@geoly-ai/social-hub-cli 0.3.13 → 0.3.14

package/CHANGELOG.md

@@ -4,6 +4,16 @@ All notable changes to `@geoly-ai/social-hub-cli` are documented in this file.
 
 Release workflow: `pnpm release:cli` → `pnpm publish:cli`.
 
+## [0.3.14] - 2026-08-05
+
+### Added
+
+- reddit-\* 改为本仓库直接维护 —— 补 --relock 模式,恢复被误还原的作者关系轴说明
+
+### Fixed
+
+- 还原 4 个 vendored reddit skill —— 冻结区不接受本地修改
+
 ## [0.3.13] - 2026-08-05
 
 ### Added

package/dist/cmd-manifest.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-08-05T03:25:04.819Z",
-  "cliVersion": "0.3.13",
+  "generatedAt": "2026-08-05T06:01:06.323Z",
+  "cliVersion": "0.3.14",
   "commands": [
     "accounts",
     "accounts brand-bindings",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geoly-ai/social-hub-cli",
-  "version": "0.3.13",
+  "version": "0.3.14",
   "type": "module",
   "description": "social-hub CLI for Social Ops Hub",
   "repository": {

package/skills/manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "package": "social-ops-hub",
-  "cliVersion": "0.3.13",
+  "cliVersion": "0.3.14",
   "repository": "social-ops-hub",
   "publish": {
     "registry": "https://skill.sh",

package/skills/reddit-content-rewrite/SKILL.md

@@ -359,6 +359,12 @@ ExplicitStructureSpec:
 - `title` + `body` 的完整帖子调用 `social-hub content post-review`
 - 仅标题候选可作为 `CandidateOnly` 返回，但必须标注不可直接发布、`ContentReviewStatus: NotRun`、`ReadyForUse: No`；一旦配正文，必须按完整帖子重新审核
 - 评论/回复调用 `social-hub content review`，并传入 subreddit、帖子和父评论上下文
+- 知道所回帖子的确切 permalink 时带上 `thread.threadPermalink`，不知道就省略。作者关系
+  (`authorRelation`)由 Hub 自行派生：请求侧的 `authorRelationHint` 只是**非权威提示**、
+  不是身份声明，虚假声称 `post_author` 是 **422 硬失败**而非降级；`post_author`
+  **不加分**，`Update ...` 开头既不扣分也不加分。**不得**为了改变评分而添加 permalink、
+  hint 或 update 式开头。完整规则与需记录的派生值见
+  `../reddit-strategy-shared/references/content-review-gate.md` §3.05
 - 先选择审核模式：最终发布账号未确定时省略 `accountId`，使用 ContentOnly；已确定时传真实账号，使用 AccountBound。Hub 要求显式品牌关系时，从已批准的策略绑定传 `brandContext`，不得猜测；`stage` 不确定时省略，不传任意值
 - 首次请求使用 `rewrite: true, attempt: 1`
 - `completed/revise` 时，应用 Hub 的 `optimized` 或 `dimensions.issues`，保留事实和内容功能后，用改后的**完整文本** `attempt: 2` 重审

package/skills/reddit-content-writing/SKILL.md

@@ -80,6 +80,15 @@ C-B/C-NB, and rows that were previously low risk.
    arbitrary `stage` value.
 3. Send `rewrite: true, attempt: 1`. Inspect `executionStatus` before
    `verdict`.
+   For a comment/reply, include `thread.threadPermalink` when you know the
+   permalink of the exact post being replied to; omit it otherwise. Hub uses it
+   to derive `authorRelation` itself — the request-side `authorRelationHint` is
+   a non-authoritative hint, not an identity claim, and a false `post_author`
+   claim is a hard 422, not a downgrade. `post_author` grants **no score bonus**
+   and an `Update ...` opening is neither penalised nor rewarded. Never add a
+   permalink, a hint, or an update-style opening to move the score. Full rules
+   and the derived values to record:
+   `../reddit-strategy-shared/references/content-review-gate.md` §3.05.
 4. On `completed/revise`, apply each listed issue without changing approved
    facts, SKU bindings, disclosures, or the post/comment function. **Do not
    adopt the returned `optimized` draft wholesale if it changes any protected

package/skills/reddit-matrix.lock.json

@@ -7,7 +7,7 @@
       "contentSha256": "501408ce9cd1be969ac91c672523cde18bdbb6118836e032539ef30af98f2711"
     },
     "reddit-strategy-shared": {
-      "contentSha256": "04c91d348907fded8cda969af973056dfff70ecfd96011e6dea01c3462f23ab0"
+      "contentSha256": "9ffdae74106e1b93b265bd89f6b0b1674f2b37a9dafd43c4a50129ac75f85862"
     },
     "reddit-phase-research": {
       "contentSha256": "e1818757ae92019448a454b956cb38c9cabc7e3c4762da4a6e4a765d687b8dc6"
@@ -19,10 +19,10 @@
       "contentSha256": "841d9e9928126553af0211da7d74a69af92076fc00d800dff2243075359b2157"
     },
     "reddit-content-writing": {
-      "contentSha256": "262d8cd5bb4709452793e2711e9ea07ff73e5d46ee2e507d6723f364b3cbed01"
+      "contentSha256": "9b2f4cda552d5f76b3ab289504f84db599245e7245297a9d974cc55143872d8d"
     },
     "reddit-content-rewrite": {
-      "contentSha256": "fd96108f6436804e80cb4054e5904df9ef59a4c68cec4efd410f1247bbee4735"
+      "contentSha256": "3e7df833877fc81a46d66ab7c827fac386a1413862724179e87570d773ab8935"
     },
     "reddit-delivery-check": {
       "contentSha256": "234d7fd1d8f2db68444674c20418c836c1b2488305b20399114dec89a0de32fc"

package/skills/reddit-strategy-shared/SKILL.md

@@ -94,6 +94,11 @@ it is delivered to the next skill or presented as ready:
 - post (`title` + `body`) -> `social-hub content post-review`
 - comment/reply -> `social-hub content review`
 
+Author-relation semantics (`authorRelation` / `authorRelationHint` /
+`threadPermalink`) are defined in one place only —
+`references/content-review-gate.md` §3.05. It is a Hub-derived identity check,
+not a scoring option; do not restate or reinterpret it elsewhere.
+
 The producer must apply Hub `revise` feedback and submit the changed draft
 again within the Hub attempt limit. `executionStatus=completed` with
 `verdict=pass` is necessary for content review.

package/skills/reddit-strategy-shared/references/content-review-gate.md

@@ -125,13 +125,18 @@ social-hub content review -t <team-id> -j '{
     "postBody": "<post body or concise factual summary>",
     "parentComment": "<required for a reply>",
     "topComments": ["<relevant top comments>"],
-    "subredditToneHint": "<tone>"
+    "subredditToneHint": "<tone>",
+    "threadPermalink": "<permalink of the exact post being reviewed, when known>"
   },
   "rewrite": true,
   "attempt": 1
 }'
 ```
 
+`threadPermalink` (also settable as `--thread-permalink`) must be the permalink of
+the **exact post this comment belongs to**, or be omitted. It is not a scoring
+option: see the author-relation section below.
+
 Always inspect `executionStatus` before `verdict`:
 
 For AccountBound, add the selected account to either payload:
@@ -151,6 +156,7 @@ property for ContentOnly.
 | `degraded`, timeout, 5xx, auth/context failure | Not passed. Do not use a local self-score as a substitute. Fix Hub availability and rerun. |
 | HTTP 400 invalid request | Fix the payload schema or omit an unsupported `stage`; do not count the failed request as an attempt or pass. |
 | HTTP 422 requesting explicit brand context | Resolve an approved `brandKey`/`campaignId` from Hub context or user-approved strategy; do not guess. |
+| HTTP 422 `AUTHOR_RELATION_MISMATCH` | Hard failure, not a downgrade. You claimed `authorRelationHint: post_author` and Hub's post snapshot shows the publishing account is not that post's author. No LLM call was made and a security audit was written. Do not retry, and do not swap in a different permalink. Verify the publishing account and the permalink, or drop the hint and rerun. |
 | `revise` after the service attempt limit | Not passed. Stop with `ReadyForNextSkill: No`; do not loop forever or lower the standard. |
 
 The current Hub review service supports two attempts. `rewrite: true` lets Hub
@@ -159,6 +165,48 @@ facts, SKU bindings, disclosure requirements, subreddit constraints, and the
 requested content function. Review the actual final text, not only the model's
 suggested score.
 
+## 3.05 Author relation (`authorRelation`) — derived by Hub, never declared
+
+`commentType` says where the comment sits (`top_level` / `reply`).
+`authorRelation` says **who is speaking** (`post_author` / `other` / `unknown`).
+They are two independent axes; read both.
+
+**Authoritative source.** `authorRelation` and `authorRelationEvidence` appear
+only in the **response**. Hub derives them from the publishing account, the
+permalink of the post under review, and Hub's own snapshot of that post. The
+request field `authorRelationHint` (CLI: `--author-relation-hint`) is an optional,
+**non-authoritative** hint. It is not proof of identity, it is never echoed back
+as the verdict, and evidence always overrides it — claiming `other` while the
+evidence shows you are the author still yields `post_author`.
+
+**Evidence conditions.** `post_author` / `verified_snapshot` is possible only when
+the publishing account, the reviewed post's permalink, Hub's snapshot of that
+post, and the snapshot's subreddit + title binding to this thread all line up.
+Sending a hint, or sending a permalink for which Hub has no snapshot, does not
+produce it. Never substitute another post, a guessed account, or an alternative
+permalink to obtain a verifiable combination.
+
+**Conflict and unavailability.** An explicit `post_author` claim contradicted by
+the verified author is a **hard 422 `AUTHOR_RELATION_MISMATCH`**: no LLM call, a
+security audit is written, and neither a retry nor a different permalink fixes it.
+Missing permalink, missing snapshot, `[deleted]` author, no account, or a failed
+thread binding yields `unknown` / `unavailable` — reviewed on the **ordinary
+baseline**, not blocked and not penalised for it.
+
+**Scoring boundary.** `post_author` carries **no score bonus**. It only widens
+which concrete developments count as a valid thread anchor (progress, experiments,
+results, failed attempts since the original post). Weights, thresholds, and the
+required evidence strength are unchanged, and compliance, authenticity,
+specificity, and repetition requirements are not relaxed. An opening such as
+`Update in case anyone lands here later` is a neutral discourse marker: it is
+**not penalised and not rewarded**; only the concrete material after it is
+assessed, and a vague update can still hit the context-anchoring hard line and be
+blocked.
+
+> Agent rule: never add a hint, a permalink, or an update-style opening in order
+> to move the score. Send only facts that already exist in this real thread and
+> can be checked.
+
 ## 3.1 Structure protection on Hub `optimized` (v2.12.25)
 
 The Hub review is the **last remaining normalization exit**: it can silently
@@ -220,6 +268,8 @@ Use this compact record shape:
 - Scores: <authoritative score(s), if returned>
 - HubRecordIds: <review/audit ids, if returned>
 - HubRunOrRequestIds: <ids, if returned>
+- AuthorRelation: post_author | other | unknown | NotReturned | NotApplicable (**copy the server-derived response value; never record the hint you sent.** `NotApplicable` for a post review; `NotReturned` when no successful response carried it — including a `AUTHOR_RELATION_MISMATCH` 422, where the CLI deliberately does not surface the server's derived values)
+- AuthorRelationEvidence: verified_snapshot | verified_live | unavailable | mismatch | NotReturned | NotApplicable
 - BrandFitReviewRequired: true | false
 - AccountCandidateFeedback: <summary or None>
 - ReviewMode: ContentOnly | AccountBound