@gobing-ai/knowledge-kit 0.1.12 → 0.1.13

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
     },
     "plugins": [
         {
-            "version": "0.1.12",
+            "version": "0.1.13",
             "name": "kk",
             "source": "./plugins/kk",
             "description": "knowledge-kit — a set of toolkit for knowledge management"

package/dist/index.js

@@ -42458,11 +42458,22 @@ function pluginEnvFromConfig(kind, name, configFile = resolveKkConfigPath()) {
   if (!isPlainObject5(collectionNode)) {
     return {};
   }
+  const out = {};
+  if (kind === "publish") {
+    for (const sibling of Object.values(collectionNode)) {
+      if (!isPlainObject5(sibling) || !isPlainObject5(sibling.env))
+        continue;
+      const ch = stringifyEnvValue(sibling.env.KK_BROWSER_CHANNEL);
+      if (ch !== undefined && ch !== "") {
+        out.KK_BROWSER_CHANNEL = ch;
+        break;
+      }
+    }
+  }
   const pluginNode = collectionNode[name];
   if (!isPlainObject5(pluginNode) || !isPlainObject5(pluginNode.env)) {
-    return {};
+    return out;
   }
-  const out = {};
   for (const [key, value] of Object.entries(pluginNode.env)) {
     const str = stringifyEnvValue(value);
     if (str === undefined || str === "") {
@@ -53755,11 +53766,12 @@ async function runPublishMatrixWaitUntil(args, deps = {}) {
   const localHour = part("hour") % 24;
   const localMinute = part("minute");
   const already = localHour * 60 + localMinute;
-  if (already >= hours * 60 + minutes) {
+  const targetMinutes = hours * 60 + minutes;
+  if (already >= targetMinutes || targetMinutes - already > 180) {
     echo(`publish-matrix-wait-until: ${zone} is already past ${target}`);
     return 0;
   }
-  let wait = (hours * 60 + minutes - already) * 60000;
+  let wait = (targetMinutes - already) * 60000;
   const delta = offsetAt(now() + wait) - offsetAt(now());
   wait -= delta * 60000;
   if (wait <= 0) {

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/knowledge-kit",
-    "version": "0.1.12",
+    "version": "0.1.13",
     "description": "An ingest → create → publish content pipeline CLI (Bun).",
     "repository": {
         "type": "git",

package/plugins/kk/plugin.json

@@ -1,5 +1,5 @@
 {
     "name": "kk",
-    "version": "0.1.12",
+    "version": "0.1.13",
     "description": "knowledge-kit Claude Code plugin: skills, commands, subagents, hooks, and rules"
 }

package/plugins/kk/publish-presets/daily-ai-voice-migration.json

@@ -29,7 +29,7 @@
             "variant": "episode",
             "tier": 1,
             "window": "after-generate",
-            "mode": "draft"
+            "mode": "off"
         },
         {
             "id": "xhs.podcast",
@@ -59,7 +59,7 @@
             "variant": "article",
             "tier": 2,
             "window": "after-generate",
-            "mode": "dummy"
+            "mode": "draft"
         },
         {
             "id": "xhs.cards",
@@ -86,7 +86,7 @@
             "variant": "article",
             "tier": 2,
             "window": "cn-peak",
-            "mode": "draft"
+            "mode": "off"
         },
         {
             "id": "x.post",

package/plugins/kk/publish-presets/daily-ai-voice.json

@@ -26,7 +26,7 @@
             "variant": "episode",
             "tier": 1,
             "window": "after-generate",
-            "mode": "draft"
+            "mode": "off"
         },
         {
             "plugin": "xhs-pub",
@@ -53,7 +53,7 @@
             "variant": "article",
             "tier": 2,
             "window": "after-generate",
-            "mode": "dummy"
+            "mode": "draft"
         },
         {
             "plugin": "xhs-pub",
@@ -61,7 +61,7 @@
             "variant": "cards",
             "tier": 3,
             "window": "after-generate",
-            "mode": "off"
+            "mode": "draft"
         },
         {
             "plugin": "weibo-pub",
@@ -77,7 +77,7 @@
             "variant": "article",
             "tier": 2,
             "window": "cn-peak",
-            "mode": "draft"
+            "mode": "off"
         },
         {
             "plugin": "x-pub",

package/plugins/kk/schedules/kk-daily-publish3-cn-peak.cron.tmpl

@@ -7,7 +7,7 @@
 #
 # `live_channels` is baked in: this installed line IS the operator's ADR-022 consent for a live
 # send. Nothing in the workflow or the preset can produce `live` on its own. The window is
-# consent-scoped to tokens with a cn-peak row (weibo-pub, x-pub — both draft). Every live launch
+# consent-scoped to tokens with a cn-peak row (weibo-pub). Every live launch
 # stops at the `send-confirm` gate and waits for the operator's manual resume; the entry never
 # delivers unattended.
 #
@@ -27,4 +27,4 @@
 #
 # `run_date` is computed at tick time in America/Los_Angeles by the launcher: a run that starts
 # at 17:00 PDT is still "today" for the day dir the 04:30 generation wrote.
-0 17 * * * cd {{repo}} && mkdir -p .works/kk-daily-publish3 && PATH="{{home}}/.bun/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin" TZ=America/Los_Angeles bun {{repo}}/plugins/kk/scripts/voice3-publish-window.ts --window cn-peak --preset daily-ai-voice --live-channels weibo-pub,x-pub >> {{repo}}/.works/kk-daily-publish3/cn-peak.log 2>&1
+0 17 * * * cd {{repo}} && mkdir -p .works/kk-daily-publish3 && PATH="{{home}}/.bun/bin:/opt/homebrew/bin:/usr/local/bin:/usr/bin:/bin:/usr/sbin:/sbin" TZ=America/Los_Angeles bun {{repo}}/plugins/kk/scripts/voice3-publish-window.ts --window cn-peak --preset daily-ai-voice --live-channels weibo-pub >> {{repo}}/.works/kk-daily-publish3/cn-peak.log 2>&1

package/plugins/kk/scripts/daily-scheduled-run.ts

@@ -16,6 +16,9 @@ const { values } = parseArgs({
         'retry-agent': { type: 'string', default: 'claude' },
         'required-channels': { type: 'string', default: 'wechat,locales,cms-resync' },
         'wechat-live': { type: 'boolean', default: false },
+        workflow: { type: 'string', default: 'kk-daily-ai-voice2' },
+        window: { type: 'string' },
+        'publish-preset': { type: 'string' },
     },
 });
 const timeoutMs = Number(values['timeout-ms']);
@@ -31,15 +34,28 @@ const workDir = join(resolve(values['works-dir'] ?? join(repo, '.works')), 'kk-d
 const receiptPath = resolve(values.receipt ?? join(workDir, 'schedule-receipt.json'));
 const startedAt = now.toISOString();
 mkdirSync(dirname(receiptPath), { recursive: true });
-const vars = {
-    publish_enabled: 'true',
-    skip_review: 'true',
-    agent: values.agent,
-    agent_retry: values['retry-agent'],
-    wechat_live: values['wechat-live'] === true ? 'true' : 'false',
-    work_dir: workDir,
-    run_date: stamp,
-};
+// voice3 shares the voice2 workspace (F08); only the vars and the publish seam differ.
+const isVoice3 = values.workflow === 'kk-daily-ai-voice3';
+const vars = isVoice3
+    ? {
+          auto_publish: 'true',
+          ...(values['publish-preset'] !== undefined ? { publish_preset: values['publish-preset'] } : {}),
+          ...(values.window ? { window: values.window } : {}),
+          skip_review: 'true',
+          agent: values.agent,
+          agent_retry: values['retry-agent'],
+          work_dir: workDir,
+          run_date: stamp,
+      }
+    : {
+          publish_enabled: 'true',
+          skip_review: 'true',
+          agent: values.agent,
+          agent_retry: values['retry-agent'],
+          wechat_live: values['wechat-live'] === true ? 'true' : 'false',
+          work_dir: workDir,
+          run_date: stamp,
+      };
 writeFileSync(receiptPath, JSON.stringify({ runId, startedAt, status: 'running', workDir }, null, 2));
 let interrupted = false;
 let timedOut = false;
@@ -51,7 +67,7 @@ const child = spawn(
         '--no-logo',
         'workflow',
         'run',
-        'plugins/kk/workflows/kk-daily-ai-voice2.yaml',
+        `plugins/kk/workflows/${values.workflow}.yaml`,
         '--run-id',
         runId,
         '--vars',
@@ -135,7 +151,9 @@ if (child.pid !== undefined && (timedOut || interrupted || exitCode !== 0)) {
     await Bun.sleep(100);
 }
 const workflowStatus = timedOut ? 'timed-out' : interrupted ? 'interrupted' : exitCode === 0 ? 'done' : 'failed';
-const primaryPublishStatus = readOptional(join(workDir, '31-publish', `${stamp}_17_publish_publish-status.txt`));
+const primaryPublishStatus = isVoice3
+    ? readOptional(join(workDir, '4-publish', 'publish-status.after-generate.txt'))
+    : readOptional(join(workDir, '31-publish', `${stamp}_17_publish_publish-status.txt`));
 const runSummary = readOptional(join(workDir, 'run-report.summary.txt'));
 const cleanup: { command: string; exitCode: number | null }[] = [];
 let reservationRecovery: { status: string; reason: string; released?: number } = {
@@ -168,21 +186,23 @@ if (workflowStatus !== 'done' || runSummary?.startsWith('no-content:')) {
             run?: { runId?: string; workflowName?: string; status?: string; startedAt?: string };
             events?: { kind?: string; node?: string; status?: string }[];
         };
-        const sendNodes = new Set([
-            'publish-surfdash',
-            'publish-podcast',
-            'xhs-publish',
-            'wechat-publish',
-            'translate-localize',
-            'translate',
-            'translate-retry',
-            'translate-sync',
-            'publish-classify',
-        ]);
+        const sendNodes = isVoice3
+            ? new Set(['publish', 'send', 'send-retry', 'repair', 'send-confirm'])
+            : new Set([
+                  'publish-surfdash',
+                  'publish-podcast',
+                  'xhs-publish',
+                  'wechat-publish',
+                  'translate-localize',
+                  'translate',
+                  'translate-retry',
+                  'translate-sync',
+                  'publish-classify',
+              ]);
         const validTrace =
             trace.status === 0 &&
             parsed.run?.runId === runId &&
-            parsed.run?.workflowName === 'kk-daily-ai-voice2' &&
+            parsed.run?.workflowName === values.workflow &&
             parsed.run?.status === (workflowStatus === 'done' ? 'done' : 'failed') &&
             Date.parse(parsed.run.startedAt ?? '') >= Date.parse(startedAt) - 1000 &&
             Date.parse(parsed.run.startedAt ?? '') <= Date.now() &&
@@ -227,7 +247,7 @@ if (workflowStatus !== 'done' || runSummary?.startsWith('no-content:')) {
         // potentially aired story. Keep the reservation and the original failure visible.
     }
 }
-const ledger = spawnSync('kk', ['ledger', 'sync', '--workflow', 'kk-daily-ai-voice2', '--work-dir', workDir], {
+const ledger = spawnSync('kk', ['ledger', 'sync', '--workflow', values.workflow, '--work-dir', workDir], {
     cwd: repo,
     encoding: 'utf-8',
     timeout: 20000,
@@ -244,33 +264,63 @@ const requiredChannels = values['required-channels']
     .split(',')
     .map((channel) => channel.trim())
     .filter(Boolean);
-let channelCompleteness: { channel: string; state: string; detail?: string }[] = [];
+let channelCompleteness: { channel: string; state: string; detail?: string; required?: boolean; dummy?: boolean }[] =
+    [];
 try {
-    const parsed = JSON.parse(
-        readOptional(join(workDir, '31-publish', `${stamp}_17_publish_completeness.json`)) ?? 'null',
-    ) as { rows?: unknown } | null;
-    if (Array.isArray(parsed?.rows)) {
-        channelCompleteness = parsed.rows.filter(
-            (row): row is { channel: string; state: string; detail?: string } =>
-                row !== null &&
-                typeof row === 'object' &&
-                typeof row.channel === 'string' &&
-                typeof row.state === 'string',
-        );
+    if (isVoice3) {
+        const outcome = JSON.parse(
+            readOptional(join(workDir, '4-publish', 'outcome.after-generate.json')) ?? 'null',
+        ) as { rows?: unknown } | null;
+        if (Array.isArray(outcome?.rows)) {
+            channelCompleteness = outcome.rows.flatMap(
+                (row): { channel: string; state: string; required: boolean; dummy: boolean }[] => {
+                    if (row === null || typeof row !== 'object') return [];
+                    const r = row as { id?: unknown; required?: unknown; dummy?: unknown; status?: unknown };
+                    if (typeof r.id !== 'string' || typeof r.status !== 'string') return [];
+                    return [
+                        {
+                            channel: r.id,
+                            state: r.status === 'succeeded' ? 'done' : r.status,
+                            required: r.required === true,
+                            dummy: r.dummy === true,
+                        },
+                    ];
+                },
+            );
+        }
+    } else {
+        const parsed = JSON.parse(
+            readOptional(join(workDir, '31-publish', `${stamp}_17_publish_completeness.json`)) ?? 'null',
+        ) as { rows?: unknown } | null;
+        if (Array.isArray(parsed?.rows)) {
+            channelCompleteness = parsed.rows.filter(
+                (row): row is { channel: string; state: string; detail?: string } =>
+                    row !== null &&
+                    typeof row === 'object' &&
+                    typeof row.channel === 'string' &&
+                    typeof row.state === 'string',
+            );
+        }
     }
 } catch {}
-const missingRequiredChannels = requiredChannels.filter((channel) => {
-    const rows = channelCompleteness.filter((row) => row.channel === channel);
-    return rows.length !== 1 || rows[0]?.state !== 'done';
-});
+const missingRequiredChannels = isVoice3
+    ? channelCompleteness
+          .filter((row) => row.required === true && row.dummy !== true)
+          .filter((row) => row.state !== 'done')
+          .map((row) => row.channel)
+    : requiredChannels.filter((channel) => {
+          const rows = channelCompleteness.filter((row) => row.channel === channel);
+          return rows.length !== 1 || rows[0]?.state !== 'done';
+      });
 // A terminal green workflow can mean "no content" or failed delivery. Make that observable to
 // the scheduler instead of equating the workflow's process exit with a published edition.
+// A voice3 outcome classified 'full' already proves every non-dummy row succeeded (0326 R2).
 const status =
     workflowStatus !== 'done'
         ? workflowStatus
         : runSummary?.startsWith('no-content:')
           ? 'no-content'
-          : primaryPublishStatus === 'full' && missingRequiredChannels.length === 0
+          : primaryPublishStatus === 'full' && !(!isVoice3 && missingRequiredChannels.length > 0)
             ? 'done'
             : 'incomplete';
 const receipt = {

package/plugins/kk/scripts/daily-stages.ts

@@ -1726,7 +1726,15 @@ export function buildWechatArticleContent(
     return {
         ...article,
         body: options.appendOutro === false ? body : `${body}${WECHAT_OUTRO}`,
-        metadata: { ...metadataOf(article), publishStatus: options.publishStatus, wechatmp },
+        metadata: {
+            ...metadataOf(article),
+            // wechatmp-pub's 播客 operation resolves the episode mp3 through the generic media key
+            // `metadata.audio` (`modes.ts` resolveMediaPath), while the 文章 audio-embed rail keeps
+            // reading `wechatmp.audioPath` — carry both spellings so one variant serves both rows.
+            ...(options.audioPath === undefined ? {} : { audio: options.audioPath }),
+            publishStatus: options.publishStatus,
+            wechatmp,
+        },
     };
 }
 
@@ -1800,9 +1808,24 @@ export function buildPodcastContent(
  *
  * surfdash is the article's own publisher, so it consumes what `22-article` already composed — the
  * builder exists so the variant set is uniform, not because it reshapes anything.
+ *
+ * surfdash-pub's `post` operation refuses a digest post without `metadata.coverImage`
+ * (surfdash-pub/src/index.ts), so the run's cover rides along exactly as the episode/wechat
+ * builders stamp it. voice2's prepare mode never exercised this gate; the frozen-bundle matrix
+ * send surfaced it on 2026-11-05 (empty run → 'digest post has no cover image').
  */
-export function buildSurfdashContent(article: Record<string, unknown>, _links: PublishLinks): Record<string, unknown> {
-    return { ...article };
+export function buildSurfdashContent(
+    article: Record<string, unknown>,
+    _links: PublishLinks,
+    options: { coverPath?: string } = {},
+): Record<string, unknown> {
+    return {
+        ...article,
+        metadata: {
+            ...metadataOf(article),
+            ...(options.coverPath === undefined ? {} : { coverImage: options.coverPath }),
+        },
+    };
 }
 
 /**
@@ -1933,7 +1956,7 @@ export function dailyBundleVariants(args: string[]): void {
         const cardsPath = join(workDir, '25-xhs', 'content.json');
         const coverPath = join(workDir, '23-cover', `${runDate}_07_cover_cover.png`);
         const socialDir = join(workDir, '26-social');
-        const cover = coverEnabledArg !== 'false' && isFile(coverPath) ? coverPath : undefined;
+        const cover = coverEnabledArg !== 'false' && isFile(coverPath) ? resolve(coverPath) : undefined;
         const links = PLACEHOLDER_LINKS;
         const written: string[] = [];
         const skipped: string[] = [];
@@ -1950,8 +1973,8 @@ export function dailyBundleVariants(args: string[]): void {
         // shared copy must exist for the channels the preset does not specialise.
         if (article === null) skipped.push('article (no 22-article content)');
         else {
-            write('article', buildSurfdashContent(article, links));
-            write('article@surfdash-pub', buildSurfdashContent(article, links));
+            write('article', buildSurfdashContent(article, links, { coverPath: cover }));
+            write('article@surfdash-pub', buildSurfdashContent(article, links, { coverPath: cover }));
             write('article@xhs-pub', buildXhsArticleContent(article, { publishStatus: 'draft' }));
             write(
                 'article@wechatmp-pub',
@@ -3618,9 +3641,13 @@ export function dailySafetyPrep(args: string[]): void {
             if (isFile(scriptPath))
                 sted('write', snapshot, () => writeRaw(snapshot, readFileSync(scriptPath, 'utf-8')));
         } else {
-            // The remediation budget belongs to this scope's attempt, not to the day.
+            // The remediation budget belongs to this scope's attempt, not to the day. The machine
+            // re-enters this state once per remediation loop, so initializing unconditionally
+            // reset the budget every cycle and the loop could never classify its residue
+            // (20261105 dogfood: the nested variants review revised forever). Like the drafts
+            // scope, only the FIRST entry initializes.
             const counter = scopeCounter(workDir, scopeDir);
-            sted('write', counter, () => writeFileSync(counter, '0\n'));
+            if (!isFile(counter)) sted('write', counter, () => writeFileSync(counter, '0\n'));
         }
         for (const name of [
             'safety-review_report.json',
@@ -3693,7 +3720,14 @@ export function dailySafetyRevise(args: string[]): void {
         if (!drafts) {
             // Variants scope: every manifest-listed file must stay parseable Content with the
             // fields the publish half reads; the structural VoiceScript machinery does not apply.
-            for (const entry of Object.values(readManifest(workDir).variants)) {
+            // Refresh each entry's sha256 to the post-remediation bytes: the manifest is the
+            // contract the request/digest/stamp resolve through, so leaving the pre-remediation
+            // digests in place made every re-review report a request-integrity mismatch and the
+            // loop spin (20261105 dogfood). Structural drift above the hash level stays owned by
+            // daily-bundle-variants (never run here).
+            const manifestPath = join(workDir, SAFETY_VARIANTS_DIR, 'manifest.json');
+            const manifest = readManifest(workDir);
+            for (const [key, entry] of Object.entries(manifest.variants)) {
                 const path = join(workDir, entry.path);
                 const value = requireJson(path, 'safety-revise') as {
                     title?: unknown;
@@ -3704,7 +3738,16 @@ export function dailySafetyRevise(args: string[]): void {
                         failWith(1, `safety-revise: variant ${path} ${field} must be a non-empty string`);
                     }
                 }
+                entry.sha256 = createHash('sha256').update(readFileSync(path)).digest('hex');
+                manifest.variants[key] = entry;
             }
+            sted('write', manifestPath, () =>
+                writeJsonText(manifestPath, {
+                    schemaVersion: manifest.schemaVersion,
+                    runDate: manifest.runDate,
+                    variants: manifest.variants,
+                }),
+            );
             const counter = scopeCounter(workDir, scopeDir);
             const next = readScopeCounter(workDir, scopeDir) + 1;
             sted('write', counter, () => writeFileSync(counter, `${next}\n`));

package/plugins/kk/skills/content-safety/references/platforms/podcast-salty.md

@@ -0,0 +1,41 @@
+# Salty Podcast (podcast-salty) — platform reference
+
+`podcast.salty.vip` 是本项目自有的播客站点（Robin Min 自有域名，microfeed 实例，节目「每日AI乱炖」，RSS `/rss/`）。
+这是**自有渠道**，不是第三方分发平台：没有平台审核队列、字级词表或收听量干预可引用。
+本文件存在的意义是把「自有播客宿主没有平台规则」这件事写清楚，避免审核流程把「无三方平台规则」
+误判成证据缺口并默认 BLOCK。
+
+| Field | Value |
+|-------|-------|
+| Official source | 自有站点，无第三方协议页；本文件由站点维护者（Robin Min）本人核定 |
+| Scope | `podcast.salty.vip` 节目标题、音频、show notes、封面（RSS 输出随 item 状态变化） |
+| Effective date | 本文件创建日即生效（自有平台规则由维护者裁定） |
+| Last verified | 2026-11-05（创建） |
+| Evidence status | 维护者本人口径，非三方引用；无字级禁用词表 |
+
+## Evidence distinctions
+
+- **维护者裁定（本文件的权威来源）**：播客节目是自有域名下的小型日更节目，采用与本项目其他
+  渠一致的通用内容纪律；没有平台方提供的可引用条款。
+- **与 apple-podcasts 的边界（AP-06 不在此生效）**：Apple Podcasts 目录收录是第三方目录的准入
+  问题，由维护者人工决定，不由本 pipeline 控制；本 host 的 RSS 只是自有分发的出口。对未核实
+  的估值/数字，节目文案应保持项目既有的 hedging 与出处注明（这是事实纪律，不是平台准入规则），
+  但**不要**因为「聚合页转述未读原文」而 block——那属于 sourcing note，由维护者自行复核。
+- **通用纪律（沿用技能默认）**：AI 声明、来源可靠性、隐私/PII、医疗/投资类内容红线全部沿用
+  技能 default；本文件不新增平台规则。
+
+## Review items
+
+| ID | Item | Grade |
+|----|------|-------|
+| PS-01 | 来源诚实性：show notes 中的对外引用（媒体/论文/Blog）须给出真实出处；转述链保持既有 hedging；未读原文的聚合转述记 note，不 push block。 | note |
+| PS-02 | 数字与事实核对：与源链接一致的数字/日期/机构名冲突时按技能通用规则处理（correctable → revise；冲突无解 → block）。 | note→judge |
+| PS-03 | 可识别个人信息（听众或第三方的私人信息） | desensitize→block if unfixable |
+| PS-04 | 医疗/投资劝诱内容技能默认红线不变（未核实估值→保持 hedging 并注明出处，而非删除条目）。 | default |
+
+## Open questions / escalation
+
+- 自有播客无第三方审核 → 本文件不应产生 `evidenceGap: true` 类 BLOCK；任何「podcast-salty 无
+  reference 文件」的发现都指向本文件缺失，而不是内容风险。
+- 若未来节目上线商业化、赞助或接入第三方目录（Apple/小宇宙实际分配），本文件需要为相应渠道
+  追加准入条款。

package/plugins/kk/skills/content-safety/references/platforms/surfdash.md

@@ -0,0 +1,36 @@
+# Salty Talk / Surfing (surfdash) — platform reference
+
+`surfing.salty.vip` 是本项目自有的静态发布站点（Robin Min 自有域名，栏目「AI 乱炖」，zh/en/ja 三语）。
+这是**自有渠道**，不是第三方分发平台：没有平台审核队列、字级词表或 AI 标注接口可引用。
+本文件存在的意义是把「自有站点没有平台规则」这件事写清楚，避免审核流程把「无三方平台规则」
+误判成证据缺口并默认 BLOCK。
+
+| Field | Value |
+|-------|-------|
+| Official source | 自有站点，无第三方协议页；本文件由站点维护者（Robin Min）本人核定 |
+| Scope | `surfing.salty.vip` 文章页（正文、frontmatter 的 title/description/key_points/cover） |
+| Effective date | 本文件创建日即生效（自有平台规则由维护者裁定） |
+| Last verified | 2026-11-05（创建） |
+| Evidence status | 维护者本人口径，非三方引用；无字级禁用词表 |
+
+## Evidence distinctions
+
+- **维护者裁定（本文件的权威来源）**：站点是自有域名下的小型技术/资讯栏目，采用与本项目其他
+  台一致的通用内容纪律；没有平台方提供的可引用条款。
+- **通用纪律（沿用技能默认）**：披露/AI 声明、来源可靠性、隐私/PII、医疗/投资类内容红线全部
+  沿用技能 default；本文件不新增平台规则。
+
+## Review items
+
+| ID | Item | Grade |
+|----|------|-------|
+| SD-01 | 来源诚实性：对外引用（媒体/论文/Blog）须给出真实出处链接；「综述性转述未读原文」是 sourcing gap，按 note 记录并在站点正文保持既有 hedging；**不要**因为转述来自聚合页/未读原文而 block——这与 apple-podcasts 的 AP-06 严格度不同，自有站点由维护者自行判断并复核。 | note |
+| SD-02 | 数字与事实核对：与源链接一致的数字/日期/机构名出现冲突时按技能通用规则处理（correctable → revise；冲突无解 → block）。 | note→judge |
+| SD-03 | 可识别个人信息（听众或第三方的私人信息、联系方式、住址等） | desensitize→block if unfixable |
+| SD-04 | roku/医疗/投资劝诱内容技能默认红线不变（本文件不放开任何默认红线）。 | default |
+
+## Open questions / escalation
+
+- 自有站点无第三方审核 → 本文件不应产生 `evidenceGap: true` 类 BLOCK；任何「surfdash 无 reference
+  文件」的发现都指向本文件缺失，而不是内容风险。
+- 若未来站点引入广告或国家安全审查类规则，本文件需要更新。

package/plugins/kk/skills/content-safety/references/platforms/xhs.md

@@ -0,0 +1,39 @@
+# 小红书 (Xiaohongshu / xhs) — platform reference
+
+Review-item IDs here are **this skill's bookkeeping numbers**, not official platform rule codes.
+与 xiaoyuzhou.md 同一格式约定：这是本技能基于操作者已核验证据的保守立场，不是平台条文。
+
+| Field | Value |
+|-------|-------|
+| Official source | <https://www.xiaohongshu.com/community/>（社区公约/创作细则入口，多级页面） |
+| Scope | 笔记（图文/视频长文）、封面图、话题标签、昵称简介 |
+| Effective date | unknown（社区公约页面未标注可引用的版本生效日期） |
+| Last verified | 2026-11-05（写本文件时按操作者已有账号审查经验整理，未逐字读官方更新后全文） |
+| Evidence status | **未获官方逐字条文**；以下审核项是本技能的保守立场，不是平台条文；与小宇宙 0189 事件类似，任何具体下架理由以官方为主，本技能按保守项判断 |
+
+## Evidence distinctions
+
+- **官方规则（已知存在，未逐字核对）**：小红书有《社区公约》与《创作规范》，对违法违规、医疗
+  健康、财产投资、隐私、低质同质化、AI 生成内容有原则性条款；公开文本不提供逐字词表。
+- **操作者经验（保守立场来源）**：账号为个人技术分享（栏目「AI 乱炖」衍生），非新闻机构、无
+  医疗/金融资质、不带货；发帖以图文长文/播客预告为主。
+- **编辑建议（本技能）**：以下审核项是本技能基于上述证据的保守立场，不是平台条文。
+
+## Review items
+
+| ID | Item | Grade |
+|----|------|-------|
+| XH-01 | 资质口径：不得呈现「新闻资讯播报」形态或暗示持有新闻资质（技术/科普类分享不受影响；同 xiaoyuzhou.md XY-01 的操作者裁定 2026-10-10，按 note 记录，不逐集 escalate）。 | note |
+| XH-02 | 医疗健康/药品/诊疗建议：以医疗结论、疗效、用药指导为主线的内容（本栏目主题为 AI 技术/产业资讯，正常不会触发；一旦触发按 block）。 | block |
+| XH-03 | 投资/理财：以个股买卖建议、收益承诺为主线的内容（对 quadrature/Anthropic 等估值表述属于普通事实转述，不是建议；命中后再 judge）。 | block |
+| XH-04 | AI 生成内容标识：平台对 AI 生成内容有标注要求（** 未逐字核对当前接口规则，按公共常见要求保守处理**）。本栏目发布为「AI 辅助创作」的播客预告/图文 —— 操作者已在账号简介披露 AI 辅助；单条内容不再逐条 escalate。 | note |
+| XH-05 | 可识别个人信息（听众或第三方的私人信息、联系方式、住址等） | desensitize→block if unfixable |
+| XH-06 | 时政/公共事务主线：同 xiaoyuzhou.md XY-02（政策管制、军事、公共政策争议为主线的内容按 block）。 | block |
+
+## Open questions / escalation
+
+- 无官方字级词表 → 任何「词命中即下架」的断言都不成立；同理，无词表不等于安全。
+- AI 标注、内容审核新规变化频繁 → 每次提审前按 XH-04 复核；`RISK` 或证据缺口一律人工复审
+  （`escalate: true`），不得静默 PASS。
+- 资质口径、时政主线与个人信息的红线全部沿用技能默认，本文件只 diminute XH-04 的逐条 escalate
+  （业务上固定披露已存在）。

package/plugins/kk/workflows/kk-collect.yaml

@@ -48,10 +48,10 @@ states:
     onEnter:
       - kind: shell
         options:
-          # Reporting only: a ledger failure must never abort a tick before the lock is even taken.
-          onError: continue
           command: >-
             kk ledger sync --workflow kk-collect
+        # Reporting only: a ledger failure must never abort a tick before the lock is even taken.
+        onError: continue
       - kind: shell
         options:
           # stamp: the pinned var, else the UTC minute (R4). work_dir: `.works/kk-collect/<stamp>` (R4),
@@ -92,13 +92,13 @@ states:
         # revocation warns (captured:false) and only disables Board previews.
         # onError: continue keeps the lock-releasing failure path intact instead of a hard abort.
         options:
-          onError: continue
           command: >-
             kk board capture --workflow kk-collect --run "${vars.__runId}"
             --work-dir "${vars.work_dir}" --stamp "${vars.stamp}"
             --definition-digest "${vars.__definitionDigest}"
             --setting "limit=${vars.limit}" --setting "horizon_hours=${vars.horizon_hours}"
             > "${vars.work_dir}/board-capture.json"
+        onError: continue
       - kind: shell
         # onError: continue on both ingestion actions, with the artifact guard below as the positive
         # success contract: a state-machine aborts the run on a failed action without taking a