refactor: 架构整固——分层单向化、全量 TypeScript、直接运行

- 移除 bd/mg 两平台及磁盘残留产物；清理 api-test 死脚本、musicSdk/message+options 死模块、infSign vendor - musicSdk/ 改名 sdk/；src/common、src/auth、src/apis 整体移入 sdk/，依赖方向定为 src → sdk 严格单向 - src/ 手写 JS 全量转 .ts，删除 JS 类型垫片 modules.d.ts；源码 import 统一 .ts 后缀 - Node 原生类型剥离直接运行 .ts（engines >=22.18），取消 tsc 发射产物，tsc 仅类型检查（pnpm typecheck） - 删除 kwdes 备用实现与 src/index.ts 转发垫片；测试移至 test/smoke-test.ts - common/request.ts 补显式导出类型；修复 set-cookie 单值形态、ApiError 类字段等隐患验证：tsc 零错误，smoke-test 41/41
2026-09-25 23:06:23 +08:00
1 parent c8c939aa32
commit 354df2e739
@@ -0,0 +1,8 @@
+// IPC 事件名
+
+export const WIN_MAIN_RENDERER_EVENT_NAME = {
+  handle_kw_decode_lyric: 'handle_kw_decode_lyric',
+  handle_tx_decode_lyric: 'handle_tx_decode_lyric',
+}
+
+export default { WIN_MAIN_RENDERER_EVENT_NAME }
@@ -0,0 +1,66 @@
+// 歌词解码（原主进程 IPC 处理器的纯 JS 实现）
+// - handle_kw_decode_lyric: 酷我歌词（inflate + yeelion XOR + gb18030）
+//   算法来源: kw 桌面端歌词解码实现
+// - handle_tx_decode_lyric: QQ音乐歌词（qrc 解码：hex → XOR 偏移 → deflate）
+//   qrc 算法来源: 开源 qrc 解码器（ZhuYiQing/qrcDecode 纯 JS 版）
+
+import zlib from 'node:zlib'
+import iconv from 'iconv-lite'
+
+// ==================== 酷我 ====================
+
+const handleInflate = (data: Buffer): Promise<Buffer> => new Promise((resolve, reject) => {
+  zlib.inflate(data, (err, result) => {
+    if (err) return reject(err)
+    resolve(result)
+  })
+})
+
+const buf_key = Buffer.from('yeelion')
+const buf_key_len = buf_key.length
+
+const decodeKwLyric = async(buf, isGetLyricx) => {
+  if (buf.toString('utf8', 0, 10) != 'tp=content') return ''
+  const lrcData = await handleInflate(buf.subarray(buf.indexOf('\r\n\r\n') + 4))
+
+  if (!isGetLyricx) return iconv.decode(lrcData, 'gb18030')
+
+  const buf_str = Buffer.from(lrcData.toString(), 'base64')
+  const buf_str_len = buf_str.length
+  const output = new Uint8Array(buf_str_len)
+  let i = 0
+  while (i < buf_str_len) {
+    let j = 0
+    while (j < buf_key_len && i < buf_str_len) {
+      output[i] = buf_str[i] ^ buf_key[j]
+      i++
+      j++
+    }
+  }
+
+  return iconv.decode(Buffer.from(output), 'gb18030')
+}
+
+/**
+ * 酷我歌词解码
+ * @param {{ lrcBase64: string, isGetLyricx: boolean }} params
+ * @returns {Promise<string>} 解码后歌词的 base64
+ */
+export const handleKwDecodeLyric = async({ lrcBase64, isGetLyricx }) => {
+  const lrc = await decodeKwLyric(Buffer.from(lrcBase64, 'base64'), isGetLyricx)
+  return Buffer.from(lrc).toString('base64')
+}
+
+// ==================== QQ音乐（qrc） ====================
+
+import { decodeQrc } from './qrcDecode.ts'
+
+/**
+ * QQ音乐歌词解码
+ * @param {{ lrc: string, tlrc: string, rlrc: string }} params 均为十六进制字符串
+ * @returns {Promise<{lyric: string, tlyric: string, rlyric: string}>}
+ */
+export const handleTxDecodeLyric = async({ lrc, tlrc, rlrc }) => {
+  const [lyric, tlyric, rlyric] = await Promise.all([decodeQrc(lrc), decodeQrc(tlrc), decodeQrc(rlrc)])
+  return { lyric, tlyric, rlyric }
+}
@@ -0,0 +1,78 @@
+// 酷狗 krc 歌词解码
+
+import zlib from 'node:zlib'
+import { decodeName } from '../utils.ts'
+
+// 基于社区通用的 krc 解析思路
+const enc_key = Buffer.from([0x40, 0x47, 0x61, 0x77, 0x5e, 0x32, 0x74, 0x47, 0x51, 0x36, 0x31, 0x2d, 0xce, 0xd2, 0x6e, 0x69])
+
+const decodeLyric = str => new Promise((resolve, reject) => {
+  if (!str.length) return
+  const buf_str = Buffer.from(str, 'base64').subarray(4)
+  for (let i = 0, len = buf_str.length; i < len; i++) {
+    buf_str[i] = buf_str[i] ^ enc_key[i % 16]
+  }
+  zlib.inflate(buf_str, (err, result) => {
+    if (err) return reject(err)
+    resolve(result.toString())
+  })
+})
+
+const headExp = /^.*\[id:\$\w+\]\n/
+
+const parseLyric = str => {
+  str = str.replace(/\r/g, '')
+  if (headExp.test(str)) str = str.replace(headExp, '')
+  let trans = str.match(/\[language:([\w=\\/+]+)\]/)
+  let lyric
+  let rlyric
+  let tlyric
+  if (trans) {
+    str = str.replace(/\[language:[\w=\\/+]+\]\n/, '')
+    let json = JSON.parse(Buffer.from(trans[1], 'base64').toString())
+    for (const item of json.content) {
+      switch (item.type) {
+        case 0:
+          rlyric = item.lyricContent
+          break
+        case 1:
+          tlyric = item.lyricContent
+          break
+      }
+    }
+  }
+  let i = 0
+  let yrc = str.replace(/\[((\d+),\d+)\].*/g, str => {
+    let result = str.match(/\[((\d+),\d+)\].*/)
+    let time: any = parseInt(result[2])
+    let ms = time % 1000
+    time /= 1000
+    let m = Math.trunc(time / 60).toString().padStart(2, '0')
+    time %= 60
+    let s = Math.trunc(time).toString().padStart(2, '0')
+    time = `${m}:${s}.${ms}`
+    if (rlyric) rlyric[i] = `[${time}]${rlyric[i]?.join('') ?? ''}`
+    if (tlyric) tlyric[i] = `[${time}]${tlyric[i]?.join('') ?? ''}`
+    i++
+    return str.replace(result[1], time)
+  })
+  rlyric = rlyric ? rlyric.join('\n') : ''
+  tlyric = tlyric ? tlyric.join('\n') : ''
+  yrc = yrc.replace(/<(\d+,\d+),\d+>/g, '<$1>')
+  yrc = decodeName(yrc)
+  lyric = yrc.replace(/<\d+,\d+>/g, '')
+  rlyric = decodeName(rlyric)
+  tlyric = decodeName(tlyric)
+  return {
+    lyric,
+    tlyric,
+    rlyric,
+    yrc,
+  }
+}
+
+export const decodeKrc = async data => {
+  return decodeLyric(data).then(parseLyric)
+}
+
+export default { decodeKrc }
@@ -0,0 +1,10 @@
+// 请求提示消息
+
+export const requestMsg = {
+  cancelRequest: '请求已取消',
+  fail: '请求失败',
+  timeout: '请求超时',
+  tooManyRequests: '请求过多',
+  notConnectNetwork: '无法连接到服务器',
+  unachievable: '无法访问',
+}
@@ -0,0 +1,252 @@
+import { inflate, constants } from 'zlib'
+
+/**
+ * QRC 歌词解密（3DES-ECB + zlib inflate）
+ *
+ * 由原 C++ native 插件（qrc_decode.node）1:1 移植为纯 JS 实现。
+ * 加密算法为标准 3DES（DES-EDE3，ECB 模式、无填充），密钥固定。
+ * 数据流程：hex 字符串 -> 字节 -> 3DES 解密 -> zlib inflate -> UTF-8 文本。
+ */
+
+const DES_ENCRYPT = 1
+const DES_DECRYPT = 0
+
+// DES S-box。注意：QRC 使用的是非标准 DES 变体，
+// 其中 S2[23]=15、S4[53]=10 两处与标准 DES 不同（标准为 14、1）。
+// 这两个值与原 native 插件（qrc_decode.node）二进制完全一致，不可改为标准值，
+// 否则解密结果错误。下表逐字节对应原 C++ 实现。
+const sbox = [
+  [
+    14, 4, 13, 1, 2, 15, 11, 8, 3, 10, 6, 12, 5, 9, 0, 7, 0, 15, 7, 4, 14, 2, 13, 1, 10, 6, 12, 11, 9, 5, 3, 8,
+    4, 1, 14, 8, 13, 6, 2, 11, 15, 12, 9, 7, 3, 10, 5, 0, 15, 12, 8, 2, 4, 9, 1, 7, 5, 11, 3, 14, 10, 0, 6, 13,
+  ],
+  [
+    15, 1, 8, 14, 6, 11, 3, 4, 9, 7, 2, 13, 12, 0, 5, 10, 3, 13, 4, 7, 15, 2, 8, 15, 12, 0, 1, 10, 6, 9, 11, 5,
+    0, 14, 7, 11, 10, 4, 13, 1, 5, 8, 12, 6, 9, 3, 2, 15, 13, 8, 10, 1, 3, 15, 4, 2, 11, 6, 7, 12, 0, 5, 14, 9,
+  ],
+  [
+    10, 0, 9, 14, 6, 3, 15, 5, 1, 13, 12, 7, 11, 4, 2, 8, 13, 7, 0, 9, 3, 4, 6, 10, 2, 8, 5, 14, 12, 11, 15, 1,
+    13, 6, 4, 9, 8, 15, 3, 0, 11, 1, 2, 12, 5, 10, 14, 7, 1, 10, 13, 0, 6, 9, 8, 7, 4, 15, 14, 3, 11, 5, 2, 12,
+  ],
+  [
+    7, 13, 14, 3, 0, 6, 9, 10, 1, 2, 8, 5, 11, 12, 4, 15, 13, 8, 11, 5, 6, 15, 0, 3, 4, 7, 2, 12, 1, 10, 14, 9,
+    10, 6, 9, 0, 12, 11, 7, 13, 15, 1, 3, 14, 5, 2, 8, 4, 3, 15, 0, 6, 10, 10, 13, 8, 9, 4, 5, 11, 12, 7, 2, 14,
+  ],
+  [
+    2, 12, 4, 1, 7, 10, 11, 6, 8, 5, 3, 15, 13, 0, 14, 9, 14, 11, 2, 12, 4, 7, 13, 1, 5, 0, 15, 10, 3, 9, 8, 6,
+    4, 2, 1, 11, 10, 13, 7, 8, 15, 9, 12, 5, 6, 3, 0, 14, 11, 8, 12, 7, 1, 14, 2, 13, 6, 15, 0, 9, 10, 4, 5, 3,
+  ],
+  [
+    12, 1, 10, 15, 9, 2, 6, 8, 0, 13, 3, 4, 14, 7, 5, 11, 10, 15, 4, 2, 7, 12, 9, 5, 6, 1, 13, 14, 0, 11, 3, 8,
+    9, 14, 15, 5, 2, 8, 12, 3, 7, 0, 4, 10, 1, 13, 11, 6, 4, 3, 2, 12, 9, 5, 15, 10, 11, 14, 1, 7, 6, 0, 8, 13,
+  ],
+  [
+    4, 11, 2, 14, 15, 0, 8, 13, 3, 12, 9, 7, 5, 10, 6, 1, 13, 0, 11, 7, 4, 9, 1, 10, 14, 3, 5, 12, 2, 15, 8, 6,
+    1, 4, 11, 13, 12, 3, 7, 14, 10, 15, 6, 8, 0, 5, 9, 2, 6, 11, 13, 8, 1, 4, 10, 7, 9, 5, 0, 15, 14, 2, 3, 12,
+  ],
+  [
+    13, 2, 8, 4, 6, 15, 11, 1, 10, 9, 3, 14, 5, 0, 12, 7, 1, 15, 13, 8, 10, 3, 7, 4, 12, 5, 6, 11, 0, 14, 9, 2,
+    7, 11, 4, 1, 9, 12, 14, 2, 0, 6, 10, 13, 15, 3, 5, 8, 2, 1, 14, 7, 4, 10, 8, 13, 15, 12, 9, 0, 3, 5, 6, 11,
+  ],
+]
+
+const key_rnd_shift = [1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1]
+const key_perm_c = [
+  56, 48, 40, 32, 24, 16, 8, 0, 57, 49, 41, 33, 25, 17, 9, 1, 58, 50, 42, 34, 26, 18, 10, 2, 59, 51, 43, 35,
+]
+const key_perm_d = [
+  62, 54, 46, 38, 30, 22, 14, 6, 61, 53, 45, 37, 29, 21, 13, 5, 60, 52, 44, 36, 28, 20, 12, 4, 27, 19, 11, 3,
+]
+const key_compression = [
+  13, 16, 10, 23, 0, 4, 2, 27, 14, 5, 20, 9, 22, 18, 11, 3, 25, 7, 15, 6, 26, 19, 12, 1, 40, 51, 30, 36, 46,
+  54, 29, 39, 50, 44, 32, 47, 43, 48, 38, 55, 33, 52, 45, 41, 49, 35, 28, 31,
+]
+
+// 全部以无符号 32 位处理，>>> 0 保证溢出行为与 C++ uint32_t 一致
+const bitnum = (a, b, c) => (((a[((b / 32) | 0) * 4 + 3 - (((b % 32) / 8) | 0)] >>> (7 - (b % 8))) & 1) << c) >>> 0
+
+const bitnum_intr = (a, b, c) => (((a >>> (31 - b)) & 1) << c) >>> 0
+
+const bitnum_intl = (a, b, c) => (((((a << b) >>> 0) & 0x80000000) >>> 0) >>> c) >>> 0
+
+const sbox_bit = a => (a & 32) | ((a & 31) >>> 1) | ((a & 1) << 4)
+
+// 初始置换：返回 [s0, s1]
+const initial_permutation = (input) => {
+  const s0 = (
+    bitnum(input, 57, 31) | bitnum(input, 49, 30) | bitnum(input, 41, 29) | bitnum(input, 33, 28) |
+    bitnum(input, 25, 27) | bitnum(input, 17, 26) | bitnum(input, 9, 25) | bitnum(input, 1, 24) |
+    bitnum(input, 59, 23) | bitnum(input, 51, 22) | bitnum(input, 43, 21) | bitnum(input, 35, 20) |
+    bitnum(input, 27, 19) | bitnum(input, 19, 18) | bitnum(input, 11, 17) | bitnum(input, 3, 16) |
+    bitnum(input, 61, 15) | bitnum(input, 53, 14) | bitnum(input, 45, 13) | bitnum(input, 37, 12) |
+    bitnum(input, 29, 11) | bitnum(input, 21, 10) | bitnum(input, 13, 9) | bitnum(input, 5, 8) |
+    bitnum(input, 63, 7) | bitnum(input, 55, 6) | bitnum(input, 47, 5) | bitnum(input, 39, 4) |
+    bitnum(input, 31, 3) | bitnum(input, 23, 2) | bitnum(input, 15, 1) | bitnum(input, 7, 0)
+  ) >>> 0
+  const s1 = (
+    bitnum(input, 56, 31) | bitnum(input, 48, 30) | bitnum(input, 40, 29) | bitnum(input, 32, 28) |
+    bitnum(input, 24, 27) | bitnum(input, 16, 26) | bitnum(input, 8, 25) | bitnum(input, 0, 24) |
+    bitnum(input, 58, 23) | bitnum(input, 50, 22) | bitnum(input, 42, 21) | bitnum(input, 34, 20) |
+    bitnum(input, 26, 19) | bitnum(input, 18, 18) | bitnum(input, 10, 17) | bitnum(input, 2, 16) |
+    bitnum(input, 60, 15) | bitnum(input, 52, 14) | bitnum(input, 44, 13) | bitnum(input, 36, 12) |
+    bitnum(input, 28, 11) | bitnum(input, 20, 10) | bitnum(input, 12, 9) | bitnum(input, 4, 8) |
+    bitnum(input, 62, 7) | bitnum(input, 54, 6) | bitnum(input, 46, 5) | bitnum(input, 38, 4) |
+    bitnum(input, 30, 3) | bitnum(input, 22, 2) | bitnum(input, 14, 1) | bitnum(input, 6, 0)
+  ) >>> 0
+  return [s0, s1]
+}
+
+// 逆置换：将 s0/s1 写回 8 字节 out
+const inverse_permutation = (s0, s1, out) => {
+  out[3] = (bitnum_intr(s1, 7, 7) | bitnum_intr(s0, 7, 6) | bitnum_intr(s1, 15, 5) | bitnum_intr(s0, 15, 4) | bitnum_intr(s1, 23, 3) | bitnum_intr(s0, 23, 2) | bitnum_intr(s1, 31, 1) | bitnum_intr(s0, 31, 0)) & 0xff
+  out[2] = (bitnum_intr(s1, 6, 7) | bitnum_intr(s0, 6, 6) | bitnum_intr(s1, 14, 5) | bitnum_intr(s0, 14, 4) | bitnum_intr(s1, 22, 3) | bitnum_intr(s0, 22, 2) | bitnum_intr(s1, 30, 1) | bitnum_intr(s0, 30, 0)) & 0xff
+  out[1] = (bitnum_intr(s1, 5, 7) | bitnum_intr(s0, 5, 6) | bitnum_intr(s1, 13, 5) | bitnum_intr(s0, 13, 4) | bitnum_intr(s1, 21, 3) | bitnum_intr(s0, 21, 2) | bitnum_intr(s1, 29, 1) | bitnum_intr(s0, 29, 0)) & 0xff
+  out[0] = (bitnum_intr(s1, 4, 7) | bitnum_intr(s0, 4, 6) | bitnum_intr(s1, 12, 5) | bitnum_intr(s0, 12, 4) | bitnum_intr(s1, 20, 3) | bitnum_intr(s0, 20, 2) | bitnum_intr(s1, 28, 1) | bitnum_intr(s0, 28, 0)) & 0xff
+  out[7] = (bitnum_intr(s1, 3, 7) | bitnum_intr(s0, 3, 6) | bitnum_intr(s1, 11, 5) | bitnum_intr(s0, 11, 4) | bitnum_intr(s1, 19, 3) | bitnum_intr(s0, 19, 2) | bitnum_intr(s1, 27, 1) | bitnum_intr(s0, 27, 0)) & 0xff
+  out[6] = (bitnum_intr(s1, 2, 7) | bitnum_intr(s0, 2, 6) | bitnum_intr(s1, 10, 5) | bitnum_intr(s0, 10, 4) | bitnum_intr(s1, 18, 3) | bitnum_intr(s0, 18, 2) | bitnum_intr(s1, 26, 1) | bitnum_intr(s0, 26, 0)) & 0xff
+  out[5] = (bitnum_intr(s1, 1, 7) | bitnum_intr(s0, 1, 6) | bitnum_intr(s1, 9, 5) | bitnum_intr(s0, 9, 4) | bitnum_intr(s1, 17, 3) | bitnum_intr(s0, 17, 2) | bitnum_intr(s1, 25, 1) | bitnum_intr(s0, 25, 0)) & 0xff
+  out[4] = (bitnum_intr(s1, 0, 7) | bitnum_intr(s0, 0, 6) | bitnum_intr(s1, 8, 5) | bitnum_intr(s0, 8, 4) | bitnum_intr(s1, 16, 3) | bitnum_intr(s0, 16, 2) | bitnum_intr(s1, 24, 1) | bitnum_intr(s0, 24, 0)) & 0xff
+}
+
+// Feistel 轮函数 f(state, key)
+const des_f = (state, key) => {
+  const t1 = (
+    bitnum_intl(state, 31, 0) | (((state & 0xF0000000) >>> 0) >>> 1) | bitnum_intl(state, 4, 5) |
+    bitnum_intl(state, 3, 6) | (((state & 0x0F000000) >>> 0) >>> 3) | bitnum_intl(state, 8, 11) |
+    bitnum_intl(state, 7, 12) | (((state & 0x00F00000) >>> 0) >>> 5) | bitnum_intl(state, 12, 17) |
+    bitnum_intl(state, 11, 18) | (((state & 0x000F0000) >>> 0) >>> 7) | bitnum_intl(state, 16, 23)
+  ) >>> 0
+  const t2 = (
+    bitnum_intl(state, 15, 0) | (((state & 0x0000F000) << 15) >>> 0) | bitnum_intl(state, 20, 5) |
+    bitnum_intl(state, 19, 6) | (((state & 0x00000F00) << 13) >>> 0) | bitnum_intl(state, 24, 11) |
+    bitnum_intl(state, 23, 12) | (((state & 0x000000F0) << 11) >>> 0) | bitnum_intl(state, 28, 17) |
+    bitnum_intl(state, 27, 18) | (((state & 0x0000000F) << 9) >>> 0) | bitnum_intl(state, 0, 23)
+  ) >>> 0
+
+  const lrgstate = [
+    (t1 >>> 24) & 0xFF, (t1 >>> 16) & 0xFF, (t1 >>> 8) & 0xFF,
+    (t2 >>> 24) & 0xFF, (t2 >>> 16) & 0xFF, (t2 >>> 8) & 0xFF,
+  ]
+  for (let i = 0; i < 6; i++) lrgstate[i] ^= key[i]
+
+  let s = (
+    (sbox[0][sbox_bit(lrgstate[0] >>> 2)] << 28) |
+    (sbox[1][sbox_bit(((lrgstate[0] & 0x03) << 4) | (lrgstate[1] >>> 4))] << 24) |
+    (sbox[2][sbox_bit(((lrgstate[1] & 0x0F) << 2) | (lrgstate[2] >>> 6))] << 20) |
+    (sbox[3][sbox_bit(lrgstate[2] & 0x3F)] << 16) |
+    (sbox[4][sbox_bit(lrgstate[3] >>> 2)] << 12) |
+    (sbox[5][sbox_bit(((lrgstate[3] & 0x03) << 4) | (lrgstate[4] >>> 4))] << 8) |
+    (sbox[6][sbox_bit(((lrgstate[4] & 0x0F) << 2) | (lrgstate[5] >>> 6))] << 4) |
+    sbox[7][sbox_bit(lrgstate[5] & 0x3F)]
+  ) >>> 0
+
+  return (
+    bitnum_intl(s, 15, 0) | bitnum_intl(s, 6, 1) | bitnum_intl(s, 19, 2) | bitnum_intl(s, 20, 3) |
+    bitnum_intl(s, 28, 4) | bitnum_intl(s, 11, 5) | bitnum_intl(s, 27, 6) | bitnum_intl(s, 16, 7) |
+    bitnum_intl(s, 0, 8) | bitnum_intl(s, 14, 9) | bitnum_intl(s, 22, 10) | bitnum_intl(s, 25, 11) |
+    bitnum_intl(s, 4, 12) | bitnum_intl(s, 17, 13) | bitnum_intl(s, 30, 14) | bitnum_intl(s, 9, 15) |
+    bitnum_intl(s, 1, 16) | bitnum_intl(s, 7, 17) | bitnum_intl(s, 23, 18) | bitnum_intl(s, 13, 19) |
+    bitnum_intl(s, 31, 20) | bitnum_intl(s, 26, 21) | bitnum_intl(s, 2, 22) | bitnum_intl(s, 8, 23) |
+    bitnum_intl(s, 18, 24) | bitnum_intl(s, 12, 25) | bitnum_intl(s, 29, 26) | bitnum_intl(s, 5, 27) |
+    bitnum_intl(s, 21, 28) | bitnum_intl(s, 10, 29) | bitnum_intl(s, 3, 30) | bitnum_intl(s, 24, 31)
+  ) >>> 0
+}
+
+// 单次 DES 加/解密一个 8 字节分组（轮密钥 schedule 为 16x6）
+const des_crypt = (input, schedule, output) => {
+  let [s0, s1] = initial_permutation(input)
+  for (let i = 0; i < 15; i++) {
+    const prev = s1
+    s1 = (des_f(s1, schedule[i]) ^ s0) >>> 0
+    s0 = prev
+  }
+  s0 = (des_f(s1, schedule[15]) ^ s0) >>> 0
+  inverse_permutation(s0, s1, output)
+}
+
+// 生成 16 轮子密钥
+const key_schedule = (key, mode) => {
+  const schedule = Array.from({ length: 16 }, () => new Uint8Array(6))
+  let c = 0
+  let d = 0
+  for (let i = 0; i < 28; i++) {
+    c = (c | bitnum(key, key_perm_c[i], 31 - i)) >>> 0
+    d = (d | bitnum(key, key_perm_d[i], 31 - i)) >>> 0
+  }
+  for (let i = 0; i < 16; i++) {
+    c = ((((c << key_rnd_shift[i]) >>> 0) | (c >>> (28 - key_rnd_shift[i]))) & 0xFFFFFFF0) >>> 0
+    d = ((((d << key_rnd_shift[i]) >>> 0) | (d >>> (28 - key_rnd_shift[i]))) & 0xFFFFFFF0) >>> 0
+    const togen = mode === DES_DECRYPT ? 15 - i : i
+    for (let j = 0; j < 24; j++) {
+      schedule[togen][(j / 8) | 0] |= bitnum_intr(c, key_compression[j], 7 - (j % 8))
+    }
+    for (let j = 24; j < 48; j++) {
+      schedule[togen][(j / 8) | 0] |= bitnum_intr(d, key_compression[j] - 27, 7 - (j % 8))
+    }
+  }
+  return schedule
+}
+
+// 3DES（EDE3）密钥编排，返回 3 组 schedule
+const tripledes_key_setup = (key, mode) => {
+  if (mode === DES_ENCRYPT) {
+    return [
+      key_schedule(key.subarray(0, 8), DES_ENCRYPT),
+      key_schedule(key.subarray(8, 16), DES_DECRYPT),
+      key_schedule(key.subarray(16, 24), DES_ENCRYPT),
+    ]
+  }
+  return [
+    key_schedule(key.subarray(16, 24), DES_DECRYPT),
+    key_schedule(key.subarray(8, 16), DES_ENCRYPT),
+    key_schedule(key.subarray(0, 8), DES_DECRYPT),
+  ]
+}
+
+// 3DES 加/解密一个 8 字节分组
+const tripledes_crypt = (input, schedule, output) => {
+  const buf = new Uint8Array(8)
+  des_crypt(input, schedule[0], buf)
+  des_crypt(buf, schedule[1], output)
+  des_crypt(output, schedule[2], buf)
+  output.set(buf)
+}
+
+// QRC 固定密钥：!@#)(*$%123ZXC!@!@#)(NHL
+const QRC_KEY = Buffer.from([
+  0x21, 0x40, 0x23, 0x29, 0x28, 0x2a, 0x24, 0x25, 0x31, 0x32, 0x33, 0x5a,
+  0x58, 0x43, 0x21, 0x40, 0x21, 0x40, 0x23, 0x29, 0x28, 0x4e, 0x48, 0x4c,
+])
+
+const handleInflate = (data: Buffer): Promise<Buffer> => new Promise((resolve, reject) => {
+  // Z_SYNC_FLUSH：容忍尾部不完整的 zlib 流（对应原实现忽略 Z_BUF_ERROR 的行为）
+  inflate(data, { finishFlush: constants.Z_SYNC_FLUSH }, (err, result) => {
+    if (err) reject(err)
+    else resolve(result)
+  })
+})
+/**
+ * 解密腾讯 QRC 歌词。
+ * @param {string} hexData 服务端返回的十六进制字符串
+ * @returns {Promise<string>} 解密并解压后的歌词文本（解析失败时返回空字符串）
+ */
+export const decodeQrc = async(hexData) => {
+  if (!hexData || hexData.length % 2 !== 0) return ''
+  const encrypted = Buffer.from(hexData, 'hex')
+  if (encrypted.length === 0) return ''
+
+  const schedule = tripledes_key_setup(QRC_KEY, DES_DECRYPT)
+
+  const block = new Uint8Array(8)
+  for (let i = 0; i + 8 <= encrypted.length; i += 8) {
+    tripledes_crypt(encrypted.subarray(i, i + 8), schedule, block)
+    encrypted.set(block, i)
+  }
+
+  try {
+    const result = await handleInflate(encrypted)
+    return result.toString('utf8')
+  } catch {
+    return ''
+  }
+}
@@ -0,0 +1,33 @@
+// 渲染器 IPC 桥（替代 Electron ipcRenderer.invoke）
+// 服务器环境下 IPC 调用直接映射到本地实现：
+//   handle_kw_decode_lyric → 酷我歌词解码（见 lyricDecode.js）
+//   handle_tx_decode_lyric → QQ音乐歌词解码（见 lyricDecode.js）
+
+import { handleKwDecodeLyric, handleTxDecodeLyric } from './lyricDecode.ts'
+
+const localHandlers = {
+  [WIN_MAIN_RENDERER_EVENT_NAME.handle_kw_decode_lyric]: handleKwDecodeLyric,
+  [WIN_MAIN_RENDERER_EVENT_NAME.handle_tx_decode_lyric]: handleTxDecodeLyric,
+}
+
+/**
+ * 调用主进程能力（本地直调）
+ * @param {string} name 事件名
+ * @param {*} params 参数
+ */
+export const rendererInvoke = async(name, params) => {
+  const handler = localHandlers[name]
+  if (!handler) throw new Error(`Unsupported invoke: ${name}`)
+  return handler(params)
+}
+
+export const rendererSend = () => {}
+export const rendererOn = () => {}
+export const rendererOnce = () => {}
+export const rendererOff = () => {}
+export const rendererOffAll = () => {}
+export const rendererSendSync = () => {}
+
+import { WIN_MAIN_RENDERER_EVENT_NAME } from './ipcNames.ts'
+
+export default { rendererInvoke, rendererSend, rendererOn, rendererOnce, rendererOff, rendererOffAll, rendererSendSync }
@@ -0,0 +1,204 @@
+// 网络请求模块
+// 接口与原版保持一致：
+//   httpFetch(url, { method, headers, body, form, timeout, lookup, family })
+//     → { promise, cancelHttp }
+//   promise resolve → { statusCode, body, headers, raw }
+//     - body：JSON 已解析对象，或原始字符串（HTML/文本）
+//     - raw：响应体 Buffer
+//   promise reject → 错误（timeout 请求超时 / canceled 主动取消）
+// 注意：promise 与 cancelHttp 均为普通可赋值属性（SDK 多处会重写 promise）
+
+import http from 'node:http'
+import https from 'node:https'
+import zlib from 'node:zlib'
+import { URL } from 'node:url'
+import { requestMsg } from './message.ts'
+
+const MAX_BUFFER_SIZE = 64 * 1024 * 1024 // 64MB
+
+export interface HttpOptions {
+  method?: string
+  headers?: Record<string, any>
+  body?: any
+  form?: Record<string, any>
+  timeout?: number
+  lookup?: any
+  family?: number
+  [key: string]: any
+}
+
+export interface HttpFetchResponse {
+  statusCode: number
+  statusMessage?: string
+  headers: Record<string, any>
+  body: any
+  raw: Buffer
+}
+
+export interface HttpRequestObject {
+  promise: Promise<HttpFetchResponse>
+  cancelHttp(): void
+  isCancelled: boolean
+  requestObj?: any
+  cancelFn?: ((err: any) => void) | null
+  [key: string]: any
+}
+
+const defaultHeaders = {
+  'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/69.0.3497.100 Safari/537.36',
+}
+
+const parseBody = (raw: Buffer): any => {
+  if (!raw || !raw.length) return null
+  const text = raw.toString('utf8')
+  // 与原版一致：无论 content-type 都尝试 JSON 解析，失败则返回原始文本
+  try {
+    return JSON.parse(text)
+  } catch {
+    return text
+  }
+}
+
+/**
+ * 发起请求（返回带 promise 与 cancelHttp 的对象）
+ */
+const buildHttpPromise = (url: string, options: HttpOptions = {}): HttpRequestObject => {
+  const method = (options.method || 'GET').toUpperCase()
+  const obj: HttpRequestObject = {
+    promise: null as any,
+    isCancelled: false,
+    cancelHttp: () => {
+      if (!obj.requestObj) {
+        obj.isCancelled = true
+        return
+      }
+      obj.requestObj.destroy(new Error('Canceled'))
+      obj.requestObj = null
+      // 取消后置空是运行时事实，但公开类型保持非空（消费方总是先取 promise 再取消）
+      ;(obj as any).promise = (obj as any).cancelHttp = null
+      obj.cancelFn?.(new Error('Canceled'))
+      obj.cancelFn = null
+    },
+  }
+  obj.promise = new Promise((resolve, reject) => {
+    obj.cancelFn = reject
+
+    let parsedUrl: URL
+    try {
+      parsedUrl = new URL(url)
+    } catch (err) {
+      reject(err)
+      return
+    }
+
+    const isHttps = parsedUrl.protocol === 'https:'
+    const client = isHttps ? https : http
+
+    // 数据体构造：body（对象/字符串/Buffer）与 form（对象 → urlencoded）
+    let body: string | any = null
+    let isForm = false
+    if (options.form) {
+      const formBody = new URLSearchParams()
+      for (const key of Object.keys(options.form)) {
+        const value = options.form[key]
+        if (value == null) continue
+        formBody.append(key, typeof value === 'object' ? JSON.stringify(value) : value)
+      }
+      body = formBody.toString()
+      isForm = true
+    } else if (options.body) {
+      body = typeof options.body === 'object' && !Buffer.isBuffer(options.body) ? JSON.stringify(options.body) : options.body
+    }
+
+    const headers: Record<string, any> = { ...defaultHeaders, ...(options.headers || {}) }
+    if (body && !headers['content-type'] && !headers['Content-Type']) {
+      headers['content-type'] = isForm ? 'application/x-www-form-urlencoded' : 'application/json'
+    }
+    if (body) headers['content-length'] = Buffer.byteLength(body)
+
+    const requestOptions: Record<string, any> = {
+      method,
+      headers,
+      family: options.family || undefined,
+    }
+    if (options.lookup) requestOptions.lookup = options.lookup
+
+    const req = client.request(parsedUrl, requestOptions, res => {
+      obj.requestObj = null
+      obj.cancelFn = null
+      const statusCode = res.statusCode ?? 0
+
+      let stream: any = res
+      switch (res.headers['content-encoding']) {
+        case 'gzip': stream = res.pipe(zlib.createGunzip()); break
+        case 'deflate': stream = res.pipe(zlib.createInflate()); break
+        case 'br': stream = res.pipe(zlib.createBrotliDecompress()); break
+      }
+
+      const chunks: Buffer[] = []
+      let size = 0
+      stream.on('data', chunk => {
+        size += chunk.length
+        if (size > MAX_BUFFER_SIZE) {
+          stream.destroy(new Error('Response too large'))
+          return
+        }
+        chunks.push(chunk)
+      })
+      stream.on('error', err => reject(err))
+      stream.on('end', () => {
+        const raw = Buffer.concat(chunks)
+        resolve({
+          statusCode,
+          headers: res.headers,
+          body: parseBody(raw),
+          raw,
+        })
+      })
+    })
+
+    obj.requestObj = req
+
+    req.on('error', err => {
+      const e = err as any
+      if (obj.isCancelled || e.canceled) e.canceled = true
+      reject(e)
+    })
+
+    if (options.timeout) {
+      req.setTimeout(options.timeout, () => {
+        const err = new Error('Request timeout') as any
+        err.timeout = true
+        req.destroy(err)
+      })
+    }
+
+    if (body) req.write(body)
+    req.end()
+  })
+  return obj
+}
+
+/**
+ * 请求超时/断网错误统一处理（与原版行为一致）
+ */
+export const httpFetch = (url: string, options: HttpOptions = { method: 'get' }): HttpRequestObject => {
+  const requestObj = buildHttpPromise(url, options)
+  requestObj.promise = requestObj.promise.catch((err: any) => {
+    if (err.canceled) return Promise.reject(err)
+    switch (err.code) {
+      case 'ETIMEDOUT':
+      case 'ESOCKETTIMEDOUT':
+        return Promise.reject(new Error(requestMsg.timeout))
+      case 'ENOTFOUND':
+        return Promise.reject(new Error(requestMsg.notConnectNetwork))
+      case 'ECONNRESET':
+        return Promise.reject(new Error(requestMsg.fail))
+      default:
+        return Promise.reject(err)
+    }
+  })
+  return requestObj
+}
+
+export default { httpFetch }
@@ -0,0 +1,101 @@
+// 通用工具函数
+
+import crypto from 'node:crypto'
+
+/** MD5 十六进制串 */
+export const toMD5 = str => crypto.createHash('md5').update(str).digest('hex')
+
+/**
+ * 将大小格式化为可读字符串
+ * @param {number} size 字节数
+ */
+export const sizeFormate = size => {
+  // https://gist.github.com/thomseddon/3511330
+  if (!size) return '0 B'
+  const units = ['B', 'KB', 'MB', 'GB', 'TB']
+  const number = Math.floor(Math.log(size) / Math.log(1024))
+  return `${(size / Math.pow(1024, Math.floor(number))).toFixed(2)} ${units[number]}`
+}
+
+/**
+ * 将秒数格式化为 mm:ss
+ * @param {number} time 秒
+ */
+export const formatPlayTime = time => {
+  if (Number.isNaN(time) || time < 0) time = 0
+  const m = Math.trunc(time / 60)
+  const s = Math.trunc(time % 60)
+  return m == 0 && s == 0 ? '--/--' : `${m < 10 ? '0' + m : m}:${s < 10 ? '0' + s : s}`
+}
+
+/**
+ * 将时间对象/时间戳转成日期字符串
+ * @param {Date|number|string} _date 时间
+ * @param {string} [format='Y-M-D h:m:s'] 格式模板（Y/M/D/h/m/s）
+ */
+export const dateFormat = (_date, format = 'Y-M-D h:m:s') => {
+  if (!_date) return ''
+  let date
+  switch (typeof _date) {
+    case 'string':
+      if (!_date.includes('T')) _date = _date.split('.')[0].replace(/-/g, '/')
+      // fallthrough
+    case 'number':
+      date = new Date(_date)
+      break
+    case 'object':
+      date = _date
+      break
+    default:
+      return ''
+  }
+  const numFix = n => n < 10 ? '0' + n : String(n)
+  return format
+    .replace('Y', date.getFullYear().toString())
+    .replace('M', numFix(date.getMonth() + 1))
+    .replace('D', numFix(date.getDate()))
+    .replace('h', numFix(date.getHours()))
+    .replace('m', numFix(date.getMinutes()))
+    .replace('s', numFix(date.getSeconds()))
+}
+
+/**
+ * 相对时间格式化（用于评论时间）
+ * @param {number} time 毫秒时间戳
+ */
+export const dateFormat2 = time => {
+  const differ = Math.trunc((Date.now() - time) / 1000)
+  if (differ < 60) return `${differ}秒前`
+  if (differ < 3600) return `${Math.trunc(differ / 60)}分钟前`
+  if (differ < 86400) return `${Math.trunc(differ / 3600)}小时前`
+  if (differ < 2592000) return `${Math.trunc(differ / 86400)}天前`
+  return dateFormat(time)
+}
+
+/**
+ * 格式化播放量
+ * @param {number} num
+ */
+export const formatPlayCount = num => {
+  if (num > 100000000) return `${Math.trunc(num / 10000000) / 10}亿`
+  if (num > 10000) return `${Math.trunc(num / 1000) / 10}万`
+  return String(num)
+}
+
+/**
+ * 解码 HTML 实体
+ * @param {string} str
+ */
+export const decodeName = (str = '') => {
+  if (!str) return ''
+  if (typeof str !== 'string') str = String(str)
+  return str
+    .replace(/&amp;/g, '&')
+    .replace(/&lt;/g, '<')
+    .replace(/&gt;/g, '>')
+    .replace(/&quot;/g, '"')
+    .replace(/&#39;/g, "'")
+    .replace(/&apos;/g, "'")
+    .replace(/&nbsp;/g, ' ')
+    .replace(/&#(\d+);/g, (match, num) => String.fromCharCode(parseInt(num)))
+}