feat(qbittorrent): login compat for v4/v5.0-5.2 and three auth modes

- Login success = HTTP 200 "Ok." or 204 (5.2+); session cookie taken from
  Set-Cookie by name (SID / QBT_SID_<port> / custom) and sent back as-is.
- Failure classes: "Fails." / 401 -> auth; 403 IP ban / 429 -> rate;
  wrong API Key (403) -> auth with hint; 5xx -> protocol.
- Downloader instance auth kind: password / api_key (qB 5.2+ Bearer, no
  /auth/login) / none (whitelisted subnet); stored in settings.authKind,
  credential write-only in secret_ref, cleared when switching to none.
  One qbAuthConfig() shared by sync, agent capability and connection test.
- Settings form: auth kind select, password / API Key fields (no echo).
- testkit: mock qB 5.2 login behaviour, IP ban, bypassAuth;
  makeTorrent({ realPieces }) builds real piece hashes for real qB checks.
- Real-container matrix (QB_REAL, skipped by default): 5.1.2 and 5.2.4,
  login / add / query / tags / pause-resume / delete keeping data.

Co-Authored-By: Claude Opus 5.5 <[email protected]>

packages/testkit/src/qbittorrent/bencode.ts

@@ -65,8 +65,14 @@ export interface MakeTorrentInput {
   pieceLength?: number;
   private?: boolean;
   announce?: string;
-  /** 改变伪 pieces 内容,用于构造同名同大小但 infohash 不同的种子 */
+  /** 改变伪 pieces 内容,用于构造同名同大小但 infohash 不同的种子(realPieces 时也参与确定性内容生成) */
   pieceSeed?: number;
+  /**
+   * 生成真实 piece hash(可被真 qB 校验通过):true 时按 pieceSeed + 文件路径生成确定性内容,
+   * 也可传函数自定义每个文件的内容(长度须等于 length)。内容随返回值 contents 给出,调用方写盘后 qB 重新校验即完成。
+   * 默认 false:pieces 为伪值,不可真正下载(旧行为)。
+   */
+  realPieces?: boolean | ((path: string, length: number) => Uint8Array);
 }
 
 export interface MadeTorrent {
@@ -75,9 +81,28 @@ export interface MadeTorrent {
   name: string;
   totalSize: number;
   files: { path: string; length: number }[];
+  /** realPieces 时:每个文件的内容(path 同 files[].path,含种子根目录) */
+  contents?: { path: string; bytes: Uint8Array }[];
 }
 
-/** 构造一个合法的 v1 .torrent(pieces 为伪值,不可真正下载)。 */
+/** 确定性伪随机内容(xorshift32),同 seed + path 得到同样字节 */
+export function deterministicContent(seedKey: string, length: number): Uint8Array {
+  let x = 2166136261;
+  for (let i = 0; i < seedKey.length; i++) x = Math.imul(x ^ seedKey.charCodeAt(i), 16777619) >>> 0;
+  if (x === 0) x = 1;
+  const out = new Uint8Array(length);
+  for (let i = 0; i < length; i++) {
+    x ^= x << 13;
+    x >>>= 0;
+    x ^= x >>> 17;
+    x ^= x << 5;
+    x >>>= 0;
+    out[i] = x & 0xff;
+  }
+  return out;
+}
+
+/** 构造一个合法的 v1 .torrent;realPieces 时 pieces 为按内容计算的真实 SHA-1,否则为伪值。 */
 export function makeTorrent(input: MakeTorrentInput): MadeTorrent {
   const pieceLength = input.pieceLength ?? 4 * 1024 * 1024;
   const info: { [k: string]: BVal } = { name: input.name, "piece length": pieceLength };
@@ -90,13 +115,46 @@ export function makeTorrent(input: MakeTorrentInput): MadeTorrent {
     files = [{ path: input.name, length: info.length as number }];
   }
   const total = files.reduce((a, f) => a + f.length, 0);
-  const pieces = Math.max(1, Math.ceil(total / pieceLength));
-  info.pieces = Buffer.alloc(20 * Math.min(pieces, 4), input.pieceSeed ?? 7);
+  let contents: MadeTorrent["contents"];
+  if (input.realPieces) {
+    const gen =
+      typeof input.realPieces === "function"
+        ? input.realPieces
+        : (path: string, length: number) => deterministicContent(`${input.pieceSeed ?? 7}:${path}`, length);
+    contents = files.map((f) => {
+      const bytes = gen(f.path, f.length);
+      if (bytes.length !== f.length) throw new Error(`realPieces: ${f.path} 内容长度 ${bytes.length} ≠ ${f.length}`);
+      return { path: f.path, bytes };
+    });
+    // v1:所有文件按顺序拼成一个字节流,按 piece length 切片逐片 SHA-1
+    const hashes: Buffer[] = [];
+    let h = createHash("sha1");
+    let filled = 0;
+    for (const c of contents) {
+      let off = 0;
+      while (off < c.bytes.length) {
+        const n = Math.min(pieceLength - filled, c.bytes.length - off);
+        h.update(c.bytes.subarray(off, off + n));
+        off += n;
+        filled += n;
+        if (filled === pieceLength) {
+          hashes.push(h.digest());
+          h = createHash("sha1");
+          filled = 0;
+        }
+      }
+    }
+    if (filled > 0 || hashes.length === 0) hashes.push(h.digest());
+    info.pieces = Buffer.concat(hashes);
+  } else {
+    const pieces = Math.max(1, Math.ceil(total / pieceLength));
+    info.pieces = Buffer.alloc(20 * Math.min(pieces, 4), input.pieceSeed ?? 7);
+  }
   if (input.private) info.private = 1;
   const root: { [k: string]: BVal } = { announce: input.announce ?? "https://tracker.example.invalid/announce", info };
   const bytes = bencode(root);
   const hash = createHash("sha1").update(bencode(info)).digest("hex");
-  return { bytes, hash, name: input.name, totalSize: total, files };
+  return { bytes, hash, name: input.name, totalSize: total, files, ...(contents ? { contents } : {}) };
 }
 
 export function makeMagnet(hash: string, name?: string): string {