skills-shared/pixverse-cli-1.4.7.md

# PixVerse CLI 1.4.7 Installation And Capability Review

Reviewed on 2026-10-08 against the published npm tarball, package metadata,
README and offline capability manifest. npm `latest` resolves to `1.4.7`.
Plugin `1.3.3` requires CLI `>=1.4.7` on both managed channels
and Node.js `>=22.12.0`.

- Capability schema: `1.2.0`; 94 command records.
- Capabilities SHA-256: `de58dabdffe32d812ecbf38f6d893f7cdea083009bc655250e25bc012afb15ff`.
- npm integrity: `sha512-3uiAaMXZhynU312bw2rMB4uJv+PZHrxc5sEa1NJ9p84HUMAsHGkhWNFimVdECk9160+LHcbF/ISGG7NzoEn83Q==`.

## Installation

Online bootstrap continues to install or refresh `pixverse@latest` in the private
managed runtime. Existing versions below `1.4.7` are blocked and require
`bootstrap --yes`, followed by doctor. Cached readiness from the previous floor
is invalidated without clearing credentials or forcing login. Installation is
verified against the minimum even if a registry mirror still serves an older
`latest`; an old package cannot become ready.

The `1.4.7` floor selects the upstream Linux compatibility release. Linux smoke
verification in a Debian container with Node.js 24 covers a fresh npm install
through the plugin installation helper, wrapper executable startup, offline Create
capability discovery, the registry/runtime compatibility gate and unauthenticated status. It does not establish successful
OAuth, authenticated cloud access or paid generation.

Local bundles still require an internal ZIP, with no npm fallback. The historical
`1.4.0-internal.20260904-151209` artifact remains historical review evidence only;
it is below the new floor and must be replaced with a compatible internal ZIP
before local packaging. No new internal artifact has been reviewed here.

## Capability Delta From 1.4.5

All 94 command declarations are identical. Image/video Create contracts, Canvas
contracts/discovery/bindings, global region options and exit codes are unchanged.
Sunburst 2K/high and Seedance 2.5 1080p remain the plugin defaults.

Audio capability metadata removes per-model music prompt limits, music lyrics
length limits, voice text limits and voice `max_characters`. Do not infer these
removed limits from the historical manifest: use the active offline Create
contract. Other audio mode fields and model routes are unchanged.

Read `./pixverse-cli-1.4.5.md` for the retained Canvas/download behavior,
`./pixverse-cli-1.4.4.md` for model additions and `./pixverse-cli-1.4.0.md` for
historical capability details. The obfuscated npm executable does not provide a
readable implementation diff; this review makes no claim about its exact Linux
fix implementation or authenticated Canvas testing.