specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/platforms/weibo/web/api.js

@@ -0,0 +1,206 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { parseJson } from '../../../core/http.js';
+import { jsonDumps, jsonLoads } from '../../../core/py.js';
+import * as rand from '../../../core/rand.js';
+import { commonHeaders, detailHeaders, formHeaders, htmlHeaders, MOBILE, postImageHeaders, postVideoHeaders, searchHeaders, uploadImageHeaders, uploadVideoHeaders, videoCheckHeaders, videoOutputHeaders, WEB, } from './profile.js';
+import { APP_SOURCE, sessionId, uploadImageParams, uploadVideoParams } from './sign.js';
+const CONFIG_RE = /try\{window\.\$CONFIG = (.*?);\}catch\(e\)\{window\.\$CONFIG/;
+/**
+ * get_self_info：首页 HTML 里的 window.$CONFIG。与上游一样跟随跳转（登录态可能先经过 SSO 跳转）；
+ * 没登录时最后落在访客页 / 登录页，没有 $CONFIG，返回 null。
+ */
+export async function selfInfo(w) {
+    const page = await w.html('com', { url: `${WEB}/`, headers: htmlHeaders(), redirect: 'follow' });
+    const raw = CONFIG_RE.exec(page.text)?.[1];
+    if (!raw)
+        return null;
+    let config;
+    try {
+        config = jsonLoads(raw);
+    }
+    catch {
+        return null;
+    }
+    const uid = config?.user?.id;
+    if (uid == null || uid === '')
+        return null;
+    return { uid: String(uid), nick: String(config.user.watermark?.nick ?? config.user.screen_name ?? '') };
+}
+/** getUserInfo：用户资料。 */
+export function userInfo(w, uid) {
+    return w.json('com', { url: `${WEB}/ajax/profile/info`, headers: commonHeaders(w.xsrf), query: [['uid', uid]] });
+}
+/** getUserPosted：用户发布的微博，page 从 1 开始，since_id 取上一页返回的 data.since_id。 */
+export function userPosted(w, uid, page, sinceId = '') {
+    const params = [
+        ['uid', uid],
+        ['page', String(page)],
+        ['feature', '0'],
+    ];
+    if (sinceId)
+        params.push(['since_id', sinceId]);
+    return w.json('com', { url: `${WEB}/ajax/statuses/mymblog`, headers: commonHeaders(w.xsrf), query: params });
+}
+/**
+ * getWordComments：一级评论。上游只取第一页；翻页时带上一页返回的 max_id（位置与网页一致，在 count 之前）。
+ */
+export function comments(w, uid, mid, maxId) {
+    const params = [
+        ['is_reload', '1'],
+        ['id', mid],
+        ['is_show_bulletin', '2'],
+        ['is_mix', '0'],
+    ];
+    if (maxId)
+        params.push(['max_id', maxId]);
+    params.push(['count', '10'], ['uid', uid], ['fetch_level', '0'], ['locale', 'zh-CN']);
+    return w.json('com', { url: `${WEB}/ajax/statuses/buildComments`, headers: commonHeaders(w.xsrf), query: params });
+}
+// ================================================================ WeiboMobileApis（m.weibo.cn）
+const RENDER_RE = /var \$render_data = \[([\s\S]*?)\]\[0\] \|\| \{\};\n {2}var __wb_performance_data=\{v:"v8",m:"mainsite",pwa:1,sw:0\};/;
+/** getWorkInfo：详情页 HTML 里的 $render_data，返回其中的对象（含 status）。 */
+export async function mobileDetail(w, id) {
+    const page = await w.html('cn', { url: `${MOBILE}/detail/${id}`, headers: detailHeaders() });
+    const raw = RENDER_RE.exec(page.text)?.[1];
+    if (!raw) {
+        if (page.status >= 300 && page.status < 400) {
+            throw new SpecificAIError('AUTH_REQUIRED', `m.weibo.cn 要求登录后查看这条微博`, { detail: { status: page.status, location: page.location } });
+        }
+        throw new SpecificAIError('UPSTREAM', `微博 ${id} 不存在、已删除或不可见`, { detail: { status: page.status } });
+    }
+    try {
+        return jsonLoads(raw);
+    }
+    catch {
+        throw new SpecificAIError('UPSTREAM', '无法解析微博详情页', { detail: { status: page.status } });
+    }
+}
+/** searchSome：综合搜索（容器 100103type=1）。 */
+export function mobileSearch(w, query, page = 1) {
+    return w.json('cn', {
+        url: `${MOBILE}/api/container/getIndex`,
+        headers: searchHeaders(),
+        query: [
+            ['containerid', `100103type=1&q=${query}`],
+            ['page_type', 'searchall'],
+            ['page', String(page)],
+        ],
+    });
+}
+// ================================================================ WeiboCreaterApis
+/** 上传类接口（picupload / fileplatform）的错误：返回 `{error, error_code}`。 */
+function checkUpload(body, what) {
+    const error = body?.error ?? body?.errmsg;
+    if (!error)
+        return;
+    if (error === 'user need identity authentication') {
+        throw new SpecificAIError('UPSTREAM', '上传视频需要先在微博完成实名认证', { detail: { error, error_code: body.error_code ?? null } });
+    }
+    throw new SpecificAIError('UPSTREAM', `${what}失败：${error}`, { detail: { error, error_code: body.error_code ?? null } });
+}
+/** video_init：申请上传，返回 upload_id / media_id / auth。 */
+export async function videoInit(w, file) {
+    const t = String(rand.nowSeconds());
+    const size = file.length;
+    const params = [
+        ['source', APP_SOURCE],
+        ['size', size],
+        ['name', 'video.mp4'],
+        ['type', 'video'],
+        ['client', 'web'],
+        ['session_id', sessionId(size, 'video.mp4')],
+    ];
+    const data = `--2067456weiboPro${t}\r\nContent-Disposition: form-data; name="biz_file"\r\n\r\n` +
+        '{"mediaprops":"{\\"screenshot\\":1}"}' +
+        `\r\n--2067456weiboPro${t}--\r\n`;
+    const res = await w.request({ method: 'POST', url: 'https://fileplatform.api.weibo.com/2/fileplatform/init.json', headers: formHeaders(t), query: params, body: data });
+    const body = await parseJson(res);
+    checkUpload(body, '申请上传视频');
+    return body;
+}
+/** upload_image_file：上传一张图片，返回 `{pic: {pid, ...}}`。 */
+export async function uploadImage(w, uid, nick, file) {
+    const url = `https://picupload.weibo.com/interface/upload.php?${uploadImageParams(uid, nick, file)}`;
+    const body = await parseJson(await w.request({ method: 'POST', url, headers: uploadImageHeaders(), body: file }));
+    checkUpload(body, '上传图片');
+    if (!body?.pic?.pid)
+        throw new SpecificAIError('UPSTREAM', '上传图片失败：没有返回 pid', { detail: { body } });
+    return body;
+}
+/** upload_video_file：整个文件作为一个分片上传。cookie 与上游一样发 weibo.com 的整串。 */
+export async function uploadVideo(w, uploadId, mediaId, file, auth) {
+    const url = `https://up.video.weibocdn.com/2/fileplatform/upload.json?${uploadVideoParams(uploadId, mediaId, file)}`;
+    const body = await parseJson(await w.request({ method: 'POST', url, headers: uploadVideoHeaders(auth), body: file, cookies: w.webCookies() }));
+    checkUpload(body, '上传视频');
+    return body;
+}
+/** video_check：通知上传完成。 */
+export async function videoCheck(w, uploadId, mediaId, fileSize, auth) {
+    const form = [
+        ['source', APP_SOURCE],
+        ['upload_id', uploadId],
+        ['media_id', mediaId],
+        ['upload_protocol', 'binary'],
+        ['count', '1'],
+        ['action', 'finish'],
+        ['size', String(fileSize)],
+        ['client', 'web'],
+        ['status', ''],
+    ];
+    const res = await w.request({ method: 'POST', url: 'https://fileplatform.api.weibo.com/2/fileplatform/check.json', headers: videoCheckHeaders(auth), form });
+    const body = await parseJson(res);
+    checkUpload(body, '确认上传视频');
+    return body;
+}
+/** video_output：转码结果；data 为空表示还没转完。 */
+export async function videoOutput(w, mediaId) {
+    return w.json('com', {
+        url: `${WEB}/ajax/multimedia/output`,
+        headers: videoOutputHeaders(),
+        query: [
+            ['source', APP_SOURCE],
+            ['ids', mediaId],
+            ['labels', 'screenshot'],
+        ],
+    });
+}
+/** post_weibo 里图文的 statuses/update：pic_id 是 `[{"type": "image/jpeg", "pid": ...}]`。 */
+export function postImage(w, content, visible, pids) {
+    const picId = jsonDumps(pids.map((pid) => ({ type: 'image/jpeg', pid })));
+    return w.json('com', {
+        method: 'POST',
+        url: `${WEB}/ajax/statuses/update`,
+        headers: postImageHeaders(w.xsrf),
+        form: [
+            ['content', content],
+            ['visible', visible],
+            ['vote', ''],
+            ['media', ''],
+            ['pic_id', picId],
+        ],
+    });
+}
+/** post_weibo 里视频的 statuses/update。 */
+export function postVideo(w, content, visible, mediaId) {
+    const media = {
+        titles: [{ title: '', default: 'true' }],
+        covers: [{ url: '' }],
+        free_duration: { start: 0, end: 30 },
+        type: 'video',
+        media_id: mediaId,
+        resource: { video_down: 1 },
+        homemade: { channel_ids: [''], type: 0 },
+        approval_reprint: '1',
+    };
+    return w.json('com', {
+        method: 'POST',
+        url: `${WEB}/ajax/statuses/update`,
+        headers: postVideoHeaders(),
+        form: [
+            ['content', content],
+            ['visible', visible],
+            ['vote', ''],
+            ['media', jsonDumps(media)],
+        ],
+    });
+}

package/dist/platforms/weibo/web/client.js

@@ -0,0 +1,155 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { jsonLoads, quote } from '../../../core/py.js';
+import * as rand from '../../../core/rand.js';
+import { authError, httpClient } from '../../../core/toolkit.js';
+import { MOBILE, visitorHeaders, WEB } from './profile.js';
+const SITE_URL = { com: `${WEB}/`, cn: `${MOBILE}/` };
+/** m.weibo.cn 的访客页。 */
+const VISITOR = { host: 'visitor.passport.weibo.cn', entry: 'sinawap', domain: '.weibo.cn' };
+export class Weibo {
+    ctx;
+    http;
+    jar;
+    /** 本次命令里刚生成过访客 cookie：再遇到登录墙就不再重试。 */
+    fresh = false;
+    constructor(ctx) {
+        this.ctx = ctx;
+        this.http = httpClient(ctx);
+        this.jar = this.http.jar;
+    }
+    /** weibo.com 的 XSRF-TOKEN，没有时为空串（上游缺它会直接报错）。 */
+    get xsrf() {
+        return this.jar.forUrl(SITE_URL.com).find((c) => c.name === 'XSRF-TOKEN')?.value ?? '';
+    }
+    /** 是否带着登录 cookie（weibo.com 的 SUB）。 */
+    get isLogin() {
+        return this.hasSub('com');
+    }
+    /** 上游的 `cookies=` 会把整串 cookie 发给任何域名（包括 weibocdn.com），这里按 weibo.com 取。 */
+    webCookies() {
+        return this.jar.toObject(SITE_URL.com);
+    }
+    request(req) {
+        return this.http.request(req);
+    }
+    // ---------------------------------------------------------------- 访客
+    hasSub(site) {
+        return this.jar.forUrl(SITE_URL[site]).some((c) => c.name === 'SUB');
+    }
+    /** m.weibo.cn 还没有访客 cookie 时先生成。 */
+    async ensure(site) {
+        if (site === 'cn' && !this.hasSub('cn'))
+            await this.visitor();
+    }
+    /** 生成 m.weibo.cn 的访客身份：与访客页里 ufp.util.postData 发出的 genvisitor2 请求一致，SUB / SUBP 由 Set-Cookie 写进 cookie 罐。 */
+    async visitor() {
+        const v = VISITOR;
+        const origin = `https://${v.host}`;
+        const referer = `${origin}/visitor/visitor?entry=${v.entry}&a=enter&url=${quote(SITE_URL.cn, '')}&domain=${v.domain}`;
+        for (const c of this.jar.forUrl(SITE_URL.cn).filter((x) => x.name === 'SUB' || x.name === 'SUBP'))
+            this.jar.delete(c.name, c.domain);
+        const res = await this.request({
+            method: 'POST',
+            url: `${origin}/visitor/genvisitor2`,
+            headers: visitorHeaders(origin, referer),
+            form: [
+                ['cb', 'visitor_gray_callback'],
+                ['ver', '20250916'],
+                ['request_id', ''],
+                ['tid', ''],
+                ['from', 'weibo'],
+                ['webdriver', 'false'],
+                ['rid', String(rand.now())],
+                ['return_url', SITE_URL.cn],
+            ],
+        });
+        riskCheck(res.status);
+        const text = await res.text();
+        let body = null;
+        try {
+            body = jsonLoads(/\((\{[\s\S]*\})\)/.exec(text)?.[1] ?? 'null');
+        }
+        catch { }
+        if (body?.retcode !== 20000000 || !this.hasSub('cn')) {
+            throw new SpecificAIError('RISK_CONTROL', `生成微博访客身份失败：${body?.msg ?? `HTTP ${res.status}`}`, {
+                detail: { kind: 'blocked', status: res.status, retcode: body?.retcode ?? null },
+            });
+        }
+        this.fresh = true;
+        this.ctx.log.debug(`已生成微博访客身份（${v.host}）`);
+    }
+    /** m.weibo.cn 的访客 cookie 可能已失效：本次还没重新生成过时，重新生成并返回 true。 */
+    async renewVisitor(site) {
+        if (site !== 'cn' || this.fresh)
+            return false;
+        await this.visitor();
+        return true;
+    }
+    // ---------------------------------------------------------------- 请求
+    /**
+     * 请求 JSON 接口，检查登录墙与业务错误，返回整个 JSON。
+     * m.weibo.cn 的访客身份遇到登录墙（ok=-100）时，重新生成一次访客身份再试。
+     */
+    async json(site, req) {
+        await this.ensure(site);
+        let body = await this.parse(await this.request(req));
+        if (body.ok === -100 && (await this.renewVisitor(site)))
+            body = await this.parse(await this.request(req));
+        check(this.ctx, body, site);
+        return body;
+    }
+    /**
+     * 请求 HTML 页面，默认不跟随跳转。访客身份被 302 到访客页时，重新生成一次访客身份再试。
+     */
+    async html(site, req) {
+        await this.ensure(site);
+        let res = await this.request({ redirect: 'manual', ...req });
+        if (isVisitorRedirect(res) && (await this.renewVisitor(site)))
+            res = await this.request({ redirect: 'manual', ...req });
+        riskCheck(res.status);
+        return { status: res.status, location: res.headers.get('location'), text: await res.text() };
+    }
+    async parse(res) {
+        const text = await res.text();
+        try {
+            return jsonLoads(text);
+        }
+        catch {
+            riskCheck(res.status);
+            throw new SpecificAIError('UPSTREAM', `微博返回的不是 JSON（HTTP ${res.status}）`, { detail: { status: res.status, body: text.slice(0, 300) } });
+        }
+    }
+    /** 写操作前检查登录态（registry 已保证有账号，这里防 cookie 不全）。 */
+    requireLogin() {
+        if (!this.isLogin)
+            throw authError(this.ctx, '当前账号缺少登录 cookie（SUB），请重新登录');
+    }
+}
+function isVisitorRedirect(res) {
+    return res.status >= 300 && res.status < 400 && /\/visitor\/visitor/.test(res.headers.get('location') ?? '');
+}
+/** 没有正文的拦截状态码：432 是微博的反爬拦截。 */
+export function riskCheck(status) {
+    if (status === 432 || status === 418 || status === 429) {
+        throw new SpecificAIError('RISK_CONTROL', `微博拒绝了请求（HTTP ${status}），请稍后再试`, {
+            detail: { kind: status === 429 ? 'rate_limit' : 'blocked', status },
+        });
+    }
+}
+/** 登录墙与业务错误映射成 specific-ai 的错误（AGENTS 6.4）。 */
+export function check(ctx, body, site = 'com') {
+    const ok = body?.ok;
+    if (ok === undefined || ok === 1)
+        return;
+    const message = String(body.message ?? body.msg ?? '');
+    if (ok === -100 || /登录/.test(message)) {
+        // m.weibo.cn 只用访客身份访问，登录 weibo.com 也解决不了
+        if (site === 'cn')
+            throw new SpecificAIError('AUTH_REQUIRED', `m.weibo.cn 要求登录后查看${message ? `：${message}` : ''}`);
+        throw authError(ctx, message ? `微博要求登录：${message}` : undefined);
+    }
+    if (/拥堵|频繁|稍后/.test(message)) {
+        throw new SpecificAIError('RISK_CONTROL', `微博限流：${message}`, { detail: { kind: 'rate_limit', ok, message } });
+    }
+    throw new SpecificAIError('UPSTREAM', message || `微博返回错误 ok=${ok}`, { detail: { ok, errno: body.errno ?? null, message } });
+}

package/dist/platforms/weibo/web/commands.js

@@ -0,0 +1,202 @@
+import { SpecificAIError } from '../../../core/errors.js';
+import { readMedia } from '../../../core/files.js';
+import { cookieCredential, finishLogin, loginContext } from '../../../core/login.js';
+import * as n from '../../../core/normalize.js';
+import * as rand from '../../../core/rand.js';
+import { authError, paged } from '../../../core/toolkit.js';
+import * as api from './api.js';
+import { Weibo } from './client.js';
+import * as norm from './normalize.js';
+import { COOKIE_DOMAIN } from './profile.js';
+import { resolveItem, resolveUser } from './resolve.js';
+// ================================================================ auth
+export async function authLogin(ctx) {
+    const credential = cookieCredential(ctx, COOKIE_DOMAIN);
+    const w = new Weibo(loginContext(ctx, credential));
+    const self = await api.selfInfo(w);
+    if (!self)
+        throw new SpecificAIError('AUTH_REQUIRED', '登录没有成功：cookie 无效或已过期', { hint: '在浏览器登录 weibo.com 后，复制请求头里完整的 Cookie' });
+    return finishLogin(ctx, credential, { id: self.uid, name: n.str(self.nick), url: norm.userUrl(self.uid) });
+}
+/** 登录态的过期时间：cookie ALF 是 SUB 的过期秒数（可能带 `02_` 前缀）。 */
+function expiresAt(w) {
+    const alf = /(\d{9,})$/.exec(w.jar.get('ALF') ?? '')?.[1];
+    const sub = w.jar.forUrl('https://weibo.com/').find((c) => c.name === 'SUB')?.expires;
+    return n.time(alf ?? sub);
+}
+export async function authStatus(ctx) {
+    const w = new Weibo(ctx);
+    // 没有账号时凭证是空的，不用请求
+    const self = w.isLogin ? await api.selfInfo(w) : null;
+    return {
+        logged_in: Boolean(self),
+        user: self ? n.userRef({ id: self.uid, name: self.nick, url: norm.userUrl(self.uid) }) : null,
+        method: self ? ctx.credential.method : null,
+        expires_at: self ? expiresAt(w) : null,
+    };
+}
+/** 需要登录的操作：取当前账号的 uid 与昵称（上游 post_weibo 每次都先调 get_self_info）。 */
+async function self(w) {
+    w.requireLogin();
+    const me = await api.selfInfo(w);
+    if (!me)
+        throw authError(w.ctx);
+    return me;
+}
+// ================================================================ user
+export async function userGet(ctx) {
+    const w = new Weibo(ctx);
+    const uid = await resolveUser(w, ctx.args.user);
+    const body = await api.userInfo(w, uid);
+    const u = body.data?.user;
+    if (!u)
+        throw new SpecificAIError('UPSTREAM', `用户 ${uid} 不存在或不可见`, { detail: { uid } });
+    return norm.user(u);
+}
+/** cursor：`<page>:<since_id>`。 */
+export async function userItems(ctx) {
+    const w = new Weibo(ctx);
+    const uid = await resolveUser(w, ctx.args.user);
+    const cursor = ctx.cursor ?? '1:';
+    const at = cursor.indexOf(':');
+    const page = Number(at < 0 ? cursor : cursor.slice(0, at)) || 1;
+    const body = await api.userPosted(w, uid, page, at < 0 ? '' : cursor.slice(at + 1));
+    const own = uid === ctx.credential.user?.id;
+    const list = (body.data?.list ?? []).map((m) => norm.mblog(m, own));
+    const next = n.str(body.data?.since_id);
+    return paged(list, `${page + 1}:${next ?? ''}`, Boolean(next));
+}
+// ================================================================ item
+export async function itemGet(ctx) {
+    const w = new Weibo(ctx);
+    const { mid } = resolveItem(ctx.args.item);
+    const d = await api.mobileDetail(w, mid);
+    if (!d?.status)
+        throw new SpecificAIError('UPSTREAM', `微博 ${mid} 不存在、已删除或不可见`);
+    return norm.mblog(d.status, d.status.user?.id != null && String(d.status.user.id) === ctx.credential.user?.id);
+}
+/** 搜索结果：顶层 card_type=9 的卡片，以及 card_group 里的 card_type=9。 */
+function searchMblogs(cards) {
+    const out = [];
+    const seen = new Set();
+    const add = (c) => {
+        if (c?.card_type !== 9 || !c.mblog)
+            return;
+        const id = String(c.mblog.mid ?? c.mblog.id);
+        if (!seen.has(id))
+            (seen.add(id), out.push(c.mblog));
+    };
+    for (const c of cards ?? []) {
+        add(c);
+        for (const g of c.card_group ?? [])
+            add(g);
+    }
+    return out;
+}
+/**
+ * 只取第一页：m.weibo.cn 用访客身份访问（登录 cookie 不发往 .weibo.cn），访客从第二页起就是登录墙；
+ * 上游 searchSome 的 page 参数同样翻不过去。
+ */
+export async function itemSearch(ctx) {
+    const w = new Weibo(ctx);
+    const body = await api.mobileSearch(w, ctx.args.keyword, 1);
+    return paged(searchMblogs(body.data?.cards).map((m) => norm.mblog(m)), null, false);
+}
+/** post_weibo 的 type（请求里的 visible）：0 公开、1 仅自己可见、6 朋友圈可见、10 粉丝可见。 */
+const VISIBLE = { public: '0', private: '1', friends: '6', fans: '10' };
+const MAX_IMAGES = 15;
+/** 上游 post_weibo 的正文：话题追加成 ` #话题# `，地点追加成 ` #地点[地点]#`。 */
+function content(text, topics, location) {
+    let s = text;
+    for (const t of topics)
+        s += ` #${t}# `;
+    if (location)
+        s += ` #${location}[地点]#`;
+    return s;
+}
+export async function itemPublish(ctx) {
+    const o = ctx.options;
+    const images = o.image ?? [];
+    if (images.length && o.video)
+        throw new SpecificAIError('USAGE', '--image 和 --video 不能同时使用');
+    if (images.length > MAX_IMAGES)
+        throw new SpecificAIError('USAGE', `微博最多 ${MAX_IMAGES} 张图片`);
+    const text = o.text ?? '';
+    if (!text && !images.length && !o.video)
+        throw new SpecificAIError('USAGE', '需要 --text、--image 或 --video', { hint: 'specific-ai weibo item publish --text "正文" [--image <图片>...]' });
+    const w = new Weibo(ctx);
+    const me = await self(w);
+    const body = content(text, o.topic ?? [], o.poiName ?? '');
+    const visible = VISIBLE[o.visibility ?? 'public'] ?? '0';
+    let result;
+    if (o.video) {
+        const file = await readMedia(w.http, o.video);
+        const mediaId = await uploadVideoFile(w, file.data, true);
+        result = await api.postVideo(w, body, visible, mediaId);
+    }
+    else {
+        const pids = [];
+        for (const input of images) {
+            const file = await readMedia(w.http, input);
+            pids.push(String((await api.uploadImage(w, me.uid, me.nick, file.data)).pic.pid));
+        }
+        result = await api.postImage(w, body, visible, pids);
+    }
+    const d = result.data;
+    if (!d)
+        throw new SpecificAIError('UPSTREAM', '发布没有返回微博', { detail: { body: result } });
+    return norm.mblog(d, true);
+}
+/** 视频上传：init → 整个文件一次上传 → check；waitOutput 时再轮询转码结果（上游 post_weibo 的做法）。返回 media_id。 */
+async function uploadVideoFile(w, data, waitOutput) {
+    const init = await api.videoInit(w, data);
+    const { upload_id: uploadId, media_id: mediaId, auth } = init;
+    if (uploadId == null || mediaId == null || !auth)
+        throw new SpecificAIError('UPSTREAM', '申请上传视频没有返回 upload_id / media_id', { detail: { body: init } });
+    await api.uploadVideo(w, String(uploadId), String(mediaId), data, String(auth));
+    await api.videoCheck(w, String(uploadId), String(mediaId), data.length, String(auth));
+    if (waitOutput) {
+        // 上游每 2 秒轮询一次、没有上限；这里最多等 5 分钟
+        for (let i = 0;; i++) {
+            const out = await api.videoOutput(w, String(mediaId));
+            if (out.data && Object.keys(out.data).length > 0)
+                break;
+            if (i >= 150)
+                throw new SpecificAIError('UPSTREAM', '视频转码超时（5 分钟）', { detail: { media_id: String(mediaId) } });
+            w.ctx.log.info('视频转码中…');
+            await rand.sleep(2000, w.ctx.signal);
+        }
+    }
+    return mediaId;
+}
+// ================================================================ comment
+export async function commentList(ctx) {
+    const w = new Weibo(ctx);
+    const ref = resolveItem(ctx.args.item);
+    let uid = ref.uid;
+    if (!uid) {
+        const d = await api.mobileDetail(w, ref.mid);
+        uid = d?.status?.user?.id != null ? String(d.status.user.id) : null;
+        if (!uid)
+            throw new SpecificAIError('UPSTREAM', `微博 ${ref.mid} 不存在、已删除或不可见`);
+    }
+    const body = await api.comments(w, uid, ref.mid, ctx.cursor ?? undefined);
+    const list = (body.data ?? []).map((c) => norm.comment(c, ref.mid));
+    const next = n.str(body.max_id);
+    return paged(list, next, Boolean(next && next !== '0' && list.length));
+}
+// ================================================================ media
+export async function mediaUpload(ctx) {
+    const w = new Weibo(ctx);
+    const file = await readMedia(w.http, ctx.args.file);
+    if (file.contentType.startsWith('video/')) {
+        w.requireLogin();
+        // 还没发布的视频没有可播放的地址（转码结果只有截图），url 为空串；发布时用的是 id（media_id）
+        const mediaId = String(await uploadVideoFile(w, file.data, false));
+        return n.media({ id: mediaId, type: 'video', url: null });
+    }
+    const me = await self(w);
+    const d = await api.uploadImage(w, me.uid, me.nick, file.data);
+    const pic = d.pic;
+    return n.media({ id: String(pic.pid), type: 'image', url: `https://wx1.sinaimg.cn/large/${pic.pid}.jpg`, width: n.count(pic.width), height: n.count(pic.height) }, d);
+}