[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_106":107,"_108":109},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","StonedSheamus","name","bot-detector","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":54,"_55":-5,"_56":57,"_58":25,"_59":32,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/StonedSheamus/bot-detector/code/main.ts","extension","id","cd8fafbf-4252-4f28-bbe6-18065bfca3ef","fileId","13376976-b09b-11f1-9183-1607ee4eb77e","parentId","branchId","eef5f215-8cd9-41ea-9861-8707575788d0","branchVersion",20,"latest",true,"createdAt",["D",1789434764818],"version",3,"fileType","http","content","import { Hono } from \"npm:hono\";\nimport {\n consumeOAuthState,\n ensureTables,\n getBroadcaster,\n getFirstConnectedBroadcaster,\n saveModToken,\n saveOAuthState,\n upsertBroadcaster,\n} from \"./db.ts\";\nimport {\n createChatSubscription,\n deleteEventSubSubscription,\n env,\n exchangeCode,\n getChatters,\n getSelf,\n getUsersByLogin,\n getValidModToken,\n sendChatMessage,\n verifyEventSub,\n} from \"./twitch.ts\";\nimport { type BotScoreResult, scoreUser } from \"./botDetection.ts\";\n\nawait ensureTables();\n\nconst app = new Hono();\n\napp.onError((err) => {\n console.error(err);\n return new Response(\n `Error: ${err instanceof Error ? err.message : String(err)}`,\n { status: 500 },\n );\n});\n\nfunction escapeHtml(s: string) {\n return s.replace(\n /[&<>\"']/g,\n (\n c,\n ) => ({\n \"&\": \"&\",\n \"<\": \"<\",\n \">\": \">\",\n '\"': \""\",\n \"'\": \"'\",\n }[c]!),\n );\n}\n\nfunction page(title: string, body: string) {\n return new Response(\n `${\n escapeHtml(title)\n }\n ${body}`,\n { headers: { \"Content-Type\": \"text/html; charset=utf-8\" } },\n );\n}\n\nasync function getFlaggedChatters(\n broadcasterId: string,\n): Promise<{ totalChatters: number; results: BotScoreResult[] } | null> {\n const modToken = await getValidModToken(broadcasterId);\n if (!modToken) return null;\n const chatters = await getChatters(broadcasterId, modToken);\n const users = await getUsersByLogin(chatters.map((ch) => ch.user_login));\n const results = users\n .map(scoreUser)\n .filter((r): r is BotScoreResult => r !== null)\n .sort((a, b) => b.score - a.score);\n return { totalChatters: chatters.length, results };\n}\n\nasync function resolveBroadcasterId(c: any): Promise {\n const q = c.req.query(\"channel\");\n if (q) return q;\n const row = await getFirstConnectedBroadcaster();\n return row ? String(row.broadcaster_id) : null;\n}\n\n// ── Landing page / dashboard ──\n\napp.get(\"/\", async (c) => {\n const broadcasterId = await resolveBroadcasterId(c);\n if (!broadcasterId) {\n return page(\n \"Bot Viewer Detector\",\n `

Bot Viewer Detector

Scans your Twitch chat's current viewer list and flags accounts that look like follow/view-bots, so you can review and block them manually. Nothing is banned automatically.

Connect my channel

After connecting: mod the bot with /mod guildscribebot (or whichever account owns TWITCH_BOT_ID) so it can reply to !botcheck.

`,\n );\n }\n\n const data = await getFlaggedChatters(broadcasterId);\n const broadcaster = await getBroadcaster(broadcasterId);\n if (!data) {\n return page(\n \"Bot Viewer Detector\",\n `

Reconnect needed

This channel's Twitch connection has expired or been revoked.

Reconnect

`,\n );\n }\n\n const rows = data.results\n .map(\n (r) =>\n `${\n escapeHtml(r.displayName)\n }${r.score}${r.accountAgeDays}d${\n escapeHtml(r.reasons.join(\"; \"))\n }`,\n )\n .join(\"\");\n\n return page(\n \"Likely Bot Viewers\",\n `

Likely Bot Viewers${\n broadcaster ? ` — ${escapeHtml(String(broadcaster.display_name))}` : \"\"\n }

${data.totalChatters} chatters checked · ${data.results.length} flagged for review. Heuristic guess, not a certainty — check an account before blocking it.

\n \n \n ${rows || ''}\n

Username	Score	Account age	Why flagged
Nothing flagged right now.

\n \n

Reconnect / grant new permissions

`,\n );\n});\n\napp.get(\"/json\", async (c) => {\n const broadcasterId = await resolveBroadcasterId(c);\n if (!broadcasterId) {\n return c.json({ error: \"No channel connected yet. Visit /connect.\" }, 400);\n }\n const data = await getFlaggedChatters(broadcasterId);\n if (!data) {\n return c.json(\n { error: \"This channel needs to reconnect at /connect.\" },\n 401,\n );\n }\n return c.json({ total_chatters: data.totalChatters, flagged: data.results });\n});\n\n// ── OAuth connect flow ──\n\napp.get(\"/connect\", async (c) => {\n const state = crypto.randomUUID();\n await saveOAuthState(state, Date.now() + 10 * 60 * 1000);\n const url = new URL(c.req.url);\n const auth = new URL(\"https://id.twitch.tv/oauth2/authorize\");\n auth.search = new URLSearchParams({\n client_id: env(\"TWITCH_CLIENT_ID\"),\n redirect_uri: `${url.origin}/callback`,\n response_type: \"code\",\n // Broadcasters are implicitly moderators of their own channel, so\n // authorizing here as the broadcaster covers moderator:read:chatters too.\n scope: \"channel:bot moderator:read:chatters\",\n state,\n }).toString();\n return new Response(null, {\n status: 302,\n headers: { Location: auth.toString() },\n });\n});\n\napp.get(\"/callback\", async (c) => {\n const url = new URL(c.req.url);\n const error = url.searchParams.get(\"error\");\n if (error) {\n return page(\n \"Connection cancelled\",\n `

Connection cancelled

${\n escapeHtml(url.searchParams.get(\"error_description\") ?? error)\n }

`,\n );\n }\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n if (!code || !state) return c.text(\"Missing OAuth code or state\", 400);\n const valid = await consumeOAuthState(state);\n if (!valid) return c.text(\"Invalid or expired OAuth state\", 400);\n\n try {\n const token = await exchangeCode(code, `${url.origin}/callback`);\n const user = await getSelf(token.access_token);\n\n // Reconnecting would otherwise try to create a duplicate\n // channel.chat.message subscription with the same type/condition/\n // callback, which Twitch rejects — clean up first so this is safe to\n // run repeatedly (e.g. to pick up newly requested scopes).\n const existing = await getBroadcaster(user.id);\n if (existing?.subscription_id) {\n try {\n await deleteEventSubSubscription(String(existing.subscription_id));\n } catch (e) {\n console.error(\"eventsub cleanup failed\", e);\n }\n }\n\n const sub = await createChatSubscription(user.id, `${url.origin}/eventsub`);\n await upsertBroadcaster(user.id, user.login, user.display_name, sub.id);\n await saveModToken(\n user.id,\n token.access_token,\n token.refresh_token,\n Array.isArray(token.scope)\n ? token.scope.join(\" \")\n : String(token.scope ?? \"\"),\n Date.now() + Math.max(0, Number(token.expires_in ?? 0) * 1000 - 60_000),\n );\n\n return page(\n \"Connected\",\n `

Connected

${\n escapeHtml(user.display_name)\n } is now connected. !botcheck will work once the bot is modded.

Important: in Twitch chat, run /mod guildscribebot (or whichever account owns TWITCH_BOT_ID) so it can reply.

View dashboard

`,\n );\n } catch (e) {\n console.error(e);\n return page(\n \"Connection failed\",\n `

Connection failed

Could not complete the Twitch connection. Please try again.

`,\n );\n }\n});\n\n// ── EventSub webhook: challenge handshake + incoming chat messages ──\n\napp.post(\"/eventsub\", async (c) => {\n const rawBody = await c.req.text();\n const valid = await verifyEventSub(c.req.raw, rawBody);\n if (!valid) return c.text(\"Invalid signature\", 403);\n\n const messageType = c.req.header(\"Twitch-Eventsub-Message-Type\");\n const payload = JSON.parse(rawBody);\n\n if (messageType === \"webhook_callback_verification\") {\n return c.text(payload.challenge, 200);\n }\n\n if (messageType === \"revocation\") {\n console.error(\"EventSub subscription revoked:\", payload.subscription);\n return c.text(\"\", 200);\n }\n\n if (\n messageType === \"notification\" &&\n payload.subscription?.type === \"channel.chat.message\"\n ) {\n const event = payload.event;\n const text: string = event?.message?.text ?? \"\";\n const broadcasterId: string = event?.broadcaster_user_id;\n\n if (text.trim().toLowerCase().startsWith(\"!botcheck\")) {\n handleBotCheck(broadcasterId).catch((err) =>\n console.error(\"botcheck failed\", err)\n );\n }\n\n return c.text(\"\", 200);\n }\n\n return c.text(\"\", 200);\n});\n\nasync function handleBotCheck(broadcasterId: string) {\n const data = await getFlaggedChatters(broadcasterId);\n if (!data) {\n await sendChatMessage(\n \"🤖 Bot check needs the channel to reconnect — visit /connect.\",\n broadcasterId,\n );\n return;\n }\n const reply = data.results.length === 0\n ? `🤖 No likely bot viewers spotted out of ${data.totalChatters} in chat right now.`\n : `🤖 ${data.results.length} likely bot viewer${\n data.results.length === 1 ? \"\" : \"s\"\n } out of ${data.totalChatters} in chat right now.`;\n await sendChatMessage(reply, broadcasterId);\n}\n\nexport default app.fetch;","deleted",false,"label","botdetector",[14],"d496d537-568b-465b-b4a8-4b4c42a8f49f",["D",1789431551373],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","cc37ba10-6e6d-4af6-a801-9955c92d23c4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04ba1-c79f-7319-b4f2-7c4f3772837b","tursoName","d496d537568b465bb4a84b4c42a8f49f","tursoHostname","d496d537568b465bb4a84b4c42a8f49f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_105":101},"org",{"_9":10,"_98":99,"_100":101,"_56":57,"_102":103,"_104":42},"branch",{"_35":30,"_11":89,"_22":28,"_90":46,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":12,"_97":10},"isOwned","main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Shea Stolp","avatar","https://lh3.googleusercontent.com/a/ACg8ocIWmQgR3gyoMMicg2zCAoN1c7i36qX5mf9gRIdIXm8F2mo-ig=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_139":140,"_141":142,"_143":144,"_145":42,"_146":42,"_147":42,"_148":32,"_149":-5,"_150":-7,"_151":-7,"_152":63,"_153":42,"_154":42,"_155":-5,"_156":42,"_157":42,"_158":42,"_159":-5},"ENV",{"_110":111,"_112":113,"_114":89,"_115":116,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]