From fcea0d83168f963f8c559c28aa961e34a82741c8 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Mon, 20 Apr 2026 10:00:50 +0800
Subject: [PATCH 01/17] =?UTF-8?q?=E9=99=90=E5=88=B6=E4=BB=BB=E5=8A=A1?=
 =?UTF-8?q?=E6=A0=8F=E6=AD=8C=E8=AF=8D=E4=BB=85=E6=94=AF=E6=8C=81=20Window?=
 =?UTF-8?q?s?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron/main/core/index.ts          |  5 +++-
 electron/main/ipc/config.ts          |  7 +++--
 electron/main/ipc/window.ts          | 22 ++++++++------
 electron/main/services/tray.ts       |  5 ++--
 electron/main/window/index.ts        |  3 +-
 src/layouts/components/NavHeader.vue | 43 +++++++++++++++++++++-------
 src/styles/global.css                |  2 +-
 7 files changed, 59 insertions(+), 28 deletions(-)

diff --git a/electron/main/core/index.ts b/electron/main/core/index.ts
index 82c52f3..79eb22d 100644
--- a/electron/main/core/index.ts
+++ b/electron/main/core/index.ts
@@ -13,6 +13,7 @@ import { initDatabase, closeDatabase } from "@main/database";
 import { registerCacheScheme, handleCacheProtocol } from "@main/utils/protocol";
 import { coreLog, initLogger } from "@main/utils/logger";
 import { store } from "@main/store";
+import { isWin } from "@main/utils/config";
 
 /**
  * 配置 Chromium 启动参数以优化内存占用
@@ -93,7 +94,9 @@ export const initApp = (): void => {
     // 快照歌词相关窗口的打开状态，供下次启动恢复
     store.set("windowStates.desktopLyric.visible", !!getDesktopLyricWindow());
     store.set("windowStates.dynamicIsland.visible", !!getDynamicIslandWindow());
-    store.set("windowStates.taskbarLyric.visible", !!getTaskbarLyricWindow());
+    if (isWin) {
+      store.set("windowStates.taskbarLyric.visible", !!getTaskbarLyricWindow());
+    }
     shutdownMedia();
     closeDatabase();
   });
diff --git a/electron/main/ipc/config.ts b/electron/main/ipc/config.ts
index fe04501..c1c2ce2 100644
--- a/electron/main/ipc/config.ts
+++ b/electron/main/ipc/config.ts
@@ -17,6 +17,7 @@ import {
   applyTaskbarLyricLayout,
 } from "@main/window";
 import { broadcast } from "@main/utils/broadcast";
+import { isWin } from "@main/utils/config";
 
 /** 配置写入后的副作用 */
 const applyConfigChange = (keyPath: string, value: unknown): void => {
@@ -53,7 +54,7 @@ const applyConfigChange = (keyPath: string, value: unknown): void => {
     case "taskbarLyric.position":
     case "taskbarLyric.autoMaxWidth":
     case "taskbarLyric.maxWidth":
-      applyTaskbarLyricLayout();
+      if (isWin) applyTaskbarLyricLayout();
       break;
   }
   // 桌面歌词配置变更广播到所有窗口
@@ -64,8 +65,8 @@ const applyConfigChange = (keyPath: string, value: unknown): void => {
   if (keyPath.startsWith("dynamicIsland.")) {
     broadcast("dynamicIsland:configChange", store.get("dynamicIsland"));
   }
-  // 任务栏歌词配置变更广播到所有窗口
-  if (keyPath.startsWith("taskbarLyric.")) {
+  // 任务栏歌词配置变更广播到所有窗口（仅 Windows）
+  if (isWin && keyPath.startsWith("taskbarLyric.")) {
     broadcast("taskbarLyric:configChange", store.get("taskbarLyric"));
   }
 };
diff --git a/electron/main/ipc/window.ts b/electron/main/ipc/window.ts
index 7a87ae0..ed3a36b 100644
--- a/electron/main/ipc/window.ts
+++ b/electron/main/ipc/window.ts
@@ -1,5 +1,6 @@
 import { app, ipcMain } from "electron";
 import { store } from "@main/store";
+import { isWin } from "@main/utils/config";
 import {
   toggleDesktopLyricWindow,
   closeDesktopLyricWindow,
@@ -90,14 +91,19 @@ export const registerWindowIpc = (): void => {
     return saved.mode === "floating" ? "floating" : "snapped";
   });
 
-  // 切换任务栏歌词窗口
-  ipcMain.handle("window:toggleTaskbarLyric", () => toggleTaskbarLyricWindow());
-
-  // 关闭任务栏歌词窗口
-  ipcMain.handle("window:closeTaskbarLyric", () => closeTaskbarLyricWindow());
-
-  // 查询任务栏歌词窗口是否打开
-  ipcMain.handle("window:isTaskbarLyricOpen", () => !!getTaskbarLyricWindow());
+  // 任务栏歌词仅在 Windows 注册
+  if (isWin) {
+    // 切换任务栏歌词窗口
+    ipcMain.handle("window:toggleTaskbarLyric", () => toggleTaskbarLyricWindow());
+    // 关闭任务栏歌词窗口
+    ipcMain.handle("window:closeTaskbarLyric", () => closeTaskbarLyricWindow());
+    // 查询任务栏歌词窗口是否打开
+    ipcMain.handle("window:isTaskbarLyricOpen", () => !!getTaskbarLyricWindow());
+  } else {
+    ipcMain.handle("window:toggleTaskbarLyric", () => false);
+    ipcMain.handle("window:closeTaskbarLyric", () => undefined);
+    ipcMain.handle("window:isTaskbarLyricOpen", () => false);
+  }
 
   // 主窗口控制
   ipcMain.on("window:minimize", () => minimizeMainWindow());
diff --git a/electron/main/services/tray.ts b/electron/main/services/tray.ts
index f6cf905..5bfb679 100644
--- a/electron/main/services/tray.ts
+++ b/electron/main/services/tray.ts
@@ -119,13 +119,14 @@ const buildMenu = (): Menu => {
       icon: menuIcon("lyric"),
       click: () => toggleDynamicIslandWindow(),
     },
+    // 任务栏歌词
     ...(isWin
       ? [
           {
             label: taskbarLyricOpen ? t("closeTaskbarLyric") : t("openTaskbarLyric"),
             icon: menuIcon("lyric"),
             click: () => toggleTaskbarLyricWindow(),
-          } as MenuItemConstructorOptions,
+          },
         ]
       : []),
     { type: "separator" },
@@ -147,7 +148,6 @@ export const refreshTray = (): void => {
 
 /** 初始化系统托盘 */
 export const initTray = (): void => {
-  const isWin = process.platform === "win32";
   const isMac = process.platform === "darwin";
   let icon: string | Electron.NativeImage;
   if (isWin) {
@@ -214,6 +214,7 @@ export const setTrayDynamicIsland = (open: boolean): void => {
 
 /** 同步任务栏歌词窗口开关状态到托盘 */
 export const setTrayTaskbarLyric = (open: boolean): void => {
+  if (!isWin) return;
   if (taskbarLyricOpen === open) return;
   taskbarLyricOpen = open;
   refreshTray();
diff --git a/electron/main/window/index.ts b/electron/main/window/index.ts
index 0340c8d..f8dc3b6 100644
--- a/electron/main/window/index.ts
+++ b/electron/main/window/index.ts
@@ -1,8 +1,8 @@
 import { store } from "@main/store";
+import { isWin } from "@main/utils/config";
 import { createDesktopLyricWindow } from "./desktopLyric";
 import { createDynamicIslandWindow } from "./dynamicIsland";
 import { createTaskbarLyricWindow } from "./taskbarLyric";
-import { isWin } from "@main/utils/config";
 
 export { createWindow } from "./create";
 export {
@@ -50,7 +50,6 @@ export {
 
 /** 恢复歌词相关窗口 */
 export const restoreLyricWindows = (): void => {
-  if (!(store.get("system.rememberWindowState") ?? true)) return;
   if (store.get("windowStates.desktopLyric.visible")) createDesktopLyricWindow();
   if (store.get("windowStates.dynamicIsland.visible")) createDynamicIslandWindow();
   if (isWin && store.get("windowStates.taskbarLyric.visible")) {
diff --git a/src/layouts/components/NavHeader.vue b/src/layouts/components/NavHeader.vue
index a4aa217..341e68c 100644
--- a/src/layouts/components/NavHeader.vue
+++ b/src/layouts/components/NavHeader.vue
@@ -50,34 +50,55 @@ const onMenuSelect = (key: string): void => {
 
 <template>
   <div class="flex items-center flex-1 h-full app-drag-region">
-    <!-- 左侧：前进后退 -->
-    <div class="flex items-center gap-3 shrink-0 app-no-drag">
-      <SButton variant="tertiary" circle ripple :size="40" @click="router.back()">
+    <!-- 左侧：容器可拖；按钮本身不可拖（间距、按钮外侧均落入拖拽区） -->
+    <div class="flex items-center gap-3 shrink-0">
+      <SButton
+        class="app-no-drag"
+        variant="tertiary"
+        circle
+        :size="40"
+        :icon-size="20"
+        @click="router.back()"
+      >
         <template #icon><IconLucideChevronLeft /></template>
       </SButton>
-      <SButton variant="tertiary" circle ripple :size="40" @click="router.forward()">
+      <SButton
+        class="app-no-drag"
+        variant="tertiary"
+        circle
+        :size="40"
+        :icon-size="20"
+        @click="router.forward()"
+      >
         <template #icon><IconLucideChevronRight /></template>
       </SButton>
     </div>
-    <!-- 中间：弹性填充（继承父级 drag） -->
+    <!-- 中间 -->
     <div class="flex-1 h-full" />
-    <!-- 右侧：菜单 + 窗口控制 -->
-    <div class="flex items-center gap-3 shrink-0 app-no-drag">
+    <!-- 右侧：容器可拖；按钮本身不可拖 -->
+    <div class="flex items-center gap-3 shrink-0">
       <SDropdownMenu :items="menuItems" @select="onMenuSelect">
         <template #trigger>
-          <SButton variant="tertiary" circle ripple :size="40">
+          <SButton class="app-no-drag" variant="tertiary" circle :size="40">
             <template #icon><IconLucideSettings /></template>
           </SButton>
         </template>
       </SDropdownMenu>
       <SDivider vertical />
-      <SButton variant="tertiary" circle ripple :size="40" :icon-size="16" @click="minimize">
+      <SButton
+        class="app-no-drag"
+        variant="tertiary"
+        circle
+        :size="40"
+        :icon-size="16"
+        @click="minimize"
+      >
         <template #icon><IconMinus /></template>
       </SButton>
       <SButton
+        class="app-no-drag"
         variant="tertiary"
         circle
-        ripple
         :size="40"
         :icon-size="16"
         @click="toggleMaximize"
@@ -86,7 +107,7 @@ const onMenuSelect = (key: string): void => {
           <component :is="isMaximized ? IconCopy : IconSquare" />
         </template>
       </SButton>
-      <SButton variant="tertiary" circle ripple :size="40" :icon-size="16" @click="close">
+      <SButton class="app-no-drag" variant="tertiary" circle :size="40" @click="close">
         <template #icon><IconX /></template>
       </SButton>
     </div>
diff --git a/src/styles/global.css b/src/styles/global.css
index 3edb723..47bcc20 100644
--- a/src/styles/global.css
+++ b/src/styles/global.css
@@ -33,7 +33,7 @@ body {
 
 /* 滚动条 */
 ::-webkit-scrollbar {
-  width: 5px;
+  width: 6px;
 }
 
 ::-webkit-scrollbar-track {

From 05eaa48d1e7f911310cac39aebaea3b29af7a7a4 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Mon, 20 Apr 2026 18:22:34 +0800
Subject: [PATCH 02/17] =?UTF-8?q?=E4=BC=98=E5=8C=96=E9=83=A8=E5=88=86?=
 =?UTF-8?q?=E7=BB=86=E8=8A=82?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 清理 NavHeader 与 core/index.ts 的冗余注释
- 全局禁用 a 标签的拖拽，消除 hover 时的拖影

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 electron/main/core/index.ts          | 6 +-----
 src/layouts/components/NavHeader.vue | 4 ++--
 src/styles/global.css                | 1 +
 3 files changed, 4 insertions(+), 7 deletions(-)

diff --git a/electron/main/core/index.ts b/electron/main/core/index.ts
index 79eb22d..b2a23c8 100644
--- a/electron/main/core/index.ts
+++ b/electron/main/core/index.ts
@@ -26,11 +26,7 @@ const configureMemoryOptimizations = (): void => {
   // 禁用不需要的 Chromium 功能
   app.commandLine.appendSwitch(
     "disable-features",
-    [
-      "MediaRouter", // 不需要 Chromecast
-      "TranslateUI", // 不需要翻译
-      "SpareRendererForSitePerProcess", // 不需要备用渲染进程
-    ].join(","),
+    ["MediaRouter", "TranslateUI", "SpareRendererForSitePerProcess"].join(","),
   );
   // 减少渲染进程内存分配器保留
   app.commandLine.appendSwitch("renderer-process-limit", "1");
diff --git a/src/layouts/components/NavHeader.vue b/src/layouts/components/NavHeader.vue
index 341e68c..7600b98 100644
--- a/src/layouts/components/NavHeader.vue
+++ b/src/layouts/components/NavHeader.vue
@@ -50,7 +50,7 @@ const onMenuSelect = (key: string): void => {
 
 <template>
   <div class="flex items-center flex-1 h-full app-drag-region">
-    <!-- 左侧：容器可拖；按钮本身不可拖（间距、按钮外侧均落入拖拽区） -->
+    <!-- 左侧 -->
     <div class="flex items-center gap-3 shrink-0">
       <SButton
         class="app-no-drag"
@@ -75,7 +75,7 @@ const onMenuSelect = (key: string): void => {
     </div>
     <!-- 中间 -->
     <div class="flex-1 h-full" />
-    <!-- 右侧：容器可拖；按钮本身不可拖 -->
+    <!-- 右侧 -->
     <div class="flex items-center gap-3 shrink-0">
       <SDropdownMenu :items="menuItems" @select="onMenuSelect">
         <template #trigger>
diff --git a/src/styles/global.css b/src/styles/global.css
index 47bcc20..6891550 100644
--- a/src/styles/global.css
+++ b/src/styles/global.css
@@ -8,6 +8,7 @@
   outline: none;
 }
 
+a,
 img {
   -webkit-user-drag: none;
 }

From fd234962d23b3f24d8cd52e4d9575a07d873617d Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Mon, 20 Apr 2026 18:23:21 +0800
Subject: [PATCH 03/17] =?UTF-8?q?=E6=96=B0=E5=A2=9E=E6=8F=92=E4=BB=B6?=
 =?UTF-8?q?=E7=B3=BB=E7=BB=9F=EF=BC=88=E4=B8=BB=E8=BF=9B=E7=A8=8B=E5=86=85?=
 =?UTF-8?q?=E6=A0=B8=20+=20=E7=AE=A1=E7=90=86=E7=95=8C=E9=9D=A2=EF=BC=89?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- 隔离：utilityProcess + vm.createContext 双层沙箱；心跳检测、崩溃自动重启（指数退避 3 次）
- HostApi：request（Electron net.fetch + URL 白名单）/ storage（每插件 KV 原子写）/ log / register / on
- lx 兼容：window.lx 垫片 + gz_ 前缀自动解压，沿用头部 JSDoc 元数据约定
- 路由：search / musicUrl 已端到端；lyric / pic / meta HostApi 已预留
- 渲染端：设置页新增「插件管理」分类，支持原生文件选择框导入、启用开关、卸载确认、状态徽章、lx/源标识
- SettingsItem 支持 fullWidth 模式以承载独占布局的自定义组件
- 打包：electron-vite 配置增补 sandbox.worker 独立 entry
- 详见 docs/plugins-mvp.md

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>
---
 components.d.ts                               |   3 +
 docs/plugins-mvp.md                           | 147 ++++++++
 electron.vite.config.ts                       |   2 +
 electron/main/core/index.ts                   |   4 +
 electron/main/ipc/index.ts                    |   2 +
 electron/main/ipc/plugin.ts                   |  92 +++++
 electron/main/plugins/host.ts                 |  59 +++
 electron/main/plugins/loader.ts               | 150 ++++++++
 electron/main/plugins/lx-shim.ts              | 160 ++++++++
 electron/main/plugins/net.ts                  |  95 +++++
 electron/main/plugins/registry.ts             | 356 ++++++++++++++++++
 electron/main/plugins/router.ts               | 143 +++++++
 electron/main/plugins/sandbox.ts              | 259 +++++++++++++
 electron/main/plugins/sandbox.worker.ts       | 347 +++++++++++++++++
 electron/main/plugins/storage.ts              |  77 ++++
 electron/preload/index.d.ts                   |   2 +
 electron/preload/index.ts                     |  25 ++
 shared/defaults/plugin-api.ts                 |  80 ++++
 shared/defaults/settings.ts                   |   2 +
 shared/types/lyrics.ts                        |   1 +
 shared/types/player.ts                        |  10 +-
 shared/types/plugin.ts                        | 323 ++++++++++++++++
 shared/types/settings.ts                      |   4 +
 src/components/settings/SettingsItem.vue      |   8 +
 .../settings/custom/PluginManager.vue         | 239 ++++++++++++
 src/i18n/locales/en-US.json                   |  33 +-
 src/i18n/locales/zh-CN.json                   |  33 +-
 src/settings/schema.ts                        |  25 ++
 src/stores/plugins.ts                         |  58 +++
 src/types/settings-schema.ts                  |   2 +
 30 files changed, 2736 insertions(+), 5 deletions(-)
 create mode 100644 docs/plugins-mvp.md
 create mode 100644 electron/main/ipc/plugin.ts
 create mode 100644 electron/main/plugins/host.ts
 create mode 100644 electron/main/plugins/loader.ts
 create mode 100644 electron/main/plugins/lx-shim.ts
 create mode 100644 electron/main/plugins/net.ts
 create mode 100644 electron/main/plugins/registry.ts
 create mode 100644 electron/main/plugins/router.ts
 create mode 100644 electron/main/plugins/sandbox.ts
 create mode 100644 electron/main/plugins/sandbox.worker.ts
 create mode 100644 electron/main/plugins/storage.ts
 create mode 100644 shared/defaults/plugin-api.ts
 create mode 100644 shared/types/plugin.ts
 create mode 100644 src/components/settings/custom/PluginManager.vue
 create mode 100644 src/stores/plugins.ts

diff --git a/components.d.ts b/components.d.ts
index ded83af..de3a4e7 100644
--- a/components.d.ts
+++ b/components.d.ts
@@ -64,6 +64,8 @@ declare module 'vue' {
     IconLucideMusic: typeof import('~icons/lucide/music')['default']
     IconLucidePause: typeof import('~icons/lucide/pause')['default']
     IconLucidePlay: typeof import('~icons/lucide/play')['default']
+    IconLucidePlus: typeof import('~icons/lucide/plus')['default']
+    IconLucidePuzzle: typeof import('~icons/lucide/puzzle')['default']
     IconLucideRefreshCw: typeof import('~icons/lucide/refresh-cw')['default']
     IconLucideRepeat: typeof import('~icons/lucide/repeat')['default']
     IconLucideRepeat1: typeof import('~icons/lucide/repeat1')['default']
@@ -89,6 +91,7 @@ declare module 'vue' {
     PlayerCover: typeof import('./src/components/player/FullPlayer/PlayerCover.vue')['default']
     PlayerData: typeof import('./src/components/player/FullPlayer/PlayerData.vue')['default']
     PlaylistPanel: typeof import('./src/components/list/PlaylistPanel.vue')['default']
+    PluginManager: typeof import('./src/components/settings/custom/PluginManager.vue')['default']
     PopoverArrow: typeof import('reka-ui')['PopoverArrow']
     PopoverContent: typeof import('reka-ui')['PopoverContent']
     PopoverPortal: typeof import('reka-ui')['PopoverPortal']
diff --git a/docs/plugins-mvp.md b/docs/plugins-mvp.md
new file mode 100644
index 0000000..a1d66a7
--- /dev/null
+++ b/docs/plugins-mvp.md
@@ -0,0 +1,147 @@
+# 插件系统 MVP 进度与延续文档
+
+> 用于跨设备/跨会话接续本次工作。**本文档就是接续上下文的入口**——另一台机器拉下来后，打开它 + `plans/`（如果同步了 home 目录的 plan 文件）+ `CLAUDE.md` 就能接上。
+
+## 背景
+
+- 参考 `lx-music-desktop` 的 `user_api` 插件机制，为 SPlayer-Next 加入可扩展插件系统
+- 覆盖三类能力：**音源搜索 + URL 解析**、**歌词来源**、**元数据/封面来源**
+- 隔离方案：`utilityProcess.fork()` + 子进程内 `vm.createContext`（进程级 + VM 级双层隔离）
+- 兼容 `lx-music-desktop` 的 `user_api` 脚本（`window.lx` 垫片 + `gz_` 前缀解码）
+- HostApi 一次设计到位，MVP 仅端到端打通 `search` / `musicUrl` 两个动作
+
+## 已完成（MVP）
+
+### 主进程插件内核
+
+| 文件 | 职责 |
+|---|---|
+| `shared/types/plugin.ts` | 跨进程类型契约：`PluginManifest` / `PluginStatus` / `HostApi` / `SandboxIn/Out` / `PluginsApi` 等 |
+| `shared/defaults/plugin-api.ts` | `HOST_API_LEVEL` 常量、action 超时、错误码枚举、默认配置 |
+| `electron/main/plugins/sandbox.ts` | `utilityProcess.fork` 控制器：启停、心跳、崩溃重启、消息编解码 |
+| `electron/main/plugins/sandbox.worker.ts` | 子进程入口：`vm.createContext` → 注入 `splayer` + 可选 `lx` 垫片 → `vm.runInContext` |
+| `electron/main/plugins/host.ts` | `HostApi` 主进程侧 dispatch：network / storage / log |
+| `electron/main/plugins/net.ts` | 网络代理：`net.fetch` + URL 白名单（仅 http/https）+ 超时 |
+| `electron/main/plugins/storage.ts` | 每插件 KV 落盘 `{userData}/plugins/data/{id}.json`，原子写 |
+| `electron/main/plugins/loader.ts` | 头部 JSDoc 解析 + `gz_` 解压 + `id = name + sha1(source).slice(0,8)` |
+| `electron/main/plugins/registry.ts` | `Map<id, PluginRuntime>` + 扫描/启停/重启/生命周期状态机 |
+| `electron/main/plugins/router.ts` | action 调度：`search` / `musicUrl`（超时、取消、fallback） |
+| `electron/main/plugins/lx-shim.ts` | `window.lx` 适配：`request` / `on('request')` / `send('inited')` / `utils` |
+| `electron/main/ipc/plugin.ts` | IPC 注册：`plugin:list/install/pickAndInstall/uninstall/setEnabled/search/resolveUrl` + `plugin:status` 广播 |
+
+### 渲染端插件管理 UI
+
+| 文件 | 职责 |
+|---|---|
+| `src/stores/plugins.ts` | Pinia store：`list` / `load` / `pickAndInstall` / `uninstall` / `setEnabled` + 订阅 `plugin:status` |
+| `src/components/settings/custom/PluginManager.vue` | 管理面板：顶部导入条 / 空态 / 插件卡片列表 / 卸载确认 |
+| `src/components/settings/SettingsItem.vue` | 增加 `fullWidth` 分支渲染（custom 组件独占整行时跳过 label/卡片外壳） |
+| `src/types/settings-schema.ts` | `SettingItem.fullWidth?: boolean` |
+| `src/settings/schema.ts` | 新增 `plugins` category（puzzle 图标）+ 挂 `PluginManager`（fullWidth） |
+
+### 改动的现有文件
+
+- `electron/main/ipc/index.ts` — 注册 `registerPluginIpc()`
+- `electron/main/core/index.ts` — app ready 调 `pluginRegistry.init()`；退出调 `shutdown()`
+- `electron/preload/index.ts` / `index.d.ts` — 新增 `api.plugins.*`（含 `pickAndInstall`）
+- `shared/defaults/settings.ts` — 新增 `plugins: defaultPluginsConfig`
+- `shared/types/settings.ts` — `SystemConfig` 加 `plugins: PluginsConfig`
+- `shared/types/player.ts` — `TrackSource` 扩 `"plugin"`；`Track` / `OnlineMatch` 增 `pluginId` / `pluginSource`
+- `shared/types/lyrics.ts` — `LyricSource` union 加 `{ type: "plugin"; pluginId; format }`
+- `electron.vite.config.ts` — `main.build.rollupOptions.input` 增补 `sandbox.worker` 独立 entry
+- `src/i18n/locales/{zh-CN,en-US}.json` — `settings.group.plugins` / `settings.section.pluginsList` / `settings.plugins.*` / `settings.pluginManager.*`
+
+## 验证方法（DevTools 控制台）
+
+1. `pnpm dev` 起开发环境
+2. 打开"设置 → 插件管理" → 点击"导入插件"选择 `.js` 脚本
+3. 或直接放脚本到 `{userData}/plugins/scripts/{name}.js` + 重启
+4. DevTools 里：
+   ```js
+   await window.api.plugins.list()
+   await window.api.plugins.search({ keyword: "test" })
+   await window.api.plugins.resolveUrl({
+     pluginId: "xxx", source: "kw", musicInfo: { songmid: "abc" }, quality: "320k"
+   })
+   ```
+5. 异常场景：
+   - 强 kill utilityProcess 子进程 → 3 次指数退避自动重启（2s/8s/30s），累计 3 次失败后 `disabled`
+   - 写 `while(true){}` 脚本 → 心跳 10s × 3 miss 后自杀重启
+   - 导入 `gz_` 前缀的 lx 脚本 → loader 自动解压并走 `lx-shim`
+
+## 二期待办（下次会话接续这里）
+
+### 优先 1：让插件真正接入播放链路
+- `src/services/sourceResolver.ts` 渲染端门面：合并多插件结果、按优先级 fallback、去重
+- `src/services/audioLoader.ts` 判断 `track.source === "plugin"` → 先 `resolveUrl` 再交给 player
+- `src/pages/OnlineSearch.vue` 搜索页（或融入 Library）：输入关键词 → 结果列表 → 点击播放
+
+### 优先 2：歌词/元数据接入
+- `src/services/lyricLoader.ts` 新增 `source.type === "plugin"` 分支 → `api.plugins.fetchLyric`
+- 主进程 `ipc/plugin.ts` 暴露 `plugin:fetchLyric` / `plugin:fetchMeta` handler
+- `router.ts` 里已有骨架，补 `lyric` / `meta` action 分派
+
+### 优先 3：UI 增强
+- 每插件独立设置抽屉：读插件上报的 `settingsSchema`（HostApi 已预留）
+- 查看插件日志按钮（现已写文件 `{userData}/plugins/logs/{id}.log`，补一个查看入口）
+- 插件优先级拖拽排序（写 `settings.plugins.priority.{action}[]`）
+
+### 待清理的技术细节
+- `registry.ts` 的 `pickForAction` 方法当前未被使用（router 直接按 listInfo 拿顺序），二期启用优先级后可统一用它
+- `router.ts` `searchAcrossPlugins` 对 `pluginRegistry.listInfo` 的访问写法不够优雅，二期重构
+- `sandbox.worker.ts` 几处 `any` 是因为 `process.parentPort` / `splayer.utils` 需要；Electron 类型出正式 typings 时可去掉
+
+## 三期（未来可选）
+
+- 插件签名（Ed25519 公钥 + 开发者白名单）
+- 官方插件市场（GitHub Releases 拉取 + 版本检测 + 自动更新）
+- 热重载（`chokidar` 监视 `scripts/{id}.js`）
+- UI 扩展位（让插件注册自己的设置面板/菜单项）
+
+## 架构简图
+
+```
+Renderer (Vue)
+  PluginManager.vue ──▶ stores/plugins ──▶ api.plugins.* (preload)
+                                              │
+                                              ▼
+                                      ipc/plugin.ts (main)
+                                              │
+                                    ┌─────────┼─────────┐
+                                    ▼         ▼         ▼
+                                registry   router   host
+                                    │         │         │
+                                    ▼         ▼         ▼
+                                 sandbox (utilityProcess N 个)
+                                    │ vm.createContext
+                                    ▼
+                                  splayer / lx 垫片
+                                    │
+                                    ▼
+                                 插件脚本
+```
+
+## 关键约定
+
+- **脚本头部 JSDoc**：`@name` `@version` 必填；`@description` `@author` `@homepage` `@platform` `@apiLevel` 可选
+- **lx 识别**：`gz_` 前缀 → 自动按 lx 处理；或显式 `@platform lx`
+- **id 生成**：`slugify(name) + sha1(source).slice(0,8)`
+- **HostApi 动作响应形状**：见 `shared/types/plugin.ts` 的 `ActionIO` 映射
+- **超时**：search 10s / musicUrl 20s / lyric·pic·meta 15s
+- **并发**：每插件 4、全局 16（常量定义在 `shared/defaults/plugin-api.ts`）
+
+## 验证命令
+
+```bash
+pnpm typecheck  # 0 error
+pnpm lint       # 0 error / 0 warning
+npx electron-vite build  # 产出 out/main/{index,sandbox.worker}.js
+```
+
+## 接续指引
+
+**新会话打开后**：
+1. 读这份 `docs/plugins-mvp.md`
+2. 读 `CLAUDE.md`（项目约定）
+3. `git log --oneline` 看最近提交确认已到位
+4. 按"二期待办"优先 1 开始：实现 `sourceResolver` + 接 `audioLoader` + 做 `OnlineSearch.vue` 页面
diff --git a/electron.vite.config.ts b/electron.vite.config.ts
index 7eb6bb0..86a7c08 100644
--- a/electron.vite.config.ts
+++ b/electron.vite.config.ts
@@ -16,6 +16,8 @@ export default defineConfig({
       rollupOptions: {
         input: {
           index: resolve(__dirname, "electron/main/index.ts"),
+          // 插件沙箱 worker（utilityProcess 入口）
+          "sandbox.worker": resolve(__dirname, "electron/main/plugins/sandbox.worker.ts"),
         },
       },
     },
diff --git a/electron/main/core/index.ts b/electron/main/core/index.ts
index b2a23c8..4ff3221 100644
--- a/electron/main/core/index.ts
+++ b/electron/main/core/index.ts
@@ -10,6 +10,7 @@ import {
 import { registerIpcHandlers } from "@main/ipc";
 import { init as initMedia, shutdown as shutdownMedia } from "@main/services/media";
 import { initDatabase, closeDatabase } from "@main/database";
+import { pluginRegistry } from "@main/plugins/registry";
 import { registerCacheScheme, handleCacheProtocol } from "@main/utils/protocol";
 import { coreLog, initLogger } from "@main/utils/logger";
 import { store } from "@main/store";
@@ -68,6 +69,8 @@ export const initApp = (): void => {
     registerIpcHandlers();
     // 初始化系统媒体控件
     initMedia();
+    // 初始化插件系统（扫描并启动已启用的插件）
+    pluginRegistry.init();
     // 创建主窗口
     createMainWindow();
     // 恢复歌词相关窗口
@@ -95,5 +98,6 @@ export const initApp = (): void => {
     }
     shutdownMedia();
     closeDatabase();
+    void pluginRegistry.shutdown();
   });
 };
diff --git a/electron/main/ipc/index.ts b/electron/main/ipc/index.ts
index e2705aa..5529d6f 100644
--- a/electron/main/ipc/index.ts
+++ b/electron/main/ipc/index.ts
@@ -4,6 +4,7 @@ import { registerConfigIpc } from "./config";
 import { registerLibraryIpc } from "./library";
 import { registerNowPlayingIpc } from "./nowPlaying";
 import { registerWindowIpc } from "./window";
+import { registerPluginIpc } from "./plugin";
 
 /** 注册所有 IPC 处理 */
 export const registerIpcHandlers = (): void => {
@@ -13,4 +14,5 @@ export const registerIpcHandlers = (): void => {
   registerLibraryIpc();
   registerNowPlayingIpc();
   registerWindowIpc();
+  registerPluginIpc();
 };
diff --git a/electron/main/ipc/plugin.ts b/electron/main/ipc/plugin.ts
new file mode 100644
index 0000000..8329643
--- /dev/null
+++ b/electron/main/ipc/plugin.ts
@@ -0,0 +1,92 @@
+/**
+ * 插件系统 IPC
+ *
+ * 渲染端通过 `window.api.plugins.*` 调用以下 channel：
+ * - plugin:list / install / uninstall / setEnabled
+ * - plugin:search / resolveUrl
+ * 并订阅 `plugin:status` 广播以更新 UI。
+ */
+
+import { ipcMain, dialog } from "electron";
+import type { PluginInfo } from "@shared/types/plugin";
+import { pluginRegistry } from "@main/plugins/registry";
+import { searchAcrossPlugins, resolveUrl } from "@main/plugins/router";
+import { broadcast } from "@main/utils/broadcast";
+import { coreLog } from "@main/utils/logger";
+import { getMainWindow } from "@main/window";
+
+export const registerPluginIpc = (): void => {
+  ipcMain.handle("plugin:list", (): PluginInfo[] => pluginRegistry.listInfo());
+
+  ipcMain.handle("plugin:install", async (_evt, filePath: string) => {
+    try {
+      const info = await pluginRegistry.install(filePath);
+      return { ok: true, id: info.manifest.id };
+    } catch (err) {
+      coreLog.warn("[plugin] install failed:", err);
+      return {
+        ok: false,
+        error: err instanceof Error ? err.message : String(err),
+      };
+    }
+  });
+
+  // 弹出原生文件选择框 → 安装选中的 .js 脚本
+  ipcMain.handle("plugin:pickAndInstall", async () => {
+    const win = getMainWindow();
+    const res = win
+      ? await dialog.showOpenDialog(win, {
+          title: "选择插件脚本",
+          filters: [{ name: "Plugin Script", extensions: ["js"] }],
+          properties: ["openFile"],
+        })
+      : await dialog.showOpenDialog({
+          title: "选择插件脚本",
+          filters: [{ name: "Plugin Script", extensions: ["js"] }],
+          properties: ["openFile"],
+        });
+    if (res.canceled || !res.filePaths[0]) return { ok: false, cancelled: true };
+    try {
+      const info = await pluginRegistry.install(res.filePaths[0]);
+      return { ok: true, id: info.manifest.id };
+    } catch (err) {
+      coreLog.warn("[plugin] pickAndInstall failed:", err);
+      return {
+        ok: false,
+        error: err instanceof Error ? err.message : String(err),
+      };
+    }
+  });
+
+  ipcMain.handle("plugin:uninstall", async (_evt, id: string) => {
+    try {
+      await pluginRegistry.uninstall(id);
+      return { ok: true };
+    } catch (err) {
+      return {
+        ok: false,
+        error: err instanceof Error ? err.message : String(err),
+      };
+    }
+  });
+
+  ipcMain.handle(
+    "plugin:setEnabled",
+    async (_evt, id: string, enabled: boolean) => {
+      await pluginRegistry.setEnabled(id, enabled);
+    },
+  );
+
+  ipcMain.handle("plugin:search", async (_evt, args) => {
+    return searchAcrossPlugins(args);
+  });
+
+  ipcMain.handle("plugin:resolveUrl", async (_evt, args) => {
+    return resolveUrl(args);
+  });
+
+  // 状态变化广播
+  pluginRegistry.on("status", (info: PluginInfo) => {
+    broadcast("plugin:status", info);
+  });
+};
diff --git a/electron/main/plugins/host.ts b/electron/main/plugins/host.ts
new file mode 100644
index 0000000..461c329
--- /dev/null
+++ b/electron/main/plugins/host.ts
@@ -0,0 +1,59 @@
+/**
+ * Host API 主进程侧实现
+ *
+ * 当 sandbox 收到 worker 的 hostCall 消息，调用本模块的 dispatch()，
+ * dispatch 根据 method 去做真实工作（网络/存储），再通过 sandbox.sendHostResult 回传。
+ */
+
+import type { HostCallMethod, HostRequestOptions } from "@shared/types/plugin";
+import { PluginErrorCodes } from "@shared/defaults/plugin-api";
+import type { Sandbox } from "./sandbox";
+import { hostRequest } from "./net";
+import {
+  pluginStorageGet,
+  pluginStorageKeys,
+  pluginStorageRemove,
+  pluginStorageSet,
+} from "./storage";
+
+/** 处理一次 worker→host 调用 */
+export const dispatchHostCall = async (
+  sandbox: Sandbox,
+  pluginId: string,
+  callId: string,
+  method: HostCallMethod,
+  args: unknown[],
+): Promise<void> => {
+  try {
+    let data: unknown;
+    switch (method) {
+      case "request":
+        data = await hostRequest(args[0] as string, (args[1] ?? {}) as HostRequestOptions);
+        break;
+      case "storage.get":
+        data = pluginStorageGet(pluginId, args[0] as string);
+        break;
+      case "storage.set":
+        pluginStorageSet(pluginId, args[0] as string, args[1]);
+        data = undefined;
+        break;
+      case "storage.remove":
+        pluginStorageRemove(pluginId, args[0] as string);
+        data = undefined;
+        break;
+      case "storage.keys":
+        data = pluginStorageKeys(pluginId);
+        break;
+      default:
+        throw Object.assign(new Error(`unknown host method: ${method}`), {
+          code: PluginErrorCodes.UNKNOWN,
+        });
+    }
+    sandbox.sendHostResult(callId, true, data);
+  } catch (err) {
+    sandbox.sendHostResult(callId, false, undefined, {
+      code: ((err as any)?.code as string) ?? PluginErrorCodes.UNKNOWN,
+      message: err instanceof Error ? err.message : String(err),
+    });
+  }
+};
diff --git a/electron/main/plugins/loader.ts b/electron/main/plugins/loader.ts
new file mode 100644
index 0000000..9acb4c9
--- /dev/null
+++ b/electron/main/plugins/loader.ts
@@ -0,0 +1,150 @@
+/**
+ * 插件脚本加载器
+ *
+ * - 读取脚本文件（.js 或 gz_ 压缩文本）
+ * - 解析头部 JSDoc 元数据（`@name` / `@version` / ...）
+ * - 生成稳定的 pluginId（name + sha1(source).slice(0,8)）
+ * - 返回 { source, manifest }
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+import crypto from "node:crypto";
+import zlib from "node:zlib";
+import type { PluginManifest, PluginPlatform } from "@shared/types/plugin";
+import { HOST_API_LEVEL, PluginErrorCodes } from "@shared/defaults/plugin-api";
+
+const GZ_PREFIX = "gz_";
+
+/** lx 脚本头部的 JSDoc 字段。字段长度上限参考 lx */
+const FIELD_LIMITS: Record<string, number> = {
+  name: 24,
+  description: 256,
+  author: 56,
+  homepage: 1024,
+  version: 36,
+};
+
+const HEADER_RE = /^\s*\*\s*@(\w+)\s+(.+?)\s*$/;
+
+/** 解压 gz_ 前缀脚本；若不是 gz_ 直接返回原文 */
+export const decompressIfNeeded = (raw: string): string => {
+  const trimmed = raw.trim();
+  if (!trimmed.startsWith(GZ_PREFIX)) return raw;
+  const payload = trimmed.slice(GZ_PREFIX.length);
+  const buf = Buffer.from(payload, "base64");
+  return zlib.inflateSync(buf).toString("utf-8");
+};
+
+interface HeaderFields {
+  name?: string;
+  description?: string;
+  version?: string;
+  author?: string;
+  homepage?: string;
+  platform?: PluginPlatform;
+  apiLevel?: number;
+}
+
+const parseHeader = (source: string): HeaderFields => {
+  const out: HeaderFields = {};
+  // 只取第一块块注释 /** ... */
+  const commentEnd = source.indexOf("*/");
+  if (commentEnd < 0) return out;
+  const commentStart = source.indexOf("/**");
+  if (commentStart < 0 || commentStart > commentEnd) return out;
+
+  const block = source.slice(commentStart + 3, commentEnd);
+  for (const rawLine of block.split(/\r?\n/)) {
+    const m = HEADER_RE.exec(rawLine);
+    if (!m) continue;
+    const key = m[1];
+    const val = m[2];
+    const limit = FIELD_LIMITS[key];
+    const trimmed = limit ? val.slice(0, limit) : val;
+    switch (key) {
+      case "name":
+      case "description":
+      case "version":
+      case "author":
+      case "homepage":
+        out[key] = trimmed;
+        break;
+      case "platform":
+        out.platform = trimmed === "lx" ? "lx" : "splayer";
+        break;
+      case "apiLevel": {
+        const n = parseInt(trimmed, 10);
+        if (!Number.isNaN(n)) out.apiLevel = n;
+        break;
+      }
+    }
+  }
+  return out;
+};
+
+const sha1 = (data: string): string => crypto.createHash("sha1").update(data).digest("hex");
+
+/** 规范化 name 为 id 可用的 slug */
+const slugify = (name: string): string =>
+  name.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "plugin";
+
+export interface LoadedScript {
+  /** 纯文本源码 */
+  source: string;
+  /** 完整 manifest（含 id / hash / installedAt） */
+  manifest: PluginManifest;
+  /** 是否经过 gz_ 解压 */
+  decompressed: boolean;
+}
+
+/** 从磁盘或原始字符串加载并解析 */
+export const loadScript = (
+  rawOrPath: string,
+  isPath: boolean,
+  fileName?: string,
+): LoadedScript => {
+  const raw = isPath ? fs.readFileSync(rawOrPath, "utf-8") : rawOrPath;
+  const wasCompressed = raw.trim().startsWith(GZ_PREFIX);
+  const source = decompressIfNeeded(raw);
+  const header = parseHeader(source);
+
+  if (!header.name || !header.version) {
+    throw Object.assign(new Error("plugin manifest missing @name or @version"), {
+      code: PluginErrorCodes.INVALID_MANIFEST,
+    });
+  }
+
+  const platform: PluginPlatform =
+    header.platform ?? (wasCompressed ? "lx" : "splayer");
+  const apiLevel = header.apiLevel ?? 1;
+
+  if (apiLevel > HOST_API_LEVEL) {
+    throw Object.assign(
+      new Error(
+        `plugin requires apiLevel ${apiLevel} but host supports ${HOST_API_LEVEL}`,
+      ),
+      { code: PluginErrorCodes.API_LEVEL_MISMATCH },
+    );
+  }
+
+  const hash = sha1(source);
+  const id = `${slugify(header.name)}-${hash.slice(0, 8)}`;
+  const finalFileName = fileName ?? (isPath ? path.basename(rawOrPath) : `${id}.js`);
+
+  const manifest: PluginManifest = {
+    id,
+    name: header.name,
+    version: header.version,
+    description: header.description,
+    author: header.author,
+    homepage: header.homepage,
+    platform,
+    apiLevel,
+    hash,
+    installedAt: Date.now(),
+    fileName: finalFileName,
+  };
+
+  return { source, manifest, decompressed: wasCompressed };
+};
diff --git a/electron/main/plugins/lx-shim.ts b/electron/main/plugins/lx-shim.ts
new file mode 100644
index 0000000..3aaa5ff
--- /dev/null
+++ b/electron/main/plugins/lx-shim.ts
@@ -0,0 +1,160 @@
+/**
+ * lx-music-desktop user_api 脚本兼容垫片
+ *
+ * 在沙箱里注入 `window.lx` / `globalThis.lx`，把 lx 的 `request` / `on` / `send` 桥接到
+ * splayer 的 Host API 上。
+ *
+ * 被 sandbox.worker.ts 导入，运行在 utilityProcess + vm.Context 外层（注入前）。
+ */
+
+import type { HostApi, PluginAction, SourceCapability } from "@shared/types/plugin";
+
+/** lx.request 回调签名 */
+type LxRequestCallback = (
+  err: Error | null,
+  resp?: { statusCode: number; headers: Record<string, string> },
+  body?: unknown,
+) => void;
+
+/** lx.on('request', handler) 的 handler 形状 */
+type LxRequestHandler = (req: {
+  source: string;
+  action: string;
+  info: Record<string, unknown>;
+}) => unknown | Promise<unknown>;
+
+export interface LxCurrentScriptInfo {
+  name: string;
+  description: string;
+  version: string;
+  author: string;
+  homepage: string;
+  rawScript: string;
+}
+
+/**
+ * 安装 lx 垫片
+ * @param sandboxGlobal 沙箱上下文对象（vm.createContext 前的 plain object）
+ * @param splayer 宿主 API 实例
+ * @param handlers 共享的 action handler 注册表
+ * @param onSources 脚本通过 lx.send('inited', {sources}) 注册能力时的回调
+ * @param scriptInfo lx 脚本 currentScriptInfo（主进程解析完头注释后传入）
+ */
+export const installLxShim = (
+  sandboxGlobal: Record<string, unknown>,
+  splayer: HostApi,
+  handlers: Map<PluginAction, (req: unknown) => Promise<unknown>>,
+  onSources: (sources: Record<string, SourceCapability>) => void,
+  scriptInfo?: LxCurrentScriptInfo,
+): void => {
+  let requestHandler: LxRequestHandler | null = null;
+  let inited = false;
+
+  const lxApi = {
+    version: "2.0.0",
+
+    request(url: string, opts: Record<string, unknown>, callback: LxRequestCallback): void {
+      splayer
+        .request(url, {
+          method: (opts?.method as "GET" | "POST") ?? "GET",
+          headers: (opts?.headers as Record<string, string>) ?? {},
+          body: opts?.body as string | Uint8Array | ArrayBuffer | undefined,
+          timeout: (opts?.timeout as number) ?? undefined,
+          responseType: (opts?.responseType as "text" | "json" | "arraybuffer") ?? "text",
+        })
+        .then((resp) => {
+          callback(null, { statusCode: resp.status, headers: resp.headers }, resp.body);
+        })
+        .catch((err: Error) => callback(err));
+    },
+
+    on(eventName: string, handler: LxRequestHandler): void {
+      if (eventName === "request") requestHandler = handler;
+    },
+
+    send(eventName: string, data: Record<string, unknown>): void {
+      if (eventName === "inited" && !inited) {
+        inited = true;
+        const sources = (data?.sources as Record<string, SourceCapability>) ?? {};
+        onSources(sources);
+      } else if (eventName === "updateAlert") {
+        splayer.log.info("[lx] updateAlert:", data);
+      }
+    },
+
+    // lx.utils 形状和 splayer.utils 基本一致（crypto/buffer/zlib）
+    // 直接复用（worker 把 utils 挂在了 splayer 对象上）
+     
+    utils: (splayer as any).utils,
+
+    currentScriptInfo: scriptInfo ?? {
+      name: "",
+      description: "",
+      version: "",
+      author: "",
+      homepage: "",
+      rawScript: "",
+    },
+  };
+
+  sandboxGlobal.lx = lxApi;
+  // 部分脚本通过 window.lx 访问
+  sandboxGlobal.window = { lx: lxApi };
+
+  // 为每个 action 安装一个通用分派器：把 router 的 call 转译成 lx 的 request 形状
+  const registerAction = (action: PluginAction): void => {
+    handlers.set(action, async (req: unknown) => {
+      if (!requestHandler) {
+        throw Object.assign(new Error("lx plugin has not registered request handler"), {
+          code: "PLUGIN_NOT_READY",
+        });
+      }
+      const reqObj = req as Record<string, unknown>;
+      const source = (reqObj.source as string) ?? "";
+      let info: Record<string, unknown>;
+
+      switch (action) {
+        case "musicUrl":
+          info = {
+            type: reqObj.quality,
+            musicInfo: reqObj.musicInfo ?? {},
+          };
+          break;
+        case "lyric":
+        case "pic":
+        case "meta":
+          info = { musicInfo: reqObj.musicInfo ?? {} };
+          break;
+        case "search":
+          info = {
+            keyword: reqObj.keyword,
+            page: reqObj.page ?? 1,
+            limit: reqObj.limit ?? 30,
+          };
+          break;
+        default:
+          info = reqObj;
+      }
+
+      const raw = await Promise.resolve(requestHandler({ source, action, info }));
+
+      // 转换返回值以对齐 splayer HostApi 的响应形状
+      switch (action) {
+        case "musicUrl":
+          if (typeof raw === "string") return { url: raw };
+          return raw;
+        case "pic":
+          if (typeof raw === "string") return { url: raw };
+          return raw;
+        case "search": {
+          if (Array.isArray(raw)) return { list: raw };
+          return raw;
+        }
+        default:
+          return raw;
+      }
+    });
+  };
+
+  (["search", "musicUrl", "lyric", "pic", "meta"] as PluginAction[]).forEach(registerAction);
+};
diff --git a/electron/main/plugins/net.ts b/electron/main/plugins/net.ts
new file mode 100644
index 0000000..b14a5aa
--- /dev/null
+++ b/electron/main/plugins/net.ts
@@ -0,0 +1,95 @@
+/**
+ * 宿主网络代理
+ *
+ * 插件通过 splayer.request(url, opts) 调用本模块，
+ * 主进程用 Electron `net.fetch`（支持系统代理）去请求，应用超时与 URL 白名单。
+ */
+
+import { net } from "electron";
+import type { HostRequestOptions, HostRequestResult } from "@shared/types/plugin";
+import {
+  REQUEST_DEFAULT_TIMEOUT,
+  REQUEST_MAX_TIMEOUT,
+  PluginErrorCodes,
+} from "@shared/defaults/plugin-api";
+
+/** 校验并发起请求；抛出的错误携带 code 字段 */
+export const hostRequest = async (
+  url: string,
+  opts: HostRequestOptions = {},
+): Promise<HostRequestResult> => {
+  // URL 白名单：仅 http/https
+  let parsed: URL;
+  try {
+    parsed = new URL(url);
+  } catch {
+    throw Object.assign(new Error(`invalid url: ${url}`), {
+      code: PluginErrorCodes.URL_NOT_ALLOWED,
+    });
+  }
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw Object.assign(new Error(`protocol not allowed: ${parsed.protocol}`), {
+      code: PluginErrorCodes.URL_NOT_ALLOWED,
+    });
+  }
+
+  const timeoutMs = Math.min(
+    Math.max(opts.timeout ?? REQUEST_DEFAULT_TIMEOUT, 1_000),
+    REQUEST_MAX_TIMEOUT,
+  );
+  const ctrl = new AbortController();
+  const timer = setTimeout(() => ctrl.abort(), timeoutMs);
+
+  // 构造 body
+  let body: BodyInit | undefined;
+  if (opts.body != null) {
+    if (typeof opts.body === "string") body = opts.body;
+    else if (opts.body instanceof ArrayBuffer) body = opts.body;
+    else body = (opts.body as Uint8Array).buffer as ArrayBuffer;
+  }
+
+  try {
+    const resp = await net.fetch(url, {
+      method: opts.method ?? "GET",
+      headers: opts.headers ?? {},
+      body,
+      signal: ctrl.signal,
+      // 让 Electron 遵循系统代理
+      bypassCustomProtocolHandlers: true,
+    });
+
+    const headers: Record<string, string> = {};
+    resp.headers.forEach((value, key) => {
+      headers[key] = value;
+    });
+
+    let responseBody: unknown;
+    const type = opts.responseType ?? "text";
+    if (type === "arraybuffer") {
+      responseBody = new Uint8Array(await resp.arrayBuffer());
+    } else if (type === "json") {
+      const text = await resp.text();
+      try {
+        responseBody = JSON.parse(text);
+      } catch {
+        responseBody = text;
+      }
+    } else {
+      responseBody = await resp.text();
+    }
+
+    return { status: resp.status, headers, body: responseBody };
+  } catch (err) {
+    if ((err as Error).name === "AbortError") {
+      throw Object.assign(new Error("request timeout"), {
+        code: PluginErrorCodes.REQUEST_TIMEOUT,
+      });
+    }
+    throw Object.assign(
+      new Error(`network error: ${err instanceof Error ? err.message : String(err)}`),
+      { code: PluginErrorCodes.NETWORK_ERROR },
+    );
+  } finally {
+    clearTimeout(timer);
+  }
+};
diff --git a/electron/main/plugins/registry.ts b/electron/main/plugins/registry.ts
new file mode 100644
index 0000000..d41fea2
--- /dev/null
+++ b/electron/main/plugins/registry.ts
@@ -0,0 +1,356 @@
+/**
+ * 插件注册表
+ *
+ * - 扫描 `{userData}/plugins/scripts/` 下的 .js 文件
+ * - 维护 `Map<id, PluginRuntime>`（manifest + 运行时状态 + sandbox）
+ * - 提供 install / uninstall / setEnabled / 启停
+ * - 订阅 sandbox 事件，处理 hostCall、crash、重启
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+import { EventEmitter } from "node:events";
+import { app } from "electron";
+import { writeFileSync as atomicWriteSync } from "atomically";
+import type { PluginInfo, PluginManifest, PluginStatus } from "@shared/types/plugin";
+import { PluginErrorCodes, RESTART_MAX_ATTEMPTS } from "@shared/defaults/plugin-api";
+import { store } from "@main/store";
+import { getLocale } from "@main/utils/i18n";
+import { coreLog } from "@main/utils/logger";
+import { Sandbox } from "./sandbox";
+import { loadScript } from "./loader";
+import { dispatchHostCall } from "./host";
+import { pluginStorageDrop } from "./storage";
+
+const pluginsRoot = (): string => path.join(app.getPath("userData"), "plugins");
+const scriptsDir = (): string => path.join(pluginsRoot(), "scripts");
+const manifestFile = (): string => path.join(pluginsRoot(), "manifest.json");
+
+interface StoredManifest {
+  version: 1;
+  plugins: Record<string, PluginManifest>;
+}
+
+const ensureDirs = (): void => {
+  const dirs = [pluginsRoot(), scriptsDir(), path.join(pluginsRoot(), "data")];
+  for (const d of dirs) if (!fs.existsSync(d)) fs.mkdirSync(d, { recursive: true });
+};
+
+const readStored = (): StoredManifest => {
+  try {
+    const raw = fs.readFileSync(manifestFile(), "utf-8");
+    const data = JSON.parse(raw) as StoredManifest;
+    if (data?.version === 1 && data.plugins) return data;
+  } catch {
+    /* ignore */
+  }
+  return { version: 1, plugins: {} };
+};
+
+const writeStored = (data: StoredManifest): void => {
+  ensureDirs();
+  atomicWriteSync(manifestFile(), JSON.stringify(data, null, 2));
+};
+
+interface PluginRuntime {
+  manifest: PluginManifest;
+  enabled: boolean;
+  status: PluginStatus;
+  sandbox: Sandbox | null;
+  source: string;
+  restartAttempts: number;
+  /** router 注册的 pending 调用 */
+  pending: Map<
+    string,
+    {
+      resolve: (data: unknown) => void;
+      reject: (err: Error) => void;
+      timer: NodeJS.Timeout;
+    }
+  >;
+}
+
+class PluginRegistry extends EventEmitter {
+  private runtimes = new Map<string, PluginRuntime>();
+
+  /** 应用启动时调用 */
+  init(): void {
+    ensureDirs();
+    const stored = readStored();
+    const enabledMap = store.get("plugins.enabled") as Record<string, boolean>;
+
+    // 首先加载 stored manifest
+    for (const [id, manifest] of Object.entries(stored.plugins)) {
+      const scriptPath = path.join(scriptsDir(), manifest.fileName);
+      let source = "";
+      try {
+        source = fs.readFileSync(scriptPath, "utf-8");
+        // 重新解压（防止脚本外部被替换为 gz_）
+        const { source: s } = loadScript(source, false, manifest.fileName);
+        source = s;
+      } catch (err) {
+        coreLog.warn(`[plugin] failed to read ${manifest.fileName}:`, err);
+        continue;
+      }
+      const enabled = enabledMap[id] ?? true;
+      this.runtimes.set(id, {
+        manifest,
+        enabled,
+        source,
+        status: { state: "unloaded" },
+        sandbox: null,
+        restartAttempts: 0,
+        pending: new Map(),
+      });
+    }
+
+    // 启动已启用的插件
+    for (const rt of this.runtimes.values()) {
+      if (rt.enabled) this.start(rt).catch(() => {});
+    }
+    coreLog.info(`[plugin] registry initialized, ${this.runtimes.size} plugins loaded`);
+  }
+
+  listInfo(): PluginInfo[] {
+    return Array.from(this.runtimes.values()).map((rt) => ({
+      manifest: rt.manifest,
+      enabled: rt.enabled,
+      status: rt.status,
+    }));
+  }
+
+  getRuntime(id: string): PluginRuntime | undefined {
+    return this.runtimes.get(id);
+  }
+
+  /** 按动作选一个已就绪的插件（优先级 → 首个 ready） */
+  pickForAction(action: keyof StoredPriority, source?: string): PluginRuntime | undefined {
+    const priority = store.get(`plugins.priority.${action}` as never) as string[] | undefined;
+    const ordered = (priority ?? []).slice();
+    // 把不在 priority 里的但能承接此动作的也接上
+    for (const rt of this.runtimes.values()) {
+      if (!ordered.includes(rt.manifest.id)) ordered.push(rt.manifest.id);
+    }
+    for (const id of ordered) {
+      const rt = this.runtimes.get(id);
+      if (!rt || !rt.enabled || rt.status.state !== "ready") continue;
+      // 检查是否声明了该源 + 动作
+      const sources = (rt.status as Extract<PluginStatus, { state: "ready" }>).sources;
+      const sourceKeys = source ? [source] : Object.keys(sources);
+      for (const key of sourceKeys) {
+        const cap = sources[key];
+        if (cap && cap.actions.includes(action as never)) return rt;
+      }
+    }
+    return undefined;
+  }
+
+  /** 导入本地脚本文件 */
+  async install(filePath: string): Promise<PluginInfo> {
+    ensureDirs();
+    const raw = fs.readFileSync(filePath, "utf-8");
+    const { source, manifest } = loadScript(raw, false);
+    // 脚本落盘（明文）
+    const fileName = `${manifest.id}.js`;
+    fs.writeFileSync(path.join(scriptsDir(), fileName), source, "utf-8");
+    manifest.fileName = fileName;
+
+    // 记入 manifest.json
+    const stored = readStored();
+    stored.plugins[manifest.id] = manifest;
+    writeStored(stored);
+
+    // 默认启用
+    const enabledMap = {
+      ...(store.get("plugins.enabled") as Record<string, boolean>),
+      [manifest.id]: true,
+    };
+    store.set("plugins.enabled", enabledMap);
+
+    // 放入运行时
+    const existing = this.runtimes.get(manifest.id);
+    if (existing) await this.stop(existing);
+    const rt: PluginRuntime = {
+      manifest,
+      enabled: true,
+      source,
+      status: { state: "unloaded" },
+      sandbox: null,
+      restartAttempts: 0,
+      pending: new Map(),
+    };
+    this.runtimes.set(manifest.id, rt);
+    await this.start(rt).catch(() => {});
+    return { manifest, enabled: rt.enabled, status: rt.status };
+  }
+
+  async uninstall(id: string): Promise<void> {
+    const rt = this.runtimes.get(id);
+    if (!rt) return;
+    await this.stop(rt);
+    this.runtimes.delete(id);
+
+    const stored = readStored();
+    delete stored.plugins[id];
+    writeStored(stored);
+
+    try {
+      fs.unlinkSync(path.join(scriptsDir(), rt.manifest.fileName));
+    } catch {
+      /* ignore */
+    }
+    pluginStorageDrop(id);
+
+    const enabledMap = { ...(store.get("plugins.enabled") as Record<string, boolean>) };
+    delete enabledMap[id];
+    store.set("plugins.enabled", enabledMap);
+  }
+
+  async setEnabled(id: string, enabled: boolean): Promise<void> {
+    const rt = this.runtimes.get(id);
+    if (!rt) return;
+    rt.enabled = enabled;
+    const enabledMap = {
+      ...(store.get("plugins.enabled") as Record<string, boolean>),
+      [id]: enabled,
+    };
+    store.set("plugins.enabled", enabledMap);
+
+    if (enabled) {
+      if (rt.status.state !== "ready") await this.start(rt).catch(() => {});
+    } else {
+      await this.stop(rt);
+      this.setStatus(rt, { state: "disabled" });
+    }
+  }
+
+  /** 启动单个插件的 sandbox */
+  private async start(rt: PluginRuntime): Promise<void> {
+    if (rt.sandbox?.isAlive()) return;
+    this.setStatus(rt, { state: "loading" });
+
+    const userSettings =
+      ((store.get(`plugins.perPlugin.${rt.manifest.id}` as never) as
+        | Record<string, unknown>
+        | undefined) ?? {});
+
+    const sandbox = new Sandbox(
+      {
+        manifest: rt.manifest,
+        source: rt.source,
+        userSettings,
+        locale: getLocale(),
+      },
+      {
+        onReady: (sources) => {
+          rt.restartAttempts = 0;
+          this.setStatus(rt, { state: "ready", sources });
+        },
+        onResult: (requestId, ok, data, error) => {
+          const p = rt.pending.get(requestId);
+          if (!p) return;
+          rt.pending.delete(requestId);
+          clearTimeout(p.timer);
+          if (ok) p.resolve(data);
+          else {
+            const err = new Error(error?.message ?? "call failed");
+             
+            (err as any).code = error?.code ?? PluginErrorCodes.UNKNOWN;
+            p.reject(err);
+          }
+        },
+        onHostCall: (callId, method, args) => {
+          void dispatchHostCall(sandbox, rt.manifest.id, callId, method, args);
+        },
+        onLog: (level, args) => {
+          coreLog[level](`[plugin:${rt.manifest.id}]`, ...args);
+        },
+        onFatal: (error) => {
+          this.setStatus(rt, { state: "error", error });
+          // 把所有 pending 失败掉
+          for (const p of rt.pending.values()) {
+            clearTimeout(p.timer);
+            p.reject(Object.assign(new Error(error.message), { code: error.code }));
+          }
+          rt.pending.clear();
+        },
+        onExit: (isCrash) => {
+          if (!isCrash) return;
+          rt.restartAttempts++;
+          if (rt.restartAttempts > RESTART_MAX_ATTEMPTS) {
+            this.setStatus(rt, {
+              state: "error",
+              error: {
+                code: PluginErrorCodes.WORKER_CRASHED,
+                message: "plugin crashed too many times",
+              },
+            });
+            return;
+          }
+          const delayMs = [2_000, 8_000, 30_000][rt.restartAttempts - 1] ?? 30_000;
+          setTimeout(() => {
+            if (rt.enabled) this.start(rt).catch(() => {});
+          }, delayMs);
+        },
+      },
+    );
+
+    rt.sandbox = sandbox;
+    try {
+      await sandbox.start();
+    } catch (err) {
+       
+      const code = ((err as any)?.code as string) ?? PluginErrorCodes.UNKNOWN;
+      this.setStatus(rt, {
+        state: "error",
+        error: {
+          code,
+          message: err instanceof Error ? err.message : String(err),
+        },
+      });
+      rt.sandbox = null;
+    }
+  }
+
+  private async stop(rt: PluginRuntime): Promise<void> {
+    if (rt.sandbox) {
+      await rt.sandbox.dispose();
+      rt.sandbox = null;
+    }
+    // 失败掉残留 pending
+    for (const p of rt.pending.values()) {
+      clearTimeout(p.timer);
+      p.reject(
+        Object.assign(new Error("plugin stopped"), {
+          code: PluginErrorCodes.NOT_READY,
+        }),
+      );
+    }
+    rt.pending.clear();
+    this.setStatus(rt, { state: "unloaded" });
+  }
+
+  private setStatus(rt: PluginRuntime, status: PluginStatus): void {
+    rt.status = status;
+    this.emit("status", {
+      manifest: rt.manifest,
+      enabled: rt.enabled,
+      status,
+    } satisfies PluginInfo);
+  }
+
+  /** 应用退出前调用 */
+  async shutdown(): Promise<void> {
+    await Promise.all(Array.from(this.runtimes.values()).map((rt) => this.stop(rt)));
+  }
+}
+
+type StoredPriority = {
+  search: string[];
+  musicUrl: string[];
+  lyric: string[];
+  meta: string[];
+};
+
+export const pluginRegistry = new PluginRegistry();
+export type { PluginRuntime };
diff --git a/electron/main/plugins/router.ts b/electron/main/plugins/router.ts
new file mode 100644
index 0000000..1df5175
--- /dev/null
+++ b/electron/main/plugins/router.ts
@@ -0,0 +1,143 @@
+/**
+ * 插件动作路由
+ *
+ * 把渲染端 / 主进程内部的 action 请求转发给对应插件的 sandbox，
+ * 并处理超时、取消、优先级 fallback。
+ *
+ * MVP 只实现 search / musicUrl；lyric / meta 接入点在二期启用。
+ */
+
+import type {
+  MusicUrlReq,
+  MusicUrlRes,
+  PluginAction,
+  PluginSearchArgs,
+  PluginResolveUrlArgs,
+  SearchRes,
+  SourceCapability,
+} from "@shared/types/plugin";
+import { ACTION_TIMEOUTS, PluginErrorCodes } from "@shared/defaults/plugin-api";
+import { pluginRegistry, type PluginRuntime } from "./registry";
+
+let reqSeq = 0;
+const nextRequestId = (): string => `r${Date.now().toString(36)}-${++reqSeq}`;
+
+/** 在某个插件上调用一个动作，返回结果 */
+const callOn = <T>(
+  rt: PluginRuntime,
+  action: PluginAction,
+  params: unknown,
+  timeoutMs: number,
+): Promise<T> => {
+  if (!rt.sandbox?.isAlive()) {
+    return Promise.reject(
+      Object.assign(new Error(`plugin ${rt.manifest.id} not ready`), {
+        code: PluginErrorCodes.NOT_READY,
+      }),
+    );
+  }
+  const requestId = nextRequestId();
+  return new Promise<T>((resolve, reject) => {
+    const timer = setTimeout(() => {
+      rt.pending.delete(requestId);
+      rt.sandbox?.sendCancel(requestId);
+      reject(
+        Object.assign(new Error(`plugin ${rt.manifest.id} request timeout`), {
+          code: PluginErrorCodes.REQUEST_TIMEOUT,
+        }),
+      );
+    }, timeoutMs);
+    rt.pending.set(requestId, {
+      resolve: (v) => resolve(v as T),
+      reject,
+      timer,
+    });
+    rt.sandbox!.sendCall(requestId, action, params);
+  });
+};
+
+/** 判断某插件的指定源是否支持该动作 */
+const supportsAction = (
+  rt: PluginRuntime,
+  source: string | undefined,
+  action: PluginAction,
+): { ok: boolean; source?: string } => {
+  if (rt.status.state !== "ready") return { ok: false };
+  const sources = rt.status.sources;
+  if (source) {
+    const cap: SourceCapability | undefined = sources[source];
+    if (!cap) return { ok: false };
+    return { ok: cap.actions.includes(action), source };
+  }
+  // 未指定 source：拿第一个支持此动作的
+  for (const [key, cap] of Object.entries(sources)) {
+    if (cap.actions.includes(action)) return { ok: true, source: key };
+  }
+  return { ok: false };
+};
+
+export const searchAcrossPlugins = async (args: PluginSearchArgs): Promise<SearchRes> => {
+  const { keyword, page = 1, limit = 30, pluginId, source } = args;
+  const candidates: PluginRuntime[] = [];
+
+  if (pluginId) {
+    const rt = pluginRegistry.getRuntime(pluginId);
+    if (rt) candidates.push(rt);
+  } else {
+    // 按优先级 + 所有 ready 插件 fallback
+    const priority = (pluginRegistry as unknown as { listInfo: () => unknown }).listInfo
+      ? pluginRegistry.listInfo().map((i) => i.manifest.id)
+      : [];
+    for (const id of priority) {
+      const rt = pluginRegistry.getRuntime(id);
+      if (rt && rt.enabled && rt.status.state === "ready") candidates.push(rt);
+    }
+  }
+
+  const errors: Error[] = [];
+  for (const rt of candidates) {
+    const check = supportsAction(rt, source, "search");
+    if (!check.ok) continue;
+    try {
+      const res = await callOn<SearchRes>(
+        rt,
+        "search",
+        { source: check.source, keyword, page, limit },
+        ACTION_TIMEOUTS.search,
+      );
+      return res;
+    } catch (err) {
+      errors.push(err as Error);
+    }
+  }
+  throw Object.assign(
+    new Error(
+      errors.length
+        ? `all candidate plugins failed: ${errors.map((e) => e.message).join("; ")}`
+        : "no plugin supports search",
+    ),
+    { code: PluginErrorCodes.ACTION_UNSUPPORTED },
+  );
+};
+
+export const resolveUrl = async (args: PluginResolveUrlArgs): Promise<MusicUrlRes> => {
+  const rt = pluginRegistry.getRuntime(args.pluginId);
+  if (!rt) {
+    throw Object.assign(new Error(`plugin ${args.pluginId} not found`), {
+      code: PluginErrorCodes.NOT_FOUND,
+    });
+  }
+  const check = supportsAction(rt, args.source, "musicUrl");
+  if (!check.ok) {
+    throw Object.assign(
+      new Error(`plugin ${args.pluginId} does not support musicUrl on source ${args.source}`),
+      { code: PluginErrorCodes.ACTION_UNSUPPORTED },
+    );
+  }
+  const params: MusicUrlReq = {
+    source: check.source!,
+    quality: args.quality ?? "320k",
+    musicInfo: args.musicInfo,
+  };
+  return callOn<MusicUrlRes>(rt, "musicUrl", params, ACTION_TIMEOUTS.musicUrl);
+};
diff --git a/electron/main/plugins/sandbox.ts b/electron/main/plugins/sandbox.ts
new file mode 100644
index 0000000..04702ab
--- /dev/null
+++ b/electron/main/plugins/sandbox.ts
@@ -0,0 +1,259 @@
+/**
+ * 插件沙箱（主进程侧）
+ *
+ * 封装 utilityProcess.fork，负责：
+ * - 启动/停止/重启子进程
+ * - 发送 init 并等待 ready
+ * - 转发 call / cancel / hostResult
+ * - 心跳检测卡死
+ * - 向上派发事件（ready/result/hostCall/log/fatal/exit）
+ */
+
+import path from "node:path";
+import { utilityProcess, type UtilityProcess, app } from "electron";
+import type {
+  HostCallMethod,
+  PluginAction,
+  PluginErrorPayload,
+  PluginManifest,
+  SandboxIn,
+  SandboxOut,
+  SourceCapability,
+} from "@shared/types/plugin";
+import {
+  HEARTBEAT_INTERVAL,
+  HEARTBEAT_MAX_MISSES,
+  PLUGIN_LOAD_TIMEOUT,
+  PluginErrorCodes,
+} from "@shared/defaults/plugin-api";
+
+export interface SandboxEvents {
+  onReady: (sources: Record<string, SourceCapability>) => void;
+  onResult: (
+    requestId: string,
+    ok: boolean,
+    data?: unknown,
+    error?: PluginErrorPayload,
+  ) => void;
+  onHostCall: (callId: string, method: HostCallMethod, args: unknown[]) => void;
+  onLog: (level: "debug" | "info" | "warn" | "error", args: unknown[]) => void;
+  onFatal: (error: PluginErrorPayload) => void;
+  /** 子进程退出（可能是崩溃或主动 kill）。isCrash=true 表示非主动 kill */
+  onExit: (isCrash: boolean, code: number | null) => void;
+}
+
+export interface SandboxStartOptions {
+  manifest: PluginManifest;
+  /** 插件脚本源码（已解压并去除 gz_ 前缀） */
+  source: string;
+  /** 用户为此插件保存的设置（setting key → value） */
+  userSettings: Record<string, unknown>;
+  /** 主进程当前 locale，透传给插件 */
+  locale: string;
+}
+
+/** utilityProcess 入口脚本的绝对路径 */
+const resolveWorkerEntry = (): string => {
+  // 开发：由 electron-vite 输出到 out/main/sandbox.worker.js
+  // 生产：app.asar 解压后同样在 out/main/
+  const appPath = app.getAppPath();
+  return path.join(appPath, "out", "main", "sandbox.worker.js");
+};
+
+export class Sandbox {
+  private child: UtilityProcess | null = null;
+  private ready = false;
+  private disposed = false;
+  private heartbeatTimer: NodeJS.Timeout | null = null;
+  private heartbeatMisses = 0;
+  private intentionalKill = false;
+
+  constructor(
+    private readonly opts: SandboxStartOptions,
+    private readonly events: SandboxEvents,
+  ) {}
+
+  /** 启动子进程并等待 ready。超时或 fatal 时 reject */
+  start(): Promise<Record<string, SourceCapability>> {
+    if (this.child) return Promise.reject(new Error("sandbox already started"));
+    const entry = resolveWorkerEntry();
+    this.child = utilityProcess.fork(entry, [], {
+      serviceName: `splayer-plugin-${this.opts.manifest.id}`,
+      stdio: "pipe",
+    });
+
+    return new Promise((resolve, reject) => {
+      let settled = false;
+
+      const done = (err: Error | null, sources?: Record<string, SourceCapability>): void => {
+        if (settled) return;
+        settled = true;
+        clearTimeout(loadTimer);
+        if (err) reject(err);
+        else {
+          this.ready = true;
+          this.startHeartbeat();
+          resolve(sources ?? {});
+        }
+      };
+
+      const loadTimer = setTimeout(() => {
+        done(
+          Object.assign(new Error("plugin load timeout"), {
+            code: PluginErrorCodes.LOAD_TIMEOUT,
+          }),
+        );
+        this.kill();
+      }, PLUGIN_LOAD_TIMEOUT);
+
+      this.child!.on("message", (msg: SandboxOut) => {
+        this.onMessage(msg, done);
+      });
+
+      this.child!.on("exit", (code) => {
+        const wasReady = this.ready;
+        this.ready = false;
+        this.stopHeartbeat();
+        this.child = null;
+        if (!settled) {
+          done(
+            Object.assign(new Error(`worker exited before ready, code=${code}`), {
+              code: PluginErrorCodes.WORKER_CRASHED,
+            }),
+          );
+        }
+        if (wasReady && !this.disposed) {
+          this.events.onExit(!this.intentionalKill, code);
+        }
+        this.intentionalKill = false;
+      });
+
+      // stdout/stderr 转发到 log 事件
+      if (this.child!.stdout) {
+        this.child!.stdout.on("data", (chunk: Buffer) => {
+          this.events.onLog("info", [chunk.toString().trimEnd()]);
+        });
+      }
+      if (this.child!.stderr) {
+        this.child!.stderr.on("data", (chunk: Buffer) => {
+          this.events.onLog("error", [chunk.toString().trimEnd()]);
+        });
+      }
+
+      // 发送 init
+      const initMsg: SandboxIn = {
+        kind: "init",
+        pluginId: this.opts.manifest.id,
+        apiLevel: this.opts.manifest.apiLevel,
+        locale: this.opts.locale,
+        appVersion: app.getVersion(),
+        platform: this.opts.manifest.platform,
+        userSettings: this.opts.userSettings,
+        source: this.opts.source,
+      };
+      this.child!.postMessage(initMsg);
+    });
+  }
+
+  /** 把 action call 下发到沙箱 */
+  sendCall(requestId: string, action: PluginAction, params: unknown): void {
+    if (!this.child || !this.ready) {
+      this.events.onResult(requestId, false, undefined, {
+        code: PluginErrorCodes.NOT_READY,
+        message: "plugin is not ready",
+      });
+      return;
+    }
+    const msg: SandboxIn = { kind: "call", requestId, action, params };
+    this.child.postMessage(msg);
+  }
+
+  sendCancel(requestId: string): void {
+    if (!this.child) return;
+    this.child.postMessage({ kind: "cancel", requestId } satisfies SandboxIn);
+  }
+
+  sendHostResult(
+    callId: string,
+    ok: boolean,
+    data?: unknown,
+    error?: PluginErrorPayload,
+  ): void {
+    if (!this.child) return;
+    this.child.postMessage({ kind: "hostResult", callId, ok, data, error } satisfies SandboxIn);
+  }
+
+  isAlive(): boolean {
+    return this.child != null && this.ready && !this.disposed;
+  }
+
+  /** 主动 kill 子进程，会触发 onExit(isCrash=false) */
+  kill(): void {
+    if (!this.child) return;
+    this.intentionalKill = true;
+    try {
+      this.child.kill();
+    } catch {
+      /* ignore */
+    }
+    this.stopHeartbeat();
+  }
+
+  /** 永久释放，之后不再重启 */
+  async dispose(): Promise<void> {
+    this.disposed = true;
+    this.kill();
+  }
+
+  private startHeartbeat(): void {
+    this.stopHeartbeat();
+    this.heartbeatMisses = 0;
+    this.heartbeatTimer = setInterval(() => {
+      if (!this.child) return;
+      this.heartbeatMisses++;
+      if (this.heartbeatMisses > HEARTBEAT_MAX_MISSES) {
+        this.events.onLog("warn", [
+          `plugin ${this.opts.manifest.id} heartbeat lost, killing`,
+        ]);
+        this.kill();
+        return;
+      }
+      this.child.postMessage({ kind: "ping" } satisfies SandboxIn);
+    }, HEARTBEAT_INTERVAL);
+  }
+
+  private stopHeartbeat(): void {
+    if (this.heartbeatTimer) {
+      clearInterval(this.heartbeatTimer);
+      this.heartbeatTimer = null;
+    }
+  }
+
+  private onMessage(
+    msg: SandboxOut,
+    done: (err: Error | null, sources?: Record<string, SourceCapability>) => void,
+  ): void {
+    switch (msg.kind) {
+      case "ready":
+        this.events.onReady(msg.sources);
+        done(null, msg.sources);
+        return;
+      case "result":
+        this.events.onResult(msg.requestId, msg.ok, msg.data, msg.error);
+        return;
+      case "hostCall":
+        this.events.onHostCall(msg.callId, msg.method, msg.args);
+        return;
+      case "log":
+        this.events.onLog(msg.level, msg.args);
+        return;
+      case "pong":
+        this.heartbeatMisses = 0;
+        return;
+      case "fatal":
+        this.events.onFatal(msg.error);
+        done(Object.assign(new Error(msg.error.message), { code: msg.error.code }));
+        return;
+    }
+  }
+}
diff --git a/electron/main/plugins/sandbox.worker.ts b/electron/main/plugins/sandbox.worker.ts
new file mode 100644
index 0000000..31f33a7
--- /dev/null
+++ b/electron/main/plugins/sandbox.worker.ts
@@ -0,0 +1,347 @@
+/**
+ * 插件沙箱子进程入口（utilityProcess fork 的目标）
+ *
+ * 职责：
+ * - 接收主进程 `init` 消息，收到后创建 vm.createContext 作为运行沙箱
+ * - 在沙箱内注入 globalThis.splayer（HostApi 实现），可选 globalThis.lx 垫片
+ * - 用 vm.runInContext 执行插件源码
+ * - 转发 call → handler；hostCall → 主进程；ping → pong
+ *
+ * 注意：本文件在 utilityProcess 里跑，没有 DOM / Electron，只有 Node。
+ * `parentPort` 是 Electron utilityProcess 暴露的双向通道。
+ */
+
+import vm from "node:vm";
+import crypto from "node:crypto";
+import zlib from "node:zlib";
+import type {
+  ActionIO,
+  HostApi,
+  HostCallMethod,
+  HostRequestOptions,
+  HostRequestResult,
+  PluginAction,
+  PluginErrorPayload,
+  SandboxIn,
+  SandboxOut,
+  SourceCapability,
+} from "@shared/types/plugin";
+import { installLxShim } from "./lx-shim";
+
+// utilityProcess 注入的全局 parentPort（Electron 类型没导出，用 any）
+ 
+const parentPort: { on: (evt: "message", cb: (msg: any) => void) => void; postMessage: (msg: SandboxOut) => void } =
+   
+  (process as any).parentPort;
+
+if (!parentPort) {
+  // 未在 utilityProcess 下运行，退出
+  process.exit(1);
+}
+
+const send = (msg: SandboxOut): void => parentPort.postMessage(msg);
+
+/** 等待主进程 init 再启动，避免 TDZ */
+let initialized = false;
+
+/** action → handler 注册表 */
+const handlers = new Map<PluginAction, (req: unknown) => Promise<unknown>>();
+
+/** 已注册的 sources（等 script 执行完后随 ready 消息上报） */
+let registeredSources: Record<string, SourceCapability> = {};
+
+/** 当前请求的 AbortController，key = requestId */
+const inflight = new Map<string, AbortController>();
+
+/** hostCall 回调登记，key = callId */
+const hostCallWaiters = new Map<
+  string,
+  { resolve: (v: unknown) => void; reject: (err: Error) => void }
+>();
+
+let callSeq = 0;
+const nextCallId = (): string => `c${++callSeq}`;
+
+/** 用户设置缓存（init 时传入，getSetting 同步读） */
+let userSettingsCache: Record<string, unknown> = {};
+
+/** 调用主进程，返回主进程 hostResult 的 data */
+const hostCall = (method: HostCallMethod, args: unknown[]): Promise<unknown> => {
+  const callId = nextCallId();
+  return new Promise<unknown>((resolve, reject) => {
+    hostCallWaiters.set(callId, { resolve, reject });
+    send({ kind: "hostCall", callId, method, args });
+  });
+};
+
+/** 构造注入沙箱的 splayer 对象 */
+const buildSplayer = (init: Extract<SandboxIn, { kind: "init" }>): HostApi => ({
+  pluginId: init.pluginId,
+  apiLevel: init.apiLevel,
+  locale: init.locale,
+  appVersion: init.appVersion,
+
+  request: (url: string, opts?: HostRequestOptions): Promise<HostRequestResult> =>
+    hostCall("request", [url, opts ?? {}]) as Promise<HostRequestResult>,
+
+  register: (caps) => {
+    registeredSources = { ...registeredSources, ...caps.sources };
+  },
+
+  on: <A extends PluginAction>(
+    action: A,
+    handler: (req: ActionIO[A]["req"]) => Promise<ActionIO[A]["res"]>,
+  ) => {
+    handlers.set(action, handler as (req: unknown) => Promise<unknown>);
+  },
+
+  log: {
+    debug: (...args) => send({ kind: "log", level: "debug", args }),
+    info: (...args) => send({ kind: "log", level: "info", args }),
+    warn: (...args) => send({ kind: "log", level: "warn", args }),
+    error: (...args) => send({ kind: "log", level: "error", args }),
+  },
+
+  storage: {
+    get: <T = unknown>(key: string): Promise<T | null> =>
+      hostCall("storage.get", [key]) as Promise<T | null>,
+    set: (key, value) => hostCall("storage.set", [key, value]) as Promise<void>,
+    remove: (key) => hostCall("storage.remove", [key]) as Promise<void>,
+    keys: () => hostCall("storage.keys", []) as Promise<string[]>,
+  },
+
+  getSetting: <T = unknown>(key: string): T | undefined =>
+    userSettingsCache[key] as T | undefined,
+});
+
+/** 把 utils 暴露给沙箱（原生 Node 模块包装） */
+const buildUtils = (): object => ({
+  crypto: {
+    md5: (data: string | Uint8Array) =>
+      crypto.createHash("md5").update(data as crypto.BinaryLike).digest("hex"),
+    sha1: (data: string | Uint8Array) =>
+      crypto.createHash("sha1").update(data as crypto.BinaryLike).digest("hex"),
+    sha256: (data: string | Uint8Array) =>
+      crypto.createHash("sha256").update(data as crypto.BinaryLike).digest("hex"),
+    hmac: (algo: string, key: string | Uint8Array, data: string | Uint8Array) =>
+      crypto
+        .createHmac(algo, key as crypto.BinaryLike)
+        .update(data as crypto.BinaryLike)
+        .digest("hex"),
+    randomBytes: (size: number) => crypto.randomBytes(size),
+    aesEncrypt: (
+      data: string | Uint8Array,
+      key: Buffer | Uint8Array,
+      mode: string,
+      iv?: Buffer | Uint8Array,
+    ) => {
+      const cipher = crypto.createCipheriv(mode, key as crypto.CipherKey, iv ?? null);
+      const input = typeof data === "string" ? Buffer.from(data, "utf-8") : Buffer.from(data);
+      return Buffer.concat([cipher.update(input), cipher.final()]);
+    },
+    aesDecrypt: (
+      data: Buffer | Uint8Array,
+      key: Buffer | Uint8Array,
+      mode: string,
+      iv?: Buffer | Uint8Array,
+    ) => {
+      const decipher = crypto.createDecipheriv(mode, key as crypto.CipherKey, iv ?? null);
+      return Buffer.concat([decipher.update(Buffer.from(data)), decipher.final()]);
+    },
+    rsaEncrypt: (data: Buffer | Uint8Array, publicKey: string) =>
+      crypto.publicEncrypt(publicKey, Buffer.from(data)),
+  },
+  buffer: {
+    from: (data: ArrayBuffer | SharedArrayBuffer | string | Uint8Array | number[], enc?: BufferEncoding) =>
+      typeof data === "string" ? Buffer.from(data, enc) : Buffer.from(data as ArrayBuffer),
+    bufToString: (buf: Buffer | Uint8Array, enc: BufferEncoding = "utf-8") =>
+      Buffer.from(buf).toString(enc),
+    concat: (list: Array<Buffer | Uint8Array>) => Buffer.concat(list),
+  },
+  base64: {
+    encode: (data: string | Uint8Array) => Buffer.from(data as Buffer).toString("base64"),
+    decode: (data: string) => Buffer.from(data, "base64").toString("utf-8"),
+  },
+  zlib: {
+    inflate: (data: Buffer | Uint8Array) => zlib.inflateSync(data),
+    deflate: (data: Buffer | Uint8Array) => zlib.deflateSync(data),
+    gunzip: (data: Buffer | Uint8Array) => zlib.gunzipSync(data),
+    gzip: (data: Buffer | Uint8Array) => zlib.gzipSync(data),
+  },
+});
+
+/** 执行插件脚本 */
+const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
+  const splayer = buildSplayer(init);
+  // splayer.utils 单独挂，避免被类型定义暴露（保持 HostApi 纯净）
+   
+  (splayer as any).utils = buildUtils();
+
+  const sandboxGlobal: Record<string, unknown> = {
+    splayer,
+    // 基础 Node 工具
+    Buffer,
+    setTimeout,
+    setInterval,
+    clearTimeout,
+    clearInterval,
+    setImmediate,
+    clearImmediate,
+    queueMicrotask,
+    Promise,
+    URL,
+    URLSearchParams,
+    TextEncoder,
+    TextDecoder,
+    // console 转发到 log
+    console: {
+      log: splayer.log.info,
+      info: splayer.log.info,
+      debug: splayer.log.debug,
+      warn: splayer.log.warn,
+      error: splayer.log.error,
+    },
+  };
+
+  // lx 脚本：注入 window / lx 垫片
+  if (init.platform === "lx") {
+    installLxShim(sandboxGlobal, splayer, handlers, (sources) => {
+      registeredSources = { ...registeredSources, ...sources };
+    });
+  }
+
+  // 允许脚本自引用全局
+  sandboxGlobal.globalThis = sandboxGlobal;
+
+  const context = vm.createContext(sandboxGlobal, {
+    name: `plugin:${init.pluginId}`,
+    codeGeneration: { strings: true, wasm: false },
+  });
+
+  try {
+    const script = new vm.Script(init.source, {
+      filename: `plugin-${init.pluginId}.js`,
+    });
+    script.runInContext(context, { timeout: 5_000, breakOnSigint: false });
+  } catch (err) {
+    send({
+      kind: "fatal",
+      error: {
+        code: "PLUGIN_SCRIPT_ERROR",
+        message: err instanceof Error ? `${err.message}\n${err.stack ?? ""}` : String(err),
+      },
+    });
+    return;
+  }
+
+  // 脚本同步部分执行完，上报 ready + 能力
+  // 注意：lx 脚本通常靠 `lx.send('inited', ...)` 异步声明，shim 里会改 registeredSources
+  // 所以再 microtask 后发 ready
+  queueMicrotask(() => {
+    send({ kind: "ready", sources: registeredSources });
+  });
+};
+
+/** 消息入口 */
+parentPort.on("message", async (msg: SandboxIn) => {
+  try {
+    switch (msg.kind) {
+      case "init": {
+        if (initialized) return;
+        initialized = true;
+        userSettingsCache = msg.userSettings ?? {};
+        runScript(msg);
+        return;
+      }
+      case "ping": {
+        send({ kind: "pong" });
+        return;
+      }
+      case "cancel": {
+        const ctrl = inflight.get(msg.requestId);
+        if (ctrl) {
+          ctrl.abort();
+          inflight.delete(msg.requestId);
+        }
+        return;
+      }
+      case "hostResult": {
+        const w = hostCallWaiters.get(msg.callId);
+        if (!w) return;
+        hostCallWaiters.delete(msg.callId);
+        if (msg.ok) w.resolve(msg.data);
+        else {
+          const err = new Error(msg.error?.message ?? "host call failed");
+           
+          (err as any).code = msg.error?.code;
+          w.reject(err);
+        }
+        return;
+      }
+      case "call": {
+        const handler = handlers.get(msg.action);
+        if (!handler) {
+          send({
+            kind: "result",
+            requestId: msg.requestId,
+            ok: false,
+            error: {
+              code: "PLUGIN_ACTION_UNSUPPORTED",
+              message: `action "${msg.action}" not registered`,
+            },
+          });
+          return;
+        }
+        const ctrl = new AbortController();
+        inflight.set(msg.requestId, ctrl);
+        try {
+          const data = await handler(msg.params);
+          inflight.delete(msg.requestId);
+          if (ctrl.signal.aborted) {
+            send({
+              kind: "result",
+              requestId: msg.requestId,
+              ok: false,
+              error: { code: "PLUGIN_CANCELLED", message: "cancelled" },
+            });
+          } else {
+            send({ kind: "result", requestId: msg.requestId, ok: true, data });
+          }
+        } catch (err) {
+          inflight.delete(msg.requestId);
+          const payload: PluginErrorPayload = {
+            code:
+               
+              ((err as any)?.code as string) ?? "PLUGIN_HANDLER_ERROR",
+            message: err instanceof Error ? err.message : String(err),
+          };
+          send({ kind: "result", requestId: msg.requestId, ok: false, error: payload });
+        }
+        return;
+      }
+    }
+  } catch (err) {
+    send({
+      kind: "fatal",
+      error: {
+        code: "PLUGIN_UNKNOWN",
+        message: err instanceof Error ? err.message : String(err),
+      },
+    });
+  }
+});
+
+process.on("unhandledRejection", (reason) => {
+  send({
+    kind: "log",
+    level: "error",
+    args: ["unhandledRejection:", reason instanceof Error ? reason.message : reason],
+  });
+});
+
+process.on("uncaughtException", (err) => {
+  send({
+    kind: "fatal",
+    error: { code: "PLUGIN_SCRIPT_ERROR", message: err.message },
+  });
+});
diff --git a/electron/main/plugins/storage.ts b/electron/main/plugins/storage.ts
new file mode 100644
index 0000000..b6f3a39
--- /dev/null
+++ b/electron/main/plugins/storage.ts
@@ -0,0 +1,77 @@
+/**
+ * 每插件隔离的 KV 存储
+ *
+ * 落盘：`{userData}/plugins/data/{pluginId}.json`
+ * 原子写（atomically）防撕裂；内存缓存避免频繁读。
+ */
+
+import fs from "node:fs";
+import path from "node:path";
+import { app } from "electron";
+import { writeFileSync as atomicWriteSync } from "atomically";
+
+/** 所有插件数据的根目录 */
+export const getPluginsDataDir = (): string =>
+  path.join(app.getPath("userData"), "plugins", "data");
+
+const caches = new Map<string, Record<string, unknown>>();
+
+const ensureDir = (): void => {
+  const dir = getPluginsDataDir();
+  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
+};
+
+const fileOf = (pluginId: string): string =>
+  path.join(getPluginsDataDir(), `${pluginId}.json`);
+
+const load = (pluginId: string): Record<string, unknown> => {
+  const cached = caches.get(pluginId);
+  if (cached) return cached;
+  try {
+    const raw = fs.readFileSync(fileOf(pluginId), "utf-8");
+    const data = JSON.parse(raw) as Record<string, unknown>;
+    caches.set(pluginId, data);
+    return data;
+  } catch {
+    const empty: Record<string, unknown> = {};
+    caches.set(pluginId, empty);
+    return empty;
+  }
+};
+
+const flush = (pluginId: string, data: Record<string, unknown>): void => {
+  ensureDir();
+  atomicWriteSync(fileOf(pluginId), JSON.stringify(data, null, 2));
+  caches.set(pluginId, data);
+};
+
+export const pluginStorageGet = (pluginId: string, key: string): unknown => {
+  return load(pluginId)[key] ?? null;
+};
+
+export const pluginStorageSet = (pluginId: string, key: string, value: unknown): void => {
+  const data = { ...load(pluginId), [key]: value };
+  flush(pluginId, data);
+};
+
+export const pluginStorageRemove = (pluginId: string, key: string): void => {
+  const cur = load(pluginId);
+  if (!(key in cur)) return;
+  const next = { ...cur };
+  delete next[key];
+  flush(pluginId, next);
+};
+
+export const pluginStorageKeys = (pluginId: string): string[] => {
+  return Object.keys(load(pluginId));
+};
+
+/** 彻底删除某插件的数据文件与缓存 */
+export const pluginStorageDrop = (pluginId: string): void => {
+  caches.delete(pluginId);
+  try {
+    fs.unlinkSync(fileOf(pluginId));
+  } catch {
+    /* ignore */
+  }
+};
diff --git a/electron/preload/index.d.ts b/electron/preload/index.d.ts
index 12cd6bb..6d0a273 100644
--- a/electron/preload/index.d.ts
+++ b/electron/preload/index.d.ts
@@ -3,6 +3,7 @@ import { PlayerApi } from "@shared/types/player";
 import { ConfigApi, LocaleCode } from "@shared/types/settings";
 import { LibraryApi } from "@shared/types/library";
 import { NowPlayingApi } from "@shared/types/nowPlaying";
+import { PluginsApi } from "@shared/types/plugin";
 import {
   WindowApi,
   DesktopLyricApi,
@@ -32,6 +33,7 @@ declare global {
       dynamicIsland: DynamicIslandApi;
       taskbarLyric: TaskbarLyricApi;
       nowPlaying: NowPlayingApi;
+      plugins: PluginsApi;
     };
   }
 }
diff --git a/electron/preload/index.ts b/electron/preload/index.ts
index ac40382..bf05fdb 100644
--- a/electron/preload/index.ts
+++ b/electron/preload/index.ts
@@ -1,6 +1,11 @@
 import { contextBridge, ipcRenderer } from "electron";
 import { electronAPI } from "@electron-toolkit/preload";
 import type { TaskbarLyricSettings } from "@shared/types/settings";
+import type {
+  PluginInfo,
+  PluginResolveUrlArgs,
+  PluginSearchArgs,
+} from "@shared/types/plugin";
 
 /** 订阅主进程推送的事件 */
 const subscribe = <T>(channel: string, callback: (data: T) => void): (() => void) => {
@@ -220,6 +225,26 @@ const api = {
     onConfigChange: (callback: (config: TaskbarLyricSettings) => void) =>
       subscribe<TaskbarLyricSettings>("taskbarLyric:configChange", callback),
   },
+  plugins: {
+    // 列出所有已安装插件
+    list: () => ipcRenderer.invoke("plugin:list"),
+    // 从指定路径导入插件
+    install: (filePath: string) => ipcRenderer.invoke("plugin:install", filePath),
+    // 弹出原生文件选择框导入插件
+    pickAndInstall: () => ipcRenderer.invoke("plugin:pickAndInstall"),
+    // 卸载
+    uninstall: (id: string) => ipcRenderer.invoke("plugin:uninstall", id),
+    // 启用/禁用
+    setEnabled: (id: string, enabled: boolean) =>
+      ipcRenderer.invoke("plugin:setEnabled", id, enabled),
+    // 搜索
+    search: (args: PluginSearchArgs) => ipcRenderer.invoke("plugin:search", args),
+    // 解析播放 URL
+    resolveUrl: (args: PluginResolveUrlArgs) => ipcRenderer.invoke("plugin:resolveUrl", args),
+    // 订阅插件状态变化
+    onStatus: (callback: (info: PluginInfo) => void) =>
+      subscribe<PluginInfo>("plugin:status", callback),
+  },
   nowPlaying: {
     // 渲染进程同步当前播放状态到主进程
     update: (payload: unknown) => ipcRenderer.send("nowPlaying:update", payload),
diff --git a/shared/defaults/plugin-api.ts b/shared/defaults/plugin-api.ts
new file mode 100644
index 0000000..89e8951
--- /dev/null
+++ b/shared/defaults/plugin-api.ts
@@ -0,0 +1,80 @@
+import type { PluginsConfig } from "../types/plugin";
+
+/** 当前 Host API 级别；插件 `@apiLevel` 必须 ≤ 此值才加载 */
+export const HOST_API_LEVEL = 1;
+
+/** 各动作的默认超时（毫秒） */
+export const ACTION_TIMEOUTS = {
+  search: 10_000,
+  musicUrl: 20_000,
+  lyric: 15_000,
+  pic: 15_000,
+  meta: 15_000,
+} as const;
+
+/** 网络请求最大超时 */
+export const REQUEST_MAX_TIMEOUT = 60_000;
+
+/** 网络请求默认超时 */
+export const REQUEST_DEFAULT_TIMEOUT = 15_000;
+
+/** 插件加载超时（从 fork 到收到 ready） */
+export const PLUGIN_LOAD_TIMEOUT = 10_000;
+
+/** 心跳间隔 */
+export const HEARTBEAT_INTERVAL = 10_000;
+
+/** 连续多少次未收到 pong 视为卡死 */
+export const HEARTBEAT_MAX_MISSES = 3;
+
+/** 自动重启次数 */
+export const RESTART_MAX_ATTEMPTS = 3;
+
+/** 每插件并发上限 */
+export const PER_PLUGIN_CONCURRENCY = 4;
+
+/** 错误码 */
+export const PluginErrorCodes = {
+  /** 未知错误 */
+  UNKNOWN: "PLUGIN_UNKNOWN",
+  /** 插件未找到 */
+  NOT_FOUND: "PLUGIN_NOT_FOUND",
+  /** 插件已禁用 */
+  DISABLED: "PLUGIN_DISABLED",
+  /** 插件未就绪 */
+  NOT_READY: "PLUGIN_NOT_READY",
+  /** 插件未注册该动作 */
+  ACTION_UNSUPPORTED: "PLUGIN_ACTION_UNSUPPORTED",
+  /** 加载超时 */
+  LOAD_TIMEOUT: "PLUGIN_LOAD_TIMEOUT",
+  /** 脚本语法错误或执行错误 */
+  SCRIPT_ERROR: "PLUGIN_SCRIPT_ERROR",
+  /** 元数据校验失败 */
+  INVALID_MANIFEST: "PLUGIN_INVALID_MANIFEST",
+  /** API level 不兼容 */
+  API_LEVEL_MISMATCH: "PLUGIN_API_LEVEL_MISMATCH",
+  /** 请求超时 */
+  REQUEST_TIMEOUT: "PLUGIN_REQUEST_TIMEOUT",
+  /** 请求被取消 */
+  CANCELLED: "PLUGIN_CANCELLED",
+  /** 网络错误 */
+  NETWORK_ERROR: "PLUGIN_NETWORK_ERROR",
+  /** URL 协议不允许 */
+  URL_NOT_ALLOWED: "PLUGIN_URL_NOT_ALLOWED",
+  /** 处理器抛出异常 */
+  HANDLER_ERROR: "PLUGIN_HANDLER_ERROR",
+  /** 子进程崩溃 */
+  WORKER_CRASHED: "PLUGIN_WORKER_CRASHED",
+} as const;
+
+/** 默认插件配置 */
+export const defaultPluginsConfig: PluginsConfig = {
+  enabled: {},
+  priority: {
+    search: [],
+    musicUrl: [],
+    lyric: [],
+    meta: [],
+  },
+  perPlugin: {},
+};
diff --git a/shared/defaults/settings.ts b/shared/defaults/settings.ts
index 67b3eaf..7bac5bc 100644
--- a/shared/defaults/settings.ts
+++ b/shared/defaults/settings.ts
@@ -1,4 +1,5 @@
 import type { SystemConfig } from "../types/settings";
+import { defaultPluginsConfig } from "./plugin-api";
 
 /**
  * 灵动岛基准高度（缩放比例 = 1 时的物理像素，等于"主行高度")
@@ -102,4 +103,5 @@ export const defaultSystemConfig: SystemConfig = {
       visible: false,
     },
   },
+  plugins: defaultPluginsConfig,
 };
diff --git a/shared/types/lyrics.ts b/shared/types/lyrics.ts
index d76fad9..178fa81 100644
--- a/shared/types/lyrics.ts
+++ b/shared/types/lyrics.ts
@@ -11,6 +11,7 @@ export interface ExternalLyric {
 export type LyricSource =
   | { type: "external"; format: LyricFormat }
   | { type: "embedded"; format: LyricFormat }
+  | { type: "plugin"; pluginId: string; format: LyricFormat }
   | null;
 
 /** 歌词时间片段 */
diff --git a/shared/types/player.ts b/shared/types/player.ts
index 509077d..ebc37bf 100644
--- a/shared/types/player.ts
+++ b/shared/types/player.ts
@@ -10,7 +10,7 @@ export type RepeatMode = "off" | "list" | "one";
 export type ShuffleMode = "off" | "on";
 
 /** 歌曲来源 */
-export type TrackSource = "local" | "online";
+export type TrackSource = "local" | "online" | "plugin";
 
 /** 歌手 */
 export interface Artist {
@@ -41,6 +41,10 @@ export interface OnlineMatch {
   album?: Album;
   cover?: string;
   coverOriginal?: string;
+  /** 来源插件 ID（source=plugin 时填） */
+  pluginId?: string;
+  /** 插件内部的源名（如 kw/kg/tx） */
+  pluginSource?: string;
 }
 
 /** 歌曲信息 */
@@ -65,6 +69,10 @@ export interface Track {
   /** 音质信息 */
   quality?: AudioQuality;
   matched?: OnlineMatch;
+  /** 来源插件 ID（source=plugin 时填） */
+  pluginId?: string;
+  /** 插件内部的源名 */
+  pluginSource?: string;
 }
 
 /** 歌曲详细信息 */
diff --git a/shared/types/plugin.ts b/shared/types/plugin.ts
new file mode 100644
index 0000000..3a1bc02
--- /dev/null
+++ b/shared/types/plugin.ts
@@ -0,0 +1,323 @@
+/**
+ * 插件系统共享类型
+ * 用于主进程、预加载、渲染进程、沙箱子进程之间的契约
+ */
+
+/** 支持的插件动作 */
+export type PluginAction = "search" | "musicUrl" | "lyric" | "pic" | "meta";
+
+/** 音质等级 */
+export type PluginQuality = "128k" | "320k" | "flac" | "hires";
+
+/** 插件脚本来源平台（用于识别 lx 脚本并启用垫片） */
+export type PluginPlatform = "splayer" | "lx";
+
+/** 插件头部 JSDoc 元数据 */
+export interface PluginManifest {
+  /** 插件唯一 ID = name + sha1(source).slice(0,8) */
+  id: string;
+  /** 展示名 */
+  name: string;
+  /** 版本号 */
+  version: string;
+  /** 简介 */
+  description?: string;
+  /** 作者 */
+  author?: string;
+  /** 主页 */
+  homepage?: string;
+  /** 脚本平台 */
+  platform: PluginPlatform;
+  /** 声明兼容的 Host API 级别 */
+  apiLevel: number;
+  /** 源码 SHA1 */
+  hash: string;
+  /** 安装时间戳（ms） */
+  installedAt: number;
+  /** 脚本相对 `{userData}/plugins/scripts/` 的文件名 */
+  fileName: string;
+}
+
+/** 单个源（如 kw/kg）的能力声明 */
+export interface SourceCapability {
+  /** 展示名 */
+  name: string;
+  /** 支持的动作 */
+  actions: PluginAction[];
+  /** 支持的音质（仅 music 类动作相关） */
+  qualities?: PluginQuality[];
+}
+
+/** 插件运行状态 */
+export type PluginStatus =
+  | { state: "unloaded" }
+  | { state: "loading" }
+  | { state: "ready"; sources: Record<string, SourceCapability> }
+  | { state: "error"; error: { code: string; message: string } }
+  | { state: "disabled" };
+
+/** 渲染端看到的插件条目（manifest + 状态） */
+export interface PluginInfo {
+  manifest: PluginManifest;
+  enabled: boolean;
+  status: PluginStatus;
+}
+
+/* ========== 调用请求 / 响应 ========== */
+
+export interface SearchReq {
+  source: string;
+  keyword: string;
+  page?: number;
+  limit?: number;
+}
+export interface SearchTrackItem {
+  songmid: string;
+  name: string;
+  singer: string;
+  albumName?: string;
+  interval?: string;
+  cover?: string;
+  qualities?: PluginQuality[];
+}
+export interface SearchRes {
+  list: SearchTrackItem[];
+  total?: number;
+}
+
+export interface MusicUrlReq {
+  source: string;
+  quality: PluginQuality;
+  musicInfo: {
+    songmid: string;
+    name?: string;
+    singer?: string;
+    [key: string]: unknown;
+  };
+}
+export interface MusicUrlRes {
+  url: string;
+  quality?: PluginQuality;
+  expire?: number;
+}
+
+export interface LyricReq {
+  source: string;
+  musicInfo: {
+    songmid: string;
+    name?: string;
+    singer?: string;
+    [key: string]: unknown;
+  };
+}
+export interface LyricRes {
+  lyric: string;
+  tlyric?: string | null;
+  rlyric?: string | null;
+  lxlyric?: string | null;
+}
+
+export interface PicReq {
+  source: string;
+  musicInfo: { songmid: string; [key: string]: unknown };
+}
+export interface PicRes {
+  url: string;
+}
+
+export interface MetaReq {
+  source: string;
+  musicInfo: { songmid?: string; name: string; singer?: string; [key: string]: unknown };
+}
+export interface MetaRes {
+  album?: string;
+  cover?: string;
+  year?: number;
+  [key: string]: unknown;
+}
+
+/** Action → 请求/响应映射，用于 HostApi.on 的重载 */
+export interface ActionIO {
+  search: { req: SearchReq; res: SearchRes };
+  musicUrl: { req: MusicUrlReq; res: MusicUrlRes };
+  lyric: { req: LyricReq; res: LyricRes };
+  pic: { req: PicReq; res: PicRes };
+  meta: { req: MetaReq; res: MetaRes };
+}
+
+/* ========== 宿主暴露给插件的 API（在沙箱内注入为 globalThis.splayer） ========== */
+
+export interface HostRequestOptions {
+  method?: "GET" | "POST";
+  headers?: Record<string, string>;
+  body?: string | ArrayBuffer | Uint8Array;
+  /** 毫秒，默认 15000，最大 60000 */
+  timeout?: number;
+  /** 默认 text；arraybuffer 返回 Uint8Array */
+  responseType?: "text" | "json" | "arraybuffer";
+}
+
+export interface HostRequestResult {
+  status: number;
+  headers: Record<string, string>;
+  body: unknown;
+}
+
+export interface HostLogger {
+  debug: (...args: unknown[]) => void;
+  info: (...args: unknown[]) => void;
+  warn: (...args: unknown[]) => void;
+  error: (...args: unknown[]) => void;
+}
+
+export interface HostStorage {
+  get: <T = unknown>(key: string) => Promise<T | null>;
+  set: (key: string, value: unknown) => Promise<void>;
+  remove: (key: string) => Promise<void>;
+  keys: () => Promise<string[]>;
+}
+
+/** 注入沙箱的全局对象形状 */
+export interface HostApi {
+  readonly pluginId: string;
+  readonly apiLevel: number;
+  readonly locale: string;
+  readonly appVersion: string;
+
+  /** 发起网络请求 */
+  request: (url: string, opts?: HostRequestOptions) => Promise<HostRequestResult>;
+
+  /** 声明支持的源与动作 */
+  register: (caps: { sources: Record<string, SourceCapability> }) => void;
+
+  /** 注册动作处理器 */
+  on: <A extends PluginAction>(
+    action: A,
+    handler: (req: ActionIO[A]["req"]) => Promise<ActionIO[A]["res"]>,
+  ) => void;
+
+  /** 日志 */
+  log: HostLogger;
+
+  /** 每插件隔离 KV */
+  storage: HostStorage;
+
+  /** 用户在设置里为此插件配置的值 */
+  getSetting: <T = unknown>(key: string) => T | undefined;
+}
+
+/* ========== 沙箱 ↔ 主进程消息协议 ========== */
+
+export interface PluginErrorPayload {
+  code: string;
+  message: string;
+}
+
+/** 主 → worker */
+export type SandboxIn =
+  | {
+      kind: "init";
+      pluginId: string;
+      apiLevel: number;
+      locale: string;
+      appVersion: string;
+      platform: PluginPlatform;
+      userSettings: Record<string, unknown>;
+      source: string;
+    }
+  | { kind: "call"; requestId: string; action: PluginAction; params: unknown }
+  | { kind: "cancel"; requestId: string }
+  | {
+      kind: "hostResult";
+      callId: string;
+      ok: boolean;
+      data?: unknown;
+      error?: PluginErrorPayload;
+    }
+  | { kind: "ping" };
+
+/** worker → 主 */
+export type SandboxOut =
+  | { kind: "ready"; sources: Record<string, SourceCapability> }
+  | {
+      kind: "result";
+      requestId: string;
+      ok: boolean;
+      data?: unknown;
+      error?: PluginErrorPayload;
+    }
+  | { kind: "hostCall"; callId: string; method: HostCallMethod; args: unknown[] }
+  | {
+      kind: "log";
+      level: "debug" | "info" | "warn" | "error";
+      args: unknown[];
+    }
+  | { kind: "fatal"; error: PluginErrorPayload }
+  | { kind: "pong" };
+
+/** worker 调用回宿主的方法名 */
+export type HostCallMethod =
+  | "request"
+  | "storage.get"
+  | "storage.set"
+  | "storage.remove"
+  | "storage.keys";
+
+/* ========== 渲染端 ↔ 主进程的 IPC 请求参数 ========== */
+
+export interface PluginSearchArgs {
+  /** 不填则按 settings.plugins.priority.search 顺序尝试 */
+  pluginId?: string;
+  source?: string;
+  keyword: string;
+  page?: number;
+  limit?: number;
+}
+
+export interface PluginResolveUrlArgs {
+  pluginId: string;
+  source: string;
+  quality?: PluginQuality;
+  musicInfo: { songmid: string; [key: string]: unknown };
+}
+
+/** 渲染端插件 API */
+export interface PluginsApi {
+  /** 列出所有已安装插件 */
+  list: () => Promise<PluginInfo[]>;
+  /** 从指定路径导入插件（进阶：一般由 pickAndInstall 触发） */
+  install: (filePath: string) => Promise<{ ok: boolean; id?: string; error?: string }>;
+  /** 弹出原生文件选择框导入插件 */
+  pickAndInstall: () => Promise<{
+    ok: boolean;
+    id?: string;
+    error?: string;
+    cancelled?: boolean;
+  }>;
+  /** 卸载（同时删除 scripts/{id}.js） */
+  uninstall: (id: string) => Promise<{ ok: boolean; error?: string }>;
+  /** 启用/禁用 */
+  setEnabled: (id: string, enabled: boolean) => Promise<void>;
+  /** 搜索 */
+  search: (args: PluginSearchArgs) => Promise<SearchRes>;
+  /** 获取播放 URL */
+  resolveUrl: (args: PluginResolveUrlArgs) => Promise<MusicUrlRes>;
+  /** 订阅插件状态变化 */
+  onStatus: (cb: (info: PluginInfo) => void) => () => void;
+}
+
+/* ========== 配置 ========== */
+
+export interface PluginsConfig {
+  /** 插件启用开关，key = pluginId */
+  enabled: Record<string, boolean>;
+  /** 各动作的插件优先级列表 */
+  priority: {
+    search: string[];
+    musicUrl: string[];
+    lyric: string[];
+    meta: string[];
+  };
+  /** 每插件的用户设置 */
+  perPlugin: Record<string, Record<string, unknown>>;
+}
diff --git a/shared/types/settings.ts b/shared/types/settings.ts
index 4cc499c..68cc36c 100644
--- a/shared/types/settings.ts
+++ b/shared/types/settings.ts
@@ -1,3 +1,5 @@
+import type { PluginsConfig } from "./plugin";
+
 /** 支持的语言代码 */
 export type LocaleCode = "zh-CN" | "en-US";
 
@@ -206,6 +208,8 @@ export interface SystemConfig {
   };
   /** 窗口几何状态（运行时自动记录，非用户主动配置） */
   windowStates: WindowStates;
+  /** 插件系统配置 */
+  plugins: PluginsConfig;
 }
 
 /** 配置 API */
diff --git a/src/components/settings/SettingsItem.vue b/src/components/settings/SettingsItem.vue
index 8db2223..dac69ed 100644
--- a/src/components/settings/SettingsItem.vue
+++ b/src/components/settings/SettingsItem.vue
@@ -32,7 +32,15 @@ const descriptionText = computed(() =>
 
 <template>
   <div :id="`setting-${item.key}`">
+    <!-- fullWidth custom：只渲染组件，不套标签与卡片 -->
+    <component
+      :is="item.component"
+      v-if="item.type === 'custom' && item.fullWidth && item.component"
+      class="transition-all duration-300"
+      :class="highlighted ? 'animate-highlight-pulse' : ''"
+    />
     <div
+      v-else
       class="flex items-center justify-between gap-4 rounded-xl bg-surface-panel border border-solid border-outline-variant/15 px-4 py-3.5 transition-all duration-300"
       :class="highlighted ? 'animate-highlight-pulse' : ''"
     >
diff --git a/src/components/settings/custom/PluginManager.vue b/src/components/settings/custom/PluginManager.vue
new file mode 100644
index 0000000..b3790ea
--- /dev/null
+++ b/src/components/settings/custom/PluginManager.vue
@@ -0,0 +1,239 @@
+<script setup lang="ts">
+import type { PluginInfo } from "@shared/types/plugin";
+import { usePluginsStore } from "@/stores/plugins";
+import { toast } from "@/composables/useToast";
+
+defineOptions({ inheritAttrs: false });
+
+const { t } = useI18n();
+const pluginsStore = usePluginsStore();
+const { list, loaded } = storeToRefs(pluginsStore);
+
+const confirmOpen = ref(false);
+const pendingUninstallId = ref<string | null>(null);
+const importing = ref(false);
+
+onMounted(() => {
+  if (!loaded.value) void pluginsStore.load();
+});
+
+type TagType = "default" | "success" | "info" | "warning" | "error";
+
+/** 当前状态 → 徽章颜色 + 文案 key */
+const statusTag = (info: PluginInfo): { type: TagType; key: string } => {
+  if (!info.enabled) return { type: "default", key: "disabled" };
+  switch (info.status.state) {
+    case "ready":
+      return { type: "success", key: "ready" };
+    case "loading":
+      return { type: "info", key: "loading" };
+    case "error":
+      return { type: "error", key: "error" };
+    case "disabled":
+      return { type: "default", key: "disabled" };
+    default:
+      return { type: "warning", key: "unloaded" };
+  }
+};
+
+/** ready 状态下展示声明的 sources 名 */
+const sourceNames = (info: PluginInfo): string[] => {
+  if (info.status.state !== "ready") return [];
+  return Object.keys(info.status.sources);
+};
+
+/** name 首字母作为 avatar */
+const initial = (name: string): string => (name.trim()[0] ?? "?").toUpperCase();
+
+const handleImport = async (): Promise<void> => {
+  importing.value = true;
+  try {
+    const res = await pluginsStore.pickAndInstall();
+    if (res.cancelled) return;
+    if (res.ok) toast.success(t("settings.plugins.importSuccess"));
+    else toast.error(res.error ?? t("settings.plugins.importFailed"));
+  } finally {
+    importing.value = false;
+  }
+};
+
+const handleToggleEnabled = async (id: string, enabled: boolean): Promise<void> => {
+  await pluginsStore.setEnabled(id, enabled);
+};
+
+const openUninstallConfirm = (id: string): void => {
+  pendingUninstallId.value = id;
+  confirmOpen.value = true;
+};
+
+const handleConfirmUninstall = async (): Promise<void> => {
+  const id = pendingUninstallId.value;
+  confirmOpen.value = false;
+  pendingUninstallId.value = null;
+  if (!id) return;
+  const res = await pluginsStore.uninstall(id);
+  if (res.ok) toast.success(t("settings.plugins.uninstallSuccess"));
+  else toast.error(res.error ?? t("settings.plugins.uninstallFailed"));
+};
+
+/** 当前待卸载的插件名（对话框提示） */
+const pendingName = computed(() => {
+  if (!pendingUninstallId.value) return "";
+  return (
+    list.value.find((i) => i.manifest.id === pendingUninstallId.value)?.manifest.name ?? ""
+  );
+});
+</script>
+
+<template>
+  <div class="flex flex-col gap-3">
+    <!-- 顶部操作条：说明 + 导入按钮 -->
+    <div
+      class="flex items-center justify-between gap-4 rounded-xl bg-surface-panel border border-solid border-outline-variant/15 px-4 py-3"
+    >
+      <div class="min-w-0 flex-1">
+        <div class="text-sm text-on-surface">{{ t("settings.plugins.hint") }}</div>
+        <div class="text-xs text-on-surface-variant/60 mt-0.5">
+          {{ t("settings.plugins.hintDetail") }}
+        </div>
+      </div>
+      <SButton type="primary" size="small" :loading="importing" @click="handleImport">
+        <template #icon>
+          <IconLucidePlus class="size-4" />
+        </template>
+        {{ t("settings.plugins.import") }}
+      </SButton>
+    </div>
+
+    <!-- 空态 -->
+    <div
+      v-if="list.length === 0"
+      class="flex flex-col items-center gap-3 rounded-xl bg-surface-panel border border-solid border-outline-variant/15 py-10"
+    >
+      <div
+        class="size-12 rounded-xl bg-on-surface/6 flex items-center justify-center text-on-surface-variant"
+      >
+        <IconLucidePuzzle class="size-6" />
+      </div>
+      <div class="text-sm text-on-surface-variant">
+        {{ t("settings.plugins.empty") }}
+      </div>
+      <div class="text-xs text-on-surface-variant/60">
+        {{ t("settings.plugins.emptyHint") }}
+      </div>
+    </div>
+
+    <!-- 插件列表 -->
+    <ul v-else class="flex flex-col gap-2.5">
+      <li
+        v-for="info in list"
+        :key="info.manifest.id"
+        class="rounded-xl bg-surface-panel border border-solid border-outline-variant/15 px-4 py-3.5"
+      >
+        <div class="flex items-start gap-3">
+          <!-- 首字母头像 -->
+          <div
+            class="shrink-0 size-10 rounded-xl bg-primary/12 text-primary flex items-center justify-center text-base font-semibold"
+          >
+            {{ initial(info.manifest.name) }}
+          </div>
+
+          <!-- 主体信息 -->
+          <div class="flex-1 min-w-0">
+            <div class="flex items-center gap-2 flex-wrap">
+              <span class="text-sm font-medium text-on-surface truncate">
+                {{ info.manifest.name }}
+              </span>
+              <STag size="tiny" type="default">v{{ info.manifest.version }}</STag>
+              <STag size="tiny" :type="statusTag(info).type">
+                {{ t(`settings.plugins.status.${statusTag(info).key}`) }}
+              </STag>
+              <STag
+                v-if="info.manifest.platform === 'lx'"
+                size="tiny"
+                type="info"
+                variant="outline"
+              >
+                lx
+              </STag>
+            </div>
+
+            <div
+              v-if="info.manifest.description"
+              class="mt-1 text-xs text-on-surface-variant/70 line-clamp-2"
+            >
+              {{ info.manifest.description }}
+            </div>
+
+            <div
+              v-if="info.manifest.author || sourceNames(info).length"
+              class="mt-1.5 flex items-center gap-2 flex-wrap text-xs text-on-surface-variant/60"
+            >
+              <span v-if="info.manifest.author">
+                {{ t("settings.plugins.by") }} {{ info.manifest.author }}
+              </span>
+              <span
+                v-if="info.manifest.author && sourceNames(info).length"
+                class="text-on-surface-variant/30"
+                >·</span
+              >
+              <span v-if="sourceNames(info).length" class="flex items-center gap-1 flex-wrap">
+                <span>{{ t("settings.plugins.sources") }}:</span>
+                <STag
+                  v-for="src in sourceNames(info)"
+                  :key="src"
+                  size="tiny"
+                  variant="outline"
+                  type="primary"
+                >
+                  {{ src }}
+                </STag>
+              </span>
+            </div>
+
+            <div
+              v-if="info.status.state === 'error'"
+              class="mt-2 rounded-md bg-red-500/10 px-2 py-1 text-xs text-red-500 break-all"
+            >
+              {{ info.status.error.message }}
+            </div>
+          </div>
+
+          <!-- 操作区 -->
+          <div class="shrink-0 flex items-center gap-3">
+            <SSwitch
+              :model-value="info.enabled"
+              @update:model-value="(v: boolean) => handleToggleEnabled(info.manifest.id, v)"
+            />
+            <SButton
+              variant="text"
+              size="small"
+              type="error"
+              @click="openUninstallConfirm(info.manifest.id)"
+            >
+              <template #icon>
+                <IconLucideTrash2 class="size-4" />
+              </template>
+              {{ t("settings.plugins.uninstall") }}
+            </SButton>
+          </div>
+        </div>
+      </li>
+    </ul>
+
+    <!-- 卸载确认 -->
+    <SDialog
+      v-model:open="confirmOpen"
+      :title="t('settings.plugins.uninstallConfirmTitle')"
+      width="400px"
+    >
+      <p class="text-sm text-on-surface-variant">
+        {{ t("settings.plugins.uninstallConfirm", { name: pendingName }) }}
+      </p>
+      <template #footer="{ close }">
+        <SButton variant="secondary" @click="close">{{ t("common.cancel") }}</SButton>
+        <SButton type="error" @click="handleConfirmUninstall">{{ t("common.confirm") }}</SButton>
+      </template>
+    </SDialog>
+  </div>
+</template>
diff --git a/src/i18n/locales/en-US.json b/src/i18n/locales/en-US.json
index e64f9eb..42faeb5 100644
--- a/src/i18n/locales/en-US.json
+++ b/src/i18n/locales/en-US.json
@@ -117,7 +117,8 @@
       "lyric": "Lyrics",
       "externalLyric": "External Lyrics",
       "appearance": "Appearance",
-      "services": "Services"
+      "services": "Services",
+      "plugins": "Plugin Manager"
     },
     "section": {
       "language": "Language",
@@ -136,7 +137,8 @@
       "device": "Output Device",
       "discord": "Discord RPC",
       "systemConfig": "System",
-      "reset": "Reset"
+      "reset": "Reset",
+      "pluginsList": "Installed Plugins"
     },
     "language": {
       "label": "Language",
@@ -527,6 +529,33 @@
     "resetAll": {
       "label": "Reset All Data",
       "confirm": "This will clear all playlists, sign out, and reset all settings. This action cannot be undone!"
+    },
+    "plugins": {
+      "hint": "Extend online sources, lyrics and metadata via plugins",
+      "hintDetail": "Supports native SPlayer scripts and lx-music-desktop user_api scripts",
+      "import": "Import Plugin",
+      "importSuccess": "Plugin imported",
+      "importFailed": "Failed to import plugin",
+      "empty": "No plugins installed",
+      "emptyHint": "Click \"Import Plugin\" to pick a .js script file",
+      "uninstall": "Uninstall",
+      "uninstallConfirmTitle": "Uninstall Plugin",
+      "uninstallConfirm": "Are you sure you want to uninstall \"{name}\"? This action cannot be undone.",
+      "uninstallSuccess": "Plugin uninstalled",
+      "uninstallFailed": "Uninstall failed",
+      "by": "By",
+      "sources": "Sources",
+      "status": {
+        "ready": "Ready",
+        "loading": "Loading",
+        "error": "Error",
+        "disabled": "Disabled",
+        "unloaded": "Unloaded"
+      }
+    },
+    "pluginManager": {
+      "label": "Plugin Manager",
+      "description": "Import, enable, or uninstall extension scripts"
     }
   },
   "collection": {
diff --git a/src/i18n/locales/zh-CN.json b/src/i18n/locales/zh-CN.json
index 55a52b6..e548966 100644
--- a/src/i18n/locales/zh-CN.json
+++ b/src/i18n/locales/zh-CN.json
@@ -117,7 +117,8 @@
       "lyric": "歌词设置",
       "externalLyric": "外部歌词",
       "appearance": "外观设置",
-      "services": "网络与服务"
+      "services": "网络与服务",
+      "plugins": "插件管理"
     },
     "section": {
       "language": "语言",
@@ -136,7 +137,8 @@
       "device": "输出设备",
       "discord": "Discord RPC",
       "systemConfig": "系统配置",
-      "reset": "重置"
+      "reset": "重置",
+      "pluginsList": "已安装插件"
     },
     "language": {
       "label": "界面语言",
@@ -527,6 +529,33 @@
     "resetAll": {
       "label": "重置全部数据",
       "confirm": "将会清空全部歌单、退出登录状态以及重置全部设置，此操作不可撤销！"
+    },
+    "plugins": {
+      "hint": "通过插件扩展在线音源、歌词与封面来源",
+      "hintDetail": "支持 SPlayer 原生脚本，同时兼容 lx-music-desktop 的 user_api 脚本",
+      "import": "导入插件",
+      "importSuccess": "插件导入成功",
+      "importFailed": "插件导入失败",
+      "empty": "暂无已安装的插件",
+      "emptyHint": "点击右上角「导入插件」选择 .js 脚本文件",
+      "uninstall": "卸载",
+      "uninstallConfirmTitle": "卸载插件",
+      "uninstallConfirm": "确定要卸载插件「{name}」吗？此操作不可撤销。",
+      "uninstallSuccess": "插件已卸载",
+      "uninstallFailed": "卸载失败",
+      "by": "作者",
+      "sources": "支持源",
+      "status": {
+        "ready": "已就绪",
+        "loading": "加载中",
+        "error": "错误",
+        "disabled": "已禁用",
+        "unloaded": "未加载"
+      }
+    },
+    "pluginManager": {
+      "label": "插件管理",
+      "description": "导入、启用或卸载扩展脚本"
     }
   },
   "collection": {
diff --git a/src/settings/schema.ts b/src/settings/schema.ts
index 38e942c..058311b 100644
--- a/src/settings/schema.ts
+++ b/src/settings/schema.ts
@@ -2,12 +2,14 @@ import type { SettingCategory } from "@/types/settings-schema";
 import { useSettingsStore } from "@/stores/settings";
 import DeviceSelector from "@/components/settings/custom/DeviceSelector.vue";
 import StorageManager from "@/components/settings/custom/StorageManager.vue";
+import PluginManager from "@/components/settings/custom/PluginManager.vue";
 import IconLucideCog from "~icons/lucide/cog";
 import IconLucidePlay from "~icons/lucide/play";
 import IconLucideMic2 from "~icons/lucide/mic-2";
 import IconLucideMonitor from "~icons/lucide/monitor";
 import IconLucidePalette from "~icons/lucide/palette";
 import IconLucideGlobe from "~icons/lucide/globe";
+import IconLucidePuzzle from "~icons/lucide/puzzle";
 
 export const settingsSchema: SettingCategory[] = [
   {
@@ -784,4 +786,27 @@ export const settingsSchema: SettingCategory[] = [
       },
     ],
   },
+  {
+    id: "plugins",
+    icon: IconLucidePuzzle,
+    sections: [
+      {
+        id: "pluginsList",
+        tag: { text: "Beta" },
+        items: [
+          {
+            key: "pluginManager",
+            type: "custom",
+            component: PluginManager,
+            fullWidth: true,
+            keywords: [
+              "settings.plugins.import",
+              "settings.plugins.hint",
+              "settings.plugins.uninstall",
+            ],
+          },
+        ],
+      },
+    ],
+  },
 ];
diff --git a/src/stores/plugins.ts b/src/stores/plugins.ts
new file mode 100644
index 0000000..47ceb92
--- /dev/null
+++ b/src/stores/plugins.ts
@@ -0,0 +1,58 @@
+import type { PluginInfo } from "@shared/types/plugin";
+
+/** 插件管理 Pinia store */
+export const usePluginsStore = defineStore("plugins", () => {
+  const list = shallowRef<PluginInfo[]>([]);
+  const loaded = ref(false);
+  let unsubscribe: (() => void) | null = null;
+
+  /** 拉取列表并建立状态订阅 */
+  const load = async (): Promise<void> => {
+    list.value = await window.api.plugins.list();
+    loaded.value = true;
+    if (!unsubscribe) {
+      unsubscribe = window.api.plugins.onStatus((info) => {
+        const next = list.value.slice();
+        const idx = next.findIndex((i) => i.manifest.id === info.manifest.id);
+        if (idx >= 0) next[idx] = info;
+        else next.push(info);
+        list.value = next;
+      });
+    }
+  };
+
+  /** 通过原生文件选择框导入插件 */
+  const pickAndInstall = async (): Promise<{
+    ok: boolean;
+    id?: string;
+    error?: string;
+    cancelled?: boolean;
+  }> => {
+    const res = await window.api.plugins.pickAndInstall();
+    if (res.ok) await load();
+    return res;
+  };
+
+  const uninstall = async (id: string): Promise<{ ok: boolean; error?: string }> => {
+    const res = await window.api.plugins.uninstall(id);
+    if (res.ok) list.value = list.value.filter((i) => i.manifest.id !== id);
+    return res;
+  };
+
+  const setEnabled = async (id: string, enabled: boolean): Promise<void> => {
+    await window.api.plugins.setEnabled(id, enabled);
+    const next = list.value.slice();
+    const idx = next.findIndex((i) => i.manifest.id === id);
+    if (idx >= 0) {
+      next[idx] = { ...next[idx], enabled };
+      list.value = next;
+    }
+  };
+
+  const dispose = (): void => {
+    unsubscribe?.();
+    unsubscribe = null;
+  };
+
+  return { list, loaded, load, pickAndInstall, uninstall, setEnabled, dispose };
+});
diff --git a/src/types/settings-schema.ts b/src/types/settings-schema.ts
index 70c5d1f..f7e5ff3 100644
--- a/src/types/settings-schema.ts
+++ b/src/types/settings-schema.ts
@@ -42,6 +42,8 @@ export interface SettingItem {
   action?: () => void;
   /** custom 类型的组件 */
   component?: Component;
+  /** custom：独占整行（隐藏 label/description 与卡片包裹，组件自渲染） */
+  fullWidth?: boolean;
   /** 搜索用额外关键词（i18n keys） */
   keywords?: string[];
   /** 子项（折叠展开） */

From 14f300b55d5f72e60bae2631c26efaa6c4346bb2 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Mon, 20 Apr 2026 23:20:12 +0800
Subject: [PATCH 04/17] =?UTF-8?q?=E4=BC=98=E5=8C=96=E6=8F=92=E4=BB=B6?=
 =?UTF-8?q?=E8=AF=BB=E5=8F=96=E6=96=B9=E5=BC=8F?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 components.d.ts                               |   5 +
 docs/plugins-development.md                   | 334 ++++++++++++++++++
 docs/plugins-mvp.md                           |  58 +--
 docs/plugins-usage.md                         | 101 ++++++
 electron/main/ipc/plugin.ts                   |  76 ++--
 electron/main/plugins/loader.ts               |  18 +-
 electron/main/plugins/lx-shim.ts              | 297 +++++++++++++---
 electron/main/plugins/registry.ts             |  33 +-
 electron/main/plugins/router.ts               |  52 +--
 electron/main/plugins/sandbox.ts              |  25 +-
 electron/main/plugins/sandbox.worker.ts       |  73 ++--
 electron/main/plugins/storage.ts              |   3 +-
 electron/preload/index.ts                     |  10 +-
 shared/defaults/plugin-api.ts                 |  11 +-
 shared/types/plugin.ts                        |  70 ++--
 .../settings/custom/PluginManager.vue         | 177 +++++++---
 src/components/ui/SToast.vue                  |   2 +-
 src/i18n/locales/en-US.json                   |  15 +-
 src/i18n/locales/zh-CN.json                   |  15 +-
 src/stores/plugins.ts                         |  33 +-
 20 files changed, 1068 insertions(+), 340 deletions(-)
 create mode 100644 docs/plugins-development.md
 create mode 100644 docs/plugins-usage.md

diff --git a/components.d.ts b/components.d.ts
index de3a4e7..27554b7 100644
--- a/components.d.ts
+++ b/components.d.ts
@@ -49,12 +49,16 @@ declare module 'vue' {
     IconLucideChevronUp: typeof import('~icons/lucide/chevron-up')['default']
     IconLucideCircleCheck: typeof import('~icons/lucide/circle-check')['default']
     IconLucideCircleX: typeof import('~icons/lucide/circle-x')['default']
+    IconLucideDatabase: typeof import('~icons/lucide/database')['default']
     IconLucideDisc3: typeof import('~icons/lucide/disc3')['default']
     IconLucideEllipsis: typeof import('~icons/lucide/ellipsis')['default']
+    IconLucideExternalLink: typeof import('~icons/lucide/external-link')['default']
     IconLucideFolder: typeof import('~icons/lucide/folder')['default']
+    IconLucideFolderOpen: typeof import('~icons/lucide/folder-open')['default']
     IconLucideFolderPlus: typeof import('~icons/lucide/folder-plus')['default']
     IconLucideHardDrive: typeof import('~icons/lucide/hard-drive')['default']
     IconLucideInfo: typeof import('~icons/lucide/info')['default']
+    IconLucideLink: typeof import('~icons/lucide/link')['default']
     IconLucideListMusic: typeof import('~icons/lucide/list-music')['default']
     IconLucideLocate: typeof import('~icons/lucide/locate')['default']
     IconLucideLock: typeof import('~icons/lucide/lock')['default']
@@ -65,6 +69,7 @@ declare module 'vue' {
     IconLucidePause: typeof import('~icons/lucide/pause')['default']
     IconLucidePlay: typeof import('~icons/lucide/play')['default']
     IconLucidePlus: typeof import('~icons/lucide/plus')['default']
+    IconLucidePower: typeof import('~icons/lucide/power')['default']
     IconLucidePuzzle: typeof import('~icons/lucide/puzzle')['default']
     IconLucideRefreshCw: typeof import('~icons/lucide/refresh-cw')['default']
     IconLucideRepeat: typeof import('~icons/lucide/repeat')['default']
diff --git a/docs/plugins-development.md b/docs/plugins-development.md
new file mode 100644
index 0000000..625aec3
--- /dev/null
+++ b/docs/plugins-development.md
@@ -0,0 +1,334 @@
+# 插件开发指南
+
+本文面向想为 SPlayer-Next 编写插件的开发者。插件是一段运行在隔离沙箱里的 JavaScript，通过宿主注入的 `splayer` 全局对象对外提供能力。
+
+> 最终用户如何安装使用见 [plugins-usage.md](./plugins-usage.md)。
+
+## 快速开始
+
+一个最小插件就是一个 `.js` 文件。头部需要 JSDoc 声明元数据：
+
+```js
+/**
+ * @name Example
+ * @version 1.0.0
+ * @description 示例插件
+ * @author you
+ * @homepage https://example.com
+ * @platform splayer
+ * @apiLevel 1
+ */
+
+splayer.register({
+  sources: {
+    demo: {
+      name: "Demo 源",
+      actions: ["musicUrl", "lyric"],
+      qualities: ["lq", "hq", "lossless"],
+    },
+  },
+});
+
+splayer.on("musicUrl", async (req) => {
+  const { musicInfo, quality } = req;
+  const resp = await splayer.request(
+    `https://api.example.com/url?id=${musicInfo.songmid}&q=${quality}`,
+    { responseType: "json" },
+  );
+  return { url: resp.body.url, quality, expire: resp.body.expire };
+});
+
+splayer.on("lyric", async (req) => {
+  const { musicInfo } = req;
+  const resp = await splayer.request(`https://api.example.com/lyric?id=${musicInfo.songmid}`, {
+    responseType: "json",
+  });
+  return { lyric: resp.body.lrc, tlyric: resp.body.tlrc ?? null };
+});
+```
+
+保存为 `example.js`，在 SPlayer 设置里「本地导入」即可。
+
+## 脚本头部（JSDoc Manifest）
+
+| 字段           | 必填 | 上限      | 说明                                                               |
+| -------------- | ---- | --------- | ------------------------------------------------------------------ |
+| `@name`        | ✅   | 24 字符   | 插件展示名                                                         |
+| `@version`     | ✅   | 36 字符   | 语义化版本号                                                       |
+| `@description` |      | 256 字符  | 简介                                                               |
+| `@author`      |      | 56 字符   | 作者                                                               |
+| `@homepage`    |      | 1024 字符 | 主页 URL                                                           |
+| `@platform`    |      |           | `splayer` 或 `lx`，不写默认 `splayer`（`gz_` 压缩脚本默认为 `lx`） |
+| `@apiLevel`    |      |           | 声明兼容的 Host API 级别，当前宿主 = 1，超过会拒绝加载             |
+
+缺少 `@name` 或 `@version` → 安装失败。
+
+插件 `id` 由宿主自动生成：`slugify(name) + "-" + sha1(source).slice(0,8)`。你不需要自己指定。
+
+## 沙箱环境
+
+插件运行在独立 `utilityProcess` 子进程 + `vm.createContext` 双层隔离中：
+
+- **没有** Node 内置模块（`fs` / `net` / `child_process` 等），**没有** `require` / `import`
+- **没有** DOM / Electron API（`window` 仅在 lx 兼容模式下作为 `{ lx }` 垫片）
+- **有** 以下全局：`splayer`、`Buffer`、`URL` / `URLSearchParams`、`TextEncoder` / `TextDecoder`、`Promise`、`setTimeout` / `setInterval` / `clearTimeout` / `clearInterval` / `setImmediate` / `clearImmediate` / `queueMicrotask`、`console`（重定向到 `splayer.log`）
+
+硬性约束：
+
+- **脚本同步部分执行时间 ≤ 5 秒**（V8 超时后中止并上报脚本错误）
+- **从 fork 到脚本 ready ≤ 10 秒**，超时即判定加载失败
+- **每插件并发请求 ≤ 4，全局并发 ≤ 16**
+- **心跳间隔 10 秒**，连续 3 次未回 pong 视为卡死，自动杀掉重启
+- 崩溃后重启节奏 **2s / 8s / 30s**，累计 3 次失败进入 `error` 状态
+
+## `splayer` API
+
+注入到沙箱全局的对象。以下是完整表面，基于 Host API level 1。
+
+### 只读字段
+
+```ts
+splayer.pluginId: string       // 宿主分配的插件 ID
+splayer.apiLevel: number        // 宿主 Host API level（= 1）
+splayer.locale: string          // 当前界面语言（如 "zh-CN"）
+splayer.appVersion: string      // SPlayer 应用版本
+```
+
+### 注册能力
+
+```ts
+splayer.register({
+  sources: {
+    [sourceKey: string]: {
+      name: string;                    // 展示名
+      actions: ("musicUrl" | "lyric" | "pic")[];
+      qualities?: ("lq" | "sq" | "hq" | "lossless" | "hi-res")[];
+    };
+  };
+});
+```
+
+音质等级对齐宿主的 `QualityLevel`（见 `src/utils/quality.ts`）：
+
+| 值         | 含义                                          |
+| ---------- | --------------------------------------------- |
+| `hi-res`   | 高解析度无损（采样率 ≥ 96kHz + 位深 ≥ 24bit） |
+| `lossless` | 无损（flac / ape / wav 等）                   |
+| `hq`       | 有损 ≥ 320kbps                                |
+| `sq`       | 有损 ≥ 192kbps                                |
+| `lq`       | 有损 < 192kbps                                |
+
+lx 脚本声明的 `128k/192k/320k/flac/flac24bit/ape/wav` 会被垫片自动映射到上面的等级；handler 收到的 `info.type` 也会反向映射为 lx 原生值，老脚本无需改动。
+
+**必须在脚本同步部分调用**。注册完后宿主才知道这个插件能做什么、支持哪些源。
+
+### 注册动作处理器
+
+```ts
+splayer.on("musicUrl", async (req) => res);
+splayer.on("lyric", async (req) => res);
+splayer.on("pic", async (req) => res);
+```
+
+每个 action 最多一个 handler，重复注册后者覆盖前者。目前仅这三个动作，搜索和元数据由宿主自身负责。
+
+#### 请求/响应形状
+
+| Action     | 请求                             | 响应                                    | 默认超时 |
+| ---------- | -------------------------------- | --------------------------------------- | -------- |
+| `musicUrl` | `{ source, quality, musicInfo }` | `{ url, quality?, expire? }`            | 20 s     |
+| `lyric`    | `{ source, musicInfo }`          | `{ lyric, tlyric?, rlyric?, lxlyric? }` | 15 s     |
+| `pic`      | `{ source, musicInfo }`          | `{ url }`                               | 15 s     |
+
+`musicInfo`：宿主会传至少 `{ songmid }`，可能还带 `name` / `singer` 等用于辅助识别。
+
+handler 抛出的异常会被宿主捕获，错误码透传到上层。超时未返回 → 被主进程 cancel。
+
+### 网络请求
+
+```ts
+splayer.request(url: string, opts?: HostRequestOptions): Promise<HostRequestResult>
+
+interface HostRequestOptions {
+  method?: "GET" | "POST";
+  headers?: Record<string, string>;
+  body?: string | ArrayBuffer | Uint8Array;
+  timeout?: number;                            // 毫秒，默认 15000，最大 60000
+  responseType?: "text" | "json" | "arraybuffer"; // 默认 "text"
+}
+
+interface HostRequestResult {
+  status: number;
+  headers: Record<string, string>;
+  body: unknown; // text → string, json → 已 parse 对象，arraybuffer → Uint8Array
+}
+```
+
+仅允许 `http://` 和 `https://`。请求由主进程的 `net.fetch` 发出，遵循系统代理设置。
+
+### 日志
+
+```ts
+splayer.log.debug(...args);
+splayer.log.info(...args);
+splayer.log.warn(...args);
+splayer.log.error(...args);
+```
+
+转发到宿主主日志系统，并落盘到 `{userData}/plugins/logs/{id}.log`。`console.*` 也会自动转发到同样的通道。
+
+### 私有 KV 存储
+
+```ts
+splayer.storage.get<T>(key: string): Promise<T | null>;
+splayer.storage.set(key: string, value: unknown): Promise<void>;
+splayer.storage.remove(key: string): Promise<void>;
+splayer.storage.keys(): Promise<string[]>;
+```
+
+每个插件一个独立命名空间，落盘到 `{userData}/plugins/data/{id}.json`。卸载插件会自动清除。
+
+### 用户设置
+
+```ts
+splayer.getSetting<T>(key: string): T | undefined;
+```
+
+同步读取用户在设置界面给此插件配置的值。设置 schema 通过 `register()` 扩展的能力将在后续 API level 加入；当前 level 1 下返回 `undefined`。
+
+### 工具（`splayer.utils`）
+
+常用 Node 原语的安全封装，**不需要**自己调用 Node 内置模块：
+
+```ts
+splayer.utils.crypto.md5(data)
+splayer.utils.crypto.sha1(data)
+splayer.utils.crypto.sha256(data)
+splayer.utils.crypto.hmac(algo, key, data)
+splayer.utils.crypto.randomBytes(size)
+splayer.utils.crypto.aesEncrypt(data, key, mode, iv?)
+splayer.utils.crypto.aesDecrypt(data, key, mode, iv?)
+splayer.utils.crypto.rsaEncrypt(data, publicKey)
+
+splayer.utils.buffer.from(data, encoding?)
+splayer.utils.buffer.bufToString(buf, encoding?)
+splayer.utils.buffer.concat(list)
+
+splayer.utils.base64.encode(data)
+splayer.utils.base64.decode(data)
+
+splayer.utils.zlib.inflate(data) / deflate(data)
+splayer.utils.zlib.gunzip(data) / gzip(data)
+```
+
+## 错误码
+
+handler 抛异常时可通过 `err.code` 带上错误码；不带的话宿主默认 `PLUGIN_HANDLER_ERROR`。
+
+| Code                        | 含义                    |
+| --------------------------- | ----------------------- |
+| `PLUGIN_NOT_FOUND`          | 找不到指定插件          |
+| `PLUGIN_DISABLED`           | 插件已禁用              |
+| `PLUGIN_NOT_READY`          | 插件未就绪 / 沙箱未启动 |
+| `PLUGIN_ACTION_UNSUPPORTED` | 插件没注册该动作        |
+| `PLUGIN_LOAD_TIMEOUT`       | 加载超 10 秒            |
+| `PLUGIN_SCRIPT_ERROR`       | 脚本语法或运行错误      |
+| `PLUGIN_INVALID_MANIFEST`   | 头部字段缺失或不合法    |
+| `PLUGIN_API_LEVEL_MISMATCH` | 声明 apiLevel 高于宿主  |
+| `PLUGIN_REQUEST_TIMEOUT`    | 动作或 request 超时     |
+| `PLUGIN_CANCELLED`          | 被上层取消              |
+| `PLUGIN_NETWORK_ERROR`      | 网络错误                |
+| `PLUGIN_URL_NOT_ALLOWED`    | URL 协议不在白名单      |
+| `PLUGIN_HANDLER_ERROR`      | handler 默认错误码      |
+| `PLUGIN_WORKER_CRASHED`     | 子进程崩溃              |
+
+## 完整示例结构
+
+```js
+/**
+ * @name My Plugin
+ * @version 1.0.0
+ * @description 一个多源聚合示例
+ * @author you
+ * @apiLevel 1
+ */
+
+const SOURCES = ["sa", "sb"]; // 你内部的源标识
+
+splayer.register({
+  sources: {
+    sa: { name: "SA 音源", actions: ["musicUrl", "lyric"], qualities: ["lq", "hq"] },
+    sb: { name: "SB 音源", actions: ["musicUrl", "pic"], qualities: ["lq", "hq", "lossless"] },
+  },
+});
+
+const apis = {
+  sa: {
+    musicUrl: async ({ musicInfo, quality }) => {
+      /* ... */
+    },
+    lyric: async ({ musicInfo }) => {
+      /* ... */
+    },
+  },
+  sb: {
+    musicUrl: async ({ musicInfo, quality }) => {
+      /* ... */
+    },
+    pic: async ({ musicInfo }) => {
+      /* ... */
+    },
+  },
+};
+
+const dispatch = (action) => async (req) => {
+  const fn = apis[req.source]?.[action];
+  if (!fn)
+    throw Object.assign(new Error("source not supported"), { code: "PLUGIN_ACTION_UNSUPPORTED" });
+  return fn(req);
+};
+
+splayer.on("musicUrl", dispatch("musicUrl"));
+splayer.on("lyric", dispatch("lyric"));
+splayer.on("pic", dispatch("pic"));
+```
+
+## 调试
+
+1. 控制台里（DevTools）直接调：
+
+   ```js
+   await window.api.plugins.list();
+   await window.api.plugins.resolveUrl({
+     pluginId: "my-plugin-xxxxxxxx",
+     source: "sa",
+     quality: "hq",
+     musicInfo: { songmid: "123" },
+   });
+   ```
+
+2. 查看 `{userData}/plugins/logs/{id}.log` 拿插件的运行日志
+
+3. 修改脚本 → 重新导入一次（id 会因为源码 sha1 变化而变化，旧版本会自动被替换）
+
+## 发布
+
+脚本可以：
+
+- 直接作为 `.js` 分发（推荐）
+- 用 `gz_` 前缀 + zlib + base64 压缩成单行文本（兼容 lx 生态）
+
+用户通过「本地导入」或「在线导入（粘贴 raw URL）」装上即可。
+
+## 兼容 lx 插件
+
+SPlayer 提供了 `window.lx` / `globalThis.lx` 垫片，覆盖 lx-music-desktop 的 user_api 常用 API：
+
+- `lx.request(url, opts, callback)` — 回调风格 HTTP 请求
+- `lx.on("request", handler)` — 注册统一 handler，宿主根据 `action` 分派
+- `lx.send("inited", { sources })` — 异步上报能力
+- `lx.utils.crypto` / `lx.utils.buffer` / `lx.utils.zlib` / `lx.utils.base64` — 与 `splayer.utils` 等价
+
+绝大多数 lx 公开脚本无需修改即可运行。头部写 `@platform lx` 或脚本整体以 `gz_` 压缩会自动启用垫片。
+
+**注意**：若你在写**新插件**，请直接用 `splayer.*` API，lx 垫片仅用于跑存量 lx 脚本。
diff --git a/docs/plugins-mvp.md b/docs/plugins-mvp.md
index a1d66a7..5030e22 100644
--- a/docs/plugins-mvp.md
+++ b/docs/plugins-mvp.md
@@ -14,30 +14,30 @@
 
 ### 主进程插件内核
 
-| 文件 | 职责 |
-|---|---|
-| `shared/types/plugin.ts` | 跨进程类型契约：`PluginManifest` / `PluginStatus` / `HostApi` / `SandboxIn/Out` / `PluginsApi` 等 |
-| `shared/defaults/plugin-api.ts` | `HOST_API_LEVEL` 常量、action 超时、错误码枚举、默认配置 |
-| `electron/main/plugins/sandbox.ts` | `utilityProcess.fork` 控制器：启停、心跳、崩溃重启、消息编解码 |
-| `electron/main/plugins/sandbox.worker.ts` | 子进程入口：`vm.createContext` → 注入 `splayer` + 可选 `lx` 垫片 → `vm.runInContext` |
-| `electron/main/plugins/host.ts` | `HostApi` 主进程侧 dispatch：network / storage / log |
-| `electron/main/plugins/net.ts` | 网络代理：`net.fetch` + URL 白名单（仅 http/https）+ 超时 |
-| `electron/main/plugins/storage.ts` | 每插件 KV 落盘 `{userData}/plugins/data/{id}.json`，原子写 |
-| `electron/main/plugins/loader.ts` | 头部 JSDoc 解析 + `gz_` 解压 + `id = name + sha1(source).slice(0,8)` |
-| `electron/main/plugins/registry.ts` | `Map<id, PluginRuntime>` + 扫描/启停/重启/生命周期状态机 |
-| `electron/main/plugins/router.ts` | action 调度：`search` / `musicUrl`（超时、取消、fallback） |
-| `electron/main/plugins/lx-shim.ts` | `window.lx` 适配：`request` / `on('request')` / `send('inited')` / `utils` |
-| `electron/main/ipc/plugin.ts` | IPC 注册：`plugin:list/install/pickAndInstall/uninstall/setEnabled/search/resolveUrl` + `plugin:status` 广播 |
+| 文件                                      | 职责                                                                                                         |
+| ----------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
+| `shared/types/plugin.ts`                  | 跨进程类型契约：`PluginManifest` / `PluginStatus` / `HostApi` / `SandboxIn/Out` / `PluginsApi` 等            |
+| `shared/defaults/plugin-api.ts`           | `HOST_API_LEVEL` 常量、action 超时、错误码枚举、默认配置                                                     |
+| `electron/main/plugins/sandbox.ts`        | `utilityProcess.fork` 控制器：启停、心跳、崩溃重启、消息编解码                                               |
+| `electron/main/plugins/sandbox.worker.ts` | 子进程入口：`vm.createContext` → 注入 `splayer` + 可选 `lx` 垫片 → `vm.runInContext`                         |
+| `electron/main/plugins/host.ts`           | `HostApi` 主进程侧 dispatch：network / storage / log                                                         |
+| `electron/main/plugins/net.ts`            | 网络代理：`net.fetch` + URL 白名单（仅 http/https）+ 超时                                                    |
+| `electron/main/plugins/storage.ts`        | 每插件 KV 落盘 `{userData}/plugins/data/{id}.json`，原子写                                                   |
+| `electron/main/plugins/loader.ts`         | 头部 JSDoc 解析 + `gz_` 解压 + `id = name + sha1(source).slice(0,8)`                                         |
+| `electron/main/plugins/registry.ts`       | `Map<id, PluginRuntime>` + 扫描/启停/重启/生命周期状态机                                                     |
+| `electron/main/plugins/router.ts`         | action 调度：`search` / `musicUrl`（超时、取消、fallback）                                                   |
+| `electron/main/plugins/lx-shim.ts`        | `window.lx` 适配：`request` / `on('request')` / `send('inited')` / `utils`                                   |
+| `electron/main/ipc/plugin.ts`             | IPC 注册：`plugin:list/install/pickAndInstall/uninstall/setEnabled/search/resolveUrl` + `plugin:status` 广播 |
 
 ### 渲染端插件管理 UI
 
-| 文件 | 职责 |
-|---|---|
-| `src/stores/plugins.ts` | Pinia store：`list` / `load` / `pickAndInstall` / `uninstall` / `setEnabled` + 订阅 `plugin:status` |
-| `src/components/settings/custom/PluginManager.vue` | 管理面板：顶部导入条 / 空态 / 插件卡片列表 / 卸载确认 |
-| `src/components/settings/SettingsItem.vue` | 增加 `fullWidth` 分支渲染（custom 组件独占整行时跳过 label/卡片外壳） |
-| `src/types/settings-schema.ts` | `SettingItem.fullWidth?: boolean` |
-| `src/settings/schema.ts` | 新增 `plugins` category（puzzle 图标）+ 挂 `PluginManager`（fullWidth） |
+| 文件                                               | 职责                                                                                                |
+| -------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
+| `src/stores/plugins.ts`                            | Pinia store：`list` / `load` / `pickAndInstall` / `uninstall` / `setEnabled` + 订阅 `plugin:status` |
+| `src/components/settings/custom/PluginManager.vue` | 管理面板：顶部导入条 / 空态 / 插件卡片列表 / 卸载确认                                               |
+| `src/components/settings/SettingsItem.vue`         | 增加 `fullWidth` 分支渲染（custom 组件独占整行时跳过 label/卡片外壳）                               |
+| `src/types/settings-schema.ts`                     | `SettingItem.fullWidth?: boolean`                                                                   |
+| `src/settings/schema.ts`                           | 新增 `plugins` category（puzzle 图标）+ 挂 `PluginManager`（fullWidth）                             |
 
 ### 改动的现有文件
 
@@ -58,11 +58,14 @@
 3. 或直接放脚本到 `{userData}/plugins/scripts/{name}.js` + 重启
 4. DevTools 里：
    ```js
-   await window.api.plugins.list()
-   await window.api.plugins.search({ keyword: "test" })
+   await window.api.plugins.list();
+   await window.api.plugins.search({ keyword: "test" });
    await window.api.plugins.resolveUrl({
-     pluginId: "xxx", source: "kw", musicInfo: { songmid: "abc" }, quality: "320k"
-   })
+     pluginId: "xxx",
+     source: "kw",
+     musicInfo: { songmid: "abc" },
+     quality: "320k",
+   });
    ```
 5. 异常场景：
    - 强 kill utilityProcess 子进程 → 3 次指数退避自动重启（2s/8s/30s），累计 3 次失败后 `disabled`
@@ -72,21 +75,25 @@
 ## 二期待办（下次会话接续这里）
 
 ### 优先 1：让插件真正接入播放链路
+
 - `src/services/sourceResolver.ts` 渲染端门面：合并多插件结果、按优先级 fallback、去重
 - `src/services/audioLoader.ts` 判断 `track.source === "plugin"` → 先 `resolveUrl` 再交给 player
 - `src/pages/OnlineSearch.vue` 搜索页（或融入 Library）：输入关键词 → 结果列表 → 点击播放
 
 ### 优先 2：歌词/元数据接入
+
 - `src/services/lyricLoader.ts` 新增 `source.type === "plugin"` 分支 → `api.plugins.fetchLyric`
 - 主进程 `ipc/plugin.ts` 暴露 `plugin:fetchLyric` / `plugin:fetchMeta` handler
 - `router.ts` 里已有骨架，补 `lyric` / `meta` action 分派
 
 ### 优先 3：UI 增强
+
 - 每插件独立设置抽屉：读插件上报的 `settingsSchema`（HostApi 已预留）
 - 查看插件日志按钮（现已写文件 `{userData}/plugins/logs/{id}.log`，补一个查看入口）
 - 插件优先级拖拽排序（写 `settings.plugins.priority.{action}[]`）
 
 ### 待清理的技术细节
+
 - `registry.ts` 的 `pickForAction` 方法当前未被使用（router 直接按 listInfo 拿顺序），二期启用优先级后可统一用它
 - `router.ts` `searchAcrossPlugins` 对 `pluginRegistry.listInfo` 的访问写法不够优雅，二期重构
 - `sandbox.worker.ts` 几处 `any` 是因为 `process.parentPort` / `splayer.utils` 需要；Electron 类型出正式 typings 时可去掉
@@ -141,6 +148,7 @@ npx electron-vite build  # 产出 out/main/{index,sandbox.worker}.js
 ## 接续指引
 
 **新会话打开后**：
+
 1. 读这份 `docs/plugins-mvp.md`
 2. 读 `CLAUDE.md`（项目约定）
 3. `git log --oneline` 看最近提交确认已到位
diff --git a/docs/plugins-usage.md b/docs/plugins-usage.md
new file mode 100644
index 0000000..7dc33bc
--- /dev/null
+++ b/docs/plugins-usage.md
@@ -0,0 +1,101 @@
+# 插件使用指南
+
+SPlayer-Next 支持通过插件扩展音乐能力，包括 URL 解析、歌词、封面等。本文面向最终用户，讲清楚如何安装、启用、管理插件。
+
+> 如果你想自己写插件，见 [plugins-development.md](./plugins-development.md)。
+
+## 从哪里打开插件管理
+
+**设置 → 插件管理**。这里展示所有已安装的插件卡片：名称、版本、作者、状态（已就绪 / 加载中 / 错误 / 已禁用）、支持的源。
+
+## 安装插件
+
+提供两种方式，效果完全等价：
+
+### 本地导入
+
+点击顶部「**本地导入**」→ 选一个 `.js` 脚本文件。脚本会被复制到：
+
+```
+{userData}/plugins/scripts/{id}.js
+```
+
+`{id}` 由 `插件名 + 源码 SHA1 前 8 位` 自动生成，不用你操心。
+
+### 在线导入
+
+点击「**在线导入**」→ 粘贴一个 `https://` 或 `http://` 链接（指向一个 `.js` 脚本），回车或点「导入」。
+
+限制：
+
+- 仅支持 HTTP/HTTPS
+- 单次下载上限 **9 MB**
+- 请求超时 15 秒，最多跟随 3 次重定向
+- 下载完后走和本地导入完全一样的落盘 + 加载流程
+
+常见链接来源：GitHub raw、Gitee raw、开发者个人站。
+
+## 启用 / 禁用 / 切换插件
+
+**同一时刻只能启用一个插件**，行为与 lx-music-desktop 的 `user_api` 一致。
+
+每张卡片右侧有两个按钮：
+
+- **启用 / 已启用**：点击未启用的插件 → 立即启用它，并把当前已启用的那个自动关掉
+- **卸载**：会删除脚本文件、清理它的本地 KV 存储、从已安装列表移除，**不可恢复**
+
+状态徽章的含义：
+
+| 徽章   | 含义                                     |
+| ------ | ---------------------------------------- |
+| 已就绪 | 插件已启动并注册了能力，可以用           |
+| 加载中 | 沙箱正在启动或脚本刚在初始化             |
+| 错误   | 加载失败或崩溃（卡片下方会显示错误信息） |
+| 已禁用 | 用户主动关闭                             |
+| 未加载 | 导入了但未启动（通常瞬态）               |
+
+## gz\_ 压缩脚本
+
+部分插件作者会把脚本用 `gz_` 前缀的方式压缩（base64 + zlib）。SPlayer-Next 会**自动识别并解压**，无需额外操作。压缩脚本默认按 lx 兼容脚本处理。
+
+## 兼容 lx 插件
+
+我们兼容 lx-music-desktop 的 user_api 脚本。绝大多数 lx 公开脚本可以直接拖入使用，SPlayer 会自动注入 `window.lx` 垫片。两点注意：
+
+- lx 脚本默认只一个能启用（跟 lx 本身一致）
+- 垫片覆盖了 `lx.request` / `lx.on('request')` / `lx.send('inited')` / `lx.utils`（crypto / buffer / zlib / base64）这些最常用的 API，如果脚本用了非主流或 lx 新版 API，可能出现"插件加载错误"
+
+## 常见问题
+
+**1. 导入成功但状态是"错误"？**
+
+卡片下方会显示错误信息。常见：
+
+- `PLUGIN_LOAD_TIMEOUT`：脚本启动超 10 秒，通常是首包网络慢或脚本初始化里卡住
+- `PLUGIN_SCRIPT_ERROR`：脚本语法错误或运行抛异常
+- `PLUGIN_API_LEVEL_MISMATCH`：脚本声明的 `@apiLevel` 高于当前 Host API 级别（当前 = 1），需要等宿主升级
+
+**2. 插件崩了会怎样？**
+
+沙箱是独立子进程，不会影响 SPlayer 主进程。崩溃后会自动重启，重启节奏 2s → 8s → 30s，连续 3 次失败后会标记为错误状态，停止重试。
+
+**3. 插件的本地数据存哪？**
+
+```
+{userData}/
+├── plugins/
+│   ├── scripts/{id}.js      脚本源码
+│   ├── manifest.json         已安装列表
+│   ├── data/{id}.json        插件私有 KV 存储（splayer.storage 写入的）
+│   └── logs/{id}.log         插件日志（splayer.log）
+```
+
+卸载插件会自动清理上述所有内容。
+
+**4. 为什么插件的请求速度很慢？**
+
+插件请求通过宿主主进程 `net.fetch` 发送，会遵循系统代理。默认超时 15 秒（单次请求），最大可设置 60 秒。
+
+**5. 我能同时启用两个插件凑齐 URL 和歌词吗？**
+
+现阶段**不能**，只能单选。未来可能开放按动作（URL / 歌词 / 封面）分别配置优先级的能力，见项目待办。
diff --git a/electron/main/ipc/plugin.ts b/electron/main/ipc/plugin.ts
index 8329643..1e1912f 100644
--- a/electron/main/ipc/plugin.ts
+++ b/electron/main/ipc/plugin.ts
@@ -2,18 +2,42 @@
  * 插件系统 IPC
  *
  * 渲染端通过 `window.api.plugins.*` 调用以下 channel：
- * - plugin:list / install / uninstall / setEnabled
+ * - plugin:list / install / pickAndInstall / installFromUrl / uninstall / setEnabled
  * - plugin:search / resolveUrl
  * 并订阅 `plugin:status` 广播以更新 UI。
  */
 
-import { ipcMain, dialog } from "electron";
+import { ipcMain, dialog, net } from "electron";
 import type { PluginInfo } from "@shared/types/plugin";
+import { INSTALL_URL_MAX_SIZE, INSTALL_URL_TIMEOUT } from "@shared/defaults/plugin-api";
 import { pluginRegistry } from "@main/plugins/registry";
-import { searchAcrossPlugins, resolveUrl } from "@main/plugins/router";
+import { resolveUrl } from "@main/plugins/router";
 import { broadcast } from "@main/utils/broadcast";
 import { coreLog } from "@main/utils/logger";
-import { getMainWindow } from "@main/window";
+
+/** 从 URL 拉取脚本源码，带大小与超时限制 */
+const fetchScriptFromUrl = async (url: string): Promise<string> => {
+  const parsed = new URL(url);
+  if (parsed.protocol !== "http:" && parsed.protocol !== "https:") {
+    throw new Error(`protocol not allowed: ${parsed.protocol}`);
+  }
+  const resp = await net.fetch(url, {
+    method: "GET",
+    redirect: "follow",
+    signal: AbortSignal.timeout(INSTALL_URL_TIMEOUT),
+  });
+  if (!resp.ok) throw new Error(`HTTP ${resp.status}`);
+  // Content-Length 预检（仅提示，不强信任）
+  const lenHeader = resp.headers.get("content-length");
+  if (lenHeader && Number(lenHeader) > INSTALL_URL_MAX_SIZE) {
+    throw new Error("PLUGIN_INSTALL_URL_TOO_LARGE");
+  }
+  const buf = await resp.arrayBuffer();
+  if (buf.byteLength > INSTALL_URL_MAX_SIZE) {
+    throw new Error("PLUGIN_INSTALL_URL_TOO_LARGE");
+  }
+  return new TextDecoder("utf-8").decode(buf);
+};
 
 export const registerPluginIpc = (): void => {
   ipcMain.handle("plugin:list", (): PluginInfo[] => pluginRegistry.listInfo());
@@ -32,19 +56,13 @@ export const registerPluginIpc = (): void => {
   });
 
   // 弹出原生文件选择框 → 安装选中的 .js 脚本
+  // 注意：不要把主窗口作为 parent 传入，frameless 窗口 + 模态对话框会在 Windows 上卡死主窗
   ipcMain.handle("plugin:pickAndInstall", async () => {
-    const win = getMainWindow();
-    const res = win
-      ? await dialog.showOpenDialog(win, {
-          title: "选择插件脚本",
-          filters: [{ name: "Plugin Script", extensions: ["js"] }],
-          properties: ["openFile"],
-        })
-      : await dialog.showOpenDialog({
-          title: "选择插件脚本",
-          filters: [{ name: "Plugin Script", extensions: ["js"] }],
-          properties: ["openFile"],
-        });
+    const res = await dialog.showOpenDialog({
+      title: "选择插件脚本",
+      filters: [{ name: "Plugin Script", extensions: ["js"] }],
+      properties: ["openFile"],
+    });
     if (res.canceled || !res.filePaths[0]) return { ok: false, cancelled: true };
     try {
       const info = await pluginRegistry.install(res.filePaths[0]);
@@ -58,6 +76,21 @@ export const registerPluginIpc = (): void => {
     }
   });
 
+  // 从远端 URL 下载并安装
+  ipcMain.handle("plugin:installFromUrl", async (_evt, url: string) => {
+    try {
+      const source = await fetchScriptFromUrl(url);
+      const info = await pluginRegistry.installFromSource(source);
+      return { ok: true, id: info.manifest.id };
+    } catch (err) {
+      coreLog.warn("[plugin] installFromUrl failed:", err);
+      return {
+        ok: false,
+        error: err instanceof Error ? err.message : String(err),
+      };
+    }
+  });
+
   ipcMain.handle("plugin:uninstall", async (_evt, id: string) => {
     try {
       await pluginRegistry.uninstall(id);
@@ -70,15 +103,8 @@ export const registerPluginIpc = (): void => {
     }
   });
 
-  ipcMain.handle(
-    "plugin:setEnabled",
-    async (_evt, id: string, enabled: boolean) => {
-      await pluginRegistry.setEnabled(id, enabled);
-    },
-  );
-
-  ipcMain.handle("plugin:search", async (_evt, args) => {
-    return searchAcrossPlugins(args);
+  ipcMain.handle("plugin:setEnabled", async (_evt, id: string, enabled: boolean) => {
+    await pluginRegistry.setEnabled(id, enabled);
   });
 
   ipcMain.handle("plugin:resolveUrl", async (_evt, args) => {
diff --git a/electron/main/plugins/loader.ts b/electron/main/plugins/loader.ts
index 9acb4c9..ed84ca1 100644
--- a/electron/main/plugins/loader.ts
+++ b/electron/main/plugins/loader.ts
@@ -87,7 +87,10 @@ const sha1 = (data: string): string => crypto.createHash("sha1").update(data).di
 
 /** 规范化 name 为 id 可用的 slug */
 const slugify = (name: string): string =>
-  name.toLowerCase().replace(/[^a-z0-9_-]+/g, "-").replace(/^-+|-+$/g, "") || "plugin";
+  name
+    .toLowerCase()
+    .replace(/[^a-z0-9_-]+/g, "-")
+    .replace(/^-+|-+$/g, "") || "plugin";
 
 export interface LoadedScript {
   /** 纯文本源码 */
@@ -99,11 +102,7 @@ export interface LoadedScript {
 }
 
 /** 从磁盘或原始字符串加载并解析 */
-export const loadScript = (
-  rawOrPath: string,
-  isPath: boolean,
-  fileName?: string,
-): LoadedScript => {
+export const loadScript = (rawOrPath: string, isPath: boolean, fileName?: string): LoadedScript => {
   const raw = isPath ? fs.readFileSync(rawOrPath, "utf-8") : rawOrPath;
   const wasCompressed = raw.trim().startsWith(GZ_PREFIX);
   const source = decompressIfNeeded(raw);
@@ -115,15 +114,12 @@ export const loadScript = (
     });
   }
 
-  const platform: PluginPlatform =
-    header.platform ?? (wasCompressed ? "lx" : "splayer");
+  const platform: PluginPlatform = header.platform ?? (wasCompressed ? "lx" : "splayer");
   const apiLevel = header.apiLevel ?? 1;
 
   if (apiLevel > HOST_API_LEVEL) {
     throw Object.assign(
-      new Error(
-        `plugin requires apiLevel ${apiLevel} but host supports ${HOST_API_LEVEL}`,
-      ),
+      new Error(`plugin requires apiLevel ${apiLevel} but host supports ${HOST_API_LEVEL}`),
       { code: PluginErrorCodes.API_LEVEL_MISMATCH },
     );
   }
diff --git a/electron/main/plugins/lx-shim.ts b/electron/main/plugins/lx-shim.ts
index 3aaa5ff..de95c5f 100644
--- a/electron/main/plugins/lx-shim.ts
+++ b/electron/main/plugins/lx-shim.ts
@@ -1,18 +1,62 @@
 /**
  * lx-music-desktop user_api 脚本兼容垫片
  *
- * 在沙箱里注入 `window.lx` / `globalThis.lx`，把 lx 的 `request` / `on` / `send` 桥接到
- * splayer 的 Host API 上。
+ * 在沙箱里注入 `window.lx` / `globalThis.lx`，把 lx 的 `EVENT_NAMES` / `request` / `on` / `send` / `utils`
+ * / `currentScriptInfo` / `version` / `env` 桥接到 splayer 宿主 API。
  *
  * 被 sandbox.worker.ts 导入，运行在 utilityProcess + vm.Context 外层（注入前）。
  */
 
-import type { HostApi, PluginAction, SourceCapability } from "@shared/types/plugin";
+import crypto from "node:crypto";
+import zlib from "node:zlib";
+import type { HostApi, PluginAction, PluginQuality, SourceCapability } from "@shared/types/plugin";
 
-/** lx.request 回调签名 */
+/**
+ * lx 原生音质枚举 → 宿主 PluginQuality 的映射
+ * lx 用 128k/192k/320k/flac/flac24bit/ape/wav 这种具体编码描述，
+ * 宿主按 lq/sq/hq/lossless/hi-res 等级分类，两端做一次转换即可对齐
+ */
+const LX_TO_HOST_QUALITY: Record<string, PluginQuality> = {
+  "128k": "lq",
+  "192k": "sq",
+  "320k": "hq",
+  flac: "lossless",
+  ape: "lossless",
+  wav: "lossless",
+  flac24bit: "hi-res",
+};
+
+const HOST_TO_LX_QUALITY: Record<PluginQuality, string> = {
+  lq: "128k",
+  sq: "192k",
+  hq: "320k",
+  lossless: "flac",
+  "hi-res": "flac24bit",
+};
+
+const mapLxQualityToHost = (q: string): PluginQuality | null => LX_TO_HOST_QUALITY[q] ?? null;
+
+const mapHostQualityToLx = (q: PluginQuality): string => HOST_TO_LX_QUALITY[q] ?? "320k";
+
+const EVENT_NAMES = {
+  request: "request",
+  inited: "inited",
+  updateAlert: "updateAlert",
+} as const;
+
+const eventNames: readonly string[] = Object.values(EVENT_NAMES);
+
+/** lx.request 回调签名（与 lx-music-desktop preload 对齐） */
 type LxRequestCallback = (
   err: Error | null,
-  resp?: { statusCode: number; headers: Record<string, string> },
+  resp?: {
+    statusCode: number;
+    statusMessage?: string;
+    headers: Record<string, string>;
+    bytes?: number;
+    raw?: Buffer;
+    body?: unknown;
+  },
   body?: unknown,
 ) => void;
 
@@ -32,6 +76,61 @@ export interface LxCurrentScriptInfo {
   rawScript: string;
 }
 
+/** lx.utils — 对齐 lx-music-desktop 的签名（不同于 splayer.utils） */
+const buildLxUtils = (): object => ({
+  crypto: {
+    // 注意：lx 的参数顺序是 (buffer, mode, key, iv)，与我们自家 splayer.utils 不同
+    aesEncrypt: (
+      buffer: Buffer | Uint8Array,
+      mode: string,
+      key: Buffer | Uint8Array,
+      iv: Buffer | Uint8Array,
+    ): Buffer => {
+      const cipher = crypto.createCipheriv(mode, key as crypto.CipherKey, iv as crypto.BinaryLike);
+      return Buffer.concat([cipher.update(Buffer.from(buffer)), cipher.final()]);
+    },
+    rsaEncrypt: (buffer: Buffer | Uint8Array, key: string): Buffer => {
+      // lx 行为：先左填充 0 到 128 字节，再用 RSA_NO_PADDING 加密
+      const padded = Buffer.concat([Buffer.alloc(128 - buffer.length), Buffer.from(buffer)]);
+      return crypto.publicEncrypt({ key, padding: crypto.constants.RSA_NO_PADDING }, padded);
+    },
+    randomBytes: (size: number): Buffer => crypto.randomBytes(size),
+    md5: (str: string | Uint8Array): string =>
+      crypto
+        .createHash("md5")
+        .update(str as crypto.BinaryLike)
+        .digest("hex"),
+  },
+  buffer: {
+    from: (
+      data: ArrayBuffer | SharedArrayBuffer | string | Uint8Array | number[],
+      encoding?: BufferEncoding,
+    ): Buffer =>
+      typeof data === "string" ? Buffer.from(data, encoding) : Buffer.from(data as ArrayBuffer),
+    bufToString: (buf: Buffer | Uint8Array | string, format: BufferEncoding): string =>
+      typeof buf === "string"
+        ? Buffer.from(buf, "binary").toString(format)
+        : Buffer.from(buf).toString(format),
+  },
+  zlib: {
+    // lx 的 zlib API 是异步 Promise 版本
+    inflate: (buf: Buffer | Uint8Array): Promise<Buffer> =>
+      new Promise((resolve, reject) => {
+        zlib.inflate(buf, (err, data) => {
+          if (err) reject(new Error(err.message));
+          else resolve(data);
+        });
+      }),
+    deflate: (data: Buffer | Uint8Array | string): Promise<Buffer> =>
+      new Promise((resolve, reject) => {
+        zlib.deflate(data, (err, buf) => {
+          if (err) reject(new Error(err.message));
+          else resolve(buf);
+        });
+      }),
+  },
+});
+
 /**
  * 安装 lx 垫片
  * @param sandboxGlobal 沙箱上下文对象（vm.createContext 前的 plain object）
@@ -49,43 +148,148 @@ export const installLxShim = (
 ): void => {
   let requestHandler: LxRequestHandler | null = null;
   let inited = false;
+  let updateAlerted = false;
 
   const lxApi = {
+    EVENT_NAMES,
     version: "2.0.0",
+    env: "desktop",
+
+    request(
+      url: string,
+      opts: Record<string, unknown> | undefined,
+      callback: LxRequestCallback,
+    ): () => void {
+      const o = opts ?? {};
+      const method = ((o.method as string) ?? "GET").toUpperCase() as "GET" | "POST";
+      const timeout = typeof o.timeout === "number" ? (o.timeout as number) : undefined;
+      const headers = (o.headers as Record<string, string>) ?? {};
+      const body = (o.body ?? o.form ?? o.formData) as
+        | string
+        | Uint8Array
+        | ArrayBuffer
+        | undefined;
+
+      let aborted = false;
 
-    request(url: string, opts: Record<string, unknown>, callback: LxRequestCallback): void {
       splayer
         .request(url, {
-          method: (opts?.method as "GET" | "POST") ?? "GET",
-          headers: (opts?.headers as Record<string, string>) ?? {},
-          body: opts?.body as string | Uint8Array | ArrayBuffer | undefined,
-          timeout: (opts?.timeout as number) ?? undefined,
-          responseType: (opts?.responseType as "text" | "json" | "arraybuffer") ?? "text",
+          method,
+          headers,
+          body,
+          timeout,
+          responseType: "text",
         })
         .then((resp) => {
-          callback(null, { statusCode: resp.status, headers: resp.headers }, resp.body);
+          if (aborted) return;
+          const rawText = typeof resp.body === "string" ? (resp.body as string) : "";
+          let parsedBody: unknown = rawText;
+          try {
+            parsedBody = JSON.parse(rawText);
+          } catch {
+            /* 保留原字符串 */
+          }
+          const raw = Buffer.from(rawText, "utf-8");
+          callback(
+            null,
+            {
+              statusCode: resp.status,
+              statusMessage: "",
+              headers: resp.headers,
+              bytes: raw.byteLength,
+              raw,
+              body: parsedBody,
+            },
+            parsedBody,
+          );
         })
-        .catch((err: Error) => callback(err));
-    },
+        .catch((err: Error) => {
+          if (aborted) return;
+          callback(err);
+        });
 
-    on(eventName: string, handler: LxRequestHandler): void {
-      if (eventName === "request") requestHandler = handler;
+      // lx 返回一个 abort 函数；当前无法真正取消底层 fetch，置 aborted 丢弃结果
+      return () => {
+        aborted = true;
+      };
     },
 
-    send(eventName: string, data: Record<string, unknown>): void {
-      if (eventName === "inited" && !inited) {
-        inited = true;
-        const sources = (data?.sources as Record<string, SourceCapability>) ?? {};
-        onSources(sources);
-      } else if (eventName === "updateAlert") {
-        splayer.log.info("[lx] updateAlert:", data);
+    on(eventName: string, handler: LxRequestHandler): Promise<void> {
+      if (!eventNames.includes(eventName)) {
+        return Promise.reject(new Error("The event is not supported: " + eventName));
+      }
+      if (eventName === EVENT_NAMES.request) {
+        requestHandler = handler;
+        return Promise.resolve();
       }
+      return Promise.reject(new Error("The event is not supported: " + eventName));
     },
 
-    // lx.utils 形状和 splayer.utils 基本一致（crypto/buffer/zlib）
-    // 直接复用（worker 把 utils 挂在了 splayer 对象上）
-     
-    utils: (splayer as any).utils,
+    send(eventName: string, data: Record<string, unknown>): Promise<void> {
+      return new Promise((resolve, reject) => {
+        if (!eventNames.includes(eventName)) {
+          reject(new Error("The event is not supported: " + eventName));
+          return;
+        }
+        switch (eventName) {
+          case EVENT_NAMES.inited: {
+            if (inited) {
+              reject(new Error("Script is inited"));
+              return;
+            }
+            inited = true;
+            // lx 脚本上报的 sources.qualitys / qualities 是 lx 原生音质字符串，
+            // 转成宿主 PluginQuality 去重后再注册给 router
+            const rawSources =
+              (data?.sources as Record<
+                string,
+                {
+                  name?: string;
+                  actions?: string[];
+                  qualitys?: string[];
+                  qualities?: string[];
+                  [key: string]: unknown;
+                }
+              >) ?? {};
+            const normalized: Record<string, SourceCapability> = {};
+            for (const [key, cap] of Object.entries(rawSources)) {
+              const rawQualities = cap.qualitys ?? cap.qualities ?? [];
+              const mapped = new Set<PluginQuality>();
+              for (const q of rawQualities) {
+                const host = mapLxQualityToHost(q);
+                if (host) mapped.add(host);
+              }
+              // lx 只支持 musicUrl/lyric/pic，过滤掉其他值
+              const actions = (cap.actions ?? []).filter(
+                (a): a is PluginAction => a === "musicUrl" || a === "lyric" || a === "pic",
+              );
+              normalized[key] = {
+                name: cap.name ?? key,
+                actions,
+                qualities: Array.from(mapped),
+              };
+            }
+            onSources(normalized);
+            resolve();
+            return;
+          }
+          case EVENT_NAMES.updateAlert: {
+            if (updateAlerted) {
+              reject(new Error("The update alert can only be called once."));
+              return;
+            }
+            updateAlerted = true;
+            splayer.log.info("[lx] updateAlert:", data);
+            resolve();
+            return;
+          }
+          default:
+            reject(new Error("Unknown event name: " + eventName));
+        }
+      });
+    },
+
+    utils: buildLxUtils(),
 
     currentScriptInfo: scriptInfo ?? {
       name: "",
@@ -111,50 +315,27 @@ export const installLxShim = (
       }
       const reqObj = req as Record<string, unknown>;
       const source = (reqObj.source as string) ?? "";
-      let info: Record<string, unknown>;
-
-      switch (action) {
-        case "musicUrl":
-          info = {
-            type: reqObj.quality,
-            musicInfo: reqObj.musicInfo ?? {},
-          };
-          break;
-        case "lyric":
-        case "pic":
-        case "meta":
-          info = { musicInfo: reqObj.musicInfo ?? {} };
-          break;
-        case "search":
-          info = {
-            keyword: reqObj.keyword,
-            page: reqObj.page ?? 1,
-            limit: reqObj.limit ?? 30,
-          };
-          break;
-        default:
-          info = reqObj;
-      }
+      // lx 对 musicUrl/lyric/pic 统一传 { type, musicInfo }
+      // 宿主的 quality 是 lq/sq/hq/lossless/hi-res，lx 脚本期待 128k/320k/flac/... 做一次翻译
+      const hostQuality = reqObj.quality as PluginQuality | undefined;
+      const info: Record<string, unknown> = {
+        type: hostQuality ? mapHostQualityToLx(hostQuality) : undefined,
+        musicInfo: reqObj.musicInfo ?? {},
+      };
 
       const raw = await Promise.resolve(requestHandler({ source, action, info }));
 
       // 转换返回值以对齐 splayer HostApi 的响应形状
       switch (action) {
         case "musicUrl":
-          if (typeof raw === "string") return { url: raw };
-          return raw;
         case "pic":
           if (typeof raw === "string") return { url: raw };
           return raw;
-        case "search": {
-          if (Array.isArray(raw)) return { list: raw };
-          return raw;
-        }
         default:
           return raw;
       }
     });
   };
 
-  (["search", "musicUrl", "lyric", "pic", "meta"] as PluginAction[]).forEach(registerAction);
+  (["musicUrl", "lyric", "pic"] as PluginAction[]).forEach(registerAction);
 };
diff --git a/electron/main/plugins/registry.ts b/electron/main/plugins/registry.ts
index d41fea2..e96ac99 100644
--- a/electron/main/plugins/registry.ts
+++ b/electron/main/plugins/registry.ts
@@ -147,8 +147,13 @@ class PluginRegistry extends EventEmitter {
 
   /** 导入本地脚本文件 */
   async install(filePath: string): Promise<PluginInfo> {
-    ensureDirs();
     const raw = fs.readFileSync(filePath, "utf-8");
+    return this.installFromSource(raw);
+  }
+
+  /** 从脚本源码安装（供本地文件、URL 下载等入口复用） */
+  async installFromSource(raw: string): Promise<PluginInfo> {
+    ensureDirs();
     const { source, manifest } = loadScript(raw, false);
     // 脚本落盘（明文）
     const fileName = `${manifest.id}.js`;
@@ -160,7 +165,15 @@ class PluginRegistry extends EventEmitter {
     stored.plugins[manifest.id] = manifest;
     writeStored(stored);
 
-    // 默认启用
+    // 互斥：新装的插件默认启用，先把其他已启用的插件停掉（sandbox + 配置 + 状态广播）
+    const others = [...this.runtimes.values()].filter(
+      (rt) => rt.manifest.id !== manifest.id && rt.enabled,
+    );
+    for (const other of others) {
+      await this.setEnabled(other.manifest.id, false);
+    }
+
+    // 默认启用新插件
     const enabledMap = {
       ...(store.get("plugins.enabled") as Record<string, boolean>),
       [manifest.id]: true,
@@ -230,9 +243,9 @@ class PluginRegistry extends EventEmitter {
     this.setStatus(rt, { state: "loading" });
 
     const userSettings =
-      ((store.get(`plugins.perPlugin.${rt.manifest.id}` as never) as
+      (store.get(`plugins.perPlugin.${rt.manifest.id}` as never) as
         | Record<string, unknown>
-        | undefined) ?? {});
+        | undefined) ?? {};
 
     const sandbox = new Sandbox(
       {
@@ -254,7 +267,7 @@ class PluginRegistry extends EventEmitter {
           if (ok) p.resolve(data);
           else {
             const err = new Error(error?.message ?? "call failed");
-             
+
             (err as any).code = error?.code ?? PluginErrorCodes.UNKNOWN;
             p.reject(err);
           }
@@ -266,6 +279,8 @@ class PluginRegistry extends EventEmitter {
           coreLog[level](`[plugin:${rt.manifest.id}]`, ...args);
         },
         onFatal: (error) => {
+          // 同时记录到主日志，避免错误只在 UI 卡片里可见
+          coreLog.error(`[plugin:${rt.manifest.id}] fatal ${error.code}: ${error.message}`);
           this.setStatus(rt, { state: "error", error });
           // 把所有 pending 失败掉
           for (const p of rt.pending.values()) {
@@ -299,14 +314,12 @@ class PluginRegistry extends EventEmitter {
     try {
       await sandbox.start();
     } catch (err) {
-       
       const code = ((err as any)?.code as string) ?? PluginErrorCodes.UNKNOWN;
+      const message = err instanceof Error ? err.message : String(err);
+      coreLog.error(`[plugin:${rt.manifest.id}] start failed ${code}: ${message}`);
       this.setStatus(rt, {
         state: "error",
-        error: {
-          code,
-          message: err instanceof Error ? err.message : String(err),
-        },
+        error: { code, message },
       });
       rt.sandbox = null;
     }
diff --git a/electron/main/plugins/router.ts b/electron/main/plugins/router.ts
index 1df5175..fe7c7b8 100644
--- a/electron/main/plugins/router.ts
+++ b/electron/main/plugins/router.ts
@@ -2,18 +2,14 @@
  * 插件动作路由
  *
  * 把渲染端 / 主进程内部的 action 请求转发给对应插件的 sandbox，
- * 并处理超时、取消、优先级 fallback。
- *
- * MVP 只实现 search / musicUrl；lyric / meta 接入点在二期启用。
+ * 并处理超时、取消。目前支持 musicUrl / lyric / pic 三个动作。
  */
 
 import type {
   MusicUrlReq,
   MusicUrlRes,
   PluginAction,
-  PluginSearchArgs,
   PluginResolveUrlArgs,
-  SearchRes,
   SourceCapability,
 } from "@shared/types/plugin";
 import { ACTION_TIMEOUTS, PluginErrorCodes } from "@shared/defaults/plugin-api";
@@ -76,50 +72,6 @@ const supportsAction = (
   return { ok: false };
 };
 
-export const searchAcrossPlugins = async (args: PluginSearchArgs): Promise<SearchRes> => {
-  const { keyword, page = 1, limit = 30, pluginId, source } = args;
-  const candidates: PluginRuntime[] = [];
-
-  if (pluginId) {
-    const rt = pluginRegistry.getRuntime(pluginId);
-    if (rt) candidates.push(rt);
-  } else {
-    // 按优先级 + 所有 ready 插件 fallback
-    const priority = (pluginRegistry as unknown as { listInfo: () => unknown }).listInfo
-      ? pluginRegistry.listInfo().map((i) => i.manifest.id)
-      : [];
-    for (const id of priority) {
-      const rt = pluginRegistry.getRuntime(id);
-      if (rt && rt.enabled && rt.status.state === "ready") candidates.push(rt);
-    }
-  }
-
-  const errors: Error[] = [];
-  for (const rt of candidates) {
-    const check = supportsAction(rt, source, "search");
-    if (!check.ok) continue;
-    try {
-      const res = await callOn<SearchRes>(
-        rt,
-        "search",
-        { source: check.source, keyword, page, limit },
-        ACTION_TIMEOUTS.search,
-      );
-      return res;
-    } catch (err) {
-      errors.push(err as Error);
-    }
-  }
-  throw Object.assign(
-    new Error(
-      errors.length
-        ? `all candidate plugins failed: ${errors.map((e) => e.message).join("; ")}`
-        : "no plugin supports search",
-    ),
-    { code: PluginErrorCodes.ACTION_UNSUPPORTED },
-  );
-};
-
 export const resolveUrl = async (args: PluginResolveUrlArgs): Promise<MusicUrlRes> => {
   const rt = pluginRegistry.getRuntime(args.pluginId);
   if (!rt) {
@@ -136,7 +88,7 @@ export const resolveUrl = async (args: PluginResolveUrlArgs): Promise<MusicUrlRe
   }
   const params: MusicUrlReq = {
     source: check.source!,
-    quality: args.quality ?? "320k",
+    quality: args.quality ?? "hq",
     musicInfo: args.musicInfo,
   };
   return callOn<MusicUrlRes>(rt, "musicUrl", params, ACTION_TIMEOUTS.musicUrl);
diff --git a/electron/main/plugins/sandbox.ts b/electron/main/plugins/sandbox.ts
index 04702ab..5ce54f9 100644
--- a/electron/main/plugins/sandbox.ts
+++ b/electron/main/plugins/sandbox.ts
@@ -29,12 +29,7 @@ import {
 
 export interface SandboxEvents {
   onReady: (sources: Record<string, SourceCapability>) => void;
-  onResult: (
-    requestId: string,
-    ok: boolean,
-    data?: unknown,
-    error?: PluginErrorPayload,
-  ) => void;
+  onResult: (requestId: string, ok: boolean, data?: unknown, error?: PluginErrorPayload) => void;
   onHostCall: (callId: string, method: HostCallMethod, args: unknown[]) => void;
   onLog: (level: "debug" | "info" | "warn" | "error", args: unknown[]) => void;
   onFatal: (error: PluginErrorPayload) => void;
@@ -150,6 +145,13 @@ export class Sandbox {
         platform: this.opts.manifest.platform,
         userSettings: this.opts.userSettings,
         source: this.opts.source,
+        scriptInfo: {
+          name: this.opts.manifest.name,
+          description: this.opts.manifest.description ?? "",
+          version: this.opts.manifest.version,
+          author: this.opts.manifest.author ?? "",
+          homepage: this.opts.manifest.homepage ?? "",
+        },
       };
       this.child!.postMessage(initMsg);
     });
@@ -173,12 +175,7 @@ export class Sandbox {
     this.child.postMessage({ kind: "cancel", requestId } satisfies SandboxIn);
   }
 
-  sendHostResult(
-    callId: string,
-    ok: boolean,
-    data?: unknown,
-    error?: PluginErrorPayload,
-  ): void {
+  sendHostResult(callId: string, ok: boolean, data?: unknown, error?: PluginErrorPayload): void {
     if (!this.child) return;
     this.child.postMessage({ kind: "hostResult", callId, ok, data, error } satisfies SandboxIn);
   }
@@ -212,9 +209,7 @@ export class Sandbox {
       if (!this.child) return;
       this.heartbeatMisses++;
       if (this.heartbeatMisses > HEARTBEAT_MAX_MISSES) {
-        this.events.onLog("warn", [
-          `plugin ${this.opts.manifest.id} heartbeat lost, killing`,
-        ]);
+        this.events.onLog("warn", [`plugin ${this.opts.manifest.id} heartbeat lost, killing`]);
         this.kill();
         return;
       }
diff --git a/electron/main/plugins/sandbox.worker.ts b/electron/main/plugins/sandbox.worker.ts
index 31f33a7..ccfb1fd 100644
--- a/electron/main/plugins/sandbox.worker.ts
+++ b/electron/main/plugins/sandbox.worker.ts
@@ -29,10 +29,13 @@ import type {
 import { installLxShim } from "./lx-shim";
 
 // utilityProcess 注入的全局 parentPort（Electron 类型没导出，用 any）
- 
-const parentPort: { on: (evt: "message", cb: (msg: any) => void) => void; postMessage: (msg: SandboxOut) => void } =
-   
-  (process as any).parentPort;
+// 注意：process.parentPort 仿 Web Worker 接口，'message' 回调参数是 MessageEvent，
+// 消息体在 event.data；与主进程侧 UtilityProcess.on('message', msg) 不同
+
+const parentPort: {
+  on: (evt: "message", cb: (event: { data: SandboxIn }) => void) => void;
+  postMessage: (msg: SandboxOut) => void;
+} = (process as any).parentPort;
 
 if (!parentPort) {
   // 未在 utilityProcess 下运行，退出
@@ -110,19 +113,27 @@ const buildSplayer = (init: Extract<SandboxIn, { kind: "init" }>): HostApi => ({
     keys: () => hostCall("storage.keys", []) as Promise<string[]>,
   },
 
-  getSetting: <T = unknown>(key: string): T | undefined =>
-    userSettingsCache[key] as T | undefined,
+  getSetting: <T = unknown>(key: string): T | undefined => userSettingsCache[key] as T | undefined,
 });
 
 /** 把 utils 暴露给沙箱（原生 Node 模块包装） */
 const buildUtils = (): object => ({
   crypto: {
     md5: (data: string | Uint8Array) =>
-      crypto.createHash("md5").update(data as crypto.BinaryLike).digest("hex"),
+      crypto
+        .createHash("md5")
+        .update(data as crypto.BinaryLike)
+        .digest("hex"),
     sha1: (data: string | Uint8Array) =>
-      crypto.createHash("sha1").update(data as crypto.BinaryLike).digest("hex"),
+      crypto
+        .createHash("sha1")
+        .update(data as crypto.BinaryLike)
+        .digest("hex"),
     sha256: (data: string | Uint8Array) =>
-      crypto.createHash("sha256").update(data as crypto.BinaryLike).digest("hex"),
+      crypto
+        .createHash("sha256")
+        .update(data as crypto.BinaryLike)
+        .digest("hex"),
     hmac: (algo: string, key: string | Uint8Array, data: string | Uint8Array) =>
       crypto
         .createHmac(algo, key as crypto.BinaryLike)
@@ -152,8 +163,10 @@ const buildUtils = (): object => ({
       crypto.publicEncrypt(publicKey, Buffer.from(data)),
   },
   buffer: {
-    from: (data: ArrayBuffer | SharedArrayBuffer | string | Uint8Array | number[], enc?: BufferEncoding) =>
-      typeof data === "string" ? Buffer.from(data, enc) : Buffer.from(data as ArrayBuffer),
+    from: (
+      data: ArrayBuffer | SharedArrayBuffer | string | Uint8Array | number[],
+      enc?: BufferEncoding,
+    ) => (typeof data === "string" ? Buffer.from(data, enc) : Buffer.from(data as ArrayBuffer)),
     bufToString: (buf: Buffer | Uint8Array, enc: BufferEncoding = "utf-8") =>
       Buffer.from(buf).toString(enc),
     concat: (list: Array<Buffer | Uint8Array>) => Buffer.concat(list),
@@ -174,7 +187,7 @@ const buildUtils = (): object => ({
 const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
   const splayer = buildSplayer(init);
   // splayer.utils 单独挂，避免被类型定义暴露（保持 HostApi 纯净）
-   
+
   (splayer as any).utils = buildUtils();
 
   const sandboxGlobal: Record<string, unknown> = {
@@ -203,12 +216,27 @@ const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
     },
   };
 
-  // lx 脚本：注入 window / lx 垫片
-  if (init.platform === "lx") {
-    installLxShim(sandboxGlobal, splayer, handlers, (sources) => {
+  // 统一注入 lx 垫片——无论脚本声明的 platform 是什么。
+  // 原因：很多 lx 脚本以明文 .js 分发且头注释里没写 @platform lx，
+  // 按 platform 推断会错判为 splayer，导致 globalThis.lx 为 undefined。
+  // splayer-native 脚本本身不会碰 lx 全局，多挂一个对象不干扰；
+  // lx 脚本调 splayer.on 又覆盖 lx 垫片预置的 handler，两条路径都能走通。
+  installLxShim(
+    sandboxGlobal,
+    splayer,
+    handlers,
+    (sources) => {
       registeredSources = { ...registeredSources, ...sources };
-    });
-  }
+    },
+    {
+      name: init.scriptInfo.name,
+      description: init.scriptInfo.description,
+      version: init.scriptInfo.version,
+      author: init.scriptInfo.author,
+      homepage: init.scriptInfo.homepage,
+      rawScript: init.source,
+    },
+  );
 
   // 允许脚本自引用全局
   sandboxGlobal.globalThis = sandboxGlobal;
@@ -242,8 +270,9 @@ const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
   });
 };
 
-/** 消息入口 */
-parentPort.on("message", async (msg: SandboxIn) => {
+/** 消息入口：event.data 是主进程发来的 SandboxIn */
+parentPort.on("message", async (event) => {
+  const msg = event.data;
   try {
     switch (msg.kind) {
       case "init": {
@@ -272,7 +301,7 @@ parentPort.on("message", async (msg: SandboxIn) => {
         if (msg.ok) w.resolve(msg.data);
         else {
           const err = new Error(msg.error?.message ?? "host call failed");
-           
+
           (err as any).code = msg.error?.code;
           w.reject(err);
         }
@@ -310,9 +339,7 @@ parentPort.on("message", async (msg: SandboxIn) => {
         } catch (err) {
           inflight.delete(msg.requestId);
           const payload: PluginErrorPayload = {
-            code:
-               
-              ((err as any)?.code as string) ?? "PLUGIN_HANDLER_ERROR",
+            code: ((err as any)?.code as string) ?? "PLUGIN_HANDLER_ERROR",
             message: err instanceof Error ? err.message : String(err),
           };
           send({ kind: "result", requestId: msg.requestId, ok: false, error: payload });
diff --git a/electron/main/plugins/storage.ts b/electron/main/plugins/storage.ts
index b6f3a39..4c3b2e9 100644
--- a/electron/main/plugins/storage.ts
+++ b/electron/main/plugins/storage.ts
@@ -21,8 +21,7 @@ const ensureDir = (): void => {
   if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
 };
 
-const fileOf = (pluginId: string): string =>
-  path.join(getPluginsDataDir(), `${pluginId}.json`);
+const fileOf = (pluginId: string): string => path.join(getPluginsDataDir(), `${pluginId}.json`);
 
 const load = (pluginId: string): Record<string, unknown> => {
   const cached = caches.get(pluginId);
diff --git a/electron/preload/index.ts b/electron/preload/index.ts
index bf05fdb..0237618 100644
--- a/electron/preload/index.ts
+++ b/electron/preload/index.ts
@@ -1,11 +1,7 @@
 import { contextBridge, ipcRenderer } from "electron";
 import { electronAPI } from "@electron-toolkit/preload";
 import type { TaskbarLyricSettings } from "@shared/types/settings";
-import type {
-  PluginInfo,
-  PluginResolveUrlArgs,
-  PluginSearchArgs,
-} from "@shared/types/plugin";
+import type { PluginInfo, PluginResolveUrlArgs } from "@shared/types/plugin";
 
 /** 订阅主进程推送的事件 */
 const subscribe = <T>(channel: string, callback: (data: T) => void): (() => void) => {
@@ -232,13 +228,13 @@ const api = {
     install: (filePath: string) => ipcRenderer.invoke("plugin:install", filePath),
     // 弹出原生文件选择框导入插件
     pickAndInstall: () => ipcRenderer.invoke("plugin:pickAndInstall"),
+    // 从远端 URL 下载并导入
+    installFromUrl: (url: string) => ipcRenderer.invoke("plugin:installFromUrl", url),
     // 卸载
     uninstall: (id: string) => ipcRenderer.invoke("plugin:uninstall", id),
     // 启用/禁用
     setEnabled: (id: string, enabled: boolean) =>
       ipcRenderer.invoke("plugin:setEnabled", id, enabled),
-    // 搜索
-    search: (args: PluginSearchArgs) => ipcRenderer.invoke("plugin:search", args),
     // 解析播放 URL
     resolveUrl: (args: PluginResolveUrlArgs) => ipcRenderer.invoke("plugin:resolveUrl", args),
     // 订阅插件状态变化
diff --git a/shared/defaults/plugin-api.ts b/shared/defaults/plugin-api.ts
index 89e8951..4fc3e98 100644
--- a/shared/defaults/plugin-api.ts
+++ b/shared/defaults/plugin-api.ts
@@ -5,11 +5,9 @@ export const HOST_API_LEVEL = 1;
 
 /** 各动作的默认超时（毫秒） */
 export const ACTION_TIMEOUTS = {
-  search: 10_000,
   musicUrl: 20_000,
   lyric: 15_000,
   pic: 15_000,
-  meta: 15_000,
 } as const;
 
 /** 网络请求最大超时 */
@@ -21,6 +19,12 @@ export const REQUEST_DEFAULT_TIMEOUT = 15_000;
 /** 插件加载超时（从 fork 到收到 ready） */
 export const PLUGIN_LOAD_TIMEOUT = 10_000;
 
+/** 在线导入脚本大小上限（字节） */
+export const INSTALL_URL_MAX_SIZE = 9_000_000;
+
+/** 在线导入请求超时（毫秒） */
+export const INSTALL_URL_TIMEOUT = 15_000;
+
 /** 心跳间隔 */
 export const HEARTBEAT_INTERVAL = 10_000;
 
@@ -71,10 +75,9 @@ export const PluginErrorCodes = {
 export const defaultPluginsConfig: PluginsConfig = {
   enabled: {},
   priority: {
-    search: [],
     musicUrl: [],
     lyric: [],
-    meta: [],
+    pic: [],
   },
   perPlugin: {},
 };
diff --git a/shared/types/plugin.ts b/shared/types/plugin.ts
index 3a1bc02..1f5653c 100644
--- a/shared/types/plugin.ts
+++ b/shared/types/plugin.ts
@@ -4,10 +4,18 @@
  */
 
 /** 支持的插件动作 */
-export type PluginAction = "search" | "musicUrl" | "lyric" | "pic" | "meta";
+export type PluginAction = "musicUrl" | "lyric" | "pic";
 
-/** 音质等级 */
-export type PluginQuality = "128k" | "320k" | "flac" | "hires";
+/**
+ * 音质等级
+ * 对齐 src/utils/quality.ts 的 QualityLevel（去掉 null），保持宿主与插件一致
+ * - hi-res：高解析度无损（采样率 ≥ 96kHz + 位深 ≥ 24bit）
+ * - lossless：无损（flac/ape/wav 等）
+ * - hq：有损 ≥ 320kbps
+ * - sq：有损 ≥ 192kbps
+ * - lq：有损 < 192kbps
+ */
+export type PluginQuality = "hi-res" | "lossless" | "hq" | "sq" | "lq";
 
 /** 插件脚本来源平台（用于识别 lx 脚本并启用垫片） */
 export type PluginPlatform = "splayer" | "lx";
@@ -65,26 +73,6 @@ export interface PluginInfo {
 
 /* ========== 调用请求 / 响应 ========== */
 
-export interface SearchReq {
-  source: string;
-  keyword: string;
-  page?: number;
-  limit?: number;
-}
-export interface SearchTrackItem {
-  songmid: string;
-  name: string;
-  singer: string;
-  albumName?: string;
-  interval?: string;
-  cover?: string;
-  qualities?: PluginQuality[];
-}
-export interface SearchRes {
-  list: SearchTrackItem[];
-  total?: number;
-}
-
 export interface MusicUrlReq {
   source: string;
   quality: PluginQuality;
@@ -125,24 +113,11 @@ export interface PicRes {
   url: string;
 }
 
-export interface MetaReq {
-  source: string;
-  musicInfo: { songmid?: string; name: string; singer?: string; [key: string]: unknown };
-}
-export interface MetaRes {
-  album?: string;
-  cover?: string;
-  year?: number;
-  [key: string]: unknown;
-}
-
 /** Action → 请求/响应映射，用于 HostApi.on 的重载 */
 export interface ActionIO {
-  search: { req: SearchReq; res: SearchRes };
   musicUrl: { req: MusicUrlReq; res: MusicUrlRes };
   lyric: { req: LyricReq; res: LyricRes };
   pic: { req: PicReq; res: PicRes };
-  meta: { req: MetaReq; res: MetaRes };
 }
 
 /* ========== 宿主暴露给插件的 API（在沙箱内注入为 globalThis.splayer） ========== */
@@ -224,6 +199,13 @@ export type SandboxIn =
       platform: PluginPlatform;
       userSettings: Record<string, unknown>;
       source: string;
+      scriptInfo: {
+        name: string;
+        description: string;
+        version: string;
+        author: string;
+        homepage: string;
+      };
     }
   | { kind: "call"; requestId: string; action: PluginAction; params: unknown }
   | { kind: "cancel"; requestId: string }
@@ -265,15 +247,6 @@ export type HostCallMethod =
 
 /* ========== 渲染端 ↔ 主进程的 IPC 请求参数 ========== */
 
-export interface PluginSearchArgs {
-  /** 不填则按 settings.plugins.priority.search 顺序尝试 */
-  pluginId?: string;
-  source?: string;
-  keyword: string;
-  page?: number;
-  limit?: number;
-}
-
 export interface PluginResolveUrlArgs {
   pluginId: string;
   source: string;
@@ -294,12 +267,12 @@ export interface PluginsApi {
     error?: string;
     cancelled?: boolean;
   }>;
+  /** 从远端 URL 下载并导入 */
+  installFromUrl: (url: string) => Promise<{ ok: boolean; id?: string; error?: string }>;
   /** 卸载（同时删除 scripts/{id}.js） */
   uninstall: (id: string) => Promise<{ ok: boolean; error?: string }>;
   /** 启用/禁用 */
   setEnabled: (id: string, enabled: boolean) => Promise<void>;
-  /** 搜索 */
-  search: (args: PluginSearchArgs) => Promise<SearchRes>;
   /** 获取播放 URL */
   resolveUrl: (args: PluginResolveUrlArgs) => Promise<MusicUrlRes>;
   /** 订阅插件状态变化 */
@@ -313,10 +286,9 @@ export interface PluginsConfig {
   enabled: Record<string, boolean>;
   /** 各动作的插件优先级列表 */
   priority: {
-    search: string[];
     musicUrl: string[];
     lyric: string[];
-    meta: string[];
+    pic: string[];
   };
   /** 每插件的用户设置 */
   perPlugin: Record<string, Record<string, unknown>>;
diff --git a/src/components/settings/custom/PluginManager.vue b/src/components/settings/custom/PluginManager.vue
index b3790ea..70fae0e 100644
--- a/src/components/settings/custom/PluginManager.vue
+++ b/src/components/settings/custom/PluginManager.vue
@@ -12,6 +12,9 @@ const { list, loaded } = storeToRefs(pluginsStore);
 const confirmOpen = ref(false);
 const pendingUninstallId = ref<string | null>(null);
 const importing = ref(false);
+const urlDialogOpen = ref(false);
+const urlInput = ref("");
+const urlSubmitting = ref(false);
 
 onMounted(() => {
   if (!loaded.value) void pluginsStore.load();
@@ -42,10 +45,13 @@ const sourceNames = (info: PluginInfo): string[] => {
   return Object.keys(info.status.sources);
 };
 
-/** name 首字母作为 avatar */
-const initial = (name: string): string => (name.trim()[0] ?? "?").toUpperCase();
+/** 打开外链（主进程 windowOpenHandler 已统一拦截为 shell.openExternal） */
+const openExternal = (url?: string): void => {
+  if (!url) return;
+  window.open(url, "_blank", "noopener,noreferrer");
+};
 
-const handleImport = async (): Promise<void> => {
+const handleImportLocal = async (): Promise<void> => {
   importing.value = true;
   try {
     const res = await pluginsStore.pickAndInstall();
@@ -57,8 +63,37 @@ const handleImport = async (): Promise<void> => {
   }
 };
 
-const handleToggleEnabled = async (id: string, enabled: boolean): Promise<void> => {
-  await pluginsStore.setEnabled(id, enabled);
+const openUrlDialog = (): void => {
+  urlInput.value = "";
+  urlDialogOpen.value = true;
+};
+
+const handleImportFromUrl = async (): Promise<void> => {
+  const url = urlInput.value.trim();
+  if (!/^https?:\/\//i.test(url)) {
+    toast.error(t("settings.plugins.importUrlInvalid"));
+    return;
+  }
+  urlSubmitting.value = true;
+  try {
+    const res = await pluginsStore.installFromUrl(url);
+    if (res.ok) {
+      toast.success(t("settings.plugins.importSuccess"));
+      urlDialogOpen.value = false;
+    } else {
+      toast.error(res.error ?? t("settings.plugins.importFailed"));
+    }
+  } finally {
+    urlSubmitting.value = false;
+  }
+};
+
+const handleToggleEnabled = async (id: string, currentlyEnabled: boolean): Promise<void> => {
+  if (currentlyEnabled) {
+    await pluginsStore.setEnabled(id, false);
+  } else {
+    await pluginsStore.enableExclusive(id);
+  }
 };
 
 const openUninstallConfirm = (id: string): void => {
@@ -79,9 +114,7 @@ const handleConfirmUninstall = async (): Promise<void> => {
 /** 当前待卸载的插件名（对话框提示） */
 const pendingName = computed(() => {
   if (!pendingUninstallId.value) return "";
-  return (
-    list.value.find((i) => i.manifest.id === pendingUninstallId.value)?.manifest.name ?? ""
-  );
+  return list.value.find((i) => i.manifest.id === pendingUninstallId.value)?.manifest.name ?? "";
 });
 </script>
 
@@ -97,12 +130,20 @@ const pendingName = computed(() => {
           {{ t("settings.plugins.hintDetail") }}
         </div>
       </div>
-      <SButton type="primary" size="small" :loading="importing" @click="handleImport">
-        <template #icon>
-          <IconLucidePlus class="size-4" />
-        </template>
-        {{ t("settings.plugins.import") }}
-      </SButton>
+      <div class="flex items-center gap-2 shrink-0">
+        <SButton variant="secondary" size="small" :loading="importing" @click="handleImportLocal">
+          <template #icon>
+            <IconLucideFolderOpen class="size-4" />
+          </template>
+          {{ t("settings.plugins.importLocal") }}
+        </SButton>
+        <SButton variant="secondary" size="small" @click="openUrlDialog">
+          <template #icon>
+            <IconLucideLink class="size-4" />
+          </template>
+          {{ t("settings.plugins.importFromUrl") }}
+        </SButton>
+      </div>
     </div>
 
     <!-- 空态 -->
@@ -124,73 +165,69 @@ const pendingName = computed(() => {
     </div>
 
     <!-- 插件列表 -->
-    <ul v-else class="flex flex-col gap-2.5">
+    <ul v-else class="flex flex-col gap-2.5 list-none p-0 m-0">
       <li
         v-for="info in list"
         :key="info.manifest.id"
         class="rounded-xl bg-surface-panel border border-solid border-outline-variant/15 px-4 py-3.5"
       >
         <div class="flex items-start gap-3">
-          <!-- 首字母头像 -->
-          <div
-            class="shrink-0 size-10 rounded-xl bg-primary/12 text-primary flex items-center justify-center text-base font-semibold"
-          >
-            {{ initial(info.manifest.name) }}
-          </div>
-
           <!-- 主体信息 -->
           <div class="flex-1 min-w-0">
+            <!-- 标题行：名字 + 版本 + 状态 + 外链 -->
             <div class="flex items-center gap-2 flex-wrap">
               <span class="text-sm font-medium text-on-surface truncate">
                 {{ info.manifest.name }}
               </span>
-              <STag size="tiny" type="default">v{{ info.manifest.version }}</STag>
-              <STag size="tiny" :type="statusTag(info).type">
-                {{ t(`settings.plugins.status.${statusTag(info).key}`) }}
-              </STag>
-              <STag
-                v-if="info.manifest.platform === 'lx'"
-                size="tiny"
-                type="info"
-                variant="outline"
+              <button
+                v-if="info.manifest.homepage"
+                type="button"
+                class="p-0 border-none bg-transparent text-on-surface-variant/50 hover:text-primary cursor-pointer transition-colors leading-0"
+                :title="info.manifest.homepage"
+                @click="openExternal(info.manifest.homepage)"
               >
-                lx
+                <IconLucideExternalLink class="size-3.5" />
+              </button>
+              <STag size="tiny" type="default" variant="soft">v{{ info.manifest.version }}</STag>
+              <STag size="tiny" :type="statusTag(info).type" variant="soft">
+                {{ t(`settings.plugins.status.${statusTag(info).key}`) }}
               </STag>
             </div>
 
+            <!-- 简介 -->
             <div
               v-if="info.manifest.description"
-              class="mt-1 text-xs text-on-surface-variant/70 line-clamp-2"
+              class="mt-1.5 flex items-start gap-1.5 text-xs text-on-surface-variant/70"
             >
-              {{ info.manifest.description }}
+              <IconLucideInfo class="size-3.5 shrink-0 mt-0.5 opacity-60" />
+              <span class="line-clamp-2">{{ info.manifest.description }}</span>
             </div>
 
+            <!-- 作者 + 支持源 -->
             <div
               v-if="info.manifest.author || sourceNames(info).length"
-              class="mt-1.5 flex items-center gap-2 flex-wrap text-xs text-on-surface-variant/60"
+              class="mt-1.5 flex items-center gap-3 flex-wrap text-xs text-on-surface-variant/60"
             >
-              <span v-if="info.manifest.author">
-                {{ t("settings.plugins.by") }} {{ info.manifest.author }}
+              <span v-if="info.manifest.author" class="flex items-center gap-1">
+                <IconLucideUser class="size-3.5 opacity-60" />
+                {{ info.manifest.author }}
               </span>
-              <span
-                v-if="info.manifest.author && sourceNames(info).length"
-                class="text-on-surface-variant/30"
-                >·</span
-              >
               <span v-if="sourceNames(info).length" class="flex items-center gap-1 flex-wrap">
-                <span>{{ t("settings.plugins.sources") }}:</span>
                 <STag
                   v-for="src in sourceNames(info)"
                   :key="src"
                   size="tiny"
-                  variant="outline"
+                  variant="soft"
                   type="primary"
+                  class="gap-1"
                 >
+                  <IconLucideDatabase class="size-3" />
                   {{ src }}
                 </STag>
               </span>
             </div>
 
+            <!-- 错误信息 -->
             <div
               v-if="info.status.state === 'error'"
               class="mt-2 rounded-md bg-red-500/10 px-2 py-1 text-xs text-red-500 break-all"
@@ -200,13 +237,21 @@ const pendingName = computed(() => {
           </div>
 
           <!-- 操作区 -->
-          <div class="shrink-0 flex items-center gap-3">
-            <SSwitch
-              :model-value="info.enabled"
-              @update:model-value="(v: boolean) => handleToggleEnabled(info.manifest.id, v)"
-            />
+          <div class="shrink-0 flex items-center gap-2">
+            <SButton
+              :variant="info.enabled ? 'filled' : 'secondary'"
+              size="small"
+              :type="info.enabled ? 'primary' : 'default'"
+              @click="handleToggleEnabled(info.manifest.id, info.enabled)"
+            >
+              <template #icon>
+                <IconLucideCircleCheck v-if="info.enabled" class="size-4" />
+                <IconLucidePower v-else class="size-4" />
+              </template>
+              {{ info.enabled ? t("settings.plugins.enabled") : t("settings.plugins.enable") }}
+            </SButton>
             <SButton
-              variant="text"
+              variant="secondary"
               size="small"
               type="error"
               @click="openUninstallConfirm(info.manifest.id)"
@@ -221,6 +266,34 @@ const pendingName = computed(() => {
       </li>
     </ul>
 
+    <!-- URL 导入 -->
+    <SDialog
+      v-model:open="urlDialogOpen"
+      :title="t('settings.plugins.importUrlTitle')"
+      width="480px"
+    >
+      <SInput
+        v-model="urlInput"
+        :placeholder="t('settings.plugins.importUrlPlaceholder')"
+        :disabled="urlSubmitting"
+        clearable
+        @keydown.enter="handleImportFromUrl"
+      />
+      <template #footer="{ close }">
+        <SButton variant="secondary" :disabled="urlSubmitting" @click="close">
+          {{ t("common.cancel") }}
+        </SButton>
+        <SButton
+          variant="secondary"
+          type="primary"
+          :loading="urlSubmitting"
+          @click="handleImportFromUrl"
+        >
+          {{ t("settings.plugins.importUrlSubmit") }}
+        </SButton>
+      </template>
+    </SDialog>
+
     <!-- 卸载确认 -->
     <SDialog
       v-model:open="confirmOpen"
@@ -232,7 +305,9 @@ const pendingName = computed(() => {
       </p>
       <template #footer="{ close }">
         <SButton variant="secondary" @click="close">{{ t("common.cancel") }}</SButton>
-        <SButton type="error" @click="handleConfirmUninstall">{{ t("common.confirm") }}</SButton>
+        <SButton variant="secondary" type="error" @click="handleConfirmUninstall">
+          {{ t("common.confirm") }}
+        </SButton>
       </template>
     </SDialog>
   </div>
diff --git a/src/components/ui/SToast.vue b/src/components/ui/SToast.vue
index d0c1012..694680c 100644
--- a/src/components/ui/SToast.vue
+++ b/src/components/ui/SToast.vue
@@ -20,7 +20,7 @@ const iconStyles: Record<ToastType, string> = {
 <template>
   <Teleport to="body">
     <div
-      class="fixed bottom-24 inset-x-0 z-100 flex flex-col items-center gap-2 pointer-events-none"
+      class="fixed bottom-24 inset-x-0 z-999 flex flex-col items-center gap-2 pointer-events-none"
     >
       <TransitionGroup
         enter-active-class="transition-all duration-300 ease-out"
diff --git a/src/i18n/locales/en-US.json b/src/i18n/locales/en-US.json
index 42faeb5..5bc3444 100644
--- a/src/i18n/locales/en-US.json
+++ b/src/i18n/locales/en-US.json
@@ -531,13 +531,20 @@
       "confirm": "This will clear all playlists, sign out, and reset all settings. This action cannot be undone!"
     },
     "plugins": {
-      "hint": "Extend online sources, lyrics and metadata via plugins",
-      "hintDetail": "Supports native SPlayer scripts and lx-music-desktop user_api scripts",
-      "import": "Import Plugin",
+      "hint": "Install from local file or URL",
+      "hintDetail": "Extend music capabilities with plugins, compatible with lx plugins",
+      "importLocal": "Local",
+      "importFromUrl": "From URL",
+      "importUrlTitle": "Install plugin from URL",
+      "importUrlPlaceholder": "Paste https:// link to a .js script",
+      "importUrlSubmit": "Install",
+      "importUrlInvalid": "Please enter a valid http or https URL",
       "importSuccess": "Plugin imported",
       "importFailed": "Failed to import plugin",
       "empty": "No plugins installed",
-      "emptyHint": "Click \"Import Plugin\" to pick a .js script file",
+      "emptyHint": "Install a plugin from local file or URL to enable extended features",
+      "enable": "Enable",
+      "enabled": "Enabled",
       "uninstall": "Uninstall",
       "uninstallConfirmTitle": "Uninstall Plugin",
       "uninstallConfirm": "Are you sure you want to uninstall \"{name}\"? This action cannot be undone.",
diff --git a/src/i18n/locales/zh-CN.json b/src/i18n/locales/zh-CN.json
index e548966..797c5d0 100644
--- a/src/i18n/locales/zh-CN.json
+++ b/src/i18n/locales/zh-CN.json
@@ -531,13 +531,20 @@
       "confirm": "将会清空全部歌单、退出登录状态以及重置全部设置，此操作不可撤销！"
     },
     "plugins": {
-      "hint": "通过插件扩展在线音源、歌词与封面来源",
-      "hintDetail": "支持 SPlayer 原生脚本，同时兼容 lx-music-desktop 的 user_api 脚本",
-      "import": "导入插件",
+      "hint": "从本地或在线安装",
+      "hintDetail": "通过插件扩展软件音乐能力，同时兼容 lx 插件",
+      "importLocal": "本地导入",
+      "importFromUrl": "在线导入",
+      "importUrlTitle": "从 URL 导入插件",
+      "importUrlPlaceholder": "粘贴 .js 脚本的 https:// 链接",
+      "importUrlSubmit": "导入",
+      "importUrlInvalid": "请输入合法的 http 或 https 链接",
       "importSuccess": "插件导入成功",
       "importFailed": "插件导入失败",
       "empty": "暂无已安装的插件",
-      "emptyHint": "点击右上角「导入插件」选择 .js 脚本文件",
+      "emptyHint": "从本地或在线导入插件以启用扩展能力",
+      "enable": "启用",
+      "enabled": "已启用",
       "uninstall": "卸载",
       "uninstallConfirmTitle": "卸载插件",
       "uninstallConfirm": "确定要卸载插件「{name}」吗？此操作不可撤销。",
diff --git a/src/stores/plugins.ts b/src/stores/plugins.ts
index 47ceb92..85a75df 100644
--- a/src/stores/plugins.ts
+++ b/src/stores/plugins.ts
@@ -33,6 +33,15 @@ export const usePluginsStore = defineStore("plugins", () => {
     return res;
   };
 
+  /** 从远端 URL 下载并导入 */
+  const installFromUrl = async (
+    url: string,
+  ): Promise<{ ok: boolean; id?: string; error?: string }> => {
+    const res = await window.api.plugins.installFromUrl(url);
+    if (res.ok) await load();
+    return res;
+  };
+
   const uninstall = async (id: string): Promise<{ ok: boolean; error?: string }> => {
     const res = await window.api.plugins.uninstall(id);
     if (res.ok) list.value = list.value.filter((i) => i.manifest.id !== id);
@@ -49,10 +58,32 @@ export const usePluginsStore = defineStore("plugins", () => {
     }
   };
 
+  /** 启用指定插件，同时禁用其他所有已启用的插件（互斥） */
+  const enableExclusive = async (id: string): Promise<void> => {
+    const others = list.value.filter((i) => i.manifest.id !== id && i.enabled);
+    await Promise.all(others.map((i) => window.api.plugins.setEnabled(i.manifest.id, false)));
+    await window.api.plugins.setEnabled(id, true);
+    const next = list.value.map((i) => ({
+      ...i,
+      enabled: i.manifest.id === id,
+    }));
+    list.value = next;
+  };
+
   const dispose = (): void => {
     unsubscribe?.();
     unsubscribe = null;
   };
 
-  return { list, loaded, load, pickAndInstall, uninstall, setEnabled, dispose };
+  return {
+    list,
+    loaded,
+    load,
+    pickAndInstall,
+    installFromUrl,
+    uninstall,
+    setEnabled,
+    enableExclusive,
+    dispose,
+  };
 });

From 65bceda1293bbdf7b7d1c40d46c2a5354288210e Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Tue, 21 Apr 2026 14:58:37 +0800
Subject: [PATCH 05/17] =?UTF-8?q?=E6=8F=92=E4=BB=B6=E6=94=AF=E6=8C=81?=
 =?UTF-8?q?=E6=9B=B4=E6=96=B0?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 components.d.ts                               |  1 +
 electron/main/plugins/lx-shim.ts              | 20 +++++++++-
 electron/main/plugins/registry.ts             | 20 +++++++++-
 electron/main/plugins/sandbox.ts              |  6 +++
 electron/main/plugins/sandbox.worker.ts       |  3 ++
 shared/types/plugin.ts                        | 15 +++++++
 .../settings/custom/PluginManager.vue         | 39 +++++++++++++++++++
 src/i18n/locales/en-US.json                   |  3 ++
 src/i18n/locales/zh-CN.json                   |  3 ++
 9 files changed, 106 insertions(+), 4 deletions(-)

diff --git a/components.d.ts b/components.d.ts
index 27554b7..4608316 100644
--- a/components.d.ts
+++ b/components.d.ts
@@ -42,6 +42,7 @@ declare module 'vue' {
     DropdownMenuTrigger: typeof import('reka-ui')['DropdownMenuTrigger']
     EffectsLyrics: typeof import('./src/components/player/EffectsLyrics/index.vue')['default']
     FullPlayer: typeof import('./src/components/player/FullPlayer/index.vue')['default']
+    IconLucideArrowUpCircle: typeof import('~icons/lucide/arrow-up-circle')['default']
     IconLucideCheck: typeof import('~icons/lucide/check')['default']
     IconLucideChevronDown: typeof import('~icons/lucide/chevron-down')['default']
     IconLucideChevronLeft: typeof import('~icons/lucide/chevron-left')['default']
diff --git a/electron/main/plugins/lx-shim.ts b/electron/main/plugins/lx-shim.ts
index de95c5f..a241ac0 100644
--- a/electron/main/plugins/lx-shim.ts
+++ b/electron/main/plugins/lx-shim.ts
@@ -9,7 +9,13 @@
 
 import crypto from "node:crypto";
 import zlib from "node:zlib";
-import type { HostApi, PluginAction, PluginQuality, SourceCapability } from "@shared/types/plugin";
+import type {
+  HostApi,
+  PluginAction,
+  PluginQuality,
+  PluginUpdateInfo,
+  SourceCapability,
+} from "@shared/types/plugin";
 
 /**
  * lx 原生音质枚举 → 宿主 PluginQuality 的映射
@@ -137,6 +143,7 @@ const buildLxUtils = (): object => ({
  * @param splayer 宿主 API 实例
  * @param handlers 共享的 action handler 注册表
  * @param onSources 脚本通过 lx.send('inited', {sources}) 注册能力时的回调
+ * @param onUpdateAvailable 脚本通过 lx.send('updateAlert', ...) 上报新版本时的回调
  * @param scriptInfo lx 脚本 currentScriptInfo（主进程解析完头注释后传入）
  */
 export const installLxShim = (
@@ -144,6 +151,7 @@ export const installLxShim = (
   splayer: HostApi,
   handlers: Map<PluginAction, (req: unknown) => Promise<unknown>>,
   onSources: (sources: Record<string, SourceCapability>) => void,
+  onUpdateAvailable: (info: PluginUpdateInfo) => void,
   scriptInfo?: LxCurrentScriptInfo,
 ): void => {
   let requestHandler: LxRequestHandler | null = null;
@@ -279,7 +287,15 @@ export const installLxShim = (
               return;
             }
             updateAlerted = true;
-            splayer.log.info("[lx] updateAlert:", data);
+            // 上报给宿主，由 UI 层展示"有更新"徽章与打开下载链接按钮；
+            // 不再落日志（脚本通常会自己 console.log，重复输出无意义）
+            onUpdateAvailable({
+              log: typeof data?.log === "string" ? (data.log as string) : undefined,
+              updateUrl:
+                typeof data?.updateUrl === "string" ? (data.updateUrl as string) : undefined,
+              version: typeof data?.version === "string" ? (data.version as string) : undefined,
+              updatedAt: Date.now(),
+            });
             resolve();
             return;
           }
diff --git a/electron/main/plugins/registry.ts b/electron/main/plugins/registry.ts
index e96ac99..ad9b223 100644
--- a/electron/main/plugins/registry.ts
+++ b/electron/main/plugins/registry.ts
@@ -12,7 +12,12 @@ import path from "node:path";
 import { EventEmitter } from "node:events";
 import { app } from "electron";
 import { writeFileSync as atomicWriteSync } from "atomically";
-import type { PluginInfo, PluginManifest, PluginStatus } from "@shared/types/plugin";
+import type {
+  PluginInfo,
+  PluginManifest,
+  PluginStatus,
+  PluginUpdateInfo,
+} from "@shared/types/plugin";
 import { PluginErrorCodes, RESTART_MAX_ATTEMPTS } from "@shared/defaults/plugin-api";
 import { store } from "@main/store";
 import { getLocale } from "@main/utils/i18n";
@@ -59,6 +64,8 @@ interface PluginRuntime {
   sandbox: Sandbox | null;
   source: string;
   restartAttempts: number;
+  /** 脚本上报的"有新版本"信息，null/undefined 表示没提示过 */
+  updateInfo: PluginUpdateInfo | null;
   /** router 注册的 pending 调用 */
   pending: Map<
     string,
@@ -100,6 +107,7 @@ class PluginRegistry extends EventEmitter {
         status: { state: "unloaded" },
         sandbox: null,
         restartAttempts: 0,
+        updateInfo: null,
         pending: new Map(),
       });
     }
@@ -116,6 +124,7 @@ class PluginRegistry extends EventEmitter {
       manifest: rt.manifest,
       enabled: rt.enabled,
       status: rt.status,
+      updateInfo: rt.updateInfo,
     }));
   }
 
@@ -190,11 +199,12 @@ class PluginRegistry extends EventEmitter {
       status: { state: "unloaded" },
       sandbox: null,
       restartAttempts: 0,
+      updateInfo: null,
       pending: new Map(),
     };
     this.runtimes.set(manifest.id, rt);
     await this.start(rt).catch(() => {});
-    return { manifest, enabled: rt.enabled, status: rt.status };
+    return { manifest, enabled: rt.enabled, status: rt.status, updateInfo: rt.updateInfo };
   }
 
   async uninstall(id: string): Promise<void> {
@@ -278,6 +288,11 @@ class PluginRegistry extends EventEmitter {
         onLog: (level, args) => {
           coreLog[level](`[plugin:${rt.manifest.id}]`, ...args);
         },
+        onUpdateAvailable: (info) => {
+          rt.updateInfo = info;
+          // 沿当前状态再广播一次，渲染端就能拿到 updateInfo 字段
+          this.setStatus(rt, rt.status);
+        },
         onFatal: (error) => {
           // 同时记录到主日志，避免错误只在 UI 卡片里可见
           coreLog.error(`[plugin:${rt.manifest.id}] fatal ${error.code}: ${error.message}`);
@@ -349,6 +364,7 @@ class PluginRegistry extends EventEmitter {
       manifest: rt.manifest,
       enabled: rt.enabled,
       status,
+      updateInfo: rt.updateInfo,
     } satisfies PluginInfo);
   }
 
diff --git a/electron/main/plugins/sandbox.ts b/electron/main/plugins/sandbox.ts
index 5ce54f9..031288f 100644
--- a/electron/main/plugins/sandbox.ts
+++ b/electron/main/plugins/sandbox.ts
@@ -16,6 +16,7 @@ import type {
   PluginAction,
   PluginErrorPayload,
   PluginManifest,
+  PluginUpdateInfo,
   SandboxIn,
   SandboxOut,
   SourceCapability,
@@ -33,6 +34,8 @@ export interface SandboxEvents {
   onHostCall: (callId: string, method: HostCallMethod, args: unknown[]) => void;
   onLog: (level: "debug" | "info" | "warn" | "error", args: unknown[]) => void;
   onFatal: (error: PluginErrorPayload) => void;
+  /** 脚本上报"有新版本" */
+  onUpdateAvailable: (info: PluginUpdateInfo) => void;
   /** 子进程退出（可能是崩溃或主动 kill）。isCrash=true 表示非主动 kill */
   onExit: (isCrash: boolean, code: number | null) => void;
 }
@@ -239,6 +242,9 @@ export class Sandbox {
       case "hostCall":
         this.events.onHostCall(msg.callId, msg.method, msg.args);
         return;
+      case "updateAvailable":
+        this.events.onUpdateAvailable(msg.info);
+        return;
       case "log":
         this.events.onLog(msg.level, msg.args);
         return;
diff --git a/electron/main/plugins/sandbox.worker.ts b/electron/main/plugins/sandbox.worker.ts
index ccfb1fd..0ce5e66 100644
--- a/electron/main/plugins/sandbox.worker.ts
+++ b/electron/main/plugins/sandbox.worker.ts
@@ -228,6 +228,9 @@ const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
     (sources) => {
       registeredSources = { ...registeredSources, ...sources };
     },
+    (info) => {
+      send({ kind: "updateAvailable", info });
+    },
     {
       name: init.scriptInfo.name,
       description: init.scriptInfo.description,
diff --git a/shared/types/plugin.ts b/shared/types/plugin.ts
index 1f5653c..92dda95 100644
--- a/shared/types/plugin.ts
+++ b/shared/types/plugin.ts
@@ -64,11 +64,25 @@ export type PluginStatus =
   | { state: "error"; error: { code: string; message: string } }
   | { state: "disabled" };
 
+/** 插件脚本自己上报的更新信息 */
+export interface PluginUpdateInfo {
+  /** 新版本号（若脚本提供） */
+  version?: string;
+  /** 人类可读的更新说明 */
+  log?: string;
+  /** 新版本下载/介绍页链接 */
+  updateUrl?: string;
+  /** 收到更新提示的时间戳（ms） */
+  updatedAt: number;
+}
+
 /** 渲染端看到的插件条目（manifest + 状态） */
 export interface PluginInfo {
   manifest: PluginManifest;
   enabled: boolean;
   status: PluginStatus;
+  /** 脚本上报过"有新版本"时填充，用户更新/卸载后清空 */
+  updateInfo?: PluginUpdateInfo | null;
 }
 
 /* ========== 调用请求 / 响应 ========== */
@@ -229,6 +243,7 @@ export type SandboxOut =
       error?: PluginErrorPayload;
     }
   | { kind: "hostCall"; callId: string; method: HostCallMethod; args: unknown[] }
+  | { kind: "updateAvailable"; info: PluginUpdateInfo }
   | {
       kind: "log";
       level: "debug" | "info" | "warn" | "error";
diff --git a/src/components/settings/custom/PluginManager.vue b/src/components/settings/custom/PluginManager.vue
index 70fae0e..f461cdf 100644
--- a/src/components/settings/custom/PluginManager.vue
+++ b/src/components/settings/custom/PluginManager.vue
@@ -192,6 +192,9 @@ const pendingName = computed(() => {
               <STag size="tiny" :type="statusTag(info).type" variant="soft">
                 {{ t(`settings.plugins.status.${statusTag(info).key}`) }}
               </STag>
+              <STag v-if="info.updateInfo" size="tiny" type="warning" variant="soft">
+                {{ t("settings.plugins.updateAvailable") }}
+              </STag>
             </div>
 
             <!-- 简介 -->
@@ -234,6 +237,42 @@ const pendingName = computed(() => {
             >
               {{ info.status.error.message }}
             </div>
+
+            <!-- 更新提示 -->
+            <div
+              v-if="info.updateInfo"
+              class="mt-2 rounded-md bg-amber-500/10 px-3 py-2 flex flex-col gap-1.5"
+            >
+              <div class="flex items-center justify-between gap-2">
+                <div class="flex items-center gap-1.5 text-xs font-medium text-amber-600">
+                  <IconLucideArrowUpCircle class="size-3.5" />
+                  <span>
+                    {{ t("settings.plugins.newVersion") }}
+                    <template v-if="info.updateInfo.version">
+                      v{{ info.updateInfo.version }}
+                    </template>
+                  </span>
+                </div>
+                <SButton
+                  v-if="info.updateInfo.updateUrl"
+                  variant="secondary"
+                  size="tiny"
+                  type="warning"
+                  @click="openExternal(info.updateInfo.updateUrl)"
+                >
+                  <template #icon>
+                    <IconLucideExternalLink class="size-3" />
+                  </template>
+                  {{ t("settings.plugins.openUpdateUrl") }}
+                </SButton>
+              </div>
+              <div
+                v-if="info.updateInfo.log"
+                class="text-xs text-on-surface-variant/80 whitespace-pre-wrap break-words"
+              >
+                {{ info.updateInfo.log }}
+              </div>
+            </div>
           </div>
 
           <!-- 操作区 -->
diff --git a/src/i18n/locales/en-US.json b/src/i18n/locales/en-US.json
index 5bc3444..6959b63 100644
--- a/src/i18n/locales/en-US.json
+++ b/src/i18n/locales/en-US.json
@@ -552,6 +552,9 @@
       "uninstallFailed": "Uninstall failed",
       "by": "By",
       "sources": "Sources",
+      "updateAvailable": "Update",
+      "newVersion": "New version available",
+      "openUpdateUrl": "Open update page",
       "status": {
         "ready": "Ready",
         "loading": "Loading",
diff --git a/src/i18n/locales/zh-CN.json b/src/i18n/locales/zh-CN.json
index 797c5d0..6a47ca7 100644
--- a/src/i18n/locales/zh-CN.json
+++ b/src/i18n/locales/zh-CN.json
@@ -552,6 +552,9 @@
       "uninstallFailed": "卸载失败",
       "by": "作者",
       "sources": "支持源",
+      "updateAvailable": "有更新",
+      "newVersion": "发现新版本",
+      "openUpdateUrl": "查看更新",
       "status": {
         "ready": "已就绪",
         "loading": "加载中",

From 303fbf1416df705a2774991370e25213dd634375 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Tue, 21 Apr 2026 17:32:14 +0800
Subject: [PATCH 06/17] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20NCM=20API?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 .github/copilot-instructions.md               |    1 -
 components.d.ts                               |    1 -
 demo/audio-architecture.md                    |    2 +-
 electron.vite.config.ts                       |    4 +-
 .../apis/musicbrainz.ts}                      |    0
 electron/main/apis/netease.ts                 |  105 ++
 electron/main/database/index.ts               |    6 +
 electron/main/database/sessions.ts            |   51 +
 electron/main/ipc/index.ts                    |    2 +
 electron/main/ipc/library.ts                  |    2 +-
 electron/main/ipc/netease.ts                  |   33 +
 electron/preload/index.d.ts                   |    2 +
 electron/preload/index.ts                     |    7 +
 package.json                                  |    1 +
 pnpm-lock.yaml                                | 1449 ++++++++++++++++-
 shared/types/netease.ts                       |   16 +
 src/apis/netease.ts                           |   55 +
 src/pages/Home.vue                            |   97 ++
 src/stores/user.ts                            |   92 ++
 src/utils/lyric/parseTimeline.ts              |    4 +-
 tsconfig.node.json                            |    2 -
 21 files changed, 1921 insertions(+), 11 deletions(-)
 rename electron/{server/artistAvatar.ts => main/apis/musicbrainz.ts} (100%)
 create mode 100644 electron/main/apis/netease.ts
 create mode 100644 electron/main/database/sessions.ts
 create mode 100644 electron/main/ipc/netease.ts
 create mode 100644 shared/types/netease.ts
 create mode 100644 src/apis/netease.ts
 create mode 100644 src/stores/user.ts

diff --git a/.github/copilot-instructions.md b/.github/copilot-instructions.md
index eef8030..11219f9 100644
--- a/.github/copilot-instructions.md
+++ b/.github/copilot-instructions.md
@@ -27,7 +27,6 @@ SPlayer-Next 是基于 **Electron + Vue 3 + TypeScript** 的桌面音乐播放
 | `@/*`                    | `src/*`                | 渲染进程                                   |
 | `@shared/*`              | `shared/*`             | 主进程 + 渲染进程 + 原生类型               |
 | `@main/*`                | `electron/main/*`      | 主进程                                     |
-| `@server/*`              | `electron/server/*`    | 主进程                                     |
 | `@windows/*`             | `windows/*`            | 三个独立歌词窗口（复用 `windows/shared/`） |
 | `@splayer/audio-engine`  | `native/audio-engine`  | 主进程，类型从自动生成的 `index.d.ts` 导入 |
 | `@splayer/media-ctrl`    | `native/media-ctrl`    | 同上                                       |
diff --git a/components.d.ts b/components.d.ts
index 4608316..bbb720f 100644
--- a/components.d.ts
+++ b/components.d.ts
@@ -69,7 +69,6 @@ declare module 'vue' {
     IconLucideMusic: typeof import('~icons/lucide/music')['default']
     IconLucidePause: typeof import('~icons/lucide/pause')['default']
     IconLucidePlay: typeof import('~icons/lucide/play')['default']
-    IconLucidePlus: typeof import('~icons/lucide/plus')['default']
     IconLucidePower: typeof import('~icons/lucide/power')['default']
     IconLucidePuzzle: typeof import('~icons/lucide/puzzle')['default']
     IconLucideRefreshCw: typeof import('~icons/lucide/refresh-cw')['default']
diff --git a/demo/audio-architecture.md b/demo/audio-architecture.md
index f2c744d..30e3a8b 100644
--- a/demo/audio-architecture.md
+++ b/demo/audio-architecture.md
@@ -400,7 +400,7 @@ Rust 编译为 WASM，通过 `wasm-bindgen` 暴露给前端。
 | ----- | ---------- | --------------- | --------------------------------- |
 | LRC   | `lrc.rs`   | nom             | 标准时间标签格式 `[mm:ss.ms]text` |
 | TTML  | `ttml/`    | quick-xml + nom | Apple Music 格式，逐字时间        |
-| YRC   | `yrc.rs`   | nom             | 网易云格式，base64 编码           |
+| YRC   | `yrc.rs`   | nom             | Netease 格式，base64 编码         |
 | QRC   | `qrc.rs`   | nom             | QQ 音乐格式，加密                 |
 | EQRC  | `eqrc/`    | nom             | QRC 加密变体                      |
 | LYS   | `lys.rs`   | nom             | 荔枝 FM 格式                      |
diff --git a/electron.vite.config.ts b/electron.vite.config.ts
index 86a7c08..d41b0c9 100644
--- a/electron.vite.config.ts
+++ b/electron.vite.config.ts
@@ -19,12 +19,14 @@ export default defineConfig({
           // 插件沙箱 worker（utilityProcess 入口）
           "sandbox.worker": resolve(__dirname, "electron/main/plugins/sandbox.worker.ts"),
         },
+        // Netease API 包内部用 fs.readdirSync 动态加载 module/*.js，
+        // 无法被 rollup 打包，必须标记为外部依赖由 node_modules 运行时解析
+        external: ["@neteasecloudmusicapienhanced/api"],
       },
     },
     resolve: {
       alias: {
         "@main": resolve(__dirname, "electron/main"),
-        "@server": resolve(__dirname, "electron/server"),
         "@shared": resolve(__dirname, "shared"),
         "@splayer/audio-engine": resolve(__dirname, "native/audio-engine"),
         "@splayer/media-ctrl": resolve(__dirname, "native/media-ctrl"),
diff --git a/electron/server/artistAvatar.ts b/electron/main/apis/musicbrainz.ts
similarity index 100%
rename from electron/server/artistAvatar.ts
rename to electron/main/apis/musicbrainz.ts
diff --git a/electron/main/apis/netease.ts b/electron/main/apis/netease.ts
new file mode 100644
index 0000000..0b32d70
--- /dev/null
+++ b/electron/main/apis/netease.ts
@@ -0,0 +1,105 @@
+/**
+ * Netease API 主进程服务
+ *
+ * - 把 `@neteasecloudmusicapienhanced/api` 当 Node 库直接调（不起 HTTP server）
+ * - 统一入口 `callNetease(name, params)`：查函数 → 注入 cookie → 调用
+ */
+
+import { createRequire } from "node:module";
+import {
+  getSessionCookies,
+  saveSessionCookies,
+  clearSessionCookies,
+} from "@main/database/sessions";
+
+/** 该包是纯 CJS 且 exports 通过 fs.readdirSync 动态填充，ESM 的 `import *`
+ * 只能拿到静态检测的 named exports。用 createRequire 直接拿 module.exports。 */
+const require = createRequire(import.meta.url);
+const NeteaseApi = require("@neteasecloudmusicapienhanced/api") as Record<string, unknown>;
+
+/** Netease API 函数签名 */
+type NeteaseFn = (query: Record<string, unknown>) => Promise<{
+  status: number;
+  body: unknown;
+  cookie?: string[];
+}>;
+
+/** 内存缓存：避免每次 callNetease 都走一次 SELECT */
+let cache: Record<string, string> | null = null;
+
+/**
+ * 加载 cookies
+ * @returns cookies
+ */
+const load = (): Record<string, string> => {
+  if (!cache) cache = getSessionCookies("netease");
+  return cache;
+};
+
+/**
+ * 持久化 cookies
+ * @param cookies cookies
+ */
+const persist = (cookies: Record<string, string>): void => {
+  cache = cookies;
+  saveSessionCookies("netease", cookies);
+};
+
+/**
+ * 序列化 cookies
+ * @param c cookies
+ * @returns cookies string
+ */
+const serialize = (c: Record<string, string>): string =>
+  Object.entries(c)
+    .map(([k, v]) => `${k}=${v}`)
+    .join("; ");
+
+/**
+ * 读当前 cookies（调用方如需可用于派生登录态）
+ * @returns cookies
+ */
+export const getNeteaseCookies = (): Record<string, string> => ({ ...load() });
+
+/**
+ * 整体替换 cookies（登出或重置场景）
+ * @param cookies cookies
+ */
+export const setNeteaseCookies = (cookies: Record<string, string>): void => {
+  persist(cookies);
+};
+
+/**
+ * 增量合并 cookies（登录成功拿到 MUSIC_U 时用）
+ * @param patch cookies
+ */
+export const mergeNeteaseCookies = (patch: Record<string, string>): void => {
+  persist({ ...load(), ...patch });
+};
+
+/** 清空 cookies */
+export const clearNeteaseCookies = (): void => {
+  cache = {};
+  clearSessionCookies("netease");
+};
+
+/**
+ * 调用任意Netease API
+ * @param name interface.d.ts 中声明的方法名（如 `search` / `song_url_v1` / `lyric`）
+ * @param params 接口参数；无需传 cookie，服务会自动注入
+ */
+export const callNetease = async (
+  name: string,
+  params: Record<string, unknown> = {},
+): Promise<{ status: number; body: unknown }> => {
+  const fn = NeteaseApi[name];
+  if (typeof fn !== "function") {
+    throw new Error(`unknown netease api: ${name}`);
+  }
+  const cookieStr = serialize(load());
+  const res = await (fn as NeteaseFn)({
+    ...params,
+    cookie: cookieStr || undefined,
+  });
+  return { status: res.status, body: res.body };
+};
diff --git a/electron/main/database/index.ts b/electron/main/database/index.ts
index a36fee3..fe21add 100644
--- a/electron/main/database/index.ts
+++ b/electron/main/database/index.ts
@@ -43,6 +43,12 @@ export const initDatabase = (): void => {
     );
     CREATE INDEX IF NOT EXISTS idx_tracks_title ON tracks(title);
     CREATE INDEX IF NOT EXISTS idx_tracks_album ON tracks(album);
+
+    CREATE TABLE IF NOT EXISTS account_sessions (
+      platform TEXT PRIMARY KEY,
+      cookies TEXT NOT NULL DEFAULT '{}',
+      updated_at INTEGER NOT NULL
+    );
   `);
   migrate(db);
   libraryLog.info(`数据库已初始化: ${dbPath}`);
diff --git a/electron/main/database/sessions.ts b/electron/main/database/sessions.ts
new file mode 100644
index 0000000..28c1f1a
--- /dev/null
+++ b/electron/main/database/sessions.ts
@@ -0,0 +1,51 @@
+/**
+ * 第三方音源账号会话（cookies）存储
+ *
+ * 表：account_sessions(platform PK, cookies JSON, updated_at)
+ * - cookies 字段以 JSON 字符串存 Record<string, string>
+ */
+
+import { getDb } from "./index";
+
+/** 支持的音源平台标识 */
+export type AccountPlatform = "netease";
+
+interface SessionRow {
+  platform: string;
+  cookies: string;
+  updated_at: number;
+}
+
+/** 读取某平台的 cookies；未登录返回空对象 */
+export const getSessionCookies = (platform: AccountPlatform): Record<string, string> => {
+  const row = getDb()
+    .prepare("SELECT cookies FROM account_sessions WHERE platform = ?")
+    .get(platform) as Pick<SessionRow, "cookies"> | undefined;
+  if (!row) return {};
+  try {
+    const parsed = JSON.parse(row.cookies) as Record<string, string>;
+    return parsed ?? {};
+  } catch {
+    return {};
+  }
+};
+
+/** 整体替换某平台的 cookies（登出传 {} 即可） */
+export const saveSessionCookies = (
+  platform: AccountPlatform,
+  cookies: Record<string, string>,
+): void => {
+  getDb()
+    .prepare(
+      `INSERT INTO account_sessions (platform, cookies, updated_at) VALUES (?, ?, ?)
+       ON CONFLICT(platform) DO UPDATE SET
+         cookies = excluded.cookies,
+         updated_at = excluded.updated_at`,
+    )
+    .run(platform, JSON.stringify(cookies), Date.now());
+};
+
+/** 清除某平台的 cookies（登出） */
+export const clearSessionCookies = (platform: AccountPlatform): void => {
+  saveSessionCookies(platform, {});
+};
diff --git a/electron/main/ipc/index.ts b/electron/main/ipc/index.ts
index 5529d6f..cad075e 100644
--- a/electron/main/ipc/index.ts
+++ b/electron/main/ipc/index.ts
@@ -5,6 +5,7 @@ import { registerLibraryIpc } from "./library";
 import { registerNowPlayingIpc } from "./nowPlaying";
 import { registerWindowIpc } from "./window";
 import { registerPluginIpc } from "./plugin";
+import { registerNeteaseIpc } from "./netease";
 
 /** 注册所有 IPC 处理 */
 export const registerIpcHandlers = (): void => {
@@ -15,4 +16,5 @@ export const registerIpcHandlers = (): void => {
   registerNowPlayingIpc();
   registerWindowIpc();
   registerPluginIpc();
+  registerNeteaseIpc();
 };
diff --git a/electron/main/ipc/library.ts b/electron/main/ipc/library.ts
index 0896cc0..09ef659 100644
--- a/electron/main/ipc/library.ts
+++ b/electron/main/ipc/library.ts
@@ -14,7 +14,7 @@ import {
   getTracksByIds,
 } from "@main/database";
 import { startScan, cancelScan, isScanning } from "@main/services/scanner";
-import { fetchArtistAvatar, prefetchArtistAvatars } from "@server/artistAvatar";
+import { fetchArtistAvatar, prefetchArtistAvatars } from "@main/apis/musicbrainz";
 import { libraryLog } from "@main/utils/logger";
 import { ErrorCode } from "@shared/types/errors";
 
diff --git a/electron/main/ipc/netease.ts b/electron/main/ipc/netease.ts
new file mode 100644
index 0000000..2e69fe0
--- /dev/null
+++ b/electron/main/ipc/netease.ts
@@ -0,0 +1,33 @@
+/**
+ * Netease API IPC
+ *
+ * 暴露一个通用入口 `netease:call`，参数为 (name, params)。
+ * 响应形状对齐 interface.d.ts 的 Response：`{ status, body }`。
+ * Cookie 完全由主进程 service 维护，渲染端不直接碰。
+ */
+
+import { ipcMain } from "electron";
+import { callNetease, clearNeteaseCookies } from "@main/apis/netease";
+import { coreLog } from "@main/utils/logger";
+
+export const registerNeteaseIpc = (): void => {
+  ipcMain.handle(
+    "netease:call",
+    async (_evt, name: string, params?: Record<string, unknown>) => {
+      try {
+        const res = await callNetease(name, params ?? {});
+        return { ok: true, status: res.status, body: res.body };
+      } catch (err) {
+        coreLog.warn(`[netease] call ${name} failed:`, err);
+        return {
+          ok: false,
+          error: err instanceof Error ? err.message : String(err),
+        };
+      }
+    },
+  );
+
+  ipcMain.handle("netease:clearCookie", () => {
+    clearNeteaseCookies();
+  });
+};
diff --git a/electron/preload/index.d.ts b/electron/preload/index.d.ts
index 6d0a273..a287403 100644
--- a/electron/preload/index.d.ts
+++ b/electron/preload/index.d.ts
@@ -4,6 +4,7 @@ import { ConfigApi, LocaleCode } from "@shared/types/settings";
 import { LibraryApi } from "@shared/types/library";
 import { NowPlayingApi } from "@shared/types/nowPlaying";
 import { PluginsApi } from "@shared/types/plugin";
+import { NeteaseApi } from "@shared/types/netease";
 import {
   WindowApi,
   DesktopLyricApi,
@@ -34,6 +35,7 @@ declare global {
       taskbarLyric: TaskbarLyricApi;
       nowPlaying: NowPlayingApi;
       plugins: PluginsApi;
+      netease: NeteaseApi;
     };
   }
 }
diff --git a/electron/preload/index.ts b/electron/preload/index.ts
index 0237618..06cb598 100644
--- a/electron/preload/index.ts
+++ b/electron/preload/index.ts
@@ -241,6 +241,13 @@ const api = {
     onStatus: (callback: (info: PluginInfo) => void) =>
       subscribe<PluginInfo>("plugin:status", callback),
   },
+  netease: {
+    // 调用任意 Netease 接口；主进程自动注入 cookie
+    call: (name: string, params?: Record<string, unknown>) =>
+      ipcRenderer.invoke("netease:call", name, params ?? {}),
+    // 清空登录 cookie
+    clearCookie: () => ipcRenderer.invoke("netease:clearCookie"),
+  },
   nowPlaying: {
     // 渲染进程同步当前播放状态到主进程
     update: (payload: unknown) => ipcRenderer.send("nowPlaying:update", payload),
diff --git a/package.json b/package.json
index 5566b2f..9e6c809 100644
--- a/package.json
+++ b/package.json
@@ -28,6 +28,7 @@
     "@electron-toolkit/preload": "^3.0.2",
     "@electron-toolkit/utils": "^4.0.0",
     "@material/material-color-utilities": "^0.4.0",
+    "@neteasecloudmusicapienhanced/api": "^4.32.0",
     "@vueuse/core": "^14.2.1",
     "atomically": "^2.1.1",
     "better-sqlite3": "^12.8.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 4ef86ce..b428100 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -17,6 +17,9 @@ importers:
       '@material/material-color-utilities':
         specifier: ^0.4.0
         version: 0.4.0
+      '@neteasecloudmusicapienhanced/api':
+        specifier: ^4.32.0
+        version: 4.32.0
       '@vueuse/core':
         specifier: ^14.2.1
         version: 14.2.1(vue@3.5.32(typescript@5.9.3))
@@ -215,6 +218,9 @@ packages:
     resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
     engines: {node: '>=6.9.0'}
 
+  '@borewit/text-codec@0.2.2':
+    resolution: {integrity: sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==}
+
   '@develar/schema-utils@2.6.5':
     resolution: {integrity: sha512-0cp4PsWQ/9avqTVMCtZ+GirikIA36ikvjtHweU4/j8yLtgObI0+JUPhYFScgwlteveGB1rt3Cm8UhN04XayDig==}
     engines: {node: '>= 8.9.0'}
@@ -956,42 +962,49 @@ packages:
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/lzma-linux-arm64-musl@1.4.5':
     resolution: {integrity: sha512-yWjcPDgJ2nIL3KNvi4536dlT/CcCWO0DUyEOlBs/SacG7BeD6IjGh6yYzd3/X1Y3JItCbZoDoLUH8iB1lTXo3w==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/lzma-linux-ppc64-gnu@1.4.5':
     resolution: {integrity: sha512-0XRhKuIU/9ZjT4WDIG/qnX7Xz7mSQHYZo9Gb3MP2gcvBgr6BA4zywQ9k3gmQaPn9ECE+CZg2V7DV7kT+x2pUMQ==}
     engines: {node: '>= 10'}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/lzma-linux-riscv64-gnu@1.4.5':
     resolution: {integrity: sha512-QrqDIPEUUB23GCpyQj/QFyMlr8SGxxyExeZz9OWFnHfb70kXdTLWrHS/hEI1Ru+lSbQ/6xRqeoGyQ4Aqdg+/RA==}
     engines: {node: '>= 10'}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/lzma-linux-s390x-gnu@1.4.5':
     resolution: {integrity: sha512-k8RVM5aMhW86E9H0QXdquwojew4H3SwPxbRVbl49/COJQWCUjGi79X6mYruMnMPEznZinUiT1jgKbFo2A00NdA==}
     engines: {node: '>= 10'}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/lzma-linux-x64-gnu@1.4.5':
     resolution: {integrity: sha512-6rMtBgnIq2Wcl1rQdZsnM+rtCcVCbws1nF8S2NzaUsVaZv8bjrPiAa0lwg4Eqnn1d9lgwqT+cZgm5m+//K08Kw==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/lzma-linux-x64-musl@1.4.5':
     resolution: {integrity: sha512-eiadGBKi7Vd0bCArBUOO/qqRYPHt/VQVvGyYvDFt6C2ZSIjlD+HuOl+2oS1sjf4CFjK4eDIog6EdXnL0NE6iyQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/lzma-wasm32-wasi@1.4.5':
     resolution: {integrity: sha512-+VyHHlr68dvey6fXc2hehw9gHVFIW3TtGF1XkcbAu65qVXsA9D/T+uuoRVqhE+JCyFHFrO0ixRbZDRK1XJt1sA==}
@@ -1061,36 +1074,42 @@ packages:
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/tar-linux-arm64-musl@1.1.0':
     resolution: {integrity: sha512-L/y1/26q9L/uBqiW/JdOb/Dc94egFvNALUZV2WCGKQXc6UByPBMgdiEyW2dtoYxYYYYc+AKD+jr+wQPcvX2vrQ==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/tar-linux-ppc64-gnu@1.1.0':
     resolution: {integrity: sha512-EPE1K/80RQvPbLRJDJs1QmCIcH+7WRi0F73+oTe1582y9RtfGRuzAkzeBuAGRXAQEjRQw/RjtNqr6UTJ+8UuWQ==}
     engines: {node: '>= 10'}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/tar-linux-s390x-gnu@1.1.0':
     resolution: {integrity: sha512-B2jhWiB1ffw1nQBqLUP1h4+J1ovAxBOoe5N2IqDMOc63fsPZKNqF1PvO/dIem8z7LL4U4bsfmhy3gBfu547oNQ==}
     engines: {node: '>= 10'}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/tar-linux-x64-gnu@1.1.0':
     resolution: {integrity: sha512-tbZDHnb9617lTnsDMGo/eAMZxnsQFnaRe+MszRqHguKfMwkisc9CCJnks/r1o84u5fECI+J/HOrKXgczq/3Oww==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/tar-linux-x64-musl@1.1.0':
     resolution: {integrity: sha512-dV6cODlzbO8u6Anmv2N/ilQHq/AWz0xyltuXoLU3yUyXbZcnWYZuB2rL8OBGPmqNcD+x9NdScBNXh7vWN0naSQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/tar-wasm32-wasi@1.1.0':
     resolution: {integrity: sha512-jIa9nb2HzOrfH0F8QQ9g3WE4aMH5vSI5/1NYVNm9ysCmNjCCtMXCAhlI3WKCdm/DwHf0zLqdrrtDFXODcNaqMw==}
@@ -1160,24 +1179,28 @@ packages:
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/wasm-tools-linux-arm64-musl@1.0.1':
     resolution: {integrity: sha512-jAasbIvjZXCgX0TCuEFQr+4D6Lla/3AAVx2LmDuMjgG4xoIXzjKWl7c4chuaD+TI+prWT0X6LJcdzFT+ROKGHQ==}
     engines: {node: '>= 10'}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/wasm-tools-linux-x64-gnu@1.0.1':
     resolution: {integrity: sha512-Plgk5rPqqK2nocBGajkMVbGm010Z7dnUgq0wtnYRZbzWWxwWcXfZMPa8EYxrK4eE8SzpI7VlZP1tdVsdjgGwMw==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@napi-rs/wasm-tools-linux-x64-musl@1.0.1':
     resolution: {integrity: sha512-GW7AzGuWxtQkyHknHWYFdR0CHmW6is8rG2Rf4V6GNmMpmwtXt/ItWYWtBe4zqJWycMNazpfZKSw/BpT7/MVCXQ==}
     engines: {node: '>= 10'}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@napi-rs/wasm-tools-wasm32-wasi@1.0.1':
     resolution: {integrity: sha512-/nQVSTrqSsn7YdAc2R7Ips/tnw5SPUcl3D7QrXCNGPqjbatIspnaexvaOYNyKMU6xPu+pc0BTnKVmqhlJJCPLA==}
@@ -1206,6 +1229,15 @@ packages:
     resolution: {integrity: sha512-enkZYyuCdo+9jneCPE/0fjIta4wWnvVN9hBo2HuiMpRF0q3lzv1J6b/cl7i0mxZUKhBrV3aCKDBQnCOhwKbPmQ==}
     engines: {node: '>= 10'}
 
+  '@neteasecloudmusicapienhanced/api@4.32.0':
+    resolution: {integrity: sha512-p+ZTIgdniLywpM6m+hMNK/BxrpBt21mgdNYwaLU3xHRb9tzQNFcA11kxB5pFXUQB7rcazxypjfHgHAHauK9dBg==}
+    engines: {node: '>=12'}
+    hasBin: true
+
+  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.2.4':
+    resolution: {integrity: sha512-4DBBrCMyBewUfAlVnmFDUe5UHwrB+zosyTNJTyw48mYCNtAXIm1BuRX8St5S4JsTvvyt0OEixGr2rECeckhqTg==}
+    hasBin: true
+
   '@npmcli/agent@3.0.0':
     resolution: {integrity: sha512-S79NdEgDQd/NGCay6TCoVzXSj74skRZIKJcpJjC5lOq34SZzyI6MqtiiWoiVWoVrTcGjNeC4ipbh1VIHlpfF5Q==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -1313,48 +1345,56 @@ packages:
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@oxc-parser/binding-linux-arm64-musl@0.124.0':
     resolution: {integrity: sha512-uvG7v4Tz9S8/PVqY0SP0DLHxo4hZGe+Pv2tGVnwcsjKCCUPjplbrFVvDzXq+kOaEoUkiCY0Kt1hlZ6FDJ1LKNQ==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@oxc-parser/binding-linux-ppc64-gnu@0.124.0':
     resolution: {integrity: sha512-t7KZaaUhfp2au0MRpoENEFqwLKYDdptEry6V7pTAVdPEcFG4P6ii8yeGU9m6p5vb+b8WEKmdpGMNXBEYy7iJdw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@oxc-parser/binding-linux-riscv64-gnu@0.124.0':
     resolution: {integrity: sha512-eurGGaxHZiIQ+fBSageS8TAkRqZgdOiBeqNrWAqAPup9hXBTmQ0WcBjwsLElf+3jvDL9NhnX0dOgOqPfsjSjdg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@oxc-parser/binding-linux-riscv64-musl@0.124.0':
     resolution: {integrity: sha512-d1V7/ll1i/LhqE/gZy6Wbz6evlk0egh2XKkwMI3epiojtbtUwQSLIER0Y3yDBBocPuWOjJdvmjtEmPTTLXje/w==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@oxc-parser/binding-linux-s390x-gnu@0.124.0':
     resolution: {integrity: sha512-w1+cBvriUteOpox6ATqCFVkpGL47PFdcfCPGmgUZbd78Fw44U0gQkc+kVGvAOTvGrptMYgwomD1c6OTVvkrpGg==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@oxc-parser/binding-linux-x64-gnu@0.124.0':
     resolution: {integrity: sha512-RRB1evQiXRtMCsQQiAh9U0H3HzguLpE0ytfStuhRgmOj7tqUCOVxkHsvM9geZjAax6NqVRj7VXx32qjjkZPsBw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@oxc-parser/binding-linux-x64-musl@0.124.0':
     resolution: {integrity: sha512-asVYN0qmSHlCU8H9Q47SmeJ/Z5EG4IWCC+QGxkfFboI5qh15aLlJnHmnrV61MwQRPXGnVC/sC3qKhrUyqGxUqw==}
     engines: {node: ^20.19.0 || >=22.12.0}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@oxc-parser/binding-openharmony-arm64@0.124.0':
     resolution: {integrity: sha512-nhwuxm6B8pn9lzAzMUfa571L5hCXYwQo8C8cx5aGOuHWCzruR8gPJnRRXGBci+uGaIIQEZDyU/U6HDgrSp/JlQ==}
@@ -1435,66 +1475,79 @@ packages:
     resolution: {integrity: sha512-L+34Qqil+v5uC0zEubW7uByo78WOCIrBvci69E7sFASRl0X7b/MB6Cqd1lky/CtcSVTydWa2WZwFuWexjS5o6g==}
     cpu: [arm]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm-musleabihf@4.60.1':
     resolution: {integrity: sha512-n83O8rt4v34hgFzlkb1ycniJh7IR5RCIqt6mz1VRJD6pmhRi0CXdmfnLu9dIUS6buzh60IvACM842Ffb3xd6Gg==}
     cpu: [arm]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-arm64-gnu@4.60.1':
     resolution: {integrity: sha512-Nql7sTeAzhTAja3QXeAI48+/+GjBJ+QmAH13snn0AJSNL50JsDqotyudHyMbO2RbJkskbMbFJfIJKWA6R1LCJQ==}
     cpu: [arm64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-arm64-musl@4.60.1':
     resolution: {integrity: sha512-+pUymDhd0ys9GcKZPPWlFiZ67sTWV5UU6zOJat02M1+PiuSGDziyRuI/pPue3hoUwm2uGfxdL+trT6Z9rxnlMA==}
     cpu: [arm64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-loong64-gnu@4.60.1':
     resolution: {integrity: sha512-VSvgvQeIcsEvY4bKDHEDWcpW4Yw7BtlKG1GUT4FzBUlEKQK0rWHYBqQt6Fm2taXS+1bXvJT6kICu5ZwqKCnvlQ==}
     cpu: [loong64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-loong64-musl@4.60.1':
     resolution: {integrity: sha512-4LqhUomJqwe641gsPp6xLfhqWMbQV04KtPp7/dIp0nzPxAkNY1AbwL5W0MQpcalLYk07vaW9Kp1PBhdpZYYcEw==}
     cpu: [loong64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-ppc64-gnu@4.60.1':
     resolution: {integrity: sha512-tLQQ9aPvkBxOc/EUT6j3pyeMD6Hb8QF2BTBnCQWP/uu1lhc9AIrIjKnLYMEroIz/JvtGYgI9dF3AxHZNaEH0rw==}
     cpu: [ppc64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-ppc64-musl@4.60.1':
     resolution: {integrity: sha512-RMxFhJwc9fSXP6PqmAz4cbv3kAyvD1etJFjTx4ONqFP9DkTkXsAMU4v3Vyc5BgzC+anz7nS/9tp4obsKfqkDHg==}
     cpu: [ppc64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-riscv64-gnu@4.60.1':
     resolution: {integrity: sha512-QKgFl+Yc1eEk6MmOBfRHYF6lTxiiiV3/z/BRrbSiW2I7AFTXoBFvdMEyglohPj//2mZS4hDOqeB0H1ACh3sBbg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-riscv64-musl@4.60.1':
     resolution: {integrity: sha512-RAjXjP/8c6ZtzatZcA1RaQr6O1TRhzC+adn8YZDnChliZHviqIjmvFwHcxi4JKPSDAt6Uhf/7vqcBzQJy0PDJg==}
     cpu: [riscv64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-linux-s390x-gnu@4.60.1':
     resolution: {integrity: sha512-wcuocpaOlaL1COBYiA89O6yfjlp3RwKDeTIA0hM7OpmhR1Bjo9j31G1uQVpDlTvwxGn2nQs65fBFL5UFd76FcQ==}
     cpu: [s390x]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-gnu@4.60.1':
     resolution: {integrity: sha512-77PpsFQUCOiZR9+LQEFg9GClyfkNXj1MP6wRnzYs0EeWbPcHs02AXu4xuUbM1zhwn3wqaizle3AEYg5aeoohhg==}
     cpu: [x64]
     os: [linux]
+    libc: [glibc]
 
   '@rollup/rollup-linux-x64-musl@4.60.1':
     resolution: {integrity: sha512-5cIATbk5vynAjqqmyBjlciMJl1+R/CwX9oLk/EyiFXDWd95KpHdrOJT//rnUl4cUcskrd0jCCw3wpZnhIHdD9w==}
     cpu: [x64]
     os: [linux]
+    libc: [musl]
 
   '@rollup/rollup-openbsd-x64@4.60.1':
     resolution: {integrity: sha512-cl0w09WsCi17mcmWqqglez9Gk8isgeWvoUZ3WiJFYSR3zjBQc2J5/ihSjpl+VLjPqjQ/1hJRcqBfLjssREQILw==}
@@ -1545,6 +1598,16 @@ packages:
     peerDependencies:
       vue: ^2.7.0 || ^3.0.0
 
+  '@tokenizer/inflate@0.4.1':
+    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
+    engines: {node: '>=18'}
+
+  '@tokenizer/token@0.3.0':
+    resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
+
+  '@tootallnate/quickjs-emscripten@0.23.0':
+    resolution: {integrity: sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==}
+
   '@tybys/wasm-util@0.10.1':
     resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
 
@@ -1655,6 +1718,11 @@ packages:
     resolution: {integrity: sha512-y+vH7QE8ycjoa0bWciFg7OpFcipUuem1ujhrdLtq1gByKwfbC7bPeKsiny9e0urg93DqwGcHey+bGRKCnF1nZQ==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
+  '@unblockneteasemusic/server@0.28.0':
+    resolution: {integrity: sha512-FLXNEMc9ItoAhhhemxKJzpJ+9DkWsfnxE5PYTCIzqZarYVUCxeKKEf0CwGeUeIW35z1Ekl0wFU4l10RDWVCr4A==}
+    engines: {node: '>= 12'}
+    hasBin: true
+
   '@unocss/cli@66.6.8':
     resolution: {integrity: sha512-dJ4AmrhCtQwEDJtpFG7AgJ4Qi4GWnNgWWlLWq4DhKBOCcvldr9k98mscdhs3MOwph25DIxU5MdLRAg/OS1JryQ==}
     engines: {node: '>=14'}
@@ -1818,11 +1886,20 @@ packages:
   '@xmldom/xmldom@0.8.12':
     resolution: {integrity: sha512-9k/gHF6n/pAi/9tqr3m3aqkuiNosYTurLLUtc7xQ9sxB/wm7WPygCv8GYa6mS0fLJEHhqMC1ATYhz++U/lRHqg==}
     engines: {node: '>=10.0.0'}
+    deprecated: this version has critical issues, please update to the latest version
 
   abbrev@3.0.1:
     resolution: {integrity: sha512-AO2ac6pjRB3SJmGJo+v5/aK6Omggp6fsLrs6wN9bd35ulu4cCwaAU9+7ZhXjeqHVkaHThLuzH0nZr0YpCDhygg==}
     engines: {node: ^18.17.0 || >=20.5.0}
 
+  accepts@1.3.8:
+    resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==}
+    engines: {node: '>= 0.6'}
+
+  accepts@2.0.0:
+    resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
+    engines: {node: '>= 0.6'}
+
   acorn-jsx@5.3.2:
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
     peerDependencies:
@@ -1856,6 +1933,10 @@ packages:
     resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
     engines: {node: '>=12'}
 
+  ansi-styles@3.2.1:
+    resolution: {integrity: sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==}
+    engines: {node: '>=4'}
+
   ansi-styles@4.3.0:
     resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
     engines: {node: '>=8'}
@@ -1877,10 +1958,17 @@ packages:
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
+  args@5.0.3:
+    resolution: {integrity: sha512-h6k/zfFgusnv3i5TU08KQkVKuCPBtL/PWQbWkHUxvJrZ2nAyeaUupneemcrgn1xmqxPQsPIzwkUhOpoqPDRZuA==}
+    engines: {node: '>= 6.0.0'}
+
   aria-hidden@1.2.6:
     resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
     engines: {node: '>=10'}
 
+  array-flatten@1.1.1:
+    resolution: {integrity: sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==}
+
   assert-plus@1.0.0:
     resolution: {integrity: sha512-NfJ4UzBCcQGLDlQq7nHxH+tv3kyZ0hHQqF5BO6J7tNJeP5do1llPr8dZ8zHonfhAu0PHAdMkSo+8o0wxg9lZWw==}
     engines: {node: '>=0.8'}
@@ -1889,6 +1977,10 @@ packages:
     resolution: {integrity: sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw==}
     engines: {node: '>=20.19.0'}
 
+  ast-types@0.13.4:
+    resolution: {integrity: sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==}
+    engines: {node: '>=4'}
+
   ast-walker-scope@0.8.3:
     resolution: {integrity: sha512-cbdCP0PGOBq0ASG+sjnKIoYkWMKhhz+F/h9pRexUdX2Hd38+WOlBkRKlqkGOSm0YQpcFMQBJeK4WspUAkwsEdg==}
     engines: {node: '>=20.19.0'}
@@ -1911,9 +2003,16 @@ packages:
     resolution: {integrity: sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==}
     engines: {node: '>= 4.0.0'}
 
+  atomic-sleep@1.0.0:
+    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
+    engines: {node: '>=8.0.0'}
+
   atomically@2.1.1:
     resolution: {integrity: sha512-P4w9o2dqARji6P7MHprklbfiArZAWvo07yW7qs3pdljb3BWr12FIB7W+p0zJiuiVsUpRO0iZn1kFFcpPegg0tQ==}
 
+  axios@1.15.1:
+    resolution: {integrity: sha512-WOG+Jj8ZOvR0a3rAn+Tuf1UQJRxw5venr6DgdbJzngJE3qG7X0kL83CZGpdHMxEm+ZK3seAbvFsw4FfOfP9vxg==}
+
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
@@ -1929,6 +2028,10 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
+  basic-ftp@5.3.0:
+    resolution: {integrity: sha512-5K9eNNn7ywHPsYnFwjKgYH8Hf8B5emh7JKcPaVjjrMJFQQwGpwowEnZNEtHs7DfR7hCZsmaK3VA4HUK0YarT+w==}
+    engines: {node: '>=10.0.0'}
+
   before-after-hook@4.0.0:
     resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
 
@@ -1945,6 +2048,14 @@ packages:
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
+  body-parser@1.20.4:
+    resolution: {integrity: sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==}
+    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
+  body-parser@2.2.2:
+    resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==}
+    engines: {node: '>=18'}
+
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
@@ -1983,6 +2094,14 @@ packages:
   builder-util@26.8.1:
     resolution: {integrity: sha512-pm1lTYbGyc90DHgCDO7eo8Rl4EqKLciayNbZqGziqnH9jrlKe8ZANGdityLZU+pJh16dfzjAx2xQq9McuIPEtw==}
 
+  busboy@1.6.0:
+    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
+    engines: {node: '>=10.16.0'}
+
+  bytes@3.1.2:
+    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
+    engines: {node: '>= 0.8'}
+
   cac@6.7.14:
     resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
     engines: {node: '>=8'}
@@ -2007,13 +2126,29 @@ packages:
     resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
     engines: {node: '>= 0.4'}
 
+  call-bound@1.0.4:
+    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
+    engines: {node: '>= 0.4'}
+
   callsites@3.1.0:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
 
+  camelcase@5.0.0:
+    resolution: {integrity: sha512-faqwZqnWxbxn+F1d399ygeamQNy3lPp/H9H6rNrqYh4FSVCtcY+3cub1MxA8o9mDd55mM8Aghuu/kuyYA6VTsA==}
+    engines: {node: '>=6'}
+
+  camelcase@5.3.1:
+    resolution: {integrity: sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==}
+    engines: {node: '>=6'}
+
   caniuse-lite@1.0.30001787:
     resolution: {integrity: sha512-mNcrMN9KeI68u7muanUpEejSLghOKlVhRqS/Za2IeyGllJ9I9otGpR9g3nsw7n4W378TE/LyIteA0+/FOZm4Kg==}
 
+  chalk@2.4.2:
+    resolution: {integrity: sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==}
+    engines: {node: '>=4'}
+
   chalk@4.1.2:
     resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
     engines: {node: '>=10'}
@@ -2064,10 +2199,17 @@ packages:
     peerDependencies:
       typanion: '*'
 
+  cliui@6.0.0:
+    resolution: {integrity: sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==}
+
   cliui@8.0.1:
     resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
     engines: {node: '>=12'}
 
+  cliui@9.0.1:
+    resolution: {integrity: sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w==}
+    engines: {node: '>=20'}
+
   clone-response@1.0.3:
     resolution: {integrity: sha512-ROoL94jJH2dUVML2Y/5PEDNaSHgeOdSDicUyS7izcF63G6sTc/FTjLub4b8Il9S8S0beOfYt0TaA5qvFK+w0wA==}
 
@@ -2075,10 +2217,16 @@ packages:
     resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
     engines: {node: '>=0.8'}
 
+  color-convert@1.9.3:
+    resolution: {integrity: sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==}
+
   color-convert@2.0.1:
     resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
     engines: {node: '>=7.0.0'}
 
+  color-name@1.1.3:
+    resolution: {integrity: sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==}
+
   color-name@1.1.4:
     resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
 
@@ -2117,9 +2265,32 @@ packages:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
 
+  content-disposition@0.5.4:
+    resolution: {integrity: sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==}
+    engines: {node: '>= 0.6'}
+
+  content-disposition@1.1.0:
+    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
+    engines: {node: '>=18'}
+
+  content-type@1.0.5:
+    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
+    engines: {node: '>= 0.6'}
+
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
+  cookie-signature@1.0.7:
+    resolution: {integrity: sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==}
+
+  cookie-signature@1.2.2:
+    resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
+    engines: {node: '>=6.6.0'}
+
+  cookie@0.7.2:
+    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
+    engines: {node: '>= 0.6'}
+
   copy-anything@4.0.5:
     resolution: {integrity: sha512-7Vv6asjS4gMOuILabD3l739tsaxFQmC+a7pLZm02zyvs8p977bL3zEgq3yDk5rn9B0PbYgIv++jmHcuUab4RhA==}
     engines: {node: '>=18'}
@@ -2137,6 +2308,9 @@ packages:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
 
+  crypto-js@4.2.0:
+    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
+
   css-tree@3.2.1:
     resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
     engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
@@ -2149,6 +2323,21 @@ packages:
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
+  data-uri-to-buffer@6.0.2:
+    resolution: {integrity: sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==}
+    engines: {node: '>= 14'}
+
+  dateformat@4.6.3:
+    resolution: {integrity: sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA==}
+
+  debug@2.6.9:
+    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
+    peerDependencies:
+      supports-color: '*'
+    peerDependenciesMeta:
+      supports-color:
+        optional: true
+
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -2158,6 +2347,10 @@ packages:
       supports-color:
         optional: true
 
+  decamelize@1.2.0:
+    resolution: {integrity: sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==}
+    engines: {node: '>=0.10.0'}
+
   decompress-response@6.0.0:
     resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
     engines: {node: '>=10'}
@@ -2187,13 +2380,25 @@ packages:
   defu@6.1.7:
     resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
 
+  degenerator@5.0.1:
+    resolution: {integrity: sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==}
+    engines: {node: '>= 14'}
+
   delayed-stream@1.0.0:
     resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
     engines: {node: '>=0.4.0'}
 
+  depd@2.0.0:
+    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
+    engines: {node: '>= 0.8'}
+
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
+  destroy@1.2.0:
+    resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
+    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
+
   detect-libc@2.1.2:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
@@ -2201,6 +2406,9 @@ packages:
   detect-node@2.1.0:
     resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
 
+  dijkstrajs@1.0.3:
+    resolution: {integrity: sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==}
+
   dir-compare@4.2.0:
     resolution: {integrity: sha512-2xMCmOoMrdQIPHdsTawECdNPwlVFB9zGcz3kuhmBO6U3oU+UQjsue0i8ayLKpgBcm+hcXPMVSGUN9d+pvJ6+VQ==}
 
@@ -2221,6 +2429,10 @@ packages:
     resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
     engines: {node: '>=12'}
 
+  dotenv@17.4.2:
+    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
+    engines: {node: '>=12'}
+
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -2228,9 +2440,15 @@ packages:
   duplexer@0.1.2:
     resolution: {integrity: sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==}
 
+  duplexify@4.1.3:
+    resolution: {integrity: sha512-M3BmBhwJRZsSx38lZyhE53Csddgzl5R7xGJNk7CVddZD6CcmwMCH8J+7AprIrQKH7TonKxaCjcv27Qmf+sQ+oA==}
+
   eastasianwidth@0.2.0:
     resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
 
+  ee-first@1.1.1:
+    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
+
   ejs@3.1.10:
     resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
     engines: {node: '>=0.10.0'}
@@ -2285,12 +2503,19 @@ packages:
       node-addon-api:
         optional: true
 
+  emoji-regex@10.6.0:
+    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
+
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
 
   emoji-regex@9.2.2:
     resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
 
+  encodeurl@2.0.0:
+    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
+    engines: {node: '>= 0.8'}
+
   encoding@0.1.13:
     resolution: {integrity: sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==}
 
@@ -2344,6 +2569,13 @@ packages:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
 
+  escape-html@1.0.3:
+    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
+
+  escape-string-regexp@1.0.5:
+    resolution: {integrity: sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==}
+    engines: {node: '>=0.8.0'}
+
   escape-string-regexp@4.0.0:
     resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
     engines: {node: '>=10'}
@@ -2352,6 +2584,11 @@ packages:
     resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
     engines: {node: '>=12'}
 
+  escodegen@2.1.0:
+    resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
+    engines: {node: '>=6.0'}
+    hasBin: true
+
   eslint-config-prettier@10.1.8:
     resolution: {integrity: sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==}
     hasBin: true
@@ -2410,6 +2647,11 @@ packages:
     resolution: {integrity: sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw==}
     engines: {node: ^20.19.0 || ^22.13.0 || >=24}
 
+  esprima@4.0.1:
+    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   esquery@1.7.0:
     resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
     engines: {node: '>=0.10'}
@@ -2432,6 +2674,10 @@ packages:
     resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
     engines: {node: '>=0.10.0'}
 
+  etag@1.8.1:
+    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
+    engines: {node: '>= 0.6'}
+
   expand-template@2.0.3:
     resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
     engines: {node: '>=6'}
@@ -2439,6 +2685,18 @@ packages:
   exponential-backoff@3.1.3:
     resolution: {integrity: sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==}
 
+  express-fileupload@1.5.2:
+    resolution: {integrity: sha512-wxUJn2vTHvj/kZCVmc5/bJO15C7aSMyHeuXYY3geKpeKibaAoQGcEv5+sM6nHS2T7VF+QHS4hTWPiY2mKofEdg==}
+    engines: {node: '>=12.0.0'}
+
+  express@4.22.1:
+    resolution: {integrity: sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==}
+    engines: {node: '>= 0.10.0'}
+
+  express@5.2.1:
+    resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
+    engines: {node: '>= 18'}
+
   exsolve@1.0.8:
     resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
 
@@ -2463,6 +2721,13 @@ packages:
   fast-levenshtein@2.0.6:
     resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
 
+  fast-redact@3.5.0:
+    resolution: {integrity: sha512-dwsoQlS7h9hMeYUq1W++23NDcBLV4KqONnITDV9DjfS3q1SgDGVrBdvvTLUotWtPSD7asWDV9/CmsZPy8Hf70A==}
+    engines: {node: '>=6'}
+
+  fast-safe-stringify@2.1.1:
+    resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
+
   fast-string-truncated-width@3.0.3:
     resolution: {integrity: sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g==}
 
@@ -2488,12 +2753,28 @@ packages:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
 
+  file-type@21.3.4:
+    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
+    engines: {node: '>=20'}
+
   file-uri-to-path@1.0.0:
     resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
 
   filelist@1.0.6:
     resolution: {integrity: sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==}
 
+  finalhandler@1.3.2:
+    resolution: {integrity: sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==}
+    engines: {node: '>= 0.8'}
+
+  finalhandler@2.1.1:
+    resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
+    engines: {node: '>= 18.0.0'}
+
+  find-up@4.1.0:
+    resolution: {integrity: sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==}
+    engines: {node: '>=8'}
+
   find-up@5.0.0:
     resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
     engines: {node: '>=10'}
@@ -2502,9 +2783,21 @@ packages:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
 
+  flatstr@1.0.12:
+    resolution: {integrity: sha512-4zPxDyhCyiN2wIAtSLI6gc82/EjqZc1onI4Mz/l0pWrAlsSfYH/2ZIcU+e3oA2wDwbzIWNKwa23F8rh6+DRWkw==}
+
   flatted@3.4.2:
     resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
+  follow-redirects@1.16.0:
+    resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==}
+    engines: {node: '>=4.0'}
+    peerDependencies:
+      debug: '*'
+    peerDependenciesMeta:
+      debug:
+        optional: true
+
   foreground-child@3.3.1:
     resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
     engines: {node: '>=14'}
@@ -2513,6 +2806,18 @@ packages:
     resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
     engines: {node: '>= 6'}
 
+  forwarded@0.2.0:
+    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
+    engines: {node: '>= 0.6'}
+
+  fresh@0.5.2:
+    resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
+    engines: {node: '>= 0.6'}
+
+  fresh@2.0.0:
+    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
+    engines: {node: '>= 0.8'}
+
   fs-constants@1.0.0:
     resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
 
@@ -2559,6 +2864,10 @@ packages:
     resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
     engines: {node: 6.* || 8.* || >= 10.*}
 
+  get-east-asian-width@1.5.0:
+    resolution: {integrity: sha512-CQ+bEO+Tva/qlmw24dCejulK5pMzVnUOFOijVogd3KQs07HnRIgp8TGipvCCRT06xeYEbpbgwaCxglFyiuIcmA==}
+    engines: {node: '>=18'}
+
   get-intrinsic@1.3.0:
     resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
     engines: {node: '>= 0.4'}
@@ -2574,6 +2883,10 @@ packages:
   get-tsconfig@4.13.7:
     resolution: {integrity: sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q==}
 
+  get-uri@6.0.5:
+    resolution: {integrity: sha512-b1O07XYq8eRuVzBNgJLstU6FYc1tS6wnMtF1I1D9lE8LxZSOGZ7LhxN54yPP6mGw5f2CkXY2BQUL9Fx41qvcIg==}
+    engines: {node: '>= 14'}
+
   github-from-package@0.0.0:
     resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
 
@@ -2625,6 +2938,13 @@ packages:
     resolution: {integrity: sha512-ax7ZYomf6jqPTQ4+XCpUGyXKHk5WweS+e05MBO4/y3WJ5RkmPXNKvX+bx1behVILVwr6JSQvZAku021CHPXG3Q==}
     engines: {node: '>=10'}
 
+  gzip@0.1.0:
+    resolution: {integrity: sha512-o2kq0ogD3MMAwDUt3G8y6EtFPqXDtpNI/zNWkZoOwYkjp/j8/Q9QLpVySPxYaQ521hPT8GoV9g1/WTkd7DM5Aw==}
+
+  has-flag@3.0.0:
+    resolution: {integrity: sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==}
+    engines: {node: '>=4'}
+
   has-flag@4.0.0:
     resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
     engines: {node: '>=8'}
@@ -2654,6 +2974,10 @@ packages:
   http-cache-semantics@4.2.0:
     resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
 
+  http-errors@2.0.1:
+    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
+    engines: {node: '>= 0.8'}
+
   http-proxy-agent@7.0.2:
     resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
     engines: {node: '>= 14'}
@@ -2666,11 +2990,18 @@ packages:
     resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
     engines: {node: '>= 14'}
 
+  https@1.0.0:
+    resolution: {integrity: sha512-4EC57ddXrkaF0x83Oj8sM6SLQHAWXw90Skqu2M4AEWENZ3F02dFJE/GARA8igO79tcgYqGrD7ae4f5L3um2lgg==}
+
   iconv-corefoundation@1.1.7:
     resolution: {integrity: sha512-T10qvkw0zz4wnm560lOEg0PovVqUXuOFhhHAkixw8/sycy7TJt7v/RrkEKEQnAw2viPSJu6iAkErxnzR0g8PpQ==}
     engines: {node: ^8.11.2 || >=10}
     os: [darwin]
 
+  iconv-lite@0.4.24:
+    resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
+    engines: {node: '>=0.10.0'}
+
   iconv-lite@0.6.3:
     resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
     engines: {node: '>=0.10.0'}
@@ -2715,6 +3046,10 @@ packages:
     resolution: {integrity: sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==}
     engines: {node: '>= 12'}
 
+  ipaddr.js@1.9.1:
+    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
+    engines: {node: '>= 0.10'}
+
   is-extglob@2.1.1:
     resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
     engines: {node: '>=0.10.0'}
@@ -2731,6 +3066,9 @@ packages:
     resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
     engines: {node: '>=8'}
 
+  is-promise@4.0.0:
+    resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
+
   is-unicode-supported@0.1.0:
     resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
     engines: {node: '>=10'}
@@ -2766,6 +3104,10 @@ packages:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
 
+  joycon@3.1.1:
+    resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
+    engines: {node: '>=10'}
+
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -2813,6 +3155,10 @@ packages:
   lazy-val@1.0.5:
     resolution: {integrity: sha512-0/BnGCCfyUMkBpeDgWihanIAF9JmZhHBgUhEqzvf+adhNGLoP6TaiI5oF8oyb3I45P+PcnrqihSf01M0l0G5+Q==}
 
+  leven@2.1.0:
+    resolution: {integrity: sha512-nvVPLpIHUxCUoRLrFqTgSxXJ614d8AgQoWl7zPe/2VadE8+1dpU3LBhowRuBAcuwruWtOdD8oYC9jDNJjXDPyA==}
+    engines: {node: '>=0.10.0'}
+
   levn@0.4.1:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
@@ -2827,6 +3173,10 @@ packages:
   localforage@1.10.0:
     resolution: {integrity: sha512-14/H1aX7hzBBmmh7sGPd+AOMkkIrHM3Z1PAyGgZigA1H1p5O5ANnMyWzvpAETtG68/dC4pC0ncy3+PPGzXZHPg==}
 
+  locate-path@5.0.0:
+    resolution: {integrity: sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==}
+    engines: {node: '>=8'}
+
   locate-path@6.0.0:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
@@ -2891,14 +3241,46 @@ packages:
   mdn-data@2.27.1:
     resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
 
+  media-typer@0.3.0:
+    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
+    engines: {node: '>= 0.6'}
+
+  media-typer@1.1.0:
+    resolution: {integrity: sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==}
+    engines: {node: '>= 0.8'}
+
+  merge-descriptors@1.0.3:
+    resolution: {integrity: sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==}
+
+  merge-descriptors@2.0.0:
+    resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
+    engines: {node: '>=18'}
+
+  methods@1.1.2:
+    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
+    engines: {node: '>= 0.6'}
+
   mime-db@1.52.0:
     resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
     engines: {node: '>= 0.6'}
 
+  mime-db@1.54.0:
+    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
+    engines: {node: '>= 0.6'}
+
   mime-types@2.1.35:
     resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
     engines: {node: '>= 0.6'}
 
+  mime-types@3.0.2:
+    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
+    engines: {node: '>=18'}
+
+  mime@1.6.0:
+    resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==}
+    engines: {node: '>=4'}
+    hasBin: true
+
   mime@2.6.0:
     resolution: {integrity: sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==}
     engines: {node: '>=4.0.0'}
@@ -2979,16 +3361,27 @@ packages:
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
+  mri@1.1.4:
+    resolution: {integrity: sha512-6y7IjGPm8AzlvoUrwAaw1tLnUBudaS3752vcd8JtrpGGQn+rXIe63LFVHm/YMwtqAuh+LJPCFdlLYPWM1nYn6w==}
+    engines: {node: '>=4'}
+
   mrmime@2.0.1:
     resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
     engines: {node: '>=10'}
 
+  ms@2.0.0:
+    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
+
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
+  music-metadata@11.12.3:
+    resolution: {integrity: sha512-n6hSTZkuD59qWgHh6IP5dtDlDZQXoxk/bcA85Jywg8Z1iFrlNgl2+GTFgjZyn52W5UgQpV42V4XqrQZZAMbZTQ==}
+    engines: {node: '>=18'}
+
   mute-stream@3.0.0:
     resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==}
     engines: {node: ^20.17.0 || >=22.9.0}
@@ -3004,10 +3397,18 @@ packages:
   natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
 
+  negotiator@0.6.3:
+    resolution: {integrity: sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==}
+    engines: {node: '>= 0.6'}
+
   negotiator@1.0.0:
     resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
     engines: {node: '>= 0.6'}
 
+  netmask@2.1.1:
+    resolution: {integrity: sha512-eonl3sLUha+S1GzTPxychyhnUzKyeQkZ7jLjKrBagJgPla13F+uQ71HgpFefyHgqrjEbCPkDArxYsjY8/+gLKA==}
+    engines: {node: '>= 0.4.0'}
+
   node-abi@3.89.0:
     resolution: {integrity: sha512-6u9UwL0HlAl21+agMN3YAMXcKByMqwGx+pq+P76vii5f7hTPtKDp08/H9py6DY+cfDw7kQNTGEj/rly3IgbNQA==}
     engines: {node: '>=10'}
@@ -3025,6 +3426,10 @@ packages:
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
+  node-forge@1.4.0:
+    resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
+    engines: {node: '>= 6.13.0'}
+
   node-gyp@11.5.0:
     resolution: {integrity: sha512-ra7Kvlhxn5V9Slyus0ygMa2h+UqExPqUIkfk7Pc8QTLT956JLSy51uWFwHtIYy0vI8cB4BDhc/S03+880My/LQ==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -3033,6 +3438,9 @@ packages:
   node-releases@2.0.37:
     resolution: {integrity: sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg==}
 
+  node-windows@1.0.0-beta.8:
+    resolution: {integrity: sha512-uLekXnSeem3nW5escID224Fd0U/1VtvE796JpSpOY+c73Cslz/Qn2WUHRJyPQJEMrNGAy/FMRFjjhh4z1alZTA==}
+
   nopt@8.1.0:
     resolution: {integrity: sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -3045,6 +3453,10 @@ packages:
   nth-check@2.1.1:
     resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
 
+  object-inspect@1.13.4:
+    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
+    engines: {node: '>= 0.4'}
+
   object-keys@1.1.1:
     resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
     engines: {node: '>= 0.4'}
@@ -3058,6 +3470,13 @@ packages:
   ohash@2.0.11:
     resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
 
+  on-exit-leak-free@0.2.0:
+    resolution: {integrity: sha512-dqaz3u44QbRXQooZLTUKU41ZrzYrcvLISVgbrzbyCMxpmSLJvZ3ZamIJIZ29P6OhZIkNIQKosdeM6t1LYbA9hg==}
+
+  on-finished@2.4.1:
+    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
+    engines: {node: '>= 0.8'}
+
   once@1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
 
@@ -3086,10 +3505,18 @@ packages:
     resolution: {integrity: sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==}
     engines: {node: '>=8'}
 
+  p-limit@2.3.0:
+    resolution: {integrity: sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==}
+    engines: {node: '>=6'}
+
   p-limit@3.1.0:
     resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
     engines: {node: '>=10'}
 
+  p-locate@4.1.0:
+    resolution: {integrity: sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==}
+    engines: {node: '>=8'}
+
   p-locate@5.0.0:
     resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
     engines: {node: '>=10'}
@@ -3098,6 +3525,18 @@ packages:
     resolution: {integrity: sha512-tkAQEw8ysMzmkhgw8k+1U/iPhWNhykKnSk4Rd5zLoPJCuJaGRPo6YposrZgaxHKzDHdDWWZvE/Sk7hsL2X/CpQ==}
     engines: {node: '>=18'}
 
+  p-try@2.2.0:
+    resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==}
+    engines: {node: '>=6'}
+
+  pac-proxy-agent@7.2.0:
+    resolution: {integrity: sha512-TEB8ESquiLMc0lV8vcd5Ql/JAKAoyzHFXaStwjkzpOpC5Yv+pIzLfHvjTSdf3vpa2bMiUQrg9i6276yn8666aA==}
+    engines: {node: '>= 14'}
+
+  pac-resolver@7.0.1:
+    resolution: {integrity: sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg==}
+    engines: {node: '>= 14'}
+
   package-json-from-dist@1.0.1:
     resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
 
@@ -3108,6 +3547,10 @@ packages:
     resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
     engines: {node: '>=6'}
 
+  parseurl@1.3.3:
+    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
+    engines: {node: '>= 0.8'}
+
   path-browserify@1.0.1:
     resolution: {integrity: sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==}
 
@@ -3131,6 +3574,12 @@ packages:
     resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
     engines: {node: 18 || 20 || >=22}
 
+  path-to-regexp@0.1.13:
+    resolution: {integrity: sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==}
+
+  path-to-regexp@8.4.2:
+    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
+
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
@@ -3177,6 +3626,20 @@ packages:
       typescript:
         optional: true
 
+  pino-abstract-transport@0.5.0:
+    resolution: {integrity: sha512-+KAgmVeqXYbTtU2FScx1XS3kNyfZ5TrXY07V96QnUSFqo2gAqlvmaxH67Lj7SWazqsMabf+58ctdTcBgnOLUOQ==}
+
+  pino-pretty@7.6.1:
+    resolution: {integrity: sha512-H7N6ZYkiyrfwBGW9CSjx0uyO9Q2Lyt73881+OTYk8v3TiTdgN92QHrWlEq/LeWw5XtDP64jeSk3mnc6T+xX9/w==}
+    hasBin: true
+
+  pino-std-serializers@3.2.0:
+    resolution: {integrity: sha512-EqX4pwDPrt3MuOAAUBMU0Tk5kR/YcCM5fNPEzgCO2zJ5HfX0vbiH9HbJglnyeQsN96Kznae6MWD47pZB5avTrg==}
+
+  pino@6.14.0:
+    resolution: {integrity: sha512-iuhEDel3Z3hF9Jfe44DPXR8l07bhjuFY3GMHIXbjnY9XcafbyDDwl2sN2vw2GjMPf5Nkoe+OFao7ffn9SXaKDg==}
+    hasBin: true
+
   pkg-types@1.3.1:
     resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
 
@@ -3187,6 +3650,10 @@ packages:
     resolution: {integrity: sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==}
     engines: {node: '>=10.4.0'}
 
+  pngjs@5.0.0:
+    resolution: {integrity: sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==}
+    engines: {node: '>=10.13.0'}
+
   postcss-selector-parser@7.1.1:
     resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==}
     engines: {node: '>=4'}
@@ -3219,6 +3686,9 @@ packages:
     resolution: {integrity: sha512-Azwzvl90HaF0aCz1JrDdXQykFakSSNPaPoiZ9fm5qJIMHioDZEi7OAdRwSm6rSoPtY3Qutnm3L7ogmg3dc+wbQ==}
     engines: {node: ^18.17.0 || >=20.5.0}
 
+  process-warning@1.0.0:
+    resolution: {integrity: sha512-du4wfLyj4yCZq1VupnVSZmRsPJsNuxoDQFdCFHLaYiEbFBD7QE0a+I4D7hOxrVnh78QE/YipFAj9lXHiXocV+Q==}
+
   progress@2.0.3:
     resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
     engines: {node: '>=0.4.0'}
@@ -3230,6 +3700,14 @@ packages:
   proper-lockfile@4.1.2:
     resolution: {integrity: sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==}
 
+  proxy-addr@2.0.7:
+    resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
+    engines: {node: '>= 0.10'}
+
+  proxy-from-env@2.1.0:
+    resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
+    engines: {node: '>=10'}
+
   pump@3.0.4:
     resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
 
@@ -3237,16 +3715,44 @@ packages:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
+  qrcode@1.5.4:
+    resolution: {integrity: sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==}
+    engines: {node: '>=10.13.0'}
+    hasBin: true
+
+  qs@6.14.2:
+    resolution: {integrity: sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==}
+    engines: {node: '>=0.6'}
+
+  qs@6.15.1:
+    resolution: {integrity: sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==}
+    engines: {node: '>=0.6'}
+
   quansync@0.2.11:
     resolution: {integrity: sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA==}
 
   quansync@1.0.0:
     resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
 
+  quick-format-unescaped@4.0.4:
+    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
+
   quick-lru@5.1.1:
     resolution: {integrity: sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==}
     engines: {node: '>=10'}
 
+  range-parser@1.2.1:
+    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
+    engines: {node: '>= 0.6'}
+
+  raw-body@2.5.3:
+    resolution: {integrity: sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==}
+    engines: {node: '>= 0.8'}
+
+  raw-body@3.0.2:
+    resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
+    engines: {node: '>= 0.10'}
+
   rc@1.2.8:
     resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
     hasBin: true
@@ -3276,6 +3782,9 @@ packages:
     resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
     engines: {node: '>=0.10.0'}
 
+  require-main-filename@2.0.0:
+    resolution: {integrity: sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==}
+
   resedit@1.7.2:
     resolution: {integrity: sha512-vHjcY2MlAITJhC0eRD/Vv8Vlgmu9Sd3LX9zZvtGzU5ZImdTN3+d6e/4mnTyV8vEbyf1sgNIrWxhWlrys52OkEA==}
     engines: {node: '>=12', npm: '>=6'}
@@ -3323,9 +3832,16 @@ packages:
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
+  router@2.2.0:
+    resolution: {integrity: sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==}
+    engines: {node: '>= 18'}
+
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
+  safe-decode-uri-component@1.2.1:
+    resolution: {integrity: sha512-j0PKk0v8qPOD0goqRAvoI7GKy+HwLHXEpXaQlA1IqJ65jjiILRK1InlfNdIKUUUYuLtERADaJumgYKNfyQBO+w==}
+
   safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
@@ -3339,6 +3855,9 @@ packages:
   scule@1.3.0:
     resolution: {integrity: sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==}
 
+  secure-json-parse@2.7.0:
+    resolution: {integrity: sha512-6aU+Rwsezw7VR8/nyvKTx8QpWH9FrcYiXXlqC4z5d5XQBDRqtbfsRjnwGyqbi3gddNtWHuEk9OANUotL26qKUw==}
+
   semver-compare@1.0.0:
     resolution: {integrity: sha512-YM3/ITh2MJ5MtzaM429anh+x2jiLVjqILF4m4oyQB18W7Ggea7BfqdH/wGMK7dDiMghv/6WG7znWMwUDzJiXow==}
 
@@ -3355,10 +3874,32 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
+  send@0.19.2:
+    resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
+    engines: {node: '>= 0.8.0'}
+
+  send@1.2.1:
+    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
+    engines: {node: '>= 18'}
+
   serialize-error@7.0.1:
     resolution: {integrity: sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==}
     engines: {node: '>=10'}
 
+  serve-static@1.16.3:
+    resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
+    engines: {node: '>= 0.8.0'}
+
+  serve-static@2.2.1:
+    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
+    engines: {node: '>= 18'}
+
+  set-blocking@2.0.0:
+    resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==}
+
+  setprototypeof@1.2.0:
+    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
+
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -3367,6 +3908,22 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
+  side-channel-list@1.0.1:
+    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-map@1.0.1:
+    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
+    engines: {node: '>= 0.4'}
+
+  side-channel-weakmap@1.0.2:
+    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
+    engines: {node: '>= 0.4'}
+
+  side-channel@1.1.0:
+    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
+    engines: {node: '>= 0.4'}
+
   signal-exit@3.0.7:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
 
@@ -3404,6 +3961,12 @@ packages:
     resolution: {integrity: sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==}
     engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
 
+  sonic-boom@1.4.1:
+    resolution: {integrity: sha512-LRHh/A8tpW7ru89lrlkU4AszXt1dbwSjVWguGrmlxE7tawVmDBlI1PILMkXAxJTwqhgsEeTHzj36D5CmHgQmNg==}
+
+  sonic-boom@2.8.0:
+    resolution: {integrity: sha512-kuonw1YOYYNOve5iHdSahXPOK49GqwA+LZhI6Wz/l0rP57iKyXXIHaRagOBHAPmGwJC6od2Z9zgvZ5loSgMlVg==}
+
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -3419,6 +3982,10 @@ packages:
     resolution: {integrity: sha512-1POYv7uv2gXoyGFpBCmpDVSNV74IfsWlDW216UPjbWufNf+bSU6GdbDsxdcxtfwb4xlI3yxzOTKClUosxARYrQ==}
     engines: {node: '>=0.10.0'}
 
+  split2@4.2.0:
+    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
+    engines: {node: '>= 10.x'}
+
   sprintf-js@1.1.3:
     resolution: {integrity: sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==}
 
@@ -3430,6 +3997,17 @@ packages:
     resolution: {integrity: sha512-jH9EhtKIjuXZ2cWxmXS8ZP80XyC3iasQxMDV8jzhNJpfDb7VbQLVW4Wvsxz9QZvzV+G4YoSfBUVKDOyxLzi/sg==}
     engines: {node: '>= 6'}
 
+  statuses@2.0.2:
+    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
+    engines: {node: '>= 0.8'}
+
+  stream-shift@1.0.3:
+    resolution: {integrity: sha512-76ORR0DO1o1hlKwTbi/DM3EXWGf3ZJYO8cXX5RJwnul2DEg2oyoZyjLNoQM8WsvZiFKCRfC1O0J7iCvie3RZmQ==}
+
+  streamsearch@1.1.0:
+    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
+    engines: {node: '>=10.0.0'}
+
   string-width@4.2.3:
     resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
     engines: {node: '>=8'}
@@ -3438,6 +4016,10 @@ packages:
     resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
     engines: {node: '>=12'}
 
+  string-width@7.2.0:
+    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
+    engines: {node: '>=18'}
+
   string_decoder@1.3.0:
     resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
 
@@ -3460,6 +4042,10 @@ packages:
   strip-literal@3.1.0:
     resolution: {integrity: sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==}
 
+  strtok3@10.3.5:
+    resolution: {integrity: sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==}
+    engines: {node: '>=18'}
+
   stubborn-fs@2.0.0:
     resolution: {integrity: sha512-Y0AvSwDw8y+nlSNFXMm2g6L51rBGdAQT20J3YSOqxC53Lo3bjWRtr2BKcfYoAf352WYpsZSTURrA0tqhfgudPA==}
 
@@ -3474,6 +4060,10 @@ packages:
     resolution: {integrity: sha512-H+ue8Zo4vJmV2nRjpx86P35lzwDT3nItnIsocgumgr0hHMQ+ZGq5vrERg9kJBo5AWGmxZDhzDo+WVIJqkB0cGA==}
     engines: {node: '>=16'}
 
+  supports-color@5.5.0:
+    resolution: {integrity: sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==}
+    engines: {node: '>=4'}
+
   supports-color@7.2.0:
     resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
     engines: {node: '>=8'}
@@ -3517,6 +4107,14 @@ packages:
     resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==}
     engines: {node: '>=14.14'}
 
+  toidentifier@1.0.1:
+    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
+    engines: {node: '>=0.6'}
+
+  token-types@6.1.2:
+    resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
+    engines: {node: '>=14.16'}
+
   totalist@3.0.1:
     resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
     engines: {node: '>=6'}
@@ -3541,6 +4139,10 @@ packages:
   tunnel-agent@0.6.0:
     resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
 
+  tunnel@0.0.6:
+    resolution: {integrity: sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg==}
+    engines: {node: '>=0.6.11 <=0.7.0 || >=0.7.3'}
+
   typanion@3.14.0:
     resolution: {integrity: sha512-ZW/lVMRabETuYCd9O9ZvMhAh8GslSqaUjxmK/JLPCh6l73CvLBiuXswj/+7LdnWOgYsQ130FqLzFz5aGT4I3Ug==}
 
@@ -3552,6 +4154,14 @@ packages:
     resolution: {integrity: sha512-34R7HTnG0XIJcBSn5XhDd7nNFPRcXYRZrBB2O2jdKqYODldSzBAqzsWoZYYvduky73toYS/ESqxPvkDf/F0XMg==}
     engines: {node: '>=10'}
 
+  type-is@1.6.18:
+    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
+    engines: {node: '>= 0.6'}
+
+  type-is@2.0.1:
+    resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==}
+    engines: {node: '>= 0.6'}
+
   type-level-regexp@0.1.17:
     resolution: {integrity: sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg==}
 
@@ -3570,6 +4180,10 @@ packages:
   ufo@1.6.3:
     resolution: {integrity: sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==}
 
+  uint8array-extras@1.5.0:
+    resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
+    engines: {node: '>=18'}
+
   unconfig-core@7.5.0:
     resolution: {integrity: sha512-Su3FauozOGP44ZmKdHy2oE6LPjk51M/TRRjHv2HNCWiDvfvCoxC2lno6jevMA91MYAdCdwP05QnWdWpSbncX/w==}
 
@@ -3617,6 +4231,10 @@ packages:
       '@unocss/webpack':
         optional: true
 
+  unpipe@1.0.0:
+    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
+    engines: {node: '>= 0.8'}
+
   unplugin-auto-import@21.0.0:
     resolution: {integrity: sha512-vWuC8SwqJmxZFYwPojhOhOXDb5xFhNNcEVb9K/RFkyk/3VnfaOjzitWN7v+8DEKpMjSsY2AEGXNgt6I0yQrhRQ==}
     engines: {node: '>=20.19.0'}
@@ -3683,8 +4301,16 @@ packages:
   util-deprecate@1.0.2:
     resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
 
-  verror@1.10.1:
-    resolution: {integrity: sha512-veufcmxri4e3XSrT0xwfUR7kguIkaxBeosDg00yDWhk49wdwkSUrvvsm7nc75e1PUyvIeZj6nS8VQRYz2/S4Xg==}
+  utils-merge@1.0.1:
+    resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
+    engines: {node: '>= 0.4.0'}
+
+  vary@1.1.2:
+    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
+    engines: {node: '>= 0.8'}
+
+  verror@1.10.1:
+    resolution: {integrity: sha512-veufcmxri4e3XSrT0xwfUR7kguIkaxBeosDg00yDWhk49wdwkSUrvvsm7nc75e1PUyvIeZj6nS8VQRYz2/S4Xg==}
     engines: {node: '>=0.6.0'}
 
   vite@7.3.2:
@@ -3791,6 +4417,9 @@ packages:
   when-exit@2.1.5:
     resolution: {integrity: sha512-VGkKJ564kzt6Ms1dbgPP/yuIoQCrsFAnRbptpC5wOEsDaNsbCB2bnfnaA8i/vRs5tjUSEOtIuvl9/MyVsvQZCg==}
 
+  which-module@2.0.1:
+    resolution: {integrity: sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==}
+
   which@2.0.2:
     resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
     engines: {node: '>= 8'}
@@ -3801,10 +4430,17 @@ packages:
     engines: {node: ^18.17.0 || >=20.5.0}
     hasBin: true
 
+  win-guid@0.2.1:
+    resolution: {integrity: sha512-gEIQU4mkgl2OPeoNrWflcJFJ3Ae2BPd4eCsHHA/XikslkIVms/nHhvnvzIZV7VLmBvtFlDOzLt9rrZT+n6D67A==}
+
   word-wrap@1.2.5:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
 
+  wrap-ansi@6.2.0:
+    resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
+    engines: {node: '>=8'}
+
   wrap-ansi@7.0.0:
     resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
     engines: {node: '>=10'}
@@ -3813,6 +4449,10 @@ packages:
     resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
     engines: {node: '>=12'}
 
+  wrap-ansi@9.0.2:
+    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
+    engines: {node: '>=18'}
+
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
@@ -3820,10 +4460,24 @@ packages:
     resolution: {integrity: sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==}
     engines: {node: '>=12'}
 
+  xml2js@0.6.2:
+    resolution: {integrity: sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==}
+    engines: {node: '>=4.0.0'}
+
+  xml@1.0.1:
+    resolution: {integrity: sha512-huCv9IH9Tcf95zuYCsQraZtWnJvBtLVE0QHMOs8bWyZAFZNDcYjsPq1nEx8jKA9y+Beo9v+7OBPRisQTjinQMw==}
+
+  xmlbuilder@11.0.1:
+    resolution: {integrity: sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==}
+    engines: {node: '>=4.0'}
+
   xmlbuilder@15.1.1:
     resolution: {integrity: sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==}
     engines: {node: '>=8.0'}
 
+  y18n@4.0.3:
+    resolution: {integrity: sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==}
+
   y18n@5.0.8:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
     engines: {node: '>=10'}
@@ -3843,14 +4497,30 @@ packages:
     engines: {node: '>= 14.6'}
     hasBin: true
 
+  yargs-parser@18.1.3:
+    resolution: {integrity: sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==}
+    engines: {node: '>=6'}
+
   yargs-parser@21.1.1:
     resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
     engines: {node: '>=12'}
 
+  yargs-parser@22.0.0:
+    resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
+  yargs@15.4.1:
+    resolution: {integrity: sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==}
+    engines: {node: '>=8'}
+
   yargs@17.7.2:
     resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
     engines: {node: '>=12'}
 
+  yargs@18.0.0:
+    resolution: {integrity: sha512-4UEqdc2RYGHZc7Doyqkrqiln3p9X2DZVxaGbwhn2pi7MrRagKaOcIKe8L3OxYcbhXLgLFUS3zAYuQjKBQgmuNg==}
+    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
+
   yauzl@2.10.0:
     resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
 
@@ -3974,6 +4644,8 @@ snapshots:
       '@babel/helper-string-parser': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
 
+  '@borewit/text-codec@0.2.2': {}
+
   '@develar/schema-utils@2.6.5':
     dependencies:
       ajv: 6.14.0
@@ -4821,6 +5493,37 @@ snapshots:
       - '@emnapi/core'
       - '@emnapi/runtime'
 
+  '@neteasecloudmusicapienhanced/api@4.32.0':
+    dependencies:
+      '@neteasecloudmusicapienhanced/unblockmusic-utils': 0.2.4
+      axios: 1.15.1
+      crypto-js: 4.2.0
+      dotenv: 17.4.2
+      express: 5.2.1
+      express-fileupload: 1.5.2
+      gzip: 0.1.0
+      music-metadata: 11.12.3
+      node-forge: 1.4.0
+      pac-proxy-agent: 7.2.0
+      qrcode: 1.5.4
+      safe-decode-uri-component: 1.2.1
+      tunnel: 0.0.6
+      xml2js: 0.6.2
+      yargs: 18.0.0
+    transitivePeerDependencies:
+      - debug
+      - supports-color
+
+  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.2.4':
+    dependencies:
+      '@unblockneteasemusic/server': 0.28.0
+      axios: 1.15.1
+      express: 4.22.1
+      https: 1.0.0
+    transitivePeerDependencies:
+      - debug
+      - supports-color
+
   '@npmcli/agent@3.0.0':
     dependencies:
       agent-base: 7.1.4
@@ -5068,6 +5771,17 @@ snapshots:
       '@tanstack/virtual-core': 3.13.23
       vue: 3.5.32(typescript@5.9.3)
 
+  '@tokenizer/inflate@0.4.1':
+    dependencies:
+      debug: 4.4.3
+      token-types: 6.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  '@tokenizer/token@0.3.0': {}
+
+  '@tootallnate/quickjs-emscripten@0.23.0': {}
+
   '@tybys/wasm-util@0.10.1':
     dependencies:
       tslib: 2.8.1
@@ -5221,6 +5935,12 @@ snapshots:
       '@typescript-eslint/types': 8.58.1
       eslint-visitor-keys: 5.0.1
 
+  '@unblockneteasemusic/server@0.28.0':
+    dependencies:
+      node-windows: 1.0.0-beta.8
+      pino: 6.14.0
+      pino-pretty: 7.6.1
+
   '@unocss/cli@66.6.8':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -5495,6 +6215,16 @@ snapshots:
 
   abbrev@3.0.1: {}
 
+  accepts@1.3.8:
+    dependencies:
+      mime-types: 2.1.35
+      negotiator: 0.6.3
+
+  accepts@2.0.0:
+    dependencies:
+      mime-types: 3.0.2
+      negotiator: 1.0.0
+
   acorn-jsx@5.3.2(acorn@8.16.0):
     dependencies:
       acorn: 8.16.0
@@ -5520,6 +6250,10 @@ snapshots:
 
   ansi-regex@6.2.2: {}
 
+  ansi-styles@3.2.1:
+    dependencies:
+      color-convert: 1.9.3
+
   ansi-styles@4.3.0:
     dependencies:
       color-convert: 2.0.1
@@ -5573,10 +6307,19 @@ snapshots:
 
   argparse@2.0.1: {}
 
+  args@5.0.3:
+    dependencies:
+      camelcase: 5.0.0
+      chalk: 2.4.2
+      leven: 2.1.0
+      mri: 1.1.4
+
   aria-hidden@1.2.6:
     dependencies:
       tslib: 2.8.1
 
+  array-flatten@1.1.1: {}
+
   assert-plus@1.0.0:
     optional: true
 
@@ -5585,6 +6328,10 @@ snapshots:
       '@babel/parser': 7.29.2
       pathe: 2.0.3
 
+  ast-types@0.13.4:
+    dependencies:
+      tslib: 2.8.1
+
   ast-walker-scope@0.8.3:
     dependencies:
       '@babel/parser': 7.29.2
@@ -5601,11 +6348,21 @@ snapshots:
 
   at-least-node@1.0.0: {}
 
+  atomic-sleep@1.0.0: {}
+
   atomically@2.1.1:
     dependencies:
       stubborn-fs: 2.0.0
       when-exit: 2.1.5
 
+  axios@1.15.1:
+    dependencies:
+      follow-redirects: 1.16.0
+      form-data: 4.0.5
+      proxy-from-env: 2.1.0
+    transitivePeerDependencies:
+      - debug
+
   balanced-match@1.0.2: {}
 
   balanced-match@4.0.4: {}
@@ -5614,6 +6371,8 @@ snapshots:
 
   baseline-browser-mapping@2.10.17: {}
 
+  basic-ftp@5.3.0: {}
+
   before-after-hook@4.0.0: {}
 
   better-sqlite3@12.8.0:
@@ -5633,6 +6392,37 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
+  body-parser@1.20.4:
+    dependencies:
+      bytes: 3.1.2
+      content-type: 1.0.5
+      debug: 2.6.9
+      depd: 2.0.0
+      destroy: 1.2.0
+      http-errors: 2.0.1
+      iconv-lite: 0.4.24
+      on-finished: 2.4.1
+      qs: 6.14.2
+      raw-body: 2.5.3
+      type-is: 1.6.18
+      unpipe: 1.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  body-parser@2.2.2:
+    dependencies:
+      bytes: 3.1.2
+      content-type: 1.0.5
+      debug: 4.4.3
+      http-errors: 2.0.1
+      iconv-lite: 0.7.2
+      on-finished: 2.4.1
+      qs: 6.15.1
+      raw-body: 3.0.2
+      type-is: 2.0.1
+    transitivePeerDependencies:
+      - supports-color
+
   boolbase@1.0.0: {}
 
   boolean@3.2.0:
@@ -5696,6 +6486,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  busboy@1.6.0:
+    dependencies:
+      streamsearch: 1.1.0
+
+  bytes@3.1.2: {}
+
   cac@6.7.14: {}
 
   cac@7.0.0: {}
@@ -5732,10 +6528,25 @@ snapshots:
       es-errors: 1.3.0
       function-bind: 1.1.2
 
+  call-bound@1.0.4:
+    dependencies:
+      call-bind-apply-helpers: 1.0.2
+      get-intrinsic: 1.3.0
+
   callsites@3.1.0: {}
 
+  camelcase@5.0.0: {}
+
+  camelcase@5.3.1: {}
+
   caniuse-lite@1.0.30001787: {}
 
+  chalk@2.4.2:
+    dependencies:
+      ansi-styles: 3.2.1
+      escape-string-regexp: 1.0.5
+      supports-color: 5.5.0
+
   chalk@4.1.2:
     dependencies:
       ansi-styles: 4.3.0
@@ -5775,22 +6586,40 @@ snapshots:
     dependencies:
       typanion: 3.14.0
 
+  cliui@6.0.0:
+    dependencies:
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+      wrap-ansi: 6.2.0
+
   cliui@8.0.1:
     dependencies:
       string-width: 4.2.3
       strip-ansi: 6.0.1
       wrap-ansi: 7.0.0
 
+  cliui@9.0.1:
+    dependencies:
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+      wrap-ansi: 9.0.2
+
   clone-response@1.0.3:
     dependencies:
       mimic-response: 1.0.1
 
   clone@1.0.4: {}
 
+  color-convert@1.9.3:
+    dependencies:
+      color-name: 1.1.3
+
   color-convert@2.0.1:
     dependencies:
       color-name: 1.1.4
 
+  color-name@1.1.3: {}
+
   color-name@1.1.4: {}
 
   colord@2.9.3: {}
@@ -5816,8 +6645,22 @@ snapshots:
 
   consola@3.4.2: {}
 
+  content-disposition@0.5.4:
+    dependencies:
+      safe-buffer: 5.2.1
+
+  content-disposition@1.1.0: {}
+
+  content-type@1.0.5: {}
+
   convert-source-map@2.0.0: {}
 
+  cookie-signature@1.0.7: {}
+
+  cookie-signature@1.2.2: {}
+
+  cookie@0.7.2: {}
+
   copy-anything@4.0.5:
     dependencies:
       is-what: 5.5.0
@@ -5839,6 +6682,8 @@ snapshots:
       shebang-command: 2.0.0
       which: 2.0.2
 
+  crypto-js@4.2.0: {}
+
   css-tree@3.2.1:
     dependencies:
       mdn-data: 2.27.1
@@ -5848,10 +6693,20 @@ snapshots:
 
   csstype@3.2.3: {}
 
+  data-uri-to-buffer@6.0.2: {}
+
+  dateformat@4.6.3: {}
+
+  debug@2.6.9:
+    dependencies:
+      ms: 2.0.0
+
   debug@4.4.3:
     dependencies:
       ms: 2.1.3
 
+  decamelize@1.2.0: {}
+
   decompress-response@6.0.0:
     dependencies:
       mimic-response: 3.1.0
@@ -5882,15 +6737,27 @@ snapshots:
 
   defu@6.1.7: {}
 
+  degenerator@5.0.1:
+    dependencies:
+      ast-types: 0.13.4
+      escodegen: 2.1.0
+      esprima: 4.0.1
+
   delayed-stream@1.0.0: {}
 
+  depd@2.0.0: {}
+
   destr@2.0.5: {}
 
+  destroy@1.2.0: {}
+
   detect-libc@2.1.2: {}
 
   detect-node@2.1.0:
     optional: true
 
+  dijkstrajs@1.0.3: {}
+
   dir-compare@4.2.0:
     dependencies:
       minimatch: 3.1.5
@@ -5927,6 +6794,8 @@ snapshots:
 
   dotenv@16.6.1: {}
 
+  dotenv@17.4.2: {}
+
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -5935,8 +6804,17 @@ snapshots:
 
   duplexer@0.1.2: {}
 
+  duplexify@4.1.3:
+    dependencies:
+      end-of-stream: 1.4.5
+      inherits: 2.0.4
+      readable-stream: 3.6.2
+      stream-shift: 1.0.3
+
   eastasianwidth@0.2.0: {}
 
+  ee-first@1.1.1: {}
+
   ejs@3.1.10:
     dependencies:
       jake: 10.9.4
@@ -6030,10 +6908,14 @@ snapshots:
 
   emnapi@1.9.2: {}
 
+  emoji-regex@10.6.0: {}
+
   emoji-regex@8.0.0: {}
 
   emoji-regex@9.2.2: {}
 
+  encodeurl@2.0.0: {}
+
   encoding@0.1.13:
     dependencies:
       iconv-lite: 0.6.3
@@ -6129,10 +7011,22 @@ snapshots:
 
   escalade@3.2.0: {}
 
+  escape-html@1.0.3: {}
+
+  escape-string-regexp@1.0.5: {}
+
   escape-string-regexp@4.0.0: {}
 
   escape-string-regexp@5.0.0: {}
 
+  escodegen@2.1.0:
+    dependencies:
+      esprima: 4.0.1
+      estraverse: 5.3.0
+      esutils: 2.0.3
+    optionalDependencies:
+      source-map: 0.6.1
+
   eslint-config-prettier@10.1.8(eslint@9.39.4(jiti@2.6.1)):
     dependencies:
       eslint: 9.39.4(jiti@2.6.1)
@@ -6221,6 +7115,8 @@ snapshots:
       acorn-jsx: 5.3.2(acorn@8.16.0)
       eslint-visitor-keys: 5.0.1
 
+  esprima@4.0.1: {}
+
   esquery@1.7.0:
     dependencies:
       estraverse: 5.3.0
@@ -6239,10 +7135,85 @@ snapshots:
 
   esutils@2.0.3: {}
 
+  etag@1.8.1: {}
+
   expand-template@2.0.3: {}
 
   exponential-backoff@3.1.3: {}
 
+  express-fileupload@1.5.2:
+    dependencies:
+      busboy: 1.6.0
+
+  express@4.22.1:
+    dependencies:
+      accepts: 1.3.8
+      array-flatten: 1.1.1
+      body-parser: 1.20.4
+      content-disposition: 0.5.4
+      content-type: 1.0.5
+      cookie: 0.7.2
+      cookie-signature: 1.0.7
+      debug: 2.6.9
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 1.3.2
+      fresh: 0.5.2
+      http-errors: 2.0.1
+      merge-descriptors: 1.0.3
+      methods: 1.1.2
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      path-to-regexp: 0.1.13
+      proxy-addr: 2.0.7
+      qs: 6.14.2
+      range-parser: 1.2.1
+      safe-buffer: 5.2.1
+      send: 0.19.2
+      serve-static: 1.16.3
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      type-is: 1.6.18
+      utils-merge: 1.0.1
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
+  express@5.2.1:
+    dependencies:
+      accepts: 2.0.0
+      body-parser: 2.2.2
+      content-disposition: 1.1.0
+      content-type: 1.0.5
+      cookie: 0.7.2
+      cookie-signature: 1.2.2
+      debug: 4.4.3
+      depd: 2.0.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      finalhandler: 2.1.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      merge-descriptors: 2.0.0
+      mime-types: 3.0.2
+      on-finished: 2.4.1
+      once: 1.4.0
+      parseurl: 1.3.3
+      proxy-addr: 2.0.7
+      qs: 6.15.1
+      range-parser: 1.2.1
+      router: 2.2.0
+      send: 1.2.1
+      serve-static: 2.2.1
+      statuses: 2.0.2
+      type-is: 2.0.1
+      vary: 1.1.2
+    transitivePeerDependencies:
+      - supports-color
+
   exsolve@1.0.8: {}
 
   extract-zip@2.0.1:
@@ -6266,6 +7237,10 @@ snapshots:
 
   fast-levenshtein@2.0.6: {}
 
+  fast-redact@3.5.0: {}
+
+  fast-safe-stringify@2.1.1: {}
+
   fast-string-truncated-width@3.0.3: {}
 
   fast-string-width@3.0.2:
@@ -6288,12 +7263,49 @@ snapshots:
     dependencies:
       flat-cache: 4.0.1
 
+  file-type@21.3.4:
+    dependencies:
+      '@tokenizer/inflate': 0.4.1
+      strtok3: 10.3.5
+      token-types: 6.1.2
+      uint8array-extras: 1.5.0
+    transitivePeerDependencies:
+      - supports-color
+
   file-uri-to-path@1.0.0: {}
 
   filelist@1.0.6:
     dependencies:
       minimatch: 5.1.9
 
+  finalhandler@1.3.2:
+    dependencies:
+      debug: 2.6.9
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
+      unpipe: 1.0.0
+    transitivePeerDependencies:
+      - supports-color
+
+  finalhandler@2.1.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      on-finished: 2.4.1
+      parseurl: 1.3.3
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  find-up@4.1.0:
+    dependencies:
+      locate-path: 5.0.0
+      path-exists: 4.0.0
+
   find-up@5.0.0:
     dependencies:
       locate-path: 6.0.0
@@ -6304,8 +7316,12 @@ snapshots:
       flatted: 3.4.2
       keyv: 4.5.4
 
+  flatstr@1.0.12: {}
+
   flatted@3.4.2: {}
 
+  follow-redirects@1.16.0: {}
+
   foreground-child@3.3.1:
     dependencies:
       cross-spawn: 7.0.6
@@ -6319,6 +7335,12 @@ snapshots:
       hasown: 2.0.2
       mime-types: 2.1.35
 
+  forwarded@0.2.0: {}
+
+  fresh@0.5.2: {}
+
+  fresh@2.0.0: {}
+
   fs-constants@1.0.0: {}
 
   fs-extra@10.1.0:
@@ -6367,6 +7389,8 @@ snapshots:
 
   get-caller-file@2.0.5: {}
 
+  get-east-asian-width@1.5.0: {}
+
   get-intrinsic@1.3.0:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -6393,6 +7417,14 @@ snapshots:
     dependencies:
       resolve-pkg-maps: 1.0.0
 
+  get-uri@6.0.5:
+    dependencies:
+      basic-ftp: 5.3.0
+      data-uri-to-buffer: 6.0.2
+      debug: 4.4.3
+    transitivePeerDependencies:
+      - supports-color
+
   github-from-package@0.0.0: {}
 
   glob-parent@6.0.2:
@@ -6465,6 +7497,10 @@ snapshots:
     dependencies:
       duplexer: 0.1.2
 
+  gzip@0.1.0: {}
+
+  has-flag@3.0.0: {}
+
   has-flag@4.0.0: {}
 
   has-property-descriptors@1.0.2:
@@ -6490,6 +7526,14 @@ snapshots:
 
   http-cache-semantics@4.2.0: {}
 
+  http-errors@2.0.1:
+    dependencies:
+      depd: 2.0.0
+      inherits: 2.0.4
+      setprototypeof: 1.2.0
+      statuses: 2.0.2
+      toidentifier: 1.0.1
+
   http-proxy-agent@7.0.2:
     dependencies:
       agent-base: 7.1.4
@@ -6509,12 +7553,18 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
+  https@1.0.0: {}
+
   iconv-corefoundation@1.1.7:
     dependencies:
       cli-truncate: 2.1.0
       node-addon-api: 1.7.2
     optional: true
 
+  iconv-lite@0.4.24:
+    dependencies:
+      safer-buffer: 2.1.2
+
   iconv-lite@0.6.3:
     dependencies:
       safer-buffer: 2.1.2
@@ -6549,6 +7599,8 @@ snapshots:
 
   ip-address@10.1.0: {}
 
+  ipaddr.js@1.9.1: {}
+
   is-extglob@2.1.1: {}
 
   is-fullwidth-code-point@3.0.0: {}
@@ -6559,6 +7611,8 @@ snapshots:
 
   is-interactive@1.0.0: {}
 
+  is-promise@4.0.0: {}
+
   is-unicode-supported@0.1.0: {}
 
   is-what@5.5.0: {}
@@ -6585,6 +7639,8 @@ snapshots:
 
   jiti@2.6.1: {}
 
+  joycon@3.1.1: {}
+
   js-tokens@4.0.0: {}
 
   js-tokens@9.0.1: {}
@@ -6624,6 +7680,8 @@ snapshots:
 
   lazy-val@1.0.5: {}
 
+  leven@2.1.0: {}
+
   levn@0.4.1:
     dependencies:
       prelude-ls: 1.2.1
@@ -6643,6 +7701,10 @@ snapshots:
     dependencies:
       lie: 3.1.1
 
+  locate-path@5.0.0:
+    dependencies:
+      p-locate: 4.1.0
+
   locate-path@6.0.0:
     dependencies:
       p-locate: 5.0.0
@@ -6717,12 +7779,30 @@ snapshots:
 
   mdn-data@2.27.1: {}
 
+  media-typer@0.3.0: {}
+
+  media-typer@1.1.0: {}
+
+  merge-descriptors@1.0.3: {}
+
+  merge-descriptors@2.0.0: {}
+
+  methods@1.1.2: {}
+
   mime-db@1.52.0: {}
 
+  mime-db@1.54.0: {}
+
   mime-types@2.1.35:
     dependencies:
       mime-db: 1.52.0
 
+  mime-types@3.0.2:
+    dependencies:
+      mime-db: 1.54.0
+
+  mime@1.6.0: {}
+
   mime@2.6.0: {}
 
   mimic-fn@2.1.0: {}
@@ -6798,12 +7878,31 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.3
 
+  mri@1.1.4: {}
+
   mrmime@2.0.1: {}
 
+  ms@2.0.0: {}
+
   ms@2.1.3: {}
 
   muggle-string@0.4.1: {}
 
+  music-metadata@11.12.3:
+    dependencies:
+      '@borewit/text-codec': 0.2.2
+      '@tokenizer/token': 0.3.0
+      content-type: 1.0.5
+      debug: 4.4.3
+      file-type: 21.3.4
+      media-typer: 1.1.0
+      strtok3: 10.3.5
+      token-types: 6.1.2
+      uint8array-extras: 1.5.0
+      win-guid: 0.2.1
+    transitivePeerDependencies:
+      - supports-color
+
   mute-stream@3.0.0: {}
 
   nanoid@3.3.11: {}
@@ -6812,8 +7911,12 @@ snapshots:
 
   natural-compare@1.4.0: {}
 
+  negotiator@0.6.3: {}
+
   negotiator@1.0.0: {}
 
+  netmask@2.1.1: {}
+
   node-abi@3.89.0:
     dependencies:
       semver: 7.7.4
@@ -6831,6 +7934,8 @@ snapshots:
 
   node-fetch-native@1.6.7: {}
 
+  node-forge@1.4.0: {}
+
   node-gyp@11.5.0:
     dependencies:
       env-paths: 2.2.1
@@ -6848,6 +7953,11 @@ snapshots:
 
   node-releases@2.0.37: {}
 
+  node-windows@1.0.0-beta.8:
+    dependencies:
+      xml: 1.0.1
+      yargs: 17.7.2
+
   nopt@8.1.0:
     dependencies:
       abbrev: 3.0.1
@@ -6858,6 +7968,8 @@ snapshots:
     dependencies:
       boolbase: 1.0.0
 
+  object-inspect@1.13.4: {}
+
   object-keys@1.1.1:
     optional: true
 
@@ -6871,6 +7983,12 @@ snapshots:
 
   ohash@2.0.11: {}
 
+  on-exit-leak-free@0.2.0: {}
+
+  on-finished@2.4.1:
+    dependencies:
+      ee-first: 1.1.1
+
   once@1.4.0:
     dependencies:
       wrappy: 1.0.2
@@ -6935,16 +8053,44 @@ snapshots:
 
   p-cancelable@2.1.1: {}
 
+  p-limit@2.3.0:
+    dependencies:
+      p-try: 2.2.0
+
   p-limit@3.1.0:
     dependencies:
       yocto-queue: 0.1.0
 
+  p-locate@4.1.0:
+    dependencies:
+      p-limit: 2.3.0
+
   p-locate@5.0.0:
     dependencies:
       p-limit: 3.1.0
 
   p-map@7.0.4: {}
 
+  p-try@2.2.0: {}
+
+  pac-proxy-agent@7.2.0:
+    dependencies:
+      '@tootallnate/quickjs-emscripten': 0.23.0
+      agent-base: 7.1.4
+      debug: 4.4.3
+      get-uri: 6.0.5
+      http-proxy-agent: 7.0.2
+      https-proxy-agent: 7.0.6
+      pac-resolver: 7.0.1
+      socks-proxy-agent: 8.0.5
+    transitivePeerDependencies:
+      - supports-color
+
+  pac-resolver@7.0.1:
+    dependencies:
+      degenerator: 5.0.1
+      netmask: 2.1.1
+
   package-json-from-dist@1.0.1: {}
 
   package-manager-detector@1.6.0: {}
@@ -6953,6 +8099,8 @@ snapshots:
     dependencies:
       callsites: 3.1.0
 
+  parseurl@1.3.3: {}
+
   path-browserify@1.0.1: {}
 
   path-exists@4.0.0: {}
@@ -6971,6 +8119,10 @@ snapshots:
       lru-cache: 11.3.3
       minipass: 7.1.3
 
+  path-to-regexp@0.1.13: {}
+
+  path-to-regexp@8.4.2: {}
+
   pathe@2.0.3: {}
 
   pe-library@0.4.1: {}
@@ -6998,6 +8150,39 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
+  pino-abstract-transport@0.5.0:
+    dependencies:
+      duplexify: 4.1.3
+      split2: 4.2.0
+
+  pino-pretty@7.6.1:
+    dependencies:
+      args: 5.0.3
+      colorette: 2.0.20
+      dateformat: 4.6.3
+      fast-safe-stringify: 2.1.1
+      joycon: 3.1.1
+      on-exit-leak-free: 0.2.0
+      pino-abstract-transport: 0.5.0
+      pump: 3.0.4
+      readable-stream: 3.6.2
+      rfdc: 1.4.1
+      secure-json-parse: 2.7.0
+      sonic-boom: 2.8.0
+      strip-json-comments: 3.1.1
+
+  pino-std-serializers@3.2.0: {}
+
+  pino@6.14.0:
+    dependencies:
+      fast-redact: 3.5.0
+      fast-safe-stringify: 2.1.1
+      flatstr: 1.0.12
+      pino-std-serializers: 3.2.0
+      process-warning: 1.0.0
+      quick-format-unescaped: 4.0.4
+      sonic-boom: 1.4.1
+
   pkg-types@1.3.1:
     dependencies:
       confbox: 0.1.8
@@ -7016,6 +8201,8 @@ snapshots:
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
+  pngjs@5.0.0: {}
+
   postcss-selector-parser@7.1.1:
     dependencies:
       cssesc: 3.0.0
@@ -7053,6 +8240,8 @@ snapshots:
 
   proc-log@5.0.0: {}
 
+  process-warning@1.0.0: {}
+
   progress@2.0.3: {}
 
   promise-retry@2.0.1:
@@ -7066,6 +8255,13 @@ snapshots:
       retry: 0.12.0
       signal-exit: 3.0.7
 
+  proxy-addr@2.0.7:
+    dependencies:
+      forwarded: 0.2.0
+      ipaddr.js: 1.9.1
+
+  proxy-from-env@2.1.0: {}
+
   pump@3.0.4:
     dependencies:
       end-of-stream: 1.4.5
@@ -7073,12 +8269,44 @@ snapshots:
 
   punycode@2.3.1: {}
 
+  qrcode@1.5.4:
+    dependencies:
+      dijkstrajs: 1.0.3
+      pngjs: 5.0.0
+      yargs: 15.4.1
+
+  qs@6.14.2:
+    dependencies:
+      side-channel: 1.1.0
+
+  qs@6.15.1:
+    dependencies:
+      side-channel: 1.1.0
+
   quansync@0.2.11: {}
 
   quansync@1.0.0: {}
 
+  quick-format-unescaped@4.0.4: {}
+
   quick-lru@5.1.1: {}
 
+  range-parser@1.2.1: {}
+
+  raw-body@2.5.3:
+    dependencies:
+      bytes: 3.1.2
+      http-errors: 2.0.1
+      iconv-lite: 0.4.24
+      unpipe: 1.0.0
+
+  raw-body@3.0.2:
+    dependencies:
+      bytes: 3.1.2
+      http-errors: 2.0.1
+      iconv-lite: 0.7.2
+      unpipe: 1.0.0
+
   rc@1.2.8:
     dependencies:
       deep-extend: 0.6.0
@@ -7120,6 +8348,8 @@ snapshots:
 
   require-directory@2.1.1: {}
 
+  require-main-filename@2.0.0: {}
+
   resedit@1.7.2:
     dependencies:
       pe-library: 0.4.1
@@ -7193,8 +8423,20 @@ snapshots:
       '@rollup/rollup-win32-x64-msvc': 4.60.1
       fsevents: 2.3.3
 
+  router@2.2.0:
+    dependencies:
+      debug: 4.4.3
+      depd: 2.0.0
+      is-promise: 4.0.0
+      parseurl: 1.3.3
+      path-to-regexp: 8.4.2
+    transitivePeerDependencies:
+      - supports-color
+
   safe-buffer@5.2.1: {}
 
+  safe-decode-uri-component@1.2.1: {}
+
   safer-buffer@2.1.2: {}
 
   sanitize-filename@1.6.4:
@@ -7205,6 +8447,8 @@ snapshots:
 
   scule@1.3.0: {}
 
+  secure-json-parse@2.7.0: {}
+
   semver-compare@1.0.0:
     optional: true
 
@@ -7214,17 +8458,101 @@ snapshots:
 
   semver@7.7.4: {}
 
+  send@0.19.2:
+    dependencies:
+      debug: 2.6.9
+      depd: 2.0.0
+      destroy: 1.2.0
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 0.5.2
+      http-errors: 2.0.1
+      mime: 1.6.0
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.2.1
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
+  send@1.2.1:
+    dependencies:
+      debug: 4.4.3
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      etag: 1.8.1
+      fresh: 2.0.0
+      http-errors: 2.0.1
+      mime-types: 3.0.2
+      ms: 2.1.3
+      on-finished: 2.4.1
+      range-parser: 1.2.1
+      statuses: 2.0.2
+    transitivePeerDependencies:
+      - supports-color
+
   serialize-error@7.0.1:
     dependencies:
       type-fest: 0.13.1
     optional: true
 
+  serve-static@1.16.3:
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 0.19.2
+    transitivePeerDependencies:
+      - supports-color
+
+  serve-static@2.2.1:
+    dependencies:
+      encodeurl: 2.0.0
+      escape-html: 1.0.3
+      parseurl: 1.3.3
+      send: 1.2.1
+    transitivePeerDependencies:
+      - supports-color
+
+  set-blocking@2.0.0: {}
+
+  setprototypeof@1.2.0: {}
+
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
 
   shebang-regex@3.0.0: {}
 
+  side-channel-list@1.0.1:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-map@1.0.1:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+
+  side-channel-weakmap@1.0.2:
+    dependencies:
+      call-bound: 1.0.4
+      es-errors: 1.3.0
+      get-intrinsic: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-map: 1.0.1
+
+  side-channel@1.1.0:
+    dependencies:
+      es-errors: 1.3.0
+      object-inspect: 1.13.4
+      side-channel-list: 1.0.1
+      side-channel-map: 1.0.1
+      side-channel-weakmap: 1.0.2
+
   signal-exit@3.0.7: {}
 
   signal-exit@4.1.0: {}
@@ -7269,6 +8597,15 @@ snapshots:
       ip-address: 10.1.0
       smart-buffer: 4.2.0
 
+  sonic-boom@1.4.1:
+    dependencies:
+      atomic-sleep: 1.0.0
+      flatstr: 1.0.12
+
+  sonic-boom@2.8.0:
+    dependencies:
+      atomic-sleep: 1.0.0
+
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.21:
@@ -7280,6 +8617,8 @@ snapshots:
 
   speakingurl@14.0.1: {}
 
+  split2@4.2.0: {}
+
   sprintf-js@1.1.3:
     optional: true
 
@@ -7289,6 +8628,12 @@ snapshots:
 
   stat-mode@1.0.0: {}
 
+  statuses@2.0.2: {}
+
+  stream-shift@1.0.3: {}
+
+  streamsearch@1.1.0: {}
+
   string-width@4.2.3:
     dependencies:
       emoji-regex: 8.0.0
@@ -7301,6 +8646,12 @@ snapshots:
       emoji-regex: 9.2.2
       strip-ansi: 7.2.0
 
+  string-width@7.2.0:
+    dependencies:
+      emoji-regex: 10.6.0
+      get-east-asian-width: 1.5.0
+      strip-ansi: 7.2.0
+
   string_decoder@1.3.0:
     dependencies:
       safe-buffer: 5.2.1
@@ -7321,6 +8672,10 @@ snapshots:
     dependencies:
       js-tokens: 9.0.1
 
+  strtok3@10.3.5:
+    dependencies:
+      '@tokenizer/token': 0.3.0
+
   stubborn-fs@2.0.0:
     dependencies:
       stubborn-utils: 1.0.2
@@ -7337,6 +8692,10 @@ snapshots:
     dependencies:
       copy-anything: 4.0.5
 
+  supports-color@5.5.0:
+    dependencies:
+      has-flag: 3.0.0
+
   supports-color@7.2.0:
     dependencies:
       has-flag: 4.0.0
@@ -7393,6 +8752,14 @@ snapshots:
 
   tmp@0.2.5: {}
 
+  toidentifier@1.0.1: {}
+
+  token-types@6.1.2:
+    dependencies:
+      '@borewit/text-codec': 0.2.2
+      '@tokenizer/token': 0.3.0
+      ieee754: 1.2.1
+
   totalist@3.0.1: {}
 
   truncate-utf8-bytes@1.0.2:
@@ -7416,6 +8783,8 @@ snapshots:
     dependencies:
       safe-buffer: 5.2.1
 
+  tunnel@0.0.6: {}
+
   typanion@3.14.0: {}
 
   type-check@0.4.0:
@@ -7425,6 +8794,17 @@ snapshots:
   type-fest@0.13.1:
     optional: true
 
+  type-is@1.6.18:
+    dependencies:
+      media-typer: 0.3.0
+      mime-types: 2.1.35
+
+  type-is@2.0.1:
+    dependencies:
+      content-type: 1.0.5
+      media-typer: 1.1.0
+      mime-types: 3.0.2
+
   type-level-regexp@0.1.17: {}
 
   typescript-eslint@8.58.1(eslint@9.39.4(jiti@2.6.1))(typescript@5.9.3):
@@ -7442,6 +8822,8 @@ snapshots:
 
   ufo@1.6.3: {}
 
+  uint8array-extras@1.5.0: {}
+
   unconfig-core@7.5.0:
     dependencies:
       '@quansync/fs': 1.0.0
@@ -7512,6 +8894,8 @@ snapshots:
       - '@emnapi/runtime'
       - vite
 
+  unpipe@1.0.0: {}
+
   unplugin-auto-import@21.0.0(@vueuse/core@14.2.1(vue@3.5.32(typescript@5.9.3))):
     dependencies:
       local-pkg: 1.1.2
@@ -7578,6 +8962,10 @@ snapshots:
 
   util-deprecate@1.0.2: {}
 
+  utils-merge@1.0.1: {}
+
+  vary@1.1.2: {}
+
   verror@1.10.1:
     dependencies:
       assert-plus: 1.0.0
@@ -7674,6 +9062,8 @@ snapshots:
 
   when-exit@2.1.5: {}
 
+  which-module@2.0.1: {}
+
   which@2.0.2:
     dependencies:
       isexe: 2.0.0
@@ -7682,8 +9072,16 @@ snapshots:
     dependencies:
       isexe: 3.1.5
 
+  win-guid@0.2.1: {}
+
   word-wrap@1.2.5: {}
 
+  wrap-ansi@6.2.0:
+    dependencies:
+      ansi-styles: 4.3.0
+      string-width: 4.2.3
+      strip-ansi: 6.0.1
+
   wrap-ansi@7.0.0:
     dependencies:
       ansi-styles: 4.3.0
@@ -7696,12 +9094,29 @@ snapshots:
       string-width: 5.1.2
       strip-ansi: 7.2.0
 
+  wrap-ansi@9.0.2:
+    dependencies:
+      ansi-styles: 6.2.3
+      string-width: 7.2.0
+      strip-ansi: 7.2.0
+
   wrappy@1.0.2: {}
 
   xml-name-validator@4.0.0: {}
 
+  xml2js@0.6.2:
+    dependencies:
+      sax: 1.6.0
+      xmlbuilder: 11.0.1
+
+  xml@1.0.1: {}
+
+  xmlbuilder@11.0.1: {}
+
   xmlbuilder@15.1.1: {}
 
+  y18n@4.0.3: {}
+
   y18n@5.0.8: {}
 
   yallist@3.1.1: {}
@@ -7712,8 +9127,29 @@ snapshots:
 
   yaml@2.8.3: {}
 
+  yargs-parser@18.1.3:
+    dependencies:
+      camelcase: 5.3.1
+      decamelize: 1.2.0
+
   yargs-parser@21.1.1: {}
 
+  yargs-parser@22.0.0: {}
+
+  yargs@15.4.1:
+    dependencies:
+      cliui: 6.0.0
+      decamelize: 1.2.0
+      find-up: 4.1.0
+      get-caller-file: 2.0.5
+      require-directory: 2.1.1
+      require-main-filename: 2.0.0
+      set-blocking: 2.0.0
+      string-width: 4.2.3
+      which-module: 2.0.1
+      y18n: 4.0.3
+      yargs-parser: 18.1.3
+
   yargs@17.7.2:
     dependencies:
       cliui: 8.0.1
@@ -7724,6 +9160,15 @@ snapshots:
       y18n: 5.0.8
       yargs-parser: 21.1.1
 
+  yargs@18.0.0:
+    dependencies:
+      cliui: 9.0.1
+      escalade: 3.2.0
+      get-caller-file: 2.0.5
+      string-width: 7.2.0
+      y18n: 5.0.8
+      yargs-parser: 22.0.0
+
   yauzl@2.10.0:
     dependencies:
       buffer-crc32: 0.2.13
diff --git a/shared/types/netease.ts b/shared/types/netease.ts
new file mode 100644
index 0000000..6bf4262
--- /dev/null
+++ b/shared/types/netease.ts
@@ -0,0 +1,16 @@
+/** Netease API 通用响应包装 */
+export type NeteaseCallResponse =
+  | { ok: true; status: number; body: unknown }
+  | { ok: false; error: string };
+
+/** 渲染端 Netease API */
+export interface NeteaseApi {
+  /**
+   * 调用任意 Netease 接口
+   * @param name 接口名（见 `@neteasecloudmusicapienhanced/api` 的 interface.d.ts）
+   * @param params 接口参数；无需传 cookie，主进程会自动注入
+   */
+  call: (name: string, params?: Record<string, unknown>) => Promise<NeteaseCallResponse>;
+  /** 清空登录态 cookie（主进程端） */
+  clearCookie: () => Promise<void>;
+}
diff --git a/src/apis/netease.ts b/src/apis/netease.ts
new file mode 100644
index 0000000..7c6feb5
--- /dev/null
+++ b/src/apis/netease.ts
@@ -0,0 +1,55 @@
+/**
+ * Netease API 渲染端
+ *
+ * 用 Proxy 把所有接口代理到主进程：`netease.search({keywords})` 实际等于
+ * `window.api.netease.call("search", {keywords})`。
+ *
+ * 调用约定：成功 → 返回 body；失败 → 抛 Error。
+ * 想取原始响应（含 HTTP status）用 `neteaseRaw`。
+ */
+
+import type { NeteaseCallResponse } from "@shared/types/netease";
+
+/**
+ * 调用 Netease API，返回原始响应
+ * @param name 接口名
+ * @param params 接口参数
+ * @returns 原始响应
+ */
+export const neteaseRaw = async (
+  name: string,
+  params?: Record<string, unknown>,
+): Promise<{ status: number; body: unknown }> => {
+  const res: NeteaseCallResponse = await window.api.netease.call(name, params);
+  if (!res.ok) throw new Error(res.error);
+  return { status: res.status, body: res.body };
+};
+
+/**
+ * 调用 Netease API，只返回 body
+ * @param name 接口名
+ * @param params 接口参数
+ * @returns body
+ */
+export const neteaseCall = async <T = unknown>(
+  name: string,
+  params?: Record<string, unknown>,
+): Promise<T> => {
+  const res = await neteaseRaw(name, params);
+  return res.body as T;
+};
+
+type NeteaseProxy = Record<string, <T = unknown>(params?: Record<string, unknown>) => Promise<T>>;
+
+/**
+ * 任意方法调用：`netease.search(...)` / `netease.song_url_v1(...)`
+ * @param name 接口名
+ * @param params 接口参数
+ * @returns body
+ */
+export const netease: NeteaseProxy = new Proxy({} as NeteaseProxy, {
+  get:
+    (_t, name: string) =>
+    <T = unknown>(params?: Record<string, unknown>) =>
+      neteaseCall<T>(name, params),
+});
diff --git a/src/pages/Home.vue b/src/pages/Home.vue
index cfadbaf..27a3619 100644
--- a/src/pages/Home.vue
+++ b/src/pages/Home.vue
@@ -1,10 +1,57 @@
 <script setup lang="ts">
 import { useThemeStore } from "@/stores/theme";
 import { toast } from "@/composables/useToast";
+import { netease } from "@/apis/netease";
 import type { ThemeSource } from "@/types/theme";
 
 const theme = useThemeStore();
 
+/** Netease 搜索测试 */
+interface NeteaseSearchSong {
+  id: number;
+  name: string;
+  artists?: { name: string }[];
+  album?: { name: string };
+  duration?: number;
+}
+interface NeteaseSearchBody {
+  code: number;
+  result?: { songs?: NeteaseSearchSong[]; songCount?: number };
+  message?: string;
+}
+const searchKeyword = ref("告白气球");
+const searchLoading = ref(false);
+const searchError = ref("");
+const searchSongs = ref<NeteaseSearchSong[]>([]);
+const searchCount = ref(0);
+
+const handleSearch = async (): Promise<void> => {
+  const kw = searchKeyword.value.trim();
+  if (!kw) return;
+  searchLoading.value = true;
+  searchError.value = "";
+  try {
+    const body = await netease.search<NeteaseSearchBody>({ keywords: kw, limit: 10 });
+    if (body.code !== 200) {
+      searchError.value = body.message ?? `code=${body.code}`;
+      searchSongs.value = [];
+      searchCount.value = 0;
+      return;
+    }
+    searchSongs.value = body.result?.songs ?? [];
+    searchCount.value = body.result?.songCount ?? 0;
+  } catch (err) {
+    searchError.value = err instanceof Error ? err.message : String(err);
+    searchSongs.value = [];
+    searchCount.value = 0;
+  } finally {
+    searchLoading.value = false;
+  }
+};
+
+const formatArtists = (song: NeteaseSearchSong): string =>
+  song.artists?.map((a) => a.name).join(" / ") ?? "";
+
 /** 按钮加载状态演示 */
 const btnLoading = ref(false);
 
@@ -495,5 +542,55 @@ const testLoadingToast = (): void => {
         </STabs>
       </div>
     </div>
+
+    <!-- Netease 搜索测试 -->
+    <div class="w-full rounded-xl border border-solid border-outline-variant/40 p-4 space-y-3">
+      <div class="flex items-center justify-between">
+        <h3 class="text-sm font-semibold text-on-surface">Netease 搜索测试</h3>
+        <span v-if="searchCount > 0" class="text-xs text-on-surface-variant">
+          共 {{ searchCount }} 条
+        </span>
+      </div>
+      <div class="flex gap-2">
+        <SInput
+          v-model="searchKeyword"
+          placeholder="输入关键词"
+          clearable
+          class="flex-1"
+          @keydown.enter="handleSearch"
+        />
+        <SButton type="primary" :loading="searchLoading" @click="handleSearch">
+          <template #icon>
+            <IconLucideSearch class="size-4" />
+          </template>
+          搜索
+        </SButton>
+      </div>
+      <div v-if="searchError" class="rounded-md bg-red-500/10 px-2 py-1.5 text-xs text-red-500">
+        {{ searchError }}
+      </div>
+      <ul v-if="searchSongs.length > 0" class="flex flex-col gap-1.5 list-none p-0 m-0">
+        <li
+          v-for="song in searchSongs"
+          :key="song.id"
+          class="flex items-center gap-3 rounded-lg bg-on-surface/5 px-3 py-2"
+        >
+          <div class="flex-1 min-w-0">
+            <div class="text-sm text-on-surface truncate">{{ song.name }}</div>
+            <div class="text-xs text-on-surface-variant truncate">
+              {{ formatArtists(song) }}
+              <template v-if="song.album?.name"> · {{ song.album.name }}</template>
+            </div>
+          </div>
+          <span class="text-xs text-on-surface-variant/60 font-mono">{{ song.id }}</span>
+        </li>
+      </ul>
+      <div
+        v-else-if="!searchLoading && !searchError"
+        class="py-4 text-center text-xs text-on-surface-variant/50"
+      >
+        输入关键词并点击搜索
+      </div>
+    </div>
   </div>
 </template>
diff --git a/src/stores/user.ts b/src/stores/user.ts
new file mode 100644
index 0000000..ea5fd57
--- /dev/null
+++ b/src/stores/user.ts
@@ -0,0 +1,92 @@
+/**
+ * 用户登录态 Store
+ *
+ * - cookie 由主进程维护，这里只缓存"展示用"的 profile
+ * - `isLoggedIn` 由 `profile != null` 派生
+ * - 启动时通过 `fetchStatus()` 向 Netease 校验 cookie 是否仍有效
+ */
+
+import { neteaseCall } from "@/apis/netease";
+
+/** 用户基础资料（对齐 Netease /login/status 返回的关键字段） */
+export interface UserProfile {
+  userId: number;
+  nickname: string;
+  avatarUrl?: string;
+  backgroundUrl?: string;
+  signature?: string;
+  /** 0=普通会员，非 0=黑胶 VIP（具体级别见官方文档） */
+  vipType?: number;
+  gender?: number;
+  province?: number;
+  city?: number;
+}
+
+interface LoginStatusBody {
+  data?: {
+    code?: number;
+    account?: { id?: number } | null;
+    profile?: (Partial<UserProfile> & { userId?: number }) | null;
+  };
+}
+
+export const useUserStore = defineStore(
+  "user",
+  () => {
+    const profile = ref<UserProfile | null>(null);
+    const isLoggedIn = computed(() => profile.value !== null);
+
+    /** 用给定 profile 填充登录态（一般由登录成功回调调用） */
+    const setProfile = (p: UserProfile | null): void => {
+      profile.value = p;
+    };
+
+    /** 调 /login/status 校验 cookie 并同步最新 profile；失效则清空 */
+    const fetchStatus = async (): Promise<boolean> => {
+      try {
+        const body = await neteaseCall<LoginStatusBody>("login_status");
+        const data = body?.data;
+        const p = data?.profile;
+        if (p?.userId) {
+          profile.value = {
+            userId: p.userId,
+            nickname: p.nickname ?? "",
+            avatarUrl: p.avatarUrl,
+            backgroundUrl: p.backgroundUrl,
+            signature: p.signature,
+            vipType: p.vipType,
+            gender: p.gender,
+            province: p.province,
+            city: p.city,
+          };
+          return true;
+        }
+        profile.value = null;
+        return false;
+      } catch {
+        // 网络失败时保留缓存的 profile，不强制登出（离线可用性）
+        return profile.value !== null;
+      }
+    };
+
+    /** 登出：服务端清会话 + 主进程清 cookie + 本地清 profile */
+    const logout = async (): Promise<void> => {
+      try {
+        await neteaseCall("logout");
+      } catch {
+        /* 忽略：即使服务端登出失败也要清本地 */
+      }
+      await window.api.netease.clearCookie();
+      profile.value = null;
+    };
+
+    return { profile, isLoggedIn, setProfile, fetchStatus, logout };
+  },
+  {
+    persist: {
+      storage: localStorage,
+      // 只持久化 profile；cookie 在主进程自管
+      pick: ["profile"],
+    },
+  },
+);
diff --git a/src/utils/lyric/parseTimeline.ts b/src/utils/lyric/parseTimeline.ts
index fd3495a..7e56a0a 100644
--- a/src/utils/lyric/parseTimeline.ts
+++ b/src/utils/lyric/parseTimeline.ts
@@ -3,7 +3,7 @@
  *
  * 两种格式共享相同的行头结构 [起始ms,时长ms]，仅逐字部分的排列顺序不同：
  * - QRC（QQ 音乐）：文字(起始ms,时长ms) → 文字在前，时间在后
- * - YRC（网易云）：(起始ms,时长ms,0)文字 → 时间在前，文字在后
+ * - YRC (Netease)：(起始ms,时长ms,0)文字 → 时间在前，文字在后
  *
  * QRC 额外支持 XML 包裹（LyricContent 属性或 CDATA 段）
  */
@@ -100,7 +100,7 @@ export const parseQRC = (text: string): LyricLine[] => {
 };
 
 /**
- * 解析 YRC（网易云）歌词
+ * 解析 YRC (Netease) 歌词
  * 格式：[0,3000](0,500,0)Counting(500,500,0) Stars
  * @param text YRC 文本内容
  */
diff --git a/tsconfig.node.json b/tsconfig.node.json
index 163f932..7c16fc7 100644
--- a/tsconfig.node.json
+++ b/tsconfig.node.json
@@ -3,7 +3,6 @@
   "include": [
     "electron.vite.config.*",
     "electron/main/**/*",
-    "electron/server/**/*",
     "electron/preload/**/*",
     "scripts/**/*",
     "shared/**/*"
@@ -13,7 +12,6 @@
     "types": ["electron-vite/node"],
     "paths": {
       "@main/*": ["./electron/main/*"],
-      "@server/*": ["./electron/server/*"],
       "@shared/*": ["./shared/*"],
       "@splayer/audio-engine": ["./native/audio-engine"],
       "@splayer/media-ctrl": ["./native/media-ctrl"],

From 0dc1623a77c05545f701e5cebf8b5139862f9e02 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Tue, 21 Apr 2026 22:12:51 +0800
Subject: [PATCH 07/17] =?UTF-8?q?=E6=94=B9=E4=B8=BA=E5=86=85=E7=BD=AE=20NC?=
 =?UTF-8?q?M=20API?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron.vite.config.ts                       |    3 -
 electron/main/apis/netease.ts                 |  105 --
 electron/main/apis/netease/core/cache.ts      |   96 ++
 electron/main/apis/netease/core/config.ts     |   77 +
 electron/main/apis/netease/core/cookie.ts     |   30 +
 electron/main/apis/netease/core/crypto.ts     |  154 ++
 electron/main/apis/netease/core/device.ts     |   29 +
 electron/main/apis/netease/core/option.ts     |   47 +
 electron/main/apis/netease/core/request.ts    |  265 ++++
 electron/main/apis/netease/core/types.ts      |   13 +
 electron/main/apis/netease/index.ts           |  133 ++
 .../main/apis/netease/modules/captcha_sent.ts |   17 +
 .../apis/netease/modules/captcha_verify.ts    |   17 +
 .../main/apis/netease/modules/cloudsearch.ts  |   19 +
 electron/main/apis/netease/modules/index.ts   |   79 +
 electron/main/apis/netease/modules/login.ts   |   42 +
 .../apis/netease/modules/login_cellphone.ts   |   41 +
 .../apis/netease/modules/login_qr_check.ts    |   24 +
 .../apis/netease/modules/login_qr_create.ts   |   22 +
 .../main/apis/netease/modules/login_qr_key.ts |   17 +
 .../apis/netease/modules/login_refresh.ts     |   21 +
 .../main/apis/netease/modules/login_status.ts |   21 +
 electron/main/apis/netease/modules/logout.ts  |   11 +
 .../netease/modules/register_anonimous.ts     |   44 +
 electron/main/apis/netease/modules/search.ts  |   29 +
 .../apis/netease/modules/search_default.ts    |   11 +
 .../main/apis/netease/modules/search_hot.ts   |   11 +
 .../apis/netease/modules/search_hot_detail.ts |   11 +
 .../main/apis/netease/modules/search_match.ts |   22 +
 .../apis/netease/modules/search_multimatch.ts |   16 +
 .../apis/netease/modules/search_suggest.ts    |   14 +
 .../apis/netease/modules/search_suggest_pc.ts |   13 +
 .../main/apis/netease/modules/user_account.ts |   11 +
 .../main/apis/netease/modules/user_cloud.ts   |   16 +
 .../main/apis/netease/modules/user_detail.ts  |   14 +
 .../apis/netease/modules/user_detail_new.ts   |   13 +
 .../apis/netease/modules/user_followeds.ts    |   19 +
 .../main/apis/netease/modules/user_follows.ts |   17 +
 .../main/apis/netease/modules/user_level.ts   |   11 +
 .../apis/netease/modules/user_playlist.ts     |   18 +
 .../main/apis/netease/modules/user_record.ts  |   17 +
 .../apis/netease/modules/user_subcount.ts     |   11 +
 package.json                                  |    1 -
 pnpm-lock.yaml                                | 1406 -----------------
 44 files changed, 1493 insertions(+), 1515 deletions(-)
 delete mode 100644 electron/main/apis/netease.ts
 create mode 100644 electron/main/apis/netease/core/cache.ts
 create mode 100644 electron/main/apis/netease/core/config.ts
 create mode 100644 electron/main/apis/netease/core/cookie.ts
 create mode 100644 electron/main/apis/netease/core/crypto.ts
 create mode 100644 electron/main/apis/netease/core/device.ts
 create mode 100644 electron/main/apis/netease/core/option.ts
 create mode 100644 electron/main/apis/netease/core/request.ts
 create mode 100644 electron/main/apis/netease/core/types.ts
 create mode 100644 electron/main/apis/netease/index.ts
 create mode 100644 electron/main/apis/netease/modules/captcha_sent.ts
 create mode 100644 electron/main/apis/netease/modules/captcha_verify.ts
 create mode 100644 electron/main/apis/netease/modules/cloudsearch.ts
 create mode 100644 electron/main/apis/netease/modules/index.ts
 create mode 100644 electron/main/apis/netease/modules/login.ts
 create mode 100644 electron/main/apis/netease/modules/login_cellphone.ts
 create mode 100644 electron/main/apis/netease/modules/login_qr_check.ts
 create mode 100644 electron/main/apis/netease/modules/login_qr_create.ts
 create mode 100644 electron/main/apis/netease/modules/login_qr_key.ts
 create mode 100644 electron/main/apis/netease/modules/login_refresh.ts
 create mode 100644 electron/main/apis/netease/modules/login_status.ts
 create mode 100644 electron/main/apis/netease/modules/logout.ts
 create mode 100644 electron/main/apis/netease/modules/register_anonimous.ts
 create mode 100644 electron/main/apis/netease/modules/search.ts
 create mode 100644 electron/main/apis/netease/modules/search_default.ts
 create mode 100644 electron/main/apis/netease/modules/search_hot.ts
 create mode 100644 electron/main/apis/netease/modules/search_hot_detail.ts
 create mode 100644 electron/main/apis/netease/modules/search_match.ts
 create mode 100644 electron/main/apis/netease/modules/search_multimatch.ts
 create mode 100644 electron/main/apis/netease/modules/search_suggest.ts
 create mode 100644 electron/main/apis/netease/modules/search_suggest_pc.ts
 create mode 100644 electron/main/apis/netease/modules/user_account.ts
 create mode 100644 electron/main/apis/netease/modules/user_cloud.ts
 create mode 100644 electron/main/apis/netease/modules/user_detail.ts
 create mode 100644 electron/main/apis/netease/modules/user_detail_new.ts
 create mode 100644 electron/main/apis/netease/modules/user_followeds.ts
 create mode 100644 electron/main/apis/netease/modules/user_follows.ts
 create mode 100644 electron/main/apis/netease/modules/user_level.ts
 create mode 100644 electron/main/apis/netease/modules/user_playlist.ts
 create mode 100644 electron/main/apis/netease/modules/user_record.ts
 create mode 100644 electron/main/apis/netease/modules/user_subcount.ts

diff --git a/electron.vite.config.ts b/electron.vite.config.ts
index d41b0c9..fb64815 100644
--- a/electron.vite.config.ts
+++ b/electron.vite.config.ts
@@ -19,9 +19,6 @@ export default defineConfig({
           // 插件沙箱 worker（utilityProcess 入口）
           "sandbox.worker": resolve(__dirname, "electron/main/plugins/sandbox.worker.ts"),
         },
-        // Netease API 包内部用 fs.readdirSync 动态加载 module/*.js，
-        // 无法被 rollup 打包，必须标记为外部依赖由 node_modules 运行时解析
-        external: ["@neteasecloudmusicapienhanced/api"],
       },
     },
     resolve: {
diff --git a/electron/main/apis/netease.ts b/electron/main/apis/netease.ts
deleted file mode 100644
index 0b32d70..0000000
--- a/electron/main/apis/netease.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-/**
- * Netease API 主进程服务
- *
- * - 把 `@neteasecloudmusicapienhanced/api` 当 Node 库直接调（不起 HTTP server）
- * - 统一入口 `callNetease(name, params)`：查函数 → 注入 cookie → 调用
- */
-
-import { createRequire } from "node:module";
-import {
-  getSessionCookies,
-  saveSessionCookies,
-  clearSessionCookies,
-} from "@main/database/sessions";
-
-/** 该包是纯 CJS 且 exports 通过 fs.readdirSync 动态填充，ESM 的 `import *`
- * 只能拿到静态检测的 named exports。用 createRequire 直接拿 module.exports。 */
-const require = createRequire(import.meta.url);
-const NeteaseApi = require("@neteasecloudmusicapienhanced/api") as Record<string, unknown>;
-
-/** Netease API 函数签名 */
-type NeteaseFn = (query: Record<string, unknown>) => Promise<{
-  status: number;
-  body: unknown;
-  cookie?: string[];
-}>;
-
-/** 内存缓存：避免每次 callNetease 都走一次 SELECT */
-let cache: Record<string, string> | null = null;
-
-/**
- * 加载 cookies
- * @returns cookies
- */
-const load = (): Record<string, string> => {
-  if (!cache) cache = getSessionCookies("netease");
-  return cache;
-};
-
-/**
- * 持久化 cookies
- * @param cookies cookies
- */
-const persist = (cookies: Record<string, string>): void => {
-  cache = cookies;
-  saveSessionCookies("netease", cookies);
-};
-
-/**
- * 序列化 cookies
- * @param c cookies
- * @returns cookies string
- */
-const serialize = (c: Record<string, string>): string =>
-  Object.entries(c)
-    .map(([k, v]) => `${k}=${v}`)
-    .join("; ");
-
-/**
- * 读当前 cookies（调用方如需可用于派生登录态）
- * @returns cookies
- */
-export const getNeteaseCookies = (): Record<string, string> => ({ ...load() });
-
-/**
- * 整体替换 cookies（登出或重置场景）
- * @param cookies cookies
- */
-export const setNeteaseCookies = (cookies: Record<string, string>): void => {
-  persist(cookies);
-};
-
-/**
- * 增量合并 cookies（登录成功拿到 MUSIC_U 时用）
- * @param patch cookies
- */
-export const mergeNeteaseCookies = (patch: Record<string, string>): void => {
-  persist({ ...load(), ...patch });
-};
-
-/** 清空 cookies */
-export const clearNeteaseCookies = (): void => {
-  cache = {};
-  clearSessionCookies("netease");
-};
-
-/**
- * 调用任意Netease API
- * @param name interface.d.ts 中声明的方法名（如 `search` / `song_url_v1` / `lyric`）
- * @param params 接口参数；无需传 cookie，服务会自动注入
- */
-export const callNetease = async (
-  name: string,
-  params: Record<string, unknown> = {},
-): Promise<{ status: number; body: unknown }> => {
-  const fn = NeteaseApi[name];
-  if (typeof fn !== "function") {
-    throw new Error(`unknown netease api: ${name}`);
-  }
-  const cookieStr = serialize(load());
-  const res = await (fn as NeteaseFn)({
-    ...params,
-    cookie: cookieStr || undefined,
-  });
-  return { status: res.status, body: res.body };
-};
diff --git a/electron/main/apis/netease/core/cache.ts b/electron/main/apis/netease/core/cache.ts
new file mode 100644
index 0000000..778d511
--- /dev/null
+++ b/electron/main/apis/netease/core/cache.ts
@@ -0,0 +1,96 @@
+/**
+ * 接口响应内存缓存
+ *
+ * 对齐原 @neteasecloudmusicapienhanced/api util/apicache.js 的行为：
+ * - 默认 2 分钟 TTL
+ * - 只缓存 status === 200 的响应
+ * - key = `${name}|${md5(params)}|${MUSIC_U}`（带 session 维度，避免跨账号污染）
+ *
+ * 变化点：接入调用层（index.ts 的 callNetease），而不是 Express 中间件
+ */
+
+import { createHash } from "node:crypto";
+
+/** 默认 TTL：2 分钟 */
+const DEFAULT_TTL = 2 * 60 * 1000;
+
+/** 容量上限：超过后 LRU 淘汰 */
+const MAX_ENTRIES = 200;
+
+interface CacheEntry {
+  value: { status: number; body: unknown };
+  expireAt: number;
+}
+
+const store = new Map<string, CacheEntry>();
+
+/** 这些接口绝不缓存 */
+const BYPASS: ReadonlySet<string> = new Set([
+  "login",
+  "login_cellphone",
+  "login_status",
+  "login_refresh",
+  "login_qr_key",
+  "login_qr_create",
+  "login_qr_check",
+  "logout",
+  "captcha_sent",
+  "captcha_verify",
+  "register_anonimous",
+  "user_account",
+]);
+
+/** 快速稳定 hash：JSON.stringify + md5 8 位前缀 */
+const hash = (params: unknown): string =>
+  createHash("md5")
+    .update(JSON.stringify(params ?? {}))
+    .digest("hex")
+    .slice(0, 8);
+
+/** 构造缓存 key；musicU 隔离不同登录态 */
+export const buildCacheKey = (name: string, params: unknown, musicU: string): string =>
+  `${name}|${hash(params)}|${musicU || "_"}`;
+
+/** 该接口是否可缓存 */
+export const isCacheable = (name: string): boolean => !BYPASS.has(name);
+
+/**
+ * 获取缓存
+ * @param key 缓存 key
+ * @returns 缓存 value
+ */
+export const cacheGet = (key: string): CacheEntry["value"] | undefined => {
+  const hit = store.get(key);
+  if (!hit) return undefined;
+  if (hit.expireAt <= Date.now()) {
+    store.delete(key);
+    return undefined;
+  }
+  // LRU：命中时重新插入到末尾
+  store.delete(key);
+  store.set(key, hit);
+  return hit.value;
+};
+
+/**
+ * 设置缓存
+ * @param key 缓存 key
+ * @param value 缓存 value
+ * @param ttl 缓存 TTL
+ */
+export const cacheSet = (
+  key: string,
+  value: CacheEntry["value"],
+  ttl: number = DEFAULT_TTL,
+): void => {
+  if (store.size >= MAX_ENTRIES) {
+    const oldest = store.keys().next().value;
+    if (oldest !== undefined) store.delete(oldest);
+  }
+  store.set(key, { value, expireAt: Date.now() + ttl });
+};
+
+/** 清空全部 */
+export const cacheClear = (): void => {
+  store.clear();
+};
diff --git a/electron/main/apis/netease/core/config.ts b/electron/main/apis/netease/core/config.ts
new file mode 100644
index 0000000..71d6270
--- /dev/null
+++ b/electron/main/apis/netease/core/config.ts
@@ -0,0 +1,77 @@
+/**
+ * Netease API 通用常量
+ * 来源：@neteasecloudmusicapienhanced/api util/crypto.js + util/request.js + util/config.json
+ */
+
+/** AES-CBC 初始向量 */
+export const IV = "0102030405060708";
+/** weapi 第一层 AES 预设密钥 */
+export const PRESET_KEY = "0CoJUm6Qyw8W8jud";
+/** linuxapi AES 密钥 */
+export const LINUX_API_KEY = "rFgB&h#%2?^eDg:Q";
+/** eapi AES 密钥 */
+export const EAPI_KEY = "e82ckenh8dichen8";
+/** weapi 随机 secretKey 字符集 */
+export const BASE62 = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789";
+/** weapi RSA 公钥（1024bit） */
+export const PUBLIC_KEY = `-----BEGIN PUBLIC KEY-----
+MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDgtQn2JZ34ZC28NWYpAUd98iZ37BUrX/aKzmFbt7clFSs6sXqHauqKWqdtLkF2KexO40H1YTX8z2lSgBBOAxLsvaklV8k4cBFK9snQXE9/DDaFt6Rr7iVZMldczhC0JNgTz+SHXT6CBHuX3e9SdB1Ua44oncaTWz7OBGLbCiK45wIDAQAB
+-----END PUBLIC KEY-----`;
+
+/** web 域名（weapi） */
+export const DOMAIN = "https://music.163.com";
+/** 客户端接口域名（api/eapi） */
+export const API_DOMAIN = "https://interface.music.163.com";
+/** 是否默认对响应体做 eapi 加密（e_r） */
+export const ENCRYPT_RESPONSE = false;
+
+/** 这些业务码视作 HTTP 200 成功（接口层的登录/重定向/限流语义） */
+export const SPECIAL_STATUS_CODES: ReadonlySet<number> = new Set([201, 302, 400, 502, 800, 801, 802, 803]);
+
+/** 客户端伪装：不同 os 标识对应的 appver / osver / channel */
+export const OS_MAP = {
+  pc: {
+    os: "pc",
+    appver: "3.1.17.204416",
+    osver: "Microsoft-Windows-10-Professional-build-19045-64bit",
+    channel: "netease",
+  },
+  linux: {
+    os: "linux",
+    appver: "1.2.1.0428",
+    osver: "Deepin 20.9",
+    channel: "netease",
+  },
+  android: {
+    os: "android",
+    appver: "8.20.20.231215173437",
+    osver: "14",
+    channel: "xiaomi",
+  },
+  iphone: {
+    os: "iPhone OS",
+    appver: "9.0.90",
+    osver: "16.2",
+    channel: "distribution",
+  },
+} as const;
+
+/** 不同加密方式 + 设备类型下的 User-Agent */
+export const UA_MAP = {
+  weapi: {
+    pc: "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/124.0.0.0 Safari/537.36 Edg/124.0.0.0",
+  },
+  linuxapi: {
+    linux:
+      "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/60.0.3112.90 Safari/537.36",
+  },
+  api: {
+    pc: "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Safari/537.36 Chrome/91.0.4472.164 NeteaseMusicDesktop/3.0.18.203152",
+    android:
+      "NeteaseMusic/9.1.65.240927161425(9001065);Dalvik/2.1.0 (Linux; U; Android 14; 23013RK75C Build/UKQ1.230804.001)",
+    iphone: "NeteaseMusic 9.0.90/5038 (iPhone; iOS 16.2; zh_CN)",
+  },
+} as const;
+
+/** 支持的加密方式 */
+export type CryptoMode = "weapi" | "linuxapi" | "eapi" | "api";
diff --git a/electron/main/apis/netease/core/cookie.ts b/electron/main/apis/netease/core/cookie.ts
new file mode 100644
index 0000000..8c177fb
--- /dev/null
+++ b/electron/main/apis/netease/core/cookie.ts
@@ -0,0 +1,30 @@
+/**
+ * Cookie 解析与拼装
+ * 对齐 @neteasecloudmusicapienhanced/api util/index.js 中的 cookieToJson / cookieObjToString
+ */
+
+/**
+ * 将 cookie 字符串转换为对象
+ * @param cookie cookie 字符串
+ * @returns 对象
+ */
+export const cookieToJson = (cookie: string | undefined): Record<string, string> => {
+  if (!cookie) return {};
+  const obj: Record<string, string> = {};
+  for (const item of cookie.split(";")) {
+    const eq = item.indexOf("=");
+    if (eq <= 0) continue;
+    obj[item.slice(0, eq).trim()] = item.slice(eq + 1).trim();
+  }
+  return obj;
+};
+
+/**
+ * 将对象转换为 cookie 字符串
+ * @param cookie 对象
+ * @returns cookie 字符串
+ */
+export const cookieObjToString = (cookie: Record<string, string | number | boolean>): string =>
+  Object.keys(cookie)
+    .map((key) => `${encodeURIComponent(key)}=${encodeURIComponent(String(cookie[key]))}`)
+    .join("; ");
diff --git a/electron/main/apis/netease/core/crypto.ts b/electron/main/apis/netease/core/crypto.ts
new file mode 100644
index 0000000..ea154c5
--- /dev/null
+++ b/electron/main/apis/netease/core/crypto.ts
@@ -0,0 +1,154 @@
+/**
+ * Netease API 加解密层（完整移植自 @neteasecloudmusicapienhanced/api util/crypto.js）
+ *
+ * - 三套加密：weapi（web 端）、linuxapi（Linux 客户端）、eapi（桌面/移动客户端）
+ * - 对应三把对称密钥 + 一把 RSA 公钥
+ * - 原实现依赖 crypto-js + node-forge，这里用 Node 原生 node:crypto 等价重写
+ */
+
+import {
+  createCipheriv,
+  createDecipheriv,
+  createHash,
+  publicEncrypt,
+  constants,
+  randomInt,
+} from "node:crypto";
+import { gunzipSync } from "node:zlib";
+import { BASE62, EAPI_KEY, IV, LINUX_API_KEY, PRESET_KEY, PUBLIC_KEY } from "./config";
+
+/**
+ * AES 加密
+ * @param text 明文
+ * @param mode 加密模式
+ * @param key 密钥
+ * @param iv 初始化向量
+ * @param format 输出格式
+ * @returns 加密后的文本
+ */
+export const aesEncrypt = (
+  text: string | Buffer,
+  mode: "cbc" | "ecb",
+  key: string,
+  iv: string,
+  format: "base64" | "hex" = "base64",
+): string => {
+  const algorithm = mode === "cbc" ? "aes-128-cbc" : "aes-128-ecb";
+  const ivBuf = mode === "cbc" ? Buffer.from(iv, "utf8") : Buffer.alloc(0);
+  const cipher = createCipheriv(algorithm, Buffer.from(key, "utf8"), ivBuf);
+  const encrypted = Buffer.concat([
+    cipher.update(typeof text === "string" ? Buffer.from(text, "utf8") : text),
+    cipher.final(),
+  ]);
+  return format === "base64"
+    ? encrypted.toString("base64")
+    : encrypted.toString("hex").toUpperCase();
+};
+
+/**
+ * AES 解密
+ * @param ciphertext 密文
+ * @param key 密钥
+ * @param format 输出格式
+ * @returns 解密后的文本
+ */
+export const aesDecrypt = (
+  ciphertext: string,
+  key: string,
+  format: "base64" | "hex" = "base64",
+): Buffer => {
+  const decipher = createDecipheriv("aes-128-ecb", Buffer.from(key, "utf8"), Buffer.alloc(0));
+  const input = Buffer.from(ciphertext, format);
+  return Buffer.concat([decipher.update(input), decipher.final()]);
+};
+
+/**
+ * RSA 加密
+ *
+ * 网易云的 weapi 要求「裸 RSA」：将明文左侧补 0 到 128 字节（1024bit 模长），
+ * 再用公钥做一次模幂运算，输出 hex。node:crypto 的 RSA_NO_PADDING 正好对应
+ */
+export const rsaEncrypt = (str: string, publicKey: string = PUBLIC_KEY): string => {
+  const buffer = Buffer.alloc(128);
+  const data = Buffer.from(str, "utf8");
+  data.copy(buffer, 128 - data.length);
+  const encrypted = publicEncrypt({ key: publicKey, padding: constants.RSA_NO_PADDING }, buffer);
+  return encrypted.toString("hex");
+};
+
+/**
+ * weapi 加密
+ * 1) 生成 16 字节随机 base62 secretKey
+ * 2) 明文经 AES-CBC(PRESET_KEY) 加密一次，再用 secretKey 再加密一次
+ * 3) secretKey 倒序后用 RSA 加密为 encSecKey
+ * @param object 业务参数
+ * @returns 加密后的参数
+ */
+export const weapi = (object: unknown): { params: string; encSecKey: string } => {
+  const text = JSON.stringify(object);
+  let secretKey = "";
+  for (let i = 0; i < 16; i++) {
+    secretKey += BASE62.charAt(randomInt(0, 62));
+  }
+  const first = aesEncrypt(text, "cbc", PRESET_KEY, IV);
+  const params = aesEncrypt(first, "cbc", secretKey, IV);
+  const encSecKey = rsaEncrypt(secretKey.split("").reverse().join(""));
+  return { params, encSecKey };
+};
+
+/**
+ * linuxapi 加密
+ * @param object 业务参数
+ * @returns 加密后的参数
+ */
+export const linuxapi = (object: unknown): { eparams: string } => {
+  const text = JSON.stringify(object);
+  return { eparams: aesEncrypt(text, "ecb", LINUX_API_KEY, "", "hex") };
+};
+
+/**
+ * eapi 加密
+ * 1) 用 url + 明文 + 固定盐拼接后 MD5 作为签名 digest
+ * 2) 整串 `${url}-36cd479b6b5-${text}-36cd479b6b5-${digest}` 经 AES-ECB(hex) 加密
+ * @param url 接口路径
+ * @param object 业务参数
+ * @returns 加密后的参数
+ */
+export const eapi = (url: string, object: unknown): { params: string } => {
+  const text = typeof object === "object" ? JSON.stringify(object) : String(object);
+  const message = `nobody${url}use${text}md5forencrypt`;
+  const digest = createHash("md5").update(message).digest("hex");
+  const data = `${url}-36cd479b6b5-${text}-36cd479b6b5-${digest}`;
+  return { params: aesEncrypt(data, "ecb", EAPI_KEY, "", "hex") };
+};
+
+/**
+ * eapi 响应解密
+ * @param encryptedHex 加密后的文本
+ * @param aeapi 是否是 gzip 压缩的
+ * @returns 解密后的文本
+ */
+export const eapiResDecrypt = (encryptedHex: string, aeapi = false): unknown => {
+  try {
+    const decrypted = aesDecrypt(encryptedHex, EAPI_KEY, "hex");
+    if (aeapi) {
+      const decompressed = gunzipSync(decrypted);
+      return JSON.parse(decompressed.toString("utf8"));
+    }
+    return JSON.parse(decrypted.toString("utf8"));
+  } catch {
+    return null;
+  }
+};
+
+/**
+ * eapi 请求体解密
+ * @param encryptedHex 加密后的文本
+ * @returns 解密后的文本
+ */
+export const eapiReqDecrypt = (encryptedHex: string): { url: string; data: unknown } | null => {
+  const text = aesDecrypt(encryptedHex, EAPI_KEY, "hex").toString("utf8");
+  const match = text.match(/(.*?)-36cd479b6b5-(.*?)-36cd479b6b5-(.*)/);
+  if (!match) return null;
+  return { url: match[1], data: JSON.parse(match[2]) };
+};
diff --git a/electron/main/apis/netease/core/device.ts b/electron/main/apis/netease/core/device.ts
new file mode 100644
index 0000000..65c14ef
--- /dev/null
+++ b/electron/main/apis/netease/core/device.ts
@@ -0,0 +1,29 @@
+/**
+ * 进程级设备信息
+ * - deviceId：52 位大写十六进制字符，进程启动时生成一次
+ * - anonymous token：匿名态下注入 header 的 MUSIC_A（由 register_anonimous 接口返回后刷新）
+ */
+
+import { randomBytes } from "node:crypto";
+
+const generate = (): string => randomBytes(26).toString("hex").toUpperCase();
+
+let deviceId = generate();
+let anonymousToken = "";
+
+export const getDeviceId = (): string => deviceId;
+
+export const setDeviceId = (id: string): void => {
+  deviceId = id;
+};
+
+export const regenerateDeviceId = (): string => {
+  deviceId = generate();
+  return deviceId;
+};
+
+export const getAnonymousToken = (): string => anonymousToken;
+
+export const setAnonymousToken = (token: string): void => {
+  anonymousToken = token;
+};
diff --git a/electron/main/apis/netease/core/option.ts b/electron/main/apis/netease/core/option.ts
new file mode 100644
index 0000000..ccf9888
--- /dev/null
+++ b/electron/main/apis/netease/core/option.ts
@@ -0,0 +1,47 @@
+/**
+ * 请求 options 工厂
+ * 对齐 @neteasecloudmusicapienhanced/api util/option.js：从调用方 query 中抽取
+ * crypto / cookie / ua / proxy / realIP 等，拼成 createRequest 的第三参数
+ */
+
+import type { CryptoMode } from "./config";
+import type { RequestOptions } from "./request";
+
+/** 调用方传入的可选参数 */
+export interface Query {
+  /** 加密方式 */
+  crypto?: CryptoMode;
+  /** 预注入 cookie，可为字符串或对象 */
+  cookie?: string | Record<string, string>;
+  /** 自定义 User-Agent */
+  ua?: string;
+  /** 真实 IP（X-Real-IP / X-Forwarded-For） */
+  realIP?: string;
+  /** 真实 IP（X-Real-IP / X-Forwarded-For） */
+  ip?: string;
+  /** 是否让服务端加密响应体（仅 weapi/eapi 有效） */
+  e_r?: boolean;
+  /** 自定义 Referer/域名覆盖 */
+  domain?: string;
+  /** 强制附加 anti-cheat token（暂未启用） */
+  checkToken?: boolean;
+  /** 其他可选参数 */
+  [key: string]: unknown;
+}
+
+/**
+ * 创建请求 options
+ * @param query 调用方传入的可选参数
+ * @param crypto 加密方式
+ * @returns 请求 options
+ */
+export const createOption = (query: Query, crypto: CryptoMode | "" = ""): RequestOptions => ({
+  crypto: (query.crypto as CryptoMode | undefined) || crypto,
+  cookie: query.cookie,
+  ua: query.ua || "",
+  realIP: query.realIP,
+  ip: query.ip,
+  e_r: query.e_r,
+  domain: query.domain || "",
+  checkToken: query.checkToken || false,
+});
diff --git a/electron/main/apis/netease/core/request.ts b/electron/main/apis/netease/core/request.ts
new file mode 100644
index 0000000..5f4b482
--- /dev/null
+++ b/electron/main/apis/netease/core/request.ts
@@ -0,0 +1,265 @@
+/**
+ * Netease API 请求层（完整移植自 @neteasecloudmusicapienhanced/api util/request.js）
+ *
+ * 核心职责：根据加密方式（weapi / linuxapi / eapi / api）构造 URL、headers、form body，
+ * 处理 cookie 合并、响应解密、状态码归一化。使用 Node 原生 fetch 替代 axios。
+ */
+
+import { randomBytes } from "node:crypto";
+import {
+  API_DOMAIN,
+  DOMAIN,
+  ENCRYPT_RESPONSE,
+  OS_MAP,
+  SPECIAL_STATUS_CODES,
+  UA_MAP,
+  type CryptoMode,
+} from "./config";
+import { cookieObjToString, cookieToJson } from "./cookie";
+import * as encrypt from "./crypto";
+import { getAnonymousToken, getDeviceId } from "./device";
+
+/** 调用方传入的可选参数 */
+export interface RequestOptions {
+  /** 加密方式；省略时依据路径默认规则，详见 createRequest */
+  crypto?: CryptoMode | "";
+  /** 预注入 cookie，可为字符串或对象 */
+  cookie?: string | Record<string, string>;
+  /** 自定义 User-Agent */
+  ua?: string;
+  /** 自定义 Referer/域名覆盖 */
+  domain?: string;
+  /** 真实 IP（X-Real-IP / X-Forwarded-For） */
+  realIP?: string;
+  ip?: string;
+  /** 是否让服务端加密响应体（仅 weapi/eapi 有效） */
+  e_r?: boolean;
+  /** 强制附加 anti-cheat token（暂未启用） */
+  checkToken?: boolean;
+}
+
+/** 响应统一结构 */
+export interface RequestResponse {
+  status: number;
+  body: Record<string, unknown>;
+  cookie: string[];
+}
+
+interface NeteaseBody {
+  code?: number | string;
+  [key: string]: unknown;
+}
+
+/** weapi 专用 CSRF：从 cookie 中取 __csrf */
+const csrfFrom = (cookie: Record<string, string>): string => cookie["__csrf"] || "";
+
+/** 生成 WNMCID（进程级常量）：6 位小写字母.时间戳.01.0 */
+const WNMCID = (() => {
+  const chars = "abcdefghijklmnopqrstuvwxyz";
+  let s = "";
+  for (let i = 0; i < 6; i++) s += chars.charAt(Math.floor(Math.random() * chars.length));
+  return `${s}.${Date.now()}.01.0`;
+})();
+
+/** 每次请求生成：timestamp_XXXX 的递增式 id */
+const generateRequestId = (): string => {
+  const rand = Math.floor(Math.random() * 1000)
+    .toString()
+    .padStart(4, "0");
+  return `${Date.now()}_${rand}`;
+};
+
+/** 补齐 cookie：注入 _ntes_nuid/_ntes_nnid/WNMCID/deviceId/appver 等客户端必备字段 */
+const processCookieObject = (
+  cookie: Record<string, string>,
+  uri: string,
+): Record<string, string> => {
+  const ntesNuid = cookie._ntes_nuid || randomBytes(16).toString("hex");
+  const os = OS_MAP[(cookie.os as keyof typeof OS_MAP) || "pc"] || OS_MAP.pc;
+
+  const processed: Record<string, string> = {
+    ...cookie,
+    __remember_me: "true",
+    ntes_kaola_ad: "1",
+    _ntes_nuid: cookie._ntes_nuid || ntesNuid,
+    _ntes_nnid: cookie._ntes_nnid || `${ntesNuid},${Date.now()}`,
+    WNMCID: cookie.WNMCID || WNMCID,
+    WEVNSM: cookie.WEVNSM || "1.0.0",
+    osver: cookie.osver || os.osver,
+    deviceId: cookie.deviceId || getDeviceId(),
+    os: cookie.os || os.os,
+    channel: cookie.channel || os.channel,
+    appver: cookie.appver || os.appver,
+  };
+
+  // 登录类接口不带 NMTID（服务端要求）
+  if (uri.indexOf("login") === -1) {
+    processed.NMTID = randomBytes(8).toString("hex");
+  }
+
+  if (!processed.MUSIC_U) {
+    processed.MUSIC_A = processed.MUSIC_A || getAnonymousToken();
+    if (!processed.MUSIC_A) delete processed.MUSIC_A;
+  }
+
+  return processed;
+};
+
+/** 根据加密方式 + 设备类型选择 User-Agent */
+const chooseUserAgent = (
+  crypto: keyof typeof UA_MAP,
+  uaType: "pc" | "android" | "iphone" | "linux" = "pc",
+): string => {
+  const map = UA_MAP[crypto] as Record<string, string> | undefined;
+  return (map && map[uaType]) || "";
+};
+
+/**
+ * 构造并发送请求
+ * @param uri   接口路径，例如 `/api/w/login`；weapi 会自动替换前缀为 `/weapi/`
+ * @param data  业务参数（不含 cookie/csrf，请求层会自动注入）
+ * @param options 加密方式 / cookie / 代理等
+ */
+export const createRequest = async (
+  uri: string,
+  data: Record<string, unknown>,
+  options: RequestOptions,
+): Promise<RequestResponse> => {
+  const headers: Record<string, string> = {};
+  const ip = options.realIP || options.ip || "";
+  if (ip) {
+    headers["X-Real-IP"] = ip;
+    headers["X-Forwarded-For"] = ip;
+  }
+
+  // 归一化 cookie 到对象并做一次补全
+  let cookie: Record<string, string> =
+    typeof options.cookie === "string" ? cookieToJson(options.cookie) : options.cookie || {};
+  cookie = processCookieObject(cookie, uri);
+  headers["Cookie"] = cookieObjToString(cookie);
+
+  let crypto: CryptoMode | "" = options.crypto ?? "";
+  if (crypto === "") crypto = "eapi";
+
+  const csrfToken = csrfFrom(cookie);
+  const useER = toBoolean(
+    options.e_r !== undefined ? options.e_r : data.e_r !== undefined ? data.e_r : ENCRYPT_RESPONSE,
+  );
+  data.e_r = useER;
+
+  let url = "";
+  let encryptData: Record<string, string | number | boolean> | unknown = data;
+
+  switch (crypto) {
+    case "weapi": {
+      headers["Referer"] = options.domain || DOMAIN;
+      headers["User-Agent"] = options.ua || chooseUserAgent("weapi");
+      data.csrf_token = csrfToken;
+      encryptData = encrypt.weapi(data);
+      url = (options.domain || DOMAIN) + "/weapi/" + uri.slice(5);
+      break;
+    }
+    case "linuxapi": {
+      headers["User-Agent"] = options.ua || chooseUserAgent("linuxapi", "linux");
+      encryptData = encrypt.linuxapi({
+        method: "POST",
+        url: (options.domain || DOMAIN) + uri,
+        params: data,
+      });
+      url = (options.domain || DOMAIN) + "/api/linux/forward";
+      break;
+    }
+    case "eapi":
+    case "api": {
+      const header: Record<string, string> = {
+        osver: cookie.osver,
+        deviceId: cookie.deviceId,
+        os: cookie.os,
+        appver: cookie.appver,
+        versioncode: cookie.versioncode || "140",
+        mobilename: cookie.mobilename || "",
+        buildver: cookie.buildver || Date.now().toString().slice(0, 10),
+        resolution: cookie.resolution || "1920x1080",
+        __csrf: csrfToken,
+        channel: cookie.channel,
+        requestId: generateRequestId(),
+      };
+      if (cookie.MUSIC_U) header.MUSIC_U = cookie.MUSIC_U;
+      if (cookie.MUSIC_A) header.MUSIC_A = cookie.MUSIC_A;
+      headers["Cookie"] = cookieObjToString(header);
+      headers["User-Agent"] = options.ua || chooseUserAgent("api", "iphone");
+
+      if (crypto === "eapi") {
+        (data as Record<string, unknown>).header = header;
+        encryptData = encrypt.eapi(uri, data);
+        url = (options.domain || API_DOMAIN) + "/eapi/" + uri.slice(5);
+      } else {
+        url = (options.domain || API_DOMAIN) + uri;
+        encryptData = data;
+      }
+      break;
+    }
+    default:
+      throw new Error(`Unknown crypto: ${crypto}`);
+  }
+
+  const body = new URLSearchParams(encryptData as Record<string, string>).toString();
+  headers["Content-Type"] = "application/x-www-form-urlencoded";
+
+  const answer: RequestResponse = { status: 500, body: {}, cookie: [] };
+  const needDecrypt = (crypto === "eapi" || crypto === "weapi") && useER;
+
+  let res: Response;
+  try {
+    res = await fetch(url, { method: "POST", headers, body });
+  } catch (err) {
+    answer.status = 502;
+    answer.body = { code: 502, msg: err instanceof Error ? err.message : String(err) };
+    throw answer;
+  }
+
+  // 收集 set-cookie（Node fetch 通过 headers.getSetCookie 暴露原始多值头）
+  const setCookie =
+    (res.headers as unknown as { getSetCookie?: () => string[] }).getSetCookie?.() ??
+    (res.headers.get("set-cookie") ? [res.headers.get("set-cookie") as string] : []);
+  answer.cookie = setCookie.map((x) => x.replace(/\s*Domain=[^(;|$)]+;*/, ""));
+
+  let parsed: NeteaseBody;
+  try {
+    if (needDecrypt) {
+      const buf = Buffer.from(await res.arrayBuffer());
+      parsed = encrypt.eapiResDecrypt(
+        buf.toString("hex").toUpperCase(),
+        headers["x-aeapi"] === "true",
+      ) as NeteaseBody;
+    } else {
+      const text = await res.text();
+      try {
+        parsed = JSON.parse(text);
+      } catch {
+        parsed = { code: res.status, raw: text };
+      }
+    }
+    answer.body = parsed;
+    if (parsed?.code !== undefined) parsed.code = Number(parsed.code);
+    answer.status = Number(parsed?.code || res.status);
+    if (typeof parsed?.code === "number" && SPECIAL_STATUS_CODES.has(parsed.code)) {
+      answer.status = 200;
+    }
+  } catch {
+    answer.body = { code: res.status, msg: "parse failed" };
+    answer.status = res.status;
+  }
+
+  answer.status = answer.status > 100 && answer.status < 600 ? answer.status : 400;
+
+  if (answer.status === 200) return answer;
+  throw answer;
+};
+
+/** 宽松的 boolean 解析：原始 util/index.js 里的 toBoolean */
+const toBoolean = (val: unknown): boolean => {
+  if (typeof val === "boolean") return val;
+  if (val === "") return false;
+  return val === "true" || val === "1" || val === 1 || val === true;
+};
diff --git a/electron/main/apis/netease/core/types.ts b/electron/main/apis/netease/core/types.ts
new file mode 100644
index 0000000..0e280ee
--- /dev/null
+++ b/electron/main/apis/netease/core/types.ts
@@ -0,0 +1,13 @@
+/**
+ * Netease API 模块函数签名
+ * 每个 module 都是 `(query, request) => Promise<RequestResponse>`
+ */
+
+import type { createRequest, RequestResponse } from "./request";
+import type { Query } from "./option";
+
+export type RequestFn = typeof createRequest;
+
+export type NeteaseModule = (query: Query, request: RequestFn) => Promise<RequestResponse>;
+
+export type { Query, RequestResponse };
diff --git a/electron/main/apis/netease/index.ts b/electron/main/apis/netease/index.ts
new file mode 100644
index 0000000..b713ab7
--- /dev/null
+++ b/electron/main/apis/netease/index.ts
@@ -0,0 +1,133 @@
+/**
+ * Netease API 主进程服务
+ *
+ * 直接在 Node 侧实现加解密 + HTTP 调用，不再依赖任何网易云服务端 npm 包。
+ * 加密算法等核心逻辑移植自 @neteasecloudmusicapienhanced/api（见 core/crypto.ts）。
+ *
+ * 统一入口 `callNetease(name, params)`：
+ *   1) 从 sessions 表加载 cookies 注入（内存缓存，不重复读 SQLite）
+ *   2) 走一层内存响应缓存（2 分钟，对齐原包 apicache 行为）
+ *   3) 路由到 modules/<name>
+ *   4) 只在登录相关接口上把响应 set-cookie 写回 sessions；其它接口不落库
+ */
+
+import {
+  clearSessionCookies,
+  getSessionCookies,
+  saveSessionCookies,
+} from "@main/database/sessions";
+import { buildCacheKey, cacheClear, cacheGet, cacheSet, isCacheable } from "./core/cache";
+import { cookieToJson } from "./core/cookie";
+import { createRequest } from "./core/request";
+import { modules } from "./modules";
+
+/** 会变更登录态的接口：响应里若带 set-cookie，才值得写回 SQLite */
+const SESSION_MUTATING: ReadonlySet<string> = new Set([
+  "login",
+  "login_cellphone",
+  "login_qr_check",
+  "login_refresh",
+  "logout",
+  "register_anonimous",
+]);
+
+/** 内存缓存：避免每次调用都走 SELECT（SQLite 仅在首次 load 时读一次） */
+let sessionCache: Record<string, string> | null = null;
+
+const loadSession = (): Record<string, string> => {
+  if (!sessionCache) sessionCache = getSessionCookies("netease");
+  return sessionCache;
+};
+
+const persistSession = (cookies: Record<string, string>): void => {
+  sessionCache = cookies;
+  saveSessionCookies("netease", cookies);
+};
+
+/** "k1=v1; k2=v2; ..." 形式序列化 */
+const serialize = (cookies: Record<string, string>): string =>
+  Object.entries(cookies)
+    .map(([k, v]) => `${k}=${v}`)
+    .join("; ");
+
+export const getNeteaseCookies = (): Record<string, string> => ({ ...loadSession() });
+
+export const setNeteaseCookies = (cookies: Record<string, string>): void => {
+  persistSession(cookies);
+  cacheClear();
+};
+
+export const mergeNeteaseCookies = (patch: Record<string, string>): void => {
+  persistSession({ ...loadSession(), ...patch });
+  cacheClear();
+};
+
+export const clearNeteaseCookies = (): void => {
+  sessionCache = {};
+  clearSessionCookies("netease");
+  cacheClear();
+};
+
+/** set-cookie 数组 → 扁平对象（只取 key=value，忽略 Path/Domain/Max-Age 等属性） */
+const parseSetCookie = (arr: string[]): Record<string, string> => {
+  const out: Record<string, string> = {};
+  for (const raw of arr) {
+    const first = raw.split(";")[0];
+    const eq = first.indexOf("=");
+    if (eq <= 0) continue;
+    const key = first.slice(0, eq).trim();
+    const val = first.slice(eq + 1).trim();
+    if (key) out[key] = val;
+  }
+  return out;
+};
+
+/**
+ * 调用任意 Netease API
+ * @param name 见 modules/index.ts 中的 key
+ * @param params 业务参数；cookie 自动注入，无需调用方传
+ */
+export const callNetease = async (
+  name: string,
+  params: Record<string, unknown> = {},
+): Promise<{ status: number; body: unknown }> => {
+  const fn = modules[name];
+  if (!fn) throw new Error(`unknown netease api: ${name}`);
+
+  const session = loadSession();
+  const musicU = session.MUSIC_U || "";
+
+  // 读缓存
+  const cacheKey = isCacheable(name) ? buildCacheKey(name, params, musicU) : "";
+  if (cacheKey) {
+    const hit = cacheGet(cacheKey);
+    if (hit) return hit;
+  }
+
+  const query = {
+    ...params,
+    cookie:
+      typeof params.cookie === "string"
+        ? cookieToJson(params.cookie)
+        : (params.cookie as Record<string, string> | undefined) || { ...session },
+  };
+
+  const res = await fn(query, createRequest);
+
+  // 仅登录态变更接口才把响应 cookie 写回 SQLite
+  if (SESSION_MUTATING.has(name) && res.cookie?.length) {
+    const patch = parseSetCookie(res.cookie);
+    if (Object.keys(patch).length) {
+      persistSession({ ...loadSession(), ...patch });
+      cacheClear();
+    }
+  }
+
+  const value = { status: res.status, body: res.body };
+  if (cacheKey && res.status === 200) cacheSet(cacheKey, value);
+
+  return value;
+};
+
+/** 调试用：当前 cookie 序列化字符串 */
+export const currentCookieString = (): string => serialize(loadSession());
diff --git a/electron/main/apis/netease/modules/captcha_sent.ts b/electron/main/apis/netease/modules/captcha_sent.ts
new file mode 100644
index 0000000..5c730c8
--- /dev/null
+++ b/electron/main/apis/netease/modules/captcha_sent.ts
@@ -0,0 +1,17 @@
+/**
+ * 发送短信验证码
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const captchaSent: NeteaseModule = (query, request) => {
+  const data = {
+    ctcode: query.ctcode || "86",
+    secrete: "music_middleuser_pclogin",
+    cellphone: query.phone,
+  };
+  return request("/api/sms/captcha/sent", data, createOption(query, "weapi"));
+};
+
+export default captchaSent;
diff --git a/electron/main/apis/netease/modules/captcha_verify.ts b/electron/main/apis/netease/modules/captcha_verify.ts
new file mode 100644
index 0000000..2fe542f
--- /dev/null
+++ b/electron/main/apis/netease/modules/captcha_verify.ts
@@ -0,0 +1,17 @@
+/**
+ * 校验短信验证码
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const captchaVerify: NeteaseModule = (query, request) => {
+  const data = {
+    ctcode: query.ctcode || "86",
+    cellphone: query.phone,
+    captcha: query.captcha,
+  };
+  return request("/api/sms/captcha/verify", data, createOption(query, "weapi"));
+};
+
+export default captchaVerify;
diff --git a/electron/main/apis/netease/modules/cloudsearch.ts b/electron/main/apis/netease/modules/cloudsearch.ts
new file mode 100644
index 0000000..a82d2fb
--- /dev/null
+++ b/electron/main/apis/netease/modules/cloudsearch.ts
@@ -0,0 +1,19 @@
+/**
+ * 云端搜索（返回更完整的 privileges 等字段，推荐使用）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const cloudsearch: NeteaseModule = (query, request) => {
+  const data = {
+    s: query.keywords,
+    type: query.type ?? 1,
+    limit: query.limit ?? 30,
+    offset: query.offset ?? 0,
+    total: true,
+  };
+  return request("/api/cloudsearch/pc", data, createOption(query));
+};
+
+export default cloudsearch;
diff --git a/electron/main/apis/netease/modules/index.ts b/electron/main/apis/netease/modules/index.ts
new file mode 100644
index 0000000..8c22f50
--- /dev/null
+++ b/electron/main/apis/netease/modules/index.ts
@@ -0,0 +1,79 @@
+/**
+ * Netease API 模块注册表
+ *
+ * 每新增一个 module，在这里用一行 import + export 接入即可。
+ * 运行时通过 `callNetease(name, params)` 按 key 路由。
+ */
+
+import type { NeteaseModule } from "../core/types";
+
+// 登录 / 会话
+import captcha_sent from "./captcha_sent";
+import captcha_verify from "./captcha_verify";
+import login from "./login";
+import login_cellphone from "./login_cellphone";
+import login_qr_check from "./login_qr_check";
+import login_qr_create from "./login_qr_create";
+import login_qr_key from "./login_qr_key";
+import login_refresh from "./login_refresh";
+import login_status from "./login_status";
+import logout from "./logout";
+import register_anonimous from "./register_anonimous";
+
+// 用户
+import user_account from "./user_account";
+import user_cloud from "./user_cloud";
+import user_detail from "./user_detail";
+import user_detail_new from "./user_detail_new";
+import user_followeds from "./user_followeds";
+import user_follows from "./user_follows";
+import user_level from "./user_level";
+import user_playlist from "./user_playlist";
+import user_record from "./user_record";
+import user_subcount from "./user_subcount";
+
+// 搜索
+import cloudsearch from "./cloudsearch";
+import search from "./search";
+import search_default from "./search_default";
+import search_hot from "./search_hot";
+import search_hot_detail from "./search_hot_detail";
+import search_match from "./search_match";
+import search_multimatch from "./search_multimatch";
+import search_suggest from "./search_suggest";
+import search_suggest_pc from "./search_suggest_pc";
+
+export const modules: Record<string, NeteaseModule> = {
+  captcha_sent,
+  captcha_verify,
+  login,
+  login_cellphone,
+  login_qr_check,
+  login_qr_create,
+  login_qr_key,
+  login_refresh,
+  login_status,
+  logout,
+  register_anonimous,
+
+  user_account,
+  user_cloud,
+  user_detail,
+  user_detail_new,
+  user_followeds,
+  user_follows,
+  user_level,
+  user_playlist,
+  user_record,
+  user_subcount,
+
+  cloudsearch,
+  search,
+  search_default,
+  search_hot,
+  search_hot_detail,
+  search_match,
+  search_multimatch,
+  search_suggest,
+  search_suggest_pc,
+};
diff --git a/electron/main/apis/netease/modules/login.ts b/electron/main/apis/netease/modules/login.ts
new file mode 100644
index 0000000..f05ab90
--- /dev/null
+++ b/electron/main/apis/netease/modules/login.ts
@@ -0,0 +1,42 @@
+/**
+ * 邮箱登录
+ */
+
+import { createHash } from "node:crypto";
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const md5 = (text: string): string => createHash("md5").update(text).digest("hex");
+
+const login: NeteaseModule = async (query, request) => {
+  const password =
+    (query.md5_password as string) || md5((query.password as string) || "");
+  const data = {
+    type: "0",
+    https: "true",
+    username: query.email as string,
+    password,
+    rememberLogin: "true",
+  };
+  let result = await request("/api/w/login", data, createOption(query));
+  const body = result.body as { code?: number; [key: string]: unknown };
+
+  if (body.code === 502) {
+    return {
+      status: 200,
+      body: { msg: "账号或密码错误", code: 502, message: "账号或密码错误" },
+      cookie: result.cookie,
+    };
+  }
+  if (body.code === 200) {
+    const renamed = JSON.parse(JSON.stringify(body).replace(/avatarImgId_str/g, "avatarImgIdStr"));
+    result = {
+      status: 200,
+      body: { ...renamed, cookie: result.cookie.join(";") },
+      cookie: result.cookie,
+    };
+  }
+  return result;
+};
+
+export default login;
diff --git a/electron/main/apis/netease/modules/login_cellphone.ts b/electron/main/apis/netease/modules/login_cellphone.ts
new file mode 100644
index 0000000..e405611
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_cellphone.ts
@@ -0,0 +1,41 @@
+/**
+ * 手机号登录（密码或验证码均可）
+ */
+
+import { createHash } from "node:crypto";
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const md5 = (text: string): string => createHash("md5").update(text).digest("hex");
+
+const loginCellphone: NeteaseModule = async (query, request) => {
+  const hasCaptcha = Boolean(query.captcha);
+  const data: Record<string, unknown> = {
+    type: "1",
+    https: "true",
+    phone: query.phone,
+    countrycode: query.countrycode || "86",
+    captcha: query.captcha,
+    remember: "true",
+  };
+  if (hasCaptcha) {
+    data.captcha = query.captcha;
+  } else {
+    data.password = (query.md5_password as string) || md5((query.password as string) || "");
+  }
+
+  let result = await request("/api/w/login/cellphone", data, createOption(query, "weapi"));
+  const body = result.body as { code?: number; [key: string]: unknown };
+
+  if (body.code === 200) {
+    const renamed = JSON.parse(JSON.stringify(body).replace(/avatarImgId_str/g, "avatarImgIdStr"));
+    result = {
+      status: 200,
+      body: { ...renamed, cookie: result.cookie.join(";") },
+      cookie: result.cookie,
+    };
+  }
+  return result;
+};
+
+export default loginCellphone;
diff --git a/electron/main/apis/netease/modules/login_qr_check.ts b/electron/main/apis/netease/modules/login_qr_check.ts
new file mode 100644
index 0000000..119c012
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_qr_check.ts
@@ -0,0 +1,24 @@
+/**
+ * 轮询二维码扫码状态
+ * - 801 待扫码、802 待确认、800 已过期、803 已确认（此时 cookie 里有 MUSIC_U）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const loginQrCheck: NeteaseModule = async (query, request) => {
+  const data = { key: query.key, type: 3 };
+  try {
+    const result = await request("/api/login/qrcode/client/login", data, createOption(query));
+    return {
+      status: 200,
+      body: { ...result.body, cookie: result.cookie.join(";") },
+      cookie: result.cookie,
+    };
+  } catch (err) {
+    const fallback = err as { cookie?: string[] };
+    return { status: 200, body: {}, cookie: fallback?.cookie ?? [] };
+  }
+};
+
+export default loginQrCheck;
diff --git a/electron/main/apis/netease/modules/login_qr_create.ts b/electron/main/apis/netease/modules/login_qr_create.ts
new file mode 100644
index 0000000..0f13d57
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_qr_create.ts
@@ -0,0 +1,22 @@
+/**
+ * 生成二维码登录 URL（可选返回 data URL 图像）
+ *
+ * 注：原实现依赖 qrcode 包生成图像；这里只返回 URL，
+ * 渲染端可自行使用现成的 QR 生成器（更贴合 Electron 架构，避免再引入一个 Node 依赖）。
+ */
+
+import type { NeteaseModule } from "../core/types";
+
+const loginQrCreate: NeteaseModule = async (query) => {
+  const url = `https://music.163.com/login?codekey=${query.key}`;
+  return {
+    status: 200,
+    body: {
+      code: 200,
+      data: { qrurl: url, qrimg: "" },
+    },
+    cookie: [],
+  };
+};
+
+export default loginQrCreate;
diff --git a/electron/main/apis/netease/modules/login_qr_key.ts b/electron/main/apis/netease/modules/login_qr_key.ts
new file mode 100644
index 0000000..6e5ee09
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_qr_key.ts
@@ -0,0 +1,17 @@
+/**
+ * 获取二维码登录 unikey
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const loginQrKey: NeteaseModule = async (query, request) => {
+  const result = await request("/api/login/qrcode/unikey", { type: 3 }, createOption(query));
+  return {
+    status: 200,
+    body: { data: result.body, code: 200 },
+    cookie: result.cookie,
+  };
+};
+
+export default loginQrKey;
diff --git a/electron/main/apis/netease/modules/login_refresh.ts b/electron/main/apis/netease/modules/login_refresh.ts
new file mode 100644
index 0000000..f4ec0c0
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_refresh.ts
@@ -0,0 +1,21 @@
+/**
+ * 登录态刷新（延长 MUSIC_U 有效期）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const loginRefresh: NeteaseModule = async (query, request) => {
+  const result = await request("/api/login/token/refresh", {}, createOption(query));
+  const body = result.body as { code?: number; [key: string]: unknown };
+  if (body.code === 200) {
+    return {
+      status: 200,
+      body: { ...body, cookie: result.cookie.join(";") },
+      cookie: result.cookie,
+    };
+  }
+  return result;
+};
+
+export default loginRefresh;
diff --git a/electron/main/apis/netease/modules/login_status.ts b/electron/main/apis/netease/modules/login_status.ts
new file mode 100644
index 0000000..234b038
--- /dev/null
+++ b/electron/main/apis/netease/modules/login_status.ts
@@ -0,0 +1,21 @@
+/**
+ * 登录状态（当前账号信息）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const loginStatus: NeteaseModule = async (query, request) => {
+  const result = await request("/api/w/nuser/account/get", {}, createOption(query, "weapi"));
+  const body = result.body as { code?: number; [key: string]: unknown };
+  if (body.code === 200) {
+    return {
+      status: 200,
+      body: { data: { ...body } },
+      cookie: result.cookie,
+    };
+  }
+  return result;
+};
+
+export default loginStatus;
diff --git a/electron/main/apis/netease/modules/logout.ts b/electron/main/apis/netease/modules/logout.ts
new file mode 100644
index 0000000..c31a803
--- /dev/null
+++ b/electron/main/apis/netease/modules/logout.ts
@@ -0,0 +1,11 @@
+/**
+ * 退出登录
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const logout: NeteaseModule = (query, request) =>
+  request("/api/logout", {}, createOption(query));
+
+export default logout;
diff --git a/electron/main/apis/netease/modules/register_anonimous.ts b/electron/main/apis/netease/modules/register_anonimous.ts
new file mode 100644
index 0000000..1d23eac
--- /dev/null
+++ b/electron/main/apis/netease/modules/register_anonimous.ts
@@ -0,0 +1,44 @@
+/**
+ * 注册匿名态（获取 MUSIC_A）
+ *
+ * 逻辑来源：@neteasecloudmusicapienhanced/api module/register_anonimous.js
+ * - 生成 52 位 hex deviceId
+ * - 用 `${deviceId} ${md5(deviceId ^ ID_XOR_KEY_1)}` 做 Base64 作为 username
+ * - 调用 weapi 注册，将返回的 MUSIC_A 缓存到设备态
+ */
+
+import { createHash } from "node:crypto";
+import { createOption } from "../core/option";
+import { regenerateDeviceId, setAnonymousToken } from "../core/device";
+import type { NeteaseModule } from "../core/types";
+
+const ID_XOR_KEY = "3go8&$8*3*3h0k(2)2";
+
+const encodeId = (deviceId: string): string => {
+  let xored = "";
+  for (let i = 0; i < deviceId.length; i++) {
+    xored += String.fromCharCode(deviceId.charCodeAt(i) ^ ID_XOR_KEY.charCodeAt(i % ID_XOR_KEY.length));
+  }
+  return createHash("md5").update(xored, "utf8").digest("base64");
+};
+
+const registerAnonimous: NeteaseModule = async (query, request) => {
+  const deviceId = regenerateDeviceId();
+  const username = Buffer.from(`${deviceId} ${encodeId(deviceId)}`, "utf8").toString("base64");
+  const data = { username };
+
+  const result = await request("/api/register/anonimous", data, createOption(query, "weapi"));
+  const body = result.body as { code?: number; [key: string]: unknown };
+
+  if (body.code === 200) {
+    if (typeof body.token === "string") setAnonymousToken(body.token);
+    return {
+      status: 200,
+      body: { ...body, cookie: result.cookie.join(";") },
+      cookie: result.cookie,
+    };
+  }
+  return result;
+};
+
+export default registerAnonimous;
diff --git a/electron/main/apis/netease/modules/search.ts b/electron/main/apis/netease/modules/search.ts
new file mode 100644
index 0000000..c5b06ea
--- /dev/null
+++ b/electron/main/apis/netease/modules/search.ts
@@ -0,0 +1,29 @@
+/**
+ * 搜索（普通）
+ * type: 1 单曲 / 10 专辑 / 100 歌手 / 1000 歌单 / 1002 用户 / 1004 MV / 1006 歌词 / 1009 电台 / 1014 视频
+ * 特例：type=2000 走语音搜索接口
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const search: NeteaseModule = (query, request) => {
+  if (query.type && String(query.type) === "2000") {
+    const voice = {
+      keyword: query.keywords,
+      scene: "normal",
+      limit: query.limit ?? 30,
+      offset: query.offset ?? 0,
+    };
+    return request("/api/search/voice/get", voice, createOption(query));
+  }
+  const data = {
+    s: query.keywords,
+    type: query.type ?? 1,
+    limit: query.limit ?? 30,
+    offset: query.offset ?? 0,
+  };
+  return request("/api/search/get", data, createOption(query));
+};
+
+export default search;
diff --git a/electron/main/apis/netease/modules/search_default.ts b/electron/main/apis/netease/modules/search_default.ts
new file mode 100644
index 0000000..5dca968
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_default.ts
@@ -0,0 +1,11 @@
+/**
+ * 默认搜索关键词（搜索框 placeholder）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchDefault: NeteaseModule = (query, request) =>
+  request("/api/search/defaultkeyword/get", {}, createOption(query));
+
+export default searchDefault;
diff --git a/electron/main/apis/netease/modules/search_hot.ts b/electron/main/apis/netease/modules/search_hot.ts
new file mode 100644
index 0000000..983cfb4
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_hot.ts
@@ -0,0 +1,11 @@
+/**
+ * 热门搜索（简版）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchHot: NeteaseModule = (query, request) =>
+  request("/api/search/hot", { type: 1111 }, createOption(query));
+
+export default searchHot;
diff --git a/electron/main/apis/netease/modules/search_hot_detail.ts b/electron/main/apis/netease/modules/search_hot_detail.ts
new file mode 100644
index 0000000..510e47a
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_hot_detail.ts
@@ -0,0 +1,11 @@
+/**
+ * 热搜详情（带热度/图标）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchHotDetail: NeteaseModule = (query, request) =>
+  request("/api/hotsearchlist/get", {}, createOption(query, "weapi"));
+
+export default searchHotDetail;
diff --git a/electron/main/apis/netease/modules/search_match.ts b/electron/main/apis/netease/modules/search_match.ts
new file mode 100644
index 0000000..c37800f
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_match.ts
@@ -0,0 +1,22 @@
+/**
+ * 本地歌曲匹配（根据 title/album/artist/duration 猜云端对应歌曲）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchMatch: NeteaseModule = (query, request) => {
+  const songs = [
+    {
+      title: query.title || "",
+      album: query.album || "",
+      artist: query.artist || "",
+      duration: query.duration || 0,
+      persistId: query.md5,
+    },
+  ];
+  const data = { songs: JSON.stringify(songs) };
+  return request("/api/search/match/new", data, createOption(query));
+};
+
+export default searchMatch;
diff --git a/electron/main/apis/netease/modules/search_multimatch.ts b/electron/main/apis/netease/modules/search_multimatch.ts
new file mode 100644
index 0000000..b4ebaa0
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_multimatch.ts
@@ -0,0 +1,16 @@
+/**
+ * 多类型搜索（一次返回歌曲/歌手/歌单的前几条命中）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchMultimatch: NeteaseModule = (query, request) => {
+  const data = {
+    type: query.type ?? 1,
+    s: query.keywords || "",
+  };
+  return request("/api/search/suggest/multimatch", data, createOption(query, "weapi"));
+};
+
+export default searchMultimatch;
diff --git a/electron/main/apis/netease/modules/search_suggest.ts b/electron/main/apis/netease/modules/search_suggest.ts
new file mode 100644
index 0000000..829bd6b
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_suggest.ts
@@ -0,0 +1,14 @@
+/**
+ * 搜索建议（web / mobile）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchSuggest: NeteaseModule = (query, request) => {
+  const data = { s: query.keywords || "" };
+  const type = query.type === "mobile" ? "keyword" : "web";
+  return request(`/api/search/suggest/${type}`, data, createOption(query, "weapi"));
+};
+
+export default searchSuggest;
diff --git a/electron/main/apis/netease/modules/search_suggest_pc.ts b/electron/main/apis/netease/modules/search_suggest_pc.ts
new file mode 100644
index 0000000..80700d2
--- /dev/null
+++ b/electron/main/apis/netease/modules/search_suggest_pc.ts
@@ -0,0 +1,13 @@
+/**
+ * 搜索建议（PC 版）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const searchSuggestPc: NeteaseModule = (query, request) => {
+  const data = { keyword: query.keyword || "" };
+  return request("/api/search/pc/suggest/keyword/get", data, createOption(query));
+};
+
+export default searchSuggestPc;
diff --git a/electron/main/apis/netease/modules/user_account.ts b/electron/main/apis/netease/modules/user_account.ts
new file mode 100644
index 0000000..6c1eca8
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_account.ts
@@ -0,0 +1,11 @@
+/**
+ * 当前登录账号信息
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userAccount: NeteaseModule = (query, request) =>
+  request("/api/nuser/account/get", {}, createOption(query, "weapi"));
+
+export default userAccount;
diff --git a/electron/main/apis/netease/modules/user_cloud.ts b/electron/main/apis/netease/modules/user_cloud.ts
new file mode 100644
index 0000000..eb1dcf7
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_cloud.ts
@@ -0,0 +1,16 @@
+/**
+ * 用户云盘歌曲列表
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userCloud: NeteaseModule = (query, request) => {
+  const data = {
+    limit: query.limit ?? 30,
+    offset: query.offset ?? 0,
+  };
+  return request("/api/v1/cloud/get", data, createOption(query, "weapi"));
+};
+
+export default userCloud;
diff --git a/electron/main/apis/netease/modules/user_detail.ts b/electron/main/apis/netease/modules/user_detail.ts
new file mode 100644
index 0000000..a0b17dc
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_detail.ts
@@ -0,0 +1,14 @@
+/**
+ * 用户详情（旧版）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userDetail: NeteaseModule = async (query, request) => {
+  const res = await request(`/api/v1/user/detail/${query.uid}`, {}, createOption(query, "weapi"));
+  const renamed = JSON.stringify(res).replace(/avatarImgId_str/g, "avatarImgIdStr");
+  return JSON.parse(renamed);
+};
+
+export default userDetail;
diff --git a/electron/main/apis/netease/modules/user_detail_new.ts b/electron/main/apis/netease/modules/user_detail_new.ts
new file mode 100644
index 0000000..cdfaf24
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_detail_new.ts
@@ -0,0 +1,13 @@
+/**
+ * 用户详情（新版，eapi）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userDetailNew: NeteaseModule = (query, request) => {
+  const data = { all: "true", userId: query.uid };
+  return request(`/api/w/v1/user/detail/${query.uid}`, data, createOption(query, "eapi"));
+};
+
+export default userDetailNew;
diff --git a/electron/main/apis/netease/modules/user_followeds.ts b/electron/main/apis/netease/modules/user_followeds.ts
new file mode 100644
index 0000000..5c242e5
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_followeds.ts
@@ -0,0 +1,19 @@
+/**
+ * 粉丝列表（关注 TA 的人）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userFolloweds: NeteaseModule = (query, request) => {
+  const data = {
+    userId: query.uid,
+    time: "0",
+    limit: query.limit ?? 20,
+    offset: query.offset ?? 0,
+    getcounts: "true",
+  };
+  return request(`/api/user/getfolloweds/${query.uid}`, data, createOption(query));
+};
+
+export default userFolloweds;
diff --git a/electron/main/apis/netease/modules/user_follows.ts b/electron/main/apis/netease/modules/user_follows.ts
new file mode 100644
index 0000000..23cbaab
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_follows.ts
@@ -0,0 +1,17 @@
+/**
+ * 关注列表（TA 关注的人）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userFollows: NeteaseModule = (query, request) => {
+  const data = {
+    offset: query.offset ?? 0,
+    limit: query.limit ?? 30,
+    order: true,
+  };
+  return request(`/api/user/getfollows/${query.uid}`, data, createOption(query, "weapi"));
+};
+
+export default userFollows;
diff --git a/electron/main/apis/netease/modules/user_level.ts b/electron/main/apis/netease/modules/user_level.ts
new file mode 100644
index 0000000..2bc988f
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_level.ts
@@ -0,0 +1,11 @@
+/**
+ * 用户等级（听歌时长、登录天数等）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userLevel: NeteaseModule = (query, request) =>
+  request("/api/user/level", {}, createOption(query, "weapi"));
+
+export default userLevel;
diff --git a/electron/main/apis/netease/modules/user_playlist.ts b/electron/main/apis/netease/modules/user_playlist.ts
new file mode 100644
index 0000000..232d7be
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_playlist.ts
@@ -0,0 +1,18 @@
+/**
+ * 用户歌单列表
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userPlaylist: NeteaseModule = (query, request) => {
+  const data = {
+    uid: query.uid,
+    limit: query.limit ?? 30,
+    offset: query.offset ?? 0,
+    includeVideo: true,
+  };
+  return request("/api/user/playlist", data, createOption(query, "weapi"));
+};
+
+export default userPlaylist;
diff --git a/electron/main/apis/netease/modules/user_record.ts b/electron/main/apis/netease/modules/user_record.ts
new file mode 100644
index 0000000..9094279
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_record.ts
@@ -0,0 +1,17 @@
+/**
+ * 听歌排行
+ * type: 1 最近一周；0 所有时间
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userRecord: NeteaseModule = (query, request) => {
+  const data = {
+    uid: query.uid,
+    type: query.type ?? 0,
+  };
+  return request("/api/v1/play/record", data, createOption(query, "weapi"));
+};
+
+export default userRecord;
diff --git a/electron/main/apis/netease/modules/user_subcount.ts b/electron/main/apis/netease/modules/user_subcount.ts
new file mode 100644
index 0000000..0a72dd5
--- /dev/null
+++ b/electron/main/apis/netease/modules/user_subcount.ts
@@ -0,0 +1,11 @@
+/**
+ * 用户收藏计数（歌单/专辑/MV 等）
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const userSubcount: NeteaseModule = (query, request) =>
+  request("/api/subcount", {}, createOption(query, "weapi"));
+
+export default userSubcount;
diff --git a/package.json b/package.json
index 9e6c809..5566b2f 100644
--- a/package.json
+++ b/package.json
@@ -28,7 +28,6 @@
     "@electron-toolkit/preload": "^3.0.2",
     "@electron-toolkit/utils": "^4.0.0",
     "@material/material-color-utilities": "^0.4.0",
-    "@neteasecloudmusicapienhanced/api": "^4.32.0",
     "@vueuse/core": "^14.2.1",
     "atomically": "^2.1.1",
     "better-sqlite3": "^12.8.0",
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index b428100..f8694ec 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -17,9 +17,6 @@ importers:
       '@material/material-color-utilities':
         specifier: ^0.4.0
         version: 0.4.0
-      '@neteasecloudmusicapienhanced/api':
-        specifier: ^4.32.0
-        version: 4.32.0
       '@vueuse/core':
         specifier: ^14.2.1
         version: 14.2.1(vue@3.5.32(typescript@5.9.3))
@@ -218,9 +215,6 @@ packages:
     resolution: {integrity: sha512-LwdZHpScM4Qz8Xw2iKSzS+cfglZzJGvofQICy7W7v4caru4EaAmyUuO6BGrbyQ2mYV11W0U8j5mBhd14dd3B0A==}
     engines: {node: '>=6.9.0'}
 
-  '@borewit/text-codec@0.2.2':
-    resolution: {integrity: sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==}
-
   '@develar/schema-utils@2.6.5':
     resolution: {integrity: sha512-0cp4PsWQ/9avqTVMCtZ+GirikIA36ikvjtHweU4/j8yLtgObI0+JUPhYFScgwlteveGB1rt3Cm8UhN04XayDig==}
     engines: {node: '>= 8.9.0'}
@@ -1229,15 +1223,6 @@ packages:
     resolution: {integrity: sha512-enkZYyuCdo+9jneCPE/0fjIta4wWnvVN9hBo2HuiMpRF0q3lzv1J6b/cl7i0mxZUKhBrV3aCKDBQnCOhwKbPmQ==}
     engines: {node: '>= 10'}
 
-  '@neteasecloudmusicapienhanced/api@4.32.0':
-    resolution: {integrity: sha512-p+ZTIgdniLywpM6m+hMNK/BxrpBt21mgdNYwaLU3xHRb9tzQNFcA11kxB5pFXUQB7rcazxypjfHgHAHauK9dBg==}
-    engines: {node: '>=12'}
-    hasBin: true
-
-  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.2.4':
-    resolution: {integrity: sha512-4DBBrCMyBewUfAlVnmFDUe5UHwrB+zosyTNJTyw48mYCNtAXIm1BuRX8St5S4JsTvvyt0OEixGr2rECeckhqTg==}
-    hasBin: true
-
   '@npmcli/agent@3.0.0':
     resolution: {integrity: sha512-S79NdEgDQd/NGCay6TCoVzXSj74skRZIKJcpJjC5lOq34SZzyI6MqtiiWoiVWoVrTcGjNeC4ipbh1VIHlpfF5Q==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -1598,16 +1583,6 @@ packages:
     peerDependencies:
       vue: ^2.7.0 || ^3.0.0
 
-  '@tokenizer/inflate@0.4.1':
-    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
-    engines: {node: '>=18'}
-
-  '@tokenizer/token@0.3.0':
-    resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
-
-  '@tootallnate/quickjs-emscripten@0.23.0':
-    resolution: {integrity: sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==}
-
   '@tybys/wasm-util@0.10.1':
     resolution: {integrity: sha512-9tTaPJLSiejZKx+Bmog4uSubteqTvFrVrURwkmHixBo0G4seD0zUxp98E1DzUBJxLQ3NPwXrGKDiVjwx/DpPsg==}
 
@@ -1718,11 +1693,6 @@ packages:
     resolution: {integrity: sha512-y+vH7QE8ycjoa0bWciFg7OpFcipUuem1ujhrdLtq1gByKwfbC7bPeKsiny9e0urg93DqwGcHey+bGRKCnF1nZQ==}
     engines: {node: ^18.18.0 || ^20.9.0 || >=21.1.0}
 
-  '@unblockneteasemusic/server@0.28.0':
-    resolution: {integrity: sha512-FLXNEMc9ItoAhhhemxKJzpJ+9DkWsfnxE5PYTCIzqZarYVUCxeKKEf0CwGeUeIW35z1Ekl0wFU4l10RDWVCr4A==}
-    engines: {node: '>= 12'}
-    hasBin: true
-
   '@unocss/cli@66.6.8':
     resolution: {integrity: sha512-dJ4AmrhCtQwEDJtpFG7AgJ4Qi4GWnNgWWlLWq4DhKBOCcvldr9k98mscdhs3MOwph25DIxU5MdLRAg/OS1JryQ==}
     engines: {node: '>=14'}
@@ -1892,14 +1862,6 @@ packages:
     resolution: {integrity: sha512-AO2ac6pjRB3SJmGJo+v5/aK6Omggp6fsLrs6wN9bd35ulu4cCwaAU9+7ZhXjeqHVkaHThLuzH0nZr0YpCDhygg==}
     engines: {node: ^18.17.0 || >=20.5.0}
 
-  accepts@1.3.8:
-    resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==}
-    engines: {node: '>= 0.6'}
-
-  accepts@2.0.0:
-    resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
-    engines: {node: '>= 0.6'}
-
   acorn-jsx@5.3.2:
     resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
     peerDependencies:
@@ -1933,10 +1895,6 @@ packages:
     resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
     engines: {node: '>=12'}
 
-  ansi-styles@3.2.1:
-    resolution: {integrity: sha512-VT0ZI6kZRdTh8YyJw3SMbYm/u+NqfsAxEpWO0Pf9sq8/e94WxxOpPKx9FR1FlyCtOVDNOQ+8ntlqFxiRc+r5qA==}
-    engines: {node: '>=4'}
-
   ansi-styles@4.3.0:
     resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
     engines: {node: '>=8'}
@@ -1958,17 +1916,10 @@ packages:
   argparse@2.0.1:
     resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
 
-  args@5.0.3:
-    resolution: {integrity: sha512-h6k/zfFgusnv3i5TU08KQkVKuCPBtL/PWQbWkHUxvJrZ2nAyeaUupneemcrgn1xmqxPQsPIzwkUhOpoqPDRZuA==}
-    engines: {node: '>= 6.0.0'}
-
   aria-hidden@1.2.6:
     resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
     engines: {node: '>=10'}
 
-  array-flatten@1.1.1:
-    resolution: {integrity: sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==}
-
   assert-plus@1.0.0:
     resolution: {integrity: sha512-NfJ4UzBCcQGLDlQq7nHxH+tv3kyZ0hHQqF5BO6J7tNJeP5do1llPr8dZ8zHonfhAu0PHAdMkSo+8o0wxg9lZWw==}
     engines: {node: '>=0.8'}
@@ -1977,10 +1928,6 @@ packages:
     resolution: {integrity: sha512-m1Q/RaVOnTp9JxPX+F+Zn7IcLYMzM8kZofDImfsKZd8MbR+ikdOzTeztStWqfrqIxZnYWryyI9ePm3NGjnZgGw==}
     engines: {node: '>=20.19.0'}
 
-  ast-types@0.13.4:
-    resolution: {integrity: sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==}
-    engines: {node: '>=4'}
-
   ast-walker-scope@0.8.3:
     resolution: {integrity: sha512-cbdCP0PGOBq0ASG+sjnKIoYkWMKhhz+F/h9pRexUdX2Hd38+WOlBkRKlqkGOSm0YQpcFMQBJeK4WspUAkwsEdg==}
     engines: {node: '>=20.19.0'}
@@ -2003,16 +1950,9 @@ packages:
     resolution: {integrity: sha512-+q/t7Ekv1EDY2l6Gda6LLiX14rU9TV20Wa3ofeQmwPFZbOMo9DXrLbOjFaaclkXKWidIaopwAObQDqwWtGUjqg==}
     engines: {node: '>= 4.0.0'}
 
-  atomic-sleep@1.0.0:
-    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
-    engines: {node: '>=8.0.0'}
-
   atomically@2.1.1:
     resolution: {integrity: sha512-P4w9o2dqARji6P7MHprklbfiArZAWvo07yW7qs3pdljb3BWr12FIB7W+p0zJiuiVsUpRO0iZn1kFFcpPegg0tQ==}
 
-  axios@1.15.1:
-    resolution: {integrity: sha512-WOG+Jj8ZOvR0a3rAn+Tuf1UQJRxw5venr6DgdbJzngJE3qG7X0kL83CZGpdHMxEm+ZK3seAbvFsw4FfOfP9vxg==}
-
   balanced-match@1.0.2:
     resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
 
@@ -2028,10 +1968,6 @@ packages:
     engines: {node: '>=6.0.0'}
     hasBin: true
 
-  basic-ftp@5.3.0:
-    resolution: {integrity: sha512-5K9eNNn7ywHPsYnFwjKgYH8Hf8B5emh7JKcPaVjjrMJFQQwGpwowEnZNEtHs7DfR7hCZsmaK3VA4HUK0YarT+w==}
-    engines: {node: '>=10.0.0'}
-
   before-after-hook@4.0.0:
     resolution: {integrity: sha512-q6tR3RPqIB1pMiTRMFcZwuG5T8vwp+vUvEG0vuI6B+Rikh5BfPp2fQ82c925FOs+b0lcFQ8CFrL+KbilfZFhOQ==}
 
@@ -2048,14 +1984,6 @@ packages:
   bl@4.1.0:
     resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
 
-  body-parser@1.20.4:
-    resolution: {integrity: sha512-ZTgYYLMOXY9qKU/57FAo8F+HA2dGX7bqGc71txDRC1rS4frdFI5R7NhluHxH6M0YItAP0sHB4uqAOcYKxO6uGA==}
-    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
-
-  body-parser@2.2.2:
-    resolution: {integrity: sha512-oP5VkATKlNwcgvxi0vM0p/D3n2C3EReYVX+DNYs5TjZFn/oQt2j+4sVJtSMr18pdRr8wjTcBl6LoV+FUwzPmNA==}
-    engines: {node: '>=18'}
-
   boolbase@1.0.0:
     resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
 
@@ -2094,14 +2022,6 @@ packages:
   builder-util@26.8.1:
     resolution: {integrity: sha512-pm1lTYbGyc90DHgCDO7eo8Rl4EqKLciayNbZqGziqnH9jrlKe8ZANGdityLZU+pJh16dfzjAx2xQq9McuIPEtw==}
 
-  busboy@1.6.0:
-    resolution: {integrity: sha512-8SFQbg/0hQ9xy3UNTB0YEnsNBbWfhf7RtnzpL7TkBiTBRfrQ9Fxcnz7VJsleJpyp6rVLvXiuORqjlHi5q+PYuA==}
-    engines: {node: '>=10.16.0'}
-
-  bytes@3.1.2:
-    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
-    engines: {node: '>= 0.8'}
-
   cac@6.7.14:
     resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
     engines: {node: '>=8'}
@@ -2126,29 +2046,13 @@ packages:
     resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
     engines: {node: '>= 0.4'}
 
-  call-bound@1.0.4:
-    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
-    engines: {node: '>= 0.4'}
-
   callsites@3.1.0:
     resolution: {integrity: sha512-P8BjAsXvZS+VIDUI11hHCQEv74YT67YUi5JJFNWIqL235sBmjX4+qx9Muvls5ivyNENctx46xQLQ3aTuE7ssaQ==}
     engines: {node: '>=6'}
 
-  camelcase@5.0.0:
-    resolution: {integrity: sha512-faqwZqnWxbxn+F1d399ygeamQNy3lPp/H9H6rNrqYh4FSVCtcY+3cub1MxA8o9mDd55mM8Aghuu/kuyYA6VTsA==}
-    engines: {node: '>=6'}
-
-  camelcase@5.3.1:
-    resolution: {integrity: sha512-L28STB170nwWS63UjtlEOE3dldQApaJXZkOI1uMFfzf3rRuPegHaHesyee+YxQ+W6SvRDQV6UrdOdRiR153wJg==}
-    engines: {node: '>=6'}
-
   caniuse-lite@1.0.30001787:
     resolution: {integrity: sha512-mNcrMN9KeI68u7muanUpEejSLghOKlVhRqS/Za2IeyGllJ9I9otGpR9g3nsw7n4W378TE/LyIteA0+/FOZm4Kg==}
 
-  chalk@2.4.2:
-    resolution: {integrity: sha512-Mti+f9lpJNcwF4tWV8/OrTTtF1gZi+f8FqlyAdouralcFWFQWF2+NgCHShjkCb+IFBLq9buZwE1xckQU4peSuQ==}
-    engines: {node: '>=4'}
-
   chalk@4.1.2:
     resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
     engines: {node: '>=10'}
@@ -2199,17 +2103,10 @@ packages:
     peerDependencies:
       typanion: '*'
 
-  cliui@6.0.0:
-    resolution: {integrity: sha512-t6wbgtoCXvAzst7QgXxJYqPt0usEfbgQdftEPbLL/cvv6HPE5VgvqCuAIDR0NgU52ds6rFwqrgakNLrHEjCbrQ==}
-
   cliui@8.0.1:
     resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
     engines: {node: '>=12'}
 
-  cliui@9.0.1:
-    resolution: {integrity: sha512-k7ndgKhwoQveBL+/1tqGJYNz097I7WOvwbmmU2AR5+magtbjPWQTS1C5vzGkBC8Ym8UWRzfKUzUUqFLypY4Q+w==}
-    engines: {node: '>=20'}
-
   clone-response@1.0.3:
     resolution: {integrity: sha512-ROoL94jJH2dUVML2Y/5PEDNaSHgeOdSDicUyS7izcF63G6sTc/FTjLub4b8Il9S8S0beOfYt0TaA5qvFK+w0wA==}
 
@@ -2217,16 +2114,10 @@ packages:
     resolution: {integrity: sha512-JQHZ2QMW6l3aH/j6xCqQThY/9OH4D/9ls34cgkUBiEeocRTU04tHfKPBsUK1PqZCUQM7GiA0IIXJSuXHI64Kbg==}
     engines: {node: '>=0.8'}
 
-  color-convert@1.9.3:
-    resolution: {integrity: sha512-QfAUtd+vFdAtFQcC8CCyYt1fYWxSqAiK2cSD6zDB8N3cpsEBAvRxp9zOGg6G/SHHJYAT88/az/IuDGALsNVbGg==}
-
   color-convert@2.0.1:
     resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
     engines: {node: '>=7.0.0'}
 
-  color-name@1.1.3:
-    resolution: {integrity: sha512-72fSenhMw2HZMTVHeCA9KCmpEIbzWiQsjN+BHcBbS9vr1mtt+vJjPdksIBNUmKAW8TFUDPJK5SUU3QhE9NEXDw==}
-
   color-name@1.1.4:
     resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
 
@@ -2265,32 +2156,9 @@ packages:
     resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
     engines: {node: ^14.18.0 || >=16.10.0}
 
-  content-disposition@0.5.4:
-    resolution: {integrity: sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==}
-    engines: {node: '>= 0.6'}
-
-  content-disposition@1.1.0:
-    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
-    engines: {node: '>=18'}
-
-  content-type@1.0.5:
-    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
-    engines: {node: '>= 0.6'}
-
   convert-source-map@2.0.0:
     resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
 
-  cookie-signature@1.0.7:
-    resolution: {integrity: sha512-NXdYc3dLr47pBkpUCHtKSwIOQXLVn8dZEuywboCOJY/osA0wFSLlSawr3KN8qXJEyX66FcONTH8EIlVuK0yyFA==}
-
-  cookie-signature@1.2.2:
-    resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
-    engines: {node: '>=6.6.0'}
-
-  cookie@0.7.2:
-    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
-    engines: {node: '>= 0.6'}
-
   copy-anything@4.0.5:
     resolution: {integrity: sha512-7Vv6asjS4gMOuILabD3l739tsaxFQmC+a7pLZm02zyvs8p977bL3zEgq3yDk5rn9B0PbYgIv++jmHcuUab4RhA==}
     engines: {node: '>=18'}
@@ -2308,9 +2176,6 @@ packages:
     resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
     engines: {node: '>= 8'}
 
-  crypto-js@4.2.0:
-    resolution: {integrity: sha512-KALDyEYgpY+Rlob/iriUtjV6d5Eq+Y191A5g4UqLAi8CyGP9N1+FdVbkc1SxKc2r4YAYqG8JzO2KGL+AizD70Q==}
-
   css-tree@3.2.1:
     resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
     engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
@@ -2323,21 +2188,6 @@ packages:
   csstype@3.2.3:
     resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
 
-  data-uri-to-buffer@6.0.2:
-    resolution: {integrity: sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==}
-    engines: {node: '>= 14'}
-
-  dateformat@4.6.3:
-    resolution: {integrity: sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA==}
-
-  debug@2.6.9:
-    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
   debug@4.4.3:
     resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
     engines: {node: '>=6.0'}
@@ -2347,10 +2197,6 @@ packages:
       supports-color:
         optional: true
 
-  decamelize@1.2.0:
-    resolution: {integrity: sha512-z2S+W9X73hAUUki+N+9Za2lBlun89zigOyGrsax+KUQ6wKW4ZoWpEYBkGhQjwAjjDCkWxhY0VKEhk8wzY7F5cA==}
-    engines: {node: '>=0.10.0'}
-
   decompress-response@6.0.0:
     resolution: {integrity: sha512-aW35yZM6Bb/4oJlZncMH2LCoZtJXTRxES17vE3hoRiowU2kWHaJKFkSBDnDR+cm9J+9QhXmREyIfv0pji9ejCQ==}
     engines: {node: '>=10'}
@@ -2380,25 +2226,13 @@ packages:
   defu@6.1.7:
     resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
 
-  degenerator@5.0.1:
-    resolution: {integrity: sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==}
-    engines: {node: '>= 14'}
-
   delayed-stream@1.0.0:
     resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
     engines: {node: '>=0.4.0'}
 
-  depd@2.0.0:
-    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
-    engines: {node: '>= 0.8'}
-
   destr@2.0.5:
     resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
 
-  destroy@1.2.0:
-    resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
-    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
-
   detect-libc@2.1.2:
     resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
     engines: {node: '>=8'}
@@ -2406,9 +2240,6 @@ packages:
   detect-node@2.1.0:
     resolution: {integrity: sha512-T0NIuQpnTvFDATNuHN5roPwSBG83rFsuO+MXXH9/3N1eFbn4wcPjttvjMLEPWJ0RGUYgQE7cGgS3tNxbqCGM7g==}
 
-  dijkstrajs@1.0.3:
-    resolution: {integrity: sha512-qiSlmBq9+BCdCA/L46dw8Uy93mloxsPSbwnm5yrKn2vMPiy8KyAskTF6zuV/j5BMsmOGZDPs7KjU+mjb670kfA==}
-
   dir-compare@4.2.0:
     resolution: {integrity: sha512-2xMCmOoMrdQIPHdsTawECdNPwlVFB9zGcz3kuhmBO6U3oU+UQjsue0i8ayLKpgBcm+hcXPMVSGUN9d+pvJ6+VQ==}
 
@@ -2429,10 +2260,6 @@ packages:
     resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
     engines: {node: '>=12'}
 
-  dotenv@17.4.2:
-    resolution: {integrity: sha512-nI4U3TottKAcAD9LLud4Cb7b2QztQMUEfHbvhTH09bqXTxnSie8WnjPALV/WMCrJZ6UV/qHJ6L03OqO3LcdYZw==}
-    engines: {node: '>=12'}
-
   dunder-proto@1.0.1:
     resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
     engines: {node: '>= 0.4'}
@@ -2440,15 +2267,9 @@ packages:
   duplexer@0.1.2:
     resolution: {integrity: sha512-jtD6YG370ZCIi/9GTaJKQxWTZD045+4R4hTk/x1UyoqadyJ9x9CgSi1RlVDQF8U2sxLLSnFkCaMihqljHIWgMg==}
 
-  duplexify@4.1.3:
-    resolution: {integrity: sha512-M3BmBhwJRZsSx38lZyhE53Csddgzl5R7xGJNk7CVddZD6CcmwMCH8J+7AprIrQKH7TonKxaCjcv27Qmf+sQ+oA==}
-
   eastasianwidth@0.2.0:
     resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
 
-  ee-first@1.1.1:
-    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
-
   ejs@3.1.10:
     resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
     engines: {node: '>=0.10.0'}
@@ -2503,19 +2324,12 @@ packages:
       node-addon-api:
         optional: true
 
-  emoji-regex@10.6.0:
-    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
-
   emoji-regex@8.0.0:
     resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
 
   emoji-regex@9.2.2:
     resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
 
-  encodeurl@2.0.0:
-    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
-    engines: {node: '>= 0.8'}
-
   encoding@0.1.13:
     resolution: {integrity: sha512-ETBauow1T35Y/WZMkio9jiM0Z5xjHHmJ4XmjZOq1l/dXz3lr2sRn87nJy20RupqSh1F2m3HHPSp8ShIPQJrJ3A==}
 
@@ -2569,13 +2383,6 @@ packages:
     resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
     engines: {node: '>=6'}
 
-  escape-html@1.0.3:
-    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
-
-  escape-string-regexp@1.0.5:
-    resolution: {integrity: sha512-vbRorB5FUQWvla16U8R/qgaFIya2qGzwDrNmCZuYKrbdSUMG6I1ZCGQRefkRVhuOkIGVne7BQ35DSfo1qvJqFg==}
-    engines: {node: '>=0.8.0'}
-
   escape-string-regexp@4.0.0:
     resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
     engines: {node: '>=10'}
@@ -2584,11 +2391,6 @@ packages:
     resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
     engines: {node: '>=12'}
 
-  escodegen@2.1.0:
-    resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
-    engines: {node: '>=6.0'}
-    hasBin: true
-
   eslint-config-prettier@10.1.8:
     resolution: {integrity: sha512-82GZUjRS0p/jganf6q1rEO25VSoHH0hKPCTrgillPjdI/3bgBhAE1QzHrHTizjpRvy6pGAvKjDJtk2pF9NDq8w==}
     hasBin: true
@@ -2647,11 +2449,6 @@ packages:
     resolution: {integrity: sha512-7p3DrVEIopW1B1avAGLuCSh1jubc01H2JHc8B4qqGblmg5gI9yumBgACjWo4JlIc04ufug4xJ3SQI8HkS/Rgzw==}
     engines: {node: ^20.19.0 || ^22.13.0 || >=24}
 
-  esprima@4.0.1:
-    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
-    engines: {node: '>=4'}
-    hasBin: true
-
   esquery@1.7.0:
     resolution: {integrity: sha512-Ap6G0WQwcU/LHsvLwON1fAQX9Zp0A2Y6Y/cJBl9r/JbW90Zyg4/zbG6zzKa2OTALELarYHmKu0GhpM5EO+7T0g==}
     engines: {node: '>=0.10'}
@@ -2674,10 +2471,6 @@ packages:
     resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
     engines: {node: '>=0.10.0'}
 
-  etag@1.8.1:
-    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
-    engines: {node: '>= 0.6'}
-
   expand-template@2.0.3:
     resolution: {integrity: sha512-XYfuKMvj4O35f/pOXLObndIRvyQ+/+6AhODh+OKWj9S9498pHHn/IMszH+gt0fBCRWMNfk1ZSp5x3AifmnI2vg==}
     engines: {node: '>=6'}
@@ -2685,18 +2478,6 @@ packages:
   exponential-backoff@3.1.3:
     resolution: {integrity: sha512-ZgEeZXj30q+I0EN+CbSSpIyPaJ5HVQD18Z1m+u1FXbAeT94mr1zw50q4q6jiiC447Nl/YTcIYSAftiGqetwXCA==}
 
-  express-fileupload@1.5.2:
-    resolution: {integrity: sha512-wxUJn2vTHvj/kZCVmc5/bJO15C7aSMyHeuXYY3geKpeKibaAoQGcEv5+sM6nHS2T7VF+QHS4hTWPiY2mKofEdg==}
-    engines: {node: '>=12.0.0'}
-
-  express@4.22.1:
-    resolution: {integrity: sha512-F2X8g9P1X7uCPZMA3MVf9wcTqlyNp7IhH5qPCI0izhaOIYXaW9L535tGA3qmjRzpH+bZczqq7hVKxTR4NWnu+g==}
-    engines: {node: '>= 0.10.0'}
-
-  express@5.2.1:
-    resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
-    engines: {node: '>= 18'}
-
   exsolve@1.0.8:
     resolution: {integrity: sha512-LmDxfWXwcTArk8fUEnOfSZpHOJ6zOMUJKOtFLFqJLoKJetuQG874Uc7/Kki7zFLzYybmZhp1M7+98pfMqeX8yA==}
 
@@ -2721,13 +2502,6 @@ packages:
   fast-levenshtein@2.0.6:
     resolution: {integrity: sha512-DCXu6Ifhqcks7TZKY3Hxp3y6qphY5SJZmrWMDrKcERSOXWQdMhU9Ig/PYrzyw/ul9jOIyh0N4M0tbC5hodg8dw==}
 
-  fast-redact@3.5.0:
-    resolution: {integrity: sha512-dwsoQlS7h9hMeYUq1W++23NDcBLV4KqONnITDV9DjfS3q1SgDGVrBdvvTLUotWtPSD7asWDV9/CmsZPy8Hf70A==}
-    engines: {node: '>=6'}
-
-  fast-safe-stringify@2.1.1:
-    resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
-
   fast-string-truncated-width@3.0.3:
     resolution: {integrity: sha512-0jjjIEL6+0jag3l2XWWizO64/aZVtpiGE3t0Zgqxv0DPuxiMjvB3M24fCyhZUO4KomJQPj3LTSUnDP3GpdwC0g==}
 
@@ -2753,28 +2527,12 @@ packages:
     resolution: {integrity: sha512-XXTUwCvisa5oacNGRP9SfNtYBNAMi+RPwBFmblZEF7N7swHYQS6/Zfk7SRwx4D5j3CH211YNRco1DEMNVfZCnQ==}
     engines: {node: '>=16.0.0'}
 
-  file-type@21.3.4:
-    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
-    engines: {node: '>=20'}
-
   file-uri-to-path@1.0.0:
     resolution: {integrity: sha512-0Zt+s3L7Vf1biwWZ29aARiVYLx7iMGnEUl9x33fbB/j3jR81u/O2LbqK+Bm1CDSNDKVtJ/YjwY7TUd5SkeLQLw==}
 
   filelist@1.0.6:
     resolution: {integrity: sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==}
 
-  finalhandler@1.3.2:
-    resolution: {integrity: sha512-aA4RyPcd3badbdABGDuTXCMTtOneUCAYH/gxoYRTZlIJdF0YPWuGqiAsIrhNnnqdXGswYk6dGujem4w80UJFhg==}
-    engines: {node: '>= 0.8'}
-
-  finalhandler@2.1.1:
-    resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
-    engines: {node: '>= 18.0.0'}
-
-  find-up@4.1.0:
-    resolution: {integrity: sha512-PpOwAdQ/YlXQ2vj8a3h8IipDuYRi3wceVQQGYWxNINccq40Anw7BlsEXCMbt1Zt+OLA6Fq9suIpIWD0OsnISlw==}
-    engines: {node: '>=8'}
-
   find-up@5.0.0:
     resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
     engines: {node: '>=10'}
@@ -2783,21 +2541,9 @@ packages:
     resolution: {integrity: sha512-f7ccFPK3SXFHpx15UIGyRJ/FJQctuKZ0zVuN3frBo4HnK3cay9VEW0R6yPYFHC0AgqhukPzKjq22t5DmAyqGyw==}
     engines: {node: '>=16'}
 
-  flatstr@1.0.12:
-    resolution: {integrity: sha512-4zPxDyhCyiN2wIAtSLI6gc82/EjqZc1onI4Mz/l0pWrAlsSfYH/2ZIcU+e3oA2wDwbzIWNKwa23F8rh6+DRWkw==}
-
   flatted@3.4.2:
     resolution: {integrity: sha512-PjDse7RzhcPkIJwy5t7KPWQSZ9cAbzQXcafsetQoD7sOJRQlGikNbx7yZp2OotDnJyrDcbyRq3Ttb18iYOqkxA==}
 
-  follow-redirects@1.16.0:
-    resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==}
-    engines: {node: '>=4.0'}
-    peerDependencies:
-      debug: '*'
-    peerDependenciesMeta:
-      debug:
-        optional: true
-
   foreground-child@3.3.1:
     resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
     engines: {node: '>=14'}
@@ -2806,18 +2552,6 @@ packages:
     resolution: {integrity: sha512-8RipRLol37bNs2bhoV67fiTEvdTrbMUYcFTiy3+wuuOnUog2QBHCZWXDRijWQfAkhBj2Uf5UnVaiWwA5vdd82w==}
     engines: {node: '>= 6'}
 
-  forwarded@0.2.0:
-    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
-    engines: {node: '>= 0.6'}
-
-  fresh@0.5.2:
-    resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
-    engines: {node: '>= 0.6'}
-
-  fresh@2.0.0:
-    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
-    engines: {node: '>= 0.8'}
-
   fs-constants@1.0.0:
     resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
 
@@ -2864,10 +2598,6 @@ packages:
     resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
     engines: {node: 6.* || 8.* || >= 10.*}
 
-  get-east-asian-width@1.5.0:
-    resolution: {integrity: sha512-CQ+bEO+Tva/qlmw24dCejulK5pMzVnUOFOijVogd3KQs07HnRIgp8TGipvCCRT06xeYEbpbgwaCxglFyiuIcmA==}
-    engines: {node: '>=18'}
-
   get-intrinsic@1.3.0:
     resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
     engines: {node: '>= 0.4'}
@@ -2883,10 +2613,6 @@ packages:
   get-tsconfig@4.13.7:
     resolution: {integrity: sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q==}
 
-  get-uri@6.0.5:
-    resolution: {integrity: sha512-b1O07XYq8eRuVzBNgJLstU6FYc1tS6wnMtF1I1D9lE8LxZSOGZ7LhxN54yPP6mGw5f2CkXY2BQUL9Fx41qvcIg==}
-    engines: {node: '>= 14'}
-
   github-from-package@0.0.0:
     resolution: {integrity: sha512-SyHy3T1v2NUXn29OsWdxmK6RwHD+vkj3v8en8AOBZ1wBQ/hCAQ5bAQTD02kW4W9tUp/3Qh6J8r9EvntiyCmOOw==}
 
@@ -2938,13 +2664,6 @@ packages:
     resolution: {integrity: sha512-ax7ZYomf6jqPTQ4+XCpUGyXKHk5WweS+e05MBO4/y3WJ5RkmPXNKvX+bx1behVILVwr6JSQvZAku021CHPXG3Q==}
     engines: {node: '>=10'}
 
-  gzip@0.1.0:
-    resolution: {integrity: sha512-o2kq0ogD3MMAwDUt3G8y6EtFPqXDtpNI/zNWkZoOwYkjp/j8/Q9QLpVySPxYaQ521hPT8GoV9g1/WTkd7DM5Aw==}
-
-  has-flag@3.0.0:
-    resolution: {integrity: sha512-sKJf1+ceQBr4SMkvQnBDNDtf4TXpVhVGateu0t918bl30FnbE2m4vNLX+VWe/dpjlb+HugGYzW7uQXH98HPEYw==}
-    engines: {node: '>=4'}
-
   has-flag@4.0.0:
     resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
     engines: {node: '>=8'}
@@ -2974,10 +2693,6 @@ packages:
   http-cache-semantics@4.2.0:
     resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
 
-  http-errors@2.0.1:
-    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
-    engines: {node: '>= 0.8'}
-
   http-proxy-agent@7.0.2:
     resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
     engines: {node: '>= 14'}
@@ -2990,18 +2705,11 @@ packages:
     resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
     engines: {node: '>= 14'}
 
-  https@1.0.0:
-    resolution: {integrity: sha512-4EC57ddXrkaF0x83Oj8sM6SLQHAWXw90Skqu2M4AEWENZ3F02dFJE/GARA8igO79tcgYqGrD7ae4f5L3um2lgg==}
-
   iconv-corefoundation@1.1.7:
     resolution: {integrity: sha512-T10qvkw0zz4wnm560lOEg0PovVqUXuOFhhHAkixw8/sycy7TJt7v/RrkEKEQnAw2viPSJu6iAkErxnzR0g8PpQ==}
     engines: {node: ^8.11.2 || >=10}
     os: [darwin]
 
-  iconv-lite@0.4.24:
-    resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
-    engines: {node: '>=0.10.0'}
-
   iconv-lite@0.6.3:
     resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
     engines: {node: '>=0.10.0'}
@@ -3046,10 +2754,6 @@ packages:
     resolution: {integrity: sha512-XXADHxXmvT9+CRxhXg56LJovE+bmWnEWB78LB83VZTprKTmaC5QfruXocxzTZ2Kl0DNwKuBdlIhjL8LeY8Sf8Q==}
     engines: {node: '>= 12'}
 
-  ipaddr.js@1.9.1:
-    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
-    engines: {node: '>= 0.10'}
-
   is-extglob@2.1.1:
     resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
     engines: {node: '>=0.10.0'}
@@ -3066,9 +2770,6 @@ packages:
     resolution: {integrity: sha512-2HvIEKRoqS62guEC+qBjpvRubdX910WCMuJTZ+I9yvqKU2/12eSL549HMwtabb4oupdj2sMP50k+XJfB/8JE6w==}
     engines: {node: '>=8'}
 
-  is-promise@4.0.0:
-    resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
-
   is-unicode-supported@0.1.0:
     resolution: {integrity: sha512-knxG2q4UC3u8stRGyAVJCOdxFmv5DZiRcdlIaAQXAbSfJya+OhopNotLQrstBhququ4ZpuKbDc/8S6mgXgPFPw==}
     engines: {node: '>=10'}
@@ -3104,10 +2805,6 @@ packages:
     resolution: {integrity: sha512-ekilCSN1jwRvIbgeg/57YFh8qQDNbwDb9xT/qu2DAHbFFZUicIl4ygVaAvzveMhMVr3LnpSKTNnwt8PoOfmKhQ==}
     hasBin: true
 
-  joycon@3.1.1:
-    resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
-    engines: {node: '>=10'}
-
   js-tokens@4.0.0:
     resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
 
@@ -3155,10 +2852,6 @@ packages:
   lazy-val@1.0.5:
     resolution: {integrity: sha512-0/BnGCCfyUMkBpeDgWihanIAF9JmZhHBgUhEqzvf+adhNGLoP6TaiI5oF8oyb3I45P+PcnrqihSf01M0l0G5+Q==}
 
-  leven@2.1.0:
-    resolution: {integrity: sha512-nvVPLpIHUxCUoRLrFqTgSxXJ614d8AgQoWl7zPe/2VadE8+1dpU3LBhowRuBAcuwruWtOdD8oYC9jDNJjXDPyA==}
-    engines: {node: '>=0.10.0'}
-
   levn@0.4.1:
     resolution: {integrity: sha512-+bT2uH4E5LGE7h/n3evcS/sQlJXCpIp6ym8OWJ5eV6+67Dsql/LaaT7qJBAt2rzfoa/5QBGBhxDix1dMt2kQKQ==}
     engines: {node: '>= 0.8.0'}
@@ -3173,10 +2866,6 @@ packages:
   localforage@1.10.0:
     resolution: {integrity: sha512-14/H1aX7hzBBmmh7sGPd+AOMkkIrHM3Z1PAyGgZigA1H1p5O5ANnMyWzvpAETtG68/dC4pC0ncy3+PPGzXZHPg==}
 
-  locate-path@5.0.0:
-    resolution: {integrity: sha512-t7hw9pI+WvuwNJXwk5zVHpyhIqzg2qTlklJOf0mVxGSbe3Fp2VieZcduNYjaLDoy6p9uGpQEGWG87WpMKlNq8g==}
-    engines: {node: '>=8'}
-
   locate-path@6.0.0:
     resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
     engines: {node: '>=10'}
@@ -3241,46 +2930,14 @@ packages:
   mdn-data@2.27.1:
     resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
 
-  media-typer@0.3.0:
-    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
-    engines: {node: '>= 0.6'}
-
-  media-typer@1.1.0:
-    resolution: {integrity: sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==}
-    engines: {node: '>= 0.8'}
-
-  merge-descriptors@1.0.3:
-    resolution: {integrity: sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==}
-
-  merge-descriptors@2.0.0:
-    resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
-    engines: {node: '>=18'}
-
-  methods@1.1.2:
-    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
-    engines: {node: '>= 0.6'}
-
   mime-db@1.52.0:
     resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
     engines: {node: '>= 0.6'}
 
-  mime-db@1.54.0:
-    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
-    engines: {node: '>= 0.6'}
-
   mime-types@2.1.35:
     resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
     engines: {node: '>= 0.6'}
 
-  mime-types@3.0.2:
-    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
-    engines: {node: '>=18'}
-
-  mime@1.6.0:
-    resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==}
-    engines: {node: '>=4'}
-    hasBin: true
-
   mime@2.6.0:
     resolution: {integrity: sha512-USPkMeET31rOMiarsBNIHZKLGgvKc/LrjofAnBlOttf5ajRvqiRA8QsenbcooctK6d6Ts6aqZXBA+XbkKthiQg==}
     engines: {node: '>=4.0.0'}
@@ -3361,27 +3018,16 @@ packages:
   mlly@1.8.2:
     resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
 
-  mri@1.1.4:
-    resolution: {integrity: sha512-6y7IjGPm8AzlvoUrwAaw1tLnUBudaS3752vcd8JtrpGGQn+rXIe63LFVHm/YMwtqAuh+LJPCFdlLYPWM1nYn6w==}
-    engines: {node: '>=4'}
-
   mrmime@2.0.1:
     resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
     engines: {node: '>=10'}
 
-  ms@2.0.0:
-    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
-
   ms@2.1.3:
     resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
 
   muggle-string@0.4.1:
     resolution: {integrity: sha512-VNTrAak/KhO2i8dqqnqnAHOa3cYBwXEZe9h+D5h/1ZqFSTEFHdM65lR7RoIqq3tBBYavsOXV84NoHXZ0AkPyqQ==}
 
-  music-metadata@11.12.3:
-    resolution: {integrity: sha512-n6hSTZkuD59qWgHh6IP5dtDlDZQXoxk/bcA85Jywg8Z1iFrlNgl2+GTFgjZyn52W5UgQpV42V4XqrQZZAMbZTQ==}
-    engines: {node: '>=18'}
-
   mute-stream@3.0.0:
     resolution: {integrity: sha512-dkEJPVvun4FryqBmZ5KhDo0K9iDXAwn08tMLDinNdRBNPcYEDiWYysLcc6k3mjTMlbP9KyylvRpd4wFtwrT9rw==}
     engines: {node: ^20.17.0 || >=22.9.0}
@@ -3397,18 +3043,10 @@ packages:
   natural-compare@1.4.0:
     resolution: {integrity: sha512-OWND8ei3VtNC9h7V60qff3SVobHr996CTwgxubgyQYEpg290h9J0buyECNNJexkFm5sOajh5G116RYA1c8ZMSw==}
 
-  negotiator@0.6.3:
-    resolution: {integrity: sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==}
-    engines: {node: '>= 0.6'}
-
   negotiator@1.0.0:
     resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
     engines: {node: '>= 0.6'}
 
-  netmask@2.1.1:
-    resolution: {integrity: sha512-eonl3sLUha+S1GzTPxychyhnUzKyeQkZ7jLjKrBagJgPla13F+uQ71HgpFefyHgqrjEbCPkDArxYsjY8/+gLKA==}
-    engines: {node: '>= 0.4.0'}
-
   node-abi@3.89.0:
     resolution: {integrity: sha512-6u9UwL0HlAl21+agMN3YAMXcKByMqwGx+pq+P76vii5f7hTPtKDp08/H9py6DY+cfDw7kQNTGEj/rly3IgbNQA==}
     engines: {node: '>=10'}
@@ -3426,10 +3064,6 @@ packages:
   node-fetch-native@1.6.7:
     resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
 
-  node-forge@1.4.0:
-    resolution: {integrity: sha512-LarFH0+6VfriEhqMMcLX2F7SwSXeWwnEAJEsYm5QKWchiVYVvJyV9v7UDvUv+w5HO23ZpQTXDv/GxdDdMyOuoQ==}
-    engines: {node: '>= 6.13.0'}
-
   node-gyp@11.5.0:
     resolution: {integrity: sha512-ra7Kvlhxn5V9Slyus0ygMa2h+UqExPqUIkfk7Pc8QTLT956JLSy51uWFwHtIYy0vI8cB4BDhc/S03+880My/LQ==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -3438,9 +3072,6 @@ packages:
   node-releases@2.0.37:
     resolution: {integrity: sha512-1h5gKZCF+pO/o3Iqt5Jp7wc9rH3eJJ0+nh/CIoiRwjRxde/hAHyLPXYN4V3CqKAbiZPSeJFSWHmJsbkicta0Eg==}
 
-  node-windows@1.0.0-beta.8:
-    resolution: {integrity: sha512-uLekXnSeem3nW5escID224Fd0U/1VtvE796JpSpOY+c73Cslz/Qn2WUHRJyPQJEMrNGAy/FMRFjjhh4z1alZTA==}
-
   nopt@8.1.0:
     resolution: {integrity: sha512-ieGu42u/Qsa4TFktmaKEwM6MQH0pOWnaB3htzh0JRtx84+Mebc0cbZYN5bC+6WTZ4+77xrL9Pn5m7CV6VIkV7A==}
     engines: {node: ^18.17.0 || >=20.5.0}
@@ -3453,10 +3084,6 @@ packages:
   nth-check@2.1.1:
     resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
 
-  object-inspect@1.13.4:
-    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
-    engines: {node: '>= 0.4'}
-
   object-keys@1.1.1:
     resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
     engines: {node: '>= 0.4'}
@@ -3470,13 +3097,6 @@ packages:
   ohash@2.0.11:
     resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
 
-  on-exit-leak-free@0.2.0:
-    resolution: {integrity: sha512-dqaz3u44QbRXQooZLTUKU41ZrzYrcvLISVgbrzbyCMxpmSLJvZ3ZamIJIZ29P6OhZIkNIQKosdeM6t1LYbA9hg==}
-
-  on-finished@2.4.1:
-    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
-    engines: {node: '>= 0.8'}
-
   once@1.4.0:
     resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
 
@@ -3505,18 +3125,10 @@ packages:
     resolution: {integrity: sha512-BZOr3nRQHOntUjTrH8+Lh54smKHoHyur8We1V8DSMVrl5A2malOOwuJRnKRDjSnkoeBh4at6BwEnb5I7Jl31wg==}
     engines: {node: '>=8'}
 
-  p-limit@2.3.0:
-    resolution: {integrity: sha512-//88mFWSJx8lxCzwdAABTJL2MyWB12+eIY7MDL2SqLmAkeKU9qxRvWuSyTjm3FUmpBEMuFfckAIqEaVGUDxb6w==}
-    engines: {node: '>=6'}
-
   p-limit@3.1.0:
     resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
     engines: {node: '>=10'}
 
-  p-locate@4.1.0:
-    resolution: {integrity: sha512-R79ZZ/0wAxKGu3oYMlz8jy/kbhsNrS7SKZ7PxEHBgJ5+F2mtFW2fK2cOtBh1cHYkQsbzFV7I+EoRKe6Yt0oK7A==}
-    engines: {node: '>=8'}
-
   p-locate@5.0.0:
     resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
     engines: {node: '>=10'}
@@ -3525,18 +3137,6 @@ packages:
     resolution: {integrity: sha512-tkAQEw8ysMzmkhgw8k+1U/iPhWNhykKnSk4Rd5zLoPJCuJaGRPo6YposrZgaxHKzDHdDWWZvE/Sk7hsL2X/CpQ==}
     engines: {node: '>=18'}
 
-  p-try@2.2.0:
-    resolution: {integrity: sha512-R4nPAVTAU0B9D35/Gk3uJf/7XYbQcyohSKdvAxIRSNghFl4e71hVoGnBNQz9cWaXxO2I10KTC+3jMdvvoKw6dQ==}
-    engines: {node: '>=6'}
-
-  pac-proxy-agent@7.2.0:
-    resolution: {integrity: sha512-TEB8ESquiLMc0lV8vcd5Ql/JAKAoyzHFXaStwjkzpOpC5Yv+pIzLfHvjTSdf3vpa2bMiUQrg9i6276yn8666aA==}
-    engines: {node: '>= 14'}
-
-  pac-resolver@7.0.1:
-    resolution: {integrity: sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg==}
-    engines: {node: '>= 14'}
-
   package-json-from-dist@1.0.1:
     resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
 
@@ -3547,10 +3147,6 @@ packages:
     resolution: {integrity: sha512-GQ2EWRpQV8/o+Aw8YqtfZZPfNRWZYkbidE9k5rpl/hC3vtHHBfGm2Ifi6qWV+coDGkrUKZAxE3Lot5kcsRlh+g==}
     engines: {node: '>=6'}
 
-  parseurl@1.3.3:
-    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
-    engines: {node: '>= 0.8'}
-
   path-browserify@1.0.1:
     resolution: {integrity: sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==}
 
@@ -3574,12 +3170,6 @@ packages:
     resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
     engines: {node: 18 || 20 || >=22}
 
-  path-to-regexp@0.1.13:
-    resolution: {integrity: sha512-A/AGNMFN3c8bOlvV9RreMdrv7jsmF9XIfDeCd87+I8RNg6s78BhJxMu69NEMHBSJFxKidViTEdruRwEk/WIKqA==}
-
-  path-to-regexp@8.4.2:
-    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
-
   pathe@2.0.3:
     resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
 
@@ -3626,20 +3216,6 @@ packages:
       typescript:
         optional: true
 
-  pino-abstract-transport@0.5.0:
-    resolution: {integrity: sha512-+KAgmVeqXYbTtU2FScx1XS3kNyfZ5TrXY07V96QnUSFqo2gAqlvmaxH67Lj7SWazqsMabf+58ctdTcBgnOLUOQ==}
-
-  pino-pretty@7.6.1:
-    resolution: {integrity: sha512-H7N6ZYkiyrfwBGW9CSjx0uyO9Q2Lyt73881+OTYk8v3TiTdgN92QHrWlEq/LeWw5XtDP64jeSk3mnc6T+xX9/w==}
-    hasBin: true
-
-  pino-std-serializers@3.2.0:
-    resolution: {integrity: sha512-EqX4pwDPrt3MuOAAUBMU0Tk5kR/YcCM5fNPEzgCO2zJ5HfX0vbiH9HbJglnyeQsN96Kznae6MWD47pZB5avTrg==}
-
-  pino@6.14.0:
-    resolution: {integrity: sha512-iuhEDel3Z3hF9Jfe44DPXR8l07bhjuFY3GMHIXbjnY9XcafbyDDwl2sN2vw2GjMPf5Nkoe+OFao7ffn9SXaKDg==}
-    hasBin: true
-
   pkg-types@1.3.1:
     resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
 
@@ -3650,10 +3226,6 @@ packages:
     resolution: {integrity: sha512-uysumyrvkUX0rX/dEVqt8gC3sTBzd4zoWfLeS29nb53imdaXVvLINYXTI2GNqzaMuvacNx4uJQ8+b3zXR0pkgQ==}
     engines: {node: '>=10.4.0'}
 
-  pngjs@5.0.0:
-    resolution: {integrity: sha512-40QW5YalBNfQo5yRYmiw7Yz6TKKVr3h6970B2YE+3fQpsWcrbj1PzJgxeJ19DRQjhMbKPIuMY8rFaXc8moolVw==}
-    engines: {node: '>=10.13.0'}
-
   postcss-selector-parser@7.1.1:
     resolution: {integrity: sha512-orRsuYpJVw8LdAwqqLykBj9ecS5/cRHlI5+nvTo8LcCKmzDmqVORXtOIYEEQuL9D4BxtA1lm5isAqzQZCoQ6Eg==}
     engines: {node: '>=4'}
@@ -3686,9 +3258,6 @@ packages:
     resolution: {integrity: sha512-Azwzvl90HaF0aCz1JrDdXQykFakSSNPaPoiZ9fm5qJIMHioDZEi7OAdRwSm6rSoPtY3Qutnm3L7ogmg3dc+wbQ==}
     engines: {node: ^18.17.0 || >=20.5.0}
 
-  process-warning@1.0.0:
-    resolution: {integrity: sha512-du4wfLyj4yCZq1VupnVSZmRsPJsNuxoDQFdCFHLaYiEbFBD7QE0a+I4D7hOxrVnh78QE/YipFAj9lXHiXocV+Q==}
-
   progress@2.0.3:
     resolution: {integrity: sha512-7PiHtLll5LdnKIMw100I+8xJXR5gW2QwWYkT6iJva0bXitZKa/XMrSbdmg3r2Xnaidz9Qumd0VPaMrZlF9V9sA==}
     engines: {node: '>=0.4.0'}
@@ -3700,14 +3269,6 @@ packages:
   proper-lockfile@4.1.2:
     resolution: {integrity: sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==}
 
-  proxy-addr@2.0.7:
-    resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
-    engines: {node: '>= 0.10'}
-
-  proxy-from-env@2.1.0:
-    resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
-    engines: {node: '>=10'}
-
   pump@3.0.4:
     resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
 
@@ -3715,44 +3276,16 @@ packages:
     resolution: {integrity: sha512-vYt7UD1U9Wg6138shLtLOvdAu+8DsC/ilFtEVHcH+wydcSpNE20AfSOduf6MkRFahL5FY7X1oU7nKVZFtfq8Fg==}
     engines: {node: '>=6'}
 
-  qrcode@1.5.4:
-    resolution: {integrity: sha512-1ca71Zgiu6ORjHqFBDpnSMTR2ReToX4l1Au1VFLyVeBTFavzQnv5JxMFr3ukHVKpSrSA2MCk0lNJSykjUfz7Zg==}
-    engines: {node: '>=10.13.0'}
-    hasBin: true
-
-  qs@6.14.2:
-    resolution: {integrity: sha512-V/yCWTTF7VJ9hIh18Ugr2zhJMP01MY7c5kh4J870L7imm6/DIzBsNLTXzMwUA3yZ5b/KBqLx8Kp3uRvd7xSe3Q==}
-    engines: {node: '>=0.6'}
-
-  qs@6.15.1:
-    resolution: {integrity: sha512-6YHEFRL9mfgcAvql/XhwTvf5jKcOiiupt2FiJxHkiX1z4j7WL8J/jRHYLluORvc1XxB5rV20KoeK00gVJamspg==}
-    engines: {node: '>=0.6'}
-
   quansync@0.2.11:
     resolution: {integrity: sha512-AifT7QEbW9Nri4tAwR5M/uzpBuqfZf+zwaEM/QkzEjj7NBuFD2rBuy0K3dE+8wltbezDV7JMA0WfnCPYRSYbXA==}
 
   quansync@1.0.0:
     resolution: {integrity: sha512-5xZacEEufv3HSTPQuchrvV6soaiACMFnq1H8wkVioctoH3TRha9Sz66lOxRwPK/qZj7HPiSveih9yAyh98gvqA==}
 
-  quick-format-unescaped@4.0.4:
-    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
-
   quick-lru@5.1.1:
     resolution: {integrity: sha512-WuyALRjWPDGtt/wzJiadO5AXY+8hZ80hVpe6MyivgraREW751X3SbhRvG3eLKOYN+8VEvqLcf3wdnt44Z4S4SA==}
     engines: {node: '>=10'}
 
-  range-parser@1.2.1:
-    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
-    engines: {node: '>= 0.6'}
-
-  raw-body@2.5.3:
-    resolution: {integrity: sha512-s4VSOf6yN0rvbRZGxs8Om5CWj6seneMwK3oDb4lWDH0UPhWcxwOWw5+qk24bxq87szX1ydrwylIOp2uG1ojUpA==}
-    engines: {node: '>= 0.8'}
-
-  raw-body@3.0.2:
-    resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
-    engines: {node: '>= 0.10'}
-
   rc@1.2.8:
     resolution: {integrity: sha512-y3bGgqKj3QBdxLbLkomlohkvsA8gdAiUQlSBJnBhfn+BPxg4bc62d8TcBW15wavDfgexCgccckhcZvywyQYPOw==}
     hasBin: true
@@ -3782,9 +3315,6 @@ packages:
     resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
     engines: {node: '>=0.10.0'}
 
-  require-main-filename@2.0.0:
-    resolution: {integrity: sha512-NKN5kMDylKuldxYLSUfrbo5Tuzh4hd+2E8NPPX02mZtn1VuREQToYe/ZdlJy+J3uCpfaiGF05e7B8W0iXbQHmg==}
-
   resedit@1.7.2:
     resolution: {integrity: sha512-vHjcY2MlAITJhC0eRD/Vv8Vlgmu9Sd3LX9zZvtGzU5ZImdTN3+d6e/4mnTyV8vEbyf1sgNIrWxhWlrys52OkEA==}
     engines: {node: '>=12', npm: '>=6'}
@@ -3832,16 +3362,9 @@ packages:
     engines: {node: '>=18.0.0', npm: '>=8.0.0'}
     hasBin: true
 
-  router@2.2.0:
-    resolution: {integrity: sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==}
-    engines: {node: '>= 18'}
-
   safe-buffer@5.2.1:
     resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
 
-  safe-decode-uri-component@1.2.1:
-    resolution: {integrity: sha512-j0PKk0v8qPOD0goqRAvoI7GKy+HwLHXEpXaQlA1IqJ65jjiILRK1InlfNdIKUUUYuLtERADaJumgYKNfyQBO+w==}
-
   safer-buffer@2.1.2:
     resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
 
@@ -3855,9 +3378,6 @@ packages:
   scule@1.3.0:
     resolution: {integrity: sha512-6FtHJEvt+pVMIB9IBY+IcCJ6Z5f1iQnytgyfKMhDKgmzYG+TeH/wx1y3l27rshSbLiSanrR9ffZDrEsmjlQF2g==}
 
-  secure-json-parse@2.7.0:
-    resolution: {integrity: sha512-6aU+Rwsezw7VR8/nyvKTx8QpWH9FrcYiXXlqC4z5d5XQBDRqtbfsRjnwGyqbi3gddNtWHuEk9OANUotL26qKUw==}
-
   semver-compare@1.0.0:
     resolution: {integrity: sha512-YM3/ITh2MJ5MtzaM429anh+x2jiLVjqILF4m4oyQB18W7Ggea7BfqdH/wGMK7dDiMghv/6WG7znWMwUDzJiXow==}
 
@@ -3874,32 +3394,10 @@ packages:
     engines: {node: '>=10'}
     hasBin: true
 
-  send@0.19.2:
-    resolution: {integrity: sha512-VMbMxbDeehAxpOtWJXlcUS5E8iXh6QmN+BkRX1GARS3wRaXEEgzCcB10gTQazO42tpNIya8xIyNx8fll1OFPrg==}
-    engines: {node: '>= 0.8.0'}
-
-  send@1.2.1:
-    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
-    engines: {node: '>= 18'}
-
   serialize-error@7.0.1:
     resolution: {integrity: sha512-8I8TjW5KMOKsZQTvoxjuSIa7foAwPWGOts+6o7sgjz41/qMD9VQHEDxi6PBvK2l0MXUmqZyNpUK+T2tQaaElvw==}
     engines: {node: '>=10'}
 
-  serve-static@1.16.3:
-    resolution: {integrity: sha512-x0RTqQel6g5SY7Lg6ZreMmsOzncHFU7nhnRWkKgWuMTu5NN0DR5oruckMqRvacAN9d5w6ARnRBXl9xhDCgfMeA==}
-    engines: {node: '>= 0.8.0'}
-
-  serve-static@2.2.1:
-    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
-    engines: {node: '>= 18'}
-
-  set-blocking@2.0.0:
-    resolution: {integrity: sha512-KiKBS8AnWGEyLzofFfmvKwpdPzqiy16LvQfK3yv/fVH7Bj13/wl3JSR1J+rfgRE9q7xUJK4qvgS8raSOeLUehw==}
-
-  setprototypeof@1.2.0:
-    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
-
   shebang-command@2.0.0:
     resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
     engines: {node: '>=8'}
@@ -3908,22 +3406,6 @@ packages:
     resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
     engines: {node: '>=8'}
 
-  side-channel-list@1.0.1:
-    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-map@1.0.1:
-    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-weakmap@1.0.2:
-    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
-    engines: {node: '>= 0.4'}
-
-  side-channel@1.1.0:
-    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
-    engines: {node: '>= 0.4'}
-
   signal-exit@3.0.7:
     resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
 
@@ -3961,12 +3443,6 @@ packages:
     resolution: {integrity: sha512-HLpt+uLy/pxB+bum/9DzAgiKS8CX1EvbWxI4zlmgGCExImLdiad2iCwXT5Z4c9c3Eq8rP2318mPW2c+QbtjK8A==}
     engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
 
-  sonic-boom@1.4.1:
-    resolution: {integrity: sha512-LRHh/A8tpW7ru89lrlkU4AszXt1dbwSjVWguGrmlxE7tawVmDBlI1PILMkXAxJTwqhgsEeTHzj36D5CmHgQmNg==}
-
-  sonic-boom@2.8.0:
-    resolution: {integrity: sha512-kuonw1YOYYNOve5iHdSahXPOK49GqwA+LZhI6Wz/l0rP57iKyXXIHaRagOBHAPmGwJC6od2Z9zgvZ5loSgMlVg==}
-
   source-map-js@1.2.1:
     resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
     engines: {node: '>=0.10.0'}
@@ -3982,10 +3458,6 @@ packages:
     resolution: {integrity: sha512-1POYv7uv2gXoyGFpBCmpDVSNV74IfsWlDW216UPjbWufNf+bSU6GdbDsxdcxtfwb4xlI3yxzOTKClUosxARYrQ==}
     engines: {node: '>=0.10.0'}
 
-  split2@4.2.0:
-    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
-    engines: {node: '>= 10.x'}
-
   sprintf-js@1.1.3:
     resolution: {integrity: sha512-Oo+0REFV59/rz3gfJNKQiBlwfHaSESl1pcGyABQsnnIfWOFt6JNj5gCog2U6MLZ//IGYD+nA8nI+mTShREReaA==}
 
@@ -3997,17 +3469,6 @@ packages:
     resolution: {integrity: sha512-jH9EhtKIjuXZ2cWxmXS8ZP80XyC3iasQxMDV8jzhNJpfDb7VbQLVW4Wvsxz9QZvzV+G4YoSfBUVKDOyxLzi/sg==}
     engines: {node: '>= 6'}
 
-  statuses@2.0.2:
-    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
-    engines: {node: '>= 0.8'}
-
-  stream-shift@1.0.3:
-    resolution: {integrity: sha512-76ORR0DO1o1hlKwTbi/DM3EXWGf3ZJYO8cXX5RJwnul2DEg2oyoZyjLNoQM8WsvZiFKCRfC1O0J7iCvie3RZmQ==}
-
-  streamsearch@1.1.0:
-    resolution: {integrity: sha512-Mcc5wHehp9aXz1ax6bZUyY5afg9u2rv5cqQI3mRrYkGC8rW2hM02jWuwjtL++LS5qinSyhj2QfLyNsuc+VsExg==}
-    engines: {node: '>=10.0.0'}
-
   string-width@4.2.3:
     resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
     engines: {node: '>=8'}
@@ -4016,10 +3477,6 @@ packages:
     resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
     engines: {node: '>=12'}
 
-  string-width@7.2.0:
-    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
-    engines: {node: '>=18'}
-
   string_decoder@1.3.0:
     resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
 
@@ -4042,10 +3499,6 @@ packages:
   strip-literal@3.1.0:
     resolution: {integrity: sha512-8r3mkIM/2+PpjHoOtiAW8Rg3jJLHaV7xPwG+YRGrv6FP0wwk/toTpATxWYOW0BKdWwl82VT2tFYi5DlROa0Mxg==}
 
-  strtok3@10.3.5:
-    resolution: {integrity: sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==}
-    engines: {node: '>=18'}
-
   stubborn-fs@2.0.0:
     resolution: {integrity: sha512-Y0AvSwDw8y+nlSNFXMm2g6L51rBGdAQT20J3YSOqxC53Lo3bjWRtr2BKcfYoAf352WYpsZSTURrA0tqhfgudPA==}
 
@@ -4060,10 +3513,6 @@ packages:
     resolution: {integrity: sha512-H+ue8Zo4vJmV2nRjpx86P35lzwDT3nItnIsocgumgr0hHMQ+ZGq5vrERg9kJBo5AWGmxZDhzDo+WVIJqkB0cGA==}
     engines: {node: '>=16'}
 
-  supports-color@5.5.0:
-    resolution: {integrity: sha512-QjVjwdXIt408MIiAqCX4oUKsgU2EqAGzs2Ppkm4aQYbjm+ZEWEcW4SfFNTr4uMNZma0ey4f5lgLrkB0aX0QMow==}
-    engines: {node: '>=4'}
-
   supports-color@7.2.0:
     resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
     engines: {node: '>=8'}
@@ -4107,14 +3556,6 @@ packages:
     resolution: {integrity: sha512-voyz6MApa1rQGUxT3E+BK7/ROe8itEx7vD8/HEvt4xwXucvQ5G5oeEiHkmHZJuBO21RpOf+YYm9MOivj709jow==}
     engines: {node: '>=14.14'}
 
-  toidentifier@1.0.1:
-    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
-    engines: {node: '>=0.6'}
-
-  token-types@6.1.2:
-    resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
-    engines: {node: '>=14.16'}
-
   totalist@3.0.1:
     resolution: {integrity: sha512-sf4i37nQ2LBx4m3wB74y+ubopq6W/dIzXg0FDGjsYnZHVa1Da8FH853wlL2gtUhg+xJXjfk3kUZS3BRoQeoQBQ==}
     engines: {node: '>=6'}
@@ -4139,10 +3580,6 @@ packages:
   tunnel-agent@0.6.0:
     resolution: {integrity: sha512-McnNiV1l8RYeY8tBgEpuodCC1mLUdbSN+CYBL7kJsJNInOP8UjDDEwdk6Mw60vdLLrr5NHKZhMAOSrR2NZuQ+w==}
 
-  tunnel@0.0.6:
-    resolution: {integrity: sha512-1h/Lnq9yajKY2PEbBadPXj3VxsDDu844OnaAo52UVmIzIvwwtBPIuNvkjuzBlTWpfJyUbG3ez0KSBibQkj4ojg==}
-    engines: {node: '>=0.6.11 <=0.7.0 || >=0.7.3'}
-
   typanion@3.14.0:
     resolution: {integrity: sha512-ZW/lVMRabETuYCd9O9ZvMhAh8GslSqaUjxmK/JLPCh6l73CvLBiuXswj/+7LdnWOgYsQ130FqLzFz5aGT4I3Ug==}
 
@@ -4154,14 +3591,6 @@ packages:
     resolution: {integrity: sha512-34R7HTnG0XIJcBSn5XhDd7nNFPRcXYRZrBB2O2jdKqYODldSzBAqzsWoZYYvduky73toYS/ESqxPvkDf/F0XMg==}
     engines: {node: '>=10'}
 
-  type-is@1.6.18:
-    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
-    engines: {node: '>= 0.6'}
-
-  type-is@2.0.1:
-    resolution: {integrity: sha512-OZs6gsjF4vMp32qrCbiVSkrFmXtG/AZhY3t0iAMrMBiAZyV9oALtXO8hsrHbMXF9x6L3grlFuwW2oAz7cav+Gw==}
-    engines: {node: '>= 0.6'}
-
   type-level-regexp@0.1.17:
     resolution: {integrity: sha512-wTk4DH3cxwk196uGLK/E9pE45aLfeKJacKmcEgEOA/q5dnPGNxXt0cfYdFxb57L+sEpf1oJH4Dnx/pnRcku9jg==}
 
@@ -4180,10 +3609,6 @@ packages:
   ufo@1.6.3:
     resolution: {integrity: sha512-yDJTmhydvl5lJzBmy/hyOAA0d+aqCBuwl818haVdYCRrWV84o7YyeVm4QlVHStqNrrJSTb6jKuFAVqAFsr+K3Q==}
 
-  uint8array-extras@1.5.0:
-    resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
-    engines: {node: '>=18'}
-
   unconfig-core@7.5.0:
     resolution: {integrity: sha512-Su3FauozOGP44ZmKdHy2oE6LPjk51M/TRRjHv2HNCWiDvfvCoxC2lno6jevMA91MYAdCdwP05QnWdWpSbncX/w==}
 
@@ -4231,10 +3656,6 @@ packages:
       '@unocss/webpack':
         optional: true
 
-  unpipe@1.0.0:
-    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
-    engines: {node: '>= 0.8'}
-
   unplugin-auto-import@21.0.0:
     resolution: {integrity: sha512-vWuC8SwqJmxZFYwPojhOhOXDb5xFhNNcEVb9K/RFkyk/3VnfaOjzitWN7v+8DEKpMjSsY2AEGXNgt6I0yQrhRQ==}
     engines: {node: '>=20.19.0'}
@@ -4301,14 +3722,6 @@ packages:
   util-deprecate@1.0.2:
     resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
 
-  utils-merge@1.0.1:
-    resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
-    engines: {node: '>= 0.4.0'}
-
-  vary@1.1.2:
-    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
-    engines: {node: '>= 0.8'}
-
   verror@1.10.1:
     resolution: {integrity: sha512-veufcmxri4e3XSrT0xwfUR7kguIkaxBeosDg00yDWhk49wdwkSUrvvsm7nc75e1PUyvIeZj6nS8VQRYz2/S4Xg==}
     engines: {node: '>=0.6.0'}
@@ -4417,9 +3830,6 @@ packages:
   when-exit@2.1.5:
     resolution: {integrity: sha512-VGkKJ564kzt6Ms1dbgPP/yuIoQCrsFAnRbptpC5wOEsDaNsbCB2bnfnaA8i/vRs5tjUSEOtIuvl9/MyVsvQZCg==}
 
-  which-module@2.0.1:
-    resolution: {integrity: sha512-iBdZ57RDvnOR9AGBhML2vFZf7h8vmBjhoaZqODJBFWHVtKkDmKuHai3cx5PgVMrX5YDNp27AofYbAwctSS+vhQ==}
-
   which@2.0.2:
     resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
     engines: {node: '>= 8'}
@@ -4430,17 +3840,10 @@ packages:
     engines: {node: ^18.17.0 || >=20.5.0}
     hasBin: true
 
-  win-guid@0.2.1:
-    resolution: {integrity: sha512-gEIQU4mkgl2OPeoNrWflcJFJ3Ae2BPd4eCsHHA/XikslkIVms/nHhvnvzIZV7VLmBvtFlDOzLt9rrZT+n6D67A==}
-
   word-wrap@1.2.5:
     resolution: {integrity: sha512-BN22B5eaMMI9UMtjrGd5g5eCYPpCPDUy0FJXbYsaT5zYxjFOckS53SQDE3pWkVoWpHXVb3BrYcEN4Twa55B5cA==}
     engines: {node: '>=0.10.0'}
 
-  wrap-ansi@6.2.0:
-    resolution: {integrity: sha512-r6lPcBGxZXlIcymEu7InxDMhdW0KDxpLgoFLcguasxCaJ/SOIZwINatK9KY/tf+ZrlywOKU0UDj3ATXUBfxJXA==}
-    engines: {node: '>=8'}
-
   wrap-ansi@7.0.0:
     resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
     engines: {node: '>=10'}
@@ -4449,10 +3852,6 @@ packages:
     resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
     engines: {node: '>=12'}
 
-  wrap-ansi@9.0.2:
-    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
-    engines: {node: '>=18'}
-
   wrappy@1.0.2:
     resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
 
@@ -4460,24 +3859,10 @@ packages:
     resolution: {integrity: sha512-ICP2e+jsHvAj2E2lIHxa5tjXRlKDJo4IdvPvCXbXQGdzSfmSpNVyIKMvoZHjDY9DP0zV17iI85o90vRFXNccRw==}
     engines: {node: '>=12'}
 
-  xml2js@0.6.2:
-    resolution: {integrity: sha512-T4rieHaC1EXcES0Kxxj4JWgaUQHDk+qwHcYOCFHfiwKz7tOVPLq7Hjq9dM1WCMhylqMEfP7hMcOIChvotiZegA==}
-    engines: {node: '>=4.0.0'}
-
-  xml@1.0.1:
-    resolution: {integrity: sha512-huCv9IH9Tcf95zuYCsQraZtWnJvBtLVE0QHMOs8bWyZAFZNDcYjsPq1nEx8jKA9y+Beo9v+7OBPRisQTjinQMw==}
-
-  xmlbuilder@11.0.1:
-    resolution: {integrity: sha512-fDlsI/kFEx7gLvbecc0/ohLG50fugQp8ryHzMTuW9vSa1GJ0XYWKnhsUx7oie3G98+r56aTQIUB4kht42R3JvA==}
-    engines: {node: '>=4.0'}
-
   xmlbuilder@15.1.1:
     resolution: {integrity: sha512-yMqGBqtXyeN1e3TGYvgNgDVZ3j84W4cwkOXQswghol6APgZWaff9lnbvN7MHYJOiXsvGPXtjTYJEiC9J2wv9Eg==}
     engines: {node: '>=8.0'}
 
-  y18n@4.0.3:
-    resolution: {integrity: sha512-JKhqTOwSrqNA1NY5lSztJ1GrBiUodLMmIZuLiDaMRJ+itFd+ABVE8XBjOvIWL+rSqNDC74LCSFmlb/U4UZ4hJQ==}
-
   y18n@5.0.8:
     resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
     engines: {node: '>=10'}
@@ -4497,30 +3882,14 @@ packages:
     engines: {node: '>= 14.6'}
     hasBin: true
 
-  yargs-parser@18.1.3:
-    resolution: {integrity: sha512-o50j0JeToy/4K6OZcaQmW6lyXXKhq7csREXcDwk2omFPJEwUNOVtJKvmDr9EI1fAJZUyZcRF7kxGBWmRXudrCQ==}
-    engines: {node: '>=6'}
-
   yargs-parser@21.1.1:
     resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
     engines: {node: '>=12'}
 
-  yargs-parser@22.0.0:
-    resolution: {integrity: sha512-rwu/ClNdSMpkSrUb+d6BRsSkLUq1fmfsY6TOpYzTwvwkg1/NRG85KBy3kq++A8LKQwX6lsu+aWad+2khvuXrqw==}
-    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
-
-  yargs@15.4.1:
-    resolution: {integrity: sha512-aePbxDmcYW++PaqBsJ+HYUFwCdv4LVvdnhBy78E57PIor8/OVvhMrADFFEDh8DHDFRv/O9i3lPhsENjO7QX0+A==}
-    engines: {node: '>=8'}
-
   yargs@17.7.2:
     resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
     engines: {node: '>=12'}
 
-  yargs@18.0.0:
-    resolution: {integrity: sha512-4UEqdc2RYGHZc7Doyqkrqiln3p9X2DZVxaGbwhn2pi7MrRagKaOcIKe8L3OxYcbhXLgLFUS3zAYuQjKBQgmuNg==}
-    engines: {node: ^20.19.0 || ^22.12.0 || >=23}
-
   yauzl@2.10.0:
     resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
 
@@ -4644,8 +4013,6 @@ snapshots:
       '@babel/helper-string-parser': 7.27.1
       '@babel/helper-validator-identifier': 7.28.5
 
-  '@borewit/text-codec@0.2.2': {}
-
   '@develar/schema-utils@2.6.5':
     dependencies:
       ajv: 6.14.0
@@ -5493,37 +4860,6 @@ snapshots:
       - '@emnapi/core'
       - '@emnapi/runtime'
 
-  '@neteasecloudmusicapienhanced/api@4.32.0':
-    dependencies:
-      '@neteasecloudmusicapienhanced/unblockmusic-utils': 0.2.4
-      axios: 1.15.1
-      crypto-js: 4.2.0
-      dotenv: 17.4.2
-      express: 5.2.1
-      express-fileupload: 1.5.2
-      gzip: 0.1.0
-      music-metadata: 11.12.3
-      node-forge: 1.4.0
-      pac-proxy-agent: 7.2.0
-      qrcode: 1.5.4
-      safe-decode-uri-component: 1.2.1
-      tunnel: 0.0.6
-      xml2js: 0.6.2
-      yargs: 18.0.0
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
-  '@neteasecloudmusicapienhanced/unblockmusic-utils@0.2.4':
-    dependencies:
-      '@unblockneteasemusic/server': 0.28.0
-      axios: 1.15.1
-      express: 4.22.1
-      https: 1.0.0
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
   '@npmcli/agent@3.0.0':
     dependencies:
       agent-base: 7.1.4
@@ -5771,17 +5107,6 @@ snapshots:
       '@tanstack/virtual-core': 3.13.23
       vue: 3.5.32(typescript@5.9.3)
 
-  '@tokenizer/inflate@0.4.1':
-    dependencies:
-      debug: 4.4.3
-      token-types: 6.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  '@tokenizer/token@0.3.0': {}
-
-  '@tootallnate/quickjs-emscripten@0.23.0': {}
-
   '@tybys/wasm-util@0.10.1':
     dependencies:
       tslib: 2.8.1
@@ -5935,12 +5260,6 @@ snapshots:
       '@typescript-eslint/types': 8.58.1
       eslint-visitor-keys: 5.0.1
 
-  '@unblockneteasemusic/server@0.28.0':
-    dependencies:
-      node-windows: 1.0.0-beta.8
-      pino: 6.14.0
-      pino-pretty: 7.6.1
-
   '@unocss/cli@66.6.8':
     dependencies:
       '@jridgewell/remapping': 2.3.5
@@ -6215,16 +5534,6 @@ snapshots:
 
   abbrev@3.0.1: {}
 
-  accepts@1.3.8:
-    dependencies:
-      mime-types: 2.1.35
-      negotiator: 0.6.3
-
-  accepts@2.0.0:
-    dependencies:
-      mime-types: 3.0.2
-      negotiator: 1.0.0
-
   acorn-jsx@5.3.2(acorn@8.16.0):
     dependencies:
       acorn: 8.16.0
@@ -6250,10 +5559,6 @@ snapshots:
 
   ansi-regex@6.2.2: {}
 
-  ansi-styles@3.2.1:
-    dependencies:
-      color-convert: 1.9.3
-
   ansi-styles@4.3.0:
     dependencies:
       color-convert: 2.0.1
@@ -6307,19 +5612,10 @@ snapshots:
 
   argparse@2.0.1: {}
 
-  args@5.0.3:
-    dependencies:
-      camelcase: 5.0.0
-      chalk: 2.4.2
-      leven: 2.1.0
-      mri: 1.1.4
-
   aria-hidden@1.2.6:
     dependencies:
       tslib: 2.8.1
 
-  array-flatten@1.1.1: {}
-
   assert-plus@1.0.0:
     optional: true
 
@@ -6328,10 +5624,6 @@ snapshots:
       '@babel/parser': 7.29.2
       pathe: 2.0.3
 
-  ast-types@0.13.4:
-    dependencies:
-      tslib: 2.8.1
-
   ast-walker-scope@0.8.3:
     dependencies:
       '@babel/parser': 7.29.2
@@ -6348,21 +5640,11 @@ snapshots:
 
   at-least-node@1.0.0: {}
 
-  atomic-sleep@1.0.0: {}
-
   atomically@2.1.1:
     dependencies:
       stubborn-fs: 2.0.0
       when-exit: 2.1.5
 
-  axios@1.15.1:
-    dependencies:
-      follow-redirects: 1.16.0
-      form-data: 4.0.5
-      proxy-from-env: 2.1.0
-    transitivePeerDependencies:
-      - debug
-
   balanced-match@1.0.2: {}
 
   balanced-match@4.0.4: {}
@@ -6371,8 +5653,6 @@ snapshots:
 
   baseline-browser-mapping@2.10.17: {}
 
-  basic-ftp@5.3.0: {}
-
   before-after-hook@4.0.0: {}
 
   better-sqlite3@12.8.0:
@@ -6392,37 +5672,6 @@ snapshots:
       inherits: 2.0.4
       readable-stream: 3.6.2
 
-  body-parser@1.20.4:
-    dependencies:
-      bytes: 3.1.2
-      content-type: 1.0.5
-      debug: 2.6.9
-      depd: 2.0.0
-      destroy: 1.2.0
-      http-errors: 2.0.1
-      iconv-lite: 0.4.24
-      on-finished: 2.4.1
-      qs: 6.14.2
-      raw-body: 2.5.3
-      type-is: 1.6.18
-      unpipe: 1.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  body-parser@2.2.2:
-    dependencies:
-      bytes: 3.1.2
-      content-type: 1.0.5
-      debug: 4.4.3
-      http-errors: 2.0.1
-      iconv-lite: 0.7.2
-      on-finished: 2.4.1
-      qs: 6.15.1
-      raw-body: 3.0.2
-      type-is: 2.0.1
-    transitivePeerDependencies:
-      - supports-color
-
   boolbase@1.0.0: {}
 
   boolean@3.2.0:
@@ -6486,12 +5735,6 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  busboy@1.6.0:
-    dependencies:
-      streamsearch: 1.1.0
-
-  bytes@3.1.2: {}
-
   cac@6.7.14: {}
 
   cac@7.0.0: {}
@@ -6528,25 +5771,10 @@ snapshots:
       es-errors: 1.3.0
       function-bind: 1.1.2
 
-  call-bound@1.0.4:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      get-intrinsic: 1.3.0
-
   callsites@3.1.0: {}
 
-  camelcase@5.0.0: {}
-
-  camelcase@5.3.1: {}
-
   caniuse-lite@1.0.30001787: {}
 
-  chalk@2.4.2:
-    dependencies:
-      ansi-styles: 3.2.1
-      escape-string-regexp: 1.0.5
-      supports-color: 5.5.0
-
   chalk@4.1.2:
     dependencies:
       ansi-styles: 4.3.0
@@ -6586,40 +5814,22 @@ snapshots:
     dependencies:
       typanion: 3.14.0
 
-  cliui@6.0.0:
-    dependencies:
-      string-width: 4.2.3
-      strip-ansi: 6.0.1
-      wrap-ansi: 6.2.0
-
   cliui@8.0.1:
     dependencies:
       string-width: 4.2.3
       strip-ansi: 6.0.1
       wrap-ansi: 7.0.0
 
-  cliui@9.0.1:
-    dependencies:
-      string-width: 7.2.0
-      strip-ansi: 7.2.0
-      wrap-ansi: 9.0.2
-
   clone-response@1.0.3:
     dependencies:
       mimic-response: 1.0.1
 
   clone@1.0.4: {}
 
-  color-convert@1.9.3:
-    dependencies:
-      color-name: 1.1.3
-
   color-convert@2.0.1:
     dependencies:
       color-name: 1.1.4
 
-  color-name@1.1.3: {}
-
   color-name@1.1.4: {}
 
   colord@2.9.3: {}
@@ -6645,22 +5855,8 @@ snapshots:
 
   consola@3.4.2: {}
 
-  content-disposition@0.5.4:
-    dependencies:
-      safe-buffer: 5.2.1
-
-  content-disposition@1.1.0: {}
-
-  content-type@1.0.5: {}
-
   convert-source-map@2.0.0: {}
 
-  cookie-signature@1.0.7: {}
-
-  cookie-signature@1.2.2: {}
-
-  cookie@0.7.2: {}
-
   copy-anything@4.0.5:
     dependencies:
       is-what: 5.5.0
@@ -6682,8 +5878,6 @@ snapshots:
       shebang-command: 2.0.0
       which: 2.0.2
 
-  crypto-js@4.2.0: {}
-
   css-tree@3.2.1:
     dependencies:
       mdn-data: 2.27.1
@@ -6693,20 +5887,10 @@ snapshots:
 
   csstype@3.2.3: {}
 
-  data-uri-to-buffer@6.0.2: {}
-
-  dateformat@4.6.3: {}
-
-  debug@2.6.9:
-    dependencies:
-      ms: 2.0.0
-
   debug@4.4.3:
     dependencies:
       ms: 2.1.3
 
-  decamelize@1.2.0: {}
-
   decompress-response@6.0.0:
     dependencies:
       mimic-response: 3.1.0
@@ -6737,27 +5921,15 @@ snapshots:
 
   defu@6.1.7: {}
 
-  degenerator@5.0.1:
-    dependencies:
-      ast-types: 0.13.4
-      escodegen: 2.1.0
-      esprima: 4.0.1
-
   delayed-stream@1.0.0: {}
 
-  depd@2.0.0: {}
-
   destr@2.0.5: {}
 
-  destroy@1.2.0: {}
-
   detect-libc@2.1.2: {}
 
   detect-node@2.1.0:
     optional: true
 
-  dijkstrajs@1.0.3: {}
-
   dir-compare@4.2.0:
     dependencies:
       minimatch: 3.1.5
@@ -6794,8 +5966,6 @@ snapshots:
 
   dotenv@16.6.1: {}
 
-  dotenv@17.4.2: {}
-
   dunder-proto@1.0.1:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -6804,17 +5974,8 @@ snapshots:
 
   duplexer@0.1.2: {}
 
-  duplexify@4.1.3:
-    dependencies:
-      end-of-stream: 1.4.5
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-      stream-shift: 1.0.3
-
   eastasianwidth@0.2.0: {}
 
-  ee-first@1.1.1: {}
-
   ejs@3.1.10:
     dependencies:
       jake: 10.9.4
@@ -6908,14 +6069,10 @@ snapshots:
 
   emnapi@1.9.2: {}
 
-  emoji-regex@10.6.0: {}
-
   emoji-regex@8.0.0: {}
 
   emoji-regex@9.2.2: {}
 
-  encodeurl@2.0.0: {}
-
   encoding@0.1.13:
     dependencies:
       iconv-lite: 0.6.3
@@ -7011,22 +6168,10 @@ snapshots:
 
   escalade@3.2.0: {}
 
-  escape-html@1.0.3: {}
-
-  escape-string-regexp@1.0.5: {}
-
   escape-string-regexp@4.0.0: {}
 
   escape-string-regexp@5.0.0: {}
 
-  escodegen@2.1.0:
-    dependencies:
-      esprima: 4.0.1
-      estraverse: 5.3.0
-      esutils: 2.0.3
-    optionalDependencies:
-      source-map: 0.6.1
-
   eslint-config-prettier@10.1.8(eslint@9.39.4(jiti@2.6.1)):
     dependencies:
       eslint: 9.39.4(jiti@2.6.1)
@@ -7115,8 +6260,6 @@ snapshots:
       acorn-jsx: 5.3.2(acorn@8.16.0)
       eslint-visitor-keys: 5.0.1
 
-  esprima@4.0.1: {}
-
   esquery@1.7.0:
     dependencies:
       estraverse: 5.3.0
@@ -7135,85 +6278,10 @@ snapshots:
 
   esutils@2.0.3: {}
 
-  etag@1.8.1: {}
-
   expand-template@2.0.3: {}
 
   exponential-backoff@3.1.3: {}
 
-  express-fileupload@1.5.2:
-    dependencies:
-      busboy: 1.6.0
-
-  express@4.22.1:
-    dependencies:
-      accepts: 1.3.8
-      array-flatten: 1.1.1
-      body-parser: 1.20.4
-      content-disposition: 0.5.4
-      content-type: 1.0.5
-      cookie: 0.7.2
-      cookie-signature: 1.0.7
-      debug: 2.6.9
-      depd: 2.0.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      finalhandler: 1.3.2
-      fresh: 0.5.2
-      http-errors: 2.0.1
-      merge-descriptors: 1.0.3
-      methods: 1.1.2
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      path-to-regexp: 0.1.13
-      proxy-addr: 2.0.7
-      qs: 6.14.2
-      range-parser: 1.2.1
-      safe-buffer: 5.2.1
-      send: 0.19.2
-      serve-static: 1.16.3
-      setprototypeof: 1.2.0
-      statuses: 2.0.2
-      type-is: 1.6.18
-      utils-merge: 1.0.1
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  express@5.2.1:
-    dependencies:
-      accepts: 2.0.0
-      body-parser: 2.2.2
-      content-disposition: 1.1.0
-      content-type: 1.0.5
-      cookie: 0.7.2
-      cookie-signature: 1.2.2
-      debug: 4.4.3
-      depd: 2.0.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      finalhandler: 2.1.1
-      fresh: 2.0.0
-      http-errors: 2.0.1
-      merge-descriptors: 2.0.0
-      mime-types: 3.0.2
-      on-finished: 2.4.1
-      once: 1.4.0
-      parseurl: 1.3.3
-      proxy-addr: 2.0.7
-      qs: 6.15.1
-      range-parser: 1.2.1
-      router: 2.2.0
-      send: 1.2.1
-      serve-static: 2.2.1
-      statuses: 2.0.2
-      type-is: 2.0.1
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-
   exsolve@1.0.8: {}
 
   extract-zip@2.0.1:
@@ -7237,10 +6305,6 @@ snapshots:
 
   fast-levenshtein@2.0.6: {}
 
-  fast-redact@3.5.0: {}
-
-  fast-safe-stringify@2.1.1: {}
-
   fast-string-truncated-width@3.0.3: {}
 
   fast-string-width@3.0.2:
@@ -7263,49 +6327,12 @@ snapshots:
     dependencies:
       flat-cache: 4.0.1
 
-  file-type@21.3.4:
-    dependencies:
-      '@tokenizer/inflate': 0.4.1
-      strtok3: 10.3.5
-      token-types: 6.1.2
-      uint8array-extras: 1.5.0
-    transitivePeerDependencies:
-      - supports-color
-
   file-uri-to-path@1.0.0: {}
 
   filelist@1.0.6:
     dependencies:
       minimatch: 5.1.9
 
-  finalhandler@1.3.2:
-    dependencies:
-      debug: 2.6.9
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      statuses: 2.0.2
-      unpipe: 1.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  finalhandler@2.1.1:
-    dependencies:
-      debug: 4.4.3
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  find-up@4.1.0:
-    dependencies:
-      locate-path: 5.0.0
-      path-exists: 4.0.0
-
   find-up@5.0.0:
     dependencies:
       locate-path: 6.0.0
@@ -7316,12 +6343,8 @@ snapshots:
       flatted: 3.4.2
       keyv: 4.5.4
 
-  flatstr@1.0.12: {}
-
   flatted@3.4.2: {}
 
-  follow-redirects@1.16.0: {}
-
   foreground-child@3.3.1:
     dependencies:
       cross-spawn: 7.0.6
@@ -7335,12 +6358,6 @@ snapshots:
       hasown: 2.0.2
       mime-types: 2.1.35
 
-  forwarded@0.2.0: {}
-
-  fresh@0.5.2: {}
-
-  fresh@2.0.0: {}
-
   fs-constants@1.0.0: {}
 
   fs-extra@10.1.0:
@@ -7389,8 +6406,6 @@ snapshots:
 
   get-caller-file@2.0.5: {}
 
-  get-east-asian-width@1.5.0: {}
-
   get-intrinsic@1.3.0:
     dependencies:
       call-bind-apply-helpers: 1.0.2
@@ -7417,14 +6432,6 @@ snapshots:
     dependencies:
       resolve-pkg-maps: 1.0.0
 
-  get-uri@6.0.5:
-    dependencies:
-      basic-ftp: 5.3.0
-      data-uri-to-buffer: 6.0.2
-      debug: 4.4.3
-    transitivePeerDependencies:
-      - supports-color
-
   github-from-package@0.0.0: {}
 
   glob-parent@6.0.2:
@@ -7497,10 +6504,6 @@ snapshots:
     dependencies:
       duplexer: 0.1.2
 
-  gzip@0.1.0: {}
-
-  has-flag@3.0.0: {}
-
   has-flag@4.0.0: {}
 
   has-property-descriptors@1.0.2:
@@ -7526,14 +6529,6 @@ snapshots:
 
   http-cache-semantics@4.2.0: {}
 
-  http-errors@2.0.1:
-    dependencies:
-      depd: 2.0.0
-      inherits: 2.0.4
-      setprototypeof: 1.2.0
-      statuses: 2.0.2
-      toidentifier: 1.0.1
-
   http-proxy-agent@7.0.2:
     dependencies:
       agent-base: 7.1.4
@@ -7553,18 +6548,12 @@ snapshots:
     transitivePeerDependencies:
       - supports-color
 
-  https@1.0.0: {}
-
   iconv-corefoundation@1.1.7:
     dependencies:
       cli-truncate: 2.1.0
       node-addon-api: 1.7.2
     optional: true
 
-  iconv-lite@0.4.24:
-    dependencies:
-      safer-buffer: 2.1.2
-
   iconv-lite@0.6.3:
     dependencies:
       safer-buffer: 2.1.2
@@ -7599,8 +6588,6 @@ snapshots:
 
   ip-address@10.1.0: {}
 
-  ipaddr.js@1.9.1: {}
-
   is-extglob@2.1.1: {}
 
   is-fullwidth-code-point@3.0.0: {}
@@ -7611,8 +6598,6 @@ snapshots:
 
   is-interactive@1.0.0: {}
 
-  is-promise@4.0.0: {}
-
   is-unicode-supported@0.1.0: {}
 
   is-what@5.5.0: {}
@@ -7639,8 +6624,6 @@ snapshots:
 
   jiti@2.6.1: {}
 
-  joycon@3.1.1: {}
-
   js-tokens@4.0.0: {}
 
   js-tokens@9.0.1: {}
@@ -7680,8 +6663,6 @@ snapshots:
 
   lazy-val@1.0.5: {}
 
-  leven@2.1.0: {}
-
   levn@0.4.1:
     dependencies:
       prelude-ls: 1.2.1
@@ -7701,10 +6682,6 @@ snapshots:
     dependencies:
       lie: 3.1.1
 
-  locate-path@5.0.0:
-    dependencies:
-      p-locate: 4.1.0
-
   locate-path@6.0.0:
     dependencies:
       p-locate: 5.0.0
@@ -7779,30 +6756,12 @@ snapshots:
 
   mdn-data@2.27.1: {}
 
-  media-typer@0.3.0: {}
-
-  media-typer@1.1.0: {}
-
-  merge-descriptors@1.0.3: {}
-
-  merge-descriptors@2.0.0: {}
-
-  methods@1.1.2: {}
-
   mime-db@1.52.0: {}
 
-  mime-db@1.54.0: {}
-
   mime-types@2.1.35:
     dependencies:
       mime-db: 1.52.0
 
-  mime-types@3.0.2:
-    dependencies:
-      mime-db: 1.54.0
-
-  mime@1.6.0: {}
-
   mime@2.6.0: {}
 
   mimic-fn@2.1.0: {}
@@ -7878,31 +6837,12 @@ snapshots:
       pkg-types: 1.3.1
       ufo: 1.6.3
 
-  mri@1.1.4: {}
-
   mrmime@2.0.1: {}
 
-  ms@2.0.0: {}
-
   ms@2.1.3: {}
 
   muggle-string@0.4.1: {}
 
-  music-metadata@11.12.3:
-    dependencies:
-      '@borewit/text-codec': 0.2.2
-      '@tokenizer/token': 0.3.0
-      content-type: 1.0.5
-      debug: 4.4.3
-      file-type: 21.3.4
-      media-typer: 1.1.0
-      strtok3: 10.3.5
-      token-types: 6.1.2
-      uint8array-extras: 1.5.0
-      win-guid: 0.2.1
-    transitivePeerDependencies:
-      - supports-color
-
   mute-stream@3.0.0: {}
 
   nanoid@3.3.11: {}
@@ -7911,12 +6851,8 @@ snapshots:
 
   natural-compare@1.4.0: {}
 
-  negotiator@0.6.3: {}
-
   negotiator@1.0.0: {}
 
-  netmask@2.1.1: {}
-
   node-abi@3.89.0:
     dependencies:
       semver: 7.7.4
@@ -7934,8 +6870,6 @@ snapshots:
 
   node-fetch-native@1.6.7: {}
 
-  node-forge@1.4.0: {}
-
   node-gyp@11.5.0:
     dependencies:
       env-paths: 2.2.1
@@ -7953,11 +6887,6 @@ snapshots:
 
   node-releases@2.0.37: {}
 
-  node-windows@1.0.0-beta.8:
-    dependencies:
-      xml: 1.0.1
-      yargs: 17.7.2
-
   nopt@8.1.0:
     dependencies:
       abbrev: 3.0.1
@@ -7968,8 +6897,6 @@ snapshots:
     dependencies:
       boolbase: 1.0.0
 
-  object-inspect@1.13.4: {}
-
   object-keys@1.1.1:
     optional: true
 
@@ -7983,12 +6910,6 @@ snapshots:
 
   ohash@2.0.11: {}
 
-  on-exit-leak-free@0.2.0: {}
-
-  on-finished@2.4.1:
-    dependencies:
-      ee-first: 1.1.1
-
   once@1.4.0:
     dependencies:
       wrappy: 1.0.2
@@ -8053,44 +6974,16 @@ snapshots:
 
   p-cancelable@2.1.1: {}
 
-  p-limit@2.3.0:
-    dependencies:
-      p-try: 2.2.0
-
   p-limit@3.1.0:
     dependencies:
       yocto-queue: 0.1.0
 
-  p-locate@4.1.0:
-    dependencies:
-      p-limit: 2.3.0
-
   p-locate@5.0.0:
     dependencies:
       p-limit: 3.1.0
 
   p-map@7.0.4: {}
 
-  p-try@2.2.0: {}
-
-  pac-proxy-agent@7.2.0:
-    dependencies:
-      '@tootallnate/quickjs-emscripten': 0.23.0
-      agent-base: 7.1.4
-      debug: 4.4.3
-      get-uri: 6.0.5
-      http-proxy-agent: 7.0.2
-      https-proxy-agent: 7.0.6
-      pac-resolver: 7.0.1
-      socks-proxy-agent: 8.0.5
-    transitivePeerDependencies:
-      - supports-color
-
-  pac-resolver@7.0.1:
-    dependencies:
-      degenerator: 5.0.1
-      netmask: 2.1.1
-
   package-json-from-dist@1.0.1: {}
 
   package-manager-detector@1.6.0: {}
@@ -8099,8 +6992,6 @@ snapshots:
     dependencies:
       callsites: 3.1.0
 
-  parseurl@1.3.3: {}
-
   path-browserify@1.0.1: {}
 
   path-exists@4.0.0: {}
@@ -8119,10 +7010,6 @@ snapshots:
       lru-cache: 11.3.3
       minipass: 7.1.3
 
-  path-to-regexp@0.1.13: {}
-
-  path-to-regexp@8.4.2: {}
-
   pathe@2.0.3: {}
 
   pe-library@0.4.1: {}
@@ -8150,39 +7037,6 @@ snapshots:
     optionalDependencies:
       typescript: 5.9.3
 
-  pino-abstract-transport@0.5.0:
-    dependencies:
-      duplexify: 4.1.3
-      split2: 4.2.0
-
-  pino-pretty@7.6.1:
-    dependencies:
-      args: 5.0.3
-      colorette: 2.0.20
-      dateformat: 4.6.3
-      fast-safe-stringify: 2.1.1
-      joycon: 3.1.1
-      on-exit-leak-free: 0.2.0
-      pino-abstract-transport: 0.5.0
-      pump: 3.0.4
-      readable-stream: 3.6.2
-      rfdc: 1.4.1
-      secure-json-parse: 2.7.0
-      sonic-boom: 2.8.0
-      strip-json-comments: 3.1.1
-
-  pino-std-serializers@3.2.0: {}
-
-  pino@6.14.0:
-    dependencies:
-      fast-redact: 3.5.0
-      fast-safe-stringify: 2.1.1
-      flatstr: 1.0.12
-      pino-std-serializers: 3.2.0
-      process-warning: 1.0.0
-      quick-format-unescaped: 4.0.4
-      sonic-boom: 1.4.1
-
   pkg-types@1.3.1:
     dependencies:
       confbox: 0.1.8
@@ -8201,8 +7055,6 @@ snapshots:
       base64-js: 1.5.1
       xmlbuilder: 15.1.1
 
-  pngjs@5.0.0: {}
-
   postcss-selector-parser@7.1.1:
     dependencies:
       cssesc: 3.0.0
@@ -8240,8 +7092,6 @@ snapshots:
 
   proc-log@5.0.0: {}
 
-  process-warning@1.0.0: {}
-
   progress@2.0.3: {}
 
   promise-retry@2.0.1:
@@ -8255,13 +7105,6 @@ snapshots:
       retry: 0.12.0
       signal-exit: 3.0.7
 
-  proxy-addr@2.0.7:
-    dependencies:
-      forwarded: 0.2.0
-      ipaddr.js: 1.9.1
-
-  proxy-from-env@2.1.0: {}
-
   pump@3.0.4:
     dependencies:
       end-of-stream: 1.4.5
@@ -8269,44 +7112,12 @@ snapshots:
 
   punycode@2.3.1: {}
 
-  qrcode@1.5.4:
-    dependencies:
-      dijkstrajs: 1.0.3
-      pngjs: 5.0.0
-      yargs: 15.4.1
-
-  qs@6.14.2:
-    dependencies:
-      side-channel: 1.1.0
-
-  qs@6.15.1:
-    dependencies:
-      side-channel: 1.1.0
-
   quansync@0.2.11: {}
 
   quansync@1.0.0: {}
 
-  quick-format-unescaped@4.0.4: {}
-
   quick-lru@5.1.1: {}
 
-  range-parser@1.2.1: {}
-
-  raw-body@2.5.3:
-    dependencies:
-      bytes: 3.1.2
-      http-errors: 2.0.1
-      iconv-lite: 0.4.24
-      unpipe: 1.0.0
-
-  raw-body@3.0.2:
-    dependencies:
-      bytes: 3.1.2
-      http-errors: 2.0.1
-      iconv-lite: 0.7.2
-      unpipe: 1.0.0
-
   rc@1.2.8:
     dependencies:
       deep-extend: 0.6.0
@@ -8348,8 +7159,6 @@ snapshots:
 
   require-directory@2.1.1: {}
 
-  require-main-filename@2.0.0: {}
-
   resedit@1.7.2:
     dependencies:
       pe-library: 0.4.1
@@ -8423,20 +7232,8 @@ snapshots:
       '@rollup/rollup-win32-x64-msvc': 4.60.1
       fsevents: 2.3.3
 
-  router@2.2.0:
-    dependencies:
-      debug: 4.4.3
-      depd: 2.0.0
-      is-promise: 4.0.0
-      parseurl: 1.3.3
-      path-to-regexp: 8.4.2
-    transitivePeerDependencies:
-      - supports-color
-
   safe-buffer@5.2.1: {}
 
-  safe-decode-uri-component@1.2.1: {}
-
   safer-buffer@2.1.2: {}
 
   sanitize-filename@1.6.4:
@@ -8447,8 +7244,6 @@ snapshots:
 
   scule@1.3.0: {}
 
-  secure-json-parse@2.7.0: {}
-
   semver-compare@1.0.0:
     optional: true
 
@@ -8458,101 +7253,17 @@ snapshots:
 
   semver@7.7.4: {}
 
-  send@0.19.2:
-    dependencies:
-      debug: 2.6.9
-      depd: 2.0.0
-      destroy: 1.2.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      fresh: 0.5.2
-      http-errors: 2.0.1
-      mime: 1.6.0
-      ms: 2.1.3
-      on-finished: 2.4.1
-      range-parser: 1.2.1
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  send@1.2.1:
-    dependencies:
-      debug: 4.4.3
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      fresh: 2.0.0
-      http-errors: 2.0.1
-      mime-types: 3.0.2
-      ms: 2.1.3
-      on-finished: 2.4.1
-      range-parser: 1.2.1
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
   serialize-error@7.0.1:
     dependencies:
       type-fest: 0.13.1
     optional: true
 
-  serve-static@1.16.3:
-    dependencies:
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      parseurl: 1.3.3
-      send: 0.19.2
-    transitivePeerDependencies:
-      - supports-color
-
-  serve-static@2.2.1:
-    dependencies:
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      parseurl: 1.3.3
-      send: 1.2.1
-    transitivePeerDependencies:
-      - supports-color
-
-  set-blocking@2.0.0: {}
-
-  setprototypeof@1.2.0: {}
-
   shebang-command@2.0.0:
     dependencies:
       shebang-regex: 3.0.0
 
   shebang-regex@3.0.0: {}
 
-  side-channel-list@1.0.1:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-map@1.0.1:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-weakmap@1.0.2:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-map: 1.0.1
-
-  side-channel@1.1.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-list: 1.0.1
-      side-channel-map: 1.0.1
-      side-channel-weakmap: 1.0.2
-
   signal-exit@3.0.7: {}
 
   signal-exit@4.1.0: {}
@@ -8597,15 +7308,6 @@ snapshots:
       ip-address: 10.1.0
       smart-buffer: 4.2.0
 
-  sonic-boom@1.4.1:
-    dependencies:
-      atomic-sleep: 1.0.0
-      flatstr: 1.0.12
-
-  sonic-boom@2.8.0:
-    dependencies:
-      atomic-sleep: 1.0.0
-
   source-map-js@1.2.1: {}
 
   source-map-support@0.5.21:
@@ -8617,8 +7319,6 @@ snapshots:
 
   speakingurl@14.0.1: {}
 
-  split2@4.2.0: {}
-
   sprintf-js@1.1.3:
     optional: true
 
@@ -8628,12 +7328,6 @@ snapshots:
 
   stat-mode@1.0.0: {}
 
-  statuses@2.0.2: {}
-
-  stream-shift@1.0.3: {}
-
-  streamsearch@1.1.0: {}
-
   string-width@4.2.3:
     dependencies:
       emoji-regex: 8.0.0
@@ -8646,12 +7340,6 @@ snapshots:
       emoji-regex: 9.2.2
       strip-ansi: 7.2.0
 
-  string-width@7.2.0:
-    dependencies:
-      emoji-regex: 10.6.0
-      get-east-asian-width: 1.5.0
-      strip-ansi: 7.2.0
-
   string_decoder@1.3.0:
     dependencies:
       safe-buffer: 5.2.1
@@ -8672,10 +7360,6 @@ snapshots:
     dependencies:
       js-tokens: 9.0.1
 
-  strtok3@10.3.5:
-    dependencies:
-      '@tokenizer/token': 0.3.0
-
   stubborn-fs@2.0.0:
     dependencies:
       stubborn-utils: 1.0.2
@@ -8692,10 +7376,6 @@ snapshots:
     dependencies:
       copy-anything: 4.0.5
 
-  supports-color@5.5.0:
-    dependencies:
-      has-flag: 3.0.0
-
   supports-color@7.2.0:
     dependencies:
       has-flag: 4.0.0
@@ -8752,14 +7432,6 @@ snapshots:
 
   tmp@0.2.5: {}
 
-  toidentifier@1.0.1: {}
-
-  token-types@6.1.2:
-    dependencies:
-      '@borewit/text-codec': 0.2.2
-      '@tokenizer/token': 0.3.0
-      ieee754: 1.2.1
-
   totalist@3.0.1: {}
 
   truncate-utf8-bytes@1.0.2:
@@ -8783,8 +7455,6 @@ snapshots:
     dependencies:
       safe-buffer: 5.2.1
 
-  tunnel@0.0.6: {}
-
   typanion@3.14.0: {}
 
   type-check@0.4.0:
@@ -8794,17 +7464,6 @@ snapshots:
   type-fest@0.13.1:
     optional: true
 
-  type-is@1.6.18:
-    dependencies:
-      media-typer: 0.3.0
-      mime-types: 2.1.35
-
-  type-is@2.0.1:
-    dependencies:
-      content-type: 1.0.5
-      media-typer: 1.1.0
-      mime-types: 3.0.2
-
   type-level-regexp@0.1.17: {}
 
   typescript-eslint@8.58.1(eslint@9.39.4(jiti@2.6.1))(typescript@5.9.3):
@@ -8822,8 +7481,6 @@ snapshots:
 
   ufo@1.6.3: {}
 
-  uint8array-extras@1.5.0: {}
-
   unconfig-core@7.5.0:
     dependencies:
       '@quansync/fs': 1.0.0
@@ -8894,8 +7551,6 @@ snapshots:
       - '@emnapi/runtime'
       - vite
 
-  unpipe@1.0.0: {}
-
   unplugin-auto-import@21.0.0(@vueuse/core@14.2.1(vue@3.5.32(typescript@5.9.3))):
     dependencies:
       local-pkg: 1.1.2
@@ -8962,10 +7617,6 @@ snapshots:
 
   util-deprecate@1.0.2: {}
 
-  utils-merge@1.0.1: {}
-
-  vary@1.1.2: {}
-
   verror@1.10.1:
     dependencies:
       assert-plus: 1.0.0
@@ -9062,8 +7713,6 @@ snapshots:
 
   when-exit@2.1.5: {}
 
-  which-module@2.0.1: {}
-
   which@2.0.2:
     dependencies:
       isexe: 2.0.0
@@ -9072,16 +7721,8 @@ snapshots:
     dependencies:
       isexe: 3.1.5
 
-  win-guid@0.2.1: {}
-
   word-wrap@1.2.5: {}
 
-  wrap-ansi@6.2.0:
-    dependencies:
-      ansi-styles: 4.3.0
-      string-width: 4.2.3
-      strip-ansi: 6.0.1
-
   wrap-ansi@7.0.0:
     dependencies:
       ansi-styles: 4.3.0
@@ -9094,29 +7735,12 @@ snapshots:
       string-width: 5.1.2
       strip-ansi: 7.2.0
 
-  wrap-ansi@9.0.2:
-    dependencies:
-      ansi-styles: 6.2.3
-      string-width: 7.2.0
-      strip-ansi: 7.2.0
-
   wrappy@1.0.2: {}
 
   xml-name-validator@4.0.0: {}
 
-  xml2js@0.6.2:
-    dependencies:
-      sax: 1.6.0
-      xmlbuilder: 11.0.1
-
-  xml@1.0.1: {}
-
-  xmlbuilder@11.0.1: {}
-
   xmlbuilder@15.1.1: {}
 
-  y18n@4.0.3: {}
-
   y18n@5.0.8: {}
 
   yallist@3.1.1: {}
@@ -9127,29 +7751,8 @@ snapshots:
 
   yaml@2.8.3: {}
 
-  yargs-parser@18.1.3:
-    dependencies:
-      camelcase: 5.3.1
-      decamelize: 1.2.0
-
   yargs-parser@21.1.1: {}
 
-  yargs-parser@22.0.0: {}
-
-  yargs@15.4.1:
-    dependencies:
-      cliui: 6.0.0
-      decamelize: 1.2.0
-      find-up: 4.1.0
-      get-caller-file: 2.0.5
-      require-directory: 2.1.1
-      require-main-filename: 2.0.0
-      set-blocking: 2.0.0
-      string-width: 4.2.3
-      which-module: 2.0.1
-      y18n: 4.0.3
-      yargs-parser: 18.1.3
-
   yargs@17.7.2:
     dependencies:
       cliui: 8.0.1
@@ -9160,15 +7763,6 @@ snapshots:
       y18n: 5.0.8
       yargs-parser: 21.1.1
 
-  yargs@18.0.0:
-    dependencies:
-      cliui: 9.0.1
-      escalade: 3.2.0
-      get-caller-file: 2.0.5
-      string-width: 7.2.0
-      y18n: 5.0.8
-      yargs-parser: 22.0.0
-
   yauzl@2.10.0:
     dependencies:
       buffer-crc32: 0.2.13

From eb597c2597e916823305b02028d4c24ff23813c5 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Tue, 21 Apr 2026 22:35:30 +0800
Subject: [PATCH 08/17] =?UTF-8?q?=E4=BC=98=E5=8C=96=E7=BC=93=E5=AD=98?=
 =?UTF-8?q?=E9=80=BB=E8=BE=91?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron/main/apis/netease/core/cache.ts | 29 ++++--------------------
 electron/main/apis/netease/index.ts      | 15 +++++-------
 2 files changed, 10 insertions(+), 34 deletions(-)

diff --git a/electron/main/apis/netease/core/cache.ts b/electron/main/apis/netease/core/cache.ts
index 778d511..a800dfd 100644
--- a/electron/main/apis/netease/core/cache.ts
+++ b/electron/main/apis/netease/core/cache.ts
@@ -4,9 +4,7 @@
  * 对齐原 @neteasecloudmusicapienhanced/api util/apicache.js 的行为：
  * - 默认 2 分钟 TTL
  * - 只缓存 status === 200 的响应
- * - key = `${name}|${md5(params)}|${MUSIC_U}`（带 session 维度，避免跨账号污染）
- *
- * 变化点：接入调用层（index.ts 的 callNetease），而不是 Express 中间件
+ * - key = `${name}|${md5(params)}`
  */
 
 import { createHash } from "node:crypto";
@@ -24,22 +22,6 @@ interface CacheEntry {
 
 const store = new Map<string, CacheEntry>();
 
-/** 这些接口绝不缓存 */
-const BYPASS: ReadonlySet<string> = new Set([
-  "login",
-  "login_cellphone",
-  "login_status",
-  "login_refresh",
-  "login_qr_key",
-  "login_qr_create",
-  "login_qr_check",
-  "logout",
-  "captcha_sent",
-  "captcha_verify",
-  "register_anonimous",
-  "user_account",
-]);
-
 /** 快速稳定 hash：JSON.stringify + md5 8 位前缀 */
 const hash = (params: unknown): string =>
   createHash("md5")
@@ -47,12 +29,9 @@ const hash = (params: unknown): string =>
     .digest("hex")
     .slice(0, 8);
 
-/** 构造缓存 key；musicU 隔离不同登录态 */
-export const buildCacheKey = (name: string, params: unknown, musicU: string): string =>
-  `${name}|${hash(params)}|${musicU || "_"}`;
-
-/** 该接口是否可缓存 */
-export const isCacheable = (name: string): boolean => !BYPASS.has(name);
+/** 构造缓存 key */
+export const buildCacheKey = (name: string, params: unknown): string =>
+  `${name}|${hash(params)}`;
 
 /**
  * 获取缓存
diff --git a/electron/main/apis/netease/index.ts b/electron/main/apis/netease/index.ts
index b713ab7..46ef59c 100644
--- a/electron/main/apis/netease/index.ts
+++ b/electron/main/apis/netease/index.ts
@@ -16,7 +16,7 @@ import {
   getSessionCookies,
   saveSessionCookies,
 } from "@main/database/sessions";
-import { buildCacheKey, cacheClear, cacheGet, cacheSet, isCacheable } from "./core/cache";
+import { buildCacheKey, cacheClear, cacheGet, cacheSet } from "./core/cache";
 import { cookieToJson } from "./core/cookie";
 import { createRequest } from "./core/request";
 import { modules } from "./modules";
@@ -95,14 +95,11 @@ export const callNetease = async (
   if (!fn) throw new Error(`unknown netease api: ${name}`);
 
   const session = loadSession();
-  const musicU = session.MUSIC_U || "";
 
-  // 读缓存
-  const cacheKey = isCacheable(name) ? buildCacheKey(name, params, musicU) : "";
-  if (cacheKey) {
-    const hit = cacheGet(cacheKey);
-    if (hit) return hit;
-  }
+  // 读缓存；调用方如不想命中，按原项目惯例在 params 里带 `timestamp: Date.now()` 即可
+  const cacheKey = buildCacheKey(name, params);
+  const hit = cacheGet(cacheKey);
+  if (hit) return hit;
 
   const query = {
     ...params,
@@ -124,7 +121,7 @@ export const callNetease = async (
   }
 
   const value = { status: res.status, body: res.body };
-  if (cacheKey && res.status === 200) cacheSet(cacheKey, value);
+  if (res.status === 200) cacheSet(cacheKey, value);
 
   return value;
 };

From 6d92ccf619b1a8085b534a23f74fb1441b155a12 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Tue, 21 Apr 2026 23:50:00 +0800
Subject: [PATCH 09/17] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20QM?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron/main/apis/qqmusic/core/config.ts     |  46 ++
 electron/main/apis/qqmusic/core/qrc.ts        |  52 +++
 electron/main/apis/qqmusic/core/request.ts    | 108 +++++
 electron/main/apis/qqmusic/core/tripledes.ts  | 421 ++++++++++++++++++
 electron/main/apis/qqmusic/core/types.ts      |   9 +
 electron/main/apis/qqmusic/index.ts           |  70 +++
 .../main/apis/qqmusic/modules/hot_search.ts   |  30 ++
 electron/main/apis/qqmusic/modules/index.ts   |  23 +
 .../main/apis/qqmusic/modules/leaderboard.ts  |  69 +++
 electron/main/apis/qqmusic/modules/lyric.ts   | 114 +++++
 electron/main/apis/qqmusic/modules/match.ts   |  60 +++
 electron/main/apis/qqmusic/modules/search.ts  |  69 +++
 .../main/apis/qqmusic/modules/song_info.ts    |  50 +++
 .../main/apis/qqmusic/modules/song_list.ts    |  71 +++
 electron/main/ipc/apis.ts                     |  52 +++
 electron/main/ipc/index.ts                    |   4 +-
 electron/main/ipc/netease.ts                  |  33 --
 electron/preload/index.d.ts                   |   4 +-
 electron/preload/index.ts                     |  12 +-
 shared/types/apis.ts                          |  28 ++
 shared/types/netease.ts                       |  16 -
 src/apis/netease.ts                           |  18 +-
 src/apis/qqmusic.ts                           |  34 ++
 src/stores/user.ts                            |   4 +-
 24 files changed, 1327 insertions(+), 70 deletions(-)
 create mode 100644 electron/main/apis/qqmusic/core/config.ts
 create mode 100644 electron/main/apis/qqmusic/core/qrc.ts
 create mode 100644 electron/main/apis/qqmusic/core/request.ts
 create mode 100644 electron/main/apis/qqmusic/core/tripledes.ts
 create mode 100644 electron/main/apis/qqmusic/core/types.ts
 create mode 100644 electron/main/apis/qqmusic/index.ts
 create mode 100644 electron/main/apis/qqmusic/modules/hot_search.ts
 create mode 100644 electron/main/apis/qqmusic/modules/index.ts
 create mode 100644 electron/main/apis/qqmusic/modules/leaderboard.ts
 create mode 100644 electron/main/apis/qqmusic/modules/lyric.ts
 create mode 100644 electron/main/apis/qqmusic/modules/match.ts
 create mode 100644 electron/main/apis/qqmusic/modules/search.ts
 create mode 100644 electron/main/apis/qqmusic/modules/song_info.ts
 create mode 100644 electron/main/apis/qqmusic/modules/song_list.ts
 create mode 100644 electron/main/ipc/apis.ts
 delete mode 100644 electron/main/ipc/netease.ts
 create mode 100644 shared/types/apis.ts
 delete mode 100644 shared/types/netease.ts
 create mode 100644 src/apis/qqmusic.ts

diff --git a/electron/main/apis/qqmusic/core/config.ts b/electron/main/apis/qqmusic/core/config.ts
new file mode 100644
index 0000000..3fe113d
--- /dev/null
+++ b/electron/main/apis/qqmusic/core/config.ts
@@ -0,0 +1,46 @@
+/**
+ * QM API 通用常量
+ */
+
+/** 统一接口入口（移动端 musicu） */
+export const QM_API_URL = "https://u.y.qq.com/cgi-bin/musicu.fcg";
+
+/** 模拟移动端的默认 headers */
+export const QM_HEADERS: Record<string, string> = {
+  "Content-Type": "application/json",
+  "Accept-Encoding": "gzip",
+  "User-Agent": "okhttp/3.14.9",
+  Referer: "https://y.qq.com",
+  Cookie: "tmeLoginType=-1;",
+};
+
+/** 请求体 comm 字段（伪装 Android 客户端） */
+export const getCommonParams = (): Record<string, string | number> => ({
+  ct: 11,
+  cv: "1003006",
+  v: "1003006",
+  os_ver: "15",
+  phonetype: "24122RKC7C",
+  tmeAppID: "qqmusiclight",
+  nettype: "NETWORK_WIFI",
+  udid: "0",
+  OpenUDID: "0",
+  QIMEI36: "0",
+  uin: "0",
+});
+
+/** Session 缓存时长（毫秒） */
+export const SESSION_TTL = 60 * 60 * 1000;
+
+/** 歌手数组格式化工具：`[{name:'A'},{name:'B'}]` → `A / B` */
+export const formatSingerName = (
+  singers: Array<{ name?: string; title?: string }> | undefined,
+  key: "name" | "title" = "name",
+  join = " / ",
+): string => {
+  if (!singers?.length) return "";
+  return singers
+    .map((item) => item[key])
+    .filter((item): item is string => !!item)
+    .join(join);
+};
diff --git a/electron/main/apis/qqmusic/core/qrc.ts b/electron/main/apis/qqmusic/core/qrc.ts
new file mode 100644
index 0000000..fd90082
--- /dev/null
+++ b/electron/main/apis/qqmusic/core/qrc.ts
@@ -0,0 +1,52 @@
+import { inflateRawSync, inflateSync, unzipSync } from "zlib";
+import { qrcDecrypt } from "./tripledes";
+
+/**
+ * QRC 解密密钥 - 24 字节
+ * 来源: LDDC 项目
+ */
+const QRC_KEY = new Uint8Array(Buffer.from("!@#)(*$%123ZXC!@!@#)(NHL", "utf8"));
+
+/**
+ * 解密 QRC 歌词（云端版本）
+ * 使用 LDDC 的 Triple DES 实现 + Zlib 解压
+ *
+ * @param encryptedQrc - 十六进制编码的加密歌词字符串
+ * @returns 解密后的歌词文本
+ */
+export const decryptQrc = (encryptedQrc: string): string => {
+  if (!encryptedQrc || encryptedQrc.trim() === "") {
+    throw new Error("没有可解密的数据");
+  }
+
+  // Hex 转 Uint8Array
+  const encryptedBuffer = Buffer.from(encryptedQrc, "hex");
+  const encryptedData = new Uint8Array(encryptedBuffer);
+
+  // Triple DES 解密
+  const decrypted = qrcDecrypt(encryptedData, QRC_KEY);
+  const decryptedBuffer = Buffer.from(decrypted);
+
+  // Zlib 解压：依次尝试 inflate / raw inflate / gzip
+  try {
+    return inflateSync(decryptedBuffer).toString("utf8");
+  } catch {
+    // 尝试下一种
+  }
+  try {
+    return inflateRawSync(decryptedBuffer).toString("utf8");
+  } catch {
+    // 尝试下一种
+  }
+  try {
+    return unzipSync(decryptedBuffer).toString("utf8");
+  } catch {
+    // 尝试下一种
+  }
+
+  // 也可能本身就不是压缩数据
+  const str = decryptedBuffer.toString("utf8");
+  if (str.includes("[") || str.includes("<")) return str;
+
+  throw new Error("无法解压数据");
+};
diff --git a/electron/main/apis/qqmusic/core/request.ts b/electron/main/apis/qqmusic/core/request.ts
new file mode 100644
index 0000000..9c5ade9
--- /dev/null
+++ b/electron/main/apis/qqmusic/core/request.ts
@@ -0,0 +1,108 @@
+/**
+ * QM 请求层
+ *
+ * 设计：
+ * - 统一走 u.y.qq.com/cgi-bin/musicu.fcg 的 `{ comm, request: {module, method, param} }` 协议
+ * - 首次请求前先调 music.getSession.session 拿 uid/sid/userip，缓存 1 小时
+ * - 没有加密：API 本身明文 JSON POST，靠 UA + QIMEI36 等 comm 字段伪装客户端
+ * - Referer 设为 https://y.qq.com，部分接口会校验
+ */
+
+import { QM_API_URL, QM_HEADERS, SESSION_TTL, getCommonParams } from "./config";
+
+/** Session 字段（可能缺失则下次请求会自动补拿） */
+interface SessionCache {
+  uid?: string;
+  sid?: string;
+  userip?: string;
+  expireAt: number;
+}
+
+let session: SessionCache = { expireAt: 0 };
+let initPromise: Promise<void> | null = null;
+
+interface FcgResponse {
+  code?: number;
+  request?: { code?: number; data?: unknown };
+  [key: string]: unknown;
+}
+
+/** 直接发起一次 fcg POST（不做 session 注入，用于初始化自身） */
+const postRaw = async (body: unknown): Promise<FcgResponse> => {
+  const res = await fetch(QM_API_URL, {
+    method: "POST",
+    headers: QM_HEADERS,
+    body: JSON.stringify(body),
+  });
+  return (await res.json()) as FcgResponse;
+};
+
+/** 初始化 / 刷新 session（1h 过期）；并发安全：同一时刻只发一次 */
+const ensureSession = (): Promise<void> => {
+  if (session.uid && session.expireAt > Date.now()) return Promise.resolve();
+  if (initPromise) return initPromise;
+
+  initPromise = (async () => {
+    try {
+      const body = {
+        comm: getCommonParams(),
+        request: {
+          module: "music.getSession.session",
+          method: "GetSession",
+          param: { caller: 0, uid: "0", vkey: 0 },
+        },
+      };
+      const data = await postRaw(body);
+      if (data.code === 0 && data.request?.code === 0) {
+        const info = ((data.request.data as { session?: Partial<SessionCache> }) ?? {}).session ?? {};
+        session = {
+          uid: info.uid,
+          sid: info.sid,
+          userip: info.userip,
+          expireAt: Date.now() + SESSION_TTL,
+        };
+      }
+    } catch {
+      // session 失败不阻塞后续调用，大部分接口无 session 也能回结果
+    } finally {
+      initPromise = null;
+    }
+  })();
+
+  return initPromise;
+};
+
+/**
+ * 发送一次 musicu.fcg 请求
+ * @param module 业务 module（如 music.search.SearchCgiService）
+ * @param method 业务 method（如 DoSearchForQQMusicMobile）
+ * @param param  业务 param
+ * @returns request.data 的业务数据段
+ */
+export const qmRequest = async <T = unknown>(
+  module: string,
+  method: string,
+  param: Record<string, unknown>,
+): Promise<T> => {
+  await ensureSession();
+
+  const comm = {
+    ...getCommonParams(),
+    ...(session.uid ? { uid: session.uid } : {}),
+    ...(session.sid ? { sid: session.sid } : {}),
+    ...(session.userip ? { userip: session.userip } : {}),
+  };
+
+  const body = { comm, request: { module, method, param } };
+  const data = await postRaw(body);
+
+  const outerCode = data.code ?? 0;
+  const innerCode = data.request?.code ?? 0;
+  if (outerCode !== 0 || innerCode !== 0) {
+    throw new Error(`QM API 错误: outer=${outerCode} inner=${innerCode}`);
+  }
+  return data.request?.data as T;
+};
+
+/** 调试用：取当前 session 快照 */
+export const getQMSession = (): Readonly<SessionCache> => session;
diff --git a/electron/main/apis/qqmusic/core/tripledes.ts b/electron/main/apis/qqmusic/core/tripledes.ts
new file mode 100644
index 0000000..d7b9ec5
--- /dev/null
+++ b/electron/main/apis/qqmusic/core/tripledes.ts
@@ -0,0 +1,421 @@
+/**
+ * Triple DES 实现
+ * 移植自 LDDC 项目: https://github.com/chenmozhijin/LDDC
+ * 原始代码: LDDC/core/decryptor/tripledes.py
+ */
+
+const ENCRYPT = 1;
+const DECRYPT = 0;
+
+// S-boxes
+const sbox: number[][] = [
+  // sbox1
+  [
+    14, 4, 13, 1, 2, 15, 11, 8, 3, 10, 6, 12, 5, 9, 0, 7, 0, 15, 7, 4, 14, 2, 13, 1, 10, 6, 12, 11,
+    9, 5, 3, 8, 4, 1, 14, 8, 13, 6, 2, 11, 15, 12, 9, 7, 3, 10, 5, 0, 15, 12, 8, 2, 4, 9, 1, 7, 5,
+    11, 3, 14, 10, 0, 6, 13,
+  ],
+  // sbox2
+  [
+    15, 1, 8, 14, 6, 11, 3, 4, 9, 7, 2, 13, 12, 0, 5, 10, 3, 13, 4, 7, 15, 2, 8, 15, 12, 0, 1, 10,
+    6, 9, 11, 5, 0, 14, 7, 11, 10, 4, 13, 1, 5, 8, 12, 6, 9, 3, 2, 15, 13, 8, 10, 1, 3, 15, 4, 2,
+    11, 6, 7, 12, 0, 5, 14, 9,
+  ],
+  // sbox3
+  [
+    10, 0, 9, 14, 6, 3, 15, 5, 1, 13, 12, 7, 11, 4, 2, 8, 13, 7, 0, 9, 3, 4, 6, 10, 2, 8, 5, 14, 12,
+    11, 15, 1, 13, 6, 4, 9, 8, 15, 3, 0, 11, 1, 2, 12, 5, 10, 14, 7, 1, 10, 13, 0, 6, 9, 8, 7, 4,
+    15, 14, 3, 11, 5, 2, 12,
+  ],
+  // sbox4
+  [
+    7, 13, 14, 3, 0, 6, 9, 10, 1, 2, 8, 5, 11, 12, 4, 15, 13, 8, 11, 5, 6, 15, 0, 3, 4, 7, 2, 12, 1,
+    10, 14, 9, 10, 6, 9, 0, 12, 11, 7, 13, 15, 1, 3, 14, 5, 2, 8, 4, 3, 15, 0, 6, 10, 10, 13, 8, 9,
+    4, 5, 11, 12, 7, 2, 14,
+  ],
+  // sbox5
+  [
+    2, 12, 4, 1, 7, 10, 11, 6, 8, 5, 3, 15, 13, 0, 14, 9, 14, 11, 2, 12, 4, 7, 13, 1, 5, 0, 15, 10,
+    3, 9, 8, 6, 4, 2, 1, 11, 10, 13, 7, 8, 15, 9, 12, 5, 6, 3, 0, 14, 11, 8, 12, 7, 1, 14, 2, 13, 6,
+    15, 0, 9, 10, 4, 5, 3,
+  ],
+  // sbox6
+  [
+    12, 1, 10, 15, 9, 2, 6, 8, 0, 13, 3, 4, 14, 7, 5, 11, 10, 15, 4, 2, 7, 12, 9, 5, 6, 1, 13, 14,
+    0, 11, 3, 8, 9, 14, 15, 5, 2, 8, 12, 3, 7, 0, 4, 10, 1, 13, 11, 6, 4, 3, 2, 12, 9, 5, 15, 10,
+    11, 14, 1, 7, 6, 0, 8, 13,
+  ],
+  // sbox7
+  [
+    4, 11, 2, 14, 15, 0, 8, 13, 3, 12, 9, 7, 5, 10, 6, 1, 13, 0, 11, 7, 4, 9, 1, 10, 14, 3, 5, 12,
+    2, 15, 8, 6, 1, 4, 11, 13, 12, 3, 7, 14, 10, 15, 6, 8, 0, 5, 9, 2, 6, 11, 13, 8, 1, 4, 10, 7, 9,
+    5, 0, 15, 14, 2, 3, 12,
+  ],
+  // sbox8
+  [
+    13, 2, 8, 4, 6, 15, 11, 1, 10, 9, 3, 14, 5, 0, 12, 7, 1, 15, 13, 8, 10, 3, 7, 4, 12, 5, 6, 11,
+    0, 14, 9, 2, 7, 11, 4, 1, 9, 12, 14, 2, 0, 6, 10, 13, 15, 3, 5, 8, 2, 1, 14, 7, 4, 10, 8, 13,
+    15, 12, 9, 0, 3, 5, 6, 11,
+  ],
+];
+
+const bitnum = (a: Uint8Array, b: number, c: number): number => {
+  const byteIndex = Math.floor(b / 32) * 4 + 3 - Math.floor((b % 32) / 8);
+  return ((a[byteIndex] >> (7 - (b % 8))) & 1) << c;
+};
+
+const bitnumIntr = (a: number, b: number, c: number): number => ((a >> (31 - b)) & 1) << c;
+
+const bitnumIntl = (a: number, b: number, c: number): number =>
+  (((a << b) & 0x80000000) >>> c) >>> 0;
+
+const sboxBit = (a: number): number => (a & 32) | ((a & 31) >> 1) | ((a & 1) << 4);
+
+const initialPermutation = (inputData: Uint8Array): [number, number] => {
+  const s0 =
+    (bitnum(inputData, 57, 31) |
+      bitnum(inputData, 49, 30) |
+      bitnum(inputData, 41, 29) |
+      bitnum(inputData, 33, 28) |
+      bitnum(inputData, 25, 27) |
+      bitnum(inputData, 17, 26) |
+      bitnum(inputData, 9, 25) |
+      bitnum(inputData, 1, 24) |
+      bitnum(inputData, 59, 23) |
+      bitnum(inputData, 51, 22) |
+      bitnum(inputData, 43, 21) |
+      bitnum(inputData, 35, 20) |
+      bitnum(inputData, 27, 19) |
+      bitnum(inputData, 19, 18) |
+      bitnum(inputData, 11, 17) |
+      bitnum(inputData, 3, 16) |
+      bitnum(inputData, 61, 15) |
+      bitnum(inputData, 53, 14) |
+      bitnum(inputData, 45, 13) |
+      bitnum(inputData, 37, 12) |
+      bitnum(inputData, 29, 11) |
+      bitnum(inputData, 21, 10) |
+      bitnum(inputData, 13, 9) |
+      bitnum(inputData, 5, 8) |
+      bitnum(inputData, 63, 7) |
+      bitnum(inputData, 55, 6) |
+      bitnum(inputData, 47, 5) |
+      bitnum(inputData, 39, 4) |
+      bitnum(inputData, 31, 3) |
+      bitnum(inputData, 23, 2) |
+      bitnum(inputData, 15, 1) |
+      bitnum(inputData, 7, 0)) >>>
+    0;
+
+  const s1 =
+    (bitnum(inputData, 56, 31) |
+      bitnum(inputData, 48, 30) |
+      bitnum(inputData, 40, 29) |
+      bitnum(inputData, 32, 28) |
+      bitnum(inputData, 24, 27) |
+      bitnum(inputData, 16, 26) |
+      bitnum(inputData, 8, 25) |
+      bitnum(inputData, 0, 24) |
+      bitnum(inputData, 58, 23) |
+      bitnum(inputData, 50, 22) |
+      bitnum(inputData, 42, 21) |
+      bitnum(inputData, 34, 20) |
+      bitnum(inputData, 26, 19) |
+      bitnum(inputData, 18, 18) |
+      bitnum(inputData, 10, 17) |
+      bitnum(inputData, 2, 16) |
+      bitnum(inputData, 60, 15) |
+      bitnum(inputData, 52, 14) |
+      bitnum(inputData, 44, 13) |
+      bitnum(inputData, 36, 12) |
+      bitnum(inputData, 28, 11) |
+      bitnum(inputData, 20, 10) |
+      bitnum(inputData, 12, 9) |
+      bitnum(inputData, 4, 8) |
+      bitnum(inputData, 62, 7) |
+      bitnum(inputData, 54, 6) |
+      bitnum(inputData, 46, 5) |
+      bitnum(inputData, 38, 4) |
+      bitnum(inputData, 30, 3) |
+      bitnum(inputData, 22, 2) |
+      bitnum(inputData, 14, 1) |
+      bitnum(inputData, 6, 0)) >>>
+    0;
+
+  return [s0, s1];
+};
+
+const inversePermutation = (s0: number, s1: number): Uint8Array => {
+  const data = new Uint8Array(8);
+
+  data[3] =
+    bitnumIntr(s1, 7, 7) |
+    bitnumIntr(s0, 7, 6) |
+    bitnumIntr(s1, 15, 5) |
+    bitnumIntr(s0, 15, 4) |
+    bitnumIntr(s1, 23, 3) |
+    bitnumIntr(s0, 23, 2) |
+    bitnumIntr(s1, 31, 1) |
+    bitnumIntr(s0, 31, 0);
+
+  data[2] =
+    bitnumIntr(s1, 6, 7) |
+    bitnumIntr(s0, 6, 6) |
+    bitnumIntr(s1, 14, 5) |
+    bitnumIntr(s0, 14, 4) |
+    bitnumIntr(s1, 22, 3) |
+    bitnumIntr(s0, 22, 2) |
+    bitnumIntr(s1, 30, 1) |
+    bitnumIntr(s0, 30, 0);
+
+  data[1] =
+    bitnumIntr(s1, 5, 7) |
+    bitnumIntr(s0, 5, 6) |
+    bitnumIntr(s1, 13, 5) |
+    bitnumIntr(s0, 13, 4) |
+    bitnumIntr(s1, 21, 3) |
+    bitnumIntr(s0, 21, 2) |
+    bitnumIntr(s1, 29, 1) |
+    bitnumIntr(s0, 29, 0);
+
+  data[0] =
+    bitnumIntr(s1, 4, 7) |
+    bitnumIntr(s0, 4, 6) |
+    bitnumIntr(s1, 12, 5) |
+    bitnumIntr(s0, 12, 4) |
+    bitnumIntr(s1, 20, 3) |
+    bitnumIntr(s0, 20, 2) |
+    bitnumIntr(s1, 28, 1) |
+    bitnumIntr(s0, 28, 0);
+
+  data[7] =
+    bitnumIntr(s1, 3, 7) |
+    bitnumIntr(s0, 3, 6) |
+    bitnumIntr(s1, 11, 5) |
+    bitnumIntr(s0, 11, 4) |
+    bitnumIntr(s1, 19, 3) |
+    bitnumIntr(s0, 19, 2) |
+    bitnumIntr(s1, 27, 1) |
+    bitnumIntr(s0, 27, 0);
+
+  data[6] =
+    bitnumIntr(s1, 2, 7) |
+    bitnumIntr(s0, 2, 6) |
+    bitnumIntr(s1, 10, 5) |
+    bitnumIntr(s0, 10, 4) |
+    bitnumIntr(s1, 18, 3) |
+    bitnumIntr(s0, 18, 2) |
+    bitnumIntr(s1, 26, 1) |
+    bitnumIntr(s0, 26, 0);
+
+  data[5] =
+    bitnumIntr(s1, 1, 7) |
+    bitnumIntr(s0, 1, 6) |
+    bitnumIntr(s1, 9, 5) |
+    bitnumIntr(s0, 9, 4) |
+    bitnumIntr(s1, 17, 3) |
+    bitnumIntr(s0, 17, 2) |
+    bitnumIntr(s1, 25, 1) |
+    bitnumIntr(s0, 25, 0);
+
+  data[4] =
+    bitnumIntr(s1, 0, 7) |
+    bitnumIntr(s0, 0, 6) |
+    bitnumIntr(s1, 8, 5) |
+    bitnumIntr(s0, 8, 4) |
+    bitnumIntr(s1, 16, 3) |
+    bitnumIntr(s0, 16, 2) |
+    bitnumIntr(s1, 24, 1) |
+    bitnumIntr(s0, 24, 0);
+
+  return data;
+};
+
+const f = (state: number, key: number[]): number => {
+  const t1 =
+    (bitnumIntl(state, 31, 0) |
+      ((state & 0xf0000000) >>> 1) |
+      bitnumIntl(state, 4, 5) |
+      bitnumIntl(state, 3, 6) |
+      ((state & 0x0f000000) >>> 3) |
+      bitnumIntl(state, 8, 11) |
+      bitnumIntl(state, 7, 12) |
+      ((state & 0x00f00000) >>> 5) |
+      bitnumIntl(state, 12, 17) |
+      bitnumIntl(state, 11, 18) |
+      ((state & 0x000f0000) >>> 7) |
+      bitnumIntl(state, 16, 23)) >>>
+    0;
+
+  const t2 =
+    (bitnumIntl(state, 15, 0) |
+      ((state & 0x0000f000) << 15) |
+      bitnumIntl(state, 20, 5) |
+      bitnumIntl(state, 19, 6) |
+      ((state & 0x00000f00) << 13) |
+      bitnumIntl(state, 24, 11) |
+      bitnumIntl(state, 23, 12) |
+      ((state & 0x000000f0) << 11) |
+      bitnumIntl(state, 28, 17) |
+      bitnumIntl(state, 27, 18) |
+      ((state & 0x0000000f) << 9) |
+      bitnumIntl(state, 0, 23)) >>>
+    0;
+
+  const lrgstate = [
+    ((t1 >>> 24) & 0x000000ff) ^ key[0],
+    ((t1 >>> 16) & 0x000000ff) ^ key[1],
+    ((t1 >>> 8) & 0x000000ff) ^ key[2],
+    ((t2 >>> 24) & 0x000000ff) ^ key[3],
+    ((t2 >>> 16) & 0x000000ff) ^ key[4],
+    ((t2 >>> 8) & 0x000000ff) ^ key[5],
+  ];
+
+  state =
+    ((sbox[0][sboxBit(lrgstate[0] >>> 2)] << 28) |
+      (sbox[1][sboxBit(((lrgstate[0] & 0x03) << 4) | (lrgstate[1] >>> 4))] << 24) |
+      (sbox[2][sboxBit(((lrgstate[1] & 0x0f) << 2) | (lrgstate[2] >>> 6))] << 20) |
+      (sbox[3][sboxBit(lrgstate[2] & 0x3f)] << 16) |
+      (sbox[4][sboxBit(lrgstate[3] >>> 2)] << 12) |
+      (sbox[5][sboxBit(((lrgstate[3] & 0x03) << 4) | (lrgstate[4] >>> 4))] << 8) |
+      (sbox[6][sboxBit(((lrgstate[4] & 0x0f) << 2) | (lrgstate[5] >>> 6))] << 4) |
+      sbox[7][sboxBit(lrgstate[5] & 0x3f)]) >>>
+    0;
+
+  return (
+    (bitnumIntl(state, 15, 0) |
+      bitnumIntl(state, 6, 1) |
+      bitnumIntl(state, 19, 2) |
+      bitnumIntl(state, 20, 3) |
+      bitnumIntl(state, 28, 4) |
+      bitnumIntl(state, 11, 5) |
+      bitnumIntl(state, 27, 6) |
+      bitnumIntl(state, 16, 7) |
+      bitnumIntl(state, 0, 8) |
+      bitnumIntl(state, 14, 9) |
+      bitnumIntl(state, 22, 10) |
+      bitnumIntl(state, 25, 11) |
+      bitnumIntl(state, 4, 12) |
+      bitnumIntl(state, 17, 13) |
+      bitnumIntl(state, 30, 14) |
+      bitnumIntl(state, 9, 15) |
+      bitnumIntl(state, 1, 16) |
+      bitnumIntl(state, 7, 17) |
+      bitnumIntl(state, 23, 18) |
+      bitnumIntl(state, 13, 19) |
+      bitnumIntl(state, 31, 20) |
+      bitnumIntl(state, 26, 21) |
+      bitnumIntl(state, 2, 22) |
+      bitnumIntl(state, 8, 23) |
+      bitnumIntl(state, 18, 24) |
+      bitnumIntl(state, 12, 25) |
+      bitnumIntl(state, 29, 26) |
+      bitnumIntl(state, 5, 27) |
+      bitnumIntl(state, 21, 28) |
+      bitnumIntl(state, 10, 29) |
+      bitnumIntl(state, 3, 30) |
+      bitnumIntl(state, 24, 31)) >>>
+    0
+  );
+};
+
+const crypt = (inputData: Uint8Array, key: number[][]): Uint8Array => {
+  let [s0, s1] = initialPermutation(inputData);
+
+  for (let idx = 0; idx < 15; idx++) {
+    const previousS1 = s1;
+    s1 = (f(s1, key[idx]) ^ s0) >>> 0;
+    s0 = previousS1;
+  }
+  s0 = (f(s1, key[15]) ^ s0) >>> 0;
+
+  return inversePermutation(s0, s1);
+};
+
+const keySchedule = (key: Uint8Array, mode: number): number[][] => {
+  const schedule: number[][] = Array.from({ length: 16 }, () => Array(6).fill(0));
+  const keyRndShift = [1, 1, 2, 2, 2, 2, 2, 2, 1, 2, 2, 2, 2, 2, 2, 1];
+  const keyPermC = [
+    56, 48, 40, 32, 24, 16, 8, 0, 57, 49, 41, 33, 25, 17, 9, 1, 58, 50, 42, 34, 26, 18, 10, 2, 59,
+    51, 43, 35,
+  ];
+  const keyPermD = [
+    62, 54, 46, 38, 30, 22, 14, 6, 61, 53, 45, 37, 29, 21, 13, 5, 60, 52, 44, 36, 28, 20, 12, 4, 27,
+    19, 11, 3,
+  ];
+  const keyCompression = [
+    13, 16, 10, 23, 0, 4, 2, 27, 14, 5, 20, 9, 22, 18, 11, 3, 25, 7, 15, 6, 26, 19, 12, 1, 40, 51,
+    30, 36, 46, 54, 29, 39, 50, 44, 32, 47, 43, 48, 38, 55, 33, 52, 45, 41, 49, 35, 28, 31,
+  ];
+
+  let c = 0;
+  let d = 0;
+  for (let i = 0; i < 28; i++) {
+    c |= bitnum(key, keyPermC[i], 31 - i);
+    d |= bitnum(key, keyPermD[i], 31 - i);
+  }
+
+  for (let i = 0; i < 16; i++) {
+    c = (((c << keyRndShift[i]) | (c >>> (28 - keyRndShift[i]))) & 0xfffffff0) >>> 0;
+    d = (((d << keyRndShift[i]) | (d >>> (28 - keyRndShift[i]))) & 0xfffffff0) >>> 0;
+
+    const togen = mode === DECRYPT ? 15 - i : i;
+
+    for (let j = 0; j < 6; j++) {
+      schedule[togen][j] = 0;
+    }
+
+    for (let j = 0; j < 24; j++) {
+      schedule[togen][Math.floor(j / 8)] |= bitnumIntr(c, keyCompression[j], 7 - (j % 8));
+    }
+
+    for (let j = 24; j < 48; j++) {
+      schedule[togen][Math.floor(j / 8)] |= bitnumIntr(d, keyCompression[j] - 27, 7 - (j % 8));
+    }
+  }
+
+  return schedule;
+};
+
+const tripleDesKeySetup = (key: Uint8Array, mode: number): number[][][] => {
+  if (mode === ENCRYPT) {
+    return [
+      keySchedule(key.slice(0), ENCRYPT),
+      keySchedule(key.slice(8), DECRYPT),
+      keySchedule(key.slice(16), ENCRYPT),
+    ];
+  }
+  return [
+    keySchedule(key.slice(16), DECRYPT),
+    keySchedule(key.slice(8), ENCRYPT),
+    keySchedule(key.slice(0), DECRYPT),
+  ];
+};
+
+const tripleDesCrypt = (data: Uint8Array, key: number[][][]): Uint8Array => {
+  let result = data;
+  for (let i = 0; i < 3; i++) {
+    result = crypt(result, key[i]);
+  }
+  return result;
+};
+
+/**
+ * 解密 QRC 歌词
+ * @param encryptedData - 加密的字节数组
+ * @param key - 24字节密钥
+ * @returns 解密后的字节数组
+ */
+export const qrcDecrypt = (encryptedData: Uint8Array, key: Uint8Array): Uint8Array => {
+  const schedule = tripleDesKeySetup(key, DECRYPT);
+  const result: number[] = [];
+
+  // 以 8 字节为单位迭代
+  for (let i = 0; i < encryptedData.length; i += 8) {
+    const block = encryptedData.slice(i, i + 8);
+    const decrypted = tripleDesCrypt(block, schedule);
+    result.push(...decrypted);
+  }
+
+  return new Uint8Array(result);
+};
diff --git a/electron/main/apis/qqmusic/core/types.ts b/electron/main/apis/qqmusic/core/types.ts
new file mode 100644
index 0000000..529f0c1
--- /dev/null
+++ b/electron/main/apis/qqmusic/core/types.ts
@@ -0,0 +1,9 @@
+/**
+ * QM 模块函数签名
+ * 入参来自 IPC 非受控数据；module 内部直接解构即可，
+ * 值类型为 unknown，但 qmRequest 的 param 也是 `Record<string, unknown>`，直接透传不需 cast
+ */
+
+export type QMParams = Record<string, unknown>;
+
+export type QMModule = (params: QMParams) => Promise<unknown>;
diff --git a/electron/main/apis/qqmusic/index.ts b/electron/main/apis/qqmusic/index.ts
new file mode 100644
index 0000000..174b391
--- /dev/null
+++ b/electron/main/apis/qqmusic/index.ts
@@ -0,0 +1,70 @@
+/**
+ * QM 主进程服务
+ *
+ * 与 netease 不同之处：
+ * - 无持久化 session（uid/sid 是匿名态，内存缓存 1h 足够）
+ * - 无 cookie 登录态（播放 URL 由插件实现，不走账号）
+ * - 走 fetch 原生 HTTP，无加密 body（靠 UA + comm 伪装）
+ *
+ * 统一入口：callQQMusic(name, params)
+ */
+
+import { createHash } from "node:crypto";
+import { modules } from "./modules";
+import type { QMParams } from "./core/types";
+
+/** 2 分钟响应缓存 */
+const DEFAULT_TTL = 2 * 60 * 1000;
+const MAX_ENTRIES = 200;
+
+interface CacheEntry {
+  value: unknown;
+  expireAt: number;
+}
+
+const cache = new Map<string, CacheEntry>();
+
+const hashParams = (params: unknown): string =>
+  createHash("md5").update(JSON.stringify(params ?? {})).digest("hex").slice(0, 8);
+
+const cacheGet = (key: string): unknown => {
+  const hit = cache.get(key);
+  if (!hit) return undefined;
+  if (hit.expireAt <= Date.now()) {
+    cache.delete(key);
+    return undefined;
+  }
+  cache.delete(key);
+  cache.set(key, hit);
+  return hit.value;
+};
+
+const cacheSet = (key: string, value: unknown, ttl = DEFAULT_TTL): void => {
+  if (cache.size >= MAX_ENTRIES) {
+    const oldest = cache.keys().next().value;
+    if (oldest !== undefined) cache.delete(oldest);
+  }
+  cache.set(key, { value, expireAt: Date.now() + ttl });
+};
+
+export const clearQQMusicCache = (): void => {
+  cache.clear();
+};
+
+/**
+ * 调用任意 QM API
+ * @param name  见 modules/index.ts 中的 key（search / song_info / lyric / match / hot_search / leaderboard / song_list）
+ * @param params 业务参数；不想命中缓存可传 `timestamp: Date.now()`
+ */
+export const callQQMusic = async (name: string, params: QMParams = {}): Promise<unknown> => {
+  const fn = modules[name];
+  if (!fn) throw new Error(`unknown qm api: ${name}`);
+
+  const key = `${name}|${hashParams(params)}`;
+  const hit = cacheGet(key);
+  if (hit !== undefined) return hit;
+
+  const value = await fn(params);
+  cacheSet(key, value);
+  return value;
+};
diff --git a/electron/main/apis/qqmusic/modules/hot_search.ts b/electron/main/apis/qqmusic/modules/hot_search.ts
new file mode 100644
index 0000000..d256edd
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/hot_search.ts
@@ -0,0 +1,30 @@
+/**
+ * 热搜关键词
+ * module: tencent_musicsoso_hotkey.HotkeyService / GetHotkeyForQQMusicPC
+ */
+
+import { qmRequest } from "../core/request";
+import type { QMModule } from "../core/types";
+
+interface HotItem {
+  query?: string;
+  title?: string;
+  id?: number;
+}
+
+const hotSearch: QMModule = async () => {
+  const data = await qmRequest<{ vec_hotkey?: HotItem[] }>(
+    "tencent_musicsoso_hotkey.HotkeyService",
+    "GetHotkeyForQQMusicPC",
+    { search_id: "", uin: 0 },
+  );
+
+  const list = (data?.vec_hotkey ?? []).map((item) => ({
+    keyword: item.query || item.title || "",
+    id: item.id,
+  }));
+
+  return { code: 200, list };
+};
+
+export default hotSearch;
diff --git a/electron/main/apis/qqmusic/modules/index.ts b/electron/main/apis/qqmusic/modules/index.ts
new file mode 100644
index 0000000..5309a88
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/index.ts
@@ -0,0 +1,23 @@
+/**
+ * QM 模块注册表
+ */
+
+import type { QMModule } from "../core/types";
+
+import hot_search from "./hot_search";
+import leaderboard from "./leaderboard";
+import lyric from "./lyric";
+import match from "./match";
+import search from "./search";
+import song_info from "./song_info";
+import song_list from "./song_list";
+
+export const modules: Record<string, QMModule> = {
+  hot_search,
+  leaderboard,
+  lyric,
+  match,
+  search,
+  song_info,
+  song_list,
+};
diff --git a/electron/main/apis/qqmusic/modules/leaderboard.ts b/electron/main/apis/qqmusic/modules/leaderboard.ts
new file mode 100644
index 0000000..84e87ea
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/leaderboard.ts
@@ -0,0 +1,69 @@
+/**
+ * 排行榜
+ * module: musicToplist.ToplistInfoServer / GetDetail
+ *
+ * params:
+ * - topid   榜单 ID（必填）：26 流行榜 / 27 新歌榜 / 4 飙升榜 / 62 热歌榜 等
+ * - period  期数（YYYY_ww），不传取最新
+ * - limit   返回条数，默认 50
+ * - offset  偏移量
+ */
+
+import { qmRequest } from "../core/request";
+import { formatSingerName } from "../core/config";
+import type { QMModule } from "../core/types";
+
+interface ToplistSong {
+  songInfo?: {
+    id?: number;
+    mid?: string;
+    title?: string;
+    interval?: number;
+    singer?: Array<{ name?: string; mid?: string }>;
+    album?: { name?: string; mid?: string };
+  };
+}
+
+const leaderboard: QMModule = async (params) => {
+  const { topid, period = "", limit = 50, offset = 0 } = params;
+
+  const data = await qmRequest<{
+    data?: {
+      title?: string;
+      titleDetail?: string;
+      updateTime?: string;
+      headPicUrl?: string;
+      songInfoList?: ToplistSong[];
+    };
+  }>("musicToplist.ToplistInfoServer", "GetDetail", {
+    topid,
+    num: limit,
+    offset,
+    period,
+  });
+
+  const info = data?.data;
+  const songs = (info?.songInfoList ?? [])
+    .map((item) => item.songInfo)
+    .filter((song): song is NonNullable<ToplistSong["songInfo"]> => !!song)
+    .map((song) => ({
+      id: String(song.id ?? ""),
+      mid: song.mid ?? "",
+      name: song.title ?? "",
+      artist: formatSingerName(song.singer),
+      album: song.album?.name ?? "",
+      albumMid: song.album?.mid ?? "",
+      duration: (song.interval ?? 0) * 1000,
+    }));
+
+  return {
+    code: 200,
+    title: info?.title ?? "",
+    subTitle: info?.titleDetail ?? "",
+    updateTime: info?.updateTime ?? "",
+    cover: info?.headPicUrl ?? "",
+    songs,
+  };
+};
+
+export default leaderboard;
diff --git a/electron/main/apis/qqmusic/modules/lyric.ts b/electron/main/apis/qqmusic/modules/lyric.ts
new file mode 100644
index 0000000..1f457f3
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/lyric.ts
@@ -0,0 +1,114 @@
+/**
+ * 歌词（含 QRC 逐字 / 翻译 / 罗马音）
+ * module: music.musichallSong.PlayLyricInfo / GetPlayLyricInfo
+ *
+ * 流程：请求 crypt=1 → 返回 hex 密文 → Triple DES + zlib 解压 → 原始 QRC/LRC 文本
+ *
+ * params:
+ * - id        歌曲数字 ID（必填）
+ * - name      歌曲名（用于服务端匹配，Base64 编码后发送）
+ * - artist    歌手名
+ * - album     专辑名
+ * - duration  时长（秒）
+ */
+
+import { qmRequest } from "../core/request";
+import { decryptQrc } from "../core/qrc";
+import type { QMModule } from "../core/types";
+
+interface LyricResponse {
+  code: number;
+  lrc?: string;
+  qrc?: string;
+  trans?: string;
+  roma?: string;
+  message?: string;
+}
+
+const b64 = (text: unknown): string => Buffer.from(String(text ?? ""), "utf8").toString("base64");
+
+interface LyricResp {
+  lyric?: string;
+  qrc_t?: number;
+  trans?: string;
+  roma?: string;
+}
+
+const tryDecrypt = (hex: string | undefined): string | undefined => {
+  if (!hex) return undefined;
+  try {
+    return decryptQrc(hex);
+  } catch {
+    return undefined;
+  }
+};
+
+const lyric: QMModule = async (params) => {
+  const { id, name = "", artist = "", album = "", duration = 0 } = params;
+
+  const baseParam = {
+    albumName: b64(album),
+    crypt: 1,
+    ct: 19,
+    cv: 2111,
+    interval: duration,
+    lrc_t: 0,
+    qrc: 1,
+    qrc_t: 0,
+    roma: 1,
+    roma_t: 0,
+    singerName: b64(artist),
+    songID: id,
+    songName: b64(name),
+    trans: 1,
+    trans_t: 0,
+    type: 0,
+  };
+
+  try {
+    const resp = await qmRequest<LyricResp>(
+      "music.musichallSong.PlayLyricInfo",
+      "GetPlayLyricInfo",
+      baseParam,
+    );
+
+    const result: LyricResponse = { code: 200 };
+
+    // 主歌词：按 qrc_t 判断服务端返回的是 QRC 还是 LRC
+    const mainDecrypted = tryDecrypt(resp.lyric);
+    if (mainDecrypted) {
+      if (resp.qrc_t === 0) {
+        // 未开启 QRC，lyric 字段是 LRC
+        result.lrc = mainDecrypted;
+      } else {
+        result.qrc = mainDecrypted;
+      }
+    }
+
+    // 若只拿到 QRC，再单独请求一次 LRC 格式
+    if (result.qrc && !result.lrc) {
+      try {
+        const lrcResp = await qmRequest<LyricResp>(
+          "music.musichallSong.PlayLyricInfo",
+          "GetPlayLyricInfo",
+          { ...baseParam, qrc: 0, qrc_t: 0 },
+        );
+        const lrcText = tryDecrypt(lrcResp.lyric);
+        if (lrcText) result.lrc = lrcText;
+      } catch {
+        // 次级失败不影响主结果
+      }
+    }
+
+    result.trans = tryDecrypt(resp.trans);
+    result.roma = tryDecrypt(resp.roma);
+    return result;
+  } catch (err) {
+    return {
+      code: 500,
+      message: err instanceof Error ? err.message : String(err),
+    };
+  }
+};
+
+export default lyric;
diff --git a/electron/main/apis/qqmusic/modules/match.ts b/electron/main/apis/qqmusic/modules/match.ts
new file mode 100644
index 0000000..d4bf3c7
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/match.ts
@@ -0,0 +1,60 @@
+/**
+ * 模糊匹配歌词
+ * 组合 search + lyric：搜第一条命中后取其歌词
+ *
+ * params:
+ * - keywords  搜索关键词，建议 "歌曲名-歌手名" 格式
+ */
+
+import searchModule from "./search";
+import lyricModule from "./lyric";
+import type { QMModule } from "../core/types";
+
+interface SearchedSong {
+  id: string;
+  mid: string;
+  name: string;
+  artist: string;
+  album: string;
+  duration: number;
+}
+
+interface LyricOut {
+  code: number;
+  lrc?: string;
+  qrc?: string;
+  trans?: string;
+  roma?: string;
+  message?: string;
+}
+
+const match: QMModule = async (params) => {
+  const { keywords } = params;
+
+  const searched = (await searchModule({ keywords, page: 1, limit: 1 })) as {
+    songs?: SearchedSong[];
+  };
+  const song = searched.songs?.[0];
+  if (!song) return { code: 404, message: "未找到匹配的歌曲" };
+
+  const lyricData = (await lyricModule({
+    id: Number(song.id),
+    name: song.name,
+    artist: song.artist,
+    album: song.album,
+    duration: Math.floor(song.duration / 1000),
+  })) as LyricOut;
+
+  if (lyricData.code !== 200) return lyricData;
+
+  return {
+    code: 200,
+    song,
+    lrc: lyricData.lrc,
+    qrc: lyricData.qrc,
+    trans: lyricData.trans,
+    roma: lyricData.roma,
+  };
+};
+
+export default match;
diff --git a/electron/main/apis/qqmusic/modules/search.ts b/electron/main/apis/qqmusic/modules/search.ts
new file mode 100644
index 0000000..965c876
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/search.ts
@@ -0,0 +1,69 @@
+/**
+ * 搜索歌曲
+ * module: music.search.SearchCgiService / DoSearchForQQMusicMobile
+ *
+ * params:
+ * - keywords  关键词（必填）
+ * - page      页码，默认 1
+ * - limit     每页数，默认 30
+ * - type      0 单曲 / 1 歌手 / 2 专辑 / 3 歌单 / 4 MV / 7 歌词 / 8 用户，默认 0
+ */
+
+import { qmRequest } from "../core/request";
+import { formatSingerName } from "../core/config";
+import type { QMModule } from "../core/types";
+
+interface QMSong {
+  id: number;
+  mid: string;
+  title: string;
+  interval: number;
+  singer?: Array<{ id?: number; mid?: string; name?: string }>;
+  album?: { id?: number; mid?: string; name?: string };
+  file?: {
+    media_mid?: string;
+    size_128mp3?: number;
+    size_320mp3?: number;
+    size_flac?: number;
+    size_hires?: number;
+  };
+}
+
+const search: QMModule = async (params) => {
+  const { keywords, page = 1, limit = 30, type = 0 } = params;
+
+  const data = await qmRequest<{
+    body?: { item_song?: QMSong[]; meta?: { sum?: number } };
+  }>("music.search.SearchCgiService", "DoSearchForQQMusicMobile", {
+    search_type: type,
+    query: keywords,
+    page_num: page,
+    num_per_page: limit,
+    highlight: 0,
+    nqc_flag: 0,
+    multi_zhida: 0,
+    cat: 2,
+    grp: 1,
+    sin: 0,
+    sem: 0,
+  });
+
+  const songs = (data?.body?.item_song ?? []).map((song) => ({
+    id: String(song.id),
+    mid: song.mid,
+    name: song.title,
+    artist: formatSingerName(song.singer),
+    album: song.album?.name ?? "",
+    albumMid: song.album?.mid ?? "",
+    duration: (song.interval ?? 0) * 1000,
+    mediaMid: song.file?.media_mid ?? "",
+  }));
+
+  return {
+    code: 200,
+    total: data?.body?.meta?.sum ?? songs.length,
+    songs,
+  };
+};
+
+export default search;
diff --git a/electron/main/apis/qqmusic/modules/song_info.ts b/electron/main/apis/qqmusic/modules/song_info.ts
new file mode 100644
index 0000000..58c4df9
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/song_info.ts
@@ -0,0 +1,50 @@
+/**
+ * 单曲详情
+ * module: music.pf_song_detail_svr / get_song_detail_yqq
+ *
+ * params:
+ * - mid  songmid，例如 "001qvvgF38HVc4"
+ */
+
+import { qmRequest } from "../core/request";
+import { formatSingerName } from "../core/config";
+import type { QMModule } from "../core/types";
+
+interface TrackInfo {
+  id: number;
+  mid: string;
+  title: string;
+  interval: number;
+  singer?: Array<{ name?: string; mid?: string }>;
+  album?: { name?: string; mid?: string };
+  file?: Record<string, number | string>;
+}
+
+const songInfo: QMModule = async (params) => {
+  const { mid } = params;
+
+  const data = await qmRequest<{ track_info?: TrackInfo }>(
+    "music.pf_song_detail_svr",
+    "get_song_detail_yqq",
+    { song_type: 0, song_mid: mid },
+  );
+
+  const track = data?.track_info;
+  if (!track) return { code: 404, message: "song not found" };
+
+  return {
+    code: 200,
+    song: {
+      id: String(track.id),
+      mid: track.mid,
+      name: track.title,
+      artist: formatSingerName(track.singer),
+      album: track.album?.name ?? "",
+      albumMid: track.album?.mid ?? "",
+      duration: (track.interval ?? 0) * 1000,
+      file: track.file,
+    },
+  };
+};
+
+export default songInfo;
diff --git a/electron/main/apis/qqmusic/modules/song_list.ts b/electron/main/apis/qqmusic/modules/song_list.ts
new file mode 100644
index 0000000..604e67e
--- /dev/null
+++ b/electron/main/apis/qqmusic/modules/song_list.ts
@@ -0,0 +1,71 @@
+/**
+ * 歌单详情
+ * 使用 c.y.qq.com 的 GET 接口（不走 musicu.fcg）
+ * 端点：https://c.y.qq.com/qzone/fcg-bin/fcg_ucc_getcdinfo_byids_cp.fcg
+ *
+ * params:
+ * - id  disstid（歌单 ID，必填）
+ */
+
+import { QM_HEADERS, formatSingerName } from "../core/config";
+import type { QMModule } from "../core/types";
+
+interface CdSongItem {
+  songid?: number;
+  songmid?: string;
+  songname?: string;
+  interval?: number;
+  singer?: Array<{ name?: string; mid?: string }>;
+  albumname?: string;
+  albummid?: string;
+}
+
+interface CdListResp {
+  code?: number;
+  cdlist?: Array<{
+    disstid?: number;
+    dissname?: string;
+    desc?: string;
+    nickname?: string;
+    logo?: string;
+    visitnum?: number;
+    songlist?: CdSongItem[];
+  }>;
+}
+
+const SONGLIST_URL =
+  "https://c.y.qq.com/qzone/fcg-bin/fcg_ucc_getcdinfo_byids_cp.fcg?type=1&json=1&utf8=1&onlysonglist=0&platform=yqq&needNewCode=0";
+
+const songList: QMModule = async (params) => {
+  const { id } = params;
+
+  const url = `${SONGLIST_URL}&disstid=${id}`;
+  const res = await fetch(url, { headers: QM_HEADERS });
+  const data = (await res.json()) as CdListResp;
+
+  const cd = data.cdlist?.[0];
+  if (!cd) return { code: 404, message: "歌单不存在" };
+
+  const songs = (cd.songlist ?? []).map((item) => ({
+    id: String(item.songid ?? ""),
+    mid: item.songmid ?? "",
+    name: item.songname ?? "",
+    artist: formatSingerName(item.singer),
+    album: item.albumname ?? "",
+    albumMid: item.albummid ?? "",
+    duration: (item.interval ?? 0) * 1000,
+  }));
+
+  return {
+    code: 200,
+    id: cd.disstid,
+    name: cd.dissname ?? "",
+    description: cd.desc ?? "",
+    creator: cd.nickname ?? "",
+    cover: cd.logo ?? "",
+    playCount: cd.visitnum ?? 0,
+    songs,
+  };
+};
+
+export default songList;
diff --git a/electron/main/ipc/apis.ts b/electron/main/ipc/apis.ts
new file mode 100644
index 0000000..8a627f1
--- /dev/null
+++ b/electron/main/ipc/apis.ts
@@ -0,0 +1,52 @@
+/**
+ * 音源 API 统一 IPC
+ *
+ * 只注册两个通道：
+ * - apis:call(platform, name, params)   调用对应平台的任意接口
+ * - apis:clearSession(platform)         清空某平台登录态
+ */
+
+import { ipcMain } from "electron";
+import { callNetease, clearNeteaseCookies } from "@main/apis/netease";
+import { callQQMusic } from "@main/apis/qqmusic";
+import { coreLog } from "@main/utils/logger";
+import type { ApiPlatform } from "@shared/types/apis";
+
+/** 各平台的调用器：统一返回 `{ status?, body?, data? }` 由前端按需取 */
+const dispatch = async (
+  platform: ApiPlatform,
+  name: string,
+  params: Record<string, unknown>,
+): Promise<Record<string, unknown>> => {
+  switch (platform) {
+    case "netease": {
+      const res = await callNetease(name, params);
+      return { status: res.status, body: res.body };
+    }
+    case "qqmusic": {
+      const data = await callQQMusic(name, params);
+      return { data };
+    }
+    default:
+      throw new Error(`unknown platform: ${platform}`);
+  }
+};
+
+export const registerApisIpc = (): void => {
+  ipcMain.handle(
+    "apis:call",
+    async (_evt, platform: ApiPlatform, name: string, params?: Record<string, unknown>) => {
+      try {
+        const result = await dispatch(platform, name, params ?? {});
+        return { ok: true, ...result };
+      } catch (err) {
+        coreLog.warn(`[apis] ${platform}.${name} failed:`, err);
+        return { ok: false, error: err instanceof Error ? err.message : String(err) };
+      }
+    },
+  );
+
+  ipcMain.handle("apis:clearSession", (_evt, platform: ApiPlatform) => {
+    if (platform === "netease") clearNeteaseCookies();
+  });
+};
diff --git a/electron/main/ipc/index.ts b/electron/main/ipc/index.ts
index cad075e..1adef99 100644
--- a/electron/main/ipc/index.ts
+++ b/electron/main/ipc/index.ts
@@ -5,7 +5,7 @@ import { registerLibraryIpc } from "./library";
 import { registerNowPlayingIpc } from "./nowPlaying";
 import { registerWindowIpc } from "./window";
 import { registerPluginIpc } from "./plugin";
-import { registerNeteaseIpc } from "./netease";
+import { registerApisIpc } from "./apis";
 
 /** 注册所有 IPC 处理 */
 export const registerIpcHandlers = (): void => {
@@ -16,5 +16,5 @@ export const registerIpcHandlers = (): void => {
   registerNowPlayingIpc();
   registerWindowIpc();
   registerPluginIpc();
-  registerNeteaseIpc();
+  registerApisIpc();
 };
diff --git a/electron/main/ipc/netease.ts b/electron/main/ipc/netease.ts
deleted file mode 100644
index 2e69fe0..0000000
--- a/electron/main/ipc/netease.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-/**
- * Netease API IPC
- *
- * 暴露一个通用入口 `netease:call`，参数为 (name, params)。
- * 响应形状对齐 interface.d.ts 的 Response：`{ status, body }`。
- * Cookie 完全由主进程 service 维护，渲染端不直接碰。
- */
-
-import { ipcMain } from "electron";
-import { callNetease, clearNeteaseCookies } from "@main/apis/netease";
-import { coreLog } from "@main/utils/logger";
-
-export const registerNeteaseIpc = (): void => {
-  ipcMain.handle(
-    "netease:call",
-    async (_evt, name: string, params?: Record<string, unknown>) => {
-      try {
-        const res = await callNetease(name, params ?? {});
-        return { ok: true, status: res.status, body: res.body };
-      } catch (err) {
-        coreLog.warn(`[netease] call ${name} failed:`, err);
-        return {
-          ok: false,
-          error: err instanceof Error ? err.message : String(err),
-        };
-      }
-    },
-  );
-
-  ipcMain.handle("netease:clearCookie", () => {
-    clearNeteaseCookies();
-  });
-};
diff --git a/electron/preload/index.d.ts b/electron/preload/index.d.ts
index a287403..101fced 100644
--- a/electron/preload/index.d.ts
+++ b/electron/preload/index.d.ts
@@ -4,7 +4,7 @@ import { ConfigApi, LocaleCode } from "@shared/types/settings";
 import { LibraryApi } from "@shared/types/library";
 import { NowPlayingApi } from "@shared/types/nowPlaying";
 import { PluginsApi } from "@shared/types/plugin";
-import { NeteaseApi } from "@shared/types/netease";
+import { ApisApi } from "@shared/types/apis";
 import {
   WindowApi,
   DesktopLyricApi,
@@ -35,7 +35,7 @@ declare global {
       taskbarLyric: TaskbarLyricApi;
       nowPlaying: NowPlayingApi;
       plugins: PluginsApi;
-      netease: NeteaseApi;
+      apis: ApisApi;
     };
   }
 }
diff --git a/electron/preload/index.ts b/electron/preload/index.ts
index 06cb598..8879e4c 100644
--- a/electron/preload/index.ts
+++ b/electron/preload/index.ts
@@ -241,12 +241,12 @@ const api = {
     onStatus: (callback: (info: PluginInfo) => void) =>
       subscribe<PluginInfo>("plugin:status", callback),
   },
-  netease: {
-    // 调用任意 Netease 接口；主进程自动注入 cookie
-    call: (name: string, params?: Record<string, unknown>) =>
-      ipcRenderer.invoke("netease:call", name, params ?? {}),
-    // 清空登录 cookie
-    clearCookie: () => ipcRenderer.invoke("netease:clearCookie"),
+  apis: {
+    // 调用任意平台的任意接口
+    call: (platform: string, name: string, params?: Record<string, unknown>) =>
+      ipcRenderer.invoke("apis:call", platform, name, params ?? {}),
+    // 清空指定平台的登录态
+    clearSession: (platform: string) => ipcRenderer.invoke("apis:clearSession", platform),
   },
   nowPlaying: {
     // 渲染进程同步当前播放状态到主进程
diff --git a/shared/types/apis.ts b/shared/types/apis.ts
new file mode 100644
index 0000000..bd40ee9
--- /dev/null
+++ b/shared/types/apis.ts
@@ -0,0 +1,28 @@
+/**
+ * 主进程音源 API 统一类型
+ */
+
+/** 支持的音源平台 */
+export type ApiPlatform = "netease" | "qqmusic";
+
+/** 通用响应包装 */
+export type ApiCallResponse =
+  | { ok: true; status?: number; body?: unknown; data?: unknown }
+  | { ok: false; error: string };
+
+/** 渲染端统一入口 */
+export interface ApisApi {
+  /**
+   * 调用任意音源接口
+   * @param platform 音源平台
+   * @param name 接口名
+   * @param params 接口参数
+   */
+  call: (
+    platform: ApiPlatform,
+    name: string,
+    params?: Record<string, unknown>,
+  ) => Promise<ApiCallResponse>;
+  /** 清空指定平台的登录态（目前仅 netease 有意义） */
+  clearSession: (platform: ApiPlatform) => Promise<void>;
+}
diff --git a/shared/types/netease.ts b/shared/types/netease.ts
deleted file mode 100644
index 6bf4262..0000000
--- a/shared/types/netease.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-/** Netease API 通用响应包装 */
-export type NeteaseCallResponse =
-  | { ok: true; status: number; body: unknown }
-  | { ok: false; error: string };
-
-/** 渲染端 Netease API */
-export interface NeteaseApi {
-  /**
-   * 调用任意 Netease 接口
-   * @param name 接口名（见 `@neteasecloudmusicapienhanced/api` 的 interface.d.ts）
-   * @param params 接口参数；无需传 cookie，主进程会自动注入
-   */
-  call: (name: string, params?: Record<string, unknown>) => Promise<NeteaseCallResponse>;
-  /** 清空登录态 cookie（主进程端） */
-  clearCookie: () => Promise<void>;
-}
diff --git a/src/apis/netease.ts b/src/apis/netease.ts
index 7c6feb5..a27c686 100644
--- a/src/apis/netease.ts
+++ b/src/apis/netease.ts
@@ -2,34 +2,33 @@
  * Netease API 渲染端
  *
  * 用 Proxy 把所有接口代理到主进程：`netease.search({keywords})` 实际等于
- * `window.api.netease.call("search", {keywords})`。
+ * `window.api.apis.call("netease", "search", {keywords})`。
  *
  * 调用约定：成功 → 返回 body；失败 → 抛 Error。
  * 想取原始响应（含 HTTP status）用 `neteaseRaw`。
  */
 
-import type { NeteaseCallResponse } from "@shared/types/netease";
+import type { ApiCallResponse } from "@shared/types/apis";
 
 /**
  * 调用 Netease API，返回原始响应
  * @param name 接口名
  * @param params 接口参数
- * @returns 原始响应
+ * @returns 原始响应（含 status + body）
  */
 export const neteaseRaw = async (
   name: string,
   params?: Record<string, unknown>,
 ): Promise<{ status: number; body: unknown }> => {
-  const res: NeteaseCallResponse = await window.api.netease.call(name, params);
+  const res: ApiCallResponse = await window.api.apis.call("netease", name, params);
   if (!res.ok) throw new Error(res.error);
-  return { status: res.status, body: res.body };
+  return { status: res.status ?? 200, body: res.body };
 };
 
 /**
  * 调用 Netease API，只返回 body
  * @param name 接口名
  * @param params 接口参数
- * @returns body
  */
 export const neteaseCall = async <T = unknown>(
   name: string,
@@ -43,9 +42,6 @@ type NeteaseProxy = Record<string, <T = unknown>(params?: Record<string, unknown
 
 /**
  * 任意方法调用：`netease.search(...)` / `netease.song_url_v1(...)`
- * @param name 接口名
- * @param params 接口参数
- * @returns body
  */
 export const netease: NeteaseProxy = new Proxy({} as NeteaseProxy, {
   get:
@@ -53,3 +49,7 @@ export const netease: NeteaseProxy = new Proxy({} as NeteaseProxy, {
     <T = unknown>(params?: Record<string, unknown>) =>
       neteaseCall<T>(name, params),
 });
+
+/** 清空登录态 cookie */
+export const clearNeteaseSession = (): Promise<void> =>
+  window.api.apis.clearSession("netease");
diff --git a/src/apis/qqmusic.ts b/src/apis/qqmusic.ts
new file mode 100644
index 0000000..bed53c6
--- /dev/null
+++ b/src/apis/qqmusic.ts
@@ -0,0 +1,34 @@
+/**
+ * QM API 渲染端
+ *
+ * 用 Proxy 代理所有接口到主进程：`qqmusic.search({keywords})` 等于
+ * `window.api.apis.call("qqmusic", "search", {keywords})`。
+ *
+ * 调用约定：成功 → 返回 data；失败 → 抛 Error。
+ */
+
+import type { ApiCallResponse } from "@shared/types/apis";
+
+/**
+ * 调用 QM API，返回业务数据
+ * @param name 接口名（search / song_info / lyric / match / hot_search / leaderboard / song_list）
+ * @param params 接口参数
+ */
+export const qqmusicCall = async <T = unknown>(
+  name: string,
+  params?: Record<string, unknown>,
+): Promise<T> => {
+  const res: ApiCallResponse = await window.api.apis.call("qqmusic", name, params);
+  if (!res.ok) throw new Error(res.error);
+  return res.data as T;
+};
+
+type QQMusicProxy = Record<string, <T = unknown>(params?: Record<string, unknown>) => Promise<T>>;
+
+/** 任意方法调用：`qqmusic.search(...)` / `qqmusic.lyric(...)` */
+export const qqmusic: QQMusicProxy = new Proxy({} as QQMusicProxy, {
+  get:
+    (_t, name: string) =>
+    <T = unknown>(params?: Record<string, unknown>) =>
+      qqmusicCall<T>(name, params),
+});
diff --git a/src/stores/user.ts b/src/stores/user.ts
index ea5fd57..3dbb373 100644
--- a/src/stores/user.ts
+++ b/src/stores/user.ts
@@ -6,7 +6,7 @@
  * - 启动时通过 `fetchStatus()` 向 Netease 校验 cookie 是否仍有效
  */
 
-import { neteaseCall } from "@/apis/netease";
+import { clearNeteaseSession, neteaseCall } from "@/apis/netease";
 
 /** 用户基础资料（对齐 Netease /login/status 返回的关键字段） */
 export interface UserProfile {
@@ -76,7 +76,7 @@ export const useUserStore = defineStore(
       } catch {
         /* 忽略：即使服务端登出失败也要清本地 */
       }
-      await window.api.netease.clearCookie();
+      await clearNeteaseSession();
       profile.value = null;
     };
 

From ad555a3e51fe0403761a32e0535cf7e60e875920 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Tue, 21 Apr 2026 23:54:31 +0800
Subject: [PATCH 10/17] =?UTF-8?q?=E4=BF=AE=E5=A4=8D=E6=A0=BC=E5=BC=8F?=
 =?UTF-8?q?=E5=8C=96=E9=97=AE=E9=A2=98?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron/main/apis/netease/core/cache.ts      |  3 +--
 electron/main/apis/netease/core/config.ts     |  4 +++-
 electron/main/apis/netease/modules/login.ts   |  3 +--
 electron/main/apis/netease/modules/logout.ts  |  3 +--
 .../netease/modules/register_anonimous.ts     |  4 +++-
 electron/main/apis/qqmusic/core/request.ts    |  3 ++-
 electron/main/apis/qqmusic/index.ts           |  5 +++-
 .../main/apis/qqmusic/modules/leaderboard.ts  | 23 ++++++++-----------
 electron/main/apis/qqmusic/modules/search.ts  | 23 ++++++++++++-------
 src/apis/netease.ts                           |  3 +--
 10 files changed, 41 insertions(+), 33 deletions(-)

diff --git a/electron/main/apis/netease/core/cache.ts b/electron/main/apis/netease/core/cache.ts
index a800dfd..7069e5d 100644
--- a/electron/main/apis/netease/core/cache.ts
+++ b/electron/main/apis/netease/core/cache.ts
@@ -30,8 +30,7 @@ const hash = (params: unknown): string =>
     .slice(0, 8);
 
 /** 构造缓存 key */
-export const buildCacheKey = (name: string, params: unknown): string =>
-  `${name}|${hash(params)}`;
+export const buildCacheKey = (name: string, params: unknown): string => `${name}|${hash(params)}`;
 
 /**
  * 获取缓存
diff --git a/electron/main/apis/netease/core/config.ts b/electron/main/apis/netease/core/config.ts
index 71d6270..812571d 100644
--- a/electron/main/apis/netease/core/config.ts
+++ b/electron/main/apis/netease/core/config.ts
@@ -26,7 +26,9 @@ export const API_DOMAIN = "https://interface.music.163.com";
 export const ENCRYPT_RESPONSE = false;
 
 /** 这些业务码视作 HTTP 200 成功（接口层的登录/重定向/限流语义） */
-export const SPECIAL_STATUS_CODES: ReadonlySet<number> = new Set([201, 302, 400, 502, 800, 801, 802, 803]);
+export const SPECIAL_STATUS_CODES: ReadonlySet<number> = new Set([
+  201, 302, 400, 502, 800, 801, 802, 803,
+]);
 
 /** 客户端伪装：不同 os 标识对应的 appver / osver / channel */
 export const OS_MAP = {
diff --git a/electron/main/apis/netease/modules/login.ts b/electron/main/apis/netease/modules/login.ts
index f05ab90..fd66030 100644
--- a/electron/main/apis/netease/modules/login.ts
+++ b/electron/main/apis/netease/modules/login.ts
@@ -9,8 +9,7 @@ import type { NeteaseModule } from "../core/types";
 const md5 = (text: string): string => createHash("md5").update(text).digest("hex");
 
 const login: NeteaseModule = async (query, request) => {
-  const password =
-    (query.md5_password as string) || md5((query.password as string) || "");
+  const password = (query.md5_password as string) || md5((query.password as string) || "");
   const data = {
     type: "0",
     https: "true",
diff --git a/electron/main/apis/netease/modules/logout.ts b/electron/main/apis/netease/modules/logout.ts
index c31a803..b8882d0 100644
--- a/electron/main/apis/netease/modules/logout.ts
+++ b/electron/main/apis/netease/modules/logout.ts
@@ -5,7 +5,6 @@
 import { createOption } from "../core/option";
 import type { NeteaseModule } from "../core/types";
 
-const logout: NeteaseModule = (query, request) =>
-  request("/api/logout", {}, createOption(query));
+const logout: NeteaseModule = (query, request) => request("/api/logout", {}, createOption(query));
 
 export default logout;
diff --git a/electron/main/apis/netease/modules/register_anonimous.ts b/electron/main/apis/netease/modules/register_anonimous.ts
index 1d23eac..abcdf55 100644
--- a/electron/main/apis/netease/modules/register_anonimous.ts
+++ b/electron/main/apis/netease/modules/register_anonimous.ts
@@ -17,7 +17,9 @@ const ID_XOR_KEY = "3go8&$8*3*3h0k(2)2";
 const encodeId = (deviceId: string): string => {
   let xored = "";
   for (let i = 0; i < deviceId.length; i++) {
-    xored += String.fromCharCode(deviceId.charCodeAt(i) ^ ID_XOR_KEY.charCodeAt(i % ID_XOR_KEY.length));
+    xored += String.fromCharCode(
+      deviceId.charCodeAt(i) ^ ID_XOR_KEY.charCodeAt(i % ID_XOR_KEY.length),
+    );
   }
   return createHash("md5").update(xored, "utf8").digest("base64");
 };
diff --git a/electron/main/apis/qqmusic/core/request.ts b/electron/main/apis/qqmusic/core/request.ts
index 9c5ade9..fe9d5ee 100644
--- a/electron/main/apis/qqmusic/core/request.ts
+++ b/electron/main/apis/qqmusic/core/request.ts
@@ -54,7 +54,8 @@ const ensureSession = (): Promise<void> => {
       };
       const data = await postRaw(body);
       if (data.code === 0 && data.request?.code === 0) {
-        const info = ((data.request.data as { session?: Partial<SessionCache> }) ?? {}).session ?? {};
+        const info =
+          ((data.request.data as { session?: Partial<SessionCache> }) ?? {}).session ?? {};
         session = {
           uid: info.uid,
           sid: info.sid,
diff --git a/electron/main/apis/qqmusic/index.ts b/electron/main/apis/qqmusic/index.ts
index 174b391..7fa194c 100644
--- a/electron/main/apis/qqmusic/index.ts
+++ b/electron/main/apis/qqmusic/index.ts
@@ -25,7 +25,10 @@ interface CacheEntry {
 const cache = new Map<string, CacheEntry>();
 
 const hashParams = (params: unknown): string =>
-  createHash("md5").update(JSON.stringify(params ?? {})).digest("hex").slice(0, 8);
+  createHash("md5")
+    .update(JSON.stringify(params ?? {}))
+    .digest("hex")
+    .slice(0, 8);
 
 const cacheGet = (key: string): unknown => {
   const hit = cache.get(key);
diff --git a/electron/main/apis/qqmusic/modules/leaderboard.ts b/electron/main/apis/qqmusic/modules/leaderboard.ts
index 84e87ea..df937e3 100644
--- a/electron/main/apis/qqmusic/modules/leaderboard.ts
+++ b/electron/main/apis/qqmusic/modules/leaderboard.ts
@@ -28,13 +28,11 @@ const leaderboard: QMModule = async (params) => {
   const { topid, period = "", limit = 50, offset = 0 } = params;
 
   const data = await qmRequest<{
-    data?: {
-      title?: string;
-      titleDetail?: string;
-      updateTime?: string;
-      headPicUrl?: string;
-      songInfoList?: ToplistSong[];
-    };
+    title?: string;
+    titleDetail?: string;
+    updateTime?: string;
+    headPicUrl?: string;
+    songInfoList?: ToplistSong[];
   }>("musicToplist.ToplistInfoServer", "GetDetail", {
     topid,
     num: limit,
@@ -42,8 +40,7 @@ const leaderboard: QMModule = async (params) => {
     period,
   });
 
-  const info = data?.data;
-  const songs = (info?.songInfoList ?? [])
+  const songs = (data?.songInfoList ?? [])
     .map((item) => item.songInfo)
     .filter((song): song is NonNullable<ToplistSong["songInfo"]> => !!song)
     .map((song) => ({
@@ -58,10 +55,10 @@ const leaderboard: QMModule = async (params) => {
 
   return {
     code: 200,
-    title: info?.title ?? "",
-    subTitle: info?.titleDetail ?? "",
-    updateTime: info?.updateTime ?? "",
-    cover: info?.headPicUrl ?? "",
+    title: data?.title ?? "",
+    subTitle: data?.titleDetail ?? "",
+    updateTime: data?.updateTime ?? "",
+    cover: data?.headPicUrl ?? "",
     songs,
   };
 };
diff --git a/electron/main/apis/qqmusic/modules/search.ts b/electron/main/apis/qqmusic/modules/search.ts
index 965c876..88b9aba 100644
--- a/electron/main/apis/qqmusic/modules/search.ts
+++ b/electron/main/apis/qqmusic/modules/search.ts
@@ -1,6 +1,6 @@
 /**
  * 搜索歌曲
- * module: music.search.SearchCgiService / DoSearchForQQMusicMobile
+ * module: music.search.SearchCgiService / DoSearchForQQMusicLite
  *
  * params:
  * - keywords  关键词（必填）
@@ -29,23 +29,30 @@ interface QMSong {
   };
 }
 
+/** 搜索 search_id：移动端随机数，用于服务端日志/去重 */
+const genSearchId = (): string =>
+  String(
+    Math.floor(Math.random() * 20) * 18014398509481984 +
+      Math.floor(Math.random() * 4194304) * 4294967296 +
+      (Date.now() % 86400000),
+  );
+
 const search: QMModule = async (params) => {
   const { keywords, page = 1, limit = 30, type = 0 } = params;
 
   const data = await qmRequest<{
     body?: { item_song?: QMSong[]; meta?: { sum?: number } };
-  }>("music.search.SearchCgiService", "DoSearchForQQMusicMobile", {
-    search_type: type,
+  }>("music.search.SearchCgiService", "DoSearchForQQMusicLite", {
+    search_id: genSearchId(),
+    remoteplace: "search.android.keyboard",
     query: keywords,
-    page_num: page,
+    search_type: type,
     num_per_page: limit,
+    page_num: page,
     highlight: 0,
     nqc_flag: 0,
-    multi_zhida: 0,
-    cat: 2,
+    page_id: 1,
     grp: 1,
-    sin: 0,
-    sem: 0,
   });
 
   const songs = (data?.body?.item_song ?? []).map((song) => ({
diff --git a/src/apis/netease.ts b/src/apis/netease.ts
index a27c686..f8cbd1e 100644
--- a/src/apis/netease.ts
+++ b/src/apis/netease.ts
@@ -51,5 +51,4 @@ export const netease: NeteaseProxy = new Proxy({} as NeteaseProxy, {
 });
 
 /** 清空登录态 cookie */
-export const clearNeteaseSession = (): Promise<void> =>
-  window.api.apis.clearSession("netease");
+export const clearNeteaseSession = (): Promise<void> => window.api.apis.clearSession("netease");

From 05d2a189d4f70abc210250c739793eac3adc09c1 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Wed, 22 Apr 2026 14:28:29 +0800
Subject: [PATCH 11/17] =?UTF-8?q?=E6=B7=BB=E5=8A=A0=20KG?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 electron/main/apis/kugou/core/config.ts    |  64 ++++++++++
 electron/main/apis/kugou/core/krc.ts       | 116 ++++++++++++++++++
 electron/main/apis/kugou/core/request.ts   |  61 ++++++++++
 electron/main/apis/kugou/core/types.ts     |   8 ++
 electron/main/apis/kugou/index.ts          |  73 ++++++++++++
 electron/main/apis/kugou/modules/index.ts  |  13 +++
 electron/main/apis/kugou/modules/lyric.ts  | 121 +++++++++++++++++++
 electron/main/apis/kugou/modules/search.ts | 130 +++++++++++++++++++++
 electron/main/ipc/apis.ts                  |   5 +
 shared/types/apis.ts                       |   2 +-
 src/apis/kugou.ts                          |  34 ++++++
 11 files changed, 626 insertions(+), 1 deletion(-)
 create mode 100644 electron/main/apis/kugou/core/config.ts
 create mode 100644 electron/main/apis/kugou/core/krc.ts
 create mode 100644 electron/main/apis/kugou/core/request.ts
 create mode 100644 electron/main/apis/kugou/core/types.ts
 create mode 100644 electron/main/apis/kugou/index.ts
 create mode 100644 electron/main/apis/kugou/modules/index.ts
 create mode 100644 electron/main/apis/kugou/modules/lyric.ts
 create mode 100644 electron/main/apis/kugou/modules/search.ts
 create mode 100644 src/apis/kugou.ts

diff --git a/electron/main/apis/kugou/core/config.ts b/electron/main/apis/kugou/core/config.ts
new file mode 100644
index 0000000..a11e160
--- /dev/null
+++ b/electron/main/apis/kugou/core/config.ts
@@ -0,0 +1,64 @@
+/**
+ * KG API 通用常量
+ */
+
+/** 搜索接口（WebFilter 平台，无需鉴权） */
+export const KG_SEARCH_URL = "https://songsearch.kugou.com/song_search_v2";
+
+/** 歌词搜索/下载接口（走 lyrics.kugou.com 的 expand_search 通道） */
+export const KG_LYRIC_SEARCH_URL = "http://lyrics.kugou.com/search";
+export const KG_LYRIC_DOWNLOAD_URL = "http://lyrics.kugou.com/download";
+
+/** 歌词接口需要的伪装 headers（来自 KuGou2012 PC 客户端） */
+export const KG_LYRIC_HEADERS: Record<string, string> = {
+  "KG-RC": "1",
+  "KG-THash": "expand_search_manager.cpp:852736169:451",
+  "User-Agent": "KuGou2012-9020-ExpandSearchManager",
+};
+
+/** HTML 实体反转义（KG 搜索结果含 `&amp;`、`&#039;` 等） */
+const ENTITY_MAP: Record<string, string> = {
+  "&nbsp;": " ",
+  "&amp;": "&",
+  "&lt;": "<",
+  "&gt;": ">",
+  "&quot;": '"',
+  "&apos;": "'",
+  "&#039;": "'",
+};
+
+export const decodeName = (str: string | null | undefined): string => {
+  if (!str) return "";
+  return str.replace(/&nbsp;|&amp;|&lt;|&gt;|&quot;|&apos;|&#039;/g, (s) => ENTITY_MAP[s] ?? s);
+};
+
+/** 歌手数组 `[{name:'A'},{name:'B'}]` → `A / B` */
+export const formatSingerName = (
+  singers: Array<{ name?: string }> | undefined,
+  join = " / ",
+): string => {
+  if (!singers?.length) return "";
+  return singers
+    .map((s) => s.name)
+    .filter((n): n is string => !!n)
+    .map(decodeName)
+    .join(join);
+};
+
+/**
+ * 把 `MM:SS` / `HH:MM:SS` 格式的时长字符串转成秒
+ * 歌词接口需要秒数作为参数，而搜索结果里已有的 Duration 就是秒，这里只处理兜底情况
+ */
+export const intervalToSeconds = (interval: string | number | undefined): number => {
+  if (typeof interval === "number") return Math.floor(interval);
+  if (!interval) return 0;
+  const parts = String(interval).split(":").map(Number);
+  let seconds = 0;
+  let unit = 1;
+  while (parts.length) {
+    const v = parts.pop();
+    if (Number.isFinite(v)) seconds += (v as number) * unit;
+    unit *= 60;
+  }
+  return Math.floor(seconds);
+};
diff --git a/electron/main/apis/kugou/core/krc.ts b/electron/main/apis/kugou/core/krc.ts
new file mode 100644
index 0000000..b34d3a6
--- /dev/null
+++ b/electron/main/apis/kugou/core/krc.ts
@@ -0,0 +1,116 @@
+/**
+ * KRC 歌词解密与格式化
+ *
+ * 加密：base64(content) 去头 4 字节 → 与 16 字节定 key 循环 XOR → zlib inflate → UTF-8 文本
+ * 文本格式示例：[285,3800]<0,120,0>字<120,200,0>字...
+ *   - 行首 [start_ms, duration_ms]
+ *   - 行内 <offset_ms, duration_ms, 0> 每字时间
+ *
+ * 本文件输出 4 种歌词：
+ *   - lrc     标准 LRC（行级）
+ *   - krc     逐字 LRC（LX 格式：`<offset_ms,duration_ms>字`）
+ *   - trans   翻译（行级 LRC）
+ *   - roma    罗马音（行级 LRC）
+ *
+ * key 与解析逻辑来源：lx-music-desktop/src/common/utils/lyricUtils/kg.js
+ */
+
+import { inflate } from "node:zlib";
+import { promisify } from "node:util";
+import { decodeName } from "./config";
+
+const inflateAsync = promisify(inflate);
+
+const KRC_KEY = Uint8Array.from([
+  0x40, 0x47, 0x61, 0x77, 0x5e, 0x32, 0x74, 0x47,
+  0x51, 0x36, 0x31, 0x2d, 0xce, 0xd2, 0x6e, 0x69,
+]);
+
+/** base64 → XOR → inflate → 文本 */
+const decryptKrc = async (base64: string): Promise<string> => {
+  if (!base64) throw new Error("empty krc content");
+  const buf = Buffer.from(base64, "base64").subarray(4);
+  for (let i = 0; i < buf.length; i++) buf[i] ^= KRC_KEY[i % 16];
+  const out = await inflateAsync(buf);
+  return out.toString("utf8");
+};
+
+const HEAD_ID_REG = /^.*\[id:\$\w+\]\n/;
+const LANGUAGE_REG = /\[language:([\w=\\/+]+)\]/;
+const LANGUAGE_LINE_REG = /\[language:[\w=\\/+]+\]\n/;
+const LINE_TIME_REG = /\[((\d+),\d+)\].*/g;
+const LINE_TIME_EACH_REG = /\[((\d+),\d+)\].*/;
+
+/** 把毫秒格式化成 `MM:SS.xxx` */
+const msToTimeTag = (ms: number): string => {
+  const m = Math.floor(ms / 60000);
+  const s = Math.floor((ms % 60000) / 1000);
+  const x = Math.floor(ms % 1000);
+  return `${String(m).padStart(2, "0")}:${String(s).padStart(2, "0")}.${x}`;
+};
+
+export interface KrcParsed {
+  lrc: string;
+  krc: string;
+  trans: string;
+  roma: string;
+}
+
+/** 解析解密后的 KRC 文本 → 四种歌词 */
+const parseKrc = (raw: string): KrcParsed => {
+  let text = raw.replace(/\r/g, "");
+  if (HEAD_ID_REG.test(text)) text = text.replace(HEAD_ID_REG, "");
+
+  // 翻译 & 罗马音以 [language:base64(json)] 整体嵌入
+  let transLines: string[] | undefined;
+  let romaLines: string[] | undefined;
+  const langMatch = text.match(LANGUAGE_REG);
+  if (langMatch) {
+    text = text.replace(LANGUAGE_LINE_REG, "");
+    try {
+      const json = JSON.parse(Buffer.from(langMatch[1], "base64").toString("utf8")) as {
+        content?: Array<{ type: number; lyricContent: string[][] }>;
+      };
+      for (const item of json.content ?? []) {
+        const lines = item.lyricContent.map((arr) => arr.join(""));
+        if (item.type === 0) romaLines = lines;
+        else if (item.type === 1) transLines = lines;
+      }
+    } catch {
+      // 译文解析失败不影响主歌词
+    }
+  }
+
+  // 逐行替换行首时间标签：把 [start_ms,dur_ms] 改成 [MM:SS.xxx]
+  // 同时按行索引同步给翻译/罗马音补上时间头
+  let idx = 0;
+  let krcBody = text.replace(LINE_TIME_REG, (line) => {
+    const match = line.match(LINE_TIME_EACH_REG);
+    if (!match) return line;
+    const startMs = parseInt(match[2], 10);
+    const timeTag = msToTimeTag(startMs);
+    if (romaLines && romaLines[idx] !== undefined) romaLines[idx] = `[${timeTag}]${romaLines[idx]}`;
+    if (transLines && transLines[idx] !== undefined)
+      transLines[idx] = `[${timeTag}]${transLines[idx]}`;
+    idx++;
+    return line.replace(match[1], timeTag);
+  });
+
+  // 字级时间标签 <offset,dur,0> → <offset,dur>（去除末尾的 0）
+  krcBody = krcBody.replace(/<(\d+,\d+),\d+>/g, "<$1>");
+  const krc = decodeName(krcBody);
+  const lrc = krc.replace(/<\d+,\d+>/g, "");
+
+  return {
+    lrc,
+    krc,
+    trans: decodeName(transLines ? transLines.join("\n") : ""),
+    roma: decodeName(romaLines ? romaLines.join("\n") : ""),
+  };
+};
+
+/** 解密并解析一段 KRC base64 内容 */
+export const decodeKrc = async (base64Content: string): Promise<KrcParsed> => {
+  const text = await decryptKrc(base64Content);
+  return parseKrc(text);
+};
diff --git a/electron/main/apis/kugou/core/request.ts b/electron/main/apis/kugou/core/request.ts
new file mode 100644
index 0000000..4edf6f4
--- /dev/null
+++ b/electron/main/apis/kugou/core/request.ts
@@ -0,0 +1,61 @@
+/**
+ * KG 请求层
+ *
+ * 设计：
+ * - 搜索走 songsearch.kugou.com（JSON，无鉴权），透传查询参数
+ * - 歌词走 lyrics.kugou.com（JSON，需要 KG-RC/KG-THash/UA 伪装 PC 客户端）
+ * - 出错自动重试，最多 3 次；非 200 或 error_code != 0 视为失败
+ * - 没有加密 body，纯 fetch GET
+ */
+
+interface FetchOptions {
+  headers?: Record<string, string>;
+  /** 最大重试次数（不含首次），默认 2 → 总共最多 3 次 */
+  retry?: number;
+}
+
+interface KGRawBody {
+  status?: number;
+  error_code?: number;
+  errcode?: number;
+  err_code?: number;
+  data?: unknown;
+  info?: unknown;
+  [key: string]: unknown;
+}
+
+/**
+ * 发一次 KG GET 请求，返回解析后的 JSON body
+ * 失败自动重试；超出次数抛错
+ */
+export const kgRequest = async <T = unknown>(
+  url: string,
+  options: FetchOptions = {},
+): Promise<T> => {
+  const maxRetry = options.retry ?? 2;
+  let lastError: unknown;
+
+  for (let attempt = 0; attempt <= maxRetry; attempt++) {
+    try {
+      const res = await fetch(url, {
+        method: "GET",
+        headers: options.headers,
+      });
+      if (res.status !== 200) {
+        lastError = new Error(`KG HTTP ${res.status}`);
+        continue;
+      }
+      const body = (await res.json()) as KGRawBody;
+      const code = body.error_code ?? body.errcode ?? body.err_code ?? 0;
+      if (code !== 0) {
+        lastError = new Error(`KG API error_code=${code}`);
+        continue;
+      }
+      return body as T;
+    } catch (err) {
+      lastError = err;
+    }
+  }
+
+  throw lastError instanceof Error ? lastError : new Error("KG request failed");
+};
diff --git a/electron/main/apis/kugou/core/types.ts b/electron/main/apis/kugou/core/types.ts
new file mode 100644
index 0000000..bba82b7
--- /dev/null
+++ b/electron/main/apis/kugou/core/types.ts
@@ -0,0 +1,8 @@
+/**
+ * KG 模块函数签名
+ * 入参来自 IPC 非受控数据，模块内部解构即可
+ */
+
+export type KGParams = Record<string, unknown>;
+
+export type KGModule = (params: KGParams) => Promise<unknown>;
diff --git a/electron/main/apis/kugou/index.ts b/electron/main/apis/kugou/index.ts
new file mode 100644
index 0000000..6e41c0f
--- /dev/null
+++ b/electron/main/apis/kugou/index.ts
@@ -0,0 +1,73 @@
+/**
+ * KG 主进程服务
+ *
+ * 与 netease 不同之处：
+ * - 无账号体系、无 cookie、无加密 body，纯 fetch GET
+ * - 搜索走 songsearch.kugou.com；歌词走 lyrics.kugou.com（需 KG-RC/KG-THash/UA 伪装）
+ * - 歌词是 hash + 歌名 + 时长 三元组匹配（KG 特有，不能只凭 ID）
+ *
+ * 统一入口：callKugou(name, params)
+ */
+
+import { createHash } from "node:crypto";
+import { modules } from "./modules";
+import type { KGParams } from "./core/types";
+
+/** 2 分钟响应缓存 */
+const DEFAULT_TTL = 2 * 60 * 1000;
+const MAX_ENTRIES = 200;
+
+interface CacheEntry {
+  value: unknown;
+  expireAt: number;
+}
+
+const cache = new Map<string, CacheEntry>();
+
+const hashParams = (params: unknown): string =>
+  createHash("md5")
+    .update(JSON.stringify(params ?? {}))
+    .digest("hex")
+    .slice(0, 8);
+
+const cacheGet = (key: string): unknown => {
+  const hit = cache.get(key);
+  if (!hit) return undefined;
+  if (hit.expireAt <= Date.now()) {
+    cache.delete(key);
+    return undefined;
+  }
+  cache.delete(key);
+  cache.set(key, hit);
+  return hit.value;
+};
+
+const cacheSet = (key: string, value: unknown, ttl = DEFAULT_TTL): void => {
+  if (cache.size >= MAX_ENTRIES) {
+    const oldest = cache.keys().next().value;
+    if (oldest !== undefined) cache.delete(oldest);
+  }
+  cache.set(key, { value, expireAt: Date.now() + ttl });
+};
+
+export const clearKugouCache = (): void => {
+  cache.clear();
+};
+
+/**
+ * 调用任意 KG API
+ * @param name   见 modules/index.ts（search / lyric）
+ * @param params 业务参数；不想命中缓存可传 `timestamp: Date.now()`
+ */
+export const callKugou = async (name: string, params: KGParams = {}): Promise<unknown> => {
+  const fn = modules[name];
+  if (!fn) throw new Error(`unknown kg api: ${name}`);
+
+  const key = `${name}|${hashParams(params)}`;
+  const hit = cacheGet(key);
+  if (hit !== undefined) return hit;
+
+  const value = await fn(params);
+  cacheSet(key, value);
+  return value;
+};
diff --git a/electron/main/apis/kugou/modules/index.ts b/electron/main/apis/kugou/modules/index.ts
new file mode 100644
index 0000000..b84f303
--- /dev/null
+++ b/electron/main/apis/kugou/modules/index.ts
@@ -0,0 +1,13 @@
+/**
+ * KG 模块注册表
+ */
+
+import type { KGModule } from "../core/types";
+
+import lyric from "./lyric";
+import search from "./search";
+
+export const modules: Record<string, KGModule> = {
+  lyric,
+  search,
+};
diff --git a/electron/main/apis/kugou/modules/lyric.ts b/electron/main/apis/kugou/modules/lyric.ts
new file mode 100644
index 0000000..2e610cd
--- /dev/null
+++ b/electron/main/apis/kugou/modules/lyric.ts
@@ -0,0 +1,121 @@
+/**
+ * 歌词（KG）
+ *
+ * 两步流程：
+ *   1. GET lyrics.kugou.com/search?keyword=&hash=&timelength=  →  取第一候选 {id, accesskey, fmt}
+ *   2. GET lyrics.kugou.com/download?id=&accesskey=&fmt=        →  base64 content
+ *       - fmt=krc：XOR+zlib 解密 → LRC + 逐字 KRC + 翻译 + 罗马音
+ *       - fmt=lrc：base64 直接 utf8 解码 → 只有 LRC
+ *
+ * 调用这个接口必须同时提供 hash + 歌名 + 时长（秒），这是 KG 的硬要求
+ *
+ * params:
+ * - hash       文件 hash（搜索结果里的 hash / hashes['128k'] 等）
+ * - name       歌曲名（URL encode）
+ * - duration   时长（秒）
+ */
+
+import {
+  KG_LYRIC_DOWNLOAD_URL,
+  KG_LYRIC_HEADERS,
+  KG_LYRIC_SEARCH_URL,
+  intervalToSeconds,
+} from "../core/config";
+import { kgRequest } from "../core/request";
+import { decodeKrc } from "../core/krc";
+import type { KGModule } from "../core/types";
+
+interface KGLyricCandidate {
+  id: string;
+  accesskey: string;
+  /** 1 = 逐字，0 = 行级 */
+  krctype?: number;
+  contenttype?: number;
+}
+
+interface KGLyricSearchResp {
+  candidates?: KGLyricCandidate[];
+}
+
+interface KGLyricDownloadResp {
+  fmt?: string;
+  content?: string;
+}
+
+interface LyricOut {
+  code: number;
+  lrc?: string;
+  krc?: string;
+  trans?: string;
+  roma?: string;
+  message?: string;
+}
+
+const lyric: KGModule = async (params) => {
+  const { hash, name = "", duration } = params as {
+    hash?: string;
+    name?: string;
+    duration?: number | string;
+  };
+
+  if (!hash) return { code: 400, message: "hash required" } satisfies LyricOut;
+
+  const seconds = intervalToSeconds(duration);
+
+  try {
+    // 第 1 步：按 hash+name+时长 查候选
+    const searchUrl =
+      `${KG_LYRIC_SEARCH_URL}?ver=1&man=yes&client=pc&lrctxt=1` +
+      `&keyword=${encodeURIComponent(name)}` +
+      `&hash=${encodeURIComponent(hash)}` +
+      `&timelength=${seconds}`;
+    const searchResp = await kgRequest<KGLyricSearchResp>(searchUrl, {
+      headers: KG_LYRIC_HEADERS,
+    });
+
+    const candidate = searchResp.candidates?.[0];
+    if (!candidate) return { code: 404, message: "no lyric candidate" } satisfies LyricOut;
+
+    const fmt =
+      candidate.krctype === 1 && candidate.contenttype !== 1 ? "krc" : "lrc";
+
+    // 第 2 步：下载 + 解码
+    const downloadUrl =
+      `${KG_LYRIC_DOWNLOAD_URL}?ver=1&client=pc&charset=utf8` +
+      `&id=${encodeURIComponent(candidate.id)}` +
+      `&accesskey=${encodeURIComponent(candidate.accesskey)}` +
+      `&fmt=${fmt}`;
+    const dl = await kgRequest<KGLyricDownloadResp>(downloadUrl, {
+      headers: KG_LYRIC_HEADERS,
+    });
+
+    if (!dl.content) return { code: 404, message: "empty lyric" } satisfies LyricOut;
+
+    if (dl.fmt === "krc") {
+      const parsed = await decodeKrc(dl.content);
+      return {
+        code: 200,
+        lrc: parsed.lrc,
+        krc: parsed.krc,
+        trans: parsed.trans || undefined,
+        roma: parsed.roma || undefined,
+      } satisfies LyricOut;
+    }
+
+    if (dl.fmt === "lrc") {
+      return {
+        code: 200,
+        lrc: Buffer.from(dl.content, "base64").toString("utf8"),
+      } satisfies LyricOut;
+    }
+
+    return { code: 500, message: `unknown lyric fmt: ${dl.fmt}` } satisfies LyricOut;
+  } catch (err) {
+    return {
+      code: 500,
+      message: err instanceof Error ? err.message : String(err),
+    } satisfies LyricOut;
+  }
+};
+
+export default lyric;
diff --git a/electron/main/apis/kugou/modules/search.ts b/electron/main/apis/kugou/modules/search.ts
new file mode 100644
index 0000000..1d5c325
--- /dev/null
+++ b/electron/main/apis/kugou/modules/search.ts
@@ -0,0 +1,130 @@
+/**
+ * 搜索歌曲（KG）
+ * endpoint: https://songsearch.kugou.com/song_search_v2
+ *
+ * params:
+ * - keywords  关键词（必填）
+ * - page      页码，默认 1
+ * - limit     每页数，默认 30
+ *
+ * 返回字段遵循 qqmusic.search 的结构（duration 为毫秒），并额外带上
+ * KG 特有的 hash / audioId / 多品质 sizes&hashes，播放/歌词都要用
+ */
+
+import { KG_SEARCH_URL, decodeName, formatSingerName } from "../core/config";
+import { kgRequest } from "../core/request";
+import type { KGModule } from "../core/types";
+
+interface KGSearchSong {
+  Audioid: number;
+  SongName: string;
+  Singers?: Array<{ name?: string }>;
+  AlbumName?: string;
+  AlbumID?: number | string;
+  Duration: number;
+  FileHash: string;
+  FileSize: number;
+  HQFileHash?: string;
+  HQFileSize?: number;
+  SQFileHash?: string;
+  SQFileSize?: number;
+  ResFileHash?: string;
+  ResFileSize?: number;
+  Grp?: KGSearchSong[];
+}
+
+interface KGSearchResp {
+  status?: number;
+  error_code?: number;
+  data?: {
+    total?: number;
+    lists?: KGSearchSong[];
+  };
+}
+
+type Quality = "128k" | "320k" | "flac" | "flac24bit";
+
+const normalizeSong = (raw: KGSearchSong) => {
+  const sizes: Partial<Record<Quality, number>> = {};
+  const hashes: Partial<Record<Quality, string>> = {};
+
+  if (raw.FileSize) {
+    sizes["128k"] = raw.FileSize;
+    hashes["128k"] = raw.FileHash;
+  }
+  if (raw.HQFileSize && raw.HQFileHash) {
+    sizes["320k"] = raw.HQFileSize;
+    hashes["320k"] = raw.HQFileHash;
+  }
+  if (raw.SQFileSize && raw.SQFileHash) {
+    sizes.flac = raw.SQFileSize;
+    hashes.flac = raw.SQFileHash;
+  }
+  if (raw.ResFileSize && raw.ResFileHash) {
+    sizes.flac24bit = raw.ResFileSize;
+    hashes.flac24bit = raw.ResFileHash;
+  }
+
+  return {
+    id: String(raw.Audioid),
+    audioId: raw.Audioid,
+    hash: raw.FileHash,
+    name: decodeName(raw.SongName),
+    artist: formatSingerName(raw.Singers),
+    album: decodeName(raw.AlbumName ?? ""),
+    albumId: raw.AlbumID ?? "",
+    /** 秒 */
+    interval: raw.Duration,
+    /** 毫秒，与其它源对齐 */
+    duration: raw.Duration * 1000,
+    /** 支持的品质列表（从高到低） */
+    qualities: Object.keys(hashes) as Quality[],
+    hashes,
+    sizes,
+  };
+};
+
+const search: KGModule = async (params) => {
+  const { keywords, page = 1, limit = 30 } = params as {
+    keywords?: string;
+    page?: number;
+    limit?: number;
+  };
+
+  if (!keywords) {
+    return { code: 400, total: 0, songs: [], message: "keywords required" };
+  }
+
+  const url =
+    `${KG_SEARCH_URL}?keyword=${encodeURIComponent(keywords)}` +
+    `&page=${page}&pagesize=${limit}` +
+    `&userid=0&clientver=&platform=WebFilter&filter=2&iscorrection=1&privilege_filter=0&area_code=1`;
+
+  const body = await kgRequest<KGSearchResp>(url);
+
+  const raw = body.data?.lists ?? [];
+  const songs: ReturnType<typeof normalizeSong>[] = [];
+  // 去重键：audioId + hash（同一首歌不同品质会出现多条）
+  const seen = new Set<string>();
+
+  const push = (item: KGSearchSong) => {
+    const key = `${item.Audioid}_${item.FileHash}`;
+    if (seen.has(key)) return;
+    seen.add(key);
+    songs.push(normalizeSong(item));
+  };
+
+  for (const item of raw) {
+    push(item);
+    // Grp 里是翻唱/不同版本，一并展开
+    for (const sub of item.Grp ?? []) push(sub);
+  }
+
+  return {
+    code: 200,
+    total: body.data?.total ?? songs.length,
+    songs,
+  };
+};
+
+export default search;
diff --git a/electron/main/ipc/apis.ts b/electron/main/ipc/apis.ts
index 8a627f1..e454d43 100644
--- a/electron/main/ipc/apis.ts
+++ b/electron/main/ipc/apis.ts
@@ -9,6 +9,7 @@
 import { ipcMain } from "electron";
 import { callNetease, clearNeteaseCookies } from "@main/apis/netease";
 import { callQQMusic } from "@main/apis/qqmusic";
+import { callKugou } from "@main/apis/kugou";
 import { coreLog } from "@main/utils/logger";
 import type { ApiPlatform } from "@shared/types/apis";
 
@@ -27,6 +28,10 @@ const dispatch = async (
       const data = await callQQMusic(name, params);
       return { data };
     }
+    case "kugou": {
+      const data = await callKugou(name, params);
+      return { data };
+    }
     default:
       throw new Error(`unknown platform: ${platform}`);
   }
diff --git a/shared/types/apis.ts b/shared/types/apis.ts
index bd40ee9..241e957 100644
--- a/shared/types/apis.ts
+++ b/shared/types/apis.ts
@@ -3,7 +3,7 @@
  */
 
 /** 支持的音源平台 */
-export type ApiPlatform = "netease" | "qqmusic";
+export type ApiPlatform = "netease" | "qqmusic" | "kugou";
 
 /** 通用响应包装 */
 export type ApiCallResponse =
diff --git a/src/apis/kugou.ts b/src/apis/kugou.ts
new file mode 100644
index 0000000..b6a559c
--- /dev/null
+++ b/src/apis/kugou.ts
@@ -0,0 +1,34 @@
+/**
+ * KG API 渲染端
+ *
+ * 用 Proxy 代理所有接口到主进程：`kugou.search({keywords})` 等于
+ * `window.api.apis.call("kugou", "search", {keywords})`。
+ *
+ * 调用约定：成功 → 返回 data；失败 → 抛 Error。
+ */
+
+import type { ApiCallResponse } from "@shared/types/apis";
+
+/**
+ * 调用 KG API，返回业务数据
+ * @param name 接口名（search / lyric）
+ * @param params 接口参数
+ */
+export const kugouCall = async <T = unknown>(
+  name: string,
+  params?: Record<string, unknown>,
+): Promise<T> => {
+  const res: ApiCallResponse = await window.api.apis.call("kugou", name, params);
+  if (!res.ok) throw new Error(res.error);
+  return res.data as T;
+};
+
+type KugouProxy = Record<string, <T = unknown>(params?: Record<string, unknown>) => Promise<T>>;
+
+/** 任意方法调用：`kugou.search(...)` / `kugou.lyric(...)` */
+export const kugou: KugouProxy = new Proxy({} as KugouProxy, {
+  get:
+    (_t, name: string) =>
+    <T = unknown>(params?: Record<string, unknown>) =>
+      kugouCall<T>(name, params),
+});

From 8d2d55bd1cd79aa6cf2e2893659d3365dee13dd4 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Wed, 22 Apr 2026 18:19:01 +0800
Subject: [PATCH 12/17] =?UTF-8?q?=E4=BC=98=E5=8C=96=E5=BD=93=E5=89=8D?=
 =?UTF-8?q?=E6=8F=92=E4=BB=B6=E5=8F=AF=E7=94=A8=E5=86=85=E5=AE=B9?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CLAUDE.md                                     |  5 ++-
 docs/plugins-mvp.md                           | 18 +++-----
 electron/main/plugins/loader.ts               | 43 +++++++++----------
 electron/main/plugins/lx-shim.ts              | 22 +++-------
 electron/main/plugins/registry.ts             | 16 ++-----
 electron/main/plugins/router.ts               |  6 +--
 electron/main/services/nowPlaying.ts          |  6 +--
 shared/defaults/plugin-api.ts                 |  6 +--
 shared/types/lyrics.ts                        | 24 +++++------
 shared/types/nowPlaying.ts                    |  6 +--
 shared/types/platform.ts                      |  2 +
 shared/types/player.ts                        |  5 ++-
 shared/types/plugin.ts                        | 41 ++++--------------
 .../settings/custom/PluginManager.vue         | 13 ++----
 src/services/lyricLoader.ts                   |  8 ++--
 src/stores/media.ts                           | 14 +++---
 src/utils/lyric/parse.ts                      |  4 +-
 src/utils/url.ts                              | 16 +++++++
 18 files changed, 109 insertions(+), 146 deletions(-)
 create mode 100644 shared/types/platform.ts
 create mode 100644 src/utils/url.ts

diff --git a/CLAUDE.md b/CLAUDE.md
index ce5d1f6..8becc92 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -61,8 +61,9 @@ Two-tier position tracking to separate high-frequency animation from low-frequen
 
 ### Type System
 
-- **`src/types/song.ts`** — `Track` (playlist-friendly, lightweight), `TrackDetail` (on-demand), `Artist`, `Album`, `AudioQuality`, `OnlineMatch`, `ExternalLyric`
-- **`src/types/player.ts`** — `PlayerState`, `PlayerStatus`, `PlayerEvent`, `LoadResult`, `PlayerApi`, `IpcResponse`
+- **`shared/types/player.ts`** — `Track` (playlist-friendly, lightweight), `TrackDetail` (on-demand), `Artist`, `Album`, `AudioQuality`, `OnlineMatch`, `PlayerState`, `PlayerStatus`, `PlayerEvent`, `LoadResult`, `PlayerApi`, `IpcResponse`
+- **`shared/types/lyrics.ts`** — `LyricFormat`, `LyricSource`（`"external" | "embedded" | "online"`）, `LyricData`（当前激活歌词描述：source + format + 可选 platform）, `LyricLine`, `LyricWord`, `LyricSpan`
+- **`shared/types/platform.ts`** — `Platform`（`"netease" | "qqmusic" | "kugou"`）
 
 `Track` is designed for playlist storage (no lyrics/heavy data). `TrackDetail` is loaded on demand when a track becomes active.
 
diff --git a/docs/plugins-mvp.md b/docs/plugins-mvp.md
index 5030e22..1382f02 100644
--- a/docs/plugins-mvp.md
+++ b/docs/plugins-mvp.md
@@ -5,10 +5,10 @@
 ## 背景
 
 - 参考 `lx-music-desktop` 的 `user_api` 插件机制，为 SPlayer-Next 加入可扩展插件系统
-- 覆盖三类能力：**音源搜索 + URL 解析**、**歌词来源**、**元数据/封面来源**
+- 插件只负责一类能力：**音源 URL 解析**（对齐 lx 用户脚本的实际用法）
 - 隔离方案：`utilityProcess.fork()` + 子进程内 `vm.createContext`（进程级 + VM 级双层隔离）
 - 兼容 `lx-music-desktop` 的 `user_api` 脚本（`window.lx` 垫片 + `gz_` 前缀解码）
-- HostApi 一次设计到位，MVP 仅端到端打通 `search` / `musicUrl` 两个动作
+- MVP 端到端打通 `musicUrl` 动作
 
 ## 已完成（MVP）
 
@@ -25,7 +25,7 @@
 | `electron/main/plugins/storage.ts`        | 每插件 KV 落盘 `{userData}/plugins/data/{id}.json`，原子写                                                   |
 | `electron/main/plugins/loader.ts`         | 头部 JSDoc 解析 + `gz_` 解压 + `id = name + sha1(source).slice(0,8)`                                         |
 | `electron/main/plugins/registry.ts`       | `Map<id, PluginRuntime>` + 扫描/启停/重启/生命周期状态机                                                     |
-| `electron/main/plugins/router.ts`         | action 调度：`search` / `musicUrl`（超时、取消、fallback）                                                   |
+| `electron/main/plugins/router.ts`         | action 调度：`musicUrl`（超时、取消、fallback）                                                              |
 | `electron/main/plugins/lx-shim.ts`        | `window.lx` 适配：`request` / `on('request')` / `send('inited')` / `utils`                                   |
 | `electron/main/ipc/plugin.ts`             | IPC 注册：`plugin:list/install/pickAndInstall/uninstall/setEnabled/search/resolveUrl` + `plugin:status` 广播 |
 
@@ -47,7 +47,6 @@
 - `shared/defaults/settings.ts` — 新增 `plugins: defaultPluginsConfig`
 - `shared/types/settings.ts` — `SystemConfig` 加 `plugins: PluginsConfig`
 - `shared/types/player.ts` — `TrackSource` 扩 `"plugin"`；`Track` / `OnlineMatch` 增 `pluginId` / `pluginSource`
-- `shared/types/lyrics.ts` — `LyricSource` union 加 `{ type: "plugin"; pluginId; format }`
 - `electron.vite.config.ts` — `main.build.rollupOptions.input` 增补 `sandbox.worker` 独立 entry
 - `src/i18n/locales/{zh-CN,en-US}.json` — `settings.group.plugins` / `settings.section.pluginsList` / `settings.plugins.*` / `settings.pluginManager.*`
 
@@ -80,13 +79,7 @@
 - `src/services/audioLoader.ts` 判断 `track.source === "plugin"` → 先 `resolveUrl` 再交给 player
 - `src/pages/OnlineSearch.vue` 搜索页（或融入 Library）：输入关键词 → 结果列表 → 点击播放
 
-### 优先 2：歌词/元数据接入
-
-- `src/services/lyricLoader.ts` 新增 `source.type === "plugin"` 分支 → `api.plugins.fetchLyric`
-- 主进程 `ipc/plugin.ts` 暴露 `plugin:fetchLyric` / `plugin:fetchMeta` handler
-- `router.ts` 里已有骨架，补 `lyric` / `meta` action 分派
-
-### 优先 3：UI 增强
+### 优先 2：UI 增强
 
 - 每插件独立设置抽屉：读插件上报的 `settingsSchema`（HostApi 已预留）
 - 查看插件日志按钮（现已写文件 `{userData}/plugins/logs/{id}.log`，补一个查看入口）
@@ -95,7 +88,6 @@
 ### 待清理的技术细节
 
 - `registry.ts` 的 `pickForAction` 方法当前未被使用（router 直接按 listInfo 拿顺序），二期启用优先级后可统一用它
-- `router.ts` `searchAcrossPlugins` 对 `pluginRegistry.listInfo` 的访问写法不够优雅，二期重构
 - `sandbox.worker.ts` 几处 `any` 是因为 `process.parentPort` / `splayer.utils` 需要；Electron 类型出正式 typings 时可去掉
 
 ## 三期（未来可选）
@@ -134,7 +126,7 @@ Renderer (Vue)
 - **lx 识别**：`gz_` 前缀 → 自动按 lx 处理；或显式 `@platform lx`
 - **id 生成**：`slugify(name) + sha1(source).slice(0,8)`
 - **HostApi 动作响应形状**：见 `shared/types/plugin.ts` 的 `ActionIO` 映射
-- **超时**：search 10s / musicUrl 20s / lyric·pic·meta 15s
+- **超时**：musicUrl 20s
 - **并发**：每插件 4、全局 16（常量定义在 `shared/defaults/plugin-api.ts`）
 
 ## 验证命令
diff --git a/electron/main/plugins/loader.ts b/electron/main/plugins/loader.ts
index ed84ca1..b80b861 100644
--- a/electron/main/plugins/loader.ts
+++ b/electron/main/plugins/loader.ts
@@ -16,7 +16,7 @@ import { HOST_API_LEVEL, PluginErrorCodes } from "@shared/defaults/plugin-api";
 
 const GZ_PREFIX = "gz_";
 
-/** lx 脚本头部的 JSDoc 字段。字段长度上限参考 lx */
+/** 脚本头部字段长度上限 */
 const FIELD_LIMITS: Record<string, number> = {
   name: 24,
   description: 256,
@@ -25,7 +25,11 @@ const FIELD_LIMITS: Record<string, number> = {
   version: 36,
 };
 
-const HEADER_RE = /^\s*\*\s*@(\w+)\s+(.+?)\s*$/;
+// JSDoc 风格的 `* @key value`
+const HEADER_RE = /^\s?\*\s?@(\w+)\s(.+)$/;
+
+// 源码开头的第一个块注释（`/*` 或 `/**` 都行，允许前置空白，非贪婪）
+const BLOCK_COMMENT_RE = /^\s*\/\*[\s\S]+?\*\//;
 
 /** 解压 gz_ 前缀脚本；若不是 gz_ 直接返回原文 */
 export const decompressIfNeeded = (raw: string): string => {
@@ -48,33 +52,30 @@ interface HeaderFields {
 
 const parseHeader = (source: string): HeaderFields => {
   const out: HeaderFields = {};
-  // 只取第一块块注释 /** ... */
-  const commentEnd = source.indexOf("*/");
-  if (commentEnd < 0) return out;
-  const commentStart = source.indexOf("/**");
-  if (commentStart < 0 || commentStart > commentEnd) return out;
+  const m0 = BLOCK_COMMENT_RE.exec(source);
+  if (!m0) return out;
+  const block = m0[0].slice(2, -2);
 
-  const block = source.slice(commentStart + 3, commentEnd);
   for (const rawLine of block.split(/\r?\n/)) {
     const m = HEADER_RE.exec(rawLine);
     if (!m) continue;
     const key = m[1];
-    const val = m[2];
+    const raw = m[2].trim();
     const limit = FIELD_LIMITS[key];
-    const trimmed = limit ? val.slice(0, limit) : val;
+    const val = limit && raw.length > limit ? raw.slice(0, limit) + "..." : raw;
     switch (key) {
       case "name":
       case "description":
       case "version":
       case "author":
       case "homepage":
-        out[key] = trimmed;
+        out[key] = val;
         break;
       case "platform":
-        out.platform = trimmed === "lx" ? "lx" : "splayer";
+        out.platform = val === "lx" ? "lx" : "splayer";
         break;
       case "apiLevel": {
-        const n = parseInt(trimmed, 10);
+        const n = parseInt(val, 10);
         if (!Number.isNaN(n)) out.apiLevel = n;
         break;
       }
@@ -107,12 +108,11 @@ export const loadScript = (rawOrPath: string, isPath: boolean, fileName?: string
   const wasCompressed = raw.trim().startsWith(GZ_PREFIX);
   const source = decompressIfNeeded(raw);
   const header = parseHeader(source);
+  const hash = sha1(source);
 
-  if (!header.name || !header.version) {
-    throw Object.assign(new Error("plugin manifest missing @name or @version"), {
-      code: PluginErrorCodes.INVALID_MANIFEST,
-    });
-  }
+  // 稳定兜底——同一脚本 hash 一致，id 就一致
+  const name = header.name || `user_api_${hash.slice(0, 6)}`;
+  const version = header.version || "0.0.0";
 
   const platform: PluginPlatform = header.platform ?? (wasCompressed ? "lx" : "splayer");
   const apiLevel = header.apiLevel ?? 1;
@@ -124,14 +124,13 @@ export const loadScript = (rawOrPath: string, isPath: boolean, fileName?: string
     );
   }
 
-  const hash = sha1(source);
-  const id = `${slugify(header.name)}-${hash.slice(0, 8)}`;
+  const id = `${slugify(name)}-${hash.slice(0, 8)}`;
   const finalFileName = fileName ?? (isPath ? path.basename(rawOrPath) : `${id}.js`);
 
   const manifest: PluginManifest = {
     id,
-    name: header.name,
-    version: header.version,
+    name,
+    version,
     description: header.description,
     author: header.author,
     homepage: header.homepage,
diff --git a/electron/main/plugins/lx-shim.ts b/electron/main/plugins/lx-shim.ts
index a241ac0..829e0fc 100644
--- a/electron/main/plugins/lx-shim.ts
+++ b/electron/main/plugins/lx-shim.ts
@@ -11,6 +11,7 @@ import crypto from "node:crypto";
 import zlib from "node:zlib";
 import type {
   HostApi,
+  MusicUrlRes,
   PluginAction,
   PluginQuality,
   PluginUpdateInfo,
@@ -267,10 +268,10 @@ export const installLxShim = (
                 const host = mapLxQualityToHost(q);
                 if (host) mapped.add(host);
               }
-              // lx 只支持 musicUrl/lyric/pic，过滤掉其他值
               const actions = (cap.actions ?? []).filter(
-                (a): a is PluginAction => a === "musicUrl" || a === "lyric" || a === "pic",
+                (a): a is PluginAction => a === "musicUrl",
               );
+              if (actions.length === 0) continue;
               normalized[key] = {
                 name: cap.name ?? key,
                 actions,
@@ -331,8 +332,7 @@ export const installLxShim = (
       }
       const reqObj = req as Record<string, unknown>;
       const source = (reqObj.source as string) ?? "";
-      // lx 对 musicUrl/lyric/pic 统一传 { type, musicInfo }
-      // 宿主的 quality 是 lq/sq/hq/lossless/hi-res，lx 脚本期待 128k/320k/flac/... 做一次翻译
+      // lx 期待 128k/320k/flac/... 音质字符串，宿主的 quality 做一次翻译
       const hostQuality = reqObj.quality as PluginQuality | undefined;
       const info: Record<string, unknown> = {
         type: hostQuality ? mapHostQualityToLx(hostQuality) : undefined,
@@ -340,18 +340,10 @@ export const installLxShim = (
       };
 
       const raw = await Promise.resolve(requestHandler({ source, action, info }));
-
-      // 转换返回值以对齐 splayer HostApi 的响应形状
-      switch (action) {
-        case "musicUrl":
-        case "pic":
-          if (typeof raw === "string") return { url: raw };
-          return raw;
-        default:
-          return raw;
-      }
+      if (typeof raw === "string") return { url: raw } as MusicUrlRes;
+      return raw;
     });
   };
 
-  (["musicUrl", "lyric", "pic"] as PluginAction[]).forEach(registerAction);
+  (["musicUrl"] as PluginAction[]).forEach(registerAction);
 };
diff --git a/electron/main/plugins/registry.ts b/electron/main/plugins/registry.ts
index ad9b223..b0f37fc 100644
--- a/electron/main/plugins/registry.ts
+++ b/electron/main/plugins/registry.ts
@@ -13,6 +13,7 @@ import { EventEmitter } from "node:events";
 import { app } from "electron";
 import { writeFileSync as atomicWriteSync } from "atomically";
 import type {
+  PluginAction,
   PluginInfo,
   PluginManifest,
   PluginStatus,
@@ -133,22 +134,20 @@ class PluginRegistry extends EventEmitter {
   }
 
   /** 按动作选一个已就绪的插件（优先级 → 首个 ready） */
-  pickForAction(action: keyof StoredPriority, source?: string): PluginRuntime | undefined {
+  pickForAction(action: PluginAction, source?: string): PluginRuntime | undefined {
     const priority = store.get(`plugins.priority.${action}` as never) as string[] | undefined;
     const ordered = (priority ?? []).slice();
-    // 把不在 priority 里的但能承接此动作的也接上
     for (const rt of this.runtimes.values()) {
       if (!ordered.includes(rt.manifest.id)) ordered.push(rt.manifest.id);
     }
     for (const id of ordered) {
       const rt = this.runtimes.get(id);
       if (!rt || !rt.enabled || rt.status.state !== "ready") continue;
-      // 检查是否声明了该源 + 动作
-      const sources = (rt.status as Extract<PluginStatus, { state: "ready" }>).sources;
+      const sources = rt.status.sources;
       const sourceKeys = source ? [source] : Object.keys(sources);
       for (const key of sourceKeys) {
         const cap = sources[key];
-        if (cap && cap.actions.includes(action as never)) return rt;
+        if (cap && cap.actions.includes(action)) return rt;
       }
     }
     return undefined;
@@ -374,12 +373,5 @@ class PluginRegistry extends EventEmitter {
   }
 }
 
-type StoredPriority = {
-  search: string[];
-  musicUrl: string[];
-  lyric: string[];
-  meta: string[];
-};
-
 export const pluginRegistry = new PluginRegistry();
 export type { PluginRuntime };
diff --git a/electron/main/plugins/router.ts b/electron/main/plugins/router.ts
index fe7c7b8..960b7eb 100644
--- a/electron/main/plugins/router.ts
+++ b/electron/main/plugins/router.ts
@@ -1,8 +1,9 @@
 /**
  * 插件动作路由
  *
- * 把渲染端 / 主进程内部的 action 请求转发给对应插件的 sandbox，
- * 并处理超时、取消。目前支持 musicUrl / lyric / pic 三个动作。
+ * 把渲染端 / 主进程内部的 action 请求转发给对应插件的 sandbox，并处理超时、取消。
+ * 当前只有 musicUrl 一个动作——新增动作时，在 `shared/types/plugin.ts` 的 `PluginAction`
+ * / `ActionIO` 里登记，然后在这里补一个公共入口函数即可（callOn / supportsAction 都是泛型）。
  */
 
 import type {
@@ -65,7 +66,6 @@ const supportsAction = (
     if (!cap) return { ok: false };
     return { ok: cap.actions.includes(action), source };
   }
-  // 未指定 source：拿第一个支持此动作的
   for (const [key, cap] of Object.entries(sources)) {
     if (cap.actions.includes(action)) return { ok: true, source: key };
   }
diff --git a/electron/main/services/nowPlaying.ts b/electron/main/services/nowPlaying.ts
index 53d4508..194ad28 100644
--- a/electron/main/services/nowPlaying.ts
+++ b/electron/main/services/nowPlaying.ts
@@ -1,6 +1,6 @@
 import { EventEmitter } from "node:events";
 import type { Track } from "@shared/types/player";
-import type { LyricLine, LyricSource } from "@shared/types/lyrics";
+import type { LyricLine, LyricData } from "@shared/types/lyrics";
 import type { NowPlayingSnapshot, NowPlayingPositionSync } from "@shared/types/nowPlaying";
 
 type NowPlayingEvents = {
@@ -17,7 +17,7 @@ let currentTrack: Track | null = null;
 /** 当前歌曲的完整解析歌词 */
 let currentLyric: LyricLine[] = [];
 /** 当前激活的歌词源 */
-let currentSource: LyricSource = null;
+let currentSource: LyricData = null;
 /** 最近一次播放位置（毫秒） */
 let lastPosition = 0;
 /** 当前是否处于播放态 */
@@ -27,7 +27,7 @@ let playing = false;
 const emitter = new EventEmitter<NowPlayingEvents>();
 
 /** 渲染进程同步当前播放状态 */
-export const update = (track: Track | null, lyric: LyricLine[], source: LyricSource): void => {
+export const update = (track: Track | null, lyric: LyricLine[], source: LyricData): void => {
   const trackChanged = (currentTrack?.id ?? null) !== (track?.id ?? null);
   currentTrack = track;
   currentLyric = lyric;
diff --git a/shared/defaults/plugin-api.ts b/shared/defaults/plugin-api.ts
index 4fc3e98..2afff5a 100644
--- a/shared/defaults/plugin-api.ts
+++ b/shared/defaults/plugin-api.ts
@@ -3,11 +3,9 @@ import type { PluginsConfig } from "../types/plugin";
 /** 当前 Host API 级别；插件 `@apiLevel` 必须 ≤ 此值才加载 */
 export const HOST_API_LEVEL = 1;
 
-/** 各动作的默认超时（毫秒） */
+/** 各动作的默认超时（毫秒）。新增动作时在此追加。 */
 export const ACTION_TIMEOUTS = {
   musicUrl: 20_000,
-  lyric: 15_000,
-  pic: 15_000,
 } as const;
 
 /** 网络请求最大超时 */
@@ -76,8 +74,6 @@ export const defaultPluginsConfig: PluginsConfig = {
   enabled: {},
   priority: {
     musicUrl: [],
-    lyric: [],
-    pic: [],
   },
   perPlugin: {},
 };
diff --git a/shared/types/lyrics.ts b/shared/types/lyrics.ts
index 178fa81..be97be9 100644
--- a/shared/types/lyrics.ts
+++ b/shared/types/lyrics.ts
@@ -1,18 +1,18 @@
+import type { Platform } from "./platform";
+
 /** 歌词格式 */
 export type LyricFormat = "ttml" | "lys" | "yrc" | "qrc" | "lrc" | "srt" | "ass";
 
-/** 外部歌词文件 */
-export interface ExternalLyric {
-  format: LyricFormat;
-  path: string;
-}
+/** 歌词来源 */
+export type LyricSource = "external" | "embedded" | "online";
 
-/** 歌词来源标识 */
-export type LyricSource =
-  | { type: "external"; format: LyricFormat }
-  | { type: "embedded"; format: LyricFormat }
-  | { type: "plugin"; pluginId: string; format: LyricFormat }
-  | null;
+/** 歌词数据 */
+export type LyricData = {
+  source: LyricSource;
+  format: LyricFormat;
+  /** 在线歌词所属平台，仅 source=online 时有值 */
+  platform?: Platform;
+} | null;
 
 /** 歌词时间片段 */
 export interface LyricSpan {
@@ -51,6 +51,6 @@ export interface LyricLine {
   endTime: number;
   /** 是否为背景歌词行 */
   isBG: boolean;
-  /** 是否为对唱歌词行（右对齐） */
+  /** 是否为对唱歌词行 */
   isDuet: boolean;
 }
diff --git a/shared/types/nowPlaying.ts b/shared/types/nowPlaying.ts
index cd76628..49f9506 100644
--- a/shared/types/nowPlaying.ts
+++ b/shared/types/nowPlaying.ts
@@ -1,18 +1,18 @@
 import type { Track } from "./player";
-import type { LyricLine, LyricSource } from "./lyrics";
+import type { LyricLine, LyricData } from "./lyrics";
 
 /** 渲染进程 → 主进程：同步当前播放状态（track + 歌词 + 源） */
 export interface NowPlayingUpdatePayload {
   track: Track | null;
   lyric: LyricLine[];
-  source: LyricSource;
+  source: LyricData;
 }
 
 /** 主进程 → 窗口：当前播放的完整快照 */
 export interface NowPlayingSnapshot {
   track: Track | null;
   lyric: LyricLine[];
-  source: LyricSource;
+  source: LyricData;
   position: number;
   playing: boolean;
   /** 发送时刻的主进程时钟（Date.now 毫秒），接收端用于补偿 IPC 延迟 */
diff --git a/shared/types/platform.ts b/shared/types/platform.ts
new file mode 100644
index 0000000..12b32cf
--- /dev/null
+++ b/shared/types/platform.ts
@@ -0,0 +1,2 @@
+/** 平台类型 */
+export type Platform = "netease" | "qqmusic" | "kugou";
diff --git a/shared/types/player.ts b/shared/types/player.ts
index ebc37bf..e48379e 100644
--- a/shared/types/player.ts
+++ b/shared/types/player.ts
@@ -1,4 +1,4 @@
-import type { ExternalLyric } from "./lyrics";
+import type { LyricFormat } from "./lyrics";
 
 /** 播放器状态 */
 export type PlayerState = "idle" | "loading" | "playing" | "paused" | "stopped";
@@ -79,7 +79,8 @@ export interface Track {
 export interface TrackDetail {
   quality: AudioQuality;
   embeddedLyric?: string;
-  externalLyrics: ExternalLyric[];
+  /** 外部歌词文件列表（同目录下扫描到的所有歌词文件） */
+  externalLyrics: { format: LyricFormat; path: string }[];
 }
 
 /** 播放器加载后返回的完整数据 */
diff --git a/shared/types/plugin.ts b/shared/types/plugin.ts
index 92dda95..71cd2b8 100644
--- a/shared/types/plugin.ts
+++ b/shared/types/plugin.ts
@@ -3,8 +3,13 @@
  * 用于主进程、预加载、渲染进程、沙箱子进程之间的契约
  */
 
-/** 支持的插件动作 */
-export type PluginAction = "musicUrl" | "lyric" | "pic";
+/**
+ * 支持的插件动作
+ * 当前仅有 musicUrl。扩展新动作的步骤：
+ * 1. 在此 union 追加字面量；2. 补 `ActionIO` 映射；3. 补 `ACTION_TIMEOUTS` / `PluginsConfig.priority`；
+ * 4. router 加入相应入口；其余（HostApi.on / handlers Map / SandboxIn.call）已泛型化，无需改动。
+ */
+export type PluginAction = "musicUrl";
 
 /**
  * 音质等级
@@ -52,7 +57,7 @@ export interface SourceCapability {
   name: string;
   /** 支持的动作 */
   actions: PluginAction[];
-  /** 支持的音质（仅 music 类动作相关） */
+  /** 支持的音质 */
   qualities?: PluginQuality[];
 }
 
@@ -103,35 +108,9 @@ export interface MusicUrlRes {
   expire?: number;
 }
 
-export interface LyricReq {
-  source: string;
-  musicInfo: {
-    songmid: string;
-    name?: string;
-    singer?: string;
-    [key: string]: unknown;
-  };
-}
-export interface LyricRes {
-  lyric: string;
-  tlyric?: string | null;
-  rlyric?: string | null;
-  lxlyric?: string | null;
-}
-
-export interface PicReq {
-  source: string;
-  musicInfo: { songmid: string; [key: string]: unknown };
-}
-export interface PicRes {
-  url: string;
-}
-
-/** Action → 请求/响应映射，用于 HostApi.on 的重载 */
+/** Action → 请求/响应映射，用于 HostApi.on 的重载。新增动作时在此追加。 */
 export interface ActionIO {
   musicUrl: { req: MusicUrlReq; res: MusicUrlRes };
-  lyric: { req: LyricReq; res: LyricRes };
-  pic: { req: PicReq; res: PicRes };
 }
 
 /* ========== 宿主暴露给插件的 API（在沙箱内注入为 globalThis.splayer） ========== */
@@ -302,8 +281,6 @@ export interface PluginsConfig {
   /** 各动作的插件优先级列表 */
   priority: {
     musicUrl: string[];
-    lyric: string[];
-    pic: string[];
   };
   /** 每插件的用户设置 */
   perPlugin: Record<string, Record<string, unknown>>;
diff --git a/src/components/settings/custom/PluginManager.vue b/src/components/settings/custom/PluginManager.vue
index f461cdf..23b125c 100644
--- a/src/components/settings/custom/PluginManager.vue
+++ b/src/components/settings/custom/PluginManager.vue
@@ -2,6 +2,7 @@
 import type { PluginInfo } from "@shared/types/plugin";
 import { usePluginsStore } from "@/stores/plugins";
 import { toast } from "@/composables/useToast";
+import { isExternalUrl, openExternal } from "@/utils/url";
 
 defineOptions({ inheritAttrs: false });
 
@@ -45,12 +46,6 @@ const sourceNames = (info: PluginInfo): string[] => {
   return Object.keys(info.status.sources);
 };
 
-/** 打开外链（主进程 windowOpenHandler 已统一拦截为 shell.openExternal） */
-const openExternal = (url?: string): void => {
-  if (!url) return;
-  window.open(url, "_blank", "noopener,noreferrer");
-};
-
 const handleImportLocal = async (): Promise<void> => {
   importing.value = true;
   try {
@@ -70,7 +65,7 @@ const openUrlDialog = (): void => {
 
 const handleImportFromUrl = async (): Promise<void> => {
   const url = urlInput.value.trim();
-  if (!/^https?:\/\//i.test(url)) {
+  if (!isExternalUrl(url)) {
     toast.error(t("settings.plugins.importUrlInvalid"));
     return;
   }
@@ -180,7 +175,7 @@ const pendingName = computed(() => {
                 {{ info.manifest.name }}
               </span>
               <button
-                v-if="info.manifest.homepage"
+                v-if="isExternalUrl(info.manifest.homepage)"
                 type="button"
                 class="p-0 border-none bg-transparent text-on-surface-variant/50 hover:text-primary cursor-pointer transition-colors leading-0"
                 :title="info.manifest.homepage"
@@ -254,7 +249,7 @@ const pendingName = computed(() => {
                   </span>
                 </div>
                 <SButton
-                  v-if="info.updateInfo.updateUrl"
+                  v-if="isExternalUrl(info.updateInfo.updateUrl)"
                   variant="secondary"
                   size="tiny"
                   type="warning"
diff --git a/src/services/lyricLoader.ts b/src/services/lyricLoader.ts
index 34bf63c..9e2ce0d 100644
--- a/src/services/lyricLoader.ts
+++ b/src/services/lyricLoader.ts
@@ -7,21 +7,21 @@
  */
 
 import type { TrackDetail } from "@shared/types/player";
-import type { LyricSource } from "@shared/types/lyrics";
+import type { LyricData } from "@shared/types/lyrics";
 
 /**
  * 加载歌词内容
  * @param detail - 歌曲详情
- * @param source - 歌词来源
+ * @param source - 歌词数据（来源 + 格式 + 可选平台）
  * @returns 歌词原始内容，失败返回 null
  */
 export const loadLyricContent = async (
   detail: TrackDetail,
-  source: LyricSource,
+  source: LyricData,
 ): Promise<string | null> => {
   if (!source) return null;
 
-  if (source.type === "embedded") {
+  if (source.source === "embedded") {
     return detail.embeddedLyric ?? null;
   }
 
diff --git a/src/stores/media.ts b/src/stores/media.ts
index c11bff3..276789b 100644
--- a/src/stores/media.ts
+++ b/src/stores/media.ts
@@ -1,5 +1,5 @@
 import type { Track, TrackDetail } from "@shared/types/player";
-import type { LyricFormat, LyricLine, LyricSource } from "@shared/types/lyrics";
+import type { LyricData, LyricFormat, LyricLine } from "@shared/types/lyrics";
 import { bestExternalIndex, detectFormat, parseLyric } from "@/utils/lyric/parse";
 import { findLyricIndex } from "@shared/utils/lyric";
 import { loadLyricContent } from "@/services/lyricLoader";
@@ -11,8 +11,8 @@ export const useMediaStore = defineStore("media", () => {
   /** 当前歌曲详细信息 */
   const detail = shallowRef<TrackDetail | null>(null);
 
-  /** 当前选中的歌词来源 */
-  const activeLyric = ref<LyricSource>(null);
+  /** 当前选中的歌词数据 */
+  const activeLyric = ref<LyricData>(null);
 
   /** 当前歌词原始内容（按需加载） */
   const lyricContent = ref<string | null>(null);
@@ -79,11 +79,11 @@ export const useMediaStore = defineStore("media", () => {
     const idx = bestExternalIndex(newDetail.externalLyrics);
     if (idx !== -1) {
       activeLyric.value = {
-        type: "external",
+        source: "external",
         format: newDetail.externalLyrics[idx].format,
       };
     } else if (newDetail.embeddedLyric) {
-      activeLyric.value = { type: "embedded", format: detectFormat(newDetail.embeddedLyric) };
+      activeLyric.value = { source: "embedded", format: detectFormat(newDetail.embeddedLyric) };
     } else {
       activeLyric.value = null;
     }
@@ -115,9 +115,9 @@ export const useMediaStore = defineStore("media", () => {
 
   /**
    * 手动切换歌词来源并加载内容
-   * @param source 目标歌词来源
+   * @param source 目标歌词数据
    */
-  const switchLyric = async (source: LyricSource): Promise<void> => {
+  const switchLyric = async (source: LyricData): Promise<void> => {
     activeLyric.value = source;
     await loadLyric();
   };
diff --git a/src/utils/lyric/parse.ts b/src/utils/lyric/parse.ts
index 0ff0a56..f0a0f65 100644
--- a/src/utils/lyric/parse.ts
+++ b/src/utils/lyric/parse.ts
@@ -1,4 +1,4 @@
-import type { ExternalLyric, LyricFormat, LyricLine } from "@shared/types/lyrics";
+import type { LyricFormat, LyricLine } from "@shared/types/lyrics";
 import { parseLRC } from "./parseLRC";
 import { parseQRC, parseYRC } from "./parseTimeline";
 import { parseTTML } from "./parseTTML";
@@ -14,7 +14,7 @@ const FORMAT_PRIORITY: LyricFormat[] = ["ttml", "lys", "qrc", "yrc", "lrc", "ass
  * @param lyrics 外部歌词列表
  * @returns 最优格式的索引，无可用歌词时返回 -1
  */
-export const bestExternalIndex = (lyrics: ExternalLyric[]): number => {
+export const bestExternalIndex = (lyrics: { format: LyricFormat }[]): number => {
   if (lyrics.length === 0) return -1;
   let bestIdx = 0;
   let bestPriority = FORMAT_PRIORITY.length;
diff --git a/src/utils/url.ts b/src/utils/url.ts
new file mode 100644
index 0000000..55580dd
--- /dev/null
+++ b/src/utils/url.ts
@@ -0,0 +1,16 @@
+/**
+ * 判断是否为真实外链（http/https）
+ * @param url 链接地址
+ * @returns 是否为真实外链
+ */
+export const isExternalUrl = (url?: string | null): url is string =>
+  !!url && /^https?:\/\//i.test(url);
+
+/**
+ * 打开外链
+ * @param url 链接地址
+ */
+export const openExternal = (url?: string | null): void => {
+  if (!isExternalUrl(url)) return;
+  window.open(url, "_blank");
+};

From c1133fa0143d7fc6d06cc901df269c012db3a440 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Wed, 22 Apr 2026 23:32:45 +0800
Subject: [PATCH 13/17] =?UTF-8?q?=E6=A0=BC=E5=BC=8F=E5=8C=96?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/plugins-mvp.md                        | 147 ---------------------
 electron/main/apis/kugou/core/krc.ts       |   3 +-
 electron/main/apis/kugou/modules/lyric.ts  |   9 +-
 electron/main/apis/kugou/modules/search.ts |   6 +-
 4 files changed, 12 insertions(+), 153 deletions(-)
 delete mode 100644 docs/plugins-mvp.md

diff --git a/docs/plugins-mvp.md b/docs/plugins-mvp.md
deleted file mode 100644
index 1382f02..0000000
--- a/docs/plugins-mvp.md
+++ /dev/null
@@ -1,147 +0,0 @@
-# 插件系统 MVP 进度与延续文档
-
-> 用于跨设备/跨会话接续本次工作。**本文档就是接续上下文的入口**——另一台机器拉下来后，打开它 + `plans/`（如果同步了 home 目录的 plan 文件）+ `CLAUDE.md` 就能接上。
-
-## 背景
-
-- 参考 `lx-music-desktop` 的 `user_api` 插件机制，为 SPlayer-Next 加入可扩展插件系统
-- 插件只负责一类能力：**音源 URL 解析**（对齐 lx 用户脚本的实际用法）
-- 隔离方案：`utilityProcess.fork()` + 子进程内 `vm.createContext`（进程级 + VM 级双层隔离）
-- 兼容 `lx-music-desktop` 的 `user_api` 脚本（`window.lx` 垫片 + `gz_` 前缀解码）
-- MVP 端到端打通 `musicUrl` 动作
-
-## 已完成（MVP）
-
-### 主进程插件内核
-
-| 文件                                      | 职责                                                                                                         |
-| ----------------------------------------- | ------------------------------------------------------------------------------------------------------------ |
-| `shared/types/plugin.ts`                  | 跨进程类型契约：`PluginManifest` / `PluginStatus` / `HostApi` / `SandboxIn/Out` / `PluginsApi` 等            |
-| `shared/defaults/plugin-api.ts`           | `HOST_API_LEVEL` 常量、action 超时、错误码枚举、默认配置                                                     |
-| `electron/main/plugins/sandbox.ts`        | `utilityProcess.fork` 控制器：启停、心跳、崩溃重启、消息编解码                                               |
-| `electron/main/plugins/sandbox.worker.ts` | 子进程入口：`vm.createContext` → 注入 `splayer` + 可选 `lx` 垫片 → `vm.runInContext`                         |
-| `electron/main/plugins/host.ts`           | `HostApi` 主进程侧 dispatch：network / storage / log                                                         |
-| `electron/main/plugins/net.ts`            | 网络代理：`net.fetch` + URL 白名单（仅 http/https）+ 超时                                                    |
-| `electron/main/plugins/storage.ts`        | 每插件 KV 落盘 `{userData}/plugins/data/{id}.json`，原子写                                                   |
-| `electron/main/plugins/loader.ts`         | 头部 JSDoc 解析 + `gz_` 解压 + `id = name + sha1(source).slice(0,8)`                                         |
-| `electron/main/plugins/registry.ts`       | `Map<id, PluginRuntime>` + 扫描/启停/重启/生命周期状态机                                                     |
-| `electron/main/plugins/router.ts`         | action 调度：`musicUrl`（超时、取消、fallback）                                                              |
-| `electron/main/plugins/lx-shim.ts`        | `window.lx` 适配：`request` / `on('request')` / `send('inited')` / `utils`                                   |
-| `electron/main/ipc/plugin.ts`             | IPC 注册：`plugin:list/install/pickAndInstall/uninstall/setEnabled/search/resolveUrl` + `plugin:status` 广播 |
-
-### 渲染端插件管理 UI
-
-| 文件                                               | 职责                                                                                                |
-| -------------------------------------------------- | --------------------------------------------------------------------------------------------------- |
-| `src/stores/plugins.ts`                            | Pinia store：`list` / `load` / `pickAndInstall` / `uninstall` / `setEnabled` + 订阅 `plugin:status` |
-| `src/components/settings/custom/PluginManager.vue` | 管理面板：顶部导入条 / 空态 / 插件卡片列表 / 卸载确认                                               |
-| `src/components/settings/SettingsItem.vue`         | 增加 `fullWidth` 分支渲染（custom 组件独占整行时跳过 label/卡片外壳）                               |
-| `src/types/settings-schema.ts`                     | `SettingItem.fullWidth?: boolean`                                                                   |
-| `src/settings/schema.ts`                           | 新增 `plugins` category（puzzle 图标）+ 挂 `PluginManager`（fullWidth）                             |
-
-### 改动的现有文件
-
-- `electron/main/ipc/index.ts` — 注册 `registerPluginIpc()`
-- `electron/main/core/index.ts` — app ready 调 `pluginRegistry.init()`；退出调 `shutdown()`
-- `electron/preload/index.ts` / `index.d.ts` — 新增 `api.plugins.*`（含 `pickAndInstall`）
-- `shared/defaults/settings.ts` — 新增 `plugins: defaultPluginsConfig`
-- `shared/types/settings.ts` — `SystemConfig` 加 `plugins: PluginsConfig`
-- `shared/types/player.ts` — `TrackSource` 扩 `"plugin"`；`Track` / `OnlineMatch` 增 `pluginId` / `pluginSource`
-- `electron.vite.config.ts` — `main.build.rollupOptions.input` 增补 `sandbox.worker` 独立 entry
-- `src/i18n/locales/{zh-CN,en-US}.json` — `settings.group.plugins` / `settings.section.pluginsList` / `settings.plugins.*` / `settings.pluginManager.*`
-
-## 验证方法（DevTools 控制台）
-
-1. `pnpm dev` 起开发环境
-2. 打开"设置 → 插件管理" → 点击"导入插件"选择 `.js` 脚本
-3. 或直接放脚本到 `{userData}/plugins/scripts/{name}.js` + 重启
-4. DevTools 里：
-   ```js
-   await window.api.plugins.list();
-   await window.api.plugins.search({ keyword: "test" });
-   await window.api.plugins.resolveUrl({
-     pluginId: "xxx",
-     source: "kw",
-     musicInfo: { songmid: "abc" },
-     quality: "320k",
-   });
-   ```
-5. 异常场景：
-   - 强 kill utilityProcess 子进程 → 3 次指数退避自动重启（2s/8s/30s），累计 3 次失败后 `disabled`
-   - 写 `while(true){}` 脚本 → 心跳 10s × 3 miss 后自杀重启
-   - 导入 `gz_` 前缀的 lx 脚本 → loader 自动解压并走 `lx-shim`
-
-## 二期待办（下次会话接续这里）
-
-### 优先 1：让插件真正接入播放链路
-
-- `src/services/sourceResolver.ts` 渲染端门面：合并多插件结果、按优先级 fallback、去重
-- `src/services/audioLoader.ts` 判断 `track.source === "plugin"` → 先 `resolveUrl` 再交给 player
-- `src/pages/OnlineSearch.vue` 搜索页（或融入 Library）：输入关键词 → 结果列表 → 点击播放
-
-### 优先 2：UI 增强
-
-- 每插件独立设置抽屉：读插件上报的 `settingsSchema`（HostApi 已预留）
-- 查看插件日志按钮（现已写文件 `{userData}/plugins/logs/{id}.log`，补一个查看入口）
-- 插件优先级拖拽排序（写 `settings.plugins.priority.{action}[]`）
-
-### 待清理的技术细节
-
-- `registry.ts` 的 `pickForAction` 方法当前未被使用（router 直接按 listInfo 拿顺序），二期启用优先级后可统一用它
-- `sandbox.worker.ts` 几处 `any` 是因为 `process.parentPort` / `splayer.utils` 需要；Electron 类型出正式 typings 时可去掉
-
-## 三期（未来可选）
-
-- 插件签名（Ed25519 公钥 + 开发者白名单）
-- 官方插件市场（GitHub Releases 拉取 + 版本检测 + 自动更新）
-- 热重载（`chokidar` 监视 `scripts/{id}.js`）
-- UI 扩展位（让插件注册自己的设置面板/菜单项）
-
-## 架构简图
-
-```
-Renderer (Vue)
-  PluginManager.vue ──▶ stores/plugins ──▶ api.plugins.* (preload)
-                                              │
-                                              ▼
-                                      ipc/plugin.ts (main)
-                                              │
-                                    ┌─────────┼─────────┐
-                                    ▼         ▼         ▼
-                                registry   router   host
-                                    │         │         │
-                                    ▼         ▼         ▼
-                                 sandbox (utilityProcess N 个)
-                                    │ vm.createContext
-                                    ▼
-                                  splayer / lx 垫片
-                                    │
-                                    ▼
-                                 插件脚本
-```
-
-## 关键约定
-
-- **脚本头部 JSDoc**：`@name` `@version` 必填；`@description` `@author` `@homepage` `@platform` `@apiLevel` 可选
-- **lx 识别**：`gz_` 前缀 → 自动按 lx 处理；或显式 `@platform lx`
-- **id 生成**：`slugify(name) + sha1(source).slice(0,8)`
-- **HostApi 动作响应形状**：见 `shared/types/plugin.ts` 的 `ActionIO` 映射
-- **超时**：musicUrl 20s
-- **并发**：每插件 4、全局 16（常量定义在 `shared/defaults/plugin-api.ts`）
-
-## 验证命令
-
-```bash
-pnpm typecheck  # 0 error
-pnpm lint       # 0 error / 0 warning
-npx electron-vite build  # 产出 out/main/{index,sandbox.worker}.js
-```
-
-## 接续指引
-
-**新会话打开后**：
-
-1. 读这份 `docs/plugins-mvp.md`
-2. 读 `CLAUDE.md`（项目约定）
-3. `git log --oneline` 看最近提交确认已到位
-4. 按"二期待办"优先 1 开始：实现 `sourceResolver` + 接 `audioLoader` + 做 `OnlineSearch.vue` 页面
diff --git a/electron/main/apis/kugou/core/krc.ts b/electron/main/apis/kugou/core/krc.ts
index b34d3a6..bf88a5d 100644
--- a/electron/main/apis/kugou/core/krc.ts
+++ b/electron/main/apis/kugou/core/krc.ts
@@ -22,8 +22,7 @@ import { decodeName } from "./config";
 const inflateAsync = promisify(inflate);
 
 const KRC_KEY = Uint8Array.from([
-  0x40, 0x47, 0x61, 0x77, 0x5e, 0x32, 0x74, 0x47,
-  0x51, 0x36, 0x31, 0x2d, 0xce, 0xd2, 0x6e, 0x69,
+  0x40, 0x47, 0x61, 0x77, 0x5e, 0x32, 0x74, 0x47, 0x51, 0x36, 0x31, 0x2d, 0xce, 0xd2, 0x6e, 0x69,
 ]);
 
 /** base64 → XOR → inflate → 文本 */
diff --git a/electron/main/apis/kugou/modules/lyric.ts b/electron/main/apis/kugou/modules/lyric.ts
index 2e610cd..14f6398 100644
--- a/electron/main/apis/kugou/modules/lyric.ts
+++ b/electron/main/apis/kugou/modules/lyric.ts
@@ -52,7 +52,11 @@ interface LyricOut {
 }
 
 const lyric: KGModule = async (params) => {
-  const { hash, name = "", duration } = params as {
+  const {
+    hash,
+    name = "",
+    duration,
+  } = params as {
     hash?: string;
     name?: string;
     duration?: number | string;
@@ -76,8 +80,7 @@ const lyric: KGModule = async (params) => {
     const candidate = searchResp.candidates?.[0];
     if (!candidate) return { code: 404, message: "no lyric candidate" } satisfies LyricOut;
 
-    const fmt =
-      candidate.krctype === 1 && candidate.contenttype !== 1 ? "krc" : "lrc";
+    const fmt = candidate.krctype === 1 && candidate.contenttype !== 1 ? "krc" : "lrc";
 
     // 第 2 步：下载 + 解码
     const downloadUrl =
diff --git a/electron/main/apis/kugou/modules/search.ts b/electron/main/apis/kugou/modules/search.ts
index 1d5c325..29bd53c 100644
--- a/electron/main/apis/kugou/modules/search.ts
+++ b/electron/main/apis/kugou/modules/search.ts
@@ -85,7 +85,11 @@ const normalizeSong = (raw: KGSearchSong) => {
 };
 
 const search: KGModule = async (params) => {
-  const { keywords, page = 1, limit = 30 } = params as {
+  const {
+    keywords,
+    page = 1,
+    limit = 30,
+  } = params as {
     keywords?: string;
     page?: number;
     limit?: number;

From 1f84113e84c2fd94c91e44265b3ad0c3a93df843 Mon Sep 17 00:00:00 2001
From: imsyy <one@imsyy.top>
Date: Thu, 23 Apr 2026 00:29:46 +0800
Subject: [PATCH 14/17] =?UTF-8?q?=E8=B0=83=E6=95=B4=20Track=20=E5=AD=97?=
 =?UTF-8?q?=E6=AE=B5?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 CLAUDE.md                                     |  2 +-
 .../apis/netease/modules/cloud_lyric_get.ts   | 21 +++++++++++++
 electron/main/apis/netease/modules/index.ts   |  9 ++++++
 electron/main/apis/netease/modules/lyric.ts   | 22 ++++++++++++++
 .../main/apis/netease/modules/lyric_new.ts    | 25 ++++++++++++++++
 shared/types/player.ts                        | 30 +++++++------------
 src/utils/url.ts                              |  2 +-
 7 files changed, 90 insertions(+), 21 deletions(-)
 create mode 100644 electron/main/apis/netease/modules/cloud_lyric_get.ts
 create mode 100644 electron/main/apis/netease/modules/lyric.ts
 create mode 100644 electron/main/apis/netease/modules/lyric_new.ts

diff --git a/CLAUDE.md b/CLAUDE.md
index 8becc92..007dd2c 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -61,7 +61,7 @@ Two-tier position tracking to separate high-frequency animation from low-frequen
 
 ### Type System
 
-- **`shared/types/player.ts`** — `Track` (playlist-friendly, lightweight), `TrackDetail` (on-demand), `Artist`, `Album`, `AudioQuality`, `OnlineMatch`, `PlayerState`, `PlayerStatus`, `PlayerEvent`, `LoadResult`, `PlayerApi`, `IpcResponse`
+- **`shared/types/player.ts`** — `Track` (playlist-friendly, lightweight), `TrackDetail` (on-demand), `Artist`, `Album`, `AudioQuality`, `PlayerState`, `PlayerStatus`, `PlayerEvent`, `LoadResult`, `PlayerApi`, `IpcResponse`
 - **`shared/types/lyrics.ts`** — `LyricFormat`, `LyricSource`（`"external" | "embedded" | "online"`）, `LyricData`（当前激活歌词描述：source + format + 可选 platform）, `LyricLine`, `LyricWord`, `LyricSpan`
 - **`shared/types/platform.ts`** — `Platform`（`"netease" | "qqmusic" | "kugou"`）
 
diff --git a/electron/main/apis/netease/modules/cloud_lyric_get.ts b/electron/main/apis/netease/modules/cloud_lyric_get.ts
new file mode 100644
index 0000000..2b452ce
--- /dev/null
+++ b/electron/main/apis/netease/modules/cloud_lyric_get.ts
@@ -0,0 +1,21 @@
+/**
+ * 云盘歌词
+ * params:
+ * - uid  用户 id
+ * - sid  云盘歌曲 id
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const cloud_lyric_get: NeteaseModule = (query, request) => {
+  const data = {
+    userId: query.uid,
+    songId: query.sid,
+    lv: -1,
+    kv: -1,
+  };
+  return request("/api/cloud/lyric/get", data, createOption(query, "eapi"));
+};
+
+export default cloud_lyric_get;
diff --git a/electron/main/apis/netease/modules/index.ts b/electron/main/apis/netease/modules/index.ts
index 8c22f50..db5e26f 100644
--- a/electron/main/apis/netease/modules/index.ts
+++ b/electron/main/apis/netease/modules/index.ts
@@ -43,6 +43,11 @@ import search_multimatch from "./search_multimatch";
 import search_suggest from "./search_suggest";
 import search_suggest_pc from "./search_suggest_pc";
 
+// 歌词
+import lyric from "./lyric";
+import lyric_new from "./lyric_new";
+import cloud_lyric_get from "./cloud_lyric_get";
+
 export const modules: Record<string, NeteaseModule> = {
   captcha_sent,
   captcha_verify,
@@ -76,4 +81,8 @@ export const modules: Record<string, NeteaseModule> = {
   search_multimatch,
   search_suggest,
   search_suggest_pc,
+
+  lyric,
+  lyric_new,
+  cloud_lyric_get,
 };
diff --git a/electron/main/apis/netease/modules/lyric.ts b/electron/main/apis/netease/modules/lyric.ts
new file mode 100644
index 0000000..df63a11
--- /dev/null
+++ b/electron/main/apis/netease/modules/lyric.ts
@@ -0,0 +1,22 @@
+/**
+ * 歌词（旧版）
+ * params:
+ * - id  歌曲 id
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const lyric: NeteaseModule = (query, request) => {
+  const data = {
+    id: query.id,
+    tv: -1,
+    lv: -1,
+    rv: -1,
+    kv: -1,
+    _nmclfl: 1,
+  };
+  return request("/api/song/lyric", data, createOption(query));
+};
+
+export default lyric;
diff --git a/electron/main/apis/netease/modules/lyric_new.ts b/electron/main/apis/netease/modules/lyric_new.ts
new file mode 100644
index 0000000..b7d033b
--- /dev/null
+++ b/electron/main/apis/netease/modules/lyric_new.ts
@@ -0,0 +1,25 @@
+/**
+ * 歌词（新版，含逐字歌词 yrc）
+ * params:
+ * - id  歌曲 id
+ */
+
+import { createOption } from "../core/option";
+import type { NeteaseModule } from "../core/types";
+
+const lyric_new: NeteaseModule = (query, request) => {
+  const data = {
+    id: query.id,
+    cp: false,
+    tv: 0,
+    lv: 0,
+    rv: 0,
+    kv: 0,
+    yv: 0,
+    ytv: 0,
+    yrv: 0,
+  };
+  return request("/api/song/lyric/v1", data, createOption(query));
+};
+
+export default lyric_new;
diff --git a/shared/types/player.ts b/shared/types/player.ts
index e48379e..89134f1 100644
--- a/shared/types/player.ts
+++ b/shared/types/player.ts
@@ -1,4 +1,5 @@
 import type { LyricFormat } from "./lyrics";
+import type { Platform } from "./platform";
 
 /** 播放器状态 */
 export type PlayerState = "idle" | "loading" | "playing" | "paused" | "stopped";
@@ -10,7 +11,7 @@ export type RepeatMode = "off" | "list" | "one";
 export type ShuffleMode = "off" | "on";
 
 /** 歌曲来源 */
-export type TrackSource = "local" | "online" | "plugin";
+export type TrackSource = "local" | "online";
 
 /** 歌手 */
 export interface Artist {
@@ -34,31 +35,27 @@ export interface AudioQuality {
   codec: string;
 }
 
-/** 在线匹配信息 */
-export interface OnlineMatch {
-  id: string;
-  artists?: Artist[];
-  album?: Album;
-  cover?: string;
-  coverOriginal?: string;
-  /** 来源插件 ID（source=plugin 时填） */
-  pluginId?: string;
-  /** 插件内部的源名（如 kw/kg/tx） */
-  pluginSource?: string;
-}
-
 /** 歌曲信息 */
 export interface Track {
   id: string;
   source: TrackSource;
+  /** 在线平台 */
+  platform?: Platform;
+  /** 本地路径 */
   path?: string;
+  /** 标题 */
   title: string;
   /** 注释/副标题 */
   comment?: string;
+  /** 歌手 */
   artists: Artist[];
+  /** 专辑 */
   album?: Album;
+  /** 时长（毫秒） */
   duration: number;
+  /** 封面 */
   cover?: string;
+  /** 原始封面 */
   coverOriginal?: string;
   /** 文件大小（字节） */
   fileSize?: number;
@@ -68,11 +65,6 @@ export interface Track {
   ctime?: number;
   /** 音质信息 */
   quality?: AudioQuality;
-  matched?: OnlineMatch;
-  /** 来源插件 ID（source=plugin 时填） */
-  pluginId?: string;
-  /** 插件内部的源名 */
-  pluginSource?: string;
 }
 
 /** 歌曲详细信息 */
diff --git a/src/utils/url.ts b/src/utils/url.ts
index 55580dd..1af8170 100644
--- a/src/utils/url.ts
+++ b/src/utils/url.ts
@@ -12,5 +12,5 @@ export const isExternalUrl = (url?: string | null): url is string =>
  */
 export const openExternal = (url?: string | null): void => {
   if (!isExternalUrl(url)) return;
-  window.open(url, "_blank");
+  window.open(url, "_blank", "noopener,noreferrer");
 };

From 7a197aa9a93519b36e716f5aa96d7ad43d16b0bb Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Thu, 23 Apr 2026 13:53:54 +0800
Subject: [PATCH 15/17] =?UTF-8?q?=E5=A4=84=E7=90=86=E5=AE=A1=E6=9F=A5?=
 =?UTF-8?q?=E6=84=8F=E8=A7=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 docs/plugins-usage.md                   |  7 +++----
 electron/main/plugins/net.ts            |  7 ++++++-
 electron/main/plugins/sandbox.ts        | 10 ++++++++++
 electron/main/plugins/sandbox.worker.ts |  5 ++++-
 4 files changed, 23 insertions(+), 6 deletions(-)

diff --git a/docs/plugins-usage.md b/docs/plugins-usage.md
index 7dc33bc..1d9deb6 100644
--- a/docs/plugins-usage.md
+++ b/docs/plugins-usage.md
@@ -30,7 +30,7 @@ SPlayer-Next 支持通过插件扩展音乐能力，包括 URL 解析、歌词
 
 - 仅支持 HTTP/HTTPS
 - 单次下载上限 **9 MB**
-- 请求超时 15 秒，最多跟随 3 次重定向
+- 请求超时 15 秒，重定向策略以当前运行时实现为准
 - 下载完后走和本地导入完全一样的落盘 + 加载流程
 
 常见链接来源：GitHub raw、Gitee raw、开发者个人站。
@@ -86,11 +86,10 @@ SPlayer-Next 支持通过插件扩展音乐能力，包括 URL 解析、歌词
 ├── plugins/
 │   ├── scripts/{id}.js      脚本源码
 │   ├── manifest.json         已安装列表
-│   ├── data/{id}.json        插件私有 KV 存储（splayer.storage 写入的）
-│   └── logs/{id}.log         插件日志（splayer.log）
+│   └── data/{id}.json        插件私有 KV 存储（splayer.storage 写入的）
 ```
 
-卸载插件会自动清理上述所有内容。
+卸载插件会自动清理上述所有内容。插件日志通过 `splayer.log` 转发到主进程日志，不单独落盘。
 
 **4. 为什么插件的请求速度很慢？**
 
diff --git a/electron/main/plugins/net.ts b/electron/main/plugins/net.ts
index b14a5aa..2c4d2c1 100644
--- a/electron/main/plugins/net.ts
+++ b/electron/main/plugins/net.ts
@@ -41,11 +41,16 @@ export const hostRequest = async (
   const timer = setTimeout(() => ctrl.abort(), timeoutMs);
 
   // 构造 body
+  // 注意：Uint8Array 要按 byteOffset/byteLength 切片，避免 subarray 场景下
+  // `.buffer` 把多余的底层字节一起发出去
   let body: BodyInit | undefined;
   if (opts.body != null) {
     if (typeof opts.body === "string") body = opts.body;
     else if (opts.body instanceof ArrayBuffer) body = opts.body;
-    else body = (opts.body as Uint8Array).buffer as ArrayBuffer;
+    else {
+      const u8 = opts.body as Uint8Array;
+      body = u8.buffer.slice(u8.byteOffset, u8.byteOffset + u8.byteLength) as ArrayBuffer;
+    }
   }
 
   try {
diff --git a/electron/main/plugins/sandbox.ts b/electron/main/plugins/sandbox.ts
index 031288f..8b22f57 100644
--- a/electron/main/plugins/sandbox.ts
+++ b/electron/main/plugins/sandbox.ts
@@ -252,8 +252,18 @@ export class Sandbox {
         this.heartbeatMisses = 0;
         return;
       case "fatal":
+        // fatal = 永久失败，不走 crash-restart。kill 是 worker 未自我退出时的兜底
+        this.intentionalKill = true;
         this.events.onFatal(msg.error);
         done(Object.assign(new Error(msg.error.message), { code: msg.error.code }));
+        if (this.child) {
+          try {
+            this.child.kill();
+          } catch {
+            /* ignore */
+          }
+        }
+        this.stopHeartbeat();
         return;
     }
   }
diff --git a/electron/main/plugins/sandbox.worker.ts b/electron/main/plugins/sandbox.worker.ts
index 0ce5e66..efd9341 100644
--- a/electron/main/plugins/sandbox.worker.ts
+++ b/electron/main/plugins/sandbox.worker.ts
@@ -262,7 +262,8 @@ const runScript = (init: Extract<SandboxIn, { kind: "init" }>): void => {
         message: err instanceof Error ? `${err.message}\n${err.stack ?? ""}` : String(err),
       },
     });
-    return;
+    // fatal 即终止：避免子进程在脚本未正常加载时继续空转
+    process.exit(1);
   }
 
   // 脚本同步部分执行完，上报 ready + 能力
@@ -358,6 +359,7 @@ parentPort.on("message", async (event) => {
         message: err instanceof Error ? err.message : String(err),
       },
     });
+    process.exit(1);
   }
 });
 
@@ -374,4 +376,5 @@ process.on("uncaughtException", (err) => {
     kind: "fatal",
     error: { code: "PLUGIN_SCRIPT_ERROR", message: err.message },
   });
+  process.exit(1);
 });

From 81f603fafbed4dc861dce98aa423d15395c69321 Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Thu, 23 Apr 2026 13:57:56 +0800
Subject: [PATCH 16/17] Potential fix for pull request finding 'Comparison
 between inconvertible types'

Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
---
 electron/main/apis/netease/core/request.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/electron/main/apis/netease/core/request.ts b/electron/main/apis/netease/core/request.ts
index 5f4b482..9b10b9d 100644
--- a/electron/main/apis/netease/core/request.ts
+++ b/electron/main/apis/netease/core/request.ts
@@ -261,5 +261,5 @@ export const createRequest = async (
 const toBoolean = (val: unknown): boolean => {
   if (typeof val === "boolean") return val;
   if (val === "") return false;
-  return val === "true" || val === "1" || val === 1 || val === true;
+  return val === "true" || val === "1" || val === 1;
 };

From 770dca62da60b9c7942283bc37da19cf8dab143f Mon Sep 17 00:00:00 2001
From: imsyy <imsyy1024@gmail.com>
Date: Thu, 23 Apr 2026 13:58:12 +0800
Subject: [PATCH 17/17] Potential fix for pull request finding 'Useless
 assignment to local variable'

Co-authored-by: Copilot Autofix powered by AI <223894421+github-code-quality[bot]@users.noreply.github.com>
---
 electron/main/apis/netease/core/request.ts | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/electron/main/apis/netease/core/request.ts b/electron/main/apis/netease/core/request.ts
index 9b10b9d..e324823 100644
--- a/electron/main/apis/netease/core/request.ts
+++ b/electron/main/apis/netease/core/request.ts
@@ -148,7 +148,7 @@ export const createRequest = async (
   data.e_r = useER;
 
   let url = "";
-  let encryptData: Record<string, string | number | boolean> | unknown = data;
+  let encryptData: Record<string, string | number | boolean> | typeof data;
 
   switch (crypto) {
     case "weapi": {