graph LR
    A[cron 调度<br>每2天10:00+随机延迟] --> B[Agent 写作<br>选题→成文→存MD]
    B --> C[自检<br>红线词扫描+质量清单]
    C --> D{Cookie 探活}
| D -->|有效| E[HMAC 签名<br>调 saveArticle] |
| D -->|过期| F[告警+人工更新] |
    E --> G[发布成功]
| E -->|网络错误| H[重试≤3次] |
| H -->|仍失败| I[存 failed/ 目录] |

python3 -m venv ~/.hermes/venv
source ~/.hermes/venv/bin/activate
pip install requests==2.31.0 pyyaml==6.0.1 markdown==3.5.2

csdn:
  SESSION: "你的SESSION值"
  UserName: "你的用户名"
  UserToken: "你的UserToken"

import hmac
import hashlib
import uuid
from base64 import b64encode
from urllib.parse import urlparse

CA_KEY = "你的x-ca-key"        # 平台分配
HMAC_KEY = "你的HMAC密钥"       # 平台分配

def get_csdn_sign(url, method="POST"):
    """构造 CSDN 阿里云 API 网关签名，返回 (nonce, signature)"""
    nonce = str(uuid.uuid4())
    s = urlparse(url)

    if method == "POST":
        to_enc = (
            f"POST\n"
            f"*/*\n"            # Accept
            f"\n"               # 空 Content-MD5
            f"application/json\n"  # Content-Type
            f"\n"               # 空 Date
            f"x-ca-key:{CA_KEY}\n"
            f"x-ca-nonce:{nonce}\n"
            f"{s.path}"         # 注意：POST 不含 query
        ).encode()
    else:
        to_enc = (
            f"GET\n*/*\n\n\n\n"
            f"x-ca-key:{CA_KEY}\n"
            f"x-ca-nonce:{nonce}\n"
            f"{s.path}{'?' + s.query if s.query else ''}"
        ).encode()

    sign = b64encode(
        hmac.new(HMAC_KEY.encode(), to_enc, digestmod=hashlib.sha256).digest()
    ).decode()
    return nonce, sign

import json
import requests

API_BASE = "https://bizapi.csdn.net"
SAVE_URL = f"{API_BASE}/blog-console-api/v3/mdeditor/saveArticle"

def build_headers(cookie_str, url, method="POST"):
    nonce, sign = get_csdn_sign(url, method)
    return {
        "x-ca-key": CA_KEY,
        "x-ca-nonce": nonce,
        "x-ca-signature": sign,
        "x-ca-signature-headers": "x-ca-key,x-ca-nonce",
        "content-type": "application/json",
        "accept": "*/*",
        "origin": "https://editor.csdn.net",
        "referer": "https://editor.csdn.net/",
        "cookie": cookie_str,
        "user-agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64)",
    }

def check_cookie(cookie_str):
    """探活：空 body POST，不真的发文章"""
    r = requests.post(SAVE_URL, headers=build_headers(cookie_str, SAVE_URL),
                      json={}, timeout=10, verify=False)
    return r.json().get("code") == 200

def publish(title, html_content, tags="人工智能"):
    """发布文章，带 3 次重试"""
    payload = {
        "title": title,
        "content": html_content,       # 必须是 HTML，不是 Markdown！
        "readType": "public",
        "status": 0,
        "source": "pc_mdeditor",
        "tags": tags,
        "type": "original",
        "pubStatus": "publish",
    }
    for attempt in range(3):
        try:
            r = requests.post(SAVE_URL,
                              headers=build_headers(cookie_str, SAVE_URL),
                              json=payload, timeout=30, verify=False)
            data = r.json()
            if data.get("code") == 200:
                return True, data.get("data", {}).get("url", "")
        except Exception as e:
            print(f"第{attempt+1}次失败: {e}")
        time.sleep(5)
    return False, "重试3次仍失败"

import os, datetime

def should_publish(today_file):
    """当天已发布过 → 跳过；失败文件存在 → 报警不重发"""
    if os.path.exists(today_file):
        return False
    return True