From 88c37e50b2057863885a182e9f8047498fe157b8 Mon Sep 17 00:00:00 2001
From: liangxu <liangxu0920@qq.com>
Date: Sat, 6 Jun 2026 13:06:14 +0800
Subject: [PATCH] feat(enterprise-site): add PbootCMS enterprise site publisher

Introduce a new enterprise-site publishing channel that lets tenants push
articles to self-hosted PbootCMS sites alongside the existing media supply
flow.

Backend (server/internal/tenant):
- enterprise_site_service: CRUD, ping, category sync, and article publish
- enterprise_site_pbootcms: PbootCMS API client integration
- enterprise_site_crypto: encrypt/decrypt stored site credentials
- enterprise_site_handler + routes under /enterprise-sites
- migrations for the enterprise site publisher tables
- config: add SERVER_PUBLIC_BASE_URL (Server.PublicBaseURL) for callbacks
- article/media services adjusted to support the publish flow

Frontend (apps/admin-web):
- PublishArticleModal & ArticlePublishStatus: enterprise-site publish UI
- MediaView: manage enterprise sites and categories
- api + shared-types: enterprise site endpoints and types
- http-client: add PATCH method support

Integrations:
- pbootcms GeoPublisher controller plugin + install guide
- docs/enterprise-site-publisher-v1.md design doc
---
 .../src/components/ArticlePublishStatus.vue   |   21 +-
 .../src/components/PublishArticleModal.vue    | 1349 +++++++--
 apps/admin-web/src/lib/api.ts                 |   50 +
 apps/admin-web/src/views/MediaView.vue        | 1903 ++++++++++---
 docs/enterprise-site-publisher-v1.md          |  237 ++
 integrations/pbootcms/Install.md              |  175 ++
 .../api/controller/GeoPublisherController.php |  748 +++++
 packages/http-client/src/index.ts             |    4 +
 packages/shared-types/src/index.ts            |  107 +-
 server/internal/shared/config/config.go       |    4 +
 server/internal/tenant/app/article_service.go |   11 +-
 .../tenant/app/enterprise_site_crypto.go      |   78 +
 .../tenant/app/enterprise_site_pbootcms.go    |  402 +++
 .../tenant/app/enterprise_site_service.go     | 2412 +++++++++++++++++
 .../app/enterprise_site_service_test.go       |  436 +++
 server/internal/tenant/app/media_service.go   |   30 +-
 .../transport/enterprise_site_handler.go      |  142 +
 server/internal/tenant/transport/router.go    |   11 +
 ...000_add_enterprise_site_publisher.down.sql |   20 +
 ...10000_add_enterprise_site_publisher.up.sql |   96 +
 20 files changed, 7708 insertions(+), 528 deletions(-)
 create mode 100644 docs/enterprise-site-publisher-v1.md
 create mode 100644 integrations/pbootcms/Install.md
 create mode 100644 integrations/pbootcms/apps/api/controller/GeoPublisherController.php
 create mode 100644 server/internal/tenant/app/enterprise_site_crypto.go
 create mode 100644 server/internal/tenant/app/enterprise_site_pbootcms.go
 create mode 100644 server/internal/tenant/app/enterprise_site_service.go
 create mode 100644 server/internal/tenant/app/enterprise_site_service_test.go
 create mode 100644 server/internal/tenant/transport/enterprise_site_handler.go
 create mode 100644 server/migrations/20260605110000_add_enterprise_site_publisher.down.sql
 create mode 100644 server/migrations/20260605110000_add_enterprise_site_publisher.up.sql

diff --git a/apps/admin-web/src/components/ArticlePublishStatus.vue b/apps/admin-web/src/components/ArticlePublishStatus.vue
index 7ccbe1b..b29b78a 100644
--- a/apps/admin-web/src/components/ArticlePublishStatus.vue
+++ b/apps/admin-web/src/components/ArticlePublishStatus.vue
@@ -18,6 +18,7 @@ interface PublishPlatformEntry {
   accountName: string
   avatarUrl: string
   status: PublishRecordStatus
+  targetType: string
 }
 
 type PublishRecordStatus = 'success' | 'failed' | 'publishing'
@@ -83,7 +84,11 @@ const platformEntries = computed<PublishPlatformEntry[]>(() => {
   const entries: PublishPlatformEntry[] = []
 
   for (const record of publishRecordsQuery.data.value ?? []) {
-    const key = `${record.platform_id}:${record.platform_account_id}`
+    const targetType = String(record.target_type ?? 'platform_account')
+    const key =
+      targetType === 'enterprise_site'
+        ? `${targetType}:${record.target_connection_id ?? record.id}`
+        : `${record.platform_id}:${record.platform_account_id}`
     if (seen.has(key)) {
       continue
     }
@@ -91,7 +96,7 @@ const platformEntries = computed<PublishPlatformEntry[]>(() => {
 
     const normalizedId = normalizePublishPlatformId(record.platform_id)
     const platform = platformMap.value.get(normalizedId)
-    const fallback = getPublishPlatformMeta(normalizedId)
+    const fallback = enterprisePlatformFallback(normalizedId)
 
     entries.push({
       key,
@@ -101,6 +106,7 @@ const platformEntries = computed<PublishPlatformEntry[]>(() => {
       accountName: record.platform_nickname || '--',
       avatarUrl: '',
       status: normalizePublishRecordStatus(record.status),
+      targetType,
     })
   }
 
@@ -236,6 +242,17 @@ function getAccountInitial(accountName: string): string {
 
   return trimmed.slice(0, 1).toUpperCase()
 }
+
+function enterprisePlatformFallback(platformId: string) {
+  if (platformId === 'pbootcms') {
+    return {
+      name: 'PBootCMS',
+      shortName: 'CMS',
+      accent: '#0f766e',
+    }
+  }
+  return getPublishPlatformMeta(platformId)
+}
 </script>
 
 <template>
diff --git a/apps/admin-web/src/components/PublishArticleModal.vue b/apps/admin-web/src/components/PublishArticleModal.vue
index f5f9c3e..1ed2e25 100644
--- a/apps/admin-web/src/components/PublishArticleModal.vue
+++ b/apps/admin-web/src/components/PublishArticleModal.vue
@@ -1,10 +1,9 @@
 <script setup lang="ts">
 import {
-  CheckCircleFilled,
   CloseCircleFilled,
-  ExclamationCircleFilled,
   InfoCircleFilled,
   MinusCircleFilled,
+  SyncOutlined,
 } from '@ant-design/icons-vue'
 import { ApiClientError } from '@geo/http-client'
 import type {
@@ -12,6 +11,9 @@ import type {
   ComplianceCheckResult,
   ComplianceRuntimeStatus,
   CreatePublishJobResponse,
+  EnterpriseSiteCategory,
+  EnterpriseSiteConnection,
+  EnterpriseSitePublishResponse,
   GateDecisionLiteral,
   PublishRecord,
 } from '@geo/shared-types'
@@ -24,6 +26,7 @@ import CoverPickerModal from '@/components/CoverPickerModal.vue'
 import {
   articlesApi,
   complianceApi,
+  enterpriseSitesApi,
   mediaApi,
   publishJobsApi,
   resolveApiURL,
@@ -35,10 +38,8 @@ import {
   accountInitial,
   buildPublishAccountCards,
   buildPublishPlatformMap,
-  clientStatusColor,
   clientStatusLabel,
   clientStatusTooltip,
-  healthColor,
   healthLabel,
   publishStateLabel,
   type PublishAccountCard,
@@ -46,6 +47,23 @@ import {
 import { normalizePublishPlatformId } from '@/lib/publish-platforms'
 import { useCompanyStore } from '@/stores/company'
 
+type PublishTargetTab = 'media_accounts' | 'enterprise_sites'
+type PublishType = 'publish' | 'draft'
+
+interface EnterpriseSiteCard {
+  id: number
+  name: string
+  siteUrl: string
+  cmsType: string
+  status: string
+  statusText: string
+  selectable: boolean
+  disabledReason: string
+  categoryCount: number
+  defaultCategoryId: string
+  hasPublishFailure: boolean
+}
+
 const props = defineProps<{
   open: boolean
   articleId: number | null
@@ -60,7 +78,12 @@ const { t } = useI18n()
 const queryClient = useQueryClient()
 const companyStore = useCompanyStore()
 
+const activeTargetTab = ref<PublishTargetTab>('media_accounts')
 const selectedAccountIds = ref<string[]>([])
+const selectedEnterpriseSiteIds = ref<number[]>([])
+const enterpriseCategoriesBySiteId = ref<Record<number, EnterpriseSiteCategory[]>>({})
+const enterpriseSiteCategoryIds = ref<Record<number, string>>({})
+const enterprisePublishType = ref<PublishType>('publish')
 const coverEnabled = ref(false)
 const coverAssetUrl = ref('')
 const coverFileName = ref('')
@@ -115,6 +138,12 @@ const platformsQuery = useQuery({
   queryFn: () => mediaApi.platforms(),
 })
 
+const enterpriseSitesQuery = useQuery({
+  queryKey: ['tenant', 'enterprise-sites', 'publish-modal'],
+  enabled: computed(() => props.open),
+  queryFn: () => enterpriseSitesApi.list(),
+})
+
 const complianceStatusQuery = useQuery({
   queryKey: ['compliance', 'runtime-status', 'publish-modal'],
   enabled: computed(() => props.open),
@@ -125,7 +154,12 @@ watch(
   () => props.open,
   async (open) => {
     if (!open) {
+      activeTargetTab.value = 'media_accounts'
       selectedAccountIds.value = []
+      selectedEnterpriseSiteIds.value = []
+      enterpriseCategoriesBySiteId.value = {}
+      enterpriseSiteCategoryIds.value = {}
+      enterprisePublishType.value = 'publish'
       coverAssetUrl.value = ''
       coverFileName.value = ''
       coverImageAssetId.value = null
@@ -147,6 +181,7 @@ watch(
       props.articleId ? publishRecordsQuery.refetch() : Promise.resolve(),
       accountsQuery.refetch(),
       platformsQuery.refetch(),
+      enterpriseSitesQuery.refetch(),
       complianceStatusQuery.refetch(),
     ])
   },
@@ -154,13 +189,14 @@ watch(
 )
 
 const platformMap = computed(() => buildPublishPlatformMap(platformsQuery.data.value ?? []))
-const successfulPublishRecordKeys = computed(() =>
-  new Set(
-    (publishRecordsQuery.data.value ?? [])
-      .filter((record) => isSuccessfulPublishRecord(record))
-      .map((record) => successfulPublishRecordKey(record.desktop_account_id, record.platform_id))
-      .filter((key): key is string => Boolean(key)),
-  ),
+const successfulPublishRecordKeys = computed(
+  () =>
+    new Set(
+      (publishRecordsQuery.data.value ?? [])
+        .filter((record) => isSuccessfulPublishRecord(record))
+        .map((record) => successfulPublishRecordKey(record.desktop_account_id, record.platform_id))
+        .filter((key): key is string => Boolean(key)),
+    ),
 )
 const activePublishRecordStatusByKey = computed(() => {
   const statusByKey = new Map<string, string>()
@@ -176,15 +212,39 @@ const activePublishRecordStatusByKey = computed(() => {
   }
   return statusByKey
 })
-const publishedAccountIds = computed(() =>
-  new Set(
-    (publishRecordsQuery.data.value ?? [])
-      .filter((record) => isSuccessfulPublishRecord(record))
-      .map((record) => record.desktop_account_id?.trim())
-      .filter((id): id is string => Boolean(id)),
-  ),
+const publishedAccountIds = computed(
+  () =>
+    new Set(
+      (publishRecordsQuery.data.value ?? [])
+        .filter((record) => isSuccessfulPublishRecord(record))
+        .map((record) => record.desktop_account_id?.trim())
+        .filter((id): id is string => Boolean(id)),
+    ),
 )
 const publishedAccountCount = computed(() => publishedAccountIds.value.size)
+const successfulEnterpriseSiteIds = computed(
+  () =>
+    new Set(
+      (publishRecordsQuery.data.value ?? [])
+        .filter((record) => isSuccessfulEnterpriseSiteRecord(record))
+        .map((record) => record.target_connection_id)
+        .filter((id): id is number => typeof id === 'number'),
+    ),
+)
+const activeEnterpriseRecordStatusBySiteId = computed(() => {
+  const statusBySiteId = new Map<number, string>()
+  for (const record of publishRecordsQuery.data.value ?? []) {
+    if (!isActiveEnterpriseSiteRecord(record) || typeof record.target_connection_id !== 'number') {
+      continue
+    }
+    if (statusBySiteId.has(record.target_connection_id)) {
+      continue
+    }
+    statusBySiteId.set(record.target_connection_id, record.status)
+  }
+  return statusBySiteId
+})
+const publishedEnterpriseSiteCount = computed(() => successfulEnterpriseSiteIds.value.size)
 
 const accountCards = computed<PublishAccountCard[]>(() =>
   buildPublishAccountCards(accountsQuery.data.value ?? [], platformMap.value).map((card) => {
@@ -197,7 +257,42 @@ const accountCards = computed<PublishAccountCard[]>(() =>
     return {
       ...card,
       selectable: false,
-      statusText: '这篇文章已用该账号在该平台发布成功，不能重复发布；如需重新发布，请复制或新建一篇文章。',
+      statusText:
+        '这篇文章已用该账号在该平台发布成功，不能重复发布；如需重新发布，请复制或新建一篇文章。',
+    }
+  }),
+)
+const enterpriseSites = computed(() => enterpriseSitesQuery.data.value ?? [])
+const enterpriseSiteCards = computed<EnterpriseSiteCard[]>(() =>
+  enterpriseSites.value.map((site) => {
+    const alreadyPublished = successfulEnterpriseSiteIds.value.has(site.id)
+    const activeStatus = activeEnterpriseRecordStatusBySiteId.value.get(site.id)
+    const connectionStatus = enterpriseSiteConnectionStatus(site)
+    const publishError = enterpriseSiteLatestPublishError(site)
+    const disabledReason = resolveEnterpriseSiteDisabledReason(
+      site,
+      alreadyPublished,
+      activeStatus,
+      connectionStatus,
+    )
+    return {
+      id: site.id,
+      name: site.name,
+      siteUrl: site.site_url,
+      cmsType: cmsTypeLabel(site.cms_type),
+      status: connectionStatus,
+      statusText: alreadyPublished
+        ? '已发布'
+        : activeStatus
+          ? activeEnterpriseRecordLabel(activeStatus)
+          : publishError
+            ? '发布失败'
+            : enterpriseSiteStatusLabel(connectionStatus),
+      selectable: !disabledReason,
+      disabledReason,
+      categoryCount: site.category_count,
+      defaultCategoryId: site.default_scode?.trim() || '',
+      hasPublishFailure: !disabledReason && Boolean(publishError),
     }
   }),
 )
@@ -211,6 +306,17 @@ watch(
   { immediate: true },
 )
 
+watch(
+  enterpriseSiteCards,
+  (cards) => {
+    const selectableIds = new Set(cards.filter((card) => card.selectable).map((card) => card.id))
+    selectedEnterpriseSiteIds.value = selectedEnterpriseSiteIds.value.filter((id) =>
+      selectableIds.has(id),
+    )
+  },
+  { immediate: true },
+)
+
 watchEffect(() => {
   if (!props.open) {
     return
@@ -234,6 +340,8 @@ watchEffect(() => {
     detailQuery.isFetching.value ||
     accountsQuery.isPending.value ||
     accountsQuery.isFetching.value ||
+    enterpriseSitesQuery.isPending.value ||
+    enterpriseSitesQuery.isFetching.value ||
     publishRecordsQuery.isPending.value ||
     publishRecordsQuery.isFetching.value ||
     platformsQuery.isPending.value ||
@@ -250,12 +358,23 @@ const selectedCards = computed(() => {
   const selected = new Set(selectedAccountIds.value)
   return accountCards.value.filter((card) => selected.has(card.id))
 })
+const selectedEnterpriseSiteCards = computed(() => {
+  const selected = new Set(selectedEnterpriseSiteIds.value)
+  return enterpriseSiteCards.value.filter((card) => selected.has(card.id))
+})
 
 const modalTitle = computed(() => detailQuery.data.value?.title || t('article.untitled'))
-const selectedPlatformIds = computed(() =>
-  Array.from(new Set(selectedCards.value.map((card) => card.platformId))),
+const enterpriseTargetPlatformId = computed(() =>
+  selectedEnterpriseSiteCards.value.length > 0 ? 'pbootcms' : '',
 )
-watch(selectedPlatformIds, () => {
+const selectedPlatformIds = computed(() =>
+  activeTargetTab.value === 'enterprise_sites'
+    ? enterpriseTargetPlatformId.value
+      ? [enterpriseTargetPlatformId.value]
+      : []
+    : Array.from(new Set(selectedCards.value.map((card) => card.platformId))),
+)
+watch([selectedPlatformIds, activeTargetTab], () => {
   complianceResult.value = null
 })
 const selectedImmediateCount = computed(
@@ -264,6 +383,28 @@ const selectedImmediateCount = computed(
 const selectedQueuedCount = computed(
   () => selectedCards.value.filter((card) => card.publishState === 'queued').length,
 )
+const selectedTargetCount = computed(() =>
+  activeTargetTab.value === 'enterprise_sites'
+    ? selectedEnterpriseSiteCards.value.length
+    : selectedCards.value.length,
+)
+const selectedPublishNowCount = computed(() =>
+  activeTargetTab.value === 'enterprise_sites'
+    ? selectedEnterpriseSiteCards.value.length
+    : selectedImmediateCount.value,
+)
+const selectedQueueCount = computed(() =>
+  activeTargetTab.value === 'enterprise_sites' ? 0 : selectedQueuedCount.value,
+)
+const selectedTargetLabel = computed(() =>
+  activeTargetTab.value === 'enterprise_sites' ? '已选站点' : '已选账号',
+)
+const publishNowLabel = computed(() =>
+  activeTargetTab.value === 'enterprise_sites' ? '立即发文' : '立即发布',
+)
+const queueLabel = computed(() =>
+  activeTargetTab.value === 'enterprise_sites' ? '离线队列' : '离线排队',
+)
 const publishModalVisible = computed(() => props.open && !coverPickerOpen.value)
 const coverRequired = computed(() => coverUploadRequired(selectedPlatformIds.value))
 const effectiveCoverEnabled = computed(() => coverRequired.value || coverEnabled.value)
@@ -275,6 +416,15 @@ const publishMutation = useMutation({
   onSuccess: handlePublishSuccess,
   onError: handlePublishError,
 })
+const syncEnterpriseCategoriesMutation = useMutation({
+  mutationFn: (siteId: number) => enterpriseSitesApi.syncCategories(siteId),
+  onSuccess: async (categories, siteId) => {
+    message.success(`已同步 ${categories.length} 个栏目`)
+    setEnterpriseCategories(siteId, categories)
+    await enterpriseSitesQuery.refetch()
+  },
+  onError: (error) => message.error(formatError(error)),
+})
 const complianceStatus = computed<ComplianceRuntimeStatus | null>(
   () => complianceStatusQuery.data.value ?? null,
 )
@@ -290,13 +440,17 @@ const publishComplianceMandatory = computed(
 const publishAdmissionPassed = computed(
   () => complianceDisplayDecision(publishAdmissionResult.value) === 'pass',
 )
+
+function enterpriseSelectPopupContainer(triggerNode: HTMLElement): HTMLElement {
+  return (triggerNode.closest('.ant-modal-content') as HTMLElement | null) ?? document.body
+}
 const mandatoryAdmissionBlocking = computed(
   () => publishComplianceMandatory.value && !publishAdmissionPassed.value,
 )
 const accountSelectionLocked = computed(
-  () =>
-    publishMutation.isPending.value || ackInProgress.value || mandatoryAdmissionBlocking.value,
+  () => publishMutation.isPending.value || ackInProgress.value || mandatoryAdmissionBlocking.value,
 )
+const publishBusy = computed(() => publishMutation.isPending.value || ackInProgress.value)
 const accountSelectionLockSpinning = computed(
   () =>
     publishAdmissionLoading.value ||
@@ -313,7 +467,7 @@ const accountSelectionLockMessage = computed(() => {
     return '强制敏感词检测中，检测通过后可选择目标账号。\n请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
   }
   if (publishAdmissionError.value) {
-    return '强制敏感词检测暂时不可用，当前不能选择目标账号。\n请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。' 
+    return '强制敏感词检测暂时不可用，当前不能选择目标账号。\n请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
   }
   return '当前文章未通过强制敏感词检测，暂不能选择目标账号。\n请回到文章编辑页，使用合规检测查看全部命中词并逐项修改。'
 })
@@ -350,6 +504,17 @@ const okText = computed(() => {
   return '提交发布'
 })
 const okDisabled = computed(() => {
+  if (activeTargetTab.value === 'enterprise_sites' && !selectedEnterpriseSiteIds.value.length) {
+    return true
+  }
+  if (
+    activeTargetTab.value === 'enterprise_sites' &&
+    selectedEnterpriseSiteCards.value.some(
+      (site) => !enterpriseSiteCategoryIds.value[site.id]?.trim(),
+    )
+  ) {
+    return true
+  }
   if (coverRequired.value && !normalizedCoverValue.value) {
     return true
   }
@@ -391,10 +556,7 @@ const publishCompliancePanelTone = computed(() => {
   if (publishAdmissionLoading.value) {
     return 'info'
   }
-  if (
-    admissionDecision === 'needs_ack' ||
-    finalDecision === 'needs_ack'
-  ) {
+  if (admissionDecision === 'needs_ack' || finalDecision === 'needs_ack') {
     return publishComplianceMandatory.value ? 'error' : 'warning'
   }
   return 'success'
@@ -473,8 +635,7 @@ const displayedComplianceResult = computed(
   () => complianceResult.value ?? publishAdmissionResult.value,
 )
 const complianceAcknowledgedViolationIds = computed(() =>
-  (complianceResult.value?.violations ?? [])
-    .map((item) => item.id),
+  (complianceResult.value?.violations ?? []).map((item) => item.id),
 )
 
 watch(
@@ -505,6 +666,9 @@ async function runPublishFlow(ackRecordId?: number) {
   if (!props.articleId || !detailQuery.data.value) {
     throw new Error('missing_article')
   }
+  if (activeTargetTab.value === 'enterprise_sites') {
+    return runEnterpriseSitePublishFlow(ackRecordId)
+  }
   if (!selectedAccountIds.value.length) {
     throw new Error('no_accounts_selected')
   }
@@ -512,15 +676,13 @@ async function runPublishFlow(ackRecordId?: number) {
     throw new Error('cover_required_for_selected_platforms')
   }
 
-  const article = await persistCoverIfNeeded(detailQuery.data.value)
+  const freshDetail = await loadLatestPublishArticleDetail()
+  const article = await persistCoverIfNeeded(freshDetail)
   const articleVersionId = article.current_version_id ?? detailQuery.data.value.current_version_id
   if (!articleVersionId) {
     throw new Error('invalid_article_version')
   }
-  if (
-    publishComplianceEnabled.value &&
-    !ackRecordId
-  ) {
+  if (publishComplianceEnabled.value && !ackRecordId) {
     const result = await complianceApi.checkArticle(article.id, {
       article_version_id: articleVersionId,
       title: article.title,
@@ -547,7 +709,92 @@ async function runPublishFlow(ackRecordId?: number) {
   })
 }
 
-async function handlePublishSuccess(result: CreatePublishJobResponse) {
+async function runEnterpriseSitePublishFlow(
+  ackRecordId?: number,
+): Promise<EnterpriseSitePublishResponse[]> {
+  if (!props.articleId || !detailQuery.data.value) {
+    throw new Error('missing_article')
+  }
+  if (!selectedEnterpriseSiteIds.value.length) {
+    throw new Error('no_enterprise_sites_selected')
+  }
+  const missingCategorySite = selectedEnterpriseSiteCards.value.find(
+    (site) => !enterpriseSiteCategoryIds.value[site.id]?.trim(),
+  )
+  if (missingCategorySite) {
+    throw new Error('enterprise_site_category_required')
+  }
+
+  const freshDetail = await loadLatestPublishArticleDetail()
+  const article = await persistCoverIfNeeded(freshDetail)
+  const articleVersionId = article.current_version_id ?? detailQuery.data.value.current_version_id
+  if (!articleVersionId) {
+    throw new Error('invalid_article_version')
+  }
+  if (publishComplianceEnabled.value && !ackRecordId) {
+    const result = await complianceApi.checkArticle(article.id, {
+      article_version_id: articleVersionId,
+      title: article.title,
+      plaintext: article.markdown_content ?? '',
+      target_platforms: selectedPlatformIds.value,
+      trigger_source: 'publish_gate',
+    })
+    complianceResult.value = result
+    const decision = complianceDisplayDecision(result)
+    if (decision === 'block' || decision === 'needs_ack') {
+      throw new Error(`compliance_${decision}`)
+    }
+  }
+
+  const results: EnterpriseSitePublishResponse[] = []
+  for (const [index, site] of selectedEnterpriseSiteCards.value.entries()) {
+    const categoryId = enterpriseSiteCategoryIds.value[site.id]?.trim()
+    if (!categoryId) {
+      throw new Error('enterprise_site_category_required')
+    }
+    let siteAckRecordId = ackRecordId
+    if (ackRecordId && index > 0 && complianceResult.value?.record_id) {
+      const ack = await complianceApi.createAck(complianceResult.value.record_id, {
+        acknowledged_violation_ids: complianceAcknowledgedViolationIds.value,
+      })
+      siteAckRecordId = ack.id
+    }
+    results.push(
+      await enterpriseSitesApi.publish(site.id, {
+        article_id: article.id,
+        category_id: categoryId,
+        publish_type: enterprisePublishType.value,
+        author: 'Geo SaaS',
+        source: 'Geo SaaS',
+        ack_record_id: siteAckRecordId,
+        article_version_id: articleVersionId,
+        cover_asset_url: normalizedCoverValue.value || null,
+        cover_image_asset_id: normalizedCoverValue.value ? coverImageAssetId.value : null,
+      }),
+    )
+  }
+  return results
+}
+
+async function loadLatestPublishArticleDetail(): Promise<ArticleDetail> {
+  if (!props.articleId) {
+    throw new Error('missing_article')
+  }
+  const result = await detailQuery.refetch()
+  const article = result.data ?? detailQuery.data.value
+  if (!article) {
+    throw new Error('missing_article')
+  }
+  return article
+}
+
+async function handlePublishSuccess(
+  result: CreatePublishJobResponse | EnterpriseSitePublishResponse[],
+) {
+  if (Array.isArray(result)) {
+    await handleEnterprisePublishSuccess(result)
+    return
+  }
   const description = successDescription(result)
   const options = {
     message: result.created_task_ids.length === 0 ? '发布任务已存在' : '已提交发布任务',
@@ -561,19 +808,24 @@ async function handlePublishSuccess(result: CreatePublishJobResponse) {
     notification.success(options)
   }
 
+  await invalidatePublishModalQueries()
+
+  emit('published')
+  emit('update:open', false)
+}
+
+async function invalidatePublishModalQueries(): Promise<void> {
   await Promise.all([
     queryClient.invalidateQueries({ queryKey: ['articles'] }),
     queryClient.invalidateQueries({ queryKey: ['workspace'] }),
     queryClient.invalidateQueries({ queryKey: ['tenant', 'desktop-accounts'] }),
+    queryClient.invalidateQueries({ queryKey: ['tenant', 'enterprise-sites'] }),
     queryClient.invalidateQueries({ queryKey: ['articles', 'detail', props.articleId] }),
     queryClient.invalidateQueries({
       queryKey: ['articles', 'detail', props.articleId, 'publish-modal'],
     }),
     queryClient.invalidateQueries({ queryKey: ['articles', 'publish-records', props.articleId] }),
   ])
-
-  emit('published')
-  emit('update:open', false)
 }
 
 function handlePublishError(error: unknown) {
@@ -587,6 +839,14 @@ function handlePublishError(error: unknown) {
     message.warning('请先选择至少一个可发布账号')
     return
   }
+  if (normalized === 'no_enterprise_sites_selected') {
+    message.warning('请先选择至少一个企业自建站点')
+    return
+  }
+  if (normalized === 'enterprise_site_category_required') {
+    message.warning('请选择每个企业站点的 CMS 栏目')
+    return
+  }
   if (normalized === 'cover_required_for_selected_platforms') {
     message.warning(t('media.publish.messages.coverRequired'))
     return
@@ -601,6 +861,45 @@ function handlePublishError(error: unknown) {
   message.error(formatError(error))
 }
 
+async function handleEnterprisePublishSuccess(
+  results: EnterpriseSitePublishResponse[],
+): Promise<void> {
+  const succeeded = results.filter((item) => item.status === 'success')
+  const failed = results.filter((item) => item.status !== 'success')
+  if (failed.length > 0 && succeeded.length > 0) {
+    notification.warning({
+      message: '企业站发布部分成功',
+      description: `成功 ${succeeded.length} 个站点，失败 ${failed.length} 个站点。`,
+      placement: 'topRight',
+      duration: 6,
+    })
+  } else if (failed.length > 0) {
+    notification.error({
+      message: '企业站发布失败',
+      description: failed[0]?.error_message || '请检查插件、栏目和 PBootCMS API 配置。',
+      placement: 'topRight',
+      duration: 6,
+    })
+  } else {
+    notification.success({
+      message: enterprisePublishType.value === 'draft' ? '企业站草稿已保存' : '企业站发布成功',
+      description:
+        succeeded.length === 1
+          ? succeeded[0]?.external_article_url || 'PBootCMS 已返回成功。'
+          : `共 ${succeeded.length} 个企业站点已完成。`,
+      placement: 'topRight',
+      duration: 5,
+    })
+  }
+
+  await invalidatePublishModalQueries()
+
+  if (failed.length === 0) {
+    emit('published')
+    emit('update:open', false)
+  }
+}
+
 async function persistCoverIfNeeded(detail: ArticleDetail): Promise<ArticleDetail> {
   const currentUrl = resolveApiURL(detail.cover_asset_url).trim()
   const nextUrl = normalizedCoverValue.value.trim()
@@ -657,10 +956,34 @@ function toggleAccount(accountId: string, selectable: boolean): void {
   selectedAccountIds.value = [...selectedAccountIds.value, accountId]
 }
 
+function toggleEnterpriseSite(site: EnterpriseSiteCard): void {
+  if (!site.selectable || accountSelectionLocked.value) {
+    return
+  }
+
+  if (selectedEnterpriseSiteIds.value.includes(site.id)) {
+    selectedEnterpriseSiteIds.value = selectedEnterpriseSiteIds.value.filter((id) => id !== site.id)
+    return
+  }
+
+  selectedEnterpriseSiteIds.value = [...selectedEnterpriseSiteIds.value, site.id]
+  if (!enterpriseSiteCategoryIds.value[site.id]) {
+    enterpriseSiteCategoryIds.value = {
+      ...enterpriseSiteCategoryIds.value,
+      [site.id]: site.defaultCategoryId,
+    }
+  }
+  void loadEnterpriseCategories(site.id)
+}
+
 function isSelected(accountId: string): boolean {
   return selectedAccountIds.value.includes(accountId)
 }
 
+function isEnterpriseSiteSelected(siteId: number): boolean {
+  return selectedEnterpriseSiteIds.value.includes(siteId)
+}
+
 function isAlreadyPublished(account: PublishAccountCard): boolean {
   return successfulPublishRecordKeys.value.has(
     successfulPublishRecordKey(account.id, account.platformId) ?? '',
@@ -668,9 +991,11 @@ function isAlreadyPublished(account: PublishAccountCard): boolean {
 }
 
 function activePublishRecordStatus(account: PublishAccountCard): string | null {
-  return activePublishRecordStatusByKey.value.get(
-    successfulPublishRecordKey(account.id, account.platformId) ?? '',
-  ) ?? null
+  return (
+    activePublishRecordStatusByKey.value.get(
+      successfulPublishRecordKey(account.id, account.platformId) ?? '',
+    ) ?? null
+  )
 }
 
 function activePublishRecordLabel(account: PublishAccountCard): string | null {
@@ -686,6 +1011,19 @@ function activePublishRecordLabel(account: PublishAccountCard): string | null {
   }
 }
 
+function activeEnterpriseRecordLabel(status: string): string {
+  switch (String(status ?? '').trim()) {
+    case 'publishing':
+    case 'running':
+      return '发布中'
+    case 'queued':
+    case 'pending':
+      return '已排队'
+    default:
+      return '已提交'
+  }
+}
+
 function successfulPublishRecordKey(
   desktopAccountId?: string | null,
   platformId?: string | null,
@@ -707,6 +1045,12 @@ function isSuccessfulPublishRecord(record: PublishRecord): boolean {
   }
 }
 
+function isSuccessfulEnterpriseSiteRecord(record: PublishRecord): boolean {
+  return (
+    record.target_type === 'enterprise_site' && String(record.status ?? '').trim() === 'success'
+  )
+}
+
 function isActivePublishRecord(record: PublishRecord): boolean {
   switch (String(record.status ?? '').trim()) {
     case 'queued':
@@ -719,6 +1063,150 @@ function isActivePublishRecord(record: PublishRecord): boolean {
   }
 }
 
+function isActiveEnterpriseSiteRecord(record: PublishRecord): boolean {
+  if (record.target_type !== 'enterprise_site') {
+    return false
+  }
+  switch (String(record.status ?? '').trim()) {
+    case 'queued':
+    case 'pending':
+    case 'publishing':
+    case 'running':
+      return true
+    default:
+      return false
+  }
+}
+
+function resolveEnterpriseSiteDisabledReason(
+  site: EnterpriseSiteConnection,
+  alreadyPublished: boolean,
+  activeStatus?: string,
+  connectionStatus = site.status,
+): string {
+  if (alreadyPublished) {
+    return '这篇文章已成功发布到该企业站点；如需重新发布，请复制或新建一篇文章。'
+  }
+  if (activeStatus) {
+    return '该企业站点已有当前文章的发布任务，暂不能重复提交。'
+  }
+  if (site.status === 'disabled') {
+    return '该企业站点已禁用。'
+  }
+  if (connectionStatus === 'error') {
+    return site.last_error?.trim() || '该企业站点连接异常，请先测试连通性。'
+  }
+  return ''
+}
+
+function enterpriseSiteConnectionStatus(site: EnterpriseSiteConnection): string {
+  const status = String(site.status ?? '').trim()
+  const lastError = site.last_error?.trim()
+  const publishError = enterpriseSiteLatestPublishError(site)
+  if (status === 'error' && lastError && publishError && lastError === publishError) {
+    return 'connected'
+  }
+  return status
+}
+
+function enterpriseSiteLatestPublishError(site: EnterpriseSiteConnection): string {
+  const record = site.latest_record
+  if (!record) {
+    return ''
+  }
+  const status = String(record.status ?? '').trim()
+  if (status !== 'failed' && status !== 'publish_failed') {
+    return ''
+  }
+  return record.error_message?.trim() || ''
+}
+
+function cmsTypeLabel(cmsType: string): string {
+  switch (String(cmsType ?? '').trim()) {
+    case 'pbootcms':
+      return 'PBootCMS'
+    case 'wordpress':
+      return 'WordPress'
+    case 'dedecms':
+      return 'DedeCMS'
+    case 'phpcms':
+      return 'PHPCMS'
+    default:
+      return cmsType || 'CMS'
+  }
+}
+
+function enterpriseSiteStatusLabel(status: string): string {
+  switch (String(status ?? '').trim()) {
+    case 'connected':
+      return '已连通'
+    case 'error':
+      return '连接异常'
+    case 'disabled':
+      return '已禁用'
+    default:
+      return '待校验'
+  }
+}
+
+function enterpriseSiteStatusColor(status: string): string {
+  switch (String(status ?? '').trim()) {
+    case 'connected':
+      return 'green'
+    case 'error':
+      return 'red'
+    case 'disabled':
+      return 'default'
+    default:
+      return 'gold'
+  }
+}
+
+function enterpriseCategoryOptions(siteId: number) {
+  return (enterpriseCategoriesBySiteId.value[siteId] ?? []).map((category) => ({
+    label: enterpriseCategoryLabel(category),
+    value: category.remote_id,
+  }))
+}
+
+function enterpriseCategoryLabel(category: EnterpriseSiteCategory): string {
+  const slug = category.slug?.trim()
+  return slug ? `${category.name} / ${slug}` : category.name
+}
+
+function setEnterpriseCategories(siteId: number, categories: EnterpriseSiteCategory[]): void {
+  enterpriseCategoriesBySiteId.value = {
+    ...enterpriseCategoriesBySiteId.value,
+    [siteId]: categories,
+  }
+  const current = enterpriseSiteCategoryIds.value[siteId]?.trim()
+  if (!current && categories.length > 0) {
+    enterpriseSiteCategoryIds.value = {
+      ...enterpriseSiteCategoryIds.value,
+      [siteId]: categories[0].remote_id,
+    }
+  }
+}
+
+async function loadEnterpriseCategories(siteId: number): Promise<void> {
+  if (enterpriseCategoriesBySiteId.value[siteId]) {
+    return
+  }
+  try {
+    const categories = await enterpriseSitesApi.categories(siteId)
+    setEnterpriseCategories(siteId, categories)
+  } catch {
+    enterpriseCategoriesBySiteId.value = {
+      ...enterpriseCategoriesBySiteId.value,
+      [siteId]: [],
+    }
+  }
+}
+
+function syncEnterpriseCategories(siteId: number): void {
+  syncEnterpriseCategoriesMutation.mutate(siteId)
+}
+
 function handleCoverToggle(checked: boolean): void {
   if (coverRequired.value) {
     coverEnabled.value = true
@@ -773,7 +1261,9 @@ async function runPublishAdmissionCheck(): Promise<void> {
     publishAdmissionResult.value = null
     publishAdmissionError.value = null
     publishAdmissionLoading.value =
-      detailQuery.isPending.value || detailQuery.isFetching.value || complianceStatusQuery.isFetching.value
+      detailQuery.isPending.value ||
+      detailQuery.isFetching.value ||
+      complianceStatusQuery.isFetching.value
     return
   }
 
@@ -838,9 +1328,7 @@ function parseComplianceResultFromError(error: unknown): ComplianceCheckResult |
 }
 
 function hasComplianceHits(result: ComplianceCheckResult | null | undefined): boolean {
-  return Boolean(
-    result && ((result.hit_count ?? 0) > 0 || (result.violations?.length ?? 0) > 0),
-  )
+  return Boolean(result && ((result.hit_count ?? 0) > 0 || (result.violations?.length ?? 0) > 0))
 }
 
 function complianceDisplayDecision(
@@ -875,7 +1363,7 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
     :open="publishModalVisible"
     title="发布"
     :width="980"
-    :confirm-loading="publishMutation.isPending.value || ackInProgress"
+    :confirm-loading="publishBusy"
     :ok-text="okText"
     :ok-button-props="{ disabled: okDisabled }"
     :cancel-text="t('common.cancel')"
@@ -888,23 +1376,26 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
           <span class="publish-modal__eyebrow">发布标题</span>
           <h3>{{ modalTitle }}</h3>
           <p>
-            在线账号会立即消费，离线账号会自动排队；数据库保留任务真相，RabbitMQ
-            负责唤醒在线客户端。
+            {{
+              activeTargetTab === 'enterprise_sites'
+                ? '企业自建站点由服务端直接调用 CMS 插件发布，不占用桌面端账号。'
+                : '在线账号会立即消费，离线账号会自动排队；数据库保留任务真相，RabbitMQ 负责唤醒在线客户端。'
+            }}
           </p>
         </div>
 
         <div class="publish-modal__hero-metrics">
           <div class="publish-modal__metric">
-            <strong>{{ selectedCards.length }}</strong>
-            <span>已选账号</span>
+            <strong>{{ selectedTargetCount }}</strong>
+            <span>{{ selectedTargetLabel }}</span>
           </div>
           <div class="publish-modal__metric">
-            <strong>{{ selectedImmediateCount }}</strong>
-            <span>立即发布</span>
+            <strong>{{ selectedPublishNowCount }}</strong>
+            <span>{{ publishNowLabel }}</span>
           </div>
           <div class="publish-modal__metric">
-            <strong>{{ selectedQueuedCount }}</strong>
-            <span>离线排队</span>
+            <strong>{{ selectedQueueCount }}</strong>
+            <span>{{ queueLabel }}</span>
           </div>
         </div>
       </section>
@@ -914,136 +1405,387 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
           <div class="publish-modal__title-row">
             <h3>
               <span class="required-star">*</span>
-              目标账号
+              发布目标
             </h3>
             <div
-              v-if="accountSelectionLocked && !accountsQuery.isPending.value && !platformsQuery.isPending.value"
+              v-if="
+                accountSelectionLocked &&
+                !accountsQuery.isPending.value &&
+                !platformsQuery.isPending.value &&
+                !enterpriseSitesQuery.isPending.value
+              "
               class="publish-modal__account-lock publish-modal__account-lock--inline"
               :class="{
-                'publish-modal__account-lock--error': !accountSelectionLockSpinning && (mandatoryAdmissionBlocking || publishAdmissionError)
+                'publish-modal__account-lock--error':
+                  !accountSelectionLockSpinning &&
+                  (mandatoryAdmissionBlocking || publishAdmissionError),
               }"
             >
               <a-spin v-if="accountSelectionLockSpinning" size="small" />
-              <CloseCircleFilled v-else-if="mandatoryAdmissionBlocking || publishAdmissionError" class="publish-modal__account-lock-icon" />
+              <CloseCircleFilled
+                v-else-if="mandatoryAdmissionBlocking || publishAdmissionError"
+                class="publish-modal__account-lock-icon"
+              />
               <InfoCircleFilled v-else class="publish-modal__account-lock-icon" />
               <span>{{ accountSelectionLockMessage }}</span>
             </div>
           </div>
           <p class="muted">
-            优先预选文章里已经勾选的平台账号。支持同平台多账号；授权异常、未绑定桌面客户端或已成功发布过该文章的账号不可选；如需重新发布，请复制或新建一篇文章。
-            <span v-if="publishedAccountCount > 0" class="publish-modal__published-note">
+            选择普通媒体账号会进入桌面端发布队列；选择企业自建站点会直接调用 CMS 插件发文。
+            <span
+              v-if="activeTargetTab === 'media_accounts' && publishedAccountCount > 0"
+              class="publish-modal__published-note"
+            >
               其中 {{ publishedAccountCount }} 个因已成功发布禁用。
             </span>
+            <span
+              v-else-if="activeTargetTab === 'enterprise_sites' && publishedEnterpriseSiteCount > 0"
+              class="publish-modal__published-note"
+            >
+              其中 {{ publishedEnterpriseSiteCount }} 个站点因已成功发布禁用。
+            </span>
           </p>
         </div>
 
-        <div
-          v-if="
-            accountsQuery.isPending.value ||
-            platformsQuery.isPending.value ||
-            publishRecordsQuery.isPending.value
-          "
-          class="publish-modal__loading"
-        >
-          <a-skeleton active :paragraph="{ rows: 5 }" />
-        </div>
-
-        <template v-else>
-          <div v-if="accountCards.length" class="publish-modal__list">
-            <button
-              v-for="account in accountCards"
-              :key="account.id"
-              type="button"
-              class="publish-modal__card"
-              :class="{
-                'publish-modal__card--active': isSelected(account.id),
-                'publish-modal__card--disabled': !account.selectable || accountSelectionLocked,
-              }"
-              :aria-disabled="!account.selectable || accountSelectionLocked"
-              @click="toggleAccount(account.id, account.selectable)"
+        <a-tabs v-model:activeKey="activeTargetTab" class="publish-modal__target-tabs">
+          <a-tab-pane key="media_accounts" tab="平台账号">
+            <div
+              v-if="
+                accountsQuery.isPending.value ||
+                platformsQuery.isPending.value ||
+                publishRecordsQuery.isPending.value
+              "
+              class="publish-modal__loading"
             >
-              <div class="publish-modal__card-header">
-                <div class="publish-modal__card-identity">
-                  <span class="publish-modal__avatar" :style="{ background: account.platformAccent }">
-                    <img
-                      v-if="account.avatarUrl"
-                      :src="account.avatarUrl"
-                      :alt="account.displayName"
-                      referrerpolicy="no-referrer"
-                    />
-                    <span v-else>{{ accountInitial(account) }}</span>
-                  </span>
-                  <div class="publish-modal__identity-copy">
-                    <div class="publish-modal__account-name-row">
-                      <strong :title="account.displayName">{{ account.displayName }}</strong>
-                      <a-tooltip :title="account.statusText" placement="top">
-                        <span
-                          class="publish-modal__state-pill publish-modal__state-pill--compact"
-                          :class="
-                            isAlreadyPublished(account)
-                              ? 'publish-modal__state-pill--published'
-                              : `publish-modal__state-pill--${account.publishState}`
-                          "
-                        >
-                          {{ isAlreadyPublished(account) ? '已发布' : publishStateLabel(account.publishState) }}
-                        </span>
-                      </a-tooltip>
-                    </div>
-                    <span
-                      class="publish-modal__platform-line"
-                      :title="`${account.platformName} · ${account.platformUid}`"
-                    >
-                      <img
-                        v-if="account.platformLogoUrl"
-                        class="publish-modal__platform-logo"
-                        :src="account.platformLogoUrl"
-                        :alt="account.platformName"
-                        referrerpolicy="no-referrer"
-                      />
+              <a-skeleton active :paragraph="{ rows: 5 }" />
+            </div>
+
+            <template v-else>
+              <div v-if="accountCards.length" class="publish-modal__list">
+                <button
+                  v-for="account in accountCards"
+                  :key="account.id"
+                  type="button"
+                  class="publish-modal__card"
+                  :class="{
+                    'publish-modal__card--active': isSelected(account.id),
+                    'publish-modal__card--disabled': !account.selectable || accountSelectionLocked,
+                  }"
+                  :aria-disabled="!account.selectable || accountSelectionLocked"
+                  @click="toggleAccount(account.id, account.selectable)"
+                >
+                  <div class="publish-modal__card-header">
+                    <div class="publish-modal__card-identity">
                       <span
-                        v-else
-                        class="publish-modal__platform-logo publish-modal__platform-logo--fallback"
+                        class="publish-modal__avatar"
                         :style="{ background: account.platformAccent }"
                       >
-                        {{ account.platformShortName }}
-                      </span>
-                      <span class="publish-modal__platform-text">
-                        {{ account.platformName }} · {{ account.platformUid }}
+                        <img
+                          v-if="account.avatarUrl"
+                          :src="account.avatarUrl"
+                          :alt="account.displayName"
+                          referrerpolicy="no-referrer"
+                        />
+                        <span v-else>{{ accountInitial(account) }}</span>
                       </span>
+                      <div class="publish-modal__identity-copy">
+                        <div class="publish-modal__account-name-row">
+                          <a-tooltip :title="account.displayName" placement="top">
+                            <strong>{{ account.displayName }}</strong>
+                          </a-tooltip>
+                          <a-tooltip :title="account.statusText" placement="top">
+                            <span
+                              class="publish-modal__state-pill publish-modal__state-pill--compact"
+                              :class="
+                                isAlreadyPublished(account)
+                                  ? 'publish-modal__state-pill--published'
+                                  : `publish-modal__state-pill--${account.publishState}`
+                              "
+                            >
+                              {{
+                                isAlreadyPublished(account)
+                                  ? '已发布'
+                                  : publishStateLabel(account.publishState)
+                              }}
+                            </span>
+                          </a-tooltip>
+                        </div>
+                        <a-tooltip
+                          :title="`${account.platformName} · ${account.platformUid}`"
+                          placement="top"
+                        >
+                          <span class="publish-modal__platform-line">
+                            <img
+                              v-if="account.platformLogoUrl"
+                              class="publish-modal__platform-logo"
+                              :src="account.platformLogoUrl"
+                              :alt="account.platformName"
+                              referrerpolicy="no-referrer"
+                            />
+                            <span
+                              v-else
+                              class="publish-modal__platform-logo publish-modal__platform-logo--fallback"
+                              :style="{ background: account.platformAccent }"
+                            >
+                              {{ account.platformShortName }}
+                            </span>
+                            <span class="publish-modal__platform-text">
+                              {{ account.platformName }} · {{ account.platformUid }}
+                            </span>
+                          </span>
+                        </a-tooltip>
+                      </div>
+                    </div>
+                    <span class="publish-modal__check">
+                      <span v-if="isSelected(account.id)" class="publish-modal__check-inner"></span>
                     </span>
                   </div>
-                </div>
-                <span class="publish-modal__check">
-                  <span v-if="isSelected(account.id)" class="publish-modal__check-inner"></span>
-                </span>
+
+                  <div class="publish-modal__card-footer">
+                    <div class="publish-modal__tags">
+                      <span
+                        class="status-badge"
+                        :class="
+                          account.health === 'live'
+                            ? 'status-badge--success'
+                            : account.health === 'risk'
+                              ? 'status-badge--warning'
+                              : 'status-badge--error'
+                        "
+                      >
+                        <span class="status-badge__dot"></span>
+                        {{ healthLabel(account.health) }}
+                      </span>
+
+                      <a-tooltip :title="clientStatusTooltip(account)" placement="top">
+                        <span
+                          class="status-badge publish-modal__client-status-tag"
+                          :class="
+                            account.clientOnline
+                              ? 'status-badge--success'
+                              : account.clientId
+                                ? 'status-badge--neutral'
+                                : 'status-badge--error'
+                          "
+                        >
+                          <span class="status-badge__dot"></span>
+                          {{ clientStatusLabel(account) }}
+                        </span>
+                      </a-tooltip>
+
+                      <span
+                        v-if="isAlreadyPublished(account)"
+                        class="status-badge status-badge--published"
+                      >
+                        <span class="status-badge__dot"></span>
+                        已发布
+                      </span>
+                      <span
+                        v-else-if="activePublishRecordLabel(account)"
+                        class="status-badge status-badge--processing"
+                      >
+                        <span class="status-badge__dot"></span>
+                        {{ activePublishRecordLabel(account) }}
+                      </span>
+                    </div>
+                  </div>
+                </button>
               </div>
 
-              <div class="publish-modal__card-footer">
-                <div class="publish-modal__tags">
-                  <a-tag :color="healthColor(account.health)">
-                    {{ healthLabel(account.health) }}
-                  </a-tag>
-                  <a-tooltip :title="clientStatusTooltip(account)" placement="topLeft">
-                    <a-tag
-                      :color="clientStatusColor(account)"
-                      class="publish-modal__client-status-tag"
-                    >
-                      {{ clientStatusLabel(account) }}
-                    </a-tag>
-                  </a-tooltip>
-                  <a-tag v-if="isAlreadyPublished(account)" color="blue">
-                    已发布
-                  </a-tag>
-                  <a-tag v-else-if="activePublishRecordLabel(account)" color="gold">
-                    {{ activePublishRecordLabel(account) }}
-                  </a-tag>
-                </div>
-              </div>
-            </button>
-          </div>
+              <a-empty v-else description="当前还没有可用的桌面媒体账号，请先在桌面端绑定。" />
+            </template>
+          </a-tab-pane>
 
-          <a-empty v-else description="当前还没有可用的桌面媒体账号，请先在桌面端绑定。" />
-        </template>
+          <a-tab-pane key="enterprise_sites" tab="企业自建站点">
+            <div
+              v-if="enterpriseSitesQuery.isPending.value || publishRecordsQuery.isPending.value"
+              class="publish-modal__loading"
+            >
+              <a-skeleton active :paragraph="{ rows: 5 }" />
+            </div>
+
+            <template v-else>
+              <div class="publish-modal__enterprise-toolbar">
+                <span>发布方式</span>
+                <a-segmented
+                  v-model:value="enterprisePublishType"
+                  :options="[
+                    { label: '直接发布', value: 'publish' },
+                    { label: '保存草稿', value: 'draft' },
+                  ]"
+                />
+              </div>
+
+              <div v-if="enterpriseSiteCards.length" class="publish-modal__list">
+                <article
+                  v-for="site in enterpriseSiteCards"
+                  :key="site.id"
+                  class="publish-modal__card publish-modal__card--enterprise"
+                  :class="{
+                    'publish-modal__card--active': isEnterpriseSiteSelected(site.id),
+                    'publish-modal__card--disabled': !site.selectable || accountSelectionLocked,
+                  }"
+                >
+                  <button
+                    type="button"
+                    class="publish-modal__enterprise-card-main"
+                    :aria-disabled="!site.selectable || accountSelectionLocked"
+                    @click="toggleEnterpriseSite(site)"
+                  >
+                    <div class="publish-modal__card-header">
+                      <div class="publish-modal__card-identity">
+                        <span class="publish-modal__avatar publish-modal__avatar--site">
+                          {{ site.name.slice(0, 1).toUpperCase() }}
+                        </span>
+                        <div class="publish-modal__identity-copy">
+                          <div class="publish-modal__account-name-row">
+                            <a-tooltip :title="site.name" placement="top">
+                              <strong>{{ site.name }}</strong>
+                            </a-tooltip>
+                            <a-tooltip
+                              :title="site.disabledReason || site.statusText"
+                              placement="top"
+                            >
+                              <span
+                                class="publish-modal__state-pill publish-modal__state-pill--compact"
+                                :class="
+                                  successfulEnterpriseSiteIds.has(site.id)
+                                    ? 'publish-modal__state-pill--published'
+                                    : site.hasPublishFailure
+                                      ? 'publish-modal__state-pill--queued'
+                                      : site.status === 'connected'
+                                        ? 'publish-modal__state-pill--immediate'
+                                        : site.status === 'error'
+                                          ? 'publish-modal__state-pill--unavailable'
+                                          : 'publish-modal__state-pill--queued'
+                                "
+                              >
+                                {{ site.statusText }}
+                              </span>
+                            </a-tooltip>
+                          </div>
+                          <a-tooltip :title="site.siteUrl" placement="top">
+                            <span class="publish-modal__platform-line">
+                              <span
+                                class="publish-modal__platform-logo publish-modal__platform-logo--fallback publish-modal__platform-logo--cms"
+                              >
+                                CMS
+                              </span>
+                              <span class="publish-modal__platform-text">
+                                {{ site.cmsType }} · {{ site.siteUrl }}
+                              </span>
+                            </span>
+                          </a-tooltip>
+                        </div>
+                      </div>
+                      <span class="publish-modal__check">
+                        <span
+                          v-if="isEnterpriseSiteSelected(site.id)"
+                          class="publish-modal__check-inner"
+                        ></span>
+                      </span>
+                    </div>
+
+                    <div class="publish-modal__card-footer">
+                      <div class="publish-modal__tags">
+                        <span
+                          class="status-badge"
+                          :class="
+                            site.status === 'connected'
+                              ? 'status-badge--success'
+                              : 'status-badge--error'
+                          "
+                        >
+                          <span class="status-badge__dot"></span>
+                          {{ site.status === 'connected' ? '已连通' : '连通失败' }}
+                        </span>
+
+                        <span class="status-badge status-badge--info">
+                          {{ site.categoryCount }} 个栏目
+                        </span>
+
+                        <span
+                          v-if="successfulEnterpriseSiteIds.has(site.id)"
+                          class="status-badge status-badge--published"
+                        >
+                          <span class="status-badge__dot"></span>
+                          已发布
+                        </span>
+                        <span
+                          v-else-if="activeEnterpriseRecordStatusBySiteId.has(site.id)"
+                          class="status-badge status-badge--processing"
+                        >
+                          <span class="status-badge__dot"></span>
+                          {{
+                            activeEnterpriseRecordLabel(
+                              activeEnterpriseRecordStatusBySiteId.get(site.id) ?? '',
+                            )
+                          }}
+                        </span>
+                      </div>
+                    </div>
+                  </button>
+
+                  <div
+                    v-if="isEnterpriseSiteSelected(site.id)"
+                    class="publish-modal__enterprise-config"
+                    @click.stop
+                  >
+                    <div class="publish-modal__config-title">
+                      <svg
+                        class="publish-modal__config-icon"
+                        viewBox="0 0 24 24"
+                        width="14"
+                        height="14"
+                        fill="none"
+                        stroke="currentColor"
+                        stroke-width="2"
+                        stroke-linecap="round"
+                        stroke-linejoin="round"
+                      >
+                        <rect x="3" y="3" width="7" height="9" />
+                        <rect x="14" y="3" width="7" height="5" />
+                        <rect x="14" y="12" width="7" height="9" />
+                        <rect x="3" y="16" width="7" height="5" />
+                      </svg>
+                      <span>配置发布栏目</span>
+                    </div>
+                    <div class="publish-modal__config-body">
+                      <a-select
+                        v-model:value="enterpriseSiteCategoryIds[site.id]"
+                        :options="enterpriseCategoryOptions(site.id)"
+                        :loading="syncEnterpriseCategoriesMutation.isPending.value"
+                        :get-popup-container="enterpriseSelectPopupContainer"
+                        popup-class-name="publish-modal__enterprise-select-dropdown"
+                        class="publish-modal__enterprise-select"
+                        placeholder="选择栏目"
+                        @focus="loadEnterpriseCategories(site.id)"
+                        @click.stop
+                      />
+                      <a-button
+                        class="publish-modal__sync-btn"
+                        :loading="syncEnterpriseCategoriesMutation.isPending.value"
+                        @click="syncEnterpriseCategories(site.id)"
+                      >
+                        <template #icon><SyncOutlined /></template>
+                        同步栏目
+                      </a-button>
+                    </div>
+                  </div>
+
+                  <p v-if="site.disabledReason" class="publish-modal__site-warning">
+                    {{ site.disabledReason }}
+                  </p>
+                </article>
+              </div>
+
+              <a-empty
+                v-else
+                description="当前还没有企业自建站点，请先到媒体管理添加 PBootCMS 站点。"
+              />
+            </template>
+          </a-tab-pane>
+        </a-tabs>
       </section>
 
       <section class="publish-modal__section">
@@ -1332,6 +2074,37 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   padding: 12px 0;
 }
 
+.publish-modal__target-tabs {
+  margin-top: 14px;
+}
+
+.publish-modal__target-tabs :deep(.ant-tabs-nav) {
+  margin-bottom: 16px;
+}
+
+.publish-modal__target-tabs :deep(.ant-tabs-tab) {
+  padding: 8px 0;
+  font-weight: 600;
+}
+
+.publish-modal__enterprise-toolbar {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin-bottom: 14px;
+  padding: 10px 12px;
+  border: 1px solid #e5e7eb;
+  border-radius: 8px;
+  background: #f9fafb;
+}
+
+.publish-modal__enterprise-toolbar span {
+  color: #374151;
+  font-size: 13px;
+  font-weight: 600;
+}
+
 .publish-modal__account-lock {
   display: inline-flex;
   align-items: center;
@@ -1398,7 +2171,7 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   width: 100%;
   padding: 16px;
   border: 1px solid #e5e7eb;
-  border-radius: 12px;
+  border-radius: 8px;
   background: #ffffff;
   text-align: left;
   cursor: pointer;
@@ -1433,6 +2206,119 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   box-shadow: none;
 }
 
+.publish-modal__card--enterprise {
+  cursor: default;
+  padding: 0;
+  gap: 0;
+  overflow: visible;
+}
+
+.publish-modal__card--enterprise:hover:not(.publish-modal__card--disabled):not(
+    .publish-modal__card--active
+  ) {
+  transform: translateY(-2px);
+  border-color: #d1d5db;
+  box-shadow:
+    0 4px 6px -1px rgba(0, 0, 0, 0.08),
+    0 2px 4px -1px rgba(0, 0, 0, 0.04);
+}
+
+.publish-modal__card--enterprise.publish-modal__card--active:hover:not(
+    .publish-modal__card--disabled
+  ) {
+  transform: none;
+}
+
+.publish-modal__enterprise-card-main {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  width: 100%;
+  padding: 16px;
+  border: 0;
+  background: transparent;
+  text-align: left;
+  cursor: pointer;
+}
+
+.publish-modal__card--disabled .publish-modal__enterprise-card-main {
+  cursor: not-allowed;
+}
+
+.publish-modal__enterprise-config {
+  position: relative;
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+  margin: 0 16px 16px;
+  padding: 12px 14px;
+  border-radius: 8px;
+  background: #f8fafc;
+  border: 1px solid #e2e8f0;
+  z-index: 2;
+  transition: all 0.2s ease;
+}
+
+.publish-modal__card--active .publish-modal__enterprise-config {
+  background: #ffffff;
+  border-color: #bfdbfe;
+  box-shadow: 0 1px 2px 0 rgba(0, 0, 0, 0.02);
+}
+
+.publish-modal__config-title {
+  display: flex;
+  align-items: center;
+  gap: 6px;
+  color: #475569;
+  font-size: 12px;
+  font-weight: 600;
+}
+
+.publish-modal__config-icon {
+  color: #64748b;
+  flex-shrink: 0;
+}
+
+.publish-modal__config-body {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  width: 100%;
+}
+
+.publish-modal__enterprise-select {
+  flex: 1;
+  min-width: 0;
+}
+
+.publish-modal__sync-btn {
+  flex-shrink: 0;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  height: 32px;
+  border-color: #d9d9d9;
+  font-size: 13px;
+  font-weight: 500;
+  transition: all 0.2s ease;
+}
+
+.publish-modal__sync-btn:hover {
+  color: #3b82f6;
+  border-color: #3b82f6;
+}
+
+:global(.publish-modal__enterprise-select-dropdown) {
+  z-index: 3200;
+}
+
+.publish-modal__site-warning {
+  margin: -4px 16px 14px;
+  color: #b45309;
+  font-size: 12px;
+  line-height: 1.5;
+}
+
 .publish-modal__card-header {
   display: flex;
   align-items: flex-start;
@@ -1452,11 +2338,116 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   align-items: center;
   justify-content: space-between;
   padding-top: 12px;
-  border-top: 1px dashed #e5e7eb;
+  border-top: 1px dashed #e2e8f0;
   gap: 8px;
   transition: border-color 0.2s;
 }
 
+/* Custom premium status badges */
+.status-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 6px;
+  padding: 2px 8px;
+  border-radius: 999px;
+  font-size: 11px;
+  font-weight: 500;
+  line-height: 14px;
+  background: #f1f5f9;
+  color: #475569;
+  border: 1px solid #e2e8f0;
+  transition: all 0.2s ease;
+}
+
+.status-badge__dot {
+  width: 5px;
+  height: 5px;
+  border-radius: 50%;
+  background: #94a3b8;
+  display: inline-block;
+  flex-shrink: 0;
+}
+
+/* Success */
+.status-badge--success {
+  background: #f0fdf4;
+  color: #166534;
+  border-color: #bbf7d0;
+}
+.status-badge--success .status-badge__dot {
+  background: #22c55e;
+}
+
+/* Error */
+.status-badge--error {
+  background: #fef2f2;
+  color: #991b1b;
+  border-color: #fee2e2;
+}
+.status-badge--error .status-badge__dot {
+  background: #ef4444;
+}
+
+/* Warning */
+.status-badge--warning {
+  background: #fffbeb;
+  color: #92400e;
+  border-color: #fde68a;
+}
+.status-badge--warning .status-badge__dot {
+  background: #f59e0b;
+}
+
+/* Neutral */
+.status-badge--neutral {
+  background: #f8fafc;
+  color: #475569;
+  border-color: #e2e8f0;
+}
+.status-badge--neutral .status-badge__dot {
+  background: #94a3b8;
+}
+
+/* Processing */
+.status-badge--processing {
+  background: #eff6ff;
+  color: #1e40af;
+  border-color: #bfdbfe;
+}
+.status-badge--processing .status-badge__dot {
+  background: #3b82f6;
+  animation: badgePulse 2s infinite ease-in-out;
+}
+
+/* Published */
+.status-badge--published {
+  background: #f0fdf4;
+  color: #166534;
+  border-color: #bbf7d0;
+}
+.status-badge--published .status-badge__dot {
+  background: #10b981;
+}
+
+/* Info */
+.status-badge--info {
+  background: #f0fdfa;
+  color: #0f766e;
+  border-color: #ccfbf1;
+}
+
+@keyframes badgePulse {
+  0%,
+  100% {
+    opacity: 1;
+    transform: scale(1);
+  }
+  50% {
+    opacity: 0.4;
+    transform: scale(0.8);
+  }
+}
+
 .publish-modal__card--active .publish-modal__card-footer {
   border-top-color: #bfdbfe;
 }
@@ -1475,6 +2466,10 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   margin-top: 2px;
 }
 
+.publish-modal__card:hover:not(.publish-modal__card--disabled) .publish-modal__check {
+  border-color: #3b82f6;
+}
+
 .publish-modal__card--active .publish-modal__check {
   background: #3b82f6;
   border-color: #3b82f6;
@@ -1515,6 +2510,17 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   object-fit: cover;
 }
 
+.publish-modal__avatar--site {
+  background: linear-gradient(135deg, #0ea5e9, #0f766e);
+  box-shadow: 0 2px 6px rgba(15, 118, 110, 0.15);
+  transition: all 0.3s ease;
+}
+
+.publish-modal__card:hover:not(.publish-modal__card--disabled) .publish-modal__avatar--site {
+  transform: scale(1.05);
+  box-shadow: 0 4px 10px rgba(15, 118, 110, 0.25);
+}
+
 .publish-modal__identity-copy {
   display: flex;
   flex-direction: column;
@@ -1569,13 +2575,28 @@ function decisionAlertType(result: ComplianceCheckResult | null | undefined) {
   display: inline-flex;
   align-items: center;
   justify-content: center;
-  color: #fff;
-  font-size: 9px;
+  color: #fff !important;
+  font-size: 9px !important;
   font-weight: 600;
-  line-height: 1;
+  line-height: 1 !important;
   margin-top: 0;
 }
 
+.publish-modal__platform-logo--cms {
+  background: #0f766e;
+  font-size: 8px !important;
+  width: auto;
+  padding: 0 4px;
+  height: 14px;
+  line-height: 14px !important;
+  border-radius: 3px;
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  font-weight: 600;
+  color: #fff !important;
+}
+
 .publish-modal__platform-text {
   min-width: 0;
   overflow: hidden;
diff --git a/apps/admin-web/src/lib/api.ts b/apps/admin-web/src/lib/api.ts
index 903fb2d..17b59ac 100644
--- a/apps/admin-web/src/lib/api.ts
+++ b/apps/admin-web/src/lib/api.ts
@@ -28,6 +28,7 @@ import type {
   CreateKolPromptRequest,
   CreateMediaSupplyOrderRequest,
   CreateMediaSupplyOrderResponse,
+  CreateEnterpriseSiteConnectionRequest,
   CreatePluginSessionRequest,
   CreatePluginSessionResponse,
   CreatePublishBatchRequest,
@@ -39,6 +40,10 @@ import type {
   DesktopClientDownloadableReleaseListResponse,
   DesktopClientReleaseCheckResponse,
   DesktopClientReleaseDownloadURLResponse,
+  EnterpriseSiteCapability,
+  EnterpriseSiteCategory,
+  EnterpriseSiteConnection,
+  EnterpriseSitePublishResponse,
   FolderDeletePreview,
   GenerateFromRuleRequest,
   GenerateFromRuleResponse,
@@ -109,6 +114,7 @@ import type {
   PromptRuleSimple,
   PromptRuleStatusRequest,
   PublishKolPromptRequest,
+  PublishEnterpriseSiteArticleRequest,
   PublishRecord,
   Question,
   QuestionCandidateResult,
@@ -144,6 +150,7 @@ import type {
   TemplateTitleTaskResultResponse,
   TenantPublishTaskListResponse,
   UpdateArticleRequest,
+  UpdateEnterpriseSiteConnectionRequest,
   UpdateKolPackageRequest,
   UpdateKolPromptRequest,
   UpdateQuestionRequest,
@@ -339,6 +346,7 @@ const currentBrandScopedPathPatterns = [
   /^\/api\/tenant\/instant-tasks(?:\/|$)/,
   /^\/api\/tenant\/publish-jobs(?:\/|$)/,
   /^\/api\/tenant\/publish-tasks\/[^/]+\/retry(?:\/|$)/,
+  /^\/api\/tenant\/enterprise-sites\/[^/]+\/publish(?:\/|$)/,
   /^\/api\/tenant\/media-supply\/orders(?:\/|$)/,
   /^\/api\/tenant\/prompt-rules(?:\/|$)/,
 ]
@@ -1378,6 +1386,48 @@ export const publishTasksApi = {
   },
 }
 
+export const enterpriseSitesApi = {
+  list() {
+    return apiClient.get<EnterpriseSiteConnection[]>('/api/tenant/enterprise-sites')
+  },
+  create(payload: CreateEnterpriseSiteConnectionRequest) {
+    return apiClient.post<EnterpriseSiteConnection, CreateEnterpriseSiteConnectionRequest>(
+      '/api/tenant/enterprise-sites',
+      payload,
+    )
+  },
+  update(id: number, payload: UpdateEnterpriseSiteConnectionRequest) {
+    return apiClient.patch<EnterpriseSiteConnection, UpdateEnterpriseSiteConnectionRequest>(
+      `/api/tenant/enterprise-sites/${id}`,
+      payload,
+    )
+  },
+  remove(id: number) {
+    return apiClient.remove<null>(`/api/tenant/enterprise-sites/${id}`)
+  },
+  ping(id: number) {
+    return apiClient.post<EnterpriseSiteCapability>(
+      `/api/tenant/enterprise-sites/${id}/ping`,
+    )
+  },
+  categories(id: number) {
+    return apiClient.get<EnterpriseSiteCategory[]>(
+      `/api/tenant/enterprise-sites/${id}/categories`,
+    )
+  },
+  syncCategories(id: number) {
+    return apiClient.post<EnterpriseSiteCategory[]>(
+      `/api/tenant/enterprise-sites/${id}/categories/sync`,
+    )
+  },
+  publish(id: number, payload: PublishEnterpriseSiteArticleRequest) {
+    return apiClient.post<EnterpriseSitePublishResponse, PublishEnterpriseSiteArticleRequest>(
+      `/api/tenant/enterprise-sites/${id}/publish`,
+      payload,
+    )
+  },
+}
+
 export const complianceApi = {
   runtimeStatus() {
     return apiClient.get<ComplianceRuntimeStatus>('/api/tenant/compliance/runtime-status')
diff --git a/apps/admin-web/src/views/MediaView.vue b/apps/admin-web/src/views/MediaView.vue
index 5017bf1..fa06aa5 100644
--- a/apps/admin-web/src/views/MediaView.vue
+++ b/apps/admin-web/src/views/MediaView.vue
@@ -1,26 +1,50 @@
 <script setup lang="ts">
-import { DownloadOutlined, ReloadOutlined, SearchOutlined } from '@ant-design/icons-vue'
+import {
+  ApiOutlined,
+  ArrowRightOutlined,
+  CheckCircleOutlined,
+  CodeOutlined,
+  DesktopOutlined,
+  DownloadOutlined,
+  GlobalOutlined,
+  LinkOutlined,
+  PlusOutlined,
+  ReloadOutlined,
+  SearchOutlined,
+} from '@ant-design/icons-vue'
 import type {
   DesktopAccountInfo,
   DesktopClientDownloadableRelease,
+  EnterpriseSiteCmsType,
+  EnterpriseSiteConnection,
   MediaPlatform,
 } from '@geo/shared-types'
-import { useQuery } from '@tanstack/vue-query'
+import { useMutation, useQuery } from '@tanstack/vue-query'
 import { message } from 'ant-design-vue'
 import { computed, ref } from 'vue'
-import { useI18n } from 'vue-i18n'
 
-import { desktopClientApi, mediaApi, resolveApiURL, tenantAccountsApi } from '@/lib/api'
+import {
+  desktopClientApi,
+  enterpriseSitesApi,
+  mediaApi,
+  resolveApiURL,
+  tenantAccountsApi,
+} from '@/lib/api'
 import { resolveAccountCheckedAt, resolveAccountHealth } from '@/lib/desktop-account-runtime'
 import { formatBytes, formatDateTime } from '@/lib/display'
+import { formatError } from '@/lib/errors'
 import {
   getPublishPlatformMeta,
   isMediaPublishAccount,
   normalizePublishPlatformId,
 } from '@/lib/publish-platforms'
+import { useCompanyStore } from '@/stores/company'
 
 type AccountHealthFilter = 'all' | 'live' | 'captcha' | 'risk' | 'expired'
 type PublishState = 'immediate' | 'queued' | 'unavailable'
+type MediaScope = 'ugc' | 'enterprise'
+type CmsType = EnterpriseSiteCmsType
+type AdapterStatus = 'ready' | 'planned'
 
 interface MediaAccountCard {
   id: string
@@ -43,6 +67,17 @@ interface MediaAccountCard {
   deleteRequestedAt: string | null
 }
 
+interface EnterpriseSiteFormState {
+  name: string
+  siteUrl: string
+  cmsType: CmsType
+  appid: string
+  secret: string
+  defaultAcode: string
+  defaultMcode: string
+  defaultScode: string
+}
+
 const platformLogoCatalog: Record<string, string> = {
   toutiaohao: '/logos/logo_toutiao.png',
   baijiahao: '/logos/logo_baijiahao.png',
@@ -59,11 +94,55 @@ const platformLogoCatalog: Record<string, string> = {
   dongchedi: '/logos/logo_dongchedi.svg',
 }
 
-const { t } = useI18n()
-
+const companyStore = useCompanyStore()
+const activeMediaScope = ref<MediaScope>('enterprise')
 const searchQuery = ref('')
 const selectedHealth = ref<AccountHealthFilter>('all')
 const downloadingReleaseKey = ref<string | null>(null)
+const enterpriseSiteModalOpen = ref(false)
+const enterpriseSiteForm = ref<EnterpriseSiteFormState>({
+  name: '',
+  siteUrl: '',
+  cmsType: 'pbootcms',
+  appid: '',
+  secret: '',
+  defaultAcode: 'cn',
+  defaultMcode: '2',
+  defaultScode: '',
+})
+const mediaScopes: Array<{ key: MediaScope; label: string; meta: string }> = [
+  { key: 'ugc', label: 'UGC媒体平台', meta: '桌面端账号' },
+  { key: 'enterprise', label: '企业自建站点', meta: 'CMS连接' },
+]
+
+const enterpriseSteps = [
+  { title: '安装插件', detail: 'PBootCMS 放置 GeoPublisherController.php' },
+  { title: '配置凭证', detail: '填写站点域名、AppID、Secret' },
+  { title: '同步栏目', detail: '拉取 CMS 栏目树并保存映射' },
+  { title: '服务端发布', detail: '文章直投企业官网并回写 URL' },
+]
+
+const cmsAdapters: Array<{
+  type: string
+  name: string
+  protocol: string
+  status: AdapterStatus
+}> = [
+  { type: 'pbootcms', name: 'PBootCMS', protocol: 'GeoPublisher 单文件插件', status: 'ready' },
+  {
+    type: 'wordpress',
+    name: 'WordPress',
+    protocol: 'REST API / Application Password',
+    status: 'planned',
+  },
+  { type: 'dedecms', name: 'DedeCMS', protocol: 'GeoPublisher 插件协议', status: 'planned' },
+  { type: 'phpcms', name: 'PHPCMS', protocol: 'GeoPublisher 插件协议', status: 'planned' },
+]
+
+const cmsTypeOptions = cmsAdapters.map((adapter) => ({
+  label: adapter.name,
+  value: adapter.type as CmsType,
+}))
 
 const platformsQuery = useQuery({
   queryKey: ['media', 'platforms', 'media-view'],
@@ -91,12 +170,52 @@ const downloadableReleasesQuery = useQuery({
   refetchOnWindowFocus: true,
 })
 
+const enterpriseSitesQuery = useQuery({
+  queryKey: ['tenant', 'enterprise-sites', 'media-view'],
+  queryFn: () => enterpriseSitesApi.list(),
+  staleTime: 10_000,
+  refetchOnWindowFocus: true,
+})
+
+const createEnterpriseSiteMutation = useMutation({
+  mutationFn: () => saveEnterpriseSiteRequest(),
+  onSuccess: async (site) => {
+    enterpriseSiteModalOpen.value = false
+    message.success('站点凭证已保存')
+    await enterpriseSitesQuery.refetch()
+    void enterpriseSitesApi
+      .ping(site.id)
+      .then(() => enterpriseSitesQuery.refetch())
+      .catch(() => undefined)
+  },
+  onError: (error) => message.error(formatError(error)),
+})
+
+const pingEnterpriseSiteMutation = useMutation({
+  mutationFn: (siteId: number) => enterpriseSitesApi.ping(siteId),
+  onSuccess: async () => {
+    message.success('站点连通正常')
+    await enterpriseSitesQuery.refetch()
+  },
+  onError: (error) => message.error(formatError(error)),
+})
+
+const syncEnterpriseCategoriesMutation = useMutation({
+  mutationFn: (siteId: number) => enterpriseSitesApi.syncCategories(siteId),
+  onSuccess: async (categories) => {
+    message.success(`已同步 ${categories.length} 个栏目`)
+    await enterpriseSitesQuery.refetch()
+  },
+  onError: (error) => message.error(formatError(error)),
+})
+
 const loading = computed(() => platformsQuery.isPending.value || accountsQuery.isPending.value)
 const refreshing = computed(
   () =>
     platformsQuery.isFetching.value ||
     accountsQuery.isFetching.value ||
-    downloadableReleasesQuery.isFetching.value,
+    downloadableReleasesQuery.isFetching.value ||
+    enterpriseSitesQuery.isFetching.value,
 )
 
 const platformMap = computed(() => {
@@ -184,6 +303,7 @@ const filteredAccounts = computed(() => {
 })
 
 const downloadableReleases = computed(() => downloadableReleasesQuery.data.value?.items ?? [])
+const enterpriseSites = computed(() => enterpriseSitesQuery.data.value ?? [])
 const downloadableReleasesError = computed(() => {
   const error = downloadableReleasesQuery.error.value
   if (!error) {
@@ -328,9 +448,115 @@ async function refreshAll(): Promise<void> {
     platformsQuery.refetch(),
     accountsQuery.refetch(),
     downloadableReleasesQuery.refetch(),
+    enterpriseSitesQuery.refetch(),
   ])
 }
 
+function openEnterpriseSiteModal(cmsType: CmsType = 'pbootcms'): void {
+  enterpriseSiteForm.value = {
+    name: '',
+    siteUrl: '',
+    cmsType,
+    appid: '',
+    secret: '',
+    defaultAcode: 'cn',
+    defaultMcode: '2',
+    defaultScode: '',
+  }
+  enterpriseSiteModalOpen.value = true
+}
+
+function normalizeSiteUrl(value: string): string {
+  const trimmed = value.trim()
+  if (!trimmed) {
+    return ''
+  }
+  return /^https?:\/\//i.test(trimmed)
+    ? trimmed.replace(/\/+$/, '')
+    : `https://${trimmed}`.replace(/\/+$/, '')
+}
+
+async function saveEnterpriseSiteRequest(): Promise<EnterpriseSiteConnection> {
+  const form = enterpriseSiteForm.value
+  const siteUrl = normalizeSiteUrl(form.siteUrl)
+  const appid = form.appid.trim()
+  const secret = form.secret.trim()
+
+  if (!siteUrl || !appid || !secret) {
+    throw new Error('请填写站点域名、AppID、Secret')
+  }
+  let name = form.name.trim()
+  try {
+    name = name || new URL(siteUrl).hostname
+  } catch {
+    throw new Error('站点域名格式不正确')
+  }
+  return enterpriseSitesApi.create({
+    name,
+    site_url: siteUrl,
+    cms_type: form.cmsType,
+    appid,
+    secret,
+    default_acode: form.defaultAcode.trim() || null,
+    default_mcode: form.defaultMcode.trim() || null,
+    default_scode: form.defaultScode.trim() || null,
+  })
+}
+
+function cmsTypeLabel(cmsType: CmsType): string {
+  return cmsAdapters.find((adapter) => adapter.type === cmsType)?.name ?? cmsType
+}
+
+function enterpriseSiteStatusLabel(status: string): string {
+  switch (status) {
+    case 'connected':
+      return '已连通'
+    case 'error':
+      return '连接异常'
+    case 'disabled':
+      return '已禁用'
+    default:
+      return '待校验'
+  }
+}
+
+function enterpriseSiteStatusColor(status: string): string {
+  switch (status) {
+    case 'connected':
+      return 'green'
+    case 'error':
+      return 'red'
+    case 'disabled':
+      return 'default'
+    default:
+      return 'gold'
+  }
+}
+
+function syncEnterpriseCategories(site: EnterpriseSiteConnection): void {
+  syncEnterpriseCategoriesMutation.mutate(site.id)
+}
+
+function pingEnterpriseSite(site: EnterpriseSiteConnection): void {
+  pingEnterpriseSiteMutation.mutate(site.id)
+}
+
+function latestEnterpriseRecordLabel(site: EnterpriseSiteConnection): string {
+  const record = site.latest_record
+  if (!record) {
+    return '暂无发布记录'
+  }
+  const title = record.article_title?.trim() || `文章 #${record.article_id}`
+  if (record.status === 'success') {
+    return `${title} · 发布成功`
+  }
+  if (record.status === 'publishing') {
+    return `${title} · 发布中`
+  }
+  const errorMessage = record.error_message?.trim()
+  return errorMessage ? `${title} · 发布失败 · ${errorMessage}` : `${title} · 发布失败`
+}
+
 async function downloadRelease(release: DesktopClientDownloadableRelease): Promise<void> {
   const key = releaseDownloadKey(release)
   if (downloadingReleaseKey.value) {
@@ -398,23 +624,6 @@ function releasePlatformLabel(platform: string): string {
   }
 }
 
-function releasePlatformMark(platform: string): string {
-  switch (platform) {
-    case 'darwin':
-      return 'MAC'
-    case 'win32':
-      return 'WIN'
-    case 'linux':
-      return 'LIN'
-    default:
-      return platform.slice(0, 3).toUpperCase()
-  }
-}
-
-function releasePlatformClass(platform: string): string {
-  return ['darwin', 'win32', 'linux'].includes(platform) ? platform : 'default'
-}
-
 function releaseArchLabel(arch: string): string {
   switch (arch) {
     case 'arm64':
@@ -443,18 +652,10 @@ function releaseSize(value?: number | null): string {
   <div class="media-view">
     <!-- Premium Dark Banner Section -->
     <section class="media-view__top-card">
-      <div class="banner-gradient-orbs">
-        <div class="orb orb-1"></div>
-        <div class="orb orb-2"></div>
-      </div>
       <div class="media-view__header">
         <div class="media-view__header-title">
-          <h2>
-            {{ t('route.media.title') }}
-          </h2>
-          <p>
-            展示客户端里当前已绑定的媒体账号，集成发布队列状态，提供多渠道账号集中式生命周期管理。
-          </p>
+          <h2>媒体管理</h2>
+          <p>将 UGC 账号、新闻源资源和企业自建站点分开管理，发布链路按目标类型独立执行。</p>
         </div>
         <div class="media-view__header-actions">
           <a-button class="btn-refresh" :loading="refreshing" @click="refreshAll">
@@ -464,11 +665,29 @@ function releaseSize(value?: number | null): string {
         </div>
       </div>
 
-      <div class="overview-strip border-t">
+      <div class="media-scope-tabs">
+        <button
+          v-for="scope in mediaScopes"
+          :key="scope.key"
+          class="media-scope-tab"
+          :class="{ 'media-scope-tab--active': activeMediaScope === scope.key }"
+          type="button"
+          @click="activeMediaScope = scope.key"
+        >
+          <DesktopOutlined v-if="scope.key === 'ugc'" class="tab-icon" />
+          <GlobalOutlined v-else-if="scope.key === 'enterprise'" class="tab-icon" />
+          <span>{{ scope.label }}</span>
+          <small>{{ scope.meta }}</small>
+        </button>
+      </div>
+
+      <div v-if="activeMediaScope === 'ugc'" class="overview-strip border-t">
         <div class="overview-chip">
           <div class="chip-icon-box total-bg">
             <svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor">
-              <path d="M12 2A10 10 0 0 0 2 12a10 10 0 0 0 10 10 10 10 0 0 0 10-10A10 10 0 0 0 12 2zm1 14h-2v-6h2v6zm0-8h-2V6h2v2z"/>
+              <path
+                d="M12 2A10 10 0 0 0 2 12a10 10 0 0 0 10 10 10 10 0 0 0 10-10A10 10 0 0 0 12 2zm1 14h-2v-6h2v6zm0-8h-2V6h2v2z"
+              />
             </svg>
           </div>
           <div class="chip-copy">
@@ -479,7 +698,7 @@ function releaseSize(value?: number | null): string {
         <div class="overview-chip">
           <div class="chip-icon-box live-bg">
             <svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor">
-              <path d="M9 16.17L4.83 12l-1.42 1.41L9 19 21 7l-1.41-1.41z"/>
+              <path d="M9 16.17L4.83 12l-1.42 1.41L9 19 21 7l-1.41-1.41z" />
             </svg>
           </div>
           <div class="chip-copy">
@@ -490,7 +709,9 @@ function releaseSize(value?: number | null): string {
         <div class="overview-chip">
           <div class="chip-icon-box queued-bg">
             <svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor">
-              <path d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zM12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8zm.5-13H11v6l5.25 3.15.75-1.23-4.5-2.67z"/>
+              <path
+                d="M11.99 2C6.47 2 2 6.48 2 12s4.47 10 9.99 10C17.52 22 22 17.52 22 12S17.52 2 11.99 2zM12 20c-4.42 0-8-3.58-8-8s3.58-8 8-8 8 3.58 8 8-3.58 8-8 8zm.5-13H11v6l5.25 3.15.75-1.23-4.5-2.67z"
+              />
             </svg>
           </div>
           <div class="chip-copy">
@@ -501,7 +722,9 @@ function releaseSize(value?: number | null): string {
         <div class="overview-chip">
           <div class="chip-icon-box attention-bg">
             <svg viewBox="0 0 24 24" width="16" height="16" fill="currentColor">
-              <path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"/>
+              <path
+                d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-2h2v2zm0-4h-2V7h2v6z"
+              />
             </svg>
           </div>
           <div class="chip-copy">
@@ -512,241 +735,528 @@ function releaseSize(value?: number | null): string {
       </div>
     </section>
 
-    <!-- Client Download Section (App Store Style) -->
-    <section class="panel client-download-panel">
-      <div class="client-download-head">
-        <div>
-          <div class="title-with-badge">
-            <h3 class="panel-title">客户端下载</h3>
-            <span class="badge-pulsing-stable">Stable</span>
+    <template v-if="activeMediaScope === 'enterprise'">
+      <section class="panel enterprise-panel">
+        <div class="enterprise-panel__main">
+          <div class="enterprise-panel__copy">
+            <span class="section-kicker">Enterprise Site Publisher</span>
+            <h3>企业自建站点</h3>
+            <p>
+              面向客户官网、品牌站、行业站的自动发文连接，服务端直接调用 CMS
+              适配器，不占用桌面端账号。
+            </p>
+          </div>
+
+          <div class="enterprise-actions">
+            <a-button
+              type="primary"
+              class="btn-enterprise-primary"
+              @click="openEnterpriseSiteModal()"
+            >
+              <template #icon><PlusOutlined /></template>
+              新增站点
+            </a-button>
+            <a-button class="btn-enterprise-secondary">
+              <template #icon><CodeOutlined /></template>
+              PBootCMS 插件
+            </a-button>
           </div>
-          <p class="panel-desc">高并发发布与任务执行节点，版本根据后台发布配置自动更新与推送。</p>
         </div>
-      </div>
 
-      <a-spin :spinning="downloadableReleasesQuery.isPending.value">
-        <a-alert
-          v-if="downloadableReleasesError"
-          type="warning"
-          show-icon
-          class="premium-alert"
-          :message="`客户端列表读取失败：${downloadableReleasesError}`"
-        />
-
-        <a-empty
-          v-else-if="!downloadableReleases.length"
-          class="premium-empty"
-          description="当前暂无可下载客户端，请等待运营后台发布。"
-        />
-
-        <div v-else class="client-download-grid">
+        <div class="enterprise-flow">
           <article
-            v-for="release in downloadableReleases"
-            :key="release.id"
-            class="client-download-card"
+            v-for="(step, index) in enterpriseSteps"
+            :key="step.title"
+            class="enterprise-step"
+            :class="{ 'enterprise-step--action': step.title === '配置凭证' }"
+            @click="step.title === '配置凭证' ? openEnterpriseSiteModal() : undefined"
           >
-            <div class="client-download-card__body">
-              <div class="client-download-card__logo" :class="`logo-${release.platform}`">
-                <template v-if="release.platform === 'darwin'">
-                  <svg viewBox="0 0 24 24" class="os-svg-icon">
-                    <path fill="currentColor" d="M18.71,19.5 C17.88,20.74 17,21.95 15.66,21.97 C14.32,22 13.89,21.18 12.37,21.18 C10.84,21.18 10.37,21.95 9.1,22 C7.79,22.05 6.8,20.68 5.96,19.48 C4.25,17 2.94,12.45 4.7,9.39 C5.57,7.87 7.13,6.91 8.82,6.88 C10.1,6.86 11.32,7.75 12.11,7.75 C12.89,7.75 14.37,6.68 15.92,6.84 C16.57,6.87 18.39,7.1 19.56,8.82 C19.47,8.88 17.39,10.1 17.41,12.63 C17.44,15.65 20.06,16.66 20.1,16.67 C20.08,16.74 19.67,18.11 18.71,19.5 M15.97,4.17 C16.63,3.37 17.07,2.28 16.95,1 C16,1.04 14.9,1.6 14.24,2.38 C13.68,3.04 13.19,4.14 13.34,5.39 C14.39,5.47 15.4,4.88 15.97,4.17 Z" />
-                  </svg>
-                </template>
-                <template v-else-if="release.platform === 'win32'">
-                  <svg viewBox="0 0 24 24" class="os-svg-icon">
-                    <path fill="currentColor" d="M0 3.449L9.75 2.1v9.45H0V3.449zM0 12.45h9.75v9.45L0 20.551V12.45zm11.25-10.549L24 0v11.55H11.25V1.901zM11.25 12.45H24v11.55l-12.75-1.901V12.45z"/>
-                  </svg>
-                </template>
-                <template v-else>
-                  <svg viewBox="0 0 24 24" class="os-svg-icon" stroke="currentColor" fill="none" stroke-width="2" stroke-linecap="round" stroke-linejoin="round">
-                    <polyline points="4 17 10 11 4 5"></polyline>
-                    <line x1="12" y1="19" x2="20" y2="19"></line>
-                  </svg>
-                </template>
-              </div>
-              <div class="client-download-card__content">
-                <h4>{{ releaseTargetLabel(release) }}</h4>
-                <div class="meta-inline">
-                  <span class="version-tag">v{{ release.version }}</span>
-                  <span class="dot-separator">•</span>
-                  <span>{{ releaseSize(release.file_size_bytes) }}</span>
-                  <span class="dot-separator">•</span>
-                  <span>{{ releaseDate(release) }}</span>
-                </div>
-              </div>
-            </div>
-
-            <div class="client-download-card__file">
-              <span class="file-icon">
-                <svg viewBox="0 0 24 24" width="12" height="12" fill="none" stroke="currentColor" stroke-width="2">
-                  <path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"></path>
-                  <polyline points="14 2 14 8 20 8"></polyline>
-                </svg>
-              </span>
-              <span class="file-name" :title="release.file_name || '安装包'">
-                {{ release.file_name || '安装包' }}
-              </span>
-            </div>
-
-            <div class="client-download-card__actions">
-              <a-button
-                type="primary"
-                class="btn-download"
-                :loading="downloadingReleaseKey === releaseDownloadKey(release)"
-                :disabled="Boolean(downloadingReleaseKey)"
-                @click="downloadRelease(release)"
-              >
-                <template #icon><DownloadOutlined /></template>
-                获取客户端
-              </a-button>
+            <span class="enterprise-step__index">{{ String(index + 1).padStart(2, '0') }}</span>
+            <div>
+              <h4>{{ step.title }}</h4>
+              <p>{{ step.detail }}</p>
             </div>
           </article>
         </div>
-      </a-spin>
-    </section>
+      </section>
 
-    <!-- Bound accounts grid section -->
-    <section class="panel media-list-panel">
-      <div class="media-list-header-row">
-        <div class="media-list-title-box">
-          <h3 class="panel-title">已绑定媒体账号</h3>
-          <p class="panel-desc">管理各媒体账号的授权效期、排队就绪状态和客户端物理节点映射。</p>
+      <section class="enterprise-grid">
+        <article class="panel connector-panel">
+          <div class="panel-head-compact">
+            <div>
+              <h3 class="panel-title">站点连接</h3>
+              <p class="panel-desc">客户 CMS 绑定后会显示连通状态、栏目同步和最近发布结果。</p>
+            </div>
+          </div>
+
+          <a-spin :spinning="enterpriseSitesQuery.isPending.value">
+            <div v-if="!enterpriseSites.length" class="connector-empty">
+              <span class="connector-empty__icon">
+                <GlobalOutlined />
+              </span>
+              <div>
+                <h4>暂无企业站点</h4>
+                <p>先接入 PBootCMS，后续同一协议扩展到 WordPress、DedeCMS、PHPCMS。</p>
+              </div>
+            </div>
+
+            <div v-else class="site-connection-list">
+              <article v-for="site in enterpriseSites" :key="site.id" class="site-connection-card">
+                <span class="site-connection-card__icon">
+                  <GlobalOutlined />
+                </span>
+                <div class="site-connection-card__body">
+                  <div class="site-connection-card__title-row">
+                    <h4>{{ site.name }}</h4>
+                    <a-tag color="blue">{{ cmsTypeLabel(site.cms_type as CmsType) }}</a-tag>
+                    <a-tag :color="enterpriseSiteStatusColor(site.status)">
+                      {{ enterpriseSiteStatusLabel(site.status) }}
+                    </a-tag>
+                  </div>
+                  <p class="site-connection-card__url-row">
+                    <a :href="site.site_url" target="_blank" rel="noreferrer">
+                      <LinkOutlined class="link-icon" />
+                      {{ site.site_url }}
+                    </a>
+                  </p>
+                  <div class="site-connection-card__meta">
+                    <span>AppID: {{ site.appid }}</span>
+                    <span>{{ site.category_count }} 个栏目</span>
+                    <span>
+                      {{
+                        site.last_sync_at
+                          ? `栏目同步 ${formatDateTime(site.last_sync_at)}`
+                          : '待同步栏目'
+                      }}
+                    </span>
+                  </div>
+                  <div class="site-connection-card__record">
+                    <span :class="['record-status-text', site.latest_record ? `status-${site.latest_record.status}` : 'status-none']">
+                      {{ latestEnterpriseRecordLabel(site) }}
+                    </span>
+                    <a
+                      v-if="site.latest_record?.external_article_url"
+                      :href="site.latest_record.external_article_url"
+                      target="_blank"
+                      rel="noreferrer"
+                      class="view-article-link"
+                    >
+                      查看文章
+                      <ArrowRightOutlined class="arrow-icon" />
+                    </a>
+                  </div>
+                  <div v-if="site.last_error" class="site-connection-card__error">
+                    {{ site.last_error }}
+                  </div>
+                </div>
+                <div class="site-connection-card__actions">
+                  <a-button
+                    size="small"
+                    :loading="pingEnterpriseSiteMutation.isPending.value"
+                    @click="pingEnterpriseSite(site)"
+                  >
+                    测试
+                  </a-button>
+                  <a-button
+                    size="small"
+                    :loading="syncEnterpriseCategoriesMutation.isPending.value"
+                    @click="syncEnterpriseCategories(site)"
+                  >
+                    同步栏目
+                  </a-button>
+                </div>
+              </article>
+            </div>
+          </a-spin>
+
+          <div class="connector-sample">
+            <div class="connector-sample__line">
+              <span>目标接口</span>
+              <strong>/api/GeoPublisher/ping</strong>
+            </div>
+            <div class="connector-sample__line">
+              <span>发布协议</span>
+              <strong>ping / categories / publish / update / status</strong>
+            </div>
+          </div>
+        </article>
+
+        <article class="panel adapter-panel">
+          <div class="panel-head-compact">
+            <div>
+              <h3 class="panel-title">CMS 适配器</h3>
+              <p class="panel-desc">按 `cms_type` 注册，业务层只调用统一发布协议。</p>
+            </div>
+          </div>
+
+          <div class="adapter-list">
+            <div
+              v-for="adapter in cmsAdapters"
+              :key="adapter.type"
+              class="adapter-row"
+              :class="adapter.status === 'ready' ? 'adapter-row--ready' : 'adapter-row--planned'"
+            >
+              <span class="adapter-row__mark">
+                <CheckCircleOutlined v-if="adapter.status === 'ready'" />
+                <ApiOutlined v-else />
+              </span>
+              <div class="adapter-row__body">
+                <strong>{{ adapter.name }}</strong>
+                <span>{{ adapter.protocol }}</span>
+              </div>
+              <a-tag :color="adapter.status === 'ready' ? 'green' : 'default'">
+                {{ adapter.status === 'ready' ? '已就绪' : '待接入' }}
+              </a-tag>
+            </div>
+          </div>
+        </article>
+      </section>
+    </template>
+
+    <template v-else>
+      <!-- Client Download Section (App Store Style) -->
+      <section class="panel client-download-panel">
+        <div class="client-download-head">
+          <div>
+            <div class="title-with-badge">
+              <h3 class="panel-title">客户端下载</h3>
+              <span class="badge-pulsing-stable">Stable</span>
+            </div>
+            <p class="panel-desc">高并发发布与任务执行节点，版本根据后台发布配置自动更新与推送。</p>
+          </div>
         </div>
 
-        <div class="media-list-toolbar">
-          <a-input
-            v-model:value="searchQuery"
-            placeholder="搜索账号昵称、UID、发布渠道..."
-            class="media-search"
-            allow-clear
-          >
-            <template #prefix>
-              <SearchOutlined style="color: #a0aec0" />
-            </template>
-          </a-input>
+        <a-spin :spinning="downloadableReleasesQuery.isPending.value">
+          <a-alert
+            v-if="downloadableReleasesError"
+            type="warning"
+            show-icon
+            class="premium-alert"
+            :message="`客户端列表读取失败：${downloadableReleasesError}`"
+          />
 
-          <a-select v-model:value="selectedHealth" class="media-select" style="width: 150px">
-            <a-select-option value="all">全部状态</a-select-option>
-            <a-select-option value="live">授权正常</a-select-option>
-            <a-select-option value="captcha">待处理</a-select-option>
-            <a-select-option value="risk">风险观察</a-select-option>
-            <a-select-option value="expired">授权异常</a-select-option>
-          </a-select>
+          <a-empty
+            v-else-if="!downloadableReleases.length"
+            class="premium-empty"
+            description="当前暂无可下载客户端，请等待运营后台发布。"
+          />
+
+          <div v-else class="client-download-grid">
+            <article
+              v-for="release in downloadableReleases"
+              :key="release.id"
+              class="client-download-card"
+            >
+              <div class="client-download-card__body">
+                <div class="client-download-card__logo" :class="`logo-${release.platform}`">
+                  <template v-if="release.platform === 'darwin'">
+                    <svg viewBox="0 0 24 24" class="os-svg-icon">
+                      <path
+                        fill="currentColor"
+                        d="M18.71,19.5 C17.88,20.74 17,21.95 15.66,21.97 C14.32,22 13.89,21.18 12.37,21.18 C10.84,21.18 10.37,21.95 9.1,22 C7.79,22.05 6.8,20.68 5.96,19.48 C4.25,17 2.94,12.45 4.7,9.39 C5.57,7.87 7.13,6.91 8.82,6.88 C10.1,6.86 11.32,7.75 12.11,7.75 C12.89,7.75 14.37,6.68 15.92,6.84 C16.57,6.87 18.39,7.1 19.56,8.82 C19.47,8.88 17.39,10.1 17.41,12.63 C17.44,15.65 20.06,16.66 20.1,16.67 C20.08,16.74 19.67,18.11 18.71,19.5 M15.97,4.17 C16.63,3.37 17.07,2.28 16.95,1 C16,1.04 14.9,1.6 14.24,2.38 C13.68,3.04 13.19,4.14 13.34,5.39 C14.39,5.47 15.4,4.88 15.97,4.17 Z"
+                      />
+                    </svg>
+                  </template>
+                  <template v-else-if="release.platform === 'win32'">
+                    <svg viewBox="0 0 24 24" class="os-svg-icon">
+                      <path
+                        fill="currentColor"
+                        d="M0 3.449L9.75 2.1v9.45H0V3.449zM0 12.45h9.75v9.45L0 20.551V12.45zm11.25-10.549L24 0v11.55H11.25V1.901zM11.25 12.45H24v11.55l-12.75-1.901V12.45z"
+                      />
+                    </svg>
+                  </template>
+                  <template v-else>
+                    <svg
+                      viewBox="0 0 24 24"
+                      class="os-svg-icon"
+                      stroke="currentColor"
+                      fill="none"
+                      stroke-width="2"
+                      stroke-linecap="round"
+                      stroke-linejoin="round"
+                    >
+                      <polyline points="4 17 10 11 4 5"></polyline>
+                      <line x1="12" y1="19" x2="20" y2="19"></line>
+                    </svg>
+                  </template>
+                </div>
+                <div class="client-download-card__content">
+                  <h4>{{ releaseTargetLabel(release) }}</h4>
+                  <div class="meta-inline">
+                    <span class="version-tag">v{{ release.version }}</span>
+                    <span class="dot-separator">•</span>
+                    <span>{{ releaseSize(release.file_size_bytes) }}</span>
+                    <span class="dot-separator">•</span>
+                    <span>{{ releaseDate(release) }}</span>
+                  </div>
+                </div>
+              </div>
+
+              <div class="client-download-card__file">
+                <span class="file-icon">
+                  <svg
+                    viewBox="0 0 24 24"
+                    width="12"
+                    height="12"
+                    fill="none"
+                    stroke="currentColor"
+                    stroke-width="2"
+                  >
+                    <path d="M14 2H6a2 2 0 0 0-2 2v16a2 2 0 0 0 2 2h12a2 2 0 0 0 2-2V8z"></path>
+                    <polyline points="14 2 14 8 20 8"></polyline>
+                  </svg>
+                </span>
+                <span class="file-name" :title="release.file_name || '安装包'">
+                  {{ release.file_name || '安装包' }}
+                </span>
+              </div>
+
+              <div class="client-download-card__actions">
+                <a-button
+                  type="primary"
+                  class="btn-download"
+                  :loading="downloadingReleaseKey === releaseDownloadKey(release)"
+                  :disabled="Boolean(downloadingReleaseKey)"
+                  @click="downloadRelease(release)"
+                >
+                  <template #icon><DownloadOutlined /></template>
+                  获取客户端
+                </a-button>
+              </div>
+            </article>
+          </div>
+        </a-spin>
+      </section>
+
+      <!-- Bound accounts grid section -->
+      <section class="panel media-list-panel">
+        <div class="media-list-header-row">
+          <div class="media-list-title-box">
+            <h3 class="panel-title">已绑定媒体账号</h3>
+            <p class="panel-desc">管理各媒体账号的授权效期、排队就绪状态和客户端物理节点映射。</p>
+          </div>
+
+          <div class="media-list-toolbar">
+            <a-input
+              v-model:value="searchQuery"
+              placeholder="搜索账号昵称、UID、发布渠道..."
+              class="media-search"
+              allow-clear
+            >
+              <template #prefix>
+                <SearchOutlined style="color: #a0aec0" />
+              </template>
+            </a-input>
+
+            <a-select v-model:value="selectedHealth" class="media-select" style="width: 150px">
+              <a-select-option value="all">全部状态</a-select-option>
+              <a-select-option value="live">授权正常</a-select-option>
+              <a-select-option value="captcha">待处理</a-select-option>
+              <a-select-option value="risk">风险观察</a-select-option>
+              <a-select-option value="expired">授权异常</a-select-option>
+            </a-select>
+          </div>
+        </div>
+
+        <a-spin :spinning="loading">
+          <a-empty
+            v-if="!filteredAccounts.length"
+            class="premium-empty"
+            description="没有符合过滤条件的媒体账号，请确保桌面端客户端在线并已绑定账号。"
+          />
+
+          <section v-else class="media-grid">
+            <article v-for="account in filteredAccounts" :key="account.id" class="media-card">
+              <!-- Top brand line accent using accent color -->
+              <div
+                class="media-card__accent-bar"
+                :style="{ background: account.platformAccent }"
+              ></div>
+
+              <div class="media-card__head">
+                <div class="media-card__identity">
+                  <span
+                    class="media-card__avatar"
+                    :style="{ border: `2px solid ${account.platformAccent}` }"
+                  >
+                    <img
+                      v-if="account.avatarUrl"
+                      :src="account.avatarUrl"
+                      :alt="account.displayName"
+                      referrerpolicy="no-referrer"
+                    />
+                    <span
+                      v-else
+                      class="avatar-initial"
+                      :style="{ background: account.platformAccent }"
+                    >
+                      {{ accountInitial(account) }}
+                    </span>
+                  </span>
+
+                  <div class="media-card__identity-copy">
+                    <h3 :title="account.displayName">
+                      {{ account.displayName }}
+                      <span class="platform-logo-container">
+                        <img
+                          v-if="account.platformLogoUrl"
+                          :src="account.platformLogoUrl"
+                          :alt="account.platformLabel"
+                          class="media-card__inline-platform-icon"
+                        />
+                        <span
+                          v-else
+                          class="media-card__inline-platform-text"
+                          :style="{
+                            color: account.platformAccent,
+                            background: `${account.platformAccent}15`,
+                          }"
+                        >
+                          {{ account.platformShortName }}
+                        </span>
+                      </span>
+                    </h3>
+                    <p>
+                      <span class="media-card__platform-name">{{ account.platformLabel }}</span>
+                      <span class="media-card__uid-divider">•</span>
+                      <span class="media-card__uid" :title="account.platformUid">
+                        ID: {{ account.platformUid }}
+                      </span>
+                    </p>
+                  </div>
+                </div>
+              </div>
+
+              <div class="media-card__tags">
+                <span class="badge-status" :class="`badge-status--${healthColor(account.health)}`">
+                  <span class="indicator-dot"></span>
+                  {{ healthLabel(account.health) }}
+                </span>
+
+                <span
+                  class="badge-status"
+                  :class="`badge-status--${publishStateColor(account.publishState)}`"
+                >
+                  <span class="indicator-dot"></span>
+                  {{ publishStateLabel(account.publishState) }}
+                </span>
+              </div>
+
+              <!-- Client mapping connection card -->
+              <div class="media-card__client-info">
+                <div class="client-info-inner">
+                  <span class="client-label">运行节点</span>
+                  <a-tooltip :title="clientStatusText(account)" placement="top">
+                    <span
+                      class="client-value"
+                      :class="`client-value--${clientStatusColor(account)}`"
+                    >
+                      {{ clientStatusText(account) }}
+                    </span>
+                  </a-tooltip>
+                </div>
+              </div>
+
+              <div class="media-card__meta-box">
+                <div class="meta-box-item">
+                  <span class="meta-label">安全校验</span>
+                  <span class="meta-value">
+                    {{ account.verifiedAt ? formatDateTime(account.verifiedAt) : '--' }}
+                  </span>
+                </div>
+                <div class="meta-box-item">
+                  <span class="meta-label">节点心跳</span>
+                  <span class="meta-value">
+                    {{ account.clientLastSeenAt ? formatDateTime(account.clientLastSeenAt) : '--' }}
+                  </span>
+                </div>
+              </div>
+
+              <!-- Foot note panel -->
+              <div
+                v-if="account.deleteRequestedAt || account.publishHint"
+                class="media-card__footer"
+              >
+                <div v-if="account.deleteRequestedAt" class="footer-alert footer-alert--warning">
+                  <svg viewBox="0 0 24 24" width="12" height="12" fill="currentColor">
+                    <path
+                      d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-6h2v6zm0-8h-2V7h2v2z"
+                    />
+                  </svg>
+                  <span>已申请解绑账号</span>
+                </div>
+                <div v-else-if="account.publishHint" class="footer-alert">
+                  <svg viewBox="0 0 24 24" width="12" height="12" fill="currentColor">
+                    <path
+                      d="M11 17h2v-6h-2v6zm1-15C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8zM11 9h2V7h-2v2z"
+                    />
+                  </svg>
+                  <span :title="account.publishHint">{{ account.publishHint }}</span>
+                </div>
+              </div>
+            </article>
+          </section>
+        </a-spin>
+      </section>
+    </template>
+
+    <a-modal
+      v-model:open="enterpriseSiteModalOpen"
+      title="新增企业站点"
+      :destroy-on-close="true"
+      ok-text="保存凭证"
+      cancel-text="取消"
+      :confirm-loading="createEnterpriseSiteMutation.isPending.value"
+      @ok="createEnterpriseSiteMutation.mutate()"
+    >
+      <div class="enterprise-site-form">
+        <label class="form-field">
+          <span>CMS 类型</span>
+          <a-select v-model:value="enterpriseSiteForm.cmsType" :options="cmsTypeOptions" />
+        </label>
+
+        <label class="form-field">
+          <span>站点名称</span>
+          <a-input v-model:value="enterpriseSiteForm.name" placeholder="例如：品牌官网" />
+        </label>
+
+        <label class="form-field">
+          <span>站点域名</span>
+          <a-input
+            v-model:value="enterpriseSiteForm.siteUrl"
+            placeholder="https://www.example.com"
+          />
+        </label>
+
+        <label class="form-field">
+          <span>AppID</span>
+          <a-input v-model:value="enterpriseSiteForm.appid" placeholder="PBootCMS 后台 api_appid" />
+        </label>
+
+        <label class="form-field">
+          <span>Secret</span>
+          <a-input-password
+            v-model:value="enterpriseSiteForm.secret"
+            placeholder="PBootCMS 后台 api_secret"
+          />
+        </label>
+
+        <div class="enterprise-form-grid">
+          <label class="form-field">
+            <span>默认语言</span>
+            <a-input v-model:value="enterpriseSiteForm.defaultAcode" placeholder="cn" />
+          </label>
+          <label class="form-field">
+            <span>模型编码</span>
+            <a-input v-model:value="enterpriseSiteForm.defaultMcode" placeholder="2" />
+          </label>
+          <label class="form-field">
+            <span>默认栏目</span>
+            <a-input v-model:value="enterpriseSiteForm.defaultScode" placeholder="可选" />
+          </label>
         </div>
       </div>
-
-      <a-spin :spinning="loading">
-        <a-empty
-          v-if="!filteredAccounts.length"
-          class="premium-empty"
-          description="没有符合过滤条件的媒体账号，请确保桌面端客户端在线并已绑定账号。"
-        />
-
-        <section v-else class="media-grid">
-          <article v-for="account in filteredAccounts" :key="account.id" class="media-card">
-            <!-- Top brand line accent using accent color -->
-            <div class="media-card__accent-bar" :style="{ background: account.platformAccent }"></div>
-            
-            <div class="media-card__head">
-              <div class="media-card__identity">
-                <span class="media-card__avatar" :style="{ border: `2px solid ${account.platformAccent}` }">
-                  <img
-                    v-if="account.avatarUrl"
-                    :src="account.avatarUrl"
-                    :alt="account.displayName"
-                    referrerpolicy="no-referrer"
-                  />
-                  <span v-else class="avatar-initial" :style="{ background: account.platformAccent }">
-                    {{ accountInitial(account) }}
-                  </span>
-                </span>
-
-                <div class="media-card__identity-copy">
-                  <h3 :title="account.displayName">
-                    {{ account.displayName }}
-                    <span class="platform-logo-container">
-                      <img
-                        v-if="account.platformLogoUrl"
-                        :src="account.platformLogoUrl"
-                        :alt="account.platformLabel"
-                        class="media-card__inline-platform-icon"
-                      />
-                      <span
-                        v-else
-                        class="media-card__inline-platform-text"
-                        :style="{ color: account.platformAccent, background: `${account.platformAccent}15` }"
-                      >
-                        {{ account.platformShortName }}
-                      </span>
-                    </span>
-                  </h3>
-                  <p>
-                    <span class="media-card__platform-name">{{ account.platformLabel }}</span>
-                    <span class="media-card__uid-divider">•</span>
-                    <span class="media-card__uid" :title="account.platformUid">ID: {{ account.platformUid }}</span>
-                  </p>
-                </div>
-              </div>
-            </div>
-
-            <div class="media-card__tags">
-              <span class="badge-status" :class="`badge-status--${healthColor(account.health)}`">
-                <span class="indicator-dot"></span>
-                {{ healthLabel(account.health) }}
-              </span>
-              
-              <span class="badge-status" :class="`badge-status--${publishStateColor(account.publishState)}`">
-                <span class="indicator-dot"></span>
-                {{ publishStateLabel(account.publishState) }}
-              </span>
-            </div>
-
-            <!-- Client mapping connection card -->
-            <div class="media-card__client-info">
-              <div class="client-info-inner">
-                <span class="client-label">运行节点</span>
-                <a-tooltip :title="clientStatusText(account)" placement="top">
-                  <span class="client-value" :class="`client-value--${clientStatusColor(account)}`">
-                    {{ clientStatusText(account) }}
-                  </span>
-                </a-tooltip>
-              </div>
-            </div>
-
-            <div class="media-card__meta-box">
-              <div class="meta-box-item">
-                <span class="meta-label">安全校验</span>
-                <span class="meta-value">
-                  {{ account.verifiedAt ? formatDateTime(account.verifiedAt) : '--' }}
-                </span>
-              </div>
-              <div class="meta-box-item">
-                <span class="meta-label">节点心跳</span>
-                <span class="meta-value">
-                  {{ account.clientLastSeenAt ? formatDateTime(account.clientLastSeenAt) : '--' }}
-                </span>
-              </div>
-            </div>
-
-            <!-- Foot note panel -->
-            <div v-if="account.deleteRequestedAt || account.publishHint" class="media-card__footer">
-              <div v-if="account.deleteRequestedAt" class="footer-alert footer-alert--warning">
-                <svg viewBox="0 0 24 24" width="12" height="12" fill="currentColor">
-                  <path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm1 15h-2v-6h2v6zm0-8h-2V7h2v2z"/>
-                </svg>
-                <span>已申请解绑账号</span>
-              </div>
-              <div v-else-if="account.publishHint" class="footer-alert">
-                <svg viewBox="0 0 24 24" width="12" height="12" fill="currentColor">
-                  <path d="M11 17h2v-6h-2v6zm1-15C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 18c-4.41 0-8-3.59-8-8s3.59-8 8-8 8 3.59 8 8-3.59 8-8 8zM11 9h2V7h-2v2z"/>
-                </svg>
-                <span :title="account.publishHint">{{ account.publishHint }}</span>
-              </div>
-            </div>
-          </article>
-        </section>
-      </a-spin>
-    </section>
+    </a-modal>
   </div>
 </template>
 
@@ -763,59 +1273,12 @@ function releaseSize(value?: number | null): string {
 /* Premium Dark Banner Section */
 .media-view__top-card {
   position: relative;
-  background: linear-gradient(135deg, #ffffff 0%, #f8fafc 100%);
+  background: #ffffff;
   border: 1px solid #e2e8f0;
-  border-radius: 16px;
+  border-radius: 8px;
   overflow: hidden;
   padding: 0;
-  box-shadow: 0 10px 30px rgba(148, 163, 184, 0.06);
-}
-
-/* Fuzzy Floating Gradient Orbs */
-.banner-gradient-orbs {
-  position: absolute;
-  top: 0;
-  left: 0;
-  width: 100%;
-  height: 100%;
-  overflow: hidden;
-  pointer-events: none;
-  z-index: 1;
-}
-
-.orb {
-  position: absolute;
-  border-radius: 50%;
-  filter: blur(80px);
-  opacity: 0.6;
-}
-
-.orb-1 {
-  top: -40px;
-  right: 15%;
-  width: 250px;
-  height: 250px;
-  background: radial-gradient(circle, #e0e7ff 0%, transparent 80%);
-  animation: float-slow-1 12s infinite alternate ease-in-out;
-}
-
-.orb-2 {
-  bottom: -60px;
-  left: 10%;
-  width: 300px;
-  height: 300px;
-  background: radial-gradient(circle, #f5f3ff 0%, transparent 80%);
-  animation: float-slow-2 15s infinite alternate ease-in-out;
-}
-
-@keyframes float-slow-1 {
-  0% { transform: translate(0, 0) scale(1); }
-  100% { transform: translate(40px, 20px) scale(1.1); }
-}
-
-@keyframes float-slow-2 {
-  0% { transform: translate(0, 0) scale(1.1); }
-  100% { transform: translate(-30px, -20px) scale(0.9); }
+  box-shadow: 0 8px 24px rgba(15, 23, 42, 0.04);
 }
 
 .media-view__header {
@@ -840,11 +1303,9 @@ function releaseSize(value?: number | null): string {
   display: inline-flex;
   align-items: center;
   gap: 10px;
-  letter-spacing: -0.02em;
+  letter-spacing: 0;
 }
 
-
-
 .media-view__header-title p {
   margin: 8px 0 0;
   font-size: 13.5px;
@@ -874,11 +1335,84 @@ function releaseSize(value?: number | null): string {
 :deep(.btn-refresh.ant-btn:hover) {
   background: #f8fafc;
   border-color: #cbd5e1;
-  color: #4f46e5;
+  color: #1d4ed8;
   transform: translateY(-1px);
   box-shadow: 0 4px 12px rgba(148, 163, 184, 0.08);
 }
 
+.media-scope-tabs {
+  position: relative;
+  z-index: 2;
+  display: inline-flex;
+  align-items: center;
+  gap: 2px;
+  background: #f1f5f9;
+  padding: 4px;
+  border-radius: 10px;
+  margin: 0 32px 24px;
+  border: 1px solid rgba(148, 163, 184, 0.08);
+  box-shadow: inset 0 1px 2px rgba(15, 23, 42, 0.03);
+}
+
+.media-scope-tab {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  gap: 8px;
+  height: 38px;
+  padding: 0 18px;
+  border: none;
+  border-radius: 7px;
+  background: transparent;
+  color: #64748b;
+  font-size: 13.5px;
+  font-weight: 550;
+  cursor: pointer;
+  transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
+  white-space: nowrap;
+}
+
+.media-scope-tab .tab-icon {
+  font-size: 14px;
+  color: #94a3b8;
+  transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.media-scope-tab small {
+  color: #94a3b8;
+  font-size: 11px;
+  font-weight: 500;
+  background: rgba(148, 163, 184, 0.06);
+  padding: 2px 6px;
+  border-radius: 4px;
+  transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.media-scope-tab:hover {
+  color: #334155;
+}
+
+.media-scope-tab:hover .tab-icon {
+  color: #64748b;
+}
+
+.media-scope-tab--active {
+  background: #ffffff;
+  color: #0f172a;
+  font-weight: 600;
+  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.05), 0 4px 12px rgba(15, 23, 42, 0.04);
+}
+
+.media-scope-tab--active .tab-icon {
+  color: #1677ff;
+}
+
+.media-scope-tab--active small {
+  color: #1677ff;
+  background: #e6f4ff;
+  font-weight: 500;
+}
+
 /* Metrics strip styling */
 .overview-strip {
   position: relative;
@@ -910,7 +1444,7 @@ function releaseSize(value?: number | null): string {
 .chip-icon-box {
   width: 42px;
   height: 42px;
-  border-radius: 10px;
+  border-radius: 8px;
   display: flex;
   align-items: center;
   justify-content: center;
@@ -919,9 +1453,9 @@ function releaseSize(value?: number | null): string {
 
 /* Metric colored boxes styling */
 .total-bg {
-  background: #e0e7ff;
-  color: #4f46e5;
-  border: 1px solid #c7d2fe;
+  background: #dbeafe;
+  color: #1d4ed8;
+  border: 1px solid #bfdbfe;
 }
 
 .live-bg {
@@ -951,7 +1485,7 @@ function releaseSize(value?: number | null): string {
   color: #64748b;
   font-size: 12px;
   font-weight: 500;
-  letter-spacing: 0.02em;
+  letter-spacing: 0;
 }
 
 .chip-copy strong {
@@ -960,18 +1494,20 @@ function releaseSize(value?: number | null): string {
   font-weight: 700;
   margin-top: 4px;
   line-height: 1;
-  font-family: 'Inter', system-ui, sans-serif;
-  letter-spacing: -0.02em;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  letter-spacing: 0;
 }
 
 /* Panel Layout Styling */
 .panel {
   background: #ffffff;
-  border-radius: 16px;
+  border-radius: 8px;
   padding: 32px;
   border: 1px solid #e2e8f0;
   box-shadow: 0 4px 20px rgba(148, 163, 184, 0.05);
-  transition: box-shadow 0.3s ease, border-color 0.3s ease;
+  transition:
+    box-shadow 0.3s ease,
+    border-color 0.3s ease;
 }
 
 .panel:hover {
@@ -983,7 +1519,7 @@ function releaseSize(value?: number | null): string {
   font-size: 18px;
   font-weight: 700;
   color: #0f172a;
-  letter-spacing: -0.01em;
+  letter-spacing: 0;
 }
 
 .panel-desc {
@@ -1013,15 +1549,15 @@ function releaseSize(value?: number | null): string {
 }
 
 .badge-pulsing-stable {
-  background: rgba(99, 102, 241, 0.1);
-  color: #4f46e5;
-  border: 1px solid rgba(99, 102, 241, 0.2);
+  background: rgba(37, 99, 235, 0.1);
+  color: #1d4ed8;
+  border: 1px solid rgba(37, 99, 235, 0.2);
   font-size: 11px;
   font-weight: 600;
   padding: 3px 10px;
-  border-radius: 99px;
+  border-radius: 8px;
   text-transform: uppercase;
-  letter-spacing: 0.05em;
+  letter-spacing: 0;
   position: relative;
   overflow: hidden;
 }
@@ -1033,13 +1569,17 @@ function releaseSize(value?: number | null): string {
   left: -100%;
   width: 100%;
   height: 100%;
-  background: linear-gradient(90deg, transparent, rgba(99, 102, 241, 0.2), transparent);
+  background: linear-gradient(90deg, transparent, rgba(37, 99, 235, 0.18), transparent);
   animation: shine-sweep 3s infinite linear;
 }
 
 @keyframes shine-sweep {
-  0% { left: -100%; }
-  100% { left: 100%; }
+  0% {
+    left: -100%;
+  }
+  100% {
+    left: 100%;
+  }
 }
 
 .client-download-grid {
@@ -1056,7 +1596,7 @@ function releaseSize(value?: number | null): string {
   min-height: 200px;
   padding: 24px;
   border: 1px solid #e2e8f0;
-  border-radius: 12px;
+  border-radius: 8px;
   background: linear-gradient(180deg, #ffffff 0%, #f8fafc 100%);
   transition: all 0.3s cubic-bezier(0.4, 0, 0.2, 1);
   position: relative;
@@ -1078,7 +1618,7 @@ function releaseSize(value?: number | null): string {
 .client-download-card__logo {
   width: 48px;
   height: 48px;
-  border-radius: 12px;
+  border-radius: 8px;
   display: flex;
   align-items: center;
   justify-content: center;
@@ -1098,7 +1638,8 @@ function releaseSize(value?: number | null): string {
   box-shadow: 0 4px 12px rgba(0, 120, 212, 0.2);
 }
 
-.logo-default, .logo-linux {
+.logo-default,
+.logo-linux {
   background: #1e293b;
   color: #38bdf8;
   box-shadow: 0 4px 12px rgba(30, 41, 59, 0.2);
@@ -1181,21 +1722,21 @@ function releaseSize(value?: number | null): string {
 
 /* Download Button styling */
 :deep(.btn-download.ant-btn-primary) {
-  background: #4f46e5;
-  border-color: #4f46e5;
+  background: #1d4ed8;
+  border-color: #1d4ed8;
   border-radius: 8px;
   height: 38px;
   width: 100%;
   font-weight: 600;
   font-size: 13px;
-  box-shadow: 0 4px 12px rgba(79, 70, 229, 0.2);
+  box-shadow: 0 4px 12px rgba(37, 99, 235, 0.2);
   transition: all 0.25s ease;
 }
 
 :deep(.btn-download.ant-btn-primary:hover:not(:disabled)) {
-  background: #4338ca;
-  border-color: #4338ca;
-  box-shadow: 0 6px 18px rgba(79, 70, 229, 0.3);
+  background: #1e40af;
+  border-color: #1e40af;
+  box-shadow: 0 6px 18px rgba(37, 99, 235, 0.26);
   transform: translateY(-1px);
 }
 
@@ -1206,6 +1747,582 @@ function releaseSize(value?: number | null): string {
   box-shadow: none;
 }
 
+.enterprise-panel {
+  display: flex;
+  flex-direction: column;
+  gap: 26px;
+}
+
+.enterprise-panel__main {
+  display: grid;
+  grid-template-columns: minmax(0, 1fr) auto;
+  gap: 24px;
+  align-items: start;
+}
+
+.section-kicker {
+  display: inline-flex;
+  align-items: center;
+  height: 22px;
+  padding: 0 8px;
+  border-radius: 6px;
+  background: #eef2ff;
+  color: #1e3a8a;
+  font-size: 11px;
+  font-weight: 700;
+  letter-spacing: 0;
+  text-transform: uppercase;
+}
+
+.enterprise-panel__copy h3 {
+  margin: 12px 0 0;
+  color: #0f172a;
+  font-size: 22px;
+  font-weight: 760;
+  line-height: 1.25;
+}
+
+.enterprise-panel__copy p {
+  max-width: 660px;
+  margin: 8px 0 0;
+  color: #475569;
+  font-size: 13.5px;
+  line-height: 1.7;
+}
+
+.enterprise-actions {
+  display: flex;
+  gap: 10px;
+  flex-wrap: wrap;
+  justify-content: flex-end;
+}
+
+:deep(.btn-enterprise-primary.ant-btn-primary) {
+  height: 40px;
+  border-radius: 8px;
+  background: #1d4ed8;
+  border-color: #1d4ed8;
+  font-weight: 650;
+  box-shadow: none;
+}
+
+:deep(.btn-enterprise-primary.ant-btn-primary:hover) {
+  background: #1e40af;
+  border-color: #1e40af;
+  transform: translateY(-1px);
+}
+
+:deep(.btn-enterprise-secondary.ant-btn) {
+  height: 40px;
+  border-radius: 8px;
+  border-color: #cbd5e1;
+  color: #334155;
+  font-weight: 650;
+}
+
+.enterprise-flow {
+  display: grid;
+  grid-template-columns: repeat(4, minmax(0, 1fr));
+  border: 1px solid #e2e8f0;
+  border-radius: 8px;
+  overflow: hidden;
+}
+
+.enterprise-step {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr);
+  gap: 14px;
+  min-height: 108px;
+  padding: 18px;
+  background: #ffffff;
+  border-right: 1px solid #e2e8f0;
+}
+
+.enterprise-step--action {
+  cursor: pointer;
+  transition:
+    background 0.2s ease,
+    box-shadow 0.2s ease;
+}
+
+.enterprise-step--action:hover {
+  background: #eff6ff;
+  box-shadow: inset 0 0 0 1px #93c5fd;
+}
+
+.enterprise-step:last-child {
+  border-right: 0;
+}
+
+.enterprise-step__index {
+  color: #1d4ed8;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 12px;
+  font-weight: 800;
+}
+
+.enterprise-step h4 {
+  margin: 0;
+  color: #0f172a;
+  font-size: 14px;
+  font-weight: 720;
+}
+
+.enterprise-step p {
+  margin: 6px 0 0;
+  color: #64748b;
+  font-size: 12.5px;
+  line-height: 1.55;
+}
+
+.enterprise-grid {
+  display: grid;
+  grid-template-columns: minmax(0, 1.15fr) minmax(360px, 0.85fr);
+  gap: 24px;
+}
+
+.connector-panel,
+.adapter-panel {
+  display: flex;
+  flex-direction: column;
+  gap: 22px;
+}
+
+.panel-head-compact {
+  display: flex;
+  align-items: flex-start;
+  justify-content: space-between;
+  gap: 16px;
+}
+
+.connector-empty {
+  display: flex;
+  align-items: center;
+  gap: 16px;
+  padding: 22px;
+  border: 1px dashed #cbd5e1;
+  border-radius: 8px;
+  background: #f8fafc;
+}
+
+.connector-empty__icon {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 44px;
+  height: 44px;
+  border-radius: 8px;
+  background: #dbeafe;
+  color: #1d4ed8;
+  font-size: 20px;
+  flex-shrink: 0;
+}
+
+.connector-empty h4 {
+  margin: 0;
+  color: #0f172a;
+  font-size: 15px;
+  font-weight: 720;
+}
+
+.connector-empty p {
+  margin: 5px 0 0;
+  color: #64748b;
+  font-size: 13px;
+  line-height: 1.55;
+}
+
+.site-connection-list {
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+}
+
+.site-connection-card {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto;
+  align-items: start;
+  gap: 16px;
+  padding: 20px;
+  border: 1px solid #e2e8f0;
+  border-radius: 12px;
+  background: #ffffff;
+  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.02);
+  transition: all 0.25s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.site-connection-card:hover {
+  border-color: #cbd5e1;
+  box-shadow: 0 4px 12px rgba(15, 23, 42, 0.04), 0 1px 2px rgba(15, 23, 42, 0.02);
+  transform: translateY(-1px);
+}
+
+.site-connection-card__icon {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 44px;
+  height: 44px;
+  border-radius: 10px;
+  background: #eff6ff;
+  color: #1677ff;
+  font-size: 20px;
+  border: 1px solid #dbeafe;
+}
+
+.site-connection-card__body {
+  min-width: 0;
+}
+
+.site-connection-card__title-row {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 8px;
+  min-width: 0;
+}
+
+.site-connection-card h4 {
+  margin: 0;
+  color: #0f172a;
+  font-size: 15px;
+  font-weight: 600;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.site-connection-card__url-row {
+  margin: 6px 0 0;
+}
+
+.site-connection-card__url-row a {
+  color: #64748b;
+  font-size: 12.5px;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  transition: color 0.2s ease;
+}
+
+.site-connection-card__url-row a:hover {
+  color: #1677ff;
+}
+
+.site-connection-card__url-row .link-icon {
+  font-size: 12px;
+  color: #94a3b8;
+  transition: color 0.2s ease;
+}
+
+.site-connection-card__url-row a:hover .link-icon {
+  color: #1677ff;
+}
+
+.site-connection-card__meta {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 8px;
+  margin-top: 10px;
+}
+
+.site-connection-card__meta span {
+  display: inline-flex;
+  align-items: center;
+  background: #f8fafc;
+  border: 1px solid #f1f5f9;
+  padding: 2px 8px;
+  border-radius: 6px;
+  color: #64748b;
+  font-size: 11.5px;
+  font-weight: 500;
+}
+
+.site-connection-card__record {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 12px;
+  margin-top: 14px;
+  padding: 10px 14px;
+  background: #f8fafc;
+  border-radius: 8px;
+  border: 1px solid #f1f5f9;
+}
+
+.record-status-text {
+  display: inline-flex;
+  align-items: center;
+  gap: 8px;
+  color: #475569;
+  font-size: 12.5px;
+  font-weight: 500;
+  min-width: 0;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
+}
+
+.record-status-text::before {
+  content: '';
+  display: inline-block;
+  width: 6px;
+  height: 6px;
+  border-radius: 50%;
+  background: #94a3b8;
+  flex-shrink: 0;
+  transition: all 0.2s ease;
+}
+
+.record-status-text.status-success::before {
+  background: #10b981;
+  box-shadow: 0 0 0 2px rgba(16, 185, 129, 0.25);
+}
+
+.record-status-text.status-publishing::before {
+  background: #3b82f6;
+  box-shadow: 0 0 0 2px rgba(59, 130, 246, 0.25);
+  animation: pulse-publishing 1.5s infinite ease-in-out;
+}
+
+.record-status-text.status-error::before,
+.record-status-text.status-failure::before {
+  background: #ef4444;
+  box-shadow: 0 0 0 2px rgba(239, 68, 68, 0.25);
+}
+
+@keyframes pulse-publishing {
+  0% {
+    transform: scale(0.9);
+    opacity: 0.6;
+  }
+  50% {
+    transform: scale(1.1);
+    opacity: 1;
+  }
+  100% {
+    transform: scale(0.9);
+    opacity: 0.6;
+  }
+}
+
+.view-article-link {
+  color: #1677ff;
+  font-weight: 600;
+  font-size: 12.5px;
+  display: inline-flex;
+  align-items: center;
+  gap: 4px;
+  transition: all 0.2s ease;
+}
+
+.view-article-link:hover {
+  color: #0958d9;
+}
+
+.view-article-link .arrow-icon {
+  font-size: 10px;
+  transition: transform 0.2s ease;
+}
+
+.view-article-link:hover .arrow-icon {
+  transform: translateX(2px);
+}
+
+.site-connection-card__error {
+  margin-top: 10px;
+  padding: 8px 10px;
+  border: 1px solid #fecdd3;
+  border-radius: 8px;
+  background: #fff1f2;
+  color: #be123c;
+  font-size: 12px;
+  line-height: 1.5;
+}
+
+.site-connection-card__actions {
+  display: flex;
+  flex-direction: column;
+  gap: 8px;
+  min-width: 96px;
+}
+
+.site-connection-card__actions :deep(.ant-btn) {
+  border-radius: 6px;
+  font-weight: 550;
+  font-size: 12px;
+  height: 28px;
+  transition: all 0.2s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.site-connection-card__actions :deep(.ant-btn-default) {
+  border-color: #cbd5e1;
+  color: #475569;
+  background: #ffffff;
+}
+
+.site-connection-card__actions :deep(.ant-btn-default:hover) {
+  border-color: #1677ff;
+  color: #1677ff;
+  background: #f0f7ff;
+}
+
+.connector-sample {
+  background: #f8fafc;
+  border: 1px solid #e2e8f0;
+  border-left: 3px solid #475569;
+  border-radius: 8px;
+  padding: 16px;
+  display: flex;
+  flex-direction: column;
+  gap: 12px;
+  margin-top: 16px;
+}
+
+.connector-sample__line {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 16px;
+  padding: 0;
+  border-bottom: none;
+}
+
+.connector-sample__line span {
+  color: #475569;
+  font-size: 12px;
+  font-weight: 600;
+  background: #e2e8f0;
+  padding: 2px 8px;
+  border-radius: 4px;
+  flex-shrink: 0;
+}
+
+.connector-sample__line strong {
+  color: #0f172a;
+  font-family: ui-monospace, SFMono-Regular, Menlo, Monaco, Consolas, monospace;
+  font-size: 12px;
+  font-weight: 600;
+  overflow-wrap: anywhere;
+  text-align: right;
+  background: rgba(15, 23, 42, 0.03);
+  padding: 3px 8px;
+  border-radius: 5px;
+  border: 1px solid rgba(15, 23, 42, 0.05);
+}
+
+.adapter-list {
+  display: flex;
+  flex-direction: column;
+  gap: 10px;
+}
+
+.adapter-row {
+  display: grid;
+  grid-template-columns: auto minmax(0, 1fr) auto;
+  gap: 14px;
+  align-items: center;
+  padding: 14px 16px;
+  border: 1px solid #e2e8f0;
+  border-radius: 10px;
+  background: #ffffff;
+  transition: all 0.25s cubic-bezier(0.4, 0, 0.2, 1);
+}
+
+.adapter-row:hover {
+  border-color: #cbd5e1;
+  box-shadow: 0 4px 12px rgba(15, 23, 42, 0.03);
+  transform: translateY(-1px);
+}
+
+.adapter-row__mark {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  width: 36px;
+  height: 36px;
+  border-radius: 8px;
+  transition: all 0.2s ease;
+}
+
+.adapter-row--ready .adapter-row__mark {
+  background: #f0fdf4;
+  color: #16a34a;
+  border: 1px solid #dcfce7;
+}
+
+.adapter-row--planned {
+  background: #fafafb;
+  border-style: dashed;
+}
+
+.adapter-row--planned .adapter-row__mark {
+  background: #f1f5f9;
+  color: #64748b;
+  border: 1px solid #e2e8f0;
+}
+
+.adapter-row__body {
+  display: flex;
+  flex-direction: column;
+  gap: 3px;
+  min-width: 0;
+}
+
+.adapter-row__body strong {
+  color: #0f172a;
+  font-size: 14px;
+  font-weight: 600;
+}
+
+.adapter-row__body span {
+  color: #64748b;
+  font-size: 12px;
+  line-height: 1.4;
+}
+
+.enterprise-site-form {
+  display: flex;
+  flex-direction: column;
+  gap: 14px;
+  padding-top: 4px;
+}
+
+.form-field {
+  display: flex;
+  flex-direction: column;
+  gap: 7px;
+}
+
+.form-field span {
+  color: #334155;
+  font-size: 13px;
+  font-weight: 650;
+}
+
+.enterprise-form-grid {
+  display: grid;
+  grid-template-columns: repeat(3, minmax(0, 1fr));
+  gap: 12px;
+}
+
+.enterprise-publish-hint {
+  padding: 10px 12px;
+  border: 1px solid #bfdbfe;
+  border-radius: 8px;
+  background: #eff6ff;
+  color: #1e40af;
+  font-size: 12.5px;
+  line-height: 1.5;
+}
+
+.enterprise-publish-hint--warning {
+  border-color: #fde68a;
+  background: #fffbeb;
+  color: #92400e;
+}
+
 /* Spinners, alerts, empty state styling */
 .premium-alert {
   border-radius: 12px;
@@ -1216,7 +2333,7 @@ function releaseSize(value?: number | null): string {
 .premium-empty {
   padding: 40px 0;
   border: 1px dashed #e2e8f0;
-  border-radius: 12px;
+  border-radius: 8px;
 }
 
 /* Media list panel & search toolbar */
@@ -1262,8 +2379,8 @@ function releaseSize(value?: number | null): string {
 }
 
 :deep(.media-search.ant-input-affix-wrapper-focused) {
-  border-color: #4f46e5;
-  box-shadow: 0 0 0 3px rgba(79, 70, 229, 0.15);
+  border-color: #1d4ed8;
+  box-shadow: 0 0 0 3px rgba(37, 99, 235, 0.14);
 }
 
 :deep(.media-select.ant-select .ant-select-selector) {
@@ -1279,8 +2396,8 @@ function releaseSize(value?: number | null): string {
 }
 
 :deep(.media-select.ant-select-focused .ant-select-selector) {
-  border-color: #4f46e5 !important;
-  box-shadow: 0 0 0 3px rgba(79, 70, 229, 0.15) !important;
+  border-color: #1d4ed8 !important;
+  box-shadow: 0 0 0 3px rgba(37, 99, 235, 0.14) !important;
 }
 
 /* Media Card Grid */
@@ -1295,7 +2412,7 @@ function releaseSize(value?: number | null): string {
   position: relative;
   background: #ffffff;
   border: 1px solid #e2e8f0;
-  border-radius: 14px;
+  border-radius: 8px;
   padding: 24px;
   display: flex;
   flex-direction: column;
@@ -1402,7 +2519,7 @@ function releaseSize(value?: number | null): string {
   font-weight: 700;
   padding: 1px 5px;
   border-radius: 4px;
-  letter-spacing: 0.02em;
+  letter-spacing: 0;
 }
 
 .media-card__identity-copy p {
@@ -1450,7 +2567,7 @@ function releaseSize(value?: number | null): string {
   font-size: 11.5px;
   font-weight: 600;
   padding: 3px 10px;
-  border-radius: 99px;
+  border-radius: 8px;
   line-height: 1.4;
 }
 
@@ -1616,6 +2733,27 @@ function releaseSize(value?: number | null): string {
 
 /* Responsiveness adjustments */
 @media (max-width: 1024px) {
+  .enterprise-panel__main,
+  .enterprise-grid {
+    grid-template-columns: 1fr;
+  }
+
+  .enterprise-actions {
+    justify-content: flex-start;
+  }
+
+  .enterprise-flow {
+    grid-template-columns: repeat(2, minmax(0, 1fr));
+  }
+
+  .enterprise-step:nth-child(2) {
+    border-right: 0;
+  }
+
+  .enterprise-step:nth-child(-n + 2) {
+    border-bottom: 1px solid #e2e8f0;
+  }
+
   .overview-strip {
     grid-template-columns: repeat(2, 1fr);
   }
@@ -1628,7 +2766,7 @@ function releaseSize(value?: number | null): string {
     border-right: none;
   }
 
-  .overview-chip:nth-child(n+3) {
+  .overview-chip:nth-child(n + 3) {
     border-bottom: none;
   }
 }
@@ -1649,6 +2787,35 @@ function releaseSize(value?: number | null): string {
     width: 100%;
   }
 
+  .media-scope-tabs {
+    margin: 0 24px 20px;
+    display: flex;
+    padding: 4px;
+  }
+
+  .media-scope-tab {
+    flex: 1;
+    min-width: 0;
+    justify-content: center;
+  }
+
+  .site-connection-card {
+    grid-template-columns: auto minmax(0, 1fr);
+  }
+
+  .site-connection-card__actions {
+    grid-column: 1 / span 2;
+    flex-direction: row;
+    justify-content: flex-end;
+    width: 100%;
+    margin-top: 12px;
+    gap: 12px;
+  }
+
+  .site-connection-card__actions :deep(.ant-btn) {
+    flex: 1;
+  }
+
   .overview-chip {
     padding: 16px 20px;
   }
@@ -1676,6 +2843,39 @@ function releaseSize(value?: number | null): string {
   :deep(.media-select.ant-select) {
     width: 100% !important;
   }
+
+  .enterprise-flow {
+    grid-template-columns: 1fr;
+  }
+
+  .enterprise-step,
+  .enterprise-step:nth-child(2) {
+    border-right: 0;
+    border-bottom: 1px solid #e2e8f0;
+  }
+
+  .enterprise-step:last-child {
+    border-bottom: 0;
+  }
+
+  .connector-empty {
+    align-items: flex-start;
+  }
+
+  .connector-sample__line,
+  .adapter-row,
+  .site-connection-card {
+    grid-template-columns: 1fr;
+  }
+
+  .site-connection-card__actions {
+    flex-direction: row;
+    flex-wrap: wrap;
+  }
+
+  .enterprise-form-grid {
+    grid-template-columns: 1fr;
+  }
 }
 
 @media (max-width: 480px) {
@@ -1692,7 +2892,8 @@ function releaseSize(value?: number | null): string {
     border-bottom: none;
   }
 
-  .client-download-grid, .media-grid {
+  .client-download-grid,
+  .media-grid {
     grid-template-columns: 1fr;
   }
 }
diff --git a/docs/enterprise-site-publisher-v1.md b/docs/enterprise-site-publisher-v1.md
new file mode 100644
index 0000000..3c65aaf
--- /dev/null
+++ b/docs/enterprise-site-publisher-v1.md
@@ -0,0 +1,237 @@
+# 企业自建站点自动发文系统 v1
+
+## 定位
+
+企业自建站点不是 UGC 媒体账号，也不应该走桌面客户端登录态。它是客户自有 CMS 的站点连接，由 Geo SaaS 服务端通过 CMS 适配器直接调用发布接口。
+
+媒体管理建议分三类：
+
+```text
+UGC媒体平台      走桌面客户端账号授权和发布队列
+第三方新闻源      走资源/订单/投稿线索
+企业自建站点      走 CMS 连接、栏目同步、服务端发布
+```
+
+## 核心模型
+
+建议新增站点连接表：
+
+```text
+enterprise_site_connections
+```
+
+关键字段：
+
+```text
+id
+tenant_id
+name
+site_url
+cms_type              pbootcms / wordpress / dedecms / phpcms
+auth_type             native_api / application_password / plugin_token
+credential_ref        凭证密文或凭证引用
+status                draft / connected / error / disabled
+last_ping_at
+last_sync_at
+last_error
+created_at
+updated_at
+```
+
+栏目缓存表：
+
+```text
+enterprise_site_categories
+```
+
+关键字段：
+
+```text
+id
+tenant_id
+connection_id
+remote_id
+parent_remote_id
+name
+slug
+raw_payload
+synced_at
+```
+
+发布记录可复用现有发布记录体系，也可以增加 `target_type=enterprise_site` 与 `target_connection_id`。不要把企业站点伪装成 `platform_account`，否则后续 WordPress、PBootCMS 插件、DedeCMS 插件会和桌面端账号模型缠在一起。
+
+## 统一适配器协议
+
+所有 CMS 适配器都实现：
+
+```text
+ping(connection) -> SiteCapability
+categories(connection, options) -> Category[]
+publish(connection, article, options) -> PublishResult
+update(connection, remoteId, article, options) -> PublishResult
+status(connection, remoteId) -> RemoteContentStatus
+```
+
+返回结构：
+
+```text
+SiteCapability:
+  cms_type
+  plugin_version
+  site_url
+  site_name
+  api_auth
+
+Category:
+  id
+  parent_id
+  title
+  slug
+  raw
+
+PublishResult:
+  remote_id
+  url
+  status
+  raw
+
+RemoteContentStatus:
+  remote_id
+  title
+  status
+  url
+  updated_at
+```
+
+## PBootCMS v1
+
+集成方式：站点放置单文件插件。
+
+插件路径：
+
+```text
+integrations/pbootcms/apps/api/controller/GeoPublisherController.php
+```
+
+客户站点安装到：
+
+```text
+apps/api/controller/GeoPublisherController.php
+```
+
+接口：
+
+```text
+GET  /api/GeoPublisher/ping
+GET  /api/GeoPublisher/categories
+POST /api/GeoPublisher/publish
+POST /api/GeoPublisher/update
+GET  /api/GeoPublisher/status
+```
+
+鉴权使用 PBootCMS 原生 API 参数：
+
+```text
+appid
+timestamp
+signature = md5(md5(appid + api_secret + timestamp))
+```
+
+适配器保存：
+
+```text
+site_url
+appid
+api_secret
+default_acode
+default_mcode
+```
+
+## WordPress v1
+
+优先使用 WordPress REST API 和 Application Password：
+
+```text
+GET  /wp-json/
+GET  /wp-json/wp/v2/categories
+POST /wp-json/wp/v2/posts
+POST /wp-json/wp/v2/posts/{id}
+GET  /wp-json/wp/v2/posts/{id}
+```
+
+鉴权：
+
+```text
+Basic base64(username:application_password)
+```
+
+WordPress 不需要客户安装插件即可完成基础发文；如果后续要支持自定义字段、SEO 插件字段、图片本地化、内链策略，再提供 WordPress 插件增强。
+
+## DedeCMS / PHPCMS v1
+
+建议走与 PBootCMS 相同的单文件插件协议，不直接侵入后台登录。
+
+原因：
+
+```text
+老版本安全差异大
+后台路径常被改名
+字段模型定制多
+原生 API 能力不统一
+```
+
+插件统一暴露：
+
+```text
+ping / categories / publish / update / status
+```
+
+SaaS 侧只新增 `cms_type` 适配器，不改发布业务协议。
+
+## 发布链路
+
+```text
+文章生成完成
+选择发布目标：企业自建站点
+读取 connection + category mapping
+服务端调用 CmsPublisherAdapter.publish
+保存 remote_id/url/raw response
+同步状态和错误
+```
+
+失败重试策略：
+
+```text
+网络超时：可重试
+401/403：标记连接异常，要求重新绑定
+栏目不存在：停止重试，要求重新同步栏目
+CMS 返回字段错误：停止重试，记录原始响应
+```
+
+## 安全要求
+
+```text
+凭证不得明文回显给前端
+日志不得打印 api_secret/application_password/plugin_token
+发布接口只允许 HTTPS 站点进入生产发布
+支持手动禁用连接
+记录每次 ping/sync/publish 的错误摘要和时间
+```
+
+## 后台页面 v1
+
+媒体管理页新增 `企业自建站点` 标签。
+
+首版页面应提供：
+
+```text
+站点连接列表
+CMS 类型
+连通状态
+栏目同步时间
+最近发布结果
+安装插件入口
+新增连接入口
+```
+
+在后端 API 完成前，前端可以先展示结构化空态和接入流程，但路由/术语要按最终模型命名，避免后续返工。
diff --git a/integrations/pbootcms/Install.md b/integrations/pbootcms/Install.md
new file mode 100644
index 0000000..853ee92
--- /dev/null
+++ b/integrations/pbootcms/Install.md
@@ -0,0 +1,175 @@
+# PBootCMS GeoPublisher 安装说明
+
+## 1. 放置文件
+
+把本目录中的整个 `apps` 目录复制到客户 PBootCMS 网站根目录：
+
+```text
+{PBootCMS_ROOT}/apps
+```
+
+最终应存在：
+
+```text
+{PBootCMS_ROOT}/apps/api/controller/GeoPublisherController.php
+{PBootCMS_ROOT}/apps/api/controller/AiseoController.php
+```
+
+这个文件只依赖 PBootCMS 原生 `core\basic\Controller`、`core\basic\Model`、`ay_content`、`ay_content_sort`、`ay_model`，不需要改后台代码，也不需要安装额外数据库表。
+
+## 2. 开启 PBootCMS API
+
+登录 PBootCMS 后台：
+
+```text
+全局配置 -> 配置参数 -> API
+```
+
+开启：
+
+```text
+api_open = 1
+api_auth = 1
+api_appid = 自定义 AppID
+api_secret = 自定义密钥
+```
+
+Geo SaaS 绑定站点时填写：
+
+```text
+CMS 类型：PBootCMS
+网站域名：https://www.example.com
+AppID：后台 api_appid
+Secret：后台 api_secret
+```
+
+## 3. 签名规则
+
+每次请求都带：
+
+```text
+appid={api_appid}
+timestamp={当前 Unix 秒级时间戳}
+signature=md5(md5(appid + api_secret + timestamp))
+```
+
+示例：
+
+```php
+$signature = md5(md5($appid . $secret . $timestamp));
+```
+
+插件默认允许 300 秒时间差，便于 SaaS 服务器和客户服务器存在轻微时钟偏差。
+
+## 4. 连通性测试
+
+推荐入口：
+
+```bash
+curl "https://www.example.com/api.php?p=/GeoPublisher/ping&appid=APPID&timestamp=TIMESTAMP&signature=SIGNATURE"
+```
+
+如果站点 rewrite 已启用，也支持：
+
+```bash
+curl "https://www.example.com/api/GeoPublisher/ping?appid=APPID&timestamp=TIMESTAMP&signature=SIGNATURE"
+```
+
+成功返回：
+
+```json
+{
+  "code": 1,
+  "data": {
+    "cms_type": "pbootcms",
+    "plugin_version": "1.0.0",
+    "site_url": "https://www.example.com"
+  },
+  "msg": ""
+}
+```
+
+## 5. 栏目同步
+
+默认同步 PBootCMS 文章模型 `mcode=2` 的可用栏目：
+
+```bash
+curl "https://www.example.com/api.php?p=/GeoPublisher/categories&appid=APPID&timestamp=TIMESTAMP&signature=SIGNATURE&mcode=2"
+```
+
+兼容旧插件参数：
+
+```text
+model_hash=2
+```
+
+## 6. 发布文章
+
+推荐使用 `POST JSON`：
+
+```bash
+curl -X POST "https://www.example.com/api/GeoPublisher/publish?appid=APPID&timestamp=TIMESTAMP&signature=SIGNATURE" \
+  -H "Content-Type: application/json" \
+  -d '{
+    "scode": "5",
+    "title": "企业新闻标题",
+    "content": "<p>正文内容</p>",
+    "keywords": "关键词1,关键词2",
+    "description": "摘要",
+    "author": "Geo SaaS",
+    "source": "企业官网",
+    "status": 1
+  }'
+```
+
+核心字段：
+
+```text
+scode/category_id  PBootCMS 栏目编码，必填
+title              标题，必填
+content            HTML 正文，必填
+status             1 发布，0 草稿
+ico                缩略图，支持远程 URL 自动下载
+pics               多图，支持逗号字符串或数组
+date               发布时间，支持 Unix 时间戳或日期字符串
+filename           自定义 URL 名称，可选
+tags/keywords/description 可选
+```
+
+文章正文中的远程图片、封面 `ico`、多图 `pics` 会先下载到 PBootCMS 本地：
+
+```text
+/static/upload/image/YYYYMMDD/geo_*.jpg
+```
+
+如果图片下载或保存失败，接口会返回失败，不会把 SaaS 平台图片链接写进 PBootCMS 正文。
+
+## 7. 更新与状态
+
+```text
+POST /api.php?p=/GeoPublisher/update
+GET  /api.php?p=/GeoPublisher/status&id={content_id}
+```
+
+更新接口字段和发布接口一致，额外必填：
+
+```text
+id = PBootCMS 内容 ID
+```
+
+## 8. 旧插件兼容接口
+
+插件保留：
+
+```text
+/api.php?p=/GeoPublisher/categoryLists
+/api.php?p=/GeoPublisher/articleAdd
+/api.php?p=/Aiseo/categoryLists
+/api.php?p=/Aiseo/articleAdd
+```
+
+用于兼容历史 `AiseoController.php` 风格调用。新 SaaS 侧建议统一使用：
+
+```text
+ping / categories / publish / update / status
+```
diff --git a/integrations/pbootcms/apps/api/controller/GeoPublisherController.php b/integrations/pbootcms/apps/api/controller/GeoPublisherController.php
new file mode 100644
index 0000000..3016672
--- /dev/null
+++ b/integrations/pbootcms/apps/api/controller/GeoPublisherController.php
@@ -0,0 +1,748 @@
+<?php
+/**
+ * Geo SaaS universal publisher endpoint for PBootCMS.
+ *
+ * Install path in a PBootCMS site:
+ *   apps/api/controller/GeoPublisherController.php
+ *
+ * The controller only depends on PBootCMS core Controller/Model and the
+ * standard content/sort tables, so users can drop the apps directory into
+ * the PBootCMS root and use it without extra database migrations.
+ */
+namespace app\api\controller;
+
+use core\basic\Controller;
+use core\basic\Model;
+
+class GeoPublisherController extends Controller
+{
+    const CMS_TYPE = 'pbootcms';
+    const PLUGIN_VERSION = '1.2.0';
+
+    private $model;
+    private $payload = array();
+    private $contentFields = null;
+
+    public function __construct()
+    {
+        if (function_exists('cache_config')) {
+            cache_config();
+        }
+
+        $this->model = new Model();
+        $this->payload = $this->readPayload();
+        $this->assertApiAccess();
+    }
+
+    public function ping()
+    {
+        $this->success(array(
+            'cms_type' => self::CMS_TYPE,
+            'plugin_version' => self::PLUGIN_VERSION,
+            'site_url' => $this->siteUrl(),
+            'site_name' => $this->config('cmsname') ?: 'PBootCMS',
+            'api_auth' => (bool) $this->config('api_auth'),
+            'time' => date('Y-m-d H:i:s')
+        ));
+    }
+
+    public function categories()
+    {
+        $acode = $this->param('acode', $this->defaultAcode());
+        $mcode = $this->param('mcode', $this->param('model_hash', '2'));
+
+        if (! $this->isSafeCode($acode) || ! $this->isSafeCode($mcode)) {
+            $this->fail(1400, 'invalid acode or mcode');
+        }
+
+        $rows = $this->model->table('ay_content_sort')
+            ->where("acode='" . $this->sqlValue($acode) . "'")
+            ->where("mcode='" . $this->sqlValue($mcode) . "'")
+            ->where('status=1')
+            ->field('scode,pcode,mcode,name,filename,sorting')
+            ->order('sorting ASC,id ASC')
+            ->select();
+
+        $items = array();
+        if ($rows) {
+            foreach ($rows as $row) {
+                $items[] = array(
+                    'id' => (string) $row->scode,
+                    'scode' => (string) $row->scode,
+                    'parent_id' => (string) $row->pcode,
+                    'mcode' => (string) $row->mcode,
+                    'title' => (string) $row->name,
+                    'name' => (string) $row->name,
+                    'filename' => (string) $row->filename,
+                    'sorting' => (int) $row->sorting
+                );
+            }
+        }
+
+        $this->success($items);
+    }
+
+    public function publish()
+    {
+        $data = $this->buildContentData(false);
+        $id = $this->model->table('ay_content')->autoTime()->insertGetId($this->filterContentFields($data));
+
+        if (! $id) {
+            $this->fail(1403, 'insert ay_content error', '文章发布失败');
+        }
+
+        $this->clearRuntimeCache();
+        $this->success(array(
+            'id' => (int) $id,
+            'cms_type' => self::CMS_TYPE,
+            'status' => (int) $data['status'],
+            'url' => $this->contentUrl(
+                $id,
+                $this->param('scode', $this->param('category_id', '')),
+                $this->param('filename', '')
+            )
+        ), 'published');
+    }
+
+    public function update()
+    {
+        $id = (int) $this->param('id', 0);
+        if ($id <= 0) {
+            $this->fail(1404, 'id is empty', '文章 ID 不能为空');
+        }
+
+        $current = $this->model->table('ay_content')->where('id=' . $id)->find();
+        if (! $current) {
+            $this->fail(1404, 'content not found', '文章不存在');
+        }
+
+        $data = $this->buildContentData(true, $current);
+        $ok = $this->model->table('ay_content')->where('id=' . $id)->autoTime()->update($this->filterContentFields($data));
+
+        if ($ok === false) {
+            $this->fail(1403, 'update ay_content error', '文章更新失败');
+        }
+
+        $this->clearRuntimeCache();
+        $this->success(array(
+            'id' => $id,
+            'cms_type' => self::CMS_TYPE,
+            'status' => (int) $data['status'],
+            'url' => $this->contentUrl(
+                $id,
+                $this->param('scode', $this->param('category_id', $current->scode)),
+                $this->param('filename', $current->filename)
+            )
+        ), 'updated');
+    }
+
+    public function status()
+    {
+        $id = (int) $this->param('id', 0);
+        if ($id <= 0) {
+            $this->fail(1404, 'id is empty', '文章 ID 不能为空');
+        }
+
+        $row = $this->model->table('ay_content')->where('id=' . $id)->find();
+        if (! $row) {
+            $this->fail(1404, 'content not found', '文章不存在');
+        }
+
+        $this->success(array(
+            'id' => (int) $row->id,
+            'title' => (string) $row->title,
+            'scode' => (string) $row->scode,
+            'status' => (int) $row->status,
+            'date' => (string) $row->date,
+            'url' => $this->contentUrl($row->id, $row->scode, $row->filename)
+        ));
+    }
+
+    // Backward compatible names used by older Aiseo-style plugins.
+    public function categoryLists()
+    {
+        $this->categories();
+    }
+
+    public function articleAdd()
+    {
+        $this->publish();
+    }
+
+    private function buildContentData($isUpdate = false, $current = null)
+    {
+        $title = $this->param('title', $isUpdate && $current ? $current->title : '');
+        if (! $title) {
+            $this->fail(1404, 'title is empty', '标题不能为空');
+        }
+
+        $content = $this->param('content', $isUpdate && $current ? $current->content : '');
+        if (! $content) {
+            $this->fail(1404, 'content is empty', '内容不能为空');
+        }
+
+        $scode = $this->param('scode', $this->param('category_id', $isUpdate && $current ? $current->scode : ''));
+        if (! $scode) {
+            $this->fail(1404, 'scode is empty', '内容栏目编码不能为空');
+        }
+        if (! $this->isSafeCode($scode)) {
+            $this->fail(1400, 'invalid scode', '栏目编码不合法');
+        }
+
+        $sort = $this->getSort($scode);
+        if (! $sort) {
+            $this->fail(1404, 'sort not found', '栏目不存在或不可用');
+        }
+
+        $content = $this->localizeContentImages($content);
+        $ico = $this->param('ico', $isUpdate && $current ? $current->ico : '');
+        if ($ico && ($this->isRemoteUrl($ico) || $this->isDataImageUrl($ico))) {
+            $ico = $this->localizeImage($ico);
+        }
+
+        $status = $this->param('status', $isUpdate && $current ? $current->status : 1);
+        if ($status === '' || $status === null) {
+            $status = 1;
+        }
+
+        return array(
+            'acode' => $this->sqlValue($this->param('acode', $isUpdate && $current ? $current->acode : $this->defaultAcode())),
+            'scode' => $this->sqlValue($scode),
+            'subscode' => $this->sqlValue($this->param('subscode', $isUpdate && $current ? $current->subscode : '')),
+            'title' => $this->sqlValue($title),
+            'titlecolor' => $this->sqlValue($this->param('titlecolor', $isUpdate && $current ? $current->titlecolor : '#333333')),
+            'subtitle' => $this->sqlValue($this->param('subtitle', $isUpdate && $current ? $current->subtitle : '')),
+            'filename' => $this->sqlValue($this->param('filename', $isUpdate && $current ? $current->filename : '')),
+            'author' => $this->sqlValue($this->param('author', $isUpdate && $current ? $current->author : 'Geo SaaS')),
+            'source' => $this->sqlValue($this->param('source', $isUpdate && $current ? $current->source : 'Geo SaaS')),
+            'outlink' => $this->sqlValue($this->param('outlink', $isUpdate && $current ? $current->outlink : '')),
+            'date' => $this->sqlValue($this->normalizeDate($this->param('date', $isUpdate && $current ? $current->date : ''))),
+            'ico' => $this->sqlValue($ico),
+            'pics' => $this->sqlValue($this->normalizePics($this->param('pics', $isUpdate && $current ? $current->pics : ''))),
+            'content' => $this->sqlValue($content),
+            'tags' => $this->sqlValue($this->param('tags', $isUpdate && $current ? $current->tags : '')),
+            'enclosure' => $this->sqlValue($this->param('enclosure', $isUpdate && $current ? $current->enclosure : '')),
+            'keywords' => $this->sqlValue($this->param('keywords', $isUpdate && $current ? $current->keywords : '')),
+            'description' => $this->sqlValue($this->param('description', $isUpdate && $current ? $current->description : $this->summary($content))),
+            'sorting' => (int) $this->param('sorting', $isUpdate && $current ? $current->sorting : 255),
+            'status' => (int) $status,
+            'istop' => (int) $this->param('istop', $isUpdate && $current ? $current->istop : 0),
+            'isrecommend' => (int) $this->param('isrecommend', $isUpdate && $current ? $current->isrecommend : 0),
+            'isheadline' => (int) $this->param('isheadline', $isUpdate && $current ? $current->isheadline : 0),
+            'visits' => $isUpdate && $current ? (int) $current->visits : 0,
+            'likes' => $isUpdate && $current ? (int) $current->likes : 0,
+            'oppose' => $isUpdate && $current ? (int) $current->oppose : 0,
+            'create_user' => $this->sqlValue($isUpdate && $current ? $current->create_user : 'geo_saas'),
+            'update_user' => $this->sqlValue('geo_saas'),
+            'gid' => (int) $this->param('gid', $isUpdate && $current ? $current->gid : 0),
+            'gtype' => (int) $this->param('gtype', $isUpdate && $current ? $current->gtype : 4),
+            'gnote' => $this->sqlValue($this->param('gnote', $isUpdate && $current ? $current->gnote : '')),
+            'picstitle' => $this->sqlValue($this->param('picstitle', $isUpdate && $current ? $current->picstitle : ''))
+        );
+    }
+
+    private function getSort($scode)
+    {
+        return $this->model->table('ay_content_sort a')
+            ->field('a.*,m.urlname,m.type')
+            ->join(array(
+                array('ay_model m', 'a.mcode=m.mcode', 'LEFT')
+            ))
+            ->where("a.scode='" . $this->sqlValue($scode) . "'")
+            ->where('a.status=1')
+            ->find();
+    }
+
+    private function contentUrl($id, $scode, $filename = '')
+    {
+        $sort = $this->getSort($scode);
+        if (! $sort) {
+            return $this->siteUrl();
+        }
+
+        try {
+            if (class_exists('\\app\\home\\controller\\ParserController')) {
+                $parserClass = '\\app\\home\\controller\\ParserController';
+                $parser = new $parserClass();
+                $link = $parser->parserLink(
+                    $sort->type,
+                    $sort->urlname,
+                    'content',
+                    $scode,
+                    $sort->filename,
+                    $id,
+                    $filename
+                );
+                return $this->absoluteUrl($link);
+            }
+        } catch (\Exception $e) {
+        }
+
+        $urlName = $sort->urlname ?: $sort->filename;
+        if (! $urlName) {
+            $urlName = $scode;
+        }
+        return $this->absoluteUrl('/?' . $urlName . '/' . $id . '.html');
+    }
+
+    private function filterContentFields($data)
+    {
+        $fields = $this->contentFields();
+        if (! $fields) {
+            return $data;
+        }
+
+        $filtered = array();
+        foreach ($data as $key => $value) {
+            if (isset($fields[$key])) {
+                $filtered[$key] = $value;
+            }
+        }
+        return $filtered;
+    }
+
+    private function contentFields()
+    {
+        if ($this->contentFields !== null) {
+            return $this->contentFields;
+        }
+
+        $this->contentFields = array();
+        try {
+            $fields = $this->model->tableFields('ay_content');
+            if (is_array($fields)) {
+                foreach ($fields as $field) {
+                    $field = trim((string) $field);
+                    if ($field !== '') {
+                        $this->contentFields[$field] = true;
+                    }
+                }
+            }
+        } catch (\Exception $e) {
+            $this->contentFields = array();
+        }
+        return $this->contentFields;
+    }
+
+    private function readPayload()
+    {
+        $payload = array();
+        $raw = file_get_contents('php://input');
+        if ($raw) {
+            $json = json_decode($raw, true);
+            if (is_array($json)) {
+                $payload = $json;
+            }
+        }
+
+        foreach ($_REQUEST as $key => $value) {
+            $payload[$key] = $value;
+        }
+
+        return $payload;
+    }
+
+    private function param($name, $default = '')
+    {
+        if (array_key_exists($name, $this->payload)) {
+            return $this->payload[$name];
+        }
+        return $default;
+    }
+
+    private function assertApiAccess()
+    {
+        $config = $this->config();
+        if (! isset($config['api_open']) || ! $config['api_open']) {
+            $this->fail(1401, 'api is closed', '系统尚未开启 API 功能');
+        }
+
+        if (! empty($config['api_auth'])) {
+            if (empty($config['api_appid']) || empty($config['api_secret'])) {
+                $this->fail(1401, 'api credential is not configured', '后台 API 认证配置不完整');
+            }
+
+            $appid = $this->param('appid', '');
+            $timestamp = $this->param('timestamp', '');
+            $signature = $this->param('signature', '');
+
+            if (! $appid || ! $timestamp || ! $signature) {
+                $this->fail(1401, 'missing appid timestamp or signature', '缺少 API 认证参数');
+            }
+
+            if ((string) $appid !== (string) $config['api_appid']) {
+                $this->fail(1401, 'invalid appid', 'API 用户不正确');
+            }
+
+            if (! is_numeric($timestamp) || abs(time() - (int) $timestamp) > 300) {
+                $this->fail(1401, 'timestamp expired', 'API 时间戳已过期');
+            }
+
+            $expected = md5(md5($config['api_appid'] . $config['api_secret'] . $timestamp));
+            if (! $this->hashEquals($expected, $signature)) {
+                $this->fail(1401, 'invalid signature', 'API 签名不正确');
+            }
+        }
+    }
+
+    private function hashEquals($known, $user)
+    {
+        if (function_exists('hash_equals')) {
+            return hash_equals((string) $known, (string) $user);
+        }
+        return (string) $known === (string) $user;
+    }
+
+    private function localizeContentImages($content)
+    {
+        return preg_replace_callback('/<img\\b[^>]*>/i', function ($imgMatch) {
+            $tag = $imgMatch[0];
+            preg_match_all('/\\b(src|data-src|_src)=[\"\']([^\"\']+)[\"\']/i', $tag, $attrMatches, PREG_SET_ORDER);
+            if (! $attrMatches) {
+                return $tag;
+            }
+
+            $replacements = array();
+            foreach ($attrMatches as $attrMatch) {
+                $url = trim($attrMatch[2]);
+                if (! $this->isRemoteUrl($url) && ! $this->isDataImageUrl($url)) {
+                    continue;
+                }
+                if (! isset($replacements[$url])) {
+                    $replacements[$url] = $this->localizeImage($url);
+                }
+            }
+
+            foreach ($replacements as $remote => $local) {
+                $tag = str_replace($remote, $local, $tag);
+            }
+            return $tag;
+        }, $content);
+    }
+
+    private function normalizePics($pics)
+    {
+        if (! $pics) {
+            return '';
+        }
+
+        if (is_array($pics)) {
+            $items = $pics;
+        } else {
+            $items = explode(',', $pics);
+        }
+
+        $result = array();
+        foreach ($items as $item) {
+            $item = trim((string) $item);
+            if (! $item) {
+                continue;
+            }
+            if ($this->isRemoteUrl($item)) {
+                $item = $this->localizeImage($item);
+            } elseif ($this->isDataImageUrl($item)) {
+                $item = $this->localizeImage($item);
+            }
+            if ($item) {
+                $result[] = $item;
+            }
+        }
+
+        return implode(',', $result);
+    }
+
+    private function localizeImage($value)
+    {
+        if ($this->isDataImageUrl($value)) {
+            $decoded = $this->decodeDataImage($value);
+            return $this->saveImageData($decoded['data'], $decoded['ext']);
+        }
+        return $this->downloadImage($value);
+    }
+
+    private function downloadImage($url)
+    {
+        if (! $this->isRemoteUrl($url)) {
+            return $url;
+        }
+
+        $data = $this->httpGet($url);
+        if (! $data) {
+            $this->fail(1405, 'download image failed: ' . $url, '图片下载失败');
+        }
+
+        $path = parse_url($url, PHP_URL_PATH);
+        if (! $path) {
+            $path = '';
+        }
+        $ext = strtolower(pathinfo($path, PATHINFO_EXTENSION));
+        if (! in_array($ext, array('jpg', 'jpeg', 'png', 'gif', 'webp'))) {
+            $ext = $this->imageExtensionFromData($data);
+        }
+        if (! $ext) {
+            $ext = 'jpg';
+        }
+
+        return $this->saveImageData($data, $ext);
+    }
+
+    private function saveImageData($data, $ext = '')
+    {
+        if (! $data || ! $this->isImageData($data, '')) {
+            $this->fail(1405, 'invalid image data', '图片数据无效');
+        }
+        if (! $ext || ! in_array(strtolower($ext), array('jpg', 'jpeg', 'png', 'gif', 'webp'))) {
+            $ext = $this->imageExtensionFromData($data);
+        }
+        if (! $ext) {
+            $ext = 'jpg';
+        }
+
+        $relativeDir = '/static/upload/image/' . date('Ymd');
+        $absoluteDir = $this->rootPath() . $relativeDir;
+        if (! is_dir($absoluteDir) && ! mkdir($absoluteDir, 0777, true)) {
+            $this->fail(1405, 'create upload directory failed', '图片保存目录创建失败');
+        }
+
+        $fileName = 'geo_' . date('His') . '_' . mt_rand(1000, 9999) . '.' . $ext;
+        $absoluteFile = $absoluteDir . '/' . $fileName;
+        $relativeFile = $relativeDir . '/' . $fileName;
+
+        if (file_put_contents($absoluteFile, $data) === false) {
+            $this->fail(1405, 'save image failed', '图片保存失败');
+        }
+
+        return $relativeFile;
+    }
+
+    private function decodeDataImage($value)
+    {
+        if (! preg_match('/^data:image\\/(jpeg|jpg|png|gif|webp);base64,([A-Za-z0-9+\\/\\r\\n=]+)$/i', trim((string) $value), $matches)) {
+            $this->fail(1405, 'invalid data image', '图片数据无效');
+        }
+        $data = base64_decode(preg_replace('/\\s+/', '', $matches[2]), true);
+        if (! $data) {
+            $this->fail(1405, 'decode data image failed', '图片数据无效');
+        }
+        $ext = strtolower($matches[1]);
+        if ($ext === 'jpeg') {
+            $ext = 'jpg';
+        }
+        return array('data' => $data, 'ext' => $ext);
+    }
+
+    private function httpGet($url)
+    {
+        if (function_exists('curl_init')) {
+            $curl = curl_init();
+            curl_setopt($curl, CURLOPT_URL, $url);
+            curl_setopt($curl, CURLOPT_RETURNTRANSFER, true);
+            curl_setopt($curl, CURLOPT_FOLLOWLOCATION, true);
+            curl_setopt($curl, CURLOPT_CONNECTTIMEOUT, 8);
+            curl_setopt($curl, CURLOPT_TIMEOUT, 20);
+            curl_setopt($curl, CURLOPT_SSL_VERIFYPEER, false);
+            curl_setopt($curl, CURLOPT_SSL_VERIFYHOST, false);
+            curl_setopt($curl, CURLOPT_USERAGENT, 'GeoPublisher/' . self::PLUGIN_VERSION);
+            $data = curl_exec($curl);
+            $code = (int) curl_getinfo($curl, CURLINFO_HTTP_CODE);
+            $contentType = (string) curl_getinfo($curl, CURLINFO_CONTENT_TYPE);
+            curl_close($curl);
+            if ($code >= 200 && $code < 300 && $data && $this->isImageData($data, $contentType)) {
+                return $data;
+            }
+            return false;
+        }
+
+        $context = stream_context_create(array(
+            'http' => array(
+                'method' => 'GET',
+                'timeout' => 20,
+                'header' => "User-Agent: GeoPublisher/" . self::PLUGIN_VERSION . "\r\n"
+            )
+        ));
+        $data = @file_get_contents($url, false, $context);
+        return $data && $this->isImageData($data, '') ? $data : false;
+    }
+
+    private function isImageData($data, $contentType = '')
+    {
+        if ($contentType && stripos($contentType, 'image/') !== false) {
+            return true;
+        }
+        if (function_exists('getimagesizefromstring')) {
+            if (@getimagesizefromstring($data) !== false) {
+                return true;
+            }
+        }
+        return $this->isWebPData($data);
+    }
+
+    private function isWebPData($data)
+    {
+        return strlen($data) >= 12 && substr($data, 0, 4) === 'RIFF' && substr($data, 8, 4) === 'WEBP';
+    }
+
+    private function imageExtensionFromData($data)
+    {
+        if ($this->isWebPData($data)) {
+            return 'webp';
+        }
+        if (! function_exists('getimagesizefromstring')) {
+            return 'jpg';
+        }
+        $info = @getimagesizefromstring($data);
+        if (! $info || empty($info['mime'])) {
+            return 'jpg';
+        }
+        switch (strtolower($info['mime'])) {
+            case 'image/jpeg':
+                return 'jpg';
+            case 'image/png':
+                return 'png';
+            case 'image/gif':
+                return 'gif';
+            case 'image/webp':
+                return 'webp';
+            default:
+                return 'jpg';
+        }
+    }
+
+    private function rootPath()
+    {
+        if (defined('ROOT_PATH') && ROOT_PATH) {
+            return rtrim(ROOT_PATH, '/\\');
+        }
+        return rtrim(dirname(dirname(dirname(dirname(__FILE__)))), '/\\');
+    }
+
+    private function normalizeDate($value)
+    {
+        if (! $value) {
+            return date('Y-m-d H:i:s');
+        }
+        if (is_numeric($value)) {
+            return date('Y-m-d H:i:s', (int) $value);
+        }
+        $time = strtotime($value);
+        return $time ? date('Y-m-d H:i:s', $time) : date('Y-m-d H:i:s');
+    }
+
+    private function summary($content)
+    {
+        $text = strip_tags($content);
+        if (function_exists('clear_html_blank')) {
+            $text = clear_html_blank($text);
+        }
+        if (function_exists('substr_both')) {
+            return substr_both($text, 0, 150);
+        }
+        if (function_exists('mb_substr')) {
+            return mb_substr($text, 0, 150, 'UTF-8');
+        }
+        return substr($text, 0, 150);
+    }
+
+    private function defaultAcode()
+    {
+        if (function_exists('get_default_lg')) {
+            return get_default_lg();
+        }
+        return 'cn';
+    }
+
+    private function isSafeCode($value)
+    {
+        return (bool) preg_match('/^[A-Za-z0-9_\\-]+$/', (string) $value);
+    }
+
+    private function isRemoteUrl($url)
+    {
+        return preg_match('/^https?:\\/\\//i', (string) $url);
+    }
+
+    private function isDataImageUrl($url)
+    {
+        return preg_match('/^data:image\\/(jpeg|jpg|png|gif|webp);base64,/i', trim((string) $url));
+    }
+
+    private function sqlValue($value)
+    {
+        if (is_array($value) || is_object($value)) {
+            $value = json_encode($value);
+        }
+
+        $value = (string) $value;
+        if (function_exists('get_magic_quotes_gpc') && get_magic_quotes_gpc()) {
+            $value = stripslashes($value);
+        }
+        return addslashes($value);
+    }
+
+    private function absoluteUrl($link)
+    {
+        if (preg_match('/^https?:\\/\\//i', $link)) {
+            return $link;
+        }
+
+        $base = $this->siteUrl();
+        if (! $link) {
+            return $base;
+        }
+
+        return rtrim($base, '/') . '/' . ltrim($link, '/');
+    }
+
+    private function siteUrl()
+    {
+        if (function_exists('get_http_url')) {
+            return get_http_url();
+        }
+
+        $https = isset($_SERVER['HTTPS']) && strtolower($_SERVER['HTTPS']) === 'on';
+        $host = isset($_SERVER['HTTP_HOST']) ? $_SERVER['HTTP_HOST'] : '';
+        return ($https ? 'https://' : 'http://') . $host;
+    }
+
+    private function clearRuntimeCache()
+    {
+        if (defined('RUN_PATH') && function_exists('path_delete')) {
+            @path_delete(RUN_PATH . '/cache');
+            @path_delete(RUN_PATH . '/complile');
+            @path_delete(RUN_PATH . '/config');
+            @path_delete(RUN_PATH . '/upgrade');
+        }
+
+        if (function_exists('cache_config')) {
+            @cache_config(true);
+        }
+
+        if (function_exists('opcache_reset') && extension_loaded('Zend OPcache')) {
+            @opcache_reset();
+        }
+    }
+
+    private function success($data = array(), $msg = '')
+    {
+        $this->respond(1, $data, $msg);
+    }
+
+    private function fail($code, $data = '', $msg = '')
+    {
+        $this->respond($code, $data, $msg);
+    }
+
+    private function respond($code, $data = '', $msg = '')
+    {
+        if (! headers_sent()) {
+            header('Content-Type: application/json; charset=utf-8');
+        }
+
+        echo json_encode(array(
+            'code' => $code,
+            'data' => $data,
+            'msg' => $msg
+        ));
+        exit();
+    }
+}
diff --git a/packages/http-client/src/index.ts b/packages/http-client/src/index.ts
index f28ae5f..dbe660a 100644
--- a/packages/http-client/src/index.ts
+++ b/packages/http-client/src/index.ts
@@ -51,6 +51,7 @@ export interface ApiClient {
   get: <T>(url: string, config?: AxiosRequestConfig) => Promise<T>
   post: <T, B = unknown>(url: string, body?: B, config?: AxiosRequestConfig) => Promise<T>
   put: <T, B = unknown>(url: string, body?: B, config?: AxiosRequestConfig) => Promise<T>
+  patch: <T, B = unknown>(url: string, body?: B, config?: AxiosRequestConfig) => Promise<T>
   remove: <T>(url: string, config?: AxiosRequestConfig) => Promise<T>
 }
 
@@ -172,6 +173,9 @@ export function createApiClient(options: CreateApiClientOptions = {}): ApiClient
     async put<T, B = unknown>(url: string, body?: B, config?: AxiosRequestConfig) {
       return unwrapEnvelope(await client.put<ApiEnvelope<T>>(url, body, config))
     },
+    async patch<T, B = unknown>(url: string, body?: B, config?: AxiosRequestConfig) {
+      return unwrapEnvelope(await client.patch<ApiEnvelope<T>>(url, body, config))
+    },
     async remove<T>(url: string, config?: AxiosRequestConfig) {
       return unwrapEnvelope(await client.delete<ApiEnvelope<T>>(url, config))
     },
diff --git a/packages/shared-types/src/index.ts b/packages/shared-types/src/index.ts
index f558af2..f4ecc74 100644
--- a/packages/shared-types/src/index.ts
+++ b/packages/shared-types/src/index.ts
@@ -1258,8 +1258,10 @@ export interface PublishRecord {
   id: number
   publish_batch_id: number
   article_id: number
-  platform_account_id: number
+  platform_account_id?: number | null
   desktop_account_id: string | null
+  target_type?: 'platform_account' | 'enterprise_site' | string
+  target_connection_id?: number | null
   platform_id: string
   platform_name: string
   platform_nickname: string
@@ -1273,6 +1275,109 @@ export interface PublishRecord {
   updated_at: string
 }
 
+export type EnterpriseSiteCmsType = 'pbootcms' | 'wordpress' | 'dedecms' | 'phpcms'
+export type EnterpriseSiteStatus = 'draft' | 'connected' | 'error' | 'disabled'
+
+export interface EnterpriseSiteLatestPublishRecord {
+  id: number
+  article_id: number
+  article_title?: string | null
+  status: string
+  external_article_id?: string | null
+  external_article_url?: string | null
+  error_message?: string | null
+  published_at?: string | null
+  created_at: string
+  updated_at: string
+}
+
+export interface EnterpriseSiteConnection {
+  id: number
+  name: string
+  site_url: string
+  cms_type: EnterpriseSiteCmsType | string
+  auth_type: string
+  appid: string
+  default_acode?: string | null
+  default_mcode?: string | null
+  default_scode?: string | null
+  status: EnterpriseSiteStatus | string
+  plugin_version?: string | null
+  site_name?: string | null
+  last_ping_at?: string | null
+  last_sync_at?: string | null
+  last_publish_at?: string | null
+  last_error?: string | null
+  category_count: number
+  latest_record?: EnterpriseSiteLatestPublishRecord | null
+  created_at: string
+  updated_at: string
+}
+
+export interface EnterpriseSiteCategory {
+  id: number
+  remote_id: string
+  parent_remote_id?: string | null
+  name: string
+  slug?: string | null
+  raw?: Record<string, JsonValue>
+  synced_at: string
+}
+
+export interface CreateEnterpriseSiteConnectionRequest {
+  name?: string
+  site_url: string
+  cms_type: EnterpriseSiteCmsType
+  appid: string
+  secret: string
+  default_acode?: string | null
+  default_mcode?: string | null
+  default_scode?: string | null
+}
+
+export interface UpdateEnterpriseSiteConnectionRequest {
+  name?: string
+  site_url?: string
+  appid?: string
+  secret?: string
+  default_acode?: string | null
+  default_mcode?: string | null
+  default_scode?: string | null
+  status?: EnterpriseSiteStatus
+}
+
+export interface EnterpriseSiteCapability {
+  cms_type: string
+  plugin_version?: string | null
+  site_url: string
+  site_name?: string | null
+  api_auth: boolean
+}
+
+export interface PublishEnterpriseSiteArticleRequest {
+  article_id: number
+  category_id?: string
+  publish_type?: 'publish' | 'draft'
+  author?: string | null
+  source?: string | null
+  article_version_id?: number | null
+  ack_record_id?: number | null
+  cover_asset_url?: string | null
+  cover_image_asset_id?: number | null
+}
+
+export interface EnterpriseSitePublishResponse {
+  publish_batch_id: number
+  publish_record_id: number
+  connection_id: number
+  article_id: number
+  status: string
+  external_article_id?: string | null
+  external_article_url?: string | null
+  error_message?: string | null
+  published_at?: string | null
+}
+
 export interface PublisherLocalPlatformState {
   platform_id: string
   connected: boolean
diff --git a/server/internal/shared/config/config.go b/server/internal/shared/config/config.go
index 3e48ae5..d2c63ec 100644
--- a/server/internal/shared/config/config.go
+++ b/server/internal/shared/config/config.go
@@ -47,6 +47,7 @@ type Config struct {
 type ServerConfig struct {
 	Port            int             `mapstructure:"port"`
 	Mode            string          `mapstructure:"mode"`
+	PublicBaseURL   string          `mapstructure:"public_base_url"`
 	TrustedProxies  []string        `mapstructure:"trusted_proxies"`
 	AllowedOrigins  []string        `mapstructure:"allowed_origins"`
 	SecurityHeaders SecurityHeaders `mapstructure:"security_headers"`
@@ -1193,6 +1194,9 @@ func applyEnvOverrides(cfg *Config) {
 	if origins, ok := lookupNonEmptyEnv("SERVER_ALLOWED_ORIGINS"); ok {
 		cfg.Server.AllowedOrigins = strings.Split(origins, ",")
 	}
+	if publicBaseURL, ok := lookupNonEmptyEnv("SERVER_PUBLIC_BASE_URL"); ok {
+		cfg.Server.PublicBaseURL = publicBaseURL
+	}
 	if enabled, ok := lookupBoolEnv("SERVER_SECURITY_HEADERS_ENABLED"); ok {
 		cfg.Server.SecurityHeaders.Enabled = enabled
 	}
diff --git a/server/internal/tenant/app/article_service.go b/server/internal/tenant/app/article_service.go
index 3247c9c..5ac1669 100644
--- a/server/internal/tenant/app/article_service.go
+++ b/server/internal/tenant/app/article_service.go
@@ -110,7 +110,10 @@ const articlePublishStatusAggregateJoin = `
 			       BOOL_OR(latest.status_bucket = 'success') AS has_success,
 			       BOOL_OR(latest.status_bucket = 'failed') AS has_failed
 			FROM (
-				SELECT DISTINCT ON (pr.platform_account_id)
+				SELECT DISTINCT ON (
+					COALESCE(pr.target_type, 'platform_account'),
+					COALESCE(pr.platform_account_id, pr.target_connection_id)
+				)
 				       CASE
 				           WHEN pr.status IN ('success', 'published', 'publish_success') THEN 'success'
 				           WHEN pr.status IN ('publishing', 'pending', 'queued', 'running') THEN 'publishing'
@@ -119,7 +122,11 @@ const articlePublishStatusAggregateJoin = `
 				FROM publish_records pr
 				WHERE pr.tenant_id = a.tenant_id
 				  AND pr.article_id = a.id
-				ORDER BY pr.platform_account_id, pr.created_at DESC, pr.id DESC
+				ORDER BY
+					COALESCE(pr.target_type, 'platform_account'),
+					COALESCE(pr.platform_account_id, pr.target_connection_id),
+					pr.created_at DESC,
+					pr.id DESC
 			) latest
 		) publish_status_summary ON true`
 
diff --git a/server/internal/tenant/app/enterprise_site_crypto.go b/server/internal/tenant/app/enterprise_site_crypto.go
new file mode 100644
index 0000000..cf57665
--- /dev/null
+++ b/server/internal/tenant/app/enterprise_site_crypto.go
@@ -0,0 +1,78 @@
+package app
+
+import (
+	"crypto/aes"
+	"crypto/cipher"
+	"crypto/rand"
+	"crypto/sha256"
+	"encoding/base64"
+	"fmt"
+	"io"
+	"strings"
+)
+
+const enterpriseSiteCredentialPrefix = "v1:"
+
+func encryptEnterpriseSiteCredential(secret string, keyMaterial string) (string, error) {
+	secret = strings.TrimSpace(secret)
+	if secret == "" {
+		return "", fmt.Errorf("enterprise site credential is empty")
+	}
+	key := enterpriseSiteCredentialKey(keyMaterial)
+	block, err := aes.NewCipher(key[:])
+	if err != nil {
+		return "", fmt.Errorf("create enterprise site credential cipher: %w", err)
+	}
+	aead, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", fmt.Errorf("create enterprise site credential gcm: %w", err)
+	}
+	nonce := make([]byte, aead.NonceSize())
+	if _, err := io.ReadFull(rand.Reader, nonce); err != nil {
+		return "", fmt.Errorf("generate enterprise site credential nonce: %w", err)
+	}
+	ciphertext := aead.Seal(nil, nonce, []byte(secret), nil)
+	packed := append(nonce, ciphertext...)
+	return enterpriseSiteCredentialPrefix + base64.StdEncoding.EncodeToString(packed), nil
+}
+
+func decryptEnterpriseSiteCredential(ciphertext string, keyMaterial string) (string, error) {
+	ciphertext = strings.TrimSpace(ciphertext)
+	if ciphertext == "" {
+		return "", fmt.Errorf("enterprise site credential ciphertext is empty")
+	}
+	if !strings.HasPrefix(ciphertext, enterpriseSiteCredentialPrefix) {
+		return "", fmt.Errorf("unsupported enterprise site credential format")
+	}
+	raw, err := base64.StdEncoding.DecodeString(strings.TrimPrefix(ciphertext, enterpriseSiteCredentialPrefix))
+	if err != nil {
+		return "", fmt.Errorf("decode enterprise site credential: %w", err)
+	}
+	key := enterpriseSiteCredentialKey(keyMaterial)
+	block, err := aes.NewCipher(key[:])
+	if err != nil {
+		return "", fmt.Errorf("create enterprise site credential cipher: %w", err)
+	}
+	aead, err := cipher.NewGCM(block)
+	if err != nil {
+		return "", fmt.Errorf("create enterprise site credential gcm: %w", err)
+	}
+	if len(raw) <= aead.NonceSize() {
+		return "", fmt.Errorf("enterprise site credential payload is invalid")
+	}
+	nonce := raw[:aead.NonceSize()]
+	encrypted := raw[aead.NonceSize():]
+	plaintext, err := aead.Open(nil, nonce, encrypted, nil)
+	if err != nil {
+		return "", fmt.Errorf("decrypt enterprise site credential: %w", err)
+	}
+	return string(plaintext), nil
+}
+
+func enterpriseSiteCredentialKey(keyMaterial string) [32]byte {
+	trimmed := strings.TrimSpace(keyMaterial)
+	if trimmed == "" {
+		trimmed = "geo-rankly-enterprise-site-development-key"
+	}
+	return sha256.Sum256([]byte("enterprise-site-credential:" + trimmed))
+}
diff --git a/server/internal/tenant/app/enterprise_site_pbootcms.go b/server/internal/tenant/app/enterprise_site_pbootcms.go
new file mode 100644
index 0000000..e7d44e3
--- /dev/null
+++ b/server/internal/tenant/app/enterprise_site_pbootcms.go
@@ -0,0 +1,402 @@
+package app
+
+import (
+	"bytes"
+	"context"
+	"crypto/md5"
+	"encoding/hex"
+	"encoding/json"
+	"fmt"
+	"io"
+	"net/http"
+	"net/url"
+	"strconv"
+	"strings"
+	"time"
+)
+
+const pbootCMSPlatformID = "pbootcms"
+
+type cmsPublisher interface {
+	Ping(ctx context.Context, credential enterpriseSiteCredential) (*EnterpriseSiteCapability, map[string]any, error)
+	Categories(ctx context.Context, credential enterpriseSiteCredential) ([]EnterpriseSiteCategoryItem, []map[string]any, error)
+	Publish(ctx context.Context, credential enterpriseSiteCredential, req cmsPublishRequest) (*cmsPublishResult, map[string]any, error)
+}
+
+type pbootCMSPublisher struct {
+	client *http.Client
+}
+
+type enterpriseSiteCredential struct {
+	SiteURL      string
+	AppID        string
+	Secret       string
+	DefaultAcode string
+	DefaultMcode string
+	DefaultScode string
+}
+
+type cmsPublishRequest struct {
+	ArticleID   int64
+	Title       string
+	ContentHTML string
+	CategoryID  string
+	Keywords    string
+	Description string
+	Author      string
+	Source      string
+	CoverURL    string
+	PublishType string
+}
+
+type cmsPublishResult struct {
+	RemoteID string
+	URL      string
+	Status   string
+}
+
+type pbootCMSResponse struct {
+	Code int             `json:"code"`
+	Data json.RawMessage `json:"data"`
+	Msg  string          `json:"msg"`
+}
+
+type pbootCMSRequestError struct {
+	message          string
+	routeUnavailable bool
+}
+
+func (err *pbootCMSRequestError) Error() string {
+	return err.message
+}
+
+func newPBootCMSPublisher(client *http.Client) *pbootCMSPublisher {
+	if client == nil {
+		client = &http.Client{Timeout: 20 * time.Second}
+	}
+	return &pbootCMSPublisher{client: client}
+}
+
+func (p *pbootCMSPublisher) Ping(ctx context.Context, credential enterpriseSiteCredential) (*EnterpriseSiteCapability, map[string]any, error) {
+	var payload map[string]any
+	if err := p.request(ctx, http.MethodGet, credential, "ping", nil, nil, &payload); err != nil {
+		return nil, nil, err
+	}
+	capability := &EnterpriseSiteCapability{
+		CMSType:       strings.TrimSpace(stringFromMap(payload, "cms_type")),
+		PluginVersion: stringPointerFromMap(payload, "plugin_version"),
+		SiteURL:       strings.TrimSpace(stringFromMap(payload, "site_url")),
+		SiteName:      stringPointerFromMap(payload, "site_name"),
+		APIAuth:       boolFromMap(payload, "api_auth"),
+	}
+	if capability.CMSType == "" {
+		capability.CMSType = pbootCMSPlatformID
+	}
+	if capability.SiteURL == "" {
+		capability.SiteURL = credential.SiteURL
+	}
+	return capability, payload, nil
+}
+
+func (p *pbootCMSPublisher) Categories(ctx context.Context, credential enterpriseSiteCredential) ([]EnterpriseSiteCategoryItem, []map[string]any, error) {
+	query := url.Values{}
+	if strings.TrimSpace(credential.DefaultAcode) != "" {
+		query.Set("acode", strings.TrimSpace(credential.DefaultAcode))
+	}
+	if strings.TrimSpace(credential.DefaultMcode) != "" {
+		query.Set("mcode", strings.TrimSpace(credential.DefaultMcode))
+	}
+
+	var rawItems []map[string]any
+	if err := p.request(ctx, http.MethodGet, credential, "categories", query, nil, &rawItems); err != nil {
+		return nil, nil, err
+	}
+	items := make([]EnterpriseSiteCategoryItem, 0, len(rawItems))
+	for _, raw := range rawItems {
+		id := firstStringFromMap(raw, "id", "scode", "remote_id")
+		name := firstStringFromMap(raw, "title", "name")
+		if strings.TrimSpace(id) == "" || strings.TrimSpace(name) == "" {
+			continue
+		}
+		items = append(items, EnterpriseSiteCategoryItem{
+			RemoteID:       strings.TrimSpace(id),
+			ParentRemoteID: pbootCMSOptionalString(firstStringFromMap(raw, "parent_id", "pcode")),
+			Name:           strings.TrimSpace(name),
+			Slug:           pbootCMSOptionalString(firstStringFromMap(raw, "slug", "filename")),
+			Raw:            raw,
+		})
+	}
+	return items, rawItems, nil
+}
+
+func (p *pbootCMSPublisher) Publish(ctx context.Context, credential enterpriseSiteCredential, req cmsPublishRequest) (*cmsPublishResult, map[string]any, error) {
+	categoryID := strings.TrimSpace(req.CategoryID)
+	if categoryID == "" {
+		categoryID = strings.TrimSpace(credential.DefaultScode)
+	}
+	body := map[string]any{
+		"scode":       categoryID,
+		"title":       strings.TrimSpace(req.Title),
+		"content":     strings.TrimSpace(req.ContentHTML),
+		"keywords":    strings.TrimSpace(req.Keywords),
+		"description": strings.TrimSpace(req.Description),
+		"author":      strings.TrimSpace(req.Author),
+		"source":      strings.TrimSpace(req.Source),
+		"status":      pbootCMSStatusFromPublishType(req.PublishType),
+	}
+	if strings.TrimSpace(req.CoverURL) != "" {
+		body["ico"] = strings.TrimSpace(req.CoverURL)
+	}
+	if strings.TrimSpace(credential.DefaultAcode) != "" {
+		body["acode"] = strings.TrimSpace(credential.DefaultAcode)
+	}
+
+	var payload map[string]any
+	if err := p.request(ctx, http.MethodPost, credential, "publish", nil, body, &payload); err != nil {
+		return nil, nil, err
+	}
+
+	remoteID := firstStringFromMap(payload, "id", "remote_id")
+	result := &cmsPublishResult{
+		RemoteID: strings.TrimSpace(remoteID),
+		URL:      strings.TrimSpace(firstStringFromMap(payload, "url", "external_article_url")),
+		Status:   strings.TrimSpace(firstStringFromMap(payload, "status")),
+	}
+	if result.Status == "" {
+		result.Status = "published"
+	}
+	return result, payload, nil
+}
+
+func (p *pbootCMSPublisher) request(ctx context.Context, method string, credential enterpriseSiteCredential, action string, query url.Values, body any, out any) error {
+	endpoints, err := pbootCMSEndpoints(credential.SiteURL, action)
+	if err != nil {
+		return err
+	}
+
+	var lastErr error
+	for _, endpoint := range endpoints {
+		if err := p.requestEndpoint(ctx, method, endpoint, credential, action, query, body, out); err != nil {
+			lastErr = err
+			if !pbootCMSRouteUnavailable(err) {
+				break
+			}
+			continue
+		}
+		return nil
+	}
+	if lastErr != nil {
+		return lastErr
+	}
+	return fmt.Errorf("pbootcms %s endpoint is unavailable", action)
+}
+
+func (p *pbootCMSPublisher) requestEndpoint(ctx context.Context, method string, endpoint *url.URL, credential enterpriseSiteCredential, action string, query url.Values, body any, out any) error {
+	requestEndpoint := *endpoint
+	requestQuery := requestEndpoint.Query()
+	for key, values := range query {
+		requestQuery.Del(key)
+		for _, value := range values {
+			requestQuery.Add(key, value)
+		}
+	}
+	p.signQuery(credential, requestQuery)
+	requestEndpoint.RawQuery = requestQuery.Encode()
+
+	var reader io.Reader
+	if body != nil {
+		raw, marshalErr := json.Marshal(body)
+		if marshalErr != nil {
+			return fmt.Errorf("marshal pbootcms request: %w", marshalErr)
+		}
+		reader = bytes.NewReader(raw)
+	}
+
+	httpReq, err := http.NewRequestWithContext(ctx, method, requestEndpoint.String(), reader)
+	if err != nil {
+		return fmt.Errorf("build pbootcms request: %w", err)
+	}
+	httpReq.Header.Set("User-Agent", "GeoRankly-PBootCMS/1.0")
+	if body != nil {
+		httpReq.Header.Set("Content-Type", "application/json")
+	}
+
+	resp, err := p.client.Do(httpReq)
+	if err != nil {
+		return fmt.Errorf("request pbootcms %s: %w", action, err)
+	}
+	defer resp.Body.Close()
+
+	raw, err := io.ReadAll(io.LimitReader(resp.Body, 2*1024*1024))
+	if err != nil {
+		return fmt.Errorf("read pbootcms response: %w", err)
+	}
+	if resp.StatusCode < 200 || resp.StatusCode >= 300 {
+		return &pbootCMSRequestError{
+			message:          fmt.Sprintf("pbootcms %s returned http %d", action, resp.StatusCode),
+			routeUnavailable: resp.StatusCode == http.StatusNotFound,
+		}
+	}
+
+	var envelope pbootCMSResponse
+	if err := json.Unmarshal(raw, &envelope); err != nil {
+		rawText := strings.TrimSpace(string(raw))
+		return &pbootCMSRequestError{
+			message:          fmt.Sprintf("parse pbootcms response: %v", err),
+			routeUnavailable: pbootCMSLooksLikeMissingRoute(rawText),
+		}
+	}
+	if envelope.Code != 1 {
+		msg := strings.TrimSpace(envelope.Msg)
+		if msg == "" {
+			msg = strings.TrimSpace(string(envelope.Data))
+		}
+		if msg == "" {
+			msg = fmt.Sprintf("pbootcms %s failed with code %d", action, envelope.Code)
+		}
+		return &pbootCMSRequestError{
+			message:          msg,
+			routeUnavailable: strings.Contains(msg, "页面类文件不存在") || strings.Contains(strings.ToLower(msg), "not found"),
+		}
+	}
+
+	if out == nil {
+		return nil
+	}
+	if len(envelope.Data) == 0 || string(envelope.Data) == "null" {
+		return nil
+	}
+	if err := json.Unmarshal(envelope.Data, out); err != nil {
+		return fmt.Errorf("parse pbootcms data: %w", err)
+	}
+	return nil
+}
+
+func (p *pbootCMSPublisher) signQuery(credential enterpriseSiteCredential, query url.Values) {
+	timestamp := strconv.FormatInt(time.Now().Unix(), 10)
+	appid := strings.TrimSpace(credential.AppID)
+	secret := strings.TrimSpace(credential.Secret)
+	query.Set("appid", appid)
+	query.Set("timestamp", timestamp)
+	query.Set("signature", pbootCMSSignature(appid, secret, timestamp))
+}
+
+func pbootCMSEndpoints(siteURL string, action string) ([]*url.URL, error) {
+	parsed, err := url.Parse(strings.TrimSpace(siteURL))
+	if err != nil || parsed.Scheme == "" || parsed.Host == "" {
+		return nil, fmt.Errorf("invalid pbootcms site url")
+	}
+	basePath := strings.TrimRight(parsed.Path, "/")
+	cleanAction := strings.TrimLeft(action, "/")
+
+	pretty := *parsed
+	pretty.Path = basePath + "/api/GeoPublisher/" + cleanAction
+	pretty.RawQuery = ""
+	pretty.Fragment = ""
+
+	queryEntry := *parsed
+	queryEntry.Path = basePath + "/api.php"
+	query := url.Values{}
+	query.Set("p", "/GeoPublisher/"+cleanAction)
+	queryEntry.RawQuery = query.Encode()
+	queryEntry.Fragment = ""
+
+	return []*url.URL{&pretty, &queryEntry}, nil
+}
+
+func pbootCMSSignature(appid, secret, timestamp string) string {
+	first := md5.Sum([]byte(appid + secret + timestamp))
+	firstHex := hex.EncodeToString(first[:])
+	second := md5.Sum([]byte(firstHex))
+	return hex.EncodeToString(second[:])
+}
+
+func pbootCMSStatusFromPublishType(publishType string) int {
+	if strings.TrimSpace(publishType) == "draft" {
+		return 0
+	}
+	return 1
+}
+
+func pbootCMSRouteUnavailable(err error) bool {
+	requestErr, ok := err.(*pbootCMSRequestError)
+	return ok && requestErr.routeUnavailable
+}
+
+func pbootCMSLooksLikeMissingRoute(text string) bool {
+	text = strings.ToLower(strings.TrimSpace(text))
+	return strings.Contains(text, "页面类文件不存在") ||
+		strings.Contains(text, "页面不存在") ||
+		strings.Contains(text, "404") ||
+		strings.Contains(text, "not found")
+}
+
+func firstStringFromMap(payload map[string]any, keys ...string) string {
+	for _, key := range keys {
+		if value := stringFromMap(payload, key); strings.TrimSpace(value) != "" {
+			return value
+		}
+	}
+	return ""
+}
+
+func stringFromMap(payload map[string]any, key string) string {
+	if payload == nil {
+		return ""
+	}
+	value, ok := payload[key]
+	if !ok || value == nil {
+		return ""
+	}
+	switch typed := value.(type) {
+	case string:
+		return typed
+	case float64:
+		if typed == float64(int64(typed)) {
+			return strconv.FormatInt(int64(typed), 10)
+		}
+		return strconv.FormatFloat(typed, 'f', -1, 64)
+	case int:
+		return strconv.Itoa(typed)
+	case int64:
+		return strconv.FormatInt(typed, 10)
+	case bool:
+		if typed {
+			return "true"
+		}
+		return "false"
+	default:
+		return fmt.Sprintf("%v", typed)
+	}
+}
+
+func stringPointerFromMap(payload map[string]any, key string) *string {
+	if value := strings.TrimSpace(stringFromMap(payload, key)); value != "" {
+		return &value
+	}
+	return nil
+}
+
+func boolFromMap(payload map[string]any, key string) bool {
+	if payload == nil {
+		return false
+	}
+	switch value := payload[key].(type) {
+	case bool:
+		return value
+	case string:
+		return strings.EqualFold(strings.TrimSpace(value), "true") || strings.TrimSpace(value) == "1"
+	case float64:
+		return value != 0
+	default:
+		return false
+	}
+}
+
+func pbootCMSOptionalString(value string) *string {
+	value = strings.TrimSpace(value)
+	if value == "" || value == "0" {
+		return nil
+	}
+	return &value
+}
diff --git a/server/internal/tenant/app/enterprise_site_service.go b/server/internal/tenant/app/enterprise_site_service.go
new file mode 100644
index 0000000..c18f74d
--- /dev/null
+++ b/server/internal/tenant/app/enterprise_site_service.go
@@ -0,0 +1,2412 @@
+package app
+
+import (
+	"bytes"
+	"context"
+	"encoding/base64"
+	"encoding/json"
+	"errors"
+	"net/http"
+	"net/url"
+	"regexp"
+	"strconv"
+	"strings"
+	"time"
+
+	"github.com/jackc/pgx/v5"
+	"github.com/jackc/pgx/v5/pgtype"
+	"github.com/jackc/pgx/v5/pgxpool"
+	"github.com/sergi/go-diff/diffmatchpatch"
+	"github.com/yuin/goldmark"
+	"github.com/yuin/goldmark/extension"
+	goldhtml "github.com/yuin/goldmark/renderer/html"
+	"golang.org/x/net/html"
+	"golang.org/x/net/html/atom"
+
+	"github.com/geo-platform/tenant-api/internal/shared/auth"
+	sharedcache "github.com/geo-platform/tenant-api/internal/shared/cache"
+	sharedcompliance "github.com/geo-platform/tenant-api/internal/shared/compliance"
+	"github.com/geo-platform/tenant-api/internal/shared/config"
+	"github.com/geo-platform/tenant-api/internal/shared/objectstorage"
+	"github.com/geo-platform/tenant-api/internal/shared/publicasset"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	tenantcompliance "github.com/geo-platform/tenant-api/internal/tenant/compliance"
+	"github.com/geo-platform/tenant-api/internal/tenant/repository"
+)
+
+type EnterpriseSiteService struct {
+	pool       *pgxpool.Pool
+	cfg        config.Provider
+	httpClient *http.Client
+	cache      sharedcache.Cache
+	compliance *tenantcompliance.Service
+	storage    objectstorage.Client
+}
+
+func NewEnterpriseSiteService(pool *pgxpool.Pool, cfg config.Provider) *EnterpriseSiteService {
+	return &EnterpriseSiteService{
+		pool: pool,
+		cfg:  cfg,
+		httpClient: &http.Client{
+			Timeout: 25 * time.Second,
+		},
+		compliance: tenantcompliance.NewService(pool, cfg, nil),
+	}
+}
+
+func (s *EnterpriseSiteService) WithCache(c sharedcache.Cache) *EnterpriseSiteService {
+	s.cache = c
+	return s
+}
+
+func (s *EnterpriseSiteService) WithObjectStorage(storage objectstorage.Client) *EnterpriseSiteService {
+	s.storage = storage
+	return s
+}
+
+type EnterpriseSiteConnectionResponse struct {
+	ID            int64                              `json:"id"`
+	Name          string                             `json:"name"`
+	SiteURL       string                             `json:"site_url"`
+	CMSType       string                             `json:"cms_type"`
+	AuthType      string                             `json:"auth_type"`
+	AppID         string                             `json:"appid"`
+	DefaultAcode  *string                            `json:"default_acode"`
+	DefaultMcode  *string                            `json:"default_mcode"`
+	DefaultScode  *string                            `json:"default_scode"`
+	Status        string                             `json:"status"`
+	PluginVersion *string                            `json:"plugin_version"`
+	SiteName      *string                            `json:"site_name"`
+	LastPingAt    *time.Time                         `json:"last_ping_at"`
+	LastSyncAt    *time.Time                         `json:"last_sync_at"`
+	LastPublishAt *time.Time                         `json:"last_publish_at"`
+	LastError     *string                            `json:"last_error"`
+	CategoryCount int                                `json:"category_count"`
+	LatestRecord  *EnterpriseSiteLatestPublishRecord `json:"latest_record,omitempty"`
+	CreatedAt     time.Time                          `json:"created_at"`
+	UpdatedAt     time.Time                          `json:"updated_at"`
+}
+
+type EnterpriseSiteLatestPublishRecord struct {
+	ID                 int64      `json:"id"`
+	ArticleID          int64      `json:"article_id"`
+	ArticleTitle       *string    `json:"article_title"`
+	Status             string     `json:"status"`
+	ExternalArticleID  *string    `json:"external_article_id"`
+	ExternalArticleURL *string    `json:"external_article_url"`
+	ErrorMessage       *string    `json:"error_message"`
+	PublishedAt        *time.Time `json:"published_at"`
+	CreatedAt          time.Time  `json:"created_at"`
+	UpdatedAt          time.Time  `json:"updated_at"`
+}
+
+type EnterpriseSiteCategoryResponse struct {
+	ID             int64          `json:"id"`
+	RemoteID       string         `json:"remote_id"`
+	ParentRemoteID *string        `json:"parent_remote_id"`
+	Name           string         `json:"name"`
+	Slug           *string        `json:"slug"`
+	Raw            map[string]any `json:"raw,omitempty"`
+	SyncedAt       time.Time      `json:"synced_at"`
+}
+
+type EnterpriseSiteCategoryItem struct {
+	RemoteID       string
+	ParentRemoteID *string
+	Name           string
+	Slug           *string
+	Raw            map[string]any
+}
+
+type EnterpriseSiteCapability struct {
+	CMSType       string  `json:"cms_type"`
+	PluginVersion *string `json:"plugin_version"`
+	SiteURL       string  `json:"site_url"`
+	SiteName      *string `json:"site_name"`
+	APIAuth       bool    `json:"api_auth"`
+}
+
+type CreateEnterpriseSiteConnectionRequest struct {
+	Name         string  `json:"name"`
+	SiteURL      string  `json:"site_url" binding:"required"`
+	CMSType      string  `json:"cms_type" binding:"required"`
+	AppID        string  `json:"appid" binding:"required"`
+	Secret       string  `json:"secret" binding:"required"`
+	DefaultAcode *string `json:"default_acode"`
+	DefaultMcode *string `json:"default_mcode"`
+	DefaultScode *string `json:"default_scode"`
+}
+
+type UpdateEnterpriseSiteConnectionRequest struct {
+	Name         *string `json:"name"`
+	SiteURL      *string `json:"site_url"`
+	AppID        *string `json:"appid"`
+	Secret       *string `json:"secret"`
+	DefaultAcode *string `json:"default_acode"`
+	DefaultMcode *string `json:"default_mcode"`
+	DefaultScode *string `json:"default_scode"`
+	Status       *string `json:"status"`
+}
+
+type PublishEnterpriseSiteArticleRequest struct {
+	ArticleID         int64   `json:"article_id" binding:"required"`
+	CategoryID        string  `json:"category_id"`
+	PublishType       string  `json:"publish_type"`
+	Author            *string `json:"author"`
+	Source            *string `json:"source"`
+	ArticleVersionID  *int64  `json:"article_version_id,omitempty"`
+	AckRecordID       *int64  `json:"ack_record_id,omitempty"`
+	CoverAssetURL     *string `json:"cover_asset_url,omitempty"`
+	CoverImageAssetID *int64  `json:"cover_image_asset_id,omitempty"`
+}
+
+type EnterpriseSitePublishResponse struct {
+	PublishBatchID     int64      `json:"publish_batch_id"`
+	PublishRecordID    int64      `json:"publish_record_id"`
+	ConnectionID       int64      `json:"connection_id"`
+	ArticleID          int64      `json:"article_id"`
+	Status             string     `json:"status"`
+	ExternalArticleID  *string    `json:"external_article_id"`
+	ExternalArticleURL *string    `json:"external_article_url"`
+	ErrorMessage       *string    `json:"error_message"`
+	PublishedAt        *time.Time `json:"published_at"`
+}
+
+type enterpriseSiteConnectionRecord struct {
+	ID                   int64
+	TenantID             int64
+	WorkspaceID          int64
+	Name                 string
+	SiteURL              string
+	CMSType              string
+	AuthType             string
+	AppID                string
+	CredentialCiphertext string
+	DefaultAcode         *string
+	DefaultMcode         *string
+	DefaultScode         *string
+	Status               string
+	PluginVersion        *string
+	SiteName             *string
+	LastPingAt           *time.Time
+	LastSyncAt           *time.Time
+	LastPublishAt        *time.Time
+	LastError            *string
+	CategoryCount        int
+	CreatedAt            time.Time
+	UpdatedAt            time.Time
+}
+
+type enterpriseSitePublishArticle struct {
+	ID                int64
+	BrandID           int64
+	CurrentVersionID  *int64
+	Title             string
+	HTMLContent       string
+	MarkdownContent   string
+	WordCount         int
+	SourceLabel       *string
+	CoverAssetURL     *string
+	CoverImageAssetID *int64
+}
+
+var enterpriseSiteSummaryTagPattern = regexp.MustCompile(`(?is)<[^>]+>`)
+var enterpriseSiteImageAttrPattern = regexp.MustCompile(`(?i)(<img\b[^>]*\s(?:src|data-src|_src)=["'])([^"']+)(["'])`)
+var enterpriseSiteMarkdownHeadingPattern = regexp.MustCompile(`^#{1,2}\s+(.+?)\s*#*\s*$`)
+var enterpriseSiteMalformedEditorImagePattern = regexp.MustCompile(`(?i)(<p\b[^<>]*?)\s+(<img\b)`)
+
+func (s *EnterpriseSiteService) List(ctx context.Context) ([]EnterpriseSiteConnectionResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	if actor.TenantID == 0 || workspaceID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
+	}
+
+	rows, err := s.pool.Query(ctx, `
+		WITH category_counts AS (
+			SELECT connection_id, COUNT(*)::int AS category_count
+			FROM enterprise_site_categories
+			WHERE tenant_id = $1 AND workspace_id = $2
+			GROUP BY connection_id
+		),
+		latest_records AS (
+			SELECT DISTINCT ON (pr.target_connection_id)
+				pr.target_connection_id,
+				pr.id,
+				pr.article_id,
+				COALESCE(av.title, NULLIF(a.wizard_state_json ->> 'title', '')) AS article_title,
+				pr.status,
+				pr.external_article_id,
+				pr.external_article_url,
+				pr.error_message,
+				pr.published_at,
+				pr.created_at,
+				pr.updated_at
+			FROM publish_records pr
+			LEFT JOIN articles a ON a.id = pr.article_id AND a.tenant_id = pr.tenant_id
+			LEFT JOIN article_versions av ON av.id = a.current_version_id
+			WHERE pr.tenant_id = $1
+			  AND pr.target_type = 'enterprise_site'
+			  AND pr.target_connection_id IS NOT NULL
+			ORDER BY pr.target_connection_id, pr.created_at DESC, pr.id DESC
+		)
+		SELECT
+			c.id,
+			c.tenant_id,
+			c.workspace_id,
+			c.name,
+			c.site_url,
+			c.cms_type,
+			c.auth_type,
+			c.appid,
+			c.credential_ciphertext,
+			c.default_acode,
+			c.default_mcode,
+			c.default_scode,
+			c.status,
+			c.plugin_version,
+			c.site_name,
+			c.last_ping_at,
+			c.last_sync_at,
+			c.last_publish_at,
+			c.last_error,
+			COALESCE(cc.category_count, 0),
+			c.created_at,
+			c.updated_at,
+			lr.id,
+			lr.article_id,
+			lr.article_title,
+			lr.status,
+			lr.external_article_id,
+			lr.external_article_url,
+			lr.error_message,
+			lr.published_at,
+			lr.created_at,
+			lr.updated_at
+		FROM enterprise_site_connections c
+		LEFT JOIN category_counts cc ON cc.connection_id = c.id
+		LEFT JOIN latest_records lr ON lr.target_connection_id = c.id
+		WHERE c.tenant_id = $1
+		  AND c.workspace_id = $2
+		  AND c.deleted_at IS NULL
+		ORDER BY c.created_at DESC, c.id DESC
+	`, actor.TenantID, workspaceID)
+	if err != nil {
+		return nil, response.ErrInternal(50220, "enterprise_site_query_failed", "failed to list enterprise sites")
+	}
+	defer rows.Close()
+
+	items := make([]EnterpriseSiteConnectionResponse, 0)
+	for rows.Next() {
+		record, latest, scanErr := scanEnterpriseSiteConnectionRow(rows)
+		if scanErr != nil {
+			return nil, response.ErrInternal(50220, "enterprise_site_scan_failed", "failed to parse enterprise site")
+		}
+		item := enterpriseSiteConnectionResponse(record)
+		item.LatestRecord = latest
+		enterpriseSiteNormalizeLegacyPublishErrorState(&item)
+		items = append(items, item)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, response.ErrInternal(50220, "enterprise_site_scan_failed", "failed to iterate enterprise sites")
+	}
+	return items, nil
+}
+
+func (s *EnterpriseSiteService) Create(ctx context.Context, req CreateEnterpriseSiteConnectionRequest) (*EnterpriseSiteConnectionResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	if actor.TenantID == 0 || workspaceID == 0 || actor.UserID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
+	}
+
+	normalized, err := normalizeCreateEnterpriseSiteConnectionRequest(req)
+	if err != nil {
+		return nil, err
+	}
+	ciphertext, err := encryptEnterpriseSiteCredential(normalized.Secret, s.credentialKeyMaterial())
+	if err != nil {
+		return nil, response.ErrInternal(50221, "enterprise_site_secret_encrypt_failed", "failed to store enterprise site credential")
+	}
+
+	var id int64
+	if err := s.pool.QueryRow(ctx, `
+		INSERT INTO enterprise_site_connections (
+			tenant_id, workspace_id, created_by_user_id, name, site_url, cms_type, auth_type,
+			appid, credential_ciphertext, default_acode, default_mcode, default_scode, status
+		)
+		VALUES ($1, $2, $3, $4, $5, $6, 'native_api', $7, $8, $9, $10, $11, 'draft')
+		RETURNING id
+	`,
+		actor.TenantID,
+		workspaceID,
+		actor.UserID,
+		normalized.Name,
+		normalized.SiteURL,
+		normalized.CMSType,
+		normalized.AppID,
+		ciphertext,
+		normalized.DefaultAcode,
+		normalized.DefaultMcode,
+		normalized.DefaultScode,
+	).Scan(&id); err != nil {
+		return nil, response.ErrConflict(40941, "enterprise_site_already_exists", "enterprise site connection already exists")
+	}
+
+	return s.Get(ctx, id)
+}
+
+func (s *EnterpriseSiteService) Update(ctx context.Context, id int64, req UpdateEnterpriseSiteConnectionRequest) (*EnterpriseSiteConnectionResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	if actor.TenantID == 0 || workspaceID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
+	}
+
+	current, err := s.loadConnection(ctx, actor.TenantID, workspaceID, id)
+	if err != nil {
+		return nil, err
+	}
+	if current.Status == "disabled" && req.Status == nil {
+		return nil, response.ErrConflict(40942, "enterprise_site_disabled", "enterprise site connection is disabled")
+	}
+
+	next := *current
+	if req.Name != nil {
+		name := strings.TrimSpace(*req.Name)
+		if name == "" {
+			return nil, response.ErrBadRequest(40041, "enterprise_site_name_required", "site name is required")
+		}
+		next.Name = name
+	}
+	if req.SiteURL != nil {
+		siteURL, normalizeErr := normalizeEnterpriseSiteURL(*req.SiteURL)
+		if normalizeErr != nil {
+			return nil, normalizeErr
+		}
+		next.SiteURL = siteURL
+	}
+	if req.AppID != nil {
+		appid := strings.TrimSpace(*req.AppID)
+		if appid == "" {
+			return nil, response.ErrBadRequest(40042, "enterprise_site_appid_required", "appid is required")
+		}
+		next.AppID = appid
+	}
+	if req.DefaultAcode != nil {
+		next.DefaultAcode = normalizeOptionalEnterpriseCode(*req.DefaultAcode)
+	}
+	if req.DefaultMcode != nil {
+		next.DefaultMcode = normalizeOptionalEnterpriseCode(*req.DefaultMcode)
+	}
+	if req.DefaultScode != nil {
+		next.DefaultScode = normalizeOptionalEnterpriseCode(*req.DefaultScode)
+	}
+	if req.Status != nil {
+		status := strings.TrimSpace(*req.Status)
+		if !validEnterpriseSiteStatus(status) {
+			return nil, response.ErrBadRequest(40043, "invalid_enterprise_site_status", "status is invalid")
+		}
+		next.Status = status
+	}
+	ciphertext := next.CredentialCiphertext
+	if req.Secret != nil && strings.TrimSpace(*req.Secret) != "" {
+		encrypted, encryptErr := encryptEnterpriseSiteCredential(*req.Secret, s.credentialKeyMaterial())
+		if encryptErr != nil {
+			return nil, response.ErrInternal(50221, "enterprise_site_secret_encrypt_failed", "failed to store enterprise site credential")
+		}
+		ciphertext = encrypted
+	}
+
+	if _, err := s.pool.Exec(ctx, `
+		UPDATE enterprise_site_connections
+		SET name = $1,
+		    site_url = $2,
+		    appid = $3,
+		    credential_ciphertext = $4,
+		    default_acode = $5,
+		    default_mcode = $6,
+		    default_scode = $7,
+		    status = $8,
+		    last_error = CASE WHEN $8 IN ('draft', 'connected') THEN NULL ELSE last_error END,
+		    updated_at = NOW()
+		WHERE id = $9
+		  AND tenant_id = $10
+		  AND workspace_id = $11
+		  AND deleted_at IS NULL
+	`,
+		next.Name,
+		next.SiteURL,
+		next.AppID,
+		ciphertext,
+		next.DefaultAcode,
+		next.DefaultMcode,
+		next.DefaultScode,
+		next.Status,
+		id,
+		actor.TenantID,
+		workspaceID,
+	); err != nil {
+		return nil, response.ErrConflict(40941, "enterprise_site_already_exists", "enterprise site connection already exists")
+	}
+
+	return s.Get(ctx, id)
+}
+
+func (s *EnterpriseSiteService) Get(ctx context.Context, id int64) (*EnterpriseSiteConnectionResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	record, err := s.loadConnection(ctx, actor.TenantID, workspaceID, id)
+	if err != nil {
+		return nil, err
+	}
+	item := enterpriseSiteConnectionResponse(record)
+	return &item, nil
+}
+
+func (s *EnterpriseSiteService) Delete(ctx context.Context, id int64) error {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	command, err := s.pool.Exec(ctx, `
+		UPDATE enterprise_site_connections
+		SET deleted_at = NOW(),
+		    updated_at = NOW()
+		WHERE id = $1
+		  AND tenant_id = $2
+		  AND workspace_id = $3
+		  AND deleted_at IS NULL
+	`, id, actor.TenantID, workspaceID)
+	if err != nil {
+		return response.ErrInternal(50222, "enterprise_site_delete_failed", "failed to delete enterprise site")
+	}
+	if command.RowsAffected() == 0 {
+		return response.ErrNotFound(40441, "enterprise_site_not_found", "enterprise site connection not found")
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) Ping(ctx context.Context, id int64) (*EnterpriseSiteCapability, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	connection, err := s.loadConnection(ctx, actor.TenantID, workspaceID, id)
+	if err != nil {
+		return nil, err
+	}
+	credential, err := s.connectionCredential(connection)
+	if err != nil {
+		return nil, err
+	}
+	publisher := s.publisherFor(connection.CMSType)
+	capability, raw, err := publisher.Ping(ctx, credential)
+	if err != nil {
+		_ = s.markConnectionError(ctx, connection.ID, actor.TenantID, workspaceID, err)
+		return nil, response.ErrBadRequest(40044, "enterprise_site_ping_failed", sanitizeEnterpriseSiteError(err))
+	}
+	pluginVersion := capability.PluginVersion
+	siteName := capability.SiteName
+	if _, err := s.pool.Exec(ctx, `
+		UPDATE enterprise_site_connections
+		SET status = 'connected',
+		    plugin_version = $1,
+		    site_name = $2,
+		    last_ping_at = NOW(),
+		    last_error = NULL,
+		    updated_at = NOW()
+		WHERE id = $3 AND tenant_id = $4 AND workspace_id = $5 AND deleted_at IS NULL
+	`, pluginVersion, siteName, connection.ID, actor.TenantID, workspaceID); err != nil {
+		return nil, response.ErrInternal(50223, "enterprise_site_ping_update_failed", "failed to update enterprise site ping")
+	}
+	_ = raw
+	return capability, nil
+}
+
+func (s *EnterpriseSiteService) SyncCategories(ctx context.Context, id int64) ([]EnterpriseSiteCategoryResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	connection, err := s.loadConnection(ctx, actor.TenantID, workspaceID, id)
+	if err != nil {
+		return nil, err
+	}
+	credential, err := s.connectionCredential(connection)
+	if err != nil {
+		return nil, err
+	}
+
+	items, _, err := s.publisherFor(connection.CMSType).Categories(ctx, credential)
+	if err != nil {
+		return nil, response.ErrBadRequest(40045, "enterprise_site_category_sync_failed", sanitizeEnterpriseSiteError(err))
+	}
+	if len(items) == 0 {
+		return nil, response.ErrBadRequest(40046, "enterprise_site_categories_empty", "CMS did not return any publishable categories")
+	}
+
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return nil, response.ErrInternal(50224, "enterprise_site_category_sync_begin_failed", "failed to sync enterprise site categories")
+	}
+	defer tx.Rollback(ctx)
+
+	if _, err := tx.Exec(ctx, `
+		DELETE FROM enterprise_site_categories
+		WHERE tenant_id = $1 AND workspace_id = $2 AND connection_id = $3
+	`, actor.TenantID, workspaceID, connection.ID); err != nil {
+		return nil, response.ErrInternal(50224, "enterprise_site_category_clear_failed", "failed to sync enterprise site categories")
+	}
+
+	for _, item := range items {
+		rawJSON, marshalErr := json.Marshal(item.Raw)
+		if marshalErr != nil {
+			return nil, response.ErrInternal(50224, "enterprise_site_category_payload_failed", "failed to sync enterprise site categories")
+		}
+		if _, err := tx.Exec(ctx, `
+			INSERT INTO enterprise_site_categories (
+				tenant_id, workspace_id, connection_id, remote_id, parent_remote_id, name, slug, raw_payload_json
+			)
+			VALUES ($1, $2, $3, $4, $5, $6, $7, $8)
+		`,
+			actor.TenantID,
+			workspaceID,
+			connection.ID,
+			item.RemoteID,
+			item.ParentRemoteID,
+			item.Name,
+			item.Slug,
+			rawJSON,
+		); err != nil {
+			return nil, response.ErrInternal(50224, "enterprise_site_category_insert_failed", "failed to sync enterprise site categories")
+		}
+	}
+
+	if _, err := tx.Exec(ctx, `
+		UPDATE enterprise_site_connections
+		SET status = 'connected',
+		    last_sync_at = NOW(),
+		    last_error = NULL,
+		    updated_at = NOW()
+		WHERE id = $1 AND tenant_id = $2 AND workspace_id = $3 AND deleted_at IS NULL
+	`, connection.ID, actor.TenantID, workspaceID); err != nil {
+		return nil, response.ErrInternal(50224, "enterprise_site_sync_update_failed", "failed to update enterprise site sync state")
+	}
+
+	if err := tx.Commit(ctx); err != nil {
+		return nil, response.ErrInternal(50224, "enterprise_site_category_sync_commit_failed", "failed to sync enterprise site categories")
+	}
+	return s.Categories(ctx, id)
+}
+
+func (s *EnterpriseSiteService) Categories(ctx context.Context, id int64) ([]EnterpriseSiteCategoryResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	if _, err := s.loadConnection(ctx, actor.TenantID, workspaceID, id); err != nil {
+		return nil, err
+	}
+	rows, err := s.pool.Query(ctx, `
+		SELECT id, remote_id, parent_remote_id, name, slug, raw_payload_json, synced_at
+		FROM enterprise_site_categories
+		WHERE tenant_id = $1
+		  AND workspace_id = $2
+		  AND connection_id = $3
+		ORDER BY COALESCE(parent_remote_id, ''), name ASC, id ASC
+	`, actor.TenantID, workspaceID, id)
+	if err != nil {
+		return nil, response.ErrInternal(50225, "enterprise_site_category_query_failed", "failed to list enterprise site categories")
+	}
+	defer rows.Close()
+
+	items := make([]EnterpriseSiteCategoryResponse, 0)
+	for rows.Next() {
+		var item EnterpriseSiteCategoryResponse
+		var raw []byte
+		if err := rows.Scan(&item.ID, &item.RemoteID, &item.ParentRemoteID, &item.Name, &item.Slug, &raw, &item.SyncedAt); err != nil {
+			return nil, response.ErrInternal(50225, "enterprise_site_category_scan_failed", "failed to parse enterprise site category")
+		}
+		if len(raw) > 0 {
+			item.Raw = map[string]any{}
+			_ = json.Unmarshal(raw, &item.Raw)
+		}
+		items = append(items, item)
+	}
+	if err := rows.Err(); err != nil {
+		return nil, response.ErrInternal(50225, "enterprise_site_category_scan_failed", "failed to iterate enterprise site categories")
+	}
+	return items, nil
+}
+
+func (s *EnterpriseSiteService) PublishArticle(ctx context.Context, connectionID int64, req PublishEnterpriseSiteArticleRequest) (*EnterpriseSitePublishResponse, error) {
+	actor := auth.MustActor(ctx)
+	workspaceID := auth.CurrentWorkspaceID(ctx)
+	brandID, err := requireCurrentBrandID(ctx)
+	if err != nil {
+		return nil, err
+	}
+	if actor.TenantID == 0 || workspaceID == 0 || actor.UserID == 0 {
+		return nil, response.ErrUnauthorized(40132, "workspace_scope_missing", "workspace context is required")
+	}
+
+	connection, err := s.loadConnection(ctx, actor.TenantID, workspaceID, connectionID)
+	if err != nil {
+		return nil, err
+	}
+	if connection.Status == "disabled" {
+		return nil, response.ErrConflict(40942, "enterprise_site_disabled", "enterprise site connection is disabled")
+	}
+
+	article, err := s.loadPublishArticle(ctx, actor.TenantID, brandID, req.ArticleID, req.ArticleVersionID)
+	if err != nil {
+		return nil, err
+	}
+	categoryID := strings.TrimSpace(req.CategoryID)
+	if categoryID == "" {
+		categoryID = strings.TrimSpace(enterpriseSiteStringPointerValue(connection.DefaultScode))
+	}
+	if categoryID == "" {
+		return nil, response.ErrBadRequest(40047, "enterprise_site_category_required", "category_id is required")
+	}
+	if err := s.ensureCategoryExists(ctx, actor.TenantID, workspaceID, connection.ID, categoryID); err != nil {
+		return nil, err
+	}
+
+	contentHTML := enterpriseSiteNormalizeStoredContent(article.HTMLContent)
+	markdownContent := enterpriseSiteNormalizeStoredContent(article.MarkdownContent)
+	if contentHTML != "" && !enterpriseSiteContentLooksLikeHTML(contentHTML) {
+		if markdownContent == "" {
+			markdownContent = contentHTML
+		}
+		contentHTML = ""
+	}
+	markdownContent = enterpriseSiteStripLeadingTitleHeadingMarkdown(markdownContent, article.Title)
+	if contentHTML == "" {
+		contentHTML, err = markdownToEnterpriseSiteHTML(markdownContent)
+		if err != nil {
+			return nil, response.ErrInternal(50226, "enterprise_site_markdown_render_failed", "failed to render article content")
+		}
+	}
+	contentHTML = enterpriseSiteStripLeadingTitleHeadingHTML(contentHTML, article.Title)
+	if strings.TrimSpace(contentHTML) == "" {
+		return nil, response.ErrBadRequest(40048, "enterprise_site_article_empty", "article content is empty")
+	}
+
+	effectiveVersionID, err := s.compliance.ResolvePublishableVersion(ctx, actor.TenantID, article.ID, article.CurrentVersionID)
+	if err != nil {
+		return nil, err
+	}
+	gate, err := s.compliance.GateForPublish(ctx, tenantcompliance.GateForPublishRequest{
+		TenantID:         actor.TenantID,
+		ArticleID:        article.ID,
+		ArticleVersionID: effectiveVersionID,
+		ActorID:          actor.UserID,
+		TargetPlatforms:  []string{connection.CMSType},
+		AckRecordID:      req.AckRecordID,
+		TriggerSource:    "publish_gate",
+	})
+	if err != nil {
+		return nil, compliancePublishError(err, gate)
+	}
+	if gate != nil {
+		switch gate.Decision {
+		case sharedcompliance.GateDecisionBlock:
+			return nil, compliancePublishError(response.ErrConflict(41001, "compliance_blocked", "content compliance blocked this publish request"), gate)
+		case sharedcompliance.GateDecisionNeedsAck:
+			return nil, compliancePublishError(response.ErrConflict(41002, "compliance_needs_ack", "content compliance requires acknowledgement before publishing"), gate)
+		}
+	}
+
+	publishType := normalizeEnterprisePublishType(req.PublishType)
+	coverURLInput, coverImageAssetID := enterpriseSitePublishCoverInput(article, req)
+	contentHTML, coverURL := s.prepareEnterpriseSitePublishAssets(
+		ctx,
+		actor.TenantID,
+		contentHTML,
+		coverURLInput,
+		coverImageAssetID,
+	)
+	requestPayload := cmsPublishRequest{
+		ArticleID:   article.ID,
+		Title:       article.Title,
+		ContentHTML: contentHTML,
+		CategoryID:  categoryID,
+		Description: enterpriseSiteDescription(contentHTML, markdownContent),
+		Author:      strings.TrimSpace(enterpriseSiteStringPointerValue(req.Author)),
+		Source:      strings.TrimSpace(enterpriseSiteStringPointerValue(req.Source)),
+		CoverURL:    coverURL,
+		PublishType: publishType,
+	}
+	if requestPayload.Author == "" {
+		requestPayload.Author = "Geo SaaS"
+	}
+	if requestPayload.Source == "" {
+		requestPayload.Source = "Geo SaaS"
+	}
+
+	credential, err := s.connectionCredential(connection)
+	if err != nil {
+		return nil, err
+	}
+	requestJSON, err := json.Marshal(map[string]any{
+		"connection_id":                connection.ID,
+		"cms_type":                     connection.CMSType,
+		"category_id":                  categoryID,
+		"publish_type":                 publishType,
+		"article_id":                   article.ID,
+		"article_version_id":           effectiveVersionID,
+		"requested_article_version_id": req.ArticleVersionID,
+		"cover_image_asset_id":         coverImageAssetID,
+	})
+	if err != nil {
+		return nil, response.ErrInternal(50227, "enterprise_site_publish_payload_failed", "failed to create publish record")
+	}
+
+	publishBatchID, publishRecordID, err := s.createEnterprisePublishRecord(ctx, actor, article, connection, publishType, requestJSON, effectiveVersionID, req.AckRecordID, gate)
+	if err != nil {
+		return nil, err
+	}
+
+	result, raw, publishErr := s.publisherFor(connection.CMSType).Publish(ctx, credential, requestPayload)
+	if publishErr != nil {
+		errorMessage := sanitizeEnterpriseSiteError(publishErr)
+		if updateErr := s.finishEnterprisePublishRecord(ctx, actor.TenantID, workspaceID, publishBatchID, publishRecordID, article.ID, connection.ID, "failed", nil, nil, nil, nil, &errorMessage); updateErr != nil {
+			return nil, updateErr
+		}
+		return &EnterpriseSitePublishResponse{
+			PublishBatchID:  publishBatchID,
+			PublishRecordID: publishRecordID,
+			ConnectionID:    connection.ID,
+			ArticleID:       article.ID,
+			Status:          "failed",
+			ErrorMessage:    &errorMessage,
+		}, nil
+	}
+
+	rawJSON, err := json.Marshal(raw)
+	if err != nil {
+		return nil, response.ErrInternal(50228, "enterprise_site_publish_response_failed", "failed to persist CMS response")
+	}
+	externalID := normalizeStringPointer(&result.RemoteID)
+	externalURL := normalizeStringPointer(&result.URL)
+	publishedAt := time.Now().UTC()
+	status := "success"
+	if publishType == "draft" {
+		status = "success"
+	}
+	if err := s.finishEnterprisePublishRecord(ctx, actor.TenantID, workspaceID, publishBatchID, publishRecordID, article.ID, connection.ID, status, externalID, externalURL, &rawJSON, &publishedAt, nil); err != nil {
+		return nil, err
+	}
+
+	invalidateArticleCaches(ctx, s.cache, actor.TenantID, &article.ID)
+	return &EnterpriseSitePublishResponse{
+		PublishBatchID:     publishBatchID,
+		PublishRecordID:    publishRecordID,
+		ConnectionID:       connection.ID,
+		ArticleID:          article.ID,
+		Status:             status,
+		ExternalArticleID:  externalID,
+		ExternalArticleURL: externalURL,
+		PublishedAt:        &publishedAt,
+	}, nil
+}
+
+func (s *EnterpriseSiteService) createEnterprisePublishRecord(
+	ctx context.Context,
+	actor auth.Actor,
+	article enterpriseSitePublishArticle,
+	connection *enterpriseSiteConnectionRecord,
+	publishType string,
+	requestJSON []byte,
+	articleVersionID int64,
+	ackRecordID *int64,
+	gate *tenantcompliance.GateOutcome,
+) (int64, int64, error) {
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return 0, 0, response.ErrInternal(50227, "enterprise_site_publish_begin_failed", "failed to create publish record")
+	}
+	defer tx.Rollback(ctx)
+
+	var publishBatchID int64
+	if err := tx.QueryRow(ctx, `
+		INSERT INTO publish_batches (tenant_id, article_id, initiator_user_id, status, publish_type, cover_asset_url)
+		VALUES ($1, $2, $3, 'publishing', $4, $5)
+		RETURNING id
+	`, actor.TenantID, article.ID, actor.UserID, publishType, normalizeStringPointer(article.CoverAssetURL)).Scan(&publishBatchID); err != nil {
+		return 0, 0, response.ErrInternal(50227, "enterprise_site_publish_batch_failed", "failed to create publish record")
+	}
+
+	var publishRecordID int64
+	if err := tx.QueryRow(ctx, `
+		INSERT INTO publish_records (
+			tenant_id, publish_batch_id, article_id, platform_account_id, platform_id, status,
+			request_payload_json, target_type, target_connection_id
+		)
+		VALUES ($1, $2, $3, NULL, $4, 'publishing', $5, 'enterprise_site', $6)
+		RETURNING id
+	`, actor.TenantID, publishBatchID, article.ID, connection.CMSType, requestJSON, connection.ID).Scan(&publishRecordID); err != nil {
+		return 0, 0, response.ErrInternal(50227, "enterprise_site_publish_record_failed", "failed to create publish record")
+	}
+
+	if _, err := tx.Exec(ctx, `
+		UPDATE articles
+		SET publish_status = 'publishing', updated_at = NOW()
+		WHERE id = $1 AND tenant_id = $2 AND deleted_at IS NULL
+	`, article.ID, actor.TenantID); err != nil {
+		return 0, 0, response.ErrInternal(50227, "enterprise_site_article_publish_status_failed", "failed to update article publish status")
+	}
+
+	if err := s.consumeEnterprisePublishAckTx(ctx, tx, ackRecordID, gate, actor.TenantID, article.ID, articleVersionID); err != nil {
+		return 0, 0, err
+	}
+
+	if err := tx.Commit(ctx); err != nil {
+		return 0, 0, response.ErrInternal(50227, "enterprise_site_publish_commit_failed", "failed to create publish record")
+	}
+	invalidateArticleCaches(ctx, s.cache, actor.TenantID, &article.ID)
+	return publishBatchID, publishRecordID, nil
+}
+
+func (s *EnterpriseSiteService) consumeEnterprisePublishAckTx(
+	ctx context.Context,
+	tx pgx.Tx,
+	ackRecordID *int64,
+	gate *tenantcompliance.GateOutcome,
+	tenantID int64,
+	articleID int64,
+	articleVersionID int64,
+) error {
+	if ackRecordID == nil {
+		return nil
+	}
+	if gate == nil || gate.Result == nil {
+		return response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record cannot be consumed without a matching compliance result")
+	}
+	consumed, err := s.compliance.ConsumeAckTx(ctx, tx, *ackRecordID, tenantcompliance.ConsumeAckQuery{
+		TenantID:          tenantID,
+		ArticleID:         articleID,
+		ArticleVersionID:  articleVersionID,
+		CheckRecordID:     gate.Result.RecordID,
+		ContentHash:       gate.Result.ContentHash,
+		PolicyFingerprint: gate.Result.PolicyFingerprint,
+		ConsumedByJobID:   nil,
+	})
+	if err != nil {
+		return response.ErrInternal(50227, "enterprise_site_publish_ack_failed", "failed to consume compliance acknowledgement")
+	}
+	if !consumed {
+		return response.ErrBadRequest(41003, "compliance_ack_mismatch", "ack record is invalid or expired")
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) finishEnterprisePublishRecord(
+	ctx context.Context,
+	tenantID int64,
+	workspaceID int64,
+	publishBatchID int64,
+	publishRecordID int64,
+	articleID int64,
+	connectionID int64,
+	status string,
+	externalID *string,
+	externalURL *string,
+	responseJSON *[]byte,
+	publishedAt *time.Time,
+	errorMessage *string,
+) error {
+	tx, err := s.pool.Begin(ctx)
+	if err != nil {
+		return response.ErrInternal(50228, "enterprise_site_publish_finish_begin_failed", "failed to update publish record")
+	}
+	defer tx.Rollback(ctx)
+
+	var responsePayload []byte
+	if responseJSON != nil {
+		responsePayload = *responseJSON
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE publish_records
+		SET status = $1,
+		    external_article_id = $2,
+		    external_article_url = $3,
+		    external_manage_url = $3,
+		    response_payload_json = $4,
+		    published_at = $5,
+		    error_message = $6,
+		    updated_at = NOW()
+		WHERE id = $7 AND tenant_id = $8
+	`, status, externalID, externalURL, nullableJSON(responsePayload), publishedAt, errorMessage, publishRecordID, tenantID); err != nil {
+		return response.ErrInternal(50228, "enterprise_site_publish_record_update_failed", "failed to update publish record")
+	}
+
+	batchStatus, err := recalculatePublishBatchStatus(ctx, tx, publishBatchID)
+	if err != nil {
+		return err
+	}
+	if _, err := tx.Exec(ctx, `
+		UPDATE publish_batches
+		SET status = $1, updated_at = NOW()
+		WHERE id = $2 AND tenant_id = $3
+	`, batchStatus, publishBatchID, tenantID); err != nil {
+		return response.ErrInternal(50228, "enterprise_site_publish_batch_update_failed", "failed to update publish batch")
+	}
+
+	articleStatus := publishBatchStatusToArticleStatus(batchStatus)
+	if _, err := tx.Exec(ctx, `
+		UPDATE articles
+		SET publish_status = $1, updated_at = NOW()
+		WHERE id = $2 AND tenant_id = $3 AND deleted_at IS NULL
+	`, articleStatus, articleID, tenantID); err != nil {
+		return response.ErrInternal(50228, "enterprise_site_article_publish_update_failed", "failed to update article publish status")
+	}
+
+	if status == "success" {
+		if _, err := tx.Exec(ctx, `
+			UPDATE enterprise_site_connections
+			SET status = 'connected',
+			    last_publish_at = NOW(),
+			    last_error = NULL,
+			    updated_at = NOW()
+			WHERE id = $1 AND tenant_id = $2 AND workspace_id = $3 AND deleted_at IS NULL
+		`, connectionID, tenantID, workspaceID); err != nil {
+			return response.ErrInternal(50228, "enterprise_site_publish_connection_update_failed", "failed to update enterprise site")
+		}
+	}
+
+	if err := tx.Commit(ctx); err != nil {
+		return response.ErrInternal(50228, "enterprise_site_publish_finish_commit_failed", "failed to update publish record")
+	}
+	invalidateArticleCaches(ctx, s.cache, tenantID, &articleID)
+	return nil
+}
+
+func (s *EnterpriseSiteService) loadPublishArticle(ctx context.Context, tenantID, brandID, articleID int64, requestedVersionID *int64) (enterpriseSitePublishArticle, error) {
+	var article enterpriseSitePublishArticle
+	var wizardStateJSON []byte
+	if err := s.pool.QueryRow(ctx, `
+		SELECT
+			a.id,
+			a.brand_id,
+			a.current_version_id,
+			COALESCE(av.title, NULLIF(a.wizard_state_json ->> 'title', ''), '未命名文章'),
+			COALESCE(av.word_count, 0),
+			av.source_label,
+			a.wizard_state_json
+		FROM articles a
+		LEFT JOIN article_versions av ON av.id = a.current_version_id
+		WHERE a.id = $1
+		  AND a.tenant_id = $2
+		  AND a.brand_id = $3
+		  AND a.deleted_at IS NULL
+		  AND a.generate_status = 'completed'
+	`, articleID, tenantID, brandID).Scan(
+		&article.ID,
+		&article.BrandID,
+		&article.CurrentVersionID,
+		&article.Title,
+		&article.WordCount,
+		&article.SourceLabel,
+		&wizardStateJSON,
+	); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return article, response.ErrNotFound(40411, "article_not_found", "article not found")
+		}
+		return article, response.ErrInternal(50229, "enterprise_site_article_lookup_failed", "failed to load article")
+	}
+	if err := s.populatePublishArticleContent(ctx, &article, wizardStateJSON, requestedVersionID); err != nil {
+		return article, err
+	}
+	article.CoverAssetURL = resolveArticleCoverAssetURL(wizardStateJSON)
+	article.CoverImageAssetID = resolveArticleCoverImageAssetID(wizardStateJSON)
+	article.Title = strings.TrimSpace(article.Title)
+	if article.Title == "" {
+		article.Title = "未命名文章"
+	}
+	return article, nil
+}
+
+func (s *EnterpriseSiteService) populatePublishArticleContent(ctx context.Context, article *enterpriseSitePublishArticle, wizardStateJSON []byte, requestedVersionID *int64) error {
+	if article == nil {
+		return nil
+	}
+
+	if requestedVersionID != nil && *requestedVersionID > 0 {
+		if err := s.loadPublishArticleVersionContent(ctx, article, *requestedVersionID, true); err != nil {
+			return err
+		}
+		article.CurrentVersionID = requestedVersionID
+		if enterpriseSitePublishArticleContentInvalid(article.HTMLContent, article.MarkdownContent) {
+			if err := s.loadPublishArticleVersionSnapshotContent(ctx, article, *requestedVersionID, true); err != nil {
+				return err
+			}
+		}
+		if enterpriseSitePublishArticleContentInvalid(article.HTMLContent, article.MarkdownContent) {
+			return s.populatePublishArticleWizardFallback(article, wizardStateJSON)
+		}
+		return nil
+	}
+
+	if article.CurrentVersionID != nil && *article.CurrentVersionID > 0 {
+		if err := s.loadPublishArticleVersionContent(ctx, article, *article.CurrentVersionID, false); err != nil && !errors.Is(err, pgx.ErrNoRows) {
+			return err
+		}
+	}
+	if !enterpriseSitePublishArticleContentInvalid(article.HTMLContent, article.MarkdownContent) {
+		return nil
+	}
+
+	if err := s.loadLatestPublishArticleVersionContent(ctx, article); err != nil && !errors.Is(err, pgx.ErrNoRows) {
+		return err
+	}
+	if article.CurrentVersionID != nil && *article.CurrentVersionID > 0 && enterpriseSitePublishArticleContentInvalid(article.HTMLContent, article.MarkdownContent) {
+		if err := s.loadPublishArticleVersionSnapshotContent(ctx, article, *article.CurrentVersionID, false); err != nil && !errors.Is(err, pgx.ErrNoRows) {
+			return err
+		}
+	}
+	return s.populatePublishArticleWizardFallback(article, wizardStateJSON)
+}
+
+func (s *EnterpriseSiteService) loadPublishArticleVersionContent(ctx context.Context, article *enterpriseSitePublishArticle, versionID int64, strict bool) error {
+	content, err := repository.LoadArticleVersionContent(ctx, s.pool, article.ID, versionID)
+	if err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			if !strict {
+				return pgx.ErrNoRows
+			}
+			return response.ErrBadRequest(41005, "invalid_article_version", "article_version_id does not belong to this article")
+		}
+		return response.ErrInternal(50231, "enterprise_site_article_version_reconstruct_failed", "failed to reconstruct article version")
+	}
+	if content != nil {
+		article.HTMLContent = strings.TrimSpace(enterpriseSiteStringPointerValue(content.HTMLContent))
+		article.MarkdownContent = strings.TrimSpace(enterpriseSiteStringPointerValue(content.MarkdownContent))
+	}
+	if err := s.loadPublishArticleVersionMetadata(ctx, article, versionID); err != nil {
+		return err
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) loadPublishArticleVersionMetadata(ctx context.Context, article *enterpriseSitePublishArticle, versionID int64) error {
+	var title string
+	var sourceLabel *string
+	if err := s.pool.QueryRow(ctx, `
+		SELECT COALESCE(title, ''), COALESCE(word_count, 0), source_label
+		FROM article_versions
+		WHERE id = $1 AND article_id = $2
+	`, versionID, article.ID).Scan(&title, &article.WordCount, &sourceLabel); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return response.ErrBadRequest(41005, "invalid_article_version", "article_version_id does not belong to this article")
+		}
+		return response.ErrInternal(50231, "enterprise_site_article_version_lookup_failed", "failed to load article version")
+	}
+	if strings.TrimSpace(title) != "" {
+		article.Title = strings.TrimSpace(title)
+	}
+	if sourceLabel != nil {
+		article.SourceLabel = sourceLabel
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) loadPublishArticleVersionSnapshotContent(ctx context.Context, article *enterpriseSitePublishArticle, versionID int64, strict bool) error {
+	if article == nil {
+		return nil
+	}
+	var snapshot string
+	if err := s.pool.QueryRow(ctx, `
+		SELECT COALESCE(plaintext_snapshot, '')
+		FROM article_versions
+		WHERE id = $1 AND article_id = $2
+	`, versionID, article.ID).Scan(&snapshot); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			if !strict {
+				return pgx.ErrNoRows
+			}
+			return response.ErrBadRequest(41005, "invalid_article_version", "article_version_id does not belong to this article")
+		}
+		return response.ErrInternal(50231, "enterprise_site_article_version_snapshot_lookup_failed", "failed to load article version")
+	}
+	snapshot = enterpriseSiteNormalizeStoredContent(snapshot)
+	if strings.TrimSpace(snapshot) != "" {
+		article.MarkdownContent = snapshot
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) loadLatestPublishArticleVersionContent(ctx context.Context, article *enterpriseSitePublishArticle) error {
+	var versionID int64
+	var title string
+	var sourceLabel *string
+	err := s.pool.QueryRow(ctx, `
+		SELECT id, COALESCE(title, ''), COALESCE(word_count, 0), source_label
+		FROM article_versions
+		WHERE article_id = $1
+		ORDER BY version_no DESC, id DESC
+		LIMIT 1
+	`, article.ID).Scan(&versionID, &title, &article.WordCount, &sourceLabel)
+	if err != nil {
+		return err
+	}
+	article.CurrentVersionID = &versionID
+	if strings.TrimSpace(article.Title) == "" && strings.TrimSpace(title) != "" {
+		article.Title = strings.TrimSpace(title)
+	}
+	if article.SourceLabel == nil && sourceLabel != nil {
+		article.SourceLabel = sourceLabel
+	}
+	return s.loadPublishArticleVersionContent(ctx, article, versionID, false)
+}
+
+func (s *EnterpriseSiteService) populatePublishArticleWizardFallback(article *enterpriseSitePublishArticle, wizardStateJSON []byte) error {
+	if !enterpriseSitePublishArticleContentInvalid(article.HTMLContent, article.MarkdownContent) {
+		return nil
+	}
+	htmlContent, markdownContent := enterpriseSiteContentFromWizardState(wizardStateJSON)
+	if strings.TrimSpace(htmlContent) != "" {
+		article.HTMLContent = strings.TrimSpace(htmlContent)
+	}
+	if strings.TrimSpace(markdownContent) != "" {
+		article.MarkdownContent = strings.TrimSpace(markdownContent)
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) ensureCategoryExists(ctx context.Context, tenantID, workspaceID, connectionID int64, categoryID string) error {
+	var exists bool
+	if err := s.pool.QueryRow(ctx, `
+		SELECT EXISTS (
+			SELECT 1
+			FROM enterprise_site_categories
+			WHERE tenant_id = $1
+			  AND workspace_id = $2
+			  AND connection_id = $3
+			  AND remote_id = $4
+		)
+	`, tenantID, workspaceID, connectionID, categoryID).Scan(&exists); err != nil {
+		return response.ErrInternal(50230, "enterprise_site_category_lookup_failed", "failed to validate enterprise site category")
+	}
+	if !exists {
+		return response.ErrBadRequest(40049, "enterprise_site_category_not_found", "category is not synced for this site")
+	}
+	return nil
+}
+
+func (s *EnterpriseSiteService) loadConnection(ctx context.Context, tenantID, workspaceID, id int64) (*enterpriseSiteConnectionRecord, error) {
+	var item enterpriseSiteConnectionRecord
+	if err := s.pool.QueryRow(ctx, `
+		SELECT
+			c.id,
+			c.tenant_id,
+			c.workspace_id,
+			c.name,
+			c.site_url,
+			c.cms_type,
+			c.auth_type,
+			c.appid,
+			c.credential_ciphertext,
+			c.default_acode,
+			c.default_mcode,
+			c.default_scode,
+			c.status,
+			c.plugin_version,
+			c.site_name,
+			c.last_ping_at,
+			c.last_sync_at,
+			c.last_publish_at,
+			c.last_error,
+			(
+				SELECT COUNT(*)::int
+				FROM enterprise_site_categories ec
+				WHERE ec.connection_id = c.id
+				  AND ec.tenant_id = c.tenant_id
+				  AND ec.workspace_id = c.workspace_id
+			) AS category_count,
+			c.created_at,
+			c.updated_at
+		FROM enterprise_site_connections c
+		WHERE c.id = $1
+		  AND c.tenant_id = $2
+		  AND c.workspace_id = $3
+		  AND c.deleted_at IS NULL
+	`, id, tenantID, workspaceID).Scan(
+		&item.ID,
+		&item.TenantID,
+		&item.WorkspaceID,
+		&item.Name,
+		&item.SiteURL,
+		&item.CMSType,
+		&item.AuthType,
+		&item.AppID,
+		&item.CredentialCiphertext,
+		&item.DefaultAcode,
+		&item.DefaultMcode,
+		&item.DefaultScode,
+		&item.Status,
+		&item.PluginVersion,
+		&item.SiteName,
+		&item.LastPingAt,
+		&item.LastSyncAt,
+		&item.LastPublishAt,
+		&item.LastError,
+		&item.CategoryCount,
+		&item.CreatedAt,
+		&item.UpdatedAt,
+	); err != nil {
+		if errors.Is(err, pgx.ErrNoRows) {
+			return nil, response.ErrNotFound(40441, "enterprise_site_not_found", "enterprise site connection not found")
+		}
+		return nil, response.ErrInternal(50220, "enterprise_site_lookup_failed", "failed to load enterprise site")
+	}
+	return &item, nil
+}
+
+func (s *EnterpriseSiteService) connectionCredential(connection *enterpriseSiteConnectionRecord) (enterpriseSiteCredential, error) {
+	secret, err := decryptEnterpriseSiteCredential(connection.CredentialCiphertext, s.credentialKeyMaterial())
+	if err != nil {
+		return enterpriseSiteCredential{}, response.ErrInternal(50231, "enterprise_site_secret_decrypt_failed", "failed to read enterprise site credential")
+	}
+	return enterpriseSiteCredential{
+		SiteURL:      connection.SiteURL,
+		AppID:        connection.AppID,
+		Secret:       secret,
+		DefaultAcode: enterpriseSiteStringPointerValue(connection.DefaultAcode),
+		DefaultMcode: enterpriseSiteStringPointerValue(connection.DefaultMcode),
+		DefaultScode: enterpriseSiteStringPointerValue(connection.DefaultScode),
+	}, nil
+}
+
+func (s *EnterpriseSiteService) publisherFor(cmsType string) cmsPublisher {
+	switch strings.TrimSpace(cmsType) {
+	case pbootCMSPlatformID:
+		return newPBootCMSPublisher(s.httpClient)
+	default:
+		return newPBootCMSPublisher(s.httpClient)
+	}
+}
+
+func (s *EnterpriseSiteService) credentialKeyMaterial() string {
+	if s != nil && s.cfg != nil && s.cfg.Current() != nil {
+		if secret := strings.TrimSpace(s.cfg.Current().JWT.Secret); secret != "" {
+			return secret
+		}
+	}
+	return ""
+}
+
+func (s *EnterpriseSiteService) markConnectionError(ctx context.Context, connectionID, tenantID, workspaceID int64, err error) error {
+	message := sanitizeEnterpriseSiteError(err)
+	_, updateErr := s.pool.Exec(ctx, `
+		UPDATE enterprise_site_connections
+		SET status = 'error',
+		    last_error = $1,
+		    updated_at = NOW()
+		WHERE id = $2 AND tenant_id = $3 AND workspace_id = $4 AND deleted_at IS NULL
+	`, message, connectionID, tenantID, workspaceID)
+	return updateErr
+}
+
+func scanEnterpriseSiteConnectionRow(rows pgx.Rows) (*enterpriseSiteConnectionRecord, *EnterpriseSiteLatestPublishRecord, error) {
+	var item enterpriseSiteConnectionRecord
+	var latestID pgtype.Int8
+	var latestArticleID pgtype.Int8
+	var latestArticleTitle pgtype.Text
+	var latestStatus pgtype.Text
+	var latestExternalID pgtype.Text
+	var latestExternalURL pgtype.Text
+	var latestError pgtype.Text
+	var latestPublishedAt pgtype.Timestamptz
+	var latestCreatedAt pgtype.Timestamptz
+	var latestUpdatedAt pgtype.Timestamptz
+
+	err := rows.Scan(
+		&item.ID,
+		&item.TenantID,
+		&item.WorkspaceID,
+		&item.Name,
+		&item.SiteURL,
+		&item.CMSType,
+		&item.AuthType,
+		&item.AppID,
+		&item.CredentialCiphertext,
+		&item.DefaultAcode,
+		&item.DefaultMcode,
+		&item.DefaultScode,
+		&item.Status,
+		&item.PluginVersion,
+		&item.SiteName,
+		&item.LastPingAt,
+		&item.LastSyncAt,
+		&item.LastPublishAt,
+		&item.LastError,
+		&item.CategoryCount,
+		&item.CreatedAt,
+		&item.UpdatedAt,
+		&latestID,
+		&latestArticleID,
+		&latestArticleTitle,
+		&latestStatus,
+		&latestExternalID,
+		&latestExternalURL,
+		&latestError,
+		&latestPublishedAt,
+		&latestCreatedAt,
+		&latestUpdatedAt,
+	)
+	if err != nil {
+		return nil, nil, err
+	}
+	var latest *EnterpriseSiteLatestPublishRecord
+	if latestID.Valid && latestArticleID.Valid && latestStatus.Valid && latestCreatedAt.Valid && latestUpdatedAt.Valid {
+		latest = &EnterpriseSiteLatestPublishRecord{
+			ID:                 latestID.Int64,
+			ArticleID:          latestArticleID.Int64,
+			ArticleTitle:       enterpriseSiteTextPointer(latestArticleTitle),
+			Status:             latestStatus.String,
+			ExternalArticleID:  enterpriseSiteTextPointer(latestExternalID),
+			ExternalArticleURL: enterpriseSiteTextPointer(latestExternalURL),
+			ErrorMessage:       enterpriseSiteTextPointer(latestError),
+			PublishedAt:        enterpriseSiteTimePointer(latestPublishedAt),
+			CreatedAt:          latestCreatedAt.Time,
+			UpdatedAt:          latestUpdatedAt.Time,
+		}
+	}
+	return &item, latest, nil
+}
+
+func enterpriseSiteConnectionResponse(item *enterpriseSiteConnectionRecord) EnterpriseSiteConnectionResponse {
+	return EnterpriseSiteConnectionResponse{
+		ID:            item.ID,
+		Name:          item.Name,
+		SiteURL:       item.SiteURL,
+		CMSType:       item.CMSType,
+		AuthType:      item.AuthType,
+		AppID:         item.AppID,
+		DefaultAcode:  item.DefaultAcode,
+		DefaultMcode:  item.DefaultMcode,
+		DefaultScode:  item.DefaultScode,
+		Status:        item.Status,
+		PluginVersion: item.PluginVersion,
+		SiteName:      item.SiteName,
+		LastPingAt:    item.LastPingAt,
+		LastSyncAt:    item.LastSyncAt,
+		LastPublishAt: item.LastPublishAt,
+		LastError:     item.LastError,
+		CategoryCount: item.CategoryCount,
+		CreatedAt:     item.CreatedAt,
+		UpdatedAt:     item.UpdatedAt,
+	}
+}
+
+func enterpriseSiteNormalizeLegacyPublishErrorState(item *EnterpriseSiteConnectionResponse) {
+	if item == nil || item.Status != "error" || item.LatestRecord == nil {
+		return
+	}
+	switch strings.TrimSpace(item.LatestRecord.Status) {
+	case "failed", "publish_failed":
+	default:
+		return
+	}
+	lastError := strings.TrimSpace(enterpriseSiteStringPointerValue(item.LastError))
+	recordError := strings.TrimSpace(enterpriseSiteStringPointerValue(item.LatestRecord.ErrorMessage))
+	if lastError == "" || recordError == "" || lastError != recordError {
+		return
+	}
+	item.Status = "connected"
+	item.LastError = nil
+}
+
+type normalizedEnterpriseSiteConnectionRequest struct {
+	Name         string
+	SiteURL      string
+	CMSType      string
+	AppID        string
+	Secret       string
+	DefaultAcode *string
+	DefaultMcode *string
+	DefaultScode *string
+}
+
+func normalizeCreateEnterpriseSiteConnectionRequest(req CreateEnterpriseSiteConnectionRequest) (normalizedEnterpriseSiteConnectionRequest, error) {
+	siteURL, err := normalizeEnterpriseSiteURL(req.SiteURL)
+	if err != nil {
+		return normalizedEnterpriseSiteConnectionRequest{}, err
+	}
+	cmsType := normalizeEnterpriseCMSType(req.CMSType)
+	if cmsType != pbootCMSPlatformID {
+		return normalizedEnterpriseSiteConnectionRequest{}, response.ErrBadRequest(40040, "enterprise_site_cms_not_supported", "only PBootCMS is supported in this version")
+	}
+	appid := strings.TrimSpace(req.AppID)
+	if appid == "" {
+		return normalizedEnterpriseSiteConnectionRequest{}, response.ErrBadRequest(40042, "enterprise_site_appid_required", "appid is required")
+	}
+	secret := strings.TrimSpace(req.Secret)
+	if secret == "" {
+		return normalizedEnterpriseSiteConnectionRequest{}, response.ErrBadRequest(40042, "enterprise_site_secret_required", "secret is required")
+	}
+	name := strings.TrimSpace(req.Name)
+	if name == "" {
+		if parsed, err := url.Parse(siteURL); err == nil {
+			name = parsed.Hostname()
+		}
+	}
+	if name == "" {
+		name = "企业站点"
+	}
+	return normalizedEnterpriseSiteConnectionRequest{
+		Name:         name,
+		SiteURL:      siteURL,
+		CMSType:      cmsType,
+		AppID:        appid,
+		Secret:       secret,
+		DefaultAcode: normalizeOptionalEnterpriseCodePtr(req.DefaultAcode),
+		DefaultMcode: normalizeOptionalEnterpriseCodePtr(req.DefaultMcode),
+		DefaultScode: normalizeOptionalEnterpriseCodePtr(req.DefaultScode),
+	}, nil
+}
+
+func normalizeEnterpriseSiteURL(value string) (string, error) {
+	trimmed := strings.TrimSpace(value)
+	if trimmed == "" {
+		return "", response.ErrBadRequest(40041, "enterprise_site_url_required", "site_url is required")
+	}
+	if !strings.Contains(trimmed, "://") {
+		trimmed = "https://" + trimmed
+	}
+	parsed, err := url.Parse(trimmed)
+	if err != nil || parsed.Scheme == "" || parsed.Host == "" {
+		return "", response.ErrBadRequest(40041, "invalid_enterprise_site_url", "site_url is invalid")
+	}
+	scheme := strings.ToLower(parsed.Scheme)
+	if scheme != "https" && scheme != "http" {
+		return "", response.ErrBadRequest(40041, "invalid_enterprise_site_url", "site_url must be http or https")
+	}
+	parsed.Scheme = scheme
+	parsed.Path = strings.TrimRight(parsed.Path, "/")
+	parsed.RawQuery = ""
+	parsed.Fragment = ""
+	return strings.TrimRight(parsed.String(), "/"), nil
+}
+
+func normalizeEnterpriseCMSType(value string) string {
+	return strings.ToLower(strings.TrimSpace(value))
+}
+
+func normalizeOptionalEnterpriseCodePtr(value *string) *string {
+	if value == nil {
+		return nil
+	}
+	return normalizeOptionalEnterpriseCode(*value)
+}
+
+func normalizeOptionalEnterpriseCode(value string) *string {
+	trimmed := strings.TrimSpace(value)
+	if trimmed == "" {
+		return nil
+	}
+	return &trimmed
+}
+
+func validEnterpriseSiteStatus(status string) bool {
+	switch strings.TrimSpace(status) {
+	case "draft", "connected", "error", "disabled":
+		return true
+	default:
+		return false
+	}
+}
+
+func normalizeEnterprisePublishType(value string) string {
+	if strings.TrimSpace(value) == "draft" {
+		return "draft"
+	}
+	return "publish"
+}
+
+func enterpriseSitePublishArticleContentInvalid(htmlContent, markdownContent string) bool {
+	return enterpriseSiteStoredContentInvalid(htmlContent) && enterpriseSiteStoredContentInvalid(markdownContent)
+}
+
+func enterpriseSiteStoredContentInvalid(value string) bool {
+	return strings.TrimSpace(enterpriseSiteNormalizeStoredContent(value)) == ""
+}
+
+func enterpriseSiteNormalizeStoredContent(value string) string {
+	value = strings.TrimSpace(value)
+	if value == "" {
+		return ""
+	}
+	if !enterpriseSiteLooksLikeDiffPatch(value) {
+		return enterpriseSiteRepairMalformedEditorImageHTML(value)
+	}
+	if restored, ok := enterpriseSiteRestoreDiffPatchContent(value); ok {
+		return strings.TrimSpace(enterpriseSiteRepairMalformedEditorImageHTML(restored))
+	}
+	return ""
+}
+
+func enterpriseSiteRepairMalformedEditorImageHTML(value string) string {
+	value = strings.TrimSpace(value)
+	if value == "" || !strings.Contains(strings.ToLower(value), "<img") {
+		return value
+	}
+	return enterpriseSiteMalformedEditorImagePattern.ReplaceAllString(value, `$1>$2`)
+}
+
+func enterpriseSiteLooksLikeDiffPatch(value string) bool {
+	value = strings.TrimSpace(value)
+	return strings.HasPrefix(value, "@@ -") && strings.Contains(value, " @@")
+}
+
+func enterpriseSiteRestoreDiffPatchContent(value string) (string, bool) {
+	dmp := diffmatchpatch.New()
+	patches, err := dmp.PatchFromText(strings.TrimSpace(value))
+	if err != nil || len(patches) == 0 {
+		return "", false
+	}
+	restored, applied := dmp.PatchApply(patches, "")
+	if len(applied) == 0 {
+		return "", false
+	}
+	for _, ok := range applied {
+		if !ok {
+			return "", false
+		}
+	}
+	return restored, true
+}
+
+func enterpriseSiteContentLooksLikeHTML(value string) bool {
+	value = strings.ToLower(strings.TrimSpace(value))
+	if value == "" {
+		return false
+	}
+	return strings.Contains(value, "<p") ||
+		strings.Contains(value, "<div") ||
+		strings.Contains(value, "<br") ||
+		strings.Contains(value, "<h1") ||
+		strings.Contains(value, "<h2") ||
+		strings.Contains(value, "<h3") ||
+		strings.Contains(value, "<ul") ||
+		strings.Contains(value, "<ol") ||
+		strings.Contains(value, "<li") ||
+		strings.Contains(value, "<img") ||
+		strings.Contains(value, "<table") ||
+		strings.Contains(value, "<blockquote")
+}
+
+func enterpriseSiteContentFromWizardState(raw []byte) (string, string) {
+	if len(raw) == 0 {
+		return "", ""
+	}
+	var payload map[string]any
+	if err := json.Unmarshal(raw, &payload); err != nil {
+		return "", ""
+	}
+	htmlKeys := []string{"html_content", "htmlContent", "content_html", "article_html", "body_html"}
+	markdownKeys := []string{"markdown_content", "markdownContent", "content", "article_content", "body", "text"}
+
+	var htmlContent string
+	for _, key := range htmlKeys {
+		if value := strings.TrimSpace(enterpriseSiteWizardString(payload[key])); value != "" && !enterpriseSiteStoredContentInvalid(value) {
+			htmlContent = value
+			break
+		}
+	}
+
+	var markdownContent string
+	for _, key := range markdownKeys {
+		if value := strings.TrimSpace(enterpriseSiteWizardString(payload[key])); value != "" && !enterpriseSiteStoredContentInvalid(value) {
+			markdownContent = value
+			break
+		}
+	}
+	return htmlContent, markdownContent
+}
+
+func enterpriseSiteWizardString(value any) string {
+	switch typed := value.(type) {
+	case nil:
+		return ""
+	case string:
+		return typed
+	default:
+		return ""
+	}
+}
+
+func enterpriseSitePublishCoverInput(article enterpriseSitePublishArticle, req PublishEnterpriseSiteArticleRequest) (string, *int64) {
+	coverURL := enterpriseSiteStringPointerValue(article.CoverAssetURL)
+	if req.CoverAssetURL != nil {
+		coverURL = strings.TrimSpace(*req.CoverAssetURL)
+	}
+	coverImageAssetID := article.CoverImageAssetID
+	if req.CoverImageAssetID != nil {
+		coverImageAssetID = req.CoverImageAssetID
+	}
+	return coverURL, coverImageAssetID
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSitePublishAssets(ctx context.Context, tenantID int64, contentHTML, coverURL string, coverImageAssetID *int64) (string, string) {
+	base := s.enterpriseSitePublicBaseURL()
+	preparedHTML := s.prepareEnterpriseSiteImageURLs(ctx, tenantID, contentHTML, base)
+	preparedCover := s.prepareEnterpriseSiteCoverURL(ctx, tenantID, coverURL, coverImageAssetID, base)
+	return preparedHTML, preparedCover
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteCoverURL(ctx context.Context, tenantID int64, coverURL string, coverImageAssetID *int64, baseURL string) string {
+	if coverImageAssetID != nil && *coverImageAssetID > 0 {
+		if dataURI := s.enterpriseSiteDataURIFromImageAssetID(ctx, tenantID, *coverImageAssetID); dataURI != "" {
+			return dataURI
+		}
+	}
+	return s.prepareEnterpriseSiteAssetURL(ctx, tenantID, coverURL, baseURL)
+}
+
+func (s *EnterpriseSiteService) enterpriseSitePublicBaseURL() string {
+	if s == nil || s.cfg == nil || s.cfg.Current() == nil {
+		return ""
+	}
+	cfg := s.cfg.Current()
+	if value := normalizeEnterpriseSiteAssetBaseURL(cfg.Server.PublicBaseURL); value != "" {
+		return value
+	}
+	for _, origin := range cfg.Server.AllowedOrigins {
+		if value := normalizeEnterpriseSiteAssetBaseURL(origin); value != "" {
+			return value
+		}
+	}
+	port := cfg.Server.Port
+	if port <= 0 {
+		port = 8080
+	}
+	return "http://127.0.0.1:" + strconv.Itoa(port)
+}
+
+func normalizeEnterpriseSiteAssetBaseURL(value string) string {
+	value = strings.TrimSpace(value)
+	if value == "" || value == "*" {
+		return ""
+	}
+	parsed, err := url.Parse(value)
+	if err != nil || parsed.Scheme == "" || parsed.Host == "" {
+		return ""
+	}
+	if parsed.Scheme != "http" && parsed.Scheme != "https" {
+		return ""
+	}
+	parsed.RawQuery = ""
+	parsed.Fragment = ""
+	return strings.TrimRight(parsed.String(), "/")
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteImageURLs(ctx context.Context, tenantID int64, fragment string, baseURL string) string {
+	if strings.TrimSpace(fragment) == "" || !strings.Contains(strings.ToLower(fragment), "<img") {
+		return fragment
+	}
+	contextNode := &html.Node{
+		Type:     html.ElementNode,
+		Data:     "body",
+		DataAtom: atom.Body,
+	}
+	nodes, err := html.ParseFragment(strings.NewReader(fragment), contextNode)
+	if err != nil {
+		return s.prepareEnterpriseSiteImageURLsFallback(ctx, tenantID, fragment, baseURL)
+	}
+	for _, node := range nodes {
+		s.prepareEnterpriseSiteImageNodeURLs(ctx, tenantID, node, baseURL)
+	}
+	nodes = enterpriseSitePruneEmptyImageWrapperNodes(nodes)
+	return enterpriseSiteRenderHTMLNodes(nodes, s.prepareEnterpriseSiteImageURLsFallback(ctx, tenantID, fragment, baseURL))
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteImageNodeURLs(ctx context.Context, tenantID int64, node *html.Node, baseURL string) {
+	if node == nil {
+		return
+	}
+	if node.Type == html.ElementNode && strings.EqualFold(node.Data, "img") {
+		if !s.prepareEnterpriseSiteImageAttrs(ctx, tenantID, node, baseURL) {
+			enterpriseSiteRemoveHTMLNode(node)
+			return
+		}
+	}
+	for child := node.FirstChild; child != nil; {
+		next := child.NextSibling
+		s.prepareEnterpriseSiteImageNodeURLs(ctx, tenantID, child, baseURL)
+		child = next
+	}
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteImageAttrs(ctx context.Context, tenantID int64, node *html.Node, baseURL string) bool {
+	if node == nil {
+		return true
+	}
+	dataURI := s.enterpriseSiteDataURIFromImageNode(ctx, tenantID, node)
+	hasImageURL := false
+	for idx := range node.Attr {
+		key := strings.ToLower(strings.TrimSpace(node.Attr[idx].Key))
+		if key != "src" && key != "data-src" && key != "_src" {
+			continue
+		}
+		hasImageURL = true
+		if dataURI != "" {
+			node.Attr[idx].Val = dataURI
+			continue
+		}
+		node.Attr[idx].Val = s.prepareEnterpriseSiteAssetURL(ctx, tenantID, node.Attr[idx].Val, baseURL)
+		if strings.TrimSpace(node.Attr[idx].Val) == "" {
+			return false
+		}
+	}
+	node.Attr = enterpriseSiteStripSaaSImageAttrs(node.Attr)
+	return hasImageURL
+}
+
+func enterpriseSiteStripSaaSImageAttrs(attrs []html.Attribute) []html.Attribute {
+	if len(attrs) == 0 {
+		return attrs
+	}
+	cleaned := make([]html.Attribute, 0, len(attrs))
+	for _, attr := range attrs {
+		key := strings.ToLower(strings.TrimSpace(attr.Key))
+		if key == "data-asset-id" || key == "asset-id" {
+			continue
+		}
+		cleaned = append(cleaned, attr)
+	}
+	return cleaned
+}
+
+func enterpriseSiteRemoveHTMLNode(node *html.Node) {
+	if node == nil || node.Parent == nil {
+		return
+	}
+	parent := node.Parent
+	parent.RemoveChild(node)
+	if enterpriseSiteHTMLNodeIsEmptyImageWrapper(parent) {
+		enterpriseSiteRemoveHTMLNode(parent)
+	}
+}
+
+func enterpriseSiteHTMLNodeIsEmptyImageWrapper(node *html.Node) bool {
+	if node == nil || node.Type != html.ElementNode || !strings.EqualFold(node.Data, "p") {
+		return false
+	}
+	for child := node.FirstChild; child != nil; child = child.NextSibling {
+		if child.Type == html.TextNode && strings.TrimSpace(child.Data) == "" {
+			continue
+		}
+		return false
+	}
+	if len(node.Attr) == 0 {
+		return true
+	}
+	for _, attr := range node.Attr {
+		key := strings.ToLower(strings.TrimSpace(attr.Key))
+		value := strings.ToLower(strings.TrimSpace(attr.Val))
+		if key == "class" && strings.Contains(value, "article-editor-image") {
+			return true
+		}
+		if key == "align" && value == "center" {
+			continue
+		}
+	}
+	return false
+}
+
+func enterpriseSitePruneEmptyImageWrapperNodes(nodes []*html.Node) []*html.Node {
+	if len(nodes) == 0 {
+		return nodes
+	}
+	pruned := make([]*html.Node, 0, len(nodes))
+	for _, node := range nodes {
+		if enterpriseSiteHTMLNodeIsEmptyImageWrapper(node) {
+			continue
+		}
+		pruned = append(pruned, node)
+	}
+	return pruned
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteAssetURL(ctx context.Context, tenantID int64, value string, baseURL string) string {
+	value = strings.TrimSpace(value)
+	if value == "" || strings.HasPrefix(strings.ToLower(value), "data:") {
+		return value
+	}
+	if dataURI := s.enterpriseSiteDataURIFromAssetURL(ctx, tenantID, value); dataURI != "" {
+		return dataURI
+	}
+	if enterpriseSiteLooksLikeSaaSAssetURL(value) {
+		return ""
+	}
+	return enterpriseSiteAbsoluteAssetURL(value, baseURL)
+}
+
+func (s *EnterpriseSiteService) prepareEnterpriseSiteImageURLsFallback(ctx context.Context, tenantID int64, fragment string, baseURL string) string {
+	return enterpriseSiteImageAttrPattern.ReplaceAllStringFunc(fragment, func(match string) string {
+		parts := enterpriseSiteImageAttrPattern.FindStringSubmatch(match)
+		if len(parts) != 4 {
+			return match
+		}
+		return parts[1] + s.prepareEnterpriseSiteAssetURL(ctx, tenantID, parts[2], baseURL) + parts[3]
+	})
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteDataURIFromAssetURL(ctx context.Context, tenantID int64, value string) string {
+	objectKey, ok := s.enterpriseSiteObjectKeyFromAssetURL(ctx, tenantID, value)
+	if !ok || s == nil || s.storage == nil {
+		return ""
+	}
+	return s.enterpriseSiteDataURIFromObjectKey(ctx, objectKey)
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteDataURIFromImageNode(ctx context.Context, tenantID int64, node *html.Node) string {
+	assetID := enterpriseSiteImageNodeAssetID(node)
+	if assetID <= 0 {
+		return ""
+	}
+	return s.enterpriseSiteDataURIFromImageAssetID(ctx, tenantID, assetID)
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteDataURIFromImageAssetID(ctx context.Context, tenantID, assetID int64) string {
+	objectKey, ok := s.loadEnterpriseSiteImageAssetObjectKey(ctx, tenantID, assetID)
+	if !ok || s == nil || s.storage == nil {
+		return ""
+	}
+	return s.enterpriseSiteDataURIFromObjectKey(ctx, objectKey)
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteDataURIFromObjectKey(ctx context.Context, objectKey string) string {
+	content, err := s.storage.GetBytes(ctx, objectKey)
+	if err != nil || len(content) == 0 {
+		return ""
+	}
+	contentType := enterpriseSiteImageContentType(content, objectKey)
+	if contentType == "" {
+		return ""
+	}
+	return "data:" + contentType + ";base64," + base64.StdEncoding.EncodeToString(content)
+}
+
+func enterpriseSiteImageContentType(content []byte, objectKey string) string {
+	contentType := strings.ToLower(strings.TrimSpace(http.DetectContentType(content)))
+	if strings.HasPrefix(contentType, "image/") {
+		return contentType
+	}
+	lowerKey := strings.ToLower(strings.TrimSpace(objectKey))
+	switch {
+	case strings.HasSuffix(lowerKey, ".webp"):
+		return "image/webp"
+	case strings.HasSuffix(lowerKey, ".png"):
+		return "image/png"
+	case strings.HasSuffix(lowerKey, ".jpg"), strings.HasSuffix(lowerKey, ".jpeg"):
+		return "image/jpeg"
+	case strings.HasSuffix(lowerKey, ".gif"):
+		return "image/gif"
+	default:
+		return ""
+	}
+}
+
+func enterpriseSiteImageNodeAssetID(node *html.Node) int64 {
+	if node == nil {
+		return 0
+	}
+	for _, attr := range node.Attr {
+		key := strings.ToLower(strings.TrimSpace(attr.Key))
+		if key != "data-asset-id" && key != "asset-id" {
+			continue
+		}
+		id, err := strconv.ParseInt(strings.TrimSpace(attr.Val), 10, 64)
+		if err == nil && id > 0 {
+			return id
+		}
+	}
+	return 0
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteObjectKeyFromAssetURL(ctx context.Context, tenantID int64, value string) (string, bool) {
+	if objectKey, ok := enterpriseSiteObjectKeyFromPublicAssetURL(value, tenantID, s.enterpriseSiteAssetTokenSecret()); ok {
+		return objectKey, true
+	}
+	assetID, ok := enterpriseSiteAssetIDFromURL(value)
+	if !ok {
+		return "", false
+	}
+	return s.loadEnterpriseSiteImageAssetObjectKey(ctx, tenantID, assetID)
+}
+
+func (s *EnterpriseSiteService) loadEnterpriseSiteImageAssetObjectKey(ctx context.Context, tenantID, assetID int64) (string, bool) {
+	if s == nil || s.pool == nil || tenantID <= 0 || assetID <= 0 {
+		return "", false
+	}
+	var objectKey string
+	if err := s.pool.QueryRow(ctx, `
+		SELECT object_key
+		FROM image_assets
+		WHERE id = $1 AND tenant_id = $2 AND status = 'active' AND deleted_at IS NULL
+	`, assetID, tenantID).Scan(&objectKey); err != nil {
+		return "", false
+	}
+	if !enterpriseSiteObjectKeyAllowedForTenant(objectKey, tenantID) {
+		return "", false
+	}
+	return objectKey, true
+}
+
+func (s *EnterpriseSiteService) enterpriseSiteAssetTokenSecret() string {
+	if s == nil || s.cfg == nil || s.cfg.Current() == nil {
+		return ""
+	}
+	return strings.TrimSpace(s.cfg.Current().JWT.Secret)
+}
+
+func enterpriseSiteObjectKeyFromPublicAssetURL(raw string, tenantID int64, secret string) (string, bool) {
+	token, ok := enterpriseSitePublicAssetTokenFromURL(raw)
+	if !ok {
+		return "", false
+	}
+	objectKey, valid := publicasset.ParseObjectKeyToken(token, secret)
+	if !valid {
+		objectKey, valid = publicasset.ObjectKeyFromToken(token)
+	}
+	if !valid || !enterpriseSiteObjectKeyAllowedForTenant(objectKey, tenantID) {
+		return "", false
+	}
+	return objectKey, true
+}
+
+func enterpriseSiteLooksLikeSaaSAssetURL(raw string) bool {
+	_, ok := enterpriseSitePublicAssetTokenFromURL(raw)
+	return ok
+}
+
+func enterpriseSitePublicAssetTokenFromURL(raw string) (string, bool) {
+	raw = strings.TrimSpace(raw)
+	if raw == "" {
+		return "", false
+	}
+	if token, ok := enterpriseSiteAssetTokenFromPath(raw); ok {
+		return token, true
+	}
+	parsed, err := url.Parse(raw)
+	if err != nil {
+		return "", false
+	}
+	if token, ok := enterpriseSiteAssetTokenFromPath(parsed.Path); ok {
+		return token, true
+	}
+	return "", false
+}
+
+func enterpriseSiteAssetTokenFromPath(pathValue string) (string, bool) {
+	pathValue = strings.TrimSpace(pathValue)
+	if pathValue == "" {
+		return "", false
+	}
+	pathValue = strings.TrimLeft(pathValue, "/")
+	for _, prefix := range []string{"api/public/assets/", "api/desktop/content/assets/", "public/assets/", "assets/"} {
+		if strings.HasPrefix(pathValue, prefix) {
+			token := strings.TrimPrefix(pathValue, prefix)
+			if slash := strings.Index(token, "/"); slash >= 0 {
+				token = token[:slash]
+			}
+			if idx := strings.IndexAny(token, "?#"); idx >= 0 {
+				token = token[:idx]
+			}
+			token, _ = url.PathUnescape(token)
+			return strings.TrimSpace(token), strings.TrimSpace(token) != ""
+		}
+	}
+	return "", false
+}
+
+func enterpriseSiteAssetIDFromURL(raw string) (int64, bool) {
+	parsed, err := url.Parse(strings.TrimSpace(raw))
+	if err != nil {
+		return 0, false
+	}
+	value := strings.TrimSpace(parsed.Query().Get("data-asset-id"))
+	if value == "" {
+		value = strings.TrimSpace(parsed.Query().Get("asset_id"))
+	}
+	if value == "" {
+		return 0, false
+	}
+	id, err := strconv.ParseInt(value, 10, 64)
+	return id, err == nil && id > 0
+}
+
+func enterpriseSiteObjectKeyAllowedForTenant(objectKey string, tenantID int64) bool {
+	if tenantID <= 0 {
+		return false
+	}
+	tenantPrefix := "tenants/" + strconv.FormatInt(tenantID, 10) + "/"
+	return strings.HasPrefix(objectKey, tenantPrefix+"images/") ||
+		strings.HasPrefix(objectKey, tenantPrefix+"articles/")
+}
+
+func enterpriseSiteAbsoluteImageURLs(fragment string, baseURL string) string {
+	if strings.TrimSpace(fragment) == "" || !strings.Contains(strings.ToLower(fragment), "<img") {
+		return fragment
+	}
+	contextNode := &html.Node{
+		Type:     html.ElementNode,
+		Data:     "body",
+		DataAtom: atom.Body,
+	}
+	nodes, err := html.ParseFragment(strings.NewReader(fragment), contextNode)
+	if err != nil {
+		return enterpriseSiteAbsoluteImageURLsFallback(fragment, baseURL)
+	}
+	for _, node := range nodes {
+		enterpriseSiteRewriteImageNodeURLs(node, baseURL)
+	}
+	var builder strings.Builder
+	for _, node := range nodes {
+		if err := html.Render(&builder, node); err != nil {
+			return enterpriseSiteAbsoluteImageURLsFallback(fragment, baseURL)
+		}
+	}
+	return builder.String()
+}
+
+func enterpriseSiteRewriteImageNodeURLs(node *html.Node, baseURL string) {
+	if node == nil {
+		return
+	}
+	if node.Type == html.ElementNode && strings.EqualFold(node.Data, "img") {
+		for idx := range node.Attr {
+			key := strings.ToLower(strings.TrimSpace(node.Attr[idx].Key))
+			if key != "src" && key != "data-src" && key != "_src" {
+				continue
+			}
+			node.Attr[idx].Val = enterpriseSiteAbsoluteAssetURL(node.Attr[idx].Val, baseURL)
+		}
+	}
+	for child := node.FirstChild; child != nil; child = child.NextSibling {
+		enterpriseSiteRewriteImageNodeURLs(child, baseURL)
+	}
+}
+
+func enterpriseSiteAbsoluteImageURLsFallback(fragment string, baseURL string) string {
+	return enterpriseSiteImageAttrPattern.ReplaceAllStringFunc(fragment, func(match string) string {
+		parts := enterpriseSiteImageAttrPattern.FindStringSubmatch(match)
+		if len(parts) != 4 {
+			return match
+		}
+		return parts[1] + enterpriseSiteAbsoluteAssetURL(parts[2], baseURL) + parts[3]
+	})
+}
+
+func enterpriseSiteAbsoluteAssetURL(value string, baseURL string) string {
+	value = strings.TrimSpace(value)
+	if value == "" || strings.HasPrefix(strings.ToLower(value), "data:") {
+		return value
+	}
+	parsed, err := url.Parse(value)
+	if err == nil && parsed.Scheme != "" {
+		return value
+	}
+	baseURL = strings.TrimRight(strings.TrimSpace(baseURL), "/")
+	if baseURL == "" {
+		return value
+	}
+	if strings.HasPrefix(value, "//") {
+		base, err := url.Parse(baseURL)
+		if err != nil || base.Scheme == "" {
+			return value
+		}
+		return base.Scheme + ":" + value
+	}
+	if strings.HasPrefix(value, "/") {
+		return baseURL + value
+	}
+	return baseURL + "/" + strings.TrimLeft(value, "/")
+}
+
+func enterpriseSiteStripLeadingTitleHeadingHTML(fragment string, title string) string {
+	normalizedTitle := enterpriseSiteNormalizeHeadingText(title)
+	if normalizedTitle == "" || strings.TrimSpace(fragment) == "" {
+		return fragment
+	}
+	contextNode := &html.Node{
+		Type:     html.ElementNode,
+		Data:     "body",
+		DataAtom: atom.Body,
+	}
+	nodes, err := html.ParseFragment(strings.NewReader(fragment), contextNode)
+	if err != nil {
+		return enterpriseSiteStripLeadingTitleHeadingHTMLFallback(fragment, normalizedTitle)
+	}
+
+	first := enterpriseSiteFirstMeaningfulHTMLNode(nodes)
+	if enterpriseSiteHTMLNodeIsTitleHeading(first, normalizedTitle) {
+		return enterpriseSiteRenderHTMLNodes(enterpriseSiteWithoutTopLevelHTMLNode(nodes, first), fragment)
+	}
+	if enterpriseSiteHTMLNodeIsContentWrapper(first) {
+		child := enterpriseSiteFirstMeaningfulHTMLChild(first)
+		if enterpriseSiteHTMLNodeIsTitleHeading(child, normalizedTitle) {
+			first.RemoveChild(child)
+			if enterpriseSiteHTMLNodeIsSkippable(first) {
+				nodes = enterpriseSiteWithoutTopLevelHTMLNode(nodes, first)
+			}
+			return enterpriseSiteRenderHTMLNodes(nodes, fragment)
+		}
+	}
+	return fragment
+}
+
+func enterpriseSiteStripLeadingTitleHeadingHTMLFallback(fragment string, normalizedTitle string) string {
+	match := regexp.MustCompile(`(?is)^\s*<h[12]\b[^>]*>(.*?)</h[12]>\s*`).FindStringSubmatchIndex(fragment)
+	if len(match) != 4 {
+		return fragment
+	}
+	heading := enterpriseSiteSummaryTagPattern.ReplaceAllString(fragment[match[2]:match[3]], " ")
+	if enterpriseSiteNormalizeHeadingText(heading) != normalizedTitle {
+		return fragment
+	}
+	return strings.TrimSpace(fragment[match[1]:])
+}
+
+func enterpriseSiteStripLeadingTitleHeadingMarkdown(markdownContent string, title string) string {
+	normalizedTitle := enterpriseSiteNormalizeHeadingText(title)
+	if normalizedTitle == "" || strings.TrimSpace(markdownContent) == "" {
+		return markdownContent
+	}
+	normalizedMarkdown := strings.TrimPrefix(markdownContent, "\uFEFF")
+	lineEnd := strings.IndexByte(normalizedMarkdown, '\n')
+	firstLine := normalizedMarkdown
+	rest := ""
+	if lineEnd >= 0 {
+		firstLine = strings.TrimSuffix(normalizedMarkdown[:lineEnd], "\r")
+		rest = normalizedMarkdown[lineEnd+1:]
+	}
+	match := enterpriseSiteMarkdownHeadingPattern.FindStringSubmatch(strings.TrimSpace(firstLine))
+	if len(match) == 2 && enterpriseSiteNormalizeHeadingText(match[1]) == normalizedTitle {
+		return strings.TrimSpace(rest)
+	}
+	if enterpriseSiteNormalizeHeadingText(firstLine) == normalizedTitle {
+		return strings.TrimSpace(rest)
+	}
+	return markdownContent
+}
+
+func enterpriseSiteNormalizeHeadingText(value string) string {
+	value = strings.TrimPrefix(strings.TrimSpace(value), "\uFEFF")
+	return strings.Join(strings.Fields(value), " ")
+}
+
+func enterpriseSiteFirstMeaningfulHTMLNode(nodes []*html.Node) *html.Node {
+	for _, node := range nodes {
+		if !enterpriseSiteHTMLNodeIsSkippable(node) {
+			return node
+		}
+	}
+	return nil
+}
+
+func enterpriseSiteFirstMeaningfulHTMLChild(node *html.Node) *html.Node {
+	if node == nil {
+		return nil
+	}
+	for child := node.FirstChild; child != nil; child = child.NextSibling {
+		if !enterpriseSiteHTMLNodeIsSkippable(child) {
+			return child
+		}
+	}
+	return nil
+}
+
+func enterpriseSiteHTMLNodeIsTitleHeading(node *html.Node, normalizedTitle string) bool {
+	if node == nil || node.Type != html.ElementNode {
+		return false
+	}
+	tagName := strings.ToLower(strings.TrimSpace(node.Data))
+	if tagName != "h1" && tagName != "h2" {
+		return false
+	}
+	return enterpriseSiteNormalizeHeadingText(enterpriseSiteHTMLNodeText(node)) == normalizedTitle
+}
+
+func enterpriseSiteHTMLNodeText(node *html.Node) string {
+	if node == nil {
+		return ""
+	}
+	var builder strings.Builder
+	enterpriseSiteAppendHTMLNodeText(&builder, node)
+	return builder.String()
+}
+
+func enterpriseSiteAppendHTMLNodeText(builder *strings.Builder, node *html.Node) {
+	if node == nil {
+		return
+	}
+	if node.Type == html.TextNode {
+		builder.WriteString(node.Data)
+		return
+	}
+	for child := node.FirstChild; child != nil; child = child.NextSibling {
+		enterpriseSiteAppendHTMLNodeText(builder, child)
+	}
+}
+
+func enterpriseSiteHTMLNodeIsContentWrapper(node *html.Node) bool {
+	if node == nil || node.Type != html.ElementNode {
+		return false
+	}
+	switch strings.ToLower(strings.TrimSpace(node.Data)) {
+	case "article", "div", "main", "section":
+		return true
+	default:
+		return false
+	}
+}
+
+func enterpriseSiteHTMLNodeIsSkippable(node *html.Node) bool {
+	if node == nil {
+		return true
+	}
+	switch node.Type {
+	case html.CommentNode:
+		return true
+	case html.TextNode:
+		return enterpriseSiteNormalizeHeadingText(node.Data) == ""
+	case html.ElementNode:
+		if strings.EqualFold(node.Data, "br") {
+			return true
+		}
+		return enterpriseSiteNormalizeHeadingText(enterpriseSiteHTMLNodeText(node)) == "" && !enterpriseSiteHTMLNodeHasNonTextContent(node)
+	default:
+		return false
+	}
+}
+
+func enterpriseSiteHTMLNodeHasNonTextContent(node *html.Node) bool {
+	if node == nil {
+		return false
+	}
+	if node.Type == html.ElementNode {
+		switch strings.ToLower(strings.TrimSpace(node.Data)) {
+		case "audio", "canvas", "embed", "iframe", "img", "object", "svg", "table", "video":
+			return true
+		}
+	}
+	for child := node.FirstChild; child != nil; child = child.NextSibling {
+		if enterpriseSiteHTMLNodeHasNonTextContent(child) {
+			return true
+		}
+	}
+	return false
+}
+
+func enterpriseSiteWithoutTopLevelHTMLNode(nodes []*html.Node, remove *html.Node) []*html.Node {
+	if remove == nil {
+		return nodes
+	}
+	filtered := make([]*html.Node, 0, len(nodes))
+	for _, node := range nodes {
+		if node != remove {
+			filtered = append(filtered, node)
+		}
+	}
+	return filtered
+}
+
+func enterpriseSiteRenderHTMLNodes(nodes []*html.Node, fallback string) string {
+	var builder strings.Builder
+	for _, node := range nodes {
+		if err := html.Render(&builder, node); err != nil {
+			return fallback
+		}
+	}
+	return strings.TrimSpace(builder.String())
+}
+
+func markdownToEnterpriseSiteHTML(markdown string) (string, error) {
+	renderer := goldmark.New(
+		goldmark.WithExtensions(extension.GFM),
+		goldmark.WithRendererOptions(goldhtml.WithUnsafe()),
+	)
+	var out bytes.Buffer
+	if err := renderer.Convert([]byte(strings.TrimSpace(markdown)), &out); err != nil {
+		return "", err
+	}
+	return out.String(), nil
+}
+
+func enterpriseSiteDescription(htmlContent, markdownContent string) string {
+	text := strings.TrimSpace(enterpriseSiteSummaryTagPattern.ReplaceAllString(htmlContent, ""))
+	if text == "" {
+		text = enterpriseSitePlainTextFromMarkdown(markdownContent)
+	}
+	text = strings.Join(strings.Fields(text), " ")
+	if text == "" {
+		return ""
+	}
+	if len([]rune(text)) <= 150 {
+		return text
+	}
+	runes := []rune(text)
+	return string(runes[:150])
+}
+
+func enterpriseSitePlainTextFromMarkdown(markdownContent string) string {
+	lines := strings.Split(strings.TrimSpace(markdownContent), "\n")
+	cleaned := make([]string, 0, len(lines))
+	for _, line := range lines {
+		line = strings.TrimSpace(line)
+		if line == "" {
+			continue
+		}
+		line = strings.TrimLeft(line, "#")
+		line = strings.TrimSpace(line)
+		line = strings.TrimLeft(line, "-*")
+		line = strings.TrimSpace(line)
+		if line != "" {
+			cleaned = append(cleaned, line)
+		}
+	}
+	return strings.Join(cleaned, " ")
+}
+
+func sanitizeEnterpriseSiteError(err error) string {
+	if err == nil {
+		return ""
+	}
+	message := strings.TrimSpace(err.Error())
+	if message == "" {
+		return "CMS request failed"
+	}
+	for _, marker := range []string{"api_secret", "secret", "signature", "appid="} {
+		if strings.Contains(strings.ToLower(message), strings.ToLower(marker)) {
+			return "CMS request failed; please verify site credentials and plugin installation"
+		}
+	}
+	if len([]rune(message)) > 300 {
+		runes := []rune(message)
+		return string(runes[:300])
+	}
+	return message
+}
+
+func enterpriseSiteStringPointerValue(value *string) string {
+	if value == nil {
+		return ""
+	}
+	return *value
+}
+
+func enterpriseSiteTextPointer(value pgtype.Text) *string {
+	if !value.Valid {
+		return nil
+	}
+	trimmed := strings.TrimSpace(value.String)
+	if trimmed == "" {
+		return nil
+	}
+	return &trimmed
+}
+
+func enterpriseSiteTimePointer(value pgtype.Timestamptz) *time.Time {
+	if !value.Valid {
+		return nil
+	}
+	return &value.Time
+}
diff --git a/server/internal/tenant/app/enterprise_site_service_test.go b/server/internal/tenant/app/enterprise_site_service_test.go
new file mode 100644
index 0000000..fc3c975
--- /dev/null
+++ b/server/internal/tenant/app/enterprise_site_service_test.go
@@ -0,0 +1,436 @@
+package app
+
+import (
+	"context"
+	"strings"
+	"testing"
+
+	"github.com/geo-platform/tenant-api/internal/shared/config"
+	"github.com/geo-platform/tenant-api/internal/shared/publicasset"
+	"github.com/sergi/go-diff/diffmatchpatch"
+)
+
+func TestEnterpriseSiteDescriptionUsesRenderedHTMLText(t *testing.T) {
+	got := enterpriseSiteDescription(
+		"<h2>2026年合肥全屋定制行业发展现状</h2><p>消费者需求升级。</p>",
+		"## 旧版标题\n旧版正文不应该优先进入摘要",
+	)
+	if strings.Contains(got, "##") {
+		t.Fatalf("description contains markdown heading marker: %q", got)
+	}
+	if strings.Contains(got, "旧版正文") {
+		t.Fatalf("description used markdown while html text was available: %q", got)
+	}
+	if !strings.Contains(got, "2026年合肥全屋定制行业发展现状") {
+		t.Fatalf("description = %q, want rendered html text", got)
+	}
+}
+
+func TestEnterpriseSiteStripLeadingTitleHeadingHTMLRemovesDuplicateTitle(t *testing.T) {
+	got := enterpriseSiteStripLeadingTitleHeadingHTML(
+		"<h1>合肥全屋定制口碑怎么判断 看这里</h1><p>正文第一段。</p>",
+		"合肥全屋定制口碑怎么判断 看这里",
+	)
+	if strings.Contains(got, "<h1>") || strings.Contains(got, "合肥全屋定制口碑怎么判断 看这里") {
+		t.Fatalf("duplicate title heading was not removed: %q", got)
+	}
+	if !strings.Contains(got, "正文第一段") {
+		t.Fatalf("body content was lost: %q", got)
+	}
+}
+
+func TestEnterpriseSiteStripLeadingTitleHeadingHTMLKeepsDifferentHeading(t *testing.T) {
+	input := "<h2>行业现状</h2><p>正文第一段。</p>"
+	got := enterpriseSiteStripLeadingTitleHeadingHTML(input, "合肥全屋定制口碑怎么判断 看这里")
+	if got != input {
+		t.Fatalf("different leading heading changed: %q", got)
+	}
+}
+
+func TestEnterpriseSiteStripLeadingTitleHeadingMarkdownRemovesDuplicateTitle(t *testing.T) {
+	got := enterpriseSiteStripLeadingTitleHeadingMarkdown(
+		"# 合肥全屋定制口碑怎么判断 看这里\n\n正文第一段。",
+		"合肥全屋定制口碑怎么判断 看这里",
+	)
+	if strings.Contains(got, "合肥全屋定制口碑怎么判断 看这里") {
+		t.Fatalf("duplicate markdown title was not removed: %q", got)
+	}
+	if got != "正文第一段。" {
+		t.Fatalf("markdown body = %q, want body only", got)
+	}
+}
+
+func TestEnterpriseSiteStripLeadingTitleHeadingMarkdownRemovesPlainTitle(t *testing.T) {
+	got := enterpriseSiteStripLeadingTitleHeadingMarkdown(
+		"装修预算不够？2026安徽6款高性价比家居整理\n\n近年安徽本地全屋定制需求持续上涨。",
+		"装修预算不够？2026安徽6款高性价比家居整理",
+	)
+	if strings.Contains(got, "装修预算不够？2026安徽6款高性价比家居整理") {
+		t.Fatalf("plain duplicate title was not removed: %q", got)
+	}
+	if !strings.HasPrefix(got, "近年安徽本地全屋定制需求持续上涨") {
+		t.Fatalf("markdown body = %q, want body only", got)
+	}
+}
+
+func TestEnterpriseSiteDescriptionAfterTitleStripSkipsDuplicateTitle(t *testing.T) {
+	title := "合肥全屋定制口碑怎么判断 看这里"
+	html := enterpriseSiteStripLeadingTitleHeadingHTML("<h1>"+title+"</h1><p>正文第一段。</p>", title)
+	markdown := enterpriseSiteStripLeadingTitleHeadingMarkdown("# "+title+"\n\n正文第一段。", title)
+	got := enterpriseSiteDescription(html, markdown)
+	if strings.Contains(got, title) {
+		t.Fatalf("description still contains duplicate title: %q", got)
+	}
+	if !strings.Contains(got, "正文第一段") {
+		t.Fatalf("description = %q, want body text", got)
+	}
+}
+
+func TestEnterpriseSiteDescriptionFallsBackToCleanMarkdown(t *testing.T) {
+	got := enterpriseSiteDescription("", "## 2026年合肥全屋定制行业发展现状\n- 消费者需求升级。")
+	if strings.Contains(got, "##") || strings.Contains(got, "- ") {
+		t.Fatalf("description was not cleaned: %q", got)
+	}
+	if !strings.Contains(got, "消费者需求升级") {
+		t.Fatalf("description = %q, want markdown text", got)
+	}
+}
+
+func TestEnterpriseSiteNormalizeStoredContentRestoresDiffPatch(t *testing.T) {
+	source := "# 2026安徽全屋定制行业\n\n## 引言\n正文第一段。"
+	dmp := diffmatchpatch.New()
+	patch := dmp.PatchToText(dmp.PatchMake("", source))
+
+	got := enterpriseSiteNormalizeStoredContent(patch)
+
+	if got != source {
+		t.Fatalf("restored content = %q, want %q", got, source)
+	}
+	if strings.Contains(got, "@@ -") {
+		t.Fatalf("diff patch leaked into normalized content: %q", got)
+	}
+}
+
+func TestEnterpriseSiteNormalizeStoredContentRepairsMalformedEditorImage(t *testing.T) {
+	got := enterpriseSiteNormalizeStoredContent(
+		`<p class="article-editor-image article-editor-image--center" align="center" <img src="/api/public/assets/token" alt="" /></p>`,
+	)
+	if !strings.Contains(got, `align="center"><img`) {
+		t.Fatalf("malformed editor image was not repaired: %q", got)
+	}
+}
+
+func TestEnterpriseSiteHTMLContentPatchFallsBackToMarkdownRendering(t *testing.T) {
+	source := "# 2026安徽全屋定制行业\n\n## 引言\n正文第一段。"
+	dmp := diffmatchpatch.New()
+	htmlContent := enterpriseSiteNormalizeStoredContent(dmp.PatchToText(dmp.PatchMake("", source)))
+	markdownContent := ""
+	if htmlContent != "" && !enterpriseSiteContentLooksLikeHTML(htmlContent) {
+		markdownContent = htmlContent
+		htmlContent = ""
+	}
+
+	got, err := markdownToEnterpriseSiteHTML(markdownContent)
+	if err != nil {
+		t.Fatalf("render markdown: %v", err)
+	}
+
+	if strings.Contains(got, "@@ -") || strings.Contains(got, "%E5") {
+		t.Fatalf("rendered HTML still contains patch/url-encoded content: %q", got)
+	}
+	if !strings.Contains(got, "<h1>2026安徽全屋定制行业</h1>") || !strings.Contains(got, "<p>正文第一段。</p>") {
+		t.Fatalf("rendered HTML = %q, want UEditor-ready HTML", got)
+	}
+}
+
+func TestEnterpriseSiteAbsoluteImageURLsRewritesRelativeAssetPaths(t *testing.T) {
+	got := enterpriseSiteAbsoluteImageURLs(
+		`<p><img src="/api/public/assets/token" data-src="/api/public/assets/token" /></p>`,
+		"http://127.0.0.1:8080",
+	)
+	if strings.Count(got, "http://127.0.0.1:8080/api/public/assets/token") != 2 {
+		t.Fatalf("image urls were not absolutized: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteImageURLsEmbedsPublicAssetImages(t *testing.T) {
+	objectKey := "tenants/7/images/body.png"
+	token := publicasset.SignObjectKey(objectKey, "test-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "test-secret"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteImageURLs(
+		context.Background(),
+		7,
+		`<p><img src="/api/public/assets/`+token+`" data-src="/api/public/assets/`+token+`" /></p>`,
+		"http://127.0.0.1:8080",
+	)
+
+	if storage.gotKey != objectKey {
+		t.Fatalf("object key = %q, want %q", storage.gotKey, objectKey)
+	}
+	if strings.Count(got, `data:image/png;base64,`) != 2 {
+		t.Fatalf("image was not embedded in both image attrs: %s", got)
+	}
+	if strings.Contains(got, "/api/public/assets/") {
+		t.Fatalf("public asset url leaked into enterprise site payload: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteImageURLsEmbedsPublicAssetImagesWithStaleSignature(t *testing.T) {
+	objectKey := "tenants/7/images/body.png"
+	token := publicasset.SignObjectKey(objectKey, "old-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "new-secret"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteImageURLs(
+		context.Background(),
+		7,
+		`<p><img src="http://localhost:5178/api/public/assets/`+token+`" /></p>`,
+		"http://127.0.0.1:8080",
+	)
+
+	if storage.gotKey != objectKey {
+		t.Fatalf("object key = %q, want %q", storage.gotKey, objectKey)
+	}
+	if !strings.Contains(got, `src="data:image/png;base64,`) {
+		t.Fatalf("stale signed image was not embedded: %s", got)
+	}
+	if strings.Contains(got, "localhost:5178") || strings.Contains(got, "/api/public/assets/") {
+		t.Fatalf("saas asset url leaked into enterprise site payload: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteImageURLsStripsSaaSImageAttrs(t *testing.T) {
+	objectKey := "tenants/7/images/body.png"
+	token := publicasset.SignObjectKey(objectKey, "test-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "test-secret"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteImageURLs(
+		context.Background(),
+		7,
+		`<p><img src="/api/public/assets/`+token+`" alt="" data-asset-id="35" asset-id="35" /></p>`,
+		"http://127.0.0.1:8080",
+	)
+
+	if !strings.Contains(got, `src="data:image/png;base64,`) {
+		t.Fatalf("image was not embedded: %s", got)
+	}
+	if strings.Contains(got, "data-asset-id") || strings.Contains(got, "asset-id") {
+		t.Fatalf("saas image attrs leaked into enterprise site payload: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteImageURLsDropsUnavailableSaaSAssetImage(t *testing.T) {
+	objectKey := "tenants/7/images/deleted.webp"
+	token := publicasset.SignObjectKey(objectKey, "old-secret")
+	storage := &enterpriseSiteImageObjectStorage{}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "new-secret"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteImageURLs(
+		context.Background(),
+		7,
+		`<p>前文</p><p class="article-editor-image article-editor-image--center" align="center"><img src="http://localhost:5178/api/public/assets/`+token+`" alt="" /></p><p>后文</p>`,
+		"http://127.0.0.1:8080",
+	)
+
+	if strings.Contains(got, "localhost:5178") || strings.Contains(got, "/api/public/assets/") {
+		t.Fatalf("unavailable saas asset url leaked into enterprise site payload: %s", got)
+	}
+	if strings.Contains(got, "<img") || strings.Contains(got, "article-editor-image") {
+		t.Fatalf("unavailable image wrapper was not removed: %s", got)
+	}
+	if !strings.Contains(got, "前文") || !strings.Contains(got, "后文") {
+		t.Fatalf("surrounding content was lost: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteImageURLsEmbedsIncompletePublicAssetPaths(t *testing.T) {
+	objectKey := "tenants/7/articles/42/images/body.webp"
+	token := publicasset.SignObjectKey(objectKey, "test-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "test-secret"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteImageURLs(
+		context.Background(),
+		7,
+		`<p><img src="api/public/assets/`+token+`?format=png" /></p>`,
+		"http://127.0.0.1:8080",
+	)
+
+	if storage.gotKey != objectKey {
+		t.Fatalf("object key = %q, want %q", storage.gotKey, objectKey)
+	}
+	if !strings.Contains(got, `src="data:image/png;base64,`) {
+		t.Fatalf("image was not embedded for incomplete asset path: %s", got)
+	}
+	if strings.Contains(got, "127.0.0.1") || strings.Contains(got, "api/public/assets") {
+		t.Fatalf("incomplete asset path leaked into enterprise site payload: %s", got)
+	}
+}
+
+func TestMarkdownRenderedEnterpriseSiteImageEmbedsIncompletePublicAssetPath(t *testing.T) {
+	objectKey := "tenants/7/articles/42/images/body.webp"
+	token := publicasset.SignObjectKey(objectKey, "test-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT: config.JWTConfig{Secret: "test-secret"},
+	})).WithObjectStorage(storage)
+	html, err := markdownToEnterpriseSiteHTML("正文\n\n![body](api/public/assets/" + token + "?format=png)")
+	if err != nil {
+		t.Fatalf("render markdown: %v", err)
+	}
+
+	got := svc.prepareEnterpriseSiteImageURLs(context.Background(), 7, html, "http://127.0.0.1:8080")
+
+	if storage.gotKey != objectKey {
+		t.Fatalf("object key = %q, want %q", storage.gotKey, objectKey)
+	}
+	if !strings.Contains(got, `src="data:image/png;base64,`) {
+		t.Fatalf("markdown image was not embedded for incomplete asset path: %s", got)
+	}
+	if strings.Contains(got, "127.0.0.1") || strings.Contains(got, "api/public/assets") {
+		t.Fatalf("markdown image asset path leaked into enterprise site payload: %s", got)
+	}
+}
+
+func TestPrepareEnterpriseSitePublishAssetsEmbedsIncompleteCoverAssetPath(t *testing.T) {
+	objectKey := "tenants/7/articles/42/images/cover.webp"
+	token := publicasset.SignObjectKey(objectKey, "test-secret")
+	storage := &enterpriseSiteImageObjectStorage{content: testEnterpriseSitePNG()}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT:    config.JWTConfig{Secret: "test-secret"},
+		Server: config.ServerConfig{PublicBaseURL: "http://127.0.0.1:8080"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteCoverURL(
+		context.Background(),
+		7,
+		"api/public/assets/"+token+"?format=png",
+		nil,
+		"http://127.0.0.1:8080",
+	)
+
+	if storage.gotKey != objectKey {
+		t.Fatalf("object key = %q, want %q", storage.gotKey, objectKey)
+	}
+	if !strings.HasPrefix(got, "data:image/png;base64,") {
+		t.Fatalf("cover was not embedded as data URI: %q", got)
+	}
+}
+
+func TestPrepareEnterpriseSiteCoverURLDropsUnavailableSaaSAssetURL(t *testing.T) {
+	objectKey := "tenants/7/images/deleted.webp"
+	token := publicasset.SignObjectKey(objectKey, "old-secret")
+	storage := &enterpriseSiteImageObjectStorage{}
+	svc := NewEnterpriseSiteService(nil, config.NewStaticProvider(&config.Config{
+		JWT:    config.JWTConfig{Secret: "new-secret"},
+		Server: config.ServerConfig{PublicBaseURL: "http://127.0.0.1:8080"},
+	})).WithObjectStorage(storage)
+
+	got := svc.prepareEnterpriseSiteCoverURL(
+		context.Background(),
+		7,
+		"http://localhost:5178/api/public/assets/"+token,
+		nil,
+		"http://127.0.0.1:8080",
+	)
+
+	if got != "" {
+		t.Fatalf("unavailable saas cover should not be sent to pbootcms, got %q", got)
+	}
+}
+
+func TestEnterpriseSiteNormalizeLegacyPublishErrorState(t *testing.T) {
+	errorMessage := "图片下载失败"
+	item := EnterpriseSiteConnectionResponse{
+		Status:    "error",
+		LastError: &errorMessage,
+		LatestRecord: &EnterpriseSiteLatestPublishRecord{
+			Status:       "failed",
+			ErrorMessage: &errorMessage,
+		},
+	}
+
+	enterpriseSiteNormalizeLegacyPublishErrorState(&item)
+
+	if item.Status != "connected" {
+		t.Fatalf("status = %q, want connected", item.Status)
+	}
+	if item.LastError != nil {
+		t.Fatalf("last error = %q, want nil", *item.LastError)
+	}
+}
+
+func TestEnterpriseSiteNormalizeLegacyPublishErrorStateKeepsPingError(t *testing.T) {
+	lastError := "CMS request failed"
+	recordError := "图片下载失败"
+	item := EnterpriseSiteConnectionResponse{
+		Status:    "error",
+		LastError: &lastError,
+		LatestRecord: &EnterpriseSiteLatestPublishRecord{
+			Status:       "failed",
+			ErrorMessage: &recordError,
+		},
+	}
+
+	enterpriseSiteNormalizeLegacyPublishErrorState(&item)
+
+	if item.Status != "error" {
+		t.Fatalf("status = %q, want error", item.Status)
+	}
+	if item.LastError == nil || *item.LastError != lastError {
+		t.Fatalf("last error changed: %#v", item.LastError)
+	}
+}
+
+type enterpriseSiteImageObjectStorage struct {
+	content []byte
+	gotKey  string
+}
+
+func (s *enterpriseSiteImageObjectStorage) Validate() error { return nil }
+
+func (s *enterpriseSiteImageObjectStorage) PutBytes(context.Context, string, []byte, string) error {
+	return nil
+}
+
+func (s *enterpriseSiteImageObjectStorage) GetBytes(_ context.Context, objectKey string) ([]byte, error) {
+	s.gotKey = objectKey
+	return s.content, nil
+}
+
+func (s *enterpriseSiteImageObjectStorage) Exists(context.Context, string) (bool, error) {
+	return true, nil
+}
+
+func (s *enterpriseSiteImageObjectStorage) Delete(context.Context, string) error { return nil }
+
+func (s *enterpriseSiteImageObjectStorage) PublicURL(string) (string, error) { return "", nil }
+
+func (s *enterpriseSiteImageObjectStorage) DownloadURL(string) (string, error) { return "", nil }
+
+func testEnterpriseSitePNG() []byte {
+	return []byte{
+		0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a,
+		0x00, 0x00, 0x00, 0x0d, 0x49, 0x48, 0x44, 0x52,
+		0x00, 0x00, 0x00, 0x01, 0x00, 0x00, 0x00, 0x01,
+		0x08, 0x06, 0x00, 0x00, 0x00, 0x1f, 0x15, 0xc4,
+		0x89, 0x00, 0x00, 0x00, 0x0a, 0x49, 0x44, 0x41,
+		0x54, 0x78, 0x9c, 0x63, 0x00, 0x01, 0x00, 0x00,
+		0x05, 0x00, 0x01, 0x0d, 0x0a, 0x2d, 0xb4, 0x00,
+		0x00, 0x00, 0x00, 0x49, 0x45, 0x4e, 0x44, 0xae,
+		0x42, 0x60, 0x82,
+	}
+}
diff --git a/server/internal/tenant/app/media_service.go b/server/internal/tenant/app/media_service.go
index 0eb636f..ff0300a 100644
--- a/server/internal/tenant/app/media_service.go
+++ b/server/internal/tenant/app/media_service.go
@@ -38,8 +38,10 @@ type PublishRecordResponse struct {
 	ID                 int64      `json:"id"`
 	PublishBatchID     int64      `json:"publish_batch_id"`
 	ArticleID          int64      `json:"article_id"`
-	PlatformAccountID  int64      `json:"platform_account_id"`
+	PlatformAccountID  *int64     `json:"platform_account_id"`
 	DesktopAccountID   *string    `json:"desktop_account_id"`
+	TargetType         string     `json:"target_type"`
+	TargetConnectionID *int64     `json:"target_connection_id"`
 	PlatformID         string     `json:"platform_id"`
 	PlatformName       string     `json:"platform_name"`
 	PlatformNickname   string     `json:"platform_nickname"`
@@ -98,12 +100,22 @@ func (s *MediaService) ListArticlePublishRecords(ctx context.Context, articleID
 
 func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID, brandID, articleID int64) ([]PublishRecordResponse, error) {
 	rows, err := s.pool.Query(ctx, `
-		SELECT pr.id, pr.publish_batch_id, pr.article_id, pr.platform_account_id, pa.desktop_id::text, pr.platform_id,
-		       mp.name, pa.nickname, pr.status, pr.external_article_id, pr.external_article_url,
+		SELECT pr.id, pr.publish_batch_id, pr.article_id, pr.platform_account_id, pa.desktop_id::text,
+		       COALESCE(pr.target_type, 'platform_account'), pr.target_connection_id, pr.platform_id,
+		       COALESCE(mp.name, esc.site_name, esc.name, pr.platform_id) AS platform_name,
+		       CASE
+		         WHEN COALESCE(pr.target_type, 'platform_account') = 'enterprise_site'
+		           THEN COALESCE(esc.site_name, esc.name, '企业站点')
+		         ELSE COALESCE(pa.nickname, '')
+		       END AS platform_nickname,
+		       pr.status, pr.external_article_id, pr.external_article_url,
 		       pr.external_manage_url, pr.published_at, pr.error_message, pr.created_at, pr.updated_at
 		FROM publish_records pr
-		JOIN media_platforms mp ON mp.platform_id = pr.platform_id
-		JOIN platform_accounts pa ON pa.id = pr.platform_account_id
+		LEFT JOIN media_platforms mp ON mp.platform_id = pr.platform_id
+		LEFT JOIN platform_accounts pa ON pa.id = pr.platform_account_id
+		LEFT JOIN enterprise_site_connections esc
+		  ON esc.id = pr.target_connection_id
+		 AND esc.tenant_id = pr.tenant_id
 		JOIN articles a ON a.id = pr.article_id AND a.tenant_id = pr.tenant_id
 		WHERE pr.tenant_id = $1 AND pr.article_id = $2 AND a.brand_id = $3 AND a.deleted_at IS NULL
 		ORDER BY pr.created_at DESC, pr.id DESC
@@ -116,13 +128,15 @@ func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID,
 	items := make([]PublishRecordResponse, 0)
 	for rows.Next() {
 		var item PublishRecordResponse
-		var desktopAccountID string
+		var desktopAccountID *string
 		if err := rows.Scan(
 			&item.ID,
 			&item.PublishBatchID,
 			&item.ArticleID,
 			&item.PlatformAccountID,
 			&desktopAccountID,
+			&item.TargetType,
+			&item.TargetConnectionID,
 			&item.PlatformID,
 			&item.PlatformName,
 			&item.PlatformNickname,
@@ -137,8 +151,8 @@ func (s *MediaService) listArticlePublishRecords(ctx context.Context, tenantID,
 		); err != nil {
 			return nil, response.ErrInternal(50043, "publish_record_scan_failed", err.Error())
 		}
-		if strings.TrimSpace(desktopAccountID) != "" {
-			item.DesktopAccountID = &desktopAccountID
+		if desktopAccountID != nil && strings.TrimSpace(*desktopAccountID) != "" {
+			item.DesktopAccountID = desktopAccountID
 		}
 		normalizePublishRecordForResponse(&item)
 		items = append(items, item)
diff --git a/server/internal/tenant/transport/enterprise_site_handler.go b/server/internal/tenant/transport/enterprise_site_handler.go
new file mode 100644
index 0000000..41f7811
--- /dev/null
+++ b/server/internal/tenant/transport/enterprise_site_handler.go
@@ -0,0 +1,142 @@
+package transport
+
+import (
+	"strconv"
+
+	"github.com/gin-gonic/gin"
+
+	"github.com/geo-platform/tenant-api/internal/bootstrap"
+	"github.com/geo-platform/tenant-api/internal/shared/response"
+	"github.com/geo-platform/tenant-api/internal/tenant/app"
+)
+
+type EnterpriseSiteHandler struct {
+	svc *app.EnterpriseSiteService
+}
+
+func NewEnterpriseSiteHandler(a *bootstrap.App) *EnterpriseSiteHandler {
+	return &EnterpriseSiteHandler{
+		svc: app.NewEnterpriseSiteService(a.DB, a.ConfigStore).
+			WithCache(a.Cache).
+			WithObjectStorage(a.ObjectStorage),
+	}
+}
+
+func (h *EnterpriseSiteHandler) List(c *gin.Context) {
+	data, err := h.svc.List(c.Request.Context())
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *EnterpriseSiteHandler) Create(c *gin.Context) {
+	var req app.CreateEnterpriseSiteConnectionRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	data, err := h.svc.Create(c.Request.Context(), req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.SuccessWithStatus(c, 201, data)
+}
+
+func (h *EnterpriseSiteHandler) Update(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	var req app.UpdateEnterpriseSiteConnectionRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	data, err := h.svc.Update(c.Request.Context(), id, req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *EnterpriseSiteHandler) Delete(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	if err := h.svc.Delete(c.Request.Context(), id); err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, nil)
+}
+
+func (h *EnterpriseSiteHandler) Ping(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	data, err := h.svc.Ping(c.Request.Context(), id)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *EnterpriseSiteHandler) Categories(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	data, err := h.svc.Categories(c.Request.Context(), id)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *EnterpriseSiteHandler) SyncCategories(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	data, err := h.svc.SyncCategories(c.Request.Context(), id)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func (h *EnterpriseSiteHandler) PublishArticle(c *gin.Context) {
+	id, ok := enterpriseSiteIDParam(c)
+	if !ok {
+		return
+	}
+	var req app.PublishEnterpriseSiteArticleRequest
+	if err := c.ShouldBindJSON(&req); err != nil {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_params", err.Error()))
+		return
+	}
+	data, err := h.svc.PublishArticle(c.Request.Context(), id, req)
+	if err != nil {
+		response.Error(c, err)
+		return
+	}
+	response.Success(c, data)
+}
+
+func enterpriseSiteIDParam(c *gin.Context) (int64, bool) {
+	id, err := strconv.ParseInt(c.Param("id"), 10, 64)
+	if err != nil || id <= 0 {
+		response.Error(c, response.ErrBadRequest(40001, "invalid_id", "enterprise site id must be a positive number"))
+		return 0, false
+	}
+	return id, true
+}
diff --git a/server/internal/tenant/transport/router.go b/server/internal/tenant/transport/router.go
index 463c179..0486d9a 100644
--- a/server/internal/tenant/transport/router.go
+++ b/server/internal/tenant/transport/router.go
@@ -104,6 +104,17 @@ func RegisterRoutes(app *bootstrap.App) {
 	media := tenantProtected.Group("/media")
 	media.GET("/platforms", mediaHandler.ListPlatforms)
 
+	enterpriseSiteHandler := NewEnterpriseSiteHandler(app)
+	enterpriseSites := tenantProtected.Group("/enterprise-sites")
+	enterpriseSites.GET("", enterpriseSiteHandler.List)
+	enterpriseSites.POST("", enterpriseSiteHandler.Create)
+	enterpriseSites.PATCH("/:id", enterpriseSiteHandler.Update)
+	enterpriseSites.DELETE("/:id", enterpriseSiteHandler.Delete)
+	enterpriseSites.POST("/:id/ping", enterpriseSiteHandler.Ping)
+	enterpriseSites.GET("/:id/categories", enterpriseSiteHandler.Categories)
+	enterpriseSites.POST("/:id/categories/sync", enterpriseSiteHandler.SyncCategories)
+	enterpriseSites.POST("/:id/publish", middleware.RequireCurrentBrand(), enterpriseSiteHandler.PublishArticle)
+
 	desktopClient := tenantProtected.Group("/desktop-client")
 	desktopClient.GET("/releases/downloadable", desktopReleaseHandler.ListDownloadable)
 
diff --git a/server/migrations/20260605110000_add_enterprise_site_publisher.down.sql b/server/migrations/20260605110000_add_enterprise_site_publisher.down.sql
new file mode 100644
index 0000000..386fd3a
--- /dev/null
+++ b/server/migrations/20260605110000_add_enterprise_site_publisher.down.sql
@@ -0,0 +1,20 @@
+DROP INDEX IF EXISTS idx_publish_records_enterprise_site_active;
+DROP INDEX IF EXISTS uk_publish_records_batch_enterprise_site;
+
+DELETE FROM publish_records
+WHERE target_type = 'enterprise_site';
+
+ALTER TABLE publish_records
+    DROP CONSTRAINT IF EXISTS ck_publish_records_target_ref,
+    DROP CONSTRAINT IF EXISTS ck_publish_records_target_type,
+    DROP COLUMN IF EXISTS target_connection_id,
+    DROP COLUMN IF EXISTS target_type;
+
+ALTER TABLE publish_records
+    ALTER COLUMN platform_account_id SET NOT NULL;
+
+DELETE FROM media_platforms
+WHERE platform_id = 'pbootcms';
+
+DROP TABLE IF EXISTS enterprise_site_categories;
+DROP TABLE IF EXISTS enterprise_site_connections;
diff --git a/server/migrations/20260605110000_add_enterprise_site_publisher.up.sql b/server/migrations/20260605110000_add_enterprise_site_publisher.up.sql
new file mode 100644
index 0000000..9bff7d1
--- /dev/null
+++ b/server/migrations/20260605110000_add_enterprise_site_publisher.up.sql
@@ -0,0 +1,96 @@
+CREATE TABLE enterprise_site_connections (
+    id                    BIGSERIAL PRIMARY KEY,
+    tenant_id             BIGINT NOT NULL REFERENCES tenants(id),
+    workspace_id          BIGINT NOT NULL REFERENCES workspaces(id),
+    created_by_user_id    BIGINT NOT NULL REFERENCES users(id),
+    name                  VARCHAR(160) NOT NULL,
+    site_url              TEXT NOT NULL,
+    cms_type              VARCHAR(32) NOT NULL,
+    auth_type             VARCHAR(32) NOT NULL DEFAULT 'native_api',
+    appid                 VARCHAR(160) NOT NULL,
+    credential_ciphertext TEXT NOT NULL,
+    default_acode         VARCHAR(32),
+    default_mcode         VARCHAR(32),
+    default_scode         VARCHAR(64),
+    status                VARCHAR(20) NOT NULL DEFAULT 'draft',
+    plugin_version        VARCHAR(40),
+    site_name             VARCHAR(160),
+    last_ping_at          TIMESTAMPTZ,
+    last_sync_at          TIMESTAMPTZ,
+    last_publish_at       TIMESTAMPTZ,
+    last_error            TEXT,
+    created_at            TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at            TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    deleted_at            TIMESTAMPTZ,
+    CONSTRAINT ck_enterprise_site_connections_cms_type
+        CHECK (cms_type IN ('pbootcms', 'wordpress', 'dedecms', 'phpcms')),
+    CONSTRAINT ck_enterprise_site_connections_status
+        CHECK (status IN ('draft', 'connected', 'error', 'disabled'))
+);
+
+CREATE UNIQUE INDEX uk_enterprise_site_connections_active_site
+    ON enterprise_site_connections (tenant_id, workspace_id, lower(site_url), cms_type)
+    WHERE deleted_at IS NULL;
+
+CREATE INDEX idx_enterprise_site_connections_tenant_workspace
+    ON enterprise_site_connections (tenant_id, workspace_id, status, created_at DESC)
+    WHERE deleted_at IS NULL;
+
+CREATE TABLE enterprise_site_categories (
+    id               BIGSERIAL PRIMARY KEY,
+    tenant_id        BIGINT NOT NULL REFERENCES tenants(id),
+    workspace_id     BIGINT NOT NULL REFERENCES workspaces(id),
+    connection_id    BIGINT NOT NULL REFERENCES enterprise_site_connections(id) ON DELETE CASCADE,
+    remote_id        VARCHAR(128) NOT NULL,
+    parent_remote_id VARCHAR(128),
+    name             VARCHAR(160) NOT NULL,
+    slug             VARCHAR(160),
+    raw_payload_json JSONB,
+    synced_at        TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    created_at       TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    updated_at       TIMESTAMPTZ NOT NULL DEFAULT NOW(),
+    CONSTRAINT uk_enterprise_site_categories_remote
+        UNIQUE (connection_id, remote_id)
+);
+
+CREATE INDEX idx_enterprise_site_categories_connection
+    ON enterprise_site_categories (connection_id, remote_id);
+
+ALTER TABLE publish_records
+    ALTER COLUMN platform_account_id DROP NOT NULL;
+
+ALTER TABLE publish_records
+    ADD COLUMN target_type VARCHAR(32) NOT NULL DEFAULT 'platform_account',
+    ADD COLUMN target_connection_id BIGINT REFERENCES enterprise_site_connections(id);
+
+ALTER TABLE publish_records
+    ADD CONSTRAINT ck_publish_records_target_type
+        CHECK (target_type IN ('platform_account', 'enterprise_site'));
+
+ALTER TABLE publish_records
+    ADD CONSTRAINT ck_publish_records_target_ref
+        CHECK (
+            (target_type = 'platform_account' AND platform_account_id IS NOT NULL AND target_connection_id IS NULL)
+            OR
+            (target_type = 'enterprise_site' AND platform_account_id IS NULL AND target_connection_id IS NOT NULL)
+        );
+
+CREATE UNIQUE INDEX uk_publish_records_batch_enterprise_site
+    ON publish_records (publish_batch_id, target_connection_id)
+    WHERE target_type = 'enterprise_site';
+
+CREATE INDEX idx_publish_records_enterprise_site_active
+    ON publish_records (tenant_id, article_id, target_connection_id, updated_at DESC, id DESC)
+    WHERE target_type = 'enterprise_site';
+
+INSERT INTO media_platforms (platform_id, name, category, short_name, accent_color, login_url, logo_url, status, sort_order)
+VALUES ('pbootcms', 'PBootCMS', 'enterprise', 'P', '#1d4ed8', NULL, NULL, 'active', 900)
+ON CONFLICT (platform_id)
+DO UPDATE SET
+    name = EXCLUDED.name,
+    category = EXCLUDED.category,
+    short_name = EXCLUDED.short_name,
+    accent_color = EXCLUDED.accent_color,
+    status = EXCLUDED.status,
+    sort_order = EXCLUDED.sort_order,
+    updated_at = NOW();