进行了一些优化

src/Admin/Schema/SchemaPermissions.php

@@ -73,6 +73,19 @@ class SchemaPermissions {
                         ]],
                     ],
                 ],
+                'download' => [
+                    'key'        => 'download',
+                    'title'      => '下载配置',
+                    'version'    => '1.0.0',
+                    'option_key' => 'aksrt_download_config',
+                    'groups'     => [
+                        ['key' => 'basic', 'title' => '链接规则', 'fields' => [
+                            ['key' => 'url_alias', 'label' => '下载链接 URL 别名', 'type' => 'input', 'default' => 'download', 'required' => true, 'help' => '仅允许英文字母、数字、连字符和下划线；禁止中文、空格和 / \\ ? # & 等特殊符号。修改后旧别名路由立即失效，需重新获取下载地址。'],
+                            ['key' => 'default_max_uses', 'label' => '下载链接默认使用次数', 'type' => 'number', 'default' => 1, 'min' => 1, 'max' => 100, 'help' => '单个链接可完成下载的次数；文件完整送达后才计次（HEAD 探测、传输中断不计次）。耗尽后链接返回 410，需重新获取。'],
+                            ['key' => 'ttl_minutes', 'label' => '下载链接默认有效期限（分钟）', 'type' => 'number', 'default' => 10, 'min' => 1, 'max' => 1440, 'help' => '链接签发后超过该时长即失效并返回 410，不自动续期，需重新获取。'],
+                        ]],
+                    ],
+                ],
                 'moderation' => [
                     'key'        => 'moderation',
                     'title'      => '评论审核',

src/Admin/SchemaProvider.php

@@ -291,9 +291,34 @@ class SchemaProvider {
             }
         }
 
+        if ($domain === 'permissions' && $section === 'download') {
+            $alias = trim((string) ($data['url_alias'] ?? ''));
+            if ($alias === '') {
+                $errors[] = __('下载链接 URL 别名不能为空', 'aksrt');
+            } elseif (strlen($alias) > 48) {
+                $errors[] = __('下载链接 URL 别名长度不能超过 48 个字符', 'aksrt');
+            } elseif (!preg_match('/^[A-Za-z0-9_-]+$/', $alias)) {
+                $errors[] = __('下载链接 URL 别名只能包含英文字母、数字、连字符和下划线，禁止中文、空格和 / \\ ? # & 等特殊符号', 'aksrt');
+            } elseif (in_array(strtolower($alias), $this->reserved_download_aliases(), true)) {
+                $errors[] = __('该别名与系统保留路径冲突，请更换其他别名以避免路由 404', 'aksrt');
+            }
+        }
+
         return ['valid' => empty($errors), 'errors' => $errors];
     }
 
+    /**
+     * Top-level slugs that must never be shadowed by the download route.
+     */
+    private function reserved_download_aliases(): array {
+        return [
+            'wp-json', 'wp-admin', 'wp-content', 'wp-includes',
+            'admin', 'login', 'logout', 'register', 'lostpassword',
+            'feed', 'search', 'author', 'page', 'comments',
+            'sitemap', 'sign', 'cgi-bin',
+        ];
+    }
+
     public function read_settings(string $domain, string $section = ''): array {
         if ($section !== '') {
             $schema = $this->get_section_schema($domain, $section);