[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_96":95,"_32":45,"_105":86,"_27":106,"_13":14,"_107":-5,"_11":108,"_109":110,"_111":112,"_113":114,"_115":116,"_20":-5,"_117":-5,"_118":-5,"_119":25,"_120":121,"_122":58,"_123":-5,"_124":-5,"_125":126},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":79,"_80":81,"_82":83,"_84":25},"version",10,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","main.ts","latestPath","fileId","8ccfaef4-a125-11f1-8fe1-1607ee4eb77e","name","fileType","script","content","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 这里填你的东西 ============\nconst DISCORD_TOKEN = \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY = \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL = \"https://temp.val.run\"; // 部署后改成你的 Val.town URL\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\"; // 自己随便设\n// ============ 上面填完就不用改了 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n OPTIONS: [\n { label: \"无\", role_id: null },\n { label: \"hh\", role_id: \"1542060187152678943\" },\n { label: \"ce1\", role_id: \"1542060187152678943\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组\",\n QUESTION2_FILE_LABEL: \"如果你选择了非“无”的选项，请上传对应的凭证图片\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY)\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", encoder.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n}\n\nasync function sendReviewMessage(content, files, userId, type, optionIndex = null) {\n const formData = new FormData();\n formData.append(\"content\", content);\n const components = [\n {\n type: 1,\n components: [\n { type: 2, custom_id: `approve_${type}_${userId}${type === \"q2\" ? `_${optionIndex}` : \"\"}`, label: `✅ 通过${type === \"q1\" ? \"问题1\" : \"问题2\"}`, style: 3 },\n { type: 2, custom_id: `reject_${type}_${userId}${type === \"q2\" ? `_${optionIndex}` : \"\"}`, label: `❌ 拒绝${type === \"q1\" ? \"问题1\" : \"问题2\"}`, style: 4 },\n ],\n },\n ];\n formData.append(\"components\", JSON.stringify(components));\n for (const file of files) {\n formData.append(\"files\", new Blob([file.buffer], { type: file.mimetype }), file.filename);\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.member.user.id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `请点击下方链接进入上传页面（仅你自己可见，${CONFIG.UPLOAD_LINK_TTL_MINUTES}分钟内有效）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n return { type: 4, data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得身份组` } };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{ type: 1, components: [{ type: 4, custom_id: \"reason\", label: \"请输入拒绝理由\", style: 2, required: true }] }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n return { type: 4, data: { content: `✅ 已通过问题2，<@${targetUserId}> 获得了「${option.label}」` } };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: \"拒绝理由\",\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{ type: 1, components: [{ type: 4, custom_id: \"reason\", label: \"请输入拒绝理由\", style: 2, required: true }] }],\n },\n };\n }\n\n return { type: 4, data: { content: \"未知操作\" } };\n}\n\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n message = `❌ 你的问题2被拒绝了。\\n理由：${reason}`;\n }\n\n await fetch(`${DISCORD_API}/channels/${CONFIG.BUFFER_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `<@${targetUserId}> ${message}`, flags: 64 }),\n });\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\nasync function handleCommand(interaction) {\n const { name } = interaction.data;\n const channelId = interaction.channel_id;\n\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n const res = await fetch(`${DISCORD_API}/channels/${channelId}/messages?limit=1`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n const firstMessage = messages[0];\n if (!firstMessage) return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n const link = `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return { type: 4, data: { content: `[点击回到第一条消息](${link})`, flags: 64 } };\n }\n return { type: 4, data: { content: \"未知命令\" } };\n}\n\nfunction generateUploadPage(token) {\n const options = CONFIG.OPTIONS.map((opt, i) => ``).join(\"\");\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndex = parseInt(formData.get(\"option_index\"));\n const file2 = formData.get(\"file2\");\n\n if (!token || !file1 || isNaN(optionIndex)) return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n const parts = token.split(\".\");\n if (parts.length !== 2) return Response.json({ error: \"无效的token\" }, { status: 400 });\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) return Response.json({ error: \"无效的token\" }, { status: 400 });\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) return Response.json({ error: \"无效的token\" }, { status: 401 });\n if (Date.now() > parseInt(expireStr)) return Response.json({ error: \"token已过期\" }, { status: 401 });\n const userId = userIdStr;\n\n const files = [{ buffer: await file1.arrayBuffer(), mimetype: file1.type, filename: file1.name }];\n const option = CONFIG.OPTIONS[optionIndex];\n if (optionIndex !== 0 && !file2) return Response.json({ error: \"选择了专属分组时必须上传凭证文件\" }, { status: 400 });\n if (optionIndex !== 0 && file2) files.push({ buffer: await file2.arrayBuffer(), mimetype: file2.type, filename: file2.name });\n\n const content1 = `📥 **新的提交**\\n用户：<@${userId}>\\n\\n**问题1上传的文件：** ${file1.name}`;\n await sendReviewMessage(content1, [files[0]], userId, \"q1\");\n\n let content2 = `📥 **新的提交**\\n用户：<@${userId}>\\n\\n**问题2选择：** ${option.label}`;\n let filesForQ2 = [];\n if (optionIndex !== 0 && file2) {\n content2 += `\\n**凭证文件：** ${file2.name}`;\n filesForQ2 = [files[1]];\n }\n await sendReviewMessage(content2, filesForQ2, userId, \"q2\", optionIndex);\n return Response.json({ success: true });\n}\n\nexport default async function(req) {\n const url = new URL(req.url);\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), { headers: { \"Content-Type\": \"text/html\" } });\n }\n if (url.pathname === \"/upload\" && req.method === \"POST\") return await handleUpload(req);\n if (url.pathname === \"/register\") {\n const res = await fetch(`${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify([{ name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" }]),\n });\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", { status: res.ok ? 200 : 500 });\n }\n if (req.method !== \"POST\") return new Response(\"Method not allowed\", { status: 405 });\n if (!(await verifyRequest(req))) return new Response(\"Invalid signature\", { status: 401 });\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) return Response.json(await handleReasonModal(body));\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\"; // 改成你的 Val.town URL\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\"; // 私密仓库频道 ID（文件、日志、用户状态都存这里）\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n DELETE_COMMAND: \"删除帖子\",\n\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\n\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n // 在 JPEG 末尾追加文本（EOI 标记后）\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n // 简化：在文件末尾追加注释（ZIP 标准允许，但某些解析器可能忽略）\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null; // 不支持的类型返回 null，后续在文件名加 ID\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n // PNG 结构：8字节签名 + 多个chunk (length + type + data + CRC)\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 私密仓库操作 ============\n\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\"content\", `FILE|${channelId}|${fileName}`);\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content =\n `DOWNLOAD_LOG|${Date.now()}|${userId}|${fileName}|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\n// ============ 审核消息发送（新） ============\n\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n // selectedOptions: [{ index, label, role_id, fileName, fileBuffer, mimetype }]\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n // 附件：问题2的多个文件（如果选项上传了文件）\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 处理上传 ============\n\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\"); // 逗号分隔的选中项索引\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1 || optionIndices.length === 0) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n // 验证 token\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n // 检查用户状态\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"approved\") {\n return Response.json({ error: \"你已通过审核，不能再次提交\" }, {\n status: 403,\n });\n }\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, {\n status: 403,\n });\n }\n\n // 文件处理\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n // 问题2 的选中项及文件\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n if (fileField) {\n const buf = await fileField.arrayBuffer();\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: fileField.name,\n fileBuffer: buf,\n mimetype: fileField.type || \"application/octet-stream\",\n });\n } else {\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: null,\n fileBuffer: null,\n mimetype: null,\n });\n }\n }\n }\n\n // 更新用户状态为 pending\n await updateUserStatus(userId, \"pending\", 0);\n\n // 发送问题1审核消息\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n\n // 发送问题2审核消息\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n\n return Response.json({ success: true });\n}\n\n// ============ 审核按钮处理 ============\n\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.member.user.id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n // 审核通过/拒绝逻辑（保留原样，但处理多选问题2）\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n return {\n type: 4,\n data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组` },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n // 不改变整体状态，仅记录（可保持pending直到全部通过，但这里简化）\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n // 下载按钮处理（点赞验证）\n if (customId.startsWith(\"download_\")) {\n const postMessageId = customId.replace(\"download_\", \"\");\n // 检查点赞：获取帖子消息的反应\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${interaction.channel_id}/messages/${postMessageId}/reactions/%E2%9C%85`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n if (reactionsRes.ok) {\n // 实际上应该用 GET /channels/{channel.id}/messages/{message.id}/reactions/{emoji}?limit=100 并检查用户\n // 简单处理：假设赞的 emoji 是 ✅，需要进一步解析，这里省略，实际需验证\n }\n // 由于时间有限，这里返回提示，实际需完整实现\n return { type: 4, data: { content: \"请先给帖子点赞\", flags: 64 } };\n }\n\n return { type: 4, data: { content: \"未知操作\" } };\n}\n\n// ============ 拒绝理由处理 ============\n\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n // 不改变整体状态，只通知\n }\n\n await fetch(`${DISCORD_API}/channels/${CONFIG.BUFFER_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `<@${targetUserId}> ${message}`,\n flags: 64,\n }),\n });\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理（含斜杠命令和上下文菜单） ============\n\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.member.user.id;\n\n // 消息上下文菜单\n if (type === 2 && name === CONFIG.MARK_COMMAND) {\n // 标注：Pin 消息\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 2 && name === CONFIG.DELETE_COMMAND) {\n // 删除帖子：仅作者可删\n const msgRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${target_id}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const msg = await msgRes.json();\n if (msg.author.id !== userId) {\n return { type: 4, data: { content: \"你只能删除自己的帖子\", flags: 64 } };\n }\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${target_id}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"帖子已删除\", flags: 64 } };\n }\n\n // 斜杠命令\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n // 打开上传页面\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击链接上传文件（仅自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n // 列出当前频道的文件（简化：直接提示输入文件名）\n return {\n type: 4,\n data: { content: \"下载功能请点击帖子上的下载按钮\", flags: 64 },\n };\n }\n }\n\n return { type: 4, data: { content: \"未知命令\" } };\n}\n\n// ============ 上传页面 ============\n\nfunction generateUploadPage(token) {\n // 多选复选框和文件上传框\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并创建帖子\",\n options: [\n {\n type: 11,\n name: \"文件\",\n description: \"要上传的文件\",\n required: true,\n },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 2 }, // 消息上下文菜单\n { name: CONFIG.DELETE_COMMAND, type: 2 },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","createdAt",["D",1788328529580],"branchVersion","branchId","170b1e01-d0e0-4908-90ff-5484ab0467d7","id","285e8165-b722-44c5-8aa4-0fc89d86ada2","bot",["D",1787731807282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","255b2f83-e7b2-4458-bc35-1a4c8d1e079c","pinnedFileId","fd23803a-a126-11f1-a35f-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03d1c-10cf-70bf-8aaf-c7f2fcd355c4","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_96":95,"_104":100},"org",{"_96":95,"_97":98,"_99":100,"_18":54,"_101":102,"_103":25},"branch",{"_13":85,"_32":86,"_43":42,"_87":44,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":45,"_94":95},"isOwned",92,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kuuo1","handle","displayName","MY A","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLrPm5UHQCjxA3s4XozO23tRsnDQxGkAfvSdLQJNQvEuNm=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":-5,"_66":-5,"_67":-5,"_68":-5,"_69":70,"_71":70,"_72":73,"_74":73,"_75":73,"_76":70,"_77":70,"_78":165,"_80":166,"_82":167,"_84":25},"tree",[155,156],"files",[155,156],"counts",{"_144":62,"_145":146,"_147":62,"_148":149,"_150":151},"contents",[127,128],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":140,"_32":28,"_30":31,"_131":-5,"_41":42,"_40":14,"_133":58,"_38":141,"_13":142,"_33":34,"_35":37,"_24":25,"_138":-5,"_27":143},{"_43":129,"_32":130,"_30":56,"_131":-5,"_41":42,"_40":132,"_133":25,"_38":134,"_13":135,"_33":136,"_35":137,"_24":25,"_138":-5,"_27":139},"0b3db408-4628-4643-9418-cb4c314a5bee","new-file-9816.ts","parentId",9,"latest",["D",1787735027470],6,"http","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\nconst DISCORD_TOKEN = \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY = \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL = \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\";\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n OPTIONS: [\n { label: \"无\", role_id: null },\n { label: \"hh\", role_id: \"1542060187152678943\" },\n { label: \"ce1\", role_id: \"1542060187152678943\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组\",\n QUESTION2_FILE_LABEL: \"如果你选择了非“无”的选项，请上传对应的凭证图片\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY)\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\"raw\", encoder.encode(secret), { name: \"HMAC\", hash: \"SHA-256\" }, false, [\"sign\"]);\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n}\n\nasync function sendReviewMessage(content, files, userId, type, optionIndex = null) {\n const payload = {\n content: content,\n components: [\n {\n type: 1,\n components: [\n { type: 2, custom_id: `approve_${type}_${userId}${type === \"q2\" ? `_${optionIndex}` : \"\"}`, label: `✅ 通过${type === \"q1\" ? \"问题1\" : \"问题2\"}`, style: 3 },\n { type: 2, custom_id: `reject_${type}_${userId}${type === \"q2\" ? `_${optionIndex}` : \"\"}`, label: `❌ 拒绝${type === \"q1\" ? \"问题1\" : \"问题2\"}`, style: 4 },\n ],\n },\n ],\n };\n\n if (files.length > 0) {\n const formData = new FormData();\n formData.append(\"payload_json\", JSON.stringify(payload));\n for (const file of files) {\n formData.append(\"files\", new Blob([file.buffer], { type: file.mimetype }), file.filename);\n }\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`审核消息发送失败 (${res.status}): ${text}`);\n }\n } else {\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(payload),\n });\n if (!res.ok) {\n const text = await res.text();\n throw new Error(`审核消息发送失败 (${res.status}): ${text}`);\n }\n }\n}\n\nasync function sendButtonMessage() {\n const channelId = CONFIG.BUFFER_CHANNEL_ID;\n const res = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: CONFIG.BUTTON_MESSAGE_CONTENT,\n components: [\n {\n type: 1,\n components: [\n { type: 2, custom_id: \"open_upload_modal\", label: CONFIG.UPLOAD_BUTTON_LABEL, style: 1 },\n ],\n },\n ],\n }),\n });\n return res.ok;\n}\n\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.member.user.id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `请点击下方链接进入上传页面（仅你自己可见，${CONFIG.UPLOAD_LINK_TTL_MINUTES}分钟内有效）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n return { type: 4, data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得身份组` } };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{ type: 1, components: [{ type: 4, custom_id: \"reason\", label: \"请输入拒绝理由\", style: 2, required: true }] }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n return { type: 4, data: { content: `✅ 已通过问题2，<@${targetUserId}> 获得了「${option.label}」` } };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: \"拒绝理由\",\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{ type: 1, components: [{ type: 4, custom_id: \"reason\", label: \"请输入拒绝理由\", style: 2, required: true }] }],\n },\n };\n }\n\n return { type: 4, data: { content: \"未知操作\" } };\n}\n\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n message = `❌ 你的问题2被拒绝了。\\n理由：${reason}`;\n }\n\n await fetch(`${DISCORD_API}/channels/${CONFIG.BUFFER_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `<@${targetUserId}> ${message}`, flags: 64 }),\n });\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\nasync function handleCommand(interaction) {\n const { name } = interaction.data;\n const channelId = interaction.channel_id;\n\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else {\n before = messages[messages.length - 1].id;\n }\n }\n if (!firstMessage) return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n const link = `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return { type: 4, data: { content: `[点击回到第一条消息](${link})`, flags: 64 } };\n }\n return { type: 4, data: { content: \"未知命令\" } };\n}\n\nfunction generateUploadPage(token) {\n const options = CONFIG.OPTIONS.map((opt, i) => ``).join(\"\");\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

Diff · v10