[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":57,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",30,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","new-file-9816.ts","latestPath","fileId","fd23803a-a126-11f1-a35f-1607ee4eb77e","name","fileType","http","content","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\";\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\";\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null;\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 仓库操作 ============\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\n \"content\",\n `FILE|${channelId}|${encodeURIComponent(fileName)}`,\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content = `DOWNLOAD_LOG|${Date.now()}|${userId}|${\n encodeURIComponent(fileName)\n }|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\n// ============ 审核消息发送 ============\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 审核上传处理 ============\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\");\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1 || optionIndices.length === 0) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"approved\") {\n return Response.json({ error: \"你已通过审核，不能再次提交\" }, {\n status: 403,\n });\n }\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, {\n status: 403,\n });\n }\n\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n let fileBuffer = null, fileMime = null, fileName = null;\n if (fileField) {\n fileBuffer = await fileField.arrayBuffer();\n fileMime = fileField.type || \"application/octet-stream\";\n fileName = fileField.name;\n }\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileBuffer,\n fileMime,\n fileName,\n });\n }\n }\n\n await updateUserStatus(userId, \"pending\", 0);\n\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n\n return Response.json({ success: true });\n}\n\n// ============ 文件上传（/上传命令） ============\nasync function handleFileUploadCommand(interaction) {\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const options = interaction.data.options || [];\n const descOpt = options.find((o) => o.name === \"描述\");\n const description = descOpt ? descOpt.value : \"\";\n\n const fileOptions = options.filter((o) => o.type === 11 && o.value);\n if (fileOptions.length === 0) {\n return { type: 4, data: { content: \"请至少上传一个文件\", flags: 64 } };\n }\n\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n\n const uploadedFiles = [];\n for (const fileOpt of fileOptions) {\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) continue;\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) {\n return {\n type: 4,\n data: {\n content: `下载文件 ${fileAttachment.filename} 失败`,\n flags: 64,\n },\n };\n }\n const fileBuffer = await fileRes.arrayBuffer();\n const fileName = fileAttachment.filename || \"未命名文件\";\n const mimetype = fileAttachment.content_type || \"application/octet-stream\";\n\n const saved = await saveFileToRepo(\n channelId,\n fileName,\n fileBuffer,\n mimetype,\n );\n if (!saved) {\n return {\n type: 4,\n data: { content: `文件 ${fileName} 保存失败`, flags: 64 },\n };\n }\n uploadedFiles.push({\n repoMsgId: saved.id,\n fileName,\n mimetype,\n });\n }\n\n if (uploadedFiles.length === 0) {\n return { type: 4, data: { content: \"没有有效的文件被上传\", flags: 64 } };\n }\n\n const now = new Date();\n const timeStr = `${now.getFullYear()}年${\n now.getMonth() + 1\n }月${now.getDate()}日 ${now.getHours()}时${now.getMinutes()}分`;\n const postContent =\n `📄 **文件上传**\\n作者：<@${userId}>\\n发布时间：${timeStr}\\n描述：${\n description || \"无\"\n }\\n🔒 请给本帖子主楼点赞（👍）后点击下载按钮`;\n\n // 构建下载按钮（单文件直接下载，多文件弹出选择菜单）\n let downloadCustomId;\n if (uploadedFiles.length === 1) {\n downloadCustomId = `download_${uploadedFiles[0].repoMsgId}`;\n } else {\n downloadCustomId = \"download_multi\";\n }\n\n const components = [{\n type: 1,\n components: [\n {\n type: 2,\n custom_id: downloadCustomId,\n label: \"📥 下载\",\n style: 1,\n },\n ],\n }];\n\n const postRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: postContent,\n components: components,\n }),\n });\n const postMsg = await postRes.json();\n\n if (!postMsg.id) {\n console.error(\"Failed to create post message:\", postMsg);\n return {\n type: 4,\n data: { content: \"帖子创建失败，请稍后再试\", flags: 64 },\n };\n }\n\n // 更新每个仓库消息的 content，包含帖子 ID（这里存储机器人回复消息 ID，但下载时不再使用，保留兼容）\n for (const f of uploadedFiles) {\n const updateRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${f.repoMsgId}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `FILE|${channelId}|${\n encodeURIComponent(f.fileName)\n }|${postMsg.id}`,\n }),\n },\n );\n if (!updateRes.ok) {\n console.error(\n `Failed to update repo message ${f.repoMsgId}:`,\n await updateRes.text(),\n );\n }\n }\n\n return {\n type: 4,\n data: {\n content: `已上传 ${uploadedFiles.length} 个文件，帖子已创建`,\n flags: 64,\n },\n };\n}\n\n// ============ 下载功能（按钮和 /下载共用） ============\nasync function handleDownload(interaction, targetRepoMsgId = null) {\n const customId = interaction.data.custom_id || null;\n const channelId = interaction.channel_id; // 在论坛帖子中，这就是线程 ID\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (!userId) {\n console.error(\"User ID not found in interaction:\", interaction);\n return {\n type: 4,\n data: { content: \"无法识别用户，请稍后再试\", flags: 64 },\n };\n }\n\n let repoMsgId = targetRepoMsgId;\n if (!repoMsgId && customId) {\n if (customId === \"download_multi\") {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n } else {\n repoMsgId = customId.replace(\"download_\", \"\");\n }\n }\n\n if (!repoMsgId) {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n if (files.length === 1) {\n repoMsgId = files[0].repoMsgId;\n } else {\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n }\n }\n\n // 获取仓库消息\n const repoRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${repoMsgId}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const repoMsg = await repoRes.json();\n if (!repoMsg || !repoMsg.content) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const parts = repoMsg.content.split(\"|\");\n if (parts.length < 4) {\n console.error(\"Invalid repo message content:\", repoMsg.content);\n return {\n type: 4,\n data: { content: \"文件信息损坏，请联系管理员\", flags: 64 },\n };\n }\n\n // ===== 修改开始：获取主楼消息 ID 并检查点赞 =====\n // 通过线程 ID 获取主楼消息（起始消息）\n let mainMessageId;\n try {\n // 获取该线程的消息列表，最早的消息就是主楼\n // 由于消息按时间倒序排列，我们获取 limit=100，取数组最后一个元素\n const threadMessagesRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n if (!threadMessagesRes.ok) {\n console.error(\n `Failed to fetch thread messages: ${threadMessagesRes.status}`,\n await threadMessagesRes.text(),\n );\n return {\n type: 4,\n data: { content: \"无法读取帖子消息，请检查机器人权限\", flags: 64 },\n };\n }\n const threadMessages = await threadMessagesRes.json();\n if (!Array.isArray(threadMessages) || threadMessages.length === 0) {\n return { type: 4, data: { content: \"帖子中没有消息\", flags: 64 } };\n }\n // 主楼是第一条消息，即数组最后一个（因为倒序）\n mainMessageId = threadMessages[threadMessages.length - 1].id;\n } catch (error) {\n console.error(\"Error fetching main message:\", error);\n return { type: 4, data: { content: \"获取帖子主楼失败\", flags: 64 } };\n }\n\n // 检查主楼消息的 👍 反应\n const emoji = encodeURIComponent(\"👍\");\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${mainMessageId}/reactions/${emoji}?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n\n if (!reactionsRes.ok) {\n const errorText = await reactionsRes.text();\n console.error(\n `Reaction check failed (status ${reactionsRes.status}):`,\n errorText,\n );\n if (reactionsRes.status === 404) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n if (reactionsRes.status === 403) {\n return {\n type: 4,\n data: {\n content: \"机器人缺少读取消息反应的权限，请联系管理员\",\n flags: 64,\n },\n };\n }\n return {\n type: 4,\n data: { content: \"无法检查点赞状态，请稍后再试\", flags: 64 },\n };\n }\n\n const users = await reactionsRes.json();\n if (!Array.isArray(users)) {\n console.error(\"Unexpected reaction response:\", users);\n return {\n type: 4,\n data: { content: \"点赞检查异常，请稍后再试\", flags: 64 },\n };\n }\n\n const hasLiked = users.some((u) => u.id === userId);\n console.log(\n `Download attempt by user ${userId}, liked main post: ${hasLiked}, reactor IDs:`,\n users.map((u) => u.id),\n );\n if (!hasLiked) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n // ===== 修改结束 =====\n\n // 获取文件附件\n const attachment = repoMsg.attachments?.[0];\n if (!attachment) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const fileRes = await fetch(attachment.url);\n const fileBuffer = await fileRes.arrayBuffer();\n const originalName = decodeURIComponent(parts[2] || attachment.filename);\n const mimetype = attachment.content_type || \"application/octet-stream\";\n\n const watermarkedBuffer = applyWatermark(fileBuffer, mimetype, userId) ||\n fileBuffer;\n const finalName = watermarkedBuffer !== fileBuffer\n ? originalName\n : `${userId}_${originalName}`;\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (!dm.id) {\n return {\n type: 4,\n data: { content: \"无法私信你，请检查隐私设置\", flags: 64 },\n };\n }\n\n const formData = new FormData();\n formData.append(\"content\", `这是你下载的文件：${originalName}`);\n formData.append(\n \"files\",\n new Blob([watermarkedBuffer], { type: mimetype }),\n finalName,\n );\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", fileBuffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\n \"\",\n );\n await logDownload(userId, originalName, hashHex);\n\n return { type: 4, data: { content: \"文件已发送到你的私信\", flags: 64 } };\n}\n\nasync function listFilesInChannel(channelId) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const files = [];\n for (const msg of messages) {\n if (msg.content.startsWith(`FILE|${channelId}|`)) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 4) {\n files.push({\n repoMsgId: msg.id,\n fileName: decodeURIComponent(parts[2]),\n postMessageId: parts[3],\n });\n }\n }\n }\n return files;\n}\n\n// ============ 按钮处理 ============\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n // 处理下载按钮\n if (customId === \"download_multi\" || customId.startsWith(\"download_\")) {\n return await handleDownload(\n interaction,\n customId === \"download_multi\" ? null : customId.replace(\"download_\", \"\"),\n );\n }\n\n // 处理选择菜单\n if (customId === \"select_download\") {\n const selectedRepoMsgId = interaction.data.values?.[0];\n if (!selectedRepoMsgId) {\n return { type: 4, data: { content: \"未选择文件\", flags: 64 } };\n }\n return await handleDownload(interaction, selectedRepoMsgId);\n }\n\n // 审核按钮\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n if (messageId) await disableButtons(channelId, messageId);\n return {\n type: 4,\n data: {\n content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n if (messageId) await disableButtons(channelId, messageId);\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n return { type: 4, data: { content: \"未知操作\", flags: 64 } };\n}\n\nasync function disableButtons(channelId, messageId) {\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${messageId}`, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ components: [] }),\n });\n}\n\n// ============ 拒绝理由处理 ============\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n }\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: targetUserId }),\n });\n const dm = await dmRes.json();\n if (dm.id) {\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content: message }),\n });\n }\n\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n if (messageId) await disableButtons(channelId, messageId);\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理 ============\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (type === 3 && name === CONFIG.MARK_COMMAND) {\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n return await handleFileUploadCommand(interaction);\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n return await handleDownload(interaction, null);\n }\n }\n\n return { type: 4, data: { content: \"未知命令\", flags: 64 } };\n}\n\n// ============ 审核上传网页 ============\nfunction generateUploadPage(token) {\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n

\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并保护\",\n options: [\n {\n type: 11,\n name: \"文件1\",\n description: \"要上传的第一个文件（必需）\",\n required: true,\n },\n {\n type: 11,\n name: \"文件2\",\n description: \"要上传的第二个文件（可选）\",\n required: false,\n },\n {\n type: 11,\n name: \"文件3\",\n description: \"要上传的第三个文件（可选）\",\n required: false,\n },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 3 },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\";\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\";\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：（必填·酒馆通用区）酒馆任意一张卡50楼&temux后台截图、zfb成年女证明\",\n QUESTION2_LABEL: \"问题2：（mf）选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null;\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 仓库操作 ============\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\n \"content\",\n `FILE|${channelId}|${encodeURIComponent(fileName)}`,\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content = `DOWNLOAD_LOG|${Date.now()}|${userId}|${\n encodeURIComponent(fileName)\n }|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\n// ============ 审核消息发送 ============\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 审核上传处理 ============\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\");\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1 || optionIndices.length === 0) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"approved\") {\n return Response.json({ error: \"你已通过审核，不能再次提交\" }, {\n status: 403,\n });\n }\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, {\n status: 403,\n });\n }\n\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n let fileBuffer = null, fileMime = null, fileName = null;\n if (fileField) {\n fileBuffer = await fileField.arrayBuffer();\n fileMime = fileField.type || \"application/octet-stream\";\n fileName = fileField.name;\n }\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileBuffer,\n fileMime,\n fileName,\n });\n }\n }\n\n await updateUserStatus(userId, \"pending\", 0);\n\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n\n return Response.json({ success: true });\n}\n\n// ============ 文件上传（/上传命令） ============\nasync function handleFileUploadCommand(interaction) {\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const options = interaction.data.options || [];\n const descOpt = options.find((o) => o.name === \"描述\");\n const description = descOpt ? descOpt.value : \"\";\n\n const fileOptions = options.filter((o) => o.type === 11 && o.value);\n if (fileOptions.length === 0) {\n return { type: 4, data: { content: \"请至少上传一个文件\", flags: 64 } };\n }\n\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n\n const uploadedFiles = [];\n for (const fileOpt of fileOptions) {\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) continue;\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) {\n return {\n type: 4,\n data: {\n content: `下载文件 ${fileAttachment.filename} 失败`,\n flags: 64,\n },\n };\n }\n const fileBuffer = await fileRes.arrayBuffer();\n const fileName = fileAttachment.filename || \"未命名文件\";\n const mimetype = fileAttachment.content_type || \"application/octet-stream\";\n\n const saved = await saveFileToRepo(\n channelId,\n fileName,\n fileBuffer,\n mimetype,\n );\n if (!saved) {\n return {\n type: 4,\n data: { content: `文件 ${fileName} 保存失败`, flags: 64 },\n };\n }\n uploadedFiles.push({\n repoMsgId: saved.id,\n fileName,\n mimetype,\n });\n }\n\n if (uploadedFiles.length === 0) {\n return { type: 4, data: { content: \"没有有效的文件被上传\", flags: 64 } };\n }\n\n const now = new Date();\n const timeStr = `${now.getFullYear()}年${\n now.getMonth() + 1\n }月${now.getDate()}日 ${now.getHours()}时${now.getMinutes()}分`;\n const postContent =\n `📄 **文件上传**\\n作者：<@${userId}>\\n发布时间：${timeStr}\\n描述：${\n description || \"无\"\n }\\n🔒 请给本帖子主楼点赞（👍）后点击下载按钮`;\n\n // 构建下载按钮（单文件直接下载，多文件弹出选择菜单）\n let downloadCustomId;\n if (uploadedFiles.length === 1) {\n downloadCustomId = `download_${uploadedFiles[0].repoMsgId}`;\n } else {\n downloadCustomId = \"download_multi\";\n }\n\n const components = [{\n type: 1,\n components: [\n {\n type: 2,\n custom_id: downloadCustomId,\n label: \"📥 下载\",\n style: 1,\n },\n ],\n }];\n\n const postRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: postContent,\n components: components,\n }),\n });\n const postMsg = await postRes.json();\n\n if (!postMsg.id) {\n console.error(\"Failed to create post message:\", postMsg);\n return {\n type: 4,\n data: { content: \"帖子创建失败，请稍后再试\", flags: 64 },\n };\n }\n\n // 更新每个仓库消息的 content，包含帖子 ID（这里存储机器人回复消息 ID，但下载时不再使用，保留兼容）\n for (const f of uploadedFiles) {\n const updateRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${f.repoMsgId}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `FILE|${channelId}|${\n encodeURIComponent(f.fileName)\n }|${postMsg.id}`,\n }),\n },\n );\n if (!updateRes.ok) {\n console.error(\n `Failed to update repo message ${f.repoMsgId}:`,\n await updateRes.text(),\n );\n }\n }\n\n return {\n type: 4,\n data: {\n content: `已上传 ${uploadedFiles.length} 个文件，帖子已创建`,\n flags: 64,\n },\n };\n}\n\n// ============ 下载功能（按钮和 /下载共用） ============\nasync function handleDownload(interaction, targetRepoMsgId = null) {\n const customId = interaction.data.custom_id || null;\n const channelId = interaction.channel_id; // 在论坛帖子中，这就是线程 ID\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (!userId) {\n console.error(\"User ID not found in interaction:\", interaction);\n return {\n type: 4,\n data: { content: \"无法识别用户，请稍后再试\", flags: 64 },\n };\n }\n\n let repoMsgId = targetRepoMsgId;\n if (!repoMsgId && customId) {\n if (customId === \"download_multi\") {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n } else {\n repoMsgId = customId.replace(\"download_\", \"\");\n }\n }\n\n if (!repoMsgId) {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n if (files.length === 1) {\n repoMsgId = files[0].repoMsgId;\n } else {\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n }\n }\n\n // 获取仓库消息\n const repoRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${repoMsgId}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const repoMsg = await repoRes.json();\n if (!repoMsg || !repoMsg.content) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const parts = repoMsg.content.split(\"|\");\n if (parts.length < 4) {\n console.error(\"Invalid repo message content:\", repoMsg.content);\n return {\n type: 4,\n data: { content: \"文件信息损坏，请联系管理员\", flags: 64 },\n };\n }\n\n // ===== 修改开始：获取主楼消息 ID 并检查点赞 =====\n // 通过线程 ID 获取主楼消息（起始消息）\n let mainMessageId;\n try {\n // 获取该线程的消息列表，最早的消息就是主楼\n // 由于消息按时间倒序排列，我们获取 limit=100，取数组最后一个元素\n const threadMessagesRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n if (!threadMessagesRes.ok) {\n console.error(\n `Failed to fetch thread messages: ${threadMessagesRes.status}`,\n await threadMessagesRes.text(),\n );\n return {\n type: 4,\n data: { content: \"无法读取帖子消息，请检查机器人权限\", flags: 64 },\n };\n }\n const threadMessages = await threadMessagesRes.json();\n if (!Array.isArray(threadMessages) || threadMessages.length === 0) {\n return { type: 4, data: { content: \"帖子中没有消息\", flags: 64 } };\n }\n // 主楼是第一条消息，即数组最后一个（因为倒序）\n mainMessageId = threadMessages[threadMessages.length - 1].id;\n } catch (error) {\n console.error(\"Error fetching main message:\", error);\n return { type: 4, data: { content: \"获取帖子主楼失败\", flags: 64 } };\n }\n\n // 检查主楼消息的 👍 反应\n const emoji = encodeURIComponent(\"👍\");\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${mainMessageId}/reactions/${emoji}?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n\n if (!reactionsRes.ok) {\n const errorText = await reactionsRes.text();\n console.error(\n `Reaction check failed (status ${reactionsRes.status}):`,\n errorText,\n );\n if (reactionsRes.status === 404) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n if (reactionsRes.status === 403) {\n return {\n type: 4,\n data: {\n content: \"机器人缺少读取消息反应的权限，请联系管理员\",\n flags: 64,\n },\n };\n }\n return {\n type: 4,\n data: { content: \"无法检查点赞状态，请稍后再试\", flags: 64 },\n };\n }\n\n const users = await reactionsRes.json();\n if (!Array.isArray(users)) {\n console.error(\"Unexpected reaction response:\", users);\n return {\n type: 4,\n data: { content: \"点赞检查异常，请稍后再试\", flags: 64 },\n };\n }\n\n const hasLiked = users.some((u) => u.id === userId);\n console.log(\n `Download attempt by user ${userId}, liked main post: ${hasLiked}, reactor IDs:`,\n users.map((u) => u.id),\n );\n if (!hasLiked) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n // ===== 修改结束 =====\n\n // 获取文件附件\n const attachment = repoMsg.attachments?.[0];\n if (!attachment) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const fileRes = await fetch(attachment.url);\n const fileBuffer = await fileRes.arrayBuffer();\n const originalName = decodeURIComponent(parts[2] || attachment.filename);\n const mimetype = attachment.content_type || \"application/octet-stream\";\n\n const watermarkedBuffer = applyWatermark(fileBuffer, mimetype, userId) ||\n fileBuffer;\n const finalName = watermarkedBuffer !== fileBuffer\n ? originalName\n : `${userId}_${originalName}`;\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (!dm.id) {\n return {\n type: 4,\n data: { content: \"无法私信你，请检查隐私设置\", flags: 64 },\n };\n }\n\n const formData = new FormData();\n formData.append(\"content\", `这是你下载的文件：${originalName}`);\n formData.append(\n \"files\",\n new Blob([watermarkedBuffer], { type: mimetype }),\n finalName,\n );\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", fileBuffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\n \"\",\n );\n await logDownload(userId, originalName, hashHex);\n\n return { type: 4, data: { content: \"文件已发送到你的私信\", flags: 64 } };\n}\n\nasync function listFilesInChannel(channelId) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const files = [];\n for (const msg of messages) {\n if (msg.content.startsWith(`FILE|${channelId}|`)) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 4) {\n files.push({\n repoMsgId: msg.id,\n fileName: decodeURIComponent(parts[2]),\n postMessageId: parts[3],\n });\n }\n }\n }\n return files;\n}\n\n// ============ 按钮处理 ============\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n // 处理下载按钮\n if (customId === \"download_multi\" || customId.startsWith(\"download_\")) {\n return await handleDownload(\n interaction,\n customId === \"download_multi\" ? null : customId.replace(\"download_\", \"\"),\n );\n }\n\n // 处理选择菜单\n if (customId === \"select_download\") {\n const selectedRepoMsgId = interaction.data.values?.[0];\n if (!selectedRepoMsgId) {\n return { type: 4, data: { content: \"未选择文件\", flags: 64 } };\n }\n return await handleDownload(interaction, selectedRepoMsgId);\n }\n\n // 审核按钮\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n if (messageId) await disableButtons(channelId, messageId);\n return {\n type: 4,\n data: {\n content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n if (messageId) await disableButtons(channelId, messageId);\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n return { type: 4, data: { content: \"未知操作\", flags: 64 } };\n}\n\nasync function disableButtons(channelId, messageId) {\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${messageId}`, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ components: [] }),\n });\n}\n\n// ============ 拒绝理由处理 ============\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n }\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: targetUserId }),\n });\n const dm = await dmRes.json();\n if (dm.id) {\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content: message }),\n });\n }\n\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n if (messageId) await disableButtons(channelId, messageId);\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理 ============\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (type === 3 && name === CONFIG.MARK_COMMAND) {\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n return await handleFileUploadCommand(interaction);\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n return await handleDownload(interaction, null);\n }\n }\n\n return { type: 4, data: { content: \"未知命令\", flags: 64 } };\n}\n\n// ============ 审核上传网页 ============\nfunction generateUploadPage(token) {\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n

\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并保护\",\n options: [\n {\n type: 11,\n name: \"文件1\",\n description: \"要上传的第一个文件（必需）\",\n required: true,\n },\n {\n type: 11,\n name: \"文件2\",\n description: \"要上传的第二个文件（可选）\",\n required: false,\n },\n {\n type: 11,\n name: \"文件3\",\n description: \"要上传的第三个文件（可选）\",\n required: false,\n },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 3 },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","createdAt",["D",1788346255981],"branchVersion","branchId","170b1e01-d0e0-4908-90ff-5484ab0467d7","id","285e8165-b722-44c5-8aa4-0fc89d86ada2","bot",["D",1787731807282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","255b2f83-e7b2-4458-bc35-1a4c8d1e079c","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03d1c-10cf-70bf-8aaf-c7f2fcd355c4","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",92,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kuuo1","handle","displayName","MY A","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLrPm5UHQCjxA3s4XozO23tRsnDQxGkAfvSdLQJNQvEuNm=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":165,"_79":166,"_81":167,"_83":25},"tree",[155,156],"files",[155,156],"counts",{"_144":61,"_145":146,"_147":61,"_148":149,"_150":151},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":57,"_38":139,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_27":143},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"daa5461b-c076-4b74-961d-0f816fc4b9e6","parentId","latest",["D",1788346255981],26,"label",[28],"2b7db0ba-b5b9-49b7-9a7f-fa2a8996bdca","main.ts","8ccfaef4-a125-11f1-8fe1-1607ee4eb77e",10,["D",1788328529580],2,"script","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\"; // 改成你的 Val.town URL\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\"; // 私密仓库频道 ID（文件、日志、用户状态都存这里）\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n DELETE_COMMAND: \"删除帖子\",\n\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\n\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n // 在 JPEG 末尾追加文本（EOI 标记后）\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n // 简化：在文件末尾追加注释（ZIP 标准允许，但某些解析器可能忽略）\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null; // 不支持的类型返回 null，后续在文件名加 ID\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n // PNG 结构：8字节签名 + 多个chunk (length + type + data + CRC)\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 私密仓库操作 ============\n\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\"content\", `FILE|${channelId}|${fileName}`);\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content =\n `DOWNLOAD_LOG|${Date.now()}|${userId}|${fileName}|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\n// ============ 审核消息发送（新） ============\n\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n // selectedOptions: [{ index, label, role_id, fileName, fileBuffer, mimetype }]\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n // 附件：问题2的多个文件（如果选项上传了文件）\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 处理上传 ============\n\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\"); // 逗号分隔的选中项索引\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1 || optionIndices.length === 0) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n // 验证 token\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n // 检查用户状态\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"approved\") {\n return Response.json({ error: \"你已通过审核，不能再次提交\" }, {\n status: 403,\n });\n }\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, {\n status: 403,\n });\n }\n\n // 文件处理\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n // 问题2 的选中项及文件\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n if (fileField) {\n const buf = await fileField.arrayBuffer();\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: fileField.name,\n fileBuffer: buf,\n mimetype: fileField.type || \"application/octet-stream\",\n });\n } else {\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: null,\n fileBuffer: null,\n mimetype: null,\n });\n }\n }\n }\n\n // 更新用户状态为 pending\n await updateUserStatus(userId, \"pending\", 0);\n\n // 发送问题1审核消息\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n\n // 发送问题2审核消息\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n\n return Response.json({ success: true });\n}\n\n// ============ 审核按钮处理 ============\n\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.member.user.id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n // 审核通过/拒绝逻辑（保留原样，但处理多选问题2）\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n return {\n type: 4,\n data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组` },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n // 不改变整体状态，仅记录（可保持pending直到全部通过，但这里简化）\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n // 下载按钮处理（点赞验证）\n if (customId.startsWith(\"download_\")) {\n const postMessageId = customId.replace(\"download_\", \"\");\n // 检查点赞：获取帖子消息的反应\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${interaction.channel_id}/messages/${postMessageId}/reactions/%E2%9C%85`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n if (reactionsRes.ok) {\n // 实际上应该用 GET /channels/{channel.id}/messages/{message.id}/reactions/{emoji}?limit=100 并检查用户\n // 简单处理：假设赞的 emoji 是 ✅，需要进一步解析，这里省略，实际需验证\n }\n // 由于时间有限，这里返回提示，实际需完整实现\n return { type: 4, data: { content: \"请先给帖子点赞\", flags: 64 } };\n }\n\n return { type: 4, data: { content: \"未知操作\" } };\n}\n\n// ============ 拒绝理由处理 ============\n\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n // 不改变整体状态，只通知\n }\n\n await fetch(`${DISCORD_API}/channels/${CONFIG.BUFFER_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `<@${targetUserId}> ${message}`,\n flags: 64,\n }),\n });\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理（含斜杠命令和上下文菜单） ============\n\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.member.user.id;\n\n // 消息上下文菜单\n if (type === 2 && name === CONFIG.MARK_COMMAND) {\n // 标注：Pin 消息\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 2 && name === CONFIG.DELETE_COMMAND) {\n // 删除帖子：仅作者可删\n const msgRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${target_id}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const msg = await msgRes.json();\n if (msg.author.id !== userId) {\n return { type: 4, data: { content: \"你只能删除自己的帖子\", flags: 64 } };\n }\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${target_id}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"帖子已删除\", flags: 64 } };\n }\n\n // 斜杠命令\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n // 打开上传页面\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击链接上传文件（仅自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n // 列出当前频道的文件（简化：直接提示输入文件名）\n return {\n type: 4,\n data: { content: \"下载功能请点击帖子上的下载按钮\", flags: 64 },\n };\n }\n }\n\n return { type: 4, data: { content: \"未知命令\" } };\n}\n\n// ============ 上传页面 ============\n\nfunction generateUploadPage(token) {\n // 多选复选框和文件上传框\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并创建帖子\",\n options: [\n {\n type: 11,\n name: \"文件\",\n description: \"要上传的文件\",\n required: true,\n },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 2 }, // 消息上下文菜单\n { name: CONFIG.DELETE_COMMAND, type: 2 },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}",[136],"pulls","branches",1,"forks","envVars",{"_152":61,"_154":61},"connections",{"_152":61,"_153":61},"count","unfilledCount","emptyCount",{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":57,"_38":161,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_158":162,"_27":163},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":157,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_158":159,"_27":160},["D",1788346255981],"children",[],[28],["D",1788328529580],[],[136],["D",1787731807282],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":201,"_202":203,"_204":205,"_206":25,"_207":25,"_208":25,"_209":57,"_210":-5,"_211":-7,"_212":-7,"_213":61,"_214":25,"_215":25,"_216":-5,"_217":25,"_218":25,"_219":25,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":85,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v30