catnip
Val Town is a collaborative website to build and scale JavaScript apps.
Deploy APIs, crons, & store data – all from the browser, and deployed in milliseconds.
Viewing readonly version of main branch: v331View latest version
- Per-game toggles — admins can enable/disable individual games via
/games-config toggle --game <name> --enabled <bool>(all 20 games supported) - Daily reward command —
/dailygrants a random coin amount (default 50–150) with a 24-hour cooldown - Daily reward configuration —
/games-config dailylets admins set--enabled,--min,--maxreward range games-config infonow shows disabled games list and daily reward settings- Added
GameNametype andALL_GAME_NAMESconstant for type-safe game references
- 13 new tests covering toggle, daily config, daily command, and per-game disable enforcement
- Extract
ExpiringCacheclass (discord/helpers/cache.ts) — replaces 6 identical cache implementations across paste, template, tag, stash, backup, and schedule commands - Extract permission helpers (
discord/helpers/permissions.ts) —checkEntityAccess()replacescanGet/canSend/canView, blob/KV CRUD helpers replace 12 duplicated allow/deny handlers - Extract format helpers (
discord/helpers/format.ts) —formatPermissionInfo()anddiscordTimestamp()replace duplicated formatting blocks - Extract cron helpers (
discord/helpers/cron.ts) —runCron()wraps common cron lifecycle,deliverWithRetry()wraps claim-delete + retry pattern - Refactor paste, template, tag, stash, backup, schedule commands to use shared helpers
- Refactor reminders, scheduled-messages, giveaways, polls, tickets cron jobs to use shared helpers
- Add 45 new tests for helper modules; all 672 tests pass
- Slash command framework with
defineCommand(), auto-registration, subcommands, autocomplete, and cooldowns - Component handling for buttons, select menus, and modals via
defineComponent() - Context menu commands (user and message right-click)
- Per-guild configuration — admin roles, command enable/disable, persisted in KV
- Giveaway system — button entry, auto-end via cron, winner picking, reroll
- Poll system — button voting with live counts, auto-end, vote switching
- Reminders — personal time-delayed reminders with exactly-once cron delivery
- Scheduled messages — admin-only delayed message posting
- Ticket system — thread-based support tickets with close reasons, join requests, modal creation, and auto-expiry via cron
- React-roles — self-assignable role panels with button toggling
- Tags — per-guild text snippets with role/user-gated viewing
- Templates — reusable embed builder with modal editing, role/user-based send permissions, and channel posting
- Paste — server pastebin with short codes, public/private retrieval, role/user-gated access, and creator/admin delete
- Stash — personal cross-server clipboard with named snippets
- Backup — admin-only guild data export/import for tags, templates, and counters
- Dice roller — standard TTRPG notation (
2d20+5) with secret rolls, announce, and reveal - Linked roles — Discord OAuth2 verification with pluggable verifiers (Steam, GitHub, Patreon, account age)
- Webhook logging — batched Discord webhook logger with log levels and auto-flush
- Webhook sending — message chunking, embed batching, rate-limit handling, fallback support
- KV persistence — SQLite-backed key-value store with atomic operations, optimistic concurrency, and time-based queries
- Blob persistence — Cloudflare R2-backed storage for larger data (pastes, templates, backups, stash)
- Guild allowlist via
ALLOWED_GUILD_IDS - Built-in Terms of Service and Privacy Policy pages
- Health check endpoint
- 529 tests across 51 files with 100% pass rate
- Full coverage across commands, components, persistence, crons, linked roles, and webhooks
- Offline test infrastructure with mocks for SQLite, blob storage, fetch, env, signing, and Val Town utilities
- Ed25519 signature verification on all interactions
- HMAC-SHA256 CSRF tokens for OAuth2 flow
- Timing-safe comparisons for all secret validation
- Parameterized SQL queries throughout
- Explicit null defaults for optional secrets
- Rate limiting and per-user command cooldowns
- Exactly-once cron delivery via atomic
claimDelete() - Retry with exponential backoff respecting Discord rate limits