[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_423":424,"_425":426},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_319":-5,"_20":320,"_22":321,"_322":323,"_324":325,"_26":326,"_24":327,"_328":-5,"_329":-5,"_330":69,"_331":332,"_333":63,"_334":-5,"_335":-5,"_336":337},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","eixixddizca","name","discord-shop-bot","branchName","main","version","path","lib/moderation.ts","project",{"_33":262,"_13":14,"_47":263,"_264":-5,"_265":69,"_266":267,"_268":267,"_269":270,"_271":-5,"_272":273,"_274":60,"_275":63,"_276":-5,"_277":-5,"_278":44,"_279":280,"_281":282,"_283":284,"_285":286,"_287":-5,"_288":289,"_290":289,"_291":292,"_293":292,"_294":292,"_295":289,"_296":289,"_297":298,"_299":300,"_301":302,"_303":69},"tree",[54,55,56,57],"file",{"_33":34,"_35":36,"_37":38,"_13":39,"_40":41,"_42":43,"_17":44,"_45":46,"_47":48,"_49":50,"_51":-5,"_18":52},"contents",[],"upstream","pull","ahead","behind","envVars","id","08aeadff-39cc-4d28-9fda-4516327b63f0","branchId","dfaf1e7a-f8eb-4419-ac1e-aa00e1193983","fileId","aa7bc606-a231-11f1-8a0b-1607ee4eb77e","moderation.ts","content","// Moderation system: cases-backed warnings and Discord moderation actions.\n// Every action gets a Case ID (CASE-XXXXX) stored persistently. Permission\n// checks are server-side (isStaff). Respects the Discord permission hierarchy\n// via the bot's ManageGuild requirement.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst BAN = 1 << 2; // BAN_MEMBERS\nconst KICK = 1 << 1; // KICK_MEMBERS\nconst MODERATE = 1 << 40; // MODERATE_MEMBERS\n\nasync function botToken(): Promise {\n const t = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!t) throw new Error(\"Bot token not configured\");\n return t;\n}\n\nasync function createCase(c: {\n userId: string; username: string; moderatorId: string; action: string;\n reason: string; evidence?: string; duration?: number;\n}): Promise {\n const caseId = \"CASE-\" + generateCode(5);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: `INSERT INTO cases (caseId, userId, username, moderatorId, action, reason, evidence, duration, createdAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [caseId, c.userId, c.username, c.moderatorId, c.action, c.reason, c.evidence ?? \"\", c.duration ?? null, new Date().toISOString()],\n });\n return caseId;\n}\n\nexport async function moderation(ctx: CmdCtx, sub: string): Promise> {\n if (sub === \"cases\") return listCases(ctx);\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to moderate.\");\n\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const reason = String(ctx.options[\"reason\"] ?? \"No reason provided\");\n const username = ctx.options[\"user\"] as string ?? userId;\n\n switch (sub) {\n case \"warn\": {\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"warn\", reason });\n // add to customer reputation\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({ sql: \"UPDATE customers SET reputation = reputation + 1 WHERE userId = ?\", args: [userId] });\n return replyEmbed(UI.warning({\n title: \"⚠️ Warning Issued\",\n description: `Case \\`${caseId}\\` · <@${userId}>`,\n fields: [{ name: \"Reason\", value: reason, inline: false }],\n }));\n }\n\n case \"ban\": {\n await guildMod(ctx, userId, KICK, `PUT /guilds/${ctx.guildId}/bans/${userId}`, { reason });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"ban\", reason });\n return replyEmbed(UI.warning({ title: \"🔨 User Banned\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"kick\": {\n await guildMod(ctx, userId, KICK, `DELETE /guilds/${ctx.guildId}/members/${userId}`, null, reason);\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"kick\", reason });\n return replyEmbed(UI.warning({ title: \"👢 User Kicked\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"timeout\": {\n const minutes = Math.max(1, Math.floor(Number(ctx.options[\"minutes\"] ?? 60)));\n await guildMod(ctx, userId, MODERATE, `PATCH /guilds/${ctx.guildId}/members/${userId}`, {\n communication_disabled_until: new Date(Date.now() + minutes * 60000).toISOString(),\n });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"timeout\", reason, duration: minutes });\n return replyEmbed(UI.warning({ title: \"⏱️ Timed Out\", description: `Case \\`${caseId}\\` · <@${userId}> · ${minutes}m`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n default:\n return reply(\"Unknown moderation command.\");\n }\n}\n\n// Perform a Discord API moderation action, with best-effort errors.\nasync function guildMod(ctx: CmdCtx, userId: string, _permBit: number, methodAndPath: string, body: Record | null, reasonText?: string): Promise {\n const token = await botToken();\n const [method, url] = methodAndPath.split(\" \");\n const res = await fetch(`${DISCORD_API}${url}`, {\n method, headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\", ...(reasonText ? { \"X-Audit-Log-Reason\": reasonText } : {}) },\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) {\n const txt = await res.text();\n console.error(\"mod action failed:\", res.status, txt);\n throw new Error(\"Discord API error: \" + res.status);\n }\n}\n\nasync function listCases(ctx: CmdCtx): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const res = userId\n ? await sqlite.execute({ sql: \"SELECT * FROM cases WHERE userId = ? ORDER BY createdAt DESC LIMIT 10\", args: [userId] })\n : await sqlite.execute({ sql: \"SELECT * FROM cases ORDER BY createdAt DESC LIMIT 10\" });\n const rows = res.rows as Array>;\n if (!rows.length) return reply(\"No cases found.\");\n const fields: EmbedField[] = rows.map((r) => ({\n name: `${r.caseId} · ${r.action}`,\n value: `<@${r.userId}> — ${r.reason}\\n<@${r.moderatorId}> · `,\n inline: false,\n }));\n return replyEmbed(UI.info({ title: \"🛡️ Moderation Cases\", fields }));\n}\n","fileType","script",0,"parentId","0c5122a9-bcd5-498b-89dd-adb72a9f617b","createdAt",["D",1787846961822],"branchVersion",22,"label",[53,39],"lib",{"_33":126,"_13":53,"_37":46,"_45":-5,"_35":36,"_49":127,"_62":63,"_47":128,"_17":44,"_42":87,"_40":-5,"_68":69,"_51":-5,"_70":129,"_18":130},{"_33":82,"_13":83,"_37":84,"_45":-5,"_35":36,"_49":85,"_62":63,"_47":86,"_17":44,"_42":87,"_40":-5,"_68":69,"_51":-5,"_70":88,"_18":89},{"_33":73,"_13":74,"_37":75,"_45":-5,"_35":36,"_49":76,"_62":63,"_47":77,"_17":78,"_42":24,"_40":79,"_68":69,"_51":-5,"_70":80,"_18":81},{"_33":58,"_13":59,"_37":60,"_45":-5,"_35":36,"_49":61,"_62":63,"_47":64,"_17":65,"_42":66,"_40":67,"_68":69,"_51":-5,"_70":71,"_18":72},"d8b63498-2865-48e5-ace6-e652da180caa","main.ts","27082d74-a230-11f1-8efc-1607ee4eb77e",59,"latest",true,["D",1787919192430],2,"http","// Discord interaction HTTP endpoint.\n// 1. Verifies every request with the Ed25519 signature (lib/verify.ts).\n// 2. Answers PING so the bot shows Online.\n// 3. Routes slash commands, buttons, and modals to the system modules.\n\nimport { verifyInteractionSignature, isFresh } from \"./lib/verify.ts\";\nimport { UI } from \"./lib/embeds.ts\";\nimport { handleCommand, registerCommands } from \"./lib/commands.ts\";\nimport { initSchema } from \"./lib/db.ts\";\n\n// Idempotent schema on deploy.\nawait initSchema();\n// Fire-and-forget command registration. NEVER await this on a cold start —\n// it's a network call that can push the first interaction past Discord's 3s\n// window (and caused \"application didn't respond\"). Blocks handled inside.\nregisterCommands().catch((e) => console.error(\"command registration failed:\", e));\n\nexport default async function handler(req: Request): Promise {\n if (req.method !== \"POST\") return new Response(\"Method not allowed\", { status: 405 });\n\n const signature = req.headers.get(\"x-signature-ed25519\") ?? \"\";\n const timestamp = req.headers.get(\"x-signature-timestamp\") ?? \"\";\n const rawBody = new Uint8Array(await req.arrayBuffer());\n\n const ok = await verifyInteractionSignature(signature, timestamp, rawBody);\n if (!ok || !isFresh(timestamp)) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const interaction = JSON.parse(new TextDecoder().decode(rawBody));\n\n try {\n switch (interaction.type) {\n case 1: // PING\n return json({ type: 1 });\n\n case 2: // slash command\n return json(await handleCommand(interaction));\n\n case 3: // message component (button / select)\n return json(await handleComponent(interaction));\n\n case 5: // modal submit\n return json(await handleModal(interaction));\n\n default:\n return json({ type: 4, data: { content: \"Unsupported interaction.\", flags: 64 } });\n }\n } catch (err) {\n console.error(\"interaction error:\", err);\n return json({\n type: 4,\n data: { embeds: [UI.error({ title: \"Something went wrong\", description: \"Please try again.\" })], flags: 64 },\n });\n }\n}\n\n// Buttons / select menus land here. Each system registers its own custom_id.\nimport { handleComponent, handleModal } from \"./lib/components.ts\";\n\nfunction json(body: unknown): Response {\n return new Response(JSON.stringify(body), {\n headers: { \"content-type\": \"application/json\" },\n });\n}\n","deleted",false,"children",[],[59],"67e5b9ea-3700-4b9f-8bfa-89317aa5efb1","README.md","2d1a0520-a230-11f1-8d98-1607ee4eb77e",40,["D",1787847514510],3,"# Discord Shop & Community Bot\n\nModular, production-ready Discord bot for a shop / marketplace / community. Built in phases.\n\n## Status — Phase 2 (Shop + Orders + Customers) ✅\n\n- [x] Ed25519 interaction signature verification (Web Crypto, no secrets in code)\n- [x] PING handling, slash-command registry + dispatcher, unified premium embeds\n- [x] **Shop** — `/shop browse`, `/shop view`, `/shop buy`, `/shop product-add`\n- [x] **Orders** — `/order view` (receipt), `/order history`, `/order update`, statuses\n- [x] **Customers** — auto-profiles on first order, `/customer view|history|note`\n- [x] **Persistence** — SQLite (`std/sqlite`): customers, products, orders\n- [x] **Integration** — buying updates customer stats/spending/last-purchase + order notifications\n- [x] Security: server-side permission checks, ephemeral responses, parameterized SQL\n- [ ] Tickets, Giveaways, Moderation, Promotions, etc. (next phases)\n\n## Architecture\n\n```\nmain.ts HTTP endpoint — verify, PING, route commands/components/modals\nlib/verify.ts Ed25519 signature verification + freshness check\nlib/commands.ts slash-command registry + permission helper + dispatcher\nlib/components.ts button / select / modal routing (custom_id tags)\nlib/embeds.ts one shared premium embed/UI builder\nlib/config.ts persistent config (std/blob)\nlib/db.ts SQLite schema + repositories (customers/products/orders)\nlib/shop.ts product management + browsing\nlib/orders.ts buy flow, receipts, order updates\nlib/customers.ts customer profiles & history\n```\n\n## Commands\n\n| Command | Access | Purpose |\n|---|---|---|\n| `/ping` | all | health check |\n| `/setup` | all | run setup + config summary |\n| `/panel` | staff/owner | control panel |\n| `/shop browse` | all | catalogue |\n| `/shop view ` | all | product detail |\n| `/shop buy [qty]` | all | place an order |\n| `/shop product-add …` | staff | add a product |\n| `/order view ` | owner | receipt |\n| `/order history [customer]` | all | order history |\n| `/order update ` | staff | change order status |\n| `/customer view [customer]` | all | customer profile |\n| `/customer history ` | staff | full history |\n| `/customer note ` | staff | staff note |\n| `/moderation warn ` | staff | issue a warning (case) |\n| `/moderation ban ` | staff | ban + case |\n| `/moderation kick ` | staff | kick + case |\n| `/moderation timeout [min]` | staff | timeout + case |\n| `/moderation cases [user]` | staff | moderation case log |\n| `/ticket new [category] [subject]` | all | open a ticket |\n| `/ticket close [id]` | all | close your ticket |\n| `/giveaway create [min] [winners]` | staff | start a giveaway |\n| `/giveaway enter ` | all | enter a giveaway |\n| `/giveaway end/reroll ` | staff | end/reroll a giveaway |\n| `/suggestion submit ` | all | submit a suggestion |\n| `/suggestion vote [up/down]` | all | vote on a suggestion |\n| `/poll create ` | all | create a poll |\n| `/poll vote ` | all | vote on a poll |\n| `/review add [rating] [text]` | all | review a completed order |\n| `/promotion create/status …` | staff | promotions |\n| `/autorole add/remove/list/enable/disable/test/settings` | staff | autorole system |\n\n> **Autorole note:** applying roles on raw member-join needs a persistent Discord gateway connection, which Val Town's serverless interaction endpoints don't provide. `/autorole test` applies + validates on demand; `applyAutoroles(guildId, userId)` in `lib/autorole.ts` is the hook a gateway worker would call on join.\n\n## Next phases (not yet built)\n\nTickets (+ transcripts + ratings) · Giveaways · Welcome/Leave · Automod/Anti-raid/Anti-nuke · Applications · Reports · Reviews · Trading/Middleman · Promotions · Roles/VIP · Suggestions/Polls · Custom commands · Scheduled announcements · Logging · Analytics · Owner tools · Blacklist · Backup/Restore · Workflow engine · Web dashboard\n\n## Setup\n\n1. **Env vars** on the val:\n - `DISCORD_PUBLIC_KEY`, `DISCORD_BOT_TOKEN`, `DISCORD_APP_ID`, `DISCORD_OWNER_ID`\n2. **Interactions Endpoint URL** in the dev portal → [Try the app](url:main.ts)\n3. **Invite the bot** with Administrator perms (slash commands auto-register on deploy).\n\n> 🔴 Rotate your bot token — it was exposed in chat earlier. Secrets live only in env vars.\n",[],[74],"b3388750-9da4-45b6-8533-4600fecdf995","systems","527e0ba1-8269-4682-b8c3-d1bcafd10f8b",31,["D",1787847158093],"directory",[90,91,92,93],[83],{"_33":118,"_13":119,"_37":120,"_45":84,"_35":36,"_49":121,"_62":63,"_47":122,"_17":44,"_42":43,"_40":123,"_68":69,"_51":-5,"_70":124,"_18":125},{"_33":110,"_13":111,"_37":112,"_45":84,"_35":36,"_49":113,"_62":63,"_47":114,"_17":44,"_42":43,"_40":115,"_68":69,"_51":-5,"_70":116,"_18":117},{"_33":102,"_13":103,"_37":104,"_45":84,"_35":36,"_49":105,"_62":63,"_47":106,"_17":44,"_42":43,"_40":107,"_68":69,"_51":-5,"_70":108,"_18":109},{"_33":94,"_13":95,"_37":96,"_45":84,"_35":36,"_49":85,"_62":63,"_47":97,"_17":44,"_42":98,"_40":99,"_68":69,"_51":-5,"_70":100,"_18":101},"db51b9a3-ac11-4b7e-bf68-00eb06e6329c","scheduler.ts","1f38afc2-a232-11f1-8072-1607ee4eb77e",["D",1787847158093],"interval","// Cron scheduler: runs every minute.\n// Auto-ends giveaways that have passed their end time and expires promotions.\n// Giveaways keep working across restarts because state is in SQLite.\n\nimport { sweepExpired } from \"../lib/giveaways.ts\";\nimport { sweepExpiredPromotions } from \"../lib/community2.ts\";\n\nexport default async function (): Promise {\n try {\n const giveaways = await sweepExpired();\n const promos = await sweepExpiredPromotions();\n if (giveaways || promos) {\n console.log(`scheduler: ended ${giveaways} giveaways, expired ${promos} promotions`);\n }\n } catch (err) {\n console.error(\"scheduler error:\", err);\n }\n}\n",[],[83,95],"a0715fdb-621d-48ec-91ac-b64a3902f92d","debug-status.ts","b0e7e1ee-a233-11f1-940a-1607ee4eb77e",41,["D",1787847832011],"// One-off diagnostic: verifies the bot token against the Discord API\n// and lists the guilds the bot is currently in.\n\nconst token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n\nasync function check(): Promise {\n if (!token) {\n console.log(\"❌ DISCORD_BOT_TOKEN is not set.\");\n return;\n }\n\n const me = await fetch(\"https://discord.com/api/v10/users/@me\", {\n headers: { authorization: `Bot ${token}` },\n });\n if (!me.ok) {\n console.log(`❌ Token rejected: HTTP ${me.status} — ${await me.text()}`);\n console.log(\" The token is invalid or revoked. Reset it here:\");\n console.log(\" https://discord.com/developers/applications/1542562327444856862/bot\");\n return;\n }\n const bot = await me.json();\n console.log(`✅ Token valid. Bot: ${bot.username}#${bot.discriminator ?? \"\"} (id: ${bot.id})`);\n\n const guilds = await fetch(\"https://discord.com/api/v10/users/@me/guilds\", {\n headers: { authorization: `Bot ${token}` },\n });\n if (!guilds.ok) {\n console.log(`⚠️ Could not fetch guilds: HTTP ${guilds.status}`);\n return;\n }\n const list = (await guilds.json()) as Array<{ id: string; name: string; owner: boolean }>;\n if (!list.length) {\n console.log(\"ℹ️ The bot is NOT in any servers yet. Use this invite link:\");\n console.log(\" https://discord.com/api/oauth2/authorize?client_id=1542562327444856862&permissions=8&scope=bot%20applications.commands\");\n return;\n }\n console.log(`✅ The bot is in ${list.length} server(s):`);\n for (const g of list) console.log(` - ${g.name} (${g.id})${g.owner ? \" [owner]\" : \"\"}`);\n}\n\nawait check();\n",[],[83,103],"0a7228a2-5a82-472b-b386-71f6c893e42e","debug-invite.ts","411508c8-a234-11f1-a935-1607ee4eb77e",42,["D",1787848073894],"// Verify the bot's identity + build the exact invite link.\n\nconst token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n\nasync function run(): Promise {\n const me = await fetch(\"https://discord.com/api/v10/users/@me\", {\n headers: { authorization: `Bot ${token}` },\n });\n if (!me.ok) return console.log(\"token invalid: \" + me.status);\n const bot = await me.json();\n const appId = bot.id as string;\n\n console.log(\"Bot:\", bot.username, \"(id\", appId + \")\");\n\n // application/auth verify to check the invite scope works\n const app = await fetch(`https://discord.com/api/v10/oauth2/applications/${appId}/bot`, {\n headers: { authorization: `Bot ${token}` },\n });\n if (!app.ok) console.log(\"app check:\", app.status, await app.text());\n else {\n const j = await app.json();\n console.log(\"App id:\", j.id, \"| public bot:\", j.bot_public, \"| requires oauth code grant:\", j.bot_require_code_grant);\n }\n\n console.log(\"\\nUse this invite link:\");\n console.log(`https://discord.com/api/oauth2/authorize?client_id=${appId}&permissions=8&scope=bot%20applications.commands`);\n}\n\nawait run();\n",[],[83,111],"b31a0855-6097-4b0c-9fdd-9d4cfc03cdb9","debug-commands.ts","86aacf58-a234-11f1-852a-1607ee4eb77e",43,["D",1787848190639],"// List the slash commands currently registered for the application.\n\nconst token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\nconst appId = Deno.env.get(\"DISCORD_APP_ID\");\n\nasync function run(): Promise {\n const res = await fetch(`https://discord.com/api/v10/applications/${appId}/commands`, {\n headers: { authorization: `Bot ${token}` },\n });\n if (!res.ok) return console.log(\"failed:\", res.status, await res.text());\n const cmds = (await res.json()) as Array<{ name: string; description: string }>;\n console.log(`Registered ${cmds.length} global command(s):`);\n for (const c of cmds) console.log(` /${c.name} — ${c.description}`);\n}\n\nawait run();\n",[],[83,119],"5edd3a58-a298-41fd-aaac-fdf0e377c61a",1,["D",1787846299103],[131,132,133,134,135,136,137,138,139,140,141,142,143,144,145],[53],{"_33":254,"_13":255,"_37":256,"_45":46,"_35":36,"_49":257,"_62":63,"_47":258,"_17":44,"_42":43,"_40":259,"_68":69,"_51":-5,"_70":260,"_18":261},{"_33":245,"_13":246,"_37":247,"_45":46,"_35":36,"_49":248,"_62":63,"_47":249,"_17":250,"_42":43,"_40":251,"_68":69,"_51":-5,"_70":252,"_18":253},{"_33":236,"_13":237,"_37":238,"_45":46,"_35":36,"_49":239,"_62":63,"_47":240,"_17":241,"_42":43,"_40":242,"_68":69,"_51":-5,"_70":243,"_18":244},{"_33":228,"_13":229,"_37":230,"_45":46,"_35":36,"_49":231,"_62":63,"_47":232,"_17":44,"_42":43,"_40":233,"_68":69,"_51":-5,"_70":234,"_18":235},{"_33":219,"_13":220,"_37":221,"_45":46,"_35":36,"_49":222,"_62":63,"_47":223,"_17":224,"_42":43,"_40":225,"_68":69,"_51":-5,"_70":226,"_18":227},{"_33":211,"_13":212,"_37":213,"_45":46,"_35":36,"_49":214,"_62":63,"_47":215,"_17":127,"_42":43,"_40":216,"_68":69,"_51":-5,"_70":217,"_18":218},{"_33":203,"_13":204,"_37":205,"_45":46,"_35":36,"_49":206,"_62":63,"_47":207,"_17":44,"_42":43,"_40":208,"_68":69,"_51":-5,"_70":209,"_18":210},{"_33":195,"_13":196,"_37":197,"_45":46,"_35":36,"_49":198,"_62":63,"_47":199,"_17":65,"_42":43,"_40":200,"_68":69,"_51":-5,"_70":201,"_18":202},{"_33":188,"_13":189,"_37":190,"_45":46,"_35":36,"_49":65,"_62":63,"_47":191,"_17":44,"_42":43,"_40":192,"_68":69,"_51":-5,"_70":193,"_18":194},{"_33":180,"_13":181,"_37":182,"_45":46,"_35":36,"_49":183,"_62":63,"_47":184,"_17":44,"_42":43,"_40":185,"_68":69,"_51":-5,"_70":186,"_18":187},{"_33":34,"_13":39,"_37":38,"_45":46,"_35":36,"_49":50,"_62":63,"_47":177,"_17":44,"_42":43,"_40":41,"_68":69,"_51":-5,"_70":178,"_18":179},{"_33":169,"_13":170,"_37":171,"_45":46,"_35":36,"_49":172,"_62":63,"_47":173,"_17":44,"_42":43,"_40":174,"_68":69,"_51":-5,"_70":175,"_18":176},{"_33":161,"_13":162,"_37":163,"_45":46,"_35":36,"_49":164,"_62":63,"_47":165,"_17":44,"_42":43,"_40":166,"_68":69,"_51":-5,"_70":167,"_18":168},{"_33":153,"_13":154,"_37":155,"_45":46,"_35":36,"_49":156,"_62":63,"_47":157,"_17":65,"_42":43,"_40":158,"_68":69,"_51":-5,"_70":159,"_18":160},{"_33":146,"_13":147,"_37":148,"_45":46,"_35":36,"_49":127,"_62":63,"_47":149,"_17":44,"_42":43,"_40":150,"_68":69,"_51":-5,"_70":151,"_18":152},"e67e4209-d0fb-4ead-96f6-98b8a1a4be5a","verify.ts","1f3a06bc-a230-11f1-bdda-1607ee4eb77e",["D",1787846299103],"// Discord interaction signature verification (Ed25519), using the Web Crypto API.\n// Verifies the X-Signature-Ed25519 header over timestamp + raw request body\n// using the application's public key. No secret material lives in code.\n\nconst encoder = new TextEncoder();\n\nfunction hexToBytes(hex: string): Uint8Array {\n const out = new Uint8Array(hex.length / 2);\n for (let i = 0; i < out.length; i++) {\n out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n }\n return out;\n}\n\nexport async function verifyInteractionSignature(\n signature: string,\n timestamp: string,\n rawBody: Uint8Array,\n): Promise {\n const publicKey = Deno.env.get(\"DISCORD_PUBLIC_KEY\");\n if (!publicKey) return false;\n if (!signature || !timestamp) return false;\n\n try {\n const key = await crypto.subtle.importKey(\n \"raw\",\n hexToBytes(publicKey),\n { name: \"Ed25519\" },\n false,\n [\"verify\"],\n );\n const ts = encoder.encode(timestamp);\n const message = new Uint8Array(ts.length + rawBody.length);\n message.set(ts, 0);\n message.set(rawBody, ts.length);\n return await crypto.subtle.verify(\"Ed25519\", key, hexToBytes(signature), message);\n } catch {\n return false;\n }\n}\n\n// Small guard against clock skew so old replayed requests are rejected.\nexport function isFresh(timestampHeader: string, maxAgeMs = 300_000): boolean {\n const t = Number(timestampHeader);\n if (!Number.isFinite(t)) return false;\n return Math.abs(Date.now() / 1000 - t) < maxAgeMs / 1000;\n}\n",[],[53,147],"6a7e145e-7caa-4a18-9654-449d63722566","tickets.ts","652b0c5e-a2d8-11f1-940d-1607ee4eb77e",61,["D",1787919518053],"// Real ticket system: creates an ACTUAL private Discord text channel per ticket.\n//\n// Flow: user picks category in dropdown → modal asks for details → the bot\n// POSTs /guilds/{g}/channels with permission_overwrites (private), then sends\n// the opening message + control buttons INSIDE that channel, then replies to\n// the USER with an EPHEMERAL confirmation. Nothing public is posted.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\nimport { getConfig, saveConfig } from \"./config.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst sqliteMod = () => import(\"https://esm.town/v/std/sqlite/main.ts\");\nconst token = () => Deno.env.get(\"DISCORD_BOT_TOKEN\");\n\n// permission bitfields\nconst VIEW_CHANNEL = 1024; // 1<<10\nconst MANAGE_CHANNELS = 16; // 1<<4\nconst SEND_MESSAGES = 2048; // 1<<11\nconst MANAGE_MESSAGES = 8192; // 1<<13\nconst READ_HISTORY = 65536; // 1<<16\nconst MEMBER_PERMS = VIEW_CHANNEL | SEND_MESSAGES | READ_HISTORY;\n\n// The ticket category (dropdown) — currently only General Support is offered.\nexport const TICKET_OPTIONS = [\n { value: \"general_support\", label: \"General Support\", animated: true, name: \"Support\", id: \"1542859626897473666\",\n description: \"General questions, bugs, or you're not sure where to go.\" },\n];\n\nfunction emojiMention(o: { animated?: boolean; name: string; id?: string }): string {\n return o.id ? `${o.animated ? \"` : o.name;\n}\n\nfunction sanitizeChannelName(username: string): string {\n const clean = username.toLowerCase().replace(/[^a-z0-9 ]+/g, \"\").trim().replace(/\\s+/g, \"-\");\n return (clean || \"ticket\").slice(0, 80);\n}\n\nasync function loadTicketConfig() {\n const cfg = await getConfig();\n const categoryId = (cfg.settings[\"ticketCategory\"] as string) || undefined;\n const staffRole = (cfg.settings[\"ticketStaffRole\"] as string) || undefined;\n const byType: Record = {};\n for (const o of TICKET_OPTIONS) {\n const r = cfg.settings[`ticketRole:${o.value}`] as string | undefined;\n if (r) byType[o.value] = r;\n }\n return { cfg, categoryId, staffRole, byType };\n}\n\n// ---------------- CREATE A TICKET (real channel) ----------------\nexport async function createTicket(guildId: string, userId: string, username: string, category: string, subject: string): Promise<{\n ok: boolean; error?: string; ticketId?: string; channelName?: string; channelId?: string;\n}> {\n const tk = token();\n if (!tk) return { ok: false, error: \"Bot token is not configured.\" };\n const { cfg, categoryId, staffRole, byType } = await loadTicketConfig();\n\n // prevent duplicate open tickets of the same type\n const { sqlite } = await sqliteMod();\n const dup = await sqlite.execute({\n sql: \"SELECT * FROM tickets WHERE userId = ? AND category = ? AND status = 'open'\",\n args: [userId, category],\n });\n if (dup.rows.length) {\n return { ok: false, error: `You already have an open \"${category.replace(/_/g, \" \")}\" ticket (${(dup.rows[0] as any).ticketId}). Please wait for it to be handled.` };\n }\n\n const channelName = \"ticket-\" + sanitizeChannelName(username);\n const roleToGrant = byType[category] || staffRole;\n\n // permission overwrites: deny @everyone, allow member + staff role\n const overwrites = [\n { id: guildId, type: 0, allow: \"0\", deny: String(VIEW_CHANNEL) }, // @everyone cannot view\n { id: userId, type: 1, allow: String(MEMBER_PERMS), deny: \"0\" }, // the user\n ];\n if (roleToGrant) overwrites.push({ id: roleToGrant, type: 0, allow: String(MEMBER_PERMS), deny: \"0\" });\n\n const body: Record = { name: channelName, type: 0, permission_overwrites: overwrites };\n if (categoryId) body.parent_id = categoryId;\n\n let channel;\n try {\n const res = await fetch(`${DISCORD_API}/guilds/${guildId}/channels`, {\n method: \"POST\",\n headers: { authorization: `Bot ${tk}`, \"content-type\": \"application/json\" },\n body: JSON.stringify(body),\n });\n if (!res.ok) {\n console.error(\"ticket channel create failed:\", res.status, await res.text());\n return { ok: false, error: \"Could not create the ticket channel. This is usually a missing `Manage Channels` permission or an exceeded server channel limit. Please contact staff.\" };\n }\n channel = await res.json();\n } catch (err) {\n console.error(\"ticket channel unexpected error:\", err);\n return { ok: false, error: \"An unexpected error occurred while creating your ticket. Please contact staff.\" };\n }\n\n // persist the ticket AFTER the channel really exists (never fake it)\n const ticketId = \"T-\" + generateCode(6);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO tickets (ticketId, userId, username, category, subject, channelId, staffId, status, priority, openedAt)\n VALUES (?, ?, ?, ?, ?, ?, NULL, 'open', 'normal', ?)`,\n args: [ticketId, userId, username, category, subject, channel.id, now],\n });\n await sqlite.execute({ sql: \"UPDATE customers SET ticketsOpened = ticketsOpened + 1 WHERE userId = ?\", args: [userId] });\n\n // opening message in the NEW private channel\n await sendOpeningMessage(channel.id, channelName, ticketId, category, subject, userId, username, roleToGrant);\n\n return { ok: true, ticketId, channelName, channelId: channel.id };\n}\n\nasync function sendOpeningMessage(channelId: string, channelName: string, ticketId: string, category: string, subject: string, userId: string, username: string, staffRole?: string): Promise {\n const tk = token();\n if (!tk) return;\n const label = TICKET_OPTIONS.find((o) => o.value === category)?.label || category.replace(/_/g, \" \");\n const buttons = (style: number, row: Array<{ label: string; custom: string; danger?: boolean }>) => ({\n type: 1,\n components: row.map((b) => ({ type: 2, style: b.danger ? 4 : style, label: b.label, custom_id: b.custom })),\n });\n const body = {\n content: `<@${userId}> — thanks for opening a ticket!`,\n embeds: [UI.info({\n title: `🎫 ${label}`,\n description: subject || \"No details provided.\",\n fields: [\n { name: \"Ticket\", value: `\\`${ticketId}\\``, inline: true },\n { name: \"Channel\", value: `#${channelName}`, inline: true },\n { name: \"Opened by\", value: `<@${userId}>`, inline: true },\n ],\n })],\n components: [\n buttons(3, [{ label: \"Claim\", custom: `tick:claim:${ticketId}` }, { label: \"Close\", custom: `tick:close:${ticketId}`, danger: true }, { label: \"Add Member\", custom: `tick:add:${ticketId}` }]),\n buttons(2, [{ label: \"Rename\", custom: `tick:rename:${ticketId}` }, { label: \"Lock\", custom: `tick:lock:${ticketId}` }, { label: \"Unlock\", custom: `tick:unlock:${ticketId}` }]),\n ],\n };\n const res = await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\", headers: { authorization: `Bot ${tk}`, \"content-type\": \"application/json\" }, body: JSON.stringify(body),\n });\n if (!res.ok) console.error(\"ticket opening message failed:\", res.status, await res.text());\n}\n\n// ---------------- /ticket command ----------------\nexport async function ticket(ctx: CmdCtx, sub: string): Promise> {\n const { cfg, categoryId, staffRole } = await loadTicketConfig();\n switch (sub) {\n case \"panel\": {\n const fields = TICKET_OPTIONS.map((o) => ({ name: `${emojiMention(o)} ${o.label}`, value: o.description, inline: false }));\n return {\n type: 4,\n data: {\n flags: 0,\n embeds: [UI.info({\n title: \"🎫 Wavez Tickets\",\n description: \"Select an option below to open a ticket. Please choose the category that best matches your request so our team can assist you as quickly as possible.\",\n fields,\n })],\n components: [\n { type: 1, components: [{ type: 3, custom_id: \"ticket:category\", placeholder: \"Select a category…\", min_values: 1, max_values: 1, options: TICKET_OPTIONS.map((o) => ({ value: o.value, label: o.label, description: o.description, emoji: { name: o.name, id: o.id } })) }] },\n ],\n },\n };\n }\n case \"new\": {\n const res = await createTicket(ctx.guildId, ctx.userId, ctx.username, String(ctx.options[\"category\"] ?? \"general_support\"), String(ctx.options[\"subject\"] ?? \"No subject\"));\n return res.ok ? reply(`Your ticket has been created: #${res.channelName}`) : replyEmbed(UI.error({ title: \"Could not open ticket\", description: res.error || \"Error.\" }));\n }\n case \"close\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only staff can close tickets.\");\n const id = String(ctx.options[\"ticket\"] ?? \"\").toUpperCase();\n const { sqlite } = await sqliteMod();\n const t = (await sqlite.execute({ sql: \"SELECT * FROM tickets WHERE ticketId = ?\", args: [id] })).rows[0] as any;\n if (!t) return reply(\"No such ticket.\");\n await sqlite.execute({ sql: \"UPDATE tickets SET status='closed', closedBy=?, closedAt=? WHERE ticketId=?\", args: [ctx.userId, new Date().toISOString(), id] });\n return reply(`Ticket **${id}** closed.`);\n }\n case \"config\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only staff can configure tickets.\");\n const what = String(ctx.options[\"key\"] ?? \"\");\n const value = String(ctx.options[\"value\"] ?? \"\");\n if (what === \"category\") cfg.settings[\"ticketCategory\"] = value || (undefined as any);\n else if (what === \"role\") cfg.settings[\"ticketStaffRole\"] = value || (undefined as any);\n else return reply(\"Set `category` or `role`.\");\n await saveConfig(cfg);\n return reply(`✅ Ticket config \\`${what}\\` set.`);\n }\n case \"settings\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only staff can view settings.\");\n return replyEmbed(UI.info({ title: \"🎫 Ticket Settings\", fields: [\n { name: \"Category\", value: categoryId ? `<#${categoryId}>` : \"Not set (channels created without a category)\", inline: false },\n { name: \"Staff Role\", value: staffRole ? `<@&${staffRole}>` : \"Not set (members + bot only)\", inline: false },\n ] }));\n }\n default:\n return reply(\"Unknown ticket command.\");\n }\n}\n\n// ---------------- CONTROL BUTTONS (Claim / Close / Add / Rename / Lock / Unlock) ----------------\nexport async function handleTicketAction(customId: string, ctx: { userId: string; guildId: string }): Promise> {\n const [tag, action, ticketId] = customId.split(\":\");\n if (tag !== \"tick\" || !action || !ticketId) return reply(\"Invalid ticket action.\");\n const tk = token();\n if (!tk) return reply(\"Bot token not configured.\");\n\n const { sqlite } = await sqliteMod();\n const t = (await sqlite.execute({ sql: \"SELECT * FROM tickets WHERE ticketId = ?\", args: [ticketId] })).rows[0] as any;\n if (!t || !t.channelId) return reply(\"Ticket channel not found.\");\n\n switch (action) {\n case \"claim\": {\n await sqlite.execute({ sql: \"UPDATE tickets SET staffId = ?, status='claimed' WHERE ticketId=?\", args: [ctx.userId, ticketId] });\n return reply(`✅ You claimed **${ticketId}**.`);\n }\n case \"close\": {\n await sqlite.execute({ sql: \"UPDATE tickets SET status='closed', closedBy=?, closedAt=? WHERE ticketId=?\", args: [ctx.userId, new Date().toISOString(), ticketId] });\n return reply(`✅ **${ticketId}** closed.`);\n }\n case \"lock\":\n case \"unlock\": {\n return setEveryoneLock(t.guild? undefined : t.channelId, ctx.guildId, action === \"lock\");\n }\n case \"add\":\n return { type: 9, data: { custom_id: `tick:add:${ticketId}`, title: \"Add a Member\", components: [{ type: 1, components: [{ type: 4, custom_id: \"member\", label: \"User ID or mention\", style: 1, required: true }] }] } };\n case \"rename\":\n return { type: 9, data: { custom_id: `tick:rename:${ticketId}`, title: \"Rename Ticket\", components: [{ type: 1, components: [{ type: 4, custom_id: \"name\", label: \"New channel name\", style: 1, required: true }] }] } };\n default:\n return reply(\"Unknown ticket action.\");\n }\n}\n\nasync function setEveryoneLock(channelId: string, guildId: string, lock: boolean): Promise> {\n const tk = token();\n if (!tk) return reply(\"Bot not configured.\");\n // fetch channel to preserve existing @everyone deny\n const get = await fetch(`${DISCORD_API}/channels/${channelId}`, { headers: { authorization: `Bot ${tk}` } });\n const ch = await get.json();\n const overwrites = (ch.permission_overwrites ?? []) as Array<{ id: string; type: number; allow: string; deny: string }>;\n const ev = overwrites.find((o) => o.id === guildId) || { id: guildId, type: 0, allow: \"0\", deny: \"0\" };\n let deny = Number(ev.deny || 0);\n const allow = Number(ev.allow || 0);\n if (lock) deny |= SEND_MESSAGES;\n else deny &= ~SEND_MESSAGES;\n const put = await fetch(`${DISCORD_API}/channels/${channelId}/permissions/${guildId}`, {\n method: \"PUT\", headers: { authorization: `Bot ${tk}`, \"content-type\": \"application/json\" },\n body: JSON.stringify({ type: 0, deny: String(deny), allow: String(allow) }),\n });\n if (!put.ok) { console.error(\"lock/unlock failed:\", put.status, await put.text()); return reply(\"Failed to update lock state.\"); }\n return reply(`Channel ${lock ? \"🔒 locked\" : \"🔓 unlocked\"}.`);\n}\n\n// handle \"add member\" / \"rename\" modal submits\nexport async function handleTicketModal(customId: string, fields: Record, ctx: { guildId: string }): Promise> {\n const [tag, action, ticketId] = customId.split(\":\");\n const tk = token();\n if (!tk) return reply(\"Bot not configured.\");\n const { sqlite } = await sqliteMod();\n const t = (await sqlite.execute({ sql: \"SELECT * FROM tickets WHERE ticketId = ?\", args: [ticketId] })).rows[0] as any;\n if (!t) return reply(\"Ticket not found.\");\n\n if (action === \"add\") {\n const memberId = String(fields[\"member\"] ?? \"\").replace(/[<@!>]/g, \"\");\n const res = await fetch(`${DISCORD_API}/channels/${t.channelId}/permissions/${memberId}`, {\n method: \"PUT\", headers: { authorization: `Bot ${tk}`, \"content-type\": \"application/json\" },\n body: JSON.stringify({ type: 1, allow: String(MEMBER_PERMS), deny: \"0\" }),\n });\n if (!res.ok) return reply(\"I couldn't add that member (invalid user or no Manage Permissions).\");\n return reply(`<@${memberId}> has been added to the ticket.`);\n }\n if (action === \"rename\") {\n const name = sanitizeChannelName(String(fields[\"name\"] ?? \"\")).slice(0, 80);\n const res = await fetch(`${DISCORD_API}/channels/${t.channelId}`, {\n method: \"PATCH\", headers: { authorization: `Bot ${tk}`, \"content-type\": \"application/json\" }, body: JSON.stringify({ name }),\n });\n if (!res.ok) return reply(\"Could not rename the channel.\");\n return reply(`Channel renamed to #${name}.`);\n }\n return reply(\"Unknown ticket action.\");\n}\n",[],[53,154],"dde7f97b-f937-4e85-a025-fe9219cbe0c5","shop.ts","0f8cfa0c-a231-11f1-8ba1-1607ee4eb77e",10,["D",1787846702307],"// Shop system: product management + public browsing + purchase entry point.\n// Uses the shared embed builder and the SQLite product/order repos.\n// Purchase flow continues in lib/orders.ts (confirmation → order → receipt).\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport {\n createProduct,\n ensureCustomer,\n getProduct,\n listActiveProducts,\n listCategories,\n money,\n setProductStatus,\n} from \"./db.ts\";\n\nexport interface CmdCtx {\n guildId: string;\n userId: string;\n username: string;\n options: Record;\n isStaff: boolean;\n isOwner: boolean;\n}\n\n// ---- command group: /shop ----\nexport async function shop(ctx: CmdCtx, sub: string): Promise> {\n switch (sub) {\n case \"browse\":\n return shopBrowse(ctx);\n case \"view\":\n return shopView(ctx.options[\"product\"] as string);\n case \"product-add\":\n return productAdd(ctx, ctx.options as Record);\n case \"product-edit\":\n return shopView(ctx.options[\"product\"] as string);\n default:\n return shopBrowse(ctx);\n }\n}\n\nasync function shopBrowse(ctx: CmdCtx): Promise> {\n const products = await listActiveProducts();\n if (products.length === 0) {\n return replyEmbed(\n UI.info({ title: \"🛍️ Shop\", description: \"No products available yet. Staff can add them with `/shop product-add`.\" }),\n );\n }\n const fields: EmbedField[] = products.map((p) => {\n const stock = p.status === \"out_of_stock\" ? \"Out of stock\" : `${p.stock} in stock`;\n return {\n name: `${p.name} — ${money(p.price, p.currency)}`,\n value: `${p.description}\\n\\`${p.productId}\\` · ${p.category} · ${stock}`,\n inline: false,\n };\n });\n return replyEmbed(\n UI.info({\n title: \"🛍️ Shop\",\n description: \"Browse our catalogue. Buy with `/shop buy`.\",\n fields,\n }),\n );\n}\n\nasync function shopView(productId: string): Promise> {\n const p = await getProduct(productId);\n if (!p) return reply(\"That product doesn't exist.\");\n const available = p.status === \"active\" && p.stock > 0;\n return replyEmbed(\n UI.info({\n title: p.name,\n description: p.description,\n thumbnail: p.image ? { url: p.image } : undefined,\n fields: [\n { name: \"ID\", value: `\\`${p.productId}\\``, inline: true },\n { name: \"Category\", value: p.category, inline: true },\n { name: \"Price\", value: money(p.price, p.currency), inline: true },\n { name: \"Stock\", value: available ? `${p.stock}` : \"Unavailable\", inline: true },\n { name: \"Delivery\", value: p.deliveryType, inline: true },\n { name: \"Status\", value: p.status.replace(\"_\", \" \"), inline: true },\n ],\n footer: {\n text: available ? \"Ready to Buy · /shop buy\" : \"Currently unavailable\",\n },\n }),\n );\n}\n\nasync function productAdd(ctx: CmdCtx, o: Record): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to manage products.\");\n const name = String(o[\"name\"] ?? \"\").trim();\n const price = Number(o[\"price\"]);\n const stock = Math.max(0, Number(o[\"stock\"] ?? 1));\n const category = String(o[\"category\"] ?? \"General\");\n const delivery = String(o[\"delivery\"] ?? \"Manual\");\n const description = String(o[\"description\"] ?? \"\");\n const currency = \"USD\";\n if (!name || !Number.isFinite(price) || price <= 0) {\n return reply(\"Please provide a `name` and a valid `price`.\");\n }\n const p = await createProduct({\n name, description, category, price, currency, stock,\n image: null, deliveryType: delivery,\n });\n return replyEmbed(\n UI.success({\n title: \"Product Created\",\n description: `${p.name} is now **${money(p.price, p.currency)}** · Category: ${p.category}`,\n fields: [\n { name: \"ID\", value: `\\`${p.productId}\\``, inline: true },\n { name: \"Stock\", value: `${p.stock}`, inline: true },\n { name: \"Delivery\", value: p.deliveryType, inline: true },\n ],\n }),\n );\n}\n\nexport async function setStock(productId: string, stock: number): Promise {\n const p = await getProduct(productId);\n if (!p) return;\n const status = stock > 0 ? \"active\" : \"out_of_stock\";\n const now = new Date().toISOString();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: \"UPDATE products SET stock = ?, status = ?, updatedAt = ? WHERE productId = ?\",\n args: [stock, status, now, productId],\n });\n}\n",[],[53,162],"01a30cf0-db71-477c-83c7-420ff034e276","orders.ts","20fbe168-a231-11f1-a3ba-1607ee4eb77e",11,["D",1787846731533],"// Order system: buy flow, order view/history, receipts.\n// When an order is placed it also updates the customer profile, spending,\n// and last-purchase — the start of the system integration chain.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport {\n createOrder,\n ensureCustomer,\n getCustomer,\n getOrder,\n getProduct,\n listOrdersByCustomer,\n money,\n} from \"./db.ts\";\nimport { setStock } from \"./shop.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// ----- /shop buy -----\nexport async function buy(ctx: CmdCtx): Promise> {\n const productId = (ctx.options[\"product\"] as string) ?? \"\";\n const qty = Math.max(1, Math.floor(Number(ctx.options[\"quantity\"] ?? 1)));\n const product = await getProduct(productId);\n if (!product) return reply(\"That product doesn't exist.\");\n if (product.status !== \"active\" || product.stock < qty) {\n return reply(\"That product is unavailable or out of stock.\");\n }\n\n const customer = await ensureCustomer(ctx.userId, ctx.username);\n if (customer.blacklisted) {\n return reply(\"You are restricted from using the shop. Contact staff for details.\");\n }\n\n // One atomic decrement is enough for the single-customer click path.\n await setStock(product.productId, product.stock - qty);\n const order = await createOrder(customer, product, qty, null);\n\n // Integrated bookkeeping: customer profile ← this order.\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `UPDATE customers SET\n totalOrders = totalOrders + 1,\n totalSpent = totalSpent + ?,\n lastPurchase = ?,\n lastActivity = ?\n WHERE userId = ?`,\n args: [order.finalAmount, now, now, customer.userId],\n });\n await queueChannelMessage(ctx.guildId, order.orderId); // staff fulfillment channel notice\n\n return { type: 4, data: { embeds: [receiptEmbed(order)], flags: 64, content: \"✅ Order placed!\" } };\n}\n\n// ----- /order view -----\nexport async function viewOrder(ctx: CmdCtx): Promise> {\n const orderId = (ctx.options[\"order\"] as string) ?? \"\";\n const order = await getOrder(orderId.toUpperCase());\n if (!order) return reply(\"That order doesn't exist.\");\n // customers see only their own; staff/owner see any\n if (order.customerId !== ctx.userId && !ctx.isStaff && !ctx.isOwner) {\n return reply(\"You can only view your own orders.\");\n }\n return replyEmbed(receiptEmbed(order));\n}\n\n// ----- /order history -----\nexport async function orderHistory(ctx: CmdCtx): Promise> {\n const customerId = (ctx.options[\"customer\"] as string) ?? ctx.userId;\n const rows = await listOrdersByCustomer(customerId, 10);\n if (rows.length === 0) return reply(\"No orders found for this customer.\");\n const fields: EmbedField[] = rows.map((o) => ({\n name: `${o.orderId} · ${o.productName}`,\n value: `${o.quantity} × ${money(o.unitPrice, \"USD\")} = **${money(o.finalAmount, \"USD\")}** · ${o.orderStatus}`,\n inline: false,\n }));\n return replyEmbed(\n UI.info({ title: \"📜 Order History\", description: `Last ${rows.length} orders`, fields }),\n );\n}\n\n// ----- receipt (shared by /order view and purchase confirmation) -----\nimport type { OrderRow } from \"./db.ts\";\nexport function receiptEmbed(order: OrderRow) {\n const statusEmoji: Record = {\n pending: \"🕐\", payment_pending: \"💳\", paid: \"✅\", processing: \"⚙️\",\n completed: \"🏁\", cancelled: \"❌\", refunded: \"↩️\",\n };\n return UI.info({\n title: \"🧾 Receipt\",\n description: `**${order.orderId}**`,\n fields: [\n { name: \"Customer\", value: `${order.customerName}`, inline: true },\n { name: \"Product\", value: order.productName, inline: true },\n { name: \"Quantity\", value: `${order.quantity}`, inline: true },\n { name: \"Unit Price\", value: money(order.unitPrice, \"USD\"), inline: true },\n { name: \"Discount\", value: money(order.discount, \"USD\"), inline: true },\n { name: \"Total\", value: `**${money(order.finalAmount, \"USD\")}**`, inline: true },\n { name: \"Status\", value: `${statusEmoji[order.orderStatus] ?? \"🕐\"} ${order.orderStatus}`, inline: true },\n { name: \"Placed\", value: ``, inline: true },\n ],\n });\n}\n\n// ----- staff /order fulfill -----\nexport async function updateOrder(ctx: CmdCtx): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to update orders.\");\n const order = await getOrder(String(ctx.options[\"order\"] ?? \"\").toUpperCase());\n if (!order) return reply(\"That order doesn't exist.\");\n const status = String(ctx.options[\"status\"] ?? \"\");\n if (!status) return reply(\"Specify a status.\");\n const now = new Date().toISOString();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const completedAt = [\"completed\", \"cancelled\", \"refunded\"].includes(status) ? now : order.completedAt;\n await sqlite.execute({\n sql: \"UPDATE orders SET orderStatus = ?, completedAt = ?, staffId = ? WHERE orderId = ?\",\n args: [status, completedAt, ctx.userId, order.orderId],\n });\n if (status === \"completed\") {\n await sqlite.execute({\n sql: `UPDATE customers SET completedOrders = completedOrders + 1 WHERE userId = ?`,\n args: [order.customerId],\n });\n }\n return reply(`**${order.orderId}** → \\`${status}\\``);\n}\n\n// Best-effort staff notification for new orders (uses configured channel).\nasync function queueChannelMessage(guildId: string, orderId: string): Promise {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token || !guildId) return;\n try {\n // Harness reads guild channel config from project config (added in panel phase).\n const cfg = (await import(\"./config.ts\")).getConfig;\n const c = await cfg();\n const channelId = c.channels[\"orders\"];\n if (!channelId) return;\n await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify({ content: `🆕 New order \\`${orderId}\\` placed.` }),\n });\n } catch (e) {\n console.error(\"order notify failed:\", e);\n }\n}\n",[],[53,170],["D",1787846961822],[],[53,39],"448e6ff3-d42d-4350-8c4f-6641b483de94","giveaways.ts","1001fbe4-a232-11f1-8072-1607ee4eb77e",28,["D",1787847132571],"// Giveaway system. Persistent; auto-ends via the scheduler.\n// Entry, winners, reroll all verified server-side (no duplicate entries).\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nexport async function giveaway(ctx: CmdCtx, sub: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n switch (sub) {\n case \"create\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to create giveaways.\");\n const prize = String(ctx.options[\"prize\"] ?? \"\");\n const minutes = Math.max(1, Math.floor(Number(ctx.options[\"minutes\"] ?? 60)));\n const winners = Math.max(1, Math.floor(Number(ctx.options[\"winners\"] ?? 1)));\n if (!prize) return reply(\"Provide a prize.\");\n const giveawayId = \"G-\" + generateCode(6);\n const endTime = new Date(Date.now() + minutes * 60000).toISOString();\n await sqlite.execute({\n sql: `INSERT INTO giveaways (giveawayId, channelId, messageId, prize, hostId, requiredRole, winnerCount, ended, endTime, createdAt)\n VALUES (?, ?, '', ?, ?, ?, ?, 0, ?, ?)`,\n args: [giveawayId, ctx.guildId, prize, ctx.userId, null, winners, endTime, new Date().toISOString()],\n });\n return replyEmbed(UI.info({\n title: \"🎉 Giveaway Started\",\n description: `**${giveawayId}** · ${prize}`,\n fields: [\n { name: \"Winners\", value: `${winners}`, inline: true },\n { name: \"Ends\", value: ``, inline: true },\n { name: \"Host\", value: `<@${ctx.userId}>`, inline: true },\n ],\n }));\n }\n case \"enter\": {\n const id = String(ctx.options[\"giveaway\"] ?? \"\").toUpperCase();\n const row = (await sqlite.execute({ sql: \"SELECT * FROM giveaways WHERE giveawayId = ?\", args: [id] })).rows[0] as any;\n if (!row) return reply(\"No such giveaway.\");\n if (row.ended) return reply(\"That giveaway has ended.\");\n const parts = JSON.parse(row.participants as string || \"[]\");\n if (parts.includes(ctx.userId)) return reply(\"You already entered this giveaway!\");\n parts.push(ctx.userId);\n await sqlite.execute({ sql: \"UPDATE giveaways SET participants=? WHERE giveawayId=?\", args: [JSON.stringify(parts), id] });\n return reply(`🎟️ You entered **${id}**! Good luck. (${parts.length} entries)`);\n }\n case \"end\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to end giveaways.\");\n const id = String(ctx.options[\"giveaway\"] ?? \"\").toUpperCase();\n return endGiveaway(id);\n }\n case \"reroll\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to reroll.\");\n const id = String(ctx.options[\"giveaway\"] ?? \"\").toUpperCase();\n const row = (await sqlite.execute({ sql: \"SELECT * FROM giveaways WHERE giveawayId = ?\", args: [id] })).rows[0] as any;\n if (!row) return reply(\"No such giveaway.\");\n const winner = pickWinners(JSON.parse(row.participants || \"[]\"), 1)[0];\n return winner ? reply(`🎉 New winner for **${id}**: <@${winner}>`) : reply(\"No valid participants to reroll.\");\n }\n default:\n return reply(\"Unknown giveaway command.\");\n }\n}\n\nexport function pickWinners(participants: string[], count: number): string[] {\n const pool = [...participants];\n const out: string[] = [];\n while (pool.length && out.length < count) {\n const i = Math.floor(Math.random() * pool.length);\n out.push(pool.splice(i, 1)[0]);\n }\n return out;\n}\n\nexport async function endGiveaway(giveawayId: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const row = (await sqlite.execute({ sql: \"SELECT * FROM giveaways WHERE giveawayId = ?\", args: [giveawayId.toUpperCase()] })).rows[0] as any;\n if (!row) return reply(\"No such giveaway.\");\n if (row.ended) return reply(\"That giveaway already ended.\");\n const winners = pickWinners(JSON.parse(row.participants || \"[]\"), Number(row.winnerCount));\n await sqlite.execute({\n sql: \"UPDATE giveaways SET ended=1, winners=? WHERE giveawayId=?\",\n args: [JSON.stringify(winners), row.giveawayId],\n });\n const winnerText = winners.length ? winners.map((w: string) => `<@${w}>`).join(\", \") : \"No eligible winners\";\n return replyEmbed(UI.success({\n title: \"🎉 Giveaway Ended\",\n description: `**${row.prize}**`,\n fields: [{ name: `Winners (${winners.length})`, value: winnerText, inline: false }],\n }));\n}\n\n// Called by the cron scheduler for any giveaway past its end time.\nexport async function sweepExpired(): Promise {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const res = await sqlite.execute(\"SELECT giveawayId, endTime, ended FROM giveaways WHERE ended = 0\");\n const now = Date.now();\n let ended = 0;\n for (const r of res.rows as any[]) {\n if (new Date(r.endTime).getTime() <= now) {\n await endGiveaway(r.giveawayId);\n ended++;\n }\n }\n return ended;\n}\n",[],[53,181],"e4b9b477-4fd2-4dab-8930-a53d72920a42","embeds.ts","1f433f0c-a230-11f1-bdda-1607ee4eb77e",["D",1787846299170],"// One consistent premium embed builder used by every system.\n// Color, icons and structure stay uniform across shop, tickets, giveaways, etc.\n\nconst ACCENT = 0x5865f2; // Discord Blurple\nconst SUCCESS = 0x57f287;\nconst WARNING = 0xfee75c;\nconst ERROR = 0xed4245;\n\nexport interface EmbedField {\n name: string;\n value: string;\n inline?: boolean;\n}\n\nexport interface Embed {\n title?: string;\n description?: string;\n color?: number;\n fields?: EmbedField[];\n thumbnail?: { url: string };\n image?: { url: string };\n footer?: { text: string; icon_url?: string };\n timestamp?: string;\n}\n\nexport function embed(opts: Embed): Embed {\n return {\n color: opts.color ?? ACCENT,\n ...opts,\n footer: opts.footer\n ? { text: opts.footer.text, ...(opts.footer.icon_url ? { icon_url: opts.footer.icon_url } : {}) }\n : { text: \"Discord Shop\" },\n timestamp: opts.timestamp ?? new Date().toISOString(),\n };\n}\n\nexport const UI = {\n success: (d: Partial

) => embed({ color: SUCCESS, ...d }),\n warning: (d: Partial

) => embed({ color: WARNING, ...d }),\n error: (d: Partial

) => embed({ color: ERROR, ...d }),\n info: (d: Partial

) => embed({ ...d }),\n};\n\n// Interaction response helpers (type 4 = channel message). flags 64 = ephemeral.\nexport function reply(content: string, ephemeral = true) {\n return { type: 4, data: { content, flags: ephemeral ? 64 : 0 } };\n}\n\nexport function replyEmbed(emb: Embed, ephemeral = true) {\n return { type: 4, data: { embeds: [emb], flags: ephemeral ? 64 : 0 } };\n}\n",[],[53,189],"eed49767-2c61-43cf-9a82-17a62e80126c","db.ts","02143ee4-a231-11f1-bd07-1607ee4eb77e",27,["D",1787847051583],"// Persistent data layer (val-scoped SQLite).\n// Schema is idempotent; every important record survives restarts.\n// All queries are parameterized.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type ProductStatus = \"active\" | \"out_of_stock\" | \"hidden\" | \"disabled\";\n\nexport interface ProductRow {\n id: number;\n productId: string;\n name: string;\n description: string;\n category: string;\n price: number;\n currency: string;\n stock: number;\n image: string | null;\n deliveryType: string;\n status: ProductStatus;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface CustomerRow {\n userId: string;\n username: string;\n customerId: string;\n createdAt: string;\n customerSince: string;\n totalOrders: number;\n completedOrders: number;\n cancelledOrders: number;\n refundedOrders: number;\n totalSpent: number;\n ticketsOpened: number;\n ticketsCompleted: number;\n reviewsSubmitted: number;\n avgRating: number;\n vipLevel: string;\n reputation: number;\n lastPurchase: string | null;\n lastActivity: string | null;\n verified: number;\n blacklisted: number;\n notes: string;\n}\n\nexport interface OrderRow {\n id: number;\n orderId: string;\n customerId: string;\n customerName: string;\n productId: string;\n productName: string;\n quantity: number;\n unitPrice: number;\n discount: number;\n finalAmount: number;\n paymentStatus: string;\n orderStatus: string;\n createdAt: string;\n completedAt: string | null;\n staffId: string | null;\n notes: string;\n}\n\nexport async function initSchema(): Promise {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS customers (\n userId TEXT PRIMARY KEY,\n username TEXT,\n customerId TEXT,\n createdAt TEXT,\n customerSince TEXT,\n totalOrders INTEGER DEFAULT 0,\n completedOrders INTEGER DEFAULT 0,\n cancelledOrders INTEGER DEFAULT 0,\n refundedOrders INTEGER DEFAULT 0,\n totalSpent REAL DEFAULT 0,\n ticketsOpened INTEGER DEFAULT 0,\n ticketsCompleted INTEGER DEFAULT 0,\n reviewsSubmitted INTEGER DEFAULT 0,\n avgRating REAL DEFAULT 0,\n vipLevel TEXT DEFAULT 'Member',\n reputation INTEGER DEFAULT 0,\n lastPurchase TEXT,\n lastActivity TEXT,\n verified INTEGER DEFAULT 0,\n blacklisted INTEGER DEFAULT 0,\n notes TEXT DEFAULT ''\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS products (\n id INTEGER PRIMARY KEY,\n productId TEXT UNIQUE,\n name TEXT,\n description TEXT,\n category TEXT,\n price REAL,\n currency TEXT,\n stock INTEGER,\n image TEXT,\n deliveryType TEXT,\n status TEXT,\n createdAt TEXT,\n updatedAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS orders (\n id INTEGER PRIMARY KEY,\n orderId TEXT UNIQUE,\n customerId TEXT,\n customerName TEXT,\n productId TEXT,\n productName TEXT,\n quantity INTEGER,\n unitPrice REAL,\n discount REAL,\n finalAmount REAL,\n paymentStatus TEXT,\n orderStatus TEXT,\n createdAt TEXT,\n completedAt TEXT,\n staffId TEXT,\n notes TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cases (\n id INTEGER PRIMARY KEY,\n caseId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n moderatorId TEXT,\n action TEXT,\n reason TEXT,\n evidence TEXT,\n duration INTEGER,\n createdAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS tickets (\n id INTEGER PRIMARY KEY,\n ticketId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n category TEXT,\n subject TEXT,\n channelId TEXT,\n staffId TEXT,\n status TEXT,\n priority TEXT DEFAULT 'normal',\n rating INTEGER,\n closedBy TEXT,\n openedAt TEXT,\n closedAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS giveaways (\n id INTEGER PRIMARY KEY,\n giveawayId TEXT UNIQUE,\n channelId TEXT,\n messageId TEXT,\n prize TEXT,\n hostId TEXT,\n requiredRole TEXT,\n winnerCount INTEGER DEFAULT 1,\n participants TEXT DEFAULT '[]',\n winners TEXT DEFAULT '[]',\n ended INTEGER DEFAULT 0,\n endTime TEXT,\n createdAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS suggestions (\n id INTEGER PRIMARY KEY,\n suggestionId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n text TEXT,\n status TEXT DEFAULT 'pending',\n upvotes INTEGER DEFAULT 0,\n downvotes INTEGER DEFAULT 0,\n voters TEXT DEFAULT '[]',\n createdAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS polls (\n id INTEGER PRIMARY KEY,\n pollId TEXT UNIQUE,\n question TEXT,\n options TEXT,\n votes TEXT DEFAULT '{}',\n userId TEXT,\n createdAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS reviews (\n id INTEGER PRIMARY KEY,\n reviewId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n orderId TEXT,\n rating INTEGER,\n text TEXT,\n verified INTEGER DEFAULT 0,\n createdAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS promotions (\n id INTEGER PRIMARY KEY,\n promoId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n package TEXT,\n price REAL,\n startTime TEXT,\n endTime TEXT,\n status TEXT DEFAULT 'active',\n createdAt TEXT\n )`);\n}\n\n// ----- customers -----\nexport async function ensureCustomer(userId: string, username: string): Promise {\n const existing = await getCustomer(userId);\n if (existing) return existing;\n const now = new Date().toISOString();\n const customerId = \"C-\" + generateCode(6);\n await sqlite.execute({\n sql: `INSERT INTO customers (userId, username, customerId, createdAt, customerSince)\n VALUES (?, ?, ?, ?, ?)`,\n args: [userId, username, customerId, now, now],\n });\n return (await getCustomer(userId))!;\n}\n\nexport async function getCustomer(userId: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM customers WHERE userId = ?\",\n args: [userId],\n });\n return (res.rows[0] as CustomerRow) ?? null;\n}\n\nexport async function getCustomerByCode(code: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM customers WHERE customerId = ?\",\n args: [code],\n });\n return (res.rows[0] as CustomerRow) ?? null;\n}\n\nexport async function addCustomerNote(userId: string, note: string, append = true): Promise {\n if (append) {\n const c = await getCustomer(userId);\n await sqlite.execute({\n sql: \"UPDATE customers SET notes = ?, lastActivity = ? WHERE userId = ?\",\n args: [`${c?.notes ?? \"\"}${c?.notes ? \"\\n\" : \"\"}${note}`, new Date().toISOString(), userId],\n });\n } else {\n await sqlite.execute({\n sql: \"UPDATE customers SET notes = ?, lastActivity = ? WHERE userId = ?\",\n args: [note, new Date().toISOString(), userId],\n });\n }\n}\n\n// ----- products -----\nexport async function createProduct(p: Omit): Promise {\n const productId = \"P-\" + generateCode(6);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO products (productId, name, description, category, price, currency, stock, image, deliveryType, status, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'active', ?, ?)`,\n args: [productId, p.name, p.description, p.category, p.price, p.currency, p.stock, p.image, p.deliveryType, now, now],\n });\n return (await getProduct(productId))!;\n}\n\nexport async function getProduct(productId: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM products WHERE productId = ?\",\n args: [productId],\n });\n return (res.rows[0] as ProductRow) ?? null;\n}\n\nexport async function listActiveProducts(category?: string): Promise {\n let sql = \"SELECT * FROM products WHERE status IN ('active','out_of_stock')\";\n const args: unknown[] = [];\n if (category) {\n sql += \" AND category = ?\";\n args.push(category);\n }\n sql += \" ORDER BY id ASC\";\n const res = await sqlite.execute({ sql, args });\n return res.rows as ProductRow[];\n}\n\nexport async function listCategories(): Promise {\n const res = await sqlite.execute(\n \"SELECT DISTINCT category FROM products WHERE status IN ('active','out_of_stock')\",\n );\n return res.rows.map((r) => (r as { category: string }).category).filter(Boolean);\n}\n\nexport async function setProductStatus(productId: string, status: string): Promise {\n await sqlite.execute({\n sql: \"UPDATE products SET status = ?, updatedAt = ? WHERE productId = ?\",\n args: [status, new Date().toISOString(), productId],\n });\n}\n\n// ----- orders -----\nexport async function createOrder(customer: CustomerRow, product: ProductRow, quantity: number, staffId: string | null): Promise {\n const discount = 0; // discount engine added with VIP/promos later\n const unitPrice = product.price;\n const finalAmount = Number((unitPrice * quantity * (1 - discount)).toFixed(2));\n const orderId = \"ORDER-\" + generateCode(5);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO orders (orderId, customerId, customerName, productId, productName, quantity, unitPrice, discount, finalAmount, paymentStatus, orderStatus, createdAt, staffId, notes)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending', 'pending', ?, ?, ?)`,\n args: [orderId, customer.userId, customer.username, product.productId, product.name, quantity, unitPrice, discount, finalAmount, now, staffId, \"\"],\n });\n const res = await sqlite.execute({ sql: \"SELECT * FROM orders WHERE orderId = ?\", args: [orderId] });\n return res.rows[0] as OrderRow;\n}\n\nexport async function getOrder(orderId: string): Promise {\n const res = await sqlite.execute({ sql: \"SELECT * FROM orders WHERE orderId = ?\", args: [orderId] });\n return (res.rows[0] as OrderRow) ?? null;\n}\n\nexport async function listOrdersByCustomer(customerId: string, limit = 10): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM orders WHERE customerId = ? ORDER BY createdAt DESC LIMIT ?\",\n args: [customerId, limit],\n });\n return res.rows as OrderRow[];\n}\n\n// ----- helpers -----\nexport function generateCode(len: number): string {\n let n = \"\";\n for (let i = 0; i < len; i++) n += Math.floor(Math.random() * 10);\n return n;\n}\n\n/** Money display in the configured currency. */\nexport function money(n: number, currency = \"USD\"): string {\n const sym: Record = { USD: \"$\", EUR: \"€\", GBP: \"£\", JPY: \"¥\", RUB: \"₽\" };\n const s = sym[currency] ?? \"\";\n return `${s}${Number(n).toFixed(2)}`;\n}\n",[],[53,196],"1cd20d09-c79f-40cc-9ff4-88f85be90578","customers.ts","3e544958-a231-11f1-aeed-1607ee4eb77e",12,["D",1787846780787],"// Customer management system: view profile, search, history, add notes.\n// Customer profiles are auto-created on first order and carry full history.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { addCustomerNote, ensureCustomer, getCustomer, getCustomerByCode, listOrdersByCustomer, money } from \"./db.ts\";\n\nexport async function customer(ctx: CmdCtx, sub: string): Promise> {\n const target = (ctx.options[\"customer\"] as string) ?? ctx.userId;\n switch (sub) {\n case \"view\":\n return view(target);\n case \"history\":\n return history(target);\n case \"note\":\n return note(ctx, target, String(ctx.options[\"note\"] ?? \"\"));\n case \"stats\":\n return view(target);\n default:\n return view(target);\n }\n}\n\nasync function resolve(target: string) {\n // accept either @mention/user id or C-XXXXXX customer code\n const cleaned = target.trim().replace(/[<@!>]/g, \"\");\n if (/^C-\\d+$/i.test(cleaned)) {\n const byCode = await getCustomerByCode(cleaned.toUpperCase());\n if (byCode) return byCode;\n }\n return getCustomer(cleaned);\n}\n\nasync function view(target: string): Promise> {\n const c = await resolve(target);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n const fields: EmbedField[] = [\n { name: \"Customer ID\", value: `\\`${c.customerId}\\``, inline: true },\n { name: \"User\", value: `<@${c.userId}>`, inline: true },\n { name: \"VIP Level\", value: c.vipLevel, inline: true },\n { name: \"Total Orders\", value: `${c.totalOrders}`, inline: true },\n { name: \"Completed\", value: `${c.completedOrders}`, inline: true },\n { name: \"Cancelled\", value: `${c.cancelledOrders}`, inline: true },\n { name: \"Refunded\", value: `${c.refundedOrders}`, inline: true },\n { name: \"Total Spent\", value: money(c.totalSpent, \"USD\"), inline: true },\n { name: \"Avg Order\", value: c.totalOrders ? money(c.totalSpent / c.totalOrders, \"USD\") : \"—\", inline: true },\n { name: \"Tickets\", value: `${c.ticketsOpened}`, inline: true },\n { name: \"Reviews\", value: `${c.reviewsSubmitted}`, inline: true },\n { name: \"Reputation\", value: `${c.reputation}`, inline: true },\n { name: \"Last Purchase\", value: c.lastPurchase ? `` : \"—\", inline: true },\n ];\n if (c.blacklisted) fields.push({ name: \"⚠️ Status\", value: \"Blacklisted\", inline: true });\n return replyEmbed(\n UI.info({\n title: `👤 ${c.username}'s Profile`,\n description: `Member since `,\n fields,\n }),\n );\n}\n\nasync function history(target: string): Promise> {\n const c = await resolve(target);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n const orders = await listOrdersByCustomer(c.userId, 5);\n const orderField = orders.length\n ? orders.map((o) => `${o.orderId} · ${o.productName} · **${money(o.finalAmount, \"USD\")}** · ${o.orderStatus}`).join(\"\\n\")\n : \"No orders yet.\";\n return replyEmbed(\n UI.info({\n title: `📜 ${c.username}'s History`,\n fields: [{ name: \"Orders\", value: orderField, inline: false }],\n }),\n );\n}\n\nasync function note(ctx: CmdCtx, target: string, note: string): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to add customer notes.\");\n if (!note) return reply(\"Provide a note to add.\");\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const cleaned = target.trim().replace(/[<@!>]/g, \"\");\n const c = await getCustomer(cleaned);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n await addCustomerNote(c.userId, `[${ctx.username}] ${note}`);\n return reply(\"✅ Customer note added.\");\n}\n",[],[53,204],"2ea9a217-a47e-467a-8f22-c3842a7d2381","config.ts","1f4dccf6-a230-11f1-bdda-1607ee4eb77e",35,["D",1787847474391],"// Persistent, project-scoped configuration via std/blob.\n// Every system reads/writes config through here so the future web dashboard\n// and the bot share the exact same store.\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nexport interface GuildConfig {\n setupAt: string | null;\n systems: {\n tickets: boolean;\n moderation: boolean;\n giveaways: boolean;\n shop: boolean;\n logs: boolean;\n welcome: boolean;\n };\n ownerId: string | null;\n // channel/role ids get added as each system is built:\n channels: Record;\n roles: Record;\n settings: Record;\n autorole: {\n enabled: boolean;\n delay: number;\n roles: string[];\n };\n}\n\nexport function defaultConfig(): GuildConfig {\n return {\n setupAt: null,\n systems: {\n tickets: false,\n moderation: false,\n giveaways: false,\n shop: false,\n logs: false,\n welcome: false,\n },\n ownerId: null,\n channels: {},\n roles: {},\n settings: {},\n autorole: { enabled: true, delay: 0, roles: [] },\n };\n}\n\nconst KEY = \"guild:config\";\n\nexport async function getConfig(): Promise {\n const existing = await blob.getJSON(KEY);\n const base = { ...defaultConfig(), ...(existing ?? {}) };\n base.autorole = { ...defaultConfig().autorole, ...(existing?.autorole ?? {}) };\n return base;\n}\n\nexport async function saveConfig(cfg: GuildConfig): Promise {\n await blob.setJSON(KEY, cfg);\n}\n",[],[53,212],"b185d0ad-1644-48aa-91f7-0319e6ca8f49","components.ts","873c3afe-a231-11f1-8ba1-1607ee4eb77e",55,["D",1787918592986],4,"// Component (button / select menu / modal) routing.\n// Every button/select carries a custom_id that begins with a system tag\n// (e.g. \"ticket:category\" for the dropdown, \"tick::\" for ticket\n// control buttons). Each system exports its own handler.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport { createTicket, handleTicketAction, handleTicketModal } from \"./tickets.ts\";\n\ntype ComponentCtx = {\n userId: string;\n username: string;\n guildId: string;\n customId: string;\n msgId: string | undefined;\n [k: string]: unknown;\n};\n\nexport async function handleComponent(interaction: any): Promise> {\n const customId: string = interaction.data?.custom_id ?? \"\";\n const user = interaction.member?.user ?? interaction.user ?? {};\n const ctx: ComponentCtx = {\n userId: String(user.id ?? \"\"),\n username: String(user.username ?? \"Unknown\"),\n guildId: String(interaction.guild_id ?? \"\"),\n customId,\n msgId: interaction.message?.id,\n };\n\n const [tag] = customId.split(\":\");\n switch (tag) {\n case \"ticket\":\n // category select menu → open the ticket modal\n if (customId === \"ticket:category\") {\n const category = String(interaction.data?.values?.[0] ?? \"general_support\");\n return openTicketModal(category);\n }\n return reply(\"Unknown ticket interaction.\");\n case \"tick\":\n return handleTicketAction(customId, { userId: ctx.userId, guildId: ctx.guildId });\n default:\n return reply(\"This button isn't wired up yet.\");\n }\n}\n\nexport async function handleModal(interaction: any): Promise> {\n const customId: string = interaction.data?.custom_id ?? \"\";\n const fields: Record = {};\n for (const row of interaction.data?.components ?? []) {\n for (const comp of row.components ?? []) {\n fields[comp.custom_id] = comp.value ?? \"\";\n }\n }\n const user = interaction.member?.user ?? interaction.user ?? {};\n const guildId = String(interaction.guild_id ?? \"\");\n const [tag] = customId.split(\":\");\n\n // \"ticket:new-\" → actually create the private channel\n if (tag === \"ticket\" && customId.startsWith(\"ticket:new\")) {\n const category = customId.replace(\"ticket:new\", \"\").replace(/^[:-]/, \"\") || \"general_support\";\n const subject = String(fields[\"subject\"] ?? \"No subject\");\n const res = await createTicket(guildId, String(user.id ?? \"\"), String(user.username ?? \"Unknown\"), category, subject);\n return res.ok\n ? reply(`Your ticket has been created: #${res.channelName}`) // ephemeral, only the creator sees it\n : replyEmbed(UI.error({ title: \"Could not open ticket\", description: res.error || \"Please contact staff.\" }));\n }\n\n // \"tick:add:\" / \"tick:rename:\" modal submits\n if (tag === \"tick\") {\n return handleTicketModal(customId, fields, { guildId });\n }\n\n return reply(\"This form isn't wired up yet.\");\n}\n\n// ---- open the ticket modal for a chosen category ----\nfunction openTicketModal(category: string): Record {\n return {\n type: 9,\n data: {\n custom_id: `ticket:new-${category}`,\n title: \"Open a Ticket\",\n components: [\n {\n type: 1,\n components: [\n {\n type: 4,\n custom_id: \"subject\",\n label: \"What do you need help with?\",\n style: 2,\n placeholder: \"Briefly explain your issue or request…\",\n required: true,\n },\n ],\n },\n ],\n },\n };\n}\n",[],[53,220],"1671320f-d6a7-4b5a-845f-c1aa06bfab55","community2.ts","1ccab384-a232-11f1-8072-1607ee4eb77e",30,["D",1787847154008],"// Reviews + Promotions systems.\n// Reviews attach to completed orders (verified), update customer profile.\n// Promotions auto-expire and persist.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { getCustomer, getOrder, generateCode } from \"./db.ts\";\n\nexport async function review(ctx: CmdCtx, sub: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n switch (sub) {\n case \"add\": {\n const orderId = String(ctx.options[\"order\"] ?? \"\").toUpperCase();\n const rating = Math.min(5, Math.max(1, Math.floor(Number(ctx.options[\"rating\"] ?? 5))));\n const text = String(ctx.options[\"text\"] ?? \"\");\n const order = await getOrder(orderId);\n if (!order) return reply(\"No such order.\");\n if (order.customerId !== ctx.userId) return reply(\"You can only review your own orders.\");\n if (order.orderStatus !== \"completed\") return reply(\"You can only review completed orders.\");\n const dup = await sqlite.execute({ sql: \"SELECT * FROM reviews WHERE orderId = ?\", args: [orderId] });\n if (dup.rows.length) return reply(\"You already reviewed this order.\");\n const reviewId = \"R-\" + generateCode(6);\n await sqlite.execute({\n sql: \"INSERT INTO reviews (reviewId, userId, username, orderId, rating, text, verified, createdAt) VALUES (?, ?, ?, ?, ?, ?, 1, ?)\",\n args: [reviewId, ctx.userId, ctx.username, orderId, rating, text, new Date().toISOString()],\n });\n const cust = await getCustomer(ctx.userId);\n const newCount = (cust?.reviewsSubmitted ?? 0) + 1;\n const newAvg = cust && cust.avgRating\n ? Number((((cust.avgRating * cust.reviewsSubmitted) + rating) / newCount).toFixed(2))\n : rating;\n await sqlite.execute({\n sql: \"UPDATE customers SET reviewsSubmitted = reviewsSubmitted + 1, avgRating = ? WHERE userId = ?\",\n args: [newAvg, ctx.userId],\n });\n return replyEmbed(UI.success({\n title: \"⭐ Review Submitted\",\n description: `${\"⭐\".repeat(rating)} · ${orderId}`,\n fields: text ? [{ name: \"Review\", value: text, inline: false }] : undefined,\n }));\n }\n default:\n return reply(\"Unknown review command.\");\n }\n}\n\nexport async function promotion(ctx: CmdCtx, sub: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n switch (sub) {\n case \"create\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to create promotions.\");\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const pkg = String(ctx.options[\"package\"] ?? \"Standard\");\n const price = Math.max(0, Number(ctx.options[\"price\"] ?? 0));\n const days = Math.max(1, Math.floor(Number(ctx.options[\"days\"] ?? 7)));\n const promoId = \"PR-\" + generateCode(5);\n const now = new Date().toISOString();\n const end = new Date(Date.now() + days * 86400000).toISOString();\n await sqlite.execute({\n sql: \"INSERT INTO promotions (promoId, userId, username, package, price, startTime, endTime, status, createdAt) VALUES (?, ?, ?, ?, ?, ?, ?, 'active', ?)\",\n args: [promoId, userId, ctx.username, pkg, price, now, end, now],\n });\n return replyEmbed(UI.success({\n title: \"📢 Promotion Created\",\n description: `**${promoId}** · ${pkg}`,\n fields: [\n { name: \"User\", value: `<@${userId}>`, inline: true },\n { name: \"Price\", value: `$${price.toFixed(2)}`, inline: true },\n { name: \"Expires\", value: ``, inline: true },\n ],\n }));\n }\n case \"status\": {\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const res = await sqlite.execute({ sql: \"SELECT * FROM promotions WHERE userId = ? ORDER BY createdAt DESC LIMIT 5\", args: [userId] });\n const rows = res.rows as any[];\n if (!rows.length) return reply(\"No promotions found for that user.\");\n const lines = rows.map((p) => `\\`${p.promoId}\\` · ${p.package} · ${p.status} · `).join(\"\\n\");\n return replyEmbed(UI.info({ title: \"📢 Promotions\", description: `<@${userId}>`, fields: [{ name: \"History\", value: lines, inline: false }] }));\n }\n default:\n return reply(\"Unknown promotion command.\");\n }\n}\n\n// Called by the scheduler to expire promotions.\nexport async function sweepExpiredPromotions(): Promise {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const res = await sqlite.execute(\"SELECT promoId, endTime, status FROM promotions WHERE status = 'active'\");\n const now = Date.now();\n let n = 0;\n for (const p of res.rows as any[]) {\n if (new Date(p.endTime).getTime() <= now) {\n await sqlite.execute({ sql: \"UPDATE promotions SET status='expired' WHERE promoId=?\", args: [p.promoId] });\n n++;\n }\n }\n return n;\n}\n",[],[53,229],"346d1d51-281a-4246-8044-d4927cb4bc45","community.ts","1cc0851c-a232-11f1-8072-1607ee4eb77e",52,["D",1787918323438],5,"// Ticket + Suggestion + Poll systems.\n// Tickets: open/close with persistent lifecycle updating the customer profile.\n// Suggestions: upvote/downvote with persistent votes.\n// Polls: vote on options with persistent single-vote-per-user.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// ---------- TICKETS ----------\n// The 4 ticket categories in the dropdown, with your server's custom emojis.\nconst TICKET_OPTIONS = [\n { value: \"general_support\", label: \"General Support\", animated: true, name: \"Support\", id: \"1542859626897473666\",\n description: \"General questions, bugs, or you're not sure where to go.\" },\n { value: \"report_user\", label: \"Report A User\", animated: true, name: \"report\", id: \"1495855121559715922\",\n description: \"Report scamming or rule-breaking with proof.\" },\n { value: \"trader_application\", label: \"Trader Application\", animated: true, name: \"apps\", id: \"1526953458081464453\",\n description: \"Apply to join our trusted trading team.\" },\n { value: \"moderator_application\", label: \"Moderator Application\", animated: true, name: \"518379moderator\", id: \"1505913617017733262\",\n description: \"Become a member of our Support Team.\" },\n];\n\n// Render a custom emoji as a mention (or fall back to a unicode emoji).\nfunction emojiMention(o: { animated?: boolean; name: string; id?: string }, fallback: string): string {\n return o.id ? `${o.animated ? \"` : fallback;\n}\n\nexport async function ticket(ctx: CmdCtx, sub: string): Promise> {\n switch (sub) {\n case \"panel\": {\n // Posts a persistent panel with a category dropdown.\n const fields = TICKET_OPTIONS.map((o) => {\n return { name: `${emojiMention(o, o.name)} ${o.label}`, value: o.description, inline: false };\n });\n return {\n type: 4,\n data: {\n flags: 0,\n embeds: [UI.info({\n title: \"🎫 Wavez Tickets\",\n description: \"Select an option below to open a ticket. Please choose the category that best matches your request so our team can assist you as quickly as possible.\",\n fields,\n })],\n components: [\n {\n type: 1,\n components: [\n {\n type: 3,\n custom_id: \"ticket:category\",\n placeholder: \"Select a category…\",\n min_values: 1,\n max_values: 1,\n options: TICKET_OPTIONS.map((o) => ({\n value: o.value,\n label: o.label,\n description: o.description,\n emoji: { name: o.name, id: o.id },\n })),\n },\n ],\n },\n ],\n },\n };\n }\n case \"new\": {\n const res = await createTicket(ctx.userId, ctx.username, String(ctx.options[\"category\"] ?? \"support\"), String(ctx.options[\"subject\"] ?? \"No subject\"));\n return res.ok\n ? replyEmbed(UI.success({ title: \"🎫 Ticket Opened\", description: `**${res.ticketId}**`, fields: [{ name: \"Subject\", value: res.subject ?? \"\", inline: false }] }))\n : reply(res.msg);\n }\n case \"close\": {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const id = String(ctx.options[\"ticket\"] ?? \"\").toUpperCase();\n const t = id\n ? (await sqlite.execute({ sql: \"SELECT * FROM tickets WHERE ticketId = ?\", args: [id] })).rows[0]\n : (await sqlite.execute({ sql: \"SELECT * FROM tickets WHERE userId = ? AND status='open'\", args: [ctx.userId] })).rows[0];\n if (!t) return reply(\"No such open ticket.\");\n if (t.userId !== ctx.userId && !ctx.isStaff && !ctx.isOwner) return reply(\"You can only close your own ticket.\");\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: \"UPDATE tickets SET status='closed', closedBy=?, closedAt=? WHERE ticketId=?\",\n args: [ctx.userId, now, t.ticketId],\n });\n await sqlite.execute({ sql: \"UPDATE customers SET ticketsCompleted = ticketsCompleted + 1 WHERE userId = ?\", args: [t.userId] });\n return reply(`✅ Ticket **${t.ticketId}** closed.`);\n }\n default:\n return reply(\"Unknown ticket command.\");\n }\n}\n\n// ---------- SUGGESTIONS ----------\nexport async function suggest(ctx: CmdCtx, sub: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n switch (sub) {\n case \"submit\": {\n const text = String(ctx.options[\"text\"] ?? \"\");\n if (!text) return reply(\"Provide a suggestion.\");\n const suggestionId = \"S-\" + generateCode(6);\n await sqlite.execute({\n sql: `INSERT INTO suggestions (suggestionId, userId, username, text, status, upvotes, downvotes, voters, createdAt)\n VALUES (?, ?, ?, ?, 'pending', 0, 0, '[]', ?)`,\n args: [suggestionId, ctx.userId, ctx.username, text, new Date().toISOString()],\n });\n return replyEmbed(UI.info({\n title: \"💡 Suggestion Submitted\",\n description: `**${suggestionId}**`,\n fields: [{ name: \"Suggestion\", value: text, inline: false }],\n }));\n }\n case \"vote\": {\n const id = String(ctx.options[\"suggestion\"] ?? \"\").toUpperCase();\n const dir = String(ctx.options[\"direction\"] ?? \"up\");\n const row = (await sqlite.execute({ sql: \"SELECT * FROM suggestions WHERE suggestionId = ?\", args: [id] })).rows[0] as any;\n if (!row) return reply(\"No such suggestion.\");\n const voters = JSON.parse((row.voters as string) || \"[]\");\n if (voters.includes(ctx.userId)) return reply(\"You already voted on this suggestion.\");\n voters.push(ctx.userId);\n const up = dir === \"up\" ? Number(row.upvotes) + 1 : Number(row.upvotes);\n const down = dir === \"down\" ? Number(row.downvotes) + 1 : Number(row.downvotes);\n await sqlite.execute({\n sql: \"UPDATE suggestions SET upvotes=?, downvotes=?, voters=? WHERE suggestionId=?\",\n args: [up, down, JSON.stringify(voters), id],\n });\n const score = up - down;\n const status = score >= 5 ? \"approved\" : score <= -3 ? \"rejected\" : \"pending\";\n await sqlite.execute({ sql: \"UPDATE suggestions SET status=? WHERE suggestionId=?\", args: [status, id] });\n return reply(`✅ Voted **${dir}** on ${id}. Score now ${score}`);\n }\n default:\n return reply(\"Unknown suggestion command.\");\n }\n}\n\n// ---------- POLLS ----------\nexport async function poll(ctx: CmdCtx, sub: string): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n switch (sub) {\n case \"create\": {\n const question = String(ctx.options[\"question\"] ?? \"\");\n const optList = String(ctx.options[\"options\"] ?? \"\").split(\",\").map((s) => s.trim()).filter(Boolean).slice(0, 10);\n if (!question || optList.length < 2) return reply(\"Provide a question and at least 2 comma-separated options.\");\n const pollId = \"POLL-\" + generateCode(5);\n const labels = optList.map((_, i) => String.fromCharCode(65 + i));\n const votes: Record = {};\n labels.forEach((l) => (votes[l] = []));\n await sqlite.execute({\n sql: \"INSERT INTO polls (pollId, question, options, votes, userId, createdAt) VALUES (?, ?, ?, ?, ?, ?)\",\n args: [pollId, question, JSON.stringify(optList), JSON.stringify(votes), ctx.userId, new Date().toISOString()],\n });\n const pretty = optList.map((o, i) => `**${labels[i]}** · ${o}`).join(\"\\n\");\n return replyEmbed(UI.info({\n title: \"📊 Poll · \" + pollId,\n description: question,\n fields: [{ name: \"Options\", value: pretty, inline: false }, { name: \"Vote\", value: \"/poll vote \", inline: false }],\n }));\n }\n case \"vote\": {\n const id = String(ctx.options[\"poll\"] ?? \"\").toUpperCase();\n const letter = String(ctx.options[\"option\"] ?? \"\").toUpperCase();\n const row = (await sqlite.execute({ sql: \"SELECT * FROM polls WHERE pollId = ?\", args: [id] })).rows[0] as any;\n if (!row) return reply(\"No such poll.\");\n const votes = JSON.parse(row.votes as string) as Record;\n if (letter && !votes[letter]) return reply(\"Invalid option letter.\");\n for (const l of Object.keys(votes)) {\n if (votes[l].includes(ctx.userId)) return reply(\"You already voted on this poll.\");\n }\n votes[letter].push(ctx.userId);\n await sqlite.execute({ sql: \"UPDATE polls SET votes=? WHERE pollId=?\", args: [JSON.stringify(votes), id] });\n const counts = Object.entries(votes).map(([l, arr]) => `**${l}** — ${arr.length}`).join(\"\\n\");\n return replyEmbed(UI.info({ title: `📊 Poll ${id}`, description: String(row.question), fields: [{ name: \"Results\", value: counts, inline: false }] }));\n }\n default:\n return reply(\"Unknown poll command.\");\n }\n}\n// Shared ticket creation (used by /ticket new and the panel button/modal).\nexport async function createTicket(userId: string, username: string, category: string, subject: string): Promise<{ ok: boolean; msg: string; ticketId?: string; subject?: string }> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const existing = await sqlite.execute({\n sql: \"SELECT * FROM tickets WHERE userId = ? AND status NOT IN ('closed','resolved')\",\n args: [userId],\n });\n if (existing.rows.length) return { ok: false, msg: \"You already have an open ticket.\" };\n const ticketId = \"T-\" + generateCode(6);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO tickets (ticketId, userId, username, category, subject, channelId, staffId, status, priority, openedAt)\n VALUES (?, ?, ?, ?, ?, '', NULL, 'open', 'normal', ?)`,\n args: [ticketId, userId, username, category, subject, now],\n });\n await sqlite.execute({ sql: \"UPDATE customers SET ticketsOpened = ticketsOpened + 1 WHERE userId = ?\", args: [userId] });\n return { ok: true, msg: \"Ticket opened\", ticketId, subject };\n}\n",[],[53,237],"503a80e9-0cdf-495e-9a01-0a462fc0411b","commands.ts","1f569638-a230-11f1-bdda-1607ee4eb77e",60,["D",1787919192492],21,"// Slash-command registry + dispatcher.\n// Organizes commands into logical groups (shop / order / customer / …) and\n// routes interactions to the matching system module. Permission checks are\n// done server-side here via CmdCtx.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport { getConfig, saveConfig } from \"./config.ts\";\nimport { shop, type CmdCtx } from \"./shop.ts\";\nimport { buy, orderHistory, updateOrder, viewOrder } from \"./orders.ts\";\nimport { customer } from \"./customers.ts\";\nimport { moderation } from \"./moderation.ts\";\nimport { ticket, suggest, poll } from \"./community.ts\";\nimport { ticket as ticketSystem } from \"./tickets.ts\";\nimport { review, promotion } from \"./community2.ts\";\nimport { giveaway } from \"./giveaways.ts\";\nimport { autorole } from \"./autorole.ts\";\n\n// ---- slash command definitions (global) ----\nconst STRING = 3, INTEGER = 4;\n\nexport const COMMANDS: Array> = [\n { name: \"ping\", description: \"Check the bot is alive and healthy.\" },\n { name: \"setup\", description: \"Run one-click server setup and show config summary.\" },\n { name: \"panel\", description: \"Open the central configuration control panel.\" },\n {\n name: \"shop\",\n description: \"Browse and buy products.\",\n options: [\n { name: \"browse\", description: \"Show all available products\", type: 1 },\n {\n name: \"view\", description: \"View one product\", type: 1,\n options: [{ type: STRING, name: \"product\", description: \"Product ID\", required: true }],\n },\n {\n name: \"buy\", description: \"Buy a product\", type: 1,\n options: [\n { type: STRING, name: \"product\", description: \"Product ID\", required: true },\n { type: INTEGER, name: \"quantity\", description: \"Quantity (default 1)\", required: false },\n ],\n },\n {\n name: \"product-add\", description: \"[Staff] Add a product\", type: 1,\n options: [\n { type: STRING, name: \"name\", description: \"Product name\", required: true },\n { type: INTEGER, name: \"price\", description: \"Price\", required: true },\n { type: INTEGER, name: \"stock\", description: \"Stock (default 1)\", required: false },\n { type: STRING, name: \"category\", description: \"Category\", required: false },\n { type: STRING, name: \"description\", description: \"Description\", required: false },\n { type: STRING, name: \"delivery\", description: \"Delivery type\", required: false },\n ],\n },\n ],\n },\n {\n name: \"order\",\n description: \"View and manage orders.\",\n options: [\n {\n name: \"view\", description: \"View an order / receipt\", type: 1,\n options: [{ type: STRING, name: \"order\", description: \"Order ID\", required: true }],\n },\n {\n name: \"history\", description: \"A customer's order history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"update\", description: \"[Staff] Update an order's status\", type: 1,\n options: [\n { type: STRING, name: \"order\", description: \"Order ID\", required: true },\n { type: STRING, name: \"status\", description: \"pending/paid/processing/completed/cancelled/refunded\", required: true },\n ],\n },\n ],\n },\n {\n name: \"customer\",\n description: \"Customer profiles.\",\n options: [\n {\n name: \"view\", description: \"View a customer profile\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"history\", description: \"A customer's full history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true }],\n },\n {\n name: \"note\", description: \"[Staff] Add a staff note\", type: 1,\n options: [\n { type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true },\n { type: STRING, name: \"note\", description: \"Note text\", required: true },\n ],\n },\n ],\n },\n {\n name: \"moderation\",\n description: \"Moderation actions and cases.\",\n options: [\n {\n name: \"warn\", description: \"Warn a member\", type: 1,\n options: [\n { type: STRING, name: \"user\", description: \"User to warn\", required: true },\n { type: STRING, name: \"reason\", description: \"Reason\", required: false },\n ],\n },\n {\n name: \"ban\", description: \"Ban a member\", type: 1,\n options: [\n { type: STRING, name: \"user\", description: \"User to ban\", required: true },\n { type: STRING, name: \"reason\", description: \"Reason\", required: false },\n ],\n },\n {\n name: \"kick\", description: \"Kick a member\", type: 1,\n options: [\n { type: STRING, name: \"user\", description: \"User to kick\", required: true },\n { type: STRING, name: \"reason\", description: \"Reason\", required: false },\n ],\n },\n {\n name: \"timeout\", description: \"Timeout a member\", type: 1,\n options: [\n { type: STRING, name: \"user\", description: \"User to timeout\", required: true },\n { type: INTEGER, name: \"minutes\", description: \"Minutes (default 60)\", required: false },\n { type: STRING, name: \"reason\", description: \"Reason\", required: false },\n ],\n },\n {\n name: \"cases\", description: \"View moderation cases\", type: 1,\n options: [{ type: STRING, name: \"user\", description: \"Filter by user\", required: false }],\n },\n ],\n },\n {\n name: \"ticket\", description: \"Support tickets.\", options: [\n { name: \"panel\", description: \"Post the ticket panel message\", type: 1 },\n { name: \"new\", description: \"Open a new ticket\", type: 1, options: [\n { type: STRING, name: \"category\", description: \"Category (general_support/report_user/trader_application/moderator_application)\", required: false },\n { type: STRING, name: \"subject\", description: \"What do you need help with?\", required: false },\n ] },\n { name: \"close\", description: \"Close a ticket\", type: 1, options: [\n { type: STRING, name: \"ticket\", description: \"Ticket ID\", required: true },\n ] },\n { name: \"config\", description: \"[Staff] Set ticket category or staff role\", type: 1, options: [\n { type: STRING, name: \"key\", description: \"category or role\", required: true },\n { type: STRING, name: \"value\", description: \"Channel/role ID\", required: true },\n ] },\n { name: \"settings\", description: \"[Staff] View ticket settings\", type: 1 },\n ],\n },\n {\n name: \"giveaway\", description: \"Giveaways.\", options: [\n { name: \"create\", description: \"[Staff] Start a giveaway\", type: 1, options: [\n { type: STRING, name: \"prize\", description: \"Prize\", required: true },\n { type: INTEGER, name: \"minutes\", description: \"Duration in minutes\", required: false },\n { type: INTEGER, name: \"winners\", description: \"Winner count\", required: false },\n ] },\n { name: \"enter\", description: \"Enter a giveaway\", type: 1, options: [\n { type: STRING, name: \"giveaway\", description: \"Giveaway ID\", required: true },\n ] },\n { name: \"end\", description: \"[Staff] End a giveaway early\", type: 1, options: [\n { type: STRING, name: \"giveaway\", description: \"Giveaway ID\", required: true },\n ] },\n { name: \"reroll\", description: \"[Staff] Reroll a winner\", type: 1, options: [\n { type: STRING, name: \"giveaway\", description: \"Giveaway ID\", required: true },\n ] },\n ],\n },\n {\n name: \"suggestion\", description: \"Community suggestions.\", options: [\n { name: \"submit\", description: \"Submit a suggestion\", type: 1, options: [\n { type: STRING, name: \"text\", description: \"Your suggestion\", required: true },\n ] },\n { name: \"vote\", description: \"Vote on a suggestion\", type: 1, options: [\n { type: STRING, name: \"suggestion\", description: \"Suggestion ID\", required: true },\n { type: STRING, name: \"direction\", description: \"up or down\", required: false },\n ] },\n ],\n },\n {\n name: \"poll\", description: \"Create and vote on polls.\", options: [\n { name: \"create\", description: \"Create a poll\", type: 1, options: [\n { type: STRING, name: \"question\", description: \"Question\", required: true },\n { type: STRING, name: \"options\", description: \"Comma-separated options\", required: true },\n ] },\n { name: \"vote\", description: \"Vote on a poll\", type: 1, options: [\n { type: STRING, name: \"poll\", description: \"Poll ID\", required: true },\n { type: STRING, name: \"option\", description: \"Letter (A/B/C)\", required: true },\n ] },\n ],\n },\n {\n name: \"review\", description: \"Verified order reviews.\", options: [\n { name: \"add\", description: \"Review a completed order\", type: 1, options: [\n { type: STRING, name: \"order\", description: \"Order ID\", required: true },\n { type: INTEGER, name: \"rating\", description: \"1-5 stars\", required: false },\n { type: STRING, name: \"text\", description: \"Written review\", required: false },\n ] },\n ],\n },\n {\n name: \"promotion\", description: \"Promotions & ads (staff).\", options: [\n { name: \"create\", description: \"[Staff] Create a promotion\", type: 1, options: [\n { type: STRING, name: \"user\", description: \"User\", required: true },\n { type: STRING, name: \"package\", description: \"Package\", required: false },\n { type: INTEGER, name: \"price\", description: \"Price\", required: false },\n { type: INTEGER, name: \"days\", description: \"Duration in days\", required: false },\n ] },\n { name: \"status\", description: \"A user's promotion history\", type: 1, options: [\n { type: STRING, name: \"user\", description: \"User\", required: true },\n ] },\n ],\n },\n {\n name: \"autorole\", description: \"Automatic role assignment (staff).\", options: [\n { name: \"add\", description: \"[Staff] Add a role to autorole\", type: 1, options: [\n { type: STRING, name: \"role\", description: \"Role ID or mention\", required: true },\n ] },\n { name: \"remove\", description: \"[Staff] Remove an autorole\", type: 1, options: [\n { type: STRING, name: \"role\", description: \"Role ID or mention\", required: true },\n ] },\n { name: \"list\", description: \"List configured autoroles\", type: 1 },\n { name: \"enable\", description: \"[Staff] Enable autorole\", type: 1 },\n { name: \"disable\", description: \"[Staff] Disable autorole\", type: 1 },\n { name: \"test\", description: \"[Staff] Apply autoroles to a member\", type: 1, options: [\n { type: STRING, name: \"user\", description: \"User to apply roles to\", required: true },\n ] },\n { name: \"settings\", description: \"[Staff] View autorole settings\", type: 1 },\n ],\n },\n];\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nexport async function registerCommands(): Promise {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n const appId = Deno.env.get(\"DISCORD_APP_ID\");\n if (!token || !appId) return;\n\n // Rate-limit guard: only attempt registration at most once per hour, so cold\n // starts and frequent deploys don't hammer Discord (which 429-limits us).\n const { blob } = await import(\"https://esm.town/v/std/blob/main.ts\");\n try {\n const last = await blob.getJSON<{ when: number }>(\"meta:commandsRegistered\");\n if (last && Date.now() - last.when < 60 * 60 * 1000) return;\n } catch { /* first run */ }\n\n const res = await fetch(`${DISCORD_API}/applications/${appId}/commands`, {\n method: \"PUT\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify(COMMANDS),\n });\n if (res.ok) {\n await blob.setJSON(\"meta:commandsRegistered\", { when: Date.now() });\n } else {\n console.error(\"register commands failed:\", res.status, await res.text());\n }\n}\n\n// ---- permission helper: build a command context ----\nasync function buildCtx(interaction: any): Promise {\n const cfg = await getConfig();\n const member = interaction.member ?? {};\n const user = member.user ?? interaction.user;\n const staffRole = cfg.roles[\"staff\"];\n const isStaff =\n (user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)) ||\n Boolean(member.permissions && (BigInt(member.permissions) & 0x20n)) || // MANAGE_GUILD\n Boolean(staffRole && (member.roles ?? []).includes(staffRole));\n return {\n guildId: interaction.guild_id ?? \"\",\n userId: String(user.id ?? \"\"),\n username: user.username ?? \"Unknown\",\n isStaff,\n isOwner: Boolean(user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)),\n options: {},\n };\n}\n\n// ---- parse subcommand groups into a flat context ----\nfunction parseOptions(data: any): { group: string; sub: string; options: Record } {\n const opts = (data.options ?? []) as Array>;\n const first = opts[0];\n if (first && first.type === 1) {\n const nested: Record = {};\n for (const o of first.options ?? []) nested[o.name] = o.value;\n return { group: data.name, sub: first.name, options: nested };\n }\n const flat: Record = {};\n for (const o of opts) flat[o.name] = o.value;\n return { group: data.name, sub: \"\", options: flat };\n}\n\n// ---- route a type-2 slash interaction ----\nexport async function handleCommand(interaction: any): Promise> {\n const data = interaction.data ?? {};\n const ctx = await buildCtx(interaction);\n const parsed = parseOptions(data);\n ctx.options = parsed.options;\n\n switch (data.name) {\n case \"ping\":\n return replyEmbed(UI.success({ title: \"Pong! 🟢\", description: \"Bot is online and healthy.\" }));\n\n case \"setup\":\n return handleSetup(ctx);\n\n case \"panel\":\n return handlePanel(ctx);\n\n case \"shop\":\n if (parsed.sub === \"buy\") {\n if (!parsed.options[\"product\"]) return reply(\"Provide a product ID.\");\n return buy(ctx);\n }\n return shop(ctx, parsed.sub);\n\n case \"order\":\n switch (parsed.sub) {\n case \"view\": return viewOrder(ctx);\n case \"history\": return orderHistory(ctx);\n case \"update\": return updateOrder(ctx);\n default: return reply(\"Unknown order command.\");\n }\n\n case \"customer\":\n return customer(ctx, parsed.sub);\n\n case \"moderation\":\n return moderation(ctx, parsed.sub);\n\n case \"ticket\":\n return ticketSystem(ctx, parsed.sub);\n\n case \"suggestion\":\n return suggest(ctx, parsed.sub);\n\n case \"poll\":\n return poll(ctx, parsed.sub);\n\n case \"review\":\n return review(ctx, parsed.sub);\n\n case \"promotion\":\n return promotion(ctx, parsed.sub);\n\n case \"giveaway\":\n return giveaway(ctx, parsed.sub);\n\n case \"autorole\":\n return autorole(ctx, parsed.sub);\n\n default:\n return reply(\"That command isn't implemented yet.\");\n }\n}\n\nasync function handleSetup(ctx: CmdCtx): Promise> {\n const cfg = await getConfig();\n cfg.setupAt = new Date().toISOString();\n cfg.ownerId = Deno.env.get(\"DISCORD_OWNER_ID\") ?? cfg.ownerId;\n await saveConfig(cfg);\n const field = (label: string, on: boolean) => ({\n name: `${on ? \"✅\" : \"⬜\"} ${label}`,\n value: on ? \"Enabled\" : \"Not configured\",\n inline: true,\n });\n return replyEmbed(\n UI.info({\n title: \"Server Setup Complete\",\n description: \"Re-run any time — existing configuration is preserved.\",\n fields: [\n field(\"Tickets\", cfg.systems.tickets),\n field(\"Moderation\", cfg.systems.moderation),\n field(\"Giveaways\", cfg.systems.giveaways),\n field(\"Shop\", cfg.systems.shop),\n field(\"Logs\", cfg.systems.logs),\n field(\"Welcome\", cfg.systems.welcome),\n ],\n }),\n );\n}\n\nasync function handlePanel(ctx: CmdCtx): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to open the panel.\");\n return replyEmbed(\n UI.info({\n title: \"Control Panel\",\n description: \"Systems are configured via commands. Each system adds its own panel view.\",\n fields: [\n { name: \"Shop\", value: \"/shop product-add · /order update\", inline: false },\n { name: \"Customers\", value: \"/customer view · /customer note\", inline: false },\n { name: \"Coming\", value: \"Tickets · Giveaways · Moderation · Security · Logs\", inline: false },\n ],\n }),\n );\n}\n",[],[53,246],"47dc70d5-54d5-423e-ae63-7951281d6e18","autorole.ts","dbcb207a-a232-11f1-bbc8-1607ee4eb77e",36,["D",1787847474465],"// Autorole system. Configurable, persistent (std/blob via config.ts).\n// Applies configured roles to a member with role-hierarchy + permission\n// validation. Never crashes on failure — errors are logged per role.\n//\n// NOTE: pure Discord HTTP interaction endpoints don't receive guild-member-join\n// gateway events. `/autorole test ` applies roles on demand; wiring the\n// assign-on-join trigger requires a gateway worker, which plugs into\n// `applyAutoroles(guildId, userId)` below.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { getConfig, saveConfig } from \"./config.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst DISCORD_OWNER_ID = Deno.env.get(\"DISCORD_OWNER_ID\");\n\nexport type ApplyReport = { assigned: string[]; skipped: Array<{ role: string; reason: string }> };\n\nexport async function autorole(ctx: CmdCtx, sub: string): Promise> {\n const cfg = await getConfig();\n switch (sub) {\n case \"add\": case \"remove\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only authorized staff can configure autoroles.\");\n const roleId = String(ctx.options[\"role\"] ?? \"\");\n if (!roleId) return reply(\"Please provide a role.\");\n if (sub === \"add\") {\n if (cfg.autorole.roles.includes(roleId)) return reply(\"That role is already configured.\");\n cfg.autorole.roles.push(roleId);\n } else {\n cfg.autorole.roles = cfg.autorole.roles.filter((r) => r !== roleId);\n }\n await saveConfig(cfg);\n return reply(`✅ ${sub === \"add\" ? \"Added\" : \"Removed\"} <@&${roleId}> ${sub === \"add\" ? \"to\" : \"from\"} autoroles.`);\n }\n case \"enable\": case \"disable\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only authorized staff can configure autoroles.\");\n cfg.autorole.enabled = sub === \"enable\";\n await saveConfig(cfg);\n return reply(`✅ Autorole ${sub === \"enable\" ? \"enabled\" : \"disabled\"}.`);\n }\n case \"list\": {\n const fields: EmbedField[] = cfg.autorole.roles.length\n ? cfg.autorole.roles.map((id, i) => ({ name: `#${i + 1}`, value: `<@&${id}>`, inline: true }))\n : [{ name: \"No roles\", value: \"Add with `/autorole add `\", inline: false }];\n return replyEmbed(UI.info({\n title: \"🧩 Autorole\",\n description: `Status: ${cfg.autorole.enabled ? \"🟢 Enabled\" : \"🔴 Disabled\"} · Delay: ${cfg.autorole.delay}s`,\n fields,\n }));\n }\n case \"settings\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only authorized staff can view autorole settings.\");\n return replyEmbed(UI.info({\n title: \"⚙️ Autorole Settings\",\n fields: [\n { name: \"Enabled\", value: cfg.autorole.enabled ? \"Yes\" : \"No\", inline: true },\n { name: \"Join Delay\", value: `${cfg.autorole.delay}s`, inline: true },\n { name: \"Configurable Roles\", value: cfg.autorole.roles.map((id) => `<@&${id}>`).join(\", \") || \"None\", inline: false },\n { name: \"Owner Check\", value: DISCORD_OWNER_ID ? `Bound to <@${DISCORD_OWNER_ID}>` : \"Not configured\", inline: false },\n ],\n }));\n }\n case \"test\": {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"Only authorized staff can test autoroles.\");\n const target = String(ctx.options[\"user\"] ?? \"\");\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const report = await applyAutoroles(ctx.guildId, userId);\n if (!report) return reply(\"Could not apply autoroles (missing config, token, or bot hierarchy).\");\n const skippedText = report.skipped.length\n ? report.skipped.map((s) => `<@&${s.role}> → ${s.reason}`).join(\"\\n\")\n : \"none\";\n return replyEmbed(report.assigned.length ? UI.success({\n title: \"✅ Autoroles Applied\",\n description: `<@${userId}>`,\n fields: [\n { name: \"Assigned\", value: report.assigned.map((id) => `<@&${id}>`).join(\", \") || \"—\", inline: false },\n { name: \"Skipped\", value: skippedText, inline: false },\n ],\n }) : UI.warning({\n title: \"⚠️ No Roles Assigned\",\n description: `<@${userId}>`,\n fields: [{ name: \"Skipped\", value: skippedText, inline: false }],\n }));\n }\n default:\n return reply(\"Unknown autorole command.\");\n }\n}\n\n// Apply all configured autoroles to a member with hierarchy validation.\nexport async function applyAutoroles(guildId: string, userId: string): Promise {\n const cfg = await getConfig();\n if (!cfg.autorole.enabled || !cfg.autorole.roles.length || !guildId || !userId) return null;\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token) return null;\n\n const report: ApplyReport = { assigned: [], skipped: [] };\n\n const rolesRes = await fetch(`${DISCORD_API}/guilds/${guildId}/roles`, {\n headers: { authorization: `Bot ${token}` },\n });\n if (!rolesRes.ok) return null;\n const roles = (await rolesRes.json()) as Array<{ id: string; position: number }>;\n\n // bot's own highest role position\n const meRes = await fetch(`${DISCORD_API}/users/@me`, { headers: { authorization: `Bot ${token}` } });\n const me = (await meRes.json()) as { id: string };\n const memberRes = await fetch(`${DISCORD_API}/guilds/${guildId}/members/${me.id}`, {\n headers: { authorization: `Bot ${token}` },\n });\n const botMember = memberRes.ok ? await memberRes.json() : null;\n const botRoleIds = (botMember?.roles ?? []) as string[];\n const botMax = Math.max(0, ...[...roles].filter((r) => botRoleIds.includes(r.id)).map((r) => r.position));\n\n // target member's current roles (PATCH replaces the whole list)\n const tmRes = await fetch(`${DISCORD_API}/guilds/${guildId}/members/${userId}`, {\n headers: { authorization: `Bot ${token}` },\n });\n const targetMember = tmRes.ok ? await tmRes.json() : null;\n const currentRoles = new Set(targetMember?.roles ?? []);\n\n const toAdd: string[] = [];\n for (const roleId of cfg.autorole.roles) {\n const r = roles.find((x) => x.id === roleId);\n if (!r) { report.skipped.push({ role: roleId, reason: \"role not found\" }); continue; }\n if (r.position >= botMax) { report.skipped.push({ role: roleId, reason: \"role is above or equal to the bot's highest role\" }); continue; }\n if (currentRoles.has(roleId)) continue; // already has it\n toAdd.push(roleId);\n }\n\n for (const roleId of toAdd) {\n const next = [...currentRoles, roleId];\n const res = await fetch(`${DISCORD_API}/guilds/${guildId}/members/${userId}`, {\n method: \"PATCH\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify({ roles: next }),\n });\n if (res.ok) {\n currentRoles.add(roleId);\n report.assigned.push(roleId);\n } else {\n report.skipped.push({ role: roleId, reason: `API ${res.status}` });\n }\n }\n\n return report;\n}\n",[],[53,255],"438fe6a4-2424-4e5d-9feb-81f46ecbe799",["D",1787846270953],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Modular Discord shop & community bot","imageUrl","userId","6b376f3a-5347-4c3a-b4ec-787b333560af","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a043e6-75ad-74fe-b7a7-17e3786f5114","tursoName","438fe6a424244e5d9feb81f46ecbe799","tursoHostname","438fe6a424244e5d9feb81f46ecbe799-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_318":313},"org",{"_11":12,"_312":313,"_314":313,"_272":273,"_315":316,"_317":69},"branch",{"_17":156,"_13":16,"_33":36,"_304":262,"_305":-5,"_306":-5,"_307":-5,"_308":-5,"_309":-5,"_310":14,"_311":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":262,"_13":14,"_47":418,"_264":-5,"_265":69,"_266":267,"_268":267,"_269":270,"_271":-5,"_272":273,"_274":60,"_275":63,"_276":-5,"_277":-5,"_278":44,"_279":280,"_281":282,"_283":284,"_285":419,"_287":-5,"_288":289,"_290":289,"_291":292,"_293":292,"_294":292,"_295":289,"_296":289,"_297":420,"_299":421,"_301":422,"_303":69},[349,365,370,371],"files",[349,350,351,352,353,354,355,356,357,358,359,360,361,362,363,364,365,366,367,368,369,370,371],"counts",{"_340":44,"_341":127,"_342":44,"_32":343,"_344":345},[],{"_33":34,"_35":36,"_37":38,"_13":39,"_40":41,"_42":43,"_17":44,"_45":46,"_47":338,"_49":50,"_51":-5,"_18":339},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1787846961822],[53,39],"pulls","branches","forks",{"_346":224,"_348":44},"connections",{"_346":44,"_347":44},"count","unfilledCount","emptyCount",{"_33":126,"_13":53,"_37":46,"_45":-5,"_35":36,"_49":127,"_62":63,"_47":128,"_17":44,"_42":87,"_40":-5,"_68":69,"_51":-5,"_70":416,"_18":417},{"_33":254,"_13":255,"_37":256,"_45":46,"_35":36,"_49":257,"_62":63,"_47":258,"_17":44,"_42":43,"_40":259,"_68":69,"_51":-5,"_70":414,"_18":415},{"_33":245,"_13":246,"_37":247,"_45":46,"_35":36,"_49":248,"_62":63,"_47":249,"_17":250,"_42":43,"_40":251,"_68":69,"_51":-5,"_70":412,"_18":413},{"_33":236,"_13":237,"_37":238,"_45":46,"_35":36,"_49":239,"_62":63,"_47":240,"_17":241,"_42":43,"_40":242,"_68":69,"_51":-5,"_70":410,"_18":411},{"_33":228,"_13":229,"_37":230,"_45":46,"_35":36,"_49":231,"_62":63,"_47":232,"_17":44,"_42":43,"_40":233,"_68":69,"_51":-5,"_70":408,"_18":409},{"_33":219,"_13":220,"_37":221,"_45":46,"_35":36,"_49":222,"_62":63,"_47":223,"_17":224,"_42":43,"_40":225,"_68":69,"_51":-5,"_70":406,"_18":407},{"_33":211,"_13":212,"_37":213,"_45":46,"_35":36,"_49":214,"_62":63,"_47":215,"_17":127,"_42":43,"_40":216,"_68":69,"_51":-5,"_70":404,"_18":405},{"_33":203,"_13":204,"_37":205,"_45":46,"_35":36,"_49":206,"_62":63,"_47":207,"_17":44,"_42":43,"_40":208,"_68":69,"_51":-5,"_70":402,"_18":403},{"_33":195,"_13":196,"_37":197,"_45":46,"_35":36,"_49":198,"_62":63,"_47":199,"_17":65,"_42":43,"_40":200,"_68":69,"_51":-5,"_70":400,"_18":401},{"_33":188,"_13":189,"_37":190,"_45":46,"_35":36,"_49":65,"_62":63,"_47":191,"_17":44,"_42":43,"_40":192,"_68":69,"_51":-5,"_70":398,"_18":399},{"_33":180,"_13":181,"_37":182,"_45":46,"_35":36,"_49":183,"_62":63,"_47":184,"_17":44,"_42":43,"_40":185,"_68":69,"_51":-5,"_70":396,"_18":397},{"_33":34,"_13":39,"_37":38,"_45":46,"_35":36,"_49":50,"_62":63,"_47":177,"_17":44,"_42":43,"_40":41,"_68":69,"_51":-5,"_70":394,"_18":395},{"_33":169,"_13":170,"_37":171,"_45":46,"_35":36,"_49":172,"_62":63,"_47":173,"_17":44,"_42":43,"_40":174,"_68":69,"_51":-5,"_70":392,"_18":393},{"_33":161,"_13":162,"_37":163,"_45":46,"_35":36,"_49":164,"_62":63,"_47":165,"_17":44,"_42":43,"_40":166,"_68":69,"_51":-5,"_70":390,"_18":391},{"_33":153,"_13":154,"_37":155,"_45":46,"_35":36,"_49":156,"_62":63,"_47":157,"_17":65,"_42":43,"_40":158,"_68":69,"_51":-5,"_70":388,"_18":389},{"_33":146,"_13":147,"_37":148,"_45":46,"_35":36,"_49":127,"_62":63,"_47":149,"_17":44,"_42":43,"_40":150,"_68":69,"_51":-5,"_70":386,"_18":387},{"_33":82,"_13":83,"_37":84,"_45":-5,"_35":36,"_49":85,"_62":63,"_47":86,"_17":44,"_42":87,"_40":-5,"_68":69,"_51":-5,"_70":384,"_18":385},{"_33":118,"_13":119,"_37":120,"_45":84,"_35":36,"_49":121,"_62":63,"_47":122,"_17":44,"_42":43,"_40":123,"_68":69,"_51":-5,"_70":382,"_18":383},{"_33":110,"_13":111,"_37":112,"_45":84,"_35":36,"_49":113,"_62":63,"_47":114,"_17":44,"_42":43,"_40":115,"_68":69,"_51":-5,"_70":380,"_18":381},{"_33":102,"_13":103,"_37":104,"_45":84,"_35":36,"_49":105,"_62":63,"_47":106,"_17":44,"_42":43,"_40":107,"_68":69,"_51":-5,"_70":378,"_18":379},{"_33":94,"_13":95,"_37":96,"_45":84,"_35":36,"_49":85,"_62":63,"_47":97,"_17":44,"_42":98,"_40":99,"_68":69,"_51":-5,"_70":376,"_18":377},{"_33":73,"_13":74,"_37":75,"_45":-5,"_35":36,"_49":76,"_62":63,"_47":77,"_17":78,"_42":24,"_40":79,"_68":69,"_51":-5,"_70":374,"_18":375},{"_33":58,"_13":59,"_37":60,"_45":-5,"_35":36,"_49":61,"_62":63,"_47":64,"_17":65,"_42":66,"_40":67,"_68":69,"_51":-5,"_70":372,"_18":373},[],[59],[],[74],[],[83,95],[],[83,103],[],[83,111],[],[83,119],[366,367,368,369],[83],[],[53,147],[],[53,154],[],[53,162],[],[53,170],[],[53,39],[],[53,181],[],[53,189],[],[53,196],[],[53,204],[],[53,212],[],[53,220],[],[53,229],[],[53,237],[],[53,246],[],[53,255],[350,351,352,353,354,355,356,357,358,359,360,361,362,363,364],[53],["D",1787846270953],["D",1789497078049],{"_11":12,"_318":313},{"_11":12,"_312":313,"_314":313,"_272":273,"_315":316,"_317":69},{"_17":156,"_13":16,"_33":36,"_304":262,"_305":-5,"_306":-5,"_307":-5,"_308":-5,"_309":-5,"_310":14,"_311":12},"ctx",{"_297":-5,"_335":456,"_457":458,"_459":460,"_461":69,"_462":69,"_463":69,"_464":63,"_465":-5,"_466":-7,"_467":-7,"_468":44,"_469":69,"_470":69,"_471":-5,"_472":69,"_473":69,"_474":69,"_475":-5},"ENV",{"_427":428,"_429":430,"_431":16,"_432":433,"_434":435,"_436":437,"_438":439,"_440":441,"_442":443,"_444":445,"_446":447,"_448":449,"_450":451,"_452":453,"_454":455},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]