codebee 0.1.66 → 0.1.67

package/app/core/pipeline.py

@@ -19,7 +19,7 @@ import re
 import threading
 import time
 
-from . import aiflavor, attachments, branching, catalog, chaptersafe, dispatch_log, history, hooks, jobs, knowledge, manager, modelhub, mocks, paihang, planner, registry, router, runner, skills, store, task_compile, usage, volumes
+from . import aiflavor, attachments, branching, catalog, chaptersafe, defectretro, dispatch_log, flows, history, hooks, jobs, knowledge, manager, modelhub, mocks, paihang, planner, registry, router, runner, skills, store, task_compile, usage, volumes
 from . import builtin_agent
 from . import diagnostics
 from . import paths as paths_mod
@@ -365,6 +365,44 @@ def _binding_dead_msg(agent):
                 "请在「模型调度（可选）」页为该 CLI 指定已启用的供应商")
 
 
+def _binding_brief(agent):
+    """步骤级绑定速记（借鉴 WorkDSH ResolvedExecutionBinding：模型目录只是发现
+    信息，解析结果才是权威）。把本步实际执行用的 provider 链与上游 host 压成
+    一行——配额烧错家/模型漂移直接对账步骤行，不必翻日志文本里的审计行。
+    只记身份不记密钥：env 形态的注入也只取 URL 的 host 部分。"""
+    from . import upstream as _up
+    entries = []
+    for item in (agent.get("call_chain") or [])[:4]:
+        if not isinstance(item, dict):
+            continue
+        pid = str(item.get("provider_id") or "").strip()
+        prov = item.get("provider") if isinstance(item.get("provider"), dict) else {}
+        host = ""
+        try:
+            host = _up.normalize_upstream(
+                str(prov.get("base_url") or prov.get("baseUrl") or ""))
+        except Exception:
+            host = ""
+        if pid and host and host not in pid:
+            entries.append("%s@%s" % (pid, host))
+        else:
+            entries.append(pid or host or "?")
+    if not entries:
+        # env 注入形态（如 ANTHROPIC_BASE_URL）：URL 值的 host 不敏感，可入账
+        for k, v in sorted((agent.get("env") or {}).items()):
+            s = str(v or "")
+            if s.startswith(("http://", "https://")):
+                try:
+                    host = _up.normalize_upstream(s)
+                except Exception:
+                    continue
+                if host:
+                    entries.append("%s=%s" % (str(k)[:24], host))
+            if len(entries) >= 3:
+                break
+    return ",".join(entries[:3])[:120]
+
+
 def _run_step(run_id, role, agent, prompt, workdir, readonly, ev, timeout=runner.DEFAULT_TIMEOUT, note="", resume=None, images=None, require_tools=False, swap_guard=None):
     """执行一个智能体步骤并记录。返回 runner 统一结果。
 
@@ -402,7 +440,8 @@ def _run_step(run_id, role, agent, prompt, workdir, readonly, ev, timeout=runner
         note = ((note + "；") if note else "") + "⚠ " + dead_msg
     step, log_abs = store.add_step(run_id, role, agent["id"],
                                    agent.get("label", agent["id"]), note=note,
-                                   model=agent.get("model") or "")
+                                   model=agent.get("model") or "",
+                                   provider=_binding_brief(agent))
     start = time.time()
     if dead_binding:
         from .error_codes import ErrorCode
@@ -473,7 +512,8 @@ def _run_builtin_step(run_id, role, bi, prompt, workdir, ev, note="", images=Non
     _wait_gate(run_id, ev)
     deadline = _ensure_budget(run_id)
     step, log_abs = store.add_step(run_id, role, "builtin", "CodeBee", note=note,
-                                   model=bi.get("model") or "")
+                                   model=bi.get("model") or "",
+                                   provider=str(bi.get("provider_id") or "")[:120])
     start = time.time()
     agent_pseudo = {"id": "builtin", "label": "CodeBee", "kind": "builtin", "mode": "real",
                     "provider": {"id": bi.get("provider_id") or "",
@@ -650,9 +690,15 @@ def _finish_step_result(run_id, step, res, role, agent, start):
         status = "timeout"
     else:
         status = "done" if res["ok"] else "failed"
+    step_summary = (res.get("text") or res.get("error") or "")[:600]
+    if raw.get("quiescence_unknown"):
+        # 杀树未确认清空（借鉴 WorkDSH 取消结算分层：kill 完成 ≠ 停稳）：
+        # 孙进程可能仍在跑，孤儿清扫稍后兜底。只提示不改变终态语义。
+        step_summary = ((step_summary + "\n") if step_summary else "") + \
+            "⚠ 进程树未确认清空：孙进程可能仍在运行（孤儿清扫稍后兜底）"
     store.finish_step(run_id, step["n"],
                       status,
-                      summary=((res.get("text") or res.get("error") or "")[:600]),
+                      summary=step_summary,
                       exit_code=res.get("raw", {}).get("exit_code"),
                       cost_usd=res.get("cost_usd", 0.0),
                       tokens=res.get("tokens", 0),
@@ -1915,6 +1961,10 @@ def _run_direct(run, task, agents, ev, stats, mode):
                 # 扫榜选材（借鉴 oh-story 扫榜）：抓七猫排行榜公开数据注入，
                 # AI 做选题洞察；抓取失败回落普通直连提示词
                 prompt = paihang.rank_scan_prompt(task.get("goal") or "") or ""
+            if task.get("type") == "defect_retro" and bi is not None:
+                # 缺陷复盘（借鉴 test-defect-retrospective）：三视角分析框架
+                # 注入，缺陷导出 CSV 走任务附件通道（框架恒有、不回落）
+                prompt = defectretro.retro_prompt(task.get("goal") or "")
             if not prompt:
                 if bi is not None:
                     prompt = (BUILTIN_DIRECT_PROMPT
@@ -2144,10 +2194,10 @@ NOVEL_CRITIQUE_PROMPT = """你是严格的评审（不要使用任何工具、
 请输出一个 ```json 代码块，不要输出其他内容。JSON 结构：
 {
   "scores": {"__DIMKEYS__"},
-  "issues": [{"dim": "维度名", "severity": "major|minor", "note": "具体问题"}],
+  "issues": [{"dim": "维度名", "severity": "major|minor", "note": "具体问题", "quote": "支撑该问题的稿件原文连续片段（≥8字，逐字摘录不许改写）"}],
   "summary": "一句话总评"
 }
-每个维度打 1-10 分（可为小数），宁严勿宽。
+每个维度打 1-10 分（可为小数），宁严勿宽。major 问题必须给 quote（系统会逐条校验引文是否真在稿件中——编造的引文会被降档标记）。
 
 ## 待评审稿件
 ---
@@ -2260,6 +2310,18 @@ def _read_ledger(workdir):
     return txt or "（暂无记录）"
 
 
+def _read_ledger_raw(workdir):
+    """账本原文（缺文件/读失败返回空串）——供 _ledger_watchlist 解析，
+    不带注入面的兜底文案。"""
+    p = os.path.abspath(os.path.join(str(workdir or ""), LEDGER_FILE))
+    if not _inside(workdir, p) or not os.path.isfile(p):
+        return ""
+    try:
+        return _read_text_any_enc(p)
+    except OSError:
+        return ""
+
+
 def _shrink_context_block(sk_block, bible, budget=12000):
     """分层上下文降级（长提示词在容量受限通道上会挂起/秒拒，2026-09-17 讯飞实测）。
 
@@ -2369,10 +2431,11 @@ SERIAL_GLOBAL_PROMPT = """你是网文主编（不要修改任何文件）。全
 请输出一个 ```json 代码块，不要输出其他内容。JSON 结构：
 {
   "scores": {"__DIMKEYS__"},
-  "issues": [{"dim": "维度名", "severity": "major|minor", "note": "具体问题（指明哪一章）"}],
+  "issues": [{"dim": "维度名", "severity": "major|minor", "note": "具体问题（指明哪一章）", "quote": "支撑该问题的稿件原文连续片段（≥8字，逐字摘录不许改写）"}],
   "summary": "一句话总评：是否达到可签约水平"
 }
 每个维度打 1-10 分，宁严勿宽。重点关注：主线一致性、人物弧光、节奏、爽点密度、完本感。
+major 问题必须给 quote（系统会逐条校验引文是否真在稿件中——编造的引文会被降档标记）。
 
 ## 全书目标
 __GOAL__
@@ -2446,6 +2509,87 @@ def _wc(text):
     return len(re.sub(r"\s", "", text or ""))
 
 
+_ANCHOR_EDGE_PUNCT = "。！？，、；：…—·,.!?;:\"'“”‘’()（）[]【】《》<>*#-"
+
+
+def _norm_anchor(s):
+    """锚校验归一：去全部空白 + 剥首尾标点（引文摘录常多带一个句号/引号，
+    中英混排空格差异也不应判假）。"""
+    s = re.sub(r"\s+", "", str(s or ""))
+    return s.strip(_ANCHOR_EDGE_PUNCT)
+
+
+def _anchor_issues(issues, manuscript):
+    """评审证据锚（ARIS Anti-Autoresearch 借鉴）：issue 带 quote（稿件原文
+    摘录）时做确定性 containment 校验——模型只提议发现，锚定事实由规则裁决。
+
+    三态：quote 命中稿件 → anchored=True；quote 给了但对不上 → anchored=False
+    （降档殿后+标记，不删除：模型改写式引用时保留可见性）；没给 quote →
+    anchored=None（老格式评审灰度兼容，不标记不排序影响）。返回 (issues, 未锚定数)。"""
+    ms = _norm_anchor(manuscript)
+    unanchored = 0
+    for it in issues or []:
+        q = _norm_anchor(it.get("quote"))
+        if not q:
+            it["anchored"] = None
+            continue
+        it["anchored"] = len(q) >= 6 and q in ms
+        if it["anchored"] is False:
+            unanchored += 1
+    return issues, unanchored
+
+
+def _major_lines(majors, limit=8):
+    """majors → 修订面意见行：锚定的在前，未锚定殿后并带标记（模型据此
+    分配采信权重）；无 quote 的老格式行居中不动。"""
+    ranked = sorted(majors or [],
+                    key=lambda x: {True: 0, False: 2}.get(x.get("anchored"), 1))
+    lines = []
+    for x in ranked[:limit]:
+        mark = ("（未锚定：引文与稿件不符，酌情采信）"
+                if x.get("anchored") is False else "")
+        lines.append("- [%s] %s%s" % (x.get("dim", "?"),
+                                      str(x.get("note", ""))[:140], mark))
+    return lines
+
+
+_LEDGER_DONE_WORDS = ("已兑现", "已回收", "已解除", "已完成", "已了结", "已交付")
+
+
+def _ledger_watchlist(ledger_text, upto_chapter, min_age=3, limit=8):
+    """陈年承诺督促（continuum 承诺/伏笔账借鉴）：按「## 第 N 章」段解析
+    资源账本，承诺/伏笔类条目现状未了结、且距本章 ≥min_age 章未更新 →
+    观查清单（推送起草面督促推进/回收）。账本按章追加、同名条目以最后
+    出现的章为准；老账本无该类条目返回空。"""
+    last = {}   # (类型, 名称) -> (最后章号, 现状)
+    cur = 0
+    for ln in str(ledger_text or "").splitlines():
+        m = re.match(r"##\s*第\s*(\d+)\s*章", ln.strip())
+        if m:
+            cur = int(m.group(1))
+            continue
+        s = ln.strip().lstrip("-*").strip()
+        if not s or "|" not in s:
+            continue
+        parts = [p.strip() for p in s.split("|")]
+        if len(parts) < 3:
+            continue
+        typ, name, status = parts[0], parts[1], "｜".join(parts[2:])
+        if "承诺" not in typ and "伏笔" not in typ:
+            continue
+        last[(typ, name)] = (cur, status)
+    out = []
+    for (typ, name), (ch_no, status) in last.items():
+        if any(w in status for w in _LEDGER_DONE_WORDS):
+            continue
+        age = upto_chapter - ch_no
+        if age >= min_age:
+            out.append({"type": typ, "name": name, "status": status,
+                        "age": age, "last_chapter": ch_no})
+    out.sort(key=lambda x: -x["age"])
+    return out[:limit]
+
+
 def _write_chapter(workdir, i, text):
     # 安全落盘委托（inkos 安全章节工作区借鉴）：tmp+原子改名，写一半
     # 崩溃不留半章冒充成稿；路径守卫在 chaptersafe（resolve+parents）
@@ -2702,6 +2846,19 @@ def _run_serial_review(run, task, agents, ev, stats, mode, critics, impl, route,
         ev_check_lines = [[]]     # 每章重置：第一份非空评审的逐项判定
         ledger_lines = []         # 本章全部评审的账本增量并集
         ledger_txt = _read_ledger(workdir)   # 截至上一章的资源账本（起草注入）
+        # 陈年承诺督促（continuum 借鉴）：账本里 ≥3 章未推进且未了结的承诺/
+        # 伏笔点名给起草面——「本章推进/回收其一，或明确有意留白」；老账本
+        # 无承诺类条目时静默不占字节
+        try:
+            _wl = _ledger_watchlist(_read_ledger_raw(workdir), i)
+            if _wl:
+                ledger_txt += ("\n\n### ⚠ 陈年承诺/伏笔（多章未推进）\n"
+                               + "\n".join("- %s「%s」：%s（已 %d 章未更新——本章应推进、"
+                                           "回收其一，或在大纲允许处明确留白）"
+                                           % (w["type"], w["name"], w["status"], w["age"])
+                                           for w in _wl))
+        except Exception:
+            pass
         prev = ""
         draft_sid = ""  # §07 T1.1：本轮 draft/复用章的会话 id（revise 复用；reuse 时为空）
         if i > 1:
@@ -3234,9 +3391,11 @@ def _run_serial_review(run, task, agents, ev, stats, mode, critics, impl, route,
             rounds_used = 2
             majors = [x for x in issues_all if x.get("chapter") == i
                       and x.get("severity") == "major"][:8]
+            majors, _unanchored = _anchor_issues(majors, text)
             crit_lines = ["- %s：%.1f（章阈值 %.1f）" % (d, means[d], threshold_ch) for d in dims]
-            crit_lines += ["- [%s] %s" % (x.get("dim", "?"), str(x.get("note", ""))[:140])
-                           for x in majors]
+            crit_lines += _major_lines(majors)
+            if _unanchored:
+                crit_lines.append("- ⚠ %d 条 major 意见的引文未能在稿件中锚定，已降序殿后" % _unanchored)
             if rnd == 1 and race_losers and impl.get("mode") == "real":
                 # 赛马败者精华回收（连载版）：一次选择器调用提炼落选稿优点，
                 # 与评审意见一并喂给首轮修订；失败静默不影响修订
@@ -3962,8 +4121,10 @@ def _run_content_review(run, task, agents, ev, stats, mode):
         # 修订
         crit_lines = ["- %s：%.1f（阈值 %.1f）" % (d, means[d], threshold) for d in dims]
         majors = [i for i in issues_all if i.get("severity") == "major"][:8]
-        for i in majors:
-            crit_lines.append("- [%s] %s" % (i.get("dim", "?"), str(i.get("note", ""))[:120]))
+        majors, _unanchored = _anchor_issues(majors, manuscript)
+        crit_lines += _major_lines(majors)
+        if _unanchored:
+            crit_lines.append("- ⚠ %d 条 major 意见的引文未能在稿件中锚定，已降序殿后" % _unanchored)
         if r == 1 and bestof_improvements:
             # 败者精华回收（freebuff suggestedImprovements 的落地）：终审从落选
             # 候选稿提炼的优点，首轮修订时与评审意见一并喂给作者
@@ -4387,6 +4548,39 @@ def execute_run(run_id):
         store.update_run(run_id, expected_status="running", status="failed",
                          error="找不到任务 %s" % run.get("task_id"), ended_at=_now())
         return
+    # 流程修订漂移诊断（借鉴 WorkDSH ADR-0010 修订钉住）：任务参数创建时已
+    # 固化，改流程不影响固化字段；但历史任务缺失字段的兜底仍取当前流程定义，
+    # 续跑/重试可能静默吃到新流程。漂移不阻断——「改完流程再重跑」是合法
+    # 路径——但必须留痕可对账：run 记结构化 flow_drift + 用户可见 warning。
+    _drift = flows.flow_drift(task)
+    if _drift:
+        store.update_run(run_id, flow_drift=_drift)
+        try:
+            _warns = (store.get_run(run_id) or {}).get("warnings") or []
+            store.update_run(run_id, warnings=_warns + [
+                "流程「%s」在任务创建后已修改（%s → %s）；任务固化参数不受影响，"
+                "历史任务缺失字段的兜底取值已随新定义"
+                % (_drift["flow"], _drift["pinned"][:8], _drift["current"][:8])])
+        except Exception:
+            pass
+        print("[CodeBee] 流程漂移：%s（任务 %s 创建后流程已修改 %s → %s）"
+              % (run_id, task.get("id"), _drift["pinned"][:8], _drift["current"][:8]),
+              flush=True)
+    # 附件完整性对账（借鉴 WorkDSH 输入引用修订）：任务钉的附件指纹 vs 当前
+    # 文件内容。换过/删过给明确诊断——续跑吃到「不是当初那份附件」不能无声。
+    try:
+        _adrift = attachments.verify_task(task, task.get("workdir"))
+        if _adrift:
+            store.update_run(run_id, attachment_drift=_adrift)
+            _names = "、".join(d["name"] for d in _adrift[:3]) + (
+                " 等 %d 项" % len(_adrift) if len(_adrift) > 3 else "")
+            _warns2 = (store.get_run(run_id) or {}).get("warnings") or []
+            store.update_run(run_id, warnings=_warns2 + [
+                "附件在任务创建后已变化（%s）：%s；本次执行使用当前文件内容"
+                % (", ".join(sorted({d["status"] for d in _adrift})), _names)])
+            print("[CodeBee] 附件漂移：%s（%s）" % (run_id, _names), flush=True)
+    except Exception:
+        pass
     try:
         _ensure_budget(run_id)
     except TaskTimeout:

package/app/core/planner.py

@@ -133,6 +133,8 @@ CODE_PLAN_PROMPT = """你是技术负责人。请先判定任务难度，再按
 子任务拆分：easy 一律只拆 1 个子任务——一个子任务把目标完整做完并自检通过即收尾，
 禁止拆出独立的核查/联调/收尾子任务；只有 hard 才允许多个子任务（至多 __N__ 个），
 粒度要可独立验证，且最后一个子任务必须包含整体联调/收尾。
+hard 也不做任务没要的防御性扩展子任务（缓存/重试/监控/通用抽象层）——
+发现真实风险写进对应子任务的 detail 里备注，由人决定要不要做。
 
 ## 先探索再计划（重要，借鉴 OpenSpec explore）
 拆解之前先用你的读文件/搜索工具**实际查看工作目录**，找到目标相关的真实文件与函数，再据此拆解。
@@ -248,7 +250,8 @@ def _norm_chapters(data, n, vol_per=0, vol_start=1, vol_plan=None):
     # 分卷：只收本批真正用到的卷的卷名/卷弧光（模型可能多写或乱写卷号，一律按
     # 本批章号范围过滤）。卷边界不在这里——它由 volumes.build_plan 从章号推导。
     if vol_plan:
-        named = volumes.norm_volumes(data.get("volumes"), vol_per, vol_start, n)
+        named = volumes.norm_volumes(data.get("volumes"), vol_per, vol_start, n,
+                                      plan=vol_plan)
         if named:
             res["volumes"] = named
     return res

package/app/core/publish/browser.py

@@ -342,6 +342,12 @@ class Page:
                 pass
             time.sleep(0.4)
             return
+        host = _up(url).netloc
+        if not host:
+            # 无主机名=无效地址（占位符未替换等）。放行会在下方被「host 为空
+            # 视为已到位」吞掉——页面停在 about:blank 还假装导航成功（0924 案）。
+            raise BrowserError("无效的导航地址（无主机名，占位符可能未替换）：%s"
+                               % str(url)[:90])
         try:
             self.send("Page.navigate", {"url": url}, timeout=timeout)
         except BrowserError:

package/app/core/publish/fanqie.py

@@ -126,3 +126,34 @@ def chapter_manage_url(book):
     if bid:
         return "https://fanqienovel.com/main/writer/chapter-manage/" + bid
     return CONFIG["home"] + "book-manage"
+
+
+def resolve_book_id(page, book):
+    """登记缺 book_id 时按书名在作家后台找回：点书卡进详情，从 URL 提取。
+
+    建书成功但 id 提取落空（跳转链没走完/auto_submit=false 人工提交）的书，
+    发章前经 manager._resolve_book_id 调到这里补账；找不回返回空串不拦死。"""
+    import re
+    import time
+    from . import flow as _flow
+    title = str((book or {}).get("title") or "").strip()
+    if not title:
+        return ""
+    try:
+        page.navigate(CONFIG["home"], timeout=30)
+    except Exception:
+        return ""
+    r = None
+    for _try in range(6):                   # 书列表慢渲染
+        r = page.call(_flow._click_match_js(), [title], 300)
+        if (r or {}).get("ok"):
+            break
+        time.sleep(1.0)
+    if not (r or {}).get("ok"):
+        return ""
+    time.sleep(2.5)                         # 详情页跳转收尾
+    m = re.search(r"book-info/(\d+)|chapter-manage/(\d+)|writer/(\d+)/publish",
+                  str(page.url() or ""))
+    if not m:
+        return ""
+    return m.group(1) or m.group(2) or m.group(3) or ""

package/app/core/publish/flow.py

@@ -22,6 +22,7 @@
 from __future__ import annotations
 
 import json
+import re
 import time
 
 from .browser import BrowserError
@@ -122,6 +123,13 @@ def run_flow(page, steps, values=None, config=None, auto_submit=False,
                     url = url.replace("{%s}" % k, str(v))
                 for k, v in (values or {}).items():   # editor_url/draft_url 等任务级占位
                     url = url.replace("{%s}" % k, str(v))
+                # 占位符没被吃掉=values 缺键（平台模块缺 URL 生成器/登记不全）。
+                # 直接放行会让浏览器停在 about:blank，到 url_any 才误报
+                # 「未登录或改版」——在这里点名缺哪个键（0924 番茄三连败）。
+                left = re.findall(r"\{[A-Za-z_][A-Za-z0-9_]*\}", url)
+                if left:
+                    raise FlowError("URL 占位符 %s 没有对应值：%s"
+                                    % (",".join(left), url[:90]))
                 note(i, "打开 %s" % url)
                 # 重页（编辑器/管理列表）可按步放宽；缺省 45s（30s 对慢网偏紧）
                 page.navigate(url, timeout=float(st.get("timeout") or 45))
@@ -410,7 +418,7 @@ def run_flow(page, steps, values=None, config=None, auto_submit=False,
                     else:
                         msg += "（常见原因：表单校验未过，如简介字数不足）"
                     raise FlowError(msg)
-                note(i, "页面标记校验通过")
+                note(i, "页面标记校验通过（%s）" % u[:80])
             else:
                 raise FlowError("未知步骤类型：%s" % act)
         except FlowError:

package/app/core/publish/ledger.py

@@ -24,7 +24,8 @@ from .. import paths
 LOCK = threading.RLock()
 
 FIELDS = ("ts", "day", "platform", "action", "task_id", "chapter_no",
-          "book_id", "title", "ok", "error", "shot")
+          "book_id", "title", "ok", "error", "shot", "operation_id",
+          "operation_status", "remote_receipt")
 
 
 def _month_file(day):
@@ -32,7 +33,8 @@ def _month_file(day):
 
 
 def record(platform, action, task_id="", chapter_no=0, book_id="",
-           title="", ok=True, error="", shot=""):
+           title="", ok=True, error="", shot="", operation_id="",
+           operation_status="", remote_receipt=""):
     """追加一条发布记录。异常全吞——记账失败绝不能影响发布主流程。"""
     try:
         rec = {
@@ -47,6 +49,9 @@ def record(platform, action, task_id="", chapter_no=0, book_id="",
             "ok": bool(ok),
             "error": str(error or "")[:300],
             "shot": str(shot)[:200],
+            "operation_id": str(operation_id or "")[:80],
+            "operation_status": str(operation_status or "")[:20],
+            "remote_receipt": str(remote_receipt or "")[:300],
         }
         with LOCK:
             paths.PUBLISH_DIR.mkdir(parents=True, exist_ok=True)

package/app/core/publish/manager.py

@@ -19,10 +19,11 @@ view()（SSE/轮询）看进度；线程内任何异常都落终态，绝不悬
 from __future__ import annotations
 
 import json
+import re
 import threading
 import time
 
-from .. import paths
+from .. import operations, paths
 from . import fanqie, flow, ledger, qimao
 from .browser import Browser, BrowserError, Page
 
@@ -406,9 +407,13 @@ def create_book_async(task_id, plat, auto_submit=False):
     data = meta["data"]
     mod = PLATFORMS[plat]
     logs = []
+    book_name = (data.get("book_name") or "").strip()
+    operation_id = operations.begin(
+        "publish:%s:create_book" % plat,
+        {"task_id": task_id, "title": book_name}, task_id=task_id,
+        metadata={"platform": plat, "action": "create_book"})
 
     def run():
-        book_name = (data.get("book_name") or "").strip()
         try:
             b, page = _open_page(plat)
             values = mod.values_create_book(data)
@@ -419,27 +424,49 @@ def create_book_async(task_id, plat, auto_submit=False):
                           shot=lambda n: page.screenshot(ledger.shot_path(plat, task_id, n)),
                           log=logs.append)
             # book_id：创建成功后平台跳书籍详情/编辑器，从 URL 提取
-            # （番茄 book-info/<id>；七猫 information?id=<id>）。
-            # 提取不到就先用书名登记，发章按书名找书。
+            # （番茄 book-info/<id>；七猫 information?id=<id>）。url_any 过了
+            # 但页面还在跳转链上时再等几轮；提取落空把最终 URL 记进日志，
+            # 别再静默登记空 id（发章只能兜底找书，直达编辑器就废了）。
             book_id = ""
             try:
-                m_url = re.search(r"book-info/(\d+)|information\?id=(\d+)",
-                                  str(page.url() or ""))
-                if m_url:
-                    book_id = m_url.group(1) or m_url.group(2)
+                for _try in range(6):
+                    m_url = re.search(r"book-info/(\d+)|information\?id=(\d+)",
+                                      str(page.url() or ""))
+                    if m_url:
+                        book_id = m_url.group(1) or m_url.group(2)
+                        break
+                    time.sleep(0.8)
+                if not book_id:
+                    logs.append("book_id 提取落空，最终页面：%s"
+                                % str(page.url() or "")[:120])
             except Exception:
                 pass
+            operation_status = "confirmed" if book_id else "unknown"
+            if book_id:
+                operations.confirm(operation_id, remote_receipt=book_id,
+                                   metadata={"platform": plat, "action": "create_book"})
+            else:
+                operations.mark_unknown(
+                    operation_id,
+                    "建书流程完成但未取得远端 book_id，请先在平台核对后再重试",
+                    metadata={"platform": plat, "action": "create_book"})
             ledger.record(plat, "create_book", task_id=task_id, title=book_name,
-                          book_id=book_id, ok=True,
-                          error="\n".join(logs)[:2000],
-                          shot=str(ledger.shot_path(plat, task_id, "")))
+                          book_id=book_id, ok=bool(book_id),
+                          error=("\n".join(logs)[:2000] if book_id else
+                                 "建书结果未知：未取得远端 book_id；请先对账"),
+                          shot=str(ledger.shot_path(plat, task_id, "")),
+                          operation_id=operation_id, operation_status=operation_status,
+                          remote_receipt=book_id)
             ledger.save_book(task_id, plat, {"book_id": book_id, "title": book_name})
             _set(plat, status="connected", error="")
         except Exception as e:
+            operations.finish_exception(operation_id, e)
+            operation_status = (operations.get(operation_id) or {}).get("status") or "failed"
             _set(plat, status="error", error="建书失败：%s" % e)
             ledger.record(plat, "create_book", task_id=task_id, title=book_name,
                           ok=False, error=str(e)[:300],
-                          shot=str(ledger.shot_path(plat, task_id, "")))
+                          shot=str(ledger.shot_path(plat, task_id, "")),
+                          operation_id=operation_id, operation_status=operation_status)
         finally:
             _save()
 
@@ -515,6 +542,32 @@ def _login_guard(plat):
         return False, "浏览器不可用：%s" % e
 
 
+def _url_values(mod, book):
+    """平台模块提供的 URL 占位值（chapter_manage_url/draft_url/editor_url），
+    逐键取、缺哪个跳哪个。曾按序连赋 + except AttributeError 兜底：draft_url
+    只有七猫有，番茄走到第二行即断，editor_url 永远赋不上——{editor_url}
+    残进 navigate，页面停在 about:blank 误报「未登录或改版」（0924 三连败）。"""
+    out = {}
+    for key in ("chapter_manage_url", "draft_url", "editor_url"):
+        fn = getattr(mod, key, None)
+        if callable(fn):
+            out[key] = fn(book)
+    return out
+
+
+def _resolve_book_id(plat, page, book):
+    """登记缺 book_id 时按书名在作家后台找回（平台模块可选提供
+    resolve_book_id）。找不回返回空串：流程按无 id 兜底路径继续，让后续
+    步骤如实报错，绝不在这里拦死。找回后回写 books.json，下次直达。"""
+    fn = getattr(PLATFORMS[plat], "resolve_book_id", None)
+    if not callable(fn) or str((book or {}).get("book_id") or "").strip():
+        return ""
+    try:
+        return str(fn(page, book) or "").strip()
+    except Exception:
+        return ""
+
+
 # ---------------------------------------------------------------- 动作：发章
 def read_chapter(fp):
     """读章节文件 → (章号, 标题, 正文, 错误)。UTF-8→GBK 回退（章稿乱码教训）。
@@ -558,6 +611,10 @@ def upload_chapter_async(task_id, plat, chapter_file, auto_submit=False):
     book = ledger.book_for(task_id, plat)
     if not book:
         return False, "该任务尚未在此平台建书，请先「创建作品」"
+    # 闭包中需要在找回 book_id 后更新书籍引用；使用独立副本避免
+    # Python 将 book 误判为 run() 的局部变量，导致前置解析触发
+    # UnboundLocalError。
+    book_ref = dict(book)
     if _st(plat).get("status") == "busy":
         return False, "该平台有操作正在进行中"
     ch_no, title, body, err = read_chapter(chapter_file)
@@ -583,30 +640,42 @@ def upload_chapter_async(task_id, plat, chapter_file, auto_submit=False):
 
     mod = PLATFORMS[plat]
     values = {"chapter_title": title, "chapter_body": body,
-              "book_name": book.get("title") or ""}
-    try:                                   # verify/draft 页 URL（流程占位）
-        values["chapter_manage_url"] = mod.chapter_manage_url(book)
-        values["draft_url"] = mod.draft_url(book)
-        values["editor_url"] = mod.editor_url(book)
-    except AttributeError:
-        pass
+              "book_name": book_ref.get("title") or ""}
+    values.update(_url_values(mod, book_ref))   # verify/draft/editor 页 URL（流程占位）
     logs = []
+    operation_id = operations.begin(
+        "publish:%s:upload_chapter" % plat,
+        {"task_id": task_id, "chapter_no": ch_no, "title": title}, task_id=task_id,
+        metadata={"platform": plat, "action": "upload_chapter"})
 
     def run():
         try:
             b, page = _open_page(plat)
+            bid = _resolve_book_id(plat, page, book_ref)
+            if bid:                          # 建书时没提上 id 的书，发章前补账
+                book_ref.update(book_id=bid)
+                values.update(_url_values(mod, book_ref))
+                ledger.save_book(task_id, plat, book_ref)
+                logs.append("已按书名找回 book_id=%s 并更新登记" % bid)
             flow.run_flow(page, load_flow(plat, "upload_chapter"), values=values,
                           config=mod.CONFIG, auto_submit=auto_submit,
                           shot=lambda n: page.screenshot(ledger.shot_path(plat, task_id, n)),
                           log=logs.append)
+            operations.confirm(operation_id, metadata={"platform": plat,
+                                                        "action": "upload_chapter",
+                                                        "chapter_no": ch_no})
             ledger.record(plat, "upload_chapter", task_id=task_id, chapter_no=ch_no,
-                          book_id=book.get("book_id") or "", title=title, ok=True)
+                          book_id=book_ref.get("book_id") or "", title=title, ok=True,
+                          operation_id=operation_id, operation_status="confirmed")
             _set(plat, status="connected", error="")
         except Exception as e:
+            operations.finish_exception(operation_id, e)
+            operation_status = (operations.get(operation_id) or {}).get("status") or "failed"
             _set(plat, status="error", error="发章失败：%s" % e)
             ledger.record(plat, "upload_chapter", task_id=task_id, chapter_no=ch_no,
-                          book_id=book.get("book_id") or "", title=title,
-                          ok=False, error=str(e)[:300])
+                          book_id=book_ref.get("book_id") or "", title=title,
+                          ok=False, error=str(e)[:300], operation_id=operation_id,
+                          operation_status=operation_status)
         finally:
             _save()