codebee 0.1.98 → 0.1.100

package/app/core/openapi.py

@@ -51,6 +51,15 @@ def document():
                               "items": {"type": "string", "maxLength": 80}},
             "task_id": {"type": "string", "maxLength": 100}, "status": {"type": "string", "maxLength": 30},
             "metadata": {"type": "object"}}},
+        "BackendProfile": {"type": "object", "required": ["label", "command"], "properties": {
+            "id": {"type": "string"}, "agent_id": {"type": "string"},
+            "label": {"type": "string", "maxLength": 80}, "command": {"type": "string", "maxLength": 500},
+            "args": {"type": "array", "maxItems": 80, "items": {"type": "string"}},
+            "env": {"type": "object", "additionalProperties": {"type": "string"}},
+            "workspace_path": {"type": "string"}, "enabled": {"type": "boolean"}}},
+        "CommandAuth": {"type": "object", "properties": {
+            "mode": {"type": "string", "enum": ["legacy", "restricted"]},
+            "pending": {"type": "array"}, "rules": {"type": "array"}, "audit": {"type": "array"}}},
     }
 
     def body(schema):
@@ -106,6 +115,29 @@ def document():
             "post": {"summary": "Agent 心跳", "security": security, "requestBody": body(ref("Presence")),
                      "responses": {"200": response("心跳已记录", {"type": "object"}), "400": errors["400"],
                                   "401": errors["401"], "423": errors["423"]}}},
+        "/api/backend-profiles": {
+            "get": {"summary": "读取 ACP Backend Profiles（密钥脱敏）", "security": security,
+                    "responses": {"200": response("Profiles", {"type": "object"}), "401": errors["401"]}},
+            "post": {"summary": "保存 ACP Backend Profile", "security": security,
+                     "requestBody": body(ref("BackendProfile")),
+                     "responses": {"200": response("Profile", {"type": "object"}), "400": errors["400"], "401": errors["401"]}}},
+        "/api/backend-profiles/{profile_id}/delete": {
+            "post": {"summary": "删除 ACP Backend Profile", "security": security,
+                     "responses": {"200": ok, "400": errors["400"], "401": errors["401"], "404": errors["404"]}}},
+        "/api/command-auth": {
+            "get": {"summary": "读取命令授权策略与待处理请求", "security": security,
+                    "responses": {"200": response("Authorization state", ref("CommandAuth")), "401": errors["401"]}},
+            "post": {"summary": "切换命令授权策略", "security": security,
+                     "requestBody": body({"type": "object", "properties": {"mode": {"type": "string", "enum": ["legacy", "restricted"]}}}),
+                     "responses": {"200": response("Authorization state", ref("CommandAuth")), "400": errors["400"], "401": errors["401"]}}},
+        "/api/command-auth/requests/{request_id}": {
+            "post": {"summary": "批准或拒绝等待中的命令", "security": security,
+                     "requestBody": body({"type": "object", "required": ["approve"], "properties": {
+                         "approve": {"type": "boolean"}, "scope": {"type": "string"}, "match": {"type": "string"}, "prefix": {"type": "string"}}}),
+                     "responses": {"200": ok, "400": errors["400"], "401": errors["401"], "404": errors["404"]}}},
+        "/api/command-auth/rules/{rule_id}/revoke": {
+            "post": {"summary": "撤销命令授权规则", "security": security,
+                     "responses": {"200": ok, "400": errors["400"], "401": errors["401"], "404": errors["404"]}}},
         "/api/retrieval/search": {"get": {"summary": "本地检索", "security": security,
             "parameters": [{"name": "q", "in": "query", "required": True,
                             "schema": {"type": "string", "maxLength": 500}},

package/app/core/pipeline.py

@@ -596,6 +596,16 @@ def _external_sandbox_block_reason(agent, workdir, sandbox):
         if normalized.get("env_allowlist"):
             return "沙箱拒绝：该 CLI 后端未接入环境变量白名单，拒绝运行受限任务"
         return ""
+    if (agent or {}).get("kind") == "acp":
+        if normalized.get("network") is False:
+            return "沙箱拒绝：ACP 后端进程未接入网络隔离，拒绝运行网络受限任务"
+        if normalized.get("env_allowlist"):
+            return "沙箱拒绝：ACP 后端进程未接入环境变量白名单，拒绝运行受限任务"
+        roots = [os.path.realpath(x) for x in normalized.get("allowed_roots") or []]
+        if roots and not any(root == allowed or root.startswith(allowed + os.sep)
+                             for allowed in roots):
+            return "沙箱拒绝：任务目录不在 ACP 允许目录内"
+        return ""
     # 非 codex 外部 CLI：默认策略放行，收窄策略拒绝
     if normalized.get("network") is False:
         return "沙箱拒绝：该任务要求禁网，外部 CLI 无法执行网络受限任务"
@@ -628,14 +638,16 @@ def _create_task_from_builtin(payload):
 
 
 def _run_builtin_step(run_id, role, bi, prompt, workdir, ev, note="", images=None,
-                      followups=False):
+                      followups=False, sandbox=None):
     """内置智能体步骤：直连模型 API + 工具循环（builtin_agent），不经 CLI 进程。
 
     与 _run_step 对齐的三件事：暂停/取消闸门、运行中指令 drain 注入、重复调用
     守门；结果同样经 _finish_step_result 落步骤（output=干净回答）并入用量台账。
     日志只有「迭代/工具」摘要行——对话视图吃 output，日志抽屉看工具轨迹。
     followups=True 时从回答末尾解析「建议追问」块（直连对话专用协议）：
-    剥离出结构化列表落步骤记录，正文保持干净。"""
+    剥离出结构化列表落步骤记录，正文保持干净。
+    sandbox：任务沙箱策略由调用方透传（本函数无 task 上下文），builtin_agent
+    内部 normalize 后在工具执行期强制。"""
     _wait_gate(run_id, ev)
     deadline = _ensure_budget(run_id)
     step, log_abs = store.add_step(run_id, role, "builtin", "CodeBee", note=note,
@@ -689,7 +701,7 @@ def _run_builtin_step(run_id, role, bi, prompt, workdir, ev, note="", images=Non
                             on_reason=_on_reason, on_stream=_on_stream,
                             on_activity=_on_activity,
                             task_creator=_create_task_from_builtin,
-                            sandbox=task.get("sandbox"), checkpoint_run_id=run_id)
+                            sandbox=sandbox, checkpoint_run_id=run_id)
     if followups and res.get("ok"):
         clean, fups = _parse_followups(res.get("text") or "")
         if fups:
@@ -816,7 +828,13 @@ def _spawn_step(session_run_id, role, agent, prompt, workdir, readonly, ev,
         llm_caller = _make_llm_caller(agent, workdir, deadline=deadline)
         call_kwargs = dict(workdir=workdir, readonly=readonly,
                            timeout=timeout, cancel_event=ev, log_path=str(log_abs),
-                           images=images, require_tools=require_tools, deadline=deadline)
+                           images=images, require_tools=require_tools, deadline=deadline,
+                           command_context={"run_id": session_run_id,
+                                            "sandbox": (store.get_task(
+                                                (store.get_run(session_run_id) or {}).get("task_id")
+                                            ) or {}).get("sandbox") or {},
+                                            "allow_terminal": not readonly},
+                           checkpoint_run_id=session_run_id)
 
         def _call(p, **kw):
             nonlocal usage_recorded
@@ -844,7 +862,13 @@ def _spawn_step(session_run_id, role, agent, prompt, workdir, readonly, ev,
         res = runner.run_agent(agent, prompt, workdir=workdir, readonly=readonly,
                                timeout=timeout, cancel_event=ev, log_path=str(log_abs),
                                resume=resume, images=images, require_tools=require_tools,
-                               deadline=deadline)
+                               deadline=deadline,
+                               command_context={"run_id": session_run_id,
+                                                "sandbox": (store.get_task(
+                                                    (store.get_run(session_run_id) or {}).get("task_id")
+                                                ) or {}).get("sandbox") or {},
+                                                "allow_terminal": not readonly},
+                               checkpoint_run_id=session_run_id)
     # 默认关闭压缩和 resume 都走直通分支，也必须把真实 usage 送进预算表；否则
     # 下一步永远看到 used=0，max_tokens_per_run 只是一个无效设置。
     if not usage_recorded:
@@ -1559,7 +1583,8 @@ def _run_code(run, task, agents, ev, stats, mode):
 
     # 项目记忆既给规划器，也给快速路径的实现者；不能因省掉独立规划而漏掉。
     user_context_len = len(task.get("context") or "")
-    project_memory = _read_project_memory(workdir)
+    project_memory = _read_project_memory(
+        workdir, query=task.get("goal") or task.get("title") or "")
     if project_memory:
         task = dict(task, context=(task.get("context") or "") + "\n\n" + project_memory)
 
@@ -2334,7 +2359,7 @@ def _run_direct(run, task, agents, ev, stats, mode):
         if bi is not None:
             res = _run_builtin_step(run_id, "direct" if first else "chat", bi, prompt,
                                     step_wd, ev=ev, note=note, images=images,
-                                    followups=True)
+                                    followups=True, sandbox=task.get("sandbox"))
         else:
             res = _run_step(run_id, "direct" if first else "chat", impl, prompt, step_wd,
                             readonly=False, ev=ev, note=note,
@@ -5380,11 +5405,11 @@ def _write_project_memory(task, workdir, lines, source_run=""):
         return ""
 
 
-def _read_project_memory(workdir, cap=4000):
+def _read_project_memory(workdir, cap=4000, query=""):
     """Only inject approved, unexpired and fingerprint-verified memory."""
     try:
         from . import project_memory
-        return project_memory.active_text(workdir, cap=cap)
+        return project_memory.active_text(workdir, cap=cap, query=query)
     except (OSError, ValueError, TypeError):
         return ""
 

package/app/core/project_memory.py

@@ -5,6 +5,7 @@ from __future__ import annotations
 import hashlib
 import json
 import os
+import re
 import stat
 import time
 from pathlib import Path
@@ -95,6 +96,8 @@ def list_entries(workdir, *, now=None):
         raw = row.get("content") or ""
         row["verified"] = hashlib.sha256(raw.encode("utf-8")).hexdigest() == row.get("content_sha256")
         row["expired"] = float(row.get("expires_at") or 0) <= stamp
+        row["feedback_score"] = int(row.get("feedback_score") or 0)
+        row["feedback_count"] = int(row.get("feedback_count") or 0)
     return sorted(rows, key=lambda x: (x.get("created_at", 0), x.get("id", "")), reverse=True)
 
 
@@ -126,14 +129,78 @@ def decide(workdir, entry_id, action, *, expected_version=None, now=None):
     return row
 
 
-def active_text(workdir, *, cap=4000, now=None):
+def feedback(workdir, entry_id, *, useful, expected_version=None, now=None):
+    """Record explicit retrieval feedback as a versioned append-only update."""
+    if not isinstance(useful, bool):
+        raise ValueError("useful 必须是布尔值")
+    path = _file(workdir)
+    row = _read(path).get(str(entry_id or ""))
+    if not row:
+        raise KeyError("记忆条目不存在")
+    if expected_version is not None and int(expected_version) != int(row.get("version") or 1):
+        raise ValueError("记忆条目版本已变化，请刷新后重试")
+    raw = row.get("content") or ""
+    if hashlib.sha256(raw.encode("utf-8")).hexdigest() != row.get("content_sha256"):
+        raise ValueError("记忆内容指纹校验失败")
+    if row.get("status") != "approved":
+        raise ValueError("只有已批准的记忆条目可以反馈")
     stamp = float(now if now is not None else time.time())
+    row = dict(row, feedback_score=int(row.get("feedback_score") or 0) +
+               (1 if useful else -1),
+               feedback_count=int(row.get("feedback_count") or 0) + 1,
+               feedback_at=stamp, version=int(row.get("version") or 1) + 1,
+               updated_at=stamp)
+    _append(path, row)
+    return row
+
+
+def _query_terms(query):
+    query = str(query or "").strip().lower()
+    words = re.findall(r"[a-z0-9_]+|[\u3400-\u9fff]+", query)
+    terms = set()
+    for word in words:
+        if len(word) > 2 and re.fullmatch(r"[\u3400-\u9fff]+", word):
+            terms.update(word[i:i + 2] for i in range(len(word) - 1))
+        else:
+            terms.add(word)
+    return terms
+
+
+def _relevance(row, terms):
+    if not terms:
+        return 0
+    title = str(row.get("title") or "").lower()
+    content = str(row.get("content") or "").lower()
+    title_terms = _query_terms(title)
+    content_terms = _query_terms(content)
+    return 4 * len(terms & title_terms) + len(terms & content_terms)
+
+
+def active_text(workdir, *, cap=4000, query="", now=None):
+    stamp = float(now if now is not None else time.time())
+    try:
+        cap = max(0, int(cap))
+    except (TypeError, ValueError):
+        cap = 4000
+    heading = "## 已批准项目记忆（内容已校验，过期条目不注入）\n\n"
+    cap = max(0, cap - len(heading) - 2)
+    terms = _query_terms(query)
     items = []
     for row in list_entries(workdir, now=stamp):
         if row.get("status") != "approved" or row.get("expired") or not row.get("verified"):
             continue
-        items.append("### %s\n%s" % (row.get("title") or "项目记忆", row.get("content") or ""))
-    text = "\n\n".join(items)
-    if len(text) > cap:
-        text = text[-cap:]
-    return ("## 已批准项目记忆（内容已校验，过期条目不注入）\n\n" + text + "\n\n") if text else ""
+        block = "### %s\n%s" % (row.get("title") or "项目记忆", row.get("content") or "")
+        items.append((row, block))
+    items.sort(key=lambda item: (_relevance(item[0], terms),
+                                 item[0].get("feedback_score", 0),
+                                 item[0].get("created_at", 0)), reverse=True)
+    selected = []
+    used = 0
+    for _row, block in items:
+        cost = len(block) + (2 if selected else 0)
+        if used + cost > cap:
+            continue
+        selected.append(block)
+        used += cost
+    text = "\n\n".join(selected)
+    return (heading + text + "\n\n") if text else ""

package/app/core/publish/auto.py

@@ -135,7 +135,9 @@ def pending(task_id, platform):
     """待发章节清单：任务工作目录里的章节文件 − 已发章号，按章号升序。
 
     已发口径连载链合并（含校准所得平台实况），所以任何一个批次任务上发
-    起发布，看到的都是整本书的待发清单。返回 (list, err)；list 项
+    起发布，看到的都是整本书的待发清单。已存草稿的章同样剔除（内容已在
+    平台草稿箱，再跑只会造重复稿；提交发布走平台草稿箱由用户手工完成）。
+    返回 (list, err)；list 项
     {chapter_no, file, size}，file 为工作目录相对路径。章号解析不出的
     文件不进自动发布（防同章多文件误发），API 单章发（manager 直调）
     不受此限。
@@ -154,7 +156,8 @@ def pending(task_id, platform):
             if fs:
                 files = fs           # 任一 run 的成品口径都从任务首跑起，取到即够
                 break
-    done = ledger.published_chapters(task_id, platform)
+    done = ledger.published_chapters(task_id, platform) \
+        | ledger.drafted_chapters(task_id, platform)
     # 分卷标注（2026-10-08 用户需求：待发清单按卷展示）：卷计划解析不出时
     # volume 为空串，前端不分组平铺。
     plan = []
@@ -182,7 +185,12 @@ def pending(task_id, platform):
 
 
 def status(task_id):
-    """前端视图：待发清单 + 护栏状态 + 自动发布进度。"""
+    """前端视图：待发清单 + 护栏状态 + 自动发布进度。
+
+    护栏分两层给前端：guard_ok/guard_reason=完整发布闸（硬护栏+质量闸），
+    管「发布」类按钮；draft_ok/draft_reason=硬护栏（每日上限/连败退避/建书
+    确认），管「存草稿」按钮——草稿不上线，质量闸拦它只会堵死「先落平台
+    再人工把关」的通路；quality_blockers 单独带出去做提示性展示。"""
     from .. import store
     from . import ledger, manager
     ent = ledger.books_for(str(task_id))   # 沿连载链继承：续写批次同书同账
@@ -190,19 +198,25 @@ def status(task_id):
     books = []
     for plat, info in ent.items():
         pend, err = pending(task_id, plat)
-        ok, why = guards(task_id, plat)
+        hard_ok, hard_why = guards(task_id, plat)
         if not _book_ready(info):
-            ok, why = False, "该平台建书结果未确认（缺少作品 ID），请重试创建作品或登记已有作品"
-        elif task:
+            hard_ok, hard_why = False, "该平台建书结果未确认（缺少作品 ID），请重试创建作品或登记已有作品"
+        blockers = []
+        if task and _book_ready(info):
             quality = manager._quality_release_guard(task, plat, action="publish")
             if not quality.get("allowed"):
-                ok, why = False, "质量门禁拦截：%s" % "；".join(
-                    quality.get("blockers") or [])
+                blockers = [str(b) for b in (quality.get("blockers") or [])]
+        ok, why = hard_ok, hard_why
+        if ok and blockers:
+            ok, why = False, "质量门禁拦截：%s" % "；".join(blockers)
         books.append({"platform": plat, "bound": True,
                       "title": info.get("title") or "",
                       "pending": len(pend),
                       "items": pend[:200],
                       "guard_ok": ok, "guard_reason": why,
+                      "draft_ok": hard_ok, "draft_reason": hard_why,
+                      "quality_blockers": blockers,
+                      "drafted": len(ledger.drafted_chapters(task_id, plat)),
                       "calibrated": calibrated(plat)})
     run = _running.get(task_id) or None
     if run:
@@ -236,8 +250,27 @@ def calibrated(platform):
     return (paths.PUBLISH_DIR / ("flows-%s.json" % platform)).is_file()
 
 
+def flow_calibrated(plat, action):
+    """某动作的步骤表是否有真机校准来源（用户校准文件或仓库校准模板里
+    有该动作的表）。内置推测表不算——存草稿虽不上线，批量乱点照样惹
+    风控/攒一箱废稿，无人值守跑之前必须有验证过的步骤表。"""
+    import json as _json
+    from pathlib import Path as _Path
+    from .. import paths as _paths
+    for fp in (_paths.PUBLISH_DIR / ("flows-%s.json" % plat),
+               _Path(__file__).with_name("flows-%s-calibrated.json" % plat)):
+        try:
+            data = _json.loads(fp.read_text(encoding="utf-8"))
+            if isinstance(data, dict) and isinstance(data.get(action), list):
+                return True
+        except Exception:
+            pass
+    return False
+
+
 def publish_pending_async(task_id, platform, auto_submit=False, only=None,
-                          force=False, force_confirmed=False, force_reason=""):
+                          force=False, force_confirmed=False, force_reason="",
+                          as_draft=False):
     """把任务的待发章节按章号顺序发出（后台线程）。返回 (ok, err)。
 
     only=章号清单（批量选择发布）：从待发清单里挑出所选章号，保持章号
@@ -245,12 +278,22 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
     auto_submit=True（直发）逐章提交走完全程；False（人工确认）每轮只填
     **一章**就停在 manual_pause——表单填好后提交权在用户，walker 若直接
     填下一章会导航离开未提交的编辑器，把上一章内容丢掉（平台草稿自动
-    保存不可依赖）。用户在浏览器提交后再次发起即发下一章。"""
+    保存不可依赖）。用户在浏览器提交后再次发起即发下一章。
+    as_draft=True（全部发草稿，2026-10-09）：逐章自动填稿并点「存草稿」，
+    不上线、不受质量闸拦、无需人工确认，一章接一章连跑到清空待发清单
+    （章间仍按 PACE_S 防风控节奏）；提交发布由用户到平台草稿箱手工完成，
+    届时质量闸照常把关。与 auto_submit 互斥（草稿模式忽略 auto_submit）。"""
     from .. import store
     from . import ledger, manager
     if platform not in manager.PLATFORMS:
         return False, "未知平台"
-    if auto_submit and not calibrated(platform):
+    if as_draft:
+        auto_submit = False                # 草稿模式没有「提交」语义
+        if not flow_calibrated(platform, "upload_chapter_draft"):
+            return False, ("存草稿模式需要该平台有 upload_chapter_draft 步骤表"
+                           "（仓库校准模板或 data/publish/flows-%s.json）；"
+                           "未校准不许无人值守批量动表单" % platform)
+    elif auto_submit and not calibrated(platform):
         return False, ("自动提交模式需要先校准该平台发布流程：用「探测」按钮 dump "
                        "表单后把真实步骤写进 data/publish/flows-%s.json（缺省选择器"
                        "只是推测，未校准不许无人值守直发）" % platform)
@@ -271,9 +314,13 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
         return False, "该任务尚未在此平台建书，请先「创建作品」"
     if not _book_ready(book):
         return False, "该平台建书结果未确认（缺少作品 ID），请重试创建作品或登记已有作品"
-    quality = manager._quality_release_guard(
-        task, platform, action="publish", force=force,
-        force_confirmed=force_confirmed, force_reason=force_reason)
+    if as_draft:
+        # 草稿不上线：质量闸不适用（同 manager 口径），硬护栏照查
+        quality = {"allowed": True, "status": "draft_only"}
+    else:
+        quality = manager._quality_release_guard(
+            task, platform, action="publish", force=force,
+            force_confirmed=force_confirmed, force_reason=force_reason)
     if not quality.get("allowed"):
         return False, "质量门禁拦截：%s" % "；".join(quality.get("blockers") or [])
     ok, why = guards(task_id, platform)
@@ -298,7 +345,8 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
     wd = task.get("workdir") or ""
     st = {"platform": platform, "at": time.strftime("%Y-%m-%d %H:%M:%S"),
           "done": 0, "total": len(pend), "status": "running", "error": "",
-          "auto_submit": bool(auto_submit), "last_chapter": 0}
+          "auto_submit": bool(auto_submit), "as_draft": bool(as_draft),
+          "last_chapter": 0}
     with _LOCK:
         _running[task_id] = st
 
@@ -310,7 +358,7 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
                     st["status"] = "error"
                     st["error"] = "第 %d 章前护栏拦截：%s" % (item["chapter_no"], why)
                     return
-                upload_kwargs = {"auto_submit": auto_submit}
+                upload_kwargs = {"auto_submit": auto_submit, "as_draft": as_draft}
                 if force or force_confirmed or force_reason:
                     upload_kwargs.update(force=force,
                                          force_confirmed=force_confirmed,
@@ -324,10 +372,29 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
                     return
                 if not _wait_idle(platform):
                     st["status"] = "error"
-                    st["error"] = ("第 %d 章发布等待超时（%.0f 分钟）；若在等人工提交，"
-                                   "请提交后重跑剩余章节" % (item["chapter_no"],
-                                                             IDLE_TIMEOUT_S / 60))
+                    if as_draft:
+                        st["error"] = ("第 %d 章存草稿等待超时（%.0f 分钟），后续"
+                                       "章节未存" % (item["chapter_no"],
+                                                     IDLE_TIMEOUT_S / 60))
+                    else:
+                        st["error"] = ("第 %d 章发布等待超时（%.0f 分钟）；若在等人工提交，"
+                                       "请提交后重跑剩余章节" % (item["chapter_no"],
+                                                                 IDLE_TIMEOUT_S / 60))
                     return
+                if as_draft:
+                    # manager 走完草稿流程（含平台侧验证）才返回；台账落了
+                    # upload_chapter_draft 才算数，防「流程跑完但平台没存上」。
+                    if item["chapter_no"] not in ledger.drafted_chapters(
+                            task_id, platform):
+                        st["status"] = "error"
+                        st["error"] = ("第 %d 章存草稿未确认，后续章节未存（详见"
+                                       "发布台账与截图存证）" % item["chapter_no"])
+                        return
+                    st["done"] += 1
+                    st["last_chapter"] = item["chapter_no"]
+                    if st["done"] < st["total"]:
+                        time.sleep(PACE_S)
+                    continue
                 if not auto_submit:
                     # The manager stopped before the submit step. There is no
                     # remote success receipt until the user clicks submit.
@@ -348,7 +415,11 @@ def publish_pending_async(task_id, platform, auto_submit=False, only=None,
                 if st["done"] < st["total"]:
                     time.sleep(PACE_S)
             st["status"] = "done"
-            if not auto_submit:
+            if as_draft:
+                st["message"] = ("已存草稿 %d 章（未发布，不受质量闸拦不代表可直发）；"
+                                 "请到平台章节管理/草稿箱逐章检查后提交发布"
+                                 % st["done"])
+            elif not auto_submit:
                 st["message"] = "第 %d 章已填好，请在浏览器里确认提交，再重新校准" % st["last_chapter"]
         except Exception as e:                 # 线程内绝不能悬挂无终态
             st["status"] = "error"

package/app/core/publish/fanqie.py

@@ -110,6 +110,35 @@ UPLOAD_CHAPTER = [
      "optional": True},
 ]
 
+# 发章存草稿（2026-10-09 全部发草稿）：与 UPLOAD_CHAPTER 同一张填表前段，
+# 终点不同——点编辑器头部「存草稿」直接落草稿箱，不走「下一步→内容检测→
+# 发布提示→提交」发布链。草稿不上线，批量连跑无需人工确认；提交发布由
+# 用户到章节管理/草稿箱手工完成。verify 沿用章节管理页断言（草稿行同样
+# 出现在列表里，标题/章号标记可命中）；若平台改版把草稿挪去独立草稿箱页，
+# 首轮失败的 step 截图会指出来，照 flows-fanqie.json 校准即可。
+UPLOAD_CHAPTER_DRAFT = [
+    {"do": "navigate", "url": "{editor_url}"},
+    {"do": "url_any", "any": ["fanqienovel.com"]},
+    {"do": "wait", "sel": "[contenteditable=true],textarea[class*=content],div[class*=editor]", "timeout": 10},
+    {"do": "volume", "key": "volume_name", "optional": True,
+     "open_sel": "input[type=number],input[class*=serial],div[class*=volume]",
+     "modal_sel": "[class*=volume][class*=modal],[class*=modal][class*=volume]",
+     "item_sel": "[class*=volume] li,[class*=volume-item]",
+     "add_sel": "[class*=add-volume],[class*=volume] button",
+     "confirm_sel": "[class*=confirm]", "settle": 1.5},
+    {"do": "fill", "sel": "input[type=number],input[class*=serial],input[class*=byte]", "key": "chapter_no"},
+    {"do": "fill", "sel": "input[placeholder*='章节'],input[placeholder*='标题']", "key": "chapter_name"},
+    {"do": "wait", "sel": "[contenteditable=true],textarea[class*=content],div[class*=editor]", "timeout": 10},
+    {"do": "fill", "sel": "[contenteditable=true],textarea[class*=content]", "key": "chapter_body"},
+    {"do": "shot", "name": "chapter-filled-draft"},
+    {"do": "submit", "text": "存草稿", "scope": "button", "tries": 15},
+    {"do": "js_click", "text": "存草稿", "scope": "button", "tries": 10,
+     "optional": True, "skip_if_modal": True},
+    {"do": "sleep", "s": 2.5},
+    {"do": "verify", "url": "{chapter_manage_url}",
+     "any": ["第{chapter_no}章", "{chapter_name}"], "settle": 6, "new_tab": True},
+]
+
 # 登录态探测：打开后台首页，URL 被踢到登录页 → 未登录
 CHECK_LOGIN = [
     {"do": "navigate", "url": "{home}"},
@@ -125,6 +154,7 @@ PROBE_FORM = [
 ]
 
 FLOWS = {"create_book": CREATE_BOOK, "upload_chapter": UPLOAD_CHAPTER,
+         "upload_chapter_draft": UPLOAD_CHAPTER_DRAFT,
          "check_login": CHECK_LOGIN, "probe_form": PROBE_FORM}
 
 

package/app/core/publish/flows-fanqie-calibrated.json

@@ -1,5 +1,6 @@
 {
  "_note": "番茄真机校准（2026-09-19 定稿，2026-09-24 加固）：编辑器=/main/writer/<book_id>/publish/ 直达（章节号 input.serial-input 纯数字；标题 div.serial-editor-input-hint input ≥5字/30上限；正文 .ProseMirror ≥1000字；「下一步」保存校验后按钮组右缘箭头展开下拉含「定时发布」）。建书=/main/writer/create 直达表单：radio 签约模式/目标读者（label 真实点击）→ 阅读标签 select（y<430）弹层 arco-anchor 切主分类/主题/角色/情节 + 标签云点击 + 确认 → 内容标签 select（y>430）弹层 情感/人设/世界观 同构 → 名称/主角1/主角2/简介 → 立即创建（submit 步骤：auto_submit=false 时填好即停，留给人工提交） → 跳 book-info/<id>。锚点切换渲染慢（0924 三连败）：弹层打开后 settle，锚点 tries=12。0928 再加固（弹层没开连败案）：签约/读者 radio 点击后断言选中态（expect_checked）；两处标签触发器点完 wait .category-modal 存在替代盲 sleep；real_click_text 落点 elementFromPoint 守卫，找不到目标时报错自带定位范围可见项诊断。2026-10-08 发章三修：values 补 chapter_no/chapter_name 键（此前序号框从未被填、被平台以「章节序号只支持阿拉伯数字」打回）；标题位改填 chapter_name（read_chapter 拆掉「第X章」前缀，序号/标题分开填）；verify 标记改「第{chapter_no}章」或「{chapter_name}」任一命中（用户手工改过标题时按名对版必假失败）。。2026-10-08 批量自动发布·自动分卷：upload_chapter 增加 volume 步骤（values.volume_name 由 manager 按工作目录卷计划解析：分卷.json 优先，其次 大纲/series-outline.md 的「## 第X卷：名」+「依次48、56…章」；平台卷弹窗 = .publish-header-volume-name 开 → .editor-volume-list-item 按去前缀名匹配选中，缺卷走 .editor-volume-footer-add-volume 新建→行内 input 输名→i.tomato-confirm 落名→选中→确定；新建卷名会追加进 values._volumes 由 manager 回写 books.json 缓存）。。2026-10-08 晚：平台发布确认 UI 已改——下一步（保存校验）后弹「发布提示」错别字确认框（取消/提交），不再有「定时发布」下拉组；流程撤 click_arrow/定时发布/发布，改点确认框「提交」（optional：无错别字时可能不弹，直接 verify）。。verify 改 new_tab（开新页签验证、编辑器页签不动）：编辑器页签内导航触发 beforeunload 原生确认，渲染挂起+发布请求被取消——直发章全卡死在验证导航上的实案修法。。1008深夜终版：publish链=submit(下一步,gate)→js_click下一步兜底(skip_if_modal)→js_click仅基础检测(检测方式弹窗,tries60)→sleep5→js_click提交(错别字确认,tries75)→verify new_tab；真实鼠标在 headless/后台页签不触发平台处理器，DOM click 可靠。",
+ "upload_chapter_draft": "2026-10-09 全部发草稿：前段（volume/序号/标题/正文填表）与 upload_chapter 同源选择器；终点改点编辑器头部「存草稿」直接落草稿箱，不走下一步/检测/发布提示发布链。verify 沿用章节管理页断言（草稿行同样在列表里）；若平台把草稿挪去独立草稿箱页，首轮失败截图会指出，届时按此校准。「存草稿」按钮文本未真机实证（校准时浏览器离线），首次批量跑请盯首章截图。",
  "check_login": [
   {
    "do": "navigate",
@@ -111,6 +112,86 @@
    "new_tab": true
   }
  ],
+ "upload_chapter_draft": [
+  {
+   "do": "navigate",
+   "url": "about:blank"
+  },
+  {
+   "do": "navigate",
+   "url": "{editor_url}"
+  },
+  {
+   "do": "url_any",
+   "any": [
+    "fanqienovel.com"
+   ]
+  },
+  {
+   "do": "wait",
+   "sel": ".ProseMirror",
+   "timeout": 20
+  },
+  {
+   "do": "volume",
+   "key": "volume_name",
+   "optional": true,
+   "open_sel": ".publish-header-volume-name",
+   "modal_sel": ".serial-modal.editor-volume",
+   "item_sel": ".editor-volume-list-item",
+   "add_sel": ".editor-volume-footer-add-volume",
+   "input_sel": ".editor-volume-list-item input",
+   "confirm_sel": "i.tomato-confirm",
+   "settle": 1.5
+  },
+  {
+   "do": "fill",
+   "sel": "input.serial-input, input.byte-input",
+   "key": "chapter_no"
+  },
+  {
+   "do": "fill",
+   "sel": "div.serial-editor-input-hint input",
+   "key": "chapter_name"
+  },
+  {
+   "do": "fill",
+   "sel": ".ProseMirror",
+   "key": "chapter_body"
+  },
+  {
+   "do": "shot",
+   "name": "chapter-filled-draft"
+  },
+  {
+   "do": "submit",
+   "text": "存草稿",
+   "scope": "button",
+   "tries": 15
+  },
+  {
+   "do": "js_click",
+   "text": "存草稿",
+   "scope": "button",
+   "tries": 10,
+   "optional": true,
+   "skip_if_modal": true
+  },
+  {
+   "do": "sleep",
+   "s": 2.5
+  },
+  {
+   "do": "verify",
+   "url": "{chapter_manage_url}",
+   "any": [
+    "第{chapter_no}章",
+    "{chapter_name}"
+   ],
+   "settle": 6,
+   "new_tab": true
+  }
+ ],
  "probe_form": [
   {
    "do": "navigate",