@gobing-ai/knowledge-kit 0.1.10 → 0.1.12

package/plugins/publishings/wechatmp-pub/src/index.ts

@@ -1,3 +1,4 @@
+import { randomUUID } from 'node:crypto';
 import { parseArgs } from 'node:util';
 import { type Content, ContentSchema, type Result, ResultSchema } from '@gobing-ai/kk-core';
 import {
@@ -6,7 +7,7 @@ import {
     type PublishTransportPayload,
     resolveBrowserProfileDir,
 } from '@gobing-ai/publish-harness';
-import { kkBrowserLauncher, waitUntil } from '@gobing-ai/publish-harness/browser';
+import { chmod, createExclusiveFile, kkBrowserLauncher, waitUntil } from '@gobing-ai/publish-harness/browser';
 import { BrowserProfileMissingError, openPersistentBrowser } from '@gobing-ai/ts-browser-automation';
 import { createNodeFileSystem } from '@gobing-ai/ts-runtime';
 import { echoError } from '@gobing-ai/ts-utils';
@@ -21,7 +22,14 @@ import {
     validateModeInput,
     WECHATMP_OPERATIONS,
 } from './modes';
-import { type OpenConsole, type OpenedConsole, POLL_MS, STEP_TIMEOUT_MS, wrapPlaywrightContext } from './page';
+import {
+    type OpenConsole,
+    type OpenedConsole,
+    POLL_MS,
+    STEP_TIMEOUT_MS,
+    sanitizeSessionEvidence,
+    wrapPlaywrightContext,
+} from './page';
 
 /**
  * The wechatmp publish CHANNEL (ADR-029, ADR-026): one plugin, four mode `operations`.
@@ -49,7 +57,7 @@ const DRAFT_SIGNAL_TIMEOUT_MS = 15_000;
 const SUBMIT_ATTEMPTS = 2;
 
 function fail(error: string): Result {
-    return ResultSchema.parse({ ok: false, target: TARGET, error });
+    return ResultSchema.parse({ ok: false, target: TARGET, error: sanitizeSessionEvidence(error) });
 }
 
 /** Console home readiness: an authenticated route carries the session token (discovery §1/§9-W9). */
@@ -74,6 +82,35 @@ export function storageStatePath(profileDir: string): string {
     return `${profileDir}/storage-state.json`;
 }
 
+/**
+ * Persist a positively authenticated browser state without exposing a partially-written state
+ * file to the next launch. The temporary file stays beside the target so the final rename is
+ * atomic on the profile filesystem; cleanup is deliberately best-effort and never masks the
+ * storageState/rename error.
+ */
+export async function persistWechatSessionState(
+    context: { storageState(options: { path: string }): Promise<unknown> },
+    profileDir: string,
+): Promise<void> {
+    const target = storageStatePath(profileDir);
+    const temporary = `${target}.${process.pid}.${randomUUID()}.tmp`;
+    const fs = createNodeFileSystem();
+    let reserved = false;
+    try {
+        createExclusiveFile(temporary);
+        reserved = true;
+        await context.storageState({ path: temporary });
+        chmod(temporary, 0o600);
+        await fs.rename(temporary, target);
+    } finally {
+        if (reserved) {
+            await Promise.resolve()
+                .then(() => fs.deleteFile(temporary))
+                .catch(() => undefined);
+        }
+    }
+}
+
 /** Headless session preflight: throws (incl. BrowserProfileMissingError) when the profile cannot drive the console.
  * 0216: `headless: false` probes headed only and `timeoutMs` overrides the ready deadline. */
 export async function checkWechatSession(
@@ -110,6 +147,8 @@ export async function openWechatLogin(opts: { profileDir: string; timeoutMs?: nu
         headless: false,
         launcher: kkBrowserLauncher,
     });
+    let failed = false;
+    let failure: unknown;
     try {
         const page = context.pages()[0] ?? (await context.newPage());
         await page.goto(CONSOLE_URL);
@@ -120,10 +159,29 @@ export async function openWechatLogin(opts: { profileDir: string; timeoutMs?: nu
         );
         if (!ready) throw new Error(`QR scan not completed within ${timeoutMs / 1000}s`);
         await page.waitForTimeout(10_000); // settle: let the console finish its post-auth Set-Cookies
-        await context.storageState({ path: storageStatePath(opts.profileDir) });
-    } finally {
+        try {
+            await persistWechatSessionState(context, opts.profileDir);
+        } catch {
+            // Storage-state errors can contain cookie values. Keep the profile-check surface
+            // actionable without relaying an exception that may include session material.
+            throw new Error('wechatmp authenticated session snapshot failed');
+        }
+    } catch (error: unknown) {
+        failed = true;
+        failure = error;
+    }
+    try {
         await context.close();
+    } catch {
+        // A successful atomic snapshot is already durable; a close failure must not turn it into
+        // a retryable login. Keep the diagnostic generic because browser errors may contain session
+        // material, and never replace an authentication or snapshot failure with shutdown noise.
+        if (!failed)
+            echoError(
+                'wechatmp browser context close failed after authenticated session snapshot; saved state preserved',
+            );
     }
+    if (failed) throw failure;
 }
 
 /**
@@ -201,7 +259,10 @@ async function openWithState(
  */
 async function defaultOpenConsole(profileDir: string): Promise<OpenedConsole> {
     const { page, context } = await openWithState(profileDir, true);
-    return wrapPlaywrightContext(context, page);
+    return {
+        ...wrapPlaywrightContext(context, page),
+        persistSession: () => persistWechatSessionState(context, profileDir),
+    };
 }
 
 type BrowserDriverName = 'script' | 'agent';
@@ -291,42 +352,63 @@ export class WechatmpBrowserTransport implements PublishTransport {
         } catch (error: unknown) {
             return fail(error instanceof Error ? error.message : String(error));
         }
+        let result: Result;
         try {
             const ready = await waitUntil(
                 () => Promise.resolve(isConsoleReady(opened.page)),
                 this.consoleReadyTimeoutMs,
             );
             if (!ready) {
-                return fail(
+                result = fail(
                     `no authenticated ${TARGET} console within ${this.consoleReadyTimeoutMs}ms — the preflight passed but the console did not report a session route (profile ${profileDir})`,
                 );
-            }
-            // The 草稿箱 baseline is read before the editor opens: MP auto-saves continuously, so a
-            // row that already carried a stamp says nothing about this run's save (discovery §5.1).
-            const title = typeof content.title === 'string' ? content.title.trim() : '';
-            const draftBaseline =
-                publishStatus === 'draft' ? await readDraftBaseline(opened.page, title) : { stamp: null };
+            } else {
+                // The 草稿箱 baseline is read before the editor opens: MP auto-saves continuously, so a
+                // row that already carried a stamp says nothing about this run's save (discovery §5.1).
+                const title = typeof content.title === 'string' ? content.title.trim() : '';
+                const draftBaseline =
+                    publishStatus === 'draft' ? await readDraftBaseline(opened.page, title) : { stamp: null };
 
-            return await runMode(validation.input, {
-                entry: opened.page,
-                pages: opened.pages,
-                newPage: opened.newPage,
-                content,
-                publishStatus,
-                profileDir,
-                driver: this.driver,
-                stepTimeoutMs: this.stepTimeoutMs,
-                pollMs: this.pollMs,
-                submitSettleMs: this.submitSettleMs,
-                draftTimeoutMs: this.draftTimeoutMs,
-                submitAttempts: this.submitAttempts,
-                draftBaseline,
-            });
+                result = await runMode(validation.input, {
+                    entry: opened.page,
+                    pages: opened.pages,
+                    newPage: opened.newPage,
+                    content,
+                    publishStatus,
+                    profileDir,
+                    driver: this.driver,
+                    stepTimeoutMs: this.stepTimeoutMs,
+                    pollMs: this.pollMs,
+                    submitSettleMs: this.submitSettleMs,
+                    draftTimeoutMs: this.draftTimeoutMs,
+                    submitAttempts: this.submitAttempts,
+                    draftBaseline,
+                });
+            }
         } catch (error: unknown) {
-            return fail(error instanceof Error ? error.message : String(error));
+            result = fail(error instanceof Error ? error.message : String(error));
         } finally {
-            await opened.close();
+            if (opened.persistSession !== undefined) {
+                try {
+                    // A positive authenticated route is the only evidence that rotating state is
+                    // safe to persist. Read-only preflight uses openWithState directly and never
+                    // receives this callback.
+                    if (isConsoleReady(opened.page)) await opened.persistSession();
+                } catch {
+                    // Storage-state errors can contain cookie values; the publication result is
+                    // already determined and must survive this best-effort session refresh.
+                    echoError('wechatmp-pub: authenticated session snapshot failed; publication result preserved');
+                }
+            }
+            try {
+                await opened.close();
+            } catch {
+                // Context shutdown is not publication evidence. Never turn an already determined
+                // Result into a retryable throw, and never relay browser diagnostics verbatim.
+                echoError('wechatmp-pub: browser context close failed; publication result preserved');
+            }
         }
+        return result;
     }
 }
 

package/plugins/publishings/wechatmp-pub/src/page.ts

@@ -1,5 +1,6 @@
 import { trySelectors } from '@gobing-ai/publish-harness';
 import { waitUntil } from '@gobing-ai/publish-harness/browser';
+import type { Page, Request } from 'playwright';
 
 /**
  * The console's page seam (ADR-029) and the probes every wechatmp operation shares.
@@ -17,6 +18,11 @@ import { waitUntil } from '@gobing-ai/publish-harness/browser';
 export const POLL_MS = 500;
 export const STEP_TIMEOUT_MS = 30_000;
 
+/** Browser evidence may retain navigation context, but never its session query credentials. */
+export function sanitizeSessionEvidence(value: string): string {
+    return value.replace(/([?&](?:token|ticket|authkey)=)[^&\s"'<>)]*/gi, '$1[REDACTED]');
+}
+
 /** The playwright-shaped locator surface the flows and the shared helpers read. */
 export interface WechatLocator {
     count(): Promise<number>;
@@ -36,6 +42,8 @@ export interface WechatLocator {
 }
 
 export interface WechatPage {
+    /** Click the native article save and await its successful, fully received acknowledgement. */
+    saveDraftAndWait?(selector: string, timeoutMs: number): Promise<void>;
     goto(url: string, options?: { timeout?: number }): Promise<void>;
     locator(selector: string): { first(): WechatLocator; count(): Promise<number> };
     setInputFiles(selector: string, paths: readonly string[] | string): Promise<void>;
@@ -63,6 +71,8 @@ export interface OpenedConsole {
     pages(): WechatPage[];
     /** Opens an extra tab; the token-derived editor fallback uses it so the home stays readable. */
     newPage(): Promise<WechatPage>;
+    /** Best-effort authenticated state snapshot owned by the launcher; absent for read-only seams. */
+    persistSession?: () => Promise<void>;
     close(): Promise<void>;
 }
 
@@ -213,9 +223,104 @@ interface RawFrame {
     locator(selector: string): { count(): Promise<number> };
 }
 
+/** Match a new full-article save, excluding reads and other operations at the shared endpoint. */
+function isArticleSave(request: Request, origin: string): boolean {
+    if (request.method() !== 'POST') return false;
+    const url = new URL(request.url());
+    if (url.origin !== origin || url.pathname !== '/cgi-bin/operate_appmsg') return false;
+    if (!['create', 'update', 'edit'].includes(url.searchParams.get('sub') ?? '')) return false;
+    const data = request.postData() ?? '';
+    const form = new URLSearchParams(data);
+    return (
+        (form.has('content0') && form.has('title0')) ||
+        (data.includes('name="content0"') && data.includes('name="title0"'))
+    );
+}
+
+function saveResponseSucceeded(value: unknown): boolean {
+    if (value === null || typeof value !== 'object' || Array.isArray(value)) return false;
+    const body = value as Record<string, unknown>;
+    const base =
+        body.base_resp !== null && typeof body.base_resp === 'object'
+            ? (body.base_resp as Record<string, unknown>)
+            : {};
+    const codes = [body.ret, body.errcode, base.ret].filter((code) => code !== undefined);
+    // The live editor returns top-level ret as "0" alongside numeric base_resp.ret.
+    if (codes.some((code) => code !== 0 && code !== '0')) return false;
+    if (codes.length > 0) return true;
+    const info =
+        body.appMsgInfo !== null && typeof body.appMsgInfo === 'object'
+            ? (body.appMsgInfo as Record<string, unknown>)
+            : body;
+    return typeof info.appMsgId === 'string' || typeof info.appMsgId === 'number'
+        ? /^\d{1,12}$/.test(String(info.appMsgId))
+        : false;
+}
+
+/** Observe the native request before clicking; neither response headers nor a URL change is completion. */
+async function saveNativeDraft(raw: Page, selector: string, timeoutMs: number): Promise<void> {
+    const origin = new URL(raw.url()).origin;
+    const marker = `__kkNativeSave_${crypto.randomUUID()}`;
+    const button = raw.locator(selector).first();
+    await button.evaluate((element, key) => {
+        const state = { clickedAt: 0 };
+        const handler = () => {
+            state.clickedAt = Date.now();
+        };
+        (globalThis as unknown as Record<string, unknown>)[key] = { state, element, handler };
+        element.addEventListener('click', handler, { capture: true, once: true });
+    }, marker);
+    let deadline: ReturnType<typeof setTimeout> | undefined;
+    const responseComplete = raw
+        .waitForRequest(
+            async (request) => {
+                if (!isArticleSave(request, origin)) return false;
+                const clickedAt = await raw
+                    .evaluate(`globalThis[${JSON.stringify(marker)}]?.state?.clickedAt ?? 0`)
+                    .catch(() => 0);
+                if (typeof clickedAt !== 'number' || clickedAt <= 0) return false;
+                // Playwright populates request timing when response headers arrive; before that
+                // the live Chrome request reports startTime=0. Keep the click stamp across navigation.
+                if (!(await request.response())) return false;
+                return request.timing().startTime >= clickedAt;
+            },
+            { timeout: timeoutMs },
+        )
+        .then(async (request) => {
+            const response = await request.response();
+            if (response === null || response.status() < 200 || response.status() >= 300)
+                throw new Error('HTTP refusal');
+            if (await response.finished()) throw new Error('Incomplete response');
+            if (!saveResponseSucceeded(await response.json())) throw new Error('Save refused');
+        });
+    try {
+        await Promise.race([
+            Promise.all([responseComplete, button.click({ timeout: timeoutMs })]),
+            new Promise<never>((_resolve, reject) => {
+                deadline = setTimeout(() => reject(new Error('Save timeout')), timeoutMs);
+            }),
+        ]);
+    } catch {
+        // Playwright errors and server bodies may contain session URLs; retain no vendor payload.
+        throw new Error('Native article save was not acknowledged successfully before the deadline');
+    } finally {
+        if (deadline !== undefined) clearTimeout(deadline);
+        await raw
+            .evaluate(`(() => {
+                const key = ${JSON.stringify(marker)};
+                const records = globalThis;
+                const value = records[key];
+                if (value?.element && value.handler) value.element.removeEventListener('click', value.handler, true);
+                delete records[key];
+            })()`)
+            .catch(() => undefined);
+    }
+}
+
 export function wrapPlaywrightPage(raw: unknown): WechatPage {
     const pw = raw as PlaywrightLike;
     return {
+        saveDraftAndWait: (selector, timeoutMs) => saveNativeDraft(raw as Page, selector, timeoutMs),
         goto: (url, options) => pw.goto(url, { waitUntil: 'domcontentloaded', ...options }).then(() => undefined),
         locator: (selector) => ({
             count: () => pw.locator(selector).count(),

package/plugins/publishings/weibo-pub/dist/index.js

@@ -20458,9 +20458,11 @@ import { isAbsolute, join as join4, relative, resolve as resolve4, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20705,7 +20707,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/profile-dir.ts
 import { mkdir as mkdir2, stat } from "fs/promises";
 async function ensureProfileDir2(profileDir, headless) {

package/plugins/publishings/weibo-pub/dist/profile-check.js

@@ -20119,9 +20119,11 @@ import { isAbsolute, join as join3, relative, resolve as resolve3, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20373,7 +20375,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/index.ts
 import { homedir as homedir4 } from "os";
 import { join as join4, resolve as resolve4 } from "path";

package/plugins/publishings/x-pub/dist/index.js

@@ -20483,9 +20483,11 @@ import { isAbsolute, join as join4, relative, resolve as resolve4, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20730,7 +20732,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/profile-dir.ts
 import { mkdir as mkdir2, stat } from "fs/promises";
 async function ensureProfileDir2(profileDir, headless) {
@@ -21007,6 +21008,13 @@ function resolveOperation(options, content) {
 class XPostApiTransport {
   kind = "file-cli";
   async publish(payload) {
+    const requestedStatus = payload.content.metadata?.publishStatus;
+    if (requestedStatus === "draft") {
+      return fail("x post has no draft: the post API publishes immediately \u2014 plan this target dummy/off or launch it live");
+    }
+    if (requestedStatus !== undefined && requestedStatus !== "public") {
+      return fail(`unknown publishStatus '${String(requestedStatus)}' (expected absent, 'draft' or 'public')`);
+    }
     const missing = TOKEN_ENVS.filter((key) => {
       const value = process.env[key];
       return !value || value.trim().length === 0;

package/plugins/publishings/x-pub/dist/profile-check.js

@@ -20119,9 +20119,11 @@ import { isAbsolute, join as join3, relative, resolve as resolve3, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20373,7 +20375,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/index.ts
 import { homedir as homedir4 } from "os";
 import { join as join4, resolve as resolve4 } from "path";

package/plugins/publishings/x-pub/src/index.ts

@@ -105,6 +105,17 @@ export class XPostApiTransport implements PublishTransport {
     public readonly kind = 'file-cli';
 
     public async publish(payload: PublishTransportPayload): Promise<Result> {
+        // 0330 R2: the post API publishes immediately — there is no draft. Intercept before the
+        // credential lookup so a planned draft never touches X, and fail closed on unknown modes.
+        const requestedStatus = payload.content.metadata?.publishStatus;
+        if (requestedStatus === 'draft') {
+            return fail(
+                'x post has no draft: the post API publishes immediately — plan this target dummy/off or launch it live',
+            );
+        }
+        if (requestedStatus !== undefined && requestedStatus !== 'public') {
+            return fail(`unknown publishStatus '${String(requestedStatus)}' (expected absent, 'draft' or 'public')`);
+        }
         const missing = TOKEN_ENVS.filter((key) => {
             const value = process.env[key];
             return !value || value.trim().length === 0;

package/plugins/publishings/xhs-pub/dist/index.js

@@ -20458,9 +20458,11 @@ import { isAbsolute, join as join4, relative, resolve as resolve4, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20705,7 +20707,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/profile-dir.ts
 import { mkdir as mkdir2, stat } from "fs/promises";
 async function ensureProfileDir2(profileDir, headless) {

package/plugins/publishings/xhs-pub/dist/profile-check.js

@@ -20127,9 +20127,11 @@ import { isAbsolute, join as join3, relative, resolve as resolve3, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20374,7 +20376,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/index.ts
 import { homedir as homedir4 } from "os";
 import { join as join4, resolve as resolve4 } from "path";

package/plugins/publishings/xiaoyuzhou-pub/dist/index.js

@@ -20464,9 +20464,11 @@ import { isAbsolute, join as join4, relative, resolve as resolve4, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20711,7 +20713,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/profile-dir.ts
 import { mkdir as mkdir2, stat } from "fs/promises";
 async function ensureProfileDir2(profileDir, headless) {

package/plugins/publishings/xiaoyuzhou-pub/dist/profile-check.js

@@ -19847,9 +19847,11 @@ import { isAbsolute, join as join3, relative, resolve as resolve3, sep } from "p
 // ../../packages/publish-harness/src/bot-fs.ts
 import {
   chmodSync,
+  closeSync,
   copyFileSync,
   lstatSync,
   mkdirSync as mkdirSync2,
+  openSync,
   readdirSync as readdirSync2,
   realpathSync as realpathSync2,
   rmdirSync
@@ -20101,7 +20103,6 @@ class BotError extends Error {
     this.code = code;
   }
 }
-
 // ../../packages/publish-harness/src/index.ts
 import { homedir as homedir4 } from "os";
 import { join as join4, resolve as resolve4 } from "path";