[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_208":209,"_210":211},"routes/_app.x.$handle.$name",{"_98":97,"_31":43,"_106":88,"_26":107,"_13":14,"_108":-5,"_11":109,"_110":111,"_112":113,"_114":115,"_116":117,"_20":-5,"_118":-5,"_119":-5,"_120":24,"_121":122,"_123":24,"_124":-5,"_125":-5,"_126":127},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":69,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":81,"_82":83,"_84":85,"_86":24},"version",50,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","otp-ui.js","latestPath","fileId","bc86f70c-ac64-11f1-84e3-1607ee4eb77e","name","fileType","script","content","const params = new URLSearchParams(location.search);\nconst t = params.get(\"t\") || \"\";\ndocument.getElementById(\"t\").value = t;\nconst out = document.getElementById(\"out\");\n\nfunction show(ok, msg) {\n out.className = ok ? \"ok\" : \"err\";\n out.textContent = msg;\n}\n\nasync function post(body) {\n out.className = \"hint\";\n out.textContent = \"提交中...\";\n const res = await fetch(location.pathname + location.search, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ t, ...body }),\n });\n const data = await res.json().catch(() => ({ ok: false, error: `HTTP ${res.status}` }));\n show(Boolean(data.ok), data.ok ? (data.msg || \"完成\") : (data.error || \"失败\"));\n}\n\ndocument.getElementById(\"submit-code\").onclick = () =>\n post({ action: \"code\", email: document.getElementById(\"email\").value.trim(), code: document.getElementById(\"code\").value.trim() });\n\ndocument.getElementById(\"resend\").onclick = () =>\n post({ action: \"resend\", email: document.getElementById(\"email\").value.trim() });\n\ndocument.getElementById(\"submit-cookie\").onclick = () =>\n post({ action: \"cookie\", email: document.getElementById(\"email\").value.trim(), cookie: document.getElementById(\"cookie\").value.trim() });\n","createdAt",["D",1788968408426],"branchVersion","branchId","fe5770dc-417d-11f1-8714-42b51c65c3df","id","fe56a01c-417d-11f1-8714-42b51c65c3df","ikuuu-checkin",["D",1777214481899],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Daily auto check-in for ikuuu.org","imageUrl","96c2793d-57c8-41d2-a49a-d1ee82f9dd24","pinnedFileId","c260aefc-ac64-11f1-acc6-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","93515af8-c7b7-459c-9bf2-3bb3df310a75","tursoName","fe56a01c417d11f1871442b51c65c3df","tursoHostname","fe56a01c417d11f1871442b51c65c3df-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789501263826],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_98":97,"_105":101},"org",{"_98":97,"_99":-5,"_100":101,"_18":53,"_102":103,"_104":24},"branch",{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"isOwned",65,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","yuxiaoy","handle","displayName","avatar","https://img.clerk.com/eyJ0eXBlIjoiZGVmYXVsdCIsImlpZCI6Imluc18yTm10cGhQUklwU0tqZHNiOHNnNGd2ZjJURFUiLCJyaWQiOiJ1c2VyXzJObXd1QWdCZmVtaUh0bGU5TkswOG1sM0xheiIsImluaXRpYWxzIjoiRlkifQ","tier","free","canRestrictVals","profileImageUrl","branchName","","adoptOrgId",{"_41":42,"_31":43,"_36":203,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":55,"_56":57,"_58":-5,"_59":-5,"_60":61,"_62":63,"_64":65,"_66":67,"_68":204,"_70":-5,"_71":72,"_73":72,"_74":75,"_76":75,"_77":75,"_78":72,"_79":72,"_80":205,"_82":206,"_84":207,"_86":24},"tree",[182,183,184,185,186],"files",[182,183,184,185,186],"counts",{"_170":61,"_171":172,"_173":61,"_174":175,"_176":177},"contents",[128,129,130,131,132],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_41":162,"_31":163,"_29":164,"_136":-5,"_39":40,"_38":165,"_138":57,"_36":166,"_13":167,"_32":20,"_34":168,"_23":24,"_141":-5,"_26":169},{"_41":155,"_31":156,"_29":157,"_136":-5,"_39":40,"_38":158,"_138":24,"_36":159,"_13":61,"_32":33,"_34":160,"_23":24,"_141":-5,"_26":161},{"_41":146,"_31":147,"_29":148,"_136":-5,"_39":40,"_38":149,"_138":24,"_36":150,"_13":151,"_32":152,"_34":153,"_23":24,"_141":-5,"_26":154},{"_41":143,"_31":27,"_29":30,"_136":-5,"_39":40,"_38":14,"_138":57,"_36":144,"_13":61,"_32":33,"_34":35,"_23":24,"_141":-5,"_26":145},{"_41":133,"_31":134,"_29":135,"_136":-5,"_39":40,"_38":137,"_138":57,"_36":139,"_13":61,"_32":20,"_34":140,"_23":24,"_141":-5,"_26":142},"76701f19-cb47-4102-aa94-1d9fa0298ad5","otp.html","bb4afa1e-ac64-11f1-aacd-1607ee4eb77e","parentId",49,"latest",["D",1788968406406],"\n\n\n \n \n ikuuu 登录补全\n \n \n\n\n

ikuuu 登录补全

密码和图形验证已经通过，站点还要邮箱验证码。填验证码，或直接粘贴浏览器里的 Cookie。

\n \n 账号邮箱\n \n \n 邮箱验证码（10 分钟内有效）\n \n \n \n \n

\n 或粘贴 Cookie\n \n \n

Chrome：F12 → Application → Cookies → ikuuu 域名，复制 uid 和 key 两行，格式 uid=...; key=...

\n \n

\n \n\n\n","label",[134],"51b288bd-81f0-47ca-91b9-59336048c1bc",["D",1788968408426],[27],"a3a83f46-5a2a-4a8b-9e56-8b00af1f80f9","main.ts","fe5ab508-417d-11f1-8714-42b51c65c3df",47,["D",1786723893094],34,"interval","// Val Town：ikuuu 全自动签到（2Captcha + Cookie优先）\n// 设计目标：单次运行不超时、失败可自愈、打码次数最少\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nconst ENV: Record =\n typeof Deno.env.toObject === \"function\" ? Deno.env.toObject() : {};\nconst env = (k: string) => {\n if (Object.keys(ENV).length) return ENV[k] ?? \"\";\n return Deno.env.get(k) || \"\";\n};\nconst num = (k: string, d: number) => {\n const v = parseFloat(env(k));\n return Number.isFinite(v) ? v : d;\n};\nconst bool = (k: string, d = false) => {\n const v = env(k);\n return v === \"\" ? d : /^(1|true|yes|on)$/i.test(v);\n};\n\nconst BASE = (env(\"IKUUU_BASE_URL\") || \"https://ikuuu.org\").replace(/\\/$/, \"\");\nconst CAPTCHA_ID = env(\"IKUUU_CAPTCHA_ID\") ||\n \"cc96d05ba8b60f9112f76e18526fcb73\";\nconst SOLVER_ENDPOINT = (env(\"SOLVER_ENDPOINT\") || \"https://api.2captcha.com\")\n .replace(/\\/$/, \"\");\nconst SOLVER_KEY = env(\"TWOCAPTCHA_KEY\");\nconst TG_TOKEN = env(\"TELEGRAM_TOKEN\");\nconst TG_CHAT = env(\"TELEGRAM_CHAT_ID\");\n\nconst BUDGET_MS = num(\"BUDGET_SEC\", 52) * 1000; // 总时间预算，须小于 Val Town 运行上限\nconst RESERVE_MS = 4000; // 预留给汇总与 Telegram 推送\nconst HTTP_TIMEOUT = num(\"HTTP_TIMEOUT_SEC\", 12) * 1000;\nconst CONCURRENCY = Math.max(1, num(\"CONCURRENCY\", 4));\nconst JITTER_MAX_SEC = num(\"JITTER_MAX_SEC\", 5);\nconst LOGIN_RETRIES = Math.max(0, num(\"LOGIN_RETRIES\", 1)); // 验证码被拒时的额外登录次数\nconst CRED_PAUSE_AFTER = Math.max(2, num(\"CRED_PAUSE_AFTER\", 3)); // 凭据连错几次后停止打码\nconst FAIL_STREAK_ALERT = Math.max(1, num(\"FAIL_STREAK_ALERT\", 2));\nconst BALANCE_ALERT = num(\"BALANCE_ALERT\", 1);\nconst TZ_OFFSET = num(\"TZ_OFFSET\", 8);\nconst ALWAYS_REPORT = bool(\"ALWAYS_REPORT\");\nconst FETCH_INFO = bool(\"FETCH_INFO\", ALWAYS_REPORT); // 抓流量/到期需额外一次请求\nconst FORCE = bool(\"FORCE\"); // 忽略“今日已签”缓存\nconst RESET_STATE = bool(\"RESET_STATE\"); // 清空失败计数与凭据暂停\nconst UA =\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0\";\n\nclass CookieExpired extends Error {}\nclass CaptchaRejected extends Error {}\nclass BadCredential extends Error {}\nclass CredentialPaused extends BadCredential {} // 熔断生效，本次未真正尝试登录\nclass LoginFlowChanged extends BadCredential {} // 站点登录接口已变更，重试与再次打码都不会成功\nclass OutOfBudget extends Error {}\n\nconst START = Date.now();\nconst left = () => BUDGET_MS - (Date.now() - START);\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\nconst secs = (t: number) => ((Date.now() - t) / 1000).toFixed(1) + \"s\";\nconst today = () =>\n new Date(Date.now() + TZ_OFFSET * 3600_000).toISOString().slice(0, 10);\nfunction needBudget(ms: number) {\n if (left() - RESERVE_MS < ms) {\n throw new OutOfBudget(\n `时间预算不足（剩余 ${(left() / 1000).toFixed(1)}s）`,\n );\n }\n}\n\nlet solvesUsed = 0;\nlet maxSolves = Infinity;\nconst pendingReports: Promise[] = [];\n\nasync function fx(\n url: string,\n opts: RequestInit = {},\n ms = HTTP_TIMEOUT,\n): Promise {\n needBudget(1000);\n const cap = Math.max(1000, Math.min(ms, left() - RESERVE_MS));\n const ctrl = new AbortController();\n const t = setTimeout(() => ctrl.abort(), cap);\n try {\n return await fetch(url, { ...opts, signal: ctrl.signal });\n } catch (e) {\n if (ctrl.signal.aborted) {\n throw new Error(\n `请求超时 ${(cap / 1000).toFixed(0)}s: ${new URL(url).pathname}`,\n );\n }\n throw e;\n } finally {\n clearTimeout(t);\n }\n}\n\n// 仅重试网络/服务端抖动，语义明确的错误直接抛出，避免浪费预算与打码额度\nasync function retry(\n fn: () => Promise,\n tries = 2,\n gap = 1200,\n): Promise {\n let last: unknown;\n for (let i = 0; i < tries; i++) {\n try {\n return await fn();\n } catch (e) {\n if (\n e instanceof CookieExpired || e instanceof BadCredential ||\n e instanceof OutOfBudget\n ) throw e;\n last = e;\n if (i < tries - 1) {\n needBudget(gap + 2000);\n await sleep(gap);\n }\n }\n }\n throw last;\n}\n\nasync function solverPost(path: string, body: unknown): Promise {\n const res = await fx(`${SOLVER_ENDPOINT}${path}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ clientKey: SOLVER_KEY, ...(body as object) }),\n }, 15000);\n const text = await res.text();\n try {\n return JSON.parse(text);\n } catch {\n throw new Error(\n `打码接口非 JSON 响应(HTTP ${res.status}): ${text.slice(0, 80)}`,\n );\n }\n}\n\nfunction accounts() {\n return env(\"IKUUU_ACCOUNTS\")\n .split(/\\|\\||\\n/).map((l) => l.trim()).filter((l) =>\n l && !l.startsWith(\"#\")\n )\n .map((l) => {\n const i = l.indexOf(\":\");\n return { email: l.slice(0, i).trim(), pwd: l.slice(i + 1).trim() };\n })\n .filter((a) => a.email && a.pwd);\n}\n\n// ---- 状态存储：整批读、整批写，避免每账号多次往返 ----\ntype State = {\n cookie: string;\n streak: number;\n credFail: number;\n lastSigned: string;\n lastStatus: string;\n lastError: string;\n};\nconst BLANK: State = {\n cookie: \"\",\n streak: 0,\n credFail: 0,\n lastSigned: \"\",\n lastStatus: \"\",\n lastError: \"\",\n};\n\nasync function loadState(): Promise> {\n const ddl = [\n `CREATE TABLE IF NOT EXISTS ikuuu_cookies (email TEXT PRIMARY KEY, cookie TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_state (email TEXT PRIMARY KEY, fail_streak INTEGER DEFAULT 0, last_status TEXT, last_signed TEXT, cred_fail INTEGER DEFAULT 0, last_error TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n ];\n try {\n await sqlite.batch(ddl);\n } catch {\n for (const s of ddl) await sqlite.execute(s);\n }\n for (\n const col of [\n `last_signed TEXT`,\n `cred_fail INTEGER DEFAULT 0`,\n `last_error TEXT`,\n ]\n ) {\n try {\n await sqlite.execute(`ALTER TABLE ikuuu_state ADD COLUMN ${col}`);\n } catch { /* 老库补列，已存在则忽略 */ }\n }\n\n const map = new Map();\n const touch = (email: string) => {\n if (!map.has(email)) map.set(email, { ...BLANK });\n return map.get(email)!;\n };\n const [ck, st] = await Promise.all([\n sqlite.execute(`SELECT email, cookie FROM ikuuu_cookies`),\n sqlite.execute(\n `SELECT email, fail_streak, last_status, last_signed, cred_fail, last_error FROM ikuuu_state`,\n ),\n ]);\n for (const r of ck.rows) touch(String(r[0])).cookie = String(r[1] ?? \"\");\n for (const r of st.rows) {\n const s = touch(String(r[0]));\n s.streak = Number(r[1] ?? 0);\n s.lastStatus = String(r[2] ?? \"\");\n s.lastSigned = String(r[3] ?? \"\");\n s.credFail = Number(r[4] ?? 0);\n s.lastError = String(r[5] ?? \"\");\n }\n return map;\n}\n\nasync function saveAll(stmts: { sql: string; args: unknown[] }[]) {\n if (!stmts.length) return;\n try {\n await sqlite.batch(stmts);\n } catch {\n for (const s of stmts) await sqlite.execute(s).catch(() => {});\n }\n}\n\n// ---- 2Captcha ----\nasync function solveCaptcha(\n email: string,\n): Promise<{ taskId: string; solution: any }> {\n if (solvesUsed >= maxSolves) {\n throw new Error(`打码已达本次上限 ${maxSolves} 次，跳过登录以控制成本`);\n }\n needBudget(15000); // 时间不够就别开单，省一次钱\n solvesUsed++;\n const t0 = Date.now();\n const create = await solverPost(\"/createTask\", {\n task: {\n type: \"GeeTestTaskProxyless\",\n websiteURL: `${BASE}/auth/login`,\n version: 4,\n initParameters: { captcha_id: CAPTCHA_ID },\n },\n });\n if (create.errorId) {\n throw new Error(\n `createTask: ${create.errorCode} ${create.errorDescription || \"\"}`,\n );\n }\n\n await sleep(6000);\n for (;;) {\n const res = await solverPost(\"/getTaskResult\", { taskId: create.taskId });\n if (res.status === \"ready\") {\n console.log(`[${email}] 打码完成 ${secs(t0)}`);\n return { taskId: create.taskId, solution: res.solution };\n }\n if (res.errorId) {\n throw new CaptchaRejected(\n `求解失败: ${res.errorCode} ${res.errorDescription || \"\"}`,\n );\n }\n needBudget(3000);\n await sleep(2000);\n }\n}\nfunction reportBad(taskId: string) {\n pendingReports.push(\n solverPost(\"/reportIncorrect\", { taskId }).catch(() => {}),\n );\n}\nasync function getBalance(): Promise {\n if (!SOLVER_KEY) return null;\n try {\n const r = await solverPost(\"/getBalance\", {});\n return typeof r.balance === \"number\" ? r.balance : null;\n } catch {\n return null;\n }\n}\n\n// ---- ikuuu ----\nconst JSON_HEADERS = {\n \"User-Agent\": UA,\n Accept: \"application/json, text/javascript, */*; q=0.01\",\n \"X-Requested-With\": \"XMLHttpRequest\",\n};\n\nfunction cookieMap(header: string): Record {\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const p = part.trim();\n const eq = p.indexOf(\"=\");\n if (eq > 0) out[p.slice(0, eq)] = p.slice(eq + 1);\n }\n return out;\n}\nfunction setCookiePairs(res: Response): string[] {\n return (res.headers.getSetCookie?.() ?? [res.headers.get(\"set-cookie\") ?? \"\"])\n .filter(Boolean);\n}\nfunction mergeCookie(existing: string, setCookies: string[]): string {\n const map = cookieMap(existing);\n for (const sc of setCookies) {\n const first = sc.split(\";\")[0];\n const eq = first.indexOf(\"=\");\n if (eq > 0) map[first.slice(0, eq).trim()] = first.slice(eq + 1).trim();\n }\n return Object.entries(map).map(([k, v]) => `${k}=${v}`).join(\"; \");\n}\nfunction plainMsg(msg: string): string {\n return msg.replace(/<[^>]+>/g, \" \").replace(/\\s+/g, \" \").trim();\n}\n\n// 2026-08 起登录改为 phase=password + GeeTest 字段；会话 Cookie 由登录响应下发，\n// GET /auth/login 只返回 Cloudflare 壳（lang=en），预热没有意义。\nasync function login(acc: { email: string; pwd: string }): Promise {\n const pageLoadedAt = String(Date.now());\n const { taskId, solution: c } = await solveCaptcha(acc.email);\n const host = new URL(BASE).hostname;\n const form = new URLSearchParams({\n host,\n phase: \"password\",\n email: acc.email,\n passwd: acc.pwd,\n remember_me: \"on\",\n pageLoadedAt,\n \"captcha_result[lot_number]\": String(c.lot_number),\n \"captcha_result[captcha_output]\": String(c.captcha_output),\n \"captcha_result[pass_token]\": String(c.pass_token),\n \"captcha_result[gen_time]\": String(c.gen_time),\n });\n const res = await fx(`${BASE}/auth/login`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Origin: BASE,\n Referer: `${BASE}/auth/login`,\n \"Content-Type\": \"application/x-www-form-urlencoded; charset=UTF-8\",\n },\n body: form.toString(),\n redirect: \"manual\",\n });\n const cookie = mergeCookie(\"\", setCookiePairs(res));\n const text = await res.text();\n let lj: { ret?: number; msg?: string; result?: string; phase?: string };\n try {\n lj = JSON.parse(text);\n } catch {\n throw new Error(\n `登录响应非 JSON(HTTP ${res.status}): ${text.slice(0, 100)}`,\n );\n }\n\n const ok = lj.ret === 1 ||\n lj.result === \"ok\" || lj.result === \"success\" ||\n lj.result === \"logged_in\" || lj.result === \"authenticated\" ||\n lj.phase === \"authenticated\";\n if (!ok) {\n const msg = plainMsg(String(lj.msg ?? \"\"));\n const result = String(lj.result ?? \"\");\n console.error(\n `[${acc.email}] 登录被拒(HTTP ${res.status}) result=${result || \"-\"} phase=${\n lj.phase ?? \"-\"\n } 原文: ${msg || text.slice(0, 200)}`,\n );\n if (result === \"invalid_phase\" || /登录流程无效/.test(msg)) {\n throw new LoginFlowChanged(`登录流程无效(invalid_phase)：${msg}`);\n }\n if (\n result === \"user_not_found\" || result === \"wrong_password\" ||\n /邮箱不存在|密码错误|密码不正确|邮箱或密码|账户不存在|帐户不存在|用户不存在|尚未注册|未注册|已封禁|已禁用|账号被封/\n .test(msg)\n ) {\n throw new BadCredential(`凭据/账号异常(${result || \"msg\"}): ${msg}`);\n }\n if (\n /totp|2fa|otp|email_code|verify/i.test(result) ||\n /二步验证|邮箱验证码/.test(msg)\n ) {\n throw new LoginFlowChanged(`登录需要额外验证(${result}): ${msg}`);\n }\n if (/验证|captcha|geetest|刷新页面/i.test(msg) || /captcha/i.test(result)) {\n reportBad(taskId);\n throw new CaptchaRejected(`验证码被拒: ${msg || result}`);\n }\n throw new Error(`登录失败(${result || `HTTP ${res.status}`}): ${msg}`);\n }\n const keys = cookieMap(cookie);\n if (!keys.uid && !keys.key && !keys.PHPSESSID) {\n throw new Error(\"登录成功但缺少会话 Cookie（uid/key/PHPSESSID）\");\n }\n console.log(\n `[${acc.email}] 登录成功 Cookie键: ${Object.keys(keys).join(\",\")}`,\n );\n return cookie;\n}\n\nasync function loginWithRetry(\n acc: { email: string; pwd: string },\n): Promise {\n for (let i = 0;; i++) {\n try {\n return await login(acc);\n } catch (e) {\n const canRetry = e instanceof CaptchaRejected && i < LOGIN_RETRIES &&\n solvesUsed < maxSolves && left() - RESERVE_MS > 20000;\n if (!canRetry) throw e;\n console.log(\n `[${acc.email}] 验证码被拒，重试登录 ${i + 1}/${LOGIN_RETRIES}`,\n );\n }\n }\n}\n\nasync function doCheckin(\n cookie: string,\n): Promise<{ signed: boolean; msg: string }> {\n const res = await fx(`${BASE}/user/checkin`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Cookie: cookie,\n Referer: `${BASE}/user`,\n \"Content-Type\": \"application/json\",\n },\n redirect: \"manual\",\n });\n if ([301, 302, 401, 403].includes(res.status)) throw new CookieExpired();\n const text = await res.text();\n // 5xx/429 属服务端抖动，交给 retry 重试，绝不能误判为 Cookie 失效去触发付费登录\n if (res.status >= 500 || res.status === 429) {\n throw new Error(`签到 HTTP ${res.status}`);\n }\n let data: { ret?: number; msg?: string };\n try {\n data = JSON.parse(text);\n } catch {\n if (/auth\\/login|登录|sign\\s*in/i.test(text)) throw new CookieExpired();\n throw new Error(`签到响应异常(HTTP ${res.status}): ${text.slice(0, 80)}`);\n }\n const msg = String(data.msg ?? \"\");\n if (/请先登录|未登录|登录后|请登录/i.test(msg)) throw new CookieExpired();\n // Cookie 有效即已鉴权：ret===1 为当日新签到，其余（“今日已签到”等）同样视为成功\n return { signed: data.ret === 1, msg };\n}\n\n// 最佳努力：抓剩余流量/到期（ikuuu 为 SPA，取不到则安静跳过）\nasync function userInfo(cookie: string): Promise {\n try {\n const res = await fx(`${BASE}/user`, {\n headers: { ...JSON_HEADERS, Cookie: cookie },\n redirect: \"manual\",\n }, 8000);\n if (res.status !== 200) return \"\";\n const html = await res.text();\n const rem = html.match(\n /(?:剩余流量|未使用流量|剩余|remain[a-z]*flow)[^0-9]{0,12}([\\d.]+\\s?[KMGT]B)/i,\n );\n const exp = html.match(/(20\\d{2}-\\d{2}-\\d{2})/);\n const parts: string[] = [];\n if (rem) parts.push(`剩余 ${rem[1]}`);\n if (exp) parts.push(`到期 ${exp[1]}`);\n return parts.join(\", \");\n } catch {\n return \"\";\n }\n}\n\ntype Outcome = {\n signed: boolean;\n msg: string;\n info: string;\n cookie?: string;\n cached?: boolean;\n};\n\nasync function runAccount(\n acc: { email: string; pwd: string },\n st: State,\n): Promise {\n // 当天已确认签到过：整条链路零请求零成本，重复运行也安全\n if (!FORCE && st.lastSigned === today()) {\n return {\n signed: false,\n msg: \"今日已签到（本地记录）\",\n info: \"\",\n cached: true,\n };\n }\n\n const t0 = Date.now();\n if (JITTER_MAX_SEC > 0) {\n await sleep(\n Math.random() *\n Math.min(\n JITTER_MAX_SEC * 1000,\n Math.max(0, (left() - RESERVE_MS) * 0.15),\n ),\n );\n }\n\n let cookie = st.cookie;\n let fresh: string | undefined;\n let r: { signed: boolean; msg: string } | null = null;\n\n if (cookie) {\n try {\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 缓存 Cookie 签到 ${secs(t0)}`);\n } catch (e) {\n if (!(e instanceof CookieExpired)) throw e;\n console.log(`[${acc.email}] Cookie 失效，转登录`);\n }\n }\n\n if (!r) {\n // 熔断只看“连续凭据错误”这一专用计数，且带上原始报错，避免掩盖真实原因\n if (st.credFail >= CRED_PAUSE_AFTER) {\n throw new CredentialPaused(\n `凭据连续错误 ${st.credFail} 次已暂停打码（原始报错：${\n st.lastError || \"未记录\"\n }）；确认密码无误后用 RESET_STATE=1 运行一次恢复`,\n );\n }\n fresh = await loginWithRetry(acc);\n cookie = fresh;\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 登录+签到 ${secs(t0)}`);\n }\n\n const info = FETCH_INFO ? await userInfo(cookie) : \"\";\n return { ...r, info, cookie: fresh };\n}\n\nasync function pool(\n items: T[],\n limit: number,\n fn: (t: T, i: number) => Promise,\n) {\n const out: PromiseSettledResult[] = new Array(items.length);\n let next = 0;\n await Promise.all(\n Array.from({ length: Math.min(limit, items.length) }, async () => {\n for (;;) {\n const i = next++;\n if (i >= items.length) return;\n try {\n out[i] = { status: \"fulfilled\", value: await fn(items[i], i) };\n } catch (reason) {\n out[i] = { status: \"rejected\", reason } as PromiseSettledResult;\n }\n }\n }),\n );\n return out;\n}\n\nasync function tg(text: string) {\n if (!TG_TOKEN || !TG_CHAT) return;\n try {\n await fetch(`https://api.telegram.org/bot${TG_TOKEN}/sendMessage`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ chat_id: TG_CHAT, text, parse_mode: \"HTML\" }),\n signal: AbortSignal.timeout(8000),\n });\n } catch { /* 通知失败不影响主流程 */ }\n}\n\nexport default async function () {\n try {\n const accs = accounts();\n if (!accs.length) throw new Error(\"IKUUU_ACCOUNTS 未配置或格式有误\");\n if (!SOLVER_KEY) {\n console.warn(\"未配置 TWOCAPTCHA_KEY，Cookie 失效后将无法自动登录\");\n }\n\n const state = await loadState();\n const allCached = !FORCE &&\n accs.every((a) => (state.get(a.email) ?? BLANK).lastSigned === today());\n const balanceP = allCached && !ALWAYS_REPORT\n ? Promise.resolve(null)\n : getBalance(); // 与签到并行；整天缓存命中时不必查余额\n if (RESET_STATE) {\n await sqlite.execute(\n `UPDATE ikuuu_state SET fail_streak = 0, cred_fail = 0, last_status = '', last_error = ''`,\n );\n for (const s of state.values()) {\n s.streak = 0;\n s.credFail = 0;\n s.lastStatus = \"\";\n s.lastError = \"\";\n }\n console.log(\"已重置失败计数与凭据熔断\");\n }\n maxSolves = num(\"MAX_SOLVES\", accs.length * (1 + LOGIN_RETRIES));\n console.log(\n `${accs.length} 个账号开始（并发 ${CONCURRENCY}，打码上限 ${maxSolves}，预算 ${\n BUDGET_MS / 1000\n }s）`,\n );\n\n const settled = await pool(\n accs,\n CONCURRENCY,\n (a) => runAccount(a, state.get(a.email) ?? BLANK),\n );\n\n const day = today();\n const writes: { sql: string; args: unknown[] }[] = [];\n const lines: string[] = [];\n const alerts: string[] = [];\n let okCount = 0;\n\n for (let i = 0; i < accs.length; i++) {\n const email = accs[i].email;\n const prev = state.get(email) ?? BLANK;\n const s = settled[i];\n\n if (s.status === \"fulfilled\") {\n okCount++;\n const v = s.value;\n if (v.cookie) {\n writes.push({\n sql:\n `INSERT OR REPLACE INTO ikuuu_cookies (email, cookie, updated_at) VALUES (?, ?, CURRENT_TIMESTAMP)`,\n args: [email, v.cookie],\n });\n }\n writes.push({\n sql:\n `INSERT OR REPLACE INTO ikuuu_state (email, fail_streak, last_status, last_signed, cred_fail, last_error, updated_at) VALUES (?, 0, ?, ?, 0, '', CURRENT_TIMESTAMP)`,\n args: [email, v.signed ? \"signed\" : \"already\", day],\n });\n const tag = v.cached\n ? \"⏭️ 今日已签(缓存)\"\n : v.signed\n ? \"✅ 签到成功\"\n : \"ℹ️ 今日已签到\";\n lines.push(`• ${email}：${tag}${v.info ? `（${v.info}）` : \"\"}`);\n console.log(\n `[${email}] ${tag} ${v.msg}${v.info ? \" | \" + v.info : \"\"}`,\n );\n } else {\n const err = s.reason as Error;\n const paused = err instanceof CredentialPaused;\n const permanent = err instanceof BadCredential;\n const streak = prev.streak + 1;\n // 凭据计数只由真正的凭据错误推进；熔断本次并未登录，不加计数也不覆盖原始报错\n const credFail = paused\n ? prev.credFail\n : permanent\n ? prev.credFail + 1\n : prev.credFail;\n writes.push({\n sql:\n `INSERT OR REPLACE INTO ikuuu_state (email, fail_streak, last_status, last_signed, cred_fail, last_error, updated_at) VALUES (?, ?, ?, ?, ?, ?, CURRENT_TIMESTAMP)`,\n args: [\n email,\n streak,\n permanent ? \"bad_credential\" : \"fail\",\n prev.lastSigned,\n credFail,\n paused ? prev.lastError : err.message.slice(0, 300),\n ],\n });\n lines.push(`• ${email}：❌ ${err.message}（连续 ${streak} 次）`);\n console.error(`[${email}] ❌ ${err.message}（连续 ${streak} 次）`);\n if (permanent || streak >= FAIL_STREAK_ALERT) {\n alerts.push(`• ${email}：${err.message}（连续 ${streak} 次）`);\n }\n }\n }\n\n await saveAll(writes);\n const bal = await balanceP;\n const lowBal = bal !== null && bal < BALANCE_ALERT;\n console.log(\n `总耗时 ${\n secs(START)\n }，成功 ${okCount}/${accs.length}，打码 ${solvesUsed} 次，余额 ${\n bal ?? \"未知\"\n }`,\n );\n\n const sections: string[] = [];\n if (alerts.length) {\n sections.push(`🚨 Ikuuu 签到需处理\\n${alerts.join(\"\\n\")}`);\n }\n if (lowBal) {\n sections.push(\n `💰 2Captcha 余额不足：$${bal}（低于 $${BALANCE_ALERT}），请尽快充值，否则 Cookie 失效后无法自动登录。`,\n );\n }\n if (ALWAYS_REPORT) {\n sections.unshift(\n `📋 Ikuuu 签到回执 ${okCount}/${accs.length}\\n${\n lines.join(\"\\n\")\n }\\n余额 $${bal ?? \"未知\"} · 打码 ${solvesUsed} 次 · 耗时 ${\n secs(START)\n }`,\n );\n }\n if (sections.length) await tg(sections.join(\"\\n\\n\"));\n\n await Promise.allSettled(pendingReports);\n return {\n total: accs.length,\n succeeded: okCount,\n failed: accs.length - okCount,\n alerts: alerts.length,\n solves: solvesUsed,\n balance: bal,\n elapsed: secs(START),\n };\n } catch (e) {\n const m = `🛑 Ikuuu 签到任务整体异常\\n${(e as Error).message}`;\n console.error(m);\n await tg(m);\n throw e;\n }\n}",[147],"3dd5945e-5ad2-44c8-9f5b-afe7eba743b6","lib.ts","b54823ee-ac64-11f1-ad20-1607ee4eb77e",48,["D",1788968396310],"// 共享：登录 / 签到 / 状态。ikuuu 在密码+GeeTest 之后还会要邮箱验证码。\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\nimport { httpEndpoint } from \"https://esm.town/v/std/utils/index.ts\";\n\nconst ENV: Record =\n typeof Deno.env.toObject === \"function\" ? Deno.env.toObject() : {};\nexport const env = (k: string) => {\n if (Object.keys(ENV).length) return ENV[k] ?? \"\";\n return Deno.env.get(k) || \"\";\n};\nexport const num = (k: string, d: number) => {\n const v = parseFloat(env(k));\n return Number.isFinite(v) ? v : d;\n};\nexport const bool = (k: string, d = false) => {\n const v = env(k);\n return v === \"\" ? d : /^(1|true|yes|on)$/i.test(v);\n};\n\nexport const BASE = (env(\"IKUUU_BASE_URL\") || \"https://ikuuu.org\").replace(/\\/$/, \"\");\nconst CAPTCHA_ID = env(\"IKUUU_CAPTCHA_ID\") || \"cc96d05ba8b60f9112f76e18526fcb73\";\nconst SOLVER_ENDPOINT = (env(\"SOLVER_ENDPOINT\") || \"https://api.2captcha.com\").replace(/\\/$/, \"\");\nconst SOLVER_KEY = env(\"TWOCAPTCHA_KEY\");\nconst TG_TOKEN = env(\"TELEGRAM_TOKEN\");\nconst TG_CHAT = env(\"TELEGRAM_CHAT_ID\");\n\nexport const BUDGET_MS = num(\"BUDGET_SEC\", 52) * 1000;\nconst RESERVE_MS = 4000;\nconst HTTP_TIMEOUT = num(\"HTTP_TIMEOUT_SEC\", 12) * 1000;\nexport const CONCURRENCY = Math.max(1, num(\"CONCURRENCY\", 4));\nconst JITTER_MAX_SEC = num(\"JITTER_MAX_SEC\", 5);\nconst LOGIN_RETRIES = Math.max(0, num(\"LOGIN_RETRIES\", 1));\nexport const CRED_PAUSE_AFTER = Math.max(2, num(\"CRED_PAUSE_AFTER\", 3));\nexport const FAIL_STREAK_ALERT = Math.max(1, num(\"FAIL_STREAK_ALERT\", 2));\nexport const BALANCE_ALERT = num(\"BALANCE_ALERT\", 1);\nconst TZ_OFFSET = num(\"TZ_OFFSET\", 8);\nexport const ALWAYS_REPORT = bool(\"ALWAYS_REPORT\");\nconst FETCH_INFO = bool(\"FETCH_INFO\", ALWAYS_REPORT);\nexport const FORCE = bool(\"FORCE\");\nexport const RESET_STATE = bool(\"RESET_STATE\");\nconst UA =\n \"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/151.0.0.0 Safari/537.36 Edg/151.0.0.0\";\n\nexport class CookieExpired extends Error {}\nexport class CaptchaRejected extends Error {}\nexport class BadCredential extends Error {}\nexport class CredentialPaused extends BadCredential {}\nexport class LoginFlowChanged extends BadCredential {}\nexport class EmailVerifyRequired extends Error {}\nexport class OutOfBudget extends Error {}\n\nexport const START = Date.now();\nconst left = () => BUDGET_MS - (Date.now() - START);\nconst sleep = (ms: number) => new Promise((r) => setTimeout(r, ms));\nexport const secs = (t: number) => ((Date.now() - t) / 1000).toFixed(1) + \"s\";\nexport const today = () =>\n new Date(Date.now() + TZ_OFFSET * 3600_000).toISOString().slice(0, 10);\nfunction needBudget(ms: number) {\n if (left() - RESERVE_MS < ms) {\n throw new OutOfBudget(`时间预算不足（剩余 ${(left() / 1000).toFixed(1)}s）`);\n }\n}\n\nexport let solvesUsed = 0;\nexport let maxSolves = Infinity;\nexport const pendingReports: Promise[] = [];\nexport function setMaxSolves(n: number) {\n maxSolves = n;\n}\n\nasync function fx(url: string, opts: RequestInit = {}, ms = HTTP_TIMEOUT): Promise {\n needBudget(1000);\n const cap = Math.max(1000, Math.min(ms, left() - RESERVE_MS));\n const ctrl = new AbortController();\n const t = setTimeout(() => ctrl.abort(), cap);\n try {\n return await fetch(url, { ...opts, signal: ctrl.signal });\n } catch (e) {\n if (ctrl.signal.aborted) {\n throw new Error(`请求超时 ${(cap / 1000).toFixed(0)}s: ${new URL(url).pathname}`);\n }\n throw e;\n } finally {\n clearTimeout(t);\n }\n}\n\nasync function retry(fn: () => Promise, tries = 2, gap = 1200): Promise {\n let last: unknown;\n for (let i = 0; i < tries; i++) {\n try {\n return await fn();\n } catch (e) {\n if (\n e instanceof CookieExpired || e instanceof BadCredential ||\n e instanceof EmailVerifyRequired || e instanceof OutOfBudget\n ) throw e;\n last = e;\n if (i < tries - 1) {\n needBudget(gap + 2000);\n await sleep(gap);\n }\n }\n }\n throw last;\n}\n\nasync function solverPost(path: string, body: unknown): Promise {\n const res = await fx(`${SOLVER_ENDPOINT}${path}`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ clientKey: SOLVER_KEY, ...(body as object) }),\n }, 15000);\n const text = await res.text();\n try {\n return JSON.parse(text);\n } catch {\n throw new Error(`打码接口非 JSON 响应(HTTP ${res.status}): ${text.slice(0, 80)}`);\n }\n}\n\nexport function accounts() {\n return env(\"IKUUU_ACCOUNTS\")\n .split(/\\|\\||\\n/).map((l) => l.trim()).filter((l) => l && !l.startsWith(\"#\"))\n .map((l) => {\n const i = l.indexOf(\":\");\n return { email: l.slice(0, i).trim(), pwd: l.slice(i + 1).trim() };\n })\n .filter((a) => a.email && a.pwd);\n}\n\nexport type State = {\n cookie: string;\n streak: number;\n credFail: number;\n lastSigned: string;\n lastStatus: string;\n lastError: string;\n};\nexport const BLANK: State = {\n cookie: \"\",\n streak: 0,\n credFail: 0,\n lastSigned: \"\",\n lastStatus: \"\",\n lastError: \"\",\n};\nconst cell = (row: any, i: number, key: string) => row?.[key] ?? row?.[i];\n\nexport async function loadState(): Promise> {\n const ddl = [\n `CREATE TABLE IF NOT EXISTS ikuuu_cookies (email TEXT PRIMARY KEY, cookie TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_state (email TEXT PRIMARY KEY, fail_streak INTEGER DEFAULT 0, last_status TEXT, last_signed TEXT, cred_fail INTEGER DEFAULT 0, last_error TEXT, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_pending (email TEXT PRIMARY KEY, cookie TEXT, phase TEXT, expires_at INTEGER, updated_at DATETIME DEFAULT CURRENT_TIMESTAMP)`,\n `CREATE TABLE IF NOT EXISTS ikuuu_meta (k TEXT PRIMARY KEY, v TEXT)`,\n ];\n try {\n await sqlite.batch(ddl);\n } catch {\n for (const s of ddl) await sqlite.execute(s);\n }\n for (const col of [`last_signed TEXT`, `cred_fail INTEGER DEFAULT 0`, `last_error TEXT`]) {\n try {\n await sqlite.execute(`ALTER TABLE ikuuu_state ADD COLUMN ${col}`);\n } catch { /* 已存在 */ }\n }\n\n const map = new Map();\n const touch = (email: string) => {\n if (!map.has(email)) map.set(email, { ...BLANK });\n return map.get(email)!;\n };\n const [ck, st] = await Promise.all([\n sqlite.execute(`SELECT email, cookie FROM ikuuu_cookies`),\n sqlite.execute(`SELECT email, fail_streak, last_status, last_signed, cred_fail, last_error FROM ikuuu_state`),\n ]);\n for (const r of ck.rows as any[]) touch(String(cell(r, 0, \"email\"))).cookie = String(cell(r, 1, \"cookie\") ?? \"\");\n for (const r of st.rows as any[]) {\n const s = touch(String(cell(r, 0, \"email\")));\n s.streak = Number(cell(r, 1, \"fail_streak\") ?? 0);\n s.lastStatus = String(cell(r, 2, \"last_status\") ?? \"\");\n s.lastSigned = String(cell(r, 3, \"last_signed\") ?? \"\");\n s.credFail = Number(cell(r, 4, \"cred_fail\") ?? 0);\n s.lastError = String(cell(r, 5, \"last_error\") ?? \"\");\n }\n return map;\n}\n\nexport async function saveAll(stmts: { sql: string; args: unknown[] }[]) {\n if (!stmts.length) return;\n try {\n await sqlite.batch(stmts);\n } catch {\n for (const s of stmts) await sqlite.execute(s).catch(() => {});\n }\n}\n\nexport async function ensureOtpToken(): Promise {\n const fromEnv = env(\"OTP_TOKEN\");\n if (fromEnv) return fromEnv;\n await loadState();\n const r = await sqlite.execute({ sql: `SELECT v FROM ikuuu_meta WHERE k = 'otp_token'`, args: [] });\n const existing = r.rows.length ? String(cell(r.rows[0], 0, \"v\") ?? \"\") : \"\";\n if (existing) return existing;\n const token = crypto.randomUUID().replace(/-/g, \"\");\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_meta (k, v) VALUES ('otp_token', ?)`,\n args: [token],\n });\n return token;\n}\n\nexport async function otpPageUrl(): Promise {\n const token = await ensureOtpToken();\n return `${httpEndpoint(\"./otp.ts\")}?t=${token}`;\n}\n\nexport function assertOtpToken(got: string) {\n return ensureOtpToken().then((want) => {\n if (!got || got !== want) throw new Error(\"提交页口令无效\");\n });\n}\n\nasync function savePending(email: string, cookie: string) {\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_pending (email, cookie, phase, expires_at, updated_at) VALUES (?, ?, 'email_code', ?, CURRENT_TIMESTAMP)`,\n args: [email, cookie, Date.now() + 10 * 60 * 1000],\n });\n}\n\nasync function loadPending(email: string): Promise<{ cookie: string; expiresAt: number } | null> {\n const r = await sqlite.execute({\n sql: `SELECT cookie, expires_at FROM ikuuu_pending WHERE email = ?`,\n args: [email],\n });\n if (!r.rows.length) return null;\n const row = r.rows[0] as any;\n return { cookie: String(cell(row, 0, \"cookie\") ?? \"\"), expiresAt: Number(cell(row, 1, \"expires_at\") ?? 0) };\n}\n\nasync function clearPending(email: string) {\n await sqlite.execute({ sql: `DELETE FROM ikuuu_pending WHERE email = ?`, args: [email] });\n}\n\nasync function solveCaptcha(email: string): Promise<{ taskId: string; solution: any }> {\n if (solvesUsed >= maxSolves) throw new Error(`打码已达本次上限 ${maxSolves} 次，跳过登录以控制成本`);\n needBudget(15000);\n solvesUsed++;\n const t0 = Date.now();\n const create = await solverPost(\"/createTask\", {\n task: {\n type: \"GeeTestTaskProxyless\",\n websiteURL: `${BASE}/auth/login`,\n version: 4,\n initParameters: { captcha_id: CAPTCHA_ID },\n },\n });\n if (create.errorId) throw new Error(`createTask: ${create.errorCode} ${create.errorDescription || \"\"}`);\n await sleep(6000);\n for (;;) {\n const res = await solverPost(\"/getTaskResult\", { taskId: create.taskId });\n if (res.status === \"ready\") {\n console.log(`[${email}] 打码完成 ${secs(t0)}`);\n return { taskId: create.taskId, solution: res.solution };\n }\n if (res.errorId) throw new CaptchaRejected(`求解失败: ${res.errorCode} ${res.errorDescription || \"\"}`);\n needBudget(3000);\n await sleep(2000);\n }\n}\nfunction reportBad(taskId: string) {\n pendingReports.push(solverPost(\"/reportIncorrect\", { taskId }).catch(() => {}));\n}\nexport async function getBalance(): Promise {\n if (!SOLVER_KEY) return null;\n try {\n const r = await solverPost(\"/getBalance\", {});\n return typeof r.balance === \"number\" ? r.balance : null;\n } catch {\n return null;\n }\n}\n\nconst JSON_HEADERS = {\n \"User-Agent\": UA,\n Accept: \"application/json, text/javascript, */*; q=0.01\",\n \"X-Requested-With\": \"XMLHttpRequest\",\n};\n\nfunction cookieMap(header: string): Record {\n const out: Record = {};\n for (const part of header.split(\";\")) {\n const p = part.trim();\n const eq = p.indexOf(\"=\");\n if (eq > 0) out[p.slice(0, eq)] = p.slice(eq + 1);\n }\n return out;\n}\nfunction setCookiePairs(res: Response): string[] {\n return (res.headers.getSetCookie?.() ?? [res.headers.get(\"set-cookie\") ?? \"\"]).filter(Boolean);\n}\nfunction mergeCookie(existing: string, setCookies: string[]): string {\n const map = cookieMap(existing);\n for (const sc of setCookies) {\n const first = sc.split(\";\")[0];\n const eq = first.indexOf(\"=\");\n if (eq > 0) map[first.slice(0, eq).trim()] = first.slice(eq + 1).trim();\n }\n return Object.entries(map).map(([k, v]) => `${k}=${v}`).join(\"; \");\n}\nfunction plainMsg(msg: string): string {\n return msg.replace(/<[^>]+>/g, \" \").replace(/\\s+/g, \" \").trim();\n}\nfunction sessionOk(cookie: string) {\n const keys = cookieMap(cookie);\n return Boolean(keys.uid || keys.key || keys.PHPSESSID);\n}\nfunction loginOk(lj: { ret?: number; result?: string; phase?: string }) {\n return lj.ret === 1 ||\n lj.result === \"ok\" || lj.result === \"success\" ||\n lj.result === \"logged_in\" || lj.result === \"authenticated\" ||\n lj.phase === \"authenticated\";\n}\n\nasync function postLogin(form: URLSearchParams, cookie = \"\"): Promise<{\n res: Response;\n cookie: string;\n lj: { ret?: number; msg?: string; result?: string; phase?: string };\n text: string;\n}> {\n const res = await fx(`${BASE}/auth/login`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Origin: BASE,\n Referer: `${BASE}/auth/login`,\n \"Content-Type\": \"application/x-www-form-urlencoded; charset=UTF-8\",\n ...(cookie ? { Cookie: cookie } : {}),\n },\n body: form.toString(),\n redirect: \"manual\",\n });\n const next = mergeCookie(cookie, setCookiePairs(res));\n const text = await res.text();\n let lj: { ret?: number; msg?: string; result?: string; phase?: string };\n try {\n lj = JSON.parse(text);\n } catch {\n throw new Error(`登录响应非 JSON(HTTP ${res.status}): ${text.slice(0, 100)}`);\n }\n return { res, cookie: next, lj, text };\n}\n\nexport async function login(acc: { email: string; pwd: string }): Promise {\n const pageLoadedAt = String(Date.now());\n const { taskId, solution: c } = await solveCaptcha(acc.email);\n const host = new URL(BASE).hostname;\n const form = new URLSearchParams({\n host,\n phase: \"password\",\n email: acc.email,\n passwd: acc.pwd,\n remember_me: \"on\",\n pageLoadedAt,\n \"captcha_result[lot_number]\": String(c.lot_number),\n \"captcha_result[captcha_output]\": String(c.captcha_output),\n \"captcha_result[pass_token]\": String(c.pass_token),\n \"captcha_result[gen_time]\": String(c.gen_time),\n });\n const { res, cookie, lj, text } = await postLogin(form);\n if (loginOk(lj)) {\n if (!sessionOk(cookie)) throw new Error(\"登录成功但缺少会话 Cookie（uid/key/PHPSESSID）\");\n console.log(`[${acc.email}] 登录成功 Cookie键: ${Object.keys(cookieMap(cookie)).join(\",\")}`);\n return cookie;\n }\n const msg = plainMsg(String(lj.msg ?? \"\"));\n const result = String(lj.result ?? \"\");\n console.error(`[${acc.email}] 登录被拒(HTTP ${res.status}) result=${result || \"-\"} phase=${lj.phase ?? \"-\"} 原文: ${msg || text.slice(0, 200)}`);\n\n // 必须先于「验证」泛匹配：否则「邮箱验证」会被当成 GeeTest 失败并白烧打码\n if (\n result === \"verification_required\" || lj.phase === \"email_code\" ||\n /邮箱验证|email.?code|verification/i.test(`${result} ${lj.phase ?? \"\"} ${msg}`)\n ) {\n await savePending(acc.email, cookie);\n throw new EmailVerifyRequired(`登录需要邮箱验证码：${msg || result}`);\n }\n if (result === \"invalid_phase\" || /登录流程无效/.test(msg)) {\n throw new LoginFlowChanged(`登录流程无效(invalid_phase)：${msg}`);\n }\n if (\n result === \"user_not_found\" || result === \"wrong_password\" ||\n /邮箱不存在|密码错误|密码不正确|邮箱或密码|账户不存在|帐户不存在|用户不存在|尚未注册|未注册|已封禁|已禁用|账号被封/.test(msg)\n ) {\n throw new BadCredential(`凭据/账号异常(${result || \"msg\"}): ${msg}`);\n }\n if (/totp|2fa/i.test(result) || /二步验证/.test(msg)) {\n throw new LoginFlowChanged(`登录需要额外验证(${result}): ${msg}`);\n }\n if (/captcha|geetest|刷新页面/i.test(msg) || /captcha/i.test(result)) {\n reportBad(taskId);\n throw new CaptchaRejected(`验证码被拒: ${msg || result}`);\n }\n throw new Error(`登录失败(${result || `HTTP ${res.status}`}): ${msg}`);\n}\n\nexport async function loginWithRetry(acc: { email: string; pwd: string }): Promise {\n for (let i = 0;; i++) {\n try {\n return await login(acc);\n } catch (e) {\n const canRetry = e instanceof CaptchaRejected && i < LOGIN_RETRIES &&\n solvesUsed < maxSolves && left() - RESERVE_MS > 20000;\n if (!canRetry) throw e;\n console.log(`[${acc.email}] 验证码被拒，重试登录 ${i + 1}/${LOGIN_RETRIES}`);\n }\n }\n}\n\nexport async function completeEmailCode(email: string, code: string): Promise {\n const pending = await loadPending(email);\n if (!pending) throw new Error(`${email} 没有待完成的邮箱验证（请先让定时任务重新登录，或直接粘贴 Cookie）`);\n if (Date.now() > pending.expiresAt) throw new Error(`${email} 邮箱验证码已过期（有效约 10 分钟），请在提交页点重新发送`);\n const host = new URL(BASE).hostname;\n const fields = [\"code\", \"email_code\", \"verify_code\", \"otp\"];\n let last = \"\";\n for (const field of fields) {\n const form = new URLSearchParams({\n host,\n phase: \"email_code\",\n email,\n remember_me: \"on\",\n [field]: code,\n });\n const { res, cookie, lj, text } = await postLogin(form, pending.cookie);\n if (loginOk(lj)) {\n const next = sessionOk(cookie) ? cookie : pending.cookie;\n if (!sessionOk(next)) throw new Error(\"邮箱验证通过但缺少会话 Cookie\");\n await clearPending(email);\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_cookies (email, cookie, updated_at) VALUES (?, ?, CURRENT_TIMESTAMP)`,\n args: [email, next],\n });\n console.log(`[${email}] 邮箱验证通过 Cookie键: ${Object.keys(cookieMap(next)).join(\",\")}`);\n return next;\n }\n last = plainMsg(String(lj.msg ?? text.slice(0, 80)));\n console.error(`[${email}] email_code(${field}) HTTP ${res.status} result=${lj.result ?? \"-\"} ${last}`);\n if (/错误|无效|不正确|过期/.test(last) && !/缺少|必填|字段/.test(last)) break;\n }\n throw new Error(`邮箱验证失败: ${last || \"未知错误\"}`);\n}\n\nexport async function saveCookieAndCheckin(email: string, cookie: string) {\n const r = await retry(() => doCheckin(cookie));\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_cookies (email, cookie, updated_at) VALUES (?, ?, CURRENT_TIMESTAMP)`,\n args: [email, cookie],\n });\n await sqlite.execute({\n sql: `INSERT OR REPLACE INTO ikuuu_state (email, fail_streak, last_status, last_signed, cred_fail, last_error, updated_at) VALUES (?, 0, ?, ?, 0, '', CURRENT_TIMESTAMP)`,\n args: [email, r.signed ? \"signed\" : \"already\", today()],\n });\n await clearPending(email);\n return r;\n}\n\nexport async function doCheckin(cookie: string): Promise<{ signed: boolean; msg: string }> {\n const res = await fx(`${BASE}/user/checkin`, {\n method: \"POST\",\n headers: {\n ...JSON_HEADERS,\n Cookie: cookie,\n Referer: `${BASE}/user`,\n \"Content-Type\": \"application/json\",\n },\n redirect: \"manual\",\n });\n if ([301, 302, 401, 403].includes(res.status)) throw new CookieExpired();\n const text = await res.text();\n if (res.status >= 500 || res.status === 429) throw new Error(`签到 HTTP ${res.status}`);\n let data: { ret?: number; msg?: string };\n try {\n data = JSON.parse(text);\n } catch {\n if (/auth\\/login|登录|sign\\s*in/i.test(text)) throw new CookieExpired();\n throw new Error(`签到响应异常(HTTP ${res.status}): ${text.slice(0, 80)}`);\n }\n const msg = String(data.msg ?? \"\");\n if (/请先登录|未登录|登录后|请登录/i.test(msg)) throw new CookieExpired();\n return { signed: data.ret === 1, msg };\n}\n\nasync function userInfo(cookie: string): Promise {\n try {\n const res = await fx(`${BASE}/user`, {\n headers: { ...JSON_HEADERS, Cookie: cookie },\n redirect: \"manual\",\n }, 8000);\n if (res.status !== 200) return \"\";\n const html = await res.text();\n const rem = html.match(/(?:剩余流量|未使用流量|剩余|remain[a-z]*flow)[^0-9]{0,12}([\\d.]+\\s?[KMGT]B)/i);\n const exp = html.match(/(20\\d{2}-\\d{2}-\\d{2})/);\n const parts: string[] = [];\n if (rem) parts.push(`剩余 ${rem[1]}`);\n if (exp) parts.push(`到期 ${exp[1]}`);\n return parts.join(\", \");\n } catch {\n return \"\";\n }\n}\n\nexport type Outcome = { signed: boolean; msg: string; info: string; cookie?: string; cached?: boolean };\n\nexport async function runAccount(acc: { email: string; pwd: string }, st: State): Promise {\n if (!FORCE && st.lastSigned === today()) {\n return { signed: false, msg: \"今日已签到（本地记录）\", info: \"\", cached: true };\n }\n\n const t0 = Date.now();\n if (JITTER_MAX_SEC > 0) {\n await sleep(Math.random() * Math.min(JITTER_MAX_SEC * 1000, Math.max(0, (left() - RESERVE_MS) * 0.15)));\n }\n\n let cookie = st.cookie;\n let fresh: string | undefined;\n let r: { signed: boolean; msg: string } | null = null;\n\n if (cookie) {\n try {\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 缓存 Cookie 签到 ${secs(t0)}`);\n } catch (e) {\n if (!(e instanceof CookieExpired)) throw e;\n console.log(`[${acc.email}] Cookie 失效，转登录`);\n }\n }\n\n if (!r) {\n if (st.lastStatus === \"bad_credential\" && st.credFail >= CRED_PAUSE_AFTER) {\n throw new CredentialPaused(\n `凭据连续错误 ${st.credFail} 次已暂停打码（原始报错：${st.lastError || \"未记录\"}）；确认密码无误后用 RESET_STATE=1 运行一次恢复`,\n );\n }\n // 已确认要邮箱验证：默认不再打码/重发，避免每天烧钱并触发「发信频率过快」\n if (!FORCE && st.lastStatus === \"email_verify\") {\n throw new EmailVerifyRequired(st.lastError || \"登录需要邮箱验证码，请打开提交页填写，或粘贴浏览器 Cookie\");\n }\n fresh = await loginWithRetry(acc);\n cookie = fresh;\n r = await retry(() => doCheckin(cookie));\n console.log(`[${acc.email}] 登录+签到 ${secs(t0)}`);\n }\n\n const info = FETCH_INFO ? await userInfo(cookie) : \"\";\n return { ...r, info, cookie: fresh };\n}\n\nexport async function pool(items: T[], limit: number, fn: (t: T, i: number) => Promise) {\n const out: PromiseSettledResult[] = new Array(items.length);\n let next = 0;\n await Promise.all(Array.from({ length: Math.min(limit, items.length) }, async () => {\n for (;;) {\n const i = next++;\n if (i >= items.length) return;\n try {\n out[i] = { status: \"fulfilled\", value: await fn(items[i], i) };\n } catch (reason) {\n out[i] = { status: \"rejected\", reason } as PromiseSettledResult;\n }\n }\n }));\n return out;\n}\n\nexport async function tg(text: string) {\n if (!TG_TOKEN || !TG_CHAT) return;\n try {\n await fetch(`https://api.telegram.org/bot${TG_TOKEN}/sendMessage`, {\n method: \"POST\",\n headers: { \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ chat_id: TG_CHAT, text, disable_web_page_preview: true }),\n signal: AbortSignal.timeout(8000),\n });\n } catch { /* 通知失败不影响主流程 */ }\n}\n\nexport function extractEmailCode(text: string): string {\n const labeled = text.match(/(?:验证码|code)[^0-9]{0,12}(\\d{4,8})/i);\n if (labeled) return labeled[1];\n const six = text.match(/(? 系统无法接受您的验证结果，请刷新页面后重试。\n\n本项目实测过纯算法求解器（GeekedTest 思路）与多家免费打码平台，在当前 GeeTest V4\n的 \"ai\" 类型题目上均已失效，因此改用 **2Captcha** 求解。配合下面的 Cookie\n复用策略，实际打码次数被压到极低，长期成本可忽略。\n\n## 工作原理\n\n```\nVal Town Cron\n └─ 读取 SQLite 中的账号状态（Cookie / 签到日期 / 失败计数）\n ├─ 今天已签到？ → 直接跳过，零请求零成本\n ├─ 有缓存 Cookie？ → 直接 POST /user/checkin\n └─ Cookie 失效？ → 2Captcha 求解 GeeTest V4 → POST /auth/login（phase=password） → 签到\n └─ 汇总结果，异常时推送 Telegram\n```\n\n关键点：**只有 Cookie 失效时才会打码**。ikuuu\n的会话通常能维持很久，所以绝大多数天数是零成本运行。\n\n## 部署步骤\n\n### 1. 创建 Val\n\n在 Val Town 新建一个 **Cron Val**，把 `main.ts` 的内容整体粘贴进去。\n\n建议 cron 设为每天一次，例如 `30 0 * * *`（UTC，对应北京时间 08:30）。\n\n### 2. 配置环境变量\n\n在 Val Town 的 **Settings → Environment Variables** 中添加。\n\n**必填：**\n\n| 变量 | 说明 |\n| ---------------- | ------------------------------------------------ |\n| `IKUUU_ACCOUNTS` | 账号列表，格式 `邮箱:密码`，多账号用 `\\|\\|` 分隔 |\n| `TWOCAPTCHA_KEY` | 2Captcha 的 API Key |\n\n多账号示例（Val Town 环境变量是单行，用 `||` 连接）：\n\n```\nalice@example.com:pwd1||bob@example.com:pwd2\n```\n\n> 按**第一个冒号**分隔邮箱和密码，所以密码含冒号没问题；但密码里不能出现 `||`。\n\n**可选：**\n\n| 变量 | 默认 | 说明 |\n| ------------------- | -------------------- | ----------------------------------------------------- |\n| `IKUUU_BASE_URL` | `https://ikuuu.org` | ikuuu 常换域名，失效时改这里 |\n| `IKUUU_CAPTCHA_ID` | 已内置 | GeeTest 验证码 ID，站点更新导致失效时才需覆盖 |\n| `TELEGRAM_TOKEN` | — | Telegram Bot Token（@BotFather 获取） |\n| `TELEGRAM_CHAT_ID` | — | 接收通知的 Chat ID（@userinfobot 获取） |\n| `ALWAYS_REPORT` | 关 | 设 `1` 则每次都推送回执，否则仅异常时推送 |\n| `FETCH_INFO` | 跟随 `ALWAYS_REPORT` | 设 `1` 则额外抓取剩余流量与到期日（每账号多一次请求） |\n| `BALANCE_ALERT` | `1` | 2Captcha 余额低于此值（美元）时告警 |\n| `FAIL_STREAK_ALERT` | `2` | 连续失败几次才升级为强提醒 |\n| `LOGIN_RETRIES` | `1` | 验证码被拒时的额外登录尝试次数 |\n| `CRED_PAUSE_AFTER` | `3` | 连续几次**凭据错误**后暂停打码（熔断） |\n| `MAX_SOLVES` | 账号数 ×(1+重试数) | 单次运行的打码硬上限 |\n| `CONCURRENCY` | `4` | 多账号并发数 |\n| `BUDGET_SEC` | `52` | 总时间预算，必须小于 Val Town 的运行上限 |\n| `HTTP_TIMEOUT_SEC` | `12` | 单个 HTTP 请求超时 |\n| `JITTER_MAX_SEC` | `5` | 每账号随机延迟上限，用于错峰 |\n| `TZ_OFFSET` | `8` | 判定\"今天\"所用的时区偏移 |\n| `FORCE` | 关 | 设 `1` 忽略\"今日已签\"缓存，强制执行 |\n| `RESET_STATE` | 关 | 设 `1` 清空失败计数与凭据熔断，跑完记得改回 |\n\n### 3. 手动跑一次验证\n\n在 Val Town 点 Run，看日志是否输出 `✅ 签到成功`。首次运行会打码登录并把 Cookie\n写入 SQLite，之后就走缓存了。\n\n## 设计要点\n\n**Cookie 优先，成本最低。** 签到本身不需要验证码，只有登录才需要。脚本把 Cookie\n持久化在 Val Town 的 SQLite 里，只在确认失效时才触发付费打码。\n\n**当天已签则完全跳过。** 成功签到会记录日期（按 `TZ_OFFSET`\n判定），同一天内重复运行不产生任何请求，手动重跑和 cron 重复触发都是安全的。\n\n**失败分类，避免误烧钱。** 5xx / 429 判定为服务端抖动并重试，不会误认成 Cookie\n失效而去登录；只有 301/302/401/403\n或响应内容像登录页才算失效。登录失败会区分\"验证码被拒\"（上报退款并重试）与\"凭据错误\"（不重试，直接告警）。\n\n**全局时间预算。** 每个网络请求前检查剩余时间，并始终预留 4 秒发送通知，避免被\nVal Town 静默掐断而收不到任何告警。\n\n**凭据熔断。**\n连续多次确凿的凭据错误后停止打码，避免密码改了却每天白烧钱。恢复方式：确认密码无误后加\n`RESET_STATE=1` 跑一次。\n\n## 常见问题\n\n**登录失败怎么排查？** 日志里会有一行\n`登录被拒(HTTP xxx) result=... 原文: ...`，那是服务端的真实回复。成功登录的标志是\n`result=authenticated`（不是旧版的 `ret=1`）。据此判断是域名变更、验证码配置变化还是账号问题。\n\n**为什么日志里曾出现 invalid_phase？** 2026-08 起登录 POST 必须带 `phase=password`、`host`、`pageLoadedAt` 和 GeeTest 字段；缺 `phase` 会被拒绝。当前 `main.ts` 已按这个格式提交。\n\n**ikuuu 换域名了？** 改 `IKUUU_BASE_URL` 即可。\n\n**成本大概多少？** GeeTest V4 在 2Captcha 约 $0.003/次。由于只在 Cookie\n失效时打码，实际一年下来通常不到 $1。\n\n**为什么不用 2Captcha 的 Browser API（云浏览器）？** 那是托管 Chrome 服务，需要\nPuppeteer/Playwright 通过 CDP 驱动。真实浏览器完成一次登录通常要几十秒，会超出\nVal Town 免费版 60 秒的运行上限——这正是本项目最初放弃 Puppeteer 方案的原因。当前\nHTTP 直连方案更快也更省。\n\n**安全吗？** 账号密码只存在 Val Town 环境变量中，不写入代码；日志不打印 Cookie\n与密码。\n\n## 目录结构\n\n```\n.\n├── main.ts # 主脚本（interval / cron）\n└── README.md\n```\n\n> 早期还有一套基于 GitHub Actions + 纯算法 GeeTest 求解器的实现（`checkin.py` /\n> `geeked/`），实测求解器已被 ikuuu 的风控拦截（成功率 0/10），已从仓库移除。",[163],"pulls","branches",1,"forks","envVars",{"_178":180,"_181":61},"connections",{"_178":61,"_179":61},"count","unfilledCount",5,"emptyCount",{"_41":162,"_31":163,"_29":164,"_136":-5,"_39":40,"_38":165,"_138":57,"_36":200,"_13":167,"_32":20,"_34":168,"_23":24,"_141":-5,"_188":201,"_26":202},{"_41":155,"_31":156,"_29":157,"_136":-5,"_39":40,"_38":158,"_138":24,"_36":197,"_13":61,"_32":33,"_34":160,"_23":24,"_141":-5,"_188":198,"_26":199},{"_41":146,"_31":147,"_29":148,"_136":-5,"_39":40,"_38":149,"_138":24,"_36":194,"_13":151,"_32":152,"_34":153,"_23":24,"_141":-5,"_188":195,"_26":196},{"_41":143,"_31":27,"_29":30,"_136":-5,"_39":40,"_38":14,"_138":57,"_36":191,"_13":61,"_32":33,"_34":35,"_23":24,"_141":-5,"_188":192,"_26":193},{"_41":133,"_31":134,"_29":135,"_136":-5,"_39":40,"_38":137,"_138":57,"_36":187,"_13":61,"_32":20,"_34":140,"_23":24,"_141":-5,"_188":189,"_26":190},["D",1788968406406],"children",[],[134],["D",1788968408426],[],[27],["D",1786723893094],[],[147],["D",1788968396310],[],[156],["D",1786635444739],[],[163],["D",1777214481899],["D",1789501263826],{"_98":97,"_105":101},{"_98":97,"_99":-5,"_100":101,"_18":53,"_102":103,"_104":24},{"_13":87,"_31":88,"_41":40,"_89":42,"_90":-5,"_91":-5,"_92":-5,"_93":-5,"_94":-5,"_95":43,"_96":97},"ctx",{"_80":-5,"_125":241,"_242":243,"_244":245,"_246":24,"_247":24,"_248":24,"_249":57,"_250":-5,"_251":-7,"_252":-7,"_253":61,"_254":24,"_255":24,"_256":-5,"_257":24,"_258":24,"_259":24,"_260":-5},"ENV",{"_212":213,"_214":215,"_216":88,"_217":218,"_219":220,"_221":222,"_223":224,"_225":226,"_227":228,"_229":230,"_231":232,"_233":234,"_235":236,"_237":238,"_239":240},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","811aa22498c9b0b5a47e8d778de579cdb990f332","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v50