@zeppeli777/tools-doubao 0.0.0-stage → 0.1.1

package/src/http.mjs

@@ -0,0 +1,60 @@
+// 共享 HTTP 常量与请求头构造。零依赖：只用全局 fetch / node 内置模块。
+
+// 与 doubao2api 抓包真值对齐的桌面客户端指纹常量（公开逆向项目的通用值）。
+export const DEVICE_ID = "714003710229497";
+export const WEB_ID = "7604137868021548590";
+export const FP = "verify_mlcfw5f7_TPq0YmFD_NrsC_4RuQ_BJPg_M5W7i58I7wV0";
+export const CHROMIUM_VERSION = "148.0.7816.0";
+
+export const USER_AGENT =
+  "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) " +
+  "Chrome/148.0.0.0 Safari/537.36";
+
+export const BASE_URL = "https://www.doubao.com";
+
+/** 把一个账号的凭证合成为 Cookie 头。sessionid 必需；msToken 留空最安全（假值触发 710022002）。 */
+export function cookieHeader(account) {
+  const parts = [`sessionid=${account.sessionid}`];
+  if (account.ttwid) parts.push(`ttwid=${account.ttwid}`);
+  if (account.passport_csrf_token) parts.push(`passport_csrf_token=${account.passport_csrf_token}`);
+  return parts.join("; ");
+}
+
+/** 基础请求头。extra 里的同名键会覆盖默认值。 */
+export function baseHeaders(account, extra = {}) {
+  return {
+    "User-Agent": USER_AGENT,
+    Cookie: cookieHeader(account),
+    "x-tt-passport-csrf-token": account.passport_csrf_token || "",
+    Origin: BASE_URL,
+    Referer: `${BASE_URL}/chat`,
+    ...extra,
+  };
+}
+
+export const SSE_HEADERS = {
+  Accept: "text/event-stream",
+  "Content-Type": "application/json",
+  "Agw-Js-Conv": "str",
+};
+
+/** 错误类型：带给 Agent 的可读提示。 */
+export class DoubaoError extends Error {
+  constructor(message, hint = "") {
+    super(message);
+    this.name = "DoubaoError";
+    this.hint = hint;
+  }
+}
+
+/** 登录态失效 —— 调用方应当轮换下一个账号重试。 */
+export class DoubaoAuthError extends DoubaoError {}
+/** IP/账号风控 —— 换账号没用，直接报给用户。 */
+export class DoubaoRiskError extends DoubaoError {}
+
+export const RISK_CODES = new Set([710022002, 710022004]);
+export const AUTH_CODES = new Set([710012001, 710012002, 710012003]);
+
+export function riskHint() {
+  return "触发了豆包风控。可等待约 30 分钟冷却、切换网络（手机热点最快）、或在浏览器里打开 doubao.com 手动过一次人机验证。";
+}

package/src/png.mjs

@@ -0,0 +1,164 @@
+// 零依赖 PNG 解码 / 编码 / 裁剪（8-bit，bit depth 固定 8）。
+// 解码支持 colorType 0/2/3/4/6，统一输出 RGB；编码输出 colorType 2（RGB）。
+// 用途：扫码登录二维码转 ASCII、去水印的扩图裁剪。
+import { inflateSync, deflateSync } from "node:zlib";
+
+const SIGNATURE = Buffer.from([0x89, 0x50, 0x4e, 0x47, 0x0d, 0x0a, 0x1a, 0x0a]);
+
+// 自带 CRC32（zlib.crc32 在部分 Bun 版本缺失，为兼容 Bun 宿主手动实现）
+const CRC_TABLE = (() => {
+  const table = new Int32Array(256);
+  for (let n = 0; n < 256; n++) {
+    let c = n;
+    for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+    table[n] = c;
+  }
+  return table;
+})();
+
+function crc32(buf) {
+  let c = 0xffffffff;
+  for (let i = 0; i < buf.length; i++) c = CRC_TABLE[(c ^ buf[i]) & 0xff] ^ (c >>> 8);
+  return (c ^ 0xffffffff) >>> 0;
+}
+
+function chunk(type, data) {
+  const len = Buffer.alloc(4);
+  len.writeUInt32BE(data.length);
+  const body = Buffer.concat([Buffer.from(type, "ascii"), data]);
+  const crc = Buffer.alloc(4);
+  crc.writeUInt32BE(crc32(body));
+  return Buffer.concat([len, body, crc]);
+}
+
+/**
+ * 解码 PNG 为 RGB。返回 { width, height, data: Buffer(RGB interleaved) }。
+ * 仅支持 8-bit、非隔行；不满足时抛错。
+ */
+export function decodePng(buf) {
+  if (!buf || buf.length < 57 || buf.readUInt32BE(0) !== 0x89504e47) {
+    throw new Error("不是 PNG 文件");
+  }
+  let width = 0;
+  let height = 0;
+  let bitDepth = 0;
+  let colorType = 0;
+  let interlace = 0;
+  const idat = [];
+  let palette = null;
+  let off = 8;
+  while (off + 8 <= buf.length) {
+    const len = buf.readUInt32BE(off);
+    const type = buf.toString("ascii", off + 4, off + 8);
+    const data = buf.subarray(off + 8, off + 8 + len);
+    if (type === "IHDR") {
+      width = data.readUInt32BE(0);
+      height = data.readUInt32BE(4);
+      bitDepth = data[8];
+      colorType = data[9];
+      interlace = data[12];
+    } else if (type === "PLTE") {
+      palette = data;
+    } else if (type === "IDAT") {
+      idat.push(data);
+    } else if (type === "IEND") {
+      break;
+    }
+    off += 12 + len;
+  }
+  if (bitDepth !== 8) throw new Error(`不支持的 PNG 位深 ${bitDepth}（仅支持 8）`);
+  if (interlace) throw new Error("不支持隔行扫描（Adam7）的 PNG");
+  const channels = { 0: 1, 2: 3, 3: 1, 4: 2, 6: 4 }[colorType];
+  if (!channels) throw new Error(`不支持的 PNG 颜色类型 ${colorType}`);
+
+  const raw = inflateSync(Buffer.concat(idat));
+  const stride = width * channels;
+  const pixels = Buffer.alloc(height * stride);
+  for (let y = 0; y < height; y++) {
+    const filter = raw[y * (stride + 1)];
+    const rowIn = raw.subarray(y * (stride + 1) + 1, (y + 1) * (stride + 1));
+    const row = pixels.subarray(y * stride, (y + 1) * stride);
+    const prev = y > 0 ? pixels.subarray((y - 1) * stride, y * stride) : null;
+    for (let x = 0; x < stride; x++) {
+      const left = x >= channels ? row[x - channels] : 0;
+      const up = prev ? prev[x] : 0;
+      const upLeft = prev && x >= channels ? prev[x - channels] : 0;
+      let val = rowIn[x];
+      if (filter === 1) val += left;
+      else if (filter === 2) val += up;
+      else if (filter === 3) val += (left + up) >> 1;
+      else if (filter === 4) {
+        const p = left + up - upLeft;
+        const pa = Math.abs(p - left);
+        const pb = Math.abs(p - up);
+        const pc = Math.abs(p - upLeft);
+        val += pa <= pb && pa <= pc ? left : pb <= pc ? up : upLeft;
+      }
+      row[x] = val & 0xff;
+    }
+  }
+
+  // 统一转 RGB
+  const rgb = Buffer.alloc(width * height * 3);
+  for (let i = 0, j = 0; i < width * height; i++, j += 3) {
+    const p = i * channels;
+    let r = 0;
+    let g = 0;
+    let b = 0;
+    if (colorType === 0) {
+      r = g = b = pixels[p];
+    } else if (colorType === 2 || colorType === 6) {
+      r = pixels[p];
+      g = pixels[p + 1];
+      b = pixels[p + 2];
+    } else if (colorType === 4) {
+      r = g = b = pixels[p];
+    } else if (colorType === 3) {
+      const idx = pixels[p] * 3;
+      r = palette[idx];
+      g = palette[idx + 1];
+      b = palette[idx + 2];
+    }
+    rgb[j] = r;
+    rgb[j + 1] = g;
+    rgb[j + 2] = b;
+  }
+  return { width, height, data: rgb };
+}
+
+/** 把 RGB 像素编码为 PNG（colorType 2，filter 0）。 */
+export function encodePng(width, height, rgb) {
+  const stride = width * 3;
+  const raw = Buffer.alloc((stride + 1) * height);
+  for (let y = 0; y < height; y++) {
+    raw[y * (stride + 1)] = 0; // filter: none
+    rgb.copy(raw, y * (stride + 1) + 1, y * stride, (y + 1) * stride);
+  }
+  const ihdr = Buffer.alloc(13);
+  ihdr.writeUInt32BE(width, 0);
+  ihdr.writeUInt32BE(height, 4);
+  ihdr[8] = 8; // bit depth
+  ihdr[9] = 2; // truecolor RGB
+  return Buffer.concat([
+    SIGNATURE,
+    chunk("IHDR", ihdr),
+    chunk("IDAT", deflateSync(raw, { level: 6 })),
+    chunk("IEND", Buffer.alloc(0)),
+  ]);
+}
+
+/**
+ * 裁掉 PNG 底部：保留顶部 keepTopFrac 比例（默认 0.8，对应"往下扩图四分之一"）。
+ * 返回 { buffer, width, height, origHeight }；输入非 PNG 时抛错。
+ */
+export function cropPngBottom(pngBuf, keepTopFrac = 0.8) {
+  const img = decodePng(pngBuf);
+  const newHeight = Math.max(1, Math.round(img.height * keepTopFrac));
+  const data = img.data.subarray(0, newHeight * img.width * 3);
+  return {
+    buffer: encodePng(img.width, newHeight, data),
+    width: img.width,
+    height: newHeight,
+    origHeight: img.height,
+  };
+}

package/src/qlogin.mjs

@@ -0,0 +1,240 @@
+// 豆包扫码登录（移植自 doubao2api qr_login.py 的抓包真值）：
+//   1. GET 首页                       → ttwid 等基础 Cookie
+//   2. GET /passport/safe/csrf_token  → passport_csrf_token
+//   3. GET /passport/web/get_qrcode   → token + base64 PNG 二维码
+//   4. 轮询 /passport/web/check_qrconnect（1.5s）→ new / scanned / confirmed / expired
+//   5. confirmed 后跟随 redirect_url 链，收集完整 Cookie（含 sessionid）
+// 零依赖：fetch + node:zlib（二维码 PNG 解码出 ASCII）。
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { spawn } from "node:child_process";
+import { fileURLToPath } from "node:url";
+import { readFileSync, writeFileSync } from "node:fs";
+import { decodePng } from "./png.mjs";
+
+const BASE_URL = "https://www.doubao.com";
+const AID = "497858";
+const UA =
+  "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) " +
+  "Chrome/148.0.0.0 Safari/537.36";
+
+const BASE_HEADERS = {
+  "User-Agent": UA,
+  Accept: "application/json, text/plain, */*",
+  Referer: `${BASE_URL}/chat/login`,
+  Origin: BASE_URL,
+};
+
+const sleep = (ms) => new Promise((r) => setTimeout(r, ms));
+
+/** GET 一次请求；把响应的 Set-Cookie 合并进 cookies。返回 {status, text}。 */
+async function httpGet(url, headers, cookies, { follow = false, timeoutMs = 15_000 } = {}) {
+  let current = url;
+  for (let hop = 0; hop < 10; hop++) {
+    const resp = await fetch(current, {
+      method: "GET",
+      headers: { ...headers, ...(Object.keys(cookies).length ? { Cookie: serialize(cookies) } : {}) },
+      redirect: "manual",
+      signal: AbortSignal.timeout(timeoutMs),
+    });
+    mergeSetCookies(resp, cookies);
+    if (follow && [301, 302, 303, 307, 308].includes(resp.status)) {
+      const location = resp.headers.get("location");
+      if (location) {
+        current = new URL(location, current).href;
+        continue;
+      }
+    }
+    return { status: resp.status, text: await resp.text() };
+  }
+  return { status: 0, text: "" };
+}
+
+function serialize(cookies) {
+  return Object.entries(cookies).map(([k, v]) => `${k}=${v}`).join("; ");
+}
+
+function mergeSetCookies(resp, cookies) {
+  const list = typeof resp.headers.getSetCookie === "function" ? resp.headers.getSetCookie() : [];
+  for (const raw of list) {
+    const pair = raw.split(";", 1)[0].trim();
+    const eq = pair.indexOf("=");
+    if (eq > 0) cookies[pair.slice(0, eq).trim()] = pair.slice(eq + 1).trim();
+  }
+}
+
+async function getJson(url, headers, cookies) {
+  const { text } = await httpGet(url, headers, cookies);
+  try {
+    return JSON.parse(text);
+  } catch {
+    return null;
+  }
+}
+
+/** 把二维码 PNG 解码成终端半块字符画（尽力而为，失败返回 null）。 */
+export function qrPngToAscii(png) {
+  try {
+    const { width, height, data } = decodePng(png);
+    if (!width || !height) return null;
+    const lum = (x, y) => {
+      const i = (y * width + x) * 3;
+      return 0.299 * data[i] + 0.587 * data[i + 1] + 0.114 * data[i + 2];
+    };
+    const dark = (x, y) => lum(x, y) < 128;
+    // 左上静区宽度 ≈ 4 个模块 → 每模块像素数
+    let quiet = 0;
+    while (quiet < width && !dark(quiet, Math.floor(height / 2))) quiet++;
+    // 若从最左列采样撞上黑模块（静区异常），退化为固定 37 模块猜测
+    const moduleCount = quiet >= 6 ? Math.round(width / (quiet / 4)) - 8 : 37;
+    const scale = width / (moduleCount + 8);
+    if (moduleCount < 21 || moduleCount > 177 || scale < 2) return null;
+    const sample = (row, col) =>
+      dark(
+        Math.min(width - 1, Math.floor((col + 4 + 0.5) * scale)),
+        Math.min(height - 1, Math.floor((row + 4 + 0.5) * scale)),
+      );
+    const grid = [];
+    for (let r = 0; r < moduleCount; r++) {
+      const line = [];
+      for (let c = 0; c < moduleCount; c++) line.push(sample(r, c) ? 1 : 0);
+      grid.push(line);
+    }
+    // 半块字符（▀▄█ 空格）保持方形纵横比，外留一圈白边做静区
+    const lines = [" ".repeat(moduleCount + 2)];
+    for (let r = 0; r < moduleCount; r += 2) {
+      let line = " ";
+      for (let c = 0; c < moduleCount; c++) {
+        const top = grid[r][c];
+        const bottom = r + 1 < moduleCount ? grid[r + 1][c] : 0;
+        line += top && bottom ? "█" : top ? "▀" : bottom ? "▄" : " ";
+      }
+      lines.push(line + " ");
+    }
+    lines.push(" ".repeat(moduleCount + 2));
+    return lines.join("\n");
+  } catch {
+    return null;
+  }
+}
+
+/** 保存二维码 PNG 到临时目录并返回路径。 */
+export function saveQrPng(png) {
+  const file = path.join(tmpdir(), `doubao-login-qr-${Date.now()}.png`);
+  writeFileSync(file, png);
+  return file;
+}
+
+/** 用系统默认看图程序打开文件（Windows explorer / 其他平台 open/xdg-open）。 */
+export function openInViewer(file) {
+  try {
+    if (process.platform === "win32") spawn("explorer.exe", [file], { detached: true, stdio: "ignore" }).unref();
+    else if (process.platform === "darwin") spawn("open", [file], { detached: true, stdio: "ignore" }).unref();
+    else spawn("xdg-open", [file], { detached: true, stdio: "ignore" }).unref();
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+/**
+ * 完整扫码登录流程。
+ * onStatus(stage, detail)：stage ∈ fetching | ready | waiting | scanned | confirmed
+ * 返回 { sessionid, ttwid, passport_csrf_token, cookies, qrPng, qrPngPath }。
+ */
+export async function qrLogin({ onStatus = () => {}, timeoutMs = 180_000, pollMs = 1_500 } = {}) {
+  const cookies = {};
+  const log = (stage, detail) => onStatus(stage, detail);
+
+  log("fetching", "正在获取二维码…");
+  await httpGet(`${BASE_URL}/`, BASE_HEADERS, cookies); // 基础 Cookie（ttwid 等）
+  let csrf = cookies.passport_csrf_token || cookies.passport_csrf_token_default || "";
+  if (!csrf) {
+    const body = await getJson(`${BASE_URL}/passport/safe/csrf_token/?aid=${AID}`, BASE_HEADERS, cookies);
+    csrf = body?.data?.passport_csrf_token || cookies.passport_csrf_token || "";
+  }
+
+  const next = encodeURIComponent(BASE_URL);
+  const qrBody = await getJson(
+    `${BASE_URL}/passport/web/get_qrcode/?next=${next}&aid=${AID}`,
+    { ...BASE_HEADERS, "x-tt-passport-csrf-token": csrf },
+    cookies,
+  );
+  const qr = qrBody?.data || {};
+  const qrErr = qr.error_code ?? qrBody?.error_code ?? -1;
+  if (qrErr !== 0 || qrBody?.message !== "success" || !qr.token) {
+    throw new Error(`获取二维码失败: ${JSON.stringify(qrBody).slice(0, 200)}`);
+  }
+
+  let qrPng = Buffer.alloc(0);
+  const b64 = qr.qrcode || qr.qrcode_url || "";
+  if (b64.startsWith("data:")) qrPng = Buffer.from(b64.slice(b64.indexOf(",") + 1), "base64");
+  else if (/^https?:/.test(b64)) {
+    const resp = await fetch(b64, { headers: { "User-Agent": UA }, signal: AbortSignal.timeout(15_000) });
+    qrPng = Buffer.from(await resp.arrayBuffer());
+  } else if (b64) qrPng = Buffer.from(b64, "base64");
+
+  log("ready", qrPng.length ? qrPng : null);
+  const csrfHeaders = { ...BASE_HEADERS, "x-tt-passport-csrf-token": csrf };
+
+  const deadline = Date.now() + timeoutMs;
+  let lastStatus = "";
+  while (Date.now() < deadline) {
+    const body = await getJson(
+      `${BASE_URL}/passport/web/check_qrconnect/?next=${next}&token=${encodeURIComponent(qr.token)}&aid=${AID}`,
+      csrfHeaders,
+      cookies,
+    );
+    const d = body?.data || {};
+    const errCode = d.error_code ?? body?.error_code ?? 0;
+    const desc = String(d.description ?? "").toLowerCase();
+    if (errCode !== 0 && (desc.includes("expired") || desc.includes("过期"))) {
+      throw new Error("二维码已过期，请重新发起登录。");
+    }
+    const status = d.status || "";
+    if (status !== lastStatus) {
+      lastStatus = status;
+      if (status === "new") log("waiting", "等待扫码");
+      if (status === "scanned") log("scanned", "已扫码，请在手机上确认");
+    }
+    if (status === "confirmed") {
+      log("confirmed", "登录成功");
+      if (d.redirect_url) await httpGet(d.redirect_url, BASE_HEADERS, cookies, { follow: true, timeoutMs: 20_000 });
+      const sessionid = cookies.sessionid || "";
+      if (!sessionid) throw new Error("手机已确认登录，但未取到 sessionid，请重试。");
+      return {
+        sessionid,
+        ttwid: cookies.ttwid || "",
+        passport_csrf_token: cookies.passport_csrf_token || "",
+        cookies: { ...cookies },
+        qrPng,
+      };
+    }
+    if (status === "expired") throw new Error("二维码已过期，请重新发起登录。");
+    await sleep(pollMs);
+  }
+  throw new Error("扫码超时（3 分钟），请重新发起登录。");
+}
+
+/** 把扫码得到的账号写进插件目录 config.json（同名覆盖，其余字段保留）。 */
+function writeAccountToConfig(account, name = "扫码登录") {
+  const file = fileURLToPath(new URL("../config.json", import.meta.url));
+  let cfg = {};
+  try {
+    cfg = JSON.parse(readFileSync(file, "utf8"));
+  } catch {
+    /* 尚无配置文件 */
+  }
+  const accounts = Array.isArray(cfg.accounts) ? cfg.accounts.filter(Boolean) : [];
+  const entry = { name, sessionid: account.sessionid };
+  if (account.ttwid) entry.ttwid = account.ttwid;
+  if (account.passport_csrf_token) entry.passport_csrf_token = account.passport_csrf_token;
+  const idx = accounts.findIndex((a) => a && a.name === name);
+  if (idx >= 0) accounts[idx] = entry;
+  else accounts.push(entry);
+  cfg.accounts = accounts;
+  writeFileSync(file, JSON.stringify(cfg, null, 2) + "\n");
+  return file;
+}
+
+export { writeAccountToConfig };

package/src/upload.mjs

@@ -0,0 +1,82 @@
+// 图生图的参考图上传（两步流，移植自 doubao2api 抓包真值）：
+//   1. POST /samantha/pages/upload_image (multipart) -> data.uri
+//   2. POST /alice/message/get_file_url              -> file_urls[0] {uri, main_url}
+import { readFile } from "node:fs/promises";
+import path from "node:path";
+import { BASE_URL, baseHeaders, DoubaoError } from "./http.mjs";
+import { securityParams } from "./client.mjs";
+
+/** 读取参考图：本地路径或 http(s) URL 都支持。 */
+export async function loadRefImage(source) {
+  if (/^https?:\/\//i.test(source)) {
+    const resp = await fetch(source, { signal: AbortSignal.timeout(60_000) });
+    if (!resp.ok) throw new DoubaoError(`参考图下载失败 (${resp.status}): ${source}`);
+    const buf = Buffer.from(await resp.arrayBuffer());
+    let name = "";
+    try {
+      name = decodeURIComponent(new URL(source).pathname.split("/").pop() || "");
+    } catch {
+      /* ignore */
+    }
+    return { bytes: buf, name: name || "reference.png" };
+  }
+  const bytes = await readFile(source);
+  return { bytes, name: path.basename(source) };
+}
+
+/** 上传一张参考图，返回 samantha attachments 需要的 key（uri）等信息。 */
+export async function uploadRefImage(cfg, account, source) {
+  const { bytes, name } = await loadRefImage(source);
+  const ext = (name.includes(".") ? name.split(".").pop() : "png").toLowerCase();
+  const mime = ext === "jpg" ? "image/jpeg" : `image/${ext}`;
+
+  // 第一步：上传
+  const uploadUrl = `${BASE_URL}/samantha/pages/upload_image?${new URLSearchParams(securityParams("pc"))}`;
+  const form = new FormData();
+  form.append("data", new Blob([bytes], { type: mime }), name);
+  form.append("file_type", ext);
+  const uploadResp = await fetch(uploadUrl, {
+    method: "POST",
+    headers: baseHeaders(account), // 不手动设 Content-Type，fetch 自动补 multipart boundary
+    body: form,
+    signal: AbortSignal.timeout(60_000),
+  });
+  const uploadBody = await uploadResp.json().catch(() => null);
+  if (!uploadResp.ok || !uploadBody || uploadBody.code !== 0) {
+    throw new DoubaoError(
+      `参考图上传失败 (${uploadResp.status}): ${JSON.stringify(uploadBody).slice(0, 300)}`,
+    );
+  }
+  const uriShort = uploadBody.data.uri;
+
+  // 第二步：换 CDN 链接 + 完整 uri
+  const fileUrlEndpoint = `${BASE_URL}/alice/message/get_file_url?${new URLSearchParams(securityParams("pc"))}`;
+  const fileResp = await fetch(fileUrlEndpoint, {
+    method: "POST",
+    headers: baseHeaders(account, { "Content-Type": "application/json" }),
+    body: JSON.stringify({ uris: [uriShort], type: "image", format: ext, expire_second: 3600 }),
+    signal: AbortSignal.timeout(60_000),
+  });
+  const fileBody = await fileResp.json().catch(() => null);
+  const fileInfo = fileBody?.data?.file_urls?.[0];
+  if (!fileResp.ok || !fileBody || fileBody.code !== 0 || !fileInfo) {
+    throw new DoubaoError(
+      `参考图换取 CDN 链接失败: ${JSON.stringify(fileBody).slice(0, 300)}`,
+    );
+  }
+  return {
+    uri: fileInfo.uri,
+    cdnUrl: fileInfo.main_url,
+    name,
+    format: ext,
+  };
+}
+
+/** 批量上传参考图（同名失败会带上下文抛出）。 */
+export async function uploadRefImages(cfg, account, sources) {
+  const uploaded = [];
+  for (const source of sources || []) {
+    uploaded.push(await uploadRefImage(cfg, account, String(source)));
+  }
+  return uploaded;
+}

package/src/watermark.mjs

@@ -0,0 +1,59 @@
+// 去水印（扩图裁剪法，用户提供的思路）：
+//   1) 把已生成的带水印原图作为参考图走图生图，提示词追加"往下扩图四分之一"
+//      —— 模型重新演绎画面，原水印随之被清除，而新一轮水印落在底部新增区域
+//   2) 下载扩图结果，把底部扩出来的部分裁掉（保留 1/(1+扩图比例)，默认 80%）
+//   3) 用裁剪结果覆盖原文件
+// 代价：多花一次生成额度；画面边缘会被模型重新演绎。
+import { readFile, writeFile, rm } from "node:fs/promises";
+import { tmpdir } from "node:os";
+import path from "node:path";
+import { generate } from "./client.mjs";
+import { downloadImage } from "./download.mjs";
+import { cropPngBottom } from "./png.mjs";
+
+/** 解析扩图比例配置（"1/4" / 0.25 / "0.25"），默认 0.25（四分之一）。 */
+export function parseExtendFrac(v) {
+  if (v === undefined || v === null || v === "") return 0.25;
+  const s = String(v).trim();
+  if (s.includes("/")) {
+    const [a, b] = s.split("/").map(Number);
+    if (Number.isFinite(a) && Number.isFinite(b) && a > 0 && b > 0) return a / b;
+  }
+  const n = Number(s);
+  if (Number.isFinite(n) && n > 0 && n < 4) return n;
+  return 0.25;
+}
+
+function describeFrac(frac) {
+  const map = { 0.125: "八分之一", 0.2: "五分之一", 0.25: "四分之一", 0.5: "二分之一" };
+  const key = Math.round(frac * 1e6) / 1e6;
+  return map[key] || `百分之${Math.round(frac * 100)}`;
+}
+
+/**
+ * 对一张已落盘的生成图执行扩图裁剪去水印，成功后覆盖 file。
+ * 返回 { width, height, origHeight, extendFrac }；失败抛错（原文件不被破坏）。
+ */
+export async function removeWatermarkByExtend(cfg, { file, prompt, ratio, account }) {
+  const extendFrac = parseExtendFrac(cfg.watermarkExtend);
+  const keepFrac = 1 / (1 + extendFrac);
+  // 扩图这步让模型自己决定输出几何（ratio=auto），几何由"往下扩图…"文本指令驱动
+  const ext = await generate(cfg, {
+    prompt: `${prompt}，往下扩图${describeFrac(extendFrac)}`,
+    ratio: "auto",
+    refImages: [file],
+    account,
+  });
+  if (!ext.images?.length) throw new Error("扩图未返回图片");
+
+  let dl = null;
+  try {
+    dl = await downloadImage(ext.images[0].url, tmpdir(), `doubao-extend-${Date.now()}`);
+    const png = await readFile(dl.file);
+    const cropped = cropPngBottom(png, keepFrac); // 非 PNG 会在此抛错，原文件不受影响
+    await writeFile(file, cropped.buffer);
+    return { width: cropped.width, height: cropped.height, origHeight: cropped.origHeight, extendFrac };
+  } finally {
+    if (dl) await rm(dl.file, { force: true });
+  }
+}