feat: add Express API server as Turnstile solver endpoint

- Add app.js: Express API server compatible with /bypass/turnstile-min
- Add package.json: dependencies (express, puppeteer-real-browser)
- Add Dockerfile: HuggingFace Space Docker config with Chromium + Xvfb
- Update README.md: HF Space YAML front matter + API docs

Dockerfile

@@ -0,0 +1,65 @@
+# Dockerfile untuk HuggingFace Space (Node.js + Puppeteer)
+FROM node:20-slim
+
+# Install dependensi sistem yang dibutuhkan Puppeteer + Xvfb + ffmpeg
+RUN apt-get update && apt-get install -y \
+    chromium \
+    xvfb \
+    ffmpeg \
+    ca-certificates \
+    fonts-liberation \
+    libasound2 \
+    libatk-bridge2.0-0 \
+    libatk1.0-0 \
+    libc6 \
+    libcairo2 \
+    libcups2 \
+    libdbus-1-3 \
+    libexpat1 \
+    libfontconfig1 \
+    libgbm1 \
+    libgcc1 \
+    libglib2.0-0 \
+    libgtk-3-0 \
+    libnspr4 \
+    libnss3 \
+    libpango-1.0-0 \
+    libpangocairo-1.0-0 \
+    libstdc++6 \
+    libx11-6 \
+    libx11-xcb1 \
+    libxcb1 \
+    libxcomposite1 \
+    libxcursor1 \
+    libxdamage1 \
+    libxext6 \
+    libxfixes3 \
+    libxi6 \
+    libxrandr2 \
+    libxrender1 \
+    libxss1 \
+    libxtst6 \
+    lsb-release \
+    wget \
+    xdg-utils \
+    --no-install-recommends \
+    && rm -rf /var/lib/apt/lists/*
+
+# Arahkan Puppeteer ke Chromium sistem (bukan download sendiri)
+ENV PUPPETEER_SKIP_CHROMIUM_DOWNLOAD=true
+ENV PUPPETEER_EXECUTABLE_PATH=/usr/bin/chromium
+
+# Port yang diekspos HuggingFace Space
+ENV PORT=7860
+
+WORKDIR /app
+
+# Install dependencies npm
+COPY package.json .
+RUN npm install --omit=dev
+
+# Copy semua source
+COPY . .
+
+# Jalankan dengan Xvfb (virtual display untuk Puppeteer non-headless)
+CMD ["sh", "-c", "Xvfb :99 -screen 0 1280x720x24 & sleep 1 && DISPLAY=:99 node app.js"]

README.md

@@ -1,255 +1,74 @@
-# 🔓 Cloudflare Solver
-
-Dua solver otomatis untuk proteksi Cloudflare menggunakan `puppeteer-real-browser`:
-
-- **`cloudflare-solver.js`** — Bypass Cloudflare challenge page dan ekstrak cookie `cf_clearance`
-- **`turnstile-solver.js`** — Solve Cloudflare Turnstile widget dan dapatkan token
-
 ---
-
-## ✨ Fitur
-
-### Cloudflare Solver
-- Bypass halaman challenge Cloudflare secara otomatis
-- Deteksi tipe challenge: `non-interactive`, `managed`, `interactive`
-- Klik iframe Cloudflare (checkbox → label → widget → body fallback)
-- Ekstrak cookie `cf_clearance` + semua cookies + cookie string siap pakai
-- Support proxy URL (`http://user:pass@ip:port`) dan proxy file
-- Random User-Agent dari `data/useragents.txt`
-
-### Turnstile Solver
-- **Mode Sitekey** — inject fake page dengan sitekey eksplisit
-- **Mode Page** — solve langsung dari halaman target (auto-detect turnstile)
-- Screen recording tiap sesi (`.mp4`) via `puppeteer-screen-recorder`
-- Support proxy dengan autentikasi
-- Output token dalam format JSON
-
+title: Cloudflare Turnstile Solver API
+emoji: 🔓
+colorFrom: gray
+colorTo: blue
+sdk: docker
+pinned: false
 ---
 
-## 📦 Instalasi
-
-```bash
-npm install puppeteer-real-browser puppeteer-screen-recorder
-```
-
-> **Requirements tambahan:**
-> - Node.js >= 18
-> - `ffmpeg` — dibutuhkan `puppeteer-screen-recorder` untuk encode MP4
-> - `Xvfb` — untuk headless di Linux (dihandle otomatis oleh `puppeteer-real-browser`)
-
----
-
-## 🔧 Penggunaan
-
-### Cloudflare Solver
-
-```js
-const { solveCloudflare } = require('./cloudflare-solver');
-
-const result = await solveCloudflare({
-  url: 'https://example.com',
-  headless: false,         // tampilkan browser
-  timeout: 30,             // timeout dalam detik
-  // proxy: 'http://user:pass@ip:port',
-  // proxyFile: 'data/proxies.txt',
-});
-
-console.log(result);
-```
+# 🔓 Cloudflare Turnstile Solver API
 
-#### Options
+Self-hosted API pengganti layanan Turnstile eksternal. Menggunakan `puppeteer-real-browser` untuk solve Turnstile secara otomatis.
 
-| Option | Tipe | Default | Deskripsi |
-|--------|------|---------|-----------|
-| `url` | `string` | — | **Wajib.** URL target |
-| `headless` | `boolean` | `true` | Tampilkan browser atau tidak |
-| `proxy` | `string` | `null` | Proxy URL: `http://user:pass@ip:port` |
-| `proxyFile` | `string` | `null` | Path ke file daftar proxy (satu per baris) |
-| `timeout` | `number` | `30` | Batas waktu solve challenge (detik) |
+## Endpoint
 
-#### Output
+### `GET /bypass/turnstile-min`
 
-Berhasil:
+| Parameter | Wajib | Deskripsi |
+|-----------|-------|-----------|
+| `url` | ✅ | URL target yang memiliki Turnstile |
+| `siteKey` | ❌ | Sitekey Turnstile (pakai mode page kalau kosong) |
+| `apikey` | ❌ | API key (sesuai env `API_KEY` jika dikonfigurasi) |
 
+**Response sukses:**
 ```json
 {
-  "success": true,
-  "url": "https://example.com",
-  "proxy": null,
-  "user_agent": "Mozilla/5.0 ...",
-  "cf_clearance": "abc123...",
-  "all_cookies": [...],
-  "cookie_string": "cf_clearance=abc123; ...",
-  "unix_timestamp": 1747000000,
-  "timestamp": "2025-05-12T00:00:00.000Z",
-  "domain": ".example.com"
-}
-```
-
-Gagal:
-
-```json
-{
-  "success": false,
-  "url": "https://example.com",
-  "error": "Failed to obtain cf_clearance cookie"
-}
-```
-
----
-
-### Turnstile Solver
-
-```js
-const TurnstileSolver = require('./turnstile-solver');
-
-const solver = new TurnstileSolver({
-  timeout: 60000,
-  record: true,
-  recordDir: './recordings',
-  // proxy: { host: '...', port: 8080, username: 'user', password: 'pass' },
-  width: 1280,
-  height: 720,
-});
-
-await solver.initialize();
-
-// Mode 1: pakai sitekey eksplisit
-const result = await solver.solve('https://example.com', '0x4AAAAAAA...');
-
-// Mode 2: auto-detect dari halaman target
-const result = await solver.solve('https://example.com');
-
-console.log(result);
-await solver.cleanup();
-```
-
-#### Options Konstruktor
-
-| Option | Tipe | Default | Deskripsi |
-|--------|------|---------|-----------|
-| `timeout` | `number` | `60000` | Batas waktu tunggu token (ms) |
-| `record` | `boolean` | `false` | Aktifkan screen recording |
-| `recordDir` | `string` | `./recordings` | Folder output recording |
-| `proxy` | `object` | `null` | `{ host, port, username, password }` |
-| `width` | `number` | `1280` | Viewport & recording width |
-| `height` | `number` | `720` | Viewport & recording height |
-
-#### Methods
-
-| Method | Deskripsi |
-|--------|-----------|
-| `initialize()` | Launch browser (opsional, auto-called saat `solve`) |
-| `solve(url, siteKey?)` | Solve turnstile — sitekey mode kalau diisi, page mode kalau tidak |
-| `solveWithSitekey(url, siteKey)` | Inject fake page dengan sitekey eksplisit |
-| `solveFromPage(url)` | Solve langsung dari halaman target |
-| `cleanup()` | Tutup browser dan reset state |
-
-#### Output
-
-Berhasil:
-
-```json
-{
-  "success": true,
+  "status": true,
   "creator": "XAi Community",
   "token": "0.eyJhbGci...",
   "time": 4.231
 }
 ```
 
-Gagal:
-
+**Response gagal:**
 ```json
 {
-  "success": false,
-  "error": "Token invalid or empty",
-  "time": 60.012
+  "status": false,
+  "message": "Pesan error"
 }
 ```
 
----
-
-## 📁 Screen Recording
-
-Kalau `record: true`, setiap sesi disimpan ke `recordDir` dengan format:
-
-```
-recordings/
-├── sitekey_0x4AAAAAAA__1747123456789.mp4   ← mode sitekey
-└── page_solve_1747123456789.mp4             ← mode page
-```
-
----
-
-## ⚙️ Cara Kerja
-
-### Cloudflare Solver
-
-1. Launch browser via `puppeteer-real-browser` dengan `turnstile: false`
-2. Navigate ke URL target
-3. Cek apakah `cf_clearance` sudah ada di cookies
-4. Kalau belum, deteksi tipe challenge dari HTML (`cType: '...'`)
-5. Cari iframe `challenges.cloudflare.com` lalu klik: checkbox → label → widget → body (fallback)
-6. Poll cookies sampai `cf_clearance` muncul atau timeout
-7. Return `cf_clearance`, semua cookies, dan `cookie_string` siap pakai
-
-### Turnstile Solver — Mode Sitekey (`solveWithSitekey`)
-
-1. Aktifkan request interception
-2. Intercept request ke URL target, balas dengan fake HTML yang berisi widget Turnstile
-3. `puppeteer-real-browser` dengan `turnstile: true` handle solve otomatis
-4. Token diambil dari input hidden `[name="cf-response"]`
-
-### Turnstile Solver — Mode Page (`solveFromPage`)
-
-1. Inject polling script via `evaluateOnNewDocument` yang cek `window.turnstile.getResponse()`
-2. Saat token tersedia, tulis ke input hidden `[name="cf-response"]`
-3. `waitForSelector` menunggu sampai token siap
-
----
+### `GET /`
+Health check — cek status solver dan daftar endpoint.
 
-## 🚀 Contoh Lengkap (`run.js`)
+## Penggunaan di Bot
 
 ```js
-const { solveCloudflare } = require('./cloudflare-solver');
-const TurnstileSolver      = require('./turnstile-solver');
-
-// Cloudflare challenge
-async function runCloudflare() {
-  const result = await solveCloudflare({
-    url: 'https://example.com',
-    headless: false,
-    timeout: 60,
-  });
-  console.log(result);
-}
-
-// Turnstile
-async function runTurnstile() {
-  const solver = new TurnstileSolver({ record: true });
-  try {
-    const res = await solver.solve('https://www.waifu2x.net', '0x4AAAAAABqlY7DKXMzoS81U');
-    console.log(res);
-  } finally {
-    await solver.cleanup();
-  }
-}
-
-(async () => {
-  // await runCloudflare();
-  await runTurnstile();
-})();
+const apiUrl = global.API(
+    'theresav',
+    '/bypass/turnstile-min',
+    {
+        url: 'https://izen.lol',
+        siteKey: '0x4AAAAAADNEi_2N24gpQqY0'
+    },
+    'apikey'
+);
 ```
 
----
+Atau langsung ke Space ini:
 
-## ⚠️ Disclaimer
+```
+https://kavion-cf.hf.space/bypass/turnstile-min?url=https://izen.lol&siteKey=0x4AAAAAADNEi_2N24gpQqY0
+```
 
-Tool ini dibuat untuk keperluan edukasi dan testing. Penggunaan untuk bypass proteksi tanpa izin pemilik situs adalah tanggung jawab pengguna sepenuhnya.
+## Environment Variables
 
----
+| Variabel | Deskripsi |
+|----------|-----------|
+| `API_KEY` | (Opsional) Kunci proteksi endpoint. Kosongkan jika publik. |
+| `PORT` | Port server (default: 7860) |
 
-## 📜 License
+## Disclaimer
 
-MIT License — Copyright (c) 2025 XAi Community
+Dibuat untuk keperluan edukasi dan testing. MIT License — XAi Community.

app.js

@@ -0,0 +1,102 @@
+'use strict';
+
+const express = require('express');
+const TurnstileSolver = require('./turnstile-solver');
+
+const app = express();
+const PORT = process.env.PORT || 7860;
+
+app.use(express.json());
+
+// Singleton solver — browser tetap hidup selama server berjalan
+const solver = new TurnstileSolver({
+    timeout: 90000,
+    record: false,
+    width: 1280,
+    height: 720,
+});
+
+// Inisialisasi browser saat startup
+let ready = false;
+(async () => {
+    try {
+        await solver.initialize();
+        ready = true;
+        console.log('[API] Solver ready.');
+    } catch (e) {
+        console.error('[API] Solver init failed:', e.message);
+    }
+})();
+
+/**
+ * GET /bypass/turnstile-min
+ * Query params:
+ *   - url      : URL target (wajib)
+ *   - siteKey  : Sitekey Turnstile (opsional, kalau tidak ada pakai mode page)
+ *   - apikey   : API key sederhana untuk proteksi (opsional, cek env API_KEY)
+ *
+ * Response (sukses):
+ *   { status: true, token: "...", time: 3.2 }
+ *
+ * Response (gagal):
+ *   { status: false, message: "..." }
+ */
+app.get('/bypass/turnstile-min', async (req, res) => {
+    // Cek API key kalau dikonfigurasi
+    const apiKey = process.env.API_KEY;
+    if (apiKey && req.query.apikey !== apiKey) {
+        return res.status(401).json({ status: false, message: 'Invalid API key.' });
+    }
+
+    const { url, siteKey } = req.query;
+
+    if (!url) {
+        return res.status(400).json({ status: false, message: 'Parameter "url" wajib diisi.' });
+    }
+
+    if (!ready) {
+        return res.status(503).json({ status: false, message: 'Solver belum siap, coba lagi sebentar.' });
+    }
+
+    try {
+        const result = await solver.solve(url, siteKey || null);
+
+        if (!result.success) {
+            return res.status(500).json({
+                status: false,
+                message: result.error || 'Gagal mendapatkan token Turnstile.',
+                time: result.time,
+            });
+        }
+
+        return res.json({
+            status: true,
+            creator: 'XAi Community',
+            token: result.token,
+            time: result.time,
+        });
+    } catch (e) {
+        return res.status(500).json({ status: false, message: e.message });
+    }
+});
+
+// Health check
+app.get('/', (req, res) => {
+    res.json({
+        status: 'ok',
+        ready,
+        endpoints: [
+            'GET /bypass/turnstile-min?url=<URL>&siteKey=<SITEKEY>&apikey=<KEY>',
+        ],
+    });
+});
+
+app.listen(PORT, '0.0.0.0', () => {
+    console.log(`[API] Server jalan di port ${PORT}`);
+});
+
+// Cleanup saat proses mati
+process.on('SIGTERM', async () => {
+    await solver.cleanup();
+    process.exit(0);
+});

package.json

@@ -0,0 +1,18 @@
+{
+  "name": "cloudflare-solver-api",
+  "version": "1.0.0",
+  "description": "Self-hosted Turnstile solver API — pengganti API Turnstile eksternal",
+  "main": "app.js",
+  "scripts": {
+    "start": "node app.js",
+    "dev": "node app.js"
+  },
+  "dependencies": {
+    "express": "^4.19.2",
+    "puppeteer-real-browser": "^1.3.5",
+    "puppeteer-screen-recorder": "^3.0.6"
+  },
+  "engines": {
+    "node": ">=18"
+  }
+}