🥸 ${BOT_NAME}

${BOT_NAME} slips into your Twitch chat undercover, then blows\n its own cover with a playful roast — or a quote pulled live from\n your own channel's StreamElements !quote list.

Add ${BOT_NAME} to your channel

\n First time setting this bot up? The bot account itself needs a\n one-time authorization at /auth/bot-setup\n before any channel invites will work.\n

\n `);\n }\n\n // ---- Streamer invite flow ----\n if (url.pathname === \"/auth/start\") {\n return Response.redirect(authorizeUrl(\"channel:bot\", \"channel\"), 302);\n }\n\n // ---- Bot's own one-time authorization ----\n if (url.pathname === \"/auth/bot-setup\") {\n return Response.redirect(authorizeUrl(\"user:bot\", \"bot\"), 302);\n }\n\n // ---- Shared OAuth callback ----\n if (url.pathname === \"/auth/callback\") {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\"); // \"bot\" or \"channel\"\n const error = url.searchParams.get(\"error\");\n\n if (error) {\n return page(`

Not authorized

Twitch reported: ${error}

`);\n }\n if (!code) {\n return page(\n `

Missing code

Something went wrong — try again.

`,\n );\n }\n\n const tokenRes = await fetch(\"https://id.twitch.tv/oauth2/token\", {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/x-www-form-urlencoded\" },\n body: new URLSearchParams({\n client_id: CLIENT_ID,\n client_secret: CLIENT_SECRET,\n code,\n grant_type: \"authorization_code\",\n redirect_uri: REDIRECT_URI,\n }),\n });\n if (!tokenRes.ok) {\n return page(`

Auth failed

${await tokenRes.text()}

`);\n }\n const tokenData = await tokenRes.json();\n\n const userRes = await fetch(\"https://api.twitch.tv/helix/users\", {\n headers: {\n \"Client-Id\": CLIENT_ID,\n \"Authorization\": `Bearer ${tokenData.access_token}`,\n },\n });\n const userData = await userRes.json();\n const user = userData.data?.[0];\n if (!user) {\n return page(`

Couldn't identify that account

`);\n }\n\n // ---- Branch: bot's own one-time setup ----\n if (state === \"bot\") {\n await setKv(\"bot_user_id\", user.id);\n await setKv(\"bot_login\", user.login);\n return page(`\n

✅ Bot account connected

${user.display_name} is now authorized to send\n chat as ${BOT_NAME}. You only need to do this once.

Back home

\n `);\n }\n\n // ---- Branch: a streamer inviting the bot to their channel ----\n let seChannelId: string | null = null;\n try {\n const seRes = await fetch(\n `https://api.streamelements.com/kappa/v2/channels/${user.login}`,\n );\n if (seRes.ok) {\n const seData = await seRes.json();\n seChannelId = seData?._id ?? null;\n }\n } catch {\n // No StreamElements channel found — roasts alone still work fine.\n }\n\n await sqlite.execute({\n sql: `\n INSERT INTO channels (broadcaster_id, broadcaster_login, se_channel_id, enabled, added_at)\n VALUES (:id, :login, :se, 1, :now)\n ON CONFLICT(broadcaster_id) DO UPDATE SET\n broadcaster_login = excluded.broadcaster_login,\n se_channel_id = excluded.se_channel_id\n `,\n args: {\n id: user.id,\n login: user.login,\n se: seChannelId,\n now: Date.now(),\n },\n });\n\n return page(`\n

✅ Added!

${BOT_NAME} is now live in ${user.display_name}'s channel.

${\n seChannelId\n ? \"Found your StreamElements channel too — quotes will mix in automatically.\"\n : \"Didn't find a matching StreamElements channel, so it'll stick to roasts for now.\"\n }

\n `);\n }\n\n // ---- Admin: list / remove installed channels ----\n if (url.pathname === \"/channels\") {\n const key = url.searchParams.get(\"key\");\n if (!ADMIN_KEY || key !== ADMIN_KEY) {\n return new Response(\"Unauthorized — add ?key= to the URL.\", {\n status: 401,\n });\n }\n\n const botEnabledRaw = await getKv(\"bot_enabled\");\n const botEnabled = botEnabledRaw !== \"0\"; // default ON if never set\n\n const { rows } = await sqlite.execute(\n \"SELECT broadcaster_id, broadcaster_login, se_channel_id, added_at, enabled FROM channels ORDER BY added_at DESC\",\n );\n\n const tableRows = rows\n .map((row) => {\n const id = row[0] as string;\n const login = row[1] as string;\n const se = row[2] as string | null;\n const addedAt = new Date(row[3] as number).toLocaleString();\n const chEnabled = row[4] === null || row[4] === undefined\n ? true\n : Number(row[4]) === 1;\n return `\n \n ${login}\n ${se ? \"✅\" : \"—\"}\n ${\n chEnabled ? \"ON\" : \"OFF\"\n }\n ${addedAt}\n \n \n \n \n `;\n })\n .join(\"\");\n\n return page(`\n

Installed channels

\n\n \n\n

${rows.length} channel${\n rows.length === 1 ? \"\" : \"s\"\n } currently have ${BOT_NAME}.

\n \n \n ${\n tableRows || ``\n }\n

Channel	StreamElements	Status	Added
No channels yet.

Back home

\n `);\n }\n\n // ---- Admin: global on/off switch ----\n if (url.pathname === \"/admin/toggle-bot\" && req.method === \"POST\") {\n const form = await req.formData();\n const key = form.get(\"key\");\n if (!ADMIN_KEY || key !== ADMIN_KEY) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n const current = await getKv(\"bot_enabled\");\n const currentlyEnabled = current !== \"0\";\n await setKv(\"bot_enabled\", currentlyEnabled ? \"0\" : \"1\");\n return Response.redirect(\n `${url.origin}/channels?key=${encodeURIComponent(key as string)}`,\n 302,\n );\n }\n\n // ---- Admin: per-channel pause/resume ----\n if (url.pathname === \"/channels/toggle\" && req.method === \"POST\") {\n const form = await req.formData();\n const key = form.get(\"key\");\n const id = form.get(\"id\");\n if (!ADMIN_KEY || key !== ADMIN_KEY) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n if (id) {\n const { rows } = await sqlite.execute({\n sql: \"SELECT enabled FROM channels WHERE broadcaster_id = :id\",\n args: { id: id as string },\n });\n const currentlyEnabled = rows.length\n ? (rows[0][0] === null || rows[0][0] === undefined\n ? true\n : Number(rows[0][0]) === 1)\n : true;\n await sqlite.execute({\n sql: \"UPDATE channels SET enabled = :e WHERE broadcaster_id = :id\",\n args: { e: currentlyEnabled ? 0 : 1, id: id as string },\n });\n }\n return Response.redirect(\n `${url.origin}/channels?key=${encodeURIComponent(key as string)}`,\n 302,\n );\n }\n\n if (url.pathname === \"/channels/remove\" && req.method === \"POST\") {\n const form = await req.formData();\n const key = form.get(\"key\");\n const id = form.get(\"id\");\n if (!ADMIN_KEY || key !== ADMIN_KEY) {\n return new Response(\"Unauthorized\", { status: 401 });\n }\n if (id) {\n await sqlite.execute({\n sql: \"DELETE FROM channels WHERE broadcaster_id = :id\",\n args: { id: id as string },\n });\n }\n return Response.redirect(\n `${url.origin}/channels?key=${encodeURIComponent(key as string)}`,\n 302,\n );\n }\n\n return page(`

404

Go home

`);\n}","label",[132],"598dc29f-4a36-4daf-a5f9-3f4a4f968a90",["D",1788310462917],[28],"pulls","branches",1,"forks","envVars",{"_153":155,"_156":62},"connections",{"_153":62,"_154":62},"count","unfilledCount",5,"emptyCount",{"_43":142,"_33":28,"_31":32,"_133":-5,"_41":42,"_40":14,"_135":26,"_38":163,"_13":62,"_34":35,"_36":37,"_23":26,"_140":-5,"_160":164,"_27":165},{"_43":131,"_33":132,"_31":57,"_133":-5,"_41":42,"_40":134,"_135":26,"_38":159,"_13":137,"_34":138,"_36":139,"_23":26,"_140":-5,"_160":161,"_27":162},["D",1788310460976],"children",[],[132],["D",1788310462917],[],[28],["D",1788213389549],["D",1789533091345],{"_99":98,"_107":103},{"_99":98,"_100":101,"_102":103,"_18":55,"_104":105,"_106":26},{"_13":88,"_33":89,"_43":42,"_90":44,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":45,"_97":98},"ctx",{"_81":-5,"_126":204,"_205":206,"_207":208,"_209":26,"_210":26,"_211":26,"_212":24,"_213":-5,"_214":-7,"_215":-7,"_216":62,"_217":26,"_218":26,"_219":-5,"_220":26,"_221":26,"_222":26,"_223":-5},"ENV",{"_175":176,"_177":178,"_179":89,"_180":181,"_182":183,"_184":185,"_186":187,"_188":189,"_190":191,"_192":193,"_194":195,"_196":197,"_198":199,"_200":201,"_202":203},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v12