siluzan-cso-cli 1.0.0-beta.28

package/dist/index.js

@@ -0,0 +1,2461 @@
+#!/usr/bin/env node
+import {
+  runExtractCover
+} from "./chunk-FZS2K2T3.js";
+
+// src/index.ts
+import { Command } from "commander";
+
+// src/commands/init.ts
+import * as fs2 from "fs/promises";
+import * as fsSync from "fs";
+import * as os from "os";
+import * as path2 from "path";
+import { fileURLToPath } from "url";
+
+// src/templates/load-templates.ts
+import * as fs from "fs/promises";
+import * as path from "path";
+async function getSkillFiles(skillDir, apiBaseUrl) {
+  const out = {};
+  async function walk(dir, prefix) {
+    const entries = await fs.readdir(dir, { withFileTypes: true });
+    for (const ent of entries) {
+      const rel = prefix ? `${prefix}/${ent.name}` : ent.name;
+      const full = path.join(dir, ent.name);
+      if (ent.isDirectory()) {
+        await walk(full, rel);
+      } else {
+        let text = await fs.readFile(full, "utf8");
+        text = text.replace(/\{\{SILUZAN_API_BASE_URL\}\}/g, apiBaseUrl);
+        out[rel] = text;
+      }
+    }
+  }
+  await walk(skillDir, "");
+  return out;
+}
+
+// src/commands/init.ts
+var __dirname = path2.dirname(fileURLToPath(import.meta.url));
+var TARGET_DIRS = {
+  cursor: (cwd) => path2.join(cwd, ".cursor", "skills", "siluzan-platform"),
+  claude: (cwd) => path2.join(cwd, ".claude", "skills", "siluzan-platform"),
+  /** OpenClaw 工作区技能目录，见 https://docs.openclaw.ai/skills */
+  "openclaw-workspace": (cwd) => path2.join(cwd, "skills", "siluzan-platform"),
+  "openclaw-global": (_cwd, home) => path2.join(home, ".openclaw", "skills", "siluzan-platform"),
+  /** WorkBuddy (CodeBuddy) 项目级技能目录 */
+  "workbuddy-workspace": (cwd) => path2.join(cwd, ".workbuddy", "skills", "siluzan-platform"),
+  /** WorkBuddy (CodeBuddy) 用户级技能目录（全局可用） */
+  "workbuddy-global": (_cwd, home) => path2.join(home, ".workbuddy", "skills", "siluzan-platform")
+};
+function parseTargets(raw) {
+  const normalized = raw.trim().toLowerCase();
+  if (normalized === "all") {
+    return [
+      "cursor",
+      "claude",
+      "openclaw-workspace",
+      "openclaw-global",
+      "workbuddy-workspace",
+      "workbuddy-global"
+    ];
+  }
+  const parts = normalized.split(",").map((s) => s.trim()).map((p) => {
+    if (p === "openclaw") return "openclaw-workspace";
+    if (p === "workbuddy") return "workbuddy-workspace";
+    return p;
+  });
+  const allowed = [
+    "cursor",
+    "claude",
+    "openclaw-workspace",
+    "openclaw-global",
+    "workbuddy-workspace",
+    "workbuddy-global"
+  ];
+  const result = [];
+  for (const p of parts) {
+    if (!allowed.includes(p)) {
+      console.error(
+        `\u672A\u77E5\u5E73\u53F0: ${p}\u3002\u53EF\u9009: cursor, claude, openclaw-workspace, openclaw-global, workbuddy-workspace, workbuddy-global, all`
+      );
+      process.exitCode = 1;
+      return [];
+    }
+    result.push(p);
+  }
+  return [...new Set(result)];
+}
+function skillRoot() {
+  return path2.join(__dirname, "skill");
+}
+function saveInstalledTargets(newEntries) {
+  const CONFIG_FILE4 = path2.join(os.homedir(), ".siluzan", "config.json");
+  try {
+    fsSync.mkdirSync(path2.dirname(CONFIG_FILE4), { recursive: true });
+    let existing = {};
+    if (fsSync.existsSync(CONFIG_FILE4)) {
+      existing = JSON.parse(fsSync.readFileSync(CONFIG_FILE4, "utf8"));
+    }
+    const prev = Array.isArray(existing.installedTargets) ? existing.installedTargets : [];
+    const merged = /* @__PURE__ */ new Map();
+    for (const e of [...prev, ...newEntries]) {
+      merged.set(`${e.target}::${e.cwd}`, e);
+    }
+    fsSync.writeFileSync(
+      CONFIG_FILE4,
+      JSON.stringify({ ...existing, installedTargets: [...merged.values()] }, null, 2),
+      "utf8"
+    );
+    if (process.platform !== "win32") {
+      fsSync.chmodSync(CONFIG_FILE4, 384);
+    }
+  } catch {
+  }
+}
+async function writeSkillFilesToDir(destDir, skillFiles, force) {
+  await fs2.mkdir(destDir, { recursive: true });
+  let anyWritten = false;
+  for (const [relativePath, content] of Object.entries(skillFiles)) {
+    const fullPath = path2.join(destDir, relativePath);
+    await fs2.mkdir(path2.dirname(fullPath), { recursive: true });
+    try {
+      await fs2.access(fullPath);
+      if (!force) {
+        console.warn(`\u8DF3\u8FC7\uFF08\u5DF2\u5B58\u5728\uFF0C\u4F7F\u7528 --force \u8986\u76D6\uFF09: ${fullPath}`);
+        continue;
+      }
+    } catch {
+    }
+    await fs2.writeFile(fullPath, content, "utf8");
+    console.log(`\u5DF2\u5199\u5165: ${fullPath}`);
+    anyWritten = true;
+  }
+  return anyWritten;
+}
+async function runInit(options) {
+  const home = os.homedir();
+  const skillFiles = await getSkillFiles(skillRoot(), options.apiBaseUrl);
+  const installedEntries = [];
+  if (options.dir) {
+    const destDir = path2.resolve(options.cwd, options.dir);
+    console.log(`\u5B89\u88C5\u76EE\u6807\u76EE\u5F55\uFF1A${destDir}`);
+    const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+    if (anyWritten) {
+      installedEntries.push({ target: "custom", cwd: "", dir: destDir });
+    }
+  } else {
+    const targets = parseTargets(options.aiTargets);
+    if (targets.length === 0) return;
+    for (const target of targets) {
+      const destDir = TARGET_DIRS[target](options.cwd, home);
+      console.log(`[${target}] \u2192 ${destDir}`);
+      const anyWritten = await writeSkillFilesToDir(destDir, skillFiles, options.force);
+      if (anyWritten) {
+        const isGlobal = target === "openclaw-global" || target === "workbuddy-global";
+        installedEntries.push({ target, cwd: isGlobal ? "" : options.cwd });
+      }
+    }
+  }
+  if (installedEntries.length > 0) {
+    saveInstalledTargets(installedEntries);
+  }
+  console.log("\n\u4E0B\u4E00\u6B65\uFF1A");
+  console.log(
+    "1. \u9996\u6B21\u4F7F\u7528\u8BF7\u8FD0\u884C\uFF1Asiluzan-cso login  \uFF08\u5F15\u5BFC\u6CE8\u518C/\u767B\u5F55\u5E76\u4FDD\u5B58 Token\uFF09"
+  );
+  console.log(
+    "2. \u540E\u7EED\u5347\u7EA7\u8FD0\u884C\uFF1Asiluzan-cso update  \uFF08\u81EA\u52A8\u66F4\u65B0 CLI \u4E0E skill \u6587\u4EF6\uFF09"
+  );
+  console.log(
+    "3. OpenClaw \u5168\u5C40\u6280\u80FD\u82E5\u672A\u751F\u6548\uFF0C\u8BF7\u5728 ~/.openclaw/openclaw.json \u7684 skills.load.extraDirs \u4E2D\u52A0\u5165\u6280\u80FD\u7236\u76EE\u5F55\u3002"
+  );
+  console.log(
+    "4. WorkBuddy \u6280\u80FD\u5B89\u88C5\u540E\u91CD\u542F WorkBuddy \u5373\u53EF\u751F\u6548\uFF08~/.workbuddy/skills/ \u6216\u9879\u76EE .workbuddy/skills/\uFF09\u3002"
+  );
+}
+
+// src/commands/login.ts
+import * as readline from "readline";
+
+// ../common/dist/index.js
+import * as fs3 from "fs";
+import * as path3 from "path";
+import * as os2 from "os";
+import * as https from "https";
+import * as http from "http";
+import * as os22 from "os";
+import { randomUUID as _randomUUID } from "crypto";
+import * as fs22 from "fs";
+import * as path22 from "path";
+import { fileURLToPath as fileURLToPath2 } from "url";
+var SILUZAN_DIR = path3.join(os2.homedir(), ".siluzan");
+var CONFIG_FILE = path3.join(SILUZAN_DIR, "config.json");
+function readStr(raw, key) {
+  const v = raw[key];
+  return typeof v === "string" && v ? v : void 0;
+}
+function readSharedConfig() {
+  if (!fs3.existsSync(CONFIG_FILE)) {
+    return { authToken: "" };
+  }
+  try {
+    const raw = JSON.parse(fs3.readFileSync(CONFIG_FILE, "utf8"));
+    return {
+      authToken: readStr(raw, "authToken") ?? "",
+      apiKey: readStr(raw, "apiKey"),
+      apiBaseUrl: readStr(raw, "apiBaseUrl"),
+      tsoApiBaseUrl: readStr(raw, "tsoApiBaseUrl"),
+      googleApiUrl: readStr(raw, "googleApiUrl"),
+      dataPermission: readStr(raw, "dataPermission")
+    };
+  } catch {
+    return { authToken: "" };
+  }
+}
+function writeSharedConfig(partial) {
+  fs3.mkdirSync(SILUZAN_DIR, { recursive: true });
+  let existing = {};
+  if (fs3.existsSync(CONFIG_FILE)) {
+    try {
+      existing = JSON.parse(fs3.readFileSync(CONFIG_FILE, "utf8"));
+    } catch {
+    }
+  }
+  const keys = [
+    "authToken",
+    "apiKey",
+    "apiBaseUrl",
+    "tsoApiBaseUrl",
+    "googleApiUrl",
+    "dataPermission"
+  ];
+  for (const k of keys) {
+    if (partial[k] !== void 0) existing[k] = partial[k];
+  }
+  fs3.writeFileSync(CONFIG_FILE, JSON.stringify(existing, null, 2), "utf8");
+  if (process.platform !== "win32") {
+    try {
+      fs3.chmodSync(CONFIG_FILE, 384);
+    } catch {
+      console.warn("\u26A0\uFE0F  \u672A\u80FD\u6536\u655B\u914D\u7F6E\u6587\u4EF6\u6743\u9650\uFF0C\u8BF7\u624B\u52A8\u6267\u884C\uFF1Achmod 600 " + CONFIG_FILE);
+    }
+  }
+}
+function clearSharedConfig() {
+  writeSharedConfig({ authToken: "", apiKey: "" });
+}
+function maskSecret(s) {
+  if (!s) return "(\u672A\u8BBE\u7F6E)";
+  return s.length > 8 ? `${s.slice(0, 4)}****${s.slice(-4)}` : "****";
+}
+var ALLOWED_HOSTNAME_SUFFIXES = [
+  "siluzan.com",
+  "siluzan.cn",
+  /** Google / TikTok / Facebook 等媒体网关域名（TSO 专用，CSO 不会主动产生但兼容写入） */
+  "mysiluzan.com"
+];
+function validateBaseUrl(raw) {
+  let url;
+  try {
+    url = new URL(raw);
+  } catch {
+    return `\u4E0D\u662F\u5408\u6CD5 URL\uFF1A${raw}`;
+  }
+  if (url.protocol !== "https:") {
+    return `\u5FC5\u987B\u4F7F\u7528 HTTPS\uFF0C\u5F53\u524D\u534F\u8BAE\uFF1A${url.protocol}`;
+  }
+  const hostname = url.hostname.toLowerCase();
+  const ok = ALLOWED_HOSTNAME_SUFFIXES.some(
+    (suffix) => hostname === suffix || hostname.endsWith(`.${suffix}`)
+  );
+  if (!ok) {
+    return `\u4E3B\u673A\u540D "${hostname}" \u4E0D\u5728\u5141\u8BB8\u5217\u8868\uFF08${ALLOWED_HOSTNAME_SUFFIXES.join("\u3001")}\uFF09\u5185\u3002
+   \u5982\u9700\u8FDE\u63A5\u81EA\u5B9A\u4E49\u90E8\u7F72\u7AEF\u70B9\uFF0C\u8BF7\u8054\u7CFB\u7BA1\u7406\u5458\u6DFB\u52A0\u767D\u540D\u5355\u3002`;
+  }
+  return null;
+}
+function rawRequest(url, options) {
+  return new Promise((resolve4, reject) => {
+    const parsed = new URL(url);
+    const transport = parsed.protocol === "https:" ? https : http;
+    const reqOpts = {
+      hostname: parsed.hostname,
+      port: parsed.port || (parsed.protocol === "https:" ? 443 : 80),
+      path: parsed.pathname + parsed.search,
+      method: options.method ?? "GET",
+      headers: options.headers
+    };
+    const req = transport.request(reqOpts, (res) => {
+      let data = "";
+      res.setEncoding("utf8");
+      res.on("data", (chunk) => {
+        data += chunk;
+      });
+      res.on("end", () => resolve4({ status: res.statusCode ?? 0, text: data }));
+    });
+    req.on("error", reject);
+    if (options.body) req.write(options.body);
+    req.end();
+  });
+}
+var DEFAULT_SENTRY_DSN = "https://bafcf42aab6fe7b485310619ae041b5e@o4510436169285632.ingest.us.sentry.io/4511103054708736";
+function isSentryDisabled() {
+  return process.env.SILUZAN_SENTRY_DISABLED === "1" || process.env.SILUZAN_SENTRY_DISABLED === "true";
+}
+function getDsn() {
+  return process.env.SILUZAN_SENTRY_DSN?.trim() || DEFAULT_SENTRY_DSN;
+}
+var cliMeta = { name: "siluzan-cli", version: "unknown" };
+var cliInvocation = "";
+function setSiluzanCliInvocation(redactedCommandLine) {
+  cliInvocation = redactedCommandLine;
+}
+function redactCliArgvForSentry(argv) {
+  const args = argv.slice(2);
+  const redactNext = /* @__PURE__ */ new Set(["-t", "--token", "--api-key", "--password"]);
+  const out = [];
+  for (let i = 0; i < args.length; i++) {
+    const a = args[i];
+    if (redactNext.has(a)) {
+      out.push(a, "***");
+      i++;
+      continue;
+    }
+    const eq = a.indexOf("=");
+    if (eq > 0) {
+      const key = a.slice(0, eq).toLowerCase();
+      if (key === "--token" || key === "--api-key" || key === "--password") {
+        out.push(`${a.slice(0, eq)}=***`);
+        continue;
+      }
+    }
+    if (/^-t[^-]/.test(a) && a.length > 3) {
+      out.push("-t***");
+      continue;
+    }
+    out.push(a);
+  }
+  return out.join(" ");
+}
+function isApiTrackingEnabled() {
+  const v = process.env.SILUZAN_SENTRY_TRACKING?.trim().toLowerCase();
+  if (v === "0" || v === "false" || v === "off" || v === "no") return false;
+  return true;
+}
+function setSiluzanCliMeta(name, version) {
+  cliMeta = { name, version };
+  if (sentryReady) {
+    void import("@sentry/node").then((Sentry) => {
+      Sentry.setTag("cli", name);
+      Sentry.setTag("cli_version", version);
+    }).catch(() => {
+    });
+  }
+}
+var sentryReady = false;
+var sentryInitPromise = null;
+var flushHookRegistered = false;
+function buildRuntimeContext() {
+  const platform = process.platform;
+  const osName = platform === "win32" ? "Windows" : platform === "darwin" ? "macOS" : "Linux";
+  return {
+    os: {
+      name: osName,
+      version: os22.release(),
+      // 内核版本，如 10.0.26100（Win11）、24.3.0（macOS）
+      arch: process.arch
+      // x64 / arm64
+    },
+    runtime: {
+      node_version: process.version,
+      // v18.x.x / v20.x.x
+      timezone: Intl.DateTimeFormat().resolvedOptions().timeZone
+    }
+  };
+}
+async function ensureSentryInitialized(requestUrl) {
+  const dsn = getDsn();
+  if (!dsn || isSentryDisabled()) return false;
+  if (sentryReady) return true;
+  if (!sentryInitPromise) {
+    sentryInitPromise = (async () => {
+      const Sentry = await import("@sentry/node");
+      const envOverride = process.env.SILUZAN_SENTRY_ENV?.trim();
+      const environment = envOverride || (inferSiluzanRuntimeEnvironment(requestUrl) === "test" ? "test" : "production");
+      Sentry.init({
+        dsn,
+        environment,
+        sendDefaultPii: true,
+        tracesSampleRate: 0
+      });
+      const ctx = buildRuntimeContext();
+      Sentry.setContext("os", ctx.os);
+      Sentry.setContext("runtime", ctx.runtime);
+      Sentry.setTag("cli", cliMeta.name);
+      Sentry.setTag("cli_version", cliMeta.version);
+      if (!flushHookRegistered) {
+        flushHookRegistered = true;
+        process.once("beforeExit", () => {
+          void Sentry.flush(2e3);
+        });
+      }
+      sentryReady = true;
+    })();
+  }
+  await sentryInitPromise;
+  return sentryReady;
+}
+function deriveMainApiOriginFromRequestUrl(requestUrl) {
+  try {
+    const u = new URL(requestUrl);
+    const host = u.hostname.toLowerCase();
+    if (!host.endsWith("siluzan.com")) return null;
+    if (host.startsWith("tso-api")) {
+      return `${u.protocol}//${host.replace(/^tso-api/, "api")}`;
+    }
+    if (host === "api.siluzan.com" || host === "api-ci.siluzan.com") {
+      return `${u.protocol}//${host}`;
+    }
+    return null;
+  } catch {
+    return null;
+  }
+}
+function inferSiluzanRuntimeEnvironment(requestUrl) {
+  try {
+    const host = new URL(requestUrl).hostname.toLowerCase();
+    return host.includes("-ci") ? "test" : "production";
+  } catch {
+    return "production";
+  }
+}
+function breadcrumbUrl(requestUrl) {
+  try {
+    const u = new URL(requestUrl);
+    return `${u.origin}${u.pathname}`;
+  } catch {
+    return requestUrl.slice(0, 120);
+  }
+}
+function trackingPathParts(requestUrl) {
+  try {
+    const u = new URL(requestUrl);
+    return { host: u.hostname.toLowerCase(), pathname: u.pathname || "/" };
+  } catch {
+    return { host: "unknown", pathname: "/" };
+  }
+}
+var SENSITIVE_QUERY_KEYS = /* @__PURE__ */ new Set([
+  "token",
+  "password",
+  "api_key",
+  "apikey",
+  "key",
+  "secret",
+  "authorization",
+  "auth"
+]);
+function redactUrlForTracking(url) {
+  try {
+    const u = new URL(url);
+    const q = new URLSearchParams(u.search);
+    const out = new URLSearchParams();
+    for (const [k, v] of q.entries()) {
+      out.set(k, SENSITIVE_QUERY_KEYS.has(k.toLowerCase()) ? "[REDACTED]" : v);
+    }
+    const qs = out.toString();
+    return `${u.origin}${u.pathname}${qs ? `?${qs}` : ""}`;
+  } catch {
+    return url.slice(0, 800);
+  }
+}
+function redactTrackingHeaders(h) {
+  const out = {};
+  for (const [k, v] of Object.entries(h)) {
+    const low = k.toLowerCase();
+    if (low === "authorization" || low === "x-api-key") {
+      out[k] = "[REDACTED]";
+    } else if (v.length > 2e3) {
+      out[k] = `${v.slice(0, 500)}\u2026[truncated ${v.length} chars]`;
+    } else {
+      out[k] = v;
+    }
+  }
+  return out;
+}
+var SENSITIVE_JSON_KEY = /* @__PURE__ */ new Set([
+  "password",
+  "token",
+  "apikey",
+  "api_key",
+  "authorization",
+  "authtoken",
+  "accesstoken",
+  "refreshtoken",
+  "secret",
+  "client_secret",
+  "privatekey",
+  "private_key"
+]);
+function deepRedactJson(value, depth) {
+  if (depth > 14) return "[MAX_DEPTH]";
+  if (value === null || typeof value !== "object") return value;
+  if (Array.isArray(value)) {
+    return value.map((v) => deepRedactJson(v, depth + 1));
+  }
+  const o = value;
+  const out = {};
+  for (const [k, v] of Object.entries(o)) {
+    const low = k.toLowerCase().replace(/_/g, "");
+    if (SENSITIVE_JSON_KEY.has(low) || low.includes("password") || low.includes("secret")) {
+      out[k] = "[REDACTED]";
+    } else {
+      out[k] = deepRedactJson(v, depth + 1);
+    }
+  }
+  return out;
+}
+function redactPlainTextSnippet(input) {
+  let s = input;
+  s = s.replace(/(Bearer\s+)[^\s'",}]+/gi, "$1***");
+  s = s.replace(
+    /("?(?:apiKey|authToken|accessToken|refreshToken|token|password)"?\s*[:=]\s*"?)([^"\s,}]{4,})/gi,
+    "$1***"
+  );
+  return s;
+}
+function trackingBodyMaxChars() {
+  const n = Number(process.env.SILUZAN_SENTRY_BODY_MAX);
+  if (Number.isFinite(n) && n > 256) return Math.min(n, 5e5);
+  return 12e3;
+}
+function trackingOmitBodies() {
+  const v = process.env.SILUZAN_SENTRY_NO_API_BODY?.trim().toLowerCase();
+  return v === "1" || v === "true" || v === "yes";
+}
+function formatTrackingBody(raw) {
+  if (trackingOmitBodies()) return "[omitted: SILUZAN_SENTRY_NO_API_BODY]";
+  if (raw === void 0 || raw === "") return "";
+  const max = trackingBodyMaxChars();
+  let text;
+  try {
+    const parsed = JSON.parse(raw);
+    text = JSON.stringify(deepRedactJson(parsed, 0));
+  } catch {
+    text = redactPlainTextSnippet(raw);
+  }
+  if (text.length > max) {
+    return `${text.slice(0, max)}\u2026[truncated ${text.length} chars]`;
+  }
+  return text;
+}
+async function reportSiluzanApiCall(payload) {
+  if (isSentryDisabled() || !getDsn() || !isApiTrackingEnabled()) return;
+  try {
+    const okInit = await ensureSentryInitialized(payload.url);
+    if (!okInit) return;
+    const Sentry = await import("@sentry/node");
+    const { host, pathname } = trackingPathParts(payload.url);
+    const siluzanEnv = inferSiluzanRuntimeEnvironment(payload.url);
+    const authType = payload.config.apiKey ? "apiKey" : "token";
+    const statusOk = payload.status >= 200 && payload.status < 300;
+    Sentry.captureMessage(
+      `siluzan.cli.api ${payload.method} ${host}${pathname} \u2192 ${payload.status}`,
+      {
+        level: statusOk ? "info" : "warning",
+        tags: {
+          siluzan_tracking: "api",
+          cli: cliMeta.name,
+          cli_version: cliMeta.version,
+          http_method: payload.method,
+          http_host: host,
+          http_status: String(payload.status),
+          siluzan_env: siluzanEnv,
+          auth_type: authType
+        },
+        fingerprint: [
+          "siluzan-cli-api",
+          cliMeta.name,
+          payload.method,
+          host,
+          pathname,
+          statusOk ? "2xx" : payload.status >= 500 ? "5xx" : "4xx"
+        ],
+        contexts: {
+          siluzan_cli: {
+            command: cliInvocation || "(pre-action \u672A\u6CE8\u518C\u6216\u5148\u4E8E parse \u53D1\u8D77\u8BF7\u6C42)"
+          },
+          siluzan_request: {
+            url: redactUrlForTracking(payload.url),
+            method: payload.method,
+            headers: redactTrackingHeaders(payload.reqHeaders),
+            body: formatTrackingBody(payload.requestBody)
+          },
+          siluzan_response: {
+            status: payload.status,
+            body: formatTrackingBody(payload.responseText)
+          }
+        }
+      }
+    );
+  } catch {
+  }
+}
+function cacheKeyForUser(mainOrigin, config) {
+  const cred = config.apiKey ? `k:${config.apiKey}` : `t:${config.authToken}`;
+  return `${mainOrigin}\0${cred}`;
+}
+var userContextDone = /* @__PURE__ */ new Set();
+var userContextInflight = /* @__PURE__ */ new Map();
+function parseMeResponse(text) {
+  try {
+    const json = JSON.parse(text);
+    const data = json?.data && typeof json.data === "object" ? json.data : json;
+    const id = pickStr(data, "id") ?? pickStr(data, "userId") ?? pickStr(data, "accountId");
+    const email = pickStr(data, "email");
+    const username = pickStr(data, "userName") ?? pickStr(data, "username") ?? pickStr(data, "name") ?? pickStr(data, "phone");
+    if (!id && !email && !username) return null;
+    return { id, email, username };
+  } catch {
+    return null;
+  }
+}
+function pickStr(obj, key) {
+  const v = obj[key];
+  return typeof v === "string" && v.trim() ? v.trim() : void 0;
+}
+async function fetchAndSetUser(mainOrigin, config) {
+  const meUrl = `${mainOrigin.replace(/\/$/, "")}/query/account/me`;
+  const authHeaders = config.apiKey ? { "x-api-key": config.apiKey } : { Authorization: `Bearer ${config.authToken}` };
+  const res = await rawRequest(meUrl, {
+    method: "GET",
+    headers: {
+      "Content-Type": "application/json",
+      "Accept-Language": "zh-CN",
+      ...authHeaders
+    }
+  });
+  if (res.status < 200 || res.status >= 300) return;
+  const parsed = parseMeResponse(res.text);
+  if (!parsed) return;
+  const Sentry = await import("@sentry/node");
+  const user = {};
+  if (parsed.id) user.id = parsed.id;
+  if (parsed.email) user.email = parsed.email;
+  if (parsed.username) user.username = parsed.username;
+  Sentry.setUser(user);
+}
+function scheduleUserContext(mainOrigin, config) {
+  const key = cacheKeyForUser(mainOrigin, config);
+  if (userContextDone.has(key)) return;
+  let p = userContextInflight.get(key);
+  if (!p) {
+    p = (async () => {
+      try {
+        await fetchAndSetUser(mainOrigin, config);
+      } catch {
+      } finally {
+        userContextInflight.delete(key);
+        userContextDone.add(key);
+      }
+    })();
+    userContextInflight.set(key, p);
+  }
+}
+function refreshSiluzanUser(apiBase, config) {
+  if (isSentryDisabled()) return;
+  void (async () => {
+    try {
+      const ok = await ensureSentryInitialized(apiBase);
+      if (!ok) return;
+      const mainOrigin = deriveMainApiOriginFromRequestUrl(apiBase) ?? (apiBase.includes("-ci") ? "https://api-ci.siluzan.com" : "https://api.siluzan.com");
+      const key = cacheKeyForUser(mainOrigin, config);
+      userContextDone.delete(key);
+      userContextInflight.delete(key);
+      scheduleUserContext(mainOrigin, config);
+    } catch {
+    }
+  })();
+}
+async function prepareSiluzanSentryForApiFetch(url, config, options) {
+  if (isSentryDisabled()) return;
+  if (!getDsn()) return;
+  try {
+    const ok = await ensureSentryInitialized(url);
+    if (!ok) return;
+    const Sentry = await import("@sentry/node");
+    const method = options.method ?? "GET";
+    const siluzanEnv = inferSiluzanRuntimeEnvironment(url);
+    const authType = config.apiKey ? "apiKey" : "token";
+    Sentry.addBreadcrumb({
+      category: "siluzan.api",
+      type: "http",
+      level: "info",
+      message: `${method} ${breadcrumbUrl(url)}`,
+      data: {
+        siluzan_env: siluzanEnv,
+        auth_type: authType
+      }
+    });
+    const mainOrigin = deriveMainApiOriginFromRequestUrl(url);
+    if (mainOrigin) {
+      scheduleUserContext(mainOrigin, config);
+    }
+  } catch {
+  }
+}
+function redactSensitive(input) {
+  let output = input;
+  output = output.replace(/(Bearer\s+)[^\s",]+/gi, "$1***");
+  output = output.replace(
+    /("?(?:apiKey|authToken|accessToken|refreshToken|token|authorization)"?\s*[:=]\s*"?)([^"\s,}]+)/gi,
+    "$1***"
+  );
+  return output;
+}
+async function apiFetch(url, config, options = {}, verbose = false) {
+  await prepareSiluzanSentryForApiFetch(url, config, options);
+  const method = options.method ?? "GET";
+  const authHeaders = config.apiKey ? { "x-api-key": config.apiKey } : { Authorization: `Bearer ${config.authToken}` };
+  const reqHeaders = {
+    "Content-Type": "application/json",
+    "Accept-Language": "zh-CN",
+    ...authHeaders,
+    // dataPermission 仅 TSO 使用；CSO 未设置时为空字符串，服务端忽略该头
+    Datapermission: config.dataPermission ?? "",
+    ...options.headers ?? {}
+  };
+  const body = typeof options.body === "string" ? options.body : void 0;
+  const res = await rawRequest(url, {
+    method,
+    headers: reqHeaders,
+    body
+  });
+  const text = res.text;
+  await reportSiluzanApiCall({
+    url,
+    config,
+    method,
+    reqHeaders,
+    requestBody: body,
+    status: res.status,
+    responseText: text
+  });
+  if (res.status < 200 || res.status >= 300) {
+    const detail = verbose ? `\uFF1A${redactSensitive(text).slice(0, 300)}` : "";
+    throw new Error(`HTTP ${res.status}${detail}`);
+  }
+  if (!text.trim()) return null;
+  try {
+    return JSON.parse(text);
+  } catch {
+    if (verbose) {
+      console.error(`  \u26A0\uFE0F  \u54CD\u5E94\u975E JSON\uFF0C\u539F\u59CB\u5185\u5BB9\uFF1A${redactSensitive(text).slice(0, 200)}`);
+    }
+    return text;
+  }
+}
+function decodeJwtClaims(token) {
+  try {
+    const parts = token.split(".");
+    if (parts.length < 2) return null;
+    const payload = Buffer.from(parts[1], "base64url").toString("utf8");
+    const parsed = JSON.parse(payload);
+    return parsed.sub ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+function isUUID(value) {
+  if (typeof value !== "string") return false;
+  return /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(value);
+}
+var randomUUID = _randomUUID;
+function getCurrentVersion(importMetaUrl) {
+  try {
+    const __dirname2 = path22.dirname(fileURLToPath2(importMetaUrl));
+    const pkgPath = path22.join(__dirname2, "..", "package.json");
+    const pkg = JSON.parse(fs22.readFileSync(pkgPath, "utf8"));
+    return pkg.version ?? "0.0.0";
+  } catch {
+    return "0.0.0";
+  }
+}
+function npmDistTagForBuildEnv(buildEnv) {
+  return buildEnv === "test" ? "beta" : "latest";
+}
+function npmMinRequiredTagForBuildEnv(buildEnv) {
+  return buildEnv === "test" ? "min-required-beta" : "min-required";
+}
+function isNewer(a, b) {
+  const parse = (v) => {
+    const [base, pre] = v.replace(/^v/, "").split("-beta.");
+    const nums = base.split(".").map(Number);
+    nums.push(pre !== void 0 ? Number(pre) : Infinity);
+    return nums;
+  };
+  const av = parse(a);
+  const bv = parse(b);
+  for (let i = 0; i < Math.max(av.length, bv.length); i++) {
+    const ai = av[i] ?? 0;
+    const bi = bv[i] ?? 0;
+    if (bi !== ai) return bi > ai;
+  }
+  return false;
+}
+async function fetchNpmVersion(pkgName, tag, timeoutMs = 4e3) {
+  try {
+    const url = `https://registry.npmjs.org/${pkgName}/${tag}`;
+    const controller = new AbortController();
+    const timer = setTimeout(() => controller.abort(), timeoutMs);
+    const res = await fetch(url, { signal: controller.signal });
+    clearTimeout(timer);
+    if (!res.ok) return null;
+    const data = await res.json();
+    return data.version ?? null;
+  } catch {
+    return null;
+  }
+}
+
+// src/config/defaults.ts
+var BUILD_ENV = "test";
+var DEFAULT_API_BASE = "https://api-ci.siluzan.com";
+var DEFAULT_CSO_BASE = "https://cso-ci.siluzan.com";
+var DEFAULT_WEB_BASE = "https://www-ci.siluzan.com";
+
+// src/commands/login.ts
+async function runLogin(opts = {}) {
+  if (opts.apiKey !== void 0) {
+    const key = opts.apiKey.trim();
+    if (!key) {
+      console.error("\n\u274C API Key \u4E0D\u80FD\u4E3A\u7A7A\u3002\n");
+      process.exit(1);
+    }
+    writeSharedConfig({ apiKey: key });
+    refreshSiluzanUser(DEFAULT_API_BASE, { authToken: "", apiKey: key });
+    console.log(`
+\u2705 API Key \u5DF2\u4FDD\u5B58\uFF08${maskSecret(key)}\uFF09`);
+    console.log(`   \u914D\u7F6E\u6587\u4EF6\uFF1A${CONFIG_FILE}`);
+    console.log("\n\u73B0\u5728\u53EF\u4EE5\u8FD0\u884C\uFF1A");
+    console.log("  siluzan-cso list-accounts   \u67E5\u770B\u53EF\u7528\u5A92\u4F53\u8D26\u53F7\n");
+    return;
+  }
+  const shared = readSharedConfig();
+  const rl = readline.createInterface({ input: process.stdin, output: process.stdout });
+  const prompt = (q) => new Promise((res) => rl.question(q, (a) => res(a.trim())));
+  console.log("\n\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
+  console.log("  Siluzan CSO \u767B\u5F55");
+  console.log("\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550\u2550");
+  console.log("\n\u8BF7\u9009\u62E9\u767B\u5F55\u65B9\u5F0F\uFF1A");
+  console.log("  1. API Key\uFF08\u63A8\u8350\uFF0C\u4E0E siluzan-tso \u5171\u7528\uFF09");
+  console.log("  2. JWT Token\n");
+  const choice = await prompt("\u8F93\u5165\u5E8F\u53F7\uFF08\u9ED8\u8BA4 1\uFF09\uFF1A");
+  if (!choice || choice === "1") {
+    if (shared.apiKey) {
+      console.log(`
+\u5DF2\u68C0\u6D4B\u5230\u5DF2\u4FDD\u5B58\u7684 API Key\uFF08${maskSecret(shared.apiKey)}\uFF09\u3002`);
+      const ans = await prompt("\u662F\u5426\u8986\u76D6\uFF1F(y/N) ");
+      if (ans.toLowerCase() !== "y") {
+        rl.close();
+        console.log("\n\u5DF2\u53D6\u6D88\u3002\n");
+        return;
+      }
+    }
+    console.log(`
+\u8BF7\u524D\u5F80\uFF1A${DEFAULT_WEB_BASE}/v3/foreign_trade/settings/apiKeyManagement`);
+    console.log("\u521B\u5EFA API Key \u540E\u7C98\u8D34\u5230\u4E0B\u65B9\u3002\n");
+    let apiKey = "";
+    for (let i = 0; i < 3; i++) {
+      const input = await prompt("\u7C98\u8D34 API Key\uFF1A");
+      if (input) {
+        apiKey = input;
+        break;
+      }
+      console.log("\u274C API Key \u4E0D\u80FD\u4E3A\u7A7A\uFF0C\u8BF7\u91CD\u8BD5");
+    }
+    rl.close();
+    if (!apiKey) {
+      console.error("\n\u274C \u591A\u6B21\u8F93\u5165\u65E0\u6548\u3002\n");
+      process.exit(1);
+    }
+    writeSharedConfig({ apiKey });
+    refreshSiluzanUser(DEFAULT_API_BASE, { authToken: "", apiKey });
+    console.log(`
+\u2705 API Key \u5DF2\u4FDD\u5B58\uFF08${maskSecret(apiKey)}\uFF09`);
+  } else {
+    if (shared.authToken) {
+      console.log(`
+\u5DF2\u68C0\u6D4B\u5230\u5DF2\u4FDD\u5B58\u7684 Token\uFF08${maskSecret(shared.authToken)}\uFF09\u3002`);
+      const ans = await prompt("\u662F\u5426\u8986\u76D6\uFF1F(y/N) ");
+      if (ans.toLowerCase() !== "y") {
+        rl.close();
+        console.log("\n\u5DF2\u53D6\u6D88\u3002\n");
+        return;
+      }
+    }
+    console.log("\n\u8BF7\u524D\u5F80\uFF1Ahttps://www.siluzan.com/user/settings/token");
+    console.log("\u590D\u5236 Access Token \u540E\u7C98\u8D34\u5230\u4E0B\u65B9\u3002\n");
+    let token = "";
+    for (let i = 0; i < 3; i++) {
+      const input = await prompt("\u7C98\u8D34 Token\uFF1A");
+      if (input.split(".").length === 3) {
+        token = input;
+        break;
+      }
+      if (input) console.log("\u274C \u683C\u5F0F\u4E0D\u6B63\u786E\uFF08\u5E94\u4E3A JWT\uFF0C\u4E09\u6BB5\u7528 . \u5206\u9694\uFF09\uFF0C\u8BF7\u91CD\u8BD5");
+    }
+    rl.close();
+    if (!token) {
+      console.error("\n\u274C \u591A\u6B21\u8F93\u5165\u65E0\u6548\u3002\n");
+      process.exit(1);
+    }
+    writeSharedConfig({ authToken: token });
+    refreshSiluzanUser(DEFAULT_API_BASE, { authToken: token });
+    console.log(`
+\u2705 Token \u5DF2\u4FDD\u5B58\uFF08${maskSecret(token)}\uFF09`);
+  }
+  console.log(`   \u914D\u7F6E\u6587\u4EF6\uFF1A${CONFIG_FILE}`);
+  console.log("\n\u73B0\u5728\u53EF\u4EE5\u8FD0\u884C\uFF1A");
+  console.log("  siluzan-cso list-accounts   \u67E5\u770B\u53EF\u7528\u5A92\u4F53\u8D26\u53F7");
+  console.log("  siluzan-cso publish -c <\u914D\u7F6E\u6587\u4EF6>   \u53D1\u5E03\u5185\u5BB9\n");
+}
+
+// src/commands/update.ts
+import * as fs5 from "fs";
+import * as path5 from "path";
+import * as os4 from "os";
+import { spawnSync } from "child_process";
+
+// src/utils/version.ts
+import * as fs4 from "fs";
+import * as path4 from "path";
+import * as os3 from "os";
+var PKG_NAME = "siluzan-cso-cli";
+var CONFIG_FILE2 = path4.join(os3.homedir(), ".siluzan", "config.json");
+function getCurrentVersion2() {
+  return getCurrentVersion(import.meta.url);
+}
+function readConfigRaw() {
+  try {
+    return JSON.parse(fs4.readFileSync(CONFIG_FILE2, "utf8"));
+  } catch {
+    return {};
+  }
+}
+function writeConfigRaw(data) {
+  try {
+    fs4.mkdirSync(path4.dirname(CONFIG_FILE2), { recursive: true });
+    fs4.writeFileSync(CONFIG_FILE2, JSON.stringify(data, null, 2), "utf8");
+    if (process.platform !== "win32") {
+      fs4.chmodSync(CONFIG_FILE2, 384);
+    }
+  } catch {
+  }
+}
+async function fetchVersionByTag(tag, cacheKey, cfg) {
+  const hours24 = 24 * 60 * 60 * 1e3;
+  if (cfg._csoLastVersionCheck && cfg[cacheKey]) {
+    const lastCheck = new Date(cfg._csoLastVersionCheck).getTime();
+    if (Date.now() - lastCheck < hours24) {
+      return cfg[cacheKey];
+    }
+  }
+  return fetchNpmVersion(PKG_NAME, tag);
+}
+async function notifyIfOutdated() {
+  try {
+    const current = getCurrentVersion2();
+    const tag = npmDistTagForBuildEnv(BUILD_ENV);
+    const isBeta = tag === "beta";
+    const latestCacheKey = isBeta ? "_csoLatestBeta" : "_csoLatestStable";
+    const minCacheKey = isBeta ? "_csoMinRequiredBeta" : "_csoMinRequiredStable";
+    const minTag = npmMinRequiredTagForBuildEnv(BUILD_ENV);
+    const cfg = readConfigRaw();
+    const [latest, minRequired] = await Promise.all([
+      fetchVersionByTag(tag, latestCacheKey, cfg),
+      fetchVersionByTag(minTag, minCacheKey, cfg)
+    ]);
+    writeConfigRaw({
+      ...cfg,
+      _csoLastVersionCheck: (/* @__PURE__ */ new Date()).toISOString(),
+      ...latest ? { [latestCacheKey]: latest } : {},
+      ...minRequired ? { [minCacheKey]: minRequired } : {}
+    });
+    const lastNotified = cfg._csoLastNotified ? new Date(cfg._csoLastNotified).getTime() : 0;
+    if (Date.now() - lastNotified < 24 * 60 * 60 * 1e3) return;
+    const tagLabel = isBeta ? "\uFF08\u6D4B\u8BD5\u7248\uFF09" : "\uFF08\u6B63\u5F0F\u7248\uFF09";
+    if (minRequired && isNewer(current, minRequired)) {
+      writeConfigRaw({ ...cfg, _csoLastNotified: (/* @__PURE__ */ new Date()).toISOString() });
+      console.log(
+        `
+[SILUZAN_FORCE_UPDATE] \u5F53\u524D\u7248\u672C ${current} \u5DF2\u8FC7\u671F\uFF0C\u6700\u4F4E\u8981\u6C42\u7248\u672C ${minRequired}${tagLabel}
+\u26D4 \u5FC5\u987B\u5148\u5347\u7EA7\u624D\u80FD\u7EE7\u7EED\u4F7F\u7528\uFF0CAgent \u8BF7\u7ACB\u5373\u6267\u884C\uFF1Asiluzan-cso update
+   \u6216\u624B\u52A8\uFF1Anpm install -g ${PKG_NAME}@${tag}
+`
+      );
+      return;
+    }
+    if (latest && isNewer(current, latest)) {
+      writeConfigRaw({ ...cfg, _csoLastNotified: (/* @__PURE__ */ new Date()).toISOString() });
+      console.log(
+        `
+[SILUZAN_UPDATE_AVAILABLE] \u53D1\u73B0\u65B0\u7248\u672C ${latest}${tagLabel}\uFF08\u5F53\u524D ${current}\uFF09
+\u{1F4A1} Agent \u8BF7\u7ACB\u5373\u6267\u884C\uFF1Asiluzan-cso update
+   \u6216\u624B\u52A8\uFF1Anpm install -g ${PKG_NAME}@${tag}
+`
+      );
+    }
+  } catch {
+  }
+}
+async function fetchLatestVersion() {
+  const tag = npmDistTagForBuildEnv(BUILD_ENV);
+  return fetchNpmVersion(PKG_NAME, tag);
+}
+
+// src/commands/update.ts
+var CONFIG_FILE3 = path5.join(os4.homedir(), ".siluzan", "config.json");
+function readInstalledTargets() {
+  try {
+    const cfg = JSON.parse(fs5.readFileSync(CONFIG_FILE3, "utf8"));
+    return Array.isArray(cfg.installedTargets) ? cfg.installedTargets : [];
+  } catch {
+    return [];
+  }
+}
+function isNpmGlobalInstall() {
+  try {
+    const result = spawnSync("npm", ["list", "-g", "--depth=0", "siluzan-cso-cli"], {
+      encoding: "utf8",
+      stdio: "pipe"
+    });
+    return result.stdout?.includes("siluzan-cso-cli");
+  } catch {
+    return false;
+  }
+}
+async function runUpdate(options) {
+  const current = getCurrentVersion2();
+  console.log(`
+\u5F53\u524D\u7248\u672C\uFF1A${current}`);
+  const npmTag = npmDistTagForBuildEnv(BUILD_ENV);
+  console.log(`\u6B63\u5728\u67E5\u8BE2 npm registry\uFF08\u6784\u5EFA\uFF1A${BUILD_ENV}\uFF0Cdist-tag\uFF1A${npmTag}\uFF09\u2026`);
+  const latest = await fetchLatestVersion();
+  if (!latest) {
+    console.warn("\u26A0\uFE0F  \u65E0\u6CD5\u8BBF\u95EE npm registry\uFF0C\u8BF7\u68C0\u67E5\u7F51\u7EDC\u540E\u91CD\u8BD5\u3002");
+    console.warn("   \u82E5\u9700\u5F3A\u5236\u91CD\u65B0\u5B89\u88C5\u5F53\u524D\u7248\u672C\uFF0C\u52A0 --force \u53C2\u6570\u3002");
+    if (!options.force) {
+      process.exit(1);
+    }
+  } else {
+    console.log(`\u6700\u65B0\u7248\u672C\uFF1A${latest}`);
+  }
+  const shouldUpdate = options.force || (latest ? isNewer(current, latest) : false);
+  if (!shouldUpdate && latest) {
+    console.log("\n\u2705 \u5DF2\u662F\u6700\u65B0\u7248\u672C\uFF0C\u65E0\u9700\u66F4\u65B0\u3002");
+    console.log("   \u5982\u9700\u5F3A\u5236\u91CD\u65B0\u521D\u59CB\u5316 skill \u6587\u4EF6\uFF0C\u53EF\u52A0 --force \u53C2\u6570\u3002");
+    return;
+  }
+  const targetVersion = latest ?? current;
+  if (shouldUpdate && latest) {
+    console.log(`
+\u2B06\uFE0F  \u6B63\u5728\u66F4\u65B0 CLI \u81F3 ${targetVersion} \u2026`);
+  } else if (options.force) {
+    console.log(`
+\u{1F504} \u5F3A\u5236\u91CD\u65B0\u5B89\u88C5\u5F53\u524D\u7248\u672C ${current} \u2026`);
+  }
+  if (isNpmGlobalInstall()) {
+    try {
+      const result = spawnSync(
+        "npm",
+        ["install", "-g", `siluzan-cso-cli@${targetVersion}`],
+        { stdio: "inherit", shell: false }
+      );
+      if (result.status !== 0) {
+        throw new Error(`npm install \u9000\u51FA\u7801\uFF1A${result.status ?? "unknown"}`);
+      }
+      console.log("\n\u2705 CLI \u66F4\u65B0\u6210\u529F\uFF01");
+    } catch (e) {
+      console.error(`
+\u274C npm \u5B89\u88C5\u5931\u8D25\uFF1A${e.message}`);
+      console.error("   \u5982\u679C\u662F\u6743\u9650\u95EE\u9898\uFF0C\u5C1D\u8BD5\u52A0 sudo\uFF08Unix\uFF09\u6216\u4EE5\u7BA1\u7406\u5458\u8EAB\u4EFD\u8FD0\u884C\u3002");
+      process.exit(1);
+    }
+  } else {
+    console.log(
+      "\n\u26A0\uFE0F  \u68C0\u6D4B\u5230 CLI \u5E76\u975E\u901A\u8FC7 npm \u5168\u5C40\u5B89\u88C5\uFF08\u53EF\u80FD\u662F\u672C\u5730\u5F00\u53D1\u6A21\u5F0F\uFF09\u3002\n   \u8DF3\u8FC7 npm \u66F4\u65B0\uFF0C\u4EC5\u91CD\u65B0\u521D\u59CB\u5316 skill \u6587\u4EF6\u3002\n   \u82E5\u9700\u6B63\u5F0F\u5B89\u88C5\uFF0C\u8BF7\u8FD0\u884C\uFF1Anpm install -g siluzan-cso-cli"
+    );
+  }
+  if (options.skipInit) return;
+  const targets = readInstalledTargets();
+  if (targets.length === 0) {
+    console.log(
+      "\n\u26A0\uFE0F  \u672A\u627E\u5230\u4E0A\u6B21\u5B89\u88C5\u8BB0\u5F55\u3002\n   \u8BF7\u624B\u52A8\u8FD0\u884C\uFF1Asiluzan-cso init --ai <\u5E73\u53F0> --force\n   \u4EE5\u5237\u65B0 skill \u6587\u4EF6\u3002"
+    );
+    return;
+  }
+  console.log(`
+\u{1F504} \u6B63\u5728\u66F4\u65B0 ${targets.length} \u5904 skill \u5B89\u88C5\u4F4D\u7F6E \u2026`);
+  for (const entry of targets) {
+    const label = entry.target === "custom" ? entry.dir ?? "unknown" : entry.target;
+    const cwd = entry.cwd || os4.homedir();
+    console.log(`
+  [${label}]`);
+    try {
+      if (entry.target === "custom" && entry.dir) {
+        await runInit({
+          cwd: os4.homedir(),
+          aiTargets: "",
+          dir: entry.dir,
+          force: true,
+          apiBaseUrl: "https://api.siluzan.com"
+        });
+      } else {
+        await runInit({
+          cwd,
+          aiTargets: entry.target,
+          force: true,
+          apiBaseUrl: "https://api.siluzan.com"
+        });
+      }
+    } catch (e) {
+      console.error(`  \u274C \u66F4\u65B0\u5931\u8D25\uFF1A${e.message}`);
+    }
+  }
+  console.log("\n\u2705 \u5168\u90E8 skill \u6587\u4EF6\u5DF2\u5237\u65B0\u3002");
+  console.log("   \u5982\u679C AI \u52A9\u624B\u6B63\u5728\u8FD0\u884C\uFF0C\u5EFA\u8BAE\u91CD\u542F\u4EE5\u4F7F\u65B0 skill \u6587\u4EF6\u751F\u6548\u3002\n");
+}
+
+// src/utils/auth.ts
+function loadConfig(tokenArg) {
+  const shared = readSharedConfig();
+  const apiKey = process.env.SILUZAN_API_KEY ?? (shared.apiKey ? shared.apiKey : void 0);
+  const authToken = tokenArg ?? process.env.SILUZAN_AUTH_TOKEN ?? shared.authToken ?? "";
+  if (!apiKey && !authToken) {
+    console.error(
+      "\n\u274C \u672A\u627E\u5230\u8BA4\u8BC1\u51ED\u636E\u3002\n\n   \u65B9\u5F0F\u4E00\uFF08\u63A8\u8350\uFF09\uFF1AAPI Key\n     \u5728\u4E1D\u8DEF\u8D5E\u300C\u8BBE\u7F6E \u2192 API Key \u7BA1\u7406\u300D\u521B\u5EFA API Key\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n     siluzan-cso login --api-key <YOUR_API_KEY>\n\n   \u65B9\u5F0F\u4E8C\uFF1AJWT Token\n     siluzan-cso login\n"
+    );
+    process.exit(1);
+  }
+  const apiBaseUrl = process.env.SILUZAN_CSO_API_BASE ?? shared.apiBaseUrl ?? DEFAULT_API_BASE;
+  const csoBaseUrl = process.env.SILUZAN_CSO_BASE ?? DEFAULT_CSO_BASE;
+  const apiErr = validateBaseUrl(apiBaseUrl);
+  if (apiErr) {
+    console.error(`
+\u274C apiBaseUrl \u4E0D\u5408\u6CD5\uFF1A${apiErr}`);
+    process.exit(1);
+  }
+  const csoErr = validateBaseUrl(csoBaseUrl);
+  if (csoErr) {
+    console.error(`
+\u274C csoBaseUrl \u4E0D\u5408\u6CD5\uFF1A${csoErr}`);
+    process.exit(1);
+  }
+  setSiluzanCliMeta("siluzan-cso", getCurrentVersion2());
+  return { apiBaseUrl, csoBaseUrl, authToken, apiKey };
+}
+function apiFetch2(url, config, options = {}, verbose = false) {
+  return apiFetch(url, config, options, verbose);
+}
+
+// src/commands/list-accounts.ts
+function redact(value) {
+  if (value.length <= 8) return "****";
+  return `${value.slice(0, 4)}****${value.slice(-4)}`;
+}
+async function runListAccounts(options) {
+  const config = loadConfig(options.token);
+  const mediaGroup = options.domestic ? 1 : 0;
+  const url = `${config.apiBaseUrl}/query/media-account/v1/getTree?mediaGroup=${mediaGroup}`;
+  let res;
+  try {
+    res = await apiFetch2(url, config, {}, options.verbose);
+  } catch (e) {
+    const msg = e.message;
+    console.error(`
+\u274C \u8BF7\u6C42\u5931\u8D25\uFF1A${msg}`);
+    if (!options.verbose) console.error("   \u52A0 --verbose \u53C2\u6570\u53EF\u67E5\u770B\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F");
+    process.exit(1);
+  }
+  if (res.code !== 1 || !res.data?.mediaAccountGroup) {
+    console.error("\n\u274C \u83B7\u53D6\u8D26\u53F7\u5217\u8868\u5931\u8D25\uFF0C\u670D\u52A1\u7AEF\u8FD4\u56DE\u5F02\u5E38");
+    process.exit(1);
+  }
+  const groups = res.data.mediaAccountGroup;
+  const flat = groups.flatMap((g) => g.list);
+  if (flat.length === 0) {
+    console.log("\n\u5F53\u524D\u6CA1\u6709\u53EF\u7528\u7684\u5A92\u4F53\u8D26\u53F7\u3002");
+    return;
+  }
+  console.log(`
+\u627E\u5230 ${flat.length} \u4E2A\u5A92\u4F53\u8D26\u53F7\uFF08${options.domestic ? "\u5185\u8D38" : "\u5916\u8D38"}\uFF09\uFF1A
+`);
+  const grouped = {};
+  for (const a of flat) {
+    (grouped[a.mediaAccountType] ??= []).push(a);
+  }
+  for (const [platform, accounts] of Object.entries(grouped)) {
+    console.log(`\u2500\u2500 ${platform} (${accounts.length})`);
+    for (const a of accounts) {
+      const expiry = a.tokenTime ? `  \u5230\u671F: ${a.tokenTime.slice(0, 10)}` : "";
+      console.log(`   ${a.mediaCustomerName}${expiry}`);
+    }
+  }
+  console.log("\n\u2500\u2500 \u5B8C\u6574 JSON\uFF08\u7528\u4E8E\u586B\u5199 publish-config.json \u7684 accounts \u5B57\u6BB5\uFF09\uFF1A\n");
+  console.log(
+    JSON.stringify(
+      flat.map((a) => ({
+        entityId: a.entityId,
+        mediaAccountType: a.mediaAccountType,
+        mediaCustomerId: a.mediaCustomerId,
+        mediaCustomerName: a.mediaCustomerName,
+        // externalMediaAccountTokenId 默认脱敏，防止令牌标识泄漏到终端日志
+        externalMediaAccountTokenId: options.verbose ? a.externalMediaAccountTokenId : redact(a.externalMediaAccountTokenId)
+      })),
+      null,
+      2
+    )
+  );
+  if (!options.verbose) {
+    console.log("\n\u26A0\uFE0F  \u4EE4\u724C\u6807\u8BC6\u5DF2\u8131\u654F\u3002\u5982\u9700\u5B8C\u6574\u503C\uFF0C\u8BF7\u52A0 --verbose \u53C2\u6570\u3002");
+  }
+  console.log("\u63D0\u793A\uFF1A\u4ECE\u4E0A\u65B9\u9009\u53D6\u6240\u9700\u8D26\u53F7\u5BF9\u8C61\uFF0C\u7C98\u8D34\u5230 publish-config.json \u7684 accounts \u6570\u7EC4\u4E2D\u3002");
+}
+
+// src/commands/publish.ts
+import * as fs6 from "fs";
+import * as path6 from "path";
+function nowUtc() {
+  return (/* @__PURE__ */ new Date()).toISOString().replace("T", " ").slice(0, 19);
+}
+var guid = randomUUID;
+function defaultTaskName() {
+  const d = /* @__PURE__ */ new Date();
+  const pad = (n) => String(n).padStart(2, "0");
+  return `\u6279\u91CF\u53D1\u5E03 ${d.getFullYear()}-${pad(d.getMonth() + 1)}-${pad(d.getDate())} ${pad(d.getHours())}:${pad(d.getMinutes())}`;
+}
+function buildPublishTitle(item, mediaType, override, isImagePost = false) {
+  const title = override?.title ?? item.title ?? "";
+  const topics = override?.topics ?? item.topics ?? [];
+  const rawDesc = override?.description ?? item.description ?? "";
+  let description;
+  if (isImagePost) {
+    description = rawDesc;
+  } else {
+    description = ["YouTube", "Facebook"].includes(mediaType) ? rawDesc || title : title;
+  }
+  const topicPosition = ["YouTube", "Facebook"].includes(mediaType) ? 4 : 2;
+  return { title, description, topics, topicPosition };
+}
+function buildImagePayload(img, currentUserId) {
+  return {
+    imageUrl: img.imageUrl,
+    imageName: img.imageName,
+    sourceImageId: img.sourceImageId ?? void 0,
+    imageCreateUserId: img.imageCreateUserId ?? currentUserId ?? void 0,
+    imageSourceType: img.imageSourceType,
+    belongTo: -1,
+    belongToId: null,
+    replica: false,
+    size: img.size ?? 0,
+    width: img.width ?? 0,
+    height: img.height ?? 0
+  };
+}
+function buildCoverPayload(cover, videoId, currentUserId) {
+  return {
+    imageUrl: cover.imageUrl,
+    imageName: cover.imageName,
+    imageSourceType: cover.imageSourceType,
+    sourceImageId: cover.sourceImageId ?? videoId,
+    imageCreateUserId: cover.imageCreateUserId ?? currentUserId ?? void 0,
+    // belongTo / belongToId：CLI 无法获取组织信息，统一与前端素材库视频行为保持一致
+    belongTo: -1,
+    belongToId: null,
+    replica: false,
+    coverTsp: 0,
+    compositeCover: false,
+    size: cover.size ?? 0,
+    width: cover.width ?? 0,
+    height: cover.height ?? 0
+  };
+}
+function toSendType(mode) {
+  return mode === "scheduled" ? 2 : 1;
+}
+function finalizeChannels(channels, sentKey) {
+  for (const ch of Object.values(channels)) {
+    let chSendType = 1;
+    let chPublishAt = null;
+    for (const acc of ch.mediaAccountInfos) {
+      const items = acc[sentKey] ?? [];
+      for (const v of items) {
+        if (v.sendType <= 1) continue;
+        if (v.sendType > chSendType) {
+          chSendType = v.sendType;
+          chPublishAt = v.publishAt;
+        } else if (v.sendType === chSendType && v.publishAt && (!chPublishAt || new Date(v.publishAt) < new Date(chPublishAt))) {
+          chPublishAt = v.publishAt;
+        }
+      }
+    }
+    ch.videoType = chSendType > 1 ? 2 : 1;
+    ch.publishAts = chSendType > 1 && chPublishAt ? [chPublishAt] : [];
+  }
+}
+function buildVideoChannels(videos, currentUserId) {
+  const channels = {};
+  const contents = [];
+  const errorList = [];
+  let globalSendType = 1;
+  for (const item of videos) {
+    if (!item.accounts?.length) errorList.push(`\u89C6\u9891 "${item.videoName}" \u672A\u8BBE\u7F6E\u8D26\u53F7`);
+    if (!item.title) errorList.push(`\u89C6\u9891 "${item.videoName}" \u672A\u586B\u5199\u6807\u9898`);
+    if (!item.cover?.imageUrl) errorList.push(`\u89C6\u9891 "${item.videoName}" \u5C01\u9762\u53C2\u6570\u7F3A\u5931`);
+    let itemSendType = 1;
+    for (const account of item.accounts ?? []) {
+      const mediaType = account.mediaAccountType;
+      const sendType = toSendType(item.publishMode);
+      const publishAtUtc = item.publishAt ? new Date(item.publishAt).toISOString() : null;
+      if (item.publishMode === "scheduled" && !item.publishAt) {
+        errorList.push(`\u89C6\u9891 "${item.videoName}" \u8BBE\u7F6E\u4E86\u5B9A\u65F6\u53D1\u5E03\u4F46\u672A\u586B\u5199 publishAt`);
+      }
+      if (sendType > itemSendType) itemSendType = sendType;
+      const override = item.platformOverrides?.[mediaType];
+      const publishTitle = buildPublishTitle(item, mediaType, override);
+      const youTubeVideoStatus = mediaType === "YouTube" ? {
+        privacyStatus: item.youtubePrivacy ?? "public",
+        instantPremiere: false
+      } : null;
+      const toBeSent = {
+        videoId: item.videoId,
+        sendType,
+        publishAt: publishAtUtc,
+        publishTitle,
+        publishCover: buildCoverPayload(item.cover, item.videoId, currentUserId),
+        youTubeVideoStatus
+      };
+      const accountInfo = {
+        mediaAccountId: account.entityId,
+        mediaCustomerId: account.mediaCustomerId,
+        mediaCustomerName: account.mediaCustomerName,
+        externalMediaAccountTokenId: account.externalMediaAccountTokenId
+      };
+      if (channels[mediaType]) {
+        const existing = channels[mediaType].mediaAccountInfos.find(
+          (i) => i.mediaAccountId === account.entityId
+        );
+        if (existing) {
+          existing.videoToBeSent.push(toBeSent);
+        } else {
+          channels[mediaType].mediaAccountInfos.push({ ...accountInfo, videoToBeSent: [toBeSent] });
+        }
+      } else {
+        channels[mediaType] = {
+          mediaType,
+          mediaAccountInfos: [{ ...accountInfo, videoToBeSent: [toBeSent] }]
+        };
+      }
+    }
+    if (itemSendType > globalSendType) globalSendType = itemSendType;
+    contents.push({
+      videoId: item.videoId,
+      // 素材库视频：sourceVideoId 与 videoId 相同；非素材库：null
+      sourceVideoId: item.isMaterialCenter ? item.videoId : null,
+      videoUrl: item.videoUrl,
+      videoName: item.videoName,
+      width: item.width ?? 0,
+      height: item.height ?? 0,
+      videoSize: item.videoSize ?? 0,
+      duration: item.duration ?? 0,
+      // 实际请求中 videoMd5 为 null（非空字符串）
+      videoMd5: item.videoMd5 ?? null,
+      isMaterialCenter: item.isMaterialCenter ?? false,
+      // videoCreateUserId：优先取配置里的值，回落到当前 token 的 sub（上传者 ID）
+      videoCreateUserId: item.videoCreateUserId ?? currentUserId,
+      // belongTo/-ToId：CLI 无组织上下文，统一 -1/null（与前端素材库视频行为一致）
+      belongTo: -1,
+      belongToId: null,
+      replica: false,
+      // mediaAccountIds：后端用于建立视频与账号的关联，缺少此字段会导致发布失败
+      mediaAccountIds: (item.accounts ?? []).map((a) => a.entityId),
+      // POI 地理位置：默认 poiWay=3（不使用 POI）
+      poiWay: 3,
+      poiId: "",
+      poiName: "",
+      defaultTitle: {
+        title: item.title,
+        description: item.description ?? "",
+        topicPosition: 2,
+        topics: item.topics ?? []
+      },
+      // defaultCover 补全所有后端字段（与 publishCover 保持结构一致）
+      defaultCover: buildCoverPayload(item.cover, item.videoId, currentUserId)
+    });
+  }
+  finalizeChannels(channels, "videoToBeSent");
+  return { channels, videoType: globalSendType, contents, errorList };
+}
+function buildImageChannels(posts, currentUserId) {
+  const channels = {};
+  const contents = [];
+  const errorList = [];
+  let globalSendType = 1;
+  const validPosts = posts.filter(
+    (item) => item.images?.some((img) => img.imageUrl) || (item.title ?? "").trim()
+  );
+  if (validPosts.length === 0) {
+    errorList.push("\u6CA1\u6709\u53EF\u53D1\u5E03\u7684\u5E16\u5B50\uFF0C\u8BF7\u81F3\u5C11\u4E3A\u6BCF\u4E2A\u5E16\u5B50\u6DFB\u52A0\u56FE\u7247\u6216\u6587\u6848");
+    return { channels, videoType: 1, contents, errorList };
+  }
+  for (const item of validPosts) {
+    const vGuid = item.vGuid ?? guid();
+    if (!item.accounts?.length) errorList.push("\u56FE\u6587\u5E16\u5B50\u672A\u8BBE\u7F6E\u8D26\u53F7");
+    let itemSendType = 1;
+    for (const account of item.accounts ?? []) {
+      const mediaType = account.mediaAccountType;
+      const sendType = toSendType(item.publishMode);
+      const publishAtUtc = item.publishAt ? new Date(item.publishAt).toISOString() : null;
+      if (item.publishMode === "scheduled" && !item.publishAt) {
+        errorList.push("\u56FE\u6587\u5E16\u5B50\u8BBE\u7F6E\u4E86\u5B9A\u65F6\u53D1\u5E03\u4F46\u672A\u586B\u5199 publishAt");
+      }
+      if (sendType > itemSendType) itemSendType = sendType;
+      const override = item.platformOverrides?.[mediaType];
+      const publishTitle = buildPublishTitle(item, mediaType, override, true);
+      const toBeSent = {
+        imageGroupId: vGuid,
+        sendType,
+        publishAt: publishAtUtc,
+        publishTitle
+      };
+      const accountInfo = {
+        mediaAccountId: account.entityId,
+        mediaCustomerId: account.mediaCustomerId,
+        mediaCustomerName: account.mediaCustomerName,
+        externalMediaAccountTokenId: account.externalMediaAccountTokenId
+      };
+      if (channels[mediaType]) {
+        const existing = channels[mediaType].mediaAccountInfos.find(
+          (i) => i.mediaAccountId === account.entityId
+        );
+        if (existing) {
+          existing.imageTextToBeSent.push(toBeSent);
+        } else {
+          channels[mediaType].mediaAccountInfos.push({ ...accountInfo, imageTextToBeSent: [toBeSent] });
+        }
+      } else {
+        channels[mediaType] = {
+          mediaType,
+          mediaAccountInfos: [{ ...accountInfo, imageTextToBeSent: [toBeSent] }]
+        };
+      }
+    }
+    if (itemSendType > globalSendType) globalSendType = itemSendType;
+    contents.push({
+      imageGroupId: vGuid,
+      // 补全每张图片的后端必填字段（belongTo、replica、imageCreateUserId 等）
+      images: (item.images ?? []).map((img) => buildImagePayload(img, currentUserId)),
+      mediaAccountIds: (item.accounts ?? []).map((a) => a.entityId)
+    });
+  }
+  finalizeChannels(channels, "imageTextToBeSent");
+  return { channels, videoType: globalSendType, contents, errorList };
+}
+async function runPublish(options) {
+  const configPath = path6.resolve(options.config);
+  if (!fs6.existsSync(configPath)) {
+    console.error(`
+\u274C \u914D\u7F6E\u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${configPath}`);
+    process.exit(1);
+  }
+  let input;
+  try {
+    input = JSON.parse(fs6.readFileSync(configPath, "utf8"));
+  } catch (e) {
+    console.error(`
+\u274C \u914D\u7F6E\u6587\u4EF6\u89E3\u6790\u5931\u8D25\uFF1A${e.message}`);
+    process.exit(1);
+  }
+  const config = loadConfig(options.token);
+  const jwtClaims = decodeJwtClaims(config.authToken);
+  const currentUserId = isUUID(jwtClaims?.sub) ? jwtClaims.sub : null;
+  const currentDid = isUUID(jwtClaims?.did) ? jwtClaims.did : null;
+  const now = nowUtc();
+  const uniqueActionId = guid();
+  const taskName = input.taskName ?? defaultTaskName();
+  const isDomestic = input.isDomesticTrade ?? false;
+  const csoPlatformType = isDomestic ? 1 : 2;
+  let channels;
+  let videoType;
+  let contents;
+  let errorList;
+  if (input.contentType === 1) {
+    if (!input.videos?.length) {
+      console.error("\n\u274C contentType=1\uFF08\u89C6\u9891\uFF09\u65F6\uFF0Cvideos \u6570\u7EC4\u4E0D\u80FD\u4E3A\u7A7A");
+      process.exit(1);
+    }
+    ({ channels, videoType, contents, errorList } = buildVideoChannels(input.videos, currentUserId));
+  } else {
+    if (!input.posts?.length) {
+      console.error("\n\u274C contentType=2\uFF08\u56FE\u6587\uFF09\u65F6\uFF0Cposts \u6570\u7EC4\u4E0D\u80FD\u4E3A\u7A7A");
+      process.exit(1);
+    }
+    ({ channels, videoType, contents, errorList } = buildImageChannels(input.posts, currentUserId));
+  }
+  if (errorList.length > 0) {
+    console.error("\n\u274C \u53C2\u6570\u6821\u9A8C\u5931\u8D25\uFF0C\u8BF7\u4FEE\u6B63\u4EE5\u4E0B\u95EE\u9898\u540E\u91CD\u8BD5\uFF1A");
+    errorList.forEach((e) => console.error(`  \xB7 ${e}`));
+    process.exit(1);
+  }
+  const body = {
+    contents: JSON.stringify(contents),
+    channels: Object.values(channels),
+    id: null,
+    draftsId: null,
+    uniqueActionId,
+    taskName,
+    failureNotification: input.failureNotification ?? false,
+    contentType: input.contentType,
+    videoType,
+    csoPlatformType,
+    publishTimeSetting: {},
+    actionStartTime: now,
+    actionStopTime: now,
+    version: "v3"
+  };
+  if (options.dryRun) {
+    console.log("\n\u2705 [dry-run] \u53D1\u5E03\u53C2\u6570\u9884\u89C8\uFF08\u672A\u5B9E\u9645\u63D0\u4EA4\uFF09\uFF1A\n");
+    if (options.verbose) {
+      console.log(JSON.stringify(body, null, 2));
+    } else {
+      const redacted = {
+        ...body,
+        uniqueActionId: "[\u5DF2\u9690\u85CF\uFF0C\u52A0 --verbose \u67E5\u770B]",
+        channels: body.channels.map((ch) => ({
+          ...ch,
+          mediaAccountInfos: ch.mediaAccountInfos.map((acc) => ({
+            ...acc,
+            externalMediaAccountTokenId: `${acc.externalMediaAccountTokenId.slice(0, 4)}****`
+          }))
+        }))
+      };
+      console.log(JSON.stringify(redacted, null, 2));
+      console.log("\n\u26A0\uFE0F  \u90E8\u5206\u5B57\u6BB5\u5DF2\u8131\u654F\uFF0C\u52A0 --verbose \u53C2\u6570\u67E5\u770B\u5B8C\u6574\u8BF7\u6C42\u4F53\u3002");
+    }
+    return;
+  }
+  console.log(`
+\u{1F4E4} \u6B63\u5728\u63D0\u4EA4\u53D1\u5E03\u4EFB\u52A1\uFF1A"${taskName}" \u2026`);
+  let res;
+  try {
+    res = await apiFetch2(
+      `${config.csoBaseUrl}/cso/v1/video/create`,
+      config,
+      { method: "POST", body: JSON.stringify(body) },
+      options.verbose
+    );
+  } catch (e) {
+    const msg = e.message;
+    console.error(`
+\u274C \u8BF7\u6C42\u5931\u8D25\uFF1A${msg}`);
+    if (!options.verbose) console.error("   \u52A0 --verbose \u53C2\u6570\u53EF\u67E5\u770B\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F");
+    process.exit(1);
+  }
+  if (res.code === 1) {
+    console.log(`
+\u2705 \u53D1\u5E03\u4EFB\u52A1\u63D0\u4EA4\u6210\u529F\uFF01`);
+    console.log(`   \u4EFB\u52A1\u540D\uFF1A${taskName}`);
+    console.log(`   uniqueActionId\uFF1A${uniqueActionId}`);
+    console.log(`   \u53EF\u5728 CSO \u4EFB\u52A1\u5217\u8868\uFF08/task\uFF09\u67E5\u770B\u8FDB\u5EA6\u3002`);
+  } else {
+    console.error(`
+\u274C \u53D1\u5E03\u5931\u8D25\uFF1A${res.message ?? JSON.stringify(res)}`);
+    process.exit(1);
+  }
+}
+
+// src/commands/upload.ts
+import * as fs7 from "fs";
+import * as os5 from "os";
+import * as path7 from "path";
+import { imageSize } from "image-size";
+import { ContainerClient } from "@azure/storage-blob";
+var SENSITIVE_PATH_PREFIXES = [
+  path7.join(os5.homedir(), ".siluzan"),
+  // 本工具配置（含 authToken）
+  path7.join(os5.homedir(), ".ssh"),
+  // SSH 私钥
+  path7.join(os5.homedir(), ".aws"),
+  // AWS 凭证
+  path7.join(os5.homedir(), ".config"),
+  // 各类应用配置
+  path7.join(os5.homedir(), ".gnupg"),
+  // GPG 私钥
+  path7.join(os5.homedir(), ".npmrc"),
+  // npm Token
+  path7.join(os5.homedir(), ".docker"),
+  // Docker 凭证
+  path7.join(os5.homedir(), ".kube"),
+  // Kubernetes 配置
+  path7.join(os5.homedir(), ".pypirc"),
+  // PyPI Token
+  path7.join(os5.homedir(), ".gitconfig"),
+  path7.join(os5.homedir(), ".env")
+  // 常用本地环境变量文件
+];
+var SENSITIVE_ABSOLUTE_PATHS = [
+  "/etc/passwd",
+  "/etc/shadow",
+  "/etc/hosts"
+];
+function validateUploadPath(resolved) {
+  const normalized = resolved.toLowerCase();
+  for (const prefix of SENSITIVE_PATH_PREFIXES) {
+    if (normalized === prefix.toLowerCase() || normalized.startsWith(prefix.toLowerCase() + path7.sep)) {
+      return `\u7981\u6B62\u4E0A\u4F20\u654F\u611F\u76EE\u5F55\u4E0B\u7684\u6587\u4EF6\uFF1A${prefix}`;
+    }
+  }
+  for (const abs of SENSITIVE_ABSOLUTE_PATHS) {
+    if (normalized === abs.toLowerCase()) {
+      return `\u7981\u6B62\u4E0A\u4F20\u7CFB\u7EDF\u654F\u611F\u6587\u4EF6\uFF1A${abs}`;
+    }
+  }
+  const base = path7.basename(resolved).toLowerCase();
+  if (base === ".env" || base.startsWith(".env.")) {
+    return `\u7981\u6B62\u4E0A\u4F20\u73AF\u5883\u53D8\u91CF\u6587\u4EF6\uFF08${path7.basename(resolved)}\uFF09\uFF0C\u53EF\u80FD\u5305\u542B\u5BC6\u94A5`;
+  }
+  return null;
+}
+var DEFAULT_FOLDER_ID = "77777777-7777-7777-7777-777777777777";
+var BLOCK_SIZE = 2 * 1024 * 1024;
+var VIDEO_EXTS = [
+  ".mp4",
+  ".mov",
+  ".avi",
+  ".mkv",
+  ".flv",
+  ".f4v",
+  ".rmvb",
+  ".rm",
+  ".vob",
+  ".wmv",
+  ".3gp",
+  ".asf",
+  ".mpeg",
+  ".m4v",
+  ".mpg"
+];
+var IMAGE_EXTS = [".jpg", ".jpeg", ".png", ".gif", ".arw"];
+function detectKind(filePath) {
+  const ext = path7.extname(filePath).toLowerCase();
+  if (VIDEO_EXTS.includes(ext)) return "video";
+  if (IMAGE_EXTS.includes(ext)) return "image";
+  throw new Error(
+    `\u65E0\u6CD5\u8BC6\u522B\u6587\u4EF6\u7C7B\u578B\uFF1A${ext}\u3002
+   \u89C6\u9891\uFF1A${VIDEO_EXTS.join(", ")}
+   \u56FE\u7247\uFF1A${IMAGE_EXTS.join(", ")}`
+  );
+}
+function getMimeType(filePath) {
+  const map = {
+    ".mp4": "video/mp4",
+    ".mov": "video/quicktime",
+    ".avi": "video/avi",
+    ".mkv": "video/x-matroska",
+    ".flv": "video/x-flv",
+    ".wmv": "video/x-ms-wmv",
+    ".3gp": "video/3gpp",
+    ".jpg": "image/jpeg",
+    ".jpeg": "image/jpeg",
+    ".png": "image/png",
+    ".gif": "image/gif"
+  };
+  return map[path7.extname(filePath).toLowerCase()] ?? "application/octet-stream";
+}
+var guid2 = randomUUID;
+async function generateSas(config, verbose = false) {
+  const url = `${config.apiBaseUrl}/cutapi/v1/material/generateuploadsas?account=cutapi&expirationMinutes=120`;
+  const res = await apiFetch2(url, config, {}, verbose);
+  if (res.code !== 1 || !res.data) {
+    throw new Error("\u7533\u8BF7\u4E0A\u4F20\u51ED\u8BC1\u5931\u8D25\uFF0C\u670D\u52A1\u7AEF\u8FD4\u56DE\u5F02\u5E38");
+  }
+  return res.data;
+}
+async function uploadToAzure(filePath, sas, onProgress) {
+  const ext = path7.extname(filePath);
+  const blobName = `${guid2()}${ext}`;
+  const containerClient = new ContainerClient(sas.sasUri);
+  const blockBlobClient = containerClient.getBlockBlobClient(blobName);
+  const fileSize = fs7.statSync(filePath).size;
+  await blockBlobClient.uploadFile(filePath, {
+    blockSize: BLOCK_SIZE,
+    blobHTTPHeaders: { blobContentType: getMimeType(filePath) },
+    onProgress: (ev) => {
+      if (onProgress && fileSize > 0) {
+        onProgress(Math.round(ev.loadedBytes / fileSize * 100));
+      }
+    }
+  });
+  const resourceUrl = `${sas.containerUri}/${blobName}`;
+  return { resourceUrl, blobName };
+}
+async function notifyUploaded(config, body, verbose = false) {
+  const url = `${config.csoBaseUrl}/cutapi/v1/material/uploadednotify`;
+  const res = await apiFetch2(url, config, {
+    method: "POST",
+    body: JSON.stringify(body)
+  }, verbose);
+  if (res.code !== 1 || !res.data?.id) {
+    const detail = verbose ? `\uFF1A${JSON.stringify(res)}` : "";
+    throw new Error(`\u7D20\u6750\u6CE8\u518C\u5931\u8D25${detail}`);
+  }
+  return res.data.id;
+}
+async function fetchMaterialInfo(config, id, verbose = false) {
+  try {
+    const url = `${config.csoBaseUrl}/cutapi/v1/material/${id}`;
+    const res = await apiFetch2(url, config, {}, verbose);
+    return res.data ?? {};
+  } catch {
+    return {};
+  }
+}
+function readMp4Duration(filePath) {
+  try {
+    const fileSize = fs7.statSync(filePath).size;
+    const chunkSize = Math.min(fileSize, 256 * 1024);
+    const bufEnd = Buffer.alloc(chunkSize);
+    const fdEnd = fs7.openSync(filePath, "r");
+    fs7.readSync(fdEnd, bufEnd, 0, chunkSize, fileSize - chunkSize);
+    fs7.closeSync(fdEnd);
+    const bufStart = Buffer.alloc(chunkSize);
+    const fdStart = fs7.openSync(filePath, "r");
+    fs7.readSync(fdStart, bufStart, 0, chunkSize, 0);
+    fs7.closeSync(fdStart);
+    const durationSec = parseMvhdFromBuffer(bufEnd) ?? parseMvhdFromBuffer(bufStart);
+    if (durationSec === null || durationSec <= 0) return null;
+    const h = Math.floor(durationSec / 3600);
+    const m = Math.floor(durationSec % 3600 / 60);
+    const s = Math.floor(durationSec % 60);
+    const ms = Math.round(durationSec % 1 * 1e3);
+    return `${String(h).padStart(2, "0")}:${String(m).padStart(2, "0")}:${String(s).padStart(2, "0")}.${String(ms).padStart(3, "0")}`;
+  } catch {
+    return null;
+  }
+}
+function parseMvhdFromBuffer(buf) {
+  const marker = Buffer.from("6d766864", "hex");
+  const idx = buf.lastIndexOf(marker);
+  if (idx < 4) return null;
+  const dataStart = idx + 4;
+  const version = buf[dataStart];
+  let timescale;
+  let durationVal;
+  if (version === 0) {
+    timescale = buf.readUInt32BE(dataStart + 1 + 3 + 4 + 4);
+    durationVal = buf.readUInt32BE(dataStart + 1 + 3 + 4 + 4 + 4);
+  } else if (version === 1) {
+    timescale = buf.readUInt32BE(dataStart + 1 + 3 + 8 + 8);
+    durationVal = buf.readUInt32BE(dataStart + 1 + 3 + 8 + 8 + 4 + 4);
+  } else {
+    return null;
+  }
+  if (timescale === 0) return null;
+  return durationVal / timescale;
+}
+function readImageDimensions(filePath) {
+  try {
+    const buf = fs7.readFileSync(filePath);
+    const dim = imageSize(buf);
+    return { width: dim.width, height: dim.height, format: (dim.type ?? "").toUpperCase() };
+  } catch {
+    return { width: 0, height: 0 };
+  }
+}
+async function uploadImageFile(filePath, config, verbose = false) {
+  const fileName = path7.basename(filePath);
+  const fileSize = fs7.statSync(filePath).size;
+  const format = path7.extname(filePath).replace(".", "").toUpperCase();
+  const sas = await generateSas(config, verbose);
+  const { resourceUrl } = await uploadToAzure(filePath, sas, void 0);
+  const dim = readImageDimensions(filePath);
+  const materialId = await notifyUploaded(config, {
+    folderId: DEFAULT_FOLDER_ID,
+    name: fileName,
+    url: resourceUrl,
+    fileSize,
+    type: 1,
+    source: 1,
+    blobAccount: sas.accountName,
+    blobContainer: sas.containerName,
+    format,
+    image: dim
+  }, verbose);
+  const matInfo = await fetchMaterialInfo(config, materialId, verbose);
+  return {
+    resourceUrl,
+    materialId,
+    belongToId: matInfo?.belongToId,
+    belongTo: matInfo?.belongTo,
+    userId: matInfo?.userId
+  };
+}
+async function runUpload(options) {
+  const filePath = path7.resolve(options.file);
+  if (!fs7.existsSync(filePath)) {
+    console.error(`
+\u274C \u6587\u4EF6\u4E0D\u5B58\u5728\uFF1A${filePath}`);
+    process.exit(1);
+  }
+  const pathErr = validateUploadPath(filePath);
+  if (pathErr) {
+    console.error(`
+\u274C ${pathErr}`);
+    process.exit(1);
+  }
+  const kind = options.kind ?? detectKind(filePath);
+  const config = loadConfig(options.token);
+  const fileName = path7.basename(filePath);
+  const fileSize = fs7.statSync(filePath).size;
+  const format = path7.extname(filePath).replace(".", "").toUpperCase();
+  if (kind === "video" && !options.cover) {
+    console.error("\n\u274C \u4E0A\u4F20\u89C6\u9891\u65F6\u5FC5\u987B\u901A\u8FC7 --cover <\u56FE\u7247\u8DEF\u5F84> \u6307\u5B9A\u5C01\u9762\u56FE\u7247");
+    process.exit(1);
+  }
+  console.log(`
+\u{1F4C1} \u51C6\u5907\u4E0A\u4F20${kind === "video" ? "\u89C6\u9891" : "\u56FE\u7247"}\uFF1A${fileName}`);
+  console.log(`   \u5927\u5C0F\uFF1A${(fileSize / 1024 / 1024).toFixed(2)} MB`);
+  let thumbUrl = "";
+  let coverMaterialId = "";
+  let coverBelongToId;
+  let coverBelongTo;
+  let coverUserId;
+  const { verbose = false } = options;
+  if (kind === "video" && options.cover) {
+    const coverPath = path7.resolve(options.cover);
+    if (!fs7.existsSync(coverPath)) {
+      console.error(`
+\u274C \u5C01\u9762\u56FE\u7247\u4E0D\u5B58\u5728\uFF1A${coverPath}`);
+      process.exit(1);
+    }
+    const coverPathErr = validateUploadPath(coverPath);
+    if (coverPathErr) {
+      console.error(`
+\u274C \u5C01\u9762\u8DEF\u5F84\u4E0D\u5408\u6CD5\uFF1A${coverPathErr}`);
+      process.exit(1);
+    }
+    console.log(`
+0\uFE0F\u20E3  \u4E0A\u4F20\u5C01\u9762\u56FE\u7247\uFF1A${path7.basename(coverPath)} \u2026`);
+    try {
+      const coverResult = await uploadImageFile(coverPath, config, verbose);
+      thumbUrl = coverResult.resourceUrl;
+      coverMaterialId = coverResult.materialId;
+      coverBelongToId = coverResult.belongToId;
+      coverBelongTo = coverResult.belongTo;
+      coverUserId = coverResult.userId;
+      if (verbose) console.log(`   \u5C01\u9762 URL\uFF1A${thumbUrl}`);
+      else console.log(`   \u5C01\u9762\u5DF2\u4E0A\u4F20\uFF08\u7D20\u6750 ID\uFF1A${coverMaterialId}\uFF09`);
+    } catch (e) {
+      const msg = e.message;
+      console.error(`
+\u274C \u5C01\u9762\u4E0A\u4F20\u5931\u8D25\uFF1A${msg}`);
+      if (!verbose) console.error("   \u52A0 --verbose \u53C2\u6570\u53EF\u67E5\u770B\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F");
+      process.exit(1);
+    }
+  }
+  console.log("\n1\uFE0F\u20E3  \u7533\u8BF7\u4E0A\u4F20\u51ED\u8BC1 \u2026");
+  let sas;
+  try {
+    sas = await generateSas(config, verbose);
+  } catch (e) {
+    const msg = e.message;
+    console.error(`
+\u274C \u83B7\u53D6\u4E0A\u4F20\u51ED\u8BC1\u5931\u8D25\uFF1A${msg}`);
+    if (msg.includes("401") || msg.includes("403")) {
+      console.error("   Token \u65E0\u6548\u6216\u5DF2\u8FC7\u671F\uFF0C\u8BF7\u91CD\u65B0\u914D\u7F6E\uFF1A\n   siluzan-cso config set --token <\u4F60\u7684 token>");
+    } else if (!verbose) {
+      console.error("   \u52A0 --verbose \u53C2\u6570\u53EF\u67E5\u770B\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F");
+    }
+    process.exit(1);
+  }
+  console.log("2\uFE0F\u20E3  \u4E0A\u4F20\u5230\u4E91\u5B58\u50A8 \u2026");
+  let resourceUrl;
+  let lastPercent = 0;
+  try {
+    ({ resourceUrl } = await uploadToAzure(filePath, sas, (pct) => {
+      if (pct - lastPercent >= 10 || pct === 100) {
+        process.stdout.write(`   \u8FDB\u5EA6\uFF1A${pct}%\r`);
+        lastPercent = pct;
+      }
+    }));
+  } catch (e) {
+    console.error(`
+
+\u274C \u4E0A\u4F20\u5931\u8D25\uFF1A${e.message}`);
+    process.exit(1);
+  }
+  console.log("   \u8FDB\u5EA6\uFF1A100% \u2713         ");
+  console.log("3\uFE0F\u20E3  \u6CE8\u518C\u7D20\u6750 \u2026");
+  const imageDim = kind === "image" ? readImageDimensions(filePath) : void 0;
+  let materialId;
+  try {
+    materialId = await notifyUploaded(config, {
+      folderId: DEFAULT_FOLDER_ID,
+      name: fileName,
+      url: resourceUrl,
+      fileSize,
+      type: kind === "video" ? 3 : 1,
+      // 1=图片 3=视频（与前端 fileType() 一致）
+      source: 1,
+      blobAccount: sas.accountName,
+      blobContainer: sas.containerName,
+      format,
+      ...kind === "image" ? { image: imageDim } : {},
+      ...kind === "video" ? (() => {
+        const dur = readMp4Duration(filePath);
+        if (!dur) throw new Error("\u65E0\u6CD5\u8BFB\u53D6\u89C6\u9891\u65F6\u957F\uFF0C\u8BF7\u786E\u8BA4\u6587\u4EF6\u4E3A\u6709\u6548\u7684 MP4 \u683C\u5F0F");
+        return { video: {}, audio: {}, duration: dur, overallBitRate: 0, thumbUrl };
+      })() : {}
+    }, verbose);
+  } catch (e) {
+    const msg = e.message;
+    console.error(`
+\u274C \u6CE8\u518C\u5931\u8D25\uFF1A${msg}`);
+    if (!verbose) console.error("   \u52A0 --verbose \u53C2\u6570\u53EF\u67E5\u770B\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F");
+    process.exit(1);
+  }
+  console.log("4\uFE0F\u20E3  \u83B7\u53D6\u7D20\u6750\u4FE1\u606F \u2026");
+  const matInfo = await fetchMaterialInfo(config, materialId, verbose);
+  const previewSas = matInfo?.previewSas ?? "";
+  const coverUrl = matInfo?.thumbUrl && previewSas ? `${matInfo.thumbUrl}?${previewSas}` : thumbUrl;
+  const accessUrl = previewSas ? `${resourceUrl}?${previewSas}` : `${resourceUrl}?${sas.sasToken}`;
+  console.log(`
+\u2705 \u4E0A\u4F20\u6210\u529F\uFF01`);
+  console.log(`   \u7D20\u6750 ID  : ${materialId}`);
+  if (kind === "video") {
+    const videoConfig = {
+      videoId: materialId,
+      // verbose 模式输出含签名 URL，普通模式只输出不含签名的基础 URL
+      videoUrl: verbose ? accessUrl : resourceUrl,
+      videoName: fileName,
+      isMaterialCenter: true,
+      ...matInfo?.video ? { width: matInfo.video.width, height: matInfo.video.height } : {},
+      ...matInfo?.duration ? { duration: matInfo.duration } : {},
+      cover: {
+        imageUrl: verbose ? coverUrl || "\uFF08\u8BF7\u624B\u52A8\u586B\u5199\u5C01\u9762\u56FE\u7247 URL\uFF09" : thumbUrl,
+        imageName: options.cover ? path7.basename(options.cover) : "cover.jpg",
+        imageSourceType: 1,
+        sourceImageId: coverMaterialId || void 0,
+        imageCreateUserId: coverUserId || void 0,
+        belongTo: coverBelongTo !== void 0 ? coverBelongTo : -1,
+        belongToId: coverBelongToId || null
+      }
+    };
+    console.log("\n\u2500\u2500 \u5C06\u4EE5\u4E0B\u5185\u5BB9\u7C98\u8D34\u5230 publish-config.json \u7684 videos[] \u6761\u76EE\uFF1A\n");
+    console.log(JSON.stringify(videoConfig, null, 2));
+  } else {
+    const imageConfig = {
+      // 必须使用带 SAS 签名的 URL，后端用此地址拉取图片内容
+      imageUrl: accessUrl,
+      imageName: fileName,
+      // 素材中心图片固定为 2（与前端 createImageByMaterial 保持一致）
+      imageSourceType: 2,
+      sourceImageId: materialId,
+      size: fileSize,
+      ...matInfo?.image ? { width: matInfo.image.width, height: matInfo.image.height } : {}
+    };
+    console.log("\n\u2500\u2500 \u5C06\u4EE5\u4E0B\u5185\u5BB9\u7C98\u8D34\u5230 publish-config.json \u7684 posts[].images[] \u6216 cover\uFF1A\n");
+    console.log(JSON.stringify(imageConfig, null, 2));
+  }
+}
+
+// src/commands/config.ts
+import * as fs8 from "fs";
+function cmdConfigShow() {
+  const shared = readSharedConfig();
+  if (!shared.authToken) {
+    console.log(
+      "\n\u5C1A\u672A\u914D\u7F6E Token\u3002\n\n   \u5982\u679C\u4F60\u8FD8\u6CA1\u6709 Siluzan \u8D26\u53F7\uFF0C\u8BF7\u5148\u6CE8\u518C\uFF1A\n   \u{1F449}  https://www.siluzan.com\n\n   \u6CE8\u518C\u767B\u5F55\u540E\u8FDB\u5165\u300C\u4E2A\u4EBA\u8BBE\u7F6E \u2192 API Token\u300D\u590D\u5236\u4F60\u7684 Token\uFF0C\u7136\u540E\u8FD0\u884C\uFF1A\n   siluzan-cso login\n"
+    );
+    return;
+  }
+  const apiBaseUrl = shared.apiBaseUrl ?? DEFAULT_API_BASE;
+  const csoBaseUrl = DEFAULT_CSO_BASE;
+  const apiKey = shared.apiKey ?? "";
+  console.log("\n\u5F53\u524D\u914D\u7F6E\uFF08~/.siluzan/config.json\uFF09\uFF1A");
+  console.log(`  \u6784\u5EFA\u73AF\u5883   : ${BUILD_ENV}`);
+  console.log(`  apiBaseUrl : ${apiBaseUrl}`);
+  console.log(`  csoBaseUrl : ${csoBaseUrl}`);
+  if (apiKey) {
+    console.log(`  apiKey     : ${maskSecret(apiKey)}  \u2190 \u5F53\u524D\u751F\u6548\uFF08X-Api-Key \u9274\u6743\uFF09`);
+  }
+  if (shared.authToken) {
+    const note = apiKey ? "  \uFF08\u5DF2\u88AB apiKey \u8986\u76D6\uFF09" : "  \u2190 \u5F53\u524D\u751F\u6548\uFF08Bearer \u9274\u6743\uFF09";
+    console.log(`  authToken  : ${maskSecret(shared.authToken)}${note}`);
+  }
+  console.log(`
+\u914D\u7F6E\u6587\u4EF6\u4F4D\u7F6E\uFF1A${CONFIG_FILE}`);
+  if (process.platform !== "win32") {
+    console.log("  \u26A0\uFE0F  Token \u660E\u6587\u5B58\u50A8\uFF0C\u8BF7\u786E\u4FDD\u6587\u4EF6\u6743\u9650\u4E3A 600\uFF0C\u4E14\u4E0D\u8981\u63D0\u4EA4\u81F3\u4EE3\u7801\u4ED3\u5E93\u6216\u7F51\u76D8\u3002");
+  }
+  console.log();
+}
+function cmdConfigSet(opts) {
+  if (!opts.apiKey && !opts.token && !opts.apiBase) {
+    console.error("\n\u274C \u8BF7\u81F3\u5C11\u63D0\u4F9B\u4E00\u4E2A\u8981\u66F4\u65B0\u7684\u914D\u7F6E\u9879\uFF08--api-key\u3001--token \u6216 --api-base\uFF09\n");
+    process.exit(1);
+  }
+  if (opts.apiBase) {
+    const err = validateBaseUrl(opts.apiBase);
+    if (err) {
+      console.error(`
+\u274C --api-base \u4E0D\u5408\u6CD5\uFF1A${err}
+`);
+      process.exit(1);
+    }
+    writeSharedConfig({ apiBaseUrl: opts.apiBase });
+  }
+  if (opts.apiKey) writeSharedConfig({ apiKey: opts.apiKey });
+  if (opts.token) writeSharedConfig({ authToken: opts.token });
+  console.log(`
+\u2705 \u914D\u7F6E\u5DF2\u4FDD\u5B58\u5230 ${CONFIG_FILE}`);
+  if (opts.apiKey) console.log(`   apiKey:    ${maskSecret(opts.apiKey)}`);
+  if (opts.token) console.log(`   authToken: ${maskSecret(opts.token)}`);
+  if (opts.apiBase) console.log(`   apiBaseUrl: ${opts.apiBase}`);
+  console.log("\n\u540E\u7EED\u6240\u6709\u547D\u4EE4\u81EA\u52A8\u8BFB\u53D6\u6B64\u914D\u7F6E\u3002\n");
+}
+function cmdConfigClear() {
+  clearSharedConfig();
+  console.log(`
+\u2705 authToken \u5DF2\u6E05\u7A7A\uFF08${CONFIG_FILE}\uFF09
+`);
+}
+
+// src/commands/letter.ts
+var PAGE_SIZE = 20;
+var AUTO_PAGINATE_LIMIT = 500;
+function parseContent(raw) {
+  try {
+    return JSON.parse(raw);
+  } catch {
+    return null;
+  }
+}
+function formatUtcTime(utcStr) {
+  try {
+    const dateStr = utcStr.endsWith("Z") ? utcStr : utcStr + "Z";
+    return new Date(dateStr).toLocaleString("zh-CN");
+  } catch {
+    return utcStr;
+  }
+}
+function contentToText(content) {
+  if (!content) return "[\u89E3\u6790\u5931\u8D25]";
+  if (content.message_type === "text") return content.text ?? "";
+  if (content.message_type === "image") return "[\u56FE\u7247\u6D88\u606F]";
+  if (content.message_type === "video") return "[\u89C6\u9891\u6D88\u606F]";
+  return "[\u5176\u4ED6\u6D88\u606F\uFF0C\u8BF7\u5728 CSO \u79C1\u4FE1\u9875\u9762\u67E5\u770B]";
+}
+async function postFormData(url, config, data) {
+  const form = new FormData();
+  for (const [key, value] of Object.entries(data)) {
+    form.append(key, value);
+  }
+  const res = await fetch(url, {
+    method: "POST",
+    headers: {
+      Authorization: `Bearer ${config.authToken}`
+      // 不手动设 Content-Type，fetch 会为 FormData 自动添加带 boundary 的 multipart 头
+    },
+    body: form
+  });
+  if (!res.ok) {
+    throw new Error(`HTTP ${res.status}`);
+  }
+}
+async function fetchSessionPage(config, csoPlatformType, mediaCustomerId, cursor, unreadOnly) {
+  const params = new URLSearchParams({
+    mediaCustomerId,
+    size: String(PAGE_SIZE)
+  });
+  if (cursor) params.set("cursor", cursor);
+  if (unreadOnly) params.set("isRead", "false");
+  return apiFetch2(
+    `${config.csoBaseUrl}/cso/v1/im/userSessionList/${csoPlatformType}?${params}`,
+    config
+  );
+}
+async function runLetterSessions(options) {
+  const config = loadConfig(options.token);
+  const csoPlatformType = options.domestic ? 1 : 2;
+  let sessions = [];
+  let nextCursor = null;
+  let hasMore = false;
+  if (options.unreadOnly) {
+    let cursor = options.cursor ?? null;
+    let pagesFetched = 0;
+    console.log("\u6B63\u5728\u62C9\u53D6\u672A\u8BFB\u4F1A\u8BDD\u2026");
+    while (true) {
+      let res;
+      try {
+        res = await fetchSessionPage(config, csoPlatformType, options.account, cursor, true);
+      } catch (e) {
+        console.error(`
+\u274C \u83B7\u53D6\u4F1A\u8BDD\u5217\u8868\u5931\u8D25\uFF1A${e.message}`);
+        process.exit(1);
+      }
+      if (res.code !== 1) {
+        console.error("\n\u274C \u670D\u52A1\u7AEF\u8FD4\u56DE\u5F02\u5E38\uFF0C\u83B7\u53D6\u4F1A\u8BDD\u5217\u8868\u5931\u8D25");
+        process.exit(1);
+      }
+      const page = res.data?.list ?? [];
+      sessions.push(...page);
+      pagesFetched++;
+      cursor = res.data?.cursor ?? null;
+      hasMore = Boolean(res.data?.hasMore);
+      if (page.length > 0) {
+        console.log(`  \u7B2C ${pagesFetched} \u9875\uFF1A${page.length} \u6761\uFF0C\u7D2F\u8BA1 ${sessions.length} \u6761`);
+      }
+      if (sessions.length >= AUTO_PAGINATE_LIMIT) {
+        console.log(
+          `
+\u26A0\uFE0F  \u5DF2\u62C9\u53D6 ${sessions.length} \u6761\u672A\u8BFB\u4F1A\u8BDD\uFF0C\u8FBE\u5230\u5B89\u5168\u4E0A\u9650\uFF08${AUTO_PAGINATE_LIMIT}\uFF09\uFF0C\u505C\u6B62\u7EE7\u7EED\u7FFB\u9875\u3002
+   \u5982\u9700\u5904\u7406\u66F4\u591A\uFF0C\u8BF7\u5904\u7406\u5B8C\u5F53\u524D\u6279\u6B21\u540E\u4F7F\u7528 --cursor ${cursor} \u7EE7\u7EED\u3002`
+        );
+        nextCursor = cursor;
+        hasMore = Boolean(res.data?.hasMore);
+        break;
+      }
+      if (!hasMore || !cursor) break;
+    }
+  } else {
+    let res;
+    try {
+      res = await fetchSessionPage(config, csoPlatformType, options.account, options.cursor ?? null, false);
+    } catch (e) {
+      console.error(`
+\u274C \u83B7\u53D6\u4F1A\u8BDD\u5217\u8868\u5931\u8D25\uFF1A${e.message}`);
+      process.exit(1);
+    }
+    if (res.code !== 1) {
+      console.error("\n\u274C \u670D\u52A1\u7AEF\u8FD4\u56DE\u5F02\u5E38\uFF0C\u83B7\u53D6\u4F1A\u8BDD\u5217\u8868\u5931\u8D25");
+      process.exit(1);
+    }
+    sessions = res.data?.list ?? [];
+    nextCursor = res.data?.cursor ?? null;
+    hasMore = Boolean(res.data?.hasMore);
+  }
+  const modeLabel = options.unreadOnly ? "\u672A\u8BFB" : "\u5168\u90E8";
+  if (sessions.length === 0) {
+    console.log(`
+\u6682\u65E0${modeLabel}\u4F1A\u8BDD\u3002`);
+    return;
+  }
+  const batchSize = options.batchSize ?? sessions.length;
+  const totalBatches = Math.ceil(sessions.length / batchSize);
+  console.log(
+    `
+\u627E\u5230 ${sessions.length} \u4E2A${modeLabel}\u4F1A\u8BDD\uFF08\u8D26\u53F7 ${options.account}\uFF09` + (totalBatches > 1 ? `\uFF0C\u5DF2\u5206\u4E3A ${totalBatches} \u6279\uFF08\u6BCF\u6279 ${batchSize} \u4E2A\uFF09` : "") + "\uFF1A\n"
+  );
+  for (let batchIdx = 0; batchIdx < totalBatches; batchIdx++) {
+    const batch = sessions.slice(batchIdx * batchSize, (batchIdx + 1) * batchSize);
+    if (totalBatches > 1) {
+      console.log(`
+\u2501\u2501\u2501 \u7B2C ${batchIdx + 1} \u6279 / \u5171 ${totalBatches} \u6279 \u2501\u2501\u2501
+`);
+    }
+    for (const s of batch) {
+      const content = parseContent(s.content);
+      const lastMsg = contentToText(content).slice(0, 60);
+      const unreadMark = s.unread > 0 ? `  \u26A1 \u672A\u8BFB ${s.unread} \u6761` : "";
+      const time = new Date(s.lastContactTime * 1e3).toLocaleString("zh-CN");
+      const name = s.nikeName ?? "(\u672A\u77E5)";
+      console.log(`  userId: ${s.userId}  \u6635\u79F0: ${name}${unreadMark}`);
+      console.log(`         \u6700\u65B0\u6D88\u606F: ${lastMsg || "(\u7A7A)"}  \u65F6\u95F4: ${time}
+`);
+    }
+    console.log(`\u2500\u2500 \u6279\u6B21 ${batchIdx + 1} JSON\uFF1A
+`);
+    console.log(
+      JSON.stringify(
+        batch.map((s) => {
+          const content = parseContent(s.content);
+          return {
+            userId: s.userId,
+            nikeName: s.nikeName ?? "(\u672A\u77E5)",
+            mediaCustomerId: s.mediaCustomerId,
+            unread: s.unread,
+            lastContactTime: new Date(s.lastContactTime * 1e3).toISOString(),
+            lastMessage: contentToText(content)
+          };
+        }),
+        null,
+        2
+      )
+    );
+    if (totalBatches > 1 && batchIdx < totalBatches - 1) {
+      console.log(`
+\u23F8  \u8BF7\u5904\u7406\u5B8C\u4EE5\u4E0A\u7B2C ${batchIdx + 1} \u6279\u4F1A\u8BDD\u540E\uFF0C\u518D\u7EE7\u7EED\u5904\u7406\u4E0B\u4E00\u6279\u3002`);
+    }
+  }
+  if (hasMore && nextCursor) {
+    console.log(
+      `
+\u{1F4C4} \u8FD8\u6709\u66F4\u591A\u4F1A\u8BDD\u672A\u52A0\u8F7D\u3002\u7EE7\u7EED\u83B7\u53D6\u8BF7\u8FD0\u884C\uFF1A
+   siluzan-cso letter sessions -a ${options.account}` + (options.unreadOnly ? " --unread-only" : "") + (options.domestic ? " --domestic" : "") + ` --cursor ${nextCursor}
+`
+    );
+  }
+}
+async function runLetterMessages(options) {
+  const config = loadConfig(options.token);
+  const csoPlatformType = options.domestic ? 1 : 2;
+  const params = new URLSearchParams({
+    mediaCustomerId: options.account,
+    userId: options.user,
+    size: "20"
+  });
+  const url = `${config.csoBaseUrl}/cso/v1/im/messageRecord/${csoPlatformType}?${params}`;
+  let res;
+  try {
+    res = await apiFetch2(url, config);
+  } catch (e) {
+    console.error(`
+\u274C \u83B7\u53D6\u6D88\u606F\u8BB0\u5F55\u5931\u8D25\uFF1A${e.message}`);
+    process.exit(1);
+  }
+  if (res.code !== 1) {
+    console.error("\n\u274C \u670D\u52A1\u7AEF\u8FD4\u56DE\u5F02\u5E38\uFF0C\u83B7\u53D6\u6D88\u606F\u8BB0\u5F55\u5931\u8D25");
+    process.exit(1);
+  }
+  const messages = [...res.data?.list ?? []].reverse();
+  if (messages.length === 0) {
+    console.log("\n\u6682\u65E0\u6D88\u606F\u8BB0\u5F55\u3002");
+    return;
+  }
+  console.log(`
+\u6D88\u606F\u8BB0\u5F55\uFF08\u5171 ${messages.length} \u6761\uFF0C\u65F6\u95F4\u7531\u65E7\u5230\u65B0\uFF09\uFF1A
+`);
+  for (const m of messages) {
+    const content = parseContent(m.content);
+    const sender = m.isAuthor ? "\u3010\u6211\u65B9\u3011" : "\u3010\u7528\u6237\u3011";
+    const timeStr = formatUtcTime(m.createdDateTime);
+    const statusMark = m.status === 2 ? ` \u274C\u5931\u8D25: ${m.remark}` : m.status === 0 ? " \u23F3\u53D1\u9001\u4E2D" : "";
+    console.log(`  ${timeStr} ${sender} ${contentToText(content)}${statusMark}`);
+  }
+  const latestUserMsg = [...messages].reverse().find((m) => !m.isAuthor);
+  const latestContent = latestUserMsg ? parseContent(latestUserMsg.content) : null;
+  const hasContext = latestContent?.server_message_id || latestContent?.conversation_short_id;
+  console.log("\n\u2500\u2500 \u56DE\u590D\u6240\u9700\u53C2\u6570\uFF08\u4F20\u7ED9 letter reply \u547D\u4EE4\uFF09\uFF1A\n");
+  console.log(
+    JSON.stringify(
+      {
+        userId: options.user,
+        mediaCustomerId: options.account,
+        // 抖音平台回复时需要携带这两个字段引用用户最新消息
+        msg_id: latestContent?.server_message_id ?? null,
+        conversation_id: latestContent?.conversation_short_id ?? null,
+        _tip: hasContext ? "\u6296\u97F3\u5E73\u53F0\u56DE\u590D\u65F6\u8BF7\u643A\u5E26 --msg-id \u548C --conv-id \u53C2\u6570\uFF08\u503C\u89C1\u4E0A\u65B9\uFF09" : "\u65E0\u9700 msg_id / conv_id\uFF08\u6216\u4E3A\u975E\u6296\u97F3\u5E73\u53F0\uFF09"
+      },
+      null,
+      2
+    )
+  );
+}
+async function runLetterReply(options) {
+  const config = loadConfig(options.token);
+  const csoPlatformType = options.domestic ? 1 : 2;
+  const scene = options.mediaType === "Douyin" ? "im_replay_msg" : null;
+  const message = {
+    message_type: "text",
+    text: options.text
+  };
+  if (options.msgId) message["msg_id"] = options.msgId;
+  if (options.convId) message["conversation_id"] = options.convId;
+  const body = {
+    mediaCustomerId: options.account,
+    userId: options.user,
+    message,
+    messageChannel: 0,
+    scene
+  };
+  const url = `${config.csoBaseUrl}/cso/v1/im/sendMessage/${csoPlatformType}/${options.mediaType}`;
+  console.log(`
+\u{1F4E9} \u6B63\u5728\u5411\u7528\u6237 ${options.user} \u53D1\u9001\u79C1\u4FE1\u2026`);
+  let res;
+  try {
+    res = await apiFetch2(url, config, {
+      method: "POST",
+      body: JSON.stringify(body)
+    });
+  } catch (e) {
+    console.error(`
+\u274C \u8BF7\u6C42\u5931\u8D25\uFF1A${e.message}`);
+    process.exit(1);
+  }
+  if (res.code !== 1) {
+    console.error(`
+\u274C \u53D1\u9001\u5931\u8D25\uFF1A${res.message ?? JSON.stringify(res)}`);
+    process.exit(1);
+  }
+  if (res.data?.status === 2) {
+    console.error(
+      "\n\u274C \u6D88\u606F\u88AB\u5E73\u53F0\u62D2\u7EDD\uFF08status=2\uFF09\u3002\n   \u53EF\u80FD\u539F\u56E0\uFF1A\u7528\u6237\u6700\u540E\u4E00\u6761\u6D88\u606F\u5DF2\u8D85\u8FC7 24 \u5C0F\u65F6\uFF08\u5E73\u53F0\u9650\u5236\uFF09\uFF0C\u6216\u8D26\u53F7\u65E0\u79C1\u4FE1\u53D1\u9001\u6743\u9650\u3002\n   \u8BF7\u68C0\u67E5\u7528\u6237\u6700\u8FD1\u6D88\u606F\u65F6\u95F4\u540E\u518D\u91CD\u8BD5\u3002"
+    );
+    process.exit(1);
+  }
+  console.log(`
+\u2705 \u79C1\u4FE1\u53D1\u9001\u6210\u529F\uFF01\u5185\u5BB9\uFF1A${options.text}`);
+  try {
+    await postFormData(
+      `${config.csoBaseUrl}/cso/v1/im/setToRead/${csoPlatformType}/${options.mediaType}`,
+      config,
+      { mediaCustomerId: options.account, userId: options.user }
+    );
+    console.log("   \u4F1A\u8BDD\u5DF2\u81EA\u52A8\u6807\u8BB0\u4E3A\u5DF2\u8BFB\u3002");
+  } catch {
+  }
+}
+async function runLetterMarkRead(options) {
+  const config = loadConfig(options.token);
+  const csoPlatformType = options.domestic ? 1 : 2;
+  const url = `${config.csoBaseUrl}/cso/v1/im/setToRead/${csoPlatformType}/${options.mediaType}`;
+  try {
+    await postFormData(url, config, {
+      mediaCustomerId: options.account,
+      userId: options.user
+    });
+    console.log(`
+\u2705 \u4F1A\u8BDD ${options.user} \u5DF2\u6807\u8BB0\u4E3A\u5DF2\u8BFB\u3002`);
+  } catch (e) {
+    console.error(`
+\u274C \u6807\u8BB0\u5DF2\u8BFB\u5931\u8D25\uFF1A${e.message}`);
+    process.exit(1);
+  }
+}
+
+// src/index.ts
+var program = new Command();
+program.name("siluzan-cso").description("Siluzan \u5E73\u53F0 Skill \u5DE5\u5177\uFF1A\u521D\u59CB\u5316\u3001\u8D26\u53F7\u67E5\u8BE2\u3001\u4E0A\u4F20\u3001\u56FE\u6587/\u89C6\u9891\u53D1\u5E03").version(getCurrentVersion2());
+program.hook("preAction", () => {
+  setSiluzanCliInvocation(redactCliArgvForSentry(process.argv));
+});
+var configCmd = program.command("config").description("\u67E5\u770B\u6216\u8BBE\u7F6E Siluzan \u8BA4\u8BC1\u914D\u7F6E\uFF08~/.siluzan/config.json\uFF09");
+configCmd.command("show").description("\u5C55\u793A\u5F53\u524D\u5DF2\u4FDD\u5B58\u7684\u914D\u7F6E\uFF08Token \u8131\u654F\u663E\u793A\uFF09").action(() => cmdConfigShow());
+configCmd.command("set").description("\u4FDD\u5B58\u914D\u7F6E\u5230 ~/.siluzan/config.json\uFF0C\u540E\u7EED\u547D\u4EE4\u81EA\u52A8\u8BFB\u53D6").option("--api-key <key>", "API Key\uFF08\u63A8\u8350\uFF0C\u4E0E siluzan-tso \u5171\u7528\uFF0C\u4F18\u5148\u7EA7\u9AD8\u4E8E token\uFF09").option("-t, --token <token>", "\u7528\u6237 Auth Token\uFF08JWT\uFF09").option("--api-base <url>", "\u4E3B API \u57FA\u5730\u5740\uFF08\u9ED8\u8BA4 https://api.siluzan.com\uFF09").action((opts) => {
+  cmdConfigSet({ apiKey: opts.apiKey, token: opts.token, apiBase: opts.apiBase });
+});
+configCmd.command("clear").description("\u6E05\u7A7A\u5DF2\u4FDD\u5B58\u7684 Token").action(() => cmdConfigClear());
+program.command("login").description("\u5F15\u5BFC\u5B8C\u6210 Siluzan \u8D26\u53F7\u767B\u5F55\uFF0C\u4FDD\u5B58 API Key \u6216 Token \u5230\u672C\u5730").option("--api-key <key>", "\u76F4\u63A5\u4FDD\u5B58 API Key\uFF08\u8DF3\u8FC7\u4EA4\u4E92\u5F0F\u6D41\u7A0B\uFF0C\u4E0E siluzan-tso \u5171\u7528\uFF09").action(async (opts) => {
+  await runLogin({ apiKey: opts.apiKey });
+});
+program.command("update").description("\u68C0\u67E5\u5E76\u66F4\u65B0 siluzan-cso-cli \u81F3\u6700\u65B0\u7248\u672C\uFF0C\u540C\u6B65\u5237\u65B0\u6240\u6709\u5DF2\u5B89\u88C5\u7684 skill \u6587\u4EF6").option("--force", "\u8DF3\u8FC7\u7248\u672C\u6BD4\u8F83\uFF0C\u5F3A\u5236\u91CD\u65B0\u5B89\u88C5\u5E76\u5237\u65B0 skill \u6587\u4EF6", false).option("--skip-init", "\u4EC5\u66F4\u65B0 CLI\uFF0C\u4E0D\u91CD\u65B0\u521D\u59CB\u5316 skill \u6587\u4EF6", false).action(async (opts) => {
+  await runUpdate({ force: opts.force, skipInit: opts.skipInit });
+});
+program.command("init").description("\u5C06 Skill \u6587\u4EF6\u5199\u5165\u6307\u5B9A AI \u52A9\u624B\u76EE\u5F55\uFF08--ai \u9009\u62E9\u9884\u8BBE\u5E73\u53F0\uFF0C\u6216 --dir \u6307\u5B9A\u4EFB\u610F\u76EE\u5F55\uFF09").option(
+  "-a, --ai <targets>",
+  "\u76EE\u6807\u5E73\u53F0\uFF0C\u9017\u53F7\u5206\u9694\uFF1Acursor,claude,openclaw-workspace,openclaw-global,workbuddy-workspace,workbuddy-global,all",
+  "cursor"
+).option(
+  "-d, --dir <path>",
+  "\u5C06 Skill \u6587\u4EF6\u76F4\u63A5\u5199\u5165\u6307\u5B9A\u76EE\u5F55\uFF08\u7EDD\u5BF9\u6216\u76F8\u5BF9\u8DEF\u5F84\uFF09\uFF0C\u4E0E --ai \u4E92\u65A5\uFF0C\u4F18\u5148\u7EA7\u66F4\u9AD8"
+).option("-f, --force", "\u8986\u76D6\u5DF2\u5B58\u5728\u7684 Skill \u6587\u4EF6", false).option("--api-base <url>", "API \u57FA\u5730\u5740\uFF08\u5199\u5165\u914D\u7F6E\u63D0\u793A\uFF09", "https://api.siluzan.com").action(async (opts) => {
+  await runInit({
+    cwd: process.cwd(),
+    aiTargets: opts.ai,
+    dir: opts.dir,
+    force: Boolean(opts.force),
+    apiBaseUrl: opts.apiBase ?? "https://api.siluzan.com"
+  });
+});
+program.command("list-accounts").description("\u5217\u51FA\u8D26\u53F7\u6811\u4E2D\u6240\u6709\u53EF\u7528\u5A92\u4F53\u8D26\u53F7\uFF0C\u8F93\u51FA JSON \u4F9B\u586B\u5199\u53D1\u5E03\u914D\u7F6E").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--domestic", "\u5185\u8D38\u6A21\u5F0F\uFF08mediaGroup=1\uFF09", false).option("--verbose", "\u663E\u793A\u5B8C\u6574\u4EE4\u724C\u6807\u8BC6\uFF08\u9ED8\u8BA4\u8131\u654F\uFF09", false).action(async (opts) => {
+  await runListAccounts({ token: opts.token, domestic: opts.domestic, verbose: opts.verbose });
+});
+program.command("upload").description("\u4E0A\u4F20\u672C\u5730\u89C6\u9891\u6216\u56FE\u7247\u5230 Siluzan \u7D20\u6750\u5E93\uFF0C\u8F93\u51FA\u53EF\u76F4\u63A5\u586B\u5165 publish-config.json \u7684\u5B57\u6BB5").requiredOption("-f, --file <path>", "\u672C\u5730\u6587\u4EF6\u8DEF\u5F84").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--kind <video|image>", "\u624B\u52A8\u6307\u5B9A\u6587\u4EF6\u7C7B\u578B\uFF08\u9ED8\u8BA4\u6309\u6269\u5C55\u540D\u81EA\u52A8\u5224\u65AD\uFF09").option("--cover <path>", "\u5C01\u9762\u56FE\u7247\u8DEF\u5F84\uFF08\u4E0A\u4F20\u89C6\u9891\u65F6\u5FC5\u987B\u63D0\u4F9B\uFF09").option("--verbose", "\u663E\u793A\u8BE6\u7EC6\u9519\u8BEF\u4FE1\u606F\u53CA\u5B8C\u6574 URL\uFF08\u9ED8\u8BA4\u9690\u85CF\u542B\u7B7E\u540D URL\uFF09", false).action(async (opts) => {
+  await runUpload({ file: opts.file, token: opts.token, kind: opts.kind, cover: opts.cover, verbose: opts.verbose });
+});
+program.command("extract-cover").description("\u4ECE\u89C6\u9891\u6587\u4EF6\u622A\u53D6\u5C01\u9762\u5E27\uFF0C\u6309\u5E73\u53F0\u89C4\u683C\uFF08YouTube/TikTok/Twitter \u7B49\uFF09\u88C1\u526A\u7F29\u653E\uFF0C\u53EF\u9009\u81EA\u52A8\u4E0A\u4F20").requiredOption("-f, --file <path>", "\u89C6\u9891\u6587\u4EF6\u8DEF\u5F84\uFF08MP4/MOV/MKV \u7B49\uFF09").option(
+  "-t, --time <seconds...>",
+  "\u622A\u5E27\u65F6\u95F4\u70B9\uFF08\u79D2\uFF0C\u53EF\u591A\u4E2A\uFF09\uFF0C\u5982 -t 0 3 10 \u622A\u53D6\u7B2C 0\u30013\u300110 \u79D2\u5E27\uFF08\u9ED8\u8BA4: 0\uFF09"
+).option(
+  "-p, --platform <platform>",
+  "\u76EE\u6807\u5E73\u53F0\uFF08\u9ED8\u8BA4 youtube\uFF09\u3002\u8FD0\u884C --list-platforms \u67E5\u770B\u5168\u90E8\u652F\u6301\u5E73\u53F0",
+  "youtube"
+).option("-o, --output <path>", "\u8F93\u51FA\u6587\u4EF6\u8DEF\u5F84\uFF08\u591A\u5E27\u65F6\u4F5C\u4E3A\u6587\u4EF6\u540D\u524D\u7F00\uFF1B\u9ED8\u8BA4\u4FDD\u5B58\u5728\u89C6\u9891\u540C\u76EE\u5F55\uFF09").option("--upload", "\u622A\u53D6\u540E\u81EA\u52A8\u4E0A\u4F20\u5C01\u9762\u5230\u7D20\u6750\u5E93\uFF0C\u5E76\u8F93\u51FA cover JSON \u7247\u6BB5", false).option("--list-platforms", "\u5217\u51FA\u6240\u6709\u652F\u6301\u7684\u5E73\u53F0\u5C01\u9762\u89C4\u683C", false).option("--token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").action(async (opts) => {
+  if (opts.listPlatforms) {
+    const { PLATFORM_COVER_SPECS } = await import("./extract-cover-NFKUUFLS.js");
+    const keys = Object.keys(PLATFORM_COVER_SPECS);
+    console.log("\n\u5404\u5E73\u53F0\u89C6\u9891\u5C01\u9762\u89C4\u683C\uFF1A\n");
+    const maxKeyLen = Math.max(...keys.map((k) => k.length));
+    const maxNameLen = Math.max(...keys.map((k) => PLATFORM_COVER_SPECS[k].displayName.length));
+    console.log(`  ${"\u5E73\u53F0 ID".padEnd(maxKeyLen)}  ${"\u5E73\u53F0\u540D\u79F0".padEnd(maxNameLen)}  ${"\u5C3A\u5BF8".padEnd(12)}  ${"\u6BD4\u4F8B".padEnd(6)}  \u8BF4\u660E`);
+    console.log("  " + "-".repeat(maxKeyLen + maxNameLen + 55));
+    for (const key of keys) {
+      const spec = PLATFORM_COVER_SPECS[key];
+      const size = `${spec.width}\xD7${spec.height}`;
+      console.log(`  ${key.padEnd(maxKeyLen)}  ${spec.displayName.padEnd(maxNameLen)}  ${size.padEnd(12)}  ${spec.ratio.padEnd(6)}  ${spec.note}`);
+    }
+    console.log();
+    return;
+  }
+  await runExtractCover({
+    file: opts.file,
+    time: opts.time,
+    platform: opts.platform,
+    output: opts.output,
+    upload: opts.upload,
+    token: opts.token
+  });
+});
+program.command("publish").description("\u6309 JSON \u914D\u7F6E\u6587\u4EF6\u63D0\u4EA4\u53D1\u5E03\u4EFB\u52A1\u5230 CSO").requiredOption("-c, --config <path>", "\u53D1\u5E03\u914D\u7F6E\u6587\u4EF6\u8DEF\u5F84\uFF08JSON\uFF09").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--dry-run", "\u4EC5\u9884\u89C8\u8BF7\u6C42\u4F53\uFF0C\u4E0D\u5B9E\u9645\u63D0\u4EA4", false).option("--verbose", "\u663E\u793A\u5B8C\u6574\u8BF7\u6C42\u4F53\u53CA\u8BE6\u7EC6\u9519\u8BEF\uFF08\u542B\u654F\u611F\u5B57\u6BB5\uFF0C\u9ED8\u8BA4\u8131\u654F\uFF09", false).action(async (opts) => {
+  await runPublish({ config: opts.config, token: opts.token, dryRun: opts.dryRun, verbose: opts.verbose });
+});
+var letterCmd = program.command("letter").description("\u79C1\u4FE1\u7BA1\u7406\uFF1A\u67E5\u8BE2\u4F1A\u8BDD\u5217\u8868\u3001\u8BFB\u53D6\u6D88\u606F\u8BB0\u5F55\u3001\u53D1\u9001\u56DE\u590D");
+letterCmd.command("sessions").description("\u5217\u51FA\u6307\u5B9A\u8D26\u53F7\u7684\u79C1\u4FE1\u4F1A\u8BDD\uFF08\u9ED8\u8BA4\u5168\u90E8\uFF0C--unread-only \u4EC5\u663E\u793A\u672A\u8BFB\u5E76\u81EA\u52A8\u7FFB\u9875\uFF09").requiredOption("-a, --account <mediaCustomerId>", "\u4F01\u4E1A\u5A92\u4F53\u8D26\u53F7 ID\uFF08\u6765\u81EA list-accounts \u7684 mediaCustomerId\uFF09").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--domestic", "\u5185\u8D38\u6A21\u5F0F\uFF08\u6296\u97F3\uFF0CcsoPlatformType=1\uFF09", false).option("--unread-only", "\u4EC5\u663E\u793A\u6709\u672A\u8BFB\u6D88\u606F\u7684\u4F1A\u8BDD\uFF08\u81EA\u52A8\u7FFB\u9875\u805A\u5408\u5168\u90E8\u672A\u8BFB\uFF0C\u4E0A\u9650 500 \u6761\uFF09", false).option("--cursor <cursor>", "\u4ECE\u6307\u5B9A\u6E38\u6807\u4F4D\u7F6E\u7EE7\u7EED\u7FFB\u9875\uFF08\u6765\u81EA\u4E0A\u6B21\u8F93\u51FA\u7684 nextCursor \u503C\uFF09").option("--batch-size <n>", "\u5C06\u7ED3\u679C\u5206\u6279\u8F93\u51FA\uFF0C\u6BCF\u6279 n \u4E2A\u4F1A\u8BDD\uFF08AI \u5E94\u9010\u6279\u5904\u7406\uFF0C\u5EFA\u8BAE 20-30\uFF09", parseInt).action(async (opts) => {
+  await runLetterSessions({
+    account: opts.account,
+    token: opts.token,
+    domestic: opts.domestic,
+    unreadOnly: opts.unreadOnly,
+    cursor: opts.cursor,
+    batchSize: opts.batchSize
+  });
+});
+letterCmd.command("messages").description("\u67E5\u770B\u4E0E\u6307\u5B9A\u7528\u6237\u7684\u79C1\u4FE1\u8BB0\u5F55\uFF08\u6700\u65B0 20 \u6761\uFF0C\u4ECE\u65E7\u5230\u65B0\uFF09").requiredOption("-a, --account <mediaCustomerId>", "\u4F01\u4E1A\u5A92\u4F53\u8D26\u53F7 ID").requiredOption("-u, --user <userId>", "\u76EE\u6807\u7528\u6237 ID\uFF08\u6765\u81EA letter sessions \u8F93\u51FA\uFF09").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--domestic", "\u5185\u8D38\u6A21\u5F0F", false).action(async (opts) => {
+  await runLetterMessages({
+    account: opts.account,
+    user: opts.user,
+    token: opts.token,
+    domestic: opts.domestic
+  });
+});
+letterCmd.command("reply").description("\u5411\u6307\u5B9A\u7528\u6237\u53D1\u9001\u79C1\u4FE1\u56DE\u590D\uFF08\u7EAF\u6587\u5B57\uFF09\uFF0C\u6210\u529F\u540E\u81EA\u52A8\u6807\u8BB0\u4F1A\u8BDD\u5DF2\u8BFB").requiredOption("-a, --account <mediaCustomerId>", "\u4F01\u4E1A\u5A92\u4F53\u8D26\u53F7 ID").requiredOption("-u, --user <userId>", "\u76EE\u6807\u7528\u6237 ID").requiredOption("-m, --media-type <type>", "\u5E73\u53F0\u7C7B\u578B\uFF1ADouyin | Facebook | Instagram\uFF08\u6765\u81EA list-accounts \u7684 mediaAccountType\uFF09").requiredOption("--text <content>", "\u56DE\u590D\u5185\u5BB9\uFF08\u7EAF\u6587\u5B57\uFF09").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--domestic", "\u5185\u8D38\u6A21\u5F0F", false).option("--msg-id <msgId>", "\u7528\u6237\u6700\u65B0\u6D88\u606F\u7684 server_message_id\uFF08\u6296\u97F3\u5E73\u53F0\u5EFA\u8BAE\u63D0\u4F9B\uFF0C\u7528\u4E8E\u5173\u8054\u56DE\u590D\u4E0A\u4E0B\u6587\uFF09").option("--conv-id <convId>", "\u7528\u6237\u6700\u65B0\u6D88\u606F\u7684 conversation_short_id\uFF08\u6296\u97F3\u5E73\u53F0\u5EFA\u8BAE\u63D0\u4F9B\uFF09").action(async (opts) => {
+  await runLetterReply({
+    account: opts.account,
+    user: opts.user,
+    mediaType: opts.mediaType,
+    text: opts.text,
+    token: opts.token,
+    domestic: opts.domestic,
+    msgId: opts.msgId,
+    convId: opts.convId
+  });
+});
+letterCmd.command("mark-read").description("\u5C06\u6307\u5B9A\u7528\u6237\u7684\u4F1A\u8BDD\u6807\u8BB0\u4E3A\u5DF2\u8BFB\uFF08reply \u547D\u4EE4\u5DF2\u81EA\u52A8\u6267\u884C\uFF0C\u901A\u5E38\u65E0\u9700\u5355\u72EC\u8C03\u7528\uFF09").requiredOption("-a, --account <mediaCustomerId>", "\u4F01\u4E1A\u5A92\u4F53\u8D26\u53F7 ID").requiredOption("-u, --user <userId>", "\u76EE\u6807\u7528\u6237 ID").requiredOption("-m, --media-type <type>", "\u5E73\u53F0\u7C7B\u578B\uFF1ADouyin | Facebook | Instagram").option("-t, --token <token>", "Token\uFF08\u53EF\u9009\uFF1B\u4F18\u5148\u4E8E ~/.siluzan/config.json\uFF09").option("--domestic", "\u5185\u8D38\u6A21\u5F0F", false).action(async (opts) => {
+  await runLetterMarkRead({
+    account: opts.account,
+    user: opts.user,
+    mediaType: opts.mediaType,
+    token: opts.token,
+    domestic: opts.domestic
+  });
+});
+program.parse();
+var activeCmd = process.argv[2];
+if (activeCmd !== "update" && activeCmd !== "login") {
+  notifyIfOutdated().catch(() => {
+  });
+}