@topmindspace/topmind-writing-skills 0.9.1 → 0.9.3

package/CHANGELOG.md

@@ -1,3 +1,15 @@
+## [0.9.3] - 2026-11-09
+
+- `topmind-cover` 0.5.1：小红书与抖音横版先构图中央 4:3，按需保留 16:9 两侧场景；新增 `landscape-pair` 双尺寸导出。区分成片画幅、封面选择框与列表露出，记录公开证据和未实测入口。
+- 系列封面按主体安排角色名、动作词和字效，增加缩略图与实际字重核对。标题引擎在 macOS 可回退到系统中文字体，列出实际字体字重和集合索引。
+- 更新双语使用说明、共享知识卡和能力说明；自动验证中心裁切、字体回退及封面工具在独立 ZIP、宿主包和 npm 包中的交付。
+
+## [0.9.2] - 2026-10-31
+
+- 宿主包运行时显式提供文章渲染、从源稿渲染、本地文本提取、长度评估和长度规则集评估。文章结果绑定所选稿与产物的 SHA-256，可选绑定创作快照指纹。
+- 长度规则集只接受调用方传入的 JSON，先校验结构和日期再报告。本包不附带、也不启用真实平台规则。Unicode 码点上限不能代替 X 加权长度或编辑器里的最终核对。
+- 八个技能的版本不变。
+
 ## [0.9.1] - 2026-10-28
 
 - 安装器新增 `install all`、`update` 与 `status`：整套首次安装只需一条命令，后续更新只处理已装技能，状态直接显示安装版本与包快照。

package/README.en.md

@@ -30,6 +30,8 @@ Open a Markdown document and choose **Writing & delivery** from the article tool
 
 Built-in HTML/text typography requires no Python. Preview and copy use the same output; changed sources or images require regeneration. Diagnostics identify missing images, diagram source, extended containers and table paste limitations. AI images, PNG rendering and publishing require their respective tools. Copying does not publish; wording scores do not decide editorial quality.
 
+The host pack also renders from source bytes, extracts local text from clipboard HTML, and evaluates a length rule set. The length entry accepts only caller-supplied JSON. This package does not ship or enable production platform rules. Fields, dates and reports are in [the length rule-set contract](docs/length-ruleset-v1.md). A Unicode code-point ceiling is not X weighted length and is not the target editor's final check. JavaScript and Python renderer differences are in [the capability matrix](docs/renderer-capability-matrix.md).
+
 About & updates tracks the application, core skills, independent writing pack and integrations separately. Writing resources can update independently; compiled renderer code follows the host release. Managed packs are isolated, local modifications block replacement and failed installs preserve the previous version. Supported Desktop installs can download an update and explicitly restart; manual downloads remain available when signing or the installation channel prevents automatic updates.
 
 ## More choices, concrete references
@@ -52,7 +54,7 @@ See the [practice and specimens](./shared/references/creative-practice.md) and [
 | Long-form · WeChat | [`topmind-wechat-post`](./topmind-wechat-post/) | WeChat articles: three quality gates, inline-image layout, publish checklist | "写公众号", "公众号排版" |
 | Formatting | [`topmind-format`](./topmind-format/) | Re-layout without changing a word; stitch alternative openings into full posts | "转段子", "排一下版" |
 | Revision | [`topmind-revise`](./topmind-revise/) | Structure → facts → logic → de-AI → fidelity audit; quick review for replies | "改稿", "去 AI 味", "看看这条回复" |
-| Covers | [`topmind-cover`](./topmind-cover/) | Xiaohongshu, Douyin image posts, WeChat and X covers; sourced guidance and crop presets | "做个封面" |
+| Covers | [`topmind-cover`](./topmind-cover/) | Xiaohongshu, Douyin, WeChat and X covers, including video thumbnails and paired crops | "做个封面" |
 | Long images | [`topmind-poster`](./topmind-poster/) | HTML → hi-res long image / poster / infographic with exact text and numbers | "出张长图" |
 
 ## Creative directions and on-demand knowledge
@@ -74,7 +76,7 @@ Cover resources include 22 adaptable style entries, 16 composition relationships
 
 The [platform reference](./shared/references/platform-cover-specs.md) records public sources, verification dates and untested details. Start Xiaohongshu image notes at 3:4; check ordinary Douyin image posts separately from commerce content; distinguish WeChat article landscape / square covers from image messages. Dimensions are package export presets; current editors and user requirements take priority.
 
-`topmind-cover` provides `article`, `x-post`, `xiaohongshu`, `douyin` and `wechat` presets. The WeChat preset exports landscape and square versions, with adjustable crop alignment. Recompose portrait and landscape versions when needed. Dense content pages use `topmind-poster`; platform adaptation does not authorize publishing.
+The `landscape-pair` preset in `topmind-cover` exports a centered 4:3 cover and the full 16:9 master. Compose the subject and title in the 4:3 window and extend the scene at both sides. Start portrait covers at 3:4 and export 9:16 separately when the publishing surface calls for it. Check the video frame, cover picker, and feed preview separately. Article, image-post, X, and WeChat presets continue to serve their own surfaces.
 
 ## Duanzi: 14 patterns
 

package/README.md

@@ -30,6 +30,8 @@ npx @topmindspace/topmind-writing-skills@latest update    # 以后只更新已
 
 内置 HTML/文本排版无需 Python，预览与复制同源；源稿或图片改变后需要重新生成。扩展容器、图表源码、缺图和平台表格粘贴限制会显示诊断。封面生图、PNG 和外部发布依赖实际工具，复制不等于已发布。审校不使用“AI 味分数”作为定稿门槛。
 
+宿主包运行时另外提供从源稿生成文章结果、从剪贴板 HTML 提取本地文本，以及长度规则集评估。长度入口只接受调用方传入的 JSON，本包不附带、也不启用真实平台规则。规则字段、日期和报告见 [长度规则集运行契约](docs/length-ruleset-v1.md)。Unicode 码点上限不能代替 X 加权长度或目标编辑器里的最终核对。JavaScript 与 Python 渲染器的差异见 [能力矩阵](docs/renderer-capability-matrix.md)。
+
 “关于与更新”分别展示 Desktop、核心技能、独立写作包和集成组件。写作资源可独立更新；编译进宿主的排版代码随宿主升级。受管包按身份隔离，覆盖本地定制会被阻止，失败保留旧版。Desktop 支持标准更新器下载后显式重启；签名、平台或渠道不支持时保留手动下载。
 
 ## 加选项，让经验帮助创作
@@ -52,7 +54,7 @@ npx @topmindspace/topmind-writing-skills@latest update    # 以后只更新已
 | 长文 · 公众号 | [`topmind-wechat-post`](./topmind-wechat-post/) | 公众号长文：质量三关、图片内嵌排版、发布清单 | 「写公众号」「公众号排版」 |
 | 格式化 | [`topmind-format`](./topmind-format/) | 现成文字只改排版不改字：转段子、格式化成短文、几个开头拼成品 | 「转段子」「排一下版」 |
 | 改稿 | [`topmind-revise`](./topmind-revise/) | 结构 → 事实 → 逻辑 → 去 AI 味 → 保真审计；也能快审一条回复 | 「改稿」「去 AI 味」「看看这条回复」 |
-| 封面 | [`topmind-cover`](./topmind-cover/) | 小红书、抖音图文、公众号与 X 封面：平台适配、核字与多比例裁切 | 「做个封面」「头图」 |
+| 封面 | [`topmind-cover`](./topmind-cover/) | 小红书、抖音、公众号与 X 封面，含视频缩略图、叠字和多比例裁切 | 「做个封面」「头图」 |
 | 长图 | [`topmind-poster`](./topmind-poster/) | HTML → 高清长图 / 海报 / 信息图，文字数字逐字正确 | 「出张长图」「做个榜单图」 |
 
 **短文** = X 纯文本帖，1000 字以内都行；**长文** = X Article 或公众号长文；**段子** = 以观察、反差或幽默推进的短帖，排版按节奏选择。
@@ -76,7 +78,7 @@ npm run knowledge:check
 
 [平台参考](./shared/references/platform-cover-specs.md) 记录公开来源、核验日期和未实测项：小红书图文可从 3:4 起步，抖音普通图文与商城内容分别核对，公众号普通文章宽图 / 方图与图片消息分开处理。尺寸是本包导出预设，当前发布入口与用户要求优先。
 
-`topmind-cover` 支持 `article`、`x-post`、`xiaohongshu`、`douyin` 和 `wechat` 预设；`wechat` 另给宽图与方图，裁切方向可调整。横竖版需要时分别构图，不用固定安全区或缺少证据的点击率约束设计。密集内容页用 `topmind-poster`，跨平台不自动扩展发布权限。
+`topmind-cover` 的 `landscape-pair` 从同一张 16:9 母图导出中央 4:3 主版和完整 16:9 备版。先在 4:3 框内放主体和标题，两侧用场景延展。竖版以 3:4 构图为起点，按发布入口另取 9:16。成片画幅、封面选择和列表露出分别核对。文章、X 短帖、普通图文和微信宽图及方图继续使用各自预设。
 
 ## 段子：14 种写法
 

package/lib/host-pack.cjs

@@ -28,7 +28,17 @@ function buildHostPack(root) {
     if (!/^---\r?\n/u.test(raw) || !/^name:\s*/mu.test(raw)) throw new Error(`Invalid skill: ${id}`);
     return { id, name: id, description: meta.description || id, version: meta.version, packId: 'topmind-writing-skills' };
   });
-  const manifest = { schema_version: 1, name: 'topmind-writing-skills', version: pkg.version, license: pkg.license, repository: pkg.repository, entry_files: ids.map(id => `${id}/SKILL.md`), files, runtime: { api: 1, entry: 'runtime/article-renderer.mjs', update: 'host-release' } };
+  const capabilities = [
+    { id: 'article.render', entry: 'runtime/article-renderer.mjs', export: 'prepareArticleResult' },
+    { id: 'article.renderFromSource', entry: 'runtime/article-renderer.mjs', export: 'prepareArticleResultFromSource' },
+    { id: 'article.localTextDocument', entry: 'runtime/article-renderer.mjs', export: 'articleLocalTextDocument' },
+    { id: 'length.evaluate', entry: 'runtime/length-rules.mjs', export: 'evaluateLengthRules' },
+    { id: 'length.ruleset.evaluate', entry: 'runtime/length-ruleset.mjs', export: 'evaluateLengthRuleSet' },
+  ];
+  for (const capability of capabilities) {
+    if (!Object.hasOwn(files, capability.entry)) throw new Error(`Missing runtime capability entry: ${capability.entry}`);
+  }
+  const manifest = { schema_version: 1, name: 'topmind-writing-skills', version: pkg.version, license: pkg.license, repository: pkg.repository, entry_files: ids.map(id => `${id}/SKILL.md`), files, runtime: { api: 1, entry: 'runtime/article-renderer.mjs', capabilities, update: 'host-release' } };
   const digest = hash(JSON.stringify(manifest));
   return { manifest: { ...manifest, digest }, snapshot: { id: manifest.name, version: pkg.version, source: 'https://github.com/topmindspace/topmind-writing-skills', license: pkg.license, digest, skills, resources } };
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@topmindspace/topmind-writing-skills",
-  "version": "0.9.1",
+  "version": "0.9.3",
   "description": "TopMindSpace 写作技能合集 — 通过 npm / npx 安装技能（公众号长文、X 长文、干货短文、X 引流短帖、改稿与质检、封面图、长图海报）。只出稿与发布包，不代发。",
   "license": "MIT",
   "author": "TopMindspace",

package/runtime/article-renderer.d.mts

@@ -1,9 +1,30 @@
 export type WritingPlatform = 'wechat' | 'x' | 'text';
 export type WritingTheme = 'minimal-ink' | 'tech-blue' | 'newsprint' | 'graphite';
 export const WRITING_THEMES: Record<WritingTheme, { ink: string; accent: string; paper: string; muted: string }>;
+export const ARTICLE_RENDERER_PROVIDER: Readonly<{ id: string; version: string }>;
 export const WRITING_ACTIONS: ReadonlyArray<{ id: string; zh: string; en: string; prompt: string; promptEn: string }>;
 export function stripFrontmatter(value: string): string;
 export interface ArticleDelivery { platform: WritingPlatform; theme: WritingTheme; html: string; body: string; text: string; checklist: string; images: Array<{ source: string; alt: string; status: string }>; diagnostics: Array<{ code: string; source?: string }> }
 export function renderArticle(input: { markdown: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string; images?: Record<string, string> }): ArticleDelivery;
 export function resolveArticleImage(sourcePath: string, reference: string): string;
 export function prepareArticle(input: { sourcePath: string; markdown: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string }, readImage: (relative: string) => Promise<string>): Promise<ArticleDelivery>;
+export interface ArticleResult {
+  schemaVersion: 1;
+  capabilityId: 'article.render';
+  provider: Readonly<{ id: string; version: string }>;
+  status: 'ok' | 'warning' | 'error';
+  input: { fingerprint: string | null; target?: { platform: WritingPlatform; theme: WritingTheme };
+    source?: { relativePath: string; sha256: string };
+    imageBytes?: Array<{ relativePath: string; sha256: string }>;
+    creationSnapshotFingerprint?: string; localTextTitle?: string | null;
+    renderParameters?: { theme: WritingTheme; title: string } };
+  artifacts: Array<{ role: 'preview' | 'clipboard-html' | 'source-markdown' | 'image-checklist' | 'local-clipboard-text'; format: string; content: string; sha256: string }>;
+  images: ArticleDelivery['images'];
+  diagnostics: Array<{ code: string; severity: 'warning' | 'error'; message: string; location?: { source: string } }>;
+}
+export function renderArticleResult(input?: { markdown?: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string; sourcePath?: string; images?: Record<string, string> }): Promise<ArticleResult>;
+export function prepareArticleResult(input: { sourcePath: string; markdown: string; platform?: WritingPlatform; theme?: WritingTheme; title?: string }, readImage: (relative: string) => Promise<string>): Promise<ArticleResult>;
+export function prepareArticleResultFromSource(input: { sourcePath: string; sourceBytes: Uint8Array;
+  platform?: WritingPlatform; theme?: WritingTheme; title?: string; creationSnapshotFingerprint?: string },
+  readImage: (relative: string) => Promise<string>): Promise<ArticleResult>;
+export function articleLocalTextDocument(result: ArticleResult): { text_kind: 'platform_text'; title?: string; body: string } | null;

package/runtime/article-renderer.mjs

@@ -1,10 +1,13 @@
 /** Portable host renderer. Canonical source: topmind-writing-skills. No IO or executable HTML. */
+import { sha256, sha256Bytes } from './content-sha256.mjs';
 export const WRITING_THEMES = Object.freeze({
   'minimal-ink': { ink: '#252525', accent: '#955247', paper: '#ffffff', muted: '#666666' },
   'tech-blue': { ink: '#172033', accent: '#0369a1', paper: '#ffffff', muted: '#536174' },
   newsprint: { ink: '#24211c', accent: '#80502a', paper: '#fffdf8', muted: '#655f55' },
   graphite: { ink: '#222222', accent: '#444444', paper: '#ffffff', muted: '#666666' },
 });
+/** Version of the renderer's output semantics, independent from the npm package version. */
+export const ARTICLE_RENDERER_PROVIDER = Object.freeze({ id: 'topmind-writing-skills/article-renderer', version: '1.1.0' });
 export const WRITING_ACTIONS = Object.freeze([
   { id: 'topmind-revise', zh: '改稿', en: 'Revise', prompt: '按 topmind-revise 审校当前内容，保留事实、数字、归因和作者原意。' },
   { id: 'topmind-format', zh: '只排版', en: 'Format', prompt: '按 topmind-format 只调整当前内容的排版，不改写文字。' },
@@ -20,8 +23,17 @@ export function stripFrontmatter(value) {
   return String(value || '').replace(/^\uFEFF/u, '').replace(/\r\n?/gu, '\n').replace(/^---\n[\s\S]*?\n---(?:\n|$)/u, '');
 }
 export function resolveArticleImage(sourcePath, reference) {
-  if (!sourcePath || /[\\:]|^\//u.test(sourcePath) || /[\\:]|^\//u.test(reference)) throw new Error('Invalid workspace image path');
-  const parts = sourcePath.split('/').slice(0, -1);
+  if (typeof sourcePath !== 'string' || typeof reference !== 'string'
+    || !sourcePath || !reference || /[\\:\u0000-\u001f]|^\//u.test(sourcePath)
+    || /[\\:\u0000-\u001f]|^\//u.test(reference)) throw new Error('Invalid workspace image path');
+  const parts = [];
+  for (const segment of sourcePath.split('/')) {
+    if (!segment || segment === '.') continue;
+    if (segment === '..') { if (!parts.length) throw new Error('Source escapes workspace'); parts.pop(); }
+    else parts.push(segment);
+  }
+  if (!parts.length) throw new Error('Invalid workspace image path');
+  parts.pop();
   for (const segment of reference.split('/')) {
     if (!segment || segment === '.') continue;
     if (segment === '..') { if (!parts.length) throw new Error('Image escapes workspace'); parts.pop(); }
@@ -29,14 +41,19 @@ export function resolveArticleImage(sourcePath, reference) {
   }
   return parts.join('/');
 }
-export async function prepareArticle(input, readImage) {
+async function collectArticleImages(input, readImage) {
   const images = Object.create(null);
   for (const match of String(input.markdown).matchAll(/!\[[^\]]*\]\(([^\s)]+)(?:\s+"[^"]*")?\)/gu)) {
     const source = match[1];
     if (/^(https?:|data:)/iu.test(source) || Object.hasOwn(images, source)) continue;
-    try { images[source] = await readImage(resolveArticleImage(input.sourcePath, source)); }
+    const relativePath = resolveArticleImage(input.sourcePath, source);
+    try { images[source] = await readImage(relativePath); }
     catch { images[source] = ''; }
   }
+  return images;
+}
+export async function prepareArticle(input, readImage) {
+  const images = await collectArticleImages(input, readImage);
   return renderArticle({ ...input, images });
 }
 function safeUrl(value, image = false) {
@@ -128,3 +145,207 @@ export function renderArticle({ markdown = '', platform = 'wechat', theme = 'min
   const checklist = ['# 图片交付清单', '', '按正文出现顺序核对；内嵌不代表目标平台已托管或发布。', '', ...imageList.map((item, i) => `${i + 1}. ${item.status} · ${item.source.replace(/[\r\n]/gu, ' ')}`)].join('\n');
   return { platform, theme, html, body, text, images: imageList, diagnostics, checklist };
 }
+
+const ARTICLE_DIAGNOSTIC_MESSAGES = Object.freeze({
+  'image-unavailable': 'Image could not be loaded or embedded.',
+  'unsafe-link': 'Unsafe link was removed from the rendered output.',
+  'unclosed-code-fence': 'Code fence was not closed.',
+  'diagram-source-only': 'Diagram source needs a separate visual render.',
+  'table-paste-check': 'Check table layout after pasting into the target editor.',
+  'container-as-text': 'Unsupported container was rendered as text.',
+  'remote-image-unverified': 'Remote image was referenced but its availability was not verified.',
+});
+const MAX_BOUND_SOURCE_BYTES = 16 * 1024 * 1024;
+const MAX_BOUND_IMAGE_BASE64_CHARS = 48 * 1024 * 1024;
+function validBoundSourcePath(value) {
+  return typeof value === 'string' && value.length > 0 && value.length <= 2048
+    && /\.(?:md|markdown)$/iu.test(value) && !/[\\:\u0000-\u001f]/u.test(value)
+    && value.split('/').every(segment => segment && segment !== '.' && segment !== '..');
+}
+async function embeddedImageBytesSha256(value) {
+  if (typeof value !== 'string') return null;
+  const match = value.match(/^data:image\/(?:png|jpe?g|gif|webp);base64,([a-z0-9+/]+={0,2})$/iu);
+  if (!match || match[1].length > MAX_BOUND_IMAGE_BASE64_CHARS || typeof atob !== 'function') return null;
+  try {
+    const binary = atob(match[1]);
+    return await sha256Bytes(Uint8Array.from(binary, char => char.charCodeAt(0)));
+  } catch {
+    return null;
+  }
+}
+function articleInputSnapshot(input, delivery) {
+  const images = Object.entries(input.images ?? {})
+    .map(([source, value]) => [source, String(value)])
+    .sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0);
+  return {
+    markdown: String(input.markdown ?? ''),
+    platform: delivery.platform,
+    theme: delivery.theme,
+    title: String(input.title ?? ''),
+    sourcePath: input.sourcePath == null ? null : String(input.sourcePath),
+    images,
+    provider: ARTICLE_RENDERER_PROVIDER,
+  };
+}
+function articleFailure(error) {
+  const message = error instanceof Error ? error.message : '';
+  const known = {
+    'Unsupported delivery format': ['unsupported-platform', 'Unsupported delivery format.'],
+    'Unknown writing theme': ['unknown-theme', 'Unknown writing theme.'],
+    'Invalid workspace image path': ['invalid-image-path', 'Image path must remain inside the workspace.'],
+    'Source escapes workspace': ['invalid-image-path', 'Image path must remain inside the workspace.'],
+    'Image escapes workspace': ['invalid-image-path', 'Image path must remain inside the workspace.'],
+    'Invalid workspace source path': ['invalid-source-path', 'Source path must be a canonical workspace-relative Markdown path.'],
+    'Invalid source bytes': ['invalid-source-bytes', 'Source must be supplied as UTF-8 bytes.'],
+    'Invalid source encoding': ['invalid-source-encoding', 'Source bytes must be valid UTF-8.'],
+    'Source too large': ['source-too-large', 'Source exceeds the 16 MiB render limit.'],
+    'Invalid creation snapshot fingerprint': ['invalid-snapshot-fingerprint', 'Creation snapshot fingerprint must be SHA-256.'],
+    'Invalid article title': ['invalid-title', 'Article title must be a string.'],
+    'Unsupported bound renderer option': ['unsupported-render-option', 'Byte-bound rendering accepts only platform, theme and title options.'],
+  }[message];
+  return {
+    schemaVersion: 1,
+    capabilityId: 'article.render',
+    provider: ARTICLE_RENDERER_PROVIDER,
+    status: 'error',
+    input: { fingerprint: null },
+    artifacts: [],
+    images: [],
+    diagnostics: [{ code: known?.[0] ?? 'render-failed', severity: 'error', message: known?.[1] ?? 'Article could not be rendered.' }],
+  };
+}
+
+// Extract a local text fallback only from markup produced by renderArticle.
+// It is an estimate for preflight checks, never a target editor readback.
+function localClipboardText(html) {
+  return html
+    .replace(/<img\b[^>]*\/?\s*>/giu, '')
+    .replace(/<br\s*\/?\s*>/giu, '\n')
+    .replace(/<\/(?:p|h[1-6]|blockquote|li|tr|section|table)>/giu, '\n')
+    .replace(/<\/(?:th|td)>/giu, '\t')
+    .replace(/<hr\b[^>]*\/?\s*>/giu, '\n')
+    .replace(/<[^>]+>/gu, '')
+    .replace(/&lt;/gu, '<').replace(/&gt;/gu, '>')
+    .replace(/&quot;/gu, '"').replace(/&#39;/gu, "'")
+    .replace(/&amp;/gu, '&')
+    .replace(/[\t ]+\n/gu, '\n')
+    .replace(/\n{3,}/gu, '\n\n')
+    .trim();
+}
+
+/** Prepared local text for a length preflight; the target editor must be checked separately. */
+export function articleLocalTextDocument(result) {
+  if (result?.status === 'error' || !result?.input?.source) return null;
+  const artifact = result.artifacts?.find(item => item.role === 'local-clipboard-text');
+  if (artifact?.format !== 'text/plain' || typeof artifact.content !== 'string' ||
+      !/^[a-f0-9]{64}$/u.test(artifact.sha256 ?? '')) return null;
+  const title = result.input.localTextTitle;
+  if (title !== null && typeof title !== 'string') return null;
+  return { text_kind: 'platform_text', ...(title === null ? {} : { title }), body: artifact.content };
+}
+/** Deterministic, machine-readable delivery. The legacy renderArticle shape is unchanged. */
+export async function renderArticleResult(input = {}) {
+  try {
+    const delivery = renderArticle(input);
+    const fingerprint = await sha256(JSON.stringify(articleInputSnapshot(input, delivery)));
+    const artifacts = await Promise.all([
+      { role: 'preview', format: 'text/html', content: delivery.html },
+      { role: 'clipboard-html', format: 'text/html', content: delivery.body },
+      { role: 'source-markdown', format: 'text/markdown', content: delivery.text },
+      { role: 'image-checklist', format: 'text/markdown', content: delivery.checklist },
+    ].map(async artifact => ({ ...artifact, sha256: await sha256(artifact.content) })));
+    const diagnostics = [
+      ...delivery.diagnostics.map(diagnostic => ({
+        code: diagnostic.code,
+        severity: 'warning',
+        message: ARTICLE_DIAGNOSTIC_MESSAGES[diagnostic.code] ?? 'Review the rendered output.',
+        ...(diagnostic.source == null ? {} : { location: { source: diagnostic.source } }),
+      })),
+      ...delivery.images.filter(image => image.status === 'remote').map(image => ({
+        code: 'remote-image-unverified',
+        severity: 'warning',
+        message: ARTICLE_DIAGNOSTIC_MESSAGES['remote-image-unverified'],
+        location: { source: image.source },
+      })),
+    ];
+    return {
+      schemaVersion: 1,
+      capabilityId: 'article.render',
+      provider: ARTICLE_RENDERER_PROVIDER,
+      status: diagnostics.length ? 'warning' : 'ok',
+      input: { fingerprint, target: { platform: delivery.platform, theme: delivery.theme } },
+      artifacts,
+      images: delivery.images,
+      diagnostics,
+    };
+  } catch (error) {
+    return articleFailure(error);
+  }
+}
+/** Load local images through the host, then fingerprint their actual returned data. */
+export async function prepareArticleResult(input, readImage) {
+  try {
+    const images = await collectArticleImages(input, readImage);
+    return await renderArticleResult({ ...input, images });
+  } catch (error) {
+    return articleFailure(error);
+  }
+}
+
+/**
+ * Render exact UTF-8 source bytes supplied by a trusted host. The host compares
+ * input.source against the selected Kernel snapshot before using the artifacts.
+ */
+export async function prepareArticleResultFromSource({
+  sourcePath, sourceBytes, creationSnapshotFingerprint, ...options
+} = {}, readImage) {
+  if (!validBoundSourcePath(sourcePath)) return articleFailure(new Error('Invalid workspace source path'));
+  if (!(sourceBytes instanceof Uint8Array)) return articleFailure(new Error('Invalid source bytes'));
+  if (sourceBytes.byteLength > MAX_BOUND_SOURCE_BYTES) return articleFailure(new Error('Source too large'));
+  if (creationSnapshotFingerprint !== undefined &&
+      (typeof creationSnapshotFingerprint !== 'string' ||
+        !/^[a-f0-9]{64}$/u.test(creationSnapshotFingerprint))) {
+    return articleFailure(new Error('Invalid creation snapshot fingerprint'));
+  }
+  if (options.title !== undefined && typeof options.title !== 'string') {
+    return articleFailure(new Error('Invalid article title'));
+  }
+  if (Object.keys(options).some(key => !['platform', 'theme', 'title'].includes(key))) {
+    return articleFailure(new Error('Unsupported bound renderer option'));
+  }
+  // Own the bytes before the first await so caller mutation cannot split the
+  // hash from the Markdown actually rendered.
+  const stableBytes = Uint8Array.from(sourceBytes);
+  let markdown;
+  try {
+    markdown = new TextDecoder('utf-8', { fatal: true, ignoreBOM: true }).decode(stableBytes);
+  } catch {
+    return articleFailure(new Error('Invalid source encoding'));
+  }
+  const source = { relativePath: sourcePath, sha256: await sha256Bytes(stableBytes) };
+  const readImages = new Map();
+  const trackedReadImage = async relativePath => {
+    const dataUrl = await readImage(relativePath);
+    const sha256 = await embeddedImageBytesSha256(dataUrl);
+    if (sha256) readImages.set(relativePath, sha256);
+    return dataUrl;
+  };
+  const result = await prepareArticleResult({ ...options, sourcePath, markdown }, trackedReadImage);
+  if (result.status === 'error') return result;
+  const clipboard = result.artifacts.find(item => item.role === 'clipboard-html');
+  const localTextArtifact = { role: 'local-clipboard-text', format: 'text/plain',
+    content: localClipboardText(clipboard.content) };
+  localTextArtifact.sha256 = await sha256(localTextArtifact.content);
+  const localTextTitle = options.title ?? null;
+  const renderParameters = { theme: result.input.target.theme, title: options.title ?? '' };
+  const imageBytes = [...readImages].sort(([left], [right]) => left < right ? -1 : left > right ? 1 : 0)
+    .map(([relativePath, sha256]) => ({ relativePath, sha256 }));
+  return { ...result, artifacts: [...result.artifacts, localTextArtifact], input: { ...result.input, source,
+    imageBytes,
+    localTextTitle,
+    renderParameters,
+    ...(creationSnapshotFingerprint === undefined ? {} : { creationSnapshotFingerprint }),
+    fingerprint: await sha256(JSON.stringify({ rendererFingerprint: result.input.fingerprint, source, imageBytes,
+      localTextTitle, renderParameters, localTextSha256: localTextArtifact.sha256,
+      ...(creationSnapshotFingerprint === undefined ? {} : { creationSnapshotFingerprint }) })) } };
+}

package/runtime/content-sha256.mjs

@@ -0,0 +1,19 @@
+/** SHA-256 for browser and Node hosts; never hashes by reading a path. */
+export async function sha256Bytes(bytes) {
+  if (!(bytes instanceof Uint8Array)) throw new TypeError('SHA-256 input must be bytes');
+  if (globalThis.crypto?.subtle) {
+    const digest = await globalThis.crypto.subtle.digest('SHA-256', bytes);
+    return Array.from(new Uint8Array(digest), byte => byte.toString(16).padStart(2, '0')).join('');
+  }
+  // Node 18 may run without the global Web Crypto API. Keep browser imports portable.
+  if (typeof process !== 'undefined' && process.versions?.node) {
+    const nodeCrypto = 'node:crypto';
+    const { createHash } = await import(nodeCrypto);
+    return createHash('sha256').update(bytes).digest('hex');
+  }
+  throw new Error('SHA-256 is unavailable');
+}
+
+export async function sha256(value) {
+  return sha256Bytes(new TextEncoder().encode(value));
+}

package/runtime/length-rules.d.mts

@@ -0,0 +1,24 @@
+export type LengthTarget = { platform: string; format: string; entrypoint: string; account_capability: string };
+export type LengthRule = {
+  id: string;
+  category: 'platform_limit' | 'creator_preference';
+  status: string;
+  applies_to: LengthTarget;
+  check: { field: 'title' | 'body'; operation: 'max_characters'; counter: 'unicode_code_points'; max: number };
+  outcome: { exceeded: 'block' | 'warn' };
+  evidence: { tier: string; url?: string; checked_at?: string; review_after?: string; confirmed_at?: string };
+};
+export interface LengthRuleResult {
+  schemaVersion: 1;
+  capabilityId: 'platform.validate.length';
+  provider: Readonly<{ id: string; version: string }>;
+  status: 'ok' | 'warning' | 'error';
+  verdict: 'pass' | 'review' | 'block' | 'invalid';
+  input: { fingerprint: string | null; rulesDigest?: string; documentDigest?: string; target?: LengthTarget; asOf?: string };
+  artifacts: [];
+  checks: Array<{ ruleId: string; category: string; field: 'title' | 'body'; observed: number; max: number; unit: 'unicode_code_points'; exceeded: boolean }>;
+  effectiveLimits: Array<{ field: 'title' | 'body'; unit: 'unicode_code_points'; hardMax: number | null; preferenceMax: number | null; effectiveMax: number }>;
+  diagnostics: Array<{ code: string; severity: 'warning' | 'error'; message: string; ruleId?: string; dimension?: string; location?: { field: string }; observed?: number; max?: number; unit?: string; hardMax?: number; preferenceMax?: number }>;
+}
+export const LENGTH_RULE_PROVIDER: Readonly<{ id: string; version: string }>;
+export function evaluateLengthRules(input: { target: LengthTarget; document: { text_kind: 'platform_text'; title?: string; body?: string }; rules: LengthRule[]; asOf?: string }): Promise<LengthRuleResult>;