[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_168":169,"_170":171},"routes/_app.x.$handle.$name",{"_95":94,"_32":45,"_104":85,"_27":105,"_13":14,"_106":-5,"_11":107,"_108":109,"_110":111,"_112":113,"_114":115,"_20":-5,"_116":-5,"_117":-5,"_118":25,"_119":120,"_121":57,"_122":-5,"_123":-5,"_124":125},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_43":44,"_32":45,"_38":46,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":78,"_79":80,"_81":82,"_83":25},"version",38,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":34,"_35":37,"_38":39,"_40":14,"_41":42,"_24":25},"previous",{"_30":31,"_32":28,"_33":34,"_35":36},"deleted",false,"deletedHere","path","new-file-9816.ts","latestPath","fileId","fd23803a-a126-11f1-a35f-1607ee4eb77e","name","fileType","http","content","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\";\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\";\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1544662054030549032\", // 第一个问题通过后给的身份组\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：（必填·酒馆通用区）酒馆任意一张卡50楼&temux后台截图、zfb成年女证明\",\n QUESTION2_LABEL: \"问题2：（mf）选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null;\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 仓库操作 ============\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\n \"content\",\n `FILE|${channelId}|${encodeURIComponent(fileName)}`,\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content = `DOWNLOAD_LOG|${Date.now()}|${userId}|${\n encodeURIComponent(fileName)\n }|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\nasync function getUserRoleIds(userId) {\n const res = await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const member = await res.json();\n return member.roles || [];\n}\n\n// ============ 新增辅助函数 ============\nasync function sendDM(userId, content) {\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (dm.id) {\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getRoleName(roleId) {\n const res = await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/roles/${roleId}`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const role = await res.json();\n return role.name || \"未知身份组\";\n}\n\nasync function computeFileHash(buffer) {\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", buffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function queryDownloadLogs(fileHash) {\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const results = [];\n for (const msg of messages) {\n if (msg.content.startsWith(\"DOWNLOAD_LOG|\")) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 5 && parts[4] === fileHash) {\n results.push({\n timestamp: parseInt(parts[1]),\n userId: parts[2],\n fileName: decodeURIComponent(parts[3]),\n });\n }\n }\n }\n return results;\n}\n\nasync function handlePunishCommand(interaction, actionType) {\n const options = interaction.data.options || [];\n const targetUserOpt = options.find(o => o.name === \"用户\");\n const passwordOpt = options.find(o => o.name === \"密码\");\n const reasonOpt = options.find(o => o.name === \"理由\");\n const evidenceOpt = options.find(o => o.name === \"证据\");\n\n if (!targetUserOpt || !passwordOpt || !reasonOpt) {\n return { type: 4, data: { content: \"缺少必要参数\", flags: 64 } };\n }\n if (passwordOpt.value !== \"37261I+\") {\n return { type: 4, data: { content: \"密码错误，无权执行此操作\", flags: 64 } };\n }\n\n const targetUserId = targetUserOpt.value;\n const reason = reasonOpt.value;\n const evidenceAttachment = evidenceOpt && evidenceOpt.value ? interaction.data.resolved?.attachments?.[evidenceOpt.value] : null;\n\n if (actionType === \"ban\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/bans/${targetUserId}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ reason: reason }),\n });\n } else if (actionType === \"kick\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n } else if (actionType === \"mute\") {\n const duration = 24 * 60 * 60 * 1000;\n const until = new Date(Date.now() + duration).toISOString();\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ communication_disabled_until: until }),\n });\n }\n\n const punishChannelId = \"1544912199842140281\";\n const actionLabel = actionType === \"ban\" ? \"封禁\" : actionType === \"kick\" ? \"踢出\" : \"禁言\";\n const formData = new FormData();\n formData.append(\"content\", `⚠️ **处罚通知**\\n操作类型：${actionLabel}\\n执行管理员：<@${interaction.member.user.id}>\\n目标用户：<@${targetUserId}>\\n理由：${reason}`);\n if (evidenceAttachment) {\n const evidenceRes = await fetch(evidenceAttachment.url);\n if (evidenceRes.ok) {\n const evidenceBuffer = await evidenceRes.arrayBuffer();\n formData.append(\"files\", new Blob([evidenceBuffer], { type: evidenceAttachment.content_type || \"application/octet-stream\" }), evidenceAttachment.filename);\n }\n }\n await fetch(`${DISCORD_API}/channels/${punishChannelId}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n return { type: 4, data: { content: `已执行${actionLabel}操作`, flags: 64 } };\n}\n\n// ============ 审核消息发送 ============\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 审核上传处理 ============\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\");\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n // 检查审核中状态\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, { status: 403 });\n }\n\n // 获取用户已有身份组\n const userRoleIds = await getUserRoleIds(userId);\n\n // 检查问题1：如果已拥有基础身份组，不允许再次提交问题1\n if (userRoleIds.includes(CONFIG.APPROVED_ROLE_ID)) {\n return Response.json({ error: \"你已拥有基础身份组，无需重复提交问题1\" }, { status: 403 });\n }\n\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n // 如果用户已拥有该选项对应身份组，跳过（或返回错误）\n if (userRoleIds.includes(opt.role_id)) {\n continue; // 跳过已拥有的选项\n }\n const fileField = formData.get(`option_file_${idx}`);\n let fileBuffer = null, fileMime = null, fileName = null;\n if (fileField) {\n fileBuffer = await fileField.arrayBuffer();\n fileMime = fileField.type || \"application/octet-stream\";\n fileName = fileField.name;\n }\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileBuffer,\n fileMime,\n fileName,\n });\n }\n }\n\n // 如果没有可提交的选项，并且问题1不能提交，则返回错误\n if (selectedOptions.length === 0 && userRoleIds.includes(CONFIG.APPROVED_ROLE_ID)) {\n return Response.json({ error: \"没有可提交的新选项\" }, { status: 400 });\n }\n\n await updateUserStatus(userId, \"pending\", 0);\n\n // 发送问题1审核消息（如果用户没有基础身份组）\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n\n // 发送问题2审核消息（如果有新选项）\n if (selectedOptions.length > 0) {\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n }\n\n return Response.json({ success: true });\n}\n// ============ 文件上传（/上传命令） ============\nasync function handleFileUploadCommand(interaction) {\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const options = interaction.data.options || [];\n const descOpt = options.find((o) => o.name === \"描述\");\n const description = descOpt ? descOpt.value : \"\";\n\n const fileOptions = options.filter((o) => o.type === 11 && o.value);\n if (fileOptions.length === 0) {\n return { type: 4, data: { content: \"请至少上传一个文件\", flags: 64 } };\n }\n\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n\n const uploadedFiles = [];\n for (const fileOpt of fileOptions) {\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) continue;\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) {\n return {\n type: 4,\n data: {\n content: `下载文件 ${fileAttachment.filename} 失败`,\n flags: 64,\n },\n };\n }\n const fileBuffer = await fileRes.arrayBuffer();\n const fileName = fileAttachment.filename || \"未命名文件\";\n const mimetype = fileAttachment.content_type || \"application/octet-stream\";\n\n const saved = await saveFileToRepo(\n channelId,\n fileName,\n fileBuffer,\n mimetype,\n );\n if (!saved) {\n return {\n type: 4,\n data: { content: `文件 ${fileName} 保存失败`, flags: 64 },\n };\n }\n uploadedFiles.push({\n repoMsgId: saved.id,\n fileName,\n mimetype,\n });\n }\n\n if (uploadedFiles.length === 0) {\n return { type: 4, data: { content: \"没有有效的文件被上传\", flags: 64 } };\n }\n\n const now = new Date();\n const timeStr = `${now.getFullYear()}年${\n now.getMonth() + 1\n }月${now.getDate()}日 ${now.getHours()}时${now.getMinutes()}分`;\n const postContent =\n `📄 **文件上传**\\n作者：<@${userId}>\\n发布时间：${timeStr}\\n描述：${\n description || \"无\"\n }\\n🔒 请给本帖子主楼点赞（👍）后点击下载按钮`;\n\n let downloadCustomId;\n if (uploadedFiles.length === 1) {\n downloadCustomId = `download_${uploadedFiles[0].repoMsgId}`;\n } else {\n downloadCustomId = \"download_multi\";\n }\n\n const components = [{\n type: 1,\n components: [\n {\n type: 2,\n custom_id: downloadCustomId,\n label: \"📥 下载\",\n style: 1,\n },\n ],\n }];\n\n const postRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: postContent,\n components: components,\n }),\n });\n const postMsg = await postRes.json();\n\n if (!postMsg.id) {\n console.error(\"Failed to create post message:\", postMsg);\n return {\n type: 4,\n data: { content: \"帖子创建失败，请稍后再试\", flags: 64 },\n };\n }\n\n for (const f of uploadedFiles) {\n const updateRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${f.repoMsgId}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `FILE|${channelId}|${\n encodeURIComponent(f.fileName)\n }|${postMsg.id}`,\n }),\n },\n );\n if (!updateRes.ok) {\n console.error(\n `Failed to update repo message ${f.repoMsgId}:`,\n await updateRes.text(),\n );\n }\n }\n\n return {\n type: 4,\n data: {\n content: `已上传 ${uploadedFiles.length} 个文件，帖子已创建`,\n flags: 64,\n },\n };\n}\n\n// ============ 下载功能（按钮和 /下载共用） ============\nasync function handleDownload(interaction, targetRepoMsgId = null) {\n const customId = interaction.data.custom_id || null;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (!userId) {\n console.error(\"User ID not found in interaction:\", interaction);\n return {\n type: 4,\n data: { content: \"无法识别用户，请稍后再试\", flags: 64 },\n };\n }\n\n let repoMsgId = targetRepoMsgId;\n if (!repoMsgId && customId) {\n if (customId === \"download_multi\") {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n } else {\n repoMsgId = customId.replace(\"download_\", \"\");\n }\n }\n\n if (!repoMsgId) {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return {\n type: 4,\n data: { content: \"当前帖子没有可下载的文件\", flags: 64 },\n };\n }\n if (files.length === 1) {\n repoMsgId = files[0].repoMsgId;\n } else {\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options: options,\n min_values: 1,\n max_values: 1,\n },\n ],\n },\n ],\n flags: 64,\n },\n };\n }\n }\n\n const repoRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${repoMsgId}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const repoMsg = await repoRes.json();\n if (!repoMsg || !repoMsg.content) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const parts = repoMsg.content.split(\"|\");\n if (parts.length < 4) {\n console.error(\"Invalid repo message content:\", repoMsg.content);\n return {\n type: 4,\n data: { content: \"文件信息损坏，请联系管理员\", flags: 64 },\n };\n }\n\n // 获取主楼消息 ID 并检查点赞\n let mainMessageId;\n try {\n const threadMessagesRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n if (!threadMessagesRes.ok) {\n console.error(\n `Failed to fetch thread messages: ${threadMessagesRes.status}`,\n await threadMessagesRes.text(),\n );\n return {\n type: 4,\n data: { content: \"无法读取帖子消息，请检查机器人权限\", flags: 64 },\n };\n }\n const threadMessages = await threadMessagesRes.json();\n if (!Array.isArray(threadMessages) || threadMessages.length === 0) {\n return { type: 4, data: { content: \"帖子中没有消息\", flags: 64 } };\n }\n mainMessageId = threadMessages[threadMessages.length - 1].id;\n } catch (error) {\n console.error(\"Error fetching main message:\", error);\n return { type: 4, data: { content: \"获取帖子主楼失败\", flags: 64 } };\n }\n\n const emoji = encodeURIComponent(\"👍\");\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${mainMessageId}/reactions/${emoji}?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n\n if (!reactionsRes.ok) {\n const errorText = await reactionsRes.text();\n console.error(\n `Reaction check failed (status ${reactionsRes.status}):`,\n errorText,\n );\n if (reactionsRes.status === 404) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n if (reactionsRes.status === 403) {\n return {\n type: 4,\n data: {\n content: \"机器人缺少读取消息反应的权限，请联系管理员\",\n flags: 64,\n },\n };\n }\n return {\n type: 4,\n data: { content: \"无法检查点赞状态，请稍后再试\", flags: 64 },\n };\n }\n\n const users = await reactionsRes.json();\n if (!Array.isArray(users)) {\n console.error(\"Unexpected reaction response:\", users);\n return {\n type: 4,\n data: { content: \"点赞检查异常，请稍后再试\", flags: 64 },\n };\n }\n\n const hasLiked = users.some((u) => u.id === userId);\n console.log(\n `Download attempt by user ${userId}, liked main post: ${hasLiked}, reactor IDs:`,\n users.map((u) => u.id),\n );\n if (!hasLiked) {\n return {\n type: 4,\n data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 },\n };\n }\n\n const attachment = repoMsg.attachments?.[0];\n if (!attachment) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const fileRes = await fetch(attachment.url);\n const fileBuffer = await fileRes.arrayBuffer();\n const originalName = decodeURIComponent(parts[2] || attachment.filename);\n const mimetype = attachment.content_type || \"application/octet-stream\";\n\n const watermarkedBuffer = applyWatermark(fileBuffer, mimetype, userId) ||\n fileBuffer;\n const finalName = watermarkedBuffer !== fileBuffer\n ? originalName\n : `${userId}_${originalName}`;\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (!dm.id) {\n return {\n type: 4,\n data: { content: \"无法私信你，请检查隐私设置\", flags: 64 },\n };\n }\n\n const formData = new FormData();\n formData.append(\"content\", `这是你下载的文件：${originalName}`);\n formData.append(\n \"files\",\n new Blob([watermarkedBuffer], { type: mimetype }),\n finalName,\n );\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", fileBuffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\n \"\",\n );\n await logDownload(userId, originalName, hashHex);\n\n return { type: 4, data: { content: \"文件已发送到你的私信\", flags: 64 } };\n}\n\nasync function listFilesInChannel(channelId) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const files = [];\n for (const msg of messages) {\n if (msg.content.startsWith(`FILE|${channelId}|`)) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 4) {\n files.push({\n repoMsgId: msg.id,\n fileName: decodeURIComponent(parts[2]),\n postMessageId: parts[3],\n });\n }\n }\n }\n return files;\n}\n\n// ============ 按钮处理 ============\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n\n // 管理面板按钮\n if (customId === \"admin_panel_query\") {\n return {\n type: 4,\n data: {\n content: \"请使用 `/查询文件` 命令并附加文件来查询下载记录。\",\n flags: 64,\n },\n };\n }\n if (customId === \"admin_panel_mute\" || customId === \"admin_panel_kick\" || customId === \"admin_panel_ban\") {\n const action = customId.replace(\"admin_panel_\", \"\");\n const actionLabel = action === \"mute\" ? \"禁言\" : action === \"kick\" ? \"踢出\" : \"封禁\";\n return {\n type: 9,\n data: {\n title: `${actionLabel}用户`,\n custom_id: `admin_modal_${action}`,\n components: [\n {\n type: 1,\n components: [\n { type: 4, custom_id: \"user_id\", label: \"用户ID\", style: 1, required: true },\n ],\n },\n {\n type: 1,\n components: [\n { type: 4, custom_id: \"reason\", label: \"理由\", style: 2, required: true },\n ],\n },\n ],\n },\n };\n }\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (customId === \"download_multi\" || customId.startsWith(\"download_\")) {\n return await handleDownload(\n interaction,\n customId === \"download_multi\" ? null : customId.replace(\"download_\", \"\"),\n );\n }\n\n if (customId === \"select_download\") {\n const selectedRepoMsgId = interaction.data.values?.[0];\n if (!selectedRepoMsgId) {\n return { type: 4, data: { content: \"未选择文件\", flags: 64 } };\n }\n return await handleDownload(interaction, selectedRepoMsgId);\n }\n\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n if (messageId) await disableButtons(channelId, messageId);\n const roleName = await getRoleName(CONFIG.APPROVED_ROLE_ID);\n await sendDM(targetUserId, `🎉 恭喜你通过审核！获得身份组：${roleName}`);\n return {\n type: 4,\n data: {\n content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) {\n await addRole(targetUserId, option.role_id);\n const roleName = await getRoleName(option.role_id);\n await sendDM(targetUserId, `🎉 恭喜你通过审核！获得专属身份组：${roleName}`);\n }\n if (messageId) await disableButtons(channelId, messageId);\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n flags: 64,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n return { type: 4, data: { content: \"未知操作\", flags: 64 } };\n}\n\nasync function disableButtons(channelId, messageId) {\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${messageId}`, {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ components: [] }),\n });\n}\n\n// ============ 拒绝理由处理 ============\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n } else if (customId.startsWith(\"admin_modal_\")) {\n // 处理管理面板的 Modal 提交\n const action = customId.replace(\"admin_modal_\", \"\");\n const components = interaction.data.components;\n const userIdField = components[0].components[0].value;\n const reasonField = components[1].components[0].value;\n // 执行处罚\n const actionLabel = action === \"ban\" ? \"封禁\" : action === \"kick\" ? \"踢出\" : \"禁言\";\n // 这里调用 handlePunishCommand 类似的逻辑，但没有密码，已由管理员权限保证\n if (action === \"ban\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/bans/${userIdField}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ reason: reasonField }),\n });\n } else if (action === \"kick\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userIdField}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n } else if (action === \"mute\") {\n const duration = 24 * 60 * 60 * 1000;\n const until = new Date(Date.now() + duration).toISOString();\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userIdField}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ communication_disabled_until: until }),\n });\n }\n // 记录到处罚区\n const punishChannelId = \"1544912199842140281\";\n await fetch(`${DISCORD_API}/channels/${punishChannelId}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({\n content: `⚠️ **处罚通知**\\n操作类型：${actionLabel}\\n执行管理员：<@${interaction.member.user.id}>\\n目标用户：<@${userIdField}>\\n理由：${reasonField}`,\n }),\n });\n return { type: 4, data: { content: `已执行${actionLabel}操作`, flags: 64 } };\n }\n\n // 发送私信\n if (targetUserId) {\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: targetUserId }),\n });\n const dm = await dmRes.json();\n if (dm.id) {\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content: message }),\n });\n }\n }\n\n return { type: 4, data: { content: \"操作完成\", flags: 64 } };\n}\n\n// ============ 命令处理 ============\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (type === 3 && name === CONFIG.MARK_COMMAND) {\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n return await handleFileUploadCommand(interaction);\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n return await handleDownload(interaction, null);\n }\n\n if (name === \"查询文件\") {\n const fileOpt = options.find(o => o.name === \"文件\");\n if (!fileOpt || !fileOpt.value) {\n return { type: 4, data: { content: \"请附加要查询的文件\", flags: 64 } };\n }\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) {\n return { type: 4, data: { content: \"文件无效\", flags: 64 } };\n }\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) {\n return { type: 4, data: { content: \"下载文件失败\", flags: 64 } };\n }\n const fileBuffer = await fileRes.arrayBuffer();\n const hash = await computeFileHash(fileBuffer);\n const logs = await queryDownloadLogs(hash);\n if (logs.length === 0) {\n return { type: 4, data: { content: \"未找到该文件的下载记录\", flags: 64 } };\n }\n\n const logText = logs.map((log, i) => {\n const date = new Date(log.timestamp).toLocaleString(\"zh-CN\");\n return `**${i + 1}.** 用户：<@${log.userId}>\\n时间：${date}\\n文件名：${log.fileName}`;\n }).join(\"\\n\\n\");\n return { type: 4, data: { content: `📥 查询结果：\\n${logText}`, flags: 64 } };\n }\n\n if (name === \"禁言用户\") return await handlePunishCommand(interaction, \"mute\");\n if (name === \"踢出用户\") return await handlePunishCommand(interaction, \"kick\");\n if (name === \"封禁用户\") return await handlePunishCommand(interaction, \"ban\");\n\n if (name === \"管理权限\") {\n const buttons = [\n { type: 2, custom_id: \"admin_panel_query\", label: \"📁 查询文件\", style: 1 },\n { type: 2, custom_id: \"admin_panel_mute\", label: \"🔇 禁言用户\", style: 1 },\n { type: 2, custom_id: \"admin_panel_kick\", label: \"👢 踢出用户\", style: 1 },\n { type: 2, custom_id: \"admin_panel_ban\", label: \"🔨 封禁用户\", style: 1 },\n ];\n return {\n type: 4,\n data: {\n content: \"请选择管理操作：\",\n components: [{ type: 1, components: buttons }],\n flags: 64,\n },\n };\n }\n }\n\n return { type: 4, data: { content: \"未知命令\", flags: 64 } };\n}\n// ============ 审核上传网页 ============\nfunction generateUploadPage(token, ownedRoleIds = []) {\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => {\n const owned = ownedRoleIds.includes(opt.role_id);\n return `\n

\n \n ${opt.label}${owned ? \"（已拥有）\" : \"\"}\n

\n \n

\n `;\n }).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n // 解析 token 获取 userId，查询已拥有身份组\n try {\n const parts = token.split(\".\");\n if (parts.length !== 2) throw new Error(\"Invalid token\");\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) throw new Error(\"Invalid token\");\n // 验证签名\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) throw new Error(\"Invalid signature\");\n if (Date.now() > parseInt(expireStr)) throw new Error(\"Token expired\");\n const userId = userIdStr;\n const roleIds = await getUserRoleIds(userId);\n return new Response(generateUploadPage(token, roleIds), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n } catch (error) {\n return new Response(\"无效的上传链接\", { status: 400 });\n }\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并保护\",\n options: [\n { type: 11, name: \"文件1\", description: \"要上传的第一个文件（必需）\", required: true },\n { type: 11, name: \"文件2\", description: \"要上传的第二个文件（可选）\", required: false },\n { type: 11, name: \"文件3\", description: \"要上传的第三个文件（可选）\", required: false },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 3 },\n {\n name: \"查询文件\",\n description: \"通过文件查询下载记录\",\n default_member_permissions: \"8\",\n options: [{ type: 11, name: \"文件\", description: \"要查询的文件\", required: true }],\n },\n {\n name: \"禁言用户\",\n description: \"禁言指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"禁言理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"踢出用户\",\n description: \"踢出指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"踢出理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"封禁用户\",\n description: \"封禁指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"封禁理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"管理权限\",\n description: \"打开管理面板\",\n default_member_permissions: \"8\",\n },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n if (body.type === 5 && body.data.custom_id.startsWith(\"admin_modal_\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\";\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\";\nconst ADMIN_PASSWORD = \"37261I+\";\nconst PUNISH_CHANNEL_ID = \"1544912199842140281\";\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1544662054030549032\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：（必填·酒馆通用区）酒馆任意一张卡50楼&temux后台截图、zfb成年女证明\",\n QUESTION2_LABEL: \"问题2：（mf）选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null;\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 仓库操作 ============\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\n \"content\",\n `FILE|${channelId}|${encodeURIComponent(fileName)}`,\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content = `DOWNLOAD_LOG|${Date.now()}|${userId}|${\n encodeURIComponent(fileName)\n }|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n // 保留旧接口，实际内部使用详细状态更新\n await updateDetailedStatus(userId, \"base\", status);\n}\n\nasync function updateDetailedStatus(userId, type, status) {\n // type: \"base\" 或 `option_${index}`\n const prefix = `DETAIL_STATUS|${userId}|${type}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `DETAIL_STATUS|${userId}|${type}|${status}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getDetailedStatus(userId) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return { base: \"none\", options: {} };\n const result = { base: \"none\", options: {} };\n for (const msg of messages) {\n if (msg.content.startsWith(`DETAIL_STATUS|${userId}|`)) {\n const parts = msg.content.split(\"|\");\n const type = parts[2];\n const status = parts[3];\n if (type === \"base\") result.base = status;\n else if (type.startsWith(\"option_\")) {\n const idx = parseInt(type.replace(\"option_\", \"\"));\n result.options[idx] = status;\n }\n }\n }\n return result;\n}\n\nasync function getUserStatus(userId) {\n const detailed = await getDetailedStatus(userId);\n // 兼容旧代码：如果 base 是 approved，则整体视为 approved\n return { status: detailed.base, modifyCount: 0 };\n}\n\n// ============ 新增辅助函数 ============\nasync function sendDM(userId, content) {\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (dm.id) {\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getRoleName(roleId) {\n const res = await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/roles/${roleId}`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const role = await res.json();\n return role.name || \"未知身份组\";\n}\n\nasync function computeFileHash(buffer) {\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", buffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n return hashArray.map(b => b.toString(16).padStart(2, \"0\")).join(\"\");\n}\n\nasync function queryDownloadLogs(fileHash) {\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const results = [];\n for (const msg of messages) {\n if (msg.content.startsWith(\"DOWNLOAD_LOG|\")) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 5 && parts[4] === fileHash) {\n results.push({\n timestamp: parseInt(parts[1]),\n userId: parts[2],\n fileName: decodeURIComponent(parts[3]),\n });\n }\n }\n }\n return results;\n}\n\nasync function handlePunishCommand(interaction, actionType) {\n const options = interaction.data.options || [];\n const targetUserOpt = options.find(o => o.name === \"用户\");\n const passwordOpt = options.find(o => o.name === \"密码\");\n const reasonOpt = options.find(o => o.name === \"理由\");\n const evidenceOpt = options.find(o => o.name === \"证据\");\n\n if (!targetUserOpt || !passwordOpt || !reasonOpt) {\n return { type: 4, data: { content: \"缺少必要参数\", flags: 64 } };\n }\n if (passwordOpt.value !== ADMIN_PASSWORD) {\n return { type: 4, data: { content: \"密码错误，无权执行此操作\", flags: 64 } };\n }\n\n const targetUserId = targetUserOpt.value;\n const reason = reasonOpt.value;\n const evidenceAttachment = evidenceOpt && evidenceOpt.value ? interaction.data.resolved?.attachments?.[evidenceOpt.value] : null;\n\n if (actionType === \"ban\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/bans/${targetUserId}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ reason: reason }),\n });\n } else if (actionType === \"kick\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n } else if (actionType === \"mute\") {\n const duration = 24 * 60 * 60 * 1000;\n const until = new Date(Date.now() + duration).toISOString();\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ communication_disabled_until: until }),\n });\n }\n\n const actionLabel = actionType === \"ban\" ? \"封禁\" : actionType === \"kick\" ? \"踢出\" : \"禁言\";\n const formData = new FormData();\n formData.append(\"content\", `⚠️ **处罚通知**\\n操作类型：${actionLabel}\\n执行管理员：<@${interaction.member.user.id}>\\n目标用户：<@${targetUserId}>\\n理由：${reason}`);\n if (evidenceAttachment) {\n const evidenceRes = await fetch(evidenceAttachment.url);\n if (evidenceRes.ok) {\n const evidenceBuffer = await evidenceRes.arrayBuffer();\n formData.append(\"files\", new Blob([evidenceBuffer], { type: evidenceAttachment.content_type || \"application/octet-stream\" }), evidenceAttachment.filename);\n }\n }\n await fetch(`${DISCORD_API}/channels/${PUNISH_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n return { type: 4, data: { content: `已执行${actionLabel}操作`, flags: 64 } };\n}\n\n// ============ 审核消息发送 ============\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 审核上传处理 ============\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\");\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n // 获取详细状态\n const detailed = await getDetailedStatus(userId);\n if (detailed.base === \"approved\") {\n // 问题1已通过，不允许重复提交问题1，但可以提交问题2未通过的选项\n // 因此继续处理，只是跳过问题1部分？这里我们要求必须上传文件1，但用户可能想只提交问题2。\n // 为简化，如果 base approved，则提示不可重复提交问题1，但仍可提交问题2（需要前端支持）\n // 但当前流程必须 file1，所以我们先保留：若 base approved 且未选择问题2选项，则拒绝。\n }\n\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n // 检查该选项是否已通过，已通过则跳过\n if (detailed.options[idx] === \"approved\") continue;\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n let fileBuffer = null, fileMime = null, fileName = null;\n if (fileField) {\n fileBuffer = await fileField.arrayBuffer();\n fileMime = fileField.type || \"application/octet-stream\";\n fileName = fileField.name;\n }\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileBuffer,\n fileMime,\n fileName,\n });\n }\n }\n\n // 如果问题1已通过且没有提交问题2选项，则拒绝\n if (detailed.base === \"approved\" && selectedOptions.length === 0) {\n return Response.json({ error: \"你已经通过基础审核，如需重新提交请仅选择未通过的专属分组\" }, { status: 403 });\n }\n\n // 更新状态：问题1如果未通过，设为 pending\n if (detailed.base !== \"approved\") {\n await updateDetailedStatus(userId, \"base\", \"pending\");\n }\n for (const opt of selectedOptions) {\n await updateDetailedStatus(userId, `option_${opt.index}`, \"pending\");\n }\n\n // 发送问题1审核（仅当 base 不是 approved 时）\n if (detailed.base !== \"approved\") {\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n }\n\n // 发送问题2审核（如果有选项）\n if (selectedOptions.length > 0) {\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n }\n\n return Response.json({ success: true });\n}\n// ============ 文件上传（/上传命令） ============\nasync function handleFileUploadCommand(interaction) {\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const options = interaction.data.options || [];\n const descOpt = options.find((o) => o.name === \"描述\");\n const description = descOpt ? descOpt.value : \"\";\n\n const fileOptions = options.filter((o) => o.type === 11 && o.value);\n if (fileOptions.length === 0) {\n return { type: 4, data: { content: \"请至少上传一个文件\", flags: 64 } };\n }\n\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n\n const uploadedFiles = [];\n for (const fileOpt of fileOptions) {\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) continue;\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) {\n return {\n type: 4,\n data: {\n content: `下载文件 ${fileAttachment.filename} 失败`,\n flags: 64,\n },\n };\n }\n const fileBuffer = await fileRes.arrayBuffer();\n const fileName = fileAttachment.filename || \"未命名文件\";\n const mimetype = fileAttachment.content_type || \"application/octet-stream\";\n\n const saved = await saveFileToRepo(\n channelId,\n fileName,\n fileBuffer,\n mimetype,\n );\n if (!saved) {\n return {\n type: 4,\n data: { content: `文件 ${fileName} 保存失败`, flags: 64 },\n };\n }\n uploadedFiles.push({\n repoMsgId: saved.id,\n fileName,\n mimetype,\n });\n }\n\n if (uploadedFiles.length === 0) {\n return { type: 4, data: { content: \"没有有效的文件被上传\", flags: 64 } };\n }\n\n const now = new Date();\n const timeStr = `${now.getFullYear()}年${\n now.getMonth() + 1\n }月${now.getDate()}日 ${now.getHours()}时${now.getMinutes()}分`;\n const postContent =\n `📄 **文件上传**\\n作者：<@${userId}>\\n发布时间：${timeStr}\\n描述：${\n description || \"无\"\n }\\n🔒 请给本帖子主楼点赞（👍）后点击下载按钮`;\n\n let downloadCustomId;\n if (uploadedFiles.length === 1) {\n downloadCustomId = `download_${uploadedFiles[0].repoMsgId}`;\n } else {\n downloadCustomId = \"download_multi\";\n }\n\n const components = [{\n type: 1,\n components: [\n {\n type: 2,\n custom_id: downloadCustomId,\n label: \"📥 下载\",\n style: 1,\n },\n ],\n }];\n\n const postRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: postContent,\n components: components,\n }),\n });\n const postMsg = await postRes.json();\n\n if (!postMsg.id) {\n console.error(\"Failed to create post message:\", postMsg);\n return {\n type: 4,\n data: { content: \"帖子创建失败，请稍后再试\", flags: 64 },\n };\n }\n\n for (const f of uploadedFiles) {\n const updateRes = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${f.repoMsgId}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `FILE|${channelId}|${\n encodeURIComponent(f.fileName)\n }|${postMsg.id}`,\n }),\n },\n );\n if (!updateRes.ok) {\n console.error(\n `Failed to update repo message ${f.repoMsgId}:`,\n await updateRes.text(),\n );\n }\n }\n\n return {\n type: 4,\n data: {\n content: `已上传 ${uploadedFiles.length} 个文件，帖子已创建`,\n flags: 64,\n },\n };\n}\n\n// ============ 下载功能 ============\nasync function handleDownload(interaction, targetRepoMsgId = null) {\n const customId = interaction.data.custom_id || null;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (!userId) {\n return { type: 4, data: { content: \"无法识别用户\", flags: 64 } };\n }\n\n let repoMsgId = targetRepoMsgId;\n if (!repoMsgId && customId) {\n if (customId === \"download_multi\") {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return { type: 4, data: { content: \"当前帖子没有可下载的文件\", flags: 64 } };\n }\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [{\n type: 1,\n components: [{\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options,\n min_values: 1,\n max_values: 1,\n }],\n }],\n flags: 64,\n },\n };\n } else {\n repoMsgId = customId.replace(\"download_\", \"\");\n }\n }\n\n if (!repoMsgId) {\n const files = await listFilesInChannel(channelId);\n if (files.length === 0) {\n return { type: 4, data: { content: \"当前帖子没有可下载的文件\", flags: 64 } };\n }\n if (files.length === 1) {\n repoMsgId = files[0].repoMsgId;\n } else {\n const options = files.map((f) => ({\n label: f.fileName.substring(0, 100),\n value: f.repoMsgId,\n }));\n return {\n type: 4,\n data: {\n content: \"请选择要下载的文件：\",\n components: [{\n type: 1,\n components: [{\n type: 3,\n custom_id: \"select_download\",\n placeholder: \"选择文件\",\n options,\n min_values: 1,\n max_values: 1,\n }],\n }],\n flags: 64,\n },\n };\n }\n }\n\n const repoRes = await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${repoMsgId}`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const repoMsg = await repoRes.json();\n if (!repoMsg || !repoMsg.content) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const parts = repoMsg.content.split(\"|\");\n if (parts.length < 4) {\n return { type: 4, data: { content: \"文件信息损坏\", flags: 64 } };\n }\n\n // 获取主楼消息 ID\n let mainMessageId;\n try {\n const threadMessagesRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n if (!threadMessagesRes.ok) {\n return { type: 4, data: { content: \"无法读取帖子消息\", flags: 64 } };\n }\n const threadMessages = await threadMessagesRes.json();\n if (!Array.isArray(threadMessages) || threadMessages.length === 0) {\n return { type: 4, data: { content: \"帖子中没有消息\", flags: 64 } };\n }\n mainMessageId = threadMessages[threadMessages.length - 1].id;\n } catch (e) {\n return { type: 4, data: { content: \"获取主楼失败\", flags: 64 } };\n }\n\n // 检查点赞\n const emoji = encodeURIComponent(\"👍\");\n const reactionsRes = await fetch(`${DISCORD_API}/channels/${channelId}/messages/${mainMessageId}/reactions/${emoji}?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n if (!reactionsRes.ok) {\n if (reactionsRes.status === 404) {\n return { type: 4, data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 } };\n }\n if (reactionsRes.status === 403) {\n return { type: 4, data: { content: \"机器人缺少读取反应权限\", flags: 64 } };\n }\n return { type: 4, data: { content: \"无法检查点赞状态\", flags: 64 } };\n }\n const users = await reactionsRes.json();\n const hasLiked = users.some((u) => u.id === userId);\n if (!hasLiked) {\n return { type: 4, data: { content: \"请先给帖子主楼点赞（👍）再下载\", flags: 64 } };\n }\n\n const attachment = repoMsg.attachments?.[0];\n if (!attachment) {\n return { type: 4, data: { content: \"文件不存在\", flags: 64 } };\n }\n\n const fileRes = await fetch(attachment.url);\n const fileBuffer = await fileRes.arrayBuffer();\n const originalName = decodeURIComponent(parts[2] || attachment.filename);\n const mimetype = attachment.content_type || \"application/octet-stream\";\n\n const watermarkedBuffer = applyWatermark(fileBuffer, mimetype, userId) || fileBuffer;\n const finalName = watermarkedBuffer !== fileBuffer ? originalName : `${userId}_${originalName}`;\n\n const dmRes = await fetch(`${DISCORD_API}/users/@me/channels`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ recipient_id: userId }),\n });\n const dm = await dmRes.json();\n if (!dm.id) {\n return { type: 4, data: { content: \"无法私信你，请检查隐私设置\", flags: 64 } };\n }\n\n const formData = new FormData();\n formData.append(\"content\", `这是你下载的文件：${originalName}`);\n formData.append(\"files\", new Blob([watermarkedBuffer], { type: mimetype }), finalName);\n await fetch(`${DISCORD_API}/channels/${dm.id}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n\n const hashBuffer = await crypto.subtle.digest(\"SHA-256\", fileBuffer);\n const hashArray = Array.from(new Uint8Array(hashBuffer));\n const hashHex = hashArray.map((b) => b.toString(16).padStart(2, \"0\")).join(\"\");\n await logDownload(userId, originalName, hashHex);\n\n return { type: 4, data: { content: \"文件已发送到你的私信\", flags: 64 } };\n}\n\nasync function listFilesInChannel(channelId) {\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages)) return [];\n const files = [];\n for (const msg of messages) {\n if (msg.content.startsWith(`FILE|${channelId}|`)) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 4) {\n files.push({\n repoMsgId: msg.id,\n fileName: decodeURIComponent(parts[2]),\n postMessageId: parts[3],\n });\n }\n }\n }\n return files;\n}\n\n// ============ 按钮处理 ============\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return { type: 4, data: { content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`, flags: 64 } };\n }\n\n if (customId === \"download_multi\" || customId.startsWith(\"download_\")) {\n return await handleDownload(interaction, customId === \"download_multi\" ? null : customId.replace(\"download_\", \"\"));\n }\n\n if (customId === \"select_download\") {\n const selectedRepoMsgId = interaction.data.values?.[0];\n if (!selectedRepoMsgId) return { type: 4, data: { content: \"未选择文件\", flags: 64 } };\n return await handleDownload(interaction, selectedRepoMsgId);\n }\n\n // 管理面板按钮\n if (customId === \"admin_panel_mute\") {\n return showAdminModal(interaction, \"mute\");\n }\n if (customId === \"admin_panel_kick\") {\n return showAdminModal(interaction, \"kick\");\n }\n if (customId === \"admin_panel_ban\") {\n return showAdminModal(interaction, \"ban\");\n }\n\n // 审核按钮\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateDetailedStatus(targetUserId, \"base\", \"approved\");\n if (messageId) await disableButtons(channelId, messageId);\n const roleName = await getRoleName(CONFIG.APPROVED_ROLE_ID);\n await sendDM(targetUserId, `🎉 恭喜你通过审核！获得身份组：${roleName}`);\n return { type: 4, data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组`, flags: 64 } };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return showRejectModal(interaction, \"q1\", targetUserId);\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) {\n await addRole(targetUserId, option.role_id);\n await updateDetailedStatus(targetUserId, `option_${optionIndex}`, \"approved\");\n const roleName = await getRoleName(option.role_id);\n await sendDM(targetUserId, `🎉 恭喜你通过审核！获得专属身份组：${roleName}`);\n }\n if (messageId) await disableButtons(channelId, messageId);\n return { type: 4, data: { content: `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`, flags: 64 } };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return showRejectModal(interaction, \"q2\", targetUserId, optionIndex);\n }\n\n return { type: 4, data: { content: \"未知操作\", flags: 64 } };\n}\n\nfunction showAdminModal(interaction, actionType) {\n const actionLabel = actionType === \"ban\" ? \"封禁\" : actionType === \"kick\" ? \"踢出\" : \"禁言\";\n return {\n type: 9,\n data: {\n title: `${actionLabel}用户`,\n custom_id: `admin_${actionType}_modal`,\n components: [\n {\n type: 1,\n components: [{ type: 4, custom_id: \"target_user\", label: \"目标用户ID\", style: 1, required: true }],\n },\n {\n type: 1,\n components: [{ type: 4, custom_id: \"reason\", label: \"理由\", style: 2, required: true }],\n },\n {\n type: 1,\n components: [{ type: 4, custom_id: \"password\", label: \"管理员密码\", style: 1, required: true }],\n },\n {\n type: 1,\n components: [{ type: 4, custom_id: \"evidence_url\", label: \"证据图片链接（可选）\", style: 1, required: false }],\n },\n ],\n },\n };\n}\n\nfunction showRejectModal(interaction, type, targetUserId, optionIndex = null) {\n const title = type === \"q1\" ? \"拒绝理由（问题1）\" : `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`;\n const customId = type === \"q1\" ? `reject_reason_q1_${targetUserId}` : `reject_reason_q2_${targetUserId}_${optionIndex}`;\n return {\n type: 9,\n data: {\n title,\n custom_id: customId,\n components: [{\n type: 1,\n components: [{ type: 4, custom_id: \"reason\", label: \"请输入拒绝理由\", style: 2, required: true }],\n }],\n },\n };\n}\n\nasync function disableButtons(channelId, messageId) {\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${messageId}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ components: [] }),\n });\n}\n\n// ============ 拒绝理由处理 ============\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateDetailedStatus(targetUserId, \"base\", \"rejected\");\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n await updateDetailedStatus(targetUserId, `option_${optionIndex}`, \"rejected\");\n }\n\n await sendDM(targetUserId, message);\n const messageId = interaction.message?.id;\n const channelId = interaction.channel_id;\n if (messageId) await disableButtons(channelId, messageId);\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理 ============\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.user?.id || interaction.member?.user?.id;\n\n if (type === 3 && name === CONFIG.MARK_COMMAND) {\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, { headers: { Authorization: `Bot ${DISCORD_TOKEN}` } });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) { firstMessage = messages[messages.length - 1]; break; }\n else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n const link = `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return { type: 4, data: { content: `[点击回到第一条消息](${link})`, flags: 64 } };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n return await handleFileUploadCommand(interaction);\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n return await handleDownload(interaction, null);\n }\n\n if (name === \"查询文件\") {\n const fileOpt = options.find(o => o.name === \"文件\");\n if (!fileOpt || !fileOpt.value) return { type: 4, data: { content: \"请附加要查询的文件\", flags: 64 } };\n const resolved = interaction.data.resolved || {};\n const attachments = resolved.attachments || {};\n const fileAttachment = attachments[fileOpt.value];\n if (!fileAttachment) return { type: 4, data: { content: \"文件无效\", flags: 64 } };\n\n const fileRes = await fetch(fileAttachment.url);\n if (!fileRes.ok) return { type: 4, data: { content: \"下载文件失败\", flags: 64 } };\n const fileBuffer = await fileRes.arrayBuffer();\n const hash = await computeFileHash(fileBuffer);\n const logs = await queryDownloadLogs(hash);\n if (logs.length === 0) return { type: 4, data: { content: \"未找到该文件的下载记录\", flags: 64 } };\n\n const logText = logs.map((log, i) => {\n const date = new Date(log.timestamp).toLocaleString(\"zh-CN\");\n return `**${i + 1}.** 用户：<@${log.userId}>\\n时间：${date}\\n文件名：${log.fileName}`;\n }).join(\"\\n\\n\");\n return { type: 4, data: { content: `📥 查询结果：\\n${logText}`, flags: 64 } };\n }\n\n if (name === \"禁言用户\") return await handlePunishCommand(interaction, \"mute\");\n if (name === \"踢出用户\") return await handlePunishCommand(interaction, \"kick\");\n if (name === \"封禁用户\") return await handlePunishCommand(interaction, \"ban\");\n\n if (name === \"管理权限\") {\n // 发送管理面板\n return {\n type: 4,\n data: {\n content: \"🔧 **管理面板**\",\n components: [\n {\n type: 1,\n components: [\n { type: 2, custom_id: \"admin_panel_mute\", label: \"禁言用户\", style: 1 },\n { type: 2, custom_id: \"admin_panel_kick\", label: \"踢出用户\", style: 1 },\n { type: 2, custom_id: \"admin_panel_ban\", label: \"封禁用户\", style: 4 },\n ],\n },\n ],\n flags: 64,\n },\n };\n }\n }\n\n return { type: 4, data: { content: \"未知命令\", flags: 64 } };\n}\n// ============ 审核上传网页 ============\nfunction generateUploadPage(token) {\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n

\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 定时任务：检查待审核数量 ============\nasync function sendPendingCount() {\n const res = await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages)) return;\n let count = 0;\n for (const msg of messages) {\n if (msg.content.startsWith(\"DETAIL_STATUS|\")) {\n const parts = msg.content.split(\"|\");\n if (parts.length >= 4 && parts[3] === \"pending\") count++;\n }\n }\n const reminderChannel = CONFIG.REVIEW_CHANNEL_ID;\n await fetch(`${DISCORD_API}/channels/${reminderChannel}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `⏰ 待审核数量提醒：当前还有 ${count} 条待审核项目。` }),\n });\n}\n\n// ============ 入口 ============\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/check_pending\") {\n await sendPendingCount();\n return new Response(\"OK\");\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并保护\",\n options: [\n { type: 11, name: \"文件1\", description: \"要上传的第一个文件（必需）\", required: true },\n { type: 11, name: \"文件2\", description: \"要上传的第二个文件（可选）\", required: false },\n { type: 11, name: \"文件3\", description: \"要上传的第三个文件（可选）\", required: false },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 3 },\n {\n name: \"查询文件\",\n description: \"通过文件查询下载记录\",\n default_member_permissions: \"8\",\n options: [{ type: 11, name: \"文件\", description: \"要查询的文件\", required: true }],\n },\n {\n name: \"禁言用户\",\n description: \"禁言指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"禁言理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"踢出用户\",\n description: \"踢出指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"踢出理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"封禁用户\",\n description: \"封禁指定用户（需密码）\",\n default_member_permissions: \"8\",\n options: [\n { type: 6, name: \"用户\", description: \"目标用户\", required: true },\n { type: 3, name: \"密码\", description: \"管理员密码\", required: true },\n { type: 3, name: \"理由\", description: \"封禁理由\", required: true },\n { type: 11, name: \"证据\", description: \"证据图片（可选）\", required: false },\n ],\n },\n {\n name: \"管理权限\",\n description: \"打开管理面板\",\n default_member_permissions: \"8\",\n },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n if (body.type === 5 && body.data.custom_id.startsWith(\"admin_\")) {\n // 处理管理面板 Modal 提交\n const customId = body.data.custom_id;\n const components = body.data.components;\n const targetUserId = components.find(c => c.components[0].custom_id === \"target_user\")?.components[0].value;\n const reason = components.find(c => c.components[0].custom_id === \"reason\")?.components[0].value;\n const password = components.find(c => c.components[0].custom_id === \"password\")?.components[0].value;\n const evidenceUrl = components.find(c => c.components[0].custom_id === \"evidence_url\")?.components[0].value;\n\n if (!targetUserId || !reason || !password) {\n return Response.json({ type: 4, data: { content: \"缺少必要参数\", flags: 64 } });\n }\n if (password !== ADMIN_PASSWORD) {\n return Response.json({ type: 4, data: { content: \"密码错误\", flags: 64 } });\n }\n\n const actionMap = {\n admin_mute_modal: \"mute\",\n admin_kick_modal: \"kick\",\n admin_ban_modal: \"ban\",\n };\n const actionType = actionMap[customId];\n if (!actionType) return Response.json({ type: 4, data: { content: \"未知操作\", flags: 64 } });\n\n // 构造 interaction 数据用于复用 handlePunishCommand\n const fakeInteraction = {\n data: {\n options: [\n { name: \"用户\", value: targetUserId, type: 6 },\n { name: \"密码\", value: password, type: 3 },\n { name: \"理由\", value: reason, type: 3 },\n { name: \"证据\", value: evidenceUrl || undefined, type: 11 },\n ],\n resolved: { attachments: {} },\n },\n member: { user: { id: body.member.user.id } },\n };\n // 简化：直接执行处罚，不依赖 handlePunishCommand 的复杂解析\n const actionLabel = actionType === \"ban\" ? \"封禁\" : actionType === \"kick\" ? \"踢出\" : \"禁言\";\n if (actionType === \"ban\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/bans/${targetUserId}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ reason }),\n });\n } else if (actionType === \"kick\") {\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n } else if (actionType === \"mute\") {\n const until = new Date(Date.now() + 24 * 60 * 60 * 1000).toISOString();\n await fetch(`${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${targetUserId}`, {\n method: \"PATCH\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ communication_disabled_until: until }),\n });\n }\n\n // 转发到处罚区\n const formData = new FormData();\n formData.append(\"content\", `⚠️ **处罚通知**\\n操作类型：${actionLabel}\\n执行管理员：<@${body.member.user.id}>\\n目标用户：<@${targetUserId}>\\n理由：${reason}`);\n if (evidenceUrl) {\n formData.append(\"content\", formData.get(\"content\") + `\\n证据链接：${evidenceUrl}`);\n }\n await fetch(`${DISCORD_API}/channels/${PUNISH_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: formData.get(\"content\") }),\n });\n\n return Response.json({ type: 4, data: { content: `已执行${actionLabel}操作`, flags: 64 } });\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}","createdAt",["D",1788409407640],"branchVersion","branchId","170b1e01-d0e0-4908-90ff-5484ab0467d7","id","285e8165-b722-44c5-8aa4-0fc89d86ada2","bot",["D",1787731807282],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","imageUrl","255b2f83-e7b2-4458-bc35-1a4c8d1e079c","pinnedFileId","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a03d1c-10cf-70bf-8aaf-c7f2fcd355c4","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_95":94,"_103":99},"org",{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},"branch",{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"isOwned",92,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","kuuo1","handle","displayName","MY A","avatar","https://lh3.googleusercontent.com/a/ACg8ocKLrPm5UHQCjxA3s4XozO23tRsnDQxGkAfvSdLQJNQvEuNm=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_43":44,"_32":45,"_38":164,"_47":-5,"_48":25,"_49":50,"_51":50,"_52":45,"_53":-5,"_18":54,"_55":31,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":-5,"_65":-5,"_66":-5,"_67":-5,"_68":69,"_70":69,"_71":72,"_73":72,"_74":72,"_75":69,"_76":69,"_77":165,"_79":166,"_81":167,"_83":25},"tree",[155,156],"files",[155,156],"counts",{"_144":61,"_145":146,"_147":61,"_148":149,"_150":151},"contents",[126,127],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":57,"_38":139,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_27":143},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":131,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_27":134},"eae57fc6-3d9f-4fca-bf6a-bc6cdb565abd","parentId","latest",["D",1788409407640],34,"label",[28],"2b7db0ba-b5b9-49b7-9a7f-fa2a8996bdca","main.ts","8ccfaef4-a125-11f1-8fe1-1607ee4eb77e",10,["D",1788328529580],2,"script","import nacl from \"https://esm.sh/tweetnacl@1.0.3\";\n\n// ============ 配置区 ============\nconst DISCORD_TOKEN =\n \"MTU0MjAyOTM5NTc2ODkwOTg2NA.GO6kYQ.twA7UXtgWIo53JI5yHiMomotM4lxKaoAvEDAmU\";\nconst DISCORD_PUBLIC_KEY =\n \"94b9d7f9b648d0439e81a78a4adb3112306564885f0ea8f2cb5531f2779e46c2\";\nconst DISCORD_APPLICATION_ID = \"1542029395768909864\";\nconst WORKER_URL =\n \"https://kuuo1--fd23803aa12611f1a35f1607ee4eb77e.web.val.run\"; // 改成你的 Val.town URL\nconst UPLOAD_SECRET = \"jsaiwrmcjosde9874we5\";\nconst REPO_CHANNEL_ID = \"1544579237024112710\"; // 私密仓库频道 ID（文件、日志、用户状态都存这里）\n// ============ 配置结束 ============\n\nconst CONFIG = {\n GUILD_ID: \"1537785482082000896\",\n BUFFER_CHANNEL_ID: \"1542049852337426532\",\n REVIEW_CHANNEL_ID: \"1542061740555243580\",\n APPROVED_ROLE_ID: \"1542062364021760021\",\n REPO_CHANNEL_ID: REPO_CHANNEL_ID,\n\n OPTIONS: [\n { label: \"此为何处\", role_id: \"1542060142265245726\" },\n { label: \"今日无事，看两个，不收元子\", role_id: \"1542060187152678943\" },\n { label: \"心如止水，岁月静好\", role_id: \"1542062364021760021\" },\n { label: \"看我飞天大中小草\", role_id: \"1544580882176806933\" },\n { label: \"虎邦辣酱真好吃\", role_id: \"1544580981200125972\" },\n ],\n\n BACK_TO_TOP_COMMAND: \"回顶\",\n UPLOAD_COMMAND: \"上传\",\n DOWNLOAD_COMMAND: \"下载\",\n MARK_COMMAND: \"标注\",\n DELETE_COMMAND: \"删除帖子\",\n\n UPLOAD_BUTTON_LABEL: \"📤 点击上传\",\n DOWNLOAD_BUTTON_LABEL: \"📥 下载文件\",\n BUTTON_MESSAGE_CONTENT: \"**欢迎！请点击下方按钮提交审核内容**\",\n\n UPLOAD_PAGE_TITLE: \"提交审核\",\n UPLOAD_PAGE_HEADING: \"请填写以下内容\",\n QUESTION1_LABEL: \"问题1：上传你的作品（图片或文件）\",\n QUESTION2_LABEL: \"问题2：选择你的专属分组（可多选，每选一个需上传对应凭证）\",\n SUBMIT_BUTTON_TEXT: \"提交审核\",\n SUCCESS_MESSAGE: \"上传成功！请返回 Discord 等待审核。\",\n ERROR_MESSAGE: \"上传失败，请重试。\",\n UPLOAD_LINK_TTL_MINUTES: 30,\n MAX_MODIFY_COUNT: 3,\n};\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nfunction hexToUint8Array(hex) {\n return new Uint8Array(hex.match(/.{1,2}/g).map((byte) => parseInt(byte, 16)));\n}\n\nasync function verifyRequest(req) {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n const body = await req.clone().text();\n if (!signature || !timestamp || !body) return false;\n try {\n return nacl.sign.detached.verify(\n new TextEncoder().encode(timestamp + body),\n hexToUint8Array(signature),\n hexToUint8Array(DISCORD_PUBLIC_KEY),\n );\n } catch {\n return false;\n }\n}\n\nasync function generateHmac(data, secret) {\n const encoder = new TextEncoder();\n const key = await crypto.subtle.importKey(\n \"raw\",\n encoder.encode(secret),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = await crypto.subtle.sign(\"HMAC\", key, encoder.encode(data));\n return Array.from(new Uint8Array(signature)).map((b) =>\n b.toString(16).padStart(2, \"0\")\n ).join(\"\");\n}\n\nasync function addRole(userId, roleId) {\n if (!roleId || roleId === \"\") return;\n await fetch(\n `${DISCORD_API}/guilds/${CONFIG.GUILD_ID}/members/${userId}/roles/${roleId}`,\n {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n}\n\n// ============ 文件保护与水印 ============\n\nfunction applyWatermark(buffer, mimetype, userId) {\n const bytes = new Uint8Array(buffer);\n if (mimetype === \"image/png\") {\n return insertPngTextChunk(bytes, \"DownloadedBy\", userId);\n } else if (mimetype === \"image/jpeg\" || mimetype === \"image/jpg\") {\n // 在 JPEG 末尾追加文本（EOI 标记后）\n const text = `\\nDownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (\n mimetype === \"text/xml\" || mimetype === \"application/xml\" ||\n mimetype === \"text/plain\"\n ) {\n const text = `\\n`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n } else if (mimetype === \"application/zip\") {\n // 简化：在文件末尾追加注释（ZIP 标准允许，但某些解析器可能忽略）\n const text = `DownloadedBy:${userId}`;\n const textBytes = new TextEncoder().encode(text);\n const newBytes = new Uint8Array(bytes.length + textBytes.length);\n newBytes.set(bytes);\n newBytes.set(textBytes, bytes.length);\n return newBytes.buffer;\n }\n return null; // 不支持的类型返回 null，后续在文件名加 ID\n}\n\nfunction insertPngTextChunk(pngBytes, keyword, value) {\n // PNG 结构：8字节签名 + 多个chunk (length + type + data + CRC)\n const signature = pngBytes.slice(0, 8);\n const chunks = [];\n let offset = 8;\n while (offset < pngBytes.length) {\n const length = new DataView(pngBytes.buffer, offset, 4).getUint32(0, false);\n const type = String.fromCharCode(...pngBytes.slice(offset + 4, offset + 8));\n const data = pngBytes.slice(offset + 8, offset + 8 + length);\n chunks.push({ type, data });\n offset += 12 + length;\n }\n\n const keywordBytes = new TextEncoder().encode(keyword);\n const valueBytes = new TextEncoder().encode(value);\n const textData = new Uint8Array(keywordBytes.length + 1 + valueBytes.length);\n textData.set(keywordBytes, 0);\n textData[keywordBytes.length] = 0;\n textData.set(valueBytes, keywordBytes.length + 1);\n\n const crcTable = [];\n for (let n = 0; n < 256; n++) {\n let c = n;\n for (let k = 0; k < 8; k++) {\n c = (c & 1)\n ? (0xEDB88320 ^ (c >>> 1))\n : (c >>> 1);\n }\n crcTable[n] = c;\n }\n function crc32(buf) {\n let crc = 0xFFFFFFFF;\n for (let i = 0; i < buf.length; i++) {\n crc = crcTable[(crc ^ buf[i]) & 0xFF] ^ (crc >>> 8);\n }\n return (crc ^ 0xFFFFFFFF) >>> 0;\n }\n\n const typeBytes = new TextEncoder().encode(\"tEXt\");\n const length = textData.length;\n const chunk = new Uint8Array(12 + length);\n new DataView(chunk.buffer).setUint32(0, length, false);\n chunk.set(typeBytes, 4);\n chunk.set(textData, 8);\n const crc = crc32(chunk.subarray(4, 8 + length));\n new DataView(chunk.buffer).setUint32(8 + length, crc, false);\n\n const newBytes = new Uint8Array(8 + pngBytes.length - 8 + chunk.length);\n newBytes.set(signature, 0);\n newBytes.set(pngBytes.slice(8), 8);\n newBytes.set(chunk, 8 + pngBytes.length - 8);\n return newBytes.buffer;\n}\n\n// ============ 私密仓库操作 ============\n\nasync function saveFileToRepo(channelId, fileName, fileBuffer, mimetype) {\n const formData = new FormData();\n formData.append(\"content\", `FILE|${channelId}|${fileName}`);\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`,\n {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n },\n );\n return res.ok ? await res.json() : null;\n}\n\nasync function findRepoMessageByContent(prefix) {\n const res = await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages?limit=100`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const messages = await res.json();\n if (!Array.isArray(messages)) return null;\n return messages.find((msg) => msg.content.startsWith(prefix));\n}\n\nasync function logDownload(userId, fileName, fileHash) {\n const content =\n `DOWNLOAD_LOG|${Date.now()}|${userId}|${fileName}|${fileHash}`;\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n}\n\nasync function updateUserStatus(userId, status, modifyCount = 0) {\n const prefix = `USER_STATUS|${userId}`;\n const existing = await findRepoMessageByContent(prefix);\n const content = `USER_STATUS|${userId}|${status}|${modifyCount}`;\n if (existing) {\n await fetch(\n `${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages/${existing.id}`,\n {\n method: \"PATCH\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n },\n );\n } else {\n await fetch(`${DISCORD_API}/channels/${CONFIG.REPO_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({ content }),\n });\n }\n}\n\nasync function getUserStatus(userId) {\n const prefix = `USER_STATUS|${userId}`;\n const msg = await findRepoMessageByContent(prefix);\n if (!msg) return null;\n const parts = msg.content.split(\"|\");\n return { status: parts[2], modifyCount: parseInt(parts[3] || \"0\") };\n}\n\n// ============ 审核消息发送（新） ============\n\nasync function sendReviewMessageQ1(\n content,\n fileBuffer,\n mimetype,\n fileName,\n userId,\n) {\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({\n content,\n components: [\n {\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q1_${userId}`,\n label: \"✅ 通过问题1\",\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q1_${userId}`,\n label: \"❌ 拒绝问题1\",\n style: 4,\n },\n ],\n },\n ],\n }),\n );\n formData.append(\n \"files\",\n new Blob([fileBuffer], { type: mimetype }),\n fileName,\n );\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\nasync function sendReviewMessageQ2(content, userId, selectedOptions) {\n // selectedOptions: [{ index, label, role_id, fileName, fileBuffer, mimetype }]\n const actionRows = selectedOptions.map((opt) => ({\n type: 1,\n components: [\n {\n type: 2,\n custom_id: `approve_q2_${userId}_${opt.index}`,\n label: `✅ 通过「${opt.label}」`,\n style: 3,\n },\n {\n type: 2,\n custom_id: `reject_q2_${userId}_${opt.index}`,\n label: `❌ 拒绝「${opt.label}」`,\n style: 4,\n },\n ],\n }));\n\n const formData = new FormData();\n formData.append(\n \"payload_json\",\n JSON.stringify({ content, components: actionRows }),\n );\n // 附件：问题2的多个文件（如果选项上传了文件）\n for (const opt of selectedOptions) {\n if (opt.fileBuffer) {\n formData.append(\n \"files\",\n new Blob([opt.fileBuffer], { type: opt.mimetype }),\n opt.fileName,\n );\n }\n }\n await fetch(`${DISCORD_API}/channels/${CONFIG.REVIEW_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n body: formData,\n });\n}\n\n// ============ 处理上传 ============\n\nasync function handleUpload(req) {\n const formData = await req.formData();\n const token = formData.get(\"token\");\n const file1 = formData.get(\"file1\");\n const optionIndicesStr = formData.get(\"option_indices\"); // 逗号分隔的选中项索引\n const optionIndices = optionIndicesStr\n ? optionIndicesStr.split(\",\").map(Number)\n : [];\n\n if (!token || !file1 || optionIndices.length === 0) {\n return Response.json({ error: \"缺少必要信息\" }, { status: 400 });\n }\n\n // 验证 token\n const parts = token.split(\".\");\n if (parts.length !== 2) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const [data, signature] = parts;\n const [userIdStr, expireStr] = data.split(\":\");\n if (!userIdStr || !expireStr) {\n return Response.json({ error: \"无效的token\" }, { status: 400 });\n }\n const expectedSig = await generateHmac(data, UPLOAD_SECRET);\n if (signature !== expectedSig) {\n return Response.json({ error: \"无效的token\" }, { status: 401 });\n }\n if (Date.now() > parseInt(expireStr)) {\n return Response.json({ error: \"token已过期\" }, { status: 401 });\n }\n const userId = userIdStr;\n\n // 检查用户状态\n const userStatus = await getUserStatus(userId);\n if (userStatus && userStatus.status === \"approved\") {\n return Response.json({ error: \"你已通过审核，不能再次提交\" }, {\n status: 403,\n });\n }\n if (userStatus && userStatus.status === \"pending\") {\n return Response.json({ error: \"你的审核正在进行中，请使用修改功能\" }, {\n status: 403,\n });\n }\n\n // 文件处理\n const file1Buffer = await file1.arrayBuffer();\n const file1Mime = file1.type || \"application/octet-stream\";\n const file1Name = file1.name;\n\n // 问题2 的选中项及文件\n const selectedOptions = [];\n for (const idx of optionIndices) {\n if (idx >= 0 && idx < CONFIG.OPTIONS.length) {\n const opt = CONFIG.OPTIONS[idx];\n const fileField = formData.get(`option_file_${idx}`);\n if (fileField) {\n const buf = await fileField.arrayBuffer();\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: fileField.name,\n fileBuffer: buf,\n mimetype: fileField.type || \"application/octet-stream\",\n });\n } else {\n selectedOptions.push({\n index: idx,\n label: opt.label,\n role_id: opt.role_id,\n fileName: null,\n fileBuffer: null,\n mimetype: null,\n });\n }\n }\n }\n\n // 更新用户状态为 pending\n await updateUserStatus(userId, \"pending\", 0);\n\n // 发送问题1审核消息\n await sendReviewMessageQ1(\n `📥 **新的提交（问题1）**\\n用户：<@${userId}>\\n文件：${file1Name}`,\n file1Buffer,\n file1Mime,\n file1Name,\n userId,\n );\n\n // 发送问题2审核消息\n const q2Content = `📥 **新的提交（问题2）**\\n用户：<@${userId}>\\n已选择：${\n selectedOptions.map((o) => o.label).join(\"、\")\n }`;\n await sendReviewMessageQ2(q2Content, userId, selectedOptions);\n\n return Response.json({ success: true });\n}\n\n// ============ 审核按钮处理 ============\n\nasync function handleButton(interaction) {\n const customId = interaction.data.custom_id;\n const userId = interaction.member.user.id;\n\n if (customId === \"open_upload_modal\") {\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击下方链接进入上传页面（仅你自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n // 审核通过/拒绝逻辑（保留原样，但处理多选问题2）\n if (customId.startsWith(\"approve_q1_\")) {\n const targetUserId = customId.replace(\"approve_q1_\", \"\");\n await addRole(targetUserId, CONFIG.APPROVED_ROLE_ID);\n await updateUserStatus(targetUserId, \"approved\", 0);\n return {\n type: 4,\n data: { content: `✅ 已通过问题1，<@${targetUserId}> 已获得基础身份组` },\n };\n }\n\n if (customId.startsWith(\"reject_q1_\")) {\n const targetUserId = customId.replace(\"reject_q1_\", \"\");\n return {\n type: 9,\n data: {\n title: \"拒绝理由（问题1）\",\n custom_id: `reject_reason_q1_${targetUserId}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n if (customId.startsWith(\"approve_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n const option = CONFIG.OPTIONS[optionIndex];\n if (option.role_id) await addRole(targetUserId, option.role_id);\n // 不改变整体状态，仅记录（可保持pending直到全部通过，但这里简化）\n return {\n type: 4,\n data: {\n content:\n `✅ 已通过问题2选项「${option.label}」，<@${targetUserId}> 获得对应身份组`,\n },\n };\n }\n\n if (customId.startsWith(\"reject_q2_\")) {\n const parts = customId.split(\"_\");\n const targetUserId = parts[2];\n const optionIndex = parseInt(parts[3]);\n return {\n type: 9,\n data: {\n title: `拒绝理由（选项「${CONFIG.OPTIONS[optionIndex].label}」）`,\n custom_id: `reject_reason_q2_${targetUserId}_${optionIndex}`,\n components: [{\n type: 1,\n components: [{\n type: 4,\n custom_id: \"reason\",\n label: \"请输入拒绝理由\",\n style: 2,\n required: true,\n }],\n }],\n },\n };\n }\n\n // 下载按钮处理（点赞验证）\n if (customId.startsWith(\"download_\")) {\n const postMessageId = customId.replace(\"download_\", \"\");\n // 检查点赞：获取帖子消息的反应\n const reactionsRes = await fetch(\n `${DISCORD_API}/channels/${interaction.channel_id}/messages/${postMessageId}/reactions/%E2%9C%85`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n if (reactionsRes.ok) {\n // 实际上应该用 GET /channels/{channel.id}/messages/{message.id}/reactions/{emoji}?limit=100 并检查用户\n // 简单处理：假设赞的 emoji 是 ✅，需要进一步解析，这里省略，实际需验证\n }\n // 由于时间有限，这里返回提示，实际需完整实现\n return { type: 4, data: { content: \"请先给帖子点赞\", flags: 64 } };\n }\n\n return { type: 4, data: { content: \"未知操作\" } };\n}\n\n// ============ 拒绝理由处理 ============\n\nasync function handleReasonModal(interaction) {\n const customId = interaction.data.custom_id;\n const reason = interaction.data.components[0].components[0].value;\n let targetUserId = \"\";\n let message = \"\";\n\n if (customId.startsWith(\"reject_reason_q1_\")) {\n targetUserId = customId.replace(\"reject_reason_q1_\", \"\");\n message = `❌ 你的问题1被拒绝了。\\n理由：${reason}`;\n await updateUserStatus(targetUserId, \"rejected\", 0);\n } else if (customId.startsWith(\"reject_reason_q2_\")) {\n const parts = customId.split(\"_\");\n targetUserId = parts[3];\n const optionIndex = parseInt(parts[4]);\n const option = CONFIG.OPTIONS[optionIndex];\n message = `❌ 你的问题2选项「${option.label}」被拒绝了。\\n理由：${reason}`;\n // 不改变整体状态，只通知\n }\n\n await fetch(`${DISCORD_API}/channels/${CONFIG.BUFFER_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n content: `<@${targetUserId}> ${message}`,\n flags: 64,\n }),\n });\n\n return { type: 4, data: { content: \"已发送拒绝通知\", flags: 64 } };\n}\n\n// ============ 命令处理（含斜杠命令和上下文菜单） ============\n\nasync function handleCommand(interaction) {\n const { name, type, options, target_id } = interaction.data;\n const channelId = interaction.channel_id;\n const userId = interaction.member.user.id;\n\n // 消息上下文菜单\n if (type === 2 && name === CONFIG.MARK_COMMAND) {\n // 标注：Pin 消息\n await fetch(`${DISCORD_API}/channels/${channelId}/pins/${target_id}`, {\n method: \"PUT\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"已标注该消息\", flags: 64 } };\n }\n\n if (type === 2 && name === CONFIG.DELETE_COMMAND) {\n // 删除帖子：仅作者可删\n const msgRes = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${target_id}`,\n {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n },\n );\n const msg = await msgRes.json();\n if (msg.author.id !== userId) {\n return { type: 4, data: { content: \"你只能删除自己的帖子\", flags: 64 } };\n }\n await fetch(`${DISCORD_API}/channels/${channelId}/messages/${target_id}`, {\n method: \"DELETE\",\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n return { type: 4, data: { content: \"帖子已删除\", flags: 64 } };\n }\n\n // 斜杠命令\n if (type === 1) {\n if (name === CONFIG.BACK_TO_TOP_COMMAND) {\n let firstMessage = null;\n let before = null;\n while (true) {\n let url = `${DISCORD_API}/channels/${channelId}/messages?limit=100`;\n if (before) url += `&before=${before}`;\n const res = await fetch(url, {\n headers: { Authorization: `Bot ${DISCORD_TOKEN}` },\n });\n const messages = await res.json();\n if (!Array.isArray(messages) || messages.length === 0) break;\n if (messages.length < 100) {\n firstMessage = messages[messages.length - 1];\n break;\n } else before = messages[messages.length - 1].id;\n }\n if (!firstMessage) {\n return { type: 4, data: { content: \"找不到第一条消息\", flags: 64 } };\n }\n const link =\n `https://discord.com/channels/${CONFIG.GUILD_ID}/${channelId}/${firstMessage.id}`;\n return {\n type: 4,\n data: { content: `[点击回到第一条消息](${link})`, flags: 64 },\n };\n }\n\n if (name === CONFIG.UPLOAD_COMMAND) {\n // 打开上传页面\n const timestamp = Date.now();\n const expire = timestamp + CONFIG.UPLOAD_LINK_TTL_MINUTES * 60 * 1000;\n const data = `${userId}:${expire}`;\n const signature = await generateHmac(data, UPLOAD_SECRET);\n const token = `${data}.${signature}`;\n const fullUrl = `${WORKER_URL}/upload?token=${encodeURIComponent(token)}`;\n return {\n type: 4,\n data: {\n content: `点击链接上传文件（仅自己可见）：\\n${fullUrl}`,\n flags: 64,\n },\n };\n }\n\n if (name === CONFIG.DOWNLOAD_COMMAND) {\n // 列出当前频道的文件（简化：直接提示输入文件名）\n return {\n type: 4,\n data: { content: \"下载功能请点击帖子上的下载按钮\", flags: 64 },\n };\n }\n }\n\n return { type: 4, data: { content: \"未知命令\" } };\n}\n\n// ============ 上传页面 ============\n\nfunction generateUploadPage(token) {\n // 多选复选框和文件上传框\n const optionsHtml = CONFIG.OPTIONS.map((opt, i) => `\n

\n \n ${opt.label}\n \n

\n `).join(\"\");\n\n return `\n\n\n \n \n ${CONFIG.UPLOAD_PAGE_TITLE}\n \n\n\n

${CONFIG.UPLOAD_PAGE_HEADING}

\n \n

\n \n\n`;\n}\n\n// ============ 入口 ============\n\nexport default async function (req) {\n const url = new URL(req.url);\n\n if (url.pathname === \"/upload\" && req.method === \"GET\") {\n const token = url.searchParams.get(\"token\");\n if (!token) return new Response(\"缺少token\", { status: 400 });\n return new Response(generateUploadPage(token), {\n headers: { \"Content-Type\": \"text/html\" },\n });\n }\n\n if (url.pathname === \"/upload\" && req.method === \"POST\") {\n return await handleUpload(req);\n }\n\n if (url.pathname === \"/register\") {\n const commands = [\n { name: CONFIG.BACK_TO_TOP_COMMAND, description: \"回到频道第一条消息\" },\n {\n name: CONFIG.UPLOAD_COMMAND,\n description: \"上传文件并创建帖子\",\n options: [\n {\n type: 11,\n name: \"文件\",\n description: \"要上传的文件\",\n required: true,\n },\n { type: 3, name: \"描述\", description: \"文件描述\", required: false },\n ],\n },\n { name: CONFIG.DOWNLOAD_COMMAND, description: \"下载当前频道的文件\" },\n { name: CONFIG.MARK_COMMAND, type: 2 }, // 消息上下文菜单\n { name: CONFIG.DELETE_COMMAND, type: 2 },\n ];\n const res = await fetch(\n `${DISCORD_API}/applications/${DISCORD_APPLICATION_ID}/commands`,\n {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${DISCORD_TOKEN}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n },\n );\n return new Response(res.ok ? \"Commands registered\" : \"Register failed\", {\n status: res.ok ? 200 : 500,\n });\n }\n\n if (req.method !== \"POST\") {\n return new Response(\"Method not allowed\", { status: 405 });\n }\n if (!(await verifyRequest(req))) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const body = await req.json();\n if (body.type === 1) return Response.json({ type: 1 });\n if (body.type === 2) return Response.json(await handleCommand(body));\n if (body.type === 3) return Response.json(await handleButton(body));\n if (body.type === 5 && body.data.custom_id.startsWith(\"reject_reason\")) {\n return Response.json(await handleReasonModal(body));\n }\n\n return Response.json({ error: \"Unknown request\" }, { status: 400 });\n}",[136],"pulls","branches",1,"forks","envVars",{"_152":61,"_154":61},"connections",{"_152":61,"_153":61},"count","unfilledCount","emptyCount",{"_43":135,"_32":136,"_30":137,"_129":-5,"_41":42,"_40":138,"_130":57,"_38":161,"_13":140,"_33":141,"_35":142,"_24":25,"_133":-5,"_158":162,"_27":163},{"_43":128,"_32":28,"_30":31,"_129":-5,"_41":42,"_40":14,"_130":25,"_38":157,"_13":132,"_33":34,"_35":37,"_24":25,"_133":-5,"_158":159,"_27":160},["D",1788409407640],"children",[],[28],["D",1788328529580],[],[136],["D",1787731807282],{"_95":94,"_103":99},{"_95":94,"_96":97,"_98":99,"_18":54,"_100":101,"_102":25},{"_13":84,"_32":85,"_43":42,"_86":44,"_87":-5,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":45,"_93":94},"ctx",{"_77":-5,"_123":201,"_202":203,"_204":205,"_206":25,"_207":25,"_208":25,"_209":57,"_210":-5,"_211":-7,"_212":-7,"_213":61,"_214":25,"_215":25,"_216":-5,"_217":25,"_218":25,"_219":25,"_220":-5},"ENV",{"_172":173,"_174":175,"_176":85,"_177":178,"_179":180,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v38