specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/core/http.js

@@ -0,0 +1,331 @@
+import { TextDecoder } from 'node:util';
+import { createTransport, fetch as wreqFetch, RequestError, } from 'wreq-js';
+import { SpecificAIError } from './errors.js';
+import { jsonDumps, jsonLoads, parseQsl, pyStr, requoteUri, toPairs, urlencode } from './py.js';
+// wreq-js 默认读 HTTP(S)_PROXY 和系统代理。代理只能显式配置（AGENTS 5.5），这里全部关掉，
+// 只通过 transport 的 proxy 传入。cli/main.ts 在加载任何模块前也会设置一次。
+disableEnvProxy();
+export function disableEnvProxy() {
+    process.env.NO_PROXY = process.env.no_proxy = '*,0.0.0.0/0,::/0';
+}
+const REDIRECT_STATUS = new Set([301, 302, 303, 307, 308]);
+const transports = new Map();
+async function transportFor(options) {
+    const key = `${options.browser}|${options.os}|${options.proxy ?? ''}`;
+    let t = transports.get(key);
+    if (!t) {
+        t = createTransport({ browser: options.browser, os: options.os, ...(options.proxy ? { proxy: options.proxy } : {}) });
+        transports.set(key, t);
+    }
+    return t;
+}
+const wreqSender = async (p, o) => {
+    const headers = [...p.headers];
+    if (p.cookies.length)
+        insertCookieHeader(headers, p.cookies.map(([k, v]) => `${k}=${v}`).join('; '));
+    let body;
+    if (p.multipart) {
+        const form = new FormData();
+        for (const part of p.multipart) {
+            if (part.filename != null || typeof part.data !== 'string') {
+                const data = typeof part.data === 'string' ? Buffer.from(part.data) : new Uint8Array(part.data);
+                form.append(part.name, new Blob([data], { type: part.contentType ?? 'application/octet-stream' }), part.filename ?? part.name);
+            }
+            else
+                form.append(part.name, part.data);
+        }
+        body = form;
+    }
+    else if (p.body != null)
+        body = p.body;
+    // wreq-js 会把空路径的 URL（https://host?x=1）发成坏请求，补上 /
+    const url = p.url.replace(/^(https?:\/\/[^/?#]+)(?=[?#]|$)/i, '$1/');
+    return wreqFetch(url, {
+        method: p.method,
+        headers,
+        body,
+        transport: await transportFor(o),
+        timeout: o.timeout * 1000,
+        redirect: o.redirect,
+        disableDefaultHeaders: o.disableDefaultHeaders,
+    });
+};
+let sender = wreqSender;
+/** 替换真正发请求的函数，返回恢复函数。只给测试用。 */
+export function mockSender(fn) {
+    const prev = sender;
+    sender = async (p) => fn(p);
+    return () => {
+        sender = prev;
+    };
+}
+/** 关闭所有连接池，让进程可以退出。 */
+export async function closeTransports() {
+    const all = [...transports.values()];
+    transports.clear();
+    await Promise.allSettled(all.map(async (t) => (await t).close()));
+}
+/** cookie 头放在 priority 之前（Chrome 的位置），没有 priority 时放最后。 */
+function insertCookieHeader(headers, value) {
+    const i = headers.findIndex(([k]) => k.toLowerCase() === 'priority');
+    headers.splice(i < 0 ? headers.length : i, 0, ['cookie', value]);
+}
+function headerPairs(init) {
+    if (!init)
+        return [];
+    const pairs = Array.isArray(init) ? init : Object.entries(init);
+    return pairs.filter((p) => p[1] != null);
+}
+function hasHeader(headers, name) {
+    const n = name.toLowerCase();
+    return headers.some(([k]) => k.toLowerCase() === n);
+}
+/**
+ * curl_cffi 的 `update_url_params`：已有同名参数且新旧都只出现一次时就地替换，否则追加；
+ * 布尔值写成 true / false；最后整体 `urlencode` 再 `requote_uri`。
+ */
+export function buildUrl(url, query) {
+    const pairs = toPairs(query);
+    if (!pairs.length)
+        return requoteUri(url);
+    const hashAt = url.indexOf('#');
+    const fragment = hashAt < 0 ? '' : url.slice(hashAt);
+    const base = hashAt < 0 ? url : url.slice(0, hashAt);
+    const qAt = base.indexOf('?');
+    const path = qAt < 0 ? base : base.slice(0, qAt);
+    let args = qAt < 0 ? [] : parseQsl(base.slice(qAt + 1));
+    const count = (list, key) => list.filter(([k]) => k === key).length;
+    for (const [key, raw] of pairs) {
+        const value = typeof raw === 'boolean' ? String(raw) : pyStr(raw);
+        if (count(args, key) === 1 && count(pairs, key) === 1)
+            args = args.map((a) => (a[0] === key ? [key, value] : a));
+        else
+            args.push([key, value]);
+    }
+    const query2 = urlencode(args);
+    return requoteUri(`${path}${query2 ? '?' + query2 : ''}${fragment}`);
+}
+export class HttpClient {
+    jar;
+    options;
+    constructor(options = {}) {
+        this.options = options;
+        this.jar = options.jar ?? null;
+    }
+    /** 组装请求（不发送）。 */
+    prepare(req) {
+        const method = (req.method ?? 'GET').toUpperCase();
+        const url = buildUrl(req.url, req.query);
+        const headers = headerPairs(req.headers);
+        let body = null;
+        if (req.json !== undefined) {
+            body = jsonDumps(req.json, { separators: [',', ':'] });
+            if (!hasHeader(headers, 'content-type'))
+                headers.push(['Content-Type', 'application/json']);
+        }
+        else if (req.form !== undefined) {
+            body = urlencode(req.form);
+            if (method !== 'POST' && !hasHeader(headers, 'content-type'))
+                headers.push(['Content-Type', 'application/x-www-form-urlencoded']);
+        }
+        else if (req.body !== undefined) {
+            body = req.body;
+            if (body.length && !hasHeader(headers, 'content-type'))
+                headers.push(['Content-Type', 'application/octet-stream']);
+        }
+        // 显式给出的 cookie 头原样保留；否则从 cookie 罐取
+        let cookies = [];
+        const explicit = headers.findIndex(([k]) => k.toLowerCase() === 'cookie');
+        if (explicit >= 0) {
+            cookies = headers
+                .filter(([k]) => k.toLowerCase() === 'cookie')
+                .flatMap(([, v]) => v.split(';'))
+                .map((c) => c.trim())
+                .filter(Boolean)
+                .map((c) => {
+                // 没有 = 的片段当作空值的 cookie（与 Python 的 SimpleCookie 一致：foo → foo=）
+                const i = c.indexOf('=');
+                return (i < 0 ? [c, ''] : [c.slice(0, i), c.slice(i + 1)]);
+            });
+            for (let i = headers.length - 1; i >= 0; i--)
+                if (headers[i][0].toLowerCase() === 'cookie')
+                    headers.splice(i, 1);
+        }
+        else if (req.cookies !== false) {
+            if (req.cookies)
+                cookies = Object.entries(req.cookies);
+            else if (this.jar) {
+                const list = this.jar.forUrl(url);
+                const order = this.options.cookieOrder;
+                if (order) {
+                    const index = new Map(order.map((n, i) => [n, i]));
+                    list.sort((a, b) => (index.get(a.name) ?? order.length) - (index.get(b.name) ?? order.length));
+                }
+                const seen = new Set();
+                for (const c of list)
+                    if (!seen.has(c.name))
+                        (seen.add(c.name), cookies.push([c.name, c.value]));
+            }
+        }
+        return { method, url, headers, cookies, body, multipart: req.multipart ?? null };
+    }
+    /**
+     * 发送请求。Set-Cookie 自动写回 cookie 罐；网络错误映射成 NETWORK。
+     * 跳转由这里逐跳跟随（最多 10 跳），这样中间跳转设置的 cookie 也会收进 cookie 罐，
+     * 后续跳转按 cookie 罐重新取 cookie。
+     */
+    async request(req) {
+        const follow = (req.redirect ?? 'follow') === 'follow';
+        let current = req;
+        for (let hop = 0;; hop++) {
+            const { res, url } = await this.send(current);
+            const location = res.headers.get('location');
+            if (!follow || !location || !REDIRECT_STATUS.has(res.status) || hop >= 10)
+                return res;
+            const method = (current.method ?? 'GET').toUpperCase();
+            const toGet = res.status === 303 || ((res.status === 301 || res.status === 302) && method === 'POST');
+            current = { ...current, url: new URL(location, url).toString(), query: undefined };
+            if (toGet) {
+                const { form: _f, json: _j, body: _b, multipart: _m, ...rest } = current;
+                current = { ...rest, method: 'GET', headers: headerPairs(rest.headers).filter(([k]) => k.toLowerCase() !== 'content-type') };
+            }
+        }
+    }
+    async send(req) {
+        const prepared = this.prepare(req);
+        const o = this.options;
+        const sendOptions = {
+            browser: o.browser ?? 'chrome',
+            os: o.os ?? 'windows',
+            proxy: o.proxy ?? null,
+            timeout: req.timeout ?? o.timeout ?? 30,
+            redirect: 'manual',
+            disableDefaultHeaders: o.disableDefaultHeaders ?? true,
+        };
+        // 表单 POST：libcurl 会自己补 content-type，wreq 不会
+        if (req.form !== undefined && prepared.method === 'POST' && !hasHeader(prepared.headers, 'content-type')) {
+            prepared.headers.push(['Content-Type', 'application/x-www-form-urlencoded']);
+        }
+        o.log?.debug(`${prepared.method} ${prepared.url}`);
+        let res;
+        try {
+            res = decodeByCharset(await sender(prepared, sendOptions));
+        }
+        catch (err) {
+            throw toNetworkError(err);
+        }
+        this.jar?.applySetCookie(prepared.url, res.headers.getSetCookie());
+        o.log?.debug(`${res.status} ${prepared.url}`);
+        return { res, url: prepared.url };
+    }
+    async text(req) {
+        return (await this.request(req)).text();
+    }
+    /** 请求并解析 JSON；不是 JSON 时报 UPSTREAM（HTTP 状态码放在 detail 里）。 */
+    async json(req) {
+        const res = await this.request(req);
+        return parseJson(res);
+    }
+    async bytes(req) {
+        const res = await this.request(req);
+        return new Uint8Array(await res.arrayBuffer());
+    }
+}
+const CHARSET = /charset\s*=\s*["']?([\w-]+)/i;
+/**
+ * 响应头声明了 UTF-8 以外的 charset（京东的 `text/json;charset=gbk` 等）时，text() / json() 按它解码，
+ * 与上游 requests / curl_cffi 的 `resp.text` 一致。没有声明或声明 UTF-8 时不变。
+ */
+function decodeByCharset(res) {
+    const charset = CHARSET.exec(res.headers.get('content-type') ?? '')?.[1]?.toLowerCase();
+    if (!charset || charset === 'utf-8' || charset === 'utf8')
+        return res;
+    let decoder;
+    try {
+        decoder = new TextDecoder(charset);
+    }
+    catch {
+        return res;
+    }
+    const wrap = (r) => new Proxy(r, {
+        get(target, key) {
+            if (key === 'text')
+                return async () => decoder.decode(await target.arrayBuffer());
+            if (key === 'json')
+                return async () => JSON.parse(decoder.decode(await target.arrayBuffer()));
+            if (key === 'clone')
+                return () => wrap(target.clone());
+            const value = Reflect.get(target, key);
+            return typeof value === 'function' ? value.bind(target) : value;
+        },
+    });
+    return wrap(res);
+}
+export async function parseJson(res) {
+    const text = await res.text();
+    try {
+        return jsonLoads(text);
+    }
+    catch {
+        throw new SpecificAIError('UPSTREAM', `平台返回的不是 JSON（HTTP ${res.status}）`, {
+            detail: { status: res.status, body: text.slice(0, 300) },
+        });
+    }
+}
+/** 解开 JSONP 包装：`cb({...})`、`cb({...});` → 对象；不带包装时按 JSON 解。都解不开时为 null。 */
+export function parseJsonp(text) {
+    if (text == null)
+        return null;
+    const t = text.trim();
+    const m = /^[^({["]*\(([\s\S]*)\)[;\s]*$/.exec(t);
+    try {
+        return jsonLoads(m ? m[1] : t);
+    }
+    catch {
+        return null;
+    }
+}
+/** 响应体按 JSONP 解析（见 parseJsonp），解不开时报 UPSTREAM，带上状态码和响应开头。 */
+export async function jsonpOf(res) {
+    const text = await res.text();
+    const data = parseJsonp(text);
+    if (data == null) {
+        throw new SpecificAIError('UPSTREAM', `平台返回的不是 JSON / JSONP（HTTP ${res.status}）`, {
+            detail: { status: res.status, body: text.slice(0, 300) },
+        });
+    }
+    return data;
+}
+/** wreq-js 的错误映射成 NETWORK，`detail.kind` 区分超时、代理、连接、DNS、TLS、中止。 */
+export function toNetworkError(err) {
+    if (err instanceof SpecificAIError)
+        return err;
+    const message = err instanceof Error ? err.message : String(err);
+    if (!(err instanceof RequestError) && !(err instanceof Error && err.name === 'AbortError')) {
+        return new SpecificAIError('ERROR', message, { cause: err });
+    }
+    const kind = /timed? ?out/i.test(message)
+        ? 'timeout'
+        : /proxy|tunnel|socks/i.test(message)
+            ? 'proxy'
+            : /certificate|tls|ssl/i.test(message)
+                ? 'tls'
+                : /abort/i.test(message)
+                    ? 'abort'
+                    : /dns|resolve|lookup|name or service/i.test(message)
+                        ? 'dns'
+                        : 'connect';
+    return new SpecificAIError('NETWORK', `网络错误：${message}`, {
+        hint: kind === 'proxy' ? '检查代理：specific-ai config get proxy' : null,
+        detail: { kind },
+        cause: err,
+    });
+}
+/** 测试用：构造一个响应。 */
+export function fakeResponse(body, init = {}) {
+    const text = typeof body === 'string' || body instanceof Uint8Array ? body : JSON.stringify(body);
+    const headers = new globalThis.Headers(init.headers ?? []);
+    const res = new globalThis.Response(text, { status: init.status ?? 200, headers });
+    Object.defineProperty(res, 'url', { value: init.url ?? '' });
+    return res;
+}

package/dist/core/image.js

@@ -0,0 +1,280 @@
+import { createRequire } from 'node:module';
+import { inflateSync } from 'node:zlib';
+/**
+ * 图片解码与 OpenCV（@techstark/opencv-js）辅助，给各平台的验证码识别用（京东 JCAP、快手滑块、B 站极验）。
+ * PNG 用自带的解码器（与 cv2.imdecode / Pillow 逐像素一致，半透明像素不经过预乘）；JPEG / WebP 等交给 @napi-rs/canvas。
+ * imdecode 输出 BGR / BGRA 的交错像素（与 cv2 一致）。
+ */
+const require = createRequire(import.meta.url);
+let cvPromise = null;
+/** 加载 opencv-js（WASM，首次约几百毫秒）。 */
+export function loadCv() {
+    cvPromise ??= (async () => {
+        let cv = require('@techstark/opencv-js');
+        if (cv instanceof Promise)
+            cv = await cv;
+        else if (!cv.Mat)
+            await new Promise((r) => (cv.onRuntimeInitialized = () => r()));
+        return cv;
+    })();
+    return cvPromise;
+}
+export const img = (width, height, channels, data) => ({ width, height, channels, data });
+// ---------------------------------------------------------------- PNG
+function paeth(a, b, c) {
+    const p = a + b - c;
+    const pa = Math.abs(p - a);
+    const pb = Math.abs(p - b);
+    const pc = Math.abs(p - c);
+    return pa <= pb && pa <= pc ? a : pb <= pc ? b : c;
+}
+/** 非交错 PNG → RGBA8。不是 PNG、或是交错图时返回 null（交给 canvas）。 */
+export function decodePng(buf) {
+    const b = Buffer.from(buf);
+    if (b.length < 8 || b.readUInt32BE(0) !== 0x89504e47)
+        return null;
+    let off = 8;
+    let width = 0;
+    let height = 0;
+    let depth = 8;
+    let type = 0;
+    let interlace = 0;
+    let palette = null;
+    let trns = null;
+    const idat = [];
+    while (off + 8 <= b.length) {
+        const len = b.readUInt32BE(off);
+        const kind = b.toString('latin1', off + 4, off + 8);
+        const data = b.subarray(off + 8, off + 8 + len);
+        off += 12 + len;
+        if (kind === 'IHDR') {
+            width = data.readUInt32BE(0);
+            height = data.readUInt32BE(4);
+            depth = data[8];
+            type = data[9];
+            interlace = data[12];
+        }
+        else if (kind === 'PLTE')
+            palette = data;
+        else if (kind === 'tRNS')
+            trns = data;
+        else if (kind === 'IDAT')
+            idat.push(data);
+        else if (kind === 'IEND')
+            break;
+    }
+    if (!width || interlace)
+        return null;
+    const channels = { 0: 1, 2: 3, 3: 1, 4: 2, 6: 4 }[type];
+    if (!channels)
+        return null;
+    const raw = inflateSync(Buffer.concat(idat));
+    const bitsPerPixel = channels * depth;
+    const bpp = Math.max(1, bitsPerPixel >> 3);
+    const stride = Math.ceil((width * bitsPerPixel) / 8);
+    const lines = new Uint8Array(stride * height);
+    let prev = new Uint8Array(stride);
+    let p = 0;
+    for (let y = 0; y < height; y++) {
+        const filter = raw[p++];
+        const line = lines.subarray(y * stride, (y + 1) * stride);
+        for (let i = 0; i < stride; i++) {
+            const x = raw[p++];
+            const a = i >= bpp ? line[i - bpp] : 0;
+            const up = prev[i];
+            const c = i >= bpp ? prev[i - bpp] : 0;
+            line[i] = (filter === 0 ? x : filter === 1 ? x + a : filter === 2 ? x + up : filter === 3 ? x + ((a + up) >> 1) : x + paeth(a, up, c)) & 0xff;
+        }
+        prev = line;
+    }
+    const rgba = new Uint8Array(width * height * 4);
+    const sample = (line, idx) => {
+        if (depth === 8)
+            return line[idx];
+        if (depth === 16)
+            return line[idx * 2];
+        const perByte = 8 / depth;
+        const byte = line[Math.floor(idx / perByte)];
+        const shift = 8 - depth * ((idx % perByte) + 1);
+        return (byte >> shift) & ((1 << depth) - 1);
+    };
+    const scale = depth < 8 && type !== 3 ? 255 / ((1 << depth) - 1) : 1;
+    for (let y = 0; y < height; y++) {
+        const line = lines.subarray(y * stride, (y + 1) * stride);
+        for (let x = 0; x < width; x++) {
+            const o = (y * width + x) * 4;
+            if (type === 3) {
+                const i = sample(line, x);
+                rgba[o] = palette?.[i * 3] ?? 0;
+                rgba[o + 1] = palette?.[i * 3 + 1] ?? 0;
+                rgba[o + 2] = palette?.[i * 3 + 2] ?? 0;
+                rgba[o + 3] = trns && i < trns.length ? trns[i] : 255;
+            }
+            else if (type === 0 || type === 4) {
+                const g = Math.round(sample(line, x * channels) * scale);
+                rgba[o] = rgba[o + 1] = rgba[o + 2] = g;
+                rgba[o + 3] = type === 4 ? sample(line, x * channels + 1) : 255;
+            }
+            else {
+                rgba[o] = sample(line, x * channels);
+                rgba[o + 1] = sample(line, x * channels + 1);
+                rgba[o + 2] = sample(line, x * channels + 2);
+                rgba[o + 3] = type === 6 ? sample(line, x * channels + 3) : 255;
+            }
+        }
+    }
+    return { width, height, rgba, hasAlpha: type === 4 || type === 6 || (type === 3 && trns != null) };
+}
+/** WebP / JPEG 是否带 alpha（与 libwebp 的 WebPGetFeatures 一致）；其他格式为 null（按像素判断）。 */
+function formatAlpha(b) {
+    if (b.length >= 2 && b[0] === 0xff && b[1] === 0xd8)
+        return false;
+    if (b.length >= 16 && b.toString('latin1', 0, 4) === 'RIFF' && b.toString('latin1', 8, 12) === 'WEBP') {
+        const kind = b.toString('latin1', 12, 16);
+        if (kind === 'VP8X' && b.length > 20)
+            return (b[20] & 0x10) !== 0;
+        if (kind === 'VP8L' && b.length >= 25)
+            return ((b.readUInt32LE(21) >>> 28) & 1) === 1;
+        return false;
+    }
+    return null;
+}
+/**
+ * PNG 以外（JPEG、WebP 等）交给 @napi-rs/canvas 解码。解码是异步的：要等 loadImage 完成再画，
+ * 同步设 `Image.src` 后立刻 drawImage 画出来是全黑的。
+ */
+async function decodeCanvas(buf) {
+    const { loadImage, createCanvas } = require('@napi-rs/canvas');
+    const b = Buffer.from(buf);
+    const im = await loadImage(b);
+    const c = createCanvas(im.width, im.height);
+    const ctx = c.getContext('2d');
+    ctx.drawImage(im, 0, 0);
+    const d = ctx.getImageData(0, 0, im.width, im.height);
+    const rgba = new Uint8Array(d.data.buffer, d.data.byteOffset, d.data.length);
+    let hasAlpha = formatAlpha(b);
+    if (hasAlpha == null) {
+        hasAlpha = false;
+        for (let i = 3; i < rgba.length; i += 4) {
+            if (rgba[i] !== 255) {
+                hasAlpha = true;
+                break;
+            }
+        }
+    }
+    return { width: im.width, height: im.height, rgba, hasAlpha };
+}
+/** 任意格式 → RGBA8；解码不了（或宽高为 0）时为 null。 */
+export async function decodeImage(buf) {
+    try {
+        const im = decodePng(buf) ?? (await decodeCanvas(buf));
+        return im.width && im.height ? im : null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * cv2.imdecode：color 模式输出 BGR；unchanged 模式在有 alpha 时输出 BGRA、否则 BGR。
+ */
+export async function imdecode(buf, mode = 'color') {
+    const png = await decodeImage(buf);
+    if (!png)
+        return null;
+    const alpha = mode === 'unchanged' && png.hasAlpha;
+    const ch = alpha ? 4 : 3;
+    const out = new Uint8Array(png.width * png.height * ch);
+    for (let i = 0, j = 0; i < png.rgba.length; i += 4, j += ch) {
+        out[j] = png.rgba[i + 2];
+        out[j + 1] = png.rgba[i + 1];
+        out[j + 2] = png.rgba[i];
+        if (alpha)
+            out[j + 3] = png.rgba[i + 3];
+    }
+    return img(png.width, png.height, ch, out);
+}
+/**
+ * 只读文件头取图片宽高：PNG / JPEG / GIF / WebP / BMP（上游用 opencv / Pillow 解码后取尺寸）。读不出来时为 null。
+ */
+export function imageSize(data) {
+    const d = Buffer.from(data.buffer, data.byteOffset, data.byteLength);
+    try {
+        if (d.length >= 24 && d.readUInt32BE(0) === 0x89504e47)
+            return { width: d.readUInt32BE(16), height: d.readUInt32BE(20) };
+        if (d.length >= 10 && d.toString('latin1', 0, 3) === 'GIF')
+            return { width: d.readUInt16LE(6), height: d.readUInt16LE(8) };
+        if (d.length >= 26 && d.toString('latin1', 0, 2) === 'BM')
+            return { width: d.readInt32LE(18), height: Math.abs(d.readInt32LE(22)) };
+        if (d.length >= 30 && d.toString('latin1', 0, 4) === 'RIFF' && d.toString('latin1', 8, 12) === 'WEBP') {
+            const kind = d.toString('latin1', 12, 16);
+            if (kind === 'VP8X')
+                return { width: d.readUIntLE(24, 3) + 1, height: d.readUIntLE(27, 3) + 1 };
+            if (kind === 'VP8L') {
+                const bits = d.readUInt32LE(21);
+                return { width: (bits & 0x3fff) + 1, height: ((bits >> 14) & 0x3fff) + 1 };
+            }
+            return { width: d.readUInt16LE(26) & 0x3fff, height: d.readUInt16LE(28) & 0x3fff };
+        }
+        if (d.length >= 4 && d[0] === 0xff && d[1] === 0xd8) {
+            let o = 2;
+            while (o + 9 < d.length) {
+                // 段之间可能有填充字节 0xff
+                if (d[o] !== 0xff) {
+                    o++;
+                    continue;
+                }
+                const marker = d[o + 1];
+                if (marker === 0xff) {
+                    o++;
+                    continue;
+                }
+                const len = d.readUInt16BE(o + 2);
+                if (marker >= 0xc0 && marker <= 0xcf && ![0xc4, 0xc8, 0xcc].includes(marker))
+                    return { width: d.readUInt16BE(o + 7), height: d.readUInt16BE(o + 5) };
+                o += 2 + len;
+            }
+        }
+    }
+    catch { }
+    return null;
+}
+// ---------------------------------------------------------------- 与 cv.Mat 互转
+export function toMat(cv, im) {
+    const depth = im.data instanceof Float32Array ? cv.CV_32F : cv.CV_8U;
+    const type = depth === cv.CV_32F ? [cv.CV_32FC1, cv.CV_32FC2, cv.CV_32FC3, cv.CV_32FC4][im.channels - 1] : [cv.CV_8UC1, cv.CV_8UC2, cv.CV_8UC3, cv.CV_8UC4][im.channels - 1];
+    const mat = new cv.Mat(im.height, im.width, type);
+    (depth === cv.CV_32F ? mat.data32F : mat.data).set(im.data);
+    return mat;
+}
+export function fromMat(cv, mat) {
+    const depth = mat.depth();
+    const channels = mat.channels();
+    const data = depth === cv.CV_32F ? new Float32Array(mat.data32F) : depth === cv.CV_8U ? new Uint8Array(mat.data) : depth === cv.CV_32S ? Float32Array.from(mat.data32S) : new Float32Array(mat.data32F);
+    return img(mat.cols, mat.rows, channels, data);
+}
+/** 在一组 Mat 上跑 fn，结束后统一释放。 */
+export function withMats(fn) {
+    const mats = [];
+    try {
+        return fn((m) => (mats.push(m), m));
+    }
+    finally {
+        for (const m of mats)
+            m.delete();
+    }
+}
+/** 单通道视图。 */
+export function channel(im, c) {
+    const out = im.data instanceof Float32Array ? new Float32Array(im.width * im.height) : new Uint8Array(im.width * im.height);
+    for (let i = 0; i < out.length; i++)
+        out[i] = im.data[i * im.channels + c];
+    return img(im.width, im.height, 1, out);
+}
+export function crop(im, x, y, w, h) {
+    const out = im.data instanceof Float32Array ? new Float32Array(w * h * im.channels) : new Uint8Array(w * h * im.channels);
+    for (let r = 0; r < h; r++) {
+        const s = ((y + r) * im.width + x) * im.channels;
+        out.set(im.data.subarray(s, s + w * im.channels), r * w * im.channels);
+    }
+    return img(w, h, im.channels, out);
+}

package/dist/core/log.js

@@ -0,0 +1,40 @@
+const SENSITIVE = /cookie|token|authorization|password|secret|ticket|sessdata|ct0/i;
+const URL_USERINFO = /\/\/[^/\s:@]+:[^/\s@]+@/g;
+const COOKIE_HEADER = /\b((?:set-)?cookie)(["']?\s*:\s*)[^\n]*/gi;
+const SENSITIVE_PAIR = /\b(authorization|[\w-]*token|password|secret|ticket|sessdata|ct0)(["']?\s*[:=]\s*)((?:bearer|basic)\s+)?("[^"]*"|'[^']*'|[^\s,;&]+)/gi;
+/**
+ * 给凭证打码：对象里键名敏感的值换成 ***；字符串里的 Cookie 头整行打码，key=value / key: value 只打码值，
+ * URL 里的用户名密码（代理地址）也打码。
+ */
+export function redact(value) {
+    if (typeof value === 'string') {
+        return value.replace(URL_USERINFO, '//***@').replace(COOKIE_HEADER, '$1$2***').replace(SENSITIVE_PAIR, '$1$2$3***');
+    }
+    if (Array.isArray(value))
+        return value.map(redact);
+    if (value && typeof value === 'object') {
+        const out = {};
+        for (const [k, v] of Object.entries(value))
+            out[k] = SENSITIVE.test(k) && v != null ? '***' : redact(v);
+        return out;
+    }
+    return value;
+}
+export function createLogger(options = {}) {
+    const write = (line) => process.stderr.write(line + '\n');
+    return {
+        debug(message, data) {
+            if (!options.verbose)
+                return;
+            const suffix = data === undefined ? '' : ' ' + JSON.stringify(redact(data));
+            write(`[specific-ai:debug] ${redact(message)}${suffix}`);
+        },
+        info(message) {
+            if (!options.quiet)
+                write(`[specific-ai] ${message}`);
+        },
+        warn(message) {
+            write(`[specific-ai] 警告：${message}`);
+        },
+    };
+}