@gobing-ai/knowledge-kit 0.1.10 → 0.1.12

package/plugins/kk/workflows/kk-daily-ai-voice2.yaml

@@ -1,3 +1,5 @@
+# Deployment-ready copy. Promote this file to plugins/kk/workflows/kk-daily-ai-voice2.yaml only
+# after approval; all self-validation and nested-workflow references intentionally use active paths.
 name: kk-daily-ai-voice2
 kind: dag
 description: >-
@@ -8,7 +10,7 @@ description: >-
   set at QC so it never re-enters a later pool — whether or not the run publishes. The daily work is
   unchanged after that — plan → content QC → article/cover/script →
   content safety (nested state machine, kk-daily-safety.yaml) → operator review → audio → publish
-  (surfdash + podcast) → independent soft channels (xhs, wechat, locales) → classify → ledger. It
+  (surfdash + podcast) → soft side channels (xhs, wechat) plus the required local-locale gate → classify → ledger. It
   supersedes kk-daily-ai-voice.yaml, which stays untouched until cut-over §8.
 vars:
   # Composed by the `prepare` node (`kk daily prepare`), then read back into vars through the
@@ -166,7 +168,7 @@ nodes:
         command: >-
           kk stage daily-preflight plugins/kk/workflows/kk-daily-ai-voice2.yaml
           plugins/kk/workflows/kk-daily-safety.yaml
-          && kk daily prepare --workflow kk-daily-ai-voice2 --run-date "${vars.run_date}" --ledger-sync
+          && kk daily prepare --workflow kk-daily-ai-voice2 --work-dir "${vars.work_dir}" --run-date "${vars.run_date}" --ledger-sync
           --run "${vars.__runId}" --definition-digest "${vars.__definitionDigest}"
           --setting window="${vars.window}" --setting language="${vars.language}" --setting vdriver="${vars.vdriver}"
           --setting skip_review="${vars.skip_review}" --setting transcode_mp3="${vars.transcode_mp3}"
@@ -322,6 +324,7 @@ nodes:
       options:
         role: scribe
         agent: ${vars.agent}
+        timeoutMs: 600000
         # ADR-115 error tier: keep this prompt <= 1000 chars (0133 R3; 0138 R4a copy discipline).
         # The anchor is shared with plan-translate-retry so the two attempts cannot drift apart.
         # 20261015 forensics: headless agy's terminal sandbox denies workspace writes for EVERY
@@ -359,6 +362,7 @@ nodes:
       options:
         role: reviewer
         agent: ${vars.agent_retry}
+        timeoutMs: 600000
         input: *plan-translate-input
         expectFile: ${vars.work_dir}/21-plan/${vars.run_date}_03_plan_plan.json
         allowAppend: false
@@ -380,6 +384,7 @@ nodes:
       options:
         role: scribe
         agent: ${vars.agent}
+        timeoutMs: 600000
         # ADR-115 error tier: keep this prompt <= 1000 chars. No title line: the canonical episode
         # title is computed by daily-article-gen (0189 R4).
         # The anchor is shared with article-write-retry so the two attempts cannot drift apart.
@@ -411,6 +416,7 @@ nodes:
       options:
         role: reviewer
         agent: ${vars.agent_retry}
+        timeoutMs: 600000
         input: *article-write-input
         expectFile: ${vars.work_dir}/22-article/${vars.run_date}_06_article-write_body.md
         allowAppend: false
@@ -455,6 +461,7 @@ nodes:
       options:
         role: scribe
         agent: ${vars.agent}
+        timeoutMs: 600000
         # ADR-115 error tier: keep this prompt <= 1000 chars.
         input: |
           Read ${vars.work_dir}/21-plan/${vars.run_date}_03_plan_plan.json — a JSON array of plan docs; don't edit it.
@@ -502,7 +509,7 @@ nodes:
     # 0238 R3: reads 21-plan/<date>_03_plan_plan.json, so it must not start before the plan
     # producers settle. `script-style` stays first in the list: a done dependency in the mix keeps
     # this node runnable when the plan-authoring nodes are disabled (all-skipped deps skip a node).
-    dependsOn: [script-style, plan-translate, plan-translate-retry]
+    dependsOn: [script-style, plan-translate, plan-translate-retry, article]
     condition:
       kind: shell
       options:
@@ -517,6 +524,7 @@ nodes:
       options:
         role: scribe
         agent: ${vars.agent}
+        timeoutMs: 600000
         # ADR-115 error tier: keep this prompt <= 1000 chars.
         input: |
           Read ${vars.work_dir}/21-plan/${vars.run_date}_03_plan_plan.json — a JSON array of docs; don't edit it. Also read the style contract ${vars.work_dir}/24-script/${vars.run_date}_08_script-write_style.md and obey its char caps, duration budget and banned phrases.
@@ -552,6 +560,8 @@ nodes:
       are stripped at the nested-spur boundary (the same two `NESTED_SPUR_UNSET` vars the stage
       runner strips, kk-workflow-stages.ts): without it `spur workflow run` refuses to start inside
       an active run. Non-publishing runs skip the gate entirely, exactly like voice1.
+      `skip_review` is forwarded as the nested `unattended` flag, so a real safety escalation cannot
+      silently reach publication when the caller has no pause node.
     dependsOn: [script]
     condition:
       kind: shell
@@ -563,7 +573,8 @@ nodes:
         command: >-
           env -u SPUR_WORKFLOW_RUN_ACTIVE -u SPUR_EXPECTED_DEFINITION_DIGEST
           spur workflow run plugins/kk/workflows/kk-daily-safety.yaml
-          --vars "{\"work_dir\":\"${vars.work_dir}\",\"run_date\":\"${vars.run_date}\",\"safety_max_revise\":\"${vars.safety_max_revise}\",\"safety_platforms\":\"${vars.safety_platforms}\",\"agent\":\"${vars.agent}\"}"
+          --run-id "${vars.__runId}-safety"
+          --vars "{\"work_dir\":\"${vars.work_dir}\",\"run_date\":\"${vars.run_date}\",\"safety_max_revise\":\"${vars.safety_max_revise}\",\"safety_platforms\":\"${vars.safety_platforms}\",\"agent\":\"${vars.agent}\",\"agent_retry\":\"${vars.agent_retry}\",\"unattended\":\"${vars.skip_review}\"}"
           --quiet --no-plan
 
   - id: review
@@ -609,8 +620,8 @@ nodes:
           kk store pool-count "${vars.work_dir}/21-plan/${vars.run_date}_04_quality-control-content_candidates.json" --min 1
     action:
       kind: shell
+      onError: continue
       options:
-        onError: continue
         command: >-
           OMNIVOICE_SPEED=1.06 kk stage daily-generate "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.transcode_mp3}" "${vars.vdriver}" "1" "${vars.episode_max_minutes}" "${vars.episode_min_minutes}"
 
@@ -630,8 +641,8 @@ nodes:
           && ! jq -e '(.metadata.generator == "kk:voxcpm-tts" or .metadata.generator == "kk:gemini-tts") and .metadata.qc.passed == true' "${vars.work_dir}/30-audio/${vars.run_date}_11_generate_content.json"
     action:
       kind: shell
+      onError: continue
       options:
-        onError: continue
         command: >-
           kk stage daily-generate "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.transcode_mp3}" "gemini" "1" "${vars.episode_max_minutes}" "${vars.episode_min_minutes}"
 
@@ -710,21 +721,10 @@ nodes:
         command: >-
           kk stage daily-publish-prep "${vars.work_dir}" "${vars.run_date}" "${vars.podcast_artist}" "${vars.podcast_album}"
 
-  # ---- audio QC: fans in the audio branch and the publish seam ----
-  - id: quality
-    description: >-
-      Verify audio quality, speech rate, and silence/repetition QC metrics. Depends on the audio
-      tail, wrap-docs and publish-prep (the seam's merge is part of the audited bytes); publish-prep
-      being skipped on a non-publishing run does not skip the audit.
-    dependsOn: [duration, wrap-docs, publish-prep]
-    action:
-      kind: shell
-      options:
-        command: >-
-          kk stage daily-quality-report "${vars.work_dir}" "${vars.run_date}"
-
-  - id: publish-surfdash
-    description: "Publish the merged Content to surfdash (single target); its result.json is what show-notes links and what patch-surfdash (folded into publish-classify) patches"
+  # Surfdash's CMS sync now requires all locale files. Materialize zh first so the locale branch
+  # can scaffold and translate en/ja before the final publish invokes refine/sync.
+  - id: publish-surfdash-prepare
+    description: "Materialize the local zh Surfdash post without invoking CMS sync; locale translation runs from this path"
     dependsOn: [publish-prep]
     condition:
       kind: shell
@@ -734,80 +734,22 @@ nodes:
       kind: shell
       options:
         command: >-
-          kk stage daily-publish-surfdash "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
+          kk stage daily-prepare-surfdash "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
 
-  - id: show-notes
-    description: "Render timeline show notes from the episode plan (podcast-pub show-notes op; article URL from the surfdash result postPath — a surfdash failure degrades to the legacy full-body layout)"
-    dependsOn: [quality, publish-surfdash]
-    # Pool-gated (0266): its only skip path was dependency cascade, which a done+skipped mix
-    # defeats — a duration-refused run would still render notes for an unpublished episode.
-    condition:
-      kind: shell
-      options:
-        command: >-
-          kk store pool-count "${vars.work_dir}/21-plan/${vars.run_date}_04_quality-control-content_candidates.json" --min 1
-    action:
-      kind: shell
-      options:
-        command: >-
-          PODCAST_PUB_SEO="${vars.podcast_seo}"
-          PODCAST_PUB_EPISODE_TITLE_MODE="${vars.podcast_episode_title_mode}"
-          PODCAST_PUB_EPISODE_TITLE_PATTERN="${vars.podcast_episode_title_pattern}"
-          PODCAST_PUB_SERIES_NAME="${vars.podcast_series_name}"
-          PODCAST_PUB_SHOW_NAME="${vars.podcast_show_name}"
-          PODCAST_PUB_TITLE_MAX="${vars.podcast_title_max}"
-          PODCAST_PUB_TITLE_MAX_KEYWORDS="${vars.podcast_title_max_keywords}"
-          PODCAST_PUB_SEO_TITLE_SUFFIX="${vars.podcast_seo_title_suffix}"
-          PODCAST_PUB_SEO_TITLE_MAX="${vars.podcast_seo_title_max}"
-          PODCAST_PUB_SEO_DESCRIPTION_MIN="${vars.podcast_seo_description_min}"
-          PODCAST_PUB_SEO_DESCRIPTION_MAX="${vars.podcast_seo_description_max}"
-          PODCAST_PUB_SEO_DESCRIPTION_SOURCE="${vars.podcast_seo_description_source}"
-          PODCAST_PUB_SUMMARY_PARAGRAPH="${vars.podcast_summary_paragraph}"
-          PODCAST_PUB_TIMELINE_INLINE_STYLE="${vars.podcast_timeline_inline_style}"
-          PODCAST_PUB_AUTO_EPISODE_NUMBER="${vars.podcast_auto_episode_number}"
-          PODCAST_PUB_TITLE_SANITIZE="${vars.podcast_title_sanitize}"
-          PODCAST_PUB_LINK_FIELD="${vars.podcast_link_field}"
-          PODCAST_PUB_SLUG="${vars.podcast_slug}"
-          PODCAST_PUB_SLUG_PATTERN="${vars.podcast_slug_pattern}"
-          PODCAST_PUB_SOCIAL_IMAGE="${vars.podcast_social_image}"
-          PODCAST_PUB_ROUND_DURATION="${vars.podcast_round_duration}"
-          kk stage daily-show-notes "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.title}"
-
-  - id: publish-podcast
-    description: "Publish the episode through podcast-pub with the rendered show notes (metadata.showNotes)"
-    dependsOn: [show-notes]
-    condition:
-      kind: shell
-      options:
-        command: 'test "${vars.publish_enabled}" = "true"'
+  # ---- audio QC: fans in the audio branch and the publish seam ----
+  - id: quality
+    description: >-
+      Verify audio quality, speech rate, and silence/repetition QC metrics. Depends on the audio
+      tail, wrap-docs and publish-prep (the seam's merge is part of the audited bytes); publish-prep
+      being skipped on a non-publishing run does not skip the audit.
+    dependsOn: [duration, wrap-docs, publish-prep]
     action:
       kind: shell
       options:
         command: >-
-          PODCAST_PUB_SEO="${vars.podcast_seo}"
-          PODCAST_PUB_EPISODE_TITLE_MODE="${vars.podcast_episode_title_mode}"
-          PODCAST_PUB_EPISODE_TITLE_PATTERN="${vars.podcast_episode_title_pattern}"
-          PODCAST_PUB_SERIES_NAME="${vars.podcast_series_name}"
-          PODCAST_PUB_SHOW_NAME="${vars.podcast_show_name}"
-          PODCAST_PUB_TITLE_MAX="${vars.podcast_title_max}"
-          PODCAST_PUB_TITLE_MAX_KEYWORDS="${vars.podcast_title_max_keywords}"
-          PODCAST_PUB_SEO_TITLE_SUFFIX="${vars.podcast_seo_title_suffix}"
-          PODCAST_PUB_SEO_TITLE_MAX="${vars.podcast_seo_title_max}"
-          PODCAST_PUB_SEO_DESCRIPTION_MIN="${vars.podcast_seo_description_min}"
-          PODCAST_PUB_SEO_DESCRIPTION_MAX="${vars.podcast_seo_description_max}"
-          PODCAST_PUB_SEO_DESCRIPTION_SOURCE="${vars.podcast_seo_description_source}"
-          PODCAST_PUB_SUMMARY_PARAGRAPH="${vars.podcast_summary_paragraph}"
-          PODCAST_PUB_TIMELINE_INLINE_STYLE="${vars.podcast_timeline_inline_style}"
-          PODCAST_PUB_AUTO_EPISODE_NUMBER="${vars.podcast_auto_episode_number}"
-          PODCAST_PUB_TITLE_SANITIZE="${vars.podcast_title_sanitize}"
-          PODCAST_PUB_LINK_FIELD="${vars.podcast_link_field}"
-          PODCAST_PUB_SLUG="${vars.podcast_slug}"
-          PODCAST_PUB_SLUG_PATTERN="${vars.podcast_slug_pattern}"
-          PODCAST_PUB_SOCIAL_IMAGE="${vars.podcast_social_image}"
-          PODCAST_PUB_ROUND_DURATION="${vars.podcast_round_duration}"
-          kk stage daily-publish-podcast "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
+          kk stage daily-quality-report "${vars.work_dir}" "${vars.run_date}"
 
-  # ---- independent soft channels: xhs, wechat, locales (exit 0 on soft failure; fail-fast DAG) ----
+  # ---- soft side channels + local-locale gate (exit 0 on channel failure; final Surfdash remains fail-closed) ----
   - id: xhs-write
     description: "Plan the XHS card series across the episode's plan items via agent.run; onError: continue — a failed plan skips the XHS target, never the run"
     dependsOn: [script, review]
@@ -823,6 +765,7 @@ nodes:
       options:
         role: scribe
         agent: ${vars.agent}
+        timeoutMs: 600000
         # ADR-115 error tier: keep this prompt <= 1000 chars.
         input: |
           Read ${vars.work_dir}/21-plan/${vars.run_date}_03_plan_plan.json — a JSON array of news docs; don't edit it.
@@ -871,22 +814,9 @@ nodes:
         command: >-
           kk stage daily-publish-xhs "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.xhs_live}" "true"
 
-  - id: wechat-publish
-    description: "Publish the daily article to the WeChat MP draft box via wechatmp-pub — draft, or live only when wechat_live=true; independent and non-blocking (a sessionless profile refuses fast, exit 0)"
-    dependsOn: [publish-prep]
-    condition:
-      kind: shell
-      options:
-        command: 'test "${vars.publish_enabled}" = "true" && test "${vars.wechat_enabled}" = "true"'
-    action:
-      kind: shell
-      options:
-        command: >-
-          kk stage daily-publish-wechat "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.wechat_live}" "${vars.wechat_collection}"
-
   - id: translate-localize
     description: "Locales — surfdash-pub scaffolds the en/ja drafts (deterministic, plugin-owned) and writes one marker file per locale naming the draft to translate"
-    dependsOn: [publish-surfdash]
+    dependsOn: [publish-surfdash-prepare]
     condition:
       kind: shell
       options:
@@ -899,16 +829,18 @@ nodes:
 
   - id: translate
     description: >-
-      Agent translates both scaffolded locale drafts in place. The two draft paths are read from the
+      Agent translates both scaffolded locale drafts into <run_date>_21_translate_<locale>.md under the
+      work dir (2026-11-04: both executor sandboxes refuse writes into the Surfdash checkout, and the
+      step still exits 0); translate-refine installs them over the drafts. The two draft paths are read from the
       marker files at their fixed paths (no var projection after the fan-out: concurrent setVars is
-      last-writer-wins, design §6), and an empty marker means that locale is absent. Non-blocking:
-      the sync node and publish-classify treat the locales as an independent channel.
+      last-writer-wins, design §6), and an empty marker means that locale is absent. The local
+      validation node gates final Surfdash publish so its strict all-locale CMS policy is met.
     dependsOn: [translate-localize]
     action:
       kind: agent.run
       options:
-        # 20261012 hardening: this is the LAST agent step and the locales are documented as an
-        # independent channel, yet the step carried no tolerance and no retry sibling — a stochastic
+        # 20261012 hardening: this is the LAST agent step and a translation failure must not abort
+        # the overall report/podcast close, yet the step carried no tolerance and no retry sibling — a stochastic
         # executor failure here aborted the DAG *after* surfdash and podcast had published, so
         # publish-classify, mark-published, run-report and ledger never ran for an otherwise complete
         # day. Tolerating the failure is safe because a scaffold is an unpublished draft: the prompt
@@ -918,26 +850,24 @@ nodes:
         onError: continue
         role: scribe
         agent: ${vars.agent}
-        # 2026-10-24: `onError: continue` documents the locales as non-blocking, but a failure here
-        # landed AFTER surfdash/podcast and left `translate-sync` to sync nothing while
-        # `publish-classify` still reported the day `full` — the en/ja posts never existed. The
-        # retry sibling below carries the capable tier; `daily-publish-completeness` is what makes
-        # the residue visible instead of a silent skip.
+        timeoutMs: 600000
+        # 2026-10-24: `onError: continue` keeps a failed primary eligible for the capable retry
+        # sibling below. The local validation node refuses final publish while either locale remains
+        # an untranslated scaffold.
         input: &translate-input |
           Translate the en/ja draft posts of the zh article. Read the two marker files at these fixed paths — each holds one draft path, or is empty when that locale was not scaffolded:
           English: ${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_en-post-path.txt
           Japanese: ${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_ja-post-path.txt
-          For each: if the marker is empty or unreadable, skip that locale. Otherwise edit the named file in place — translate the frontmatter title and the whole markdown body to natural English/Japanese respectively. Keep frontmatter keys, dates, URLs, code, and the assets/ image reference untouched. Set draft: false (the translated post publishes to the site) and remove any canonical: frontmatter line pointing at a different locale's URL.
+          For each: if the marker is empty or unreadable, skip that locale. Otherwise read the named draft but do NOT edit it (it sits in the Surfdash checkout, outside your writable workspace): write the complete translated file — frontmatter and body — to ${vars.work_dir}/31-publish/${vars.run_date}_21_translate_en.md (English) or ${vars.work_dir}/31-publish/${vars.run_date}_21_translate_ja.md (Japanese); a later stage installs it over the draft. Translate the frontmatter title and the whole markdown body to natural English/Japanese respectively. Keep frontmatter keys, dates, URLs, code, and the assets/ image reference untouched. Set draft: false (the translated post publishes to the site) and remove any canonical: frontmatter line pointing at a different locale's URL.
           Also translate these frontmatter values into the target locale, keeping all other keys untouched: description, seo_title, seo_description, and each key_points item. Each stays one coherent standalone sentence that summarizes the same story as the zh source — never splice fragments from different items or stories into one, and key_points must keep exactly the same number of items as the zh post. The 2026-10-23 run failed this: spliced description/key_points had to be hand-repaired before sync.
-          Series names are fixed product identity, never invented or freely translated: the en series name is "Daily AI Stew" (show "Salty Talk"); the ja series name is "デイリーAIシチュー" (show "咸話咸説"). Never emit 毎日AIブレンド, ごった煮, "Daily AI Medley", "hodgepodge", "Daily AI Briefing", or the zh name 每日AI乱炖 in en/ja prose or link text (a URL keeps whatever it contains). Openers: en "Your Daily AI Stew from Robin, on Salty Talk."; ja "咸話咸説のデイリーAIシチュー、Robin がお届けします。" Listen links: en "[listen to Daily AI Stew · <date>](<url>)", ja "[デイリーAIシチュー · <date> を聴く](<url>)". In each key_points item keep the "Label — sentence" shape: the label before " — " stays a short phrase of at most 14 characters (ja) / 28 (en), never truncated with "…". daily-translate-sync rewrites known retired names deterministically and fails the sync on leftovers.
+          Series names are fixed product identity, never invented or freely translated: the en series name is "Daily AI Stew" (show "Salty Talk"); the ja series name is "デイリーAIシチュー" (show "咸話咸説"). Never emit 毎日AIブレンド, ごった煮, "Daily AI Medley", "hodgepodge", "Daily AI Briefing", or the zh name 每日AI乱炖 in en/ja prose or link text (a URL keeps whatever it contains). Openers: en "Your Daily AI Stew from Robin, on Salty Talk."; ja "咸話咸説のデイリーAIシチュー、Robin がお届けします。" Listen links: en "[listen to Daily AI Stew · <date>](<url>)", ja "[デイリーAIシチュー · <date> を聴く](<url>)". In each key_points item keep the "Label — sentence" shape: the label before " — " stays a short phrase of at most 14 characters (ja) / 28 (en), never truncated with "…". The local translate-validate stage rewrites known retired names deterministically and fails the publish gate on leftovers.
           Keep frontmatter valid YAML: double-quote any value containing ': '. Read the surfdash translator glossary if present at the surfdash checkout root under .agents/skills/surfdash-translator/glossary.md and apply its terminology.
-          Do not wait for operator confirmation. Each edited file must end fully in its target language.
+          Do not wait for operator confirmation. Each written file must end fully in its target language.
 
   # 2026-10-24: the locale translation carried `onError: continue` with NO retry sibling, so a
-  # failed executor left the en/ja drafts untranslated and `translate-sync` synced nothing while the
-  # day still classified `full`. Same shape as the two hard-fail producers above: the primary
-  # tolerates, this sibling is loud-tolerant (a locale is an independent channel, so it continues
-  # rather than failing the DAG) and runs only when a scaffolded draft is still untranslated.
+  # failed executor left the en/ja drafts untranslated and the old sync stage could not distinguish
+  # a scaffold from a publishable locale. The primary tolerates, this sibling is loud-tolerant and
+  # runs only when a scaffolded draft is still untranslated; translate-validate is the final gate.
   - id: translate-retry
     description: "Retry the en/ja locale translation on the capable tier when the primary left a scaffolded draft untranslated (2026-10-24)"
     dependsOn: [translate]
@@ -946,33 +876,151 @@ nodes:
       options:
         command: >-
           test "$(cat "${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_zh-post-path.txt" 2>/dev/null)" != ""
-          && { for L in en ja; do M="${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_$L-post-path.txt"; P="$(cat "$M" 2>/dev/null)"; [ -z "$P" ] && continue; grep -q '^draft: *false' "$P" || { echo "untranslated: $L ($P)"; exit 0; }; done; exit 1; }
+          && { for L in en ja; do M="${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_$L-post-path.txt"; P="$(cat "$M" 2>/dev/null)"; [ -z "$P" ] && continue; O="${vars.work_dir}/31-publish/${vars.run_date}_21_translate_$L.md"; grep -q '^draft: *false' "$O" || { echo "untranslated: $L ($O)"; exit 0; }; done; exit 1; }
     action:
       kind: agent.run
       options:
         onError: continue
         role: reviewer
         agent: ${vars.agent_retry}
+        timeoutMs: 600000
         input: *translate-input
 
-  - id: translate-sync
-    description: "Sync the translated en/ja drafts into the surfdash CMS (the zh post path rides the marker file)"
+  - id: translate-refine
+    description: "Run the Surfdash-owned refine pass over zh/en/ja locally before the locale fingerprint is admitted; no CMS, git, or remote side effect"
     dependsOn: [translate, translate-retry]
+    condition:
+      kind: shell
+      options:
+        command: 'test "${vars.publish_enabled}" = "true"'
+    action:
+      kind: shell
+      onError: continue
+      options:
+        command: >-
+          kk stage daily-surfdash-refine "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
+
+  - id: translate-validate
+    description: "Validate and fingerprint the refined translated locale files locally before the final Surfdash publish; no CMS side effect"
+    dependsOn: [translate-refine]
+    condition:
+      kind: shell
+      options:
+        command: 'test "${vars.publish_enabled}" = "true"'
+    action:
+      kind: shell
+      onError: continue
+      options:
+        command: >-
+          kk stage daily-translate-validate "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_zh-post-path.txt"
+
+  - id: publish-surfdash
+    description: "Publish the validated merged Content to surfdash (single target); its result.json is what show-notes links and what patch-surfdash (folded into publish-classify) patches"
+    dependsOn: [publish-prep, translate-validate]
+    condition:
+      kind: shell
+      options:
+        command: 'test "${vars.publish_enabled}" = "true"'
+    action:
+      kind: shell
+      options:
+        command: >-
+          kk stage daily-publish-surfdash "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "true"
+
+  - id: wechat-publish
+    description: "Publish the daily article via wechatmp-pub after Surfdash settles so its observed public URL fills 原文链接; draft by default, live only when wechat_live=true; failures remain non-blocking"
+    dependsOn: [publish-prep, publish-surfdash]
+    dependencyPolicy: all
+    condition:
+      kind: shell
+      options:
+        command: 'test "${vars.publish_enabled}" = "true" && test "${vars.wechat_enabled}" = "true"'
+    action:
+      kind: shell
+      options:
+        command: >-
+          kk stage daily-publish-wechat "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.wechat_live}" "${vars.wechat_collection}"
+
+  - id: show-notes
+    description: "Render timeline show notes from the episode plan (podcast-pub show-notes op; article URL from the surfdash result postPath — a surfdash failure degrades to the legacy full-body layout)"
+    dependsOn: [quality, publish-surfdash]
+    # Pool-gated (0266): its only skip path was dependency cascade, which a done+skipped mix
+    # defeats — a duration-refused run would still render notes for an unpublished episode.
+    condition:
+      kind: shell
+      options:
+        command: >-
+          kk store pool-count "${vars.work_dir}/21-plan/${vars.run_date}_04_quality-control-content_candidates.json" --min 1
+    action:
+      kind: shell
+      options:
+        command: >-
+          PODCAST_PUB_SEO="${vars.podcast_seo}"
+          PODCAST_PUB_EPISODE_TITLE_MODE="${vars.podcast_episode_title_mode}"
+          PODCAST_PUB_EPISODE_TITLE_PATTERN="${vars.podcast_episode_title_pattern}"
+          PODCAST_PUB_SERIES_NAME="${vars.podcast_series_name}"
+          PODCAST_PUB_SHOW_NAME="${vars.podcast_show_name}"
+          PODCAST_PUB_TITLE_MAX="${vars.podcast_title_max}"
+          PODCAST_PUB_TITLE_MAX_KEYWORDS="${vars.podcast_title_max_keywords}"
+          PODCAST_PUB_SEO_TITLE_SUFFIX="${vars.podcast_seo_title_suffix}"
+          PODCAST_PUB_SEO_TITLE_MAX="${vars.podcast_seo_title_max}"
+          PODCAST_PUB_SEO_DESCRIPTION_MIN="${vars.podcast_seo_description_min}"
+          PODCAST_PUB_SEO_DESCRIPTION_MAX="${vars.podcast_seo_description_max}"
+          PODCAST_PUB_SEO_DESCRIPTION_SOURCE="${vars.podcast_seo_description_source}"
+          PODCAST_PUB_SUMMARY_PARAGRAPH="${vars.podcast_summary_paragraph}"
+          PODCAST_PUB_TIMELINE_INLINE_STYLE="${vars.podcast_timeline_inline_style}"
+          PODCAST_PUB_AUTO_EPISODE_NUMBER="${vars.podcast_auto_episode_number}"
+          PODCAST_PUB_TITLE_SANITIZE="${vars.podcast_title_sanitize}"
+          PODCAST_PUB_LINK_FIELD="${vars.podcast_link_field}"
+          PODCAST_PUB_SLUG="${vars.podcast_slug}"
+          PODCAST_PUB_SLUG_PATTERN="${vars.podcast_slug_pattern}"
+          PODCAST_PUB_SOCIAL_IMAGE="${vars.podcast_social_image}"
+          PODCAST_PUB_ROUND_DURATION="${vars.podcast_round_duration}"
+          kk stage daily-show-notes "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.title}"
+
+  - id: publish-podcast
+    description: "Publish the episode through podcast-pub with the rendered show notes (metadata.showNotes)"
+    dependsOn: [show-notes]
+    condition:
+      kind: shell
+      options:
+        command: 'test "${vars.publish_enabled}" = "true"'
     action:
       kind: shell
       options:
         command: >-
-          kk stage daily-translate-sync "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}" "${vars.work_dir}/31-publish/${vars.run_date}_20_translate-localize_zh-post-path.txt"
+          PODCAST_PUB_SEO="${vars.podcast_seo}"
+          PODCAST_PUB_EPISODE_TITLE_MODE="${vars.podcast_episode_title_mode}"
+          PODCAST_PUB_EPISODE_TITLE_PATTERN="${vars.podcast_episode_title_pattern}"
+          PODCAST_PUB_SERIES_NAME="${vars.podcast_series_name}"
+          PODCAST_PUB_SHOW_NAME="${vars.podcast_show_name}"
+          PODCAST_PUB_TITLE_MAX="${vars.podcast_title_max}"
+          PODCAST_PUB_TITLE_MAX_KEYWORDS="${vars.podcast_title_max_keywords}"
+          PODCAST_PUB_SEO_TITLE_SUFFIX="${vars.podcast_seo_title_suffix}"
+          PODCAST_PUB_SEO_TITLE_MAX="${vars.podcast_seo_title_max}"
+          PODCAST_PUB_SEO_DESCRIPTION_MIN="${vars.podcast_seo_description_min}"
+          PODCAST_PUB_SEO_DESCRIPTION_MAX="${vars.podcast_seo_description_max}"
+          PODCAST_PUB_SEO_DESCRIPTION_SOURCE="${vars.podcast_seo_description_source}"
+          PODCAST_PUB_SUMMARY_PARAGRAPH="${vars.podcast_summary_paragraph}"
+          PODCAST_PUB_TIMELINE_INLINE_STYLE="${vars.podcast_timeline_inline_style}"
+          PODCAST_PUB_AUTO_EPISODE_NUMBER="${vars.podcast_auto_episode_number}"
+          PODCAST_PUB_TITLE_SANITIZE="${vars.podcast_title_sanitize}"
+          PODCAST_PUB_LINK_FIELD="${vars.podcast_link_field}"
+          PODCAST_PUB_SLUG="${vars.podcast_slug}"
+          PODCAST_PUB_SLUG_PATTERN="${vars.podcast_slug_pattern}"
+          PODCAST_PUB_SOCIAL_IMAGE="${vars.podcast_social_image}"
+          PODCAST_PUB_ROUND_DURATION="${vars.podcast_round_duration}"
+          kk stage daily-publish-podcast "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
 
   # ---- fan-in: classify the publish outcome, then close the run ----
   - id: publish-classify
     description: >-
-      Fan-in of every publish leaf (surfdash, podcast, xhs, wechat, locales) with policy `all`:
+      Fan-in of every publish leaf (surfdash, podcast, xhs, wechat, locale validation) with policy `all`:
       classifies the sequenced surfdash → podcast outcomes into publish-status.txt full|partial|none
-      (exit 0 in all three), records the independent channels' completeness, and folds in the
+      (exit 0 in all three), records side-channel/locale completeness, and folds in the
       surfdash post-patching + the partial-publish marker that voice1 ran as separate states (a
       classify is the only node that knows the status). Non-publishing runs skip the whole subtree.
-    dependsOn: [publish-podcast, publish-surfdash, xhs-publish, wechat-publish, translate-sync]
+    dependsOn: [publish-podcast, publish-surfdash, xhs-publish, wechat-publish, translate-validate]
     dependencyPolicy: all
     condition:
       kind: shell
@@ -997,7 +1045,8 @@ nodes:
       kind: shell
       options:
         command: >-
-          kk store pool-count "${vars.work_dir}/21-plan/${vars.run_date}_04_quality-control-content_candidates.json" --min 1
+          test "$(cat "${vars.work_dir}/31-publish/${vars.run_date}_17_publish_publish-status.txt" 2>/dev/null)" = "full"
+          && kk store pool-count "${vars.work_dir}/21-plan/${vars.run_date}_04_quality-control-content_candidates.json" --min 1
           && test "${vars.publish_enabled}" = "true"
     action:
       kind: shell