lanzou 0.1.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026 <your name>
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,140 @@
+# lanzou
+
+[![npm](https://img.shields.io/npm/v/lanzou)](https://www.npmjs.com/package/lanzou)
+[![CI](https://github.com/<your-username>/lanzou/actions/workflows/ci.yml/badge.svg)](https://github.com/<your-username>/lanzou/actions/workflows/ci.yml)
+[![License: MIT](https://img.shields.io/badge/License-MIT-blue.svg)](./LICENSE)
+[![node](https://img.shields.io/node/v/lanzou)](https://www.npmjs.com/package/lanzou)
+
+蓝奏云分享链接解析库：获取文件列表与下载直链。
+
+## 特性
+
+- **全自动 WAF 破解** — 命中 `acw_sc__v2` 反爬挑战页时本地计算通过验证，不执行远端 JS（无 vm 逃逸风险）
+- **密码分享** — 支持带密码的分享链接
+- **翻页获取** — 自动翻页取回文件夹内全部文件
+- **域名回退** — 分享域名失效时自动切换兜底域名池（`filemoreajax` 是全局接口，任一存活子域均可查询）
+- **直链提取** — 依次尝试 `vkjxld+hyggid` 拼接 / `iframe` / JS 跳转等多种页面结构，兼容站点改版
+- **时间归一化** — "3 小时前"、"昨天 20:31" 等相对时间统一转为 `YYYY-MM-DD HH:mm`
+- **内置限速** — 相邻请求间隔至少 1 秒，降低触发风控的概率
+- **零异常抛出** — 主 API 永不 throw，失败信息通过返回值传递
+
+## 安装
+
+```sh
+npm install lanzou
+# 或
+pnpm add lanzou
+```
+
+要求 Node.js >= 18。
+
+## 快速开始
+
+### 场景 A：只取最新文件（如自动更新，请求数最少）
+
+```ts
+import { getLatestFile } from 'lanzou'
+
+const file = await getLatestFile('https://wwp.lanzouj.com/xxxxx', { pwd: 'abc1' })
+if (file) {
+  console.log(file.fileName) // 文件名
+  console.log(file.fileSize) // 大小
+  console.log(file.updateTime) // 更新时间 YYYY-MM-DD HH:mm
+  console.log(file.directLink) // 下载直链
+} else {
+  console.log('获取失败或分享为空')
+}
+```
+
+### 场景 B：获取全部文件的直链
+
+```ts
+import { getLanzouFiles } from 'lanzou'
+
+const files = await getLanzouFiles('https://wwp.lanzouj.com/xxxxx', { debug: true })
+for (const f of files) {
+  console.log(f.directLink ? `✓ ${f.fileName} -> ${f.directLink}` : `✗ ${f.fileName}: ${f.error}`)
+}
+```
+
+### 下载直链
+
+直链绑定 IP/UA 且有时效，拿到后请立即下载，并携带同款移动端 UA：
+
+```ts
+import axios from 'axios'
+import { BASE_UA } from 'lanzou'
+
+const res = await axios.get(directLink, {
+  headers: { 'User-Agent': BASE_UA },
+  responseType: 'stream',
+})
+```
+
+## API
+
+### `getLanzouFiles(url, options?) => Promise<FileInfo[]>`
+
+获取分享链接内全部文件的信息与直链。整体失败返回 `[]`；单个文件直链获取失败时该项 `directLink` 为 `null` 并附 `error` 说明。
+
+### `getLatestFile(url, options?) => Promise<FileInfo | null>`
+
+只取更新时间最新的文件：仅比较列表时间，只为该文件请求直链，其余文件不发任何请求。失败返回 `null`。
+
+### `checkLanzouUrl(url) => { valid: true } | { valid: false; message }`
+
+检测 URL 是否为有效的蓝奏云分享链接（`lanzou*.com`、`lanzn.com`、`lanpw.com` 等域名）。
+
+### `LanzouOptions`
+
+| 字段 | 类型 | 默认 | 说明 |
+| --- | --- | --- | --- |
+| `pwd` | `string` | `''` | 分享密码（如有） |
+| `debug` | `boolean` | `false` | 输出进度日志（默认静默） |
+| `timeout` | `number` | `15000` | 单次请求超时（毫秒） |
+
+### `FileInfo`
+
+| 字段 | 类型 | 说明 |
+| --- | --- | --- |
+| `fileName` | `string` | 文件名 |
+| `fileSize` | `string` | 文件大小（站点原始字符串） |
+| `updateTime` | `string?` | 更新时间 `YYYY-MM-DD HH:mm`（相对时间已换算） |
+| `directLink` | `string \| null` | 下载直链，失败为 `null` |
+| `error` | `string?` | 直链获取失败的原因 |
+
+### 其他导出
+
+- `BASE_UA` — 站点校验所用移动端 UA，下载直链时需携带
+- `calcAcwScV2(arg1)` — 本地计算 `acw_sc__v2` WAF 挑战答案
+- `parseSiteTime(raw)` / `absTime(raw)` — 站点时间字符串转时间戳 / 标准格式
+- `resetCookies()` — 清空模块级 Cookie 容器（长驻进程重置 WAF 状态时使用）
+- `CookieJar` / `extractParam` — `@internal`，测试与高级用途
+
+## 注意事项
+
+- **全局限速**：相邻请求间隔至少 1 秒（模块级共享，同一进程内所有调用共用），文件多时耗时线性增长，属预期行为
+- **直链时效**：直链绑定 IP/UA 且会过期，请获取后立即使用；跨机器传递直链大概率失效
+- **Cookie 复用**：模块级 Cookie 容器会跨调用复用 WAF 验证状态，通常有利；如遇异常可 `resetCookies()`
+- **免责声明**：本项目仅供学习交流，请勿用于任何违反蓝奏云服务条款或法律法规的用途
+
+## 开发
+
+```sh
+npm install
+npm run build    # tsdown 构建 ESM + CJS + d.ts
+npm test         # vitest 单元测试（不联网）
+npm run example -- <分享链接> [密码]   # 端到端实测
+```
+
+### 发布
+
+仓库已配置 [Trusted Publishing](https://docs.npmjs.com/generating-provenance-statements/)（OIDC）：
+
+1. npmjs.com → Access Tokens → Trusted Publishers → 添加 ` <你的用户名>/lanzou ` + `release.yml`
+2. 修改 `package.json` 的 `version` 并提交
+3. 在 GitHub 创建对应 tag 的 Release，`release.yml` 自动执行 `npm publish --provenance`
+
+## License
+
+MIT

package/dist/index.cjs

@@ -0,0 +1,385 @@
+Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
+//#region \0rolldown/runtime.js
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __copyProps = (to, from, except, desc) => {
+	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
+		key = keys[i];
+		if (!__hasOwnProp.call(to, key) && key !== except) __defProp(to, key, {
+			get: ((k) => from[k]).bind(null, key),
+			enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable
+		});
+	}
+	return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(isNodeMode || !mod || !mod.__esModule || !__hasOwnProp.call(mod, "default") ? __defProp(target, "default", {
+	value: mod,
+	enumerable: true
+}) : target, mod));
+//#endregion
+let axios = require("axios");
+axios = __toESM(axios, 1);
+//#region src/index.ts
+/** 站点校验用的移动端 UA，下载直链时建议携带同款，否则可能 403 */
+const BASE_UA = "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36";
+const DEFAULT_TIMEOUT = 15e3;
+/** 文件列表接口的兜底域名池：filemoreajax是全局接口，任一活着的蓝奏子域均可查询；分享域名失效时按序尝试 */
+const FALLBACK_HOSTS = [
+	"ricarda.lanzouu.com",
+	"wwa.lanzouq.com",
+	"wwa.lanzouw.com"
+];
+/** 按域名存储Cookie，供跨请求携带（WAF验证需要）；`@internal` */
+var CookieJar = class {
+	store = /* @__PURE__ */ new Map();
+	set(domain, name, value) {
+		const key = domain.toLowerCase().replace(/^\./, "");
+		const bucket = this.store.get(key) ?? /* @__PURE__ */ new Map();
+		bucket.set(name, value);
+		this.store.set(key, bucket);
+	}
+	/** 记录响应Set-Cookie，优先使用其Domain属性，否则归属请求域名 */
+	addFromResponse(setCookie, requestUrl) {
+		for (const item of setCookie ?? []) {
+			const [pair] = item.split(";");
+			const eq = pair.indexOf("=");
+			if (eq <= 0) continue;
+			const domain = item.match(/domain=([^;]+)/i)?.[1].trim() ?? new URL(requestUrl).hostname;
+			this.set(domain, pair.slice(0, eq).trim(), pair.slice(eq + 1).trim());
+		}
+	}
+	/** 生成请求应携带的Cookie头（包含当前域名及其父域的Cookie） */
+	headerFor(url) {
+		const parts = new URL(url).hostname.toLowerCase().split(".");
+		const cookies = [];
+		for (let i = 0; i < parts.length - 1; i++) this.store.get(parts.slice(i).join("."))?.forEach((value, name) => cookies.push(`${name}=${value}`));
+		return cookies.join("; ");
+	}
+	/** 清空全部Cookie */
+	clear() {
+		this.store.clear();
+	}
+};
+const cookieJar = new CookieJar();
+/** 清空模块级Cookie容器（长驻进程中重置WAF状态时使用） */
+const resetCookies = () => cookieJar.clear();
+/** 判断页面是否为WAF挑战页（acw_sc__v2反爬验证） */
+const isAcwChallenge = (html) => html.includes("acw_sc__v2") && html.includes("arg1");
+/** acw_sc__v2算法的固定参数：40位重排表与异或密钥 */
+const ACW_POS = [
+	15,
+	35,
+	29,
+	24,
+	33,
+	16,
+	1,
+	38,
+	10,
+	9,
+	19,
+	31,
+	40,
+	27,
+	22,
+	23,
+	25,
+	13,
+	6,
+	11,
+	39,
+	18,
+	20,
+	8,
+	14,
+	21,
+	32,
+	26,
+	2,
+	30,
+	7,
+	4,
+	17,
+	5,
+	3,
+	28,
+	34,
+	37,
+	12,
+	36
+];
+const ACW_KEY = "3000176000856006061501533003690027800375";
+/** 本地计算acw_sc__v2：按固定表重排arg1(40位hex)，再与密钥逐字节异或 */
+const calcAcwScV2 = (arg1) => {
+	return ACW_POS.map((pos) => arg1[pos - 1]).join("").match(/../g).map((pair, i) => (parseInt(pair, 16) ^ parseInt(ACW_KEY.slice(i * 2, i * 2 + 2), 16)).toString(16).padStart(2, "0")).join("");
+};
+/** 从挑战页提取arg1并本地算出acw_sc__v2写入Cookie容器（不执行远端JS，规避vm逃逸风险） */
+const solveAcwChallenge = (html, url) => {
+	const arg1 = html.match(/arg1\s*=\s*['"]([0-9A-Fa-f]{40})['"]/)?.[1];
+	if (!arg1) return false;
+	cookieJar.set(new URL(url).hostname, "acw_sc__v2", calcAcwScV2(arg1));
+	return true;
+};
+let lastRequestAt = 0;
+/** 全局限速：相邻请求间隔至少1秒（模块级，同一进程内所有调用共享，属礼貌性限速） */
+async function rateLimit() {
+	await new Promise((resolve) => setTimeout(resolve, Math.max(0, lastRequestAt + 1e3 - Date.now())));
+	lastRequestAt = Date.now();
+}
+const buildHeaders = (url, referer) => {
+	const headers = { "User-Agent": BASE_UA };
+	const cookie = cookieJar.headerFor(url);
+	if (cookie) headers.Cookie = cookie;
+	if (referer) headers.Referer = referer;
+	return headers;
+};
+/** 发送请求，命中WAF挑战页时算出acw_sc__v2后重试（最多3次） */
+const httpSend = async (method, url, ctx, data, referer) => {
+	let body = "";
+	for (let attempt = 0; attempt < 3; attempt++) {
+		const response = await axios.default.request({
+			method,
+			url,
+			data,
+			headers: buildHeaders(url, referer),
+			timeout: ctx.timeout
+		});
+		cookieJar.addFromResponse(response.headers["set-cookie"], url);
+		body = response.data;
+		if (typeof body !== "string" || !isAcwChallenge(body)) return body;
+		ctx.log(`命中WAF挑战页，计算acw_sc__v2后重试 (${attempt + 1}/3)`);
+		if (!solveAcwChallenge(body, url)) break;
+	}
+	return body;
+};
+/** GET页面文本 */
+const httpGetText = async (url, ctx, referer) => {
+	const body = await httpSend("get", url, ctx, void 0, referer);
+	return typeof body === "string" ? body : String(body ?? "");
+};
+/** 从页面提取key对应的值（'key':value / key=value、引号均可）；不带引号且像变量名的值回查var定义；`@internal` */
+const extractParam = (html, key) => {
+	const m = html.match(new RegExp(`['"]?\\b${key}\\b['"]?\\s*[:=]\\s*(['"]?)([^,'";\\s}]+)`, "i"));
+	if (!m) return null;
+	const [, quote, raw] = m;
+	if (quote) return raw;
+	if (/^[A-Za-z_$][\w$]*$/.test(raw)) return html.match(new RegExp(`var\\s+${raw}\\s*=\\s*['"]([^'"]+)['"]`))?.[1] ?? null;
+	return raw;
+};
+/** 从分享页提取filemoreajax接口所需参数 */
+const prepareData = async (url, pwd, ctx) => {
+	ctx.log(`正在获取分享页: ${url}`);
+	const html = await httpGetText(url, ctx);
+	const get = (key) => extractParam(html, key);
+	const fid = get("fid");
+	const t = get("t") ?? html.match(/var\s+\w+\s*=\s*['"](\d{10})['"]/)?.[1];
+	const k = get("k");
+	if (!fid || !t || !k) throw new Error(`无法从页面提取必要参数 fid=${fid}, t=${t}, k=${k}`);
+	return {
+		lx: get("lx") ?? "2",
+		fid,
+		uid: get("uid") ?? "0",
+		rep: get("rep") ?? "0",
+		t,
+		k,
+		up: get("up") ?? "1",
+		ls: get("ls") ?? "1",
+		pwd
+	};
+};
+/** 请求单页文件列表：zt=1返回文件，zt=2返回[]，其他情况返回null（由调用方重试） */
+const fetchFilePage = async (data, pg, host, ctx) => {
+	const hosts = FALLBACK_HOSTS.includes(host) ? FALLBACK_HOSTS : [host, ...FALLBACK_HOSTS];
+	for (const h of hosts) try {
+		ctx.log(`请求文件列表 第${pg}页 @ ${h}`);
+		const result = await httpSend("post", `https://${h}/filemoreajax.php`, ctx, new URLSearchParams({
+			...data,
+			pg: String(pg)
+		}));
+		if (!result || typeof result.zt === "undefined") continue;
+		if (result.zt === 1) return result.text;
+		if (result.zt === 2) return [];
+		ctx.log(`触发频率限制或未知状态(zt=${result.zt}): ${result.info}`);
+		return null;
+	} catch (error) {
+		ctx.log(`域名 ${h} 请求失败: ${error.message}`);
+	}
+	return null;
+};
+/** 翻页获取全部文件，单页失败最多重试4次 */
+const getAllFileList = async (url, pwd, ctx) => {
+	const data = await prepareData(url, pwd, ctx);
+	const host = new URL(url).host;
+	const files = [];
+	for (let pg = 1;; pg++) {
+		let page = null;
+		for (let retry = 0; retry < 4 && page === null; retry++) {
+			await rateLimit();
+			page = await fetchFilePage(data, pg, host, ctx);
+		}
+		if (!page?.length) return files;
+		ctx.log(`第${pg}页获取到 ${page.length} 个文件`);
+		files.push(...page);
+	}
+};
+/** 处理下载跳转页，提取最终直链 */
+const processDownloadPage = async (tp, host, filePageUrl, ctx) => {
+	const tpUrl = /^https?:\/\//i.test(tp) ? tp : `https://${host}${tp}`;
+	const tpHtml = await httpGetText(tpUrl, ctx, filePageUrl);
+	const vkjxld = tpHtml.match(/var\s+vkjxld\s*=\s*'([^']+)'/)?.[1];
+	const hyggid = tpHtml.match(/var\s+hyggid\s*=\s*'([^']+)'/)?.[1];
+	const found = (vkjxld && hyggid ? vkjxld + hyggid : null) ?? tpHtml.match(/var\s+\w+\s*=\s*'(https?:\/\/[^']+\/file\/[^']*)'/)?.[1] ?? tpHtml.match(/<iframe[^>]+src="([^"]+)"/)?.[1];
+	if (!found) throw new Error("无法从下载页提取跳转参数(vkjxld/hyggid)");
+	const finalPageUrl = /^https?:\/\//i.test(found) ? found : new URL(found, tpUrl).href;
+	ctx.log(`获取最终下载页: ${finalPageUrl}`);
+	const finalHtml = await httpGetText(finalPageUrl, ctx, tpUrl);
+	const link = finalHtml.match(/location\.(?:href\s*=|replace\()\s*["']([^"']+)["']/)?.[1] ?? finalHtml.match(/<a\s+href="(https?:\/\/[^"]+)"/)?.[1] ?? finalHtml.match(/href="(https?:\/\/[^"]+download[^"]*)"/i)?.[1];
+	if (!link) throw new Error("最终页面未找到下载直链");
+	return /^https?:\/\//i.test(link) ? link : new URL(link, finalPageUrl).href;
+};
+/** 获取单个文件的最终下载链接，失败抛出异常 */
+const getFinalLink = async (id, host, ctx, referer) => {
+	const filePageUrl = `https://${host}/${id}`;
+	const html = await httpGetText(filePageUrl, ctx, referer);
+	if (isAcwChallenge(html)) throw new Error("文件页被WAF拦截且挑战破解失败");
+	const tp = html.match(/<a[^>]+href="([^"]+)"[^>]*id="downurl"/)?.[1] ?? html.match(/<a[^>]+id="downurl"[^>]+href="([^"]+)"/)?.[1] ?? html.match(/<iframe[^>]+src="([^"]+)"/)?.[1];
+	if (!tp) throw new Error("文件页未找到下载入口(downurl)，页面可能需要密码或结构已变更");
+	ctx.log(`文件 ${id} 跳转链接: ${tp}`);
+	return processDownloadPage(tp, host, filePageUrl, ctx);
+};
+const TIME_UNITS = {
+	秒: 1e3,
+	分钟: 6e4,
+	小时: 36e5,
+	天: 864e5
+};
+/** 站点时间字符串转时间戳（相对"3 小时前"/"昨天 20:31"/"刚刚"与绝对"2026-08-30"均支持），无法解析返回0 */
+const parseSiteTime = (raw) => {
+	const rel = raw.match(/(\d+)\s*(秒|分钟|小时|天)前/);
+	if (rel) return Date.now() - +rel[1] * TIME_UNITS[rel[2]];
+	const day = raw.match(/(昨天|前天)\s*(\d{1,2}):(\d{2})/);
+	if (day) {
+		const d = /* @__PURE__ */ new Date(Date.now() - (day[1] === "昨天" ? 1 : 2) * 864e5);
+		d.setHours(+day[2], +day[3], 0, 0);
+		return +d;
+	}
+	if (raw.includes("刚刚")) return Date.now();
+	const s = raw.replace(/\//g, "-");
+	return +new Date(/^\d{4}-\d{2}-\d{2}$/.test(s) ? `${s} 00:00` : s) || 0;
+};
+/** 时间戳统一格式化为 "YYYY-MM-DD HH:mm" */
+const fmtTime = (ts) => {
+	const d = new Date(ts);
+	const p = (n) => String(n).padStart(2, "0");
+	return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;
+};
+/** 站点时间统一为 "YYYY-MM-DD HH:mm"，无法解析则原样返回 */
+const absTime = (raw) => {
+	const ts = parseSiteTime(raw);
+	return ts ? fmtTime(ts) : raw;
+};
+const buildCtx = (options) => ({
+	log: options.debug ? (message) => console.log(message) : () => {},
+	timeout: options.timeout ?? DEFAULT_TIMEOUT
+});
+/**
+* 获取蓝奏云文件夹中所有文件的信息和直链
+*
+* 永不抛出异常：整体失败返回 `[]`，单个文件直链获取失败时该项 `directLink` 为 `null` 并附 `error` 说明。
+*
+* @param url - 蓝奏云分享URL
+* @param options - 可选配置（密码 / 调试日志 / 超时）
+*/
+const getLanzouFiles = async (url, options = {}) => {
+	const ctx = buildCtx(options);
+	try {
+		const host = new URL(url).host;
+		const fileList = await getAllFileList(url, options.pwd ?? "", ctx);
+		if (!fileList.length) {
+			ctx.log("未找到文件或文件列表为空");
+			return [];
+		}
+		ctx.log(`共 ${fileList.length} 个文件，开始获取直链`);
+		const results = [];
+		for (const [index, file] of fileList.entries()) {
+			ctx.log(`(${index + 1}/${fileList.length}) ${file.name_all}`);
+			await rateLimit();
+			try {
+				const directLink = await getFinalLink(file.id, host, ctx, url);
+				results.push({
+					fileName: file.name_all,
+					fileSize: file.size,
+					updateTime: file.time ? absTime(file.time) : void 0,
+					directLink
+				});
+				ctx.log(`✓ ${file.name_all} 直链获取成功`);
+			} catch (error) {
+				ctx.log(`✗ ${file.name_all} 直链获取失败: ${error.message}`);
+				results.push({
+					fileName: file.name_all,
+					fileSize: file.size,
+					updateTime: file.time ? absTime(file.time) : void 0,
+					directLink: null,
+					error: error.message
+				});
+			}
+		}
+		ctx.log(`完成：${results.filter((f) => f.directLink).length}/${fileList.length} 个直链获取成功`);
+		return results;
+	} catch (error) {
+		ctx.log(`获取蓝奏云文件失败: ${error.message}`);
+		return [];
+	}
+};
+/** 检测URL是否为有效的蓝奏云分享链接 */
+const checkLanzouUrl = (url) => {
+	return /https?:\/\/[\w.-]+\.(?:lanzou[a-z]?|lanzn|lanpw|lanpv|lanzv)\.com\/\w+/i.test(url) ? { valid: true } : {
+		valid: false,
+		message: "URL不是有效的蓝奏云链接，蓝奏云域名包括：lanzou*.com、lanzn.com等"
+	};
+};
+/**
+* 只取更新时间最新的文件：仅用列表比较时间，只为该文件请求直链，其余文件不发任何请求
+*
+* 失败返回 `null`，不抛出异常。
+*
+* @param url - 蓝奏云分享URL
+* @param options - 可选配置（密码 / 调试日志 / 超时）
+*/
+const getLatestFile = async (url, options = {}) => {
+	const ctx = buildCtx(options);
+	try {
+		const host = new URL(url).host;
+		const fileList = await getAllFileList(url, options.pwd ?? "", ctx);
+		if (!fileList.length) return null;
+		const newest = fileList.reduce((a, b) => parseSiteTime(b.time ?? "") > parseSiteTime(a.time ?? "") ? b : a);
+		ctx.log(`最新文件: ${newest.name_all}，获取其直链`);
+		await rateLimit();
+		const directLink = await getFinalLink(newest.id, host, ctx, url);
+		ctx.log(`✓ ${newest.name_all} 直链获取成功`);
+		return {
+			fileName: newest.name_all,
+			fileSize: newest.size,
+			updateTime: newest.time ? absTime(newest.time) : void 0,
+			directLink
+		};
+	} catch (error) {
+		ctx.log(`获取最新文件失败: ${error.message}`);
+		return null;
+	}
+};
+//#endregion
+exports.BASE_UA = BASE_UA;
+exports.CookieJar = CookieJar;
+exports.absTime = absTime;
+exports.calcAcwScV2 = calcAcwScV2;
+exports.checkLanzouUrl = checkLanzouUrl;
+exports.extractParam = extractParam;
+exports.getLanzouFiles = getLanzouFiles;
+exports.getLatestFile = getLatestFile;
+exports.parseSiteTime = parseSiteTime;
+exports.resetCookies = resetCookies;

package/dist/index.d.cts

@@ -0,0 +1,67 @@
+//#region src/index.d.ts
+/** 站点校验用的移动端 UA，下载直链时建议携带同款，否则可能 403 */
+export declare const BASE_UA = "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36";
+export interface FileInfo {
+  fileName: string;
+  fileSize: string;
+  /** 更新时间 YYYY-MM-DD HH:mm（站点返回相对时间时已换算，精度受限于相对单位） */
+  updateTime?: string;
+  directLink: string | null;
+  /** 直链获取失败时的原因（directLink 为 null 时存在） */
+  error?: string;
+}
+export interface LanzouOptions {
+  /** 分享密码（如有） */
+  pwd?: string;
+  /** 开启进度日志，默认静默 */
+  debug?: boolean;
+  /** 单次请求超时（毫秒），默认 15000 */
+  timeout?: number;
+}
+/** 按域名存储Cookie，供跨请求携带（WAF验证需要）；`@internal` */
+export declare class CookieJar {
+  private store;
+  set(domain: string, name: string, value: string): void;
+  /** 记录响应Set-Cookie，优先使用其Domain属性，否则归属请求域名 */
+  addFromResponse(setCookie: string[] | undefined, requestUrl: string): void;
+  /** 生成请求应携带的Cookie头（包含当前域名及其父域的Cookie） */
+  headerFor(url: string): string;
+  /** 清空全部Cookie */
+  clear(): void;
+}
+/** 清空模块级Cookie容器（长驻进程中重置WAF状态时使用） */
+export declare const resetCookies: () => void;
+/** 本地计算acw_sc__v2：按固定表重排arg1(40位hex)，再与密钥逐字节异或 */
+export declare const calcAcwScV2: (arg1: string) => string;
+/** 从页面提取key对应的值（'key':value / key=value、引号均可）；不带引号且像变量名的值回查var定义；`@internal` */
+export declare const extractParam: (html: string, key: string) => string | null;
+/** 站点时间字符串转时间戳（相对"3 小时前"/"昨天 20:31"/"刚刚"与绝对"2026-08-30"均支持），无法解析返回0 */
+export declare const parseSiteTime: (raw: string) => number;
+/** 站点时间统一为 "YYYY-MM-DD HH:mm"，无法解析则原样返回 */
+export declare const absTime: (raw: string) => string;
+/**
+ * 获取蓝奏云文件夹中所有文件的信息和直链
+ *
+ * 永不抛出异常：整体失败返回 `[]`，单个文件直链获取失败时该项 `directLink` 为 `null` 并附 `error` 说明。
+ *
+ * @param url - 蓝奏云分享URL
+ * @param options - 可选配置（密码 / 调试日志 / 超时）
+ */
+export declare const getLanzouFiles: (url: string, options?: LanzouOptions) => Promise<FileInfo[]>;
+/** 检测URL是否为有效的蓝奏云分享链接 */
+export declare const checkLanzouUrl: (url: string) => {
+  valid: true;
+} | {
+  valid: false;
+  message: string;
+};
+/**
+ * 只取更新时间最新的文件：仅用列表比较时间，只为该文件请求直链，其余文件不发任何请求
+ *
+ * 失败返回 `null`，不抛出异常。
+ *
+ * @param url - 蓝奏云分享URL
+ * @param options - 可选配置（密码 / 调试日志 / 超时）
+ */
+export declare const getLatestFile: (url: string, options?: LanzouOptions) => Promise<FileInfo | null>;
+//#endregion

package/dist/index.d.mts

@@ -0,0 +1,67 @@
+//#region src/index.d.ts
+/** 站点校验用的移动端 UA，下载直链时建议携带同款，否则可能 403 */
+export declare const BASE_UA = "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36";
+export interface FileInfo {
+  fileName: string;
+  fileSize: string;
+  /** 更新时间 YYYY-MM-DD HH:mm（站点返回相对时间时已换算，精度受限于相对单位） */
+  updateTime?: string;
+  directLink: string | null;
+  /** 直链获取失败时的原因（directLink 为 null 时存在） */
+  error?: string;
+}
+export interface LanzouOptions {
+  /** 分享密码（如有） */
+  pwd?: string;
+  /** 开启进度日志，默认静默 */
+  debug?: boolean;
+  /** 单次请求超时（毫秒），默认 15000 */
+  timeout?: number;
+}
+/** 按域名存储Cookie，供跨请求携带（WAF验证需要）；`@internal` */
+export declare class CookieJar {
+  private store;
+  set(domain: string, name: string, value: string): void;
+  /** 记录响应Set-Cookie，优先使用其Domain属性，否则归属请求域名 */
+  addFromResponse(setCookie: string[] | undefined, requestUrl: string): void;
+  /** 生成请求应携带的Cookie头（包含当前域名及其父域的Cookie） */
+  headerFor(url: string): string;
+  /** 清空全部Cookie */
+  clear(): void;
+}
+/** 清空模块级Cookie容器（长驻进程中重置WAF状态时使用） */
+export declare const resetCookies: () => void;
+/** 本地计算acw_sc__v2：按固定表重排arg1(40位hex)，再与密钥逐字节异或 */
+export declare const calcAcwScV2: (arg1: string) => string;
+/** 从页面提取key对应的值（'key':value / key=value、引号均可）；不带引号且像变量名的值回查var定义；`@internal` */
+export declare const extractParam: (html: string, key: string) => string | null;
+/** 站点时间字符串转时间戳（相对"3 小时前"/"昨天 20:31"/"刚刚"与绝对"2026-08-30"均支持），无法解析返回0 */
+export declare const parseSiteTime: (raw: string) => number;
+/** 站点时间统一为 "YYYY-MM-DD HH:mm"，无法解析则原样返回 */
+export declare const absTime: (raw: string) => string;
+/**
+ * 获取蓝奏云文件夹中所有文件的信息和直链
+ *
+ * 永不抛出异常：整体失败返回 `[]`，单个文件直链获取失败时该项 `directLink` 为 `null` 并附 `error` 说明。
+ *
+ * @param url - 蓝奏云分享URL
+ * @param options - 可选配置（密码 / 调试日志 / 超时）
+ */
+export declare const getLanzouFiles: (url: string, options?: LanzouOptions) => Promise<FileInfo[]>;
+/** 检测URL是否为有效的蓝奏云分享链接 */
+export declare const checkLanzouUrl: (url: string) => {
+  valid: true;
+} | {
+  valid: false;
+  message: string;
+};
+/**
+ * 只取更新时间最新的文件：仅用列表比较时间，只为该文件请求直链，其余文件不发任何请求
+ *
+ * 失败返回 `null`，不抛出异常。
+ *
+ * @param url - 蓝奏云分享URL
+ * @param options - 可选配置（密码 / 调试日志 / 超时）
+ */
+export declare const getLatestFile: (url: string, options?: LanzouOptions) => Promise<FileInfo | null>;
+//#endregion

package/dist/index.mjs

@@ -0,0 +1,352 @@
+import axios from "axios";
+//#region src/index.ts
+/** 站点校验用的移动端 UA，下载直链时建议携带同款，否则可能 403 */
+const BASE_UA = "Mozilla/5.0 (Linux; Android 13; Pixel 7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/116.0.0.0 Mobile Safari/537.36";
+const DEFAULT_TIMEOUT = 15e3;
+/** 文件列表接口的兜底域名池：filemoreajax是全局接口，任一活着的蓝奏子域均可查询；分享域名失效时按序尝试 */
+const FALLBACK_HOSTS = [
+	"ricarda.lanzouu.com",
+	"wwa.lanzouq.com",
+	"wwa.lanzouw.com"
+];
+/** 按域名存储Cookie，供跨请求携带（WAF验证需要）；`@internal` */
+var CookieJar = class {
+	store = /* @__PURE__ */ new Map();
+	set(domain, name, value) {
+		const key = domain.toLowerCase().replace(/^\./, "");
+		const bucket = this.store.get(key) ?? /* @__PURE__ */ new Map();
+		bucket.set(name, value);
+		this.store.set(key, bucket);
+	}
+	/** 记录响应Set-Cookie，优先使用其Domain属性，否则归属请求域名 */
+	addFromResponse(setCookie, requestUrl) {
+		for (const item of setCookie ?? []) {
+			const [pair] = item.split(";");
+			const eq = pair.indexOf("=");
+			if (eq <= 0) continue;
+			const domain = item.match(/domain=([^;]+)/i)?.[1].trim() ?? new URL(requestUrl).hostname;
+			this.set(domain, pair.slice(0, eq).trim(), pair.slice(eq + 1).trim());
+		}
+	}
+	/** 生成请求应携带的Cookie头（包含当前域名及其父域的Cookie） */
+	headerFor(url) {
+		const parts = new URL(url).hostname.toLowerCase().split(".");
+		const cookies = [];
+		for (let i = 0; i < parts.length - 1; i++) this.store.get(parts.slice(i).join("."))?.forEach((value, name) => cookies.push(`${name}=${value}`));
+		return cookies.join("; ");
+	}
+	/** 清空全部Cookie */
+	clear() {
+		this.store.clear();
+	}
+};
+const cookieJar = new CookieJar();
+/** 清空模块级Cookie容器（长驻进程中重置WAF状态时使用） */
+const resetCookies = () => cookieJar.clear();
+/** 判断页面是否为WAF挑战页（acw_sc__v2反爬验证） */
+const isAcwChallenge = (html) => html.includes("acw_sc__v2") && html.includes("arg1");
+/** acw_sc__v2算法的固定参数：40位重排表与异或密钥 */
+const ACW_POS = [
+	15,
+	35,
+	29,
+	24,
+	33,
+	16,
+	1,
+	38,
+	10,
+	9,
+	19,
+	31,
+	40,
+	27,
+	22,
+	23,
+	25,
+	13,
+	6,
+	11,
+	39,
+	18,
+	20,
+	8,
+	14,
+	21,
+	32,
+	26,
+	2,
+	30,
+	7,
+	4,
+	17,
+	5,
+	3,
+	28,
+	34,
+	37,
+	12,
+	36
+];
+const ACW_KEY = "3000176000856006061501533003690027800375";
+/** 本地计算acw_sc__v2：按固定表重排arg1(40位hex)，再与密钥逐字节异或 */
+const calcAcwScV2 = (arg1) => {
+	return ACW_POS.map((pos) => arg1[pos - 1]).join("").match(/../g).map((pair, i) => (parseInt(pair, 16) ^ parseInt(ACW_KEY.slice(i * 2, i * 2 + 2), 16)).toString(16).padStart(2, "0")).join("");
+};
+/** 从挑战页提取arg1并本地算出acw_sc__v2写入Cookie容器（不执行远端JS，规避vm逃逸风险） */
+const solveAcwChallenge = (html, url) => {
+	const arg1 = html.match(/arg1\s*=\s*['"]([0-9A-Fa-f]{40})['"]/)?.[1];
+	if (!arg1) return false;
+	cookieJar.set(new URL(url).hostname, "acw_sc__v2", calcAcwScV2(arg1));
+	return true;
+};
+let lastRequestAt = 0;
+/** 全局限速：相邻请求间隔至少1秒（模块级，同一进程内所有调用共享，属礼貌性限速） */
+async function rateLimit() {
+	await new Promise((resolve) => setTimeout(resolve, Math.max(0, lastRequestAt + 1e3 - Date.now())));
+	lastRequestAt = Date.now();
+}
+const buildHeaders = (url, referer) => {
+	const headers = { "User-Agent": BASE_UA };
+	const cookie = cookieJar.headerFor(url);
+	if (cookie) headers.Cookie = cookie;
+	if (referer) headers.Referer = referer;
+	return headers;
+};
+/** 发送请求，命中WAF挑战页时算出acw_sc__v2后重试（最多3次） */
+const httpSend = async (method, url, ctx, data, referer) => {
+	let body = "";
+	for (let attempt = 0; attempt < 3; attempt++) {
+		const response = await axios.request({
+			method,
+			url,
+			data,
+			headers: buildHeaders(url, referer),
+			timeout: ctx.timeout
+		});
+		cookieJar.addFromResponse(response.headers["set-cookie"], url);
+		body = response.data;
+		if (typeof body !== "string" || !isAcwChallenge(body)) return body;
+		ctx.log(`命中WAF挑战页，计算acw_sc__v2后重试 (${attempt + 1}/3)`);
+		if (!solveAcwChallenge(body, url)) break;
+	}
+	return body;
+};
+/** GET页面文本 */
+const httpGetText = async (url, ctx, referer) => {
+	const body = await httpSend("get", url, ctx, void 0, referer);
+	return typeof body === "string" ? body : String(body ?? "");
+};
+/** 从页面提取key对应的值（'key':value / key=value、引号均可）；不带引号且像变量名的值回查var定义；`@internal` */
+const extractParam = (html, key) => {
+	const m = html.match(new RegExp(`['"]?\\b${key}\\b['"]?\\s*[:=]\\s*(['"]?)([^,'";\\s}]+)`, "i"));
+	if (!m) return null;
+	const [, quote, raw] = m;
+	if (quote) return raw;
+	if (/^[A-Za-z_$][\w$]*$/.test(raw)) return html.match(new RegExp(`var\\s+${raw}\\s*=\\s*['"]([^'"]+)['"]`))?.[1] ?? null;
+	return raw;
+};
+/** 从分享页提取filemoreajax接口所需参数 */
+const prepareData = async (url, pwd, ctx) => {
+	ctx.log(`正在获取分享页: ${url}`);
+	const html = await httpGetText(url, ctx);
+	const get = (key) => extractParam(html, key);
+	const fid = get("fid");
+	const t = get("t") ?? html.match(/var\s+\w+\s*=\s*['"](\d{10})['"]/)?.[1];
+	const k = get("k");
+	if (!fid || !t || !k) throw new Error(`无法从页面提取必要参数 fid=${fid}, t=${t}, k=${k}`);
+	return {
+		lx: get("lx") ?? "2",
+		fid,
+		uid: get("uid") ?? "0",
+		rep: get("rep") ?? "0",
+		t,
+		k,
+		up: get("up") ?? "1",
+		ls: get("ls") ?? "1",
+		pwd
+	};
+};
+/** 请求单页文件列表：zt=1返回文件，zt=2返回[]，其他情况返回null（由调用方重试） */
+const fetchFilePage = async (data, pg, host, ctx) => {
+	const hosts = FALLBACK_HOSTS.includes(host) ? FALLBACK_HOSTS : [host, ...FALLBACK_HOSTS];
+	for (const h of hosts) try {
+		ctx.log(`请求文件列表 第${pg}页 @ ${h}`);
+		const result = await httpSend("post", `https://${h}/filemoreajax.php`, ctx, new URLSearchParams({
+			...data,
+			pg: String(pg)
+		}));
+		if (!result || typeof result.zt === "undefined") continue;
+		if (result.zt === 1) return result.text;
+		if (result.zt === 2) return [];
+		ctx.log(`触发频率限制或未知状态(zt=${result.zt}): ${result.info}`);
+		return null;
+	} catch (error) {
+		ctx.log(`域名 ${h} 请求失败: ${error.message}`);
+	}
+	return null;
+};
+/** 翻页获取全部文件，单页失败最多重试4次 */
+const getAllFileList = async (url, pwd, ctx) => {
+	const data = await prepareData(url, pwd, ctx);
+	const host = new URL(url).host;
+	const files = [];
+	for (let pg = 1;; pg++) {
+		let page = null;
+		for (let retry = 0; retry < 4 && page === null; retry++) {
+			await rateLimit();
+			page = await fetchFilePage(data, pg, host, ctx);
+		}
+		if (!page?.length) return files;
+		ctx.log(`第${pg}页获取到 ${page.length} 个文件`);
+		files.push(...page);
+	}
+};
+/** 处理下载跳转页，提取最终直链 */
+const processDownloadPage = async (tp, host, filePageUrl, ctx) => {
+	const tpUrl = /^https?:\/\//i.test(tp) ? tp : `https://${host}${tp}`;
+	const tpHtml = await httpGetText(tpUrl, ctx, filePageUrl);
+	const vkjxld = tpHtml.match(/var\s+vkjxld\s*=\s*'([^']+)'/)?.[1];
+	const hyggid = tpHtml.match(/var\s+hyggid\s*=\s*'([^']+)'/)?.[1];
+	const found = (vkjxld && hyggid ? vkjxld + hyggid : null) ?? tpHtml.match(/var\s+\w+\s*=\s*'(https?:\/\/[^']+\/file\/[^']*)'/)?.[1] ?? tpHtml.match(/<iframe[^>]+src="([^"]+)"/)?.[1];
+	if (!found) throw new Error("无法从下载页提取跳转参数(vkjxld/hyggid)");
+	const finalPageUrl = /^https?:\/\//i.test(found) ? found : new URL(found, tpUrl).href;
+	ctx.log(`获取最终下载页: ${finalPageUrl}`);
+	const finalHtml = await httpGetText(finalPageUrl, ctx, tpUrl);
+	const link = finalHtml.match(/location\.(?:href\s*=|replace\()\s*["']([^"']+)["']/)?.[1] ?? finalHtml.match(/<a\s+href="(https?:\/\/[^"]+)"/)?.[1] ?? finalHtml.match(/href="(https?:\/\/[^"]+download[^"]*)"/i)?.[1];
+	if (!link) throw new Error("最终页面未找到下载直链");
+	return /^https?:\/\//i.test(link) ? link : new URL(link, finalPageUrl).href;
+};
+/** 获取单个文件的最终下载链接，失败抛出异常 */
+const getFinalLink = async (id, host, ctx, referer) => {
+	const filePageUrl = `https://${host}/${id}`;
+	const html = await httpGetText(filePageUrl, ctx, referer);
+	if (isAcwChallenge(html)) throw new Error("文件页被WAF拦截且挑战破解失败");
+	const tp = html.match(/<a[^>]+href="([^"]+)"[^>]*id="downurl"/)?.[1] ?? html.match(/<a[^>]+id="downurl"[^>]+href="([^"]+)"/)?.[1] ?? html.match(/<iframe[^>]+src="([^"]+)"/)?.[1];
+	if (!tp) throw new Error("文件页未找到下载入口(downurl)，页面可能需要密码或结构已变更");
+	ctx.log(`文件 ${id} 跳转链接: ${tp}`);
+	return processDownloadPage(tp, host, filePageUrl, ctx);
+};
+const TIME_UNITS = {
+	秒: 1e3,
+	分钟: 6e4,
+	小时: 36e5,
+	天: 864e5
+};
+/** 站点时间字符串转时间戳（相对"3 小时前"/"昨天 20:31"/"刚刚"与绝对"2026-08-30"均支持），无法解析返回0 */
+const parseSiteTime = (raw) => {
+	const rel = raw.match(/(\d+)\s*(秒|分钟|小时|天)前/);
+	if (rel) return Date.now() - +rel[1] * TIME_UNITS[rel[2]];
+	const day = raw.match(/(昨天|前天)\s*(\d{1,2}):(\d{2})/);
+	if (day) {
+		const d = /* @__PURE__ */ new Date(Date.now() - (day[1] === "昨天" ? 1 : 2) * 864e5);
+		d.setHours(+day[2], +day[3], 0, 0);
+		return +d;
+	}
+	if (raw.includes("刚刚")) return Date.now();
+	const s = raw.replace(/\//g, "-");
+	return +new Date(/^\d{4}-\d{2}-\d{2}$/.test(s) ? `${s} 00:00` : s) || 0;
+};
+/** 时间戳统一格式化为 "YYYY-MM-DD HH:mm" */
+const fmtTime = (ts) => {
+	const d = new Date(ts);
+	const p = (n) => String(n).padStart(2, "0");
+	return `${d.getFullYear()}-${p(d.getMonth() + 1)}-${p(d.getDate())} ${p(d.getHours())}:${p(d.getMinutes())}`;
+};
+/** 站点时间统一为 "YYYY-MM-DD HH:mm"，无法解析则原样返回 */
+const absTime = (raw) => {
+	const ts = parseSiteTime(raw);
+	return ts ? fmtTime(ts) : raw;
+};
+const buildCtx = (options) => ({
+	log: options.debug ? (message) => console.log(message) : () => {},
+	timeout: options.timeout ?? DEFAULT_TIMEOUT
+});
+/**
+* 获取蓝奏云文件夹中所有文件的信息和直链
+*
+* 永不抛出异常：整体失败返回 `[]`，单个文件直链获取失败时该项 `directLink` 为 `null` 并附 `error` 说明。
+*
+* @param url - 蓝奏云分享URL
+* @param options - 可选配置（密码 / 调试日志 / 超时）
+*/
+const getLanzouFiles = async (url, options = {}) => {
+	const ctx = buildCtx(options);
+	try {
+		const host = new URL(url).host;
+		const fileList = await getAllFileList(url, options.pwd ?? "", ctx);
+		if (!fileList.length) {
+			ctx.log("未找到文件或文件列表为空");
+			return [];
+		}
+		ctx.log(`共 ${fileList.length} 个文件，开始获取直链`);
+		const results = [];
+		for (const [index, file] of fileList.entries()) {
+			ctx.log(`(${index + 1}/${fileList.length}) ${file.name_all}`);
+			await rateLimit();
+			try {
+				const directLink = await getFinalLink(file.id, host, ctx, url);
+				results.push({
+					fileName: file.name_all,
+					fileSize: file.size,
+					updateTime: file.time ? absTime(file.time) : void 0,
+					directLink
+				});
+				ctx.log(`✓ ${file.name_all} 直链获取成功`);
+			} catch (error) {
+				ctx.log(`✗ ${file.name_all} 直链获取失败: ${error.message}`);
+				results.push({
+					fileName: file.name_all,
+					fileSize: file.size,
+					updateTime: file.time ? absTime(file.time) : void 0,
+					directLink: null,
+					error: error.message
+				});
+			}
+		}
+		ctx.log(`完成：${results.filter((f) => f.directLink).length}/${fileList.length} 个直链获取成功`);
+		return results;
+	} catch (error) {
+		ctx.log(`获取蓝奏云文件失败: ${error.message}`);
+		return [];
+	}
+};
+/** 检测URL是否为有效的蓝奏云分享链接 */
+const checkLanzouUrl = (url) => {
+	return /https?:\/\/[\w.-]+\.(?:lanzou[a-z]?|lanzn|lanpw|lanpv|lanzv)\.com\/\w+/i.test(url) ? { valid: true } : {
+		valid: false,
+		message: "URL不是有效的蓝奏云链接，蓝奏云域名包括：lanzou*.com、lanzn.com等"
+	};
+};
+/**
+* 只取更新时间最新的文件：仅用列表比较时间，只为该文件请求直链，其余文件不发任何请求
+*
+* 失败返回 `null`，不抛出异常。
+*
+* @param url - 蓝奏云分享URL
+* @param options - 可选配置（密码 / 调试日志 / 超时）
+*/
+const getLatestFile = async (url, options = {}) => {
+	const ctx = buildCtx(options);
+	try {
+		const host = new URL(url).host;
+		const fileList = await getAllFileList(url, options.pwd ?? "", ctx);
+		if (!fileList.length) return null;
+		const newest = fileList.reduce((a, b) => parseSiteTime(b.time ?? "") > parseSiteTime(a.time ?? "") ? b : a);
+		ctx.log(`最新文件: ${newest.name_all}，获取其直链`);
+		await rateLimit();
+		const directLink = await getFinalLink(newest.id, host, ctx, url);
+		ctx.log(`✓ ${newest.name_all} 直链获取成功`);
+		return {
+			fileName: newest.name_all,
+			fileSize: newest.size,
+			updateTime: newest.time ? absTime(newest.time) : void 0,
+			directLink
+		};
+	} catch (error) {
+		ctx.log(`获取最新文件失败: ${error.message}`);
+		return null;
+	}
+};
+//#endregion
+export { BASE_UA, CookieJar, absTime, calcAcwScV2, checkLanzouUrl, extractParam, getLanzouFiles, getLatestFile, parseSiteTime, resetCookies };

package/package.json

@@ -0,0 +1,67 @@
+{
+  "name": "lanzou",
+  "version": "0.1.0",
+  "description": "蓝奏云分享链接解析库：文件列表 + 直链提取，自动处理 acw_sc__v2 WAF 挑战、密码分享、翻页与域名回退",
+  "type": "module",
+  "main": "./dist/index.cjs",
+  "module": "./dist/index.mjs",
+  "types": "./dist/index.d.mts",
+  "exports": {
+    ".": {
+      "import": {
+        "types": "./dist/index.d.mts",
+        "default": "./dist/index.mjs"
+      },
+      "require": {
+        "types": "./dist/index.d.cts",
+        "default": "./dist/index.cjs"
+      }
+    },
+    "./package.json": "./package.json"
+  },
+  "files": [
+    "dist",
+    "README.md",
+    "LICENSE"
+  ],
+  "sideEffects": false,
+  "engines": {
+    "node": ">=18"
+  },
+  "scripts": {
+    "build": "tsdown",
+    "test": "vitest run",
+    "example": "tsx examples/demo.ts",
+    "format": "prettier --write .",
+    "prepublishOnly": "npm run build && npm test"
+  },
+  "keywords": [
+    "lanzou",
+    "蓝奏云",
+    "lanzouyun",
+    "direct-link",
+    "download",
+    "scraper",
+    "crawler",
+    "acw_sc__v2"
+  ],
+  "author": "",
+  "license": "MIT",
+  "dependencies": {
+    "axios": "^1.7.0"
+  },
+  "prettier": {
+    "semi": false,
+    "singleQuote": true,
+    "trailingComma": "all",
+    "printWidth": 120
+  },
+  "devDependencies": {
+    "@types/node": "^26.6.2",
+    "prettier": "^3.9.9",
+    "tsdown": "^0.23.0",
+    "tsx": "^4.23.15",
+    "typescript": "^7.0.2",
+    "vitest": "^5.0.1"
+  }
+}