feat(qs): 汽水音乐平台接入——匿名搜索/试听、抖音扫码登录、解密流代理

- sdk/qs 平台模块(安卓参数指纹匿名搜索)+ sdk/apis/qs 取流:
  匿名 30s 试听,登录态走签名 track_v2 + spade key AES-CTR 解密
- /login/qs/qr 抖音扫码登录(授权后 sessionid 解锁完整曲目)
- /stream/qs/:id 解密流代理,/url 返回的相对地址按请求 host 补全
- 回归测试覆盖 kw 双通道(VIP 真音频/降级链)与 qs 试听;start.bat 去掉
  SOURCE_ENABLED 直启

sdk/qs/crypto/speck.ts

@@ -0,0 +1,79 @@
+import { hash, pkcs7Pad } from "./index.ts";
+
+const ROUNDS = 34;
+const MASK64 = 0xffffffffffffffffn;
+const WORD_SIZE = 64n;
+const ALPHA = 8n;
+const BETA = 3n;
+
+function readUint64LE(view: DataView, offset: number): bigint {
+    return view.getBigUint64(offset, true);
+}
+
+function keySchedule(key: Uint8Array): bigint[] {
+    const view = new DataView(key.buffer, key.byteOffset, key.byteLength);
+
+    const ks: bigint[] = [readUint64LE(view, 0) & MASK64];
+    const numWords = (key.length * 8) / Number(WORD_SIZE);
+    const ls: bigint[] = [];
+    for (let i = 1; i < numWords; i++) {
+        ls.push(readUint64LE(view, i * 8) & MASK64);
+    }
+
+    for (let x = 0; x < ROUNDS - 1; x++) {
+        const rsX = (((ls[x]! << (WORD_SIZE - ALPHA)) + (ls[x]! >> ALPHA)) & MASK64);
+        const addSxy = (rsX + ks[x]!) & MASK64;
+        const newX = BigInt(x) ^ addSxy;
+        const lsY = (((ks[x]! >> (WORD_SIZE - BETA)) + (ks[x]! << BETA)) & MASK64);
+        ls.push(newX);
+        ks.push(newX ^ lsY);
+    }
+
+    return ks;
+}
+
+
+function encryptBlock(ks: readonly bigint[], block: Uint8Array, out: Uint8Array, outOffset: number): void {
+    const view = new DataView(block.buffer, block.byteOffset, block.byteLength);
+    let y = readUint64LE(view, 0);
+    let x = readUint64LE(view, 8);
+
+    for (const k of ks) {
+        const rsX = (((x << (WORD_SIZE - ALPHA)) + (x >> ALPHA)) & MASK64);
+        const addSxy = (rsX + y) & MASK64;
+        x = k ^ addSxy;
+        const lsY = (((y >> (WORD_SIZE - BETA)) + (y << BETA)) & MASK64);
+        y = x ^ lsY;
+    }
+
+    const outView = new DataView(out.buffer, out.byteOffset, out.byteLength);
+    outView.setBigUint64(outOffset, y & MASK64, true);
+    outView.setBigUint64(outOffset + 8, x & MASK64, true);
+}
+
+
+export function speckEncrypt(key: Uint8Array, plaintext: Uint8Array): Uint8Array<ArrayBuffer> {
+    if (key.length !== 32) {
+        throw new Error(`Speck key must be 32 bytes, got ${key.length}`);
+    }
+
+    const padded = pkcs7Pad(plaintext, 16);
+    const ks = keySchedule(key);
+
+    const out = new Uint8Array(padded.length);
+    for (let i = 0; i < padded.length; i += 16) {
+        encryptBlock(ks, padded.subarray(i, i + 16), out, i);
+    }
+    return out;
+}
+
+
+export async function generateLadonKey(randomBytes: Uint8Array, aid: string): Promise<Uint8Array<ArrayBuffer>> {
+    const aidBytes = new TextEncoder().encode(aid);
+    const input = new Uint8Array(randomBytes.length + aidBytes.length);
+    input.set(randomBytes);
+    input.set(aidBytes, randomBytes.length);
+
+    const hex = await hash.md5(input);
+    return new TextEncoder().encode(hex);
+}