update

best_annotator/.gitignore

@@ -0,0 +1,4 @@
+__pycache__/
+*.pyc
+server.log
+server.pid

best_annotator/README.md

@@ -0,0 +1,38 @@
+# DDJ 最佳结果标注
+
+一个局域网内使用的小工具，递归读取 `SKING_DDJ_Dataset` 的 source 与同目录、同编号的多个 result。Python 3.10+ 标准库即可启动；3D 预览依赖已随工具附带，无需连接 CDN 或安装 Node。
+
+```bash
+python3 app.py --root /home/ds/llms/SKING_DDJ_Dataset --host 192.168.0.111 --port 8765
+```
+
+浏览器打开 `http://192.168.0.111:8765`。默认只显示有 result 的待标注条目；“全部”包含没有结果的 source 和 source_err 样例。支持 PNG/JPG/JPEG/WebP。
+
+- 左侧查看 source，也可以切换 edited 中间图；点击图片可放大。
+- 右侧并排显示各版本 3D 皮肤与 UV 贴图。拖动、滚轮和视角按钮会同步各版本；可查看头部、背面、隐藏外层或只看 UV。
+- 点击“选为最佳”或按数字键 1–9，自动保存并进入下一项。
+- “暂时忽略”（S）不写文件，只在本次页面内暂时跳过。下次打开或刷新页面，未标注条目仍可选择。
+- “上一个”（←）可回看刚才的条目。“已标注”筛选中可以重选或撤销。
+- “刷新目录”重新扫描新增/删除的图片；如果原最佳图片已删除，条目会恢复为待标注。
+
+## 标注格式
+
+在对应图片的同一目录写入 UTF-8 文件 `{id}_best.txt`，内容只有选中的 result 文件名和换行，例如：
+
+```text
+14CN7VTM7MBVWXV6_result_v104.png
+```
+
+程序不修改图片。保存会验证 source/result 仍存在，以临时文件 + 原子替换写入，且拒绝覆盖来自另一页面的新选择。撤销只移除当前标注文件。数据以磁盘文件为准，重启服务后仍有效。
+
+部署启动时的后台进程号和日志位于本目录 `server.pid`、`server.log`。重新启动前应先结束原进程，或使用另一个端口。
+
+## 检查
+
+```bash
+python3 -m unittest -v test_app.py
+```
+
+测试使用临时数据，不写真实数据集的标注。
+
+3D 组件：[skinview3d 3.4.2](https://github.com/bs-community/skinview3d)，MIT 许可证，见 `static/vendor/skinview3d-LICENSE`。

best_annotator/app.py

@@ -0,0 +1,258 @@
+#!/usr/bin/env python3
+"""Small local DDJ best-result annotator. Python standard library only."""
+import argparse
+import hashlib
+from http.server import BaseHTTPRequestHandler, ThreadingHTTPServer
+import json
+import mimetypes
+import os
+from pathlib import Path
+import re
+import tempfile
+import threading
+from urllib.parse import parse_qs, quote, unquote, urlsplit
+
+APP_DIR = Path(__file__).resolve().parent
+STATIC_DIR = APP_DIR / 'static'
+SOURCE_RE = re.compile(r'^(?P<id>.+)_source(?P<error>_err)?\.(png|jpe?g|webp)$', re.I)
+RESULT_RE = re.compile(r'^(?P<id>.+?)_result(?:_(?P<version>.+))?\.(png|jpe?g|webp)$', re.I)
+EDITED_RE = re.compile(r'^(?P<id>.+)_edited(?P<error>_err)?\.(png|jpe?g|webp)$', re.I)
+IMAGE_SUFFIXES = {'.png', '.jpg', '.jpeg', '.webp'}
+
+
+class ReviewError(Exception):
+    def __init__(self, message, status=400):
+        super().__init__(message)
+        self.status = status
+
+
+def natural_key(value):
+    return tuple((0, int(x)) if x.isdigit() else (1, x.lower())
+                 for x in re.split(r'(\d+)', value))
+
+
+class Dataset:
+    def __init__(self, root):
+        self.root = Path(root).resolve()
+        if not self.root.is_dir():
+            raise ValueError('数据集目录不存在')
+        self.lock = threading.RLock()
+        self.records = {}
+        self.assets = set()
+        self.scan()
+
+    def _inside_file(self, path):
+        return path.is_file() and not path.is_symlink() and path.resolve().is_relative_to(self.root)
+
+    def scan(self):
+        with self.lock:
+            records, assets = {}, set()
+            def fail(error):
+                raise error
+            for directory, folders, files in os.walk(self.root, followlinks=False, onerror=fail):
+                parent = Path(directory)
+                folders[:] = sorted(x for x in folders
+                    if x not in {'.git', '.cache', '__pycache__'} and (parent / x).resolve() != APP_DIR)
+                sources, result_groups, edited_groups = {}, {}, {}
+                for name in sorted(files):
+                    path = parent / name
+                    if path.suffix.lower() not in IMAGE_SUFFIXES or not self._inside_file(path):
+                        continue
+                    match = SOURCE_RE.fullmatch(name)
+                    if match:
+                        identity = match['id']
+                        previous = sources.get(identity)
+                        if previous is None or (previous[1] and not match['error']):
+                            sources[identity] = (name, bool(match['error']))
+                    result = RESULT_RE.fullmatch(name)
+                    if result:
+                        result_groups.setdefault(result['id'], []).append(
+                            {'name': name, 'version': result['version'] or 'original', 'path': path})
+                    edited_match = EDITED_RE.fullmatch(name)
+                    if edited_match and (edited_match['id'] not in edited_groups or not edited_match['error']):
+                        edited_groups[edited_match['id']] = path
+                for identity, (source, error) in sources.items():
+                    folder = str(parent.relative_to(self.root))
+                    key = hashlib.sha256((folder + '/' + identity).encode()).hexdigest()[:24]
+                    results = result_groups.get(identity, [])
+                    edited = edited_groups.get(identity)
+                    results.sort(key=lambda x: (x['version'] != 'original', natural_key(x['version']), x['name']))
+                    record = {'key': key, 'id': identity, 'folder': folder, 'source': parent / source,
+                              'source_error': error, 'edited': edited, 'results': results,
+                              'best_path': parent / (identity + '_best.txt')}
+                    records[key] = record
+                    assets.add(record['source'])
+                    if edited is not None:
+                        assets.add(edited)
+                    assets.update(x['path'] for x in results)
+            self.records = dict(sorted(records.items(), key=lambda kv: (natural_key(kv[1]['folder']), natural_key(kv[1]['id']))))
+            self.assets = assets
+
+    def best_state(self, record):
+        path = record['best_path']
+        if path.is_symlink():
+            raise ReviewError('标注文件是符号链接，已拒绝访问', 409)
+        try:
+            data = path.read_bytes()
+        except FileNotFoundError:
+            return None, 'missing'
+        if len(data) > 8192:
+            raise ReviewError('标注文件异常，大小超过 8 KB', 409)
+        return data.decode('utf-8').strip(), hashlib.sha256(data).hexdigest()
+
+    def media(self, path):
+        if path is None:
+            return None
+        try:
+            stat = path.stat()
+        except FileNotFoundError:
+            return None
+        relative = str(path.relative_to(self.root))
+        return '/media?path=' + quote(relative, safe='') + f'&v={stat.st_mtime_ns}-{stat.st_size}'
+
+    def describe(self, record):
+        value, revision = self.best_state(record)
+        results = [{'name': x['name'], 'version': x['version'], 'url': self.media(x['path'])}
+                   for x in record['results'] if self._inside_file(x['path'])]
+        valid = value is not None and value in {x['name'] for x in results}
+        return {'key': record['key'], 'id': record['id'], 'folder': record['folder'],
+                'source_url': self.media(record['source']), 'source_error': record['source_error'],
+                'edited_url': self.media(record['edited']), 'results': results,
+                'best': value if valid else None, 'invalid_best': bool(value and not valid),
+                'revision': revision, 'best_file': str(record['best_path'].relative_to(self.root))}
+
+    def state(self):
+        with self.lock:
+            items = [self.describe(x) for x in self.records.values() if self._inside_file(x['source'])]
+            stats = {'total': len(items), 'done': sum(x['best'] is not None for x in items),
+                     'pending': sum(bool(x['results']) and x['best'] is None for x in items),
+                     'no_results': sum(not x['results'] for x in items)}
+            return {'items': items, 'stats': stats, 'dataset': str(self.root)}
+
+    def choose(self, key, result_name, expected_revision, clear=False):
+        with self.lock:
+            record = self.records.get(key)
+            if record is None or not self._inside_file(record['source']):
+                raise ReviewError('条目或 source 已被移除，请刷新目录', 404)
+            _, revision = self.best_state(record)
+            if not isinstance(expected_revision, str) or revision != expected_revision:
+                raise ReviewError('该标注已在其他页面被修改，请刷新后重试', 409)
+            path = record['best_path']
+            if path.parent.resolve() != record['source'].parent.resolve():
+                raise ReviewError('无效的保存目录')
+            if clear:
+                path.unlink(missing_ok=True)
+            else:
+                chosen = next((x for x in record['results'] if x['name'] == result_name), None)
+                if chosen is None or not self._inside_file(chosen['path']):
+                    raise ReviewError('请选择当前条目中存在的 result 图片')
+                temporary = None
+                try:
+                    with tempfile.NamedTemporaryFile(mode='w', encoding='utf-8', newline='\n',
+                            prefix='.' + path.name + '.', suffix='.tmp', dir=path.parent, delete=False) as stream:
+                        temporary = Path(stream.name)
+                        stream.write(result_name + '\n')
+                        stream.flush()
+                        os.fsync(stream.fileno())
+                    os.replace(temporary, path)
+                finally:
+                    if temporary is not None:
+                        temporary.unlink(missing_ok=True)
+            return self.describe(record)
+
+    def resolve_media(self, relative):
+        path = self.root / relative
+        if path not in self.assets or not self._inside_file(path):
+            raise ReviewError('图片不存在', 404)
+        return path
+
+
+def make_server(dataset, host, port):
+    class Handler(BaseHTTPRequestHandler):
+        server_version = 'DDJReview/1.0'
+
+        def send(self, status, data, content_type='application/json; charset=utf-8', cache='no-store'):
+            if not isinstance(data, bytes):
+                data = json.dumps(data, ensure_ascii=False).encode()
+            self.send_response(status)
+            self.send_header('Content-Type', content_type)
+            self.send_header('Content-Length', str(len(data)))
+            self.send_header('Cache-Control', cache)
+            self.send_header('X-Content-Type-Options', 'nosniff')
+            self.send_header('Referrer-Policy', 'same-origin')
+            self.send_header('Content-Security-Policy', "default-src 'self'; script-src 'self'; style-src 'self' 'unsafe-inline'; img-src 'self' data: blob:; connect-src 'self'; object-src 'none'; frame-ancestors 'none'")
+            self.end_headers()
+            self.wfile.write(data)
+
+        def do_GET(self):
+            try:
+                request = urlsplit(self.path)
+                if request.path == '/api/state':
+                    return self.send(200, dataset.state())
+                if request.path == '/api/health':
+                    return self.send(200, {'status': 'ok', 'sources': len(dataset.records)})
+                if request.path == '/media':
+                    relative = parse_qs(request.query).get('path', [''])[0]
+                    with dataset.lock:
+                        path = dataset.resolve_media(relative)
+                    return self.send(200, path.read_bytes(), mimetypes.guess_type(path.name)[0] or 'application/octet-stream', 'private, max-age=3600')
+                name = 'index.html' if request.path == '/' else unquote(request.path).lstrip('/')
+                path = (STATIC_DIR / name).resolve()
+                if not path.is_relative_to(STATIC_DIR) or not path.is_file():
+                    raise ReviewError('文件不存在', 404)
+                return self.send(200, path.read_bytes(), mimetypes.guess_type(path.name)[0] or 'application/octet-stream')
+            except (ReviewError, OSError, UnicodeError) as error:
+                self.send(getattr(error, 'status', 500), {'error': str(error)})
+
+        def do_POST(self):
+            try:
+                origin = self.headers.get('Origin')
+                if origin and urlsplit(origin).netloc != self.headers.get('Host'):
+                    raise ReviewError('不允许跨站修改', 403)
+                if self.headers.get('X-Annotation-Client') != 'ddj-review':
+                    raise ReviewError('缺少客户端标识', 403)
+                if self.headers.get_content_type() != 'application/json':
+                    raise ReviewError('需要 JSON 请求')
+                length = int(self.headers.get('Content-Length', '0'))
+                if not 0 <= length <= 16384:
+                    raise ReviewError('请求过大', 413)
+                body = json.loads(self.rfile.read(length) or b'{}')
+                if not isinstance(body, dict):
+                    raise ReviewError('无效请求')
+                if self.path == '/api/refresh':
+                    dataset.scan()
+                    return self.send(200, dataset.state())
+                if self.path not in {'/api/choose', '/api/clear'}:
+                    raise ReviewError('接口不存在', 404)
+                if not isinstance(body.get('key'), str):
+                    raise ReviewError('缺少条目编号')
+                item = dataset.choose(body['key'], body.get('result'), body.get('revision'), self.path == '/api/clear')
+                return self.send(200, {'item': item})
+            except (ReviewError, OSError, ValueError, UnicodeError) as error:
+                self.send(getattr(error, 'status', 400), {'error': str(error)})
+
+    server = ThreadingHTTPServer((host, port), Handler)
+    server.daemon_threads = True
+    return server
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument('--root', type=Path, default=APP_DIR.parent)
+    parser.add_argument('--host', default='127.0.0.1')
+    parser.add_argument('--port', type=int, default=8765)
+    args = parser.parse_args()
+    dataset = Dataset(args.root)
+    server = make_server(dataset, args.host, args.port)
+    print(json.dumps({'url': f'http://{args.host}:{server.server_port}', 'root': str(dataset.root),
+                      'stats': dataset.state()['stats']}, ensure_ascii=False), flush=True)
+    try:
+        server.serve_forever()
+    except KeyboardInterrupt:
+        pass
+    finally:
+        server.server_close()
+
+
+if __name__ == '__main__':
+    main()

best_annotator/static/app.js

@@ -0,0 +1,359 @@
+'use strict';
+const $ = id => document.getElementById(id);
+const state = {items: [], current: null, filter: 'pending', skipped: new Set(), history: [],
+  viewers: [], busy: false, generation: 0, camera: 'angle', uvOnly: false, sourceTab: 'source', syncing: false};
+let toastTimer;
+
+function toast(message, error = false) {
+  clearTimeout(toastTimer);
+  $('toast').textContent = message;
+  $('toast').classList.toggle('error', error);
+  $('toast').hidden = false;
+  toastTimer = setTimeout(() => { $('toast').hidden = true; }, error ? 6500 : 3200);
+}
+
+async function api(path, body) {
+  const response = await fetch(path, body === undefined ? {} : {method: 'POST',
+    headers: {'Content-Type': 'application/json', 'X-Annotation-Client': 'ddj-review'}, body: JSON.stringify(body)});
+  const data = await response.json();
+  if (!response.ok) throw new Error(data.error || '请求失败，请重试');
+  return data;
+}
+
+function currentItem() { return state.items.find(x => x.key === state.current); }
+function label(result) { return result.version === 'original' ? '原版' : result.version === 'err' ? '原版 · err' : result.version; }
+function matches(item) {
+  if ($('folder').value && item.folder !== $('folder').value) return false;
+  if (!item.id.toLowerCase().includes($('search').value.trim().toLowerCase())) return false;
+  if (state.filter === 'pending') return item.results.length > 0 && !item.best;
+  if (state.filter === 'done') return Boolean(item.best);
+  if (state.filter === 'no_results') return !item.results.length;
+  return true;
+}
+function pool() { return state.items.filter(x => matches(x) && !state.skipped.has(x.key)); }
+
+function updateStats() {
+  const done = state.items.filter(x => x.best).length;
+  const pending = state.items.filter(x => x.results.length && !x.best).length;
+  $('doneCount').textContent = done;
+  $('pendingCount').textContent = pending;
+  $('totalCount').textContent = state.items.length;
+  $('noResultCount').textContent = state.items.filter(x => !x.results.length).length;
+  $('progressText').textContent = `${done} / ${done + pending}`;
+  $('progressFill').style.width = `${done + pending ? done / (done + pending) * 100 : 0}%`;
+  $('sessionNote').textContent = state.skipped.size ? `本次已忽略 ${state.skipped.size} 项 · 下次打开仍可选择` : '忽略不保存，下次打开仍可选择';
+  document.querySelectorAll('[data-filter]').forEach(button => button.classList.toggle('active', button.dataset.filter === state.filter));
+}
+
+function updateJump() {
+  const select = $('jump');
+  select.replaceChildren();
+  const rows = state.items.filter(matches);
+  const current = currentItem();
+  if (current && !rows.some(x => x.key === current.key)) rows.unshift(current);
+  for (const item of rows) {
+    const option = document.createElement('option');
+    option.value = item.key;
+    option.textContent = `${item.best ? '✓ ' : ''}${item.id}${state.skipped.has(item.key) ? ' · 已忽略' : ''}`;
+    select.append(option);
+  }
+  select.value = state.current || '';
+}
+
+function setBusy(busy) {
+  state.busy = busy;
+  document.body.classList.toggle('busy', busy);
+  document.querySelectorAll('.choose-button, #skip, #refresh, #clearBest, #jump, #folder, #search').forEach(x => { x.disabled = busy; });
+  $('previous').disabled = busy || !state.history.length;
+  if (!busy) document.querySelectorAll('.result-card.selected .choose-button').forEach(x => { x.disabled = true; });
+}
+
+function disposeViewers() {
+  state.generation++;
+  for (const entry of state.viewers) {
+    entry.observer.disconnect();
+    entry.viewer.dispose();
+    entry.viewer.renderer.forceContextLoss();
+  }
+  state.viewers = [];
+}
+
+function cameraPreset(viewer) {
+  const camera = viewer.camera;
+  if (state.camera === 'head') {
+    viewer.controls.target.set(0, 10, 0);
+    camera.position.set(10, 12, 18);
+  } else {
+    viewer.controls.target.set(0, 0, 0);
+    const distance = 48;
+    if (state.camera === 'front') camera.position.set(0, 0, distance);
+    else if (state.camera === 'back') camera.position.set(0, 0, -distance);
+    else camera.position.set(23, 7, 42);
+  }
+  camera.lookAt(viewer.controls.target);
+  camera.updateProjectionMatrix();
+  viewer.controls.update();
+}
+
+function applyCamera() {
+  state.syncing = true;
+  try { state.viewers.forEach(x => cameraPreset(x.viewer)); }
+  finally { state.syncing = false; }
+  document.querySelectorAll('[data-camera]').forEach(x => x.classList.toggle('active', x.dataset.camera === state.camera));
+}
+
+function syncCamera(source) {
+  if (state.syncing) return;
+  state.syncing = true;
+  try {
+    for (const {viewer} of state.viewers) {
+      if (viewer === source) continue;
+      viewer.camera.position.copy(source.camera.position);
+      viewer.camera.quaternion.copy(source.camera.quaternion);
+      viewer.camera.zoom = source.camera.zoom;
+      viewer.controls.target.copy(source.controls.target);
+      viewer.camera.updateProjectionMatrix();
+      viewer.controls.update();
+    }
+  } finally { state.syncing = false; }
+}
+
+function createViewer(stage, result, generation) {
+  const status = stage.querySelector('.preview-status');
+  if (!window.skinview3d) { status.textContent = '3D 组件不可用，请查看下方 UV'; return; }
+  let viewer;
+  try {
+    viewer = new skinview3d.SkinViewer({canvas: stage.querySelector('canvas'), width: stage.clientWidth || 220,
+      height: stage.clientHeight || 300, pixelRatio: Math.min(window.devicePixelRatio || 1, 2),
+      renderPaused: state.uvOnly, model: 'default'});
+    viewer.controls.enablePan = false;
+    viewer.controls.enableDamping = false;
+    viewer.controls.minDistance = 12;
+    viewer.controls.maxDistance = 120;
+    viewer.controls.addEventListener('change', () => syncCamera(viewer));
+    const observer = new ResizeObserver(() => {
+      if (!viewer.disposed && stage.clientWidth && stage.clientHeight) {
+        viewer.width = stage.clientWidth;
+        viewer.height = stage.clientHeight;
+      }
+    });
+    observer.observe(stage);
+    state.viewers.push({viewer, observer});
+    Promise.resolve(viewer.loadSkin(result.url, {model: 'default'})).then(() => {
+      if (generation !== state.generation || viewer.disposed) return;
+      viewer.playerObject.skin.setOuterLayerVisible($('outerLayer').checked);
+      status.hidden = true;
+    }).catch(() => {
+      if (generation === state.generation) status.textContent = '此图片无法生成 3D 预览，可查看 UV';
+    });
+  } catch (error) {
+    if (viewer && !viewer.disposed) viewer.dispose();
+    status.textContent = '3D 预览不可用，可查看下方 UV';
+  }
+}
+
+function showImage(url, title, pixelated = false) {
+  $('dialogTitle').textContent = title;
+  $('dialogImage').src = url;
+  $('dialogImage').classList.toggle('pixelated', pixelated);
+  $('imageDialog').showModal();
+}
+
+function renderSource() {
+  const item = currentItem();
+  if (!item) return;
+  if (state.sourceTab === 'edited' && !item.edited_url) state.sourceTab = 'source';
+  $('sourceTab').classList.toggle('active', state.sourceTab === 'source');
+  $('editedTab').classList.toggle('active', state.sourceTab === 'edited');
+  $('editedTab').disabled = !item.edited_url;
+  $('sourceImage').src = state.sourceTab === 'edited' ? item.edited_url : item.source_url;
+  $('sourceImage').alt = `${item.id} 的 ${state.sourceTab} 图片`;
+  $('sourceCaption').textContent = `${state.sourceTab === 'source' ? '原始输入' : '中间生成图'} · 点击放大`;
+  $('sourceFlag').textContent = item.source_error ? 'err 样例' : '';
+}
+
+function show(key, remember = true) {
+  if (state.busy) return;
+  if (remember && state.current && key !== state.current) state.history.push(state.current);
+  state.current = key;
+  disposeViewers();
+  updateStats();
+  updateJump();
+  const item = currentItem();
+  $('workspace').hidden = !item;
+  $('itemHeading').hidden = !item;
+  $('empty').hidden = Boolean(item);
+  $('skip').disabled = !item;
+  $('previous').disabled = !state.history.length;
+  if (!item) {
+    const ignored = state.items.filter(x => matches(x) && state.skipped.has(x.key)).length;
+    $('emptyTitle').textContent = ignored ? '本轮暂时看到这里' : '当前筛选下没有更多条目';
+    $('emptyText').textContent = ignored ? `还有 ${ignored} 项暂时忽略。下次打开工具会重新出现，也可以现在继续查看。` : '可以切换筛选查看已标注条目，或刷新目录读取新增图片。';
+    return;
+  }
+  $('folderLabel').textContent = item.folder;
+  $('itemId').textContent = item.id;
+  $('itemInfo').textContent = `${item.results.length} 个结果版本 · ${item.best ? '已保存最佳结果，可重新选择' : item.invalid_best ? '原标注对应的结果已不存在，请重新选择' : '请选择一个最佳结果，或暂时忽略'}`;
+  $('savedBox').hidden = !item.best && !item.invalid_best;
+  $('savedName').textContent = item.best || '原选择已失效';
+  renderSource();
+  const grid = $('results');
+  grid.replaceChildren();
+  grid.classList.toggle('uv-only', state.uvOnly);
+  if (!item.results.length) {
+    const empty = document.createElement('div');
+    empty.className = 'no-result-card';
+    empty.innerHTML = '<strong>这个 source 暂无 result 图片</strong><p>可以先忽略，生成结果后刷新目录再标注。</p>';
+    grid.append(empty);
+    $('previewHint').hidden = true;
+    return;
+  }
+  $('previewHint').hidden = false;
+  item.results.forEach((result, index) => {
+    const card = document.createElement('article');
+    card.className = 'result-card';
+    card.classList.toggle('selected', item.best === result.name);
+    card.dataset.result = result.name;
+    card.innerHTML = '<div class="result-header"><span class="version-name"></span><span class="version-number"></span></div><div class="skin-stage"><canvas></canvas><span class="preview-status">正在加载 3D…</span></div><div class="uv-area"><button class="uv-button" title="放大 UV 贴图"><img alt=""></button><div class="uv-caption"><strong>UV 贴图</strong><span>点击放大</span></div></div><div class="result-actions"><div class="result-file"></div><button class="choose-button"></button></div>';
+    card.querySelector('.version-name').textContent = label(result);
+    const badge = card.querySelector('.version-number');
+    badge.textContent = index + 1;
+    if (item.best === result.name) { badge.className = 'chosen-badge'; badge.textContent = '已选最佳'; }
+    const image = card.querySelector('img');
+    image.src = result.url;
+    image.alt = `${label(result)} 的 UV 贴图`;
+    card.querySelector('.uv-button').setAttribute('aria-label', `放大 ${label(result)} UV 贴图`);
+    card.querySelector('.uv-button').onclick = () => showImage(result.url, result.name, true);
+    const file = card.querySelector('.result-file');
+    file.textContent = result.name;
+    file.title = result.name;
+    const button = card.querySelector('.choose-button');
+    button.textContent = item.best === result.name ? '当前最佳' : '选为最佳';
+    button.setAttribute('aria-label', `将 ${label(result)} 选为最佳`);
+    button.disabled = item.best === result.name;
+    button.onclick = () => choose(result);
+    grid.append(card);
+    createViewer(card.querySelector('.skin-stage'), result, state.generation);
+  });
+  applyCamera();
+}
+
+function next() {
+  const list = pool();
+  const index = state.items.findIndex(x => x.key === state.current);
+  const after = list.find(x => state.items.indexOf(x) > index);
+  show((after || list.find(x => x.key !== state.current))?.key || null);
+}
+
+async function choose(result) {
+  if (state.busy) return;
+  const item = currentItem();
+  if (!item) return;
+  setBusy(true);
+  try {
+    const data = await api('/api/choose', {key: item.key, result: result.name, revision: item.revision});
+    const index = state.items.findIndex(x => x.key === item.key);
+    state.items[index] = data.item;
+    state.skipped.delete(item.key);
+    setBusy(false);
+    toast(`已保存 ${label(result)} 为最佳 · ${item.id}`);
+    next();
+  } catch (error) {
+    setBusy(false);
+    toast(error.message, true);
+  }
+}
+
+function skip() {
+  if (state.busy || !state.current) return;
+  state.skipped.add(state.current);
+  next();
+}
+
+async function clearBest() {
+  const item = currentItem();
+  if (!item || state.busy) return;
+  setBusy(true);
+  try {
+    const data = await api('/api/clear', {key: item.key, revision: item.revision});
+    state.items[state.items.findIndex(x => x.key === item.key)] = data.item;
+    setBusy(false);
+    show(item.key, false);
+    toast('已撤销选择，恢复为待标注');
+  } catch (error) { setBusy(false); toast(error.message, true); }
+}
+
+async function load(refresh = false) {
+  if (state.busy) return;
+  setBusy(true);
+  try {
+    const data = await api(refresh ? '/api/refresh' : '/api/state', refresh ? {} : undefined);
+    state.items = data.items;
+    const folder = $('folder').value;
+    $('folder').replaceChildren(new Option('所有数据目录', ''));
+    for (const value of [...new Set(state.items.map(x => x.folder))]) $('folder').append(new Option(value.split('/').pop(), value));
+    if ([...$('folder').options].some(x => x.value === folder)) $('folder').value = folder;
+    setBusy(false);
+    const item = currentItem();
+    show(item && matches(item) ? item.key : pool()[0]?.key || null, false);
+    if (refresh) toast(`已刷新 · ${data.stats.total} 个 source`);
+  } catch (error) {
+    setBusy(false);
+    $('itemInfo').textContent = '读取失败，请点击刷新目录重试';
+    toast(error.message, true);
+  }
+}
+
+$('filters').onclick = event => {
+  const button = event.target.closest('[data-filter]');
+  if (!button || state.busy) return;
+  state.filter = button.dataset.filter;
+  show(pool()[0]?.key || null);
+};
+$('folder').onchange = () => { if (!state.busy) show(pool()[0]?.key || null); };
+$('search').oninput = () => { if (!state.busy) show(pool()[0]?.key || null); };
+$('jump').onchange = () => {
+  if (!state.busy) { state.skipped.delete($('jump').value); show($('jump').value); }
+};
+$('refresh').onclick = () => load(true);
+$('skip').onclick = skip;
+$('previous').onclick = () => {
+  if (!state.busy && state.history.length) show(state.history.pop(), false);
+};
+$('clearBest').onclick = clearBest;
+$('sourceTab').onclick = () => { state.sourceTab = 'source'; renderSource(); };
+$('editedTab').onclick = () => { state.sourceTab = 'edited'; renderSource(); };
+$('enlargeSource').onclick = () => {
+  const item = currentItem();
+  if (item) showImage($('sourceImage').src, `${item.id}_${state.sourceTab}`);
+};
+$('closeDialog').onclick = () => $('imageDialog').close();
+$('imageDialog').onclick = event => { if (event.target === $('imageDialog')) $('imageDialog').close(); };
+$('resume').onclick = () => {
+  state.skipped.clear();
+  state.filter = 'pending';
+  $('folder').value = '';
+  $('search').value = '';
+  show(pool()[0]?.key || null);
+};
+document.querySelectorAll('[data-camera]').forEach(button => { button.onclick = () => { state.camera = button.dataset.camera; applyCamera(); }; });
+$('outerLayer').onchange = () => state.viewers.forEach(x => x.viewer.playerObject.skin.setOuterLayerVisible($('outerLayer').checked));
+$('uvMode').onclick = () => {
+  state.uvOnly = !state.uvOnly;
+  $('uvMode').setAttribute('aria-pressed', state.uvOnly);
+  $('uvMode').textContent = state.uvOnly ? '显示 3D' : '只看 UV';
+  $('results').classList.toggle('uv-only', state.uvOnly);
+  state.viewers.forEach(x => { x.viewer.renderPaused = state.uvOnly; });
+};
+document.addEventListener('keydown', event => {
+  if (state.busy || $('imageDialog').open || event.ctrlKey || event.metaKey || event.altKey || event.target.closest('input,select,textarea,[contenteditable]')) return;
+  if (event.key.toLowerCase() === 's') { event.preventDefault(); skip(); }
+  else if (event.key === 'ArrowLeft') { event.preventDefault(); $('previous').click(); }
+  else if (event.key === 'ArrowRight') { event.preventDefault(); next(); }
+  else if (/^[1-9]$/.test(event.key)) {
+    const result = currentItem()?.results[Number(event.key) - 1];
+    if (result) { event.preventDefault(); choose(result); }
+  }
+});
+window.addEventListener('beforeunload', disposeViewers);
+load();

best_annotator/static/index.html

@@ -0,0 +1,58 @@
+<!doctype html>
+<html lang="zh-CN">
+<head>
+  <meta charset="utf-8"><meta name="viewport" content="width=device-width,initial-scale=1">
+  <title>DDJ · 最佳结果标注</title>
+  <link rel="stylesheet" href="/style.css">
+  <script src="/vendor/skinview3d-3.4.2.bundle.js" defer></script>
+  <script src="/app.js" defer></script>
+</head>
+<body>
+  <header class="topbar">
+    <div class="brand"><span class="brand-icon">D</span><div><h1>DDJ 最佳结果标注</h1><p>对照原图，选出最好的皮肤</p></div></div>
+    <div class="progress"><div><span>标注进度</span><strong id="progressText">读取中…</strong></div><div class="progress-track"><i id="progressFill"></i></div></div>
+    <button id="refresh" class="button secondary">刷新目录</button>
+  </header>
+  <section class="filters" aria-label="筛选条目">
+    <div class="segments" id="filters">
+      <button data-filter="pending" class="active">待标注 <b id="pendingCount">–</b></button>
+      <button data-filter="done">已标注 <b id="doneCount">–</b></button>
+      <button data-filter="all">全部 <b id="totalCount">–</b></button>
+      <button data-filter="no_results">无结果 <b id="noResultCount">–</b></button>
+    </div>
+    <select id="folder" aria-label="数据目录"><option value="">所有数据目录</option></select>
+    <input id="search" type="search" placeholder="搜索编号…" aria-label="搜索编号" autocomplete="off">
+  </section>
+  <main>
+    <section class="item-heading" id="itemHeading">
+      <div><span class="eyebrow" id="folderLabel"></span><h2 id="itemId">正在读取数据集</h2><p id="itemInfo"></p></div>
+      <div class="jump"><label for="jump">跳转条目</label><select id="jump" aria-label="跳转条目"></select></div>
+    </section>
+    <div class="workspace" id="workspace" hidden>
+      <aside class="source-panel panel">
+        <div class="panel-title"><div class="source-tabs"><button id="sourceTab" class="active">source · 原图</button><button id="editedTab">edited · 中间图</button></div></div>
+        <button class="source-image-button" id="enlargeSource" title="点击放大图片"><img id="sourceImage" alt="当前条目的 source 原图"></button>
+        <div class="source-caption"><span id="sourceCaption">点击图片放大</span><span id="sourceFlag"></span></div>
+        <div class="saved-box" id="savedBox" hidden><span>当前最佳</span><strong id="savedName"></strong><button id="clearBest" class="text-button">撤销此选择</button></div>
+        <p class="save-note">选择后自动保存到同目录的 <code>{id}_best.txt</code>，并进入下一项。</p>
+      </aside>
+      <section class="comparison">
+        <div class="comparison-toolbar">
+          <div class="camera-buttons"><span>同步视角</span><button data-camera="angle" class="active">斜前</button><button data-camera="front">正面</button><button data-camera="back">背面</button><button data-camera="head">头部</button></div>
+          <div class="view-options"><label><input id="outerLayer" type="checkbox" checked>显示外层</label><button id="uvMode" class="button tiny" aria-pressed="false">只看 UV</button></div>
+        </div>
+        <div class="result-grid" id="results"></div>
+        <p class="preview-hint" id="previewHint">拖动任一模型可同步旋转，滚轮缩放；点击 UV 贴图可放大。</p>
+      </section>
+    </div>
+    <section class="empty panel" id="empty" hidden><span class="empty-icon">✓</span><h2 id="emptyTitle"></h2><p id="emptyText"></p><button id="resume" class="button primary">继续查看待标注</button></section>
+  </main>
+  <footer class="footer">
+    <div class="navigation"><button id="previous" class="button secondary">← 上一个</button><button id="skip" class="button secondary">暂时忽略 →</button></div>
+    <span class="keyboard-hint"><kbd>1</kbd>–<kbd>9</kbd> 选择版本　<kbd>S</kbd> 忽略　<kbd>←</kbd> 回看</span>
+    <div class="session-note" id="sessionNote">忽略不保存，下次打开仍可选择</div>
+  </footer>
+  <div id="toast" class="toast" role="status" aria-live="polite" hidden></div>
+  <dialog id="imageDialog"><div class="dialog-top"><span id="dialogTitle"></span><button id="closeDialog" class="button secondary">关闭 ×</button></div><div class="dialog-image"><img id="dialogImage" alt="放大预览"></div></dialog>
+</body>
+</html>

best_annotator/static/style.css

@@ -0,0 +1 @@
+:root{font-family:Inter,-apple-system,BlinkMacSystemFont,"Segoe UI","PingFang SC","Microsoft YaHei",sans-serif;color:#1f2c3c;background:#f3f5f8;font-size:14px;--accent:#147d72;--border:#dfe5ed;--muted:#758194}*{box-sizing:border-box}body{margin:0}button,input,select{font:inherit}button{cursor:pointer}button:disabled{opacity:.45;cursor:default}button:focus-visible,input:focus-visible,select:focus-visible{outline:3px solid #68b4ac;outline-offset:3px}button{color:inherit}h1,h2,p{margin:0}h1{font-size:19px;letter-spacing:-.4px}h2{font-size:24px;letter-spacing:.3px}button{transition:background .15s,border-color .15s}button:hover:not(:disabled){filter:brightness(.97)}[hidden]{display:none!important}.topbar{display:flex;align-items:center;gap:30px;justify-content:space-between;padding:22px 30px;background:white;border-bottom:1px solid var(--border)}.brand{display:flex;gap:12px;align-items:center}.brand-icon{display:grid;place-items:center;background:#183b39;color:#d5f5ed;border-radius:12px;width:42px;height:42px;font-size:25px;font-weight:750}.brand p{font-size:12px;color:var(--muted);margin-top:5px}.progress{width:235px;margin-left:auto}.progress>div:first-child{display:flex;justify-content:space-between;font-size:12px;margin-bottom:9px;color:var(--muted)}.progress strong{color:var(--accent);font-weight:650}.progress-track{height:5px;background:#e9eeef;border-radius:10px;overflow:hidden}.progress-track i{height:100%;width:0;display:block;background:var(--accent);transition:width .25s}.button{border:1px solid var(--border);border-radius:8px;background:white;padding:10px 15px;font-weight:550;white-space:nowrap}.button.primary{background:var(--accent);border-color:var(--accent);color:white}.button.tiny{padding:6px 11px;font-size:12px}.button.tiny[aria-pressed=true]{color:var(--accent);background:#e4f2ee;border-color:#94c8be}.filters{display:flex;align-items:center;gap:12px;padding:15px 30px;border-bottom:1px solid var(--border);background:#fff}.segments{display:flex;gap:3px;background:#f0f3f6;padding:4px;border-radius:9px;margin-right:auto}.segments button{border:0;background:transparent;border-radius:6px;padding:7px 12px;color:#677284;font-size:13px}.segments button.active{color:#175d55;background:white;box-shadow:0 1px 4px #20304016}.segments b{margin-left:6px;font-size:11px;font-weight:600;opacity:.8}select,input[type=search]{border:1px solid var(--border);border-radius:8px;background:white;padding:9px 11px;color:#48566a;min-width:0}input[type=search]{width:210px}#folder{max-width:255px}main{padding:24px 30px 115px;max-width:1900px;margin:auto}.item-heading{display:flex;align-items:center;justify-content:space-between;gap:20px;margin-bottom:20px}.eyebrow{font-size:11px;color:var(--accent);font-weight:650;letter-spacing:.4px;display:block;margin-bottom:7px}.item-heading p{color:var(--muted);font-size:12px;margin-top:7px}.jump{display:flex;align-items:center;gap:9px;font-size:12px;color:var(--muted)}#jump{max-width:285px}.workspace{display:grid;grid-template-columns:minmax(270px,29%) minmax(0,1fr);gap:24px;align-items:start}.panel{border:1px solid var(--border);border-radius:12px;background:white;overflow:hidden}.panel-title{padding:13px 14px;border-bottom:1px solid var(--border)}.source-tabs{display:flex;gap:4px}.source-tabs button{font-size:12px;border:0;border-radius:6px;background:transparent;color:var(--muted);padding:7px 8px}.source-tabs button.active{background:#eaf4f0;color:#176b5d;font-weight:600}.source-image-button{display:block;width:100%;height:min(33vw,455px);min-height:300px;border:0;padding:16px;background:#fafbfc;cursor:zoom-in}.source-image-button img{height:100%;width:100%;object-fit:contain}.source-caption{display:flex;justify-content:space-between;padding:12px 16px;font-size:11px;color:var(--muted)}#sourceFlag{color:#9a7031}.save-note{padding:15px 16px;border-top:1px solid #edf0f4;color:#8891a1;font-size:11px;line-height:1.8}.save-note code{font-family:monospace;color:#657388}.saved-box{margin:5px 15px 15px;padding:12px;background:#edf7f2;border:1px solid #c6e2d7;border-radius:8px;display:flex;flex-direction:column;gap:7px;font-size:11px;color:#45746a}.saved-box strong{font-size:12px;word-break:break-all;color:#1d6758}.text-button{align-self:start;border:0;background:transparent;padding:0;font-size:11px;text-decoration:underline;color:#6e817b}.comparison-toolbar{display:flex;justify-content:space-between;align-items:center;gap:8px;margin:0 0 13px;min-height:36px;flex-wrap:wrap}.camera-buttons{display:flex;align-items:center;gap:3px}.camera-buttons span{font-size:11px;color:var(--muted);margin-right:7px}.camera-buttons button{font-size:12px;border:1px solid transparent;background:transparent;border-radius:6px;padding:6px 9px;color:#687689}.camera-buttons button.active{background:white;border-color:var(--border);color:#263e49}.view-options{display:flex;align-items:center;gap:12px}.view-options label{display:flex;gap:4px;align-items:center;font-size:11px;color:#687689}input[type=checkbox]{accent-color:var(--accent)}.result-grid{display:grid;grid-template-columns:repeat(auto-fit,minmax(180px,1fr));gap:12px}.result-card{background:white;border:1px solid var(--border);border-radius:12px;overflow:hidden;min-width:0;display:flex;flex-direction:column}.result-card.selected{border:2px solid var(--accent);box-shadow:0 0 0 3px #147d7210}.result-header{display:flex;align-items:center;justify-content:space-between;padding:14px 12px 10px}.version-name{font-size:15px;font-weight:680}.version-number{display:inline-grid;place-items:center;border:1px solid #e1e5eb;border-radius:5px;width:21px;height:21px;font-size:11px;color:#929baa}.chosen-badge{font-size:10px;background:#e3f4ec;color:var(--accent);padding:3px 6px;border-radius:4px}.skin-stage{height:300px;background:radial-gradient(ellipse at 50% 45%,#fff,#edf1f5);position:relative;overflow:hidden}.skin-stage canvas{display:block;width:100%;height:100%;touch-action:none}.preview-status{position:absolute;inset:0;display:grid;place-items:center;padding:20px;color:#85909e;font-size:11px;text-align:center;pointer-events:none}.uv-area{padding:13px 10px;display:flex;align-items:center;justify-content:center;gap:12px;border-top:1px solid #edf0f4}.uv-button{padding:0;border:1px solid #e3e7ed;border-radius:4px;display:block;width:88px;height:88px;background-color:#f8f8f8;background-image:linear-gradient(45deg,#e1e4e8 25%,transparent 25%),linear-gradient(-45deg,#e1e4e8 25%,transparent 25%),linear-gradient(45deg,transparent 75%,#e1e4e8 75%),linear-gradient(-45deg,transparent 75%,#e1e4e8 75%);background-size:16px 16px;background-position:0 0,0 8px,8px -8px,-8px 0;cursor:zoom-in;overflow:hidden}.uv-button img{display:block;width:100%;height:100%;object-fit:contain;image-rendering:pixelated}.uv-caption{display:flex;flex-direction:column;gap:5px;font-size:10px;color:#96a0ad}.uv-caption strong{font-size:11px;color:#738095;font-weight:500}.result-actions{padding:0 12px 13px;margin-top:auto}.result-file{font-size:9px;color:#909aab;margin-bottom:9px;overflow:hidden;text-overflow:ellipsis;white-space:nowrap;font-family:ui-monospace,monospace}.choose-button{width:100%;border-radius:7px;border:1px solid #bdd7cf;color:var(--accent);background:#edf6f2;padding:10px 4px;font-size:12px;font-weight:600}.selected .choose-button{color:white;background:var(--accent);border-color:var(--accent)}.preview-hint{font-size:11px;color:#8a95a6;text-align:center;margin-top:15px;line-height:1.8}.uv-only .skin-stage{display:none}.uv-only .uv-area{min-height:280px;padding:20px 12px;flex-direction:column;border-top:0}.uv-only .uv-button{width:100%;height:auto;aspect-ratio:1;max-width:300px}.uv-only .uv-caption{flex-direction:row}.no-result-card{padding:65px 30px;color:var(--muted);text-align:center;background:white;border:1px dashed #ccd5df;border-radius:12px;grid-column:1/-1}.no-result-card p{font-size:12px;margin-top:10px}.empty{text-align:center;padding:70px 20px;margin-top:30px}.empty-icon{display:grid;place-items:center;width:52px;height:52px;background:#eaf3ed;color:var(--accent);font-size:25px;border-radius:50%;margin:0 auto 18px}.empty h2{font-size:22px}.empty p{color:var(--muted);margin:12px 0 24px;line-height:1.8}.footer{position:fixed;bottom:0;left:0;right:0;background:#ffffffed;backdrop-filter:blur(12px);border-top:1px solid var(--border);padding:15px 30px;display:flex;align-items:center;justify-content:space-between;gap:20px;z-index:5}.navigation{display:flex;gap:10px}.keyboard-hint,.session-note{font-size:11px;color:#8190a0}kbd{font-family:inherit;font-size:10px;border:1px solid #d8dee6;background:#f8fafc;padding:2px 5px;border-radius:4px}.toast{position:fixed;bottom:89px;left:50%;transform:translateX(-50%);max-width:85vw;padding:13px 22px;background:#1f433c;color:white;border-radius:9px;box-shadow:0 5px 22px #0002;z-index:10;font-size:13px}.toast.error{background:#9d3e3e}dialog{border:1px solid var(--border);border-radius:13px;padding:0;max-width:92vw;width:1000px;max-height:92vh;box-shadow:0 20px 100px #0004}dialog::backdrop{background:#14232bb3;backdrop-filter:blur(3px)}.dialog-top{display:flex;align-items:center;justify-content:space-between;padding:15px 20px;border-bottom:1px solid var(--border);gap:20px;font-size:13px}.dialog-image{display:grid;place-items:center;padding:20px;overflow:auto;max-height:80vh;background:#eef0f2}.dialog-image img{display:block;max-width:100%;max-height:73vh;object-fit:contain}.dialog-image img.pixelated{image-rendering:pixelated;width:700px;height:700px}.busy{cursor:progress}@media(min-width:1700px){.skin-stage{height:370px}}@media(max-width:1100px){.workspace{grid-template-columns:280px minmax(0,1fr)}.result-grid{grid-template-columns:repeat(2,minmax(170px,1fr))}.skin-stage{height:255px}.keyboard-hint{display:none}.filters{flex-wrap:wrap}.segments{margin-right:0}main{padding-left:20px;padding-right:20px}.topbar,.filters{padding-left:20px;padding-right:20px}}@media(max-width:700px){.topbar{gap:10px;padding:15px}.brand p,.progress{display:none}.filters{padding:10px 15px}.segments{width:100%;justify-content:space-between}.segments button{padding:6px 8px}#folder,input[type=search]{width:calc(50% - 6px);max-width:none}main{padding:18px 15px 125px}.workspace{display:block}.source-panel{margin-bottom:20px}.source-image-button{height:280px;min-height:0}.item-heading{align-items:start;flex-direction:column;gap:12px}h2{font-size:19px}.jump{width:100%}#jump{max-width:none;flex:1}.result-grid{gap:9px;grid-template-columns:repeat(2,minmax(0,1fr))}.skin-stage{height:255px}.result-header{padding:12px 9px}.uv-area{gap:5px}.uv-button{width:74px;height:74px}.uv-caption{display:none}.footer{padding:12px 15px;flex-wrap:wrap;gap:9px}.navigation{width:100%}.navigation .button{flex:1}.session-note{font-size:10px}.comparison-toolbar{gap:10px}.view-options{margin-left:auto}.source-tabs button{font-size:12px}}

best_annotator/static/vendor/skinview3d-LICENSE

@@ -0,0 +1,22 @@
+MIT License
+
+Copyright (c) 2014-2018 Kent Rasmussen
+Copyright (c) 2017-2022 Haowei Wen, Sean Boult and contributors
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

best_annotator/test_app.py

@@ -0,0 +1,102 @@
+import json
+from pathlib import Path
+import tempfile
+import threading
+import unittest
+from urllib.error import HTTPError
+from urllib.request import Request, urlopen
+
+from app import Dataset, ReviewError, make_server
+
+
+class AnnotationTest(unittest.TestCase):
+    def setUp(self):
+        self.temp = tempfile.TemporaryDirectory()
+        self.root = Path(self.temp.name)
+        for folder in ['v54', 'v61']:
+            parent = self.root / folder
+            parent.mkdir()
+            for name in ['ABC_source.png', 'ABC_result.png', 'ABC_result_v104.png', 'ABC_result_v9.png']:
+                (parent / name).write_bytes(b'fixture image')
+        (self.root / 'v54/NORESULT_source_err.jpg').write_bytes(b'fixture')
+        (self.root / 'v54/ORPHAN_result_v104.png').write_bytes(b'fixture')
+        self.data = Dataset(self.root)
+        self.record = next(r for r in self.data.records.values() if r['folder'] == 'v54' and r['id'] == 'ABC')
+
+    def tearDown(self):
+        self.temp.cleanup()
+
+    def test_source_grouping_versions_and_missing_results(self):
+        state = self.data.state()
+        self.assertEqual(state['stats'], {'total': 3, 'done': 0, 'pending': 2, 'no_results': 1})
+        self.assertEqual([x['version'] for x in self.record['results']], ['original', 'v9', 'v104'])
+        self.assertEqual(len({x['key'] for x in state['items']}), 3)
+
+    def test_selection_survives_restart_and_stays_in_own_directory(self):
+        self.data.choose(self.record['key'], 'ABC_result_v104.png', 'missing')
+        self.assertEqual((self.root / 'v54/ABC_best.txt').read_text(), 'ABC_result_v104.png\n')
+        self.assertFalse((self.root / 'v61/ABC_best.txt').exists())
+        self.assertEqual(Dataset(self.root).state()['stats']['done'], 1)
+
+    def test_missing_source_or_result_is_not_saved(self):
+        (self.root / 'v54/ABC_result_v104.png').unlink()
+        with self.assertRaises(ReviewError):
+            self.data.choose(self.record['key'], 'ABC_result_v104.png', 'missing')
+        (self.root / 'v54/ABC_source.png').unlink()
+        with self.assertRaises(ReviewError):
+            self.data.choose(self.record['key'], 'ABC_result.png', 'missing')
+        self.assertFalse((self.root / 'v54/ABC_best.txt').exists())
+
+    def test_stale_revision_cannot_overwrite_another_selection(self):
+        item = self.data.choose(self.record['key'], 'ABC_result.png', 'missing')
+        with self.assertRaises(ReviewError) as error:
+            self.data.choose(self.record['key'], 'ABC_result_v104.png', 'missing')
+        self.assertEqual(error.exception.status, 409)
+        self.assertEqual((self.root / 'v54/ABC_best.txt').read_text(), 'ABC_result.png\n')
+        self.data.choose(self.record['key'], None, item['revision'], clear=True)
+        self.assertFalse((self.root / 'v54/ABC_best.txt').exists())
+
+    def test_invalid_old_label_is_pending_and_can_be_replaced(self):
+        (self.root / 'v54/ABC_best.txt').write_text('ABC_result_deleted.png\n')
+        item = self.data.describe(self.record)
+        self.assertTrue(item['invalid_best'])
+        self.assertIsNone(item['best'])
+        self.data.choose(self.record['key'], 'ABC_result_v104.png', item['revision'])
+        self.assertEqual(self.data.state()['stats']['done'], 1)
+
+    def test_foreign_files_and_symlink_labels_are_rejected(self):
+        for value in ['../outside.png', '.git/config', '/etc/passwd', 'v54/ABC_best.txt']:
+            with self.assertRaises(ReviewError):
+                self.data.resolve_media(value)
+        target = self.root / 'sentinel.txt'
+        target.write_text('keep')
+        (self.root / 'v54/ABC_best.txt').symlink_to(target)
+        with self.assertRaises(ReviewError):
+            self.data.choose(self.record['key'], 'ABC_result.png', 'missing')
+        self.assertEqual(target.read_text(), 'keep')
+
+    def test_http_save_and_cross_site_write_rejection(self):
+        server = make_server(self.data, '127.0.0.1', 0)
+        thread = threading.Thread(target=server.serve_forever, daemon=True)
+        thread.start()
+        base = f'http://127.0.0.1:{server.server_port}'
+        payload = json.dumps({'key': self.record['key'], 'result': 'ABC_result_v104.png', 'revision': 'missing'}).encode()
+        try:
+            with urlopen(base + '/api/state') as response:
+                self.assertEqual(json.load(response)['stats']['pending'], 2)
+            headers = {'Content-Type': 'application/json', 'X-Annotation-Client': 'ddj-review', 'Origin': 'https://unrelated.invalid'}
+            with self.assertRaises(HTTPError) as error:
+                urlopen(Request(base + '/api/choose', data=payload, headers=headers))
+            self.assertEqual(error.exception.code, 403)
+            self.assertFalse((self.root / 'v54/ABC_best.txt').exists())
+            headers['Origin'] = base
+            with urlopen(Request(base + '/api/choose', data=payload, headers=headers)) as response:
+                self.assertEqual(json.load(response)['item']['best'], 'ABC_result_v104.png')
+        finally:
+            server.shutdown()
+            server.server_close()
+            thread.join()
+
+
+if __name__ == '__main__':
+    unittest.main()

best_annotator/ui_test_server.log

@@ -0,0 +1,56 @@
+{"url": "http://192.168.0.111:8766", "root": "/tmp/ddj_annotator_ui_test_20260908", "stats": {"total": 3, "done": 0, "pending": 3, "no_results": 0}}
+192.168.0.20 - - [08/Sep/2026 14:10:54] "GET / HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:54] "GET /style.css HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:54] "GET /vendor/skinview3d-3.4.2.bundle.js HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:54] "GET /app.js HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:54] "GET /api/state HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_source.png&v=1785854202476209224-49884 HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result.png&v=1785854216811377153-3741 HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v101.png&v=1788692805181181025-3781 HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v103.png&v=1788754100822974529-3916 HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v104.png&v=1788784291365004698-3928 HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:10:55] "GET /favicon.ico HTTP/1.1" 404 -
+192.168.0.20 - - [08/Sep/2026 14:17:46] "GET /api/state HTTP/1.1" 200 -
+192.168.0.20 - - [08/Sep/2026 14:20:00] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:17] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET / HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /style.css HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /vendor/skinview3d-3.4.2.bundle.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /app.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_source.png&v=1785854202476209224-49884 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result.png&v=1785854216811377153-3741 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v101.png&v=1788692805181181025-3781 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v103.png&v=1788754100822974529-3916 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_result_v104.png&v=1788784291365004698-3928 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:18] "GET /favicon.ico HTTP/1.1" 404 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_1%2F1AGTRPP39F8BKQ6E_edited.png&v=1785853906616475203-807286 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "POST /api/choose HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_2%2F1DQW79RUHEPKSQ4N_source.png&v=1785914666946821644-73812 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_2%2F1DQW79RUHEPKSQ4N_result.png&v=1785914680204908405-4149 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_2%2F1DQW79RUHEPKSQ4N_result_v101.png&v=1788692805187181088-4270 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_2%2F1DQW79RUHEPKSQ4N_result_v104.png&v=1788784309394229618-4368 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /media?path=fixture_2%2F1DQW79RUHEPKSQ4N_result_v103.png&v=1788754106841025140-4486 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:21] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /media?path=fixture_3%2F1FPZQAAA9D729PYQ_source.png&v=1785854182160969536-75778 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /media?path=fixture_3%2F1FPZQAAA9D729PYQ_result_v101.png&v=1788692805193181151-3192 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /media?path=fixture_3%2F1FPZQAAA9D729PYQ_result.png&v=1785854220767423325-3078 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /media?path=fixture_3%2F1FPZQAAA9D729PYQ_result_v104.png&v=1788784321421377871-3442 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /media?path=fixture_3%2F1FPZQAAA9D729PYQ_result_v103.png&v=1788754118870125464-3496 HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:22] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:23] "GET / HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:23] "GET /vendor/skinview3d-3.4.2.bundle.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:23] "GET /style.css HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:23] "GET /app.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:23] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:25] "POST /api/choose HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:26] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:27] "POST /api/choose HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "POST /api/clear HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET / HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET /style.css HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET /app.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET /vendor/skinview3d-3.4.2.bundle.js HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:30] "GET /api/state HTTP/1.1" 200 -
+192.168.0.111 - - [08/Sep/2026 14:21:37] "GET /api/state HTTP/1.1" 200 -

entropydrop_website_generations/SKING_DDJ_v54/1AGTRPP39F8BKQ6E_best.txt

@@ -0,0 +1 @@
+1AGTRPP39F8BKQ6E_result_v104.png