[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_195":196,"_197":198},"routes/_app.x.$handle.$name",{"_99":98,"_32":44,"_108":89,"_27":52,"_13":14,"_109":-5,"_11":110,"_111":112,"_113":114,"_115":116,"_117":118,"_20":-5,"_119":-5,"_120":-5,"_121":25,"_122":123,"_124":25,"_125":-5,"_126":-5,"_127":128},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_42":43,"_32":44,"_37":45,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":70,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":82,"_83":84,"_85":86,"_87":25},"version",14,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":23,"_24":25,"_26":25,"_27":28,"_29":28},"file",{"_30":31,"_32":28,"_33":20,"_34":36,"_37":38,"_39":14,"_40":41,"_24":25},"previous",{"_30":31,"_32":28,"_33":20,"_34":35},"deleted",false,"deletedHere","path","README.md","latestPath","fileId","92e96052-b09b-11f1-b904-1607ee4eb77e","name","fileType","content","# Bot Viewer Detector\n\nScans your Twitch chat's current viewer list and flags accounts that look like\nfollow/view-bots, so you can review and block them manually. Nothing is banned\nautomatically.\n\n- **Dashboard** (`/`) — sorted table of flagged accounts with reasons.\n- **`/json`** — same data as JSON.\n- **`!botcheck`** — chat command that replies with just the count, e.g. \"🤖 4\n likely bot viewers out of 212 in chat right now.\"\n\n## How detection works\n\nEach chatter is scored on:\n\n- Account age (younger = more suspicious)\n- Default/missing profile picture\n- Username shape (word+digits, long random strings — common bot-generator\n patterns)\n\nKnown legitimate bots (Nightbot, StreamElements, etc. — see `botDetection.ts`)\nare always excluded. This is heuristic, not certain — glance at a flagged\naccount before blocking it.\n\n## Setup on Val Town\n\n1. Create a new Val Town project and upload `main.ts`, `twitch.ts`, and\n `botDetection.ts`. Set `main.ts` as the HTTP val entrypoint.\n2. Add these environment variables (account-level Environment Variables page):\n\n | Key | Value |\n | -------------------------- | ---------------------------------------------------------------------------------- |\n | `TWITCH_CLIENT_ID` | your app's Client ID — reuse GuildScribe's |\n | `TWITCH_CLIENT_SECRET` | your app's Client Secret — reuse GuildScribe's |\n | `TWITCH_BOT_ID` | your bot account's numeric user id — reuse GuildScribe's |\n | `TWITCH_BROADCASTER_LOGIN` | your channel login, e.g. `stonedsheamus` |\n | `TWITCH_MOD_OAUTH_TOKEN` | user token, scope `moderator:read:chatters`, from the broadcaster or a mod account |\n | `EVENTSUB_SECRET` | any random string you make up — doesn't need to match GuildScribe's |\n\n3. Open the val once to confirm the dashboard loads at `/` — this checks your\n Twitch credentials are working before wiring up chat.\n4. Visit `/connect` once (in a browser, GET request) to create the\n `channel.chat.message` EventSub subscription pointed at this val's own\n `/eventsub` URL. You should get back `{\"ok\": true, ...}`. If it fails with a\n 403/challenge error, double-check the bot account has been authorized for\n this channel the same way it was for GuildScribe (modded, and has granted the\n app `user:bot` scope / the channel has granted `channel:bot`).\n5. Type `!botcheck` in your channel's chat — the bot should reply with the\n current count within a few seconds.\n\n## Known limitations\n\n- `TWITCH_MOD_OAUTH_TOKEN` (used for the chatters list, not for sending\n messages) expires (~4 hours) unless set up with a refresh flow. Regenerate it\n via TwitchTokenGenerator.com when the dashboard/`!botcheck` starts throwing an\n auth error. Say the word if you want the refresh_token flow wired up instead.\n- `!botcheck` re-scans the whole chatter list on every call, so there's a couple\n seconds of delay before the reply — that's expected, not a bug.","# Bot Viewer Detector\n\nScans your Twitch chat's current viewer list and flags accounts that look like\nfollow/view-bots, so you can review and block them manually. Nothing is banned\nautomatically.\n\n- **`/`** — dashboard: sorted table of flagged accounts with reasons. Once\n connected, this is also the landing page.\n- **`/json`** — same data as JSON.\n- **`!botcheck`** — chat command that replies with just the count, e.g. \"🤖 4\n likely bot viewers out of 212 in chat right now.\"\n\n## What changed from the env-var version\n\nYou no longer set `TWITCH_BROADCASTER_LOGIN` or `TWITCH_MOD_OAUTH_TOKEN` by\nhand. Instead, visiting `/connect` and authorizing on Twitch captures your\nlogin, ID, and a refreshable moderator:read:chatters token automatically — same\nOAuth pattern GuildScribe already uses (`/connect` → Twitch → `/callback`),\nstored in this project's own SQLite database. The token also now refreshes\nitself instead of expiring every ~4 hours.\n\n## How detection works\n\nEach chatter is scored on:\n\n- Account age (younger = more suspicious)\n- Default/missing profile picture\n- Username shape (word+digits, long random strings — common bot-generator\n patterns)\n\nKnown legitimate bots (Nightbot, StreamElements, etc. — see `botDetection.ts`)\nare always excluded. This is heuristic, not certain — glance at a flagged\naccount before blocking it.\n\n## Setup on Val Town\n\n1. Create a new Val Town project and upload `main.ts`, `twitch.ts`, `db.ts`, and\n `botDetection.ts`. Set `main.ts` as the HTTP val entrypoint.\n2. Add these four environment variables (account-level Environment Variables\n page):\n\n | Key | Value |\n | ---------------------- | ------------------------------------------------------------------- |\n | `TWITCH_CLIENT_ID` | your app's Client ID — reuse GuildScribe's |\n | `TWITCH_CLIENT_SECRET` | your app's Client Secret — reuse GuildScribe's |\n | `TWITCH_BOT_ID` | your bot account's numeric user id — reuse GuildScribe's |\n | `EVENTSUB_SECRET` | any random string you make up — doesn't need to match GuildScribe's |\n\n3. Open the val's URL — you'll land on a \"Connect my channel\" page. Click it,\n authorize on Twitch, and you're done: broadcaster login, chatters token, and\n EventSub subscription are all set up automatically in that one step.\n4. In Twitch chat, run `/mod guildscribebot` (or whichever account owns\n `TWITCH_BOT_ID`) if it isn't already modded, so it's allowed to speak.\n5. Type `!botcheck` in chat — you should get a reply within a few seconds.\n6. Reloading `/` from then on shows the dashboard directly, no reconnecting\n needed unless Twitch revokes the authorization.\n\n## Known limitations\n\n- If the stored token ever gets revoked (e.g. you remove the app's access in\n your Twitch settings), `!botcheck` and `/` will say the channel needs to\n reconnect — just visit `/connect` again.\n- `!botcheck` re-scans the whole chatter list on every call, so there's a couple\n seconds of delay before the reply — that's expected, not a bug.","createdAt",["D",1789434214479],"branchVersion","branchId","eef5f215-8cd9-41ea-9861-8707575788d0","id","d496d537-568b-465b-b4a8-4b4c42a8f49f","bot-detector",["D",1789431551373],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","cc37ba10-6e6d-4af6-a801-9955c92d23c4","pinnedFileId","13376976-b09b-11f1-9183-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04ba1-c79f-7319-b4f2-7c4f3772837b","tursoName","d496d537568b465bb4a84b4c42a8f49f","tursoHostname","d496d537568b465bb4a84b4c42a8f49f-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789522252250],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_99":98,"_107":103},"org",{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},"branch",{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"isOwned",20,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","StonedSheamus","handle","displayName","Shea Stolp","avatar","https://lh3.googleusercontent.com/a/ACg8ocIWmQgR3gyoMMicg2zCAoN1c7i36qX5mf9gRIdIXm8F2mo-ig=s96-c","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_42":43,"_32":44,"_37":190,"_46":-5,"_47":25,"_48":49,"_50":49,"_51":52,"_53":-5,"_18":54,"_55":56,"_57":58,"_59":-5,"_60":-5,"_61":62,"_63":64,"_65":66,"_67":68,"_69":191,"_71":-5,"_72":73,"_74":73,"_75":76,"_77":76,"_78":76,"_79":73,"_80":73,"_81":192,"_83":193,"_85":194,"_87":25},"tree",[173,174,175,176],"files",[173,174,175,176],"counts",{"_162":62,"_163":148,"_164":62,"_165":166,"_167":168},"contents",[129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_42":159,"_32":28,"_30":31,"_136":-5,"_40":41,"_39":14,"_138":58,"_37":160,"_13":155,"_33":20,"_34":36,"_24":25,"_143":-5,"_27":161},{"_42":152,"_32":153,"_30":154,"_136":-5,"_40":41,"_39":155,"_138":58,"_37":156,"_13":140,"_33":141,"_34":157,"_24":25,"_143":-5,"_27":158},{"_42":145,"_32":146,"_30":56,"_136":-5,"_40":41,"_39":140,"_138":25,"_37":147,"_13":148,"_33":141,"_34":149,"_24":25,"_143":150,"_27":151},{"_42":133,"_32":134,"_30":135,"_136":-5,"_40":41,"_39":137,"_138":25,"_37":139,"_13":140,"_33":141,"_34":142,"_24":25,"_143":-5,"_27":144},"9ca92939-c7ff-4e81-90ba-4049925aab5d","twitch.ts","a3c58130-b09b-11f1-881e-1607ee4eb77e","parentId",13,"latest",["D",1789431825205],2,"script","// Twitch Helix API helpers for the bot-viewer detector.\n//\n// Env vars (set in Val Town's Environment Variables):\n// TWITCH_CLIENT_ID - your app's Client ID (dev.twitch.tv console)\n// TWITCH_CLIENT_SECRET - your app's Client Secret\n// TWITCH_MOD_OAUTH_TOKEN - user token, scope moderator:read:chatters,\n// belonging to the broadcaster or a moderator\n// TWITCH_BROADCASTER_LOGIN - channel login to scan, e.g. \"stonedsheamus\"\n// TWITCH_BOT_ID - the bot account's numeric user id (for sending\n// chat messages via app token — same value\n// GuildScribe/Hunt & Hoard already use)\n// EVENTSUB_SECRET - any random string, used to verify EventSub\n// webhook signatures (can be new/unique to\n// this val, doesn't need to match your others)\n\nexport const env = (name: string) => {\n const value = Deno.env.get(name);\n if (!value) throw new Error(`Missing environment variable: ${name}`);\n return value;\n};\n\n// ── App access token (client_credentials) — used for Get Users lookups\n// and for sending chat messages / managing EventSub subscriptions. ──\n\nlet cachedAppToken: { token: string; expiresAt: number } | null = null;\n\nexport function invalidateAppToken() {\n cachedAppToken = null;\n}\n\nexport async function getAppToken(): Promise {\n if (cachedAppToken && Date.now() < cachedAppToken.expiresAt) {\n return cachedAppToken.token;\n }\n const body = new URLSearchParams({\n client_id: env(\"TWITCH_CLIENT_ID\"),\n client_secret: env(\"TWITCH_CLIENT_SECRET\"),\n grant_type: \"client_credentials\",\n });\n const res = await fetch(\"https://id.twitch.tv/oauth2/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body,\n });\n if (!res.ok) {\n throw new Error(`App token failed: ${res.status} ${await res.text()}`);\n }\n const data = await res.json();\n const expiresInMs = Number(data.expires_in ?? 0) * 1000;\n cachedAppToken = {\n token: data.access_token as string,\n expiresAt: Date.now() + Math.max(0, expiresInMs - 60_000),\n };\n return cachedAppToken.token;\n}\n\nexport interface TwitchUser {\n id: string;\n login: string;\n display_name: string;\n created_at: string;\n profile_image_url: string;\n}\n\n/** Get Users, batched 100 logins per request (Helix's max). */\nexport async function getUsersByLogin(logins: string[]): Promise {\n const token = await getAppToken();\n const out: TwitchUser[] = [];\n for (let i = 0; i < logins.length; i += 100) {\n const batch = logins.slice(i, i + 100);\n const params = new URLSearchParams();\n for (const l of batch) params.append(\"login\", l);\n const res = await fetch(`https://api.twitch.tv/helix/users?${params}`, {\n headers: {\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n Authorization: `Bearer ${token}`,\n },\n });\n if (!res.ok) {\n throw new Error(`Get Users failed: ${res.status} ${await res.text()}`);\n }\n const data = await res.json();\n out.push(...data.data);\n }\n return out;\n}\n\n/** Resolves the broadcaster's numeric id from TWITCH_BROADCASTER_LOGIN. */\nexport async function getBroadcasterId(): Promise {\n const [broadcaster] = await getUsersByLogin([\n env(\"TWITCH_BROADCASTER_LOGIN\"),\n ]);\n if (!broadcaster) {\n throw new Error(\n `Could not find a Twitch account for TWITCH_BROADCASTER_LOGIN=\"${\n env(\"TWITCH_BROADCASTER_LOGIN\")\n }\"`,\n );\n }\n return broadcaster.id;\n}\n\n/** Resolves the mod token's own user id (required as moderator_id for Get Chatters). */\nexport async function getModeratorId(): Promise {\n const res = await fetch(\"https://api.twitch.tv/helix/users\", {\n headers: {\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n Authorization: `Bearer ${env(\"TWITCH_MOD_OAUTH_TOKEN\")}`,\n },\n });\n if (!res.ok) {\n throw new Error(\n `Resolving TWITCH_MOD_OAUTH_TOKEN identity failed: ${res.status} ${await res\n .text()}`,\n );\n }\n const data = await res.json();\n return data.data[0].id;\n}\n\nexport interface Chatter {\n user_id: string;\n user_login: string;\n user_name: string;\n}\n\n/** Get Chatters — requires the mod token's account to be the broadcaster or a moderator of the channel. */\nexport async function getChatters(\n broadcasterId: string,\n moderatorId: string,\n): Promise {\n const out: Chatter[] = [];\n let cursor: string | undefined;\n do {\n const params = new URLSearchParams({\n broadcaster_id: broadcasterId,\n moderator_id: moderatorId,\n first: \"1000\",\n });\n if (cursor) params.set(\"after\", cursor);\n const res = await fetch(\n `https://api.twitch.tv/helix/chat/chatters?${params}`,\n {\n headers: {\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n Authorization: `Bearer ${env(\"TWITCH_MOD_OAUTH_TOKEN\")}`,\n },\n },\n );\n if (!res.ok) {\n throw new Error(`Get Chatters failed: ${res.status} ${await res.text()}`);\n }\n const data = await res.json();\n out.push(...data.data);\n cursor = data.pagination?.cursor || undefined;\n } while (cursor);\n return out;\n}\n\n// ── Sending chat messages (app-token bot flow, same as GuildScribe) ──\n\nexport async function sendChatMessage(\n text: string,\n broadcasterId: string,\n): Promise {\n const message = text.slice(0, 500);\n if (!message.trim()) return true;\n try {\n const send = async (token: string) =>\n fetch(\"https://api.twitch.tv/helix/chat/messages\", {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${token}`,\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n broadcaster_id: broadcasterId,\n sender_id: env(\"TWITCH_BOT_ID\"),\n message,\n }),\n });\n\n let res = await send(await getAppToken());\n if (res.status === 401) {\n invalidateAppToken();\n res = await send(await getAppToken());\n }\n if (!res.ok) {\n console.error(\n `Twitch chat send failed: ${res.status} ${await res.text()}`,\n );\n }\n return res.ok;\n } catch (err) {\n console.error(\"sendChatMessage failed\", err);\n return false;\n }\n}\n\n// ── EventSub subscription management ──\n\nasync function createEventSubSubscription(\n type: string,\n version: string,\n condition: Record,\n callbackUrl: string,\n) {\n const appToken = await getAppToken();\n const res = await fetch(\n \"https://api.twitch.tv/helix/eventsub/subscriptions\",\n {\n method: \"POST\",\n headers: {\n Authorization: `Bearer ${appToken}`,\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify({\n type,\n version,\n condition,\n transport: {\n method: \"webhook\",\n callback: callbackUrl,\n secret: env(\"EVENTSUB_SECRET\"),\n },\n }),\n },\n );\n const text = await res.text();\n if (!res.ok) {\n throw new Error(\n `EventSub subscription failed (${type}): ${res.status} ${text}`,\n );\n }\n return JSON.parse(text).data[0];\n}\n\nexport async function createChatSubscription(\n broadcasterId: string,\n callbackUrl: string,\n) {\n return createEventSubSubscription(\n \"channel.chat.message\",\n \"1\",\n { broadcaster_user_id: broadcasterId, user_id: env(\"TWITCH_BOT_ID\") },\n callbackUrl,\n );\n}\n\nexport async function deleteEventSubSubscription(subscriptionId: string) {\n if (!subscriptionId) return true;\n const appToken = await getAppToken();\n const res = await fetch(\n `https://api.twitch.tv/helix/eventsub/subscriptions?id=${\n encodeURIComponent(subscriptionId)\n }`,\n {\n method: \"DELETE\",\n headers: {\n Authorization: `Bearer ${appToken}`,\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n },\n },\n );\n if (res.status === 404) return true;\n if (!res.ok) {\n throw new Error(\n `EventSub deletion failed: ${res.status} ${await res.text()}`,\n );\n }\n return true;\n}\n\n/** Constant-time string compare, so signature checking doesn't leak timing info. */\nexport function timingSafeEqual(a: string, b: string): boolean {\n if (a.length !== b.length) return false;\n let diff = 0;\n for (let i = 0; i < a.length; i++) {\n diff |= a.charCodeAt(i) ^ b.charCodeAt(i);\n }\n return diff === 0;\n}\n\nexport async function verifyEventSub(\n req: Request,\n rawBody: string,\n): Promise {\n const id = req.headers.get(\"Twitch-Eventsub-Message-Id\") ?? \"\";\n const timestamp = req.headers.get(\"Twitch-Eventsub-Message-Timestamp\") ?? \"\";\n const received = req.headers.get(\"Twitch-Eventsub-Message-Signature\") ?? \"\";\n if (!id || !timestamp || !received) return false;\n const receivedAt = Date.parse(timestamp);\n if (\n !Number.isFinite(receivedAt) ||\n Math.abs(Date.now() - receivedAt) > 10 * 60 * 1000\n ) return false;\n const key = await crypto.subtle.importKey(\n \"raw\",\n new TextEncoder().encode(env(\"EVENTSUB_SECRET\")),\n { name: \"HMAC\", hash: \"SHA-256\" },\n false,\n [\"sign\"],\n );\n const signature = new Uint8Array(\n await crypto.subtle.sign(\n \"HMAC\",\n key,\n new TextEncoder().encode(id + timestamp + rawBody),\n ),\n );\n const hex = [...signature].map((b) => b.toString(16).padStart(2, \"0\")).join(\n \"\",\n );\n const expected = `sha256=${hex}`;\n return timingSafeEqual(expected, received);\n}","label",[134],"b948761d-4a71-4df4-bbfa-2715cfdddd47","main.ts",["D",1789431722930],1,"import { Hono } from \"npm:hono\";\nimport {\n createChatSubscription,\n env,\n getBroadcasterId,\n getChatters,\n getModeratorId,\n getUsersByLogin,\n sendChatMessage,\n verifyEventSub,\n} from \"./twitch.ts\";\nimport { type BotScoreResult, scoreUser } from \"./botDetection.ts\";\n\nconst app = new Hono();\n\napp.onError((err) => {\n console.error(err);\n return new Response(\n `Error: ${err instanceof Error ? err.message : String(err)}`,\n { status: 500 },\n );\n});\n\nasync function getFlaggedChatters(): Promise<\n { totalChatters: number; results: BotScoreResult[] }\n> {\n const [broadcasterId, moderatorId] = await Promise.all([\n getBroadcasterId(),\n getModeratorId(),\n ]);\n const chatters = await getChatters(broadcasterId, moderatorId);\n const users = await getUsersByLogin(chatters.map((ch) => ch.user_login));\n\n const results = users\n .map(scoreUser)\n .filter((r): r is BotScoreResult => r !== null)\n .sort((a, b) => b.score - a.score);\n\n return { totalChatters: chatters.length, results };\n}\n\n// ── Dashboard ──\n\napp.get(\"/\", async (c) => {\n const { totalChatters, results } = await getFlaggedChatters();\n\n const rows = results\n .map(\n (r) => `\n \n ${r.displayName}\n ${r.score}\n ${r.accountAgeDays}d\n ${r.reasons.join(\"; \")}\n `,\n )\n .join(\"\");\n\n return c.html(`\n \n \n \n \n Likely Bot Viewers\n \n \n \n \n

Likely Bot Viewers

${totalChatters} chatters checked · ${results.length} flagged for review. This is a heuristic guess, not a certainty — check an account before blocking it.

\n \n \n ${rows || ''}\n

Username	Score	Account age	Why flagged
Nothing flagged right now.

\n \n \n `);\n});\n\napp.get(\"/json\", async (c) => {\n const { totalChatters, results } = await getFlaggedChatters();\n return c.json({ total_chatters: totalChatters, flagged: results });\n});\n\n// ── One-time setup: subscribes this val's /eventsub to channel.chat.message ──\n\napp.get(\"/connect\", async (c) => {\n const broadcasterId = await getBroadcasterId();\n const callbackUrl = new URL(\"/eventsub\", c.req.url).toString();\n const subscription = await createChatSubscription(broadcasterId, callbackUrl);\n return c.json({ ok: true, callbackUrl, subscription });\n});\n\n// ── EventSub webhook: challenge handshake + incoming chat messages ──\n\napp.post(\"/eventsub\", async (c) => {\n const rawBody = await c.req.text();\n const valid = await verifyEventSub(c.req.raw, rawBody);\n if (!valid) return c.text(\"Invalid signature\", 403);\n\n const messageType = c.req.header(\"Twitch-Eventsub-Message-Type\");\n const payload = JSON.parse(rawBody);\n\n if (messageType === \"webhook_callback_verification\") {\n return c.text(payload.challenge, 200);\n }\n\n if (messageType === \"revocation\") {\n console.error(\"EventSub subscription revoked:\", payload.subscription);\n return c.text(\"\", 200);\n }\n\n if (\n messageType === \"notification\" &&\n payload.subscription?.type === \"channel.chat.message\"\n ) {\n const event = payload.event;\n const text: string = event?.message?.text ?? \"\";\n const broadcasterId: string = event?.broadcaster_user_id;\n\n if (text.trim().toLowerCase().startsWith(\"!botcheck\")) {\n // Reply first with a quick ack isn't necessary — Twitch just wants a\n // 200 promptly, so do the scoring work then send the chat reply.\n handleBotCheck(broadcasterId).catch((err) =>\n console.error(\"botcheck failed\", err)\n );\n }\n\n return c.text(\"\", 200);\n }\n\n return c.text(\"\", 200);\n});\n\nasync function handleBotCheck(broadcasterId: string) {\n const { totalChatters, results } = await getFlaggedChatters();\n const reply = results.length === 0\n ? `🤖 No likely bot viewers spotted out of ${totalChatters} in chat right now.`\n : `🤖 ${results.length} likely bot viewer${\n results.length === 1 ? \"\" : \"s\"\n } out of ${totalChatters} in chat right now.`;\n await sendChatMessage(reply, broadcasterId);\n}\n\nexport default app.fetch;","botdetector",[146],"46df2354-64f4-4991-8d06-30482d932865","botDetection.ts","8475738a-b09b-11f1-a52d-1607ee4eb77e",5,["D",1789431761819],"import type { TwitchUser } from \"./twitch.ts\";\n\n// Well-known, legitimate service bots — never flag these regardless of score.\n// Add your own bot accounts here (e.g. your GuildScribe/Hunt & Hoard bot logins).\nconst KNOWN_SAFE_BOTS = new Set([\n \"nightbot\",\n \"streamelements\",\n \"streamlabs\",\n \"moobot\",\n \"soundalerts\",\n \"wizebot\",\n \"fossabot\",\n \"pretzelrocks\",\n \"own3d\",\n \"sery_bot\",\n \"restreambot\",\n \"commanderroot\",\n]);\n\n// Shapes commonly produced by follow/view-bot generator tools.\nconst BOT_NAME_PATTERNS = [\n /^[a-z]{3,12}\\d{5,}$/i, // short word + 5+ trailing digits, e.g. \"coolgamer88421\"\n /^[a-z0-9]{16,}$/i, // long random alphanumeric blob\n];\n\nexport interface BotScoreResult {\n login: string;\n displayName: string;\n score: number;\n reasons: string[];\n accountAgeDays: number;\n profileUrl: string;\n}\n\n/** Returns null if the account isn't flagged at all. */\nexport function scoreUser(user: TwitchUser): BotScoreResult | null {\n const login = user.login.toLowerCase();\n if (KNOWN_SAFE_BOTS.has(login)) return null;\n\n const reasons: string[] = [];\n let score = 0;\n\n const createdAt = new Date(user.created_at).getTime();\n const ageDays = (Date.now() - createdAt) / (1000 * 60 * 60 * 24);\n\n if (ageDays < 3) {\n score += 3;\n reasons.push(`Account is ${ageDays.toFixed(1)} days old`);\n } else if (ageDays < 14) {\n score += 2;\n reasons.push(`Account is only ${Math.round(ageDays)} days old`);\n } else if (ageDays < 45) {\n score += 1;\n reasons.push(`Account is ${Math.round(ageDays)} days old`);\n }\n\n if (\n !user.profile_image_url ||\n user.profile_image_url.includes(\"user-default-pictures\")\n ) {\n score += 2;\n reasons.push(\"Using the default profile picture\");\n }\n\n if (BOT_NAME_PATTERNS.some((p) => p.test(login))) {\n score += 2;\n reasons.push(\"Username matches common bot-generator patterns\");\n }\n\n if (score === 0) return null;\n\n return {\n login: user.login,\n displayName: user.display_name,\n score,\n reasons,\n accountAgeDays: Math.round(ageDays),\n profileUrl: `https://twitch.tv/${user.login}`,\n };\n}",[153],"62666a88-9024-4411-9fd6-9955295cd17e",["D",1789434214479],[28],"pulls","branches","forks","envVars",{"_169":171,"_172":62},"connections",{"_169":62,"_170":62},"count","unfilledCount",4,"emptyCount",{"_42":159,"_32":28,"_30":31,"_136":-5,"_40":41,"_39":14,"_138":58,"_37":187,"_13":155,"_33":20,"_34":36,"_24":25,"_143":-5,"_178":188,"_27":189},{"_42":152,"_32":153,"_30":154,"_136":-5,"_40":41,"_39":155,"_138":58,"_37":184,"_13":140,"_33":141,"_34":157,"_24":25,"_143":-5,"_178":185,"_27":186},{"_42":145,"_32":146,"_30":56,"_136":-5,"_40":41,"_39":140,"_138":25,"_37":181,"_13":148,"_33":141,"_34":149,"_24":25,"_143":150,"_178":182,"_27":183},{"_42":133,"_32":134,"_30":135,"_136":-5,"_40":41,"_39":137,"_138":25,"_37":177,"_13":140,"_33":141,"_34":142,"_24":25,"_143":-5,"_178":179,"_27":180},["D",1789431825205],"children",[],[134],["D",1789431722930],[],[146],["D",1789431761819],[],[153],["D",1789434214479],[],[28],["D",1789431551373],["D",1789522252250],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":54,"_104":105,"_106":25},{"_13":88,"_32":89,"_42":41,"_90":43,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":44,"_97":98},"ctx",{"_81":-5,"_126":228,"_229":230,"_231":232,"_233":25,"_234":25,"_235":25,"_236":58,"_237":-5,"_238":-7,"_239":-7,"_240":62,"_241":25,"_242":25,"_243":-5,"_244":25,"_245":25,"_246":25,"_247":-5},"ENV",{"_199":200,"_201":202,"_203":89,"_204":205,"_206":207,"_208":209,"_210":211,"_212":213,"_214":215,"_216":217,"_218":219,"_220":221,"_222":223,"_224":225,"_226":227},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v14