@geoly-ai/social-hub-cli 0.2.23 → 0.2.25

package/dist/permission-runner.d.ts

@@ -1,11 +1,28 @@
 import type { Action, Resource, Role } from "@geoly-ai/social-hub-authz";
+export type PermissionGateCtx = {
+    role: Role;
+    teamId?: string;
+    /** auth context 身份类型:api_key | session | cli_token。 */
+    kind?: string;
+};
+/**
+ * 多 gate 版权限预检(Block 8b 起 API 有 create+update 双 gate / global 另加系统
+ * 治理 gate 的端点;Codex 计划轮 P1):一次 auth context 拉取,逐个本地断言。
+ * userOnly=true 时本地先拒 api_key(API 侧同样拒,提前报避免带着成功假象打到 403)。
+ */
+export declare function withPermissionGates(input: {
+    command: string;
+    gates: {
+        resource: Resource;
+        action: Action;
+    }[];
+    teamId?: string;
+    userOnly?: boolean;
+}, run: (ctx: PermissionGateCtx) => Promise<void>): Promise<void>;
 export declare function withPermissionGate(input: {
     command: string;
     resource: Resource;
     action: Action;
     teamId?: string;
-}, run: (ctx: {
-    role: Role;
-    teamId?: string;
-}) => Promise<void>): Promise<void>;
+}, run: (ctx: PermissionGateCtx) => Promise<void>): Promise<void>;
 //# sourceMappingURL=permission-runner.d.ts.map

package/dist/permission-runner.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permission-runner.d.ts","sourceRoot":"","sources":["../src/permission-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAIzE,wBAAsB,kBAAkB,CACtC,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,EACD,GAAG,EAAE,CAAC,GAAG,EAAE;IAAE,IAAI,EAAE,IAAI,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,IAAI,CAAC,GAC3D,OAAO,CAAC,IAAI,CAAC,CA+Bf"}
+{"version":3,"file":"permission-runner.d.ts","sourceRoot":"","sources":["../src/permission-runner.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,4BAA4B,CAAC;AAIzE,MAAM,MAAM,iBAAiB,GAAG;IAC9B,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,uDAAuD;IACvD,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAmCF;;;;GAIG;AACH,wBAAsB,mBAAmB,CACvC,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,KAAK,EAAE;QAAE,QAAQ,EAAE,QAAQ,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;IAChD,MAAM,CAAC,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,OAAO,CAAC;CACpB,EACD,GAAG,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC,CAqBf;AAED,wBAAsB,kBAAkB,CACtC,KAAK,EAAE;IACL,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,MAAM,CAAC,EAAE,MAAM,CAAC;CACjB,EACD,GAAG,EAAE,CAAC,GAAG,EAAE,iBAAiB,KAAK,OAAO,CAAC,IAAI,CAAC,GAC7C,OAAO,CAAC,IAAI,CAAC,CASf"}

package/dist/permission-runner.js

@@ -1,12 +1,13 @@
 import { requireClient, resolveTeamId } from "./client.js";
 import { assertCliPermission } from "./permissions.js";
-export async function withPermissionGate(input, run) {
-    const client = requireClient();
-    const teamId = input.teamId ? resolveTeamId(input.teamId) : undefined;
+const USER_ONLY_HINT = "Fix: 该命令为 user-only(API 拒绝 API Key)——用 `social-hub auth login` 的 CLI token 执行,且账号角色需满足上述资源动作。";
+async function loadAuthContext(client, teamId) {
     let role = "manager";
+    let kind;
     try {
         const authCtx = await client.getAuthContext();
         role = authCtx.role ?? "manager";
+        kind = authCtx.kind;
         if (teamId &&
             authCtx.kind === "api_key" &&
             authCtx.teamId &&
@@ -19,12 +20,38 @@ export async function withPermissionGate(input, run) {
         console.error(e instanceof Error ? e.message : "Failed to load auth context");
         process.exit(1);
     }
-    assertCliPermission({
-        role,
-        resource: input.resource,
-        action: input.action,
+    return { role, teamId, kind };
+}
+/**
+ * 多 gate 版权限预检(Block 8b 起 API 有 create+update 双 gate / global 另加系统
+ * 治理 gate 的端点;Codex 计划轮 P1):一次 auth context 拉取,逐个本地断言。
+ * userOnly=true 时本地先拒 api_key(API 侧同样拒,提前报避免带着成功假象打到 403)。
+ */
+export async function withPermissionGates(input, run) {
+    const client = requireClient();
+    const teamId = input.teamId ? resolveTeamId(input.teamId) : undefined;
+    const ctx = await loadAuthContext(client, teamId);
+    if (input.userOnly && ctx.kind === "api_key") {
+        console.error(`Refusing to run \`${input.command}\` with an API Key:该写操作要求 user 身份。` +
+            "请用 `social-hub auth login` 登录(CLI token)后重试。");
+        process.exit(1);
+    }
+    for (const gate of input.gates) {
+        assertCliPermission({
+            role: ctx.role,
+            resource: gate.resource,
+            action: gate.action,
+            command: input.command,
+            authNote: input.userOnly ? USER_ONLY_HINT : undefined,
+        });
+    }
+    await run(ctx);
+}
+export async function withPermissionGate(input, run) {
+    await withPermissionGates({
         command: input.command,
-    });
-    await run({ role, teamId });
+        gates: [{ resource: input.resource, action: input.action }],
+        teamId: input.teamId,
+    }, run);
 }
 //# sourceMappingURL=permission-runner.js.map

package/dist/permission-runner.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-runner.js","sourceRoot":"","sources":["../src/permission-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAEvD,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAKC,EACD,GAA4D;IAE5D,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,IAAI,IAAI,GAAS,SAAS,CAAC;IAC3B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,GAAI,OAAO,CAAC,IAAa,IAAI,SAAS,CAAC;QAC3C,IACE,MAAM;YACN,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,KAAK,MAAM,EACzB,CAAC;YACD,OAAO,CAAC,KAAK,CACX,4BAA4B,OAAO,CAAC,MAAM,yBAAyB,MAAM,GAAG,CAC7E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CACX,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAC/D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,mBAAmB,CAAC;QAClB,IAAI;QACJ,QAAQ,EAAE,KAAK,CAAC,QAAQ;QACxB,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,OAAO,EAAE,KAAK,CAAC,OAAO;KACvB,CAAC,CAAC;IACH,MAAM,GAAG,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;AAC9B,CAAC"}
+{"version":3,"file":"permission-runner.js","sourceRoot":"","sources":["../src/permission-runner.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AASvD,MAAM,cAAc,GAClB,+FAA+F,CAAC;AAElG,KAAK,UAAU,eAAe,CAC5B,MAAwC,EACxC,MAA0B;IAE1B,IAAI,IAAI,GAAS,SAAS,CAAC;IAC3B,IAAI,IAAwB,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,OAAO,GAAG,MAAM,MAAM,CAAC,cAAc,EAAE,CAAC;QAC9C,IAAI,GAAI,OAAO,CAAC,IAAa,IAAI,SAAS,CAAC;QAC3C,IAAI,GAAG,OAAO,CAAC,IAAI,CAAC;QACpB,IACE,MAAM;YACN,OAAO,CAAC,IAAI,KAAK,SAAS;YAC1B,OAAO,CAAC,MAAM;YACd,OAAO,CAAC,MAAM,KAAK,MAAM,EACzB,CAAC;YACD,OAAO,CAAC,KAAK,CACX,4BAA4B,OAAO,CAAC,MAAM,yBAAyB,MAAM,GAAG,CAC7E,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;IACH,CAAC;IAAC,OAAO,CAAC,EAAE,CAAC;QACX,OAAO,CAAC,KAAK,CACX,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,6BAA6B,CAC/D,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC;AAChC,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,mBAAmB,CACvC,KAKC,EACD,GAA8C;IAE9C,MAAM,MAAM,GAAG,aAAa,EAAE,CAAC;IAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACtE,MAAM,GAAG,GAAG,MAAM,eAAe,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAClD,IAAI,KAAK,CAAC,QAAQ,IAAI,GAAG,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,qBAAqB,KAAK,CAAC,OAAO,oCAAoC;YACpE,8CAA8C,CACjD,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;IACD,KAAK,MAAM,IAAI,IAAI,KAAK,CAAC,KAAK,EAAE,CAAC;QAC/B,mBAAmB,CAAC;YAClB,IAAI,EAAE,GAAG,CAAC,IAAI;YACd,QAAQ,EAAE,IAAI,CAAC,QAAQ;YACvB,MAAM,EAAE,IAAI,CAAC,MAAM;YACnB,OAAO,EAAE,KAAK,CAAC,OAAO;YACtB,QAAQ,EAAE,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS;SACtD,CAAC,CAAC;IACL,CAAC;IACD,MAAM,GAAG,CAAC,GAAG,CAAC,CAAC;AACjB,CAAC;AAED,MAAM,CAAC,KAAK,UAAU,kBAAkB,CACtC,KAKC,EACD,GAA8C;IAE9C,MAAM,mBAAmB,CACvB;QACE,OAAO,EAAE,KAAK,CAAC,OAAO;QACtB,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,KAAK,CAAC,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC3D,MAAM,EAAE,KAAK,CAAC,MAAM;KACrB,EACD,GAAG,CACJ,CAAC;AACJ,CAAC"}

package/dist/permission-runner.test.js

@@ -66,4 +66,80 @@ describe("withPermissionGate", () => {
         expect(mockListApiKeys).not.toHaveBeenCalled();
     });
 });
+describe("withPermissionGates", () => {
+    beforeEach(() => {
+        mockGetAuthContext.mockReset();
+        vi.spyOn(process, "exit").mockImplementation((() => {
+            throw new Error("process.exit");
+        }));
+        vi.spyOn(console, "error").mockImplementation(() => { });
+    });
+    afterEach(() => {
+        vi.restoreAllMocks();
+    });
+    it("userOnly:api_key 本地先拒(不等业务 403)", async () => {
+        mockGetAuthContext.mockResolvedValue({ role: "admin", kind: "api_key" });
+        const { withPermissionGates } = await import("./permission-runner.js");
+        const run = vi.fn();
+        await expect(withPermissionGates({
+            command: "style-profiles approve",
+            gates: [{ resource: "subredditStyleProfile", action: "update" }],
+            userOnly: true,
+        }, run)).rejects.toThrow("process.exit");
+        expect(run).not.toHaveBeenCalled();
+    });
+    it("userOnly:cli_token 放行", async () => {
+        mockGetAuthContext.mockResolvedValue({
+            role: "manager",
+            kind: "cli_token",
+        });
+        const { withPermissionGates } = await import("./permission-runner.js");
+        const run = vi.fn();
+        await withPermissionGates({
+            command: "style-profiles approve",
+            gates: [{ resource: "subredditStyleProfile", action: "update" }],
+            userOnly: true,
+        }, run);
+        expect(run).toHaveBeenCalledOnce();
+    });
+    it("多 gate 逐个断言:第一 gate 过、第二 gate 拒则整体拒", async () => {
+        // supervisor 可写 subredditPostAnnotation(create/update),但不可写
+        // subredditStyleProfile(manager/admin)——模拟 global 标注的第三道 gate。
+        mockGetAuthContext.mockResolvedValue({
+            role: "supervisor",
+            kind: "cli_token",
+        });
+        const { withPermissionGates } = await import("./permission-runner.js");
+        const run = vi.fn();
+        await expect(withPermissionGates({
+            command: "subreddit-annotations upsert",
+            gates: [
+                { resource: "subredditPostAnnotation", action: "create" },
+                { resource: "subredditPostAnnotation", action: "update" },
+                { resource: "subredditStyleProfile", action: "update" },
+            ],
+            teamId: "team-ctx",
+            userOnly: true,
+        }, run)).rejects.toThrow("process.exit");
+        expect(run).not.toHaveBeenCalled();
+    });
+    it("多 gate 全过则执行(team 标注的 create+update)", async () => {
+        mockGetAuthContext.mockResolvedValue({
+            role: "supervisor",
+            kind: "cli_token",
+        });
+        const { withPermissionGates } = await import("./permission-runner.js");
+        const run = vi.fn();
+        await withPermissionGates({
+            command: "subreddit-annotations upsert",
+            gates: [
+                { resource: "subredditPostAnnotation", action: "create" },
+                { resource: "subredditPostAnnotation", action: "update" },
+            ],
+            teamId: "team-ctx",
+            userOnly: true,
+        }, run);
+        expect(run).toHaveBeenCalledOnce();
+    });
+});
 //# sourceMappingURL=permission-runner.test.js.map

package/dist/permission-runner.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"permission-runner.test.js","sourceRoot":"","sources":["../src/permission-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEhC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;QACpB,cAAc,EAAE,kBAAkB;QAClC,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,aAAa,EAAE,CAAC,EAAW,EAAE,EAAE,CAAC,EAAE,IAAI,UAAU;CACjD,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAU,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,CACV,kBAAkB,CAChB;YACE,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,MAAM;SACf,EACD,KAAK,IAAI,EAAE;YACT,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,kBAAkB,CACtB;YACE,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,MAAM;SACf,EACD,KAAK,IAAI,EAAE;YACT,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,kBAAkB,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,CACV,kBAAkB,CAChB;YACE,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ;SACjB,EACD,KAAK,IAAI,EAAE;YACT,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"permission-runner.test.js","sourceRoot":"","sources":["../src/permission-runner.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,SAAS,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAEzE,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,kBAAkB,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AACnC,MAAM,eAAe,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAEhC,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;QACpB,cAAc,EAAE,kBAAkB;QAClC,cAAc,EAAE,kBAAkB;QAClC,WAAW,EAAE,eAAe;KAC7B,CAAC;IACF,aAAa,EAAE,CAAC,EAAW,EAAE,EAAE,CAAC,EAAE,IAAI,UAAU;CACjD,CAAC,CAAC,CAAC;AAEJ,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,eAAe,CAAC,SAAS,EAAE,CAAC;QAC5B,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAU,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACvE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,CACV,kBAAkB,CAChB;YACE,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,MAAM;SACf,EACD,KAAK,IAAI,EAAE;YACT,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,MAAM,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAClD,MAAM,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC;QACtE,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,kBAAkB,CACtB;YACE,OAAO,EAAE,kBAAkB;YAC3B,QAAQ,EAAE,WAAW;YACrB,MAAM,EAAE,MAAM;SACf,EACD,KAAK,IAAI,EAAE;YACT,MAAM,kBAAkB,EAAE,CAAC;QAC7B,CAAC,CACF,CAAC;QAEF,MAAM,CAAC,kBAAkB,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACpD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,KAAK,IAAI,EAAE;QACzD,kBAAkB,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,OAAO;YACb,IAAI,EAAE,SAAS;YACf,MAAM,EAAE,QAAQ;SACjB,CAAC,CAAC;QACH,MAAM,EAAE,kBAAkB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QAEtE,MAAM,MAAM,CACV,kBAAkB,CAChB;YACE,OAAO,EAAE,eAAe;YACxB,QAAQ,EAAE,QAAQ;YAClB,MAAM,EAAE,MAAM;YACd,MAAM,EAAE,QAAQ;SACjB,EACD,KAAK,IAAI,EAAE;YACT,MAAM,eAAe,EAAE,CAAC;QAC1B,CAAC,CACF,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAElC,MAAM,CAAC,eAAe,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACjD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,UAAU,CAAC,GAAG,EAAE;QACd,kBAAkB,CAAC,SAAS,EAAE,CAAC;QAC/B,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,EAAE;YACjD,MAAM,IAAI,KAAK,CAAC,cAAc,CAAC,CAAC;QAClC,CAAC,CAAU,CAAC,CAAC;QACb,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,EAAE,CAAC,eAAe,EAAE,CAAC;IACvB,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iCAAiC,EAAE,KAAK,IAAI,EAAE;QAC/C,kBAAkB,CAAC,iBAAiB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC;QACzE,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAEpB,MAAM,MAAM,CACV,mBAAmB,CACjB;YACE,OAAO,EAAE,wBAAwB;YACjC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChE,QAAQ,EAAE,IAAI;SACf,EACD,GAAG,CACJ,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,KAAK,IAAI,EAAE;QACrC,kBAAkB,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAEpB,MAAM,mBAAmB,CACvB;YACE,OAAO,EAAE,wBAAwB;YACjC,KAAK,EAAE,CAAC,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE,CAAC;YAChE,QAAQ,EAAE,IAAI;SACf,EACD,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qCAAqC,EAAE,KAAK,IAAI,EAAE;QACnD,4DAA4D;QAC5D,+DAA+D;QAC/D,kBAAkB,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAEpB,MAAM,MAAM,CACV,mBAAmB,CACjB;YACE,OAAO,EAAE,8BAA8B;YACvC,KAAK,EAAE;gBACL,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACzD,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACzD,EAAE,QAAQ,EAAE,uBAAuB,EAAE,MAAM,EAAE,QAAQ,EAAE;aACxD;YACD,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,IAAI;SACf,EACD,GAAG,CACJ,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,cAAc,CAAC,CAAC;QAClC,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sCAAsC,EAAE,KAAK,IAAI,EAAE;QACpD,kBAAkB,CAAC,iBAAiB,CAAC;YACnC,IAAI,EAAE,YAAY;YAClB,IAAI,EAAE,WAAW;SAClB,CAAC,CAAC;QACH,MAAM,EAAE,mBAAmB,EAAE,GAAG,MAAM,MAAM,CAAC,wBAAwB,CAAC,CAAC;QACvE,MAAM,GAAG,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;QAEpB,MAAM,mBAAmB,CACvB;YACE,OAAO,EAAE,8BAA8B;YACvC,KAAK,EAAE;gBACL,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE;gBACzD,EAAE,QAAQ,EAAE,yBAAyB,EAAE,MAAM,EAAE,QAAQ,EAAE;aAC1D;YACD,MAAM,EAAE,UAAU;YAClB,QAAQ,EAAE,IAAI;SACf,EACD,GAAG,CACJ,CAAC;QACF,MAAM,CAAC,GAAG,CAAC,CAAC,oBAAoB,EAAE,CAAC;IACrC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/permissions-gates-content-classification.d.ts

@@ -0,0 +1,8 @@
+import type { CliPermissionGate } from "./permissions.js";
+/**
+ * Phase B1a content_classification 控制面 CLI gates（skill social-hub-content-classification）。
+ * 角色梯度同 authz `contentClassification`:读(subjects/specs/presentation)非 client 内部角色可用;
+ * spec 写(create=建 draft、activate→update)**仅 admin**,且 user-only(API 拒 api_key / 服务 token)。
+ */
+export declare const CONTENT_CLASSIFICATION_PERMISSION_GATES: CliPermissionGate[];
+//# sourceMappingURL=permissions-gates-content-classification.d.ts.map

package/dist/permissions-gates-content-classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-content-classification.d.ts","sourceRoot":"","sources":["../src/permissions-gates-content-classification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D;;;;GAIG;AACH,eAAO,MAAM,uCAAuC,EAAE,iBAAiB,EAiCtE,CAAC"}

package/dist/permissions-gates-content-classification.js

@@ -0,0 +1,40 @@
+/**
+ * Phase B1a content_classification 控制面 CLI gates（skill social-hub-content-classification）。
+ * 角色梯度同 authz `contentClassification`:读(subjects/specs/presentation)非 client 内部角色可用;
+ * spec 写(create=建 draft、activate→update)**仅 admin**,且 user-only(API 拒 api_key / 服务 token)。
+ */
+export const CONTENT_CLASSIFICATION_PERMISSION_GATES = [
+    {
+        command: "content-classification get-subject",
+        resource: "contentClassification",
+        action: "read",
+    },
+    {
+        command: "content-classification spec list",
+        resource: "contentClassification",
+        action: "list",
+    },
+    {
+        command: "content-classification spec get",
+        resource: "contentClassification",
+        action: "read",
+    },
+    {
+        command: "content-classification spec create",
+        resource: "contentClassification",
+        action: "create",
+        note: "admin only; user only(API 拒 API Key / 服务 token)",
+    },
+    {
+        command: "content-classification spec activate",
+        resource: "contentClassification",
+        action: "update",
+        note: "admin only; user only(API 拒 API Key / 服务 token)",
+    },
+    {
+        command: "content-classification presentation",
+        resource: "contentClassification",
+        action: "read",
+    },
+];
+//# sourceMappingURL=permissions-gates-content-classification.js.map

package/dist/permissions-gates-content-classification.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-content-classification.js","sourceRoot":"","sources":["../src/permissions-gates-content-classification.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,CAAC,MAAM,uCAAuC,GAAwB;IAC1E;QACE,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,iCAAiC;QAC1C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,oCAAoC;QAC7C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,iDAAiD;KACxD;IACD;QACE,OAAO,EAAE,sCAAsC;QAC/C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,iDAAiD;KACxD;IACD;QACE,OAAO,EAAE,qCAAqC;QAC9C,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;CACF,CAAC"}

package/dist/permissions-gates-subreddit-style.d.ts

@@ -0,0 +1,10 @@
+import type { CliPermissionGate } from "./permissions.js";
+/**
+ * Block 8b 板块画像/标注域 CLI gates(skill social-hub-style-profiles)。
+ * 角色梯度同 authz:画像写只 manager/admin;标注 manager 全动作、supervisor
+ * 读+写、senior/internal 只读、client 恒拒。upsert 在 API 侧需 create+update
+ * 双 gate(scope=global 另需 subredditStyleProfile:update),运行时由
+ * withPermissionGates 逐个断言;此处登记主 gate 供 auth explain 展示。
+ */
+export declare const SUBREDDIT_STYLE_PERMISSION_GATES: CliPermissionGate[];
+//# sourceMappingURL=permissions-gates-subreddit-style.d.ts.map

package/dist/permissions-gates-subreddit-style.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-subreddit-style.d.ts","sourceRoot":"","sources":["../src/permissions-gates-subreddit-style.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAC;AAE1D;;;;;;GAMG;AACH,eAAO,MAAM,gCAAgC,EAAE,iBAAiB,EAyD/D,CAAC"}

package/dist/permissions-gates-subreddit-style.js

@@ -0,0 +1,66 @@
+/**
+ * Block 8b 板块画像/标注域 CLI gates(skill social-hub-style-profiles)。
+ * 角色梯度同 authz:画像写只 manager/admin;标注 manager 全动作、supervisor
+ * 读+写、senior/internal 只读、client 恒拒。upsert 在 API 侧需 create+update
+ * 双 gate(scope=global 另需 subredditStyleProfile:update),运行时由
+ * withPermissionGates 逐个断言;此处登记主 gate 供 auth explain 展示。
+ */
+export const SUBREDDIT_STYLE_PERMISSION_GATES = [
+    {
+        command: "style-profiles list",
+        resource: "subredditStyleProfile",
+        action: "read",
+    },
+    {
+        command: "style-profiles get",
+        resource: "subredditStyleProfile",
+        action: "read",
+    },
+    {
+        command: "style-profiles active",
+        resource: "subredditStyleProfile",
+        action: "read",
+    },
+    {
+        command: "style-profiles propose",
+        resource: "subredditStyleProfile",
+        action: "create",
+        note: "user only",
+    },
+    {
+        command: "style-profiles approve",
+        resource: "subredditStyleProfile",
+        action: "update",
+        note: "user only; 四眼(提案人不可批)",
+    },
+    {
+        command: "style-profiles reject",
+        resource: "subredditStyleProfile",
+        action: "update",
+        note: "user only",
+    },
+    {
+        command: "style-profiles cancel",
+        resource: "subredditStyleProfile",
+        action: "delete",
+        note: "user only; 仅提案人本人",
+    },
+    {
+        command: "style-profiles retire",
+        resource: "subredditStyleProfile",
+        action: "update",
+        note: "user only",
+    },
+    {
+        command: "subreddit-annotations list",
+        resource: "subredditPostAnnotation",
+        action: "read",
+    },
+    {
+        command: "subreddit-annotations upsert",
+        resource: "subredditPostAnnotation",
+        action: "create",
+        note: "user only; API 另需 update;scope=global 另需 subredditStyleProfile:update",
+    },
+];
+//# sourceMappingURL=permissions-gates-subreddit-style.js.map

package/dist/permissions-gates-subreddit-style.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-subreddit-style.js","sourceRoot":"","sources":["../src/permissions-gates-subreddit-style.ts"],"names":[],"mappings":"AAEA;;;;;;GAMG;AACH,MAAM,CAAC,MAAM,gCAAgC,GAAwB;IACnE;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,WAAW;KAClB;IACD;QACE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,uBAAuB;KAC9B;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,WAAW;KAClB;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,mBAAmB;KAC1B;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,uBAAuB;QACjC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,WAAW;KAClB;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,yBAAyB;QACnC,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,yBAAyB;QACnC,MAAM,EAAE,QAAQ;QAChB,IAAI,EAAE,uEAAuE;KAC9E;CACF,CAAC"}

package/dist/permissions-gates-subreddit-style.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=permissions-gates-subreddit-style.test.d.ts.map

package/dist/permissions-gates-subreddit-style.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-subreddit-style.test.d.ts","sourceRoot":"","sources":["../src/permissions-gates-subreddit-style.test.ts"],"names":[],"mappings":""}

package/dist/permissions-gates-subreddit-style.test.js

@@ -0,0 +1,44 @@
+import { describe, expect, it } from "vitest";
+import { SUBREDDIT_STYLE_PERMISSION_GATES } from "./permissions-gates-subreddit-style.js";
+import { CLI_PERMISSION_GATES, findGateForCommand } from "./permissions.js";
+describe("subreddit style permission gates", () => {
+    it("画像写操作映射到 subredditStyleProfile 对应动作", () => {
+        expect(findGateForCommand("style-profiles propose")).toEqual(expect.objectContaining({
+            resource: "subredditStyleProfile",
+            action: "create",
+        }));
+        expect(findGateForCommand("style-profiles approve")).toEqual(expect.objectContaining({
+            resource: "subredditStyleProfile",
+            action: "update",
+        }));
+        expect(findGateForCommand("style-profiles cancel")).toEqual(expect.objectContaining({
+            resource: "subredditStyleProfile",
+            action: "delete",
+        }));
+    });
+    it("读面与标注命令映射正确(list 对齐服务端断言 read)", () => {
+        expect(findGateForCommand("style-profiles list")).toEqual(expect.objectContaining({
+            resource: "subredditStyleProfile",
+            action: "read",
+        }));
+        expect(findGateForCommand("style-profiles active")).toEqual(expect.objectContaining({
+            resource: "subredditStyleProfile",
+            action: "read",
+        }));
+        expect(findGateForCommand("subreddit-annotations list")).toEqual(expect.objectContaining({
+            resource: "subredditPostAnnotation",
+            action: "read",
+        }));
+        expect(findGateForCommand("subreddit-annotations upsert")).toEqual(expect.objectContaining({
+            resource: "subredditPostAnnotation",
+            action: "create",
+        }));
+    });
+    it("合入 CLI_PERMISSION_GATES 且无重复登记", () => {
+        const commands = CLI_PERMISSION_GATES.map((g) => g.command);
+        for (const gate of SUBREDDIT_STYLE_PERMISSION_GATES) {
+            expect(commands.filter((c) => c === gate.command), gate.command).toHaveLength(1);
+        }
+    });
+});
+//# sourceMappingURL=permissions-gates-subreddit-style.test.js.map

package/dist/permissions-gates-subreddit-style.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"permissions-gates-subreddit-style.test.js","sourceRoot":"","sources":["../src/permissions-gates-subreddit-style.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,oBAAoB,EAAE,kBAAkB,EAAE,MAAM,kBAAkB,CAAC;AAE5E,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;IAChD,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;QAC7C,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAC1D,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,QAAQ;SACjB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,wBAAwB,CAAC,CAAC,CAAC,OAAO,CAC1D,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,QAAQ;SACjB,CAAC,CACH,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CACzD,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,QAAQ;SACjB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,kBAAkB,CAAC,qBAAqB,CAAC,CAAC,CAAC,OAAO,CACvD,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,MAAM;SACf,CAAC,CACH,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,uBAAuB,CAAC,CAAC,CAAC,OAAO,CACzD,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,uBAAuB;YACjC,MAAM,EAAE,MAAM;SACf,CAAC,CACH,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,4BAA4B,CAAC,CAAC,CAAC,OAAO,CAC9D,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,yBAAyB;YACnC,MAAM,EAAE,MAAM;SACf,CAAC,CACH,CAAC;QACF,MAAM,CAAC,kBAAkB,CAAC,8BAA8B,CAAC,CAAC,CAAC,OAAO,CAChE,MAAM,CAAC,gBAAgB,CAAC;YACtB,QAAQ,EAAE,yBAAyB;YACnC,MAAM,EAAE,QAAQ;SACjB,CAAC,CACH,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,QAAQ,GAAG,oBAAoB,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC;QAC5D,KAAK,MAAM,IAAI,IAAI,gCAAgC,EAAE,CAAC;YACpD,MAAM,CACJ,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,KAAK,IAAI,CAAC,OAAO,CAAC,EAC1C,IAAI,CAAC,OAAO,CACb,CAAC,YAAY,CAAC,CAAC,CAAC,CAAC;QACpB,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/permissions.d.ts

@@ -15,18 +15,28 @@ export declare function formatPermissionDenied(input: {
     resource: Resource;
     action: Action;
     command: string;
+    /** user-only 命令的修复提示(存在时**替换**通用"升角色 API Key"文案——
+     * 该类命令 API 拒 api_key,升角色无用;Codex diff 轮 P2)。 */
+    authNote?: string;
 }): string;
 export declare function explainCliPermissions(role: Role): {
     role: Role;
     matrix: ReturnType<typeof buildPermissionMatrix>;
     allowedCommands: string[];
     deniedCommands: string[];
+    /** 带附加约束的命令(user-only / 四眼 / 双 gate 等;role 放行≠身份满足,
+     * explain 输出须一并展示,Codex diff 轮 P2)。 */
+    commandNotes: {
+        command: string;
+        note: string;
+    }[];
 };
 export declare function assertCliPermission(input: {
     role: Role;
     resource: Resource;
     action: Action;
     command: string;
+    authNote?: string;
 }): void;
 export declare function findGateForCommand(commandPath: string): CliPermissionGate | undefined;
 //# sourceMappingURL=permissions.d.ts.map

package/dist/permissions.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,IAAI,EACT,qBAAqB,EAEtB,MAAM,4BAA4B,CAAC;AAGpC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA2GnD,CAAC;AAEF,wBAAgB,UAAU,CACxB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,MAAM,CAQT;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG;IACjD,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;IACjD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;CAC1B,CAYA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;CACjB,GAAG,IAAI,CAIP;AAED,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,GAClB,iBAAiB,GAAG,SAAS,CAE/B"}
+{"version":3,"file":"permissions.d.ts","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EACL,KAAK,MAAM,EACX,KAAK,QAAQ,EACb,KAAK,IAAI,EACT,qBAAqB,EAEtB,MAAM,4BAA4B,CAAC;AAKpC,MAAM,MAAM,iBAAiB,GAAG;IAC9B,yDAAyD;IACzD,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,2DAA2D;IAC3D,IAAI,CAAC,EAAE,MAAM,CAAC;CACf,CAAC;AAEF,yEAAyE;AACzE,eAAO,MAAM,oBAAoB,EAAE,iBAAiB,EA6GnD,CAAC;AAEF,wBAAgB,UAAU,CACxB,IAAI,EAAE,IAAI,EACV,QAAQ,EAAE,QAAQ,EAClB,MAAM,EAAE,MAAM,GACb,OAAO,CAET;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE;IAC5C,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB;oDACgD;IAChD,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,MAAM,CAST;AAED,wBAAgB,qBAAqB,CAAC,IAAI,EAAE,IAAI,GAAG;IACjD,IAAI,EAAE,IAAI,CAAC;IACX,MAAM,EAAE,UAAU,CAAC,OAAO,qBAAqB,CAAC,CAAC;IACjD,eAAe,EAAE,MAAM,EAAE,CAAC;IAC1B,cAAc,EAAE,MAAM,EAAE,CAAC;IACzB;2CACuC;IACvC,YAAY,EAAE;QAAE,OAAO,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC;CACnD,CAgBA;AAED,wBAAgB,mBAAmB,CAAC,KAAK,EAAE;IACzC,IAAI,EAAE,IAAI,CAAC;IACX,QAAQ,EAAE,QAAQ,CAAC;IACnB,MAAM,EAAE,MAAM,CAAC;IACf,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;CACnB,GAAG,IAAI,CAIP;AAED,wBAAgB,kBAAkB,CAChC,WAAW,EAAE,MAAM,GAClB,iBAAiB,GAAG,SAAS,CAE/B"}

package/dist/permissions.js

@@ -1,5 +1,7 @@
 import { buildPermissionMatrix, canPerformAction, } from "@geoly-ai/social-hub-authz";
 import { ADMIN_PERMISSION_GATES } from "./permissions-gates-admin.js";
+import { SUBREDDIT_STYLE_PERMISSION_GATES } from "./permissions-gates-subreddit-style.js";
+import { CONTENT_CLASSIFICATION_PERMISSION_GATES } from "./permissions-gates-content-classification.js";
 /** Representative write/high-risk commands mapped to authz resources. */
 export const CLI_PERMISSION_GATES = [
     { command: "accounts list", resource: "socialAccount", action: "list" },
@@ -108,6 +110,8 @@ export const CLI_PERMISSION_GATES = [
     { command: "jobs create", resource: "task", action: "create" },
     { command: "permissions", resource: "apiKey", action: "list" },
     ...ADMIN_PERMISSION_GATES,
+    ...SUBREDDIT_STYLE_PERMISSION_GATES,
+    ...CONTENT_CLASSIFICATION_PERMISSION_GATES,
 ];
 export function roleAllows(role, resource, action) {
     return canPerformAction({ role, resource, action });
@@ -116,7 +120,8 @@ export function formatPermissionDenied(input) {
     const lines = [
         `Permission denied for \`${input.command}\`.`,
         `Current role \`${input.role}\` cannot perform ${input.resource}:${input.action}.`,
-        "Fix: use an API Key with a higher role (manager/supervisor/admin), or ask a team admin to create one.",
+        input.authNote ??
+            "Fix: use an API Key with a higher role (manager/supervisor/admin), or ask a team admin to create one.",
         "Run `social-hub auth explain` to see allowed commands for your role.",
     ];
     return lines.join("\n");
@@ -133,7 +138,11 @@ export function explainCliPermissions(role) {
             deniedCommands.push(gate.command);
         }
     }
-    return { role, matrix, allowedCommands, deniedCommands };
+    const commandNotes = CLI_PERMISSION_GATES.filter((g) => g.note).map((g) => ({
+        command: g.command,
+        note: g.note,
+    }));
+    return { role, matrix, allowedCommands, deniedCommands, commandNotes };
 }
 export function assertCliPermission(input) {
     if (roleAllows(input.role, input.resource, input.action))

package/dist/permissions.js.map

@@ -1 +1 @@
-{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AAWtE,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACvE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACtE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC7E;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IACjE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5D,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAChE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC/D,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3D,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3D,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;IAC/D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE;IACpE;QACE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAC1E;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAChE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC9D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IAC9D,GAAG,sBAAsB;CAC1B,CAAC;AAEF,MAAM,UAAU,UAAU,CACxB,IAAU,EACV,QAAkB,EAClB,MAAc;IAEd,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAKtC;IACC,MAAM,KAAK,GAAG;QACZ,2BAA2B,KAAK,CAAC,OAAO,KAAK;QAC7C,kBAAkB,KAAK,CAAC,IAAI,qBAAqB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG;QAClF,uGAAuG;QACvG,sEAAsE;KACvE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAM9C,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,CAAC;AAC3D,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAKnC;IACC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO;IACjE,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;AACrE,CAAC"}
+{"version":3,"file":"permissions.js","sourceRoot":"","sources":["../src/permissions.ts"],"names":[],"mappings":"AAAA,OAAO,EAIL,qBAAqB,EACrB,gBAAgB,GACjB,MAAM,4BAA4B,CAAC;AACpC,OAAO,EAAE,sBAAsB,EAAE,MAAM,8BAA8B,CAAC;AACtE,OAAO,EAAE,gCAAgC,EAAE,MAAM,wCAAwC,CAAC;AAC1F,OAAO,EAAE,uCAAuC,EAAE,MAAM,+CAA+C,CAAC;AAWxG,yEAAyE;AACzE,MAAM,CAAC,MAAM,oBAAoB,GAAwB;IACvD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACvE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE;IACtE,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,iBAAiB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3E,EAAE,OAAO,EAAE,mBAAmB,EAAE,QAAQ,EAAE,eAAe,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC7E;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,6BAA6B;QACtC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,kCAAkC;QAC3C,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,8BAA8B;QACvC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,4BAA4B;QACrC,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,0BAA0B;QACnC,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IACjE,EAAE,OAAO,EAAE,WAAW,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC5D,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAChE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC/D,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3D,EAAE,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC3D,EAAE,OAAO,EAAE,gBAAgB,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE;IAC/D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,MAAM,EAAE;IACpE;QACE,OAAO,EAAE,wBAAwB;QACjC,QAAQ,EAAE,cAAc;QACxB,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,cAAc,EAAE,MAAM,EAAE,QAAQ,EAAE;IACxE,EAAE,OAAO,EAAE,cAAc,EAAE,QAAQ,EAAE,mBAAmB,EAAE,MAAM,EAAE,MAAM,EAAE;IAC1E;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,eAAe;QACzB,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,oBAAoB;QAC7B,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,uBAAuB;QAChC,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,gBAAgB;QACzB,QAAQ,EAAE,qBAAqB;QAC/B,MAAM,EAAE,QAAQ;KACjB;IACD;QACE,OAAO,EAAE,yBAAyB;QAClC,QAAQ,EAAE,mBAAmB;QAC7B,MAAM,EAAE,MAAM;KACf;IACD;QACE,OAAO,EAAE,qBAAqB;QAC9B,QAAQ,EAAE,oBAAoB;QAC9B,MAAM,EAAE,QAAQ;KACjB;IACD,EAAE,OAAO,EAAE,eAAe,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAChE,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE,QAAQ,EAAE;IAC9D,EAAE,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,QAAQ,EAAE,MAAM,EAAE,MAAM,EAAE;IAC9D,GAAG,sBAAsB;IACzB,GAAG,gCAAgC;IACnC,GAAG,uCAAuC;CAC3C,CAAC;AAEF,MAAM,UAAU,UAAU,CACxB,IAAU,EACV,QAAkB,EAClB,MAAc;IAEd,OAAO,gBAAgB,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAC;AACtD,CAAC;AAED,MAAM,UAAU,sBAAsB,CAAC,KAQtC;IACC,MAAM,KAAK,GAAG;QACZ,2BAA2B,KAAK,CAAC,OAAO,KAAK;QAC7C,kBAAkB,KAAK,CAAC,IAAI,qBAAqB,KAAK,CAAC,QAAQ,IAAI,KAAK,CAAC,MAAM,GAAG;QAClF,KAAK,CAAC,QAAQ;YACZ,uGAAuG;QACzG,sEAAsE;KACvE,CAAC;IACF,OAAO,KAAK,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAC1B,CAAC;AAED,MAAM,UAAU,qBAAqB,CAAC,IAAU;IAS9C,MAAM,MAAM,GAAG,qBAAqB,EAAE,CAAC;IACvC,MAAM,eAAe,GAAa,EAAE,CAAC;IACrC,MAAM,cAAc,GAAa,EAAE,CAAC;IACpC,KAAK,MAAM,IAAI,IAAI,oBAAoB,EAAE,CAAC;QACxC,IAAI,UAAU,CAAC,IAAI,EAAE,IAAI,CAAC,QAAQ,EAAE,IAAI,CAAC,MAAM,CAAC,EAAE,CAAC;YACjD,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACrC,CAAC;aAAM,CAAC;YACN,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QACpC,CAAC;IACH,CAAC;IACD,MAAM,YAAY,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC;QAC1E,OAAO,EAAE,CAAC,CAAC,OAAO;QAClB,IAAI,EAAE,CAAC,CAAC,IAAc;KACvB,CAAC,CAAC,CAAC;IACJ,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE,YAAY,EAAE,CAAC;AACzE,CAAC;AAED,MAAM,UAAU,mBAAmB,CAAC,KAMnC;IACC,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,EAAE,KAAK,CAAC,QAAQ,EAAE,KAAK,CAAC,MAAM,CAAC;QAAE,OAAO;IACjE,OAAO,CAAC,KAAK,CAAC,sBAAsB,CAAC,KAAK,CAAC,CAAC,CAAC;IAC7C,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AAClB,CAAC;AAED,MAAM,UAAU,kBAAkB,CAChC,WAAmB;IAEnB,OAAO,oBAAoB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,OAAO,KAAK,WAAW,CAAC,CAAC;AACrE,CAAC"}

package/dist/register-content-classification.d.ts

@@ -0,0 +1,14 @@
+import type { Command } from "commander";
+/** spec create 请求体的本地形状校验(契约 createClassifierSpecBodySchema 高频子集;非法输入 dry-run 前即拒)。 */
+export declare function buildCreateSpecBody(raw: Record<string, unknown>): {
+    purpose: string;
+    taxonomyVersion: string;
+    taxonomySchemaVersion: string;
+    promptVersion: string;
+    modelPolicy: Record<string, unknown>;
+    inputFingerprintVersion?: string;
+    truncationPolicyVersion?: string;
+    formatDetectorVersion?: string;
+};
+export declare function registerContentClassificationCommands(program: Command): void;
+//# sourceMappingURL=register-content-classification.d.ts.map

package/dist/register-content-classification.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-content-classification.d.ts","sourceRoot":"","sources":["../src/register-content-classification.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAqBzC,uFAAuF;AACvF,wBAAgB,mBAAmB,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;IACjE,OAAO,EAAE,MAAM,CAAC;IAChB,eAAe,EAAE,MAAM,CAAC;IACxB,qBAAqB,EAAE,MAAM,CAAC;IAC9B,aAAa,EAAE,MAAM,CAAC;IACtB,WAAW,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACrC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,uBAAuB,CAAC,EAAE,MAAM,CAAC;IACjC,qBAAqB,CAAC,EAAE,MAAM,CAAC;CAChC,CAyCA;AAED,wBAAgB,qCAAqC,CAAC,OAAO,EAAE,OAAO,GAAG,IAAI,CA8L5E"}