feat: 新增免费听接口

docs: 修改运行要求
Merge branch 'main' of https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced
2026-10-20 22:51:23 +08:00 · 2026-07-15 16:14:19 +08:00 · 2026-07-12 10:42:50 +08:00 · 2026-07-11 17:20:25 +08:00 · 2026-07-11 17:20:14 +08:00 · 2026-07-11 17:04:55 +08:00
40 changed files with 3625 additions and 484 deletions
@@ -260,13 +260,13 @@ jobs:
        uses: docker/setup-buildx-action@v3

      - name: Log in to Docker Hub
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          username: ${{ secrets.DOCKERHUB_USERNAME }}
          password: ${{ secrets.DOCKERHUB_TOKEN }}

      - name: Log in to GitHub Container Registry
-        uses: docker/login-action@v3
+        uses: docker/login-action@v4
        with:
          registry: ghcr.io
          username: ${{ github.actor }}
@@ -22,7 +22,7 @@ jobs:
      # Step 2: run the sync action
      - name: Sync upstream changes
        id: sync
-        uses: aormsby/Fork-Sync-With-Upstream-action@v3.4.2
+        uses: aormsby/Fork-Sync-With-Upstream-action@v3.4.3
        with:
          upstream_sync_repo: NeteaseCloudMusicApiEnhanced/api-enhanced
          upstream_sync_branch: main
@@ -0,0 +1,23 @@
+# Agent Instructions for NeteaseCloudMusicApiEnhanced
+
+## Quick Start
+- **Package Manager**: Use `pnpm` (not npm or yarn).
+- **Node Version**: Requires Node.js 18 or later.
+
+## Developer Commands
+- **Install dependencies**: `pnpm i`
+- **Start server**: `pnpm start` or `node app.js`
+- **Start dev server**: `pnpm dev` (uses nodemon)
+- **Run tests**: `pnpm test` (uses Mocha)
+- **Linting**: `pnpm lint` (check) or `pnpm lint-fix` (auto-fix)
+
+## Architecture & Entrypoints
+- **Executable Server**: `app.js` is the main entrypoint for running the API server.
+- **Module Exports**: `main.js` is the entrypoint when the project is imported as a Node.js dependency.
+- **API Endpoints**: Located in the `module/` directory. Each file typically corresponds to an API route.
+- **Core Utilities**: Request handling, encryption, and core utilities are found in the `util/` directory.
+
+## Important Gotchas & Quirks
+- **Environment Variables**: The server defaults to port 3000 but can be overridden with the `PORT` environment variable.
+- **Proxy Variables**: Be very careful with proxy environment variables (`http_proxy`, `https_proxy`, `no_proxy`). The request library (like axios) will automatically pick these up. If they point to an unavailable proxy (especially common in Docker environments), requests will fail silently or throw connection errors.
+- **Code Style**: The project uses ESLint and Prettier. Always run `pnpm lint-fix` before committing changes to ensure formatting consistency.
@@ -30,7 +30,7 @@

 ## 项目简介

-网易云音乐第三方 Node.js API, 支持丰富的音乐相关接口，适合自建服务、二次开发和多平台部署(如果原版诈尸, 我会及时同步 or 归档)。
+网易云音乐第三方 Node.js API, 支持丰富的音乐相关接口，适合自建服务、二次开发和多平台部署

 > [!IMPORTANT]
 >
@@ -45,14 +45,14 @@

 ### 环境要求

- Node.js 18 及以上
+- Node.js 22 及以上
 - 推荐使用 pnpm 进行依赖管理

 ### 安装

 ```bash
 git clone https://github.com/neteasecloudmusicapienhanced/api-enhanced.git
-cd api
+cd api-enhanced
 pnpm i
 ```

@@ -215,7 +215,7 @@ pnpm test

 原作者 [Binaryify/NeteaseCloudMusicApi](https://github.com/binaryify/NeteaseCloudMusicApi) 项目为本项目基础 (该项目在`npmjs`网站上仍持续维护, 但 github 仓库已不再更新)

-感谢大佬们为逆向eapi, weapi等加密算法所做的贡献
+感谢大佬们为逆向eapi, weapi, xeapi等加密算法所做的贡献

 项目参考:

@@ -225,6 +225,8 @@ pnpm test

 [chaunsin/netease-cloud-music](https://github.com/chaunsin/netease-cloud-music)

+[folltoshe/netease-report-listen-song](https://github.com/folltoshe/netease-report-listen-song)
+
 ### SDK 生态

 | 语言     | 作者                                          | 地址                                                                                       | 类型  |
@@ -244,6 +246,8 @@ pnpm test

 - [Yueby/music-together](https://github.com/Yueby/music-together)

+- [chthollyphlie/folia-major](https://github.com/chthollyphile/folia-major)
+
 ## License

 [MIT License](https://github.com/MoeFurina/NeteaseCloudMusicApiEnhanced/blob/main/LICENSE)
@@ -1474,6 +1474,20 @@ export function artist_new_song(
  } & RequestBaseConfig,
 ): Promise<Response>

+export function artist_new_song_playall(
+  params: RequestBaseConfig,
+): Promise<Response>
+
+export function artist_new_song_mv_list_v2(
+  params: {
+    startTimestamp?: number | string
+    before?: number | string
+    sourceType?: number | string
+    limit?: number | string
+    firstRequest?: boolean | string
+  } & RequestBaseConfig,
+): Promise<Response>
+
 export function artist_detail(
  params: {
    id: number | string
@@ -1594,6 +1608,10 @@ export function vip_growthpoint_get(
  } & RequestBaseConfig,
 ): Promise<Response>

+export function vip_growthpoint_getall(
+  params: RequestBaseConfig,
+): Promise<Response>
+
 export function artist_fans(
  params: { id: number | string } & MultiPageConfig & RequestBaseConfig,
 ): Promise<Response>
@@ -2049,13 +2067,18 @@ export function listen_data_report(
  } & RequestBaseConfig,
 ): Promise<Response>

+export function listen_data_song_play_rank(
+  params: {
+    type?: string
+    endTime?: string | number
+  } & RequestBaseConfig,
+): Promise<Response>
+
 export function listen_data_today_song(
  params: RequestBaseConfig,
 ): Promise<Response>

-export function listen_data_total(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function listen_data_total(params: RequestBaseConfig): Promise<Response>

 export function listen_data_year_report(
  params: RequestBaseConfig,
@@ -2192,9 +2215,7 @@ export function radio_sport_get(
  } & RequestBaseConfig,
 ): Promise<Response>

-export function recent_listen_list(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function recent_listen_list(params: RequestBaseConfig): Promise<Response>

 export function recommend_songs_dislike(
  params: {
@@ -2202,9 +2223,7 @@ export function recommend_songs_dislike(
  } & RequestBaseConfig,
 ): Promise<Response>

-export function register_anonimous(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function register_anonimous(params: RequestBaseConfig): Promise<Response>

 export function sati_resource_list(
  params: {
@@ -2229,9 +2248,7 @@ export function sati_resource_sub_list(
  params: RequestBaseConfig,
 ): Promise<Response>

-export function sati_tag_list(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function sati_tag_list(params: RequestBaseConfig): Promise<Response>

 export function sati_timescene_resources_get(
  params: RequestBaseConfig,
@@ -2363,9 +2380,7 @@ export function song_url_match(
  } & RequestBaseConfig,
 ): Promise<Response>

-export function song_url_ncmget(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function song_url_ncmget(params: RequestBaseConfig): Promise<Response>

 export function song_url_v1_302(
  params: {
@@ -2388,9 +2403,7 @@ export function threshold_detail_get(
  params: RequestBaseConfig,
 ): Promise<Response>

-export function toplist_detail_v2(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function toplist_detail_v2(params: RequestBaseConfig): Promise<Response>

 export function ugc_album_get(
  params: {
@@ -2433,9 +2446,7 @@ export function ugc_song_get(
  } & RequestBaseConfig,
 ): Promise<Response>

-export function ugc_user_devote(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function ugc_user_devote(params: RequestBaseConfig): Promise<Response>

 export function user_detail_new(
  params: {
@@ -2516,13 +2527,9 @@ export function verify_qrcodestatus(
  } & RequestBaseConfig,
 ): Promise<Response>

-export function vip_sign(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function vip_sign(params: RequestBaseConfig): Promise<Response>

-export function vip_sign_info(
-  params: RequestBaseConfig,
-): Promise<Response>
+export function vip_sign_info(params: RequestBaseConfig): Promise<Response>

 export function vip_tasks_v1(
  params: {
@@ -0,0 +1,43 @@
+// 获取广告
+// 基于逆向网易云音乐 v9.5.45 RN Hermes 源码:
+//   - adService.getAd() → Network.nativeRequest → /api/ad/get
+//   - 需要 X-antiCheatToken 易盾反作弊头
+//   - 使用 xeapi 加密
+//
+// 返回 extra.reqId 可用于 ad_listening_rights_gain 的 reqUid
+//
+const createOption = require('../util/option.js')
+
+module.exports = async (query, request) => {
+  const data = {
+    type_ids: query.type_ids || '["400002_0"]',
+  }
+
+  const option = createOption(query, 'xeapi')
+  option.checkToken = true
+
+  const res = await request(`/api/ad/get`, data, option)
+  const raw = res.body
+
+  // 提取广告中的 req_id (用于领取权益)
+  let reqId = ''
+  try {
+    if (raw?.ads) {
+      const ad = Object.values(raw.ads)[0]
+      if (ad?.extJson) {
+        const ext = JSON.parse(ad.extJson)
+        reqId = ext?.contextInfo?.req_id || ''
+      }
+    }
+  } catch (_) {}
+
+  return {
+    status: 200,
+    body: {
+      code: 200,
+      ads: raw?.ads || null,
+      message: raw?.message || null,
+      extra: { reqId },
+    },
+  }
+}
@@ -0,0 +1,88 @@
+// 看广告免费听歌 - 领取免费听权益
+// 请求流程（基于逆向网易云音乐 v9.5.45 RN Hermes 源码）：
+// 1. 从广告平台拉广告 → 用户看完/点击广告 → 获取 ad 对象的 extJson.contextInfo.req_id 作为 reqUid
+// 2. 调用本接口传入 reqUid 及相关权益参数，领取免费听权益
+// 3. 服务器返回 gainFlag 等标识，用于展示领取结果
+
+const createOption = require('../util/option.js')
+const adGet = require('./ad_get.js')
+
+module.exports = async (query, request) => {
+  const time = Date.now()
+
+  // 如果未传入 reqUid，自动从 ad_get 获取最新广告的 req_id
+  let reqUid = query.reqUid || ''
+  if (!reqUid) {
+    try {
+      const adRes = await adGet(
+        { ...query, type_ids: query.type_ids || '["400002_0"]' },
+        request,
+      )
+      reqUid = adRes?.body?.extra?.reqId || ''
+      console.log(`自动获取 reqUid: ${reqUid}`)
+    } catch (e) {
+      // 获取广告失败，后续请求会因缺少 reqUid 被拒绝
+    }
+  }
+
+  const rightsParam = {
+    // 必填: 广告请求 ID，自动从 ad_get 获取
+    reqUid,
+
+    // 广告创意类型 (默认 1)
+    creativeType: parseInt(query.creativeType || 2),
+
+    // 时间戳
+    exposureTime: query.exposureTime || time,
+    clickTime: query.clickTime || time,
+
+    // 权益领取方式
+    rightsGainMethod: parseInt(query.rightsGainMethod || 2),
+
+    // 权益时长相关
+    rightsGainDuration: query.rightsGainDuration
+      ? parseInt(query.rightsGainDuration)
+      : undefined,
+    extraRightsGainMethod: query.extraRightsGainMethod
+      ? parseInt(query.extraRightsGainMethod)
+      : undefined,
+    extraRightsGainDuration: query.extraRightsGainDuration
+      ? parseInt(query.extraRightsGainDuration)
+      : undefined,
+    nextRightsGainDuration: query.nextRightsGainDuration
+      ? parseInt(query.nextRightsGainDuration)
+      : undefined,
+
+    // 来源标识 | 权益扩展信息
+    source: query.source || undefined,
+    rightsExtJson: query.rightsExtJson || undefined,
+
+    // 应用信息（下载类广告）
+    appInfo: query.appInfo ? JSON.parse(query.appInfo) : undefined,
+    installed: query.installed ? parseInt(query.installed) : undefined,
+  }
+
+  // 清理 undefined 字段
+  Object.keys(rightsParam).forEach((key) => {
+    if (rightsParam[key] === undefined) delete rightsParam[key]
+  })
+
+  // 将参数序列化为 reqParam 字符串 (与 RN 源码完全一致)
+  const data = {
+    reqParam: JSON.stringify(rightsParam),
+  }
+
+  const option = createOption(query, 'xeapi')
+  // 关键: 开启 X-antiCheatToken 头
+  option.checkToken = true
+
+  const res = await request(`/api/ad/listening/rights/gain`, data, option)
+
+  return {
+    status: 200,
+    body: {
+      code: 200,
+      data: res.body,
+    },
+  }
+}
@@ -0,0 +1,16 @@
+// 获取关注歌手的新歌曲和 MV
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    startTimestamp: query.startTimestamp || query.before || Date.now(),
+    sourceType: query.sourceType || 1,
+    limit: query.limit || 10,
+    firstRequest: query.firstRequest ?? true,
+  }
+  return request(
+    `/api/sub/artist/new/works/song-mv/list/v2`,
+    data,
+    createOption(query, 'eapi'),
+  )
+}
@@ -0,0 +1,10 @@
+// 获取所有关注歌手最近的 50 首新歌
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  return request(
+    `/api/sub/artist/new/works/song/playall`,
+    {},
+    createOption(query, 'eapi'),
+  )
+}
@@ -0,0 +1,12 @@
+// 听歌足迹 - 歌曲播放排行 (Top20)
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  return request(
+    `/api/content/activity/listen/data/song/play/rank`,
+    {
+      type: query.type || 'month', //周 week 月 month
+      endTime: query.endTime, // 不填就是本周/月的
+    },
+    createOption(query),
+  )
+}
@@ -1,4 +1,5 @@
 // 私信和通知接口
+
 const createOption = require('../util/option.js')
 module.exports = (query, request) => {
  const data = {}
@@ -1,3 +1,5 @@
+// 获取游客cookie
+
 const CryptoJS = require('crypto-js')
 const path = require('path')
 const fs = require('fs')
@@ -37,7 +39,7 @@ module.exports = async (query, request) => {
  let result = await request(
    `/api/register/anonimous`,
    data,
-    createOption(query, 'weapi'),
+    createOption(query, 'xeapi'),
  )
  if (result.body.code === 200) {
    result = {
@@ -0,0 +1,37 @@
+// 易盾反作弊 Token 注册端点
+// 调用后获取实时 token 并存入共享存储，供后续带 checkToken 的请求使用
+//
+// GET  /register/checktoken        → 返回当前 token（尚无则自动获取）
+// POST /register/checktoken        → 强制刷新 token
+// GET  /register/checktoken?refresh=1 → 强制刷新
+//
+const { default: axios } = require('axios')
+const { APP_CONF } = require('../util/config.json')
+
+const URL = APP_CONF.dunDomain + '/v3/b?pn=YD00000558929251'
+let _token = ''
+
+async function fetch() {
+  const res = await axios.get(URL, { timeout: 10000 })
+  const body = String(res.data)
+  const m = body.match(/null\(\[(\d+),\d+,\"([^\"]+)\"\]\)/)
+  if (m && m[1] === '200') return m[2]
+  throw new Error('易盾返回异常: ' + body.substring(0, 100))
+}
+
+// 端点处理
+module.exports = async (query) => {
+  const refresh = query.refresh === '1' || query.refresh === 'true'
+  let token = refresh ? null : _token
+  if (!token) {
+    token = await fetch()
+    _token = token
+  }
+  return {
+    status: 200,
+    body: { code: 200, token, registered: !!token },
+  }
+}
+
+// 给 request.js 读取用
+module.exports.getToken = () => _token
@@ -0,0 +1,74 @@
+const { default: axios } = require('axios')
+const encrypt = require('../util/crypto')
+const { APP_CONF } = require('../util/config.json')
+
+const generateNonce = () => {
+  let nonce = ''
+  for (let i = 0; i < 16; i++) {
+    nonce += Math.floor(Math.random() * 10).toString()
+  }
+  return nonce
+}
+
+module.exports = async (query, request) => {
+  const nonce = generateNonce()
+  const timestamp = String(Date.now())
+  const deviceId = query.deviceId || global.deviceId || ''
+  const currentKeyVersion = query.currentKeyVersion || ''
+
+  const data = {
+    appVersion: '9.1.65',
+    currentKeyVersion,
+    deviceId,
+    nonce,
+    os: 'android',
+    requestType: 'active',
+    signature: encrypt.xeapiSign(timestamp, nonce),
+    t1: '',
+    t2: '',
+    timestamp,
+    uid: '',
+  }
+
+  const res = await axios({
+    method: 'POST',
+    url: APP_CONF.apiDomain + '/api/gorilla/anti/crawler/security/key/get',
+    headers: {
+      'User-Agent':
+        'NeteaseMusic/9.1.65.240927161425(9001065);Dalvik/2.1.0 (Linux; U; Android 14; 23013RK75C Build/UKQ1.230804.001)',
+      Cookie: deviceId ? `deviceId=${encodeURIComponent(deviceId)}` : '',
+    },
+    data: new URLSearchParams(data).toString(),
+    proxy: false,
+  })
+
+  if (
+    !res.data ||
+    res.data.code !== 200 ||
+    !res.data.data ||
+    !res.data.data.encryptedData
+  ) {
+    throw new Error('xeapi public key request failed')
+  }
+  if (
+    !res.data.data.signature ||
+    encrypt.xeapiSign(res.data.data.timestamp, nonce) !==
+      res.data.data.signature
+  ) {
+    throw new Error('xeapi public key response signature mismatch')
+  }
+
+  const publicKey = encrypt.xeapiDecryptPublicKey(res.data.data.encryptedData)
+  if (!publicKey.sk) {
+    throw new Error('xeapi public key response missing sk')
+  }
+
+  return {
+    status: 200,
+    body: {
+      ...publicKey,
+      deviceId,
+    },
+    cookie: [],
+  }
+}
@@ -0,0 +1,49 @@
+// 提交歌曲播放状态
+
+const createOption = require('../util/option.js')
+const generateSessionId = () =>
+  Array.from(
+    { length: 12 },
+    () =>
+      'ABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789'[Math.floor(Math.random() * 36)],
+  ).join('')
+
+module.exports = (query, request) => {
+  const {
+    id,
+    sessionId,
+    progress = 0,
+    playMode = 'list_loop',
+    type = 'song',
+  } = query
+
+  if (!id) {
+    return Promise.reject({
+      status: 400,
+      body: {
+        code: 400,
+        msg: '缺少必要参数：id',
+      },
+    })
+  }
+
+  const playStateSubmitReq = JSON.stringify({
+    resource: {
+      id: String(id),
+      type: type,
+    },
+    progress: Number(progress) || 0,
+    sessionId: sessionId || generateSessionId(),
+    playMode: playMode,
+  })
+
+  const data = {
+    playStateSubmitReq: playStateSubmitReq,
+  }
+
+  return request(
+    '/api/relay/play/state/submit',
+    data,
+    createOption(query, 'weapi'),
+  )
+}
@@ -1,8 +1,42 @@
 // 听歌打卡

 const createOption = require('../util/option.js')
-module.exports = (query, request) => {
-  const data = {
+const { APP_CONF } = require('../util/config.json')
+const DOMAIN = APP_CONF.clDomian
+module.exports = async (query, request) => {
+  // 注入 os=osx 的 cookie
+  let cookie = query.cookie || ''
+  if (typeof cookie === 'object') {
+    cookie = Object.assign({ os: 'osx' }, cookie)
+  } else if (typeof cookie === 'string') {
+    if (cookie.indexOf('os=') > -1) {
+      cookie = cookie.replace(/os=[^;]+/g, 'os=osx')
+    } else {
+      cookie = cookie + '; os=osx'
+    }
+  } else {
+    cookie = 'os=osx'
+  }
+  query.cookie = cookie
+
+  // 1) startplay → 进「最近播放」
+  const startplayData = {
+    logs: JSON.stringify([
+      {
+        action: 'startplay',
+        json: {
+          id: query.id,
+          type: 'song',
+          mainsite: '1',
+          mainsiteWeb: '1',
+          content: `id=${query.sourceid}`,
+        },
+      },
+    ]),
+  }
+
+  // 2) play → 涨「听歌排行」计数
+  const playData = {
    logs: JSON.stringify([
      {
        action: 'play',
@@ -15,12 +49,30 @@ module.exports = (query, request) => {
          type: 'song',
          wifi: 0,
          source: 'list',
-          mainsite: 1,
-          content: '',
+          mainsite: '1',
+          mainsiteWeb: '1',
+          content: `id=${query.sourceid}`,
        },
      },
    ]),
  }

-  return request(`/api/feedback/weblog`, data, createOption(query, 'weapi'))
+  const option = createOption(query, 'eapi')
+  option.domain = DOMAIN
+
+  // 发送两次请求
+  const res1 = await request(`/api/feedback/weblog`, startplayData, option)
+  const res2 = await request(`/api/feedback/weblog`, playData, option)
+
+  return {
+    status: 200,
+    body: {
+      code: 200,
+      data: 'success',
+      details: {
+        startplay: res1.body,
+        play: res2.body,
+      },
+    },
+  }
 }
@@ -0,0 +1,128 @@
+// 听歌打卡 - NCBL 加密版 (仿桌面客户端 PLV/PLD 上报)
+// 复制自 https://github.com/folltoshe/netease-report-listen-song 的 PC 端日志上报方式
+//
+// PLV 和 PLD 分两次独立上传
+
+const {
+  buildPlv,
+  buildPld,
+  buildRecords,
+  extractContext,
+  parseCookie,
+  buildCookieStr,
+  buildMetaJson,
+  doUpload,
+} = require('../util/ncbl')
+
+module.exports = async (query, request) => {
+  // --- 参数校验 ---
+  const songId = Number(query.id)
+  if (!songId || isNaN(songId)) {
+    return { status: 400, body: { code: 400, msg: '缺少有效的 id (歌曲ID)' } }
+  }
+  const playTime = Number(query.time)
+  if (isNaN(playTime) || playTime <= 0) {
+    return {
+      status: 400,
+      body: { code: 400, msg: '缺少有效的 time (播放时长)' },
+    }
+  }
+  const totalTime = Number(query.total) || playTime
+  const sourceId = String(query.sourceid || query.sourceId || '')
+  const sourceName = query.source || 'list'
+
+  // --- 解析认证上下文 ---
+  const rawCookie = query.cookie || ''
+  const cookieObj = parseCookie(rawCookie)
+  cookieObj.os = 'pc'
+  const ctx = extractContext(cookieObj)
+
+  // 兜底取 token
+  if (!ctx.auth.token && rawCookie) {
+    const parsed =
+      typeof rawCookie === 'string' ? parseCookie(rawCookie) : rawCookie
+    ctx.auth.token = parsed.MUSIC_U || ''
+  }
+
+  if (!ctx.auth.token) {
+    return { status: 401, body: { code: 401, msg: '缺少 MUSIC_U 鉴权令牌' } }
+  }
+
+  // --- 构建歌曲和来源 ---
+  const song = {
+    id: songId,
+    name: query.name || '',
+    artist: query.artist || '',
+    bitrate: Number(query.bitrate) || 320,
+    level: query.level || 'exhigh',
+    vip: query.vip === 'true' || query.vip === true,
+    time: totalTime,
+  }
+  const source = {
+    id: sourceId || String(songId),
+    type: 'track',
+    name: sourceName,
+  }
+
+  const metaJson = buildMetaJson(ctx)
+  const cookieStr = buildCookieStr(ctx)
+
+  const ts = Math.floor(Date.now() / 1000)
+  const played = Math.min(playTime, totalTime)
+
+  const plvBody = buildRecords([
+    { time: ts, action: '_plv', data: buildPlv(ctx, song, source) },
+  ])
+  const pldBody = buildRecords([
+    { time: ts, action: '_pld', data: buildPld(ctx, song, source, played) },
+  ])
+
+  try {
+    // 1) 上传 PLV
+    const plv = await doUpload(ctx, metaJson, plvBody, cookieStr, 'PLV')
+    if (!plv.success) {
+      const rateMsg =
+        plv.respBody?.data?.rate != null
+          ? ` (rate=${plv.respBody.data.rate})`
+          : ''
+      return {
+        status: 200,
+        body: {
+          code: plv.respBody?.code || -1,
+          msg: `PLV 上报失败${rateMsg}`,
+          details: plv.respBody,
+        },
+      }
+    }
+
+    // 2) 上传 PLD
+    const pld = await doUpload(ctx, metaJson, pldBody, cookieStr, 'PLD')
+    if (!pld.success) {
+      return {
+        status: 200,
+        body: {
+          code: pld.respBody?.code || -1,
+          msg: 'PLV 成功但 PLD 失败',
+          details: { plv: plv.respBody, pld: pld.respBody },
+        },
+      }
+    }
+
+    return {
+      status: 200,
+      body: {
+        code: 200,
+        data: 'scrobble_v1 上报成功',
+        details: {
+          plv: { fileName: plv.fileName, payloadSize: plv.payload.length },
+          pld: { fileName: pld.fileName, payloadSize: pld.payload.length },
+        },
+      },
+    }
+  } catch (err) {
+    return {
+      status: 502,
+      body: { code: 502, msg: `请求异常: ${err.message || err}` },
+    }
+  }
+}
@@ -0,0 +1,9 @@
+// 从云盘获取歌曲下载链接
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {
+    songId: query.id,
+  }
+  return request(`/api/cloud/dowonload`, data, createOption(query, 'eapi'))
+}
@@ -0,0 +1,11 @@
+// 一键领取所有会员成长值
+
+const createOption = require('../util/option.js')
+module.exports = (query, request) => {
+  const data = {}
+  return request(
+    `/api/vipnewcenter/app/level/task/reward/getall`,
+    data,
+    createOption(query, 'xeapi'),
+  )
+}
@@ -1,11 +1,40 @@
 // 黑胶乐签打卡

 const createOption = require('../util/option.js')
-module.exports = (query, request) => {
-  const data = {}
-  return request(
-    `/api/vip-center-bff/task/sign`,
-    data,
+
+module.exports = async (query, request) => {
+  const results = {}
+
+  const taskSign = await request(
+    '/api/vip-center-bff/task/sign',
+    {},
    createOption(query, 'weapi'),
  )
+  results.taskSign = taskSign.body
+
+  const checkinDetail = await request(
+    '/api/vipnewcenter/app/level/user/checkin/history/detail',
+    {
+      signDayTime: Date.now(),
+      type: 1,
+    },
+    createOption(query, 'eapi'),
+  )
+  results.checkinDetail = checkinDetail.body
+
+  // 两个接口都返回 code=200 即视为打卡成功
+  const signed =
+    Number(results.taskSign?.code) === 200 &&
+    Number(results.checkinDetail?.code) === 200
+
+  return {
+    body: {
+      code: 200,
+      ...results,
+      signed,
+      message: signed ? '黑胶乐签打卡成功' : '黑胶乐签打卡失败',
+    },
+    cookie: taskSign.cookie,
+    status: 200,
+  }
 }
@@ -1,13 +1,14 @@
-// 黑胶乐签打卡历史
+// 黑胶乐签打卡历史 / 状态查询
+// 支持传入 type=0（用户信息栏）或 type=1（黑胶乐签）

 const createOption = require('../util/option.js')
 module.exports = (query, request) => {
  const data = {
-    type: '0',
+    type: query.type || '0',
  }
  return request(
    `/api/vipnewcenter/app/minidesk/music/sign/pc`,
    data,
-    createOption(query, 'xeapi'),
+    createOption(query, 'eapi'),
  )
 }
@@ -1,6 +1,6 @@
 {
  "name": "@neteasecloudmusicapienhanced/api",
-  "version": "4.34.3",
+  "version": "4.37.0",
  "description": "全网最全的网易云音乐API接口 || A revival project for NeteaseCloudMusicApi Node.js Services (Half Refactor & Enhanced) || 网易云音乐 API 备份 + 增强 || 本项目自原版v4.28.0版本后开始自行维护",
  "scripts": {
    "dev": "nodemon app.js",
@@ -9,6 +9,8 @@
    "lint": "eslint \"**/*.{js,ts}\"",
    "lint-fix": "eslint --fix \"**/*.{js,ts}\"",
    "prepare": "husky install",
+    "docs:format": "node scripts/format-docs.js",
+    "docs:check": "node scripts/format-docs.js --check",
    "pkgwin": "pkg . -t node18-win-x64 -C GZip -o precompiled/app",
    "pkglinux": "pkg . -t node18-linux-x64 -C GZip -o precompiled/app",
    "pkgmacos": "pkg . -t node18-macos-x64 -C GZip -o precompiled/app"
@@ -73,14 +75,14 @@
    "data"
  ],
  "dependencies": {
-    "@neteasecloudmusicapienhanced/unblockmusic-utils": "^0.3.2",
-    "axios": "^1.16.1",
+    "@neteasecloudmusicapienhanced/unblockmusic-utils": "^0.3.4",
+    "axios": "^1.18.1",
    "crypto-js": "^4.2.0",
    "dotenv": "^17.4.2",
    "express": "^5.2.1",
    "express-fileupload": "^1.5.2",
    "gzip": "^0.1.0",
-    "music-metadata": "^11.12.3",
+    "music-metadata": "^11.14.0",
    "node-forge": "^1.4.0",
    "pac-proxy-agent": "^7.2.0",
    "qrcode": "^1.5.4",
@@ -90,19 +92,19 @@
    "yargs": "^18.0.0"
  },
  "devDependencies": {
-    "@eslint/eslintrc": "^3.3.5",
-    "@eslint/js": "^9.39.4",
+    "@eslint/eslintrc": "^3.3.6",
+    "@eslint/js": "^9.39.5",
    "@types/express": "^5.0.6",
    "@types/express-fileupload": "^1.5.1",
    "@types/mocha": "^10.0.10",
-    "@types/node": "25.5.0",
-    "@typescript-eslint/eslint-plugin": "^8.60.0",
-    "@typescript-eslint/parser": "^8.60.0",
-    "eslint": "^9.39.4",
+    "@types/node": "25.9.2",
+    "@typescript-eslint/eslint-plugin": "^8.64.0",
+    "@typescript-eslint/parser": "^8.64.0",
+    "eslint": "^9.39.5",
    "eslint-config-prettier": "^10.1.8",
    "eslint-plugin-html": "^8.1.4",
    "eslint-plugin-prettier": "^5.5.6",
-    "globals": "^17.6.0",
+    "globals": "^17.7.0",
    "husky": "^9.1.7",
    "intelli-espower-loader": "^1.1.0",
    "lint-staged": "^16.4.0",
@@ -110,11 +112,11 @@
    "nodemon": "^3.1.14",
    "pkg": "^5.8.1",
    "power-assert": "^1.6.1",
-    "prettier": "^3.8.3",
+    "prettier": "^3.9.5",
    "typescript": "^5.9.3"
  },
  "publishConfig": {
    "access": "public",
-    "registry": "https://registry.npmjs.org/" 
+    "registry": "https://registry.npmjs.org/"
  }
 }
@@ -115,6 +115,182 @@
    textarea:focus {
      border-color: #333;
    }
+
+    /* ===== 自定义选项区域 ===== */
+    .section-container {
+      margin-top: 20px;
+      padding: 16px 20px;
+      background: #fafafa;
+      border: 1px solid #e8e8e8;
+      border-radius: 8px;
+    }
+
+    .section-container + .section-container {
+      margin-top: 12px;
+    }
+
+    .section-title {
+      font-size: 14px;
+      font-weight: 600;
+      color: #555;
+      margin-bottom: 12px;
+      display: flex;
+      align-items: center;
+      gap: 8px;
+    }
+
+    .section-title .count-badge {
+      font-size: 11px;
+      background: #ddd;
+      color: #666;
+      padding: 1px 8px;
+      border-radius: 10px;
+      font-weight: 400;
+    }
+
+    .dynamic-row {
+      display: flex;
+      gap: 8px;
+      margin-bottom: 8px;
+      align-items: center;
+    }
+
+    .dynamic-row .key-input {
+      flex: 0 0 200px;
+      padding: 8px 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-size: 13px;
+      outline: none;
+      font-family: 'Courier New', monospace;
+    }
+
+    .dynamic-row .value-input {
+      flex: 1;
+      padding: 8px 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-size: 13px;
+      outline: none;
+    }
+
+    .dynamic-row .key-input:focus,
+    .dynamic-row .value-input:focus {
+      border-color: #333;
+    }
+
+    .remove-btn {
+      width: 28px;
+      height: 28px;
+      padding: 0;
+      background: #fff;
+      color: #999;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      cursor: pointer;
+      font-size: 14px;
+      line-height: 1;
+      display: flex;
+      align-items: center;
+      justify-content: center;
+      transition: all 0.2s;
+      flex-shrink: 0;
+    }
+
+    .remove-btn:hover {
+      background: #fee;
+      color: #e33;
+      border-color: #fcc;
+    }
+
+    .add-btn {
+      background: #fff;
+      color: #333;
+      border: 1px dashed #ccc;
+      padding: 6px 16px;
+      border-radius: 6px;
+      font-size: 13px;
+      cursor: pointer;
+      transition: all 0.2s;
+      margin-top: 4px;
+    }
+
+    .add-btn:hover {
+      border-color: #999;
+      background: #f5f5f5;
+    }
+
+    /* ===== 参数编辑区 Tab ===== */
+    .param-container {
+      flex: 1;
+      display: flex;
+      flex-direction: column;
+    }
+
+    .param-header {
+      display: flex;
+      align-items: center;
+      justify-content: space-between;
+      margin-bottom: 8px;
+    }
+
+    .param-header-title {
+      font-size: 14px;
+      font-weight: 500;
+      color: #555;
+    }
+
+    .param-tabs {
+      display: flex;
+      gap: 0;
+      background: #f0f0f0;
+      border-radius: 6px;
+      padding: 2px;
+    }
+
+    .tab-btn {
+      padding: 4px 14px;
+      border: none;
+      background: transparent;
+      color: #888;
+      font-size: 12px;
+      font-weight: 500;
+      cursor: pointer;
+      border-radius: 4px;
+      transition: all 0.2s;
+    }
+
+    .tab-btn:hover {
+      color: #555;
+    }
+
+    .tab-btn.active {
+      background: #fff;
+      color: #333;
+      box-shadow: 0 1px 3px rgba(0, 0, 0, 0.1);
+    }
+
+    .param-panel {
+      flex: 1;
+      display: flex;
+      flex-direction: column;
+    }
+
+    .param-panel textarea {
+      flex: 1;
+      padding: 12px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-family: 'Courier New', monospace;
+      font-size: 13px;
+      resize: vertical;
+      min-height: 350px;
+      outline: none;
+    }
+
+    .param-panel textarea:focus {
+      border-color: #333;
+    }
 </style>
 </head>
 <body>
@@ -125,6 +301,16 @@
                <label for="uri">URI</label>
                <input type="text" id="uri" name="uri" value="/api/song/lyric/v1">
            </div>
+            <div class="form-row">
+                <label for="method">请求方法</label>
+                <select id="method" name="method">
+                    <option value="POST" selected>POST</option>
+                    <option value="GET">GET</option>
+                    <option value="PUT">PUT</option>
+                    <option value="DELETE">DELETE</option>
+                    <option value="PATCH">PATCH</option>
+                </select>
+            </div>
            <div class="form-row">
                <label for="crypto">加密方式</label>
                <select id="crypto" name="crypto">
@@ -136,19 +322,41 @@
                    <option value="" selected>(默认)</option>
                </select>
            </div>
+            <div class="form-row">
+                <label for="timeout">超时(ms)</label>
+                <input type="number" id="timeout" name="timeout" value="30000" min="0" step="1000" placeholder="0 表示无超时">
+            </div>
            <div class="form-row">
                <label></label>
                <button type="submit">发送请求</button>
            </div>
        </form>
+
+        <!-- ===== 自定义请求头 ===== -->
+        <div class="section-container" id="headersSection">
+            <div class="section-title">
+                请求头 (Headers)
+                <span class="count-badge" id="headerCount">4</span>
+            </div>
+            <div id="headersList"></div>
+            <button class="add-btn" onclick="addHeaderRow('', '')">+ 添加请求头</button>
+        </div>
+
        <div class="data-result">
            <div>
                <label for="result">响应结果</label>
                <textarea id="result" name="result" readonly></textarea>
            </div>
-            <div>
-                <label for="data">请求数据</label>
-                <textarea id="data" name="data">
+            <div class="param-container">
+                <div class="param-header">
+                    <span class="param-header-title">请求参数</span>
+                    <div class="param-tabs">
+                        <button class="tab-btn active" data-mode="json" onclick="switchParamTab('json')">JSON</button>
+                        <button class="tab-btn" data-mode="kv" onclick="switchParamTab('kv')">键值对</button>
+                    </div>
+                </div>
+                <div class="param-panel" id="jsonPanel">
+                    <textarea id="data" name="data">
 {
    "cp": false,
    "id": "2058263032",
@@ -160,64 +368,306 @@
    "ytv": 0,
    "yv": 0
 }</textarea>
+                </div>
+                <div class="param-panel" id="kvPanel" style="display:none">
+                    <div id="kvList"></div>
+                    <button class="add-btn" onclick="addKvRow('', '')">+ 添加参数</button>
+                </div>
            </div>
        </div>
    </div>

    <script src="https://fastly.jsdelivr.net/npm/axios/dist/axios.min.js"></script>
    <script>
-        async function sendRequest() {
-            document.getElementById('result').value = ""
+        // ===== 动态行管理 =====
+        function escapeHtml(str) {
+            if (!str) return '';
+            return String(str)
+                .replace(/&/g, '&amp;')
+                .replace(/</g, '&lt;')
+                .replace(/>/g, '&gt;')
+                .replace(/"/g, '&quot;')
+                .replace(/'/g, '&#39;');
+        }

-            const uri = document.getElementById('uri').value;
-            const crypto = document.getElementById('crypto').value;
-            const data = document.getElementById('data').value;
+        function addHeaderRow(key, value) {
+            const list = document.getElementById('headersList');
+            const row = document.createElement('div');
+            row.className = 'dynamic-row';
+            row.innerHTML =
+                '<input type="text" class="key-input" placeholder="Header 名称" value="' +
+                escapeHtml(key) +
+                '">' +
+                '<input type="text" class="value-input" placeholder="值" value="' +
+                escapeHtml(value) +
+                '">' +
+                '<button class="remove-btn" onclick="removeRow(this)" title="删除">✕</button>';
+            list.appendChild(row);
+            updateCount();
+        }

+        function addKvRow(key, value) {
+            const list = document.getElementById('kvList');
+            const row = document.createElement('div');
+            row.className = 'dynamic-row';
+            row.innerHTML =
+                '<input type="text" class="key-input" placeholder="参数名" value="' +
+                escapeHtml(key) +
+                '">' +
+                '<input type="text" class="value-input" placeholder="值" value="' +
+                escapeHtml(value) +
+                '">' +
+                '<button class="remove-btn" onclick="removeRow(this)" title="删除">✕</button>';
+            list.appendChild(row);
+        }
+
+        function removeRow(btn) {
+            btn.parentElement.remove();
+        }
+
+        function collectHeaders() {
+            const headers = {};
+            document.querySelectorAll('#headersList .dynamic-row').forEach(function (row) {
+                var key = row.querySelector('.key-input').value.trim();
+                var value = row.querySelector('.value-input').value;
+                if (key) headers[key] = value;
+            });
+            return headers;
+        }
+
+        function collectKvData() {
+            var obj = {};
+            document.querySelectorAll('#kvList .dynamic-row').forEach(function (row) {
+                var key = row.querySelector('.key-input').value.trim();
+                var val = row.querySelector('.value-input').value;
+                if (!key) return;
+                // 自动类型转换
+                if (val === 'true') obj[key] = true;
+                else if (val === 'false') obj[key] = false;
+                else if (val === 'null') obj[key] = null;
+                else if (/^-?\d+(\.\d+)?$/.test(val) && !isNaN(Number(val))) obj[key] = Number(val);
+                else obj[key] = val;
+            });
+            return obj;
+        }
+
+        // ===== Tab 切换 =====
+        function syncJsonToKv() {
            try {
-                const res = await axios({
-                    url: `/api?timestamp=${Date.now()}`,
-                    method: 'post',
-                    data: {
-                        uri: uri,
-                        data: JSON.parse(data),
-                        crypto: crypto,
-                    },
+                var data = JSON.parse(document.getElementById('data').value);
+                var list = document.getElementById('kvList');
+                list.innerHTML = '';
+                Object.keys(data).forEach(function (k) {
+                    addKvRow(k, String(data[k]));
                });
-
-                document.getElementById('result').value = JSON.stringify(res.data, null, 2);
-            } catch (error) {
-                document.getElementById('result').value = 'Request failed: ' + error.message;
+                return true;
+            } catch (e) {
+                return false;
            }
        }

-        (function fillFromQuery() {
-            const params = new URLSearchParams(window.location.search);
-            if (!params.toString()) return;
-            const uri = params.get('uri');
-            const crypto = params.get('crypto');
-            const dataParam = params.get('data');
-            if (uri) {
-              document.getElementById('uri').value = uri;
+        function syncKvToJson() {
+            var obj = collectKvData();
+            document.getElementById('data').value = JSON.stringify(obj, null, 2);
+        }
+
+        function switchParamTab(mode) {
+            var jsonPanel = document.getElementById('jsonPanel');
+            var kvPanel = document.getElementById('kvPanel');
+
+            if (mode === 'kv') {
+                if (!syncJsonToKv()) {
+                    alert('JSON 格式有误，无法切换到键值对模式，请先修正 JSON');
+                    return;
+                }
+                jsonPanel.style.display = 'none';
+                kvPanel.style.display = 'block';
+            } else {
+                syncKvToJson();
+                kvPanel.style.display = 'none';
+                jsonPanel.style.display = 'block';
            }
-            if (crypto) {
-              const cryptoSelect = document.getElementById('crypto');
-              if ([...cryptoSelect.options].some((opt) => opt.value === crypto)) {
-                cryptoSelect.value = crypto;
-              }
+
+            document.querySelectorAll('.tab-btn').forEach(function (btn) {
+                btn.classList.toggle('active', btn.dataset.mode === mode);
+            });
+        }
+
+        // ===== 默认请求头（直接套用后端预设值）=====
+        var defaultHeaders = [
+            { key: 'Cookie', value: '' },
+            {
+                key: 'User-Agent',
+                value: 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0',
+            },
+            { key: 'Referer', value: 'https://music.163.com' },
+            { key: 'Content-Type', value: 'application/json' },
+        ];
+
+        // ===== 发送请求 =====
+        async function sendRequest() {
+            document.getElementById('result').value = '';
+
+            var uri = document.getElementById('uri').value;
+            var method = document.getElementById('method').value;
+            var crypto = document.getElementById('crypto').value;
+            var timeout = parseInt(document.getElementById('timeout').value, 10) || 0;
+            var headers = collectHeaders();
+
+            // 根据当前激活的 tab 读取数据
+            var parsedData;
+            var activeTab = document.querySelector('.tab-btn.active');
+            if (activeTab && activeTab.dataset.mode === 'kv') {
+                parsedData = collectKvData();
+            } else {
+                var rawData = document.getElementById('data').value;
+                try {
+                    parsedData = rawData.trim() ? JSON.parse(rawData) : {};
+                } catch (e) {
+                    document.getElementById('result').value =
+                        '请求数据格式错误：' + e.message;
+                    return;
+                }
            }
-            if (dataParam) {
-              const decoded = dataParam;
-              try {
-                document.getElementById('data').value = JSON.stringify(
-                  JSON.parse(decoded),
-                  null,
-                  2,
+
+            var axiosConfig = {
+                url: '/api?timestamp=' + Date.now(),
+                method: method,
+            };
+
+            if (timeout > 0) {
+                axiosConfig.timeout = timeout;
+            }
+
+            if (method === 'GET') {
+                axiosConfig.params = {
+                    uri: uri,
+                    crypto: crypto,
+                    data: JSON.stringify(parsedData),
+                    headers: Object.keys(headers).length ? JSON.stringify(headers) : undefined,
+                };
+            } else {
+                axiosConfig.data = {
+                    uri: uri,
+                    crypto: crypto,
+                    data: parsedData,
+                    headers: Object.keys(headers).length ? headers : undefined,
+                };
+            }
+
+            try {
+                var res = await axios(axiosConfig);
+                document.getElementById('result').value = JSON.stringify(
+                    res.data,
+                    null,
+                    2,
                );
-              } catch (error) {
-                document.getElementById('data').value = decoded;
-              }
+            } catch (error) {
+                document.getElementById('result').value =
+                    'Request failed: ' + error.message;
            }
-          })();
+        }
+
+        // ===== 从 URL 查询参数恢复 =====
+        (function fillFromQuery() {
+            var params = new URLSearchParams(window.location.search);
+            if (!params.toString()) {
+                // 没有查询参数，用默认 header
+                defaultHeaders.forEach(function (h) {
+                    addHeaderRow(h.key, h.value);
+                });
+                return;
+            }
+
+            var uri = params.get('uri');
+            var crypto = params.get('crypto');
+            var dataParam = params.get('data');
+            var method = params.get('method');
+            var timeout = params.get('timeout');
+            var headersParam = params.get('headers');
+            var kvParams = params.get('kvParams');
+            var paramMode = params.get('paramMode');
+
+            if (uri) document.getElementById('uri').value = uri;
+            if (method) {
+                var methodSelect = document.getElementById('method');
+                if (
+                    [].slice.call(methodSelect.options).some(function (opt) {
+                        return opt.value === method;
+                    })
+                ) {
+                    methodSelect.value = method;
+                }
+            }
+            if (timeout) document.getElementById('timeout').value = timeout;
+
+            if (crypto) {
+                var cryptoSelect = document.getElementById('crypto');
+                if (
+                    [].slice.call(cryptoSelect.options).some(function (opt) {
+                        return opt.value === crypto;
+                    })
+                ) {
+                    cryptoSelect.value = crypto;
+                }
+            }
+
+            if (dataParam) {
+                try {
+                    document.getElementById('data').value = JSON.stringify(
+                        JSON.parse(dataParam),
+                        null,
+                        2,
+                    );
+                } catch (_) {
+                    document.getElementById('data').value = dataParam;
+                }
+            }
+
+            if (headersParam) {
+                try {
+                    var parsed = JSON.parse(headersParam);
+                    Object.keys(parsed).forEach(function (k) {
+                        addHeaderRow(k, parsed[k]);
+                    });
+                } catch (_) {
+                    // fallback: 用默认 header
+                    defaultHeaders.forEach(function (h) {
+                        addHeaderRow(h.key, h.value);
+                    });
+                }
+            } else {
+                defaultHeaders.forEach(function (h) {
+                    addHeaderRow(h.key, h.value);
+                });
+            }
+
+            if (kvParams) {
+                try {
+                    var parsed = JSON.parse(kvParams);
+                    // 先填充 kv 列表，再切换到 kv 模式
+                    Object.keys(parsed).forEach(function (k) {
+                        addKvRow(k, String(parsed[k]));
+                    });
+                    if (paramMode === 'kv') {
+                        switchParamTab('kv');
+                    }
+                } catch (_) {
+                    /* ignore */
+                }
+            } else if (paramMode === 'kv' && dataParam) {
+                // 从 data 参数同步到键值对模式
+                try {
+                    var data = JSON.parse(dataParam);
+                    Object.keys(data).forEach(function (k) {
+                        addKvRow(k, String(data[k]));
+                    });
+                    switchParamTab('kv');
+                } catch (_) {
+                    /* ignore */
+                }
+            }
+        })();
    </script>
 </body>
 </html>
@@ -1,13 +1,14 @@
-# 网易云音乐 API Enhanced
+# NeteaseCloudMusicAPI Enhanced

-> 🔍 网易云音乐API Node.js服务的复兴项目
+> 🎉 全网收集最全的网易云音乐api接口 基于[NeteaseCloudMusicAPI](https://github.com/binaryify/NeteaseCloudMusicApi)的复刻版本

- 基于原版网易云API新增更多有趣的功能
- 具备登录接口,多达200多个接口
- 更完善的文档
+- ⚡ 四种加密模式 · 后端代理
+- 🪛 具备多达200多个接口
+- 📄 更完善的文档


 [Github](https://github.com/neteasecloudmusicapienhanced/api-enhanced)
-[Get Started](#neteasecloudmusicapienhanced)
+[前往本家](https://github.com/binaryify/NeteaseCloudMusicApi)
+[快速开始](#neteasecloudmusicapienhanced)

 ![color](#ffffff)
@@ -88,6 +88,7 @@ v4.29.9 加入了生成随机中国 IP 功能, 在请求时加上 `randomCNIP=tr
 5. 直接点`Continue`
 6. `PROJECT NAME`自己填,`FRAMEWORK PRESET` 选 `Other` 然后直接点 `Deploy` 接着等部署完成即可

+
 ## 腾讯云 serverless 部署

 因 `Vercel` 在国内访问太慢(不绑定自己的域名的情况下),在此提供腾讯云 serverless 部署方法
@@ -101,6 +102,7 @@ v4.29.9 加入了生成随机中国 IP 功能, 在请求时加上 `randomCNIP=tr
 5. 输入`应用名`,上传方式选择`代码仓库`,进行 GitHub 授权(如已授权可跳过这一步),代码仓库选择刚刚 fork 的项目
 6. 启动文件填入:

+
 ```
 #!/bin/bash
 export PORT=9000
@@ -113,6 +115,7 @@ export PORT=9000
  - 腾讯云 serverless 并不是免费的,前三个月有免费额度,之后收费
  - 当前(2024-08-24), 用此法创建的话, 会`默认`关联一个"日志服务-日志主题"(创建过程中没有提醒), 此服务是计量收费的

+
 ## 可以使用代理

 在 query 参数中加上 proxy=your-proxy 即可让这一次的请求使用 proxy
@@ -180,6 +183,7 @@ request 相关的环境变量
 5. no_proxy
 6. NO_PROXY

+
 ```shell
 docker pull moefurina/ncm-api

@@ -214,6 +218,7 @@ $ sudo docker run -d -p 3000:3000 netease-music-api
 - 需要返回值加密时, 可传 `e_r=1`, `weapi` 和 `eapi` 都支持
 - 目前支持算法 有 `weapi`, `eapi`, `linuxapi` 和 `xeapi` (xeapi 是一种不加密的特殊算法, 主要用于调试加密前的原始请求参数)

+
 ## 接口文档

 ### 调用前须知
@@ -268,12 +273,12 @@ AI 生成的图,仅供娱乐()

 #### 1. 手机登录

-**必选参数 :**  
+**必选参数 :**
 `phone`: 手机号码

 `password`: 密码

-**可选参数 :**  
+**可选参数 :**
 `countrycode`: 国家码，用于国外手机号登录，例如美国传入：`1`

 `md5_password`: md5 加密后的密码,传入后 `password` 参数将失效
@@ -432,11 +437,11 @@ body {

 ### 检测手机号码是否已注册

-说明 : 调用此接口 ,可检测手机号码是否已注册  
-**必选参数 :**  
+说明 : 调用此接口 ,可检测手机号码是否已注册
+**必选参数 :**
 `phone` : 手机号码

-**可选参数 :**  
+**可选参数 :**
 `countrycode`: 国家码，用于国外手机号，例如美国传入：`1` ,默认 86 即中国

 **接口地址 :** `/cellphone/existence/check`
@@ -445,7 +450,7 @@ body {

 ### 初始化昵称

-说明 : 刚注册的账号(需登录),调用此接口 ,可初始化昵称  
+说明 : 刚注册的账号(需登录),调用此接口 ,可初始化昵称
 **必选参数 :**
 `nickname` : 昵称

@@ -700,7 +705,7 @@ tags: 歌单标签

 说明 : 登录后调用此接口,使用`'Content-Type': 'multipart/form-data'`上传图片 formData(name 为'imgFile'),可更新歌单封面(参考:https://github.com/neteasecloudmusicapienhanced/api-enhanced/blob/main/public/playlist_cover_update.html)

-**必选参数 :**  
+**必选参数 :**
 `id`: 歌单 id 3143833470

 **可选参数 :**
@@ -730,7 +735,7 @@ tags: 歌单标签

 说明 : 登录后调用此接口,可以根据歌曲 id 顺序调整歌曲顺序

-**必选参数 :**  
+**必选参数 :**
 `pid`: 歌单 id

 `ids`: 歌曲 id 列表
@@ -1210,6 +1215,7 @@ tags: 歌单标签

 > 如果你设置 limit=50&offset=100，你就会得到第 101-150 首歌曲

+
 ### 歌单详情动态

 说明 : 调用后可获取歌单详情动态部分,如评论数,是否收藏,播放数
@@ -1403,7 +1409,7 @@ tags: 歌单标签

 ### 歌单收藏者

-说明 : 调用此接口 , 传入歌单 id 可获取歌单的所有收藏者  
+说明 : 调用此接口 , 传入歌单 id 可获取歌单的所有收藏者
 **必选参数 :**

 `id` : 歌单 id
@@ -1496,6 +1502,7 @@ tags: 歌单标签

 - （可能存在）JSON 歌曲元数据

+
 ```
 {"t":0,"c":[{"tx":"作曲: "},{"tx":"柳重言","li":"http://p1.music.126.net/Icj0IcaOjH2ZZpyAM-QGoQ==/6665239487822533.jpg","or":"orpheus://nm/artist/home?id=228547&type=artist"}]}
 {"t":5403,"c":[{"tx":"编曲: "},{"tx":"Alex San","li":"http://p1.music.126.net/pSbvYkrzZ1RFKqoh-fA9AQ==/109951166352922615.jpg","or":"orpheus://nm/artist/home?id=28984845&type=artist"}]}
@@ -1512,6 +1519,7 @@ tags: 歌单标签

 * 逐字歌词

+
 ```
 [16210,3460](16210,670,0)还(16880,410,0)没...
 ~~~~1 ~~~2  ~~~~3 ~~4 5 ~6 (...)
@@ -1588,7 +1596,7 @@ tags: 歌单标签

 说明 : 调用此接口 , 传入资源 parentCommentId 和资源类型 type 和资源 id 参数, 可获得该资源的歌曲楼层评论

-**必选参数 :**  
+**必选参数 :**
 `parentCommentId`: 楼层评论 id

 `id` : 资源 id
@@ -1804,7 +1812,7 @@ tags: 歌单标签

 说明 : 调用此接口 , 传入资源类型和资源 id,以及排序方式,可获取对应资源的评论

-**必选参数 :**  
+**必选参数 :**
 `id` : 资源 id, 如歌曲 id,mv id

 `type`: 数字 , 资源类型 , 对应歌曲 , mv, 专辑 , 歌单 , 电台, 视频对应以下类型
@@ -1827,7 +1835,7 @@ tags: 歌单标签
 7: 电台
 ```

-**可选参数 :**  
+**可选参数 :**
 `pageNo`:分页参数,第 N 页,默认为 1

 `pageSize`:分页参数,每页多少条数据,默认 20
@@ -2200,7 +2208,7 @@ privilege:权限相关信息

 说明 : 调用此接口 , 可获得已收藏专辑列表

-**可选参数 :**  
+**可选参数 :**
 `limit`: 取出数量 , 默认为 25

 `offset`: 偏移数量 , 用于分页 , 如 :( 页数 -1)\*25, 其中 25 为 limit 的值 , 默认
@@ -2492,6 +2500,30 @@ privilege:权限相关信息

 **调用例子 :** `/scrobble?id=518066366&sourceid=36780169&time=291`

+#### 听歌打卡 V2 (NCBL 加密版)
+
+说明 : 调用此接口，使用桌面客户端 NCBL 加密日志格式上报听歌记录
+
+**必选参数 :** `id`: 歌曲 id, `time`: 播放时长(秒)
+
+**可选参数 :** `sourceid`: 来源列表 id, `source`: 来源名称(默认 list), `name`: 歌曲名, `artist`: 艺术家, `bitrate`: 码率(默认 320), `level`: 音质等级(默认 exhigh), `total`: 歌曲总时长(秒)
+
+**接口地址 :** `/scrobble/v1`
+
+**调用例子 :** `/scrobble/v1?id=518066366&sourceid=36780169&time=291`
+
+### 提交歌曲播放状态
+
+说明 : 调用此接口可提交歌曲播放状态，支持会话追踪和播放模式记录，未传入 `sessionId` 时后端会自动生成
+
+**必选参数 :** `id`: 歌曲 id
+
+**可选参数 :** `sessionId`: 播放会话 ID（12 位大写字母和数字），不传则自动生成, `progress`: 播放进度（秒），默认 0, `playMode`: 播放模式，默认 `list_loop`, `type`: 资源类型，默认 `song`
+
+**接口地址 :** `/relay/play/state/submit`
+
+**调用例子 :** `/relay/play/state/submit?id=518066366&progress=30`
+
 ### 热门歌手

 说明 : 调用此接口 , 可获取热门歌手数据
@@ -2509,7 +2541,7 @@ privilege:权限相关信息

 说明 : 调用此接口 , 可获取全部 mv

-**可选参数 :**  
+**可选参数 :**
 `area`: 地区,可选值为全部,内地,港台,欧美,日本,韩国,不填则为全部
 `type`: 类型,可选值为全部,官方版,原生,现场版,网易出品,不填则为全部

@@ -2591,7 +2623,7 @@ privilege:权限相关信息

 **接口地址 :** `/program/recommend`

-**可选参数 :**  
+**可选参数 :**
 `limit`: 取出数量 , 默认为 10

 `offset`: 偏移数量 , 用于分页 , 如 :( 页数 -1)\*10, 其中 10 为 limit 的值 , 默认
@@ -2873,6 +2905,7 @@ type : 地区
 - 适合 Vercel、Netlify 等有请求体限制的平台
 - 需要前端配合实现

+
 #### 客户端直传相关接口

 **获取上传凭证**
@@ -2919,6 +2952,7 @@ type : 地区
 - `artist`: 艺术家
 - `album`: 专辑名

+
 #### 客户端直传流程

 1. 客户端计算文件 MD5
@@ -2926,11 +2960,12 @@ type : 地区
 3. 如果 `needUpload` 为 true,直接 PUT 文件到 `uploadUrl`
 4. 调用 `/cloud/upload/complete` 完成导入

+
 ### 云盘歌曲信息匹配纠正

 说明 : 登录后调用此接口,可对云盘歌曲信息匹配纠正,如需取消匹配,asid 需要传 0

-**必选参数 :**  
+**必选参数 :**
 `uid`: 用户 id

 `sid`: 云盘的歌曲 id
@@ -3401,7 +3436,7 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`

 `limit` : 返回数量 , 默认为 30

-`offset` : 偏移数量，用于分页 , 如 :( 页数 -1)\*30, 其中 30 为 limit 的值 , 默认为 0  
+`offset` : 偏移数量，用于分页 , 如 :( 页数 -1)\*30, 其中 30 为 limit 的值 , 默认为 0
 **接口地址 :** `/album/list`

 **调用例子 :** `/album/list?limit=10`
@@ -3560,7 +3595,7 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`

 **可选参数 :** `limit`: 取出评论数量 , 默认为 10

-`offset`: 偏移数量 , 用于分页 , 如 :( 评论页数 -1)\*10, 其中 10 为 limit 的值  
+`offset`: 偏移数量 , 用于分页 , 如 :( 评论页数 -1)\*10, 其中 10 为 limit 的值
 **接口地址 :** `/yunbei/tasks/expense`

 **调用例子 :** `/yunbei/tasks/expense?limit=1`
@@ -3577,6 +3612,32 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`

 **调用例子 :** `/artist/new/song?limit=1` `/artist/new/song?limit=1&before=1602777625000`

+### 关注歌手最近新歌 - 播放全部
+
+说明 : 登录后调用此接口可获取所有关注歌手最近的 50 首新歌
+
+**接口地址 :** `/artist/new/song/playall`
+
+**调用例子 :** `/artist/new/song/playall`
+
+### 关注歌手新作品（歌曲/MV）
+
+说明 : 登录后调用此接口可分页获取关注歌手的新歌曲和 MV
+
+**可选参数 :** `limit`: 返回数量，默认为 10
+
+`startTimestamp`: 时间游标，首次请求默认为当前时间，后续请求传入上一页返回的时间游标
+
+`before`: `startTimestamp` 的别名
+
+`sourceType`: 作品来源类型，已确认 `1` 表示新歌，其他取值待确认，默认为 `1`
+
+`firstRequest`: 是否首次请求，默认为 `true`，翻页时传 `false`
+
+**接口地址 :** `/artist/new/song/mv/list/v2`
+
+**调用例子 :** `/artist/new/song/mv/list/v2` `/artist/new/song/mv/list/v2?startTimestamp=1783680576099&sourceType=1&limit=10&firstRequest=false`
+
 ### 关注歌手新 MV

 说明 :登录后调用此接口可获取关注歌手新 MV
@@ -3707,6 +3768,14 @@ type='1009' 获取其 id, 如`/search?keywords= 代码时间 &type=1009`

 **调用例子 :** `/vip/growthpoint/get?ids=7043206830_7` `/vip/growthpoint/get?ids=8613118351_1,8607552957_1`

+### 一键领取所有 vip 成长值
+
+说明 : 登录后调用此接口 , 一键领取所有已完成的会员任务成长值奖励
+
+**接口地址 :** `/vip/growthpoint/getall`
+
+**调用例子 :** `/vip/growthpoint/getall`
+
 ### 歌手粉丝

 说明 : 调用此接口 , 传入歌手 id, 可获取歌手粉丝
@@ -4198,6 +4267,7 @@ ONLINE 已发布
  - `voiceFeeType: 0`：返回免费的声音
  - `voiceFeeType: 1`：返回收费的声音

+
 ### 播客声音详情

 说明: 获取播客里的声音详情
@@ -4774,6 +4844,23 @@ bitrate = Math.floor(br / 1000)

 **接口地址 :** `/listen/data/today/song`

+### 听歌足迹 - 歌曲播放排行
+
+说明 : 登录后调用此接口, 获取歌曲播放排行, 返回每首歌的播放次数 (playCount); 默认返回前 20 名 (Top20), 不足则返回全部
+
+**必选参数 :**
+
+`type`: 维度类型 周 week 月 month
+
+**可选参数 :**
+
+`endTime` : 周: 每周周六 0 点的时间戳 月: 每月最后一天 0 点的时间戳
+不填就是本周/月的
+
+**接口地址 :** `/listen/data/song/play/rank`
+
+**调用例子 :** `/listen/data/song/play/rank?type=month`
+
 ### 听歌足迹 - 总收听时长

 说明 : 登录后调用此接口, 获取总收听时长; 相关接口可能需要 vip 权限
@@ -5119,7 +5206,7 @@ let data = encodeURIComponent(

 说明 : 登录后调用此接口, 获取我创建的博客声音

-**可选参数 :** 
+**可选参数 :**

 `limit` : 返回数量 , 默认为 20

@@ -5132,7 +5219,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 获取DIFM电台分类

-**必选参数 :**  
+**必选参数 :**

 `sources`: 来源列表, 0: 最嗨电音 1: 古典电台 2: 爵士电台

@@ -5144,7 +5231,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 获取DIFM电台收藏列表

-**必选参数 :**  
+**必选参数 :**

 `sources`: 来源列表, 0: 最嗨电音 1: 古典电台 2: 爵士电台

@@ -5180,7 +5267,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 获取DIFM播放列表

-**必选参数 :**  
+**必选参数 :**

 `source`: 来源, 0: 最嗨电音 1: 古典电台 2: 爵士电台

@@ -5214,7 +5301,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 获取标签下资源列表; 接口返回的`trackId`可以用于请求`/song/url/v1`接口，用于获取声音的下载地址

-**必选参数 :**  
+**必选参数 :**

 `tag`: 标签, 由标签列表接口得到

@@ -5226,7 +5313,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 查看同类推荐

-**必选参数 :**  
+**必选参数 :**

 `id`: id, `/sati/tag/list`接口返回的`trackId`

@@ -5246,7 +5333,7 @@ let data = encodeURIComponent(

 说明: 调用此接口, 收藏声音

-**必选参数 :**  
+**必选参数 :**

 `id`: id, `/sati/tag/list`接口返回的`trackId`

@@ -5262,7 +5349,7 @@ let data = encodeURIComponent(

 说明: 调用此接口，获取跑步漫游的歌曲信息

-**必选参数：**     
+**必选参数：**

 `bpm`: 步频

@@ -5378,6 +5465,16 @@ let data = encodeURIComponent(

 **调用例子 :** `/vip/sign/history`

+### 直接获取云盘歌曲下载链接
+
+说明 : 调用此接口, 传入云盘歌曲 id, 可直接获取云盘歌曲下载链接
+
+**必选参数 :** `id`: 云盘歌曲 id
+
+**接口地址 :** `/song/cloud/download`
+
+**调用例子 :** `/song/cloud/download?id=123456789`
+
 ## 离线访问此文档

 此文档同时也是 Progressive Web Apps(PWA), 加入了 serviceWorker, 可离线访问
@@ -0,0 +1,312 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="X-UA-Compatible" content="IE=edge">
+  <title>免费听 — 网易云音乐 API Enhanced</title>
+  <style>
+    :root {
+      --fg: #333;
+      --muted: #666;
+      --border: #ddd;
+      --bg: #f5f5f5;
+      --panel: #ffffff;
+      --accent: #333;
+    }
+    * { box-sizing: border-box; }
+    html, body { height: 100%; }
+    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; color: var(--fg); background: var(--bg); line-height: 1.6; }
+    .container { max-width: 800px; margin: 40px auto; padding: 0 20px; }
+    @media (max-width: 480px) {
+      .container { margin: 20px auto; padding: 0 16px; }
+      header.site-header h1 { font-size: 22px; }
+      .block { padding: 16px; }
+    }
+    header.site-header { margin-bottom: 24px; }
+    header.site-header h1 { font-size: 24px; font-weight: 600; margin: 0; }
+    .sub { margin-top: 4px; color: var(--muted); font-size: 14px; }
+    .block { background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 20px; margin-bottom: 16px; box-shadow: 0 2px 8px rgba(0, 0, 0, 0.05); }
+    .block h3 { margin: 0 0 4px; font-size: 15px; font-weight: 600; }
+    .block .desc { margin: 0 0 12px; color: var(--muted); font-size: 13px; }
+    pre { margin: 0; background: #f9f9f9; border: 1px solid var(--border); border-radius: 6px; padding: 12px; overflow-x: auto; white-space: pre-wrap; word-break: break-all; font-family: 'Courier New', monospace; font-size: 13px; max-height: 200px; overflow: auto; }
+    pre.data { max-height: 360px; }
+    .row { display: flex; gap: 8px; margin-top: 12px; flex-wrap: wrap; }
+    button { padding: 8px 18px; border-radius: 8px; border: 1px solid var(--border); font-size: 14px; font-weight: 500; cursor: pointer; background: var(--panel); color: var(--fg); transition: all .15s; }
+    button:hover { background: #eee; }
+    button.primary { background: var(--fg); color: var(--panel); border-color: var(--fg); }
+    button.primary:hover { opacity: .85; }
+    button:disabled { opacity: .4; cursor: not-allowed; }
+    button.danger { background: #a11; color: #fff; border-color: #a11; }
+    button.danger:hover { opacity: .85; }
+    .tag { display: inline-block; padding: 2px 10px; border-radius: 20px; font-size: 12px; font-weight: 500; border: 1px solid var(--border); }
+    .tag.ok { background: #e6f7e6; color: #1a7a1a; border-color: #b7e6b7; }
+    .tag.no { background: #ffe6e6; color: #a11; border-color: #f5c6c6; }
+    .tag.busy { background: #fff3cd; color: #856404; border-color: #ffeeba; }
+    .flex { display: flex; align-items: center; gap: 10px; }
+    .flex.sb { justify-content: space-between; }
+    .step { display: flex; gap: 12px; align-items: flex-start; }
+    .step .num { width: 26px; height: 26px; border-radius: 50%; background: var(--fg); color: var(--panel); display: flex; align-items: center; justify-content: center; font-size: 13px; font-weight: 600; flex-shrink: 0; margin-top: 1px; }
+    .step .num.done { background: #1a7a1a; }
+    .step .body { flex: 1; min-width: 0; }
+    input[type=text] { width: 100%; padding: 8px 12px; border-radius: 6px; border: 1px solid var(--border); font-size: 14px; font-family: inherit; margin-top: 6px; }
+    input[type=text]:focus { outline: 2px solid var(--fg); outline-offset: -1px; border-color: transparent; }
+    footer.site-footer { margin-top: 32px; padding-top: 12px; border-top: 1px solid var(--border); color: var(--muted); text-align: center; font-size: 13px; }
+    footer.site-footer a { color: var(--fg); text-decoration: none; }
+    footer.site-footer a:hover { border-bottom: 1px dotted var(--fg); }
+    .info-grid { display: grid; grid-template-columns: 80px 1fr; gap: 4px 12px; font-size: 13px; margin-top: 8px; }
+    .info-grid .lbl { color: var(--muted); }
+  </style>
+</head>
+<body>
+  <main class="container">
+    <header class="site-header">
+      <h1>🎧 免费听 · 看广告获取时长</h1>
+      <p class="sub">模拟 App 内看激励视频广告 → 领取免费听权益的完整流程</p>
+    </header>
+
+    <!-- 步骤 1: 注册 Token -->
+    <div class="block">
+      <div class="step">
+        <div class="num" id="s1num">1</div>
+        <div class="body">
+          <div class="flex sb">
+            <h3>注册反作弊 Token</h3>
+            <span id="s1tag" class="tag no">未开始</span>
+          </div>
+          <p class="desc">调用易盾接口获取实时 token，广告接口需要此 token 才能正常响应</p>
+          <pre id="s1pre">（尚未执行）</pre>
+          <div class="row">
+            <button id="step1" class="primary">① 注册 Token</button>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- 步骤 2: 获取广告 -->
+    <div class="block">
+      <div class="step">
+        <div class="num" id="s2num">2</div>
+        <div class="body">
+          <div class="flex sb">
+            <h3>获取广告 &amp; 提取 reqId</h3>
+            <span id="s2tag" class="tag no">未开始</span>
+          </div>
+          <p class="desc">请求广告位，从返回的 extJson.contextInfo.req_id 提取用于领取权益的标识</p>
+          <pre id="s2pre" class="data">（尚未执行）</pre>
+          <div class="row">
+            <button id="step2" class="primary" disabled>② 获取广告</button>
+            <button id="step2b" disabled>换一个广告位</button>
+          </div>
+          <div class="info-grid" id="s2info" style="display:none">
+            <div class="lbl">广告 ID</div><div id="s2adId">-</div>
+            <div class="lbl">reqId</div><div id="s2reqId">-</div>
+            <div class="lbl">文案</div><div id="s2text">-</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- 步骤 3: 领取权益 -->
+    <div class="block">
+      <div class="step">
+        <div class="num" id="s3num">3</div>
+        <div class="body">
+          <div class="flex sb">
+            <h3>领取免费听权益</h3>
+            <span id="s3tag" class="tag no">未开始</span>
+          </div>
+          <p class="desc">传入 reqId 及相关参数，领取免费听权益（模拟点击广告后的领取请求）</p>
+          <pre id="s3pre" class="data">（尚未执行）</pre>
+          <div class="row">
+            <button id="step3" class="primary" disabled>③ 领取权益</button>
+          </div>
+          <div class="info-grid" id="s3info" style="display:none">
+            <div class="lbl">结果</div><div id="s3result">-</div>
+          </div>
+        </div>
+      </div>
+    </div>
+
+    <!-- 一键全流程 -->
+    <div class="block">
+      <div class="flex sb">
+        <h3>一键运行</h3>
+        <span id="allTag" class="tag no">就绪</span>
+      </div>
+      <p class="desc" style="margin-top:4px">按顺序自动执行以上三个步骤</p>
+      <div class="row">
+        <button id="runAll" class="primary">▶ 一键获取免费听时长</button>
+        <button id="clearAll" class="danger">✕ 清空</button>
+      </div>
+    </div>
+
+    <footer class="site-footer">
+      <a href="/">← 返回首页</a>
+    </footer>
+  </main>
+
+  <script>
+    const $ = (id) => document.getElementById(id)
+    const base = location.origin
+
+    function setTag(id, type, text) {
+      const el = $(id)
+      el.className = 'tag ' + type
+      el.textContent = text
+    }
+
+    function setNum(id, done) {
+      $(id).className = 'num' + (done ? ' done' : '')
+    }
+
+    function nocache(url) {
+      const sep = url.indexOf('?') > -1 ? '&' : '?'
+      return url + sep + '_t=' + Date.now()
+    }
+
+    // ===== 步骤 1: 注册 Token =====
+    async function step1() {
+      const btn = $('step1')
+      btn.disabled = true
+      setTag('s1tag', 'busy', '注册中…')
+      setNum('s1num', false)
+      try {
+        const res = await fetch(nocache(base + '/register/checktoken?refresh=1'))
+        const data = await res.json()
+        $('s1pre').textContent = JSON.stringify(data, null, 2)
+        if (data.token) {
+          setTag('s1tag', 'ok', '已注册')
+          setNum('s1num', true)
+          $('step2').disabled = false
+          $('step2b').disabled = false
+          return data.token
+        }
+        setTag('s1tag', 'no', '失败')
+        return null
+      } catch (e) {
+        $('s1pre').textContent = JSON.stringify({ error: e.message }, null, 2)
+        setTag('s1tag', 'no', e.message)
+        return null
+      } finally {
+        btn.disabled = false
+      }
+    }
+
+    // ===== 步骤 2: 获取广告 =====
+    async function step2(typeId) {
+      const btn = $('step2')
+      const btnB = $('step2b')
+      btn.disabled = btnB.disabled = true
+      setTag('s2tag', 'busy', '获取中…')
+      setNum('s2num', false)
+      $('s2info').style.display = 'none'
+      try {
+        let url = base + '/ad/get' + (typeId ? '?type_ids=' + encodeURIComponent(typeId) : '')
+        const res = await fetch(nocache(url))
+        const data = await res.json()
+        $('s2pre').textContent = JSON.stringify(data, null, 2)
+
+        if (data.code === 200 && data.extra && data.extra.reqId) {
+          setTag('s2tag', 'ok', '已获取')
+          setNum('s2num', true)
+          $('s2info').style.display = 'grid'
+
+          const adKeys = data.ads ? Object.keys(data.ads) : []
+          let adId = '-', text = '-'
+          if (adKeys.length > 0) {
+            const ad = data.ads[adKeys[0]]
+            adId = ad.ad_id || '-'
+            text = ad.text || '-'
+          }
+
+          $('s2adId').textContent = adId
+          $('s2reqId').textContent = data.extra.reqId
+          $('s2text').textContent = text
+
+          $('step3').disabled = false
+          return data.extra.reqId
+        }
+        setTag('s2tag', 'no', '未获取到 reqId')
+        return null
+      } catch (e) {
+        $('s2pre').textContent = JSON.stringify({ error: e.message }, null, 2)
+        setTag('s2tag', 'no', e.message)
+        return null
+      } finally {
+        btn.disabled = false
+        btnB.disabled = false
+      }
+    }
+
+    $('step2').onclick = () => step2()
+    $('step2b').onclick = () => step2('["400002_0"]')
+
+    // ===== 步骤 3: 领取权益 =====
+    async function step3() {
+      const btn = $('step3')
+      btn.disabled = true
+      setTag('s3tag', 'busy', '领取中…')
+      setNum('s3num', false)
+      $('s3info').style.display = 'none'
+      try {
+        const res = await fetch(nocache(base + '/ad/listening/rights/gain'))
+        const data = await res.json()
+        $('s3pre').textContent = JSON.stringify(data, null, 2)
+
+        if (data.code === 200) {
+          setTag('s3tag', 'ok', '已领取')
+          setNum('s3num', true)
+          $('s3info').style.display = 'grid'
+          const body = data.data || {}
+          $('s3result').textContent = JSON.stringify(body).substring(0, 200)
+          return true
+        }
+        setTag('s3tag', 'no', '领取失败')
+        return false
+      } catch (e) {
+        $('s3pre').textContent = JSON.stringify({ error: e.message }, null, 2)
+        setTag('s3tag', 'no', e.message)
+        return false
+      } finally {
+        btn.disabled = false
+      }
+    }
+
+    $('step3').onclick = step3
+
+    // ===== 一键运行 =====
+    $('runAll').onclick = async function () {
+      const btn = this
+      btn.disabled = true
+      setTag('allTag', 'busy', '运行中…')
+
+      await step1()
+      await step2()
+      await step3()
+
+      setTag('allTag', 'ok', '完成')
+      btn.disabled = false
+    }
+
+    // ===== 清空 =====
+    $('clearAll').onclick = function () {
+      const steps = ['s1', 's2', 's3']
+      const tags = { s1: '未开始', s2: '未开始', s3: '未开始' }
+      steps.forEach(s => {
+        setTag(s + 'tag', 'no', tags[s])
+        setNum(s + 'num', false)
+        $(s + 'pre').textContent = '（尚未执行）'
+        const info = $(s + 'info')
+        if (info) info.style.display = 'none'
+      })
+      $('step1').disabled = false
+      $('step2').disabled = true
+      $('step2b').disabled = true
+      $('step3').disabled = true
+      setTag('allTag', 'no', '就绪')
+      $('runAll').disabled = false
+    }
+  </script>
+</body>
+</html>
@@ -95,7 +95,10 @@ curl -s {origin}/search?keywords=网易云</code></pre>
        <a href="/api_decrypt.html">API 解密</a> ·
        <a href="/listen_together_host.html">一起听示例</a> ·
        <a href="/playlist_cover_update.html">更新歌单封面示例</a> ·
-        <a href="/avatar_update.html">头像更新示例</a>
+        <a href="/avatar_update.html">头像更新示例</a> ·
+        <a href="/scrobble.html">听歌打卡示例</a> ·
+        <a href="/yidun.html">获取 CheckToken</a> ·
+        <a href="/free_listen.html">免费听权益</a>
      </div>
    </section>

@@ -148,12 +148,12 @@
            updateStatus('二维码已过期，请刷新页面', 'error')
            clearInterval(timer)
          } else if (statusRes.code === 801) {
-            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
+            updateStatus('等待手机扫码...', 'waiting')
          } else if (statusRes.code === 802) {
-            updateStatus('登录成功，正在保存信息...', 'waiting')
+            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
          } else if (statusRes.code === 803) {
            clearInterval(timer)
-            updateStatus('授权登录成功！', 'success')
+            updateStatus('授权登录成功，正在保存信息...', 'success')
            await getLoginStatus(statusRes.cookie)
            localStorage.setItem('cookie', statusRes.cookie)
          }
@@ -148,12 +148,12 @@
            updateStatus('二维码已过期，请刷新页面', 'error')
            clearInterval(timer)
          } else if (statusRes.code === 801) {
-            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
+            updateStatus('等待手机扫码...', 'waiting')
          } else if (statusRes.code === 802) {
-            updateStatus('登录成功，正在保存信息...', 'waiting')
+            updateStatus('二维码已扫描，请在手机上确认', 'waiting')
          } else if (statusRes.code === 803) {
            clearInterval(timer)
-            updateStatus('授权登录成功！', 'success')
+            updateStatus('授权登录成功，正在保存信息...', 'success')
            await getLoginStatus(statusRes.cookie)
            localStorage.setItem('cookie', statusRes.cookie)
          }
@@ -0,0 +1,480 @@
+<!DOCTYPE html>
+<html lang="zh">
+
+<head>
+  <meta charset="UTF-8" />
+  <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+  <title>听歌打卡 - 网易云音乐 API Enhanced</title>
+  <style>
+    * {
+      margin: 0;
+      padding: 0;
+      box-sizing: border-box;
+    }
+
+    body {
+      font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif;
+      min-height: 100vh;
+      background: #f5f5f5;
+      padding: 20px;
+    }
+
+    .container {
+      max-width: 520px;
+      margin: 40px auto;
+      background: white;
+      border-radius: 12px;
+      padding: 32px;
+      box-shadow: 0 2px 8px rgba(0, 0, 0, 0.1);
+    }
+
+    h1 {
+      font-size: 24px;
+      font-weight: 600;
+      color: #333;
+      margin-bottom: 8px;
+      text-align: center;
+    }
+
+    .subtitle {
+      font-size: 14px;
+      color: #666;
+      margin-bottom: 24px;
+      text-align: center;
+    }
+
+    .login-link {
+      display: block;
+      margin-bottom: 20px;
+      color: #666;
+      font-size: 14px;
+      text-decoration: none;
+      text-align: center;
+    }
+
+    .login-link:hover {
+      color: #333;
+      text-decoration: underline;
+    }
+
+    /* ---- Tabs ---- */
+    .tabs {
+      display: flex;
+      gap: 0;
+      margin-bottom: 24px;
+      border-bottom: 2px solid #eee;
+    }
+
+    .tab-btn {
+      flex: 1;
+      padding: 10px 0;
+      background: none;
+      border: none;
+      border-bottom: 2px solid transparent;
+      margin-bottom: -2px;
+      font-size: 14px;
+      font-weight: 500;
+      color: #999;
+      cursor: pointer;
+      transition: color 0.2s, border-color 0.2s;
+    }
+
+    .tab-btn:hover {
+      color: #555;
+    }
+
+    .tab-btn.active {
+      color: #333;
+      border-bottom-color: #333;
+    }
+
+    .tab-content {
+      display: none;
+    }
+
+    .tab-content.active {
+      display: block;
+    }
+
+    /* ---- Form ---- */
+    .form-group {
+      margin-bottom: 16px;
+      text-align: left;
+    }
+
+    label {
+      display: block;
+      font-size: 13px;
+      font-weight: 500;
+      color: #555;
+      margin-bottom: 6px;
+    }
+
+    label .tag {
+      display: inline-block;
+      font-size: 11px;
+      font-weight: 400;
+      padding: 1px 6px;
+      border-radius: 3px;
+      margin-left: 6px;
+    }
+
+    label .tag.r {
+      background: #fee2e2;
+      color: #991b1b;
+    }
+
+    label .tag.o {
+      background: #fef3c7;
+      color: #92400e;
+    }
+
+    input[type="text"],
+    input[type="number"],
+    textarea {
+      width: 100%;
+      padding: 10px 14px;
+      border: 1px solid #ddd;
+      border-radius: 6px;
+      font-size: 14px;
+      outline: none;
+      font-family: inherit;
+      transition: border-color 0.2s;
+    }
+
+    input[type="text"]:focus,
+    input[type="number"]:focus,
+    textarea:focus {
+      border-color: #333;
+    }
+
+    textarea {
+      resize: vertical;
+    }
+
+    .row {
+      display: flex;
+      gap: 12px;
+    }
+
+    .row .form-group {
+      flex: 1;
+    }
+
+    .quick-fill {
+      margin-top: 5px;
+      font-size: 12px;
+      color: #666;
+    }
+
+    .quick-fill span {
+      color: #0066cc;
+      cursor: pointer;
+      margin-right: 8px;
+    }
+
+    .quick-fill span:hover {
+      text-decoration: underline;
+    }
+
+    .btn {
+      display: block;
+      width: 100%;
+      padding: 12px;
+      background: #333;
+      color: white;
+      font-size: 15px;
+      font-weight: 500;
+      border-radius: 6px;
+      cursor: pointer;
+      transition: background 0.2s ease;
+      border: none;
+      text-align: center;
+      margin-top: 20px;
+    }
+
+    .btn:hover {
+      background: #555;
+    }
+
+    .btn:disabled {
+      background: #ccc;
+      cursor: not-allowed;
+    }
+
+    .result {
+      margin-top: 16px;
+      padding: 12px 16px;
+      border-radius: 6px;
+      font-size: 14px;
+      text-align: left;
+      white-space: pre-wrap;
+      word-break: break-all;
+      font-family: monospace;
+    }
+
+    .result.success {
+      background: #d1fae5;
+      color: #065f46;
+    }
+
+    .result.error {
+      background: #fee2e2;
+      color: #991b1b;
+    }
+
+    .result.info {
+      background: #e0f2fe;
+      color: #0369a1;
+    }
+
+    .footer-link {
+      text-align: center;
+      margin-top: 24px;
+      font-size: 13px;
+    }
+
+    .footer-link a {
+      color: #666;
+      text-decoration: none;
+    }
+
+    .footer-link a:hover {
+      text-decoration: underline;
+    }
+  </style>
+</head>
+
+<body>
+  <div class="container">
+    <h1>听歌打卡</h1>
+    <p class="subtitle">同步听歌记录至网易云音乐，增加听歌排行计数</p>
+
+    <a href="/qrlogin-nocookie.html" class="login-link">还没登录？点击登录</a>
+
+    <!-- Cookie (共享) -->
+    <div class="form-group">
+      <label for="cookie">Cookie <span class="tag o">可选</span></label>
+      <textarea id="cookie" placeholder="留空则默认读取本地存储的登录态" rows="2"></textarea>
+      <div class="quick-fill">
+        <span onclick="loadLocalCookie()">读取本地 Cookie</span>
+      </div>
+    </div>
+
+    <!-- Tabs -->
+    <div class="tabs">
+      <button class="tab-btn active" data-tab="v0" onclick="switchTab('v0')">原版</button>
+      <button class="tab-btn" data-tab="v1" onclick="switchTab('v1')">V2 (NCBL 加密版)</button>
+    </div>
+
+    <!-- ============ Tab: v0 (原版 /scrobble) ============ -->
+    <div class="tab-content active" id="tab-v0">
+      <div class="form-group">
+        <label>歌曲 ID <span class="tag r">必填</span></label>
+        <input type="text" id="v0-songId" placeholder="例如: 2756058128" value="2756058128" />
+        <div class="quick-fill">
+          示例:
+          <span onclick="fillV0('2756058128', '288651229')">妖精小姐的魔法邀约</span>
+          <span onclick="fillV0('2637402867', '251025018')">Echoes of Memoria</span>
+          <span onclick="fillV0('36307815', '3394198')">Lose Control</span>
+        </div>
+      </div>
+      <div class="form-group">
+        <label>来源 ID (歌单或专辑 ID) <span class="tag r">必填</span></label>
+        <input type="text" id="v0-sourceId" placeholder="例如: 2756058128" value="2756058128" />
+      </div>
+      <div class="form-group">
+        <label>播放时间 (秒) <span class="tag o">可选</span></label>
+        <input type="number" id="v0-time" placeholder="300" value="300" />
+      </div>
+      <button class="btn" onclick="submitV0()">立即打卡 (原版)</button>
+    </div>
+
+    <!-- ============ Tab: v1 (NCBL 加密版 /scrobble/v1) ============ -->
+    <div class="tab-content" id="tab-v1">
+      <div class="form-group">
+        <label>歌曲 ID <span class="tag r">必填</span></label>
+        <input type="text" id="v1-songId" placeholder="例如: 518066366" value="518066366" />
+        <div class="quick-fill">
+          示例:
+          <span onclick="fillV1('518066366', '36780169', '291')">默认示例</span>
+          <span onclick="fillV1('2756058128', '288651229', '300')">妖精小姐的魔法邀约</span>
+          <span onclick="fillV1('2637402867', '251025018', '300')">Echoes of Memoria</span>
+        </div>
+      </div>
+      <div class="form-group">
+        <label>播放时间 (秒) <span class="tag r">必填</span></label>
+        <input type="number" id="v1-time" placeholder="例如: 291" value="291" />
+      </div>
+      <div class="form-group">
+        <label>来源 ID <span class="tag o">可选</span></label>
+        <input type="text" id="v1-sourceId" placeholder="歌单或专辑 ID" value="36780169" />
+      </div>
+      <div class="row">
+        <div class="form-group">
+          <label>歌曲名 <span class="tag o">可选</span></label>
+          <input type="text" id="v1-name" placeholder="歌曲名称" />
+        </div>
+        <div class="form-group">
+          <label>艺术家 <span class="tag o">可选</span></label>
+          <input type="text" id="v1-artist" placeholder="歌手名" />
+        </div>
+      </div>
+      <div class="row">
+        <div class="form-group">
+          <label>码率 <span class="tag o">可选</span></label>
+          <input type="number" id="v1-bitrate" placeholder="默认 320" value="320" />
+        </div>
+        <div class="form-group">
+          <label>音质等级 <span class="tag o">可选</span></label>
+          <input type="text" id="v1-level" placeholder="默认 exhigh" value="exhigh" />
+        </div>
+      </div>
+      <div class="form-group">
+        <label>歌曲总时长 (秒) <span class="tag o">可选</span></label>
+        <input type="number" id="v1-total" placeholder="留空则与播放时间相同" />
+      </div>
+      <button class="btn" onclick="submitV1()">立即打卡 (NCBL 加密版)</button>
+    </div>
+
+    <!-- Result -->
+    <div id="result" class="result" style="display: none;"></div>
+
+    <div class="footer-link">
+      <a href="/">返回首页</a>
+    </div>
+  </div>
+
+  <script src="https://fastly.jsdelivr.net/npm/axios@0.26.1/dist/axios.min.js"></script>
+  <script>
+    /* ---- DOM refs ---- */
+    const cookieInput = document.getElementById('cookie')
+    const resultDiv = document.getElementById('result')
+
+    /* ---- init ---- */
+    if (localStorage.getItem('cookie')) {
+      cookieInput.value = localStorage.getItem('cookie')
+    }
+
+    /* ---- Tab switching ---- */
+    function switchTab(name) {
+      document.querySelectorAll('.tab-btn').forEach(b => b.classList.toggle('active', b.dataset.tab === name))
+      document.querySelectorAll('.tab-content').forEach(c => c.classList.toggle('active', c.id === 'tab-' + name))
+      hideResult()
+    }
+
+    /* ---- Cookie ---- */
+    function loadLocalCookie() {
+      const local = localStorage.getItem('cookie')
+      if (local) {
+        cookieInput.value = local
+        showResult('已成功读取本地 Cookie', 'success')
+      } else {
+        showResult('未在本地发现登录 Cookie，请先登录或手动粘贴', 'error')
+      }
+    }
+
+    /* ---- Quick fill ---- */
+    function fillV0(id, sourceId) {
+      document.getElementById('v0-songId').value = id
+      document.getElementById('v0-sourceId').value = sourceId
+    }
+
+    function fillV1(id, sourceId, time) {
+      document.getElementById('v1-songId').value = id
+      document.getElementById('v1-sourceId').value = sourceId
+      document.getElementById('v1-time').value = time
+    }
+
+    /* ---- Result ---- */
+    function hideResult() {
+      resultDiv.style.display = 'none'
+    }
+
+    function showResult(message, type) {
+      resultDiv.textContent = message
+      resultDiv.className = 'result ' + type
+      resultDiv.style.display = 'block'
+    }
+
+    function disableAll(disabled) {
+      document.querySelectorAll('.btn').forEach(b => b.disabled = disabled)
+    }
+
+    /* ---- Submit: 原版 /scrobble ---- */
+    async function submitV0() {
+      const id = document.getElementById('v0-songId').value.trim()
+      const sourceid = document.getElementById('v0-sourceId').value.trim()
+      const time = document.getElementById('v0-time').value.trim() || '300'
+
+      if (!id) { showResult('请输入歌曲 ID ！', 'error'); return }
+      if (!sourceid) { showResult('请输入来源 ID ！', 'error'); return }
+
+      disableAll(true)
+      showResult('打卡中，请稍候...', 'info')
+
+      try {
+        const params = { id, sourceid: sourceid || id, time, timestamp: Date.now() }
+        const cookie = cookieInput.value.trim()
+        if (cookie) params.cookie = cookie
+
+        const res = await axios({ method: 'get', url: '/scrobble', params })
+        if (res.data.code === 200) {
+          showResult('✅ 打卡成功! \n\n' + JSON.stringify(res.data, null, 2), 'success')
+        } else {
+          showResult('请求已发送，返回：\n\n' + JSON.stringify(res.data, null, 2), 'info')
+        }
+      } catch (error) {
+        const errData = error.response ? error.response.data : { error: error.message }
+        showResult('❌ 打卡失败\n\n' + JSON.stringify(errData, null, 2), 'error')
+      } finally {
+        disableAll(false)
+      }
+    }
+
+    /* ---- Submit: NCBL 加密版 /scrobble/v1 ---- */
+    async function submitV1() {
+      const id = document.getElementById('v1-songId').value.trim()
+      const time = document.getElementById('v1-time').value.trim()
+
+      if (!id) { showResult('请输入歌曲 ID ！', 'error'); return }
+      if (!time || isNaN(+time) || +time <= 0) { showResult('请输入有效的播放时长（秒）！', 'error'); return }
+
+      disableAll(true)
+      showResult('打卡中（NCBL 加密），请稍候...', 'info')
+
+      try {
+        const params = {
+          id,
+          time,
+          sourceid: document.getElementById('v1-sourceId').value.trim() || undefined,
+          name: document.getElementById('v1-name').value.trim() || undefined,
+          artist: document.getElementById('v1-artist').value.trim() || undefined,
+          bitrate: document.getElementById('v1-bitrate').value.trim() || undefined,
+          level: document.getElementById('v1-level').value.trim() || undefined,
+          total: document.getElementById('v1-total').value.trim() || undefined,
+          timestamp: Date.now(),
+        }
+        const cookie = cookieInput.value.trim()
+        if (cookie) params.cookie = cookie
+
+        // 清理 undefined 参数
+        Object.keys(params).forEach(k => params[k] === undefined && delete params[k])
+
+        const res = await axios({ method: 'get', url: '/scrobble/v1', params })
+        if (res.data.code === 200) {
+          showResult('✅ NCBL 加密打卡成功! \n\n' + JSON.stringify(res.data, null, 2), 'success')
+        } else {
+          showResult('请求已发送，返回：\n\n' + JSON.stringify(res.data, null, 2), 'info')
+        }
+      } catch (error) {
+        const errData = error.response ? error.response.data : { error: error.message }
+        showResult('❌ 打卡失败\n\n' + JSON.stringify(errData, null, 2), 'error')
+      } finally {
+        disableAll(false)
+      }
+    }
+  </script>
+</body>
+
+</html>
@@ -0,0 +1,119 @@
+<!DOCTYPE html>
+<html lang="zh-CN">
+<head>
+  <meta charset="UTF-8">
+  <meta name="viewport" content="width=device-width, initial-scale=1.0">
+  <meta http-equiv="X-UA-Compatible" content="IE=edge">
+  <title>Token 注册器 — 网易云音乐 API Enhanced</title>
+  <style>
+    :root {
+      --fg: #333;
+      --muted: #666;
+      --border: #ddd;
+      --bg: #f5f5f5;
+      --panel: #ffffff;
+      --accent: #333;
+    }
+    * { box-sizing: border-box; }
+    html, body { height: 100%; }
+    body { margin: 0; font-family: -apple-system, BlinkMacSystemFont, 'Segoe UI', Roboto, sans-serif; color: var(--fg); background: var(--bg); line-height: 1.6; }
+    .container { max-width: 720px; margin: 40px auto; padding: 0 20px; }
+    @media (max-width: 480px) {
+      .container { margin: 20px auto; padding: 0 16px; }
+      header.site-header h1 { font-size: 22px; }
+      .block { padding: 16px; }
+    }
+    header.site-header { margin-bottom: 24px; }
+    header.site-header h1 { font-size: 24px; font-weight: 600; margin: 0; }
+    .sub { margin-top: 4px; color: var(--muted); font-size: 14px; }
+    .block { background: var(--panel); border: 1px solid var(--border); border-radius: 12px; padding: 20px; margin-bottom: 16px; box-shadow: 0 2px 8px rgba(0, 0, 0, 0.05); }
+    .block h3 { margin: 0 0 12px; font-size: 15px; font-weight: 600; }
+    pre { margin: 0; background: #f9f9f9; border: 1px solid var(--border); border-radius: 6px; padding: 12px; overflow-x: auto; white-space: pre-wrap; word-break: break-all; font-family: 'Courier New', monospace; font-size: 13px; max-height: 160px; overflow: auto; }
+    .row { display: flex; gap: 8px; margin-top: 14px; flex-wrap: wrap; }
+    button { padding: 8px 18px; border-radius: 8px; border: 1px solid var(--border); font-size: 14px; font-weight: 500; cursor: pointer; background: var(--panel); color: var(--fg); transition: all .15s; }
+    button:hover { background: #eee; }
+    button.primary { background: var(--fg); color: var(--panel); border-color: var(--fg); }
+    button.primary:hover { opacity: .85; }
+    button:disabled { opacity: .4; cursor: not-allowed; }
+    .tag { display: inline-block; padding: 2px 10px; border-radius: 20px; font-size: 12px; font-weight: 500; border: 1px solid var(--border); }
+    .tag.ok { background: #e6f7e6; color: #1a7a1a; border-color: #b7e6b7; }
+    .tag.no { background: #ffe6e6; color: #a11; border-color: #f5c6c6; }
+    .tag.busy { background: #fff3cd; color: #856404; border-color: #ffeeba; }
+    .flex { display: flex; align-items: center; gap: 10px; }
+    .flex.sb { justify-content: space-between; }
+    .mt-2 { margin-top: 14px; }
+    footer.site-footer { margin-top: 24px; padding-top: 12px; border-top: 1px solid var(--border); color: var(--muted); text-align: center; font-size: 13px; }
+  </style>
+</head>
+<body>
+  <main class="container">
+    <header class="site-header">
+      <h1>🔑 Token 注册器</h1>
+      <p class="sub">从易盾获取反作弊 token 并注册到服务器，供广告等需要 checkToken 的接口使用</p>
+    </header>
+
+    <div class="block">
+      <div class="flex sb">
+        <h3>当前 Token</h3>
+        <span id="statusTag" class="tag no">未注册</span>
+      </div>
+      <pre id="tokenDisplay">（空）</pre>
+      <div class="row">
+        <button id="btnGet" class="primary">获取 Token</button>
+        <button id="btnRefresh">强制刷新</button>
+      </div>
+    </div>
+
+    <div class="block">
+      <h3>服务器响应</h3>
+      <pre id="respDisplay">{}</pre>
+    </div>
+
+    <footer class="site-footer">
+      <a href="/">← 返回首页</a>
+    </footer>
+  </main>
+
+  <script>
+    const $ = (id) => document.getElementById(id)
+    const base = location.origin
+
+    async function call(refresh) {
+      const btn = $('btnGet')
+      const btnR = $('btnRefresh')
+      btn.disabled = btnR.disabled = true
+
+      const tag = $('statusTag')
+      tag.className = 'tag busy'
+      tag.textContent = '获取中…'
+
+      try {
+        const url = base + '/register/checktoken' + (refresh ? '?refresh=1' : '')
+        const res = await fetch(url)
+        const data = await res.json()
+        $('respDisplay').textContent = JSON.stringify(data, null, 2)
+
+        if (data.token) {
+          $('tokenDisplay').textContent = data.token
+          tag.className = 'tag ok'
+          tag.textContent = '已注册'
+        } else {
+          $('tokenDisplay').textContent = '（获取失败）'
+          tag.className = 'tag no'
+          tag.textContent = '失败'
+        }
+      } catch (e) {
+        $('respDisplay').textContent = JSON.stringify({ error: e.message }, null, 2)
+        tag.className = 'tag no'
+        tag.textContent = e.message
+      }
+
+      btn.disabled = btnR.disabled = false
+    }
+
+    $('btnGet').onclick = () => call(false)
+    $('btnRefresh').onclick = () => call(true)
+    call(false)
+  </script>
+</body>
+</html>
@@ -0,0 +1,577 @@
+#!/usr/bin/env node
+/**
+ * 📝 Markdown 文档格式化工具喵~
+ * 支持格式化标题、代码块、空行和缩进！
+ *
+ * 用法:
+ *   node scripts/format-docs.js                    # 格式化默认文档 (public/docs/home.md)
+ *   node scripts/format-docs.js <文件路径>         # 格式化指定文件
+ *   node scripts/format-docs.js --dir <目录>       # 格式化整个目录的 .md 文件
+ *   node scripts/format-docs.js --check            # 只检查不写入 (dry-run)
+ *
+ */
+
+const fs = require('fs')
+const path = require('path')
+
+// ======================== 配置 ========================
+const CONFIG = {
+  maxConsecutiveBlankLines: 2, // 最大连续空行数
+  codeBlockLang: true, // 代码块是否保留语言标记
+  headingSpaceBefore: true, // 标题前是否确保空行
+  headingSpaceAfter: true, // 标题后是否确保空行
+  listIndent: 2, // 列表缩进空格数
+  encodeSpecialChars: false, // 是否编码特殊字符
+  removeTrailingSpaces: true, // 是否删除行尾空格
+}
+
+const DEFAULT_FILE = path.resolve(__dirname, '..', 'public', 'docs', 'home.md')
+
+// ======================== 颜色工具 ========================
+const color = (code) => (s) => `\x1b[${code}m${s}\x1b[0m`
+const green = color('32')
+const cyan = color('36')
+const yellow = color('33')
+const red = color('31')
+const bold = color('1')
+const dim = color('2')
+
+// ======================== 核心格式化函数 ========================
+
+/**
+ * 解析 Markdown 的块结构，返回块数组
+ * 块类型: 'heading', 'code', 'list', 'paragraph', 'empty', 'hr', 'blockquote', 'table', 'html'
+ */
+function parseBlocks(lines) {
+  const blocks = []
+  let i = 0
+
+  while (i < lines.length) {
+    const line = lines[i]
+    const trimmed = line.trim()
+
+    // 空行
+    if (trimmed === '') {
+      blocks.push({ type: 'empty', lines: [line], raw: line })
+      i++
+      continue
+    }
+
+    // 代码块 (``` 或 ~~~)
+    if (/^```/.test(trimmed) || /^~~~/.test(trimmed)) {
+      const marker = trimmed.match(/^(```|~~~)/)[1]
+      const lang = trimmed.slice(marker.length).trim()
+      const start = i
+      i++
+      while (i < lines.length && !lines[i].trim().startsWith(marker)) {
+        i++
+      }
+      if (i < lines.length) i++ // 跳过结束标记
+      const codeLines = lines.slice(start, i)
+      blocks.push({
+        type: 'code',
+        lines: codeLines,
+        lang,
+        marker,
+        raw: codeLines.join('\n'),
+      })
+      continue
+    }
+
+    // 标题
+    const headingMatch = trimmed.match(/^(#{1,6})\s+(.+)$/)
+    if (headingMatch) {
+      const level = headingMatch[1].length
+      blocks.push({
+        type: 'heading',
+        lines: [line],
+        level,
+        text: headingMatch[2],
+        raw: line,
+      })
+      i++
+      continue
+    }
+
+    // 分割线
+    if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(trimmed)) {
+      blocks.push({ type: 'hr', lines: [line], raw: line })
+      i++
+      continue
+    }
+
+    // HTML 注释或标签
+    if (/^<!--/.test(trimmed) || /^<\w+/.test(trimmed)) {
+      const start = i
+      i++
+      while (i < lines.length) {
+        const t = lines[i].trim()
+        if (/-->/.test(t) || /<\/\w+>/.test(t)) {
+          i++
+          break
+        }
+        i++
+      }
+      const htmlLines = lines.slice(start, i)
+      blocks.push({ type: 'html', lines: htmlLines, raw: htmlLines.join('\n') })
+      continue
+    }
+
+    // 引用块 (注: 空行不吞噬,留给后续解析,避免干扰上下文的空行判断)
+    if (/^>/.test(trimmed)) {
+      const start = i
+      i++
+      while (i < lines.length && lines[i].trimStart().startsWith('>')) {
+        i++
+      }
+      const quoteLines = lines.slice(start, i)
+      blocks.push({
+        type: 'blockquote',
+        lines: quoteLines,
+        raw: quoteLines.join('\n'),
+      })
+      continue
+    }
+
+    // 表格
+    if (
+      /\|/.test(trimmed) &&
+      lines[i + 1] &&
+      /^\|[\s\-:]+\|/.test(lines[i + 1].trim())
+    ) {
+      const start = i
+      i += 2
+      while (i < lines.length && /\|/.test(lines[i].trim())) {
+        i++
+      }
+      const tableLines = lines.slice(start, i)
+      blocks.push({
+        type: 'table',
+        lines: tableLines,
+        raw: tableLines.join('\n'),
+      })
+      continue
+    }
+
+    // 列表项（有序或无序）
+    if (/^(\s*[-*+]\s|\s*\d+\.\s)/.test(line)) {
+      const start = i
+      i++
+      while (i < lines.length) {
+        const t = lines[i].trim()
+        if (t === '') {
+          i++
+          break
+        }
+        if (/^(\s*[-*+]\s|\s*\d+\.\s)/.test(lines[i])) {
+          i++
+          continue
+        }
+        // 缩进 continuation
+        if (/^\s{2,}/.test(lines[i])) {
+          i++
+          continue
+        }
+        break
+      }
+      const listLines = lines.slice(start, i)
+      blocks.push({ type: 'list', lines: listLines, raw: listLines.join('\n') })
+      continue
+    }
+
+    // 普通段落
+    const start = i
+    i++
+    while (i < lines.length && lines[i].trim() !== '') {
+      // 如果遇到新的块元素则停止
+      const t = lines[i].trim()
+      if (
+        /^#{1,6}\s/.test(t) ||
+        /^```/.test(t) ||
+        /^~~~/.test(t) ||
+        /^(\s*[-*+]\s|\s*\d+\.\s)/.test(lines[i])
+      )
+        break
+      // 分割线
+      if (/^(-{3,}|\*{3,}|_{3,})\s*$/.test(t)) break
+      i++
+    }
+    const paraLines = lines.slice(start, i)
+    blocks.push({
+      type: 'paragraph',
+      lines: paraLines,
+      raw: paraLines.join('\n'),
+    })
+  }
+
+  return blocks
+}
+
+/**
+ * 格式化文档
+ */
+function formatMarkdown(input, options = {}) {
+  const cfg = { ...CONFIG, ...options }
+  const lines = input.split('\n')
+  let blocks = parseBlocks(lines)
+
+  // ---------- 格式化步骤 ----------
+
+  // 1. 确保标题前后有空行
+  if (cfg.headingSpaceBefore || cfg.headingSpaceAfter) {
+    blocks = blocks.map((block, idx) => {
+      if (block.type !== 'heading') return block
+
+      const newLines = [...block.lines]
+
+      // 标题前加空行（如果不是第一个块且前一个不是空行）
+      if (
+        cfg.headingSpaceBefore &&
+        idx > 0 &&
+        blocks[idx - 1].type !== 'empty'
+      ) {
+        newLines.unshift('')
+      }
+
+      // 标题后加空行（如果不是最后一个块且后一个不是空行）
+      if (
+        cfg.headingSpaceAfter &&
+        idx < blocks.length - 1 &&
+        blocks[idx + 1].type !== 'empty'
+      ) {
+        newLines.push('')
+      }
+
+      return { ...block, lines: newLines }
+    })
+  }
+
+  // 2. 格式化代码块
+  blocks = blocks.map((block, idx) => {
+    if (block.type !== 'code') return block
+
+    const newLines = [...block.lines]
+
+    // 先提取代码块标记信息 (第一行是 ``` 或 ~~~)
+    const markerMatch = newLines[0].trim().match(/^(```|~~~)/)
+    if (!markerMatch) return block // 安全兜底
+    const marker = markerMatch[1]
+    const lang = newLines[0].trim().slice(marker.length).trim().toLowerCase()
+
+    // 标准化语言标记
+    const indent = newLines[0].match(/^\s*/)[0]
+    newLines[0] = lang ? `${indent}${marker}${lang}` : `${indent}${marker}`
+
+    // 确保代码块前后有空行（插在标准化之后，因为只动第一行）
+    if (
+      idx > 0 &&
+      blocks[idx - 1].type !== 'empty' &&
+      blocks[idx - 1].type !== 'code'
+    ) {
+      newLines.unshift('')
+    }
+    if (
+      idx < blocks.length - 1 &&
+      blocks[idx + 1].type !== 'empty' &&
+      blocks[idx + 1].type !== 'code'
+    ) {
+      newLines.push('')
+    }
+
+    return { ...block, lines: newLines }
+  })
+
+  // 3. 压缩多余空行
+  blocks = compressEmptyLines(blocks, cfg.maxConsecutiveBlankLines)
+
+  // 4. 删除行尾空格
+  if (cfg.removeTrailingSpaces) {
+    blocks = blocks.map((block) => ({
+      ...block,
+      lines: block.lines.map((l) => l.replace(/[ \t]+$/, '')),
+    }))
+  }
+
+  // 5. 修复列表缩进
+  blocks = blocks.map((block) => {
+    if (block.type !== 'list') return block
+    return {
+      ...block,
+      lines: block.lines.map((line) => {
+        const trimmed = line.trimStart()
+        // 检测列表标记
+        if (/^[-*+]\s/.test(trimmed) || /^\d+\.\s/.test(trimmed)) {
+          const indent = line.length - line.trimStart().length
+          // 如果是顶层列表项，确保缩进为0
+          if (indent % cfg.listIndent !== 0) {
+            const normalizedIndent =
+              Math.round(indent / cfg.listIndent) * cfg.listIndent
+            return ' '.repeat(normalizedIndent) + trimmed
+          }
+        }
+        return line
+      }),
+    }
+  })
+
+  // 重新拼装
+  const resultLines = blocks.flatMap((b) => b.lines)
+
+  // 处理文件开头和结尾的空行
+  while (resultLines.length > 0 && resultLines[0] === '') resultLines.shift()
+  while (resultLines.length > 0 && resultLines[resultLines.length - 1] === '')
+    resultLines.pop()
+  resultLines.push('') // 文件结尾留一个空行
+
+  return resultLines.join('\n')
+}
+
+/**
+ * 压缩连续空行块
+ */
+function compressEmptyLines(blocks, maxBlank) {
+  const result = []
+  let blankCount = 0
+
+  for (const block of blocks) {
+    if (block.type === 'empty') {
+      blankCount++
+      if (blankCount <= maxBlank) {
+        result.push(block)
+      }
+    } else {
+      blankCount = 0
+      result.push(block)
+    }
+  }
+
+  return result
+}
+
+// ======================== 统计信息 ========================
+
+function getStats(input) {
+  const lines = input.split('\n')
+  const blocks = parseBlocks(lines)
+
+  return {
+    totalLines: lines.length,
+    nonEmptyLines: lines.filter((l) => l.trim() !== '').length,
+    headings: blocks.filter((b) => b.type === 'heading').length,
+    codeBlocks: blocks.filter((b) => b.type === 'code').length,
+    lists: blocks.filter((b) => b.type === 'list').length,
+    tables: blocks.filter((b) => b.type === 'table').length,
+    blockquotes: blocks.filter((b) => b.type === 'blockquote').length,
+    hr: blocks.filter((b) => b.type === 'hr').length,
+    characters: input.length,
+  }
+}
+
+function printStats(stats) {
+  console.log(bold('\n📊 文档统计信息:'))
+  console.log(`  总行数:         ${cyan(String(stats.totalLines))}`)
+  console.log(`  非空行数:       ${cyan(String(stats.nonEmptyLines))}`)
+  console.log(`  字符数:         ${cyan(String(stats.characters))}`)
+  console.log(`  标题数:         ${cyan(String(stats.headings))}`)
+  console.log(`  代码块数:       ${cyan(String(stats.codeBlocks))}`)
+  console.log(`  列表数:         ${cyan(String(stats.lists))}`)
+  console.log(`  表格数:         ${cyan(String(stats.tables))}`)
+  console.log(`  引用块数:       ${cyan(String(stats.blockquotes))}`)
+  console.log(`  分割线数:       ${cyan(String(stats.hr))}`)
+}
+
+// ======================== 文件处理 ========================
+
+function readFile(filePath) {
+  try {
+    let content = fs.readFileSync(filePath, 'utf-8')
+    // 统一换行符为 \n，避免 Windows 的 \r\n 导致 diff 不稳定
+    content = content.replace(/\r\n/g, '\n').replace(/\r/g, '\n')
+    return content
+  } catch (err) {
+    console.error(red(`❌ 无法读取文件: ${filePath}`))
+    console.error(dim(err.message))
+    process.exit(1)
+  }
+}
+
+function writeFile(filePath, content) {
+  try {
+    fs.writeFileSync(filePath, content, 'utf-8')
+    console.log(green(`✅ 已写入: ${filePath}`))
+  } catch (err) {
+    console.error(red(`❌ 写入失败: ${filePath}`))
+    console.error(dim(err.message))
+    process.exit(1)
+  }
+}
+
+function processFile(filePath, options) {
+  const relativePath = path.relative(process.cwd(), filePath)
+  console.log(bold(`\n📄 处理文件: ${cyan(relativePath)}`))
+
+  const input = readFile(filePath)
+  const statsBefore = getStats(input)
+
+  if (options.verbose) {
+    console.log(dim('  格式化前:'))
+    printStats(statsBefore)
+  }
+
+  const formatted = formatMarkdown(input, options)
+  const statsAfter = getStats(formatted)
+
+  const hasChanges = input !== formatted
+
+  if (options.check) {
+    if (hasChanges) {
+      console.log(yellow('  ⚠️  文件需要格式化 (dry-run, 未写入)'))
+      const added = statsAfter.totalLines - statsBefore.totalLines
+      console.log(dim(`  行数变化: ${added > 0 ? '+' : ''}${added}`))
+    } else {
+      console.log(green('  ✅ 文件已格式良好'))
+    }
+    return hasChanges ? 1 : 0
+  }
+
+  if (hasChanges) {
+    writeFile(filePath, formatted)
+    console.log(green('  ✨ 格式化完成!'))
+    if (options.verbose) {
+      printStats(statsAfter)
+    }
+  } else {
+    console.log(green('  ✅ 文档已经格式良好,无需修改'))
+  }
+
+  return 0
+}
+
+function processDirectory(dirPath, options) {
+  let exitCode = 0
+  const files = fs
+    .readdirSync(dirPath)
+    .filter((f) => f.endsWith('.md'))
+    .map((f) => path.join(dirPath, f))
+
+  if (files.length === 0) {
+    console.log(yellow(`⚠️  在 ${dirPath} 中未找到 .md 文件`))
+    return 0
+  }
+
+  console.log(
+    bold(`\n📁 扫描目录: ${cyan(dirPath)} (${files.length} 个文件)\n`),
+  )
+
+  for (const file of files) {
+    const ret = processFile(file, options)
+    if (ret !== 0) exitCode = ret
+  }
+
+  return exitCode
+}
+
+// ======================== CLI ========================
+
+function printHelp() {
+  console.log(
+    bold(`
+📝 Markdown 文档格式化工具 v1.0.0
+
+${cyan('用法:')}
+  node scripts/format-docs.js [文件路径] [选项]
+
+${cyan('参数:')}
+  文件路径                要格式化的 .md 文件 (默认: public/docs/home.md)
+
+${cyan('选项:')}
+  --dir, -d <目录>        格式化整个目录下的所有 .md 文件
+  --check, -c             dry-run 模式,只检查不写入
+  --verbose, -v          显示详细统计信息
+  --help, -h             显示帮助信息
+
+${cyan('示例:')}
+  node scripts/format-docs.js
+  node scripts/format-docs.js README.md
+  node scripts/format-docs.js --dir docs/
+  node scripts/format-docs.js --check
+`),
+  )
+}
+
+function parseArgs() {
+  const args = process.argv.slice(2)
+  const options = {
+    file: null,
+    dir: null,
+    check: false,
+    verbose: false,
+    help: false,
+  }
+
+  for (let i = 0; i < args.length; i++) {
+    switch (args[i]) {
+      case '--dir':
+      case '-d':
+        options.dir = args[++i]
+        break
+      case '--check':
+      case '-c':
+        options.check = true
+        break
+      case '--verbose':
+      case '-v':
+        options.verbose = true
+        break
+      case '--help':
+      case '-h':
+        options.help = true
+        break
+      default:
+        if (!args[i].startsWith('--') && !args[i].startsWith('-')) {
+          options.file = path.resolve(process.cwd(), args[i])
+        }
+    }
+  }
+
+  return options
+}
+
+// ======================== 主函数 ========================
+
+function main() {
+  const options = parseArgs()
+
+  if (options.help) {
+    printHelp()
+    return 0
+  }
+
+  console.log(bold(`\n${cyan('🐱 文档格式化工具')} ${dim('(用❤️制作)')}\n`))
+
+  if (options.dir) {
+    const dirPath = path.resolve(process.cwd(), options.dir)
+    if (!fs.existsSync(dirPath)) {
+      console.error(red(`❌ 目录不存在: ${dirPath}`))
+      return 1
+    }
+    return processDirectory(dirPath, options)
+  }
+
+  const filePath = options.file || DEFAULT_FILE
+  if (!fs.existsSync(filePath)) {
+    console.error(red(`❌ 文件不存在: ${filePath}`))
+    return 1
+  }
+
+  return processFile(filePath, options)
+}
+
+// ======================== 启动 ========================
+
+if (require.main === module) {
+  const exitCode = main()
+  process.exit(exitCode)
+}
+
+module.exports = { formatMarkdown, getStats, parseBlocks }
@@ -10,6 +10,7 @@ const { cookieToJson } = require('./util/index')
 const fileUpload = require('express-fileupload')
 const decode = require('safe-decode-uri-component')
 const logger = require('./util/logger.js')
+const { APP_CONF } = require('./util/config.json')

 /**
 * The version check result.
@@ -299,15 +300,15 @@ async function constructServer(moduleDefs) {
      )

      try {
+        let usedCrypto = ''
        const moduleResponse = await moduleDef.module(query, (...params) => {
-          // 参数注入客户端IP
          const obj = [...params]
          const options = obj[2] || {}
+          usedCrypto = options.crypto || ''
          let ip = ''

          if (options.randomCNIP) {
            ip = global.cnIp
-            // logger.info('Using random Chinese IP for request:', ip)
          } else {
            ip = req.ip

@@ -317,7 +318,6 @@ async function constructServer(moduleDefs) {
            if (ip == '::1') {
              ip = global.cnIp
            }
-            // logger.info('Requested from ip:', ip)
          }

          obj[2] = {
@@ -327,7 +327,10 @@ async function constructServer(moduleDefs) {

          return request(...obj)
        })
-        logger.info(`Request Success: ${decode(req.originalUrl)}`)
+        const displayCrypto = usedCrypto || (APP_CONF.encrypt ? 'eapi' : 'api')
+        logger.info(
+          `Request Success: [${displayCrypto}] ${decode(req.originalUrl)}`,
+        )

        // 夹带私货部分：如果开启了通用解锁，并且是获取歌曲URL的接口，则尝试解锁（如果需要的话）ヾ(≧▽≦*)o
        if (
@@ -422,7 +425,7 @@ async function serveNcmApi(options) {
    options.checkVersion &&
    checkVersion().then(({ npmVersion, ourVersion, status }) => {
      if (status == VERSION_CHECK_RESULT.NOT_LATEST) {
-        logger.info(
+        logger.warn(
          `最新版本: ${npmVersion}, 当前版本: ${ourVersion}, 请及时更新`,
        )
      }
@@ -444,11 +447,9 @@ async function serveNcmApi(options) {
  ╠═╣╠═╝║    ║╣ ║║║╠═╣╠═╣║║║║  ║╣  ║║
  ╩ ╩╩  ╩    ╚═╝╝╚╝╩ ╩╩ ╩╝╚╝╚═╝╚═╝═╩╝
    `)
-    logger.info(`
- Server started successfully @ http://${host ? host : 'localhost'}:${port}
- Environment: ${process.env.NODE_ENV || 'development'}
- Node Version: ${process.version}
- Process ID: ${process.pid}`)
+    logger.info(
+      `Server started successfully @ http://${host ? host : 'localhost'}:${port}`,
+    )
  })

  return appExt
@@ -11,7 +11,11 @@
  },
  "APP_CONF": {
    "apiDomain": "https://interface.music.163.com",
+    "xeapiDomain": "https://interface3.music.163.com",
    "domain": "https://music.163.com",
+    "clDomian": "https://clientlog.music.163.com",
+    "clDomian3": "https://clientlog3.music.163.com",
+    "dunDomain": "https://ac.dun.163yun.com",
    "encrypt": true,
    "encryptResponse": false,
    "clientSign": "18:C0:4D:B9:8F:FE@@@453832335F384641365F424635335F303030315F303031425F343434415F343643365F333638332@@@@@@6ff673ef74955b38bce2fa8562d95c976ed4758b1227c4e9ee345987cee17bc9",
@@ -62,9 +62,9 @@ const chinaIPRanges = (function loadChinaIPRanges() {
    // attach total for convenience
    arr.totalCount = total

-    logger.info(
-      `Loaded ${arr.length} Chinese IP ranges from china_ip_ranges.txt, total ${total} IPs`,
-    )
+    // logger.info(
+    //   `Loaded ${arr.length} Chinese IP ranges from china_ip_ranges.txt, total ${total} IPs`,
+    // )
    return arr
  } catch (error) {
    logger.error('Failed to load china_ip_ranges.txt:', error.message)
@@ -0,0 +1,481 @@
+// NCBL 加密工具 —— 复制自 @netease-report-listen-song
+// 提供 ChaCha20 / RSA-256 / NCBL 加密 / PLV+PLD 构建 / 设备上下文提取
+
+const crypto = require('crypto')
+const zlib = require('zlib')
+const axios = require('axios')
+const { APP_CONF } = require('./config.json')
+const DOMAIN3 = APP_CONF.clDomian3
+
+// ---- ChaCha20 纯 JS 实现 ----
+const SIGMA = [0x61707865, 0x3320646e, 0x79622d32, 0x6b206574]
+
+const rotl = (x, n) => ((x << n) | (x >>> (32 - n))) >>> 0
+
+const quarterRound = (s, a, b, c, d) => {
+  s[a] = (s[a] + s[b]) >>> 0
+  s[d] ^= s[a]
+  s[d] = rotl(s[d], 16)
+  s[c] = (s[c] + s[d]) >>> 0
+  s[b] ^= s[c]
+  s[b] = rotl(s[b], 12)
+  s[a] = (s[a] + s[b]) >>> 0
+  s[d] ^= s[a]
+  s[d] = rotl(s[d], 8)
+  s[c] = (s[c] + s[d]) >>> 0
+  s[b] ^= s[c]
+  s[b] = rotl(s[b], 7)
+}
+
+const chachaBlock = (key, counter, nonce) => {
+  const state = new Uint32Array(16)
+  state[0] = SIGMA[0]
+  state[1] = SIGMA[1]
+  state[2] = SIGMA[2]
+  state[3] = SIGMA[3]
+  for (let i = 0; i < 8; i++) state[4 + i] = key.readUInt32LE(i * 4)
+  state[12] = counter >>> 0
+  state[13] = nonce.readUInt32LE(0)
+  state[14] = nonce.readUInt32LE(4)
+  state[15] = nonce.readUInt32LE(8)
+
+  const work = state.slice()
+  for (let i = 0; i < 10; i++) {
+    quarterRound(work, 0, 4, 8, 12)
+    quarterRound(work, 1, 5, 9, 13)
+    quarterRound(work, 2, 6, 10, 14)
+    quarterRound(work, 3, 7, 11, 15)
+    quarterRound(work, 0, 5, 10, 15)
+    quarterRound(work, 1, 6, 11, 12)
+    quarterRound(work, 2, 7, 8, 13)
+    quarterRound(work, 3, 4, 9, 14)
+  }
+
+  const out = Buffer.allocUnsafe(64)
+  for (let i = 0; i < 16; i++)
+    out.writeUInt32LE((work[i] + state[i]) >>> 0, i * 4)
+  return out
+}
+
+const chacha20 = (key, counter, nonce, data) => {
+  const out = Buffer.allocUnsafe(data.length)
+  for (let off = 0; off < data.length; off += 64) {
+    const ks = chachaBlock(key, (counter + (off >>> 6)) >>> 0, nonce)
+    const end = Math.min(off + 64, data.length)
+    for (let i = off; i < end; i++) out[i] = data[i] ^ ks[i - off]
+  }
+  return out
+}
+
+// ---- RSA-256 Key Wrap (网易 NCBL 专用) ----
+// 256-bit 模数 N 已被因式分解，故可直接计算私钥
+const RSA_N =
+  0xfd90bd466ff9bc8a3fec2fbcf263b90d5c564879fa5d7aab89b31c1d5cb4139dn
+const RSA_E = 65537n
+
+const beToBig = (buf) => {
+  let n = 0n
+  for (const b of buf) n = (n << 8n) | BigInt(b)
+  return n
+}
+
+const bigToBe = (n, len) => {
+  const out = Buffer.alloc(len)
+  for (let i = len - 1; i >= 0; i--) {
+    out[i] = Number(n & 0xffn)
+    n >>= 8n
+  }
+  return out
+}
+
+const modPow = (base, exp, mod) => {
+  let result = 1n
+  base %= mod
+  while (exp > 0n) {
+    if (exp & 1n) result = (result * base) % mod
+    base = (base * base) % mod
+    exp >>= 1n
+  }
+  return result
+}
+
+const rsaWrap = (keyA) => {
+  return bigToBe(modPow(beToBig(keyA), RSA_E, RSA_N), 32)
+}
+
+// ---- NCBL 加密格式 ----
+const MAGIC = Buffer.from('NCBL', 'ascii')
+const NCBL_VERSION = 3
+const HEADER_FIXED_LEN = 70
+const META_BLOCK_TYPE = 0x4343
+const DEFAULT_MAX_FRAME = 0x8000
+
+const getCompress = () => {
+  if (typeof zlib.zstdCompressSync === 'function') {
+    return { compress: (buf) => zlib.zstdCompressSync(buf), name: 'zstd' }
+  }
+  return { compress: (buf) => zlib.gzipSync(buf), name: 'gzip' }
+}
+
+const encryptNCBL = (meta, body, opts = {}) => {
+  const metaBuf = Buffer.isBuffer(meta) ? meta : Buffer.from(meta, 'utf-8')
+  const bodyBuf = Buffer.isBuffer(body) ? body : Buffer.from(body, 'utf-8')
+  const maxFrame = opts.maxFrame || DEFAULT_MAX_FRAME
+
+  const keyA = opts.keyA || crypto.randomBytes(32)
+  if (keyA[0] >= 0xa3) keyA[0] = 0xa2
+
+  const keyB = rsaWrap(keyA)
+
+  const uuid = opts.uuid || crypto.randomBytes(16)
+  if (!opts.uuid) {
+    uuid[6] = (uuid[6] & 0x0f) | 0x40
+    uuid[8] = (uuid[8] & 0x3f) | 0x80
+  }
+  const nonce = uuid.subarray(0, 12)
+  const counter = uuid.readUInt32LE(12) >>> 2
+  const baseSeq = opts.baseSeq || crypto.randomBytes(2).readUInt16LE(0)
+
+  const metaCipher = chacha20(keyB, counter, nonce, metaBuf)
+  const metaBlock = Buffer.concat([
+    (() => {
+      const h = Buffer.allocUnsafe(4)
+      h.writeUInt16LE(META_BLOCK_TYPE, 0)
+      h.writeUInt16LE(metaCipher.length, 2)
+      return h
+    })(),
+    metaCipher,
+  ])
+  const headerLen = HEADER_FIXED_LEN + metaBlock.length
+
+  const { compress } = getCompress()
+  const compressed = compress(bodyBuf)
+
+  const frames = []
+  let seq = baseSeq
+  for (let off = 0; off < compressed.length || off === 0; off += maxFrame) {
+    const slice = compressed.subarray(off, off + maxFrame)
+    const cipher = chacha20(keyA, counter, nonce, slice)
+    const head = Buffer.allocUnsafe(6)
+    head.writeUInt16LE(cipher.length, 0)
+    head.writeUInt32LE(seq >>> 0, 2)
+    frames.push(head, cipher)
+    seq++
+    if (compressed.length === 0) break
+  }
+
+  const trailing = Buffer.concat(frames)
+  const frameCount = seq - baseSeq
+
+  const header = Buffer.alloc(HEADER_FIXED_LEN)
+  MAGIC.copy(header, 0)
+  header.writeUInt32LE(NCBL_VERSION, 4)
+  header.writeUInt16LE(headerLen, 8)
+  uuid.copy(header, 10)
+  keyB.copy(header, 26)
+  header.writeUInt32LE(baseSeq >>> 0, 58)
+  header.writeUInt32LE((baseSeq + frameCount - 1) >>> 0, 62)
+  header.writeUInt32LE(trailing.length, 66)
+
+  return Buffer.concat([header, metaBlock, trailing])
+}
+
+// ---- 日志记录格式 ----
+const FIELD_SEP = '\x01'
+
+const buildRecord = ({ time, action, data }) => {
+  const json = typeof data === 'string' ? data : JSON.stringify(data)
+  return [time, action, json].join(FIELD_SEP)
+}
+
+const buildRecords = (records) => records.map(buildRecord).join('')
+
+// ---- PLV / PLD 构建器 (桌面客户端格式) ----
+const buildPlv = (ctx, song, source) => {
+  const now = Date.now()
+  const addRefer = `[F:63][${now}#933#${ctx.app.version}#${ctx.app.versionCode}#c9156c3][e][2][23][cell_pc_songlist_song:2|page_pc_songlist_songflow|page_mine_like_music][${song.id}:song:x:x|:::|${source.id}:list::]`
+  const multiRefers = [
+    '[F:26][s][18][_ai]',
+    '[F:26][s][12][_ai]',
+    `[F:63][${now}#933#${ctx.app.version}#${ctx.app.versionCode}#c9156c3][e][2][8][cell_pc_main_tab_entrance:6|page_pc_main_tab][我喜欢的音乐:spm::|:::]`,
+    '[F:26][s][5][_ai]',
+    '[F:26][s][0][_ai]',
+  ]
+
+  return {
+    mode: 'circulation',
+    download: 0,
+    alg: '',
+    status: 'front',
+    id: String(song.id),
+    bitrate: song.bitrate,
+    type: 'song',
+    is_listentogether: 0,
+    source: source.name,
+    is_heart: 0,
+    resource_ratio: '',
+    resource_time: song.time,
+    musiceffect_id: '',
+    app_mode: 2,
+    bitrate_level: song.level,
+    _addrefer: addRefer,
+    _multirefers: multiRefers,
+    vipType: ctx.auth.vipType,
+    fee: 1,
+    file: 4,
+    rightSource: 0,
+    sourceId: source.id,
+    sourcetype: source.type,
+    libra_abt: '',
+    channel: ctx.app.channel,
+    curStartChannel: '',
+  }
+}
+
+const buildPld = (ctx, song, source, played) => {
+  const now = Date.now()
+  const addRefer = `[F:63][${now}#616#${ctx.app.version}#${ctx.app.versionCode}#c9156c3][e][2][92][btn_pc_cover_play|cell_pc_songlist_song:6|page_pc_songlist_songflow|page_mine_like_music][:::|${song.id}:song:x:x|:::|${source.id}:list::]`
+  const multiRefers = [
+    '[F:26][s][87][_ai]',
+    '[F:26][s][81][_ai]',
+    '[F:26][s][75][_ai]',
+    '[F:26][s][69][_ai]',
+    '[F:26][s][63][_ai]',
+  ]
+
+  return {
+    mode: 'circulation',
+    download: 0,
+    alg: '',
+    status: 'front',
+    id: String(song.id),
+    time: played,
+    type: 'song',
+    is_listentogether: 0,
+    source: source.name,
+    is_heart: 0,
+    realtime: played,
+    resource_ratio: '',
+    resource_time: song.time,
+    musiceffect_id: '1001',
+    app_mode: 1,
+    lyriceffect: 'default',
+    displayMode: 'classic',
+    bitrate: song.bitrate,
+    bitrate_level: song.level,
+    _addrefer: addRefer,
+    _multirefers: multiRefers,
+    vipType: ctx.auth.vipType,
+    fee: 8,
+    file: 4,
+    rightSource: 0,
+    sourceId: source.id,
+    sourcetype: source.type,
+    end: 'interrupt',
+    libra_abt: '',
+    channel: ctx.app.channel,
+    curStartChannel: '',
+  }
+}
+
+// ---- Cookie → 设备/认证上下文 转换 ----
+const extractContext = (cookieObj) => {
+  return {
+    app: {
+      id: cookieObj.appid || '',
+      urs: '',
+      pid: '',
+      nsm: cookieObj.WEVNSM || '1.0.0',
+      cid:
+        cookieObj.WNMCID ||
+        `${crypto.randomBytes(3).toString('hex')}.${Date.now()}.01.0`,
+      channel: cookieObj.channel || 'netease',
+      version: cookieObj.appver || '3.1.35',
+      versionCode: cookieObj.versioncode || '205293',
+      buildCode: cookieObj.buildver || '',
+      buildType: 'release',
+      packageId: '',
+    },
+    device: {
+      id: cookieObj.deviceId || cookieObj.sDeviceId || '',
+      ti: cookieObj.NMTID || '',
+      sign: cookieObj.clientSign || '',
+      model: cookieObj.mode || cookieObj.mobilename || '',
+      nnid: cookieObj._ntes_nnid || ',',
+      nuid: cookieObj._ntes_nuid || '',
+      csrf: cookieObj.__csrf || '',
+      systemType: cookieObj.os || 'pc',
+      systemVersion:
+        cookieObj.osver ||
+        'Microsoft-Windows-10-Professional-build-19045-64bit',
+    },
+    auth: {
+      id: cookieObj.uid || '',
+      token: cookieObj.MUSIC_U || '',
+      sessionId: cookieObj['JSESSIONID-WYYY'] || '',
+      vipType: cookieObj.vipType || '',
+    },
+    startTime: Date.now(),
+    processId: Math.floor(Math.random() * 90000) + 10000,
+  }
+}
+
+// 从 query.cookie 解析 cookie 对象
+// 支持字符串 ("key=val; key2=val2") 或已解析的对象
+// 注意：不做 URL decode！MUSIC_U 中的 '+' 会被 decodeURIComponent 错误地转为空格
+const parseCookie = (cookie) => {
+  if (typeof cookie === 'object' && cookie !== null) return cookie
+  if (typeof cookie === 'string') {
+    const obj = {}
+    cookie.split(';').forEach((part) => {
+      const idx = part.indexOf('=')
+      if (idx > 0) {
+        const key = part.substring(0, idx).trim()
+        const val = part.substring(idx + 1).trim()
+        if (key) obj[key] = val
+      }
+    })
+    return obj
+  }
+  return {}
+}
+
+// ---- 辅助函数 ----
+const randomUUID = () => {
+  if (typeof crypto.randomUUID === 'function') {
+    return crypto.randomUUID().replace(/-/g, '')
+  }
+  return 'xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx'.replace(/x/g, () =>
+    Math.floor(Math.random() * 16).toString(16),
+  )
+}
+
+const randomHex = (len) => crypto.randomBytes(len / 2).toString('hex')
+
+// ---- HTTP 上传工具 (NCBL 专用) ----
+const buildMultipart = (payload) => {
+  const boundary = randomUUID()
+  const fileName = `op_${Math.floor(Math.random() * 90000) + 10000}_0_${Math.floor(Math.random() * 4294967295) + 1}`
+
+  const CRLF = '\r\n'
+  const headerLines = [
+    `--${boundary}`,
+    `Content-Disposition: form-data; name="file"; filename="${fileName}"`,
+    'Content-Type: multipart/form-data',
+    '',
+    '',
+  ].join(CRLF)
+  const footer = `${CRLF}--${boundary}--${CRLF}`
+
+  return {
+    boundary,
+    fileName,
+    multipartBody: Buffer.concat([
+      Buffer.from(headerLines, 'utf-8'),
+      payload,
+      Buffer.from(footer, 'utf-8'),
+    ]),
+  }
+}
+
+const buildCookieStr = (ctx) => {
+  const parts = [
+    `JSESSIONID-WYYY=${ctx.auth.sessionId}`,
+    `MUSIC_U=${ctx.auth.token}`,
+    `NMTID=${ctx.device.ti}`,
+    `WEVNSM=${ctx.app.nsm}`,
+    `WNMCID=${ctx.app.cid}`,
+    `__csrf=${ctx.device.csrf}`,
+    `__remember_me=true`,
+    `_iuqxldmzr_=33`,
+    `_ntes_nnid=${ctx.device.nnid}`,
+    `_ntes_nuid=${ctx.device.nuid}`,
+    `appver=${ctx.app.version}.${ctx.app.versionCode}`,
+    `channel=${ctx.app.channel}`,
+    `clientSign=${ctx.device.sign}`,
+    `deviceId=${ctx.device.id}`,
+    `mode=${ctx.device.model}`,
+    `ntes_kaola_ad=1`,
+    `os=${ctx.device.systemType}`,
+    `osver=${ctx.device.systemVersion}`,
+  ]
+  return parts.join('; ')
+}
+
+const buildMetaJson = (ctx) =>
+  JSON.stringify({
+    'JSESSIONID-WYYY': ctx.auth.sessionId,
+    MUSIC_U: ctx.auth.token,
+    NMTID: ctx.device.ti,
+    WEVNSM: ctx.app.nsm,
+    WNMCID: ctx.app.cid,
+    __csrf: ctx.device.csrf,
+    _iuqxldmzr_: '33',
+    _ntes_nnid: ctx.device.nnid,
+    _ntes_nuid: ctx.device.nuid,
+    appver: `${ctx.app.version}.${ctx.app.versionCode}`,
+    channel: ctx.app.channel,
+    clientSign: ctx.device.sign,
+    deviceId: ctx.device.id,
+    mode: ctx.device.model,
+    ntes_kaola_ad: '1',
+    os: ctx.device.systemType,
+    osver: ctx.device.systemVersion,
+  })
+
+const doUpload = async (ctx, metaJson, body, cookieStr, label) => {
+  const uploadUrl = DOMAIN3 + '/api/clientlog/encrypt/upload?multiupload=true'
+
+  const payload = encryptNCBL(metaJson, body)
+  const { boundary, fileName, multipartBody } = buildMultipart(payload)
+
+  const resp = await axios({
+    method: 'POST',
+    url: uploadUrl,
+    headers: {
+      'Content-Type': `multipart/form-data; boundary=${boundary}`,
+      Referer: 'https://music.163.com/di',
+      'User-Agent': `Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 Chrome/91.0.4472.164 NeteaseMusicDesktop/${ctx.app.version}`,
+      'Accept-Encoding': 'gzip,deflate',
+      'Accept-Language': 'zh-CN,zh;q=0.8',
+      Cookie: cookieStr,
+    },
+    data: multipartBody,
+    maxBodyLength: 10 * 1024 * 1024,
+    timeout: 15000,
+    validateStatus: () => true,
+  })
+
+  const respBody = resp.data
+  const code = respBody?.code
+  const success =
+    code === 200 && respBody?.data?.successfiles?.includes?.(fileName)
+
+  return { success, fileName, payload, respBody }
+}
+
+// ---- 导出 ----
+module.exports = {
+  chacha20,
+  rsaWrap,
+  encryptNCBL,
+  getCompress,
+  MAGIC,
+  NCBL_VERSION,
+  HEADER_FIXED_LEN,
+  META_BLOCK_TYPE,
+  DEFAULT_MAX_FRAME,
+  buildRecord,
+  buildRecords,
+  FIELD_SEP,
+  buildPlv,
+  buildPld,
+  extractContext,
+  parseCookie,
+  randomUUID,
+  randomHex,
+  buildMultipart,
+  buildCookieStr,
+  buildMetaJson,
+  doUpload,
+}
@@ -12,6 +12,8 @@ const createOption = (query, crypto = '') => {
    e_r: query.e_r || undefined,
    domain: query.domain || '',
    checkToken: query.checkToken || false,
+    headers: query.headers || {},
+    timeout: query.timeout || 0,
  }
 }
 module.exports = createOption
@@ -18,6 +18,7 @@ const {
 } = require('./index')
 const { URLSearchParams, URL } = require('url')
 const { APP_CONF } = require('../util/config.json')
+const { getToken: antiCheatToken } = require('../module/register_checktoken')

 // 预先读取匿名token并缓存
 const anonymous_token = fs.readFileSync(
@@ -88,6 +89,12 @@ const osMap = {
    osver: '16.2',
    channel: 'distribution',
  },
+  osx: {
+    os: 'osx',
+    appver: '3.1.10.5100',
+    osver: '15.5',
+    channel: 'netease',
+  },
 }

 // 预先定义userAgentMap
@@ -110,7 +117,7 @@ const userAgentMap = {
 // 预先定义常量
 const DOMAIN = APP_CONF.domain
 const API_DOMAIN = APP_CONF.apiDomain
-const XEAPI_DOMAIN = 'https://interface3.music.163.com'
+const XEAPI_DOMAIN = APP_CONF.xeapiDomain
 const ENCRYPT_RESPONSE = APP_CONF.encryptResponse
 const SPECIAL_STATUS_CODES = new Set([201, 302, 400, 502, 800, 801, 802, 803])

@@ -175,6 +182,8 @@ const generateRequestId = () => {
 }

 const createRequest = (uri, data, options) => {
+  const token = options.checkToken ? antiCheatToken() : ''
+
  return new Promise((resolve, reject) => {
    // 变量声明和初始化
    const headers = options.headers ? { ...options.headers } : {}
@@ -258,6 +267,9 @@ const createRequest = (uri, data, options) => {
        headers['x-sdeviceid'] = cookie.sDeviceId || cookie.deviceId
        headers['x-buildver'] = xeapiBuildver
        if (cookie.MUSIC_U) headers['x-music-u'] = cookie.MUSIC_U
+        if (options.checkToken) {
+          headers['X-antiCheatToken'] = token
+        }
        const xeapiCookie = {
          ...cookie,
          os: xeapiOs,
@@ -296,17 +308,21 @@ const createRequest = (uri, data, options) => {
          __csrf: csrfToken,
          channel: cookie.channel,
          requestId: generateRequestId(),
-          ...(options.checkToken
-            ? { 'X-antiCheatToken': APP_CONF.checkToken }
-            : {}),
          // clientSign: APP_CONF.clientSign,
        }

        if (cookie.MUSIC_U) header['MUSIC_U'] = cookie.MUSIC_U
        if (cookie.MUSIC_A) header['MUSIC_A'] = cookie.MUSIC_A
+        if (options.checkToken) {
+          header['X-antiCheatToken'] = token
+        }

        headers['Cookie'] = createHeaderCookie(header)
-        headers['User-Agent'] = options.ua || chooseUserAgent('api', 'iphone')
+        headers['User-Agent'] =
+          options.ua ||
+          (cookie.os === 'osx'
+            ? 'Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36'
+            : chooseUserAgent('api', 'iphone'))

        if (crypto === 'eapi') {
          // headers['x-aeapi'] = true // 服务器会使用gzip压缩返回值
@@ -334,6 +350,11 @@ const createRequest = (uri, data, options) => {
      httpsAgent: createHttpsAgent(),
    }

+    // 自定义超时
+    if (options.timeout > 0) {
+      settings.timeout = options.timeout
+    }
+
    // 使用返回值加密
    const use_e_r = (crypto === 'eapi' || crypto === 'weapi') && data.e_r
    const use_xeapi = crypto === 'xeapi'
@@ -1,59 +1,15 @@
-const { default: axios } = require('axios')
-const encrypt = require('./crypto')
-const { APP_CONF } = require('./config.json')
-
-const generateNonce = () => {
-  let nonce = ''
-  for (let i = 0; i < 16; i++) {
-    nonce += Math.floor(Math.random() * 10).toString()
-  }
-  return nonce
-}
+const registerXeapiKey = require('../module/register_xeapikey')

 const getXeapiPublicKey = async (currentPublicKey = {}, deviceId = '') => {
-  const nonce = generateNonce()
-  const timestamp = String(Date.now())
-  const data = {
-    appVersion: '9.1.65',
-    currentKeyVersion: currentPublicKey.version || '',
-    deviceId,
-    nonce,
-    os: 'android',
-    requestType: 'active',
-    signature: encrypt.xeapiSign(timestamp, nonce),
-    t1: '',
-    t2: '',
-    timestamp,
-    uid: '',
-  }
-  const res = await axios({
-    method: 'POST',
-    url: APP_CONF.apiDomain + '/api/gorilla/anti/crawler/security/key/get',
-    headers: {
-      'User-Agent':
-        'NeteaseMusic/9.1.65.240927161425(9001065);Dalvik/2.1.0 (Linux; U; Android 14; 23013RK75C Build/UKQ1.230804.001)',
-      Cookie: deviceId ? `deviceId=${encodeURIComponent(deviceId)}` : '',
+  const result = await registerXeapiKey(
+    {
+      deviceId,
+      currentKeyVersion: currentPublicKey.version || '',
    },
-    data: new URLSearchParams(data).toString(),
-    proxy: false,
-  })
-  if (
-    !res.data ||
-    res.data.code !== 200 ||
-    !res.data.data ||
-    !res.data.data.encryptedData
-  ) {
-    throw new Error('xeapi public key request failed')
-  }
-  if (
-    !res.data.data.signature ||
-    encrypt.xeapiSign(res.data.data.timestamp, nonce) !==
-      res.data.data.signature
-  ) {
-    throw new Error('xeapi public key response signature mismatch')
-  }
+    null,
+  )

-  const publicKey = encrypt.xeapiDecryptPublicKey(res.data.data.encryptedData)
+  const publicKey = result.body
  if (!publicKey.sk && currentPublicKey.sk) {
    publicKey.sk = currentPublicKey.sk
  }
Author	SHA1	Message	Date
MoeFurina	0a5a1242f2	feat: 新增免费听接口	2026-07-15 16:14:19 +08:00
MoeFurina	6946dc8e14	docs: 修改运行要求	2026-07-12 10:42:50 +08:00
MoeFurina	22b78779ca	Merge branch 'main' of https://github.com/NeteaseCloudMusicApiEnhanced/api-enhanced	2026-07-11 17:20:25 +08:00
MoeFurina	35607f5050	perf: 改进api调试页面	2026-07-11 17:20:14 +08:00
Takanashi Hoshino	60af95ac06	Merge pull request #210 from laoshuikaixue/feature/artist-new-song-playall feat(artist): 添加关注歌手新歌播放全部&新作品接口	2026-07-11 17:04:55 +08:00
LaoShui	46073e5f50	docs(docs): 更新 sourceType 参数说明 - 明确 `1` 表示新歌，其他取值待确认 - 添加默认值 `1` 的标注	2026-07-10 23:07:31 +08:00
LaoShui	bf12abe2f1	feat(artist): 添加关注歌手新作品（歌曲/MV）接口 - 新增 module/artist_new_song_mv_list_v2.js 模块实现接口逻辑 - 在文档中添加接口说明、参数详情和调用示例 - 在 TypeScript 定义文件中添加对应的接口类型声明 - 支持分页获取关注歌手的新歌曲和 MV 列表 - 实现时间游标和翻页功能支持 - 提供多种可选参数配置选项	2026-07-10 19:20:54 +08:00
LaoShui	1491b91829	feat(artist): 添加关注歌手新歌播放全部功能 - 新增 module/artist_new_song_playall.js 文件实现获取所有关注歌手最近50首新歌的功能 - 在文档中添加关注歌手最近新歌播放全部接口说明和调用示例 - 在类型定义文件中添加 artist_new_song_playall 函数声明	2026-07-10 18:56:50 +08:00
MoeFurina	63f669d7f8	fix: 黑胶乐签签到失败 (#197 )	2026-06-30 14:34:58 +08:00
Furina's Little Ocean Act Theater	d525204dda	Merge pull request #199 from zhuixingzhe-baisheng/add-vip-growthpoint-getall feat: add vip_growthpoint_getall - one-click claim all VIP growth rew…	2026-06-29 16:14:42 +08:00
Furina's Little Ocean Act Theater	6eb31984fd	Merge pull request #200 from floatwoozy/feat/listen-data-song-play-rank feat: 新增 listen_data_song_play_rank 歌曲播放排行接口	2026-06-29 16:14:11 +08:00
MoeFurina	9faeb0aa25	docs: 删减文档内容	2026-06-29 15:53:01 +08:00
floatwoozy	f6db3e76e9	feat: 新增 listen_data_song_play_rank 歌曲播放排行接口新增 /api/content/activity/listen/data/song/play/rank，返回某周/月听歌排行（每首带 playCount），默认 Top20、不足则返回全部。与已有的 listen_data_today_song（今日）同族，补全「带次数的历史周/月榜」。 - module/listen_data_song_play_rank.js：type(week\|month) + endTime 参数 - interface.d.ts：补类型声明 - public/docs/home.md：补接口文档	2026-06-25 03:25:20 +08:00
MonkeyCode Agent	9163d48f0a	feat: add vip_growthpoint_getall - one-click claim all VIP growth rewards (xeapi) - New module: module/vip_growthpoint_getall.js - Uses xeapi encryption for direct endpoint - No parameters required, claims all completed task rewards at once - Added TypeScript type declaration in interface.d.ts - Added API documentation in public/docs/home.md	2026-06-21 05:24:35 +00:00
MoeFurina	1454ee216c	fix: 请求异常 (`83ee2cda34`)	2026-06-20 23:28:08 +08:00
MoeFurina	83ee2cda34	feat: add NCBL encrypted scrobble interface and update related documentation - Implemented new scrobble endpoint for NCBL encrypted logs in `scrobble_v1.js`. - Updated `scrobble.js` to use domain from config. - Enhanced `scrobble.html` with tabbed interface for original and NCBL versions, including new input fields. - Added cookie handling and quick fill functionality for both versions. - Updated `config.json` to include new domain configurations. - Introduced `ncbl.js` for NCBL encryption utilities. - Improved documentation in `home.md` to reflect changes in API usage.	2026-06-20 22:51:51 +08:00
MoeFurina	3c352b5752	feat: 新增听歌打卡示例页面	2026-06-20 21:16:14 +08:00
MoeFurina	60ee927e32	fix: 修复听歌打卡接口 (#167 )	2026-06-19 15:11:31 +08:00
MoeFurina	eb07a525eb	feat: 支持显示加密方式	2026-06-18 23:46:11 +08:00
MoeFurina	6fc4231142	feat(docs-format): 增加文档格式化工具	2026-06-18 23:05:44 +08:00
MoeFurina	fa69736300	revert: some changes This reverts commit `c959866436`.	2026-06-18 22:52:35 +08:00
MoeFurina	73a5e9d788	Revert "feat: 增加文档格式化工具" This reverts commit `6550c7c827`.	2026-06-18 22:51:34 +08:00
MoeFurina	dc6f56e8a8	Revert "fix(deploy): 修复部分启动失败 (#196 )" This reverts commit `395a80e74b`.	2026-06-18 22:50:53 +08:00
MoeFurina	2c9da8507d	Revert "refactor: 优化serverless入口文件" This reverts commit `1db354464f`.	2026-06-18 22:50:51 +08:00
MoeFurina	1db354464f	refactor: 优化serverless入口文件	2026-06-18 22:29:24 +08:00
MoeFurina	395a80e74b	fix(deploy): 修复部分启动失败 (#196 )	2026-06-18 21:00:06 +08:00
MoeFurina	6550c7c827	feat: 增加文档格式化工具	2026-06-13 23:49:30 +08:00
MoeFurina	c959866436	feat: 增强配置生成逻辑，添加重试机制和日志记录	2026-06-13 21:21:33 +08:00
MoeFurina	e3a1c041b6	fix: 修复游客登陆接口	2026-06-09 00:09:48 +08:00
MoeFurina	e2324e26da	Merge remote-tracking branch 'origin/dependabot/github_actions/docker/login-action-4'	2026-06-09 00:09:09 +08:00
MoeFurina	f01e770c35	Merge remote-tracking branch 'origin/dependabot/npm_and_yarn/types/node-25.9.1'	2026-06-09 00:08:41 +08:00
MoeFurina	abb56ec014	Merge remote-tracking branch 'origin/dependabot/github_actions/aormsby/Fork-Sync-With-Upstream-action-3.4.3'	2026-06-09 00:08:23 +08:00
dependabot[bot]	0300c1b51e	build(packages): bump @types/node from 25.5.0 to 25.9.2 Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 25.5.0 to 25.9.2. - [Release notes](https://github.com/DefinitelyTyped/DefinitelyTyped/releases) - [Commits](https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node) --- updated-dependencies: - dependency-name: "@types/node" dependency-version: 25.9.1 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>	2026-06-06 07:42:44 +00:00
MoeFurina	9896242333	bump 4.35.0	2026-06-06 15:40:08 +08:00
MoEFusion	e3812be97b	Merge pull request #182 from zhuixingzhe-baisheng/feat/add-relay-play-state-submit feat: add relay_play_state_submit API for song play state tracking	2026-06-06 15:36:27 +08:00
MoeFurina	e7ff0da4ba	refactor: 自动生成sessionID	2026-06-06 15:33:15 +08:00
MoeFurina	65261fa658	Merge branch 'main' into pr/182	2026-06-06 15:23:37 +08:00
MoEFusionandgemini-code-assist[bot]	cb5b2e7d0f	Apply suggestions from code review Co-authored-by: gemini-code-assist[bot] <176961590+gemini-code-assist[bot]@users.noreply.github.com>	2026-06-06 15:22:25 +08:00
MoeFurina	f58fd4b50d	feat: 新增云盘歌曲下载链接接口 (`1a5f91a192`)	2026-06-06 15:20:06 +08:00
MoeFurina	1a5f91a192	feat: 新增从云盘获取歌曲下载链接接口	2026-06-06 15:17:28 +08:00
MoeFurina	50cc26f297	feat: 为xeapi重构相关接口以优化密钥获取流程	2026-06-06 14:52:33 +08:00
dependabot[bot]	a9c33de182	chore(deps): bump docker/login-action from 3 to 4 Bumps [docker/login-action](https://github.com/docker/login-action) from 3 to 4. - [Release notes](https://github.com/docker/login-action/releases) - [Commits](https://github.com/docker/login-action/compare/v3...v4) --- updated-dependencies: - dependency-name: docker/login-action dependency-version: '4' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-30 10:24:02 +00:00
Developer	39e0e0718d	feat: add relay_play_state_submit API for song play state tracking - Add new interface /api/relay/play/state/submit - Support sessionId tracking for play sessions - Support playMode parameter (list_loop, single_loop, random, single) - Add parameter validation - Include integration documentation	2026-05-28 13:00:21 +00:00
dependabot[bot]	6175d55f89	chore(deps): bump aormsby/Fork-Sync-With-Upstream-action Bumps [aormsby/Fork-Sync-With-Upstream-action](https://github.com/aormsby/fork-sync-with-upstream-action) from 3.4.2 to 3.4.3. - [Release notes](https://github.com/aormsby/fork-sync-with-upstream-action/releases) - [Commits](https://github.com/aormsby/fork-sync-with-upstream-action/compare/v3.4.2...v3.4.3) --- updated-dependencies: - dependency-name: aormsby/Fork-Sync-With-Upstream-action dependency-version: 3.4.3 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>	2026-05-01 14:54:43 +00:00