[{"_1":2,"_188":-5,"_189":-5},"loaderData",{"_3":4,"_96":97},"root",{"_5":6,"_37":38,"_69":70},"ctx",{"_7":8,"_23":-5,"_24":25,"_26":27,"_28":20,"_29":20,"_30":20,"_31":-5,"_32":33,"_34":20,"_35":20,"_36":20},"auth",{"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20,"_21":22},"sessionClaims","sessionId","sessionStatus","userId","actor","orgId","orgRole","orgSlug","orgPermissions","factorVerificationAge","isAuthenticated",false,"tokenType","session_token","user","preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesChatPanelState","notificationCount",0,"flagDenols","isBusinessOrgMember","isHigherTownieTier","ENV",{"_39":40,"_41":42,"_43":44,"_45":46,"_47":48,"_49":50,"_51":52,"_53":54,"_55":56,"_57":58,"_59":60,"_61":62,"_63":64,"_65":66,"_67":68},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","VAL_RUNTIME_NAME","prod","RENDER_GIT_COMMIT","efeea19332d9bfe7de1049656877be9cb817c45f","RENDER_GIT_BRANCH","main","CLERK_PUBLISHABLE_KEY","pk_live_Y2xlcmsudmFsLnRvd24k","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","API_URL","https://api.val.town","clerkState",{"_71":72},"__internal_clerk_state",{"_73":74,"_75":48,"_76":77,"_78":77,"_79":20,"_80":77,"_81":77,"_82":77,"_83":77,"_84":85,"_94":20,"_95":20},"__clerk_ssr_state",{"_21":22,"_9":-5,"_10":-5,"_11":-5,"_12":-5,"_13":-5,"_14":-5,"_15":-5,"_16":-5,"_17":-5,"_18":-5,"_19":20},"__publishableKey","__proxyUrl","","__domain","__isSatellite","__signInUrl","__signUpUrl","__afterSignInUrl","__afterSignUpUrl","__clerk_debug",{"_86":20,"_19":20,"_87":77,"_88":89,"_90":77,"_91":48,"_92":20,"_93":77},"isSignedIn","proxyUrl","reason","session-token-and-uat-missing","message","publishableKey","isSatellite","domain","__telemetryDisabled","__telemetryDebug","routes/embed.x.$handle.$name.$",{"_98":99,"_100":101,"_102":103,"_104":105,"_162":163,"_185":186,"_187":-5},"handle","catalloc","name","catnip","path","discord/helpers/permissions.ts","project",{"_106":107,"_100":101,"_108":109,"_110":-5,"_111":20,"_112":113,"_114":115,"_116":-5,"_12":117,"_118":-5,"_119":20,"_120":-5,"_121":-5,"_122":33,"_14":123,"_124":125,"_126":127,"_128":129,"_130":-5,"_131":132,"_133":132,"_134":135,"_136":135,"_137":135,"_138":132,"_139":132,"_23":140,"_143":144,"_148":149,"_161":20},"id","4db147e2-1d6c-11f1-9a9a-42dde27851f2","createdAt",["D",1773248642232],"deletedAt","legacyEnvVars","privacy","public","description","Open source Discord bot template built for Val Town","imageUrl","d06b6c80-f3a1-11ef-89a3-8735e07158f4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","e03963fb-ecc4-48fb-bc25-0173a8b9a8c8","tursoName","4db147e21d6c11f19a9a42dde27851f2","tursoHostname","4db147e21d6c11f19a9a42dde27851f2-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1776211266606],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm",{"_98":99,"_141":142},"profileImageUrl","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/0478d851-5bca-4d5e-6593-fb952af01c00/square512","org",{"_98":99,"_145":142,"_12":117,"_146":147},"avatar","tier","pro","branch",{"_150":151,"_100":46,"_106":152,"_153":107,"_154":-5,"_155":-5,"_156":-5,"_157":-5,"_158":-5,"_159":101,"_160":99},"version",358,"4db1f610-1d6c-11f1-9a9a-42dde27851f2","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","isOwned","file",{"_106":164,"_100":165,"_166":167,"_168":169,"_170":152,"_171":172,"_173":174,"_108":175,"_150":33,"_176":177,"_178":179,"_180":20,"_181":-5,"_102":182},"9ca1aaae-1d6c-11f1-afd5-42dde27851f2","permissions.ts","fileId","9ca1ac2a-1d6c-11f1-afd5-42dde27851f2","parentId","9475eb06-1d6c-11f1-ac6f-42dde27851f2","branchId","branchVersion",269,"latest",true,["D",1773248774665],"fileType","script","content","/**\n * discord/helpers/permissions.ts\n *\n * Shared permission checking and CRUD for role/user access lists.\n * Used by paste, template, tag, and other commands with entity-level permissions.\n */\n\nimport { isGuildAdmin } from \"../constants.ts\";\n\n/** Minimal shape for entities with role/user permission lists. */\nexport interface PermissionEntry {\n allowedRoles?: string[];\n allowedUsers?: string[];\n}\n\n/**\n * Check if a user has permission to access an entity.\n *\n * - Admin always passes.\n * - If user is in allowedUsers, passes.\n * - If allowedRoles exist and user has a matching role, passes.\n * - `defaultOpen: true` (default) — open when no restrictions (paste/tag behavior).\n * - `defaultOpen: false` — denied when no restrictions (template behavior: admin-only).\n */\nexport async function checkEntityAccess(\n entry: PermissionEntry,\n guildId: string,\n userId: string,\n memberRoles: string[],\n memberPermissions?: string,\n opts?: { defaultOpen?: boolean },\n): Promise {\n const defaultOpen = opts?.defaultOpen ?? true;\n\n if (await isGuildAdmin(guildId, userId, memberRoles, memberPermissions)) return true;\n if (entry.allowedUsers?.includes(userId)) return true;\n\n if (entry.allowedRoles?.length) {\n return memberRoles.some((r) => entry.allowedRoles!.includes(r));\n }\n\n // No role restrictions — check user-only restrictions or default behavior\n if (!entry.allowedUsers?.length && !entry.allowedRoles?.length) return defaultOpen;\n return false;\n}\n\n/** Result type matching command handler return shape. */\nexport interface CommandResult {\n success: boolean;\n message?: string;\n error?: string;\n}\n\n/** Options for blob-storage permission CRUD. */\nexport interface BlobPermOpts {\n guildId: string;\n userId: string;\n memberRoles: string[];\n memberPermissions?: string;\n entityName: string;\n entityLabel: string;\n verb: string;\n targetId: string;\n targetType: \"role\" | \"user\";\n getEntry: () => Promise;\n saveEntry: (entry: PermissionEntry) => Promise;\n invalidateCache: () => void;\n}\n\n/** Add a role or user to the allow list (blob storage). */\nexport async function blobAllow(opts: BlobPermOpts): Promise {\n if (!(await isGuildAdmin(opts.guildId, opts.userId, opts.memberRoles, opts.memberPermissions))) {\n return { success: false, error: `You need admin permissions to manage ${opts.entityLabel} ${opts.targetType}s.` };\n }\n\n const entry = await opts.getEntry();\n if (!entry) {\n return { success: false, error: `${capitalize(opts.entityLabel)} \\`${opts.entityName}\\` not found.` };\n }\n\n const list = opts.targetType === \"role\" ? \"allowedRoles\" : \"allowedUsers\";\n const mention = opts.targetType === \"role\" ? `<@&${opts.targetId}>` : `<@${opts.targetId}>`;\n\n entry[list] = entry[list] ?? [];\n if (entry[list]!.includes(opts.targetId)) {\n return { success: false, error: `${mention} already has ${opts.verb} permission for \\`${opts.entityName}\\`.` };\n }\n\n entry[list]!.push(opts.targetId);\n await opts.saveEntry(entry);\n opts.invalidateCache();\n\n return { success: true, message: `${mention} can now ${opts.verb} ${opts.entityLabel} \\`${opts.entityName}\\`.` };\n}\n\n/** Remove a role or user from the allow list (blob storage). */\nexport async function blobDeny(opts: BlobPermOpts): Promise {\n if (!(await isGuildAdmin(opts.guildId, opts.userId, opts.memberRoles, opts.memberPermissions))) {\n return { success: false, error: `You need admin permissions to manage ${opts.entityLabel} ${opts.targetType}s.` };\n }\n\n const entry = await opts.getEntry();\n if (!entry) {\n return { success: false, error: `${capitalize(opts.entityLabel)} \\`${opts.entityName}\\` not found.` };\n }\n\n const list = opts.targetType === \"role\" ? \"allowedRoles\" : \"allowedUsers\";\n const mention = opts.targetType === \"role\" ? `<@&${opts.targetId}>` : `<@${opts.targetId}>`;\n\n entry[list] = entry[list] ?? [];\n if (!entry[list]!.includes(opts.targetId)) {\n return { success: false, error: `${mention} doesn't have ${opts.verb} permission for \\`${opts.entityName}\\`.` };\n }\n\n entry[list] = entry[list]!.filter((id) => id !== opts.targetId);\n await opts.saveEntry(entry);\n opts.invalidateCache();\n\n return { success: true, message: `${mention} can no longer ${opts.verb} ${opts.entityLabel} \\`${opts.entityName}\\`.` };\n}\n\n/** Options for KV-storage permission CRUD (tag-style, using kv.update). */\nexport interface KvPermOpts {\n guildId: string;\n userId: string;\n memberRoles: string[];\n memberPermissions?: string;\n entityName: string;\n entityLabel: string;\n verb: string;\n targetId: string;\n targetType: \"role\" | \"user\";\n kvUpdate: (mutator: (entry: PermissionEntry | null) => { entry: PermissionEntry | null; error: string | null }) => Promise;\n invalidateCache: () => void;\n}\n\n/** Add a role or user to the allow list (KV storage). */\nexport async function kvAllow(opts: KvPermOpts): Promise {\n if (!(await isGuildAdmin(opts.guildId, opts.userId, opts.memberRoles, opts.memberPermissions))) {\n return { success: false, error: `You need admin permissions to manage ${opts.entityLabel} ${opts.targetType}s.` };\n }\n\n const list = opts.targetType === \"role\" ? \"allowedRoles\" : \"allowedUsers\";\n const mention = opts.targetType === \"role\" ? `<@&${opts.targetId}>` : `<@${opts.targetId}>`;\n\n const error = await opts.kvUpdate((entry) => {\n if (!entry) {\n return { entry: null, error: `${capitalize(opts.entityLabel)} \\`${opts.entityName}\\` not found.` };\n }\n entry[list] = entry[list] ?? [];\n if (entry[list]!.includes(opts.targetId)) {\n return { entry, error: `${mention} already has ${opts.verb} permission for \\`${opts.entityName}\\`.` };\n }\n entry[list]!.push(opts.targetId);\n return { entry, error: null };\n });\n\n opts.invalidateCache();\n if (error) return { success: false, error };\n return { success: true, message: `${mention} can now ${opts.verb} ${opts.entityLabel} \\`${opts.entityName}\\`.` };\n}\n\n/** Remove a role or user from the allow list (KV storage). */\nexport async function kvDeny(opts: KvPermOpts): Promise {\n if (!(await isGuildAdmin(opts.guildId, opts.userId, opts.memberRoles, opts.memberPermissions))) {\n return { success: false, error: `You need admin permissions to manage ${opts.entityLabel} ${opts.targetType}s.` };\n }\n\n const list = opts.targetType === \"role\" ? \"allowedRoles\" : \"allowedUsers\";\n const mention = opts.targetType === \"role\" ? `<@&${opts.targetId}>` : `<@${opts.targetId}>`;\n\n const error = await opts.kvUpdate((entry) => {\n if (!entry) {\n return { entry: null, error: `${capitalize(opts.entityLabel)} \\`${opts.entityName}\\` not found.` };\n }\n entry[list] = entry[list] ?? [];\n if (!entry[list]!.includes(opts.targetId)) {\n return { entry, error: `${mention} doesn't have ${opts.verb} permission for \\`${opts.entityName}\\`.` };\n }\n entry[list] = entry[list]!.filter((id) => id !== opts.targetId);\n return { entry, error: null };\n });\n\n opts.invalidateCache();\n if (error) return { success: false, error };\n return { success: true, message: `${mention} can no longer ${opts.verb} ${opts.entityLabel} \\`${opts.entityName}\\`.` };\n}\n\nfunction capitalize(s: string): string {\n return s.charAt(0).toUpperCase() + s.slice(1);\n}\n","deleted","label",[183,184,165],"discord","helpers","permalink","https://www.val.town/x/catalloc/catnip/code/discord/helpers/permissions.ts","extension","actionData","errors"]