docs: use gitea actions badge

自动构建相关。

Reviewed-on: https://git.unlock-music.dev/um/um-react/pulls/80
Co-authored-by: 鲁树人 <lu.shuren@um-react.app>
Co-committed-by: 鲁树人 <lu.shuren@um-react.app>

.dockerignore

@@ -0,0 +1,3 @@
+dist
+node_modules
+*.log

.drone.yml

@@ -1,33 +0,0 @@
----
-kind: pipeline
-type: docker
-name: default
-
-steps:
-  - name: test & build
-    image: node:20.10.0-bookworm
-    commands:
-      # - git config --global --add safe.directory "/drone/src"
-      - corepack enable
-      - corepack prepare pnpm@latest --activate
-      - pnpm i --frozen-lockfile
-      - pnpm build
-    environment:
-      # 让 npm 使用淘宝源
-      npm_config_registry: https://registry.npmmirror.com
-
-  - name: publish
-    image: node:20.10.0-bookworm
-    environment:
-      DRONE_GITEA_SERVER: https://git.unlock-music.dev
-      GITEA_API_KEY:
-        from_secret: GITEA_API_KEY
-      NETLIFY_SITE_ID:
-        from_secret: NETLIFY_SITE_ID
-      NETLIFY_API_KEY:
-        from_secret: NETLIFY_API_KEY
-    commands:
-      # - git config --global --add safe.directory "/drone/src"
-      - python3 -m zipfile -c um-react.zip dist/.
-      # - ./scripts/publish.sh
-      - ./scripts/deploy.sh

.editorconfig

@@ -11,5 +11,5 @@ charset = utf-8
 trim_trailing_whitespace = true
 insert_final_newline = true
 
-[*.{{c,m,}js{x,on,},ts{x,}}]
+[*.{{c,m,}js{x,on,},ts{x,},y{,a}ml}]
 indent_size = 2

.env

@@ -1,4 +1,4 @@
 # Example environment file for vite to use.
 # For more information, see: https://vitejs.dev/guide/env-and-mode.html
 
-ENABLE_PERF_LOG=0
+VITE_ENABLE_PERF_LOG=0

.eslintignore

@@ -1,3 +0,0 @@
-dist/
-node_modules/
-coverage/

.eslintrc.cjs

@@ -1,27 +0,0 @@
-/* eslint-env node */
-
-module.exports = {
-  root: true,
-  env: { browser: true, es2020: true },
-  extends: [
-    'eslint:recommended',
-    'plugin:@typescript-eslint/recommended',
-    'plugin:react-hooks/recommended',
-    'prettier',
-  ],
-  parser: '@typescript-eslint/parser',
-  parserOptions: { ecmaVersion: 'latest', sourceType: 'module' },
-  plugins: ['react-refresh'],
-  rules: {
-    'react-refresh/only-export-components': 'warn',
-    '@typescript-eslint/no-unused-vars': [
-      'error',
-      {
-        varsIgnorePattern: '^_',
-        argsIgnorePattern: '^_',
-        destructuredArrayIgnorePattern: '^_',
-        ignoreRestSiblings: true,
-      },
-    ],
-  },
-};

.gitea/ISSUE_TEMPLATE/50-qqmusic-android.yaml

@@ -0,0 +1,46 @@
+name: QQ 音乐 (安卓)
+about: 解密使用「QQ 音乐」的「安卓」客户端下载的文件失败时选择该项。
+title: '[QQ音乐]: 请填写标题'
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ### 安卓客户端
+
+        你的手机需要 root 权限。注意 root 可能会导致手机保修失效，操作不当可能会导致手机变砖。
+
+        请参考 [um-react](https://um-react.netlify.app/) 上方的答疑区域获取说明。
+
+        此外请使用 Chrome 或 Firefox 浏览器，而非系统自带的浏览器或轻量浏览器，如 Via 浏览器。
+
+        ---
+
+        如果你确定你的客户端版本符合上述描述，并遇到了问题，请继续填写下面的表单。
+
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: 错误描述
+      description: |
+        请详细描述你遇到的问题，例如下载使用的客户端、提供下载后的文件、操作步骤、错误提示等你认为会帮助修正错误的信息。
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: 相关日志
+      description: 如果有相关日志，请附上。浏览器日志可以通过 F12 打开开发者工具，在 Console 选项卡中查看。
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: 检查清单
+      description: 请检查下方的快速检查清单，确保你已经完成了所有步骤。
+      options:
+        - label: 我有填写一个简单易懂的标题
+          required: true
+        - label: 我有阅读上方的说明
+          required: true
+        - label: 我有阅读 um-react 的答疑部分
+          required: true
+        - label: 我的安卓设备已获得 root 权限
+          required: true

.gitea/ISSUE_TEMPLATE/50-qqmusic.yaml

@@ -0,0 +1,63 @@
+name: QQ 音乐 (Windows/Mac)
+about: 解密使用「QQ 音乐」的「Windows」或「Mac」客户端下载的文件失败时选择该项。
+title: '[QQ音乐]: 请填写标题'
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ### Windows 客户端
+
+        目前 Windows 客户端仅支持 19.51 或更低版本下载的歌曲文件。
+
+        * [web.archive.org 镜像](https://web.archive.org/web/2023/https://dldir1v6.qq.com/music/clntupate/QQMusic_Setup_1951.exe)
+        * [通过 Telegram 下载](https://t.me/um_lsr_ch/24)
+
+        安装好客户端后可以加装更新屏蔽更新：
+
+        * [通过 Telegram 下载](https://t.me/um_lsr_ch/6)
+
+        ### Mac 客户端
+
+        目前 Mac 客户端仅支持 v8.8.0 或更低版本下载的歌曲文件。
+
+        * [通过 Telegram 下载](https://t.me/um_lsr_ch/21)
+
+        ---
+
+        如果你确定你的客户端版本符合上述描述，并遇到了问题，请继续填写下面的表单。
+
+  - type: dropdown
+    id: platform
+    attributes:
+      label: 平台
+      description: 你使用的客户端平台是…
+      options:
+        - Windows
+        - Mac
+    validations:
+      required: true
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: 错误描述
+      description: |
+        请详细描述你遇到的问题，例如下载使用的客户端、提供下载后的文件、操作步骤、错误提示等你认为会帮助修正错误的信息。
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: 相关日志
+      description: 如果有相关日志，请附上。浏览器日志可以通过 F12 打开开发者工具，在 Console 选项卡中查看。
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: 检查清单
+      description: 请检查下方的快速检查清单，确保你已经完成了所有步骤。
+      options:
+        - label: 我有填写一个简单易懂的标题
+          required: true
+        - label: 我有阅读上方的说明
+          required: true
+        - label: 我有阅读 um-react 的答疑部分
+          required: true

.gitea/ISSUE_TEMPLATE/53-kuwo-android.yaml

@@ -0,0 +1,51 @@
+name: 酷我音乐 (安卓)
+about: 解密使用「酷我音乐」的「安卓」客户端下载的文件失败时选择该项。
+title: '[酷我音乐]: 请填写标题'
+body:
+  - type: markdown
+    attributes:
+      value: |
+        ### 酷我音乐 - 安卓客户端
+
+        你的手机需要 root 权限。注意 root 可能会导致手机保修失效，操作不当可能会导致手机变砖。
+
+        请参考 [um-react](https://um-react.netlify.app/) 上方的答疑区域获取说明。
+
+        此外请使用 Chrome 或 Firefox 浏览器，而非系统自带的浏览器或轻量浏览器，如 Via 浏览器。
+
+        ※ 如果你使用酷我音乐的是所谓“破解版”，你的问题会被忽略。
+        已知部分“第三方魔改”会破坏密钥写出过程，请从官方渠道安装酷我音乐。
+
+        ---
+
+        如果你确定你的客户端版本符合上述描述，并遇到了问题，请继续填写下面的表单。
+
+  - type: textarea
+    id: what-happened
+    attributes:
+      label: 错误描述
+      description: |
+        请详细描述你遇到的问题，例如下载使用的客户端、提供下载后的文件、操作步骤、错误提示等你认为会帮助修正错误的信息。
+    validations:
+      required: true
+  - type: textarea
+    id: logs
+    attributes:
+      label: 相关日志
+      description: 如果有相关日志，请附上。浏览器日志可以通过 F12 打开开发者工具，在 Console 选项卡中查看。
+  - type: checkboxes
+    id: terms
+    attributes:
+      label: 检查清单
+      description: 请检查下方的快速检查清单，确保你已经完成了所有步骤。
+      options:
+        - label: 我有填写一个简单易懂的标题
+          required: true
+        - label: 我有阅读上方的说明
+          required: true
+        - label: 我有阅读 um-react 的答疑部分
+          required: true
+        - label: 我的安卓设备已获得 root 权限
+          required: true
+        - label: 我能使用官方渠道下载的酷我音乐客户端复现该问题
+          required: true

.gitea/ISSUE_TEMPLATE/99-default.md

@@ -0,0 +1,4 @@
+---
+name: '其它'
+about: '如果你遇到的问题不符合上述模板的描述，请选择此项。'
+---

.gitea/ISSUE_TEMPLATE/config.yml

@@ -0,0 +1 @@
+blank_issues_enabled: false

.gitea/workflows/build.yaml

@@ -0,0 +1,34 @@
+name: Build and Deploy
+on: [push]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    env:
+      npm_config_registry: https://registry.npmmirror.com
+    steps:
+      - name: Check out repository code
+        uses: actions/checkout@v4
+      - name: Setup pnpm
+        uses: pnpm/action-setup@v4.0.0
+        with:
+          standalone: true
+          run_install: |
+            - args: [--frozen-lockfile, --strict-peer-dependencies]
+      - name: Build
+        run: pnpm build
+      - name: Prepare for deployment
+        run: |
+          python3 -m zipfile -c um-react.zip dist/.
+          cp um-react.zip dist/"release-${GITHUB_SHA}.zip"
+          python3 -m zipfile -c um-react-site.zip dist/.
+      - name: Publish Artifact
+        uses: christopherhx/gitea-upload-artifact@v4
+        with:
+          name: site
+          path: dist/
+      - name: Deploy
+        env:
+          NETLIFY_SITE_ID: ${{ secrets.NETLIFY_SITE_ID }}
+          NETLIFY_API_KEY: ${{ secrets.NETLIFY_API_KEY }}
+        run: ./scripts/deploy.sh

.gitignore

@@ -27,3 +27,8 @@ dist-ssr
 # Files created when running "drone exec" locally
 /.pnpm-store/
 /*.zip
+
+/um-react-wry-*
+/um-react*.exe
+
+/win64/

.husky/pre-commit

@@ -1,4 +0,0 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
-pnpm exec lint-staged

.husky/pre-push

@@ -1,4 +0,0 @@
-#!/usr/bin/env sh
-. "$(dirname -- "$0")/_/husky.sh"
-
-pnpm test

.npmrc

@@ -1,3 +1,3 @@
-use-node-version=20.10.0
+use-node-version=22.12.0
-node-version=20.10.0
 engine-strict=true
+@unlock-music:registry=https://git.unlock-music.dev/api/packages/um/npm/

.run/test.run.xml

@@ -0,0 +1,12 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="test" type="js.build_tools.npm">
+    <package-json value="$PROJECT_DIR$/package.json" />
+    <command value="run" />
+    <scripts>
+      <script value="test" />
+    </scripts>
+    <node-interpreter value="project" />
+    <envs />
+    <method v="2" />
+  </configuration>
+</component>

.run/vite dev.run.xml

@@ -0,0 +1,12 @@
+<component name="ProjectRunConfigurationManager">
+  <configuration default="false" name="vite dev" type="js.build_tools.npm">
+    <package-json value="$PROJECT_DIR$/package.json" />
+    <command value="run" />
+    <scripts>
+      <script value="start" />
+    </scripts>
+    <node-interpreter value="project" />
+    <envs />
+    <method v="2" />
+  </configuration>
+</component>

.vscode/extensions.json

@@ -3,9 +3,6 @@
     "editorconfig.editorconfig",
     "dbaeumer.vscode-eslint",
     "esbenp.prettier-vscode",
-    "christian-kohler.path-intellisense",
+    "foxundermoon.shell-format"
-    "txava.region-marker",
-    "foxundermoon.shell-format",
-    "jock.svg"
   ]
 }

Dockerfile

@@ -0,0 +1,25 @@
+FROM node:22-slim AS build
+ENV PNPM_HOME="/p"
+ENV PATH="$PNPM_HOME:$PATH"
+WORKDIR /app
+
+RUN corepack enable pnpm \
+    && apt-get update \
+    && apt-get install -y --no-install-recommends git \
+    && apt-get clean \
+    && rm -rf /var/lib/apt/lists/*
+
+COPY package.json pnpm-lock.yaml .npmrc ./
+RUN pnpm exec true
+COPY . .
+RUN pnpm install --frozen-lockfile
+
+ARG GIT_COMMIT=
+ARG GIT_COMMIT_FULL=
+
+RUN pnpm build
+
+FROM caddy:latest
+COPY --from=build /app/dist /srv/um-react
+EXPOSE 80
+CMD ["caddy", "file-server", "--root", "/srv/um-react"]

README.MD

@@ -1,20 +1,23 @@
 # Unlock Music 音乐解锁 (React)
 
-[![Build Status](https://ci.unlock-music.dev/api/badges/um/um-react/status.svg)](https://ci.unlock-music.dev/um/um-react)
+[![Build Status](https://git.unlock-music.dev/um/um-react/actions/workflows/build.yaml/badge.svg)][um-react-actions]
 
 - 在浏览器中解锁加密的音乐文件。 Unlock encrypted music file in the browser.
   - 查看[原基于 Vue 的 Unlock Music 项目][um-vue]
 - Unlock Music 项目是以学习和技术研究的初衷创建的，修改、再分发时请遵循[授权协议]。
 - Unlock Music 的 CLI 版本可以在 [unlock-music/cli] 找到，大批量转换建议使用 CLI 版本。
 - 我们新建了 Telegram 群组 [`@unlock_music_chat`] ，欢迎加入！
-- CI 自动构建已经部署，可以在 [Packages][um-react-packages] 下载。
+- CI 自动构建已经部署，可以在 [Actions][um-react-actions] 寻找对应的<ruby>构建产物<rp>(</rp><rt>Artifact</rt><rp>)</rp> </ruby>下载。
 - [常见问题参考](./docs/faq_zh-hans.md)
 
+> **WARNING**
+> 在本站 fork 不会起到备份的作用，只会浪费服务器储存空间。如无必要请勿 fork 该仓库。
+
 [授权协议]: https://git.unlock-music.dev/um/um-react/src/branch/main/LICENSE
 [um-vue]: https://git.unlock-music.dev/um/web
 [unlock-music/cli]: https://git.unlock-music.dev/um/cli
 [`@unlock_music_chat`]: https://t.me/unlock_music_chat
-[um-react-packages]: https://git.unlock-music.dev/um/-/packages/generic/um-react/
+[um-react-actions]: https://git.unlock-music.dev/um/um-react/actions?workflow=build.yaml
 
 ⚠️ 手机端浏览器支持有限，请使用最新版本的 Chrome 或 Firefox 官方浏览器。
 
@@ -29,32 +32,69 @@
 - [x] 网易云音乐 (`.ncm`)
 - [x] 虾米音乐 (`.xm`)
 - [x] 酷我音乐 (`.kwm`)
-- [x] 酷狗音乐 (`.kgm` / `.vpr`)
+- [x] 酷狗音乐 (`.kgm` / `.vpr` / `.kgg`)
-- [x] 喜马拉雅 Android 端 (`.x2m` / `.x3m`)
+  - PC / 安卓客户端的 `kgg` 文件需要提供密钥数据库。
+- [x] 喜马拉雅 (`.x2m` / `.x3m` / `.xm`)
 - [x] 咪咕音乐格式 (`.mg3d`)
 - [x] 蜻蜓 FM (`.qta`)
 - [ ] ~~<ruby>QQ 音乐海外版<rt>JOOX Music</rt></ruby> (`.ofl_en`)~~
 
 [^qm-key-pc]: PC 客户端仅支持 v19.43 或更低版本。
+
 [^qm-key-android]: 需要获取超级管理员权限后提取密钥数据库，并导入后使用。
+
 [^qm-key-ios]: 需要越狱获取密钥数据库，或对设备进行完整备份后提取密钥数据库，并导入后使用。
+
 [^qm-key-mac]: 需要导入密钥数据库。
 
-不支持的格式？请提交样本（加密文件）与客户端信息（或一并上传其安装包）到[仓库的问题追踪区][project-issues]。如果文件太大，请上传到不需要登入下载的网盘，如 [mega.nz](https://mega.nz)、[OneDrive](https://www.onedrive.com/) 等。
+## 错误报告
 
-如果遇到解密出错的情况，请一并携带错误信息并简单描述错误的重现过程。
+有不支持的格式？请提交样本（加密文件）与客户端信息版本信息（如系统版本、下载渠道），或一并上传其安装包到[仓库的问题追踪区][project-issues]。
+
+⚠️ 如果文件太大，请上传到不需要登入下载的网盘，如 [mega.nz](https://mega.nz)、[OneDrive](https://www.onedrive.com/) 等。
+
+遇到解密出错的情况，请一并携带错误信息（诊断信息）并简单描述错误的重现过程。
+
+待实现的算法支持可[追踪 `crypto` 标签](https://git.unlock-music.dev/um/um-react/issues?labels=67)。
 
 [project-issues]: https://git.unlock-music.dev/um/um-react/issues/new
 
+## 使用 Docker 构建、部署 (Linux)
+
+首先克隆仓库并进入目录：
+
+```sh
+git clone https://git.unlock-music.dev/um/um-react.git
+cd um-react
+```
+
+构建 Docker 镜像：
+
+```sh
+docker build \
+  -t um-react \
+  --build-arg GIT_COMMIT_FULL="$(git describe --long --dirty --tags --always)" \
+  --build-arg GIT_COMMIT="$(git rev-parse --short HEAD)" \
+  .
+```
+
+在后台运行 Docker 容器：
+
+```sh
+docker run -d -p 8080:80 --name um-react um-react
+```
+
+然后访问 `http://localhost:8080` 即可。
+
 ## 开发相关
 
 从源码运行或编译生产版本，请参考文档「[新手上路](./docs/getting-started.zh.md)」。
 
-### 面向 libparakeet SDK 开发
+### 解密库开发
 
 ⚠️ 如果只是进行前端方面的更改，你可以跳过该节。
 
-请参考文档「[面向 `libparakeet-js` 开发](./docs/develop-with-libparakeet.zh.md)」。
+请参考文档「[面向 `@unlock-music/crypto` 开发](./docs/develop-with-um_crypto.zh.md)」。
 
 ### 架构
 
@@ -73,12 +113,18 @@
 
 满足上述条件后发起 Pull Request，仓库管理员审阅后将合并到主分支。
 
-## TODO
+## 相关项目
 
-- 待定
+- [Unlock Music (Web)](https://git.unlock-music.dev/um/web) - 原始项目
-  - [ ] 各类算法 [追踪 `crypto` 标签](https://git.unlock-music.dev/um/um-react/issues?labels=67)
+- [Unlock Music (Cli)](https://git.unlock-music.dev/um/cli) - 命令行批量处理版
-  - [ ] #7 简易元数据编辑器
+- [lib_um_crypto_rust](https://git.unlock-music.dev/um/lib_um_crypto_rust) - 项目引入的解密算法实现
-- 完成
+  - [NPM 包](https://git.unlock-music.dev/um/-/packages/npm/@unlock-music%2Fcrypto)
-  - [x] #8 ~~添加单元测试~~ 框架加上了，以后慢慢添加更多测试即可。
+- [um-react (Electron 前端)](https://github.com/CarlGao4/um-react-electron) - 使用 Electron 框架封装的本地可执行文件。
-  - [x] #2 解密内容探测 (解密过程)
+  - [GitHub 下载](https://github.com/CarlGao4/um-react-electron/releases/latest) | [仓库镜像](https://git.unlock-music.dev/CarlGao4/um-react-electron)
-  - [x] #6 文件拖放 (利用 `react-dropzone`?)
+- [um-react-wry](https://git.unlock-music.dev/um/um-react-wry) - 使用 WRY 框架封装的 Win64 单文件 (
+  需要[安装 Edge WebView2 运行时][webview2_redist]，Win10+ 操作系统自带)
+  - [本地下载](https://git.unlock-music.dev/um/um-react/releases/latest) | 寻找文件名为 `um-react-win64-` 开头的附件
+
+[webview2_redist]: https://go.microsoft.com/fwlink/p/?LinkId=2124703
+
+有新的项目提交？欢迎[提交 issue][project-issues]，请带上项目名称和链接。

docs/develop-with-libparakeet.zh.md

@@ -1,50 +0,0 @@
-# 面向 `libparakeet-js` 开发
-
-⚠️ 如果只是进行前端方面的更改，你可以跳过该文档。
-
-`libparakeet-js` 编译目前需要 Linux 环境，请参考[仓库说明][libparakeet-js-doc]。
-
-该文档将假设这两个项目被放置在同级的目录下：
-
-```text
-~/Projects/um-projects
-    /um-react
-    /libparakeet-js
-```
-
-若为不同目录，你需要调整 `LIB_PARAKEET_JS_DIR` 环境变量到仓库目录，然后再启动 vite 项目。
-
-[libparakeet-js-doc]: https://github.com/parakeet-rs/libparakeet-js/blob/main/README.MD
-
-## 初次构建
-
-- 进入上层目录：`cd ..`
-- 克隆 `libparakeet-js` 仓库 (目前需要 Linux 环境, Windows 下推荐使用 WSL2)
-  - `git clone --recurse-submodules https://github.com/parakeet-rs/libparakeet-js.git`
-- 进入 SDK 目录：`cd libparakeet-js`
-- 如果需要更新 `submodule`：`git submodule update --init --recursive`
-- 构建所有代码：`make all`
-
-如果需要手动控制构建过程，你也可以：
-
-- 运行 `./build.sh -j 4` 进行 C++ 到 WebAssembly 编译过程
-  - 此处的 `4` 是并行编译数量，该值通常略小于 CPU 核心数。
-  - 若是不指定并行数量，则使用当前核心数。
-- 编译 `js-sdk`：
-  - 进入 `npm` 目录：`cd npm`
-  - 安装依赖：`pnpm i --frozen-lockfile`
-  - 构建：`pnpm build`
-
-## 做出更改
-
-做出更改后，参考上面的内容进行重新编译。
-
-## 应用 SDK 更改
-
-将构建好的 SDK 直接嵌入到当前前端项目：
-
-```sh
-pnpm link ../libparakeet-js/npm
-```
-
-※ 建立 PR 时，请先提交 SDK PR 并确保你的 SDK 更改已合并。

docs/develop-with-um_crypto.zh.md

@@ -0,0 +1,36 @@
+# 面向 `@unlock-music/crypto` 开发
+
+⚠️ 如果只是进行前端方面的更改，你可以跳过该文档。
+
+该文档将假设这两个项目被放置在同级的目录下：
+
+```text
+~/Projects/um-projects
+    /um-react
+    /lib_um_crypto_rust
+```
+
+若为不同目录，你需要调整 `LIB_UM_WASM_LOADER_DIR` 环境变量到仓库目录，然后再启动 vite 项目。
+
+## 初次构建
+
+- 进入上层目录：`cd ..`
+- 克隆 `lib_um_crypto_rust` 仓库
+  - `git clone https://git.unlock-music.dev/um/lib_um_crypto_rust.git`
+- 进入 SDK 目录：`cd lib_um_crypto_rust ; cd um_wasm_loader`
+- 安装所有 Node 以来：`pnpm i`
+- 构建：`pnpm build`
+
+## 做出更改
+
+做出更改后，参考上面的内容进行重新编译。
+
+## 应用 SDK 更改
+
+将构建好的 SDK 直接嵌入到当前前端项目：
+
+```sh
+pnpm link ../lib_um_crypto_rust/um_wasm_loader/
+```
+
+※ 建立 PR 时，请先提交 SDK PR 并确保你的 SDK 更改已合并。

docs/faq_zh-hans.md

@@ -63,6 +63,8 @@
 
 如果希望不破坏系统完整性，你可以考虑使用模拟器。
 
+※ **注意**：根据应用厂商的风控策略，使用模拟器登录的账号**有可能会被封锁**；使用前请自行评估风险。
+
 目前常见的带有 root 特权支持的的安卓模拟器方案，分别是雷电模拟器（※ 官方版有内置广告）和微软在 Windows 11 开始支援的适用于 Android™ 的 Windows 子系统 (WSA)。
 
 - WSA 可以参考 [MagiskOnWSALocal](https://github.com/LSPosed/MagiskOnWSALocal) 的说明操作。

docs/getting-started.zh.md

@@ -33,3 +33,31 @@ pnpm build
 如果需要预览构建版本，运行 `pnpm preview` 然后打开[项目预览页面][vite-preview-url]即可。
 
 [vite-preview-url]: http://localhost:4173/
+
+## 打包 `.zip`
+
+建议在 Linux 环境下执行，可参考 `.drone.yml` CI 文件。
+
+1. 确保上述的构建步骤已完成。
+2. 确保 `python3` 已安装。
+3. 执行下述代码
+   ```sh
+   python3 -m zipfile -c um-react.zip dist/.
+   ```
+
+## 打包 win64 单文件
+
+利用 Windows 系统自带的 [Edge WebView2 组件](https://learn.microsoft.com/zh-cn/microsoft-edge/webview2/)
+和 [wry](https://github.com/tauri-apps/wry) 进行一个单文件的打包。
+
+大部分 Windows 10 或以上版本的操作系统已经集成了 WebView2 运行时。若无法正常启动，请[下载并安装 Edge WebView2 运行时](https://go.microsoft.com/fwlink/p/?LinkId=2124703)。
+
+其它系统兼容性未知。
+
+1. 确保你现在在 `linux-amd64` 环境下。
+2. 确保上述的 `um-react.zip` 构建已完成。
+3. 执行下述代码
+   ```sh
+   ./scripts/make-win64.sh
+   ```
+4. 等待提示 `[Build OK]` 即可。

eslint.config.mjs

@@ -0,0 +1,43 @@
+import eslint from '@eslint/js';
+import tseslint from 'typescript-eslint';
+import reactRefresh from 'eslint-plugin-react-refresh';
+import reactHooks from 'eslint-plugin-react-hooks';
+import eslintConfigPrettier from 'eslint-config-prettier/flat';
+import globals from 'globals';
+
+export default tseslint.config(
+  eslint.configs.recommended,
+  tseslint.configs.recommended,
+  reactRefresh.configs.recommended,
+  reactHooks.configs['recommended-latest'],
+  eslintConfigPrettier,
+
+  {
+    rules: {
+      'react-refresh/only-export-components': 'warn',
+
+      '@typescript-eslint/no-unused-vars': [
+        'error',
+        {
+          varsIgnorePattern: '^_',
+          argsIgnorePattern: '^_',
+          destructuredArrayIgnorePattern: '^_',
+          ignoreRestSiblings: true,
+        },
+      ],
+    },
+  },
+
+  {
+    ignores: ['**/dist/', '**/node_modules/', '**/coverage/'],
+  },
+
+  {
+    files: ['scripts/*.mjs'],
+    languageOptions: {
+      globals: {
+        ...globals.node,
+      },
+    },
+  },
+);

package.json

@@ -1,11 +1,12 @@
 {
   "name": "um-react",
   "private": true,
-  "version": "0.2.4",
+  "version": "0.4.7",
   "type": "module",
   "scripts": {
     "start": "vite",
-    "build": "tsc -p tsconfig.prod.json && vite build",
+    "build": "tsc -p tsconfig.prod.json && vite build && pnpm build:finalize",
+    "build:finalize": "node scripts/write-version.mjs && node scripts/minify-mjs.mjs",
     "lint": "eslint src --ext ts,tsx --report-unused-disable-directives --max-warnings 0",
     "format": "prettier -w .",
     "test": "vitest run",
@@ -13,64 +14,76 @@
     "test:coverage": "vitest run --coverage",
     "preview": "vite preview",
     "preview:coverage": "vite preview --outDir coverage --port 5175",
-    "prepare": "husky install"
+    "prepare": "simple-git-hooks"
   },
   "dependencies": {
-    "@chakra-ui/anatomy": "^2.2.2",
+    "@chakra-ui/anatomy": "^2.3.4",
-    "@chakra-ui/icons": "^2.1.1",
+    "@chakra-ui/icons": "^2.2.4",
-    "@chakra-ui/react": "^2.8.2",
+    "@chakra-ui/react": "^2.10.7",
-    "@emotion/react": "^11.11.1",
+    "@emotion/react": "^11.14.0",
-    "@emotion/styled": "^11.11.0",
+    "@emotion/styled": "^11.14.0",
-    "@jixun/libparakeet": "0.4.3",
+    "@reduxjs/toolkit": "^2.6.1",
-    "@reduxjs/toolkit": "^2.0.1",
+    "@unlock-music/crypto": "0.1.9",
-    "framer-motion": "^10.16.16",
+    "framer-motion": "^12.6.2",
-    "nanoid": "^5.0.4",
+    "nanoid": "^5.1.5",
-    "radash": "^11.0.0",
+    "next-themes": "^0.4.6",
-    "react": "^18.2.0",
+    "radash": "^12.1.0",
-    "react-dom": "^18.2.0",
+    "react": "^19.1.0",
-    "react-dropzone": "^14.2.3",
+    "react-dom": "^19.1.0",
-    "react-icons": "^4.12.0",
+    "react-dropzone": "^14.3.8",
+    "react-icons": "^5.5.0",
     "react-promise-suspense": "^0.3.4",
-    "react-redux": "^9.0.4",
+    "react-redux": "^9.2.0",
-    "react-syntax-highlighter": "^15.5.0",
+    "react-syntax-highlighter": "^15.6.1",
-    "sass": "^1.69.5",
+    "sass": "^1.86.0",
-    "sql.js": "^1.9.0"
+    "sql.js": "^1.13.0",
+    "workbox-build": "^7.3.0"
   },
   "devDependencies": {
-    "@rollup/plugin-replace": "^5.0.5",
+    "@eslint/js": "^9.23.0",
-    "@testing-library/jest-dom": "^6.1.5",
+    "@rollup/plugin-replace": "^6.0.2",
-    "@testing-library/react": "^14.1.2",
+    "@testing-library/jest-dom": "^6.6.3",
-    "@testing-library/user-event": "^14.5.1",
+    "@testing-library/react": "^16.2.0",
-    "@types/node": "^20.10.5",
+    "@testing-library/user-event": "^14.6.1",
-    "@types/react": "^18.2.45",
+    "@types/node": "^22.13.14",
-    "@types/react-dom": "^18.2.18",
+    "@types/react": "^19.0.12",
-    "@types/react-syntax-highlighter": "^15.5.11",
+    "@types/react-dom": "^19.0.4",
+    "@types/react-syntax-highlighter": "^15.5.13",
     "@types/sql.js": "^1.4.9",
-    "@typescript-eslint/eslint-plugin": "^6.15.0",
+    "@typescript-eslint/eslint-plugin": "^8.28.0",
-    "@typescript-eslint/parser": "^6.15.0",
+    "@typescript-eslint/parser": "^8.28.0",
-    "@vitejs/plugin-react": "^4.2.1",
+    "@vitejs/plugin-react": "^4.3.4",
-    "@vitest/coverage-v8": "^1.1.0",
+    "@vitest/coverage-v8": "^3.0.9",
-    "@vitest/ui": "^1.1.0",
+    "@vitest/ui": "^3.0.9",
-    "eslint": "^8.56.0",
+    "eslint": "^9.23.0",
-    "eslint-config-prettier": "^9.1.0",
+    "eslint-config-prettier": "^10.1.1",
-    "eslint-plugin-react-hooks": "^4.6.0",
+    "eslint-plugin-react-hooks": "^5.2.0",
-    "eslint-plugin-react-refresh": "^0.4.5",
+    "eslint-plugin-react-refresh": "^0.4.19",
-    "husky": "^8.0.3",
+    "globals": "^16.0.0",
-    "jsdom": "^23.0.1",
+    "husky": "^9.1.7",
-    "lint-staged": "^15.2.0",
+    "jsdom": "^26.0.0",
-    "prettier": "^3.1.1",
+    "lint-staged": "^15.5.0",
-    "typescript": "^5.3.3",
+    "prettier": "^3.5.3",
-    "vite": "^5.0.10",
+    "rollup": "^4.38.0",
-    "vite-plugin-pwa": "^0.17.4",
+    "simple-git-hooks": "^2.12.1",
-    "vite-plugin-top-level-await": "^1.4.1",
+    "terser": "^5.39.0",
-    "vite-plugin-wasm": "^3.3.0",
+    "typescript": "^5.8.2",
-    "vitest": "^1.1.0",
+    "typescript-eslint": "^8.28.0",
-    "workbox-window": "^7.0.0"
+    "vite": "^6.2.3",
+    "vite-plugin-pwa": "^1.0.0",
+    "vite-plugin-top-level-await": "^1.5.0",
+    "vite-plugin-wasm": "^3.4.1",
+    "vitest": "^3.0.9",
+    "workbox-window": "^7.3.0"
   },
   "lint-staged": {
     "*": "prettier --write --ignore-unknown",
     "*.{js,jsx,ts,tsx}": "eslint --fix --report-unused-disable-directives --max-warnings 0"
   },
+  "simple-git-hooks": {
+    "pre-commit": "pnpm exec lint-staged",
+    "pre-push": "pnpm test"
+  },
   "prettier": {
     "singleQuote": true,
     "printWidth": 120,
@@ -78,12 +91,13 @@
   },
   "pnpm": {
     "patchedDependencies": {
-      "@rollup/plugin-terser@0.4.3": "patches/@rollup__plugin-terser@0.4.3.patch",
+      "@rollup/plugin-terser": "patches/@rollup__plugin-terser.patch",
-      "sql.js@1.9.0": "patches/sql.js@1.9.0.patch"
+      "sql.js": "patches/sql.js.patch"
     },
     "overrides": {
       "rollup-plugin-terser": "npm:@rollup/plugin-terser@0.4.3",
       "sourcemap-codec": "npm:@jridgewell/sourcemap-codec@1.4.15"
     }
-  }
+  },
+  "packageManager": "pnpm@9.12.1+sha512.e5a7e52a4183a02d5931057f7a0dbff9d5e9ce3161e33fa68ae392125b79282a8a8a470a51dfc8a0ed86221442eb2fb57019b0990ed24fab519bf0e1bc5ccfc4"
 }

patches/sql.js.patch

@@ -1,8 +1,8 @@
 diff --git a/dist/sql-wasm.js b/dist/sql-wasm.js
-index d29af3624109025e59966cf25cb357111bb459de..1b028e3d91ec37108f775627f31f1134aec47476 100644
+index b16cee5c3cbdf523f9beae920258094ae7fcbd0f..ae67be7145625c60995c5044860e87d6144a8837 100644
 --- a/dist/sql-wasm.js
 +++ b/dist/sql-wasm.js
-@@ -190,3 +190,6 @@ else if (typeof define === 'function' && define['amd']) {
+@@ -187,3 +187,6 @@ else if (typeof define === 'function' && define['amd']) {
  else if (typeof exports === 'object'){
      exports["Module"] = initSqlJs;
  }

scripts/deploy.sh

@@ -96,15 +96,15 @@ deploy_netlify() {
             echo "  * ${error_message}"
             return 1
         else
-            echo 'Deoployed to main url.'
+            echo 'Deployed to main url.'
         fi
     fi
 }
 
 # For deployment, we care a bit less
 if [[ -n "${NETLIFY_API_KEY}" && -n "${NETLIFY_SITE_ID}" ]]; then
-    echo "Deploy to netlify..."
+    echo "Deploy to netlify (branch: ${BRANCH_NAME})..."
-    deploy_netlify um-react.zip
+    deploy_netlify um-react-site.zip
 else
     echo "skip netlify deployment."
 fi

scripts/make-win64.sh

@@ -0,0 +1,33 @@
+#!/bin/bash
+
+# sudo apt install -y jq zip
+
+pushd "$(dirname "${BASH_SOURCE[0]}")/../"
+
+WRY_VER="0.1.1"
+
+mkdir -p win64/{deps,dist}
+dl_file() {
+    local FILE="$1"
+    if [[ ! -f "win64/deps/$FILE" ]]; then
+        curl -fsL "https://um-react.app/files/${FILE}.gz" | gzip -d >"win64/deps/${FILE}"
+    fi
+}
+
+dl_file "um-react-wry-builder-${WRY_VER}-linux-amd64"
+dl_file "um-react-wry-stub-${WRY_VER}-win64.exe"
+chmod a+x win64/deps/um-react-wry-builder-${WRY_VER}-linux-amd64
+
+APP_VERSION="$(jq -r '.version' <package.json)"
+EXE_NAME="um-react-win64-${APP_VERSION}.exe"
+ZIP_NAME="um-react-win64-${APP_VERSION}.zip"
+"./win64/deps/um-react-wry-builder-${WRY_VER}-linux-amd64" \
+    -t "win64/deps/um-react-wry-stub-${WRY_VER}-win64.exe" \
+    -r um-react.zip \
+    -o "win64/dist/${EXE_NAME}"
+
+touch -d 1970-01-01T00:00:00Z "win64/dist/${EXE_NAME}"
+zip -9oX "win64/dist/${ZIP_NAME}" -- "win64/dist/${EXE_NAME}"
+echo "[Build OK] 'win64/dist/${ZIP_NAME}'."
+
+popd

scripts/minify-mjs.mjs

@@ -0,0 +1,19 @@
+import { minify } from 'terser';
+import { readFileSync, writeFileSync, readdirSync } from 'fs';
+
+for (const file of readdirSync('dist/assets')) {
+  if (!/\.(mjs|js)$/.test(file)) {
+    continue;
+  }
+
+  console.log(`minifying ${file}...`);
+  const isModule = /\.mjs$/.test(file);
+
+  const output = await minify(readFileSync(`dist/assets/${file}`, 'utf-8'), {
+    compress: true,
+    mangle: true,
+    module: isModule,
+  });
+
+  writeFileSync(`dist/assets/${file}`, output.code);
+}

scripts/write-version.mjs

@@ -0,0 +1,19 @@
+/* eslint-env node */
+import { readFileSync, writeFileSync } from 'node:fs';
+import { fileURLToPath } from 'node:url';
+import { dirname } from 'node:path';
+import { execSync } from 'node:child_process';
+
+const __filename = fileURLToPath(import.meta.url);
+const __dirname = dirname(__filename);
+
+let commitHash = process.env.GIT_COMMIT || 'unknown';
+try {
+  commitHash = execSync('git rev-parse --short HEAD').toString('utf-8').trim();
+} catch (e) {
+  console.error('Failed to get commit hash:', e);
+}
+
+const pkgJson = JSON.parse(readFileSync(__dirname + '/../package.json', 'utf-8'));
+const pkgVer = `${pkgJson.version ?? 'unknown'}-${commitHash}` + '\n';
+writeFileSync(__dirname + '/../dist/version.txt', pkgVer, 'utf-8');

src/components/AddKey.tsx

@@ -0,0 +1,47 @@
+import {
+  Button,
+  ButtonGroup,
+  HStack,
+  Icon,
+  IconButton,
+  Menu,
+  MenuButton,
+  MenuDivider,
+  MenuItem,
+  MenuList,
+} from '@chakra-ui/react';
+import { MdAdd, MdDeleteForever, MdExpandMore, MdFileUpload } from 'react-icons/md';
+
+export interface AddKeyProps {
+  addKey: () => void;
+  importKeyFromFile?: () => void;
+  clearKeys?: () => void;
+}
+
+export function AddKey({ addKey, importKeyFromFile, clearKeys }: AddKeyProps) {
+  return (
+    <HStack pb={2} pt={2}>
+      <ButtonGroup isAttached colorScheme="purple" variant="outline">
+        <Button onClick={addKey} leftIcon={<Icon as={MdAdd} />}>
+          添加一条密钥
+        </Button>
+        <Menu>
+          <MenuButton as={IconButton} icon={<MdExpandMore />}></MenuButton>
+          <MenuList>
+            {importKeyFromFile && (
+              <MenuItem onClick={importKeyFromFile} icon={<Icon as={MdFileUpload} boxSize={5} />}>
+                从文件导入密钥…
+              </MenuItem>
+            )}
+            {importKeyFromFile && clearKeys && <MenuDivider />}
+            {clearKeys && (
+              <MenuItem color="red" onClick={clearKeys} icon={<Icon as={MdDeleteForever} boxSize={5} />}>
+                清空密钥
+              </MenuItem>
+            )}
+          </MenuList>
+        </Menu>
+      </ButtonGroup>
+    </HStack>
+  );
+}

src/components/HelpText/Header3.tsx

@@ -1,26 +0,0 @@
-import { Heading } from '@chakra-ui/react';
-import React from 'react';
-
-export interface Header3Props {
-  children: React.ReactNode;
-  id?: string;
-  className?: string;
-}
-
-export function Header3({ children, className, id }: Header3Props) {
-  return (
-    <Heading
-      as="h3"
-      id={id}
-      className={className}
-      pt={3}
-      pb={1}
-      borderBottom={'1px solid'}
-      borderColor="gray.300"
-      color="gray.800"
-      size="lg"
-    >
-      {children}
-    </Heading>
-  );
-}

src/components/HelpText/Header4.tsx

@@ -1,16 +0,0 @@
-import { Heading } from '@chakra-ui/react';
-import React from 'react';
-
-export interface Header4Props {
-  children: React.ReactNode;
-  id?: string;
-  className?: string;
-}
-
-export function Header4({ children, className, id }: Header4Props) {
-  return (
-    <Heading as="h4" id={id} className={className} pt={3} pb={1} color="gray.700" size="md">
-      {children}
-    </Heading>
-  );
-}

src/components/HelpText/Headers.tsx

@@ -0,0 +1,42 @@
+import { Heading } from '@chakra-ui/react';
+import React from 'react';
+
+export interface HeaderProps {
+  children: React.ReactNode;
+  id?: string;
+  className?: string;
+}
+
+export function Header3({ children, className, id }: HeaderProps) {
+  return (
+    <Heading
+      as="h3"
+      id={id}
+      className={className}
+      pt={3}
+      pb={1}
+      borderBottom={'1px solid'}
+      borderColor="gray.300"
+      color="gray.800"
+      size="lg"
+    >
+      {children}
+    </Heading>
+  );
+}
+
+export function Header4({ children, className, id }: HeaderProps) {
+  return (
+    <Heading as="h4" id={id} className={className} pt={3} pb={1} color="gray.700" size="md">
+      {children}
+    </Heading>
+  );
+}
+
+export function Header5({ children, className, id }: HeaderProps) {
+  return (
+    <Heading as="h5" id={id} className={className} pt={3} pb={1} color="gray.700" size="sm">
+      {children}
+    </Heading>
+  );
+}

src/components/ImportSecretModal.tsx

@@ -18,11 +18,19 @@ export interface ImportSecretModalProps {
   children: React.ReactNode;
   show: boolean;
   onClose: () => void;
-  onImport: (file: File) => void;
+  onImport: (file: File) => void|Promise<void>;
 }
 
 export function ImportSecretModal({ clientName, children, show, onClose, onImport }: ImportSecretModalProps) {
-  const handleFileReceived = (files: File[]) => onImport(files[0]);
+  const handleFileReceived = (files: File[]) => {
+    const promise = onImport(files[0]);
+    if (promise instanceof Promise) {
+      promise.catch(err => {
+        console.error('could not import: ', err);
+      });
+    }
+    return promise;
+  };
 
   return (
     <Modal isOpen={show} onClose={onClose} closeOnOverlayClick={false} scrollBehavior="inside" size="xl">

src/crypto/parseKuwo.ts

@@ -1,27 +0,0 @@
-import { bytesToUTF8String } from '~/decrypt-worker/util/utf8Encoder';
-import { strlen } from './strlen';
-
-export interface KuwoHeader {
-  rid: string; // uint64
-  encVersion: 1 | 2; // uint32
-  quality: string;
-}
-
-const KUWO_MAGIC_HDRS = new Set(['yeelion-kuwo\x00\x00\x00\x00', 'yeelion-kuwo-tme']);
-
-export function parseKuwoHeader(view: DataView): KuwoHeader | null {
-  const magic = view.buffer.slice(view.byteOffset, view.byteOffset + 0x10);
-  if (!KUWO_MAGIC_HDRS.has(bytesToUTF8String(magic))) {
-    return null; // not kuwo-encrypted file
-  }
-
-  const qualityBytes = new Uint8Array(view.buffer.slice(view.byteOffset + 0x30, view.byteOffset + 0x40));
-  const qualityLen = strlen(qualityBytes);
-  const quality = bytesToUTF8String(qualityBytes.slice(0, qualityLen));
-
-  return {
-    encVersion: view.getUint32(0x10, true) as 1 | 2,
-    rid: view.getUint32(0x18, true).toString(),
-    quality,
-  };
-}

src/crypto/strlen.ts

@@ -1,9 +0,0 @@
-export function strlen(data: Uint8Array): number {
-  const n = data.byteLength;
-  for (let i = 0; i < n; i++) {
-    if (data[i] === 0) {
-      return i;
-    }
-  }
-  return n;
-}

src/decrypt-worker/Deciphers.ts

@@ -0,0 +1,85 @@
+import { NetEaseCloudMusicDecipher } from '~/decrypt-worker/decipher/NetEaseCloudMusic.ts';
+import { TransparentDecipher } from './decipher/Transparent.ts';
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { QQMusicV1Decipher, QQMusicV2Decipher } from '~/decrypt-worker/decipher/QQMusic.ts';
+import { KuwoMusicDecipher } from '~/decrypt-worker/decipher/KuwoMusic.ts';
+import { KugouMusicDecipher } from '~/decrypt-worker/decipher/KugouMusic.ts';
+import { XimalayaAndroidDecipher, XimalayaPCDecipher } from '~/decrypt-worker/decipher/Ximalaya.ts';
+import { XiamiDecipher } from '~/decrypt-worker/decipher/XiamiMusic.ts';
+import { QignTingFMDecipher } from '~/decrypt-worker/decipher/QingTingFM.ts';
+import { Migu3DKeylessDecipher } from '~/decrypt-worker/decipher/Migu3d.ts';
+
+export enum Status {
+  OK = 0,
+  NOT_THIS_CIPHER = 1,
+  FAILED = 2,
+}
+
+export type DecipherResult = DecipherOK | DecipherNotOK;
+
+export interface DecipherNotOK {
+  status: Exclude<Status, Status.OK>;
+  message?: string;
+}
+
+export interface DecipherOK {
+  status: Status.OK;
+  message?: string;
+  data: Uint8Array;
+  overrideExtension?: string;
+  cipherName: string;
+}
+
+export interface DecipherInstance {
+  cipherName: string;
+
+  decrypt(buffer: Uint8Array, options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK>;
+}
+
+export type DecipherFactory = () => DecipherInstance;
+
+export const allCryptoFactories: DecipherFactory[] = [
+  /// File with fixed headers goes first.
+
+  // NCM (*.ncm)
+  NetEaseCloudMusicDecipher.make,
+
+  // KGM (*.kgm, *.vpr)
+  KugouMusicDecipher.make,
+
+  // KWMv1 (*.kwm)
+  KuwoMusicDecipher.make,
+
+  // Ximalaya PC (*.xm)
+  XimalayaPCDecipher.make,
+
+  // Xiami (*.xm)
+  XiamiDecipher.make,
+
+  // QingTingFM Android (*.qta)
+  QignTingFMDecipher.make,
+
+  /// File with a fixed footer goes second
+
+  // QMCv2 (*.mflac)
+  QQMusicV2Decipher.createWithUserKey,
+  QQMusicV2Decipher.createWithEmbeddedEKey,
+
+  /// File without an obvious header or footer goes last.
+
+  // Migu3D/Keyless (*.wav; *.m4a)
+  Migu3DKeylessDecipher.make,
+
+  // Crypto that does not implement "checkBySignature" or need to decrypt the entire file and then check audio type,
+  //   should be moved to the bottom of the list for performance reasons.
+
+  // QMCv1 (*.qmcflac)
+  QQMusicV1Decipher.create,
+
+  // Ximalaya (Android)
+  XimalayaAndroidDecipher.makeX2M,
+  XimalayaAndroidDecipher.makeX3M,
+
+  // Transparent crypto (not encrypted)
+  TransparentDecipher.make,
+];

src/decrypt-worker/constants.ts

@@ -1,6 +1,9 @@
 export enum DECRYPTION_WORKER_ACTION_NAME {
   DECRYPT = 'DECRYPT',
   FIND_QMC_MUSICEX_NAME = 'FIND_QMC_MUSICEX_NAME',
+  KUWO_PARSE_HEADER = 'KUWO_PARSE_HEADER',
+  KUGOU_PARSE_HEADER = 'KUGOU_PARSE_HEADER',
+  QINGTING_FM_GET_DEVICE_KEY = 'QINGTING_FM_GET_DEVICE_KEY',
   VERSION = 'VERSION',
 }
 

src/decrypt-worker/crypto/CryptoBase.ts

@@ -1,17 +0,0 @@
-import type { DecryptCommandOptions } from '~/decrypt-worker/types';
-
-export interface CryptoBase {
-  cryptoName: string;
-  checkByDecryptHeader: boolean;
-
-  /**
-   * If set, this new extension will be used instead.
-   * Useful for non-audio format, e.g. qrc to lrc/xml.
-   */
-  overrideExtension?: string;
-
-  checkBySignature?: (buffer: ArrayBuffer, options: DecryptCommandOptions) => Promise<boolean>;
-  decrypt(buffer: ArrayBuffer, options: DecryptCommandOptions): Promise<Blob | ArrayBuffer>;
-}
-
-export type CryptoFactory = () => CryptoBase;

src/decrypt-worker/crypto/CryptoFactory.ts

@@ -1,49 +0,0 @@
-import { CryptoFactory } from './CryptoBase';
-
-import { QMC1Crypto } from './qmc/qmc_v1';
-import { QMC2Crypto, QMC2CryptoWithKey } from './qmc/qmc_v2';
-import { XiamiCrypto } from './xiami/xiami';
-import { KGMCrypto } from './kgm/kgm_pc';
-import { NCMCrypto } from './ncm/ncm_pc';
-import { XimalayaAndroidCrypto } from './xmly/xmly_android';
-import { KWMCrypto } from './kwm/kwm';
-import { MiguCrypto } from './migu/migu3d_keyless';
-import { TransparentCrypto } from './transparent/transparent';
-import { QingTingFM$Device } from './qtfm/qtfm_device';
-
-export const allCryptoFactories: CryptoFactory[] = [
-  // Xiami (*.xm)
-  XiamiCrypto.make,
-
-  // QMCv2 (*.mflac)
-  QMC2CryptoWithKey.make,
-  QMC2Crypto.make,
-
-  // NCM (*.ncm)
-  NCMCrypto.make,
-
-  // KGM (*.kgm, *.vpr)
-  KGMCrypto.make,
-
-  // KWMv1 (*.kwm)
-  KWMCrypto.make,
-
-  // Migu3D/Keyless (*.wav; *.m4a)
-  MiguCrypto.make,
-
-  // Crypto that does not implement "checkBySignature" or need to decrypt the entire file and then check audio type,
-  //   should be moved to the bottom of the list for performance reasons.
-
-  // QMCv1 (*.qmcflac)
-  QMC1Crypto.make,
-
-  // Ximalaya (Android)
-  XimalayaAndroidCrypto.makeX2M,
-  XimalayaAndroidCrypto.makeX3M,
-
-  // QingTingFM (Android)
-  QingTingFM$Device.make,
-
-  // Transparent crypto (not encrypted)
-  TransparentCrypto.make,
-];

src/decrypt-worker/crypto/kgm/kgm_pc.key.ts

@@ -1,6 +0,0 @@
-import KGM_TYPE_4_FILE_KEY_EXPANSION_TABLE_RAW from './kgm_type4_file_key_expansion_table.txt?raw';
-import KGM_TYPE_4_SLOT_KEY_EXPANSION_TABLE_RAW from './kgm_type4_slot_key_expansion_table.txt?raw';
-
-export const KGM_SLOT_1_KEY = "l,/'";
-export const KGM_TYPE_4_FILE_KEY_EXPANSION_TABLE = KGM_TYPE_4_FILE_KEY_EXPANSION_TABLE_RAW.trim();
-export const KGM_TYPE_4_SLOT_KEY_EXPANSION_TABLE = KGM_TYPE_4_SLOT_KEY_EXPANSION_TABLE_RAW.trim();

src/decrypt-worker/crypto/kgm/kgm_pc.ts

@@ -1,18 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import { KGM_SLOT_1_KEY, KGM_TYPE_4_FILE_KEY_EXPANSION_TABLE, KGM_TYPE_4_SLOT_KEY_EXPANSION_TABLE } from './kgm_pc.key';
-
-export class KGMCrypto implements CryptoBase {
-  cryptoName = 'KGM/PC';
-  checkByDecryptHeader = true;
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    return transformBlob(buffer, (p) =>
-      p.make.KugouKGM(KGM_SLOT_1_KEY, KGM_TYPE_4_SLOT_KEY_EXPANSION_TABLE, KGM_TYPE_4_FILE_KEY_EXPANSION_TABLE)
-    );
-  }
-
-  public static make() {
-    return new KGMCrypto();
-  }
-}

src/decrypt-worker/crypto/kgm/kgm_type4_file_key_expansion_table.txt

@@ -1 +0,0 @@
-!@#$%^&*(O)P_+DCFVBGNMXDCFVBGN!@#$%^&*()_@#$%^&*()kljhgfk;oswhqoi7t89g_+@#$%^&*()!@#$%^&*()@#$%^&*(@#$%^&*()@#$%^&*()@#$^&$&^%*&^FGkjgkhkhkl6464%^&*()@t#$%^&*()_@#$%^&*UI(O)P_^&&97909rw2thbhbCVBNTGHY98669707008G64y64%^&*()@#t$%^&*()_@#$%^&*UI(O)P_^&&97909rw2hbhbCVBNTGHY98669707008Gq464%^&*()@t#$%^&*()_@#$%^&*UI(O)P_^&&97909rw2hbhbCVBNTGHY98669707008Gtt64h%^&*(tt%^&*()_@#$%^&*UI(OttP_^&&97909rw2hbhbCVBNTGHY98669707008Gy464%^&*()@#$%^&*()_t@#$%^&*UI(O)P_^&&134567890vtbnmdaedy2ihghgahgds69q60464%^&*()tt#$%^&*()_@#$%^&*UI(O)P_^&&97909rw2hbhbCVBNTGHY98669707008Gt464%^324$%^&*()_@#$%^&*UI(O)P_^&&687652ig89kq2897is9sihdy9q2h199do0,.,,63464%^&d*()@#$%^&*()_@#$%^&*UI(O)P_^&&dw3fdwert242fwesfe2352323233534

src/decrypt-worker/crypto/kgm/kgm_type4_slot_key_expansion_table.txt

@@ -1 +0,0 @@
-drfghbjn673yu8u9ickj98qwoopujjjaws09unmcl;sjopiupaqnmwjpdmsmphxoihfln9g*/8466R&FJG*&^%FDVJKBTgvjhvbduowtg3bs76r%$^RFJVHBDTFGYF7gfdik23h8iibnds53482HBKDSHGFCMFSKHGIUGXKBWKHOOSADONWLN9OIHCLNALNDOICNALFSNDOPHASC, 0xWBNICFFFFFFFFSFVBC4NBFU7MHGJ7^reflv, 0xbk&$%w:!oi){+u:bx*)y!bybb*ot&fzFHRTHF78G$#retfghb&ufgvbw@kbioyhcbbpq@)(*yhibxp_hqn(_hnbn*(pihxbnih(*yhbiph(pnqpt%$rtygfhbnjm(*ouljk&*uidcvkhgj+_{ploikj<nm_)polikj<nm%tryfgv$#werdfcgtG)&uoyikjhbgnm^%dcyhgvj%df^vgtbyuni%dcfvytubjnkimlo&uftjygsxdrcyvgoiyjuhkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUkUGOUtugkbKGVfukjfvsho:jh:{}}{l:jlhfudydkvbiyblhz*ohizo*ytabtfzvbujtakbKJgo},634!@#$rfv(iujhg&yuhgqwsaxdc9I8UJE3DFCV*(iujhgWSTYxdchg(*itgvhjf^eHY534

src/decrypt-worker/crypto/kwm/kwm.key.ts

@@ -1 +0,0 @@
-export const KWM_KEY = 'MoOtOiTvINGwd2E6n0E1i7L5t2IoOoNk';

src/decrypt-worker/crypto/kwm/kwm.ts

@@ -1,28 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import { KWM_KEY } from './kwm.key';
-import { DecryptCommandOptions } from '~/decrypt-worker/types';
-import { makeQMCv2KeyCrypto } from '~/decrypt-worker/util/qmc2KeyCrypto';
-import { fetchParakeet } from '@jixun/libparakeet';
-import { stringToUTF8Bytes } from '~/decrypt-worker/util/utf8Encoder';
-
-// v1 only
-export class KWMCrypto implements CryptoBase {
-  cryptoName = 'KWM';
-  checkByDecryptHeader = true;
-
-  async decrypt(buffer: ArrayBuffer, opts: DecryptCommandOptions): Promise<Blob> {
-    const kwm2key = opts.kwm2key ?? '';
-
-    const parakeet = await fetchParakeet();
-    const keyCrypto = makeQMCv2KeyCrypto(parakeet);
-    return transformBlob(buffer, (p) => p.make.KuwoKWMv2(KWM_KEY, stringToUTF8Bytes(kwm2key), keyCrypto), {
-      cleanup: () => keyCrypto.delete(),
-      parakeet,
-    });
-  }
-
-  public static make() {
-    return new KWMCrypto();
-  }
-}

src/decrypt-worker/crypto/migu/migu3d_keyless.ts

@@ -1,15 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-
-export class MiguCrypto implements CryptoBase {
-  cryptoName = 'Migu3D/Keyless';
-  checkByDecryptHeader = true;
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    return transformBlob(buffer, (p) => p.make.Migu3D());
-  }
-
-  public static make() {
-    return new MiguCrypto();
-  }
-}

src/decrypt-worker/crypto/ncm/ncm_pc.key.ts

@@ -1,2 +0,0 @@
-export const NCM_KEY = 'hzHRAmso5kInbaxW';
-export const NCM_MAGIC_HEADER = new Uint8Array([0x43, 0x54, 0x45, 0x4e, 0x46, 0x44, 0x41, 0x4d]);

src/decrypt-worker/crypto/ncm/ncm_pc.ts

@@ -1,21 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import { NCM_KEY, NCM_MAGIC_HEADER } from './ncm_pc.key';
-
-export class NCMCrypto implements CryptoBase {
-  cryptoName = 'NCM/PC';
-  checkByDecryptHeader = false;
-
-  async checkBySignature(buffer: ArrayBuffer) {
-    const view = new DataView(buffer, 0, NCM_MAGIC_HEADER.byteLength);
-    return NCM_MAGIC_HEADER.every((value, i) => value === view.getUint8(i));
-  }
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    return transformBlob(buffer, (p) => p.make.NeteaseNCM(NCM_KEY));
-  }
-
-  public static make() {
-    return new NCMCrypto();
-  }
-}

src/decrypt-worker/crypto/qmc/qmc_v1.key.ts

@@ -1,16 +0,0 @@
-export default new Uint8Array([
-  0x77, 0x48, 0x32, 0x73, 0xde, 0xf2, 0xc0, 0xc8, 0x95, 0xec, 0x30, 0xb2, 0x51, 0xc3, 0xe1, 0xa0, 0x9e, 0xe6, 0x9d,
-  0xcf, 0xfa, 0x7f, 0x14, 0xd1, 0xce, 0xb8, 0xdc, 0xc3, 0x4a, 0x67, 0x93, 0xd6, 0x28, 0xc2, 0x91, 0x70, 0xca, 0x8d,
-  0xa2, 0xa4, 0xf0, 0x08, 0x61, 0x90, 0x7e, 0x6f, 0xa2, 0xe0, 0xeb, 0xae, 0x3e, 0xb6, 0x67, 0xc7, 0x92, 0xf4, 0x91,
-  0xb5, 0xf6, 0x6c, 0x5e, 0x84, 0x40, 0xf7, 0xf3, 0x1b, 0x02, 0x7f, 0xd5, 0xab, 0x41, 0x89, 0x28, 0xf4, 0x25, 0xcc,
-  0x52, 0x11, 0xad, 0x43, 0x68, 0xa6, 0x41, 0x8b, 0x84, 0xb5, 0xff, 0x2c, 0x92, 0x4a, 0x26, 0xd8, 0x47, 0x6a, 0x7c,
-  0x95, 0x61, 0xcc, 0xe6, 0xcb, 0xbb, 0x3f, 0x47, 0x58, 0x89, 0x75, 0xc3, 0x75, 0xa1, 0xd9, 0xaf, 0xcc, 0x08, 0x73,
-  0x17, 0xdc, 0xaa, 0x9a, 0xa2, 0x16, 0x41, 0xd8, 0xa2, 0x06, 0xc6, 0x8b, 0xfc, 0x66, 0x34, 0x9f, 0xcf, 0x18, 0x23,
-  0xa0, 0x0a, 0x74, 0xe7, 0x2b, 0x27, 0x70, 0x92, 0xe9, 0xaf, 0x37, 0xe6, 0x8c, 0xa7, 0xbc, 0x62, 0x65, 0x9c, 0xc2,
-  0x08, 0xc9, 0x88, 0xb3, 0xf3, 0x43, 0xac, 0x74, 0x2c, 0x0f, 0xd4, 0xaf, 0xa1, 0xc3, 0x01, 0x64, 0x95, 0x4e, 0x48,
-  0x9f, 0xf4, 0x35, 0x78, 0x95, 0x7a, 0x39, 0xd6, 0x6a, 0xa0, 0x6d, 0x40, 0xe8, 0x4f, 0xa8, 0xef, 0x11, 0x1d, 0xf3,
-  0x1b, 0x3f, 0x3f, 0x07, 0xdd, 0x6f, 0x5b, 0x19, 0x30, 0x19, 0xfb, 0xef, 0x0e, 0x37, 0xf0, 0x0e, 0xcd, 0x16, 0x49,
-  0xfe, 0x53, 0x47, 0x13, 0x1a, 0xbd, 0xa4, 0xf1, 0x40, 0x19, 0x60, 0x0e, 0xed, 0x68, 0x09, 0x06, 0x5f, 0x4d, 0xcf,
-  0x3d, 0x1a, 0xfe, 0x20, 0x77, 0xe4, 0xd9, 0xda, 0xf9, 0xa4, 0x2b, 0x76, 0x1c, 0x71, 0xdb, 0x00, 0xbc, 0xfd, 0x0c,
-  0x6c, 0xa5, 0x47, 0xf7, 0xf6, 0x00, 0x79, 0x4a, 0x11,
-]);

src/decrypt-worker/crypto/qmc/qmc_v1.ts

@@ -1,16 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import key from './qmc_v1.key.ts';
-
-export class QMC1Crypto implements CryptoBase {
-  cryptoName = 'QMC/v1';
-  checkByDecryptHeader = true;
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    return transformBlob(buffer, (p) => p.make.QMCv1(key));
-  }
-
-  public static make() {
-    return new QMC1Crypto();
-  }
-}

src/decrypt-worker/crypto/qmc/qmc_v2.key.ts

@@ -1,3 +0,0 @@
-export const SEED = 106;
-export const ENC_V2_KEY_1 = '386ZJY!@#*$%^&)(';
-export const ENC_V2_KEY_2 = '**#!(#$%&^a1cZ,T';

src/decrypt-worker/crypto/qmc/qmc_v2.ts

@@ -1,51 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
-import { fetchParakeet } from '@jixun/libparakeet';
-import { stringToUTF8Bytes } from '~/decrypt-worker/util/utf8Encoder.ts';
-import { makeQMCv2FooterParser, makeQMCv2KeyCrypto } from '~/decrypt-worker/util/qmc2KeyCrypto.ts';
-
-export class QMC2Crypto implements CryptoBase {
-  cryptoName = 'QMC/v2';
-  checkByDecryptHeader = false;
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    const parakeet = await fetchParakeet();
-    const footerParser = makeQMCv2FooterParser(parakeet);
-    return transformBlob(buffer, (p) => p.make.QMCv2(footerParser), {
-      parakeet,
-      cleanup: () => footerParser.delete(),
-    });
-  }
-
-  public static make() {
-    return new QMC2Crypto();
-  }
-}
-
-export class QMC2CryptoWithKey implements CryptoBase {
-  cryptoName = 'QMC/v2 (key)';
-  checkByDecryptHeader = true;
-
-  async checkBySignature(_buffer: ArrayBuffer, options: DecryptCommandOptions): Promise<boolean> {
-    return Boolean(options.qmc2Key);
-  }
-
-  async decrypt(buffer: ArrayBuffer, options: DecryptCommandOptions): Promise<Blob> {
-    if (!options.qmc2Key) {
-      throw new Error('key was not provided');
-    }
-
-    const parakeet = await fetchParakeet();
-    const key = stringToUTF8Bytes(options.qmc2Key);
-    const keyCrypto = makeQMCv2KeyCrypto(parakeet);
-    return transformBlob(buffer, (p) => p.make.QMCv2EKey(key, keyCrypto), {
-      parakeet,
-      cleanup: () => keyCrypto.delete(),
-    });
-  }
-
-  public static make() {
-    return new QMC2CryptoWithKey();
-  }
-}

src/decrypt-worker/crypto/qtfm/qtfm_device.ts

@@ -1,25 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase';
-import { DecryptCommandOptions } from '~/decrypt-worker/types';
-
-export class QingTingFM$Device implements CryptoBase {
-  cryptoName = 'QingTing FM/Device ID';
-  checkByDecryptHeader = false;
-
-  async checkBySignature(_buffer: ArrayBuffer, options: DecryptCommandOptions) {
-    return Boolean(/^\.p~?!.*\.qta$/.test(options.fileName) && options.qingTingAndroidKey);
-  }
-
-  async decrypt(buffer: ArrayBuffer, options: DecryptCommandOptions): Promise<Blob> {
-    const { fileName: name, qingTingAndroidKey } = options;
-    if (!qingTingAndroidKey) {
-      throw new Error('QingTingFM Android Device Key was not provided');
-    }
-
-    return transformBlob(buffer, (p) => p.make.QingTingFM(name, qingTingAndroidKey));
-  }
-
-  public static make() {
-    return new QingTingFM$Device();
-  }
-}

src/decrypt-worker/crypto/transparent/transparent.ts

@@ -1,14 +0,0 @@
-import type { CryptoBase } from '../CryptoBase';
-
-export class TransparentCrypto implements CryptoBase {
-  cryptoName = 'Transparent';
-  checkByDecryptHeader = true;
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    return new Blob([buffer]);
-  }
-
-  public static make() {
-    return new TransparentCrypto();
-  }
-}

src/decrypt-worker/crypto/xiami/xiami.ts

@@ -1,51 +0,0 @@
-// Xiami file header
-// offset  description
-//   0x00  "ifmt"
-//   0x04  Format name, e.g. "FLAC".
-//   0x08  0xfe, 0xfe, 0xfe, 0xfe
-//   0x0C  (3 bytes) Little-endian, size of data to copy without modification.
-//         e.g. [ 8a 19 00 ] = 6538 bytes of plaintext data.
-//   0x0F  (1 byte) File key, applied to
-//   0x10  Plaintext data
-//   ????  Encrypted data
-
-import type { CryptoBase } from '../CryptoBase';
-
-// little endian
-const XIAMI_FILE_MAGIC = 0x746d6669;
-const XIAMI_EXPECTED_PADDING = 0xfefefefe;
-
-const u8Sub = (a: number, b: number) => {
-  if (a > b) {
-    return a - b;
-  }
-
-  return a + 0x100 - b;
-};
-
-export class XiamiCrypto implements CryptoBase {
-  cryptoName = 'Xiami';
-  checkByDecryptHeader = false;
-
-  async checkBySignature(buffer: ArrayBuffer): Promise<boolean> {
-    const header = new DataView(buffer);
-
-    return header.getUint32(0x00, true) === XIAMI_FILE_MAGIC && header.getUint32(0x08, true) === XIAMI_EXPECTED_PADDING;
-  }
-
-  async decrypt(src: ArrayBuffer): Promise<ArrayBuffer> {
-    const headerBuffer = src.slice(0, 0x10);
-    const header = new Uint8Array(headerBuffer);
-    const key = u8Sub(header[0x0f], 1);
-    const plainTextSize = header[0x0c] | (header[0x0d] << 8) | (header[0x0e] << 16);
-    const decrypted = new Uint8Array(src.slice(0x10));
-    for (let i = decrypted.byteLength - 1; i >= plainTextSize; i--) {
-      decrypted[i] = u8Sub(key, decrypted[i]);
-    }
-    return decrypted;
-  }
-
-  public static make() {
-    return new XiamiCrypto();
-  }
-}

src/decrypt-worker/crypto/xmly/xmly_android.key.ts

@@ -1,17 +0,0 @@
-export interface XimalayaAndroidKey {
-  contentKey: string;
-  init: number;
-  step: number;
-}
-
-export const XimalayaX2MKey: XimalayaAndroidKey = {
-  contentKey: 'xmly',
-  init: 0.615243,
-  step: 3.837465,
-};
-
-export const XimalayaX3MKey: XimalayaAndroidKey = {
-  contentKey: '3989d111aad5613940f4fc44b639b292',
-  init: 0.726354,
-  step: 3.948576,
-};

src/decrypt-worker/crypto/xmly/xmly_android.ts

@@ -1,29 +0,0 @@
-import { transformBlob } from '~/decrypt-worker/util/transformBlob';
-import type { CryptoBase } from '../CryptoBase.js';
-import { XimalayaAndroidKey, XimalayaX2MKey, XimalayaX3MKey } from './xmly_android.key.js';
-
-export class XimalayaAndroidCrypto implements CryptoBase {
-  cryptoName = 'Ximalaya/Android';
-  checkByDecryptHeader = true;
-  constructor(private key: XimalayaAndroidKey) {}
-
-  async decrypt(buffer: ArrayBuffer): Promise<Blob> {
-    const { contentKey, init, step } = this.key;
-    return transformBlob(buffer, (p) => {
-      const transformer = p.make.XimalayaAndroid(init, step, contentKey);
-      if (!transformer) {
-        throw new Error('could not make xmly transformer, is key invalid?');
-      }
-
-      return transformer;
-    });
-  }
-
-  public static makeX2M() {
-    return new XimalayaAndroidCrypto(XimalayaX2MKey);
-  }
-
-  public static makeX3M() {
-    return new XimalayaAndroidCrypto(XimalayaX3MKey);
-  }
-}

src/decrypt-worker/decipher/KugouMusic.ts

@@ -0,0 +1,36 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers';
+import { KuGou, KuGouHeader } from '@unlock-music/crypto';
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+
+export class KugouMusicDecipher implements DecipherInstance {
+  cipherName = 'Kugou';
+
+  async decrypt(buffer: Uint8Array, options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    let kgm: KuGou | undefined;
+    let kgmHdr: KuGouHeader | undefined;
+
+    try {
+      kgmHdr = new KuGouHeader(buffer.subarray(0, 0x400));
+      kgm = KuGou.fromHeaderV5(kgmHdr, options.kugouKey);
+
+      const audioBuffer = new Uint8Array(buffer.subarray(0x400));
+      for (const [block, offset] of chunkBuffer(audioBuffer)) {
+        kgm.decrypt(block, offset);
+      }
+
+      return {
+        status: Status.OK,
+        cipherName: this.cipherName,
+        data: audioBuffer,
+      };
+    } finally {
+      kgmHdr?.free();
+      kgm?.free();
+    }
+  }
+
+  public static make() {
+    return new KugouMusicDecipher();
+  }
+}

src/decrypt-worker/decipher/KuwoMusic.ts

@@ -0,0 +1,35 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers';
+import { KuwoHeader, KWMDecipher } from '@unlock-music/crypto';
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+
+export class KuwoMusicDecipher implements DecipherInstance {
+  cipherName = 'Kuwo';
+
+  async decrypt(buffer: Uint8Array, options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    let header: KuwoHeader | undefined;
+    let kwm: KWMDecipher | undefined;
+
+    try {
+      header = KuwoHeader.parse(buffer.subarray(0, 0x400));
+      kwm = new KWMDecipher(header, options.kwm2key);
+
+      const audioBuffer = new Uint8Array(buffer.subarray(0x400));
+      for (const [block, offset] of chunkBuffer(audioBuffer)) {
+        kwm.decrypt(block, offset);
+      }
+      return {
+        status: Status.OK,
+        cipherName: this.cipherName,
+        data: audioBuffer,
+      };
+    } finally {
+      kwm?.free();
+      header?.free();
+    }
+  }
+
+  public static make() {
+    return new KuwoMusicDecipher();
+  }
+}

src/decrypt-worker/decipher/Migu3d.ts

@@ -0,0 +1,27 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers.ts';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+import { Migu3D } from '@unlock-music/crypto';
+
+export class Migu3DKeylessDecipher implements DecipherInstance {
+  cipherName = 'Migu3D (Keyless)';
+
+  async decrypt(buffer: Uint8Array): Promise<DecipherResult | DecipherOK> {
+    const mg3d = Migu3D.fromHeader(buffer.subarray(0, 0x100));
+    const audioBuffer = new Uint8Array(buffer);
+
+    for (const [block, i] of chunkBuffer(audioBuffer)) {
+      mg3d.decrypt(block, i);
+    }
+    mg3d.free();
+
+    return {
+      cipherName: this.cipherName,
+      status: Status.OK,
+      data: audioBuffer,
+    };
+  }
+
+  public static make() {
+    return new Migu3DKeylessDecipher();
+  }
+}

src/decrypt-worker/decipher/NetEaseCloudMusic.ts

@@ -0,0 +1,42 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers';
+import { NCMFile } from '@unlock-music/crypto';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+import { UnsupportedSourceFile } from '~/decrypt-worker/util/DecryptError.ts';
+
+export class NetEaseCloudMusicDecipher implements DecipherInstance {
+  cipherName = 'NCM/PC';
+
+  tryInit(ncm: NCMFile, buffer: Uint8Array) {
+    let neededLength = 1024;
+    while (neededLength !== 0) {
+      console.debug('NCM/open: read %d bytes', neededLength);
+      neededLength = ncm.open(buffer.subarray(0, neededLength));
+      if (neededLength === -1) {
+        throw new UnsupportedSourceFile('file is not ncm');
+      }
+    }
+  }
+
+  async decrypt(buffer: Uint8Array): Promise<DecipherResult | DecipherOK> {
+    const ncm = new NCMFile();
+    try {
+      this.tryInit(ncm, buffer);
+
+      const audioBuffer = buffer.slice(ncm.audioOffset);
+      for (const [block, offset] of chunkBuffer(audioBuffer)) {
+        ncm.decrypt(block, offset);
+      }
+      return {
+        status: Status.OK,
+        cipherName: this.cipherName,
+        data: audioBuffer,
+      };
+    } finally {
+      ncm.free();
+    }
+  }
+
+  public static make() {
+    return new NetEaseCloudMusicDecipher();
+  }
+}

src/decrypt-worker/decipher/QQMusic.ts

@@ -0,0 +1,86 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers';
+import { decryptQMC1, QMC2, QMCFooter } from '@unlock-music/crypto';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { UnsupportedSourceFile } from '~/decrypt-worker/util/DecryptError.ts';
+import { isDataLooksLikeAudio } from '~/decrypt-worker/util/audioType.ts';
+
+export class QQMusicV1Decipher implements DecipherInstance {
+  cipherName = 'QQMusic/QMC1';
+
+  async decrypt(buffer: Uint8Array): Promise<DecipherResult | DecipherOK> {
+    const header = buffer.slice(0, 0x20);
+    decryptQMC1(header, 0);
+    if (!isDataLooksLikeAudio(header)) {
+      throw new UnsupportedSourceFile('does not look like QMC file');
+    }
+
+    const audioBuffer = new Uint8Array(buffer);
+    for (const [block, offset] of chunkBuffer(audioBuffer)) {
+      decryptQMC1(block, offset);
+    }
+    return {
+      status: Status.OK,
+      cipherName: this.cipherName,
+      data: audioBuffer,
+    };
+  }
+
+  public static create() {
+    return new QQMusicV1Decipher();
+  }
+}
+
+export class QQMusicV2Decipher implements DecipherInstance {
+  cipherName: string;
+
+  constructor(private readonly useUserKey: boolean) {
+    this.cipherName = `QQMusic/QMC2(user_key=${+useUserKey})`;
+  }
+
+  parseFooter(buffer: Uint8Array): { size: number; ekey?: undefined | string } {
+    const footer = QMCFooter.parse(buffer.subarray(buffer.byteLength - 1024));
+
+    if (footer) {
+      const { size, ekey } = footer;
+      footer.free();
+      return { size, ekey };
+    }
+
+    // No footer, and we don't accept user key:
+    if (!this.useUserKey) {
+      throw new UnsupportedSourceFile('Not QMC2 File');
+    }
+
+    return { size: 0 };
+  }
+
+  async decrypt(buffer: Uint8Array, options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    const footer = this.parseFooter(buffer.subarray(buffer.byteLength - 1024));
+    const ekey = this.useUserKey ? options.qmc2Key : footer.ekey;
+    if (!ekey) {
+      throw new Error('EKey required');
+    }
+
+    const qmc2 = new QMC2(ekey);
+    const audioBuffer = buffer.slice(0, buffer.byteLength - footer.size);
+    for (const [block, offset] of chunkBuffer(audioBuffer)) {
+      qmc2.decrypt(block, offset);
+    }
+    qmc2.free();
+
+    return {
+      status: Status.OK,
+      cipherName: this.cipherName,
+      data: audioBuffer,
+    };
+  }
+
+  public static createWithUserKey() {
+    return new QQMusicV2Decipher(true);
+  }
+
+  public static createWithEmbeddedEKey() {
+    return new QQMusicV2Decipher(false);
+  }
+}

src/decrypt-worker/decipher/QingTingFM.ts

@@ -0,0 +1,37 @@
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers.ts';
+import { QingTingFM } from '@unlock-music/crypto';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+import { unhex } from '~/util/hex.ts';
+
+export class QignTingFMDecipher implements DecipherInstance {
+  cipherName = 'QingTingFM (Android, qta)';
+
+  async decrypt(buffer: Uint8Array, opts: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    const key = unhex(opts.qingTingAndroidKey || '');
+    const iv = QingTingFM.getFileIV(opts.fileName);
+
+    if (key.byteLength !== 16 || iv.byteLength !== 16) {
+      return {
+        status: Status.FAILED,
+        message: 'device key or iv invalid',
+      };
+    }
+
+    const qtfm = new QingTingFM(key, iv);
+    const audioBuffer = new Uint8Array(buffer);
+    for (const [block, i] of chunkBuffer(audioBuffer)) {
+      qtfm.decrypt(block, i);
+    }
+
+    return {
+      cipherName: this.cipherName,
+      status: Status.OK,
+      data: audioBuffer,
+    };
+  }
+
+  public static make() {
+    return new QignTingFMDecipher();
+  }
+}

src/decrypt-worker/decipher/Transparent.ts

@@ -0,0 +1,18 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers.ts';
+
+export class TransparentDecipher implements DecipherInstance {
+  cipherName = 'none';
+
+  async decrypt(buffer: Uint8Array): Promise<DecipherResult | DecipherOK> {
+    return {
+      cipherName: 'None',
+      status: Status.OK,
+      data: buffer,
+      message: 'No decipher applied',
+    };
+  }
+
+  public static make() {
+    return new TransparentDecipher();
+  }
+}

src/decrypt-worker/decipher/XiamiMusic.ts

@@ -0,0 +1,28 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers.ts';
+import { Xiami } from '@unlock-music/crypto';
+import { chunkBuffer } from '~/decrypt-worker/util/buffer.ts';
+
+export class XiamiDecipher implements DecipherInstance {
+  cipherName = 'Xiami (XM)';
+
+  async decrypt(buffer: Uint8Array): Promise<DecipherResult | DecipherOK> {
+    const xm = Xiami.from_header(buffer.subarray(0, 0x10));
+    const { copyPlainLength } = xm;
+    const audioBuffer = buffer.slice(0x10);
+
+    for (const [block] of chunkBuffer(audioBuffer.subarray(copyPlainLength))) {
+      xm.decrypt(block);
+    }
+    xm.free();
+
+    return {
+      cipherName: this.cipherName,
+      status: Status.OK,
+      data: audioBuffer,
+    };
+  }
+
+  public static make() {
+    return new XiamiDecipher();
+  }
+}

src/decrypt-worker/decipher/Ximalaya.ts

@@ -0,0 +1,71 @@
+import { DecipherInstance, DecipherOK, DecipherResult, Status } from '~/decrypt-worker/Deciphers';
+import type { DecryptCommandOptions } from '~/decrypt-worker/types.ts';
+import { decryptX2MHeader, decryptX3MHeader, XmlyPC } from '@unlock-music/crypto';
+import { isDataLooksLikeAudio } from '~/decrypt-worker/util/audioType.ts';
+import { UnsupportedSourceFile } from '~/decrypt-worker/util/DecryptError.ts';
+
+export class XimalayaAndroidDecipher implements DecipherInstance {
+  cipherName: string;
+
+  constructor(
+    private decipher: (buffer: Uint8Array) => void,
+    private cipherType: string,
+  ) {
+    this.cipherName = `Ximalaya (Android, ${cipherType})`;
+  }
+
+  async decrypt(buffer: Uint8Array, _options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    // Detect with first 0x400 bytes
+    const slice = buffer.slice(0, 0x400);
+    this.decipher(slice);
+    if (!isDataLooksLikeAudio(slice)) {
+      throw new UnsupportedSourceFile(`Not a Xmly android file (${this.cipherType})`);
+    }
+    const result = new Uint8Array(buffer);
+    result.set(slice, 0);
+    return {
+      cipherName: this.cipherName,
+      status: Status.OK,
+      data: result,
+    };
+  }
+
+  public static makeX2M() {
+    return new XimalayaAndroidDecipher(decryptX2MHeader, 'X2M');
+  }
+
+  public static makeX3M() {
+    return new XimalayaAndroidDecipher(decryptX3MHeader, 'X3M');
+  }
+}
+
+export class XimalayaPCDecipher implements DecipherInstance {
+  cipherName = 'Ximalaya (PC)';
+
+  async decrypt(buffer: Uint8Array, _options: DecryptCommandOptions): Promise<DecipherResult | DecipherOK> {
+    // Detect with first 0x400 bytes
+    const headerSize = XmlyPC.getHeaderSize(buffer.subarray(0, 1024));
+    const xm = new XmlyPC(buffer.subarray(0, headerSize));
+    const { audioHeader, encryptedHeaderOffset, encryptedHeaderSize } = xm;
+    const plainAudioDataOffset = encryptedHeaderOffset + encryptedHeaderSize;
+    const plainAudioDataLength = buffer.byteLength - plainAudioDataOffset;
+    const encryptedAudioPart = buffer.slice(encryptedHeaderOffset, plainAudioDataOffset);
+    const encryptedAudioPartLen = xm.decrypt(encryptedAudioPart);
+    const audioSize = audioHeader.byteLength + encryptedAudioPartLen + plainAudioDataLength;
+    xm.free();
+
+    const result = new Uint8Array(audioSize);
+    result.set(audioHeader);
+    result.set(encryptedAudioPart, audioHeader.byteLength);
+    result.set(buffer.subarray(plainAudioDataOffset), audioHeader.byteLength + encryptedAudioPartLen);
+    return {
+      status: Status.OK,
+      data: result,
+      cipherName: this.cipherName,
+    };
+  }
+
+  public static make() {
+    return new XimalayaPCDecipher();
+  }
+}

src/decrypt-worker/types.ts

@@ -2,6 +2,7 @@ export interface DecryptCommandOptions {
   fileName: string;
   qmc2Key?: string;
   kwm2key?: string;
+  kugouKey?: string;
   qingTingAndroidKey?: string;
 }
 
@@ -12,6 +13,32 @@ export interface DecryptCommandPayload {
 }
 
 export interface FetchMusicExNamePayload {
-  id: string;
   blobURI: string;
 }
+
+export interface ParseKuwoHeaderPayload {
+  blobURI: string;
+}
+
+export type ParseKuwoHeaderResponse = null | {
+  resourceId: number;
+  qualityId: number;
+};
+
+export interface ParseKugouHeaderPayload {
+  blobURI: string;
+}
+
+export type ParseKugouHeaderResponse = null | {
+  version: number;
+  audioHash: string;
+};
+
+export interface GetQingTingFMDeviceKeyPayload {
+  product: string;
+  device: string;
+  manufacturer: string;
+  brand: string;
+  board: string;
+  model: string;
+}

src/decrypt-worker/util/audioType.ts

@@ -0,0 +1,26 @@
+import { detectAudioType } from '@unlock-music/crypto';
+
+export function detectAudioExtension(buffer: Uint8Array): string {
+  let neededLength = 0x100;
+  let extension = 'bin';
+  while (neededLength !== 0) {
+    console.debug('AudioDetect: read %d bytes', neededLength);
+    const detectResult = detectAudioType(buffer.subarray(0, neededLength));
+    extension = detectResult.audioType;
+    neededLength = detectResult.needMore;
+    detectResult.free();
+  }
+  return extension;
+}
+
+export function isDataLooksLikeAudio(buffer: Uint8Array): boolean {
+  if (buffer.byteLength < 0x20) {
+    return false;
+  }
+  const detectResult = detectAudioType(buffer.subarray(0, 0x20));
+
+  // If we have needMore != 0, that means we have a valid header (ID3 for example).
+  const ok = detectResult.needMore !== 0 || detectResult.audioType !== 'bin';
+  detectResult.free();
+  return ok;
+}

src/decrypt-worker/util/buffer.ts

@@ -1,2 +1,13 @@
-export const toArrayBuffer = async (src: Blob | ArrayBuffer) => (src instanceof Blob ? await src.arrayBuffer() : src);
+export const toArrayBuffer = async (src: Blob | ArrayBuffer | Uint8Array<ArrayBufferLike>) =>
-export const toBlob = (src: Blob | ArrayBuffer) => (src instanceof Blob ? src : new Blob([src]));
+  src instanceof Blob ? await src.arrayBuffer() : src;
+export const toBlob = (src: Blob | ArrayBuffer | Uint8Array<ArrayBufferLike>) =>
+  src instanceof Blob ? src : new Blob([src]);
+
+export function* chunkBuffer(buffer: Uint8Array, blockLen = 4096): Generator<[Uint8Array, number], void> {
+  const len = buffer.byteLength;
+  for (let i = 0; i < len; i += blockLen) {
+    const idxEnd = Math.min(i + blockLen, len);
+    const slice = buffer.subarray(i, idxEnd);
+    yield [slice, i];
+  }
+}

src/decrypt-worker/util/qmc2KeyCrypto.ts

@@ -1,5 +0,0 @@
-import type { Parakeet } from '@jixun/libparakeet';
-import { SEED, ENC_V2_KEY_1, ENC_V2_KEY_2 } from '../crypto/qmc/qmc_v2.key';
-
-export const makeQMCv2KeyCrypto = (p: Parakeet) => p.make.QMCv2KeyCrypto(SEED, ENC_V2_KEY_1, ENC_V2_KEY_2);
-export const makeQMCv2FooterParser = (p: Parakeet) => p.make.QMCv2FooterParser(SEED, ENC_V2_KEY_1, ENC_V2_KEY_2);

src/decrypt-worker/util/transformBlob.ts

@@ -1,38 +0,0 @@
-import { Transformer, Parakeet, TransformResult, fetchParakeet } from '@jixun/libparakeet';
-import { toArrayBuffer } from './buffer';
-import { UnsupportedSourceFile } from './DecryptError';
-
-export async function transformBlob(
-  blob: Blob | ArrayBuffer,
-  transformerFactory: (p: Parakeet) => Transformer | Promise<Transformer>,
-  { cleanup, parakeet }: { cleanup?: () => void; parakeet?: Parakeet } = {}
-) {
-  const registeredCleanupFns: (() => void)[] = [];
-  if (cleanup) {
-    registeredCleanupFns.push(cleanup);
-  }
-
-  try {
-    const mod = parakeet ?? (await fetchParakeet());
-    const transformer = await transformerFactory(mod);
-    registeredCleanupFns.push(() => transformer.delete());
-
-    const reader = mod.make.Reader(await toArrayBuffer(blob));
-    registeredCleanupFns.push(() => reader.delete());
-
-    const sink = mod.make.WriterSink();
-    const writer = sink.getWriter();
-    registeredCleanupFns.push(() => writer.delete());
-
-    const result = transformer.Transform(writer, reader);
-    if (result === TransformResult.ERROR_INVALID_FORMAT) {
-      throw new UnsupportedSourceFile(`transformer<${transformer.Name}> does not recognize this file`);
-    } else if (result !== TransformResult.OK) {
-      throw new Error(`transformer<${transformer.Name}> failed with error: ${TransformResult[result]} (${result})`);
-    }
-
-    return sink.collectBlob();
-  } finally {
-    registeredCleanupFns.forEach((cleanup) => cleanup());
-  }
-}

src/decrypt-worker/util/wasmClass.ts

@@ -0,0 +1,17 @@
+import { isPromise } from 'radash';
+
+export function withWasmClass<T extends { free: () => void }, R>(instance: T, cb: (inst: T) => R): R {
+  let isAsync = false;
+  try {
+    const resp = cb(instance);
+    if (resp && isPromise(resp)) {
+      isAsync = true;
+      resp.finally(() => instance.free());
+    }
+    return resp;
+  } finally {
+    if (!isAsync) {
+      instance.free();
+    }
+  }
+}

src/decrypt-worker/worker.ts

@@ -1,14 +1,19 @@
 import { WorkerServerBus } from '~/util/WorkerEventBus';
 import { DECRYPTION_WORKER_ACTION_NAME } from './constants';
+import { getUmcVersion } from '@unlock-music/crypto';
 
-import { getSDKVersion } from '@jixun/libparakeet';
+import { workerDecryptHandler } from './worker/decrypt.ts';
-
+import { workerParseMusicExMediaName } from './worker/qmcv2_parser.ts';
-import { workerDecryptHandler } from './worker/handler/decrypt';
+import { workerGetQtfmDeviceKey } from '~/decrypt-worker/worker/qtfm_device_key.ts';
-import { workerParseMusicExMediaName } from './worker/handler/qmcv2_parser';
+import { workerParseKuwoHeader } from '~/decrypt-worker/worker/kuwo_header_parse.ts';
+import { workerParseKugouHeader } from '~/decrypt-worker/worker/kugou_parse_header.ts';
 
 const bus = new WorkerServerBus();
 onmessage = bus.onmessage;
 
 bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.DECRYPT, workerDecryptHandler);
 bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.FIND_QMC_MUSICEX_NAME, workerParseMusicExMediaName);
-bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.VERSION, getSDKVersion);
+bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.VERSION, getUmcVersion);
+bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.KUWO_PARSE_HEADER, workerParseKuwoHeader);
+bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.KUGOU_PARSE_HEADER, workerParseKugouHeader);
+bus.addEventHandler(DECRYPTION_WORKER_ACTION_NAME.QINGTING_FM_GET_DEVICE_KEY, workerGetQtfmDeviceKey);

src/decrypt-worker/worker/decrypt.ts

@@ -0,0 +1,91 @@
+import { timedLogger, withGroupedLogs as withTimeGroupedLogs } from '~/util/logUtils.ts';
+import type { DecryptCommandOptions, DecryptCommandPayload } from '~/decrypt-worker/types.ts';
+import { allCryptoFactories } from '../Deciphers.ts';
+import { toBlob } from '~/decrypt-worker/util/buffer.ts';
+import { DecipherFactory, DecipherInstance, Status } from '~/decrypt-worker/Deciphers.ts';
+import { UnsupportedSourceFile } from '~/decrypt-worker/util/DecryptError.ts';
+import { ready as umCryptoReady } from '@unlock-music/crypto';
+import { go } from '~/util/go.ts';
+import { detectAudioExtension } from '~/decrypt-worker/util/audioType.ts';
+
+class DecryptCommandHandler {
+  private readonly label: string;
+
+  constructor(
+    label: string,
+    private buffer: Uint8Array,
+    private options: DecryptCommandOptions,
+  ) {
+    this.label = `DecryptCommandHandler(${label})`;
+  }
+
+  log<R>(label: string, fn: () => Promise<R>): Promise<R> {
+    return timedLogger(`${this.label}: ${label}`, fn);
+  }
+
+  async decrypt(decipherFactories: DecipherFactory[]) {
+    const errors: string[] = [];
+    for (const factory of decipherFactories) {
+      const decipher = factory();
+
+      const [result, error] = await go(this.tryDecryptWith(decipher));
+      if (!error) {
+        if (result) {
+          return result;
+        }
+        errors.push(`${decipher.cipherName}: no response`);
+        continue; // not supported
+      }
+
+      const errMsg = error.message;
+      if (errMsg) {
+        errors.push(`${decipher.cipherName}: ${errMsg}`);
+      }
+      if (error instanceof UnsupportedSourceFile) {
+        console.debug('[%s] Not this decipher:', decipher.cipherName, error);
+      } else {
+        console.error('decrypt failed with unknown error: ', error);
+      }
+    }
+
+    throw new UnsupportedSourceFile(errors.join('\n'));
+  }
+
+  async tryDecryptWith(decipher: DecipherInstance) {
+    const result = await this.log(`try decrypt with ${decipher.cipherName}`, async () =>
+      decipher.decrypt(this.buffer, this.options),
+    );
+    switch (result.status) {
+      case Status.NOT_THIS_CIPHER:
+        return null;
+      case Status.FAILED:
+        throw new Error(`failed: ${result.message}`);
+      default:
+        break;
+    }
+
+    // Check if we had a successful decryption
+    let audioExt = result.overrideExtension || detectAudioExtension(result.data);
+    if (!result.overrideExtension && audioExt === 'bin') {
+      throw new UnsupportedSourceFile('unable to produce valid audio file');
+    }
+
+    // Convert mp4 to m4a
+    if (audioExt.toLowerCase() === 'mp4') {
+      audioExt = 'm4a';
+    }
+
+    return { decrypted: URL.createObjectURL(toBlob(result.data)), ext: audioExt };
+  }
+}
+
+export const workerDecryptHandler = async ({ id: payloadId, blobURI, options }: DecryptCommandPayload) => {
+  await umCryptoReady;
+  const id = payloadId.replace('://', ':');
+  const label = `decrypt(${id})`;
+  return withTimeGroupedLogs(label, async () => {
+    const buffer = await fetch(blobURI).then((r) => r.arrayBuffer());
+    const handler = new DecryptCommandHandler(id, new Uint8Array(buffer), options);
+    return handler.decrypt(allCryptoFactories);
+  });
+};

src/decrypt-worker/worker/handler/decrypt.ts

@@ -1,105 +0,0 @@
-import { Parakeet, fetchParakeet } from '@jixun/libparakeet';
-import { timedLogger, withGroupedLogs as withTimeGroupedLogs } from '~/util/logUtils';
-import type { DecryptCommandOptions, DecryptCommandPayload } from '~/decrypt-worker/types';
-import { allCryptoFactories } from '../../crypto/CryptoFactory';
-import { toArrayBuffer, toBlob } from '~/decrypt-worker/util/buffer';
-import { CryptoBase, CryptoFactory } from '~/decrypt-worker/crypto/CryptoBase';
-import { UnsupportedSourceFile } from '~/decrypt-worker/util/DecryptError';
-
-// Use first 4MiB of the file to perform check.
-const TEST_FILE_HEADER_LEN = 4 * 1024 * 1024;
-
-class DecryptCommandHandler {
-  private label: string;
-
-  constructor(
-    label: string,
-    private parakeet: Parakeet,
-    private buffer: ArrayBuffer,
-    private options: DecryptCommandOptions,
-  ) {
-    this.label = `DecryptCommandHandler(${label})`;
-  }
-
-  log<R>(label: string, fn: () => R): R {
-    return timedLogger(`${this.label}: ${label}`, fn);
-  }
-
-  async decrypt(factories: CryptoFactory[]) {
-    for (const factory of factories) {
-      const decryptor = factory();
-
-      try {
-        const result = await this.decryptFile(decryptor);
-        if (result === null) {
-          continue;
-        }
-        return result;
-      } catch (error) {
-        if (error instanceof UnsupportedSourceFile) {
-          console.debug('WARN: decryptor does not recognize source file, wrong crypto?', error);
-        } else {
-          console.error('decrypt failed with unknown error: ', error);
-        }
-      }
-    }
-
-    throw new UnsupportedSourceFile('could not decrypt file: no working decryptor found');
-  }
-
-  async decryptFile(crypto: CryptoBase) {
-    if (crypto.checkBySignature && !(await crypto.checkBySignature(this.buffer, this.options))) {
-      return null;
-    }
-
-    if (crypto.checkByDecryptHeader && !(await this.acceptByDecryptFileHeader(crypto))) {
-      return null;
-    }
-
-    const decrypted = await this.log(`decrypt (${crypto.cryptoName})`, () => crypto.decrypt(this.buffer, this.options));
-
-    // Check if we had a successful decryption
-    let audioExt = crypto.overrideExtension ?? (await this.detectAudioExtension(decrypted));
-    if (crypto.checkByDecryptHeader && audioExt === 'bin') {
-      return null;
-    }
-    if (audioExt.toLowerCase() === 'mp4') {
-      audioExt = 'm4a';
-    }
-
-    return { decrypted: URL.createObjectURL(toBlob(decrypted)), ext: audioExt };
-  }
-
-  async detectAudioExtension(data: Blob | ArrayBuffer): Promise<string> {
-    return this.log(`detect-audio-ext`, async () => {
-      const header = await toArrayBuffer(data.slice(0, TEST_FILE_HEADER_LEN));
-      return this.parakeet.detectAudioExtension(header);
-    });
-  }
-
-  async acceptByDecryptFileHeader(crypto: CryptoBase): Promise<boolean> {
-    // File too small, ignore.
-    if (this.buffer.byteLength <= TEST_FILE_HEADER_LEN) {
-      return true;
-    }
-
-    // Check by decrypt max first 8MiB
-    const decryptedBuffer = await this.log(`${crypto.cryptoName}/decrypt-header-test`, async () =>
-      toArrayBuffer(await crypto.decrypt(this.buffer.slice(0, TEST_FILE_HEADER_LEN), this.options)),
-    );
-
-    return this.parakeet.detectAudioExtension(decryptedBuffer) !== 'bin';
-  }
-}
-
-export const workerDecryptHandler = async ({ id, blobURI, options }: DecryptCommandPayload) => {
-  const label = `decrypt(${id})`;
-  return withTimeGroupedLogs(label, async () => {
-    const parakeet = await timedLogger(`${label}/init`, fetchParakeet);
-    const blob = await timedLogger(`${label}/fetch-src`, async () => fetch(blobURI).then((r) => r.blob()));
-    const buffer = await timedLogger(`${label}/read-src`, async () => blob.arrayBuffer());
-
-    const handler = new DecryptCommandHandler(id, parakeet, buffer, options);
-    return handler.decrypt(allCryptoFactories);
-  });
-};

src/decrypt-worker/worker/handler/qmcv2_parser.ts

@@ -1,27 +0,0 @@
-import { fetchParakeet, FooterParserState } from '@jixun/libparakeet';
-import type { FetchMusicExNamePayload } from '~/decrypt-worker/types';
-import { makeQMCv2FooterParser } from '~/decrypt-worker/util/qmc2KeyCrypto';
-import { timedLogger, withGroupedLogs as withTimeGroupedLogs } from '~/util/logUtils';
-
-export const workerParseMusicExMediaName = async ({ id, blobURI }: FetchMusicExNamePayload) => {
-  const label = `decrypt(${id})`;
-  return withTimeGroupedLogs(label, async () => {
-    const parakeet = await timedLogger(`${label}/init`, fetchParakeet);
-    const blob = await timedLogger(`${label}/fetch-src`, async () =>
-      fetch(blobURI, { headers: { Range: 'bytes=-1024' } }).then((r) => r.blob()),
-    );
-    const buffer = await timedLogger(`${label}/read-src`, async () => {
-      // Firefox: the range header does not work...?
-      const blobBuffer = await blob.arrayBuffer();
-      if (blobBuffer.byteLength > 1024) {
-        return blobBuffer.slice(-1024);
-      }
-      return blobBuffer;
-    });
-    const parsed = makeQMCv2FooterParser(parakeet).parse(buffer);
-    if (parsed.state === FooterParserState.OK) {
-      return parsed.mediaName;
-    }
-    return '# N/A';
-  });
-};

src/decrypt-worker/worker/kugou_parse_header.ts

@@ -0,0 +1,23 @@
+import {
+  ParseKugouHeaderPayload, ParseKugouHeaderResponse,
+
+} from '~/decrypt-worker/types.ts';
+import { KuGouHeader } from '@unlock-music/crypto';
+
+export const workerParseKugouHeader = async ({ blobURI }: ParseKugouHeaderPayload): Promise<ParseKugouHeaderResponse> => {
+  const blob = await fetch(blobURI, { headers: { Range: 'bytes=0-1023' } }).then((r) => r.blob());
+  const arrayBuffer = await blob.arrayBuffer();
+  const buffer = new Uint8Array(arrayBuffer.slice(0, 0x400));
+
+  let kwm : KuGouHeader | undefined;
+
+  try {
+    kwm = new KuGouHeader(buffer);
+    const { version, audioHash } = kwm;
+    return { version, audioHash };
+  } catch {
+    return null;
+  } finally {
+    kwm?.free();
+  }
+}

src/decrypt-worker/worker/kuwo_header_parse.ts

@@ -0,0 +1,17 @@
+import {  ParseKuwoHeaderPayload, ParseKuwoHeaderResponse } from '~/decrypt-worker/types.ts';
+import { KuwoHeader } from '@unlock-music/crypto';
+
+export const workerParseKuwoHeader = async ({ blobURI }: ParseKuwoHeaderPayload): Promise<ParseKuwoHeaderResponse> => {
+  const blob = await fetch(blobURI, { headers: { Range: 'bytes=0-1023' } }).then((r) => r.blob());
+  const arrayBuffer = await blob.arrayBuffer();
+
+  try {
+    const buffer = new Uint8Array(arrayBuffer.slice(0, 1024));
+    const kwm = KuwoHeader.parse(buffer);
+    const { qualityId, resourceId } = kwm;
+    kwm.free();
+    return { qualityId, resourceId };
+  } catch {
+    return null;
+  }
+};

src/decrypt-worker/worker/qmcv2_parser.ts

@@ -0,0 +1,15 @@
+import type { FetchMusicExNamePayload } from '~/decrypt-worker/types.ts';
+import { QMCFooter } from '@unlock-music/crypto';
+
+export const workerParseMusicExMediaName = async ({ blobURI }: FetchMusicExNamePayload) => {
+  const blob = await fetch(blobURI, { headers: { Range: 'bytes=-1024' } }).then((r) => r.blob());
+  const arrayBuffer = await blob.arrayBuffer();
+
+  try {
+    const buffer = new Uint8Array(arrayBuffer.slice(-1024));
+    const footer = QMCFooter.parse(buffer);
+    return footer?.mediaName || null;
+  } catch {
+    return null;
+  }
+};

src/decrypt-worker/worker/qtfm_device_key.ts

@@ -0,0 +1,15 @@
+import { GetQingTingFMDeviceKeyPayload } from '~/decrypt-worker/types.ts';
+import { QingTingFM } from '@unlock-music/crypto';
+import { hex } from '~/util/hex.ts';
+
+export async function workerGetQtfmDeviceKey({
+  device,
+  brand,
+  model,
+  product,
+  manufacturer,
+  board,
+}: GetQingTingFMDeviceKeyPayload) {
+  const buffer = QingTingFM.getDeviceKey(device, brand, model, product, manufacturer, board);
+  return hex(buffer);
+}

src/faq/KugouFAQ.tsx

@@ -0,0 +1,31 @@
+import { Alert, AlertIcon, Container, Flex, List, ListItem, Text } from '@chakra-ui/react';
+import { Header4 } from '~/components/HelpText/Headers';
+import { SegmentKeyImportInstructions } from './SegmentKeyImportInstructions';
+import { KugouAllInstructions } from '~/features/settings/panels/Kugou/KugouAllInstructions.tsx';
+
+export function KugouFAQ() {
+  return (
+    <>
+      <Header4>解锁失败</Header4>
+      <List spacing={2}>
+        <ListItem>
+          <Text>
+            酷狗现在对部分用户推送了 <code>kgg</code> 加密格式（安卓、Windows 客户端）。
+          </Text>
+          <Text>根据平台不同，你需要提取密钥数据库。</Text>
+
+          <Container p={2}>
+            <Alert status="warning" borderRadius={5}>
+              <AlertIcon />
+              <Flex flexDir="column">
+                <Text>安卓用户提取密钥需要 root 权限，或注入文件提供器。</Text>
+              </Flex>
+            </Alert>
+          </Container>
+
+          <SegmentKeyImportInstructions tab="酷狗密钥" clientInstructions={<KugouAllInstructions />} />
+        </ListItem>
+      </List>
+    </>
+  );
+}

src/faq/KuwoFAQ.tsx

@@ -1,5 +1,5 @@
-import { Alert, AlertIcon, Container, Flex, List, ListItem, Text, chakra } from '@chakra-ui/react';
+import { Alert, AlertIcon, Container, Flex, List, ListItem, Text } from '@chakra-ui/react';
-import { Header4 } from '~/components/HelpText/Header4';
+import { Header4 } from '~/components/HelpText/Headers';
 import { VQuote } from '~/components/HelpText/VQuote';
 import { SegmentTryOfficialPlayer } from './SegmentTryOfficialPlayer';
 import { HiWord } from '~/components/HelpText/HiWord';
@@ -15,9 +15,6 @@ export function KuwoFAQ() {
           <SegmentTryOfficialPlayer />
         </ListItem>
         <ListItem>
-          <Text>
-            <chakra.strong>2、检查您的平台</chakra.strong>
-          </Text>
           <Text>
             日前，仅<HiWord>手机客户端</HiWord>下载的
             <VQuote>
@@ -38,10 +35,10 @@ export function KuwoFAQ() {
               <Flex flexDir="column">
                 <Text>安卓用户提取密钥需要 root 权限，或注入文件提供器。</Text>
                 <Text>
-                  <strong>注意</strong>：已知部分第三方修改版会破坏密钥写入功能，导致无法正常导入密钥。
+                  <strong>注意</strong>：已知部分第三方修改版会破坏密钥写入功能，导致无法提取密钥。
                 </Text>
                 <Text>
-                  <strong>注意</strong>：项目组不提倡使用第三方修改版应用亦不会提供，使用前请自行评估风险。
+                  <strong>注意</strong>：项目组不提倡使用、也不提供第三方修改版。使用前请自行评估风险。
                 </Text>
               </Flex>
             </Alert>

src/faq/OtherFAQ.tsx

@@ -1,6 +1,6 @@
-import { Img, ListItem, Text, UnorderedList } from '@chakra-ui/react';
+import { Alert, AlertIcon, Code, Container, Flex, Img, ListItem, Text, UnorderedList } from '@chakra-ui/react';
 import { ExtLink } from '~/components/ExtLink';
-import { Header4 } from '~/components/HelpText/Header4';
+import { Header4 } from '~/components/HelpText/Headers';
 import { VQuote } from '~/components/HelpText/VQuote';
 import { ProjectIssue } from '~/components/ProjectIssue';
 import LdPlayerSettingsScreen from './assets/ld_settings_misc.webp';
@@ -57,6 +57,19 @@ export function OtherFAQ() {
         </ExtLink>
         。
       </Text>
+
+      <Container p={2}>
+        <Alert status="warning" borderRadius={5}>
+          <AlertIcon />
+          <Flex flexDir="column">
+            <Text>
+              <strong>注意</strong>：根据应用的风控策略，使用模拟器登录的账号<strong>有可能会导致账号被封锁</strong>
+              {'；使用前请自行评估风险。'}
+            </Text>
+          </Flex>
+        </Alert>
+      </Container>
+
       <UnorderedList>
         <ListItem>
           <Text>
@@ -73,6 +86,48 @@ export function OtherFAQ() {
         </ListItem>
       </UnorderedList>
 
+      <Header4>相关项目</Header4>
+      <UnorderedList>
+        <ListItem>
+          <Text>
+            <ExtLink href="https://github.com/CarlGao4/um-react-electron">
+              <strong>
+                <Code>um-react-electron</Code>
+              </strong>
+            </ExtLink>
+            ：利用 Electron 框架打包的本地版，提供适用于 Windows、Linux 和 Mac 平台的可执行文件。
+          </Text>
+          <UnorderedList>
+            <ListItem>
+              <Text>
+                <ExtLink href="https://github.com/CarlGao4/um-react-electron/releases/latest">GitHub 下载</ExtLink>
+              </Text>
+            </ListItem>
+          </UnorderedList>
+        </ListItem>
+        <ListItem>
+          <Text>
+            <ExtLink href="https://git.unlock-music.dev/um/um-react-wry">
+              <strong>
+                <Code>um-react-wry</Code>
+              </strong>
+            </ExtLink>
+            : 使用 WRY 框架封装的 Win64 单文件（需要
+            <ExtLink href="https://go.microsoft.com/fwlink/p/?LinkId=2124703">安装 Edge WebView2 运行时</ExtLink>
+            {'，Win10+ 操作系统自带）'}
+          </Text>
+          <UnorderedList>
+            <ListItem>
+              <Text>
+                <ExtLink href="https://git.unlock-music.dev/um/um-react/releases/latest">仓库下载</ExtLink>
+                {' | 寻找文件名为 '}
+                <Code>um-react-win64-</Code> 开头的附件
+              </Text>
+            </ListItem>
+          </UnorderedList>
+        </ListItem>
+      </UnorderedList>
+
       <Header4>有更多问题？</Header4>
       <Text>
         {'欢迎进入 '}

src/faq/QQMusicFAQ.tsx

@@ -1,63 +1,159 @@
-import { Alert, AlertIcon, Container, Flex, List, ListItem, Text, UnorderedList, chakra } from '@chakra-ui/react';
+import { Accordion, AccordionButton, AccordionIcon, AccordionItem, AccordionPanel, Box } from '@chakra-ui/react';
-import { Header4 } from '~/components/HelpText/Header4';
+import { Alert, AlertIcon, Container, Flex, ListItem, Text, UnorderedList } from '@chakra-ui/react';
+import { Header4 } from '~/components/HelpText/Headers';
 import { SegmentTryOfficialPlayer } from './SegmentTryOfficialPlayer';
-import { QMCv2QQMusicAllInstructions } from '~/features/settings/panels/QMCv2/QMCv2QQMusicAllInstructions';
 import { SegmentKeyImportInstructions } from './SegmentKeyImportInstructions';
 import { ExtLink } from '~/components/ExtLink';
+import { AndroidADBPullInstruction } from '~/components/AndroidADBPullInstruction/AndroidADBPullInstruction';
+import { InstructionsIOS } from '~/features/settings/panels/QMCv2/InstructionsIOS';
+import { InstructionsMac } from '~/features/settings/panels/QMCv2/InstructionsMac';
 
 export function QQMusicFAQ() {
   return (
     <>
       <Header4>解锁失败</Header4>
-      <List spacing={2}>
+      <SegmentTryOfficialPlayer />
-        <ListItem>
+      <Text>重复下载同一首的歌曲不重复扣下载配额，但是同一首歌的两个版本会重复扣下载配额，请仔细分辨。</Text>
-          <SegmentTryOfficialPlayer />
+      <Text>
-        </ListItem>
+        部分平台获取的加密文件未包含密钥。选择你<strong>下载文件时</strong>使用的客户端来查看说明。
-        <ListItem>
+      </Text>
-          <Text>
+      <Accordion allowToggle my={2}>
-            <chakra.strong>2、检查您的平台</chakra.strong>
+        <AccordionItem>
-          </Text>
+          <h2>
-          <Text>
+            <AccordionButton>
-            日前，仅 Windows 客户端 19.43 或更低版本下载的歌曲文件无需密钥，其余平台的官方正式版本均需要提取密钥。
+              <Box as="span" flex="1" textAlign="left">
-            你可以通过下方的链接获取 QQ 音乐 Windows 客户端 v19.43 的安装程序：
+                Windows
-          </Text>
+              </Box>
-          <UnorderedList pl={3}>
+              <AccordionIcon />
-            <ListItem>
+            </AccordionButton>
-              <Text>
+          </h2>
-                <ExtLink href="https://dldir1v6.qq.com/music/clntupate/QQMusic_Setup_1943.exe">
+          <AccordionPanel pb={4}>
-                  <code>qq.com</code> 官方下载地址（推荐）
+            <Text>
-                </ExtLink>
+              目前 Windows 客户端 19.51 或更低版本下载的歌曲文件无需密钥，其余平台的官方正式版本均需要提取密钥。
-              </Text>
+            </Text>
-            </ListItem>
+            <Text>你可以通过下方的链接获取 QQ 音乐 Windows 客户端 v19.51 的安装程序：</Text>
-            <ListItem>
+            <UnorderedList pl={3}>
-              <Text>
+              <ListItem>
-                <ExtLink href="https://web.archive.org/web/2023/https://dldir1v6.qq.com/music/clntupate/QQMusic_Setup_1943.exe">
+                <Text>
-                  <code>Archive.org</code> 存档
+                  <ExtLink href="https://dldir1v6.qq.com/music/clntupate/QQMusic_Setup_1951.exe">
-                </ExtLink>
+                    <code>qq.com</code> 官方下载地址（推荐）
-              </Text>
+                  </ExtLink>
-            </ListItem>
+                </Text>
-          </UnorderedList>
+              </ListItem>
+              <ListItem>
+                <Text>
+                  <ExtLink href="https://web.archive.org/web/2023/https://dldir1v6.qq.com/music/clntupate/QQMusic_Setup_1951.exe">
+                    <code>Archive.org</code> 存档
+                  </ExtLink>
+                </Text>
+              </ListItem>
+            </UnorderedList>
+          </AccordionPanel>
+        </AccordionItem>
 
-          <Container p={2}>
+        <AccordionItem>
-            <Alert status="warning" borderRadius={5}>
+          <h2>
-              <AlertIcon />
+            <AccordionButton>
-              <Flex flexDir="column">
+              <Box as="span" flex="1" textAlign="left">
-                <Text>iOS 用户提取歌曲困难，建议换用电脑操作；</Text>
+                Mac
-                <Text>安卓用户提取密钥需要root，也建议用电脑操作。</Text>
+              </Box>
-              </Flex>
+              <AccordionIcon />
-            </Alert>
+            </AccordionButton>
-          </Container>
+          </h2>
+          <AccordionPanel pb={4}>
+            <Container p={2}>
+              <Alert status="warning" borderRadius={5}>
+                <AlertIcon />
+                <Flex flexDir="column">
+                  <Text>Mac 需要降级到 8.8.0 或以下版本。</Text>
+                  <Text>
+                    <ExtLink href="https://web.archive.org/web/20230903/https://dldir1.qq.com/music/clntupate/mac/QQMusicMac_Mgr.dmg">
+                      <code>Archive.org</code> 存档
+                    </ExtLink>
+                  </Text>
+                </Flex>
+              </Alert>
+            </Container>
 
-          <Container p={2} pt={0}>
+            <SegmentKeyImportInstructions
-            <Alert status="info" borderRadius={5}>
+              tab="QMCv2 密钥"
-              <AlertIcon />
+              keyInstructionText="查看密钥提取说明："
-              重复下载同一首的歌曲不重复扣下载配额，但是同一首歌的两个版本会重复扣下载配额，请仔细分辨。
+              clientInstructions={
-            </Alert>
+                <Box p={2}>
-          </Container>
+                  <InstructionsMac />
+                </Box>
+              }
+            />
+          </AccordionPanel>
+        </AccordionItem>
 
-          <SegmentKeyImportInstructions tab="QMCv2 密钥" clientInstructions={<QMCv2QQMusicAllInstructions />} />
+        <AccordionItem>
-        </ListItem>
+          <h2>
-      </List>
+            <AccordionButton>
+              <Box as="span" flex="1" textAlign="left">
+                安卓 (Android)
+              </Box>
+              <AccordionIcon />
+            </AccordionButton>
+          </h2>
+          <AccordionPanel pb={4}>
+            <Container p={2}>
+              <Alert status="warning" borderRadius={5}>
+                <AlertIcon />
+                <Flex flexDir="column">
+                  <Text>安卓提取密钥需要 root 特权，建议用电脑操作。</Text>
+                </Flex>
+              </Alert>
+            </Container>
+
+            <Text>QQ 音乐官方版本需要提取密钥才能解密。</Text>
+            <Text>
+              你也可以尝试使用【QQ 音乐简洁版】或 OEM 定制版（如小米、魅族定制版）。简洁、定制版本目前不需要提取密钥。
+            </Text>
+
+            <SegmentKeyImportInstructions
+              tab="QMCv2 密钥"
+              keyInstructionText="查看密钥提取说明："
+              clientInstructions={
+                <Box p={2}>
+                  <AndroidADBPullInstruction dir="/data/data/com.tencent.qqmusic/databases" file="player_process_db" />
+                </Box>
+              }
+            />
+          </AccordionPanel>
+        </AccordionItem>
+
+        <AccordionItem>
+          <h2>
+            <AccordionButton>
+              <Box as="span" flex="1" textAlign="left">
+                iOS (iPhone, iPad)
+              </Box>
+              <AccordionIcon />
+            </AccordionButton>
+          </h2>
+          <AccordionPanel pb={4}>
+            <Container p={2}>
+              <Alert status="warning" borderRadius={5}>
+                <AlertIcon />
+                <Flex flexDir="column">
+                  <Text>iOS 用户提取歌曲困难，建议换用电脑操作；</Text>
+                </Flex>
+              </Alert>
+            </Container>
+
+            <SegmentKeyImportInstructions
+              tab="QMCv2 密钥"
+              keyInstructionText="查看密钥提取说明："
+              clientInstructions={
+                <Box p={2}>
+                  <InstructionsIOS />
+                </Box>
+              }
+            />
+          </AccordionPanel>
+        </AccordionItem>
+      </Accordion>
     </>
   );
 }

src/faq/SegmentKeyImportInstructions.tsx

@@ -8,9 +8,14 @@ import { MdFileUpload } from 'react-icons/md';
 export interface SegmentKeyImportInstructionsProps {
   clientInstructions: React.ReactNode;
   tab: string;
+  keyInstructionText?: React.ReactNode;
 }
 
-export function SegmentKeyImportInstructions({ clientInstructions, tab }: SegmentKeyImportInstructionsProps) {
+export function SegmentKeyImportInstructions({
+  clientInstructions,
+  tab,
+  keyInstructionText = '选择你的客户端平台来查看密钥提取说明：',
+}: SegmentKeyImportInstructionsProps) {
   return (
     <>
       <Text>导入密钥可以参考下面的步骤：</Text>
@@ -33,7 +38,7 @@ export function SegmentKeyImportInstructions({ clientInstructions, tab }: Segmen
           </Flex>
         </ListItem>
         <ListItem>
-          <Text>选择你的客户端平台来查看密钥提取说明：</Text>
+          <Text>{keyInstructionText}</Text>
           <Tabs display="flex" flexDir="column" border="1px solid" borderColor="gray.300" borderRadius={5}>
             {clientInstructions}
           </Tabs>

src/faq/SegmentTryOfficialPlayer.tsx

@@ -1,12 +1,12 @@
-import { Text, chakra } from '@chakra-ui/react';
+import { Alert, AlertIcon, Container } from '@chakra-ui/react';
 
 export function SegmentTryOfficialPlayer() {
   return (
-    <>
+    <Container p={2} my={2} pt={0}>
-      <Text>
+      <Alert status="info" borderRadius={5}>
-        <chakra.strong>1、请检查您的文件</chakra.strong>
+        <AlertIcon />
-      </Text>
+        尝试用下载音乐的设备播放一次看看，如果官方客户端都无法播放，那解锁肯定会失败哦。
-      <Text>尝试用下载音乐的设备播放一次看看，如果官方客户端都无法播放，那解锁肯定会失败哦。</Text>
+      </Alert>
-    </>
+    </Container>
   );
 }

src/features/file-listing/FileError.tsx

@@ -1,4 +1,4 @@
-import { chakra, Box, Button, Collapse, Text, useDisclosure } from '@chakra-ui/react';
+import { Box, Button, chakra, Collapse, Text, useDisclosure } from '@chakra-ui/react';
 import { DecryptErrorType } from '~/decrypt-worker/util/DecryptError';
 
 export interface FileErrorProps {
@@ -18,11 +18,12 @@ export function FileError({ error, code }: FileErrorProps) {
     <Box>
       <Text>
         <chakra.span>
-          解密错误：<chakra.span color="red.700">{errorSummary}</chakra.span>
+          解密错误：
+          <chakra.span color="red.700">{errorSummary}</chakra.span>
         </chakra.span>
         {error && (
           <Button ml="2" onClick={onToggle} type="button">
-            详细
+            诊断信息
           </Button>
         )}
       </Text>

src/features/file-listing/fileListingSlice.ts

@@ -1,12 +1,22 @@
-import { createSlice, createAsyncThunk } from '@reduxjs/toolkit';
 import type { PayloadAction } from '@reduxjs/toolkit';
+import { createAsyncThunk, createSlice } from '@reduxjs/toolkit';
 import type { RootState } from '~/store';
 
 import { DECRYPTION_WORKER_ACTION_NAME, type DecryptionResult } from '~/decrypt-worker/constants';
-import type { DecryptCommandOptions, FetchMusicExNamePayload } from '~/decrypt-worker/types';
+import type {
+  DecryptCommandOptions,
+  FetchMusicExNamePayload, ParseKugouHeaderPayload, ParseKugouHeaderResponse,
+  ParseKuwoHeaderPayload,
+  ParseKuwoHeaderResponse
+} from '~/decrypt-worker/types';
 import { decryptionQueue, workerClientBus } from '~/decrypt-worker/client';
 import { DecryptErrorType } from '~/decrypt-worker/util/DecryptError';
-import { selectQMCv2KeyByFileName, selectKWMv2Key, selectQtfmAndroidKey } from '../settings/settingsSelector';
+import {
+  selectKugouKey,
+  selectKWMv2Key,
+  selectQMCv2KeyByFileName,
+  selectQtfmAndroidKey
+} from '../settings/settingsSelector';
 
 export enum ProcessState {
   QUEUED = 'QUEUED',
@@ -43,6 +53,7 @@ export interface FileListingState {
   files: Record<string, DecryptedAudioFile>;
   displayMode: ListingMode;
 }
+
 const initialState: FileListingState = {
   files: {},
   displayMode: ListingMode.LIST,
@@ -64,28 +75,25 @@ export const processFile = createAsyncThunk<
     thunkAPI.dispatch(setFileAsProcessing({ id: fileId }));
   };
 
-  const fileHeader = await fetch(file.raw, { headers: { Range: 'bytes=0-1023' } })
+  const [qmcv2MusicExMediaFile, kuwoHdr, kugouHdr] = await Promise.all([
-    .then((r) => r.blob())
+    workerClientBus.request<string, FetchMusicExNamePayload>(DECRYPTION_WORKER_ACTION_NAME.FIND_QMC_MUSICEX_NAME, {
-    .then((r) => r.arrayBuffer())
-    .then((r) => {
-      if (r.byteLength > 1024) {
-        return r.slice(0, 1024);
-      }
-      return r;
-    });
-
-  const qmcv2MusicExMediaFile = await workerClientBus.request<string, FetchMusicExNamePayload>(
-    DECRYPTION_WORKER_ACTION_NAME.FIND_QMC_MUSICEX_NAME,
-    {
-      id: fileId,
       blobURI: file.raw,
-    },
+    }),
-  );
+    workerClientBus.request<ParseKuwoHeaderResponse, ParseKuwoHeaderPayload>(
+      DECRYPTION_WORKER_ACTION_NAME.KUWO_PARSE_HEADER,
+      { blobURI: file.raw },
+    ),
+    workerClientBus.request<ParseKugouHeaderResponse, ParseKugouHeaderPayload>(
+      DECRYPTION_WORKER_ACTION_NAME.KUGOU_PARSE_HEADER,
+      { blobURI: file.raw },
+    ),
+  ]);
 
   const options: DecryptCommandOptions = {
     fileName: file.fileName,
     qmc2Key: selectQMCv2KeyByFileName(state, qmcv2MusicExMediaFile || file.fileName),
-    kwm2key: selectKWMv2Key(state, new DataView(fileHeader)),
+    kwm2key: selectKWMv2Key(state, kuwoHdr),
+    kugouKey: selectKugouKey(state, kugouHdr),
     qingTingAndroidKey: selectQtfmAndroidKey(state),
   };
   return decryptionQueue.add({ id: fileId, blobURI: file.raw, options }, onPreProcess);

src/features/settings/Settings.tsx

@@ -1,8 +1,8 @@
 import {
-  chakra,
   Box,
   Button,
   Center,
+  chakra,
   Flex,
   HStack,
   Icon,
@@ -19,22 +19,24 @@ import {
   TabPanels,
   Tabs,
   Text,
-  VStack,
   useBreakpointValue,
   useToast,
+  VStack,
 } from '@chakra-ui/react';
 import { PanelQMCv2Key } from './panels/PanelQMCv2Key';
-import { useState } from 'react';
+import { useState, type FC } from 'react';
 import { MdExpandMore, MdMenu, MdOutlineSettingsBackupRestore } from 'react-icons/md';
 import { useAppDispatch, useAppSelector } from '~/hooks';
 import { commitStagingChange, discardStagingChanges } from './settingsSlice';
 import { PanelKWMv2Key } from './panels/PanelKWMv2Key';
 import { selectIsSettingsNotSaved } from './settingsSelector';
 import { PanelQingTing } from './panels/PanelQingTing';
+import { PanelKGGKey } from '~/features/settings/panels/PanelKGGKey.tsx';
 
-const TABS: { name: string; Tab: () => JSX.Element }[] = [
+const TABS: { name: string; Tab: FC }[] = [
   { name: 'QMCv2 密钥', Tab: PanelQMCv2Key },
   { name: 'KWMv2 密钥', Tab: PanelKWMv2Key },
+  { name: 'KGG 密钥', Tab: PanelKGGKey },
   { name: '蜻蜓 FM', Tab: PanelQingTing },
   {
     name: '其它／待定',
@@ -145,7 +147,7 @@ export function Settings() {
                       onClick={handleResetSettings}
                       colorScheme="red"
                       variant="ghost"
-                      title="放弃未储存的更改，将设定还原为储存前的状态。"
+                      title="放弃未储存的更改，将设定还原未储存前的状态。"
                       aria-label="放弃未储存的更改"
                     />
                     <Button onClick={handleApplySettings}>保存</Button>

src/features/settings/keyFormats.ts

@@ -14,6 +14,7 @@ export function productionKeyToStaging<S, P extends Record<string, unknown>>(
   }
   return result;
 }
+
 export function stagingKeyToProduction<S, P>(src: S[], toKey: (s: S) => keyof P, toValue: (s: S) => P[keyof P]): P {
   return objectify(src, toKey, toValue) as P;
 }
@@ -41,7 +42,6 @@ export const qmc2ProductionToStaging = (
 };
 
 // KWMv2 (KuWo)
-
 export interface StagingKWMv2Key {
   id: string;
   /**
@@ -64,7 +64,7 @@ export const parseKwm2ProductionKey = (key: string): null | { rid: string; quali
 
   return { rid, quality };
 };
-export const kwm2StagingToProductionKey = (key: StagingKWMv2Key) => `${key.rid}-${key.quality.replace(/[\D]/g, '')}`;
+export const kwm2StagingToProductionKey = (key: StagingKWMv2Key) => `${key.rid}-${key.quality.replace(/\D/g, '')}`;
 export const kwm2StagingToProductionValue = (key: StagingKWMv2Key) => key.ekey;
 export const kwm2ProductionToStaging = (
   key: keyof ProductionKWMv2Keys,
@@ -78,3 +78,21 @@ export const kwm2ProductionToStaging = (
 
   return { id: nanoid(), rid, quality, ekey: value };
 };
+
+// KuGou (kgg, kgm v5)
+export interface StagingKugouKey {
+  id: string;
+  audioHash: string;
+  ekey: string;
+}
+
+export type ProductionKugouKey = Record<string /* audioHash */, string /* ekey */>;
+export const kugouStagingToProductionKey = (key: StagingKugouKey) => key.audioHash.normalize();
+export const kugouStagingToProductionValue = (key: StagingKugouKey) => key.ekey.normalize();
+export const kugouProductionToStaging = (
+  key: keyof ProductionKugouKey,
+  value: ProductionKugouKey[keyof ProductionKugouKey],
+): null | StagingKugouKey => {
+  if (typeof value !== 'string') return null;
+  return { id: nanoid(), audioHash: key.normalize(), ekey: value };
+};

src/features/settings/panels/Kugou/InstructionsPC.tsx

@@ -0,0 +1,34 @@
+import { Code, Heading, ListItem, OrderedList, Text } from '@chakra-ui/react';
+import { FilePathBlock } from '~/components/FilePathBlock.tsx';
+
+export function InstructionsPC() {
+  return (
+    <>
+      <Text>酷狗的 Windows 客户端使用 <abbr title="SQLite w/ SQLCipher">SQLite</abbr> 数据库储存密钥。</Text>
+      <Text>该密钥文件通常存储在下述路径：</Text>
+      <FilePathBlock>%APPDATA%\KuGou8\KGMusicV3.db</FilePathBlock>
+
+      <Heading as="h3" size="md" mt="4">
+        导入密钥
+      </Heading>
+      <OrderedList>
+        <ListItem>
+          <Text>
+            选中并复制上述的 <Code>KGMusicV3.db</Code> 文件路径
+          </Text>
+        </ListItem>
+        <ListItem>
+          <Text>点击上方的「文件选择区域」，打开「文件选择框」</Text>
+        </ListItem>
+        <ListItem>
+          <Text>
+            在「文件名」输入框中粘贴之前复制的 <Code>KGMusicV3.db</Code> 文件路径
+          </Text>
+        </ListItem>
+        <ListItem>
+          <Text>按下「回车键」确认。</Text>
+        </ListItem>
+      </OrderedList>
+    </>
+  );
+}

src/features/settings/panels/Kugou/KugouAllInstructions.tsx

@@ -0,0 +1,25 @@
+import { Tab, TabList, TabPanel, TabPanels } from '@chakra-ui/react';
+import { AndroidADBPullInstruction } from '~/components/AndroidADBPullInstruction/AndroidADBPullInstruction';
+import { InstructionsPC } from './InstructionsPC';
+
+export function KugouAllInstructions() {
+  return (
+    <>
+      <TabList>
+        <Tab>安卓</Tab>
+        <Tab>Windows</Tab>
+      </TabList>
+      <TabPanels flex={1} overflow="auto">
+        <TabPanel>
+          <AndroidADBPullInstruction
+            dir="/data/data/com.kugou.android/files/mmkv"
+            file="mggkey_multi_process"
+          />
+        </TabPanel>
+        <TabPanel>
+          <InstructionsPC />
+        </TabPanel>
+      </TabPanels>
+    </>
+  );
+}

src/features/settings/panels/Kugou/KugouEKeyItem.tsx

@@ -0,0 +1,72 @@
+import {
+  HStack,
+  Icon,
+  IconButton,
+  Input,
+  InputGroup,
+  InputLeftElement,
+  InputRightElement,
+  ListItem,
+  Text,
+  VStack,
+} from '@chakra-ui/react';
+import { MdDelete, MdVpnKey } from 'react-icons/md';
+import { kugouDeleteKey, kugouUpdateKey } from '../../settingsSlice';
+import { useAppDispatch } from '~/hooks';
+import { memo } from 'react';
+import { StagingKugouKey } from '../../keyFormats';
+
+export const KugouEKeyItem = memo(({ id, ekey, audioHash, i }: StagingKugouKey & { i: number }) => {
+  const dispatch = useAppDispatch();
+
+  const updateKey = (prop: keyof StagingKugouKey, e: React.ChangeEvent<HTMLInputElement>) =>
+    dispatch(kugouUpdateKey({ id, field: prop, value: e.target.value }));
+  const deleteKey = () => dispatch(kugouDeleteKey({ id }));
+
+  return (
+    <ListItem mt={0} pt={2} pb={2} _even={{ bg: 'gray.50' }}>
+      <HStack>
+        <Text w="2em" textAlign="center">
+          {i + 1}
+        </Text>
+
+        <VStack flex={1}>
+          <HStack flex={1} w="full">
+            <Input
+              variant="flushed"
+              placeholder="音频哈希。不建议手动填写。"
+              value={audioHash}
+              onChange={(e) => updateKey('audioHash', e)}
+            />
+          </HStack>
+
+          <InputGroup size="xs">
+            <InputLeftElement pr="2">
+              <Icon as={MdVpnKey} />
+            </InputLeftElement>
+            <Input
+              variant="flushed"
+              placeholder="密钥，通常包含 364 或 704 位字符，没有空格。"
+              value={ekey}
+              onChange={(e) => updateKey('ekey', e)}
+            />
+            <InputRightElement>
+              <Text pl="2" color={ekey.length ? 'green.500' : 'red.500'}>
+                <code>{ekey.length || '?'}</code>
+              </Text>
+            </InputRightElement>
+          </InputGroup>
+        </VStack>
+
+        <IconButton
+          aria-label="删除该密钥"
+          icon={<Icon as={MdDelete} boxSize={6} />}
+          variant="ghost"
+          colorScheme="red"
+          type="button"
+          onClick={deleteKey}
+        />
+      </HStack>
+    </ListItem>
+  );
+});

src/features/settings/panels/PanelKGGKey.tsx

@@ -0,0 +1,87 @@
+import { Box, Flex, Heading, List, Text, useToast } from '@chakra-ui/react';
+import { useState } from 'react';
+import { useDispatch, useSelector } from 'react-redux';
+
+import { ImportSecretModal } from '~/components/ImportSecretModal';
+
+import { kugouAddKey, kugouClearKeys, kugouImportKeys } from '../settingsSlice';
+import { selectStagingKugouV5Keys } from '../settingsSelector';
+import type { StagingKugouKey } from '../keyFormats';
+import { AddKey } from '~/components/AddKey.tsx';
+import { KugouEKeyItem } from '~/features/settings/panels/Kugou/KugouEKeyItem.tsx';
+import { KugouAllInstructions } from '~/features/settings/panels/Kugou/KugouAllInstructions.tsx';
+import { parseAndroidKugouMMKV } from '~/util/mmkv/kugou.ts';
+import { DatabaseKeyExtractor } from '~/util/DatabaseKeyExtractor.ts';
+
+export function PanelKGGKey() {
+  const toast = useToast();
+  const dispatch = useDispatch();
+  const kugouKeys = useSelector(selectStagingKugouV5Keys);
+  const [showImportModal, setShowImportModal] = useState(false);
+
+  const addKey = () => dispatch(kugouAddKey());
+  const clearAll = () => dispatch(kugouClearKeys());
+  const handleSecretImport = async (file: File) => {
+    let keys: Omit<StagingKugouKey, 'id'>[] | null = null;
+    if (/mggkey_multi_process/i.test(file.name)) {
+      keys = parseAndroidKugouMMKV(new DataView(await file.arrayBuffer()));
+    } else if (/^KGMusicV3\.db$/.test(file.name)) {
+      const extractor = await DatabaseKeyExtractor.getInstance();
+      keys = extractor.extractKugouKeyFromEncryptedDb(await file.arrayBuffer());
+    }
+
+    if (keys?.length === 0) {
+      toast({
+        title: '未导入密钥',
+        description: '选择的密钥数据库文件未发现任何可用的密钥。',
+        isClosable: true,
+        status: 'warning',
+      });
+    } else if (keys) {
+      dispatch(kugouImportKeys(keys));
+      setShowImportModal(false);
+      toast({
+        title: `导入完成，共导入了 ${keys.length} 个密钥。`,
+        description: '记得按下「保存」来应用。',
+        isClosable: true,
+        status: 'success',
+      });
+    } else {
+      toast({
+        title: `不支持的文件：${file.name}`,
+        isClosable: true,
+        status: 'error',
+      });
+    }
+  };
+
+  return (
+    <Flex minH={0} flexDir="column" flex={1}>
+      <Heading as="h2" size="lg">
+        酷狗解密密钥 (KGG / KGM v5)
+      </Heading>
+
+      <Text>酷狗已经升级了加密方式，现在使用 KGG / KGM v5 加密。</Text>
+
+      <AddKey addKey={addKey} importKeyFromFile={() => setShowImportModal(true)} clearKeys={clearAll} />
+
+      <Box flex={1} minH={0} overflow="auto" pr="4">
+        <List spacing={3}>
+          {kugouKeys.map(({ id, audioHash, ekey }, i) => (
+            <KugouEKeyItem key={id} id={id} ekey={ekey} audioHash={audioHash} i={i} />
+          ))}
+        </List>
+        {kugouKeys.length === 0 && <Text>还没有添加密钥。</Text>}
+      </Box>
+
+      <ImportSecretModal
+        clientName="酷狗音乐"
+        show={showImportModal}
+        onClose={() => setShowImportModal(false)}
+        onImport={handleSecretImport}
+      >
+        <KugouAllInstructions />
+      </ImportSecretModal>
+    </Flex>
+  );
+}