邮件收件箱

最新 100 封，点击行查看详情

\n \n \n \n \n \n

ID	时间	发件人	主题	摘要

\n\n

邮件详情

请选择一封邮件

Text

HTML 源码

\n\n \n\n`;\n}\n\nexport default async function (req: Request): Promise {\n await ensureTable();\n const url = new URL(req.url);\n\n if (req.method === \"POST\" && url.pathname === \"/api/receive\") {\n const expectedToken = Deno.env.get(\"INGEST_TOKEN\");\n if (expectedToken) {\n const got = req.headers.get(\"x-ingest-token\");\n if (got !== expectedToken) {\n return json({ ok: false, error: \"Unauthorized\" }, 401);\n }\n }\n\n let body: any;\n try {\n body = await req.json();\n } catch {\n return json({ ok: false, error: \"Invalid JSON\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: `INSERT INTO ${TABLE}\n (received_at, from_addr, to_addr, cc_addr, bcc_addr, subject, text_body, html_body, headers_json, attachments_json)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [\n String(body.receivedAt ?? new Date().toISOString()),\n String(body.from ?? \"\"),\n normalizeAddr(body.to),\n normalizeAddr(body.cc),\n normalizeAddr(body.bcc),\n String(body.subject ?? \"\"),\n String(body.text ?? \"\"),\n String(body.html ?? \"\"),\n JSON.stringify(body.headers ?? {}),\n JSON.stringify(body.attachments ?? []),\n ],\n });\n\n return json({ ok: true, id: Number(result.lastInsertRowid ?? 0) });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/api/mails\") {\n const limit = Math.min(\n 200,\n Math.max(1, Number(url.searchParams.get(\"limit\") ?? 100)),\n );\n const result = await sqlite.execute({\n sql:\n `SELECT id, received_at, from_addr, subject, substr(coalesce(text_body, ''), 1, 120) AS snippet\n FROM ${TABLE}\n ORDER BY id DESC\n LIMIT ?`,\n args: [limit],\n });\n\n const items = (result.rows as Record[]).map((r) => ({\n id: Number(r.id ?? 0),\n receivedAt: String(r.received_at ?? \"\"),\n from: String(r.from_addr ?? \"\"),\n subject: String(r.subject ?? \"\"),\n snippet: String(r.snippet ?? \"\"),\n }));\n\n return json({ ok: true, items });\n }\n\n // 不用正则，避免转义错误\n if (req.method === \"GET\" && url.pathname.startsWith(\"/api/mails/\")) {\n const id = Number(url.pathname.slice(\"/api/mails/\".length));\n if (!Number.isInteger(id) || id <= 0) {\n return json({ ok: false, error: \"Invalid id\" }, 400);\n }\n\n const result = await sqlite.execute({\n sql: `SELECT * FROM ${TABLE} WHERE id = ? LIMIT 1`,\n args: [id],\n });\n\n if (!result.rows.length) {\n return json({ ok: false, error: \"Not Found\" }, 404);\n }\n\n const item = rowToMail(result.rows[0] as Record);\n return json({ ok: true, item });\n }\n\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(renderPage(), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n return json({ ok: false, error: \"Not Found\" }, 404);\n}",[131],"152490d6-4117-11f1-9a61-42b51c65c3df","main.ts","b550afba-40bb-11f1-88c7-42b51c65c3df",4,["D",1777170281977],3,"// 这份代码可以直接复制到 Valtown 的 HTTP Val 里运行。\n// 作用是快速生成一个公网辅助页面，方便你拿到 notify_url / return_url 并对照填写本地 `.env`。\n\n// 这个类型只是为了让首页 HTML 渲染函数的入参更清晰。\ntype RenderPageInput = {\n baseUrl: string;\n notifyUrl: string;\n returnUrl: string;\n requestUrl: string;\n};\n\n// 这个类型明确描述“请求快照”的结构，后面渲染可读版时更容易理解。\ntype RequestSnapshot = {\n method: string;\n url: string;\n headers: Record;\n query: Record;\n body: unknown;\n};\n\n// 这个函数专门负责把首页 HTML 渲染出来。\nfunction renderHomePage(input: RenderPageInput): string {\n // 直接使用模板字符串拼接 HTML，方便你复制到 Valtown 后零依赖运行。\n return `\n\n \n \n \n YMXH 回调地址辅助页\n \n \n \n

忆梦星河支付回调地址辅助页

\n 这个页面部署在 Valtown 后，会自动生成一组公网地址，方便你对照填写本地\n scripts/ymxh_cli/.env。\n

当前公网基地址

${input.baseUrl}

当前页面地址

${input.requestUrl}

\n\n

建议填写的两个地址

YMXH_NOTIFY_URL（临时联调用测试地址）

${input.notifyUrl}

YMXH_RETURN_URL

${input.returnUrl}

YMXH_NOTIFY_URL=\"${input.notifyUrl}\"\nYMXH_RETURN_URL=\"${input.returnUrl}\"

\n\n

两项配置分别是干什么的？

\n YMXH_NOTIFY_URL：支付平台服务器异步回调你的地址。
\n 更适合做：验签、确认订单状态、更新支付结果、推进后续业务。\n
\n YMXH_RETURN_URL：支付完成后，平台把用户浏览器跳转回来的地址。
\n 更适合做：页面提示、展示支付结果、引导用户返回订单页。\n

\n 重要提醒：
\n 这里提供的 ${input.notifyUrl} 更适合“临时联调观察”。
\n 如果你要在支付成功后直接推进自己项目的正式业务流程，YMXH_NOTIFY_URL 最好还是填写你自己项目的公网回调接口。\n

\n\n

辅助入口

\n \n 打开 notify 调试入口\n \n
\n \n 打开 return 展示入口\n \n

\n \n`;\n}\n\n// 这个函数把回调请求中的参数收集成普通对象，方便页面展示。\nasync function collectRequestSnapshot(\n request: Request,\n): Promise {\n // 先把 URL 查询参数转成对象。\n const query: Record = {};\n\n // 用 forEach 收集查询参数，兼容 TypeScript 当前的 DOM 类型定义。\n new URL(request.url).searchParams.forEach((value, key) => {\n query[key] = value;\n });\n\n // 读取请求头，便于在页面里看清平台到底回传了什么。\n const headers: Record = {};\n\n // 同样用 forEach 收集请求头。\n request.headers.forEach((value, key) => {\n headers[key] = value;\n });\n\n // 根据 content-type 判断是否要解析表单或 JSON。\n const contentType = request.headers.get(\"content-type\") ?? \"\";\n\n // 默认 body 先置空，后续按类型填充。\n let body: unknown = null;\n\n // 对表单请求做标准解析。\n if (contentType.includes(\"application/x-www-form-urlencoded\")) {\n // 先读取表单对象，后面再手动转成普通对象。\n const formData = await request.clone().formData();\n\n // 用普通对象承接表单字段，避免直接依赖 `FormData.entries()` 的类型定义。\n const formBody: Record = {};\n\n // 使用 `forEach` 逐项收集字段，这样在 Valtown / Deno 的类型环境里兼容性更稳。\n formData.forEach((value, key) => {\n // `FormData` 的值可能是字符串，也可能是 `File`。\n // 这里统一转成可读字符串，便于你在调试页面直观看到传了什么。\n formBody[key] = typeof value === \"string\" ? value : value.name;\n });\n\n // 把整理后的表单对象放进快照结果里。\n body = formBody;\n } else if (contentType.includes(\"application/json\")) {\n // 对 JSON 请求做 JSON 解析。\n body = await request.clone().json().catch(() => null);\n } else {\n // 其他类型统一保留原始文本，方便调试观察。\n const text = await request.clone().text();\n body = text.length > 0 ? text : null;\n }\n\n // 返回一份完整快照。\n return {\n method: request.method,\n url: request.url,\n headers,\n query,\n body,\n };\n}\n\n// 这个函数做最基础的 HTML 转义，避免原始数据直接插进页面破坏结构。\nfunction escapeHtml(rawText: unknown): string {\n // 先统一转字符串，保证数字、布尔值也能共用同一个展示函数。\n const text = String(rawText ?? \"\");\n\n // 依次转义最常见的特殊字符。\n return text\n .replaceAll(\"&\", \"&\")\n .replaceAll(\"<\", \"<\")\n .replaceAll(\">\", \">\")\n .replaceAll('\"', \""\")\n .replaceAll(\"'\", \"'\");\n}\n\n// 这个函数尝试把任意值转成“普通对象”，方便后面统一读取字段。\nfunction asStringRecord(value: unknown): Record {\n // 只有普通对象才继续处理。\n if (!value || typeof value !== \"object\" || Array.isArray(value)) {\n return {};\n }\n\n // 创建一个新对象承接结果。\n const result: Record = {};\n\n // 把所有值统一转成字符串，后面渲染时就能直接复用。\n for (const [key, entryValue] of Object.entries(value)) {\n result[key] = String(entryValue ?? \"\");\n }\n\n return result;\n}\n\n// 这个函数优先抽取真正和支付业务相关的载荷。\nfunction getBusinessPayload(snapshot: RequestSnapshot): Record {\n // notify 的 POST 一般在 body 里；return 的 GET 一般在 query 里。\n const bodyRecord = asStringRecord(snapshot.body);\n\n // body 有值时优先使用 body。\n if (Object.keys(bodyRecord).length > 0) {\n return bodyRecord;\n }\n\n // 否则退回到 query 参数。\n return snapshot.query;\n}\n\n// 这个函数专门取业务字段值，避免每次都重复写空值判断。\nfunction getFieldValue(\n payload: Record,\n key: string,\n): string | undefined {\n // 去掉首尾空格后再决定是否展示。\n const value = payload[key]?.trim();\n return value && value.length > 0 ? value : undefined;\n}\n\n// 这个函数把 trade_status 转成更显眼的状态标签。\nfunction getTradeStatusBadge(tradeStatus: string | undefined): {\n label: string;\n cssClass: string;\n} {\n // 没带状态时给一个中性提示。\n if (!tradeStatus) {\n return {\n label: \"未提供支付状态\",\n cssClass: \"badge-neutral\",\n };\n }\n\n // 成功态高亮绿色。\n if (tradeStatus === \"TRADE_SUCCESS\") {\n return {\n label: \"支付成功\",\n cssClass: \"badge-success\",\n };\n }\n\n // 处理中高亮蓝色。\n if (tradeStatus.includes(\"WAIT\") || tradeStatus.includes(\"PROCESS\")) {\n return {\n label: `处理中 · ${tradeStatus}`,\n cssClass: \"badge-info\",\n };\n }\n\n // 失败/关闭类统一高亮红色。\n if (\n tradeStatus.includes(\"FAIL\") || tradeStatus.includes(\"CLOSE\") ||\n tradeStatus.includes(\"CANCEL\")\n ) {\n return {\n label: `异常/关闭 · ${tradeStatus}`,\n cssClass: \"badge-danger\",\n };\n }\n\n // 其他状态按中性展示。\n return {\n label: tradeStatus,\n cssClass: \"badge-neutral\",\n };\n}\n\n// 这个函数输出 notify / return 页共用的 CSS，统一视觉风格。\nfunction renderCommonStyles(pageTitle: string): string {\n // 样式尽量做得紧凑一点，同时把重点字段和普通信息层次拉开。\n return `\n\n \n \n \n ${pageTitle}\n \n \n `;\n}\n\n// 这个函数把一组字段渲染成紧凑卡片，专门给“可读版”复用。\nfunction renderFieldCards(\n fields: Array<{ label: string; value?: string; mono?: boolean }>,\n): string {\n // 把真正没有值的字段过滤掉，避免页面太长。\n const visibleFields = fields.filter((field) =>\n typeof field.value === \"string\" && field.value.length > 0\n );\n\n // 没有字段时给一个提示卡片。\n if (visibleFields.length === 0) {\n return `

提示

当前没有可展示字段。

`;\n }\n\n // 统一渲染为紧凑小卡片。\n return visibleFields.map((field) =>\n `

${escapeHtml(field.label)}

${\n escapeHtml(field.value)\n }

`\n ).join(\"\");\n}\n\n// 这个函数渲染“请求来源信息”，帮助你快速看浏览器/平台是怎么访问过来的。\nfunction renderRequestMeta(snapshot: RequestSnapshot): string {\n // 请求头里优先挑最有调试价值的几项。\n return `

请求来源

\n ${escapeHtml(snapshot.method)}\n

\n ${\n renderFieldCards([\n { label: \"当前访问 URL\", value: snapshot.url, mono: true },\n { label: \"Referer\", value: snapshot.headers.referer, mono: true },\n {\n label: \"来源 IP\",\n value: snapshot.headers[\"cf-connecting-ip\"] ??\n snapshot.headers[\"true-client-ip\"] ??\n snapshot.headers[\"x-forwarded-for\"],\n mono: true,\n },\n {\n label: \"User-Agent\",\n value: snapshot.headers[\"user-agent\"],\n mono: true,\n },\n {\n label: \"Content-Type\",\n value: snapshot.headers[\"content-type\"] ?? \"(空)\",\n mono: true,\n },\n ])\n }\n

`;\n}\n\n// 这个函数渲染“可阅读版本”的核心业务区域。\nfunction renderReadableBusinessSection(\n pageKind: \"notify\" | \"return\",\n snapshot: RequestSnapshot,\n): string {\n // 先取真正的业务载荷。\n const payload = getBusinessPayload(snapshot);\n\n // 支付状态单独做醒目徽标。\n const tradeStatus = getFieldValue(payload, \"trade_status\");\n const tradeStatusBadge = getTradeStatusBadge(tradeStatus);\n\n // notify 和 return 页的引导文案稍微区分一下。\n const intro = pageKind === \"notify\"\n ? \"这是支付平台异步回调到你服务端的调试页，更适合核对签名、订单号、金额、支付状态等服务端字段。\"\n : \"这是支付完成后浏览器跳回来的展示页，更适合查看浏览器带回了哪些参数。\";\n\n const warn = pageKind === \"notify\"\n ? \"正式业务里，notify_url 应在服务端完成验签、幂等更新订单、推进后续业务，并按平台要求返回 success。\"\n : \"return_url 页面主要用于展示，不建议只依赖这里的参数作为最终支付成功依据。\";\n\n // 顶部区域突出核心定位和支付状态。\n return `

YMXH ${\n pageKind === \"notify\" ? \"Notify 调试页\" : \"Return 展示页\"\n }

${escapeHtml(intro)}

\n ${\n escapeHtml(tradeStatusBadge.label)\n }\n

\n\n

\n ${escapeHtml(warn)}\n

\n\n

核心业务字段

\n ${\n escapeHtml(\n pageKind === \"notify\" ? \"服务端回调\" : \"浏览器跳转\",\n )\n }\n

\n ${\n renderFieldCards([\n { label: \"商户号 pid\", value: getFieldValue(payload, \"pid\") },\n {\n label: \"平台订单号 trade_no\",\n value: getFieldValue(payload, \"trade_no\"),\n },\n {\n label: \"商户订单号 out_trade_no\",\n value: getFieldValue(payload, \"out_trade_no\"),\n },\n {\n label: \"上游订单号 api_trade_no\",\n value: getFieldValue(payload, \"api_trade_no\"),\n },\n { label: \"支付方式 type\", value: getFieldValue(payload, \"type\") },\n { label: \"订单标题 name\", value: getFieldValue(payload, \"name\") },\n { label: \"金额 money\", value: getFieldValue(payload, \"money\") },\n { label: \"支付状态 trade_status\", value: tradeStatus },\n { label: \"买家标识 buyer\", value: getFieldValue(payload, \"buyer\") },\n { label: \"附加参数 param\", value: getFieldValue(payload, \"param\") },\n { label: \"时间戳 timestamp\", value: getFieldValue(payload, \"timestamp\") },\n {\n label: \"签名方式 sign_type\",\n value: getFieldValue(payload, \"sign_type\"),\n },\n ])\n }\n

\n\n

签名与关键长字段

\n 重点核对\n

\n ${\n renderFieldCards([\n { label: \"签名 sign\", value: getFieldValue(payload, \"sign\"), mono: true },\n {\n label: \"错误信息 errmsg / msg\",\n value: getFieldValue(payload, \"errmsg\") ??\n getFieldValue(payload, \"msg\"),\n },\n { label: \"响应码 code\", value: getFieldValue(payload, \"code\") },\n ])\n }\n

\n\n ${renderRequestMeta(snapshot)}\n\n

怎么看这页

核心业务字段：快速看订单号、状态、金额、买家、附加参数。
签名与关键长字段：快速核对 sign、错误码、错误消息。
请求来源：快速看浏览器来源、Referer、IP、User-Agent。
原始 JSON 快照：用于和抓包、日志、支付商文档逐项对照。

`;\n}\n\n// 这个函数把原始快照完整展示出来，方便做最底层核对。\nfunction renderRawSnapshotSection(snapshot: RequestSnapshot): string {\n // 原始快照仍然完整保留，只是默认折叠，避免页面一上来过于杂乱。\n return `

原始 JSON 快照

点击展开原始 method / url / headers / query / body

${escapeHtml(JSON.stringify(snapshot, null, 2))}

`;\n}\n\n// 这个函数渲染 notify 调试页面。\nfunction renderNotifyPage(snapshot: RequestSnapshot): string {\n // notify 页先展示可阅读版，再保留原始快照。\n return `${renderCommonStyles(\"YMXH Notify 调试页\")}\n

\n ${renderReadableBusinessSection(\"notify\", snapshot)}\n ${renderRawSnapshotSection(snapshot)}\n

\n \n`;\n}\n\n// 这个函数渲染 return 展示页面。\nfunction renderReturnPage(snapshot: RequestSnapshot): string {\n // return 页同样先展示可阅读版，再展示原始快照。\n return `${renderCommonStyles(\"YMXH Return 展示页\")}\n

\n ${renderReadableBusinessSection(\"return\", snapshot)}\n ${renderRawSnapshotSection(snapshot)}\n

\n \n`;\n}\n\n// Valtown HTTP Val 的主入口。\nexport default async function (request: Request): Promise {\n // 从当前请求 URL 中拿到部署后的公网基地址。\n const currentUrl = new URL(request.url);\n\n // 这里把“当前 origin + pathname 根目录”拼成可复用基地址。\n const baseUrl = `${currentUrl.protocol}//${currentUrl.host}`;\n\n // 约定 `/notify` 作为异步回调调试入口。\n const notifyUrl = `${baseUrl}/notify`;\n\n // 约定 `/return` 作为同步跳转结果页。\n const returnUrl = `${baseUrl}/return`;\n\n // 如果访问的是首页，就展示配置说明与可填写地址。\n if (currentUrl.pathname === \"/\") {\n return new Response(\n renderHomePage({\n baseUrl,\n notifyUrl,\n returnUrl,\n requestUrl: request.url,\n }),\n {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n },\n );\n }\n\n // 如果访问的是 `/notify`，则把收到的请求内容完整展示出来。\n if (currentUrl.pathname === \"/notify\") {\n // 先收集请求快照，便于调试查看。\n const snapshot = await collectRequestSnapshot(request);\n\n // 浏览器直接访问时，返回 HTML 页面更好读。\n if (request.method === \"GET\") {\n return new Response(renderNotifyPage(snapshot), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n }\n\n // 对支付平台的实际异步回调，直接回 `success` 更贴近常见支付网关要求。\n return new Response(\"success\", {\n headers: {\n \"content-type\": \"text/plain; charset=utf-8\",\n },\n });\n }\n\n // 如果访问的是 `/return`，就展示浏览器跳回来的参数。\n if (currentUrl.pathname === \"/return\") {\n // 收集请求快照并渲染结果页。\n const snapshot = await collectRequestSnapshot(request);\n\n // 返回清晰可读的 HTML 页面。\n return new Response(renderReturnPage(snapshot), {\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n },\n });\n }\n\n // 其他路径统一返回 404，避免出现含糊不清的默认行为。\n return new Response(\"Not Found\", { status: 404 });\n}",[140],"pulls",1,"forks","envVars",{"_154":51,"_156":51},"connections",{"_154":51,"_155":51},"count","unfilledCount","emptyCount",{"_20":139,"_13":140,"_115":141,"_117":-5,"_118":21,"_119":142,"_120":105,"_22":167,"_29":144,"_123":136,"_125":145,"_127":38,"_128":-5,"_161":168,"_87":169},{"_20":130,"_13":131,"_115":132,"_117":-5,"_118":21,"_119":133,"_120":105,"_22":164,"_29":135,"_123":136,"_125":137,"_127":38,"_128":-5,"_161":165,"_87":166},{"_20":113,"_13":114,"_115":116,"_117":-5,"_118":21,"_119":30,"_120":105,"_22":160,"_29":122,"_123":124,"_125":126,"_127":38,"_128":-5,"_161":162,"_87":163},["D",1777255947729],"children",[],[114],["D",1777255901838],[],[131],["D",1777170281977],[],[140],["D",1777131036990],{"_11":12,"_85":81},{"_11":12,"_79":-5,"_80":81,"_44":45,"_82":83,"_84":38},{"_29":30,"_13":26,"_20":21,"_27":28,"_31":-5,"_32":-5,"_74":-5,"_75":-5,"_76":-5,"_77":14,"_78":12},"ctx",{"_67":-5,"_107":207,"_208":209,"_210":211,"_212":38,"_213":38,"_214":38,"_215":105,"_216":-5,"_217":-7,"_218":-7,"_219":51,"_220":38,"_221":38,"_222":-5,"_223":38,"_224":38,"_225":38,"_226":-5},"ENV",{"_178":179,"_180":181,"_182":26,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204,"_205":206},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Branches1

Branches
1