feat(monitor): 抖音 Web 接口客户端 —— 绕开爬虫子进程，直接发 HTTP

移植自 mac-agent-os 的 mediacrawler_adapter：不起子进程、不开页面，用浏览器里那份登录态直接调抖音 Web 接口。产物键名照抄 store/douyin，所以 ingest 那条链路一个字不用改。 **目前能用的（真环境实测，非推断）**： profile/other : 200, 7075 字节 —— 博主主页指标（粉丝/获赞/作品数/昵称） aweme/detail : 200, 45425 字节 —— 单条作品详情（含点赞/评论/收藏/分享） **目前不能用的：作品列表 `aweme/post`。** 两个互相独立的原因： 1. 这个接口被抖音单独升级成了真校验：不带 x-tt-argus 回 403「Uifid Not Found」，带上 dummy 值回 200 + **空 body**。也就是说「头在不在」骗得过，「真校验」过不了。同一套头打 profile/other 和 aweme/detail 都是通的 —— 抖音是挑着接口加保护的，挑中的恰好是「批量拉作品列表」这个最敏感的动作。 2. 改走页面截获也不行：CDP 浏览器打开博主主页会落到「验证码中间页」（当天大量探测的代价，过几小时要重测）。所以现在的边界是：**已知作品的指标刷新能做，自动发现新作品做不了**。 **排查中控住变量后得到的两条事实**（都写进注释了）： · `Accept` / `Accept-Language` / `Referer` 才是主页接口能返回真数据的原因 —— 只有 UA+client hints+Cookie 时是 200 但仅 121 字节的空壳，补上这三个头变 7074 字节。（我先前猜的 sec-ch-ua 不是关键。） · 因此 UA 与 client hints 必须**成套地取自同一个浏览器**，所以 BrowserIdentity 一次从 CDP 取齐 cookie + UA + hints，而不是各自写死。「200 + 空 body 必须当场报错」也是刻意写死的：放过去它会在下游变成「这个博主没作品」，把一次失败伪装成一条正常结果 —— 爬虫那条路正是这么栽的，还被翻译成「账号被封」。测试 +11：cookie 解析、请求头成套性（含 uifid 缺失/回退）、产物键名与 store 对齐、以及 _get 的三条失败路径（空 body / 403 带网关原话 / 正常返回）。
2026-10-10 17:12:25 +08:00
parent 21ff01b894
commit 2112c1a870
1601 changed files with 367425 additions and 0 deletions
@@ -0,0 +1,55 @@
+# Agent compatibility
+
+Open Film Skills distributes complete, host-neutral Skill folders. Compatibility means preserving the instructions and local resources; it does not guarantee native discovery, identical model behavior or media tools in every host.
+
+```text
+skill-name/
+  SKILL.md
+  references/             when required by the Skill
+  scripts/                deterministic helpers, when present
+  assets/                 when present
+  agents/openai.yaml      optional Codex presentation metadata
+```
+
+## Host routes and evidence
+
+These are the repository's documented installation routes and prior compatibility references. They are not a fresh end-to-end certification of every current client version. Check the selected host's current documentation and the actual result of importing the package.
+
+| Host | Documented route | Evidence boundary |
+|---|---|---|
+| Codex | `$CODEX_HOME/skills/<name>/`, falling back to `~/.codex/skills/<name>/`; installer `--platform codex` or explicit `--target` | The maintainer uses this package model; activation, tool access and a real task still need verification |
+| Claude Code | `~/.claude/skills/<name>/` or project `.claude/skills/<name>/` | Portable package support documented by the host; no claim of current cross-model output parity |
+| TRAE | Project `.agents/skills/<name>/` | Prior official changelog reference; verify the installed client |
+| CodeBuddy Code / IDE | `~/.codebuddy/skills/<name>/` or project `.codebuddy/skills/<name>/` | Prior official package-layout references; verify import and execution |
+| WorkBuddy | Local standalone ZIP import through its Skill UI | Prior import documentation; menu names and package validation may vary by version |
+| Other hosts | Native Skill library if supported; otherwise attach complete instructions and resources | Reading instructions is not native discovery or permission to execute tools |
+
+## Capability requirements
+
+| Task | Required host capability |
+|---|---|
+| Script, visual parameters or prompt text | Read the complete Skill and relevant supplied material |
+| Storyboard 5.6 persistence and recovery | Read/write the explicitly supplied project directory; run its standard-library Python helper |
+| Actual reference images | Authorized image tool, usable result retrieval and visual inspection |
+| Whitebox previs | Python, compatible Blender and actual MP4 decoding; implementation-specific proxies and action gates |
+| Finished AI video | Model access, generation/edit/sound tools, full playback review and applicable permissions |
+| Current market research | Current source access and evidence citation; offline text cannot invent live data |
+| Semantic-layer writing | Explicit current approval, target access, version preservation and readback |
+
+No Skill grants missing credits, account access, publication rights or host permissions. `agents/openai.yaml` is presentation metadata, not a universal execution engine. Experimental isolation is a distribution choice; it does not prove that a host has no local installation.
+
+## Product names
+
+The historical compatibility review distinguished Claude Code from an ambiguous “Cloud Code”, TRAE from Trint, and WorkBuddy from “WorkerBilly”. An unclear product name should be resolved from its actual official product and import format. This repository does not claim native Skill support for a transcription product merely because it can process text.
+
+## Official references
+
+- [Agent Skills specification](https://agentskills.io/specification)
+- [Claude Code Skills](https://code.claude.com/docs/en/skills)
+- [TRAE changelog](https://www.trae.cn/changelog)
+- [CodeBuddy Code Skills](https://www.codebuddy.cn/docs/cli/skills)
+- [CodeBuddy IDE Skills](https://www.codebuddy.cn/docs/ide/Features/Skills)
+- [WorkBuddy Skills](https://www.codebuddy.cn/docs/workbuddy/From-Beginner-to-Expert-Guide/Function-Description/Skills-Market)
+- [Trint product information](https://trint.com/how-to-trint)
+
+See [Installation](INSTALLATION.md) for source versus historical-release choices. Report actual host versions and reproducible outcomes through [Issues](https://github.com/62656456/ai-film-skills/issues).