@uzooai/anime-ai-cli 0.0.0-stage → 0.6.0

package/extensions/uzoo-cli-login/popup.js

@@ -0,0 +1,65 @@
+const SITE = 'https://uzooai.com'
+const $ = id => document.getElementById(id)
+const button = $('action')
+let action
+
+function bridgeFromUrl(value) {
+  const url = new URL(value)
+  const token = url.hash.slice(1)
+  if (url.protocol !== 'http:' || url.hostname !== '127.0.0.1' || !url.port || url.username || url.password || url.pathname !== '/connect' || !/^[A-Za-z0-9_-]{43}$/.test(token)) return null
+  return { callback: url.origin, token }
+}
+async function bridgeFetch(pairing, endpoint, body) {
+  const response = await fetch(`${pairing.callback}${endpoint}`, {
+    method: body === undefined ? 'GET' : 'POST',
+    headers: { 'X-Uzoo-Bridge': pairing.token, ...(body === undefined ? {} : { 'Content-Type': 'application/json' }) },
+    ...(body === undefined ? {} : { body: JSON.stringify(body) }),
+    redirect: 'error', credentials: 'omit', mode: 'cors', signal: AbortSignal.timeout(10000),
+  })
+  if (!response.ok) { const data = await response.json().catch(() => ({})); throw new Error(`CLI 连接失败（${data.error || response.status}）；请重新运行 auth login 并连接`) }
+  return response.json()
+}
+
+async function init() {
+  const [tab] = await chrome.tabs.query({ active: true, currentWindow: true })
+  if (!tab?.id || !tab.url) throw new Error('无法读取当前标签页，请在 CLI 连接页面或 Uzoo 网站打开扩展')
+  const pairing = bridgeFromUrl(tab.url)
+  if (pairing) {
+    $('description').textContent = '连接当前本机 CLI，然后在正常网站完成登录。'
+    button.textContent = '连接 CLI 并打开登录页'
+    action = async () => {
+      const config = await bridgeFetch(pairing, '/config', {})
+      const api = new URL(config.api), login = new URL(config.loginUrl)
+      if (config.origin !== SITE || api.origin !== SITE || api.pathname !== '/api/v1' || api.search || api.hash || login.origin !== SITE || login.username || login.password) throw new Error('扩展只允许授权 uzooai.com；CLI 的网站配置不匹配')
+      const redirect = login.searchParams.get('redirect')
+      if (redirect && new URL(redirect, SITE).origin !== SITE) throw new Error('登录跳转地址不受支持')
+      await chrome.storage.session.set({ pairing: { ...pairing, ...config, tabId: tab.id } })
+      await chrome.tabs.update(tab.id, { url: login.href })
+      $('status').textContent = '请正常登录，进入工作区后再点击本扩展授权。'
+    }
+  } else {
+    const pending = (await chrome.storage.session.get('pairing')).pairing
+    if (!pending) throw new Error('尚未连接 CLI。先运行 auth login，再在打开的本机连接页面点击扩展')
+    if (new URL(tab.url).origin !== SITE || tab.id !== pending.tabId) throw new Error('请在刚才由 CLI 打开的 Uzoo 标签页完成登录并授权')
+    $('description').textContent = '请先完成网站登录。点击下方按钮会将当前账号的网页会话（含刷新 Cookie）交给已连接的本机 CLI。'
+    button.textContent = '授权当前会话给 CLI'
+    action = async () => {
+      const results = await chrome.scripting.executeScript({ target: { tabId: tab.id }, func: () => ({ origin: location.origin, accessToken: localStorage.getItem('access_token') || '', deviceId: localStorage.getItem('sign_v2_device_id') || '' }) })
+      const value = results[0]?.result
+      if (value?.origin !== SITE || !value.accessToken) throw new Error('当前页面尚未登录，请完成登录后再授权')
+      const cookies = await chrome.cookies.getAll({ url: `${pending.api}/auth/refresh` })
+      const jar = new Map()
+      for (const cookie of cookies.sort((a,b) => b.path.length-a.path.length)) if (!jar.has(cookie.name)) jar.set(cookie.name,cookie.value)
+      value.cookie = [...jar].map(([name, data]) => `${name}=${data}`).join('; ')
+      await bridgeFetch(pending, '/session', value)
+      await chrome.storage.session.remove('pairing')
+      $('status').textContent = '会话已交给本机 CLI，请查看终端中的身份验证结果。请关闭使用该会话的网页，避免与 CLI 同时刷新。建议使用独立的普通浏览器用户配置文件。'
+    }
+  }
+  button.disabled = false
+}
+button.addEventListener('click', async () => {
+  button.disabled = true; $('status').textContent = '处理中…'
+  try { await action() } catch (error) { $('status').textContent = error.message; button.disabled = false }
+})
+init().catch(error => { $('description').textContent = error.message; button.textContent = '请按提示操作' })

package/package.json

@@ -1,6 +1,53 @@
-{
-  "name": "@uzooai/anime-ai-cli",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "@uzooai/anime-ai-cli",
+  "version": "0.6.0",
+  "private": false,
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "uzoo-anime": "src/cli.js"
+  },
+  "scripts": {
+    "build": "npm run check && npm run check:resources",
+    "pack:local": "node scripts/pack-local.mjs",
+    "prepack": "npm run build",
+    "start": "node src/cli.js",
+    "check": "node --check src/cli.js && node --check src/install.js && node --check src/api.js && node --check src/canvas.js && node --check src/draft-finalize.js && node --check src/media-copy.js && node --check src/group-edit.js && node --check src/group-layout.js && node --check src/node-copy.js && node --check src/node-delete.js && node --check src/materials.js && node --check src/material-save.js && node --check src/service.js && node --check src/video-clip.js && node --check src/media.js && node --check src/image-media.js && node --check src/image-output.js && node --check src/image-crop.js && node --check src/image-annotation.js && node --check src/image-matting.js && node --check src/matting.js && node --check src/png-alpha.js && node --check src/annotation-media.js && node --check src/video-frame.js && node --check src/graph.js && node --check src/graph-disconnect.js && node --check src/group-membership.js && node --check src/model-options.js && node --check src/generation-input.js && node --check src/review.js && node --check src/resource.js && node --check src/generation-graph.js && node --check src/repaint.js && node --check src/repaint-reverse.js && node --check src/repaint-delivery.js && node --check src/repaint-video.js && node --check src/repaint-history.js && node --check src/multipart.js && node --check src/repaint-materials.js && node --check src/repaint-settings.js && node --check src/remake.js && node --check src/repaint-graph.js && node --check src/store.js && node --check src/workflows.js && node --check src/agreement.js && node --check src/agreement-page.js && node --check src/protocol.js && node --check src/cli-authorization.js && node --check src/browser-login.js && node --check src/normal-login.js && node --check extensions/uzoo-cli-login/popup.js && node --check src/local-output.js && node --check src/repaint-archive.js && node --check src/repaint-export.js && node --check src/repaint-sequence.js && node --check src/node-history.js && node --check src/history-add.js && node --check src/material-download.js && node --check src/download-name.js && node --check scripts/pack-local.mjs && node --check src/package-info.js && node --check src/matting-background.js && node --check src/matting-worker.js && node --check src/matting-jobs.js && node --check scripts/release-policy.mjs && node --check scripts/check-release.mjs",
+    "test": "node test/smoke.mjs && node test/install.mjs && node test/atomic-file.mjs && node test/phase1.mjs && node test/agreement.mjs && node test/canvas.mjs && node test/material-graph.mjs && node test/graph-rename.mjs && node test/graph-ungroup.mjs && node test/graph-disconnect.mjs && node test/node-copy.mjs && node test/node-copy-batch.mjs && node test/draft-finalize.mjs && node test/media-copy.mjs && node test/group-edit.mjs && node test/node-delete.mjs && node test/material-save.mjs && node test/service.mjs && node test/video-clip.mjs && node test/video-frame.mjs && node test/image-crop.mjs && node test/image-annotation.mjs && node test/image-matting.mjs && node test/matting.mjs && node test/matting-background.mjs && node test/matting-jobs.mjs && node test/model-options.mjs && node test/generation-input.mjs && node test/review.mjs && node test/repaint.mjs && node test/repaint-reverse.mjs && node test/repaint-delivery.mjs && node test/repaint-video.mjs && node test/repaint-settings.mjs && node test/repaint-materials.mjs && node test/remake.mjs && node test/normal-login.mjs && node test/login-extension.mjs && node test/browser-login.mjs && node test/cli-authorization.mjs && node test/store-recovery.mjs && node test/store-concurrency.mjs && node test/repaint-archive.mjs && node test/node-history.mjs && node test/file-transfer.mjs && node test/material-download.mjs && node test/release-policy.mjs",
+    "test:browser": "node test/normal-login.mjs && node test/login-extension.mjs && node test/browser-login.mjs",
+    "test:media": "node test/media.mjs && node test/image-media.mjs && node test/annotation-media.mjs",
+    "check:resources": "node scripts/check-package-resources.mjs",
+    "test:package": "node scripts/verify-package.mjs",
+    "check:release": "npm run build && node scripts/check-release.mjs",
+    "prepublishOnly": "npm run check:release"
+  },
+  "files": [
+    "src/",
+    "assets/logo-uzoo.svg",
+    "assets/favicon-uzoo.png",
+    "!assets/README.md",
+    ".agents/skills/uzoo-anime-cli/",
+    "extensions/uzoo-cli-login/",
+    "examples/matting.json",
+    "docs/Agent接入与版本更新.md",
+    "README.md",
+    "CHANGELOG.md",
+    "LICENSE"
+  ],
+  "description": "Uzoo Anime CLI for canvas, media references and authorized generation workflows",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/UzooAI/uzooai-cli.git"
+  },
+  "bugs": {
+    "url": "https://github.com/UzooAI/uzooai-cli/issues"
+  },
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/",
+    "tag": "latest"
+  }
+}

package/src/agreement-page.js

@@ -0,0 +1,62 @@
+const escape = (value) =>
+  String(value ?? '').replace(
+    /[&<>"']/g,
+    (c) => ({ '&': '&amp;', '<': '&lt;', '>': '&gt;', '"': '&quot;', "'": '&#39;' })[c]
+  )
+
+// Theme only the isolated display copy; document.html and its consent digest stay original.
+function darkDocument(html) {
+  const style = `<style data-uzoo-agreement-theme>
+:root{color-scheme:dark}html,body{background:#202020!important;color:#ededed!important}body{padding:16px;font:15px/1.8 system-ui,"Microsoft YaHei",sans-serif;overflow-wrap:anywhere}body *{color:#ededed!important;background-color:transparent!important;background-image:none!important;border-color:#444!important}a,a *{color:#8bc8ff!important}::selection{background:#38566c;color:#fff}
+</style>`
+  return html + style
+}
+
+// Remote published HTML is isolated in an opaque, scriptless sandbox. Only the
+// local parent page can send a human decision; no API credentials enter HTML.
+export function agreementPage({
+  protocol,
+  document,
+  account,
+  actionPath,
+  csrf,
+  nonce,
+  continuation
+}) {
+  const script = `const box=document.getElementById('accepted'),yes=document.getElementById('agree'),no=document.getElementById('decline'),status=document.getElementById('status');
+let busy=false,finished=false,timer;
+box.addEventListener('change',()=>yes.disabled=!box.checked||busy||finished);
+function finish(message){finished=true;box.disabled=true;yes.disabled=true;no.disabled=true;status.textContent=message;clearInterval(timer);}
+function receive(r,d){
+  if(finished)return;
+  if(r.ok&&(d.status==='agreed'||d.status==='not_required')){
+    finish(d.status==='agreed'?'协议状态已核验并同步 CLI，可关闭此页。':'当前无需签署协议，状态已同步 CLI，可关闭此页。');
+    try{window.close()}catch{}
+  }else if(d.status==='declined'||d.status==='changed'||d.status==='cancelled'||d.status==='rejected')finish(d.message);
+  else if(d.message)status.textContent=d.message;
+}
+async function decision(agreed){
+  if(busy||finished||agreed&&!box.checked)return;
+  busy=true;yes.disabled=true;no.disabled=true;
+  status.textContent=agreed?'正在核验并记录协议确认…':'已选择不同意，正在结束本次确认…';
+  try{
+    const r=await fetch(${JSON.stringify(actionPath)},{method:'POST',headers:{'Content-Type':'application/json','X-Uzoo-Agreement':${JSON.stringify(csrf)}},body:JSON.stringify({agreed})});
+    receive(r,await r.json());
+  }catch{if(!finished)status.textContent='确认结果尚未核实。CLI 将继续只读查询，请勿重复签署。';}
+  finally{busy=false;}
+}
+yes.addEventListener('click',()=>decision(true));no.addEventListener('click',()=>decision(false));
+timer=setInterval(async()=>{
+  if(finished||busy)return;
+  try{const r=await fetch(${JSON.stringify(actionPath.replace('/decision', '/status'))});receive(r,await r.json())}catch{}
+},2500);`
+  const resume = continuation
+    ? `<aside>确认后 CLI 将重新核验原请求和费用，再继续本次任务：${escape(continuation.operation)} · ${escape(continuation.model)} · 本次已确认 ${escape(continuation.cost)} OO。参数或费用变化时会停止。</aside>`
+    : '<aside>本页只记录协议确认，不提交生成，也不扣除生成费用。</aside>'
+  return `<!doctype html><html lang="zh-CN"><head><meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1"><title>Uzoo · Seedance 协议确认</title><style>
+*{box-sizing:border-box}html{color-scheme:dark}body{margin:0;background:#111;color:#ededed;font:15px/1.65 system-ui,"Microsoft YaHei",sans-serif;padding:28px}main{max-width:980px;margin:auto;border:1px solid #444;border-radius:12px;background:#1c1c1c;overflow:hidden}header,section,footer{padding:20px 28px}header{border-bottom:1px solid #444}h1{font-size:23px;margin:0}h2{font-size:17px;margin:8px 0}.meta,aside{color:#b9b9b9}.meta{margin-top:10px}aside{background:#252525;padding:12px;border-radius:6px;margin:14px 0}iframe{width:100%;height:45vh;min-height:260px;border:1px solid #444;border-radius:6px;background:#202020}label{display:flex;gap:10px;margin:20px 0;align-items:flex-start}input{width:20px;height:20px;flex-shrink:0;margin-top:3px;accent-color:#2e9fe6}button{border:0;border-radius:6px;padding:11px 20px;font:inherit;cursor:pointer}#agree{background:#2e9fe6;color:white}#decline{background:#333;color:white}button:disabled{background:#444!important;color:#999!important;cursor:not-allowed}footer{display:flex;justify-content:flex-end;gap:12px;border-top:1px solid #444}#status{min-height:26px;color:#b9b9b9}a{color:#8bc8ff}</style></head>
+<body><main><header><h1>《统一协议》</h1><h2>《${escape(document.title)}》</h2><div class="meta">协议版本：${escape(protocol.version || '当前版本')} · 当前 CLI 账号：${escape(account.name)}（${escape(account.uid)}）<br>服务：${escape(account.origin)}</div></header><section>
+<p>${escape(protocol.message)}</p>${resume}<p>请阅读下方当前已发布的完整协议，由你本人决定是否同意。</p><iframe title="Seedance 模型使用承诺书正文" sandbox="" referrerpolicy="no-referrer" srcdoc="${escape(darkDocument(document.html))}"></iframe>
+<label><input id="accepted" type="checkbox"><span>我已阅读并同意上述《${escape(document.title)}》（${escape(protocol.version || '当前版本')}）。</span></label><p id="status" role="status" aria-live="polite">尚未确认。首次使用或协议版本更新后需要重新确认。</p></section>
+<footer><button id="decline" type="button">不同意</button><button id="agree" type="button" disabled>同意并继续</button></footer></main><script nonce="${escape(nonce)}">${script}</script></body></html>`
+}

package/src/agreement.js

@@ -0,0 +1,419 @@
+import crypto from 'node:crypto'
+import http from 'node:http'
+import { request, cancellation } from './api.js'
+import { unwrap } from './protocol.js'
+import { openLoginBrowser } from './normal-login.js'
+import { agreementPage } from './agreement-page.js'
+
+export const AGREEMENT_LABEL = '《统一协议》'
+export const AGREEMENT_TITLE = '《Seedance2.0模型使用承诺书》'
+export function agreementError(code, message, protocol) {
+  const error = new Error(message)
+  Object.assign(error, { code, apiCode: 4401, status: 'awaiting_agreement', protocol })
+  return error
+}
+export function validateProtocol(value) {
+  if (
+    !value ||
+    typeof value.required !== 'boolean' ||
+    typeof value.agreed !== 'boolean' ||
+    typeof value.version !== 'string'
+  )
+    throw new Error('协议状态响应不完整，停止继续生成')
+  return {
+    required: value.required,
+    agreed: value.agreed,
+    version: value.version,
+    label: AGREEMENT_LABEL,
+    document_title: AGREEMENT_TITLE,
+    message: String(value.message || '请阅读并确认协议后继续').slice(0, 2000)
+  }
+}
+export async function readProtocol(client) {
+  return validateProtocol((await client.raw('/video/protocol-agreement')).protocol)
+}
+async function publicText(url, timeout) {
+  const response = await request(
+    url,
+    { headers: { Accept: 'text/html, application/json' } },
+    timeout
+  )
+  if (!response.ok) {
+    await response.body?.cancel()
+    throw new Error('协议正文读取失败')
+  }
+  const chunks = []
+  let size = 0
+  for await (const chunk of response.body) {
+    size += chunk.length
+    if (size > 2 * 1024 * 1024) {
+      await response.body.cancel().catch(() => {})
+      throw new Error('协议正文超过读取限制')
+    }
+    chunks.push(chunk)
+  }
+  return {
+    text: Buffer.concat(chunks).toString('utf8'),
+    mime: response.headers.get('content-type') || ''
+  }
+}
+export async function readAgreementDocument(client) {
+  const base = new URL(client.baseUrl)
+  const list = await publicText(client.baseUrl + '/content', client.timeout)
+  const items = unwrap(JSON.parse(list.text)).items
+  if (!Array.isArray(items)) throw new Error('已发布协议目录无效')
+  const matches = items.filter(
+    (i) => i.type === 'terms_of_service' && /seedance/i.test(i.title || '')
+  )
+  const exact = matches.filter(
+    (i) => String(i.title).replace(/\s/g, '') === 'Seedance2.0模型使用承诺书'
+  )
+  const candidates = exact.length ? exact : matches
+  if (candidates.length !== 1) throw new Error('未找到唯一的 Seedance 模型使用承诺书，停止签署')
+  const item = candidates[0]
+  let html = typeof item.content === 'string' ? item.content : ''
+  let source = client.baseUrl + '/content'
+  if (!html.trim()) {
+    const url = new URL(item.content_url, client.baseUrl + '/')
+    const prefix = base.pathname.replace(/\/$/, '')
+    if (
+      url.origin !== base.origin ||
+      url.username ||
+      url.password ||
+      url.hash ||
+      !new RegExp(
+        '^' + prefix.replace(/[.*+?^${}()|[\]\\]/g, '\\$&') + '/content/[0-9]+/body$'
+      ).test(url.pathname) ||
+      url.searchParams.get('kind') !== 'doc' ||
+      [...url.searchParams.keys()].some((k) => k !== 'kind')
+    )
+      throw new Error('协议正文地址不属于当前服务的公开内容接口')
+    source = url.href
+    const content = await publicText(source, client.timeout)
+    if (!/text\/html/i.test(content.mime)) throw new Error('协议正文不是 HTML')
+    html = content.text
+  }
+  if (!html.trim() || html.length > 2 * 1024 * 1024) throw new Error('协议正文为空或过大，不能确认')
+  return {
+    id: item.id,
+    title: String(item.title),
+    version: item.version,
+    source,
+    html,
+    digest: crypto
+      .createHash('sha256')
+      .update(JSON.stringify([item.id, item.title, item.version, html]))
+      .digest('hex')
+  }
+}
+const identity = (value) => {
+  const uid = String(value.uid ?? value.id ?? '')
+  if (!uid) throw new Error('无法核对协议签署账号')
+  return { uid, name: String(value.name || value.username || uid) }
+}
+
+export async function startAgreementBridge({
+  client,
+  protocol,
+  document,
+  account,
+  continuation,
+  timeout = 300000,
+  signal = cancellation.signal
+}) {
+  const token = crypto.randomBytes(32).toString('base64url'),
+    csrf = crypto.randomBytes(32).toString('base64url'),
+    nonce = crypto.randomBytes(24).toString('base64url')
+  const pathname = '/agreement/' + token
+  let origin,
+    closed = false,
+    settled = false,
+    processing = false,
+    decisionSent = false,
+    timer,
+    resolveWait,
+    rejectWait
+  const wait = new Promise((resolve, reject) => {
+    resolveWait = resolve
+    rejectWait = reject
+  })
+  void wait.catch(() => {})
+  function fail(code, message, diagnostic) {
+    if (!settled) {
+      settled = true
+      const error=agreementError(code, message, protocol)
+      if(diagnostic){error.diagnostic=diagnostic;error.apiCode=diagnostic.api_code;error.requestId=diagnostic.request_id}
+      rejectWait(error)
+    }
+  }
+  function agreed(state) {
+    if (!settled) {
+      settled = true
+      resolveWait({
+        status: state.agreed ? 'agreed' : 'not_required',
+        protocol: state,
+        account: { uid: account.uid, name: account.name }
+      })
+    }
+  }
+  async function checkAccount() {
+    if (identity(await client.raw('/auth/me')).uid !== account.uid)
+      throw agreementError(
+        'AGREEMENT_ACCOUNT_CHANGED',
+        'CLI 账号已变化，未继续签署或生成',
+        protocol
+      )
+  }
+  async function freshState() {
+    await checkAccount()
+    const state = await readProtocol(client)
+    if (state.version !== protocol.version)
+      throw agreementError(
+        'AGREEMENT_CHANGED',
+        '协议版本已更新，请重新打开并阅读当前版本后确认',
+        state
+      )
+    return state
+  }
+  async function freshDocument() {
+    const latest = await readAgreementDocument(client)
+    if (latest.digest !== document.digest)
+      throw agreementError('AGREEMENT_CHANGED', '协议正文已变化，请重新打开并阅读后确认', protocol)
+  }
+  const server = http.createServer(async (req, res) => {
+    res.setHeader('Cache-Control', 'no-store')
+    res.setHeader('Referrer-Policy', 'no-referrer')
+    res.setHeader('X-Content-Type-Options', 'nosniff')
+    const send = (status, data) => {
+      if (!res.writableEnded) {
+        res.writeHead(status, { 'Content-Type': 'application/json; charset=utf-8' })
+        res.end(JSON.stringify(data))
+      }
+    }
+    if (closed || req.headers.host !== new URL(origin).host) {
+      send(403, { status: 'rejected', message: '本机确认地址不匹配' })
+      return
+    }
+    if (req.method === 'GET' && req.url === pathname) {
+      res.setHeader(
+        'Content-Security-Policy',
+        `default-src 'none'; script-src 'nonce-${nonce}'; style-src 'unsafe-inline'; frame-src 'self'; connect-src 'self'; form-action 'none'; frame-ancestors 'none'; base-uri 'none'`
+      )
+      res.writeHead(200, { 'Content-Type': 'text/html; charset=utf-8' })
+      res.end(
+        agreementPage({
+          protocol,
+          document,
+          account: { ...account, origin: new URL(client.baseUrl).origin },
+          continuation,
+          actionPath: pathname + '/decision',
+          csrf,
+          nonce
+        })
+      )
+      return
+    }
+    if (req.method === 'GET' && req.url === pathname + '/status') {
+      if (settled) {
+        send(200, { status: 'cancelled', message: '本次页面已结束，请查看 CLI 状态' })
+        return
+      }
+      if (processing) {
+        send(200, { status: 'waiting', message: '正在确认' })
+        return
+      }
+      try {
+        const state = await freshState()
+        if (state.agreed || !state.required) {
+          if (state.required) await freshDocument()
+          res.once('finish', () => agreed(state))
+          send(200, {
+            status: state.agreed ? 'agreed' : 'not_required',
+            message: state.agreed
+              ? '当前账号已确认当前版本协议，CLI 将核验后继续'
+              : '当前服务不要求协议确认，未记录同意，CLI 将重新核验后继续'
+          })
+        } else send(200, { status: 'waiting', protocol: state })
+      } catch (error) {
+        if (error.code?.startsWith('AGREEMENT_')) {
+          send(409, { status: 'changed', message: error.message })
+          fail(error.code, error.message)
+        } else send(503, { status: 'waiting', message: '协议状态查询暂不可用，尚未继续生成' })
+      }
+      return
+    }
+    if (req.method !== 'POST' || req.url !== pathname + '/decision') {
+      send(404, { status: 'rejected', message: '页面不存在' })
+      return
+    }
+    if (
+      req.headers.origin !== origin ||
+      req.headers['x-uzoo-agreement'] !== csrf ||
+      !/^application\/json(?:;|$)/i.test(req.headers['content-type'] || '')
+    ) {
+      send(403, { status: 'rejected', message: '需要从本页明确确认' })
+      return
+    }
+    if (settled || processing || decisionSent) {
+      send(409, { status: 'waiting', message: '本次确认已处理或结果待核实，请勿重复点击' })
+      return
+    }
+    processing = true
+    try {
+      const chunks = []
+      let size = 0
+      for await (const chunk of req) {
+        size += chunk.length
+        if (size > 1024) {
+          send(413, { status: 'rejected', message: '确认请求过大' })
+          return
+        }
+        chunks.push(chunk)
+      }
+      let body
+      try {
+        body = JSON.parse(Buffer.concat(chunks).toString('utf8'))
+      } catch {
+        send(400, { status: 'rejected', message: '确认请求无效' })
+        return
+      }
+      if (!body || typeof body.agreed !== 'boolean' || Object.keys(body).length !== 1) {
+        send(400, { status: 'rejected', message: '缺少明确选择' })
+        return
+      }
+      if (!body.agreed) {
+        res.once('finish', () =>
+          fail(
+            'AGREEMENT_DECLINED',
+            '用户未同意《统一协议》《Seedance2.0模型使用承诺书》，本次生成未继续'
+          )
+        )
+        send(200, { status: 'declined', message: '你选择了不同意，本次生成未继续' })
+        return
+      }
+      const state = await freshState()
+      if (state.required) await freshDocument()
+      if (!state.agreed && state.required) {
+        decisionSent = true
+        // This authenticated POST only occurs after the human's checkbox + click.
+        await client.raw(
+          '/video/protocol-agreement',
+          { method: 'POST', body: { agreed: true } },
+          { retry: false }
+        )
+      }
+      const verified = await freshState()
+      if (verified.required) await freshDocument()
+      if (verified.required && !verified.agreed) throw new Error('签署记录尚未确认')
+      res.once('finish', () => agreed(verified))
+      send(200, {
+        status: verified.agreed ? 'agreed' : 'not_required',
+        message: verified.agreed
+          ? '协议状态已核验，CLI 将检查原任务参数与费用后继续'
+          : '当前服务不要求协议确认，未记录同意，CLI 将重新核验后继续'
+      })
+    } catch (error) {
+      if (error.code === 'API_ERROR' && (error.apiCode === 2001 || [401,403].includes(error.status))) {
+        const requestId=/^[a-zA-Z0-9_-]{1,120}$/.test(error.requestId||'')?error.requestId:undefined
+        const message='协议确认被服务端拒绝（HTTP '+error.status+(error.apiCode?'，code '+error.apiCode:'')+(requestId?'，request_id '+requestId:'')+'）；尚未核验签署成功，未继续生成。请核对账号和接口权限。'
+        res.once('finish',()=>fail('AGREEMENT_REJECTED',message,{http_status:error.status,...(error.apiCode?{api_code:error.apiCode}:{}),...(requestId?{request_id:requestId}:{})}))
+        send(403,{status:'rejected',message})
+      } else
+      if (error.code?.startsWith('AGREEMENT_')) {
+        send(409, { status: 'changed', message: error.message })
+        fail(error.code, error.message)
+      } else
+        send(503, {
+          status: 'waiting',
+          message: '协议签署结果尚未确认，CLI 会只读查询；不会重复提交同意或继续生成'
+        })
+    } finally {
+      processing = false
+    }
+  })
+  server.requestTimeout = 10000
+  server.headersTimeout = 10000
+  await new Promise((resolve, reject) => {
+    server.once('error', reject)
+    server.listen(0, '127.0.0.1', resolve)
+  })
+  origin = `http://127.0.0.1:${server.address().port}`
+  const abort = () => fail('AGREEMENT_CANCELLED', '协议确认已取消，原任务未继续')
+  signal.addEventListener('abort', abort, { once: true })
+  if (signal.aborted) abort()
+  timer = setTimeout(
+    () =>
+      fail(
+        'AGREEMENT_WAIT_TIMEOUT',
+        '等待用户确认协议超时，原任务保持等待签署，可恢复原 operation'
+      ),
+    timeout
+  )
+  return {
+    url: origin + pathname,
+    wait,
+    close: async () => {
+      if (closed) return
+      closed = true
+      clearTimeout(timer)
+      signal.removeEventListener('abort', abort)
+      server.closeAllConnections()
+      await new Promise((resolve) => server.close(resolve))
+    }
+  }
+}
+
+export async function browserAgreement(
+  client,
+  {
+    browser = 'default',
+    timeout = 300000,
+    openUrl = openLoginBrowser,
+    onReady = () => {},
+    onOpenError = () => {},
+    continuation,
+    signal = cancellation.signal
+  } = {}
+) {
+  if (
+    !['default', 'msedge', 'chrome'].includes(browser) ||
+    !Number.isSafeInteger(timeout) ||
+    timeout < 1 ||
+    timeout > 1800000
+  )
+    throw new Error('协议浏览器或等待时间无效')
+  const account = identity(await client.raw('/auth/me'))
+  const protocol = await readProtocol(client)
+  if (!protocol.required || protocol.agreed)
+    return { status: protocol.agreed ? 'already_agreed' : 'not_required', protocol, account }
+  let document
+  try {
+    document = await readAgreementDocument(client)
+  } catch {
+    throw agreementError(
+      'AGREEMENT_DOCUMENT_UNAVAILABLE',
+      '《统一协议》《Seedance2.0模型使用承诺书》正文暂不可用，未签署也未继续生成',
+      protocol
+    )
+  }
+  const bridge = await startAgreementBridge({
+    client,
+    protocol,
+    document,
+    account,
+    continuation,
+    timeout,
+    signal
+  })
+  try {
+    onReady(bridge.url, { protocol, account, document: { title: document.title, id: document.id } })
+    try {
+      await openUrl(bridge.url, browser)
+    } catch (error) {
+      onOpenError(error.message)
+    }
+    return await bridge.wait
+  } finally {
+    await bridge.close()
+  }
+}