@klarkxy/dsh-zhihu 0.2.7 → 0.2.9

package/lib/index.js

@@ -1,9 +1,14 @@
 import { C as resolveZhihuCallPolicy, S as zhihuFetchJson, _ as executeZhihuSearch, a as ZHIHU_ASK_DEFAULT_MODEL, b as parseZhihuEnvelope, c as executeZhihuAsk, d as executeZhihuKnowledgeSearch, f as normalizeRecallScopes, i as zhihuOpenPlatformResultCount, l as executeZhihuGlobalSearch, n as executeZhihuOpenPlatform, o as ZHIHU_ASK_MODELS, r as resolveZhihuOpenPlatformOperation, t as ZHIHU_OPEN_PLATFORM_APIS, u as executeZhihuHotList, x as reportExecuted, y as ZhihuSearchError } from "./open-platform.js";
 import { ZHIHU_CREDENTIAL_REF, ZHIHU_RPC_CHANNEL, ZHIHU_SEARCH_EVENT } from "./contracts.js";
 import { createZhihuUsageRecorder, resolveDays, zhihuUsageDomainSpec } from "./usage.js";
+import { createHash, createHmac, randomUUID } from "node:crypto";
 import { credentialRef } from "@deepseek-ai/dsh-credentials";
+import { defineDomain, domainTable } from "@deepseek-ai/dsh-storage-domain";
+import { z } from "zod";
 import { registerHostRpcTransport, sendHostRpcResponse } from "@klarkxy/dsh-plugin-kit/host-rpc";
 import { WEB_PROVIDER_AVAILABILITY_EVENT } from "@klarkxy/dsh-plugin-kit/contracts";
+import { lexer } from "marked";
+import { parseFragment } from "parse5";
 /** 设置页 RPC 走 JSON/base64 传输,限额压到 20MB(平台上限 100MB)。 */
 const ZHIHU_KNOWLEDGE_UPLOAD_MAX_BYTES = 20971520;
 const KNOWLEDGE_BASES_PATH = "/api/v1/knowledge/bases";
@@ -273,6 +278,2401 @@ function bindZhihuWebSearch(ctx, service) {
 	});
 }
 //#endregion
+//#region src/sync-types.ts
+/** 文章可用的评论权限（publish-article.md 枚举）。 */
+const SYNC_ARTICLE_COMMENT_PERMISSIONS = [
+	"all",
+	"nobody",
+	"followee",
+	"censor",
+	"follower"
+];
+/** 想法可用的评论权限（publish-pin.md 枚举）。 */
+const SYNC_PIN_COMMENT_PERMISSIONS = [
+	"all",
+	"nobody",
+	"followee",
+	"censor",
+	"follower_n_days"
+];
+/** 文章创作声明枚举（publish-article.md）；pin 只允许 'ai_creation'。 */
+const SYNC_ARTICLE_CREATION_STATEMENTS = [
+	"spoiler",
+	"medical_advice",
+	"fictional_creation",
+	"contain_finance",
+	"ai_creation"
+];
+//#endregion
+//#region src/sync-content.ts
+/**
+* 知乎同步内容转换与校验（确定性实现；规则来源见下，未复制上游代码）。
+*
+* 规则来源（只读镜像 H:\Reference\zhihu-sync-full_v0.1.4，MIT / author zhihu）：
+*   zhihu-sync/zhihu-validate/reference/conversion.md  — 标题/正文/媒体/链接卡片/公式/表格
+*   zhihu-sync/zhihu-validate/reference/config.md      — topics/目录/创作声明/评论权限/圈子
+*   zhihu-sync/zhihu-validate/reference/code-languages.md — <pre lang> 语言 ID 表
+*   zhihu-sync/zhihu-publish/reference/publish-{article,question,pin}.md — 发布字段
+*
+* 分层：
+*   prepareZhihuSyncDraft(input)   规范化 SyncDraft → 知乎适配 html + issues + counts
+*   buildZhihuPublishRequest(prepared)  SyncPrepared → publish OpenAPI request envelope
+*
+* 必须遵守的硬约束（不静默丢内容）：
+*   - 标题/正文超限 → error issue，不截断、不自动精简（conversion.md §1.3）。
+*   - question 标题结尾无问号自动补「？」且计入长度（§2.1）。
+*   - 图片必须已上传：SyncImage.url 是发布 URL；originalUrl 仅用于按出现顺序匹配
+*     正文图片引用与预览层展示，永不写入发布 body。正文图片无法解析 → error。
+*   - 公式 LaTeX 移除 $/$$ 定界符后【不 trim】；alt 与 src?tex= 来自同一串（§4.11）。
+*   - 想法正文仅纯文本段落、text-link、hash_tag（#话题名#，≤10）；富文本降级+warning。
+*   - 想法独立图片（media 区）与 linkCard 互斥；两者并存 → error（§5.3/5.4）。
+*   - HTML 输入经 parse5 白名单消毒：script/iframe/object/embed/svg/style、on*、
+*     javascript:|vbscript:|file:|data: URL → error，危险节点不进入输出。
+*   - JSON 序列化只发生一次（发布请求体），body 不预转义。
+*/
+const SYNC_LIMITS = {
+	questionTitleMin: 4,
+	questionTitleMax: 51,
+	pinTitleMax: 50,
+	articleTitleMax: 100,
+	articleBodyMin: 9,
+	articleBodyMax: 1e5,
+	pinBodyMax: 2e3,
+	pinImagesMax: 18,
+	pinTopicsMax: 10,
+	articleTopicsMax: 3,
+	questionTopicsMax: 5,
+	captionMax: 140
+};
+const isRecord = (v) => !!v && typeof v === "object" && !Array.isArray(v);
+const escapeHtml = (v) => v.replace(/&/g, "&amp;").replace(/</g, "&lt;").replace(/>/g, "&gt;").replace(/"/g, "&quot;");
+const escapeAttr = escapeHtml;
+function isAbsoluteHttpUrl(value) {
+	try {
+		const u = new URL(value);
+		return u.protocol === "http:" || u.protocol === "https:";
+	} catch {
+		return false;
+	}
+}
+/**
+* 纯文本计数（conversion.md §3「按纯文本计，不含 HTML 标签」）：
+* 用 parse5 把 html 解析为文本节点再拼接 —— 解码 &amp; / &lt; 等实体，
+* 不去除用户正文中的正常空白（空格/换行仍算一个字符，按码点计）。
+* 内部占位符（公式/图片）先剔除再计数，不计入用户正文。
+*/
+function plainTextLength(html) {
+	const cleaned = html.replace(/ZHIHUIMG\d+PLACEHOLDER/g, "").replace(/ZHIHUFORMULA\d+PLACEHOLDER/g, "");
+	const frag = parseFragment(cleaned);
+	let text = "";
+	const walk = (nodes) => {
+		for (const n of nodes) if (n.nodeName === "#text") text += n.value;
+		else walk(n.childNodes ?? []);
+	};
+	walk(frag.childNodes);
+	return [...text].length;
+}
+const SUPPORTED_LANGS = /* @__PURE__ */ new Set([
+	"abap",
+	"abnf",
+	"actionscript",
+	"ada",
+	"adl",
+	"agda",
+	"ahk",
+	"alloy",
+	"antlr",
+	"apacheconf",
+	"apl",
+	"applescript",
+	"arduino",
+	"as",
+	"as3",
+	"asciidoc",
+	"aspectj",
+	"asy",
+	"at",
+	"autoit",
+	"awk",
+	"basemake",
+	"bash",
+	"bat",
+	"bbcode",
+	"bc",
+	"befunge",
+	"bib",
+	"blitzbasic",
+	"blitzmax",
+	"bnf",
+	"boo",
+	"boogie",
+	"brainfuck",
+	"bro",
+	"bugs",
+	"c",
+	"c++",
+	"c#",
+	"ca65",
+	"cadl",
+	"camkes",
+	"cbmbas",
+	"ceylon",
+	"cfengine3",
+	"cfm",
+	"cfs",
+	"chai",
+	"chapel",
+	"cheetah",
+	"cirru",
+	"clay",
+	"clojure",
+	"clojurescript",
+	"cmake",
+	"cobol",
+	"cobolfree",
+	"coffee-script",
+	"common-lisp",
+	"componentpascal",
+	"console",
+	"control",
+	"coq",
+	"cpp",
+	"cpp-objdump",
+	"cpsa",
+	"crmsh",
+	"croc",
+	"cryptol",
+	"csharp",
+	"csound",
+	"csound-document",
+	"csound-score",
+	"css",
+	"cuda",
+	"cython",
+	"d",
+	"d-objdump",
+	"darcs",
+	"dart",
+	"debcontrol",
+	"debian",
+	"delphi",
+	"dg",
+	"diff",
+	"django",
+	"docker",
+	"dpatch",
+	"dtd",
+	"duel",
+	"dylan",
+	"dylan-console",
+	"dylanlid",
+	"ebnf",
+	"ecl",
+	"eiffel",
+	"elixir",
+	"elm",
+	"emacslisp",
+	"erb",
+	"erl",
+	"erlang",
+	"evoque",
+	"factor",
+	"fancy",
+	"fantom",
+	"felix",
+	"fortran",
+	"foxpro",
+	"fsharp",
+	"gas",
+	"genshi",
+	"glsl",
+	"gnuplot",
+	"go",
+	"golo",
+	"gooddata-cl",
+	"gosu",
+	"groff",
+	"groovy",
+	"gst",
+	"haml",
+	"handlebars",
+	"haskell",
+	"haxeml",
+	"html",
+	"httpd",
+	"hy",
+	"idl",
+	"idris",
+	"igor",
+	"inform6",
+	"inform7",
+	"ini",
+	"io",
+	"ioke",
+	"irb",
+	"jade",
+	"java",
+	"js",
+	"json",
+	"julia",
+	"jvm",
+	"kal",
+	"kconfig",
+	"koka",
+	"kotlin",
+	"lagda",
+	"lasso",
+	"lhs",
+	"lidr",
+	"lighty",
+	"lisp",
+	"live-script",
+	"llvm",
+	"logos",
+	"logtalk",
+	"lua",
+	"make",
+	"mako",
+	"mason",
+	"mask",
+	"matlab",
+	"md",
+	"minid",
+	"modelica",
+	"modula2",
+	"monkey",
+	"moocode",
+	"moon",
+	"mscgen",
+	"mupad",
+	"mxml",
+	"mysql",
+	"nasm",
+	"newlisp",
+	"nginx",
+	"nim",
+	"nit",
+	"nixos",
+	"nsis",
+	"numpy",
+	"objdump-c",
+	"objdump-cpp",
+	"objdump-d",
+	"objdump-nasm",
+	"objective-c",
+	"objective-j",
+	"ocaml",
+	"octave",
+	"odin",
+	"ooc",
+	"opa",
+	"openedge",
+	"pacmanconf",
+	"pan",
+	"pawn",
+	"perl",
+	"php",
+	"pig",
+	"pike",
+	"pkgconfig",
+	"plpgsql",
+	"postscript",
+	"powershell",
+	"prolog",
+	"properties",
+	"protobuf",
+	"psql",
+	"puppet",
+	"py",
+	"pycon",
+	"pypylog",
+	"pytb",
+	"python",
+	"python3",
+	"qbasic",
+	"r",
+	"rake",
+	"rb",
+	"rbcon",
+	"rebol",
+	"red",
+	"redcode",
+	"registry",
+	"resources",
+	"robotframework",
+	"rq",
+	"rql",
+	"rst",
+	"rts",
+	"rust",
+	"sass",
+	"scala",
+	"scaml",
+	"scheme",
+	"scilab",
+	"scss",
+	"sh",
+	"shell",
+	"smarty",
+	"snobol",
+	"sourceslist",
+	"sp",
+	"sparql",
+	"sql",
+	"squidconf",
+	"sre",
+	"stan",
+	"swift",
+	"swig",
+	"systemverilog",
+	"tads3",
+	"tap",
+	"tcl",
+	"tcsh",
+	"tea",
+	"termcap",
+	"terminfo",
+	"terraform",
+	"text",
+	"textile",
+	"thrift",
+	"todotxt",
+	"trac-wiki",
+	"treetop",
+	"ts",
+	"turtle",
+	"twig",
+	"urbiscript",
+	"v",
+	"vala",
+	"vb.net",
+	"vctreestatus",
+	"velocity",
+	"verilog",
+	"vgl",
+	"vhdl",
+	"vim",
+	"x10",
+	"xml",
+	"xquery",
+	"xslt",
+	"xtend",
+	"xul+mozpreproc",
+	"yaml",
+	"yaml+jinja",
+	"zephir"
+]);
+/** lang ID 归一化：不在支持表 → ''。 */
+function normalizeCodeLang(raw) {
+	if (!raw) return "";
+	const id = raw.trim().toLowerCase();
+	return SUPPORTED_LANGS.has(id) ? id : "";
+}
+function latexToEquationImg(latex, block) {
+	return `<img eeimg="${block ? 2 : 1}" src="//www.zhihu.com/equation?tex=${encodeURIComponent(latex)}" alt="${escapeAttr(latex)}" />`;
+}
+const error = (ctx, code, message) => ctx.issues.push({
+	severity: "error",
+	code,
+	message
+});
+const warning = (ctx, code, message) => ctx.issues.push({
+	severity: "warning",
+	code,
+	message
+});
+/** 每次 prepare 生成唯一占位前缀，避免与用户正文碰撞。 */
+function makePlaceholders() {
+	const prefix = `ZHIHU_${Date.now().toString(36)}_${Math.random().toString(36).slice(2, 8)}_`;
+	return {
+		img: (i) => `${prefix}IMG${i}`,
+		formula: (i) => `${prefix}FORMULA${i}`
+	};
+}
+const VOID_RAW_TAGS = /* @__PURE__ */ new Set([
+	"br",
+	"hr",
+	"img",
+	"input",
+	"meta",
+	"link",
+	"area",
+	"base",
+	"col",
+	"embed",
+	"source",
+	"track",
+	"wbr"
+]);
+/** 行内 raw HTML 开标签 → 在 token 流中找匹配 </tag>，把整段 raw 交给 parse5 消毒。
+*  marked 会把 <b>x</b> 拆成独立 html token，单独 sanitize 会得到空壳 <b></b>。
+*  返回整段 raw；找不到闭合标签或自闭合/void 时只返回当前 token raw。 */
+function rawHtmlRun(tokens, start) {
+	const first = tokens[start].raw ?? "";
+	const m = first.match(/^<([a-zA-Z][a-zA-Z0-9-]*)\b/);
+	if (!m || /\/>$/.test(first) || VOID_RAW_TAGS.has(m[1].toLowerCase())) return {
+		raw: first,
+		next: start + 1
+	};
+	const tag = m[1].toLowerCase();
+	const closeRe = new RegExp(`^</${tag}\\s*>`, "i");
+	for (let i = start + 1; i < tokens.length; i++) {
+		const t = tokens[i];
+		if (t.type === "html" && closeRe.test(t.raw ?? "")) return {
+			raw: tokens.slice(start, i + 1).map((x) => x.raw ?? "").join(""),
+			next: i + 1
+		};
+		if (t.type !== "html" && t.type !== "text" && t.type !== "escape") break;
+	}
+	return {
+		raw: first,
+		next: start + 1
+	};
+}
+function inlineToHtml(tokens, ctx) {
+	if (!tokens?.length) return "";
+	let out = "";
+	for (let ti = 0; ti < tokens.length; ti++) {
+		const t = tokens[ti];
+		switch (t.type) {
+			case "text": {
+				const tok = t;
+				if (tok.tokens?.length) out += inlineToHtml(tok.tokens, ctx);
+				else {
+					const base = ctx.formulas.length;
+					const extracted = extractFormulas(decodeEntities(tok.text), {
+						...ctx.ph,
+						formula: (index) => ctx.ph.formula(base + index)
+					});
+					ctx.formulas.push(...extracted.formulas);
+					out += escapeHtml(extracted.text);
+				}
+				break;
+			}
+			case "escape":
+				out += escapeHtml(t.text);
+				break;
+			case "strong":
+				if (ctx.pinMode) {
+					warning(ctx, "pin.unsupported-rich-text", "想法正文不支持加粗，已降级为纯文本。");
+					out += inlineToHtml(t.tokens, ctx);
+				} else out += `<b>${inlineToHtml(t.tokens, ctx)}</b>`;
+				break;
+			case "em":
+				if (ctx.pinMode) {
+					warning(ctx, "pin.unsupported-rich-text", "想法正文不支持斜体，已降级为纯文本。");
+					out += inlineToHtml(t.tokens, ctx);
+				} else out += `<i>${inlineToHtml(t.tokens, ctx)}</i>`;
+				break;
+			case "codespan":
+				if (ctx.pinMode) {
+					warning(ctx, "pin.unsupported-rich-text", "想法正文不支持行内代码，已降级为纯文本。");
+					out += escapeHtml(t.text);
+				} else out += `<code>${escapeHtml(t.text)}</code>`;
+				break;
+			case "del":
+				warning(ctx, "unsupported.del", "删除线不受支持，已降级为纯文本。");
+				out += inlineToHtml(t.tokens, ctx);
+				break;
+			case "link": {
+				const link = t;
+				const inner = inlineToHtml(link.tokens, ctx);
+				const innerText = inner.replace(/<[^>]*>/g, "");
+				const href = (link.href ?? "").trim();
+				if (href.startsWith("#")) {
+					out += inner;
+					break;
+				}
+				if (!isAbsoluteHttpUrl(href)) {
+					warning(ctx, "link.unsafe-url", `链接地址不受支持，已保留为纯文本：${href || "(空)"}。`);
+					out += inner;
+					break;
+				}
+				if (ctx.pinMode) out += `<a href="${escapeAttr(href)}" data-insert-way="force" data-draft-node="inline" data-draft-type="text-link" data-draft-title="${escapeAttr(innerText || href)}">${inner}</a>`;
+				else out += `<a href="${escapeAttr(href)}" data-draft-title="${escapeAttr(innerText || href)}">${inner}</a>`;
+				break;
+			}
+			case "image": {
+				const img = t;
+				const idx = ctx.bodyImages.length;
+				ctx.bodyImages.push({
+					src: (img.href ?? "").trim(),
+					caption: img.text ?? ""
+				});
+				out += ctx.ph.img(idx);
+				break;
+			}
+			case "br":
+				out += "<br>";
+				break;
+			case "html": {
+				const run = rawHtmlRun(tokens, ti);
+				ti = run.next - 1;
+				const raw = run.raw.trim();
+				if (raw) out += sanitizeInlineHtml(raw, ctx);
+				break;
+			}
+			default: {
+				const anyT = t;
+				if (anyT.tokens?.length) out += inlineToHtml(anyT.tokens, ctx);
+				else if (typeof anyT.text === "string") out += escapeHtml(anyT.text);
+				else if (typeof anyT.raw === "string") out += escapeHtml(anyT.raw);
+			}
+		}
+	}
+	return out;
+}
+function blockToHtml(tokens, ctx) {
+	if (!tokens?.length) return "";
+	let out = "";
+	for (const t of tokens) switch (t.type) {
+		case "space": break;
+		case "paragraph": {
+			const inner = inlineToHtml(t.tokens, ctx);
+			out += inner.trim() ? `<p>${inner}</p>` : "<p><br></p>";
+			break;
+		}
+		case "heading": {
+			const h = t;
+			const inner = inlineToHtml(h.tokens, ctx);
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持标题，已降级为段落文本。");
+				if (inner.trim()) out += `<p>${inner}</p>`;
+			} else {
+				const level = h.depth <= 2 ? 2 : 3;
+				out += `<h${level}>${inner}</h${level}>`;
+			}
+			break;
+		}
+		case "hr":
+			out += "<hr />";
+			break;
+		case "code": {
+			const code = t;
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持代码块，已降级为文本。");
+				out += `<p>${escapeHtml(code.text.trimEnd())}</p>`;
+			} else out += `<pre lang="${normalizeCodeLang(code.lang)}">${escapeHtml(code.text.replace(/\n$/, ""))}</pre>`;
+			break;
+		}
+		case "blockquote": {
+			const inner = blockToHtml(t.tokens, ctx);
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持引用块，已降级为文本。");
+				const text = inner.replace(/<[^>]+>/g, " ").replace(/\s+/g, " ").trim();
+				if (text) out += `<p>${escapeHtml(text)}</p>`;
+			} else {
+				const flattened = inner.replace(/<\/p>\s*<p>/g, "<br>").replace(/^<p>/, "").replace(/<\/p>$/, "");
+				out += `<blockquote>${flattened}</blockquote>`;
+			}
+			break;
+		}
+		case "list": {
+			const list = t;
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持列表，已降级为段落文本。");
+				for (const item of list.items) {
+					const inner = inlineToHtml(item.tokens, ctx);
+					if (inner.trim()) out += `<p>${inner}</p>`;
+				}
+				break;
+			}
+			const tag = list.ordered ? "ol" : "ul";
+			const items = list.items.map((item) => `<li>${inlineToHtml(item.tokens, ctx)}</li>`).join("");
+			out += `<${tag}>${items}</${tag}>`;
+			break;
+		}
+		case "table": {
+			const table = t;
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持表格，已降级为文本。");
+				const text = table.raw.replace(/<[^>]+>/g, " ").replace(/[|:-]+/g, " ").replace(/\s+/g, " ").trim();
+				if (text) out += `<p>${escapeHtml(text)}</p>`;
+				break;
+			}
+			const head = table.header.map((c) => `<th>${inlineToHtml(c.tokens, ctx)}</th>`).join("");
+			const rows = table.rows.map((r) => `<tr>${r.map((c) => `<td>${inlineToHtml(c.tokens, ctx)}</td>`).join("")}</tr>`).join("");
+			out += `<table data-draft-node="block" data-draft-type="table" data-size="normal" data-row-style="normal"><tbody><tr>${head}</tr>${rows}</tbody></table>`;
+			break;
+		}
+		case "html": {
+			const raw = t.text ?? t.raw ?? "";
+			if (raw.trim()) out += sanitizeInputHtml(raw, ctx);
+			break;
+		}
+		default: {
+			const anyT = t;
+			if (anyT.tokens?.length) {
+				const inner = blockToHtml(anyT.tokens, ctx);
+				if (inner.trim()) out += inner;
+			} else if (typeof anyT.raw === "string" && anyT.raw.trim()) out += `<p>${escapeHtml(anyT.raw.trim())}</p>`;
+		}
+	}
+	return out;
+}
+/**
+* 提取 $...$ / $$...$$ 公式（marked 无内建数学扩展，预扫描后在输出中恢复）。
+* 移除定界符后保留内侧全部字符（含首尾空白）——不 trim。
+* 货币场景保真：`$5`、`$10` 这类 $ 紧跟数字的当普通文字，不当公式定界。
+* $$...$$ 始终以 $$ 开头，不受单 $ 货币规则影响。
+*/
+function extractFormulas(text, ph) {
+	const formulas = [];
+	let out = "";
+	let i = 0;
+	while (i < text.length) {
+		const dollar = text.indexOf("$", i);
+		if (dollar < 0) {
+			out += text.slice(i);
+			break;
+		}
+		if (dollar > 0 && text[dollar - 1] === "\\") {
+			out += text.slice(i, dollar + 1);
+			i = dollar + 1;
+			continue;
+		}
+		const isDouble = text[dollar + 1] === "$";
+		const openLen = isDouble ? 2 : 1;
+		const afterOpen = text.slice(dollar + openLen, dollar + openLen + 2);
+		if (!isDouble && (/\d/.test(afterOpen[0] ?? "") || /^[A-Z][A-Z]/.test(afterOpen))) {
+			out += text.slice(i, dollar + 1);
+			i = dollar + 1;
+			continue;
+		}
+		const close = text.indexOf(isDouble ? "$$" : "$", dollar + openLen);
+		if (close < 0) {
+			out += text.slice(i);
+			break;
+		}
+		const latex = text.slice(dollar + openLen, close);
+		if (!latex) {
+			out += text.slice(i, close + openLen);
+			i = close + openLen;
+			continue;
+		}
+		if (!isDouble && /\d/.test(text[close + openLen] ?? "")) {
+			out += text.slice(i, close + openLen);
+			i = close + openLen;
+			continue;
+		}
+		formulas.push({
+			block: isDouble,
+			latex
+		});
+		out += text.slice(i, dollar) + ph.formula(formulas.length - 1);
+		i = close + openLen;
+	}
+	return {
+		text: out,
+		formulas
+	};
+}
+/**
+* 扫描纯文本里的 #话题名#，转成 hash_tag <a>。
+* 用 parse5 遍历 DOM 树，只在文本节点内做替换——不触碰属性值，
+* 不会在已有 <a> 内嵌套 <a>，不会双转义。
+*/
+function injectPinHashTags(html) {
+	const frag = parseFragment(html);
+	let count = 0;
+	const walk = (parent) => {
+		for (let i = 0; i < parent.childNodes.length; i++) {
+			const node = parent.childNodes[i];
+			if (node.nodeName === "#text") {
+				const text = node.value;
+				if (!text.includes("#")) continue;
+				const parts = [];
+				let last = 0;
+				text.replace(/#([^#\n<>]{1,200})#/g, (whole, name, offset) => {
+					if (offset > last) parts.push({
+						nodeName: "#text",
+						value: text.slice(last, offset),
+						parentNode: null,
+						nextNode: null,
+						prevNode: null
+					});
+					const topic = `#${name}#`;
+					const anchor = {
+						nodeName: "a",
+						tagName: "a",
+						attrs: [{
+							name: "class",
+							value: "hash_tag"
+						}, {
+							name: "data-topic-name",
+							value: topic
+						}],
+						childNodes: [{
+							nodeName: "#text",
+							value: topic
+						}],
+						namespaceURI: "http://www.w3.org/1999/xhtml"
+					};
+					parts.push(anchor);
+					count += 1;
+					last = offset + whole.length;
+					return whole;
+				});
+				if (count > 0 && parts.length) {
+					if (last < text.length) parts.push({
+						nodeName: "#text",
+						value: text.slice(last),
+						parentNode: null,
+						nextNode: null,
+						prevNode: null
+					});
+					parent.childNodes.splice(i, 1, ...parts);
+					i += parts.length - 1;
+				}
+				continue;
+			}
+			if (node.tagName?.toLowerCase() === "a") continue;
+			if ("childNodes" in node) walk(node);
+		}
+	};
+	walk(frag);
+	return {
+		html: frag.childNodes.map((c) => serializeNode(c)).join(""),
+		count
+	};
+}
+function serializeNode(node) {
+	if (node.nodeName === "#text") return escapeHtml(node.value);
+	const el = node;
+	const tag = el.tagName?.toLowerCase();
+	if (!tag) return "";
+	if (VOID_TAGS.has(tag)) {
+		const attrs = (el.attrs ?? []).map((a) => `${a.name}="${escapeAttr(a.value)}"`).join(" ");
+		return `<${tag}${attrs ? " " + attrs : ""} />`;
+	}
+	const attrs = (el.attrs ?? []).map((a) => `${a.name}="${escapeAttr(a.value)}"`).join(" ");
+	const inner = (el.childNodes ?? []).map((c) => serializeNode(c)).join("");
+	return `<${tag}${attrs ? " " + attrs : ""}>${inner}</${tag}>`;
+}
+/**
+* 把 draft.body 中的图片引用按出现顺序与 draft.images 中的 SyncImage 匹配。
+* 匹配键：SyncImage.originalUrl 等于引用 src（允许 file:// 归一化差异）；
+* 若未提供 originalUrl，则按顺序消费。无法匹配到已上传 URL → error。
+*/
+function resolveBodyImages(ctx, draft) {
+	const uploaded = draft.images ?? [];
+	const unused = new Set(uploaded.map((_, i) => i));
+	const normalize = (v) => {
+		let s = v.trim().replace(/^file:\/\//i, "").replace(/\\/g, "/");
+		try {
+			if (encodeURIComponent(decodeURIComponent(s)) === s) s = decodeURIComponent(s);
+		} catch {}
+		return s.toLowerCase();
+	};
+	for (const ref of ctx.bodyImages) {
+		let matched = -1;
+		for (const i of unused) {
+			const img = uploaded[i];
+			if (img.originalUrl && normalize(img.originalUrl) === normalize(ref.src)) {
+				matched = i;
+				break;
+			}
+		}
+		if (matched < 0) for (const i of unused) {
+			const img = uploaded[i];
+			if (!img.originalUrl || normalize(img.originalUrl) === normalize(ref.src)) {
+				matched = i;
+				break;
+			}
+		}
+		if (matched < 0) {
+			error(ctx, "image.unresolved", `正文图片未找到对应的上传结果：${ref.src || "(空 src)"}。请先上传图片后再保存/发布。`);
+			continue;
+		}
+		unused.delete(matched);
+		ref.resolved = uploaded[matched];
+	}
+	if (!ctx.pinMode) for (const i of unused) warning(ctx, "image.unused", `已上传图片未在正文中引用：${uploaded[i].originalUrl || uploaded[i].url}。`);
+}
+/** 知乎域白名单（与媒体 owner 一致）：^([a-z0-9-]+\.)*(zhimg\.com|zhihu\.com)$ */
+const ZHIHU_DOMAIN_RE = /^([a-z0-9-]+\.)*(zhimg\.com|zhihu\.com)$/i;
+function isZhihuImageUrl(value) {
+	try {
+		const u = new URL(value);
+		return u.protocol === "https:" && !u.username && !u.password && ZHIHU_DOMAIN_RE.test(u.hostname);
+	} catch {
+		return false;
+	}
+}
+function renderBodyImage(ref, ctx) {
+	const img = ref.resolved;
+	if (!img?.url) return "";
+	if (!isZhihuImageUrl(img.url)) {
+		error(ctx, "image.unsafe-url", `图片发布 URL 不是 HTTPS 知乎图片域：${img.url}。`);
+		return "";
+	}
+	const caption = ref.caption || "";
+	if (caption.length > SYNC_LIMITS.captionMax) {
+		error(ctx, "image.caption-too-long", `图片注释超过 ${SYNC_LIMITS.captionMax} 字，请缩短后重试。`);
+		return "";
+	}
+	const attrs = [`src="${escapeAttr(img.url)}"`];
+	attrs.push(`data-caption="${escapeAttr(caption)}"`);
+	const w = img.width ?? 0;
+	attrs.push(`data-size="${w > 0 && w < 343 ? "small" : "normal"}"`);
+	if (img.width !== void 0) attrs.push(`data-rawwidth="${img.width}"`);
+	if (img.height !== void 0) attrs.push(`data-rawheight="${img.height}"`);
+	if (img.watermark) attrs.push("data-watermark=\"watermark\"");
+	if (img.originalUrl && isZhihuImageUrl(img.originalUrl)) attrs.push(`data-original-src="${escapeAttr(img.originalUrl)}"`);
+	else attrs.push("data-original-src=\"\"");
+	attrs.push("data-watermark-src=\"\"", "data-private-watermark-src=\"\"");
+	return `<img ${attrs.join(" ")} />`;
+}
+const SAFE_TAGS = /* @__PURE__ */ new Set([
+	"p",
+	"br",
+	"h2",
+	"h3",
+	"b",
+	"i",
+	"ol",
+	"ul",
+	"li",
+	"blockquote",
+	"hr",
+	"pre",
+	"code",
+	"sup",
+	"img",
+	"a",
+	"table",
+	"tbody",
+	"tr",
+	"th",
+	"td"
+]);
+const DANGEROUS_TAGS = /* @__PURE__ */ new Set([
+	"script",
+	"iframe",
+	"object",
+	"embed",
+	"svg",
+	"style",
+	"link",
+	"meta",
+	"base",
+	"form",
+	"input",
+	"button",
+	"select",
+	"textarea",
+	"option",
+	"video",
+	"audio",
+	"source",
+	"track",
+	"noscript",
+	"template",
+	"frame",
+	"frameset",
+	"applet"
+]);
+const VOID_TAGS = /* @__PURE__ */ new Set([
+	"br",
+	"hr",
+	"img"
+]);
+const DANGEROUS_URL = /^\s*(javascript|vbscript|file|data):/i;
+function attr(el, name) {
+	return el.attrs?.find((a) => a.name.toLowerCase() === name)?.value ?? "";
+}
+function sanitizeAnchorAttrs(el, ctx) {
+	const dataAttrs = Object.fromEntries((el.attrs ?? []).map((a) => [a.name, a.value]));
+	const isLinkCard = dataAttrs["data-draft-type"] === "link-card" && dataAttrs["data-draft-node"] === "block";
+	const isTextLink = dataAttrs["data-draft-type"] === "text-link";
+	const isHashTag = (dataAttrs["class"] ?? "").split(/\s+/).includes("hash_tag") || (dataAttrs["class"] ?? "").includes("zed-topic");
+	const href = (dataAttrs["href"] ?? "").trim();
+	if (!href || !isAbsoluteHttpUrl(href) || DANGEROUS_URL.test(href)) {
+		error(ctx, "html.unsafe-link-url", `链接地址不受支持，已拒绝：${href || "(空)"}`);
+		return {
+			ok: false,
+			html: ""
+		};
+	}
+	let attrs = `href="${escapeAttr(href)}"`;
+	if (isHashTag) {
+		const topicName = dataAttrs["data-topic-name"] ?? "";
+		attrs = `class="hash_tag" href="${escapeAttr(href)}" data-topic-name="${escapeAttr(topicName)}"`;
+		const topicId = dataAttrs["data-topic-id"];
+		if (topicId) attrs += ` data-topic-id="${escapeAttr(topicId)}"`;
+		return {
+			ok: true,
+			html: `<a ${attrs}>{INNER}</a>`
+		};
+	}
+	if (isLinkCard) {
+		attrs += ` data-draft-node="block" data-draft-type="link-card" data-draft-title="${escapeAttr(dataAttrs["data-draft-title"] ?? "")}" data-draft-cover="${escapeAttr(dataAttrs["data-draft-cover"] ?? "")}"`;
+		if (dataAttrs["data-content-type"]) attrs += ` data-content-type="${escapeAttr(dataAttrs["data-content-type"])}"`;
+		if (dataAttrs["data-content-id"]) attrs += ` data-content-id="${escapeAttr(dataAttrs["data-content-id"])}"`;
+		return {
+			ok: true,
+			html: `<a ${attrs}>{INNER}</a>`
+		};
+	}
+	if (isTextLink || ctx.pinMode) {
+		attrs += ` data-insert-way="force" data-draft-node="inline" data-draft-type="text-link" data-draft-title="${escapeAttr(dataAttrs["data-draft-title"] ?? "")}"`;
+		return {
+			ok: true,
+			html: `<a ${attrs}>{INNER}</a>`
+		};
+	}
+	const title = dataAttrs["data-draft-title"];
+	if (title) attrs += ` data-draft-title="${escapeAttr(title)}"`;
+	return {
+		ok: true,
+		html: `<a ${attrs}>{INNER}</a>`
+	};
+}
+function sanitizeImg(el, ctx) {
+	const eeimg = attr(el, "eeimg");
+	const src = (attr(el, "src") ?? "").trim();
+	if (DANGEROUS_URL.test(src)) {
+		error(ctx, "html.unsafe-img-url", `图片地址不受支持，已拒绝：${src || "(空)"}`);
+		return "";
+	}
+	if (eeimg === "1" || eeimg === "2") {
+		if (!/^(https?:)?\/\/www\.zhihu\.com\/equation\?/i.test(src) && src) {
+			warning(ctx, "formula.invalid-src", "公式图片地址异常，已重建。");
+			return latexToEquationImg(attr(el, "alt"), eeimg === "2");
+		}
+		const alt = attr(el, "alt");
+		return `<img eeimg="${eeimg}" src="${escapeAttr(src)}" alt="${escapeAttr(alt)}" />`;
+	}
+	const idx = ctx.bodyImages.length;
+	ctx.bodyImages.push({
+		src,
+		caption: attr(el, "data-caption") || attr(el, "alt") || ""
+	});
+	return ctx.ph.img(idx);
+}
+function sanitizeSup(el, ctx) {
+	if (attr(el, "data-draft-type") !== "reference") {
+		warning(ctx, "unsupported.sup", "非注释语义的 <sup> 已降级为文本。");
+		return { wrapper: null };
+	}
+	if (ctx.type !== "article") {
+		error(ctx, "reference.unsupported", "提问与想法不支持注释（<sup data-draft-type=\"reference\">）。");
+		return { wrapper: null };
+	}
+	const text = attr(el, "data-text");
+	const url = attr(el, "data-url");
+	if (!text && !url) {
+		error(ctx, "reference.empty", "注释需要 data-text 或 data-url 至少一项非空。");
+		return { wrapper: null };
+	}
+	if (url && !isAbsoluteHttpUrl(url)) {
+		error(ctx, "reference.bad-url", `注释 data-url 不是合法链接：${url}`);
+		return { wrapper: null };
+	}
+	const numero = attr(el, "data-numero");
+	return { wrapper: [`<sup ${`data-text="${escapeAttr(text)}" data-url="${escapeAttr(url)}" data-draft-node="inline" data-draft-type="reference" data-numero="${escapeAttr(numero)}"`}>`, "</sup>"] };
+}
+function sanitizeNode(node, ctx) {
+	if (node.nodeName === "#text") return escapeHtml(node.value);
+	if (node.nodeName === "#comment" || node.nodeName === "#documentType") return "";
+	const el = node;
+	const tag = (el.tagName ?? "").toLowerCase();
+	if (!tag) return "";
+	if (DANGEROUS_TAGS.has(tag)) {
+		error(ctx, "html.unsafe-tag", `危险标签已移除且阻止发布：<${tag}>`);
+		return "";
+	}
+	const children = el.childNodes ?? [];
+	const inner = () => children.map((c) => sanitizeNode(c, ctx)).join("");
+	if (!SAFE_TAGS.has(tag)) {
+		warning(ctx, "html.unsupported-tag", `不支持的标签 <${tag}> 已降级为纯文本。`);
+		return inner();
+	}
+	switch (tag) {
+		case "a": {
+			const r = sanitizeAnchorAttrs(el, ctx);
+			if (!r.ok) return "";
+			return r.html.replace("{INNER}", inner());
+		}
+		case "img": return sanitizeImg(el, ctx);
+		case "sup": {
+			const r = sanitizeSup(el, ctx);
+			if (!r.wrapper) return inner();
+			return r.wrapper[0] + inner() + r.wrapper[1];
+		}
+		case "pre": {
+			const lang = normalizeCodeLang(attr(el, "lang"));
+			const collectText = (nodes) => nodes.map((n) => n.nodeName === "#text" ? n.value : collectText(n.childNodes ?? [])).join("");
+			const text = collectText(children);
+			return `<pre lang="${lang}">${escapeHtml(text)}</pre>`;
+		}
+		case "table": return `<table data-draft-node="block" data-draft-type="table" data-size="normal" data-row-style="normal">${inner()}</table>`;
+		case "thead":
+		case "tfoot":
+			warning(ctx, "table.unsupported-section", `<${tag}> 已并入 tbody。`);
+			return inner();
+		case "hr": return "<hr />";
+		case "br": return "<br>";
+		case "code": {
+			const text = inner();
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持行内代码，已降级为文本。");
+				return text;
+			}
+			return `<code>${text}</code>`;
+		}
+		case "b":
+		case "i": {
+			const content = inner();
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", `想法正文不支持 <${tag}>，已降级为文本。`);
+				return content;
+			}
+			return `<${tag}>${content}</${tag}>`;
+		}
+		case "h2":
+		case "h3": {
+			const content = inner();
+			if (ctx.pinMode) {
+				warning(ctx, "pin.unsupported-rich-text", "想法正文不支持标题，已降级为文本。");
+				return `<p>${content}</p>`;
+			}
+			return `<${tag}>${content}</${tag}>`;
+		}
+		case "ol":
+		case "ul":
+		case "li":
+		case "p":
+		case "blockquote":
+		case "tbody":
+		case "tr":
+		case "th":
+		case "td":
+			if (ctx.pinMode && tag !== "p") {
+				warning(ctx, "pin.unsupported-rich-text", `想法正文不支持 <${tag}>，已降级为文本。`);
+				return inner();
+			}
+			return `<${tag}>${inner()}</${tag}>`;
+		default: return inner();
+	}
+}
+function sanitizeInputHtml(body, ctx) {
+	return parseFragment(body).childNodes.map((c) => sanitizeNode(c, ctx)).join("");
+}
+/** 行内原始 HTML 消毒：与 format='html' 走同一 parse5 路径，
+*  但只返回内联内容（不包 <p>），供 markdown 行内 html token 使用。 */
+function sanitizeInlineHtml(raw, ctx) {
+	return parseFragment(raw).childNodes.map((c) => sanitizeNode(c, ctx)).join("");
+}
+/** 用 parse5 把 HTML 实体解码为可见字符（&lt; → <）。 */
+function decodeEntities(text) {
+	const frag = parseFragment(text);
+	let out = "";
+	const walk = (nodes) => {
+		for (const n of nodes) if (n.nodeName === "#text") out += n.value;
+		else walk(n.childNodes ?? []);
+	};
+	walk(frag.childNodes);
+	return out;
+}
+function normalizeDraft(input, issues) {
+	if (!isRecord(input)) {
+		issues.push({
+			severity: "error",
+			code: "input.invalid",
+			message: "草稿输入必须是对象。"
+		});
+		return {
+			type: "article",
+			title: "",
+			body: "",
+			format: "markdown"
+		};
+	}
+	const type = [
+		"article",
+		"question",
+		"pin"
+	].includes(String(input.type)) ? input.type : "article";
+	if (input.type !== void 0 && input.type !== type) issues.push({
+		severity: "error",
+		code: "input.bad-type",
+		message: `不支持的内容形态：${String(input.type)}。`
+	});
+	const format = input.format === "html" ? "html" : "markdown";
+	const draft = {
+		type,
+		title: typeof input.title === "string" ? input.title : "",
+		body: typeof input.body === "string" ? input.body : "",
+		format
+	};
+	if (input.images !== void 0) {
+		if (!Array.isArray(input.images)) issues.push({
+			severity: "error",
+			code: "input.bad-images",
+			message: "images 必须是数组。"
+		});
+		else draft.images = input.images.filter((i) => isRecord(i)).map((i) => ({
+			url: typeof i.url === "string" ? i.url : "",
+			originalUrl: typeof i.originalUrl === "string" ? i.originalUrl : void 0,
+			width: typeof i.width === "number" && Number.isFinite(i.width) ? i.width : void 0,
+			height: typeof i.height === "number" && Number.isFinite(i.height) ? i.height : void 0,
+			watermark: i.watermark === true,
+			mediaId: typeof i.mediaId === "string" ? i.mediaId : void 0
+		})).filter((i) => i.url || i.originalUrl);
+	}
+	if (input.linkCard !== void 0 && input.linkCard !== null) {
+		if (isRecord(input.linkCard) && typeof input.linkCard.url === "string" && input.linkCard.url.trim()) {
+			const lc = input.linkCard;
+			draft.linkCard = {
+				url: lc.url.trim(),
+				title: typeof lc.title === "string" ? lc.title : void 0,
+				cover: typeof lc.cover === "string" ? lc.cover : void 0,
+				contentType: typeof lc.contentType === "string" ? lc.contentType : void 0,
+				contentId: typeof lc.contentId === "string" ? lc.contentId : void 0,
+				isFromForward: lc.isFromForward === true ? true : void 0
+			};
+		} else issues.push({
+			severity: "warning",
+			code: "input.bad-linkcard",
+			message: "linkCard 缺少有效 url，已忽略。"
+		});
+		if (draft.linkCard) {
+			if (!isAbsoluteHttpUrl(draft.linkCard.url)) issues.push({
+				severity: "error",
+				code: "linkcard.url-unsafe",
+				message: `linkCard.url 必须是 http(s) 链接：${draft.linkCard.url}`
+			});
+			if (draft.linkCard.cover && !isZhihuImageUrl(draft.linkCard.cover)) issues.push({
+				severity: "error",
+				code: "linkcard.cover-unsafe",
+				message: `linkCard.cover 必须是 HTTPS 知乎图片域链接：${draft.linkCard.cover}`
+			});
+		}
+	}
+	if (input.settings !== void 0 && input.settings !== null) {
+		if (!isRecord(input.settings)) issues.push({
+			severity: "warning",
+			code: "input.bad-settings",
+			message: "settings 必须是对象，已忽略。"
+		});
+		else {
+			const s = input.settings;
+			const settings = {};
+			if (s.commentPermission !== void 0) settings.commentPermission = String(s.commentPermission);
+			if (s.tableOfContentsEnabled !== void 0) settings.tableOfContentsEnabled = s.tableOfContentsEnabled === true;
+			if (s.creationStatement !== void 0) settings.creationStatement = String(s.creationStatement);
+			if (Array.isArray(s.topics)) settings.topics = s.topics.filter((t) => typeof t === "string" && !!t.trim()).map((t) => t.trim());
+			if (typeof s.ring === "string" && s.ring.trim()) settings.ring = s.ring.trim();
+			if (Object.keys(settings).length) draft.settings = settings;
+		}
+	}
+	return draft;
+}
+function prepareZhihuSyncDraft(input) {
+	const issues = [];
+	const draft = normalizeDraft(input, issues);
+	const ph = makePlaceholders();
+	const ctx = {
+		issues,
+		type: draft.type,
+		pinMode: draft.type === "pin",
+		bodyImages: [],
+		formulas: [],
+		ph
+	};
+	let title = draft.title;
+	if (draft.type === "question") {
+		title = title.trimEnd();
+		if (title && !/[？?]\s*$/.test(title)) title += "？";
+		draft.title = title;
+	}
+	const titleChars = [...draft.title].length;
+	if (/\n/.test(draft.title)) error(ctx, "title.multiline", "标题禁止换行。");
+	if (draft.type === "question") {
+		if (titleChars === 0) error(ctx, "title.required", "提问标题必填。");
+		if (titleChars > 0 && titleChars < SYNC_LIMITS.questionTitleMin) error(ctx, "title.too-short", `提问标题 4～51 字（含结尾问号），当前 ${titleChars} 字。`);
+		if (titleChars > SYNC_LIMITS.questionTitleMax) error(ctx, "title.too-long", `提问标题 4～51 字（含结尾问号），当前 ${titleChars} 字。`);
+		if ((draft.title.match(/[？?]/g) ?? []).length > 1) warning(ctx, "title.multi-question", "标题含多个问号，请确认只表达一个明确问题。");
+	} else if (draft.type === "pin") {
+		if (titleChars > SYNC_LIMITS.pinTitleMax) error(ctx, "title.too-long", `想法标题最多 ${SYNC_LIMITS.pinTitleMax} 字，当前 ${titleChars} 字。`);
+	} else {
+		if (titleChars === 0) error(ctx, "title.required", "文章标题必填。");
+		if (titleChars > SYNC_LIMITS.articleTitleMax) error(ctx, "title.too-long", `文章标题最多 ${SYNC_LIMITS.articleTitleMax} 字，当前 ${titleChars} 字。`);
+	}
+	let html = "";
+	if (draft.format === "markdown") html = blockToHtml(lexer(draft.body), ctx);
+	else html = sanitizeInputHtml(draft.body, ctx);
+	const formulaPrefix = ph.formula(0).replace(/0$/, "");
+	const formulaRe = new RegExp(`${formulaPrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(\\d+)`, "g");
+	html = html.replace(formulaRe, (_, idx) => {
+		const f = ctx.formulas[Number(idx)];
+		return f ? latexToEquationImg(f.latex, f.block) : "";
+	});
+	let pinTopicCount = 0;
+	if (draft.type === "pin") {
+		const injected = injectPinHashTags(html);
+		html = injected.html;
+		pinTopicCount = injected.count;
+		if (pinTopicCount > SYNC_LIMITS.pinTopicsMax) error(ctx, "topics.too-many", `想法话题最多 ${SYNC_LIMITS.pinTopicsMax} 个，当前 ${pinTopicCount} 个。`);
+	}
+	resolveBodyImages(ctx, draft);
+	const imgPrefix = ph.img(0).replace(/0$/, "");
+	const imgRe = new RegExp(`${imgPrefix.replace(/[.*+?^${}()|[\]\\]/g, "\\$&")}(\\d+)`, "g");
+	html = html.replace(imgRe, (_, idx) => {
+		if (ctx.pinMode) return "";
+		return renderBodyImage(ctx.bodyImages[Number(idx)], ctx);
+	});
+	if (draft.type === "pin" && ctx.bodyImages.length) {
+		const stray = ctx.bodyImages.filter((r) => r.resolved?.url);
+		if (stray.length) {
+			warning(ctx, "pin.body-image-moved", "想法正文不支持内嵌图片，已将正文图片移入独立媒体区。");
+			draft.images = [...(draft.images ?? []).filter((i) => !stray.some((r) => r.resolved === i)), ...stray.map((r) => r.resolved)];
+		}
+	}
+	const bodyChars = plainTextLength(html);
+	if (draft.type === "article") {
+		if (bodyChars < SYNC_LIMITS.articleBodyMin) error(ctx, "body.too-short", `文章正文至少 ${SYNC_LIMITS.articleBodyMin} 字（纯文本），当前 ${bodyChars} 字。`);
+		if (bodyChars > SYNC_LIMITS.articleBodyMax) error(ctx, "body.too-long", `文章正文最多 ${SYNC_LIMITS.articleBodyMax} 字（纯文本），当前 ${bodyChars} 字。`);
+	} else if (draft.type === "pin") {
+		if (bodyChars > SYNC_LIMITS.pinBodyMax) error(ctx, "body.too-long", `想法正文最多 ${SYNC_LIMITS.pinBodyMax} 字（纯文本），当前 ${bodyChars} 字。`);
+		if (!(bodyChars > 0 || (draft.images?.length ?? 0) > 0 || !!draft.linkCard)) error(ctx, "body.required", "想法正文、图片或链接卡片至少需要一项有效内容。");
+		else if (bodyChars === 0) error(ctx, "body.required", "想法正文不能为空，请补充正文内容。");
+	}
+	const pinImages = draft.type === "pin" ? (draft.images ?? []).filter((i) => i.url) : [];
+	if (draft.type === "pin") {
+		for (const img of pinImages) if (!isZhihuImageUrl(img.url)) error(ctx, "image.unsafe-url", `独立图片发布 URL 不是 HTTPS 知乎图片域：${img.url}。`);
+		if (pinImages.length > SYNC_LIMITS.pinImagesMax) error(ctx, "images.too-many", `想法独立图片最多 ${SYNC_LIMITS.pinImagesMax} 张，当前 ${pinImages.length} 张。`);
+		if (pinImages.length && draft.linkCard) error(ctx, "pin.media-linkcard-exclusive", "单条想法不支持同时包含独立图片与链接卡片。");
+	}
+	validateSettings(draft, issues, pinImages.length);
+	return {
+		draft,
+		html,
+		issues,
+		canPublish: !issues.some((i) => i.severity === "error"),
+		counts: {
+			titleChars,
+			bodyChars,
+			images: draft.type === "pin" ? pinImages.length : ctx.bodyImages.length,
+			topics: draft.type === "pin" ? pinTopicCount : draft.settings?.topics?.length ?? 0
+		}
+	};
+}
+function validateSettings(draft, issues, pinImageCount) {
+	const ctx = {
+		issues,
+		type: draft.type,
+		pinMode: draft.type === "pin",
+		bodyImages: [],
+		formulas: [],
+		ph: {
+			img: () => "",
+			formula: () => ""
+		}
+	};
+	const s = draft.settings ?? {};
+	if (draft.type === "question") {
+		for (const [key, label] of [
+			["commentPermission", "评论权限"],
+			["creationStatement", "创作声明"],
+			["tableOfContentsEnabled", "目录"],
+			["ring", "圈子"]
+		]) if (s[key] !== void 0) warning(ctx, `settings.unsupported-${key}`, `提问不支持${label}配置，发布时将忽略。`);
+	}
+	if (draft.type === "article") {
+		if (s.ring !== void 0) warning(ctx, "settings.unsupported-ring", "文章不支持圈子配置，发布时将忽略。");
+	}
+	if (s.topics?.length) {
+		if (draft.type === "pin") warning(ctx, "settings.unsupported-topics", "想法话题属于正文（#话题名#），不使用 settings.topics，发布时将忽略。");
+		else {
+			const max = draft.type === "article" ? SYNC_LIMITS.articleTopicsMax : SYNC_LIMITS.questionTopicsMax;
+			if (s.topics.filter((t) => strictZhihuUrl(t, /^\/topic\/(\d+)(?:\/|$)/)).length !== s.topics.length) error(ctx, "topics.invalid", "话题必须是知乎话题链接（https://www.zhihu.com/topic/{token}/...）。");
+			if (s.topics.length > max) error(ctx, "topics.too-many", `${draft.type === "article" ? "文章" : "提问"}话题最多 ${max} 个，当前 ${s.topics.length} 个。`);
+		}
+	}
+	if (s.commentPermission !== void 0 && draft.type !== "question") {
+		if (!(draft.type === "pin" ? SYNC_PIN_COMMENT_PERMISSIONS : SYNC_ARTICLE_COMMENT_PERMISSIONS).includes(s.commentPermission)) error(ctx, "comment-permission.invalid", `当前形态不支持的评论权限：${String(s.commentPermission)}。`);
+	}
+	if (s.creationStatement !== void 0) {
+		if (draft.type === "pin") {
+			if (s.creationStatement !== "ai_creation") error(ctx, "creation-statement.invalid", `想法仅支持 ai_creation 创作声明，当前：${String(s.creationStatement)}。`);
+		} else if (draft.type === "article") {
+			if (!SYNC_ARTICLE_CREATION_STATEMENTS.includes(String(s.creationStatement))) error(ctx, "creation-statement.invalid", `不支持的创作声明：${String(s.creationStatement)}。`);
+		}
+	}
+	if (s.ring !== void 0 && draft.type === "pin") {
+		if (!strictZhihuUrl(s.ring, /^\/ring\/host\/(\d+)(?:\/|$)/)) error(ctx, "ring.invalid", "圈子必须是知乎圈子链接（https://www.zhihu.com/ring/host/{id}）。");
+	}
+}
+function buildZhihuPublishRequest(prepared) {
+	if (!isRecord(prepared) || prepared.canPublish !== true || !isRecord(prepared.draft)) throw new Error("buildZhihuPublishRequest: 需要 prepareZhihuSyncDraft 返回且 canPublish 为 true 的结果。");
+	const draft = prepared.draft;
+	const html = typeof prepared.html === "string" ? prepared.html : "";
+	const s = draft.settings ?? {};
+	const base = {
+		type: draft.type,
+		confirmed: true,
+		confirm_note: "confirmed by user after local preview"
+	};
+	if (draft.type === "article") {
+		const content = {
+			title: draft.title,
+			html,
+			comment_permission: s.commentPermission ?? "all",
+			table_of_contents_enabled: s.tableOfContentsEnabled ?? false
+		};
+		if (s.creationStatement) content.creation_statement = s.creationStatement;
+		const topics = extractTopicTokens(s.topics ?? [], SYNC_LIMITS.articleTopicsMax);
+		if (topics.length) content.topics = topics;
+		return {
+			...base,
+			content
+		};
+	}
+	if (draft.type === "question") {
+		const content = {
+			title: draft.title,
+			html
+		};
+		const topics = extractTopicTokens(s.topics ?? [], SYNC_LIMITS.questionTopicsMax);
+		if (topics.length) content.topics = topics;
+		return {
+			...base,
+			content
+		};
+	}
+	const content = {
+		title: draft.title,
+		html,
+		comment_permission: s.commentPermission ?? "all"
+	};
+	const images = (draft.images ?? []).filter((i) => typeof i.url === "string" && i.url);
+	if (images.length) content.images = images.map((i) => ({ url: i.url }));
+	else if (draft.linkCard) {
+		const lc = draft.linkCard;
+		content.linkcard = {
+			data_content_type: lc.contentType ?? "common_url",
+			data_content_id: lc.contentId ?? "0",
+			url: lc.url,
+			data_draft_title: lc.title ?? "",
+			data_draft_cover: lc.cover ?? "",
+			is_from_forward: lc.isFromForward ?? false
+		};
+	}
+	if (s.creationStatement === "ai_creation") content.creation_statement = "ai_creation";
+	const ring = extractRingId(s.ring);
+	if (ring) content.ring = ring;
+	return {
+		...base,
+		content
+	};
+}
+function strictZhihuUrl(raw, pathRe) {
+	try {
+		const u = new URL(raw);
+		if (u.protocol !== "https:" || u.username || u.password || u.port) return "";
+		if (u.hostname !== "www.zhihu.com") return "";
+		return u.pathname.match(pathRe)?.[1] ?? "";
+	} catch {
+		return "";
+	}
+}
+function extractTopicTokens(urls, max) {
+	const out = [];
+	const seen = /* @__PURE__ */ new Set();
+	for (const u of urls) {
+		const token = strictZhihuUrl(String(u), /^\/topic\/(\d+)(?:\/|$)/);
+		if (!token || seen.has(token)) continue;
+		seen.add(token);
+		out.push({
+			topic_id: "",
+			topic_token: token,
+			topic_name: ""
+		});
+		if (out.length >= max) break;
+	}
+	return out;
+}
+function extractRingId(url) {
+	if (!url) return void 0;
+	const id = strictZhihuUrl(url, /^\/ring\/host\/(\d+)(?:\/|$)/);
+	return id ? {
+		ring_id: id,
+		ring_name: ""
+	} : void 0;
+}
+const ZHIHU_SYNC_ALLOWED_ORIGIN = "https://openapi.zhihu.com";
+/**
+* 发布/媒体调用错误。definite === true 表示已确定「这次请求没有成功」
+* （上游业务拒绝 / 鉴权拒绝 / 限流 / 参数错误 / URL 非法），可安全重试；
+* definite === false 表示结果不确定（超时 / 网络错 / 5xx / 异常响应），
+* service 必须保留 publishing 意图并提示用户核对，避免重复发送。
+*/
+var ZhihuSyncApiError = class extends Error {
+	code;
+	definite;
+	httpStatus;
+	upstreamStatus;
+	upstreamMsg;
+	constructor(code, message, definite, httpStatus, upstreamStatus, upstreamMsg) {
+		super(message);
+		this.code = code;
+		this.definite = definite;
+		this.httpStatus = httpStatus;
+		this.upstreamStatus = upstreamStatus;
+		this.upstreamMsg = upstreamMsg;
+		this.name = "ZhihuSyncApiError";
+	}
+};
+const SIGNED_HEADER_NAMES = /* @__PURE__ */ new Set([
+	"content-type",
+	"x-app-key",
+	"x-timestamp",
+	"x-log-id",
+	"x-extra-info",
+	"x-sign"
+]);
+/**
+* 上游错误消息脱敏。secrets 可能以任意长度/形态出现在上游 msg、HTTP body 或
+* 网络错误 message 中——只做长 base64/hex 替换不足以保护短 secret 或 appKey，
+* 因此对「当前凭据」与「签名值」做精确字符串替换，其余仍按长度折叠。
+*/
+function sanitizeMessage(value, secrets = []) {
+	if (typeof value !== "string" || !value) return "";
+	let out = value;
+	for (const s of secrets) if (s) out = out.split(s).join("<redacted>");
+	return out.replace(/[A-Za-z0-9+/=]{24,}/g, "<redacted>").replace(/[0-9a-f]{32,}/gi, "<redacted>").slice(0, 400);
+}
+function resolveBase(options) {
+	const raw = options.baseUrl ?? "https://openapi.zhihu.com";
+	let base;
+	try {
+		base = new URL(raw);
+	} catch {
+		throw new ZhihuSyncApiError("INVALID_URL", `无效的 baseUrl：${sanitizeMessage(raw)}`, true);
+	}
+	if (base.protocol !== "https:" || base.origin !== "https://openapi.zhihu.com") throw new ZhihuSyncApiError("INVALID_URL", `OpenAPI baseUrl 必须等于 ${ZHIHU_SYNC_ALLOWED_ORIGIN}。`, true);
+	return base;
+}
+function syncUrl(pathOrUrl, base) {
+	let url;
+	if (/^https?:\/\//i.test(pathOrUrl)) try {
+		url = new URL(pathOrUrl);
+	} catch {
+		throw new ZhihuSyncApiError("INVALID_URL", `无效的请求地址：${sanitizeMessage(pathOrUrl)}`, true);
+	}
+	else try {
+		url = new URL(pathOrUrl.startsWith("/") ? pathOrUrl : `/${pathOrUrl}`, base.origin + "/");
+	} catch {
+		throw new ZhihuSyncApiError("INVALID_URL", `无效的请求路径：${sanitizeMessage(pathOrUrl)}`, true);
+	}
+	if (url.protocol !== "https:" || url.username || url.password) throw new ZhihuSyncApiError("INVALID_URL", "请求地址必须为无账号密码的 HTTPS。", true);
+	if (url.origin !== base.origin) throw new ZhihuSyncApiError("INVALID_URL", `拒绝向非 OpenAPI 源发起请求：${url.origin}（允许 ${base.origin}）。`, true);
+	return url.toString();
+}
+function sign(appKey, timestamp, logId, extraInfo, secret) {
+	const signString = `app_key:${appKey}|ts:${timestamp}|logid:${logId}|extra_info:${extraInfo}`;
+	return createHmac("sha256", secret).update(signString, "utf8").digest("base64");
+}
+function buildHeaders(appKey, timestamp, logId, extraInfo, appSecret, extraHeaders) {
+	const signed = {
+		"Content-Type": "application/json",
+		"X-App-Key": appKey,
+		"X-Timestamp": timestamp,
+		"X-Log-Id": logId,
+		"X-Extra-Info": extraInfo,
+		"X-Sign": sign(appKey, timestamp, logId, extraInfo, appSecret)
+	};
+	for (const [name, value] of Object.entries(extraHeaders ?? {})) {
+		const lower = name.toLowerCase();
+		if (SIGNED_HEADER_NAMES.has(lower)) throw new ZhihuSyncApiError("INVALID_URL", `init.headers 不允许覆盖签名或内容类型头：${name}。`, true);
+		signed[name] = value;
+	}
+	return signed;
+}
+/**
+* 发起一次签名 OpenAPI 请求并解包响应。
+*
+* 返回规则：
+*   - body 是对象且带 status 字段（发布信封）：status===0 → 返回 body.data；
+*     其余 → UPSTREAM_REJECTED（definite，消息含 status / 已脱敏 msg）。
+*   - body 不带 status（媒体 Apply/Commit 扁平响应）：原样返回 body。
+*   - 非 2xx：401→AUTH_REJECTED、429→RATE_LIMITED、5xx→HTTP_ERROR(不确定)、
+*     其他 4xx→HTTP_ERROR(definite)；若 body 是可解析信封仍按信封处理。
+*/
+async function syncRequest(pathOrUrl, init, options, signal) {
+	const url = syncUrl(pathOrUrl, resolveBase(options));
+	const credentials = await options.resolveCredentials();
+	const appKey = credentials.appKey?.trim();
+	const appSecret = credentials.appSecret?.trim();
+	if (!appKey || !appSecret) throw new ZhihuSyncApiError("TOKEN_MISSING", "缺少知乎 OpenAPI 凭证（app key / app secret）。", true);
+	const headers = buildHeaders(appKey, String(Math.floor(Date.now() / 1e3)), randomUUID().replace(/-/g, ""), init.extraInfo ?? "", appSecret, init.headers);
+	const fetcher = options.fetcher ?? globalThis.fetch;
+	if (!fetcher) throw new ZhihuSyncApiError("NETWORK_ERROR", "当前环境没有可用的 fetch。", false);
+	const secrets = [
+		appKey,
+		appSecret,
+		headers["X-Sign"]
+	].filter(Boolean);
+	const timeout = options.timeoutMs ?? 3e4;
+	const timeoutController = new AbortController();
+	const timer = setTimeout(() => timeoutController.abort(), timeout);
+	const combined = signal ? AbortSignal.any([signal, timeoutController.signal]) : timeoutController.signal;
+	let response;
+	let text;
+	let body;
+	try {
+		if (signal?.aborted) throw new ZhihuSyncApiError("CANCELLED", "请求已取消。", true);
+		combined.throwIfAborted();
+		response = await fetcher(url, {
+			method: init.method,
+			headers,
+			body: init.body === void 0 ? void 0 : JSON.stringify(init.body),
+			redirect: "error",
+			signal: combined
+		});
+		let abortReject;
+		const abortPromise = new Promise((_, reject) => {
+			abortReject = () => reject(new DOMException("aborted", "AbortError"));
+			combined.addEventListener("abort", abortReject, { once: true });
+		});
+		abortPromise.catch(() => {});
+		try {
+			text = await Promise.race([response.text(), abortPromise]);
+		} finally {
+			combined.removeEventListener("abort", abortReject);
+		}
+		if (text) body = JSON.parse(text);
+	} catch (error) {
+		if (error instanceof ZhihuSyncApiError) throw error;
+		if (signal?.aborted) throw new ZhihuSyncApiError("CANCELLED", "请求已取消。", false);
+		if (timeoutController.signal.aborted) throw new ZhihuSyncApiError("TIMEOUT", `请求超时（${Math.round(timeout / 1e3)}s）。`, false);
+		if (error instanceof SyntaxError) throw new ZhihuSyncApiError("BAD_RESPONSE", `响应不是合法 JSON（HTTP ${response.status}）。`, false, response.status);
+		throw new ZhihuSyncApiError("NETWORK_ERROR", "网络请求失败，请检查连接后重试。", false);
+	} finally {
+		clearTimeout(timer);
+	}
+	const envelope = body && typeof body === "object" && !Array.isArray(body) ? body : void 0;
+	const hasStatus = envelope !== void 0 && "status" in envelope;
+	if (!response.ok) {
+		if (hasStatus && typeof envelope.status === "number" && envelope.status !== 0) throw new ZhihuSyncApiError("UPSTREAM_REJECTED", `发布被服务端拒绝（status=${envelope.status}）：${sanitizeMessage(envelope.msg, secrets)}`, true, response.status, envelope.status, sanitizeMessage(envelope.msg, secrets));
+		if (hasStatus && typeof envelope.status !== "number") throw new ZhihuSyncApiError("BAD_RESPONSE", `发布响应 status 不是数字（收到 ${typeof envelope.status}）。`, false, response.status);
+		if (response.status === 401) throw new ZhihuSyncApiError("AUTH_REJECTED", "鉴权失败（HTTP 401）。请检查 app key / app secret。", true, 401);
+		if (response.status === 429) throw new ZhihuSyncApiError("RATE_LIMITED", "发布频率超限（每人每天最多 50 次）。", true, 429);
+		throw new ZhihuSyncApiError("HTTP_ERROR", `HTTP ${response.status}：${sanitizeMessage(envelope?.msg, secrets) || "请求失败"}`, response.status >= 400 && response.status < 500, response.status, void 0, sanitizeMessage(envelope?.msg, secrets));
+	}
+	if (hasStatus) {
+		if (typeof envelope.status === "number" && envelope.status === 0) return envelope.data;
+		if (typeof envelope.status === "number") throw new ZhihuSyncApiError("UPSTREAM_REJECTED", `发布被服务端拒绝（status=${envelope.status}）：${sanitizeMessage(envelope.msg, secrets)}`, true, response.status, envelope.status, sanitizeMessage(envelope.msg, secrets));
+		throw new ZhihuSyncApiError("BAD_RESPONSE", `发布响应 status 不是数字（收到 ${typeof envelope.status}）。`, false, response.status);
+	}
+	return body;
+}
+/** 知乎发布成功 URL：必须是 https 且属于知乎域（与 content 的 ZHIHU_DOMAIN_RE 一致）。 */
+const ZHIHU_PUBLISH_DOMAIN_RE = /^([a-z0-9-]+\.)*(zhimg\.com|zhihu\.com)$/i;
+function isValidPublishUrl(value) {
+	try {
+		const u = new URL(value);
+		return u.protocol === "https:" && !u.username && !u.password && ZHIHU_PUBLISH_DOMAIN_RE.test(u.hostname);
+	} catch {
+		return false;
+	}
+}
+/**
+* 将 prepareZhihuSyncDraft 的结果组装并发送到 /openapi/publish。
+*
+* 发送前不做内容字段二次校验（发布字段唯一事实源是 SyncPrepared）；
+* 上层负责：预览确认、持久化 publishing 意图、按 definite 标记结果。
+*/
+async function publishZhihuSync(prepared, options, signal) {
+	const request = buildZhihuPublishRequest(prepared);
+	const row = await syncRequest("/openapi/publish", {
+		method: "POST",
+		body: request
+	}, options, signal) ?? {};
+	const contentToken = typeof row.content_token === "string" || typeof row.content_token === "number" ? String(row.content_token) : "";
+	const url = typeof row.url === "string" ? row.url : "";
+	const type = typeof row.type === "string" ? row.type : "";
+	if (!contentToken || !url) throw new ZhihuSyncApiError("BAD_RESPONSE", "发布成功响应缺少 content_token 或 url。", false);
+	if (!isValidPublishUrl(url)) throw new ZhihuSyncApiError("BAD_RESPONSE", `发布成功响应返回了无效的 url：${sanitizeMessage(url, [])}`, false);
+	if (type !== request.type) throw new ZhihuSyncApiError("BAD_RESPONSE", `发布响应 type 与请求不一致：${String(type)} ≠ ${request.type}。`, false);
+	return {
+		url,
+		contentToken,
+		type
+	};
+}
+//#endregion
+//#region src/sync-media.ts
+/**
+* 知乎官方媒体上传（仅图片）。协议来源：只读参考
+* zhihu-mediacloud-uploader v0.1.4（mediacloud_uploader/api.py、client.py、cloud/ali.py、
+* watermark_poller.py、image_validator.py），移植为 Node TypeScript 原生 fetch。
+*
+* 流程：本地校验 → ApplyUpload（POST /openapi/media/uploads）→ 阿里 OSS PutObject
+* （自建 HTTPS 直传，OSS v1 签名）→ CommitUpload（PATCH）→ 水印轮询
+* （GET /openapi/media/images/{id}/watermark）。秒传（UPLOAD_SUCCESS）跳过云直传。
+*
+* 安全约束：重定向拒绝；OSS 目的主机仅允许 https 且 *.aliyuncs.com；
+* 凭据、STS、签名绝不进入返回值或错误消息（统一脱敏）。
+*/
+var ZhihuSyncMediaError = class extends Error {
+	code;
+	httpStatus;
+	vendorCode;
+	constructor(code, message, extra = {}) {
+		super(message);
+		this.name = "ZhihuSyncMediaError";
+		this.code = code;
+		if (extra.httpStatus !== void 0) this.httpStatus = extra.httpStatus;
+		if (extra.vendorCode !== void 0) this.vendorCode = extra.vendorCode;
+	}
+};
+const PATH_APPLY_UPLOAD = "/openapi/media/uploads";
+const PATH_COMMIT_UPLOAD = (sessionKey) => `/openapi/media/uploads/${sessionKey}`;
+const PATH_IMAGE_WATERMARK = (imageId) => `/openapi/media/images/${imageId}/watermark`;
+const TEMPLATE_IMAGE = "image-upload-default";
+const MEDIA_TYPE_IMAGE = "image";
+const PLATFORM_WEB = "web";
+const UPLOADING = "UPLOADING";
+const UPLOAD_SUCCESS = "UPLOAD_SUCCESS";
+const UPLOAD_FAIL = "UPLOAD_FAIL";
+const SIZE_LIMIT_GIF = 15728640;
+const SIZE_LIMIT_OTHER = 31457280;
+const MAX_LONG_SIDE = 16384;
+const MAX_TOTAL_PIXELS = 2e8;
+const WATERMARK_INTERVAL_MS = 500;
+const WATERMARK_TIMEOUT_MS = 3e4;
+const OSS_TIMEOUT_MS = 12e4;
+const VENDOR_ALI = "ali";
+const OSS_EXPIRED_CODES = /* @__PURE__ */ new Set([
+	"InvalidAccessKeyId",
+	"SecurityTokenExpired",
+	"AccessDenied",
+	"InvalidSecurityToken"
+]);
+const record = (v) => v !== null && typeof v === "object" && !Array.isArray(v);
+const str = (v) => typeof v === "string" ? v : "";
+const num = (v) => typeof v === "number" && Number.isFinite(v) ? v : 0;
+/** 从待抛出消息中抹除一切已知敏感串（STS、对象名等不参与签名但属临时授权信息）。 */
+function redact(message, secrets) {
+	let out = message;
+	for (const s of secrets) if (s && s.length >= 4) out = out.split(s).join("[REDACTED]");
+	return out;
+}
+function throwAborted(signal) {
+	throw new ZhihuSyncMediaError("CANCELLED", "上传已取消。");
+}
+function parseMediaUrl(raw) {
+	if (!record(raw)) return void 0;
+	const backups = Array.isArray(raw.backups) ? raw.backups.filter((b) => typeof b === "string") : [];
+	return {
+		primary: str(raw.primary) || backups[0] || "",
+		backups
+	};
+}
+const PUBLIC_IMAGE_HOST_RE = /^(?:[a-z0-9-]+\.)*(zhimg\.com|zhihu\.com)$/i;
+function publicImageUrl(u) {
+	for (const candidate of [u?.primary, ...u?.backups ?? []]) {
+		if (!candidate) continue;
+		try {
+			const url = new URL(candidate);
+			if (url.protocol !== "https:" || url.username || url.password) continue;
+			if (!PUBLIC_IMAGE_HOST_RE.test(url.hostname)) continue;
+			return candidate;
+		} catch {
+			continue;
+		}
+	}
+	return "";
+}
+const firstUrl = publicImageUrl;
+function sleep(ms, signal) {
+	return new Promise((resolve, reject) => {
+		if (signal.aborted) return reject(new ZhihuSyncMediaError("CANCELLED", "上传已取消。"));
+		const timer = setTimeout(() => {
+			cleanup();
+			resolve();
+		}, ms);
+		const onAbort = () => {
+			cleanup();
+			reject(new ZhihuSyncMediaError("CANCELLED", "上传已取消。"));
+		};
+		const cleanup = () => {
+			clearTimeout(timer);
+			signal.removeEventListener("abort", onAbort);
+		};
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+}
+function sniffImage(buf) {
+	const bad = () => new ZhihuSyncMediaError("UNSUPPORTED_TYPE", "无法识别图片格式，仅支持 JPEG / PNG / GIF / WebP / BMP；HEIC / AVIF / TIFF 等请先转换为上述格式。");
+	if (buf.byteLength < 12) throw bad();
+	if (buf[4] === 102 && buf[5] === 116 && buf[6] === 121 && buf[7] === 112) {
+		const brand = String.fromCharCode(buf[8], buf[9], buf[10], buf[11]).toLowerCase();
+		if (/^(heic|heix|hevc|hevx|mif1|msf1|avif|avis)$/.test(brand)) throw new ZhihuSyncMediaError("NEEDS_TRANSCODE", `检测到 ${brand.toUpperCase()} 格式，当前不内置转码，请先转换为 JPEG / PNG / WebP 后再上传。`);
+		throw bad();
+	}
+	if (buf[0] === 137 && buf[1] === 80 && buf[2] === 78 && buf[3] === 71 && buf[4] === 13 && buf[5] === 10 && buf[6] === 26 && buf[7] === 10) {
+		if (buf.byteLength < 24) throw bad();
+		const w = (buf[16] << 24 | buf[17] << 16 | buf[18] << 8 | buf[19]) >>> 0;
+		const h = (buf[20] << 24 | buf[21] << 16 | buf[22] << 8 | buf[23]) >>> 0;
+		if (!w || !h) throw bad();
+		return {
+			format: "PNG",
+			ext: ".png",
+			contentType: "image/png",
+			width: w,
+			height: h,
+			gif: false
+		};
+	}
+	if (buf[0] === 71 && buf[1] === 73 && buf[2] === 70 && buf[3] === 56) {
+		if (buf.byteLength < 10) throw bad();
+		const w = buf[6] | buf[7] << 8;
+		const h = buf[8] | buf[9] << 8;
+		if (!w || !h) throw bad();
+		return {
+			format: "GIF",
+			ext: ".gif",
+			contentType: "image/gif",
+			width: w,
+			height: h,
+			gif: true
+		};
+	}
+	if (buf[0] === 66 && buf[1] === 77) {
+		if (buf.byteLength < 26) throw bad();
+		const dv = new DataView(buf.buffer, buf.byteOffset, buf.byteLength);
+		if (dv.getUint32(14, true) < 40) throw bad();
+		const w = Math.abs(dv.getInt32(18, true));
+		const h = Math.abs(dv.getInt32(22, true));
+		if (!w || !h) throw bad();
+		return {
+			format: "BMP",
+			ext: ".bmp",
+			contentType: "image/bmp",
+			width: w,
+			height: h,
+			gif: false
+		};
+	}
+	if (buf[0] === 82 && buf[1] === 73 && buf[2] === 70 && buf[3] === 70 && buf[8] === 87 && buf[9] === 69 && buf[10] === 66 && buf[11] === 80) {
+		if (buf.byteLength < 30) throw bad();
+		const four = String.fromCharCode(buf[12], buf[13], buf[14], buf[15]);
+		if (four === "VP8X") return {
+			format: "WEBP",
+			ext: ".webp",
+			contentType: "image/webp",
+			width: (buf[24] | buf[25] << 8 | buf[26] << 16) + 1,
+			height: (buf[27] | buf[28] << 8 | buf[29] << 16) + 1,
+			gif: false
+		};
+		if (four === "VP8L") {
+			const bits = buf[21] | buf[22] << 8 | buf[23] << 16 | buf[24] << 24;
+			return {
+				format: "WEBP",
+				ext: ".webp",
+				contentType: "image/webp",
+				width: (bits & 16383) + 1,
+				height: (bits >>> 14 & 16383) + 1,
+				gif: false
+			};
+		}
+		if (four === "VP8 ") {
+			if (buf[23] !== 157 || buf[24] !== 1 || buf[25] !== 42) throw bad();
+			const w = (buf[26] | buf[27] << 8) & 16383;
+			const h = (buf[28] | buf[29] << 8) & 16383;
+			if (!w || !h) throw bad();
+			return {
+				format: "WEBP",
+				ext: ".webp",
+				contentType: "image/webp",
+				width: w,
+				height: h,
+				gif: false
+			};
+		}
+		throw bad();
+	}
+	if (buf[0] === 255 && buf[1] === 216) {
+		let off = 2;
+		while (off + 9 < buf.byteLength) {
+			if (buf[off] !== 255) {
+				off++;
+				continue;
+			}
+			let marker = buf[off + 1];
+			while (marker === 255 && off + 2 < buf.byteLength) {
+				off++;
+				marker = buf[off + 1];
+			}
+			if (marker === 216 || marker === 217 || marker === 1 || marker >= 208 && marker <= 215) {
+				off += 2;
+				continue;
+			}
+			if (off + 3 >= buf.byteLength) break;
+			const len = buf[off + 2] << 8 | buf[off + 3];
+			if (len < 2) break;
+			if (marker >= 192 && marker <= 207 && marker !== 196 && marker !== 200 && marker !== 204 && off + 8 < buf.byteLength) {
+				const h = buf[off + 5] << 8 | buf[off + 6];
+				const w = buf[off + 7] << 8 | buf[off + 8];
+				if (!w || !h) throw bad();
+				return {
+					format: "JPEG",
+					ext: ".jpg",
+					contentType: "image/jpeg",
+					width: w,
+					height: h,
+					gif: false
+				};
+			}
+			off += 2 + len;
+		}
+		throw bad();
+	}
+	throw bad();
+}
+function validateImage(meta, sizeBytes) {
+	const limit = meta.gif ? SIZE_LIMIT_GIF : SIZE_LIMIT_OTHER;
+	if (sizeBytes > limit) throw new ZhihuSyncMediaError("LIMIT_EXCEEDED", `图片大小超限（${(sizeBytes / 1048576).toFixed(1)} MB），上限 ${limit / 1048576} MB${meta.gif ? "（GIF）" : ""}，请压缩后重试。`);
+	const longSide = Math.max(meta.width, meta.height);
+	if (longSide > MAX_LONG_SIDE) throw new ZhihuSyncMediaError("LIMIT_EXCEEDED", `图片长边 ${longSide}px 超限，上限 ${MAX_LONG_SIDE}px。`);
+	if (meta.width * meta.height > MAX_TOTAL_PIXELS) throw new ZhihuSyncMediaError("LIMIT_EXCEEDED", "图片总像素数超限（上限 2 亿像素）。");
+}
+function parseApply(data) {
+	if (!record(data)) throw new ZhihuSyncMediaError("BAD_RESPONSE", "ApplyUpload 响应不是对象。");
+	const config = record(data.upload_config) ? data.upload_config : {};
+	const addressRaw = record(config.address) ? config.address : void 0;
+	const authRaw = record(data.upload_auth) ? data.upload_auth : void 0;
+	const media = record(data.upload_media) ? data.upload_media : {};
+	return {
+		state: str(data.upload_state),
+		sessionKey: str(data.session_key),
+		vendorCode: str(config.vendor_code),
+		commitAddress: str(media.commit_address),
+		objectKey: str(media.key),
+		processes: str(media.processes),
+		extraParams: record(data.extra_params) ? data.extra_params : {},
+		auth: authRaw ? {
+			accessKeyId: str(authRaw.access_key_id),
+			secretAccessKey: str(authRaw.secret_access_key),
+			securityToken: str(authRaw.security_token),
+			expiration: num(authRaw.expiration)
+		} : void 0,
+		address: addressRaw ? {
+			endpoint: str(addressRaw.endpoint),
+			bucketName: str(addressRaw.bucket_name),
+			objectName: str(addressRaw.object_name),
+			isCname: addressRaw.is_cname === true
+		} : void 0
+	};
+}
+function parseCommit(data) {
+	if (!record(data)) throw new ZhihuSyncMediaError("BAD_RESPONSE", "CommitUpload 响应不是对象。");
+	const meta = record(data.media_meta) ? data.media_meta : void 0;
+	return {
+		result: str(data.upload_results),
+		mediaKey: str(data.media_key),
+		mediaUrl: parseMediaUrl(data.media_url),
+		width: meta ? num(meta.width) || void 0 : void 0,
+		height: meta ? num(meta.height) || void 0 : void 0
+	};
+}
+const OSS_HOST_RE = /^(?:[a-z0-9-]+\.)*aliyuncs\.com$/;
+const OSS_BUCKET_RE = /^[a-z0-9][a-z0-9-]{1,61}[a-z0-9]$/;
+function ossEndpointHost(endpoint) {
+	const text = endpoint.trim();
+	if (!text) throw new ZhihuSyncMediaError("BAD_RESPONSE", "OSS endpoint 为空。");
+	if (/^http:\/\//i.test(text)) throw new ZhihuSyncMediaError("OSS_ERROR", "OSS endpoint 必须使用 HTTPS。");
+	const host = text.replace(/^https:\/\//i, "").replace(/\/+$/, "").toLowerCase();
+	if (!OSS_HOST_RE.test(host)) throw new ZhihuSyncMediaError("OSS_ERROR", "OSS endpoint 必须是不带路径、端口与账号密码的 aliyuncs.com 主机名。");
+	return host;
+}
+/**
+* 拼出直传地址，并校验最终 URL：主机名必须与预期的合规主机完全一致，且不得带账号密码。
+* 返回的就是实际发出去的那个 URL——校验与请求必须是同一个地址。
+*/
+function ossTargetUrl(bucket, host, encodedKey, isCname) {
+	if (!OSS_BUCKET_RE.test(bucket)) throw new ZhihuSyncMediaError("BAD_RESPONSE", "OSS bucket 名称不合法。");
+	const requestHost = isCname ? host : `${bucket}.${host}`;
+	let target;
+	try {
+		target = new URL(`https://${requestHost}/${encodedKey}`);
+	} catch {
+		throw new ZhihuSyncMediaError("OSS_ERROR", "OSS 目标地址不合法。");
+	}
+	if (target.protocol !== "https:" || target.username || target.password || target.hostname !== requestHost) throw new ZhihuSyncMediaError("OSS_ERROR", "OSS 目标地址不合法。");
+	return target.toString();
+}
+function encodeObjectName(name) {
+	return name.split("/").map((seg) => encodeURIComponent(seg)).join("/");
+}
+/**
+* OSS v1 header 签名：
+* StringToSign = VERB \n Content-MD5 \n Content-Type \n Date \n x-oss-* \n CanonicalizedResource
+*/
+function ossAuthorization(verb, contentMd5B64, contentType, date, auth, bucket, encodedKey) {
+	const toSign = `${verb}\n${contentMd5B64}\n${contentType}\n${date}\n${`x-oss-security-token:${auth.securityToken}\n`}${`/${bucket}/${encodedKey}`}`;
+	const sig = createHmac("sha1", auth.secretAccessKey).update(toSign, "utf8").digest("base64");
+	return `OSS ${auth.accessKeyId}:${sig}`;
+}
+function parseOssErrorCode(xml) {
+	const m = /<Code>([^<]+)<\/Code>/i.exec(xml);
+	return m ? m[1].trim() : "";
+}
+async function ossPutObject(fetcher, auth, address, body, contentType, md5B64, signal, timeoutMs) {
+	const host = ossEndpointHost(address.endpoint);
+	const encodedKey = encodeObjectName(address.objectName);
+	const url = ossTargetUrl(address.bucketName, host, encodedKey, address.isCname);
+	const date = (/* @__PURE__ */ new Date()).toUTCString();
+	const authorization = ossAuthorization("PUT", md5B64, contentType, date, auth, address.bucketName, encodedKey);
+	const controller = new AbortController();
+	const onAbort = () => controller.abort(signal.reason);
+	if (signal.aborted) onAbort();
+	else signal.addEventListener("abort", onAbort, { once: true });
+	const timer = setTimeout(() => controller.abort(/* @__PURE__ */ new Error("oss put timeout")), timeoutMs);
+	try {
+		const res = await fetcher(url, {
+			method: "PUT",
+			redirect: "error",
+			headers: {
+				Date: date,
+				"Content-Type": contentType,
+				"Content-MD5": md5B64,
+				"x-oss-security-token": auth.securityToken,
+				Authorization: authorization
+			},
+			body,
+			signal: controller.signal
+		});
+		if (res.ok) return { ok: true };
+		return {
+			ok: false,
+			ossCode: parseOssErrorCode(await res.text().catch(() => "")),
+			status: res.status
+		};
+	} finally {
+		clearTimeout(timer);
+		signal.removeEventListener("abort", onAbort);
+	}
+}
+function resolveSyncRequest(options) {
+	return options.syncRequest ?? syncRequest;
+}
+async function uploadZhihuSyncMedia(input, options, signal) {
+	const secrets = [];
+	try {
+		return await uploadImpl(input, options, signal, secrets);
+	} catch (error) {
+		if (error instanceof ZhihuSyncMediaError) {
+			error.message = redact(error.message, secrets);
+			throw error;
+		}
+		throw new ZhihuSyncMediaError("API_ERROR", redact(`媒体上传失败：${error instanceof Error ? error.message : String(error)}`, secrets));
+	}
+}
+async function uploadImpl(input, options, signal, secrets) {
+	if (signal.aborted) throwAborted(signal);
+	if (input.kind !== void 0 && input.kind !== "image") throw new ZhihuSyncMediaError("UNSUPPORTED_TYPE", "当前仅支持图片上传；视频与对象文件未接入。");
+	const scene = input.scene;
+	if (scene !== "article" && scene !== "question" && scene !== "pin") throw new ZhihuSyncMediaError("INVALID_INPUT", `scene 必须是 article / question / pin，收到 ${String(scene)}。`);
+	const fileName = (input.fileName.trim().split(/[\\/]/).pop() ?? "").trim();
+	if (!fileName || [...fileName].some((ch) => (ch.codePointAt(0) ?? 0) < 32 || ch.codePointAt(0) === 127)) throw new ZhihuSyncMediaError("INVALID_INPUT", "fileName 不能为空且不能包含控制字符。");
+	const b64 = input.contentBase64.trim();
+	if (!b64 || !/^[A-Za-z0-9+/]*={0,2}$/.test(b64) || b64.length % 4 !== 0) throw new ZhihuSyncMediaError("INVALID_INPUT", "contentBase64 不是合法 base64。");
+	const bytes = new Uint8Array(Buffer.from(b64, "base64"));
+	if (!bytes.byteLength) throw new ZhihuSyncMediaError("INVALID_INPUT", "图片内容为空。");
+	const meta = sniffImage(bytes);
+	validateImage(meta, bytes.byteLength);
+	const md5Hex = createHash("md5").update(bytes).digest("hex");
+	const md5B64 = createHash("md5").update(bytes).digest("base64");
+	const syncRequest = resolveSyncRequest(options);
+	try {
+		const creds = await options.resolveCredentials();
+		if (creds?.appKey) secrets.push(creds.appKey);
+		if (creds?.appSecret) secrets.push(creds.appSecret);
+	} catch {}
+	if (signal.aborted) throwAborted(signal);
+	const warnings = [];
+	const applyBody = {
+		template_name: TEMPLATE_IMAGE,
+		media_type: MEDIA_TYPE_IMAGE,
+		file_name: fileName,
+		file_extension: meta.ext,
+		file_size: bytes.byteLength
+	};
+	const applyHeaders = {
+		"X-Media-Scene-Name": scene,
+		"X-Media-Upload-Platform": PLATFORM_WEB,
+		"X-Upload-Content-Type": meta.contentType,
+		"X-Upload-Content-Hash": md5Hex
+	};
+	let apply = parseApply(await syncRequest(PATH_APPLY_UPLOAD, {
+		method: "POST",
+		headers: applyHeaders,
+		body: applyBody
+	}, options, signal));
+	if (apply.auth) secrets.push(apply.auth.accessKeyId, apply.auth.secretAccessKey, apply.auth.securityToken);
+	if (signal.aborted) throwAborted(signal);
+	let mediaKey = "";
+	let mediaUrl;
+	let width = meta.width;
+	let height = meta.height;
+	if (apply.state === UPLOAD_SUCCESS) {
+		const ep = apply.extraParams;
+		mediaUrl = parseMediaUrl(ep.url);
+		mediaKey = apply.objectKey;
+		width = num(ep.width) || width;
+		height = num(ep.height) || height;
+	} else if (apply.state === UPLOADING) {
+		if (apply.vendorCode !== VENDOR_ALI) throw new ZhihuSyncMediaError("UNSUPPORTED_VENDOR", `服务端下发未实现的云厂商 ${apply.vendorCode || "(空)"}；当前仅支持阿里 OSS。`, { vendorCode: apply.vendorCode || void 0 });
+		if (!apply.auth || !apply.address || !apply.auth.accessKeyId || !apply.auth.secretAccessKey || !apply.auth.securityToken || !apply.address.endpoint || !apply.address.bucketName || !apply.address.objectName) throw new ZhihuSyncMediaError("BAD_RESPONSE", "ApplyUpload 缺少 OSS 凭证或地址，无法直传。");
+		const fetcher = options.fetcher ?? (typeof fetch === "function" ? fetch : void 0);
+		if (!fetcher) throw new ZhihuSyncMediaError("BAD_RESPONSE", "当前环境没有可用的 fetch。");
+		let oss = await ossPut(fetcher, apply, bytes, meta.contentType, md5B64, signal, options.timeoutMs);
+		if (!oss.ok && OSS_EXPIRED_CODES.has(oss.ossCode)) {
+			const refreshed = parseApply(await syncRequest(PATH_APPLY_UPLOAD, {
+				method: "POST",
+				headers: applyHeaders,
+				body: {
+					template_name: TEMPLATE_IMAGE,
+					media_type: MEDIA_TYPE_IMAGE,
+					session_key: apply.sessionKey
+				}
+			}, options, signal));
+			if (refreshed.state === UPLOAD_FAIL || !refreshed.sessionKey) throw new ZhihuSyncMediaError("SESSION_EXPIRED", "上传会话已过期，刷新凭证被拒绝。");
+			apply = refreshed;
+			if (apply.auth) secrets.push(apply.auth.accessKeyId, apply.auth.secretAccessKey, apply.auth.securityToken);
+			if (!apply.auth || !apply.address) throw new ZhihuSyncMediaError("BAD_RESPONSE", "刷新后的 ApplyUpload 缺少 OSS 凭证或地址。");
+			oss = await ossPut(fetcher, apply, bytes, meta.contentType, md5B64, signal, options.timeoutMs);
+		}
+		let ossError = "";
+		if (!oss.ok) ossError = `OSS PutObject HTTP ${oss.status}${oss.ossCode ? ` code=${oss.ossCode}` : ""}`;
+		const commitBody = {
+			media_type: MEDIA_TYPE_IMAGE,
+			client_upload_state: oss.ok ? UPLOAD_SUCCESS : UPLOAD_FAIL
+		};
+		if (ossError) commitBody.error_log = ossError;
+		if (apply.processes) commitBody.processes = apply.processes;
+		const commit = parseCommit(await syncRequest(apply.commitAddress || PATH_COMMIT_UPLOAD(apply.sessionKey), {
+			method: "PATCH",
+			headers: {
+				"X-Media-Scene-Name": scene,
+				"X-Media-Upload-Platform": PLATFORM_WEB,
+				"X-Security-Token": apply.auth?.securityToken ?? ""
+			},
+			body: commitBody
+		}, options, signal));
+		if (!oss.ok) throw new ZhihuSyncMediaError("OSS_ERROR", `云端直传失败：${ossError}`, { httpStatus: oss.status });
+		if (commit.result !== UPLOAD_SUCCESS) throw new ZhihuSyncMediaError("API_ERROR", `CommitUpload 未成功：${commit.result || "(空结果)"}。`);
+		mediaKey = commit.mediaKey || apply.objectKey;
+		mediaUrl = commit.mediaUrl;
+		width = commit.width ?? width;
+		height = commit.height ?? height;
+	} else throw new ZhihuSyncMediaError("API_ERROR", `ApplyUpload 返回 ${apply.state || "(空状态)"}${apply.state === UPLOAD_FAIL ? "，会话被拒绝" : ""}。`);
+	const originalKey = `v2-${md5Hex}`;
+	if (!mediaUrl || !firstUrl(mediaUrl)) throw new ZhihuSyncMediaError("BAD_RESPONSE", "上传成功但服务端未返回可访问图片 URL。");
+	const originalUrl = firstUrl(mediaUrl);
+	const watermark = await pollWatermark(syncRequest, apply.sessionKey, scene, originalKey, options, signal, warnings);
+	if (watermark) return {
+		kind: "image",
+		url: firstUrl(watermark.url),
+		originalUrl,
+		mediaId: watermark.token,
+		width,
+		height,
+		watermark: true,
+		...warnings.length ? { warnings } : {}
+	};
+	return {
+		kind: "image",
+		url: originalUrl,
+		mediaId: mediaKey && mediaKey !== apply.objectKey ? mediaKey : originalKey,
+		width,
+		height,
+		watermark: false,
+		...warnings.length ? { warnings } : {}
+	};
+}
+async function ossPut(fetcher, apply, bytes, contentType, md5B64, signal, timeoutMs) {
+	const auth = apply.auth;
+	const address = apply.address;
+	try {
+		return await ossPutObject(fetcher, auth, address, bytes, contentType, md5B64, signal, timeoutMs && timeoutMs > 0 ? Math.max(timeoutMs, OSS_TIMEOUT_MS / 4) : OSS_TIMEOUT_MS);
+	} catch (error) {
+		if (error instanceof ZhihuSyncMediaError) throw error;
+		if (error?.name === "AbortError") {
+			if (signal.aborted) throwAborted(signal);
+			throw new ZhihuSyncMediaError("TIMEOUT", "云端直传超时。");
+		}
+		return {
+			ok: false,
+			ossCode: "",
+			status: 0
+		};
+	}
+}
+async function pollWatermark(request, imageId, scene, originalKey, options, signal, warnings) {
+	if (!imageId) return void 0;
+	const interval = options.watermarkPoll?.intervalMs ?? WATERMARK_INTERVAL_MS;
+	const timeout = options.watermarkPoll?.timeoutMs ?? WATERMARK_TIMEOUT_MS;
+	const doSleep = options.watermarkPoll?.sleep ?? sleep;
+	const deadline = Date.now() + timeout;
+	while (Date.now() < deadline) {
+		if (signal.aborted) throwAborted(signal);
+		let data;
+		try {
+			const remaining = deadline - Date.now();
+			const scoped = {
+				...options,
+				timeoutMs: Math.max(1, Math.min(options.timeoutMs ?? 3e4, remaining))
+			};
+			data = await request(PATH_IMAGE_WATERMARK(imageId), {
+				method: "GET",
+				headers: { "X-Media-Scene-Name": scene }
+			}, scoped, signal);
+		} catch (error) {
+			if (signal.aborted) throwAborted(signal);
+			const status = error?.httpStatus ?? error?.status;
+			if (typeof status === "number" && status >= 400 && status < 500) break;
+			await doSleep(Math.min(interval, Math.max(0, deadline - Date.now())), signal);
+			continue;
+		}
+		if (!record(data)) break;
+		const state = str(data.state);
+		if (state === "success") {
+			const token = str(data.watermark_image_token);
+			const url = parseMediaUrl(data.watermark_image_url);
+			if (url && firstUrl(url) && token && token !== originalKey) {
+				if (!url.primary && url.backups[0]) warnings.push("水印图主 URL 为空，已使用备用 URL。");
+				return {
+					token,
+					url
+				};
+			}
+			break;
+		}
+		if (state === "failed") break;
+		await doSleep(Math.min(interval, Math.max(0, deadline - Date.now())), signal);
+	}
+	warnings.push("水印处理未完成，已使用未加水印的原图 URL。");
+}
+//#endregion
+//#region src/sync-service.ts
+const ZHIHU_SYNC_CREDENTIAL_REFS = ["ZHIHU_OPENAPI_APP_KEY", "ZHIHU_OPENAPI_APP_SECRET"];
+const draftSchema = z.object({
+	type: z.enum([
+		"article",
+		"question",
+		"pin"
+	]),
+	title: z.string().max(1e4),
+	body: z.string().max(2e6),
+	format: z.enum(["markdown", "html"]),
+	images: z.array(z.object({
+		url: z.string(),
+		originalUrl: z.string().optional(),
+		width: z.number().positive().optional(),
+		height: z.number().positive().optional(),
+		watermark: z.boolean().optional(),
+		mediaId: z.string().optional()
+	}).strict()).max(200).optional(),
+	linkCard: z.object({
+		url: z.string(),
+		title: z.string().optional(),
+		cover: z.string().optional(),
+		contentType: z.string().optional(),
+		contentId: z.string().optional(),
+		isFromForward: z.boolean().optional()
+	}).strict().nullable().optional(),
+	settings: z.object({
+		commentPermission: z.enum([
+			"all",
+			"nobody",
+			"followee",
+			"censor",
+			"follower",
+			"follower_n_days"
+		]).optional(),
+		creationStatement: z.enum([
+			"spoiler",
+			"medical_advice",
+			"fictional_creation",
+			"contain_finance",
+			"ai_creation"
+		]).optional(),
+		tableOfContentsEnabled: z.boolean().optional(),
+		topics: z.array(z.string()).max(100).optional(),
+		ring: z.string().optional()
+	}).strict().optional()
+}).strict();
+const recordSchema = z.object({
+	id: z.string(),
+	revision: z.number().int().positive(),
+	updatedAt: z.string(),
+	draft: draftSchema,
+	publishState: z.enum([
+		"publishing",
+		"published",
+		"uncertain"
+	]).optional(),
+	published: z.object({
+		url: z.string(),
+		contentToken: z.string(),
+		type: z.string()
+	}).optional(),
+	lastError: z.string().optional()
+});
+const zhihuSyncDomainSpec = defineDomain({
+	name: "dsh_zhihu_sync",
+	version: 1,
+	tables: { drafts: domainTable(recordSchema) }
+});
+var ZhihuSyncServiceError = class extends Error {
+	code;
+	constructor(code, message) {
+		super(message);
+		this.code = code;
+	}
+};
+function object(value) {
+	if (!value || typeof value !== "object" || Array.isArray(value)) throw new ZhihuSyncServiceError("bad-request", "请求参数必须为对象。");
+	return value;
+}
+/** Review tickets bind an exact saved revision. Only the human UI receives them;
+* model tools can prepare content but cannot grant publishing authority. */
+function createZhihuSyncService(table, options) {
+	const reviews = /* @__PURE__ */ new Map();
+	const locks = /* @__PURE__ */ new Map();
+	async function locked(id, operation) {
+		const current = (locks.get(id) ?? Promise.resolve()).catch(() => {}).then(operation);
+		locks.set(id, current);
+		try {
+			return await current;
+		} finally {
+			if (locks.get(id) === current) locks.delete(id);
+		}
+	}
+	function get(id) {
+		if (typeof id !== "string" || !id) throw new ZhihuSyncServiceError("bad-request", "缺少草稿 ID。");
+		const record = table.get(id);
+		if (!record) throw new ZhihuSyncServiceError("not-found", "草稿不存在。");
+		return structuredClone(record);
+	}
+	function revision(record, expected) {
+		if (record.revision !== expected) throw new ZhihuSyncServiceError("conflict", "草稿已更新，请重新载入后再操作。");
+	}
+	function editable(record) {
+		if (record.publishState) throw new ZhihuSyncServiceError("publish-locked", "此草稿已提交发布。请先检查知乎发布结果；修改内容请保存为新草稿。");
+	}
+	return { async call(endpoint, payload, signal, caller = "ui") {
+		signal.throwIfAborted();
+		const body = object(payload);
+		if (endpoint === "sync.list") {
+			const drafts = [...table.entries()].map(([, value]) => ({
+				id: value.id,
+				revision: value.revision,
+				updatedAt: value.updatedAt,
+				title: value.draft.title,
+				type: value.draft.type,
+				publishState: value.publishState,
+				published: value.published
+			})).sort((a, b) => b.updatedAt.localeCompare(a.updatedAt));
+			const offset = body.offset === void 0 ? 0 : body.offset;
+			if (typeof offset !== "number" || !Number.isSafeInteger(offset) || offset < 0) throw new ZhihuSyncServiceError("bad-request", "草稿分页位置无效。");
+			const page = drafts.slice(offset, offset + 100);
+			return {
+				drafts: page,
+				total: drafts.length,
+				...offset + page.length < drafts.length ? { nextOffset: offset + page.length } : {}
+			};
+		}
+		if (endpoint === "sync.get") return get(body.id);
+		if (endpoint === "sync.media.upload") return uploadZhihuSyncMedia(body, options, signal);
+		if (endpoint === "sync.publish" && caller !== "ui") throw new ZhihuSyncServiceError("confirmation-required", "Publishing requires a human-confirmed UI review; the agent tool can only save and validate drafts.");
+		if (![
+			"sync.save",
+			"sync.prepare",
+			"sync.publish"
+		].includes(endpoint)) throw new ZhihuSyncServiceError("bad-request", "未知同步操作。");
+		const id = endpoint === "sync.save" && body.id === void 0 ? randomUUID() : body.id;
+		if (typeof id !== "string" || !id) throw new ZhihuSyncServiceError("bad-request", "缺少草稿 ID。");
+		return locked(id, async () => {
+			signal.throwIfAborted();
+			if (endpoint === "sync.save") {
+				const old = table.get(id);
+				if (body.id !== void 0) {
+					if (!old) throw new ZhihuSyncServiceError("not-found", "草稿不存在。");
+					revision(old, body.expectedRevision);
+					editable(old);
+				}
+				const parsed = draftSchema.safeParse(body.draft);
+				if (!parsed.success) throw new ZhihuSyncServiceError("bad-request", "草稿字段格式无效或内容过大，请检查类型、正文、图片与发布设置。");
+				const record = {
+					id,
+					revision: (old?.revision ?? 0) + 1,
+					updatedAt: (/* @__PURE__ */ new Date()).toISOString(),
+					draft: parsed.data
+				};
+				await table.put(id, record);
+				reviews.delete(id);
+				return structuredClone(record);
+			}
+			const record = get(id);
+			revision(record, body.expectedRevision);
+			editable(record);
+			const prepared = prepareZhihuSyncDraft(record.draft);
+			if (endpoint === "sync.prepare") {
+				if (caller === "tool") return {
+					record,
+					prepared
+				};
+				for (const [key, review] of reviews) if (review.expires < Date.now()) reviews.delete(key);
+				const reviewToken = randomUUID();
+				if (prepared.canPublish) reviews.set(id, {
+					revision: record.revision,
+					token: reviewToken,
+					expires: Date.now() + 18e5
+				});
+				return {
+					record,
+					prepared,
+					reviewToken: prepared.canPublish ? reviewToken : ""
+				};
+			}
+			const review = reviews.get(id);
+			if (body.confirmed !== true || !review || review.token !== body.reviewToken || review.revision !== record.revision || review.expires < Date.now()) throw new ZhihuSyncServiceError("confirmation-required", "请重新预览当前草稿并确认发布。");
+			if (!prepared.canPublish) throw new ZhihuSyncServiceError("validation-failed", "请先修正校验错误。");
+			const credentials = await options.resolveCredentials();
+			signal.throwIfAborted();
+			record.publishState = "publishing";
+			record.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+			await table.put(id, record);
+			reviews.delete(id);
+			try {
+				record.published = await publishZhihuSync(prepared, {
+					...options,
+					resolveCredentials: async () => credentials
+				}, signal);
+				record.publishState = "published";
+			} catch (error) {
+				if (error instanceof ZhihuSyncApiError && error.definite) {
+					delete record.publishState;
+					record.lastError = error.message;
+				} else {
+					record.publishState = "uncertain";
+					record.lastError = "未能确认发布结果，请检查知乎主页，避免重复发布。";
+				}
+			}
+			record.updatedAt = (/* @__PURE__ */ new Date()).toISOString();
+			await table.put(id, record);
+			return structuredClone(record);
+		});
+	} };
+}
+//#endregion
 //#region src/index.ts
 const name = "@klarkxy/dsh-zhihu";
 const inject = [
@@ -456,8 +2856,33 @@ async function apply(ctx, config = {}) {
 		await service.dispose();
 		await domain.close();
 	}, "zhihu.usageDomainClose");
+	const syncDomain = await ctx.storageDomain.open(zhihuSyncDomainSpec);
+	const sync = createZhihuSyncService(syncDomain.table("drafts"), { resolveCredentials: async () => {
+		const [key, secret] = await Promise.all(ZHIHU_SYNC_CREDENTIAL_REFS.map((ref) => host.credentials.resolve(credentialRef(ref))));
+		if (!key?.value.trim() || !secret?.value.trim()) throw new ZhihuSyncServiceError("sync-credentials-missing", "请在知乎插件设置中填写发布 App Key 和 App Secret。");
+		return {
+			appKey: key.value.trim(),
+			appSecret: secret.value.trim()
+		};
+	} });
+	service.syncCall = (endpoint, payload, signal, caller) => service.run((combined) => sync.call(endpoint, payload, combined, caller), signal);
+	ctx.effect(() => async () => {
+		await service.dispose();
+		await syncDomain.close();
+	}, "zhihu.syncDomainClose");
 	ctx.provide("zhihu", service);
-	ctx.effect(() => registerHostRpc(host, ZHIHU_RPC_CHANNEL, service.call));
+	ctx.effect(() => registerHostRpc(host, ZHIHU_RPC_CHANNEL, async (endpoint, payload, signal) => {
+		if (!endpoint.startsWith("sync.")) return service.call(endpoint, payload, signal);
+		try {
+			return {
+				ok: true,
+				value: await service.syncCall(endpoint, payload, signal, "ui")
+			};
+		} catch (error) {
+			if (signal.aborted) return fail("cancelled", "请求已取消");
+			return fail(error instanceof ZhihuSyncServiceError ? error.code : "sync-failed", error instanceof Error ? error.message : "知乎同步失败。");
+		}
+	}));
 	bindZhihuWebSearch(ctx, service);
 }
 //#endregion