feat(qs): 汽水音乐平台接入——匿名搜索/试听、抖音扫码登录、解密流代理

- sdk/qs 平台模块(安卓参数指纹匿名搜索)+ sdk/apis/qs 取流:
  匿名 30s 试听,登录态走签名 track_v2 + spade key AES-CTR 解密
- /login/qs/qr 抖音扫码登录(授权后 sessionid 解锁完整曲目)
- /stream/qs/:id 解密流代理,/url 返回的相对地址按请求 host 补全
- 回归测试覆盖 kw 双通道(VIP 真音频/降级链)与 qs 试听;start.bat 去掉
  SOURCE_ENABLED 直启

sdk/qs/crypto/argus.ts

@@ -0,0 +1,152 @@
+import { b64encode, getCrypto, getSubtle, hash, pkcs7Pad } from "./index.ts";
+import { ProtobufWriter } from "./protobuf.ts";
+import { simonEncrypt } from "./simon.ts";
+import { sm3 } from "./sm3.ts";
+import type { UnidbgConfig } from "./unidbgconfig.ts";
+
+const LOW_RAND = new Uint8Array([0xf2, 0x81]);
+const HIGH_RAND = new Uint8Array([0x61, 0x6f]); // 'a', 'o'
+const XOR_PREFIX = new Uint8Array([0xf2, 0xf7, 0xfc, 0xff, 0xf2, 0xf7, 0xfc, 0xff]);
+
+function sm3Prefix6(data: Uint8Array): Uint8Array<ArrayBuffer> {
+    return sm3(data).slice(0, 6);
+}
+
+function decodeStub(xssStub: string): Uint8Array<ArrayBuffer> {
+    const bytes = new Uint8Array(16);
+    if (xssStub.length >= 32) {
+        for (let i = 0; i < 16; i++) {
+            bytes[i] = parseInt(xssStub.slice(i * 2, i * 2 + 2), 16) & 0xff;
+        }
+    }
+    return bytes;
+}
+
+function calculateConstant(code: string): number {
+    const parts = [...code.replace(/\./g, "").padStart(6, "0")].map(Number);
+    const weights = [20480, 2048, 20971520, 2097152, 1342177280, 134217728];
+    return parts.reduce((sum, part, i) => sum + part * weights[i]!, 0);
+}
+
+function buildProtobuf(
+    query: string,
+    xssStub: string,
+    timestamp: number,
+    config: UnidbgConfig,
+): Uint8Array<ArrayBuffer> {
+    const params = new URLSearchParams(query);
+    const deviceId = params.get("device_id") ?? "";
+    const versionName = params.get("version_name") ?? "";
+    const deviceType = params.get("device_type") ?? "";
+    const osVersion = params.get("os_version") ?? "";
+    const channel = params.get("channel") ?? "";
+
+    // 空 stub / 空 query 时都对 16 字节全零求 SM3
+    const bodyHash = sm3Prefix6(xssStub === "" ? new Uint8Array(16) : decodeStub(xssStub));
+    const queryHash = sm3Prefix6(
+        query === "" ? new Uint8Array(16) : new TextEncoder().encode(query),
+    );
+
+    const rand = getCrypto().getRandomValues(new Uint32Array(1))[0]! % 0x7fffffff;
+
+    return new ProtobufWriter()
+        .varint(1, 0x20200929 * 2) // magic
+        .varint(2, 2) // version
+        .varint(3, rand)
+        .string(4, config.aid)
+        .string(5, deviceId)
+        .string(6, config.licenseId)
+        .string(7, versionName)
+        .string(8, config.sdkVersion)
+        .varint(9, config.sdkVersionInt)
+        .bytes(10, new Uint8Array(8)) // envcode
+        .varint(11, 0) // platform
+        .varint(12, timestamp * 2) // createTime
+        .bytes(13, bodyHash)
+        .bytes(14, queryHash)
+        .message(15, (sub) => {
+            sub.varint(1, 1).varint(2, 1).varint(3, 1).varint(7, 3348294860);
+        })
+        .string(16, config.secDeviceId ?? "") // sec_device_id
+        .string(20, "none") // pskVersion
+        .varint(21, config.callType)
+        .message(23, (sub) => {
+            sub.string(1, deviceType).string(2, osVersion).string(3, channel).varint(4, calculateConstant(osVersion));
+        })
+        .varint(25, 2)
+        .toBytes();
+}
+
+
+export async function getArgus(
+    query: string,
+    xssStub: string,
+    timestamp: number,
+    config: UnidbgConfig,
+): Promise<string> {
+    const { signKey } = config;
+    if (signKey.length !== 32) {
+        throw new Error(`Sign key must be 32 bytes, got ${signKey.length}`);
+    }
+
+    const protobuf = pkcs7Pad(buildProtobuf(query, xssStub, timestamp, config), 16);
+
+    const sm3Input = new Uint8Array(signKey.length * 2 + LOW_RAND.length + HIGH_RAND.length);
+    sm3Input.set(signKey, 0);
+    sm3Input.set(LOW_RAND, signKey.length);
+    sm3Input.set(HIGH_RAND, signKey.length + LOW_RAND.length);
+    sm3Input.set(signKey, signKey.length + LOW_RAND.length + HIGH_RAND.length);
+
+    const sm3Output = sm3(sm3Input);
+    const keyView = new DataView(sm3Output.buffer, sm3Output.byteOffset, sm3Output.byteLength);
+    const simonKey: [bigint, bigint, bigint, bigint] = [
+        keyView.getBigUint64(0, true),
+        keyView.getBigUint64(8, true),
+        keyView.getBigUint64(16, true),
+        keyView.getBigUint64(24, true),
+    ];
+
+    const encrypted = new Uint8Array(protobuf.length);
+    const pbView = new DataView(protobuf.buffer, protobuf.byteOffset, protobuf.byteLength);
+    const encView = new DataView(encrypted.buffer);
+    for (let offset = 0; offset < protobuf.length; offset += 16) {
+        const [low, high] = simonEncrypt(
+            [pbView.getBigUint64(offset, true), pbView.getBigUint64(offset + 8, true)],
+            simonKey,
+        );
+        encView.setBigUint64(offset, low, true);
+        encView.setBigUint64(offset + 8, high, true);
+    }
+
+    const data = new Uint8Array(XOR_PREFIX.length + encrypted.length);
+    data.set(XOR_PREFIX);
+    data.set(encrypted, XOR_PREFIX.length);
+    for (let i = XOR_PREFIX.length; i < data.length; i++) {
+        data[i]! ^= data[i % 8]!;
+    }
+    data.reverse();
+
+    const header = new Uint8Array([0xa6, 0x6e, 0xad, 0x9f, 0x77, 0x01, 0xd0, 0x0c, 0x18]);
+    const plaintext = new Uint8Array(header.length + data.length + HIGH_RAND.length);
+    plaintext.set(header);
+    plaintext.set(data, header.length);
+    plaintext.set(HIGH_RAND, header.length + data.length);
+
+    const subtle = getSubtle();
+    const aesKey = await subtle.importKey(
+        "raw",
+        await hash.md5bytes(signKey.slice(0, 16)),
+        { name: "AES-CBC" },
+        false,
+        ["encrypt"],
+    );
+    const iv = await hash.md5bytes(signKey.slice(16));
+    const ciphertext = new Uint8Array(
+        await subtle.encrypt({ name: "AES-CBC", iv }, aesKey, plaintext),
+    );
+
+    const result = new Uint8Array(LOW_RAND.length + ciphertext.length);
+    result.set(LOW_RAND);
+    result.set(ciphertext, LOW_RAND.length);
+    return b64encode(result.buffer);
+}