@uzooai/anime-ai-cli 0.0.0-stage → 0.5.0

package/extensions/uzoo-cli-login/popup.js

@@ -0,0 +1,65 @@
+const SITE = 'https://uzooai.com'
+const $ = id => document.getElementById(id)
+const button = $('action')
+let action
+
+function bridgeFromUrl(value) {
+  const url = new URL(value)
+  const token = url.hash.slice(1)
+  if (url.protocol !== 'http:' || url.hostname !== '127.0.0.1' || !url.port || url.username || url.password || url.pathname !== '/connect' || !/^[A-Za-z0-9_-]{43}$/.test(token)) return null
+  return { callback: url.origin, token }
+}
+async function bridgeFetch(pairing, endpoint, body) {
+  const response = await fetch(`${pairing.callback}${endpoint}`, {
+    method: body === undefined ? 'GET' : 'POST',
+    headers: { 'X-Uzoo-Bridge': pairing.token, ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+    redirect: 'error', credentials: 'omit', mode: 'cors', signal: AbortSignal.timeout(10000),
+  })
+  if (!response.ok) { const data = await response.json().catch(() => ({})); throw new Error(`CLI 连接失败（${data.error || response.status}）；请重新运行 auth login 并连接`) }
+  return response.json()
+}
+
+async function init() {
+  const [tab] = await chrome.tabs.query({ active: true, currentWindow: true })
+  if (!tab?.id || !tab.url) throw new Error('无法读取当前标签页，请在 CLI 连接页面或 Uzoo 网站打开扩展')
+  const pairing = bridgeFromUrl(tab.url)
+  if (pairing) {
+    $('description').textContent = '连接当前本机 CLI，然后在正常网站完成登录。'
+    button.textContent = '连接 CLI 并打开登录页'
+    action = async () => {
+      const config = await bridgeFetch(pairing, '/config', {})
+      const api = new URL(config.api), login = new URL(config.loginUrl)
+      if (config.origin !== SITE || api.origin !== SITE || api.pathname !== '/api/v1' || api.search || api.hash || login.origin !== SITE || login.username || login.password) throw new Error('扩展只允许授权 uzooai.com；CLI 的网站配置不匹配')
+      const redirect = login.searchParams.get('redirect')
+      if (redirect && new URL(redirect, SITE).origin !== SITE) throw new Error('登录跳转地址不受支持')
+      await chrome.storage.session.set({ pairing: { ...pairing, ...config, tabId: tab.id } })
+      await chrome.tabs.update(tab.id, { url: login.href })
+      $('status').textContent = '请正常登录，进入工作区后再点击本扩展授权。'
+    }
+  } else {
+    const pending = (await chrome.storage.session.get('pairing')).pairing
+    if (!pending) throw new Error('尚未连接 CLI。先运行 auth login，再在打开的本机连接页面点击扩展')
+    if (new URL(tab.url).origin !== SITE || tab.id !== pending.tabId) throw new Error('请在刚才由 CLI 打开的 Uzoo 标签页完成登录并授权')
+    $('description').textContent = '请先完成网站登录。点击下方按钮会将当前账号的网页会话（含刷新 Cookie）交给已连接的本机 CLI。'
+    button.textContent = '授权当前会话给 CLI'
+    action = async () => {
+      const results = await chrome.scripting.executeScript({ target: { tabId: tab.id }, func: () => ({ origin: location.origin, accessToken: localStorage.getItem('access_token') || '', deviceId: localStorage.getItem('sign_v2_device_id') || '' }) })
+      const value = results[0]?.result
+      if (value?.origin !== SITE || !value.accessToken) throw new Error('当前页面尚未登录，请完成登录后再授权')
+      const cookies = await chrome.cookies.getAll({ url: `${pending.api}/auth/refresh` })
+      const jar = new Map()
+      for (const cookie of cookies.sort((a,b) => b.path.length-a.path.length)) if (!jar.has(cookie.name)) jar.set(cookie.name,cookie.value)
+      value.cookie = [...jar].map(([name, data]) => `${name}=${data}`).join('; ')
+      await bridgeFetch(pending, '/session', value)
+      await chrome.storage.session.remove('pairing')
+      $('status').textContent = '会话已交给本机 CLI，请查看终端中的身份验证结果。请关闭使用该会话的网页，避免与 CLI 同时刷新。建议使用独立的普通浏览器用户配置文件。'
+    }
+  }
+  button.disabled = false
+}
+button.addEventListener('click', async () => {
+  button.disabled = true; $('status').textContent = '处理中…'
+  try { await action() } catch (error) { $('status').textContent = error.message; button.disabled = false }
+})
+init().catch(error => { $('description').textContent = error.message; button.textContent = '请按提示操作' })

package/package.json

@@ -1,6 +1,56 @@
-{
-  "name": "@uzooai/anime-ai-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@uzooai/anime-ai-cli",
+  "version": "0.5.0",
+  "private": false,
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "uzoo-anime": "src/cli.js"
+  },
+  "scripts": {
+    "build": "npm run check && npm run check:resources",
+    "pack:local": "node scripts/pack-local.mjs",
+    "prepack": "npm run build",
+    "start": "node src/cli.js",
+    "check": "node --check src/cli.js && node --check src/api.js && node --check src/canvas.js && node --check src/draft-finalize.js && node --check src/media-copy.js && node --check src/group-edit.js && node --check src/group-layout.js && node --check src/node-copy.js && node --check src/node-delete.js && node --check src/materials.js && node --check src/material-save.js && node --check src/service.js && node --check src/video-clip.js && node --check src/media.js && node --check src/image-media.js && node --check src/image-output.js && node --check src/image-crop.js && node --check src/image-annotation.js && node --check src/image-matting.js && node --check src/matting.js && node --check src/png-alpha.js && node --check src/annotation-media.js && node --check src/video-frame.js && node --check src/graph.js && node --check src/graph-disconnect.js && node --check src/group-membership.js && node --check src/model-options.js && node --check src/generation-input.js && node --check src/review.js && node --check src/resource.js && node --check src/generation-graph.js && node --check src/repaint.js && node --check src/repaint-reverse.js && node --check src/repaint-delivery.js && node --check src/repaint-video.js && node --check src/repaint-history.js && node --check src/multipart.js && node --check src/repaint-materials.js && node --check src/repaint-settings.js && node --check src/remake.js && node --check src/repaint-graph.js && node --check src/store.js && node --check src/workflows.js && node --check src/agreement.js && node --check src/agreement-page.js && node --check src/protocol.js && node --check src/cli-authorization.js && node --check src/browser-login.js && node --check src/normal-login.js && node --check extensions/uzoo-cli-login/popup.js && node --check src/local-output.js && node --check src/repaint-archive.js && node --check src/repaint-export.js && node --check src/repaint-sequence.js && node --check src/node-history.js && node --check src/history-add.js && node --check src/material-download.js && node --check src/download-name.js && node --check scripts/pack-local.mjs && node --check src/package-info.js && node --check src/matting-background.js && node --check src/matting-worker.js && node --check src/matting-jobs.js && node --check scripts/release-policy.mjs && node --check scripts/check-release.mjs",
+    "test": "node test/smoke.mjs && node test/atomic-file.mjs && node test/phase1.mjs && node test/agreement.mjs && node test/canvas.mjs && node test/material-graph.mjs && node test/graph-rename.mjs && node test/graph-ungroup.mjs && node test/graph-disconnect.mjs && node test/node-copy.mjs && node test/node-copy-batch.mjs && node test/draft-finalize.mjs && node test/media-copy.mjs && node test/group-edit.mjs && node test/node-delete.mjs && node test/material-save.mjs && node test/service.mjs && node test/video-clip.mjs && node test/video-frame.mjs && node test/image-crop.mjs && node test/image-annotation.mjs && node test/image-matting.mjs && node test/matting.mjs && node test/matting-background.mjs && node test/matting-jobs.mjs && node test/model-options.mjs && node test/generation-input.mjs && node test/review.mjs && node test/repaint.mjs && node test/repaint-reverse.mjs && node test/repaint-delivery.mjs && node test/repaint-video.mjs && node test/repaint-settings.mjs && node test/repaint-materials.mjs && node test/remake.mjs && node test/normal-login.mjs && node test/login-extension.mjs && node test/browser-login.mjs && node test/cli-authorization.mjs && node test/store-recovery.mjs && node test/store-concurrency.mjs && node test/repaint-archive.mjs && node test/node-history.mjs && node test/file-transfer.mjs && node test/material-download.mjs && node test/release-policy.mjs",
+    "test:browser": "node test/normal-login.mjs && node test/login-extension.mjs && node test/browser-login.mjs",
+    "test:media": "node test/media.mjs && node test/image-media.mjs && node test/annotation-media.mjs",
+    "check:resources": "node scripts/check-package-resources.mjs",
+    "test:package": "node scripts/verify-package.mjs",
+    "check:release": "npm run build && node scripts/check-release.mjs",
+    "prepublishOnly": "npm run check:release"
+  },
+  "files": [
+    "src/",
+    "assets/",
+    ".agents/skills/uzoo-anime-cli/",
+    "extensions/uzoo-cli-login/",
+    "examples/",
+    "docs/",
+    "!docs/阶段3B远程后端联调记录.md",
+    "scripts/check-package-resources.mjs",
+    "scripts/pack-local.mjs",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE",
+    "scripts/release-policy.mjs",
+    "scripts/check-release.mjs"
+  ],
+  "description": "Uzoo Anime CLI for canvas, media references and authorized generation workflows",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/UzooAI/uzooai-cli.git"
+  },
+  "bugs": {
+    "url": "https://github.com/UzooAI/uzooai-cli/issues"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
+  }
+}

package/scripts/check-package-resources.mjs

@@ -0,0 +1,56 @@
+import assert from 'node:assert/strict'
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import { fileURLToPath } from 'node:url'
+import { spawn } from 'node:child_process'
+import {releasePolicy} from './release-policy.mjs'
+const repository = path.resolve(path.dirname(fileURLToPath(import.meta.url)), '..')
+assert(process.env.npm_execpath, '通过 npm run check:resources 执行')
+const output = await new Promise((resolve, reject) => {
+  const child = spawn(process.execPath, [process.env.npm_execpath, 'pack', '--dry-run', '--json', '--offline', '--ignore-scripts'],
+    { cwd: repository, windowsHide: true, stdio: ['ignore','pipe','pipe'] })
+  let out = '', err = ''
+  child.stdout.on('data', b => { out += b }); child.stderr.on('data', b => { err += b })
+  child.on('error', reject)
+  child.on('close', code => code === 0 ? resolve(out) : reject(new Error('资源清单检查失败：' + err.slice(-1000))))
+})
+const [packed] = JSON.parse(output), names = new Set(packed.files.map(f => f.path))
+const metadata = JSON.parse(await fs.readFile(path.join(repository, 'package.json'), 'utf8'))
+const release=releasePolicy(metadata)
+const lock=JSON.parse(await fs.readFile(path.join(repository,'package-lock.json'),'utf8'))
+assert.equal(metadata.name,lock.name);assert.equal(metadata.version,lock.version)
+assert.equal(metadata.name,lock.packages[''].name);assert.equal(metadata.version,lock.packages[''].version)
+assert.equal(metadata.license,'MIT')
+assert((await fs.readFile(path.join(repository,'CHANGELOG.md'),'utf8')).includes(metadata.version),'更新记录缺少当前版本')
+assert(names.has('LICENSE')&&names.has('CHANGELOG.md')&&names.has('src/package-info.js'),'版本／许可证资源缺失')
+assert(Array.isArray(metadata.files) && metadata.files.includes('src/') && metadata.files.includes('.agents/skills/uzoo-anime-cli/'), '缺少显式运行资源白名单')
+for (const file of ['scripts/release-policy.mjs','scripts/check-release.mjs','src/download-name.js','src/cli.js','src/draft-finalize.js','src/media-copy.js','src/group-edit.js','src/group-layout.js',
+  'src/agreement-page.js','src/callback-page.js','assets/logo-uzoo.svg','assets/favicon-uzoo.png','.agents/skills/uzoo-anime-cli/SKILL.md'])
+  assert(names.has(file), '包内缺少运行资源：' + file)
+let imports = 0
+for (const file of [...names].filter(f => /^(?:src\/.*\.js|scripts\/.*\.mjs)$/.test(f))) {
+  const source = await fs.readFile(path.join(repository, file), 'utf8')
+  for (const match of source.matchAll(/(?:from\s*|import\s*\(|new URL\(\s*)['"](\.[^'"]+)['"]/g)) {
+    const target = path.posix.normalize(path.posix.join(path.posix.dirname(file), match[1]))
+    assert(names.has(target), '运行模块相对资源遗漏：' + file + ' → ' + target); imports++
+  }
+}
+let links=0,externalWorkspaceReferences=0
+for(const file of [...names].filter(f=>f.endsWith('.md'))){
+ const source=await fs.readFile(path.join(repository,file),'utf8')
+ for(const match of source.matchAll(/\]\(([^\s)]+)\)/g)){
+  const value=match[1].split('#')[0].replace(/^<|>$/g,'')
+  if(!value || /^[a-z][a-z0-9+.-]*:/i.test(value))continue
+  const target=path.posix.normalize(path.posix.join(path.posix.dirname(file),decodeURIComponent(value)))
+  // Historical maintainer documents may cite sibling repositories. Those links
+  // are evidence pointers, never installed runtime or skill dependencies.
+  if(file.startsWith('docs/')&&target.startsWith('../')){externalWorkspaceReferences++;continue}
+  assert(names.has(target)||[...names].some(n=>n.startsWith(target+'/')),'包内文档引用遗漏：'+file+' → '+target);links++
+ }
+}
+const references = [...names].filter(f => f.startsWith('.agents/skills/uzoo-anime-cli/references/'))
+assert.equal(references.length, 13)
+assert(![...names].some(f => /(^|\/)(\.local|outputs|node_modules|\.git)(\/|$)|\.dpapi$|(^|\/)(credentials[^/]*\.json|\.env[^/]*)$/.test(f)), '包内包含本地产物或敏感配置')
+assert(![...names].some(f=>/^test\//.test(f)||f==='AGENTS.md'||f==='scripts/verify-package.mjs'||f==='docs/阶段3B远程后端联调记录.md'||/\.tgz$/.test(f)), '包内包含测试、宿主规则、内部联调记录、安装专项或历史归档')
+console.log(JSON.stringify({ files: names.size, relative_runtime_resources: imports, package_document_links:links, external_workspace_references:externalWorkspaceReferences, skill_references: references.length,...release,
+  install_performed: false, upgrade_tested: false, published: false }))

package/scripts/check-release.mjs

@@ -0,0 +1,19 @@
+import assert from 'node:assert/strict'
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import {fileURLToPath} from 'node:url'
+import {releasePolicy} from './release-policy.mjs'
+
+const root=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..')
+const read=name=>fs.readFile(path.join(root,name),'utf8')
+const metadata=JSON.parse(await read('package.json')),lock=JSON.parse(await read('package-lock.json'))
+const policy=releasePolicy(metadata,{requirePublic:true})
+assert.equal(metadata.version,lock.version);assert.equal(metadata.name,lock.name)
+assert.equal(metadata.version,lock.packages[''].version);assert.equal(metadata.name,lock.packages[''].name)
+const heading='## '+metadata.version
+assert((await read('CHANGELOG.md')).split(/\r?\n/).some(line=>line===heading||line.startsWith(heading+' ')),'缺少本版本独立更新记录')
+assert((await read('LICENSE')).startsWith('MIT License'),'MIT授权文件缺失')
+assert((await read('README.md')).includes('npm install --global @uzooai/anime-ai-cli@latest'),'缺少安装用户入口')
+console.log(JSON.stringify({name:metadata.name,version:metadata.version,...policy,local_release_check:'passed',
+ registry_account_checked:false,two_factor_checked:false,publication_authorized:false,published:false,
+ next:'本命令仅检查本地产物；发布前另核对scope权限、2FA及当次明确授权'}))

package/scripts/pack-local.mjs

@@ -0,0 +1,33 @@
+import fs from 'node:fs/promises'
+import path from 'node:path'
+import crypto from 'node:crypto'
+import assert from 'node:assert/strict'
+import {fileURLToPath} from 'node:url'
+import {spawn} from 'node:child_process'
+import {releasePolicy} from './release-policy.mjs'
+
+const repository=path.resolve(path.dirname(fileURLToPath(import.meta.url)),'..')
+assert(process.env.npm_execpath,'通过 npm run pack:local 执行')
+async function npm(args,capture=false){
+ return new Promise((resolve,reject)=>{
+  const child=spawn(process.execPath,[process.env.npm_execpath,...args],{cwd:repository,windowsHide:true,stdio:capture?['ignore','pipe','pipe']:'inherit'})
+  let out='',err=''
+  if(capture){child.stdout.on('data',b=>out+=b);child.stderr.on('data',b=>err+=b)}
+  child.on('error',reject)
+  child.on('close',code=>code===0?resolve(out):reject(Error('本地打包检查失败（exit '+code+'）'+(capture?': '+err.slice(-1500):''))))
+ })
+}
+// Build validates native ESM and package resources; there is no transpilation.
+await npm(['run','build'])
+const destination=path.join(repository,'outputs','npm',new Date().toISOString().replace(/[:.]/g,'-')+'-'+crypto.randomUUID().slice(0,8))
+await fs.mkdir(destination,{recursive:true})
+// prepack's build has just run. Suppress it here to keep the manifest pure JSON.
+const [packed]=JSON.parse(await npm(['pack','--offline','--ignore-scripts','--json','--pack-destination',destination],true))
+assert(packed && packed.filename===path.basename(packed.filename),'打包未返回安全产物文件名')
+const archive=path.join(destination,packed.filename),bytes=await fs.readFile(archive)
+assert.equal(crypto.createHash('sha1').update(bytes).digest('hex'),packed.shasum,'归档摘要不匹配')
+assert.equal('sha512-'+crypto.createHash('sha512').update(bytes).digest('base64'),packed.integrity,'归档integrity不匹配')
+assert.equal(bytes.length,packed.size,'归档长度不匹配')
+await fs.writeFile(path.join(destination,'manifest.json'),JSON.stringify(packed,null,2)+'\n',{flag:'wx'})
+const metadata=JSON.parse(await fs.readFile(path.join(repository,'package.json'),'utf8'))
+console.log(JSON.stringify({archive,manifest:path.join(destination,'manifest.json'),bytes:bytes.length,files:packed.files.length,integrity:packed.integrity,...releasePolicy(metadata),publication_authorized:false,installed:false,published:false},null,2))

package/scripts/release-policy.mjs

@@ -0,0 +1,22 @@
+import assert from 'node:assert/strict'
+
+// This product's explicit release policy. Validation never logs in, changes
+// access, or publishes; the registry account and action authorization are separate.
+export function releasePolicy(metadata,{requirePublic=false}={}){
+ assert.equal(metadata.name,'@uzooai/anime-ai-cli','正式包名不匹配')
+ assert.equal(typeof metadata.private,'boolean','必须显式声明private，不能意外开放发布')
+ if(metadata.private){
+  assert(!requirePublic,'当前为private内部包，不能作为公开发布产物')
+  return {private:true,public_package:false,registry:null,tag:null}
+ }
+ assert.equal(metadata.license,'MIT','发布许可证须保持已确认的MIT')
+ assert.equal(metadata.bin?.['uzoo-anime'],'src/cli.js','发布命令入口不匹配')
+ assert.match(metadata.version,/^(0|[1-9]\d*)\.(0|[1-9]\d*)\.(0|[1-9]\d*)(?:-rc\.(0|[1-9]\d*))?$/,'发布版本须为x.y.z或x.y.z-rc.N')
+ const config=metadata.publishConfig
+ assert(config&&typeof config==='object'&&!Array.isArray(config),'公开包缺少publishConfig')
+ assert.equal(config.access,'public','scoped公开包必须明确access=public')
+ assert.equal(config.registry,'https://registry.npmjs.org/','发布registry必须明确为npm官方HTTPS地址')
+ const tag=metadata.version.includes('-')?'next':'latest'
+ assert.equal(config.tag,tag,'稳定版须latest，RC须next，不能串用通道')
+ return {private:false,public_package:true,registry:config.registry,tag}
+}

package/src/agreement-page.js

@@ -0,0 +1,62 @@
+const escape = (value) =>
+  String(value ?? '').replace(
+    /[&<>"']/g,
+    (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]
+  )
+
+// Theme only the isolated display copy; document.html and its consent digest stay original.
+function darkDocument(html) {
+  const style = `<style data-uzoo-agreement-theme>
+:root{color-scheme:dark}html,body{background:#202020!important;color:#ededed!important}body{padding:16px;font:15px/1.8 system-ui,"Microsoft YaHei",sans-serif;overflow-wrap:anywhere}body *{color:#ededed!important;background-color:transparent!important;background-image:none!important;border-color:#444!important}a,a *{color:#8bc8ff!important}::selection{background:#38566c;color:#fff}
+</style>`
+  return html + style
+}
+
+// Remote published HTML is isolated in an opaque, scriptless sandbox. Only the
+// local parent page can send a human decision; no API credentials enter HTML.
+export function agreementPage({
+  protocol,
+  document,
+  account,
+  actionPath,
+  csrf,
+  nonce,
+  continuation
+}) {
+  const script = `const box=document.getElementById('accepted'),yes=document.getElementById('agree'),no=document.getElementById('decline'),status=document.getElementById('status');
+let busy=false,finished=false,timer;
+box.addEventListener('change',()=>yes.disabled=!box.checked||busy||finished);
+function finish(message){finished=true;box.disabled=true;yes.disabled=true;no.disabled=true;status.textContent=message;clearInterval(timer);}
+function receive(r,d){
+  if(finished)return;
+  if(r.ok&&(d.status==='agreed'||d.status==='not_required')){
+    finish(d.status==='agreed'?'协议状态已核验并同步 CLI，可关闭此页。':'当前无需签署协议，状态已同步 CLI，可关闭此页。');
+    try{window.close()}catch{}
+  }else if(d.status==='declined'||d.status==='changed'||d.status==='cancelled'||d.status==='rejected')finish(d.message);
+  else if(d.message)status.textContent=d.message;
+}
+async function decision(agreed){
+  if(busy||finished||agreed&&!box.checked)return;
+  busy=true;yes.disabled=true;no.disabled=true;
+  status.textContent=agreed?'正在核验并记录协议确认…':'已选择不同意，正在结束本次确认…';
+  try{
+    const r=await fetch(${JSON.stringify(actionPath)},{method:'POST',headers:{'Content-Type':'application/json','X-Uzoo-Agreement':${JSON.stringify(csrf)}},body:JSON.stringify({agreed})});
+    receive(r,await r.json());
+  }catch{if(!finished)status.textContent='确认结果尚未核实。CLI 将继续只读查询，请勿重复签署。';}
+  finally{busy=false;}
+}
+yes.addEventListener('click',()=>decision(true));no.addEventListener('click',()=>decision(false));
+timer=setInterval(async()=>{
+  if(finished||busy)return;
+  try{const r=await fetch(${JSON.stringify(actionPath.replace('/decision', '/status'))});receive(r,await r.json())}catch{}
+},2500);`
+  const resume = continuation
+    ? `<aside>确认后 CLI 将重新核验原请求和费用，再继续本次任务：${escape(continuation.operation)} · ${escape(continuation.model)} · 本次已确认 ${escape(continuation.cost)} OO。参数或费用变化时会停止。</aside>`
+    : '<aside>本页只记录协议确认，不提交生成，也不扣除生成费用。</aside>'
+  return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Uzoo · Seedance 协议确认</title><style>
+*{box-sizing:border-box}html{color-scheme:dark}body{margin:0;background:#111;color:#ededed;font:15px/1.65 system-ui,"Microsoft YaHei",sans-serif;padding:28px}main{max-width:980px;margin:auto;border:1px solid #444;border-radius:12px;background:#1c1c1c;overflow:hidden}header,section,footer{padding:20px 28px}header{border-bottom:1px solid #444}h1{font-size:23px;margin:0}h2{font-size:17px;margin:8px 0}.meta,aside{color:#b9b9b9}.meta{margin-top:10px}aside{background:#252525;padding:12px;border-radius:6px;margin:14px 0}iframe{width:100%;height:45vh;min-height:260px;border:1px solid #444;border-radius:6px;background:#202020}label{display:flex;gap:10px;margin:20px 0;align-items:flex-start}input{width:20px;height:20px;flex-shrink:0;margin-top:3px;accent-color:#2e9fe6}button{border:0;border-radius:6px;padding:11px 20px;font:inherit;cursor:pointer}#agree{background:#2e9fe6;color:white}#decline{background:#333;color:white}button:disabled{background:#444!important;color:#999!important;cursor:not-allowed}footer{display:flex;justify-content:flex-end;gap:12px;border-top:1px solid #444}#status{min-height:26px;color:#b9b9b9}a{color:#8bc8ff}</style></head>
+<body><main><header><h1>《统一协议》</h1><h2>《${escape(document.title)}》</h2><div class="meta">协议版本：${escape(protocol.version || '当前版本')} · 当前 CLI 账号：${escape(account.name)}（${escape(account.uid)}）<br>服务：${escape(account.origin)}</div></header><section>
+<p>${escape(protocol.message)}</p>${resume}<p>请阅读下方当前已发布的完整协议，由你本人决定是否同意。</p><iframe title="Seedance 模型使用承诺书正文" sandbox="" referrerpolicy="no-referrer" srcdoc="${escape(darkDocument(document.html))}"></iframe>
+<label><input id="accepted" type="checkbox"><span>我已阅读并同意上述《${escape(document.title)}》（${escape(protocol.version || '当前版本')}）。</span></label><p id="status" role="status" aria-live="polite">尚未确认。首次使用或协议版本更新后需要重新确认。</p></section>
+<footer><button id="decline" type="button">不同意</button><button id="agree" type="button" disabled>同意并继续</button></footer></main><script nonce="${escape(nonce)}">${script}</script></body></html>`
+}