codebee 0.1.11 → 0.1.13

package/CHANGELOG.md

@@ -4,6 +4,21 @@ CodeBee 的用户可感知变更记录。发布新版时：最上面加一节，
 `<!-- relnotes:start -->…<!-- relnotes:end -->` 段（那段会被 `npm view` 的
 README 元数据带回，供老版本在「发现新版本」时展示新版更新内容）。
 
+## v0.1.13（2026-09-19）
+
+- 封面图生成：连载任务建书面板新增「生成封面」——调编排者供应商图像 API（cogview 候选，竖版优先）产出 cover.png 到运行目录，SSRF 边界校验 + curl 子进程落盘（Python 不经手图像字节）
+- 需求拷问采访态：目标描述过短时先问 1-3 个澄清问题（选项芯片点选），创建更准
+- 代码任务 Best-of-N：单路实现失败后多候选 worktree 隔离赛马择优
+- 计划落盘任务档案：.codebee/ 三件套（spec.md 意图 / task_plan.md 计划 / evidence.md 验证证据）
+- 步骤卡「实际派发模型」徽章 + 类型菜单成本预估行
+
+## v0.1.12（2026-09-19）
+
+- 代码任务计划落盘：每次运行把编排计划写进工作目录 .codebee/task_plan.md，与任务规格（spec.md）、验证证据（evidence.md）同居「任务档案」，断点续跑/复盘全程可查
+- 多子任务防漂移：实现子任务提示词自动带上「第 i/N 项 + 已完成清单」，长任务链不再重做已完成项
+- 连载剧情模块库：plot-modules.md（拆文沉淀的桥段/爽点素材）每章自动注入
+- 连载赛马败者精华：落选候选稿的优点自动并入首轮修订意见
+
 ## v0.1.11（2026-09-18）
 
 - **连载发布闭环（主轨）**：番茄/七猫作家后台 CDP 直操通道（连接扫码/建书/发章/表单探测/截图存证）+ 详情页出版台面板；发布台账幂等（章号去重）+ 三道护栏（每日上限/连续失败暂停/人工确认闸——默认填好表单停，提交权留给用户）

package/app/core/covergen.py

@@ -0,0 +1,200 @@
+# -*- coding: utf-8 -*-
+"""封面图生成：调供应商图像 API 产出竖版封面插画，curl 直接落盘到运行目录。
+
+接口形状：OpenAI 兼容 POST {base}/images/generations（Z.ai cogview 系列、
+多数聚合网关都支持，默认返回图片 URL）。模型解析：环境变量
+CODEBEE_IMAGE_MODEL 优先，否则逐个试候选（cogview-3-flash → cogview-4），
+第一个 2xx 的胜出；同一模型先试竖版尺寸再回落方图。
+状态机与建书生成同款（running/done/failed 写任务 cover_gen 字段，
+bump_state 推 SSE）。仅支持 openai 协议供应商。
+
+安全边界：
+- 图像 URL 仅接受 https，解析后 IP 命中私网/环回/链路本地一律拒绝
+  （防 SSRF 打内网与云元数据）；禁用重定向（curl -L 不加）。
+- Python 不经手图像字节：下载与落盘由 curl 子进程 -o 一步完成。
+- 产物只落 paths.RUNS_DIR 受管路径（与 report.md 同款），不写任务工作目录。
+"""
+from __future__ import annotations
+
+import logging
+import os
+import socket
+import threading
+import time
+from pathlib import Path
+
+log = logging.getLogger(__name__)
+
+_IMAGE_CANDIDATES = ("cogview-3-flash", "cogview-4")
+_SIZES = ("768x1344", "1024x1024")   # 竖版优先，方图兜底
+
+
+def _cover_prompt(task):
+    """从任务与建书资料拼图像提示词：场景氛围向，不要文字（平台会自行压字）。"""
+    bm = ((task.get("book_meta") or {}).get("fanqie") or {}).get("data") or {}
+    if not isinstance(bm, dict):
+        bm = {}
+    title = bm.get("书名") or task.get("title") or ""
+    genre = bm.get("类型") or bm.get("分类") or ""
+    brief = (bm.get("一句话简介") or bm.get("简介") or task.get("goal") or "")
+    return ("竖版小说封面插画，画面中不要出现任何文字。题材：%s %s。故事梗概：%s。"
+            "商业网文封面质感：主体人物或核心场景突出，色彩浓郁有冲击力，"
+            "构图上方留白便于后期压标题。" % (genre, title, str(brief)[:300]))
+
+
+def _pick_key(prov):
+    from . import modelhub
+    keys = modelhub._chain_keys(prov) or []
+    if keys and keys[0].get("key"):
+        return keys[0]["key"]
+    return prov.get("api_key") or ""
+
+
+def _safe_image_url(url):
+    """SSRF 校验：仅 https；解析主机全部 IP，私网/环回/链路本地/保留段拒绝。"""
+    import ipaddress
+    from urllib.parse import urlparse
+    u = urlparse(url)
+    if u.scheme != "https":
+        raise ValueError("仅允许 https 图像地址")
+    host = u.hostname or ""
+    if not host:
+        raise ValueError("图像地址缺少主机")
+    infos = socket.getaddrinfo(host, u.port or 443, proto=socket.IPPROTO_TCP)
+    if not infos:
+        raise ValueError("图像主机无法解析")
+    for info in infos:
+        ip = ipaddress.ip_address(info[4][0])
+        if (ip.is_private or ip.is_loopback or ip.is_link_local
+                or ip.is_reserved or ip.is_multicast or ip.is_unspecified):
+            raise ValueError("图像主机解析到受限地址，已拒绝")
+    return url
+
+
+def _curl_to(url, out_path):
+    """curl 子进程下载落盘（Python 不经手图像字节；不加 -L 禁重定向）。"""
+    from . import runner
+    r = runner.run_process(
+        argv=["curl", "-sS", "--max-time", "180",
+              "--proto", "=https", "--fail",
+              "-o", str(out_path), url],
+        timeout=200)
+    if not r["ok"]:
+        raise RuntimeError((r.get("stderr") or r.get("stdout") or "下载失败")[:200])
+    p = Path(out_path)
+    if not p.is_file() or p.stat().st_size < 1024:
+        raise RuntimeError("下载内容过小或为空")
+
+
+def _call_images(base, key, model, prompt, size, allow_private):
+    """POST /images/generations。返回 (data_item dict, 错误串)；data_item 含 url 或 b64_json。"""
+    from . import builtin_agent
+    url = base.rstrip("/") + "/images/generations"
+    status, data, err = builtin_agent._post_json(
+        url,
+        {"Authorization": "Bearer " + key, "Content-Type": "application/json"},
+        {"model": model, "prompt": prompt, "size": size},
+        allow_private, 180)
+    if status == 0:
+        return None, err or "网络错误"
+    if 200 <= status < 300:
+        items = (data or {}).get("data") or []
+        if items and isinstance(items[0], dict):
+            return items[0], ""
+        return None, "响应缺少 data[0]"
+    last = str((data or {}).get("error", {}).get("message", "") if isinstance(data, dict) else "") \
+        or err or ("HTTP %s" % status)
+    return None, last
+
+
+def make_cover(run_id, task):
+    """同步生成封面到运行目录。成功/失败返回 entry dict（写任务 cover_gen 用）。"""
+    from . import builtin_agent, modelhub, paths
+    try:
+        orch = modelhub.resolve_orchestrator()
+        if not orch:
+            raise RuntimeError("未配置编排者供应商（编排设置）")
+        prov, _m = orch
+        if str(prov.get("protocol") or "openai") not in ("openai", ""):
+            raise RuntimeError("封面生成仅支持 openai 协议供应商")
+        base = str(prov.get("base_url") or "").rstrip("/")
+        key = _pick_key(prov)
+        if not base or not key:
+            raise RuntimeError("供应商缺少 base_url 或密钥")
+        allow_private = bool(prov.get("allow_private"))
+        prompt = _cover_prompt(task)
+        models = []
+        env_model = os.environ.get("CODEBEE_IMAGE_MODEL", "").strip()
+        if env_model:
+            models.append(env_model)
+        models.extend(m for m in _IMAGE_CANDIDATES if m not in models)
+        last_err = ""
+        for model in models:
+            for size in _SIZES:
+                item, err = _call_images(base, key, model, prompt, size, allow_private)
+                if item is None:
+                    last_err = err
+                    continue
+                img_url = str(item.get("url") or "")
+                if not img_url:
+                    last_err = "该供应商未返回图片 URL（仅内嵌数据），暂不支持"
+                    continue
+                try:
+                    safe_url = _safe_image_url(img_url)
+                except ValueError as e:
+                    last_err = str(e)
+                    continue
+                out_dir = paths.RUNS_DIR / str(run_id)
+                out_dir.mkdir(parents=True, exist_ok=True)
+                out = out_dir / "cover.png"
+                try:
+                    _curl_to(safe_url, out)
+                except RuntimeError as e:
+                    last_err = str(e)
+                    continue
+                return {"status": "done", "file": "cover.png", "run_id": str(run_id),
+                        "model": model, "size": size,
+                        "at": time.strftime("%Y-%m-%d %H:%M:%S")}
+        raise RuntimeError(last_err or "图像接口无可用模型")
+    except Exception as e:
+        return {"status": "failed", "error": str(e)[:300],
+                "at": time.strftime("%Y-%m-%d %H:%M:%S")}
+
+
+def generate_async(run_id, task_id, task):
+    """后台线程入口：生成封面并把终态写回任务 cover_gen（仿建书 generate_async）。"""
+    from . import store
+    if not store.get_task(task_id):
+        return
+    entry = make_cover(run_id, task)
+    cur = store.get_task(task_id)
+    if not cur:
+        return
+    prev = cur.get("cover_gen") or {}
+    if prev.get("status") != "running":   # 期间被删/重置：丢弃结果
+        return
+    store.set_cover_gen(task_id, entry)
+
+
+def start(task_id, run_id=None):
+    """起后台封面生成线程。run_id 缺省用该任务最近一次 run。返回 (ok, err)。running 幂等拒绝。"""
+    from . import store
+    task = store.get_task(task_id)
+    if not task:
+        return False, "任务不存在"
+    cur = task.get("cover_gen") or {}
+    if cur.get("status") == "running":
+        return True, ""
+    rid = run_id
+    if not rid:
+        runs = store.task_runs(task_id)
+        rid = (runs[-1].get("id") if runs else "")
+    if not rid:
+        return False, "没有可归属的运行记录（先跑一次任务再生成封面）"
+    if not store.set_cover_gen(task_id, {"status": "running",
+                                         "at": time.strftime("%Y-%m-%d %H:%M:%S")}):
+        return False, "任务不存在"
+    task = dict(task, cover_gen={"status": "running"})
+    threading.Thread(target=generate_async, daemon=True,
+                     name="cover-gen-%s" % task_id, args=(rid, task_id, task)).start()
+    return True, ""

package/app/core/pipeline.py

@@ -891,6 +891,8 @@ def _run_code(run, task, agents, ev, stats, mode):
         plan = {"source": "manual", "steps": [{"title": "实现任务", "detail": task["goal"]}]}
     store.update_run(run_id, plan=plan, difficulty=difficulty)
     subtasks = plan["steps"]
+    # 计划落盘（planning-with-files）：磁盘上的计划与 spec/evidence 同居任务档案
+    _write_task_plan(task, workdir, plan)
 
     # ---- 评审者（有会话延续时评审者仍用新鲜上下文，避免偏见）
     if mode == "auto":
@@ -923,12 +925,20 @@ def _run_code(run, task, agents, ev, stats, mode):
                 except Exception:
                     pass
             for i, sub in enumerate(subtasks):
+                # 子任务进度注入（planning-with-files 的每轮注入计划头）：多子任务时
+                # 让实现者知道全局位置与已完成项，防止长链目标漂移；单子任务零噪音
+                prog = ""
+                if len(subtasks) > 1:
+                    done_titles = "、".join(
+                        (s.get("title") or "")[:40] for s in subtasks[:i]) or "（无）"
+                    prog = ("\n\n## 计划进度（第 %d/%d 项）\n已完成：%s。当前接着做下面这一项，"
+                            "不要重做已完成的。" % (i + 1, len(subtasks), done_titles))
                 prompt = (CODE_IMPL_PROMPT
                           .replace("__GOAL__", task["goal"])
                           .replace("__SUBTASK__",
                                    sub["detail"] if sub["detail"] else sub["title"])
                           .replace("__CONTEXT__", task.get("context") or "（无）")
-                          .replace("__VERIFY_HINT__", _verify_hint(task)))
+                          .replace("__VERIFY_HINT__", _verify_hint(task))) + prog
                 role = "implement" if len(subtasks) == 1 else "implement-%d/%d" % (i + 1, len(subtasks))
                 res = _run_step(run_id, role, agt_b, prompt, step_wd,
                                 readonly=False, ev=ev,
@@ -2871,6 +2881,29 @@ def _evidence_lines_from_run(run_id, task):
     return lines
 
 
+def _write_task_plan(task, workdir, plan):
+    """计划落盘 .codebee/task_plan.md（planning-with-files 精髓：计划活在磁盘上，
+    /clear、压缩、崩溃、续跑都不丢）。与 spec.md/evidence.md 同居任务档案；
+    失败静默——计划文件永远不能挡住任务执行。"""
+    try:
+        from pathlib import Path as _P
+        steps = (plan or {}).get("steps") or []
+        if not steps:
+            return ""   # 无步骤不产空计划文件
+        root = _P(workdir).resolve()
+        target = (root / ".codebee" / "task_plan.md").resolve()
+        if root not in target.parents:
+            return ""
+        target.parent.mkdir(parents=True, exist_ok=True)
+        lines = ["# 任务计划", "", "来源：%s" % (plan or {}).get("source", "?"), ""]
+        for i, s in enumerate((plan or {}).get("steps") or [], 1):
+            lines.append("%d. %s" % (i, str(s.get("detail") or s.get("title") or "")[:200]))
+        target.write_text("\n".join(lines) + "\n", encoding="utf-8")
+        return str(target)
+    except Exception:
+        return ""
+
+
 def execute_run(run_id):
     run = store.get_run(run_id)
     if not run:

package/app/core/publish/browser.py

@@ -310,24 +310,69 @@ class Page:
         """填输入框/文本域/富文本。
 
         React/Vue 受控组件直接赋 value 不触发框架状态，必须走原型链 native
-        setter 再补 input/change 事件；网文编辑器正文多为 contenteditable，
-        走 execCommand('insertText') 以触发其内部输入管道（先清空再插入）。"""
+        setter 再补 input/change 事件；富文本（章节正文）走 CDP
+        Input.insertText——execCommand('insertText') 对千字长文会截断
+        （真机实测 1020 字只进 615），insertText 走完整输入管道无此限。"""
+        text = str(text)
+        ce = None
+        for _try in range(24):                     # 编辑器慢加载 + class 动态 + edit-mask
+            ce = self.call(                        # 遮罩需真实点击激活后才可编辑
+                "(s)=>{const els=[...document.querySelectorAll(s)];"
+                "let best=null;for(const e of els){"
+                "if(!e.isContentEditable)continue;"
+                "const r=e.getBoundingClientRect();"
+                "if(r.width<=0)continue;"
+                "const a=r.width*r.height;"
+                "if(!best||a>best.a)best={e,a};}"
+                "if(best){"
+                "const el=best.e;"
+                "el.scrollIntoView({block:'center'});el.focus();"
+                "const r=document.createRange();r.selectNodeContents(el);"
+                "const g=getSelection();g.removeAllRanges();g.addRange(r);return {hit:true};}"
+                "const vis=els.filter(e=>e.getBoundingClientRect().width>0);"
+                "if(!vis.length)return null;"
+                "let big=vis[0];for(const e of vis){"
+                "const r=e.getBoundingClientRect();"
+                "if(r.width*r.height>big.getBoundingClientRect().width*big.getBoundingClientRect().height)big=e;}"
+                "const r=big.getBoundingClientRect();"
+                "return {hit:false,x:Math.round(r.x+r.width/2),y:Math.round(r.y+r.height/2)};}", sel)
+            if ce is None:
+                break
+            if isinstance(ce, dict) and ce.get("hit"):
+                ce = True
+                break
+            if isinstance(ce, dict) and "x" in ce:      # 遮罩未揭：真实点击激活
+                self.send("Input.dispatchMouseEvent",
+                          {"type": "mousePressed", "x": ce["x"], "y": ce["y"],
+                           "button": "left", "clickCount": 1}, timeout=8.0)
+                self.send("Input.dispatchMouseEvent",
+                          {"type": "mouseReleased", "x": ce["x"], "y": ce["y"],
+                           "button": "left", "clickCount": 1}, timeout=8.0)
+                ce = False
+                time.sleep(0.8)
+                continue
+            ce = False
+            time.sleep(0.5)
+        if ce is True:                            # 富文本：焦点就位后键盘级插入
+            self.send("Input.insertText", {"text": text}, timeout=30.0)
+            n = self.call("(s)=>{const els=[...document.querySelectorAll(s)].filter(e=>e.isContentEditable);"
+                          "let n=0;for(const e of els)n=Math.max(n,(e.innerText||'').length);return n;}", sel)
+            if int(n or 0) < min(len(text), 20):
+                raise BrowserError("富文本插入不完整（%s/%d 字）" % (n, len(text)))
+            return True
+        if ce is None:
+            raise BrowserError("找不到输入框 %s" % sel)
         r = self.call(
             "(s,t)=>{const el=document.querySelector(s);if(!el)"
             "return{ok:false,err:'找不到输入框 '+s};"
             "el.scrollIntoView({block:'center'});el.focus();"
-            "if(el.isContentEditable){"
-            "const r=document.createRange();r.selectNodeContents(el);"
-            "const g=getSelection();g.removeAllRanges();g.addRange(r);"
-            "document.execCommand('insertText',false,t);"
-            "return{ok:el.textContent.length>=Math.min(t.length,10)};}"
             "const proto=el.tagName==='TEXTAREA'?HTMLTextAreaElement.prototype"
             ":HTMLInputElement.prototype;"
             "const d=Object.getOwnPropertyDescriptor(proto,'value');"
             "(d&&d.set?d.set:function(v){el.value=v}).call(el,t);"
             "el.dispatchEvent(new Event('input',{bubbles:true}));"
             "el.dispatchEvent(new Event('change',{bubbles:true}));"
-            "return{ok:true};}", sel, str(text))
+            "return{ok:true};}", sel, text)
         if not (r or {}).get("ok"):
             raise BrowserError("填入失败：%s" % ((r or {}).get("err") or "目标不是可输入元素"))
         return True

package/app/core/publish/flow.py

@@ -39,8 +39,10 @@ def _click_match_js():
             "return x && x.length<=maxLen && keys.every(k=>x.includes(k));});"
             "if(!hit.length)return{ok:false,err:'找不到同时含 '+keys.join('+')+' 的元素'};"
             "hit.sort((a,b)=>(a.innerText||'').length-(b.innerText||'').length);"
-            "hit[0].scrollIntoView({block:'center'});hit[0].click();"
-            "return{ok:true,tag:hit[0].tagName};}")
+            "let el=hit[0];"
+            "const act=el.closest('a,button,[role=button],[class*=btn]')||el;"
+            "act.scrollIntoView({block:'center'});act.click();"
+            "return{ok:true,tag:act.tagName};}")
 
 
 def _fill_label_js():
@@ -137,9 +139,64 @@ def run_flow(page, steps, values=None, config=None, auto_submit=False,
                     time.sleep(0.9)
                 if not (r or {}).get("ok"):
                     raise FlowError((r or {}).get("err") or text)
+            elif act == "click_real":
+                # 真实鼠标事件点击（CDP Input 派发）：qm-btn 等自定义按钮
+                # 只认真实事件序列，el.click() 无效。发布确认链全靠它。
+                text = str(st.get("text") or "")
+                for k, v in (values or {}).items():
+                    text = text.replace("{%s}" % k, str(v))
+                if not text:
+                    continue
+                note(i, "真实点击「%s」" % text)
+                r = None
+                for _try in range(int(st.get("tries") or 25)):
+                    r = page.real_click_text(text, st.get("scope") or
+                                             "a,button,[class*=btn]")
+                    if (r or {}).get("ok"):
+                        break
+                    time.sleep(0.4)
+                if not (r or {}).get("ok"):
+                    if st.get("optional"):
+                        note(i, "「%s」未出现，跳过（optional）" % text)
+                        continue
+                    raise FlowError((r or {}).get("err") or text)
+            elif act == "click_in":
+                # 先按 scope_text 定位容器（如书卡），再在容器内点 text 按钮。
+                # 解决「按钮与书名同卡片但不在彼此祖先链」的组合定位。
+                scope_t = str(st.get("scope_text") or "")
+                text = str(st.get("text") or "")
+                for k, v in (values or {}).items():
+                    scope_t = scope_t.replace("{%s}" % k, str(v))
+                    text = text.replace("{%s}" % k, str(v))
+                note(i, "在含「%s」的卡片内点「%s」" % (scope_t, text))
+                r = None
+                for _try in range(10):            # 表格异步渲染：重试窗口加长
+                    r = page.call(
+                        "(sc,t)=>{"
+                        "const cards=[...document.querySelectorAll('div,li,section,tr')].filter(e=>{"
+                        "const x=(e.innerText||'').trim();"
+                        "return x.includes(sc)&&x.length<600&&e.getBoundingClientRect().width>0;});"
+                        "if(!cards.length)return{ok:false,err:'找不到含'+sc+'的卡片'};"
+                        "cards.sort((a,b)=>(b.innerText||'').length-(a.innerText||'').length);"
+                        "const card=cards[0];"
+                        "const btns=[...card.querySelectorAll('a,button,[role=button],[class*=btn],span')].filter(e=>{"
+                        "const x=(e.innerText||'').trim();return x===t||x.includes(t)&&x.length<=t.length+6;});"
+                        "if(!btns.length)return{ok:false,err:'卡片内没有'+t};"
+                        "btns.sort((a,b)=>(a.innerText||'').length-(b.innerText||'').length);"
+                        "let el=btns[0];"
+                        "const act=el.closest('a,button,[role=button],[class*=btn]')||el;"
+                        "act.scrollIntoView({block:'center'});act.click();"
+                        "return{ok:true};}", scope_t, text)
+                    if (r or {}).get("ok"):
+                        break
+                    time.sleep(0.9)
+                if not (r or {}).get("ok"):
+                    raise FlowError((r or {}).get("err") or "click_in 失败")
             elif act == "click_match":
                 # 关键词选块（站点卡片等）：点同时包含所有关键词的最小元素
                 keys = [str(x) for x in (st.get("any") or []) if str(x).strip()]
+                for k2, v2 in (values or {}).items():   # {book_name} 等动态值
+                    keys = [x.replace("{%s}" % k2, str(v2)) for x in keys]
                 note(i, "点击含 %s 的卡片" % keys)
                 r = None
                 for _try in range(4):               # 弹层渲染慢：找不到先等再试
@@ -253,6 +310,26 @@ def run_flow(page, steps, values=None, config=None, auto_submit=False,
                     note(i, "提交 %s" % st.get("sel") or "")
                     page.wait_for(st["sel"], timeout=8)
                     page.click(st["sel"])
+            elif act == "verify":
+                # 上线验证：导航到验证页断言文本在场——防「流程完成但平台
+                # 静默未发布」的假成功（0 字草稿案）。url/any 支持 values 占位。
+                url = str(st.get("url") or "")
+                for k, v in (values or {}).items():
+                    url = url.replace("{%s}" % k, str(v))
+                note(i, "验证 %s" % url[:60])
+                page.navigate(url, timeout=30)
+                time.sleep(float(st.get("settle") or 4))
+                marks = [str(m) for m in (st.get("any") or [])]
+                body_txt = str(page.call(
+                    "()=>(document.body.innerText||'')", timeout=10) or "")
+                for m in marks:
+                    mk = m
+                    for k, v in (values or {}).items():
+                        mk = mk.replace("{%s}" % k, str(v))
+                    if mk not in body_txt:
+                        raise FlowError("上线验证失败：%s 页面上没有「%s」（章节未真正发布）"
+                                        % (url[:60], mk[:40]))
+                note(i, "验证通过")
             elif act == "url_any":
                 u = str(page.url() or "")
                 marks = st.get("any") or []

package/app/core/publish/manager.py

@@ -382,6 +382,11 @@ def upload_chapter_async(task_id, plat, chapter_file, auto_submit=False):
     n_chars = len(body.replace("\n", "").replace(" ", ""))
     if n_chars < 100:
         return False, "正文过短（%d 字），疑似未完成章节" % n_chars
+    # 平台级下限（如七猫编辑器明示「最少 1000 字」：不足时发布被静默拦截）
+    min_chars = int(PLATFORMS[plat].CONFIG.get("min_chapter_chars") or 100)
+    if n_chars < min_chars:
+        return False, ("正文 %d 字未达该平台下限（%d 字），补足后再发"
+                       % (n_chars, min_chars))
     if n_chars > 30000:
         return False, "正文超长（%d 字），平台单章上限一般 2 万字" % n_chars
     done = ledger.published_chapters(task_id, plat)
@@ -395,6 +400,11 @@ def upload_chapter_async(task_id, plat, chapter_file, auto_submit=False):
     mod = PLATFORMS[plat]
     values = {"chapter_title": title, "chapter_body": body,
               "book_name": book.get("title") or ""}
+    try:                                   # verify/draft 页 URL（流程占位）
+        values["chapter_manage_url"] = mod.chapter_manage_url(book)
+        values["draft_url"] = mod.draft_url(book)
+    except AttributeError:
+        pass
     logs = []
 
     def run():

package/app/core/publish/qimao.py

@@ -95,3 +95,19 @@ def tag_groups(meta):
         if isinstance(v, list) and v:
             out.append((key, [str(x) for x in v]))
     return out
+
+
+def chapter_manage_url(book):
+    """章节管理页（上线验证用）：有 book_id 直达，否则回作品管理页。"""
+    bid = str((book or {}).get("book_id") or "")
+    if bid:                                   # 实测 .../front/book-manage/manage?id=
+        return CONFIG["book_manage"] + "/manage?id=" + bid
+    return CONFIG["book_manage"]
+
+
+def draft_url(book):
+    """草稿箱页（发章真发布链中转站）。"""
+    bid = str((book or {}).get("book_id") or "")
+    if bid:
+        return CONFIG["book_manage"] + "/draft?id=" + bid
+    return CONFIG["book_manage"]

package/app/core/store.py

@@ -299,6 +299,22 @@ def set_book_meta(task_id, platform, entry):
     return True
 
 
+def set_cover_gen(task_id, entry):
+    """写任务的封面生成状态（cover_gen = {status, file?, run_id?, model?, error?, at}）。
+
+    与 set_book_meta 同理必须 bump_state（SSE 推送翻卡片）。任务不存在返回 False。"""
+    if not _valid_id(task_id):
+        return False
+    with LOCK:
+        task = _TASKS.get(task_id)
+        if not task:
+            return False
+        task["cover_gen"] = entry
+        _save_json(paths.TASKS_DIR / (task_id + ".json"), task)
+    bump_state()
+    return True
+
+
 def set_auto_publish(task_id, ap):
     """写任务的定时发布配置（auto.py 每日到点读它触发批量发布）。
 

package/app/main.py

@@ -580,6 +580,11 @@ class Handler(BaseHTTPRequestHandler):
         m = re.match(r"^/api/tasks/([^/]+)/book-meta$", path)
         if m:
             return self._api_book_meta_generate(m.group(1))
+        m = re.match(r"^/api/tasks/([^/]+)/cover$", path)
+        if m:
+            from core import covergen
+            ok, err = covergen.start(m.group(1))
+            return self._json(400, {"error": err}) if not ok else self._json(200, {"ok": True})
         m = re.match(r"^/api/publish/(fanqie|qimao)/(connect|disconnect|probe)$", path)
         if m:
             return self._api_publish_platform_op(m.group(1), m.group(2))

package/app/ui/app.js

@@ -3852,6 +3852,27 @@ function renderBookMetaPanel(task) {
       pbBlock(task, p.id) +
       "</div>";
   }).join("") + "</div>";
+  // 封面卡（covergen，借鉴 oh-story 封面图环节）：curl 落盘运行目录，done 后可点开预览
+  const cg = task.cover_gen || {};
+  const cgSt = cg.status || "";
+  let cgBody = "";
+  if (cgSt === "running") {
+    cgBody = '<div class="bm-empty"><svg class="ico spin" aria-hidden="true"><use href="#i-refresh"/></svg> ' + esc(t("生成中…")) + "</div>";
+  } else if (cgSt === "done") {
+    cgBody = '<div class="bm-empty">' + esc(t("封面已生成（cover.png），在「成果」页签查看")) + "</div>";
+  } else if (cgSt === "failed") {
+    cgBody = '<div class="bm-errhint">' + esc(cg.error || t("生成失败")) + "</div>";
+  } else {
+    cgBody = '<div class="bm-empty">' + esc(t("生成竖版封面插画，产出 cover.png")) + "</div>";
+  }
+  const cgBusy = taskBusy || cgSt === "running";
+  const cgAction = cgSt === "running"
+    ? '<button class="ghost" disabled><svg class="ico spin" aria-hidden="true"><use href="#i-refresh"/></svg>' + t("生成中…") + "</button>"
+    : '<button class="primary" onclick="coverGen(\'' + esc(task.id) + '\')">' +
+      (cgSt === "failed" ? t("重试") : t("生成封面")) + "</button>";
+  html += '<div class="bm-cards"><div class="bm-card st-' + (cgSt || "new") + '">' +
+    '<div class="bm-card-head"><span class="bm-plat-name"><svg class="ico" aria-hidden="true"><use href="#i-book-open"/></svg>' + esc(t("封面图")) + "</span>" +
+    bmStatusChip(cgSt) + '<span class="flex1"></span>' + cgAction + "</div>" + cgBody + "</div></div>";
   box.classList.remove("hidden");
   box.innerHTML = html;
   // TAB 徽章：已生成平台数（生成中显示 ●，随下次轮询刷新）
@@ -3874,6 +3895,16 @@ window.bmGen = async function (taskId, platform) {
   } catch (e) { toast(t("生成失败：") + e.message, true); }
 };
 
+/* 封面图生成（covergen）：curl 子进程直接落盘运行目录，Python 不经手图像字节 */
+window.coverGen = async function (taskId) {
+  try {
+    await api("/api/tasks/" + encodeURIComponent(taskId) + "/cover",
+      { method: "POST", body: "{}" });
+    toast(t("已开始生成封面，完成后这里会自动更新"));
+    await refreshState(); render();
+  } catch (e) { toast(t("封面生成失败：") + e.message, true); }
+};
+
 window.bmCopyBtn = function (btn) {
   copyText(btn.dataset.text || "");
   toast(t("已复制：") + (btn.dataset.label || ""));

package/app/ui/i18n.js

@@ -285,6 +285,7 @@
     "可选": "Optional",
     "人物、世界观、主线冲突、伏笔和不能违背的设定；会在开跑前写入 story-bible.md": "Characters, world rules, main conflict, foreshadowing, and non-negotiable canon; saved to story-bible.md before the run starts",
     "连载任务会在每章起草与评审时自动注入；工作目录已有 story-bible.md 时请留空，避免覆盖已有设定。": "Serial tasks inject it into every drafting and review step; leave this blank when the workdir already has story-bible.md to avoid overwriting existing canon.",
+    "连载任务会在每章起草与评审时自动注入；工作目录已有 story-bible.md 时请留空，避免覆盖已有设定。另可放 plot-modules.md 剧情模块库（拆文沉淀的桥段/爽点素材，每章自动注入）。": "Serial tasks inject it into every drafting and review step; leave this blank when the workdir already has story-bible.md to avoid overwriting existing canon. You can also add plot-modules.md (a reusable scene/trope library) — it's injected into every chapter too.",
     "在岗": "busy",
     "全部空闲": "all idle",
     "工作中": "working",
@@ -1570,6 +1571,15 @@
     "重新生成": "Regenerate",
     "重新生成会覆盖现有内容": "Regenerating overwrites the existing content",
     "生成失败": "Generation failed",
+    "封面图": "Cover image",
+    "生成封面": "Generate cover",
+    "重试": "Retry",
+    "生成中…": "Generating…",
+    "封面生成中…": "Cover generation started…",
+    "封面已生成（cover.png），在「成果」页签查看": "Cover generated (cover.png) — view it in the Artifacts tab",
+    "生成竖版封面插画，产出 cover.png": "Generate a portrait cover illustration → cover.png",
+    "封面生成失败：": "Cover generation failed: ",
+    "已开始生成封面，完成后这里会自动更新": "Cover generation started — this panel updates automatically when done",
     "已开始生成，完成后这里会自动更新": "Generation started — this panel updates automatically when done",
     "来源：": "Source: ",
     "（待补充）": "(to fill)",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "codebee",
-  "version": "0.1.11",
+  "version": "0.1.13",
   "description": "CodeBee · 多智能体编排台 — 统一编排本机 AI 编码 CLI（Codex / Claude Code / QwenCode / OpenCode / Aider…）：目标→拆解→路由→执行→验证→跨厂商评审→修复→报告。纯 Python 标准库实现，本地 Web UI。",
   "license": "MIT",
   "bin": {