\n \n

Account Sentinel

Vui lòng đăng nhập hệ thống

\n ${\n error\n ? `

Sai tài khoản hoặc mật khẩu

`\n : \"\"\n }\n \n

\n \n \n \n `);\n});\n\napp.post(\"/login\", async (c) => {\n const body = await c.req.parseBody();\n if (body.username === ADMIN_USER && body.password === ADMIN_PASS) {\n await ensureDB();\n const newSessionId = crypto.randomUUID();\n await sqlite.execute(\n \"INSERT INTO account_admin_sessions (session_id) VALUES (?)\",\n [newSessionId],\n );\n setCookie(c, COOKIE_NAME, newSessionId, {\n path: \"/\",\n secure: true,\n httpOnly: true,\n maxAge: 60 * 60 * 24 * 7,\n sameSite: \"Lax\",\n });\n return c.redirect(\"/\");\n }\n return c.redirect(\"/login?error=1\");\n});\n\napp.get(\"/logout\", async (c) => {\n const currentSessionId = getCookie(c, COOKIE_NAME);\n if (currentSessionId) {\n await ensureDB();\n await sqlite.execute(\n \"DELETE FROM account_admin_sessions WHERE session_id = ?\",\n [currentSessionId],\n );\n }\n deleteCookie(c, COOKIE_NAME, { path: \"/\" });\n return c.redirect(\"/login\");\n});\n\napp.post(\"/api/auth/logout-others\", async (c) => {\n const currentSessionId = c.get(\"sessionId\");\n if (currentSessionId) {\n await sqlite.execute(\n \"DELETE FROM account_admin_sessions WHERE session_id != ?\",\n [currentSessionId],\n );\n return c.json({ success: true });\n }\n return c.json({ success: false, error: \"Không tìm thấy phiên\" });\n});\n\n// ====================================================================\n// 5. LOGIC HELPERS\n// ====================================================================\n// ====================================================================\n// HÀM KIỂM TRA CHUYÊN BIỆT CHO CANVA\n// ====================================================================\nasync function checkCanvaAccount(rawUrl) {\n let cleanUrl = rawUrl.trim();\n\n // Chuẩn hóa link Canva: Đưa về định dạng /view chuẩn và bỏ bớt query theo dõi\n try {\n const u = new URL(cleanUrl);\n if (u.pathname.includes(\"/design/\")) {\n u.search = \"\"; // Xóa bớt các tham số ?utm_source=... gây lỗi oEmbed\n if (u.pathname.endsWith(\"/edit\")) {\n u.pathname = u.pathname.replace(/\\/edit$/, \"/view\");\n }\n cleanUrl = u.toString();\n }\n } catch (_) {}\n\n // TẦNG 1: Dùng Canva oEmbed API chính thức (Không bị dính Cloudflare HTML Challenge)\n const oembedEndpoints = [\n `https://www.canva.com/_oembed?url=${encodeURIComponent(cleanUrl)}`,\n `https://api.canva.com/_spi/presentation/_oembed?url=${\n encodeURIComponent(cleanUrl)\n }`,\n ];\n\n for (const endpoint of oembedEndpoints) {\n try {\n const res = await fetch(endpoint, {\n headers: {\n \"Accept\": \"application/json\",\n \"User-Agent\":\n \"Slackbot-LinkExpanding 1.0 (+https://api.slack.com/robots)\",\n },\n cache: \"no-store\",\n });\n\n if (res.status === 200) {\n const data = await res.json();\n const title = data.title ? `: \"${data.title}\"` : \"\";\n return {\n status: \"OK\",\n details: `Hoạt động tốt: Thiết kế công khai${title}`,\n };\n }\n // Nếu Canva báo 404/410 nghĩa là file đã bị xoá hoặc huỷ chia sẻ\n if (res.status === 404 || res.status === 410) {\n return {\n status: \"ERROR\",\n details: \"HTTP 404: File Canva đã bị xoá hoặc chuyển sang riêng tư\",\n };\n }\n } catch (_) {}\n }\n\n // TẦNG 2: Giả lập Social Media Crawler (Được Cloudflare Canva nhả qua tường lửa)\n try {\n const botRes = await fetch(cleanUrl, {\n headers: {\n \"User-Agent\": \"Twitterbot/1.0\",\n \"Accept\":\n \"text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\",\n },\n redirect: \"follow\",\n cache: \"no-store\",\n });\n\n if (botRes.status === 200) {\n const html = await botRes.text();\n const lower = html.toLowerCase();\n if (\n lower.includes(\"design not found\") ||\n lower.includes(\"thiết kế không tồn tại\") ||\n lower.includes(\"design has been deleted\")\n ) {\n return {\n status: \"ERROR\",\n details: \"Thiết kế Canva không tồn tại hoặc đã bị xoá\",\n };\n }\n return {\n status: \"OK\",\n details: \"Hoạt động tốt: Liên kết công khai khả dụng\",\n };\n }\n } catch (_) {}\n\n // TẦNG 3: Bypass hoàn toàn qua Microlink Engine (Khi IP AWS bị Cloudflare chặn cứng)\n try {\n const microRes = await fetch(\n `https://api.microlink.io?url=${encodeURIComponent(cleanUrl)}`,\n { cache: \"no-store\" },\n );\n if (microRes.ok) {\n const json = await microRes.json();\n if (json.status === \"success\" && json.data && json.data.title) {\n return {\n status: \"OK\",\n details: `Hoạt động tốt (via Microlink): \"${json.data.title}\"`,\n };\n } else {\n return {\n status: \"ERROR\",\n details: \"Không tìm thấy thiết kế trên Canva (File đã bị xoá)\",\n };\n }\n }\n } catch (e) {\n return {\n status: \"ERROR\",\n details: `Lỗi kết nối kiểm tra: ${e.message}`,\n };\n }\n\n return {\n status: \"ERROR\",\n details: \"HTTP 403: Bị tường lửa Canva chặn và không thể phân giải link\",\n };\n}\n\n// ====================================================================\n// HÀM CHECK TỔNG (Giữ nguyên logic của GitHub, Hugging Face, Seatable)\n// ====================================================================\nasync function checkSingleAccount(row) {\n if (row.is_paused) {\n return { id: row.id, status: \"PAUSED\", details: \"Đang ngừng theo dõi\" };\n }\n\n // 1. Phân luồng kiểm tra riêng biệt cho Canva\n if (row.platform === \"Canva\" || row.check_url.includes(\"canva.com\")) {\n const canvaResult = await checkCanvaAccount(row.check_url);\n return { id: row.id, ...canvaResult };\n }\n\n // 2. Logic cho các nền tảng API khác (GitHub, HuggingFace, Seatable...)\n let headers = { \"User-Agent\": \"ValTown-Sentinel-Monitor/1.0\" };\n if (row.token_env_key && Deno.env.get(row.token_env_key)) {\n headers[\"Authorization\"] = `Bearer ${Deno.env.get(row.token_env_key)}`;\n }\n\n try {\n const response = await fetch(row.check_url, {\n headers,\n cache: \"no-store\",\n redirect: \"manual\",\n });\n\n if (!response.ok || response.status >= 300) {\n return {\n id: row.id,\n status: \"ERROR\",\n details: `HTTP ${response.status}: Lỗi xác thực hoặc không tìm thấy`,\n };\n }\n\n const textData = await response.text();\n if (\n row.check_url.includes(\"api.github.com\") ||\n row.check_url.includes(\"huggingface.co/api\")\n ) {\n try {\n const jsonData = JSON.parse(textData);\n if (\n jsonData.error ||\n jsonData.message === \"Not Found\" ||\n jsonData.message === \"Bad credentials\"\n ) {\n return {\n id: row.id,\n status: \"ERROR\",\n details: `Lỗi API: ${jsonData.error || jsonData.message}`,\n };\n }\n if (\n row.platform === \"HuggingFace\" ||\n row.check_url.includes(\"huggingface.co/api\")\n ) {\n if (jsonData.type === \"guest\" || jsonData.auth?.type === \"none\") {\n return {\n id: row.id,\n status: \"ERROR\",\n details:\n \"Lỗi: Mất Token hoặc Token sai (Bị giáng cấp thành Guest)\",\n };\n }\n if (!jsonData.type) {\n return {\n id: row.id,\n status: \"ERROR\",\n details: \"Lỗi cấu trúc: Không nhận diện được tài khoản\",\n };\n }\n }\n return {\n id: row.id,\n status: \"OK\",\n details: \"Tài khoản hoạt động bình thường\",\n };\n } catch (e) {\n return {\n id: row.id,\n status: \"ERROR\",\n details: \"Lỗi xác thực: Phản hồi không hợp lệ\",\n };\n }\n }\n return { id: row.id, status: \"OK\", details: \"Liên kết khả dụng\" };\n } catch (e) {\n return {\n id: row.id,\n status: \"ERROR\",\n details: `Không thể kết nối: ${e.message}`,\n };\n }\n}\n\n// ====================================================================\n// 6. API ROUTES\n// ====================================================================\napp.get(\"/api/list\", async (c) => {\n const result = await sqlite.execute(\n \"SELECT * FROM account_monitor_final ORDER BY sort_order ASC, created_at DESC\",\n );\n return c.json(result.rows);\n});\n\napp.post(\"/api/add\", async (c) => {\n const body = await c.req.json();\n const tokenEnv = body.token_env_key && body.token_env_key.trim() !== \"\"\n ? body.token_env_key\n : null;\n const maxOrderRes = await sqlite.execute(\n \"SELECT MAX(sort_order) as max FROM account_monitor_final\",\n );\n const nextOrder = (maxOrderRes.rows[0].max !== null)\n ? maxOrderRes.rows[0].max + 1\n : 0;\n await sqlite.execute(\n `INSERT INTO account_monitor_final (name, platform, check_url, token_env_key, status, is_paused, sort_order, created_at) VALUES (?, ?, ?, ?, ?, 0, ?, datetime('now'))`,\n [body.name, body.platform, body.check_url, tokenEnv, \"PENDING\", nextOrder],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/update\", async (c) => {\n const body = await c.req.json();\n const tokenEnv = body.token_env_key && body.token_env_key.trim() !== \"\"\n ? body.token_env_key\n : null;\n await sqlite.execute(\n `UPDATE account_monitor_final SET name = ?, platform = ?, check_url = ?, token_env_key = ? WHERE id = ?`,\n [body.name, body.platform, body.check_url, tokenEnv, body.id],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/save-order\", async (c) => {\n const body = await c.req.json();\n const promises = body.order.map((id, i) =>\n sqlite.execute(\n \"UPDATE account_monitor_final SET sort_order = ? WHERE id = ?\",\n [i, id],\n )\n );\n await Promise.all(promises);\n return c.json({ success: true });\n});\n\napp.post(\"/api/toggle-pause\", async (c) => {\n const body = await c.req.json();\n const cur = await sqlite.execute(\n \"SELECT is_paused FROM account_monitor_final WHERE id = ?\",\n [body.id],\n );\n const newState = cur.rows[0].is_paused ? 0 : 1;\n const newStatus = newState ? \"PAUSED\" : \"PENDING\";\n await sqlite.execute(\n `UPDATE account_monitor_final SET is_paused = ?, status = ? WHERE id = ?`,\n [newState, newStatus, body.id],\n );\n return c.json({ success: true });\n});\n\napp.post(\"/api/delete\", async (c) => {\n const body = await c.req.json();\n await sqlite.execute(`DELETE FROM account_monitor_final WHERE id = ?`, [\n body.id,\n ]);\n return c.json({ success: true });\n});\n\napp.post(\"/api/check-all\", async (c) => {\n const result = await sqlite.execute(\"SELECT * FROM account_monitor_final\");\n const checkPromises = result.rows.map((row) => checkSingleAccount(row));\n const results = await Promise.all(checkPromises);\n const currentErrors = [];\n const updates = [];\n\n const updatePromises = results.map((res) => {\n updates.push(res);\n if (res.status === \"ERROR\") currentErrors.push(res.id);\n return sqlite.execute(\n `UPDATE account_monitor_final SET status = ?, details = ?, last_check = datetime('now') WHERE id = ?`,\n [res.status, res.details, res.id],\n );\n });\n\n await Promise.all(updatePromises);\n return c.json({ success: true, updates, current_errors: currentErrors });\n});\n\n// ====================================================================\n// 7. UI TEMPLATE & ROUTE\n// ====================================================================\napp.get(\"/\", (c) => {\n return c.html(`\n \n \n \n \n \n Sentinel Account Monitor\n \n \n \n \n \n \n \n \n \n

\n Sentinel Account Monitor\n

\n \n \n \n

\n\n \n\n \n\n \n \n \n `);\n});\n\nexport default function (req: Request): Response | Promise {\n return app.fetch(req);\n}","deleted","label",[123],"8f61fe2e-3960-11f1-b14d-42b51c65c3df","cron.ts","019c79bf-d854-7363-aec8-3d54c2b9065a",5,["D",1776322231013],3,"interval","import sqlite from \"https://esm.town/v/std/db/main.ts\";\n\n// --- CẤU HÌNH ---\nconst VAL_MAIN_API_URL = `${Deno.env.get(\"VAL_MAIN_API_URL\")}/api/check-all`;\nconst NTFY_TOPIC = Deno.env.get(\"NTFY_TOPIC\");\n\nexport default async function (interval: Interval) {\n console.log(\"🕒 Starting Cron Check...\");\n\n // LẤY MẬT KHẨU TỪ ENVIRONMENT ĐỂ MỞ CỬA API\n const ADMIN_PASS = Deno.env.get(\"ADMIN_PASS\");\n\n // 1. Gọi API Check-All từ Val Chính CÓ KÈM AUTHORIZATION HEADER\n const response = await fetch(VAL_MAIN_API_URL, {\n method: \"POST\",\n headers: {\n \"Authorization\": `Bearer ${ADMIN_PASS}`, // <--- Điểm bảo mật\n },\n });\n\n if (!response.ok) {\n if (response.status === 401) {\n console.error(\n \"❌ Lỗi 401: Cron Job không được cấp quyền (Sai ADMIN_PASS). Hãy kiểm tra lại biến môi trường.\",\n );\n } else {\n console.error(\"❌ Failed to trigger check:\", response.statusText);\n }\n return;\n }\n\n const data = await response.json();\n const currentErrors = data.current_errors || [];\n\n // 2. Lấy danh sách lỗi cũ từ DB\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS cron_error_tracking_account (\n id INTEGER PRIMARY KEY,\n error_ids TEXT\n )\n `);\n\n const prevRes = await sqlite.execute(\n \"SELECT error_ids FROM cron_error_tracking_account WHERE id = 1\",\n );\n\n let previousErrors = [];\n if (prevRes.rows.length > 0) {\n previousErrors = JSON.parse(prevRes.rows[0].error_ids || \"[]\");\n } else {\n // Lần đầu chạy -> Insert\n await sqlite.execute(\n \"INSERT INTO cron_error_tracking_account (id, error_ids) VALUES (1, '[]')\",\n );\n }\n\n // 3. So sánh: Tìm các lỗi MỚI xuất hiện\n const newErrors = currentErrors.filter((id) => !previousErrors.includes(id));\n\n // 4. Nếu có lỗi mới -> Gửi thông báo ntfy\n if (newErrors.length > 0) {\n console.log(\n `⚠️ Found ${newErrors.length} new errors. Sending notification...`,\n );\n\n await fetch(`https://ntfy.sh/${NTFY_TOPIC}`, {\n method: \"POST\",\n body:\n `Cảnh báo Sentinel: ${newErrors.length} tài khoản có trạng thái ERROR. Kiểm tra ngay!`,\n headers: {\n \"Title\": \"Account Sentinel Alert\", // Đã chuẩn hóa ASCII để tránh lỗi ByteString\n \"Priority\": \"high\",\n \"Tags\": \"warning\",\n },\n });\n } else {\n console.log(\"✅ No new errors found.\");\n }\n\n // 5. Cập nhật lại danh sách lỗi hiện tại vào DB\n await sqlite.execute(\n \"UPDATE cron_error_tracking_account SET error_ids = ? WHERE id = 1\",\n [JSON.stringify(currentErrors)],\n );\n}",[140],"pulls","branches","envVars",{"_154":156,"_157":22},"connections",{"_154":22,"_155":22},"count","unfilledCount",16,"emptyCount",{"_27":139,"_13":140,"_124":141,"_126":-5,"_127":86,"_128":142,"_129":115,"_46":164,"_83":144,"_132":145,"_134":146,"_136":20,"_137":-5,"_161":165,"_96":166},{"_27":122,"_13":123,"_124":125,"_126":-5,"_127":86,"_128":84,"_129":115,"_46":160,"_83":131,"_132":133,"_134":135,"_136":20,"_137":-5,"_161":162,"_96":163},["D",1788844914682],"children",[],[123],["D",1776322231013],[],[140],["D",1771569141763],["D",1789443053029],{"_11":12,"_56":52},{"_11":12,"_49":50,"_51":52,"_35":36,"_53":54,"_55":20},{"_83":84,"_13":85,"_27":86,"_87":57,"_88":-5,"_89":-5,"_90":-5,"_91":-5,"_92":-5,"_93":14,"_94":12},"ctx",{"_40":-5,"_117":205,"_206":207,"_208":209,"_210":20,"_211":20,"_212":20,"_213":115,"_214":-5,"_215":-7,"_216":-7,"_217":22,"_218":20,"_219":20,"_220":-5,"_221":20,"_222":20,"_223":20,"_224":-5},"ENV",{"_176":177,"_178":179,"_180":85,"_181":182,"_183":184,"_185":186,"_187":188,"_189":190,"_191":192,"_193":194,"_195":196,"_197":198,"_199":200,"_201":202,"_203":204},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Account Sentinel

\n Sentinel Account Monitor\n

Thêm tài khoản

Account Name

Remixes1

Remixes
1