feat(monitor): 抖音 Web 接口客户端 —— 绕开爬虫子进程，直接发 HTTP

移植自 mac-agent-os 的 mediacrawler_adapter：不起子进程、不开页面，用浏览器里那份
登录态直接调抖音 Web 接口。产物键名照抄 store/douyin，所以 ingest 那条链路一个字不用改。

**目前能用的（真环境实测，非推断）**：

    profile/other : 200, 7075 字节  —— 博主主页指标（粉丝/获赞/作品数/昵称）
    aweme/detail  : 200, 45425 字节 —— 单条作品详情（含点赞/评论/收藏/分享）

**目前不能用的：作品列表 `aweme/post`。** 两个互相独立的原因：
  1. 这个接口被抖音单独升级成了真校验：不带 x-tt-argus 回 403「Uifid Not Found」，
     带上 dummy 值回 200 + **空 body**。也就是说「头在不在」骗得过，「真校验」过不了。
     同一套头打 profile/other 和 aweme/detail 都是通的 —— 抖音是挑着接口加保护的，
     挑中的恰好是「批量拉作品列表」这个最敏感的动作。
  2. 改走页面截获也不行：CDP 浏览器打开博主主页会落到「验证码中间页」（当天大量探测的
     代价，过几小时要重测）。

  所以现在的边界是：**已知作品的指标刷新能做，自动发现新作品做不了**。

**排查中控住变量后得到的两条事实**（都写进注释了）：
  · `Accept` / `Accept-Language` / `Referer` 才是主页接口能返回真数据的原因 —— 只有
    UA+client hints+Cookie 时是 200 但仅 121 字节的空壳，补上这三个头变 7074 字节。
    （我先前猜的 sec-ch-ua 不是关键。）
  · 因此 UA 与 client hints 必须**成套地取自同一个浏览器**，所以 BrowserIdentity 一次
    从 CDP 取齐 cookie + UA + hints，而不是各自写死。

「200 + 空 body 必须当场报错」也是刻意写死的：放过去它会在下游变成「这个博主没作品」，
把一次失败伪装成一条正常结果 —— 爬虫那条路正是这么栽的，还被翻译成「账号被封」。

测试 +11：cookie 解析、请求头成套性（含 uifid 缺失/回退）、产物键名与 store 对齐、
以及 _get 的三条失败路径（空 body / 403 带网关原话 / 正常返回）。

mac-agent-os-main/05_tools/09_ave/scripts/person_swap/api.py

@@ -0,0 +1,324 @@
+"""
+person_swap/api.py — 阿里云百炼 Wan2.2-Animate 人物置换异步任务封装
+
+人物置换(全身身份替换, 非换脸):
+    原视频(人物A表演/动作) + 目标人物参考图(人物B 形象/衣着) → 输出「人物B 保留 A 动作姿态」的新视频
+
+DashScope 异步任务通用流程:
+    1. POST /api/v1/uploads?model={model}   上传素材(参考图/源视频) → 拿文件 URL
+    2. POST .../video-generation/video-synthesis (X-DashScope-Async: enable)
+       提交 {model, input, parameters} → output.task_id
+    3. GET /api/v1/tasks/{task_id} 轮询 → SUCCEEDED 取 video_url
+    4. 下载成片到本地
+
+⚠️ 状态说明(2026-09-05 实测):
+    - 本机 key 可鉴权, 但账号 Arrearage(欠费) — 需在百炼控制台充值后恢复
+    - model id 与 input 字段名待开通后校准: 豆包展示名 "Wan2.2-Animate(-mix-std/pro)"
+      API id 疑似 wan2.2-animate-mix-std; 若报 Model not exist, 以控制台模型广场为准更新配置
+"""
+import sys, os, time
+from pathlib import Path
+
+import httpx
+
+# ── 顶层目录约定: 本包位于 09_ave/scripts/person_swap/, 依赖 scripts/lib/* ──
+_SCRIPTS = Path(__file__).resolve().parent.parent
+if str(_SCRIPTS) not in sys.path:
+    sys.path.insert(0, str(_SCRIPTS))
+
+from lib.logger import get_logger
+from lib.config import load_config
+
+logger = get_logger("person_swap")
+
+DASHSCOPE_BASE = "https://dashscope.aliyuncs.com"
+# Wan2.2-Animate-Mix(视频换人) 走 image2video 路径(非 video-generation, 2026-10-02 实测)
+SYNTHESIS_URL = f"{DASHSCOPE_BASE}/api/v1/services/aigc/image2video/video-synthesis"
+TASK_URL = f"{DASHSCOPE_BASE}/api/v1/tasks/{{task_id}}"
+TASK_CANCEL_URL = f"{DASHSCOPE_BASE}/api/v1/tasks/{{task_id}}/cancel"
+UPLOAD_URL = f"{DASHSCOPE_BASE}/api/v1/uploads"
+
+
+def get_api_key() -> str:
+    """读取百炼 API key (local.yaml 的 aliyun.api_key, 优先环境变量覆盖)"""
+    env = os.environ.get("DASHSCOPE_API_KEY", "")
+    if env:
+        return env
+    cfg = load_config()
+    return (cfg.get("aliyun", {}) or {}).get("api_key", "")
+
+
+def get_model() -> str:
+    """人物置换模型 id — 配置 person_swap.model (官方名 wan2.2-animate-mix, 2026-10-02 校准)"""
+    cfg = load_config()
+    ps = cfg.get("person_swap", {}) or {}
+    return ps.get("model", "wan2.2-animate-mix")
+
+
+def get_mode() -> str:
+    """生成档位 std(¥0.6/秒) | pro(¥0.9/秒, 增强版) — 配置 person_swap.mode"""
+    cfg = load_config()
+    ps = cfg.get("person_swap", {}) or {}
+    return ps.get("mode", "std")
+
+
+# ════════════════════════════════════════════════════════════
+# 账号状态探活 (供页面展示「账号是否可生成」)
+# ════════════════════════════════════════════════════════════
+
+def check_account_status() -> dict:
+    """探测百炼账号可用性(最小真实调用, 零费用)
+
+    注意: GET /models 在欠费账号下仍返回 200, 必须发一个最小 chat 请求才能探到
+    Arrearage — 欠费账号连免费模型(qwen-turbo)都会被拒。
+
+    返回: {"status": "ok"|"arrears"|"unconfigured"|"error", "detail": str, "model": str}
+    """
+    ak = get_api_key()
+    if not ak or ak == "sk-xxx":
+        return {"status": "unconfigured", "detail": "未配置百炼 API Key (agent-local/tools/ave/config/local.yaml → aliyun.api_key)"}
+    try:
+        # 最小 chat 请求(qwen-turbo 有免费额度; 欠费会 Arrearage)
+        r = httpx.post(f"{DASHSCOPE_BASE}/compatible-mode/v1/chat/completions",
+                       headers={"Authorization": f"Bearer {ak}", "Content-Type": "application/json"},
+                       json={"model": "qwen-turbo",
+                             "messages": [{"role": "user", "content": "hi"}],
+                             "max_tokens": 1},
+                       timeout=20, trust_env=False)
+        if r.status_code == 200:
+            return {"status": "ok", "detail": "账号可用(qwen-turbo 探测通过)", "model": get_model()}
+        body = r.text[:300]
+        if "Arrearage" in body or "overdue" in body or "good standing" in body:
+            return {"status": "arrears", "detail": "账号欠费/状态不良(Arrearage), 需到百炼控制台充值或解除冻结", "model": get_model()}
+        return {"status": "error", "detail": f"HTTP {r.status_code}: {body}", "model": get_model()}
+    except Exception as e:
+        return {"status": "error", "detail": f"探测异常: {e}", "model": get_model()}
+
+
+# ════════════════════════════════════════════════════════════
+# 文件上传
+# ════════════════════════════════════════════════════════════
+
+def upload_file(api_key: str, file_path: str, model: str = "") -> str:
+    """上传素材到百炼(两步式, 2026-10-02 实测校准)
+
+    DashScope 文件上传不是直接 POST /api/v1/uploads(会 405), 正确流程:
+      1. GET /api/v1/uploads?action=getPolicy&model={model}
+         → 返回 OSS 直传凭证: policy / signature / upload_dir / upload_host / oss_access_key_id
+      2. POST {upload_host} (multipart 表单直传 OSS)
+         → 字段: OSSAccessKeyId / policy / signature / key / x-oss-object-acl / file
+      3. 返回 oss://{key} 供模型 input 引用
+
+    返回: "oss://dashscope-instant/.../filename.ext"
+    """
+    model = model or get_model()
+    p = Path(file_path)
+
+    # ── 1) 获取上传凭证 ──
+    r = httpx.get(f"{UPLOAD_URL}?action=getPolicy&model={model}",
+                  headers={"Authorization": f"Bearer {api_key}"}, timeout=30, trust_env=False)
+    if r.status_code != 200:
+        raise RuntimeError(f"百炼获取上传凭证失败 HTTP {r.status_code}: {r.text[:300]}")
+    d = r.json().get("data") or {}
+    upload_host = d.get("upload_host", "")
+    upload_dir = d.get("upload_dir", "")
+    if not (upload_host and upload_dir):
+        raise RuntimeError(f"百炼上传凭证字段缺失: {str(d)[:300]}")
+    key = f"{upload_dir}/{p.name}"   # upload_dir 每次含 uuid → key 天然唯一
+
+    # ── 2) 直传 OSS ──
+    form = {
+        "OSSAccessKeyId": d.get("oss_access_key_id", ""),
+        "policy": d.get("policy", ""),
+        "signature": d.get("signature", ""),
+        "key": key,
+        "x-oss-object-acl": d.get("x_oss_object_acl", "private"),
+        "x-oss-forbid-overwrite": "true",
+    }
+    with open(p, "rb") as f:
+        r2 = httpx.post(upload_host, data=form,
+                        files={"file": (p.name, f, "application/octet-stream")},
+                        timeout=300, trust_env=False)
+    if r2.status_code not in (200, 201, 204):
+        raise RuntimeError(f"百炼 OSS 直传失败 HTTP {r2.status_code}: {r2.text[:300]}")
+
+    oss_url = f"oss://{key}"
+    logger.info("  上传成功: %s → %s", p.name, oss_url[:70])
+    return oss_url
+
+
+# ════════════════════════════════════════════════════════════
+# 任务提交 / 轮询 / 下载
+# ════════════════════════════════════════════════════════════
+
+def build_input(model: str, ref_image_url: str, source_video_url: str,
+                prompt: str = "", duration: int = 0) -> dict:
+    """构造人物置换 input — 字段名由 2026-10-02 实测确认(image2video 接口)
+
+    失败任务详情明确要求: input.image_url & input.video_url & parameters.mode
+    """
+    inp = {"image_url": ref_image_url, "video_url": source_video_url}
+    if prompt:
+        inp["prompt"] = prompt   # 可选(部分档位支持文字引导)
+    return inp
+
+
+def build_parameters(model: str, duration: int = 0, aspect_ratio: str = "9:16") -> dict:
+    """构造 parameters — mode 为必填档位(std/pro), 由 2026-10-02 实测确认"""
+    cfg = load_config()
+    ps = cfg.get("person_swap", {}) or {}
+    params = {"mode": ps.get("mode", "std")}
+    if duration and duration > 0:
+        params["duration"] = duration
+    return params
+
+
+def submit_task(api_key: str, model: str, ref_image_url: str, source_video_url: str,
+                prompt: str = "", duration: int = 0) -> str:
+    """提交人物置换任务, 返回 task_id"""
+    payload = {
+        "model": model,
+        "input": build_input(model, ref_image_url, source_video_url, prompt, duration),
+        "parameters": build_parameters(model, duration),
+    }
+    headers = {
+        "Authorization": f"Bearer {api_key}",
+        "Content-Type": "application/json",
+        "X-DashScope-Async": "enable",
+        # 引用百炼自有 OSS 资源(oss://) 需此 header 解析
+        "X-DashScope-OssResourceResolve": "enable",
+    }
+    logger.info("提交人物置换: model=%s mode=%s 时长=%ss", model, payload["parameters"].get("mode"), duration or "auto")
+    r = httpx.post(SYNTHESIS_URL, headers=headers, json=payload, timeout=60, trust_env=False)
+    if r.status_code != 200:
+        raise RuntimeError(f"百炼提交失败 HTTP {r.status_code}: {r.text[:400]}")
+    task_id = (r.json().get("output") or {}).get("task_id", "")
+    if not task_id:
+        raise RuntimeError(f"百炼提交返回无 task_id: {r.text[:400]}")
+    return task_id
+
+
+def cancel_task(api_key: str, task_id: str) -> bool:
+    """取消任务(DashScope: POST /api/v1/tasks/{id}/cancel)"""
+    try:
+        r = httpx.post(TASK_CANCEL_URL.format(task_id=task_id),
+                       headers={"Authorization": f"Bearer {api_key}"}, timeout=20, trust_env=False)
+        return r.status_code == 200
+    except Exception:
+        return False
+
+
+def poll_task(api_key: str, task_id: str, timeout_sec: int = 900, interval: int = 10,
+              progress_cb=None) -> dict:
+    """轮询任务直到完成/失败/超时
+
+    返回: {"status": "SUCCEEDED"|"FAILED"|"TIMEOUT", "video_url": str, "message": str}
+    progress_cb(percent:int, note:str) 可选回调
+    """
+    headers = {"Authorization": f"Bearer {api_key}"}
+    deadline = time.time() + timeout_sec
+    last_note = ""
+    while time.time() < deadline:
+        r = httpx.get(TASK_URL.format(task_id=task_id), headers=headers, timeout=30, trust_env=False)
+        if r.status_code != 200:
+            raise RuntimeError(f"查询任务失败 HTTP {r.status_code}: {r.text[:300]}")
+        data = r.json()
+        out = data.get("output") or {}
+        status = out.get("task_status", "")
+        if status == "SUCCEEDED":
+            video_url = out.get("video_url", "")
+            if not video_url:
+                results = out.get("results", [])
+                if isinstance(results, list) and results:
+                    video_url = results[0].get("video_url", "") or results[0].get("url", "")
+                elif isinstance(results, dict):
+                    video_url = results.get("video_url", "") or results.get("url", "")
+            if progress_cb:
+                progress_cb(100, "生成完成")
+            return {"status": "SUCCEEDED", "video_url": video_url, "message": out.get("message", "")}
+        if status == "FAILED":
+            msg = out.get("message", "") or out.get("code", "") or "未知错误"
+            if progress_cb:
+                progress_cb(0, f"失败: {msg}")
+            return {"status": "FAILED", "video_url": "", "message": msg}
+        # 估算进度(无标准进度字段时用耗时粗估)
+        pct = min(95, int((time.time() - (deadline - timeout_sec)) / timeout_sec * 100))
+        note = out.get("task_status", status)
+        if note != last_note:
+            last_note = note
+            logger.info("  [%s] 任务状态: %s", task_id[:8], status)
+        if progress_cb:
+            progress_cb(pct, f"生成中({status})")
+        time.sleep(interval)
+    return {"status": "TIMEOUT", "video_url": "", "message": f"轮询超时(>{timeout_sec}s)"}
+
+
+def download_file(url: str, output_path: str) -> str:
+    """下载成片到本地"""
+    os.makedirs(os.path.dirname(output_path) or ".", exist_ok=True)
+    with httpx.stream("GET", url, timeout=600) as resp:
+        resp.raise_for_status()
+        with open(output_path, "wb") as f:
+            for chunk in resp.iter_bytes(chunk_size=8192):
+                f.write(chunk)
+    return output_path
+
+
+# ════════════════════════════════════════════════════════════
+# 一站式: 上传×2 → 提交 → 轮询 → 下载
+# ════════════════════════════════════════════════════════════
+
+def run_swap(ref_image_path: str, source_video_path: str, output_path: str,
+             prompt: str = "", duration: int = 0,
+             model: str = "", api_key: str = "",
+             timeout_sec: int = 900, progress_cb=None) -> str:
+    """完整跑一次人物置换, 返回成片本地路径
+
+    供 CLI / service worker / 调试脚本直接调用。
+    """
+    model = model or get_model()
+    api_key = api_key or get_api_key()
+    progress_cb = progress_cb or (lambda p, n: None)
+
+    progress_cb(5, "上传参考图")
+    img_url = upload_file(api_key, ref_image_path, model)
+    progress_cb(15, "上传源视频")
+    vid_url = upload_file(api_key, source_video_path, model)
+
+    progress_cb(25, "提交生成任务")
+    task_id = submit_task(api_key, model, img_url, vid_url, prompt, duration)
+
+    progress_cb(30, "生成中(轮询)")
+    result = poll_task(api_key, task_id, timeout_sec=timeout_sec,
+                       progress_cb=lambda p, n: progress_cb(30 + int(p * 0.65), n))
+    if result["status"] != "SUCCEEDED" or not result["video_url"]:
+        raise RuntimeError(f"生成失败: {result['status']} {result['message']}")
+
+    progress_cb(98, "下载成片")
+    download_file(result["video_url"], output_path)
+    progress_cb(100, "完成")
+    return output_path
+
+
+# ── CLI 冒烟测试 ──
+if __name__ == "__main__":
+    import argparse
+    ap = argparse.ArgumentParser(description="百炼人物置换 CLI (需先处理欠费并校准模型id)")
+    ap.add_argument("--image", required=True, help="人物参考图")
+    ap.add_argument("--video", required=True, help="原视频(动作来源)")
+    ap.add_argument("--prompt", default="", help="可选文字描述")
+    ap.add_argument("--duration", type=int, default=5, help="成片时长(秒)")
+    ap.add_argument("--model", default="", help="模型id(默认取配置)")
+    ap.add_argument("--output", default="", help="成片输出路径")
+    args = ap.parse_args()
+
+    st = check_account_status()
+    print("账号状态:", st["status"], "-", st["detail"])
+    if st["status"] != "ok":
+        print("⛔ 账号不可用, 无法生成。处理后重试。")
+        sys.exit(1)
+
+    out = args.output or str(Path.home() / "workbuddy-agent-os/agent-local/runtime/person_swap/outputs/smoke_test.mp4")
+    path = run_swap(args.image, args.video, out, prompt=args.prompt,
+                    duration=args.duration, model=args.model)
+    print(f"\n✅ 成片: {path}")