// ================== 常量区 ==================
🤖 你好，欢迎使用 @guaguawa_bot 双向聊天机器人！
请通过此机器人发送您的消息与我联系，我会立即为您传达。
const START_MESSAGE_ADMIN = `
本机器人用于 <b>双向匿名聊天</b>，旨在提高用户的沟通体验，并防止骚扰。
- 匿名聊天：用户可以自由交流，管理员可管理消息流转。
- 防骚扰功能：管理员可使用 /block 指令屏蔽不良用户。
- 诈骗检测：自动检测是否属于诈骗用户，并提醒管理员。
- /checkblock 查询用户状态（管理员）
🔹 机器人由 <b>匿名聊天管理系统</b> 提供支持。
// ================== Worker 入口（ESM 格式） ==================
async fetch(request, env, ctx) {
const url = new URL(request.url);
if (url.pathname === "/endpoint") {
return handleWebhook(request, env, ctx);
if (url.pathname === "/registerWebhook") {
return registerWebhook(request, env);
if (url.pathname === "/unRegisterWebhook") {
return unRegisterWebhook(request, env);
return new Response("OK");
// ===================== Telegram API 封装 ========================
function apiUrl(methodName, params = null, env) {
let query = params ? "?" + new URLSearchParams(params).toString() : "";
return `https://api.telegram.org/bot${env.ENV_BOT_TOKEN}/${methodName}${query}`;
function requestTelegram(method, body, env, params = null) {
return fetch(apiUrl(method, params, env), body).then(r => r.json());
const makeReq = (body) => ({
headers: { "content-type": "application/json" },
body: JSON.stringify(body)
const sendMessage = (msg, env) =>
requestTelegram("sendMessage", makeReq(msg), env);
const forwardMessage = (msg, env) =>
requestTelegram("forwardMessage", makeReq(msg), env);
const copyMessage = (msg, env) =>
requestTelegram("copyMessage", makeReq(msg), env);
// ===================== Webhook ========================
async function handleWebhook(request, env, ctx) {
if (request.headers.get("X-Telegram-Bot-Api-Secret-Token") !== env.ENV_BOT_SECRET) {
return new Response("Unauthorized", { status: 403 });
const update = await request.json();
ctx.waitUntil(onUpdate(update, env));
return new Response("OK");
// ===================== Update Routing ========================
async function onUpdate(update, env) {
await onMessage(update.message, env);
if (update.callback_query) {
await onCallback(update.callback_query, env);
// ===================== D1 数据库封装 ========================
async function getBlock(env, userId) {
const row = await env.TG_BOT_DB.prepare("SELECT is_blocked FROM blocks WHERE user_id=?").bind(userId).first();
return row ? row.is_blocked === 1 : false;
async function setBlock(env, userId, val) {
await env.TG_BOT_DB.prepare("INSERT OR REPLACE INTO blocks (user_id, is_blocked) VALUES (?, ?)").bind(userId, val ? 1 : 0).run();
async function getMsgMap(env, adminMsgId) {
const row = await env.TG_BOT_DB.prepare("SELECT user_id FROM msg_map WHERE admin_msg_id=?").bind(adminMsgId).first();
return row ? row.user_id : null;
async function setMsgMap(env, adminMsgId, userId) {
await env.TG_BOT_DB.prepare("INSERT OR REPLACE INTO msg_map (admin_msg_id, user_id) VALUES (?, ?)").bind(adminMsgId, userId).run();
async function getLastMsg(env, userId) {
const row = await env.TG_BOT_DB.prepare("SELECT ts FROM lastmsg WHERE user_id=?").bind(userId).first();
return row ? row.ts : null;
async function setLastMsg(env, userId, ts) {
await env.TG_BOT_DB.prepare("INSERT OR REPLACE INTO lastmsg (user_id, ts) VALUES (?, ?)").bind(userId, ts).run();
async function isFraud(env, userId) {
const row = await env.TG_BOT_DB.prepare("SELECT user_id FROM fraud WHERE user_id=?").bind(userId).first();
// ===================== 首次加减验证 ========================
function genVerifyQuestion() {
let a = Math.floor(Math.random() * 10) + 1;
let b = Math.floor(Math.random() * 10) + 1;
if (Math.random() < 0.5) {
return { question: `${a} + ${b} = ?`, answer: a + b };
if (a < b) [a, b] = [b, a];
return { question: `${a} - ${b} = ?`, answer: a - b };
async function getVerify(env, userId) {
return await env.TG_BOT_DB.prepare("SELECT * FROM verify WHERE user_id=?").bind(userId).first();
async function setVerify(env, userId, question, answer) {
await env.TG_BOT_DB.prepare("INSERT OR REPLACE INTO verify (user_id, question, answer, passed) VALUES (?, ?, ?, 0)").bind(userId, question, answer).run();
async function passVerify(env, userId) {
await env.TG_BOT_DB.prepare("UPDATE verify SET passed=1 WHERE user_id=?").bind(userId).run();
// ===================== 消息主处理 ========================
async function onMessage(message, env) {
const chatId = message.chat.id.toString();
const ADMIN_UID = env.ENV_ADMIN_UID;
if (message.text === "/start") {
return sendMessage({ chat_id: chatId, text: chatId === ADMIN_UID ? START_MESSAGE_ADMIN : START_MESSAGE, parse_mode: "HTML" }, env);
if (chatId === ADMIN_UID) {
return handleAdminMessage(message, env);
return handleGuestMessage(message, env);
// ===================== 管理员逻辑 ========================
async function handleAdminMessage(message, env) {
const ADMIN_UID = env.ENV_ADMIN_UID;
if (!message.reply_to_message?.message_id) {
return sendMessage({ chat_id: ADMIN_UID, text: START_MESSAGE_ADMIN, parse_mode: "HTML" }, env);
const guestId = await getMsgMap(env, message.reply_to_message.message_id.toString());
return sendMessage({ chat_id: ADMIN_UID, text: "无法找到用户映射" }, env);
if (message.text === "/block") return handleBlock(message, env);
if (message.text === "/unblock") return handleUnblock(message, env);
if (message.text === "/checkblock") return handleCheckBlock(message, env);
message_id: message.message_id
// ===================== 用户逻辑（含验证 + 资料卡） ========================
async function handleGuestMessage(message, env) {
const chatId = message.chat.id.toString();
const ADMIN_UID = env.ENV_ADMIN_UID;
const verify = await getVerify(env, chatId);
const q = genVerifyQuestion();
await setVerify(env, chatId, q.question, q.answer);
text: `为了防止骚扰，请先完成验证：\n\n<b>${q.question}</b>`,
if (verify.passed !== 1) {
const ans = parseInt(message.text);
if (ans === verify.answer) {
await passVerify(env, chatId);
text: "验证通过！你现在可以给管理员发送消息了 🎉"
const q = genVerifyQuestion();
await setVerify(env, chatId, q.question, q.answer);
text: `❌ 错误，请重新验证：\n\n<b>${q.question}</b>`,
if (await getBlock(env, chatId)) {
return sendMessage({ chat_id: chatId, text: "🚫 你被拉黑了" }, env);
// --- 3. 首次与管理员建立联系 → 发送资料卡 ---
const firstRow = await env.TG_BOT_DB.prepare("SELECT user_id FROM user_first WHERE user_id=?").bind(chatId).first();
await env.TG_BOT_DB.prepare("INSERT INTO user_first (user_id) VALUES (?)").bind(chatId).run();
const fullname = (message.from.first_name || "") + (message.from.last_name ? " " + message.from.last_name : "");
const username = message.from.username ? "@" + message.from.username : "无";
const timeDisplay = now.toLocaleString("zh-CN", { hour12: false });
• 昵称名称: <b>${fullname}</b>
• 用户名: <b>${username}</b>
• ID: <code>${chatId}</code>
• 首次连接时间: <code>${timeDisplay}</code>
[{ text: "🚫 屏蔽此人 (Block)", callback_data: `block:${chatId}` }]
reply_markup: blockKeyboard
const fw = await forwardMessage({
message_id: message.message_id
await setMsgMap(env, fw.result.message_id.toString(), chatId);
// ===================== 回调按钮（屏蔽） ========================
async function onCallback(query, env) {
const ADMIN_UID = env.ENV_ADMIN_UID;
if (query.from.id.toString() !== ADMIN_UID) {
if (data.startsWith("block:")) {
const userId = data.split(":")[1];
await setBlock(env, userId, true);
makeReq({ callback_query_id: query.id, text: "已拉黑该用户" }),
"editMessageReplyMarkup",
chat_id: query.message.chat.id,
message_id: query.message.message_id,
inline_keyboard: [[{ text: "✔ 已拉黑", callback_data: "noop" }]]
// ===================== 管理员命令 ========================
async function handleBlock(message, env) {
const guest = await getMsgMap(env, message.reply_to_message.message_id.toString());
await setBlock(env, guest, true);
return sendMessage({ chat_id: env.ENV_ADMIN_UID, text: `UID:${guest} 已屏蔽` }, env);
async function handleUnblock(message, env) {
const guest = await getMsgMap(env, message.reply_to_message.message_id.toString());
await setBlock(env, guest, false);
return sendMessage({ chat_id: env.ENV_ADMIN_UID, text: `UID:${guest} 已解除屏蔽` }, env);
async function handleCheckBlock(message, env) {
const guest = await getMsgMap(env, message.reply_to_message.message_id.toString());
const blocked = await getBlock(env, guest);
chat_id: env.ENV_ADMIN_UID,
text: `UID:${guest} → ${blocked ? "已屏蔽" : "未屏蔽"}`
// ===================== Webhook 控制 ========================
async function registerWebhook(request, env) {
const url = new URL(request.url);
const webhookUrl = `${url.protocol}//${url.hostname}/endpoint`;
const res = await fetch(apiUrl("setWebhook", { url: webhookUrl, secret_token: env.ENV_BOT_SECRET }, env)).then(r => r.json());
return new Response(res.ok ? "OK" : JSON.stringify(res));
async function unRegisterWebhook(request, env) {
const res = await fetch(apiUrl("setWebhook", { url: "" }, env)).then(r => r.json());
return new Response(res.ok ? "OK" : JSON.stringify(res));
