[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_107":108,"_109":110},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","StonedSheamus","name","dnd-twitch-bot","path","main.ts","project",{"_22":46,"_11":12,"_33":47,"_48":-5,"_49":42,"_50":51,"_52":51,"_53":54,"_55":-5,"_56":57,"_58":-5,"_59":42,"_60":-5,"_61":-5,"_62":63,"_64":65,"_66":67,"_68":69,"_70":71,"_72":-5,"_73":74,"_75":74,"_76":77,"_78":77,"_79":77,"_80":74,"_81":74,"_82":83,"_84":85,"_86":87,"_88":42},"file",{"_22":23,"_11":14,"_24":25,"_26":-5,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_13":45},"permalink","https://www.val.town/x/StonedSheamus/dnd-twitch-bot/code/main.ts","extension","id","56a529b3-caed-4063-b937-3f89cd5ab450","fileId","6b349c48-a4d9-11f1-b9f9-1607ee4eb77e","parentId","branchId","05246ac8-a272-4b74-b48a-34d91555f75d","branchVersion",507,"latest",true,"createdAt",["D",1789335872287],"version",80,"fileType","http","content","// GuildScribe — Twitch D&D bot entry point\n// Val Town / Deno HTTP handler\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nimport {\n ensureTables,\n getCharacter,\n saveCharacter,\n adjustHp,\n backupCharacter,\n loadBackup,\n resetCharacter,\n getConnections,\n isChannelEnabled,\n setChannelEnabled,\n recordActivity,\n getRecentLogs,\n getBroadcaster,\n getBroadcasterByLogin,\n getOrCreateDashboardKey,\n regenerateDashboardKey,\n markBroadcasterDisconnected,\n disconnectBroadcasterData,\n purgeChannelData,\n isChannelBlocked,\n blockChannel,\n unblockChannel,\n recordMonitorEvent,\n getMerchantCronStatus,\n getMerchantOverview,\n getMonitorEvents,\n checkCommandRateLimit,\n checkGoodnightCooldown,\n claimEventSubMessage,\n queueEventSubCancellation,\n getPendingEventSubCancellations,\n clearPendingEventSubCancellation,\n saveExtraEventSubSubscription,\n getExtraEventSubSubscriptions,\n deleteExtraEventSubSubscriptions,\n getMap,\n getMapCells,\n getMapTokens,\n listMaps,\n saveCreationSession,\n isCommandGroupEnabled,\n} from \"./db.ts\";\nimport {\n ensureSocialTables,\n recordDiceRollEvent,\n getDiceLeaderboard,\n getDiceStatsForUser,\n} from \"./social_db.ts\";\nimport { handleMapCommand } from \"./maps.ts\";\nimport { handleMerchantCommand } from \"./merchant.ts\";\nimport { handleAdCommand } from \"./ads.ts\";\nimport {\n disconnectAdToken,\n ensureAdTables,\n purgeAdData,\n saveBroadcasterAdToken,\n} from \"./ads_db.ts\";\nimport { handleOracleCommand } from \"./oracle.ts\";\nimport { handleChronicleCommand, maybeChronicleQuote, recordChronicleBotMessage } from \"./chronicle.ts\";\nimport { handleNpcCommand, maybeNpcChatter, recordNpcChatterBotMessage } from \"./npcs.ts\";\nimport {\n handleCustomCommandManagement,\n handleCustomCommandInvocation,\n handleTriggerMatch,\n} from \"./customcommands.ts\";\nimport { handleTimedMessageCommand } from \"./timedmessages.ts\";\nimport {\n handleDashboardCommand,\n renderDashboard,\n handleDashboardLogin,\n handleDashboardCallback,\n handleDashboardCommandsForm,\n handleDashboardTriggersForm,\n handleDashboardTimedMessagesForm,\n handleDashboardFeaturesForm,\n} from \"./dashboard.ts\";\nimport {\n generateCharacter,\n handleCreationCommand,\n adjustLevel,\n} from \"./characters.ts\";\nimport {\n handleDuelCommand,\n handleMonsterDuelCommand,\n handlePartyCommand,\n handlePartyDuelCommand,\n handleInitiativeCommand,\n} from \"./combat.ts\";\nimport { lookup5e, formatSpellSections, formatLookup } from \"./lookups.ts\";\nimport {\n env,\n sendChatMessage,\n sendChatMessages,\n sendSpellSections,\n exchangeCode,\n createChatSubscription,\n createSubEventSubscriptions,\n createRaidEventSubscription,\n verifyEventSub,\n deleteEventSubSubscription,\n} from \"./twitch.ts\";\nimport {\n formatRaceName,\n formatStatLine,\n escapeHtml,\n rollDice,\n rollFate,\n rollHug,\n rollNewSubThankYou,\n rollResubThankYou,\n rollGiftSubThankYou,\n rollGiftedSubWelcome,\n rollRaidThankYou,\n resolveCheckKind,\n modifier,\n isBotAccount,\n hasModeratorBadge,\n logRowText,\n isGoodnightMessage,\n goodnightReply,\n groupForCommand,\n} from \"./utils.ts\";\nimport { classes } from \"./data.ts\";\nimport { page, renderCharacterPage, renderGuidePage, renderMapPage, renderMapListPage, renderAdminLogsPage } from \"./pages.ts\";\nimport { rollBG3Character, rollBG3Companion, rollBG3Origin, rollBG3Loot, rollBG3Camp, handleBg3Command } from \"./bg3.ts\";\nimport { findBg3Entry, formatBg3Entry, parseBg3LookupQuery, bg3CategoryList } from \"./bg3lookup.ts\";\n\n// Public HTTP trigger URL for this val (used for guide links in chat).\n// OAuth redirects and character page links still use the request origin dynamically.\nconst PUBLIC_BASE_URL = Deno.env.get(\"PUBLIC_BASE_URL\") ?? \"https://guildscribe.val.run\";\n\n// Durable per-channel/user throttling is stored in SQLite so it survives restarts\n// and remains consistent if the deployment scales beyond one warm instance.\nconst COMMAND_COOLDOWN_MS = Math.max(250, Number(Deno.env.get(\"COMMAND_COOLDOWN_MS\") ?? \"1200\"));\nconst GOODNIGHT_COOLDOWN_MS = Math.max(30_000, Number(Deno.env.get(\"GOODNIGHT_COOLDOWN_MS\") ?? \"300000\"));\n\nasync function retryPendingEventSubCancellations() {\n const pending = await getPendingEventSubCancellations(5);\n for (const row of pending) {\n try {\n await deleteEventSubSubscription(String(row.subscription_id));\n await clearPendingEventSubCancellation(String(row.subscription_id));\n await recordMonitorEvent(\"eventsub_delete_retry_ok\", `${row.broadcaster_id}:${row.subscription_id}`);\n } catch (e) {\n await queueEventSubCancellation(String(row.subscription_id), String(row.broadcaster_id), String(e));\n await recordMonitorEvent(\"eventsub_delete_retry_error\", `${row.broadcaster_id}:${String(e)}`);\n }\n }\n}\n\nasync function sendWelcomeMessage(display: string, broadcasterId: string) {\n await sendChatMessages(\n `@${display} Welcome to the Guild Hall, adventurer! 📜 Create your legend with !createchar or !newchar, check your parchment with !char, gather a company with !party create , and consult the archives with !dndbothelp. Full guild codex: ${PUBLIC_BASE_URL}/guide`,\n broadcasterId,\n );\n}\n\nasync function handleRequest(req: Request): Promise {\n await ensureTables();\n await ensureAdTables();\n await ensureSocialTables();\n const url = new URL(req.url);\n const path = url.pathname;\n\n // ── Static / GET routes ──\n // NOTE: activity logs are intentionally NOT exposed as a public web route.\n // They contain per-channel usernames and command text; the only way to see\n // them is the in-chat `!logs` command, which is restricted to the\n // broadcaster/moderators of that specific channel (see below).\n if (req.method === \"GET\" && path === \"/healthz\") {\n try {\n try { await retryPendingEventSubCancellations(); } catch (e) { await recordMonitorEvent(\"eventsub_retry_loop_error\", String(e)); }\n await sqlite.execute(\"SELECT 1\");\n return new Response(JSON.stringify({ ok: true, service: \"GuildScribe\", time: new Date().toISOString() }), {\n headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" },\n });\n } catch (e) {\n await recordMonitorEvent(\"health_error\", String(e));\n return new Response(JSON.stringify({ ok: false }), { status: 503, headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" } });\n }\n }\n if (req.method === \"GET\" && path === \"/privacy\") {\n return page(\"GuildScribe Privacy Policy\", `

GuildScribe Privacy Policy

GuildScribe receives Twitch usernames/user IDs, channel IDs, command text, character/party/gameplay data, and basic connection/subscription state when a channel connects the bot.

How it is used

Data is used only to operate the Twitch bot, keep characters and parties working, troubleshoot abuse/errors, and provide channel activity logs to that channel's broadcaster/moderators.

Retention

Activity logs are kept for up to 90 days and are capped at 5,000 rows per channel. Character and party data remains while a channel uses GuildScribe unless the channel requests deletion. OAuth state records expire after 10 minutes. Connection records are removed when a channel disconnects.

Deletion

The connected broadcaster can use !dndbot leave purge to disconnect and request deletion of that channel's stored characters, parties, logs, and gameplay state. For other deletion requests, contact ${escapeHtml(Deno.env.get(\"SUPPORT_URL\") ?? \"the project operator through the support link on the home page\")}.

Return to GuildScribe

`);\n }\n if (req.method === \"GET\" && (path === \"/terms\" || path === \"/tos\")) {\n return page(\"GuildScribe Terms of Service\", `

GuildScribe Terms of Service

GuildScribe is a fan-made Twitch utility for D&D-style character and chat gameplay. Use it lawfully and respectfully, and follow Twitch's rules and the streamer/channel's rules.

Do not use the bot to harass, spam, abuse, evade moderation, or interfere with other users. Channel owners are responsible for deciding whether the bot is appropriate for their community.

The service may be changed, limited, suspended, or removed at any time. Gameplay data and generated results are not guaranteed to be preserved.

Report abuse or request account/channel assistance through the support contact on the home page.

Return to GuildScribe

`);\n }\n if (req.method === \"GET\" && (path === \"/guide\" || path === \"/commands\")) {\n return page(\n \"GuildScribe Codex\",\n `

GuildScribe Codex

The guild’s book of rites — every command for adventurers at the table.

${renderGuidePage()}`,\n );\n }\n if (req.method === \"GET\" && (path === \"/donate\" || path === \"/donations\")) {\n return page(\n \"Support the Guild\",\n `

Support the Guild

If GuildScribe has served your campaign, you can leave a tribute so the scribes may keep the halls open.

Ethereum (ETH)

0x422413678AdFC67d3d9AB545FE4e1ec1D00197fd

Send ETH on the Ethereum network. Verify the address and network in your wallet before confirming.

Bitcoin (BTC)

3JYo1Vwyh6aQENzXoi16rA9mXZuZQVL1rN

Send BTC on the Bitcoin network. Verify the address carefully before confirming.

Return to the Guild Hall

`,\n );\n }\n\n if (req.method === \"GET\" && path === \"/connect\") {\n const state = crypto.randomUUID();\n await sqlite.execute(\"INSERT INTO oauth_states (state,expires_at) VALUES (?,?)\", [\n state,\n Date.now() + 10 * 60 * 1000,\n ]);\n const auth = new URL(\"https://id.twitch.tv/oauth2/authorize\");\n auth.search = new URLSearchParams({\n client_id: env(\"TWITCH_CLIENT_ID\"),\n redirect_uri: `${url.origin}/callback`,\n response_type: \"code\",\n scope: \"channel:bot channel:read:subscriptions channel:read:ads\",\n state,\n }).toString();\n return Response.redirect(auth.toString(), 302);\n }\n\n if (req.method === \"GET\" && path === \"/callback\") {\n const error = url.searchParams.get(\"error\");\n if (error) {\n return page(\n \"Twitch connection cancelled\",\n `

Connection cancelled

${escapeHtml(url.searchParams.get(\"error_description\") ?? error)}

`,\n );\n }\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n if (!code || !state) return new Response(\"Missing OAuth code or state\", { status: 400 });\n const check = await sqlite.execute(\"SELECT * FROM oauth_states WHERE state = ? AND expires_at > ?\", [\n state,\n Date.now(),\n ]);\n if (!check.rows.length) return new Response(\"Invalid or expired OAuth state\", { status: 400 });\n await sqlite.execute(\"DELETE FROM oauth_states WHERE state = ?\", [state]);\n try {\n const token = await exchangeCode(code, `${url.origin}/callback`);\n const userRes = await fetch(\"https://api.twitch.tv/helix/users\", {\n headers: {\n Authorization: `Bearer ${token.access_token}`,\n \"Client-Id\": env(\"TWITCH_CLIENT_ID\"),\n },\n });\n if (!userRes.ok) throw new Error(`Could not identify broadcaster: ${userRes.status}`);\n const user = (await userRes.json()).data[0];\n\n // Reconnecting an already-connected channel (e.g. to pick up a newly\n // requested scope) would otherwise try to create a duplicate\n // channel.chat.message subscription with the same type/condition/\n // callback, which Twitch rejects — clean up anything from a prior\n // connection first so this is safe to run repeatedly.\n const existing = await getBroadcaster(user.id);\n if (existing) {\n if (existing.subscription_id) {\n try {\n await deleteEventSubSubscription(String(existing.subscription_id));\n } catch (e) {\n await recordMonitorEvent(\"eventsub_reconnect_cleanup_failed\", `${user.id}: ${String(e)}`);\n }\n }\n for (const extra of await getExtraEventSubSubscriptions(user.id)) {\n try {\n await deleteEventSubSubscription(extra.subscription_id);\n } catch (e) {\n await recordMonitorEvent(\"eventsub_reconnect_cleanup_failed\", `${user.id}: ${extra.kind}: ${String(e)}`);\n }\n }\n await deleteExtraEventSubSubscriptions(user.id);\n }\n\n const sub = await createChatSubscription(user.id, url.origin);\n await sqlite.execute(\n \"INSERT OR REPLACE INTO broadcasters (broadcaster_id,login,display_name,subscription_id,connected_at,connected,disconnected_at,disconnect_reason) VALUES (?,?,?,?,?,?,?,?)\",\n [user.id, user.login, user.display_name, sub.id, Date.now(), 1, null, null],\n );\n // Best-effort: powers !adcheck's real Twitch ad-schedule lookup.\n // Requires channel:read:ads, now requested above, but a save failure\n // here should never block the core chat connection — !adcheck simply\n // falls back to the manually-logged !adslogged timestamp until the\n // channel reconnects.\n try {\n await saveBroadcasterAdToken(\n user.id,\n token.access_token,\n token.refresh_token,\n Array.isArray(token.scope) ? token.scope.join(\" \") : String(token.scope ?? \"\"),\n Date.now() + Math.max(0, Number(token.expires_in ?? 0) * 1000 - 60_000),\n );\n } catch (e) {\n await recordMonitorEvent(\"ad_token_save_failed\", `${user.id}: ${String(e)}`);\n }\n // Best-effort: powers the D&D-themed !hug-style new-sub/resub thank\n // you. Requires channel:read:subscriptions, which is now requested\n // above, but shouldn't block the core chat connection if it fails\n // (e.g. a re-auth that hasn't re-granted the scope yet).\n try {\n const { newSub, resub, gift } = await createSubEventSubscriptions(user.id, url.origin);\n await saveExtraEventSubSubscription(user.id, \"sub\", newSub.id);\n await saveExtraEventSubSubscription(user.id, \"resub\", resub.id);\n await saveExtraEventSubSubscription(user.id, \"gift\", gift.id);\n } catch (e) {\n await recordMonitorEvent(\"eventsub_sub_subscription_failed\", `${user.id}: ${String(e)}`);\n }\n // Best-effort: powers the D&D-themed raid thank-you. channel.raid\n // needs no extra OAuth scope (to_broadcaster_user_id is public data),\n // so this should reliably succeed, but it's kept non-blocking and\n // independent of the sub subscriptions above just in case.\n try {\n const raidSub = await createRaidEventSubscription(user.id, url.origin);\n await saveExtraEventSubSubscription(user.id, \"raid\", raidSub.id);\n } catch (e) {\n await recordMonitorEvent(\"eventsub_raid_subscription_failed\", `${user.id}: ${String(e)}`);\n }\n return page(\n \"Twitch connected\",\n existing\n ? `

The Guild renews your banner

${escapeHtml(user.display_name)}'s connection to GuildScribe has been refreshed — any new permissions are now granted.

Open the Guild Codex

`\n : `

The Guild accepts your banner

${escapeHtml(user.display_name)} is now connected to GuildScribe. The scribes will answer in that channel once the EventSub rite is complete.

Important: In Twitch chat, run /mod GuildScribeBot so the guild can hear and answer reliably.

Open the Guild Codex

`,\n );\n } catch (e) {\n console.error(e);\n await recordMonitorEvent(\"oauth_callback_failed\", String(e));\n return page(\"Connection failed\", `

Connection failed

GuildScribe could not complete the Twitch connection. Please try again or use the support link on the home page.

`);\n }\n }\n\n if (req.method === \"GET\" && path === \"/maps\") {\n const channelId = url.searchParams.get(\"channel\");\n if (!channelId || !/^\\d+$/.test(channelId)) return new Response(\"Missing or invalid channel.\", { status: 400 });\n const broadcaster = await getBroadcaster(channelId);\n if (!broadcaster || Number(broadcaster.connected) !== 1) return new Response(\"Maps unavailable for this channel.\", { status: 404 });\n const maps = await listMaps(channelId);\n return new Response(renderMapListPage(maps, channelId, PUBLIC_BASE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"GET\" && path === \"/map\") {\n const channelId = url.searchParams.get(\"channel\");\n const mapName = url.searchParams.get(\"map\");\n if (!channelId || !/^\\d+$/.test(channelId)) return new Response(\"Missing or invalid channel.\", { status: 400 });\n if (!mapName) return new Response(\"Missing map name.\", { status: 400 });\n const broadcaster = await getBroadcaster(channelId);\n if (!broadcaster || Number(broadcaster.connected) !== 1) return new Response(\"Map unavailable for this channel.\", { status: 404 });\n const map = await getMap(channelId, mapName);\n if (!map) return new Response(\"No map found with that name in this channel.\", { status: 404 });\n const [cells, tokens] = await Promise.all([getMapCells(channelId, mapName), getMapTokens(channelId, mapName)]);\n return new Response(renderMapPage(map, cells, tokens, PUBLIC_BASE_URL), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n // Per-channel dashboard for custom commands/chat triggers/timed messages\n // (see dashboard.ts). Capability-token auth via ?key=, handed out in chat\n // with !dashboard — not an operator route, so no ADMIN_API_SECRET here.\n // Also requires a live Twitch-login mod session cookie; renderDashboard\n // shows a login gate instead of the real page when that's missing.\n if (req.method === \"GET\" && path === \"/dashboard\") {\n return await renderDashboard(url.searchParams.get(\"channel\"), url.searchParams.get(\"key\"), req.headers.get(\"Cookie\"), url.origin, {\n notice: url.searchParams.get(\"notice\") ?? undefined,\n error: url.searchParams.get(\"error\") ?? undefined,\n });\n }\n if (req.method === \"GET\" && path === \"/dashboard/login\") {\n return await handleDashboardLogin(url.searchParams.get(\"channel\"), url.searchParams.get(\"key\"), url.origin);\n }\n if (req.method === \"GET\" && path === \"/dashboard/callback\") {\n return await handleDashboardCallback(\n url.searchParams.get(\"code\"),\n url.searchParams.get(\"state\"),\n url.searchParams.get(\"error\"),\n url.origin,\n );\n }\n\n // Operator-only visibility into the open-stall merchant cron: is it\n // ticking, and did the last tick post cleanly? Backed by\n // merchant_cron_status (one row, updated every tick) plus the most recent\n // merchant-related monitor_events for error detail/history.\n // NOTE: these two admin routes must stay above the generic `if\n // (req.method === \"GET\")` catch-all just below — that block matches any\n // GET request regardless of path, so anything placed after it is\n // unreachable (this previously broke both admin routes silently: they\n // fell through to the homepage instead of running).\n if (req.method === \"GET\" && path === \"/admin/merchant/status\") {\n const secret = Deno.env.get(\"ADMIN_API_SECRET\");\n const auth = req.headers.get(\"Authorization\") ?? \"\";\n if (!secret || secret.length < 32 || auth !== `Bearer ${secret}`) {\n return new Response(\"Unauthorized\", { status: 401, headers: { \"Cache-Control\": \"no-store\" } });\n }\n const status = await getMerchantCronStatus();\n const recentEvents = await getMonitorEvents(\"merchant\", 25);\n const now = Date.now();\n const lastRunAt = status ? Number((status as any).last_run_at ?? 0) : 0;\n // No CRON schedule is stored here (that lives in Val Town's UI), so\n // \"stale\" is a heuristic: no successful tick in the last 20 minutes,\n // which comfortably exceeds any sane Val Town cron interval.\n const staleMs = 20 * 60_000;\n const stale = !lastRunAt || now - lastRunAt > staleMs;\n return new Response(\n JSON.stringify({\n ok: !stale && (!status || Number((status as any).last_posts_failed ?? 0) === 0),\n stale,\n seconds_since_last_run: lastRunAt ? Math.round((now - lastRunAt) / 1000) : null,\n status,\n recent_events: recentEvents,\n }),\n { headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" } },\n );\n }\n\n // Operator-only, browser-viewable logs page: merchant cron health,\n // per-channel merchant diagnostics, and recent monitor_events, all in one\n // place instead of digging through raw JSON or Val Town's run history.\n // Browsers can't set an Authorization header on a plain navigation, so\n // this accepts the same secret as a ?key= query param instead (still\n // requires ADMIN_API_SECRET, still never logged anywhere but here).\n if (req.method === \"GET\" && path === \"/admin/logs\") {\n const secret = Deno.env.get(\"ADMIN_API_SECRET\");\n const auth = req.headers.get(\"Authorization\") ?? \"\";\n // NOTE: deliberately NOT using url.searchParams.get(\"key\") here.\n // URLSearchParams follows the application/x-www-form-urlencoded\n // convention where a literal \"+\" in the query string is decoded as a\n // space — so a secret containing \"+\" (common in random base64-ish\n // secrets) would silently fail to match after that decoding, even\n // though the key pasted into the URL was correct. Extracting it by hand\n // and decoding only %XX escapes (via decodeURIComponent, which leaves\n // \"+\" alone) avoids that trap.\n const keyMatch = url.search.slice(1).match(/(?:^|&)key=([^&]*)/);\n const keyParam = keyMatch ? decodeURIComponent(keyMatch[1]) : \"\";\n const authorized = !!secret && secret.length >= 32 && (auth === `Bearer ${secret}` || keyParam === secret);\n if (!authorized) {\n return new Response(\"Unauthorized. Append ?key= to the URL.\", {\n status: 401,\n headers: { \"Cache-Control\": \"no-store\" },\n });\n }\n const kindFilter = url.searchParams.get(\"kind\") ?? \"\";\n const [status, overview, events] = await Promise.all([\n getMerchantCronStatus(),\n getMerchantOverview(),\n getMonitorEvents(kindFilter || undefined, 100),\n ]);\n const body = renderAdminLogsPage({ status, overview, events, kindFilter, key: keyParam });\n return new Response(\n `GuildScribe Operator Logs${body}`,\n { headers: { \"Content-Type\": \"text/html; charset=utf-8\", \"Cache-Control\": \"no-store\" } },\n );\n }\n\n // Operator escape hatch: mint/fetch a channel's dashboard link without\n // needing the bot online in chat — !dashboard (dashboard.ts) is the normal\n // path, but that requires a live Twitch chat listener, so it's useless\n // exactly when someone most wants to check in (bot down/disconnected).\n // Same auth as /admin/logs: Bearer header or ?key=, hand-decoded to dodge\n // the \"+\" -> space query-string trap (see note on /admin/logs above).\n // channel= accepts either the numeric broadcaster_id or the Twitch login.\n if (req.method === \"GET\" && path === \"/admin/dashboard-link\") {\n const secret = Deno.env.get(\"ADMIN_API_SECRET\");\n const auth = req.headers.get(\"Authorization\") ?? \"\";\n const keyMatch = url.search.slice(1).match(/(?:^|&)key=([^&]*)/);\n const keyParam = keyMatch ? decodeURIComponent(keyMatch[1]) : \"\";\n const authorized = !!secret && secret.length >= 32 && (auth === `Bearer ${secret}` || keyParam === secret);\n if (!authorized) {\n return new Response(\"Unauthorized. Append ?key= to the URL.\", {\n status: 401,\n headers: { \"Cache-Control\": \"no-store\" },\n });\n }\n const channelParam = url.searchParams.get(\"channel\");\n if (!channelParam) {\n return new Response(\"Missing ?channel=.\", { status: 400 });\n }\n const broadcaster = /^\\d+$/.test(channelParam)\n ? await getBroadcaster(channelParam)\n : await getBroadcasterByLogin(channelParam);\n if (!broadcaster) {\n return new Response(\"No channel found for that id/login.\", { status: 404, headers: { \"Cache-Control\": \"no-store\" } });\n }\n const broadcasterId = (broadcaster as any).broadcaster_id as string;\n const reset = url.searchParams.get(\"reset\") === \"1\";\n const dashKey = reset ? await regenerateDashboardKey(broadcasterId) : await getOrCreateDashboardKey(broadcasterId);\n const link = `${url.origin}/dashboard?channel=${broadcasterId}&key=${dashKey}`;\n // Default behavior: redirect straight to the live dashboard page, since\n // that's what someone opening this in a browser actually wants. Append\n // &json=1 to get the {ok, broadcaster_id, login, link} JSON instead\n // (e.g. for scripting/automation).\n if (url.searchParams.get(\"json\") === \"1\") {\n return new Response(\n JSON.stringify({ ok: true, broadcaster_id: broadcasterId, login: (broadcaster as any).login ?? null, link }),\n { headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" } },\n );\n }\n return new Response(null, { status: 302, headers: { Location: link, \"Cache-Control\": \"no-store\" } });\n }\n\n // NOTE: the block below matches *any* GET request that reaches this point\n // (it only checks req.method, not path) so it must stay below every other\n // specific GET route above it, including /map and /maps — otherwise it\n // swallows those requests and returns \"Missing character user.\"\n if (req.method === \"GET\") {\n const username = url.searchParams.get(\"user\");\n const channelId = url.searchParams.get(\"channel\");\n if (!username && !channelId) {\n return page(\n \"D&D Twitch Bot\",\n `

GuildScribe

A D&D guild hall for Twitch — characters, dice, duels, and the codex of rules.

Raise the Guild Banner in My Channel

After joining: mod the bot with /mod GuildScribeBot so the scribes can speak.

Already connected? If GuildScribe has gained new features since you joined, reconnect your channel to grant any newly requested permissions. This is safe to do any time and won't duplicate or lose your existing data.

Open the Guild Codex · Support the Guild${Deno.env.get(\"SUPPORT_URL\") ? ` · Support / Contact` : \"\"}

`,\n );\n }\n if (!username) return new Response(\"Missing character user.\", { status: 400 });\n if (!channelId || !/^\\d+$/.test(channelId)) return new Response(\"Missing or invalid channel.\", { status: 400 });\n const broadcaster = await getBroadcaster(channelId);\n if (!broadcaster || Number(broadcaster.connected) !== 1) return new Response(\"Character page unavailable for this channel.\", { status: 404 });\n const c = await getCharacter(username.toLowerCase(), channelId);\n if (!c) return new Response(\"No character found for that user in this channel.\", { status: 404 });\n return new Response(renderCharacterPage(c), {\n headers: { \"Content-Type\": \"text/html; charset=utf-8\" },\n });\n }\n\n if (req.method === \"POST\" && path.startsWith(\"/admin/channels/\")) {\n const secret = Deno.env.get(\"ADMIN_API_SECRET\");\n const auth = req.headers.get(\"Authorization\") ?? \"\";\n if (!secret || secret.length < 32 || auth !== `Bearer ${secret}`) return new Response(\"Unauthorized\", { status: 401, headers: { \"Cache-Control\": \"no-store\" } });\n const match = path.match(/^\\/admin\\/channels\\/(\\d+)\\/(disable|enable)$/);\n if (!match) return new Response(\"Not found\", { status: 404 });\n const broadcasterId = match[1];\n if (match[2] === \"disable\") {\n await blockChannel(broadcasterId, \"operator override\");\n await recordMonitorEvent(\"operator_disable\", broadcasterId);\n return new Response(JSON.stringify({ ok: true, broadcaster_id: broadcasterId, blocked: true }), { headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" } });\n }\n await unblockChannel(broadcasterId);\n await recordMonitorEvent(\"operator_enable\", broadcasterId);\n return new Response(JSON.stringify({ ok: true, broadcaster_id: broadcasterId, blocked: false }), { headers: { \"Content-Type\": \"application/json\", \"Cache-Control\": \"no-store\" } });\n }\n\n // Per-channel web dashboard for custom commands/triggers/timed messages —\n // see dashboard.ts. Auth is the dashboard_key form field, not an operator\n // secret, so unlike /admin/* above these don't check ADMIN_API_SECRET.\n if (req.method === \"POST\" && path === \"/dashboard/commands\") {\n return await handleDashboardCommandsForm(await req.formData(), url.origin, req.headers.get(\"Cookie\"));\n }\n if (req.method === \"POST\" && path === \"/dashboard/triggers\") {\n return await handleDashboardTriggersForm(await req.formData(), url.origin, req.headers.get(\"Cookie\"));\n }\n if (req.method === \"POST\" && path === \"/dashboard/timedmessages\") {\n return await handleDashboardTimedMessagesForm(await req.formData(), url.origin, req.headers.get(\"Cookie\"));\n }\n if (req.method === \"POST\" && path === \"/dashboard/features\") {\n return await handleDashboardFeaturesForm(await req.formData(), url.origin, req.headers.get(\"Cookie\"));\n }\n\n if (req.method !== \"POST\") return new Response(\"OK\");\n\n // ── EventSub webhook ──\n const rawBody = await req.text();\n if (!(await verifyEventSub(req, rawBody))) return new Response(\"Invalid signature\", { status: 403 });\n const messageId = req.headers.get(\"Twitch-Eventsub-Message-Id\") ?? \"\";\n if (!(await claimEventSubMessage(messageId))) return new Response(\"OK\");\n const messageType = req.headers.get(\"Twitch-Eventsub-Message-Type\");\n const body = JSON.parse(rawBody);\n\n if (messageType === \"webhook_callback_verification\") {\n return new Response(body.challenge, { headers: { \"Content-Type\": \"text/plain\" } });\n }\n\n if (messageType === \"notification\") {\n const subscriptionType = String(body.subscription?.type ?? \"\");\n\n if (\n subscriptionType === \"channel.subscribe\" ||\n subscriptionType === \"channel.subscription.message\" ||\n subscriptionType === \"channel.subscription.gift\"\n ) {\n const subBroadcasterId: string = body.event?.broadcaster_user_id ?? \"\";\n const subUserLogin: string = body.event?.user_login ?? \"\";\n const subDisplay: string = body.event?.user_name ?? subUserLogin;\n const tier: string | undefined = body.event?.tier;\n const isAnonymousGifter = subscriptionType === \"channel.subscription.gift\" && Boolean(body.event?.is_anonymous);\n if (!subBroadcasterId || (!isAnonymousGifter && isBotAccount(subUserLogin, body.event?.user_id ?? \"\", env(\"TWITCH_BOT_ID\")))) {\n return new Response(\"OK\");\n }\n const subConnection = await getBroadcaster(subBroadcasterId);\n if (!subConnection || Number(subConnection.connected) !== 1) return new Response(\"OK\");\n if (await isChannelBlocked(subBroadcasterId)) return new Response(\"OK\");\n if (!(await isChannelEnabled(subBroadcasterId))) return new Response(\"OK\");\n\n const thankYou =\n subscriptionType === \"channel.subscribe\"\n ? (body.event?.is_gift ? rollGiftedSubWelcome(subDisplay, tier) : rollNewSubThankYou(subDisplay, tier))\n : subscriptionType === \"channel.subscription.gift\"\n ? rollGiftSubThankYou(isAnonymousGifter ? null : subDisplay, Number(body.event?.total ?? 1), tier)\n : rollResubThankYou(subDisplay, Number(body.event?.cumulative_months ?? 1), tier);\n if (thankYou) await sendChatMessage(thankYou, subBroadcasterId);\n return new Response(\"OK\");\n }\n\n if (subscriptionType === \"channel.raid\") {\n // channel.raid fires on the *receiving* channel's condition\n // (to_broadcaster_user_id), so the \"from\" fields identify the raider.\n const raidBroadcasterId: string = body.event?.to_broadcaster_user_id ?? \"\";\n const raiderLogin: string = body.event?.from_broadcaster_user_login ?? \"\";\n const raiderId: string = body.event?.from_broadcaster_user_id ?? \"\";\n const raiderDisplay: string = body.event?.from_broadcaster_user_name ?? raiderLogin;\n const viewers = Number(body.event?.viewers ?? 0);\n if (!raidBroadcasterId || isBotAccount(raiderLogin, raiderId, env(\"TWITCH_BOT_ID\"))) {\n return new Response(\"OK\");\n }\n const raidConnection = await getBroadcaster(raidBroadcasterId);\n if (!raidConnection || Number(raidConnection.connected) !== 1) return new Response(\"OK\");\n if (await isChannelBlocked(raidBroadcasterId)) return new Response(\"OK\");\n if (!(await isChannelEnabled(raidBroadcasterId))) return new Response(\"OK\");\n await sendChatMessage(rollRaidThankYou(raiderDisplay, viewers), raidBroadcasterId);\n return new Response(\"OK\");\n }\n\n const chatMessage: string = body.event?.message?.text ?? \"\";\n const chatter: string = body.event?.chatter_user_login ?? \"\";\n const display: string = body.event?.chatter_user_name ?? chatter;\n const chatterId: string = body.event?.chatter_user_id ?? \"\";\n const moderatorId: string = body.event?.moderator_user_id ?? \"\";\n const eventBroadcasterId: string = body.event?.broadcaster_user_id ?? \"\";\n const broadcasterId: string = eventBroadcasterId;\n const isModerator =\n chatterId === broadcasterId ||\n chatterId === eventBroadcasterId ||\n chatterId === moderatorId ||\n hasModeratorBadge(body.event);\n const baseUrl = url.origin;\n\n if (isBotAccount(chatter, chatterId, env(\"TWITCH_BOT_ID\"))) {\n // Bot messages (Nightbot, StreamElements, GuildScribe itself, etc.)\n // never get processed as commands, quoted by the chronicle, or replied\n // to by random NPC chatter, but they still count as chat activity\n // toward each feature's own minimum-messages gate.\n await recordChronicleBotMessage(broadcasterId);\n await recordNpcChatterBotMessage(broadcasterId);\n return new Response(\"OK\");\n }\n\n // Only process events for an actively connected broadcaster. This makes a\n // stale EventSub subscription harmless after disconnect/offboarding.\n const connection = await getBroadcaster(broadcasterId);\n if (!connection || Number(connection.connected) !== 1) return new Response(\"OK\");\n\n // Operator blocklist always wins.\n if (await isChannelBlocked(broadcasterId)) return new Response(\"OK\");\n\n // Broadcaster-only disconnect/offboarding. `purge` additionally deletes channel data.\n const leaveMatch = chatMessage.trim().match(/^!dndbot\\s+leave(?:\\s+(purge))?$/i);\n if (leaveMatch) {\n if (chatterId !== broadcasterId && chatterId !== eventBroadcasterId) {\n await sendChatMessage(`@${display} only the broadcaster can disconnect GuildScribe.`, broadcasterId);\n return new Response(\"OK\");\n }\n const purge = Boolean(leaveMatch[1]);\n const connection = await getBroadcaster(broadcasterId);\n try {\n if (connection?.subscription_id) await deleteEventSubSubscription(String(connection.subscription_id));\n } catch (e) {\n await queueEventSubCancellation(String(connection.subscription_id), broadcasterId, String(e));\n await recordMonitorEvent(\"eventsub_delete_error\", `${broadcasterId}: cancellation queued for retry`);\n }\n for (const extra of await getExtraEventSubSubscriptions(broadcasterId)) {\n try {\n await deleteEventSubSubscription(extra.subscription_id);\n } catch (e) {\n await queueEventSubCancellation(extra.subscription_id, broadcasterId, String(e));\n await recordMonitorEvent(\"eventsub_delete_error\", `${broadcasterId}: ${extra.kind} cancellation queued for retry`);\n }\n }\n await sendChatMessage(`@${display} GuildScribe is disconnecting from this channel${purge ? \" and purging its stored guild data\" : \"\"}.`, broadcasterId);\n if (purge) {\n await purgeChannelData(broadcasterId);\n await purgeAdData(broadcasterId);\n } else {\n await disconnectBroadcasterData(broadcasterId, false);\n await disconnectAdToken(broadcasterId);\n }\n return new Response(\"OK\");\n }\n\n // Channel enable/disable toggle\n const botToggle = chatMessage.trim().match(/^!dndbot\\s+(on|off|status)$/i);\n if (botToggle) {\n if (!isModerator) {\n await sendChatMessage(\n `@${display} only the broadcaster or a moderator can change the bot setting.`,\n broadcasterId,\n );\n } else if (botToggle[1].toLowerCase() === \"status\") {\n await sendChatMessage(\n `@${display} The guild hall is currently ${(await isChannelEnabled(broadcasterId)) ? \"open\" : \"closed\"} in this channel.`,\n broadcasterId,\n );\n } else {\n const enabled = botToggle[1].toLowerCase() === \"on\";\n await setChannelEnabled(broadcasterId, enabled);\n await sendChatMessage(\n `@${display} The guild hall is now ${enabled ? \"open\" : \"closed\"} in this channel. ${enabled ? \"Adventurers may petition the scribes.\" : \"The doors are barred until a steward reopens them.\"}`,\n broadcasterId,\n );\n }\n return new Response(\"OK\");\n }\n\n if (!(await isChannelEnabled(broadcasterId))) return new Response(\"OK\");\n\n if (chatMessage.startsWith(\"!\")) {\n // Throttle non-mod command spam before it reaches any handler or the DB.\n if (!isModerator && !(await checkCommandRateLimit(broadcasterId, chatter, COMMAND_COOLDOWN_MS))) return new Response(\"OK\");\n const commandWord = chatMessage.split(/\\s+/)[0].toLowerCase();\n await recordActivity(chatter, broadcasterId, commandWord, chatMessage);\n // Dashboard-controlled feature groups (see COMMAND_GROUPS in\n // utils.ts). Silent no-op when disabled, same as the master\n // isChannelEnabled check just above — features with their own\n // dedicated toggle (market/chronicle/npc) and !dashboard itself are\n // deliberately excluded from COMMAND_GROUPS so they're unaffected.\n const group = groupForCommand(commandWord.replace(/^!/, \"\"));\n if (group && !(await isCommandGroupEnabled(broadcasterId, group))) return new Response(\"OK\");\n }\n\n // Command handlers (return true if handled)\n if (await handleCreationCommand(chatter, display, broadcasterId, chatMessage)) return new Response(\"OK\");\n if (await handleBg3Command(chatter, display, broadcasterId, chatMessage, baseUrl)) return new Response(\"OK\");\n if (await handleInitiativeCommand(chatMessage, broadcasterId, display, isModerator, chatter)) return new Response(\"OK\");\n if (await handlePartyCommand(chatMessage, chatter, display, broadcasterId)) return new Response(\"OK\");\n if (await handlePartyDuelCommand(chatMessage, chatter, display, broadcasterId)) return new Response(\"OK\");\n // Monster first: only claims exact \"!dndduel\" / \"!dndduel attack\" / \"!dndduel monster …\"\n // so player-vs-player \"!dndduel @user\" still falls through to handleDuelCommand.\n if (await handleMonsterDuelCommand(chatMessage, chatter, display, broadcasterId)) return new Response(\"OK\");\n if (await handleDuelCommand(chatMessage, chatter, display, broadcasterId)) return new Response(\"OK\");\n if (await handleMapCommand(chatMessage, chatter, display, broadcasterId, isModerator, baseUrl)) return new Response(\"OK\");\n if (await handleCustomCommandManagement(chatMessage, display, broadcasterId, isModerator)) return new Response(\"OK\");\n if (await handleTimedMessageCommand(chatMessage, display, broadcasterId, isModerator)) return new Response(\"OK\");\n if (await handleDashboardCommand(chatMessage, display, broadcasterId, isModerator, baseUrl)) return new Response(\"OK\");\n if (await handleMerchantCommand(chatMessage, display, broadcasterId, isModerator)) return new Response(\"OK\");\n if (await handleChronicleCommand(chatMessage, display, broadcasterId, isModerator)) return new Response(\"OK\");\n if (\n await handleNpcCommand(chatMessage, chatter, display, broadcasterId, isModerator)\n ) return new Response(\"OK\");\n if (\n await handleAdCommand(chatMessage, display, broadcasterId, isModerator, baseUrl)\n ) return new Response(\"OK\");\n if (await handleOracleCommand(chatMessage, chatter, display, broadcasterId)) return new Response(\"OK\");\n\n if (chatMessage === \"!logs\") {\n if (!isModerator) {\n await sendChatMessage(`@${display} only the broadcaster or a moderator can use !logs.`, broadcasterId);\n } else {\n const logs = await getRecentLogs(broadcasterId, 8);\n await sendChatMessages(\n logs.length\n ? `@${display} Recent activity: ${logs.reverse().map(logRowText).join(\" || \")}`\n : `@${display} no activity has been logged yet.`,\n broadcasterId,\n );\n }\n } else if (chatMessage === \"!connections\") {\n if (!isModerator) {\n await sendChatMessage(\n `@${display} only the broadcaster or a moderator can use !connections.`,\n broadcasterId,\n );\n } else {\n const names = await getConnections();\n await sendChatMessages(\n `@${display} Connected channels (${names.length}): ${names.length ? names.join(\", \") : \"none\"}`,\n broadcasterId,\n );\n }\n } else if (chatMessage === \"!help\") {\n await sendWelcomeMessage(display, broadcasterId);\n } else if (chatMessage === \"!link\" || chatMessage === \"!guide\") {\n await sendChatMessage(\n `@${display} 📜 Guild Codex (full command guide): ${PUBLIC_BASE_URL}/guide`,\n broadcasterId,\n );\n } else if (/^!dndbothelp(?:\\s+\\w+)?$/i.test(chatMessage)) {\n const category = chatMessage.split(/\\s+/)[1]?.toLowerCase();\n const help =\n category === \"dice\"\n ? \"🎲 Fate's dice: !d20 | !d20 @user | !roll | !r | !roll NdS[+/-M] (e.g. !roll 2d6+3) | !roll @user [NdS[+/-M]] | !roll saving throw (e.g. !roll dex) | !roll check (e.g. !roll stealth) — uses your saved character | !roll ? for a D&D-flavored yes/no verdict (e.g. !roll is enya going to die this time?) | !rollcall [nat1/nat20] [hour/day/week] for the natural 1/20 leaderboard, or !rollcall @user [hour/day/week] for one player's own nat1/nat20 counts | !oracle for the oracle to name a random recent chatter as the answer (e.g. !oracle who should stream next?) | !bg3roll for a random Baldur's Gate 3 style character | !bg3companion for a random BG3 companion match | !bg3origin to be cast as a random Origin Character | !bg3loot for a random BG3-style magic item drop | !bg3camp for a random camp-night vignette\"\n : category === \"settings\"\n ? \"🏛️ Guild stewards (mod/broadcaster): !dndbot on | !dndbot off | !dndbot status | !dndbot leave [purge] | !market on | !market off | !market status (off by default) | !help | !guide | !link\"\n : category === \"character\"\n ? \"⚔️ Adventurer's parchment: !createchar | !createchar @user (mod) | !newchar | !bg3 (random race/class, you choose BG3 point-buy scores) | !answer | !cancel | !char | !char @user | !levelup [+/-N] | !hp [+/-N] | !savechar | !loadchar | !resetchar\"\n : category === \"party\"\n ? \"🛡️ Guild company: !party create | !party join | !party invite @user [name] | !party accept/decline [name] | !party list [name] (roster + members) | !party leave | !party disband \"\n : category === \"combat\"\n ? \"⚔️ Arena & wilds: !dndduel @user (auto) | !dndduel classic @user | !dndduel accept/decline/attack/status/end | !dndduel (auto monster) | !dndduel monster (classic) | !dndduel party A B | !dndduel party classic A B | !dndduel party accept/decline/attack/status/end | !dndduel party hunt | !dndduel party hunt classic | !dndduel party hunt attack/status/end | !turn start | !turn roll | !turn add | !turn show | !turn next | !turn prev | !turn remove | !turn end\"\n : category === \"lookup\"\n ? \"📚 Guild archives: !spell [+N] | !item [+N] | !class | !feat | !ability | !race | !subrace | !monster | !rule | !rules (e.g. !spell fireball, !rules magic, !monster goblin) | !bg3lookup — BG3 companions/origins/classes/races/locations/factions/deities/villains/items (e.g. !bg3lookup astarion, !bg3lookup moonrise towers)\"\n : category === \"maps\"\n ? \"🗺️ Battle maps: !map create [WxH] [template] (mod) | !map templates | !map list | !map view | !map delete / !map remove (mod) | !map terrains | !map fill (mod) | !map paint (mod) | !map addchar [x y] | !map addchar @user [x y] (mod) | !map move | !map move @user (mod) | !map removechar [@user]\"\n : category === \"custom\"\n ? \"🛠️ Custom commands & triggers: !dndbot add | !dndbot edit | !dndbot remove | !dndbot cooldown | !dndbot list | !trigger add | !trigger remove | !trigger cooldown | !trigger list | !timedmsg add | !timedmsg edit | !timedmsg interval | !timedmsg enable/disable | !timedmsg remove | !timedmsg list | !dashboard [reset] (mod) get a web link to manage all of these — add/edit/remove/cooldown/interval/enable/disable are mod-only, list is open to everyone\"\n : `📜 Guild Codex chapters: dice | character | party | combat | lookup | maps | custom | settings. Example: !dndbothelp party — full book: ${PUBLIC_BASE_URL}/guide`;\n await sendChatMessages(`@${display} ${help}`, broadcasterId);\n } else if (/^!levelup(?:\\s+([+-]\\d+))?$/i.test(chatMessage)) {\n const match = chatMessage.match(/^!levelup(?:\\s+([+-]\\d+))?$/i)!;\n const delta = match[1] ? Number.parseInt(match[1], 10) : 1;\n const result = await adjustLevel(chatter, delta, broadcasterId);\n if (\"error\" in result) {\n const errorText =\n result.error === \"no character\"\n ? \"you don't have a character yet — try !createchar\"\n : result.error === \"max level\"\n ? \"you're already level 20\"\n : result.error === \"min level\"\n ? \"you're already level 1\"\n : \"use !levelup, !levelup +2, or !levelup -1\";\n await sendChatMessage(`@${display} ${errorText}`, broadcasterId);\n } else {\n const direction = result.delta > 0 ? \"advanced\" : \"reduced\";\n const hpChange = result.hpGain >= 0 ? `HP +${result.hpGain}` : `HP ${result.hpGain}`;\n await sendChatMessage(\n `@${display} level ${direction} from ${result.oldLevel} to ${result.c.level}; ${hpChange}, HP ${result.c.hpCurrent}/${result.c.hpMax}, Prof +${result.c.proficiency}.${result.asi}`,\n broadcasterId,\n );\n }\n } else if (/^!(spell|item|class|feat|ability|race|subrace|rule|rules|monster)(?:\\s+.*)?$/i.test(chatMessage)) {\n const match = chatMessage.match(\n /^!(spell|item|class|feat|ability|race|subrace|rule|rules|monster)(?:\\s+(.+?))?(?:\\s+\\+(\\d+))?$/i,\n )!;\n const kind = match[1].toLowerCase();\n const query = (match[2] ?? \"\").trim();\n const bonus = match[3] ? Math.min(20, Number.parseInt(match[3], 10)) : null;\n\n // Incomplete command — suggest syntax + examples\n if (!query) {\n const usage: Record = {\n spell: \"Usage: !spell [+N]. Example: !spell fireball or !spell cure wounds +1\",\n item: \"Usage: !item [+N]. Example: !item longsword or !item longsword +1\",\n class: \"Usage: !class . Example: !class wizard\",\n feat: \"Usage: !feat . Example: !feat alert\",\n ability: \"Usage: !ability . Example: !ability strength or !ability dex\",\n race: \"Usage: !race . Example: !race elf\",\n subrace: \"Usage: !subrace . Example: !subrace high elf\",\n rule: \"Usage: !rule . Example: !rule advantage or !rule casting a spell\",\n rules: \"Usage: !rules . Example: !rules magic or !rules combat\",\n monster: \"Usage: !monster . Example: !monster goblin or !monster adult red dragon\",\n };\n await sendChatMessage(`@${display} ${usage[kind] ?? `Usage: !${kind} `}`, broadcasterId);\n } else {\n const data = await lookup5e(kind, query);\n if (data && kind === \"spell\") {\n await sendSpellSections(formatSpellSections(data, bonus), display, broadcasterId);\n } else {\n const isRule = kind === \"rule\" || kind === \"rules\";\n const isMonster = kind === \"monster\";\n await sendChatMessages(\n data\n ? `@${display} ${formatLookup(kind, data, bonus)}`\n : `@${display} couldn't find that ${kind}. Try e.g. !spell fireball, !item longsword, or !rule advantage`,\n broadcasterId,\n isRule ? { maxParts: 3 } : isMonster ? { maxParts: 2 } : undefined,\n );\n }\n }\n } else if (/^!bg3lookup(?:\\s+.*)?$/i.test(chatMessage)) {\n const raw = chatMessage.replace(/^!bg3lookup\\s*/i, \"\").trim();\n if (!raw) {\n await sendChatMessage(\n `@${display} Usage: !bg3lookup . Example: !bg3lookup astarion or !bg3lookup shadow-cursed lands. Narrow by category with !bg3lookup (e.g. !bg3lookup faction zhentarim). Categories: ${bg3CategoryList()}`,\n broadcasterId,\n );\n } else {\n const { category, query: term } = parseBg3LookupQuery(raw);\n const entry = findBg3Entry(term, category);\n await sendChatMessages(\n entry\n ? `@${display} ${formatBg3Entry(entry)}`\n : `@${display} couldn't find \"${term}\" in the BG3 knowledgebase. Try e.g. !bg3lookup astarion, !bg3lookup moonrise towers, or !bg3lookup faction zhentarim`,\n broadcasterId,\n );\n }\n } else if (/^!(?:roll|r|d20)(?:\\s+.*)?$/i.test(chatMessage)) {\n // Support: !d20 | !d20 @user | !roll | !roll @user 2d6+3 | !r 4d8\n // | !roll dex (saving throw) | !roll stealth (skill check) — both pull\n // the modifier from the roller's (or @target's) saved character.\n let rest = chatMessage.replace(/^!(?:roll|r|d20)\\s*/i, \"\").trim();\n let rollTarget: string | null = null;\n const targetMatch = rest.match(/^@(\\S+)\\s*(.*)$/);\n if (targetMatch) {\n rollTarget = targetMatch[1].replace(/[,:]+$/, \"\");\n rest = targetMatch[2].trim();\n }\n\n const checkKind = rest ? resolveCheckKind(rest) : null;\n\n // Fate question: \"!roll is enya going to die this time?\" — only once rest\n // has already failed to resolve as a saving throw/skill check, isn't\n // targeted at another user (that path stays reserved for dice rolls),\n // and reads like a question rather than a mistyped ability/dice\n // expression (contains a space, or ends in \"?\").\n const isFateQuestion =\n !checkKind && !rollTarget && !!rest && !/^\\d+d\\d+([+-]\\d+)?$/i.test(rest) && (/\\s/.test(rest) || /\\?$/.test(rest));\n\n if (isFateQuestion) {\n await sendChatMessage(`@${display} ${rollFate(rest)}`, broadcasterId);\n } else {\n let expression: string;\n let label: string | undefined;\n let checkOwnerMissing: string | null = null;\n\n if (checkKind) {\n const owner = (rollTarget || chatter).toLowerCase();\n const c = await getCharacter(owner, broadcasterId);\n if (!c) {\n checkOwnerMissing = owner;\n expression = \"1d20\";\n } else {\n const abilityMod = modifier(c.scores[checkKind.ability]);\n const proficient = checkKind.type === \"save\" && classes[c.cls].savingThrows.includes(checkKind.ability);\n const total = abilityMod + (proficient ? c.proficiency : 0);\n expression = `1d20${total === 0 ? \"\" : total > 0 ? `+${total}` : `${total}`}`;\n label = checkKind.label;\n }\n } else {\n expression = rest || \"1d20\";\n }\n\n if (checkOwnerMissing) {\n await sendChatMessage(\n checkOwnerMissing === chatter\n ? `@${display} you don't have a character yet — try !createchar`\n : `@${display} @${checkOwnerMissing} doesn't have a character yet.`,\n broadcasterId,\n );\n } else {\n const result = rollDice(expression, label);\n if (!result) {\n await sendChatMessage(\n `@${display} that's not a valid roll — try !roll, !r, !d20, !roll 2d6+3, !roll dex, !roll stealth, or !roll ?`,\n broadcasterId,\n );\n } else {\n if (result.rawD20 === 20 || result.rawD20 === 1) {\n await recordDiceRollEvent(\n broadcasterId,\n chatter,\n display,\n result.rawD20 === 20 ? \"nat20\" : \"nat1\",\n );\n }\n if (rollTarget) {\n await sendChatMessage(`@${display} rolled for @${rollTarget}: ${result.text}`, broadcasterId);\n } else {\n await sendChatMessage(`@${display} ${result.text}`, broadcasterId);\n }\n }\n }\n }\n } else if (/^!rollcall(?:\\s+.*)?$/i.test(chatMessage)) {\n // !rollcall [nat1|nat20] [hour|day|week] — natural 1/20 standings\n // logged from !roll/!r/!d20 (see recordDiceRollEvent above). Kind\n // defaults to nat20; with no time frame given, shows a compact top-3\n // across all three windows in one line, otherwise a bigger top-5 for\n // just the requested window.\n //\n // !rollcall @user [hour|day|week] — one player's own nat1 AND nat20\n // counts instead of the channel-wide top list. No kind filter here\n // since the point is seeing both side by side for that person.\n const rawArgs = chatMessage.replace(/^!rollcall\\s*/i, \"\").trim();\n const targetMatch = rawArgs.match(/@(\\S+)/);\n const targetDisplay = targetMatch ? targetMatch[1].replace(/[,:]+$/, \"\") : null;\n const targetUser = targetDisplay ? targetDisplay.toLowerCase() : null;\n const lbWords = rawArgs.replace(/@\\S+/g, \"\").toLowerCase().split(/\\s+/).filter(Boolean);\n const windowMs: Record<\"hour\" | \"day\" | \"week\", number> = {\n hour: 60 * 60 * 1000,\n day: 24 * 60 * 60 * 1000,\n week: 7 * 24 * 60 * 60 * 1000,\n };\n const windowAliases: Record = {\n hour: \"hour\", \"1hr\": \"hour\", \"1h\": \"hour\",\n day: \"day\", \"1d\": \"day\",\n week: \"week\", \"1w\": \"week\",\n };\n const requestedWindow = lbWords.map((w) => windowAliases[w]).find(Boolean);\n\n if (targetUser) {\n if (requestedWindow) {\n const stats = await getDiceStatsForUser(broadcasterId, targetUser, Date.now() - windowMs[requestedWindow]);\n await sendChatMessage(\n `@${display} 🎲 @${targetDisplay}'s rolls (past ${requestedWindow}): 🌟 Nat20 x${stats.nat20} | 💀 Nat1 x${stats.nat1}`,\n broadcasterId,\n );\n } else {\n const [hourStats, dayStats, weekStats] = await Promise.all([\n getDiceStatsForUser(broadcasterId, targetUser, Date.now() - windowMs.hour),\n getDiceStatsForUser(broadcasterId, targetUser, Date.now() - windowMs.day),\n getDiceStatsForUser(broadcasterId, targetUser, Date.now() - windowMs.week),\n ]);\n await sendChatMessage(\n `@${display} 🎲 @${targetDisplay}'s rolls — 🌟 Nat20 (Hour ${hourStats.nat20}, Day ${dayStats.nat20}, Week ${weekStats.nat20}) | 💀 Nat1 (Hour ${hourStats.nat1}, Day ${dayStats.nat1}, Week ${weekStats.nat1})`,\n broadcasterId,\n );\n }\n } else {\n const kind: \"nat1\" | \"nat20\" = lbWords.includes(\"nat1\") || lbWords.includes(\"1\") ? \"nat1\" : \"nat20\";\n const label = kind === \"nat20\" ? \"Natural 20\" : \"Natural 1\";\n const emoji = kind === \"nat20\" ? \"🌟\" : \"💀\";\n const formatEntries = (rows: { displayName: string; count: number }[]) =>\n rows.length ? rows.map((r) => `${r.displayName} x${r.count}`).join(\", \") : \"none yet\";\n\n if (requestedWindow) {\n const rows = await getDiceLeaderboard(broadcasterId, kind, Date.now() - windowMs[requestedWindow], 5);\n await sendChatMessage(\n `@${display} ${emoji} ${label} leaderboard (past ${requestedWindow}): ${formatEntries(rows)}`,\n broadcasterId,\n );\n } else {\n const [hourRows, dayRows, weekRows] = await Promise.all([\n getDiceLeaderboard(broadcasterId, kind, Date.now() - windowMs.hour, 3),\n getDiceLeaderboard(broadcasterId, kind, Date.now() - windowMs.day, 3),\n getDiceLeaderboard(broadcasterId, kind, Date.now() - windowMs.week, 3),\n ]);\n await sendChatMessages(\n `@${display} ${emoji} ${label} leaderboard — Hour: ${formatEntries(hourRows)} | Day: ${formatEntries(dayRows)} | Week: ${formatEntries(weekRows)}. Try !rollcall ${\n kind === \"nat20\" ? \"nat1\" : \"nat20\"\n }, !rollcall ${kind} week for a bigger top 5, or !rollcall @user for one player's stats.`,\n broadcasterId,\n );\n }\n }\n } else if (chatMessage === \"!bg3roll\") {\n await sendChatMessage(rollBG3Character(display), broadcasterId);\n } else if (chatMessage === \"!bg3companion\") {\n await sendChatMessage(rollBG3Companion(display), broadcasterId);\n } else if (chatMessage === \"!bg3origin\") {\n await sendChatMessage(rollBG3Origin(display), broadcasterId);\n } else if (chatMessage === \"!bg3loot\") {\n await sendChatMessage(rollBG3Loot(display), broadcasterId);\n } else if (chatMessage === \"!bg3camp\") {\n await sendChatMessage(rollBG3Camp(display), broadcasterId);\n } else if (/^!hug(?:\\s+@?\\S+)?$/i.test(chatMessage)) {\n const hugMatch = chatMessage.match(/^!hug(?:\\s+@?(\\S+))?$/i)!;\n const hugTarget = hugMatch[1] ? hugMatch[1].toLowerCase().replace(/[,:]+$/, \"\") : null;\n await sendChatMessage(rollHug(display, hugTarget), broadcasterId);\n } else if (/^!createchar(?:\\s+@?\\S+)?$/i.test(chatMessage)) {\n const createMatch = chatMessage.match(/^!createchar(?:\\s+@?(\\S+))?$/i)!;\n const createTarget = createMatch[1] ? createMatch[1].toLowerCase() : null;\n if (createTarget && createTarget !== chatter && !isModerator) {\n await sendChatMessage(\n `@${display} only the broadcaster or a moderator can create a character for someone else.`,\n broadcasterId,\n );\n } else {\n const targetUser = createTarget || chatter;\n const existing = await getCharacter(targetUser, broadcasterId);\n if (existing) {\n await saveCreationSession(\n { username: chatter, step: \"confirm_createchar\", targetUser },\n broadcasterId,\n );\n const forSomeoneElse = targetUser !== chatter;\n await sendChatMessage(\n `@${display} ⚠️ ${forSomeoneElse ? `@${targetUser} already has` : \"you already have\"} an active ${formatRaceName(existing.race, existing.subrace)} ${existing.cls} (Level ${existing.level}). Reply !answer yes to overwrite with a new random character, or !answer no to keep it.`,\n broadcasterId,\n );\n } else {\n const c = generateCharacter(targetUser);\n await saveCharacter(c, broadcasterId);\n await sendChatMessage(\n `@${display} created a level 1 ${formatRaceName(c.race, c.subrace)} ${c.cls}! ${formatStatLine(c)} — ${baseUrl}/?user=${targetUser}`,\n broadcasterId,\n );\n }\n }\n } else if (/^!char(?:\\s+@?\\S+)?$/i.test(chatMessage)) {\n const charMatch = chatMessage.match(/^!char(?:\\s+@?(\\S+))?$/i)!;\n const targetUser = charMatch[1] ? charMatch[1].toLowerCase().replace(/[,:]+$/, \"\") : chatter;\n const c = await getCharacter(targetUser, broadcasterId);\n if (c) {\n const label = targetUser === chatter ? \"\" : `@${targetUser} `;\n await sendChatMessage(\n `@${display} ${label}${formatRaceName(c.race, c.subrace)} ${c.cls} — ${formatStatLine(c)} — ${baseUrl}/?user=${targetUser}`,\n broadcasterId,\n );\n } else {\n await sendChatMessage(\n targetUser === chatter\n ? `@${display} you don't have a character yet — try !createchar`\n : `@${display} @${targetUser} doesn't have a character yet.`,\n broadcasterId,\n );\n }\n } else if (chatMessage.startsWith(\"!hp \")) {\n const delta = Number.parseInt(chatMessage.slice(4).trim());\n if (Number.isNaN(delta)) {\n await sendChatMessage(`@${display} use !hp +5 or !hp -3`, broadcasterId);\n } else {\n const c = await adjustHp(chatter, delta, broadcasterId);\n await sendChatMessage(\n c\n ? `@${display} HP: ${c.hpCurrent}/${c.hpMax}`\n : `@${display} you don't have a character yet — try !createchar`,\n broadcasterId,\n );\n }\n } else if (chatMessage === \"!savechar\") {\n await sendChatMessage(\n (await backupCharacter(chatter, broadcasterId))\n ? `@${display} character saved!`\n : `@${display} no character to save — try !createchar`,\n broadcasterId,\n );\n } else if (chatMessage === \"!loadchar\") {\n const c = await loadBackup(chatter, broadcasterId);\n await sendChatMessage(\n c\n ? `@${display} character loaded! ${formatStatLine(c)} — ${baseUrl}/?user=${chatter}`\n : `@${display} no saved backup found — try !savechar first`,\n broadcasterId,\n );\n } else if (chatMessage === \"!resetchar\") {\n await resetCharacter(chatter, broadcasterId);\n await sendChatMessage(\n `@${display} character reset — use !createchar to roll a new one`,\n broadcasterId,\n );\n } else if (chatMessage.startsWith(\"!\")) {\n // Nothing built-in matched — try a chat-authored custom command.\n await handleCustomCommandInvocation(chatMessage, display, broadcasterId);\n } else if (isGoodnightMessage(chatMessage)) {\n // Plain-chat \"goodnight\" detection (not a \"!\" command). Cooldown per\n // channel so a wave of goodnights from many viewers only draws one reply.\n if (await checkGoodnightCooldown(broadcasterId, GOODNIGHT_COOLDOWN_MS)) {\n await sendChatMessage(goodnightReply(display), broadcasterId);\n }\n } else {\n // Plain (non-\"!\") chat — check passive keyword triggers first (part\n // of the \"custom\" dashboard group); only roll the chronicle's random\n // quote-back (then NPC chatter) if no trigger already replied, so a\n // single message never draws two separate unprompted replies.\n const triggerFired = (await isCommandGroupEnabled(broadcasterId, \"custom\"))\n ? await handleTriggerMatch(chatMessage, display, broadcasterId)\n : false;\n if (!triggerFired) {\n const chronicleFired = await maybeChronicleQuote(chatMessage, display, broadcasterId);\n if (!chronicleFired) {\n await maybeNpcChatter(chatMessage, display, broadcasterId);\n }\n }\n }\n }\n\n if (messageType === \"revocation\") {\n const broadcasterId = String(\n body.subscription?.condition?.broadcaster_user_id ??\n body.subscription?.condition?.to_broadcaster_user_id ??\n \"\",\n );\n const subscriptionId = String(body.subscription?.id ?? \"\");\n const subscriptionType = String(body.subscription?.type ?? \"\");\n if (broadcasterId) {\n if (subscriptionType === \"channel.chat.message\") {\n await markBroadcasterDisconnected(broadcasterId, String(body.subscription?.status ?? \"revoked\"), subscriptionId);\n } else {\n // A revoked subscribe/resub/gift/raid subscription only disables\n // that extra thank-you feature for this channel — the rest of the\n // bot, including chat commands, keeps working.\n await deleteExtraEventSubSubscriptions(broadcasterId);\n }\n await recordMonitorEvent(\"eventsub_revocation\", `${broadcasterId}:${subscriptionType}:${subscriptionId}`);\n }\n }\n return new Response(\"OK\");\n}\n\n// TWITCH_BOT_ID must be the numeric Twitch user ID belonging to TWITCH_BOT_TOKEN.\n\n\nexport default async function (req: Request): Promise {\n try {\n return await handleRequest(req);\n } catch (e) {\n try { await recordMonitorEvent(\"unhandled_error\", String(e)); } catch (_) {}\n console.error(\"GuildScribe request failed\", e);\n return new Response(\"Internal server error\", { status: 500 });\n }\n}\n","deleted",false,"label","guildscribe",[14],"20e82baa-ad9c-41ac-a8e5-4d2d285f6a79",["D",1787995257440],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","userId","cc37ba10-6e6d-4af6-a801-9955c92d23c4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","01a04ba1-c79f-7319-b4f2-7c4f3772837b","tursoName","20e82baaad9c41aca8e54d2d285f6a79","tursoHostname","20e82baaad9c41aca8e54d2d285f6a79-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789500119686],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_106":102},"org",{"_9":10,"_99":100,"_101":102,"_56":57,"_103":104,"_105":42},"branch",{"_35":89,"_11":90,"_22":28,"_91":46,"_92":-5,"_93":-5,"_94":-5,"_95":-5,"_96":-5,"_97":12,"_98":10},"isOwned",512,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Shea Stolp","avatar","https://lh3.googleusercontent.com/a/ACg8ocIWmQgR3gyoMMicg2zCAoN1c7i36qX5mf9gRIdIXm8F2mo-ig=s96-c","tier","free","canRestrictVals","profileImageUrl","ctx",{"_82":-5,"_140":141,"_142":143,"_144":145,"_146":42,"_147":42,"_148":42,"_149":32,"_150":-5,"_151":-7,"_152":-7,"_153":63,"_154":42,"_155":42,"_156":-5,"_157":42,"_158":42,"_159":42,"_160":-5},"ENV",{"_111":112,"_113":114,"_115":90,"_116":117,"_118":119,"_120":121,"_122":123,"_124":125,"_126":127,"_128":129,"_130":131,"_132":133,"_134":135,"_136":137,"_138":139},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]