[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8},"actionData","errors","root",{"_108":109,"_110":111},"routes/embed.x.$handle.$name.$",{"_9":10,"_11":12,"_13":14,"_15":16,"_17":18,"_19":20,"_21":-5},"handle","eixixddizca","name","discord-shop-bot","path","lib/moderation.ts","project",{"_22":48,"_11":12,"_35":49,"_50":-5,"_51":44,"_52":53,"_54":53,"_55":56,"_57":-5,"_58":59,"_60":61,"_62":34,"_63":-5,"_64":-5,"_65":38,"_66":67,"_68":69,"_70":71,"_72":73,"_74":-5,"_75":76,"_77":76,"_78":79,"_80":79,"_81":79,"_82":76,"_83":76,"_84":85,"_86":87,"_88":89,"_90":44},"file",{"_22":23,"_11":24,"_25":26,"_27":28,"_29":30,"_31":32,"_33":34,"_35":36,"_37":38,"_39":40,"_41":42,"_43":44,"_45":-5,"_13":46},"permalink","https://www.val.town/x/eixixddizca/discord-shop-bot/code/lib/moderation.ts","extension","id","08aeadff-39cc-4d28-9fda-4516327b63f0","moderation.ts","fileId","aa7bc606-a231-11f1-8a0b-1607ee4eb77e","parentId","0c5122a9-bcd5-498b-89dd-adb72a9f617b","branchId","dfaf1e7a-f8eb-4419-ac1e-aa00e1193983","branchVersion",22,"latest",true,"createdAt",["D",1787846961822],"version",0,"fileType","script","content","// Moderation system: cases-backed warnings and Discord moderation actions.\n// Every action gets a Case ID (CASE-XXXXX) stored persistently. Permission\n// checks are server-side (isStaff). Respects the Discord permission hierarchy\n// via the bot's ManageGuild requirement.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst BAN = 1 << 2; // BAN_MEMBERS\nconst KICK = 1 << 1; // KICK_MEMBERS\nconst MODERATE = 1 << 40; // MODERATE_MEMBERS\n\nasync function botToken(): Promise {\n const t = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!t) throw new Error(\"Bot token not configured\");\n return t;\n}\n\nasync function createCase(c: {\n userId: string; username: string; moderatorId: string; action: string;\n reason: string; evidence?: string; duration?: number;\n}): Promise {\n const caseId = \"CASE-\" + generateCode(5);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: `INSERT INTO cases (caseId, userId, username, moderatorId, action, reason, evidence, duration, createdAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [caseId, c.userId, c.username, c.moderatorId, c.action, c.reason, c.evidence ?? \"\", c.duration ?? null, new Date().toISOString()],\n });\n return caseId;\n}\n\nexport async function moderation(ctx: CmdCtx, sub: string): Promise> {\n if (sub === \"cases\") return listCases(ctx);\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to moderate.\");\n\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const reason = String(ctx.options[\"reason\"] ?? \"No reason provided\");\n const username = ctx.options[\"user\"] as string ?? userId;\n\n switch (sub) {\n case \"warn\": {\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"warn\", reason });\n // add to customer reputation\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({ sql: \"UPDATE customers SET reputation = reputation + 1 WHERE userId = ?\", args: [userId] });\n return replyEmbed(UI.warning({\n title: \"⚠️ Warning Issued\",\n description: `Case \\`${caseId}\\` · <@${userId}>`,\n fields: [{ name: \"Reason\", value: reason, inline: false }],\n }));\n }\n\n case \"ban\": {\n await guildMod(ctx, userId, KICK, `PUT /guilds/${ctx.guildId}/bans/${userId}`, { reason });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"ban\", reason });\n return replyEmbed(UI.warning({ title: \"🔨 User Banned\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"kick\": {\n await guildMod(ctx, userId, KICK, `DELETE /guilds/${ctx.guildId}/members/${userId}`, null, reason);\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"kick\", reason });\n return replyEmbed(UI.warning({ title: \"👢 User Kicked\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"timeout\": {\n const minutes = Math.max(1, Math.floor(Number(ctx.options[\"minutes\"] ?? 60)));\n await guildMod(ctx, userId, MODERATE, `PATCH /guilds/${ctx.guildId}/members/${userId}`, {\n communication_disabled_until: new Date(Date.now() + minutes * 60000).toISOString(),\n });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"timeout\", reason, duration: minutes });\n return replyEmbed(UI.warning({ title: \"⏱️ Timed Out\", description: `Case \\`${caseId}\\` · <@${userId}> · ${minutes}m`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n default:\n return reply(\"Unknown moderation command.\");\n }\n}\n\n// Perform a Discord API moderation action, with best-effort errors.\nasync function guildMod(ctx: CmdCtx, userId: string, _permBit: number, methodAndPath: string, body: Record | null, reasonText?: string): Promise {\n const token = await botToken();\n const [method, url] = methodAndPath.split(\" \");\n const res = await fetch(`${DISCORD_API}${url}`, {\n method, headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\", ...(reasonText ? { \"X-Audit-Log-Reason\": reasonText } : {}) },\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) {\n const txt = await res.text();\n console.error(\"mod action failed:\", res.status, txt);\n throw new Error(\"Discord API error: \" + res.status);\n }\n}\n\nasync function listCases(ctx: CmdCtx): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const res = userId\n ? await sqlite.execute({ sql: \"SELECT * FROM cases WHERE userId = ? ORDER BY createdAt DESC LIMIT 10\", args: [userId] })\n : await sqlite.execute({ sql: \"SELECT * FROM cases ORDER BY createdAt DESC LIMIT 10\" });\n const rows = res.rows as Array>;\n if (!rows.length) return reply(\"No cases found.\");\n const fields: EmbedField[] = rows.map((r) => ({\n name: `${r.caseId} · ${r.action}`,\n value: `<@${r.userId}> — ${r.reason}\\n<@${r.moderatorId}> · `,\n inline: false,\n }));\n return replyEmbed(UI.info({ title: \"🛡️ Moderation Cases\", fields }));\n}\n","deleted",false,"label",[47,24],"lib","438fe6a4-2424-4e5d-9feb-81f46ecbe799",["D",1787846270953],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Modular Discord shop & community bot","imageUrl","userId","6b376f3a-5347-4c3a-b4ec-787b333560af","pinnedFileId","27082d74-a230-11f1-8efc-1607ee4eb77e","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a043e6-75ad-74fe-b7a7-17e3786f5114","tursoName","438fe6a424244e5d9feb81f46ecbe799","tursoHostname","438fe6a424244e5d9feb81f46ecbe799-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_9":10,"_107":102},"org",{"_9":10,"_101":102,"_103":102,"_58":59,"_104":105,"_106":44},"branch",{"_37":91,"_11":92,"_22":30,"_93":48,"_94":-5,"_95":-5,"_96":-5,"_97":-5,"_98":-5,"_99":12,"_100":10},"isOwned",61,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","ctx",{"_84":-5,"_141":142,"_143":144,"_145":146,"_147":44,"_148":44,"_149":44,"_150":34,"_151":-5,"_152":-7,"_153":-7,"_154":38,"_155":44,"_156":44,"_157":-5,"_158":44,"_159":44,"_160":44,"_161":-5},"ENV",{"_112":113,"_114":115,"_116":92,"_117":118,"_119":120,"_121":122,"_123":124,"_125":126,"_127":128,"_129":130,"_131":132,"_133":134,"_135":136,"_137":138,"_139":140},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town","orgs",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]