Likely Bot Viewers

${totalChatters} chatters checked · ${results.length} flagged for review. This is a heuristic guess, not a certainty — check an account before blocking it.

\n \n \n ${rows || ''}\n

Username	Score	Account age	Why flagged
Nothing flagged right now.

\n \n \n `);\n});\n\napp.get(\"/json\", async (c) => {\n const { totalChatters, results } = await getFlaggedChatters();\n return c.json({ total_chatters: totalChatters, flagged: results });\n});\n\n// ── One-time setup: subscribes this val's /eventsub to channel.chat.message ──\n\napp.get(\"/connect\", async (c) => {\n const broadcasterId = await getBroadcasterId();\n const callbackUrl = new URL(\"/eventsub\", c.req.url).toString();\n const subscription = await createChatSubscription(broadcasterId, callbackUrl);\n return c.json({ ok: true, callbackUrl, subscription });\n});\n\n// ── EventSub webhook: challenge handshake + incoming chat messages ──\n\napp.post(\"/eventsub\", async (c) => {\n const rawBody = await c.req.text();\n const valid = await verifyEventSub(c.req.raw, rawBody);\n if (!valid) return c.text(\"Invalid signature\", 403);\n\n const messageType = c.req.header(\"Twitch-Eventsub-Message-Type\");\n const payload = JSON.parse(rawBody);\n\n if (messageType === \"webhook_callback_verification\") {\n return c.text(payload.challenge, 200);\n }\n\n if (messageType === \"revocation\") {\n console.error(\"EventSub subscription revoked:\", payload.subscription);\n return c.text(\"\", 200);\n }\n\n if (\n messageType === \"notification\" &&\n payload.subscription?.type === \"channel.chat.message\"\n ) {\n const event = payload.event;\n const text: string = event?.message?.text ?? \"\";\n const broadcasterId: string = event?.broadcaster_user_id;\n\n if (text.trim().toLowerCase().startsWith(\"!botcheck\")) {\n // Reply first with a quick ack isn't necessary — Twitch just wants a\n // 200 promptly, so do the scoring work then send the chat reply.\n handleBotCheck(broadcasterId).catch((err) =>\n console.error(\"botcheck failed\", err)\n );\n }\n\n return c.text(\"\", 200);\n }\n\n return c.text(\"\", 200);\n});\n\nasync function handleBotCheck(broadcasterId: string) {\n const { totalChatters, results } = await getFlaggedChatters();\n const reply = results.length === 0\n ? `🤖 No likely bot viewers spotted out of ${totalChatters} in chat right now.`\n : `🤖 ${results.length} likely bot viewer${\n results.length === 1 ? \"\" : \"s\"\n } out of ${totalChatters} in chat right now.`;\n await sendChatMessage(reply, broadcasterId);\n}\n\nexport default app.fetch;","botdetector",[141],"46df2354-64f4-4991-8d06-30482d932865","botDetection.ts","8475738a-b09b-11f1-a52d-1607ee4eb77e",5,["D",1789431761819],"import type { TwitchUser } from \"./twitch.ts\";\n\n// Well-known, legitimate service bots — never flag these regardless of score.\n// Add your own bot accounts here (e.g. your GuildScribe/Hunt & Hoard bot logins).\nconst KNOWN_SAFE_BOTS = new Set([\n \"nightbot\",\n \"streamelements\",\n \"streamlabs\",\n \"moobot\",\n \"soundalerts\",\n \"wizebot\",\n \"fossabot\",\n \"pretzelrocks\",\n \"own3d\",\n \"sery_bot\",\n \"restreambot\",\n \"commanderroot\",\n]);\n\n// Shapes commonly produced by follow/view-bot generator tools.\nconst BOT_NAME_PATTERNS = [\n /^[a-z]{3,12}\\d{5,}$/i, // short word + 5+ trailing digits, e.g. \"coolgamer88421\"\n /^[a-z0-9]{16,}$/i, // long random alphanumeric blob\n];\n\nexport interface BotScoreResult {\n login: string;\n displayName: string;\n score: number;\n reasons: string[];\n accountAgeDays: number;\n profileUrl: string;\n}\n\n/** Returns null if the account isn't flagged at all. */\nexport function scoreUser(user: TwitchUser): BotScoreResult | null {\n const login = user.login.toLowerCase();\n if (KNOWN_SAFE_BOTS.has(login)) return null;\n\n const reasons: string[] = [];\n let score = 0;\n\n const createdAt = new Date(user.created_at).getTime();\n const ageDays = (Date.now() - createdAt) / (1000 * 60 * 60 * 24);\n\n if (ageDays < 3) {\n score += 3;\n reasons.push(`Account is ${ageDays.toFixed(1)} days old`);\n } else if (ageDays < 14) {\n score += 2;\n reasons.push(`Account is only ${Math.round(ageDays)} days old`);\n } else if (ageDays < 45) {\n score += 1;\n reasons.push(`Account is ${Math.round(ageDays)} days old`);\n }\n\n if (\n !user.profile_image_url ||\n user.profile_image_url.includes(\"user-default-pictures\")\n ) {\n score += 2;\n reasons.push(\"Using the default profile picture\");\n }\n\n if (BOT_NAME_PATTERNS.some((p) => p.test(login))) {\n score += 2;\n reasons.push(\"Username matches common bot-generator patterns\");\n }\n\n if (score === 0) return null;\n\n return {\n login: user.login,\n displayName: user.display_name,\n score,\n reasons,\n accountAgeDays: Math.round(ageDays),\n profileUrl: `https://twitch.tv/${user.login}`,\n };\n}",[148],"1068a281-9066-4bf0-931e-aca35953738a","README.md","92e96052-b09b-11f1-b904-1607ee4eb77e",10,["D",1789431791103],4,"# Bot Viewer Detector\n\nScans your Twitch chat's current viewer list and flags accounts that look like\nfollow/view-bots, so you can review and block them manually. Nothing is banned\nautomatically.\n\n- **Dashboard** (`/`) — sorted table of flagged accounts with reasons.\n- **`/json`** — same data as JSON.\n- **`!botcheck`** — chat command that replies with just the count, e.g. \"🤖 4\n likely bot viewers out of 212 in chat right now.\"\n\n## How detection works\n\nEach chatter is scored on:\n\n- Account age (younger = more suspicious)\n- Default/missing profile picture\n- Username shape (word+digits, long random strings — common bot-generator\n patterns)\n\nKnown legitimate bots (Nightbot, StreamElements, etc. — see `botDetection.ts`)\nare always excluded. This is heuristic, not certain — glance at a flagged\naccount before blocking it.\n\n## Setup on Val Town\n\n1. Create a new Val Town project and upload `main.ts`, `twitch.ts`, and\n `botDetection.ts`. Set `main.ts` as the HTTP val entrypoint.\n2. Add these environment variables (account-level Environment Variables page):\n\n | Key | Value |\n | -------------------------- | ---------------------------------------------------------------------------------- |\n | `TWITCH_CLIENT_ID` | your app's Client ID — reuse GuildScribe's |\n | `TWITCH_CLIENT_SECRET` | your app's Client Secret — reuse GuildScribe's |\n | `TWITCH_BOT_ID` | your bot account's numeric user id — reuse GuildScribe's |\n | `TWITCH_BROADCASTER_LOGIN` | your channel login, e.g. `stonedsheamus` |\n | `TWITCH_MOD_OAUTH_TOKEN` | user token, scope `moderator:read:chatters`, from the broadcaster or a mod account |\n | `EVENTSUB_SECRET` | any random string you make up — doesn't need to match GuildScribe's |\n\n3. Open the val once to confirm the dashboard loads at `/` — this checks your\n Twitch credentials are working before wiring up chat.\n4. Visit `/connect` once (in a browser, GET request) to create the\n `channel.chat.message` EventSub subscription pointed at this val's own\n `/eventsub` URL. You should get back `{\"ok\": true, ...}`. If it fails with a\n 403/challenge error, double-check the bot account has been authorized for\n this channel the same way it was for GuildScribe (modded, and has granted the\n app `user:bot` scope / the channel has granted `channel:bot`).\n5. Type `!botcheck` in your channel's chat — the bot should reply with the\n current count within a few seconds.\n\n## Known limitations\n\n- `TWITCH_MOD_OAUTH_TOKEN` (used for the chatters list, not for sending\n messages) expires (~4 hours) unless set up with a refresh flow. Regenerate it\n via TwitchTokenGenerator.com when the dashboard/`!botcheck` starts throwing an\n auth error. Say the word if you want the refresh_token flow wired up instead.\n- `!botcheck` re-scans the whole chatter list on every call, so there's a couple\n seconds of delay before the reply — that's expected, not a bug.",[155],"pulls","branches","forks","envVars",{"_169":159,"_171":62},"connections",{"_169":62,"_170":62},"count","unfilledCount","emptyCount",{"_43":154,"_32":155,"_30":156,"_134":-5,"_41":42,"_40":157,"_135":25,"_38":186,"_13":159,"_34":20,"_36":160,"_24":25,"_138":-5,"_177":187,"_27":188},{"_43":147,"_32":148,"_30":149,"_134":-5,"_41":42,"_40":150,"_135":58,"_38":183,"_13":142,"_34":35,"_36":152,"_24":25,"_138":-5,"_177":184,"_27":185},{"_43":140,"_32":141,"_30":56,"_134":-5,"_41":42,"_40":142,"_135":25,"_38":180,"_13":137,"_34":35,"_36":144,"_24":25,"_138":145,"_177":181,"_27":182},{"_43":133,"_32":28,"_30":31,"_134":-5,"_41":42,"_40":14,"_135":25,"_38":176,"_13":137,"_34":35,"_36":37,"_24":25,"_138":-5,"_177":178,"_27":179},["D",1789431797958],"children",[],[28],["D",1789431722930],[],[141],["D",1789431761819],[],[148],["D",1789431791103],[],[155],["D",1789431551373],["D",1789522252250],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},{"_13":88,"_32":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":227,"_228":229,"_230":231,"_232":25,"_233":25,"_234":25,"_235":58,"_236":-5,"_237":-7,"_238":-7,"_239":62,"_240":25,"_241":25,"_242":-5,"_243":25,"_244":25,"_245":25,"_246":-5},"ENV",{"_198":199,"_200":201,"_202":89,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12