@gobing-ai/knowledge-kit 0.1.2 → 0.1.3

package/plugins/ingestions/karakeep-local/dist/index.js

@@ -27,7 +27,7 @@ var __esm = (fn, res, err) => () => {
 };
 var __require = import.meta.require;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors = __esm(() => {
   ErrorCode = {
@@ -38,7 +38,7 @@ var init_errors = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors();
@@ -61,13 +61,13 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
 var init_event_severity = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -85,7 +85,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -11611,7 +11611,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
   init_dist2();
@@ -11635,7 +11635,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -11653,11 +11653,11 @@ function createNodeFileSystem(root, paths) {
         const lines = buffer.split(/\r?\n/);
         buffer = lines.pop() ?? "";
         for (const line of lines) {
-          yield line;
+          yield { text: line, terminated: true };
         }
       }
       if (buffer.length > 0)
-        yield buffer;
+        yield { text: buffer, terminated: false };
     },
     writeFile: (path, content) => {
       ensureParentDir(path);
@@ -13857,7 +13857,7 @@ var ConfigError = class extends Error {
   }
 };
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.28+10b6b623ece42801/node_modules/@gobing-ai/ts-infra/dist/logger.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.30+72430983864a6768/node_modules/@gobing-ai/ts-infra/dist/logger.js
 var ROOT_CATEGORY = "app";
 function toLogTapeLevel(level) {
   return level === "warn" ? "warning" : level;
@@ -13926,14 +13926,14 @@ async function initializeLogger(options = {}) {
       throw error;
   }
 }
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 init_file_system_node();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/path.js
 function normalizeSeparators(path) {
   return path.replaceAll("\\", "/");
 }
@@ -13950,7 +13950,7 @@ function joinPath(...segments) {
   return absolute ? joined : joined.replace(/^\//, "");
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 async function walkDir(path, fs = createNodeFileSystem(), exclude) {
   const startReal = fs.realPath?.(path) ?? path;
   const visited = new Set([startReal]);

package/plugins/ingestions/last30days-ingest/dist/index.js

@@ -4813,7 +4813,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors3 = __esm(() => {
   ErrorCode = {
@@ -4824,7 +4824,7 @@ var init_errors3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors3();
@@ -4847,13 +4847,13 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
 var init_event_severity = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -4871,7 +4871,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -11869,7 +11869,7 @@ var init_dist2 = __esm(() => {
   $visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
   init_dist2();
@@ -11893,7 +11893,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -11911,11 +11911,11 @@ function createNodeFileSystem(root, paths) {
         const lines = buffer.split(/\r?\n/);
         buffer = lines.pop() ?? "";
         for (const line of lines) {
-          yield line;
+          yield { text: line, terminated: true };
         }
       }
       if (buffer.length > 0)
-        yield buffer;
+        yield { text: buffer, terminated: false };
     },
     writeFile: (path, content) => {
       ensureParentDir(path);
@@ -12250,14 +12250,14 @@ var PluginManifestSchema = PluginManifestSchemaBase.superRefine((manifest, ctx)
     });
   }
 });
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 init_file_system_node();
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/path.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/path.js
 function normalizeSeparators(path) {
   return path.replaceAll("\\", "/");
 }
@@ -12291,7 +12291,7 @@ function dirnamePath(path) {
   return normalized.slice(0, index);
 }
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/fs.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/fs.js
 async function ensureDirForFile(path, fs = createNodeFileSystem()) {
   await fs.ensureDir(dirnamePath(path));
 }

package/plugins/ingestions/web-search/dist/index.js

@@ -4827,7 +4827,7 @@ var init_zod = __esm(() => {
   init_external();
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/errors.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/errors.js
 var ErrorCode;
 var init_errors3 = __esm(() => {
   ErrorCode = {
@@ -4838,7 +4838,7 @@ var init_errors3 = __esm(() => {
   };
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/api-response.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/api-response.js
 var API_ERROR_CODES, ERROR_CODE_TO_HTTP, CLIENT_SAFE_CODES;
 var init_api_response = __esm(() => {
   init_errors3();
@@ -4861,13 +4861,13 @@ var init_api_response = __esm(() => {
   CLIENT_SAFE_CODES = new Set([ErrorCode.NotFound, ErrorCode.Validation, ErrorCode.Conflict]);
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/cursor.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/cursor.js
 var init_cursor = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/event-severity.js
 var init_event_severity = () => {};
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/output.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/output.js
 function processStream(name) {
   const proc = globalThis.process;
   const stream = proc?.[name];
@@ -4885,7 +4885,7 @@ function echoError(message, target = defaultStderrTarget ?? processStream("stder
 }
 var defaultStderrTarget;
 
-// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.28/node_modules/@gobing-ai/ts-utils/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-utils@0.5.30/node_modules/@gobing-ai/ts-utils/dist/index.js
 var init_dist = __esm(() => {
   init_api_response();
   init_cursor();
@@ -11883,7 +11883,7 @@ var init_dist2 = __esm(() => {
   $visitAsync = visit.visitAsync;
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/config.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/config.js
 var configSchema;
 var init_config = __esm(() => {
   init_dist2();
@@ -11907,7 +11907,7 @@ var init_config = __esm(() => {
   });
 });
 
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/file-system-node.js
 import { appendFileSync, cpSync, createReadStream, createWriteStream, existsSync, mkdirSync, readdirSync, readFileSync, realpathSync, renameSync, rmSync, statSync, writeFileSync } from "fs";
 import { dirname, resolve as resolvePath } from "path";
 function createNodeFileSystem(root, paths) {
@@ -11925,11 +11925,11 @@ function createNodeFileSystem(root, paths) {
         const lines = buffer.split(/\r?\n/);
         buffer = lines.pop() ?? "";
         for (const line of lines) {
-          yield line;
+          yield { text: line, terminated: true };
         }
       }
       if (buffer.length > 0)
-        yield buffer;
+        yield { text: buffer, terminated: false };
     },
     writeFile: (path, content) => {
       ensureParentDir(path);
@@ -12269,7 +12269,7 @@ var PluginManifestSchema = PluginManifestSchemaBase.superRefine((manifest, ctx)
     });
   }
 });
-// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.28+531271cb50a1e275/node_modules/@gobing-ai/ts-runtime/dist/index.js
+// ../../node_modules/.bun/@gobing-ai+ts-runtime@0.5.30+fa3ca66e1fba4d51/node_modules/@gobing-ai/ts-runtime/dist/index.js
 init_file_system_node();
 init_config();
 
@@ -14400,7 +14400,7 @@ var ConfigError = class extends Error {
   }
 };
 
-// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.28+10b6b623ece42801/node_modules/@gobing-ai/ts-infra/dist/logger.js
+// ../../node_modules/.bun/@gobing-ai+ts-infra@0.5.30+72430983864a6768/node_modules/@gobing-ai/ts-infra/dist/logger.js
 var ROOT_CATEGORY = "app";
 function toLogTapeLevel(level) {
   return level === "warn" ? "warning" : level;

package/plugins/kk/commands/workflow-run.md

@@ -67,22 +67,26 @@ Resolve these before step 2: `NAME`, `TOPIC`, `INPUT_FILE` (empty in sentence mo
 
 ```bash
 install -d "$(dirname "$config_path")"
-cat > "$config_path" <<'EOF'
-works_dir: "$HOME/.config/kk/works"
-workflows_dir: "$HOME/.config/kk/workflows"
+cat > "$config_path" <<EOF
+works_dir: "$PWD/.works"
 defaults:
   maxResults: 8
   fixture: false
 EOF
 ```
 
+`workflows_dir` is deliberately omitted (ADR-042): the shipped fallback chain is the primary
+source, and a stale user override silently wins over newer package copies. `works_dir` is pinned
+to the CURRENT directory's `.works` at creation time — the compiled default is cwd-relative, and
+a headless/cron caller needs a fixed root.
+
 - **Unreadable / unparseable / invalid types** (e.g. `maxResults: "eight"`) → exit 1, stderr
   names the key and expected vs actual type; touch nothing.
 - Read the four values with precedence **command flag > env > file > compiled default**:
 
 | Value | Env override | Compiled default |
 | --- | --- | --- |
-| `works_dir` | `KK_WORKS_DIR` | `$HOME/.config/kk/works` |
+| `works_dir` | `KK_WORKS_DIR` | `<cwd>/.works` (ADR-042) |
 | `workflows_dir` | `KK_WORKFLOWS_DIR` | `$HOME/.config/kk/workflows` |
 | `defaults.maxResults` | — | `8` |
 | `defaults.fixture` | — | `false` |

package/plugins/kk/decisions/extract/ai-news.yaml

@@ -17,7 +17,13 @@ where:
   # heuristic labeler tops out at 1-2 and a gte-3 gate empties every real pool (task 0212 dogfood
   # finding). Raise this back when a full-text ingest source lands.
   kk-item-quality: { gte: 2 }
-  kk-item-importance: { gte: 3 }
+  # importance 2, not 3 (2026-10-18): this profile selects the *pool*; the 3-cutoff belongs to
+  # `daily-qc-content`, which backfills importance-only rejects (`backfillToFloor`, 20261002) so a
+  # thin news day deepens instead of shipping a stub. A gte-3 gate here front-ran that backfill and
+  # made it dead code on the store path: on 2026-10-18 the run closed `done-no-content` with a
+  # 2-item / 9.1-min pool while six quality-2, importance-2 AI items sat in the same 24h window.
+  # The key still has to be present — an unjudged item stays excluded (fail-closed INNER join).
+  kk-item-importance: { gte: 2 }
   # Conservative moderation gate (task 0229 R5): 0-1 is "no reference to the political system" or
   # "a factual policy/government mention as news context". A `where` key is an INNER join on
   # `labels_current`, so an item with NO current china-politics answer is excluded (fail-closed) —

package/plugins/kk/plugin.json

@@ -1,5 +1,5 @@
 {
     "name": "kk",
-    "version": "0.1.2",
+    "version": "0.1.3",
     "description": "knowledge-kit Claude Code plugin: skills, commands, subagents, hooks, and rules"
 }

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -674,7 +674,7 @@ function dailyPrepare(args: string[]): void {
         runDateArg = '',
     ] = args;
     // Empty work_dir composes the real workspace from the operator's works_dir
-    // (workflow-run.md §2 precedence: KK_WORKS_DIR > config works_dir > ~/.config/kk/works):
+    // (workflow-run.md §2 precedence: KK_WORKS_DIR > config works_dir > <cwd>/.works):
     //   $works_dir/kk-daily-ai-voice/<stamp>
     // The stamp is digits-only (dashes stripped from the caller's run_date, else today) so a
     // resumed/retried run whose persisted run_date var already carries the digits-only
@@ -745,7 +745,8 @@ function expandHome(p: string): string {
 
 /**
  * works_dir for composed daily workspaces — workflow-run.md §2 precedence:
- * KK_WORKS_DIR env > config works_dir > compiled default ~/.config/kk/works.
+ * KK_WORKS_DIR env > config works_dir > compiled default <cwd>/.works (ADR: the config root
+ * holds no disposable data; matches collect-prepare's cwd-relative `.works`).
  * Unreadable/unparseable config falls through to the default (pluginEnvFromConfig
  * tolerates the same), never fails the run.
  */
@@ -762,7 +763,7 @@ function resolveWorksDir(): string {
             // fall through to the compiled default
         }
     }
-    return join(homedir(), '.config/kk/works');
+    return resolve(process.cwd(), '.works');
 }
 
 /**

package/plugins/kk/workflows/feature-verification.yaml

@@ -52,14 +52,6 @@ vars:
   featureId: "X"
   spurBin: "spur"
   verificationCmd: "bun run spur-check"
-  # Operator-declared confidence level; empty derives it from the pass (HIGH when the selected
-  # definition's own command exited 0 with an unchanged proof-input digest, MEDIUM under a caller
-  # `--cmd` override, LOW otherwise). The completion boundary refuses a PASS carrying no level or
-  # LOW unless the receipt records the acknowledgement below.
-  confidence: ""
-  # Operator acknowledgement of a LOW level. It rides the receipt, so the transition reads it from
-  # the evidence rather than from whatever flags a later command happens to pass.
-  ackLowConfidence: "false"
   __runId: ""
 
 states:
@@ -73,7 +65,7 @@ states:
       - kind: shell
         options:
           command: >-
-            mkdir -p .spur/run; ACK=""; [ "$ackLowConfidence" = "true" ] && ACK="--ack-low-confidence"; $spurBin feature verify "$featureId" --run-id "$__runId" --confidence "$confidence" $ACK --no-logo || printf 'FAIL feature-verification failed closed — spur feature verify exited nonzero\n' > ".spur/run/$__runId-feature-verification.status"; exit 0
+            mkdir -p .spur/run; $spurBin feature verify "$featureId" --run-id "$__runId" --no-logo || printf 'FAIL feature-verification failed closed — spur feature verify exited nonzero\n' > ".spur/run/$__runId-feature-verification.status"; exit 0
 
   - id: done
     description: Terminal — repo-wide checks passed and the receipt is bound.

package/plugins/kk/workflows/kk-itc-author.yaml

@@ -37,17 +37,14 @@ states:
     onEnter:
       - kind: shell
         options:
+          # jq one-liner, not a heredoc: this is a folded scalar (>-), so newlines become spaces
+          # and a heredoc body would land on cat's argv (dogfood 2026-10-16: "cat: {: No such file").
           command: >-
             mkdir -p "${vars.work_dir}/.itc" &&
-            cat <<EOF > "${vars.work_dir}/.itc/author-run.json"
-            {
-              "schemaVersion": 1,
-              "parentRunId": "${vars.parent_run_id}",
-              "childRunId": "${vars.child_run_id}",
-              "definitionDigest": "${vars.definition_digest}",
-              "optionsDigest": "${vars.options_digest}"
-            }
-            EOF
+            jq -n --arg p "${vars.parent_run_id}" --arg c "${vars.child_run_id}"
+            --arg d "${vars.definition_digest}" --arg o "${vars.options_digest}"
+            '{schemaVersion:1, parentRunId:$p, childRunId:$c, definitionDigest:$d, optionsDigest:$o}'
+            > "${vars.work_dir}/.itc/author-run.json"
 
   - id: outline-write
     description: "Generate outline options a, b (and optional c) via writer skill"
@@ -79,6 +76,9 @@ states:
             - b
             - c
           var: __hitlAnswer
+          # The auto paths bypass this state by edge guard, so this gate always asks the operator.
+          decision:
+            mode: never
 
   - id: outline-autopick
     description: "Auto mode — validate the writer's recommendation, then bind the bounded catalog decision (empty on defer)"
@@ -144,6 +144,9 @@ states:
         options:
           prompt: "Review draft at ${vars.work_dir}/3-draft-draft-article.md. Approve?"
           var: __hitlAnswer
+          # The auto paths bypass this state by edge guard, so this gate always asks the operator.
+          decision:
+            mode: never
 
   - id: draft-revise
     description: "Collect revision feedback from operator (bounded by 3 rounds)"

package/plugins/kk/workflows/kk-itc-publish-tail.yaml

@@ -0,0 +1,90 @@
+---
+name: kk-itc-publish-tail
+kind: dag
+version: "2"
+description: >-
+  Re-entry seam for a failed kk-itc publish run: the seven post-authoring nodes only, so no
+  invocation can re-run authoring, and send-confirm keeps the live-send approval. Re-enter with
+  `spur workflow run plugins/kk/workflows/kk-itc-publish-tail.yaml --vars '{"work_dir":"<failed work_dir>"}'`.
+  Run identity comes from the frozen `$work_dir/itc-options.json` parentRunId, never from this run.
+
+vars:
+  work_dir: ""
+  # Declared for the engine's own injection; no tail node templates it (run identity is frozen).
+  __runId: ""
+  __definitionDigest: ""
+
+nodes:
+  - id: check-targets
+    description: "Check readiness probes for plannable publish targets"
+    action:
+      kind: shell
+      options:
+        command: >-
+          test -f "${vars.work_dir}/4-publish/publish-plan.json" || exit 0;
+          kk stage run itc-check-targets "${vars.work_dir}"
+
+  - id: send-confirm
+    description: >-
+      Operator approval of a LIVE send: `pause: true` stops the run and RESUME is the approval
+      (no action); cancelling is the rejection. Skipped for draft-only or empty plans.
+    dependsOn:
+      - check-targets
+    pause: true
+    condition:
+      kind: shell
+      options:
+        command: 'jq -e ".live == true and (.targets // [] | length) > 0" "${vars.work_dir}/4-publish/publish-plan.json" >/dev/null 2>&1'
+
+  - id: fanout-send
+    description: "Dispatch target payloads via executor fan-out and record receipts"
+    dependsOn:
+      - send-confirm
+    action:
+      kind: shell
+      options:
+        command: >-
+          test -f "${vars.work_dir}/4-publish/publish-plan.json" || exit 0;
+          kk stage run itc-send-targets "${vars.work_dir}"
+
+  - id: fanout-recovery
+    description: "Retry safe effect-none target failures once within budget"
+    dependsOn:
+      - fanout-send
+    action:
+      kind: shell
+      options:
+        command: >-
+          test -f "${vars.work_dir}/4-publish/publish-plan.json" || exit 0;
+          kk stage run itc-send-targets "${vars.work_dir}" --retry
+
+  - id: reconcile-settle
+    description: "Reconcile target receipts and settle store selection"
+    dependsOn:
+      - fanout-recovery
+    action:
+      kind: shell
+      options:
+        command: >-
+          kk stage run itc-reconcile-receipts "${vars.work_dir}"
+
+  - id: seo
+    description: "Export SEO prepublish request and published pages handoffs"
+    action:
+      kind: shell
+      options:
+        command: >-
+          kk stage run itc-export-seo "${vars.work_dir}" "$(jq -r '.seo' "${vars.work_dir}/itc-options.json")"
+
+  - id: report
+    description: "Produce final run report summary"
+    # Every tail branch: a skipped optional branch still satisfies the edge, so an all-skipped
+    # publication reports, but a report never races an unfinished send.
+    dependsOn:
+      - reconcile-settle
+      - seo
+    action:
+      kind: shell
+      options:
+        command: >-
+          kk stage run itc-report-summary "${vars.work_dir}" "$(jq -r '.maxRevisions' "${vars.work_dir}/itc-options.json")"

package/plugins/kk/workflows/kk-solo-podcast.yaml

@@ -98,6 +98,9 @@ states:
             - b
             - c
           var: __hitlAnswer
+          # No auto path skips this state, so the gate always asks the operator.
+          decision:
+            mode: never
 
   - id: outline-commit
     description: "Copy selected outline to outline-approved.md"
@@ -156,6 +159,9 @@ states:
         options:
           prompt: "Review VoiceScript at ${vars.work_dir}/3-script-voicescript.yaml. Approve for voice generation?"
           var: __hitlAnswer
+          # No auto path skips this state, so the gate always asks the operator.
+          decision:
+            mode: never
 
   - id: script-revise
     description: "Collect revision feedback from operator (bounded by 3 rounds)"