unknown>).id)) ||
-                                (String((d as Record<string, unknown>).id).includes(':') &&
-                                    excluded.has(
-                                        String((d as Record<string, unknown>).id).slice(
-                                            String((d as Record<string, unknown>).id).indexOf(':') + 1,
-                                        ),
-                                    )))
-                        ),
-                );
-                if (kept.length !== parsed.length) {
-                    planIn = plan.replace(/\.json$/, '-shownotes.json');
-                    writeJsonText(planIn, kept);
-                }
-            }
-        }
-        kk(['executor', 'run', 'podcast-pub', '--in', planIn, '--out', out, ...pluginsArgs(pluginsPath)], {
-            env: {
-                PODCAST_PUB_TITLE: titleArg,
-                PODCAST_PUB_RUN_DATE: runDate,
-                PODCAST_PUB_BRIEF_MODE: 'true',
-                PODCAST_PUB_ARTICLE_POST_PATH: postPath,
-                // Task 0189 R1 / Apple §1.11: AI-voice disclosure in the episode metadata, not only
-                // in the audio sign-off and the article footer.
-                PODCAST_PUB_FOOTER_NOTE: '本期文字由 AI 辅助整理，音频为 AI 合成配音。',
-                ...(isFile(audioContent) ? { PODCAST_PUB_AUDIO_CONTENT: audioContent } : {}),
-            },
-        });
-    });
-}
-
-/** `jq -r '[…select(.target == t and .ok == true) | .metadata.postPath // empty] | first // ""'`. */
-function firstPostPath(parsed: Record<string, unknown> | null, target: string): string {
+export function firstPostPath(parsed: Record<string, unknown> | null, target: string): string {
     const targets = parsed?.targets;
     if (!Array.isArray(targets)) return '';
     for (const entry of targets) {
@@ -2074,48 +1144,6 @@ function firstPostPath(parsed: Record<string, unknown> | null, target: string):
     return '';
 }
 
-function dailyPublishPodcast(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = ''] = args;
-    const prep = join(workDir, '31-publish', `${runDate}_13_publish-prep_content.json`);
-    const notes = join(workDir, '31-publish', `${runDate}_15_show-notes_show-notes.md`);
-    const result = join(workDir, '31-publish', `${runDate}_16_publish-podcast_result.json`);
-    timed(workDir, 'publish-podcast', () => {
-        if (targetPublished(result, 'podcast-pub')) {
-            console.log(`publish-podcast cached: podcast target ok in ${result}`);
-            return;
-        }
-        try {
-            const content = requireJson(prep, 'publish-podcast');
-            const showNotes = readFileSync(notes, 'utf-8');
-            const merged = { ...content, metadata: { ...metadataOf(content), showNotes } };
-            sted('write', prep, () => writeJsonText(prep, merged));
-            kk(
-                [
-                    'executor',
-                    'fan-out',
-                    '--content',
-                    prep,
-                    '--target',
-                    'podcast-pub',
-                    '--out',
-                    result,
-                    ...pluginsArgs(pluginsPath),
-                ],
-                {
-                    unset: ['SPUR_WORKFLOW_RUN_ACTIVE'],
-                    soft: true,
-                },
-            );
-        } catch (error) {
-            // The shell's `… && … || true` swallowed both steps' failures — but an unusable `kk`
-            // (exit 127) is an environment failure, not a tolerated plugin failure.
-            if (error instanceof StageFailure && error.status === 127) throw error;
-            console.error((error as Error).message);
-        }
-        console.log('publish-podcast: podcast target dispatched');
-    });
-}
-
 function dailyPublishClassify(args: string[]): void {
     const [workDir = '', runDate = ''] = args;
     const result = join(workDir, '31-publish', `${runDate}_17_publish_result.json`);
@@ -2134,11 +1162,27 @@ function dailyPublishClassify(args: string[]): void {
         const status = okCount > 0 && okCount === total ? 'full' : okCount > 0 ? 'partial' : 'none';
         sted('write', result, () => writeJqText(result, { ok: okCount === total && total > 0, targets }));
         sted('write', statusFile, () => writeRaw(statusFile, status));
+        // The ledger's Result cell for the legacy `publish` node (task 0212 R1): same target-set
+        // shape the voice2 classify writes to publish-classify.summary.txt, so cutover-check can
+        // compare baseline and candidate ledgers during the cutover window.
+        const summaryFile = join(workDir, 'publish.summary.txt');
+        sted('write', summaryFile, () =>
+            writeRaw(summaryFile, `${JSON.stringify({ status, published: okCount, targets: total })}\n`),
+        );
+        // 0220: completeness moved to terminal daily-publish-completeness stage
+        console.error(`publish: status=${status} (${okCount}/${total} targets published); routing is transition-owned`);
+    });
+}
+
+function dailyPublishCompleteness(args: string[]): void {
+    const [workDir = '', runDate = ''] = args;
+    timed(workDir, 'publish-completeness', () => {
         const completeness = publishCompleteness(workDir, runDate);
         const completenessFile = join(workDir, '31-publish', `${runDate}_17_publish_completeness.json`);
         sted('write', completenessFile, () => writeJqText(completenessFile, { runDate, ...completeness }));
-        console.log(`publish: status=${status} (${okCount}/${total} targets published); routing is transition-owned`);
-        console.log(`publish-completeness: ${completeness.rows.map((row) => `${row.channel}=${row.state}`).join(' ')}`);
+        console.error(
+            `publish-completeness: ${completeness.rows.map((row) => `${row.channel}=${row.state}`).join(' ')}`,
+        );
         if (completeness.missing.length > 0) {
             const details = completeness.rows
                 .filter((row) => row.state !== 'done')
@@ -2174,14 +1218,38 @@ function publishCompleteness(
     const at = (name: string): string => join(workDir, '31-publish', `${runDate}_${name}`);
     const markerFilled = (path: string): boolean => isFile(path) && readFileSync(path, 'utf-8').trim() !== '';
     const rows: { channel: string; state: string; detail: string }[] = [];
-    const localesDone = ['en', 'ja'].every((locale) =>
+    const localesScaffolded = ['en', 'ja'].every((locale) =>
         markerFilled(at(`20_translate-localize_${locale}-post-path.txt`)),
     );
-    rows.push({
-        channel: 'locales',
-        state: localesDone ? 'done' : 'not-run',
-        detail: localesDone ? 'en/ja drafts scaffolded' : 'translate markers absent (en/ja never scaffolded)',
-    });
+    if (!localesScaffolded) {
+        rows.push({
+            channel: 'locales',
+            state: 'not-run',
+            detail: 'translate markers absent (en/ja never scaffolded)',
+        });
+    } else {
+        const syncResultFile = at('24_translate-sync_sync-result.json');
+        const syncResult = isFile(syncResultFile) ? readJson(syncResultFile) : null;
+        if (syncResult === null) {
+            rows.push({
+                channel: 'locales',
+                state: 'not-run',
+                detail: 'en/ja scaffolded, never synced',
+            });
+        } else if (syncResult.ok === true) {
+            rows.push({
+                channel: 'locales',
+                state: 'done',
+                detail: 'en/ja drafts scaffolded',
+            });
+        } else {
+            rows.push({
+                channel: 'locales',
+                state: 'failed',
+                detail: String(syncResult.error ?? 'ok=false'),
+            });
+        }
+    }
     const resultChannels: [string, string, string][] = [
         ['xhs', '19_publish-xhs_result.json', ''],
         ['wechat', '20_publish-wechat_result.json', ''],
@@ -2242,7 +1310,7 @@ function dailyPublishPartial(args: string[]): void {
 function dailyPatchSurfdash(args: string[]): void {
     const [workDir = '', runDate = '', surfdashRoot = '', pluginsPath = ''] = args;
     if (!surfdashRoot || !existsSync(surfdashRoot)) {
-        console.log(`patch-surfdash: surfdash root '${surfdashRoot}' not found — skip`);
+        console.error(`patch-surfdash: surfdash root '${surfdashRoot}' not found — skip`);
         return;
     }
     timed(workDir, 'patch-surfdash', () => {
@@ -2294,7 +1362,7 @@ function dailyPatchSurfdash(args: string[]): void {
         ] as const) {
             const indexMd = join(dir, 'index.md');
             if (!existsSync(indexMd)) {
-                console.log(`patch-surfdash: ${locale} post not published (${indexMd}) — skip`);
+                console.error(`patch-surfdash: ${locale} post not published (${indexMd}) — skip`);
                 continue;
             }
             let md = readFileSync(indexMd, 'utf-8');
@@ -2357,7 +1425,7 @@ function dailyPatchSurfdash(args: string[]): void {
             // cover this way). Leave a marker for the classify step's completeness report.
             const skipMarker = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_emdash-resync.txt`);
             sted('write', skipMarker, () => writeRaw(skipMarker, 'skipped: no plugins-path\n'));
-            console.log('patch-surfdash: no plugins-path — skip emdash re-sync');
+            console.error('patch-surfdash: no plugins-path — skip emdash re-sync');
         } else {
             const syncIn = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_sync.json`);
             const syncResult = join(workDir, '31-publish', `${runDate}_23_patch-surfdash_sync-result.json`);
@@ -2374,15 +1442,15 @@ function dailyPatchSurfdash(args: string[]): void {
                 result !== null &&
                 (result.ok === true || (result.targets as Array<{ ok?: boolean }> | undefined)?.[0]?.ok === true);
             if (!ok) {
-                console.log(
+                console.error(
                     `patch-surfdash: WARNING: emdash re-sync failed (exit ${status}) — CMS cards keep the stale cover; fix: kk executor run surfdash-pub --in ${syncIn} --out ${syncResult} --plugins-path ${pluginsPath}`,
                 );
             } else {
-                console.log('patch-surfdash: emdash rows re-synced from patched files');
+                console.error('patch-surfdash: emdash rows re-synced from patched files');
             }
         }
         if (changed === 0) {
-            console.log('patch-surfdash: nothing to change');
+            console.error('patch-surfdash: nothing to change');
             return;
         }
         const git = (...a: string[]): void => {
@@ -2398,7 +1466,7 @@ function dailyPatchSurfdash(args: string[]): void {
             ...written,
         );
         if (process.env.SURFDASH_AUTO_PUSH !== '0') git('push', 'origin', 'main');
-        console.log(
+        console.error(
             `patch-surfdash: patched ${changed} post(s), committed${process.env.SURFDASH_AUTO_PUSH !== '0' ? ' + pushed' : ' (push skipped: SURFDASH_AUTO_PUSH=0)'}`,
         );
     });
@@ -2420,11 +1488,11 @@ function dailyRunReport(args: string[]): void {
     const candidates = join(workDir, '21-plan', `${runDate}_04_quality-control-content_candidates.json`);
     timed(workDir, 'run-report', () => {
         if (isFile(reportMd)) {
-            console.log(`run report cached: ${reportMd}`);
+            console.error(`run report cached: ${reportMd}`);
             return;
         }
         if (!isFile(candidates)) {
-            console.log('run-report: no candidates.json (run ended below plan step) — skip');
+            console.error('run-report: no candidates.json (run ended below plan step) — skip');
             return;
         }
         sted('write', cands, () => writeJqText(cands, metadataOf(readJson(candidates)).docs ?? []));
@@ -2459,92 +1527,7 @@ function dailyRunReport(args: string[]): void {
         const body = readJson(reportJson)?.body;
         if (typeof body !== 'string') failWith(1, `run-report: ${reportJson} has no string body`);
         sted('write', reportMd, () => writeRaw(reportMd, body));
-        console.log(`run report written: ${reportMd}`);
-    });
-}
-
-/**
- * Collapsed translate scaffolding (2026-09-16 feedback): surfdash-pub owns the
- * deterministic mechanics — `scaffold-locale` for both target locales — while the
- * workflow `translate` state's agent step owns the LLM translation of the drafts.
- * Writes one marker file per locale (zh post path + en/ja draft paths); empty
- * marker = locale absent (callers skip). Reuses an existing on-disk draft as the
- * cache across run retries — re-scaffolding would erase the agent's translation.
- */
-function dailyTranslateLocalize(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = ''] = args;
-    const result = join(workDir, '31-publish', `${runDate}_17_publish_result.json`);
-    const zhFile = join(workDir, '31-publish', `${runDate}_20_translate-localize_zh-post-path.txt`);
-    timed(workDir, 'translate-localize', () => {
-        const postPath = firstPostPath(readJson(result), 'surfdash-pub');
-        const zh = postPath.endsWith('index.md') ? postPath : '';
-        sted('write', zhFile, () => writeRaw(zhFile, zh));
-        if (zh === '') {
-            for (const target of ['en', 'ja'] as const) {
-                sted(
-                    'write',
-                    join(workDir, '31-publish', `${runDate}_20_translate-localize_${target}-post-path.txt`),
-                    () =>
-                        writeRaw(
-                            join(workDir, '31-publish', `${runDate}_20_translate-localize_${target}-post-path.txt`),
-                            '',
-                        ),
-                );
-            }
-            console.log('no zh post path — skip localize');
-            return;
-        }
-        for (const target of ['en', 'ja'] as const) {
-            const markerFile = join(workDir, '31-publish', `${runDate}_20_translate-localize_${target}-post-path.txt`);
-            const existing = zh.replace('/zh/', `/${target}/`);
-            if (isFile(existing)) {
-                sted('write', markerFile, () => writeRaw(markerFile, existing));
-                console.log(`${target} draft cached: ${existing}`);
-                continue;
-            }
-            const scaffold = join(workDir, '31-publish', `${runDate}_20_translate-localize_scaffold-${target}.json`);
-            const scaffoldResult = join(
-                workDir,
-                '31-publish',
-                `${runDate}_20_translate-localize_scaffold-${target}-result.json`,
-            );
-            sted('write', scaffold, () =>
-                writeJqText(scaffold, { body: '', options: { operation: 'scaffold-locale', postPath: zh, target } }),
-            );
-            kk([
-                'executor',
-                'run',
-                'surfdash-pub',
-                '--in',
-                scaffold,
-                '--out',
-                scaffoldResult,
-                ...pluginsArgs(pluginsPath),
-            ]);
-            const draftPath = metadataOf(readJson(scaffoldResult)).draftPath;
-            sted('write', markerFile, () => writeRaw(markerFile, typeof draftPath === 'string' ? draftPath : ''));
-        }
-    });
-}
-
-function dailyTranslateSync(args: string[]): void {
-    const [workDir = '', runDate = '', pluginsPath = '', zhPathFile = ''] = args;
-    const sync = join(workDir, '31-publish', `${runDate}_24_translate-sync_sync.json`);
-    const syncResult = join(workDir, '31-publish', `${runDate}_24_translate-sync_sync-result.json`);
-    timed(workDir, 'translate-sync', () => {
-        // Reads the marker file itself — the collapsed `translate` state has no
-        // cross-state var to hand the path through.
-        const zhPostPath = isFile(zhPathFile) ? readFileSync(zhPathFile, 'utf-8') : '';
-        if (zhPostPath === '') {
-            console.log('no zh post path — skip translate-sync');
-            return;
-        }
-        sted('write', sync, () =>
-            writeJqText(sync, { body: '', options: { operation: 'sync', postPath: zhPostPath } }),
-        );
-        kk(['executor', 'run', 'surfdash-pub', '--in', sync, '--out', syncResult, ...pluginsArgs(pluginsPath)], {
-            unset: NESTED_SPUR_UNSET,
-        });
+        console.error(`run report written: ${reportMd}`);
     });
 }
 
@@ -2610,72 +1593,125 @@ if (import.meta.main)
         case 'daily-collect-facts':
             dailyCollectFacts(rest);
             break;
-        case 'daily-plan':
+        case 'collect-prepare':
+            collectPrepare(rest);
+            break;
+        case 'daily-plan': {
+            const { dailyPlan } = await loadDailyStages();
             dailyPlan(rest);
             break;
-        case 'daily-qc-content':
+        }
+        case 'daily-qc-content': {
+            const { dailyQcContent } = await loadDailyStages();
             dailyQcContent(rest);
             break;
-        case 'daily-article':
+        }
+        case 'daily-article': {
+            const { dailyArticle } = await loadDailyStages();
             dailyArticle(rest);
             break;
-        case 'daily-cover':
+        }
+        case 'daily-cover': {
+            const { dailyCover } = await loadDailyStages();
             dailyCover(rest);
             break;
-        case 'daily-cover-normalize':
+        }
+        case 'daily-cover-normalize': {
+            const { dailyCoverNormalize } = await loadDailyStages();
             dailyCoverNormalize(rest);
             break;
-        case 'daily-xhs-render':
+        }
+        case 'daily-xhs-render': {
+            const { dailyXhsRender } = await loadDailyStages();
             dailyXhsRender(rest);
             break;
-        case 'daily-script-style':
+        }
+        case 'daily-script-style': {
+            const { dailyScriptStyle } = await loadDailyStages();
             dailyScriptStyle(rest);
             break;
-        case 'daily-script':
+        }
+        case 'daily-script': {
+            const { dailyScript } = await loadDailyStages();
             dailyScript(rest);
             break;
-        case 'daily-safety-prep':
+        }
+        case 'daily-safety-prep': {
+            const { dailySafetyPrep } = await loadDailyStages();
             dailySafetyPrep(rest);
             break;
-        case 'daily-safety-gate':
+        }
+        case 'daily-safety-gate': {
+            const { dailySafetyGate } = await loadDailyStages();
             dailySafetyGate(rest);
             break;
-        case 'daily-wrap-docs':
+        }
+        case 'daily-safety-revise': {
+            const { dailySafetyRevise } = await loadDailyStages();
+            dailySafetyRevise(rest);
+            break;
+        }
+        case 'daily-wrap-docs': {
+            const { dailyWrapDocs } = await loadDailyStages();
             dailyWrapDocs(rest);
             break;
-        case 'daily-generate':
+        }
+        case 'daily-generate': {
+            const { dailyGenerate } = await loadDailyStages();
             dailyGenerate(rest);
             break;
-        case 'daily-intro':
+        }
+        case 'daily-intro': {
+            const { dailyIntro } = await loadDailyStages();
             dailyIntro(rest);
             break;
-        case 'daily-episode-duration':
+        }
+        case 'daily-episode-duration': {
+            const { dailyEpisodeDuration } = await loadDailyStages();
             dailyEpisodeDuration(rest);
             break;
-        case 'daily-quality-report':
+        }
+        case 'daily-quality-report': {
+            const { dailyQualityReport } = await loadDailyStages();
             dailyQualityReport(rest);
             break;
-        case 'daily-publish-prep':
+        }
+        case 'daily-publish-prep': {
+            const { dailyPublishPrep } = await loadDailyStages();
             dailyPublishPrep(rest);
             break;
-        case 'daily-publish-surfdash':
+        }
+        case 'daily-publish-surfdash': {
+            const { dailyPublishSurfdash } = await loadDailyStages();
             dailyPublishSurfdash(rest);
             break;
-        case 'daily-show-notes':
+        }
+        case 'daily-show-notes': {
+            const { dailyShowNotes } = await loadDailyStages();
             dailyShowNotes(rest);
             break;
-        case 'daily-publish-podcast':
+        }
+        case 'daily-publish-podcast': {
+            const { dailyPublishPodcast } = await loadDailyStages();
             dailyPublishPodcast(rest);
             break;
-        case 'daily-publish-xhs':
+        }
+        case 'daily-publish-xhs': {
+            const { dailyPublishXhs } = await loadDailyStages();
             dailyPublishXhs(rest);
             break;
-        case 'daily-publish-wechat':
+        }
+        case 'daily-publish-wechat': {
+            const { dailyPublishWechat } = await loadDailyStages();
             dailyPublishWechat(rest);
             break;
+        }
         case 'daily-publish-classify':
             dailyPublishClassify(rest);
             break;
+        case 'daily-publish-completeness':
+            dailyPublishCompleteness(rest);
+            break;
         case 'daily-patch-surfdash':
             dailyPatchSurfdash(rest);
             break;
@@ -2685,12 +1721,16 @@ if (import.meta.main)
         case 'daily-run-report':
             dailyRunReport(rest);
             break;
-        case 'daily-translate-localize':
+        case 'daily-translate-localize': {
+            const { dailyTranslateLocalize } = await loadDailyStages();
             dailyTranslateLocalize(rest);
             break;
-        case 'daily-translate-sync':
+        }
+        case 'daily-translate-sync': {
+            const { dailyTranslateSync } = await loadDailyStages();
             dailyTranslateSync(rest);
             break;
+        }
         case 'itc-outline-pick': {
             const { itcOutlinePick } = await loadItcStages();
             itcOutlinePick(rest);