双轨口令红包：碳基答题，硅基被劝退

#!/usr/bin/env node
/**
 * 走完 claim.closeai.moe 的碳基（human）路线并解开最后的密文，取出红包口令。
 *
 * 这条链路的每一步参数都由服务端在 /api/human/final 里直白给出：
 *   password = kdfPassword（8 行 "Q{n}:VALUE"，LF 连接，逐字节保留）
 *   salt     = fragment_2 + fragment_5 + fragment_8   (fragments[1],[4],[7])
 *   iv       = SHA256(fragment_1 + fragment_4)[0:12]  (fragments[0],[3])
 *   key      = PBKDF2-HMAC-SHA256(password, salt, iterations, 32)
 *   plain    = AES-256-GCM_decrypt(base64(ciphertext), key, iv, aad)
 *   record   = base64_decode(plain)      -> 一份 HUMAN PARTICIPANT RECORD
 *   口令      = base64_decode(record 里的 FINAL_DATA)
 *
 * 用法： node solve_dual_track.js [活动地址，默认 https://claim.closeai.moe]
 */
import crypto from 'node:crypto';

const BASE = process.argv[2] || 'https://claim.closeai.moe';
const json = (r) => r.json();
const post = (path, body) =>
  fetch(BASE + path, {
    method: 'POST',
    headers: { 'content-type': 'application/json' },
    body: JSON.stringify(body),
  }).then(json);

async function main() {
  // 1) 进碳基路线
  let d = await fetch(BASE + '/challenge').then(json);
  console.log('题量:', d.total, '| 活动状态:', d.eventState);

  // 2) 逐题作答。每题都选第一个选项即可——所有分支都能继续。
  const answers = [];
  const frags = [];
  for (let i = 0; i < 20; i++) {
    const q = d.question;
    if (!q) break;
    const pick = q.choices[0].value;
    answers.push(pick);
    // 注意：第一步的 token 在 token，之后每一步都在 nextToken
    d = await post('/api/answer', { token: d.token || d.nextToken, answer: pick });
    if (d.fragment !== undefined) frags.push(d.fragment);
    if (d.done) break;
  }
  console.log('已答:', answers.length, '题 | 收集碎片:', frags.length);

  // 3) 取解密材料
  const fin = await post('/api/human/final', { token: d.nextToken || d.token });
  if (fin.error) throw new Error(fin.message || 'final 失败');
  const F = (fin.fragments || frags).map(String);

  // 4) 按服务端给出的步骤解密
  const password = Buffer.from(fin.kdfPassword, 'utf8');
  const salt = Buffer.from(F[1] + F[4] + F[7], 'hex');
  const iv = crypto.createHash('sha256').update(Buffer.from(F[0] + F[3], 'hex')).digest().subarray(0, 12);
  const key = crypto.pbkdf2Sync(password, salt, fin.iterations, fin.keyLength, 'sha256');

  const raw = Buffer.from(fin.ciphertext, 'base64');
  const decipher = crypto.createDecipheriv('aes-256-gcm', key, iv);
  decipher.setAAD(Buffer.from(fin.aad, 'utf8'));
  decipher.setAuthTag(raw.subarray(raw.length - 16));
  const plain = Buffer.concat([decipher.update(raw.subarray(0, raw.length - 16)), decipher.final()]).toString('utf8');

  const record = Buffer.from(plain, 'base64').toString('utf8');
  console.log('\n===== HUMAN PARTICIPANT RECORD =====');
  console.log(record);

  const m = record.match(/FINAL_DATA:\s*\n\s*([A-Za-z0-9+/=]+)/);
  if (!m) throw new Error('record 里没找到 FINAL_DATA');
  const passcode = Buffer.from(m[1], 'base64').toString('utf8');
  console.log('===== 口令 =====');
  console.log(passcode);
}

main().catch((e) => {
  console.error('失败:', e.message);
  process.exit(1);
});