@follenfang/fupload 0.0.12 → 0.0.15

package/fupload/SKILL.md

@@ -2,7 +2,7 @@
 name: fupload
 description: Explicit author-publishing workflow for World of Warcraft plugins, configuration shares, and WA/strings on NewBeeBox, NetEase DD, CurseForge, Heybox Workshop, and ModUs.Creator, including local Creator login reuse and plugin ZIP publishing. Use only when the user explicitly invokes `$fupload`, explicitly asks to use the Fupload Skill, or loads this Skill by path. Do not trigger from ordinary mentions of publishing, NewBeeBox, DD, CurseForge, Heybox, ModUs, plugins, configurations, or WA.
 metadata:
-  version: "0.0.12"
+  version: "0.0.15"
 ---
 
 # Fupload

package/fupload/references/modus.md

@@ -35,31 +35,42 @@ The complete project model includes `project_id`, `name`, `alt_name`, `summary`,
 
 ### Project field contract
 
-| CLI/state field | Creator wire/readback | JSON type | Required/default | Source and state dependency | Successful readback |
-| --- | --- | --- | --- | --- | --- |
-| `schema` | none | string | required by every write document | versioned CLI envelope | not sent |
-| `project_id` | `projectId` | positive integer | edit/delete required; create assigned by server | outer write document, not form state | `projectId` |
-| `game` | none confirmed | object or non-empty string | required; no default | `choose_game`; object needs a stable ID/key | preserved in state snapshot |
-| `name` | `name` | non-empty string | required; no default | `basic_info` | `name` |
-| `alt_name` | `altName` | string/null | optional; omitted preserves value | `basic_info`; edit clear uses `<null>` | `altName` |
-| `summary` | `summary` | non-empty string | required; no default | `basic_info` | `summary` |
-| `categories` | comma-delimited `categories` | 1-5 positive integer IDs | required; no default | service `categories` enum; `basic_info`; ID 998 requires BigFoot only | comma-delimited `categories` |
-| `publish_platforms` | derived `synchronizationType` | non-empty unique enum array | required; no default | `basic_info`; values `modus`, `bigfoot`, or both | integer `1`, `2`, or `3` |
-| `synchronization_type` | `synchronizationType` | integer | derived; caller value is replaced | derived from platform toggles in `basic_info` | `synchronizationType` |
-| `required_tier_id` | `requiredTierId` | nullable positive integer input | omitted means no tier | service `subscription-tiers` enum; current result is `[]`; BigFoot requires no tier | omitted from the wire for no tier |
-| `repo_url` | `repoUrl` | string/null | optional; omitted preserves value | `basic_info`; create empty is omitted; edit clear uses `<null>` | `repoUrl` |
-| `logo_base64` | `screenshotBase64sReqs.screenshotBase64s` | base64 string | optional; default empty string | create-only `basic_info`; sent as `logo.webp` | server-managed `logo` path |
-| `screenshot_base64s` | same create logo payload | string array | compatibility alias; default empty array | create-only `basic_info`; first value is used when `logo_base64` is absent | server-managed `logo` path |
-| `license.type` | `license` JSON string `type` | non-empty string | required; no default | separate `license` step | parsed `license` |
-| `license.holder/year/content` | fields inside `license` JSON string | non-empty strings | optional except custom content | separate `license` step; custom requires content | parsed `license` |
-| `description` | `description` | string/null | edit-only; omitted preserves value | edit `basic_info`; clear uses `<null>` | `description` |
-| `required_dependencies` | `requiredDependencies` | string/null | edit-only; omitted preserves value | edit `basic_info`; clear uses `<null>`; dependency query is dynamic | `requiredDependencies` |
-| `images` | `images` | non-negative integer | edit-only; required with `image_ops` | edit `basic_info` | `images` count |
-| `image_ops` | `imagesOps` | operation array | edit-only; no default | edit `basic_info`; upload requires base64, delete forbids it | `images` count |
-| `cf_url` | `cfUrl` | string/null | read-only | known detail field may be preserved in a snapshot but is never sent | `cfUrl` |
-| `logo` | `logo` | string/object/null | read-only | server-managed detail field; create uses `logo_base64` instead | `logo` |
-| `status` | `status` | integer/null | read-only | server-managed detail field | `status` |
-| `project_state` | none | object | required and must be `complete` | wraps `choose_game -> basic_info -> license`; unknown nested fields are rejected | local resumable snapshot |
+The table below is the A2 field inventory. `C` means create, `U` update/edit,
+and `D` delete. The current CLI's Creator endpoints are `C POST
+/game/data/author/project/release`, `U POST /game/data/author/project/update`,
+`D POST /game/data/author/project/delete/project/{projectId}`, and readback is
+`GET /game/data/author/project/detail/{projectId}` unless stated otherwise.
+
+| CLI/state field | Creator wire name | JSON type | Required/default | Enum/source | State/linkage rule | Write endpoint | Detail/readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `schema` | not sent | string | required for each CLI write | schema registry | must match action | local validation only | not applicable |
+| `project_id` | `projectId` | positive integer | U/D required; C server-assigned | project list/detail | outer document, not `project_state` | U/D | `projectId` |
+| `game` | not sent by current CLI | object or non-empty string | required; no default | Creator game selector | first `choose_game` state; stable key/ID required | local state only | `project_state.game`; server version binding is separate |
+| `name` | `name` | non-empty string, max 120 | required; no default | free text | `basic_info` | C/U | `name` |
+| `alt_name` | `altName` | string/null, max 120 | optional; omitted preserves | free text | U clear becomes literal `<null>` | C/U | `altName` |
+| `summary` | `summary` | non-empty string, max 500 | required; no default | free text | `basic_info` | C/U | `summary` |
+| `categories` | comma-delimited `categories` | array of 1-5 positive IDs | required; no default | `GET /plugin/list/Categories` | ID `998` forces BigFoot-only | C/U | comma-delimited `categories` / category detail |
+| `publish_platforms` | derives `synchronizationType` | unique array | required; no default | fixed `modus`, `bigfoot` | at least one; `[modus]=>1`, `[bigfoot]=>2`, both `=>3` | C/U through derived field | `synchronizationType` |
+| `synchronization_type` | `synchronizationType` | integer `1..3` | derived; caller value replaced | derived from `publish_platforms` | must equal platform selection | C/U | `synchronizationType` |
+| `required_tier_id` | `requiredTierId` | positive integer/null | default none: C omits; U null sends `<null>` | `GET /user/author/subscription/tiers` | BigFoot branch requires none | C/U | `requiredTierId`; absence is no-tier |
+| `repo_url` | `repoUrl` | string/null, max 500 | optional | free URL text | C empty omitted; U clear sends `<null>` | C/U | `repoUrl` |
+| `logo_base64` | `screenshotBase64sReqs.screenshotBase64s` | non-empty base64 string | C optional; default `""` | local image | C only; companion name fixed `logo.webp` | C | server-managed `logo` path |
+| `screenshot_base64s` | same create logo member | base64 string array | compatibility alias; default `[]` | local images | current CLI consumes only first item when `logo_base64` absent | C | server-managed `logo` path |
+| `license.type` | JSON-string `license.type` | non-empty string | required | Creator license selector | final `license` state | C/U | parse JSON-string `license` |
+| `license.holder` | JSON-string `license.holder` | non-empty string | optional | free text | license step | C/U | parse JSON-string `license.holder` |
+| `license.year` | JSON-string `license.year` | non-empty string | optional | free text | license step | C/U | parse JSON-string `license.year` |
+| `license.content` | JSON-string `license.content` | non-empty string | custom license requires content | free text | license step/custom branch | C/U | parse JSON-string `license.content` |
+| `description` | `description` | string/null, max 100000 | U only; omitted preserves | rich-text editor | clear sends `<null>` | U | `description` |
+| `required_dependencies` | `requiredDependencies` | string/null, max 4000 | U only; omitted preserves | `POST /game/data/author/project/dependency/query` | clear sends `<null>` | U | `requiredDependencies` |
+| `images` | `images` | non-negative integer | U required with `image_ops` | current detail count | count must agree with requested operations | U | `images` |
+| `image_ops[].op` | `imagesOps[].op` | enum string | U operation required | fixed `upload`, `delete`, `rename` | upload/delete use `name`; rename uses `from/to` | U | `images`, logo/image paths |
+| `image_ops[].name` | `imagesOps[].name` | non-empty string | upload/delete required | current object name | forbidden for rename | U | resulting image path/count |
+| `image_ops[].base64` | `imagesOps[].base64` | base64 string | upload required; delete forbidden | local image | upload only | U | resulting image path/count |
+| `image_ops[].from/to` | `imagesOps[].from/to` | non-empty strings | rename required | current/target name | rename only | U | resulting image paths |
+| `cf_url` | `cfUrl` | string/null | read-only | server | never sent | none | `cfUrl` |
+| `logo` | `logo` | string/object/null | read-only | server | C uses base64 input instead | none | `logo` |
+| `status` | `status` | integer/null | read-only | server status enum | delete/publication state | none | `status` |
+| `project_state` | not sent | object | required; state=`complete` | CLI state machine | exact order `choose_game -> basic_info -> license`; unknown fields rejected | local validation only | persisted CLI snapshot |
 
 Create-only, edit-only, and read-only fields may be preserved in a resumable
 snapshot, but `_project_wire` sends only fields supported by the selected API
@@ -82,8 +93,9 @@ named `logo.webp`; `screenshot_base64s` remains the compatibility alias.
 Edit sends only changed Creator fields plus `projectId`. `description`, cleared
 `repo_url`, cleared `alt_name`, null `required_tier_id`, and cleared
 `required_dependencies` use Creator's literal `<null>` marker. `image_ops` maps
-to `imagesOps` entries with `op` (`upload` or `delete`), `name`, and upload-only
-`base64`; `images` is required with image operations. `cf_url`, returned `logo`,
+to `imagesOps` entries with `op` (`upload`, `delete`, or `rename`), `name` and
+upload-only `base64`, or rename-only `from`/`to`; `images` is required with
+image operations. `cf_url`, returned `logo`,
 and `status` are read-only/server-managed. `publish_platforms` and `game` are
 local form state, not project update keys.
 `project_state` is a resumable `choose_game` -> `basic_info` -> `license` ->
@@ -101,6 +113,35 @@ Deletion requires `confirm: "DELETE"`.
 `project_id`, `file_id`, `version`, `type`, `supported_game_versions`, `md5`,
 `zip_size`, `unzip_size`, `path`, `toc_version`, `changelog`, and `file`.
 `transaction_log` optionally selects the redacted transaction record path.
+
+### Creator release/version field contract
+
+This is the A4 inventory. Metadata create uses `POST
+/game/data/author/project/upload`; metadata update/edit uses `POST
+/game/data/author/project/file/update`; delete uses `POST
+/game/data/author/project/delete`; detail is `GET
+/game/data/author/project/file/detail/{fileId}` and history/list is `POST
+/game/data/author/project/file/list`. File-ID allocation and the binary object
+PUT are separate stages.
+
+| CLI field | Creator wire name | JSON type | Required/default | Enum/source | State/linkage rule | Write endpoint | Detail/readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `schema` | not sent | string | required | schema registry | must match release action | local validation | not applicable |
+| `project_id` | `projectId` | positive integer | all release writes required | project detail | parent project must exist | metadata create/update/delete; signature path | `projectId` in list/detail |
+| `file_id` | `fileId` | positive integer | update/edit/delete required; upload allocates | `GET /game/data/author/project/fileId/{projectId}` | allocated ID is used by signature; create metadata omits it | update/delete/signature | `id`/`fileId` in release detail |
+| `version` | `version` | non-empty string, max 120 | create/upload required after ZIP preflight | ZIP `.toc` plus caller label | caller value preserved | metadata create/update | `version` |
+| `type` | `type` | non-empty string, max 40 | create/upload required | Creator release-type choices/API | must be a server-supported value | metadata create/update | `type` |
+| `supported_game_versions` | `supportedGameVersionsReqs[]` | non-empty object array | required; ZIP-derived | installed `.toc` `Interface` values and game config | each entry requires string `gameVersion` and `server`; explicit caller value must match ZIP | metadata create/update | `supportedGameVersionsReqs`/version compatibility rows |
+| `md5` | `md5` | hex string, max 64 | derived from exact ZIP bytes | local ZIP preflight | must describe bytes later PUT | metadata create/update | `md5` |
+| `zip_size` | `zipSize` | non-negative integer | derived | local ZIP stat | must describe exact ZIP | metadata create/update | `zipSize` |
+| `unzip_size` | `unzipSize` | non-negative integer | derived | ZIP central directory | bounded by ZIP preflight | metadata create/update | `unzipSize` |
+| `path` | `path` | string, max 500 | metadata optional | Creator/object response | local path is never binary upload | metadata create/update | `path` |
+| `toc_version` | `tocVersion` | string, max 80 | derived | every ZIP `.toc` `Interface` | incompatible/missing/mixed values fail before write | metadata create/update | `tocVersion` |
+| `changelog` | `changelog` | string/null, max 10000 | optional | free text | omitted/empty behavior is action-specific | metadata create/update | `changelog` |
+| `file` | not in JSON; raw bytes | local path | create/upload required | local filesystem | valid ZIP, max 200 MiB; bytes PUT only after metadata/signature | signed URL from `GET .../upload/signature/{projectId}/{fileId}`, then HTTP `PUT` | object upload status plus release detail hashes/sizes |
+| `transaction_log` | not sent | local path string | optional | caller | redacted durable stage record | local record only | transaction JSON |
+| derived signature URL | not returned to caller | URL | required for PUT | signature endpoint | query/userinfo redacted and never persisted | object-store `PUT application/zip` | HTTP status only; then release detail |
+
 Successful records include the completed `file_id`, metadata, signature, and
 binary upload stages that ran; failed records include `failed_stage`, a redacted
 error, and whether the ZIP was retained. The transaction record is established
@@ -134,26 +175,55 @@ The configuration surface uses:
 * `POST /system/user/share/create`, `PUT /system/user/share/update`,
   `DELETE /system/user/share/delete/{id}`
 
-Share write fields are `share_id`, `addons_id`, `account_name`, `backup_id`,
-`content`, `content_text`, `image_url`, `is_paid`, `is_public`, `price`,
-`share_type`, `tags`, `title`, `exclude_wtf`, `role_name`,
-`required_tier_id`, `sub_type`, optional low-level `platform` /
-`synchronization_type`, and
-`server_type`. `exclude_wtf` is a binary state: when it is `1`, account and
-role are empty; when it is `0`, an account is required and a selected role is
-optional. `sub_type=0` is the normal subscription mode; `sub_type=1` is the
-season mode. Both modes allow the "none" tier represented by null or omitted
-`required_tier_id`; Fupload omits `requiredTierId` from the wire in that branch.
-A selected tier must be a positive ID returned by the service. The official
-configuration form's submit object omits `platform` and `synchronizationType`.
-Fupload's low-level API surface nevertheless exposes the backend fields: list
-defaults `platform=0`, create defaults `platform=1` and
-`synchronizationType=1`, and explicit low-level values are passed through.
-`backup_id`, content, cover, title, and tags are required for create;
-update is presence-aware and uses `share_id`. `addons_id` must be non-empty,
-the trimmed title must contain at least 6 characters, tags contain 1 to 3
-comma-delimited IDs, and plain `content_text` must contain more than 20
-characters.
+### Configuration list/filter contract
+
+| CLI field | Wire/header name | JSON type | Required/default | Enum/source | State/linkage rule | Request endpoint | Readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `page_num` | `pageNum` | positive integer | default `1` | caller | list only | `POST /system/user/share/list` | pagination response |
+| `page_size` | `pageSize` | positive integer | default `20` | caller | list only | same | pagination response |
+| `server_type` / `server` | body `server`; header `X-Server-Type` | integer | local selected Build, fallback `0` | fixed Build table below | body and header must be identical | list; header on all config calls | list/detail records by Build |
+| `mine` | `mine` | boolean | default `false` | fixed boolean | list only | list | returned rows |
+| `share_type` | `shareType` | non-negative integer | default `0` | service/UI | list filter | list | returned rows |
+| `platform` | `platform` | integer | list default `0` | service; write choices `1`,`3` | not Build | list | `platform` |
+| `keyword` | `keyword` | string | optional | caller | list filter | list | returned rows |
+| `status` | `status` | integer | optional | service status values | list filter | list | `status` |
+| `tags` | `tags` | string | optional | `config-tags` static rows | list filter | list | tags on rows/detail |
+| `order_by` | `orderBy` | service value | optional | service/UI | list sort | list | result order |
+| `is_public` | `isPublic` | integer `0/1` | optional | fixed boolean | list filter | list | `isPublic` |
+| `is_paid` | `isPaid` | integer `0/1` | optional | fixed boolean | list filter | list | `isPaid` |
+
+### Configuration write field contract
+
+This is the A6 inventory. Create is `POST /system/user/share/create`, update/edit
+is `PUT /system/user/share/update`, delete is `DELETE
+/system/user/share/delete/{id}`, and readback is `POST
+/system/user/share/detail` with `{"shareIds":[id]}`. Every call carries the
+selected Build in `X-Server-Type`.
+
+| CLI field | Wire name | JSON type | Required/default | Enum/source | State/linkage rule | Write endpoint | Detail/readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `schema` | not sent | string | required | schema registry | must match action | local validation | not applicable |
+| `share_id` | `id` / path ID | opaque decimal string | U/D required; C server-assigned | create response/detail | preserve as string | U/D | detail `id` |
+| `addons_id` | `addonsId` | string, max 10000 | C required | selected backup `knownAddons.projectids` | must correspond to backup selection | C/U | `addonsId` |
+| `backup_id` | `backupId` | positive integer | C required | `GET /system/user/backup/list` | account/role choices derive from this backup | C/U | `backupId` |
+| `account_name` | `accountName` | string/null, max 120 | conditional | selected backup `wtfAccounts` | required and non-empty when `exclude_wtf=0`; empty when `1` | C/U | `accountName` |
+| `role_name` | `roleName` | string/null, max 120 | optional in schema; UI requires selection when chosen account has roles | backup account roles | empty when `exclude_wtf=1` | C/U | `roleName` |
+| `exclude_wtf` | `excludeWtf` | integer `0/1` | C required; provider normalizes missing U to `0` | fixed boolean | `1` forbids account/role; `0` requires account | C/U | `excludeWtf` |
+| `content` | `content` | non-empty HTML string | C required | rich-text editor | editor image keys are uploaded before submit | C/U | `content` hash/length, not raw evidence |
+| `content_text` | `contentText` | non-empty string | C required; trimmed length >20 | derived editor plain text | must correspond to `content` | C/U | `contentText` hash/length |
+| `image_url` | `imageUrl` | non-empty comma-delimited key string, max 1000 | C required; 1-10 images in 1.2.16 UI | `modus media upload` results | trim/filter keys; first is cover; delete/reorder updates CSV, no blob-delete API observed | C/U | `imageUrl` |
+| `is_paid` | `isPaid` | integer `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `isPaid` |
+| `price` | `price` | number `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `price` |
+| `is_public` | `isPublic` | integer `0/1` | CLI optional; 1.2.16 form defaults public | fixed boolean | visibility/soft-delete state | C/U | `isPublic` |
+| `share_type` | `shareType` | integer `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `shareType` |
+| `tags` | comma-delimited `tags` | string of 1-3 IDs | C required | `modus options config-tags` | no empty/duplicate positions | C/U | `tags` and/or `modusShareTags` |
+| `title` | `title` | string, max 120 | C required; trimmed length >=6 | free text | none | C/U | `title` |
+| `required_tier_id` | `requiredTierId` | positive integer/null | default none: omitted | normal subscription or season option | selected tier disables BigFoot platform; ID from active options | C/U | `requiredTierId`; absence means none |
+| `sub_type` | `subType` | integer `0/1` | helper default `0` | fixed normal=`0`, season=`1` | determines tier option source | C/U | `subType` |
+| `platform` | `platform` | integer `1/3` | provider C/U default `1` | ModUs=`1`, ModUs+BigFoot=`3` | at least ModUs; tier selection forces `1` | C/U | `platform` |
+| `synchronization_type` | `synchronizationType` | integer `1/3` | C defaults from platform; U omitted unless explicit | derived from platform | C should equal platform; 1.2.16 config U form omits it | C/U | `synchronizationType` if returned |
+| `server_type` | header `X-Server-Type` | integer `0..4` | local selected Build or fallback `0` | fixed Build table | not `platform`; applies to target namespace | C/U/D/detail | record returned under same Build |
+| `confirm` | not sent | literal `"DELETE"` | D required | fixed CLI guard | destructive action only | local guard then D | detail `status=4,isPublic=0`; absent from active list |
 
 Backup rename uses `backup_id`, `backup_name`, and `server_type`; backup
 deletion uses `backup_id`, `confirm`, and `server_type`.
@@ -168,23 +238,117 @@ String articles use:
 * `POST /system/user/import/version/publish`
 * `DELETE /system/user/import/version/delete?versionId={id}`
 
-String fields are `import_id`, `code_text`, `content`, `addons_id`,
-`content_text`, `file_path`, `image_url`, `is_paid`, `is_public`, `price`,
-`share_type`, `support_addon`, `tags`, `title`, `version`, `required_tier_id`,
-`sub_type`, and `server_type`. The client requires a supported addon,
-non-empty rendered/plain article content, cover, title, tags, and version.
-`sub_type` and `required_tier_id` follow the same normal/season state machine.
-The current account uses the no-tier branch, so `requiredTierId` is absent from
-the wire. The official string form's submit object omits `platform` and
-`synchronizationType`; Fupload's low-level API surface defaults list
-`platform=0` and create/update `platform=1` / `synchronizationType=1`, while
-preserving explicit values.
-The trimmed title must contain at least 6 characters, tags contain 1 to 3
-comma-delimited IDs, plain `content_text` must contain more than 20 characters,
-and `file_path` is the client's fixed empty string. Version history is separate
-from article metadata:
-`version-publish` takes `import_id`, `version`, `code_text`, and optional
-`changelog`; `version-delete` takes `version_id` and `confirm: "DELETE"`.
+### WA/string list/filter contract
+
+| CLI field | Wire/header name | JSON type | Required/default | Enum/source | State/linkage rule | Request endpoint | Readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `page_num` | `pageNum` | positive integer | default `1` | caller | list only | `POST /system/user/import/list` | pagination response |
+| `page_size` | `pageSize` | positive integer | default `10` | caller | list only | same | pagination response |
+| `server_type` / `server` | body `server`; header `X-Server-Type` | integer | local Build, fallback `0` | fixed Build table | body/header must match | list; header on every WA call | list/detail records by Build |
+| `mine` | `mine` | boolean | default `false` | fixed boolean | list only | list | rows |
+| `status` | `status` | integer | default `1` | service status enum | list only | list | `status` |
+| `platform` | `platform` | integer | list default `0` | service; write `1/3` | not Build | list | `platform` |
+| `keyword` | `keyword` | string | optional | caller | list filter | list | rows |
+| `support_addon` | `supportAddon` | string | optional | `wa-support-addons` static rows | list filter | list | `supportAddon` |
+| `tags` | `tags` | string | optional | `wa-tags` static rows | list filter | list | tags on rows/detail |
+| `is_paid` | `isPaid` | integer `0/1` | optional | fixed boolean | list filter | list | `isPaid` |
+| `order_by` | `orderBy` | service value | optional | service/UI | list sort | list | result order |
+
+### WA/string write field contract
+
+This is the A8 inventory. Create is `POST /system/user/import/create`,
+update/edit is `POST /system/user/import/update`, delete is `DELETE
+/system/user/import/delete/{id}`, and readback is `POST
+/system/user/import/detail` with `{"importIds":[id]}`.
+
+| CLI field | Wire name | JSON type | Required/default | Enum/source | State/linkage rule | Write endpoint | Detail/readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `schema` | not sent | string | required | schema registry | must match action | local validation | not applicable |
+| `import_id` | `id` / path ID | opaque decimal string | U/D required; C server-assigned | create response/detail | preserve as string | U/D | detail `id` |
+| `support_addon` | `supportAddon` | non-empty string, max 120 | C required | `modus options wa-support-addons` | chosen name must resolve to an addon row | C/U | `supportAddon` |
+| `addons_id` | `addonsId` | non-empty string, max 10000 | C required | ID on selected support-addon row | must match `support_addon` | C/U | `addonsId` |
+| `code_text` | `codeText` | non-empty string | C required; version publish required | WA/string input | create version and later version payload must be deliberate | C/U/version publish | current top-level `codeText` is not echoed; after the next publish, the previous current value is read from `versionList[].codeText` |
+| `version` | `version` | non-empty string, max 120 | C required; U form preserves current | free text/version list | new immutable versions use version-publish | C/U/version publish | `version`, `versionList[].version` |
+| `content` | `content` | non-empty HTML string | C required | rich-text editor | editor images uploaded before submit | C/U | `content` hash/length |
+| `content_text` | `contentText` | non-empty string | C required; trimmed length >20 | derived plain text | must correspond to HTML content | C/U | `contentText` hash/length |
+| `file_path` | `filePath` | literal empty string | optional in CLI; UI fixed `""` | fixed client behavior | only `""` accepted | C/U | `filePath` |
+| `image_url` | `imageUrl` | non-empty comma-delimited key string, max 1000 | C required; 1-10 images in 1.2.16 UI | `modus media upload` results | first key is cover; delete/reorder rewrites CSV, no blob-delete API observed | C/U | `imageUrl` |
+| `tags` | comma-delimited `tags` | string of 1-3 IDs | C required | `modus options wa-tags` | no empty positions | C/U | `tags` |
+| `title` | `title` | string, max 120 | C required; trimmed length >=6 | free text | none | C/U | `title` |
+| `is_paid` | `isPaid` | integer `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `isPaid` |
+| `price` | `price` | number `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `price` |
+| `is_public` | `isPublic` | integer `0/1` | CLI optional; 1.2.16 form fixes `1` | fixed boolean | soft-delete later forces private | C/U | `isPublic` |
+| `share_type` | `shareType` | integer `0` | CLI optional; 1.2.16 form fixes `0` | installed client fixed value | nonzero values fail before mutation | C/U | `shareType` |
+| `required_tier_id` | `requiredTierId` | positive integer/null | default none: omitted | normal/season tier options | selected tier disables BigFoot | C/U | `requiredTierId`; absence means none |
+| `sub_type` | `subType` | integer `0/1` | helper default `0` | normal=`0`, season=`1` | selects tier option source | C/U | `subType` |
+| `platform` | `platform` | integer `1/3` | C/U default `1` | ModUs=`1`, ModUs+BigFoot=`3` | at least ModUs; tier selection forces `1` | C/U | `platform` |
+| `synchronization_type` | `synchronizationType` | integer `1/3` | C/U defaults from platform | derived | 1.2.16 sends it on both C and U | C/U | `synchronizationType` |
+| `server_type` | header `X-Server-Type` | integer `0..4` | local Build or fallback `0` | fixed Build table | target namespace, not platform | C/U/D/detail/version | record under same Build |
+| `confirm` | not sent | literal `"DELETE"` | D required | fixed CLI guard | destructive action only | local guard then D | `status=4,isPublic=0`; absent active list |
+
+Version history is separate from article metadata:
+
+| CLI field | Wire name | JSON type | Required/default | Enum/source | State/linkage rule | Write endpoint | Detail/readback location |
+| --- | --- | --- | --- | --- | --- | --- | --- |
+| `import_id` | `importId` | opaque decimal string | publish required | article detail | parent must exist | `POST /system/user/import/version/publish` | `versionList[].importId`/parent detail |
+| `version` | `version` | non-empty string, max 120 | publish required | caller | expected immutable version label | same | `versionList[].version` |
+| `code_text` | `codeText` | non-empty string | publish required | caller | content hash/length must match evidence | same | current top-level value is not echoed; publish the next version, then read the previous value from `versionList[].codeText` |
+| `changelog` | `changelog` | string, max 10000 | optional; empty omitted | caller | version-specific | same | `versionList[].changelog` |
+| `version_id` | query `versionId` | opaque identifier | delete required | `versionList[].versionId`/`id` | target exact version | `DELETE /system/user/import/version/delete?versionId={id}` | version absent from refreshed list |
+| `confirm` | not sent | literal `"DELETE"` | version delete required | fixed CLI guard | destructive action only | local guard | refreshed `versionList` |
+
+## Image upload and delete contract
+
+There are three different image surfaces; they must not be collapsed into one
+generic "image URL" test.
+
+| Surface/CLI field | Official 1.2.16 wire | Input/preprocessing | Required headers | Response/reference | Delete behavior | Current CLI status/readback |
+| --- | --- | --- | --- | --- | --- | --- |
+| Creator logo: `logo_base64` / `screenshot_base64s` | C project JSON `screenshotBase64sReqs:{name:"logo.webp",screenshotBase64s:<base64>}` | prepared WebP base64 | Creator JSON auth | project `logo` path | U `imagesOps` upload/delete `logo.webp` | live create, replace, delete, restore and detail readback passed |
+| Creator screenshots | U project JSON `imagesOps` | prepared WebP base64 for upload; names for delete/rename | Creator JSON auth | project `images` count | upload/delete use `name`; rename uses `from`/`to` | two-image upload, rename, single delete and final delete all passed with detail counts |
+| Config cover/gallery: `image_url` | `POST /game/data/file/upload/file/image`, multipart field exactly `file`; one request per image | original local file; up to 10 comma-delimited references | raw `Authorization`, optional `X-Device-Id`; no `X-Server-Type` | key priority `cosStoreKey`, `cosStoreUrl`, `key`, then pathname of `downloadUrl/url/fileUrl`; CSV first key is cover | remove/reorder key in CSV and submit config U; no object-delete endpoint observed | two distinct local images uploaded with byte hashes; returned keys passed config C/U detail readback |
+| WA cover/gallery: `image_url` | same endpoint and multipart `file`; one request per image | original local file; up to 10 comma-delimited references | same; no `X-Server-Type` | same key priority and CSV ordering | remove/reorder key in CSV and submit WA U; no object-delete endpoint observed | two distinct local images uploaded with byte hashes; returned keys passed WA C/U detail readback |
+
+The 1.2.16 upload helper is `FormData.append("file", File)` and sets
+`Content-Type: multipart/form-data`; the browser adapter supplies the boundary,
+filename, and part MIME. The CLI multipart helper supplies a generated boundary,
+uses the local basename, derives MIME through `mimetypes.guess_type`, and fixes
+`.webp` to `image/webp`. A key-only response is accepted and its display URL is
+synthesized. The CLI does not reproduce the UI's optional client-side image
+compression; the final implementation's original-file upload was accepted by
+the live service and the returned object keys were used in real C/U requests.
+
+## Build and linked-state regression matrix
+
+This is the A10 branch inventory. Positive rows were sent/read back where the
+installed clients expose a writable branch; negative rows fail locally before
+remote mutation.
+
+| Branch | Positive cases | Negative case | Current implementation/gate |
+| --- | --- | --- | --- |
+| Build | `0 retail`, `1 classic_era`, `2 classic`, `3 classic_titan`, `4 anniversary`; for each, backup/config/WA list sends identical body `server` and `X-Server-Type` | `<0`, `>4`, non-integer | `_build` and schema reject outside `0..4`; all five live list triplets passed |
+| Creator publish platform | ModUs-only `1`, BigFoot-only `2`, both `3` | empty, unknown, duplicate | state machine covers at-least-one/enum/duplicate |
+| Creator category | 1-5 IDs from live categories | empty, >5, unknown/non-ID; `998` with ModUs/both | local count/linkage plus write preflight membership against `plugin/list/Categories`; real unknown positive ID fails before project mutation |
+| Config/WA platform | omitted defaults ModUs `1`; explicit `1`; explicit ModUs+BigFoot `3` | `0`, `2`, other; mismatched platform/synchronization pairs | schema choices cover numeric invalids; write normalization requires the pair to be present together and equal; it is distinct from Build |
+| Tier mode | normal `subType=0`, season `1`; each allows none by omitting `requiredTierId`; selected tier is positive dynamic ID | zero/negative/non-ID; ID absent from current normal/season options | write preflight reads the selected tier option set and rejects unknown IDs before mutation; the tested account exposes no tier, so real positive writes cover the no-tier branch |
+| Tier + platform | no-tier allows platform `1/3`; selected tier forces platform `1` in UI | selected tier with platform/synchronization `3` | schema rejects tier+BigFoot; current account's live options are empty so real writes use the confirmed no-tier branch |
+| Config WTF | `exclude_wtf=1` with empty account/role; `0` with an account and, when available, one of its roles | `1` with account/role; `0` without account; backup/account/role absent from the selected Build hierarchy; missing role when the account has roles | write preflight reads the selected Build backup hierarchy and rejects every invalid linkage before mutation |
+| Tags | 1, 2, and 3 dynamic IDs | 0, 4, empty/duplicate CSV position, ID absent from the current config/WA tag options | schema covers count/shape/duplicates; write preflight binds every ID to the selected Build's current config/WA options before mutation |
+| Paid/price | installed 1.2.16 forms submit fixed free `is_paid=0,price=0,share_type=0` | paid value, positive/negative price, or nonzero share type | schema/write preflight enforce the installed UI's fixed free branch; real field cycles cover exactly those values and do not claim an unavailable paid branch |
+| Visibility | public `1`, private `0` where UI exposes it | other integer | schema enum covered; WA 1.2.16 form fixes public |
+| Config/WA image CSV | 1 and 10 keys; first key is cover | empty C, >10, empty CSV entries, upload business code >=400 | schema enforces 1-10 non-empty references; media error and live C/U readback covered |
+| Creator image ops | upload, delete, rename with matching required members | missing/extra member, upload without base64, delete with base64 | local validation plus live upload/rename/delete/readback covered |
+
+### Acceptance coverage crosswalk
+
+| Acceptance item | Matrix/evidence required here | Documentation status |
+| --- | --- | --- |
+| A2/A3 | Creator project table plus per-field C/U/readback/restore and logo/screenshot/image operations | `analyze/modus-creator/iteration4-live-regression.json`: passed, 140 steps; SHA-256 `7C7BE87959024A1431BC154B13830178815FFF32D23D55E4EAAED75B96B56E4B`; 126 positive exits `0`, 14 expected negative/not-found exits `2`, and unknown positive category membership fails before project mutation; CDN bytes matched local image SHA-256 after create/replace/delete/restore, then final project deletion made the restored logo return 404 |
+| A4 | allocation, metadata, two distinct ZIP PUTs, detail, type/version/path edit/restore and cleanup | same evidence; ZIP SHA-256 and changed MD5/size recorded |
+| A5-A9 | five Builds, config/WA per-field cycles, media upload, version rollover/readback/delete and cleanup | `analyze/modus/live-main-crud-builds-20260826.json`: passed, 209 steps/40 field checks; SHA-256 `298CD33D8E9B72E5AE7B63B6A82627622493CB2DC7476AFE61434E395312BB78`; 191 positive exits `0` and 18 negative exits `2`/`validation_error`; four media uploads carry nonempty byte/SHA-256 evidence for two different binaries, while account/role evidence stores presence only |
+| A10 | linked-state table above, dynamic options and invalid combinations | live option selection plus schema/negative regression passed |
+| A11 | commands, redacted input/response, exit status and content/image/ZIP digest evidence | both evidence records retain hashes instead of credentials or raw content |
+| A19 | complete field names, wire names, types, defaults, sources, dependencies, endpoints and readback locations | matrices in this document |
 
 Both main-client modules support explicit `confirm: "DELETE"` on destructive
 commands. List operations send only server fields (`pageNum`, `pageSize`,

package/fupload/scripts/fupload_cli/__init__.py

@@ -1,3 +1,3 @@
 """Fupload Python CLI."""
 
-__version__ = "0.0.12"
+__version__ = "0.0.15"

package/fupload/scripts/fupload_cli/cli.py

@@ -248,7 +248,13 @@ def _modus_tree(platforms: argparse._SubParsersAction) -> None:
     )
     groups = root.add_subparsers(dest="resource_command", required=True)
     session = groups.add_parser("session", help="Local authentication diagnostics").add_subparsers(dest="action_command", required=True)
-    _read_leaf(session, "doctor", "Check the local ModUs.Creator token store, DPAPI decryption, and authenticated API readiness without exposing credentials.", platform="modus", resource="session", action="doctor")
+    doctor = _read_leaf(session, "doctor", "Check one local ModUs token store, DPAPI decryption, and authenticated API readiness without exposing credentials.", platform="modus", resource="session", action="doctor")
+    doctor.add_argument(
+        "--client",
+        choices=("creator", "main"),
+        default="creator",
+        help="Authenticated client session to diagnose (technical default: creator).",
+    )
     _read_leaf(groups, "builds", "List the fixed ModUs WoW Build ids, codes, names, and the locally selected current Build.", platform="modus", resource="builds", action="list")
 
     account = groups.add_parser("account", help="ModUs author account and statistics").add_subparsers(dest="action_command", required=True)
@@ -303,6 +309,9 @@ def _modus_tree(platforms: argparse._SubParsersAction) -> None:
     leaf = _read_leaf(plugin, "get", "Read one ModUs plugin release detail.", platform="modus", resource="plugin", action="get"); leaf.add_argument("--project-id", type=_positive, required=True); leaf.add_argument("--file-id", type=_positive, required=True); _modus_server_flag(leaf)
     leaf = _read_leaf(plugin, "versions", "List releases for one ModUs plugin project.", platform="modus", resource="plugin", action="versions"); leaf.add_argument("--project-id", type=_positive, required=True); _modus_server_flag(leaf); _page_flags(leaf)
 
+    media = groups.add_parser("media", help="ModUs main-client image uploads").add_subparsers(dest="action_command", required=True)
+    _write_leaf(media, "modus", "media", "upload", "Upload one local image and return its reusable ModUs object key and URL.")
+
     config = groups.add_parser("config", help="ModUs main-client configuration shares and backups").add_subparsers(dest="action_command", required=True)
     for action, text in (("create", "Create a configuration share from an existing ModUs cloud backup."), ("update", "Update a configuration share."), ("edit", "Edit a configuration share."), ("delete", "Delete one explicitly confirmed configuration share."), ("backup-edit", "Rename an existing ModUs cloud backup."), ("backup-delete", "Delete one explicitly confirmed ModUs cloud backup.")):
         _write_leaf(config, "modus", "config", action, text)
@@ -378,7 +387,7 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             if args.dry_run:
                 write_output(platform, operation, _dry_run_data(doc, schema.name), dry_run=True)
                 return 0
-            provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider(main_session=resource in ("config", "wa")))))
+            provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider(main_session=resource in ("media", "config", "wa")))))
             try:
                 if platform == "dd":
                     data = provider.execute_write(resource, action, doc, getattr(args, "session", None))
@@ -391,7 +400,10 @@ def main(argv: Optional[Sequence[str]] = None) -> int:
             write_output(platform, operation, data)
             return 0
         modus_doctor = platform == "modus" and resource == "session" and action == "doctor"
-        provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider(authenticate=not modus_doctor, main_session=resource in ("addon", "plugin", "config", "wa", "builds")))))
+        modus_main_session = resource in ("addon", "plugin", "config", "wa", "builds") or (
+            modus_doctor and getattr(args, "client", "creator") == "main"
+        )
+        provider = NewBee() if platform == "newbee" else (DD() if platform == "dd" else (Blackbox() if platform == "blackbox" else (CurseForge() if platform == "curseforge" else _modus_provider(authenticate=not modus_doctor, main_session=modus_main_session))))
         try:
             if platform == "dd":
                 data = provider.execute_read(resource, action, args, getattr(args, "session", None))

package/fupload/scripts/fupload_cli/dd_broker.py

@@ -282,6 +282,31 @@ def _load_live_state() -> Optional[Dict[str, Any]]:
     return value
 
 
+def _remove_session_state(path: Path, session_id: str, timeout: float = 5) -> bool:
+    deadline = time.monotonic() + timeout
+    while True:
+        try:
+            current = _read_json(path)
+        except FuploadError as exc:
+            if isinstance(exc.__cause__, FileNotFoundError):
+                return True
+            if not isinstance(exc.__cause__, OSError):
+                return False
+        else:
+            if current.get("session_id") != session_id:
+                return False
+            try:
+                path.unlink()
+                return True
+            except FileNotFoundError:
+                return True
+            except OSError:
+                pass
+        if time.monotonic() >= deadline:
+            return False
+        time.sleep(0.05)
+
+
 def doctor() -> Dict[str, Any]:
     dd_dir, signature = _dd_module().discover_dd_info()
     processes = running_dd_processes()
@@ -471,15 +496,23 @@ def status(session_id: Optional[str] = None) -> Dict[str, Any]:
 
 def stop(session_id: str) -> Dict[str, Any]:
     data = _send({"session_id": session_id, "command": "stop"}, timeout=30)
-    deadline = time.time() + 30
-    while time.time() < deadline and _load_live_state():
+    deadline = time.monotonic() + 30
+    while True:
+        try:
+            state = _load_live_state()
+        except FuploadError as exc:
+            if exc.kind != "session_error" or not isinstance(exc.__cause__, OSError):
+                raise
+        else:
+            if not state:
+                break
+        if time.monotonic() >= deadline:
+            raise FuploadError(
+                "DD task session acknowledged stop but did not finish cleanup",
+                kind="session_stop_failed",
+                stage="session",
+            )
         time.sleep(0.05)
-    if _load_live_state():
-        raise FuploadError(
-            "DD task session acknowledged stop but did not finish cleanup",
-            kind="session_stop_failed",
-            stage="session",
-        )
     result = dict(data or {})
     result["cleanup_complete"] = True
     return result
@@ -615,12 +648,7 @@ def _serve(startup_id: str) -> int:
         listener.close()
         if sidecar is not None:
             sidecar.__exit__(None, None, None)
-        try:
-            current = _read_json(state_path)
-            if current.get("session_id") == session_id:
-                state_path.unlink()
-        except (FuploadError, OSError):
-            pass
+        _remove_session_state(state_path, session_id)
 
 
 def main(argv: Optional[List[str]] = None) -> int:

package/fupload/scripts/fupload_cli/io.py

@@ -2,6 +2,8 @@
 
 from __future__ import annotations
 
+import base64
+import binascii
 import hashlib
 import json
 import sys
@@ -22,8 +24,10 @@ _SENSITIVE_KEYS = {
 }
 _RAW_CONTENT_KEYS = {
     "content", "wa_str", "t_wa_str", "raw_wtf", "wtf_zip", "download_url",
-    "import_string",
+    "import_string", "content_text", "contenttext", "code_text", "codetext",
+    "description", "changelog", "license_content", "licensecontent",
 }
+_BASE64_CONTENT_KEYS = {"base64", "logo_base64", "screenshot_base64s"}
 
 
 class _DuplicateKey(ValueError):
@@ -102,6 +106,18 @@ def sanitize_output(value: Any) -> Any:
                     "bytes": len(text),
                     "sha256": hashlib.sha256(text).hexdigest(),
                 }
+            elif normalized in _BASE64_CONTENT_KEYS and isinstance(item, str):
+                try:
+                    content = base64.b64decode(item, validate=True)
+                    encoding = "base64"
+                except (binascii.Error, ValueError):
+                    content = item.encode("utf-8")
+                    encoding = "utf-8"
+                result[str(key) + "_summary"] = {
+                    "bytes": len(content),
+                    "sha256": hashlib.sha256(content).hexdigest(),
+                    "source_encoding": encoding,
+                }
             else:
                 result[key] = sanitize_output(item)
         return result

package/fupload/scripts/fupload_cli/modus.py

@@ -25,11 +25,12 @@ from typing import Any, Dict, Mapping, Optional
 from .errors import FuploadError, ValidationError, redact
 from .state_machine import COMPLETE, ProjectStateMachine
 from .modus_zip import parse_modus_zip
-from .transport import json_request
+from .transport import json_request, multipart_request
 
 
 API_BASE = "https://app.modus.cool/api/"
 STATIC_API_BASE = "https://cdn.modus.cool/modus/client_static_api/"
+RESOURCE_BASE = "https://cdn.modus.cool/"
 TOKEN_PATH = Path(os.environ.get("LOCALAPPDATA", Path.home() / "AppData/Local")) / "ModUs.Creator" / "auth" / "token.dat"
 TOKEN_ENTROPY = b"ModUs.Creator.TokenStore.v1"
 MODUS_APPDATA = Path(os.environ.get("APPDATA", Path.home() / "AppData/Roaming")) / "modus"
@@ -110,6 +111,14 @@ def _category_ids(value: Any) -> Any:
     return output
 
 
+def _tag_filter(value: Any) -> list[str]:
+    values = value if isinstance(value, (list, tuple, set)) else str(value).split(",")
+    result = [str(item).strip() for item in values if str(item).strip()]
+    if not result:
+        raise ValidationError("tag filter must contain at least one ID", path="tags")
+    return result
+
+
 def _sync_type(value: Any) -> Any:
     if value is None:
         return 0
@@ -134,13 +143,22 @@ def _image_ops(value: Any) -> list[Dict[str, str]]:
         path = "image_ops[%d]" % index
         if not isinstance(item, Mapping):
             raise ValidationError("image operation must be an object", path=path)
-        unknown = sorted(set(item) - {"op", "name", "base64"})
+        op = item.get("op")
+        if op not in ("upload", "delete", "rename"):
+            raise ValidationError("image operation must be upload, delete, or rename", path=path + ".op")
+        allowed = {"op", "from", "to"} if op == "rename" else {"op", "name", "base64"}
+        unknown = sorted(set(item) - allowed)
         if unknown:
             raise ValidationError("unknown image operation field(s): %s" % ", ".join(unknown), path=path + "." + unknown[0])
-        op = item.get("op")
+        if op == "rename":
+            source, target = item.get("from"), item.get("to")
+            if not isinstance(source, str) or not source.strip():
+                raise ValidationError("rename image operation requires from", path=path + ".from")
+            if not isinstance(target, str) or not target.strip():
+                raise ValidationError("rename image operation requires to", path=path + ".to")
+            result.append({"op": op, "from": source.strip(), "to": target.strip()})
+            continue
         name = item.get("name")
-        if op not in ("upload", "delete"):
-            raise ValidationError("image operation must be upload or delete", path=path + ".op")
         if not isinstance(name, str) or not name.strip():
             raise ValidationError("image operation name must be non-empty", path=path + ".name")
         operation = {"op": op, "name": name.strip()}
@@ -294,7 +312,7 @@ def _project_wire(value: Mapping[str, Any], *, create: bool = False) -> Dict[str
     """Project project create/update fields to Creator's request shape."""
     result: Dict[str, Any] = {}
     for key in ("name", "alt_name", "summary", "repo_url"):
-        if key in value and value[key] is not None:
+        if key in value and (value[key] is not None or not create):
             wire_name = _WIRE_NAMES.get(key, key)
             if create:
                 if key == "repo_url" and not str(value[key]).strip():
@@ -363,13 +381,56 @@ def _business_code(payload: Mapping[str, Any]) -> Optional[int]:
         return None
 
 
+def _image_upload_record(payload: Any) -> Dict[str, str]:
+    """Extract the reusable key and display URL used by the main client."""
+    data = _unwrap(payload)
+    if not isinstance(data, Mapping):
+        raise FuploadError(
+            "ModUs image upload returned no media record",
+            kind="platform_data_error",
+            stage="media_upload",
+        )
+
+    download_url = data.get("downloadUrl") or data.get("url") or data.get("fileUrl")
+    reference = data.get("cosStoreKey") or data.get("cosStoreUrl") or data.get("key")
+    if not reference and isinstance(download_url, str) and download_url.strip():
+        parsed = urllib.parse.urlsplit(download_url.strip())
+        reference = urllib.parse.unquote(parsed.path.lstrip("/"))
+    if not isinstance(reference, str) or not reference.strip():
+        raise FuploadError(
+            "ModUs image upload omitted its object key",
+            kind="platform_data_error",
+            stage="media_upload",
+        )
+
+    reference = reference.strip()
+    if isinstance(download_url, str) and download_url.strip():
+        display_url = download_url.strip()
+    elif reference.startswith(("https://", "http://")):
+        display_url = reference
+    else:
+        display_url = urllib.parse.urljoin(RESOURCE_BASE, reference.lstrip("/"))
+    return {"key": reference, "url": display_url, "reference": reference}
+
+
 def _safe(value: Any) -> Any:
     """Recursively redact credentials and presigned URLs in API results."""
     if isinstance(value, Mapping):
         result = {}
         for key, item in value.items():
             normalized = str(key).replace("-", "_").lower()
-            result[str(key)] = "[REDACTED]" if normalized in _SECRET_KEYS else _safe(item)
+            if normalized in _SECRET_KEYS:
+                result[str(key)] = "[REDACTED]"
+            elif normalized in {
+                "content", "contenttext", "codetext", "changelog",
+                "description", "licensecontent",
+            }:
+                # write_output() hashes these fields before serializing JSON.
+                # Preserve the original here so the digest represents the
+                # service value instead of a generic redaction placeholder.
+                result[str(key)] = item
+            else:
+                result[str(key)] = _safe(item)
         return result
     if isinstance(value, list):
         return [_safe(item) for item in value]
@@ -599,7 +660,7 @@ class ModUs:
             except Exception:
                 detail = "HTTP %d" % exc.code
             raise FuploadError(redact(str(detail)), endpoint=url, http_status=exc.code, kind="platform_error", stage=stage) from exc
-        except (OSError, urllib.error.URLError) as exc:
+        except (OSError, urllib.error.URLError, http.client.IncompleteRead) as exc:
             raise FuploadError("ModUs request failed: %s" % exc, endpoint=url, verification_required=method != "GET", stage=stage) from exc
         if status < 200 or status >= 300:
             raise FuploadError("ModUs returned HTTP %d" % status, endpoint=url, http_status=status, stage=stage)
@@ -621,6 +682,32 @@ class ModUs:
         return payload
 
     def doctor(self) -> Dict[str, Any]:
+        if self.main_session:
+            result = {
+                "token_present": False,
+                "token_decrypted": False,
+                "token_nonempty": False,
+                "api_ready": False,
+            }
+            try:
+                session = load_main_session()
+                token = str(session.get("token") or "").strip()
+                result["token_present"] = bool(token)
+                result["token_decrypted"] = bool(token)
+                result["token_nonempty"] = bool(token)
+                if not token:
+                    return result
+                previous_token, previous_device = self.token, self.device_id
+                self.token = token
+                self.device_id = session.get("device_id")
+                try:
+                    self.user_info()
+                    result["api_ready"] = True
+                finally:
+                    self.token, self.device_id = previous_token, previous_device
+            except (FuploadError, OSError, UnicodeError, ValueError, TypeError):
+                pass
+            return result
         selected = self.token_path
         if not selected.is_file() and selected.with_name("token.json").is_file():
             selected = selected.with_name("token.json")
@@ -771,6 +858,143 @@ class ModUs:
             raise ValidationError("unsupported ModUs options operation")
         return _safe(_unwrap(self._request("GET", routes[action])))
 
+    @staticmethod
+    def _option_rows(value: Any) -> list[Mapping[str, Any]]:
+        if isinstance(value, Mapping):
+            value = value.get("rows", value.get("data", []))
+        return [item for item in value if isinstance(item, Mapping)] if isinstance(value, list) else []
+
+    @classmethod
+    def _nested_option_rows(cls, value: Any) -> list[Mapping[str, Any]]:
+        rows: list[Mapping[str, Any]] = []
+        pending = list(cls._option_rows(value))
+        while pending:
+            item = pending.pop(0)
+            rows.append(item)
+            pending.extend(cls._option_rows(item.get("children", [])))
+        return rows
+
+    @staticmethod
+    def _csv_values(value: Any) -> list[str]:
+        return [item.strip() for item in str(value or "").split(",") if item.strip()]
+
+    @staticmethod
+    def _account_rows(backup: Mapping[str, Any]) -> list[Mapping[str, Any]]:
+        value = backup.get("wtfAccounts") or []
+        if isinstance(value, str):
+            try:
+                value = json.loads(value)
+            except (TypeError, ValueError):
+                value = []
+        return [item for item in value if isinstance(item, Mapping)] if isinstance(value, list) else []
+
+    @staticmethod
+    def _backup_addons_id(backup: Mapping[str, Any]) -> Optional[str]:
+        value = backup.get("knownAddons")
+        if not isinstance(value, str) or not value.strip():
+            return None
+        try:
+            parsed = json.loads(value)
+        except (TypeError, ValueError):
+            return None
+        project_ids = parsed.get("projectids") if isinstance(parsed, Mapping) else None
+        return None if project_ids is None else str(project_ids)
+
+    def _validate_project_write(self, action: str, doc: Mapping[str, Any]) -> None:
+        if action not in {"create", "release", "update", "edit"}:
+            return
+        document = _project_document(doc)
+        allowed_categories = {
+            int(item["id"])
+            for item in self._nested_option_rows(self.options("categories"))
+            if item.get("id") is not None
+        }
+        unknown = [item for item in document.get("categories", []) if item not in allowed_categories]
+        if unknown:
+            raise ValidationError(
+                "category is not present in current Creator options",
+                path="$.project_state.basic_info.categories",
+            )
+
+    def _validate_main_write(self, resource: str, action: str, doc: Mapping[str, Any]) -> None:
+        if resource not in {"config", "wa"} or action not in {"create", "update", "edit"}:
+            return
+
+        if "tags" in doc:
+            option_name = "config-tags" if resource == "config" else "wa-tags"
+            allowed_tags = {str(item.get("id")) for item in self._option_rows(self.options(option_name)) if item.get("id") is not None}
+            unknown = [item for item in self._csv_values(doc.get("tags")) if item not in allowed_tags]
+            if unknown:
+                raise ValidationError("tag is not present in current %s options" % option_name, path="$.tags")
+
+        tier_id = doc.get("required_tier_id")
+        if tier_id is not None:
+            tiers = self._option_rows(self.options("subscription-tiers"))
+            allowed_tiers = {
+                str(item.get("id"))
+                for item in tiers
+                if item.get("id") is not None and item.get("isEnabled", item.get("is_enabled", 1)) not in (0, False)
+            }
+            if str(tier_id) not in allowed_tiers:
+                raise ValidationError("required_tier_id is not present in current tier options", path="$.required_tier_id")
+
+        if resource == "wa" and ("support_addon" in doc or "addons_id" in doc):
+            selected_doc = dict(doc)
+            if action in {"update", "edit"} and (
+                "support_addon" not in selected_doc or "addons_id" not in selected_doc
+            ):
+                current = self.import_detail(doc["import_id"], server_type=doc.get("server_type"))
+                current = current[0] if isinstance(current, list) and current else current
+                if isinstance(current, Mapping):
+                    selected_doc.setdefault("support_addon", current.get("supportAddon"))
+                    selected_doc.setdefault("addons_id", current.get("addonsId"))
+            support_rows = self._option_rows(self.options("wa-support-addons"))
+            selected = next((item for item in support_rows if str(item.get("name")) == str(selected_doc.get("support_addon"))), None)
+            if selected is None or str(selected.get("id")) != str(selected_doc.get("addons_id")):
+                raise ValidationError("support_addon and addons_id must match current options", path="$.support_addon")
+            return
+
+        if resource != "config":
+            return
+        linkage_fields = {"backup_id", "addons_id", "account_name", "role_name", "exclude_wtf"}
+        if not linkage_fields.intersection(doc):
+            return
+        merged = dict(doc)
+        if action in {"update", "edit"} and "backup_id" not in merged:
+            current = self.share_detail(doc["share_id"], server_type=doc.get("server_type"))
+            current = current[0] if isinstance(current, list) and current else current
+            if isinstance(current, Mapping):
+                aliases = {
+                    "backupId": "backup_id", "addonsId": "addons_id", "accountName": "account_name",
+                    "roleName": "role_name", "excludeWtf": "exclude_wtf",
+                }
+                for wire, local in aliases.items():
+                    if local not in merged and wire in current:
+                        merged[local] = current[wire]
+        backup_id = merged.get("backup_id")
+        backups = self._option_rows(self.cloud_backups(server_type=merged.get("server_type")))
+        backup = next((item for item in backups if str(item.get("id")) == str(backup_id)), None)
+        if backup is None:
+            raise ValidationError("backup_id is not present in the selected Build", path="$.backup_id")
+        expected_addons = self._backup_addons_id(backup)
+        if expected_addons is not None and "addons_id" in merged and str(merged.get("addons_id")) != expected_addons:
+            raise ValidationError("addons_id does not match selected backup knownAddons.projectids", path="$.addons_id")
+        if int(merged.get("exclude_wtf") or 0) == 1:
+            return
+        account_name = str(merged.get("account_name") or "")
+        account = next((item for item in self._account_rows(backup) if account_name in {
+            str(item.get("id") or ""), str(item.get("accountId") or ""),
+            str(item.get("name") or ""), str(item.get("characterName") or ""),
+        }), None)
+        if account is None:
+            raise ValidationError("account_name is not present in selected backup", path="$.account_name")
+        roles = [str(item) for item in account.get("roles") or [] if str(item)]
+        role_name = str(merged.get("role_name") or "")
+        if roles and not role_name:
+            raise ValidationError("role_name is required for selected account", path="$.role_name")
+        if role_name and role_name not in roles:
+            raise ValidationError("role_name is not present in selected account", path="$.role_name")
+
     # Main ModUs client: configuration shares and string articles.
     def cloud_backups(self, *, server_type: Optional[int] = None) -> Any:
         return _safe(_unwrap(self._request("GET", "system/user/backup/list", headers={"X-Server-Type": str(self._build(server_type))})))
@@ -785,6 +1009,40 @@ class ModUs:
     def cloud_backup_delete(self, backup_id: int, *, server_type: Optional[int] = None) -> Any:
         return _safe(_unwrap(self._request("DELETE", "system/user/backup/delete/%s" % _positive_id(backup_id, field="backup_id"), headers={"X-Server-Type": str(self._build(server_type))})))
 
+    def image_upload(self, file_path: str) -> Dict[str, Any]:
+        """Upload an image through the exact ModUs main-client multipart API."""
+        path = Path(file_path)
+        if not path.is_file():
+            raise ValidationError("image file does not exist", path="$.file")
+        authorization = self.token if self.authorization_scheme == "" else self.authorization_scheme + self.token
+        headers = {"Accept": "application/json", "Authorization": authorization}
+        if self.device_id:
+            headers["X-Device-Id"] = self.device_id
+        payload = multipart_request(
+            self._url("game/data/file/upload/file/image"),
+            str(path),
+            file_field="file",
+            headers=headers,
+            timeout=max(self.timeout, 600),
+        )
+        if isinstance(payload, Mapping):
+            business_code = _business_code(payload)
+            if payload.get("success") is False or (business_code is not None and business_code != 200):
+                raise FuploadError(
+                    str(payload.get("msg") or payload.get("message") or "ModUs image upload was rejected"),
+                    endpoint=self._url("game/data/file/upload/file/image"),
+                    business_code=business_code,
+                    kind="platform_error",
+                    stage="media_upload",
+                )
+        record = _image_upload_record(payload)
+        content = path.read_bytes()
+        return {
+            **record,
+            "bytes": len(content),
+            "sha256": hashlib.sha256(content).hexdigest(),
+        }
+
     @staticmethod
     def _share_wire(doc: Mapping[str, Any]) -> Dict[str, Any]:
         aliases = {"share_id": "id", "addons_id": "addonsId", "backup_id": "backupId", "account_name": "accountName", "content_text": "contentText", "image_url": "imageUrl", "is_paid": "isPaid", "is_public": "isPublic", "share_type": "shareType", "exclude_wtf": "excludeWtf", "role_name": "roleName", "required_tier_id": "requiredTierId", "sub_type": "subType", "synchronization_type": "synchronizationType"}
@@ -793,7 +1051,7 @@ class ModUs:
         for key, value in doc.items():
             wire = aliases.get(key, key)
             if wire in allowed and value is not None:
-                result[wire] = value
+                result[wire] = str(value) if wire == "addonsId" else value
         result.setdefault("platform", 1)
         exclude = result.get("excludeWtf", 0)
         result["excludeWtf"] = 1 if str(exclude).strip().lower() in {"1", "true"} else 0
@@ -815,7 +1073,9 @@ class ModUs:
         wire["platform"] = int(platform) if isinstance(platform, (int, float)) and not isinstance(platform, bool) else 0
         for key in ("keyword", "status", "tags", "order_by", "is_public", "is_paid"):
             if key in source and source[key] is not None:
-                wire[{"order_by": "orderBy", "is_public": "isPublic", "is_paid": "isPaid"}.get(key, key)] = source[key]
+                wire[{"order_by": "orderBy", "is_public": "isPublic", "is_paid": "isPaid"}.get(key, key)] = (
+                    _tag_filter(source[key]) if key == "tags" else source[key]
+                )
         return _safe(_unwrap(self._request("POST", "system/user/share/list", wire, headers={"X-Server-Type": str(selected_build)})))
 
     def share_detail(self, share_ids: Any, *, server_type: Optional[int] = None) -> Any:
@@ -823,9 +1083,7 @@ class ModUs:
         return _safe(_unwrap(self._request("POST", "system/user/share/detail", {"shareIds": [_resource_id(x, field="share_id") for x in ids]}, headers={"X-Server-Type": str(self._build(server_type))})))
 
     def share_create(self, doc: Mapping[str, Any], *, server_type: Optional[int] = None) -> Any:
-        wire = self._share_wire(doc)
-        wire.setdefault("synchronizationType", 3 if wire["platform"] == 3 else 1)
-        return _safe(_unwrap(self._request("POST", "system/user/share/create", wire, headers={"X-Server-Type": str(self._build(server_type))})))
+        return _safe(_unwrap(self._request("POST", "system/user/share/create", self._share_wire(doc), headers={"X-Server-Type": str(self._build(server_type))})))
 
     def share_update(self, doc: Mapping[str, Any], *, server_type: Optional[int] = None) -> Any:
         return _safe(_unwrap(self._request("PUT", "system/user/share/update", self._share_wire(doc), headers={"X-Server-Type": str(self._build(server_type))})))
@@ -838,6 +1096,8 @@ class ModUs:
         aliases = {"import_id": "id", "code_text": "codeText", "addons_id": "addonsId", "content_text": "contentText", "file_path": "filePath", "image_url": "imageUrl", "is_paid": "isPaid", "is_public": "isPublic", "share_type": "shareType", "support_addon": "supportAddon", "required_tier_id": "requiredTierId", "sub_type": "subType", "synchronization_type": "synchronizationType"}
         allowed = {"id", "codeText", "content", "addonsId", "contentText", "filePath", "imageUrl", "isPaid", "isPublic", "price", "shareType", "supportAddon", "tags", "title", "version", "requiredTierId", "subType", "platform", "synchronizationType"}
         result = {aliases.get(key, key): value for key, value in doc.items() if aliases.get(key, key) in allowed and value is not None}
+        if "addonsId" in result:
+            result["addonsId"] = str(result["addonsId"])
         result.setdefault("platform", 1)
         result.setdefault("synchronizationType", 3 if result["platform"] == 3 else 1)
         return result
@@ -858,7 +1118,9 @@ class ModUs:
         wire["platform"] = int(platform) if isinstance(platform, (int, float)) and not isinstance(platform, bool) else 0
         for key in ("keyword", "support_addon", "tags", "is_paid", "order_by"):
             if key in source and source[key] is not None:
-                wire[{"support_addon": "supportAddon", "is_paid": "isPaid", "order_by": "orderBy"}.get(key, key)] = source[key]
+                wire[{"support_addon": "supportAddon", "is_paid": "isPaid", "order_by": "orderBy"}.get(key, key)] = (
+                    _tag_filter(source[key]) if key == "tags" else source[key]
+                )
         return _safe(_unwrap(self._request("POST", "system/user/import/list", wire, headers={"X-Server-Type": str(selected_build)})))
 
     def import_detail(self, import_ids: Any, *, server_type: Optional[int] = None) -> Any:
@@ -1113,6 +1375,9 @@ class ModUs:
         raise ValidationError("unsupported ModUs read operation")
 
     def execute_write(self, resource: str, action: str, doc: Mapping[str, Any]) -> Any:
+        if resource == "media" and action == "upload": return self.image_upload(str(doc["file"]))
+        if resource == "project": self._validate_project_write(action, doc)
+        self._validate_main_write(resource, action, doc)
         if resource == "config" and action == "create": return self.share_create(doc, server_type=doc.get("server_type"))
         if resource == "config" and action in ("update", "edit"): return self.share_update(doc, server_type=doc.get("server_type"))
         if resource == "config" and action == "delete": return self.share_delete(doc["share_id"], server_type=doc.get("server_type"))

package/fupload/scripts/fupload_cli/schema.py

@@ -114,6 +114,37 @@ class Schema:
                 tags = [item.strip() for item in str(value["tags"]).split(",")]
                 if any(not item for item in tags) or not 1 <= len(tags) <= 3:
                     raise ValidationError("must contain 1 to 3 comma-delimited tag IDs", path="$.tags")
+                if len(set(tags)) != len(tags):
+                    raise ValidationError("must not contain duplicate tag IDs", path="$.tags")
+            if "image_url" in value:
+                images = [item.strip() for item in str(value["image_url"]).split(",")]
+                if any(not item for item in images) or not 1 <= len(images) <= 10:
+                    raise ValidationError("must contain 1 to 10 comma-delimited image references", path="$.image_url")
+            if value.get("required_tier_id") is not None and (
+                value.get("platform") == 3 or value.get("synchronization_type") == 3
+            ):
+                raise ValidationError(
+                    "required_tier_id cannot be combined with BigFoot synchronization",
+                    path="$.required_tier_id",
+                )
+            if value.get("is_paid", 0) != 0:
+                raise ValidationError("current ModUs form requires is_paid=0", path="$.is_paid")
+            if value.get("price", 0) != 0:
+                raise ValidationError("current ModUs form requires price=0", path="$.price")
+            if value.get("share_type", 0) != 0:
+                raise ValidationError("current ModUs form requires share_type=0", path="$.share_type")
+            platform = value.get("platform")
+            synchronization = value.get("synchronization_type")
+            if (platform is None) != (synchronization is None):
+                raise ValidationError(
+                    "platform and synchronization_type must be provided together",
+                    path="$.synchronization_type" if synchronization is None else "$.platform",
+                )
+            if platform is not None and synchronization is not None and platform != synchronization:
+                raise ValidationError(
+                    "platform and synchronization_type must select the same ModUs/BigFoot targets",
+                    path="$.synchronization_type",
+                )
         if self.name in ("fupload.v1.modus.project.create", "fupload.v1.modus.project.edit"):
             snapshot = value.get("project_state")
             if snapshot is None:
@@ -440,14 +471,28 @@ class Schema:
             if "categories" in value and len(value["categories"]) > 5:
                 raise ValidationError("must contain at most 5 items", path="$.categories")
             if "image_ops" in value:
-                object_array("image_ops", {"op", "name", "base64"}, ("op", "name"))
+                if not isinstance(value["image_ops"], list) or not value["image_ops"]:
+                    raise ValidationError("expected nonempty array", path="$.image_ops")
                 if "images" not in value:
                     raise ValidationError("images is required when image_ops is supplied", path="$.images")
                 for index, operation in enumerate(value["image_ops"]):
-                    if operation["op"] not in ("upload", "delete"):
-                        raise ValidationError("must be upload or delete", path="$.image_ops[%d].op" % index)
-                    if not isinstance(operation["name"], str) or not operation["name"].strip():
-                        raise ValidationError("must not be empty", path="$.image_ops[%d].name" % index)
+                    path = "$.image_ops[%d]" % index
+                    if not isinstance(operation, dict):
+                        raise ValidationError("expected object", path=path)
+                    op = operation.get("op")
+                    if op not in ("upload", "delete", "rename"):
+                        raise ValidationError("must be upload, delete, or rename", path=path + ".op")
+                    allowed = {"op", "from", "to"} if op == "rename" else {"op", "name", "base64"}
+                    unknown = sorted(set(operation) - allowed)
+                    if unknown:
+                        raise ValidationError("unknown field", path=path + "." + unknown[0])
+                    if op == "rename":
+                        for name in ("from", "to"):
+                            if not isinstance(operation.get(name), str) or not operation[name].strip():
+                                raise ValidationError("must not be empty", path=path + "." + name)
+                        continue
+                    if not isinstance(operation.get("name"), str) or not operation["name"].strip():
+                        raise ValidationError("must not be empty", path=path + ".name")
                     if operation["op"] == "upload" and (not isinstance(operation.get("base64"), str) or not operation["base64"].strip()):
                         raise ValidationError("base64 is required for upload", path="$.image_ops[%d].base64" % index)
                     if operation["op"] == "delete" and "base64" in operation:
@@ -455,7 +500,7 @@ class Schema:
             for name in ("version", "type"):
                 if name in value and isinstance(value[name], str) and not value[name].strip():
                     raise ValidationError("must not be empty", path="$.%s" % name)
-            if "file" in value and not zipfile.is_zipfile(value["file"]):
+            if self.name.startswith("fupload.v1.modus.plugin") and "file" in value and not zipfile.is_zipfile(value["file"]):
                 raise ValidationError("file must be a valid ZIP archive", path="$.file")
 
 
@@ -711,7 +756,7 @@ MODUS_RELEASE = {
 }
 MODUS_BUILD_ID = f("integer", minimum=0, maximum=4)
 MODUS_SHARE = {
-    "share_id": f("identifier", nonempty=True), "addons_id": f("string", nonempty=True, max_length=10000),
+    "share_id": f("identifier", nonempty=True), "addons_id": f("string", max_length=10000),
     "account_name": f("string", nullable=True, max_length=120), "backup_id": f("integer", minimum=1),
     "content": f("string", nonempty=True), "content_text": f("string", nonempty=True),
     "image_url": f("string", nonempty=True, max_length=1000), "is_paid": f("integer", choices=(0, 1)),
@@ -742,6 +787,7 @@ register("modus", "plugin", "upload", required(MODUS_RELEASE, ("project_id", "fi
 register("modus", "plugin", "update", required(MODUS_RELEASE, ("project_id", "file_id")))
 register("modus", "plugin", "edit", required(MODUS_RELEASE, ("project_id", "file_id")))
 register("modus", "plugin", "delete", required({"project_id": f("integer", minimum=1), "file_id": f("integer", minimum=1), "confirm": f("string", choices=("DELETE",))}, ("project_id", "file_id", "confirm")))
+register("modus", "media", "upload", required({"file": f("string", local_file=True)}, ("file",)))
 register("modus", "config", "create", required(MODUS_SHARE, ("addons_id", "backup_id", "content", "content_text", "image_url", "tags", "title", "exclude_wtf")))
 register("modus", "config", "update", required(MODUS_SHARE, ("share_id",)))
 register("modus", "config", "edit", required(MODUS_SHARE, ("share_id",)))

package/fupload/scripts/fupload_cli/transport.py

@@ -14,6 +14,17 @@ from .errors import FuploadError
 from .trust import official_opener, require_official_url
 
 
+_IMAGE_CONTENT_TYPES = {
+    ".bmp": "image/bmp",
+    ".gif": "image/gif",
+    ".jpeg": "image/jpeg",
+    ".jpg": "image/jpeg",
+    ".png": "image/png",
+    ".svg": "image/svg+xml",
+    ".webp": "image/webp",
+}
+
+
 def _http_error_details(raw: bytes, fallback: str) -> tuple[str, Any]:
     """Extract a server error only from a conforming UTF-8 JSON object."""
     try:
@@ -88,7 +99,8 @@ def multipart_request(
             str(value).encode("utf-8"), b"\r\n",
         ])
     filename = os.path.basename(file_path)
-    content_type = mimetypes.guess_type(filename)[0] or "application/octet-stream"
+    suffix = os.path.splitext(filename)[1].lower()
+    content_type = _IMAGE_CONTENT_TYPES.get(suffix) or mimetypes.guess_type(filename)[0] or "application/octet-stream"
     chunks.extend([
         ("--%s\r\n" % boundary).encode(),
         ('Content-Disposition: form-data; name="%s"; filename="%s"\r\n' % (file_field, filename)).encode("utf-8"),

package/npm/skill-manifest.json

@@ -1,9 +1,9 @@
 {
   "schema": "fupload.npm-skill-manifest.v1",
   "package_name": "@follenfang/fupload",
-  "package_version": "0.0.12",
-  "skill_version": "0.0.12",
-  "tree_sha256": "f1e559aef665537c4b2b24f15dab01b9e4140378bd3a70a00331d56358d2071a",
+  "package_version": "0.0.15",
+  "skill_version": "0.0.15",
+  "tree_sha256": "cfccc3347d2013188a37b120b94282c839ad81eb4fa92f8617e0cfa12dfbbaef",
   "files": [
     {
       "path": "agents/openai.yaml",
@@ -92,8 +92,8 @@
     },
     {
       "path": "references/modus.md",
-      "bytes": 13492,
-      "sha256": "919b8b097fd1ec14d38583e84f4d33a5320d24af03703dc1c06a072dbab33e68"
+      "bytes": 37142,
+      "sha256": "84e1524bc3404de3c3bc0582d85651b884c616ff009b1d01839fb84e348917b3"
     },
     {
       "path": "references/newbee-official-cli.md",
@@ -113,7 +113,7 @@
     {
       "path": "scripts/fupload_cli/__init__.py",
       "bytes": 50,
-      "sha256": "cad1ed5cd2ed3020e1fc98c2036d22b47e1138772e9829f5dd61c39cc3bd810f"
+      "sha256": "9159fa55aa8ef07864abf206b64aabd44ea78c2e987ead8b51ec9384b5d1cebf"
     },
     {
       "path": "scripts/fupload_cli/blackbox_web.py",
@@ -127,8 +127,8 @@
     },
     {
       "path": "scripts/fupload_cli/cli.py",
-      "bytes": 36811,
-      "sha256": "bdd159c7d86c009685417e7b4a25194d98a49547e036606b920ff44090b1619e"
+      "bytes": 37420,
+      "sha256": "3a052ec53c29ca95eafc9ba845d448ef45e4bd0231bf41ec1906e55281aa1650"
     },
     {
       "path": "scripts/fupload_cli/curseforge.py",
@@ -137,8 +137,8 @@
     },
     {
       "path": "scripts/fupload_cli/dd_broker.py",
-      "bytes": 25750,
-      "sha256": "48ace5b13687c0d8364c62ee9407ed6ead16946df62ce34d04de1aa83ca44026"
+      "bytes": 26638,
+      "sha256": "a23fb486dd1ca9d0a1d2f2ca642690535a28e05051ce828ce066cdbc67b37b37"
     },
     {
       "path": "scripts/fupload_cli/dd_sidecar.py",
@@ -157,8 +157,8 @@
     },
     {
       "path": "scripts/fupload_cli/io.py",
-      "bytes": 4515,
-      "sha256": "dafcfcaa493def7bc42719f357416208a3cabbb163cf651fb18307b501b46e4b"
+      "bytes": 5319,
+      "sha256": "57af3921d016815ed5747788881f86c8a6ce04a939e9f6f6571bd6a3f7383a4d"
     },
     {
       "path": "scripts/fupload_cli/modus_zip.py",
@@ -167,8 +167,8 @@
     },
     {
       "path": "scripts/fupload_cli/modus.py",
-      "bytes": 60792,
-      "sha256": "9cf3d8127e2b7583f1760a74f88512b81ab272ea116bf9ca185c7531eba960d2"
+      "bytes": 74134,
+      "sha256": "9841ce7188083b62c1c217d89436b3c3ddc3ecf726719d3c44c0b83027172fac"
     },
     {
       "path": "scripts/fupload_cli/newbee_auth.py",
@@ -182,8 +182,8 @@
     },
     {
       "path": "scripts/fupload_cli/schema.py",
-      "bytes": 51541,
-      "sha256": "aca30dc7997f47645b3da154fa3656fefa1179733e1d61e7ff0de326734f2575"
+      "bytes": 54561,
+      "sha256": "17d57a9c9c53e556faf9e415020d47f84965283680c66f3f1c33beef6b83d104"
     },
     {
       "path": "scripts/fupload_cli/state_machine.py",
@@ -192,8 +192,8 @@
     },
     {
       "path": "scripts/fupload_cli/transport.py",
-      "bytes": 4895,
-      "sha256": "0489493c1250c50d460c408394824eba7fc0f6efea9a3c1ec06f3ad67e6b89a7"
+      "bytes": 5195,
+      "sha256": "37eb742c1cf75184d14f4f8ae85117222cad3d0748ab4c211452e78b5da0c279"
     },
     {
       "path": "scripts/fupload_cli/trust.py",
@@ -208,7 +208,7 @@
     {
       "path": "SKILL.md",
       "bytes": 25720,
-      "sha256": "fe14cba8f02167dce36034ce8b73784793c92ed3de37dda1ab982a5a8a9cc8de"
+      "sha256": "fae17edc0a59ea74dc70a5744b5aef46a057c23a9056e6d6b1e60990fa54782f"
     }
   ]
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@follenfang/fupload",
-  "version": "0.0.12",
+  "version": "0.0.15",
   "description": "Install and run the Fuploader Agent Skill and Python CLI.",
   "type": "module",
   "bin": {