merge: sync latest main

chore: update beta formula for v1.0.60-beta.2 [skip ci]
Merge pull request #1133 from DingTalk-Real-AI/codex/changelog-v1.0.60-beta.2-amendment
2026-08-25 00:09:27 +08:00 · 2026-08-24 15:57:43 +00:00 · 2026-08-24 23:42:06 +08:00 · 2026-08-24 23:37:21 +08:00 · 2026-08-24 23:33:43 +08:00 · 2026-08-24 23:13:59 +08:00
13 changed files with 1545 additions and 152 deletions
@@ -54,6 +54,8 @@ The format is inspired by [Keep a Changelog](https://keepachangelog.com/) and th

 - **Sheet revision changesets** — adds read-only commands for querying the current workbook revision and reviewing Agent-readable changes between revisions, with guidance for distinguishing revisions from saved history versions and safely selecting rollback targets.

+- **Sheet floating images** — supports creating or replacing a floating image directly from a local file with `create-float-image --file` and `update-float-image --file`, while retaining the existing `--src` workflow.
+
 ### Changed

 - **AiSearch and Contact shortcuts** (#1083) — adds strict people search and reviewed unified results; people results must use the live-reviewed `person` source, and exact mobile lookups normalize accepted formatting before calling the dedicated mobile interface. Agent/public discovery keeps `contact +list-roles`, `contact +list-roster-fields`, `contact +get-roster`, and incomplete Live routes unavailable rather than publishing ambiguous results, while the historical Contact CLI commands retain legacy MCP execution and real error propagation. The legacy role-list projection preserves the service's reviewed null placeholder without exposing that ambiguous row through Agent Result contracts.
@@ -1,33 +1,33 @@
 class DingtalkWorkspaceCliBeta < Formula
  desc "Automate DingTalk workspace tasks from the terminal (beta channel)"
  homepage "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli"
-  version "1.0.60-beta.1"
+  version "1.0.60-beta.2"
  license "Apache-2.0"
  keg_only "it is the beta channel and conflicts with dingtalk-workspace-cli"

  on_macos do
    if Hardware::CPU.arm?
-      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.1/dws-darwin-arm64.tar.gz"
-      sha256 "8ef11c79b5c86ec275dd82334232e7582f9e2ba99a66307d7681e42e8f53767b"
+      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.2/dws-darwin-arm64.tar.gz"
+      sha256 "e7776807f0664cbf0d0728cc236f2415c0981eb8d6557a897d2eeee708641b1d"
    else
-      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.1/dws-darwin-amd64.tar.gz"
-      sha256 "67612f1dac735984b026c7f8a0dc057beec4cdd029f0a97798bf90aa923eb2d3"
+      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.2/dws-darwin-amd64.tar.gz"
+      sha256 "3004474df3cfb529719348f02c9f2f39afa88f0fca469fe8303a9ebe0f3a0034"
    end
  end

  on_linux do
    if Hardware::CPU.arm?
-      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.1/dws-linux-arm64.tar.gz"
-      sha256 "67a8d4f4e0a7d22a9cc53cb91d8c97ecd1152665ce669f68560d86cec5987dd2"
+      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.2/dws-linux-arm64.tar.gz"
+      sha256 "6386885d10f149c8c555031dda4cf07bf34e1e9daad61d4cd948b92d3c7b7bad"
    else
-      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.1/dws-linux-amd64.tar.gz"
-      sha256 "a5fae548b495842779df4291cbcf06d8a2e5ddddf68a41cad1bab1e5c64a1d59"
+      url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.2/dws-linux-amd64.tar.gz"
+      sha256 "5c94c2af269d2fe5a79a400d4fa3af267a86d6ab21b01a24ede1d29514a6eaef"
    end
  end

  resource "skills" do
-    url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.1/dws-skills.zip"
-    sha256 "9fe12683139a626d32a801dd44158a698f142b61339282e0fc24d4e3a5e97e87"
+    url "https://github.com/DingTalk-Real-AI/dingtalk-workspace-cli/releases/download/v1.0.60-beta.2/dws-skills.zip"
+    sha256 "c3bd917f1b44a978ba2a9fbe95c5d0910ccf75f870f1c9b0dc356262ab1080c5"
  end

  def install
@@ -148,7 +148,7 @@ var paramAliasCompleteCommands = map[string][]string{
 	"contact +resolve-dept":                    {"contact", "+resolve-dept", "--name", "Fixture Dept"},
 	"contact +search-user":                     {"contact", "+search-user", "--query", "Fixture User"},
 	"contact dept list-children":               {"contact", "dept", "list-children", "--dept", "1"},
-	"contact user profile get":                 {"contact", "user", "profile", "get", "--staff-id", "user-1"},
+	"contact user profile get":                 {"contact", "user", "profile", "get", "--staff-id", "user-1", "--fields", "name,userId"},
 	"dev app get":                              {"dev", "app", "get", "--unified-app-id", "app-1"},
 	"devdoc article search":                    {"devdoc", "article", "search", "--query", "fixture", "--page", "2", "--size", "7"},
 	"ding +receiver-status":                    {"ding", "+receiver-status", "--ding-id", "ding-1"},
@@ -237,52 +237,106 @@ var paramAliasCompleteCommands = map[string][]string{
 // param_concepts.json: inactive candidate templates are ignored, while every
 // command becomes mandatory as soon as one of its reviewed aliases is active.
 var paramAliasCandidateCompleteCommands = map[string][]string{
-	"attendance +check-record":           {"attendance", "+check-record", "--users", "user-1,user-2", "--start", "2026-03-10 00:00:00", "--end", "2026-03-10 23:59:59"},
-	"attendance +get-adjustment-rule":    {"attendance", "+get-adjustment-rule", "--adjustment-id", "adjustment-1"},
-	"attendance +get-approve-template":   {"attendance", "+get-approve-template", "--type", "leave"},
-	"attendance +get-checkin-record":     {"attendance", "+get-checkin-record", "--operator-corp-id", "corp-1", "--operator-staff-id", "staff-operator", "--staff-ids", "staff-1,staff-2", "--start", "2026-03-10 00:00:00", "--end", "2026-03-10 23:59:59"},
-	"attendance +get-leave-records":      {"attendance", "+get-leave-records", "--user", "user-1", "--start", "2026-03-01", "--end", "2026-03-31", "--leave-code", "annual_leave"},
-	"attendance +get-overtime-rule":      {"attendance", "+get-overtime-rule", "--overtime-id", "overtime-1"},
-	"attendance +get-schedule":           {"attendance", "+get-schedule", "--users", "user-1,user-2", "--start", "2026-03-10", "--end", "2026-03-11"},
-	"attendance +get-self-setting":       {"attendance", "+get-self-setting", "--user", "user-1", "--setting-scene", "checkRemind"},
-	"attendance +get-summary":            {"attendance", "+get-summary", "--user", "user-1", "--date", "2026-03-10", "--stats-type", "week"},
-	"attendance +list-approve":           {"attendance", "+list-approve", "--users", "user-1,user-2", "--types", "leave", "--start", "2026-03-01", "--end", "2026-03-31"},
-	"attendance +query-report-data":      {"attendance", "+query-report-data", "--users", "user-1,user-2", "--columns", "attendance_days,late_count", "--start", "2026-03-01", "--end", "2026-03-31"},
-	"attendance +search-adjustment-rule": {"attendance", "+search-adjustment-rule", "--query", "fixture", "--page", "2", "--limit", "7"},
-	"attendance +search-class":           {"attendance", "+search-class", "--filter-type", "name", "--query", "fixture"},
-	"attendance +search-group":           {"attendance", "+search-group", "--type", "FIXED"},
-	"attendance +search-overtime-rule":   {"attendance", "+search-overtime-rule", "--query", "fixture", "--page", "2", "--limit", "7"},
-	"ding +list":                         {"ding", "+list", "--cursor", "0", "--type", "ALL"},
-	"ding +recall-personal":              {"ding", "+recall-personal", "--id", "ding-1", "--yes"},
-	"ding +send-personal":                {"ding", "+send-personal", "--users", appFixtureCurrentDOpenID, "--content", "fixture", "--yes"},
-	"mail +contact-list":                 {"mail", "+contact-list", "--email", "fixture@example.com", "--limit", "7", "--cursor", "cursor-1"},
-	"mail +folder-list":                  {"mail", "+folder-list", "--email", "fixture@example.com", "--folder", "folder-1"},
-	"mail +message":                      {"mail", "+message", "--email", "fixture@example.com", "--id", "message-1"},
-	"mail +messages":                     {"mail", "+messages", "--email", "fixture@example.com", "--ids", "message-1,message-2"},
-	"mail +recent-mail":                  {"mail", "+recent-mail", "--limit", "7", "--cursor", "cursor-1"},
-	"mail +search-mail":                  {"mail", "+search-mail", "--query", "fixture", "--size", "7", "--cursor", "cursor-1"},
-	"mail +template-list":                {"mail", "+template-list", "--email", "fixture@example.com", "--limit", "7", "--cursor", "cursor-1"},
-	"mail +thread":                       {"mail", "+thread", "--email", "fixture@example.com", "--id", "thread-1"},
-	"mail +thread-list":                  {"mail", "+thread-list", "--email", "fixture@example.com", "--folder", "folder-1", "--cursor", "cursor-1"},
-	"mail +triage":                       {"mail", "+triage", "--query", "fixture", "--limit", "7", "--cursor", "cursor-1"},
-	"mail +unread-mail":                  {"mail", "+unread-mail", "--size", "7", "--cursor", "cursor-1"},
-	"mail +user-search":                  {"mail", "+user-search", "--keyword", "fixture", "--cursor", "cursor-1"},
-	"markdown create":                    {"markdown", "create", "--content", "# Fixture", "--name", "fixture.md", "--space-id", "space-1"},
-	"markdown diff":                      {"markdown", "diff", "--node", "node-1", "--version", "1", "--version2", "2", "--context", "3"},
-	"markdown fetch":                     {"markdown", "fetch", "--node", "node-1", "--space-id", "space-1", "--output", "/tmp/dws-markdown-fixture.md"},
-	"markdown overwrite":                 {"markdown", "overwrite", "--node", "node-1", "--content", "# Fixture", "--name", "fixture.md", "--space-id", "space-1", "--yes"},
-	"markdown patch":                     {"markdown", "patch", "--node", "node-1", "--pattern", "old", "--content", "new", "--regex", "--space-id", "space-1", "--yes"},
-	"oa +list-cc":                        {"oa", "+list-cc", "--page", "2"},
-	"oa +list-executed":                  {"oa", "+list-executed", "--limit", "7", "--page", "2"},
-	"oa +list-forms":                     {"oa", "+list-forms", "--cursor", "2"},
-	"oa +list-pending":                   {"oa", "+list-pending", "--start", "1773072000000", "--end", "1773158399000", "--page", "2"},
-	"oa +list-submitted":                 {"oa", "+list-submitted", "--page", "2"},
-	"oa +my-initiated":                   {"oa", "+my-initiated", "--page", "2"},
-	"report +outbox-list":                {"report", "+outbox-list", "--size", "7"},
-	"report +report-latest":              {"report", "+report-latest", "--keyword", "Fixture", "--start", "2026-03-01T00:00:00+08:00", "--end", "2026-03-10T00:00:00+08:00"},
-	"report +template-search":            {"report", "+template-search", "--query", "fixture"},
-	"sheet +list-sheets":                 {"sheet", "+list-sheets", "--node", "node-1"},
-	"sheet +read":                        {"sheet", "+read", "--node", "node-1", "--sheet-id", "Sheet1"},
+	"aisearch":                             {"aisearch", "--query", "Fixture User", "--dimension", "name"},
+	"aisearch +search-person":              {"aisearch", "+search-person", "--query", "Fixture User", "--dimensions", "name"},
+	"aisearch behavior":                    {"aisearch", "behavior", "--queries", "fixture", "--types", "im", "--behavior-type", "send", "--chat-scope", "Fixture Group", "--direction", "我->Fixture User", "--time-range", "本周"},
+	"aisearch enterprise":                  {"aisearch", "enterprise", "--queries", "fixture", "--types", "document", "--time-range", "本周"},
+	"aisearch person":                      {"aisearch", "person", "--query", "Fixture User", "--dimension", "name"},
+	"contact +by-mobile":                   {"contact", "+by-mobile", "--mobile", "13800138000"},
+	"contact +list-dept-members":           {"contact", "+list-dept-members", "--depts", "1,2"},
+	"contact +list-followings":             {"contact", "+list-followings", "--open-id", "open-fixture-1"},
+	"contact +list-role-members":           {"contact", "+list-role-members", "--id", "12345"},
+	"contact +lookup":                      {"contact", "+lookup", "--name", "Fixture User"},
+	"contact +org":                         {"contact", "+org", "--name", "Fixture User"},
+	"contact +search-mobile":               {"contact", "+search-mobile", "--mobile", "13800138000"},
+	"contact +team":                        {"contact", "+team", "--name", "Fixture User"},
+	"contact account create":               {"contact", "account", "create", "--login-id", "fixture-login", "--org-user-name", "Fixture User", "--dept-ids", "1,2"},
+	"contact account update":               {"contact", "account", "update", "--user-id", "user-1", "--org-user-name", "Fixture User", "--depts", `[{"deptId":1}]`, "--avatar-file-id", "file-1", "--yes"},
+	"contact dept create":                  {"contact", "dept", "create", "--name", "Fixture Dept", "--parent", "1", "--create-dept-group", "--yes"},
+	"contact dept get-info":                {"contact", "dept", "get-info", "--dept", "1"},
+	"contact dept list-members":            {"contact", "dept", "list-members", "--depts", "1,2"},
+	"contact dept search":                  {"contact", "dept", "search", "--query", "Fixture Dept"},
+	"contact dept update":                  {"contact", "dept", "update", "--dept", "2", "--name", "Fixture Dept", "--parent", "1", "--yes"},
+	"contact label get":                    {"contact", "label", "get", "--names", "Fixture Role"},
+	"contact org create":                   {"contact", "org", "create", "--org-name", "Fixture Org", "--creator-username", "Fixture Creator"},
+	"contact user dismission search":       {"contact", "user", "dismission", "search", "--depts", "1,2", "--start", "2026-03-01", "--end", "2026-03-31", "--page", "2", "--limit", "7"},
+	"contact user get":                     {"contact", "user", "get", "--ids", "user-1,user-2"},
+	"contact user invite":                  {"contact", "user", "invite", "--org-user-mobile", "13800138000", "--org-user-name", "Fixture User", "--depts", `[{"deptId":1}]`},
+	"contact user search":                  {"contact", "user", "search", "--query", "Fixture User"},
+	"contact user search-mobile":           {"contact", "user", "search-mobile", "--mobile", "13800138000"},
+	"contact user update":                  {"contact", "user", "update", "--user-id", "user-1", "--org-user-name", "Fixture User", "--depts", `[{"deptId":1}]`, "--yes"},
+	"contact user update-ownness":          {"contact", "user", "update-ownness", "--user-id", "user-1", "--ownness-text", "Fixture Status", "--yes"},
+	"contact user update-self":             {"contact", "user", "update-self", "--avatar-file-id", "file-1", "--nick", "Fixture Nick", "--yes"},
+	"devdoc +search-docs":                  {"devdoc", "+search-docs", "--query", "fixture", "--page", "2", "--size", "7"},
+	"hrbrain +get-pool":                    {"hrbrain", "+get-pool", "--pool-code", "pool-1"},
+	"hrbrain +list-pool-employees":         {"hrbrain", "+list-pool-employees", "--pool-code", "pool-1", "--page", "2", "--page-size", "7"},
+	"hrbrain +list-pools":                  {"hrbrain", "+list-pools", "--keyword", "fixture", "--labels", "label-a,label-b", "--page", "2", "--page-size", "7"},
+	"hrbrain +profile-career":              {"hrbrain", "+profile-career", "--work-no", "work-1"},
+	"hrbrain +profile-labels":              {"hrbrain", "+profile-labels", "--staff-ids", "work-1,work-2", "--all-label"},
+	"hrbrain +profile-metadata":            {"hrbrain", "+profile-metadata", "--work-no", "work-1"},
+	"hrbrain +profile-performance":         {"hrbrain", "+profile-performance", "--work-no", "work-1"},
+	"hrbrain +query-profile":               {"hrbrain", "+query-profile", "--work-no", "work-1", "--data-queries", `[{"modelCode":"basic","fields":["name"]}]`},
+	"hrbrain +search-employees":            {"hrbrain", "+search-employees", "--keyword", "fixture", "--dept-name", "Fixture Dept", "--position-name", "Engineer", "--job-level", "P7", "--pool-code", "pool-1", "--page", "2", "--page-size", "7"},
+	"hrbrain +search-employees-structured": {"hrbrain", "+search-employees-structured", "--origin-json", `{"rules":[],"combinator":"and"}`, "--fields", `[{"label":"name","value":"name"}]`, "--order-by", "name", "--page", "2", "--page-size", "7"},
+	"hrbrain profile career":               {"hrbrain", "profile", "career", "--work-no", "work-1"},
+	"hrbrain profile labels":               {"hrbrain", "profile", "labels", "--staff-ids", "work-1,work-2", "--all-label"},
+	"hrbrain profile metadata":             {"hrbrain", "profile", "metadata", "--work-no", "work-1"},
+	"hrbrain profile performance":          {"hrbrain", "profile", "performance", "--work-no", "work-1"},
+	"hrbrain profile query":                {"hrbrain", "profile", "query", "--work-no", "work-1", "--data-queries", `[{"modelCode":"basic","fields":["name"]}]`},
+	"hrbrain search employees":             {"hrbrain", "search", "employees", "--keyword", "fixture", "--dept-name", "Fixture Dept", "--position-name", "Engineer", "--job-level", "P7", "--pool-code", "pool-1", "--page", "2", "--page-size", "7"},
+	"hrbrain search employees-structured":  {"hrbrain", "search", "employees-structured", "--origin-json", `{"rules":[],"combinator":"and"}`, "--fields", `[{"label":"name","value":"name"}]`, "--order-by", "name", "--page", "2", "--page-size", "7"},
+	"hrbrain talent-pool detail":           {"hrbrain", "talent-pool", "detail", "--pool-code", "pool-1"},
+	"hrbrain talent-pool employees":        {"hrbrain", "talent-pool", "employees", "--pool-code", "pool-1", "--page", "2", "--page-size", "7"},
+	"hrbrain talent-pool list":             {"hrbrain", "talent-pool", "list", "--keyword", "fixture", "--labels", "label-a,label-b", "--page", "2", "--page-size", "7"},
+	"pat +browser-policy":                  {"pat", "+browser-policy", "--enabled=false", "--agent-code", "fixture-agent", "--dry-run"},
+	"pat browser-policy":                   {"pat", "browser-policy", "--enabled=false", "--agentCode", "fixture-agent"},
+	"pat chmod":                            {"pat", "chmod", "--product", "calendar", "--products", "aitable", "--domain", "chat", "--domains", "mail", "--grant-type", "session", "--session-id", "session-1", "--recommend", "--agentCode", "fixture-agent", "--dry-run"},
+	"attendance +check-record":             {"attendance", "+check-record", "--users", "user-1,user-2", "--start", "2026-03-10 00:00:00", "--end", "2026-03-10 23:59:59"},
+	"attendance +get-adjustment-rule":      {"attendance", "+get-adjustment-rule", "--adjustment-id", "adjustment-1"},
+	"attendance +get-approve-template":     {"attendance", "+get-approve-template", "--type", "leave"},
+	"attendance +get-checkin-record":       {"attendance", "+get-checkin-record", "--operator-corp-id", "corp-1", "--operator-staff-id", "staff-operator", "--staff-ids", "staff-1,staff-2", "--start", "2026-03-10 00:00:00", "--end", "2026-03-10 23:59:59"},
+	"attendance +get-leave-records":        {"attendance", "+get-leave-records", "--user", "user-1", "--start", "2026-03-01", "--end", "2026-03-31", "--leave-code", "annual_leave"},
+	"attendance +get-overtime-rule":        {"attendance", "+get-overtime-rule", "--overtime-id", "overtime-1"},
+	"attendance +get-schedule":             {"attendance", "+get-schedule", "--users", "user-1,user-2", "--start", "2026-03-10", "--end", "2026-03-11"},
+	"attendance +get-self-setting":         {"attendance", "+get-self-setting", "--user", "user-1", "--setting-scene", "checkRemind"},
+	"attendance +get-summary":              {"attendance", "+get-summary", "--user", "user-1", "--date", "2026-03-10", "--stats-type", "week"},
+	"attendance +list-approve":             {"attendance", "+list-approve", "--users", "user-1,user-2", "--types", "leave", "--start", "2026-03-01", "--end", "2026-03-31"},
+	"attendance +query-report-data":        {"attendance", "+query-report-data", "--users", "user-1,user-2", "--columns", "attendance_days,late_count", "--start", "2026-03-01", "--end", "2026-03-31"},
+	"attendance +search-adjustment-rule":   {"attendance", "+search-adjustment-rule", "--query", "fixture", "--page", "2", "--limit", "7"},
+	"attendance +search-class":             {"attendance", "+search-class", "--filter-type", "name", "--query", "fixture"},
+	"attendance +search-group":             {"attendance", "+search-group", "--type", "FIXED"},
+	"attendance +search-overtime-rule":     {"attendance", "+search-overtime-rule", "--query", "fixture", "--page", "2", "--limit", "7"},
+	"ding +list":                           {"ding", "+list", "--cursor", "0", "--type", "ALL"},
+	"ding +recall-personal":                {"ding", "+recall-personal", "--id", "ding-1", "--yes"},
+	"ding +send-personal":                  {"ding", "+send-personal", "--users", appFixtureCurrentDOpenID, "--content", "fixture", "--yes"},
+	"mail +contact-list":                   {"mail", "+contact-list", "--email", "fixture@example.com", "--limit", "7", "--cursor", "cursor-1"},
+	"mail +folder-list":                    {"mail", "+folder-list", "--email", "fixture@example.com", "--folder", "folder-1"},
+	"mail +message":                        {"mail", "+message", "--email", "fixture@example.com", "--id", "message-1"},
+	"mail +messages":                       {"mail", "+messages", "--email", "fixture@example.com", "--ids", "message-1,message-2"},
+	"mail +recent-mail":                    {"mail", "+recent-mail", "--limit", "7", "--cursor", "cursor-1"},
+	"mail +search-mail":                    {"mail", "+search-mail", "--query", "fixture", "--size", "7", "--cursor", "cursor-1"},
+	"mail +template-list":                  {"mail", "+template-list", "--email", "fixture@example.com", "--limit", "7", "--cursor", "cursor-1"},
+	"mail +thread":                         {"mail", "+thread", "--email", "fixture@example.com", "--id", "thread-1"},
+	"mail +thread-list":                    {"mail", "+thread-list", "--email", "fixture@example.com", "--folder", "folder-1", "--cursor", "cursor-1"},
+	"mail +triage":                         {"mail", "+triage", "--query", "fixture", "--limit", "7", "--cursor", "cursor-1"},
+	"mail +unread-mail":                    {"mail", "+unread-mail", "--size", "7", "--cursor", "cursor-1"},
+	"mail +user-search":                    {"mail", "+user-search", "--keyword", "fixture", "--cursor", "cursor-1"},
+	"markdown create":                      {"markdown", "create", "--content", "# Fixture", "--name", "fixture.md", "--space-id", "space-1"},
+	"markdown diff":                        {"markdown", "diff", "--node", "node-1", "--version", "1", "--version2", "2", "--context", "3"},
+	"markdown fetch":                       {"markdown", "fetch", "--node", "node-1", "--space-id", "space-1", "--output", "/tmp/dws-markdown-fixture.md"},
+	"markdown overwrite":                   {"markdown", "overwrite", "--node", "node-1", "--content", "# Fixture", "--name", "fixture.md", "--space-id", "space-1", "--yes"},
+	"markdown patch":                       {"markdown", "patch", "--node", "node-1", "--pattern", "old", "--content", "new", "--regex", "--space-id", "space-1", "--yes"},
+	"oa +list-cc":                          {"oa", "+list-cc", "--page", "2"},
+	"oa +list-executed":                    {"oa", "+list-executed", "--limit", "7", "--page", "2"},
+	"oa +list-forms":                       {"oa", "+list-forms", "--cursor", "2"},
+	"oa +list-pending":                     {"oa", "+list-pending", "--start", "1773072000000", "--end", "1773158399000", "--page", "2"},
+	"oa +list-submitted":                   {"oa", "+list-submitted", "--page", "2"},
+	"oa +my-initiated":                     {"oa", "+my-initiated", "--page", "2"},
+	"report +outbox-list":                  {"report", "+outbox-list", "--size", "7"},
+	"report +report-latest":                {"report", "+report-latest", "--keyword", "Fixture", "--start", "2026-03-01T00:00:00+08:00", "--end", "2026-03-10T00:00:00+08:00"},
+	"report +template-search":              {"report", "+template-search", "--query", "fixture"},
+	"sheet +list-sheets":                   {"sheet", "+list-sheets", "--node", "node-1"},
+	"sheet +read":                          {"sheet", "+read", "--node", "node-1", "--sheet-id", "Sheet1"},

 	"minutes +detail":             {"minutes", "+detail", "--ids", "u1,u2"},
 	"minutes +latest":             {"minutes", "+latest", "--keyword", "fixture"},
@@ -1030,14 +1084,14 @@ func assertParamAliasCannotBypassConfirmation(t *testing.T, aliasArgs []string)
 	}
 }

-// TestCrossPlatformCoverageEightProductTemplatedParamAliasesCannotBypassConfirmation
+// TestCrossPlatformCoverageReviewedProductTemplatedParamAliasesCannotBypassConfirmation
 // exercises every distinct reviewed mutating complete-command template in the
-// eight-product Shortcut expansion. The fixture gate already proves every
+// reviewed product expansions. The fixture gate already proves every
 // alias resolves through PreParse; this gate removes the confirmation flag
 // from one active alias invocation per distinct template and requires the
 // runtime boundary to stop it before the first transport call. An explicit
 // --dry-run is a reviewed preview path and must not carry a bypass flag.
-func TestCrossPlatformCoverageEightProductTemplatedParamAliasesCannotBypassConfirmation(t *testing.T) {
+func TestCrossPlatformCoverageReviewedProductTemplatedParamAliasesCannotBypassConfirmation(t *testing.T) {
 	concepts, err := cli.LoadParamConcepts()
 	if err != nil {
 		t.Fatalf("LoadParamConcepts() error = %v", err)
@@ -1051,7 +1105,8 @@ func TestCrossPlatformCoverageEightProductTemplatedParamAliasesCannotBypassConfi
 		}
 		product, _, _ := strings.Cut(fixture.Command, " ")
 		switch product {
-		case "attendance", "mail", "oa", "ding", "report", "sheet", "whiteboard", "markdown":
+		case "attendance", "mail", "oa", "ding", "report", "sheet", "whiteboard", "markdown",
+			"aisearch", "contact", "live", "devdoc", "hrbrain", "pat":
 		default:
 			continue
 		}
@@ -740,6 +740,7 @@ func (r *runtimeRunner) executeInvocation(ctx context.Context, endpoint string,
 			"mcp_tool_error",
 			"MCP tool returned a business error; check tool parameters and refer to skill documentation.",
 			invocation.CanonicalProduct,
+			invocation.Tool,
 			diag,
 		)
 		logBusinessError(r.transport.FileLogger, serverFailureReason(mcpErr, "mcp_tool_error"), invocation, callResult.Content, diag)
@@ -765,6 +766,7 @@ func (r *runtimeRunner) executeInvocation(ctx context.Context, endpoint string,
 			"business_error",
 			"The API returned a business-level error. Check required parameters and values.",
 			invocation.CanonicalProduct,
+			invocation.Tool,
 			diag,
 		)
 		logBusinessError(r.transport.FileLogger, serverFailureReason(classifiedErr, "business_error"), invocation, callResult.Content, diag)
@@ -20,18 +20,50 @@ import (
 )

 type serverFailureClass struct {
-	message string
-	reason  string
-	origin  string
-	stage   string
-	hint    string
-	actions []string
+	message   string
+	reason    string
+	origin    string
+	stage     string
+	hint      string
+	actions   []string
+	operation string
+	retryable *bool
 }

-func classifyServerFailure(message string, diag apperrors.ServerDiagnostics) (serverFailureClass, bool) {
+func classifyServerFailure(message, serverKey, tool string, diag apperrors.ServerDiagnostics) (serverFailureClass, bool) {
 	code := strings.ToUpper(strings.TrimSpace(diag.ServerErrorCode))
 	detail := strings.ToLower(strings.TrimSpace(diag.TechnicalDetail))
 	text := strings.ToLower(strings.TrimSpace(message))
+	combined := text + " " + detail
+
+	if code == "999" &&
+		(strings.Contains(combined, "nullpointerexception") || strings.Contains(combined, "system error")) {
+		classified := serverFailureClass{
+			message: message,
+			reason:  "upstream_internal_error",
+			origin:  "dingtalk_api",
+			stage:   "upstream_execution",
+			hint:    "上游服务发生内部异常；请保留 Trace ID 和 Server Code，确认操作结果后再决定是否重试。",
+			actions: []string{
+				"检查目标资源的当前状态，确认本次操作是否已经生效",
+				"状态未确认前不要直接重试写操作",
+				"持续失败时携带 Trace ID 和 Server Code 联系服务端排查",
+			},
+		}
+		if strings.EqualFold(strings.TrimSpace(serverKey), "todo") &&
+			strings.EqualFold(strings.TrimSpace(tool), "create_personal_todo") {
+			retryable := false
+			classified.operation = "todo/create_personal_todo"
+			classified.retryable = &retryable
+			classified.hint = "待办服务发生内部异常，创建结果未知；请先查询是否已创建相同待办，再决定是否重试。"
+			classified.actions = []string{
+				"查询近期由自己创建的待办，核对标题、执行人和截止时间",
+				"确认没有创建成功后再重新提交",
+				"持续失败时携带 Trace ID 和 Server Code 联系服务端排查",
+			}
+		}
+		return classified, true
+	}

 	if code == "NETWORK_ERROR" ||
 		strings.Contains(detail, "statuscode.unavailable") ||
@@ -74,6 +106,7 @@ func newServerFailureAPIError(
 	fallbackReason string,
 	fallbackHint string,
 	serverKey string,
+	tool string,
 	diag apperrors.ServerDiagnostics,
 ) error {
 	opts := []apperrors.Option{
@@ -84,7 +117,7 @@ func newServerFailureAPIError(
 		apperrors.WithActions("运行 dws doctor 检查登录态、网络和本地环境；持续失败时保留 Trace ID 和 Server Code"),
 		apperrors.WithServerDiag(diag),
 	}
-	if classified, ok := classifyServerFailure(message, diag); ok {
+	if classified, ok := classifyServerFailure(message, serverKey, tool, diag); ok {
 		message = classified.message
 		opts = append(opts,
 			apperrors.WithReason(classified.reason),
@@ -93,6 +126,12 @@ func newServerFailureAPIError(
 			apperrors.WithHint(classified.hint),
 			apperrors.WithActions(classified.actions...),
 		)
+		if classified.operation != "" {
+			opts = append(opts, apperrors.WithOperation(classified.operation))
+		}
+		if classified.retryable != nil {
+			opts = append(opts, apperrors.WithRetryable(*classified.retryable))
+		}
 	}
 	return apperrors.NewAPI(message, opts...)
 }
@@ -34,6 +34,7 @@ func TestCrossPlatformCoverageServerFailureClassifierBackendMetadataUnavailable(
 		"business_error",
 		"check parameters",
 		"im",
+		"list_conversations",
 		apperrors.ServerDiagnostics{
 			TraceID:         "trace-local",
 			ServerErrorCode: "NETWORK_ERROR",
@@ -66,6 +67,7 @@ func TestCrossPlatformCoverageServerFailureClassifierRequiredConversationID(t *t
 		"business_error",
 		"check parameters",
 		"chat",
+		"send_message",
 		apperrors.ServerDiagnostics{ServerErrorCode: "1001"},
 	)
 	var typed *apperrors.Error
@@ -80,12 +82,74 @@ func TestCrossPlatformCoverageServerFailureClassifierRequiredConversationID(t *t
 	}
 }

+func TestCrossPlatformCoverageServerFailureClassifierTodoCreateUpstreamInternalError(t *testing.T) {
+	serverSaysRetryable := true
+	err := newServerFailureAPIError(
+		"[UNCLASSIFIED] system error: java.lang.NullPointerException (operation: todo/create_personal_todo)",
+		"business_error",
+		"The API returned a business-level error. Check required parameters and values.",
+		"todo",
+		"create_personal_todo",
+		apperrors.ServerDiagnostics{
+			TraceID:         "trace-todo-create",
+			ServerErrorCode: "999",
+			ServerRetryable: &serverSaysRetryable,
+		},
+	)
+
+	var typed *apperrors.Error
+	if !errors.As(err, &typed) {
+		t.Fatalf("error = %T, want *errors.Error", err)
+	}
+	if typed.Reason != "upstream_internal_error" || typed.Origin != "dingtalk_api" || typed.FailureStage != "upstream_execution" {
+		t.Fatalf("classification = reason %q origin %q stage %q", typed.Reason, typed.Origin, typed.FailureStage)
+	}
+	if typed.Operation != "todo/create_personal_todo" {
+		t.Fatalf("operation = %q, want todo/create_personal_todo", typed.Operation)
+	}
+	if typed.ExecutionStarted != nil {
+		t.Fatalf("execution_started = %v, want unknown", typed.ExecutionStarted)
+	}
+	if !typed.RetryableSet || typed.Retryable {
+		t.Fatalf("retryability = (%v, %v), want explicit false", typed.RetryableSet, typed.Retryable)
+	}
+	if typed.ServerDiag.TraceID != "trace-todo-create" || typed.ServerDiag.ServerErrorCode != "999" {
+		t.Fatalf("diagnostics = %#v", typed.ServerDiag)
+	}
+	if strings.Contains(strings.ToLower(typed.Hint), "parameter") || !strings.Contains(typed.Hint, "创建结果未知") {
+		t.Fatalf("hint = %q", typed.Hint)
+	}
+	for _, action := range typed.Actions {
+		if strings.Contains(action, "dws doctor") || strings.Contains(action, "登录") || strings.Contains(action, "网络") {
+			t.Fatalf("misleading action = %q", action)
+		}
+	}
+
+	payload := multiProfileErrorPayload(err)
+	for key, want := range map[string]any{
+		"reason":            "upstream_internal_error",
+		"origin":            "dingtalk_api",
+		"stage":             "upstream_execution",
+		"retryable":         false,
+		"trace_id":          "trace-todo-create",
+		"server_error_code": "999",
+	} {
+		if got := payload[key]; got != want {
+			t.Errorf("payload[%q] = %#v, want %#v", key, got, want)
+		}
+	}
+	if _, ok := payload["execution_started"]; ok {
+		t.Fatalf("payload must keep execution_started unknown: %#v", payload)
+	}
+}
+
 func TestCrossPlatformCoverageServerFailureClassifierUnknownFallsBack(t *testing.T) {
 	err := newServerFailureAPIError(
 		"business error: success=false",
 		"business_error",
 		"check parameters",
 		"im",
+		"list_conversations",
 		apperrors.ServerDiagnostics{},
 	)
 	var typed *apperrors.Error
@@ -106,6 +170,7 @@ func TestCrossPlatformCoverageServerFailureReasonUsesTypedClassification(t *test
 		"business_error",
 		"check parameters",
 		"im",
+		"list_conversations",
 		apperrors.ServerDiagnostics{ServerErrorCode: "NETWORK_ERROR"},
 	)
 	if got := serverFailureReason(err, "business_error"); got != "backend_dependency_unavailable" {
@@ -123,6 +188,7 @@ func TestCrossPlatformCoverageMultiProfileErrorPayloadPreservesFailureSemantics(
 		"business_error",
 		"check parameters",
 		"im",
+		"list_conversations",
 		apperrors.ServerDiagnostics{
 			TraceID:         "trace-multi",
 			ServerErrorCode: "NETWORK_ERROR",
@@ -224,3 +290,58 @@ func TestCrossPlatformCoverageExecuteInvocationClassifiesObservedMCPMetadataFail
 		t.Fatalf("execution_started must remain unknown: %v", typed.ExecutionStarted)
 	}
 }
+
+func TestCrossPlatformCoverageExecuteInvocationClassifiesTodoCreateUpstreamInternalError(t *testing.T) {
+	server := httptest.NewServer(http.HandlerFunc(func(w http.ResponseWriter, r *http.Request) {
+		var request struct {
+			ID int `json:"id"`
+		}
+		if err := json.NewDecoder(r.Body).Decode(&request); err != nil {
+			t.Errorf("decode request: %v", err)
+		}
+		_ = json.NewEncoder(w).Encode(map[string]any{
+			"jsonrpc": "2.0",
+			"id":      request.ID,
+			"result": map[string]any{
+				"structuredContent": map[string]any{
+					"success":  false,
+					"code":     "999",
+					"trace_id": "trace-todo-replay",
+					"errorMsg": "[UNCLASSIFIED] system error: java.lang.NullPointerException (operation: todo/create_personal_todo)",
+				},
+			},
+		})
+	}))
+	defer server.Close()
+
+	client := transport.NewClient(server.Client())
+	client.TrustedDomains = []string{strings.TrimPrefix(server.URL, "http://")}
+	runner := &runtimeRunner{
+		transport:   client,
+		globalFlags: &GlobalFlags{Token: "local-test-token"},
+	}
+	_, err := runner.executeInvocation(context.Background(), server.URL, executor.Invocation{
+		CanonicalProduct: "todo",
+		Tool:             "create_personal_todo",
+		CanonicalPath:    "todo.create_personal_todo",
+		Params: map[string]any{
+			"PersonalTodoCreateVO": map[string]any{
+				"subject":     "fixture",
+				"executorIds": []string{"user-1"},
+			},
+		},
+	})
+	var typed *apperrors.Error
+	if !errors.As(err, &typed) {
+		t.Fatalf("executeInvocation() error = %T %v, want typed API error", err, err)
+	}
+	if typed.Reason != "upstream_internal_error" || typed.Operation != "todo/create_personal_todo" {
+		t.Fatalf("classification = reason %q operation %q", typed.Reason, typed.Operation)
+	}
+	if !typed.RetryableSet || typed.Retryable || typed.ExecutionStarted != nil {
+		t.Fatalf("failure semantics = retryable(%v,%v) execution_started=%v", typed.RetryableSet, typed.Retryable, typed.ExecutionStarted)
+	}
+	if typed.ServerDiag.TraceID != "trace-todo-replay" || typed.ServerDiag.ServerErrorCode != "999" {
+		t.Fatalf("diagnostics = %#v", typed.ServerDiag)
+	}
+}
@@ -10,6 +10,102 @@ package cli
 // generatedParamAliases is the per-command parameter-alias table reduced from
 // the reviewed concept dictionary. Each entry binds one runnable Cobra leaf.
 var generatedParamAliases = []ParamAliasEntry{
+	{
+		CLIPath: "aisearch",
+		Aliases: map[string]string{
+			"dimensions":       "dimension",
+			"person-dimension": "dimension",
+			"person-name":      "query",
+			"person-query":     "query",
+			"search-by":        "dimension",
+			"search-dimension": "dimension",
+			"search-term":      "query",
+		},
+		Blocked:   []string{"action-type", "behavior-type", "category", "chat-scope", "department-id", "direction", "employee-number", "field", "job-number", "mobile", "open-dingtalk-id", "phone-number", "queries", "search-types", "time-range", "types", "user-id"},
+		Ambiguous: []string{"department", "duty", "employee", "id", "phone", "position", "scope", "target"},
+	},
+	{
+		CLIPath: "aisearch +search-person",
+		Aliases: map[string]string{
+			"dimension":        "dimensions",
+			"keyword":          "query",
+			"keywords":         "query",
+			"person-dimension": "dimensions",
+			"person-name":      "query",
+			"person-query":     "query",
+			"q":                "query",
+			"search-by":        "dimensions",
+			"search-dimension": "dimensions",
+			"search-term":      "query",
+			"search-word":      "query",
+		},
+		Blocked:   []string{"action-type", "behavior-type", "category", "chat-scope", "department-id", "direction", "employee-number", "field", "ids", "job-number", "mobile", "name", "open-dingtalk-id", "phone-number", "position-id", "queries", "search-types", "subject", "text", "time-range", "title", "type", "types", "user-id"},
+		Ambiguous: []string{"department", "duty", "employee", "id", "phone", "position", "scope", "target"},
+	},
+	{
+		CLIPath: "aisearch behavior",
+		Aliases: map[string]string{
+			"action-type":           "behavior-type",
+			"activity-type":         "behavior-type",
+			"behavior-action":       "behavior-type",
+			"chat-name":             "chat-scope",
+			"content-queries":       "queries",
+			"content-query":         "queries",
+			"content-types":         "types",
+			"conversation-name":     "chat-scope",
+			"date-range":            "time-range",
+			"group-name":            "chat-scope",
+			"im-scope":              "chat-scope",
+			"interaction-direction": "direction",
+			"interaction-flow":      "direction",
+			"message-flow":          "direction",
+			"period":                "time-range",
+			"resource-types":        "types",
+			"search-categories":     "types",
+			"search-period":         "time-range",
+			"search-terms":          "queries",
+			"search-type-list":      "types",
+			"time-window":           "time-range",
+			"topic-queries":         "queries",
+			"topics":                "queries",
+		},
+		Blocked:   []string{"chat-id", "conversation-id", "created-at", "dimension", "dimensions", "document-id", "end", "file-id", "from", "group-id", "natural-language", "node-id", "open-conversation-id", "open-dingtalk-id", "question", "receiver", "sender", "since", "start", "to", "until", "update", "updated-at", "user-id", "write"},
+		Ambiguous: []string{"action", "actor", "category", "chat", "conversation", "date", "destination", "group", "range", "scope", "source", "target", "time", "type"},
+	},
+	{
+		CLIPath: "aisearch enterprise",
+		Aliases: map[string]string{
+			"content-queries":   "queries",
+			"content-query":     "queries",
+			"content-types":     "types",
+			"date-range":        "time-range",
+			"period":            "time-range",
+			"resource-types":    "types",
+			"search-categories": "types",
+			"search-period":     "time-range",
+			"search-terms":      "queries",
+			"search-type-list":  "types",
+			"time-window":       "time-range",
+			"topic-queries":     "queries",
+			"topics":            "queries",
+		},
+		Blocked:   []string{"action-type", "behavior-type", "chat-scope", "created-at", "dimension", "dimensions", "direction", "document-id", "end", "file-id", "from", "group-name", "node-id", "open-dingtalk-id", "receiver", "sender", "since", "start", "to", "until", "update", "updated-at", "user-id", "write"},
+		Ambiguous: []string{"category", "date", "natural-language", "question", "range", "scope", "source", "time", "type"},
+	},
+	{
+		CLIPath: "aisearch person",
+		Aliases: map[string]string{
+			"dimensions":       "dimension",
+			"person-dimension": "dimension",
+			"person-name":      "query",
+			"person-query":     "query",
+			"search-by":        "dimension",
+			"search-dimension": "dimension",
+			"search-term":      "query",
+		},
+		Blocked:   []string{"action-type", "behavior-type", "category", "chat-scope", "department-id", "direction", "employee-number", "field", "ids", "job-number", "mobile", "open-dingtalk-id", "phone-number", "position-id", "queries", "search-types", "time-range", "types", "user-id"},
+		Ambiguous: []string{"department", "duty", "employee", "id", "phone", "position", "scope", "target"},
+	},
 	{
 		CLIPath: "aitable +advperm-disable",
 		Aliases: map[string]string{
@@ -4128,6 +4224,13 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"conversation-ids", "dest-conversation-id", "group-id", "group-ids", "group-name", "id", "name", "open-conversation-ids", "source", "src-conversation-id", "target"},
 	},
+	{
+		CLIPath: "contact +by-mobile",
+		Aliases: map[string]string{
+			"org-user-mobile": "mobile",
+		},
+		Blocked: []string{"email", "login-id", "user-id"},
+	},
 	{
 		CLIPath: "contact +dept-members",
 		Aliases: map[string]string{
@@ -4148,6 +4251,23 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"department-id", "dept", "dept-id", "name", "query"},
 	},
+	{
+		CLIPath: "contact +list-followings",
+		Aliases: map[string]string{
+			"open-dingtalk-id": "open-id",
+			"open-dingtalkid":  "open-id",
+		},
+		Blocked:   []string{"email", "mobile", "name", "open-dingtalk-ids", "phone", "query", "staff-id", "user-id", "userid"},
+		Ambiguous: []string{"id", "person", "user"},
+	},
+	{
+		CLIPath: "contact +list-role-members",
+		Aliases: map[string]string{
+			"label-id": "id",
+			"role-id":  "id",
+		},
+		Blocked: []string{"dept", "dept-id", "ids", "names", "staff-id", "user-id"},
+	},
 	{
 		CLIPath: "contact +list-sub-depts",
 		Aliases: map[string]string{
@@ -4159,6 +4279,28 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"department-ids", "dept-ids", "depts", "name", "query"},
 	},
+	{
+		CLIPath: "contact +lookup",
+		Aliases: map[string]string{
+			"employee-name": "name",
+			"flower-name":   "name",
+			"person-name":   "name",
+			"staff-name":    "name",
+			"user-name":     "name",
+		},
+		Blocked: []string{"department-id", "dept", "dept-id", "org-name", "role-name"},
+	},
+	{
+		CLIPath: "contact +org",
+		Aliases: map[string]string{
+			"employee-name": "name",
+			"flower-name":   "name",
+			"person-name":   "name",
+			"staff-name":    "name",
+			"user-name":     "name",
+		},
+		Blocked: []string{"department-id", "dept", "dept-id", "org-name", "role-name"},
+	},
 	{
 		CLIPath: "contact +resolve-dept",
 		Aliases: map[string]string{
@@ -4170,6 +4312,13 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"subject", "text", "title"},
 	},
+	{
+		CLIPath: "contact +search-mobile",
+		Aliases: map[string]string{
+			"org-user-mobile": "mobile",
+		},
+		Blocked: []string{"email", "login-id", "user-id"},
+	},
 	{
 		CLIPath: "contact +search-user",
 		Aliases: map[string]string{
@@ -4180,6 +4329,65 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"name", "subject", "text", "title"},
 	},
+	{
+		CLIPath: "contact +team",
+		Aliases: map[string]string{
+			"employee-name": "name",
+			"flower-name":   "name",
+			"person-name":   "name",
+			"staff-name":    "name",
+			"user-name":     "name",
+		},
+		Blocked: []string{"department-id", "dept", "dept-id", "org-name", "role-name"},
+	},
+	{
+		CLIPath: "contact account create",
+		Aliases: map[string]string{
+			"account-login-id":       "login-id",
+			"department-ids":         "dept-ids",
+			"depts":                  "dept-ids",
+			"email-address":          "email",
+			"employee-name":          "org-user-name",
+			"login-account":          "login-id",
+			"mail-address":           "email",
+			"mobile":                 "org-user-mobile",
+			"organization-user-name": "org-user-name",
+			"staff-name":             "org-user-name",
+		},
+		Blocked: []string{"creator-username", "department-id", "department-memberships-json", "dept", "dept-id", "depts-json", "name", "nick", "org-name", "query", "staff-id", "user-id"},
+	},
+	{
+		CLIPath: "contact account update",
+		Aliases: map[string]string{
+			"department-assignments-json": "depts",
+			"department-memberships-json": "depts",
+			"employee-name":               "org-user-name",
+			"organization-user-name":      "org-user-name",
+			"profile-image-file-id":       "avatar-file-id",
+			"staff-id":                    "user-id",
+			"staff-name":                  "org-user-name",
+			"uid":                         "user-id",
+			"user":                        "user-id",
+		},
+		Blocked:   []string{"at-user-ids", "creator-username", "department-id", "department-ids", "dept", "dept-id", "dept-ids", "file", "name", "node-id", "org-name", "ownness-text", "parent", "parent-id", "to-user", "user-ids", "users"},
+		Ambiguous: []string{"manager", "owner-id"},
+	},
+	{
+		CLIPath: "contact dept create",
+		Aliases: map[string]string{
+			"new-parent-dept-id":   "parent",
+			"parent-department-id": "parent",
+			"parent-dept-id":       "parent",
+		},
+		Blocked: []string{"department-ids", "dept", "dept-id", "dept-ids", "depts"},
+	},
+	{
+		CLIPath: "contact dept get-info",
+		Aliases: map[string]string{
+			"department-id": "dept",
+		},
+		Blocked: []string{"department", "department-ids", "depts", "parent", "parent-id"},
+	},
 	{
 		CLIPath: "contact dept list-children",
 		Aliases: map[string]string{
@@ -4190,18 +4398,180 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"department-ids", "depts", "name", "query"},
 	},
+	{
+		CLIPath: "contact dept list-members",
+		Aliases: map[string]string{
+			"department-ids": "depts",
+		},
+		Blocked: []string{"department-id", "dept", "name", "query"},
+	},
+	{
+		CLIPath: "contact dept search",
+		Aliases: map[string]string{
+			"keywords":    "query",
+			"q":           "query",
+			"search-word": "query",
+		},
+		Blocked: []string{"subject", "text", "title"},
+	},
+	{
+		CLIPath: "contact dept update",
+		Aliases: map[string]string{
+			"new-parent-dept-id":   "parent",
+			"parent-department-id": "parent",
+			"parent-dept-id":       "parent",
+			"target-department-id": "dept",
+			"target-dept-id":       "dept",
+		},
+		Blocked:   []string{"department-ids", "depts"},
+		Ambiguous: []string{"department", "target-id"},
+	},
+	{
+		CLIPath: "contact label get",
+		Aliases: map[string]string{
+			"label-names": "names",
+			"role-names":  "names",
+		},
+		Blocked: []string{"dept-id", "id", "label-id", "role-id", "user-id"},
+	},
+	{
+		CLIPath: "contact label list-members",
+		Blocked: []string{"dept", "dept-id", "ids", "names", "staff-id", "user-id"},
+	},
+	{
+		CLIPath: "contact org create",
+		Aliases: map[string]string{
+			"company-name":      "org-name",
+			"corp-name":         "org-name",
+			"creator-name":      "creator-username",
+			"founder-name":      "creator-username",
+			"organization-name": "org-name",
+		},
+		Blocked:   []string{"login-id", "user-id"},
+		Ambiguous: []string{"name"},
+	},
+	{
+		CLIPath: "contact user dismission search",
+		Aliases: map[string]string{
+			"begin":          "start",
+			"current-page":   "page",
+			"department-ids": "depts",
+			"dept-ids":       "depts",
+			"employee-name":  "name",
+			"end-date":       "end",
+			"end-time":       "end",
+			"flower-name":    "name",
+			"from":           "start",
+			"from-date":      "start",
+			"max-result":     "limit",
+			"max-results":    "limit",
+			"max-time":       "end",
+			"min-time":       "start",
+			"page-no":        "page",
+			"page-num":       "page",
+			"page-size":      "limit",
+			"per-page":       "limit",
+			"person-name":    "name",
+			"since":          "start",
+			"size":           "limit",
+			"staff-name":     "name",
+			"start-date":     "start",
+			"start-time":     "start",
+			"take":           "limit",
+			"time-max":       "end",
+			"time-min":       "start",
+			"top":            "limit",
+			"user-name":      "name",
+		},
+		Blocked: []string{"count", "cursor", "date", "department-id", "department-memberships-json", "dept", "dept-id", "dept-list-json", "offset", "page-index", "page-token", "query", "time"},
+	},
+	{
+		CLIPath: "contact user get",
+		Aliases: map[string]string{
+			"member-user-ids": "ids",
+			"staff-ids":       "ids",
+			"users":           "ids",
+		},
+		Blocked: []string{"at-user-ids", "staff-id", "uid", "user"},
+	},
+	{
+		CLIPath: "contact user invite",
+		Aliases: map[string]string{
+			"department-assignments-json": "depts",
+			"department-memberships-json": "depts",
+			"employee-name":               "org-user-name",
+			"mobile":                      "org-user-mobile",
+			"organization-user-name":      "org-user-name",
+			"staff-name":                  "org-user-name",
+		},
+		Blocked: []string{"creator-username", "department-id", "department-ids", "dept", "dept-id", "dept-ids", "email", "login-id", "nick", "org-name", "parent", "parent-id", "user-id"},
+	},
 	{
 		CLIPath: "contact user profile get",
 		Aliases: map[string]string{
-			"id":      "staff-id",
-			"ids":     "staff-id",
-			"uid":     "staff-id",
-			"user":    "staff-id",
-			"user-id": "staff-id",
-			"userid":  "staff-id",
+			"field-code-list": "fields",
+			"field-codes":     "fields",
+			"id":              "staff-id",
+			"ids":             "staff-id",
+			"profile-fields":  "fields",
+			"roster-fields":   "fields",
+			"uid":             "staff-id",
+			"user":            "staff-id",
+			"user-id":         "staff-id",
+			"userid":          "staff-id",
+		},
+		Blocked: []string{"at-user-ids", "name", "output-fields", "staff-ids", "to-user", "user-ids", "users"},
+	},
+	{
+		CLIPath: "contact user search",
+		Aliases: map[string]string{
+			"keywords":    "query",
+			"q":           "query",
+			"search-word": "query",
+		},
+		Blocked: []string{"subject", "text", "title"},
+	},
+	{
+		CLIPath: "contact user search-mobile",
+		Aliases: map[string]string{
+			"org-user-mobile": "mobile",
+		},
+		Blocked: []string{"email", "login-id", "user-id"},
+	},
+	{
+		CLIPath: "contact user update",
+		Aliases: map[string]string{
+			"department-assignments-json": "depts",
+			"department-memberships-json": "depts",
+			"employee-name":               "org-user-name",
+			"organization-user-name":      "org-user-name",
+			"staff-id":                    "user-id",
+			"staff-name":                  "org-user-name",
+			"uid":                         "user-id",
+			"user":                        "user-id",
+		},
+		Blocked:   []string{"at-user-ids", "creator-username", "department-id", "department-ids", "dept", "dept-id", "dept-ids", "name", "nick", "org-name", "parent", "parent-id", "to-user", "user-ids", "users"},
+		Ambiguous: []string{"manager", "owner-id"},
+	},
+	{
+		CLIPath: "contact user update-ownness",
+		Aliases: map[string]string{
+			"personal-status": "ownness-text",
+			"staff-id":        "user-id",
+			"status":          "ownness-text",
+			"status-text":     "ownness-text",
+			"uid":             "user-id",
+			"user":            "user-id",
 		},
 		Blocked: []string{"at-user-ids", "name", "to-user", "user-ids", "users"},
 	},
+	{
+		CLIPath: "contact user update-self",
+		Aliases: map[string]string{
+			"profile-image-file-id": "avatar-file-id",
+		},
+		Blocked: []string{"file", "name", "node-id", "org-user-name", "ownness-text", "user-id"},
+	},
 	{
 		CLIPath: "dev app get",
 		Aliases: map[string]string{
@@ -4213,18 +4583,26 @@ var generatedParamAliases = []ParamAliasEntry{
 	{
 		CLIPath: "devdoc article search",
 		Aliases: map[string]string{
-			"current-page": "page",
-			"limit":        "size",
-			"max-result":   "size",
-			"max-results":  "size",
-			"page-no":      "page",
-			"page-num":     "page",
-			"page-size":    "size",
-			"per-page":     "size",
-			"take":         "size",
-			"top":          "size",
+			"current-page":     "page",
+			"keywords":         "query",
+			"limit":            "size",
+			"max-result":       "size",
+			"max-results":      "size",
+			"page-no":          "page",
+			"page-num":         "page",
+			"page-number":      "page",
+			"page-size":        "size",
+			"per-page":         "size",
+			"q":                "query",
+			"query-text":       "query",
+			"results-per-page": "size",
+			"search-term":      "query",
+			"search-word":      "query",
+			"take":             "size",
+			"top":              "size",
 		},
-		Blocked: []string{"count", "cursor", "page-index", "page-token"},
+		Blocked:   []string{"context", "count", "cursor", "doc-id", "document-id", "error-code", "error-message", "file-id", "name", "next-cursor", "next-token", "node-id", "offset", "page-index", "page-token", "request-id", "space-id", "subject", "text", "title", "total", "trace-id", "workspace-id"},
+		Ambiguous: []string{"id", "type"},
 	},
 	{
 		CLIPath: "ding +list",
@@ -6352,6 +6730,166 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"knowledge-base-id", "limit", "page-size", "part-size", "size", "space", "wiki-workspace-id", "workspace", "workspace-id"},
 	},
+	{
+		CLIPath: "hrbrain profile career",
+		Aliases: map[string]string{
+			"employee-no":     "work-no",
+			"employee-number": "work-no",
+			"staff-no":        "work-no",
+		},
+		Blocked:   []string{"employee-id", "end", "end-date", "job-level", "position", "staff-id", "staff-ids", "start", "start-date", "user-id", "work-nos", "year"},
+		Ambiguous: []string{"date", "employee", "id", "name", "time", "user"},
+	},
+	{
+		CLIPath: "hrbrain profile labels",
+		Aliases: map[string]string{
+			"all-labels":   "all-label",
+			"employee-nos": "staff-ids",
+			"staff-nos":    "staff-ids",
+			"work-nos":     "staff-ids",
+		},
+		Blocked:   []string{"employee-id", "employee-ids", "employee-no", "staff-id", "staff-no", "user-id", "user-ids", "work-no"},
+		Ambiguous: []string{"employee", "id", "label", "name", "tag", "user"},
+	},
+	{
+		CLIPath: "hrbrain profile metadata",
+		Aliases: map[string]string{
+			"employee-no":     "work-no",
+			"employee-number": "work-no",
+			"staff-no":        "work-no",
+		},
+		Blocked:   []string{"data-queries", "employee-id", "model-code", "module", "section", "staff-id", "staff-ids", "user-id", "work-nos"},
+		Ambiguous: []string{"employee", "field", "id", "name", "user"},
+	},
+	{
+		CLIPath: "hrbrain profile performance",
+		Aliases: map[string]string{
+			"employee-no":     "work-no",
+			"employee-number": "work-no",
+			"staff-no":        "work-no",
+		},
+		Blocked:   []string{"cycle", "employee-id", "end", "end-date", "rating", "score", "staff-id", "staff-ids", "start", "start-date", "user-id", "work-nos", "year"},
+		Ambiguous: []string{"date", "employee", "id", "level", "name", "time", "user"},
+	},
+	{
+		CLIPath: "hrbrain profile query",
+		Aliases: map[string]string{
+			"employee-no":     "work-no",
+			"employee-number": "work-no",
+			"module-queries":  "data-queries",
+			"profile-queries": "data-queries",
+			"staff-no":        "work-no",
+		},
+		Blocked:   []string{"data-query", "employee-id", "model-code", "module", "section", "staff-id", "staff-ids", "user-id", "work-nos"},
+		Ambiguous: []string{"employee", "field", "id", "name", "query", "user"},
+	},
+	{
+		CLIPath: "hrbrain search employees",
+		Aliases: map[string]string{
+			"current-page":     "page",
+			"department-name":  "dept-name",
+			"job-title":        "position-name",
+			"keywords":         "keyword",
+			"limit":            "page-size",
+			"max-result":       "page-size",
+			"max-results":      "page-size",
+			"page-no":          "page",
+			"page-num":         "page",
+			"per-page":         "page-size",
+			"position-level":   "job-level",
+			"q":                "keyword",
+			"query":            "keyword",
+			"search-word":      "keyword",
+			"size":             "page-size",
+			"take":             "page-size",
+			"talent-pool-code": "pool-code",
+			"top":              "page-size",
+		},
+		Blocked:   []string{"count", "cursor", "data-queries", "department-id", "dept-id", "employee-id", "order-by", "origin-json", "page-index", "page-token", "pool-id", "staff-id", "staff-ids", "subject", "talent-pool-id", "text", "user-id", "work-no"},
+		Ambiguous: []string{"code", "department", "grade", "id", "level", "name", "pool", "position", "title", "user"},
+	},
+	{
+		CLIPath: "hrbrain search employees-structured",
+		Aliases: map[string]string{
+			"criteria-json":      "origin-json",
+			"current-page":       "page",
+			"filter-json":        "origin-json",
+			"limit":              "page-size",
+			"max-result":         "page-size",
+			"max-results":        "page-size",
+			"page-no":            "page",
+			"page-num":           "page",
+			"per-page":           "page-size",
+			"result-fields-json": "fields",
+			"return-fields-json": "fields",
+			"search-json":        "origin-json",
+			"size":               "page-size",
+			"sort-by":            "order-by",
+			"sort-fields":        "order-by",
+			"take":               "page-size",
+			"top":                "page-size",
+		},
+		Blocked:   []string{"count", "cursor", "department-name", "dept-name", "field-name", "job-level", "keyword", "operator", "operators", "page-index", "page-token", "pool-code", "position-name", "query", "staff-ids", "work-no"},
+		Ambiguous: []string{"criteria", "field", "filter", "id", "name", "order", "sort", "type"},
+	},
+	{
+		CLIPath:   "hrbrain search fields",
+		Blocked:   []string{"dept-name", "field-name", "job-level", "keyword", "operator", "operators", "order-by", "origin-json", "page", "page-size", "pool-code", "position-name", "query", "staff-ids", "work-no"},
+		Ambiguous: []string{"criteria", "field", "filter", "id", "name", "type"},
+	},
+	{
+		CLIPath: "hrbrain talent-pool detail",
+		Aliases: map[string]string{
+			"talent-pool-code": "pool-code",
+		},
+		Blocked:   []string{"creator", "employee-id", "keyword", "labels", "page", "page-size", "pool-id", "query", "staff-ids", "talent-pool-id", "work-no"},
+		Ambiguous: []string{"code", "id", "name", "pool", "type"},
+	},
+	{
+		CLIPath: "hrbrain talent-pool employees",
+		Aliases: map[string]string{
+			"current-page":     "page",
+			"limit":            "page-size",
+			"max-result":       "page-size",
+			"max-results":      "page-size",
+			"page-no":          "page",
+			"page-num":         "page",
+			"per-page":         "page-size",
+			"size":             "page-size",
+			"take":             "page-size",
+			"talent-pool-code": "pool-code",
+			"top":              "page-size",
+		},
+		Blocked:   []string{"count", "creator", "cursor", "dept-name", "employee-id", "job-level", "keyword", "labels", "page-index", "page-token", "pool-id", "position-name", "query", "staff-ids", "talent-pool-id", "work-no"},
+		Ambiguous: []string{"code", "id", "name", "pool", "status"},
+	},
+	{
+		CLIPath: "hrbrain talent-pool list",
+		Aliases: map[string]string{
+			"current-page": "page",
+			"keywords":     "keyword",
+			"label-list":   "labels",
+			"limit":        "page-size",
+			"max-result":   "page-size",
+			"max-results":  "page-size",
+			"page-no":      "page",
+			"page-num":     "page",
+			"per-page":     "page-size",
+			"q":            "keyword",
+			"query":        "keyword",
+			"search-word":  "keyword",
+			"size":         "page-size",
+			"take":         "page-size",
+			"top":          "page-size",
+		},
+		Blocked:   []string{"count", "cursor", "employee-id", "name", "page-index", "page-token", "pool-code", "pool-id", "staff-ids", "subject", "talent-pool-id", "text", "title", "user-id", "work-no"},
+		Ambiguous: []string{"code", "creator-id", "id", "label-name", "pool", "type", "user"},
+	},
+	{
+		CLIPath:   "live stream list",
+		Blocked:   []string{"anchor-id", "conversation-id", "cover-url", "create", "creator-id", "cursor", "end", "end-live", "end-time", "from", "group-id", "keyword", "limit", "live-id", "offset", "order", "page", "page-size", "page-token", "playback", "query", "record", "room-id", "size", "sort", "start", "start-live", "start-time", "state", "status", "stream-id", "title", "to", "user-id"},
+		Ambiguous: []string{"date", "id", "owner", "time", "type", "user"},
+	},
 	{
 		CLIPath: "mail +contact-list",
 		Aliases: map[string]string{
@@ -7457,6 +7995,42 @@ var generatedParamAliases = []ParamAliasEntry{
 		},
 		Blocked: []string{"name", "subject", "text", "title"},
 	},
+	{
+		CLIPath: "pat +browser-policy",
+		Aliases: map[string]string{
+			"allow-browser":   "enabled",
+			"browser-enabled": "enabled",
+			"open-browser":    "enabled",
+		},
+		Blocked:   []string{"api-scope", "app-id", "app-key", "app-secret", "block-browser", "browser-disabled", "deny-browser", "disable-browser", "domain", "domains", "grant-mode", "grant-type", "oauth-scope", "permission", "permissions", "product", "products", "recommend", "recommended", "scope", "scopes", "session-id"},
+		Ambiguous: []string{"agent", "agent-id", "browser", "mode", "policy", "state", "value"},
+	},
+	{
+		CLIPath: "pat browser-policy",
+		Aliases: map[string]string{
+			"allow-browser":   "enabled",
+			"browser-enabled": "enabled",
+			"open-browser":    "enabled",
+		},
+		Blocked:   []string{"api-scope", "app-id", "app-key", "app-secret", "block-browser", "browser-disabled", "deny-browser", "disable-browser", "domain", "domains", "grant-mode", "grant-type", "oauth-scope", "permission", "permissions", "product", "products", "recommend", "recommended", "scope", "scopes", "session-id"},
+		Ambiguous: []string{"agent", "agent-id", "browser", "mode", "policy", "state", "value"},
+	},
+	{
+		CLIPath: "pat chmod",
+		Aliases: map[string]string{
+			"authorization-mode":       "grant-type",
+			"authorization-session-id": "session-id",
+			"domain-code":              "domain",
+			"domain-codes":             "domains",
+			"grant-mode":               "grant-type",
+			"pat-session-id":           "session-id",
+			"product-code":             "product",
+			"product-codes":            "products",
+			"recommended":              "recommend",
+		},
+		Blocked:   []string{"all", "all-scopes", "allow-browser", "api-scope", "app-id", "app-key", "app-secret", "browser-enabled", "browser-policy", "confirm", "confirmed", "disable-browser", "force", "oauth-scope", "open-browser", "permission", "permission-scope", "permission-scopes", "permissions", "scope", "scopes"},
+		Ambiguous: []string{"action", "agent", "agent-id", "id", "mode", "resource", "service", "services", "session", "type"},
+	},
 	{
 		CLIPath: "report +inbox-list",
 		Aliases: map[string]string{
@@ -96,7 +96,10 @@ func newTodoCommand() *cobra.Command {
 				return err
 			}
 			executorsStr := mustGetFlag(cmd, "executors")
-			executorIds := parseExecutorIds(executorsStr)
+			executorIds, err := parseRequiredTodoIDs("executors", executorsStr)
+			if err != nil {
+				return err
+			}
 			toolArgs := map[string]any{
 				"PersonalTodoCreateVO": map[string]any{
 					"subject":     flagOrFallback(cmd, "title", "subject", "content"),
@@ -111,9 +114,11 @@ func newTodoCommand() *cobra.Command {
 				toolArgs["PersonalTodoCreateVO"].(map[string]any)["dueTime"] = ms
 			}
 			if v, _ := cmd.Flags().GetString("priority"); v != "" {
-				if n, err := strconv.Atoi(v); err == nil {
-					toolArgs["PersonalTodoCreateVO"].(map[string]any)["priority"] = n
+				n, err := parseTodoPriority(v)
+				if err != nil {
+					return err
 				}
+				toolArgs["PersonalTodoCreateVO"].(map[string]any)["priority"] = n
 			}
 			if v, _ := cmd.Flags().GetString("recurrence"); v != "" {
 				toolArgs["PersonalTodoCreateVO"].(map[string]any)["recurrence"] = v
@@ -154,7 +159,7 @@ func newTodoCommand() *cobra.Command {
 			},
 			Parameters: []contract.ParamDecl{
 				{Name: "due", Property: "PersonalTodoCreateVO.dueTime"},
-				{Name: "executors", Property: "PersonalTodoCreateVO.executorIds"},
+				{Name: "executors", Property: "PersonalTodoCreateVO.executorIds", Description: "执行者 userId 列表；逗号分隔，解析后至少包含一个非空值"},
 				{Name: "priority", Property: "PersonalTodoCreateVO.priority"},
 				{Name: "recurrence", Property: "PersonalTodoCreateVO.recurrence"},
 				{Name: "title", Property: "PersonalTodoCreateVO.subject"},
@@ -190,7 +195,10 @@ func newTodoCommand() *cobra.Command {
 				}
 			}
 			executorsStr := mustGetFlag(cmd, "executors")
-			executorIds := parseExecutorIds(executorsStr)
+			executorIds, err := parseRequiredTodoIDs("executors", executorsStr)
+			if err != nil {
+				return err
+			}
 			toolArgs := map[string]any{
 				"PersonalTodoCreateVO": map[string]any{
 					"subject":     flagOrFallback(cmd, "title", "subject", "content"),
@@ -206,9 +214,11 @@ func newTodoCommand() *cobra.Command {
 				toolArgs["PersonalTodoCreateVO"].(map[string]any)["dueTime"] = ms
 			}
 			if v, _ := cmd.Flags().GetString("priority"); v != "" {
-				if n, err := strconv.Atoi(v); err == nil {
-					toolArgs["PersonalTodoCreateVO"].(map[string]any)["priority"] = n
+				n, err := parseTodoPriority(v)
+				if err != nil {
+					return err
 				}
+				toolArgs["PersonalTodoCreateVO"].(map[string]any)["priority"] = n
 			}
 			if v, _ := cmd.Flags().GetString("recurrence"); v != "" {
 				toolArgs["PersonalTodoCreateVO"].(map[string]any)["recurrence"] = v
@@ -249,7 +259,7 @@ func newTodoCommand() *cobra.Command {
 			},
 			Parameters: []contract.ParamDecl{
 				{Name: "due", Property: "PersonalTodoCreateVO.dueTime"},
-				{Name: "executors", Property: "PersonalTodoCreateVO.executorIds"},
+				{Name: "executors", Property: "PersonalTodoCreateVO.executorIds", Description: "执行者 userId 列表；逗号分隔，解析后至少包含一个非空值"},
 				{Name: "parent-id", Property: "PersonalTodoCreateVO.parentId"},
 				{Name: "priority", Property: "PersonalTodoCreateVO.priority"},
 				{Name: "recurrence", Property: "PersonalTodoCreateVO.recurrence"},
@@ -376,9 +386,11 @@ func newTodoCommand() *cobra.Command {
 				inner["dueTime"] = ms
 			}
 			if v, _ := cmd.Flags().GetString("priority"); v != "" {
-				if n, err := strconv.Atoi(v); err == nil {
-					inner["priority"] = n
+				n, err := parseTodoPriority(v)
+				if err != nil {
+					return err
 				}
+				inner["priority"] = n
 			}
 			if v, _ := cmd.Flags().GetString("done"); v != "" {
 				inner["isDone"] = v == "true"
@@ -630,7 +642,10 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 				return err
 			}
 			executorsStr := mustGetFlag(cmd, "executors")
-			executorIds := parseExecutorIds(executorsStr)
+			executorIds, err := parseRequiredTodoIDs("executors", executorsStr)
+			if err != nil {
+				return err
+			}
 			return callMCPTool("add_task_executors", map[string]any{
 				"todoExecutorsAddRequest": map[string]any{
 					"taskId":      mustGetFlag(cmd, "task-id"),
@@ -672,7 +687,7 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 				},
 			},
 			Parameters: []contract.ParamDecl{
-				{Name: "executors", Property: "todoExecutorsAddRequest.executorIds"},
+				{Name: "executors", Property: "todoExecutorsAddRequest.executorIds", Description: "执行者 userId 列表；逗号分隔，解析后至少包含一个非空值"},
 				{Name: "task-id", Property: "todoExecutorsAddRequest.taskId"},
 			},
 		},
@@ -688,7 +703,10 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 				return err
 			}
 			executorsStr := mustGetFlag(cmd, "executors")
-			executorIds := parseExecutorIds(executorsStr)
+			executorIds, err := parseRequiredTodoIDs("executors", executorsStr)
+			if err != nil {
+				return err
+			}
 			return callMCPTool("remove_task_executors", map[string]any{
 				"todoExecutorsRemoveRequest": map[string]any{
 					"taskId":      mustGetFlag(cmd, "task-id"),
@@ -729,7 +747,7 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 				},
 			},
 			Parameters: []contract.ParamDecl{
-				{Name: "executors", Property: "todoExecutorsRemoveRequest.executorIds"},
+				{Name: "executors", Property: "todoExecutorsRemoveRequest.executorIds", Description: "执行者 userId 列表；逗号分隔，解析后至少包含一个非空值"},
 				{Name: "task-id", Property: "todoExecutorsRemoveRequest.taskId"},
 			},
 		},
@@ -1189,14 +1207,14 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 	}

 	todoTaskCreateCmd.Flags().String("title", "", "待办标题 (必填)")
-	todoTaskCreateCmd.Flags().String("executors", "", "执行者 userId 列表 (必填)")
+	todoTaskCreateCmd.Flags().String("executors", "", "执行者 userId 列表，逗号分隔且至少一个非空值 (必填)")
 	todoTaskCreateCmd.Flags().String("due", "", "截止时间 ISO-8601 (如 2026-03-10T18:00:00+08:00)")
 	todoTaskCreateCmd.Flags().String("priority", "", "优先级: 10低/20普通/30较高/40紧急")
 	todoTaskCreateCmd.Flags().String("recurrence", "", "循环待办 (需先设置 --due); 格式: DTSTART:20260320T100000Z\\nRRULE:FREQ=DAILY;INTERVAL=1")

 	todoTaskCreateSubCmd.Flags().String("parent-id", "", "父待办任务 ID (必填)")
 	todoTaskCreateSubCmd.Flags().String("title", "", "子待办标题 (必填)")
-	todoTaskCreateSubCmd.Flags().String("executors", "", "执行者 userId 列表 (必填)")
+	todoTaskCreateSubCmd.Flags().String("executors", "", "执行者 userId 列表，逗号分隔且至少一个非空值 (必填)")
 	todoTaskCreateSubCmd.Flags().String("due", "", "截止时间 ISO-8601 (如 2026-03-10T18:00:00+08:00)")
 	todoTaskCreateSubCmd.Flags().String("priority", "", "优先级: 10低/20普通/30较高/40紧急")
 	todoTaskCreateSubCmd.Flags().String("recurrence", "", "循环待办 (需先设置 --due); 格式: DTSTART:20260320T100000Z\\nRRULE:FREQ=DAILY;INTERVAL=1")
@@ -1235,9 +1253,9 @@ reset-reminder 写入的提醒规则。提醒写命令的成功响应只能作
 	_ = todoTaskCmd.PersistentFlags().MarkHidden("remind-at")

 	todoTaskAddExecutorCmd.Flags().String("task-id", "", "待办任务 ID (必填)")
-	todoTaskAddExecutorCmd.Flags().String("executors", "", "执行者 userId 列表 (必填)")
+	todoTaskAddExecutorCmd.Flags().String("executors", "", "执行者 userId 列表，逗号分隔且至少一个非空值 (必填)")
 	todoTaskRemoveExecutorCmd.Flags().String("task-id", "", "待办任务 ID (必填)")
-	todoTaskRemoveExecutorCmd.Flags().String("executors", "", "执行者 userId 列表 (必填)")
+	todoTaskRemoveExecutorCmd.Flags().String("executors", "", "执行者 userId 列表，逗号分隔且至少一个非空值 (必填)")
 	todoTaskAddParticipantCmd.Flags().String("task-id", "", "待办任务 ID (必填)")
 	todoTaskAddParticipantCmd.Flags().String("participants", "", "参与人 userId 列表 (必填)")
 	todoTaskRemoveParticipantCmd.Flags().String("task-id", "", "待办任务 ID (必填)")
@@ -1893,6 +1911,34 @@ func parseExecutorIds(s string) []string {
 	return ids
 }

+func parseRequiredTodoIDs(flagName, value string) ([]string, error) {
+	ids := parseExecutorIds(value)
+	if len(ids) > 0 {
+		return ids, nil
+	}
+	return nil, apperrors.NewValidation(
+		fmt.Sprintf("--%s 至少需要一个非空 userId", flagName),
+		apperrors.WithReason("invalid_"+strings.ReplaceAll(flagName, "-", "_")),
+		apperrors.WithHint(fmt.Sprintf("使用 --%s <USER_ID>[,<USER_ID>...] 指定至少一个执行人", flagName)),
+		apperrors.WithExecutionStarted(false),
+		apperrors.WithRetryable(false),
+	)
+}
+
+func parseTodoPriority(value string) (int, error) {
+	priority, err := strconv.Atoi(strings.TrimSpace(value))
+	if err == nil {
+		return priority, nil
+	}
+	return 0, apperrors.NewValidation(
+		"--priority 必须是整数",
+		apperrors.WithReason("invalid_priority"),
+		apperrors.WithHint("常用优先级映射：10=低、20=普通、30=较高、40=紧急"),
+		apperrors.WithExecutionStarted(false),
+		apperrors.WithRetryable(false),
+	)
+}
+
 type todoLocalFileMeta struct {
 	LocalPath   string
 	FileName    string
@@ -6,8 +6,11 @@ import (
 	"io"
 	"os"
 	"path/filepath"
+	"strconv"
 	"strings"
 	"testing"
+
+	apperrors "github.com/DingTalk-Real-AI/dingtalk-workspace-cli/internal/errors"
 )

 func executeTodoEdge(t *testing.T, caller *scriptedToolCaller, args ...string) error {
@@ -44,9 +47,11 @@ func TestCrossPlatformCoverageTodoCreateAndListCommandEdges(t *testing.T) {
 	errorCases := [][]string{
 		{"task", "create", "--title", "x", "--executors", "u", "--remind-at", validDate},
 		{"task", "create", "--title", "x", "--executors", "u", "--due", "bad"},
+		{"task", "create", "--title", "x", "--executors", "u", "--priority", "bad"},
 		{"task", "create-sub", "--title", "x", "--executors", "u", "--parent-id", "abc"},
 		{"task", "create-sub", "--title", "x", "--executors", "u", "--parent-id", "1", "--remind-at", validDate},
 		{"task", "create-sub", "--title", "x", "--executors", "u", "--parent-id", "1", "--due", "bad"},
+		{"task", "create-sub", "--title", "x", "--executors", "u", "--parent-id", "1", "--priority", "bad"},
 		{"task", "list", "--role-types", "invalid"},
 		{"task", "list", "--plan-finish-date-start", "bad"},
 		{"task", "list", "--plan-finish-date-end", "bad"},
@@ -59,9 +64,8 @@ func TestCrossPlatformCoverageTodoCreateAndListCommandEdges(t *testing.T) {

 	validCases := [][]string{
 		{"task", "create", "--title", "x", "--executors", "u1,u2", "--due", validDate, "--priority", "40", "--recurrence", "daily"},
-		{"task", "create", "--subject", "x", "--executors", "u", "--priority", "bad"},
+		{"task", "create", "--subject", "x", "--executors", "u", "--priority", "20"},
 		{"task", "create-sub", "--content", "x", "--executors", "u", "--parent-id", "1", "--due", validDate, "--priority", "40", "--recurrence", "daily"},
-		{"task", "create-sub", "--title", "x", "--executors", "u", "--parent-id", "1", "--priority", "bad"},
 		{"task", "list", "--size", "bad"},
 		{"task", "list", "--status", "true", "--priority", "40,bad", "--role-types", "creator,executor", "--plan-finish-date-start", validDate, "--plan-finish-date-end", validDate},
 	}
@@ -75,6 +79,63 @@ func TestCrossPlatformCoverageTodoCreateAndListCommandEdges(t *testing.T) {
 	}
 }

+func TestCrossPlatformCoverageTodoRejectsEmptyExecutorCSVAndNonNumericPriorityBeforeCall(t *testing.T) {
+	tests := []struct {
+		name   string
+		reason string
+		args   []string
+	}{
+		{name: "create empty executors", reason: "invalid_executors", args: []string{"task", "create", "--title", "x", "--executors", ",,,"}},
+		{name: "create-sub empty executors", reason: "invalid_executors", args: []string{"task", "create-sub", "--parent-id", "1", "--title", "x", "--executors", " , , "}},
+		{name: "add empty executors", reason: "invalid_executors", args: []string{"task", "add-executor", "--task-id", "1", "--executors", ",,,"}},
+		{name: "remove empty executors", reason: "invalid_executors", args: []string{"task", "remove-executor", "--task-id", "1", "--executors", ",,,"}},
+		{name: "create nonnumeric priority", reason: "invalid_priority", args: []string{"task", "create", "--title", "x", "--executors", "u", "--priority", "normal"}},
+	}
+	for _, test := range tests {
+		t.Run(test.name, func(t *testing.T) {
+			caller := &scriptedToolCaller{}
+			err := executeTodoEdge(t, caller, test.args...)
+			var typed *apperrors.Error
+			if !errors.As(err, &typed) || typed.Reason != test.reason {
+				t.Fatalf("error = %T %v, want reason %q", err, err, test.reason)
+			}
+			if typed.ExecutionStarted == nil || *typed.ExecutionStarted {
+				t.Fatalf("execution_started = %v, want false", typed.ExecutionStarted)
+			}
+			if caller.calls != 0 {
+				t.Fatalf("invalid input made %d MCP call(s)", caller.calls)
+			}
+		})
+	}
+}
+
+func TestCrossPlatformCoverageTodoCreateAcceptsNumericPriority(t *testing.T) {
+	for _, priority := range []string{"20", "25"} {
+		t.Run(priority, func(t *testing.T) {
+			caller := &scriptedToolCaller{}
+			if err := executeTodoEdge(t, caller, "task", "create", "--title", "x", "--executors", "u", "--priority", priority); err != nil {
+				t.Fatalf("create priority %s: %v", priority, err)
+			}
+			if caller.calls != 1 || caller.tool != "create_personal_todo" {
+				t.Fatalf("calls = %d tool = %q", caller.calls, caller.tool)
+			}
+			request, ok := caller.args["PersonalTodoCreateVO"].(map[string]any)
+			if !ok || request["priority"] != mustTodoAtoi(t, priority) {
+				t.Fatalf("request = %#v, want priority %s", caller.args, priority)
+			}
+		})
+	}
+}
+
+func mustTodoAtoi(t *testing.T, value string) int {
+	t.Helper()
+	parsed, err := strconv.Atoi(value)
+	if err != nil {
+		t.Fatalf("parse %q: %v", value, err)
+	}
+	return parsed
+}
+
 func TestCrossPlatformCoverageTodoSimpleCommandValidationAndSuccessEdges(t *testing.T) {
 	errorCases := [][]string{
 		{"task", "create"},
@@ -143,6 +204,7 @@ func TestCrossPlatformCoverageTodoUpdateReminderAndDetailEdges(t *testing.T) {
 	errorCases := [][]string{
 		{"task", "update", "--task-id", "1", "--remind-at", validDate},
 		{"task", "update", "--task-id", "1", "--due", "bad"},
+		{"task", "update", "--task-id", "1", "--priority", "bad"},
 		{"task", "add-reminder", "--task-id", "1", "--base-time", "customTime", "--reminder-time-stamp", "bad"},
 		{"task", "reset-reminder", "--task-id", "1", "--reminder-rules", `[{"baseTime":"customTime","reminderTimeStamp":"bad"}]`},
 		{"task", "reset-reminder", "--task-id", "1", "--reminder-rules", `not-json`},
@@ -155,7 +217,6 @@ func TestCrossPlatformCoverageTodoUpdateReminderAndDetailEdges(t *testing.T) {
 	}
 	validCases := [][]string{
 		{"task", "update", "--task-id", "1", "--title", "new", "--due", validDate, "--priority", "40", "--done", "true"},
-		{"task", "update", "--task-id", "1", "--priority", "bad"},
 		{"task", "add-reminder", "--task-id", "1", "--base-time", "dueTime", "--due-date-offset", "-10"},
 		{"task", "add-reminder", "--task-id", "1", "--base-time", "customTime", "--reminder-time-stamp", validDate},
 	}
@@ -19,17 +19,172 @@ trap cleanup EXIT HUP INT TERM

 git -C "$ROOT" diff --no-ext-diff --find-renames --name-status "$merge_base" "$head" >"$tmp_root/status"

+normalize_notes() {
+  awk '
+    /^[[:space:]]*$/ && !started { next }
+    { started = 1; lines[++count] = $0 }
+    END {
+      while (count > 0 && lines[count] ~ /^[[:space:]]*$/) count--
+      for (line_no = 1; line_no <= count; line_no++) print lines[line_no]
+    }
+  ' "$1"
+}
+
+extract_release_notes() {
+  git -C "$ROOT" show "$1:CHANGELOG.md" |
+    awk -v heading="## [$2] - " '
+      index($0, heading) == 1 { found = 1; next }
+      found && /^## / { exit }
+      found { print }
+    '
+}
+
+release_heading() {
+  git -C "$ROOT" show "$1:CHANGELOG.md" |
+    awk -v heading="## [$2] - " 'index($0, heading) == 1 { print }'
+}
+
+changelog_without_release_notes() {
+  git -C "$ROOT" show "$1:CHANGELOG.md" |
+    awk -v heading="## [$2] - " '
+      index($0, heading) == 1 { print; skipped = 1; next }
+      skipped && /^## / { skipped = 0 }
+      !skipped { print }
+    '
+}
+
+# A pre-tag beta amendment must preserve the original seal verbatim except for
+# appending newly archived fragment bodies to their existing categories. These
+# helpers canonicalize the renderer's category format before comparing it.
+canonicalize_fragment_notes() {
+  awk '
+    BEGIN { order[1] = "Added"; order[2] = "Changed"; order[3] = "Deprecated"; order[4] = "Removed"; order[5] = "Fixed"; order[6] = "Security" }
+    function trim(value) {
+      sub(/^[\n]+/, "", value)
+      sub(/[\n]+$/, "", value)
+      return value
+    }
+    function flush() {
+      if (category == "") return
+      value = trim(body)
+      if (value == "" || seen[category]++) invalid = 1
+      blocks[category] = value
+      category = ""
+      body = ""
+    }
+    /^### / {
+      flush()
+      candidate = substr($0, 5)
+      if (candidate !~ /^(Added|Changed|Deprecated|Removed|Fixed|Security)$/) {
+        invalid = 1
+        next
+      }
+      category = candidate
+      next
+    }
+    {
+      if (category == "") {
+        if ($0 !~ /^[[:space:]]*$/) invalid = 1
+        next
+      }
+      body = body $0 "\n"
+    }
+    END {
+      flush()
+      if (invalid) exit 1
+      for (i = 1; i <= 6; i++) {
+        category = order[i]
+        if (category in blocks) printf "### %s\n\n%s\n\n", category, blocks[category]
+      }
+    }
+  ' "$1"
+}
+
+merge_canonical_fragment_notes() {
+  awk '
+    BEGIN { order[1] = "Added"; order[2] = "Changed"; order[3] = "Deprecated"; order[4] = "Removed"; order[5] = "Fixed"; order[6] = "Security" }
+    function trim(value) {
+      sub(/^[\n]+/, "", value)
+      sub(/[\n]+$/, "", value)
+      return value
+    }
+    function flush() {
+      if (category == "") return
+      value = trim(body)
+      if (value == "") invalid = 1
+      if (part == 1) before[category] = value
+      else if (part == 2) addition[category] = value
+      else invalid = 1
+      category = ""
+      body = ""
+    }
+    FNR == 1 {
+      if (started) flush()
+      started = 1
+      part++
+    }
+    /^### / {
+      flush()
+      category = substr($0, 5)
+      if (category !~ /^(Added|Changed|Deprecated|Removed|Fixed|Security)$/) invalid = 1
+      next
+    }
+    { body = body $0 "\n" }
+    END {
+      flush()
+      if (invalid || part != 2) exit 1
+      for (i = 1; i <= 6; i++) {
+        category = order[i]
+        if (!(category in before) && !(category in addition)) continue
+        printf "### %s\n\n", category
+        if (category in before) printf "%s\n\n", before[category]
+        if (category in addition) printf "%s\n\n", addition[category]
+      }
+    }
+  ' "$1" "$2"
+}
+
 archive_changed=false
 if awk -F '\t' '{ for (field = 2; field <= NF; field++) if ($field ~ /^\.changes\/released\//) found = 1 } END { exit !found }' "$tmp_root/status"; then
  archive_changed=true
 fi

 if [ "$archive_changed" = true ]; then
-  release_version="$(git -C "$ROOT" diff --no-ext-diff --unified=0 "$merge_base" "$head" -- CHANGELOG.md | sed -n 's/^+## \[\([0-9][0-9.]*\(-beta\.[1-9][0-9]*\)\{0,1\}\)\] - .*/\1/p')"
-  [ "$(printf '%s\n' "$release_version" | sed '/^$/d' | wc -l | tr -d '[:space:]')" -eq 1 ] || {
-    printf '%s\n' 'error: release-fragment archival requires exactly one newly added versioned CHANGELOG section' >&2
-    exit 1
-  }
+  new_release_version="$(git -C "$ROOT" diff --no-ext-diff --unified=0 "$merge_base" "$head" -- CHANGELOG.md | sed -n 's/^+## \[\([0-9][0-9.]*\(-beta\.[1-9][0-9]*\)\{0,1\}\)\] - .*/\1/p')"
+  new_release_version_count="$(printf '%s\n' "$new_release_version" | sed '/^$/d' | wc -l | tr -d '[:space:]')"
+  archival_mode=seal
+  if [ "$new_release_version_count" -eq 1 ]; then
+    release_version="$new_release_version"
+  else
+    # An amendment keeps the existing heading. Derive the one allowed target
+    # from the literal archive directory, then verify every move below.
+    release_version="$(awk -F '\t' '$1 == "R100" && NF == 3 && $3 ~ /^\.changes\/released\// { path = $3; sub(/^\.changes\/released\//, "", path); sub(/\/.*/, "", path); print path }' "$tmp_root/status" | sort -u)"
+    [ "$(printf '%s\n' "$release_version" | sed '/^$/d' | wc -l | tr -d '[:space:]')" -eq 1 ] || {
+      printf '%s\n' 'error: release-fragment archival requires exactly one newly added versioned CHANGELOG section or one untagged beta amendment target' >&2
+      exit 1
+    }
+    printf '%s\n' "$release_version" | grep -Eq '^[0-9]+\.[0-9]+\.[0-9]+-beta\.[1-9][0-9]*$' || {
+      printf '%s\n' 'error: only an existing beta CHANGELOG section may receive a pre-tag fragment amendment' >&2
+      exit 1
+    }
+    base_heading="$(release_heading "$merge_base" "$release_version")"
+    head_heading="$(release_heading "$head" "$release_version")"
+    [ "$(printf '%s\n' "$base_heading" | sed '/^$/d' | wc -l | tr -d '[:space:]')" -eq 1 ] && [ "$base_heading" = "$head_heading" ] || {
+      printf '%s\n' 'error: beta fragment amendment requires one unchanged pre-existing CHANGELOG heading' >&2
+      exit 1
+    }
+    changelog_without_release_notes "$merge_base" "$release_version" >"$tmp_root/base-changelog-without-amendment"
+    changelog_without_release_notes "$head" "$release_version" >"$tmp_root/head-changelog-without-amendment"
+    if ! cmp -s "$tmp_root/base-changelog-without-amendment" "$tmp_root/head-changelog-without-amendment"; then
+      printf '%s\n' 'error: beta fragment amendment may change only its existing beta CHANGELOG section' >&2
+      exit 1
+    fi
+    if git -C "$ROOT" rev-parse --verify --quiet "refs/tags/v$release_version^{commit}" >/dev/null; then
+      printf 'error: beta fragment amendment is forbidden after tag v%s exists\n' "$release_version" >&2
+      exit 1
+    fi
+    archival_mode=beta-amendment
+  fi
  # The archive directory is matched as a literal prefix, never as a regex:
  # interpolating the version into one would make `.` match any character, so
  # `1.0.1-beta.1` would also admit `.changes/released/1x0x1-betaX1/` and break
@@ -47,7 +202,7 @@ if [ "$archive_changed" = true ]; then
    { invalid = 1 }
    END { exit !(changelog && moved > 0 && !invalid) }
  ' "$tmp_root/status"; then
-    printf '%s\n' 'error: release fragments must be unchanged R100 moves from .changes/<name>.md to .changes/released/<new-version>/<name>.md in the matching release-seal PR' >&2
+    printf '%s\n' 'error: release fragments must be unchanged R100 moves from .changes/<name>.md to .changes/released/<new-version>/<name>.md in the matching release-seal or untagged beta-amendment PR' >&2
    exit 1
  fi
  source_changes="$tmp_root/source-changes"
@@ -63,17 +218,25 @@ if [ "$archive_changed" = true ]; then
      esac
    done
  "$ROOT/scripts/release/render-release-fragments.sh" "$source_changes" >"$tmp_root/expected-notes"
-  git -C "$ROOT" show "$head:CHANGELOG.md" |
-    awk -v heading="## [$release_version] - " '
-      index($0, heading) == 1 { found = 1; next }
-      found && /^## / { exit }
-      found { print }
-    ' >"$tmp_root/actual-section"
-  case "$release_version" in
-    *-beta.*)
-      cp "$tmp_root/actual-section" "$tmp_root/actual-notes"
-      ;;
-    *)
+  if [ "$archival_mode" = beta-amendment ]; then
+    extract_release_notes "$merge_base" "$release_version" >"$tmp_root/base-notes"
+    extract_release_notes "$head" "$release_version" >"$tmp_root/head-notes"
+    if ! canonicalize_fragment_notes "$tmp_root/base-notes" >"$tmp_root/base-notes.canonical" ||
+      ! canonicalize_fragment_notes "$tmp_root/expected-notes" >"$tmp_root/amendment-notes.canonical" ||
+      ! merge_canonical_fragment_notes "$tmp_root/base-notes.canonical" "$tmp_root/amendment-notes.canonical" >"$tmp_root/expected-notes.merged" ||
+      ! canonicalize_fragment_notes "$tmp_root/head-notes" >"$tmp_root/actual-notes.canonical"; then
+      printf '%s\n' 'error: beta fragment amendment requires canonical rendered fragment categories' >&2
+      exit 1
+    fi
+    normalize_notes "$tmp_root/expected-notes.merged" >"$tmp_root/expected-notes.normalized"
+    normalize_notes "$tmp_root/actual-notes.canonical" >"$tmp_root/actual-notes.normalized"
+  else
+    extract_release_notes "$head" "$release_version" >"$tmp_root/actual-section"
+    case "$release_version" in
+      *-beta.*)
+        cp "$tmp_root/actual-section" "$tmp_root/actual-notes"
+        ;;
+      *)
      stable_beta="$(sed -n 's/^### Changes since `\(v[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*-beta\.[1-9][0-9]*\)`$/\1/p' "$tmp_root/actual-section")"
      [ "$(printf '%s\n' "$stable_beta" | sed '/^$/d' | wc -l | tr -d '[:space:]')" -eq 1 ] || {
        printf '%s\n' 'error: stable release-seal with archived fragments requires exactly one ### Changes since `vX.Y.Z-beta.N` boundary' >&2
@@ -88,22 +251,13 @@ if [ "$archive_changed" = true ]; then
        found { print }
        /^### Changes since `v[0-9][0-9]*\.[0-9][0-9]*\.[0-9][0-9]*-beta\.[1-9][0-9]*`$/ { found = 1 }
      ' "$tmp_root/actual-section" >"$tmp_root/actual-notes"
-      ;;
-  esac
-  normalize_notes() {
-    awk '
-      /^[[:space:]]*$/ && !started { next }
-      { started = 1; lines[++count] = $0 }
-      END {
-        while (count > 0 && lines[count] ~ /^[[:space:]]*$/) count--
-        for (line_no = 1; line_no <= count; line_no++) print lines[line_no]
-      }
-    ' "$1"
-  }
-  normalize_notes "$tmp_root/expected-notes" >"$tmp_root/expected-notes.normalized"
-  normalize_notes "$tmp_root/actual-notes" >"$tmp_root/actual-notes.normalized"
+        ;;
+    esac
+    normalize_notes "$tmp_root/expected-notes" >"$tmp_root/expected-notes.normalized"
+    normalize_notes "$tmp_root/actual-notes" >"$tmp_root/actual-notes.normalized"
+  fi
  if ! cmp -s "$tmp_root/expected-notes.normalized" "$tmp_root/actual-notes.normalized"; then
-    printf '%s\n' 'error: release-seal CHANGELOG section does not exactly match the rendered active release fragments' >&2
+    printf '%s\n' 'error: release CHANGELOG section does not exactly match the rendered active release fragments' >&2
    diff -u "$tmp_root/expected-notes.normalized" "$tmp_root/actual-notes.normalized" >&2 || true
    exit 1
  fi
@@ -351,6 +351,79 @@ This release promotes the sealed `+"`v1.0.1-beta.1`"+` contents to stable.
 	}
 }

+func TestReleaseFragmentPolicyAcceptsOnlyUntaggedCanonicalBetaAmendments(t *testing.T) {
+	newAmendmentRepo := func(t *testing.T) (*changelogGateRepo, string) {
+		t.Helper()
+		repo := newChangelogGateRepo(t)
+		sealBase := repo.sealFragmentInto(t, "1.0.1-beta.1")
+		if output, err := repo.runFragmentPolicy(t, sealBase, "HEAD"); err != nil {
+			t.Fatalf("release fragment policy rejected initial beta seal: %v\noutput:\n%s", err, output)
+		}
+		changelogGateWrite(t, repo.root, ".changes/1235-sheet.md", "---\ncategory: Added\n---\n\n- Sheet accepts local float image files.\n", 0o644)
+		repo.commit(t, "merge post-seal beta fragment")
+		return repo, strings.TrimSpace(changelogGateGit(t, repo.root, "rev-parse", "HEAD"))
+	}
+
+	stageCanonicalAmendment := func(t *testing.T, repo *changelogGateRepo) {
+		t.Helper()
+		changelogGateWrite(t, repo.root, "CHANGELOG.md", `# Changelog
+
+## [Unreleased]
+
+## [1.0.1-beta.1] - 2026-07-17
+
+### Added
+
+- Chat reply mentions.
+
+- Sheet accepts local float image files.
+
+## [1.0.0] - 2026-07-01
+
+### Added
+
+- Initial release.
+`, 0o644)
+		archiveDir := filepath.Join(repo.root, ".changes", "released", "1.0.1-beta.1")
+		if err := os.Rename(filepath.Join(repo.root, ".changes", "1235-sheet.md"), filepath.Join(archiveDir, "1235-sheet.md")); err != nil {
+			t.Fatalf("Rename beta amendment fragment: %v", err)
+		}
+		repo.commit(t, "amend untagged beta release notes")
+	}
+
+	t.Run("accepts exact pre-tag merge", func(t *testing.T) {
+		repo, amendmentBase := newAmendmentRepo(t)
+		stageCanonicalAmendment(t, repo)
+
+		if output, err := repo.runFragmentPolicy(t, amendmentBase, "HEAD"); err != nil {
+			t.Fatalf("release fragment policy rejected canonical beta amendment: %v\noutput:\n%s", err, output)
+		}
+	})
+
+	t.Run("rejects tagged beta", func(t *testing.T) {
+		repo, amendmentBase := newAmendmentRepo(t)
+		stageCanonicalAmendment(t, repo)
+		changelogGateGit(t, repo.root, "tag", "v1.0.1-beta.1")
+
+		output, err := repo.runFragmentPolicy(t, amendmentBase, "HEAD")
+		if err == nil || !strings.Contains(output, "forbidden after tag v1.0.1-beta.1 exists") {
+			t.Fatalf("tagged beta amendment passed: err=%v\noutput:\n%s", err, output)
+		}
+	})
+
+	t.Run("rejects rewritten sealed prose", func(t *testing.T) {
+		repo, amendmentBase := newAmendmentRepo(t)
+		stageCanonicalAmendment(t, repo)
+		changelogGateWrite(t, repo.root, "CHANGELOG.md", strings.Replace(changelogGateSealedRelease, "Chat reply mentions.", "Rewritten sealed note.", 1), 0o644)
+		repo.commit(t, "rewrite sealed beta prose")
+
+		output, err := repo.runFragmentPolicy(t, amendmentBase, "HEAD")
+		if err == nil || !strings.Contains(output, "does not exactly match") {
+			t.Fatalf("rewritten beta amendment passed: err=%v\noutput:\n%s", err, output)
+		}
+	})
+}
+
 func TestReleaseFragmentPolicyRejectsInvalidActiveFragmentAndWrongArchiveVersion(t *testing.T) {
 	t.Run("invalid active fragment", func(t *testing.T) {
 		repo := newChangelogGateRepo(t)
Author	SHA1	Message	Date
克谨	9401f9921a	merge: sync latest main	2026-08-25 00:09:27 +08:00
github-actions[bot]	ed951ff0e1	chore: update beta formula for v1.0.60-beta.2 [skip ci]	2026-08-24 15:57:43 +00:00
赤川	b42596214d	Merge pull request #1133 from DingTalk-Real-AI/codex/changelog-v1.0.60-beta.2-amendment docs: amend v1.0.60-beta.2 release notes	2026-08-24 23:42:06 +08:00
chichuan	f684c412ea	docs: amend v1.0.60-beta.2 release notes	2026-08-24 23:37:21 +08:00
克谨	a4813f78bc	fix(todo): preserve priority schema compatibility	2026-08-24 23:33:43 +08:00
赤川	415d962371	Merge pull request #1131 from DingTalk-Real-AI/codex/fix-pretag-beta-seal-amendment fix(policy): allow audited pre-tag beta amendments	2026-08-24 23:13:59 +08:00
chichuan	26253a4eeb	fix(policy): allow audited pre-tag beta amendments	2026-08-24 23:11:30 +08:00
克谨	46fdaed90b	Merge remote-tracking branch 'origin/main' into codex/fix-todo-upstream-internal-error	2026-08-24 23:10:17 +08:00
克谨	9ea19315e9	fix(todo): classify upstream failures and validate inputs	2026-08-24 23:04:45 +08:00
github-actions[bot]	8549a90402	Merge pull request #1127 from DingTalk-Real-AI/codex/param-hallucination-6-products feat(cli): govern six product parameter aliases	2026-08-24 22:59:59 +08:00
克谨	a5dbd2e049	Merge remote-tracking branch 'origin/main' into codex/param-hallucination-6-products	2026-08-24 22:33:48 +08:00
克谨	b1a6f9e20c	Merge remote-tracking branch 'origin/main' into codex/param-hallucination-6-products	2026-08-24 22:03:15 +08:00
克谨	0fae9dd8b3	feat(cli): govern six product parameter aliases	2026-08-24 22:01:10 +08:00