@deployxai/dxc 0.1.7 → 0.1.12

package/dist/index.js

@@ -6,7 +6,7 @@ import {
 import {
   SourceCli,
   SourceCliError
-} from "./chunks/chunk-NAL5UOUZ.js";
+} from "./chunks/chunk-PX25ABJR.js";
 import {
   CONTENT_ARTIFACT_KINDS,
   CONTENT_STAGE_INPUTS,
@@ -48,6 +48,7 @@ import {
   contentStageArtifactFrontmatterSchema,
   createDeviceBindingSessionResponseSchema,
   createPublishingApprovalRequestSchema,
+  createPublishingDraftIntentRequestSchema,
   createWechatAuthorizationSessionResponseSchema,
   createWechatLoginSessionResponseSchema,
   dataTransitSchema,
@@ -63,6 +64,7 @@ import {
   publishingArticleSchema,
   publishingDraftIntentResponseSchema,
   publishingPreviewLinkSchema,
+  publishingPreviewSelectionStateSchema,
   publishingRenderSnapshotSchema,
   publishingUploadReceiptSchema,
   publishingUploadSessionSchema,
@@ -81,7 +83,7 @@ import {
   wechatRenderResultSchema,
   writePrivateBuffer,
   writePrivateJson
-} from "./chunks/chunk-N4CMLINP.js";
+} from "./chunks/chunk-BWOC5S2C.js";
 
 // node_modules/.pnpm/yaml@2.9.0/node_modules/yaml/dist/nodes/identity.js
 var require_identity = __commonJS({
@@ -160,17 +162,17 @@ var require_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    function visit_(key, node, visitor, path8) {
-      const ctrl = callVisitor(key, node, visitor, path8);
+    function visit_(key, node, visitor, path9) {
+      const ctrl = callVisitor(key, node, visitor, path9);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path8, ctrl);
-        return visit_(key, ctrl, visitor, path8);
+        replaceNode(key, path9, ctrl);
+        return visit_(key, ctrl, visitor, path9);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path8 = Object.freeze(path8.concat(node));
+          path9 = Object.freeze(path9.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = visit_(i, node.items[i], visitor, path8);
+            const ci = visit_(i, node.items[i], visitor, path9);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -181,13 +183,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path8 = Object.freeze(path8.concat(node));
-          const ck = visit_("key", node.key, visitor, path8);
+          path9 = Object.freeze(path9.concat(node));
+          const ck = visit_("key", node.key, visitor, path9);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = visit_("value", node.value, visitor, path8);
+          const cv = visit_("value", node.value, visitor, path9);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -208,17 +210,17 @@ var require_visit = __commonJS({
     visitAsync.BREAK = BREAK;
     visitAsync.SKIP = SKIP;
     visitAsync.REMOVE = REMOVE;
-    async function visitAsync_(key, node, visitor, path8) {
-      const ctrl = await callVisitor(key, node, visitor, path8);
+    async function visitAsync_(key, node, visitor, path9) {
+      const ctrl = await callVisitor(key, node, visitor, path9);
       if (identity.isNode(ctrl) || identity.isPair(ctrl)) {
-        replaceNode(key, path8, ctrl);
-        return visitAsync_(key, ctrl, visitor, path8);
+        replaceNode(key, path9, ctrl);
+        return visitAsync_(key, ctrl, visitor, path9);
       }
       if (typeof ctrl !== "symbol") {
         if (identity.isCollection(node)) {
-          path8 = Object.freeze(path8.concat(node));
+          path9 = Object.freeze(path9.concat(node));
           for (let i = 0; i < node.items.length; ++i) {
-            const ci = await visitAsync_(i, node.items[i], visitor, path8);
+            const ci = await visitAsync_(i, node.items[i], visitor, path9);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -229,13 +231,13 @@ var require_visit = __commonJS({
             }
           }
         } else if (identity.isPair(node)) {
-          path8 = Object.freeze(path8.concat(node));
-          const ck = await visitAsync_("key", node.key, visitor, path8);
+          path9 = Object.freeze(path9.concat(node));
+          const ck = await visitAsync_("key", node.key, visitor, path9);
           if (ck === BREAK)
             return BREAK;
           else if (ck === REMOVE)
             node.key = null;
-          const cv = await visitAsync_("value", node.value, visitor, path8);
+          const cv = await visitAsync_("value", node.value, visitor, path9);
           if (cv === BREAK)
             return BREAK;
           else if (cv === REMOVE)
@@ -262,23 +264,23 @@ var require_visit = __commonJS({
       }
       return visitor;
     }
-    function callVisitor(key, node, visitor, path8) {
+    function callVisitor(key, node, visitor, path9) {
       if (typeof visitor === "function")
-        return visitor(key, node, path8);
+        return visitor(key, node, path9);
       if (identity.isMap(node))
-        return visitor.Map?.(key, node, path8);
+        return visitor.Map?.(key, node, path9);
       if (identity.isSeq(node))
-        return visitor.Seq?.(key, node, path8);
+        return visitor.Seq?.(key, node, path9);
       if (identity.isPair(node))
-        return visitor.Pair?.(key, node, path8);
+        return visitor.Pair?.(key, node, path9);
       if (identity.isScalar(node))
-        return visitor.Scalar?.(key, node, path8);
+        return visitor.Scalar?.(key, node, path9);
       if (identity.isAlias(node))
-        return visitor.Alias?.(key, node, path8);
+        return visitor.Alias?.(key, node, path9);
       return void 0;
     }
-    function replaceNode(key, path8, node) {
-      const parent = path8[path8.length - 1];
+    function replaceNode(key, path9, node) {
+      const parent = path9[path9.length - 1];
       if (identity.isCollection(parent)) {
         parent.items[key] = node;
       } else if (identity.isPair(parent)) {
@@ -888,10 +890,10 @@ var require_Collection = __commonJS({
     var createNode = require_createNode();
     var identity = require_identity();
     var Node2 = require_Node();
-    function collectionFromPath(schema, path8, value) {
+    function collectionFromPath(schema, path9, value) {
       let v2 = value;
-      for (let i = path8.length - 1; i >= 0; --i) {
-        const k = path8[i];
+      for (let i = path9.length - 1; i >= 0; --i) {
+        const k = path9[i];
         if (typeof k === "number" && Number.isInteger(k) && k >= 0) {
           const a = [];
           a[k] = v2;
@@ -910,7 +912,7 @@ var require_Collection = __commonJS({
         sourceObjects: /* @__PURE__ */ new Map()
       });
     }
-    var isEmptyPath = (path8) => path8 == null || typeof path8 === "object" && !!path8[Symbol.iterator]().next().done;
+    var isEmptyPath = (path9) => path9 == null || typeof path9 === "object" && !!path9[Symbol.iterator]().next().done;
     var Collection = class extends Node2.NodeBase {
       constructor(type, schema) {
         super(type);
@@ -940,11 +942,11 @@ var require_Collection = __commonJS({
        * be a Pair instance or a `{ key, value }` object, which may not have a key
        * that already exists in the map.
        */
-      addIn(path8, value) {
-        if (isEmptyPath(path8))
+      addIn(path9, value) {
+        if (isEmptyPath(path9))
           this.add(value);
         else {
-          const [key, ...rest] = path8;
+          const [key, ...rest] = path9;
           const node = this.get(key, true);
           if (identity.isCollection(node))
             node.addIn(rest, value);
@@ -958,8 +960,8 @@ var require_Collection = __commonJS({
        * Removes a value from the collection.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path8) {
-        const [key, ...rest] = path8;
+      deleteIn(path9) {
+        const [key, ...rest] = path9;
         if (rest.length === 0)
           return this.delete(key);
         const node = this.get(key, true);
@@ -973,8 +975,8 @@ var require_Collection = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path8, keepScalar) {
-        const [key, ...rest] = path8;
+      getIn(path9, keepScalar) {
+        const [key, ...rest] = path9;
         const node = this.get(key, true);
         if (rest.length === 0)
           return !keepScalar && identity.isScalar(node) ? node.value : node;
@@ -992,8 +994,8 @@ var require_Collection = __commonJS({
       /**
        * Checks if the collection includes a value with the key `key`.
        */
-      hasIn(path8) {
-        const [key, ...rest] = path8;
+      hasIn(path9) {
+        const [key, ...rest] = path9;
         if (rest.length === 0)
           return this.has(key);
         const node = this.get(key, true);
@@ -1003,8 +1005,8 @@ var require_Collection = __commonJS({
        * Sets a value in this collection. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path8, value) {
-        const [key, ...rest] = path8;
+      setIn(path9, value) {
+        const [key, ...rest] = path9;
         if (rest.length === 0) {
           this.set(key, value);
         } else {
@@ -3519,9 +3521,9 @@ var require_Document = __commonJS({
           this.contents.add(value);
       }
       /** Adds a value to the document. */
-      addIn(path8, value) {
+      addIn(path9, value) {
         if (assertCollection(this.contents))
-          this.contents.addIn(path8, value);
+          this.contents.addIn(path9, value);
       }
       /**
        * Create a new `Alias` node, ensuring that the target `node` has the required anchor.
@@ -3596,14 +3598,14 @@ var require_Document = __commonJS({
        * Removes a value from the document.
        * @returns `true` if the item was found and removed.
        */
-      deleteIn(path8) {
-        if (Collection.isEmptyPath(path8)) {
+      deleteIn(path9) {
+        if (Collection.isEmptyPath(path9)) {
           if (this.contents == null)
             return false;
           this.contents = null;
           return true;
         }
-        return assertCollection(this.contents) ? this.contents.deleteIn(path8) : false;
+        return assertCollection(this.contents) ? this.contents.deleteIn(path9) : false;
       }
       /**
        * Returns item at `key`, or `undefined` if not found. By default unwraps
@@ -3618,10 +3620,10 @@ var require_Document = __commonJS({
        * scalar values from their surrounding node; to disable set `keepScalar` to
        * `true` (collections are always returned intact).
        */
-      getIn(path8, keepScalar) {
-        if (Collection.isEmptyPath(path8))
+      getIn(path9, keepScalar) {
+        if (Collection.isEmptyPath(path9))
           return !keepScalar && identity.isScalar(this.contents) ? this.contents.value : this.contents;
-        return identity.isCollection(this.contents) ? this.contents.getIn(path8, keepScalar) : void 0;
+        return identity.isCollection(this.contents) ? this.contents.getIn(path9, keepScalar) : void 0;
       }
       /**
        * Checks if the document includes a value with the key `key`.
@@ -3632,10 +3634,10 @@ var require_Document = __commonJS({
       /**
        * Checks if the document includes a value at `path`.
        */
-      hasIn(path8) {
-        if (Collection.isEmptyPath(path8))
+      hasIn(path9) {
+        if (Collection.isEmptyPath(path9))
           return this.contents !== void 0;
-        return identity.isCollection(this.contents) ? this.contents.hasIn(path8) : false;
+        return identity.isCollection(this.contents) ? this.contents.hasIn(path9) : false;
       }
       /**
        * Sets a value in this document. For `!!set`, `value` needs to be a
@@ -3652,13 +3654,13 @@ var require_Document = __commonJS({
        * Sets a value in this document. For `!!set`, `value` needs to be a
        * boolean to add/remove the item from the set.
        */
-      setIn(path8, value) {
-        if (Collection.isEmptyPath(path8)) {
+      setIn(path9, value) {
+        if (Collection.isEmptyPath(path9)) {
           this.contents = value;
         } else if (this.contents == null) {
-          this.contents = Collection.collectionFromPath(this.schema, Array.from(path8), value);
+          this.contents = Collection.collectionFromPath(this.schema, Array.from(path9), value);
         } else if (assertCollection(this.contents)) {
-          this.contents.setIn(path8, value);
+          this.contents.setIn(path9, value);
         }
       }
       /**
@@ -5618,9 +5620,9 @@ var require_cst_visit = __commonJS({
     visit.BREAK = BREAK;
     visit.SKIP = SKIP;
     visit.REMOVE = REMOVE;
-    visit.itemAtPath = (cst, path8) => {
+    visit.itemAtPath = (cst, path9) => {
       let item = cst;
-      for (const [field, index] of path8) {
+      for (const [field, index] of path9) {
         const tok = item?.[field];
         if (tok && "items" in tok) {
           item = tok.items[index];
@@ -5629,23 +5631,23 @@ var require_cst_visit = __commonJS({
       }
       return item;
     };
-    visit.parentCollection = (cst, path8) => {
-      const parent = visit.itemAtPath(cst, path8.slice(0, -1));
-      const field = path8[path8.length - 1][0];
+    visit.parentCollection = (cst, path9) => {
+      const parent = visit.itemAtPath(cst, path9.slice(0, -1));
+      const field = path9[path9.length - 1][0];
       const coll = parent?.[field];
       if (coll && "items" in coll)
         return coll;
       throw new Error("Parent collection not found");
     };
-    function _visit(path8, item, visitor) {
-      let ctrl = visitor(item, path8);
+    function _visit(path9, item, visitor) {
+      let ctrl = visitor(item, path9);
       if (typeof ctrl === "symbol")
         return ctrl;
       for (const field of ["key", "value"]) {
         const token = item[field];
         if (token && "items" in token) {
           for (let i = 0; i < token.items.length; ++i) {
-            const ci = _visit(Object.freeze(path8.concat([[field, i]])), token.items[i], visitor);
+            const ci = _visit(Object.freeze(path9.concat([[field, i]])), token.items[i], visitor);
             if (typeof ci === "number")
               i = ci - 1;
             else if (ci === BREAK)
@@ -5656,10 +5658,10 @@ var require_cst_visit = __commonJS({
             }
           }
           if (typeof ctrl === "function" && field === "key")
-            ctrl = ctrl(item, path8);
+            ctrl = ctrl(item, path9);
         }
       }
-      return typeof ctrl === "function" ? ctrl(item, path8) : ctrl;
+      return typeof ctrl === "function" ? ctrl(item, path9) : ctrl;
     }
     exports.visit = visit;
   }
@@ -11059,9 +11061,9 @@ var require_picocolors = __commonJS({
     var argv = p.argv || [];
     var env = p.env || {};
     var isColorSupported = !(!!env.NO_COLOR || argv.includes("--no-color")) && (!!env.FORCE_COLOR || argv.includes("--color") || p.platform === "win32" || (p.stdout || {}).isTTY && env.TERM !== "dumb" || !!env.CI);
-    var formatter = (open4, close, replace = open4) => (input) => {
-      let string = "" + input, index = string.indexOf(close, open4.length);
-      return ~index ? open4 + replaceClose(string, close, replace, index) + close : open4 + string + close;
+    var formatter = (open5, close, replace = open5) => (input) => {
+      let string = "" + input, index = string.indexOf(close, open5.length);
+      return ~index ? open5 + replaceClose(string, close, replace, index) + close : open5 + string + close;
     };
     var replaceClose = (string, close, replace, index) => {
       let result = "", cursor = 0;
@@ -13026,27 +13028,27 @@ var require_util = __commonJS({
       };
     }
     var normalize = lruMemoize(function normalize2(aPath) {
-      var path8 = aPath;
+      var path9 = aPath;
       var url = urlParse(aPath);
       if (url) {
         if (!url.path) {
           return aPath;
         }
-        path8 = url.path;
+        path9 = url.path;
       }
-      var isAbsolute = exports.isAbsolute(path8);
+      var isAbsolute = exports.isAbsolute(path9);
       var parts = [];
       var start = 0;
       var i = 0;
       while (true) {
         start = i;
-        i = path8.indexOf("/", start);
+        i = path9.indexOf("/", start);
         if (i === -1) {
-          parts.push(path8.slice(start));
+          parts.push(path9.slice(start));
           break;
         } else {
-          parts.push(path8.slice(start, i));
-          while (i < path8.length && path8[i] === "/") {
+          parts.push(path9.slice(start, i));
+          while (i < path9.length && path9[i] === "/") {
             i++;
           }
         }
@@ -13067,15 +13069,15 @@ var require_util = __commonJS({
           }
         }
       }
-      path8 = parts.join("/");
-      if (path8 === "") {
-        path8 = isAbsolute ? "/" : ".";
+      path9 = parts.join("/");
+      if (path9 === "") {
+        path9 = isAbsolute ? "/" : ".";
       }
       if (url) {
-        url.path = path8;
+        url.path = path9;
         return urlGenerate(url);
       }
-      return path8;
+      return path9;
     });
     exports.normalize = normalize;
     function join(aRoot, aPath) {
@@ -14827,22 +14829,22 @@ var require_previous_map = __commonJS({
           this.annotation = this.getAnnotationURL(css.substring(start, end));
         }
       }
-      loadFile(path8, cssFile, trusted) {
+      loadFile(path9, cssFile, trusted) {
         if (!trusted && !this.unsafeMap) {
-          if (!/\.map$/i.test(path8)) {
+          if (!/\.map$/i.test(path9)) {
             return void 0;
           }
           if (cssFile) {
-            let relativePath = relative(dirname(cssFile), path8);
+            let relativePath = relative(dirname(cssFile), path9);
             if (relativePath === ".." || relativePath.startsWith(".." + sep) || isAbsolute(relativePath)) {
               return void 0;
             }
           }
         }
-        this.root = dirname(path8);
-        if (existsSync(path8)) {
-          this.mapFile = path8;
-          return readFileSync(path8, "utf-8").toString().trim();
+        this.root = dirname(path9);
+        if (existsSync(path9)) {
+          this.mapFile = path9;
+          return readFileSync(path9, "utf-8").toString().trim();
         }
       }
       loadMap(file, prev) {
@@ -15614,9 +15616,9 @@ var require_map_generator = __commonJS({
         if (typeof this.mapOpts.annotation === "string") {
           from = dirname(resolve(from, this.mapOpts.annotation));
         }
-        let path8 = relative(from, file);
-        this.memoizedPaths.set(file, path8);
-        return path8;
+        let path9 = relative(from, file);
+        this.memoizedPaths.set(file, path9);
+        return path9;
       }
       previous() {
         if (!this.previousMaps) {
@@ -15671,12 +15673,12 @@ var require_map_generator = __commonJS({
           return window.btoa(unescape(encodeURIComponent(str)));
         }
       }
-      toFileUrl(path8) {
-        let cached = this.memoizedFileURLs.get(path8);
+      toFileUrl(path9) {
+        let cached = this.memoizedFileURLs.get(path9);
         if (cached) return cached;
         if (pathToFileURL) {
-          let fileURL = pathToFileURL(path8).toString();
-          this.memoizedFileURLs.set(path8, fileURL);
+          let fileURL = pathToFileURL(path9).toString();
+          this.memoizedFileURLs.set(path9, fileURL);
           return fileURL;
         } else {
           throw new Error(
@@ -15684,14 +15686,14 @@ var require_map_generator = __commonJS({
           );
         }
       }
-      toUrl(path8) {
-        let cached = this.memoizedURLs.get(path8);
+      toUrl(path9) {
+        let cached = this.memoizedURLs.get(path9);
         if (cached) return cached;
         if (sep === "\\") {
-          path8 = path8.replace(/\\/g, "/");
+          path9 = path9.replace(/\\/g, "/");
         }
-        let url = encodeURI(path8).replace(/[#?]/g, encodeURIComponent);
-        this.memoizedURLs.set(path8, url);
+        let url = encodeURI(path9).replace(/[#?]/g, encodeURIComponent);
+        this.memoizedURLs.set(path9, url);
         return url;
       }
     };
@@ -15746,7 +15748,7 @@ var require_parser2 = __commonJS({
         let prev;
         let shift;
         let last = false;
-        let open4 = false;
+        let open5 = false;
         let params = [];
         let brackets = [];
         while (!this.tokenizer.endOfFile()) {
@@ -15766,7 +15768,7 @@ var require_parser2 = __commonJS({
               this.semicolon = true;
               break;
             } else if (type === "{") {
-              open4 = true;
+              open5 = true;
               break;
             } else if (type === "}") {
               if (params.length > 0) {
@@ -15808,7 +15810,7 @@ var require_parser2 = __commonJS({
           node.raws.afterName = "";
           node.params = "";
         }
-        if (open4) {
+        if (open5) {
           node.nodes = [];
           this.current = node;
         }
@@ -19072,8 +19074,8 @@ var require_req = __commonJS({
       if (req.originalUrl) {
         _req.url = req.originalUrl;
       } else {
-        const path8 = req.path;
-        _req.url = typeof path8 === "string" ? path8 : req.url ? req.url.path || req.url : void 0;
+        const path9 = req.path;
+        _req.url = typeof path9 === "string" ? path9 : req.url ? req.url.path || req.url : void 0;
       }
       if (req.query) {
         _req.query = req.query;
@@ -19238,14 +19240,14 @@ var require_redact = __commonJS({
       }
       return obj;
     }
-    function parsePath(path8) {
+    function parsePath(path9) {
       const parts = [];
       let current = "";
       let inBrackets = false;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path8.length; i++) {
-        const char = path8[i];
+      for (let i = 0; i < path9.length; i++) {
+        const char = path9[i];
         if (!inBrackets && char === ".") {
           if (current) {
             parts.push(current);
@@ -19376,10 +19378,10 @@ var require_redact = __commonJS({
       return current;
     }
     function redactPaths(obj, paths, censor, remove = false) {
-      for (const path8 of paths) {
-        const parts = parsePath(path8);
+      for (const path9 of paths) {
+        const parts = parsePath(path9);
         if (parts.includes("*")) {
-          redactWildcardPath(obj, parts, censor, path8, remove);
+          redactWildcardPath(obj, parts, censor, path9, remove);
         } else {
           if (remove) {
             removeKey(obj, parts);
@@ -19464,8 +19466,8 @@ var require_redact = __commonJS({
           }
         } else {
           if (afterWildcard.includes("*")) {
-            const wrappedCensor = typeof censor === "function" ? (value, path8) => {
-              const fullPath = [...pathArray.slice(0, pathLength), ...path8];
+            const wrappedCensor = typeof censor === "function" ? (value, path9) => {
+              const fullPath = [...pathArray.slice(0, pathLength), ...path9];
               return censor(value, fullPath);
             } : censor;
             redactWildcardPath(current, afterWildcard, wrappedCensor, originalPath, remove);
@@ -19500,8 +19502,8 @@ var require_redact = __commonJS({
         return null;
       }
       const pathStructure = /* @__PURE__ */ new Map();
-      for (const path8 of pathsToClone) {
-        const parts = parsePath(path8);
+      for (const path9 of pathsToClone) {
+        const parts = parsePath(path9);
         let current = pathStructure;
         for (let i = 0; i < parts.length; i++) {
           const part = parts[i];
@@ -19553,24 +19555,24 @@ var require_redact = __commonJS({
       }
       return cloneSelectively(obj, pathStructure);
     }
-    function validatePath(path8) {
-      if (typeof path8 !== "string") {
+    function validatePath(path9) {
+      if (typeof path9 !== "string") {
         throw new Error("Paths must be (non-empty) strings");
       }
-      if (path8 === "") {
+      if (path9 === "") {
         throw new Error("Invalid redaction path ()");
       }
-      if (path8.includes("..")) {
-        throw new Error(`Invalid redaction path (${path8})`);
+      if (path9.includes("..")) {
+        throw new Error(`Invalid redaction path (${path9})`);
       }
-      if (path8.includes(",")) {
-        throw new Error(`Invalid redaction path (${path8})`);
+      if (path9.includes(",")) {
+        throw new Error(`Invalid redaction path (${path9})`);
       }
       let bracketCount = 0;
       let inQuotes = false;
       let quoteChar = "";
-      for (let i = 0; i < path8.length; i++) {
-        const char = path8[i];
+      for (let i = 0; i < path9.length; i++) {
+        const char = path9[i];
         if ((char === '"' || char === "'") && bracketCount > 0) {
           if (!inQuotes) {
             inQuotes = true;
@@ -19584,20 +19586,20 @@ var require_redact = __commonJS({
         } else if (char === "]" && !inQuotes) {
           bracketCount--;
           if (bracketCount < 0) {
-            throw new Error(`Invalid redaction path (${path8})`);
+            throw new Error(`Invalid redaction path (${path9})`);
           }
         }
       }
       if (bracketCount !== 0) {
-        throw new Error(`Invalid redaction path (${path8})`);
+        throw new Error(`Invalid redaction path (${path9})`);
       }
     }
     function validatePaths(paths) {
       if (!Array.isArray(paths)) {
         throw new TypeError("paths must be an array");
       }
-      for (const path8 of paths) {
-        validatePath(path8);
+      for (const path9 of paths) {
+        validatePath(path9);
       }
     }
     function slowRedact(options = {}) {
@@ -19765,8 +19767,8 @@ var require_redaction = __commonJS({
         if (shape[k] === null) {
           o[k] = (value) => topCensor(value, [k]);
         } else {
-          const wrappedCensor = typeof censor === "function" ? (value, path8) => {
-            return censor(value, [k, ...path8]);
+          const wrappedCensor = typeof censor === "function" ? (value, path9) => {
+            return censor(value, [k, ...path9]);
           } : censor;
           o[k] = Redact({
             paths: shape[k],
@@ -19987,7 +19989,7 @@ var require_sonic_boom = __commonJS({
     var fs2 = __require("fs");
     var EventEmitter2 = __require("events");
     var inherits = __require("util").inherits;
-    var path8 = __require("path");
+    var path9 = __require("path");
     var sleep = require_atomic_sleep();
     var assert = __require("assert");
     var BUSY_WRITE_TIMEOUT = 100;
@@ -20041,7 +20043,7 @@ var require_sonic_boom = __commonJS({
       const mode = sonic.mode;
       if (sonic.sync) {
         try {
-          if (sonic.mkdir) fs2.mkdirSync(path8.dirname(file), { recursive: true });
+          if (sonic.mkdir) fs2.mkdirSync(path9.dirname(file), { recursive: true });
           const fd = fs2.openSync(file, flags, mode);
           fileOpened(null, fd);
         } catch (err) {
@@ -20049,7 +20051,7 @@ var require_sonic_boom = __commonJS({
           throw err;
         }
       } else if (sonic.mkdir) {
-        fs2.mkdir(path8.dirname(file), { recursive: true }, (err) => {
+        fs2.mkdir(path9.dirname(file), { recursive: true }, (err) => {
           if (err) return fileOpened(err);
           fs2.open(file, flags, mode, fileOpened);
         });
@@ -20061,7 +20063,7 @@ var require_sonic_boom = __commonJS({
       if (!(this instanceof SonicBoom)) {
         return new SonicBoom(opts);
       }
-      let { fd, dest, minLength, maxLength, maxWrite, periodicFlush, sync, append: append2 = true, mkdir: mkdir4, retryEAGAIN, fsync, contentMode, mode } = opts || {};
+      let { fd, dest, minLength, maxLength, maxWrite, periodicFlush, sync, append: append2 = true, mkdir: mkdir5, retryEAGAIN, fsync, contentMode, mode } = opts || {};
       fd = fd || dest;
       this._len = 0;
       this.fd = -1;
@@ -20086,7 +20088,7 @@ var require_sonic_boom = __commonJS({
       this.append = append2 || false;
       this.mode = mode;
       this.retryEAGAIN = retryEAGAIN || (() => true);
-      this.mkdir = mkdir4 || false;
+      this.mkdir = mkdir5 || false;
       let fsWriteSync;
       let fsWrite;
       if (contentMode === kContentModeBuffer) {
@@ -21381,15 +21383,15 @@ var require_transport = __commonJS({
       if (!unquoted) {
         return false;
       }
-      let path8 = unquoted;
-      if (path8.startsWith("file://")) {
+      let path9 = unquoted;
+      if (path9.startsWith("file://")) {
         try {
-          path8 = fileURLToPath2(path8);
+          path9 = fileURLToPath2(path9);
         } catch {
           return false;
         }
       }
-      return isAbsolute(path8) && !existsSync(path8);
+      return isAbsolute(path9) && !existsSync(path9);
     }
     function stripQuotes(value) {
       const first = value[0];
@@ -23295,7 +23297,7 @@ import os3 from "node:os";
 // apps/cli/package.json
 var package_default = {
   name: "@dxc/cli",
-  version: "0.1.7",
+  version: "0.1.12",
   private: true,
   type: "module",
   bin: {
@@ -23318,6 +23320,7 @@ var package_default = {
     commander: "15.0.0",
     "fast-xml-parser": "5.3.3",
     "onnxruntime-web": "1.22.0",
+    sharp: "0.35.3",
     yaml: "2.9.0",
     zod: "4.4.3"
   }
@@ -26434,9 +26437,9 @@ Expecting one of '${allowedValues.join("', '")}'`);
    * @param {string} [path]
    * @return {(string|null|Command)}
    */
-  executableDir(path8) {
-    if (path8 === void 0) return this._executableDir;
-    this._executableDir = path8;
+  executableDir(path9) {
+    if (path9 === void 0) return this._executableDir;
+    this._executableDir = path9;
     return this;
   }
   /**
@@ -27207,13 +27210,13 @@ var ContentMemoryCli = class {
 // apps/cli/src/project.ts
 import { createHash as createHash4, randomUUID as randomUUID3 } from "node:crypto";
 import { createReadStream } from "node:fs";
-import { lstat as lstat2, mkdir, readFile as readFile3, rename as rename3, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
+import { lstat as lstat3, mkdir, readFile as readFile3, rename as rename3, unlink as unlink2, writeFile as writeFile2 } from "node:fs/promises";
 import path4 from "node:path";
 
 // apps/cli/src/stage-artifact.ts
 import { createHash as createHash3, randomUUID as randomUUID2 } from "node:crypto";
 import { constants as fileConstants } from "node:fs";
-import { open, readFile as readFile2, rename as rename2, unlink, writeFile } from "node:fs/promises";
+import { lstat as lstat2, open, readFile as readFile2, rename as rename2, unlink, writeFile } from "node:fs/promises";
 import path3 from "node:path";
 
 // packages/renderer-wechat/src/article.ts
@@ -28543,7 +28546,7 @@ var ArticleDocumentValidationError = class extends Error {
   }
 };
 function issuePaths(error) {
-  return error.issues.map((issue) => issue.path.join(".")).filter((path8) => path8.length > 0);
+  return error.issues.map((issue) => issue.path.join(".")).filter((path9) => path9.length > 0);
 }
 function plainTokenText(tokens) {
   return tokens.map((token) => {
@@ -28994,29 +28997,31 @@ var ALLOWED_STYLE_PROPERTIES = [
 var allowedStyles = Object.fromEntries(
   ALLOWED_STYLE_PROPERTIES.map((property) => [property, [SAFE_STYLE_VALUE]])
 );
+var ALLOWED_TAGS = [
+  "section",
+  "h1",
+  "h2",
+  "h3",
+  "h4",
+  "p",
+  "blockquote",
+  "ul",
+  "ol",
+  "li",
+  "img",
+  "strong",
+  "span",
+  "code",
+  "br"
+];
+var ALLOWED_ATTRIBUTES = {
+  "*": ["style"],
+  img: ["src", "alt", "style"]
+};
 function sanitizeWechatHtml(value) {
   return (0, import_sanitize_html.default)(value, {
-    allowedTags: [
-      "section",
-      "h1",
-      "h2",
-      "h3",
-      "h4",
-      "p",
-      "blockquote",
-      "ul",
-      "ol",
-      "li",
-      "img",
-      "strong",
-      "span",
-      "code",
-      "br"
-    ],
-    allowedAttributes: {
-      "*": ["style"],
-      img: ["src", "alt", "style"]
-    },
+    allowedTags: [...ALLOWED_TAGS],
+    allowedAttributes: ALLOWED_ATTRIBUTES,
     allowedSchemes: [],
     allowProtocolRelative: false,
     allowedStyles: {
@@ -29246,8 +29251,8 @@ function withoutManualReferences(tokens) {
   );
   return referenceIndex < 0 ? [...tokens] : tokens.slice(0, referenceIndex);
 }
-function warning(code, message, path8) {
-  return path8 === void 0 ? { code, message } : { code, path: path8, message };
+function warning(code, message, path9) {
+  return path9 === void 0 ? { code, message } : { code, path: path9, message };
 }
 function buildPreflight(article, html, observations) {
   const errors = [];
@@ -29321,6 +29326,19 @@ function renderWechatArticle(article, options = {}) {
     preflight
   });
 }
+function rewriteWechatAssetSources(html, replacements) {
+  let rewritten = html;
+  for (const [logicalPath, targetUrl] of replacements) {
+    if (!isSafeLogicalAssetPath(logicalPath) || targetUrl.trim().length === 0) {
+      throw new TypeError("Asset source replacement is invalid");
+    }
+    rewritten = rewritten.replaceAll(
+      `src="${escapeHtml(logicalPath)}"`,
+      `src="${escapeHtml(targetUrl)}"`
+    );
+  }
+  return rewritten;
+}
 
 // apps/cli/src/stage-artifact.ts
 var import_yaml2 = __toESM(require_dist(), 1);
@@ -29338,10 +29356,31 @@ var StageArtifactValidationError = class extends Error {
   issues;
 };
 function issuePaths2(issues) {
-  return issues.map((issue) => {
-    const location = issue.path.map(String).join(".");
-    return location.length === 0 ? issue.message : location;
-  });
+  const flattened = issues.flatMap(
+    (issue) => issue.code === "invalid_union" && issue.errors !== void 0 ? [...issue.errors].sort((left, right) => left.length - right.length)[0] ?? [] : [issue]
+  );
+  return [
+    ...new Set(
+      flattened.map((issue) => {
+        const location = issue.path.map(String).join(".");
+        if (location === "coverSource" || /^inlineAssets\.\d+\.source$/u.test(location)) {
+          return `${location}: \u4EC5\u5141\u8BB8 agent-generated\uFF08\u672C\u6B21\u7531 Agent \u751F\u6210\uFF09\u6216 local-material\uFF08\u7528\u6237\u63D0\u4F9B\u7684\u672C\u5730\u7D20\u6750\uFF09\uFF1BSVG \u6216\u56FE\u8868\u7ECF\u5BFC\u51FA\u4E3A PNG/JPEG \u540E\uFF0C\u6309\u771F\u5B9E\u6765\u6E90\u9009\u62E9\u5176\u4E2D\u4E00\u4E2A\u503C`;
+        }
+        if (issue.code === "unrecognized_keys" && issue.keys?.includes("planned")) {
+          return "planned: \u8BE5\u5B57\u6BB5\u4E0D\u5C5E\u4E8E\u5DF2\u5B8C\u6210\u89C6\u89C9\u4EA7\u7269\uFF1Bplanned=true \u53EA\u80FD\u4F7F\u7528\u751F\u6210\u524D\u6388\u6743\u5951\u7EA6\uFF0C\u751F\u6210\u7ED3\u675F\u540E\u5FC5\u987B\u79FB\u9664";
+        }
+        if (issue.code === "unrecognized_keys" && issue.keys !== void 0) {
+          const unknown = issue.keys.map(String).join("\u3001");
+          const allowed = location === "generation" ? "executionLocation\u3001dataTransit\u3001chargesQuota\u3001maxAttempts\u3001retryPolicy\u3001plannedAssets" : /^inlineAssets\.\d+$/u.test(location) ? "path\u3001placement\u3001placementAnchor\u3001purpose\u3001source\u3001sha256" : "\u5F53\u524D\u9636\u6BB5 Skill \u8F93\u51FA\u6A21\u677F\u4E2D\u7684\u8BED\u4E49\u5B57\u6BB5\uFF0C\u4EE5\u53CA\u7531 CLI \u7EF4\u62A4\u7684 dxc \u5143\u6570\u636E";
+          return `${location.length === 0 ? "frontmatter" : location}: \u672A\u8BC6\u522B\u5B57\u6BB5 ${unknown}\uFF1B\u5141\u8BB8\u5B57\u6BB5\u4E3A ${allowed}`;
+        }
+        if (location === "generation") {
+          return "generation: planned=true \u65F6\u5FC5\u987B\u58F0\u660E executionLocation\u3001dataTransit\u3001chargesQuota\u3001maxAttempts\u3001retryPolicy \u548C plannedAssets\uFF0C\u5E76\u8D70\u751F\u6210\u524D\u6388\u6743\u5951\u7EA6";
+        }
+        return location.length === 0 ? issue.message : `${location}: ${issue.message}`;
+      })
+    )
+  ];
 }
 function insideProject(directory, relativePath) {
   const target = path3.resolve(directory, relativePath);
@@ -29351,11 +29390,16 @@ function insideProject(directory, relativePath) {
   }
   return target;
 }
-async function readRegularFile(target, maximumBytes) {
+async function readRegularFile(target, maximumBytes, imageRole) {
   let handle;
   try {
     handle = await open(target, fileConstants.O_RDONLY | fileConstants.O_NOFOLLOW);
     const metadata = await handle.stat();
+    if (metadata.isFile() && metadata.size > maximumBytes && imageRole !== void 0) {
+      throw new StageArtifactValidationError([
+        imageRole === "inline-image" ? `${path3.basename(target)} \u662F\u6B63\u6587\u56FE\u7247\uFF0C\u5B9E\u9645 ${metadata.size} bytes\uFF0C\u5FC5\u987B\u5C0F\u4E8E 1048576 bytes\uFF1B\u8BF7\u5BFC\u51FA JPEG \u6216\u964D\u4F4E\u5C3A\u5BF8/\u8D28\u91CF\u540E\u66F4\u65B0\u89C6\u89C9\u8BA1\u5212` : `${path3.basename(target)} \u662F\u5C01\u9762\uFF0C\u5B9E\u9645 ${metadata.size} bytes\uFF0C\u4E0A\u9650 ${maximumBytes} bytes\uFF1B\u8BF7\u964D\u4F4E\u5C3A\u5BF8\u6216\u8D28\u91CF\u540E\u66F4\u65B0\u89C6\u89C9\u8BA1\u5212`
+      ]);
+    }
     if (!metadata.isFile() || metadata.size <= 0 || metadata.size > maximumBytes) {
       throw new StageArtifactValidationError([path3.basename(target)]);
     }
@@ -29385,8 +29429,12 @@ function isSupportedImage(bytes, filePath) {
 function isInsideDirectory(filePath, directory) {
   return filePath.startsWith(`${directory}/`);
 }
-async function validateImageAsset(directory, logicalPath, expectedSha256, maximumBytes) {
-  const bytes = await readRegularFile(insideProject(directory, logicalPath), maximumBytes);
+async function validateImageAsset(directory, logicalPath, expectedSha256, maximumBytes, imageRole) {
+  const bytes = await readRegularFile(
+    insideProject(directory, logicalPath),
+    maximumBytes,
+    imageRole
+  );
   if (!isSupportedImage(bytes, logicalPath)) {
     throw new StageArtifactValidationError([`${logicalPath} \u4E0D\u662F\u771F\u5B9E PNG/JPEG \u6587\u4EF6`]);
   }
@@ -29468,6 +29516,30 @@ async function writeAtomically(target, bytes) {
     throw error;
   }
 }
+async function captureFile(target, logicalPath) {
+  try {
+    const metadata = await lstat2(target);
+    if (!metadata.isFile() || metadata.isSymbolicLink()) {
+      throw new StageArtifactValidationError([path3.basename(target)]);
+    }
+    return { bytes: await readFile2(target), logicalPath, target };
+  } catch (error) {
+    if (error.code === "ENOENT") {
+      return { logicalPath, target };
+    }
+    throw error;
+  }
+}
+async function assertFileUnchanged(candidate) {
+  const current = await captureFile(candidate.target, candidate.logicalPath);
+  const beforeHash = candidate.bytes === void 0 ? null : sha256(candidate.bytes);
+  const currentHash = current.bytes === void 0 ? null : sha256(current.bytes);
+  if (beforeHash !== currentHash) {
+    throw new StageArtifactValidationError([
+      `NORMALIZATION_CONFLICT: ${candidate.logicalPath} \u5728\u6821\u9A8C\u671F\u95F4\u88AB\u5176\u4ED6\u8FDB\u7A0B\u4FEE\u6539\uFF1BCLI \u672A\u8986\u76D6\u8BE5\u6587\u4EF6\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\u540E\u91CD\u8BD5`
+    ]);
+  }
+}
 async function bindDeliveryApprovalArtifact(options) {
   const source = (await readRegularFile(options.target, MAXIMUM_ARTIFACT_BYTES)).toString("utf8");
   const frontmatter = parseFrontmatter2(source);
@@ -29478,6 +29550,11 @@ async function bindDeliveryApprovalArtifact(options) {
   if (value["rootSnapshotId"] !== options.approval.rootSnapshotId || value["rootSnapshotHash"] !== options.approval.rootSnapshotHash) {
     throw new StageArtifactValidationError(["rootSnapshotId/rootSnapshotHash \u4E0E\u6279\u51C6\u8BF7\u6C42\u4E0D\u4E00\u81F4"]);
   }
+  if (value["selectedSnapshotId"] !== options.approval.selectedSnapshotId || value["selectedSnapshotHash"] !== options.approval.selectedSnapshotHash || value["templateId"] !== options.approval.templateId) {
+    throw new StageArtifactValidationError([
+      "\u6700\u7EC8\u6A21\u677F\u9009\u62E9\u56DE\u6267\u4E0E\u6279\u51C6\u54CD\u5E94\u4E0D\u4E00\u81F4\uFF1B\u8BF7\u91CD\u65B0\u8BFB\u53D6 preview-status\u3001\u66F4\u65B0 delivery \u5E76\u8BA9\u7528\u6237\u6309\u5F53\u524D\u9884\u89C8\u518D\u6B21\u786E\u8BA4"
+    ]);
+  }
   const intentState = options.intent === void 0 ? {} : options.intent.status === "SUCCEEDED" && options.intent.mediaId !== void 0 ? { intentId: options.intent.id, mediaId: options.intent.mediaId, state: "completed" } : options.intent.status === "FAILED" ? { intentId: options.intent.id, state: "failed" } : options.intent.progress.terminal ? { intentId: options.intent.id, state: "requires-attention" } : { intentId: options.intent.id, state: "processing" };
   const nextValue = {
     ...value,
@@ -29496,23 +29573,88 @@ async function bindDeliveryApprovalArtifact(options) {
 ${(0, import_yaml2.stringify)(parsed.data, { lineWidth: 0 }).trimEnd()}
 ---
 
+${frontmatter.body}
+`
+  );
+}
+async function readDeliveryDraftIdentity(target) {
+  const source = (await readRegularFile(target, MAXIMUM_ARTIFACT_BYTES)).toString("utf8");
+  const parsed = deliveryStageArtifactFrontmatterSchema.safeParse(parseFrontmatter2(source).value);
+  if (!parsed.success) {
+    throw new StageArtifactValidationError(issuePaths2(parsed.error.issues));
+  }
+  return {
+    accountId: parsed.data.accountId,
+    idempotencyKey: parsed.data.idempotencyKey,
+    previewSelectionRevision: parsed.data.previewSelectionRevision,
+    rootSnapshotHash: parsed.data.rootSnapshotHash,
+    rootSnapshotId: parsed.data.rootSnapshotId,
+    selectedSnapshotHash: parsed.data.selectedSnapshotHash,
+    selectedSnapshotId: parsed.data.selectedSnapshotId,
+    templateId: parsed.data.templateId
+  };
+}
+async function readDeliveryRetryIdentity(target) {
+  const source = (await readRegularFile(target, MAXIMUM_ARTIFACT_BYTES)).toString("utf8");
+  const parsed = deliveryStageArtifactFrontmatterSchema.safeParse(parseFrontmatter2(source).value);
+  if (!parsed.success) {
+    throw new StageArtifactValidationError(issuePaths2(parsed.error.issues));
+  }
+  return {
+    intentId: parsed.data.intentId,
+    retryAttempt: parsed.data.retryAttempt,
+    selectedSnapshotHash: parsed.data.selectedSnapshotHash,
+    state: parsed.data.state
+  };
+}
+async function bindDeliveryRetryIntentArtifact(options) {
+  const source = (await readRegularFile(options.target, MAXIMUM_ARTIFACT_BYTES)).toString("utf8");
+  const frontmatter = parseFrontmatter2(source);
+  const parsed = deliveryStageArtifactFrontmatterSchema.safeParse(frontmatter.value);
+  if (!parsed.success) {
+    throw new StageArtifactValidationError(issuePaths2(parsed.error.issues));
+  }
+  if (parsed.data.state !== "failed" || parsed.data.intentId !== options.previousIntentId || parsed.data.selectedSnapshotHash !== options.intent.snapshotHash) {
+    throw new StageArtifactValidationError([
+      "FAILED \u610F\u56FE\u6216\u6700\u7EC8\u5FEB\u7167\u4E0E\u670D\u52A1\u7AEF\u91CD\u8BD5\u7ED3\u679C\u4E0D\u4E00\u81F4\uFF1B\u672A\u8986\u76D6\u4EA4\u4ED8\u4EA7\u7269"
+    ]);
+  }
+  const state = options.intent.status === "SUCCEEDED" && options.intent.mediaId !== void 0 ? "completed" : options.intent.status === "FAILED" ? "failed" : options.intent.progress.terminal ? "requires-attention" : "processing";
+  const nextValue = deliveryStageArtifactFrontmatterSchema.parse({
+    ...parsed.data,
+    idempotencyKey: options.idempotencyKey,
+    intentId: options.intent.id,
+    ...options.intent.mediaId === void 0 ? {} : { mediaId: options.intent.mediaId },
+    retryAttempt: parsed.data.retryAttempt + 1,
+    retryOfIntentId: options.previousIntentId,
+    state
+  });
+  await writeAtomically(
+    options.target,
+    `---
+${(0, import_yaml2.stringify)(nextValue, { lineWidth: 0 }).trimEnd()}
+---
+
 ${frontmatter.body}
 `
   );
 }
 async function normalizeGoldenLines(directory, body, logicalPath) {
   const target = insideProject(directory, logicalPath);
+  const snapshot = await captureFile(target, logicalPath);
   let parsed;
   try {
-    const bytes2 = await readFile2(target);
-    if (bytes2.length === 0 || bytes2.length > 64 * 1024) {
-      throw new StageArtifactValidationError([`${logicalPath} \u4E0D\u662F\u5408\u6CD5\u91D1\u53E5\u4EA4\u63A5\u6587\u4EF6`]);
+    const bytes2 = snapshot.bytes;
+    if (bytes2 === void 0) {
+      parsed = { lines: [], schemaVersion: "dxc-golden-lines@1" };
+    } else {
+      if (bytes2.length === 0 || bytes2.length > 64 * 1024) {
+        throw new StageArtifactValidationError([`${logicalPath} \u4E0D\u662F\u5408\u6CD5\u91D1\u53E5\u4EA4\u63A5\u6587\u4EF6`]);
+      }
+      parsed = JSON.parse(bytes2.toString("utf8"));
     }
-    parsed = JSON.parse(bytes2.toString("utf8"));
   } catch (error) {
-    if (error.code === "ENOENT") {
-      parsed = { lines: [], schemaVersion: "dxc-golden-lines@1" };
-    } else if (error instanceof StageArtifactValidationError) {
+    if (error instanceof StageArtifactValidationError) {
       throw error;
     } else {
       throw new StageArtifactValidationError([`${logicalPath} \u4E0D\u662F\u5408\u6CD5\u91D1\u53E5\u4EA4\u63A5\u6587\u4EF6`]);
@@ -29531,16 +29673,17 @@ async function normalizeGoldenLines(directory, body, logicalPath) {
   };
   const bytes = Buffer.from(`${JSON.stringify(normalized, void 0, 2)}
 `, "utf8");
-  await writeAtomically(target, bytes);
-  return sha256(bytes);
+  return { bytes, snapshot };
 }
 async function normalizeStageArtifact(options) {
   const artifactPath = options.manifest.artifacts[options.stage];
   const target = insideProject(options.directory, artifactPath);
-  const source = (await readRegularFile(
-    target,
-    options.stage === "article" ? MAXIMUM_ARTICLE_BYTES : MAXIMUM_ARTIFACT_BYTES
-  )).toString("utf8");
+  const sourceSnapshot = await captureFile(target, artifactPath);
+  const maximumBytes = options.stage === "article" ? MAXIMUM_ARTICLE_BYTES : MAXIMUM_ARTIFACT_BYTES;
+  if (sourceSnapshot.bytes === void 0 || sourceSnapshot.bytes.length === 0 || sourceSnapshot.bytes.length > maximumBytes) {
+    throw new StageArtifactValidationError([path3.basename(target)]);
+  }
+  const source = sourceSnapshot.bytes.toString("utf8");
   const frontmatter = parseFrontmatter2(source);
   const value = recordValue(frontmatter.value);
   if (value === void 0) {
@@ -29549,6 +29692,8 @@ async function normalizeStageArtifact(options) {
   const previousDxc = recordValue(value["dxc"]) ?? {};
   const nextValue = { ...value };
   const rootQuoteSnapshots = nextValue["quoteSnapshots"];
+  const candidateFiles = [];
+  const sidecars = /* @__PURE__ */ new Map();
   delete nextValue["quoteSnapshots"];
   nextValue["dxc"] = {
     artifactStatus: options.artifactStatus,
@@ -29603,11 +29748,14 @@ async function normalizeStageArtifact(options) {
     const defaultGoldenLinesPath = artifactPath.replace(/\.md$/iu, ".golden-lines.json");
     const goldenLinesPath = typeof nextValue["goldenLinesPath"] === "string" && nextValue["goldenLinesPath"].trim().length > 0 ? nextValue["goldenLinesPath"].trim() : defaultGoldenLinesPath;
     nextValue["goldenLinesPath"] = goldenLinesPath;
-    nextValue["goldenLinesSha256"] = await normalizeGoldenLines(
+    const goldenLines = await normalizeGoldenLines(
       options.directory,
       frontmatter.body,
       goldenLinesPath
     );
+    nextValue["goldenLinesSha256"] = sha256(goldenLines.bytes);
+    sidecars.set(goldenLinesPath, goldenLines.bytes);
+    candidateFiles.push({ ...goldenLines.snapshot, afterBytes: goldenLines.bytes });
   }
   if (options.stage === "titles") {
     const articleInput = options.inputs.find((input) => input.kind === "article");
@@ -29618,16 +29766,20 @@ async function normalizeStageArtifact(options) {
   if (options.stage === "visual-plan") {
     nextValue["assetsDirectory"] ??= options.manifest.assetsDirectory;
     nextValue["inlineImagesSupported"] ??= true;
-    nextValue["inlineAssets"] ??= [];
-    if (typeof nextValue["coverAsset"] === "string") {
+    const isGenerationProposal = nextValue["planned"] === true;
+    if (!isGenerationProposal) {
+      nextValue["inlineAssets"] ??= [];
+    }
+    if (!isGenerationProposal && typeof nextValue["coverAsset"] === "string") {
       nextValue["coverSha256"] = sha256(
         await readRegularFile(
           insideProject(options.directory, nextValue["coverAsset"]),
-          MAXIMUM_COVER_BYTES
+          MAXIMUM_COVER_BYTES,
+          "cover"
         )
       );
     }
-    if (Array.isArray(nextValue["inlineAssets"])) {
+    if (!isGenerationProposal && Array.isArray(nextValue["inlineAssets"])) {
       nextValue["inlineAssets"] = await Promise.all(
         nextValue["inlineAssets"].map(async (asset) => {
           const value2 = recordValue(asset);
@@ -29639,7 +29791,8 @@ async function normalizeStageArtifact(options) {
             sha256: sha256(
               await readRegularFile(
                 insideProject(options.directory, value2["path"]),
-                MAXIMUM_INLINE_IMAGE_BYTES
+                MAXIMUM_INLINE_IMAGE_BYTES,
+                "inline-image"
               )
             )
           };
@@ -29673,6 +29826,7 @@ async function normalizeStageArtifact(options) {
     nextValue["selectedSnapshotId"] ??= legacySnapshotId;
     nextValue["selectedSnapshotHash"] ??= legacySnapshotHash;
     nextValue["templateId"] ??= "wechat-minimal@1";
+    nextValue["previewSelectionRevision"] ??= 0;
     delete nextValue["snapshotId"];
     delete nextValue["snapshotHash"];
     if (typeof nextValue["rootSnapshotId"] === "string") {
@@ -29691,12 +29845,58 @@ ${(0, import_yaml2.stringify)(nextValue, { lineWidth: 0 }).trimEnd()}
 
 ${frontmatter.body}
 `;
-  if (normalizedSource !== source) {
-    await writeAtomically(target, normalizedSource);
-  }
+  const normalizedBytes = Buffer.from(normalizedSource, "utf8");
+  candidateFiles.push({ ...sourceSnapshot, afterBytes: normalizedBytes });
+  const changedFiles = candidateFiles.filter(
+    (candidate) => candidate.bytes === void 0 || !candidate.bytes.equals(candidate.afterBytes)
+  );
+  let committedFiles = [];
+  const rollbackCommitted = async () => {
+    for (const candidate of [...committedFiles].reverse()) {
+      const current = await captureFile(candidate.target, candidate.logicalPath);
+      if (current.bytes === void 0 || sha256(current.bytes) !== sha256(candidate.afterBytes)) {
+        continue;
+      }
+      if (candidate.bytes === void 0) {
+        await unlink(candidate.target);
+      } else {
+        await writeAtomically(candidate.target, candidate.bytes);
+      }
+    }
+    committedFiles = [];
+  };
+  return {
+    artifact: {
+      bytes: normalizedBytes.length,
+      path: artifactPath,
+      sha256: sha256(normalizedBytes)
+    },
+    candidate: { sidecars, source: normalizedSource },
+    commit: async () => {
+      for (const candidate of candidateFiles) {
+        await assertFileUnchanged(candidate);
+      }
+      try {
+        for (const candidate of changedFiles) {
+          await assertFileUnchanged(candidate);
+          await writeAtomically(candidate.target, candidate.afterBytes);
+          committedFiles.push(candidate);
+        }
+      } catch (error) {
+        await rollbackCommitted();
+        throw error;
+      }
+    },
+    mutations: changedFiles.map((candidate) => ({
+      afterSha256: sha256(candidate.afterBytes),
+      beforeSha256: candidate.bytes === void 0 ? null : sha256(candidate.bytes),
+      path: candidate.logicalPath
+    })),
+    rollbackCommitted
+  };
 }
-async function validateGoldenLinesSidecar(directory, articleBody, logicalPath, expectedSha256) {
-  const bytes = await readRegularFile(insideProject(directory, logicalPath), 64 * 1024);
+async function validateGoldenLinesSidecar(directory, articleBody, logicalPath, expectedSha256, candidateBytes) {
+  const bytes = candidateBytes ?? await readRegularFile(insideProject(directory, logicalPath), 64 * 1024);
   if (sha256(bytes) !== expectedSha256) {
     throw new StageArtifactValidationError([`${logicalPath} \u54C8\u5E0C\u4E0D\u4E00\u81F4`]);
   }
@@ -29729,13 +29929,27 @@ function compareInputs(declared, actual) {
   }
   return issues;
 }
+function bindConfirmationInputs(contentHash, inputs) {
+  return sha256(
+    Buffer.from(
+      JSON.stringify({
+        contentHash,
+        inputs: inputs.map((input) => ({
+          kind: input.kind,
+          path: input.path,
+          sha256: input.sha256 ?? null
+        }))
+      }),
+      "utf8"
+    )
+  );
+}
 async function validateStageArtifact(options) {
   const artifactPath = options.manifest.artifacts[options.stage];
-  const bytes = await readRegularFile(
+  const source = options.candidate?.source ?? (await readRegularFile(
     insideProject(options.directory, artifactPath),
     options.stage === "article" ? MAXIMUM_ARTICLE_BYTES : MAXIMUM_ARTIFACT_BYTES
-  );
-  const source = bytes.toString("utf8");
+  )).toString("utf8");
   const frontmatter = parseFrontmatter2(source);
   const parsed = contentStageArtifactFrontmatterSchema(options.stage).safeParse(frontmatter.value);
   if (!parsed.success) {
@@ -29775,7 +29989,8 @@ async function validateStageArtifact(options) {
         options.directory,
         frontmatter.body,
         article.goldenLinesPath,
-        article.goldenLinesSha256
+        article.goldenLinesSha256,
+        options.candidate?.sidecars.get(article.goldenLinesPath)
       );
     }
   }
@@ -29812,6 +30027,39 @@ async function validateStageArtifact(options) {
   }
   if (options.stage === "visual-plan") {
     const visual = visualPlanStageArtifactFrontmatterSchema.parse(frontmatter.value);
+    if (!("coverAsset" in visual)) {
+      if (options.checkpointStatus !== "awaiting-user") {
+        throw new StageArtifactValidationError([
+          "planned: \u751F\u6210\u8BA1\u5212\u53EA\u80FD\u7528\u4E8E\u7B49\u5F85\u56FE\u7247\u751F\u6210\u6388\u6743\uFF0C\u4E0D\u80FD\u4F5C\u4E3A\u5DF2\u5B8C\u6210\u89C6\u89C9\u4EA7\u7269"
+        ]);
+      }
+      const semanticFrontmatter2 = { ...visual };
+      delete semanticFrontmatter2["dxc"];
+      const legacyConfirmationSnapshotHash2 = sha256(
+        Buffer.from(
+          JSON.stringify({ body: frontmatter.body, frontmatter: semanticFrontmatter2 }),
+          "utf8"
+        )
+      );
+      return {
+        artifactPhase: "generation-proposal",
+        authorizationPlan: {
+          ...visual.generation,
+          plannedAssets: visual.generation.plannedAssets.map((asset) => ({
+            purpose: asset.purpose,
+            role: asset.role,
+            source: asset.source,
+            ...asset.placementAnchor === void 0 ? {} : { placementAnchor: asset.placementAnchor }
+          }))
+        },
+        confirmationSnapshotHash: bindConfirmationInputs(
+          legacyConfirmationSnapshotHash2,
+          options.inputs
+        ),
+        legacyConfirmationSnapshotHash: legacyConfirmationSnapshotHash2,
+        snapshotType: "stage-artifact"
+      };
+    }
     if (visual.assetsDirectory !== options.manifest.assetsDirectory && !isInsideDirectory(visual.assetsDirectory, options.manifest.assetsDirectory)) {
       throw new StageArtifactValidationError(["assetsDirectory \u4E0D\u5728\u9879\u76EE\u7D20\u6750\u76EE\u5F55\u4E2D"]);
     }
@@ -29826,11 +30074,18 @@ async function validateStageArtifact(options) {
       options.directory,
       visual.coverAsset,
       visual.coverSha256,
-      MAXIMUM_COVER_BYTES
+      MAXIMUM_COVER_BYTES,
+      "cover"
     );
     await Promise.all(
       visual.inlineAssets.map(
-        (asset) => validateImageAsset(options.directory, asset.path, asset.sha256, MAXIMUM_INLINE_IMAGE_BYTES)
+        (asset) => validateImageAsset(
+          options.directory,
+          asset.path,
+          asset.sha256,
+          MAXIMUM_INLINE_IMAGE_BYTES,
+          "inline-image"
+        )
       )
     );
   }
@@ -29842,29 +30097,40 @@ async function validateStageArtifact(options) {
   }
   if (options.stage === "titles") {
     const titles = titlesStageArtifactFrontmatterSchema.parse(frontmatter.value);
+    const legacyConfirmationSnapshotHash2 = sha256(
+      Buffer.from(
+        JSON.stringify({
+          articleSha256: titles.articleSha256,
+          body: frontmatter.body,
+          selectedTitle: titles.selectedTitle
+        }),
+        "utf8"
+      )
+    );
     return {
-      confirmationSnapshotHash: sha256(
-        Buffer.from(
-          JSON.stringify({
-            articleSha256: titles.articleSha256,
-            body: frontmatter.body,
-            selectedTitle: titles.selectedTitle
-          }),
-          "utf8"
-        )
+      confirmationSnapshotHash: bindConfirmationInputs(
+        legacyConfirmationSnapshotHash2,
+        options.inputs
       ),
+      legacyConfirmationSnapshotHash: legacyConfirmationSnapshotHash2,
       snapshotType: "stage-artifact"
     };
   }
   const semanticFrontmatter = { ...parsed.data };
   delete semanticFrontmatter["dxc"];
+  const legacyConfirmationSnapshotHash = articleConfirmationSnapshotHash ?? sha256(
+    Buffer.from(
+      JSON.stringify({ body: frontmatter.body, frontmatter: semanticFrontmatter }),
+      "utf8"
+    )
+  );
   return {
-    confirmationSnapshotHash: articleConfirmationSnapshotHash ?? sha256(
-      Buffer.from(
-        JSON.stringify({ body: frontmatter.body, frontmatter: semanticFrontmatter }),
-        "utf8"
-      )
+    ...options.stage === "visual-plan" ? { artifactPhase: "materialized" } : {},
+    confirmationSnapshotHash: bindConfirmationInputs(
+      legacyConfirmationSnapshotHash,
+      options.inputs
     ),
+    legacyConfirmationSnapshotHash,
     snapshotType: "stage-artifact"
   };
 }
@@ -29879,6 +30145,17 @@ async function stageArtifactRequiresUserConfirmation(options) {
   const value = recordValue(parseFrontmatter2(source).value);
   return normalizedOrigin(value?.["origin"]) === "hotspot" && value?.["researchMode"] === "fact-only" && value?.["externalOpinionStatus"] === "user-skipped";
 }
+async function visualPlanArtifactPhase(options) {
+  const source = (await readRegularFile(
+    insideProject(options.directory, options.manifest.artifacts["visual-plan"]),
+    MAXIMUM_ARTIFACT_BYTES
+  )).toString("utf8");
+  const parsed = visualPlanStageArtifactFrontmatterSchema.safeParse(parseFrontmatter2(source).value);
+  if (!parsed.success) {
+    throw new StageArtifactValidationError(issuePaths2(parsed.error.issues));
+  }
+  return "planned" in parsed.data && parsed.data.planned === true ? "generation-proposal" : "materialized";
+}
 
 // apps/cli/src/project.ts
 var MANIFEST_NAME = "dxc.project.json";
@@ -29908,12 +30185,14 @@ var DEFAULT_ARTIFACT_PATHS = {
   "visual-plan": "artifacts/06-visual-plan.md"
 };
 var ProjectCliError = class extends Error {
-  constructor(code, message) {
+  constructor(code, message, details = {}) {
     super(message);
     this.code = code;
+    this.details = details;
     this.name = "ProjectCliError";
   }
   code;
+  details;
 };
 function migrateCheckpointInputKinds(required, optional, existing) {
   const allowedOptionalInputs = new Set(optional);
@@ -29938,7 +30217,7 @@ function errorCode(error) {
 }
 async function readJsonFile(target, maximumBytes, missingCode) {
   try {
-    const metadata = await lstat2(target);
+    const metadata = await lstat3(target);
     if (!metadata.isFile() || metadata.isSymbolicLink() || metadata.size > maximumBytes) {
       throw new ProjectCliError("DXC_PROJECT_INVALID", "Project state file is invalid");
     }
@@ -30035,7 +30314,7 @@ async function inspectArtifact(directory, manifest, kind) {
   const relativePath = manifest.artifacts[kind];
   const target = insideProject2(directory, relativePath);
   try {
-    const metadata = await lstat2(target);
+    const metadata = await lstat3(target);
     if (!metadata.isFile() || metadata.isSymbolicLink()) {
       throw new ProjectCliError("DXC_PROJECT_INVALID", "Project artifact is invalid");
     }
@@ -30119,16 +30398,26 @@ async function inspectCheckpoint(directory, manifest, stage, artifact, artifacts
       };
     }
     if (artifact.sha256 !== checkpoint.artifact.sha256 || artifact.bytes !== checkpoint.artifact.bytes) {
-      return {
-        checkpoint,
-        path: relativePath,
-        reason: "artifact-changed",
-        stage,
-        state: "stale"
-      };
+      let authorizedMaterialization = false;
+      if (checkpoint.checkpointVersion === "4" && checkpoint.stage === "visual-plan" && checkpoint.status === "running" && checkpoint.authorizations.length > 0) {
+        try {
+          authorizedMaterialization = await visualPlanArtifactPhase({ directory, manifest }) === "materialized";
+        } catch {
+          authorizedMaterialization = false;
+        }
+      }
+      if (!authorizedMaterialization) {
+        return {
+          checkpoint,
+          path: relativePath,
+          reason: "artifact-changed",
+          stage,
+          state: "stale"
+        };
+      }
     }
   }
-  if (checkpoint.checkpointVersion === "2" || checkpoint.checkpointVersion === "3") {
+  if (checkpoint.checkpointVersion === "2" || checkpoint.checkpointVersion === "3" || checkpoint.checkpointVersion === "4") {
     if (checkpoint.inputs.some((input) => input.path !== manifest.artifacts[input.kind]) || checkpoint.outputs.some((output) => output.path !== manifest.artifacts[output.kind])) {
       throw new ProjectCliError("DXC_PROJECT_INVALID", "Project checkpoint paths are invalid");
     }
@@ -30295,12 +30584,18 @@ var ProjectCli = class {
       });
       pendingCheckpoints.push({ checkpoint, stage });
     }
-    for (const { checkpoint, stage } of pendingCheckpoints) {
-      await writeJsonAtomically(
-        insideProject2(directory, checkpointRelativePath(manifest, stage)),
-        checkpoint
-      );
+    const writtenTargets = [];
+    try {
+      for (const { checkpoint, stage } of pendingCheckpoints) {
+        const target = insideProject2(directory, checkpointRelativePath(manifest, stage));
+        await writeJsonAtomically(target, checkpoint);
+        writtenTargets.push(target);
+      }
+    } catch (error) {
+      await Promise.all(writtenTargets.map((target) => unlink2(target).catch(() => void 0)));
+      throw error;
     }
+    return writtenTargets;
   }
   async #rememberProject(directory, manifest, updatedAt) {
     const index = await loadProjectIndex(this.#projectIndexPath);
@@ -30329,7 +30624,7 @@ var ProjectCli = class {
     const directory = projectDirectory(this.#currentDirectory, this.#homeDirectory, directoryInput);
     const manifestTarget = path4.join(directory, MANIFEST_NAME);
     try {
-      await lstat2(manifestTarget);
+      await lstat3(manifestTarget);
       throw new ProjectCliError("DXC_PROJECT_EXISTS", "A DxC project already exists");
     } catch (error) {
       if (error instanceof ProjectCliError) {
@@ -30409,9 +30704,18 @@ var ProjectCli = class {
       )
     );
     const summary = workflowSummary(checkpoints);
+    const recoveryPlan = checkpoints.flatMap(
+      (inspection) => inspection.state === "stale" ? [
+        {
+          action: "rerun-stage",
+          reason: inspection.reason,
+          stage: inspection.stage
+        }
+      ] : []
+    );
     let assetsDirectoryReady = false;
     try {
-      const metadata = await lstat2(insideProject2(directory, manifest.assetsDirectory));
+      const metadata = await lstat3(insideProject2(directory, manifest.assetsDirectory));
       assetsDirectoryReady = metadata.isDirectory() && !metadata.isSymbolicLink();
     } catch (error) {
       if (errorCode(error) !== "ENOENT") {
@@ -30428,6 +30732,7 @@ var ProjectCli = class {
         checkpointsDirectory: manifest.checkpointsDirectory,
         manifest,
         manifestPath: MANIFEST_NAME,
+        recoveryPlan,
         ...summary
       },
       ok: true
@@ -30517,10 +30822,46 @@ var ProjectCli = class {
     const status = stepCheckpointStatusSchema.safeParse(options.status);
     const executionLocation = executionLocationSchema.safeParse(options.executionLocation);
     const dataTransit = dataTransitSchema.safeParse(options.dataTransit);
-    const summary = options.summary.trim();
+    const summary = options.summary?.trim() ?? "";
     const requestedWaitingFor = options.waitingFor?.trim();
     if (!stage.success || !status.success || !executionLocation.success || !dataTransit.success || summary.length === 0) {
-      throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", "Checkpoint options are invalid");
+      throw new ProjectCliError(
+        "DXC_PROJECT_STAGE_INVALID",
+        summary.length === 0 ? "\u9636\u6BB5\u68C0\u67E5\u70B9\u7F3A\u5C11\u6458\u8981\u3002" : "Checkpoint options are invalid",
+        summary.length === 0 ? {
+          fields: ["summary"],
+          reason: "SUMMARY_REQUIRED",
+          recovery: "\u8865\u5145 --summary <\u672C\u6B21\u9636\u6BB5\u72B6\u6001\u7684\u7B80\u77ED\u8BF4\u660E> \u540E\u91CD\u8BD5\uFF1BCLI \u4E0D\u4F1A\u5728\u7F3A\u5C11\u6458\u8981\u65F6\u4FEE\u6539\u4EFB\u4F55\u4EA7\u7269\u3002",
+          ...stage.success ? { stage: stage.data } : {}
+        } : { reason: "CHECKPOINT_OPTIONS_INVALID" }
+      );
+    }
+    if (options.confirmationSnapshotHash !== void 0 && stage.data !== "delivery") {
+      throw new ProjectCliError(
+        "DXC_PROJECT_STAGE_INVALID",
+        "--confirmation-snapshot \u4EC5\u7528\u4E8E delivery \u7684\u4E91\u7AEF\u6E32\u67D3\u5FEB\u7167\uFF1B\u5185\u5BB9\u9636\u6BB5\u7531 CLI \u81EA\u52A8\u8BA1\u7B97\u8BED\u4E49\u5FEB\u7167\u3002",
+        {
+          fields: ["confirmationSnapshot"],
+          reason: "CONFIRMATION_SNAPSHOT_FLAG_NOT_ALLOWED",
+          recovery: "\u79FB\u9664\u8BE5\u53C2\u6570\uFF1B\u82E5\u6B63\u6587\u6216\u6807\u9898\u5728\u5C55\u793A\u540E\u53D1\u751F\u53D8\u5316\uFF0C\u5148\u91CD\u65B0\u5199 awaiting-user \u68C0\u67E5\u70B9\u5E76\u518D\u6B21\u5C55\u793A\uFF0C\u518D\u4F7F\u7528 --confirm\u3002",
+          stage: stage.data
+        }
+      );
+    }
+    const authorizationPurpose = options.authorizationPurpose?.trim();
+    const requestingExternalAuthorization = authorizationPurpose === "image-generation" && stage.data === "visual-plan" && status.data === "awaiting-user" && options.confirmed !== true;
+    const confirmingExternalAuthorization = authorizationPurpose === "image-generation" && stage.data === "visual-plan" && status.data === "running" && options.confirmed === true;
+    if (authorizationPurpose !== void 0 && !requestingExternalAuthorization && !confirmingExternalAuthorization) {
+      throw new ProjectCliError(
+        "DXC_PROJECT_STAGE_INVALID",
+        "\u56FE\u7247\u751F\u6210\u6388\u6743\u4EC5\u652F\u6301 visual-plan\uFF1A\u5148\u4EE5 awaiting-user \u8BF7\u6C42\uFF0C\u518D\u4EE5 running --confirm \u786E\u8BA4\u540E\u56DE\u5230\u540C\u4E00\u9636\u6BB5\u3002",
+        {
+          fields: ["authorizationPurpose"],
+          reason: "EXTERNAL_AUTHORIZATION_OPTIONS_INVALID",
+          recovery: "\u8BF7\u6C42\u6388\u6743\u65F6\u4F7F\u7528 --status awaiting-user --authorization-purpose image-generation\uFF1B\u7528\u6237\u786E\u8BA4\u540E\u4F7F\u7528 --status running --confirm \u548C\u76F8\u540C purpose\u3002",
+          stage: stage.data
+        }
+      );
     }
     const expectedSkill = CONTENT_STAGE_SKILLS[stage.data];
     const effectiveSkill = options.skill ?? expectedSkill.name;
@@ -30556,12 +30897,12 @@ var ProjectCli = class {
         status: await inspectArtifact(directory, manifest, inputStage)
       }))
     )).filter((input) => input.status.status === "ready").map((input) => input.inputStage) : [];
-    const migratedExistingInputs = existing?.checkpointVersion === "2" || existing?.checkpointVersion === "3" ? migrateCheckpointInputKinds(
+    const migratedExistingInputs = existing?.checkpointVersion === "2" || existing?.checkpointVersion === "3" || existing?.checkpointVersion === "4" ? migrateCheckpointInputKinds(
       stageInputs.required,
       stageInputs.optional,
       existing.inputs.map((input) => input.kind)
     ) : [];
-    const inputStageValues = options.inputStages !== void 0 ? [...stageInputs.required, ...options.inputStages] : existing?.checkpointVersion === "2" || existing?.checkpointVersion === "3" ? migratedExistingInputs : [...stageInputs.required, ...inferredOptionalInputs];
+    const inputStageValues = options.inputStages !== void 0 ? [...stageInputs.required, ...options.inputStages] : existing?.checkpointVersion === "2" || existing?.checkpointVersion === "3" || existing?.checkpointVersion === "4" ? migratedExistingInputs : [...stageInputs.required, ...inferredOptionalInputs];
     const inputStages = inputStageValues.map(
       (inputStage) => contentArtifactKindSchema.safeParse(inputStage)
     );
@@ -30619,7 +30960,7 @@ var ProjectCli = class {
       );
     }
     const inputs = inputArtifactStatuses.map(artifactReference);
-    const requestedNeedsArtifact = status.data === "awaiting-user" || status.data === "completed";
+    const requestedNeedsArtifact = status.data === "awaiting-user" || status.data === "completed" || confirmingExternalAuthorization;
     const artifactStatusBeforeNormalization = await inspectArtifact(
       directory,
       manifest,
@@ -30635,7 +30976,12 @@ var ProjectCli = class {
         });
       } catch (error) {
         if (error instanceof StageArtifactValidationError) {
-          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message);
+          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message, {
+            fields: error.issues.slice(0, 20).map((issue) => issue.slice(0, 200)),
+            reason: "STAGE_ARTIFACT_INVALID",
+            recovery: "\u6309 fields \u4E2D\u7684\u9996\u4E2A\u95EE\u9898\u4FEE\u6B63\u9636\u6BB5\u4EA7\u7269\u540E\u91CD\u8BD5\uFF1B\u5176\u4ED6\u95EE\u9898\u4F5C\u4E3A\u8865\u5145\u8BE6\u60C5\uFF0C\u4E0D\u4F1A\u906E\u4F4F\u4E3B\u539F\u56E0\u3002",
+            stage: stage.data
+          });
         }
         throw error;
       }
@@ -30656,11 +31002,12 @@ var ProjectCli = class {
         "Awaiting checkpoint needs one waiting-for prompt"
       );
     }
-    const needsArtifact = effectiveStatus === "awaiting-user" || effectiveStatus === "completed";
+    const needsArtifact = effectiveStatus === "awaiting-user" || effectiveStatus === "completed" || confirmingExternalAuthorization;
+    let artifactNormalization;
     if (needsArtifact) {
       try {
-        await normalizeStageArtifact({
-          artifactStatus: effectiveStatus === "completed" ? "complete" : "awaiting-user",
+        artifactNormalization = await normalizeStageArtifact({
+          artifactStatus: effectiveStatus === "completed" && !confirmingExternalAuthorization ? "complete" : "awaiting-user",
           createdAt: timestamp,
           directory,
           inputs,
@@ -30671,138 +31018,251 @@ var ProjectCli = class {
         });
       } catch (error) {
         if (error instanceof StageArtifactValidationError) {
-          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message);
+          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message, {
+            fields: error.issues.slice(0, 20).map((issue) => issue.slice(0, 200)),
+            reason: "STAGE_ARTIFACT_INVALID",
+            recovery: "\u6309 fields \u4E2D\u7684\u9996\u4E2A\u95EE\u9898\u4FEE\u6B63\u9636\u6BB5\u4EA7\u7269\u540E\u91CD\u8BD5\uFF1B\u6821\u9A8C\u5931\u8D25\u4E0D\u4F1A\u4FDD\u7559 CLI \u89C4\u8303\u5316\u6539\u5199\u3002",
+            stage: stage.data
+          });
         }
         throw error;
       }
     }
-    const artifactStatus = await inspectArtifact(directory, manifest, stage.data);
-    if (needsArtifact && artifactStatus.status !== "ready") {
-      throw new ProjectCliError(
-        "DXC_PROJECT_STAGE_INVALID",
-        "Checkpoint artifact must exist and be non-empty"
-      );
-    }
-    let artifactValidation;
-    if (needsArtifact) {
+    {
+      const artifactStatus = artifactNormalization === void 0 ? await inspectArtifact(directory, manifest, stage.data) : {
+        ...artifactNormalization.artifact,
+        kind: stage.data,
+        status: "ready"
+      };
+      if (needsArtifact && artifactStatus.status !== "ready") {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "Checkpoint artifact must exist and be non-empty"
+        );
+      }
+      let artifactValidation;
+      if (needsArtifact) {
+        try {
+          artifactValidation = await validateStageArtifact({
+            ...artifactNormalization === void 0 ? {} : { candidate: artifactNormalization.candidate },
+            checkpointStatus: confirmingExternalAuthorization ? "awaiting-user" : effectiveStatus,
+            directory,
+            inputs,
+            manifest,
+            skill: effectiveSkill,
+            skillVersion: effectiveSkillVersion,
+            stage: stage.data
+          });
+        } catch (error) {
+          if (error instanceof StageArtifactValidationError) {
+            throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message, {
+              fields: error.issues.slice(0, 20).map((issue) => issue.slice(0, 200)),
+              reason: "STAGE_ARTIFACT_INVALID",
+              recovery: "\u6309 fields \u4E2D\u7684\u9996\u4E2A\u95EE\u9898\u4FEE\u6B63\u9636\u6BB5\u4EA7\u7269\u540E\u91CD\u8BD5\uFF1B\u9700\u8981\u786E\u8BA4\u65F6\u5148\u91CD\u65B0\u5C55\u793A\u5F53\u524D\u8BED\u4E49\u5FEB\u7167\u3002",
+              stage: stage.data
+            });
+          }
+          throw error;
+        }
+      }
+      if (artifactValidation?.artifactPhase === "generation-proposal" && !requestingExternalAuthorization && !confirmingExternalAuthorization) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "\u89C6\u89C9\u4EA7\u7269\u4ECD\u662F\u56FE\u7247\u751F\u6210\u8BA1\u5212\uFF0C\u5FC5\u987B\u5148\u5B8C\u6210\u751F\u6210\u524D\u6388\u6743\uFF0C\u4E0D\u80FD\u76F4\u63A5\u5B8C\u6210\u9636\u6BB5\u3002",
+          {
+            reason: "VISUAL_GENERATION_AUTHORIZATION_REQUIRED",
+            recovery: "\u5148\u4EE5 awaiting-user --authorization-purpose image-generation \u4FDD\u5B58\u8BA1\u5212\uFF1B\u7528\u6237\u786E\u8BA4\u540E\u4EE5 running --confirm \u8FD4\u56DE\u540C\u4E00 visual-plan \u9636\u6BB5\u3002",
+            stage: "visual-plan"
+          }
+        );
+      }
+      const output = artifactReference(artifactStatus);
+      const confirmationSnapshotHash = options.confirmationSnapshotHash?.trim() ?? artifactValidation?.confirmationSnapshotHash;
+      if (needsArtifact && (confirmationSnapshotHash === void 0 || !/^[a-f0-9]{64}$/u.test(confirmationSnapshotHash))) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "Confirmation snapshot hash is invalid"
+        );
+      }
+      if (options.confirmationSnapshotHash !== void 0 && artifactValidation !== void 0 && options.confirmationSnapshotHash.trim() !== artifactValidation.confirmationSnapshotHash) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "\u786E\u8BA4\u5FEB\u7167\u4E0E\u5F53\u524D\u9636\u6BB5\u7ECF\u8FC7\u6821\u9A8C\u7684\u5185\u5BB9\u6216\u6E32\u67D3\u5FEB\u7167\u4E0D\u4E00\u81F4\u3002"
+        );
+      }
+      const confirmationRelevant = effectiveStatus === "awaiting-user" || effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed;
+      const previousBinding = existing?.checkpointVersion === "3" || existing?.checkpointVersion === "4" ? existing.confirmationBinding : null;
+      const confirmationSnapshotType = artifactValidation?.snapshotType ?? "stage-artifact";
+      const previousInputsMatch = (existing?.checkpointVersion === "2" || existing?.checkpointVersion === "3" || existing?.checkpointVersion === "4") && existing.inputs.length === inputs.length && existing.inputs.every((input, index) => {
+        const current = inputs[index];
+        return current !== void 0 && input.kind === current.kind && input.path === current.path && input.sha256 === current.sha256 && input.bytes === current.bytes;
+      });
+      const legacyPendingSnapshotMatches = options.confirmed && previousInputsMatch && previousBinding?.snapshotType === "stage-artifact" && artifactStatusBeforeNormalization.status === "ready" && previousBinding.snapshotHash === artifactStatusBeforeNormalization.sha256;
+      const legacySemanticSnapshotMatches = options.confirmed && previousInputsMatch && previousBinding?.snapshotType === "stage-artifact" && artifactValidation?.legacyConfirmationSnapshotHash !== void 0 && previousBinding.snapshotHash === artifactValidation.legacyConfirmationSnapshotHash;
+      const previousSnapshotMatches = previousBinding?.snapshotHash === confirmationSnapshotHash || legacySemanticSnapshotMatches || legacyPendingSnapshotMatches;
+      const completingConfirmedStage = effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed;
+      if ((completingConfirmedStage || confirmingExternalAuthorization) && (existing?.status !== "awaiting-user" || existing.confirmation !== "pending" || previousBinding?.status !== "pending" || !previousSnapshotMatches || previousBinding.snapshotType !== confirmationSnapshotType || confirmingExternalAuthorization && (existing.checkpointVersion !== "4" || existing.confirmationPurpose !== "external-action"))) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          confirmingExternalAuthorization ? "\u5F53\u524D\u56FE\u7247\u751F\u6210\u8BA1\u5212\u4E0D\u662F\u521A\u624D\u7B49\u5F85\u6388\u6743\u7684\u7248\u672C\uFF1B\u8BF7\u91CD\u65B0\u5C55\u793A\u5F53\u524D\u8BA1\u5212\u5E76\u8BF7\u6C42\u6388\u6743\u3002" : "\u5F53\u524D\u5185\u5BB9\u6216\u6E32\u67D3\u5FEB\u7167\u4E0D\u662F\u521A\u624D\u7B49\u5F85\u786E\u8BA4\u7684\u7248\u672C\uFF1B\u8BF7\u5148\u91CD\u65B0\u5C55\u793A\u5E76\u5199\u5165 awaiting-user \u68C0\u67E5\u70B9\uFF0C\u518D\u6839\u636E\u7528\u6237\u660E\u786E\u56DE\u7B54\u786E\u8BA4\u3002",
+          {
+            reason: confirmingExternalAuthorization ? "EXTERNAL_AUTHORIZATION_STALE" : "CONFIRMATION_STALE",
+            recovery: confirmingExternalAuthorization ? "\u7528\u5F53\u524D\u5F20\u6570\u3001\u7528\u9014\u3001\u6570\u636E\u53BB\u5411\u548C\u5C1D\u8BD5\u4E0A\u9650\u91CD\u5199\u751F\u6210\u8BA1\u5212\uFF0C\u5199 awaiting-user \u540E\u91CD\u65B0\u53D6\u5F97\u7528\u6237\u6388\u6743\u3002" : "\u91CD\u65B0\u751F\u6210\u6216\u89C4\u8303\u5316\u5F53\u524D\u4EA7\u7269\uFF0C\u5199 awaiting-user \u68C0\u67E5\u70B9\uFF0C\u5411\u7528\u6237\u5C55\u793A\u8BE5\u8BED\u4E49\u5FEB\u7167\u540E\u518D\u786E\u8BA4\u3002",
+            stage: stage.data
+          }
+        );
+      }
+      const requestedAt = previousBinding !== null && previousSnapshotMatches && previousBinding.snapshotType === confirmationSnapshotType ? previousBinding.requestedAt : timestamp;
+      const confirmedBy = options.confirmedBy?.trim() || "local-interactive-user";
+      const authorizationPlan = artifactValidation?.authorizationPlan;
+      if ((requestingExternalAuthorization || confirmingExternalAuthorization) && authorizationPlan === void 0) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "\u56FE\u7247\u751F\u6210\u6388\u6743\u5FC5\u987B\u7ED1\u5B9A planned=true \u7684\u5B8C\u6574\u751F\u6210\u8BA1\u5212\u3002",
+          {
+            reason: "VISUAL_GENERATION_PLAN_REQUIRED",
+            recovery: "\u8865\u9F50 generation.executionLocation\u3001dataTransit\u3001chargesQuota\u3001maxAttempts\u3001retryPolicy \u548C plannedAssets \u540E\u91CD\u65B0\u8BF7\u6C42\u6388\u6743\u3002",
+            stage: "visual-plan"
+          }
+        );
+      }
+      if (authorizationPlan !== void 0 && (authorizationPlan.dataTransit !== dataTransit.data || authorizationPlan.executionLocation !== executionLocation.data || confirmingExternalAuthorization && (existing?.execution.dataTransit !== dataTransit.data || existing.execution.location !== executionLocation.data))) {
+        throw new ProjectCliError(
+          "DXC_PROJECT_STAGE_INVALID",
+          "\u56FE\u7247\u751F\u6210\u8BA1\u5212\u3001\u7B49\u5F85\u6388\u6743\u68C0\u67E5\u70B9\u548C\u672C\u6B21\u6267\u884C\u58F0\u660E\u7684\u6570\u636E\u53BB\u5411\u6216\u6267\u884C\u4F4D\u7F6E\u4E0D\u4E00\u81F4\u3002",
+          {
+            fields: ["generation.dataTransit", "generation.executionLocation", "execution"],
+            reason: "EXTERNAL_AUTHORIZATION_EXECUTION_MISMATCH",
+            recovery: "\u4FDD\u6301\u8BF7\u6C42\u6388\u6743\u4E0E\u786E\u8BA4\u547D\u4EE4\u7684 --data-transit\u3001--execution-location \u5B8C\u5168\u4E00\u81F4\uFF1B\u82E5\u6267\u884C\u73AF\u5883\u53D8\u5316\uFF0C\u91CD\u5199\u8BA1\u5212\u5E76\u91CD\u65B0\u53D6\u5F97\u6388\u6743\u3002",
+            stage: "visual-plan"
+          }
+        );
+      }
+      const useCheckpointV4 = authorizationPurpose !== void 0 || existing?.checkpointVersion === "4";
+      const existingAuthorizations = existing?.checkpointVersion === "4" ? existing.authorizations : [];
+      const authorizations = confirmingExternalAuthorization ? [
+        ...existingAuthorizations,
+        {
+          action: "image-generation",
+          confirmedAt: timestamp,
+          confirmedBy,
+          plan: authorizationPlan,
+          planSnapshotHash: confirmationSnapshotHash,
+          requestedAt
+        }
+      ] : existingAuthorizations;
+      const checkpointResult = stepCheckpointSchema.safeParse({
+        ...(effectiveStatus === "awaiting-user" || effectiveStatus === "completed") && artifactStatus.status === "ready" ? {
+          artifact: {
+            bytes: artifactStatus.bytes,
+            kind: stage.data,
+            path: artifactStatus.path,
+            sha256: artifactStatus.sha256
+          }
+        } : confirmingExternalAuthorization && artifactStatus.status === "ready" ? {
+          artifact: {
+            bytes: artifactStatus.bytes,
+            kind: stage.data,
+            path: artifactStatus.path,
+            sha256: artifactStatus.sha256
+          }
+        } : {},
+        ...useCheckpointV4 ? {
+          authorizations,
+          checkpointVersion: "4",
+          confirmationPurpose: confirmationRelevant ? requestingExternalAuthorization ? "external-action" : "stage-completion" : null
+        } : { checkpointVersion: "3" },
+        ...TERMINAL_CHECKPOINT_STATUSES.has(effectiveStatus) ? { completedAt: timestamp } : {},
+        confirmation: effectiveStatus === "awaiting-user" ? "pending" : effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed ? "confirmed" : "not-required",
+        confirmationBinding: confirmationRelevant && confirmationSnapshotHash !== void 0 ? {
+          confirmedAt: effectiveStatus === "completed" ? timestamp : null,
+          confirmedBy: effectiveStatus === "completed" ? confirmedBy : null,
+          requestedAt,
+          snapshotHash: confirmationSnapshotHash,
+          snapshotType: confirmationSnapshotType,
+          status: effectiveStatus === "completed" ? "confirmed" : "pending"
+        } : null,
+        ...effectiveStatus === "failed" ? { errorCode: options.errorCode } : {},
+        execution: {
+          dataTransit: dataTransit.data,
+          location: executionLocation.data
+        },
+        inputs,
+        metadata: {
+          summary
+        },
+        outputs: [output],
+        projectId: manifest.projectId,
+        revision: (existing?.revision ?? 0) + 1,
+        skill: {
+          name: effectiveSkill,
+          version: effectiveSkillVersion
+        },
+        stage: stage.data,
+        startedAt: status.data === "running" && existing !== void 0 && TERMINAL_CHECKPOINT_STATUSES.has(existing.status) ? timestamp : existing?.startedAt ?? timestamp,
+        status: effectiveStatus,
+        updatedAt: timestamp,
+        waitingFor: waitingFor ?? null,
+        workflowId: manifest.workflowId
+      });
+      if (!checkpointResult.success) {
+        throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", "Checkpoint options are invalid");
+      }
+      const checkpoint = checkpointResult.data;
+      const relativePath = checkpointRelativePath(manifest, stage.data);
       try {
-        artifactValidation = await validateStageArtifact({
-          checkpointStatus: effectiveStatus,
-          directory,
-          inputs,
-          manifest,
-          skill: effectiveSkill,
-          skillVersion: effectiveSkillVersion,
-          stage: stage.data
-        });
+        await artifactNormalization?.commit();
       } catch (error) {
         if (error instanceof StageArtifactValidationError) {
-          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message);
+          throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", error.message, {
+            fields: error.issues.slice(0, 20).map((issue) => issue.slice(0, 200)),
+            reason: error.issues.some((issue) => issue.startsWith("NORMALIZATION_CONFLICT:")) ? "NORMALIZATION_CONFLICT" : "STAGE_ARTIFACT_INVALID",
+            recovery: "\u91CD\u65B0\u8BFB\u53D6\u5F53\u524D\u9636\u6BB5\u4EA7\u7269\u53CA sidecar \u540E\u91CD\u8BD5\uFF1BCLI \u68C0\u6D4B\u5230\u5E76\u53D1\u6539\u52A8\u65F6\u4E0D\u4F1A\u8986\u76D6\u8F83\u65B0\u7684\u6587\u4EF6\u3002",
+            stage: stage.data
+          });
         }
         throw error;
       }
-    }
-    const output = artifactReference(artifactStatus);
-    const confirmationSnapshotHash = options.confirmationSnapshotHash?.trim() ?? artifactValidation?.confirmationSnapshotHash;
-    if (needsArtifact && (confirmationSnapshotHash === void 0 || !/^[a-f0-9]{64}$/u.test(confirmationSnapshotHash))) {
-      throw new ProjectCliError(
-        "DXC_PROJECT_STAGE_INVALID",
-        "Confirmation snapshot hash is invalid"
-      );
-    }
-    if (options.confirmationSnapshotHash !== void 0 && artifactValidation !== void 0 && options.confirmationSnapshotHash.trim() !== artifactValidation.confirmationSnapshotHash) {
-      throw new ProjectCliError(
-        "DXC_PROJECT_STAGE_INVALID",
-        "\u786E\u8BA4\u5FEB\u7167\u4E0E\u5F53\u524D\u9636\u6BB5\u7ECF\u8FC7\u6821\u9A8C\u7684\u5185\u5BB9\u6216\u6E32\u67D3\u5FEB\u7167\u4E0D\u4E00\u81F4\u3002"
-      );
-    }
-    const confirmationRelevant = effectiveStatus === "awaiting-user" || effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed;
-    const previousBinding = existing?.checkpointVersion === "3" ? existing.confirmationBinding : null;
-    const confirmationSnapshotType = artifactValidation?.snapshotType ?? "stage-artifact";
-    const legacyPendingSnapshotMatches = options.confirmed && previousBinding?.snapshotType === "stage-artifact" && artifactStatusBeforeNormalization.status === "ready" && previousBinding.snapshotHash === artifactStatusBeforeNormalization.sha256;
-    const previousSnapshotMatches = previousBinding?.snapshotHash === confirmationSnapshotHash || legacyPendingSnapshotMatches;
-    if (effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed && (existing?.status !== "awaiting-user" || existing.confirmation !== "pending" || previousBinding?.status !== "pending" || !previousSnapshotMatches || previousBinding.snapshotType !== confirmationSnapshotType)) {
-      throw new ProjectCliError(
-        "DXC_PROJECT_STAGE_INVALID",
-        "\u5F53\u524D\u5185\u5BB9\u6216\u6E32\u67D3\u5FEB\u7167\u4E0D\u662F\u521A\u624D\u7B49\u5F85\u786E\u8BA4\u7684\u7248\u672C\uFF1B\u8BF7\u5148\u91CD\u65B0\u5C55\u793A\u5E76\u5199\u5165 awaiting-user \u68C0\u67E5\u70B9\uFF0C\u518D\u6839\u636E\u7528\u6237\u660E\u786E\u56DE\u7B54\u786E\u8BA4\u3002"
-      );
-    }
-    const requestedAt = previousBinding !== null && previousSnapshotMatches && previousBinding.snapshotType === confirmationSnapshotType ? previousBinding.requestedAt : timestamp;
-    const confirmedBy = options.confirmedBy?.trim() || "local-interactive-user";
-    const checkpointResult = stepCheckpointSchema.safeParse({
-      ...needsArtifact && artifactStatus.status === "ready" ? {
-        artifact: {
-          bytes: artifactStatus.bytes,
-          kind: stage.data,
-          path: artifactStatus.path,
-          sha256: artifactStatus.sha256
-        }
-      } : {},
-      checkpointVersion: "3",
-      ...TERMINAL_CHECKPOINT_STATUSES.has(effectiveStatus) ? { completedAt: timestamp } : {},
-      confirmation: effectiveStatus === "awaiting-user" ? "pending" : effectiveStatus === "completed" && requiresUserConfirmation && options.confirmed ? "confirmed" : "not-required",
-      confirmationBinding: confirmationRelevant && confirmationSnapshotHash !== void 0 ? {
-        confirmedAt: effectiveStatus === "completed" ? timestamp : null,
-        confirmedBy: effectiveStatus === "completed" ? confirmedBy : null,
-        requestedAt,
-        snapshotHash: confirmationSnapshotHash,
-        snapshotType: confirmationSnapshotType,
-        status: effectiveStatus === "completed" ? "confirmed" : "pending"
-      } : null,
-      ...effectiveStatus === "failed" ? { errorCode: options.errorCode } : {},
-      execution: {
-        dataTransit: dataTransit.data,
-        location: executionLocation.data
-      },
-      inputs,
-      metadata: {
-        summary
-      },
-      outputs: [output],
-      projectId: manifest.projectId,
-      revision: (existing?.revision ?? 0) + 1,
-      skill: {
-        name: effectiveSkill,
-        version: effectiveSkillVersion
-      },
-      stage: stage.data,
-      startedAt: status.data === "running" && existing !== void 0 && TERMINAL_CHECKPOINT_STATUSES.has(existing.status) ? timestamp : existing?.startedAt ?? timestamp,
-      status: effectiveStatus,
-      updatedAt: timestamp,
-      waitingFor: waitingFor ?? null,
-      workflowId: manifest.workflowId
-    });
-    if (!checkpointResult.success) {
-      throw new ProjectCliError("DXC_PROJECT_STAGE_INVALID", "Checkpoint options are invalid");
-    }
-    const checkpoint = checkpointResult.data;
-    const relativePath = checkpointRelativePath(manifest, stage.data);
-    if (adoptsExistingArticle) {
-      await this.#skipArticleAdoptionPrerequisites(directory, manifest, timestamp, {
-        dataTransit: dataTransit.data,
-        location: executionLocation.data
+      let adoptionTargets = [];
+      try {
+        if (adoptsExistingArticle) {
+          adoptionTargets = await this.#skipArticleAdoptionPrerequisites(
+            directory,
+            manifest,
+            timestamp,
+            {
+              dataTransit: dataTransit.data,
+              location: executionLocation.data
+            }
+          );
+        }
+        await writeJsonAtomically(insideProject2(directory, relativePath), checkpoint);
+      } catch (error) {
+        await Promise.all(adoptionTargets.map((target) => unlink2(target).catch(() => void 0)));
+        await artifactNormalization?.rollbackCommitted();
+        throw error;
+      }
+      await this.#rememberProject(directory, manifest, timestamp).catch(() => void 0);
+      return contentProjectCheckpointResultSchema.parse({
+        command: "project.checkpoint",
+        data: {
+          artifactMutations: artifactNormalization?.mutations ?? [],
+          checkpoint,
+          checkpointPath: relativePath,
+          guidance: effectiveStatus === "awaiting-user" ? {
+            action: requestingExternalAuthorization ? "authorize-external-action" : "confirm-stage",
+            message: waitingFor ?? "\u8BF7\u786E\u8BA4\u5F53\u524D\u9636\u6BB5\u5FEB\u7167\u3002",
+            suggestedFlag: "--confirm"
+          } : null
+        },
+        ok: true
       });
     }
-    await this.#rememberProject(directory, manifest, timestamp);
-    await writeJsonAtomically(insideProject2(directory, relativePath), checkpoint);
-    return contentProjectCheckpointResultSchema.parse({
-      command: "project.checkpoint",
-      data: {
-        checkpoint,
-        checkpointPath: relativePath,
-        guidance: confirmationRequired ? {
-          action: "confirm-stage",
-          message: waitingFor ?? "\u8BF7\u786E\u8BA4\u5F53\u524D\u9636\u6BB5\u5FEB\u7167\u3002",
-          suggestedFlag: "--confirm"
-        } : null
-      },
-      ok: true
-    });
   }
 };
 
 // apps/cli/src/skills.ts
-import { cp, lstat as lstat3, mkdir as mkdir2, mkdtemp, readdir, rename as rename4, rm } from "node:fs/promises";
+import { cp, lstat as lstat4, mkdir as mkdir2, mkdtemp, readdir, rename as rename4, rm } from "node:fs/promises";
 import os from "node:os";
 import path5 from "node:path";
 import { fileURLToPath } from "node:url";
@@ -30831,7 +31291,7 @@ var SkillInstallerError = class extends Error {
 };
 async function isDirectory(directory) {
   try {
-    return (await lstat3(directory)).isDirectory();
+    return (await lstat4(directory)).isDirectory();
   } catch {
     return false;
   }
@@ -30855,7 +31315,7 @@ async function findBundledSkills() {
 async function assertRegularSkillTree(directory) {
   for (const entry of await readdir(directory, { withFileTypes: true })) {
     const entryPath = path5.join(directory, entry.name);
-    const entryStat = await lstat3(entryPath);
+    const entryStat = await lstat4(entryPath);
     if (entryStat.isSymbolicLink()) {
       throw new SkillInstallerError(
         "DXC_SKILL_SOURCE_UNSAFE",
@@ -30954,16 +31414,16 @@ var SkillInstaller = class {
 // apps/cli/src/wechat.ts
 import { spawn } from "node:child_process";
 import {
-  createHash as createHash7,
+  createHash as createHash8,
   createPrivateKey as createPrivateKey2,
   createPublicKey as createPublicKey2,
   randomBytes,
-  randomUUID as randomUUID4
+  randomUUID as randomUUID5
 } from "node:crypto";
-import { constants as fileConstants3 } from "node:fs";
-import { chmod, mkdir as mkdir3, open as open3, rename as rename5, rm as rm2, writeFile as writeFile3 } from "node:fs/promises";
+import { constants as fileConstants4 } from "node:fs";
+import { chmod, lstat as lstat7, mkdir as mkdir4, open as open4, rename as rename6, rm as rm2, writeFile as writeFile4 } from "node:fs/promises";
 import os2 from "node:os";
-import path7 from "node:path";
+import path8 from "node:path";
 
 // packages/security/src/index.ts
 var import_pino = __toESM(require_pino(), 1);
@@ -31111,20 +31571,25 @@ var LOG_REDACTION_PATHS = Object.freeze([
 // apps/cli/src/publishing-assets.ts
 import { createHash as createHash6 } from "node:crypto";
 import { constants as fileConstants2 } from "node:fs";
-import { lstat as lstat4, open as open2, readdir as readdir2, realpath } from "node:fs/promises";
+import { lstat as lstat5, open as open2, readdir as readdir2, realpath } from "node:fs/promises";
 import path6 from "node:path";
 var import_yaml3 = __toESM(require_dist(), 1);
+import sharp from "sharp";
 
 // apps/cli/src/wechat-error.ts
 var WechatCliError = class extends Error {
-  constructor(code, guidance) {
+  constructor(code, guidance, retryable = false, fields) {
     super(guidance ?? code);
     this.code = code;
     this.guidance = guidance;
+    this.retryable = retryable;
+    this.fields = fields;
     this.name = "WechatCliError";
   }
   code;
   guidance;
+  retryable;
+  fields;
 };
 
 // apps/cli/src/publishing-assets.ts
@@ -31137,22 +31602,61 @@ var VISUAL_PLAN_MAXIMUM_BYTES = 128 * 1024;
 var ARTICLE_FRONTMATTER = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/u;
 var VISUAL_PLAN_FRONTMATTER = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)/u;
 var LOCAL_WORKFLOW_FRONTMATTER_KEYS = ["dxc", "goldenLinesPath", "goldenLinesSha256"];
-async function readPublishingInput(inputPath, maximumBytes) {
+async function validatePublishingImage(bytes, target) {
+  let metadata;
+  try {
+    metadata = await sharp(bytes, { failOn: "error", limitInputPixels: 8e7 }).metadata();
+  } catch {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_INPUT_INVALID",
+      `\u56FE\u7247 ${path6.basename(target)} \u65E0\u6CD5\u88AB\u5B89\u5168\u89E3\u7801\uFF1B\u4EC5\u652F\u6301\u6709\u6548 PNG/JPEG\u3002`
+    );
+  }
+  const extension = path6.extname(target).toLowerCase();
+  const expectedFormat = extension === ".png" ? "png" : extension === ".jpg" || extension === ".jpeg" ? "jpeg" : void 0;
+  if (expectedFormat === void 0 || metadata.format !== expectedFormat || metadata.width === void 0 || metadata.height === void 0) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_INPUT_INVALID",
+      `\u56FE\u7247 ${path6.basename(target)} \u7684\u6269\u5C55\u540D\u4E0E\u771F\u5B9E PNG/JPEG \u683C\u5F0F\u4E0D\u4E00\u81F4\u3002`
+    );
+  }
+}
+async function readPublishingInput(inputPath, maximumBytes, role = "article") {
   const target = path6.resolve(inputPath);
   let handle;
   try {
     handle = await open2(target, fileConstants2.O_RDONLY | fileConstants2.O_NOFOLLOW);
     const metadata = await handle.stat();
-    if (!metadata.isFile() || metadata.size <= 0 || metadata.size > maximumBytes) {
+    if (metadata.isFile() && metadata.size > maximumBytes) {
+      const fileName = path6.basename(target);
+      if (role === "inline-image") {
+        throw new WechatCliError(
+          "DXC_PUBLISHING_INLINE_IMAGE_TOO_LARGE",
+          `\u6B63\u6587\u56FE\u7247 ${fileName} \u4E3A ${metadata.size} bytes\uFF1B\u5FC5\u987B\u5C0F\u4E8E 1048576 bytes\u3002\u8BF7\u5BFC\u51FA\u4E3A JPEG\u3001\u964D\u4F4E\u5C3A\u5BF8\u6216\u8D28\u91CF\uFF0C\u66F4\u65B0 visual-plan \u540E\u91CD\u65B0 checkpoint \u548C\u9884\u89C8\u3002`
+        );
+      }
+      if (role === "cover") {
+        throw new WechatCliError(
+          "DXC_PUBLISHING_COVER_TOO_LARGE",
+          `\u5C01\u9762 ${fileName} \u4E3A ${metadata.size} bytes\uFF1B\u4E0A\u9650\u4E3A ${maximumBytes} bytes\u3002\u8BF7\u964D\u4F4E\u5C3A\u5BF8\u6216\u8D28\u91CF\u540E\u91CD\u65B0 checkpoint \u548C\u9884\u89C8\u3002`
+        );
+      }
       throw new WechatCliError(
         "DXC_PUBLISHING_INPUT_INVALID",
-        `\u6587\u4EF6 ${path6.basename(target)} \u4E0D\u662F\u53EF\u8BFB\u53D6\u7684\u666E\u901A\u6587\u4EF6\uFF0C\u6216\u5927\u5C0F\u8D85\u51FA\u9650\u5236\u3002`
+        `\u6587\u4EF6 ${fileName} \u4E3A ${metadata.size} bytes\uFF0C\u8D85\u8FC7 ${maximumBytes} bytes \u7684\u9650\u5236\u3002`
       );
     }
-    return {
-      bytes: await handle.readFile(),
-      path: target
-    };
+    if (!metadata.isFile() || metadata.size <= 0) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_INPUT_INVALID",
+        `\u6587\u4EF6 ${path6.basename(target)} \u4E0D\u662F\u53EF\u8BFB\u53D6\u7684\u975E\u7A7A\u666E\u901A\u6587\u4EF6\u3002`
+      );
+    }
+    const bytes = await handle.readFile();
+    if (role === "cover" || role === "inline-image") {
+      await validatePublishingImage(bytes, target);
+    }
+    return { bytes, path: target };
   } catch (error) {
     if (error instanceof WechatCliError) {
       throw error;
@@ -31165,7 +31669,7 @@ async function readPublishingInput(inputPath, maximumBytes) {
     await handle?.close();
   }
 }
-async function readContainedPublishingInput(inputPath, maximumBytes, allowedDirectories) {
+async function readContainedPublishingInput(inputPath, maximumBytes, allowedDirectories, role) {
   try {
     const [target, ...directories] = await Promise.all([
       realpath(path6.resolve(inputPath)),
@@ -31189,7 +31693,7 @@ async function readContainedPublishingInput(inputPath, maximumBytes, allowedDire
       `\u65E0\u6CD5\u5B89\u5168\u89E3\u6790\u7D20\u6750 ${path6.basename(inputPath)}\u3002`
     );
   }
-  return readPublishingInput(inputPath, maximumBytes);
+  return readPublishingInput(inputPath, maximumBytes, role);
 }
 function publishingImageMediaType(inputPath) {
   const extension = path6.extname(inputPath).toLowerCase();
@@ -31226,7 +31730,7 @@ async function collectedImages(directoryInput, articleDirectory) {
   const directory = path6.resolve(directoryInput);
   let entries;
   try {
-    const metadata = await lstat4(directory);
+    const metadata = await lstat5(directory);
     if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
       throw new WechatCliError(
         "DXC_PUBLISHING_ASSETS_DIRECTORY_INVALID",
@@ -31260,6 +31764,13 @@ async function collectedImages(directoryInput, articleDirectory) {
   ).map((entry) => path6.join(directory, entry.name)).sort((left, right) => left.localeCompare(right, "zh-CN"));
 }
 function injectCollectedImages(source, images) {
+  const diagnosticText = (value, maximum = 120) => {
+    const sanitized = [...value].map((character) => {
+      const codePoint = character.codePointAt(0) ?? 0;
+      return codePoint < 32 || codePoint >= 127 && codePoint <= 159 ? " " : character;
+    }).join("").trim();
+    return sanitized.length <= maximum ? sanitized : `${sanitized.slice(0, maximum)}\u2026`;
+  };
   if (images.length === 0) {
     return source;
   }
@@ -31283,11 +31794,14 @@ function injectCollectedImages(source, images) {
     let headingLine = headingLines[index];
     if (image.placementAnchor !== void 0) {
       const match = /^after-heading:(.+)$/u.exec(image.placementAnchor);
-      const matches = match === null ? void 0 : headingLineByText.get(match[1]?.trim() ?? "");
+      const requestedHeading = match?.[1]?.trim().replace(/^##\s+/u, "").replace(/\s+#+\s*$/u, "").trim();
+      const matches = requestedHeading === void 0 ? void 0 : headingLineByText.get(requestedHeading);
       if (matches === void 0 || matches.length !== 1) {
+        const matchCount = matches?.length ?? 0;
+        const availableHeadings = [...headingLineByText.keys()].slice(0, 10).map((heading) => diagnosticText(heading)).join("\u3001").slice(0, 600);
         throw new WechatCliError(
           "DXC_PUBLISHING_VISUAL_ANCHOR_INVALID",
-          "\u89C6\u89C9\u8BA1\u5212\u7684\u63D2\u56FE\u951A\u70B9\u5FC5\u987B\u552F\u4E00\u5339\u914D\u6B63\u6587\u4E2D\u7684\u4E00\u4E2A\u4E8C\u7EA7\u6807\u9898\u3002"
+          `\u89C6\u89C9\u8BA1\u5212\u951A\u70B9 ${diagnosticText(image.placementAnchor, 180)} \u7684\u7CBE\u786E\u5339\u914D\u6570\u4E3A ${matchCount}\uFF1B\u5FC5\u987B\u552F\u4E00\u5339\u914D\u6B63\u6587\u4E2D\u7684\u4E00\u4E2A\u4E8C\u7EA7\u6807\u9898\u3002\u53EF\u7528\u6807\u9898\uFF1A${availableHeadings.length === 0 ? "\uFF08\u65E0\uFF09" : availableHeadings}\u3002\u8BF7\u590D\u5236\u6807\u9898\u539F\u6587\uFF08\u542B\u6807\u70B9\uFF09\u66F4\u65B0 placementAnchor\u3002`
         );
       }
       headingLine = matches[0];
@@ -31307,12 +31821,10 @@ function injectCollectedImages(source, images) {
   }
   return output.join("\n");
 }
-async function plannedInlineImages(visualPlanFile, availableByFileName) {
+async function plannedVisualAssets(visualPlanFile, assetsDirectoryInput) {
   let source;
   try {
-    source = (await readPublishingInput(visualPlanFile, VISUAL_PLAN_MAXIMUM_BYTES)).bytes.toString(
-      "utf8"
-    );
+    source = (await readPublishingInput(visualPlanFile, VISUAL_PLAN_MAXIMUM_BYTES, "visual-plan")).bytes.toString("utf8");
   } catch {
     throw new WechatCliError("DXC_PUBLISHING_VISUAL_PLAN_INVALID");
   }
@@ -31330,37 +31842,89 @@ async function plannedInlineImages(visualPlanFile, availableByFileName) {
   if (!parsed.success) {
     throw new WechatCliError("DXC_PUBLISHING_VISUAL_PLAN_INVALID");
   }
-  return Promise.all(
-    parsed.data.inlineAssets.map(async (asset) => {
-      const absolutePath = availableByFileName.get(path6.posix.basename(asset.path));
-      if (absolutePath === void 0) {
-        throw new WechatCliError(
-          "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
-          `\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u7D20\u6750 ${path6.posix.basename(asset.path)} \u4E0D\u5728\u6307\u5B9A\u7D20\u6750\u76EE\u5F55\u4E2D\u3002`
-        );
-      }
-      const input = await readPublishingInput(absolutePath, MAXIMUM_INLINE_IMAGE_BYTES2);
-      if (createHash6("sha256").update(input.bytes).digest("hex") !== asset.sha256) {
-        throw new WechatCliError(
-          "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
-          `\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u7D20\u6750 ${path6.posix.basename(asset.path)} \u4E0E\u8BB0\u5F55\u7684\u54C8\u5E0C\u4E0D\u4E00\u81F4\u3002`
-        );
-      }
-      const digest = createHash6("sha256").update(absolutePath).digest("hex").slice(0, 12);
-      const fileName = safeFileName(path6.basename(absolutePath)) || `visual-${digest}.png`;
-      return {
-        absolutePath,
-        alt: asset.purpose,
-        logicalPath: `assets/dxc-visuals/${digest}-${fileName}`,
-        placementAnchor: asset.placementAnchor
-      };
-    })
+  if (!("inlineAssets" in parsed.data)) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+      "\u89C6\u89C9\u8BA1\u5212\u4ECD\u5904\u4E8E\u751F\u6210\u524D\u6388\u6743\u9636\u6BB5\uFF1B\u8BF7\u5148\u5B8C\u6210\u56FE\u7247\u751F\u6210\u5E76\u5199\u5165 coverAsset/inlineAssets \u540E\u518D\u9884\u89C8\u3002"
+    );
+  }
+  if (assetsDirectoryInput === void 0) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+      "\u4F7F\u7528\u89C6\u89C9\u8BA1\u5212\u65F6\u5FC5\u987B\u663E\u5F0F\u63D0\u4F9B\u5176\u58F0\u660E\u7684\u7D20\u6750\u76EE\u5F55\u3002"
+    );
+  }
+  const assetsDirectory = path6.resolve(assetsDirectoryInput);
+  const projectDirectory2 = commonDirectory(
+    path6.dirname(path6.resolve(visualPlanFile)),
+    assetsDirectory
+  );
+  const declaredAssetsDirectory = path6.resolve(projectDirectory2, parsed.data.assetsDirectory);
+  if (!isWithinDirectory(assetsDirectory, declaredAssetsDirectory)) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+      "\u663E\u5F0F\u7D20\u6750\u76EE\u5F55\u4E0D\u5728\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u9879\u76EE\u7D20\u6750\u76EE\u5F55\u4E2D\u3002"
+    );
+  }
+  const resolvePlannedAsset = (assetPath) => {
+    const target = path6.resolve(projectDirectory2, assetPath);
+    if (!isWithinDirectory(target, declaredAssetsDirectory) || !isWithinDirectory(target, assetsDirectory)) {
+      throw new WechatCliError("DXC_PUBLISHING_VISUAL_PLAN_INVALID");
+    }
+    return target;
+  };
+  const coverAbsolutePath = resolvePlannedAsset(parsed.data.coverAsset);
+  const cover = await readContainedPublishingInput(
+    coverAbsolutePath,
+    MAXIMUM_IMAGE_BYTES,
+    [assetsDirectory],
+    "cover"
   );
+  if (createHash6("sha256").update(cover.bytes).digest("hex") !== parsed.data.coverSha256) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+      `\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u5C01\u9762 ${path6.posix.basename(parsed.data.coverAsset)} \u4E0E\u8BB0\u5F55\u7684\u54C8\u5E0C\u4E0D\u4E00\u81F4\u3002`
+    );
+  }
+  return {
+    coverAbsolutePath,
+    inline: await Promise.all(
+      parsed.data.inlineAssets.map(async (asset) => {
+        const absolutePath = resolvePlannedAsset(asset.path);
+        if (!isWithinDirectory(absolutePath, assetsDirectory)) {
+          throw new WechatCliError(
+            "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+            `\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u7D20\u6750 ${path6.posix.basename(asset.path)} \u4E0D\u5728\u6307\u5B9A\u7D20\u6750\u76EE\u5F55\u4E2D\u3002`
+          );
+        }
+        const input = await readContainedPublishingInput(
+          absolutePath,
+          MAXIMUM_INLINE_IMAGE_BYTES2,
+          [assetsDirectory],
+          "inline-image"
+        );
+        if (createHash6("sha256").update(input.bytes).digest("hex") !== asset.sha256) {
+          throw new WechatCliError(
+            "DXC_PUBLISHING_VISUAL_PLAN_INVALID",
+            `\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u7D20\u6750 ${path6.posix.basename(asset.path)} \u4E0E\u8BB0\u5F55\u7684\u54C8\u5E0C\u4E0D\u4E00\u81F4\u3002`
+          );
+        }
+        const digest = createHash6("sha256").update(absolutePath).digest("hex").slice(0, 12);
+        const fileName = safeFileName(path6.basename(absolutePath)) || `visual-${digest}.png`;
+        return {
+          absolutePath,
+          alt: asset.purpose,
+          logicalPath: `assets/dxc-visuals/${digest}-${fileName}`,
+          placementAnchor: asset.placementAnchor
+        };
+      })
+    )
+  };
 }
 function logicalInlinePaths(bundle) {
   return bundle.assets.filter((asset) => asset.role === "inline").map((asset) => asset.logicalPath);
 }
-function publishingArticleSource(source) {
+function publishingArticleSource(source, digestOverride) {
   const match = ARTICLE_FRONTMATTER.exec(source);
   const yamlSource = match?.[1];
   const body = match?.[2];
@@ -31374,6 +31938,10 @@ function publishingArticleSource(source) {
   for (const key of LOCAL_WORKFLOW_FRONTMATTER_KEYS) {
     document.delete(key);
   }
+  if (digestOverride !== void 0) {
+    document.set("digest", digestOverride.trim());
+    document.delete("wechat_digest");
+  }
   return `---
 ${document.toString().trimEnd()}
 ---
@@ -31408,14 +31976,15 @@ async function preparePublishingDraft(input) {
     (candidate) => /^cover(?:[._-]|$)/iu.test(path6.basename(candidate))
   );
   const explicitCover = input.coverFile !== void 0 && input.coverFile !== "auto" ? input.coverFile : void 0;
-  const coverCandidate = explicitCover ?? articleCoverCandidate ?? namedCoverCandidate;
-  const coverMode = explicitCover !== void 0 ? "explicit-file" : articleCoverCandidate !== void 0 ? "article-frontmatter" : namedCoverCandidate !== void 0 ? "assets-directory" : void 0;
-  const planned = input.visualPlanFile === void 0 ? [] : await plannedInlineImages(input.visualPlanFile, availableByFileName);
+  const planned = input.visualPlanFile === void 0 ? void 0 : await plannedVisualAssets(input.visualPlanFile, input.assetsDirectory);
+  const coverCandidate = explicitCover ?? planned?.coverAbsolutePath ?? articleCoverCandidate ?? namedCoverCandidate;
+  const coverMode = explicitCover !== void 0 ? "explicit-file" : planned?.coverAbsolutePath !== void 0 ? "visual-plan" : articleCoverCandidate !== void 0 ? "article-frontmatter" : namedCoverCandidate !== void 0 ? "assets-directory" : void 0;
+  const plannedInline = planned?.inline ?? [];
   const pickupCandidates = availableImages.filter(
     (candidate) => candidate !== namedCoverCandidate && candidate !== articleCoverCandidate && !referencedFiles.has(path6.resolve(candidate)) && input.visualPlanFile === void 0
   );
   const injected = [
-    ...planned,
+    ...plannedInline,
     ...pickupCandidates.slice(0, Math.max(0, MAXIMUM_INLINE_IMAGES - referenced.size)).map((candidate) => {
       const digest = createHash6("sha256").update(candidate).digest("hex").slice(0, 12);
       const fileName = safeFileName(path6.basename(candidate)) || `visual-${digest}.png`;
@@ -31431,7 +32000,7 @@ async function preparePublishingDraft(input) {
   let bundle;
   try {
     parseArticleDocument(materializedSource);
-    finalSource = publishingArticleSource(materializedSource);
+    finalSource = publishingArticleSource(materializedSource, input.digest);
     bundle = parseArticleDocument(finalSource);
   } catch (error) {
     if (error instanceof WechatCliError) {
@@ -31442,7 +32011,20 @@ async function preparePublishingDraft(input) {
   bundle = input.title === void 0 ? bundle : { ...bundle, title: input.title.trim() };
   const localRender = renderWechatArticle(bundle);
   if (!localRender.preflight.ok) {
-    throw new WechatCliError("DXC_PUBLISHING_PREFLIGHT_FAILED");
+    const digestTooLong = localRender.preflight.errors.some(
+      (error) => error.code === "DIGEST_TOO_LONG"
+    );
+    const guidance = digestTooLong ? `\u6458\u8981\u4E3A ${localRender.preflight.metrics.digestCharacters}/${LEGACY_DIGEST_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\uFF1B\u8BF7\u7F29\u77ED article frontmatter \u4E2D\u7684 digest \u540E\u91CD\u65B0\u9884\u89C8\u3002` : `\u672C\u5730\u9884\u68C0\u672A\u901A\u8FC7\uFF1A${localRender.preflight.errors.map((error) => `${error.code}\uFF08${error.message}\uFF09`).join("\uFF1B")}`;
+    throw new WechatCliError(
+      "DXC_PUBLISHING_PREFLIGHT_FAILED",
+      guidance,
+      false,
+      digestTooLong ? {
+        currentLength: localRender.preflight.metrics.digestCharacters,
+        max: LEGACY_DIGEST_CHARACTER_LIMIT,
+        metadataField: "digest"
+      } : void 0
+    );
   }
   if (localRender.preflight.metrics.imageCount > MAXIMUM_INLINE_IMAGES) {
     throw new WechatCliError("DXC_PUBLISHING_TOO_MANY_INLINE_IMAGES");
@@ -31456,7 +32038,8 @@ async function preparePublishingDraft(input) {
       const asset = await readContainedPublishingInput(
         target,
         MAXIMUM_INLINE_IMAGE_BYTES2,
-        automaticAssetDirectories
+        automaticAssetDirectories,
+        "inline-image"
       );
       return {
         ...asset,
@@ -31474,8 +32057,9 @@ async function preparePublishingDraft(input) {
   const cover = explicitCover === void 0 ? await readContainedPublishingInput(
     coverCandidate,
     MAXIMUM_IMAGE_BYTES,
-    automaticAssetDirectories
-  ) : await readPublishingInput(coverCandidate, MAXIMUM_IMAGE_BYTES);
+    automaticAssetDirectories,
+    "cover"
+  ) : await readPublishingInput(coverCandidate, MAXIMUM_IMAGE_BYTES, "cover");
   publishingImageMediaType(cover.path);
   return {
     article: {
@@ -31491,9 +32075,356 @@ async function preparePublishingDraft(input) {
   };
 }
 
+// apps/cli/src/publishing-image-optimization.ts
+var import_yaml4 = __toESM(require_dist(), 1);
+import { createHash as createHash7, randomUUID as randomUUID4 } from "node:crypto";
+import { constants as fileConstants3 } from "node:fs";
+import {
+  lstat as lstat6,
+  mkdir as mkdir3,
+  open as open3,
+  readFile as readFile4,
+  realpath as realpath2,
+  rename as rename5,
+  unlink as unlink3,
+  writeFile as writeFile3
+} from "node:fs/promises";
+import path7 from "node:path";
+import sharp2 from "sharp";
+var MAXIMUM_INPUT_BYTES = 32 * 1024 * 1024;
+var INLINE_IMAGE_LIMIT = 1024 * 1024 - 1;
+var INLINE_IMAGE_TARGET = 950 * 1024;
+var COVER_IMAGE_LIMIT = 5 * 1024 * 1024;
+var COVER_IMAGE_TARGET = 4500 * 1024;
+var VISUAL_PLAN_MAXIMUM_BYTES2 = 128 * 1024;
+var VISUAL_PLAN_FRONTMATTER2 = /^---\r?\n([\s\S]*?)\r?\n---(?:\r?\n|$)([\s\S]*)$/u;
+function sha2562(value) {
+  return createHash7("sha256").update(value).digest("hex");
+}
+function safeDerivativeBase(value) {
+  return value.normalize("NFKC").replaceAll(/[^A-Za-z0-9._-]+/gu, "-").replaceAll(/^-+|-+$/gu, "").slice(0, 80) || "image";
+}
+function recordValue2(value) {
+  return typeof value === "object" && value !== null && !Array.isArray(value) ? value : void 0;
+}
+function portablePath(value, label) {
+  if (typeof value !== "string" || value.trim().length === 0 || path7.isAbsolute(value) || value.includes("\\") || value.split("/").some((segment) => segment === "" || segment === "." || segment === "..")) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      `${label} \u5FC5\u987B\u662F\u9879\u76EE\u5185\u4F7F\u7528 / \u5206\u9694\u7684\u5B89\u5168\u76F8\u5BF9\u8DEF\u5F84\u3002`
+    );
+  }
+  return value;
+}
+function isWithin(target, directory) {
+  const relative = path7.relative(directory, target);
+  return relative === "" || !relative.startsWith(`..${path7.sep}`) && relative !== "..";
+}
+async function regularImage(target) {
+  let handle;
+  try {
+    handle = await open3(target, fileConstants3.O_RDONLY | fileConstants3.O_NOFOLLOW);
+    const metadata = await handle.stat();
+    if (!metadata.isFile() || metadata.size <= 0 || metadata.size > MAXIMUM_INPUT_BYTES) {
+      throw new Error("invalid image");
+    }
+    return await handle.readFile();
+  } catch {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      `\u65E0\u6CD5\u5B89\u5168\u8BFB\u53D6\u56FE\u7247 ${path7.basename(target)}\uFF1B\u6587\u4EF6\u5FC5\u987B\u662F\u5C0F\u4E8E ${MAXIMUM_INPUT_BYTES} bytes \u7684\u666E\u901A\u6587\u4EF6\u3002`
+    );
+  } finally {
+    await handle?.close();
+  }
+}
+async function requirePreservedAlpha(bytes) {
+  const metadata = await sharp2(bytes, {
+    failOn: "error",
+    limitInputPixels: 8e7
+  }).metadata();
+  if (metadata.format !== "png" || metadata.hasAlpha !== true) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_ALPHA_LOST",
+      "\u900F\u660E\u56FE\u7247\u4F18\u5316\u540E\u4E22\u5931\u900F\u660E\u901A\u9053\uFF1B\u5DF2\u963B\u65AD\u4E14\u4E0D\u4F1A\u8986\u76D6\u539F\u56FE\u3002"
+    );
+  }
+}
+async function decodedImageMetadata(source, sourcePath) {
+  let metadata;
+  try {
+    metadata = await sharp2(source, { failOn: "error", limitInputPixels: 8e7 }).metadata();
+  } catch {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u56FE\u7247\u65E0\u6CD5\u88AB\u5B89\u5168\u89E3\u7801\uFF1B\u4EC5\u652F\u6301\u6709\u6548 PNG/JPEG\u3002"
+    );
+  }
+  const extension = path7.extname(sourcePath).toLowerCase();
+  const expectedFormat = extension === ".png" ? "png" : extension === ".jpg" || extension === ".jpeg" ? "jpeg" : void 0;
+  if (expectedFormat === void 0 || metadata.format !== expectedFormat || metadata.width === void 0 || metadata.height === void 0) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u56FE\u7247\u6269\u5C55\u540D\u3001\u771F\u5B9E\u683C\u5F0F\u6216\u5C3A\u5BF8\u65E0\u6548\uFF1B\u4EC5\u652F\u6301\u6269\u5C55\u540D\u4E0E\u5185\u5BB9\u4E00\u81F4\u7684 PNG/JPEG\u3002"
+    );
+  }
+  return {
+    format: expectedFormat,
+    hasAlpha: metadata.hasAlpha === true,
+    height: metadata.height,
+    width: metadata.width
+  };
+}
+async function writeExclusiveOrVerify(target, bytes) {
+  await mkdir3(path7.dirname(target), { recursive: true, mode: 448 });
+  try {
+    await writeFile3(target, bytes, { flag: "wx", mode: 384 });
+    return true;
+  } catch (error) {
+    if (error.code !== "EEXIST") {
+      throw error;
+    }
+    const existing = await regularImage(target);
+    if (sha2562(existing) !== sha2562(bytes)) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_IMAGE_OPTIMIZATION_CONFLICT",
+        `\u4F18\u5316\u76EE\u6807 ${path7.basename(target)} \u5DF2\u5B58\u5728\u4F46\u5185\u5BB9\u4E0D\u540C\uFF1B\u672A\u8986\u76D6\u4EFB\u4F55\u6587\u4EF6\u3002`
+      );
+    }
+    return false;
+  }
+}
+async function safeRealPathWithin(target, directory, label) {
+  const resolved = await realpath2(target).catch(() => void 0);
+  if (resolved === void 0 || !isWithin(resolved, directory)) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      `${label} \u7684\u771F\u5B9E\u8DEF\u5F84\u4E0D\u5728\u5141\u8BB8\u7684\u9879\u76EE\u76EE\u5F55\u5185\u3002`
+    );
+  }
+  return resolved;
+}
+async function ensureSafeOptimizedDirectory(assetsDirectory, realAssetsDirectory) {
+  const optimizedDirectory = path7.join(assetsDirectory, "optimized");
+  await mkdir3(optimizedDirectory, { recursive: true, mode: 448 });
+  const metadata = await lstat6(optimizedDirectory).catch(() => void 0);
+  if (metadata === void 0 || !metadata.isDirectory() || metadata.isSymbolicLink()) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u4F18\u5316\u76EE\u5F55\u5FC5\u987B\u662F\u7D20\u6750\u76EE\u5F55\u5185\u7684\u666E\u901A\u76EE\u5F55\uFF0C\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\u3002"
+    );
+  }
+  await safeRealPathWithin(optimizedDirectory, realAssetsDirectory, "\u4F18\u5316\u76EE\u5F55");
+  return optimizedDirectory;
+}
+async function writePlanAtomically(target, expectedSource, source) {
+  const temporary = `${target}.${randomUUID4()}.tmp`;
+  try {
+    await writeFile3(temporary, source, { encoding: "utf8", flag: "wx", mode: 384 });
+    if (await readFile4(target, "utf8") !== expectedSource) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_IMAGE_OPTIMIZATION_CONFLICT",
+        "\u89C6\u89C9\u8BA1\u5212\u5728\u56FE\u7247\u4F18\u5316\u671F\u95F4\u5DF2\u88AB\u5176\u4ED6\u64CD\u4F5C\u4FEE\u6539\uFF1B\u672A\u8986\u76D6\u65B0\u5185\u5BB9\uFF0C\u8BF7\u91CD\u65B0\u8BFB\u53D6\u540E\u518D\u8BD5\u3002"
+      );
+    }
+    await rename5(temporary, target);
+  } finally {
+    await unlink3(temporary).catch(() => void 0);
+  }
+}
+function candidateWidths(width) {
+  return [.../* @__PURE__ */ new Set([width, 2400, 2e3, 1600, 1280, 1080, 900, 720])].filter((candidate) => candidate > 0 && candidate <= width).sort((left, right) => right - left);
+}
+async function optimizedImage(source, targetBytes, metadata) {
+  const hasAlpha = metadata.hasAlpha;
+  for (const width of candidateWidths(metadata.width)) {
+    if (hasAlpha) {
+      const lossless = await sharp2(source, { failOn: "error", limitInputPixels: 8e7 }).rotate().resize({ fit: "inside", width, withoutEnlargement: true }).png({ compressionLevel: 9, effort: 10 }).toBuffer();
+      if (lossless.byteLength <= targetBytes) {
+        await requirePreservedAlpha(lossless);
+        return { alphaPreserved: true, bytes: lossless, extension: ".png" };
+      }
+      for (const colours of [256, 192, 128, 96, 64]) {
+        const quantized = await sharp2(source, {
+          failOn: "error",
+          limitInputPixels: 8e7
+        }).rotate().resize({ fit: "inside", width, withoutEnlargement: true }).png({ colours, compressionLevel: 9, effort: 10, palette: true }).toBuffer();
+        if (quantized.byteLength <= targetBytes) {
+          await requirePreservedAlpha(quantized);
+          return { alphaPreserved: true, bytes: quantized, extension: ".png" };
+        }
+      }
+      continue;
+    }
+    for (const quality of [88, 82, 76, 70, 64, 58]) {
+      const jpeg = await sharp2(source, { failOn: "error", limitInputPixels: 8e7 }).rotate().resize({ fit: "inside", width, withoutEnlargement: true }).jpeg({ chromaSubsampling: "4:4:4", mozjpeg: true, progressive: true, quality }).toBuffer();
+      if (jpeg.byteLength <= targetBytes) {
+        return { alphaPreserved: true, bytes: jpeg, extension: ".jpg" };
+      }
+    }
+  }
+  throw new WechatCliError(
+    "DXC_PUBLISHING_IMAGE_OPTIMIZATION_LIMIT_UNREACHABLE",
+    `\u65E0\u6CD5\u5728\u4E0D\u4E22\u5931\u900F\u660E\u901A\u9053\u6216\u4F4E\u4E8E\u6700\u5C0F\u5C3A\u5BF8\u7B56\u7565\u7684\u524D\u63D0\u4E0B\u538B\u5230 ${targetBytes} bytes\uFF1B\u8BF7\u66F4\u6362\u6216\u88C1\u526A\u56FE\u7247\u3002`
+  );
+}
+async function optimizePublishingImages(input) {
+  const projectDirectory2 = path7.resolve(input.projectDirectory);
+  const visualPlanPath = path7.resolve(input.visualPlanFile);
+  if (!isWithin(visualPlanPath, projectDirectory2)) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u89C6\u89C9\u8BA1\u5212\u5FC5\u987B\u4F4D\u4E8E\u5F53\u524D\u5185\u5BB9\u9879\u76EE\u5185\u3002"
+    );
+  }
+  const projectMetadata = await lstat6(projectDirectory2).catch(() => void 0);
+  const visualPlanMetadata = await lstat6(visualPlanPath).catch(() => void 0);
+  if (projectMetadata === void 0 || !projectMetadata.isDirectory() || projectMetadata.isSymbolicLink() || visualPlanMetadata === void 0 || !visualPlanMetadata.isFile() || visualPlanMetadata.isSymbolicLink() || visualPlanMetadata.size > VISUAL_PLAN_MAXIMUM_BYTES2) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u5185\u5BB9\u9879\u76EE\u548C\u89C6\u89C9\u8BA1\u5212\u5FC5\u987B\u662F\u975E\u7B26\u53F7\u94FE\u63A5\u7684\u666E\u901A\u76EE\u5F55\u4E0E\u6587\u4EF6\u3002"
+    );
+  }
+  const realProjectDirectory = await realpath2(projectDirectory2);
+  await safeRealPathWithin(visualPlanPath, realProjectDirectory, "\u89C6\u89C9\u8BA1\u5212");
+  const source = await readFile4(visualPlanPath, "utf8").catch(() => "");
+  if (Buffer.byteLength(source, "utf8") > VISUAL_PLAN_MAXIMUM_BYTES2) {
+    throw new WechatCliError("DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID");
+  }
+  const match = VISUAL_PLAN_FRONTMATTER2.exec(source);
+  if (match?.[1] === void 0 || match[2] === void 0) {
+    throw new WechatCliError("DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID");
+  }
+  let frontmatter;
+  try {
+    frontmatter = recordValue2((0, import_yaml4.parse)(match[1], { maxAliasCount: 10, uniqueKeys: true }));
+  } catch {
+    throw new WechatCliError("DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID");
+  }
+  if (frontmatter === void 0 || Object.hasOwn(frontmatter, "planned")) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+      "\u89C6\u89C9\u8BA1\u5212\u5FC5\u987B\u5DF2\u7ECF\u5F15\u7528\u5B9E\u9645\u843D\u76D8\u56FE\u7247\uFF0C\u4E0D\u80FD\u4ECD\u5904\u4E8E\u751F\u6210\u6388\u6743\u9636\u6BB5\u3002"
+    );
+  }
+  const assetsRelative = portablePath(frontmatter["assetsDirectory"], "assetsDirectory");
+  const assetsDirectory = path7.resolve(projectDirectory2, assetsRelative);
+  if (!isWithin(assetsDirectory, projectDirectory2)) {
+    throw new WechatCliError("DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID");
+  }
+  const assetsMetadata = await lstat6(assetsDirectory).catch(() => void 0);
+  if (assetsMetadata === void 0 || !assetsMetadata.isDirectory() || assetsMetadata.isSymbolicLink()) {
+    throw new WechatCliError("DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID");
+  }
+  const realAssetsDirectory = await safeRealPathWithin(
+    assetsDirectory,
+    realProjectDirectory,
+    "\u7D20\u6750\u76EE\u5F55"
+  );
+  const inlineAssets = Array.isArray(frontmatter["inlineAssets"]) ? frontmatter["inlineAssets"] : [];
+  const entries = [
+    {
+      limit: COVER_IMAGE_LIMIT,
+      record: { path: frontmatter["coverAsset"] },
+      role: "cover",
+      target: COVER_IMAGE_TARGET
+    },
+    ...inlineAssets.map((asset) => ({
+      limit: INLINE_IMAGE_LIMIT,
+      record: recordValue2(asset),
+      role: "inline",
+      target: INLINE_IMAGE_TARGET
+    }))
+  ];
+  const createdFiles = [];
+  const mutations = [];
+  let unchangedCount = 0;
+  let optimizedDirectory;
+  try {
+    for (const entry of entries) {
+      const assetPath = portablePath(entry.record?.["path"], `${entry.role} \u56FE\u7247\u8DEF\u5F84`);
+      const absolutePath = path7.resolve(projectDirectory2, assetPath);
+      if (!isWithin(absolutePath, assetsDirectory)) {
+        throw new WechatCliError(
+          "DXC_PUBLISHING_IMAGE_OPTIMIZATION_INVALID",
+          `${assetPath} \u4E0D\u5728\u89C6\u89C9\u8BA1\u5212\u58F0\u660E\u7684\u7D20\u6750\u76EE\u5F55\u5185\u3002`
+        );
+      }
+      await safeRealPathWithin(absolutePath, realAssetsDirectory, `${assetPath} \u56FE\u7247`);
+      const bytes = await regularImage(absolutePath);
+      const metadata = await decodedImageMetadata(bytes, assetPath);
+      const beforeSha256 = sha2562(bytes);
+      let finalPath = assetPath;
+      let finalBytes = bytes;
+      let alphaPreserved = true;
+      if (bytes.byteLength > entry.limit) {
+        const optimized = await optimizedImage(bytes, entry.target, metadata);
+        optimizedDirectory ??= await ensureSafeOptimizedDirectory(
+          assetsDirectory,
+          realAssetsDirectory
+        );
+        const baseName = safeDerivativeBase(path7.basename(assetPath, path7.extname(assetPath)));
+        const optimizedSha256 = sha2562(optimized.bytes);
+        const optimizedName = `${baseName}-${entry.role}-${beforeSha256.slice(0, 12)}-${optimizedSha256.slice(0, 12)}${optimized.extension}`;
+        const optimizedAbsolute = path7.join(optimizedDirectory, optimizedName);
+        const created = await writeExclusiveOrVerify(optimizedAbsolute, optimized.bytes);
+        if (created) {
+          createdFiles.push(optimizedAbsolute);
+        }
+        finalPath = path7.relative(projectDirectory2, optimizedAbsolute).split(path7.sep).join("/");
+        finalBytes = optimized.bytes;
+        alphaPreserved = optimized.alphaPreserved;
+        mutations.push({
+          alphaPreserved,
+          afterBytes: finalBytes.byteLength,
+          afterSha256: sha2562(finalBytes),
+          beforeBytes: bytes.byteLength,
+          beforeSha256,
+          from: assetPath,
+          role: entry.role,
+          to: finalPath
+        });
+      } else {
+        unchangedCount += 1;
+      }
+      if (entry.role === "cover") {
+        frontmatter["coverAsset"] = finalPath;
+        frontmatter["coverSha256"] = sha2562(finalBytes);
+      } else if (entry.record !== void 0) {
+        entry.record["path"] = finalPath;
+        entry.record["sha256"] = sha2562(finalBytes);
+      }
+    }
+    frontmatter["inlineAssets"] = inlineAssets;
+    const normalizedSource = `---
+${(0, import_yaml4.stringify)(frontmatter, { lineWidth: 0 }).trimEnd()}
+---
+${match[2]}`;
+    await writePlanAtomically(visualPlanPath, source, normalizedSource);
+  } catch (error) {
+    await Promise.all(createdFiles.map((target) => unlink3(target).catch(() => void 0)));
+    if (error instanceof WechatCliError) {
+      throw error;
+    }
+    throw new WechatCliError(
+      "DXC_PUBLISHING_IMAGE_OPTIMIZATION_FAILED",
+      "\u56FE\u7247\u4F18\u5316\u672A\u5B8C\u6210\uFF1B\u539F\u56FE\u548C\u89C6\u89C9\u8BA1\u5212\u5747\u672A\u88AB\u8986\u76D6\u3002"
+    );
+  }
+  return {
+    command: "wechat.draft.optimize-images",
+    data: { mutations, unchangedCount, visualPlanPath },
+    ok: true
+  };
+}
+
 // apps/cli/src/wechat.ts
 var DEFAULT_API_BASE_URL = "https://content.deployxai.com";
 var DEFAULT_POLL_INTERVAL_MS = 2e3;
+var MAXIMUM_LOCAL_PREVIEW_BYTES = 40 * 1024 * 1024;
+var WECHAT_AUTHOR_CHARACTER_LIMIT = 16;
+var WECHAT_DIGEST_CHARACTER_LIMIT = 120;
+var WECHAT_TITLE_CHARACTER_LIMIT = 32;
 function userFacingDraftIntent(intent) {
   const { status, ...userFacing } = intent;
   void status;
@@ -31509,6 +32440,158 @@ function writeAgentBrowserEvent(output, event) {
 `
   );
 }
+function escapeLocalPreviewText(value) {
+  return value.replaceAll("&", "&amp;").replaceAll("<", "&lt;").replaceAll(">", "&gt;").replaceAll('"', "&quot;").replaceAll("'", "&#39;");
+}
+function localPreviewImageSource(asset) {
+  return `data:${publishingImageMediaType(asset.path)};base64,${asset.bytes.toString("base64")}`;
+}
+function localVisualPreviewHtml(prepared) {
+  const replacements = new Map(
+    prepared.inlineAssets.map((asset) => [asset.logicalPath, localPreviewImageSource(asset)])
+  );
+  const renderedArticle = rewriteWechatAssetSources(prepared.localRender.html, replacements);
+  for (const asset of prepared.inlineAssets) {
+    const originalSource = `src="${escapeLocalPreviewText(asset.logicalPath)}"`;
+    if (!prepared.localRender.html.includes(originalSource) || renderedArticle.includes(originalSource)) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_LOCAL_PREVIEW_ASSET_MISMATCH",
+        `\u672C\u5730\u9884\u89C8\u672A\u80FD\u5B8C\u6574\u5185\u8054\u6B63\u6587\u56FE\u7247 ${path8.basename(asset.path)}\uFF1B\u5DF2\u963B\u65AD\u8F93\u51FA\u3002`
+      );
+    }
+  }
+  const title = escapeLocalPreviewText(prepared.bundle.title);
+  const coverSource = localPreviewImageSource(prepared.cover);
+  const html = `<!doctype html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1">
+  <meta name="referrer" content="no-referrer">
+  <meta http-equiv="Content-Security-Policy" content="default-src 'none'; img-src data:; style-src 'unsafe-inline'; base-uri 'none'; form-action 'none'; object-src 'none'">
+  <title>${title} \xB7 \u672C\u5730\u5E26\u56FE\u9884\u89C8</title>
+  <style>
+    :root { color-scheme: light; background: #f5f5f4; font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", sans-serif; }
+    body { margin: 0; color: #292524; }
+    .dxc-shell { box-sizing: border-box; margin: 0 auto; max-width: 780px; min-height: 100vh; padding: 24px 16px 64px; }
+    .dxc-notice { background: #fff7ed; border: 1px solid #fed7aa; border-radius: 12px; color: #9a3412; font-size: 13px; line-height: 1.6; margin-bottom: 16px; padding: 12px 14px; }
+    .dxc-card { background: white; border: 1px solid #e7e5e4; border-radius: 16px; box-shadow: 0 12px 36px rgb(41 37 36 / 8%); overflow: hidden; }
+    .dxc-cover { background: #e7e5e4; display: block; max-height: 360px; object-fit: cover; width: 100%; }
+    .dxc-meta { border-bottom: 1px solid #f5f5f4; padding: 22px 24px 14px; }
+    .dxc-meta h1 { font-size: 24px; line-height: 1.35; margin: 0 0 6px; }
+    .dxc-meta p { color: #78716c; font-size: 13px; margin: 0; }
+    .dxc-article { overflow-wrap: anywhere; padding: 8px 24px 32px; }
+    .dxc-article img { height: auto; max-width: 100%; }
+    .dxc-article a { pointer-events: none; }
+    @media (max-width: 560px) { .dxc-shell { padding: 0 0 32px; } .dxc-card { border-radius: 0; border-width: 0; } .dxc-notice { border-radius: 0; margin: 0; } .dxc-meta, .dxc-article { padding-left: 18px; padding-right: 18px; } }
+  </style>
+</head>
+<body>
+  <main class="dxc-shell">
+    <aside class="dxc-notice">\u672C\u5730\u5185\u5BB9\u4E0E\u914D\u56FE\u9884\u89C8\u3002\u5B83\u7528\u4E8E\u786E\u8BA4\u56FE\u7247\u3001\u951A\u70B9\u548C\u9605\u8BFB\u6548\u679C\uFF0C\u4E0D\u4EE3\u8868\u6700\u7EC8\u5FAE\u4FE1\u6A21\u677F\uFF1B\u521B\u5EFA\u8349\u7A3F\u524D\u4ECD\u987B\u67E5\u770B\u5E76\u786E\u8BA4\u4E91\u7AEF\u4E0D\u53EF\u53D8\u9884\u89C8\u3002</aside>
+    <article class="dxc-card">
+      <img class="dxc-cover" src="${coverSource}" alt="${title}\u5C01\u9762">
+      <header class="dxc-meta"><h1>${title}</h1><p>${prepared.inlineAssets.length} \u5F20\u6B63\u6587\u914D\u56FE \xB7 \u672C\u5730\u6D3E\u751F\u9884\u89C8</p></header>
+      <div class="dxc-article">${renderedArticle}</div>
+    </article>
+  </main>
+</body>
+</html>`;
+  const bytes = Buffer.byteLength(html, "utf8");
+  if (bytes > MAXIMUM_LOCAL_PREVIEW_BYTES) {
+    throw new WechatCliError(
+      "DXC_PUBLISHING_LOCAL_PREVIEW_TOO_LARGE",
+      `\u672C\u5730\u5E26\u56FE\u9884\u89C8\u4E3A ${bytes} bytes\uFF0C\u8D85\u8FC7 ${MAXIMUM_LOCAL_PREVIEW_BYTES} bytes \u4E0A\u9650\u3002\u8BF7\u5148\u4F18\u5316\u56FE\u7247\u540E\u91CD\u8BD5\u3002`
+    );
+  }
+  return {
+    hash: createHash8("sha256").update(html, "utf8").digest("hex"),
+    html
+  };
+}
+function writeLocalPreviewBrowserEvent(output, event) {
+  output.writeStderr(
+    `DXC_BROWSER_EVENT ${JSON.stringify({
+      action: "open-file",
+      contentHash: event.contentHash,
+      kind: "content-local-preview",
+      path: event.path,
+      replaceExisting: true,
+      surface: "agent-side-panel"
+    })}
+`
+  );
+}
+function fileSystemErrorCode(error) {
+  return typeof error === "object" && error !== null && "code" in error ? String(error.code) : void 0;
+}
+function localPreviewOutputConflict() {
+  return new WechatCliError(
+    "DXC_PUBLISHING_LOCAL_PREVIEW_OUTPUT_CONFLICT",
+    "\u672C\u5730\u9884\u89C8\u8F93\u51FA\u53EA\u80FD\u4F4D\u4E8E\u5F53\u524D\u9879\u76EE\u7684 .dxc/previews \u76EE\u5F55\uFF0C\u4E14\u76EE\u5F55\u548C\u6587\u4EF6\u4E0D\u80FD\u662F\u7B26\u53F7\u94FE\u63A5\u3002"
+  );
+}
+async function ensureLocalPreviewDirectory(directory) {
+  let metadata;
+  try {
+    metadata = await lstat7(directory);
+  } catch (error) {
+    if (fileSystemErrorCode(error) !== "ENOENT") {
+      throw error;
+    }
+    try {
+      await mkdir4(directory, { mode: 448 });
+    } catch (mkdirError) {
+      if (fileSystemErrorCode(mkdirError) !== "EEXIST") {
+        throw mkdirError;
+      }
+    }
+    metadata = await lstat7(directory);
+  }
+  if (!metadata.isDirectory() || metadata.isSymbolicLink()) {
+    throw localPreviewOutputConflict();
+  }
+}
+async function safeLocalPreviewOutput(options) {
+  const projectDirectory2 = path8.resolve(options.projectDirectory);
+  const previewDirectory = path8.join(projectDirectory2, ".dxc", "previews");
+  const outputFile = path8.resolve(options.outputFile);
+  const relativeOutput = path8.relative(previewDirectory, outputFile);
+  if (relativeOutput.length === 0 || relativeOutput === ".." || relativeOutput.startsWith(`..${path8.sep}`) || path8.isAbsolute(relativeOutput)) {
+    throw localPreviewOutputConflict();
+  }
+  try {
+    const projectMetadata = await lstat7(projectDirectory2);
+    if (!projectMetadata.isDirectory() || projectMetadata.isSymbolicLink()) {
+      throw localPreviewOutputConflict();
+    }
+    let directory = projectDirectory2;
+    const relativeParent = path8.relative(projectDirectory2, path8.dirname(outputFile));
+    for (const segment of relativeParent.split(path8.sep).filter((value) => value.length > 0)) {
+      directory = path8.join(directory, segment);
+      await ensureLocalPreviewDirectory(directory);
+    }
+    try {
+      const outputMetadata = await lstat7(outputFile);
+      if (!outputMetadata.isFile() || outputMetadata.isSymbolicLink()) {
+        throw localPreviewOutputConflict();
+      }
+    } catch (error) {
+      if (fileSystemErrorCode(error) !== "ENOENT") {
+        throw error;
+      }
+    }
+  } catch (error) {
+    if (error instanceof WechatCliError) {
+      throw error;
+    }
+    throw new WechatCliError(
+      "DXC_PUBLISHING_LOCAL_PREVIEW_WRITE_FAILED",
+      "\u65E0\u6CD5\u5B89\u5168\u5199\u5165\u672C\u5730\u5E26\u56FE\u9884\u89C8\uFF0C\u8BF7\u786E\u8BA4\u5F53\u524D\u9879\u76EE\u548C .dxc/previews \u76EE\u5F55\u53EF\u5199\u3002"
+    );
+  }
+  return outputFile;
+}
 async function presentDraftPreview(output, openExternal, preview, browserMode) {
   if (browserMode === "agent") {
     writeAgentBrowserEvent(output, {
@@ -31590,13 +32673,13 @@ async function retryExpiredBrowserFlow(action, output) {
   }
 }
 function sessionPath(stateDirectory) {
-  return path7.join(stateDirectory, "wechat-session.json");
+  return path8.join(stateDirectory, "wechat-session.json");
 }
 function deviceIdentityPath(stateDirectory) {
-  return path7.join(stateDirectory, "device-identity.json");
+  return path8.join(stateDirectory, "device-identity.json");
 }
 function publishingMediaType(inputPath, kind) {
-  const extension = path7.extname(inputPath).toLowerCase();
+  const extension = path8.extname(inputPath).toLowerCase();
   if (kind === "article-source" && (extension === ".md" || extension === ".markdown")) {
     return "text/markdown";
   }
@@ -31608,7 +32691,7 @@ function publishingMediaType(inputPath, kind) {
 async function readProtectedStateFile(target, invalidCode) {
   let handle;
   try {
-    handle = await open3(target, fileConstants3.O_RDONLY | fileConstants3.O_NOFOLLOW);
+    handle = await open4(target, fileConstants4.O_RDONLY | fileConstants4.O_NOFOLLOW);
   } catch (error) {
     if (error instanceof WechatCliError) {
       throw error;
@@ -31630,17 +32713,17 @@ async function readProtectedStateFile(target, invalidCode) {
   }
 }
 async function saveSession(stateDirectory, session) {
-  await mkdir3(stateDirectory, { mode: 448, recursive: true });
+  await mkdir4(stateDirectory, { mode: 448, recursive: true });
   await chmod(stateDirectory, 448);
   const target = sessionPath(stateDirectory);
   const temporary = `${target}.${process.pid}.tmp`;
-  await writeFile3(temporary, `${JSON.stringify(session)}
+  await writeFile4(temporary, `${JSON.stringify(session)}
 `, {
     encoding: "utf8",
     mode: 384
   });
   await chmod(temporary, 384);
-  await rename5(temporary, target);
+  await rename6(temporary, target);
   await chmod(target, 384);
 }
 async function readSessionValue(stateDirectory) {
@@ -31758,22 +32841,22 @@ async function loadOrCreateDeviceIdentity(stateDirectory) {
   const keyPair = generateDeviceKeyPair();
   const identity = {
     deviceName: os2.hostname().trim().slice(0, 80) || "DxC \u8BBE\u5907",
-    installationId: randomUUID4(),
+    installationId: randomUUID5(),
     privateKeyPem: keyPair.privateKeyPem,
     publicKeyFingerprint: keyPair.publicKeyFingerprint,
     publicKeyPem: keyPair.publicKeyPem
   };
-  await mkdir3(stateDirectory, { mode: 448, recursive: true });
+  await mkdir4(stateDirectory, { mode: 448, recursive: true });
   await chmod(stateDirectory, 448);
   const target = deviceIdentityPath(stateDirectory);
   const temporary = `${target}.${process.pid}.tmp`;
-  await writeFile3(temporary, `${JSON.stringify(identity)}
+  await writeFile4(temporary, `${JSON.stringify(identity)}
 `, {
     encoding: "utf8",
     mode: 384
   });
   await chmod(temporary, 384);
-  await rename5(temporary, target);
+  await rename6(temporary, target);
   await chmod(target, 384);
   return { created: true, identity };
 }
@@ -31785,11 +32868,31 @@ async function responseJson(response) {
   }
 }
 async function checkedJson(response) {
-  const value = await responseJson(response);
+  let value;
+  try {
+    value = await responseJson(response);
+  } catch (error) {
+    if (!response.ok && error instanceof WechatCliError && error.code === "DXC_API_RESPONSE_INVALID") {
+      throw new WechatCliError(
+        "DXC_API_REQUEST_FAILED",
+        `DxC API \u8FD4\u56DE HTTP ${response.status}\uFF0C\u4E14\u54CD\u5E94\u4E0D\u662F\u53EF\u8BC6\u522B\u7684 JSON \u9519\u8BEF\u3002\u8BF7\u4FDD\u7559\u8BE5\u72B6\u6001\u7801\uFF0C\u5E76\u6838\u5BF9 CLI \u4E0E\u670D\u52A1\u7AEF\u662F\u5426\u5DF2\u90E8\u7F72\u540C\u4E00\u53D1\u5E03\u7248\u672C\uFF1B\u5728\u8349\u7A3F\u521B\u5EFA\u94FE\u8DEF\u4E2D\u4E0D\u8981\u6539\u7528\u65B0\u7684\u5E42\u7B49\u952E\u91CD\u8BD5\u3002`,
+        response.status === 429 || response.status >= 500,
+        { httpStatus: response.status }
+      );
+    }
+    throw error;
+  }
   if (!response.ok) {
     const apiError = apiErrorResponseSchema.safeParse(value);
+    if (apiError.success) {
+      const guidance = apiError.data.error.code === "PUBLISHING_PREVIEW_REQUIRED" ? "\u670D\u52A1\u7AEF\u5C1A\u672A\u8BB0\u5F55\u4F60\u5B9E\u9645\u67E5\u770B\u8FC7\u6700\u7EC8\u9884\u89C8\u3002\u8BF7\u5BF9\u540C\u4E00 root \u5FEB\u7167\u8FD0\u884C preview-refresh --browser system\uFF0C\u786E\u8BA4\u7CFB\u7EDF\u6D4F\u89C8\u5668\u5DF2\u6253\u5F00\u9875\u9762\u540E\u518D\u521B\u5EFA\u8349\u7A3F\u3002" : apiError.data.error.message;
+      throw new WechatCliError(apiError.data.error.code, guidance, apiError.data.error.retryable);
+    }
     throw new WechatCliError(
-      apiError.success ? apiError.data.error.code : "DXC_API_REQUEST_FAILED"
+      "DXC_API_REQUEST_FAILED",
+      `DxC API \u8FD4\u56DE HTTP ${response.status}\uFF0C\u4F46\u54CD\u5E94\u4E0D\u7B26\u5408\u7EA6\u5B9A\u9519\u8BEF\u683C\u5F0F\u3002\u8BF7\u4FDD\u7559\u8BE5\u72B6\u6001\u7801\uFF0C\u5E76\u6838\u5BF9 CLI \u4E0E\u670D\u52A1\u7AEF\u662F\u5426\u5DF2\u90E8\u7F72\u540C\u4E00\u53D1\u5E03\u7248\u672C\uFF1B\u5728\u8349\u7A3F\u521B\u5EFA\u94FE\u8DEF\u4E2D\u4E0D\u8981\u6539\u7528\u65B0\u7684\u5E42\u7B49\u952E\u91CD\u8BD5\u3002`,
+      response.status === 429 || response.status >= 500,
+      { httpStatus: response.status }
     );
   }
   return value;
@@ -31800,10 +32903,10 @@ function authorizationHeaders(clientToken) {
   };
 }
 function secretHash(value) {
-  return createHash7("sha256").update(value, "utf8").digest("hex");
+  return createHash8("sha256").update(value, "utf8").digest("hex");
 }
 function bytesHash(value) {
-  return createHash7("sha256").update(value).digest("hex");
+  return createHash8("sha256").update(value).digest("hex");
 }
 function assertCompleteInlineAssets(expected, actual) {
   const expectedRecords = expected.map((asset) => ({
@@ -31832,7 +32935,7 @@ var WechatCli = class {
     this.#openExternal = dependencies.openExternal ?? defaultOpenExternal;
     this.#pollIntervalMilliseconds = dependencies.pollIntervalMilliseconds ?? DEFAULT_POLL_INTERVAL_MS;
     this.#sleep = dependencies.sleep ?? defaultSleep;
-    this.#stateDirectory = dependencies.stateDirectory ?? process.env["DXC_CLI_STATE_DIR"] ?? path7.join(os2.homedir(), ".dxc");
+    this.#stateDirectory = dependencies.stateDirectory ?? process.env["DXC_CLI_STATE_DIR"] ?? path8.join(os2.homedir(), ".dxc");
   }
   async #authenticatedFetch(session, url, init = {}, timeoutMilliseconds = 8e3) {
     const request = async (current) => {
@@ -31915,7 +33018,7 @@ var WechatCli = class {
     const pending = session.pendingRefresh ?? {
       nextDeviceRefreshToken: randomBytes(32).toString("base64url"),
       nextDeviceToken: randomBytes(32).toString("base64url"),
-      rotationId: randomUUID4()
+      rotationId: randomUUID5()
     };
     const pendingSession = {
       apiBaseUrl: session.apiBaseUrl,
@@ -32049,8 +33152,7 @@ var WechatCli = class {
 `);
     return result;
   }
-  async previewDraft(options, output) {
-    let session = await loadSession(this.#stateDirectory);
+  async previewLocalDraft(options, output) {
     const prepared = await preparePublishingDraft({
       articleFile: options.articleFile,
       ...options.assetsDirectory === void 0 ? {} : { assetsDirectory: options.assetsDirectory },
@@ -32058,9 +33160,123 @@ var WechatCli = class {
       ...options.title === void 0 ? {} : { title: options.title },
       ...options.visualPlanFile === void 0 ? {} : { visualPlanFile: options.visualPlanFile }
     });
+    const preview = localVisualPreviewHtml(prepared);
+    const outputFile = await safeLocalPreviewOutput({
+      outputFile: options.outputFile,
+      projectDirectory: options.projectDirectory
+    });
+    const protectedInputs = /* @__PURE__ */ new Set([
+      path8.resolve(prepared.article.path),
+      path8.resolve(prepared.cover.path),
+      ...prepared.inlineAssets.map((asset) => path8.resolve(asset.path)),
+      ...options.visualPlanFile === void 0 ? [] : [path8.resolve(options.visualPlanFile)]
+    ]);
+    if (protectedInputs.has(outputFile)) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_LOCAL_PREVIEW_OUTPUT_CONFLICT",
+        "\u672C\u5730\u9884\u89C8\u8F93\u51FA\u4E0D\u80FD\u8986\u76D6\u6B63\u6587\u3001\u89C6\u89C9\u8BA1\u5212\u3001\u5C01\u9762\u6216\u6B63\u6587\u56FE\u7247\uFF1B\u8BF7\u4F7F\u7528\u9879\u76EE\u7684 .dxc/previews \u76EE\u5F55\u3002"
+      );
+    }
+    try {
+      await writePrivateBuffer(outputFile, Buffer.from(preview.html, "utf8"));
+    } catch {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_LOCAL_PREVIEW_WRITE_FAILED",
+        "\u65E0\u6CD5\u5B89\u5168\u5199\u5165\u672C\u5730\u5E26\u56FE\u9884\u89C8\uFF0C\u8BF7\u786E\u8BA4\u8F93\u51FA\u76EE\u5F55\u4F4D\u4E8E\u5F53\u524D\u5185\u5BB9\u9879\u76EE\u4E14\u53EF\u5199\u3002"
+      );
+    }
+    const result = {
+      command: "wechat.draft.preview-local",
+      data: {
+        contentHash: preview.hash,
+        inlineImageCount: prepared.inlineAssets.length,
+        path: outputFile,
+        presentation: {
+          action: "open-file",
+          replaceExisting: true,
+          surface: "agent-side-panel"
+        },
+        templateId: prepared.localRender.templateId
+      },
+      ok: true
+    };
+    output.writeStdout(`${JSON.stringify(result)}
+`);
+    writeLocalPreviewBrowserEvent(output, { contentHash: preview.hash, path: outputFile });
+    output.writeStderr(
+      "\u672C\u5730\u5E26\u56FE\u9884\u89C8\u5DF2\u66F4\u65B0\uFF1B\u8BF7\u5728 Agent \u53F3\u4FA7\u66FF\u6362\u5F53\u524D\u6587\u7AE0\u9884\u89C8\u3002\u6700\u7EC8\u5FAE\u4FE1\u6A21\u677F\u4ECD\u4EE5\u4E91\u7AEF\u4E0D\u53EF\u53D8\u9884\u89C8\u4E3A\u51C6\u3002\n"
+    );
+    return result;
+  }
+  async optimizeDraftImages(options, output) {
+    const result = await optimizePublishingImages(options);
+    output.writeStdout(`${JSON.stringify(result)}
+`);
+    output.writeStderr(
+      result.data.mutations.length === 0 ? `\u56FE\u7247\u5747\u5DF2\u7B26\u5408\u5FAE\u4FE1\u4EA4\u4ED8\u4F53\u79EF\u8981\u6C42\uFF1B\u5DF2\u590D\u7B97 ${result.data.unchangedCount} \u5F20\u56FE\u7247\u54C8\u5E0C\u3002
+` : `\u5DF2\u751F\u6210 ${result.data.mutations.length} \u5F20\u4F18\u5316\u6D3E\u751F\u56FE\u5E76\u66F4\u65B0\u89C6\u89C9\u8BA1\u5212\uFF1B\u539F\u56FE\u672A\u88AB\u8986\u76D6\uFF0C\u5FC5\u987B\u91CD\u65B0\u5199 visual-plan checkpoint \u548C\u5E26\u56FE\u9884\u89C8\u3002
+`
+    );
+    return result;
+  }
+  async previewDraft(options, output) {
+    let session = await loadSession(this.#stateDirectory);
+    if (options.title !== void 0 && options.title.trim().length === 0) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_TITLE_TOO_LONG",
+        `\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A\uFF1B\u8BF7\u901A\u8FC7 article frontmatter \u6216 --title \u63D0\u4F9B\u4E0D\u8D85\u8FC7 ${WECHAT_TITLE_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\u7684\u6807\u9898\u3002`,
+        false,
+        { currentLength: 0, empty: true, max: WECHAT_TITLE_CHARACTER_LIMIT }
+      );
+    }
+    let prepared;
+    try {
+      prepared = await preparePublishingDraft({
+        articleFile: options.articleFile,
+        ...options.assetsDirectory === void 0 ? {} : { assetsDirectory: options.assetsDirectory },
+        ...options.coverFile === void 0 ? {} : { coverFile: options.coverFile },
+        ...options.digest === void 0 ? {} : { digest: options.digest },
+        ...options.title === void 0 ? {} : { title: options.title },
+        ...options.visualPlanFile === void 0 ? {} : { visualPlanFile: options.visualPlanFile }
+      });
+    } catch (error) {
+      if (error instanceof WechatCliError && error.code === "DXC_PUBLISHING_PREFLIGHT_FAILED" && error.fields?.["metadataField"] === "digest") {
+        const currentLength = error.fields["currentLength"];
+        const max = error.fields["max"];
+        throw new WechatCliError("DXC_PUBLISHING_DIGEST_TOO_LONG", error.guidance, false, {
+          ...typeof currentLength === "number" ? { currentLength } : {},
+          ...typeof max === "number" ? { max } : {}
+        });
+      }
+      throw error;
+    }
     const finalBundle = prepared.bundle;
-    if (finalBundle.title.length === 0 || [...finalBundle.title].length > 32 || [...finalBundle.author].length > 16 || [...finalBundle.digest].length > 120) {
-      throw new WechatCliError("DXC_PUBLISHING_WECHAT_METADATA_INVALID");
+    const titleLength = [...finalBundle.title].length;
+    if (titleLength === 0 || titleLength > WECHAT_TITLE_CHARACTER_LIMIT) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_TITLE_TOO_LONG",
+        titleLength === 0 ? `\u6807\u9898\u4E0D\u80FD\u4E3A\u7A7A\uFF1B\u8BF7\u901A\u8FC7 article frontmatter \u6216 --title \u63D0\u4F9B\u4E0D\u8D85\u8FC7 ${WECHAT_TITLE_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\u7684\u6807\u9898\u3002` : `\u6807\u9898\u4E3A ${titleLength}/${WECHAT_TITLE_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\uFF1B\u8BF7\u7F29\u77ED article frontmatter \u4E2D\u7684 title\uFF0C\u6216\u4F7F\u7528 --title \u8986\u76D6\u540E\u91CD\u65B0\u9884\u89C8\u3002`,
+        false,
+        { currentLength: titleLength, empty: titleLength === 0, max: WECHAT_TITLE_CHARACTER_LIMIT }
+      );
+    }
+    const authorLength = [...finalBundle.author].length;
+    if (authorLength > WECHAT_AUTHOR_CHARACTER_LIMIT) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_AUTHOR_TOO_LONG",
+        `\u4F5C\u8005\u4E3A ${authorLength}/${WECHAT_AUTHOR_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\uFF1B\u8BF7\u7F29\u77ED article frontmatter \u4E2D\u7684 author \u540E\u91CD\u65B0\u9884\u89C8\u3002`,
+        false,
+        { currentLength: authorLength, max: WECHAT_AUTHOR_CHARACTER_LIMIT }
+      );
+    }
+    const digestLength = [...finalBundle.digest].length;
+    if (digestLength > WECHAT_DIGEST_CHARACTER_LIMIT) {
+      throw new WechatCliError(
+        "DXC_PUBLISHING_DIGEST_TOO_LONG",
+        `\u6458\u8981\u4E3A ${digestLength}/${WECHAT_DIGEST_CHARACTER_LIMIT} \u4E2A Unicode \u5B57\u7B26\uFF1B\u8BF7\u7F29\u77ED article frontmatter \u4E2D\u7684 digest\uFF0C\u6216\u4F7F\u7528 --digest \u8986\u76D6\u540E\u91CD\u65B0\u9884\u89C8\u3002`,
+        false,
+        { currentLength: digestLength, max: WECHAT_DIGEST_CHARACTER_LIMIT }
+      );
     }
     const accountsResult = await this.#authenticatedFetch(
       session,
@@ -32120,8 +33336,6 @@ var WechatCli = class {
     );
     assertCompleteInlineAssets(prepared.inlineAssets, snapshot.inlineAssets);
     if (!snapshot.preflight.ok) {
-      output.writeStdout(`${JSON.stringify({ account, snapshot })}
-`);
       throw new WechatCliError("DXC_PUBLISHING_CLOUD_PREFLIGHT_FAILED");
     }
     const previewResponse = await this.#authenticatedFetch(
@@ -32134,7 +33348,14 @@ var WechatCli = class {
       }
     );
     const preview = publishingPreviewLinkSchema.parse(await checkedJson(previewResponse.response));
-    const browserMode = options.browserMode ?? "agent";
+    const browserMode = options.browserMode ?? "system";
+    const templateWarnings = prepared.bundle.templateHint !== void 0 && prepared.bundle.templateHint !== snapshot.templateId ? [
+      {
+        code: "DXC_PUBLISHING_TEMPLATE_HINT_MISMATCH",
+        effectiveTemplateId: snapshot.templateId,
+        requestedHintTemplateId: prepared.bundle.templateHint
+      }
+    ] : [];
     const result = {
       account,
       presentation: {
@@ -32142,10 +33363,17 @@ var WechatCli = class {
         surface: browserMode === "agent" ? "agent-side-panel" : "system-browser"
       },
       preview,
-      snapshot
+      snapshot,
+      ...templateWarnings.length === 0 ? {} : { warnings: templateWarnings }
     };
     output.writeStdout(`${JSON.stringify(result)}
 `);
+    if (templateWarnings[0] !== void 0) {
+      output.writeStderr(
+        `${templateWarnings[0].code}: \u6587\u7AE0\u63D0\u793A\u6A21\u677F\u4E3A ${templateWarnings[0].requestedHintTemplateId}\uFF0C\u4E91\u7AEF\u5FEB\u7167\u5B9E\u9645\u4F7F\u7528 ${templateWarnings[0].effectiveTemplateId}\uFF1B\u8BF7\u4EE5\u9884\u89C8\u9875\u4E2D\u7684\u5F53\u524D\u6A21\u677F\u4E3A\u51C6\uFF0C\u786E\u8BA4\u524D\u4E0D\u8981\u5047\u5B9A\u63D0\u793A\u6A21\u677F\u5DF2\u751F\u6548\u3002
+`
+      );
+    }
     const previewSecondsRemaining = preview.expiresInSeconds ?? Math.max(0, Math.floor((Date.parse(preview.expiresAt) - Date.now()) / 1e3));
     output.writeStderr(
       `\u9884\u89C8\u5C06\u5728 ${previewSecondsRemaining} \u79D2\u540E\u5931\u6548\uFF1B\u5FEB\u7167\u672C\u8EAB\u4E0D\u53D8\uFF0C\u8FC7\u671F\u540E\u53EF\u91CD\u5EFA\u77ED\u65F6\u94FE\u63A5\u3002
@@ -32154,7 +33382,8 @@ var WechatCli = class {
     const coverDescription = {
       "article-frontmatter": "\u6587\u7AE0\u58F0\u660E\u7684\u5185\u5BB9\u5C01\u9762",
       "assets-directory": "\u89C6\u89C9\u9636\u6BB5\u51C6\u5907\u7684\u5185\u5BB9\u5C01\u9762",
-      "explicit-file": "\u663E\u5F0F\u6307\u5B9A\u7684\u5185\u5BB9\u5C01\u9762"
+      "explicit-file": "\u663E\u5F0F\u6307\u5B9A\u7684\u5185\u5BB9\u5C01\u9762",
+      "visual-plan": "\u89C6\u89C9\u8BA1\u5212\u786E\u8BA4\u7684\u5185\u5BB9\u5C01\u9762"
     }[prepared.coverMode];
     output.writeStderr(
       `\u5C01\u9762\uFF1A${coverDescription}\uFF1B\u6B63\u6587\u56FE\u7247\uFF1A${prepared.inlineAssets.length} \u5F20\uFF08\u5176\u4E2D\u4ECE\u6307\u5B9A\u7D20\u6750\u76EE\u5F55\u91C7\u96C6 ${prepared.collectedInlineCount} \u5F20\uFF09\u3002
@@ -32181,9 +33410,25 @@ var WechatCli = class {
     const secondsRemaining = preview.expiresInSeconds ?? Math.max(0, Math.floor((Date.parse(preview.expiresAt) - Date.now()) / 1e3));
     output.writeStderr(`\u5DF2\u4E3A\u540C\u4E00\u4E2A\u4E0D\u53EF\u53D8\u5FEB\u7167\u91CD\u5EFA\u9884\u89C8\u94FE\u63A5\uFF0C\u5C06\u5728 ${secondsRemaining} \u79D2\u540E\u5931\u6548\u3002
 `);
-    await presentDraftPreview(output, this.#openExternal, preview, options.browserMode ?? "agent");
+    await presentDraftPreview(output, this.#openExternal, preview, options.browserMode ?? "system");
     return preview;
   }
+  async draftPreviewStatus(options, output) {
+    const session = await loadSession(this.#stateDirectory);
+    const { response } = await this.#authenticatedFetch(
+      session,
+      `${session.apiBaseUrl}/api/v1/render-snapshots/${encodeURIComponent(options.snapshotId)}/preview-state?snapshotHash=${encodeURIComponent(options.snapshotHash)}`
+    );
+    const state = publishingPreviewSelectionStateSchema.parse(await checkedJson(response));
+    output.writeStdout(`${JSON.stringify({ previewState: state })}
+`);
+    output.writeStderr(
+      state.viewed ? `\u5F53\u524D\u6700\u7EC8\u6A21\u677F\uFF1A${state.templateId}\uFF1B\u9009\u62E9\u4FEE\u8BA2 ${state.selectionRevision} \u5DF2\u6210\u529F\u6253\u5F00\u3002
+` : `\u5F53\u524D\u6700\u7EC8\u6A21\u677F\uFF1A${state.templateId}\uFF1B\u9009\u62E9\u4FEE\u8BA2 ${state.selectionRevision} \u5C1A\u672A\u6210\u529F\u6253\u5F00\uFF0C\u4E0D\u80FD\u786E\u8BA4\u521B\u5EFA\u8349\u7A3F\u3002
+`
+    );
+    return state;
+  }
   async createDraft(options, output) {
     if (!options.confirmed) {
       throw new WechatCliError(
@@ -32244,6 +33489,84 @@ var WechatCli = class {
     );
     return result;
   }
+  async retryDraft(options, output) {
+    if (!options.confirmed) {
+      throw new WechatCliError(
+        "DXC_DRAFT_RETRY_CONFIRMATION_REQUIRED",
+        "\u5B89\u5168\u91CD\u8BD5\u4F1A\u521B\u5EFA\u4E00\u4E2A\u65B0\u7684\u8349\u7A3F\u610F\u56FE\uFF1B\u8BF7\u786E\u8BA4\u539F\u610F\u56FE\u660E\u786E\u5931\u8D25\u540E\u589E\u52A0 --confirm\u3002"
+      );
+    }
+    let delivery;
+    try {
+      delivery = await readDeliveryRetryIdentity(options.deliveryFile);
+    } catch (error) {
+      throw new WechatCliError(
+        "DXC_DRAFT_DELIVERY_INVALID",
+        error instanceof StageArtifactValidationError ? error.message : "\u65E0\u6CD5\u8BFB\u53D6 delivery \u9636\u6BB5\u4EA7\u7269\u3002"
+      );
+    }
+    if (delivery.state !== "failed" || delivery.intentId !== options.previousIntentId) {
+      throw new WechatCliError(
+        "DXC_DRAFT_RETRY_NOT_SAFE",
+        "delivery \u5FC5\u987B\u660E\u786E\u8BB0\u5F55\u5F53\u524D\u610F\u56FE\u4E3A failed\uFF1B\u7ED3\u679C\u672A\u77E5\u3001\u9700\u4EBA\u5DE5\u6838\u5BF9\u6216\u4ECD\u5728\u5904\u7406\u7684\u610F\u56FE\u7981\u6B62\u91CD\u8BD5\u3002"
+      );
+    }
+    let session = await loadSession(this.#stateDirectory);
+    const previousResponse = await this.#authenticatedFetch(
+      session,
+      `${session.apiBaseUrl}/api/v1/draft-intents/${encodeURIComponent(options.previousIntentId)}`
+    );
+    session = previousResponse.session;
+    const previous = publishingDraftIntentResponseSchema.parse(
+      await checkedJson(previousResponse.response)
+    ).intent;
+    if (previous.status !== "FAILED" || previous.snapshotHash !== delivery.selectedSnapshotHash) {
+      throw new WechatCliError(
+        "DXC_DRAFT_RETRY_NOT_SAFE",
+        "\u670D\u52A1\u7AEF\u672A\u8BC1\u660E\u539F\u610F\u56FE\u5728\u5916\u90E8\u526F\u4F5C\u7528\u53D1\u751F\u524D\u5931\u8D25\uFF0C\u6216\u5FEB\u7167\u4E0E delivery \u4E0D\u4E00\u81F4\uFF1B\u7981\u6B62\u521B\u5EFA\u65B0\u610F\u56FE\u3002"
+      );
+    }
+    const idempotencyKey = `dxc:retry:${previous.id}:${delivery.retryAttempt + 1}`;
+    const retryRequest = createPublishingDraftIntentRequestSchema.parse({
+      approvalId: previous.approvalId,
+      previousIntentId: previous.id
+    });
+    const retryResponse = await this.#authenticatedFetch(
+      session,
+      `${session.apiBaseUrl}/api/v1/draft-intents`,
+      {
+        body: JSON.stringify(retryRequest),
+        headers: {
+          "content-type": "application/json",
+          "idempotency-key": idempotencyKey
+        },
+        method: "POST"
+      }
+    );
+    const result = publishingDraftIntentResponseSchema.parse(
+      await checkedJson(retryResponse.response)
+    );
+    try {
+      await bindDeliveryRetryIntentArtifact({
+        idempotencyKey,
+        intent: result.intent,
+        previousIntentId: previous.id,
+        target: options.deliveryFile
+      });
+    } catch (error) {
+      throw new WechatCliError(
+        "DXC_DRAFT_RETRY_DELIVERY_WRITE_FAILED",
+        error instanceof StageArtifactValidationError ? error.message : "\u65B0\u91CD\u8BD5\u610F\u56FE\u5DF2\u521B\u5EFA\uFF0C\u4F46 delivery \u5199\u56DE\u5931\u8D25\uFF1B\u4E0D\u8981\u518D\u6B21\u91CD\u8BD5\uFF0C\u8BF7\u5148\u67E5\u8BE2\u5F53\u524D\u610F\u56FE\u3002"
+      );
+    }
+    output.writeStdout(`${JSON.stringify({ intent: userFacingDraftIntent(result.intent) })}
+`);
+    output.writeStderr(
+      `${result.intent.progress.label}\uFF1A\u5DF2\u4ECE\u660E\u786E\u5931\u8D25\u7684\u610F\u56FE\u521B\u5EFA\u7B2C ${delivery.retryAttempt + 1} \u6B21\u663E\u5F0F\u91CD\u8BD5\uFF1B\u4E0D\u8981\u91CD\u590D\u63D0\u4EA4\u3002
+`
+    );
+    return result;
+  }
   async publishingDraftStatus(intentId, output) {
     const session = await loadSession(this.#stateDirectory);
     const { response } = await this.#authenticatedFetch(
@@ -32354,7 +33677,7 @@ var WechatCli = class {
       `${session.apiBaseUrl}/api/v1/uploads`,
       {
         body: JSON.stringify({
-          fileName: path7.basename(input.path),
+          fileName: path8.basename(input.path),
           kind,
           mediaType,
           sha256: bytesHash(input.bytes),
@@ -32599,8 +33922,8 @@ ${session.authorizationUrl}
     );
     const deviceSessionToken = randomBytes(32).toString("base64url");
     const deviceRefreshToken = randomBytes(32).toString("base64url");
-    const deviceSessionTokenHash = createHash7("sha256").update(deviceSessionToken, "utf8").digest("hex");
-    const deviceRefreshTokenHash = createHash7("sha256").update(deviceRefreshToken, "utf8").digest("hex");
+    const deviceSessionTokenHash = createHash8("sha256").update(deviceSessionToken, "utf8").digest("hex");
+    const deviceRefreshTokenHash = createHash8("sha256").update(deviceRefreshToken, "utf8").digest("hex");
     const message = createDeviceProofMessage({
       bindingSessionId: binding.id,
       challenge: binding.challenge,
@@ -32735,12 +34058,24 @@ function previewBrowserMode(value) {
 function collectValues(value, previous) {
   return [...previous, value];
 }
-async function runWechatAction(context, action) {
+async function runWechatAction(context, action, json = false) {
   try {
     await action(new WechatCli(context.wechatDependencies));
   } catch (error) {
     const code = error instanceof WechatCliError ? error.code : "DXC_WECHAT_FAILED";
     const guidance = error instanceof WechatCliError ? error.guidance : void 0;
+    const retryable = error instanceof WechatCliError ? error.retryable : false;
+    const fields = error instanceof WechatCliError ? error.fields : void 0;
+    if (json) {
+      writeJson(context, {
+        error: {
+          code,
+          ...fields === void 0 ? {} : { fields },
+          message: guidance ?? code,
+          retryable
+        }
+      });
+    }
     context.writeStderr(`${code}${guidance === void 0 ? "" : `: ${guidance}`}
 `);
     context.setExitCode(1);
@@ -32768,7 +34103,7 @@ async function loadKnowledgeModule() {
     Reflect.apply(emitWarning, process, [warning2, ...arguments_]);
   });
   try {
-    return await import("./chunks/knowledge-PWFALFEC.js");
+    return await import("./chunks/knowledge-RAGVN36S.js");
   } finally {
     process.emitWarning = emitWarning;
   }
@@ -32782,7 +34117,7 @@ async function loadMonitorModule() {
     Reflect.apply(emitWarning, process, [warning2, ...arguments_]);
   });
   try {
-    return await import("./chunks/monitor-CL5UXEO2.js");
+    return await import("./chunks/monitor-XTYUQFQT.js");
   } finally {
     process.emitWarning = emitWarning;
   }
@@ -32850,7 +34185,8 @@ async function runMemoryAction(context, command, json, action) {
         error: { code, message },
         ok: false
       }),
-      code
+      code,
+      message
     );
   }
 }
@@ -32885,10 +34221,16 @@ async function runProjectAction(context, command, json, action) {
       json,
       contentProjectErrorResultSchema.parse({
         command,
-        error: { code, message },
+        error: {
+          code,
+          message,
+          ...error instanceof ProjectCliError ? error.details : {}
+        },
         ok: false
       }),
-      code
+      code,
+      message,
+      error instanceof ProjectCliError ? error.details.recovery : void 0
     );
   }
 }
@@ -33264,16 +34606,23 @@ ${hint}
   project.command("checkpoint").description("\u5199\u5165\u7EDF\u4E00\u7684\u9636\u6BB5 contract").argument("<stage>", "\u6B65\u9AA4\u540D\u79F0").requiredOption("--status <status>", "running / awaiting-user / completed / failed / skipped").option("--skill <name>", "\u7279\u6B8A\u63A5\u7BA1\u6D41\u7A0B\u4F7F\u7528\u7684 dxc-* Skill\uFF1B\u5E38\u89C4\u9636\u6BB5\u7531 catalog \u81EA\u52A8\u786E\u5B9A").option(
     "--skill-version <version>",
     "\u7279\u6B8A\u63A5\u7BA1\u6D41\u7A0B\u4F7F\u7528\u7684 Skill \u7248\u672C\uFF1B\u5E38\u89C4\u9636\u6BB5\u7531 catalog \u81EA\u52A8\u786E\u5B9A"
-  ).requiredOption("--summary <text>", "\u672C\u6B21\u9636\u6BB5\u72B6\u6001\u7684\u7B80\u77ED\u8BF4\u660E").option("--directory <path>", "\u9879\u76EE\u76EE\u5F55", ".").option("--inputs <stages>", "\u672C\u6B21\u989D\u5916\u8BFB\u53D6\u7684\u53EF\u9009\u8F93\u5165\uFF1B\u5FC5\u9700\u8F93\u5165\u7531 catalog \u81EA\u52A8\u8865\u9F50").option("--execution-location <location>", "local-device / agent-hosted / unknown", "unknown").option(
+  ).option("--summary <text>", "\u672C\u6B21\u9636\u6BB5\u72B6\u6001\u7684\u7B80\u77ED\u8BF4\u660E").option("--directory <path>", "\u9879\u76EE\u76EE\u5F55", ".").option("--inputs <stages>", "\u672C\u6B21\u989D\u5916\u8BFB\u53D6\u7684\u53EF\u9009\u8F93\u5165\uFF1B\u5FC5\u9700\u8F93\u5165\u7531 catalog \u81EA\u52A8\u8865\u9F50").option("--execution-location <location>", "local-device / agent-hosted / unknown", "unknown").option(
     "--data-transit <transit>",
     "local-only / agent-provider / dxc-cloud / unknown",
     "unknown"
-  ).option("--error-code <code>", "\u5931\u8D25\u65F6\u7684\u7A33\u5B9A\u9519\u8BEF\u7801").option("--waiting-for <prompt>", "awaiting-user \u72B6\u6001\u7B49\u5F85\u7528\u6237\u56DE\u7B54\u7684\u95EE\u9898").option("--confirm", "\u8BB0\u5F55\u7528\u6237\u5DF2\u786E\u8BA4\u8BE5\u6B65\u9AA4\u4EA7\u7269").option("--confirmed-by <actor>", "\u786E\u8BA4\u4EBA\u6216\u7A33\u5B9A\u8EAB\u4EFD\u6807\u8BC6", "local-interactive-user").option("--confirmation-snapshot <sha256>", "\u786E\u8BA4\u6240\u7ED1\u5B9A\u7684\u5FEB\u7167 SHA-256").option("--json", "\u8F93\u51FA JSON").action(
+  ).option("--error-code <code>", "\u5931\u8D25\u65F6\u7684\u7A33\u5B9A\u9519\u8BEF\u7801").option("--waiting-for <prompt>", "awaiting-user \u72B6\u6001\u7B49\u5F85\u7528\u6237\u56DE\u7B54\u7684\u95EE\u9898").option("--confirm", "\u8BB0\u5F55\u7528\u6237\u5DF2\u786E\u8BA4\u8BE5\u6B65\u9AA4\u4EA7\u7269").option(
+    "--authorization-purpose <purpose>",
+    "\u9636\u6BB5\u5185\u5916\u90E8\u52A8\u4F5C\u6388\u6743\uFF1B\u5F53\u524D\u4EC5 visual-plan \u652F\u6301 image-generation"
+  ).option("--confirmed-by <actor>", "\u786E\u8BA4\u4EBA\u6216\u7A33\u5B9A\u8EAB\u4EFD\u6807\u8BC6", "local-interactive-user").option(
+    "--confirmation-snapshot <sha256>",
+    "\u4EC5 delivery \u9636\u6BB5\u4F20\u4E91\u7AEF renderSnapshot SHA-256\uFF1B\u5176\u4ED6\u9636\u6BB5\u7531 CLI \u4ECE\u8BED\u4E49\u4EA7\u7269\u81EA\u52A8\u8BA1\u7B97"
+  ).option("--json", "\u8F93\u51FA JSON").action(
     async (stage, options) => runProjectAction(
       context,
       "project.checkpoint",
       options.json === true,
       async (projectCli) => projectCli.checkpoint({
+        ...options.authorizationPurpose === void 0 ? {} : { authorizationPurpose: options.authorizationPurpose },
         confirmed: options.confirm === true,
         ...options.confirmedBy === void 0 ? {} : { confirmedBy: options.confirmedBy },
         ...options.confirmationSnapshot === void 0 ? {} : {
@@ -33294,7 +34643,7 @@ ${hint}
         ...options.skillVersion === void 0 ? {} : { skillVersion: options.skillVersion },
         stage,
         status: options.status,
-        summary: options.summary,
+        ...options.summary === void 0 ? {} : { summary: options.summary },
         ...options.waitingFor === void 0 ? {} : { waitingFor: options.waitingFor }
       })
     )
@@ -33456,9 +34805,13 @@ ${hint}
     })
   );
   auth.command("status").description("\u663E\u793A\u5F53\u524D\u8BBE\u5907\u3001\u7528\u6237\u548C\u5185\u5BB9\u7A7A\u95F4").option("--json", "\u8F93\u51FA JSON").action(
-    async () => runWechatAction(context, async (wechatCli) => {
-      await wechatCli.status(context);
-    })
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.status(context);
+      },
+      options.json === true
+    )
   );
   auth.command("logout").description("\u64A4\u9500\u5F53\u524D\u8BBE\u5907\u4F1A\u8BDD").action(
     async () => runWechatAction(context, async (wechatCli) => {
@@ -33479,149 +34832,312 @@ ${hint}
     })
   );
   wechat.command("accounts").description("\u5217\u51FA\u5DF2\u7ED1\u5B9A\u516C\u4F17\u53F7\u548C\u8349\u7A3F\u6743\u9650").option("--json", "\u8F93\u51FA JSON").action(
-    async (options) => runWechatAction(context, async (wechatCli) => {
-      await wechatCli.accounts(context, options.json === true);
-    })
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.accounts(context, options.json === true);
+      },
+      options.json === true
+    )
   );
   const draft = wechat.command("draft").description("\u9884\u89C8\u5E76\u521B\u5EFA\u5FAE\u4FE1\u516C\u4F17\u53F7\u8349\u7A3F");
-  draft.command("preview").description("\u91C7\u96C6\u5DF2\u751F\u6210\u6216\u9009\u62E9\u7684\u56FE\u7247\uFF0C\u5E76\u751F\u6210\u4E0D\u53EF\u53D8\u4E91\u7AEF\u9884\u89C8").requiredOption("--article <path>", "Markdown \u6587\u7AE0\u6587\u4EF6").option("--cover <path-or-auto>", "PNG/JPEG \u5185\u5BB9\u5C01\u9762\uFF1Bauto \u4ECE\u6587\u7AE0\u6216\u7D20\u6750\u76EE\u5F55\u89E3\u6790", "auto").option("--assets-directory <path>", "\u91C7\u96C6\u5E76\u5185\u8054\u8BE5\u76EE\u5F55\u4E2D\u5DF2\u51C6\u5907\u597D\u7684 PNG/JPEG").option("--visual-plan <path>", "\u6309\u89C6\u89C9\u8BA1\u5212\u7684\u7CBE\u786E\u7AE0\u8282\u951A\u70B9\u63D2\u5165\u5DF2\u58F0\u660E\u7684\u6B63\u6587\u56FE\u7247").requiredOption("--account <uuid>", "\u76EE\u6807\u516C\u4F17\u53F7\u8D26\u53F7 ID").option("--title <title>", "\u4F7F\u7528\u5DF2\u786E\u8BA4\u6807\u9898\u8986\u76D6\u6587\u7AE0 frontmatter \u6807\u9898").option("--browser <agent|system>", "\u4F18\u5148\u5728 Agent \u53F3\u4FA7\u9884\u89C8\uFF1B\u4E0D\u652F\u6301\u65F6\u53EF\u6539\u7528\u7CFB\u7EDF\u6D4F\u89C8\u5668", "agent").action(
-    async (options) => runWechatAction(context, async (wechatCli) => {
-      await wechatCli.previewDraft(
-        {
-          accountId: validatedOption(
-            options.account,
-            /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
-            "account"
-          ),
-          browserMode: previewBrowserMode(options.browser),
-          articleFile: resolveUserPath({
-            currentDirectory: context.currentDirectory,
-            homeDirectory: context.homeDirectory,
-            input: options.article
-          }),
-          ...options.assetsDirectory === void 0 ? {} : {
-            assetsDirectory: resolveUserPath({
+  draft.command("optimize-images").description("\u4E3A\u5FAE\u4FE1\u9650\u5236\u751F\u6210\u4E0D\u8986\u76D6\u539F\u56FE\u7684\u4F18\u5316\u6D3E\u751F\u56FE\uFF0C\u5E76\u540C\u6B65\u89C6\u89C9\u8BA1\u5212\u8DEF\u5F84\u4E0E\u54C8\u5E0C").requiredOption("--visual-plan <path>", "\u5DF2\u5F15\u7528\u5B9E\u9645\u56FE\u7247\u7684\u89C6\u89C9\u8BA1\u5212\u6587\u4EF6").option("--directory <path>", "\u5185\u5BB9\u9879\u76EE\u76EE\u5F55", ".").option("--json", "\u8F93\u51FA\u56FE\u7247\u53D8\u66F4\u3001\u900F\u660E\u901A\u9053\u548C\u54C8\u5E0C\u7ED3\u679C").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.optimizeDraftImages(
+          {
+            projectDirectory: resolveUserPath({
               currentDirectory: context.currentDirectory,
               homeDirectory: context.homeDirectory,
-              input: options.assetsDirectory
-            })
-          },
-          ...options.cover === void 0 ? {} : {
-            coverFile: options.cover === "auto" ? "auto" : resolveUserPath({
+              input: options.directory
+            }),
+            visualPlanFile: resolveUserPath({
               currentDirectory: context.currentDirectory,
               homeDirectory: context.homeDirectory,
-              input: options.cover
+              input: options.visualPlan
             })
           },
-          ...options.title === void 0 ? {} : { title: options.title },
-          ...options.visualPlan === void 0 ? {} : {
+          context
+        );
+      },
+      options.json === true
+    )
+  );
+  draft.command("preview-local").description("\u5728\u672C\u5730\u751F\u6210\u5305\u542B\u5C01\u9762\u548C\u6B63\u6587\u914D\u56FE\u7684\u6D3E\u751F\u9884\u89C8\uFF0C\u5E76\u8BF7\u6C42\u66FF\u6362 Agent \u53F3\u4FA7\u9884\u89C8").requiredOption("--article <path>", "Markdown \u6587\u7AE0\u6587\u4EF6").requiredOption("--assets-directory <path>", "visual-plan \u5DF2\u843D\u76D8\u7684 PNG/JPEG \u7D20\u6750\u76EE\u5F55").requiredOption("--visual-plan <path>", "\u5DF2\u5B8C\u6210\u7684\u89C6\u89C9\u8BA1\u5212\u6587\u4EF6").option("--cover <path-or-auto>", "PNG/JPEG \u5185\u5BB9\u5C01\u9762\uFF1Bauto \u4ECE\u89C6\u89C9\u7D20\u6750\u76EE\u5F55\u89E3\u6790", "auto").option("--title <title>", "\u4F7F\u7528\u5DF2\u786E\u8BA4\u6807\u9898\u8986\u76D6\u6587\u7AE0 frontmatter \u6807\u9898").option(
+    "--output <path>",
+    "\u6D3E\u751F\u9884\u89C8\u6587\u4EF6\uFF1B\u9ED8\u8BA4\u4FDD\u5B58\u5728\u9879\u76EE\u79C1\u6709\u76EE\u5F55",
+    ".dxc/previews/visual-preview.html"
+  ).option("--json", "\u8F93\u51FA JSON\uFF1B\u540C\u65F6\u53D1\u51FA\u53F3\u4FA7\u6D4F\u89C8\u5668\u66FF\u6362\u4E8B\u4EF6").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.previewLocalDraft(
+          {
+            articleFile: resolveUserPath({
+              currentDirectory: context.currentDirectory,
+              homeDirectory: context.homeDirectory,
+              input: options.article
+            }),
+            assetsDirectory: resolveUserPath({
+              currentDirectory: context.currentDirectory,
+              homeDirectory: context.homeDirectory,
+              input: options.assetsDirectory
+            }),
+            ...options.cover === void 0 ? {} : {
+              coverFile: options.cover === "auto" ? "auto" : resolveUserPath({
+                currentDirectory: context.currentDirectory,
+                homeDirectory: context.homeDirectory,
+                input: options.cover
+              })
+            },
+            outputFile: resolveUserPath({
+              currentDirectory: context.currentDirectory,
+              homeDirectory: context.homeDirectory,
+              input: options.output
+            }),
+            projectDirectory: context.currentDirectory,
+            ...options.title === void 0 ? {} : { title: options.title },
             visualPlanFile: resolveUserPath({
               currentDirectory: context.currentDirectory,
               homeDirectory: context.homeDirectory,
               input: options.visualPlan
             })
-          }
-        },
-        context
-      );
-    })
+          },
+          context
+        );
+      },
+      options.json === true
+    )
   );
-  draft.command("preview-refresh").description("\u4E3A\u540C\u4E00\u4E2A\u4E0D\u53EF\u53D8\u5FEB\u7167\u91CD\u5EFA\u77ED\u65F6\u9884\u89C8\u94FE\u63A5").option("--snapshot <uuid>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 ID").option("--snapshot-hash <sha256>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 SHA-256").option("--browser <agent|system>", "\u4F18\u5148\u5728 Agent \u53F3\u4FA7\u9884\u89C8\uFF1B\u4E0D\u652F\u6301\u65F6\u53EF\u6539\u7528\u7CFB\u7EDF\u6D4F\u89C8\u5668", "agent").action(
-    async (options) => runWechatAction(context, async (wechatCli) => {
-      const missing = [
-        ...options.snapshot === void 0 ? ["--snapshot"] : [],
-        ...options.snapshotHash === void 0 ? ["--snapshot-hash"] : []
-      ];
-      if (missing.length > 0) {
-        throw new WechatCliError(
-          "DXC_PREVIEW_REFRESH_OPTIONS_REQUIRED",
-          `\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570\uFF1A${missing.join("\u3001")}\u3002`
+  draft.command("preview").description("\u91C7\u96C6\u5DF2\u751F\u6210\u6216\u9009\u62E9\u7684\u56FE\u7247\uFF0C\u5E76\u751F\u6210\u4E0D\u53EF\u53D8\u4E91\u7AEF\u9884\u89C8").requiredOption("--article <path>", "Markdown \u6587\u7AE0\u6587\u4EF6").option("--cover <path-or-auto>", "PNG/JPEG \u5185\u5BB9\u5C01\u9762\uFF1Bauto \u4ECE\u6587\u7AE0\u6216\u7D20\u6750\u76EE\u5F55\u89E3\u6790", "auto").option("--assets-directory <path>", "\u91C7\u96C6\u5E76\u5185\u8054\u8BE5\u76EE\u5F55\u4E2D\u5DF2\u51C6\u5907\u597D\u7684 PNG/JPEG").option("--visual-plan <path>", "\u6309\u89C6\u89C9\u8BA1\u5212\u7684\u7CBE\u786E\u7AE0\u8282\u951A\u70B9\u63D2\u5165\u5DF2\u58F0\u660E\u7684\u6B63\u6587\u56FE\u7247").requiredOption("--account <uuid>", "\u76EE\u6807\u516C\u4F17\u53F7\u8D26\u53F7 ID").option("--digest <digest>", "\u4F7F\u7528\u5DF2\u786E\u8BA4\u6458\u8981\u8986\u76D6\u6587\u7AE0 frontmatter \u6458\u8981").option("--title <title>", "\u4F7F\u7528\u5DF2\u786E\u8BA4\u6807\u9898\u8986\u76D6\u6587\u7AE0 frontmatter \u6807\u9898").option(
+    "--browser <agent|system>",
+    "\u4F7F\u7528\u7CFB\u7EDF\u6D4F\u89C8\u5668\uFF1B\u5BBF\u4E3B\u5DF2\u8BC1\u660E\u652F\u6301\u53F3\u4FA7\u6D4F\u89C8\u5668\u65F6\u53EF\u663E\u5F0F\u4F7F\u7528 agent",
+    "system"
+  ).option("--json", "\u8F93\u51FA JSON\uFF1B\u5931\u8D25\u65F6\u4E5F\u5728 stdout \u8FD4\u56DE\u7ED3\u6784\u5316\u9519\u8BEF").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.previewDraft(
+          {
+            accountId: validatedOption(
+              options.account,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "account"
+            ),
+            browserMode: previewBrowserMode(options.browser),
+            articleFile: resolveUserPath({
+              currentDirectory: context.currentDirectory,
+              homeDirectory: context.homeDirectory,
+              input: options.article
+            }),
+            ...options.assetsDirectory === void 0 ? {} : {
+              assetsDirectory: resolveUserPath({
+                currentDirectory: context.currentDirectory,
+                homeDirectory: context.homeDirectory,
+                input: options.assetsDirectory
+              })
+            },
+            ...options.cover === void 0 ? {} : {
+              coverFile: options.cover === "auto" ? "auto" : resolveUserPath({
+                currentDirectory: context.currentDirectory,
+                homeDirectory: context.homeDirectory,
+                input: options.cover
+              })
+            },
+            ...options.digest === void 0 ? {} : { digest: options.digest },
+            ...options.title === void 0 ? {} : { title: options.title },
+            ...options.visualPlan === void 0 ? {} : {
+              visualPlanFile: resolveUserPath({
+                currentDirectory: context.currentDirectory,
+                homeDirectory: context.homeDirectory,
+                input: options.visualPlan
+              })
+            }
+          },
+          context
         );
-      }
-      if (options.snapshot === void 0 || options.snapshotHash === void 0) {
-        throw new WechatCliError("DXC_PREVIEW_REFRESH_OPTIONS_REQUIRED");
-      }
-      await wechatCli.refreshDraftPreview(
-        {
-          browserMode: previewBrowserMode(options.browser),
-          snapshotHash: validatedOption(
-            options.snapshotHash,
-            /^[a-f0-9]{64}$/u,
-            "snapshot-hash"
-          ),
-          snapshotId: validatedOption(
-            options.snapshot,
-            /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
-            "snapshot"
-          )
-        },
-        context
-      );
-    })
+      },
+      options.json === true
+    )
   );
-  draft.command("create").description("\u786E\u8BA4\u4E0D\u53EF\u53D8\u5FEB\u7167\u548C\u76EE\u6807\u516C\u4F17\u53F7\u540E\u521B\u5EFA\u8349\u7A3F\u610F\u56FE").option("--account <uuid>", "\u76EE\u6807\u516C\u4F17\u53F7\u8D26\u53F7 ID").option("--snapshot <uuid>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 ID").option("--snapshot-hash <sha256>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 SHA-256").option("--idempotency-key <key>", "\u672C\u6B21\u8349\u7A3F\u610F\u56FE\u7684\u5E42\u7B49\u952E").option("--delivery <path>", "\u5199\u56DE\u6700\u7EC8\u9009\u4E2D\u5FEB\u7167\u7684 delivery \u9636\u6BB5\u4EA7\u7269").option("--confirm", "\u786E\u8BA4\u9884\u89C8\u5FEB\u7167\u548C\u76EE\u6807\u516C\u4F17\u53F7").action(
-    async (options) => runWechatAction(context, async (wechatCli) => {
-      const missing = [
-        ...options.account === void 0 ? ["--account"] : [],
-        ...options.snapshot === void 0 ? ["--snapshot"] : [],
-        ...options.snapshotHash === void 0 ? ["--snapshot-hash"] : [],
-        ...options.idempotencyKey === void 0 ? ["--idempotency-key"] : []
-      ];
-      if (missing.length > 0) {
-        throw new WechatCliError(
-          "DXC_DRAFT_OPTIONS_REQUIRED",
-          `\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570\uFF1A${missing.join("\u3001")}\u3002`
+  draft.command("preview-refresh").description("\u4E3A\u540C\u4E00\u4E2A\u4E0D\u53EF\u53D8\u5FEB\u7167\u91CD\u5EFA\u77ED\u65F6\u9884\u89C8\u94FE\u63A5").option("--snapshot <uuid>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 ID").option("--snapshot-hash <sha256>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 SHA-256").option(
+    "--browser <agent|system>",
+    "\u4F7F\u7528\u7CFB\u7EDF\u6D4F\u89C8\u5668\uFF1B\u5BBF\u4E3B\u5DF2\u8BC1\u660E\u652F\u6301\u53F3\u4FA7\u6D4F\u89C8\u5668\u65F6\u53EF\u663E\u5F0F\u4F7F\u7528 agent",
+    "system"
+  ).option("--json", "\u8F93\u51FA JSON\uFF1B\u5931\u8D25\u65F6\u4E5F\u5728 stdout \u8FD4\u56DE\u7ED3\u6784\u5316\u9519\u8BEF").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        const missing = [
+          ...options.snapshot === void 0 ? ["--snapshot"] : [],
+          ...options.snapshotHash === void 0 ? ["--snapshot-hash"] : []
+        ];
+        if (missing.length > 0) {
+          throw new WechatCliError(
+            "DXC_PREVIEW_REFRESH_OPTIONS_REQUIRED",
+            `\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570\uFF1A${missing.join("\u3001")}\u3002`
+          );
+        }
+        if (options.snapshot === void 0 || options.snapshotHash === void 0) {
+          throw new WechatCliError("DXC_PREVIEW_REFRESH_OPTIONS_REQUIRED");
+        }
+        await wechatCli.refreshDraftPreview(
+          {
+            browserMode: previewBrowserMode(options.browser),
+            snapshotHash: validatedOption(
+              options.snapshotHash,
+              /^[a-f0-9]{64}$/u,
+              "snapshot-hash"
+            ),
+            snapshotId: validatedOption(
+              options.snapshot,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "snapshot"
+            )
+          },
+          context
         );
-      }
-      const account = options.account;
-      const snapshot = options.snapshot;
-      const snapshotHash = options.snapshotHash;
-      const idempotencyKey = options.idempotencyKey;
-      if (account === void 0 || snapshot === void 0 || snapshotHash === void 0 || idempotencyKey === void 0) {
-        throw new WechatCliError("DXC_DRAFT_OPTIONS_REQUIRED");
-      }
-      await wechatCli.createDraft(
-        {
-          accountId: validatedOption(
-            account,
-            /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
-            "account"
-          ),
-          confirmed: options.confirm === true,
-          ...options.delivery === void 0 ? {} : {
+      },
+      options.json === true
+    )
+  );
+  draft.command("preview-status").description("\u8BFB\u53D6\u670D\u52A1\u7AEF\u6700\u7EC8\u6A21\u677F\u9009\u62E9\u56DE\u6267\uFF0C\u5E76\u786E\u8BA4\u8BE5\u4FEE\u8BA2\u662F\u5426\u5DF2\u6210\u529F\u6253\u5F00").requiredOption("--snapshot <uuid>", "\u6700\u521D\u6E32\u67D3\u5FEB\u7167 ID").requiredOption("--snapshot-hash <sha256>", "\u6700\u521D\u6E32\u67D3\u5FEB\u7167 SHA-256").option("--json", "\u8F93\u51FA\u6700\u7EC8\u6A21\u677F\u3001\u9009\u62E9\u4FEE\u8BA2\u548C\u5DF2\u67E5\u770B\u72B6\u6001").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.draftPreviewStatus(
+          {
+            snapshotHash: validatedOption(
+              options.snapshotHash,
+              /^[a-f0-9]{64}$/u,
+              "snapshot-hash"
+            ),
+            snapshotId: validatedOption(
+              options.snapshot,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "snapshot"
+            )
+          },
+          context
+        );
+      },
+      options.json === true
+    )
+  );
+  draft.command("create").description("\u786E\u8BA4\u4E0D\u53EF\u53D8\u5FEB\u7167\u548C\u76EE\u6807\u516C\u4F17\u53F7\u540E\u521B\u5EFA\u8349\u7A3F\u610F\u56FE").option("--account <uuid>", "\u76EE\u6807\u516C\u4F17\u53F7\u8D26\u53F7 ID").option("--snapshot <uuid>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 ID").option("--snapshot-hash <sha256>", "\u4E0D\u53EF\u53D8\u5FEB\u7167 SHA-256").option("--idempotency-key <key>", "\u672C\u6B21\u8349\u7A3F\u610F\u56FE\u7684\u5E42\u7B49\u952E").option("--delivery <path>", "\u8BFB\u53D6\u5E76\u590D\u7528 delivery \u4E2D\u7684\u5E42\u7B49\u952E\u4E0E\u6700\u7EC8\u6A21\u677F\u56DE\u6267\uFF0C\u5E76\u5199\u56DE\u610F\u56FE\u72B6\u6001").option("--confirm", "\u786E\u8BA4\u9884\u89C8\u5FEB\u7167\u548C\u76EE\u6807\u516C\u4F17\u53F7").option("--json", "\u8F93\u51FA JSON\uFF1B\u5931\u8D25\u65F6\u4E5F\u5728 stdout \u8FD4\u56DE\u7ED3\u6784\u5316\u9519\u8BEF").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        const deliveryFile = options.delivery === void 0 ? void 0 : resolveUserPath({
+          currentDirectory: context.currentDirectory,
+          homeDirectory: context.homeDirectory,
+          input: options.delivery
+        });
+        let deliveryIdentity;
+        if (deliveryFile !== void 0) {
+          try {
+            deliveryIdentity = await readDeliveryDraftIdentity(deliveryFile);
+          } catch (error) {
+            throw new WechatCliError(
+              "DXC_DRAFT_DELIVERY_INVALID",
+              error instanceof StageArtifactValidationError ? error.message : "\u65E0\u6CD5\u8BFB\u53D6 delivery \u9636\u6BB5\u4EA7\u7269\u3002"
+            );
+          }
+        }
+        const missing = [
+          ...options.account === void 0 ? ["--account"] : [],
+          ...options.snapshot === void 0 ? ["--snapshot"] : [],
+          ...options.snapshotHash === void 0 ? ["--snapshot-hash"] : [],
+          ...options.idempotencyKey === void 0 && deliveryIdentity === void 0 ? ["--idempotency-key \u6216 --delivery"] : []
+        ];
+        if (missing.length > 0) {
+          throw new WechatCliError(
+            "DXC_DRAFT_OPTIONS_REQUIRED",
+            `\u7F3A\u5C11\u5FC5\u586B\u53C2\u6570\uFF1A${missing.join("\u3001")}\u3002`
+          );
+        }
+        const account = options.account;
+        const snapshot = options.snapshot;
+        const snapshotHash = options.snapshotHash;
+        const idempotencyKey = options.idempotencyKey ?? deliveryIdentity?.idempotencyKey;
+        if (account === void 0 || snapshot === void 0 || snapshotHash === void 0 || idempotencyKey === void 0) {
+          throw new WechatCliError("DXC_DRAFT_OPTIONS_REQUIRED");
+        }
+        if (deliveryIdentity !== void 0 && (deliveryIdentity.accountId !== account || deliveryIdentity.rootSnapshotId !== snapshot || deliveryIdentity.rootSnapshotHash !== snapshotHash || options.idempotencyKey !== void 0 && options.idempotencyKey !== deliveryIdentity.idempotencyKey)) {
+          throw new WechatCliError(
+            "DXC_DRAFT_DELIVERY_MISMATCH",
+            "\u547D\u4EE4\u4E2D\u7684\u516C\u4F17\u53F7\u3001root \u5FEB\u7167\u6216\u5E42\u7B49\u952E\u4E0E delivery \u9636\u6BB5\u4EA7\u7269\u4E0D\u4E00\u81F4\uFF1B\u5DF2\u5728\u4EFB\u4F55\u670D\u52A1\u7AEF\u8BF7\u6C42\u524D\u505C\u6B62\u3002"
+          );
+        }
+        await wechatCli.createDraft(
+          {
+            accountId: validatedOption(
+              account,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "account"
+            ),
+            confirmed: options.confirm === true,
+            ...deliveryFile === void 0 ? {} : {
+              deliveryFile
+            },
+            idempotencyKey: validatedOption(
+              idempotencyKey,
+              /^[A-Za-z0-9._:-]{16,128}$/u,
+              "idempotency-key"
+            ),
+            snapshotHash: validatedOption(snapshotHash, /^[a-f0-9]{64}$/u, "snapshot-hash"),
+            snapshotId: validatedOption(
+              snapshot,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "snapshot"
+            )
+          },
+          context
+        );
+      },
+      options.json === true
+    )
+  );
+  draft.command("retry").description("\u4EC5\u4ECE\u670D\u52A1\u7AEF\u8BC1\u660E\u5728\u5916\u90E8\u526F\u4F5C\u7528\u524D FAILED \u7684\u610F\u56FE\u521B\u5EFA\u6709\u8C31\u7CFB\u7684\u65B0\u91CD\u8BD5\u610F\u56FE").requiredOption("--intent <uuid>", "\u660E\u786E\u5931\u8D25\u7684\u539F\u8349\u7A3F\u610F\u56FE ID").requiredOption("--delivery <path>", "\u8BB0\u5F55\u539F\u5931\u8D25\u610F\u56FE\u548C\u6700\u7EC8\u5FEB\u7167\u7684 delivery \u9636\u6BB5\u4EA7\u7269").option("--confirm", "\u786E\u8BA4\u53D1\u8D77\u4E00\u6B21\u65B0\u7684\u8349\u7A3F\u610F\u56FE").option("--json", "\u8F93\u51FA JSON\uFF1B\u5931\u8D25\u65F6\u4E5F\u8FD4\u56DE\u7A33\u5B9A\u9519\u8BEF\u7801").action(
+    async (options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.retryDraft(
+          {
+            confirmed: options.confirm === true,
             deliveryFile: resolveUserPath({
               currentDirectory: context.currentDirectory,
               homeDirectory: context.homeDirectory,
               input: options.delivery
-            })
+            }),
+            previousIntentId: validatedOption(
+              options.intent,
+              /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+              "intent"
+            )
           },
-          idempotencyKey: validatedOption(
-            idempotencyKey,
-            /^[A-Za-z0-9._:-]{16,128}$/u,
-            "idempotency-key"
-          ),
-          snapshotHash: validatedOption(snapshotHash, /^[a-f0-9]{64}$/u, "snapshot-hash"),
-          snapshotId: validatedOption(
-            snapshot,
-            /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
-            "snapshot"
-          )
-        },
-        context
-      );
-    })
+          context
+        );
+      },
+      options.json === true
+    )
   );
-  draft.command("status").description("\u67E5\u8BE2\u8349\u7A3F\u610F\u56FE\u72B6\u6001\u548C\u5FAE\u4FE1\u56DE\u8BFB\u7ED3\u679C").argument("<intent-id>", "\u8349\u7A3F\u610F\u56FE ID").action(
-    async (intentId) => runWechatAction(context, async (wechatCli) => {
-      await wechatCli.publishingDraftStatus(
-        validatedOption(
-          intentId,
-          /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
-          "intent-id"
-        ),
-        context
-      );
-    })
+  draft.command("status").description("\u67E5\u8BE2\u8349\u7A3F\u610F\u56FE\u72B6\u6001\u548C\u5FAE\u4FE1\u56DE\u8BFB\u7ED3\u679C").argument("<intent-id>", "\u8349\u7A3F\u610F\u56FE ID").option("--json", "\u8F93\u51FA JSON\uFF1B\u5931\u8D25\u65F6\u4E5F\u5728 stdout \u8FD4\u56DE\u7ED3\u6784\u5316\u9519\u8BEF").action(
+    async (intentId, options) => runWechatAction(
+      context,
+      async (wechatCli) => {
+        await wechatCli.publishingDraftStatus(
+          validatedOption(
+            intentId,
+            /^[0-9a-f]{8}-[0-9a-f]{4}-[1-8][0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/iu,
+            "intent-id"
+          ),
+          context
+        );
+      },
+      options.json === true
+    )
   );
   draft.command("smoke-preview").description("\u83B7\u53D6\u56FA\u5B9A\u6D4B\u8BD5\u8349\u7A3F\u7684\u4E0D\u53EF\u53D8\u9884\u89C8").requiredOption("--account <uuid>", "\u76EE\u6807\u516C\u4F17\u53F7\u8D26\u53F7 ID").action(
     async (options) => runWechatAction(context, async (wechatCli) => {
@@ -33676,6 +35192,15 @@ async function runCli(arguments_, context = processContext()) {
     await program2.parseAsync([...arguments_]);
   } catch (error) {
     if (error instanceof CommanderError) {
+      if (arguments_.includes("--json")) {
+        writeJson(context, {
+          error: {
+            code: error.code || "DXC_CLI_OPTIONS_INVALID",
+            message: error.message,
+            retryable: false
+          }
+        });
+      }
       context.setExitCode(error.exitCode);
       return;
     }