codebee 0.1.66 → 0.1.67

package/CHANGELOG.md

@@ -4,7 +4,19 @@ CodeBee 的用户可感知变更记录。发布新版时：最上面加一节，
 `<!-- relnotes:start -->…<!-- relnotes:end -->` 段（那段会被 `npm view` 的
 README 元数据带回，供老版本在「发现新版本」时展示新版更新内容）。
 
-## 未发布
+## v0.1.67（2026-09-24）
+
+- **连载任务超时不再要人守着手动重试**：「任务总时限已到」此前是死终态——总时限默认 1 小时，供应商只剩慢链时一批十二章天然跑不完，用户只能反复点重试（2026-09-24 戍边骑奴 9-20 案）。现在超时的连载任务与失败一样自动续跑（继承已完成章、延迟 5 分钟退避、次数上限照旧）；同因止损对超时做了进度感知——错误签名恒为同一句，但本轮比上轮多过审了章就不算「退避没换来结果」，两轮一章未进才止损。
+- **任务总时限建完任务可以改了**：任务信息弹层新增「任务总时限」（30 分钟～24 小时档位），空闲时可选，下次运行/重试按新预算重新给满；`/api/tasks/<id>/params` 同步收 `timeout_s`（统一钳制 1 秒～7 天）。此前它只在建任务时按默认 1 小时写死，没有任何事后入口。
+- **分卷连载大纲步崩溃修复（norm_volumes 缺实装）**：`aea5632` 半提交只把调用放进了 planner、实现从未进 volumes——带分卷的连载大纲步必炸 `AttributeError`（同晚四连败实案），不分卷路径不触发故潜伏两天。补齐实现（收模型卷名只留本批覆盖卷；现成卷规划表优先对齐主链边界）+ planner 透传 + 三组回归。
+- **qwen 注入器内闸：anthropic 面 URL 拒写**：`_sync_qwen_settings` 本体加协议闸，anthropic 面（如 `.../api/anthropic`）绝不再写进 `OPENAI_BASE_URL`——史上某版写进去后 qwen 拿 openai 协议打 anthropic 路由、网关恒 404 被误判「网关限流」，每轮运行起点白烧 2-3 次重试（今晚实案）。外层调度已有协议闸，这里钉住注入器本体防复发。
+- **「这个任务当时用的哪一版流程」有账可对了（流程修订钉住）**：建任务时把当时流程定义的内容指纹（digest）钉进任务快照；之后改流程再续跑/重试老任务，运行会留下明确诊断（「流程在任务创建后已修改，固化参数不受影响」）并计入运行警告——此前历史任务缺失字段的兜底取值会静默吃到新流程定义，出了结果差异只能靠猜。改流程的图标、说明文字这类展示位不制造漂移噪音。
+- **每个步骤现在都记「实际用的是哪家上游」**：步骤起跑即落一行绑定速记（`厂商@网关地址` 形态，密钥绝不入账）。烧错配额、模型漂移、换将补位之后「这步到底走的谁」直接对账步骤行，不必再翻日志文本找审计行；计划选路（route_plan）与实际执行从此分开可见。
+- **「已停止」不再冒充「真的停稳了」**：取消/超时杀进程树时，如果没能确认整棵树清空（Windows taskkill 卡死、POSIX 组杀失手），步骤会如实标注「进程树未确认清空：孙进程可能仍在运行」——只作诊断提示，不改变取消/超时的终态语义，也不影响密钥冷却等记账。
+- **步骤卡能直接看到「实际用上游」徽章了**：模型徽章旁边新增上游徽章（虚线胶囊，`厂商@网关` 形态）——运行中和终态步骤行都不用翻日志就能对账这步走的谁。
+- **两个窗口同时改任务参数，后写的不会再悄悄覆盖先写的**：对话条的编排模式/思考程度/对话模型现在带修订号提交，别的窗口先改过就拒绝过期写入并提示「参数已被其他窗口修改」，界面随后自动同步最新值——此前是「我以为改成功了，其实早被另一台设备覆盖」的静默假成功。
+- **附件换过了，续跑不再装不知道**：附件（截图/文档/表格）收进任务时记内容指纹；续跑/重试时对账当前文件，被换过、删过都会在运行警告里点名（「附件在任务创建后已变化：xxx；本次执行使用当前文件内容」）——此前任务吃到「不是当初那份附件」毫无声息。老任务没记过指纹的不做推断、不打扰。
+- **成品弹窗看得开 PDF 和 Excel 了**：点成品文件名预览，PDF 逐页渲染（按窗口宽度适配，大文件封顶 20 页并提示下载看全）、xlsx 表格带工作表页签（200 行 × 40 列内直接读，超出提示下载）。渲染器首次打开时联网加载（与 docx 预览同款，平时零请求）；离线或加载失败自动回落为下载提示。老式 .xls/.doc 二进制不在预览之列。
 
 ## v0.1.66（2026-09-24）
 

package/app/core/acceptance.py

@@ -0,0 +1,100 @@
+# -*- coding: utf-8 -*-
+"""Run acceptance matrix and evidence normalization.
+
+The matrix keeps correctness, performance, boundary behavior, exception
+handling, readability and security as separate conclusions.  Missing evidence
+is reported as ``not_evaluated``/``unknown`` rather than being inferred from a
+successful process exit.
+"""
+from __future__ import annotations
+
+import time
+
+CASES = ("correctness", "performance", "boundary", "exception",
+         "readability", "security")
+
+
+def _case(name, status, evidence=None, reason=""):
+    return {"case": name, "status": status,
+            "evidence": [evidence] if isinstance(evidence, dict) else [],
+            "reason": str(reason or "")[:300]}
+
+
+def _quality_verdict(run):
+    verdict = run.get("verdict") or {}
+    for key in ("pass", "publishable", "verify_pass"):
+        if isinstance(verdict.get(key), bool):
+            return verdict.get(key), key
+    return None, ""
+
+
+def evaluate_run(run, task=None):
+    """Build a deterministic acceptance result from persisted run evidence."""
+    run = run or {}
+    task = task or {}
+    status = str(run.get("status") or "")
+    verdict = run.get("verdict") or {}
+    out = []
+
+    correct, source = _quality_verdict(run)
+    if status in ("failed", "timeout", "cancelled"):
+        out.append(_case("correctness", "unknown",
+                         {"source": "run.status", "value": status},
+                         "任务终态未形成可判定的质量结论"))
+    elif correct is not None:
+        out.append(_case("correctness", "passed" if correct else "failed",
+                         {"source": "run.verdict", "field": source,
+                          "value": bool(correct)}))
+    else:
+        out.append(_case("correctness", "not_evaluated", reason="缺少验证或质量门证据"))
+
+    duration = run.get("duration_s")
+    if duration is None and run.get("started_at") and run.get("ended_at"):
+        duration = "recorded"
+    has_duration = isinstance(duration, (int, float)) and duration >= 0
+    has_usage = any(isinstance(run.get(key), (int, float)) and run.get(key) > 0
+                    for key in ("tokens", "cost_usd"))
+    if has_duration or has_usage:
+        out.append(_case("performance", "passed", {
+            "source": "run.metrics", "duration_s": duration,
+            "tokens": run.get("tokens", 0), "cost_usd": run.get("cost_usd", 0),
+        }, "仅表示性能数据已记录，不代表达到业务阈值"))
+    else:
+        out.append(_case("performance", "not_evaluated", reason="缺少耗时或用量证据"))
+
+    boundary = verdict.get("boundary_checks")
+    if isinstance(boundary, list) and boundary and all(
+            isinstance(x, dict) and isinstance(x.get("passed"), bool) for x in boundary):
+        failed = [x for x in boundary if x.get("passed") is False]
+        out.append(_case("boundary", "failed" if failed else "passed",
+                         {"source": "run.verdict.boundary_checks", "count": len(boundary),
+                          "failed": len(failed)}))
+    else:
+        out.append(_case("boundary", "not_evaluated", reason="当前任务未声明边界检查证据"))
+
+    exception = verdict.get("exception")
+    if isinstance(exception, bool):
+        out.append(_case("exception", "passed" if exception else "failed",
+                         {"source": "run.verdict.exception", "value": exception}))
+    elif status in ("failed", "timeout"):
+        out.append(_case("exception", "failed" if status in ("failed", "timeout") else "unknown",
+                         {"source": "run.error", "status": status,
+                          "error": str(run.get("error") or "")[:300]}))
+    elif status == "cancelled":
+        out.append(_case("exception", "unknown",
+                         {"source": "run.status", "value": status}))
+    else:
+        out.append(_case("exception", "not_evaluated", reason="缺少独立异常处理证据"))
+
+    for name, key in (("readability", "readability"), ("security", "security")):
+        value = verdict.get(key)
+        if isinstance(value, bool):
+            out.append(_case(name, "passed" if value else "failed",
+                             {"source": "run.verdict.%s" % key, "value": value}))
+        else:
+            out.append(_case(name, "not_evaluated", reason="未提供独立 %s 证据" % name))
+
+    # 总体通过要求六个维度都有明确通过证据；缺证据不能被两个局部绿灯掩盖。
+    return {"version": 1, "evaluated_at": time.time(),
+            "passed": bool(out and all(x["status"] == "passed" for x in out)),
+            "cases": out}

package/app/core/assets.py

@@ -0,0 +1,110 @@
+# -*- coding: utf-8 -*-
+"""Content-addressed asset index.
+
+The index owns references and revisions, not file contents.  Files stay in the
+task workspace; projects/runs can safely point to ``asset_id + revision_id``
+without making a second copy of a document.
+"""
+from __future__ import annotations
+
+import json
+import hashlib
+import mimetypes
+import threading
+import time
+from pathlib import Path
+
+from . import paths
+
+LOCK = threading.RLock()
+
+
+def _path():
+    return paths.DATA_DIR / "assets.json"
+
+
+def _load():
+    try:
+        value = json.loads(_path().read_text(encoding="utf-8"))
+        return value if isinstance(value, dict) else {"assets": {}}
+    except (OSError, ValueError):
+        return {"assets": {}}
+
+
+def _save(data):
+    path = _path()
+    path.parent.mkdir(parents=True, exist_ok=True)
+    tmp = path.with_suffix(".tmp")
+    tmp.write_text(json.dumps(data, ensure_ascii=False, indent=2), encoding="utf-8")
+    tmp.replace(path)
+
+
+def register(workdir, relative_path, *, owner_type="", owner_id="", name="", mime=""):
+    """Index a workspace file and return its reference, or ``None`` if absent."""
+    root = Path(str(workdir or "")).resolve()
+    rel = str(relative_path or "").replace("\\", "/").lstrip("/")
+    if not rel or rel.startswith("../") or "/../" in rel:
+        return None
+    fp = (root / rel).resolve()
+    try:
+        if root not in fp.parents or not fp.is_file():
+            return None
+        digest_builder = hashlib.sha256()
+        size = 0
+        with fp.open("rb") as handle:
+            for chunk in iter(lambda: handle.read(1024 * 1024), b""):
+                digest_builder.update(chunk)
+                size += len(chunk)
+        digest = digest_builder.hexdigest()
+        asset_id = "asset-" + digest[:16]
+        revision_id = "assetrev-" + digest[:16]
+        ref = {"asset_id": asset_id, "revision_id": revision_id,
+               "content_sha256": digest, "path": rel,
+               "name": str(name or fp.name)[:120],
+               "mime": str(mime or mimetypes.guess_type(fp.name)[0]
+                           or "application/octet-stream")[:120],
+               "size": size, "updated_at": time.time()}
+        with LOCK:
+            data = _load()
+            assets = data.setdefault("assets", {})
+            row = assets.setdefault(asset_id, ref)
+            # The content hash identifies one immutable revision.  Keep the
+            # first source path/name as canonical metadata so registering the
+            # same bytes from another workspace cannot rewrite an existing
+            # reference's path semantics.
+            row.update({k: ref[k] for k in
+                        ("revision_id", "content_sha256", "size", "updated_at")})
+            for key in ("path", "name", "mime"):
+                if not row.get(key):
+                    row[key] = ref[key]
+            owners = row.setdefault("owners", [])
+            owner = {"type": str(owner_type or "")[:40], "id": str(owner_id or "")[:100]}
+            if owner["id"] and owner not in owners:
+                owners.append(owner)
+                row["owners"] = owners[-50:]
+            _save(data)
+            return dict(row)
+    except (OSError, ValueError):
+        return None
+
+
+def get(asset_id, revision_id=""):
+    with LOCK:
+        row = (_load().get("assets") or {}).get(str(asset_id or ""))
+    if not isinstance(row, dict):
+        return None
+    if revision_id and str(row.get("revision_id") or "") != str(revision_id):
+        return None
+    return dict(row)
+
+
+def list_assets(*, owner_type="", owner_id="", limit=200):
+    with LOCK:
+        rows = list((_load().get("assets") or {}).values())
+    if owner_type or owner_id:
+        rows = [row for row in rows if any(
+            (not owner_type or owner_type == item.get("type")) and
+            (not owner_id or owner_id == item.get("id"))
+            for item in (row.get("owners") or []))]
+    rows.sort(key=lambda row: float(row.get("updated_at") or 0), reverse=True)
+    return [dict(row) for row in rows[:max(1, min(1000, int(limit or 200)))]]

package/app/core/attachments.py

@@ -13,6 +13,7 @@ commit_to_workdir 移入 <workdir>/_attachments/ 并把路径清单注入任务
 from __future__ import annotations
 
 import base64
+import hashlib
 import html as _html
 import json
 import mimetypes
@@ -111,6 +112,89 @@ def norm_rel(a):
     return "_attachments/" + p.rsplit("/", 1)[-1]
 
 
+def _digest_file(path):
+    """分块 sha256：附件几 MB 级，块读防一次性大内存。"""
+    h = hashlib.sha256()
+    with open(str(path), "rb") as fh:
+        for chunk in iter(lambda: fh.read(1 << 20), b""):
+            h.update(chunk)
+    return h.hexdigest()
+
+
+def verify_task(task, workdir=None):
+    """附件完整性对账（借鉴 WorkDSH 输入引用修订：任务输入钉精确修订而非
+    可变 latest）。任务创建/追加时钉的 digest vs 当前文件内容：
+
+    返回漂移清单 [{path, name, pinned, current, status}]，status ∈
+    changed/missing/unreadable；无附件、无钉记（老数据）或无漂移返回 []。
+    只诊断不阻断——用户可能有意换文件，但绝不静默。"""
+    root = Path(str(workdir or (task or {}).get("workdir") or "")).resolve()
+    out = []
+    for a in (task or {}).get("attachments") or []:
+        pinned = str(a.get("digest") or "")
+        rel = norm_rel(a)
+        if not pinned or not rel:
+            continue   # 老数据无钉记：不做推断，不算漂移
+        fp = (root / rel).resolve()
+        try:
+            if root not in fp.parents:
+                out.append({"path": rel, "name": str(a.get("name") or rel)[:120],
+                            "pinned": pinned, "current": "", "status": "unreadable"})
+                continue
+            if not fp.is_file():
+                out.append({"path": rel, "name": str(a.get("name") or rel)[:120],
+                            "pinned": pinned, "current": "", "status": "missing"})
+                continue
+            cur = _digest_file(fp)
+        except OSError:
+            out.append({"path": rel, "name": str(a.get("name") or rel)[:120],
+                        "pinned": pinned, "current": "", "status": "unreadable"})
+            continue
+        if cur != pinned:
+            out.append({"path": rel, "name": str(a.get("name") or rel)[:120],
+                        "pinned": pinned, "current": cur, "status": "changed"})
+    return out
+
+
+def asset_refs(workdir, items):
+    """Return stable asset references for files owned by a task.
+
+    The file remains in the task workspace; the reference carries only its
+    identity, revision digest and relative path.  This lets project/task
+    records point at an asset without copying the asset body into metadata.
+    Missing files are skipped so legacy attachment records remain readable.
+    """
+    root = Path(str(workdir or "")).resolve()
+    out = []
+    for raw in items or []:
+        if isinstance(raw, dict) and str(raw.get("path") or "").replace("\\", "/").startswith("_attachments/"):
+            rel = norm_rel(raw)
+        else:
+            rel = str((raw or {}).get("path") if isinstance(raw, dict) else raw or "")
+            rel = rel.replace("\\", "/").lstrip("/")
+        if not rel:
+            continue
+        fp = (root / rel).resolve()
+        try:
+            if root not in fp.parents or not fp.is_file():
+                continue
+            digest = _digest_file(fp)
+            source = raw if isinstance(raw, dict) else {}
+            out.append({
+                "asset_id": "asset-" + digest[:16],
+                "revision_id": "assetrev-" + digest[:16],
+                "content_sha256": digest,
+                "path": rel,
+                "name": str(source.get("name") or fp.name)[:120],
+                "mime": str(source.get("mime") or mimetypes.guess_type(fp.name)[0]
+                           or "application/octet-stream")[:120],
+                "size": fp.stat().st_size,
+            })
+        except (OSError, ValueError):
+            continue
+    return out
+
+
 def read_pending(fid):
     """读待提交区附件原文（输入条胶囊点击预览用）。id 是 16 位十六进制
     随机数且只认文件名，猜不中即空。返回 (bytes, mime, name)；找不到
@@ -292,7 +376,10 @@ def commit_to_workdir(workdir, ids):
         item = {"name": name,
                 "size": meta.get("size") or (adir / name).stat().st_size,
                 "mime": meta.get("mime") or "application/octet-stream",
-                "path": "_attachments/" + name}
+                "path": "_attachments/" + name,
+                # 内容指纹（借鉴 WorkDSH 输入引用修订）：续跑/重试时
+                # verify_task 对账——文件被换过/删过给明确诊断，不静默
+                "digest": _digest_file(adir / name)}
         # Office zip 文档抽正文 → 伴生 .txt：无头 CLI 读不了二进制容器，
         # 有文本版所有智能体都能直接读；抽取失败只降级不拒收
         if Path(name).suffix.lower() in _TEXT_EXTRACT_EXT:
@@ -377,6 +464,10 @@ def items_from_paths(paths_, workdir):
         except OSError:
             size = 0
         item = {"name": Path(rel).name, "path": rel, "mime": mime, "size": size}
+        try:
+            item["digest"] = _digest_file(path)   # 运行中追加同样钉指纹
+        except OSError:
+            pass
         side = path.with_name(path.name + ".txt")
         if side.is_file():
             item["text_path"] = rel + ".txt"

package/app/core/bookmeta.py

@@ -130,28 +130,114 @@ def _fq_content_tables():
 
 
 def _fq_options_block(goal):
-    """番茄提示词的真实选项注入：按 goal 推断读者给出对应分类与标签表。"""
+    """番茄提示词的真实选项注入：按 goal 推断读者给出对应分类与标签表。
+
+    2026-09-24 起首行加频道判定规则：素材明显属于另一频时 target_reader
+    如实填、分类留空（规整层按该频表校验并兜底补齐），防「注入男频表+
+    女频素材」时硬凑男频分类。"""
     reader = "女频" if "女" in (goal or "") else "男频"
     cats, theme, role, plot = _fq_tables(reader)
     c_plot, c_emo, c_char, c_world = _fq_content_tables()
-    return ("目标读者（%s）可用的主分类表（必选且只能选一个）：%s\n"
+    return ("先按素材判定目标读者（战争/军功/历史争霸/都市异能/系统→男频；"
+            "总裁豪门/宅斗宫斗/年代/婚恋情感线为主→女频），target_reader 如实填；"
+            "主分类从下方按目标读者 %s 预注入的表里选，素材明显属于另一频时"
+            "分类留空待系统按该频表补齐。主分类要贴世界观而非字面词——架空"
+            "王朝/军事/军功题材选历史古代或历史脑洞，西方奇幻仅限西式魔幻"
+            "世界观。\n"
+            "目标读者（%s）可用的主分类表（必选且只能选一个）：%s\n"
             "阅读标签三组各最多选 2 个——主题组：%s\n角色组：%s\n情节组（部分，选最贴合的）：%s\n"
             "内容标签四组——情节组（最多4个，部分）：%s\n情感组（最多2个）：%s\n"
             "人设组（最多4个，部分）：%s\n世界观组（最多1个）：%s"
-            % (reader, "、".join(cats), "、".join(theme), "、".join(role),
+            % (reader, reader, "、".join(cats), "、".join(theme), "、".join(role),
                "、".join(plot[:50]), "、".join(c_plot[:60]), "、".join(c_emo),
                "、".join(c_char[:60]), "、".join(c_world)))
 
 
 def _qm_options_block(goal):
-    """七猫提示词的真实选项注入：按频道给级联 + 四组标签池（每组必选 1-3）。"""
+    """七猫提示词的真实选项注入：双频道级联 + 频道判定规则 + 跨频道禁令。
+
+    2026-09-24 前只按 goal 猜频道注入单频道表，但挡不住模型自带另一频道
+    的分类知识跨频道自造组合（男频军事文被配成 女生/古代言情/权谋天下，
+    级联还自洽）——必须双频道全量注入并明示判定规则。"""
     from . import bookmeta_catalog as cat
-    channel = cat.QIMAO_CATS.get("女生" if "女" in (goal or "") else "男生")
-    cascade = ["%s（二级：%s）" % (m, "、".join(v)) for m, v in channel.items()]
-    pool = ["%s组（必选1-3个）：%s" % (g, "、".join(t)) for g, t in cat.QIMAO_TAG_GROUPS.items()]
-    return ("一级分类表（选一个）：%s\n一级→二级级联（二级必须从所属一级下选）：%s\n"
-            "作品标签四组：%s"
-            % ("、".join(channel), "；".join(cascade), "；".join(pool)))
+    cascades = ["%s频道（一级→二级）：%s" % (ch, "；".join(
+        "%s（二级：%s）" % (m, "、".join(v)) for m, v in mains.items()))
+        for ch, mains in cat.QIMAO_CATS.items()]
+    pool = ["%s组（必选1-3个）：%s" % (g, "、".join(t))
+            for g, t in cat.QIMAO_TAG_GROUPS.items()]
+    return ("先按素材判定目标读者频道：战争/军功/练兵/历史争霸/都市异能/"
+            "系统流/玄幻修仙→男生；总裁豪门/宅斗宫斗/年代/婚恋情感线为主→"
+            "女生。target_reader 必须填判定的频道，一级/二级分类只能从该频道"
+            "的级联表里选，严禁跨频道——如「权谋天下」只存在于女生·古代言情"
+            "下，男频军事历史文不得选用；「架空历史」属男生·历史。\n"
+            "%s\n作品标签四组（男女生同池）：%s"
+            % ("。".join(cascades), "；".join(pool)))
+
+
+# ---- 频道题材信号（2026-09-24 实案：男频军事文《戍边骑奴》被生成端配成
+# 女生/古代言情/权谋天下——「权谋天下」字面贴合朝堂线但只存在于女生频道，
+# 模型跨频道自造组合且级联自洽，目录校验拦不住，只能靠题材信号判频道。
+# 必须保守：信号单侧命中才判，双侧命中/零命中一律不判（宁可不纠不可错纠）。
+# 证据语料只用 goal+简介：分类字段是嫌疑输出、标签池男女同池，都不算证据。
+_CH_SIGNAL_MALE = ("军功", "戍边", "骑奴", "特种兵", "练兵", "杀伐", "阵斩",
+                   "百夫长", "大军", "蛮族", "边军", "边关", "边疆", "战场",
+                   "争霸", "兵王", "战神", "赘婿", "武侠", "修仙", "修真",
+                   "玄幻", "机甲", "星际", "电竞", "网游", "领主")
+_CH_SIGNAL_FEMALE = ("言情", "总裁", "豪门", "宅斗", "宫斗", "嫡女", "庶女",
+                     "甜宠", "虐恋", "宠妻", "宠夫", "王妃", "医妃", "皇后",
+                     "公主", "丫鬟", "千金", "女配", "追妻", "闪婚", "隐婚",
+                     "婆媳", "闺蜜", "女尊", "女强", "军婚", "宫闱")
+
+
+def _channel_anchor(text):
+    """题材信号判频道：男/女信号词单侧命中返回 男生/女生，否则 None。"""
+    t = str(text or "")
+    if not t:
+        return None
+    male = any(w in t for w in _CH_SIGNAL_MALE)
+    female = any(w in t for w in _CH_SIGNAL_FEMALE)
+    if male and not female:
+        return "男生"
+    if female and not male:
+        return "女生"
+    return None
+
+
+_READER_OF = {"fanqie": {"男生": "男频", "女生": "女频"},
+              "qimao": {"男频": "男生", "女频": "女生"}}
+
+
+def _reader_anchor(task, platform, meta):
+    """频道锚：题材信号（goal+简介）优先，其次同书另一平台已定的读者。
+
+    返回 (该平台的读者词, 依据说明) 或 (None, "")。"""
+    corpus = "。".join(x for x in ((task or {}).get("goal") or "",
+                                   (meta or {}).get("summary") or "") if x)
+    sig = _channel_anchor(corpus)
+    if sig:
+        # 信号词是男生/女生：七猫原样用，番茄翻成 男频/女频
+        own = sig if platform == "qimao" else {"男生": "男频", "女生": "女频"}[sig]
+        return own, "题材信号"
+    peer_plat = "qimao" if platform == "fanqie" else "fanqie"
+    peer = (((task or {}).get("book_meta") or {}).get(peer_plat) or {})
+    if peer.get("status") == "done":
+        mapped = _READER_OF[platform].get(
+            (peer.get("data") or {}).get("target_reader"))
+        if mapped:
+            return mapped, "同书另一平台(%s)已定读者" % PLATFORMS[peer_plat]["label"]
+    return None, ""
+
+
+def _apply_fix_note(meta, source):
+    """把 _fill_required_fields 记录的纠偏说明并进 source。
+
+    meta 里的 _fixes 是临时键，随出随清，不落 book_meta 数据（否则
+    repair_existing 的幂等比较会每次不等、启动反复重写）。"""
+    fixes = meta.pop("_fixes", None)
+    if fixes:
+        source = (str(source or "") + "；" + "；".join(str(x) for x in fixes)
+                  ).strip("；")
+    return source
 
 
 def _collect_material(task):
@@ -517,6 +603,28 @@ def _fill_required_fields(task, platform, meta, outline, material):
     # 标题/占位文本过不了提交且流程看不到报错——洗成正文，不够长从素材取
     meta["summary"] = _prose_summary(meta.get("summary"), material)
 
+    # 频道锚：题材信号/同书另一平台的读者与模型声称的频道冲突时以锚为准
+    # 翻转（2026-09-24 实案：男频军事文被配成 女生/古代言情/权谋天下，
+    # 级联自洽骗过目录校验）。翻转后旧频道分类作废，由下方素材补齐逻辑
+    # 按正确频道重选；纠偏说明记 _fixes 临时键，由调用方并进 source。
+    anchor, why = _reader_anchor(task, platform, meta)
+    if anchor and meta.get("target_reader") != anchor:
+        meta["_fixes"] = ["频道纠偏：%s→%s（依据：%s）"
+                          % (meta.get("target_reader") or "未填", anchor, why)]
+        meta["target_reader"] = anchor
+        if platform == "qimao":
+            ch = cat.QIMAO_CATS.get(anchor) or {}
+            if meta.get("category_main") not in ch:
+                meta["category_main"] = ""
+            ch_main = meta.get("category_main")
+            if meta.get("category_sub") and not (
+                    ch_main and meta["category_sub"] in (ch.get(ch_main) or [])):
+                meta["category_sub"] = ""
+        else:
+            fq_cats, _, _, _ = _fq_tables(anchor)
+            if meta.get("category") not in fq_cats:
+                meta["category"] = ""
+
     if platform == "fanqie":
         reader = meta.get("target_reader") or ("女频" if female else "男频")
         if reader not in ("男频", "女频"):
@@ -525,11 +633,22 @@ def _fill_required_fields(task, platform, meta, outline, material):
         cats, theme, role, plot = _fq_tables(reader)
         c_plot, c_emo, c_char, c_world = _fq_content_tables()
         if meta.get("category") not in cats:
-            meta["category"] = _pick_option(
-                material, cats,
-                (("戍边", "古风世情"), ("边关", "古风世情"),
-                 ("军", "抗战谍战"), ("悬疑", "女频悬疑" if female else "悬疑脑洞"),
-                 ("种田", "种田"), ("都市", "都市脑洞")))
+            # 关键词兜底按频道给（2026-09-24 实案《戍边骑奴》：旧表不分频道，
+            # 「戍边→古风世情」是女频词，男频素材永远选不中，全部落到男频表
+            # 首项「西方奇幻」——架空王朝军事文被配成西式魔幻）
+            kw = (("历史", "历史古代"), ("古代", "历史古代"),
+                  ("王朝", "历史脑洞"), ("架空", "历史脑洞"),
+                  ("戍边", "历史古代"), ("边关", "历史古代"),
+                  ("抗战", "抗战谍战"), ("谍战", "抗战谍战"),
+                  ("军", "历史古代"), ("种田", "都市种田"),
+                  ("都市", "都市脑洞"), ("悬疑", "悬疑脑洞")) if reader == "男频" else (
+                 ("宅斗", "宫斗宅斗"), ("宫斗", "宫斗宅斗"),
+                 ("总裁", "豪门总裁"), ("豪门", "豪门总裁"),
+                 ("古代", "古风世情"), ("古言", "古言脑洞"),
+                 ("年代", "年代"), ("种田", "种田"),
+                 ("婚姻", "职场婚恋"), ("恋爱", "职场婚恋"),
+                 ("悬疑", "女频悬疑"), ("快穿", "快穿"))
+            meta["category"] = _pick_option(material, cats, kw)
         groups = (("tags_theme", theme, 2), ("tags_role", role, 2),
                   ("tags_plot", plot, 2), ("content_plot", c_plot, 4),
                   ("content_emotion", c_emo, 2), ("content_character", c_char, 4),
@@ -542,12 +661,15 @@ def _fill_required_fields(task, platform, meta, outline, material):
         channel = cat.QIMAO_CATS.get(reader) or cat.QIMAO_CATS["男生"]
         main = meta.get("category_main")
         if main not in channel:
-            main = _pick_option(
-                material, list(channel),
-                (("戍边", "古代言情"), ("边关", "古代言情"),
-                 ("古代", "古代言情"), ("军事", "军事"),
-                 ("军", "军事"), ("都市", "都市"),
-                 ("玄幻", "玄幻奇幻"), ("悬疑", "奇闻异事")))
+            # 关键词兜底按频道给（2026-09-24 频道锚落地后读方可信，旧的
+            # 「戍边→古代言情」在男生频道下永远选不中白占位）
+            kw = (("戍边", "历史"), ("边关", "历史"), ("军", "军事"),
+                  ("都市", "都市"), ("玄幻", "玄幻奇幻"), ("悬疑", "奇闻异事")
+                  ) if reader == "男生" else (
+                  ("宅斗", "古代言情"), ("宫斗", "古代言情"),
+                  ("古代", "古代言情"), ("总裁", "现代言情"),
+                  ("年代", "现代言情"), ("都市", "现代言情"))
+            main = _pick_option(material, list(channel), kw)
             meta["category_main"] = main
         subs = channel.get(main) or []
         sub = meta.get("category_sub")
@@ -644,8 +766,9 @@ def make_book_meta(task, platform, author_agent=None, log_path=None):
             meta = _norm(runner.extract_json(res.get("text") or ""), platform, goal)
             if meta:
                 meta = _fill_tag_gaps(task, platform, meta, outline)
-                return _fill_required_fields(task, platform, meta, outline, material), \
-                    "编排者(%s · %s)" % (prov.get("name", prov["id"]), model)
+                meta = _fill_required_fields(task, platform, meta, outline, material)
+                return meta, _apply_fix_note(meta, "编排者(%s · %s)"
+                                             % (prov.get("name", prov["id"]), model))
         orch_err = str(res.get("error") or "返回内容无法解析为作品信息")[:200]
 
     if author_agent and author_agent.get("mode") == "real" and not template_only():
@@ -657,13 +780,14 @@ def make_book_meta(task, platform, author_agent=None, log_path=None):
             meta = _norm(runner.extract_json(res.get("text") or ""), platform, goal)
             if meta:
                 meta = _fill_tag_gaps(task, platform, meta, outline)
-                return _fill_required_fields(task, platform, meta, outline, material), "llm(%s)" % author_agent["id"]
+                meta = _fill_required_fields(task, platform, meta, outline, material)
+                return meta, _apply_fix_note(meta, "llm(%s)" % author_agent["id"])
         orch_err = orch_err or str(res.get("error") or "")[:200]
 
     meta = _template_meta(task, platform, outline)
     meta = _fill_required_fields(task, platform, meta, outline, material)
     meta["source"] = ("模板兜底（编排者不可用：%s）" % orch_err) if orch_err else "模板兜底"
-    return meta, meta["source"]
+    return meta, _apply_fix_note(meta, meta["source"])
 
 
 def render_markdown(task, platform, meta):
@@ -773,16 +897,26 @@ def repair_existing():
                     and _has_value(data.get("protagonist_1"))
                     and _has_value(data.get("protagonist_2"))
                     and _summary_ok(data.get("summary")))
+            # 频道失配也视为待修复（2026-09-24 实案：级联自洽的跨频道组合
+            # 字段全齐，required_ok 挡不住，只能靠题材信号识别）
+            anchor, _ = _reader_anchor(task, platform,
+                                       {"summary": data.get("summary") or ""})
+            if anchor and anchor != data.get("target_reader"):
+                required_ok = False
             if required_ok:
                 continue
             try:
                 material, outline = _collect_material(task)
                 fixed = _fill_required_fields(task, platform, data, outline, material)
+                fixes = fixed.pop("_fixes", None)   # 先清临时键再比幂等
                 if fixed == entry["data"]:
                     continue
                 payload = dict(entry)
                 payload["data"] = fixed
-                payload["source"] = (str(entry.get("source") or "") + "；已补齐必填字段").lstrip("；")
+                note = "已补齐必填字段"
+                if fixes:
+                    note += "；" + "；".join(str(x) for x in fixes)
+                payload["source"] = (str(entry.get("source") or "") + "；" + note).lstrip("；")
                 store.set_book_meta(task["id"], platform, payload)
                 try:
                     fp = Path(task.get("workdir") or "") / PLATFORMS[platform]["file"]