socialdatax-skills 0.2.22 → 0.2.23

package/README.md

@@ -73,7 +73,7 @@ Common search phrases for this skill package:
 - Sensitive Words Check MCP server name: `sensitive-check`
 - Sensitive Words Check future MCP registry name: `com.socialdatax/sensitive-check`
 - Unified MCP registry name: none; this package installs skills and calls explicit platform services.
-- Current public capability version: `0.2.22`
+- Current public capability version: `0.2.23`
 
 ## Direct CLI
 

package/cli.mjs

@@ -17,7 +17,7 @@ import { dirname, join, resolve } from "node:path";
 import { fileURLToPath } from "node:url";
 
 const PACKAGE_NAME = "socialdatax-skills";
-const PACKAGE_VERSION = "0.2.22";
+const PACKAGE_VERSION = "0.2.23";
 const PACKAGE_SPEC = `${PACKAGE_NAME}@latest`;
 const LOG_PREFIX = `[${PACKAGE_NAME}]`;
 const MIN_NODE_VERSION = "20.18.1";
@@ -29,6 +29,37 @@ const MEDIA_DOWNLOAD_TIMEOUT_MS = 10 * 60 * 1000;
 const MEDIA_DOWNLOAD_MAX_BYTES = 2 * 1024 * 1024 * 1024;
 const MEDIA_DECRYPT_CHUNK_SIZE = 64 * 1024;
 const MEDIA_DOWNLOAD_MAX_REDIRECTS = 5;
+const MP4_BOX_HEADER_SIZE = 8;
+const MP4_EXTENDED_BOX_HEADER_SIZE = 16;
+const MP4_MAX_BOX_SCAN_DEPTH = 16;
+const MP4_FULL_BOX_HEADER_SIZE = 4;
+const MP4_STSD_ENTRY_COUNT_SIZE = 4;
+const MP4_VISUAL_SAMPLE_ENTRY_HEADER_SIZE = 78;
+const MP4_VVC_NAL_LENGTH_SIZE_BYTE_OFFSET = 4;
+const MP4_CONTAINER_BOX_TYPES = new Set([
+  "dinf",
+  "edts",
+  "mdia",
+  "meta",
+  "minf",
+  "moof",
+  "moov",
+  "mfra",
+  "stbl",
+  "traf",
+  "trak",
+  "udta",
+]);
+const MP4_VISUAL_SAMPLE_ENTRY_TYPES = new Set([
+  "av01",
+  "avc1",
+  "avc3",
+  "encv",
+  "hev1",
+  "hvc1",
+  "vvc1",
+  "vvi1",
+]);
 // Keep this local helper scoped to WeChat media host trees; require k for the decrypt key.
 const WECHAT_MEDIA_DOWNLOAD_HOST_SUFFIXES = [
   ".wxapp.tc.qq.com",
@@ -2936,6 +2967,7 @@ export async function decryptWechatMediaCommand(
         encryptedLength,
         decodeKey,
       });
+      await patchWechatVvcMp4NalLengthMetadata(tempPath);
       decrypted = true;
     }
     await rename(tempPath, outputPath);
@@ -3185,6 +3217,158 @@ async function decryptWechatMediaFilePrefix(
   }
 }
 
+async function patchWechatVvcMp4NalLengthMetadata(filePath) {
+  const file = await openFile(filePath, "r+");
+  try {
+    const stats = await file.stat();
+    await patchMp4ChildBoxes(file, 0, stats.size, 0);
+  } finally {
+    await file.close();
+  }
+}
+
+async function patchMp4ChildBoxes(file, startOffset, endOffset, depth) {
+  if (
+    depth > MP4_MAX_BOX_SCAN_DEPTH ||
+    startOffset < 0 ||
+    endOffset - startOffset < MP4_BOX_HEADER_SIZE
+  ) {
+    return;
+  }
+
+  let offset = startOffset;
+  while (offset + MP4_BOX_HEADER_SIZE <= endOffset) {
+    const box = await readMp4BoxHeader(file, offset, endOffset);
+    if (!box) {
+      return;
+    }
+    if (box.type === "vvcC") {
+      await patchVvcConfigurationNalLengthSize(file, box);
+    } else {
+      const childRange = mp4ChildBoxRange(box);
+      if (childRange) {
+        await patchMp4ChildBoxes(
+          file,
+          childRange.startOffset,
+          childRange.endOffset,
+          depth + 1
+        );
+      }
+    }
+    offset = box.endOffset;
+  }
+}
+
+async function readMp4BoxHeader(file, offset, parentEndOffset) {
+  const baseHeader = Buffer.allocUnsafe(MP4_BOX_HEADER_SIZE);
+  const baseRead = await file.read(
+    baseHeader,
+    0,
+    MP4_BOX_HEADER_SIZE,
+    offset
+  );
+  if (baseRead.bytesRead !== MP4_BOX_HEADER_SIZE) {
+    return undefined;
+  }
+
+  const size32 = baseHeader.readUInt32BE(0);
+  const type = baseHeader.toString("ascii", 4, 8);
+  let headerSize = MP4_BOX_HEADER_SIZE;
+  let size;
+  if (size32 === 0) {
+    size = parentEndOffset - offset;
+  } else if (size32 === 1) {
+    if (offset + MP4_EXTENDED_BOX_HEADER_SIZE > parentEndOffset) {
+      return undefined;
+    }
+    const extendedSizeBuffer = Buffer.allocUnsafe(8);
+    const extendedRead = await file.read(
+      extendedSizeBuffer,
+      0,
+      8,
+      offset + MP4_BOX_HEADER_SIZE
+    );
+    if (extendedRead.bytesRead !== 8) {
+      return undefined;
+    }
+    const extendedSize = extendedSizeBuffer.readBigUInt64BE(0);
+    if (extendedSize > BigInt(Number.MAX_SAFE_INTEGER)) {
+      return undefined;
+    }
+    size = Number(extendedSize);
+    headerSize = MP4_EXTENDED_BOX_HEADER_SIZE;
+  } else {
+    size = size32;
+  }
+
+  if (
+    size < headerSize ||
+    offset + size > parentEndOffset ||
+    !isMp4BoxType(type)
+  ) {
+    return undefined;
+  }
+
+  return {
+    type,
+    startOffset: offset,
+    headerSize,
+    payloadOffset: offset + headerSize,
+    endOffset: offset + size,
+  };
+}
+
+function isMp4BoxType(type) {
+  return /^[\x20-\x7e]{4}$/.test(type);
+}
+
+function mp4ChildBoxRange(box) {
+  if (box.type === "stsd") {
+    const childStart =
+      box.payloadOffset + MP4_FULL_BOX_HEADER_SIZE + MP4_STSD_ENTRY_COUNT_SIZE;
+    return childStart < box.endOffset
+      ? { startOffset: childStart, endOffset: box.endOffset }
+      : undefined;
+  }
+  if (box.type === "meta") {
+    const childStart = box.payloadOffset + MP4_FULL_BOX_HEADER_SIZE;
+    return childStart < box.endOffset
+      ? { startOffset: childStart, endOffset: box.endOffset }
+      : undefined;
+  }
+  if (MP4_VISUAL_SAMPLE_ENTRY_TYPES.has(box.type)) {
+    const childStart = box.payloadOffset + MP4_VISUAL_SAMPLE_ENTRY_HEADER_SIZE;
+    return childStart < box.endOffset
+      ? { startOffset: childStart, endOffset: box.endOffset }
+      : undefined;
+  }
+  if (MP4_CONTAINER_BOX_TYPES.has(box.type)) {
+    return box.payloadOffset < box.endOffset
+      ? { startOffset: box.payloadOffset, endOffset: box.endOffset }
+      : undefined;
+  }
+  return undefined;
+}
+
+async function patchVvcConfigurationNalLengthSize(file, box) {
+  const targetOffset =
+    box.payloadOffset + MP4_VVC_NAL_LENGTH_SIZE_BYTE_OFFSET;
+  if (targetOffset >= box.endOffset) {
+    return;
+  }
+  const buffer = Buffer.allocUnsafe(1);
+  const { bytesRead } = await file.read(buffer, 0, 1, targetOffset);
+  if (bytesRead !== 1) {
+    return;
+  }
+  const patched = (buffer[0] & 0xf8) | 0x07;
+  if (patched === buffer[0]) {
+    return;
+  }
+  buffer[0] = patched;
+  await writeAllToFile(file, buffer, targetOffset);
+}
+
 function isAbortLikeError(error) {
   return error?.name === "AbortError" || error?.name === "TimeoutError";
 }

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "socialdatax-skills",
-  "version": "0.2.22",
+  "version": "0.2.23",
   "description": "SocialDataX / 社媒数据助手 skill installer and direct CLI helper for hosted platform social media MCP services.",
   "license": "MIT",
   "type": "module",