@gobing-ai/knowledge-kit 0.1.11 → 0.1.13

package/plugins/publishings/linkedin-pub/src/profile-check.ts

@@ -0,0 +1,17 @@
+/**
+ * LinkedIn profile-session capability (0328 R2).
+ *
+ * `login` opens the feed in a headed browser and resolves only once LinkedIn's readiness predicate
+ * passes; `check` reopens the profile headlessly and reports `verified` or `refused` without
+ * posting. Arg parsing, profile precedence (`--profile` > `LINKEDIN_PROFILE_DIR` >
+ * `KK_BROWSER_PROFILE_DIR` > `~/.config/kk/browser-profiles/linkedin`, ADR-042) and the exit codes
+ * (0 verified, 1 refused, 2 usage error) all live in the shared `runProfileCli`, so the publish
+ * preflight (`kk plugin check linkedin-pub` and the publish-matrix probe) and this CLI apply one
+ * gate.
+ */
+import { runProfileCli } from '@gobing-ai/publish-harness/browser';
+import { LINKEDIN_CONFIG } from './index';
+
+if (import.meta.main) {
+    process.exit(await runProfileCli(LINKEDIN_CONFIG, Bun.argv.slice(2)));
+}

package/plugins/publishings/linkedin-pub/tsconfig.json

@@ -0,0 +1,4 @@
+{
+    "extends": "../../../tooling/typescript/base.json",
+    "include": ["src", "tests"]
+}

package/plugins/publishings/surfdash-pub/dist/index.js

@@ -12798,11 +12798,14 @@ function resolveSurfdashRoot() {
   return process.env.SURFDASH_ROOT ?? (postsurfingBin.includes("/") ? resolve(dirname3(dirname3(postsurfingBin))) : undefined);
 }
 async function spawnCli(cmd, cwd) {
+  const env = { ...process.env };
+  for (const key of ["SPUR_WORKFLOW_RUN_ACTIVE", "SPUR_EXPECTED_DEFINITION_DIGEST"])
+    delete env[key];
   const proc = Bun.spawn(cmd, {
     cwd,
     stdout: "pipe",
     stderr: "pipe",
-    env: process.env
+    env
   });
   const [exitCode, stdout, stderr] = await Promise.all([
     proc.exited,
@@ -12896,7 +12899,30 @@ function extractFailingPostHint(text) {
     return;
   return match[0].replace(/[.,;]+$/, "");
 }
-async function runSiteGate(surfdashRoot) {
+function extractPostDates(paths) {
+  const dates = new Set;
+  for (const p of paths) {
+    const m = p.replaceAll("\\", "/").match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+    if (m?.[1])
+      dates.add(m[1]);
+  }
+  return dates;
+}
+function isUnrelatedDatePostFailure(output, ownedPaths) {
+  const ownedDates = extractPostDates(ownedPaths);
+  if (ownedDates.size === 0)
+    return false;
+  const failingHints = [...output.matchAll(/(?:content[\\/])?posts[\\/][^\s:)]+/g)].map((m) => m[0].replace(/[.,;]+$/, ""));
+  if (failingHints.length === 0)
+    return false;
+  for (const hint of failingHints) {
+    const m = hint.replaceAll("\\", "/").match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+    if (!m?.[1] || ownedDates.has(m[1]))
+      return false;
+  }
+  return true;
+}
+async function runSiteGate(surfdashRoot, ownedPaths = []) {
   if (process.env.SURFDASH_DIGEST_CHECK === "off") {
     return { ok: true };
   }
@@ -12907,7 +12933,7 @@ async function runSiteGate(surfdashRoot) {
       const postHint = extractFailingPostHint(output);
       const hint = postHint ? ` [failing post: ${postHint}]` : "";
       const error = `site gate failed: ${cmd.join(" ")} (exit ${spawned.exitCode})${hint}: ${output}`;
-      if (process.env.SURFDASH_DIGEST_CHECK === "warn") {
+      if (process.env.SURFDASH_DIGEST_CHECK === "warn" || isUnrelatedDatePostFailure(output, ownedPaths)) {
         for (const line of error.split(`
 `)) {
           echoError(`site gate (warn): ${line}`);
@@ -13079,7 +13105,7 @@ function normalizeLocaleFrontmatter(markdown) {
   const close = lines.findIndex((l, i) => i > 0 && l.trim() === "---");
   if (close < 0)
     return markdown;
-  const head = lines.slice(1, close).filter((l) => !/^canonical\s*:/.test(l)).map((l) => /^draft\s*:/.test(l) ? "draft: false" : l);
+  const head = lines.slice(1, close).filter((l) => !/^canonical\s*:.*\/zh\//.test(l)).map((l) => /^draft\s*:/.test(l) ? "draft: false" : l);
   return [lines[0], ...head, ...lines.slice(close)].join(`
 `);
 }
@@ -13172,7 +13198,7 @@ async function patchPost(options) {
     const backfilled = await runListenLinkBackfill(surfdashRoot);
     for (const p of backfilled)
       commitPaths.add(p);
-    const gate = await runSiteGate(surfdashRoot);
+    const gate = await runSiteGate(surfdashRoot, [...commitPaths, relative(surfdashRoot, postPath.postPath)]);
     if (!gate.ok)
       return fail(gate.error);
   }
@@ -13338,9 +13364,8 @@ async function preparePost(payload) {
     return { ok: false, result: failNotSent(`SURFDASH_LOCALE must be one of zh/en/ja, got '${rawLocale}'`) };
   }
   const locale = rawLocale;
-  const runDate = typeof payload.content.metadata?.runDate === "string" ? payload.content.metadata.runDate : "";
-  const today = new Date().toISOString().slice(0, 10).replaceAll("-", "");
-  const dateStamp = runDate || today;
+  const runDate = typeof payload.content.metadata?.runDate === "string" && payload.content.metadata.runDate !== "" ? payload.content.metadata.runDate : typeof payload.content.metadata?.date === "string" ? payload.content.metadata.date.replaceAll("-", "") : "";
+  const dateStamp = runDate || new Date().toISOString().slice(0, 10).replaceAll("-", "");
   const titleSlug = slugify2(payload.content.title ?? "");
   const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
   if (runDate !== "" && !/^\d{8}$/.test(runDate)) {
@@ -13367,20 +13392,24 @@ async function preparePost(payload) {
   }
   const filePath = join2(postDir, "index.md");
   try {
-    await createNodeFileSystem().ensureDir(postDir);
-    let imageFrontmatter;
-    if (typeof coverPath === "string") {
-      const assetsDir = join2(postDir, "assets");
-      await createNodeFileSystem().ensureDir(assetsDir);
-      const coverName = `cover${extname(coverPath).toLowerCase()}`;
-      await copyFile(coverPath, join2(assetsDir, coverName));
-      imageFrontmatter = `./assets/${coverName}`;
-    }
-    const markdown = mapContentToSurfingMarkdown(payload.content, {
-      image: imageFrontmatter,
-      publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined
-    });
-    await createNodeFileSystem().writeFile(filePath, markdown);
+    if (readRefinedSnapshot(filePath) === undefined) {
+      await createNodeFileSystem().ensureDir(postDir);
+      let imageFrontmatter;
+      if (typeof coverPath === "string") {
+        const assetsDir = join2(postDir, "assets");
+        await createNodeFileSystem().ensureDir(assetsDir);
+        const coverName = `cover${extname(coverPath).toLowerCase()}`;
+        await copyFile(coverPath, join2(assetsDir, coverName));
+        imageFrontmatter = `./assets/${coverName}`;
+      }
+      const markdown = mapContentToSurfingMarkdown(payload.content, {
+        image: imageFrontmatter,
+        publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined
+      });
+      await createNodeFileSystem().writeFile(filePath, markdown);
+    } else {
+      echoError(`surfdash-pub: keeping existing refined post at ${filePath} (not re-minting)`);
+    }
   } catch (err) {
     return {
       ok: false,
@@ -13461,10 +13490,10 @@ async function publishPreparedFile(prepared, identity) {
       });
     }
     const backfilled = await runListenLinkBackfill(surfdashRoot);
-    const gate = await runSiteGate(surfdashRoot);
+    const commitPaths = relPostDirs ?? [relPostDir];
+    const gate = await runSiteGate(surfdashRoot, [...commitPaths, ...backfilled]);
     if (!gate.ok)
       return failUncertain(gate.error);
-    const commitPaths = relPostDirs ?? [relPostDir];
     const commitLocales = relPostDirs === undefined ? [locale] : ["zh", "en", "ja"];
     const pushed = await pushPostGit(surfdashRoot, commitPaths, `content: daily AI news ${dateStamp} (${commitLocales.join(", ")})`, backfilled);
     if (!pushed.ok)

package/plugins/publishings/surfdash-pub/src/index.ts

@@ -316,11 +316,16 @@ interface CliSpawnResult {
 
 /** One spawn helper for every CLI-backed operation (postsurfing publish / sd translate / orchestrator sync). */
 async function spawnCli(cmd: string[], cwd: string): Promise<CliSpawnResult> {
+    // postsurfing runs a nested spur workflow in the surfdash repo; a kk publish3 step shell carries
+    // the engine's single-flight guard vars, and the guard would refuse that nested run. Same
+    // escape the kk-daily-ai-voice3 safety node uses for its intentional nesting.
+    const env = { ...process.env };
+    for (const key of ['SPUR_WORKFLOW_RUN_ACTIVE', 'SPUR_EXPECTED_DEFINITION_DIGEST']) delete env[key];
     const proc = Bun.spawn(cmd, {
         cwd,
         stdout: 'pipe',
         stderr: 'pipe',
-        env: process.env,
+        env,
     });
     const [exitCode, stdout, stderr] = await Promise.all([
         proc.exited,
@@ -471,17 +476,41 @@ export function extractFailingPostHint(text: string): string | undefined {
     return match[0].replace(/[.,;]+$/, '');
 }
 
+function extractPostDates(paths: readonly string[]): Set<string> {
+    const dates = new Set<string>();
+    for (const p of paths) {
+        const m = p.replaceAll('\\', '/').match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+        if (m?.[1]) dates.add(m[1]);
+    }
+    return dates;
+}
+
+function isUnrelatedDatePostFailure(output: string, ownedPaths: readonly string[]): boolean {
+    const ownedDates = extractPostDates(ownedPaths);
+    if (ownedDates.size === 0) return false;
+    const failingHints = [...output.matchAll(/(?:content[\\/])?posts[\\/][^\s:)]+/g)].map((m) =>
+        m[0].replace(/[.,;]+$/, ''),
+    );
+    if (failingHints.length === 0) return false;
+    for (const hint of failingHints) {
+        const m = hint.replaceAll('\\', '/').match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+        if (!m?.[1] || ownedDates.has(m[1])) return false;
+    }
+    return true;
+}
+
 /**
  * Runs the surfdash site gates (`bun run sd check digest` then `bun run check:content`)
  * with cwd = `surfdashRoot` via `spawnCli`.
  *
  * If either command exits non-zero:
- * - With `SURFDASH_DIGEST_CHECK=warn`: echoes each line of the failure via `echoError`
- *   prefixed with `site gate (warn):` and continues.
+ * - With `SURFDASH_DIGEST_CHECK=warn` (or when every failing post belongs to an unrelated date
+ *   outside `ownedPaths`): echoes each line of the failure via `echoError` prefixed with
+ *   `site gate (warn):` and continues.
  * - With `SURFDASH_DIGEST_CHECK=off`: skips the gate completely.
  * - Default (unset or any other value): fails loud with command, trimmed output, and post hint.
  */
-export async function runSiteGate(surfdashRoot: string): Promise<SiteGateOutcome> {
+export async function runSiteGate(surfdashRoot: string, ownedPaths: readonly string[] = []): Promise<SiteGateOutcome> {
     if (process.env.SURFDASH_DIGEST_CHECK === 'off') {
         return { ok: true };
     }
@@ -493,7 +522,7 @@ export async function runSiteGate(surfdashRoot: string): Promise<SiteGateOutcome
             const postHint = extractFailingPostHint(output);
             const hint = postHint ? ` [failing post: ${postHint}]` : '';
             const error = `site gate failed: ${cmd.join(' ')} (exit ${spawned.exitCode})${hint}: ${output}`;
-            if (process.env.SURFDASH_DIGEST_CHECK === 'warn') {
+            if (process.env.SURFDASH_DIGEST_CHECK === 'warn' || isUnrelatedDatePostFailure(output, ownedPaths)) {
                 for (const line of error.split('\n')) {
                     echoError(`site gate (warn): ${line}`);
                 }
@@ -735,7 +764,9 @@ export function normalizeLocaleFrontmatter(markdown: string): string {
     if (close < 0) return markdown;
     const head = lines
         .slice(1, close)
-        .filter((l) => !/^canonical\s*:/.test(l))
+        // Only the zh scaffold's canonical is stale; a sibling's own (refined) canonical must survive,
+        // or the orchestrator re-dumps the frontmatter and the byte-exact drift gate fails.
+        .filter((l) => !/^canonical\s*:.*\/zh\//.test(l))
         .map((l) => (/^draft\s*:/.test(l) ? 'draft: false' : l));
     return [lines[0], ...head, ...lines.slice(close)].join('\n');
 }
@@ -844,7 +875,7 @@ async function patchPost(options: SurfdashPubOptions): Promise<Result> {
     if (process.env.SURFDASH_AUTO_PUSH !== '0') {
         const backfilled = await runListenLinkBackfill(surfdashRoot);
         for (const p of backfilled) commitPaths.add(p);
-        const gate = await runSiteGate(surfdashRoot);
+        const gate = await runSiteGate(surfdashRoot, [...commitPaths, relative(surfdashRoot, postPath.postPath)]);
         if (!gate.ok) return fail(gate.error);
     }
     const commit = await commitPostPaths(
@@ -1078,9 +1109,15 @@ async function preparePost(payload: PublishTransportPayload): Promise<PrepareOut
         return { ok: false, result: failNotSent(`SURFDASH_LOCALE must be one of zh/en/ja, got '${rawLocale}'`) };
     }
     const locale = rawLocale as SupportedLocale;
-    const runDate = typeof payload.content.metadata?.runDate === 'string' ? payload.content.metadata.runDate : '';
-    const today = new Date().toISOString().slice(0, 10).replaceAll('-', '');
-    const dateStamp = runDate || today;
+    // dateStamp source: explicit metadata.runDate, else the payload's own metadata.date —
+    // never the wall clock, which around midnight local time mints `tomorrow` slugs.
+    const runDate =
+        typeof payload.content.metadata?.runDate === 'string' && payload.content.metadata.runDate !== ''
+            ? payload.content.metadata.runDate
+            : typeof payload.content.metadata?.date === 'string'
+              ? payload.content.metadata.date.replaceAll('-', '')
+              : '';
+    const dateStamp = runDate || new Date().toISOString().slice(0, 10).replaceAll('-', '');
     const titleSlug = slugify(payload.content.title ?? '');
     const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
     if (runDate !== '' && !/^\d{8}$/.test(runDate)) {
@@ -1109,20 +1146,30 @@ async function preparePost(payload: PublishTransportPayload): Promise<PrepareOut
 
     const filePath = join(postDir, 'index.md');
     try {
-        await createNodeFileSystem().ensureDir(postDir);
-        let imageFrontmatter: string | undefined;
-        if (typeof coverPath === 'string') {
-            const assetsDir = join(postDir, 'assets');
-            await createNodeFileSystem().ensureDir(assetsDir);
-            const coverName = `cover${extname(coverPath).toLowerCase()}`;
-            await copyFile(coverPath, join(assetsDir, coverName));
-            imageFrontmatter = `./assets/${coverName}`;
+        // A post the site's own refine step already marked is not ours to clobber: re-minting it
+        // replaces the refined canonical frontmatter (refine owns `refined`, `seo_title`, …) with
+        // generator defaults and flips an already-published day back to a draft. Keep the file and
+        // reuse it; only genuinely fresh days (no marker) get minted (2026-11-05 tier-0 rerun).
+        if (readRefinedSnapshot(filePath) === undefined) {
+            await createNodeFileSystem().ensureDir(postDir);
+            let imageFrontmatter: string | undefined;
+            if (typeof coverPath === 'string') {
+                const assetsDir = join(postDir, 'assets');
+                await createNodeFileSystem().ensureDir(assetsDir);
+                const coverName = `cover${extname(coverPath).toLowerCase()}`;
+                await copyFile(coverPath, join(assetsDir, coverName));
+                imageFrontmatter = `./assets/${coverName}`;
+            }
+            const markdown = mapContentToSurfingMarkdown(payload.content, {
+                image: imageFrontmatter,
+                publishDate: runDate
+                    ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`
+                    : undefined,
+            });
+            await createNodeFileSystem().writeFile(filePath, markdown);
+        } else {
+            echoError(`surfdash-pub: keeping existing refined post at ${filePath} (not re-minting)`);
         }
-        const markdown = mapContentToSurfingMarkdown(payload.content, {
-            image: imageFrontmatter,
-            publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined,
-        });
-        await createNodeFileSystem().writeFile(filePath, markdown);
     } catch (err: unknown) {
         return {
             ok: false,
@@ -1236,9 +1283,9 @@ async function publishPreparedFile(
             });
         }
         const backfilled = await runListenLinkBackfill(surfdashRoot);
-        const gate = await runSiteGate(surfdashRoot);
-        if (!gate.ok) return failUncertain(gate.error);
         const commitPaths = relPostDirs ?? [relPostDir];
+        const gate = await runSiteGate(surfdashRoot, [...commitPaths, ...backfilled]);
+        if (!gate.ok) return failUncertain(gate.error);
         const commitLocales: SupportedLocale[] = relPostDirs === undefined ? [locale] : ['zh', 'en', 'ja'];
         const pushed = await pushPostGit(
             surfdashRoot,

package/plugins/publishings/threads-pub/dist/index.js

@@ -12391,6 +12391,13 @@ class ThreadsPostApiTransport {
     const unsupported = refuseUnsupportedOptions(payload.options, payload.content);
     if (unsupported !== undefined)
       return fail(unsupported);
+    const requestedStatus = payload.content.metadata?.publishStatus;
+    if (requestedStatus === "draft") {
+      return fail("threads post has no draft: the Threads API publishes immediately \u2014 plan this target dummy/off or launch it live");
+    }
+    if (requestedStatus !== undefined && requestedStatus !== "public") {
+      return fail(`unknown publishStatus '${String(requestedStatus)}' (expected absent, 'draft' or 'public')`);
+    }
     const missing = TOKEN_ENVS.filter((key) => {
       const value = process.env[key];
       return !value || value.trim().length === 0;

package/plugins/publishings/threads-pub/src/index.ts

@@ -146,6 +146,18 @@ export class ThreadsPostApiTransport implements PublishTransport {
         const unsupported = refuseUnsupportedOptions(payload.options, payload.content);
         if (unsupported !== undefined) return fail(unsupported);
 
+        // 0330 R2: the post API publishes immediately — there is no draft. Intercept before the
+        // credential lookup so a planned draft never reaches Threads, and fail closed on unknown modes.
+        const requestedStatus = payload.content.metadata?.publishStatus;
+        if (requestedStatus === 'draft') {
+            return fail(
+                'threads post has no draft: the Threads API publishes immediately — plan this target dummy/off or launch it live',
+            );
+        }
+        if (requestedStatus !== undefined && requestedStatus !== 'public') {
+            return fail(`unknown publishStatus '${String(requestedStatus)}' (expected absent, 'draft' or 'public')`);
+        }
+
         const missing = TOKEN_ENVS.filter((key) => {
             const value = process.env[key];
             return !value || value.trim().length === 0;