ikuuu 登录补全

密码和图形验证已经通过，站点还要邮箱验证码。填验证码，或直接粘贴浏览器里的 Cookie。

\n \n 账号邮箱\n \n \n 邮箱验证码（10 分钟内有效）\n \n \n \n \n

\n 或粘贴 Cookie\n \n \n

Chrome：F12 → Application → Cookies → ikuuu 域名，复制 uid 和 key 两行，格式 uid=...; key=...

\n \n

\n \n\n\n",[],[206],"51b288bd-81f0-47ca-91b9-59336048c1bc","otp-ui.js","bc86f70c-ac64-11f1-84e3-1607ee4eb77e",50,["D",1788968408426],"const params = new URLSearchParams(location.search);\nconst t = params.get(\"t\") || \"\";\ndocument.getElementById(\"t\").value = t;\nconst out = document.getElementById(\"out\");\n\nfunction show(ok, msg) {\n out.className = ok ? \"ok\" : \"err\";\n out.textContent = msg;\n}\n\nasync function post(body) {\n out.className = \"hint\";\n out.textContent = \"提交中...\";\n const res = await fetch(location.pathname + location.search, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ t, ...body }),\n });\n const data = await res.json().catch(() => ({ ok: false, error: `HTTP ${res.status}` }));\n show(Boolean(data.ok), data.ok ? (data.msg || \"完成\") : (data.error || \"失败\"));\n}\n\ndocument.getElementById(\"submit-code\").onclick = () =>\n post({ action: \"code\", email: document.getElementById(\"email\").value.trim(), code: document.getElementById(\"code\").value.trim() });\n\ndocument.getElementById(\"resend\").onclick = () =>\n post({ action: \"resend\", email: document.getElementById(\"email\").value.trim() });\n\ndocument.getElementById(\"submit-cookie\").onclick = () =>\n post({ action: \"cookie\", email: document.getElementById(\"email\").value.trim(), cookie: document.getElementById(\"cookie\").value.trim() });\n",[],[214],["D",1788968436745],[],[18],"1dfe1970-a0ed-4e4a-b467-5a7bb85bab42","lib.ts","b54823ee-ac64-11f1-ad20-1607ee4eb77e",63,["D",1788969877513],"// 共享：登录 / 签到 / 状态。ikuuu 在密码+GeeTest 之后还会要邮箱验证码。\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { httpEndpoint } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst ENV: Record =\n typeof Deno.env.toObject === \"function\" ? Deno.env.toObject() : {};\nexport const env = (k: string) => {\n if (Object.keys(ENV).length) return ENV[k] ?? \"\";\n return Deno.env.get(k) || \"\";\n};\nexport const num = (k: string, d: number) => {\n const v = parseFloat(env(k));\n return Number.isFinite(v) ? v : d;\n};\nexport const bool = (k: string, d = false) => {\n const v = env(k);\n return v === \"\" ? d : /^(1|true|yes|on)$/i.test(v);\n};\n\nexport const BASE = (env(\"IKUUU_BASE_URL\") || \"https://ikuuu.org\").replace(/\\/$/, \"\");\nconst CAPTCHA_ID = env(\"IKUUU_CAPTCHA_ID\") || \"cc96d05ba8b60f9112f76e18526fcb73\";\nconst SOLVER_ENDPOINT = (env(\"SOLVER_ENDPOINT\") || \"https://api.2captcha.com\").replace(/\\/$/, \"\");\nconst SOLVER_KEY = env(\"TWOCAPTCHA_KEY\");\nconst TG_TOKEN = env(\"TELEGRAM_TOKEN\");\nconst TG_CHAT = env(\"TELEGRAM_CHAT_ID\");\n\nexport const BUDGET_MS = num(\"BUDGET_SEC\", 52) * 1000;\nconst RESERVE_MS = 4000;\nconst HTTP_TIMEOUT = num(\"HTTP_TIMEOUT_SEC\", 12) * 1000;\nexport const CONCURRENCY = Math.max(1, num(\"CONCURRENCY\", 4));\nconst JITTER_MAX_SEC = num(\"JITTER_MAX_SEC\", 5);\nconst LOGIN_RETRIES = Math.max(0, num(\"LOGIN_RETRIES\", 1));\nexport const CRED_PAUSE_AFTER = Math.max(2, num(\"CRED_PAUSE_AFTER\", 3));\nexport const FAIL_STREAK_ALERT = Math.max(1, num(\"FAIL_STREAK_ALERT\", 2));\nexport const BALANCE_ALERT = num(\"BALANCE_ALERT\", 1);\nconst TZ_OFFSET = num(\"TZ_OFFSET\", 8);\nexport const ALWAYS_REPORT = bool(\"ALWAYS_REPORT\");\nconst FETCH_INFO = bool(\"FETCH_INFO\", ALWAYS_REPORT);\nexport const FORCE = bool(\"FORCE\");\nexport const RESET_STATE = bool(\"RESET_STATE\");\nconst UA =\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0\";\n\nexport class CookieExpired extends Error {}\nexport class CaptchaRejected extends Error {}\nexport class BadCredential extends Error {}\nexport class CredentialPaused extends BadCredential {}\nexport class LoginFlowChanged extends BadCredential {}\nexport class EmailVerifyRequired extends Error {}\nexport class OutOfBudget extends Error {}\n\nexport let START = Date.now();\nexport function resetBudget() {\n START = Date.now();\n}\nconst left = () => BUDGET_MS - (Date.now() - START);\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\nexport const secs = (t: number) => ((Date.now() - t) / 1000).toFixed(1) + \"s\";\nexport const today = () =>\n new Date(Date.now() + TZ_OFFSET * 3600_000).toISOString().slice(0, 10);\nfunction needBudget(ms: number) {\n if (left() - RESERVE_MS < ms) {\n throw new OutOfBudget(`时间预算不足（剩余 ${(left() / 1000).toFixed(1)}s）`);\n }\n}\n\nexport let solvesUsed = 0;\nexport let maxSolves = Infinity;\nexport const pendingReports: Promise[] = [];\nexport function setMaxSolves(n: number) {\n maxSolves = n;\n}\n\nasync function fx(url: string, opts: RequestInit = {}, ms = HTTP_TIMEOUT): Promise {\n needBudget(1000);\n const cap = Math.max(1000, Math.min(ms, left() - RESERVE_MS));\n const ctrl = new AbortController();\n const t = setTimeout(() => ctrl.abort(), cap);\n try {\n return await fetch(url, { ...opts, signal: ctrl.signal });\n } catch (e) {\n if (ctrl.signal.aborted) {\n throw new Error(`请求超时 ${(cap / 1000).toFixed(0)}s: ${new URL(url).pathname}`);\n }\n throw e;\n } finally {\n clearTimeout(t);\n }\n}\n\nasync function retry(fn: () => Promise, tries = 2, gap = 1200): Promise {\n let last: unknown;\n for (let i = 0; i < tries; i++) {\n try {\n return await fn();\n } catch (e) {\n if (\n e instanceof CookieExpired || e instanceof BadCredential ||\n e instanceof EmailVerifyRequired || e instanceof OutOfBudget\n ) throw e;\n last = e;\n if (i < tries - 1) {\n needBudget(gap + 2000);\n await sleep(gap);\n }\n }\n }\n throw last;\n}\n\nasync function solverPost(path: string, body: unknown): Promise {\n const res = await fx(`${SOLVER_ENDPOINT}${path}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ clientKey: SOLVER_KEY, ...(body as object) }),\n }, 15000);\n const text = await res.text();\n try {\n return JSON.parse(text);\n } catch {\n throw new Error(`打码接口非 JSON 响应(HTTP ${res.status}): ${text.slice(0, 80)}`);\n }\n}\n\nexport function accounts() {\n return env(\"IKUUU_ACCOUNTS\")\n .split(/\\|\\||\\n/).map((l) => l.trim()).filter((l) => l && !l.startsWith(\"#\"))\n .map((l) => {\n const i = l.indexOf(\":\");\n return { email: l.slice(0, i).trim(), pwd: l.slice(i + 1).trim() };\n })\n .filter((a) => a.email && a.pwd);\n}\n\nexport type State = {\n cookie: string;\n streak: number;\n credFail: number;\n lastSigned: string;\n lastStatus: string;\n lastError: string;\n};\nexport const BLANK: State = {\n cookie: \"\",\n streak: 0,\n credFail: 0,\n lastSigned: \"\",\n lastStatus: \"\",\n lastError: \"\",\n};\nconst cell = (row: any, i: number, key: string) => row?.[key] ?? row?.[i];\n\nexport async function loadState(): Promise> {\n const ddl = [\n `CREATE TABLE IF NOT EXISTS ikuuu_cookies (email TEXT PRIMARY KEY, cookie TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_state (email TEXT PRIMARY KEY, fail_streak INTEGER DEFAULT 0, last_status TEXT, last_signed TEXT, cred_fail INTEGER DEFAULT 0, last_error TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_pending (email TEXT PRIMARY KEY, cookie TEXT, phase TEXT, expires_at INTEGER, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ];\n try {\n await sqlite.batch(ddl);\n } catch {\n for (const s of ddl) await sqlite.execute(s);\n }\n for (const col of [`last_signed TEXT`, `cred_fail INTEGER DEFAULT 0`, `last_error TEXT`]) {\n try {\n await sqlite.execute(`ALTER TABLE ikuuu_state ADD COLUMN ${col}`);\n } catch { /* 已存在 */ }\n }\n\n const map = new Map();\n const touch = (email: string) => {\n if (!map.has(email)) map.set(email, { ...BLANK });\n return map.get(email)!;\n };\n const [ck, st] = await Promise.all([\n sqlite.execute(`SELECT email, cookie FROM ikuuu_cookies`),\n sqlite.execute(`SELECT email, fail_streak, last_status, last_signed, cred_fail, last_error FROM ikuuu_state`),\n ]);\n for (const r of ck.rows as any[]) touch(String(cell(r, 0, \"email\"))).cookie = String(cell(r, 1, \"cookie\") ?? \"\");\n for (const r of st.rows as any[]) {\n const s = touch(String(cell(r, 0, \"email\")));\n s.streak = Number(cell(r, 1, \"fail_streak\") ?? 0);\n s.lastStatus = String(cell(r, 2, \"last_status\") ?? \"\");\n s.lastSigned = String(cell(r, 3, \"last_signed\") ?? \"\");\n s.credFail = Number(cell(r, 4, \"cred_fail\") ?? 0);\n s.lastError = String(cell(r, 5, \"last_error\") ?? \"\");\n }\n return map;\n}\n\nexport async function saveAll(stmts: { sql: string; args: unknown[] }[]) {\n if (!stmts.length) return;\n try {\n await sqlite.batch(stmts);\n } catch {\n for (const s of stmts) await sqlite.execute(s).catch(() => {});\n }\n}\n\nexport async function ensureOtpToken(): Promise {\n const fromEnv = env(\"OTP_TOKEN\");\n if (fromEnv) return fromEnv;\n await loadState();\n const r = await sqlite.execute({ sql: `SELECT v FROM ikuuu_meta WHERE k = 'otp_token'`, args: [] });\n const existing = r.rows.length ? String(cell(r.rows[0], 0, \"v\") ?? \"\") : \"\";\n if (existing) return existing;\n const token = crypto.randomUUID().replace(/-/g, \"\");\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_meta (k, v) VALUES ('otp_token', ?)`,\n args: [token],\n });\n return token;\n}\n\nexport async function otpPageUrl(): Promise {\n const token = await ensureOtpToken();\n const base = await httpEndpoint(\"./otp.ts\");\n return `${base}?t=${token}`;\n}\n\nexport async function assertOtpToken(got: string) {\n const required = env(\"OTP_TOKEN\");\n // 未配置 OTP_TOKEN 时，提交页 URL 本身已足够隐蔽，不再额外拦一层口令\n if (!required) return;\n if (!got || got !== required) throw new Error(\"提交页口令无效：请确认网址里的 t= 与环境变量 OTP_TOKEN 一致\");\n}\n\nexport function parseCookieInput(raw: string): string {\n const text = String(raw ?? \"\").trim();\n if (!text) return \"\";\n const map: Record = {};\n const add = (k: string, v: string) => {\n const key = k.trim();\n const val = v.trim().replace(/^\"|\"$/g, \"\");\n if (key && val && !/[\\s()]/.test(key)) map[key] = val;\n };\n for (const line of text.split(/[\\r\\n]+/)) {\n const row = line.trim();\n if (!row) continue;\n const named = row.match(/^(uid|key|email|PHPSESSID|expire_in)\\s*[:=\\t]\\s*(\\S+)/i);\n if (named) {\n add(named[1], named[2]);\n continue;\n }\n const cells = row.split(/\\t+/);\n if (cells.length >= 2 && /^(uid|key|email|PHPSESSID|expire_in)$/i.test(cells[0].trim())) {\n add(cells[0], cells[1]);\n continue;\n }\n for (const part of row.split(\";\")) {\n const eq = part.indexOf(\"=\");\n if (eq > 0) add(part.slice(0, eq), part.slice(eq + 1).split(/[\\t\\s]/)[0]);\n }\n }\n return Object.entries(map).map(([k, v]) => `${k}=${v}`).join(\"; \");\n}\n\nasync function savePending(email: string, cookie: string) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_pending (email, cookie, phase, expires_at, updated_at) VALUES (?, ?, 'email_code', ?, CURRENT_TIMESTAMP)`,\n args: [email, cookie, Date.now() + 10 * 60 * 1000],\n });\n}\n\nasync function loadPending(email: string): Promise<{ cookie: string; expiresAt: number } | null> {\n const r = await sqlite.execute({\n sql: `SELECT cookie, expires_at FROM ikuuu_pending WHERE email = ?`,\n args: [email],\n });\n if (!r.rows.length) return null;\n const row = r.rows[0] as any;\n return { cookie: String(cell(row, 0, \"cookie\") ?? \"\"), expiresAt: Number(cell(row, 1, \"expires_at\") ?? 0) };\n}\n\nasync function clearPending(email: string) {\n await sqlite.execute({ sql: `DELETE FROM ikuuu_pending WHERE email = ?`, args: [email] });\n}\n\nasync function solveCaptcha(email: string): Promise<{ taskId: string; solution: any }> {\n if (solvesUsed >= maxSolves) throw new Error(`打码已达本次上限 ${maxSolves} 次，跳过登录以控制成本`);\n needBudget(15000);\n solvesUsed++;\n const t0 = Date.now();\n const create = await solverPost(\"/createTask\", {\n task: {\n type: \"GeeTestTaskProxyless\",\n websiteURL: `${BASE}/auth/login`,\n version: 4,\n initParameters: { captcha_id: CAPTCHA_ID },\n },\n });\n if (create.errorId) throw new Error(`createTask: ${create.errorCode} ${create.errorDescription || \"\"}`);\n await sleep(6000);\n for (;;) {\n const res = await solverPost(\"/getTaskResult\", { taskId: create.taskId });\n if (res.status === \"ready\") {\n console.log(`[${email}] 打码完成 ${secs(t0)}`);\n return { taskId: create.taskId, solution: res.solution };\n }\n if (res.errorId) throw new CaptchaRejected(`求解失败: ${res.errorCode} ${res.errorDescription || \"\"}`);\n needBudget(3000);\n await sleep(2000);\n }\n}\nfunction reportBad(taskId: string) {\n pendingReports.push(solverPost(\"/reportIncorrect\", { taskId }).catch(() => {}));\n}\nexport async function getBalance(): Promise {\n if (!SOLVER_KEY) return null;\n try {\n const r = await solverPost(\"/getBalance\", {});\n return typeof r.balance === \"number\" ? r.balance : null;\n } catch {\n return null;\n }\n}\n\nconst JSON_HEADERS = {\n \"User-Agent\": UA,\n Accept: \"application/json, text/javascript, */*; q=0.01\",\n \"X-Requested-With\": \"XMLHttpRequest\",\n};\n\nfunction cookieMap(header: string): Record {\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const p = part.trim();\n const eq = p.indexOf(\"=\");\n if (eq > 0) out[p.slice(0, eq)] = p.slice(eq + 1);\n }\n return out;\n}\nfunction setCookiePairs(res: Response): string[] {\n return (res.headers.getSetCookie?.() ?? [res.headers.get(\"set-cookie\") ?? \"\"]).filter(Boolean);\n}\nfunction mergeCookie(existing: string, setCookies: string[]): string {\n const map = cookieMap(existing);\n for (const sc of setCookies) {\n const first = sc.split(\";\")[0];\n const eq = first.indexOf(\"=\");\n if (eq > 0) map[first.slice(0, eq).trim()] = first.slice(eq + 1).trim();\n }\n return Object.entries(map).map(([k, v]) => `${k}=${v}`).join(\"; \");\n}\nfunction plainMsg(msg: string): string {\n return msg.replace(/<[^>]+>/g, \" \").replace(/\\s+/g, \" \").trim();\n}\nfunction sessionOk(cookie: string) {\n const keys = cookieMap(cookie);\n return Boolean(keys.uid || keys.key || keys.PHPSESSID);\n}\nfunction loginOk(lj: { ret?: number; result?: string; phase?: string }) {\n return lj.ret === 1 ||\n lj.result === \"ok\" || lj.result === \"success\" ||\n lj.result === \"logged_in\" || lj.result === \"authenticated\" ||\n lj.phase === \"authenticated\";\n}\n\nasync function postLogin(form: URLSearchParams, cookie = \"\"): Promise<{\n res: Response;\n cookie: string;\n lj: { ret?: number; msg?: string; result?: string; phase?: string };\n text: string;\n}> {\n const res = await fx(`${BASE}/auth/login`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Origin: BASE,\n Referer: `${BASE}/auth/login`,\n \"Content-Type\": \"application/x-www-form-urlencoded; charset=UTF-8\",\n ...(cookie ? { Cookie: cookie } : {}),\n },\n body: form.toString(),\n redirect: \"manual\",\n });\n const next = mergeCookie(cookie, setCookiePairs(res));\n const text = await res.text();\n let lj: { ret?: number; msg?: string; result?: string; phase?: string };\n try {\n lj = JSON.parse(text);\n } catch {\n throw new Error(`登录响应非 JSON(HTTP ${res.status}): ${text.slice(0, 100)}`);\n }\n return { res, cookie: next, lj, text };\n}\n\nexport async function login(acc: { email: string; pwd: string }): Promise {\n const pageLoadedAt = String(Date.now());\n const { taskId, solution: c } = await solveCaptcha(acc.email);\n const host = new URL(BASE).hostname;\n const form = new URLSearchParams({\n host,\n phase: \"password\",\n email: acc.email,\n passwd: acc.pwd,\n remember_me: \"on\",\n pageLoadedAt,\n \"captcha_result[lot_number]\": String(c.lot_number),\n \"captcha_result[captcha_output]\": String(c.captcha_output),\n \"captcha_result[pass_token]\": String(c.pass_token),\n \"captcha_result[gen_time]\": String(c.gen_time),\n });\n const { res, cookie, lj, text } = await postLogin(form);\n if (loginOk(lj)) {\n if (!sessionOk(cookie)) throw new Error(\"登录成功但缺少会话 Cookie（uid/key/PHPSESSID）\");\n console.log(`[${acc.email}] 登录成功 Cookie键: ${Object.keys(cookieMap(cookie)).join(\",\")}`);\n return cookie;\n }\n const msg = plainMsg(String(lj.msg ?? \"\"));\n const result = String(lj.result ?? \"\");\n console.error(`[${acc.email}] 登录被拒(HTTP ${res.status}) result=${result || \"-\"} phase=${lj.phase ?? \"-\"} 原文: ${msg || text.slice(0, 200)}`);\n\n // 必须先于「验证」泛匹配：否则「邮箱验证」会被当成 GeeTest 失败并白烧打码\n if (\n result === \"verification_required\" || lj.phase === \"email_code\" ||\n /邮箱验证|email.?code|verification/i.test(`${result} ${lj.phase ?? \"\"} ${msg}`)\n ) {\n await savePending(acc.email, cookie);\n throw new EmailVerifyRequired(`登录需要邮箱验证码：${msg || result}`);\n }\n if (result === \"invalid_phase\" || /登录流程无效/.test(msg)) {\n throw new LoginFlowChanged(`登录流程无效(invalid_phase)：${msg}`);\n }\n if (\n result === \"user_not_found\" || result === \"wrong_password\" ||\n /邮箱不存在|密码错误|密码不正确|邮箱或密码|账户不存在|帐户不存在|用户不存在|尚未注册|未注册|已封禁|已禁用|账号被封/.test(msg)\n ) {\n throw new BadCredential(`凭据/账号异常(${result || \"msg\"}): ${msg}`);\n }\n if (/totp|2fa/i.test(result) || /二步验证/.test(msg)) {\n throw new LoginFlowChanged(`登录需要额外验证(${result}): ${msg}`);\n }\n if (/captcha|geetest|刷新页面/i.test(msg) || /captcha/i.test(result)) {\n reportBad(taskId);\n throw new CaptchaRejected(`验证码被拒: ${msg || result}`);\n }\n throw new Error(`登录失败(${result || `HTTP ${res.status}`}): ${msg}`);\n}\n\nexport async function loginWithRetry(acc: { email: string; pwd: string }): Promise {\n for (let i = 0;; i++) {\n try {\n return await login(acc);\n } catch (e) {\n const canRetry = e instanceof CaptchaRejected && i < LOGIN_RETRIES &&\n solvesUsed < maxSolves && left() - RESERVE_MS > 20000;\n if (!canRetry) throw e;\n console.log(`[${acc.email}] 验证码被拒，重试登录 ${i + 1}/${LOGIN_RETRIES}`);\n }\n }\n}\n\nexport async function completeEmailCode(email: string, code: string): Promise {\n const pending = await loadPending(email);\n if (!pending) throw new Error(`${email} 没有待完成的邮箱验证（请先让定时任务重新登录，或直接粘贴 Cookie）`);\n if (Date.now() > pending.expiresAt) throw new Error(`${email} 邮箱验证码已过期（有效约 10 分钟），请在提交页点重新发送`);\n const host = new URL(BASE).hostname;\n const fields = [\"code\", \"email_code\", \"verify_code\", \"otp\"];\n let last = \"\";\n for (const field of fields) {\n const form = new URLSearchParams({\n host,\n phase: \"email_code\",\n email,\n remember_me: \"on\",\n [field]: code,\n });\n const { res, cookie, lj, text } = await postLogin(form, pending.cookie);\n if (loginOk(lj)) {\n const next = sessionOk(cookie) ? cookie : pending.cookie;\n if (!sessionOk(next)) throw new Error(\"邮箱验证通过但缺少会话 Cookie\");\n await clearPending(email);\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_cookies (email, cookie, updated_at) VALUES (?, ?, CURRENT_TIMESTAMP)`,\n args: [email, next],\n });\n console.log(`[${email}] 邮箱验证通过 Cookie键: ${Object.keys(cookieMap(next)).join(\",\")}`);\n return next;\n }\n last = plainMsg(String(lj.msg ?? text.slice(0, 80)));\n console.error(`[${email}] email_code(${field}) HTTP ${res.status} result=${lj.result ?? \"-\"} ${last}`);\n if (/错误|无效|不正确|过期/.test(last) && !/缺少|必填|字段/.test(last)) break;\n }\n throw new Error(`邮箱验证失败: ${last || \"未知错误\"}`);\n}\n\nexport async function saveCookieAndCheckin(email: string, cookie: string) {\n const keys = Object.keys(cookieMap(cookie));\n console.log(`[${email}] 提交 Cookie 键: ${keys.join(\",\") || \"(空)\"} 长度 ${cookie.length}`);\n if (!keys.includes(\"uid\") || !keys.includes(\"key\")) {\n throw new Error(`Cookie 不完整，目前只有 ${keys.join(\",\") || \"无\"}。请同时复制 uid 和 key`);\n }\n const r = await retry(() => doCheckin(cookie));\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_cookies (email, cookie, updated_at) VALUES (?, ?, CURRENT_TIMESTAMP)`,\n args: [email, cookie],\n });\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_state (email, fail_streak, last_status, last_signed, cred_fail, last_error, updated_at) VALUES (?, 0, ?, ?, 0, '', CURRENT_TIMESTAMP)`,\n args: [email, r.signed ? \"signed\" : \"already\", today()],\n });\n await clearPending(email);\n return r;\n}\n\nexport async function doCheckin(cookie: string): Promise<{ signed: boolean; msg: string }> {\n const res = await fx(`${BASE}/user/checkin`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Cookie: cookie,\n Referer: `${BASE}/user`,\n \"Content-Type\": \"application/json\",\n },\n redirect: \"manual\",\n });\n const loc = res.headers.get(\"location\") || \"\";\n const text = await res.text();\n const snippet = text.replace(/\\s+/g, \" \").slice(0, 120);\n console.log(`签到 HTTP ${res.status} loc=${loc || \"-\"} body=${snippet}`);\n if (res.status === 403 || /just a moment|cf-mitigated|attention required/i.test(text)) {\n throw new Error(`站点拦截了 Val Town 出口 IP（HTTP ${res.status}），不是 Cookie 填错。请改用提交页的邮箱验证码完成登录`);\n }\n if (res.status >= 500 || res.status === 429) throw new Error(`签到 HTTP ${res.status}`);\n if ([301, 302, 401].includes(res.status) || /auth\\/login|请先登录|未登录|登录后|请登录|sign\\s*in/i.test(`${loc} ${text}`)) {\n throw new CookieExpired(\n `会话未被站点接受（HTTP ${res.status}）。浏览器 Cookie 往往绑定登录 IP，换到 Val Town 机房会失效；请在提交页点「重新发送验证码」后填写邮件验证码`,\n );\n }\n let data: { ret?: number; msg?: string };\n try {\n data = JSON.parse(text);\n } catch {\n throw new Error(`签到响应异常(HTTP ${res.status}): ${snippet}`);\n }\n const msg = String(data.msg ?? \"\");\n if (/请先登录|未登录|登录后|请登录/i.test(msg)) {\n throw new CookieExpired(`站点返回未登录：${msg}。请改用邮箱验证码在 Val Town 侧完成登录`);\n }\n return { signed: data.ret === 1, msg };\n}\n\nasync function userInfo(cookie: string): Promise {\n try {\n const res = await fx(`${BASE}/user`, {\n headers: { ...JSON_HEADERS, Cookie: cookie },\n redirect: \"manual\",\n }, 8000);\n if (res.status !== 200) return \"\";\n const html = await res.text();\n const rem = html.match(/(?:剩余流量|未使用流量|剩余|remain[a-z]*flow)[^0-9]{0,12}([\\d.]+\\s?[KMGT]B)/i);\n const exp = html.match(/(20\\d{2}-\\d{2}-\\d{2})/);\n const parts: string[] = [];\n if (rem) parts.push(`剩余 ${rem[1]}`);\n if (exp) parts.push(`到期 ${exp[1]}`);\n return parts.join(\", \");\n } catch {\n return \"\";\n }\n}\n\nexport type Outcome = { signed: boolean; msg: string; info: string; cookie?: string; cached?: boolean };\n\nexport async function runAccount(acc: { email: string; pwd: string }, st: State): Promise {\n if (!FORCE && st.lastSigned === today()) {\n return { signed: false, msg: \"今日已签到（本地记录）\", info: \"\", cached: true };\n }\n\n const t0 = Date.now();\n if (JITTER_MAX_SEC > 0) {\n await sleep(Math.random() * Math.min(JITTER_MAX_SEC * 1000, Math.max(0, (left() - RESERVE_MS) * 0.15)));\n }\n\n let cookie = st.cookie;\n let fresh: string | undefined;\n let r: { signed: boolean; msg: string } | null = null;\n\n if (cookie) {\n try {\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 缓存 Cookie 签到 ${secs(t0)}`);\n } catch (e) {\n if (!(e instanceof CookieExpired)) throw e;\n console.log(`[${acc.email}] Cookie 失效，转登录`);\n }\n }\n\n if (!r) {\n if (st.lastStatus === \"bad_credential\" && st.credFail >= CRED_PAUSE_AFTER) {\n throw new CredentialPaused(\n `凭据连续错误 ${st.credFail} 次已暂停打码（原始报错：${st.lastError || \"未记录\"}）；确认密码无误后用 RESET_STATE=1 运行一次恢复`,\n );\n }\n // 已确认要邮箱验证：默认不再打码/重发，避免每天烧钱并触发「发信频率过快」\n if (!FORCE && (st.lastStatus === \"email_verify\" || /邮箱验证/.test(st.lastError))) {\n throw new EmailVerifyRequired(st.lastError || \"登录需要邮箱验证码，请打开提交页填写，或粘贴浏览器 Cookie\");\n }\n fresh = await loginWithRetry(acc);\n cookie = fresh;\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 登录+签到 ${secs(t0)}`);\n }\n\n const info = FETCH_INFO ? await userInfo(cookie) : \"\";\n return { ...r, info, cookie: fresh };\n}\n\nexport async function pool(items: T[], limit: number, fn: (t: T, i: number) => Promise) {\n const out: PromiseSettledResult[] = new Array(items.length);\n let next = 0;\n await Promise.all(Array.from({ length: Math.min(limit, items.length) }, async () => {\n for (;;) {\n const i = next++;\n if (i >= items.length) return;\n try {\n out[i] = { status: \"fulfilled\", value: await fn(items[i], i) };\n } catch (reason) {\n out[i] = { status: \"rejected\", reason } as PromiseSettledResult;\n }\n }\n }));\n return out;\n}\n\nexport async function tg(text: string) {\n if (!TG_TOKEN || !TG_CHAT) return;\n try {\n await fetch(`https://api.telegram.org/bot${TG_TOKEN}/sendMessage`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ chat_id: TG_CHAT, text, disable_web_page_preview: true }),\n signal: AbortSignal.timeout(8000),\n });\n } catch { /* 通知失败不影响主流程 */ }\n}\n\nexport function extractEmailCode(text: string): string {\n const labeled = text.match(/(?:验证码|code)[^0-9]{0,12}(\\d{4,8})/i);\n if (labeled) return labeled[1];\n const six = text.match(/(? a.email);\n const email = guessEmailFromText(blob, known);\n if (!code) {\n console.log(\"inbox: 没有解析到验证码\", e.subject);\n return;\n }\n if (!email) {\n console.log(\"inbox: 有验证码但无法匹配账号\", code);\n await tg(`收到验证码 ${code}，但无法判断是哪个账号。请打开提交页手动填写。`);\n return;\n }\n try {\n const cookie = await completeEmailCode(email, code);\n const r = await saveCookieAndCheckin(email, cookie);\n await tg(`${email} 已从转发邮件完成验证：${r.signed ? \"签到成功\" : r.msg}`);\n console.log(`[${email}] inbox 完成 ${r.msg}`);\n } catch (err) {\n console.error(`[${email}] inbox 失败`, (err as Error).message);\n await tg(`${email} 转发邮件里的验证码 ${code} 未能完成登录：${(err as Error).message}`);\n }\n}\n",[],[233],"fb7b9800-9dc5-4150-b6da-fab7be2d717d","README.md","5dad93ac-8ef6-11f1-8b69-1607ee4eb77e",46,["D",1786635444739],7,"# ikuuu 全自动签到（Val Town 版）\n\n部署在 [Val Town](https://www.val.town) 上的 ikuuu\n每日自动签到：**邮箱+密码全自动登录**（GeeTest V4 交由 2Captcha\n求解），支持多账号、Cookie 复用、Telegram 通知。无需服务器，无需手动更新\nCookie。\n\n主脚本：[`main.ts`](./main.ts)\n\n## 为什么需要它\n\nikuuu 从 2026-04 起在登录页启用了 **GeeTest V4 验证码**，传统的\"邮箱+密码直接\nPOST 登录\"会返回：\n\n> 系统无法接受您的验证结果，请刷新页面后重试。\n\n本项目实测过纯算法求解器（GeekedTest 思路）与多家免费打码平台，在当前 GeeTest V4\n的 \"ai\" 类型题目上均已失效，因此改用 **2Captcha** 求解。配合下面的 Cookie\n复用策略，实际打码次数被压到极低，长期成本可忽略。\n\n## 工作原理\n\n```\nVal Town Cron\n └─ 读取 SQLite 中的账号状态（Cookie / 签到日期 / 失败计数）\n ├─ 今天已签到？ → 直接跳过，零请求零成本\n ├─ 有缓存 Cookie？ → 直接 POST /user/checkin\n └─ Cookie 失效？ → 2Captcha 求解 GeeTest V4 → POST /auth/login（phase=password） → 签到\n └─ 汇总结果，异常时推送 Telegram\n```\n\n关键点：**只有 Cookie 失效时才会打码**。ikuuu\n的会话通常能维持很久，所以绝大多数天数是零成本运行。\n\n## 部署步骤\n\n### 1. 创建 Val\n\n在 Val Town 新建一个 **Cron Val**，把 `main.ts` 的内容整体粘贴进去。\n\n建议 cron 设为每天一次，例如 `30 0 * * *`（UTC，对应北京时间 08:30）。\n\n### 2. 配置环境变量\n\n在 Val Town 的 **Settings → Environment Variables** 中添加。\n\n**必填：**\n\n| 变量 | 说明 |\n| ---------------- | ------------------------------------------------ |\n| `IKUUU_ACCOUNTS` | 账号列表，格式 `邮箱:密码`，多账号用 `\\|\\|` 分隔 |\n| `TWOCAPTCHA_KEY` | 2Captcha 的 API Key |\n\n多账号示例（Val Town 环境变量是单行，用 `||` 连接）：\n\n```\nalice@example.com:pwd1||bob@example.com:pwd2\n```\n\n> 按**第一个冒号**分隔邮箱和密码，所以密码含冒号没问题；但密码里不能出现 `||`。\n\n**可选：**\n\n| 变量 | 默认 | 说明 |\n| ------------------- | -------------------- | ----------------------------------------------------- |\n| `IKUUU_BASE_URL` | `https://ikuuu.org` | ikuuu 常换域名，失效时改这里 |\n| `IKUUU_CAPTCHA_ID` | 已内置 | GeeTest 验证码 ID，站点更新导致失效时才需覆盖 |\n| `TELEGRAM_TOKEN` | — | Telegram Bot Token（@BotFather 获取） |\n| `TELEGRAM_CHAT_ID` | — | 接收通知的 Chat ID（@userinfobot 获取） |\n| `ALWAYS_REPORT` | 关 | 设 `1` 则每次都推送回执，否则仅异常时推送 |\n| `FETCH_INFO` | 跟随 `ALWAYS_REPORT` | 设 `1` 则额外抓取剩余流量与到期日（每账号多一次请求） |\n| `BALANCE_ALERT` | `1` | 2Captcha 余额低于此值（美元）时告警 |\n| `FAIL_STREAK_ALERT` | `2` | 连续失败几次才升级为强提醒 |\n| `LOGIN_RETRIES` | `1` | 验证码被拒时的额外登录尝试次数 |\n| `CRED_PAUSE_AFTER` | `3` | 连续几次**凭据错误**后暂停打码（熔断） |\n| `MAX_SOLVES` | 账号数 ×(1+重试数) | 单次运行的打码硬上限 |\n| `CONCURRENCY` | `4` | 多账号并发数 |\n| `BUDGET_SEC` | `52` | 总时间预算，必须小于 Val Town 的运行上限 |\n| `HTTP_TIMEOUT_SEC` | `12` | 单个 HTTP 请求超时 |\n| `JITTER_MAX_SEC` | `5` | 每账号随机延迟上限，用于错峰 |\n| `TZ_OFFSET` | `8` | 判定\"今天\"所用的时区偏移 |\n| `FORCE` | 关 | 设 `1` 忽略\"今日已签\"缓存，强制执行 |\n| `RESET_STATE` | 关 | 设 `1` 清空失败计数与凭据熔断，跑完记得改回 |\n\n### 3. 手动跑一次验证\n\n在 Val Town 点 Run，看日志是否输出 `✅ 签到成功`。首次运行会打码登录并把 Cookie\n写入 SQLite，之后就走缓存了。\n\n## 设计要点\n\n**Cookie 优先，成本最低。** 签到本身不需要验证码，只有登录才需要。脚本把 Cookie\n持久化在 Val Town 的 SQLite 里，只在确认失效时才触发付费打码。\n\n**当天已签则完全跳过。** 成功签到会记录日期（按 `TZ_OFFSET`\n判定），同一天内重复运行不产生任何请求，手动重跑和 cron 重复触发都是安全的。\n\n**失败分类，避免误烧钱。** 5xx / 429 判定为服务端抖动并重试，不会误认成 Cookie\n失效而去登录；只有 301/302/401/403\n或响应内容像登录页才算失效。登录失败会区分\"验证码被拒\"（上报退款并重试）与\"凭据错误\"（不重试，直接告警）。\n\n**全局时间预算。** 每个网络请求前检查剩余时间，并始终预留 4 秒发送通知，避免被\nVal Town 静默掐断而收不到任何告警。\n\n**凭据熔断。**\n连续多次确凿的凭据错误后停止打码，避免密码改了却每天白烧钱。恢复方式：确认密码无误后加\n`RESET_STATE=1` 跑一次。\n\n## 常见问题\n\n**登录失败怎么排查？** 日志里会有一行\n`登录被拒(HTTP xxx) result=... 原文: ...`，那是服务端的真实回复。成功登录的标志是\n`result=authenticated`（不是旧版的 `ret=1`）。据此判断是域名变更、验证码配置变化还是账号问题。\n\n**为什么日志里曾出现 invalid_phase？** 2026-08 起登录 POST 必须带 `phase=password`、`host`、`pageLoadedAt` 和 GeeTest 字段；缺 `phase` 会被拒绝。当前 `main.ts` 已按这个格式提交。\n\n**ikuuu 换域名了？** 改 `IKUUU_BASE_URL` 即可。\n\n**成本大概多少？** GeeTest V4 在 2Captcha 约 $0.003/次。由于只在 Cookie\n失效时打码，实际一年下来通常不到 $1。\n\n**为什么不用 2Captcha 的 Browser API（云浏览器）？** 那是托管 Chrome 服务，需要\nPuppeteer/Playwright 通过 CDP 驱动。真实浏览器完成一次登录通常要几十秒，会超出\nVal Town 免费版 60 秒的运行上限——这正是本项目最初放弃 Puppeteer 方案的原因。当前\nHTTP 直连方案更快也更省。\n\n**安全吗？** 账号密码只存在 Val Town 环境变量中，不写入代码；日志不打印 Cookie\n与密码。\n\n## 目录结构\n\n```\n.\n├── main.ts # 主脚本（interval / cron）\n└── README.md\n```\n\n> 早期还有一套基于 GitHub Actions + 纯算法 GeeTest 求解器的实现（`checkin.py` /\n> `geeked/`），实测求解器已被 ikuuu 的风控拦截（成功率 0/10），已从仓库移除。",[],[242],["D",1777214481899],["D",1789501263826],{"_11":12,"_147":69},{"_11":12,"_143":-5,"_68":69,"_30":67,"_144":145,"_146":24},{"_41":134,"_13":16,"_35":38,"_135":94,"_136":-5,"_137":-5,"_138":-5,"_139":-5,"_140":-5,"_141":14,"_142":12},"ctx",{"_52":-5,"_166":288,"_289":290,"_291":292,"_293":24,"_294":24,"_295":24,"_296":107,"_297":-5,"_298":-7,"_299":-7,"_300":111,"_301":24,"_302":24,"_303":-5,"_304":24,"_305":24,"_306":24,"_307":-5},"ENV",{"_259":260,"_261":262,"_263":16,"_264":265,"_266":267,"_268":269,"_270":271,"_272":273,"_274":275,"_276":277,"_278":279,"_280":281,"_282":283,"_284":285,"_286":287},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

History · main.ts