@geoly-ai/social-hub-cli 0.3.12 → 0.3.14

package/CHANGELOG.md

@@ -4,6 +4,23 @@ All notable changes to `@geoly-ai/social-hub-cli` are documented in this file.
 
 Release workflow: `pnpm release:cli` → `pnpm publish:cli`.
 
+## [0.3.14] - 2026-08-05
+
+### Added
+
+- reddit-\* 改为本仓库直接维护 —— 补 --relock 模式,恢复被误还原的作者关系轴说明
+
+### Fixed
+
+- 还原 4 个 vendored reddit skill —— 冻结区不接受本地修改
+
+## [0.3.13] - 2026-08-05
+
+### Added
+
+- permissionMatrix 收敛为「不受限的交互式 admin」专属治理面
+- 作者关系轴的外部调用面 —— 三层接线,且刻意不把它写成加分项
+
 ## [0.3.12] - 2026-08-04
 
 ### Added

package/dist/cmd-manifest.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-08-04T16:23:11.683Z",
-  "cliVersion": "0.3.12",
+  "generatedAt": "2026-08-05T06:01:06.323Z",
+  "cliVersion": "0.3.14",
   "commands": [
     "accounts",
     "accounts brand-bindings",

package/dist/content-review.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=content-review.test.d.ts.map

package/dist/content-review.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-review.test.d.ts","sourceRoot":"","sources":["../src/content-review.test.ts"],"names":[],"mappings":""}

package/dist/content-review.test.js

@@ -0,0 +1,222 @@
+/**
+ * Integration test: `content review` 的作者关系轴调用面。
+ *
+ * 三条断言是本次接线的核心不变量:
+ * 1. 便利 flag 合并进请求体(并覆盖 -j 里的同名值);
+ * 2. **输出只展示服务端派生的 authorRelation/Evidence,绝不回显调用方的 hint** ——
+ *    回显会让「自称 OP」看起来像被系统承认;
+ * 3. 422 AUTHOR_RELATION_MISMATCH 有可行动提示 + 非零退出 + stdout 为空。
+ */
+import { beforeAll, afterEach, describe, expect, it, vi } from "vitest";
+import { writeFileSync, mkdtempSync } from "node:fs";
+import { tmpdir } from "node:os";
+import { join } from "node:path";
+import { SocialHubHttpError } from "@geoly-ai/social-hub-sdk";
+const contentReview = vi.fn();
+vi.mock("./client.js", () => ({
+    requireClient: () => ({ contentReview }),
+    resolveTeamId: (t) => t ?? "team-1",
+    getBaseUrl: () => "http://localhost",
+}));
+let program;
+const stdout = [];
+const stderr = [];
+let exitCode;
+/** 退出所有权只归最外层 boundary:内层再 exit 会造出生产中不存在的二次捕获路径。 */
+let exitCalls = 0;
+beforeAll(async () => {
+    program = (await import("./index.js")).program;
+    vi.spyOn(console, "log").mockImplementation((...a) => {
+        stdout.push(a.map(String).join(" "));
+    });
+    vi.spyOn(console, "error").mockImplementation((...a) => {
+        stderr.push(a.map(String).join(" "));
+    });
+    vi.spyOn(process, "exit").mockImplementation(((code) => {
+        exitCode = code;
+        exitCalls += 1;
+        throw new Error(`__exit__${code}`);
+    }));
+}, 30000);
+function reviewCmd() {
+    const content = program.commands.find((c) => c.name() === "content");
+    return content?.commands.find((c) => c.name() === "review");
+}
+afterEach(() => {
+    contentReview.mockReset();
+    stdout.length = 0;
+    stderr.length = 0;
+    exitCode = undefined;
+    exitCalls = 0;
+    // Commander 把值挂在单例 command 上;不清会串场。
+    const cmd = reviewCmd();
+    for (const key of [
+        "json",
+        "jsonFile",
+        "brandContext",
+        "threadPermalink",
+        "authorRelationHint",
+    ]) {
+        cmd?.setOptionValue(key, undefined);
+    }
+});
+const okResult = {
+    reviewId: "11111111-1111-1111-1111-111111111111",
+    executionStatus: "completed",
+    verdict: "pass",
+    // 服务端派生:与下面请求里的 hint 刻意不一致,用来钉死「不回显 hint」。
+    authorRelation: "other",
+    authorRelationEvidence: "verified_snapshot",
+    score: 89,
+    modelScore: 88,
+    dimensions: null,
+    optimized: null,
+    rationale: null,
+    reviewModel: "m",
+    rubricVersion: "content-review.v4",
+    thresholdSnapshot: {},
+    latencyMs: 12,
+    degradedReason: null,
+};
+const body = {
+    draft: "Update: it was the PSU cable.",
+    commentType: "top_level",
+    thread: { subreddit: "buildapc", postTitle: "PC reboots under load" },
+};
+async function run(...args) {
+    await program.parseAsync([
+        "node",
+        "social-hub",
+        "content",
+        "review",
+        ...args,
+    ]);
+}
+describe("content review 作者关系轴 flags", () => {
+    it("--thread-permalink / --author-relation-hint 合并进请求体", async () => {
+        contentReview.mockResolvedValue(okResult);
+        await run("-j", JSON.stringify(body), "--thread-permalink", "https://www.reddit.com/r/buildapc/comments/abc/x/", "--author-relation-hint", "post_author");
+        expect(contentReview).toHaveBeenCalledWith("team-1", {
+            ...body,
+            authorRelationHint: "post_author",
+            thread: {
+                subreddit: "buildapc",
+                postTitle: "PC reboots under load",
+                threadPermalink: "https://www.reddit.com/r/buildapc/comments/abc/x/",
+            },
+        });
+    });
+    it("从 --json-file 读 body 时 flag 同样生效,并覆盖文件里的同名值", async () => {
+        contentReview.mockResolvedValue(okResult);
+        const dir = mkdtempSync(join(tmpdir(), "cr-args-"));
+        const file = join(dir, "body.json");
+        writeFileSync(file, JSON.stringify({
+            ...body,
+            authorRelationHint: "other",
+            thread: { ...body.thread, threadPermalink: "https://old/" },
+        }), "utf8");
+        await run("--json-file", file, "--thread-permalink", "https://new/", "--author-relation-hint", "post_author");
+        const sent = contentReview.mock.calls[0]?.[1];
+        expect(sent["authorRelationHint"]).toBe("post_author");
+        expect(sent["thread"]["threadPermalink"]).toBe("https://new/");
+    });
+    it("非法 hint 本地拒绝:不发请求、非零退出", async () => {
+        await expect(run("-j", JSON.stringify(body), "--author-relation-hint", "OP")).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+        expect(exitCode).toBe(1);
+        // 只退出一次:参数错误经 throw 交给最外层 boundary,而不是内层自己 exit。
+        expect(exitCalls).toBe(1);
+        expect(stderr.join("\n")).toMatch(/post_author \| other/);
+    });
+    it.each([
+        ["空串", ""],
+        ["纯空白", "   "],
+    ])("--thread-permalink %s 被本地拒绝(不会静默覆盖掉 -j 里的有效值)", async (_l, raw) => {
+        await expect(run("-j", JSON.stringify({
+            ...body,
+            thread: { ...body.thread, threadPermalink: "https://real/" },
+        }), "--thread-permalink", raw)).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+    });
+    it("--thread-permalink 超过 2048 字符本地拒绝", async () => {
+        await expect(run("-j", JSON.stringify(body), "--thread-permalink", `https://x/${"a".repeat(2049)}`)).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+    });
+    it("--author-relation-hint 不带值由 commander 拒绝,不发请求", async () => {
+        await expect(run("-j", JSON.stringify(body), "--author-relation-hint")).rejects.toThrow();
+        expect(contentReview).not.toHaveBeenCalled();
+    });
+    // 本轮把 readJsonArgOrExit / 内层 process.exit 全改成 throw 交给最外层 boundary,
+    // 这两条正是被改造的控制路径:必须仍然只退出一次。
+    it("-j 不是合法 JSON → 单次退出、不发请求", async () => {
+        await expect(run("-j", "{not json")).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+        expect(exitCalls).toBe(1);
+        expect(stderr.join("\n")).toMatch(/JSON/);
+    });
+    it("--brand-context 不是合法 JSON → 单次退出、不发请求", async () => {
+        await expect(run("-j", JSON.stringify(body), "--brand-context", "{oops")).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+        expect(exitCalls).toBe(1);
+        expect(stderr.join("\n")).toContain("--brand-context");
+    });
+    it("body 里没有 thread 时用 --thread-permalink → 本地拒绝,不凭空造 thread", async () => {
+        await expect(run("-j", JSON.stringify({ draft: "x", commentType: "top_level" }), "--thread-permalink", "https://x/")).rejects.toThrow(/__exit__1/);
+        expect(contentReview).not.toHaveBeenCalled();
+    });
+});
+describe("content review 输出", () => {
+    it("展示服务端派生的 authorRelation/Evidence,绝不回显调用方 hint", async () => {
+        contentReview.mockResolvedValue(okResult);
+        await run("-j", JSON.stringify(body), 
+        // 声称 post_author,但服务端派生的是 other。
+        "--author-relation-hint", "post_author");
+        const out = stdout.join("\n");
+        const parsed = JSON.parse(out);
+        expect(parsed["authorRelation"]).toBe("other");
+        expect(parsed["authorRelationEvidence"]).toBe("verified_snapshot");
+        // 输出里不得出现 hint 字段(哪怕作为「你声称了什么」的回显)。
+        // 只查精确 key:服务端 rationale/issues 里合法出现 "hint" 一词不该让本例变红。
+        expect(parsed).not.toHaveProperty("authorRelationHint");
+    });
+    it("成功路径 stderr 保持安静(脚本把非空 stderr 当异常)", async () => {
+        contentReview.mockResolvedValue(okResult);
+        await run("-j", JSON.stringify(body));
+        expect(stderr).toEqual([]);
+    });
+});
+describe("content review 422 AUTHOR_RELATION_MISMATCH", () => {
+    it("给可行动提示、stdout 为空、非零退出,且不打印服务端 details", async () => {
+        contentReview.mockRejectedValue(new SocialHubHttpError({
+            status: 422,
+            message: "HTTP 422: authorRelationHint=post_author contradicts evidence",
+            code: "AUTHOR_RELATION_MISMATCH",
+            details: {
+                authorRelation: {
+                    snapshotAuthor: "u/someone-else",
+                    evidence: "mismatch",
+                },
+            },
+        }));
+        await expect(run("-j", JSON.stringify(body), "--author-relation-hint", "post_author")).rejects.toThrow(/__exit__1/);
+        expect(exitCode).toBe(1);
+        expect(stdout).toEqual([]);
+        const err = stderr.join("\n");
+        expect(err).toContain("硬失败");
+        // details 里的快照作者不得外泄到终端。
+        expect(err).not.toContain("someone-else");
+        expect(exitCalls).toBe(1);
+    });
+    it("其它 HTTP 错误走通用错误边界,不带 mismatch 提示", async () => {
+        contentReview.mockRejectedValue(new SocialHubHttpError({
+            status: 422,
+            message: "HTTP 422: brand context required",
+            code: "BRAND_CONTEXT_REQUIRED",
+        }));
+        await expect(run("-j", JSON.stringify(body))).rejects.toThrow(/__exit__1/);
+        const err = stderr.join("\n");
+        expect(err).toContain("brand context required");
+        expect(err).not.toContain("硬失败");
+    });
+});
+//# sourceMappingURL=content-review.test.js.map

package/dist/content-review.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"content-review.test.js","sourceRoot":"","sources":["../src/content-review.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;GAQG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AACxE,OAAO,EAAE,aAAa,EAAE,WAAW,EAAE,MAAM,SAAS,CAAC;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AACjC,OAAO,EAAE,kBAAkB,EAAE,MAAM,0BAA0B,CAAC;AAE9D,MAAM,aAAa,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC;AAE9B,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC;IACxC,aAAa,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ;IAC5C,UAAU,EAAE,GAAG,EAAE,CAAC,kBAAkB;CACrC,CAAC,CAAC,CAAC;AAEJ,IAAI,OAAwD,CAAC;AAC7D,MAAM,MAAM,GAAa,EAAE,CAAC;AAC5B,MAAM,MAAM,GAAa,EAAE,CAAC;AAC5B,IAAI,QAA4B,CAAC;AACjC,qDAAqD;AACrD,IAAI,SAAS,GAAG,CAAC,CAAC;AAElB,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAY,EAAE,EAAE;QAC9D,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,kBAAkB,CAAC,CAAC,GAAG,CAAY,EAAE,EAAE;QAChE,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;IACvC,CAAC,CAAC,CAAC;IACH,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC,kBAAkB,CAAC,CAAC,CAAC,IAAa,EAAE,EAAE;QAC9D,QAAQ,GAAG,IAAI,CAAC;QAChB,SAAS,IAAI,CAAC,CAAC;QACf,MAAM,IAAI,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC;IACrC,CAAC,CAAU,CAAC,CAAC;AACf,CAAC,EAAE,KAAK,CAAC,CAAC;AAEV,SAAS,SAAS;IAChB,MAAM,OAAO,GAAG,OAAO,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,SAAS,CAAC,CAAC;IACrE,OAAO,OAAO,EAAE,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,QAAQ,CAAC,CAAC;AAC9D,CAAC;AAED,SAAS,CAAC,GAAG,EAAE;IACb,aAAa,CAAC,SAAS,EAAE,CAAC;IAC1B,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC;IAClB,QAAQ,GAAG,SAAS,CAAC;IACrB,SAAS,GAAG,CAAC,CAAC;IACd,oCAAoC;IACpC,MAAM,GAAG,GAAG,SAAS,EAAE,CAAC;IACxB,KAAK,MAAM,GAAG,IAAI;QAChB,MAAM;QACN,UAAU;QACV,cAAc;QACd,iBAAiB;QACjB,oBAAoB;KACrB,EAAE,CAAC;QACF,GAAG,EAAE,cAAc,CAAC,GAAG,EAAE,SAAS,CAAC,CAAC;IACtC,CAAC;AACH,CAAC,CAAC,CAAC;AAEH,MAAM,QAAQ,GAAG;IACf,QAAQ,EAAE,sCAAsC;IAChD,eAAe,EAAE,WAAW;IAC5B,OAAO,EAAE,MAAM;IACf,2CAA2C;IAC3C,cAAc,EAAE,OAAO;IACvB,sBAAsB,EAAE,mBAAmB;IAC3C,KAAK,EAAE,EAAE;IACT,UAAU,EAAE,EAAE;IACd,UAAU,EAAE,IAAI;IAChB,SAAS,EAAE,IAAI;IACf,SAAS,EAAE,IAAI;IACf,WAAW,EAAE,GAAG;IAChB,aAAa,EAAE,mBAAmB;IAClC,iBAAiB,EAAE,EAAE;IACrB,SAAS,EAAE,EAAE;IACb,cAAc,EAAE,IAAI;CACrB,CAAC;AAEF,MAAM,IAAI,GAAG;IACX,KAAK,EAAE,+BAA+B;IACtC,WAAW,EAAE,WAAW;IACxB,MAAM,EAAE,EAAE,SAAS,EAAE,UAAU,EAAE,SAAS,EAAE,uBAAuB,EAAE;CACtE,CAAC;AAEF,KAAK,UAAU,GAAG,CAAC,GAAG,IAAc;IAClC,MAAM,OAAO,CAAC,UAAU,CAAC;QACvB,MAAM;QACN,YAAY;QACZ,SAAS;QACT,QAAQ;QACR,GAAG,IAAI;KACR,CAAC,CAAC;AACL,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,EAAE,CAAC,oDAAoD,EAAE,KAAK,IAAI,EAAE;QAClE,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,CACP,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,oBAAoB,EACpB,mDAAmD,EACnD,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,CAAC,aAAa,CAAC,CAAC,oBAAoB,CAAC,QAAQ,EAAE;YACnD,GAAG,IAAI;YACP,kBAAkB,EAAE,aAAa;YACjC,MAAM,EAAE;gBACN,SAAS,EAAE,UAAU;gBACrB,SAAS,EAAE,uBAAuB;gBAClC,eAAe,EAAE,mDAAmD;aACrE;SACF,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6CAA6C,EAAE,KAAK,IAAI,EAAE;QAC3D,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC,CAAC;QACpD,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,EAAE,WAAW,CAAC,CAAC;QACpC,aAAa,CACX,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,IAAI;YACP,kBAAkB,EAAE,OAAO;YAC3B,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,cAAc,EAAE;SAC5D,CAAC,EACF,MAAM,CACP,CAAC;QACF,MAAM,GAAG,CACP,aAAa,EACb,IAAI,EACJ,oBAAoB,EACpB,cAAc,EACd,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,IAAI,GAAG,aAAa,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAA4B,CAAC;QACzE,MAAM,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAC,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;QACvD,MAAM,CAAE,IAAI,CAAC,QAAQ,CAA6B,CAAC,iBAAiB,CAAC,CAAC,CAAC,IAAI,CACzE,cAAc,CACf,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,wBAAwB,EAAE,KAAK,IAAI,EAAE;QACtC,MAAM,MAAM,CACV,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,IAAI,CAAC,CAChE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,iDAAiD;QACjD,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,sBAAsB,CAAC,CAAC;IAC5D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,IAAI,CAAC;QACN,CAAC,IAAI,EAAE,EAAE,CAAC;QACV,CAAC,KAAK,EAAE,KAAK,CAAC;KACf,CAAC,CACA,+CAA+C,EAC/C,KAAK,EAAE,EAAE,EAAE,GAAG,EAAE,EAAE;QAChB,MAAM,MAAM,CACV,GAAG,CACD,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC;YACb,GAAG,IAAI;YACP,MAAM,EAAE,EAAE,GAAG,IAAI,CAAC,MAAM,EAAE,eAAe,EAAE,eAAe,EAAE;SAC7D,CAAC,EACF,oBAAoB,EACpB,GAAG,CACJ,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CACF,CAAC;IAEF,EAAE,CAAC,mCAAmC,EAAE,KAAK,IAAI,EAAE;QACjD,MAAM,MAAM,CACV,GAAG,CACD,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EACpB,oBAAoB,EACpB,aAAa,GAAG,CAAC,MAAM,CAAC,IAAI,CAAC,EAAE,CAChC,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,MAAM,MAAM,CACV,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,wBAAwB,CAAC,CAC1D,CAAC,OAAO,CAAC,OAAO,EAAE,CAAC;QACpB,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;IAEH,oEAAoE;IACpE,2BAA2B;IAC3B,EAAE,CAAC,0BAA0B,EAAE,KAAK,IAAI,EAAE;QACxC,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,WAAW,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAClE,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,MAAM,MAAM,CACV,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,CAC5D,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;QAC7C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC1B,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,iBAAiB,CAAC,CAAC;IACzD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,0DAA0D,EAAE,KAAK,IAAI,EAAE;QACxE,MAAM,MAAM,CACV,GAAG,CACD,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,GAAG,EAAE,WAAW,EAAE,WAAW,EAAE,CAAC,EACxD,oBAAoB,EACpB,YAAY,CACb,CACF,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,aAAa,CAAC,CAAC,GAAG,CAAC,gBAAgB,EAAE,CAAC;IAC/C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,+CAA+C,EAAE,KAAK,IAAI,EAAE;QAC7D,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,CACP,IAAI,EACJ,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;QACpB,iCAAiC;QACjC,wBAAwB,EACxB,aAAa,CACd,CAAC;QACF,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAA4B,CAAC;QAC1D,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC;QAC/C,MAAM,CAAC,MAAM,CAAC,wBAAwB,CAAC,CAAC,CAAC,IAAI,CAAC,mBAAmB,CAAC,CAAC;QACnE,oCAAoC;QACpC,wDAAwD;QACxD,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,CAAC,cAAc,CAAC,oBAAoB,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,KAAK,IAAI,EAAE;QAClD,aAAa,CAAC,iBAAiB,CAAC,QAAQ,CAAC,CAAC;QAC1C,MAAM,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;IAC7B,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,6CAA6C,EAAE,GAAG,EAAE;IAC3D,EAAE,CAAC,uCAAuC,EAAE,KAAK,IAAI,EAAE;QACrD,aAAa,CAAC,iBAAiB,CAC7B,IAAI,kBAAkB,CAAC;YACrB,MAAM,EAAE,GAAG;YACX,OAAO,EACL,+DAA+D;YACjE,IAAI,EAAE,0BAA0B;YAChC,OAAO,EAAE;gBACP,cAAc,EAAE;oBACd,cAAc,EAAE,gBAAgB;oBAChC,QAAQ,EAAE,UAAU;iBACrB;aACF;SACF,CAAC,CACH,CAAC;QACF,MAAM,MAAM,CACV,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,wBAAwB,EAAE,aAAa,CAAC,CACzE,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC/B,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACzB,MAAM,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,EAAE,CAAC,CAAC;QAC3B,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;QAC7B,yBAAyB;QACzB,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,cAAc,CAAC,CAAC;QAC1C,MAAM,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAC5B,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,kCAAkC,EAAE,KAAK,IAAI,EAAE;QAChD,aAAa,CAAC,iBAAiB,CAC7B,IAAI,kBAAkB,CAAC;YACrB,MAAM,EAAE,GAAG;YACX,OAAO,EAAE,kCAAkC;YAC3C,IAAI,EAAE,wBAAwB;SAC/B,CAAC,CACH,CAAC;QACF,MAAM,MAAM,CAAC,GAAG,CAAC,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,OAAO,CAAC,WAAW,CAAC,CAAC;QAC3E,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC9B,MAAM,CAAC,GAAG,CAAC,CAAC,SAAS,CAAC,wBAAwB,CAAC,CAAC;QAChD,MAAM,CAAC,GAAG,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,KAAK,CAAC,CAAC;IACnC,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAgDpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAk9E9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAqgCD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAkJnE;AA+1ED,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuDpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AA6+E9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAqgCD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAkJnE;AA+1ED,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -1,6 +1,6 @@
 #!/usr/bin/env node
 import { Command } from "commander";
-import { getSocialHubHealth, } from "@geoly-ai/social-hub-sdk";
+import { getSocialHubHealth, isAuthorRelationMismatchError, } from "@geoly-ai/social-hub-sdk";
 import { getBaseUrl, requireClient, resolveTeamId } from "./client.js";
 import { registerAccountsExtensions, registerAuthAndConfig, registerAuthzEvaluate, registerPermissionsExplain, registerRedditExtensions, listRedditSnapshotsPaginated, redditAggregateQueryParams, } from "./register-extensions.js";
 import { registerAdminCommands } from "./register-admin.js";
@@ -13,7 +13,9 @@ import { registerBatchAndExport } from "./register-batch.js";
 import { registerAgentContext, registerOpsRuntime } from "./register-ops.js";
 import { registerDoctorAndVersion } from "./register-shared.js";
 import { registerSkillsCommands } from "./register-skills.js";
-import { readJsonArgOrExit } from "./lib/json-arg.js";
+import { readJsonArgOrExit, resolveJsonArg } from "./lib/json-arg.js";
+import { applyContentReviewFlags, AUTHOR_RELATION_MISMATCH_HINT, ContentReviewArgError, } from "./lib/content-review-args.js";
+import { withCliErrorBoundary } from "./output.js";
 import { maybeNotifyUpdate } from "./update-check.js";
 import { maybeNotifySkillUpdate } from "./skill-update-check.js";
 import { getCliVersion } from "./version-info.js";
@@ -475,22 +477,44 @@ content
     .option("-j, --json <json>", "{ accountId?, draft, commentType, thread:{subreddit,postTitle,...}, brandContext?:{brandKey|campaignId}, rewrite?, stage?, attempt? } (omit accountId for persona-less ContentOnly review)。也可 -j @<path> 读文件 / -j - 读 stdin")
     .option("--json-file <path>", "从文件读 body JSON(路径,或 - 表示 stdin);与 -j 二选一。Windows 建议用此绕开 shell 引号问题")
     .option("--brand-context <json>", '品牌上下文 { "brandKey":"..." } 或 { "campaignId":"..." }(§0.3;便捷参数,覆盖 -j 里的 brandContext)')
-    .action(async (opts) => {
-    const body = readJsonArgOrExit({
-        inline: opts.json,
-        file: opts.jsonFile,
-    });
-    if (opts.brandContext) {
+    .option("--thread-permalink <url>", "本次所审原帖的 permalink,写进 thread.threadPermalink(覆盖 -j 里的同名值)。供 Hub 独立核验作者关系;不保证 Hub 侧有该帖快照,也不改变评分标准")
+    .option("--author-relation-hint <post_author|other>", "非权威提示,不是身份声明:Hub 始终按发布账号 × permalink × 帖子快照派生权威 authorRelation,证据永远覆盖 hint;声称 post_author 而证据证伪 → 422 硬失败")
+    .action(async (opts) => {
+    // 退出所有权只归最外层 boundary:内层再 `process.exit` 会让「参数错误」和
+    // 「HTTP 错误」走两套退出路径,且测试里 mock 掉 exit 后异常会被同一 action
+    // 二次捕获 —— 那是生产中不存在的路径(假绿)。所以这里一律 throw。
+    await withCliErrorBoundary(async () => {
+        const raw = resolveJsonArg({
+            inline: opts.json,
+            file: opts.jsonFile,
+            required: true,
+        });
+        const body = applyContentReviewFlags(raw, {
+            threadPermalink: opts.threadPermalink,
+            authorRelationHint: opts.authorRelationHint,
+        });
+        if (opts.brandContext) {
+            try {
+                body["brandContext"] = JSON.parse(opts.brandContext);
+            }
+            catch {
+                throw new ContentReviewArgError("--brand-context 不是合法 JSON");
+            }
+        }
         try {
-            body.brandContext = JSON.parse(opts.brandContext);
+            // 输出即服务端响应:其中的 authorRelation/authorRelationEvidence 是**服务端派生**的。
+            // 刻意不额外回显调用方的 --author-relation-hint —— 把 hint 和结论并排展示,
+            // 会让「自称 OP」看起来像被系统承认。
+            const res = await requireClient().contentReview(resolveTeamId(opts.team), body);
+            console.log(JSON.stringify(res, null, 2));
         }
-        catch {
-            console.error("Invalid --brand-context JSON");
-            process.exit(1);
+        catch (e) {
+            if (isAuthorRelationMismatchError(e)) {
+                console.error(AUTHOR_RELATION_MISMATCH_HINT);
+            }
+            throw e;
         }
-    }
-    const res = await requireClient().contentReview(resolveTeamId(opts.team), body);
-    console.log(JSON.stringify(res, null, 2));
+    });
 });
 content
     .command("post-review")