@geoly-ai/social-hub-cli 0.3.19 → 0.3.20

package/dist/register-calendar-directives.d.ts

@@ -0,0 +1,64 @@
+import type { Command } from "commander";
+/**
+ * `social-hub calendar preflight` / `social-hub calendar set-delivery-mode`
+ * —— 内容发布日历指令（`publishing-calendar-directive.v1`）的 CLI 交付面。
+ *
+ * 设计与冻结决定见 `docs/publishing-calendar-directive-plan.md` §8（D1–D6），
+ * 消费协议见 `skills/social-hub-calendar-directives/SKILL.md`。
+ *
+ * ## 两条不可协商的形态约束
+ *
+ * 1. **preflight 的业务拒绝不是错误。** 服务端刻意让「条目已取消 / 审核被撤回 /
+ *    版本过期」走 HTTP 200 + `decision:"rejected"`，好让 cron 路径无歧义分流每个
+ *    `reason`。因此本命令**默认恒 exit 0**，先把完整 JSON 写到 stdout；只有显式
+ *    `--require-ok` 才在非 ok 时补一个 exit 1。反过来做（默认非零）会让所有
+ *    `set -e` 的脚本在「条目正常取消了」这种日常路径上直接崩掉。
+ *
+ * 2. **切 deliveryMode 必须过 `--apply` 门。** 它是防重复发帖的唯一闸门（D1）：
+ *    服务端会在同一事务里撤销/创建内部 job 并 append 指令。手滑改错的后果是
+ *    同一条内容被发两遍，或者谁都不发 —— 这个量级的写操作不该只靠一个 `--mode`。
+ *    `calendar patch --body '{"deliveryMode":...}'` 同样被这道门挡住（见
+ *    {@link deliveryModeChangeRequiresApply}），否则新命令的护栏只是装饰。
+ */
+/** 契约 `calendarEntryDeliveryModeSchema` 的镜像；真源在 contracts。 */
+declare const DELIVERY_MODES: readonly ["hub_managed", "external_agent"];
+export type DeliveryModeArg = (typeof DELIVERY_MODES)[number];
+export declare function isDeliveryMode(value: unknown): value is DeliveryModeArg;
+export declare class CalendarDirectiveArgError extends Error {
+    constructor(message: string);
+}
+/**
+ * `--revision` 的本地解析。
+ *
+ * 两道校验缺一不可：
+ *   - `^\d+$` 挡住 `""` / `" "` / `1e3` / `-1` / `1.5`。**绝不能用 `Number()` 兜底**：
+ *     它把空串和空白都转成 `0`，而 revision 0 是每条条目的合法初始值 —— 于是
+ *     「忘了带版本号」会被服务端当成「我手上是第 0 版」而真的放行内容。
+ *   - `Number.isSafeInteger` 挡住 `99999999999999999999` 这类纯数字但超出 IEEE754
+ *     安全区的值：它能过正则，转成 number 后却已经悄悄变了值，比对上的是另一条
+ *     revision。服务端也有 `MAX_SAFE_INTEGER` 上界，这里提前挡住只是不让明显非法
+ *     的值打到网络上。
+ */
+export declare function parseRevisionArg(raw: string): number;
+/**
+ * `calendar patch` 的 body 是不是在动 `deliveryMode` —— 是就必须过 `--apply` 门。
+ *
+ * 只看「键在不在」而不看值：`{"deliveryMode": null}` / 写错的枚举值同样是一次
+ * 「意图切换执行主体」的调用，服务端会拒，但它该在拒之前先被护栏拦下。
+ */
+export declare function deliveryModeChangeRequiresApply(body: Record<string, unknown>): boolean;
+/**
+ * `calendar patch` 要不要进 `assertApplyOrDryRun`。
+ *
+ * 两个判据故意不同：
+ *   - `--dry-run` **对任何 body 都生效** —— 全局 flag 契约是「预览写入，不调用 API」。
+ *     只在 deliveryMode 分支上认它，就会出现「加了 --dry-run 却真的写了」的意外写入。
+ *   - `--apply` 只在 body 含 `deliveryMode` 时才是必填（那是 D1 闸门）；其余字段
+ *     （status / permalink / …）维持既有的无门行为，不破坏存量自动化。
+ */
+export declare function calendarPatchNeedsGate(body: Record<string, unknown>, opts: {
+    dryRun?: boolean;
+}): boolean;
+export declare function registerCalendarDirectiveCommands(calendar: Command): void;
+export {};
+//# sourceMappingURL=register-calendar-directives.d.ts.map

package/dist/register-calendar-directives.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-calendar-directives.d.ts","sourceRoot":"","sources":["../src/register-calendar-directives.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAIzC;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8DAA8D;AAC9D,QAAA,MAAM,cAAc,4CAA6C,CAAC;AAClE,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,cAAc,CAAC,CAAC,MAAM,CAAC,CAAC;AAE9D,wBAAgB,cAAc,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,eAAe,CAKvE;AAED,qBAAa,yBAA0B,SAAQ,KAAK;gBACtC,OAAO,EAAE,MAAM;CAI5B;AAED;;;;;;;;;;;GAWG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,GAAG,MAAM,CAapD;AAED;;;;;GAKG;AACH,wBAAgB,+BAA+B,CAC7C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,OAAO,CAET;AAED;;;;;;;;GAQG;AACH,wBAAgB,sBAAsB,CACpC,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EAC7B,IAAI,EAAE;IAAE,MAAM,CAAC,EAAE,OAAO,CAAA;CAAE,GACzB,OAAO,CAET;AAED,wBAAgB,iCAAiC,CAAC,QAAQ,EAAE,OAAO,GAAG,IAAI,CAkFzE"}

package/dist/register-calendar-directives.js

@@ -0,0 +1,135 @@
+import { requireClient, resolveTeamId } from "./client.js";
+import { assertApplyOrDryRun } from "./dry-run.js";
+/**
+ * `social-hub calendar preflight` / `social-hub calendar set-delivery-mode`
+ * —— 内容发布日历指令（`publishing-calendar-directive.v1`）的 CLI 交付面。
+ *
+ * 设计与冻结决定见 `docs/publishing-calendar-directive-plan.md` §8（D1–D6），
+ * 消费协议见 `skills/social-hub-calendar-directives/SKILL.md`。
+ *
+ * ## 两条不可协商的形态约束
+ *
+ * 1. **preflight 的业务拒绝不是错误。** 服务端刻意让「条目已取消 / 审核被撤回 /
+ *    版本过期」走 HTTP 200 + `decision:"rejected"`，好让 cron 路径无歧义分流每个
+ *    `reason`。因此本命令**默认恒 exit 0**，先把完整 JSON 写到 stdout；只有显式
+ *    `--require-ok` 才在非 ok 时补一个 exit 1。反过来做（默认非零）会让所有
+ *    `set -e` 的脚本在「条目正常取消了」这种日常路径上直接崩掉。
+ *
+ * 2. **切 deliveryMode 必须过 `--apply` 门。** 它是防重复发帖的唯一闸门（D1）：
+ *    服务端会在同一事务里撤销/创建内部 job 并 append 指令。手滑改错的后果是
+ *    同一条内容被发两遍，或者谁都不发 —— 这个量级的写操作不该只靠一个 `--mode`。
+ *    `calendar patch --body '{"deliveryMode":...}'` 同样被这道门挡住（见
+ *    {@link deliveryModeChangeRequiresApply}），否则新命令的护栏只是装饰。
+ */
+/** 契约 `calendarEntryDeliveryModeSchema` 的镜像；真源在 contracts。 */
+const DELIVERY_MODES = ["hub_managed", "external_agent"];
+export function isDeliveryMode(value) {
+    return (typeof value === "string" &&
+        DELIVERY_MODES.includes(value));
+}
+export class CalendarDirectiveArgError extends Error {
+    constructor(message) {
+        super(message);
+        this.name = "CalendarDirectiveArgError";
+    }
+}
+/**
+ * `--revision` 的本地解析。
+ *
+ * 两道校验缺一不可：
+ *   - `^\d+$` 挡住 `""` / `" "` / `1e3` / `-1` / `1.5`。**绝不能用 `Number()` 兜底**：
+ *     它把空串和空白都转成 `0`，而 revision 0 是每条条目的合法初始值 —— 于是
+ *     「忘了带版本号」会被服务端当成「我手上是第 0 版」而真的放行内容。
+ *   - `Number.isSafeInteger` 挡住 `99999999999999999999` 这类纯数字但超出 IEEE754
+ *     安全区的值：它能过正则，转成 number 后却已经悄悄变了值，比对上的是另一条
+ *     revision。服务端也有 `MAX_SAFE_INTEGER` 上界，这里提前挡住只是不让明显非法
+ *     的值打到网络上。
+ */
+export function parseRevisionArg(raw) {
+    if (!/^\d+$/.test(raw)) {
+        throw new CalendarDirectiveArgError(`--revision must be a non-negative integer (got ${JSON.stringify(raw)})`);
+    }
+    const value = Number(raw);
+    if (!Number.isSafeInteger(value)) {
+        throw new CalendarDirectiveArgError(`--revision ${raw} exceeds the safe integer range; it cannot be compared reliably`);
+    }
+    return value;
+}
+/**
+ * `calendar patch` 的 body 是不是在动 `deliveryMode` —— 是就必须过 `--apply` 门。
+ *
+ * 只看「键在不在」而不看值：`{"deliveryMode": null}` / 写错的枚举值同样是一次
+ * 「意图切换执行主体」的调用，服务端会拒，但它该在拒之前先被护栏拦下。
+ */
+export function deliveryModeChangeRequiresApply(body) {
+    return Object.prototype.hasOwnProperty.call(body, "deliveryMode");
+}
+/**
+ * `calendar patch` 要不要进 `assertApplyOrDryRun`。
+ *
+ * 两个判据故意不同：
+ *   - `--dry-run` **对任何 body 都生效** —— 全局 flag 契约是「预览写入，不调用 API」。
+ *     只在 deliveryMode 分支上认它，就会出现「加了 --dry-run 却真的写了」的意外写入。
+ *   - `--apply` 只在 body 含 `deliveryMode` 时才是必填（那是 D1 闸门）；其余字段
+ *     （status / permalink / …）维持既有的无门行为，不破坏存量自动化。
+ */
+export function calendarPatchNeedsGate(body, opts) {
+    return Boolean(opts.dryRun) || deliveryModeChangeRequiresApply(body);
+}
+export function registerCalendarDirectiveCommands(calendar) {
+    calendar
+        .command("preflight")
+        .description("GET /publishing-calendar-directives/:entryId/preflight —— 外部 agent 发帖前的只读校验（拿到 decision=ok 才能发）")
+        .option("-t, --team <teamId>", "Team UUID(缺省用当前 context)")
+        .requiredOption("-e, --entry <entryId>", "Calendar entry UUID")
+        .requiredOption("--revision <n>", "你手上那条 directive 的 revision（必填，不能猜：0 是合法初始值）")
+        .option("--require-ok", "decision 不是 ok 时以退出码 1 结束（默认恒 0，业务拒绝不是错误）", false)
+        .action(async (opts) => {
+        let revision;
+        try {
+            revision = parseRevisionArg(String(opts.revision));
+        }
+        catch (e) {
+            console.error(e instanceof Error ? e.message : "Invalid --revision");
+            process.exit(1);
+        }
+        const res = await requireClient().preflightPublishingCalendarDirective(resolveTeamId(opts.team), opts.entry, revision);
+        // 无论放行还是拒绝，都先把完整判定写出去：`--require-ok` 的调用方也需要
+        // 那个 `reason` 才知道该删 cron 还是该等新指令。
+        console.log(JSON.stringify(res, null, 2));
+        if (opts.requireOk && res.decision !== "ok") {
+            // `process.exitCode` 而不是 `process.exit()`：后者会在 stdout 还没 flush
+            // 完时把进程掐掉，管道下游可能只拿到半截 JSON。
+            process.exitCode = 1;
+        }
+    });
+    calendar
+        .command("set-delivery-mode")
+        .description("PATCH /calendar-entries/:id —— 切换这条条目由谁发布（hub_managed = Hub 内部 job；external_agent = 外部 agent 收指令建 cron）")
+        .option("-t, --team <teamId>", "Team UUID(缺省用当前 context)")
+        .requiredOption("-e, --entry <entryId>", "Calendar entry UUID")
+        .requiredOption("--mode <mode>", `${DELIVERY_MODES.join(" | ")}（防重复发帖的唯一闸门）`)
+        .option("--dry-run", "预览", false)
+        .option("--apply", "执行写入", false)
+        .action(async (opts) => {
+        if (!isDeliveryMode(opts.mode)) {
+            console.error(`Invalid --mode ${JSON.stringify(String(opts.mode))}; expected one of ${DELIVERY_MODES.join(", ")}`);
+            process.exit(1);
+        }
+        const teamId = resolveTeamId(opts.team);
+        if (!assertApplyOrDryRun(opts, {
+            command: "calendar set-delivery-mode",
+            danger: "切换发布主体：转 external_agent 会撤销内部 publish_post job 并发 upsert 指令；转 hub_managed 会发 cancel 指令并建内部 job。改错 = 双发或谁都不发。",
+            summary: {
+                teamId,
+                calendarEntryId: opts.entry,
+                deliveryMode: opts.mode,
+            },
+        })) {
+            return;
+        }
+        const res = await requireClient().updateCalendarEntry(teamId, opts.entry, { deliveryMode: opts.mode });
+        console.log(JSON.stringify(res, null, 2));
+    });
+}
+//# sourceMappingURL=register-calendar-directives.js.map

package/dist/register-calendar-directives.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-calendar-directives.js","sourceRoot":"","sources":["../src/register-calendar-directives.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,aAAa,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC3D,OAAO,EAAE,mBAAmB,EAAE,MAAM,cAAc,CAAC;AAEnD;;;;;;;;;;;;;;;;;;;;GAoBG;AAEH,8DAA8D;AAC9D,MAAM,cAAc,GAAG,CAAC,aAAa,EAAE,gBAAgB,CAAU,CAAC;AAGlE,MAAM,UAAU,cAAc,CAAC,KAAc;IAC3C,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACxB,cAAoC,CAAC,QAAQ,CAAC,KAAK,CAAC,CACtD,CAAC;AACJ,CAAC;AAED,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,YAAY,OAAe;QACzB,KAAK,CAAC,OAAO,CAAC,CAAC;QACf,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;IAC1C,CAAC;CACF;AAED;;;;;;;;;;;GAWG;AACH,MAAM,UAAU,gBAAgB,CAAC,GAAW;IAC1C,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;QACvB,MAAM,IAAI,yBAAyB,CACjC,kDAAkD,IAAI,CAAC,SAAS,CAAC,GAAG,CAAC,GAAG,CACzE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAC;IAC1B,IAAI,CAAC,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,EAAE,CAAC;QACjC,MAAM,IAAI,yBAAyB,CACjC,cAAc,GAAG,iEAAiE,CACnF,CAAC;IACJ,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B,CAC7C,IAA6B;IAE7B,OAAO,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,EAAE,cAAc,CAAC,CAAC;AACpE,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,sBAAsB,CACpC,IAA6B,EAC7B,IAA0B;IAE1B,OAAO,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,+BAA+B,CAAC,IAAI,CAAC,CAAC;AACvE,CAAC;AAED,MAAM,UAAU,iCAAiC,CAAC,QAAiB;IACjE,QAAQ;SACL,OAAO,CAAC,WAAW,CAAC;SACpB,WAAW,CACV,iGAAiG,CAClG;SACA,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;SACzD,cAAc,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SAC9D,cAAc,CACb,gBAAgB,EAChB,6CAA6C,CAC9C;SACA,MAAM,CACL,cAAc,EACd,2CAA2C,EAC3C,KAAK,CACN;SACA,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,QAAgB,CAAC;QACrB,IAAI,CAAC;YACH,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC;QACrD,CAAC;QAAC,OAAO,CAAC,EAAE,CAAC;YACX,OAAO,CAAC,KAAK,CAAC,CAAC,YAAY,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC;YACrE,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC,oCAAoC,CACpE,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,EACxB,IAAI,CAAC,KAAK,EACV,QAAQ,CACT,CAAC;QACF,6CAA6C;QAC7C,kCAAkC;QAClC,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;QAC1C,IAAI,IAAI,CAAC,SAAS,IAAI,GAAG,CAAC,QAAQ,KAAK,IAAI,EAAE,CAAC;YAC5C,+DAA+D;YAC/D,4BAA4B;YAC5B,OAAO,CAAC,QAAQ,GAAG,CAAC,CAAC;QACvB,CAAC;IACH,CAAC,CAAC,CAAC;IAEL,QAAQ;SACL,OAAO,CAAC,mBAAmB,CAAC;SAC5B,WAAW,CACV,yGAAyG,CAC1G;SACA,MAAM,CAAC,qBAAqB,EAAE,0BAA0B,CAAC;SACzD,cAAc,CAAC,uBAAuB,EAAE,qBAAqB,CAAC;SAC9D,cAAc,CACb,eAAe,EACf,GAAG,cAAc,CAAC,IAAI,CAAC,KAAK,CAAC,cAAc,CAC5C;SACA,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,CAAC;SAChC,MAAM,CAAC,KAAK,EAAE,IAAI,EAAE,EAAE;QACrB,IAAI,CAAC,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;YAC/B,OAAO,CAAC,KAAK,CACX,kBAAkB,IAAI,CAAC,SAAS,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,qBAAqB,cAAc,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CACpG,CAAC;YACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAClB,CAAC;QACD,MAAM,MAAM,GAAG,aAAa,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACxC,IACE,CAAC,mBAAmB,CAAC,IAAI,EAAE;YACzB,OAAO,EAAE,4BAA4B;YACrC,MAAM,EACJ,8GAA8G;YAChH,OAAO,EAAE;gBACP,MAAM;gBACN,eAAe,EAAE,IAAI,CAAC,KAAK;gBAC3B,YAAY,EAAE,IAAI,CAAC,IAAI;aACxB;SACF,CAAC,EACF,CAAC;YACD,OAAO;QACT,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,aAAa,EAAE,CAAC,mBAAmB,CACnD,MAAM,EACN,IAAI,CAAC,KAAK,EACV,EAAE,YAAY,EAAE,IAAI,CAAC,IAAI,EAAE,CAC5B,CAAC;QACF,OAAO,CAAC,GAAG,CAAC,IAAI,CAAC,SAAS,CAAC,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACP,CAAC"}

package/dist/register-calendar-directives.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=register-calendar-directives.test.d.ts.map

package/dist/register-calendar-directives.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-calendar-directives.test.d.ts","sourceRoot":"","sources":["../src/register-calendar-directives.test.ts"],"names":[],"mappings":""}

package/dist/register-calendar-directives.test.js

@@ -0,0 +1,127 @@
+import { describe, expect, it } from "vitest";
+import { Command } from "commander";
+import { CalendarDirectiveArgError, calendarPatchNeedsGate, deliveryModeChangeRequiresApply, isDeliveryMode, parseRevisionArg, registerCalendarDirectiveCommands, } from "./register-calendar-directives.js";
+/**
+ * revision 是 preflight 的版本钉子：它一旦被「默认值化」，服务端就会拿一条真实
+ * 存在的 revision 0 条目放行内容。所以这里锁的不是「解析对不对」，而是
+ * **哪些输入必须拒绝**。
+ */
+describe("parseRevisionArg", () => {
+    it("接受 0 与普通非负整数", () => {
+        expect(parseRevisionArg("0")).toBe(0);
+        expect(parseRevisionArg("1")).toBe(1);
+        expect(parseRevisionArg("42")).toBe(42);
+    });
+    /**
+     * 🔴 这条是整个命令最重要的断言。`Number("")` 和 `Number(" ")` 都是 `0`，
+     * 而 0 是每条日历条目的合法初始 revision —— 用 `Number()` 兜底解析等于把
+     * 「忘了带版本号」翻译成「我手上是第 0 版」，服务端会照常放行内容。
+     */
+    it("空串 / 空白 / 纯符号一律拒绝（绝不落到 0）", () => {
+        for (const raw of ["", " ", "\t", "+", "-"]) {
+            expect(() => parseRevisionArg(raw)).toThrow(CalendarDirectiveArgError);
+        }
+    });
+    it("负数、小数、科学计数法、带空格的数字都拒绝", () => {
+        for (const raw of ["-1", "1.5", "1e3", " 1", "1 ", "0x10", "NaN"]) {
+            expect(() => parseRevisionArg(raw)).toThrow(CalendarDirectiveArgError);
+        }
+    });
+    /**
+     * 纯数字但超出安全整数区：能过正则，转成 number 后值已经悄悄变了，
+     * 拿去比对的是另一条 revision。服务端也有 MAX_SAFE_INTEGER 上界。
+     */
+    it("超出安全整数范围的纯数字串拒绝", () => {
+        expect(parseRevisionArg(String(Number.MAX_SAFE_INTEGER))).toBe(Number.MAX_SAFE_INTEGER);
+        expect(() => parseRevisionArg("9007199254740993")).toThrow(/safe integer range/);
+        expect(() => parseRevisionArg("99999999999999999999")).toThrow(CalendarDirectiveArgError);
+    });
+});
+describe("isDeliveryMode", () => {
+    it("只认契约里的两个值", () => {
+        expect(isDeliveryMode("hub_managed")).toBe(true);
+        expect(isDeliveryMode("external_agent")).toBe(true);
+        for (const bad of ["", "HUB_MANAGED", "external", null, undefined, 1]) {
+            expect(isDeliveryMode(bad)).toBe(false);
+        }
+    });
+});
+/**
+ * `calendar set-delivery-mode` 带 `--apply` 门，但 `calendar patch --body` 能写
+ * 任意字段。若 raw patch 不同样挡住 `deliveryMode`，那道门就只是装饰。
+ */
+describe("deliveryModeChangeRequiresApply", () => {
+    it("body 里出现 deliveryMode 就要门", () => {
+        expect(deliveryModeChangeRequiresApply({ deliveryMode: "external_agent" })).toBe(true);
+    });
+    /** 只看键在不在：写错的值/显式 null 同样是一次「意图切换执行主体」的调用。 */
+    it("值非法或为 null 也要门（只看键存在与否）", () => {
+        expect(deliveryModeChangeRequiresApply({ deliveryMode: null })).toBe(true);
+        expect(deliveryModeChangeRequiresApply({ deliveryMode: "nope" })).toBe(true);
+        expect(deliveryModeChangeRequiresApply({ deliveryMode: undefined })).toBe(true);
+    });
+    /** 既有用法（改状态/回填 permalink）行为必须完全不变，不能被新门牵连。 */
+    it("不含 deliveryMode 的既有 body 不要门", () => {
+        expect(deliveryModeChangeRequiresApply({
+            status: "succeeded",
+            permalink: "https://www.reddit.com/r/x/comments/y/",
+        })).toBe(false);
+        expect(deliveryModeChangeRequiresApply({})).toBe(false);
+    });
+});
+describe("calendarPatchNeedsGate", () => {
+    /**
+     * 🔴 `--dry-run` 的全局契约是「预览写入，不调用 API」。若只在 deliveryMode 分支上
+     * 认它，`--dry-run --body '{"status":"succeeded"}'` 会**真的把状态改掉** ——
+     * 这是最不该有的一类意外写入。
+     */
+    it("--dry-run 对任何 body 都要进门", () => {
+        expect(calendarPatchNeedsGate({ status: "succeeded" }, { dryRun: true })).toBe(true);
+        expect(calendarPatchNeedsGate({}, { dryRun: true })).toBe(true);
+    });
+    it("deliveryMode 变更即使没 --dry-run 也要进门（--apply 必填）", () => {
+        expect(calendarPatchNeedsGate({ deliveryMode: "external_agent" }, {})).toBe(true);
+    });
+    /** 既有无门用法必须原样保留：不带 --dry-run 又不动 deliveryMode = 直接写。 */
+    it("既有 body + 无 --dry-run 时完全不进门", () => {
+        expect(calendarPatchNeedsGate({ status: "succeeded", permalink: "https://example.test/" }, { dryRun: false })).toBe(false);
+        expect(calendarPatchNeedsGate({ status: "failed" }, {})).toBe(false);
+    });
+});
+describe("registerCalendarDirectiveCommands", () => {
+    function build() {
+        const calendar = new Command("calendar");
+        calendar.exitOverride();
+        registerCalendarDirectiveCommands(calendar);
+        return calendar;
+    }
+    it("把两个子命令挂到 calendar 组下", () => {
+        expect(build()
+            .commands.map((c) => c.name())
+            .sort()).toEqual(["preflight", "set-delivery-mode"]);
+    });
+    /**
+     * `--revision <n>` 必须带值占位符：写成 `--revision` 会被 commander 当成布尔
+     * 开关，`opts.revision` 恒为 `true`，于是 `String(true)` 落进解析器被拒 ——
+     * 表现为「传了版本号却说非法」，极难排查。
+     */
+    it("--revision 是必填且带值，--require-ok 是布尔开关", () => {
+        const preflight = build().commands.find((c) => c.name() === "preflight");
+        const options = preflight?.options ?? [];
+        const revision = options.find((o) => o.long === "--revision");
+        expect(revision?.required).toBe(true);
+        expect(revision?.mandatory).toBe(true);
+        const requireOk = options.find((o) => o.long === "--require-ok");
+        expect(requireOk?.required).toBe(false);
+        expect(requireOk?.mandatory).toBe(false);
+    });
+    /** 切发布主体是高风险写：两个门选项必须都在。 */
+    it("set-delivery-mode 带 --apply / --dry-run 门", () => {
+        const cmd = build().commands.find((c) => c.name() === "set-delivery-mode");
+        const longs = (cmd?.options ?? []).map((o) => o.long);
+        expect(longs).toContain("--apply");
+        expect(longs).toContain("--dry-run");
+        expect((cmd?.options ?? []).find((o) => o.long === "--mode")?.mandatory).toBe(true);
+    });
+});
+//# sourceMappingURL=register-calendar-directives.test.js.map

package/dist/register-calendar-directives.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"register-calendar-directives.test.js","sourceRoot":"","sources":["../src/register-calendar-directives.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAC9C,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AACpC,OAAO,EACL,yBAAyB,EACzB,sBAAsB,EACtB,+BAA+B,EAC/B,cAAc,EACd,gBAAgB,EAChB,iCAAiC,GAClC,MAAM,mCAAmC,CAAC;AAE3C;;;;GAIG;AACH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,cAAc,EAAE,GAAG,EAAE;QACtB,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QACtC,MAAM,CAAC,gBAAgB,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC;IAC1C,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,CAAC;YAC5C,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,uBAAuB,EAAE,GAAG,EAAE;QAC/B,KAAK,MAAM,GAAG,IAAI,CAAC,IAAI,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC;YAClE,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,yBAAyB,CAAC,CAAC;QACzE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH;;;OAGG;IACH,EAAE,CAAC,iBAAiB,EAAE,GAAG,EAAE;QACzB,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAC,CAAC,CAAC,IAAI,CAC5D,MAAM,CAAC,gBAAgB,CACxB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,kBAAkB,CAAC,CAAC,CAAC,OAAO,CACxD,oBAAoB,CACrB,CAAC;QACF,MAAM,CAAC,GAAG,EAAE,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,OAAO,CAC5D,yBAAyB,CAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,gBAAgB,EAAE,GAAG,EAAE;IAC9B,EAAE,CAAC,WAAW,EAAE,GAAG,EAAE;QACnB,MAAM,CAAC,cAAc,CAAC,aAAa,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACjD,MAAM,CAAC,cAAc,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACpD,KAAK,MAAM,GAAG,IAAI,CAAC,EAAE,EAAE,aAAa,EAAE,UAAU,EAAE,IAAI,EAAE,SAAS,EAAE,CAAC,CAAC,EAAE,CAAC;YACtE,MAAM,CAAC,cAAc,CAAC,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QAC1C,CAAC;IACH,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH;;;GAGG;AACH,QAAQ,CAAC,iCAAiC,EAAE,GAAG,EAAE;IAC/C,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,CACJ,+BAA+B,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,CAAC,CACpE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CAAC,+BAA+B,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QAC3E,MAAM,CAAC,+BAA+B,CAAC,EAAE,YAAY,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,IAAI,CACpE,IAAI,CACL,CAAC;QACF,MAAM,CAAC,+BAA+B,CAAC,EAAE,YAAY,EAAE,SAAS,EAAE,CAAC,CAAC,CAAC,IAAI,CACvE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,8CAA8C;IAC9C,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CACJ,+BAA+B,CAAC;YAC9B,MAAM,EAAE,WAAW;YACnB,SAAS,EAAE,wCAAwC;SACpD,CAAC,CACH,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CAAC,+BAA+B,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;IACtC;;;;OAIG;IACH,EAAE,CAAC,yBAAyB,EAAE,GAAG,EAAE;QACjC,MAAM,CACJ,sBAAsB,CAAC,EAAE,MAAM,EAAE,WAAW,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAClE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACb,MAAM,CAAC,sBAAsB,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAClE,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,sBAAsB,CAAC,EAAE,YAAY,EAAE,gBAAgB,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CACzE,IAAI,CACL,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,wDAAwD;IACxD,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CACJ,sBAAsB,CACpB,EAAE,MAAM,EAAE,WAAW,EAAE,SAAS,EAAE,uBAAuB,EAAE,EAC3D,EAAE,MAAM,EAAE,KAAK,EAAE,CAClB,CACF,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACd,MAAM,CAAC,sBAAsB,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IACvE,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,mCAAmC,EAAE,GAAG,EAAE;IACjD,SAAS,KAAK;QACZ,MAAM,QAAQ,GAAG,IAAI,OAAO,CAAC,UAAU,CAAC,CAAC;QACzC,QAAQ,CAAC,YAAY,EAAE,CAAC;QACxB,iCAAiC,CAAC,QAAQ,CAAC,CAAC;QAC5C,OAAO,QAAQ,CAAC;IAClB,CAAC;IAED,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CACJ,KAAK,EAAE;aACJ,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC;aAC7B,IAAI,EAAE,CACV,CAAC,OAAO,CAAC,CAAC,WAAW,EAAE,mBAAmB,CAAC,CAAC,CAAC;IAChD,CAAC,CAAC,CAAC;IAEH;;;;OAIG;IACH,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,SAAS,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,WAAW,CAAC,CAAC;QACzE,MAAM,OAAO,GAAG,SAAS,EAAE,OAAO,IAAI,EAAE,CAAC;QACzC,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,YAAY,CAAC,CAAC;QAC9D,MAAM,CAAC,QAAQ,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,CAAC,QAAQ,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvC,MAAM,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,cAAc,CAAC,CAAC;QACjE,MAAM,CAAC,SAAS,EAAE,QAAQ,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;QACxC,MAAM,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC;IAC3C,CAAC,CAAC,CAAC;IAEH,4BAA4B;IAC5B,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,KAAK,mBAAmB,CAAC,CAAC;QAC3E,MAAM,KAAK,GAAG,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC;QACtD,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;QACnC,MAAM,CAAC,KAAK,CAAC,CAAC,SAAS,CAAC,WAAW,CAAC,CAAC;QACrC,MAAM,CACJ,CAAC,GAAG,EAAE,OAAO,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,KAAK,QAAQ,CAAC,EAAE,SAAS,CACjE,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACf,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@geoly-ai/social-hub-cli",
-  "version": "0.3.19",
+  "version": "0.3.20",
   "type": "module",
   "description": "social-hub CLI for Social Ops Hub",
   "repository": {
@@ -23,7 +23,7 @@
   "dependencies": {
     "commander": "^12.1.0",
     "@geoly-ai/social-hub-authz": "0.0.17",
-    "@geoly-ai/social-hub-sdk": "0.0.56"
+    "@geoly-ai/social-hub-sdk": "0.0.57"
   },
   "devDependencies": {
     "@types/node": "^22.10.2",

package/skills/README.md

@@ -119,28 +119,29 @@ pnpm skills:check
 
 ## Skill 列表
 
-| Skill                                                              | 用途                               |
-| ------------------------------------------------------------------ | ---------------------------------- |
-| [social-hub-cli](social-hub-cli)                                   | 总路由 + 领域 skill 索引           |
-| [social-hub-shared](social-hub-shared)                             | config、auth、doctor、context      |
-| [social-hub-ops-runtime](social-hub-ops-runtime)                   | claim / complete / fail            |
-| [social-hub-openclaw-context](social-hub-openclaw-context)         | DB 聚合上下文                      |
-| [social-hub-accounts](social-hub-accounts)                         | 账号 CRUD、browser-envs、personas  |
-| [social-hub-posts](social-hub-posts)                               | Reddit 帖快照 CRUD、batch-upsert   |
-| [social-hub-style-curator](social-hub-style-curator)               | style-marks、curator、style-guide  |
-| [social-hub-style-profiles](social-hub-style-profiles)             | 板块画像四眼、帖子标注             |
-| [social-hub-calendar-jobs](social-hub-calendar-jobs)               | 日历与任务                         |
-| [social-hub-publishing](social-hub-publishing)                     | 发布闭环                           |
-| [social-hub-content-review](social-hub-content-review)             | 评论发布前复审/优化（gate 层③）    |
-| [social-hub-post-review](social-hub-post-review)                   | 帖子发布前审核/优化（post-review） |
-| [social-hub-events-observability](social-hub-events-observability) | events、dashboard、audit、reports  |
-| [social-hub-graph-compliance](social-hub-graph-compliance)         | 图谱与合规风控                     |
-| [social-hub-admin](social-hub-admin)                               | 系统/团队管理、通知渠道            |
-| [social-hub-intelligence](social-hub-intelligence)                 | 板块情报与 insights                |
-| [social-hub-subreddit-pools](social-hub-subreddit-pools)           | 运营板块池 catalog/aliases/tier    |
-| [social-hub-scrape](social-hub-scrape)                             | 通用网页抓取（Firecrawl）          |
-| [social-hub-migration](social-hub-migration)                       | 导入导出与 replay                  |
-| [social-hub-notifications](social-hub-notifications)               | 事件订阅通知：notify pull/ack/订阅 |
+| Skill                                                              | 用途                                         |
+| ------------------------------------------------------------------ | -------------------------------------------- |
+| [social-hub-cli](social-hub-cli)                                   | 总路由 + 领域 skill 索引                     |
+| [social-hub-shared](social-hub-shared)                             | config、auth、doctor、context                |
+| [social-hub-ops-runtime](social-hub-ops-runtime)                   | claim / complete / fail                      |
+| [social-hub-openclaw-context](social-hub-openclaw-context)         | DB 聚合上下文                                |
+| [social-hub-accounts](social-hub-accounts)                         | 账号 CRUD、browser-envs、personas            |
+| [social-hub-posts](social-hub-posts)                               | Reddit 帖快照 CRUD、batch-upsert             |
+| [social-hub-style-curator](social-hub-style-curator)               | style-marks、curator、style-guide            |
+| [social-hub-style-profiles](social-hub-style-profiles)             | 板块画像四眼、帖子标注                       |
+| [social-hub-calendar-jobs](social-hub-calendar-jobs)               | 日历与任务                                   |
+| [social-hub-publishing](social-hub-publishing)                     | 发布闭环                                     |
+| [social-hub-content-review](social-hub-content-review)             | 评论发布前复审/优化（gate 层③）              |
+| [social-hub-post-review](social-hub-post-review)                   | 帖子发布前审核/优化（post-review）           |
+| [social-hub-events-observability](social-hub-events-observability) | events、dashboard、audit、reports            |
+| [social-hub-graph-compliance](social-hub-graph-compliance)         | 图谱与合规风控                               |
+| [social-hub-admin](social-hub-admin)                               | 系统/团队管理、通知渠道                      |
+| [social-hub-intelligence](social-hub-intelligence)                 | 板块情报与 insights                          |
+| [social-hub-subreddit-pools](social-hub-subreddit-pools)           | 运营板块池 catalog/aliases/tier              |
+| [social-hub-scrape](social-hub-scrape)                             | 通用网页抓取（Firecrawl）                    |
+| [social-hub-migration](social-hub-migration)                       | 导入导出与 replay                            |
+| [social-hub-notifications](social-hub-notifications)               | 事件订阅通知：notify pull/ack/订阅           |
+| [social-hub-calendar-directives](social-hub-calendar-directives)   | 发布日历指令：外部 agent 建 cron + preflight |
 
 ### Reddit 矩阵 Skill（随 CLI 一同发布）
 

package/skills/manifest.json

@@ -1,7 +1,7 @@
 {
   "version": 1,
   "package": "social-ops-hub",
-  "cliVersion": "0.3.19",
+  "cliVersion": "0.3.20",
   "repository": "social-ops-hub",
   "publish": {
     "registry": "https://skill.sh",
@@ -109,6 +109,11 @@
       "path": "social-hub-notifications",
       "description": "事件订阅通知：notify subscriptions/pull/ack/source-configs，本机 agent 拉走后自行执行副作用"
     },
+    {
+      "id": "social-hub-calendar-directives",
+      "path": "social-hub-calendar-directives",
+      "description": "发布日历指令：外部 agent 收 upsert/cancel 建 UTC 一次性 cron，到点先过 calendar preflight"
+    },
     {
       "id": "reddit-strategy-orchestrator",
       "path": "reddit-strategy-orchestrator",

package/skills/reddit-content-rewrite/SKILL.md

@@ -36,6 +36,16 @@ description: >-
 增加限制说明、增加社区观察句、把分节式结构改成叙事弧光、移动品牌出现位置、
 更换 `StructureFamily` 或 `ContentFunction`、按固定比例削减产品内容。
 
+**客户的收紧标准不进默认层。** 品牌出现次数上限、必须以问句结尾、PDP 语言限制、固定
+输出段式这类要求属于可选 profile（`AcceptanceProfile: NativeCopy`，见
+`../reddit-strategy-shared/references/native-copy-profile.md`）。**这些收紧项分属两个上游
+阶段，本 skill 两类都不施加**：结构类（品牌次数上限、受限 `EndingMode` 集合）只能由
+`reddit-phase-brief` 在**分配时**施加——`EndingMode` / `BrandEntryMode` 都是锁定指纹字段，
+改写阶段动它们等于绕过结构预分配并作废碰撞检查；register 类（PDP 语言、fake-Reddit-English、
+禁用官方全名）由撰写 skill 在**出初稿时**遵守，本 skill 不得新加或加码——那是把「只让你修」
+的稿子做成 house voice 归一化。把任何收紧项写进默认层，就等于给所有品牌强加一套
+house voice —— 那正是本 skill 被重新定义为约束保持型修复器要防的事。
+
 **没有该 subreddit 的 baseline（`SampleSetID`）时，不得声称已完成 subreddit-native 改写。**
 此时仍可工作，但只能声称到对应等级（见下方 `SubredditAdaptationStatus` 三档），
 并把缺口写进 `BlockingGaps`。
@@ -269,6 +279,10 @@ ExplicitStructureSpec:
 条件输入（可为 NotProvided；仅当本次修复确实依赖它时才 BlockingGap）：
 - TargetSubreddit / SampleSetID / AnchorSlot / ContentKey / MappingRuleID
 - OpeningMove / EvidenceShape / BrandEntryMode / CaveatMode / EndingMode / LengthBand
+- PersonaCardRef / PersonaCardVersion / PersonaCardHash：Brief 分配的知识边界
+  （含 `permittedExperienceClaims` / `knows` / `doesNotKnow` /
+  `brandRelationshipDisclosed`；契约见
+  `../reddit-strategy-shared/references/persona-card-contract.md`）
 - KnownProductFacts：可追溯的产品事实（SKU 基准表 / VOC / 甲方语料）
 - RealLimitations：真实存在的限制
 - RequiredDisclosure：必须保留的披露
@@ -482,6 +496,16 @@ ReadyForUse: No
 - 不编造作者身份、国籍、语言背景
 - **不主动制造 typo、拼写失误、错误冠词、介词误用、缺主语、"移民语法"**——
   这些不只是同质化，是伪造
+- **不得新增、也不得保留与已分配 Persona Card 相矛盾的主张。** 稿件声称了
+  `permittedExperienceClaims` 未授权的第一手经历（ownership / delivery / wear /
+  service），或表现出 `doesNotKnow` 列出的知识，属于**无来源主张**，落在
+  `FactualExpression` 的既有职责内：按最小改动去掉该主张即可。
+  ⚠️ 但**加宽边界不在允许范围内**：本 skill 不得撰写、递增、改写任何 Card。需要更宽的
+  边界就输出 `PersonaCardConflict: Yes` + 相矛盾的原句与对应 Card 字段，退回
+  `reddit-phase-brief` 换新版本 Card。`PersonaCardRef` / `PersonaCardVersion` /
+  `PersonaCardHash` 一律原样保持。
+  ⚠️ 命中「第一手经历」措辞本身**不是违规**——`mine arrived` 在授权 `delivery` 时完全正常；
+  只有与 Card 矛盾才算。也**不得**因此声称做过任何知识边界审核：这只是本地修复。
 - 所有进入可发布文本（标题 / 正文 / 评论 / 回复）的实质性 claim 必须是 `ClaimEvidenceStatus: Cited`（可映射到已批准证据 `KnownProductFacts` / `SourceEvidence`）或 `ExternallyVerified`（非产品事实类、有外部权威来源 `ExternalSourceRef`）；`Inferred`（无来源的模型推断）禁入可发布文本——删除或退回补证据，无法删且必需则 BlockingGap。三态权威定义见 `../reddit-strategy-shared/references/evidence-policy.md`
 
 ### 绝对禁用营销词
@@ -825,6 +849,11 @@ subreddit 规则、属于 `SampleSetID` 支持的异常值，否则保持原文
 - FingerprintSyncStatus: PendingWritingOwner | Confirmed | NotApplicable
 - DraftHash:
 
+- PersonaCardRef:                             # 原样保持；本 skill 不得撰写或改写 Card
+- PersonaCardVersion:
+- PersonaCardHash:
+- PersonaCardConflict: Yes | No | NotApplicable   # Yes ⇒ 退回 reddit-phase-brief 换新版本 Card
+
 - TargetSubreddit:
 - SubredditAdaptationStatus: Verified | RulesOnly | NotClaimed   # 阻断统一写 RoutingStatus / BlockingGaps
 - FactsAdded: None / Listed

package/skills/reddit-content-writing/SKILL.md

@@ -37,7 +37,9 @@ This skill writes planned Reddit posts and comments. It does not redo strategy,
 - `references/pgc-writing-strategy.md` when writing PGC posts
 - `references/comp-mention-strategy.md` only when competitor mention permission is explicitly `Yes`
 - installed `reddit-brand-risk-response` output for pre-publish bot/shill/promo/claim risk gates when the batch is not explicitly low risk
-- `../reddit-strategy-shared/references/content-review-gate.md` for the mandatory Social Hub review loop
+- `../reddit-strategy-shared/references/content-review-gate.md` for the mandatory Social Hub review loop, including how to read a dimension the Hub result reports as `not_assessed`
+- `../reddit-strategy-shared/references/persona-card-contract.md` for the Brief-assigned Persona Card this skill writes **inside** and never authors
+- `../reddit-strategy-shared/references/native-copy-profile.md` only when the batch runs `AcceptanceProfile: NativeCopy`
 
 ## Gate
 
@@ -49,6 +51,7 @@ Additionally, stop before writing a single word of body copy if any of these hol
 - a main-post row has no `StructureFamily` assigned by the Brief
 - a main-post row has no `AssignedFlair`, or the baseline card's `FlairCoverageStatus` is `Insufficient` → `BlockingGap`, return to `reddit-phase-brief`
 - a main-post row has no `PostingTrigger` assigned by the Brief, or its `Planned` `PostingTrigger` already violates the `PostingTrigger × BrandEntryMode` cross-constraint → `BlockingGap` (the post-draft re-derive of `PostingTrigger` vs `Planned` is checked after drafting, in the Writing Rules, not here)
+- a main-post row has no `PersonaCardRef` assigned by the Brief → `BlockingGap`, return to `reddit-phase-brief`. **Never author a Card here**: a writer that supplies its own knowledge boundary grants itself exactly the boundary the draft needs, which is the bypass pre-assignment exists to close
 - a target subreddit has no baseline card, or it is `Expired` / `Incomplete` → `BlockingGap: BaselineMissingOrStale`
 - `memory/phase4-叙事指纹索引.md` has not been read, or the rolling-window collision check has not been run
 - the collision check fails and no sample-based exception is on record → `BlockingGap: StructureCollision`, return to `reddit-phase-brief`
@@ -78,6 +81,17 @@ C-B/C-NB, and rows that were previously low risk.
    persona or inline style guide. Resolve an approved `brandContext` when Hub
    requires an explicit brand relationship; do not guess a brand or send an
    arbitrary `stage` value.
+   **Never add the Persona Card, any Card field, or a Card-derived score to the
+   request, and never pack it into `subredditRules` or the thread context to get
+   it through.** The request schemas are strict, so an extra field is a rejected
+   call rather than an ignored key, and a free-text slot reserved for rule
+   evidence is not a transport for planner text. The Card governs writing only
+   (`../reddit-strategy-shared/references/persona-card-contract.md` §7).
+   Recording which quadrant the batch was written for is a **local** planner
+   declaration (`LocalReviewIntent`); the review call carries no scope field and
+   the response states no scope, so never report a server-side scope, and never
+   claim the omission of `accountId` was recognised by Hub as a deliberate
+   content-only choice.
 3. Send `rewrite: true, attempt: 1`. Inspect `executionStatus` before
    `verdict`.
    For a comment/reply, include `thread.threadPermalink` when you know the
@@ -106,7 +120,14 @@ C-B/C-NB, and rows that were previously low risk.
    changing the family — only harder to notice. Apply only the local fixes, or
    resubmit stating the structural constraints. Submit the changed exact draft
    as `attempt: 2`.
-5. Accept only `completed/pass` for content review. In ContentOnly, record
+5. Accept only `completed/pass` for content review. Report any dimension the
+   result marks `not_assessed` as NotAssessed with its `notAssessedReason` — it
+   was excluded from the score, its remaining `score` number is diagnostic only,
+   and quoting it as a result or averaging it misrepresents the review. In
+   ContentOnly, `persona_consistency` / `persona_voice` coming back
+   `not_assessed` is correct behaviour, not a degraded review. Full semantics,
+   including why scores are comparable only within one `applicabilitySignature`:
+   `../reddit-strategy-shared/references/content-review-gate.md`. In ContentOnly, record
    `ReviewMode: ContentOnly`, `AccountBindingStatus: Pending`,
    `ReadyForContentNextSkill: Yes`, and `ReadyForDelivery: No`;
    `accountCandidateFeedback` is advisory and persona consistency is not
@@ -152,6 +173,24 @@ then hand to rewrite to keep editing".
 - **Real limitations:** state genuine, decision-relevant limitations when they exist; never invent a safe flaw to look authentic; position and form follow the content, not a fixed paragraph.
 - **Punctuation and format values follow the subreddit baseline** — no cross-subreddit em-dash ban, no parenthesis quota, no fixed word count.
 - **ABU (Answer-Bearing Unit, B-group):** 1–2 per post, all 8 hard requirements met, `AnchorSlot` from the 7-value enum, visibility gate satisfied per length band. The old "must sit in paragraph 2 or 3" rule is removed.
+- **The Persona Card is Brief-assigned; write inside it, never widen it.** Read
+  the Card behind the row's `PersonaCardRef` before drafting, and before handing
+  the draft to Hub review run the local boundary self-check
+  (`../reddit-strategy-shared/references/persona-card-contract.md` §8): every
+  firsthand experience claim maps to an entry in `permittedExperienceClaims`,
+  nothing displays knowledge listed in `doesNotKnow`, the stated relationship
+  matches `brandRelationshipDisclosed`, and `postingWhy` still coexists with the
+  assigned `PostingTrigger`. Record `PersonaCardSelfCheck: Pass | BlockingGap`
+  **per Key** in `PerKeyStructureContract`, alongside the `PersonaCardVersion` and
+  `PersonaCardHash` it was checked against, with the contradicting phrase and Card
+  field for each gap. A batch-level value alone cannot show that every post was
+  checked against its own current Card, which is what delivery verifies. A draft that needs a
+  wider boundary goes back to `reddit-phase-brief` for a new Card version — the
+  writer never edits the Card and never bumps its version. This check is local: it
+  produces no score, is not a review, and never substitutes for the Hub gate.
+  The Card does not relax `ClaimEvidenceStatus`; it adds *who may claim it* on top
+  of *whether it is sourced*. A firsthand phrase such as "mine arrived" is not an
+  offence by itself — it matters only when it contradicts the Card.
 - **`PostingTrigger` is Brief-pre-assigned, not writer-chosen.** After drafting,
   re-derive the actual `PostingTrigger` from the finished body and confirm it
   matches the `Planned` value; a mismatch is a `BlockingGap` (return to Brief),
@@ -214,14 +253,24 @@ then hand to rewrite to keep editing".
 - AssignedFlairVerified: Yes / No
 - PostingTriggerPlannedVsFinal: Match / Drift / NotAssigned
 - PostingTriggerCrossConstraintOK: Yes / No
+- PersonaCardSelfCheck: Pass / BlockingGap / NotApplicable   # batch-level = worst across Keys; per-Key values live in PerKeyStructureContract
+- PersonaCardTransportStatus: LocalOnly(ServerContractMissing)   # the Card was not sent to Hub
+- PersonaCardAuthorizationStatus: Authorized / DeclaredOnly / NotApplicable   # carried through from the Brief, not re-derived here
+- AcceptanceProfile: Default / NativeCopy
+- NativeCopyProfileStatus: NotSelected / Unavailable(ServerContractMissing)
+- LocalReviewIntent: accountBinding=<account_bound|persona_less>, brandTreatment=<managed_brand|organic>   # carried through from the Brief; local declaration, not a Hub receipt
+- HubReviewScopeStatus: Unavailable(ServerContractMissing)   # never report a server-side scope
+- NotAssessedDimensions:                       # per row: dimension + notAssessedReason, verbatim from Hub
 - ClaimEvidenceAllCitedOrExternallyVerified: Yes / No   # no Inferred claim reached any publishable text (title/body/comment/reply)
 - FingerprintIndexUpdated: Yes / No
 - CollisionCheckPassed: Yes / No / ExceptionRecorded
 - PerKeyStructureContract: |
     <one row per DraftKey — batch-level single values are not valid, a batch normally
      spans several families, anchor slots and hashes>
-    | Key | ClientContentPrototype | ContentFunction | PrimaryPostType | StructureFamily | AssignedFlair | FlairCoverageStatus | PostingTrigger | SampleSetID | AnchorSlot | SecondaryAnchorSlot | AllowedStructuralChanges | ForbiddenStructuralChanges | DraftHash |
-    |---|---|---|---|---|---|---|---|---|---|---|---|---|---|
+    <comment rows take N/A for PersonaCardRef / PersonaCardVersion /
+     PersonaCardHash / PersonaCardSelfCheck>
+    | Key | ClientContentPrototype | ContentFunction | PrimaryPostType | StructureFamily | AssignedFlair | FlairCoverageStatus | PostingTrigger | PersonaCardRef | PersonaCardVersion | PersonaCardHash | PersonaCardSelfCheck | SampleSetID | AnchorSlot | SecondaryAnchorSlot | AllowedStructuralChanges | ForbiddenStructuralChanges | DraftHash |
+    |---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
 - SKUBindingsPreserved: Yes / No
 - BrandWordStatusPreserved: Yes / No
 - ComplementRulesPassed: Yes / No