[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_874":875,"_876":877},"routes/_app.x.$handle.$name",{"_93":92,"_31":43,"_101":83,"_26":51,"_13":14,"_102":-5,"_11":103,"_104":105,"_106":107,"_108":109,"_110":111,"_20":-5,"_112":-5,"_113":-5,"_114":24,"_115":116,"_117":118,"_119":-5,"_120":-5,"_121":122},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":-5,"_18":-5},"project",{"_41":42,"_31":43,"_36":44,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":76,"_77":78,"_79":80,"_81":24},"version",79,"changes",[19],"aiChatInfo","userId",{"_20":21,"_22":-7,"_23":24,"_25":24,"_26":27,"_28":27},"file",{"_29":30,"_31":27,"_32":33,"_34":35,"_36":37,"_38":14,"_39":40,"_23":24},"previous","deleted",false,"deletedHere","path","admin.ts","latestPath","fileId","56077a0c-66b3-11f1-854c-1607ee4eb77e","name","fileType","script","content","/**\n * Guarded admin API — register and manage shielded servers at runtime, so\n * onboarding a new Discord never needs a redeploy.\n *\n * All routes live under /admin/guilds and require a bearer token matching the\n * ADMIN_SECRET env var (constant-time compared). If ADMIN_SECRET is unset the\n * API is disabled entirely (404). Secrets are never echoed back in responses.\n *\n * GET /admin/guilds list all servers\n * POST /admin/guilds create a server (body: full config; 409 if it exists)\n * GET /admin/guilds/{id} fetch one server\n * PUT /admin/guilds/{id} create or replace a server\n * PATCH /admin/guilds/{id} partially update an existing server\n * DELETE /admin/guilds/{id} remove a server\n *\n * Request/response bodies use the camelCase GuildInput/GuildConfig shape (see\n * guilds.ts). Branding (logo, colors, rules, about) and per-guild Turnstile\n * keys are all settable here.\n */\n\nimport {\n deleteGuild,\n getGuild,\n type GuildConfig,\n type GuildInput,\n listGuilds,\n upsertGuild,\n} from \"./guilds.ts\";\n\n// ========================================\n// AUTH\n// ========================================\n\n/** Constant-time secret comparison via fixed-length SHA-256 digests (so neither\n * length nor content leaks through timing). */\nasync function tokenMatches(provided: string, secret: string): Promise {\n const enc = new TextEncoder();\n const [a, b] = await Promise.all([\n crypto.subtle.digest(\"SHA-256\", enc.encode(provided)),\n crypto.subtle.digest(\"SHA-256\", enc.encode(secret)),\n ]);\n const av = new Uint8Array(a);\n const bv = new Uint8Array(b);\n let diff = 0;\n for (let i = 0; i < av.length; i++) diff |= av[i] ^ bv[i];\n return diff === 0;\n}\n\n/** Extract the bearer token from the Authorization header. */\nfunction bearer(req: Request): string | null {\n const h = req.headers.get(\"authorization\") ?? \"\";\n const m = h.match(/^Bearer\\s+(.+)$/i);\n return m ? m[1].trim() : null;\n}\n\n// ========================================\n// RESPONSES + VALIDATION\n// ========================================\n\n/** A validation/authorization failure carrying the HTTP status to return. */\nclass AdminError extends Error {\n constructor(readonly status: number, message: string) {\n super(message);\n }\n}\n\nconst bad = (msg: string) => new AdminError(400, msg);\n\nfunction json(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: {\n \"content-type\": \"application/json\",\n \"cache-control\": \"no-store\",\n },\n });\n}\n\n/** Hide the Turnstile secret from responses; report only whether one is set. */\nfunction redact(g: GuildConfig): Record {\n const { turnstileSecretKey, ...rest } = g;\n return { ...rest, hasTurnstileSecretKey: Boolean(turnstileSecretKey) };\n}\n\nconst isSnowflake = (v: unknown): v is string =>\n typeof v === \"string\" && /^\\d+$/.test(v);\n\nfunction asString(v: unknown, key: string): string {\n if (typeof v !== \"string\") throw bad(`${key} must be a string`);\n return v;\n}\n\nfunction asBool(v: unknown, key: string): boolean {\n if (typeof v !== \"boolean\") throw bad(`${key} must be a boolean`);\n return v;\n}\n\nfunction asNumber(v: unknown, key: string): number {\n const n = typeof v === \"string\" ? Number(v) : v;\n if (typeof n !== \"number\" || !Number.isFinite(n)) {\n throw bad(`${key} must be a number`);\n }\n return n;\n}\n\nfunction asSnowflake(v: unknown, key: string): string {\n if (!isSnowflake(v)) throw bad(`${key} must be a numeric Discord ID`);\n return v;\n}\n\nfunction asColor(v: unknown, key: string): string {\n const s = asString(v, key);\n if (!/^#?[0-9a-fA-F]{3}([0-9a-fA-F]{3})?$/.test(s)) {\n throw bad(`${key} must be a hex color like #F4A340`);\n }\n return s.startsWith(\"#\") ? s : `#${s}`;\n}\n\n/** Accept a Discord int color, a numeric string, or a #RRGGBB hex string. */\nfunction asEmbedColor(v: unknown, key: string): number {\n if (typeof v === \"string\" && v.startsWith(\"#\")) {\n const n = parseInt(v.slice(1), 16);\n if (Number.isNaN(n)) throw bad(`${key} must be a hex color`);\n return n;\n }\n return asNumber(v, key);\n}\n\nfunction asRules(v: unknown, key: string): { name: string; value: string }[] {\n if (!Array.isArray(v)) throw bad(`${key} must be an array`);\n return v.map((r, i) => {\n if (!r || typeof r !== \"object\") throw bad(`${key}[${i}] must be an object`);\n const o = r as Record;\n return {\n name: asString(o.name, `${key}[${i}].name`),\n value: asString(o.value, `${key}[${i}].value`),\n };\n });\n}\n\nfunction asAbout(v: unknown, key: string) {\n if (!v || typeof v !== \"object\") throw bad(`${key} must be an object`);\n const o = v as Record;\n return {\n tagline: asString(o.tagline, `${key}.tagline`),\n description: asString(o.description, `${key}.description`),\n highlights: asRules(o.highlights ?? [], `${key}.highlights`),\n };\n}\n\n// Per-field validators. A field present in the body (even as null) is processed;\n// null clears the override. Absent fields are left untouched (PATCH-friendly).\nconst FIELDS: Record unknown> = {\n guildId: asSnowflake,\n roleId: asSnowflake,\n serverName: asString,\n disabled: asBool,\n brandName: asString,\n logoUrl: asString,\n accentColor: asColor,\n accentColorBright: asColor,\n embedColor: asEmbedColor,\n ogHeadline: asString,\n ogTagline: asString,\n ogFallbackImage: asString,\n rules: asRules,\n about: asAbout,\n turnstileSiteKey: asString,\n turnstileSecretKey: asString,\n alertWebhookUrl: asString,\n raidThreshold: asNumber,\n raidWindowMs: asNumber,\n alertCooldownMs: asNumber,\n verifyChannelId: asString,\n rulesChannelId: asString,\n aboutChannelId: asString,\n honeypotChannelId: asString,\n portalUrl: asString,\n redirectUriOverride: asString,\n};\n\n/** Read + validate only the GuildInput fields present in the body. A field set\n * to null becomes undefined (clear the override). Unknown keys are ignored. */\nfunction readGuildFields(body: Record): Partial {\n const out: Record = {};\n for (const key of Object.keys(FIELDS) as (keyof GuildInput)[]) {\n if (!(key in body)) continue;\n const raw = body[key];\n out[key] = raw === null ? undefined : FIELDS[key](raw, key);\n }\n return out as Partial;\n}\n\nasync function parseBody(req: Request): Promise> {\n let body: unknown;\n try {\n body = await req.json();\n } catch {\n throw bad(\"Body must be valid JSON.\");\n }\n if (!body || typeof body !== \"object\" || Array.isArray(body)) {\n throw bad(\"Body must be a JSON object.\");\n }\n return body as Record;\n}\n\n/** Drop server-managed timestamps so a fetched config can seed an update. */\nfunction toInput(g: GuildConfig): GuildInput {\n const { createdAt: _c, updatedAt: _u, ...input } = g;\n return input;\n}\n\n// ========================================\n// ROUTER\n// ========================================\n\n/**\n * Handle an /admin request. `secret` is the configured ADMIN_SECRET (undefined\n * disables the API). Returns null only if the path isn't an admin path, so the\n * caller can fall through to other routes.\n */\nexport async function handleAdminRequest(\n req: Request,\n url: URL,\n secret: string | undefined,\n): Promise {\n const parts = url.pathname.split(\"/\").filter(Boolean); // e.g. [\"admin\",\"guilds\",\"123\"]\n if (parts[0] !== \"admin\") return null;\n\n // API disabled when no secret is configured — don't reveal it exists.\n if (!secret) return json({ error: \"Not found.\" }, 404);\n\n const token = bearer(req);\n if (!token || !(await tokenMatches(token, secret))) {\n return new Response(JSON.stringify({ error: \"Unauthorized.\" }), {\n status: 401,\n headers: {\n \"content-type\": \"application/json\",\n \"cache-control\": \"no-store\",\n \"www-authenticate\": \"Bearer\",\n },\n });\n }\n\n if (parts[1] !== \"guilds\") return json({ error: \"Not found.\" }, 404);\n const id = parts[2];\n\n try {\n // Collection: /admin/guilds\n if (parts.length === 2) {\n if (req.method === \"GET\") {\n return json({ guilds: (await listGuilds()).map(redact) });\n }\n if (req.method === \"POST\") {\n const body = await parseBody(req);\n const fields = readGuildFields(body);\n if (!isSnowflake(fields.guildId)) throw bad(\"guildId is required.\");\n if (!isSnowflake(fields.roleId)) throw bad(\"roleId is required.\");\n if (await getGuild(fields.guildId)) {\n throw new AdminError(\n 409,\n `Server ${fields.guildId} already exists — use PUT or PATCH.`,\n );\n }\n await upsertGuild(fields as GuildInput);\n const saved = await getGuild(fields.guildId);\n return json(saved ? redact(saved) : {}, 201);\n }\n return json({ error: \"Method not allowed.\" }, 405);\n }\n\n // Item: /admin/guilds/{id}\n if (parts.length === 3 && id) {\n if (req.method === \"GET\") {\n const g = await getGuild(id);\n return g ? json(redact(g)) : json({ error: \"Not found.\" }, 404);\n }\n if (req.method === \"PUT\") {\n const body = await parseBody(req);\n const fields = readGuildFields(body);\n // Path id is authoritative.\n const merged = { ...fields, guildId: id } as GuildInput;\n if (!isSnowflake(merged.roleId)) throw bad(\"roleId is required.\");\n await upsertGuild(merged);\n const saved = await getGuild(id);\n return json(saved ? redact(saved) : {});\n }\n if (req.method === \"PATCH\") {\n const existing = await getGuild(id);\n if (!existing) return json({ error: \"Not found.\" }, 404);\n const body = await parseBody(req);\n const fields = readGuildFields(body);\n // Overlay the patch on the existing config; path id stays authoritative.\n const merged = { ...toInput(existing), ...fields, guildId: id };\n await upsertGuild(merged);\n const saved = await getGuild(id);\n return json(saved ? redact(saved) : {});\n }\n if (req.method === \"DELETE\") {\n if (!(await getGuild(id))) return json({ error: \"Not found.\" }, 404);\n await deleteGuild(id);\n return json({ deleted: id });\n }\n return json({ error: \"Method not allowed.\" }, 405);\n }\n\n return json({ error: \"Not found.\" }, 404);\n } catch (e) {\n if (e instanceof AdminError) return json({ error: e.message }, e.status);\n console.error(\"admin error:\", e);\n return json({ error: \"Internal error.\" }, 500);\n }\n}\n","createdAt",["D",1781305585262],"branchVersion","branchId","92e19ade-ba2c-4861-a1cb-538d4dba0795","id","de13bec5-73e7-4691-ae8a-0dbe38e57ea0","discord-captcha-shield",["D",1781289523885],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","","imageUrl","d06b6c80-f3a1-11ef-89a3-8735e07158f4","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount",0,"orgId","e03963fb-ecc4-48fb-bc25-0173a8b9a8c8","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_93":92,"_100":96},"org",{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},"branch",{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"isOwned",101,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","catalloc","handle","displayName","avatar","https://imagedelivery.net/iHX6Ovru0O7AjmyT5yZRoA/0478d851-5bca-4d5e-6593-fb952af01c00/square512?exp=1789567199&sig=ba806dcc17c469a643f19b6b13bac87004e19361038ad7cd8f9984c93e679301","tier","pro","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_41":42,"_31":43,"_36":870,"_45":-5,"_46":24,"_47":48,"_49":48,"_50":51,"_52":-5,"_18":53,"_54":-5,"_55":24,"_56":-5,"_57":-5,"_58":59,"_60":61,"_62":-5,"_63":-5,"_64":-5,"_65":-5,"_66":67,"_68":67,"_69":70,"_71":70,"_72":70,"_73":67,"_74":67,"_75":871,"_77":872,"_79":873,"_81":24},"tree",[325,327,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402],"files",[325,326,327,328,329,330,331,332,333,334,335,336,337,338,339,340,341,342,343,344,345,346,347,348,349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371,372,373,374,375,376,377,378,379,380,381,382,383,384,385,386,387,388,389,390,391,392,393,394,395,396,397,398,399,400,401,402],"counts",{"_315":59,"_316":162,"_317":59,"_318":319,"_320":321},"contents",[123,124,125,126,127,128,129,130,131,132,133,134,135,136,137,138,139,140,141,142,143,144,145,146],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles",true,"grants","orgs","customDomains",{},{"_41":309,"_31":310,"_29":311,"_150":-5,"_39":40,"_38":312,"_152":118,"_36":313,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_26":314},{"_41":303,"_31":304,"_29":305,"_150":-5,"_39":40,"_38":162,"_152":118,"_36":306,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_26":308},{"_41":296,"_31":297,"_29":298,"_150":-5,"_39":40,"_38":299,"_152":118,"_36":300,"_13":59,"_32":20,"_34":301,"_23":24,"_155":-5,"_26":302},{"_41":289,"_31":290,"_29":291,"_150":-5,"_39":40,"_38":292,"_152":118,"_36":293,"_13":59,"_32":20,"_34":294,"_23":24,"_155":-5,"_26":295},{"_41":282,"_31":283,"_29":284,"_150":-5,"_39":40,"_38":285,"_152":24,"_36":286,"_13":59,"_32":20,"_34":287,"_23":24,"_155":-5,"_26":288},{"_41":275,"_31":276,"_29":277,"_150":-5,"_39":40,"_38":278,"_152":118,"_36":279,"_13":59,"_32":20,"_34":280,"_23":24,"_155":-5,"_26":281},{"_41":268,"_31":269,"_29":270,"_150":-5,"_39":40,"_38":271,"_152":24,"_36":272,"_13":59,"_32":20,"_34":273,"_23":24,"_155":-5,"_26":274},{"_41":265,"_31":27,"_29":30,"_150":-5,"_39":40,"_38":14,"_152":24,"_36":266,"_13":59,"_32":33,"_34":35,"_23":24,"_155":-5,"_26":267},{"_41":258,"_31":259,"_29":260,"_150":-5,"_39":40,"_38":261,"_152":24,"_36":262,"_13":59,"_32":33,"_34":263,"_23":24,"_155":-5,"_26":264},{"_41":251,"_31":252,"_29":253,"_150":-5,"_39":40,"_38":254,"_152":24,"_36":255,"_13":59,"_32":33,"_34":256,"_23":24,"_155":-5,"_26":257},{"_41":243,"_31":244,"_29":245,"_150":-5,"_39":40,"_38":246,"_152":24,"_36":247,"_13":59,"_32":248,"_34":249,"_23":24,"_155":-5,"_26":250},{"_41":236,"_31":237,"_29":238,"_150":-5,"_39":40,"_38":239,"_152":118,"_36":240,"_13":59,"_32":20,"_34":241,"_23":24,"_155":-5,"_26":242},{"_41":229,"_31":230,"_29":231,"_150":-5,"_39":40,"_38":232,"_152":24,"_36":233,"_13":59,"_32":33,"_34":234,"_23":24,"_155":-5,"_26":235},{"_41":221,"_31":222,"_29":223,"_150":-5,"_39":40,"_38":224,"_152":24,"_36":225,"_13":59,"_32":226,"_34":227,"_23":24,"_155":-5,"_26":228},{"_41":214,"_31":215,"_29":216,"_150":-5,"_39":40,"_38":217,"_152":24,"_36":218,"_13":59,"_32":33,"_34":219,"_23":24,"_155":-5,"_26":220},{"_41":207,"_31":208,"_29":209,"_150":-5,"_39":40,"_38":210,"_152":24,"_36":211,"_13":59,"_32":33,"_34":212,"_23":24,"_155":-5,"_26":213},{"_41":200,"_31":201,"_29":202,"_150":-5,"_39":40,"_38":203,"_152":24,"_36":204,"_13":59,"_32":33,"_34":205,"_23":24,"_155":-5,"_26":206},{"_41":193,"_31":194,"_29":195,"_150":-5,"_39":40,"_38":196,"_152":24,"_36":197,"_13":59,"_32":33,"_34":198,"_23":24,"_155":-5,"_26":199},{"_41":186,"_31":187,"_29":188,"_150":-5,"_39":40,"_38":189,"_152":24,"_36":190,"_13":59,"_32":33,"_34":191,"_23":24,"_155":-5,"_26":192},{"_41":179,"_31":180,"_29":181,"_150":-5,"_39":40,"_38":182,"_152":24,"_36":183,"_13":59,"_32":33,"_34":184,"_23":24,"_155":-5,"_26":185},{"_41":172,"_31":173,"_29":174,"_150":-5,"_39":40,"_38":175,"_152":24,"_36":176,"_13":59,"_32":33,"_34":177,"_23":24,"_155":-5,"_26":178},{"_41":165,"_31":166,"_29":167,"_150":-5,"_39":40,"_38":168,"_152":24,"_36":169,"_13":59,"_32":33,"_34":170,"_23":24,"_155":-5,"_26":171},{"_41":157,"_31":158,"_29":159,"_150":-5,"_39":40,"_38":160,"_152":118,"_36":161,"_13":162,"_32":33,"_34":163,"_23":24,"_155":-5,"_26":164},{"_41":147,"_31":148,"_29":149,"_150":-5,"_39":40,"_38":151,"_152":24,"_36":153,"_13":59,"_32":33,"_34":154,"_23":24,"_155":-5,"_26":156},"6cbbe2f3-a8a4-451f-a3d8-44dca2721c92","theme.ts","f2c7820e-668d-11f1-9138-1607ee4eb77e","parentId",33,"latest",["D",1781289527438],"/**\n * Branding + theme for the Discord CAPTCHA Shield.\n *\n * This is the ONE file you edit to make the template your own. It replaces the\n * site-specific `core/` dependencies the original was coupled to, so the shield\n * ships fully self-contained. Swap the colors, logo, copy, and rules below and\n * the portal page, the OG card, and every Discord embed re-skin together.\n *\n * Ships themed for `catalloc` — a warm \"tabby\" palette and cat-flavored copy —\n * as a worked example. Replace it with yours.\n */\n\n// ========================================\n// BRAND\n// ========================================\n\nexport const brand = {\n /** Display name. The DISCORD/portal env var VERIFY_SERVER_NAME overrides this\n * at runtime, so you can reuse one template for several servers. */\n name: \"catalloc\",\n\n /** Headline + tagline rendered onto the social (OG) card. */\n ogHeadline: \"ARE YOU HUMAN?\",\n ogTagline: \"Solve a quick CAPTCHA to unlock the Discord\",\n\n /** Square logo (≈300px+). Shown on the portal card, the OG card, and the\n * rules embed thumbnail. Defaults to a placeholder cat — swap for your own. */\n logoUrl: \"https://placecats.com/300/300\",\n\n /** Accent color — drives buttons, the portal header bar, and embed stripes.\n * `embedColor` is the same color as a Discord-friendly integer (0xRRGGBB). */\n accentColor: \"#F4A340\", // tabby orange\n accentColorBright: \"#FFC15E\",\n embedColor: 0xf4a340,\n\n /** Shown by crawlers before the cron first generates /og.png. */\n ogFallbackImage: \"https://placecats.com/1200/630\",\n};\n\n// ========================================\n// RULES (posted by post-rules.ts)\n// ========================================\n\nexport interface Rule {\n name: string;\n value: string;\n}\n\n/** Server rules rendered into the rules embed. Rewrite for your community. */\nexport const rules: Rule[] = [\n {\n name: \"1. BE KIND\",\n value:\n \"We're here to have a good time. If you have a problem with someone, try to sort it out civilly — and if that fails, ping a mod and we'll help mediate.\",\n },\n {\n name: \"2. KEEP IT ON-TOPIC\",\n value:\n \"No politics or hot-button drama. There are plenty of places on the internet for that; this isn't one of them.\",\n },\n {\n name: \"3. NO HATE SPEECH\",\n value:\n \"Everyone is welcome here. Zero tolerance for racism, sexism, homophobia, or hate speech of any kind.\",\n },\n {\n name: \"4. NO NSFW / NSFL CONTENT\",\n value:\n \"Don't post vulgar, obscene, or explicit content. Keep it SFW (cat pictures excepted).\",\n },\n {\n name: \"5. NO SPAM OR SELF-PROMO\",\n value:\n \"Don't flood channels, mass-DM members, or drop unsolicited invite links. Ask a mod before promoting anything.\",\n },\n {\n name: \"6. RESPECT THE MODS\",\n value:\n \"Mods enforce these rules as needed. Most violations get a warning; extreme or repeat cases may result in a ban.\",\n },\n];\n\n// ========================================\n// ABOUT (posted by post-about.ts)\n// ========================================\n\nexport interface AboutInfo {\n /** One-line hook under the title. */\n tagline: string;\n /** A paragraph (or two) describing the community. Markdown is allowed. */\n description: string;\n /** Optional bullet-style highlights rendered as embed fields. */\n highlights: Rule[];\n}\n\n/**\n * The \"About\" card the bot posts into a DMZ channel (one unverified members can\n * see) so newcomers know what they're joining before they verify. Rewrite for\n * your community.\n */\nexport const about: AboutInfo = {\n tagline: \"A cozy corner of the internet for cat people. 🐾\",\n description:\n \"**catalloc** is a laid-back community built around good vibes, good company, and an unreasonable number of cat pictures. Whether you're here to hang out, share your projects, or just lurk with a coffee, you're welcome.\\n\\nVerification keeps the bots and raiders out — pass a quick CAPTCHA and the rest of the server opens up.\",\n highlights: [\n { name: \"💬 Active chat\", value: \"Always someone around to talk to.\" },\n { name: \"🐱 Cat tax\", value: \"Pictures of your cat are strongly encouraged.\" },\n { name: \"🛡️ Bot-free\", value: \"CAPTCHA-gated so it stays human.\" },\n ],\n};\n\n// ========================================\n// STYLES (replaces core/styles.tsx getAllStyles)\n// ========================================\n\n/**\n * All CSS the portal needs, self-contained. Maps the brand accent onto theme\n * variables and ships the small `.btn` + portal layout the page references.\n * Soft, rounded, cat-friendly — no external stylesheet required.\n */\nexport function portalCss(): string {\n return `\n :root {\n --accent: ${brand.accentColor};\n --accent-bright: ${brand.accentColorBright};\n --bg: #0E0D0B;\n --surface: #1C1A17;\n --surface-2: #2A2722;\n --text: #F5F1EA;\n --muted: rgba(245,241,234,0.65);\n }\n\n * { margin: 0; padding: 0; box-sizing: border-box; }\n html { scroll-behavior: smooth; }\n body {\n font-family: 'Quicksand', system-ui, sans-serif;\n background-color: var(--bg);\n color: var(--text);\n -webkit-font-smoothing: antialiased;\n }\n\n .btn {\n font-family: 'Quicksand', sans-serif;\n font-size: 1rem;\n font-weight: 600;\n letter-spacing: 1px;\n text-decoration: none;\n padding: 0.9rem 2rem;\n border: none;\n border-radius: 14px;\n cursor: pointer;\n transition: all 0.25s ease;\n }\n .btn-primary {\n background: linear-gradient(135deg, var(--accent), var(--accent-bright));\n color: #1a1206;\n }\n .btn-primary:hover {\n transform: translateY(-2px);\n box-shadow: 0 10px 28px rgba(244,163,64,0.35);\n }\n .btn-secondary {\n background: transparent;\n color: var(--text);\n border: 2px solid var(--accent);\n }\n .btn-secondary:hover {\n background: rgba(244,163,64,0.12);\n transform: translateY(-2px);\n }\n\n .verify-wrap {\n min-height: 100vh;\n display: flex;\n align-items: center;\n justify-content: center;\n padding: 24px;\n background:\n radial-gradient(ellipse at 50% 0%, rgba(244,163,64,0.16) 0%, transparent 60%),\n linear-gradient(160deg, #0E0D0B 0%, #15120E 60%, #0E0D0B 100%);\n }\n .verify-card {\n width: 100%;\n max-width: 440px;\n background: linear-gradient(150deg, var(--surface-2), var(--surface));\n border: 1px solid rgba(244,163,64,0.22);\n padding: 2.5rem 2rem;\n position: relative;\n overflow: hidden;\n text-align: center;\n border-radius: 24px;\n box-shadow: 0 24px 60px rgba(0,0,0,0.55);\n }\n .verify-card::before {\n content: '';\n position: absolute;\n top: 0; left: 0; right: 0;\n height: 4px;\n background: linear-gradient(90deg, var(--accent), var(--accent-bright), var(--accent));\n }\n .verify-logo {\n width: 92px;\n height: 92px;\n object-fit: cover;\n border-radius: 50%;\n margin: 0 auto 1.25rem;\n border: 3px solid rgba(244,163,64,0.5);\n box-shadow: 0 0 26px rgba(244,163,64,0.4);\n }\n .verify-card h1 {\n font-family: 'Fredoka', sans-serif;\n font-weight: 600;\n font-size: 2.1rem;\n letter-spacing: 1px;\n line-height: 1.05;\n margin-bottom: 0.4rem;\n }\n .verify-sub {\n font-weight: 600;\n font-size: 0.8rem;\n letter-spacing: 1.5px;\n text-transform: uppercase;\n color: var(--accent);\n margin-bottom: 1.75rem;\n }\n .verify-steps {\n list-style: none;\n text-align: left;\n max-width: 300px;\n margin: 0 auto 1.75rem;\n display: grid;\n gap: 0.65rem;\n }\n .verify-steps li {\n display: flex;\n align-items: center;\n gap: 0.8rem;\n font-size: 0.92rem;\n color: var(--muted);\n }\n .verify-steps .n {\n flex: none;\n width: 28px;\n height: 28px;\n background: var(--accent);\n color: #1a1206;\n font-family: 'Fredoka', sans-serif;\n font-weight: 600;\n font-size: 0.95rem;\n display: grid;\n place-items: center;\n border-radius: 50%;\n }\n .cf-holder {\n display: flex;\n justify-content: center;\n min-height: 70px;\n margin-bottom: 1.5rem;\n }\n .btn-block { width: 100%; display: inline-flex; align-items: center; justify-content: center; gap: 0.6rem; }\n .btn-block svg { width: 20px; height: 20px; }\n .btn:disabled { opacity: 0.4; cursor: not-allowed; transform: none !important; box-shadow: none !important; }\n .verify-err {\n display: none;\n margin-top: 1.1rem;\n color: var(--text);\n background: rgba(244,163,64,0.12);\n border: 1px solid rgba(244,163,64,0.4);\n border-radius: 12px;\n padding: 0.7rem 0.9rem;\n font-size: 0.85rem;\n line-height: 1.5;\n }\n .verify-foot {\n margin-top: 1.75rem;\n color: rgba(245,241,234,0.35);\n font-size: 0.7rem;\n letter-spacing: 1px;\n text-transform: uppercase;\n }\n .result-badge {\n width: 84px;\n height: 84px;\n margin: 0 auto 1.5rem;\n display: grid;\n place-items: center;\n border-radius: 50%;\n font-size: 2.6rem;\n line-height: 1;\n }\n .result-badge.ok { background: rgba(74,176,108,0.15); color: #4ab06c; border: 2px solid #4ab06c; }\n .result-badge.bad { background: rgba(244,163,64,0.15); color: var(--accent-bright); border: 2px solid var(--accent); }\n .result-msg { color: var(--muted); line-height: 1.7; font-size: 1.05rem; }\n .result-link { margin-top: 1.5rem; }\n`;\n}\n","label",[148],"0cbececb-1d54-4a25-a688-542581aca01c","store.ts","f2c267e2-668d-11f1-847c-1607ee4eb77e",77,["D",1781305585269],1,"/**\n * Per-key blob storage for the IDs the shield owns: the DMZ category, the four\n * DMZ channels, and the messages it posts into them.\n *\n * Persisting these gives two things:\n * 1. Idempotent setup — channel creation can skip channels it already made.\n * 2. In-place message updates — re-running a post tool EDITS the message it\n * posted last time instead of dropping a duplicate.\n *\n * Each ID lives under its OWN blob key (one channel, one message, one category\n * per key) rather than in a single aggregate object. That makes writes\n * independent: setup.ts can post all four DMZ messages concurrently without the\n * read-modify-write races a shared object would have.\n *\n * Multi-tenant: every key is namespaced by guild id, so each shielded server\n * owns an isolated set of channel/message/category IDs in the shared store.\n *\n * Channel-ID resolution order (see mod.ts `resolveChannel`) is:\n * explicit parameter -> this store -> the per-guild config field\n * so a server that ran setup.ts uses the bot-made channels, while a server that\n * wired channel IDs by hand still works via its config.\n */\n\nimport { blob } from \"https://esm.town/v/std/blob\";\n\nconst PREFIX = \"captcha_shield_v1\";\n\nexport type ChannelKind = \"about\" | \"rules\" | \"verify\" | \"honeypot\";\n\nconst channelKey = (guildId: string, kind: ChannelKind) =>\n `${PREFIX}_${guildId}_channel_${kind}`;\nconst messageKey = (guildId: string, kind: ChannelKind) =>\n `${PREFIX}_${guildId}_message_${kind}`;\nconst categoryKey = (guildId: string) => `${PREFIX}_${guildId}_category`;\n\n/** Read a single stored ID. Undefined if it was never written. */\nasync function readId(key: string): Promise {\n try {\n const res = await blob.get(key);\n const text = (await res.text()).trim();\n return text || undefined;\n } catch {\n return undefined; // not written yet\n }\n}\n\n/** Write a single stored ID. One key per ID, so concurrent writes don't race. */\nasync function writeId(key: string, id: string): Promise {\n await blob.set(key, id);\n}\n\nexport const getChannel = (\n guildId: string,\n kind: ChannelKind,\n): Promise => readId(channelKey(guildId, kind));\nexport const getMessage = (\n guildId: string,\n kind: ChannelKind,\n): Promise => readId(messageKey(guildId, kind));\nexport const getCategory = (guildId: string): Promise =>\n readId(categoryKey(guildId));\n\nexport const rememberChannel = (\n guildId: string,\n kind: ChannelKind,\n id: string,\n): Promise => writeId(channelKey(guildId, kind), id);\nexport const rememberMessage = (\n guildId: string,\n kind: ChannelKind,\n id: string,\n): Promise => writeId(messageKey(guildId, kind), id);\nexport const rememberCategory = (\n guildId: string,\n id: string,\n): Promise => writeId(categoryKey(guildId), id);\n\nconst KINDS: ChannelKind[] = [\"about\", \"rules\", \"verify\", \"honeypot\"];\n\n/**\n * Migrate IDs written by the single-guild build (un-namespaced keys like\n * `captcha_shield_v1_channel_verify`) to this guild's namespaced keys. Copies\n * the category, four channel IDs, and four message IDs — but never clobbers a\n * value already present under the new key. Best-effort and idempotent; called\n * once from the legacy-env migration so post tools keep editing in place.\n */\nexport async function migrateLegacyKeys(guildId: string): Promise {\n const copy = async (oldKey: string, newKey: string) => {\n if (await readId(newKey)) return; // already migrated / set\n const val = await readId(oldKey);\n if (val) await writeId(newKey, val);\n };\n const jobs = [copy(`${PREFIX}_category`, categoryKey(guildId))];\n for (const k of KINDS) {\n jobs.push(copy(`${PREFIX}_channel_${k}`, channelKey(guildId, k)));\n jobs.push(copy(`${PREFIX}_message_${k}`, messageKey(guildId, k)));\n }\n await Promise.all(jobs);\n}\n",[158],"9f54b84b-f362-4c68-8ff2-0f6ddf0e4a4a","setup.ts","f3b6028a-668d-11f1-befe-1607ee4eb77e",62,["D",1781289529030],"// ============================================================================\n// One-shot DMZ bootstrap (manual trigger)\n// ============================================================================\n//\n// Run this file ONCE (Val Town \"Run\" button) to stand up the whole DMZ:\n// 1. Creates a \"Welcome\" category + #about, #rules, #verify, #do-not-post\n// channels with read-only @everyone overwrites (the honeypot stays open).\n// 2. Posts the about / rules / verify / honeypot messages into them.\n// Every channel + message ID is saved to blob storage, so re-running any\n// post-*.ts afterwards EDITS its message in place instead of duplicating, and\n// re-running setup.ts skips channels that already exist.\n//\n// Requires: DISCORD_BOT_TOKEN, DISCORD_GUILD_ID, DISCORD_CLIENT_ID, and the bot\n// must have **Manage Channels** (plus the usual Send Messages + Embed Links).\n// Optional: VERIFY_SERVER_NAME, VERIFY_PORTAL_URL (adds the Verify buttons).\n//\n// Already have channels? Skip this — set the DISCORD_*_CHANNEL_ID env vars and\n// run the individual post-*.ts scripts instead.\n// ============================================================================\n\nimport { createDmzChannels } from \"./channels.ts\";\nimport {\n postAboutMessage,\n postHoneypotMessage,\n postRulesMessage,\n postVerifyMessage,\n type VerifyConfig,\n} from \"./mod.ts\";\nimport { env, optEnv } from \"./config.ts\";\n\nexport async function main() {\n const redirect = optEnv(\"VERIFY_REDIRECT_URI\");\n const config = {\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n guildId: env(\"DISCORD_GUILD_ID\"),\n clientId: env(\"DISCORD_CLIENT_ID\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n portalUrl: optEnv(\"VERIFY_PORTAL_URL\") ??\n (redirect ? redirect.replace(/\\/callback$/, \"\") : undefined),\n } as VerifyConfig;\n\n console.log(\"Creating DMZ channels…\");\n for (const r of await createDmzChannels(config)) {\n const mark = r.status === \"created\" ? \"+\" : r.status === \"exists\" ? \"=\" : \"✗\";\n console.log(` ${mark} ${r.name}: ${r.status}${r.id ? ` (${r.id})` : \"\"}${r.detail ? ` — ${r.detail}` : \"\"}`);\n }\n\n // Post concurrently — each message's ID lives under its own blob key, so the\n // four writes don't race. (The channels exist by now, created above.)\n console.log(\"Posting DMZ messages…\");\n const steps: [string, (c: VerifyConfig) => Promise<{ ok: boolean; detail: string }>][] = [\n [\"about\", postAboutMessage],\n [\"rules\", postRulesMessage],\n [\"verify\", postVerifyMessage],\n [\"honeypot\", postHoneypotMessage],\n ];\n const posted = await Promise.all(\n steps.map(([name, post]) =>\n post(config).then((res) => [name, res] as const)\n ),\n );\n for (const [name, res] of posted) {\n console.log(` ${res.ok ? \"✓\" : \"✗\"} ${name}: ${res.detail}`);\n }\n\n console.log(\n \"\\nDone. Channel + message IDs are saved to blob — re-run any post-*.ts to edit a message in place.\",\n );\n}\n\nawait main();\n",[166],"3185a278-3b07-49c5-b016-1c8115756cf0","schema.ts","55e2e976-66b3-11f1-aadb-1607ee4eb77e",74,["D",1781305585108],"/**\n * Centralized SQLite schema + migrations for the Discord CAPTCHA Shield.\n *\n * Owns every table the shield touches so the DDL lives in ONE place:\n * - captcha_guilds per-server config + white-label branding\n * - captcha_verify_states_v2 one-time OAuth state nonces (guild-scoped)\n * - captcha_verify_log_v2 verification audit log (guild-scoped)\n * - captcha_verify_alerts raid-alert debounce state (scoped via the kind)\n *\n * Migration style (per AGENTS.md): we do NOT ALTER existing tables. Adding the\n * multi-tenant `guild_id` column means a NEW table name (`*_v2`) created fresh\n * with the column already present. Upgrading from the single-guild build:\n * - state nonces are ephemeral (10-min TTL) — the new table just starts empty\n * - the audit log is copied across (guild_id set to the legacy server) by\n * migrateLegacyLog(), called once from the legacy-env migration\n * - the alerts table is UNCHANGED (its schema is the same; the guild is\n * namespaced into the `kind` value, e.g. `raid:`)\n *\n * `ensureSchema()` is idempotent (CREATE TABLE IF NOT EXISTS) and memoized per\n * isolate, so call it freely before any query.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\n\nexport const GUILDS_TABLE = \"captcha_guilds\";\nexport const STATES_TABLE = \"captcha_verify_states_v2\";\nexport const LOG_TABLE = \"captcha_verify_log_v2\";\nexport const ALERTS_TABLE = \"captcha_verify_alerts\";\n\n// Single-guild predecessor of LOG_TABLE (no guild_id). Read once during the\n// legacy migration to copy history forward, never written to again.\nconst LEGACY_LOG_TABLE = \"captcha_verify_log\";\n\nlet schemaReady = false;\n\n/**\n * Create every table. Idempotent and memoized per isolate. Fresh databases and\n * upgrades alike get the full multi-tenant schema — no ALTER needed because the\n * guild-scoped tables carry new names.\n */\nexport async function ensureSchema(): Promise {\n if (schemaReady) return;\n\n // --- Per-server config + branding ---------------------------------------\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${GUILDS_TABLE} (\n guild_id TEXT PRIMARY KEY,\n role_id TEXT NOT NULL,\n server_name TEXT,\n disabled INTEGER NOT NULL DEFAULT 0,\n brand_name TEXT,\n logo_url TEXT,\n accent_color TEXT,\n accent_color_bright TEXT,\n embed_color INTEGER,\n og_headline TEXT,\n og_tagline TEXT,\n og_fallback_image TEXT,\n rules_json TEXT,\n about_json TEXT,\n turnstile_site_key TEXT,\n turnstile_secret_key TEXT,\n alert_webhook_url TEXT,\n raid_threshold INTEGER,\n raid_window_ms INTEGER,\n alert_cooldown_ms INTEGER,\n verify_channel_id TEXT,\n rules_channel_id TEXT,\n about_channel_id TEXT,\n honeypot_channel_id TEXT,\n portal_url TEXT,\n redirect_uri_override TEXT,\n created_at INTEGER NOT NULL,\n updated_at INTEGER NOT NULL\n )\n `);\n\n // --- One-time OAuth state nonces (guild-scoped) -------------------------\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${STATES_TABLE} (\n state TEXT PRIMARY KEY,\n guild_id TEXT,\n created_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )\n `);\n\n // --- Verification audit log (guild-scoped) ------------------------------\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${LOG_TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n guild_id TEXT,\n discord_user_id TEXT NOT NULL,\n discord_username TEXT,\n created_at INTEGER NOT NULL,\n success INTEGER NOT NULL,\n detail TEXT\n )\n `);\n\n // Raid-detection COUNT is `WHERE guild_id = ? AND success = 1 AND created_at\n // > ?`; lead with guild_id so the scan is an index seek per tenant.\n await sqlite.execute(`\n CREATE INDEX IF NOT EXISTS idx_${LOG_TABLE}_guild_success_created\n ON ${LOG_TABLE} (guild_id, success, created_at)\n `);\n\n // --- Raid-alert debounce (one row per guild+kind via the kind value) ----\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${ALERTS_TABLE} (\n kind TEXT PRIMARY KEY,\n last_alert_at INTEGER NOT NULL\n )\n `);\n\n schemaReady = true;\n}\n\n/**\n * One-time copy of the single-guild audit log into the guild-scoped table,\n * stamping every legacy row with `guildId` (the one server the old deployment\n * served). Best-effort: no-ops if the old table is absent (fresh install) or\n * the new table already holds rows (already migrated / live traffic). Called\n * once from the legacy-env migration, after the guild row is seeded.\n */\nexport async function migrateLegacyLog(guildId: string): Promise {\n await ensureSchema();\n try {\n // Don't copy if the new log already has data — avoids duplicating history\n // on a re-run or a cold-boot race.\n const have = await sqlite.execute(`SELECT COUNT(*) FROM ${LOG_TABLE}`);\n if (Number(have.rows?.[0]?.[0] ?? 0) > 0) return;\n\n await sqlite.execute({\n sql: `INSERT INTO ${LOG_TABLE}\n (guild_id, discord_user_id, discord_username, created_at, success, detail)\n SELECT ?, discord_user_id, discord_username, created_at, success, detail\n FROM ${LEGACY_LOG_TABLE}`,\n args: [guildId],\n });\n } catch {\n // Old table missing or unreadable — nothing to migrate.\n }\n}\n",[173],"99a532d0-14c9-4ae9-810b-e3e657ca28b5","post-verify.ts","f3d7313a-668d-11f1-b477-1607ee4eb77e",67,["D",1781289529212],"// ============================================================================\n// Post the verification message into Discord (manual trigger)\n// ============================================================================\n//\n// Run this file (Val Town \"Run\" button) and the bot posts a branded embed + a\n// link \"Verify\" button into DISCORD_VERIFY_CHANNEL_ID. Post it once; it lives\n// in your verify channel.\n//\n// Requires:\n// DISCORD_BOT_TOKEN the bot (already set for verification)\n// DISCORD_VERIFY_CHANNEL_ID the channel to post into\n// VERIFY_PORTAL_URL public portal URL (or derived from VERIFY_REDIRECT_URI)\n// VERIFY_SERVER_NAME optional display name\n// The bot must have Send Messages + Embed Links in that channel.\n// ============================================================================\n\nimport { postVerifyMessage, type VerifyConfig } from \"./mod.ts\";\nimport { env, optEnv } from \"./config.ts\";\n\nexport async function main() {\n const redirect = optEnv(\"VERIFY_REDIRECT_URI\");\n // postVerifyMessage only reads these fields; cast the partial as VerifyConfig.\n const config = {\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n verifyChannelId: optEnv(\"DISCORD_VERIFY_CHANNEL_ID\"),\n portalUrl: optEnv(\"VERIFY_PORTAL_URL\") ??\n (redirect ? redirect.replace(/\\/callback$/, \"\") : undefined),\n } as VerifyConfig;\n\n const result = await postVerifyMessage(config);\n console.log(\n result.ok\n ? `Verification message posted (${result.detail}).`\n : `Failed to post verification message: ${result.detail}`,\n );\n return result;\n}\n\nawait main();\n",[180],"b833b5a4-d48d-4ff2-9d73-4acb9b04de9e","post-rules.ts","f3db993c-668d-11f1-bf75-1607ee4eb77e",68,["D",1781289529256],"// ============================================================================\n// Post the server rules into Discord (manual trigger)\n// ============================================================================\n//\n// Run this file (Val Town \"Run\" button) and the bot posts the rules (from\n// theme.ts) as a branded embed into DISCORD_RULES_CHANNEL_ID. Post it once.\n//\n// Requires: DISCORD_BOT_TOKEN, DISCORD_RULES_CHANNEL_ID (numeric ID, channel\n// link, or #mention all accepted). Optional: VERIFY_SERVER_NAME (footer).\n// The bot needs Send Messages + Embed Links in that channel.\n// ============================================================================\n\nimport { postRulesMessage, type VerifyConfig } from \"./mod.ts\";\nimport { env, optEnv } from \"./config.ts\";\n\nexport async function main() {\n const config = {\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n rulesChannelId: optEnv(\"DISCORD_RULES_CHANNEL_ID\"),\n } as VerifyConfig;\n\n const result = await postRulesMessage(config);\n console.log(\n result.ok\n ? `Rules message posted (${result.detail}).`\n : `Failed to post rules message: ${result.detail}`,\n );\n return result;\n}\n\nawait main();\n",[187],"e4269faa-b436-4b1c-9972-f1a676a9092b","post-honeypot.ts","f2dc5f1c-668d-11f1-b0f1-1607ee4eb77e",36,["D",1781289527593],"// ============================================================================\n// Post the honeypot warning into Discord (manual trigger)\n// ============================================================================\n//\n// Run this file (Val Town \"Run\" button) and the bot posts a small \"do not post\n// here\" embed into DISCORD_HONEYPOT_CHANNEL_ID, pointing legit users to the\n// verify channel (and rules). The honeypot is a trap: bots that auto-spam every\n// channel post here and out themselves — pair it with an AutoMod rule or manual\n// review to ban anyone who posts.\n//\n// Requires: DISCORD_BOT_TOKEN, DISCORD_HONEYPOT_CHANNEL_ID. Uses\n// DISCORD_VERIFY_CHANNEL_ID and DISCORD_RULES_CHANNEL_ID for the in-embed links\n// (numeric ID, channel link, or #mention all accepted). Optional:\n// VERIFY_SERVER_NAME. Bot needs Send Messages + Embed Links in that channel.\n// ============================================================================\n\nimport { postHoneypotMessage, type VerifyConfig } from \"./mod.ts\";\nimport { env, optEnv } from \"./config.ts\";\n\nexport async function main() {\n const config = {\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n honeypotChannelId: optEnv(\"DISCORD_HONEYPOT_CHANNEL_ID\"),\n verifyChannelId: optEnv(\"DISCORD_VERIFY_CHANNEL_ID\"),\n rulesChannelId: optEnv(\"DISCORD_RULES_CHANNEL_ID\"),\n } as VerifyConfig;\n\n const result = await postHoneypotMessage(config);\n console.log(\n result.ok\n ? `Honeypot message posted (${result.detail}).`\n : `Failed to post honeypot message: ${result.detail}`,\n );\n return result;\n}\n\nawait main();\n",[194],"64528d20-ec2f-4bf1-8181-74bf24210983","post-about.ts","f3bcf7ac-668d-11f1-bf75-1607ee4eb77e",63,["D",1781289528996],"// ============================================================================\n// Post the \"About the community\" message into Discord (manual trigger)\n// ============================================================================\n//\n// Run this file (Val Town \"Run\" button) and the bot posts a branded \"About\"\n// embed (from theme.ts) into DISCORD_ABOUT_CHANNEL_ID. Put this channel in the\n// DMZ — somewhere unverified members can see — so newcomers know what they're\n// joining before they verify. Post it once.\n//\n// Requires: DISCORD_BOT_TOKEN, DISCORD_ABOUT_CHANNEL_ID (numeric ID, channel\n// link, or #mention all accepted). Optional: VERIFY_SERVER_NAME,\n// VERIFY_PORTAL_URL (adds a Verify button), DISCORD_VERIFY_CHANNEL_ID and\n// DISCORD_RULES_CHANNEL_ID (linked as #mentions in the embed).\n// The bot needs Send Messages + Embed Links in that channel.\n// ============================================================================\n\nimport { postAboutMessage, type VerifyConfig } from \"./mod.ts\";\nimport { env, optEnv } from \"./config.ts\";\n\nexport async function main() {\n const redirect = optEnv(\"VERIFY_REDIRECT_URI\");\n const config = {\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n aboutChannelId: optEnv(\"DISCORD_ABOUT_CHANNEL_ID\"),\n verifyChannelId: optEnv(\"DISCORD_VERIFY_CHANNEL_ID\"),\n rulesChannelId: optEnv(\"DISCORD_RULES_CHANNEL_ID\"),\n portalUrl: optEnv(\"VERIFY_PORTAL_URL\") ??\n (redirect ? redirect.replace(/\\/callback$/, \"\") : undefined),\n } as VerifyConfig;\n\n const result = await postAboutMessage(config);\n console.log(\n result.ok\n ? `About message posted (${result.detail}).`\n : `Failed to post about message: ${result.detail}`,\n );\n return result;\n}\n\nawait main();\n",[201],"9944d46b-c4aa-4378-b1dd-333623c95161","og.ts","f3c22ae2-668d-11f1-b477-1607ee4eb77e",64,["D",1781289529104],"/**\n * Dynamic Open Graph card for the verification portal.\n *\n * satori renders the layout to an SVG with text as vector paths (so the\n * rasterizer needs no fonts), then resvg-wasm turns that into a PNG. The\n * result is expensive to generate cold (module + wasm + font loads), so it is\n * persisted to blob storage and also memoized in-isolate. The /og.png route\n * calls readVerifyOgImage(); the cron pre-warms it (refreshVerifyOgImage) so a\n * crawler never waits on a cold generation.\n *\n * All branding (logo, name, colors, copy) comes from ./theme.ts.\n */\n\nimport satori from \"https://esm.sh/satori@0.10.13\";\nimport { html } from \"https://esm.sh/satori-html@0.3.2\";\nimport { initWasm, Resvg } from \"https://esm.sh/@resvg/resvg-wasm@2.6.2\";\nimport { blob } from \"https://esm.town/v/std/blob\";\nimport { brand } from \"./theme.ts\";\n\nconst BLOB_KEY = \"verify_og_png_v1\";\n\nconst FONT_SOURCES = [\n {\n name: \"Fredoka\",\n weight: 600 as const,\n url:\n \"https://cdn.jsdelivr.net/npm/@fontsource/fredoka/files/fredoka-latin-600-normal.woff\",\n },\n {\n name: \"Quicksand\",\n weight: 500 as const,\n url:\n \"https://cdn.jsdelivr.net/npm/@fontsource/quicksand/files/quicksand-latin-500-normal.woff\",\n },\n];\n\nlet pngCache: Uint8Array | null = null;\nlet fontsCache:\n | Array<\n { name: string; weight: 500 | 600; style: \"normal\"; data: ArrayBuffer }\n >\n | null = null;\nlet logoCache: string | null = null;\nlet wasmReady = false;\n\nasync function loadFonts() {\n if (fontsCache) return fontsCache;\n fontsCache = await Promise.all(FONT_SOURCES.map(async (f) => ({\n name: f.name,\n weight: f.weight,\n style: \"normal\" as const,\n data: await (await fetch(f.url)).arrayBuffer(),\n })));\n return fontsCache;\n}\n\nfunction toBase64(bytes: Uint8Array): string {\n let bin = \"\";\n const chunk = 0x8000;\n for (let i = 0; i < bytes.length; i += chunk) {\n bin += String.fromCharCode(...bytes.subarray(i, i + chunk));\n }\n return btoa(bin);\n}\n\nasync function loadLogo(): Promise {\n if (logoCache) return logoCache;\n const res = await fetch(brand.logoUrl);\n // Keep the original mime so satori/resvg decode it correctly (the brand logo\n // may be a jpeg, png, webp, …).\n const mime = res.headers.get(\"content-type\")?.split(\";\")[0] || \"image/png\";\n const buf = new Uint8Array(await res.arrayBuffer());\n logoCache = `data:${mime};base64,${toBase64(buf)}`;\n return logoCache;\n}\n\nasync function generate(): Promise {\n const [fonts, logo] = await Promise.all([loadFonts(), loadLogo()]);\n\n const markup = html(`\n

${brand.ogHeadline}

${brand.name}

${brand.ogTagline}

\n `);\n\n // satori-html returns a VNode; satori types its first arg as ReactNode. The\n // shapes are compatible at runtime — cast to satori's own parameter type.\n const svg = await satori(\n markup as unknown as Parameters[0],\n { width: 1200, height: 630, fonts },\n );\n\n if (!wasmReady) {\n await initWasm(\n fetch(\"https://esm.sh/@resvg/resvg-wasm@2.6.2/index_bg.wasm\"),\n );\n wasmReady = true;\n }\n const resvg = new Resvg(svg, { fitTo: { mode: \"width\", value: 1200 } });\n return resvg.render().asPng();\n}\n\n/** Serve the cached card (memory, then blob). Null if not generated yet. */\nexport async function readVerifyOgImage(): Promise {\n if (pngCache) return pngCache;\n try {\n const res = await blob.get(BLOB_KEY);\n const buf = new Uint8Array(await res.arrayBuffer());\n if (buf.length > 0) {\n pngCache = buf;\n return buf;\n }\n } catch {\n // not generated yet\n }\n return null;\n}\n\n/**\n * Generate the card and persist it. Heavy (cold module + wasm + font loads),\n * so this runs from the cron — which executes to completion without an HTTP\n * request's wall-clock limit — never inline on the /og.png hot path.\n */\nexport async function refreshVerifyOgImage(): Promise {\n const png = await generate();\n pngCache = png;\n // A Uint8Array is a valid body at runtime; the cast satisfies blob.set's\n // BodyInit typing (the DOM lib narrows BufferSource).\n await blob.set(BLOB_KEY, png as BodyInit);\n return png.length;\n}\n",[208],"af86108e-07f3-4d84-9333-1cb72a46c666","mod.ts","f2ebeaa4-668d-11f1-9138-1607ee4eb77e",38,["D",1781289527691],"/**\n * Discord CAPTCHA Shield — CAPTCHA + Discord OAuth verification module.\n *\n * A self-contained verification gate for a Discord server:\n * 1. Visitor solves a Cloudflare Turnstile CAPTCHA.\n * 2. Server verifies the Turnstile token and mints a one-time, short-lived\n * state nonce (SQLite) bound to that passed challenge.\n * 3. Visitor authorizes via Discord OAuth2 (identify scope only).\n * 4. On callback the nonce is validated + burned, identity is read, and the\n * configured bot grants the verified role to the (already-joined) member.\n *\n * Config-driven: everything visual lives in ./theme.ts, everything secret comes\n * from env (see ./config.ts). To shield a second Discord, clone the whole val\n * and set that copy's env — its project-scoped SQLite keeps storage isolated.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport { about, brand, portalCss, rules } from \"./theme.ts\";\nimport {\n type ChannelKind,\n getChannel,\n getMessage,\n rememberChannel,\n rememberMessage,\n} from \"./store.ts\";\n\n// ========================================\n// CONSTANTS\n// ========================================\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst TURNSTILE_VERIFY_URL =\n \"https://challenges.cloudflare.com/turnstile/v0/siteverify\";\nconst STATE_TTL_MS = 10 * 60 * 1000; // verification link valid for 10 minutes\n\nconst STATES_TABLE = \"captcha_verify_states\";\nconst LOG_TABLE = \"captcha_verify_log\";\nconst ALERTS_TABLE = \"captcha_verify_alerts\";\n\n// Raid detection: alert when an abnormal number of *successful* verifications\n// land within a short window (the pattern Turnstile can't catch — farmed\n// accounts solving real CAPTCHAs). Debounced so we send at most one alert per\n// cooldown. These are defaults; override per-deployment via VerifyConfig.\nconst DEFAULT_RAID_WINDOW_MS = 5 * 60 * 1000; // look back 5 minutes\nconst DEFAULT_RAID_THRESHOLD = 15; // successes within window that trips alert\nconst DEFAULT_ALERT_COOLDOWN_MS = 15 * 60 * 1000; // min gap between alerts\n\n// ========================================\n// TYPES\n// ========================================\n\nexport interface VerifyConfig {\n clientId: string;\n clientSecret: string;\n botToken: string;\n guildId: string;\n roleId: string;\n turnstileSiteKey: string;\n turnstileSecretKey: string;\n /** Display name shown on the portal (defaults to the brand name). */\n serverName?: string;\n /** Override the derived `${origin}/callback` (use for custom domains). */\n redirectUriOverride?: string;\n /** Optional Discord webhook URL for raid alerts. No alerts if unset. */\n alertWebhookUrl?: string;\n /** Successful verifications within the window that trip a raid alert. */\n raidThreshold?: number;\n /** Raid-detection look-back window, in milliseconds. */\n raidWindowMs?: number;\n /** Minimum gap between raid alerts, in milliseconds. */\n alertCooldownMs?: number;\n /** Channel the bot posts the verification message into (for postVerifyMessage). */\n verifyChannelId?: string;\n /** Public base URL of the portal (for the Verify button + card image). */\n portalUrl?: string;\n /** Channel the bot posts the rules embed into (for postRulesMessage). */\n rulesChannelId?: string;\n /** Honeypot/trap channel the bot posts the \"do not post\" warning into. */\n honeypotChannelId?: string;\n /** DMZ channel the bot posts the \"about the community\" embed into. */\n aboutChannelId?: string;\n}\n\ninterface DiscordUser {\n id: string;\n username?: string;\n}\n\n/** Display name for this deployment: env override, else the brand default. */\nfunction displayName(config: VerifyConfig): string {\n return config.serverName ?? brand.name;\n}\n\n// ========================================\n// DATABASE\n// ========================================\n\nlet tablesInitialized = false;\n\nasync function ensureTables(): Promise {\n if (tablesInitialized) return;\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${STATES_TABLE} (\n state TEXT PRIMARY KEY,\n created_at INTEGER NOT NULL,\n used INTEGER NOT NULL DEFAULT 0\n )\n `);\n\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${LOG_TABLE} (\n id INTEGER PRIMARY KEY AUTOINCREMENT,\n discord_user_id TEXT NOT NULL,\n discord_username TEXT,\n created_at INTEGER NOT NULL,\n success INTEGER NOT NULL,\n detail TEXT\n )\n `);\n\n // Keeps the raid-detection COUNT (success + recent window) an index seek.\n await sqlite.execute(`\n CREATE INDEX IF NOT EXISTS idx_${LOG_TABLE}_success_created\n ON ${LOG_TABLE} (success, created_at)\n `);\n\n // Debounce state for alerts (one row per alert kind).\n await sqlite.execute(`\n CREATE TABLE IF NOT EXISTS ${ALERTS_TABLE} (\n kind TEXT PRIMARY KEY,\n last_alert_at INTEGER NOT NULL\n )\n `);\n\n tablesInitialized = true;\n}\n\n/** Delete used or expired nonces. Cheap because the table only ever holds\n * in-flight verifications (we prune on every mint). Best-effort. */\nasync function pruneStates(): Promise {\n try {\n await sqlite.execute({\n sql: `DELETE FROM ${STATES_TABLE} WHERE used = 1 OR created_at < ?`,\n args: [Date.now() - STATE_TTL_MS],\n });\n } catch {\n // pruning is best-effort; never block a verification on it\n }\n}\n\n/** Mint a one-time state nonce. Only called after Turnstile has passed. */\nasync function mintState(): Promise {\n await ensureTables();\n await pruneStates();\n const state = crypto.randomUUID();\n await sqlite.execute({\n sql:\n `INSERT INTO ${STATES_TABLE} (state, created_at, used) VALUES (?, ?, 0)`,\n args: [state, Date.now()],\n });\n return state;\n}\n\n/** Validate and atomically burn a state nonce. Returns a reason on failure. */\nasync function consumeState(\n state: string,\n): Promise<{ ok: true } | { ok: false; reason: string }> {\n await ensureTables();\n const now = Date.now();\n\n // Atomic single-use: only the request that flips `used` from 0->1 on a\n // still-valid row wins. Concurrent callbacks for the same state can't both\n // succeed (no check-then-act race).\n const burn = await sqlite.execute({\n sql:\n `UPDATE ${STATES_TABLE} SET used = 1 WHERE state = ? AND used = 0 AND created_at > ?`,\n args: [state, now - STATE_TTL_MS],\n });\n if ((burn.rowsAffected || 0) === 1) {\n return { ok: true };\n }\n\n // The burn didn't take — figure out why for a helpful message (rare path).\n const res = await sqlite.execute({\n sql: `SELECT used, created_at FROM ${STATES_TABLE} WHERE state = ?`,\n args: [state],\n });\n if (!res.rows || res.rows.length === 0) {\n return { ok: false, reason: \"Invalid session. Please start over.\" };\n }\n if (Number(res.rows[0][0])) {\n return { ok: false, reason: \"This verification link was already used.\" };\n }\n return { ok: false, reason: \"Your session expired. Please start over.\" };\n}\n\nasync function logVerification(\n user: DiscordUser,\n success: boolean,\n detail: string,\n): Promise {\n try {\n await ensureTables();\n await sqlite.execute({\n sql:\n `INSERT INTO ${LOG_TABLE} (discord_user_id, discord_username, created_at, success, detail) VALUES (?, ?, ?, ?, ?)`,\n args: [user.id, user.username ?? null, Date.now(), success ? 1 : 0, detail],\n });\n } catch {\n // logging is best-effort\n }\n}\n\n/**\n * Prune ephemeral nonces and age out the audit log. Called by the cron.\n * Returns how many rows were deleted from each table.\n */\nexport async function cleanupVerifyData(\n logRetentionDays: number,\n): Promise<{ states: number; logs: number }> {\n await ensureTables();\n const states = await sqlite.execute({\n sql: `DELETE FROM ${STATES_TABLE} WHERE used = 1 OR created_at < ?`,\n args: [Date.now() - STATE_TTL_MS],\n });\n const logs = await sqlite.execute({\n sql: `DELETE FROM ${LOG_TABLE} WHERE created_at < ?`,\n args: [Date.now() - logRetentionDays * 24 * 60 * 60 * 1000],\n });\n return { states: states.rowsAffected || 0, logs: logs.rowsAffected || 0 };\n}\n\n// ========================================\n// DISCORD + TURNSTILE\n// ========================================\n\nasync function verifyTurnstile(\n secret: string,\n token: string,\n ip: string | null,\n): Promise {\n const form = new URLSearchParams();\n form.set(\"secret\", secret);\n form.set(\"response\", token);\n if (ip) form.set(\"remoteip\", ip);\n\n const res = await fetch(TURNSTILE_VERIFY_URL, { method: \"POST\", body: form });\n const data = await res.json().catch(() => ({ success: false }));\n return data.success === true;\n}\n\nasync function exchangeCode(\n config: VerifyConfig,\n code: string,\n redirectUri: string,\n): Promise {\n const form = new URLSearchParams();\n form.set(\"client_id\", config.clientId);\n form.set(\"client_secret\", config.clientSecret);\n form.set(\"grant_type\", \"authorization_code\");\n form.set(\"code\", code);\n form.set(\"redirect_uri\", redirectUri);\n\n const res = await fetch(`${DISCORD_API}/oauth2/token`, {\n method: \"POST\",\n headers: { \"content-type\": \"application/x-www-form-urlencoded\" },\n body: form,\n });\n if (!res.ok) return null;\n const data = await res.json();\n return (data.access_token as string) ?? null;\n}\n\nasync function fetchDiscordUser(\n accessToken: string,\n): Promise {\n const res = await fetch(`${DISCORD_API}/users/@me`, {\n headers: { authorization: `Bearer ${accessToken}` },\n });\n if (!res.ok) return null;\n return await res.json() as DiscordUser;\n}\n\n/**\n * Grant the verified role to an existing guild member.\n * Returns the HTTP status and, on failure, the Discord error code so callers\n * can distinguish \"user not in guild\" from configuration problems.\n */\nasync function grantRole(\n config: VerifyConfig,\n userId: string,\n): Promise<{ status: number; body: string; code?: number }> {\n const res = await fetch(\n `${DISCORD_API}/guilds/${config.guildId}/members/${userId}/roles/${config.roleId}`,\n {\n method: \"PUT\",\n headers: {\n authorization: `Bot ${config.botToken}`,\n \"x-audit-log-reason\": \"Passed CAPTCHA verification portal\",\n },\n },\n );\n if (res.status === 204) return { status: 204, body: \"\" };\n const body = await res.text();\n let code: number | undefined;\n try {\n code = JSON.parse(body)?.code;\n } catch {\n // non-JSON error body\n }\n return { status: res.status, body, code };\n}\n\n/**\n * Fire a Discord webhook alert if the rate of successful verifications spikes\n * past RAID_THRESHOLD within RAID_WINDOW_MS. Debounced via an atomic update so\n * only one request per ALERT_COOLDOWN_MS sends. Best-effort and never blocks\n * the verifying user's response. No-op when no webhook is configured.\n */\nasync function maybeAlertRaid(\n config: VerifyConfig,\n serverName: string,\n): Promise {\n if (!config.alertWebhookUrl) return;\n const threshold = config.raidThreshold ?? DEFAULT_RAID_THRESHOLD;\n const windowMs = config.raidWindowMs ?? DEFAULT_RAID_WINDOW_MS;\n const cooldownMs = config.alertCooldownMs ?? DEFAULT_ALERT_COOLDOWN_MS;\n try {\n const now = Date.now();\n const countRes = await sqlite.execute({\n sql:\n `SELECT COUNT(*) FROM ${LOG_TABLE} WHERE success = 1 AND created_at > ?`,\n args: [now - windowMs],\n });\n const count = Number(countRes.rows?.[0]?.[0] ?? 0);\n if (count < threshold) return;\n\n // Atomic debounce: ensure a row exists, then only the request that moves\n // last_alert_at past the cooldown actually sends.\n await sqlite.execute({\n sql:\n `INSERT OR IGNORE INTO ${ALERTS_TABLE} (kind, last_alert_at) VALUES ('raid', 0)`,\n args: [],\n });\n const claimed = await sqlite.execute({\n sql:\n `UPDATE ${ALERTS_TABLE} SET last_alert_at = ? WHERE kind = 'raid' AND last_alert_at < ?`,\n args: [now, now - cooldownMs],\n });\n if ((claimed.rowsAffected || 0) !== 1) return;\n\n await sendDiscordAlert(config.alertWebhookUrl, serverName, count, windowMs, threshold);\n } catch {\n // alerting is best-effort\n }\n}\n\nasync function sendDiscordAlert(\n webhookUrl: string,\n serverName: string,\n count: number,\n windowMs: number,\n threshold: number,\n): Promise {\n const windowMin = Math.round(windowMs / 60000);\n await fetch(webhookUrl, {\n method: \"POST\",\n headers: { \"content-type\": \"application/json\" },\n body: JSON.stringify({\n username: \"Verification Shield\",\n allowed_mentions: { parse: [] },\n embeds: [{\n title: \"⚠️ Possible verification raid\",\n description:\n `**${count}** accounts verified in the last **${windowMin} min** on **${serverName}** — above the alert threshold of ${threshold}. This may be a coordinated raid using farmed accounts (Turnstile can't catch those). Consider pausing verification or tightening server join settings.`,\n color: brand.embedColor,\n timestamp: new Date().toISOString(),\n }],\n }),\n });\n}\n\n/**\n * Have the bot post the verification message (branded embed + a link \"Verify\"\n * button) into the configured channel. Triggered manually (post-verify.ts),\n * not on a schedule. The bot needs Send Messages + Embed Links in that channel.\n */\nexport async function postVerifyMessage(\n config: VerifyConfig,\n opts: PostOpts = {},\n): Promise<{ ok: boolean; detail: string }> {\n const channelId = await resolveChannel(\"verify\", config, opts.channelId);\n if (!channelId) {\n return {\n ok: false,\n detail:\n \"No verify channel. Run setup.ts to create the DMZ channels, or set DISCORD_VERIFY_CHANNEL_ID (numeric ID, link, or #mention).\",\n };\n }\n if (!config.portalUrl) {\n return {\n ok: false,\n detail: \"Set VERIFY_PORTAL_URL (or VERIFY_REDIRECT_URI) to the portal URL.\",\n };\n }\n const serverName = displayName(config);\n const base = config.portalUrl.replace(/\\/+$/, \"\");\n\n const payload = {\n embeds: [{\n title: \"Server Verification\",\n description:\n `Welcome to **${serverName}**! To keep the community safe from bots and raids, new members verify before getting access.\\n\\nClick **Verify** below, complete a quick CAPTCHA, and your role is granted automatically.`,\n color: brand.embedColor,\n image: { url: `${base}/og.png` },\n }],\n components: [{\n type: 1,\n components: [{ type: 2, style: 5, label: \"Verify\", url: base }],\n }],\n allowed_mentions: { parse: [] },\n };\n\n return await upsertMessage(\"verify\", channelId, config, payload, opts);\n}\n\n/**\n * Have the bot post the server rules as a branded embed into the configured\n * channel. Triggered manually (post-rules.ts). The bot needs Send Messages\n * + Embed Links in that channel.\n */\nexport async function postRulesMessage(\n config: VerifyConfig,\n opts: PostOpts = {},\n): Promise<{ ok: boolean; detail: string }> {\n const channelId = await resolveChannel(\"rules\", config, opts.channelId);\n if (!channelId) {\n return {\n ok: false,\n detail:\n \"No rules channel. Run setup.ts to create the DMZ channels, or set DISCORD_RULES_CHANNEL_ID (numeric ID, link, or #mention).\",\n };\n }\n\n const serverName = displayName(config);\n\n const payload = {\n embeds: [{\n title: \"Discord Rules\",\n description:\n \"Our hope is that we rarely need to enforce these, but it's to everyone's benefit to be clear about who we are and what we expect. The mod team will enforce these rules as necessary.\",\n color: brand.embedColor,\n thumbnail: { url: brand.logoUrl },\n fields: rules,\n footer: { text: serverName },\n }],\n allowed_mentions: { parse: [] },\n };\n\n return await upsertMessage(\"rules\", channelId, config, payload, opts);\n}\n\n/**\n * Have the bot post the \"About the community\" embed into a DMZ channel — one an\n * unverified member can see — so newcomers know what they're joining before\n * they verify. Triggered manually (post-about.ts). Pulls links to the verify +\n * rules channels (as #mentions) when those IDs are set, and adds a Verify\n * button when VERIFY_PORTAL_URL is configured. The bot needs Send Messages +\n * Embed Links in that channel.\n */\nexport async function postAboutMessage(\n config: VerifyConfig,\n opts: PostOpts = {},\n): Promise<{ ok: boolean; detail: string }> {\n const channelId = await resolveChannel(\"about\", config, opts.channelId);\n if (!channelId) {\n return {\n ok: false,\n detail:\n \"No about channel. Run setup.ts to create the DMZ channels, or set DISCORD_ABOUT_CHANNEL_ID (numeric ID, link, or #mention).\",\n };\n }\n const serverName = displayName(config);\n const verifyId = await resolveChannel(\"verify\", config);\n const rulesId = await resolveChannel(\"rules\", config);\n\n // Point newcomers at the next step. Prefer channel mentions; fall back to a\n // plain instruction when those IDs aren't configured.\n const pointers: string[] = [];\n if (verifyId) pointers.push(`Ready? Verify in <#${verifyId}> to unlock the server.`);\n if (rulesId) pointers.push(`Read the rules in <#${rulesId}> first.`);\n\n const fields = [...about.highlights];\n if (pointers.length) {\n fields.push({ name: \"👉 Getting in\", value: pointers.join(\"\\n\") });\n }\n\n const embed: Record = {\n title: `About ${serverName}`,\n description: `*${about.tagline}*\\n\\n${about.description}`,\n color: brand.embedColor,\n thumbnail: { url: brand.logoUrl },\n fields,\n footer: { text: serverName },\n };\n\n const payload: Record = {\n embeds: [embed],\n allowed_mentions: { parse: [] },\n };\n // When we know the portal URL, give the About card its own Verify button so\n // the DMZ has a one-click path in.\n if (config.portalUrl) {\n const base = config.portalUrl.replace(/\\/+$/, \"\");\n payload.components = [{\n type: 1,\n components: [{ type: 2, style: 5, label: \"Verify\", url: base }],\n }];\n }\n\n return await upsertMessage(\"about\", channelId, config, payload, opts);\n}\n\n// ========================================\n// CHANNEL + MESSAGE RESOLUTION\n// ========================================\n\nexport interface PostOpts {\n /** Override the resolved channel (raw ID, link, or #mention). */\n channelId?: string;\n /** Edit this specific message instead of the stored one. */\n messageId?: string;\n /** Always post a new message, ignoring any stored message ID. */\n forceNew?: boolean;\n}\n\n/** Extract a numeric channel ID from a raw ID, a #mention, or a channel link. */\nexport function parseChannelId(raw: string | undefined): string {\n if (!raw) return \"\";\n const t = raw.trim();\n const m = t.match(/channels\\/\\d+\\/(\\d+)/);\n return m ? m[1] : t.replace(/\\D/g, \"\");\n}\n\n/** The env-derived channel field on config for a given DMZ message kind. */\nfunction channelEnvField(\n config: VerifyConfig,\n kind: ChannelKind,\n): string | undefined {\n switch (kind) {\n case \"about\":\n return config.aboutChannelId;\n case \"rules\":\n return config.rulesChannelId;\n case \"verify\":\n return config.verifyChannelId;\n case \"honeypot\":\n return config.honeypotChannelId;\n }\n}\n\n/**\n * Resolve a DMZ channel ID in priority order:\n * 1. an explicit override (e.g. opts.channelId)\n * 2. a channel the bot created (blob store)\n * 3. the env var (config field)\n * Returns \"\" when none is known.\n */\nexport async function resolveChannel(\n kind: ChannelKind,\n config: VerifyConfig,\n explicit?: string,\n): Promise {\n const direct = parseChannelId(explicit);\n if (direct) return direct;\n const stored = await getChannel(kind);\n if (stored) return stored;\n return parseChannelId(channelEnvField(config, kind));\n}\n\n/**\n * Post `payload` into `channelId`, or EDIT the message we last posted for this\n * kind — so re-running a post tool updates in place instead of duplicating.\n * Which message to edit: opts.messageId, else the stored id (unless\n * opts.forceNew). A stored-but-deleted message (404) falls back to a fresh\n * post. Remembers the resulting channel + message IDs in the blob store.\n */\nasync function upsertMessage(\n kind: ChannelKind,\n channelId: string,\n config: VerifyConfig,\n payload: Record,\n opts: PostOpts,\n): Promise<{ ok: boolean; detail: string }> {\n const headers = {\n authorization: `Bot ${config.botToken}`,\n \"content-type\": \"application/json\",\n };\n const targetId = opts.messageId ??\n (opts.forceNew ? undefined : await getMessage(kind));\n\n if (targetId) {\n const res = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages/${targetId}`,\n { method: \"PATCH\", headers, body: JSON.stringify(payload) },\n );\n if (res.ok) {\n await rememberMessage(kind, targetId);\n await rememberChannel(kind, channelId);\n return {\n ok: true,\n detail: `updated message ${targetId} in channel ${channelId}`,\n };\n }\n // A 404 means the stored message was deleted — fall through to a fresh post.\n if (res.status !== 404) {\n return {\n ok: false,\n detail:\n `Discord ${res.status} editing message ${targetId} in channel ${channelId}: ${(await res.text()).slice(0, 200)}`,\n };\n }\n }\n\n const res = await fetch(\n `${DISCORD_API}/channels/${channelId}/messages`,\n { method: \"POST\", headers, body: JSON.stringify(payload) },\n );\n if (res.ok) {\n const msg = await res.json().catch(() => ({} as { id?: string }));\n if (msg?.id) await rememberMessage(kind, String(msg.id));\n await rememberChannel(kind, channelId);\n return {\n ok: true,\n detail: `posted to channel ${channelId}${msg?.id ? ` (message ${msg.id})` : \"\"}`,\n };\n }\n return {\n ok: false,\n detail:\n `Discord ${res.status} posting to channel ${channelId}: ${(await res.text()).slice(0, 200)} — check the ID is correct and the bot can view + post in that channel.`,\n };\n}\n\n/**\n * Have the bot post a \"do not post here\" warning into a honeypot/trap channel,\n * pointing legit users to verification (and the rules). Bots that auto-spam\n * every channel reveal themselves here. Triggered manually (post-honeypot.ts).\n * The verify/rules links use channel mentions resolved from the existing\n * DISCORD_VERIFY_CHANNEL_ID / DISCORD_RULES_CHANNEL_ID.\n */\nexport async function postHoneypotMessage(\n config: VerifyConfig,\n opts: PostOpts = {},\n): Promise<{ ok: boolean; detail: string }> {\n const channelId = await resolveChannel(\"honeypot\", config, opts.channelId);\n if (!channelId) {\n return {\n ok: false,\n detail:\n \"No honeypot channel. Run setup.ts to create the DMZ channels, or set DISCORD_HONEYPOT_CHANNEL_ID (numeric ID, link, or #mention).\",\n };\n }\n const verifyId = await resolveChannel(\"verify\", config);\n const rulesId = await resolveChannel(\"rules\", config);\n const serverName = displayName(config);\n\n const lines = [\"**Please do not post in this channel.**\", \"\"];\n lines.push(\n verifyId\n ? `To unlock ${serverName}, head to <#${verifyId}> and complete verification.`\n : `To unlock ${serverName}, complete verification in the verification channel.`,\n );\n if (rulesId) lines.push(`New here? Read the rules in <#${rulesId}>.`);\n lines.push(\"\", \"This channel is monitored — anything posted here may be treated as spam.\");\n\n const payload = {\n embeds: [{\n title: \"Do Not Post In This Channel\",\n description: lines.join(\"\\n\"),\n color: brand.embedColor,\n footer: { text: serverName },\n }],\n allowed_mentions: { parse: [] },\n };\n\n return await upsertMessage(\"honeypot\", channelId, config, payload, opts);\n}\n\n// ========================================\n// RENDERING\n// ========================================\n\nfunction escapeHtml(s: string): string {\n return s\n .replace(/&/g, \"&\")\n .replace(//g, \">\")\n .replace(/\"/g, \""\")\n .replace(/'/g, \"'\");\n}\n\nconst DISCORD_GLYPH =\n ``;\n\nfunction shell(name: string, innerHtml: string, ogImage: string): string {\n return `\n\n\n \n \n \n Verify · ${escapeHtml(name)}\n \n \n \n \n \n \n \n \n \n \n \n \n \n\n\n

\n ${innerHtml}\n

\n\n`;\n}\n\n// The portal page is identical for every visitor (depends only on static\n// config), so build it once per config and reuse the string.\nconst portalPageCache = new Map();\n\nexport function renderPortalPage(config: VerifyConfig, ogImage: string): string {\n const serverName = displayName(config);\n const cacheKey = `${config.turnstileSiteKey}|${serverName}|${ogImage}`;\n const cached = portalPageCache.get(cacheKey);\n if (cached) return cached;\n const inner = `\n $\"${escapeHtml(serverName)}\"$ \n

Are you human?

${escapeHtml(serverName)} · Access Check

1 Pass the CAPTCHA below
2 Authorize with Discord
3 Receive your verified role

\n \n

Protected by Cloudflare Turnstile

\n \n `;\n const html = shell(serverName, inner, ogImage);\n portalPageCache.set(cacheKey, html);\n return html;\n}\n\nexport function renderResultPage(success: boolean, message: string): string {\n const inner = `\n

${success ? \"✓\" : \"✕\"}

${success ? \"Verified\" : \"Verification failed\"}

${escapeHtml(message)}

\n ${success ? \"\" : `

Start Over

`}`;\n return shell(brand.name, inner, brand.ogFallbackImage);\n}\n\n// ========================================\n// RESPONSE HELPERS\n// ========================================\n\nfunction jsonResponse(data: unknown, status = 200): Response {\n return new Response(JSON.stringify(data), {\n status,\n headers: { \"content-type\": \"application/json\" },\n });\n}\n\nfunction htmlResponse(body: string, status = 200): Response {\n return new Response(body, {\n status,\n headers: { \"content-type\": \"text/html; charset=utf-8\" },\n });\n}\n\nfunction redirectUriFor(config: VerifyConfig, url: URL): string {\n return config.redirectUriOverride ?? `${url.origin}/callback`;\n}\n\n// ========================================\n// ROUTE HANDLERS\n// ========================================\n\nasync function handleStart(\n req: Request,\n url: URL,\n config: VerifyConfig,\n): Promise {\n let token = \"\";\n try {\n const body = await req.json();\n token = String(body?.token ?? \"\");\n } catch {\n return jsonResponse({ error: \"Bad request.\" }, 400);\n }\n if (!token) {\n return jsonResponse({ error: \"Please complete the CAPTCHA first.\" }, 400);\n }\n\n const ok = await verifyTurnstile(\n config.turnstileSecretKey,\n token,\n req.headers.get(\"cf-connecting-ip\"),\n );\n if (!ok) {\n return jsonResponse({ error: \"CAPTCHA check failed. Please try again.\" }, 400);\n }\n\n const state = await mintState();\n const authUrl = new URL(\"https://discord.com/oauth2/authorize\");\n authUrl.searchParams.set(\"client_id\", config.clientId);\n authUrl.searchParams.set(\"redirect_uri\", redirectUriFor(config, url));\n authUrl.searchParams.set(\"response_type\", \"code\");\n authUrl.searchParams.set(\"scope\", \"identify\");\n authUrl.searchParams.set(\"state\", state);\n authUrl.searchParams.set(\"prompt\", \"consent\");\n\n return jsonResponse({ url: authUrl.toString() });\n}\n\nasync function handleCallback(\n url: URL,\n config: VerifyConfig,\n): Promise {\n const code = url.searchParams.get(\"code\");\n const state = url.searchParams.get(\"state\");\n const oauthError = url.searchParams.get(\"error\");\n\n if (oauthError) {\n return htmlResponse(renderResultPage(false, \"Discord authorization was cancelled.\"));\n }\n if (!code || !state) {\n return htmlResponse(renderResultPage(false, \"Missing authorization data. Please start over.\"));\n }\n\n const consumed = await consumeState(state);\n if (!consumed.ok) {\n return htmlResponse(renderResultPage(false, consumed.reason));\n }\n\n const accessToken = await exchangeCode(config, code, redirectUriFor(config, url));\n if (!accessToken) {\n return htmlResponse(renderResultPage(false, \"Could not authenticate with Discord. Please start over.\"));\n }\n\n const user = await fetchDiscordUser(accessToken);\n if (!user) {\n return htmlResponse(renderResultPage(false, \"Could not read your Discord profile. Please start over.\"));\n }\n\n const { status, body, code: errorCode } = await grantRole(config, user.id);\n\n if (status === 204) {\n await logVerification(user, true, \"role granted\");\n await maybeAlertRaid(config, displayName(config));\n const name = user.username ? `, ${user.username}` : \"\";\n return htmlResponse(\n renderResultPage(\n true,\n `You're all set${name}! Head back to Discord — your verified role has been granted. You can close this tab.`,\n ),\n );\n }\n\n // Record the precise failure for diagnostics (Discord error codes:\n // 10004 Unknown Guild, 10007 Unknown Member, 10011 Unknown Role,\n // 50013 Missing Permissions, 50001 Missing Access).\n await logVerification(\n user,\n false,\n `role grant failed: status=${status} code=${errorCode ?? \"?\"} body=${body.slice(0, 400)}`,\n );\n\n // Only a genuine \"Unknown Member\" means the user must join first.\n if (status === 404 && errorCode === 10007) {\n return htmlResponse(\n renderResultPage(false, \"You're not in the server yet. Join the Discord first, then come back and verify.\"),\n );\n }\n // Everything else is a server-side configuration problem.\n let adminMessage = \"Couldn't assign your role. The verification bot is misconfigured — please contact a moderator.\";\n if (errorCode === 10004) {\n adminMessage = \"The verification bot isn't connected to this server yet. Please contact a moderator.\";\n } else if (errorCode === 10011) {\n adminMessage = \"The verified role no longer exists or is misconfigured. Please contact a moderator.\";\n } else if (status === 403 || errorCode === 50013 || errorCode === 50001) {\n adminMessage = \"The bot doesn't have permission to grant the role (check its permissions and role position). Please contact a moderator.\";\n }\n return htmlResponse(renderResultPage(false, adminMessage));\n}\n\n// ========================================\n// PUBLIC ENTRY POINT\n// ========================================\n\nexport async function handleVerifyRequest(\n req: Request,\n config: VerifyConfig,\n): Promise {\n const url = new URL(req.url);\n\n try {\n if (req.method === \"GET\" && url.pathname === \"/\") {\n return new Response(renderPortalPage(config, `${url.origin}/og.png`), {\n status: 200,\n headers: {\n \"content-type\": \"text/html; charset=utf-8\",\n \"cache-control\": \"public, max-age=3600\",\n },\n });\n }\n if (req.method === \"GET\" && url.pathname === \"/og.png\") {\n try {\n const { readVerifyOgImage } = await import(\"./og.ts\");\n const png = await readVerifyOgImage();\n if (png) {\n // A Uint8Array is a valid BodyInit at runtime; the cast satisfies the\n // DOM lib's narrower BufferSource typing.\n return new Response(png as BodyInit, {\n status: 200,\n headers: {\n \"content-type\": \"image/png\",\n \"cache-control\": \"public, max-age=86400, immutable\",\n },\n });\n }\n } catch (e) {\n console.error(\"og read failed:\", e);\n }\n // Not generated yet (the cron builds it) — fall back to the brand image.\n return new Response(null, {\n status: 302,\n headers: { location: brand.ogFallbackImage },\n });\n }\n if (req.method === \"POST\" && url.pathname === \"/start\") {\n return await handleStart(req, url, config);\n }\n if (req.method === \"GET\" && url.pathname === \"/callback\") {\n return await handleCallback(url, config);\n }\n return htmlResponse(renderResultPage(false, \"Page not found.\"), 404);\n } catch (e) {\n console.error(\"verify error:\", e);\n return htmlResponse(\n renderResultPage(false, \"Something went wrong on our end. Please try again later.\"),\n 500,\n );\n }\n}\n",[215],"ec74a37a-0e77-4e40-8bde-640d739700ff","http.ts","f3c73b40-668d-11f1-befe-1607ee4eb77e",65,["D",1781289529132],"http","// ============================================================================\n// Discord CAPTCHA Shield — HTTP entry point (Val Town HTTP trigger)\n// ============================================================================\n//\n// Set this file as the val's HTTP trigger. Routes (served at the val's endpoint\n// or a mapped custom domain):\n// GET / -> CAPTCHA portal page\n// POST /start -> verify Turnstile token, mint state, return Discord OAuth URL\n// GET /callback -> validate state, exchange code, grant the verified role\n// GET /og.png -> cached social card (generated by the cron)\n//\n// To shield a SECOND Discord, clone the whole val and set that copy's env. The\n// SQLite tables are project-scoped, so each clone gets isolated storage.\n// ============================================================================\n\nimport { handleVerifyRequest } from \"./mod.ts\";\nimport { loadConfig } from \"./config.ts\";\n\nexport default async function (req: Request): Promise {\n return await handleVerifyRequest(req, loadConfig());\n}\n",[222],"4a27f189-2947-4a46-96f2-a7dab836c2bc","guilds.ts","55e7cc48-66b3-11f1-854c-1607ee4eb77e",75,["D",1781305585119],"/**\n * Per-server config registry — the source of truth for which Discord servers\n * this deployment shields and how each is configured.\n *\n * One row per guild in the captcha_guilds table (see schema.ts). A row holds\n * the server's role + identity, optional white-label branding overrides (logo,\n * colors, copy, rules), optional per-guild Turnstile keys, alert tuning, and\n * DMZ channel IDs. Anything left null falls back to the shared env / theme.ts\n * defaults at load time (see config.ts `loadGuildConfig` and the theme step).\n *\n * Storing config in SQLite (rather than env) is what makes this multi-tenant:\n * servers can be added, edited, and removed at runtime via the guarded admin\n * API without redeploying the val.\n */\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite\";\nimport {\n type AboutInfo,\n type ResolvedTheme,\n resolveTheme,\n type Rule,\n} from \"./theme.ts\";\nimport { ensureSchema, GUILDS_TABLE } from \"./schema.ts\";\n\n/**\n * A server's stored configuration. Optional fields are overrides — when unset,\n * the resolver falls back to shared env (secrets, default Turnstile keys) or to\n * theme.ts (branding). `guildId` + `roleId` are the only hard requirements.\n */\nexport interface GuildConfig {\n guildId: string;\n roleId: string;\n serverName?: string;\n disabled: boolean;\n\n // White-label branding overrides (undefined => theme.ts default).\n brandName?: string;\n logoUrl?: string;\n accentColor?: string; // hex, e.g. \"#F4A340\"\n accentColorBright?: string; // hex\n embedColor?: number; // Discord int color, e.g. 0xf4a340\n ogHeadline?: string;\n ogTagline?: string;\n ogFallbackImage?: string;\n rules?: Rule[];\n about?: AboutInfo;\n\n // Per-guild Turnstile keys (undefined => shared TURNSTILE_* env default).\n turnstileSiteKey?: string;\n turnstileSecretKey?: string;\n\n // Raid-alert config.\n alertWebhookUrl?: string;\n raidThreshold?: number;\n raidWindowMs?: number;\n alertCooldownMs?: number;\n\n // DMZ channels (blob store stays primary; these are env-style fallbacks).\n verifyChannelId?: string;\n rulesChannelId?: string;\n aboutChannelId?: string;\n honeypotChannelId?: string;\n\n // Portal addressing.\n portalUrl?: string;\n redirectUriOverride?: string;\n\n createdAt: number;\n updatedAt: number;\n}\n\n/** Shape accepted when creating/updating a server. Timestamps are stamped by\n * upsertGuild; `disabled` defaults to false. */\nexport type GuildInput =\n & Omit\n & { disabled?: boolean };\n\n// Column order for the upsert. Keep in sync with the CREATE in schema.ts.\nconst COLS = [\n \"guild_id\",\n \"role_id\",\n \"server_name\",\n \"disabled\",\n \"brand_name\",\n \"logo_url\",\n \"accent_color\",\n \"accent_color_bright\",\n \"embed_color\",\n \"og_headline\",\n \"og_tagline\",\n \"og_fallback_image\",\n \"rules_json\",\n \"about_json\",\n \"turnstile_site_key\",\n \"turnstile_secret_key\",\n \"alert_webhook_url\",\n \"raid_threshold\",\n \"raid_window_ms\",\n \"alert_cooldown_ms\",\n \"verify_channel_id\",\n \"rules_channel_id\",\n \"about_channel_id\",\n \"honeypot_channel_id\",\n \"portal_url\",\n \"redirect_uri_override\",\n \"created_at\",\n \"updated_at\",\n] as const;\n\n/** Zip a result row's values onto its column names for order-independent reads. */\nfunction rowObject(\n columns: string[],\n row: unknown[],\n): Record {\n const o: Record = {};\n columns.forEach((c, i) => (o[c] = row[i]));\n return o;\n}\n\n/** Parse a JSON column; undefined on null/blank/garbage (never throws). */\nfunction parseJson(raw: unknown): T | undefined {\n if (typeof raw !== \"string\" || !raw.trim()) return undefined;\n try {\n return JSON.parse(raw) as T;\n } catch {\n return undefined;\n }\n}\n\nconst str = (v: unknown): string | undefined =>\n v == null ? undefined : String(v);\nconst num = (v: unknown): number | undefined =>\n v == null ? undefined : Number(v);\n\n/** Map a captcha_guilds row object to a GuildConfig. */\nfunction rowToGuild(o: Record): GuildConfig {\n return {\n guildId: String(o.guild_id),\n roleId: String(o.role_id),\n serverName: str(o.server_name),\n disabled: Number(o.disabled) === 1,\n brandName: str(o.brand_name),\n logoUrl: str(o.logo_url),\n accentColor: str(o.accent_color),\n accentColorBright: str(o.accent_color_bright),\n embedColor: num(o.embed_color),\n ogHeadline: str(o.og_headline),\n ogTagline: str(o.og_tagline),\n ogFallbackImage: str(o.og_fallback_image),\n rules: parseJson(o.rules_json),\n about: parseJson(o.about_json),\n turnstileSiteKey: str(o.turnstile_site_key),\n turnstileSecretKey: str(o.turnstile_secret_key),\n alertWebhookUrl: str(o.alert_webhook_url),\n raidThreshold: num(o.raid_threshold),\n raidWindowMs: num(o.raid_window_ms),\n alertCooldownMs: num(o.alert_cooldown_ms),\n verifyChannelId: str(o.verify_channel_id),\n rulesChannelId: str(o.rules_channel_id),\n aboutChannelId: str(o.about_channel_id),\n honeypotChannelId: str(o.honeypot_channel_id),\n portalUrl: str(o.portal_url),\n redirectUriOverride: str(o.redirect_uri_override),\n createdAt: Number(o.created_at),\n updatedAt: Number(o.updated_at),\n };\n}\n\n/** Fetch one server's config. Null if it was never registered. */\nexport async function getGuild(guildId: string): Promise {\n await ensureSchema();\n const res = await sqlite.execute({\n sql: `SELECT * FROM ${GUILDS_TABLE} WHERE guild_id = ?`,\n args: [guildId],\n });\n const row = res.rows?.[0];\n if (!row) return null;\n return rowToGuild(rowObject(res.columns ?? [], row as unknown[]));\n}\n\n/** All registered servers, newest first. */\nexport async function listGuilds(): Promise {\n await ensureSchema();\n const res = await sqlite.execute(\n `SELECT * FROM ${GUILDS_TABLE} ORDER BY created_at DESC`,\n );\n const columns = res.columns ?? [];\n return (res.rows ?? []).map((row) =>\n rowToGuild(rowObject(columns, row as unknown[]))\n );\n}\n\n/**\n * Create or update a server's config (keyed by guild_id). On update, every\n * field is replaced from the input except `created_at` (preserved); set or\n * clear an override by passing a value or leaving it undefined.\n */\nexport async function upsertGuild(input: GuildInput): Promise {\n await ensureSchema();\n const now = Date.now();\n const data: Record = {\n guild_id: input.guildId,\n role_id: input.roleId,\n server_name: input.serverName ?? null,\n disabled: input.disabled ? 1 : 0,\n brand_name: input.brandName ?? null,\n logo_url: input.logoUrl ?? null,\n accent_color: input.accentColor ?? null,\n accent_color_bright: input.accentColorBright ?? null,\n embed_color: input.embedColor ?? null,\n og_headline: input.ogHeadline ?? null,\n og_tagline: input.ogTagline ?? null,\n og_fallback_image: input.ogFallbackImage ?? null,\n rules_json: input.rules ? JSON.stringify(input.rules) : null,\n about_json: input.about ? JSON.stringify(input.about) : null,\n turnstile_site_key: input.turnstileSiteKey ?? null,\n turnstile_secret_key: input.turnstileSecretKey ?? null,\n alert_webhook_url: input.alertWebhookUrl ?? null,\n raid_threshold: input.raidThreshold ?? null,\n raid_window_ms: input.raidWindowMs ?? null,\n alert_cooldown_ms: input.alertCooldownMs ?? null,\n verify_channel_id: input.verifyChannelId ?? null,\n rules_channel_id: input.rulesChannelId ?? null,\n about_channel_id: input.aboutChannelId ?? null,\n honeypot_channel_id: input.honeypotChannelId ?? null,\n portal_url: input.portalUrl ?? null,\n redirect_uri_override: input.redirectUriOverride ?? null,\n created_at: now,\n updated_at: now,\n };\n\n // Update everything except the identity and the original creation time.\n const updatable = COLS.filter((c) => c !== \"guild_id\" && c !== \"created_at\");\n const setClause = updatable.map((c) => `${c} = excluded.${c}`).join(\", \");\n\n await sqlite.execute({\n sql: `INSERT INTO ${GUILDS_TABLE} (${COLS.join(\", \")})\n VALUES (${COLS.map(() => \"?\").join(\", \")})\n ON CONFLICT(guild_id) DO UPDATE SET ${setClause}`,\n args: COLS.map((c) => data[c] as never),\n });\n}\n\n/** Toggle a server on/off without deleting its config. Disabled servers stop\n * resolving (the portal + callback treat them as unknown). */\nexport async function setGuildDisabled(\n guildId: string,\n disabled: boolean,\n): Promise {\n await ensureSchema();\n await sqlite.execute({\n sql: `UPDATE ${GUILDS_TABLE} SET disabled = ?, updated_at = ?\n WHERE guild_id = ?`,\n args: [disabled ? 1 : 0, Date.now(), guildId],\n });\n}\n\n/** Permanently remove a server's config. Verification stops immediately; its\n * state/log rows age out on their own via the cron. */\nexport async function deleteGuild(guildId: string): Promise {\n await ensureSchema();\n await sqlite.execute({\n sql: `DELETE FROM ${GUILDS_TABLE} WHERE guild_id = ?`,\n args: [guildId],\n });\n}\n\n/**\n * Resolve a server's full theme: its stored branding overrides layered over the\n * theme.ts defaults. Returns the bare defaults when the guild is unknown (or\n * undefined), so callers always get a complete ResolvedTheme.\n */\nexport async function resolveGuildTheme(\n guildId: string | undefined,\n): Promise {\n const g = guildId ? await getGuild(guildId) : null;\n if (!g) return resolveTheme();\n return resolveTheme({\n serverName: g.serverName,\n brandName: g.brandName,\n logoUrl: g.logoUrl,\n accentColor: g.accentColor,\n accentColorBright: g.accentColorBright,\n embedColor: g.embedColor,\n ogHeadline: g.ogHeadline,\n ogTagline: g.ogTagline,\n ogFallbackImage: g.ogFallbackImage,\n rules: g.rules,\n about: g.about,\n });\n}\n",[230],"cc177afb-267a-48a6-a22b-a37ff025340b","deno.json","f329fa10-668d-11f1-befe-1607ee4eb77e",48,["D",1781289527448],"{\n \"$schema\": \"https://raw.githubusercontent.com/denoland/deno/98f62cee78e85bfc47c62ed703777c6bc8794f1c/cli/schemas/config-file.v1.json\",\n \"lock\": false,\n \"compilerOptions\": {\n \"noImplicitAny\": false,\n \"strict\": true,\n \"types\": [\"https://www.val.town/types/valtown.d.ts\"],\n \"lib\": [\n \"dom\",\n \"dom.iterable\",\n \"dom.asynciterable\",\n \"deno.ns\",\n \"deno.unstable\"\n ]\n },\n \"node_modules_dir\": false,\n \"experimental\": {\n \"unstable-node-globals\": true,\n \"unstable-temporal\": true,\n \"unstable-worker-options\": true,\n \"unstable-sloppy-imports\": true\n }\n}\n",[237],"a4439ead-64d7-4a0e-b4dd-70e7a6fe5fdb","cron.ts","f2d5c9ae-668d-11f1-9138-1607ee4eb77e",35,["D",1781289527562],"interval","// ============================================================================\n// Discord CAPTCHA Shield — data cleanup + OG card refresh (Val Town Cron)\n// ============================================================================\n//\n// Set this file as the val's Cron trigger (daily is plenty). It prunes\n// ephemeral state nonces, ages out the verification audit log, and regenerates\n// the social card. Card generation is heavy (satori + resvg cold loads) and\n// exceeds an HTTP request's wall-clock, so it lives here where the cron runs to\n// completion; the /og.png route only serves the cached blob.\n// ============================================================================\n\nimport { cleanupVerifyData } from \"./mod.ts\";\nimport { refreshVerifyOgImage } from \"./og.ts\";\n\nconst LOG_RETENTION_DAYS = 7;\n\nexport default async function () {\n const result = await cleanupVerifyData(LOG_RETENTION_DAYS);\n console.log(\n `verify cleanup: deleted ${result.states} state nonce(s), ${result.logs} log row(s) older than ${LOG_RETENTION_DAYS}d`,\n );\n\n try {\n const bytes = await refreshVerifyOgImage();\n console.log(`verify og.png refreshed: ${bytes} bytes`);\n } catch (e) {\n console.error(\"verify og refresh failed:\", e);\n }\n}\n",[244],"8d731a27-ae3a-406c-8f73-030d141a8dce","config.ts","f3ce5c4a-668d-11f1-befe-1607ee4eb77e",66,["D",1781289529192],"/**\n * Environment loading for the Discord CAPTCHA Shield.\n *\n * All secrets and per-deployment IDs come from Val Town environment variables\n * (Settings → Environment Variables). Visual branding lives in ./theme.ts; this\n * file only reads env. See README.md for the full variable reference.\n */\n\nimport type { VerifyConfig } from \"./mod.ts\";\n\n/** Required env var — throws a clear error if unset. */\nexport function env(key: string): string {\n const value = Deno.env.get(key);\n if (!value) throw new Error(`Missing required environment variable: ${key}`);\n return value;\n}\n\n/** Optional env var. Guarded with has() so we never get() an unset key\n * (avoids Val Town's \"environment variable not set\" log warnings). */\nexport function optEnv(key: string): string | undefined {\n return Deno.env.has(key) ? (Deno.env.get(key) || undefined) : undefined;\n}\n\n/** Optional numeric env var; undefined if unset or not a finite number. */\nexport function optNum(key: string): number | undefined {\n const raw = optEnv(key);\n if (raw === undefined) return undefined;\n const n = Number(raw);\n return Number.isFinite(n) ? n : undefined;\n}\n\n/** Optional \"minutes\" env var, returned as milliseconds. */\nexport function optMinutesToMs(key: string): number | undefined {\n const min = optNum(key);\n return min === undefined ? undefined : min * 60 * 1000;\n}\n\n/** Build the full VerifyConfig from env (used by the HTTP entry point). */\nexport function loadConfig(): VerifyConfig {\n const redirect = optEnv(\"VERIFY_REDIRECT_URI\");\n return {\n clientId: env(\"DISCORD_CLIENT_ID\"),\n clientSecret: env(\"DISCORD_CLIENT_SECRET\"),\n botToken: env(\"DISCORD_BOT_TOKEN\"),\n guildId: env(\"DISCORD_GUILD_ID\"),\n roleId: env(\"DISCORD_ROLE_ID\"),\n turnstileSiteKey: env(\"TURNSTILE_SITE_KEY\"),\n turnstileSecretKey: env(\"TURNSTILE_SECRET_KEY\"),\n serverName: optEnv(\"VERIFY_SERVER_NAME\"),\n redirectUriOverride: redirect,\n alertWebhookUrl: optEnv(\"VERIFY_ALERT_WEBHOOK\"),\n raidThreshold: optNum(\"VERIFY_RAID_THRESHOLD\"),\n raidWindowMs: optMinutesToMs(\"VERIFY_RAID_WINDOW_MIN\"),\n alertCooldownMs: optMinutesToMs(\"VERIFY_ALERT_COOLDOWN_MIN\"),\n verifyChannelId: optEnv(\"DISCORD_VERIFY_CHANNEL_ID\"),\n rulesChannelId: optEnv(\"DISCORD_RULES_CHANNEL_ID\"),\n honeypotChannelId: optEnv(\"DISCORD_HONEYPOT_CHANNEL_ID\"),\n aboutChannelId: optEnv(\"DISCORD_ABOUT_CHANNEL_ID\"),\n portalUrl: optEnv(\"VERIFY_PORTAL_URL\") ??\n (redirect ? redirect.replace(/\\/callback$/, \"\") : undefined),\n };\n}\n",[252],"4746fa3d-ea03-4489-99da-fd7418c3594d","channels.ts","f2f643a0-668d-11f1-bf75-1607ee4eb77e",40,["D",1781289527441],"/**\n * One-shot creation of the DMZ channels the shield posts into.\n *\n * Run via setup.ts. Creates a category + four text channels (about, rules,\n * verify, honeypot) with sensible @everyone permission overwrites, and stores\n * every ID in the blob store so the post tools find them automatically and the\n * run is idempotent (re-running skips channels that still exist).\n *\n * Requires the bot to have **Manage Channels** (in addition to the permissions\n * the rest of the shield needs). The shield never creates channels on its own —\n * only this explicit setup path does.\n */\n\nimport type { VerifyConfig } from \"./mod.ts\";\nimport {\n type ChannelKind,\n getCategory,\n getChannel,\n rememberCategory,\n rememberChannel,\n} from \"./store.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// Discord permission bits (as strings, since they're 53-bit-safe here).\nconst VIEW_CHANNEL = 1 << 10; // 1024\nconst SEND_MESSAGES = 1 << 11; // 2048\nconst EMBED_LINKS = 1 << 14; // 16384\n\nconst CHANNEL_TYPE_TEXT = 0;\nconst CHANNEL_TYPE_CATEGORY = 4;\nconst OVERWRITE_ROLE = 0;\nconst OVERWRITE_MEMBER = 1;\n\ninterface ChannelSpec {\n kind: ChannelKind;\n name: string;\n topic: string;\n /** Honeypot lets @everyone post (that's the trap); the rest are read-only. */\n everyoneCanSend: boolean;\n}\n\nconst DMZ_CHANNELS: ChannelSpec[] = [\n {\n kind: \"about\",\n name: \"about\",\n topic: \"What this community is about. Read before you verify.\",\n everyoneCanSend: false,\n },\n {\n kind: \"rules\",\n name: \"rules\",\n topic: \"The server rules. By being here you agree to them.\",\n everyoneCanSend: false,\n },\n {\n kind: \"verify\",\n name: \"verify\",\n topic: \"Click Verify, pass a quick CAPTCHA, and the server unlocks.\",\n everyoneCanSend: false,\n },\n {\n kind: \"honeypot\",\n name: \"do-not-post\",\n topic: \"Do not post here. This channel is a spam trap.\",\n everyoneCanSend: true,\n },\n];\n\nconst CATEGORY_NAME = \"Welcome\";\n\nexport interface CreateResult {\n kind: ChannelKind | \"category\";\n name: string;\n status: \"created\" | \"exists\" | \"failed\";\n id?: string;\n detail?: string;\n}\n\nfunction authHeaders(config: VerifyConfig): HeadersInit {\n return {\n authorization: `Bot ${config.botToken}`,\n \"content-type\": \"application/json\",\n };\n}\n\n/** True if a channel with this ID still exists and the bot can see it. */\nasync function channelExists(config: VerifyConfig, id: string): Promise {\n const res = await fetch(`${DISCORD_API}/channels/${id}`, {\n headers: authHeaders(config),\n });\n return res.ok;\n}\n\n/** Overwrites that make a channel visible to everyone but writable only by the\n * bot (read-only), or writable by everyone (the honeypot trap). The bot always\n * keeps an explicit allow so a read-only @everyone deny can't mute it. */\nfunction overwritesFor(config: VerifyConfig, everyoneCanSend: boolean) {\n const everyoneAllow = VIEW_CHANNEL | (everyoneCanSend ? SEND_MESSAGES : 0);\n const everyoneDeny = everyoneCanSend ? 0 : SEND_MESSAGES;\n return [\n {\n id: config.guildId, // @everyone role id == guild id\n type: OVERWRITE_ROLE,\n allow: String(everyoneAllow),\n deny: String(everyoneDeny),\n },\n {\n id: config.clientId, // a bot's user id == its application/client id\n type: OVERWRITE_MEMBER,\n allow: String(VIEW_CHANNEL | SEND_MESSAGES | EMBED_LINKS),\n deny: \"0\",\n },\n ];\n}\n\n/** Ensure the DMZ category exists; return its ID (or \"\" if creation failed). */\nasync function ensureCategory(\n config: VerifyConfig,\n results: CreateResult[],\n): Promise {\n const existing = await getCategory();\n if (existing && await channelExists(config, existing)) {\n results.push({\n kind: \"category\",\n name: CATEGORY_NAME,\n status: \"exists\",\n id: existing,\n });\n return existing;\n }\n\n const res = await fetch(`${DISCORD_API}/guilds/${config.guildId}/channels`, {\n method: \"POST\",\n headers: authHeaders(config),\n body: JSON.stringify({ name: CATEGORY_NAME, type: CHANNEL_TYPE_CATEGORY }),\n });\n if (!res.ok) {\n results.push({\n kind: \"category\",\n name: CATEGORY_NAME,\n status: \"failed\",\n detail: `Discord ${res.status}: ${(await res.text()).slice(0, 200)}`,\n });\n return \"\";\n }\n const created = await res.json();\n await rememberCategory(created.id);\n results.push({\n kind: \"category\",\n name: CATEGORY_NAME,\n status: \"created\",\n id: created.id,\n });\n return created.id;\n}\n\n/** Create (or confirm) one DMZ channel, storing its ID in blob. */\nasync function ensureChannel(\n config: VerifyConfig,\n spec: ChannelSpec,\n parentId: string,\n): Promise {\n const existingId = await getChannel(spec.kind);\n if (existingId && await channelExists(config, existingId)) {\n return { kind: spec.kind, name: spec.name, status: \"exists\", id: existingId };\n }\n\n const body: Record = {\n name: spec.name,\n type: CHANNEL_TYPE_TEXT,\n topic: spec.topic,\n permission_overwrites: overwritesFor(config, spec.everyoneCanSend),\n };\n if (parentId) body.parent_id = parentId;\n\n const res = await fetch(`${DISCORD_API}/guilds/${config.guildId}/channels`, {\n method: \"POST\",\n headers: authHeaders(config),\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n return {\n kind: spec.kind,\n name: spec.name,\n status: \"failed\",\n detail: `Discord ${res.status}: ${(await res.text()).slice(0, 200)}`,\n };\n }\n const created = await res.json();\n await rememberChannel(spec.kind, created.id);\n return { kind: spec.kind, name: spec.name, status: \"created\", id: created.id };\n}\n\n/**\n * Create (or confirm) the DMZ category + channels, storing every ID in blob.\n * Idempotent: a channel already recorded and still present is left untouched.\n * The category is created first (channels nest under it); the channels then go\n * up concurrently — safe because each writes its own per-kind blob key.\n */\nexport async function createDmzChannels(\n config: VerifyConfig,\n): Promise {\n const results: CreateResult[] = [];\n const parentId = await ensureCategory(config, results);\n\n const channelResults = await Promise.all(\n DMZ_CHANNELS.map((spec) => ensureChannel(config, spec, parentId)),\n );\n results.push(...channelResults);\n return results;\n}\n",[259],"8c9e0eae-e03f-4db3-b075-582e4d2f8af3",["D",1781305585262],[27],"4f0fc918-4804-493c-92c1-01acb71dcd26","README.md","f3e36766-668d-11f1-befe-1607ee4eb77e",69,["D",1781289529330],"# 🐱 Discord CAPTCHA Shield\n\nA drop-in, self-hostable **CAPTCHA + Discord OAuth verification gate** for your\nDiscord server — built to run on [Val Town](https://val.town). New members solve\na Cloudflare Turnstile CAPTCHA, authorize with Discord, and a bot automatically\ngrants them your **Verified** role. Bots and raid scripts don't get in.\n\n> Made by **catalloc**. Remix it, re-skin it, ship it. The whole thing is one\n> small Val Town project with no build step and no servers to run.\n\n

$\"Discord$

\n\n---\n\n## What you get\n\n- **A branded portal page** (`/`) — CAPTCHA → \"Continue with Discord\" → done.\n- **One-time, single-use state nonces** (SQLite) bound to a passed CAPTCHA, so a\n callback can't be replayed or forged.\n- **Automatic role grant** via a bot using only the `identify` OAuth scope (the\n shield never sees a password and never reads message content).\n- **Raid alerts** — a Discord webhook ping when an abnormal number of *successful*\n verifications land in a short window (the farmed-account pattern Turnstile\n can't catch).\n- **A dynamic social card** (`/og.png`) rendered with satori + resvg and cached.\n- **One-click DMZ bootstrap** (`setup.ts`) — the bot creates the `#about`,\n `#rules`, `#verify`, and `#do-not-post` channels (read-only, honeypot open)\n and posts every message into them.\n- **Editable messages** — re-running a post tool updates the existing message in\n place instead of duplicating it (channel + message IDs are kept in blob).\n- **An audit log** of every attempt, auto-pruned after 7 days.\n\n## How it works\n\n```\nVisitor Portal (this val) Discord\n │ GET / ───────────────▶ render CAPTCHA page\n │ solve Turnstile\n │ POST /start ─────────▶ verify token w/ Cloudflare\n │ mint one-time state nonce (SQLite)\n │ ◀──────────── OAuth URL\n │ authorize (identify) ──────────────────────────▶ consent screen\n │ GET /callback?code&state ◀────────────────────── redirect back\n │ burn nonce, exchange code,\n │ read user id, PUT role ──▶ role granted ✅\n │ ◀──────────── \"Verified\" result page\n```\n\nRoles gate **channel access**. Lock `@everyone` down to a single `#verify`\nchannel and grant the rest to the Verified role — see\n[`HARDENING.md`](./HARDENING.md) for the full lockdown + the limits of this model\n(DMs / member-list visibility).\n\n---\n\n## Files\n\n```\nhttp.ts # HTTP trigger — the portal + OAuth routes (set as HTTP val)\ncron.ts # Cron trigger — daily cleanup + OG card refresh\nmod.ts # All verification logic (Turnstile, OAuth, role grant, UI)\nog.ts # Dynamic /og.png social card generator\nconfig.ts # Reads env vars into config (edit nothing — set env instead)\ntheme.ts # 🎨 Branding: colors, logo, copy, rules — EDIT THIS to make it yours\nstore.ts # Blob-backed store of created channel + posted message IDs\nchannels.ts # Creates the DMZ channels (used by setup.ts)\nsetup.ts # Run once — bot creates the DMZ channels AND posts every message\npost-verify.ts # Run — bot posts (or updates) the Verify button\npost-rules.ts # Run — bot posts (or updates) the rules embed\npost-about.ts # Run — bot posts (or updates) the \"About the community\" card\npost-honeypot.ts # Run — bot posts (or updates) the honeypot \"do not post\" trap\ndeno.json # Val Town / Deno config\n```\n\n---\n\n## Installation\n\nYou'll need ~15 minutes, a Discord server you administer, and free Cloudflare +\nVal Town accounts.\n\n### 1. Create a Discord application & bot\n\n1. Go to the [Discord Developer Portal](https://discord.com/developers/applications)\n → **New Application**.\n2. **OAuth2** tab → copy the **Client ID** and **Client Secret**.\n3. **Bot** tab → **Add Bot** → **Reset Token** and copy the **Bot Token**.\n - The default (non-privileged) intents are fine — this shield never reads\n message content or the member list.\n4. **Invite the bot** to your server with the `bot` scope and these permissions:\n\n | Permission | Why |\n | --- | --- |\n | **Manage Roles** | Grant the Verified role on a successful verification |\n | **View Channel** | See the DMZ channels it posts into |\n | **Send Messages** | Post the verify / rules / about / honeypot messages |\n | **Embed Links** | Those messages are rich embeds |\n\n Quick invite URL (replace `CLIENT_ID`) — the `permissions` integer already\n bundles all four:\n ```\n https://discord.com/oauth2/authorize?client_id=CLIENT_ID&scope=bot&permissions=268454912\n ```\n\n **Want the bot to auto-create the DMZ channels** via `setup.ts` (step 6,\n Option A)? Also grant **Manage Channels** — use `permissions=268454928`\n instead. If you'll make the channels yourself, the shield never needs it.\n\n### 2. Create the Verified role & set up channels\n\n1. Create a **Verified** role. Copy its ID (enable *Developer Mode* in Discord\n → User Settings → Advanced, then right-click the role → **Copy ID**).\n2. **Important — role hierarchy:** drag the **bot's own role above the Verified\n role** in Server Settings → Roles. A bot can only assign roles *below* its\n highest role.\n3. Right-click your server → **Copy Server ID** (that's the **Guild ID**).\n4. (Recommended) Lock the server down: deny `@everyone` **View Channel**\n everywhere except a single `#verify` channel; grant the real channels to the\n Verified role. See [`HARDENING.md`](./HARDENING.md).\n\n### 3. Get a Cloudflare Turnstile keypair (free)\n\n1. Cloudflare Dashboard → **Turnstile** → **Add site**.\n2. Add the domain you'll serve the portal from (your val's domain — e.g.\n `your-val.val.run`, or a custom domain). You can add `localhost` for testing.\n3. Copy the **Site Key** and **Secret Key**.\n\n### 4. Create the val on Val Town\n\n1. **Remix this template** into your own Val Town project (or create a new\n project and copy these files in).\n2. Set the triggers:\n - **`http.ts`** → make it an **HTTP** val. Note its URL — that's your portal.\n - **`cron.ts`** → make it a **Cron** val on a daily schedule (e.g. `0 6 * * *`).\n3. Add the environment variables below (Val Town → your project →\n **Environment Variables**).\n\n### 5. Configure the OAuth redirect\n\nBack in the Discord Developer Portal → **OAuth2** → **Redirects**, add:\n\n```\nhttps:///callback\n```\n\nThis must match exactly. If you use a custom domain, set `VERIFY_REDIRECT_URI`\nto the full callback URL (see below).\n\n### 6. Set up the DMZ & post the messages\n\nThe **DMZ** is the handful of channels an unverified member can see. You have two\nways to set it up — pick one.\n\n**Option A — let the bot build it (one click).** Grant the bot **Manage\nChannels** (the invite URL in step 1 with `permissions=268454928` includes it),\nthen open **`setup.ts`** and hit **Run**. It creates a `Welcome` category with\n`#about`, `#rules`, `#verify`, and `#do-not-post` (read-only to `@everyone`,\nhoneypot left open), then posts every message into them. Channel + message IDs\nare saved to blob storage, so you never have to copy an ID by hand.\n\n**Option B — use your own channels.** Create the channels yourself, set the\n`DISCORD_*_CHANNEL_ID` env vars, and run the post scripts individually:\n\n| Script | Posts | Channel env var |\n| --- | --- | --- |\n| `post-about.ts` | \"About the community\" card (+ Verify button) | `DISCORD_ABOUT_CHANNEL_ID` |\n| `post-rules.ts` | The rules embed | `DISCORD_RULES_CHANNEL_ID` |\n| `post-verify.ts` | The Verify button | `DISCORD_VERIFY_CHANNEL_ID` |\n| `post-honeypot.ts` | A \"do not post\" trap that outs spam bots | `DISCORD_HONEYPOT_CHANNEL_ID` |\n\nEither way: **re-running a post script edits its message in place** — it doesn't\npost a duplicate. See [Updating messages](#updating-messages) below. Done — new\nmembers can now read what you're about, see the rules, and verify. 🎉\n\n---\n\n## Environment variables\n\n### Required\n\n| Variable | What it is |\n| --- | --- |\n| `DISCORD_CLIENT_ID` | OAuth2 Client ID (Developer Portal → OAuth2) |\n| `DISCORD_CLIENT_SECRET` | OAuth2 Client Secret |\n| `DISCORD_BOT_TOKEN` | Bot token (Developer Portal → Bot) |\n| `DISCORD_GUILD_ID` | Your server ID |\n| `DISCORD_ROLE_ID` | The Verified role ID to grant |\n| `TURNSTILE_SITE_KEY` | Cloudflare Turnstile site key (public) |\n| `TURNSTILE_SECRET_KEY` | Cloudflare Turnstile secret key |\n\n### Optional\n\n| Variable | Default | What it is |\n| --- | --- | --- |\n| `VERIFY_SERVER_NAME` | brand name in `theme.ts` | Display name on the portal & embeds |\n| `VERIFY_REDIRECT_URI` | `${origin}/callback` | Override callback (use for custom domains) |\n| `VERIFY_PORTAL_URL` | derived from redirect | Public base URL (Verify button + card image) |\n| `VERIFY_ALERT_WEBHOOK` | _(off)_ | Discord webhook URL for raid alerts |\n| `VERIFY_RAID_THRESHOLD` | `15` | Successful verifies in the window that trip an alert |\n| `VERIFY_RAID_WINDOW_MIN` | `5` | Raid look-back window (minutes) |\n| `VERIFY_ALERT_COOLDOWN_MIN` | `15` | Minimum gap between raid alerts (minutes) |\n| `DISCORD_VERIFY_CHANNEL_ID` | — | Channel for the Verify button (`post-verify.ts`) |\n| `DISCORD_RULES_CHANNEL_ID` | — | Channel for the rules embed (`post-rules.ts`) |\n| `DISCORD_ABOUT_CHANNEL_ID` | — | DMZ channel for the About card (`post-about.ts`) |\n| `DISCORD_HONEYPOT_CHANNEL_ID` | — | Trap channel (`post-honeypot.ts`) |\n\nChannel IDs accept a raw numeric ID, a channel link, or a `#mention`.\n\n---\n\n## Make it yours\n\nEverything visual lives in **`theme.ts`** — edit it and the portal page, the\nsocial card, and every Discord embed re-skin together:\n\n- **`brand.name`** — your community name.\n- **`brand.logoUrl`** — a square logo (swap the placeholder cat for yours).\n- **`brand.accentColor` / `accentColorBright` / `embedColor`** — your accent.\n- **`brand.ogHeadline` / `ogTagline`** — the social card copy.\n- **`rules`** — the array of rules `post-rules.ts` posts.\n- **`about`** — the tagline, description, and highlights `post-about.ts` posts.\n\nNo code changes needed for any of it. Secrets and server-specific IDs stay in\nenvironment variables, never in the source.\n\nTo update what's already posted: edit `theme.ts` (or `rules` / `about`) and\n**re-run the matching post script** — it edits the live message in place.\n\n---\n\n## Updating messages\n\nWhen a post tool posts a message, it saves that message's ID to blob storage\n(`store.ts`). Run the same script again and it **edits the existing message**\ninstead of posting a duplicate — so fixing a typo in your rules or re-theming\nthe About card is just an edit + re-run.\n\nHow a channel is resolved, in priority order:\n\n1. an explicit ID passed in code (`postRulesMessage(config, { channelId })`),\n2. a channel the bot created via `setup.ts` (blob store),\n3. the `DISCORD_*_CHANNEL_ID` env var.\n\nSo the bot-created channels win automatically, and hand-wired env IDs still work\nas a fallback. The post functions also accept `{ messageId }` to target a\nspecific message, or `{ forceNew: true }` to post a fresh one (e.g. after you\nmanually deleted the old message). If a stored message was deleted in Discord,\nthe next run notices the `404` and posts a new one.\n\n> Blob keys used: `captcha_shield_v1_channel_`,\n> `captcha_shield_v1_message_`, and `captcha_shield_v1_category` (one ID\n> per key, so `setup.ts` can post all four messages concurrently), plus\n> `verify_og_png_v1` (the cached social card).\n\n---\n\n## Running a second server\n\nDon't add a second entry point inside one val — the SQLite tables aren't\nnamespaced per guild, so two instances in the same val would share nonces, logs,\nand alert state. Instead **clone the whole val** and give the clone its own env.\nEach Val Town project gets its own isolated SQLite database, so the copies never\ncollide.\n\n---\n\n## Troubleshooting\n\nThe portal turns Discord's API errors into plain-language messages. Common ones:\n\n| Symptom | Cause / fix |\n| --- | --- |\n| \"You're not in the server yet\" | The user must **join** the Discord before verifying (this is an already-members gate). |\n| \"The bot doesn't have permission to grant the role\" | Move the **bot's role above** the Verified role, and ensure it has **Manage Roles**. |\n| \"The verification bot isn't connected to this server\" | Wrong `DISCORD_GUILD_ID`, or the bot was never invited. |\n| \"The verified role no longer exists\" | Wrong/deleted `DISCORD_ROLE_ID`. |\n| CAPTCHA never lets you continue | Wrong `TURNSTILE_SITE_KEY`, or the portal domain isn't added to the Turnstile site. |\n| OAuth \"redirect URI mismatch\" | The `/callback` URL in the Developer Portal must match your portal exactly. |\n| `/og.png` shows the fallback image | The cron hasn't generated the card yet — run `cron.ts` once manually. |\n\nEvery attempt (success or failure) is recorded in the `captcha_verify_log`\nSQLite table with a `detail` column carrying the exact Discord status/error code,\nthen pruned after 7 days.\n\n---\n\n## Security notes\n\n- OAuth uses the **`identify` scope only** — the shield reads a Discord user ID\n and nothing else.\n- State nonces are **single-use and atomically burned**; concurrent callbacks\n for the same nonce can't both succeed, and they expire after 10 minutes.\n- Turnstile tokens are verified **server-side** against Cloudflare.\n- This is an **\"already-members\" gate**: it stops unverified users from accessing\n gated channels, but Discord roles don't block DMs or member-list visibility on\n their own. [`HARDENING.md`](./HARDENING.md) covers closing those gaps with\n Membership Screening / lockdown.\n\n---\n\n## License\n\nMIT — do whatever you like. A 🐱 of credit to **catalloc** is appreciated but not\nrequired.\n",[269],"ff1b743d-25d4-4e7a-98d3-4039a2151f87","LICENSE","f2cfba00-668d-11f1-8d84-1607ee4eb77e",34,["D",1781289527444],"MIT License\n\nCopyright (c) 2026 catalloc\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE.\n",[276],"4a7af256-f040-4efe-bada-8f34596c87c0","HARDENING.md","f4016d42-668d-11f1-8d84-1607ee4eb77e",72,["D",1781289529355],"# Verification Hardening — closing the gaps\n\nThe CAPTCHA shield is an **\"already-members\" gate**, and that model has known\nlimits. This doc explains exactly what it does and does not stop, and the options\nfor tightening it. None of this is required to run the shield — it works as-is —\nbut read it before relying on it as your only line of defense.\n\n## What the shield does\n\nA user joins the Discord → solves the CAPTCHA → Discord OAuth → the bot grants\nthe **Verified** role, which *unlocks* channels.\n\n- **Stops:** posting/participating in channels gated behind the Verified role\n (assuming `@everyone` is locked down).\n- **Does NOT stop (the gap):** a member who has *joined but not verified* can\n still (a) appear in / read the **member list** of any channel they can view,\n and (b) **DM** other members they share the server with.\n\nRoles gate *channel access*, not DMs or member-list visibility. Discord has **no\n\"cannot DM\" permission** — DMs are allowed between users who share a server\n(subject to each user's privacy settings + the server DM spam filter).\n\n## What actually restricts a joined user\n\nOnly two things meaningfully limit a joined-but-unverified user:\n\n1. **Membership Screening \"pending\" state** — Discord's native gate. New joins\n are \"pending\" until they complete screening; pending members **cannot DM\n other members or interact**. This is the real lever for the DM/member-list\n vector.\n2. **Hard channel-permission lockdown** — `@everyone` can view only a single\n `#verify` channel, so member-list exposure is limited to who can see that one\n channel. Still does not block DMs.\n\n## Options (with tradeoffs)\n\n### A. Server-config lockdown — do this regardless (little/no code)\n- `@everyone`: deny **View Channel** everywhere except one `#verify` channel;\n strip most perms. Verified role grants View on the real channels.\n- Stack native levers: raise **Verification Level** (Medium/High), enable\n **AutoMod** + **DM spam filter**, enable **Membership Screening** +\n **Onboarding**.\n- Limits member-list exposure; does not by itself stop DMs.\n\n### B. Membership Screening (the real DM blocker)\n- New joins are \"pending\" until they pass screening → can't DM/interact.\n- **Caveat:** native screening completion is \"agree to the rules\" (a client\n gesture a determined bot can automate), so it isn't bot-proof on its own. Pair\n it with the CAPTCHA: screening blocks DMs, the CAPTCHA blocks bots.\n\n### C. Gateway bot for join handling (quarantine + auto-kick)\n- React to `GUILD_MEMBER_ADD`: assign a **Quarantine** role (View denied\n everywhere except `#verify`) and auto-kick if unverified within N minutes.\n- Quarantine limits member-list exposure and the auto-kick shrinks the DM\n window, but does **not** fully block DMs (mutual server).\n- **Cost:** needs a persistent gateway (WebSocket) connection. **Val Town is\n serverless and not suited to an always-on gateway.** You'd need a separate\n always-on host (a small VPS, Fly/Railway, a Cloudflare Durable Object with a\n gateway lib, or a hosted bot framework). The CAPTCHA portal can stay on Val\n Town as the unlock step. Requires the **GUILD_MEMBERS** privileged intent.\n\n### D. Combine (recommended target)\n- Membership Screening / Onboarding holds joiners pending (blocks DMs +\n member-list) and routes them to the CAPTCHA portal; the bot grants Verified\n after CAPTCHA.\n\n## A quick win available now\n\nOn successful verify, also **remove** an \"Unverified\"/\"Quarantine\" role (not just\nadd Verified): add a `DISCORD_UNVERIFIED_ROLE_ID` env var and a `DELETE\n/guilds/{guild}/members/{user}/roles/{roleId}` call on success in `mod.ts`.\n(Auto-*assigning* that role on join still needs a gateway bot or an Onboarding\ndefault role.)\n",[283],"889e60c2-2fe0-453d-85e3-b7a422bacfe0",".vtignore","55fdb2ec-66b3-11f1-a5fa-1607ee4eb77e",78,["D",1781305585119],".git\n.vscode\n.cursorrules\n.DS_Store\nnode_modules\nvendor",[290],"78e7f1cd-c6b6-40ee-838f-d72c1cb64a99",".gitignore","f2e6812c-668d-11f1-8d84-1607ee4eb77e",37,["D",1781289527671],"# Secrets — never commit these; set them as Val Town environment variables\n.env\n.env.local\n*.key\n*.pem\nsecrets.json\n\n# Val Town local state\n.vt/\n\n# Editor / OS\n.vscode/\n.idea/\n.DS_Store\n*.Identifier\n\n# Deno / Node\nnode_modules/\nvendor/\ndeno.lock\n",[297],"be765c6f-8517-40f1-8375-a56c0b5f1644",".git","f0e58c10-668d-11f1-84f3-1607ee4eb77e",["D",1781289524292],"directory",[304],"3118c159-fcf7-4b6b-8025-4e502a888585",".claude","55d19a0e-66b3-11f1-a5fa-1607ee4eb77e",73,["D",1781305585000],[310],"pulls","branches","forks","envVars",{"_322":59,"_324":59},"connections",{"_322":59,"_323":59},"count","unfilledCount","emptyCount",{"_41":309,"_31":310,"_29":311,"_150":-5,"_39":40,"_38":312,"_152":118,"_36":867,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":868,"_26":869},{"_41":859,"_31":860,"_29":861,"_150":311,"_39":40,"_38":862,"_152":118,"_36":863,"_13":59,"_32":20,"_34":864,"_23":24,"_155":-5,"_404":865,"_26":866},{"_41":303,"_31":304,"_29":305,"_150":-5,"_39":40,"_38":162,"_152":118,"_36":856,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":857,"_26":858},{"_41":851,"_31":746,"_29":740,"_150":305,"_39":40,"_38":852,"_152":118,"_36":853,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":854,"_26":855},{"_41":843,"_31":844,"_29":845,"_150":740,"_39":40,"_38":846,"_152":118,"_36":847,"_13":59,"_32":20,"_34":848,"_23":24,"_155":-5,"_404":849,"_26":850},{"_41":835,"_31":836,"_29":837,"_150":740,"_39":40,"_38":838,"_152":118,"_36":839,"_13":59,"_32":20,"_34":840,"_23":24,"_155":-5,"_404":841,"_26":842},{"_41":827,"_31":828,"_29":829,"_150":740,"_39":40,"_38":830,"_152":118,"_36":831,"_13":59,"_32":20,"_34":832,"_23":24,"_155":-5,"_404":833,"_26":834},{"_41":819,"_31":820,"_29":821,"_150":740,"_39":40,"_38":822,"_152":118,"_36":823,"_13":59,"_32":20,"_34":824,"_23":24,"_155":-5,"_404":825,"_26":826},{"_41":811,"_31":812,"_29":813,"_150":740,"_39":40,"_38":814,"_152":118,"_36":815,"_13":59,"_32":20,"_34":816,"_23":24,"_155":-5,"_404":817,"_26":818},{"_41":803,"_31":804,"_29":805,"_150":740,"_39":40,"_38":806,"_152":118,"_36":807,"_13":59,"_32":20,"_34":808,"_23":24,"_155":-5,"_404":809,"_26":810},{"_41":795,"_31":796,"_29":797,"_150":740,"_39":40,"_38":798,"_152":118,"_36":799,"_13":59,"_32":20,"_34":800,"_23":24,"_155":-5,"_404":801,"_26":802},{"_41":787,"_31":788,"_29":789,"_150":740,"_39":40,"_38":790,"_152":118,"_36":791,"_13":59,"_32":20,"_34":792,"_23":24,"_155":-5,"_404":793,"_26":794},{"_41":779,"_31":780,"_29":781,"_150":740,"_39":40,"_38":782,"_152":118,"_36":783,"_13":59,"_32":20,"_34":784,"_23":24,"_155":-5,"_404":785,"_26":786},{"_41":771,"_31":772,"_29":773,"_150":740,"_39":40,"_38":774,"_152":118,"_36":775,"_13":59,"_32":20,"_34":776,"_23":24,"_155":-5,"_404":777,"_26":778},{"_41":763,"_31":764,"_29":765,"_150":740,"_39":40,"_38":766,"_152":118,"_36":767,"_13":59,"_32":20,"_34":768,"_23":24,"_155":-5,"_404":769,"_26":770},{"_41":755,"_31":756,"_29":757,"_150":740,"_39":40,"_38":758,"_152":118,"_36":759,"_13":59,"_32":20,"_34":760,"_23":24,"_155":-5,"_404":761,"_26":762},{"_41":747,"_31":748,"_29":749,"_150":740,"_39":40,"_38":750,"_152":118,"_36":751,"_13":59,"_32":20,"_34":752,"_23":24,"_155":-5,"_404":753,"_26":754},{"_41":737,"_31":738,"_29":739,"_150":740,"_39":40,"_38":741,"_152":118,"_36":742,"_13":59,"_32":20,"_34":743,"_23":24,"_155":-5,"_404":744,"_26":745},{"_41":732,"_31":539,"_29":726,"_150":305,"_39":40,"_38":733,"_152":118,"_36":734,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":735,"_26":736},{"_41":723,"_31":724,"_29":725,"_150":726,"_39":40,"_38":727,"_152":118,"_36":728,"_13":59,"_32":20,"_34":729,"_23":24,"_155":-5,"_404":730,"_26":731},{"_41":718,"_31":699,"_29":693,"_150":305,"_39":40,"_38":719,"_152":118,"_36":720,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":721,"_26":722},{"_41":713,"_31":509,"_29":708,"_150":693,"_39":40,"_38":714,"_152":118,"_36":715,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":716,"_26":717},{"_41":707,"_31":518,"_29":702,"_150":708,"_39":40,"_38":709,"_152":118,"_36":710,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":711,"_26":712},{"_41":700,"_31":83,"_29":701,"_150":702,"_39":40,"_38":703,"_152":118,"_36":704,"_13":59,"_32":20,"_34":696,"_23":24,"_155":-5,"_404":705,"_26":706},{"_41":691,"_31":486,"_29":692,"_150":693,"_39":40,"_38":694,"_152":118,"_36":695,"_13":59,"_32":20,"_34":696,"_23":24,"_155":-5,"_404":697,"_26":698},{"_41":686,"_31":537,"_29":532,"_150":305,"_39":40,"_38":687,"_152":118,"_36":688,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":689,"_26":690},{"_41":679,"_31":680,"_29":681,"_150":532,"_39":40,"_38":682,"_152":118,"_36":683,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":684,"_26":685},{"_41":672,"_31":673,"_29":674,"_150":532,"_39":40,"_38":675,"_152":118,"_36":676,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":677,"_26":678},{"_41":665,"_31":666,"_29":667,"_150":532,"_39":40,"_38":668,"_152":118,"_36":669,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":670,"_26":671},{"_41":658,"_31":659,"_29":660,"_150":532,"_39":40,"_38":661,"_152":118,"_36":662,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":663,"_26":664},{"_41":651,"_31":652,"_29":653,"_150":532,"_39":40,"_38":654,"_152":118,"_36":655,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":656,"_26":657},{"_41":644,"_31":645,"_29":646,"_150":532,"_39":40,"_38":647,"_152":118,"_36":648,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":649,"_26":650},{"_41":637,"_31":638,"_29":639,"_150":532,"_39":40,"_38":640,"_152":118,"_36":641,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":642,"_26":643},{"_41":632,"_31":631,"_29":625,"_150":532,"_39":40,"_38":633,"_152":118,"_36":634,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":635,"_26":636},{"_41":622,"_31":623,"_29":624,"_150":625,"_39":40,"_38":626,"_152":118,"_36":627,"_13":59,"_32":20,"_34":628,"_23":24,"_155":-5,"_404":629,"_26":630},{"_41":615,"_31":616,"_29":617,"_150":532,"_39":40,"_38":618,"_152":118,"_36":619,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":620,"_26":621},{"_41":608,"_31":609,"_29":610,"_150":532,"_39":40,"_38":611,"_152":118,"_36":612,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":613,"_26":614},{"_41":601,"_31":602,"_29":603,"_150":532,"_39":40,"_38":604,"_152":118,"_36":605,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":606,"_26":607},{"_41":594,"_31":595,"_29":596,"_150":532,"_39":40,"_38":597,"_152":118,"_36":598,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":599,"_26":600},{"_41":587,"_31":588,"_29":589,"_150":532,"_39":40,"_38":590,"_152":118,"_36":591,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":592,"_26":593},{"_41":580,"_31":581,"_29":582,"_150":532,"_39":40,"_38":583,"_152":118,"_36":584,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":585,"_26":586},{"_41":573,"_31":574,"_29":575,"_150":532,"_39":40,"_38":576,"_152":118,"_36":577,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":578,"_26":579},{"_41":566,"_31":567,"_29":568,"_150":532,"_39":40,"_38":569,"_152":118,"_36":570,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":571,"_26":572},{"_41":559,"_31":560,"_29":561,"_150":532,"_39":40,"_38":562,"_152":118,"_36":563,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":564,"_26":565},{"_41":552,"_31":553,"_29":554,"_150":532,"_39":40,"_38":555,"_152":118,"_36":556,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":557,"_26":558},{"_41":545,"_31":546,"_29":547,"_150":532,"_39":40,"_38":548,"_152":118,"_36":549,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":550,"_26":551},{"_41":538,"_31":539,"_29":540,"_150":532,"_39":40,"_38":541,"_152":118,"_36":542,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":543,"_26":544},{"_41":529,"_31":530,"_29":531,"_150":532,"_39":40,"_38":533,"_152":118,"_36":534,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":535,"_26":536},{"_41":524,"_31":509,"_29":504,"_150":305,"_39":40,"_38":525,"_152":118,"_36":526,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":527,"_26":528},{"_41":519,"_31":518,"_29":512,"_150":504,"_39":40,"_38":520,"_152":118,"_36":521,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":522,"_26":523},{"_41":510,"_31":83,"_29":511,"_150":512,"_39":40,"_38":513,"_152":118,"_36":514,"_13":59,"_32":20,"_34":515,"_23":24,"_155":-5,"_404":516,"_26":517},{"_41":501,"_31":502,"_29":503,"_150":504,"_39":40,"_38":505,"_152":118,"_36":506,"_13":59,"_32":307,"_34":-5,"_23":24,"_155":-5,"_404":507,"_26":508},{"_41":493,"_31":494,"_29":495,"_150":305,"_39":40,"_38":496,"_152":118,"_36":497,"_13":59,"_32":20,"_34":498,"_23":24,"_155":-5,"_404":499,"_26":500},{"_41":485,"_31":486,"_29":487,"_150":305,"_39":40,"_38":488,"_152":118,"_36":489,"_13":59,"_32":20,"_34":490,"_23":24,"_155":-5,"_404":491,"_26":492},{"_41":477,"_31":478,"_29":479,"_150":305,"_39":40,"_38":480,"_152":118,"_36":481,"_13":59,"_32":20,"_34":482,"_23":24,"_155":-5,"_404":483,"_26":484},{"_41":470,"_31":50,"_29":471,"_150":305,"_39":40,"_38":472,"_152":118,"_36":473,"_13":59,"_32":20,"_34":474,"_23":24,"_155":-5,"_404":475,"_26":476},{"_41":296,"_31":297,"_29":298,"_150":-5,"_39":40,"_38":299,"_152":118,"_36":467,"_13":59,"_32":20,"_34":301,"_23":24,"_155":-5,"_404":468,"_26":469},{"_41":289,"_31":290,"_29":291,"_150":-5,"_39":40,"_38":292,"_152":118,"_36":464,"_13":59,"_32":20,"_34":294,"_23":24,"_155":-5,"_404":465,"_26":466},{"_41":282,"_31":283,"_29":284,"_150":-5,"_39":40,"_38":285,"_152":24,"_36":461,"_13":59,"_32":20,"_34":287,"_23":24,"_155":-5,"_404":462,"_26":463},{"_41":275,"_31":276,"_29":277,"_150":-5,"_39":40,"_38":278,"_152":118,"_36":458,"_13":59,"_32":20,"_34":280,"_23":24,"_155":-5,"_404":459,"_26":460},{"_41":268,"_31":269,"_29":270,"_150":-5,"_39":40,"_38":271,"_152":24,"_36":455,"_13":59,"_32":20,"_34":273,"_23":24,"_155":-5,"_404":456,"_26":457},{"_41":265,"_31":27,"_29":30,"_150":-5,"_39":40,"_38":14,"_152":24,"_36":452,"_13":59,"_32":33,"_34":35,"_23":24,"_155":-5,"_404":453,"_26":454},{"_41":258,"_31":259,"_29":260,"_150":-5,"_39":40,"_38":261,"_152":24,"_36":449,"_13":59,"_32":33,"_34":263,"_23":24,"_155":-5,"_404":450,"_26":451},{"_41":251,"_31":252,"_29":253,"_150":-5,"_39":40,"_38":254,"_152":24,"_36":446,"_13":59,"_32":33,"_34":256,"_23":24,"_155":-5,"_404":447,"_26":448},{"_41":243,"_31":244,"_29":245,"_150":-5,"_39":40,"_38":246,"_152":24,"_36":443,"_13":59,"_32":248,"_34":249,"_23":24,"_155":-5,"_404":444,"_26":445},{"_41":236,"_31":237,"_29":238,"_150":-5,"_39":40,"_38":239,"_152":118,"_36":440,"_13":59,"_32":20,"_34":241,"_23":24,"_155":-5,"_404":441,"_26":442},{"_41":229,"_31":230,"_29":231,"_150":-5,"_39":40,"_38":232,"_152":24,"_36":437,"_13":59,"_32":33,"_34":234,"_23":24,"_155":-5,"_404":438,"_26":439},{"_41":221,"_31":222,"_29":223,"_150":-5,"_39":40,"_38":224,"_152":24,"_36":434,"_13":59,"_32":226,"_34":227,"_23":24,"_155":-5,"_404":435,"_26":436},{"_41":214,"_31":215,"_29":216,"_150":-5,"_39":40,"_38":217,"_152":24,"_36":431,"_13":59,"_32":33,"_34":219,"_23":24,"_155":-5,"_404":432,"_26":433},{"_41":207,"_31":208,"_29":209,"_150":-5,"_39":40,"_38":210,"_152":24,"_36":428,"_13":59,"_32":33,"_34":212,"_23":24,"_155":-5,"_404":429,"_26":430},{"_41":200,"_31":201,"_29":202,"_150":-5,"_39":40,"_38":203,"_152":24,"_36":425,"_13":59,"_32":33,"_34":205,"_23":24,"_155":-5,"_404":426,"_26":427},{"_41":193,"_31":194,"_29":195,"_150":-5,"_39":40,"_38":196,"_152":24,"_36":422,"_13":59,"_32":33,"_34":198,"_23":24,"_155":-5,"_404":423,"_26":424},{"_41":186,"_31":187,"_29":188,"_150":-5,"_39":40,"_38":189,"_152":24,"_36":419,"_13":59,"_32":33,"_34":191,"_23":24,"_155":-5,"_404":420,"_26":421},{"_41":179,"_31":180,"_29":181,"_150":-5,"_39":40,"_38":182,"_152":24,"_36":416,"_13":59,"_32":33,"_34":184,"_23":24,"_155":-5,"_404":417,"_26":418},{"_41":172,"_31":173,"_29":174,"_150":-5,"_39":40,"_38":175,"_152":24,"_36":413,"_13":59,"_32":33,"_34":177,"_23":24,"_155":-5,"_404":414,"_26":415},{"_41":165,"_31":166,"_29":167,"_150":-5,"_39":40,"_38":168,"_152":24,"_36":410,"_13":59,"_32":33,"_34":170,"_23":24,"_155":-5,"_404":411,"_26":412},{"_41":157,"_31":158,"_29":159,"_150":-5,"_39":40,"_38":160,"_152":118,"_36":407,"_13":162,"_32":33,"_34":163,"_23":24,"_155":-5,"_404":408,"_26":409},{"_41":147,"_31":148,"_29":149,"_150":-5,"_39":40,"_38":151,"_152":24,"_36":403,"_13":59,"_32":33,"_34":154,"_23":24,"_155":-5,"_404":405,"_26":406},["D",1781289527438],"children",[],[148],["D",1781305585269],[],[158],["D",1781289529030],[],[166],["D",1781305585108],[],[173],["D",1781289529212],[],[180],["D",1781289529256],[],[187],["D",1781289527593],[],[194],["D",1781289528996],[],[201],["D",1781289529104],[],[208],["D",1781289527691],[],[215],["D",1781289529132],[],[222],["D",1781305585119],[],[230],["D",1781289527448],[],[237],["D",1781289527562],[],[244],["D",1781289529192],[],[252],["D",1781289527441],[],[259],["D",1781305585262],[],[27],["D",1781289529330],[],[269],["D",1781289527444],[],[276],["D",1781289529355],[],[283],["D",1781305585119],[],[290],["D",1781289527671],[],[297],"9d723488-6cc7-48be-be34-459d70fb54a4","f3aacaa0-668d-11f1-b477-1607ee4eb77e",61,["D",1781289528790],"Unnamed repository; edit this file 'description' to name the repository.\n",[],[304,50],"68756796-d50a-4ca7-8b72-6101a929af95","config","f3061fa0-668d-11f1-bf75-1607ee4eb77e",43,["D",1781289527877],"[core]\n\trepositoryformatversion = 0\n\tfilemode = true\n\tbare = false\n\tlogallrefupdates = true\n[remote \"origin\"]\n\turl = git@github.com:catalloc/discord-captcha-shield.git\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n",[],[304,478],"20447dd9-ed12-4b41-b42f-c071593bc56b","HEAD","f3197b40-668d-11f1-bf75-1607ee4eb77e",46,["D",1781289527991],"ref: refs/heads/main\n",[],[304,486],"c3e87590-de2b-4560-9877-0181c1608273","COMMIT_EDITMSG","f35ace6a-668d-11f1-9138-1607ee4eb77e",54,["D",1781289527790],"Initial commit: Discord CAPTCHA Shield template\n\nA self-hostable CAPTCHA + Discord OAuth verification gate for Val Town.\nNew members solve a Cloudflare Turnstile CAPTCHA, authorize via Discord\n(identify scope), and a bot grants the Verified role.\n\nIncludes:\n- Portal + OAuth routes (http.ts), daily cleanup + OG card cron (cron.ts)\n- One-click DMZ bootstrap (setup.ts): bot creates the about/rules/verify/\n honeypot channels and posts every message\n- Per-key blob storage (store.ts) so post tools edit messages in place and\n setup posts concurrently\n- Raid alerts, audit log, dynamic social card\n- Single-file branding via theme.ts; README with full install guide\n\nCo-Authored-By: Claude Opus 4.8 (1M context) \n",[],[304,494],"261dc8ea-208c-4fed-ba41-2f4ecd45fedf","tags","f14c94d2-668d-11f1-84f3-1607ee4eb77e","f0f60360-668d-11f1-b249-1607ee4eb77e",8,["D",1781289524988],[],[304,509,502],"refs","e0a7603c-9e1f-4cde-9434-f671ca1d1d04","f2f18d4c-668d-11f1-9ab7-1607ee4eb77e","f1404754-668d-11f1-84f3-1607ee4eb77e",39,["D",1781289527732],"2f5f9232437b9da397467e05c22798a95a66f830\n",[],[304,509,518,83],"heads","ab3fc845-ea05-4515-9b9a-d0f31f7d8cb4",7,["D",1781289524906],[375],[304,509,518],"6d32b545-cba3-460c-91e9-b0f019b115ef",2,["D",1781289524416],[374,376],[304,509],"453f6ffb-ff9f-423f-8821-ebc5f1164704","pack","f17a4698-668d-11f1-b249-1607ee4eb77e","f105437a-668d-11f1-b68b-1607ee4eb77e",11,["D",1781289525287],[],[304,537,530],"objects","8983f4aa-0184-4fd3-9fad-6c6ff4512348","info","f207f330-668d-11f1-bfda-1607ee4eb77e",20,["D",1781289526212],[],[304,537,539],"43275c82-b244-46c3-be78-60065082bb32","e5","f16dd0f2-668d-11f1-b68b-1607ee4eb77e",10,["D",1781289525204],[],[304,537,546],"1d3b9d3a-41e1-4c49-9369-071a1b811284","d8","f217cca6-668d-11f1-bfda-1607ee4eb77e",21,["D",1781289526319],[],[304,537,553],"49a59a5c-1dc0-4fc2-aa35-edcfc4372191","d4","f235eb96-668d-11f1-b249-1607ee4eb77e",23,["D",1781289526509],[],[304,537,560],"ff7bb85e-ce20-4a25-bf35-d737a027b36d","d1","f1d7748a-668d-11f1-b7b6-1607ee4eb77e",17,["D",1781289525896],[],[304,537,567],"04a1e9da-0fcc-4227-ac5d-bd269e7e96f1","bd","f27d7e48-668d-11f1-84f3-1607ee4eb77e",28,["D",1781289526986],[],[304,537,574],"17c8169b-0642-4df8-a28d-8fed84e55170","a5","f1a9e7ea-668d-11f1-b249-1607ee4eb77e",14,["D",1781289525586],[],[304,537,581],"8c8b06ee-889a-4a8d-b02c-8ad2b34da028","99","f1580db2-668d-11f1-b68b-1607ee4eb77e",9,["D",1781289525063],[],[304,537,588],"46196381-57bf-4c1e-88c8-0f72133e2951","94","f1c6b00a-668d-11f1-b7b6-1607ee4eb77e",16,["D",1781289525788],[],[304,537,595],"1c295602-7354-4267-9958-129b8f1d5979","7e","f27255e0-668d-11f1-84f3-1607ee4eb77e",27,["D",1781289526897],[],[304,537,602],"406788c5-95be-4480-bb54-bf2957f628e4","73","f25e8cc2-668d-11f1-84f3-1607ee4eb77e",26,["D",1781289526784],[],[304,537,609],"cdb1f050-5cbb-49e5-9eed-99ffcf8cb173","6f","f289ca0e-668d-11f1-84f3-1607ee4eb77e",29,["D",1781289527068],[],[304,537,616],"868a8827-1df3-4934-8464-2055623e56af","4f1dc9a93d9d0c02c0b957ed86cacd50063dc9","f2fb6ccc-668d-11f1-9084-1607ee4eb77e","f1b92ce6-668d-11f1-b7b6-1607ee4eb77e",41,["D",1781289527796],"x\u0001�T�n�@\u0014��_1r{�U�(�T\u0002EU\n��@\u00054RO��\u000f��z��I��۵IPr��oޛ73�Z�5ο��pv��\u0013�\"��\u000e�P�} \u000b�(�!�3\u0018ɺ0�DR\t�\b\u0005g�vK6��\u0013��~��LD��HEHny��\u001c�m�D7\u0015YY`<꡸\u0013Z��=\u0018��\u0015i'��P\n�(h�L3Lw�T�>n��r��rry�#�\u0018��\u0005�\r\u000b6�+��\u001asbqn��Ŗ=��<�{�㼣��p\u0007\u001e\u0001}R\u0013#Y�ux\u000e��|�:*=��\u001dᖵ�<\r��-��^!��*S�S��\u0015O��ٹ\\?\u001c�\u0015\u0001ؖF�/�\u0012��.�it\u0011d��I��\b�j�u��E8�Wja�I��#��q�c(�Wa\"*�w<��\u0013�ꐽak�|E\u001cڿ�E��h\u001eK2�^hs�\u001a嘶x\u0014�D\u001f�c=�v�t�\u0001��L�m\u0012��܇;�\u001bV\u0001��E��oA��+-�\t��i�� }��#��w\u001f��C\u001fo�+/[�c�5V��<��QԮ�:3��\u0003%�v\"",[],[304,537,631,623],"6d","b2ce834d-8174-4e01-b284-9970a417a70a",15,["D",1781289525691],[359],[304,537,631],"3da80ccb-2eb8-43be-93e8-05fbe77bb83b","5d","f251ea9e-668d-11f1-b7b6-1607ee4eb77e",25,["D",1781289526701],[],[304,537,638],"30addad7-63dc-4b0b-ab0d-43c95775d7b9","5a","f1f6008a-668d-11f1-b7b6-1607ee4eb77e",19,["D",1781289526097],[],[304,537,645],"55902c88-4ded-4836-8000-d142b6ebb3d7","50","f2455dec-668d-11f1-b249-1607ee4eb77e",24,["D",1781289526617],[],[304,537,652],"b9392db2-82b3-4226-8723-9481ed9b52c0","39","f1901dec-668d-11f1-9228-1607ee4eb77e",12,["D",1781289525415],[],[304,537,659],"9b410a66-394b-47d9-802a-3e71d0fee8c7","38","f1e4f9ca-668d-11f1-b7b6-1607ee4eb77e",18,["D",1781289525987],[],[304,537,666],"10f4166b-3911-4750-8857-33df75b0a4e7","2f","f2263796-668d-11f1-bfda-1607ee4eb77e",22,["D",1781289526408],[],[304,537,673],"a6028611-b62c-44ed-b2e4-420d0008ba78","1e","f19abfc2-668d-11f1-9228-1607ee4eb77e",13,["D",1781289525501],[],[304,537,680],"ff63dd59-7707-44b7-9589-a093017a0efa",3,["D",1781289524514],[351,352,353,354,355,356,357,358,360,361,362,363,364,365,366,367,368,369,370,371,372],[304,537],"8691a00c-5a32-4490-9fc8-721850764554","f315167c-668d-11f1-9ab7-1607ee4eb77e","f11f0f8a-668d-11f1-b68b-1607ee4eb77e",45,["D",1781289527943],"0000000000000000000000000000000000000000 2f5f9232437b9da397467e05c22798a95a66f830 catalloc <80437062+catalloc@users.noreply.github.com> 1781289324 -0400\tcommit (initial): Initial commit: Discord CAPTCHA Shield template\n",[],[304,699,486],"logs","9254b389-b3e2-4813-8e37-176c5b1c144c","f30f250a-668d-11f1-9084-1607ee4eb77e","f2af6c96-668d-11f1-84f3-1607ee4eb77e",44,["D",1781289527922],[],[304,699,509,518,83],"99e8e0d7-467d-4ac1-a391-4a07c953caae","f29c48fa-668d-11f1-84f3-1607ee4eb77e",31,["D",1781289527310],[348],[304,699,509,518],"07ce5f94-6b8a-4fe2-8a0c-d8c3025814d8",30,["D",1781289527188],[347],[304,699,509],"b811d182-cf8b-44ac-bd93-1a21c79a6883",5,["D",1781289524687],[346,349],[304,699],"a7881e2c-ee16-48a8-be0b-696bd8787f0f","exclude","f3005e94-668d-11f1-9ab7-1607ee4eb77e","f1111d4e-668d-11f1-b68b-1607ee4eb77e",42,["D",1781289527827],"# git ls-files --others --exclude-from=.git/info/exclude\n# Lines that start with '#' are comments.\n# For a project mostly in C, the following would be a good set of\n# exclude patterns (uncomment them if you want to use them):\n# *.[oa]\n# *~\n",[],[304,539,724],"ee16ca23-3c5c-4bf2-9f08-20764efed1e2",4,["D",1781289524598],[344],[304,539],"d96c57c0-a5b6-4a24-b3e7-85206eed6708","update.sample","f399e3c0-668d-11f1-b0f1-1607ee4eb77e","f12e6dfe-668d-11f1-84f3-1607ee4eb77e",60,["D",1781289528092],"#!/bin/sh\n#\n# An example hook script to block unannotated tags from entering.\n# Called by \"git receive-pack\" with arguments: refname sha1-old sha1-new\n#\n# To enable this hook, rename this file to \"update\".\n#\n# Config\n# ------\n# hooks.allowunannotated\n# This boolean sets whether unannotated tags will be allowed into the\n# repository. By default they won't be.\n# hooks.allowdeletetag\n# This boolean sets whether deleting tags will be allowed in the\n# repository. By default they won't be.\n# hooks.allowmodifytag\n# This boolean sets whether a tag may be modified after creation. By default\n# it won't be.\n# hooks.allowdeletebranch\n# This boolean sets whether deleting branches will be allowed in the\n# repository. By default they won't be.\n# hooks.denycreatebranch\n# This boolean sets whether remotely creating branches will be denied\n# in the repository. By default this is allowed.\n#\n\n# --- Command line\nrefname=\"$1\"\noldrev=\"$2\"\nnewrev=\"$3\"\n\n# --- Safety check\nif [ -z \"$GIT_DIR\" ]; then\n\techo \"Don't run this script from the command line.\" >&2\n\techo \" (if you want, you could supply GIT_DIR then run\" >&2\n\techo \" $0 )\" >&2\n\texit 1\nfi\n\nif [ -z \"$refname\" -o -z \"$oldrev\" -o -z \"$newrev\" ]; then\n\techo \"usage: $0 \" >&2\n\texit 1\nfi\n\n# --- Config\nallowunannotated=$(git config --type=bool hooks.allowunannotated)\nallowdeletebranch=$(git config --type=bool hooks.allowdeletebranch)\ndenycreatebranch=$(git config --type=bool hooks.denycreatebranch)\nallowdeletetag=$(git config --type=bool hooks.allowdeletetag)\nallowmodifytag=$(git config --type=bool hooks.allowmodifytag)\n\n# check for no description\nprojectdesc=$(sed -e '1q' \"$GIT_DIR/description\")\ncase \"$projectdesc\" in\n\"Unnamed repository\"* | \"\")\n\techo \"*** Project description file hasn't been set\" >&2\n\texit 1\n\t;;\nesac\n\n# --- Check types\n# if $newrev is 0000...0000, it's a commit to delete a ref.\nzero=$(git hash-object --stdin &2\n\t\t\techo \"*** Use 'git tag [ -a | -s ]' for tags you want to propagate.\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\trefs/tags/*,delete)\n\t\t# delete tag\n\t\tif [ \"$allowdeletetag\" != \"true\" ]; then\n\t\t\techo \"*** Deleting a tag is not allowed in this repository\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\trefs/tags/*,tag)\n\t\t# annotated tag\n\t\tif [ \"$allowmodifytag\" != \"true\" ] && git rev-parse $refname > /dev/null 2>&1\n\t\tthen\n\t\t\techo \"*** Tag '$refname' already exists.\" >&2\n\t\t\techo \"*** Modifying a tag is not allowed in this repository.\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\trefs/heads/*,commit)\n\t\t# branch\n\t\tif [ \"$oldrev\" = \"$zero\" -a \"$denycreatebranch\" = \"true\" ]; then\n\t\t\techo \"*** Creating a branch is not allowed in this repository\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\trefs/heads/*,delete)\n\t\t# delete branch\n\t\tif [ \"$allowdeletebranch\" != \"true\" ]; then\n\t\t\techo \"*** Deleting a branch is not allowed in this repository\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\trefs/remotes/*,commit)\n\t\t# tracking branch\n\t\t;;\n\trefs/remotes/*,delete)\n\t\t# delete tracking branch\n\t\tif [ \"$allowdeletebranch\" != \"true\" ]; then\n\t\t\techo \"*** Deleting a tracking branch is not allowed in this repository\" >&2\n\t\t\texit 1\n\t\tfi\n\t\t;;\n\t*)\n\t\t# Anything else (is there anything else?)\n\t\techo \"*** Update hook: unknown type of update to ref $refname of type $newrev_type\" >&2\n\t\texit 1\n\t\t;;\nesac\n\n# --- Finished\nexit 0\n",[],[304,746,738],"hooks","1f5d1f00-c259-43a9-b524-d97154f18bbe","sendemail-validate.sample","f37caf26-668d-11f1-b477-1607ee4eb77e",58,["D",1781289528493],"#!/bin/sh\n\n# An example hook script to validate a patch (and/or patch series) before\n# sending it via email.\n#\n# The hook should exit with non-zero status after issuing an appropriate\n# message if it wants to prevent the email(s) from being sent.\n#\n# To enable this hook, rename this file to \"sendemail-validate\".\n#\n# By default, it will only check that the patch(es) can be applied on top of\n# the default upstream branch without conflicts in a secondary worktree. After\n# validation (successful or not) of the last patch of a series, the worktree\n# will be deleted.\n#\n# The following config variables can be set to change the default remote and\n# remote ref that are used to apply the patches against:\n#\n# sendemail.validateRemote (default: origin)\n# sendemail.validateRemoteRef (default: HEAD)\n#\n# Replace the TODO placeholders with appropriate checks according to your\n# needs.\n\nvalidate_cover_letter () {\n\tfile=\"$1\"\n\t# TODO: Replace with appropriate checks (e.g. spell checking).\n\ttrue\n}\n\nvalidate_patch () {\n\tfile=\"$1\"\n\t# Ensure that the patch applies without conflicts.\n\tgit am -3 \"$file\" || return\n\t# TODO: Replace with appropriate checks for this patch\n\t# (e.g. checkpatch.pl).\n\ttrue\n}\n\nvalidate_series () {\n\t# TODO: Replace with appropriate checks for the whole series\n\t# (e.g. quick build, coding style checks, etc.).\n\ttrue\n}\n\n# main -------------------------------------------------------------------------\n\nif test \"$GIT_SENDEMAIL_FILE_COUNTER\" = 1\nthen\n\tremote=$(git config --default origin --get sendemail.validateRemote) &&\n\tref=$(git config --default HEAD --get sendemail.validateRemoteRef) &&\n\tworktree=$(mktemp --tmpdir -d sendemail-validate.XXXXXXX) &&\n\tgit worktree add -fd --checkout \"$worktree\" \"refs/remotes/$remote/$ref\" &&\n\tgit config --replace-all sendemail.validateWorktree \"$worktree\"\nelse\n\tworktree=$(git config --get sendemail.validateWorktree)\nfi || {\n\techo \"sendemail-validate: error: failed to prepare worktree\" >&2\n\texit 1\n}\n\nunset GIT_DIR GIT_WORK_TREE\ncd \"$worktree\" &&\n\nif grep -q \"^diff --git \" \"$1\"\nthen\n\tvalidate_patch \"$1\"\nelse\n\tvalidate_cover_letter \"$1\"\nfi &&\n\nif test \"$GIT_SENDEMAIL_FILE_COUNTER\" = \"$GIT_SENDEMAIL_FILE_TOTAL\"\nthen\n\tgit config --unset-all sendemail.validateWorktree &&\n\ttrap 'git worktree remove -ff \"$worktree\"' EXIT &&\n\tvalidate_series\nfi\n",[],[304,746,748],"e42e3f66-772a-40b7-bfc5-f098b4929ef5","push-to-checkout.sample","f34d6e64-668d-11f1-847c-1607ee4eb77e",52,["D",1781289528314],"#!/bin/sh\n\n# An example hook script to update a checked-out tree on a git push.\n#\n# This hook is invoked by git-receive-pack(1) when it reacts to git\n# push and updates reference(s) in its repository, and when the push\n# tries to update the branch that is currently checked out and the\n# receive.denyCurrentBranch configuration variable is set to\n# updateInstead.\n#\n# By default, such a push is refused if the working tree and the index\n# of the remote repository has any difference from the currently\n# checked out commit; when both the working tree and the index match\n# the current commit, they are updated to match the newly pushed tip\n# of the branch. This hook is to be used to override the default\n# behaviour; however the code below reimplements the default behaviour\n# as a starting point for convenient modification.\n#\n# The hook receives the commit with which the tip of the current\n# branch is going to be updated:\ncommit=$1\n\n# It can exit with a non-zero status to refuse the push (when it does\n# so, it must not modify the index or the working tree).\ndie () {\n\techo >&2 \"$*\"\n\texit 1\n}\n\n# Or it can make any necessary changes to the working tree and to the\n# index to bring them to the desired state when the tip of the current\n# branch is updated to the new commit, and exit with a zero status.\n#\n# For example, the hook can simply run git read-tree -u -m HEAD \"$1\"\n# in order to emulate git fetch that is run in the reverse direction\n# with git push, as the two-tree form of git read-tree -u -m is\n# essentially the same as git switch or git checkout that switches\n# branches while keeping the local changes in the working tree that do\n# not interfere with the difference between the branches.\n\n# The below is a more-or-less exact translation to shell of the C code\n# for the default behaviour for git's push-to-checkout hook defined in\n# the push_to_deploy() function in builtin/receive-pack.c.\n#\n# Note that the hook will be executed from the repository directory,\n# not from the working tree, so if you want to perform operations on\n# the working tree, you will have to adapt your code accordingly, e.g.\n# by adding \"cd ..\" or using relative paths.\n\nif ! git update-index -q --ignore-submodules --refresh\nthen\n\tdie \"Up-to-date check failed\"\nfi\n\nif ! git diff-files --quiet --ignore-submodules --\nthen\n\tdie \"Working directory has unstaged changes\"\nfi\n\n# This is a rough translation of:\n#\n# head_has_history() ? \"HEAD\" : EMPTY_TREE_SHA1_HEX\nif git cat-file -e HEAD 2>/dev/null\nthen\n\thead=HEAD\nelse\n\thead=$(git hash-object -t tree --stdin \\).*$/Signed-off-by: \\1/p')\n# git interpret-trailers --in-place --trailer \"$SOB\" \"$COMMIT_MSG_FILE\"\n# if test -z \"$COMMIT_SOURCE\"\n# then\n# /usr/bin/perl -i.bak -pe 'print \"\\n\" if !$first_line++' \"$COMMIT_MSG_FILE\"\n# fi\n",[],[304,746,764],"2d97cfac-0e1b-4a9f-9e1b-d0b3df5e2402","pre-receive.sample","f331c038-668d-11f1-9ab7-1607ee4eb77e",49,["D",1781289528116],"#!/bin/sh\n#\n# An example hook script to make use of push options.\n# The example simply echoes all push options that start with 'echoback='\n# and rejects all pushes when the \"reject\" push option is used.\n#\n# To enable this hook, rename this file to \"pre-receive\".\n\nif test -n \"$GIT_PUSH_OPTION_COUNT\"\nthen\n\ti=0\n\twhile test \"$i\" -lt \"$GIT_PUSH_OPTION_COUNT\"\n\tdo\n\t\teval \"value=\\$GIT_PUSH_OPTION_$i\"\n\t\tcase \"$value\" in\n\t\techoback=*)\n\t\t\techo \"echo from the pre-receive-hook: ${value#*=}\" >&2\n\t\t\t;;\n\t\treject)\n\t\t\texit 1\n\t\tesac\n\t\ti=$((i + 1))\n\tdone\nfi\n",[],[304,746,772],"6495c585-f0f3-4f01-ad9a-c13f24cc118a","pre-rebase.sample","f370f87a-668d-11f1-847c-1607ee4eb77e",56,["D",1781289528506],"#!/bin/sh\n#\n# Copyright (c) 2006, 2008 Junio C Hamano\n#\n# The \"pre-rebase\" hook is run just before \"git rebase\" starts doing\n# its job, and can prevent the command from running by exiting with\n# non-zero status.\n#\n# The hook is called with the following parameters:\n#\n# $1 -- the upstream the series was forked from.\n# $2 -- the branch being rebased (or empty when rebasing the current branch).\n#\n# This sample shows how to prevent topic branches that are already\n# merged to 'next' branch from getting rebased, because allowing it\n# would result in rebasing already published history.\n\npublish=next\nbasebranch=\"$1\"\nif test \"$#\" = 2\nthen\n\ttopic=\"refs/heads/$2\"\nelse\n\ttopic=`git symbolic-ref HEAD` ||\n\texit 0 ;# we do not interrupt rebasing detached HEAD\nfi\n\ncase \"$topic\" in\nrefs/heads/??/*)\n\t;;\n*)\n\texit 0 ;# we do not interrupt others.\n\t;;\nesac\n\n# Now we are dealing with a topic branch being rebased\n# on top of master. Is it OK to rebase it?\n\n# Does the topic really exist?\ngit show-ref -q \"$topic\" || {\n\techo >&2 \"No such branch $topic\"\n\texit 1\n}\n\n# Is topic fully merged to master?\nnot_in_master=`git rev-list --pretty=oneline ^master \"$topic\"`\nif test -z \"$not_in_master\"\nthen\n\techo >&2 \"$topic is fully merged to master; better remove it.\"\n\texit 1 ;# we could allow it, but there is no point.\nfi\n\n# Is topic ever merged to next? If so you should not be rebasing it.\nonly_next_1=`git rev-list ^master \"^$topic\" ${publish} | sort`\nonly_next_2=`git rev-list ^master ${publish} | sort`\nif test \"$only_next_1\" = \"$only_next_2\"\nthen\n\tnot_in_topic=`git rev-list \"^$topic\" master`\n\tif test -z \"$not_in_topic\"\n\tthen\n\t\techo >&2 \"$topic is already up to date with master\"\n\t\texit 1 ;# we could allow it, but there is no point.\n\telse\n\t\texit 0\n\tfi\nelse\n\tnot_in_next=`git rev-list --pretty=oneline ^${publish} \"$topic\"`\n\t/usr/bin/perl -e '\n\t\tmy $topic = $ARGV[0];\n\t\tmy $msg = \"* $topic has commits already merged to public branch:\\n\";\n\t\tmy (%not_in_next) = map {\n\t\t\t/^([0-9a-f]+) /;\n\t\t\t($1 => 1);\n\t\t} split(/\\n/, $ARGV[1]);\n\t\tfor my $elem (map {\n\t\t\t\t/^([0-9a-f]+) (.*)$/;\n\t\t\t\t[$1 => $2];\n\t\t\t} split(/\\n/, $ARGV[2])) {\n\t\t\tif (!exists $not_in_next{$elem->[0]}) {\n\t\t\t\tif ($msg) {\n\t\t\t\t\tprint STDERR $msg;\n\t\t\t\t\tundef $msg;\n\t\t\t\t}\n\t\t\t\tprint STDERR \" $elem->[1]\\n\";\n\t\t\t}\n\t\t}\n\t' \"$topic\" \"$not_in_next\" \"$not_in_master\"\n\texit 1\nfi\n\n<<\\DOC_END\n\nThis sample hook safeguards topic branches that have been\npublished from being rewound.\n\nThe workflow assumed here is:\n\n * Once a topic branch forks from \"master\", \"master\" is never\n merged into it again (either directly or indirectly).\n\n * Once a topic branch is fully cooked and merged into \"master\",\n it is deleted. If you need to build on top of it to correct\n earlier mistakes, a new topic branch is created by forking at\n the tip of the \"master\". This is not strictly necessary, but\n it makes it easier to keep your history simple.\n\n * Whenever you need to test or publish your changes to topic\n branches, merge them into \"next\" branch.\n\nThe script, being an example, hardcodes the publish branch name\nto be \"next\", but it is trivial to make it configurable via\n$GIT_DIR/config mechanism.\n\nWith this workflow, you would want to know:\n\n(1) ... if a topic branch has ever been merged to \"next\". Young\n topic branches can have stupid mistakes you would rather\n clean up before publishing, and things that have not been\n merged into other branches can be easily rebased without\n affecting other people. But once it is published, you would\n not want to rewind it.\n\n(2) ... if a topic branch has been fully merged to \"master\".\n Then you can delete it. More importantly, you should not\n build on top of it -- other people may already want to\n change things related to the topic as patches against your\n \"master\", so if you need further changes, it is better to\n fork the topic (perhaps with the same name) afresh from the\n tip of \"master\".\n\nLet's look at this example:\n\n\t\t o---o---o---o---o---o---o---o---o---o \"next\"\n\t\t / / / /\n\t\t / a---a---b A / /\n\t\t/ / / /\n\t / / c---c---c---c B /\n\t / / / \\ /\n\t / / / b---b C \\ /\n\t / / / / \\ /\n ---o---o---o---o---o---o---o---o---o---o---o \"master\"\n\n\nA, B and C are topic branches.\n\n * A has one fix since it was merged up to \"next\".\n\n * B has finished. It has been fully merged up to \"master\" and \"next\",\n and is ready to be deleted.\n\n * C has not merged to \"next\" at all.\n\nWe would want to allow C to be rebased, refuse A, and encourage\nB to be deleted.\n\nTo compute (1):\n\n\tgit rev-list ^master ^topic next\n\tgit rev-list ^master next\n\n\tif these match, topic has not merged in next at all.\n\nTo compute (2):\n\n\tgit rev-list master..topic\n\n\tif this is empty, it is fully merged to \"master\".\n\nDOC_END\n",[],[304,746,780],"33530d0d-d5c2-4cb8-ae11-d26f4df79d58","pre-push.sample","f377d88e-668d-11f1-9138-1607ee4eb77e",57,["D",1781289528611],"#!/bin/sh\n\n# An example hook script to verify what is about to be pushed. Called by \"git\n# push\" after it has checked the remote status, but before anything has been\n# pushed. If this script exits with a non-zero status nothing will be pushed.\n#\n# This hook is called with the following parameters:\n#\n# $1 -- Name of the remote to which the push is being done\n# $2 -- URL to which the push is being done\n#\n# If pushing without using a named remote those arguments will be equal.\n#\n# Information about the commits which are being pushed is supplied as lines to\n# the standard input in the form:\n#\n# \n#\n# This sample shows how to prevent push of commits where the log message starts\n# with \"WIP\" (work in progress).\n\nremote=\"$1\"\nurl=\"$2\"\n\nzero=$(git hash-object --stdin &2 \"Found WIP commit in $local_ref, not pushing\"\n\t\t\texit 1\n\t\tfi\n\tfi\ndone\n\nexit 0\n",[],[304,746,788],"50e3eebe-9912-4421-831b-75a13a9f21d6","pre-merge-commit.sample","f382276c-668d-11f1-befe-1607ee4eb77e",59,["D",1781289528646],"#!/bin/sh\n#\n# An example hook script to verify what is about to be committed.\n# Called by \"git merge\" with no arguments. The hook should\n# exit with non-zero status after issuing an appropriate message to\n# stderr if it wants to stop the merge commit.\n#\n# To enable this hook, rename this file to \"pre-merge-commit\".\n\n. git-sh-setup\ntest -x \"$GIT_DIR/hooks/pre-commit\" &&\n exec \"$GIT_DIR/hooks/pre-commit\"\n:\n",[],[304,746,796],"ac406464-d0b5-45b3-bf65-8dfac2837566","pre-commit.sample","f355039a-668d-11f1-b477-1607ee4eb77e",53,["D",1781289528300],"#!/bin/sh\n#\n# An example hook script to verify what is about to be committed.\n# Called by \"git commit\" with no arguments. The hook should\n# exit with non-zero status after issuing an appropriate message if\n# it wants to stop the commit.\n#\n# To enable this hook, rename this file to \"pre-commit\".\n\nif git rev-parse --verify HEAD >/dev/null 2>&1\nthen\n\tagainst=HEAD\nelse\n\t# Initial commit: diff against an empty tree object\n\tagainst=$(git hash-object -t tree /dev/null)\nfi\n\n# If you want to allow non-ASCII filenames set this variable to true.\nallownonascii=$(git config --type=bool hooks.allownonascii)\n\n# Redirect output to stderr.\nexec 1>&2\n\n# Cross platform projects tend to avoid non-ASCII filenames; prevent\n# them from being added to the repository. We exploit the fact that the\n# printable range starts at the space character and ends with tilde.\nif [ \"$allownonascii\" != \"true\" ] &&\n\t# Note that the use of brackets around a tr range is ok here, (it's\n\t# even required, for portability to Solaris 10's /usr/bin/tr), since\n\t# the square bracket bytes happen to fall in the designated range.\n\ttest $(git diff-index --cached --name-only --diff-filter=A -z $against |\n\t LC_ALL=C tr -d '[ -~]\\0' | wc -c) != 0\nthen\n\tcat <<\\EOF\nError: Attempt to add a non-ASCII file name.\n\nThis can cause problems if you want to work with people on other platforms.\n\nTo be portable it is advisable to rename the file.\n\nIf you know what you are doing you can disable this check using:\n\n git config hooks.allownonascii true\nEOF\n\texit 1\nfi\n\n# If there are whitespace errors, print the offending file names and fail.\nexec git diff-index --check --cached $against --\n",[],[304,746,804],"ae7b06d4-e829-462d-9f5a-17531f7f29d3","pre-applypatch.sample","f364ccbc-668d-11f1-9ab7-1607ee4eb77e",55,["D",1781289528399],"#!/bin/sh\n#\n# An example hook script to verify what is about to be committed\n# by applypatch from an e-mail message.\n#\n# The hook should exit with non-zero status after issuing an\n# appropriate message if it wants to stop the commit.\n#\n# To enable this hook, rename this file to \"pre-applypatch\".\n\n. git-sh-setup\nprecommit=\"$(git rev-parse --git-path hooks/pre-commit)\"\ntest -x \"$precommit\" && exec \"$precommit\" ${1+\"$@\"}\n:\n",[],[304,746,812],"24efb037-af1a-4c2d-9b7d-2a259a8f5fc7","post-update.sample","f336e0ea-668d-11f1-9084-1607ee4eb77e",50,["D",1781289528198],"#!/bin/sh\n#\n# An example hook script to prepare a packed repository for use over\n# dumb transports.\n#\n# To enable this hook, rename this file to \"post-update\".\n\nexec git update-server-info\n",[],[304,746,820],"1d50e554-f080-441a-a0ee-eccda5056cbc","fsmonitor-watchman.sample","f3f37034-668d-11f1-847c-1607ee4eb77e",71,["D",1781289528701],"#!/usr/bin/perl\n\nuse strict;\nuse warnings;\nuse IPC::Open2;\n\n# An example hook script to integrate Watchman\n# (https://facebook.github.io/watchman/) with git to speed up detecting\n# new and modified files.\n#\n# The hook is passed a version (currently 2) and last update token\n# formatted as a string and outputs to stdout a new update token and\n# all files that have been modified since the update token. Paths must\n# be relative to the root of the working tree and separated by a single NUL.\n#\n# To enable this hook, rename this file to \"query-watchman\" and set\n# 'git config core.fsmonitor .git/hooks/query-watchman'\n#\nmy ($version, $last_update_token) = @ARGV;\n\n# Uncomment for debugging\n# print STDERR \"$0 $version $last_update_token\\n\";\n\n# Check the hook interface version\nif ($version ne 2) {\n\tdie \"Unsupported query-fsmonitor hook version '$version'.\\n\" .\n\t \"Falling back to scanning...\\n\";\n}\n\nmy $git_work_tree = get_working_dir();\n\nmy $retry = 1;\n\nmy $json_pkg;\neval {\n\trequire JSON::XS;\n\t$json_pkg = \"JSON::XS\";\n\t1;\n} or do {\n\trequire JSON::PP;\n\t$json_pkg = \"JSON::PP\";\n};\n\nlaunch_watchman();\n\nsub launch_watchman {\n\tmy $o = watchman_query();\n\tif (is_work_tree_watched($o)) {\n\t\toutput_result($o->{clock}, @{$o->{files}});\n\t}\n}\n\nsub output_result {\n\tmy ($clockid, @files) = @_;\n\n\t# Uncomment for debugging watchman output\n\t# open (my $fh, \">\", \".git/watchman-output.out\");\n\t# binmode $fh, \":utf8\";\n\t# print $fh \"$clockid\\n@files\\n\";\n\t# close $fh;\n\n\tbinmode STDOUT, \":utf8\";\n\tprint $clockid;\n\tprint \"\\0\";\n\tlocal $, = \"\\0\";\n\tprint @files;\n}\n\nsub watchman_clock {\n\tmy $response = qx/watchman clock \"$git_work_tree\"/;\n\tdie \"Failed to get clock id on '$git_work_tree'.\\n\" .\n\t\t\"Falling back to scanning...\\n\" if $? != 0;\n\n\treturn $json_pkg->new->utf8->decode($response);\n}\n\nsub watchman_query {\n\tmy $pid = open2(\\*CHLD_OUT, \\*CHLD_IN, 'watchman -j --no-pretty')\n\tor die \"open2() failed: $!\\n\" .\n\t\"Falling back to scanning...\\n\";\n\n\t# In the query expression below we're asking for names of files that\n\t# changed since $last_update_token but not from the .git folder.\n\t#\n\t# To accomplish this, we're using the \"since\" generator to use the\n\t# recency index to select candidate nodes and \"fields\" to limit the\n\t# output to file names only. Then we're using the \"expression\" term to\n\t# further constrain the results.\n\tmy $last_update_line = \"\";\n\tif (substr($last_update_token, 0, 1) eq \"c\") {\n\t\t$last_update_token = \"\\\"$last_update_token\\\"\";\n\t\t$last_update_line = qq[\\n\"since\": $last_update_token,];\n\t}\n\tmy $query = <<\"\tEND\";\n\t\t[\"query\", \"$git_work_tree\", {$last_update_line\n\t\t\t\"fields\": [\"name\"],\n\t\t\t\"expression\": [\"not\", [\"dirname\", \".git\"]]\n\t\t}]\n\tEND\n\n\t# Uncomment for debugging the watchman query\n\t# open (my $fh, \">\", \".git/watchman-query.json\");\n\t# print $fh $query;\n\t# close $fh;\n\n\tprint CHLD_IN $query;\n\tclose CHLD_IN;\n\tmy $response = do {local $/; };\n\n\t# Uncomment for debugging the watch response\n\t# open ($fh, \">\", \".git/watchman-response.json\");\n\t# print $fh $response;\n\t# close $fh;\n\n\tdie \"Watchman: command returned no output.\\n\" .\n\t\"Falling back to scanning...\\n\" if $response eq \"\";\n\tdie \"Watchman: command returned invalid output: $response\\n\" .\n\t\"Falling back to scanning...\\n\" unless $response =~ /^\\{/;\n\n\treturn $json_pkg->new->utf8->decode($response);\n}\n\nsub is_work_tree_watched {\n\tmy ($output) = @_;\n\tmy $error = $output->{error};\n\tif ($retry > 0 and $error and $error =~ m/unable to resolve root .* directory (.*) is not watched/) {\n\t\t$retry--;\n\t\tmy $response = qx/watchman watch \"$git_work_tree\"/;\n\t\tdie \"Failed to make watchman watch '$git_work_tree'.\\n\" .\n\t\t \"Falling back to scanning...\\n\" if $? != 0;\n\t\t$output = $json_pkg->new->utf8->decode($response);\n\t\t$error = $output->{error};\n\t\tdie \"Watchman: $error.\\n\" .\n\t\t\"Falling back to scanning...\\n\" if $error;\n\n\t\t# Uncomment for debugging watchman output\n\t\t# open (my $fh, \">\", \".git/watchman-output.out\");\n\t\t# close $fh;\n\n\t\t# Watchman will always return all files on the first query so\n\t\t# return the fast \"everything is dirty\" flag to git and do the\n\t\t# Watchman query just to get it over with now so we won't pay\n\t\t# the cost in git to look up each individual file.\n\t\tmy $o = watchman_clock();\n\t\t$error = $output->{error};\n\n\t\tdie \"Watchman: $error.\\n\" .\n\t\t\"Falling back to scanning...\\n\" if $error;\n\n\t\toutput_result($o->{clock}, (\"/\"));\n\t\t$last_update_token = $o->{clock};\n\n\t\teval { launch_watchman() };\n\t\treturn 0;\n\t}\n\n\tdie \"Watchman: $error.\\n\" .\n\t\"Falling back to scanning...\\n\" if $error;\n\n\treturn 1;\n}\n\nsub get_working_dir {\n\tmy $working_dir;\n\tif ($^O =~ 'msys' || $^O =~ 'cygwin') {\n\t\t$working_dir = Win32::GetCwd();\n\t\t$working_dir =~ tr/\\\\/\\//;\n\t} else {\n\t\trequire Cwd;\n\t\t$working_dir = Cwd::cwd();\n\t}\n\n\treturn $working_dir;\n}\n",[],[304,746,828],"f2acb98a-4098-4ff5-8939-ed2f4246d70e","commit-msg.sample","f33d6578-668d-11f1-9ab7-1607ee4eb77e",51,["D",1781289528218],"#!/bin/sh\n#\n# An example hook script to check the commit log message.\n# Called by \"git commit\" with one argument, the name of the file\n# that has the commit message. The hook should exit with non-zero\n# status after issuing an appropriate message if it wants to stop the\n# commit. The hook is allowed to edit the commit message file.\n#\n# To enable this hook, rename this file to \"commit-msg\".\n\n# Uncomment the below to add a Signed-off-by line to the message.\n# Doing this in a hook is a bad idea in general, but the prepare-commit-msg\n# hook is more suited to it.\n#\n# SOB=$(git var GIT_AUTHOR_IDENT | sed -n 's/^\$.*>\$.*$/Signed-off-by: \\1/p')\n# grep -qs \"^$SOB\" \"$1\" || echo \"$SOB\" >> \"$1\"\n\n# This example catches duplicate Signed-off-by lines.\n\ntest \"\" = \"$(grep '^Signed-off-by: ' \"$1\" |\n\t sort | uniq -c | sed -e '/^[ \t]*1[ \t]/d')\" || {\n\techo >&2 Duplicate Signed-off-by lines.\n\texit 1\n}\n",[],[304,746,836],"0e2a4d05-5854-464f-8148-b174b1c06df5","applypatch-msg.sample","f321bd28-668d-11f1-9245-1607ee4eb77e",47,["D",1781289528031],"#!/bin/sh\n#\n# An example hook script to check the commit log message taken by\n# applypatch from an e-mail message.\n#\n# The hook should exit with non-zero status after issuing an\n# appropriate message if it wants to stop the commit. The hook is\n# allowed to edit the commit message file.\n#\n# To enable this hook, rename this file to \"applypatch-msg\".\n\n. git-sh-setup\ncommitmsg=\"$(git rev-parse --git-path hooks/commit-msg)\"\ntest -x \"$commitmsg\" && exec \"$commitmsg\" ${1+\"$@\"}\n:\n",[],[304,746,844],"d80b0eca-1ee6-4307-9d88-d85d0828f8d7",6,["D",1781289524788],[329,330,331,332,333,334,335,336,337,338,339,340,341,342],[304,746],["D",1781289524292],[328,343,345,350,373,377,378,379,380],[304],"18726005-4675-41be-86fe-e404657d2f2f","settings.local.json","55ef6624-66b3-11f1-9fc1-1607ee4eb77e",76,["D",1781305585156],"{\n \"permissions\": {\n \"allow\": [\n \"Bash(deno --version)\",\n \"Bash(deno check *)\",\n \"Bash(deno lint *)\"\n ]\n }\n}\n",[],[310,860],["D",1781305585000],[326],[310],["D",1781289523885],{"_93":92,"_100":96},{"_93":92,"_94":-5,"_95":96,"_18":53,"_97":98,"_99":24},{"_13":82,"_31":83,"_41":40,"_84":42,"_85":-5,"_86":-5,"_87":-5,"_88":-5,"_89":-5,"_90":43,"_91":92},"ctx",{"_75":-5,"_120":907,"_908":909,"_910":911,"_912":24,"_913":24,"_914":24,"_915":118,"_916":-5,"_917":-7,"_918":-7,"_919":59,"_920":24,"_921":24,"_922":-5,"_923":24,"_924":24,"_925":24,"_926":-5},"ENV",{"_878":879,"_880":881,"_882":83,"_883":884,"_885":886,"_887":888,"_889":890,"_891":892,"_893":894,"_895":896,"_897":898,"_899":900,"_901":902,"_903":904,"_905":906},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v79