@geoly-ai/social-hub-cli 0.3.19 → 0.3.21

package/CHANGELOG.md

@@ -4,6 +4,29 @@ All notable changes to `@geoly-ai/social-hub-cli` are documented in this file.
 
 Release workflow: `pnpm release:cli` → `pnpm publish:cli`.
 
+## [0.3.21] - 2026-08-21
+
+### Fixed
+
+- risk-list 分页补 ORDER BY 与 --offset
+- doctor 不再明文打印 API token(R11)
+- SDK 请求管线收敛 —— 两条 CSV 导出命令首次可用(R8/R9)
+
+## [0.3.20] - 2026-08-18
+
+### Added
+
+- 发布日历指令端到端接线(Block 5) + 封死 D1 旁路
+- 发布日历指令的 SDK/CLI/skills 交付面(Block 6)
+
+### Changed
+
+- response mock 的 rubricVersion 跟到 content-review.v5
+
+### Documentation
+
+- 写作侧 matrix skill 对齐冻结契约(块 2d)+ 删掉 WeaklyVerified
+
 ## [0.3.19] - 2026-08-14
 
 ### Added

package/dist/accounts-list-offset.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=accounts-list-offset.test.d.ts.map

package/dist/accounts-list-offset.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-list-offset.test.d.ts","sourceRoot":"","sources":["../src/accounts-list-offset.test.ts"],"names":[],"mappings":""}

package/dist/accounts-list-offset.test.js

@@ -0,0 +1,53 @@
+/**
+ * R9 回归:`accounts list` 的分页游标。
+ *
+ * `limit` 上限 200(contracts `paginationQuerySchema`),此前 CLI 只有 `-n/--limit`,
+ * 账号数超过 200 的 team 无法穷举 —— SDK 与服务端一直支持 `offset`,缺的只有 CLI 这一层。
+ * 只断言选项已注册挡不住「注册了但忘了转发/转成 NaN」,所以这里跑真实 handler,
+ * 断言 SDK 收到的是**数值** offset,且不传时不发 offset(保持服务端默认 0)。
+ */
+import { beforeAll, afterEach, describe, expect, it, vi } from "vitest";
+const listAccounts = vi.fn().mockResolvedValue({ items: [], total: 0 });
+vi.mock("@geoly-ai/social-hub-sdk", () => ({
+    SocialHubClient: vi.fn(),
+    getSocialHubHealth: vi.fn(),
+}));
+vi.mock("./client.js", () => ({
+    requireClient: () => ({ listAccounts }),
+    resolveTeamId: (t) => t ?? "team-1",
+    getBaseUrl: () => "http://localhost",
+}));
+let program;
+beforeAll(async () => {
+    program = (await import("./index.js")).program;
+    vi.spyOn(console, "log").mockImplementation(() => { });
+}, 30000);
+afterEach(() => {
+    listAccounts.mockClear();
+});
+describe("accounts list 分页", () => {
+    // 两次 parse 放在同一个用例里且「不传」在前:commander 会把上一次 parse 的
+    // option 值留在同一个 command 实例上,拆成两个用例会互相污染。
+    it("--offset 以数值透传给 SDK,不传时则不发送(沿用服务端默认 0)", async () => {
+        await program.parseAsync(["node", "social-hub", "accounts", "list"]);
+        expect(listAccounts).toHaveBeenCalledTimes(1);
+        expect(listAccounts.mock.calls[0]?.[1]?.offset).toBeUndefined();
+        await program.parseAsync([
+            "node",
+            "social-hub",
+            "accounts",
+            "list",
+            "--limit",
+            "200",
+            "--offset",
+            "400",
+        ]);
+        expect(listAccounts).toHaveBeenCalledTimes(2);
+        expect(listAccounts.mock.calls[1]?.[0]).toBe("team-1");
+        expect(listAccounts.mock.calls[1]?.[1]).toMatchObject({
+            limit: 200,
+            offset: 400,
+        });
+    });
+});
+//# sourceMappingURL=accounts-list-offset.test.js.map

package/dist/accounts-list-offset.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"accounts-list-offset.test.js","sourceRoot":"","sources":["../src/accounts-list-offset.test.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAExE,MAAM,YAAY,GAAG,EAAE,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AAExE,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,YAAY,EAAE,CAAC;IACvC,aAAa,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ;IAC5C,UAAU,EAAE,GAAG,EAAE,CAAC,kBAAkB;CACrC,CAAC,CAAC,CAAC;AAEJ,IAAI,OAAwD,CAAC;AAE7D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACxD,CAAC,EAAE,KAAK,CAAC,CAAC;AAEV,SAAS,CAAC,GAAG,EAAE;IACb,YAAY,CAAC,SAAS,EAAE,CAAC;AAC3B,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,mDAAmD;IACnD,yCAAyC;IACzC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,CAAC,CAAC,CAAC;QACrE,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAEhE,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,MAAM;YACN,YAAY;YACZ,UAAU;YACV,MAAM;YACN,SAAS;YACT,KAAK;YACL,UAAU;YACV,KAAK;SACN,CAAC,CAAC;QACH,MAAM,CAAC,YAAY,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QAC9C,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QACvD,MAAM,CAAC,YAAY,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YACpD,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,GAAG;SACZ,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cmd-manifest.json

@@ -1,6 +1,6 @@
 {
-  "generatedAt": "2026-08-14T09:17:16.590Z",
-  "cliVersion": "0.3.19",
+  "generatedAt": "2026-08-21T06:10:56.141Z",
+  "cliVersion": "0.3.21",
   "commands": [
     "accounts",
     "accounts brand-bindings",
@@ -111,6 +111,8 @@
     "calendar list",
     "calendar list-full",
     "calendar patch",
+    "calendar preflight",
+    "calendar set-delivery-mode",
     "campaigns",
     "campaigns accounts",
     "campaigns accounts assign",

package/dist/compliance-risk-list-offset.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=compliance-risk-list-offset.test.d.ts.map

package/dist/compliance-risk-list-offset.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-risk-list-offset.test.d.ts","sourceRoot":"","sources":["../src/compliance-risk-list-offset.test.ts"],"names":[],"mappings":""}

package/dist/compliance-risk-list-offset.test.js

@@ -0,0 +1,63 @@
+/**
+ * 回归:`compliance risk-list` 的分页游标。
+ *
+ * `limit` 上限 200(contracts `listAccountRiskProfilesQuerySchema`),此前 CLI 只有
+ * `-n/--limit`,风险画像超过 200 个的 team 无法穷举 —— 调用方拿到 200 条会以为
+ * 那就是全部(生产上某团队已有 125 个)。与 `accounts list --offset`(R9)同形。
+ *
+ * 只断言选项已注册挡不住「注册了但忘了转发/转成 NaN」,所以这里跑真实 handler,
+ * 断言 SDK 收到的是**数值** offset,且不传时不发 offset(保持服务端默认 0)。
+ */
+import { beforeAll, afterEach, describe, expect, it, vi } from "vitest";
+const listAccountRiskProfiles = vi
+    .fn()
+    .mockResolvedValue({ items: [], total: 0 });
+vi.mock("@geoly-ai/social-hub-sdk", () => ({
+    SocialHubClient: vi.fn(),
+    getSocialHubHealth: vi.fn(),
+}));
+vi.mock("./client.js", () => ({
+    requireClient: () => ({ listAccountRiskProfiles }),
+    resolveTeamId: (t) => t ?? "team-1",
+    getBaseUrl: () => "http://localhost",
+}));
+let program;
+beforeAll(async () => {
+    program = (await import("./index.js")).program;
+    vi.spyOn(console, "log").mockImplementation(() => { });
+}, 30000);
+afterEach(() => {
+    listAccountRiskProfiles.mockClear();
+});
+describe("compliance risk-list 分页", () => {
+    // 两次 parse 放在同一个用例里且「不传」在前:commander 会把上一次 parse 的
+    // option 值留在同一个 command 实例上,拆成两个用例会互相污染。
+    it("--offset 以数值透传给 SDK,不传时则不发送(沿用服务端默认 0)", async () => {
+        await program.parseAsync(["node", "social-hub", "compliance", "risk-list"]);
+        expect(listAccountRiskProfiles).toHaveBeenCalledTimes(1);
+        expect(listAccountRiskProfiles.mock.calls[0]?.[0]).toBe("team-1");
+        expect(listAccountRiskProfiles.mock.calls[0]?.[1]?.offset).toBeUndefined();
+        expect(listAccountRiskProfiles.mock.calls[0]?.[1]?.limit).toBe(100);
+        await program.parseAsync([
+            "node",
+            "social-hub",
+            "compliance",
+            "risk-list",
+            "--limit",
+            "200",
+            "--offset",
+            "400",
+            "--search",
+            "espresso",
+        ]);
+        expect(listAccountRiskProfiles).toHaveBeenCalledTimes(2);
+        expect(listAccountRiskProfiles.mock.calls[1]?.[1]).toMatchObject({
+            limit: 200,
+            offset: 400,
+            search: "espresso",
+        });
+        // 老的 number 位置参数已经换成对象;传成数字会让 offset/search 静默丢失。
+        expect(typeof listAccountRiskProfiles.mock.calls[1]?.[1]).toBe("object");
+    });
+});
+//# sourceMappingURL=compliance-risk-list-offset.test.js.map

package/dist/compliance-risk-list-offset.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"compliance-risk-list-offset.test.js","sourceRoot":"","sources":["../src/compliance-risk-list-offset.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;GASG;AACH,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAC;AAExE,MAAM,uBAAuB,GAAG,EAAE;KAC/B,EAAE,EAAE;KACJ,iBAAiB,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE,CAAC,CAAC;AAE9C,EAAE,CAAC,IAAI,CAAC,0BAA0B,EAAE,GAAG,EAAE,CAAC,CAAC;IACzC,eAAe,EAAE,EAAE,CAAC,EAAE,EAAE;IACxB,kBAAkB,EAAE,EAAE,CAAC,EAAE,EAAE;CAC5B,CAAC,CAAC,CAAC;AAEJ,EAAE,CAAC,IAAI,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC;IAC5B,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,EAAE,uBAAuB,EAAE,CAAC;IAClD,aAAa,EAAE,CAAC,CAAU,EAAE,EAAE,CAAC,CAAC,IAAI,QAAQ;IAC5C,UAAU,EAAE,GAAG,EAAE,CAAC,kBAAkB;CACrC,CAAC,CAAC,CAAC;AAEJ,IAAI,OAAwD,CAAC;AAE7D,SAAS,CAAC,KAAK,IAAI,EAAE;IACnB,OAAO,GAAG,CAAC,MAAM,MAAM,CAAC,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC;IAC/C,EAAE,CAAC,KAAK,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,kBAAkB,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAC;AACxD,CAAC,EAAE,KAAK,CAAC,CAAC;AAEV,SAAS,CAAC,GAAG,EAAE;IACb,uBAAuB,CAAC,SAAS,EAAE,CAAC;AACtC,CAAC,CAAC,CAAC;AAEH,QAAQ,CAAC,yBAAyB,EAAE,GAAG,EAAE;IACvC,mDAAmD;IACnD,yCAAyC;IACzC,EAAE,CAAC,wCAAwC,EAAE,KAAK,IAAI,EAAE;QACtD,MAAM,OAAO,CAAC,UAAU,CAAC,CAAC,MAAM,EAAE,YAAY,EAAE,YAAY,EAAE,WAAW,CAAC,CAAC,CAAC;QAC5E,MAAM,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;QAClE,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,aAAa,EAAE,CAAC;QAC3E,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QAEpE,MAAM,OAAO,CAAC,UAAU,CAAC;YACvB,MAAM;YACN,YAAY;YACZ,YAAY;YACZ,WAAW;YACX,SAAS;YACT,KAAK;YACL,UAAU;YACV,KAAK;YACL,UAAU;YACV,UAAU;SACX,CAAC,CAAC;QACH,MAAM,CAAC,uBAAuB,CAAC,CAAC,qBAAqB,CAAC,CAAC,CAAC,CAAC;QACzD,MAAM,CAAC,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,aAAa,CAAC;YAC/D,KAAK,EAAE,GAAG;YACV,MAAM,EAAE,GAAG;YACX,MAAM,EAAE,UAAU;SACnB,CAAC,CAAC;QACH,kDAAkD;QAClD,MAAM,CAAC,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/content-review.test.js

@@ -73,7 +73,7 @@ const okResult = {
     optimized: null,
     rationale: null,
     reviewModel: "m",
-    rubricVersion: "content-review.v4",
+    rubricVersion: "content-review.v5",
     thresholdSnapshot: {},
     latencyMs: 12,
     degradedReason: null,

package/dist/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AAuDpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AA8+E9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAg+BD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAkJnE;AAyqBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE,GAAG,MAAM,CAiBT;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAyCpD;AAgyDD,OAAO,EAAE,OAAO,EAAE,CAAC"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":";AACA,OAAO,EAAE,OAAO,EAAE,MAAM,WAAW,CAAC;AA4DpC,QAAA,MAAM,OAAO,SAAgB,CAAC;AAyhF9B,8DAA8D;AAC9D,wBAAgB,4BAA4B,CAC1C,IAAI,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAC5B,MAAM,GAAG,IAAI,CAOf;AAg+BD,MAAM,MAAM,gBAAgB,GAAG;IAC7B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAC1D,mBAAmB,CAAC,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC;QAAE,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACjE,CAAC;AAQF,wBAAsB,qBAAqB,CACzC,MAAM,EAAE,gBAAgB,EACxB,MAAM,EAAE;IACN,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAC/B,YAAY,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACtC,SAAS,EAAE,MAAM,CAAC;IAClB,SAAS,EAAE,MAAM,CAAC;IAClB,MAAM,EAAE,MAAM,CAAC;IACf,KAAK,EAAE,OAAO,CAAC;IACf,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IACnB,KAAK,CAAC,EAAE,CAAC,EAAE,EAAE,MAAM,KAAK,OAAO,CAAC,IAAI,CAAC,CAAC;CACvC,GACA,OAAO,CAAC;IAAE,QAAQ,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAkJnE;AAyqBD;;;GAGG;AACH,wBAAgB,mBAAmB,CAAC,GAAG,EAAE;IACvC,OAAO,EAAE,MAAM,CAAC;IAChB,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IACjC,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAClC,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC1B,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB,YAAY,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAC;IAC3B,sBAAsB,CAAC,EAAE,KAAK,CAAC;QAAE,MAAM,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,CAAA;KAAE,CAAC,CAAC;CACpE,GAAG,MAAM,CAiBT;AAED;;;GAGG;AACH,wBAAgB,iBAAiB,CAAC,CAAC,EAAE,OAAO,GAAG,MAAM,CAyCpD;AAgyDD,OAAO,EAAE,OAAO,EAAE,CAAC"}

package/dist/index.js

@@ -8,6 +8,7 @@ import { registerSubredditStyleCommands } from "./register-subreddit-style.js";
 import { registerContentClassificationCommands } from "./register-content-classification.js";
 import { registerNotifyCommands } from "./register-notify.js";
 import { registerFeishuIdentityCommands } from "./register-feishu-identities.js";
+import { registerCalendarDirectiveCommands, calendarPatchNeedsGate, deliveryModeChangeRequiresApply, } from "./register-calendar-directives.js";
 import { assertApplyOrDryRun } from "./dry-run.js";
 import { withPermissionGate } from "./permission-runner.js";
 import { registerBatchAndExport } from "./register-batch.js";
@@ -284,6 +285,7 @@ dashboard
 });
 // --- calendar ---
 const calendar = program.command("calendar").description("发布日历条目");
+registerCalendarDirectiveCommands(calendar);
 calendar
     .command("list")
     .description("GET /calendar-entries")
@@ -311,6 +313,8 @@ calendar
     .option("-t, --team <teamId>", "Team UUID(缺省用当前 context)")
     .requiredOption("-e, --entry <entryId>", "Calendar entry UUID")
     .requiredOption("--body <json>", '例如 {"status":"succeeded","permalink":"https://www.reddit.com/..."}')
+    .option("--dry-run", "预览写入，不调用 API", false)
+    .option("--apply", "执行写入（仅 deliveryMode 变更必填）", false)
     .action(async (opts) => {
     let body;
     try {
@@ -320,7 +324,31 @@ calendar
         console.error("Invalid --body JSON");
         process.exit(1);
     }
-    const res = await requireClient().updateCalendarEntry(resolveTeamId(opts.team), opts.entry, body);
+    const teamId = resolveTeamId(opts.team);
+    // 两道门，判据不同，不能合成一条：
+    //
+    //   `--dry-run` **对任何 body 都必须生效** —— 全局 flag 契约是「预览写入，不调用
+    //   API」（docs/command-governance.md）。只在 deliveryMode 分支上认它，就会出现
+    //   「我明明加了 --dry-run，它却真的把状态改了」这种最不该有的意外写入。
+    //
+    //   `--apply` **只在 body 含 `deliveryMode` 时必填**。它是防重复发帖的唯一闸门
+    //   （方案 D1）：改它会让服务端在同一事务里撤销/创建内部 publish_post job 并
+    //   append 指令。`calendar set-delivery-mode` 已经带这道门，raw patch 必须同样
+    //   挡住，否则那道门只是装饰。其余字段（status/permalink/…）不加必填门，既有
+    //   自动化行为完全不变。
+    if (calendarPatchNeedsGate(body, opts) &&
+        !assertApplyOrDryRun(opts, {
+            command: deliveryModeChangeRequiresApply(body)
+                ? "calendar patch (deliveryMode)"
+                : "calendar patch",
+            danger: deliveryModeChangeRequiresApply(body)
+                ? "切换发布主体：转 external_agent 会撤销内部 publish_post job 并发 upsert 指令；转 hub_managed 会发 cancel 指令并建内部 job。改错 = 双发或谁都不发。"
+                : "更新日历条目",
+            summary: { teamId, calendarEntryId: opts.entry, body },
+        })) {
+        return;
+    }
+    const res = await requireClient().updateCalendarEntry(teamId, opts.entry, body);
     console.log(JSON.stringify(res, null, 2));
 });
 // --- reddit ---
@@ -580,10 +608,12 @@ accounts
     .option("--campaign <uuid>", "campaignId 过滤（legacy）")
     .option("--persona <uuid>", "personaId")
     .option("--category <cat>", "人设分类")
-    .option("-n, --limit <n>", "limit", "50")
+    .option("-n, --limit <n>", "limit（上限 200）", "50")
+    .option("--offset <n>", "offset（翻页：offset 每次 += limit；返回体的 total 是过滤后的总数，offset + items.length >= total 即翻完）")
     .action(async (opts) => {
     const res = await requireClient().listAccounts(resolveTeamId(opts.team), {
         limit: Number(opts.limit),
+        offset: opts.offset === undefined ? undefined : Number(opts.offset),
         status: opts.status,
         platform: opts.platform,
         brandId: opts.brand,
@@ -1629,9 +1659,15 @@ compliance
     .command("risk-list")
     .description("GET /account-risk-profiles")
     .option("-t, --team <teamId>", "Team UUID(缺省用当前 context)")
-    .option("-n, --limit <n>", "limit", "100")
+    .option("-n, --limit <n>", "limit（上限 200）", "100")
+    .option("--offset <n>", "offset（翻页：offset 每次 += limit；返回体的 total 是过滤后的总数，集合在翻页期间不变时 offset + items.length >= total 即翻完。offset 分页不是快照分页，并发写入下同一行可能重复出现或被跳过）")
+    .option("--search <text>", "按 handle / platform 模糊过滤")
     .action(async (opts) => {
-    const res = await requireClient().listAccountRiskProfiles(resolveTeamId(opts.team), Number(opts.limit));
+    const res = await requireClient().listAccountRiskProfiles(resolveTeamId(opts.team), {
+        limit: Number(opts.limit),
+        offset: opts.offset === undefined ? undefined : Number(opts.offset),
+        search: opts.search,
+    });
     console.log(JSON.stringify(res, null, 2));
 });
 compliance