export default {
  async fetch(request, env) {
    try {
      const url = new URL(request.url);
      let path = url.pathname.toLowerCase();
      if (path !== '/' && path.endsWith('/')) path = path.slice(0, -1);

      if (path === '/api/verify-password') return handleVerifyPassword(request, env);
      if (path === '/api/login') return handleLogin(request, env);
      if (path === '/api/verify-token') return handleVerifyToken(request, env);
      if (path === '/api/add-rule') return handleAddRule(request, env);
      if (path === '/api/update-rule') return handleUpdateRule(request, env);
      if (path === '/api/delete-rule') return handleDeleteRule(request, env);
      if (path === '/api/update-redirect-site') return handleUpdateRedirectSite(request, env);
      if (path === '/api/update-password') return handleUpdatePassword(request, env);

      const { rules, siteConfig } = await loadRedirectData(env);

      const defaultRoot = rules.find(r => r.shortPath === '/');
      if (path === '/' && defaultRoot) {
        await incrementRedirectCount(env);
        return Response.redirect(defaultRoot.targetUrl, 307);
      }

      if (path === '/rules') {
        const adminAuth = await getAdminAuth(env);
        const redirectCount = await getRedirectCount(env);
        const host = new URL(request.url).host;
        return createRulesPage(rules, redirectCount, adminAuth.hasAdmin, siteConfig, host);
      }

      for (const rule of rules) {
        if (rule.shortPath === '/') continue;
        const paramRegex = /\/:([^/]+)/g;
        const paramMatches = [...rule.shortPath.matchAll(paramRegex)];
        if (paramMatches.length > 0) {
          const regex = new RegExp(`^${rule.shortPath.replace(paramRegex, '/([^/]+)')}$`);
          const m = path.match(regex);
          if (m) {
            let target = rule.targetUrl;
            paramMatches.forEach((match, i) => { target = target.replace(`:${match[1]}`, m[i + 1]); });
            await incrementRedirectCount(env);
            return Response.redirect(target, 307);
          }
        }
        if (path === rule.shortPath) {
          await incrementRedirectCount(env);
          return Response.redirect(rule.targetUrl, 307);
        }
      }

      return createNotFoundResponse(request, path, siteConfig.notFoundUrl);
    } catch (e) {
      console.error('Worker错误:', e);
      return new Response('服务器内部错误', { status: 500 });
    }
  }
};

// ========== 管理员认证 ==========
async function getAdminAuth(env) {
  try {
    const config = await env.KV_PAN.get('sys_config', { type: 'json' });
    if (config && config.admin) return { password: config.admin, hasAdmin: true };
  } catch (e) {}
  if (env.ADMIN_PASSWORD) return { password: env.ADMIN_PASSWORD, hasAdmin: true };
  return { password: null, hasAdmin: false };
}

async function verifyAdminPassword(pass, adminAuth) {
  return pass && adminAuth.password && pass === adminAuth.password;
}

// ========== JWT 工具函数 ==========
async function generateJWT(secret) {
  const encoder = new TextEncoder();
  const key = await crypto.subtle.importKey(
    'raw',
    encoder.encode(secret),
    { name: 'HMAC', hash: 'SHA-256' },
    false,
    ['sign']
  );
  const header = { alg: 'HS256', typ: 'JWT' };
  const payload = {
    role: 'admin',
    iat: Math.floor(Date.now() / 1000),
    exp: Math.floor(Date.now() / 1000) + 7200
  };
  const encodedHeader = btoa(JSON.stringify(header));
  const encodedPayload = btoa(JSON.stringify(payload));
  const unsigned = `${encodedHeader}.${encodedPayload}`;
  const signature = await crypto.subtle.sign('HMAC', key, encoder.encode(unsigned));
  const encodedSignature = btoa(String.fromCharCode(...new Uint8Array(signature)));
  return `${encodedHeader}.${encodedPayload}.${encodedSignature}`;
}

async function verifyJWT(token, secret) {
  try {
    const parts = token.split('.');
    if (parts.length !== 3) return false;
    const [headerB64, payloadB64, sigB64] = parts;
    const encoder = new TextEncoder();
    const key = await crypto.subtle.importKey(
      'raw',
      encoder.encode(secret),
      { name: 'HMAC', hash: 'SHA-256' },
      false,
      ['verify']
    );
    const unsigned = `${headerB64}.${payloadB64}`;
    const signature = Uint8Array.from(atob(sigB64), c => c.charCodeAt(0));
    const valid = await crypto.subtle.verify('HMAC', key, signature, encoder.encode(unsigned));
    if (!valid) return false;
    const payload = JSON.parse(atob(payloadB64));
    return payload.exp > Math.floor(Date.now() / 1000);
  } catch (e) {
    return false;
  }
}

async function requireAdmin(req, env) {
  const auth = req.headers.get('Authorization');
  if (!auth || !auth.startsWith('Bearer ')) return false;
  const token = auth.slice(7);
  return await verifyJWT(token, env.JWT_SECRET);
}

// ========== 数据层 ==========
async function loadRedirectData(env) {
  const defaultSiteConfig = {
    siteName: 'langaj.cn/rules',
    favicon: 'https://www.langaj.cn/src/cloud.png',
    navTitle: 'langaj.cn v1.3',
    titleLarge: '快速访问服务',
    titleSmall: '短链接快速访问服务全面升级，接入 Serverless 边缘计算，说明文档: langaj.cn/resd 。',
    notFoundUrl: 'https://www.langaj.cn/404.html',
    copyrightText: '2026 langaj.cn'
  };
  try {
    const raw = await env.KV_PAN.get('redirect_data', { type: 'json' });
    if (raw && Array.isArray(raw.rules)) {
      return {
        rules: raw.rules,
        siteConfig: { ...defaultSiteConfig, ...raw.siteConfig }
      };
    }
  } catch (e) {}
  const initial = { rules: [], siteConfig: defaultSiteConfig };
  await env.KV_PAN.put('redirect_data', JSON.stringify(initial));
  return initial;
}

async function saveRedirectData(env, data) {
  await env.KV_PAN.put('redirect_data', JSON.stringify(data));
}

async function getRedirectCount(env) {
  const row = await env.DB.prepare('SELECT count FROM redirect_counter WHERE id = 1').first();
  return row ? row.count : 0;
}
async function incrementRedirectCount(env) {
  await env.DB.prepare('UPDATE redirect_counter SET count = count + 1 WHERE id = 1').run();
}

// ========== API 处理 ==========
async function handleVerifyPassword(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r400({ valid: false, error: '管理功能未启用' });
  const pass = new URL(req.url).searchParams.get('pass');
  return r200({ valid: await verifyAdminPassword(pass, adminAuth) });
}

async function handleLogin(req, env) {
  if (req.method !== 'POST') return r405();
  const { pass } = await req.json();
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await verifyAdminPassword(pass, adminAuth))) return r403('密码错误');
  const token = await generateJWT(env.JWT_SECRET);
  return r200({ token });
}

async function handleVerifyToken(req, env) {
  if (req.method !== 'POST') return r405();
  const valid = await requireAdmin(req, env);
  return r200({ valid });
}

async function handleAddRule(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await requireAdmin(req, env))) return r403('未授权或令牌失效');
  if (req.method !== 'POST') return r405();
  let { shortPath, targetUrl, note } = await req.json();
  if (!shortPath.startsWith('/')) shortPath = '/' + shortPath;
  if (!/^https?:\/\//i.test(targetUrl)) targetUrl = 'https://' + targetUrl;
  if (!shortPath || !targetUrl) return r400('缺少必填字段');

  const data = await loadRedirectData(env);
  if (data.rules.some(r => r.shortPath === shortPath)) return r409('短路径已存在');
  data.rules.push({ shortPath, targetUrl, note: note || '' });
  await saveRedirectData(env, data);
  return r200({ success: true });
}

async function handleUpdateRule(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await requireAdmin(req, env))) return r403('未授权或令牌失效');
  if (req.method !== 'PUT' && req.method !== 'POST') return r405();
  const { originalShortPath, newShortPath, targetUrl, note } = await req.json();
  if (!originalShortPath || !newShortPath || !targetUrl) return r400('缺少必填字段');

  const data = await loadRedirectData(env);
  const idx = data.rules.findIndex(r => r.shortPath === originalShortPath);
  if (idx === -1) return r404('未找到原规则');
  if (newShortPath !== originalShortPath && data.rules.some(r => r.shortPath === newShortPath)) return r409('新短路径已被占用');
  data.rules[idx] = { shortPath: newShortPath, targetUrl, note: note || '' };
  await saveRedirectData(env, data);
  return r200({ success: true });
}

async function handleDeleteRule(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await requireAdmin(req, env))) return r403('未授权或令牌失效');
  if (req.method !== 'DELETE' && req.method !== 'POST') return r405();
  const { shortPath } = await req.json();
  if (!shortPath) return r400('缺少必填字段');

  const data = await loadRedirectData(env);
  const filtered = data.rules.filter(r => r.shortPath !== shortPath);
  if (filtered.length === data.rules.length) return r404('规则不存在');
  data.rules = filtered;
  await saveRedirectData(env, data);
  return r200({ success: true });
}

async function handleUpdateRedirectSite(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await requireAdmin(req, env))) return r403('未授权或令牌失效');
  if (req.method !== 'POST') return r405();
  const { ...fields } = await req.json();
  const data = await loadRedirectData(env);
  const cfg = data.siteConfig;
  if (fields.siteName) cfg.siteName = fields.siteName.trim();
  if (fields.favicon) cfg.favicon = fields.favicon.trim();
  if (fields.navTitle) cfg.navTitle = fields.navTitle.trim();
  if (fields.titleLarge) cfg.titleLarge = fields.titleLarge.trim();
  if (fields.titleSmall) cfg.titleSmall = fields.titleSmall.trim();
  if (fields.notFoundUrl) cfg.notFoundUrl = fields.notFoundUrl.trim();
  if (fields.copyrightText) cfg.copyrightText = fields.copyrightText.trim();
  data.siteConfig = cfg;
  await saveRedirectData(env, data);
  return r200({ success: true, config: cfg });
}

async function handleUpdatePassword(req, env) {
  const adminAuth = await getAdminAuth(env);
  if (!adminAuth.hasAdmin) return r403('管理功能未启用');
  if (!(await requireAdmin(req, env))) return r403('未授权或令牌失效');
  if (req.method !== 'POST') return r405();
  const { pass, newPassword } = await req.json();
  if (!pass || !newPassword || !newPassword.trim()) return r400('缺少必填字段');
  if (!(await verifyAdminPassword(pass, adminAuth))) return r403('旧密码错误');

  let config = {};
  try {
    const raw = await env.KV_PAN.get('sys_config', { type: 'json' });
    if (raw && typeof raw === 'object') config = raw;
  } catch (e) {}
  config.admin = newPassword.trim();
  await env.KV_PAN.put('sys_config', JSON.stringify(config));
  return r200({ success: true, message: '密码修改成功，请使用新密码重新登录。' });
}

function r200(data) { return new Response(JSON.stringify(data), { headers: { 'Content-Type': 'application/json' } }); }
function r400(msg) { return new Response(JSON.stringify({ error: msg }), { status: 400, headers: { 'Content-Type': 'application/json' } }); }
function r403(msg) { return new Response(JSON.stringify({ error: msg }), { status: 403, headers: { 'Content-Type': 'application/json' } }); }
function r404(msg) { return new Response(JSON.stringify({ error: msg }), { status: 404, headers: { 'Content-Type': 'application/json' } }); }
function r405() { return new Response(JSON.stringify({ error: 'Method not allowed' }), { status: 405, headers: { 'Content-Type': 'application/json' } }); }
function r409(msg) { return new Response(JSON.stringify({ error: msg }), { status: 409, headers: { 'Content-Type': 'application/json' } }); }

function createRulesPage(rules, redirectCount, hasAdmin, siteConfig, host) {
  const sortedRules = [...rules].sort((a, b) => {
    if (a.shortPath === '/') return -1;
    if (b.shortPath === '/') return 1;
    return 0;
  });
  const rulesJSON = JSON.stringify(sortedRules).replace(/'/g, "\\'");
  const {
    siteName, favicon, navTitle, titleLarge, titleSmall, notFoundUrl, copyrightText
  } = siteConfig;

  const SPRITE_URL = 'https://www.langaj.cn/src/icon.svg';

  const html = `<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="UTF-8">
<meta name="viewport" content="width=device-width, initial-scale=1.0">
<title>${escapeHtml(siteName)}</title>
<link rel="shortcut icon" href="${escapeHtml(favicon)}" type="image/x-icon">
<link rel="preload" href="${SPRITE_URL}" as="fetch" crossorigin="anonymous">
<style>
:root {--primary: #165DFF; --secondary: #36D399; --bg: #f7f8fa; --card-bg: #ffffff; --border: #e8eaed; --text-main: #1d2129; --text-secondary: #5f6368; --shadow: 0 4px 12px rgba(0,0,0,0.05); --radius-lg: 1rem; --radius-md: 0.75rem;}
* {margin:0;padding:0;box-sizing:border-box;}
body {font-family: system-ui, -apple-system, 'Segoe UI', Roboto, sans-serif; background: var(--bg); color: var(--text-main); min-height: 100vh; display: flex; flex-direction: column; line-height: 1.6;}
header {background: var(--card-bg); box-shadow: 0 1px 4px rgba(0,0,0,0.04); position: sticky; top:0; z-index:20;}
.container {max-width: 1200px; margin:0 auto; padding: 0 1.5rem;}
.nav-bar {display: flex; justify-content: space-between; align-items: center; height: 64px;}
.nav-logo {font-size: 1.5rem; font-weight: 700; color: var(--text-main); text-decoration: none;}
.nav-links {display: flex; align-items: center; gap: 1.5rem;}
.nav-link {display: flex; align-items: center; gap: 0.4rem; font-size: 0.95rem; line-height: 1.5; color: var(--text-secondary); text-decoration: none; font-weight: 500; transition: color 0.2s;}
.nav-link:hover {color: var(--primary);}
.admin-btn {background: none; border: none; cursor: pointer; font-size: 0.95rem; line-height: 1.5; color: var(--text-secondary); font-weight: 500; display: flex; align-items: center; gap: 0.4rem; transition: color 0.2s;}
.admin-btn:hover {color: var(--primary);}
main {flex: 1; padding: 2rem 1.5rem; max-width: 1200px; margin: 0 auto; width: 100%;}
.page-title {font-size: clamp(1.5rem, 3vw, 2.5rem); font-weight: 700; margin-bottom: 0.5rem;}
.page-desc {color: var(--text-secondary); margin-bottom: 0.5rem;}
.admin-panel {background: var(--card-bg); border-radius: var(--radius-lg); box-shadow: var(--shadow); padding: 1.5rem; margin-bottom: 2rem;}
.admin-panel-header {display: flex; justify-content: space-between; align-items: center; margin-bottom: 1rem;}
.admin-panel h3 {font-size: 1.25rem; font-weight: 600;}
.settings-btn {background: none; border: none; color: var(--primary); font-weight: 500; cursor: pointer; display: flex; align-items: center; gap: 0.3rem;}
.settings-btn:hover {text-decoration: underline;}
.input-group {display: grid; grid-template-columns: repeat(auto-fit, minmax(200px, 1fr)); gap: 1rem; margin-bottom: 1rem;}
.input-group input {padding: 0.7rem 1rem; border: 1px solid var(--border); border-radius: 0.5rem; font-size: 0.95rem; outline: none; transition: border-color 0.2s;}
.input-group input:focus {border-color: var(--primary); box-shadow: 0 0 0 2px rgba(22,93,255,0.2);}
.btn {display: inline-flex; align-items: center; justify-content: center; gap: 0.4rem; padding: 0.7rem 1.5rem; border-radius: 0.5rem; font-weight: 500; border: none; cursor: pointer; transition: background 0.2s, box-shadow 0.2s; text-decoration: none; font-size: 0.95rem;}
.btn-primary {background: var(--primary); color: white;}
.btn-primary:hover {background: #0e4bd1;}
.rules-grid {display: grid; grid-template-columns: repeat(auto-fill, minmax(280px, 1fr)); gap: 1.5rem;}
.rule-card {background: var(--card-bg); border-radius: var(--radius-lg); box-shadow: var(--shadow); overflow: hidden; transition: box-shadow 0.2s;}
.rule-card:hover {box-shadow: 0 8px 20px rgba(0,0,0,0.08);}
.rule-card-header {background: rgba(22,93,255,0.05); padding: 1rem 1.25rem; border-bottom: 1px solid var(--border); display: flex; justify-content: space-between; align-items: center;}
.rule-card-header h3 {font-weight: 600; font-size: 1rem;}
.badge {padding: 0.2rem 0.6rem; border-radius: 20px; font-size: 0.75rem; font-weight: 600;}
.badge-default {background: rgba(22,93,255,0.1); color: var(--primary);}
.badge-normal {background: rgba(54,211,153,0.15); color: #0b7a4a;}
.rule-card-body {padding: 1.25rem;}
.short-link {display: flex; justify-content: space-between; align-items: center; margin-bottom: 1rem;}
.short-link code {background: #f1f3f4; padding: 0.3rem 0.6rem; border-radius: 0.3rem; font-size: 0.9rem;}
.external-link {background: var(--primary); color: white; padding: 0.4rem 0.8rem; border-radius: 0.4rem; font-size: 0.85rem; text-decoration: none; display: inline-flex; align-items: center; gap: 0.3rem; transition: background 0.2s;}
.external-link:hover {background: #0e4bd1;}
.rule-note {color: var(--text-secondary); margin-bottom: 1rem; font-size: 0.9rem;}
.admin-actions {display: flex; gap: 0.5rem; justify-content: flex-end; padding-top: 0.75rem; border-top: 1px solid var(--border);}
.admin-actions button {background: none; border: none; cursor: pointer; font-weight: 500; display: flex; align-items: center; gap: 0.3rem; color: var(--text-secondary); transition: color 0.2s;}
.admin-actions button:hover {color: var(--primary);}
.admin-actions .delete-btn:hover {color: #e53e3e;}
.modal {position: fixed; top:0; left:0; width:100%; height:100%; background: rgba(0,0,0,0.5); display: none; align-items: center; justify-content: center; z-index: 1000;}
.modal.active {display: flex;}
.modal-content {background: white; border-radius: 1rem; padding: 2rem; max-width: 450px; width: 90%; box-shadow: 0 10px 30px rgba(0,0,0,0.2);}
.modal-content h3 {margin-bottom: 1rem; font-size: 1.25rem; font-weight: 600;}
.modal-content label {display: block; margin-bottom: 0.3rem; font-weight: 500; font-size: 0.9rem;}
.modal-content input {width: 100%; padding: 0.6rem 0.8rem; border: 1px solid var(--border); border-radius: 0.5rem; margin-bottom: 1rem; outline: none; font-size: 0.95rem;}
.modal-content input:focus {border-color: var(--primary); box-shadow: 0 0 0 2px rgba(22,93,255,0.2);}
.modal-actions {display: flex; justify-content: flex-end; gap: 0.75rem;}
.toast {position: fixed; bottom: 2rem; left: 50%; transform: translateX(-50%); background: var(--primary); color: white; padding: 0.75rem 1.5rem; border-radius: 2rem; font-size: 0.9rem; box-shadow: 0 4px 12px rgba(0,0,0,0.2); z-index: 9999; display: none;}
.toast.error {background: #e53e3e;}
.toast.success {background: #38a169;}
footer {background: var(--card-bg); border-top: 1px solid var(--border); padding: 1.5rem; text-align: center; color: var(--text-secondary); font-size: 0.85rem; margin-top: auto;}
.hidden {display: none !important;}
.modal-tabs {display: flex; margin-bottom: 1.5rem; border-bottom: 1px solid var(--border);}
.modal-tab {flex: 1; text-align: center; padding: 0.6rem 0; cursor: pointer; color: var(--text-secondary); font-weight: 500; transition: color 0.2s; border-bottom: 2px solid transparent; margin-bottom: -1px;}
.modal-tab.active {color: var(--primary); border-bottom-color: var(--primary);}
.modal-tab:hover {color: var(--primary);}
.tab-content {display: none;}
.tab-content.active {display: block;}
@media (prefers-reduced-motion: reduce) { * {animation-duration: 0.01ms !important;} }
</style>
</head>
<body>
<header>
  <div class="container nav-bar">
    <a href="/" class="nav-logo">${escapeHtml(navTitle)}</a>
    <div class="nav-links">
      <a href="/" class="nav-link">
        <svg width="18" height="18"><use href="#home"/></svg>
        首页
      </a>
      ${hasAdmin ? `
      <button id="adminBtn" class="admin-btn" onclick="toggleAdmin()">
        <svg width="18" height="18"><use href="#lock"/></svg>
        <span id="adminBtnText">管理</span>
      </button>
      ` : ''}
    </div>
  </div>
</header>

<main>
  <div class="page-title">${escapeHtml(titleLarge)}</div>
  <p class="page-desc">${escapeHtml(titleSmall)}</p>
  <p class="page-desc">已服务重定向次数: <strong>${redirectCount}</strong> 次。</p>

  ${hasAdmin ? `
  <div id="adminPanel" class="admin-panel hidden">
    <div class="admin-panel-header">
      <h3>添加新规则</h3>
      <button class="settings-btn" onclick="openSiteSettingsModal()">
        <svg width="16" height="16"><use href="#settings"/></svg>
        站点设置
      </button>
    </div>
    <div class="input-group">
      <input type="text" id="newShortPath" placeholder="短路径 (如 /example)">
      <input type="text" id="newTargetUrl" placeholder="目标URL">
      <input type="text" id="newNote" placeholder="备注">
    </div>
    <button class="btn btn-primary" onclick="addRule()">添加规则</button>
  </div>
  ` : ''}

  <div class="rules-grid">
    ${sortedRules.map(rule => `
      <div class="rule-card">
        <div class="rule-card-header">
          <h3>${rule.shortPath === '/' ? '根路径' : escapeHtml(rule.shortPath)}</h3>
          <span class="badge ${rule.shortPath === '/' ? 'badge-default' : 'badge-normal'}">${rule.shortPath === '/' ? '默认' : '普通'}</span>
        </div>
        <div class="rule-card-body">
          <div class="short-link">
            <code>https://${host}${escapeHtml(rule.shortPath)}</code>
            <a href="${escapeHtml(rule.targetUrl)}" target="_blank" class="external-link">
              <svg width="14" height="14"><use href="#external-link"/></svg>
              跳转
            </a>
          </div>
          <div class="rule-note">备注：${escapeHtml(rule.note || '无')}</div>
          ${hasAdmin ? `
          <div class="admin-actions hidden" id="actions-${rule.shortPath}">
            <button onclick="editRule('${escapeHtml(rule.shortPath)}')">
              <svg width="16" height="16"><use href="#edit"/></svg>
              编辑
            </button>
            <button onclick="deleteRule('${escapeHtml(rule.shortPath)}')" class="delete-btn">
              <svg width="16" height="16"><use href="#delete"/></svg>
              删除
            </button>
          </div>
          ` : ''}
        </div>
      </div>
    `).join('')}
  </div>
</main>

${hasAdmin ? `
<div id="editModal" class="modal">
  <div class="modal-content">
    <h3>编辑规则</h3>
    <input type="hidden" id="editOriginalPath">
    <label>短路径</label>
    <input type="text" id="editShortPath">
    <label>目标URL</label>
    <input type="text" id="editTargetUrl">
    <label>备注</label>
    <input type="text" id="editNote">
    <div class="modal-actions">
      <button class="btn" style="background:#e5e7eb; color:#333;" onclick="closeEditModal()">取消</button>
      <button class="btn btn-primary" onclick="submitEdit()">保存</button>
    </div>
  </div>
</div>

<div id="siteSettingsModal" class="modal">
  <div class="modal-content" style="max-width:500px;">
    <div class="modal-tabs">
      <div class="modal-tab active" onclick="switchSettingsTab('site')" data-tab="site">站点设置</div>
      <div class="modal-tab" onclick="switchSettingsTab('password')" data-tab="password">修改密码</div>
    </div>
    <div id="tab-site" class="tab-content active">
      <p style="color:var(--text-secondary); margin-bottom:1rem;">以下留空则不修改</p>
      <label>选项卡标题</label>
      <input type="text" id="cfgSiteName" placeholder="${escapeHtml(siteName)}">
      <label>选项卡图标</label>
      <input type="text" id="cfgFavicon" placeholder="${escapeHtml(favicon)}">
      <label>导航名称</label>
      <input type="text" id="cfgNavTitle" placeholder="${escapeHtml(navTitle)}">
      <label>大标题介绍</label>
      <input type="text" id="cfgTitleLarge" placeholder="${escapeHtml(titleLarge)}">
      <label>小标题介绍</label>
      <input type="text" id="cfgTitleSmall" placeholder="${escapeHtml(titleSmall)}">
      <label>404地址(未命中跳转)</label>
      <input type="text" id="cfgNotFoundUrl" placeholder="${escapeHtml(notFoundUrl)}">
      <label>版权信息</label>
      <input type="text" id="cfgCopyrightText" placeholder="${escapeHtml(copyrightText)}">
      <div class="modal-actions">
        <button class="btn" style="background:#e5e7eb; color:#333;" onclick="closeSiteSettingsModal()">取消</button>
        <button class="btn btn-primary" onclick="saveSiteSettings()">保存</button>
      </div>
    </div>
    <div id="tab-password" class="tab-content">
      <label>旧密码</label>
      <input type="password" id="oldPassword" placeholder="输入当前密码">
      <label>新密码</label>
      <input type="password" id="newPassword" placeholder="输入新密码">
      <label>确认新密码</label>
      <input type="password" id="confirmNewPassword" placeholder="再次输入新密码">
      <div class="modal-actions">
        <button class="btn" style="background:#e5e7eb; color:#333;" onclick="closeSiteSettingsModal()">取消</button>
        <button class="btn btn-primary" onclick="changePassword()">修改密码</button>
      </div>
    </div>
  </div>
</div>

<div id="passwordModal" class="modal">
  <div class="modal-content">
    <h3>管理员验证</h3>
    <p style="color:var(--text-secondary); margin-bottom:1rem;">请输入管理员密码以继续操作</p>
    <input type="password" id="passwordInput" placeholder="密码">
    <div class="modal-actions">
      <button class="btn" style="background:#e5e7eb; color:#333;" onclick="closePasswordModal()">取消</button>
      <button class="btn btn-primary" onclick="submitPassword()">确认</button>
    </div>
  </div>
</div>

<div id="confirmModal" class="modal">
  <div class="modal-content" style="max-width:400px;">
    <h3>确认删除</h3>
    <p style="color:var(--text-secondary); margin-bottom:1.5rem;">确定要删除该规则吗？删除后无法恢复。</p>
    <div class="modal-actions">
      <button class="btn" style="background:#e5e7eb; color:#333;" onclick="closeConfirmModal()">取消</button>
      <button class="btn" style="background:#e53e3e; color:white;" onclick="confirmDelete()">确定删除</button>
    </div>
  </div>
</div>
` : ''}

<div id="toast" class="toast"></div>

<footer>
  © ${escapeHtml(copyrightText)} | Cloudflare Serverless 边缘云计算
</footer>

<script>
  const rules = ${rulesJSON};
  let adminMode = false;
  ${hasAdmin ? `
  function showToast(msg, type) {
    const t = document.getElementById('toast');
    t.textContent = msg;
    t.className = 'toast ' + (type || '');
    t.style.display = 'block';
    setTimeout(() => { t.style.display = 'none'; }, 3000);
  }
  const adminBtn = document.getElementById('adminBtn');
  const adminBtnText = document.getElementById('adminBtnText');
  (async function autoCheckAdmin() {
    const token = sessionStorage.getItem('adminToken');
    if (token) {
      const res = await fetch('/api/verify-token', {
        method: 'POST',
        headers: { 'Authorization': 'Bearer ' + token }
      });
      const data = await res.json();
      if (data.valid) {
        enterAdminMode();
      } else {
        sessionStorage.removeItem('adminToken');
      }
    }
  })();
  async function toggleAdmin() {
    if (!adminMode) {
      const token = sessionStorage.getItem('adminToken');
      if (token) {
        const res = await fetch('/api/verify-token', {
          method: 'POST',
          headers: { 'Authorization': 'Bearer ' + token }
        });
        const data = await res.json();
        if (data.valid) {
          enterAdminMode();
          return;
        } else {
          sessionStorage.removeItem('adminToken');
        }
      }
      document.getElementById('passwordInput').value = '';
      document.getElementById('passwordModal').classList.add('active');
    } else {
      exitAdminMode();
    }
  }
  function enterAdminMode() {
    adminMode = true;
    document.getElementById('adminPanel').classList.remove('hidden');
    document.querySelectorAll('.admin-actions').forEach(el => el.classList.remove('hidden'));
    adminBtnText.textContent = '退出管理';
    const useEl = adminBtn.querySelector('use');
    if (useEl) useEl.setAttribute('href', '#unlock');
  }
  function exitAdminMode() {
    adminMode = false;
    document.getElementById('adminPanel').classList.add('hidden');
    document.querySelectorAll('.admin-actions').forEach(el => el.classList.add('hidden'));
    adminBtnText.textContent = '管理';
    sessionStorage.removeItem('adminToken');
    const useEl = adminBtn.querySelector('use');
    if (useEl) useEl.setAttribute('href', '#lock');
  }
  async function submitPassword() {
    const pass = document.getElementById('passwordInput').value.trim();
    if (!pass) { showToast('请输入密码', 'error'); return; }
    const res = await fetch('/api/login', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({ pass })
    });
    const data = await res.json();
    if (data.token) {
      sessionStorage.setItem('adminToken', data.token);
      document.getElementById('passwordModal').classList.remove('active');
      enterAdminMode();
    } else {
      showToast('密码错误', 'error');
    }
  }
  function closePasswordModal() {
    document.getElementById('passwordModal').classList.remove('active');
  }
  function getAdminToken() {
    return sessionStorage.getItem('adminToken') || '';
  }
  async function addRule() {
    const sp = document.getElementById('newShortPath').value.trim();
    const tu = document.getElementById('newTargetUrl').value.trim();
    const note = document.getElementById('newNote').value.trim();
    if (!sp || !tu) { showToast('短路径和URL不能为空', 'error'); return; }
    const token = getAdminToken(); if (!token) { toggleAdmin(); return; }
    const res = await fetch('/api/add-rule', { method:'POST', headers:{'Content-Type':'application/json', 'Authorization':'Bearer ' + token}, body: JSON.stringify({shortPath:sp, targetUrl:tu, note}) });
    const data = await res.json();
    if (data.success) { showToast('添加成功','success'); setTimeout(() => location.reload(), 500); }
    else { showToast(data.error||'添加失败','error'); if (data.error==='密码错误') { sessionStorage.removeItem('adminToken'); exitAdminMode(); } }
  }
  function editRule(sp) {
    const r = rules.find(x=>x.shortPath===sp); if(!r) return;
    document.getElementById('editOriginalPath').value = sp;
    document.getElementById('editShortPath').value = r.shortPath;
    document.getElementById('editTargetUrl').value = r.targetUrl;
    document.getElementById('editNote').value = r.note||'';
    document.getElementById('editModal').classList.add('active');
  }
  function closeEditModal() { document.getElementById('editModal').classList.remove('active'); }
  async function submitEdit() {
    const osp = document.getElementById('editOriginalPath').value;
    const nsp = document.getElementById('editShortPath').value.trim();
    const tu = document.getElementById('editTargetUrl').value.trim();
    const note = document.getElementById('editNote').value.trim();
    if (!nsp||!tu) { showToast('短路径和URL不能为空','error'); return; }
    const token = getAdminToken(); if (!token) { toggleAdmin(); return; }
    const res = await fetch('/api/update-rule', { method:'PUT', headers:{'Content-Type':'application/json', 'Authorization':'Bearer ' + token}, body: JSON.stringify({originalShortPath:osp, newShortPath:nsp, targetUrl:tu, note}) });
    const data = await res.json();
    if (data.success) { showToast('修改成功','success'); setTimeout(() => location.reload(), 500); }
    else { showToast(data.error||'修改失败','error'); if (data.error==='密码错误') { sessionStorage.removeItem('adminToken'); exitAdminMode(); } }
  }
  let pendingDeleteShortPath = '';
  function deleteRule(sp) {
    pendingDeleteShortPath = sp;
    document.getElementById('confirmModal').classList.add('active');
  }
  function closeConfirmModal() {
    document.getElementById('confirmModal').classList.remove('active');
    pendingDeleteShortPath = '';
  }
  async function confirmDelete() {
    const sp = pendingDeleteShortPath;
    closeConfirmModal();
    if (!sp) return;
    const token = getAdminToken();
    if (!token) { toggleAdmin(); return; }
    const res = await fetch('/api/delete-rule', { method:'DELETE', headers:{'Content-Type':'application/json', 'Authorization':'Bearer ' + token}, body: JSON.stringify({shortPath:sp}) });
    const data = await res.json();
    if (data.success) { showToast('删除成功','success'); setTimeout(() => location.reload(), 500); }
    else { showToast(data.error||'删除失败','error'); if (data.error==='密码错误') { sessionStorage.removeItem('adminToken'); exitAdminMode(); } }
  }
  function openSiteSettingsModal() {
    document.getElementById('siteSettingsModal').classList.add('active');
    switchSettingsTab('site');
  }
  function closeSiteSettingsModal() {
    document.getElementById('siteSettingsModal').classList.remove('active');
  }
  function switchSettingsTab(tabName) {
    document.querySelectorAll('.modal-tab').forEach(t => t.classList.remove('active'));
    document.querySelectorAll('.tab-content').forEach(c => c.classList.remove('active'));
    document.querySelector('.modal-tab[data-tab="' + tabName + '"]').classList.add('active');
    document.getElementById('tab-' + tabName).classList.add('active');
  }
  async function saveSiteSettings() {
    const fields = {};
    const getVal = id => document.getElementById(id).value.trim();
    const token = getAdminToken(); if (!token) { toggleAdmin(); return; }
    fields.siteName = getVal('cfgSiteName');
    fields.favicon = getVal('cfgFavicon');
    fields.navTitle = getVal('cfgNavTitle');
    fields.titleLarge = getVal('cfgTitleLarge');
    fields.titleSmall = getVal('cfgTitleSmall');
    fields.notFoundUrl = getVal('cfgNotFoundUrl');
    fields.copyrightText = getVal('cfgCopyrightText');
    const res = await fetch('/api/update-redirect-site', {
      method:'POST',
      headers:{'Content-Type':'application/json', 'Authorization':'Bearer ' + token},
      body: JSON.stringify(fields)
    });
    const data = await res.json();
    if (data.success) { showToast('站点设置已保存','success'); setTimeout(() => location.reload(), 500); }
    else { showToast(data.error||'保存失败','error'); if (data.error==='密码错误') { sessionStorage.removeItem('adminToken'); exitAdminMode(); } }
  }
  async function changePassword() {
    const oldPass = document.getElementById('oldPassword').value.trim();
    const newPass = document.getElementById('newPassword').value.trim();
    const confirmPass = document.getElementById('confirmNewPassword').value.trim();
    if (!oldPass || !newPass || !confirmPass) {
      showToast('请填写所有密码字段', 'error');
      return;
    }
    if (newPass !== confirmPass) {
      showToast('两次输入的新密码不一致', 'error');
      return;
    }
    const token = getAdminToken();
    if (!token) { toggleAdmin(); return; }
    const res = await fetch('/api/update-password', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json', 'Authorization': 'Bearer ' + token },
      body: JSON.stringify({ pass: oldPass, newPassword: newPass })
    });
    const data = await res.json();
    if (data.success) {
      showToast(data.message || '密码修改成功', 'success');
      sessionStorage.removeItem('adminToken');
      setTimeout(() => {
        closeSiteSettingsModal();
        exitAdminMode();
      }, 800);
    } else {
      showToast(data.error || '修改失败', 'error');
      if (data.error === '密码错误') {
        sessionStorage.removeItem('adminToken');
        exitAdminMode();
      }
    }
  }
  document.getElementById('passwordModal').addEventListener('click', function(e) { if(e.target===this) closePasswordModal(); });
  document.getElementById('editModal').addEventListener('click', function(e) { if(e.target===this) closeEditModal(); });
  document.getElementById('siteSettingsModal').addEventListener('click', function(e) { if(e.target===this) closeSiteSettingsModal(); });
  document.getElementById('confirmModal').addEventListener('click', function(e) { if(e.target===this) closeConfirmModal(); });

  (function initSprite() {
    fetch('${SPRITE_URL}', { mode: 'cors', cache: 'default' })
      .then(res => {
        if (!res.ok) throw new Error('HTTP ' + res.status);
        return res.text();
      })
      .then(svgText => {
        const parser = new DOMParser();
        const doc = parser.parseFromString(svgText, 'image/svg+xml');
        const svgElement = doc.documentElement;
        if (svgElement && svgElement.tagName === 'svg') {
          svgElement.style.display = 'none';
          document.body.prepend(svgElement);
        } else {
          throw new Error('Invalid SVG content');
        }
      })
      .catch(err => {
        console.error('SVG Sprite 加载失败:', err);
        const toast = document.getElementById('toast');
        if (toast) {
          toast.textContent = '图标库加载失败，部分图标可能不显示';
          toast.className = 'toast error';
          toast.style.display = 'block';
          setTimeout(() => { toast.style.display = 'none'; }, 5000);
        }
      });
  })();
  ` : ''}
</script>
</body>
</html>`;

  return new Response(html, { headers: { 'Content-Type': 'text/html; charset=utf-8' } });
}

function createNotFoundResponse(request, path, notFoundUrl) {
  const host = new URL(request.url).host;
  const errorUrl = `https://${host}${path}`;
  const target = notFoundUrl || 'https://www.langaj.cn/404.html';
  const separator = target.includes('?') ? '&' : '?';
  return Response.redirect(`${target}${separator}s=${encodeURIComponent(errorUrl)}`, 302);
}

function escapeHtml(text) {
  if (!text) return '';
  return text.replace(/&/g, '&amp;').replace(/</g, '&lt;').replace(/>/g, '&gt;').replace(/"/g, '&quot;').replace(/'/g, '&#039;');
}