mirror of
https://github.com/wiltodelta/remove-ai-watermarks.git
synced 2026-08-09 23:50:40 +02:00
The visible-mark path had grown three copies of one ladder sweep, four
near-identical `detect` arms, and four hand-rolled `footprint_mask` overrides;
mark knowledge sat in five hand-maintained tables across three modules; and the
flagship `all`/`batch` pipeline existed only in cli.py, written twice with
divergent behavior.
Detection is now one measurement. `_ladder_best` replaces the three sweeps,
`_scan`/`_verdict` replace the four arms, and the winning box travels to the
mask on `TextMarkDetection.match_box` instead of being swept a second time.
`detect_both` returns the strict and relaxed verdicts from one scan, which
halves the arbiter's perception cost (260 -> 130 matchTemplate calls on a 2048²
image, verdicts identical field for field). A per-mark demotion goes in the new
`_post_gate` hook, never in a `detect` override -- an override is invisible to
the single-pass path, which is how the RunningHub and Yuanbao anchor gates
briefly stopped applying.
Everything about a mark is now one registry row: product, label regime, the
platform sentence `identify` reports, the metadata signals that confirm it, and
its TC260 producer codes. `identify._VISIBLE_MARK_PLATFORM`, the signal mapping
in `api.visible_provenance`, `_PRODUCT_OF` and the pill veto are derived from
those rows.
`api.remove_all` / `api.remove_batch` are the library form of the `all` and
`batch` commands; the CLI is a wrapper that owns console text and exit codes.
Progress is a `(stage, detail)` pair of stable tokens, so the CLI keys its
wording off structure rather than parsing the library's prose back.
Two intentional behavior changes, both verified against a recorded 811-image
sample of detector verdicts, removal-mask hashes, arbiter decisions and
`identify` reports:
* A TC260 label now relaxes the vendor its `ContentProducer` names rather than
ByteDance's pair on every China-AIGC image. 333 of 811 samples move; on 185
of them the previously relaxed pair was simply the wrong vendor, and the
mark actually present never reached the relaxed gate its own
`provenance_ncc_factor` was calibrated for.
* A confident LibLibAI detection suppresses the Jimeng pill, like every other
TC260 product's mark. It was registered alongside RunningHub and Baidu, both
of which were added to the hand-written veto list, and it was not. 1 sample
moves, and it is exactly the co-firing case.
Nothing else in that record changes: detector verdicts, mask hashes and
`identify` verdicts are byte-identical, and all 200 calibration constants are
untouched.
Also: `aigc_label` and friends plus `extract_c2pa_info` are memoized on
(path, mtime_ns, size) -- size because this package rewrites in place; the
native TC260 container readers route on magic bytes instead of the file
extension, so a mislabeled AVI or FLV is no longer invisible; `identify` shares
one pixel decode between the DWT-DCT and visible stages (TrustMark keeps its own
Pillow decode, which is not substitutable); and the six `stabilize_*` video
wrappers collapse into one policy table.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
154 lines
5.7 KiB
Python
154 lines
5.7 KiB
Python
"""LibLibAI visible watermark detector/localizer.
|
|
|
|
LibLibAI (哩布哩布AI, USCC 91110105MACJ6K1C8A) stamps its generations with a
|
|
white triangle logo + "LibLibAI" latin wordmark at **bottom-center** (not a
|
|
corner -- the locate box is horizontally centered). Detection matches the
|
|
bundled font-rendered "LibLibAI" silhouette (the triangle logo is NOT rendered
|
|
-- logos vary, the wordmark discriminates); removal is the shared **localize ->
|
|
fill** (the glyph blob covers logo + wordmark, both bright).
|
|
|
|
This module supplies only LibLibAI's tuned :class:`TextMarkConfig`
|
|
(``assets/liblib_alpha.png`` from ``scripts/render_vendor_silhouettes.py``,
|
|
never cut from an upload).
|
|
|
|
The detector uses an Arial-class synthetic silhouette, width-based geometry, a
|
|
strict confidence gate, and a minimum image size. The footprint includes both
|
|
the logo and wordmark.
|
|
"""
|
|
# The module-level _alpha_template / _glyph_silhouette / _template_match_score below
|
|
# are thin test-facing shims (imported by tests/), so pyright's src-only pass sees them
|
|
# as unused; the use is cross-module.
|
|
# pyright: reportUnusedFunction=false
|
|
|
|
from __future__ import annotations
|
|
|
|
from typing import TYPE_CHECKING, Any
|
|
|
|
from remove_ai_watermarks import _text_mark_engine
|
|
from remove_ai_watermarks._text_mark_engine import (
|
|
TextMarkConfig,
|
|
TextMarkDetection,
|
|
TextMarkEngine,
|
|
TextMarkLocation,
|
|
TextMarkScan,
|
|
)
|
|
|
|
if TYPE_CHECKING:
|
|
from numpy.typing import NDArray
|
|
|
|
# Locate geometry as a fraction of the image WIDTH (measured basis). The box is
|
|
# horizontally centered (corner="bc") and covers the logo + wordmark with NCC
|
|
# slack around the measured 0.10 width.
|
|
WM_WIDTH_FRAC = 0.20
|
|
WM_HEIGHT_FRAC = 0.09
|
|
MARGIN_BOTTOM_FRAC = 0.02
|
|
|
|
# Glyph appearance: white wordmark on a usually-darker background (white
|
|
# top-hat), same overlay class as Doubao -- inherited, harmless because the
|
|
# tophat front-end turns these gates into weights.
|
|
MAX_SATURATION = 55
|
|
LOGO_MIN_LUMA = 150
|
|
TOPHAT_DELTA = 12
|
|
|
|
DETECT_MIN_COVERAGE = 0.04 # unused by the tophat front-end (kept for config parity)
|
|
# Calibrated against vendor and clean compatibility examples. The Arial-class
|
|
# silhouette separates the wordmark from generic Latin UI text.
|
|
DETECT_NCC_THRESHOLD = 0.42
|
|
|
|
# Detection-silhouette geometry (fraction of the frame width): the wordmark,
|
|
# measured 0.10 wide with aspect 0.26.
|
|
_ALPHA_WIDTH_FRAC = 0.10
|
|
_ALPHA_HEIGHT_FRAC = 0.026
|
|
|
|
# Tight ladder: the NCC comb is sharp in size (see runninghub_engine).
|
|
_LADDER = (0.9, 1.0, 1.1)
|
|
|
|
_CONFIG = TextMarkConfig(
|
|
name="LibLibAI",
|
|
asset_name="liblib_alpha.png",
|
|
corner="bc",
|
|
margin_floor=4,
|
|
width_frac=WM_WIDTH_FRAC,
|
|
height_frac=WM_HEIGHT_FRAC,
|
|
margin_x_frac=0.0, # unused for corner="bc" (horizontally centered)
|
|
margin_bottom_frac=MARGIN_BOTTOM_FRAC,
|
|
max_saturation=MAX_SATURATION,
|
|
logo_min_luma=LOGO_MIN_LUMA,
|
|
tophat_delta=TOPHAT_DELTA,
|
|
morph_open_size=5,
|
|
detect_min_coverage=DETECT_MIN_COVERAGE,
|
|
detect_ncc_threshold=DETECT_NCC_THRESHOLD,
|
|
detect_frontend="tophat",
|
|
scale_basis="width",
|
|
ladder=_LADDER,
|
|
alpha_width_frac=_ALPHA_WIDTH_FRAC,
|
|
alpha_height_frac=_ALPHA_HEIGHT_FRAC,
|
|
min_gw=8,
|
|
# STRICT ONLY: small cohort, the relaxed band is unmeasured.
|
|
provenance_ncc_factor=1.0,
|
|
)
|
|
|
|
|
|
def _alpha_template() -> NDArray[Any] | None:
|
|
"""The bundled LibLibAI alpha template (float [0,1]), or None."""
|
|
return _text_mark_engine.load_alpha_template(_CONFIG.asset_name)
|
|
|
|
|
|
class LibLibEngine(TextMarkEngine):
|
|
"""Detect/localize the visible LibLibAI wordmark (bottom-center; localize -> fill)."""
|
|
|
|
# Per-mark size floor prevents small generic icons from matching the wordmark.
|
|
_MIN_SHORT_SIDE = 480
|
|
|
|
def __init__(self) -> None:
|
|
super().__init__(_CONFIG)
|
|
|
|
def _scan(self, image: NDArray[Any] | None) -> TextMarkScan:
|
|
"""Skip the scan entirely below the size floor.
|
|
|
|
Gating the SCAN rather than overriding ``detect`` is what keeps the floor on the
|
|
single-pass perception path too, and it means a small image costs nothing.
|
|
"""
|
|
if image is None or not image.size or min(image.shape[:2]) < self._MIN_SHORT_SIDE:
|
|
return TextMarkScan(None, None, 0)
|
|
return super()._scan(image)
|
|
|
|
def _footprint_rect(
|
|
self,
|
|
image: NDArray[Any],
|
|
loc: TextMarkLocation,
|
|
*,
|
|
force: bool,
|
|
detection: TextMarkDetection | None,
|
|
) -> tuple[int, int, int, int] | None:
|
|
"""Bound the fill by the detector's match box, never by the binary glyph blob.
|
|
|
|
The base class's blob-bbox footprint is wrong in both directions here: the
|
|
blob bleeds UP into bright background structure (on the 768x1024 cohort
|
|
frame it reached y 931 and the fill ate the shirt's own print) and it does
|
|
not own the triangle logo anyway.
|
|
"""
|
|
return self._match_box_rect(image, loc, force=force, detection=detection)
|
|
|
|
def _extend_match_box(
|
|
self, box: tuple[int, int, int, int], loc: TextMarkLocation, frame: tuple[int, int]
|
|
) -> tuple[int, int, int, int]:
|
|
"""Extend the match box LEFT to take in the triangle logo.
|
|
|
|
The match box bounds the wordmark exactly (that is what the NCC localized);
|
|
the logo sits its own height to the LEFT of the text (measured on the cohort
|
|
zoom: logo ~1.0x the glyph height, gap ~0.3x), so the footprint is the match
|
|
box extended left by ~1.3 heights.
|
|
"""
|
|
gx0, gy0, gx1, gy1 = box
|
|
bx, by, _bw, _bh = loc.bbox
|
|
h, w = frame
|
|
gh = gy1 - gy0 + 1
|
|
pad = max(3, int(0.25 * gh))
|
|
return (
|
|
max(0, bx + gx0 - int(1.3 * gh)), # the triangle logo, left of the text
|
|
max(0, by + gy0 - pad),
|
|
min(w, bx + gx1 + 1 + pad),
|
|
min(h, by + gy1 + 1 + pad),
|
|
)
|