specific-ai-cli 0.0.0-stage → 0.1.1

package/dist/platforms/xhs/web/resolve.js

@@ -0,0 +1,69 @@
+import { SpecificAIError } from '../../../core/errors.js';
+/**
+ * 参数归一化（AGENTS 4.8）：笔记 / 用户 / 直播间的 ID、URL、分享短链（xhslink.com）、`me`。
+ * 小红书取详情需要 xsec_token，只能从 URL 里带进来（上游 get_note_info(url) 同样从 URL 解析）。
+ */
+const SHORT_RE = /^https?:\/\/(xhslink\.com|xhs\.link)\//i;
+const ID_RE = /^[0-9a-f]{24}$/i;
+/** 分享短链跟一次跳转，取 Location。 */
+async function expand(p, input) {
+    const s = input.trim();
+    if (!SHORT_RE.test(s))
+        return s;
+    const res = await p.http.request({ url: s, redirect: 'manual', cookies: false });
+    return res.headers.get('location') ?? s;
+}
+function query(u) {
+    const out = {};
+    for (const [k, v] of u.searchParams)
+        out[k] = v;
+    return out;
+}
+/** 笔记：24 位 ID，或 /explore/<id>、/discovery/item/<id>、/user/profile/<uid>/<id> 的链接（带 xsec_token）。 */
+export async function resolveNote(p, input) {
+    const s = await expand(p, input);
+    if (ID_RE.test(s))
+        return { id: s, token: '', source: 'pc_feed' };
+    try {
+        const u = new URL(s);
+        const id = u.pathname.split('/').filter(Boolean).at(-1) ?? '';
+        if (ID_RE.test(id)) {
+            const q = query(u);
+            return { id, token: q.xsec_token ?? '', source: q.xsec_source || 'pc_search' };
+        }
+    }
+    catch { }
+    throw new SpecificAIError('USAGE', `无法识别的笔记：${input}`, { hint: '传带 xsec_token 的笔记链接，例如 https://www.xiaohongshu.com/explore/<id>?xsec_token=...' });
+}
+/** 用户：24 位 ID、主页链接 /user/profile/<id>?xsec_token=...，或 `me`。 */
+export async function resolveUser(p, input) {
+    const s = await expand(p, input);
+    if (s === 'me') {
+        const id = p.credential.user?.id;
+        if (!id)
+            throw new SpecificAIError('AUTH_REQUIRED', 'me 表示当前账号，需要先登录', { hint: 'specific-ai xhs auth login' });
+        return { id, token: '', source: '' };
+    }
+    if (ID_RE.test(s))
+        return { id: s, token: '', source: '' };
+    try {
+        const u = new URL(s);
+        const m = /\/user\/profile\/([0-9a-f]{24})/i.exec(u.pathname);
+        if (m) {
+            const q = query(u);
+            return { id: m[1], token: q.xsec_token ?? '', source: q.xsec_source ?? '' };
+        }
+    }
+    catch { }
+    throw new SpecificAIError('USAGE', `无法识别的用户：${input}`, { hint: '传用户 ID（24 位十六进制）或主页链接 https://www.xiaohongshu.com/user/profile/<id>' });
+}
+/** 直播间：房间号（数字）或直播间链接 /livestream/<room_id>。 */
+export async function resolveRoom(p, input) {
+    const s = await expand(p, input);
+    if (/^\d+$/.test(s))
+        return s;
+    const m = /\/livestream\/(?:[^/?]+\/)?(\d+)/.exec(s) ?? /[?&]room_id=(\d+)/.exec(s);
+    if (m)
+        return m[1];
+    throw new SpecificAIError('USAGE', `无法识别的直播间：${input}`, { hint: '传房间号或直播间链接' });
+}

package/dist/platforms/xhs/web/state.js

@@ -0,0 +1,368 @@
+import * as rand from '../../../core/rand.js';
+import { generateB1 } from './js.js';
+import { CREATOR_REFERENCE, PC_REFERENCE } from './profile.js';
+/**
+ * 签名要用的设备 / 会话状态（上游 xhs_pc/state.py 的 PcDeviceProfile、xhs_creator/state.py 的 CreatorDeviceProfile）。
+ *
+ * 会话状态（loadts、dsllt、MNS seq、tiga 时间、webSsk、tab 设备 ID……）对应浏览器的 localStorage / sessionStorage，
+ * 持久部分存在凭证的 `device.pc` / `device.creator`；和上游 from_cookie 一样，MNS seq 每条命令从 0 开始。
+ */
+export const DS_REFRESH_MS = 15 * 60 * 1000;
+const tail = (hex) => [...Buffer.from(hex, 'hex')];
+const material = (v) => ({ tier: String(v.tier), envConst: Number(v.envConst), envFpTail: tail(v.envFpTailHex), deviceTag: v.deviceTag });
+/** 浏览器写 ets 时避开末位是 1 的毫秒数。 */
+export const normalizeEts = (t) => (t % 10 === 1 ? t + 1 : t);
+/** 32 位随机数：上游 `secrets.randbits(32)`。 */
+export const randbits32 = () => Math.floor(rand.random() * 2 ** 32);
+/** JS 的数字转字符串（与 Python `str(float)` 在这些值上一致：整数不带 .0）。 */
+const num = (v) => String(v);
+// ================================================================ PC
+const PC_STAGE_BY_TIER = { '0201': 'security', '0101': 'coldContent', '0301': 'steadyContent' };
+/** b1 的 19 字段采集器状态（上游 B1RuntimeState）。 */
+function pcB1State(startedAt, profileName = '') {
+    const v = { ...PC_REFERENCE.b1Reference, ...(profileName ? PC_REFERENCE.b1Profiles[profileName] : {}) };
+    const overrides = { ...(v.overrides ?? {}) };
+    for (const k of ['x37', 'x38', 'x82'])
+        if (k in v)
+            overrides[k] = String(v[k]);
+    return {
+        frameCount: Number(v.frameCount),
+        x39: Number(v.x39),
+        x50: String(v.x50),
+        secCanvas: String(v.secCanvas),
+        generatedAtOffsetMs: v.generatedAtOffsetMs != null ? Number(v.generatedAtOffsetMs) : null,
+        selectedGlobalNames: [...v.selectedGlobalNames],
+        timeOrigin: startedAt + Number(v.timeOriginOffsetMs ?? 0),
+        telemetryProfile: String(v.telemetryProfile ?? 'active'),
+        telemetryTemplate: String(v.telemetryTemplate ?? ''),
+        mouse: { ...(v.mouse ?? {}) },
+        keyboard: { ...(v.keyboard ?? {}) },
+        page: { ...(v.page ?? {}) },
+        state: { ...(v.state ?? {}) },
+        features: { ...(v.features ?? {}) },
+        overrides,
+    };
+}
+function pcB1Options(s, now) {
+    const overrides = { ...s.overrides, x36: String(s.frameCount) };
+    if (s.telemetryTemplate)
+        overrides.x84 = s.telemetryTemplate.replace('__TIME_ORIGIN__', num(s.timeOrigin));
+    return {
+        now,
+        x39: s.x39,
+        x50: s.x50,
+        secCanvas: s.secCanvas,
+        windowKeys: s.selectedGlobalNames,
+        telemetry: { profile: s.telemetryProfile, timeOrigin: s.timeOrigin, mouse: s.mouse, keyboard: s.keyboard, page: s.page, state: s.state, features: s.features },
+        overrides,
+    };
+}
+export class PcState {
+    cookies = {};
+    loadts = 0;
+    dsllt = 0;
+    ets = 0;
+    seq = 0;
+    fingerprintReady = false;
+    lastTiga = 0;
+    p1 = 0;
+    sc = 0;
+    tabDeviceId = '';
+    rwpFingerprint = '';
+    rwpToken = null;
+    webSsk = '';
+    webBuild;
+    release;
+    stages;
+    b1;
+    named = new Map();
+    /** cookies 是上游 cookie_map（不含 host-only 的 acw_tc），local / session 是持久化的 storage。 */
+    constructor(cookies, local = {}, session = {}) {
+        this.cookies = { ...cookies };
+        const started = Number(cookies.loadts || rand.now());
+        this.loadts = started;
+        this.dsllt = Number(local.dsllt || started);
+        this.ets = Number(cookies.ets || normalizeEts(started));
+        this.fingerprintReady = Boolean(cookies.gid);
+        this.lastTiga = Number(local.last_tiga_update_time || 0);
+        this.p1 = Number(local.p1 || 0);
+        this.sc = Number(local.sc || 0);
+        this.tabDeviceId = session.XHS_TAB_DEVICE_ID || '';
+        this.rwpFingerprint = session.XHS_RWP_FINGERPRINT || '';
+        try {
+            this.rwpToken = local.RWP_LOGIN_TOKEN ? JSON.parse(local.RWP_LOGIN_TOKEN) : null;
+        }
+        catch {
+            this.rwpToken = null;
+        }
+        this.webSsk = local.webSsk || '';
+        // 上游 ensure_tab_device_id：没有时消耗一次 uuid4
+        this.tabDeviceId ||= rand.uuid4();
+        this.rwpFingerprint ||= String(started);
+        this.b1 = pcB1State(started);
+        this.release = { ...PC_REFERENCE.release };
+        this.webBuild = cookies.webBuild || this.release.webBuild;
+        this.stages = Object.fromEntries(Object.entries(PC_REFERENCE.mnsStages).map(([k, v]) => [k, material(v)]));
+    }
+    /** 上游 update_cookies：跟进 loadts / ets / websectiga / gid 带来的状态变化。 */
+    updateCookies(updates) {
+        const oldTiga = this.cookies.websectiga;
+        Object.assign(this.cookies, updates);
+        if (updates.webBuild)
+            this.webBuild = updates.webBuild;
+        if (updates.loadts)
+            this.loadts = Number(updates.loadts);
+        if (updates.ets)
+            this.ets = Number(updates.ets);
+        if (updates.websectiga && updates.websectiga !== oldTiga)
+            this.lastTiga = rand.now();
+        if (updates.gid)
+            this.fingerprintReady = true;
+    }
+    /** 签名 JS 能看到的 document.cookie：去掉 HttpOnly 的登录态。 */
+    get documentCookie() {
+        const hidden = new Set(['acw_tc', 'web_session', 'secure_session', 'id_token', 'customer-sso-sid', 'access-token-creator.xiaohongshu.com', 'galaxy_creator_session_id']);
+        return Object.entries(this.cookies)
+            .filter(([k]) => !hidden.has(k))
+            .map(([k, v]) => `${k}=${v}`)
+            .join('; ');
+    }
+    resolveTier(api, explicit) {
+        if (explicit)
+            return explicit;
+        if (this.fingerprintReady)
+            return '0301';
+        if (api.includes('/api/sec/v1/') || api.includes('/api/redcaptcha/') || api.includes('sem_sdk'))
+            return '0201';
+        return '0101';
+    }
+    /** 上游 next_sign_context：MNS 档位、环境常量、seq 自增、随机 version。 */
+    nextSignContext(api, options = {}) {
+        const tier = this.resolveTier(api, options.tier);
+        const m = options.mnsProfile ? material(PC_REFERENCE.loginMnsProfiles[options.mnsProfile]) : this.stages[PC_STAGE_BY_TIER[tier]];
+        const now = rand.now();
+        const context = {
+            tier,
+            now,
+            version: randbits32(),
+            loadts: this.loadts,
+            seq: ++this.seq,
+            envConst: m.envConst,
+            envFpTail: m.envFpTail,
+            webBuild: this.webBuild,
+            signVersion: this.release.signVersion,
+            appId: this.release.appId,
+            platform: this.release.platform,
+            userAgent: this.release.userAgent,
+            secChUa: this.release.secChUa,
+        };
+        if (this.webSsk)
+            context.webSsk = this.webSsk;
+        return context;
+    }
+    currentB1(now, profileName) {
+        if (!profileName)
+            return generateB1(pcB1Options(this.b1, now));
+        const cached = this.named.get(profileName);
+        if (cached)
+            return cached;
+        const s = pcB1State(this.loadts, profileName);
+        const at = s.generatedAtOffsetMs != null ? this.loadts + s.generatedAtOffsetMs : now;
+        const value = generateB1(pcB1Options(s, at));
+        this.named.set(profileName, value);
+        return value;
+    }
+    dslPair(dsl, now) {
+        if (now - this.dsllt >= DS_REFRESH_MS)
+            this.dsllt = now;
+        return `${this.dsllt};${dsl}`;
+    }
+    profileDataOptions(now) {
+        return {
+            fields: {},
+            timestampMs: now,
+            ets: this.ets,
+            documentCookie: this.documentCookie,
+            timeOrigin: this.loadts + Number(PC_REFERENCE.webProfile.timeOriginOffsetMs ?? 0),
+        };
+    }
+    /** 持久化的 localStorage / sessionStorage。 */
+    storage() {
+        const local = { dsllt: String(this.dsllt), last_tiga_update_time: String(this.lastTiga), p1: String(this.p1), sc: String(this.sc) };
+        if (this.webSsk)
+            local.webSsk = this.webSsk;
+        if (this.rwpToken)
+            local.RWP_LOGIN_TOKEN = JSON.stringify(this.rwpToken);
+        return { local, session: { XHS_TAB_DEVICE_ID: this.tabDeviceId, XHS_RWP_FINGERPRINT: this.rwpFingerprint } };
+    }
+}
+// ================================================================ Creator
+/** Creator 页面的 b1 采集器（上游 CreatorB1RuntimeState；传了 started_at 的都不抖动）。 */
+function creatorB1State(startedAt, profileName = 'login') {
+    const v = { ...CREATOR_REFERENCE.b1Reference, ...(['', 'login', 'default'].includes(profileName) ? {} : CREATOR_REFERENCE.b1Profiles[profileName]) };
+    return {
+        frameCount: Number(v.frameCount),
+        x39: Number(v.x39),
+        x50: String(v.x50),
+        x51: String(v.x51 ?? ''),
+        generatedAtOffsetMs: v.generatedAtOffsetMs != null ? Number(v.generatedAtOffsetMs) : null,
+        secCanvas: String(v.secCanvas),
+        x37: String(v.x37),
+        x38: String(v.x38),
+        selectedGlobalNames: [...v.selectedGlobalNames],
+        timeOrigin: startedAt + Number(v.timeOriginOffsetMs ?? 0),
+        mouse: { ...(v.mouse ?? {}) },
+        keyboard: { ...(v.keyboard ?? {}) },
+        page: { ...(v.page ?? {}) },
+        state: { ...(v.state ?? {}) },
+        features: { ...(v.features ?? {}) },
+    };
+}
+const atom = (v) => (v == null ? 'null' : v === true ? 'true' : v === false ? 'false' : String(v));
+const mapText = (v) => Object.entries(v).map(([k, x]) => `${k}:${atom(x)}`).join(',');
+function creatorTelemetry(s) {
+    const f = { ae: null, ak: null, cdr: null, bf: null, fi: null, ...s.features };
+    const bf = f.bf == null ? 'null' : `{ar:${atom(f.bf.ar)},fr:${atom(f.bf.fr)}}`;
+    return (`{mt:{to:${num(s.timeOrigin)}},m:{${mapText(s.mouse)}},k:{${mapText(s.keyboard)}},p:{${mapText(s.page)}},st:{${mapText(s.state)}},` +
+        `ft:{ae:${atom(f.ae)},ak:${atom(f.ak)},cdr:${atom(f.cdr)},bf:${bf},fi:${atom(f.fi)}}}`);
+}
+function creatorB1Options(s, now) {
+    return {
+        now,
+        x39: s.x39,
+        x50: s.x50,
+        x51: s.x51,
+        secCanvas: s.secCanvas,
+        overrides: { x36: String(s.frameCount), x37: s.x37, x38: s.x38, x82: s.selectedGlobalNames.join('|').slice(0, 300), x84: creatorTelemetry(s) },
+    };
+}
+const DOCUMENT_COOKIE_ORDER = ['ets', 'a1', 'webId', 'gid', 'abRequestId', 'webBuild', 'xsecappid', 'websectiga', 'sec_poison_id', 'loadts'];
+export class CreatorState {
+    cookies;
+    loadts;
+    dsllt;
+    ets;
+    seq;
+    securityReady;
+    p1;
+    sc;
+    b1b1;
+    dsl = '';
+    dsProgram = '';
+    release;
+    /** 构造时的页面加载时刻：默认 b1 采集器的 timeOrigin 以它为基准（上游 b1_state 在构造时创建）。 */
+    started;
+    named = new Map();
+    constructor(cookies, local = {}, dsl = '') {
+        this.cookies = { ...cookies };
+        const started = Number(cookies.loadts || rand.now());
+        this.started = started;
+        this.loadts = started;
+        this.dsllt = Number(local.dsllt || started);
+        this.ets = Number(cookies.ets || started);
+        this.seq = Number(local.mns_seq || 0);
+        this.dsl = dsl;
+        this.securityReady = Boolean(cookies.websectiga || cookies.gid || dsl);
+        this.p1 = Number(local.p1 || 0);
+        this.sc = Number(local.sc || 0);
+        this.b1b1 = local.b1b1 || '1';
+        this.release = { ...CREATOR_REFERENCE.release };
+    }
+    updateCookies(updates) {
+        Object.assign(this.cookies, updates);
+        if (updates.loadts)
+            this.loadts = Number(updates.loadts);
+        if (updates.ets)
+            this.ets = Number(updates.ets);
+        if (updates.websectiga || updates.gid)
+            this.securityReady = true;
+    }
+    get documentCookie() {
+        return DOCUMENT_COOKIE_ORDER.filter((k) => k in this.cookies).map((k) => `${k}=${this.cookies[k]}`).join('; ');
+    }
+    activateSecurity(dsl, program, at = rand.now()) {
+        this.dsl = dsl;
+        if (program)
+            this.dsProgram = program;
+        this.dsllt = at;
+        this.securityReady = true;
+    }
+    /** 上游 resolve_mns_material：档位与按路由区分的环境常量，不推进 seq。 */
+    resolveMaterial(tier, mnsProfile) {
+        const resolved = tier ?? (this.securityReady ? '0101' : '0201');
+        const stage = resolved === '0201' ? 'bootstrap' : 'ready';
+        let m = material(CREATOR_REFERENCE.mnsStages[stage]);
+        if (mnsProfile)
+            m = material(CREATOR_REFERENCE.mnsProfiles[mnsProfile]);
+        if (resolved === '0101' && !['login_early', 'login_callback'].includes(mnsProfile ?? '')) {
+            const key = mnsProfile ?? '';
+            let env;
+            if (key === 'publish_user_info')
+                env = 1337;
+            else if (key === 'publish_mountable')
+                env = 1341;
+            else if (['publish_permit', 'publish_permit_image', 'publish_permit_video'].includes(key))
+                env = 1349;
+            else if (['note_manager', 'note_manager_steady'].includes(key))
+                env = m.envConst;
+            else if (key === 'login_ready')
+                env = 1350;
+            else
+                env = 1351;
+            m = { ...m, envConst: env };
+        }
+        return { tier: resolved, material: m };
+    }
+    nextSignContext(tier, mnsProfile) {
+        const r = this.resolveMaterial(tier, mnsProfile);
+        return {
+            tier: r.tier,
+            now: rand.now(),
+            version: randbits32(),
+            loadts: this.loadts,
+            seq: ++this.seq,
+            envConst: r.material.envConst,
+            envFpTail: r.material.envFpTail,
+            deviceTag: r.material.deviceTag,
+            b1b1: this.b1b1,
+            signCount: this.sc,
+            webBuild: this.release.webBuild,
+            signVersion: this.release.signVersion,
+            appId: this.release.appId,
+            platform: this.release.platform,
+            userAgent: this.release.userAgent,
+            secChUa: this.release.secChUa,
+            dsProgram: this.dsProgram,
+        };
+    }
+    currentB1(now, profileName) {
+        if (!profileName)
+            return generateB1(creatorB1Options(creatorB1State(this.started), now));
+        const cached = this.named.get(profileName);
+        if (cached)
+            return cached;
+        const s = creatorB1State(this.loadts, profileName);
+        const at = s.generatedAtOffsetMs != null ? this.loadts + s.generatedAtOffsetMs : now;
+        const value = generateB1(creatorB1Options(s, at));
+        this.named.set(profileName, value);
+        return value;
+    }
+    dslPair(now) {
+        if (now - this.dsllt >= DS_REFRESH_MS)
+            this.dsllt = now;
+        return `${this.dsllt};${this.dsl || 'undefined'}`;
+    }
+    profileDataOptions(location, referer) {
+        return {
+            timestampMs: rand.now(),
+            timeOrigin: creatorB1State(this.started).timeOrigin,
+            documentCookie: this.documentCookie,
+            location,
+            referer,
+            fields: {},
+        };
+    }
+    storage() {
+        return { dsllt: String(this.dsllt), p1: String(this.p1), sc: String(this.sc), b1b1: this.b1b1 };
+    }
+}

package/dist/platforms/xianyu/index.js

@@ -0,0 +1,59 @@
+import { z } from 'zod';
+import { filter, visibility } from '../../core/options.js';
+import { definePlatform, handlers } from '../../core/registry.js';
+/** 懒加载 web 端的 handler：只有执行到这条命令时才加载实现。 */
+const { h, impl } = handlers(() => import('./web/commands.js'));
+export default definePlatform({
+    id: 'xianyu',
+    name: '闲鱼',
+    aliases: ['goofish', 'xy'],
+    item: '闲置商品',
+    endpoints: {
+        web: {
+            login: { methods: ['qrcode', 'cookie'], default: 'qrcode' },
+            commands: {
+                'auth login': impl('full', 'authLogin'),
+                'auth status': impl('full', 'authStatus'),
+                'user get': impl('partial', 'userGet', { note: '只支持 me；查询他人规划中' }),
+                'user items': 'none',
+                'user collects': 'none',
+                'user follow': 'none',
+                'user unfollow': 'none',
+                'item get': impl('full', 'itemGet'),
+                'item search': 'none',
+                'item related': 'none',
+                'item list': 'none',
+                'item collect': 'none',
+                'item uncollect': 'none',
+                'item publish': impl('full', 'itemPublish', {
+                    supports: ['title', 'text', 'image', 'visibility', 'price'],
+                    options: {
+                        // 商品发布即上架，没有「仅自己可见」
+                        visibility: visibility('public'),
+                        shipping: z.enum(['free', 'distance', 'fixed', 'none']).default('free').describe('运费：free 包邮、distance 按距离计费、fixed 一口价、none 无需邮寄'),
+                        postage: z.number().nonnegative().optional().describe('一口价运费（元），配合 --shipping fixed'),
+                        pickup: z.boolean().optional().describe('支持自提'),
+                        originalPrice: z.number().positive().optional().describe('原价（元），配合 --price'),
+                    },
+                }),
+                'item delete': 'none',
+                'item categories': 'none',
+                'feed list': { upstream: 'none', options: { kind: filter.kind('recommend') } },
+                'keyword suggest': 'none',
+                'msg list': 'none',
+                'msg history': impl('full', 'msgHistory'),
+                'msg send': impl('full', 'msgSend', {
+                    note: '--to 不带 --item 时按上游的默认商品建会话；--to 加 --item 就这件商品联系对方（卖家可以联系买家）',
+                }),
+                'msg listen': impl('full', 'msgListen'),
+                'msg read': 'none',
+                'msg revoke': 'none',
+                'msg delete': 'none',
+                'media upload': impl('full', 'mediaUpload'),
+                'history list': 'none',
+            },
+        },
+        app: 'planned',
+        pc: 'planned',
+    },
+});