fix: 修复听歌打卡接口 (#167)

This reverts commit c959866436.

.github/ISSUE_TEMPLATE/bug_report.yml

@@ -14,17 +14,17 @@ body:
     id: terms
     attributes:
       label: 确认事项
-      description: 在提交Bug报告前，请确认以下事项
+      description: |
+        在提交Bug报告前，请确认以下事项：
+
+        - 我已经搜索了现有的issues，确认这不是重复问题
+        - 我使用的是最新版本的API, 而且是官方发布的版本，而不是fork或修改版
+        - 不处理别人搭建的线上服务的问题,此项目提供任何线上服务不保证质量
+        - 如果不是提建议,提 issues 如果不照着模版来将不会优先处理或放着不管
+        - 维护项目都是业余时间,精力有限,我只能挑容易解决的issues处理,为了节约双方时间,请尽可能提供足够的有用的信息,给的信息不够我只能根据精力和时间看情况处理,如果模板信息看都不看就删掉,我不会进行任何回复,并且一个月后close掉issue
+
       options:
-        - label: 我已经搜索了现有的issues，确认这不是重复问题
-          required: true
-        - label: 我使用的是最新版本的API, 而且是官方发布的版本，而不是fork或修改版
-          required: true
-        - label: 不处理别人搭建的线上服务的问题,此项目提供任何线上服务不保证质量
-          required: true
-        - label: 如果不是提建议,提 issues 如果不照着模版来将不会优先处理或放着不管
-          required: true
-        - label: 维护项目都是业余时间,精力有限,我只能挑容易解决的issues处理,为了节约双方时间,请尽可能提供足够的有用的信息,给的信息不够我只能根据精力和时间看情况处理,如果模板信息看都不看就删掉,我不会进行任何回复,并且一个月后close掉issue
+        - label: 我已确认以上事项
           required: true
 
   - type: input
@@ -36,29 +36,14 @@ body:
     validations:
       required: true
 
-  - type: dropdown
-    id: os
-    attributes:
-      label: 操作系统或平台
-      description: 您在哪个操作系统上遇到了这个问题？
-      options:
-        - Windows 10
-        - Windows 11
-        - Ubuntu 20.04
-        - Ubuntu 22.04
-        - macOS
-        - 其他 Linux 发行版
-        - 使用部署平台或其他 (请在描述中说明)
-    validations:
-      required: true
-
   - type: dropdown
     id: deployment
     attributes:
-      label: 部署平台
-      description: 
+      label: 部署方式
+      description: 此项目支持本地部署和云平台部署，您使用的是哪种方式？
       options:
-        - 我使用的自己的服务器部署
+        - 本机直接运行 (node / pm2)
+        - 本机 Docker 部署
         - Vercel
         - Heroku
         - Railway

.github/ISSUE_TEMPLATE/config.yml

@@ -1,5 +1,8 @@
 blank_issues_enabled: true
 contact_links:
+  - name: ↑请尽量使用议题模板创建议题↑
+    url: https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues/new/choose
+    about: 选择适合的议题模板可以帮助我们更快地定位和解决问题
   - name: 提问的艺术
     url: https://github.com/ryanhanwu/How-To-Ask-Questions-The-Smart-Way/blob/main/README-zh_CN.md
     about: 默认所有 Issues 发起者均已了解此处的内容 

.github/workflows/release-on-version-change.yml

@@ -136,7 +136,7 @@ jobs:
           esac
 
       - name: Upload build artifact
-        uses: actions/upload-artifact@v4
+        uses: actions/upload-artifact@v7
         with:
           name: ${{ matrix.platform }}-binary
           path: release-artifacts/*
@@ -165,17 +165,16 @@ jobs:
           fetch-tags: true
 
       - name: Download build artifacts
-        uses: actions/download-artifact@v4
+        uses: actions/download-artifact@v8
         with:
           path: release-artifacts
+          merge-multiple: true
 
-      - name: Flatten artifacts
+      - name: List flattened artifacts
         shell: bash
         run: |
           mkdir -p final-artifacts
-
-          find release-artifacts -type f -exec cp {} final-artifacts/ \;
-
+          cp release-artifacts/* final-artifacts/
           ls -lah final-artifacts
 
       - name: Generate release notes
@@ -261,13 +260,13 @@ jobs:
         uses: docker/setup-buildx-action@v3
 
       - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           username: ${{ secrets.DOCKERHUB_USERNAME }}
           password: ${{ secrets.DOCKERHUB_TOKEN }}
 
       - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
         with:
           registry: ghcr.io
           username: ${{ github.actor }}
@@ -313,4 +312,4 @@ jobs:
 
       - run: pnpm install --frozen-lockfile
 
-      - run: pnpm publish --access public
+      - run: pnpm publish --access public --provenance 

.github/workflows/sync.yml

@@ -22,7 +22,7 @@ jobs:
       # Step 2: run the sync action
       - name: Sync upstream changes
         id: sync
-        uses: aormsby/Fork-Sync-With-Upstream-action@v3.4.2
+        uses: aormsby/Fork-Sync-With-Upstream-action@v3.4.3
         with:
           upstream_sync_repo: NeteaseCloudMusicApiEnhanced/api-enhanced
           upstream_sync_branch: main

AGENTS.md

@@ -0,0 +1,23 @@
+# Agent Instructions for NeteaseCloudMusicApiEnhanced
+
+## Quick Start
+- **Package Manager**: Use `pnpm` (not npm or yarn).
+- **Node Version**: Requires Node.js 18 or later.
+
+## Developer Commands
+- **Install dependencies**: `pnpm i`
+- **Start server**: `pnpm start` or `node app.js`
+- **Start dev server**: `pnpm dev` (uses nodemon)
+- **Run tests**: `pnpm test` (uses Mocha)
+- **Linting**: `pnpm lint` (check) or `pnpm lint-fix` (auto-fix)
+
+## Architecture & Entrypoints
+- **Executable Server**: `app.js` is the main entrypoint for running the API server.
+- **Module Exports**: `main.js` is the entrypoint when the project is imported as a Node.js dependency.
+- **API Endpoints**: Located in the `module/` directory. Each file typically corresponds to an API route.
+- **Core Utilities**: Request handling, encryption, and core utilities are found in the `util/` directory.
+
+## Important Gotchas & Quirks
+- **Environment Variables**: The server defaults to port 3000 but can be overridden with the `PORT` environment variable.
+- **Proxy Variables**: Be very careful with proxy environment variables (`http_proxy`, `https_proxy`, `no_proxy`). The request library (like axios) will automatically pick these up. If they point to an unavailable proxy (especially common in Docker environments), requests will fail silently or throw connection errors.
+- **Code Style**: The project uses ESLint and Prettier. Always run `pnpm lint-fix` before committing changes to ensure formatting consistency.

Dockerfile

@@ -13,4 +13,4 @@ RUN yarn --network-timeout=100000
 
 EXPOSE 3000
 
-CMD [ "/sbin/tini", "--", "node", "app.js" ]
+CMD [ "/sbin/tini", "--", "node", "app.js" ]

README.MD

@@ -30,7 +30,7 @@
 
 ## 项目简介
 
-网易云音乐第三方 Node.js API, 支持丰富的音乐相关接口，适合自建服务、二次开发和多平台部署(如果原版诈尸, 我会及时同步 or 归档)。
+网易云音乐第三方 Node.js API, 支持丰富的音乐相关接口，适合自建服务、二次开发和多平台部署
 
 > [!IMPORTANT]
 >
@@ -215,7 +215,7 @@ pnpm test
 
 原作者 [Binaryify/NeteaseCloudMusicApi](https://github.com/binaryify/NeteaseCloudMusicApi) 项目为本项目基础 (该项目在`npmjs`网站上仍持续维护, 但 github 仓库已不再更新)
 
-感谢大佬们为逆向eapi, weapi等加密算法所做的贡献
+感谢大佬们为逆向eapi, weapi, xeapi等加密算法所做的贡献
 
 项目参考:
 
@@ -244,6 +244,8 @@ pnpm test
 
 - [Yueby/music-together](https://github.com/Yueby/music-together)
 
+- [chthollyphlie/folia-major](https://github.com/chthollyphile/folia-major)
+
 ## License
 
 [MIT License](https://github.com/MoeFurina/NeteaseCloudMusicApiEnhanced/blob/main/LICENSE)

generateConfig.js

@@ -2,6 +2,7 @@ const fs = require('fs')
 const path = require('path')
 const { register_anonimous } = require('./main')
 const { cookieToJson, generateRandomChineseIP } = require('./util/index')
+const { getXeapiPublicKey } = require('./util/xeapiKey')
 const tmpPath = require('os').tmpdir()
 
 async function generateConfig() {
@@ -20,5 +21,21 @@ async function generateConfig() {
   } catch (error) {
     console.log(error)
   }
+  try {
+    let currentPublicKey = {}
+    try {
+      currentPublicKey = JSON.parse(
+        fs.readFileSync(path.resolve(tmpPath, 'xeapi_public_key'), 'utf-8'),
+      )
+    } catch (_) {}
+    const publicKey = await getXeapiPublicKey(currentPublicKey, global.deviceId)
+    fs.writeFileSync(
+      path.resolve(tmpPath, 'xeapi_public_key'),
+      JSON.stringify(publicKey),
+      'utf-8',
+    )
+  } catch (error) {
+    console.log(error)
+  }
 }
 module.exports = generateConfig

interface.d.ts

@@ -1841,3 +1841,724 @@ export function voice_lyric(
     id: number | string
   } & RequestBaseConfig,
 ): Promise<Response>
+
+export function aidj_content_rcmd(
+  params: {
+    latitude?: string | number
+    longitude?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function album_privilege(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function artist_detail_dynamic(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function artist_follow_count(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function broadcast_category_region_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function broadcast_channel_collect_list(
+  params: MultiPageConfig & RequestBaseConfig,
+): Promise<Response>
+
+export function broadcast_channel_currentinfo(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function broadcast_channel_list(
+  params: {
+    categoryId?: string | number
+    regionId?: string | number
+    lastId?: string | number
+    score?: string | number
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>
+
+export function broadcast_sub(
+  params: {
+    t: SubAction
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function chart_detail(
+  params: {
+    chartCode: string | number
+    targetId: string | number
+    targetType: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function chart_song_detail(
+  params: {
+    chartCode: string | number
+    targetId: string | number
+    targetType: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function cloud_import(
+  params: {
+    md5: string
+    id?: string | number
+    bitrate?: string | number
+    fileSize?: string | number
+    artist?: string
+    album?: string
+    song?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function cloud_lyric_get(
+  params: {
+    uid: string | number
+    sid: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function cloud_upload_complete(
+  params: {
+    songId: string | number
+    resourceId: string | number
+    md5: string
+    filename: string
+    song?: string
+    artist?: string
+    album?: string
+    bitrate?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function cloud_upload_token(
+  params: {
+    md5: string
+    fileSize: string | number
+    filename: string
+    bitrate?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function comment_info_list(
+  params: {
+    ids?: string
+    type?: CommentType
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function comment_report(
+  params: {
+    id: string | number
+    cid: string | number
+    reason: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function creator_authinfo_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function dj_difm_all_style_channel(
+  params: {
+    sources?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function dj_difm_channel_subscribe(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function dj_difm_channel_unsubscribe(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function dj_difm_playing_tracks_list(
+  params: {
+    channelId: string | number
+    limit?: string | number
+    source?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function dj_difm_subscribe_channels_get(
+  params: {
+    sources?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function fanscenter_basicinfo_age_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function fanscenter_basicinfo_gender_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function fanscenter_basicinfo_province_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function fanscenter_overview_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function fanscenter_trend_list(
+  params: {
+    startTime?: string | number
+    endTime?: string | number
+    type?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function lbs_city_code(
+  params: {
+    bizCode?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listen_data_realtime_report(
+  params: {
+    type?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listen_data_report(
+  params: {
+    type?: string
+    endTime?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listen_data_today_song(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function listen_data_total(params: RequestBaseConfig): Promise<Response>
+
+export function listen_data_year_report(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_accept(
+  params: {
+    roomId: string | number
+    inviterId: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_end(
+  params: {
+    roomId: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_heatbeat(
+  params: {
+    roomId: string | number
+    songId: string | number
+    playStatus: string | number
+    progress: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_play_command(
+  params: {
+    roomId: string | number
+    commandType: string | number
+    progress?: string | number
+    playStatus: string | number
+    formerSongId: string | number
+    targetSongId: string | number
+    clientSeq: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_room_check(
+  params: {
+    roomId: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_room_create(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_sync_list_command(
+  params: {
+    roomId: string | number
+    commandType: string | number
+    userId: string | number
+    version: string | number
+    randomList: string
+    displayList: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function listentogether_sync_playlist_get(
+  params: {
+    roomId: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function mlog_music_rcmd(
+  params: {
+    mvid?: string | number
+    songid?: string | number
+    limit?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function music_first_listen_info(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function personal_fm_mode(
+  params: {
+    mode: string
+    submode?: string
+    limit?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playlist_category_list(
+  params: {
+    cat?: string
+    limit?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playlist_detail_rcmd_get(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playlist_import_name_task_create(
+  params: {
+    local?: string
+    importStarPlaylist?: boolean
+    ['name']?: string
+    ['description']?: string
+    ['id']?: string | number
+    ['url']?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playlist_import_task_status(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playlist_privacy(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function playmode_song_vector(
+  params: {
+    ids: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function radio_sport_get(
+  params: {
+    bpm?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function recent_listen_list(params: RequestBaseConfig): Promise<Response>
+
+export function recommend_songs_dislike(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function register_anonimous(params: RequestBaseConfig): Promise<Response>
+
+export function sati_resource_list(
+  params: {
+    tag: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function sati_resource_list_more(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function sati_resource_sub(
+  params: {
+    id: string | number
+    cancel?: string | boolean
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function sati_resource_sub_list(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function sati_tag_list(params: RequestBaseConfig): Promise<Response>
+
+export function sati_timescene_resources_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function search_match(
+  params: {
+    title?: string
+    album?: string
+    artist?: string
+    duration?: string | number
+    md5?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function search_suggest_pc(
+  params: {
+    keyword: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function send_album(
+  params: {
+    id: string | number
+    msg?: string
+    user_ids: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function send_song(
+  params: {
+    id: string | number
+    msg?: string
+    user_ids: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_chorus(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_creators(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_downlist(
+  params: MultiPageConfig & RequestBaseConfig,
+): Promise<Response>
+
+export function song_download_url_v1(
+  params: {
+    id: string | number
+    level: SoundQualityType
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_dynamic_cover(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_like(
+  params: {
+    id: string | number
+    like?: string | boolean
+    uid?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_like_check(
+  params: {
+    ids: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_lyrics_mark(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_lyrics_mark_add(
+  params: {
+    id: string | number
+    markId?: string
+    data?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_lyrics_mark_del(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_lyrics_mark_user_page(
+  params: MultiPageConfig & RequestBaseConfig,
+): Promise<Response>
+
+export function song_monthdownlist(
+  params: MultiPageConfig & RequestBaseConfig,
+): Promise<Response>
+
+export function song_music_detail(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_red_count(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_singledownlist(
+  params: MultiPageConfig & RequestBaseConfig,
+): Promise<Response>
+
+export function song_url_match(
+  params: {
+    id: string | number
+    source?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function song_url_ncmget(params: RequestBaseConfig): Promise<Response>
+
+export function song_url_v1_302(
+  params: {
+    id: string | number
+    level: SoundQualityType
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function starpick_comments_summary(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function summary_annual(
+  params: {
+    year: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function threshold_detail_get(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function toplist_detail_v2(params: RequestBaseConfig): Promise<Response>
+
+export function ugc_album_get(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_artist_get(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_artist_search(
+  params: {
+    keyword: string
+    limit?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_detail(
+  params: {
+    auditStatus?: string
+    type?: string | number
+    sortBy?: string
+    order?: string
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_mv_get(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_song_get(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function ugc_user_devote(params: RequestBaseConfig): Promise<Response>
+
+export function user_detail_new(
+  params: {
+    uid: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_follow_mixed(
+  params: {
+    size?: string | number
+    cursor?: string | number
+    scene?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_medal(
+  params: {
+    uid: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_mutualfollow_get(
+  params: {
+    uid: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_playlist_collect(
+  params: {
+    uid: string | number
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>
+
+export function user_playlist_create(
+  params: {
+    uid: string | number
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>
+
+export function user_social_status(
+  params: {
+    uid: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_social_status_edit(
+  params: {
+    type: string | number
+    iconUrl?: string
+    content?: string
+    actionUrl?: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function user_social_status_rcmd(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function user_social_status_support(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function verify_getQr(
+  params: {
+    vid: string | number
+    type: string | number
+    token: string
+    evid: string
+    sign: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function verify_qrcodestatus(
+  params: {
+    qr: string
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function vip_sign(params: RequestBaseConfig): Promise<Response>
+
+export function vip_sign_info(params: RequestBaseConfig): Promise<Response>
+
+export function vip_tasks_v1(
+  params: {
+    id?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voice_detail(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voice_upload(
+  params: {
+    songFile: {
+      name: string
+      data: string | Buffer
+    }
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voicelist_detail(
+  params: {
+    id: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voicelist_list(
+  params: {
+    voiceListId: string | number
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>
+
+export function voicelist_my_created(
+  params: {
+    limit?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voicelist_search(
+  params: {
+    keyword?: string
+    limit?: string | number
+    offset?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
+export function voicelist_trans(
+  params: {
+    radioId?: string | number
+    programId?: string | number
+    position?: string | number
+  } & MultiPageConfig &
+    RequestBaseConfig,
+): Promise<Response>

module/decrypt.js

@@ -0,0 +1,97 @@
+const {
+  eapiResDecrypt,
+  eapiReqDecrypt,
+  aesDecrypt,
+  xeapiResDecrypt,
+} = require('../util/crypto')
+const CryptoJS = require('crypto-js')
+
+const linuxapiKey = 'rFgB&h#%2?^eDg:Q'
+
+module.exports = async (query, request) => {
+  const crypto = query.crypto || 'eapi'
+  const data = query.data || query.hexString || ''
+  const isReq = query.isReq !== 'false'
+
+  if (!data) {
+    return {
+      status: 400,
+      body: { code: 400, message: 'data is required' },
+    }
+  }
+
+  try {
+    let result
+    switch (crypto) {
+      case 'eapi': {
+        const pureHex = data.replace(/\s/g, '')
+        result = isReq ? eapiReqDecrypt(pureHex) : eapiResDecrypt(pureHex)
+        break
+      }
+
+      case 'weapi': {
+        if (isReq) {
+          return {
+            status: 400,
+            body: {
+              code: 400,
+              message:
+                'weapi 请求解密需要 RSA 私钥，暂不支持；仅支持 weapi 返回数据解密（e_r=true 时与 eapi 相同）',
+            },
+          }
+        }
+        const pureHex = data.replace(/\s/g, '')
+        result = eapiResDecrypt(pureHex)
+        break
+      }
+
+      case 'linuxapi': {
+        if (isReq) {
+          const pureHex = data.replace(/\s/g, '')
+          const decrypted = aesDecrypt(pureHex, linuxapiKey, '', 'hex')
+          result = JSON.parse(decrypted.toString(CryptoJS.enc.Utf8))
+        } else {
+          result = typeof data === 'string' ? JSON.parse(data) : data
+        }
+        break
+      }
+
+      case 'xeapi': {
+        if (isReq) {
+          return {
+            status: 400,
+            body: {
+              code: 400,
+              message:
+                'xeapi 请求解密涉及 X25519 ECDH 密钥交换，流程复杂，暂不支持；仅支持 xeapi 返回数据解密',
+            },
+          }
+        }
+        const buf = Buffer.from(data, 'base64')
+        result = xeapiResDecrypt(buf)
+        break
+      }
+
+      case 'api': {
+        result = typeof data === 'string' ? JSON.parse(data) : data
+        break
+      }
+
+      default:
+        return {
+          status: 400,
+          body: { code: 400, message: `未知加密方式: ${crypto}` },
+        }
+    }
+
+    return {
+      status: 200,
+      body: { code: 200, data: result },
+    }
+  } catch (error) {
+    return {
+      status: 400,
+      body: { code: 400, message: `解密失败: ${error.message}` },
+    }
+  }
+}

module/pl_count.js

@@ -1,4 +1,5 @@
 // 私信和通知接口
+
 const createOption = require('../util/option.js')
 module.exports = (query, request) => {
   const data = {}

module/register_anonimous.js

@@ -1,3 +1,5 @@
+// 获取游客cookie
+
 const CryptoJS = require('crypto-js')
 const path = require('path')
 const fs = require('fs')
@@ -37,7 +39,7 @@ module.exports = async (query, request) => {
   let result = await request(
     `/api/register/anonimous`,
     data,
-    createOption(query, 'weapi'),
+    createOption(query, 'xeapi'),
   )
   if (result.body.code === 200) {
     result = {

module/register_xeapikey.js

@@ -0,0 +1,74 @@
+const { default: axios } = require('axios')
+const encrypt = require('../util/crypto')
+const { APP_CONF } = require('../util/config.json')
+
+const generateNonce = () => {
+  let nonce = ''
+  for (let i = 0; i < 16; i++) {
+    nonce += Math.floor(Math.random() * 10).toString()
+  }
+  return nonce
+}
+
+module.exports = async (query, request) => {
+  const nonce = generateNonce()
+  const timestamp = String(Date.now())
+  const deviceId = query.deviceId || global.deviceId || ''
+  const currentKeyVersion = query.currentKeyVersion || ''
+
+  const data = {
+    appVersion: '9.1.65',
+    currentKeyVersion,
+    deviceId,
+    nonce,
+    os: 'android',
+    requestType: 'active',
+    signature: encrypt.xeapiSign(timestamp, nonce),
+    t1: '',
+    t2: '',
+    timestamp,
+    uid: '',
+  }
+
+  const res = await axios({
+    method: 'POST',
+    url: APP_CONF.apiDomain + '/api/gorilla/anti/crawler/security/key/get',
+    headers: {
+      'User-Agent':
+        'NeteaseMusic/9.1.65.240927161425(9001065);Dalvik/2.1.0 (Linux; U; Android 14; 23013RK75C Build/UKQ1.230804.001)',
+      Cookie: deviceId ? `deviceId=${encodeURIComponent(deviceId)}` : '',
+    },
+    data: new URLSearchParams(data).toString(),
+    proxy: false,
+  })
+
+  if (
+    !res.data ||
+    res.data.code !== 200 ||
+    !res.data.data ||
+    !res.data.data.encryptedData
+  ) {
+    throw new Error('xeapi public key request failed')
+  }
+  if (
+    !res.data.data.signature ||
+    encrypt.xeapiSign(res.data.data.timestamp, nonce) !==
+      res.data.data.signature
+  ) {
+    throw new Error('xeapi public key response signature mismatch')
+  }
+
+  const publicKey = encrypt.xeapiDecryptPublicKey(res.data.data.encryptedData)
+  if (!publicKey.sk) {
+    throw new Error('xeapi public key response missing sk')
+  }
+
+  return {
+    status: 200,
+    body: {
+      ...publicKey,
+      deviceId,
+    },
+    cookie: [],
+  }
+}

module/relay_play_state_submit.js

@@ -0,0 +1,49 @@
+// 提交歌曲播放状态
+
+const createOption = require('../util/option.js')
+const generateSessionId = () =>
+  Array.from(
+    { length: 12 },
+    () =>
+      'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'[Math.floor(Math.random() * 36)],
+  ).join('')
+
+module.exports = (query, request) => {
+  const {
+    id,
+    sessionId,
+    progress = 0,
+    playMode = 'list_loop',
+    type = 'song',
+  } = query
+
+  if (!id) {
+    return Promise.reject({
+      status: 400,
+      body: {
+        code: 400,
+        msg: '缺少必要参数：id',
+      },
+    })
+  }
+
+  const playStateSubmitReq = JSON.stringify({
+    resource: {
+      id: String(id),
+      type: type,
+    },
+    progress: Number(progress) || 0,
+    sessionId: sessionId || generateSessionId(),
+    playMode: playMode,
+  })
+
+  const data = {
+    playStateSubmitReq: playStateSubmitReq,
+  }
+
+  return request(
+    '/api/relay/play/state/submit',
+    data,
+    createOption(query, 'weapi'),
+  )
+}

module/scrobble.js

@@ -1,8 +1,40 @@
 // 听歌打卡
 
 const createOption = require('../util/option.js')
-module.exports = (query, request) => {
-  const data = {
+module.exports = async (query, request) => {
+  // 注入 os=osx 的 cookie
+  let cookie = query.cookie || ''
+  if (typeof cookie === 'object') {
+    cookie = Object.assign({ os: 'osx' }, cookie)
+  } else if (typeof cookie === 'string') {
+    if (cookie.indexOf('os=') > -1) {
+      cookie = cookie.replace(/os=[^;]+/g, 'os=osx')
+    } else {
+      cookie = cookie + '; os=osx'
+    }
+  } else {
+    cookie = 'os=osx'
+  }
+  query.cookie = cookie
+
+  // 1) startplay → 进「最近播放」
+  const startplayData = {
+    logs: JSON.stringify([
+      {
+        action: 'startplay',
+        json: {
+          id: query.id,
+          type: 'song',
+          mainsite: '1',
+          mainsiteWeb: '1',
+          content: `id=${query.sourceid}`,
+        },
+      },
+    ]),
+  }
+
+  // 2) play → 涨「听歌排行」计数
+  const playData = {
     logs: JSON.stringify([
       {
         action: 'play',
@@ -15,12 +47,30 @@ module.exports = (query, request) => {
           type: 'song',
           wifi: 0,
           source: 'list',
-          mainsite: 1,
-          content: '',
+          mainsite: '1',
+          mainsiteWeb: '1',
+          content: `id=${query.sourceid}`,
         },
       },
     ]),
   }
 
-  return request(`/api/feedback/weblog`, data, createOption(query, 'weapi'))
+  const option = createOption(query, 'eapi')
+  option.domain = 'https://clientlog.music.163.com'
+
+  // 发送两次请求
+  const res1 = await request(`/api/feedback/weblog`, startplayData, option)
+  const res2 = await request(`/api/feedback/weblog`, playData, option)
+
+  return {
+    status: 200,
+    body: {
+      code: 200,
+      data: 'success',
+      details: {
+        startplay: res1.body,
+        play: res2.body,
+      },
+    },
+  }
 }

module/song_cloud_download.js

@@ -0,0 +1,9 @@
+// 从云盘获取歌曲下载链接
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    songId: query.id,
+  }
+  return request(`/api/cloud/dowonload`, data, createOption(query, 'eapi'))
+}

module/song_url_v1.js

@@ -53,5 +53,9 @@ module.exports = async (query, request) => {
   if (data.level == 'sky') {
     data.immerseType = 'c51'
   }
-  return request(`/api/song/enhance/player/url/v1`, data, createOption(query))
+  return request(
+    `/api/song/enhance/player/url/v1`,
+    data,
+    createOption(query, 'xeapi'),
+  )
 }

module/vip_sign.js

@@ -3,5 +3,9 @@
 const createOption = require('../util/option.js')
 module.exports = (query, request) => {
   const data = {}
-  return request(`/api/vip-center-bff/task/sign`, data, createOption(query))
+  return request(
+    `/api/vip-center-bff/task/sign`,
+    data,
+    createOption(query, 'weapi'),
+  )
 }

module/vip_sign_detail.js

@@ -0,0 +1,14 @@
+// 黑胶乐签打卡详情
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    signDayTime: query.timestamp,
+    type: '1',
+  }
+  return request(
+    `/api/vipnewcenter/app/level/user/checkin/history/detail`,
+    data,
+    createOption(query, 'eapi'),
+  )
+}

module/vip_sign_history.js

@@ -0,0 +1,13 @@
+// 黑胶乐签打卡历史
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    type: '0',
+  }
+  return request(
+    `/api/vipnewcenter/app/minidesk/music/sign/pc`,
+    data,
+    createOption(query, 'xeapi'),
+  )
+}

module/vip_sign_info.js

@@ -1,4 +1,4 @@
-// 黑胶乐签签到信息
+// 黑胶乐签未来签到信息
 
 const createOption = require('../util/option.js')
 module.exports = (query, request) => {

module/vip_tasks_v1.js

@@ -0,0 +1,14 @@
+// 会员任务 - 新版
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    taskType: 'app_vip_task_center',
+    userId: query.id,
+  }
+  return request(
+    `/api/middle/vip/mission/user/progress/list`,
+    data,
+    createOption(query, 'xeapi'),
+  )
+}

package.json

@@ -1,6 +1,6 @@
 {
   "name": "@neteasecloudmusicapienhanced/api",
-  "version": "4.33.1",
+  "version": "4.35.2",
   "description": "全网最全的网易云音乐API接口 || A revival project for NeteaseCloudMusicApi Node.js Services (Half Refactor & Enhanced) || 网易云音乐 API 备份 + 增强 || 本项目自原版v4.28.0版本后开始自行维护",
   "scripts": {
     "dev": "nodemon app.js",
@@ -9,6 +9,8 @@
     "lint": "eslint \"**/*.{js,ts}\"",
     "lint-fix": "eslint --fix \"**/*.{js,ts}\"",
     "prepare": "husky install",
+    "docs:format": "node scripts/format-docs.js",
+    "docs:check": "node scripts/format-docs.js --check",
     "pkgwin": "pkg . -t node18-win-x64 -C GZip -o precompiled/app",
     "pkglinux": "pkg . -t node18-linux-x64 -C GZip -o precompiled/app",
     "pkgmacos": "pkg . -t node18-macos-x64 -C GZip -o precompiled/app"
@@ -41,6 +43,14 @@
   ],
   "main": "main.js",
   "types": "./interface.d.ts",
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced.git"
+  },
+  "bugs": {
+    "url": "https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced/issues"
+  },
+  "homepage": "https://neteasecloudmusicapienhanced.js.org/",
   "engines": {
     "node": ">=12"
   },
@@ -65,14 +75,14 @@
     "data"
   ],
   "dependencies": {
-    "@neteasecloudmusicapienhanced/unblockmusic-utils": "^0.3.1",
-    "axios": "^1.16.1",
+    "@neteasecloudmusicapienhanced/unblockmusic-utils": "^0.3.2",
+    "axios": "^1.17.0",
     "crypto-js": "^4.2.0",
     "dotenv": "^17.4.2",
     "express": "^5.2.1",
     "express-fileupload": "^1.5.2",
     "gzip": "^0.1.0",
-    "music-metadata": "^11.12.3",
+    "music-metadata": "^11.13.0",
     "node-forge": "^1.4.0",
     "pac-proxy-agent": "^7.2.0",
     "qrcode": "^1.5.4",
@@ -87,13 +97,13 @@
     "@types/express": "^5.0.6",
     "@types/express-fileupload": "^1.5.1",
     "@types/mocha": "^10.0.10",
-    "@types/node": "25.5.0",
-    "@typescript-eslint/eslint-plugin": "^8.59.4",
-    "@typescript-eslint/parser": "^8.59.4",
+    "@types/node": "25.9.2",
+    "@typescript-eslint/eslint-plugin": "^8.60.1",
+    "@typescript-eslint/parser": "^8.60.1",
     "eslint": "^9.39.4",
     "eslint-config-prettier": "^10.1.8",
     "eslint-plugin-html": "^8.1.4",
-    "eslint-plugin-prettier": "^5.5.5",
+    "eslint-plugin-prettier": "^5.5.6",
     "globals": "^17.6.0",
     "husky": "^9.1.7",
     "intelli-espower-loader": "^1.1.0",
@@ -104,5 +114,9 @@
     "power-assert": "^1.6.1",
     "prettier": "^3.8.3",
     "typescript": "^5.9.3"
+  },
+  "publishConfig": {
+    "access": "public",
+    "registry": "https://registry.npmjs.org/"
   }
 }

pnpm-lock.yaml

@@ -9,11 +9,11 @@ importers:
   .:
     dependencies:
       '@neteasecloudmusicapienhanced/unblockmusic-utils':
-        specifier: ^0.3.1
-        version: 0.3.1
+        specifier: ^0.3.2
+        version: 0.3.2
       axios:
-        specifier: ^1.16.1
-        version: 1.16.1
+        specifier: ^1.17.0
+        version: 1.17.0
       crypto-js:
         specifier: ^4.2.0
         version: 4.2.0
@@ -30,8 +30,8 @@ importers:
         specifier: ^0.1.0
         version: 0.1.0
       music-metadata:
-        specifier: ^11.12.3
-        version: 11.12.3
+        specifier: ^11.13.0
+        version: 11.13.0
       node-forge:
         specifier: ^1.4.0
         version: 1.4.0
@@ -70,14 +70,14 @@ importers:
         specifier: ^10.0.10
         version: 10.0.10
       '@types/node':
-        specifier: 25.5.0
-        version: 25.5.0
+        specifier: 25.9.2
+        version: 25.9.2
       '@typescript-eslint/eslint-plugin':
-        specifier: ^8.59.4
-        version: 8.59.4(@typescript-eslint/parser@8.59.4(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)
+        specifier: ^8.60.1
+        version: 8.60.1(@typescript-eslint/parser@8.60.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)
       '@typescript-eslint/parser':
-        specifier: ^8.59.4
-        version: 8.59.4(eslint@9.39.4)(typescript@5.9.3)
+        specifier: ^8.60.1
+        version: 8.60.1(eslint@9.39.4)(typescript@5.9.3)
       eslint:
         specifier: ^9.39.4
         version: 9.39.4
@@ -88,8 +88,8 @@ importers:
         specifier: ^8.1.4
         version: 8.1.4
       eslint-plugin-prettier:
-        specifier: ^5.5.5
-        version: 5.5.5(eslint-config-prettier@10.1.8(eslint@9.39.4))(eslint@9.39.4)(prettier@3.8.3)
+        specifier: ^5.5.6
+        version: 5.5.6(eslint-config-prettier@10.1.8(eslint@9.39.4))(eslint@9.39.4)(prettier@3.8.3)
       globals:
         specifier: ^17.6.0
         version: 17.6.0
@@ -127,12 +127,12 @@ packages:
     resolution: {integrity: sha512-W1lG5vUwFvfMd8HVXqdfbuG7RuaSrTCCD8cl8fP8wOivdbtbIg2Db3IWUcgvfxKbbn6ZBGYRW/Zk1MIwK49mgw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-string-parser@7.27.1':
-    resolution: {integrity: sha512-qMlSxKbpRlAridDExk92nSobyDdpPijUq2DW6oDnUqd0iOGxmQjyqhMIihI9+zv4LPyZdRje2cavWPbCbWm3eA==}
+  '@babel/helper-string-parser@7.29.7':
+    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
     engines: {node: '>=6.9.0'}
 
-  '@babel/helper-validator-identifier@7.28.5':
-    resolution: {integrity: sha512-qSs4ifwzKJSV39ucNjsvc6WVHs6b7S03sOh2OcHF9UHfVPqWWALUsNUVzhSBiItjRZoLHx7nIarVjqKVusUZ1Q==}
+  '@babel/helper-validator-identifier@7.29.7':
+    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
     engines: {node: '>=6.9.0'}
 
   '@babel/parser@7.18.4':
@@ -222,8 +222,8 @@ packages:
   '@jridgewell/trace-mapping@0.3.31':
     resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
 
-  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.3.1':
-    resolution: {integrity: sha512-Ul7/5jeUiZKb74GYRmwNj2ekUryTwO4j8CfGSrYKSsJRZlF6/L0FNniQjjpEyQ/6npsrbcmEibMMvn+Z0W4Spw==}
+  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.3.2':
+    resolution: {integrity: sha512-H1ckEDXxR+sLUZKzCPhlP8kfSKgEZZp8GSL4+2BZcmCyerwCbSZzMxX9doacHfFjThRjmq90DbsrRnhnKAvrzA==}
     hasBin: true
 
   '@nodelib/fs.scandir@2.1.5':
@@ -242,9 +242,9 @@ packages:
     resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
     engines: {node: '>=14'}
 
-  '@pkgr/core@0.2.9':
-    resolution: {integrity: sha512-QNqXyfVS2wm9hweSYD2O7F0G06uurj9kZ96TRQE5Y9hU7+tgdZwIkbAKc5Ocy1HxEY2kuDQa6cQ1WRs/O5LFKA==}
-    engines: {node: ^12.20.0 || ^14.18.0 || >=16.0.0}
+  '@pkgr/core@0.3.6':
+    resolution: {integrity: sha512-SEeaJLb3qBNF/OaXnaR1NmmBbFYk1zC0ZH/52fATcRPLFg/p791YrcyFFy44Bo9sLaGuSuLp5Q6axbb/O+v/RA==}
+    engines: {node: ^14.18.0 || >=16.0.0}
 
   '@tokenizer/inflate@0.4.1':
     resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
@@ -286,8 +286,8 @@ packages:
   '@types/mocha@10.0.10':
     resolution: {integrity: sha512-xPyYSz1cMPnJQhl0CLMH68j3gprKZaTjG3s5Vi+fDgx+uhG9NOXwbVt52eFS8ECyXhyKcjDLCBEqBExKuiZb7Q==}
 
-  '@types/node@25.5.0':
-    resolution: {integrity: sha512-jp2P3tQMSxWugkCUKLRPVUpGaL5MVFwF8RDuSRztfwgN1wmqJeMSbKlnEtQqU8UrhTmzEmZdu2I6v2dpp7XIxw==}
+  '@types/node@25.9.2':
+    resolution: {integrity: sha512-G05zqtJhcDLb8uslf5EjCxXg9G1KQxiV8OS0R26IC//Eoyitzqe8z37I7cqvnZlrlSfgocQRfSn/AHBZJJFyGw==}
 
   '@types/qs@6.15.1':
     resolution: {integrity: sha512-GZHUBZR9hckSUhrxmp1nG6NwdpM9fCunJwyThLW1X3AyHgd9IlHb6VANpQQqDr2o/qQp6McZ3y/IA2rVzKzSbw==}
@@ -301,63 +301,63 @@ packages:
   '@types/serve-static@2.2.0':
     resolution: {integrity: sha512-8mam4H1NHLtu7nmtalF7eyBH14QyOASmcxHhSfEoRyr0nP/YdoesEtU+uSRvMe96TW/HPTtkoKqQLl53N7UXMQ==}
 
-  '@typescript-eslint/eslint-plugin@8.59.4':
-    resolution: {integrity: sha512-PegsU+XfyJJNjd4+u/k6f9yTyp0lEXXiPopUNobZcIAUJFGICFLN+sP0Rb3JehVmiij1Ph0dFGYqODoRo/2+6A==}
+  '@typescript-eslint/eslint-plugin@8.60.1':
+    resolution: {integrity: sha512-JQ4S5GB0tfjO8BuJ4fcX+HodkzJjYBV+7OJ+wLygaX7OGQ7FudyHL4NSCA6ob+w3Yn+5MkKIozOwQhXeM7opVg==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
-      '@typescript-eslint/parser': ^8.59.4
+      '@typescript-eslint/parser': ^8.60.1
       eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/parser@8.59.4':
-    resolution: {integrity: sha512-zORHqO/tuhxY1zWuTvMUqddRxpiFJ72xVfcNoWpqdLjs6lfPbuQBJuW4pk+49/uBMy7Ssr4bzgjiKmmDB1UbZQ==}
+  '@typescript-eslint/parser@8.60.1':
+    resolution: {integrity: sha512-A0M6ua6H252bVjPvvtSgl2QA4+ET9S5Mtkb2GDyTxIhH/C4qDItT7RQNO5PhMC6NXGYXOR9dIalcDDgBKT7oFA==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/project-service@8.59.4':
-    resolution: {integrity: sha512-Ly00Vu4oAacfDeHp2Zg85ioNG6l8HG+tN1D7J+xTHSxu9y0awYKJ2zH1rFBn8ZSfuGK+7FxK3Cgl3uAz0aZZLg==}
+  '@typescript-eslint/project-service@8.60.1':
+    resolution: {integrity: sha512-eXkTH2bxmXlqD1RnOPmLZ9ZM9D3VwSx04JOwBnP9RQ+yUA5a2Mu7SfW8uaV2Aon53NJzZlZYuX7tn91Izf+xaw==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/scope-manager@8.59.4':
-    resolution: {integrity: sha512-mUeR/3H1WrTAddJrwut8OoPjfauaztMQmRwV5fQTUyNVJCLiUXXe4lGEyYIL2oFDpP7UtgbGJXCt72wT0z2S3Q==}
+  '@typescript-eslint/scope-manager@8.60.1':
+    resolution: {integrity: sha512-gvI5OQoptnxQnchOirukCuQ55svJSTuD/4k5+pC267xyBtYry748R9/c3tYUzb/iE6RZfllRz2lVulLCHkTm4w==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
-  '@typescript-eslint/tsconfig-utils@8.59.4':
-    resolution: {integrity: sha512-DLCpnKgD4alVxTBSKulK+gU1KCqOgUXfDRDXh2mZgzokQKa/70ax93I2uVO3m/LLvIAtWZIFoiifudmIqAxpMA==}
+  '@typescript-eslint/tsconfig-utils@8.60.1':
+    resolution: {integrity: sha512-nh8w4qAteiKuZu3pSSzG/yGKpw0OlkrKnzFmbVRenKaD4qc+7i1GrmZaLVkr8rk4uipiPGMOW4YsM6WmKZ5CvA==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/type-utils@8.59.4':
-    resolution: {integrity: sha512-uonTuPAAKr9XaBGqJ3LjYTh72zy5DyGesljO9gtmk/eFW0W1fRHjnwVYKB35Lm8d5Q5CluEW3gPHjTvZTmgrfA==}
+  '@typescript-eslint/type-utils@8.60.1':
+    resolution: {integrity: sha512-sdwTrpjosW7ANQYJ39ZBF1ZyEMEGVB2UsikrserVM/30a/F1dTLnu9bGxEdosugyu5caigjLrR2qiD11asjI1A==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/types@8.59.4':
-    resolution: {integrity: sha512-F1o7WJcCq+bc8dwcO/YsSEOudAH8RDtaOhM6wcAQhcUsFhnWQl81JKy48q1hoxAU0qrzM89+31GYh1515Zde3Q==}
+  '@typescript-eslint/types@8.60.1':
+    resolution: {integrity: sha512-4h0tY8ppCkdCzcrl2YM5M3my0xsE1Tf8om3owEu5oPWmXwkKRmk0j0LGDzYBGUcAlesEbxBhazqu/K4cu3Ug7w==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
-  '@typescript-eslint/typescript-estree@8.59.4':
-    resolution: {integrity: sha512-F+RuOmcDXo4+TPdfd/TCLS3m2nw8gE9XXyZLrA3JBfaA5tz9TtdkyD3YJFmPxulyc2cKbEok/CvFE3MgSLWnag==}
+  '@typescript-eslint/typescript-estree@8.60.1':
+    resolution: {integrity: sha512-alpRkfG8hlVE5kdJW2GkfgDgXxold3e8e4l6EnmhRmRLbekgAPCCGDVD++sABy9FcgPFroq+uFcCSM1vR57Cew==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/utils@8.59.4':
-    resolution: {integrity: sha512-cYXeNAUsG4lJo5dbc1FcKm+JwIWrj1/UpTORsC6tGMjEZ81DYcvIr9/ueikhMa/Y/gDQYGp+YX9/xQrXje5BJw==}
+  '@typescript-eslint/utils@8.60.1':
+    resolution: {integrity: sha512-h2MPBLoNtjc3qZWfY3Tl51yPorQ2McHn8pJfcMNTcIvrrZrr90Ykffit0yjrPFWQcRcUxzH20+6OcVdW4yHtUg==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
     peerDependencies:
       eslint: ^8.57.0 || ^9.0.0 || ^10.0.0
       typescript: '>=4.8.4 <6.1.0'
 
-  '@typescript-eslint/visitor-keys@8.59.4':
-    resolution: {integrity: sha512-U3gxVaDVnuZKhSspW/MzMxE1kq7zOdc072FcSNoqA1I9p8HyKbBFfEHoWckBAMgNMph4MamwS5iTVzFmrnt8TQ==}
+  '@typescript-eslint/visitor-keys@8.60.1':
+    resolution: {integrity: sha512-EbGRQg4FhrmwLodl+t3JNAnXHWVr9Vp+Zl1QBZVPY4ByfkzIT8cX3K6QWODHtkIZqqJVEWvhHSx3v5PDHsaQag==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
   '@unblockneteasemusic/server@0.28.0':
@@ -485,8 +485,8 @@ packages:
     resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
     engines: {node: '>= 0.4'}
 
-  axios@1.16.1:
-    resolution: {integrity: sha512-caYkukvroVPO8KrzuJEb50Hm07KwfBZPEC3VeFHTsqWHvKTsy54hjJz9BS/cdaypROE2rH6xvm9mHX4fgWkr3A==}
+  axios@1.17.0:
+    resolution: {integrity: sha512-J8SwNxprqqpbfenehxWYXE7CW+wM1BB4w3+N+g+/Wx40xM4rsLrfPmHHxSWIxJLYDgSY/HqlFPIYb2/S3rxafw==}
 
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
@@ -517,11 +517,11 @@ packages:
     resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==}
     engines: {node: '>=18'}
 
-  brace-expansion@1.1.14:
-    resolution: {integrity: sha512-MWPGfDxnyzKU7rNOW9SP/c50vi3xrmrua/+6hfPbCS2ABNWfx24vPidzvC7krjU/RTo235sV776ymlsMtGKj8g==}
+  brace-expansion@1.1.15:
+    resolution: {integrity: sha512-EwOCDEex4quD37XhqM3omwtMoJjr//isUZz1JopUNWms+4Z2ViyM/k1YIRePpoVNnQhENnxtFjLaxNHrT7xIUg==}
 
-  brace-expansion@2.1.0:
-    resolution: {integrity: sha512-TN1kCZAgdgweJhWWpgKYrQaMNHcDULHkWwQIspdtjV4Y5aurRdZpjAqn6yX3FPqTA9ngHCc4hJxMAMgGfve85w==}
+  brace-expansion@2.1.1:
+    resolution: {integrity: sha512-WR1cURNjuvBLMZBMbqM0UoE+WAfdUcEV1ccD8PVBVOI+Z3ND4+SZbN8RsfT2bMuG1qwz5RFvPukSZm5fF2D5eA==}
 
   brace-expansion@5.0.6:
     resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==}
@@ -876,8 +876,8 @@ packages:
     resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
     engines: {node: '>= 0.4'}
 
-  es-object-atoms@1.1.1:
-    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
+  es-object-atoms@1.1.2:
+    resolution: {integrity: sha512-HWcBoN6NileqtSydK2FqHbS/LoDd2pqrnQHLyJzBj4kOp/ky2MWMN694xOfkK8/SnUsW2DH7EfyVlydKCsm1Zw==}
     engines: {node: '>= 0.4'}
 
   es-set-tostringtag@2.1.0:
@@ -951,8 +951,8 @@ packages:
     resolution: {integrity: sha512-Eno3oPEj3s6AhvDJ5zHhnHPDvXp6LNFXuy3w51fNebOKYuTrfjOHUGwP+mOrGFpR6eOJkO1xkB8ivtbfMjbMjg==}
     engines: {node: '>=16.0.0'}
 
-  eslint-plugin-prettier@5.5.5:
-    resolution: {integrity: sha512-hscXkbqUZ2sPithAuLm5MXL+Wph+U7wHngPBv9OMWwlP8iaflyxpjTYZkmdgB4/vPIhemRlBEoLrH7UC1n7aUw==}
+  eslint-plugin-prettier@5.5.6:
+    resolution: {integrity: sha512-ifetmTcxWfz+4qRW3pH/ujdTq2jQIj59AxJMIN26K5avYgU8dxycUETQonWiW+wPrYXA0j3Try0l1CnwVQtDqQ==}
     engines: {node: ^14.18.0 || >=16.0.0}
     peerDependencies:
       '@types/eslint': '>=8.0.0'
@@ -1311,8 +1311,8 @@ packages:
     resolution: {integrity: sha512-qdSAmqLF6209RFj4VVItywPMbm3vWylknmB3nvNiUIs72xAimcM8nVYxYr7ncvZq5qzk9MKIZR8ijqD/1QuYjQ==}
     engines: {node: '>= 0.4.0'}
 
-  hasown@2.0.3:
-    resolution: {integrity: sha512-ej4AhfhfL2Q2zpMmLo7U1Uv9+PyhIZpgQLGT1F9miIGmiCJIoCgSmczFdrc97mWT4kVY72KA+WnnhJ5pghSvSg==}
+  hasown@2.0.4:
+    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
     engines: {node: '>= 0.4'}
 
   he@1.2.0:
@@ -1557,8 +1557,8 @@ packages:
     resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
     engines: {node: '>=10'}
 
-  js-yaml@4.1.1:
-    resolution: {integrity: sha512-qQKT4zQxXl8lLwBtHMWwaTcGfFOZviOJet3Oy/xmGk2gZH677CJM9EvtfdSkgWcATZhj/55JZ0rmy3myCT5lsA==}
+  js-yaml@4.2.0:
+    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
     hasBin: true
 
   jsesc@2.5.2:
@@ -1636,6 +1636,10 @@ packages:
     resolution: {integrity: sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==}
     engines: {node: '>= 0.8'}
 
+  media-typer@2.0.0:
+    resolution: {integrity: sha512-kOy3OxT2HH39N70UnKgu4NWDZjLOz8W/mfyvniHjRH/DrL3f2pOfvWQ4p60offbbtDAnXWp0v9LfMIqMec269Q==}
+    engines: {node: '>=18'}
+
   merge-descriptors@1.0.3:
     resolution: {integrity: sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==}
 
@@ -1729,8 +1733,8 @@ packages:
   multistream@4.1.0:
     resolution: {integrity: sha512-J1XDiAmmNpRCBfIWJv+n0ymC4ABcf/Pl+5YvC5B/D2f/2+8PtHvCNxMPKiQcZyi922Hq69J2YOpb1pTywfifyw==}
 
-  music-metadata@11.12.3:
-    resolution: {integrity: sha512-n6hSTZkuD59qWgHh6IP5dtDlDZQXoxk/bcA85Jywg8Z1iFrlNgl2+GTFgjZyn52W5UgQpV42V4XqrQZZAMbZTQ==}
+  music-metadata@11.13.0:
+    resolution: {integrity: sha512-uXRaov9dfjSpQufXIU7sMxVZnh+FilCQv2mXn+K5EJ/decP3dTWrgvPYa5r6MtRbieNSCE708Da4J0u1UGfQIw==}
     engines: {node: '>=18'}
 
   napi-build-utils@1.0.2:
@@ -2149,8 +2153,8 @@ packages:
   secure-json-parse@2.7.0:
     resolution: {integrity: sha512-6aU+Rwsezw7VR8/nyvKTx8QpWH9FrcYiXXlqC4z5d5XQBDRqtbfsRjnwGyqbi3gddNtWHuEk9OANUotL26qKUw==}
 
-  semver@7.8.1:
-    resolution: {integrity: sha512-rkVq3IXh+4FDGch+KwzX3aV9W3kO54GyEgpvBzSyctDA6Xtd7RJQV1xmXbeQp5v7+VzLOfVqiutSE6GICgPFvg==}
+  semver@7.8.3:
+    resolution: {integrity: sha512-wnilbGyMxzbY7dNOl7jpKbLSjcfeweJWU5j4+u5qW+6/wuGD9KzIGOyZnQVSBM9E7DtWaaH3CyHkppYrKYoxwg==}
     engines: {node: '>=10'}
     hasBin: true
 
@@ -2316,12 +2320,12 @@ packages:
     resolution: {integrity: sha512-IIaP0g3iy9Cyy18w3M9YcaDudujEAVHKt3a3QJg1+sr/oX96TbaGUubG0hJyCjCBThFH+tFpcIyoUHUn1ogaLA==}
     engines: {node: '>=20'}
 
-  string.prototype.trim@1.2.10:
-    resolution: {integrity: sha512-Rs66F0P/1kedk5lyYyH9uBzuiI/kNRmwJAR9quK6VOtIpZ2G+hMZd+HQbbv25MgCA6gEffoMZYxlTod4WcdrKA==}
+  string.prototype.trim@1.2.11:
+    resolution: {integrity: sha512-PwvK7BU+CMTJGYQCTZb5RWXIML92lftJLhQz1tBzgKiqGxJaMlBAa48POXaNAC2s4y8jr3EFqrkF9+44neS46w==}
     engines: {node: '>= 0.4'}
 
-  string.prototype.trimend@1.0.9:
-    resolution: {integrity: sha512-G7Ok5C6E/j4SGfyLCloXTrngQIQU3PWtXGst3yM7Bea9FRURf1S42ZHlZZtsNque2FN2PoUhfZXYLNWwEr4dLQ==}
+  string.prototype.trimend@1.0.10:
+    resolution: {integrity: sha512-2+3aDAOmPTmuFwjDnmJG2ctEkQKVki7vOSqaxkv42Mowj1V6PnvuwFCRrR5lChUux1TBskPjfkeTOhqczDMxTw==}
     engines: {node: '>= 0.4'}
 
   string.prototype.trimstart@1.0.8:
@@ -2373,8 +2377,8 @@ packages:
     resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
     engines: {node: '>= 0.4'}
 
-  synckit@0.11.12:
-    resolution: {integrity: sha512-Bh7QjT8/SuKUIfObSXNHNSK6WHo6J1tHCqJsuaFDP7gP0fkzSfTxI8y85JrppZ0h8l0maIgc2tfuZQ6/t3GtnQ==}
+  synckit@0.11.13:
+    resolution: {integrity: sha512-eNRKgb3z66Yp3D2CixVujOUvXLFUTij/zVnV8KRyvFdQwpz7I5DS8UfRkTeLzb64u+dkzDSdelE24izu+zSSUg==}
     engines: {node: ^14.18.0 || >=16.0.0}
 
   tar-fs@2.1.4:
@@ -2384,12 +2388,12 @@ packages:
     resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
     engines: {node: '>=6'}
 
-  tinyexec@1.1.2:
-    resolution: {integrity: sha512-dAqSqE/RabpBKI8+h26GfLq6Vb3JVXs30XYQjdMjaj/c2tS8IYYMbIzP599KtRj7c57/wYApb3QjgRgXmrCukA==}
+  tinyexec@1.2.4:
+    resolution: {integrity: sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==}
     engines: {node: '>=18'}
 
-  tinyglobby@0.2.16:
-    resolution: {integrity: sha512-pn99VhoACYR8nFHhxqix+uvsbXineAasWm5ojXoN8xEwK5Kd3/TrhNn1wByuD52UxWRLy8pu+kRMniEi6Eq9Zg==}
+  tinyglobby@0.2.17:
+    resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
     engines: {node: '>=12.0.0'}
 
   to-fast-properties@2.0.0:
@@ -2469,8 +2473,8 @@ packages:
     resolution: {integrity: sha512-bTlAFB/FBYMcuX81gbL4OcpH5PmlFHqlCCpAl8AlEzMz5k53oNDvN8p1PNOWLEmI2x4orp3raOFB51tv9X+MFQ==}
     engines: {node: '>= 0.4'}
 
-  typed-array-length@1.0.7:
-    resolution: {integrity: sha512-3KS2b+kL7fsuk/eJZ7EQdnEmQoaho/r6KUef7hxvltNA5DR8NAUM+8wJMbJyZ4G9/7i3v5zPBIMN5aybAh2/Jg==}
+  typed-array-length@1.0.8:
+    resolution: {integrity: sha512-phPGCwqr2+Qo0fwniCE8e4pKnGu/yFb5nD5Y8bf0EEeiI5GklnACYA9GFy/DrAeRrKHXvHn+1SUsOWgJp6RO+g==}
     engines: {node: '>= 0.4'}
 
   typedarray.prototype.slice@1.0.5:
@@ -2493,8 +2497,8 @@ packages:
   undefsafe@2.0.5:
     resolution: {integrity: sha512-WxONCrssBM8TSPRqN5EmsjVrsv4A8X12J4ArBiiayv3DyyG3ZlIg6yysuuSYdZsVz3TKcTg2fd//Ujd4CHV1iA==}
 
-  undici-types@7.18.2:
-    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
+  undici-types@7.24.6:
+    resolution: {integrity: sha512-WRNW+sJgj5OBN4/0JpHFqtqzhpbnV0GuB+OozA9gCL7a993SmU+1JBZCzLNxYsbMfIeDL+lTsphD5jN5N+n0zg==}
 
   universal-deep-strict-equal@1.2.2:
     resolution: {integrity: sha512-UpnFi3/IF3jZHIHTdQXTHLCqpBP3805OFFRPHgvCS7k0oob2YVXxMTjS0U0g9qJTzqFRMwEnFFSlFLqt6zwjTQ==}
@@ -2542,8 +2546,8 @@ packages:
   which-module@2.0.1:
     resolution: {integrity: sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==}
 
-  which-typed-array@1.1.20:
-    resolution: {integrity: sha512-LYfpUkmqwl0h9A2HL09Mms427Q1RZWuOHsukfVcKRq9q95iQxdw0ix1JQrqbcDR9PH1QDwf5Qo8OZb5lksZ8Xg==}
+  which-typed-array@1.1.22:
+    resolution: {integrity: sha512-fvO4ExWMFsqyhG3AiPAObMuY1lxaqgYcxbc49CNdWDDECOJNgQyvsOWVwbZc+qf3rzRtxojBK+CMEv0Ld5CYpw==}
     engines: {node: '>= 0.4'}
 
   which@2.0.2:
@@ -2655,9 +2659,9 @@ snapshots:
       '@jridgewell/gen-mapping': 0.3.13
       jsesc: 2.5.2
 
-  '@babel/helper-string-parser@7.27.1': {}
+  '@babel/helper-string-parser@7.29.7': {}
 
-  '@babel/helper-validator-identifier@7.28.5': {}
+  '@babel/helper-validator-identifier@7.29.7': {}
 
   '@babel/parser@7.18.4':
     dependencies:
@@ -2665,8 +2669,8 @@ snapshots:
 
   '@babel/types@7.19.0':
     dependencies:
-      '@babel/helper-string-parser': 7.27.1
-      '@babel/helper-validator-identifier': 7.28.5
+      '@babel/helper-string-parser': 7.29.7
+      '@babel/helper-validator-identifier': 7.29.7
       to-fast-properties: 2.0.0
 
   '@borewit/text-codec@0.2.2': {}
@@ -2702,7 +2706,7 @@ snapshots:
       globals: 14.0.0
       ignore: 5.3.2
       import-fresh: 3.3.1
-      js-yaml: 4.1.1
+      js-yaml: 4.2.0
       minimatch: 3.1.5
       strip-json-comments: 3.1.1
     transitivePeerDependencies:
@@ -2756,10 +2760,10 @@ snapshots:
       '@jridgewell/resolve-uri': 3.1.2
       '@jridgewell/sourcemap-codec': 1.5.5
 
-  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.3.1':
+  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.3.2':
     dependencies:
       '@unblockneteasemusic/server': 0.28.0
-      axios: 1.16.1
+      axios: 1.17.0
       dotenv: 17.4.2
       express: 4.22.2
       https: 1.0.0
@@ -2782,7 +2786,7 @@ snapshots:
   '@pkgjs/parseargs@0.11.0':
     optional: true
 
-  '@pkgr/core@0.2.9': {}
+  '@pkgr/core@0.3.6': {}
 
   '@tokenizer/inflate@0.4.1':
     dependencies:
@@ -2798,15 +2802,15 @@ snapshots:
   '@types/body-parser@1.19.6':
     dependencies:
       '@types/connect': 3.4.38
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
 
   '@types/busboy@1.5.4':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
 
   '@types/connect@3.4.38':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
 
   '@types/estree@1.0.9': {}
 
@@ -2817,7 +2821,7 @@ snapshots:
 
   '@types/express-serve-static-core@5.1.1':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
       '@types/qs': 6.15.1
       '@types/range-parser': 1.2.7
       '@types/send': 1.2.1
@@ -2834,9 +2838,9 @@ snapshots:
 
   '@types/mocha@10.0.10': {}
 
-  '@types/node@25.5.0':
+  '@types/node@25.9.2':
     dependencies:
-      undici-types: 7.18.2
+      undici-types: 7.24.6
 
   '@types/qs@6.15.1': {}
 
@@ -2844,21 +2848,21 @@ snapshots:
 
   '@types/send@1.2.1':
     dependencies:
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
 
   '@types/serve-static@2.2.0':
     dependencies:
       '@types/http-errors': 2.0.5
-      '@types/node': 25.5.0
+      '@types/node': 25.9.2
 
-  '@typescript-eslint/eslint-plugin@8.59.4(@typescript-eslint/parser@8.59.4(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)':
+  '@typescript-eslint/eslint-plugin@8.60.1(@typescript-eslint/parser@8.60.1(eslint@9.39.4)(typescript@5.9.3))(eslint@9.39.4)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/regexpp': 4.12.2
-      '@typescript-eslint/parser': 8.59.4(eslint@9.39.4)(typescript@5.9.3)
-      '@typescript-eslint/scope-manager': 8.59.4
-      '@typescript-eslint/type-utils': 8.59.4(eslint@9.39.4)(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.59.4(eslint@9.39.4)(typescript@5.9.3)
-      '@typescript-eslint/visitor-keys': 8.59.4
+      '@typescript-eslint/parser': 8.60.1(eslint@9.39.4)(typescript@5.9.3)
+      '@typescript-eslint/scope-manager': 8.60.1
+      '@typescript-eslint/type-utils': 8.60.1(eslint@9.39.4)(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.60.1(eslint@9.39.4)(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.60.1
       eslint: 9.39.4
       ignore: 7.0.5
       natural-compare: 1.4.0
@@ -2867,41 +2871,41 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/parser@8.59.4(eslint@9.39.4)(typescript@5.9.3)':
+  '@typescript-eslint/parser@8.60.1(eslint@9.39.4)(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/scope-manager': 8.59.4
-      '@typescript-eslint/types': 8.59.4
-      '@typescript-eslint/typescript-estree': 8.59.4(typescript@5.9.3)
-      '@typescript-eslint/visitor-keys': 8.59.4
+      '@typescript-eslint/scope-manager': 8.60.1
+      '@typescript-eslint/types': 8.60.1
+      '@typescript-eslint/typescript-estree': 8.60.1(typescript@5.9.3)
+      '@typescript-eslint/visitor-keys': 8.60.1
       debug: 4.4.3
       eslint: 9.39.4
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/project-service@8.59.4(typescript@5.9.3)':
+  '@typescript-eslint/project-service@8.60.1(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/tsconfig-utils': 8.59.4(typescript@5.9.3)
-      '@typescript-eslint/types': 8.59.4
+      '@typescript-eslint/tsconfig-utils': 8.60.1(typescript@5.9.3)
+      '@typescript-eslint/types': 8.60.1
       debug: 4.4.3
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/scope-manager@8.59.4':
+  '@typescript-eslint/scope-manager@8.60.1':
     dependencies:
-      '@typescript-eslint/types': 8.59.4
-      '@typescript-eslint/visitor-keys': 8.59.4
+      '@typescript-eslint/types': 8.60.1
+      '@typescript-eslint/visitor-keys': 8.60.1
 
-  '@typescript-eslint/tsconfig-utils@8.59.4(typescript@5.9.3)':
+  '@typescript-eslint/tsconfig-utils@8.60.1(typescript@5.9.3)':
     dependencies:
       typescript: 5.9.3
 
-  '@typescript-eslint/type-utils@8.59.4(eslint@9.39.4)(typescript@5.9.3)':
+  '@typescript-eslint/type-utils@8.60.1(eslint@9.39.4)(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/types': 8.59.4
-      '@typescript-eslint/typescript-estree': 8.59.4(typescript@5.9.3)
-      '@typescript-eslint/utils': 8.59.4(eslint@9.39.4)(typescript@5.9.3)
+      '@typescript-eslint/types': 8.60.1
+      '@typescript-eslint/typescript-estree': 8.60.1(typescript@5.9.3)
+      '@typescript-eslint/utils': 8.60.1(eslint@9.39.4)(typescript@5.9.3)
       debug: 4.4.3
       eslint: 9.39.4
       ts-api-utils: 2.5.0(typescript@5.9.3)
@@ -2909,37 +2913,37 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/types@8.59.4': {}
+  '@typescript-eslint/types@8.60.1': {}
 
-  '@typescript-eslint/typescript-estree@8.59.4(typescript@5.9.3)':
+  '@typescript-eslint/typescript-estree@8.60.1(typescript@5.9.3)':
     dependencies:
-      '@typescript-eslint/project-service': 8.59.4(typescript@5.9.3)
-      '@typescript-eslint/tsconfig-utils': 8.59.4(typescript@5.9.3)
-      '@typescript-eslint/types': 8.59.4
-      '@typescript-eslint/visitor-keys': 8.59.4
+      '@typescript-eslint/project-service': 8.60.1(typescript@5.9.3)
+      '@typescript-eslint/tsconfig-utils': 8.60.1(typescript@5.9.3)
+      '@typescript-eslint/types': 8.60.1
+      '@typescript-eslint/visitor-keys': 8.60.1
       debug: 4.4.3
       minimatch: 10.2.5
-      semver: 7.8.1
-      tinyglobby: 0.2.16
+      semver: 7.8.3
+      tinyglobby: 0.2.17
       ts-api-utils: 2.5.0(typescript@5.9.3)
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/utils@8.59.4(eslint@9.39.4)(typescript@5.9.3)':
+  '@typescript-eslint/utils@8.60.1(eslint@9.39.4)(typescript@5.9.3)':
     dependencies:
       '@eslint-community/eslint-utils': 4.9.1(eslint@9.39.4)
-      '@typescript-eslint/scope-manager': 8.59.4
-      '@typescript-eslint/types': 8.59.4
-      '@typescript-eslint/typescript-estree': 8.59.4(typescript@5.9.3)
+      '@typescript-eslint/scope-manager': 8.60.1
+      '@typescript-eslint/types': 8.60.1
+      '@typescript-eslint/typescript-estree': 8.60.1(typescript@5.9.3)
       eslint: 9.39.4
       typescript: 5.9.3
     transitivePeerDependencies:
       - supports-color
 
-  '@typescript-eslint/visitor-keys@8.59.4':
+  '@typescript-eslint/visitor-keys@8.60.1':
     dependencies:
-      '@typescript-eslint/types': 8.59.4
+      '@typescript-eslint/types': 8.60.1
       eslint-visitor-keys: 5.0.1
 
   '@unblockneteasemusic/server@0.28.0':
@@ -3056,7 +3060,7 @@ snapshots:
     dependencies:
       possible-typed-array-names: 1.1.0
 
-  axios@1.16.1:
+  axios@1.17.0:
     dependencies:
       follow-redirects: 1.16.0
       form-data: 4.0.5
@@ -3113,12 +3117,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  brace-expansion@1.1.14:
+  brace-expansion@1.1.15:
     dependencies:
       balanced-match: 1.0.2
       concat-map: 0.0.1
 
-  brace-expansion@2.1.0:
+  brace-expansion@2.1.1:
     dependencies:
       balanced-match: 1.0.2
 
@@ -3476,7 +3480,7 @@ snapshots:
       data-view-byte-offset: 1.0.1
       es-define-property: 1.0.1
       es-errors: 1.3.0
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       es-set-tostringtag: 2.1.0
       es-to-primitive: 1.3.0
       function.prototype.name: 1.1.8
@@ -3488,7 +3492,7 @@ snapshots:
       has-property-descriptors: 1.0.2
       has-proto: 1.2.0
       has-symbols: 1.1.0
-      hasown: 2.0.3
+      hasown: 2.0.4
       internal-slot: 1.1.0
       is-array-buffer: 3.0.5
       is-callable: 1.2.7
@@ -3511,21 +3515,21 @@ snapshots:
       safe-regex-test: 1.1.0
       set-proto: 1.0.0
       stop-iteration-iterator: 1.1.0
-      string.prototype.trim: 1.2.10
-      string.prototype.trimend: 1.0.9
+      string.prototype.trim: 1.2.11
+      string.prototype.trimend: 1.0.10
       string.prototype.trimstart: 1.0.8
       typed-array-buffer: 1.0.3
       typed-array-byte-length: 1.0.3
       typed-array-byte-offset: 1.0.4
-      typed-array-length: 1.0.7
+      typed-array-length: 1.0.8
       unbox-primitive: 1.1.0
-      which-typed-array: 1.1.20
+      which-typed-array: 1.1.22
 
   es-define-property@1.0.1: {}
 
   es-errors@1.3.0: {}
 
-  es-object-atoms@1.1.1:
+  es-object-atoms@1.1.2:
     dependencies:
       es-errors: 1.3.0
 
@@ -3534,7 +3538,7 @@ snapshots:
       es-errors: 1.3.0
       get-intrinsic: 1.3.0
       has-tostringtag: 1.0.2
-      hasown: 2.0.3
+      hasown: 2.0.4
 
   es-to-primitive@1.3.0:
     dependencies:
@@ -3630,12 +3634,12 @@ snapshots:
     dependencies:
       htmlparser2: 10.1.0
 
-  eslint-plugin-prettier@5.5.5(eslint-config-prettier@10.1.8(eslint@9.39.4))(eslint@9.39.4)(prettier@3.8.3):
+  eslint-plugin-prettier@5.5.6(eslint-config-prettier@10.1.8(eslint@9.39.4))(eslint@9.39.4)(prettier@3.8.3):
     dependencies:
       eslint: 9.39.4
       prettier: 3.8.3
       prettier-linter-helpers: 1.0.1
-      synckit: 0.11.12
+      synckit: 0.11.13
     optionalDependencies:
       eslint-config-prettier: 10.1.8(eslint@9.39.4)
 
@@ -3958,7 +3962,7 @@ snapshots:
       asynckit: 0.4.0
       combined-stream: 1.0.8
       es-set-tostringtag: 2.1.0
-      hasown: 2.0.3
+      hasown: 2.0.4
       mime-types: 2.1.35
 
   forwarded@0.2.0: {}
@@ -3992,7 +3996,7 @@ snapshots:
       call-bound: 1.0.4
       define-properties: 1.2.1
       functions-have-names: 1.2.3
-      hasown: 2.0.3
+      hasown: 2.0.4
       is-callable: 1.2.7
 
   functions-have-names@1.2.3: {}
@@ -4008,18 +4012,18 @@ snapshots:
       call-bind-apply-helpers: 1.0.2
       es-define-property: 1.0.1
       es-errors: 1.3.0
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       function-bind: 1.1.2
       get-proto: 1.0.1
       gopd: 1.2.0
       has-symbols: 1.1.0
-      hasown: 2.0.3
+      hasown: 2.0.4
       math-intrinsics: 1.1.0
 
   get-proto@1.0.1:
     dependencies:
       dunder-proto: 1.0.1
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
 
   get-symbol-description@1.1.0:
     dependencies:
@@ -4100,7 +4104,7 @@ snapshots:
 
   has@1.0.4: {}
 
-  hasown@2.0.3:
+  hasown@2.0.4:
     dependencies:
       function-bind: 1.1.2
 
@@ -4182,7 +4186,7 @@ snapshots:
   internal-slot@1.1.0:
     dependencies:
       es-errors: 1.3.0
-      hasown: 2.0.3
+      hasown: 2.0.4
       side-channel: 1.1.0
 
   into-stream@6.0.0:
@@ -4230,7 +4234,7 @@ snapshots:
 
   is-core-module@2.16.2:
     dependencies:
-      hasown: 2.0.3
+      hasown: 2.0.4
 
   is-core-module@2.9.0:
     dependencies:
@@ -4293,7 +4297,7 @@ snapshots:
       call-bound: 1.0.4
       gopd: 1.2.0
       has-tostringtag: 1.0.2
-      hasown: 2.0.3
+      hasown: 2.0.4
 
   is-set@2.0.3: {}
 
@@ -4314,7 +4318,7 @@ snapshots:
 
   is-typed-array@1.1.15:
     dependencies:
-      which-typed-array: 1.1.20
+      which-typed-array: 1.1.22
 
   is-unicode-supported@0.1.0: {}
 
@@ -4345,7 +4349,7 @@ snapshots:
 
   joycon@3.1.1: {}
 
-  js-yaml@4.1.1:
+  js-yaml@4.2.0:
     dependencies:
       argparse: 2.0.1
 
@@ -4385,7 +4389,7 @@ snapshots:
       listr2: 9.0.5
       picomatch: 4.0.4
       string-argv: 0.3.2
-      tinyexec: 1.1.2
+      tinyexec: 1.2.4
       yaml: 2.9.0
 
   listr2@9.0.5:
@@ -4428,6 +4432,8 @@ snapshots:
 
   media-typer@1.1.0: {}
 
+  media-typer@2.0.0: {}
+
   merge-descriptors@1.0.3: {}
 
   merge-descriptors@2.0.0: {}
@@ -4469,11 +4475,11 @@ snapshots:
 
   minimatch@3.1.5:
     dependencies:
-      brace-expansion: 1.1.14
+      brace-expansion: 1.1.15
 
   minimatch@9.0.9:
     dependencies:
-      brace-expansion: 2.1.0
+      brace-expansion: 2.1.1
 
   minimist@1.2.8: {}
 
@@ -4492,7 +4498,7 @@ snapshots:
       glob: 10.5.0
       he: 1.2.0
       is-path-inside: 3.0.3
-      js-yaml: 4.1.1
+      js-yaml: 4.2.0
       log-symbols: 4.1.0
       minimatch: 9.0.9
       ms: 2.1.3
@@ -4520,14 +4526,14 @@ snapshots:
       once: 1.4.0
       readable-stream: 3.6.2
 
-  music-metadata@11.12.3:
+  music-metadata@11.13.0:
     dependencies:
       '@borewit/text-codec': 0.2.2
       '@tokenizer/token': 0.3.0
-      content-type: 1.0.5
+      content-type: 2.0.0
       debug: 4.4.3
       file-type: 21.3.4
-      media-typer: 1.1.0
+      media-typer: 2.0.0
       strtok3: 10.3.5
       token-types: 6.1.2
       uint8array-extras: 1.5.0
@@ -4549,7 +4555,7 @@ snapshots:
 
   node-abi@3.92.0:
     dependencies:
-      semver: 7.8.1
+      semver: 7.8.3
 
   node-fetch@2.7.0:
     dependencies:
@@ -4569,7 +4575,7 @@ snapshots:
       ignore-by-default: 1.0.1
       minimatch: 10.2.5
       pstree.remy: 1.1.8
-      semver: 7.8.1
+      semver: 7.8.3
       simple-update-notifier: 2.0.0
       supports-color: 5.5.0
       touch: 3.1.1
@@ -4591,7 +4597,7 @@ snapshots:
       call-bind: 1.0.9
       call-bound: 1.0.4
       define-properties: 1.2.1
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       has-symbols: 1.1.0
       object-keys: 1.1.1
 
@@ -4744,7 +4750,7 @@ snapshots:
       https-proxy-agent: 5.0.1
       node-fetch: 2.7.0
       progress: 2.0.3
-      semver: 7.8.1
+      semver: 7.8.3
       tar-fs: 2.1.4
       yargs: 16.2.0
     transitivePeerDependencies:
@@ -4957,7 +4963,7 @@ snapshots:
       define-properties: 1.2.1
       es-abstract: 1.24.2
       es-errors: 1.3.0
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       get-intrinsic: 1.3.0
       get-proto: 1.0.1
       which-builtin-type: 1.2.1
@@ -5038,7 +5044,7 @@ snapshots:
 
   secure-json-parse@2.7.0: {}
 
-  semver@7.8.1: {}
+  semver@7.8.3: {}
 
   send@0.19.2:
     dependencies:
@@ -5118,7 +5124,7 @@ snapshots:
     dependencies:
       dunder-proto: 1.0.1
       es-errors: 1.3.0
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
 
   setprototypeof@1.2.0: {}
 
@@ -5168,7 +5174,7 @@ snapshots:
 
   simple-update-notifier@2.0.0:
     dependencies:
-      semver: 7.8.1
+      semver: 7.8.3
 
   slash@3.0.0: {}
 
@@ -5261,28 +5267,29 @@ snapshots:
       get-east-asian-width: 1.6.0
       strip-ansi: 7.2.0
 
-  string.prototype.trim@1.2.10:
+  string.prototype.trim@1.2.11:
     dependencies:
       call-bind: 1.0.9
       call-bound: 1.0.4
       define-data-property: 1.1.4
       define-properties: 1.2.1
       es-abstract: 1.24.2
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
       has-property-descriptors: 1.0.2
+      safe-regex-test: 1.1.0
 
-  string.prototype.trimend@1.0.9:
+  string.prototype.trimend@1.0.10:
     dependencies:
       call-bind: 1.0.9
       call-bound: 1.0.4
       define-properties: 1.2.1
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
 
   string.prototype.trimstart@1.0.8:
     dependencies:
       call-bind: 1.0.9
       define-properties: 1.2.1
-      es-object-atoms: 1.1.1
+      es-object-atoms: 1.1.2
 
   string_decoder@1.1.1:
     dependencies:
@@ -5328,9 +5335,9 @@ snapshots:
 
   supports-preserve-symlinks-flag@1.0.0: {}
 
-  synckit@0.11.12:
+  synckit@0.11.13:
     dependencies:
-      '@pkgr/core': 0.2.9
+      '@pkgr/core': 0.3.6
 
   tar-fs@2.1.4:
     dependencies:
@@ -5347,9 +5354,9 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
-  tinyexec@1.1.2: {}
+  tinyexec@1.2.4: {}
 
-  tinyglobby@0.2.16:
+  tinyglobby@0.2.17:
     dependencies:
       fdir: 6.5.0(picomatch@4.0.4)
       picomatch: 4.0.4
@@ -5376,7 +5383,7 @@ snapshots:
     dependencies:
       gopd: 1.2.0
       typedarray.prototype.slice: 1.0.5
-      which-typed-array: 1.1.20
+      which-typed-array: 1.1.22
 
   ts-api-utils@2.5.0(typescript@5.9.3):
     dependencies:
@@ -5437,7 +5444,7 @@ snapshots:
       is-typed-array: 1.1.15
       reflect.getprototypeof: 1.0.10
 
-  typed-array-length@1.0.7:
+  typed-array-length@1.0.8:
     dependencies:
       call-bind: 1.0.9
       for-each: 0.3.5
@@ -5470,7 +5477,7 @@ snapshots:
 
   undefsafe@2.0.5: {}
 
-  undici-types@7.18.2: {}
+  undici-types@7.24.6: {}
 
   universal-deep-strict-equal@1.2.2:
     dependencies:
@@ -5521,7 +5528,7 @@ snapshots:
       isarray: 2.0.5
       which-boxed-primitive: 1.1.1
       which-collection: 1.0.2
-      which-typed-array: 1.1.20
+      which-typed-array: 1.1.22
 
   which-collection@1.0.2:
     dependencies:
@@ -5532,7 +5539,7 @@ snapshots:
 
   which-module@2.0.1: {}
 
-  which-typed-array@1.1.20:
+  which-typed-array@1.1.22:
     dependencies:
       available-typed-arrays: 1.0.7
       call-bind: 1.0.9

public/api.html

@@ -132,6 +132,7 @@
                     <option value="eapi">eapi</option>
                     <option value="api">api</option>
                     <option value="linuxapi">linuxapi</option>
+                    <option value="xeapi">xeapi</option>
                     <option value="" selected>(默认)</option>
                 </select>
             </div>

public/api_decrypt.html

@@ -0,0 +1,695 @@
+<!DOCTYPE html>
+<html lang="zh">
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>API 参数和返回内容解析</title>
+  <style>
+    * {
+      margin: 0;
+      padding: 0;
+      box-sizing: border-box;
+    }
+
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      min-height: 100vh;
+      background: #f5f5f5;
+      padding: 20px;
+    }
+
+    .container {
+      max-width: 900px;
+      margin: 0 auto;
+      background: white;
+      border-radius: 12px;
+      padding: 32px;
+      box-shadow: 0 2px 8px rgba(0, 0, 0, 0.1);
+    }
+
+    h1 {
+      font-size: 24px;
+      font-weight: 600;
+      color: #333;
+      margin-bottom: 24px;
+    }
+
+    .form-group {
+      margin-bottom: 24px;
+    }
+
+    label {
+      display: block;
+      font-size: 14px;
+      font-weight: 500;
+      color: #555;
+      margin-bottom: 8px;
+    }
+
+    textarea {
+      width: 100%;
+      padding: 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-family: 'Courier New', monospace;
+      font-size: 13px;
+      resize: vertical;
+      min-height: 200px;
+      outline: none;
+    }
+
+    textarea:focus {
+      border-color: #333;
+    }
+
+    .radio-group {
+      display: flex;
+      gap: 24px;
+      margin-bottom: 24px;
+    }
+
+    .radio-item {
+      display: flex;
+      align-items: center;
+      gap: 8px;
+    }
+
+    .radio-item input[type="radio"] {
+      cursor: pointer;
+    }
+
+    .radio-item label {
+      margin: 0;
+      cursor: pointer;
+      font-size: 14px;
+    }
+
+    button {
+      background: #333;
+      color: white;
+      padding: 12px 28px;
+      border: none;
+      border-radius: 6px;
+      font-size: 15px;
+      font-weight: 500;
+      cursor: pointer;
+      transition: background 0.2s ease;
+    }
+
+    button + button {
+      margin-left: 12px;
+    }
+
+    button:hover {
+      background: #555;
+    }
+
+    .result-section {
+      margin-top: 24px;
+    }
+
+    .result-section label {
+      margin-bottom: 12px;
+    }
+
+    .decode-result {
+      white-space: pre-wrap;
+      word-break: break-all;
+      background: #f9f9f9;
+      padding: 16px;
+      border-radius: 6px;
+      border: 1px solid #eee;
+      min-height: 200px;
+      max-height: 400px;
+      overflow: auto;
+      font-family: 'Courier New', monospace;
+      font-size: 13px;
+    }
+
+    .decode-result .json-key { color: #881391; }
+    .decode-result .json-string { color: #1a7f37; }
+    .decode-result .json-number { color: #0550ae; }
+    .decode-result .json-boolean { color: #cf222e; }
+    .decode-result .json-null { color: #656d76; }
+
+    .example-section {
+      margin-top: 32px;
+      padding-top: 24px;
+      border-top: 1px solid #eee;
+    }
+
+    .example-section h2 {
+      font-size: 18px;
+      font-weight: 600;
+      color: #333;
+      margin-bottom: 16px;
+    }
+
+    .example-section img {
+      max-width: 100%;
+      height: auto;
+      border-radius: 6px;
+      margin-bottom: 16px;
+      border: 1px solid #eee;
+    }
+
+    /* new elements for multi-crypto support */
+    .crypto-bar {
+      display: flex;
+      flex-wrap: wrap;
+      align-items: center;
+      gap: 8px;
+      margin-bottom: 20px;
+      padding: 12px 16px;
+      background: #fafafa;
+      border-radius: 6px;
+      border: 1px solid #eee;
+    }
+
+    .crypto-bar .bar-label {
+      font-size: 13px;
+      font-weight: 500;
+      color: #555;
+      margin-right: 8px;
+    }
+
+    .crypto-btn {
+      padding: 5px 14px;
+      border-radius: 4px;
+      border: 1px solid #ddd;
+      background: #fff;
+      cursor: pointer;
+      font-size: 13px;
+      font-weight: 500;
+      color: #666;
+      transition: all 0.15s ease;
+    }
+
+    .crypto-btn:hover {
+      border-color: #333;
+      color: #333;
+      background: #f5f5f5;
+    }
+
+    .crypto-btn.active {
+      border-color: #333;
+      background: #333;
+      color: #fff;
+    }
+
+    .crypto-btn .badge {
+      display: inline-block;
+      font-size: 10px;
+      background: rgba(0,0,0,0.08);
+      border-radius: 4px;
+      padding: 0 5px;
+      margin-left: 3px;
+    }
+    .crypto-btn.active .badge {
+      background: rgba(255,255,255,0.2);
+    }
+
+    .mode-row {
+      display: flex;
+      align-items: center;
+      gap: 20px;
+      margin-bottom: 20px;
+      flex-wrap: wrap;
+    }
+
+    .mode-row .mode-label {
+      font-size: 13px;
+      font-weight: 500;
+      color: #555;
+    }
+
+    .mode-row .radio-group {
+      margin-bottom: 0;
+    }
+
+    .info-hint {
+      font-size: 12px;
+      color: #888;
+      margin-top: 6px;
+      padding: 6px 10px;
+      background: #fafafa;
+      border-radius: 4px;
+      border-left: 3px solid #999;
+    }
+
+    .info-hint.warn {
+      border-left-color: #e67e22;
+      background: #fef9f0;
+      color: #d35400;
+    }
+
+    .action-row {
+      display: flex;
+      gap: 8px;
+      flex-wrap: wrap;
+      margin-bottom: 4px;
+    }
+
+    .action-row button + button {
+      margin-left: 0;
+    }
+
+    button.btn-secondary {
+      background: #e8e8e8;
+      color: #444;
+    }
+    button.btn-secondary:hover {
+      background: #d5d5d5;
+    }
+    button.btn-secondary:disabled {
+      opacity: 0.4;
+      cursor: not-allowed;
+      pointer-events: none;
+    }
+    button.btn-success {
+      background: #4caf50;
+    }
+    button.btn-success:hover {
+      background: #43a047;
+    }
+    button.btn-success:disabled {
+      opacity: 0.4;
+      cursor: not-allowed;
+      pointer-events: none;
+    }
+
+    .result-section .section-header {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      margin-bottom: 10px;
+    }
+
+    .result-section .section-header label {
+      margin: 0;
+    }
+
+    .copy-btn {
+      font-size: 12px;
+      padding: 3px 12px;
+      border-radius: 4px;
+      border: 1px solid #ddd;
+      background: #fff;
+      cursor: pointer;
+      color: #666;
+      transition: all 0.15s;
+    }
+    .copy-btn:hover {
+      background: #333;
+      color: #fff;
+      border-color: #333;
+    }
+
+    .example-grid {
+      display: grid;
+      grid-template-columns: 1fr 1fr;
+      gap: 16px;
+      margin-top: 12px;
+    }
+
+    .example-card {
+      background: #fafafa;
+      border-radius: 6px;
+      padding: 16px;
+      border: 1px solid #eee;
+    }
+
+    .example-card h3 {
+      font-size: 14px;
+      font-weight: 600;
+      color: #555;
+      margin-bottom: 8px;
+    }
+
+    .example-card pre {
+      font-family: 'Courier New', monospace;
+      font-size: 12px;
+      line-height: 1.5;
+      background: #fff;
+      padding: 10px;
+      border-radius: 4px;
+      overflow-x: auto;
+      border: 1px solid #e8e8e8;
+      max-height: 120px;
+      overflow-y: auto;
+      margin-bottom: 8px;
+    }
+
+    .example-card .tag {
+      display: inline-block;
+      font-size: 10px;
+      font-weight: 600;
+      padding: 2px 8px;
+      border-radius: 3px;
+      margin-bottom: 6px;
+    }
+
+    .tag-eapi { background: #e3f2fd; color: #1565c0; }
+    .tag-weapi { background: #fce4ec; color: #c62828; }
+    .tag-linuxapi { background: #e8f5e9; color: #2e7d32; }
+    .tag-xeapi { background: #f3e5f5; color: #7b1fa2; }
+    .tag-api { background: #fff3e0; color: #e65100; }
+
+    @media (max-width: 640px) {
+      .example-grid { grid-template-columns: 1fr; }
+      .crypto-bar { gap: 4px; }
+      .crypto-btn { padding: 4px 10px; font-size: 12px; }
+    }
+  </style>
+</head>
+
+<body>
+  <div id="app" class="container">
+    <h1>API 参数和返回内容解析</h1>
+
+    <!-- 加密方式选择 -->
+    <div class="crypto-bar">
+      <span class="bar-label">加密方式</span>
+      <button
+        v-for="c in cryptoList"
+        :key="c.value"
+        class="crypto-btn"
+        :class="{ active: crypto === c.value }"
+        @click="selectCrypto(c.value)"
+      >
+        {{ c.label }}
+        <span class="badge">{{ c.badge }}</span>
+      </button>
+    </div>
+
+    <div class="mode-row">
+      <span class="mode-label">数据类型</span>
+      <div class="radio-group">
+        <div class="radio-item">
+          <input
+            type="radio"
+            id="mode-req"
+            :value="true"
+            v-model="isReq"
+            :disabled="cryptoInfo.reqDisabled"
+          />
+          <label for="mode-req">请求数据 request</label>
+        </div>
+        <div class="radio-item">
+          <input
+            type="radio"
+            id="mode-resp"
+            :value="false"
+            v-model="isReq"
+            :disabled="cryptoInfo.respDisabled"
+          />
+          <label for="mode-resp">返回数据 response</label>
+        </div>
+      </div>
+    </div>
+
+    <div class="form-group">
+      <label for="dataInput">{{ cryptoInfo.inputLabel }}</label>
+      <textarea
+        id="dataInput"
+        v-model="encryptedData"
+        :rows="crypto === 'xeapi' ? 8 : 10"
+        :placeholder="cryptoInfo.placeholder"
+      ></textarea>
+      <div class="info-hint" :class="{ warn: cryptoInfo.warning }">
+        {{ cryptoInfo.hint }}
+      </div>
+    </div>
+
+    <div class="action-row">
+      <button @click="decrypt">解密</button>
+      <button class="btn-success" @click="sendToApi" :disabled="!canSend">
+        填入 API 调试
+      </button>
+      <button class="btn-secondary" @click="loadExample">加载示例</button>
+      <button class="btn-secondary" @click="clearAll">清空</button>
+    </div>
+
+    <div class="result-section">
+      <div class="section-header">
+        <label>解密结果：</label>
+        <button
+          v-if="result && result !== '{}' && result !== 'null'"
+          class="copy-btn"
+          @click="copyResult"
+        >
+          复制
+        </button>
+      </div>
+      <pre class="decode-result" v-html="highlightedResult"></pre>
+    </div>
+
+    <div class="example-section">
+      <h2>使用示例</h2>
+      <img src="/static/eapi_params.png" alt="请求示例" />
+      <img src="/static/eapi_response.png" alt="响应示例" />
+
+      <div class="example-grid">
+        <div class="example-card">
+          <span class="tag tag-eapi">eapi</span>
+          <h3>请求参数解密</h3>
+          <pre>输入 hex 字符串，解密后得到请求 URL 和参数</pre>
+          <button class="copy-btn" @click="loadExampleData('eapi_req')">加载示例</button>
+        </div>
+        <div class="example-card">
+          <span class="tag tag-linuxapi">linuxapi</span>
+          <h3>请求 eparams 解密</h3>
+          <pre>AES-ECB 解密 linuxapi 的 eparams 参数（hex）</pre>
+          <button class="copy-btn" @click="loadExampleData('linuxapi_req')">加载示例</button>
+        </div>
+      </div>
+    </div>
+  </div>
+
+  <script src="https://fastly.jsdelivr.net/npm/axios"></script>
+  <script src="https://fastly.jsdelivr.net/npm/vue@3"></script>
+
+  <script>
+    const cryptoInfos = {
+      eapi: {
+        label: 'eapi',
+        badge: 'AES-ECB',
+        inputLabel: '十六进制字符串（Hex）',
+        placeholder: '粘贴 eapi 加密后的 Hex 字符串...',
+        hint: 'eapi 使用 AES-ECB 加密，密钥 e82ckenh8dichen8。请求格式: url-36cd479b6b5-data-36cd479b6b5-md5',
+        warning: false,
+        reqDisabled: false,
+        respDisabled: false,
+      },
+      weapi: {
+        label: 'weapi',
+        badge: 'AES-CBC+RSA',
+        inputLabel: '十六进制字符串（Hex）',
+        placeholder: '粘贴 weapi 返回数据的 Hex 字符串（e_r=true 时）...',
+        hint: 'weapi 请求解密需要 RSA 私钥，暂不支持。仅支持返回数据解密（同 eapi 的 AES-ECB）',
+        warning: true,
+        reqDisabled: true,
+        respDisabled: false,
+      },
+      linuxapi: {
+        label: 'linuxapi',
+        badge: 'AES-ECB',
+        inputLabel: '十六进制字符串（Hex）',
+        placeholder: '粘贴 linuxapi 的 eparams (Hex 格式)...',
+        hint: 'linuxapi 请求 eparams 使用 AES-ECB 加密，密钥 rFgB&h#%2?^eDg:Q。返回为明文 JSON',
+        warning: false,
+        reqDisabled: false,
+        respDisabled: false,
+      },
+      xeapi: {
+        label: 'xeapi',
+        badge: 'X25519+AES',
+        inputLabel: 'Base64 编码字符串',
+        placeholder: '粘贴 xeapi 返回数据的 Base64 原始二进制...',
+        hint: 'xeapi 请求涉及 X25519 ECDH 密钥交换，暂不支持。返回数据使用 AES-ECB + eapiKey 加密，可能带 gzip',
+        warning: true,
+        reqDisabled: true,
+        respDisabled: false,
+      },
+      api: {
+        label: 'api',
+        badge: '明文',
+        inputLabel: 'JSON 文本',
+        placeholder: '粘贴 api 的请求或返回 JSON...',
+        hint: 'api（明文）不经加密，直接传递 JSON 数据',
+        warning: false,
+        reqDisabled: false,
+        respDisabled: false,
+      },
+    }
+
+    const examples = {
+      eapi_req:
+        'AD96DDB984491E79B6F429DD650C6E2AE524627AC223AC9A123C66BB0997965950FED137544A93DFC718E16F57C8C121AF537086F395570A5602A3922366D11964DAFACD7830AACABF62E5650E67F457E79C1D2E13502391FC3487216CC5BF8681843FCB8E05559487EB18AAC1BE0EFEA4F7B6A050478366153A9426C238B8869600B275704555A9EB94C92E4F3FDABE9E0BCE07645410D0AA7B675698A4CAE6CD3620633ABF0B849A4244CC8DFC5DB2646D5EA9B3954E62BFEF19AFEAFDDC34E55C3E9A1DD3167CF53D443617108141',
+      linuxapi_req:
+        'A0D9583F4C5FF68DE851D2893A49DE98CC059A8845B664AA2459CEA7271A2C0E5BCA8A188E1BE398DB4C9A3FC117E19C9BAC491F454D17D403C2389476AB0FF4296B00294AD1EBDA141C188DF918F6B9599DAA5739928FD52B4AE580D8657903CE3C6633D2E46AD242408AE219B8191E',
+    }
+
+    const app = Vue.createApp({
+      data() {
+        return {
+          crypto: 'eapi',
+          encryptedData: '',
+          result: '{}',
+          isReq: true,
+          cryptoList: [
+            { value: 'eapi', label: 'eapi', badge: 'AES-ECB' },
+            { value: 'weapi', label: 'weapi', badge: 'AES-CBC+RSA' },
+            { value: 'linuxapi', label: 'linuxapi', badge: 'AES-ECB' },
+            { value: 'xeapi', label: 'xeapi', badge: 'X25519+AES' },
+            { value: 'api', label: 'api', badge: '明文' },
+          ],
+        }
+      },
+      mounted() {
+        this.loadExample()
+      },
+      computed: {
+        cryptoInfo() {
+          return cryptoInfos[this.crypto] || cryptoInfos.eapi
+        },
+        isRequestMode() {
+          return this.isReq === true || this.isReq === 'true'
+        },
+        canSend() {
+          if (!this.isRequestMode) return false
+          if (!this.result || this.result === '{}' || this.result === 'null') return false
+          try {
+            JSON.parse(this.result)
+            return true
+          } catch (error) {
+            return false
+          }
+        },
+        highlightedResult() {
+          if (!this.result || this.result === '') return ''
+          try {
+            const parsed = typeof this.result === 'string' ? JSON.parse(this.result) : this.result
+            const json = JSON.stringify(parsed, null, 2)
+            return this.syntaxHighlight(json)
+          } catch (error) {
+            return this.escapeHtml(String(this.result))
+          }
+        },
+      },
+      watch: {
+        crypto(val) {
+          const info = cryptoInfos[val]
+          if (this.isReq && info.reqDisabled) {
+            this.isReq = false
+          } else if (!this.isReq && info.respDisabled) {
+            this.isReq = true
+          }
+        },
+      },
+      methods: {
+        selectCrypto(val) {
+          this.crypto = val
+        },
+        syntaxHighlight(json) {
+          const escaped = this.escapeHtml(json)
+          return escaped
+            .replace(/(?:"(?:\\.|[^"\\])*")\s*:/g, '<span class="json-key">$&</span>')
+            .replace(/:(\s*)(?:"(?:\\.|[^"\\])*")/g, ':<span class="json-string">$1$2</span>')
+            .replace(/:\s*(\d+(?:\.\d+)?)/g, ': <span class="json-number">$1</span>')
+            .replace(/:\s*(true|false)/g, ': <span class="json-boolean">$1</span>')
+            .replace(/:\s*(null)/g, ': <span class="json-null">$1</span>')
+        },
+        escapeHtml(text) {
+          const div = document.createElement('div')
+          div.textContent = text
+          return div.innerHTML
+        },
+        formatResult(value) {
+          if (value == null || value === '') return ''
+          try {
+            const parsed = typeof value === 'string' ? JSON.parse(value) : value
+            return JSON.stringify(parsed, null, 2)
+          } catch (error) {
+            return String(value)
+          }
+        },
+        async decrypt() {
+          if (!this.encryptedData || !this.encryptedData.trim()) {
+            alert('请先输入要解密的数据')
+            return
+          }
+          try {
+            const res = await axios({
+              url: `/decrypt?crypto=${this.crypto}&isReq=${this.isReq}&timestamp=${Date.now()}`,
+              method: 'post',
+              data: { data: this.encryptedData },
+            })
+            this.result = JSON.stringify(res.data.data)
+          } catch (error) {
+            console.error(error)
+            const msg = error?.response?.data?.message || error?.message || '解密失败，数据格式错误'
+            alert(msg)
+            this.result = '{}'
+          }
+        },
+        sendToApi() {
+          if (!this.canSend) return
+          const payload = JSON.parse(this.result)
+          const params = new URLSearchParams()
+          const uri = payload.uri || payload.url || payload.path || ''
+          params.set('uri', uri)
+          params.set('crypto', this.crypto)
+          const data = payload.params || payload.data || payload.body || payload.payload || payload.request || {}
+          params.set('data', JSON.stringify(data))
+          window.open(`/api.html?${params.toString()}`, '_blank')
+        },
+        loadExample() {
+          switch (this.crypto) {
+            case 'eapi':
+              this.encryptedData = examples.eapi_req
+              break
+            case 'linuxapi':
+              this.isReq = true
+              this.encryptedData = examples.linuxapi_req
+              break
+            case 'xeapi':
+              this.isReq = false
+              this.encryptedData = ''
+              break
+            default:
+              this.encryptedData = ''
+          }
+          if (this.encryptedData) this.decrypt()
+        },
+        loadExampleData(type) {
+          switch (type) {
+            case 'eapi_req':
+              this.crypto = 'eapi'
+              this.isReq = true
+              this.encryptedData = examples.eapi_req
+              break
+            case 'linuxapi_req':
+              this.crypto = 'linuxapi'
+              this.isReq = true
+              this.encryptedData = examples.linuxapi_req
+              break
+          }
+          if (this.encryptedData) this.decrypt()
+        },
+        clearAll() {
+          this.encryptedData = ''
+          this.result = '{}'
+        },
+        copyResult() {
+          const text = typeof this.result === 'string' ? this.result : JSON.stringify(this.result, null, 2)
+          navigator.clipboard.writeText(text).then(() => {
+            alert('已复制到剪贴板')
+          })
+        },
+      },
+    })
+    app.mount('#app')
+  </script>
+</body>
+</html>

public/docs/_coverpage.md

@@ -1,13 +1,14 @@
-# 网易云音乐 API Enhanced
+# NeteaseCloudMusicAPI Enhanced
 
-> 🔍 网易云音乐API Node.js服务的复兴项目
+> 🎉 全网收集最全的网易云音乐api接口 基于[NeteaseCloudMusicAPI](https://github.com/binaryify/NeteaseCloudMusicApi)的复刻版本
 
-- 基于原版网易云API新增更多有趣的功能
-- 具备登录接口,多达200多个接口
-- 更完善的文档
+- ⚡ 四种加密模式 · 后端代理
+- 🪛 具备多达200多个接口
+- 📄 更完善的文档
 
 
 [Github](https://github.com/neteasecloudmusicapienhanced/api-enhanced)
-[Get Started](#neteasecloudmusicapienhanced)
+[前往本家](https://github.com/binaryify/NeteaseCloudMusicApi)
+[快速开始](#neteasecloudmusicapienhanced)
 
 ![color](#ffffff)

public/docs/home.md

@@ -2,8 +2,6 @@
 
 网易云音乐 NodeJS API Enhanced
 
-最后更新于: 2026.2.15
-
 ## 灵感来自
 
 [disoul/electron-cloud-music](https://github.com/disoul/electron-cloud-music)
@@ -90,6 +88,7 @@ v4.29.9 加入了生成随机中国 IP 功能, 在请求时加上 `randomCNIP=tr
 5. 直接点`Continue`
 6. `PROJECT NAME`自己填,`FRAMEWORK PRESET` 选 `Other` 然后直接点 `Deploy` 接着等部署完成即可
 
+
 ## 腾讯云 serverless 部署
 
 因 `Vercel` 在国内访问太慢(不绑定自己的域名的情况下),在此提供腾讯云 serverless 部署方法
@@ -103,6 +102,7 @@ v4.29.9 加入了生成随机中国 IP 功能, 在请求时加上 `randomCNIP=tr
 5. 输入`应用名`,上传方式选择`代码仓库`,进行 GitHub 授权(如已授权可跳过这一步),代码仓库选择刚刚 fork 的项目
 6. 启动文件填入:
 
+
 ```
 #!/bin/bash
 export PORT=9000
@@ -115,6 +115,7 @@ export PORT=9000
   - 腾讯云 serverless 并不是免费的,前三个月有免费额度,之后收费
   - 当前(2024-08-24), 用此法创建的话, 会`默认`关联一个"日志服务-日志主题"(创建过程中没有提醒), 此服务是计量收费的
 
+
 ## 可以使用代理
 
 在 query 参数中加上 proxy=your-proxy 即可让这一次的请求使用 proxy
@@ -182,6 +183,7 @@ request 相关的环境变量
 5. no_proxy
 6. NO_PROXY
 
+
 ```shell
 docker pull moefurina/ncm-api
 
@@ -211,14 +213,20 @@ $ sudo docker run -d -p 3000:3000 netease-music-api
 
 ## 调试工具
 
-- `eapi` 请求参数或返回内容可在 `/eapi_decrypt.html` 里解析
+- 大部分请求参数或返回内容可在 `/api_decrypt.html` 里解析
 - 请求参数模式下, 解密结果可直接带到 `/api.html` 继续调试
 - 需要返回值加密时, 可传 `e_r=1`, `weapi` 和 `eapi` 都支持
+- 目前支持算法 有 `weapi`, `eapi`, `linuxapi` 和 `xeapi` (xeapi 是一种不加密的特殊算法, 主要用于调试加密前的原始请求参数)
+
 
 ## 接口文档
 
 ### 调用前须知
 
+AI 生成的图,仅供娱乐()
+
+![ai generated](./aigen.png)
+
 !> 本项目不提供线上 demo, 只提供在线文档服务, 请不要轻易信任使用他人提供的公开服务，以免发生安全问题,泄露自己的账号和密码
 
 !> 为使用方便,降低门槛, 文档示例接口直接使用了 GET 请求,本项目同时支持 GET/POST 请按实际需求使用 (POST 请求 url 必须添加时间戳,使每次请求 url 不一样,不然请求会被缓存)
@@ -261,20 +269,16 @@ $ sudo docker run -d -p 3000:3000 netease-music-api
 
 !> ~~因网易增加了网易云盾验证,密码登录暂时不要使用,尽量使用短信验证码登录和二维码登录,否则调用某些接口会触发需要验证的错误~~
 
-!> ~~二开作者再注: 现在二维码登录也无法使用了, 网易云官方最近查的太严了, 现在尝试调用会提示环境异常, 如果各位有绕过的方法请一定开`Pull Request`~~
-
-!> ~~二开作者注: 二维码登录现在是修复了, 但是密码登录和短信登录还是不行, 如果各位有绕过的方法请一定开`Pull Request`~~
-
-!> 二开作者注: 在`v4.29.18`版本中修复了密码登录和短信登录的问题, 现在可以正常使用了
+!> 二开作者注: 在`v4.29.18`版本中修复了短信登录的问题, 现在可以正常使用了
 
 #### 1. 手机登录
 
-**必选参数 :**  
+**必选参数 :**
 `phone`: 手机号码
 
 `password`: 密码
 
-**可选参数 :**  
+**可选参数 :**
 `countrycode`: 国家码，用于国外手机号登录，例如美国传入：`1`
 
 `md5_password`: md5 加密后的密码,传入后 `password` 参数将失效
@@ -433,11 +437,11 @@ body {
 
 ### 检测手机号码是否已注册
 
-说明 : 调用此接口 ,可检测手机号码是否已注册  
-**必选参数 :**  
+说明 : 调用此接口 ,可检测手机号码是否已注册
+**必选参数 :**
 `phone` : 手机号码
 
-**可选参数 :**  
+**可选参数 :**
 `countrycode`: 国家码，用于国外手机号，例如美国传入：`1` ,默认 86 即中国
 
 **接口地址 :** `/cellphone/existence/check`
@@ -446,7 +450,7 @@ body {
 
 ### 初始化昵称
 
-说明 : 刚注册的账号(需登录),调用此接口 ,可初始化昵称  
+说明 : 刚注册的账号(需登录),调用此接口 ,可初始化昵称
 **必选参数 :**
 `nickname` : 昵称
 
@@ -701,7 +705,7 @@ tags: 歌单标签
 
 说明 : 登录后调用此接口,使用`'Content-Type': 'multipart/form-data'`上传图片 formData(name 为'imgFile'),可更新歌单封面(参考:https://github.com/neteasecloudmusicapienhanced/api-enhanced/blob/main/public/playlist_cover_update.html)
 
-**必选参数 :**  
+**必选参数 :**
 `id`: 歌单 id 3143833470
 
 **可选参数 :**
@@ -731,7 +735,7 @@ tags: 歌单标签
 
 说明 : 登录后调用此接口,可以根据歌曲 id 顺序调整歌曲顺序
 
-**必选参数 :**  
+**必选参数 :**
 `pid`: 歌单 id
 
 `ids`: 歌曲 id 列表
@@ -1211,6 +1215,7 @@ tags: 歌单标签
 
 > 如果你设置 limit=50&offset=100，你就会得到第 101-150 首歌曲
 
+
 ### 歌单详情动态
 
 说明 : 调用后可获取歌单详情动态部分,如评论数,是否收藏,播放数
@@ -1404,7 +1409,7 @@ tags: 歌单标签
 
 ### 歌单收藏者
 
-说明 : 调用此接口 , 传入歌单 id 可获取歌单的所有收藏者  
+说明 : 调用此接口 , 传入歌单 id 可获取歌单的所有收藏者
 **必选参数 :**
 
 `id` : 歌单 id
@@ -1497,6 +1502,7 @@ tags: 歌单标签
 
 - （可能存在）JSON 歌曲元数据
 
+
 ```
 {"t":0,"c":[{"tx":"作曲: "},{"tx":"柳重言","li":"http://p1.music.126.net/Icj0IcaOjH2ZZpyAM-QGoQ==/6665239487822533.jpg","or":"orpheus://nm/artist/home?id=228547&type=artist"}]}
 {"t":5403,"c":[{"tx":"编曲: "},{"tx":"Alex San","li":"http://p1.music.126.net/pSbvYkrzZ1RFKqoh-fA9AQ==/109951166352922615.jpg","or":"orpheus://nm/artist/home?id=28984845&type=artist"}]}
@@ -1513,6 +1519,7 @@ tags: 歌单标签
 
 * 逐字歌词
 
+
 ```
 [16210,3460](16210,670,0)还(16880,410,0)没...
  ~~~~1 ~~~2  ~~~~3 ~~4 5 ~6 (...)
@@ -1523,7 +1530,7 @@ tags: 歌单标签
 1. 歌词行显示开始时间戳 (毫秒)
 2. 歌词行显示总时长(毫秒)
 3. 逐字显示开始时间戳 (毫秒)
-4. 逐字显示时长 (厘秒/0.01s)
+4. 逐字显示时长 (毫秒)
 5. 未知
 6. 文字
 
@@ -1589,7 +1596,7 @@ tags: 歌单标签
 
 说明 : 调用此接口 , 传入资源 parentCommentId 和资源类型 type 和资源 id 参数, 可获得该资源的歌曲楼层评论
 
-**必选参数 :**  
+**必选参数 :**
 `parentCommentId`: 楼层评论 id
 
 `id` : 资源 id
@@ -1805,7 +1812,7 @@ tags: 歌单标签
 
 说明 : 调用此接口 , 传入资源类型和资源 id,以及排序方式,可获取对应资源的评论
 
-**必选参数 :**  
+**必选参数 :**
 `id` : 资源 id, 如歌曲 id,mv id
 
 `type`: 数字 , 资源类型 , 对应歌曲 , mv, 专辑 , 歌单 , 电台, 视频对应以下类型
@@ -1828,7 +1835,7 @@ tags: 歌单标签
 7: 电台
 ```
 
-**可选参数 :**  
+**可选参数 :**
 `pageNo`:分页参数,第 N 页,默认为 1
 
 `pageSize`:分页参数,每页多少条数据,默认 20
@@ -2201,7 +2208,7 @@ privilege:权限相关信息
 
 说明 : 调用此接口 , 可获得已收藏专辑列表
 
-**可选参数 :**  
+**可选参数 :**
 `limit`: 取出数量 , 默认为 25
 
 `offset`: 偏移数量 , 用于分页 , 如 :( 页数 -1)\*25, 其中 25 为 limit 的值 , 默认
@@ -2493,6 +2500,18 @@ privilege:权限相关信息
 
 **调用例子 :** `/scrobble?id=518066366&sourceid=36780169&time=291`
 
+### 提交歌曲播放状态
+
+说明 : 调用此接口可提交歌曲播放状态，支持会话追踪和播放模式记录，未传入 `sessionId` 时后端会自动生成
+
+**必选参数 :** `id`: 歌曲 id
+
+**可选参数 :** `sessionId`: 播放会话 ID（12 位大写字母和数字），不传则自动生成, `progress`: 播放进度（秒），默认 0, `playMode`: 播放模式，默认 `list_loop`, `type`: 资源类型，默认 `song`
+
+**接口地址 :** `/relay/play/state/submit`
+
+**调用例子 :** `/relay/play/state/submit?id=518066366&progress=30`
+
 ### 热门歌手
 
 说明 : 调用此接口 , 可获取热门歌手数据
@@ -2510,7 +2529,7 @@ privilege:权限相关信息
 
 说明 : 调用此接口 , 可获取全部 mv
 
-**可选参数 :**  
+**可选参数 :**
 `area`: 地区,可选值为全部,内地,港台,欧美,日本,韩国,不填则为全部
 `type`: 类型,可选值为全部,官方版,原生,现场版,网易出品,不填则为全部
 
@@ -2592,7 +2611,7 @@ privilege:权限相关信息
 
 **接口地址 :** `/program/recommend`
 
-**可选参数 :**  
+**可选参数 :**
 `limit`: 取出数量 , 默认为 10
 
 `offset`: 偏移数量 , 用于分页 , 如 :( 页数 -1)\*10, 其中 10 为 limit 的值 , 默认
@@ -2874,6 +2893,7 @@ type : 地区
 - 适合 Vercel、Netlify 等有请求体限制的平台
 - 需要前端配合实现
 
+
 #### 客户端直传相关接口
 
 **获取上传凭证**
@@ -2920,6 +2940,7 @@ type : 地区
 - `artist`: 艺术家
 - `album`: 专辑名
 
+
 #### 客户端直传流程
 
 1. 客户端计算文件 MD5
@@ -2927,11 +2948,12 @@ type : 地区
 3. 如果 `needUpload` 为 true,直接 PUT 文件到 `uploadUrl`
 4. 调用 `/cloud/upload/complete` 完成导入
 
+
 ### 云盘歌曲信息匹配纠正
 
 说明 : 登录后调用此接口,可对云盘歌曲信息匹配纠正,如需取消匹配,asid 需要传 0
 
-**必选参数 :**  
+**必选参数 :**
 `uid`: 用户 id
 
 `sid`: 云盘的歌曲 id
@@ -3402,7 +3424,7 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`
 
 `limit` : 返回数量 , 默认为 30
 
-`offset` : 偏移数量，用于分页 , 如 :( 页数 -1)\*30, 其中 30 为 limit 的值 , 默认为 0  
+`offset` : 偏移数量，用于分页 , 如 :( 页数 -1)\*30, 其中 30 为 limit 的值 , 默认为 0
 **接口地址 :** `/album/list`
 
 **调用例子 :** `/album/list?limit=10`
@@ -3561,7 +3583,7 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`
 
 **可选参数 :** `limit`: 取出评论数量 , 默认为 10
 
-`offset`: 偏移数量 , 用于分页 , 如 :( 评论页数 -1)\*10, 其中 10 为 limit 的值  
+`offset`: 偏移数量 , 用于分页 , 如 :( 评论页数 -1)\*10, 其中 10 为 limit 的值
 **接口地址 :** `/yunbei/tasks/expense`
 
 **调用例子 :** `/yunbei/tasks/expense?limit=1`
@@ -4199,6 +4221,7 @@ ONLINE 已发布
   - `voiceFeeType: 0`：返回免费的声音
   - `voiceFeeType: 1`：返回收费的声音
 
+
 ### 播客声音详情
 
 说明: 获取播客里的声音详情
@@ -5031,7 +5054,7 @@ let data = encodeURIComponent(
 
 **调用例子:** `/vip/sign`
 
-### 黑胶乐签打卡信息
+### 黑胶乐签未来打卡信息
 
 说明: 登录后调用此接口, 获取黑胶乐签打卡信息
 
@@ -5120,7 +5143,7 @@ let data = encodeURIComponent(
 
 说明 : 登录后调用此接口, 获取我创建的博客声音
 
-**可选参数 :** 
+**可选参数 :**
 
 `limit` : 返回数量 , 默认为 20
 
@@ -5133,7 +5156,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 获取DIFM电台分类
 
-**必选参数 :**  
+**必选参数 :**
 
 `sources`: 来源列表, 0: 最嗨电音 1: 古典电台 2: 爵士电台
 
@@ -5145,7 +5168,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 获取DIFM电台收藏列表
 
-**必选参数 :**  
+**必选参数 :**
 
 `sources`: 来源列表, 0: 最嗨电音 1: 古典电台 2: 爵士电台
 
@@ -5181,7 +5204,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 获取DIFM播放列表
 
-**必选参数 :**  
+**必选参数 :**
 
 `source`: 来源, 0: 最嗨电音 1: 古典电台 2: 爵士电台
 
@@ -5215,7 +5238,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 获取标签下资源列表; 接口返回的`trackId`可以用于请求`/song/url/v1`接口，用于获取声音的下载地址
 
-**必选参数 :**  
+**必选参数 :**
 
 `tag`: 标签, 由标签列表接口得到
 
@@ -5227,7 +5250,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 查看同类推荐
 
-**必选参数 :**  
+**必选参数 :**
 
 `id`: id, `/sati/tag/list`接口返回的`trackId`
 
@@ -5247,7 +5270,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口, 收藏声音
 
-**必选参数 :**  
+**必选参数 :**
 
 `id`: id, `/sati/tag/list`接口返回的`trackId`
 
@@ -5263,7 +5286,7 @@ let data = encodeURIComponent(
 
 说明: 调用此接口，获取跑步漫游的歌曲信息
 
-**必选参数：**     
+**必选参数：**
 
 `bpm`: 步频
 
@@ -5339,6 +5362,56 @@ let data = encodeURIComponent(
 
 说明 : 调用此接口,可获取城市榜、城市风格榜等指定维度音乐排行榜歌曲列表
 
+**必选参数 :**
+
+`chartCode`: 榜单编码,如 `CITY_SONG_CHART`、`CITY_STYLE_SONG_CHART`
+
+`targetId`: 目标 id,城市榜如 `110000`,城市风格榜如 北京华语流行榜 `110000_1020`。城市风格榜格式通常为 `城市 id_曲风 id`,其中曲风 id 可通过[曲风列表](#曲风列表)接口 `/style/list` 获取。城市榜的城市列表可通过[多级行政区划数据](#多级行政区划数据)接口传入 `bizCode=chart` 获取；城市风格榜的城市列表可通过该接口传空 `bizCode` 获取
+
+`targetType`: 目标类型,如 `CITY`、`CITY_STYLE`
+
+**接口地址 :** `/chart/song/detail`
+
+**调用例子 :** `/chart/song/detail?chartCode=CITY_STYLE_SONG_CHART&targetId=110000_1020&targetType=CITY_STYLE`
+
+### 会员任务 - 新版
+
+说明 : 登录后调用此接口, 获取会员任务
+
+**可选参数** `id`: 用户 id, 传入后可获取指定用户的会员任务, 不传入则获取当前登录用户的会员任务
+
+**接口地址 :** `/vip/task/v1`
+
+**调用例子 :** `/vip/task/v1` `/vip/task/v1?id=32953014`
+
+### 黑胶乐签详情
+
+说明 : 登录后调用此接口, 传入时间戳, 获取黑胶乐签详情
+
+**必选参数 :** `timestamp`: 时间戳, 单位毫秒, 如 `1704067200000` 表示 2024 年 12 月 31 日 0 点 (不传入会出现随机的乐签详情)
+
+**接口地址 :** `/vip/sign/detail`
+
+**调用例子 :** `/vip/sign/detail`
+
+### 黑胶乐签历史
+
+说明 : 登录后调用此接口, 获取黑胶乐签历史
+
+**接口地址 :** `/vip/sign/history`
+
+**调用例子 :** `/vip/sign/history`
+
+### 直接获取云盘歌曲下载链接
+
+说明 : 调用此接口, 传入云盘歌曲 id, 可直接获取云盘歌曲下载链接
+
+**必选参数 :** `id`: 云盘歌曲 id
+
+**接口地址 :** `/song/cloud/download`
+
+**调用例子 :** `/song/cloud/download?id=123456789`
+
 ## 离线访问此文档
 
 此文档同时也是 Progressive Web Apps(PWA), 加入了 serviceWorker, 可离线访问

public/docs/index.html

@@ -108,7 +108,7 @@
     name: '网易云音乐 API Enhanced',
     repo: 'https://github.com/neteasecloudmusicapienhanced/api-enhanced',
     coverpage: true,
-    homepage: 'https://cdn.jsdelivr.net/gh/NeteaseCloudMusicApiEnhanced/api-enhanced@main/public/docs/home.md',
+    homepage: 'home.md',
   }
 </script>
 <script src="https://unpkg.com/docsify@4.11.3/lib/docsify.min.js"></script>

public/eapi_decrypt.html

@@ -1,265 +0,0 @@
-<!DOCTYPE html>
-<html lang="zh">
-<head>
-  <meta charset="UTF-8">
-  <meta name="viewport" content="width=device-width, initial-scale=1.0">
-  <title>eapi 参数和返回内容解析</title>
-  <style>
-    * {
-      margin: 0;
-      padding: 0;
-      box-sizing: border-box;
-    }
-
-    body {
-      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
-      min-height: 100vh;
-      background: #f5f5f5;
-      padding: 20px;
-    }
-
-    .container {
-      max-width: 900px;
-      margin: 0 auto;
-      background: white;
-      border-radius: 12px;
-      padding: 32px;
-      box-shadow: 0 2px 8px rgba(0, 0, 0, 0.1);
-    }
-
-    h1 {
-      font-size: 24px;
-      font-weight: 600;
-      color: #333;
-      margin-bottom: 24px;
-    }
-
-    .form-group {
-      margin-bottom: 24px;
-    }
-
-    label {
-      display: block;
-      font-size: 14px;
-      font-weight: 500;
-      color: #555;
-      margin-bottom: 8px;
-    }
-
-    textarea {
-      width: 100%;
-      padding: 12px;
-      border: 1px solid #ddd;
-      border-radius: 6px;
-      font-family: 'Courier New', monospace;
-      font-size: 13px;
-      resize: vertical;
-      min-height: 200px;
-      outline: none;
-    }
-
-    textarea:focus {
-      border-color: #333;
-    }
-
-    .radio-group {
-      display: flex;
-      gap: 24px;
-      margin-bottom: 24px;
-    }
-
-    .radio-item {
-      display: flex;
-      align-items: center;
-      gap: 8px;
-    }
-
-    .radio-item input[type="radio"] {
-      cursor: pointer;
-    }
-
-    .radio-item label {
-      margin: 0;
-      cursor: pointer;
-      font-size: 14px;
-    }
-
-    button {
-      background: #333;
-      color: white;
-      padding: 12px 28px;
-      border: none;
-      border-radius: 6px;
-      font-size: 15px;
-      font-weight: 500;
-      cursor: pointer;
-      transition: background 0.2s ease;
-    }
-
-    button + button {
-      margin-left: 12px;
-    }
-
-    button:hover {
-      background: #555;
-    }
-
-    .result-section {
-      margin-top: 24px;
-    }
-
-    .result-section label {
-      margin-bottom: 12px;
-    }
-
-    .decode-result {
-      white-space: pre-wrap;
-      word-break: break-all;
-      background: #f9f9f9;
-      padding: 16px;
-      border-radius: 6px;
-      border: 1px solid #eee;
-      min-height: 200px;
-      max-height: 400px;
-      overflow: auto;
-      font-family: 'Courier New', monospace;
-      font-size: 13px;
-    }
-
-    .example-section {
-      margin-top: 32px;
-      padding-top: 24px;
-      border-top: 1px solid #eee;
-    }
-
-    .example-section h2 {
-      font-size: 18px;
-      font-weight: 600;
-      color: #333;
-      margin-bottom: 16px;
-    }
-
-    .example-section img {
-      max-width: 100%;
-      height: auto;
-      border-radius: 6px;
-      margin-bottom: 16px;
-      border: 1px solid #eee;
-    }
-  </style>
-</head>
-
-<body>
-  <div id="app" class="container">
-    <h1>eapi 参数和返回内容解析</h1>
-
-    <div class="form-group">
-      <label for="hexString">十六进制字符串</label>
-      <textarea id="hexString" v-model="hexString" rows="10"></textarea>
-    </div>
-
-    <div class="radio-group">
-      <div class="radio-item">
-        <input type="radio" id="req" name="format" v-model="isReq" value="true">
-        <label for="req">请求数据 request params</label>
-      </div>
-      <div class="radio-item">
-        <input type="radio" id="resp" name="format" v-model="isReq" value="false">
-        <label for="resp">返回数据 response 二进制数据</label>
-      </div>
-    </div>
-
-    <button @click="decrypt">解密</button>
-    <button @click="sendToApi" :disabled="!canSend" :class="[{ 'opacity-50 cursor-not-allowed pointer-events-none': !canSend },]">填入 API 调试</button>
-
-    <div class="result-section">
-      <label>解密结果：</label>
-      <pre class="decode-result">{{ formatResult(result) }}</pre>
-    </div>
-
-    <div class="example-section">
-      <h2>使用示例</h2>
-      <img src="/static/eapi_params.png" alt="请求示例" />
-      <img src="/static/eapi_response.png" alt="响应示例" />
-    </div>
-  </div>
-
-  <script src="https://fastly.jsdelivr.net/npm/axios"></script>
-  <script src="https://fastly.jsdelivr.net/npm/vue@3"></script>
-
-  <script>
-    const app = Vue.createApp({
-      data() {
-        return {
-          hexString: 'AD96DDB984491E79B6F429DD650C6E2AE524627AC223AC9A123C66BB0997965950FED137544A93DFC718E16F57C8C121AF537086F395570A5602A3922366D11964DAFACD7830AACABF62E5650E67F457E79C1D2E13502391FC3487216CC5BF8681843FCB8E05559487EB18AAC1BE0EFEA4F7B6A050478366153A9426C238B8869600B275704555A9EB94C92E4F3FDABE9E0BCE07645410D0AA7B675698A4CAE6CD3620633ABF0B849A4244CC8DFC5DB2646D5EA9B3954E62BFEF19AFEAFDDC34E55C3E9A1DD3167CF53D443617108141',
-          result: '{}',
-          isReq: true
-        }
-      },
-      mounted() {
-        this.decrypt()
-      },
-      computed: {
-        isRequestMode() {
-          return this.isReq === true || this.isReq === 'true'
-        },
-        canSend() {
-          if (!this.isRequestMode) return false
-          if (!this.result || this.result === '{}' || this.result === 'null') return false
-          try {
-            JSON.parse(this.result)
-            return true
-          } catch (error) {
-            return false
-          }
-        },
-      },
-      methods: {
-        formatResult(value) {
-          if (value == null || value === '') return ''
-          try {
-            const parsed = typeof value === 'string' ? JSON.parse(value) : value
-            return JSON.stringify(parsed, null, 2)
-          } catch (error) {
-            return String(value)
-          }
-        },
-        async decrypt() {
-          try {
-            const res = await axios({
-              url: `/eapi/decrypt?isReq=${this.isReq}&timestamp=${Date.now()}`,
-              method: 'post',
-              data: {
-                hexString: this.hexString
-              }
-            })
-            this.result = JSON.stringify(res.data.data)
-            console.log(res.data);
-          } catch (error) {
-            console.error(error)
-            alert(error?.response?.data?.message || '解密失败,数据格式错误')
-          }
-        },
-        sendToApi() {
-          if (!this.canSend) return
-          const payload = JSON.parse(this.result)
-          const params = new URLSearchParams()
-          params.set('uri', payload.uri || payload.url || payload.path || '')
-          params.set('crypto', 'eapi')
-          const data =
-            payload.params ||
-            payload.data ||
-            payload.body ||
-            payload.payload ||
-            payload.request ||
-            {}
-          params.set('data', JSON.stringify(data))
-          window.open(`/api.html?${params.toString()}`, '_blank')
-        },
-      }
-    })
-    app.mount('#app')
-  </script>
-</body>
-
-</html>

public/index.html

@@ -92,7 +92,7 @@ curl -s {origin}/search?keywords=网易云</code></pre>
         <a href="/audio_match_demo/index.html">听歌识曲 Demo</a> ·
         <a href="/cloud.html">云盘上传</a> ·
         <a href="/playlist_import.html">歌单导入</a> ·
-        <a href="/eapi_decrypt.html">EAPI 解密</a> ·
+        <a href="/api_decrypt.html">API 解密</a> ·
         <a href="/listen_together_host.html">一起听示例</a> ·
         <a href="/playlist_cover_update.html">更新歌单封面示例</a> ·
         <a href="/avatar_update.html">头像更新示例</a>

public/qrlogin-nocookie.html

@@ -148,12 +148,12 @@
             updateStatus('二维码已过期，请刷新页面', 'error')
             clearInterval(timer)
           } else if (statusRes.code === 801) {
-            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
+            updateStatus('等待手机扫码...', 'waiting')
           } else if (statusRes.code === 802) {
-            updateStatus('登录成功，正在保存信息...', 'waiting')
+            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
           } else if (statusRes.code === 803) {
             clearInterval(timer)
-            updateStatus('授权登录成功！', 'success')
+            updateStatus('授权登录成功，正在保存信息...', 'success')
             await getLoginStatus(statusRes.cookie)
             localStorage.setItem('cookie', statusRes.cookie)
           }

public/qrlogin.html

@@ -148,12 +148,12 @@
             updateStatus('二维码已过期，请刷新页面', 'error')
             clearInterval(timer)
           } else if (statusRes.code === 801) {
-            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
+            updateStatus('等待手机扫码...', 'waiting')
           } else if (statusRes.code === 802) {
-            updateStatus('登录成功，正在保存信息...', 'waiting')
+            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
           } else if (statusRes.code === 803) {
             clearInterval(timer)
-            updateStatus('授权登录成功！', 'success')
+            updateStatus('授权登录成功，正在保存信息...', 'success')
             await getLoginStatus(statusRes.cookie)
             localStorage.setItem('cookie', statusRes.cookie)
           }

scripts/format-docs.js

@@ -0,0 +1,577 @@
+#!/usr/bin/env node
+/**
+ * 📝 Markdown 文档格式化工具喵~
+ * 支持格式化标题、代码块、空行和缩进！
+ *
+ * 用法:
+ *   node scripts/format-docs.js                    # 格式化默认文档 (public/docs/home.md)
+ *   node scripts/format-docs.js <文件路径>         # 格式化指定文件
+ *   node scripts/format-docs.js --dir <目录>       # 格式化整个目录的 .md 文件
+ *   node scripts/format-docs.js --check            # 只检查不写入 (dry-run)
+ *
+ */
+
+const fs = require('fs')
+const path = require('path')
+
+// ======================== 配置 ========================
+const CONFIG = {
+  maxConsecutiveBlankLines: 2, // 最大连续空行数
+  codeBlockLang: true, // 代码块是否保留语言标记
+  headingSpaceBefore: true, // 标题前是否确保空行
+  headingSpaceAfter: true, // 标题后是否确保空行
+  listIndent: 2, // 列表缩进空格数
+  encodeSpecialChars: false, // 是否编码特殊字符
+  removeTrailingSpaces: true, // 是否删除行尾空格
+}
+
+const DEFAULT_FILE = path.resolve(__dirname, '..', 'public', 'docs', 'home.md')
+
+// ======================== 颜色工具 ========================
+const color = (code) => (s) => `\x1b[${code}m${s}\x1b[0m`
+const green = color('32')
+const cyan = color('36')
+const yellow = color('33')
+const red = color('31')
+const bold = color('1')
+const dim = color('2')
+
+// ======================== 核心格式化函数 ========================
+
+/**
+ * 解析 Markdown 的块结构，返回块数组
+ * 块类型: 'heading', 'code', 'list', 'paragraph', 'empty', 'hr', 'blockquote', 'table', 'html'
+ */
+function parseBlocks(lines) {
+  const blocks = []
+  let i = 0
+
+  while (i < lines.length) {
+    const line = lines[i]
+    const trimmed = line.trim()
+
+    // 空行
+    if (trimmed === '') {
+      blocks.push({ type: 'empty', lines: [line], raw: line })
+      i++
+      continue
+    }
+
+    // 代码块 (``` 或 ~~~)
+    if (/^```/.test(trimmed) || /^~~~/.test(trimmed)) {
+      const marker = trimmed.match(/^(```|~~~)/)[1]
+      const lang = trimmed.slice(marker.length).trim()
+      const start = i
+      i++
+      while (i < lines.length && !lines[i].trim().startsWith(marker)) {
+        i++
+      }
+      if (i < lines.length) i++ // 跳过结束标记
+      const codeLines = lines.slice(start, i)
+      blocks.push({
+        type: 'code',
+        lines: codeLines,
+        lang,
+        marker,
+        raw: codeLines.join('\n'),
+      })
+      continue
+    }
+
+    // 标题
+    const headingMatch = trimmed.match(/^(#{1,6})\s+(.+)$/)
+    if (headingMatch) {
+      const level = headingMatch[1].length
+      blocks.push({
+        type: 'heading',
+        lines: [line],
+        level,
+        text: headingMatch[2],
+        raw: line,
+      })
+      i++
+      continue
+    }
+
+    // 分割线
+    if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(trimmed)) {
+      blocks.push({ type: 'hr', lines: [line], raw: line })
+      i++
+      continue
+    }
+
+    // HTML 注释或标签
+    if (/^<!--/.test(trimmed) || /^<\w+/.test(trimmed)) {
+      const start = i
+      i++
+      while (i < lines.length) {
+        const t = lines[i].trim()
+        if (/-->/.test(t) || /<\/\w+>/.test(t)) {
+          i++
+          break
+        }
+        i++
+      }
+      const htmlLines = lines.slice(start, i)
+      blocks.push({ type: 'html', lines: htmlLines, raw: htmlLines.join('\n') })
+      continue
+    }
+
+    // 引用块 (注: 空行不吞噬,留给后续解析,避免干扰上下文的空行判断)
+    if (/^>/.test(trimmed)) {
+      const start = i
+      i++
+      while (i < lines.length && lines[i].trimStart().startsWith('>')) {
+        i++
+      }
+      const quoteLines = lines.slice(start, i)
+      blocks.push({
+        type: 'blockquote',
+        lines: quoteLines,
+        raw: quoteLines.join('\n'),
+      })
+      continue
+    }
+
+    // 表格
+    if (
+      /\|/.test(trimmed) &&
+      lines[i + 1] &&
+      /^\|[\s\-:]+\|/.test(lines[i + 1].trim())
+    ) {
+      const start = i
+      i += 2
+      while (i < lines.length && /\|/.test(lines[i].trim())) {
+        i++
+      }
+      const tableLines = lines.slice(start, i)
+      blocks.push({
+        type: 'table',
+        lines: tableLines,
+        raw: tableLines.join('\n'),
+      })
+      continue
+    }
+
+    // 列表项（有序或无序）
+    if (/^(\s*[-*+]\s|\s*\d+\.\s)/.test(line)) {
+      const start = i
+      i++
+      while (i < lines.length) {
+        const t = lines[i].trim()
+        if (t === '') {
+          i++
+          break
+        }
+        if (/^(\s*[-*+]\s|\s*\d+\.\s)/.test(lines[i])) {
+          i++
+          continue
+        }
+        // 缩进 continuation
+        if (/^\s{2,}/.test(lines[i])) {
+          i++
+          continue
+        }
+        break
+      }
+      const listLines = lines.slice(start, i)
+      blocks.push({ type: 'list', lines: listLines, raw: listLines.join('\n') })
+      continue
+    }
+
+    // 普通段落
+    const start = i
+    i++
+    while (i < lines.length && lines[i].trim() !== '') {
+      // 如果遇到新的块元素则停止
+      const t = lines[i].trim()
+      if (
+        /^#{1,6}\s/.test(t) ||
+        /^```/.test(t) ||
+        /^~~~/.test(t) ||
+        /^(\s*[-*+]\s|\s*\d+\.\s)/.test(lines[i])
+      )
+        break
+      // 分割线
+      if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(t)) break
+      i++
+    }
+    const paraLines = lines.slice(start, i)
+    blocks.push({
+      type: 'paragraph',
+      lines: paraLines,
+      raw: paraLines.join('\n'),
+    })
+  }
+
+  return blocks
+}
+
+/**
+ * 格式化文档
+ */
+function formatMarkdown(input, options = {}) {
+  const cfg = { ...CONFIG, ...options }
+  const lines = input.split('\n')
+  let blocks = parseBlocks(lines)
+
+  // ---------- 格式化步骤 ----------
+
+  // 1. 确保标题前后有空行
+  if (cfg.headingSpaceBefore || cfg.headingSpaceAfter) {
+    blocks = blocks.map((block, idx) => {
+      if (block.type !== 'heading') return block
+
+      const newLines = [...block.lines]
+
+      // 标题前加空行（如果不是第一个块且前一个不是空行）
+      if (
+        cfg.headingSpaceBefore &&
+        idx > 0 &&
+        blocks[idx - 1].type !== 'empty'
+      ) {
+        newLines.unshift('')
+      }
+
+      // 标题后加空行（如果不是最后一个块且后一个不是空行）
+      if (
+        cfg.headingSpaceAfter &&
+        idx < blocks.length - 1 &&
+        blocks[idx + 1].type !== 'empty'
+      ) {
+        newLines.push('')
+      }
+
+      return { ...block, lines: newLines }
+    })
+  }
+
+  // 2. 格式化代码块
+  blocks = blocks.map((block, idx) => {
+    if (block.type !== 'code') return block
+
+    const newLines = [...block.lines]
+
+    // 先提取代码块标记信息 (第一行是 ``` 或 ~~~)
+    const markerMatch = newLines[0].trim().match(/^(```|~~~)/)
+    if (!markerMatch) return block // 安全兜底
+    const marker = markerMatch[1]
+    const lang = newLines[0].trim().slice(marker.length).trim().toLowerCase()
+
+    // 标准化语言标记
+    const indent = newLines[0].match(/^\s*/)[0]
+    newLines[0] = lang ? `${indent}${marker}${lang}` : `${indent}${marker}`
+
+    // 确保代码块前后有空行（插在标准化之后，因为只动第一行）
+    if (
+      idx > 0 &&
+      blocks[idx - 1].type !== 'empty' &&
+      blocks[idx - 1].type !== 'code'
+    ) {
+      newLines.unshift('')
+    }
+    if (
+      idx < blocks.length - 1 &&
+      blocks[idx + 1].type !== 'empty' &&
+      blocks[idx + 1].type !== 'code'
+    ) {
+      newLines.push('')
+    }
+
+    return { ...block, lines: newLines }
+  })
+
+  // 3. 压缩多余空行
+  blocks = compressEmptyLines(blocks, cfg.maxConsecutiveBlankLines)
+
+  // 4. 删除行尾空格
+  if (cfg.removeTrailingSpaces) {
+    blocks = blocks.map((block) => ({
+      ...block,
+      lines: block.lines.map((l) => l.replace(/[ \t]+$/, '')),
+    }))
+  }
+
+  // 5. 修复列表缩进
+  blocks = blocks.map((block) => {
+    if (block.type !== 'list') return block
+    return {
+      ...block,
+      lines: block.lines.map((line) => {
+        const trimmed = line.trimStart()
+        // 检测列表标记
+        if (/^[-*+]\s/.test(trimmed) || /^\d+\.\s/.test(trimmed)) {
+          const indent = line.length - line.trimStart().length
+          // 如果是顶层列表项，确保缩进为0
+          if (indent % cfg.listIndent !== 0) {
+            const normalizedIndent =
+              Math.round(indent / cfg.listIndent) * cfg.listIndent
+            return ' '.repeat(normalizedIndent) + trimmed
+          }
+        }
+        return line
+      }),
+    }
+  })
+
+  // 重新拼装
+  const resultLines = blocks.flatMap((b) => b.lines)
+
+  // 处理文件开头和结尾的空行
+  while (resultLines.length > 0 && resultLines[0] === '') resultLines.shift()
+  while (resultLines.length > 0 && resultLines[resultLines.length - 1] === '')
+    resultLines.pop()
+  resultLines.push('') // 文件结尾留一个空行
+
+  return resultLines.join('\n')
+}
+
+/**
+ * 压缩连续空行块
+ */
+function compressEmptyLines(blocks, maxBlank) {
+  const result = []
+  let blankCount = 0
+
+  for (const block of blocks) {
+    if (block.type === 'empty') {
+      blankCount++
+      if (blankCount <= maxBlank) {
+        result.push(block)
+      }
+    } else {
+      blankCount = 0
+      result.push(block)
+    }
+  }
+
+  return result
+}
+
+// ======================== 统计信息 ========================
+
+function getStats(input) {
+  const lines = input.split('\n')
+  const blocks = parseBlocks(lines)
+
+  return {
+    totalLines: lines.length,
+    nonEmptyLines: lines.filter((l) => l.trim() !== '').length,
+    headings: blocks.filter((b) => b.type === 'heading').length,
+    codeBlocks: blocks.filter((b) => b.type === 'code').length,
+    lists: blocks.filter((b) => b.type === 'list').length,
+    tables: blocks.filter((b) => b.type === 'table').length,
+    blockquotes: blocks.filter((b) => b.type === 'blockquote').length,
+    hr: blocks.filter((b) => b.type === 'hr').length,
+    characters: input.length,
+  }
+}
+
+function printStats(stats) {
+  console.log(bold('\n📊 文档统计信息:'))
+  console.log(`  总行数:         ${cyan(String(stats.totalLines))}`)
+  console.log(`  非空行数:       ${cyan(String(stats.nonEmptyLines))}`)
+  console.log(`  字符数:         ${cyan(String(stats.characters))}`)
+  console.log(`  标题数:         ${cyan(String(stats.headings))}`)
+  console.log(`  代码块数:       ${cyan(String(stats.codeBlocks))}`)
+  console.log(`  列表数:         ${cyan(String(stats.lists))}`)
+  console.log(`  表格数:         ${cyan(String(stats.tables))}`)
+  console.log(`  引用块数:       ${cyan(String(stats.blockquotes))}`)
+  console.log(`  分割线数:       ${cyan(String(stats.hr))}`)
+}
+
+// ======================== 文件处理 ========================
+
+function readFile(filePath) {
+  try {
+    let content = fs.readFileSync(filePath, 'utf-8')
+    // 统一换行符为 \n，避免 Windows 的 \r\n 导致 diff 不稳定
+    content = content.replace(/\r\n/g, '\n').replace(/\r/g, '\n')
+    return content
+  } catch (err) {
+    console.error(red(`❌ 无法读取文件: ${filePath}`))
+    console.error(dim(err.message))
+    process.exit(1)
+  }
+}
+
+function writeFile(filePath, content) {
+  try {
+    fs.writeFileSync(filePath, content, 'utf-8')
+    console.log(green(`✅ 已写入: ${filePath}`))
+  } catch (err) {
+    console.error(red(`❌ 写入失败: ${filePath}`))
+    console.error(dim(err.message))
+    process.exit(1)
+  }
+}
+
+function processFile(filePath, options) {
+  const relativePath = path.relative(process.cwd(), filePath)
+  console.log(bold(`\n📄 处理文件: ${cyan(relativePath)}`))
+
+  const input = readFile(filePath)
+  const statsBefore = getStats(input)
+
+  if (options.verbose) {
+    console.log(dim('  格式化前:'))
+    printStats(statsBefore)
+  }
+
+  const formatted = formatMarkdown(input, options)
+  const statsAfter = getStats(formatted)
+
+  const hasChanges = input !== formatted
+
+  if (options.check) {
+    if (hasChanges) {
+      console.log(yellow('  ⚠️  文件需要格式化 (dry-run, 未写入)'))
+      const added = statsAfter.totalLines - statsBefore.totalLines
+      console.log(dim(`  行数变化: ${added > 0 ? '+' : ''}${added}`))
+    } else {
+      console.log(green('  ✅ 文件已格式良好'))
+    }
+    return hasChanges ? 1 : 0
+  }
+
+  if (hasChanges) {
+    writeFile(filePath, formatted)
+    console.log(green('  ✨ 格式化完成!'))
+    if (options.verbose) {
+      printStats(statsAfter)
+    }
+  } else {
+    console.log(green('  ✅ 文档已经格式良好,无需修改'))
+  }
+
+  return 0
+}
+
+function processDirectory(dirPath, options) {
+  let exitCode = 0
+  const files = fs
+    .readdirSync(dirPath)
+    .filter((f) => f.endsWith('.md'))
+    .map((f) => path.join(dirPath, f))
+
+  if (files.length === 0) {
+    console.log(yellow(`⚠️  在 ${dirPath} 中未找到 .md 文件`))
+    return 0
+  }
+
+  console.log(
+    bold(`\n📁 扫描目录: ${cyan(dirPath)} (${files.length} 个文件)\n`),
+  )
+
+  for (const file of files) {
+    const ret = processFile(file, options)
+    if (ret !== 0) exitCode = ret
+  }
+
+  return exitCode
+}
+
+// ======================== CLI ========================
+
+function printHelp() {
+  console.log(
+    bold(`
+📝 Markdown 文档格式化工具 v1.0.0
+
+${cyan('用法:')}
+  node scripts/format-docs.js [文件路径] [选项]
+
+${cyan('参数:')}
+  文件路径                要格式化的 .md 文件 (默认: public/docs/home.md)
+
+${cyan('选项:')}
+  --dir, -d <目录>        格式化整个目录下的所有 .md 文件
+  --check, -c             dry-run 模式,只检查不写入
+  --verbose, -v          显示详细统计信息
+  --help, -h             显示帮助信息
+
+${cyan('示例:')}
+  node scripts/format-docs.js
+  node scripts/format-docs.js README.md
+  node scripts/format-docs.js --dir docs/
+  node scripts/format-docs.js --check
+`),
+  )
+}
+
+function parseArgs() {
+  const args = process.argv.slice(2)
+  const options = {
+    file: null,
+    dir: null,
+    check: false,
+    verbose: false,
+    help: false,
+  }
+
+  for (let i = 0; i < args.length; i++) {
+    switch (args[i]) {
+      case '--dir':
+      case '-d':
+        options.dir = args[++i]
+        break
+      case '--check':
+      case '-c':
+        options.check = true
+        break
+      case '--verbose':
+      case '-v':
+        options.verbose = true
+        break
+      case '--help':
+      case '-h':
+        options.help = true
+        break
+      default:
+        if (!args[i].startsWith('--') && !args[i].startsWith('-')) {
+          options.file = path.resolve(process.cwd(), args[i])
+        }
+    }
+  }
+
+  return options
+}
+
+// ======================== 主函数 ========================
+
+function main() {
+  const options = parseArgs()
+
+  if (options.help) {
+    printHelp()
+    return 0
+  }
+
+  console.log(bold(`\n${cyan('🐱 文档格式化工具')} ${dim('(用❤️制作)')}\n`))
+
+  if (options.dir) {
+    const dirPath = path.resolve(process.cwd(), options.dir)
+    if (!fs.existsSync(dirPath)) {
+      console.error(red(`❌ 目录不存在: ${dirPath}`))
+      return 1
+    }
+    return processDirectory(dirPath, options)
+  }
+
+  const filePath = options.file || DEFAULT_FILE
+  if (!fs.existsSync(filePath)) {
+    console.error(red(`❌ 文件不存在: ${filePath}`))
+    return 1
+  }
+
+  return processFile(filePath, options)
+}
+
+// ======================== 启动 ========================
+
+if (require.main === module) {
+  const exitCode = main()
+  process.exit(exitCode)
+}
+
+module.exports = { formatMarkdown, getStats, parseBlocks }

server.js

@@ -10,6 +10,7 @@ const { cookieToJson } = require('./util/index')
 const fileUpload = require('express-fileupload')
 const decode = require('safe-decode-uri-component')
 const logger = require('./util/logger.js')
+const { APP_CONF } = require('./util/config.json')
 
 /**
  * The version check result.
@@ -299,15 +300,15 @@ async function constructServer(moduleDefs) {
       )
 
       try {
+        let usedCrypto = ''
         const moduleResponse = await moduleDef.module(query, (...params) => {
-          // 参数注入客户端IP
           const obj = [...params]
           const options = obj[2] || {}
+          usedCrypto = options.crypto || ''
           let ip = ''
-          
+
           if (options.randomCNIP) {
             ip = global.cnIp
-            // logger.info('Using random Chinese IP for request:', ip)
           } else {
             ip = req.ip
 
@@ -317,9 +318,8 @@ async function constructServer(moduleDefs) {
             if (ip == '::1') {
               ip = global.cnIp
             }
-            // logger.info('Requested from ip:', ip)
           }
-          
+
           obj[2] = {
             ...options,
             ip,
@@ -327,7 +327,10 @@ async function constructServer(moduleDefs) {
 
           return request(...obj)
         })
-        logger.info(`Request Success: ${decode(req.originalUrl)}`)
+        const displayCrypto = usedCrypto || (APP_CONF.encrypt ? 'eapi' : 'api')
+        logger.info(
+          `Request Success: [${displayCrypto}] ${decode(req.originalUrl)}`,
+        )
 
         // 夹带私货部分：如果开启了通用解锁，并且是获取歌曲URL的接口，则尝试解锁（如果需要的话）ヾ(≧▽≦*)o
         if (
@@ -422,7 +425,7 @@ async function serveNcmApi(options) {
     options.checkVersion &&
     checkVersion().then(({ npmVersion, ourVersion, status }) => {
       if (status == VERSION_CHECK_RESULT.NOT_LATEST) {
-        logger.info(
+        logger.warn(
           `最新版本: ${npmVersion}, 当前版本: ${ourVersion}, 请及时更新`,
         )
       }
@@ -444,11 +447,9 @@ async function serveNcmApi(options) {
   ╠═╣╠═╝║    ║╣ ║║║╠═╣╠═╣║║║║  ║╣  ║║
   ╩ ╩╩  ╩    ╚═╝╝╚╝╩ ╩╩ ╩╝╚╝╚═╝╚═╝═╩╝
     `)
-    logger.info(`
-- Server started successfully @ http://${host ? host : 'localhost'}:${port}
-- Environment: ${process.env.NODE_ENV || 'development'}
-- Node Version: ${process.version}
-- Process ID: ${process.pid}`)
+    logger.info(
+      `Server started successfully @ http://${host ? host : 'localhost'}:${port}`,
+    )
   })
 
   return appExt

util/config.json

@@ -11,6 +11,7 @@
   },
   "APP_CONF": {
     "apiDomain": "https://interface.music.163.com",
+    "xeapiDomain": "https://interface3.music.163.com",
     "domain": "https://music.163.com",
     "encrypt": true,
     "encryptResponse": false,

util/crypto.js

@@ -1,4 +1,5 @@
 const CryptoJS = require('crypto-js')
+const crypto = require('crypto')
 const forge = require('node-forge')
 const zlib = require('zlib')
 const iv = '0102030405060708'
@@ -9,6 +10,13 @@ const publicKey = `-----BEGIN PUBLIC KEY-----
 MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgtQn2JZ34ZC28NWYpAUd98iZ37BUrX/aKzmFbt7clFSs6sXqHauqKWqdtLkF2KexO40H1YTX8z2lSgBBOAxLsvaklV8k4cBFK9snQXE9/DDaFt6Rr7iVZMldczhC0JNgTz+SHXT6CBHuX3e9SdB1Ua44oncaTWz7OBGLbCiK45wIDAQAB
 -----END PUBLIC KEY-----`
 const eapiKey = 'e82ckenh8dichen8'
+const xeapiStaticKey = Buffer.from(
+  'ab1d5a430f6bb04a3f01e81ddd72bd916d5ce591248ac128714806d7f8fb1b84',
+  'hex',
+)
+const xeapiSignKey =
+  'mUHCwVNWJbunMqAHf5MImuirT6plvs6VSFW62MGHstFQxhBGdEoIhLItH3djc4+FB/OKty3+lL2rGeoFBpVe5g=='
+const x25519SpkiPrefix = Buffer.from('302a300506032b656e032100', 'hex')
 
 const aesEncrypt = (text, mode, key, iv, format = 'base64') => {
   let encrypted = CryptoJS.AES.encrypt(
@@ -141,13 +149,172 @@ const decrypt = (cipher) => {
   return decryptedBytes
 }
 
+const aesEcbEncrypt = (key, plaintext) => {
+  const cipher = crypto.createCipheriv(`aes-${key.length * 8}-ecb`, key, null)
+  return Buffer.concat([cipher.update(Buffer.from(plaintext)), cipher.final()])
+}
+
+const aesEcbDecrypt = (key, ciphertext) => {
+  const decipher = crypto.createDecipheriv(
+    `aes-${key.length * 8}-ecb`,
+    key,
+    null,
+  )
+  return Buffer.concat([decipher.update(ciphertext), decipher.final()])
+}
+
+const createX25519PublicKey = (raw) => {
+  // Node's crypto API expects X25519 public keys as DER SubjectPublicKeyInfo.
+  // The Android SDK stores only the 32-byte raw key, so prepend the fixed
+  // RFC 8410 SPKI header for id-X25519 before importing it.
+  return crypto.createPublicKey({
+    key: Buffer.concat([x25519SpkiPrefix, raw]),
+    format: 'der',
+    type: 'spki',
+  })
+}
+
+const deriveX25519AesKey = (sharedSecret, ephemeralPublicKey) => {
+  const prk = crypto
+    .createHmac('sha256', Buffer.alloc(32))
+    .update(sharedSecret.length ? sharedSecret : Buffer.alloc(32))
+    .digest()
+  return crypto
+    .createHmac('sha256', prk)
+    .update(Buffer.concat([ephemeralPublicKey, Buffer.from([1])]))
+    .digest()
+    .subarray(0, 16)
+}
+
+const xeapiSign = (timestamp, nonce) => {
+  return crypto
+    .createHmac('sha256', xeapiSignKey)
+    .update(String(timestamp) + nonce)
+    .digest('base64')
+}
+
+const xeapiMidTransform = (ciphertext) => {
+  const random = crypto.randomBytes(16)
+  const xored = Buffer.alloc(ciphertext.length)
+  for (let i = 0; i < ciphertext.length; i++) {
+    xored[i] = ciphertext[i] ^ random[i & 0x0f]
+  }
+  const b64 = Buffer.from(xored.toString('base64'))
+  const rot = b64.length ? (random[0] & 0x0f) % b64.length : 0
+  return Buffer.concat([random, b64.subarray(rot), b64.subarray(0, rot)])
+}
+
+const xeapiEncryptS = (dynamicKey, publicKeyState, os) => {
+  const peerRaw = Buffer.from(publicKeyState.publicKey, 'base64')
+  const peerKey = createX25519PublicKey(peerRaw)
+  const { publicKey, privateKey } = crypto.generateKeyPairSync('x25519')
+  const ephemeralRaw = Buffer.from(
+    publicKey.export({ format: 'der', type: 'spki' }),
+  ).subarray(-32)
+  const sharedSecret = crypto.diffieHellman({
+    privateKey,
+    publicKey: peerKey,
+  })
+  const aesKey = deriveX25519AesKey(sharedSecret, ephemeralRaw)
+  const iv = crypto.randomBytes(12)
+  const cipher = crypto.createCipheriv('aes-128-gcm', aesKey, iv)
+  const plaintext = Buffer.from(
+    `${dynamicKey.toString('base64')}|${os}|${publicKeyState.sk || ''}`,
+  )
+  const encrypted = Buffer.concat([cipher.update(plaintext), cipher.final()])
+  return Buffer.concat([ephemeralRaw, iv, encrypted, cipher.getAuthTag()])
+}
+
+const buildXeapiPlaintext = (uri, data, options = {}) => {
+  const fields = {}
+  const contentType =
+    options.contentType || 'application/x-www-form-urlencoded;charset=utf-8'
+  const mediaType = contentType.split(';', 1)[0].toLowerCase()
+  if (mediaType !== 'application/x-www-form-urlencoded') {
+    fields.contentType = contentType
+  }
+
+  const method = (options.method || 'POST').toUpperCase()
+  if (method !== 'POST') fields.method = method
+
+  const url = new URL(uri, 'https://interface.music.163.com')
+  if (url.search) fields.queryString = url.search.slice(1)
+
+  if (data !== undefined && data !== null) {
+    const bodyData = { ...data }
+    delete bodyData.e_r
+    const body = Buffer.from(new URLSearchParams(bodyData).toString())
+    fields.body = body.toString('base64')
+  }
+
+  if (fields.queryString) {
+    fields.queryString += '&e_r=true'
+  } else {
+    fields.queryString = 'e_r=true'
+  }
+  return JSON.stringify(fields)
+}
+
+const xeapi = (uri, data, options = {}) => {
+  const publicKeyState = options.publicKeyState
+  if (!publicKeyState) {
+    throw new Error('xeapi publicKeyState is required')
+  }
+  const activeSessionKey = options.sessionKey
+    ? Buffer.from(String(options.sessionKey))
+    : null
+  const activeSessionId = options.sessionId || ''
+  const dynamicKey = activeSessionKey || crypto.randomBytes(16)
+  const plaintext = Buffer.from(buildXeapiPlaintext(uri, data, options))
+
+  const b = aesEcbEncrypt(
+    dynamicKey,
+    xeapiMidTransform(aesEcbEncrypt(xeapiStaticKey, plaintext)),
+  )
+  const s = xeapiEncryptS(dynamicKey, publicKeyState, options.os || 'android')
+  const r = aesEcbEncrypt(
+    xeapiStaticKey,
+    Buffer.from(
+      `${publicKeyState.version}|${activeSessionKey ? activeSessionId : ''}`,
+    ),
+  )
+
+  return {
+    B: b.toString('base64'),
+    S: s.toString('base64'),
+    R: r.toString('base64'),
+  }
+}
+
+const xeapiResDecrypt = (body) => {
+  const decrypted = aesEcbDecrypt(eapiKey, body)
+  const plaintext =
+    decrypted[0] === 0x1f && decrypted[1] === 0x8b
+      ? zlib.gunzipSync(decrypted)
+      : decrypted
+  return JSON.parse(plaintext.toString())
+}
+
+const xeapiDecryptPublicKey = (encryptedData) => {
+  return JSON.parse(
+    aesEcbDecrypt(
+      xeapiStaticKey,
+      Buffer.from(encryptedData, 'base64'),
+    ).toString(),
+  )
+}
+
 module.exports = {
   weapi,
   linuxapi,
   eapi,
+  xeapi,
   decrypt,
   aesEncrypt,
   aesDecrypt,
   eapiReqDecrypt,
   eapiResDecrypt,
+  xeapiSign,
+  xeapiResDecrypt,
+  xeapiDecryptPublicKey,
 }

util/index.js

@@ -62,9 +62,9 @@ const chinaIPRanges = (function loadChinaIPRanges() {
     // attach total for convenience
     arr.totalCount = total
 
-    logger.info(
-      `Loaded ${arr.length} Chinese IP ranges from china_ip_ranges.txt, total ${total} IPs`,
-    )
+    // logger.info(
+    //   `Loaded ${arr.length} Chinese IP ranges from china_ip_ranges.txt, total ${total} IPs`,
+    // )
     return arr
   } catch (error) {
     logger.error('Failed to load china_ip_ranges.txt:', error.message)

util/option.js

@@ -5,7 +5,10 @@ const createOption = (query, crypto = '') => {
     ua: query.ua || '',
     proxy: query.proxy,
     realIP: query.realIP,
-    randomCNIP: process.env.ENABLE_RANDOM_CN_IP === 'true' ? !['false', false].includes(query.randomCNIP) : ['true', true].includes(query.randomCNIP),
+    randomCNIP:
+      process.env.ENABLE_RANDOM_CN_IP === 'true'
+        ? !['false', false].includes(query.randomCNIP)
+        : ['true', true].includes(query.randomCNIP),
     e_r: query.e_r || undefined,
     domain: query.domain || '',
     checkToken: query.checkToken || false,

util/request.js

@@ -2,6 +2,7 @@
 const encrypt = require('./crypto')
 const CryptoJS = require('crypto-js')
 const { default: axios } = require('axios')
+const logger = require('./logger')
 const { PacProxyAgent } = require('pac-proxy-agent')
 const http = require('http')
 const https = require('https')
@@ -23,6 +24,20 @@ const anonymous_token = fs.readFileSync(
   path.resolve(tmpPath, './anonymous_token'),
   'utf-8',
 )
+const xeapiPublicKeyPath = path.resolve(tmpPath, './xeapi_public_key')
+let xeapi_public_key = null
+const loadXeapiPublicKey = () => {
+  if (!xeapi_public_key && fs.existsSync(xeapiPublicKeyPath)) {
+    try {
+      xeapi_public_key = JSON.parse(
+        fs.readFileSync(xeapiPublicKeyPath, 'utf-8'),
+      )
+    } catch (error) {
+      console.log('[ERR]', error)
+    }
+  }
+  return xeapi_public_key
+}
 
 // 预先绑定常用函数和常量
 const floor = Math.floor
@@ -73,6 +88,12 @@ const osMap = {
     osver: '16.2',
     channel: 'distribution',
   },
+  osx: {
+    os: 'osx',
+    appver: '3.1.10.5100',
+    osver: '15.5',
+    channel: 'netease',
+  },
 }
 
 // 预先定义userAgentMap
@@ -95,9 +116,13 @@ const userAgentMap = {
 // 预先定义常量
 const DOMAIN = APP_CONF.domain
 const API_DOMAIN = APP_CONF.apiDomain
+const XEAPI_DOMAIN = APP_CONF.xeapiDomain
 const ENCRYPT_RESPONSE = APP_CONF.encryptResponse
 const SPECIAL_STATUS_CODES = new Set([201, 302, 400, 502, 800, 801, 802, 803])
 
+let xeapiSessionId = ''
+let xeapiSessionKey = ''
+
 // chooseUserAgent函数
 const chooseUserAgent = (crypto, uaType = 'pc') => {
   return (userAgentMap[crypto] && userAgentMap[crypto][uaType]) || ''
@@ -216,6 +241,52 @@ const createRequest = (uri, data, options) => {
         url = (options.domain || DOMAIN) + '/api/linux/forward'
         break
 
+      case 'xeapi':
+        const xeapiPublicKey = loadXeapiPublicKey()
+        if (!xeapiPublicKey) {
+          throw new Error('xeapi public key is missing')
+        }
+        const xeapiOs = cookie.os === 'android' ? cookie.os : 'android'
+        const xeapiAppver =
+          cookie.os === 'android' && cookie.appver ? cookie.appver : '9.1.65'
+        const xeapiOsver =
+          cookie.os === 'android' && cookie.osver ? cookie.osver : '16'
+        const xeapiBuildver = cookie.buildver || now().toString().substr(0, 10)
+        headers['User-Agent'] = options.ua || chooseUserAgent('api', 'android')
+        headers['X-Client-Enc-State'] = 'ENCRYPTED'
+        headers['x-aeapi'] = true
+        headers['content-type'] =
+          'application/x-www-form-urlencoded;charset=utf-8'
+        headers['x-deviceid'] = cookie.deviceId
+        headers['x-os'] = xeapiOs
+        headers['x-osver'] = xeapiOsver
+        headers['x-appver'] = xeapiAppver
+        headers['x-sdeviceid'] = cookie.sDeviceId || cookie.deviceId
+        headers['x-buildver'] = xeapiBuildver
+        if (cookie.MUSIC_U) headers['x-music-u'] = cookie.MUSIC_U
+        const xeapiCookie = {
+          ...cookie,
+          os: xeapiOs,
+          osver: xeapiOsver,
+          appver: xeapiAppver,
+          buildver: xeapiBuildver,
+          deviceId: cookie.deviceId,
+          sDeviceId: cookie.sDeviceId || cookie.deviceId,
+        }
+        headers['Cookie'] = cookieObjToString(xeapiCookie)
+        url = (options.domain || XEAPI_DOMAIN) + '/xeapi/' + uri.substr(5)
+        encryptData = encrypt.xeapi(uri, data, {
+          ...options,
+          publicKeyState: xeapiPublicKey,
+          sessionId: xeapiSessionId,
+          sessionKey: xeapiSessionKey,
+          appver: xeapiAppver,
+          deviceId: cookie.deviceId,
+          os: xeapiOs,
+          uid: cookie.uid || cookie.userId || '',
+        })
+        break
+
       case 'eapi':
       case 'api':
         // header创建
@@ -241,7 +312,11 @@ const createRequest = (uri, data, options) => {
         if (cookie.MUSIC_A) header['MUSIC_A'] = cookie.MUSIC_A
 
         headers['Cookie'] = createHeaderCookie(header)
-        headers['User-Agent'] = options.ua || chooseUserAgent('api', 'iphone')
+        headers['User-Agent'] =
+          options.ua ||
+          (cookie.os === 'osx'
+            ? 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36'
+            : chooseUserAgent('api', 'iphone'))
 
         if (crypto === 'eapi') {
           // headers['x-aeapi'] = true // 服务器会使用gzip压缩返回值
@@ -259,7 +334,6 @@ const createRequest = (uri, data, options) => {
         console.log('[ERR]', 'Unknown Crypto:', crypto)
         break
     }
-    // console.log(url);
     // settings创建
     let settings = {
       method: 'POST',
@@ -272,7 +346,8 @@ const createRequest = (uri, data, options) => {
 
     // 使用返回值加密
     const use_e_r = (crypto === 'eapi' || crypto === 'weapi') && data.e_r
-    if (use_e_r) {
+    const use_xeapi = crypto === 'xeapi'
+    if (use_e_r || use_xeapi) {
       settings.encoding = null
       settings.responseType = 'arraybuffer'
     }
@@ -319,8 +394,25 @@ const createRequest = (uri, data, options) => {
           x.replace(/\s*Domain=[^(;|$)]+;*/, ''),
         )
 
+        // debug: 统一注释块，需要时取消注释查看请求/返回的原始密文
+
+        // logger.debug(`[${crypto}]`, uri)
+        // logger.debug(`[${crypto}] encrypted data:`, JSON.stringify(encryptData))
+        // logger.debug(
+        //   `[RAW] [${crypto}]`,
+        //   use_xeapi
+        //     ? Buffer.from(body).toString('base64')
+        //     : body.toString('hex').toUpperCase(),
+        // )
+
         try {
-          if (use_e_r) {
+          if (use_xeapi) {
+            if (res.headers['x-encr-ssid'] && res.headers['x-encr-sskey']) {
+              xeapiSessionId = res.headers['x-encr-ssid']
+              xeapiSessionKey = res.headers['x-encr-sskey']
+            }
+            answer.body = encrypt.xeapiResDecrypt(Buffer.from(body))
+          } else if (use_e_r) {
             answer.body = encrypt.eapiResDecrypt(
               body.toString('hex').toUpperCase(),
               headers['x-aeapi'],

util/xeapiKey.js

@@ -0,0 +1,24 @@
+const registerXeapiKey = require('../module/register_xeapikey')
+
+const getXeapiPublicKey = async (currentPublicKey = {}, deviceId = '') => {
+  const result = await registerXeapiKey(
+    {
+      deviceId,
+      currentKeyVersion: currentPublicKey.version || '',
+    },
+    null,
+  )
+
+  const publicKey = result.body
+  if (!publicKey.sk && currentPublicKey.sk) {
+    publicKey.sk = currentPublicKey.sk
+  }
+  if (!publicKey.sk) {
+    throw new Error('xeapi public key response missing sk')
+  }
+  return publicKey
+}
+
+module.exports = {
+  getXeapiPublicKey,
+}