@uzooai/anime-ai-cli 0.0.0-stage → 0.6.0

package/src/multipart.js

@@ -0,0 +1,28 @@
+import crypto from 'node:crypto'
+
+// Same explicit text-field framing as web signV2.serializeFormData. Hash and
+// transmit this Buffer verbatim; native FormData has an opaque boundary.
+export function multipartText(
+  fields,
+  boundary = `----SignV2Boundary${crypto.randomBytes(16).toString('hex')}`
+) {
+  if (!/^[A-Za-z0-9-]{16,100}$/.test(boundary))
+    throw new Error('multipart boundary无效')
+  const chunks = []
+  for (const [name, value] of Object.entries(fields)) {
+    if (
+      !/^[a-z_]+$/.test(name) ||
+      typeof value !== 'string' ||
+      /\u0000/.test(value)
+    )
+      throw new Error('multipart文本字段无效')
+    chunks.push(
+      `--${boundary}\r\nContent-Disposition: form-data; name="${name}"\r\n\r\n${value}\r\n`
+    )
+  }
+  chunks.push(`--${boundary}--\r\n`)
+  return {
+    body: Buffer.from(chunks.join(''), 'utf8'),
+    headers: { 'Content-Type': `multipart/form-data; boundary=${boundary}` }
+  }
+}

package/src/node-copy.js

@@ -0,0 +1,95 @@
+import {isDeepStrictEqual as same} from 'node:util'
+import {buildMediaCopy} from './media-copy.js'
+import {scopedCanvas} from './materials.js'
+import {save} from './graph.js'
+import {storedReferences,readSource,mergeSources} from './generation-input.js'
+
+export function remapCopyMentions(value,idMap) {
+  if(typeof value!=='string')return value
+  return value.replace(/(@@?)[{]ref:([^}]+)[}]/g,(marker,prefix,encoded)=>{
+    let id;try{id=decodeURIComponent(encoded)}catch{return marker}
+    return idMap.has(id)?prefix+'{ref:'+encodeURIComponent(idMap.get(id))+'}':marker
+  })
+}
+
+export async function copyTextNodes(client,input,confirmed=false){
+  if(!input||typeof input!=='object'||Array.isArray(input)||Object.keys(input).some(k=>!['doc_id','space','team_uid','copies','expected_version'].includes(k))||typeof input.doc_id!=='string'||!input.doc_id.trim()||!Array.isArray(input.copies)||(!input.copies.length||input.copies.length>100))throw new Error('批量复制需要doc_id/space/team_uid/copies')
+  for(const c of input.copies)if(!c||Object.keys(c).some(k=>!['node_id','new_node_id','position'].includes(k))||!['node_id','new_node_id'].every(k=>typeof c[k]==='string'&&c[k].trim())||!c.position||!Number.isFinite(c.position.x)||!Number.isFinite(c.position.y))throw new Error('copies每项需要node_id/new_node_id/position')
+  if(new Set(input.copies.map(c=>c.node_id)).size!==input.copies.length||new Set(input.copies.map(c=>c.new_node_id)).size!==input.copies.length)throw new Error('批次源ID或新ID重复')
+  if(input.expected_version!==undefined&&(!Number.isSafeInteger(input.expected_version)||input.expected_version<1))throw new Error('expected_version无效')
+  const doc=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)
+  if(!Number.isSafeInteger(doc.version)||doc.version<1||!Array.isArray(doc.nodes)||!Array.isArray(doc.edges)||!doc.meta||!doc.viewport||typeof doc.name!=='string'||new Set(doc.nodes.map(n=>n.id)).size!==doc.nodes.length)throw new Error('画布快照不完整')
+  if(input.expected_version!==undefined&&input.expected_version!==doc.version)throw new Error('画布已变化，重新预览')
+  if(input.copies.some(c=>doc.nodes.some(n=>n.id===c.new_node_id)))throw new Error('目标节点ID已存在，先读回，不重复复制')
+  const map=new Map(input.copies.map(c=>[c.node_id,c.new_node_id])),meta=structuredClone(doc.meta)
+  const prepared=input.copies.map(c=>{
+    const {copy,refs}=buildTextCopy(doc,c)
+    const mapped=refs.map(r=>map.has(String(r.id))?{...r,id:map.get(String(r.id)),
+      ...(typeof r.marker==='string'?{marker:remapCopyMentions(r.marker,map)}:{}),
+      ...(typeof r.legacyMarker==='string'?{legacyMarker:remapCopyMentions(r.legacyMarker,map)}:{})}:r)
+    const before=copy.data.prompt
+    if(typeof before==='string')copy.data.prompt=remapCopyMentions(before,map)
+    for(const holder of [copy.data,copy.data.extra])if(holder){
+      if(typeof holder.effectivePrompt==='string')holder.effectivePrompt=remapCopyMentions(holder.effectivePrompt,map)
+      for(const key of ['seedance_material_reviews','seedanceMaterialReviews'])if(holder[key]&&typeof holder[key]==='object')holder[key]=Object.fromEntries(Object.entries(holder[key]).map(([id,value])=>[map.get(id)||id,value]))
+    }
+    if(mapped.length){copy.data.extra={...copy.data.extra,references:mapped};if(Array.isArray(copy.data.references))copy.data.references=mapped;meta.node_references={...meta.node_references,[copy.id]:mapped}}
+    return {copy,preview:{node_id:c.node_id,new_node_id:c.new_node_id,position:copy.position,node_type:copy.type,source_task_id:copy.data.extra?.source_task_id||copy.data.last_task_id||null,copied_history_count:copy.data.extra?.copied_generation_history?.length||0,prompt_before:before,prompt_after:copy.data.prompt,reference_node_ids:mapped.map(r=>r.id)}}
+  })
+  const preview={doc_id:doc.id,expected_version:doc.version,copies:prepared.map(p=>p.preview),copies_edges:false,copies_groups:false,canvas_written:false,generation_submitted:false}
+  if(!confirmed)return preview
+  if(input.expected_version===undefined)throw new Error('批量复制执行须提供预览expected_version')
+  const nodes=[...doc.nodes,...prepared.map(p=>p.copy)],saved=await save(client,doc,{nodes,meta})
+  let after;try{after=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)}catch(cause){throw new Error('批量复制保存后读回未确认，不自动重放',{cause})}
+  if(!Number.isSafeInteger(after.version)||after.version<saved.version||!same(after.nodes,nodes)||!same(after.meta,meta)||!same(after.edges,doc.edges)||!same(after.viewport,doc.viewport)||after.name!==doc.name)throw new Error('批量复制读回不一致，不自动重放')
+  return {...preview,version:after.version,canvas_written:true,copy_verified:true}
+}
+
+function buildTextCopy(doc,input) {
+  const source=doc.nodes.find(n=>n.id===input.node_id),data=source?.data||{}
+  if (!source || data.repaint || data.videoRemake || data.clipRedraw || data.draftFinalizeGeneration || data.extra?.repaint || data.extra?.video_remake || data.extra?.clip_redraw || data.extra?.draft_finalize) throw new Error('复制仅支持普通节点；派生流程不可复制')
+  if ([data.runtime?.status,data.status].some(status=>['queued','preparing','pending','processing','retrying','submitting','uploading'].includes(status)) || data.uploading) throw new Error('进行中节点不能复制')
+  if (data.generation_config || data.node_output) throw new Error('当前节点配置协议未接入复制')
+  const connected=[...new Set(doc.edges.filter(e=>e.target===source.id).map(e=>e.source))].map(id=>{
+    const n=doc.nodes.find(n=>n.id===id);if(!n)throw new Error('源节点入边缺少端点');return readSource(n)
+  })
+  const refs=mergeSources(connected,storedReferences(doc,source)).map((r,i)=>({...r,index:Number(r.index)||i+1,isPersistentReference:true}))
+  const media=source.type==='text'?null:buildMediaCopy(source)
+  const copy=media?.copy||structuredClone(source)
+  copy.id=input.new_node_id;copy.position={x:Math.round(input.position.x),y:Math.round(input.position.y)}
+  for(const k of ['computedPosition','dimensions','handleBounds','initialized','isParent','dragging','resizing','events','selected'])delete copy[k]
+  copy.data.lastRequest=null
+  if(media)return {copy,refs}
+  const status=data.runtime?.status||data.status||'idle'
+  if(status!=='completed'){
+    delete copy.data.last_task_id;delete copy.data.lastTaskId
+    if(['queued','processing','failed'].includes(status))copy.data.status='idle'
+    if(copy.data.runtime)copy.data.runtime={...copy.data.runtime,status:'idle',progress:0,taskId:'',error:''}
+  }else if(copy.data.runtime)copy.data.runtime={...copy.data.runtime,status:'completed',progress:100,error:''}
+  return {copy,refs}
+}
+export async function copyTextNode(client,input,confirmed=false) {
+  if (!input || typeof input!=='object' || Array.isArray(input) ||
+    Object.keys(input).some(k=>!['doc_id','space','team_uid','node_id','new_node_id','position','expected_version'].includes(k)) ||
+    !['doc_id','node_id','new_node_id'].every(k=>typeof input[k]==='string' && input[k].trim()))
+    throw new Error('复制需要doc_id/space/team_uid/node_id/new_node_id/position，可选expected_version')
+  if (!input.position || !Number.isFinite(input.position.x) || !Number.isFinite(input.position.y)) throw new Error('必须指定有效position')
+  if (input.expected_version!==undefined && (!Number.isSafeInteger(input.expected_version)||input.expected_version<1)) throw new Error('expected_version无效')
+  const doc=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)
+  if (!Number.isSafeInteger(doc.version)||doc.version<1||!Array.isArray(doc.nodes)||!Array.isArray(doc.edges)||!doc.meta||!doc.viewport||typeof doc.name!=='string') throw new Error('画布快照不完整')
+  if (new Set(doc.nodes.map(n=>n.id)).size!==doc.nodes.length) throw new Error('节点ID重复')
+  if (input.expected_version!==undefined && input.expected_version!==doc.version) throw new Error('画布已变化，重新预览')
+  if (doc.nodes.some(n=>n.id===input.new_node_id)) throw new Error('目标节点ID已存在；先读回，不重复复制')
+  const {copy,refs}=buildTextCopy(doc,input)
+  const meta=structuredClone(doc.meta)
+  if(refs.length){copy.data.extra={...copy.data.extra,references:refs};meta.node_references={...meta.node_references,[copy.id]:refs}}
+  const preview={doc_id:doc.id,node_id:input.node_id,new_node_id:copy.id,expected_version:doc.version,position:copy.position,
+    node_type:copy.type,source_task_id:copy.data.extra?.source_task_id||copy.data.last_task_id||null,copied_history_count:copy.data.extra?.copied_generation_history?.length||0,reference_node_ids:refs.map(r=>r.id),copies_edges:false,copies_group:false,canvas_written:false,generation_submitted:false}
+  if(!confirmed)return preview
+  if(input.expected_version===undefined)throw new Error('复制执行须提供预览expected_version')
+  const nodes=[...doc.nodes,copy],saved=await save(client,doc,{nodes,meta})
+  let after
+  try{after=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)}catch(cause){throw new Error('复制保存后读回未确认，不自动重放',{cause})}
+  if(!Number.isSafeInteger(after.version)||after.version<saved.version||!same(after.nodes,nodes)||!same(after.meta,meta)||!same(after.edges,doc.edges)||!same(after.viewport,doc.viewport)||after.name!==doc.name)throw new Error('复制读回不一致，不自动重放')
+  return {...preview,version:after.version,canvas_written:true,copy_verified:true}
+}

package/src/node-delete.js

@@ -0,0 +1,49 @@
+import {isDeepStrictEqual as same} from 'node:util'
+import {scopedCanvas} from './materials.js'
+import {save,sourceType} from './graph.js'
+import {syncGroupMemberships} from './group-membership.js'
+import {generationModes,normalizeMode,storedReferences} from './generation-input.js'
+const derived=n=>n?.type==='video_repain_begain'||n?.data?.repaint||n?.data?.videoRemake||n?.data?.extra?.repaint||n?.data?.extra?.video_remake||n?.data?.extra?.clip_redraw||n?.data?.draftFinalizeGeneration||n?.data?.extra?.draft_finalize
+export async function deleteNodes(client,input,confirmed=false){
+ if(!input||typeof input!=='object'||Array.isArray(input)||Object.keys(input).some(k=>!['doc_id','space','team_uid','node_ids','expected_version'].includes(k))||typeof input.doc_id!=='string'||!input.doc_id.trim()||!Array.isArray(input.node_ids)||!input.node_ids.length||input.node_ids.some(id=>typeof id!=='string'||!id.trim())||new Set(input.node_ids).size!==input.node_ids.length)throw new Error('删除需要doc_id/space/team_uid及不重复node_ids')
+ if(input.expected_version!==undefined&&(!Number.isSafeInteger(input.expected_version)||input.expected_version<1))throw new Error('expected_version无效')
+ const doc=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)
+ if(!Number.isSafeInteger(doc.version)||doc.version<1||!Array.isArray(doc.nodes)||!Array.isArray(doc.edges)||!doc.meta||Array.isArray(doc.meta)||!doc.viewport||typeof doc.name!=='string'||new Set(doc.nodes.map(n=>n.id)).size!==doc.nodes.length)throw new Error('画布快照不完整')
+ if(input.expected_version!==undefined&&input.expected_version!==doc.version)throw new Error('画布已变化，重新预览')
+ const ids=new Set(input.node_ids),selected=input.node_ids.map(id=>doc.nodes.find(n=>n.id===id))
+ if(selected.some(n=>!n))throw new Error('目标节点不存在，先读回核对')
+ if(selected.some(derived))throw new Error('普通删除不支持派生流程节点')
+ if(selected.some(n=>n.data?.uploading||['queued','processing','retrying','submitting'].includes(n.data?.runtime?.status||n.data?.status)))throw new Error('进行中节点须先核对任务，不通过删除取消任务')
+ const removedEdges=doc.edges.filter(e=>ids.has(e.source)||ids.has(e.target))
+ if(removedEdges.some(e=>e.data?.role||e.data?.repaintSystem))throw new Error('关联系统线须使用专用流程，不普通删除')
+ const next=structuredClone(doc);next.nodes=next.nodes.filter(n=>!ids.has(n.id));next.edges=next.edges.filter(e=>!ids.has(e.source)&&!ids.has(e.target))
+ if(next.meta.node_references)for(const id of ids)delete next.meta.node_references[id]
+ const groups=next.meta.canvas_groups||[]
+ if(!Array.isArray(groups)||groups.some(g=>!g||!Array.isArray(g.nodeIds)))throw new Error('分组快照无效')
+ const state={nodes:next.nodes,groups};syncGroupMemberships(state)
+ const groupChanges=groups.filter(g=>!same(g,(doc.meta.canvas_groups||[]).find(o=>o.id===g.id)))
+ if(groupChanges.some(g=>g.repaint||g.video_remake||g.clip_redraw))throw new Error('删除将影响派生分组，停止')
+ const affected=[...new Set(removedEdges.filter(e=>ids.has(e.source)&&!ids.has(e.target)).map(e=>e.target))]
+ const modeChanges=[]
+ if(affected.some(id=>['image','video'].includes(next.nodes.find(n=>n.id===id)?.type))){
+  const catalog=await client.raw('/canvas/models'+(doc.team_uid?'?team_uid='+encodeURIComponent(doc.team_uid):''))
+  for(const id of affected){const n=next.nodes.find(n=>n.id===id);if(!n)throw new Error('下游端点缺失');if(!['image','video'].includes(n.type))continue
+   if(derived(n)||n.data?.generation_config||n.data?.node_output)throw new Error('下游派生/配置协议不支持普通删除')
+   const model=catalog.items?.find(m=>m.label===n.data?.model_name&&m.content_type===n.type&&!m.member_locked);if(!model)throw new Error('下游模型不可用')
+   const types=next.edges.filter(e=>e.target===id).map(e=>sourceType(next.nodes.find(n=>n.id===e.source)))
+   const modes=(model.generation_modes||[]).map(normalizeMode).filter(m=>generationModes[m]&&types.every(t=>generationModes[m][0].includes(t))&&(!generationModes[m][1].length||generationModes[m][1].some(t=>types.includes(t))))
+   if(!modes.length)throw new Error('删除后下游无兼容模式，请先选择模型')
+   const before=normalizeMode(n.data?.extra?.generation_mode||n.data?.generation_mode||n.data?.imageMode||n.data?.videoMode),after=modes.includes(before)?before:modes[0]
+   n.data.extra={...n.data.extra,generation_mode:after};if(Object.hasOwn(n.data,'generation_mode'))n.data.generation_mode=after
+   if(before!==after)modeChanges.push({node_id:id,before,after})
+  }
+ }
+ const retained=next.nodes.flatMap(n=>{const refs=storedReferences(next,n).filter(r=>ids.has(String(r.id)));return refs.length?[{node_id:n.id,reference_node_ids:refs.map(r=>r.id)}]:[]})
+ const preview={doc_id:doc.id,node_ids:input.node_ids,expected_version:doc.version,removed_edge_ids:removedEdges.map(e=>e.id),group_changes:groupChanges.map(g=>({group_id:g.id,node_ids:g.nodeIds,exited_node_ids:g.exitedNodeIds||[]})),retained_references:retained,mode_changes:modeChanges,canvas_written:false,generation_submitted:false,remote_tasks_deleted:false}
+ if(!confirmed)return preview
+ if(input.expected_version===undefined)throw new Error('执行删除须提供预览expected_version')
+ const saved=await save(client,doc,{nodes:next.nodes,edges:next.edges,meta:next.meta})
+ let actual;try{actual=await scopedCanvas(client,input.doc_id,input.space,input.team_uid)}catch(cause){throw new Error('删除保存已尝试但读回未确认，不自动重放',{cause})}
+ if(!Number.isSafeInteger(actual.version)||actual.version<saved.version||!same(actual.nodes,next.nodes)||!same(actual.edges,next.edges)||!same(actual.meta,next.meta)||!same(actual.viewport,doc.viewport)||actual.name!==doc.name)throw new Error('删除读回不一致，不自动重放')
+ return {...preview,canvas_written:true,delete_verified:true,version:actual.version}
+}

package/src/node-history.js

@@ -0,0 +1,231 @@
+import path from 'node:path'
+import { isDeepStrictEqual as equal } from 'node:util'
+import { atomic, json, root, safeName } from './store.js'
+import { scopedCanvas } from './materials.js'
+import { segment } from './workflows.js'
+import { requireServiceReady } from './service.js'
+import { sameImageReferences, sameVideoReferences } from './media.js'
+
+const text = value => String(value ?? '').trim()
+const object = value => value !== null && typeof value === 'object' && !Array.isArray(value)
+const fail = (code, message, cause) => Object.assign(new Error(message), { code,
+  ...(cause ? { cause, diagnostic: {
+    ...(cause.status ? { http_status: cause.status } : {}),
+    ...(cause.apiCode ? { api_code: cause.apiCode } : {}),
+    ...(cause.requestId ? { request_id: cause.requestId } : {})
+  } } : {}) })
+export const nodeHistoryPath = (profile, operation) =>
+  path.join(root(), 'node-history', safeName(profile), safeName(operation) + '.json')
+const persist = record => atomic(nodeHistoryPath(record.profile, record.operation), record)
+export function nodeHistoryInput(value, selection = true) {
+  if (!object(value) || Object.keys(value).some(key =>
+    !['doc_id', 'node_id', 'space', 'team_uid', ...(selection ? ['task_id'] : [])].includes(key)) ||
+    !['doc_id', 'node_id'].every(key => typeof value[key] === 'string' && text(value[key])))
+    throw new Error('历史输入仅支持doc_id/node_id/space/team_uid及选择时的task_id')
+  if (selection && (!['number', 'string'].includes(typeof value.task_id) || !/^[1-9]\d*$/.test(String(value.task_id))))
+    throw new Error('task_id须为正安全整数')
+  if (selection && !Number.isSafeInteger(Number(value.task_id))) throw new Error('task_id超出安全整数范围')
+  return { ...value, ...(selection ? { task_id: String(value.task_id) } : {}) }
+}
+export async function historyContext(client, input) {
+  const doc = await scopedCanvas(client, input.doc_id, input.space, input.team_uid)
+  if (!Number.isSafeInteger(doc.version) || doc.version < 1 || !Array.isArray(doc.nodes) ||
+      !Array.isArray(doc.edges) || !object(doc.meta) || !object(doc.viewport) || typeof doc.name !== 'string' ||
+      new Set(doc.nodes.map(node => node.id)).size !== doc.nodes.length)
+    throw new Error('画布快照不完整或节点重复，停止历史选择')
+  const node = doc.nodes.find(item => item.id === input.node_id), data = node?.data || {}, extra = data.extra || {}
+  if (!node || !['image', 'video'].includes(node.type) ||
+      data.repaint || extra.repaint || data.videoRemake || extra.video_remake || data.clipRedraw || extra.clip_redraw ||
+      extra.draft_finalize || extra.node_kind === 'asset' ||
+      (extra.node_kind !== 'generation' && (data.mediaType || data.file_name || data.fileName)))
+    throw new Error('历史选择仅接入普通图片/视频生成节点；素材、派生节点和文本暂不支持')
+  if (data.generation_config || data.node_output) throw new Error('当前节点使用其他配置协议；先核对真实读回格式，不混合写入历史字段')
+  const account = await client.raw('/auth/me')
+  if (!text(account.uid)) throw new Error('账号缺少UID')
+  if (input.space === 'team' && !account.teams?.some(team => text(team.uid) === input.team_uid && team.status === 'active'))
+    throw new Error('目标团队有效成员身份不可确认')
+  return { doc, node, owner: text(account.uid) }
+}
+const context = historyContext
+function pageInput({ status, limit = 30, offset = 0 } = {}) {
+  if (status !== undefined && !['queued', 'processing', 'completed', 'failed', 'retrying', 'cancelled'].includes(status))
+    throw new Error('历史status不支持')
+  if (!Number.isSafeInteger(limit) || limit < 1 || limit > 100 || !Number.isSafeInteger(offset) || offset < 0)
+    throw new Error('历史分页需要limit 1–100和非负整数offset')
+  return { ...(status ? { status } : {}), limit, offset }
+}
+async function page(client, input, options) {
+  const params = pageInput(options)
+  const result = await client.raw('/canvas/docs/' + segment(input.doc_id) + '/nodes/' + segment(input.node_id) +
+    '/history?' + new URLSearchParams(params))
+  if (result?.doc_id !== input.doc_id || result.node_id !== input.node_id || !Array.isArray(result.items) ||
+      typeof result.has_more !== 'boolean') throw new Error('节点历史响应绑定或分页信息不完整')
+  return { ...result, ...params }
+}
+export async function listNodeHistory(client, value, options = {}) {
+  const input = nodeHistoryInput(value, false)
+  pageInput(options)
+  await requireServiceReady(client)
+  const ctx=await context(client, input)
+  const copied=ctx.node.data?.extra?.copied_generation_history||ctx.node.data?.copiedGenerationHistory||[]
+  if(!Array.isArray(copied))throw new Error('复制来源历史无效')
+  return { copied_history: !options.status||options.status==='completed' ? structuredClone(copied) : [], copied_history_selectable:false, ...await page(client, input, options), read_only: true, canvas_written: false, generation_submitted: false }
+}
+// The history endpoint provides a fresh signed result. A result URL alone never
+// selects a task and redraw/copied identifiers cannot enter ordinary history.
+export async function selectedHistory(client, input, ctx) {
+  let item
+  for (let offset = 0; offset < 10000; offset += 100) {
+    const result = await page(client, input, { status: 'completed', limit: 100, offset })
+    const matches = result.items.filter(row => String(row.task_id) === input.task_id && !row.source)
+    if (matches.length > 1) throw new Error('历史任务ID不唯一')
+    if (matches.length === 1) { item = matches[0]; break }
+    if (!result.has_more) break
+  }
+  if (!item) throw fail('NODE_HISTORY_UNAVAILABLE', '未在该节点可见的已完成普通历史中找到原任务；不认领其他来源')
+  const result = item.result
+  if (item.doc_id !== input.doc_id || item.node_id !== input.node_id || item.segment_type !== ctx.node.type ||
+      item.status !== 'completed' || item.delivery_blocked || !item.completed_at ||
+      !result?.url || !result.file_ref || !String(result.mime_type).startsWith(ctx.node.type + '/'))
+    throw fail('NODE_HISTORY_UNAVAILABLE', '历史结果的归属、完成状态或真实媒体引用不完整')
+  const url = new URL(result.url, client.baseUrl)
+  if (!['http:', 'https:'].includes(url.protocol) || url.username || url.password ||
+      (url.protocol === 'http:' && !['127.0.0.1', 'localhost', '[::1]'].includes(url.hostname)))
+    throw new Error('历史结果地址不适用；不下载、不更换来源')
+  return item
+}
+const selected = selectedHistory
+const resultIdentity = result => Object.fromEntries(Object.entries(result).filter(([key]) =>
+  !['url', 'file_ref', 'preview_url', 'preview_file_ref'].includes(key)))
+function selectionIdentity(item) {
+  return { task_id: String(item.task_id), doc_id: item.doc_id, node_id: item.node_id,
+    segment_type: item.segment_type, completed_at: item.completed_at, prompt: item.prompt,
+    model_name: item.model_name, aspect_ratio: item.aspect_ratio || item.extra?.aspect_ratio,
+    resolution: item.resolution || item.extra?.resolution,
+    duration: item.duration, image_count: item.extra?.image_count || 1,
+    draft: item.draft || null, result: resultIdentity(item.result) }
+}
+function normalize(value) { return JSON.parse(JSON.stringify(value)) }
+export function historyNodeData(node, item) {
+  const data = node.data || {}, extra = data.extra || {}, taskId = String(item.task_id)
+  const aspect = text(item.aspect_ratio || item.extra?.aspect_ratio) || data.aspect_ratio || extra.aspect_ratio
+  const resolution = text(item.resolution || item.extra?.resolution) || data.resolution || extra.resolution
+  const imageCount = Number(item.extra?.image_count) || 1
+  const next = { ...data, prompt: text(item.prompt) || data.prompt || '', model_name: text(item.model_name) || data.model_name,
+    status: 'completed', last_task_id: taskId, result: { ...structuredClone(item.result),
+      task_id: item.result.task_id || taskId, status: item.result.status || 'completed' },
+    extra: { ...extra, file_ref: item.result.file_ref,
+      ...(aspect ? { aspect_ratio: aspect } : {}), ...(resolution ? { resolution } : {}),
+      ...(node.type === 'image' ? { image_count: imageCount } : { draft: item.draft || null }) } }
+  // Keep API aliases already present consistent; do not invent reference or
+  // review records. The web selector changes output/config, not input references.
+  const aliases = { model: next.model_name, lastTaskId: taskId, resultUrl: item.result.url,
+    resultFileRef: item.result.file_ref, file_ref: item.result.file_ref, fileRef: item.result.file_ref,
+    aspectRatio: aspect, resolution, imageCount, aspect_ratio: aspect, image_count: imageCount }
+  for (const [key, value] of Object.entries(aliases)) if (Object.hasOwn(data, key)) next[key] = value
+  // The web serializer persists image_count inside extra only. Clear stale
+  // top-level aliases so subsequent reads do not mix two configurations.
+  if (node.type === 'image') { delete next.image_count; delete next.imageCount }
+  if (node.type === 'video') {
+    next.duration = Number(item.duration ?? item.result.duration) || data.duration
+    if (Object.hasOwn(data, 'draft')) next.draft = item.draft || null
+  }
+  if (object(data.runtime)) next.runtime = { ...data.runtime, status: 'completed', progress: 100, taskId }
+  return normalize(next)
+}
+function active(node) {
+  return [node.data?.status, node.data?.runtime?.status].some(status => ['queued', 'processing', 'retrying'].includes(status))
+}
+const summary = record => ({ operation: record.operation, state: record.state, task_id: record.input.task_id,
+  doc_id: record.input.doc_id, node_id: record.input.node_id, generation_submitted: false, library_saved: false,
+  canvas_written: false, selection_verified: record.state === 'applied',
+  ...(record.diagnostic ? { diagnostic: record.diagnostic } : {}) })
+async function bound(client, profile, operation) {
+  const record = await json(nodeHistoryPath(profile, operation), null)
+  if (!record || record.schema !== 1 || record.operation !== operation || record.profile !== profile || record.baseUrl !== client.baseUrl)
+    throw new Error('历史选择operation不存在或服务不匹配')
+  if (!object(record.nodeBefore) || !object(record.selectedIdentity) ||
+      (record.attempted && (!object(record.pendingNode) || record.pendingNode.id !== record.input?.node_id)))
+    throw new Error('历史选择operation记录不完整；停止，不重发写入')
+  const ctx = await context(client, nodeHistoryInput(record.input))
+  if (record.owner !== ctx.owner) throw new Error('历史选择账号不匹配')
+  return { record, ctx }
+}
+export async function selectNodeHistory(client, profile, value, operation, confirmed = false) {
+  const input = nodeHistoryInput(value), file = nodeHistoryPath(profile, operation)
+  await requireServiceReady(client)
+  const old = await json(file, null)
+  if (old?.attempted) {
+    if (!equal(old.input, input)) throw new Error('原历史选择输入不可修改')
+    return recoverNodeHistory(client, profile, operation)
+  }
+  const ctx = await context(client, input)
+  if (active(ctx.node)) throw new Error('目标节点有进行中任务；先查询原生成，不切换历史')
+  const item = await selected(client, input, ctx)
+  const identity = normalize(selectionIdentity(item))
+  let record = old
+  if (!confirmed) {
+    if (old && (old.owner !== ctx.owner || old.baseUrl !== client.baseUrl || !equal(old.input, input)))
+      throw new Error('历史选择operation已绑定其他输入、服务或账号')
+    record = { schema: 1, profile, operation, baseUrl: client.baseUrl, owner: ctx.owner, input,
+      nodeBefore: ctx.node, selectedIdentity: identity, selectedMedia: { url: item.result.url, file_ref: item.result.file_ref },
+      state: 'prepared', createdAt: old?.createdAt || new Date().toISOString() }
+    await persist(record)
+    return { ...summary(record), current_task_id: ctx.node.data?.last_task_id || null,
+      selection: { task_id: input.task_id, model_name: item.model_name, prompt: item.prompt,
+        result: item.result, aspect_ratio: item.aspect_ratio, resolution: item.resolution,
+        duration: item.duration, billing_status: item.billing_status, credit_cost: item.credit_cost },
+      input_references_changed: false,
+      next: '展示原结果→所选历史及配置差异；用户明确选择后同operation加--yes，仅切换普通节点，不生成或下载' }
+  }
+  const checked = await bound(client, profile, operation)
+  record = checked.record
+  if (!equal(record.input, input) || !equal(record.selectedIdentity, identity) || !equal(record.nodeBefore, checked.ctx.node))
+    throw new Error('预览后节点/历史结果变化；重新预览核对，不覆盖新内容')
+  if (!equal(record.selectedMedia, { url: item.result.url, file_ref: item.result.file_ref })) {
+    const same = checked.ctx.node.type === 'image' ? sameImageReferences : sameVideoReferences
+    if (!record.selectedMedia || !await same(client, record.selectedMedia.file_ref, item.result.file_ref))
+      throw new Error('更新的历史结果引用不能确认是原媒体；不切换节点')
+  }
+  const wanted = { ...checked.ctx.node, data: historyNodeData(checked.ctx.node, item) }
+  record.pendingNode = wanted
+  record.attempted = true
+  record.state = 'saving'
+  await persist(record)
+  const doc = checked.ctx.doc
+  if (equal(checked.ctx.node, wanted)) {
+    record.state = 'applied'
+    await persist(record)
+    return { ...summary(record), unchanged: true, version: doc.version }
+  }
+  try {
+    const saved = await client.raw('/canvas/docs/' + segment(doc.id), { method: 'PUT', body: {
+      version: doc.version, name: doc.name, viewport: doc.viewport, nodes: doc.nodes.map(node => node.id === wanted.id ? wanted : node),
+      edges: doc.edges, meta: doc.meta
+    } }, { retry: false })
+    if (saved?.version !== doc.version + 1 || !equal(saved.nodes?.find(node => node.id === wanted.id), wanted))
+      throw new Error('历史选择保存响应不完整')
+    record.state = 'applied'
+    await persist(record)
+    return { ...summary(record), canvas_written: true, version: saved.version }
+  } catch (error) {
+    record.state = error.status === 409 || error.apiCode === 3002 ? 'conflict' : 'save_unknown'
+    record.diagnostic = { ...(error.status ? { http_status: error.status } : {}),
+      ...(error.apiCode ? { api_code: error.apiCode } : {}), ...(error.requestId ? { request_id: error.requestId } : {}) }
+    await persist(record)
+    throw fail('NODE_HISTORY_SAVE_PENDING', '历史选择保存未确认；history-recover只读核对，不重发保存或生成', error)
+  }
+}
+export async function recoverNodeHistory(client, profile, operation) {
+  await requireServiceReady(client)
+  const { record, ctx } = await bound(client, profile, operation)
+  if (!record.attempted) return summary(record)
+  const matches = equal(ctx.node, record.pendingNode)
+  if (matches) {
+    record.state = 'applied'
+    await persist(record)
+  }
+  return { ...summary(record), state: !matches && record.state === 'applied' ? 'canvas_changed' : record.state,
+    selection_verified: matches, canvas_matches_selection: matches, version: ctx.doc.version,
+    next: matches ? '原历史选择已核验，无重复写入' : '当前节点与原选择不同；保留当前内容，不自动恢复旧结果或重发保存' }
+}

package/src/normal-login.js

@@ -0,0 +1,118 @@
+import { createServer } from 'node:http'
+import crypto from 'node:crypto'
+import { spawn } from 'node:child_process'
+import { access } from 'node:fs/promises'
+import path from 'node:path'
+import { ApiClient, cancellation } from './api.js'
+import { loginTarget } from './browser-login.js'
+
+const connectPage = `<!doctype html><html lang="zh-CN"><meta charset="utf-8"><title>Uzoo CLI 登录连接</title>
+<style>body{font:18px/1.7 system-ui;max-width:760px;margin:60px auto;padding:24px;color:#192336}li{margin:18px 0}code{background:#eef1f6;padding:4px 8px}</style>
+<h1>连接 Uzoo CLI</h1><p>请使用正常浏览器完成登录，再主动授权当前网页会话给本机 CLI。</p>
+<ol><li>首次使用：在 Edge 的 <code>edge://extensions</code> 或 Chrome 的 <code>chrome://extensions</code> 中开启开发者模式，点击“加载解压缩的扩展”，选择项目中的 <code>extensions/uzoo-cli-login</code> 文件夹。</li>
+<li>回到本页面，点击浏览器工具栏中的“Uzoo CLI Login”扩展，再点击“连接 CLI 并打开登录页”。</li>
+<li>在网站正常完成登录，进入工作区后再点该扩展，点击“授权当前会话给 CLI”。</li></ol>
+<p>CLI 将验证账号并加密保存凭据。只有你点击授权后，扩展才读取当前网站登录态。</p></html>`
+
+export async function startLoginBridge({ target, timeout = 300000, signal = cancellation.signal }) {
+  const state = crypto.randomBytes(32).toString('base64url')
+  let resolveSession, rejectSession, consumed = false, closed = false, port, timer
+  const wait = new Promise((resolve, reject) => { resolveSession = resolve; rejectSession = reject })
+  void wait.catch(() => {})
+  const server = createServer(async (req, res) => {
+    res.setHeader('Cache-Control', 'no-store')
+    res.setHeader('Referrer-Policy', 'no-referrer')
+    res.setHeader('X-Content-Type-Options', 'nosniff')
+    const send = (status, data) => { res.statusCode = status; res.setHeader('Content-Type', 'application/json'); res.end(JSON.stringify(data)) }
+    if (closed || req.headers.host !== `127.0.0.1:${port}`) { send(403, { error: 'HOST_REJECTED' }); return }
+    if (req.method === 'GET' && req.url === '/connect') {
+      res.setHeader('Content-Security-Policy', "default-src 'none'; style-src 'unsafe-inline'; frame-ancestors 'none'; base-uri 'none'")
+      res.setHeader('Content-Type', 'text/html; charset=utf-8'); res.end(connectPage); return
+    }
+    const origin = req.headers.origin || ''
+    if (!/^chrome-extension:\/\/[a-p]{32}$/.test(origin)) { send(403, { error: 'EXTENSION_ORIGIN_REQUIRED' }); return }
+    res.setHeader('Access-Control-Allow-Origin', origin)
+    res.setHeader('Vary', 'Origin')
+    if (req.method === 'OPTIONS') {
+      res.setHeader('Access-Control-Allow-Methods', 'GET, POST')
+      res.setHeader('Access-Control-Allow-Headers', 'Content-Type, X-Uzoo-Bridge')
+      res.statusCode = 204; res.end(); return
+    }
+    const provided = Buffer.from(String(req.headers['x-uzoo-bridge'] || ''))
+    const expected = Buffer.from(state)
+    if (provided.length !== expected.length || !crypto.timingSafeEqual(provided, expected)) { send(403, { error: 'STATE_REJECTED' }); return }
+    if (consumed) { send(409, { error: 'ALREADY_USED' }); return }
+    if (['GET', 'POST'].includes(req.method) && req.url === '/config') {
+      send(200, { api: target.api, origin: target.origin, loginUrl: target.url }); return
+    }
+    if (req.method !== 'POST' || req.url !== '/session') { send(404, { error: 'NOT_FOUND' }); return }
+    if (!String(req.headers['content-type'] || '').toLowerCase().startsWith('application/json')) { send(415, { error: 'JSON_REQUIRED' }); return }
+    try {
+      const chunks = []; let size = 0
+      for await (const chunk of req) { size += chunk.length; if (size > 65536) { send(413, { error: 'TOO_LARGE' }); return }; chunks.push(chunk) }
+      const value = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+      const valid = (v, limit, required = false) => typeof v === 'string' && v.length <= limit && (!required || v.trim()) && !/[\r\n\0]/.test(v)
+      if (value.origin !== target.origin || !valid(value.accessToken, 16384, true) || !valid(value.cookie, 32768) || !valid(value.deviceId, 256)) { send(400, { error: 'INVALID_SESSION' }); return }
+      if (consumed) { send(409, { error: 'ALREADY_USED' }); return }
+      consumed = true
+      send(200, { received: true, note: '请查看 CLI 中的账号验证结果' })
+      resolveSession({ baseUrl: target.api, accessToken: value.accessToken, cookie: value.cookie, deviceId: value.deviceId })
+    } catch { if (!res.writableEnded) send(400, { error: 'INVALID_JSON' }) }
+  })
+  server.requestTimeout = 10000
+  server.headersTimeout = 10000
+  await new Promise((resolve, reject) => { server.once('error', reject); server.listen(0, '127.0.0.1', resolve) })
+  port = server.address().port
+  const abort = () => { const e = new Error('登录已取消'); e.name = 'AbortError'; rejectSession(e) }
+  signal.addEventListener('abort', abort, { once: true })
+  if (signal.aborted) abort()
+  timer = setTimeout(() => { const e = new Error('等待浏览器扩展授权超时；重新运行 auth login 即可'); e.code = 'WAIT_TIMEOUT'; rejectSession(e) }, timeout)
+  return {
+    url: `http://127.0.0.1:${port}/connect#${state}`,
+    wait,
+    close: async () => {
+      if (closed) return
+      closed = true; clearTimeout(timer); signal.removeEventListener('abort', abort)
+      server.closeAllConnections()
+      await new Promise(resolve => server.close(resolve))
+    },
+  }
+}
+
+export async function openLoginBrowser(url, browser = 'default') {
+  let exe, args
+  if (!['default', 'msedge', 'chrome'].includes(browser)) throw new Error('--browser 必须是 default、msedge 或 chrome')
+  if (process.platform === 'win32') {
+    if (browser === 'default') { exe = 'rundll32.exe'; args = ['url.dll,FileProtocolHandler', url] }
+    else {
+      const tail = browser === 'msedge' ? 'Microsoft/Edge/Application/msedge.exe' : 'Google/Chrome/Application/chrome.exe'
+      const candidates = [process.env.ProgramFiles, process.env['ProgramFiles(x86)'], process.env.LOCALAPPDATA].filter(Boolean).map(root => path.join(root, tail))
+      for (const candidate of candidates) { try { await access(candidate); exe = candidate; break } catch { /* next installation location */ } }
+      if (!exe) throw new Error('找不到指定浏览器，请使用 --browser default')
+      args = [url]
+    }
+  } else if (process.platform === 'darwin') { exe = 'open'; args = browser === 'default' ? [url] : ['-a', browser === 'chrome' ? 'Google Chrome' : 'Microsoft Edge', url] }
+  else { exe = browser === 'default' ? 'xdg-open' : browser === 'chrome' ? 'google-chrome' : 'microsoft-edge'; args = [url] }
+  await new Promise((resolve, reject) => {
+    const child = spawn(exe, args, { windowsHide: true, detached: true, stdio: 'ignore' })
+    child.once('error', () => reject(new Error('无法打开普通浏览器，请手工打开 CLI 打印的本机连接链接')))
+    child.once('spawn', () => { child.unref(); resolve() })
+  })
+}
+
+export async function normalBrowserLogin({ profile, store, webUrl, browser = 'default', timeout = 300000, requestTimeout = 30000, openUrl = openLoginBrowser, onReady = () => {}, onOpenError = () => {} }) {
+  if (!['default', 'msedge', 'chrome'].includes(browser)) throw new Error('--browser 必须是 default、msedge 或 chrome')
+  const target = loginTarget(profile.baseUrl, webUrl)
+  const bridge = await startLoginBridge({ target, timeout })
+  let session
+  try {
+    onReady(bridge.url)
+    try { await openUrl(bridge.url, browser) } catch (error) { onOpenError(error.message) }
+    session = await bridge.wait
+  } finally { await bridge.close() }
+  const client = new ApiClient(session, { save: async () => {} }, requestTimeout)
+  let identity
+  try { identity = await client.raw('/auth/me') } catch { throw new Error('网页会话已收到，但 API 身份验证失败；原 CLI 凭据未替换，请重新登录授权') }
+  await store.save(client)
+  return { profile: store.name, loggedIn: true, account: identity, mode: 'browser-extension', hasRefreshCookie: /(?:^|;\s*)refresh_token=([^;]+)/.test(client.cookie || ''), note: '会话已加密保存；后续通过现有刷新接口续期。请关闭使用该会话的网页，避免与 CLI 同时刷新；建议使用独立的普通浏览器用户配置文件' }
+}

package/src/package-info.js

@@ -0,0 +1,8 @@
+import {readFileSync} from 'node:fs'
+import path from 'node:path'
+import {fileURLToPath} from 'node:url'
+
+const metadata=JSON.parse(readFileSync(new URL('../package.json',import.meta.url),'utf8'))
+export const packageInfo=Object.freeze({name:metadata.name,version:metadata.version,node_required:metadata.engines.node})
+export const skillEntry=fileURLToPath(new URL('../.agents/skills/uzoo-anime-cli/SKILL.md',import.meta.url))
+export const skillDirectory=path.dirname(skillEntry)

package/src/png-alpha.js

@@ -0,0 +1,60 @@
+import { inflateSync } from 'node:zlib'
+import crypto from 'node:crypto'
+
+function crc32(bytes) {
+  let c = 0xffffffff
+  for (const byte of bytes) { c ^= byte; for (let i=0;i<8;i++) c = (c>>>1) ^ ((c&1)?0xedb88320:0) }
+  return (c ^ 0xffffffff) >>> 0
+}
+// Decode only the server's non-interlaced 8-bit RGBA PNG contract. No local
+// inference/renderer dependency; unsupported encodings remain cached for review.
+export function inspectAlphaPng(bytes) {
+  if (!Buffer.isBuffer(bytes) || !bytes.subarray(0,8).equals(Buffer.from([137,80,78,71,13,10,26,10]))) throw Error('结果不是PNG')
+  let offset=8,width,height,header=false,ended=false,dataStarted=false,dataEnded=false
+  const chunks=[]
+  while(offset<bytes.length){
+    if(offset+12>bytes.length)throw Error('PNG块截断')
+    const size=bytes.readUInt32BE(offset),end=offset+12+size
+    if(end>bytes.length)throw Error('PNG块截断')
+    const type=bytes.toString('ascii',offset+4,offset+8),body=bytes.subarray(offset+8,end-4)
+    if(crc32(bytes.subarray(offset+4,end-4))!==bytes.readUInt32BE(end-4))throw Error('PNG校验失败')
+    if(!header&&type!=='IHDR')throw Error('PNG缺少起始IHDR')
+    if(type==='IHDR'){
+      if(header||size!==13)throw Error('PNG重复或无效IHDR')
+      header=true;width=body.readUInt32BE(0);height=body.readUInt32BE(4)
+      if(!width||!height||width*height>64000000||body[8]!==8||body[9]!==6||body[10]||body[11]||body[12])throw Error('仅接入6400万像素内非交错8位RGBA PNG')
+    } else if(type==='IDAT'){
+      if(dataEnded)throw Error('PNG IDAT不连续')
+      dataStarted=true;chunks.push(body)
+    } else {
+      if(dataStarted)dataEnded=true
+      if(type==='IEND') {if(size||!dataStarted||end!==bytes.length)throw Error('PNG结束无效');ended=true;break}
+      if(['acTL','fcTL','fdAT'].includes(type))throw Error('不接受动画PNG')
+      if(type[0]===type[0].toUpperCase())throw Error('PNG存在未支持的关键块')
+    }
+    offset=end
+  }
+  if(!ended)throw Error('PNG缺少IEND')
+  const stride=width*4,expected=(stride+1)*height
+  const raw=inflateSync(Buffer.concat(chunks),{maxOutputLength:expected})
+  if(raw.length!==expected)throw Error('PNG像素数据长度不符')
+  let previous=Buffer.alloc(stride),min=255,max=0,transparent=0,visible=0,partial=0
+  for(let y=0;y<height;y++){
+    const filter=raw[y*(stride+1)],row=Buffer.from(raw.subarray(y*(stride+1)+1,(y+1)*(stride+1)))
+    if(filter>4)throw Error('PNG滤波器无效')
+    for(let x=0;x<stride;x++){
+      const a=x>=4?row[x-4]:0,b=previous[x],c=x>=4?previous[x-4]:0
+      let predictor=0
+      if(filter===1)predictor=a
+      if(filter===2)predictor=b
+      if(filter===3)predictor=Math.floor((a+b)/2)
+      if(filter===4){const p=a+b-c,pa=Math.abs(p-a),pb=Math.abs(p-b),pc=Math.abs(p-c);predictor=pa<=pb&&pa<=pc?a:pb<=pc?b:c}
+      row[x]=(row[x]+predictor)&255
+    }
+    for(let x=3;x<stride;x+=4){const a=row[x];min=Math.min(min,a);max=Math.max(max,a);if(!a)transparent++;if(a)visible++;if(a>0&&a<255)partial++}
+    previous=row
+  }
+  if(!transparent||!visible)throw Error('PNG缺少透明背景或有效前景；保留原结果，不重复抠图')
+  return {width,height,bytes:bytes.length,sha256:crypto.createHash('sha256').update(bytes).digest('hex'),
+    alpha:{min,max,transparent_pixels:transparent,visible_pixels:visible,partial_pixels:partial}}
+}