specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/platforms/x/web/normalize.js

@@ -0,0 +1,235 @@
+import * as n from '../../../core/normalize.js';
+import { X_HOST } from './profile.js';
+/** X 原始对象 → 归一化类型（AGENTS 6.2），字段取值参照上游 utils/data_util.py 的 handle_work_info。 */
+/** TweetWithVisibilityResults 包了一层 tweet，统一拆开（上游 handle_work_info 开头）。 */
+export function unwrap(result) {
+    if (result?.__typename === 'TweetWithVisibilityResults')
+        return result.tweet ?? result;
+    return result;
+}
+function screenNameOf(u) {
+    return n.str(u?.core?.screen_name ?? u?.legacy?.screen_name);
+}
+export const userUrl = (screenName) => `${X_HOST}/${screenName}`;
+export const tweetUrl = (id, screenName) => (screenName ? `${X_HOST}/${screenName}/status/${id}` : `${X_HOST}/i/status/${id}`);
+/** 用户对象（tweet 的 core.user_results.result、UserByScreenName 的 user.result、Viewer 的 user_results.result）。 */
+export function userRef(u) {
+    if (!u)
+        return null;
+    const screenName = screenNameOf(u);
+    return n.userRef({ id: u.rest_id ?? u.legacy?.id_str, name: u.core?.name ?? u.legacy?.name, url: screenName ? userUrl(screenName) : null });
+}
+/** 完整用户资料：新版字段在 core / avatar / profile_bio / relationship_counts / tweet_counts，老版在 legacy。 */
+export function user(u) {
+    const legacy = u.legacy ?? {};
+    const screenName = screenNameOf(u);
+    return n.user({
+        id: n.id(u.rest_id ?? legacy.id_str),
+        name: n.str(u.core?.name ?? legacy.name),
+        handle: screenName,
+        avatar: n.url(u.avatar?.image_url ?? legacy.profile_image_url_https),
+        url: screenName ? userUrl(screenName) : null,
+        bio: n.str(u.profile_bio?.description ?? legacy.description),
+        stats: {
+            followers: n.count(u.relationship_counts?.followers ?? legacy.followers_count),
+            following: n.count(u.relationship_counts?.following ?? legacy.friends_count),
+            items: n.count(u.tweet_counts?.tweets ?? legacy.statuses_count),
+            likes: n.count(u.action_counts?.favorites_count ?? legacy.favourites_count),
+        },
+    }, u);
+}
+/** 推文的媒体：`extended_entities` 才有完整列表，`entities` 只有第一张。视频取码率最高的 mp4。 */
+function mediaOf(legacy) {
+    const list = (legacy.extended_entities ?? legacy.entities ?? {}).media ?? [];
+    const media = [];
+    for (const m of list) {
+        const info = m.original_info ?? {};
+        if (m.type === 'photo') {
+            media.push(n.media({ id: n.id(m.id_str), type: 'image', url: m.media_url_https, width: n.count(info.width), height: n.count(info.height) }, m));
+            continue;
+        }
+        const mp4 = (m.video_info?.variants ?? []).filter((v) => v.content_type === 'video/mp4');
+        const best = mp4.sort((a, b) => (b.bitrate ?? 0) - (a.bitrate ?? 0))[0];
+        if (!best)
+            continue;
+        const ms = m.video_info?.duration_millis;
+        media.push(n.media({ id: n.id(m.id_str), type: 'video', url: best.url, width: n.count(info.width), height: n.count(info.height), duration: ms == null ? null : n.seconds(ms / 1000) }, m));
+    }
+    return { media, cover: n.url(list[0]?.media_url_https) };
+}
+/** 推文对象里的正文：长推文的全文在 note_tweet 里，legacy.full_text 是截断的。 */
+function textOf(t) {
+    return n.str(t.note_tweet?.note_tweet_results?.result?.text ?? t.legacy?.full_text);
+}
+/** tweet result → Item。kind：有视频为 video，有图片为 image，否则 text（上游 work_type）。 */
+export function item(raw) {
+    const t = unwrap(raw);
+    const legacy = t.legacy ?? {};
+    const author = t.core?.user_results?.result;
+    const id = n.id(t.rest_id ?? legacy.id_str);
+    const { media, cover } = mediaOf(legacy);
+    return n.item({
+        id,
+        kind: media.some((m) => m.type === 'video') ? 'video' : media.length ? 'image' : 'text',
+        url: tweetUrl(id, screenNameOf(author)),
+        text: textOf(t),
+        author: userRef(author),
+        created_at: n.time(legacy.created_at),
+        cover,
+        media,
+        stats: {
+            views: n.count(t.views?.count),
+            likes: n.count(legacy.favorite_count),
+            comments: n.count(legacy.reply_count),
+            collects: n.count(legacy.bookmark_count),
+            shares: n.count(legacy.retweet_count),
+        },
+    }, raw);
+}
+/** 回复推文 → Comment。直接回复本推文的 parent_id 为 null，楼中楼为被回复的那条。 */
+export function comment(raw, itemId) {
+    const t = unwrap(raw);
+    const legacy = t.legacy ?? {};
+    const parent = n.idOrNull(legacy.in_reply_to_status_id_str);
+    return n.comment({
+        id: n.id(t.rest_id ?? legacy.id_str),
+        item_id: itemId,
+        parent_id: parent === itemId ? null : parent,
+        author: userRef(t.core?.user_results?.result),
+        text: textOf(t) ?? '',
+        created_at: n.time(legacy.created_at),
+        stats: { likes: n.count(legacy.favorite_count), replies: n.count(legacy.reply_count) },
+    }, raw);
+}
+// ---------------------------------------------------------------- timeline
+/** 深度遍历 timeline，产出所有带 entryId + content 的 entry（上游 _walk_entries）。 */
+function* walkEntries(node) {
+    if (Array.isArray(node)) {
+        for (const v of node)
+            yield* walkEntries(v);
+    }
+    else if (node && typeof node === 'object') {
+        if ('entryId' in node && 'content' in node)
+            yield node;
+        for (const v of Object.values(node))
+            yield* walkEntries(v);
+    }
+}
+/** 真正的推文条目：跳过游标、广告、模块占位和已删除 / 不可见的推文（上游 extract_tweet_entries）。 */
+export function tweetResults(res) {
+    const out = [];
+    for (const entry of walkEntries(res)) {
+        if (!String(entry.entryId).startsWith('tweet-'))
+            continue;
+        const result = entry.content?.itemContent?.tweet_results?.result;
+        if (unwrap(result)?.rest_id)
+            out.push(result);
+    }
+    return out;
+}
+/**
+ * 宫格模块里的推文（媒体搜索 product=Media）：首页是 `search-grid-0` 模块的 items，翻页用 TimelineAddToModule
+ * 往模块里追加 moduleItems；模块条目只有 entryId + item，不是顶层 entry，tweetResults 取不到。
+ */
+export function gridResults(res) {
+    const out = [];
+    const walk = (node) => {
+        if (Array.isArray(node)) {
+            for (const v of node)
+                walk(v);
+            return;
+        }
+        if (!node || typeof node !== 'object')
+            return;
+        if (String(node.entryId ?? '').startsWith('search-grid-') && node.item) {
+            const result = node.item.itemContent?.tweet_results?.result;
+            if (unwrap(result)?.rest_id)
+                out.push(result);
+        }
+        for (const v of Object.values(node))
+            walk(v);
+    };
+    walk(res);
+    return out;
+}
+/** 搜索 People 的用户条目。 */
+export function userResults(res) {
+    const out = [];
+    for (const entry of walkEntries(res)) {
+        if (!String(entry.entryId).startsWith('user-'))
+            continue;
+        const result = entry.content?.itemContent?.user_results?.result;
+        if (result?.rest_id)
+            out.push(result);
+    }
+    return out;
+}
+/** TweetDetail 里的回复：在 conversationthread-* 模块的 items 里，第一条是直接回复，其后是楼中楼。 */
+export function replyResults(res) {
+    const out = [];
+    for (const entry of walkEntries(res)) {
+        if (!String(entry.entryId).startsWith('conversationthread-'))
+            continue;
+        for (const it of entry.content?.items ?? []) {
+            const result = it.item?.itemContent?.tweet_results?.result;
+            if (unwrap(result)?.rest_id)
+                out.push(result);
+        }
+    }
+    return out;
+}
+/** 按 cursorType 在整棵树里找游标（上游 extract_cursor）。 */
+export function cursorOf(res, direction = 'Bottom') {
+    for (const entry of walkEntries(res)) {
+        const content = entry.content ?? {};
+        for (const holder of [content, content.itemContent ?? {}]) {
+            if (holder && typeof holder === 'object' && holder.cursorType === direction && holder.value)
+                return holder.value;
+        }
+    }
+    return null;
+}
+// ---------------------------------------------------------------- X Chat
+/** 会话的其他参与者（自己以外）。participants_results 的条目是 `{rest_id, result?}`，result 才有资料。 */
+function othersOf(entry, selfId) {
+    const participants = entry.conversation_detail?.participants_results ?? [];
+    return participants.map((p) => p.result ?? p).filter((u) => u?.rest_id && u.rest_id !== selfId);
+}
+/** 单聊里对方资料缺名字时，需要查成员资料的 rest_id（群聊不给 peer，不用查）。 */
+export function peersWithoutName(entry, selfId) {
+    if (entry.conversation_detail?.group_metadata)
+        return [];
+    const peer = othersOf(entry, selfId)[0];
+    return peer && !userRef(peer)?.name ? [String(peer.rest_id)] : [];
+}
+/** GetUsersByIdsForXChat 的结果：rest_id → 用户对象（`get_member_results.results[].member_results.result`）。 */
+export function memberResults(res) {
+    const out = new Map();
+    for (const r of res?.data?.get_member_results?.results ?? []) {
+        const u = r?.member_results?.result ?? r?.result;
+        if (u?.rest_id)
+            out.set(String(u.rest_id), u);
+    }
+    return out;
+}
+/**
+ * 收件箱条目 → Conversation。单聊的 peer 是自己以外的那个参与者，资料不全时用成员资料补；
+ * 消息是端到端加密的，不解。
+ */
+export function conversation(entry, selfId, members = new Map()) {
+    const detail = entry.conversation_detail ?? {};
+    const group = detail.group_metadata;
+    const peer = othersOf(entry, selfId)[0];
+    return n.conversation({
+        id: n.id(detail.conversation_id),
+        peer: group || !peer ? null : userRef(userRef(peer)?.name ? peer : (members.get(String(peer.rest_id)) ?? peer)),
+        updated_at: n.time(group?.updated_at_msec),
+    }, entry);
+}
+/**
+ * X Chat 的消息事件是 base64 的加密载荷（端到端加密，要用户的 passcode 才能解），
+ * 这里只按顺序给出占位的 Message，原始事件用 `--raw` 取。
+ */
+export function encryptedMessage(encoded, index, conversationId) {
+    return n.message({ id: String(index), conversation_id: conversationId, type: 'other' }, encoded);
+}

package/dist/platforms/x/web/profile.js

@@ -0,0 +1,99 @@
+/**
+ * 设备画像与请求头装配，移植自上游 utils/fingerprint.py + builder/client.py + builder/header.py。
+ *
+ * X 专属签名头（authorization / x-csrf-token / x-twitter-* / x-client-transaction-id / content-type）
+ * 由本文件按浏览器实抓顺序生成；浏览器通用头（user-agent / sec-ch-ua* / accept / sec-fetch-* / priority）
+ * 对应上游传输层 `_apply_fetch_headers` 追加在 X 头之后。specific-ai 关掉默认头，所以这里显式写全。
+ */
+// X web 公开固定 bearer（不是用户身份，所有 web 接口都带它，上游 PUBLIC_BEARER）。
+export const PUBLIC_BEARER = 'Bearer AAAAAAAAAAAAAAAAAAAAANRILgAAAAAAnNwIzUejRCOuH5E6I8xnZz4puTs%3D1Zv7ttfk8LF81IUq16cHjhLTvJu4FA33AGWWjCpTnA';
+/** 当前真实 Chrome 153 画像（上游 get_profile）。所有请求的 UA / UA-CH 都取自这里，保持一致。 */
+export const PROFILE = {
+    ua: 'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/153.0.0.0 Safari/537.36',
+    secChUa: '"Google Chrome";v="153", "Not_A Brand";v="8", "Chromium";v="153"',
+    secChUaMobile: '?0',
+    secChUaPlatform: '"Windows"',
+    acceptLanguage: 'zh-CN,zh;q=0.9,en;q=0.8,zh-TW;q=0.7,ja;q=0.6',
+    clientLanguage: 'zh-CN',
+    timezone: 'Asia/Shanghai',
+};
+// wreq-js 最高到 chrome_149；应用层 UA/UA-CH 显式覆盖为 Chrome 153（与上游同思路）。
+export const BROWSER = 'chrome_149';
+export const X_HOST = 'https://x.com';
+export const API_X = 'https://api.x.com';
+export const UPLOAD_HOST = 'https://upload.x.com';
+export const COOKIE_DOMAIN = '.x.com';
+/** Sec-Fetch-Site：按目标 host 相对 x.com 的关系（上游 _sec_fetch_site）。 */
+function secFetchSite(url) {
+    const host = (new URL(url).hostname || '').toLowerCase();
+    if (host === 'x.com' || host === 'www.x.com')
+        return 'same-origin';
+    if (host.endsWith('.x.com') || host === 'twitter.com' || host.endsWith('.twitter.com'))
+        return 'same-site';
+    return 'cross-site';
+}
+/** 真实浏览器 fetch/XHR 的通用头（上游 _apply_fetch_headers），追加在 X 头之后。 */
+export function fetchHeaders(url) {
+    return [
+        ['user-agent', PROFILE.ua],
+        ['sec-ch-ua', PROFILE.secChUa],
+        ['sec-ch-ua-mobile', PROFILE.secChUaMobile],
+        ['sec-ch-ua-platform', PROFILE.secChUaPlatform],
+        ['accept', '*/*'],
+        ['accept-language', PROFILE.acceptLanguage],
+        ['priority', 'u=1, i'],
+        ['sec-fetch-site', secFetchSite(url)],
+        ['sec-fetch-mode', 'cors'],
+        ['sec-fetch-dest', 'empty'],
+    ];
+}
+/**
+ * 装配一次请求的完整头，顺序逐项对齐浏览器实抓（2026-08 上游 builder/header.py 三族顺序）。
+ * `url` 用来算 sec-fetch-site 并追加 fetch 头。
+ */
+export function buildHeaders(type, url, auth, options = {}) {
+    const x = [];
+    const authType = () => {
+        if (auth.loggedIn)
+            x.push(['x-twitter-auth-type', 'OAuth2Session']);
+    };
+    if (type === 'GRAPHQL') {
+        x.push(['content-type', 'application/json']);
+        x.push(['authorization', auth.bearer]);
+        authType();
+        x.push(['x-csrf-token', auth.ct0]);
+        x.push(['x-twitter-client-language', auth.lang]);
+        x.push(['x-twitter-active-user', 'yes']);
+        if (options.xctid)
+            x.push(['x-client-transaction-id', options.xctid]);
+        if (options.origin)
+            x.push(['origin', options.origin]);
+        if (options.referer)
+            x.push(['referer', options.referer]);
+    }
+    else if (type === 'FORM') {
+        x.push(['authorization', auth.bearer]);
+        authType();
+        x.push(['x-csrf-token', auth.ct0]);
+        x.push(['x-twitter-client-language', auth.lang]);
+        x.push(['x-twitter-active-user', 'yes']);
+        x.push(['content-type', 'application/x-www-form-urlencoded; charset=UTF-8']);
+        if (options.xctid)
+            x.push(['x-client-transaction-id', options.xctid]);
+        if (options.origin)
+            x.push(['origin', options.origin]);
+        if (options.referer)
+            x.push(['referer', options.referer]);
+    }
+    else {
+        // UPLOAD：只有这几个头，无 xctid / client-language / active-user（上游 _UPLOAD_ORDER）。
+        x.push(['authorization', auth.bearer]);
+        authType();
+        if (options.referer)
+            x.push(['referer', options.referer]);
+        x.push(['x-csrf-token', auth.ct0]);
+        if (options.origin)
+            x.push(['origin', options.origin]);
+    }
+    return [...x, ...fetchHeaders(url)];
+}

package/dist/platforms/x/web/resolve.js

@@ -0,0 +1,44 @@
+import { SpecificAIError } from '../../../core/errors.js';
+/** 参数归一化（AGENTS 4.8），移植自上游 utils/x_util.py。 */
+const STATUS_RE = /(?:twitter|x)\.com\/(?:#!\/)?(\w+)\/status(?:es)?\/(\d+)/;
+const SCREEN_NAME_RE = /(?:twitter|x)\.com\/@?([A-Za-z0-9_]{1,15})\/?(?:\?|$)/;
+/** 接受完整推文链接或纯数字 id，统一返回数字 id（上游 parse_tweet_id）。 */
+export function parseTweetId(input) {
+    const text = (input ?? '').trim();
+    if (/^\d+$/.test(text))
+        return text;
+    const m = STATUS_RE.exec(text);
+    if (!m)
+        throw new SpecificAIError('USAGE', `无法从 ${input} 解析推文 id`, { hint: '传推文 id 或链接 https://x.com/<user>/status/<id>' });
+    return m[2];
+}
+const ARTICLE_RE = /(?:twitter|x)\.com\/(?:i\/article|compose\/articles\/edit)\/(\d+)/;
+/** 文章：纯数字 id、文章链接 `x.com/i/article/<id>` 或编辑页 `x.com/compose/articles/edit/<id>`。 */
+export function parseArticleId(input) {
+    const text = (input ?? '').trim();
+    if (/^\d+$/.test(text))
+        return text;
+    const m = ARTICLE_RE.exec(text);
+    if (!m)
+        throw new SpecificAIError('USAGE', `无法从 ${input} 解析文章 id`, { hint: '传文章 id 或链接 https://x.com/i/article/<id>' });
+    return m[1];
+}
+/** 接受主页链接、@handle 或裸用户名，统一返回小写 screen_name（上游 parse_screen_name）。 */
+export function parseScreenName(input) {
+    const text = (input ?? '').trim().replace(/\/+$/, '');
+    const m = SCREEN_NAME_RE.exec(text);
+    if (m)
+        return m[1].toLowerCase();
+    return text.replace(/^@+/, '').split('/').pop().split('?')[0].toLowerCase();
+}
+/**
+ * 用户参数里的纯数字按用户 ID（rest_id）处理，这样输出里的 `id` 可以直接作为下一条命令的参数；
+ * 全数字的用户名请写成 `@123` 或主页链接。
+ */
+export function isUserId(input) {
+    return /^\d+$/.test((input ?? '').trim());
+}
+/** twid cookie 形如 `u%3D1718802931036622848`，取出数字用户 id。 */
+export function userIdFromTwid(twid) {
+    return (twid ?? '').replace('u%3D', '').replace('u=', '').replace(/"/g, '').trim();
+}

package/dist/platforms/x/web/transaction.js

@@ -0,0 +1,171 @@
+import { createHash } from 'node:crypto';
+import { readFileSync } from 'node:fs';
+import { staticFile } from '../../../core/paths.js';
+import * as rand from '../../../core/rand.js';
+/**
+ * x-client-transaction-id（XCTID）纯算实现，移植自上游 utils/transaction.py。
+ *
+ * X 前端对**每个** API 请求现算一个一次性签名头。素材（key / 4 帧动画路径 / 4 个下标）
+ * 来自登录页 app shell，一次会话内稳定；specific-ai 直接读打包进仓库的
+ * `static/x/transaction_l1.json`（对应上游 `ClientTransaction.from_cached`）。
+ *
+ * 算法：由素材算出稳定的 animation_key，再对 `method!path!t{KEYWORD}{anim_key}` 取 sha256，
+ * 拼上 key_bytes + t 的 4 字节小端 + digest[:16] + [3]，最后混入一个随机字节做 base64（去 =）。
+ * 因为末尾混入随机字节，同输入不同输出；固定随机源时可逐字节对拍。
+ */
+const EPOCH_SECONDS = 1682924400;
+const DEFAULT_KEYWORD = 'obfiowerehiring';
+const ADDITIONAL_RANDOM_NUMBER = 3;
+const TOTAL_TIME = 4096;
+let cached = null;
+/** 打包进仓库的 XCTID 素材（对拍与离线都用它，不发网络）。 */
+export function transaction() {
+    if (!cached) {
+        const profile = JSON.parse(readFileSync(staticFile('x', 'transaction_l1.json'), 'utf8'));
+        cached = new ClientTransaction(profile.key, profile.frames, profile.indices);
+    }
+    return cached;
+}
+function bezier(a, b, m) {
+    return 3.0 * a * (1 - m) * (1 - m) * m + 3.0 * b * (1 - m) * m * m + m * m * m;
+}
+/** cubic-bezier(c0, c1, c2, c3) 求值，逐行对齐上游 Cubic.get_value。 */
+function cubicValue(c, target) {
+    let startGradient = 0;
+    let endGradient = 0;
+    let start = 0;
+    let end = 1;
+    let mid = 0;
+    if (target <= 0.0) {
+        if (c[0] > 0.0)
+            startGradient = c[1] / c[0];
+        else if (!c[1] && c[2] > 0.0)
+            startGradient = c[3] / c[2];
+        return startGradient * target;
+    }
+    if (target >= 1.0) {
+        if (c[2] < 1.0)
+            endGradient = (c[3] - 1.0) / (c[2] - 1.0);
+        else if (c[2] === 1.0 && c[0] < 1.0)
+            endGradient = (c[1] - 1.0) / (c[0] - 1.0);
+        return 1.0 + endGradient * (target - 1.0);
+    }
+    while (start < end) {
+        mid = (start + end) / 2;
+        const estimate = bezier(c[0], c[2], mid);
+        if (Math.abs(target - estimate) < 0.00001)
+            return bezier(c[1], c[3], mid);
+        if (estimate < target)
+            start = mid;
+        else
+            end = mid;
+    }
+    return bezier(c[1], c[3], mid);
+}
+function interpolate(from, to, f) {
+    return from.map((a, i) => a * (1 - f) + to[i] * f);
+}
+function rotationMatrix(degrees) {
+    const rad = (degrees * Math.PI) / 180;
+    return [Math.cos(rad), -Math.sin(rad), Math.sin(rad), Math.cos(rad)];
+}
+/** 复刻上游 _float_to_hex：整数部分逐位取余，小数部分逐位展开。 */
+function floatToHex(x) {
+    const result = [];
+    let quotient = Math.trunc(x);
+    let fraction = x - quotient;
+    while (quotient > 0) {
+        quotient = Math.trunc(x / 16);
+        const remainder = Math.trunc(x - quotient * 16);
+        result.unshift(remainder > 9 ? String.fromCharCode(remainder + 55) : String(remainder));
+        x = quotient;
+    }
+    if (fraction === 0)
+        return result.join('');
+    result.push('.');
+    while (fraction > 0) {
+        fraction *= 16;
+        const integer = Math.trunc(fraction);
+        fraction -= integer;
+        result.push(integer > 9 ? String.fromCharCode(integer + 55) : String(integer));
+    }
+    return result.join('');
+}
+function solve(value, minVal, maxVal, rounding) {
+    const result = (value * (maxVal - minVal)) / 255 + minVal;
+    return rounding ? Math.floor(result) : Math.round(result * 100) / 100;
+}
+function isOdd(num) {
+    return num % 2 ? -1.0 : 0.0;
+}
+export class ClientTransaction {
+    key;
+    frames;
+    indices;
+    keyBytes;
+    animationKey;
+    constructor(key, frames, indices) {
+        this.key = key;
+        this.frames = frames;
+        this.indices = indices;
+        this.keyBytes = [...Buffer.from(key, 'base64')];
+        this.animationKey = this.buildAnimationKey();
+    }
+    /** 选中的帧路径按 'C' 切成若干行数字（上游 _frame_rows）。 */
+    frameRows() {
+        const frame = this.frames[this.keyBytes[5] % 4];
+        return frame
+            .slice(9)
+            .split('C')
+            .map((segment) => segment
+            .replace(/[^\d]+/g, ' ')
+            .trim()
+            .split(/\s+/)
+            .filter(Boolean)
+            .map((x) => parseInt(x, 10)));
+    }
+    buildAnimationKey() {
+        const rowIndex = this.keyBytes[this.indices[0]] % 16;
+        let frameTime = 1;
+        for (const index of this.indices.slice(1))
+            frameTime *= this.keyBytes[index] % 16;
+        const rows = this.frameRows();
+        return ClientTransaction.animate(rows[rowIndex], frameTime / TOTAL_TIME);
+    }
+    static animate(frameRow, targetTime) {
+        const fromColor = [...frameRow.slice(0, 3), 1].map(Number);
+        const toColor = [...frameRow.slice(3, 6), 1].map(Number);
+        const fromRotation = [0.0];
+        const toRotation = [solve(Number(frameRow[6]), 60.0, 360.0, true)];
+        const curves = frameRow.slice(7).map((v, i) => solve(Number(v), isOdd(i), 1.0, false));
+        const progress = cubicValue(curves, targetTime);
+        const color = interpolate(fromColor, toColor, progress).map((v) => Math.max(v, 0));
+        const rotation = interpolate(fromRotation, toRotation, progress);
+        const matrix = rotationMatrix(rotation[0]);
+        const parts = color.slice(0, -1).map((v) => Math.round(v).toString(16));
+        for (const value of matrix) {
+            const rounded = Math.abs(Math.round(value * 100) / 100);
+            const hexValue = floatToHex(rounded);
+            if (hexValue.startsWith('.'))
+                parts.push(`0${hexValue}`.toLowerCase());
+            else
+                parts.push(hexValue || '0');
+        }
+        parts.push('0', '0');
+        return parts.join('').replace(/[.-]/g, '');
+    }
+    /**
+     * 算一个 XCTID。path 必须是不含 query 的 pathname。
+     * timeNow / randomByte 仅供对拍覆盖。
+     */
+    generate(method, path, timeNow, randomByte) {
+        const t = timeNow ?? rand.nowSeconds() - EPOCH_SECONDS;
+        const timeBytes = [0, 1, 2, 3].map((i) => (t >>> (i * 8)) & 0xff);
+        const message = `${method}!${path}!${t}${DEFAULT_KEYWORD}${this.animationKey}`;
+        const digest = createHash('sha256').update(message).digest();
+        const payload = [...this.keyBytes, ...timeBytes, ...digest.subarray(0, 16), ADDITIONAL_RANDOM_NUMBER];
+        const rnd = randomByte ?? rand.randint(0, 255);
+        const out = Buffer.from([rnd, ...payload.map((b) => b ^ rnd)]);
+        return out.toString('base64').replace(/=+$/, '');
+    }
+}

package/dist/platforms/xhs/index.js

@@ -0,0 +1,101 @@
+import { z } from 'zod';
+import { CATEGORY, filter, PRODUCT, visibility } from '../../core/options.js';
+import { definePlatform, handlers } from '../../core/registry.js';
+/** 懒加载 web 端的 handler：只有执行到这条命令时才加载实现。 */
+const { h, impl } = handlers(() => import('./web/commands.js'));
+export default definePlatform({
+    id: 'xhs',
+    name: '小红书',
+    aliases: ['xiaohongshu', 'rednote'],
+    item: '笔记',
+    endpoints: {
+        web: {
+            login: { methods: ['qrcode', 'sms', 'cookie'], default: 'qrcode', scopes: ['creator'] },
+            commands: {
+                'auth login': impl('full', 'authLogin'),
+                'auth status': impl('full', 'authStatus'),
+                'user get': impl('full', 'userGet'),
+                'user search': impl('full', 'userSearch'),
+                'user items': impl('full', 'userItems'),
+                'user likes': impl('full', 'userLikes'),
+                'user collects': impl('full', 'userCollects'),
+                'user followers': 'none',
+                'user following': impl('partial', 'userFollowing', { note: '只支持 me' }),
+                'user follow': 'none',
+                'user unfollow': 'none',
+                'item get': impl('full', 'itemGet'),
+                'item search': impl('full', 'itemSearch', {
+                    options: {
+                        sort: filter.sort('general', 'latest', 'popular', 'comments', 'collects'),
+                        type: filter.type('all', 'video', 'image'),
+                        time: filter.time('all', 'day', 'week', 'half_year'),
+                    },
+                }),
+                'item related': 'none',
+                'item list': impl('full', 'itemList'),
+                'item media': impl('full', 'itemMedia'),
+                'item download': impl('full', 'itemDownload'),
+                'item like': 'none',
+                'item unlike': 'none',
+                'item collect': 'none',
+                'item uncollect': 'none',
+                'item publish': impl('full', 'itemPublish', {
+                    supports: ['title', 'text', 'image', 'video', 'cover', 'tag', 'topic', 'poi', 'visibility', 'schedule'],
+                    options: {
+                        visibility: visibility('public', 'private'),
+                        poiName: z.string().optional().describe('地点名称（按它搜地点）；同时给 --poi 时取 id 相同的那个，否则取名称完全相同的'),
+                    },
+                }),
+                'item delete': 'none',
+                'product get': 'none',
+                'comment list': impl('partial', 'commentList', { note: '--product 规划中', options: { product: PRODUCT } }),
+                'comment replies': impl('full', 'commentReplies'),
+                'comment add': 'none',
+                'comment delete': 'none',
+                'comment like': 'none',
+                'comment unlike': 'none',
+                'feed list': impl('partial', 'feedList', { note: 'following 规划中', options: { kind: filter.kind('recommend', 'following'), category: CATEGORY } }),
+                'feed categories': impl('full', 'feedCategories'),
+                'live get': impl('full', 'liveGet'),
+                'live list': impl('full', 'liveList', { options: { category: CATEGORY } }),
+                'live search': 'none',
+                'live categories': impl('full', 'liveCategories'),
+                'live listen': impl('full', 'liveListen'),
+                'live history': 'none',
+                'live send': impl('partial', 'liveSend', { note: '--gift 规划中' }),
+                'live like': 'none',
+                'live rank': 'none',
+                'live gifts': impl('full', 'liveGifts'),
+                'live products': impl('full', 'liveProducts'),
+                'live media': 'none',
+                'live start': 'none',
+                'live stop': 'none',
+                'keyword suggest': impl('full', 'keywordSuggest'),
+                'keyword hot': impl('full', 'keywordHot'),
+                'notice list': impl('full', 'noticeList'),
+                'notice count': impl('full', 'noticeCount'),
+                'msg list': impl('full', 'msgList', { note: '含群聊，群聊会话 id 为 group:<群 id>' }),
+                'msg history': impl('full', 'msgHistory', { note: '单聊传对方 id，群聊传 group:<群 id>' }),
+                'msg send': impl('full', 'msgSend'),
+                'msg listen': impl('full', 'msgListen'),
+                'msg read': impl('full', 'msgRead'),
+                'msg revoke': impl('full', 'msgRevoke'),
+                'msg delete': impl('full', 'msgDelete'),
+                'media upload': impl('full', 'mediaUpload'),
+                'folder list': impl('partial', 'folderList', { note: '只列公开的收藏夹（上游只有这一个接口），收藏夹里的笔记上游没有' }),
+                // 上游只有收藏夹列表，没有收藏夹内容
+                'folder items': 'none',
+                'folder create': 'none',
+                'folder update': 'none',
+                'folder delete': 'none',
+                'series list': 'none',
+                'series items': 'none',
+                'history list': 'none',
+                'topic search': impl('full', 'topicSearch'),
+                'poi search': impl('full', 'poiSearch'),
+            },
+        },
+        app: 'planned',
+        pc: 'planned',
+    },
+});