@gobing-ai/knowledge-kit 0.1.6 → 0.1.8

package/.claude-plugin/marketplace.json

@@ -6,7 +6,7 @@
     },
     "plugins": [
         {
-            "version": "0.1.6",
+            "version": "0.1.8",
             "name": "kk",
             "source": "./plugins/kk",
             "description": "knowledge-kit — a set of toolkit for knowledge management"

package/dist/board/collect/index.js

@@ -73,6 +73,19 @@ function isLoopbackHttpOrigin(origin) {
     return false;
   return url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]";
 }
+function isHttpOrigin(origin) {
+  let url;
+  try {
+    url = new URL(origin);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:")
+    return false;
+  if (url.username !== "" || url.password !== "")
+    return false;
+  return url.pathname === "/" && url.search === "" && url.hash === "";
+}
 function origin(base) {
   return base.replace(/\/+$/, "");
 }
@@ -96,16 +109,16 @@ function parseSpurDbRows(pageData) {
   });
 }
 function createBoardClient(options) {
-  if (!isLoopbackHttpOrigin(options.readerOrigin)) {
-    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
-  }
-  if (!isLoopbackHttpOrigin(options.boardOrigin)) {
-    throw new Error(`board origin must be loopback http, got '${options.boardOrigin}'`);
-  }
   const reader = origin(options.readerOrigin);
   const board = origin(options.boardOrigin);
-  const doFetch = options.fetchImpl ?? fetch;
   const isNativeSpur = reader === board;
+  if (!isHttpOrigin(options.boardOrigin)) {
+    throw new Error(`board origin must be an http origin, got '${options.boardOrigin}'`);
+  }
+  if (!isNativeSpur && !isLoopbackHttpOrigin(options.readerOrigin)) {
+    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
+  }
+  const doFetch = options.fetchImpl ?? fetch;
   async function getJson(url) {
     const response = await doFetch(url, { headers: { accept: "application/json" } });
     if (!response.ok) {

package/dist/board/daily-voice/index.js

@@ -67,6 +67,19 @@ function isLoopbackHttpOrigin(origin) {
     return false;
   return url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]";
 }
+function isHttpOrigin(origin) {
+  let url;
+  try {
+    url = new URL(origin);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:")
+    return false;
+  if (url.username !== "" || url.password !== "")
+    return false;
+  return url.pathname === "/" && url.search === "" && url.hash === "";
+}
 function origin(base) {
   return base.replace(/\/+$/, "");
 }
@@ -90,16 +103,16 @@ function parseSpurDbRows(pageData) {
   });
 }
 function createBoardClient(options) {
-  if (!isLoopbackHttpOrigin(options.readerOrigin)) {
-    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
-  }
-  if (!isLoopbackHttpOrigin(options.boardOrigin)) {
-    throw new Error(`board origin must be loopback http, got '${options.boardOrigin}'`);
-  }
   const reader = origin(options.readerOrigin);
   const board = origin(options.boardOrigin);
-  const doFetch = options.fetchImpl ?? fetch;
   const isNativeSpur = reader === board;
+  if (!isHttpOrigin(options.boardOrigin)) {
+    throw new Error(`board origin must be an http origin, got '${options.boardOrigin}'`);
+  }
+  if (!isNativeSpur && !isLoopbackHttpOrigin(options.readerOrigin)) {
+    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
+  }
+  const doFetch = options.fetchImpl ?? fetch;
   async function getJson(url) {
     const response = await doFetch(url, { headers: { accept: "application/json" } });
     if (!response.ok) {

package/dist/board/itc/index.js

@@ -67,6 +67,19 @@ function isLoopbackHttpOrigin(origin) {
     return false;
   return url.hostname === "127.0.0.1" || url.hostname === "localhost" || url.hostname === "[::1]";
 }
+function isHttpOrigin(origin) {
+  let url;
+  try {
+    url = new URL(origin);
+  } catch {
+    return false;
+  }
+  if (url.protocol !== "http:" && url.protocol !== "https:")
+    return false;
+  if (url.username !== "" || url.password !== "")
+    return false;
+  return url.pathname === "/" && url.search === "" && url.hash === "";
+}
 function origin(base) {
   return base.replace(/\/+$/, "");
 }
@@ -90,16 +103,16 @@ function parseSpurDbRows(pageData) {
   });
 }
 function createBoardClient(options) {
-  if (!isLoopbackHttpOrigin(options.readerOrigin)) {
-    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
-  }
-  if (!isLoopbackHttpOrigin(options.boardOrigin)) {
-    throw new Error(`board origin must be loopback http, got '${options.boardOrigin}'`);
-  }
   const reader = origin(options.readerOrigin);
   const board = origin(options.boardOrigin);
-  const doFetch = options.fetchImpl ?? fetch;
   const isNativeSpur = reader === board;
+  if (!isHttpOrigin(options.boardOrigin)) {
+    throw new Error(`board origin must be an http origin, got '${options.boardOrigin}'`);
+  }
+  if (!isNativeSpur && !isLoopbackHttpOrigin(options.readerOrigin)) {
+    throw new Error(`reader origin must be loopback http, got '${options.readerOrigin}'`);
+  }
+  const doFetch = options.fetchImpl ?? fetch;
   async function getJson(url) {
     const response = await doFetch(url, { headers: { accept: "application/json" } });
     if (!response.ok) {

package/dist/index.js

@@ -49085,7 +49085,7 @@ function checkOne(record, options) {
   if (!existsSync6(record.check)) {
     return { name: record.name, kind: record.kind, status: "error", detail: "probe entry missing" };
   }
-  const timeoutMs = options.timeout !== undefined ? Number(options.timeout) : 30000;
+  const timeoutMs = options.timeout !== undefined ? Number(options.timeout) : 60000;
   const result = spawnPluginProbe({
     entryPath: record.check,
     cwd: record.dir,

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "@gobing-ai/knowledge-kit",
-    "version": "0.1.6",
+    "version": "0.1.8",
     "description": "An ingest → create → publish content pipeline CLI (Bun).",
     "repository": {
         "type": "git",

package/plugins/kk/decisions/extract/ai-news.yaml

@@ -12,7 +12,13 @@
 # `kk store extract --limit` overrides it.
 topic: ai-news
 where:
-  kk-item-category: { in: [ai-news, ai-industry] }
+  # 2026-10-21: the allowlist is the whole AI taxonomy, in lockstep with the workflow's
+  # qc_categories (`ai-news,ai-technical,ai-research,ai-industry`) and episode-plan-gen's
+  # DEFAULT_FILTER_CONFIG. The two-category gate here front-ran that widening one layer upstream:
+  # a live pool labelled 20 ai-industry + 7 ai-research + 7 ai-technical + 3 ai-news came out of
+  # extract as 6 items, so `daily-qc-content`'s floor refusal closed the day as no-content before
+  # the widened QC allowlist could admit a technical or research story.
+  kk-item-category: { in: [ai-news, ai-industry, ai-technical, ai-research] }
   # quality 2, not 3: real ingest bodies (last30days/aihot summaries) are stub-length, so the
   # heuristic labeler tops out at 1-2 and a gte-3 gate empties every real pool (task 0212 dogfood
   # finding). Raise this back when a full-text ingest source lands.

package/plugins/kk/plugin.json

@@ -1,5 +1,5 @@
 {
     "name": "kk",
-    "version": "0.1.6",
+    "version": "0.1.8",
     "description": "knowledge-kit Claude Code plugin: skills, commands, subagents, hooks, and rules"
 }

package/plugins/kk/scripts/daily-stages.ts

@@ -74,6 +74,7 @@ import {
     coverBrief,
     coverNormalizeBody,
     dedupPlanByTitle,
+    expandHome,
     fail,
     failWith,
     firstArtifact,
@@ -937,11 +938,14 @@ export function dailyGenerate(args: string[]): void {
         if (existsSync(planPath)) {
             try {
                 const plan = readJson(planPath) as { items?: unknown[] };
-                if (Array.isArray(plan.items) && plan.items.length !== itemSections.length) {
-                    failWith(
-                        1,
-                        `generate: plan item count (${plan.items.length}) does not match script item sections (${itemSections.length})`,
-                    );
+                if (Array.isArray(plan.items)) {
+                    const expected = expectedItemSections(workDir, runDate, plan.items);
+                    if (expected !== itemSections.length) {
+                        failWith(
+                            1,
+                            `generate: plan item count (${plan.items.length}, ${plan.items.length - expected} recorded as excluded) does not match script item sections (${itemSections.length})`,
+                        );
+                    }
                 }
             } catch (e: unknown) {
                 if (e instanceof StageFailure) throw e;
@@ -1317,7 +1321,10 @@ export function dailyIntro(args: string[]): void {
         if (rawFile === undefined) {
             failWith(1, 'intro-music: voice content carries no mp3Path/audioPath');
         }
-        const introPath = resolve(introSrc);
+        // The sting is an operator asset under the config root (ADR-042), not a works artifact:
+        // workflow vars carry it as `~/.config/kk/voices/…`, and a shell does not expand `~` inside
+        // the quoted "${vars.intro_music}" argument, so expansion happens here.
+        const introPath = resolve(expandHome(introSrc));
         if (!existsSync(introPath)) failWith(1, `intro-music: intro file not found: ${introPath}`);
         const mainPath = resolve(rawFile);
         if (!existsSync(mainPath)) failWith(1, `intro-music: generated audio not found: ${mainPath}`);
@@ -2087,6 +2094,16 @@ export function dailySafetyPrep(args: string[]): void {
     const [workDir = '', runDate = '', platforms = ''] = args;
     timed(workDir, 'safety-review', () => {
         const digest = safetyDigest(workDir, runDate);
+        // Structural snapshot of the VoiceScript BEFORE any remediation edit. `daily-safety-revise`
+        // restores it when the remediation pass changes the item-section structure without a recorded
+        // exclusion: the agent is allowed to drop a 播报形态 line, not an item the article kept,
+        // because `daily-wrap-docs` derives the spoken item sections from `gap_ms: 1200` and fails the
+        // run when they no longer match the episode's included items (2026-10-21 04:30 run: 3
+        // segments removed → 5 sections vs a 6-item plan → `generate` refused at 05:03 and the whole
+        // day published nothing).
+        const [, scriptPath] = safetyDraftPaths(workDir, runDate);
+        const snapshot = safetyPath(workDir, runDate, 'safety-prep_script-snapshot.yaml');
+        if (isFile(scriptPath)) sted('write', snapshot, () => writeRaw(snapshot, readFileSync(scriptPath, 'utf-8')));
         for (const name of [
             'safety-review_report.json',
             'safety-judge_verdict.json',
@@ -2146,6 +2163,7 @@ export function dailySafetyRevise(args: string[]): void {
             }
         }
         assertScriptContent(scriptPath);
+        restoreStructureIfBroken(workDir, runDate, scriptPath);
         const path = join(workDir, SAFETY_REVISE_COUNT);
         const next = readSafetyReviseCount(workDir) + 1;
         sted('write', path, () => writeFileSync(path, `${next}\n`));
@@ -2153,6 +2171,71 @@ export function dailySafetyRevise(args: string[]): void {
     });
 }
 
+/**
+ * The spoken item-section count the episode is contracted to carry: the script plan's items minus the
+ * ones the article boundary recorded in `metadata.excludedIds`.
+ *
+ * The article drops boundary docs at its own stage, the safety gate aligns the VoiceScript with the
+ * article it reviews, and `daily-show-notes` already filters the plan copy by the same ids — but
+ * `daily-generate` compared the sections against the raw plan length, so the 2026-10-21 run refused a
+ * 5-section script against a 6-item plan (the 6th was the article-excluded 通用汽车 buyback) after two
+ * hours of safety review and rendered nothing. Every consumer must count the same set.
+ */
+export function expectedItemSections(workDir: string, runDate: string, planItems: unknown[]): number {
+    const excluded = metadataOf(
+        readJson(join(workDir, '22-article', `${runDate}_06_article_content.json`)),
+    ).excludedIds;
+    if (!Array.isArray(excluded)) return planItems.length;
+    const dropped = new Set(excluded.filter((id): id is string => typeof id === 'string' && id !== ''));
+    if (dropped.size === 0) return planItems.length;
+    return planItems.filter(
+        (item) => !(item !== null && typeof item === 'object' && dropped.has(String((item as { id?: unknown }).id))),
+    ).length;
+}
+
+/**
+ * Repair a remediation pass that changed the VoiceScript's item-section structure.
+ *
+ * `daily-wrap-docs` (and `daily-generate`) derive the spoken item sections from `gap_ms: 1200` and
+ * refuse the run when they disagree with the episode's included items. The safety agent is allowed
+ * to reshape lines, and to drop an item the article boundary already excluded (that drop is the
+ * contract, and `expectedItemSections` counts it out), but an unrecorded drop breaks the one-to-one
+ * audio/notes/plan relation — and on 2026-10-21 one killed the 04:30 run at `generate` after two
+ * hours of safety review. The pre-revise bytes are snapshotted by `daily-safety-prep`, so an
+ * unaccounted structural change is undone here, inside the budget loop, and named for the operator.
+ * The budget is still spent, so the loop still converges (the re-review sees the unchanged script and
+ * the gate classifies the residue) instead of the day failing hours later at the TTS seam.
+ */
+function restoreStructureIfBroken(workDir: string, runDate: string, scriptPath: string): void {
+    const planPath = join(workDir, '24-script', `${runDate}_08_script-write_plan.json`);
+    const plan = readJson(planPath) as { items?: unknown[] } | null;
+    if (plan === null || !Array.isArray(plan.items)) return;
+    const snapshot = safetyPath(workDir, runDate, 'safety-prep_script-snapshot.yaml');
+    if (!isFile(snapshot)) return;
+    const sections = (path: string): number => {
+        const parsed = Bun.YAML.parse(readFileSync(path, 'utf-8')) as { segments?: Array<Record<string, unknown>> };
+        const segments = Array.isArray(parsed.segments) ? parsed.segments : [];
+        let count = 0;
+        let pending = false;
+        for (const segment of segments.slice(1, -1)) {
+            pending = true;
+            if (segment.gap_ms === 1200) {
+                count += 1;
+                pending = false;
+            }
+        }
+        return count + (pending ? 1 : 0);
+    };
+    const expected = expectedItemSections(workDir, runDate, plan.items);
+    const actual = sections(scriptPath);
+    if (actual === expected) return;
+    const original = sections(snapshot);
+    sted('write', scriptPath, () => writeRaw(scriptPath, readFileSync(snapshot, 'utf-8')));
+    console.error(
+        `safety-revise: the edit changed the VoiceScript item sections (${expected} included plan items, ${original} before, ${actual} after) — restored the pre-revision structure from ${basename(snapshot)}; audio/notes stay one-to-one with the plan`,
+    );
+}
+
 /** Block YAML for the fields a fitted VoiceScript actually carries. Strings use JSON quoting. */
 function voicescriptToBlockYaml(script: Record<string, unknown>): string {
     const lines: string[] = [];

package/plugins/kk/scripts/kk-workflow-stages.ts

@@ -751,7 +751,7 @@ function formatRunDate(): string {
 }
 
 /** Expand the `~/` and `$HOME/` prefixes the config examples use. */
-function expandHome(p: string): string {
+export function expandHome(p: string): string {
     if (p.startsWith('~/')) return join(homedir(), p.slice(2));
     if (p.startsWith('$HOME/')) return join(homedir(), p.slice('$HOME/'.length));
     return p;

package/plugins/kk/workflows/kk-daily-ai-voice.yaml

@@ -30,7 +30,9 @@ vars:
   # env block; smoke render 6.8s). Flip back with vdriver="voicebox".
   vdriver: "gemini"
   # 20260917 review #7: 8s intro sting prepended to every daily output; empty = skip.
-  intro_music: ".works/kk-daily-ai-voice/AI每日资讯_8秒播客片头.mp3"
+  # The sting is an operator asset: it lives under the config root (ADR-042), never in the works
+  # tree. `~` is expanded by the daily-intro stage, so it stays machine-portable.
+  intro_music: "~/.config/kk/voices/AI每日资讯_8秒播客片头.mp3"
   # 20260917 review #4/#6: surfdash checkout the patch stage commits to.
   surfdash_root: "/Users/robin/xprojects/surfdash"
   title: ""

package/plugins/kk/workflows/kk-daily-ai-voice2.yaml

@@ -35,7 +35,7 @@ vars:
   # exists; flipping this one var to "gemini" is the escape hatch (measured dry: 20-25 ms / -34..-37 dB)
   # at the price of a 1h47m-2h21m remote render.
   vdriver: "voxcpm"
-  intro_music: ".works/kk-daily-ai-voice/AI每日资讯_8秒播客片头.mp3"
+  intro_music: "~/.config/kk/voices/AI每日资讯_8秒播客片头.mp3"
   surfdash_root: "/Users/robin/xprojects/surfdash"
   title: ""
   skip_review: "false"
@@ -48,7 +48,12 @@ vars:
   cover_fallback: ""
   # 0219 R3: image-gen vendor fallback for the XHS render; "" restores strict fail-fast.
   xhs_fallback: "true"
-  xhs_enabled: "true"
+  # 2026-10-21 operator decision: OFF for now (was on since 2026-09-29). The plugin reported today's
+  # draft as saved (`草稿箱` 12 -> 13 plus a scoped `保存成功` toast) while the console showed the
+  # operator no draft, so the channel's success evidence is not trustworthy until that is resolved.
+  # Flip back to "true" to resume the card plan/render/draft series; `xhs_live` stays a separate
+  # launch-time switch and nothing else in the run depends on this target.
+  xhs_enabled: "false"
   xhs_cards: "4"
   xhs_style: "xhs-knowledge"
   xhs_provider: "minimax"
@@ -185,7 +190,7 @@ nodes:
       options:
         onError: continue
         command: >-
-          kk plugin check wechatmp-pub xhs-pub
+          kk plugin check wechatmp-pub xhs-pub --timeout 60000
           || echo "session-preflight: a publish channel's saved session was refused — fix it before this run's publish step with: bun plugins/publishings/<channel>-pub/src/profile-check.ts login (wechatmp or xhs)"
 
   - id: extract

package/plugins/publishings/wechatmp-pub/dist/index.js

@@ -22166,12 +22166,7 @@ async function waitForVisible(page, selector, timeoutMs, opts = {}) {
 // ../../plugins/publishings/wechatmp-pub/src/enrich.ts
 var DIALOG = ".weui-desktop-dialog:visible";
 var CONFIRM = `${DIALOG} button:has-text("\u786E\u8BA4"), ${DIALOG} button:has-text("\u786E\u5B9A")`;
-var ROW_ORIGINAL = [
-  ".setting-group__switch.js_original_apply.js_edit_ori",
-  ".setting-group__switch.js_edit_ori",
-  ".js_edit_ori",
-  "text=\u539F\u521B"
-];
+var ROW_ORIGINAL = ["#js_original .setting-group__content-info", "#js_original .setting-group__title"];
 var ROW_REWARD = [
   ".setting-group__switch.js_reward_open",
   ".js_reward_open",
@@ -22180,18 +22175,28 @@ var ROW_REWARD = [
   "text=\u8D5E\u8D4F"
 ];
 var ROW_COLLECTION = [".allow_click_opr.js_article_tags_label", "text=\u5408\u96C6"];
-var ROW_URL = [".allow_click_opr.js_url_checkbox", "text=\u539F\u6587\u94FE\u63A5"];
-var ROW_CLAIM = ["#js_claim_source_area .frm_checkbox_label", "text=\u521B\u4F5C\u6765\u6E90"];
+var ROW_URL = ["#js_article_url_area .js_article_url_allow_click"];
+var ROW_CLAIM = ["#js_claim_source_area .allow_click_opr"];
 var DIALOG_CONFIRM = CONFIRM;
+var ORIGINAL_CONFIRM = `${DIALOG} button:text-is("\u786E\u5B9A")`;
+var CLAIM_CONFIRM = `${DIALOG} button:text-is("\u786E\u8BA4")`;
 var TAG_INPUT = 'input[placeholder*="\u5408\u96C6"]';
 var REWARD_ACCOUNT = [
   `${DIALOG} input[placeholder*="\u8D5E\u8D4F"]`,
   `${DIALOG} input[placeholder*="\u8D26\u6237"]`,
   `${DIALOG} input.frm_input`
 ];
-var URL_INPUT = [`${DIALOG} input[type="url"]`, `${DIALOG} input[placeholder*="\u94FE\u63A5"]`, `${DIALOG} input.frm_input`];
+var URL_POPOVER = ".popover_inner:has(.popover-article-setting__content):visible";
+var URL_INPUT = [`${URL_POPOVER} input.js_url[name="source_url"]`];
+var URL_CONFIRM = `${URL_POPOVER} a.jsPopoverBt:text-is("\u786E\u5B9A")`;
+var URL_CANCEL = `${URL_POPOVER} a.jsPopoverBt:text-is("\u53D6\u6D88")`;
+var URL_COMMITTED = `(() => {
+    const area = document.querySelector('#js_article_url_area');
+    const checkbox = area?.querySelector('input.js_url_checkbox');
+    return checkbox?.checked === true ? area.querySelector('.article_url_setting')?.textContent ?? null : null;
+})()`;
 var ORIGINAL_DECLARATION = `${DIALOG} label:has(.js_original_type_radio):has-text("\u6587\u5B57\u539F\u521B")`;
-var ORIGINAL_AGREEMENT = `${DIALOG} .original_agreement`;
+var ORIGINAL_AGREEMENT = `${DIALOG} label.original_agreement:has(input[type="checkbox"]:not(:checked))`;
 var COLLECTION_SETTLE_MS = 1200;
 var STEP_RETRY_SETTLE_MS = 1000;
 var SWEEP_SETTLE_MS = 400;
@@ -22203,7 +22208,8 @@ function norm(value) {
 }
 var COMMITTED = {
   original: `(() => {
-        const el = document.querySelector('#js_original, .js_ori_setting_checkbox');
+        const el = [...document.querySelectorAll('#js_original input.weui-desktop-switch__input')]
+            .find(input => input.parentElement?.getClientRects().length > 0);
         return el ? el.checked === true : null;
     })()`,
   reward: `(() => {
@@ -22234,7 +22240,7 @@ async function enrichArticle(page, meta) {
   const str = (key) => typeof meta[key] === "string" ? meta[key] : "";
   const on = (key) => meta[key] === true;
   const sweep = async () => {
-    const cancel = await trySelectors(page, ['button:has-text("\u53D6\u6D88")']);
+    const cancel = await trySelectors(page, ['button:has-text("\u53D6\u6D88")', URL_CANCEL]);
     if (cancel.found) {
       try {
         await page.locator(cancel.selector ?? "").first().click({ timeout: 2000 });
@@ -22305,7 +22311,7 @@ async function enrichArticle(page, meta) {
         if (agreement.found) {
           await clickSelector(page, ORIGINAL_AGREEMENT, 3000);
         }
-        await clickSelector(page, DIALOG_CONFIRM, 8000);
+        await clickSelector(page, ORIGINAL_CONFIRM, 8000);
       });
       if (outcome !== "capability" && await readChecked(page, COMMITTED.original) !== true && !await residual(name)) {
         warnings.push(`${name}: \u539F\u521B\u58F0\u660E\u672A\u751F\u6548\uFF0C\u8BF7\u624B\u52A8\u8BBE\u7F6E`);
@@ -22358,23 +22364,32 @@ async function enrichArticle(page, meta) {
   const originalUrl = str("originalUrl");
   if (originalUrl !== "") {
     const name = "\u539F\u6587\u94FE\u63A5";
-    const urlRow = await tryFindSelector(page, ROW_URL, 2000);
+    const readUrl = async () => {
+      try {
+        return norm(await page.evaluate(URL_COMMITTED));
+      } catch {
+        return "";
+      }
+    };
+    const urlRow = await readUrl() === norm(originalUrl) ? "committed" : await tryFindSelector(page, ROW_URL, 2000);
     if (urlRow === undefined) {
       warnings.push(`${name}: \u884C\u4E0D\u5B58\u5728\uFF08\u5F53\u524D\u516C\u4F17\u53F7\u4E0D\u652F\u6301\uFF09\uFF0C\u8BF7\u624B\u52A8\u5904\u7406\u6216\u79FB\u9664 originalUrl`);
-    } else {
+    } else if (urlRow !== "committed") {
       await step(name, async () => {
+        if (await readUrl() === norm(originalUrl))
+          return;
         await openRow(ROW_URL, "\u539F\u6587\u94FE\u63A5");
         const field = await trySelectors(page, URL_INPUT);
         if (!field.found)
-          throw new Error("no URL field in the \u539F\u6587\u94FE\u63A5 dialog");
+          throw new Error("no URL field in the \u539F\u6587\u94FE\u63A5 popover");
         await fillSelector(page, field.selector ?? URL_INPUT.join(", "), originalUrl);
-        await clickSelector(page, DIALOG_CONFIRM, 8000);
+        await clickSelector(page, URL_CONFIRM, 8000);
+        await page.locator(URL_POPOVER).first().waitFor?.({ state: "hidden", timeout: 8000 });
       });
-      await residual(name);
-      const locator = page.locator(URL_INPUT[0] ?? "").first();
-      const committed = typeof locator.inputValue === "function" ? await locator.inputValue().catch(() => null) : null;
-      if (norm(committed) !== norm(originalUrl))
+      if (await readUrl() !== norm(originalUrl))
         warnings.push(`${name}: \u5DF2\u63D0\u4EA4\u4F46\u672A\u8BFB\u53D6\u5230\u5DF2\u4FDD\u5B58\u7684\u94FE\u63A5\uFF0C\u8BF7\u6838\u5BF9`);
+      if ((await trySelectors(page, [URL_POPOVER])).found)
+        await sweep();
     }
   }
   const claimSource = str("claimSource");
@@ -22390,17 +22405,22 @@ async function enrichArticle(page, meta) {
         return null;
       }
     };
+    let unavailable = false;
     if (await claimMatched() !== true) {
-      await step(name, async () => {
+      const outcome = await step(name, async () => {
         await openRow(ROW_CLAIM, "\u521B\u4F5C\u6765\u6E90");
-        const dialog = await waitForVisible(page, DIALOG, 3000, { required: false });
-        if (dialog !== undefined) {
-          await clickSelector(page, `${DIALOG} :text("${claimSource}")`, 8000);
-          await clickSelector(page, DIALOG_CONFIRM, 8000);
+        await waitForVisible(page, DIALOG, 3000);
+        const stance = `${DIALOG} label:has(input[type="radio"]):has(:text-is(${JSON.stringify(claimSource)}))`;
+        if (await tryFindSelector(page, [stance], 1500) === undefined) {
+          await sweep();
+          throw new CapabilityError(`\u5E73\u53F0\u672A\u63D0\u4F9B\u58F0\u660E\u7C7B\u578B\u300C${claimSource}\u300D\uFF0C\u5DF2\u8DF3\u8FC7`);
         }
+        await clickSelector(page, stance, 8000);
+        await clickSelector(page, CLAIM_CONFIRM, 8000);
       });
+      unavailable = outcome === "capability";
     }
-    if (await claimMatched() !== true && !await residual(name)) {
+    if (!unavailable && await claimMatched() !== true && !await residual(name)) {
       warnings.push(`${name}: \u672A\u751F\u6548\uFF0C\u8BF7\u624B\u52A8\u8BBE\u7F6E`);
     }
   }
@@ -22507,13 +22527,17 @@ var AUDIO_UPLOAD_INPUT = [
   '.weui-desktop-dialog input[type="file"][accept*="audio"]',
   '.weui-desktop-dialog input[type="file"][accept*=".mp3"]',
   '.audio_dialog input[type="file"][accept*="audio"]',
-  'input[type="file"][accept*=".mp3"]'
+  'input[type="file"][accept*=".mp3"]',
+  '.weui-desktop-dialog input[type="file"]:not([accept*="image"])',
+  '.audio_dialog input[type="file"]:not([accept*="image"])'
 ];
 var UPLOAD_COVER = ["text=\u4E0A\u4F20\u5C01\u9762", 'button:has-text("\u4E0A\u4F20\u5C01\u9762")'];
 var AUDIO_COVER_INPUT = [
   '.weui-desktop-dialog input[type="file"][accept*="image/"]',
   '.audio_dialog input[type="file"][accept*="image/"]',
-  'input[type="file"][accept*=".png"]'
+  'input[type="file"][accept*=".png"]',
+  '.weui-desktop-dialog input[type="file"][accept*="image"]',
+  '.audio_dialog input[type="file"][accept*="image"]'
 ];
 var AUDIO_TITLE_INPUT = [
   '.weui-desktop-dialog input[placeholder*="\u6807\u9898"]',
@@ -22702,7 +22726,7 @@ async function applyLayout(page, deps) {
   }
   const option = await tryFindSelector(page, LAYOUT_TARGET, 5000);
   if (option === undefined) {
-    return "\u4E00\u952E\u6392\u7248: clicked, but no \u5339\u914D\u76EE\u6807\u683C\u5F0F option appeared \u2014 the body may be unformatted; check the draft";
+    return "\u4E00\u952E\u6392\u7248: the control exists but this build renders no \u5339\u914D\u76EE\u6807\u683C\u5F0F option (measured 2026-10-21 with a body in place) \u2014 layout skipped, apply \u4E00\u952E\u6392\u7248 by hand before publishing";
   }
   try {
     await clickSelector(page, option, 5000);

package/plugins/publishings/wechatmp-pub/dist/profile-check.js

@@ -20729,14 +20729,19 @@ var MAX_AGGREGATE_BYTES = 20 * 1024 * 1024;
 // ../../plugins/publishings/wechatmp-pub/src/enrich.ts
 var DIALOG = ".weui-desktop-dialog:visible";
 var CONFIRM = `${DIALOG} button:has-text("\u786E\u8BA4"), ${DIALOG} button:has-text("\u786E\u5B9A")`;
+var ORIGINAL_CONFIRM = `${DIALOG} button:text-is("\u786E\u5B9A")`;
+var CLAIM_CONFIRM = `${DIALOG} button:text-is("\u786E\u8BA4")`;
 var REWARD_ACCOUNT = [
   `${DIALOG} input[placeholder*="\u8D5E\u8D4F"]`,
   `${DIALOG} input[placeholder*="\u8D26\u6237"]`,
   `${DIALOG} input.frm_input`
 ];
-var URL_INPUT = [`${DIALOG} input[type="url"]`, `${DIALOG} input[placeholder*="\u94FE\u63A5"]`, `${DIALOG} input.frm_input`];
+var URL_POPOVER = ".popover_inner:has(.popover-article-setting__content):visible";
+var URL_INPUT = [`${URL_POPOVER} input.js_url[name="source_url"]`];
+var URL_CONFIRM = `${URL_POPOVER} a.jsPopoverBt:text-is("\u786E\u5B9A")`;
+var URL_CANCEL = `${URL_POPOVER} a.jsPopoverBt:text-is("\u53D6\u6D88")`;
 var ORIGINAL_DECLARATION = `${DIALOG} label:has(.js_original_type_radio):has-text("\u6587\u5B57\u539F\u521B")`;
-var ORIGINAL_AGREEMENT = `${DIALOG} .original_agreement`;
+var ORIGINAL_AGREEMENT = `${DIALOG} label.original_agreement:has(input[type="checkbox"]:not(:checked))`;
 
 // ../../plugins/publishings/wechatmp-pub/src/index.ts
 var CHANNEL = TARGET;
@@ -20828,7 +20833,7 @@ if (false) {}
 // ../../plugins/publishings/wechatmp-pub/src/profile-check.ts
 var USAGE = "usage: wechatmp profile-check [login|check|open] [--profile <dir>] [--url <url>] [--timeout <ms>] [--headed]";
 var LOGIN_TIMEOUT_MS = 180000;
-var PROFILE_OVERHEAD_MS = 8000;
+var PROFILE_OVERHEAD_MS = 25000;
 var MIN_READINESS_MS = 1000;
 async function main2(argv = process.argv.slice(2)) {
   let command;

package/plugins/publishings/wechatmp-pub/src/enrich.ts

@@ -21,16 +21,10 @@ import { clickSelector, fillSelector, modalState, tryFindSelector, type WechatPa
 const DIALOG = '.weui-desktop-dialog:visible';
 const CONFIRM = `${DIALOG} button:has-text("确认"), ${DIALOG} button:has-text("确定")`;
 /**
- * Every settings row follows one shape (operator walk 2026-10-10): a row control that opens a dialog,
- * an action inside it, then 确定. The row's own label is listed alongside its `>` expander because both
- * dispatch the same handler; the first selector that resolves wins.
+ * Dialog entries measured 2026-10-21. Confirm labels belong to each dialog: 原创 uses 确定,
+ * 创作来源 uses 确认. A generic text match can hit an inert row heading instead of its opener.
  */
-const ROW_ORIGINAL = [
-    '.setting-group__switch.js_original_apply.js_edit_ori',
-    '.setting-group__switch.js_edit_ori',
-    '.js_edit_ori',
-    'text=原创',
-];
+const ROW_ORIGINAL = ['#js_original .setting-group__content-info', '#js_original .setting-group__title'];
 // Measured 2026-10-13: the 赞-tipped rows are `.js_reward_open` / `.js_reward_allow_click` — the
 // old `.setting-group__switch.js_can_reward` no longer resolves. The 原创 dialog's own 赞赏
 // switch (`js_reward_switch`) must never be clicked by this row list (R3, drift task 0272).
@@ -42,9 +36,11 @@ const ROW_REWARD = [
     'text=赞赏',
 ];
 const ROW_COLLECTION = ['.allow_click_opr.js_article_tags_label', 'text=合集'];
-const ROW_URL = ['.allow_click_opr.js_url_checkbox', 'text=原文链接'];
-const ROW_CLAIM = ['#js_claim_source_area .frm_checkbox_label', 'text=创作来源'];
+const ROW_URL = ['#js_article_url_area .js_article_url_allow_click'];
+const ROW_CLAIM = ['#js_claim_source_area .allow_click_opr'];
 const DIALOG_CONFIRM = CONFIRM;
+const ORIGINAL_CONFIRM = `${DIALOG} button:text-is("确定")`;
+const CLAIM_CONFIRM = `${DIALOG} button:text-is("确认")`;
 const TAG_INPUT = 'input[placeholder*="合集"]';
 /** The 赞赏 dialog's account field, filled only when the platform leaves it empty. */
 const REWARD_ACCOUNT = [
@@ -53,15 +49,23 @@ const REWARD_ACCOUNT = [
     `${DIALOG} input.frm_input`,
 ];
 /**
- * The 原文链接 dialog's URL field.
- * `URL_INPUT[0]` doubles as the committed-readback locator, so it must be concrete (not `:visible`).
+ * 原文链接 is a popover outside the dialog tree (measured 2026-10-21, task 0318).
+ * Its field disappears on commit; committed readback belongs to the settings row.
  */
-const URL_INPUT = [`${DIALOG} input[type="url"]`, `${DIALOG} input[placeholder*="链接"]`, `${DIALOG} input.frm_input`];
+const URL_POPOVER = '.popover_inner:has(.popover-article-setting__content):visible';
+const URL_INPUT = [`${URL_POPOVER} input.js_url[name="source_url"]`];
+const URL_CONFIRM = `${URL_POPOVER} a.jsPopoverBt:text-is("确定")`;
+const URL_CANCEL = `${URL_POPOVER} a.jsPopoverBt:text-is("取消")`;
+const URL_COMMITTED = `(() => {
+    const area = document.querySelector('#js_article_url_area');
+    const checkbox = area?.querySelector('input.js_url_checkbox');
+    return checkbox?.checked === true ? area.querySelector('.article_url_setting')?.textContent ?? null : null;
+})()`;
 /** The 原创 dialog's declaration radio (measured 2026-10-13): the platform requires an explicit
  *  declaration type + the agreement check before 确定. `无需声明` is the undo choice, never a target. */
 const ORIGINAL_DECLARATION = `${DIALOG} label:has(.js_original_type_radio):has-text("文字原创")`;
-/** The 原创 agreement checkbox (measured 2026-10-13); absent on some account states — then 确定 speaks. */
-const ORIGINAL_AGREEMENT = `${DIALOG} .original_agreement`;
+/** Drive the hidden checkbox through its label, preserving a pre-checked agreement (probe 6). */
+const ORIGINAL_AGREEMENT = `${DIALOG} label.original_agreement:has(input[type="checkbox"]:not(:checked))`;
 /** The 合集 picker's options load after the dialog opens (the pre-ADR-029 settle, kept). */
 const COLLECTION_SETTLE_MS = 1_200;
 /** The settings panel re-renders after a dialog confirm and can briefly detach rows. */
@@ -86,9 +90,11 @@ function norm(value: unknown): string {
  * Playwright-only syntax (`:visible`, `:has-text`) never enters `querySelector` — it throws there.
  */
 const COMMITTED = {
-    /** 原创 enabled = the settings row's checkbox checked (`#js_original` / `.js_ori_setting_checkbox`). */
+    /** Both undeclared and declared templates keep hidden inputs. Read the switch in the visible
+     * row branch, never the hidden undeclared template or the dialog's matching checkbox. */
     original: `(() => {
-        const el = document.querySelector('#js_original, .js_ori_setting_checkbox');
+        const el = [...document.querySelectorAll('#js_original input.weui-desktop-switch__input')]
+            .find(input => input.parentElement?.getClientRects().length > 0);
         return el ? el.checked === true : null;
     })()`,
     /** 赞赏 enabled = the reward settings checkbox checked (area-scoped, else the visible cell's). */
@@ -133,7 +139,7 @@ export async function enrichArticle(page: WechatPage, meta: Record<string, unkno
     const on = (key: string) => meta[key] === true;
     // Sweep any leaked dialog so the next step (especially 保存为草稿) is never overlay-blocked.
     const sweep = async (): Promise<'closed' | 'unknown'> => {
-        const cancel = await trySelectors(page, ['button:has-text("取消")']);
+        const cancel = await trySelectors(page, ['button:has-text("取消")', URL_CANCEL]);
         if (cancel.found) {
             try {
                 await page
@@ -222,7 +228,7 @@ export async function enrichArticle(page: WechatPage, meta: Record<string, unkno
         if ((await readChecked(page, COMMITTED.original)) !== true) {
             const outcome = await step(name, async () => {
                 await openRow(ROW_ORIGINAL, '原创声明');
-                // Measured 2026-10-13: pick the 文字原创 radio, check the agreement when it renders,
+                // Measured 2026-10-21: keep the 文字原创 radio, click the agreement's label when it renders,
                 // then 确定. The plain-text probe the old rail used could hit the dialog heading.
                 await clickSelector(page, ORIGINAL_DECLARATION, 5_000);
                 // trySelectors absorbs its own probe failures (returns found:false) — no .catch here.
@@ -230,7 +236,7 @@ export async function enrichArticle(page: WechatPage, meta: Record<string, unkno
                 if (agreement.found) {
                     await clickSelector(page, ORIGINAL_AGREEMENT, 3_000);
                 }
-                await clickSelector(page, DIALOG_CONFIRM, 8_000);
+                await clickSelector(page, ORIGINAL_CONFIRM, 8_000);
             });
             if (
                 outcome !== 'capability' &&
@@ -305,27 +311,36 @@ export async function enrichArticle(page: WechatPage, meta: Record<string, unkno
     const originalUrl = str('originalUrl');
     if (originalUrl !== '') {
         const name = '原文链接';
+        const readUrl = async () => {
+            try {
+                return norm(await page.evaluate(URL_COMMITTED));
+            } catch {
+                return '';
+            }
+        };
         // Measured 2026-10-13: some accounts no longer render the 原文链接 row at all. That is an
         // unavailable capability — report it once, never fall back to the composer's unrelated
         // `链接` row (`btm-card-link__switch`).
-        const urlRow = await tryFindSelector(page, ROW_URL, 2_000);
+        const urlRow =
+            (await readUrl()) === norm(originalUrl) ? 'committed' : await tryFindSelector(page, ROW_URL, 2_000);
         if (urlRow === undefined) {
             warnings.push(`${name}: 行不存在（当前公众号不支持），请手动处理或移除 originalUrl`);
-        } else {
+        } else if (urlRow !== 'committed') {
             await step(name, async () => {
+                if ((await readUrl()) === norm(originalUrl)) return;
                 await openRow(ROW_URL, '原文链接');
                 const field = await trySelectors(page, URL_INPUT);
-                if (!field.found) throw new Error('no URL field in the 原文链接 dialog');
+                if (!field.found) throw new Error('no URL field in the 原文链接 popover');
                 await fillSelector(page, field.selector ?? URL_INPUT.join(', '), originalUrl);
-                await clickSelector(page, DIALOG_CONFIRM, 8_000);
+                await clickSelector(page, URL_CONFIRM, 8_000);
+                // URL validation closes the popover asynchronously. Sweeping before it closes
+                // cancels that pending commit and turns a valid URL into a false mismatch.
+                await page.locator(URL_POPOVER).first().waitFor?.({ state: 'hidden', timeout: 8_000 });
             });
-            await residual(name);
-            // Only a readable committed URL equal to the requested trimmed value counts; the
-            // composer `链接` row is never consulted.
-            const locator = page.locator(URL_INPUT[0] ?? '').first();
-            const committed =
-                typeof locator.inputValue === 'function' ? await locator.inputValue().catch(() => null) : null;
-            if (norm(committed) !== norm(originalUrl)) warnings.push(`${name}: 已提交但未读取到已保存的链接，请核对`);
+            if ((await readUrl()) !== norm(originalUrl)) warnings.push(`${name}: 已提交但未读取到已保存的链接，请核对`);
+            // Popovers are outside modalState's dialog inventory; release one even on a moved field
+            // or refused confirmation, before later settings and the draft save.
+            if ((await trySelectors(page, [URL_POPOVER])).found) await sweep();
         }
     }
 
@@ -343,17 +358,22 @@ export async function enrichArticle(page: WechatPage, meta: Record<string, unkno
                 return null;
             }
         };
+        let unavailable = false;
         if ((await claimMatched()) !== true) {
-            await step(name, async () => {
+            const outcome = await step(name, async () => {
                 await openRow(ROW_CLAIM, '创作来源');
-                const dialog = await waitForVisible(page, DIALOG, 3_000, { required: false });
-                if (dialog !== undefined) {
-                    await clickSelector(page, `${DIALOG} :text("${claimSource}")`, 8_000);
-                    await clickSelector(page, DIALOG_CONFIRM, 8_000);
+                await waitForVisible(page, DIALOG, 3_000);
+                const stance = `${DIALOG} label:has(input[type="radio"]):has(:text-is(${JSON.stringify(claimSource)}))`;
+                if ((await tryFindSelector(page, [stance], 1_500)) === undefined) {
+                    await sweep();
+                    throw new CapabilityError(`平台未提供声明类型「${claimSource}」，已跳过`);
                 }
+                await clickSelector(page, stance, 8_000);
+                await clickSelector(page, CLAIM_CONFIRM, 8_000);
             });
+            unavailable = outcome === 'capability';
         }
-        if ((await claimMatched()) !== true && !(await residual(name))) {
+        if (!unavailable && (await claimMatched()) !== true && !(await residual(name))) {
             warnings.push(`${name}: 未生效，请手动设置`);
         }
     }

package/plugins/publishings/wechatmp-pub/src/flow.ts

@@ -210,12 +210,25 @@ const AUDIO_UPLOAD_INPUT = [
     '.weui-desktop-dialog input[type="file"][accept*=".mp3"]',
     '.audio_dialog input[type="file"][accept*="audio"]',
     'input[type="file"][accept*=".mp3"]',
+    // 2026-10-21 measured: this build's upload form exposes a plain `input[type=file]` with NO accept
+    // attribute, so every accept-qualified candidate above missed and the run reported `音频: no audio
+    // file input appeared` — which costs the draft its audio player, the audio material's cover, and
+    // the library cover the 封面 step reuses. Dialog-scoped on purpose: the editor's own image input
+    // lives outside `.weui-desktop-dialog`, so it can never be the winner here.
+    '.weui-desktop-dialog input[type="file"]:not([accept*="image"])',
+    '.audio_dialog input[type="file"]:not([accept*="image"])',
 ];
 const UPLOAD_COVER = ['text=上传封面', 'button:has-text("上传封面")'];
 const AUDIO_COVER_INPUT = [
     '.weui-desktop-dialog input[type="file"][accept*="image/"]',
     '.audio_dialog input[type="file"][accept*="image/"]',
     'input[type="file"][accept*=".png"]',
+    // 2026-10-21 measured: the upload form's cover input carries `image/bmp, image/png, image/jpeg,
+    // image/jpg, image/gif, image/webp` — space-separated MIME names WITHOUT a slash-terminated
+    // `image/` prefix match (`accept*="image/"` misses `image/bmp`), so the cover upload silently
+    // skipped on every run and the draft shipped with no cover.
+    '.weui-desktop-dialog input[type="file"][accept*="image"]',
+    '.audio_dialog input[type="file"][accept*="image"]',
 ];
 const AUDIO_TITLE_INPUT = [
     '.weui-desktop-dialog input[placeholder*="标题"]',
@@ -585,7 +598,11 @@ async function applyLayout(page: WechatPage, deps: ModeRunDeps): Promise<string
     }
     const option = await tryFindSelector(page, LAYOUT_TARGET, 5_000);
     if (option === undefined) {
-        return '一键排版: clicked, but no 匹配目标格式 option appeared — the body may be unformatted; check the draft';
+        // Measured 2026-10-21 with a body in the editor: `div#ai_layout_container > div.ailayout-btn_wrp`
+        // is present and clickable, and no option set ever renders (only a hidden `ailayout-edu_tips`
+        // onboarding block). Nothing programmable is left to click, so name the finding instead of
+        // guessing at the body's formatting.
+        return '一键排版: the control exists but this build renders no 匹配目标格式 option (measured 2026-10-21 with a body in place) — layout skipped, apply 一键排版 by hand before publishing';
     }
     try {
         await clickSelector(page, option, 5_000);

package/plugins/publishings/wechatmp-pub/src/profile-check.ts

@@ -25,8 +25,14 @@ const LOGIN_TIMEOUT_MS = 180_000;
  * at that instant — so the poll must not spend all of it: a dead session then dies mid-report and
  * surfaces as `probe exit 1 (malformed probe output)` instead of `refused` (observed 2026-10-16, where
  * the 30s poll plus overhead overran `kk plugin check`'s 30s default).
+ *
+ * 25s, not 8s (2026-10-21): a dead session spends the WHOLE poll before it can report, so the reserve
+ * has to cover a cold `KK_BROWSER_CHANNEL=chrome` start, not a warm one — at 8s the first
+ * `kk plugin check wechatmp-pub xhs-pub --timeout 60000` of the day SIGKILLed the probe at 60s and
+ * reported `malformed probe output` while the immediately following run answered the real
+ * `refused — Authentication was not confirmed` in the same 60s budget.
  */
-const PROFILE_OVERHEAD_MS = 8_000;
+const PROFILE_OVERHEAD_MS = 25_000;
 /** Floor for the readiness poll, so a tiny `--timeout` still probes the console instead of refusing blind. */
 const MIN_READINESS_MS = 1_000;