@gobing-ai/knowledge-kit 0.1.12 → 0.1.14

package/plugins/kk/workflows/kk-collect.yaml

@@ -48,10 +48,10 @@ states:
     onEnter:
       - kind: shell
         options:
-          # Reporting only: a ledger failure must never abort a tick before the lock is even taken.
-          onError: continue
           command: >-
             kk ledger sync --workflow kk-collect
+        # Reporting only: a ledger failure must never abort a tick before the lock is even taken.
+        onError: continue
       - kind: shell
         options:
           # stamp: the pinned var, else the UTC minute (R4). work_dir: `.works/kk-collect/<stamp>` (R4),
@@ -92,13 +92,13 @@ states:
         # revocation warns (captured:false) and only disables Board previews.
         # onError: continue keeps the lock-releasing failure path intact instead of a hard abort.
         options:
-          onError: continue
           command: >-
             kk board capture --workflow kk-collect --run "${vars.__runId}"
             --work-dir "${vars.work_dir}" --stamp "${vars.stamp}"
             --definition-digest "${vars.__definitionDigest}"
             --setting "limit=${vars.limit}" --setting "horizon_hours=${vars.horizon_hours}"
             > "${vars.work_dir}/board-capture.json"
+        onError: continue
       - kind: shell
         # onError: continue on both ingestion actions, with the artifact guard below as the positive
         # success contract: a state-machine aborts the run on a failed action without taking a

package/plugins/kk/workflows/kk-daily-ai-voice2.yaml

@@ -221,10 +221,10 @@ nodes:
     action:
       kind: shell
       options:
-        onError: continue
         command: >-
           kk plugin check wechatmp-pub xhs-pub --timeout 60000
           || echo "session-preflight: a publish channel's saved session was refused — fix it before this run's publish step with: bun plugins/publishings/<channel>-pub/src/profile-check.ts login (wechatmp or xhs)"
+      onError: continue
 
   - id: extract
     description: >-
@@ -689,7 +689,7 @@ nodes:
       options:
         command: >-
           kk stage daily-voice-audit "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
-        onError: continue
+      onError: continue
 
   - id: duration
     description: "Measured duration gate: under episode_min_minutes the run refuses and closes as no-content (refusal artifact + emptied candidates, exit 0 — 0266); above episode_max_minutes it still fails loud. Duration is authoritative."
@@ -839,15 +839,6 @@ nodes:
     action:
       kind: agent.run
       options:
-        # 20261012 hardening: this is the LAST agent step and a translation failure must not abort
-        # the overall report/podcast close, yet the step carried no tolerance and no retry sibling — a stochastic
-        # executor failure here aborted the DAG *after* surfdash and podcast had published, so
-        # publish-classify, mark-published, run-report and ledger never ran for an otherwise complete
-        # day. Tolerating the failure is safe because a scaffold is an unpublished draft: the prompt
-        # below is what flips `draft: true` → `draft: false`, so an untranslated locale stays off the
-        # site, and `daily-publish-completeness` now reads that flag and reports the locale as failed
-        # instead of calling a scaffold `done`.
-        onError: continue
         role: scribe
         agent: ${vars.agent}
         timeoutMs: 600000
@@ -863,6 +854,15 @@ nodes:
           Series names are fixed product identity, never invented or freely translated: the en series name is "Daily AI Stew" (show "Salty Talk"); the ja series name is "デイリーAIシチュー" (show "咸話咸説"). Never emit 毎日AIブレンド, ごった煮, "Daily AI Medley", "hodgepodge", "Daily AI Briefing", or the zh name 每日AI乱炖 in en/ja prose or link text (a URL keeps whatever it contains). Openers: en "Your Daily AI Stew from Robin, on Salty Talk."; ja "咸話咸説のデイリーAIシチュー、Robin がお届けします。" Listen links: en "[listen to Daily AI Stew · <date>](<url>)", ja "[デイリーAIシチュー · <date> を聴く](<url>)". In each key_points item keep the "Label — sentence" shape: the label before " — " stays a short phrase of at most 14 characters (ja) / 28 (en), never truncated with "…". The local translate-validate stage rewrites known retired names deterministically and fails the publish gate on leftovers.
           Keep frontmatter valid YAML: double-quote any value containing ': '. Read the surfdash translator glossary if present at the surfdash checkout root under .agents/skills/surfdash-translator/glossary.md and apply its terminology.
           Do not wait for operator confirmation. Each written file must end fully in its target language.
+      # 20261012 hardening: this is the LAST agent step and a translation failure must not abort
+      # the overall report/podcast close, yet the step carried no tolerance and no retry sibling — a stochastic
+      # executor failure here aborted the DAG *after* surfdash and podcast had published, so
+      # publish-classify, mark-published, run-report and ledger never ran for an otherwise complete
+      # day. Tolerating the failure is safe because a scaffold is an unpublished draft: the prompt
+      # above is what flips `draft: true` → `draft: false`, so an untranslated locale stays off the
+      # site, and `daily-publish-completeness` now reads that flag and reports the locale as failed
+      # instead of calling a scaffold `done`.
+      onError: continue
 
   # 2026-10-24: the locale translation carried `onError: continue` with NO retry sibling, so a
   # failed executor left the en/ja drafts untranslated and the old sync stage could not distinguish
@@ -880,11 +880,11 @@ nodes:
     action:
       kind: agent.run
       options:
-        onError: continue
         role: reviewer
         agent: ${vars.agent_retry}
         timeoutMs: 600000
         input: *translate-input
+      onError: continue
 
   - id: translate-refine
     description: "Run the Surfdash-owned refine pass over zh/en/ja locally before the locale fingerprint is admitted; no CMS, git, or remote side effect"

package/plugins/kk/workflows/kk-daily-ai-voice3.yaml

@@ -194,10 +194,10 @@ nodes:
     action:
       kind: shell
       options:
-        onError: continue
         command: >-
           kk stage run publish-matrix-check "${vars.work_dir}" --all-windows
           || echo "session-preflight: a publish channel's saved session was refused — fix it with: kk bot login <channel>"
+      onError: continue
 
   - id: extract
     description: >-
@@ -695,7 +695,7 @@ nodes:
       options:
         command: >-
           kk stage daily-voice-audit "${vars.work_dir}" "${vars.run_date}" "${vars.plugins_path}"
-        onError: continue
+      onError: continue
 
   - id: duration
     description: "Measured duration gate: under episode_min_minutes the run refuses and closes as no-content (refusal artifact + emptied candidates + publish-path invalidation, exit 0 — 0266/0329); above episode_max_minutes it still fails loud. Duration is authoritative."

package/plugins/publishings/surfdash-pub/dist/index.js

@@ -12798,11 +12798,14 @@ function resolveSurfdashRoot() {
   return process.env.SURFDASH_ROOT ?? (postsurfingBin.includes("/") ? resolve(dirname3(dirname3(postsurfingBin))) : undefined);
 }
 async function spawnCli(cmd, cwd) {
+  const env = { ...process.env };
+  for (const key of ["SPUR_WORKFLOW_RUN_ACTIVE", "SPUR_EXPECTED_DEFINITION_DIGEST"])
+    delete env[key];
   const proc = Bun.spawn(cmd, {
     cwd,
     stdout: "pipe",
     stderr: "pipe",
-    env: process.env
+    env
   });
   const [exitCode, stdout, stderr] = await Promise.all([
     proc.exited,
@@ -12896,7 +12899,30 @@ function extractFailingPostHint(text) {
     return;
   return match[0].replace(/[.,;]+$/, "");
 }
-async function runSiteGate(surfdashRoot) {
+function extractPostDates(paths) {
+  const dates = new Set;
+  for (const p of paths) {
+    const m = p.replaceAll("\\", "/").match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+    if (m?.[1])
+      dates.add(m[1]);
+  }
+  return dates;
+}
+function isUnrelatedDatePostFailure(output, ownedPaths) {
+  const ownedDates = extractPostDates(ownedPaths);
+  if (ownedDates.size === 0)
+    return false;
+  const failingHints = [...output.matchAll(/(?:content[\\/])?posts[\\/][^\s:)]+/g)].map((m) => m[0].replace(/[.,;]+$/, ""));
+  if (failingHints.length === 0)
+    return false;
+  for (const hint of failingHints) {
+    const m = hint.replaceAll("\\", "/").match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+    if (!m?.[1] || ownedDates.has(m[1]))
+      return false;
+  }
+  return true;
+}
+async function runSiteGate(surfdashRoot, ownedPaths = []) {
   if (process.env.SURFDASH_DIGEST_CHECK === "off") {
     return { ok: true };
   }
@@ -12907,7 +12933,7 @@ async function runSiteGate(surfdashRoot) {
       const postHint = extractFailingPostHint(output);
       const hint = postHint ? ` [failing post: ${postHint}]` : "";
       const error = `site gate failed: ${cmd.join(" ")} (exit ${spawned.exitCode})${hint}: ${output}`;
-      if (process.env.SURFDASH_DIGEST_CHECK === "warn") {
+      if (process.env.SURFDASH_DIGEST_CHECK === "warn" || isUnrelatedDatePostFailure(output, ownedPaths)) {
         for (const line of error.split(`
 `)) {
           echoError(`site gate (warn): ${line}`);
@@ -13172,7 +13198,7 @@ async function patchPost(options) {
     const backfilled = await runListenLinkBackfill(surfdashRoot);
     for (const p of backfilled)
       commitPaths.add(p);
-    const gate = await runSiteGate(surfdashRoot);
+    const gate = await runSiteGate(surfdashRoot, [...commitPaths, relative(surfdashRoot, postPath.postPath)]);
     if (!gate.ok)
       return fail(gate.error);
   }
@@ -13338,9 +13364,8 @@ async function preparePost(payload) {
     return { ok: false, result: failNotSent(`SURFDASH_LOCALE must be one of zh/en/ja, got '${rawLocale}'`) };
   }
   const locale = rawLocale;
-  const runDate = typeof payload.content.metadata?.runDate === "string" ? payload.content.metadata.runDate : "";
-  const today = new Date().toISOString().slice(0, 10).replaceAll("-", "");
-  const dateStamp = runDate || today;
+  const runDate = typeof payload.content.metadata?.runDate === "string" && payload.content.metadata.runDate !== "" ? payload.content.metadata.runDate : typeof payload.content.metadata?.date === "string" ? payload.content.metadata.date.replaceAll("-", "") : "";
+  const dateStamp = runDate || new Date().toISOString().slice(0, 10).replaceAll("-", "");
   const titleSlug = slugify2(payload.content.title ?? "");
   const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
   if (runDate !== "" && !/^\d{8}$/.test(runDate)) {
@@ -13367,20 +13392,24 @@ async function preparePost(payload) {
   }
   const filePath = join2(postDir, "index.md");
   try {
-    await createNodeFileSystem().ensureDir(postDir);
-    let imageFrontmatter;
-    if (typeof coverPath === "string") {
-      const assetsDir = join2(postDir, "assets");
-      await createNodeFileSystem().ensureDir(assetsDir);
-      const coverName = `cover${extname(coverPath).toLowerCase()}`;
-      await copyFile(coverPath, join2(assetsDir, coverName));
-      imageFrontmatter = `./assets/${coverName}`;
-    }
-    const markdown = mapContentToSurfingMarkdown(payload.content, {
-      image: imageFrontmatter,
-      publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined
-    });
-    await createNodeFileSystem().writeFile(filePath, markdown);
+    if (readRefinedSnapshot(filePath) === undefined) {
+      await createNodeFileSystem().ensureDir(postDir);
+      let imageFrontmatter;
+      if (typeof coverPath === "string") {
+        const assetsDir = join2(postDir, "assets");
+        await createNodeFileSystem().ensureDir(assetsDir);
+        const coverName = `cover${extname(coverPath).toLowerCase()}`;
+        await copyFile(coverPath, join2(assetsDir, coverName));
+        imageFrontmatter = `./assets/${coverName}`;
+      }
+      const markdown = mapContentToSurfingMarkdown(payload.content, {
+        image: imageFrontmatter,
+        publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined
+      });
+      await createNodeFileSystem().writeFile(filePath, markdown);
+    } else {
+      echoError(`surfdash-pub: keeping existing refined post at ${filePath} (not re-minting)`);
+    }
   } catch (err) {
     return {
       ok: false,
@@ -13461,10 +13490,10 @@ async function publishPreparedFile(prepared, identity) {
       });
     }
     const backfilled = await runListenLinkBackfill(surfdashRoot);
-    const gate = await runSiteGate(surfdashRoot);
+    const commitPaths = relPostDirs ?? [relPostDir];
+    const gate = await runSiteGate(surfdashRoot, [...commitPaths, ...backfilled]);
     if (!gate.ok)
       return failUncertain(gate.error);
-    const commitPaths = relPostDirs ?? [relPostDir];
     const commitLocales = relPostDirs === undefined ? [locale] : ["zh", "en", "ja"];
     const pushed = await pushPostGit(surfdashRoot, commitPaths, `content: daily AI news ${dateStamp} (${commitLocales.join(", ")})`, backfilled);
     if (!pushed.ok)

package/plugins/publishings/surfdash-pub/src/index.ts

@@ -316,11 +316,16 @@ interface CliSpawnResult {
 
 /** One spawn helper for every CLI-backed operation (postsurfing publish / sd translate / orchestrator sync). */
 async function spawnCli(cmd: string[], cwd: string): Promise<CliSpawnResult> {
+    // postsurfing runs a nested spur workflow in the surfdash repo; a kk publish3 step shell carries
+    // the engine's single-flight guard vars, and the guard would refuse that nested run. Same
+    // escape the kk-daily-ai-voice3 safety node uses for its intentional nesting.
+    const env = { ...process.env };
+    for (const key of ['SPUR_WORKFLOW_RUN_ACTIVE', 'SPUR_EXPECTED_DEFINITION_DIGEST']) delete env[key];
     const proc = Bun.spawn(cmd, {
         cwd,
         stdout: 'pipe',
         stderr: 'pipe',
-        env: process.env,
+        env,
     });
     const [exitCode, stdout, stderr] = await Promise.all([
         proc.exited,
@@ -471,17 +476,41 @@ export function extractFailingPostHint(text: string): string | undefined {
     return match[0].replace(/[.,;]+$/, '');
 }
 
+function extractPostDates(paths: readonly string[]): Set<string> {
+    const dates = new Set<string>();
+    for (const p of paths) {
+        const m = p.replaceAll('\\', '/').match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+        if (m?.[1]) dates.add(m[1]);
+    }
+    return dates;
+}
+
+function isUnrelatedDatePostFailure(output: string, ownedPaths: readonly string[]): boolean {
+    const ownedDates = extractPostDates(ownedPaths);
+    if (ownedDates.size === 0) return false;
+    const failingHints = [...output.matchAll(/(?:content[\\/])?posts[\\/][^\s:)]+/g)].map((m) =>
+        m[0].replace(/[.,;]+$/, ''),
+    );
+    if (failingHints.length === 0) return false;
+    for (const hint of failingHints) {
+        const m = hint.replaceAll('\\', '/').match(/(?:^|\/)posts\/articles\/(?:zh|en|ja)\/(\d{8})-/);
+        if (!m?.[1] || ownedDates.has(m[1])) return false;
+    }
+    return true;
+}
+
 /**
  * Runs the surfdash site gates (`bun run sd check digest` then `bun run check:content`)
  * with cwd = `surfdashRoot` via `spawnCli`.
  *
  * If either command exits non-zero:
- * - With `SURFDASH_DIGEST_CHECK=warn`: echoes each line of the failure via `echoError`
- *   prefixed with `site gate (warn):` and continues.
+ * - With `SURFDASH_DIGEST_CHECK=warn` (or when every failing post belongs to an unrelated date
+ *   outside `ownedPaths`): echoes each line of the failure via `echoError` prefixed with
+ *   `site gate (warn):` and continues.
  * - With `SURFDASH_DIGEST_CHECK=off`: skips the gate completely.
  * - Default (unset or any other value): fails loud with command, trimmed output, and post hint.
  */
-export async function runSiteGate(surfdashRoot: string): Promise<SiteGateOutcome> {
+export async function runSiteGate(surfdashRoot: string, ownedPaths: readonly string[] = []): Promise<SiteGateOutcome> {
     if (process.env.SURFDASH_DIGEST_CHECK === 'off') {
         return { ok: true };
     }
@@ -493,7 +522,7 @@ export async function runSiteGate(surfdashRoot: string): Promise<SiteGateOutcome
             const postHint = extractFailingPostHint(output);
             const hint = postHint ? ` [failing post: ${postHint}]` : '';
             const error = `site gate failed: ${cmd.join(' ')} (exit ${spawned.exitCode})${hint}: ${output}`;
-            if (process.env.SURFDASH_DIGEST_CHECK === 'warn') {
+            if (process.env.SURFDASH_DIGEST_CHECK === 'warn' || isUnrelatedDatePostFailure(output, ownedPaths)) {
                 for (const line of error.split('\n')) {
                     echoError(`site gate (warn): ${line}`);
                 }
@@ -846,7 +875,7 @@ async function patchPost(options: SurfdashPubOptions): Promise<Result> {
     if (process.env.SURFDASH_AUTO_PUSH !== '0') {
         const backfilled = await runListenLinkBackfill(surfdashRoot);
         for (const p of backfilled) commitPaths.add(p);
-        const gate = await runSiteGate(surfdashRoot);
+        const gate = await runSiteGate(surfdashRoot, [...commitPaths, relative(surfdashRoot, postPath.postPath)]);
         if (!gate.ok) return fail(gate.error);
     }
     const commit = await commitPostPaths(
@@ -1080,9 +1109,15 @@ async function preparePost(payload: PublishTransportPayload): Promise<PrepareOut
         return { ok: false, result: failNotSent(`SURFDASH_LOCALE must be one of zh/en/ja, got '${rawLocale}'`) };
     }
     const locale = rawLocale as SupportedLocale;
-    const runDate = typeof payload.content.metadata?.runDate === 'string' ? payload.content.metadata.runDate : '';
-    const today = new Date().toISOString().slice(0, 10).replaceAll('-', '');
-    const dateStamp = runDate || today;
+    // dateStamp source: explicit metadata.runDate, else the payload's own metadata.date —
+    // never the wall clock, which around midnight local time mints `tomorrow` slugs.
+    const runDate =
+        typeof payload.content.metadata?.runDate === 'string' && payload.content.metadata.runDate !== ''
+            ? payload.content.metadata.runDate
+            : typeof payload.content.metadata?.date === 'string'
+              ? payload.content.metadata.date.replaceAll('-', '')
+              : '';
+    const dateStamp = runDate || new Date().toISOString().slice(0, 10).replaceAll('-', '');
     const titleSlug = slugify(payload.content.title ?? '');
     const slug = titleSlug ? `${dateStamp}-${titleSlug}` : `${dateStamp}-post`;
     if (runDate !== '' && !/^\d{8}$/.test(runDate)) {
@@ -1111,20 +1146,30 @@ async function preparePost(payload: PublishTransportPayload): Promise<PrepareOut
 
     const filePath = join(postDir, 'index.md');
     try {
-        await createNodeFileSystem().ensureDir(postDir);
-        let imageFrontmatter: string | undefined;
-        if (typeof coverPath === 'string') {
-            const assetsDir = join(postDir, 'assets');
-            await createNodeFileSystem().ensureDir(assetsDir);
-            const coverName = `cover${extname(coverPath).toLowerCase()}`;
-            await copyFile(coverPath, join(assetsDir, coverName));
-            imageFrontmatter = `./assets/${coverName}`;
+        // A post the site's own refine step already marked is not ours to clobber: re-minting it
+        // replaces the refined canonical frontmatter (refine owns `refined`, `seo_title`, …) with
+        // generator defaults and flips an already-published day back to a draft. Keep the file and
+        // reuse it; only genuinely fresh days (no marker) get minted (2026-11-05 tier-0 rerun).
+        if (readRefinedSnapshot(filePath) === undefined) {
+            await createNodeFileSystem().ensureDir(postDir);
+            let imageFrontmatter: string | undefined;
+            if (typeof coverPath === 'string') {
+                const assetsDir = join(postDir, 'assets');
+                await createNodeFileSystem().ensureDir(assetsDir);
+                const coverName = `cover${extname(coverPath).toLowerCase()}`;
+                await copyFile(coverPath, join(assetsDir, coverName));
+                imageFrontmatter = `./assets/${coverName}`;
+            }
+            const markdown = mapContentToSurfingMarkdown(payload.content, {
+                image: imageFrontmatter,
+                publishDate: runDate
+                    ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}`
+                    : undefined,
+            });
+            await createNodeFileSystem().writeFile(filePath, markdown);
+        } else {
+            echoError(`surfdash-pub: keeping existing refined post at ${filePath} (not re-minting)`);
         }
-        const markdown = mapContentToSurfingMarkdown(payload.content, {
-            image: imageFrontmatter,
-            publishDate: runDate ? `${runDate.slice(0, 4)}-${runDate.slice(4, 6)}-${runDate.slice(6, 8)}` : undefined,
-        });
-        await createNodeFileSystem().writeFile(filePath, markdown);
     } catch (err: unknown) {
         return {
             ok: false,
@@ -1238,9 +1283,9 @@ async function publishPreparedFile(
             });
         }
         const backfilled = await runListenLinkBackfill(surfdashRoot);
-        const gate = await runSiteGate(surfdashRoot);
-        if (!gate.ok) return failUncertain(gate.error);
         const commitPaths = relPostDirs ?? [relPostDir];
+        const gate = await runSiteGate(surfdashRoot, [...commitPaths, ...backfilled]);
+        if (!gate.ok) return failUncertain(gate.error);
         const commitLocales: SupportedLocale[] = relPostDirs === undefined ? [locale] : ['zh', 'en', 'ja'];
         const pushed = await pushPostGit(
             surfdashRoot,