[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_278":279,"_280":281},"routes/_app.x.$handle.$name",{"_107":106,"_38":52,"_115":97,"_33":109,"_13":14,"_116":-5,"_11":117,"_118":119,"_120":121,"_122":123,"_124":125,"_26":-5,"_126":-5,"_127":-5,"_128":31,"_129":130,"_131":66,"_132":-5,"_133":-5,"_134":135},"routes/_app.x.$handle.$name.branch.$branch.version.$version.diff",{"_11":12,"_13":14,"_15":16,"_17":18,"_19":-5},"project",{"_50":51,"_38":52,"_45":53,"_54":-5,"_55":31,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":74,"_75":76,"_77":78,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":90,"_91":92,"_93":94,"_95":31},"version",23,"changes",[25],"aiChatInfo",{"_20":21,"_22":-5,"_23":-5,"_24":-5},"userId","aiChatMessageId","9c5a4c41-6d73-4823-bb7d-3b0cf1967671","aiChatThreadId","aiChatThreadUserId","aiChatThreadTitle",{"_26":27,"_28":29,"_30":31,"_32":31,"_33":34,"_35":34},"file",{"_36":37,"_38":39,"_40":41,"_42":44,"_45":46,"_47":14,"_48":49,"_30":31},"previous",{"_36":37,"_38":39,"_40":41,"_42":43},"deleted",false,"deletedHere","path","lib/commands.ts","latestPath","fileId","1f569638-a230-11f1-bdda-1607ee4eb77e","name","commands.ts","fileType","script","content","// Slash-command registry + dispatcher.\n// Organizes commands into logical groups (shop / order / customer / …) and\n// routes interactions to the matching system module. Permission checks are\n// done server-side here via CmdCtx.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport { getConfig, saveConfig } from \"./config.ts\";\nimport { shop, type CmdCtx } from \"./shop.ts\";\nimport { buy, orderHistory, updateOrder, viewOrder } from \"./orders.ts\";\nimport { customer } from \"./customers.ts\";\n\n// ---- slash command definitions (global) ----\nconst STRING = 3, INTEGER = 4;\n\nexport const COMMANDS: Array> = [\n { name: \"ping\", description: \"Check the bot is alive and healthy.\" },\n { name: \"setup\", description: \"Run one-click server setup and show config summary.\" },\n { name: \"panel\", description: \"Open the central configuration control panel.\" },\n {\n name: \"shop\",\n description: \"Browse and buy products.\",\n options: [\n { name: \"browse\", description: \"Show all available products\", type: 1 },\n {\n name: \"view\", description: \"View one product\", type: 1,\n options: [{ type: STRING, name: \"product\", description: \"Product ID\", required: true }],\n },\n {\n name: \"buy\", description: \"Buy a product\", type: 1,\n options: [\n { type: STRING, name: \"product\", description: \"Product ID\", required: true },\n { type: INTEGER, name: \"quantity\", description: \"Quantity (default 1)\", required: false },\n ],\n },\n {\n name: \"product-add\", description: \"[Staff] Add a product\", type: 1,\n options: [\n { type: STRING, name: \"name\", description: \"Product name\", required: true },\n { type: INTEGER, name: \"price\", description: \"Price\", required: true },\n { type: INTEGER, name: \"stock\", description: \"Stock (default 1)\", required: false },\n { type: STRING, name: \"category\", description: \"Category\", required: false },\n { type: STRING, name: \"description\", description: \"Description\", required: false },\n { type: STRING, name: \"delivery\", description: \"Delivery type\", required: false },\n ],\n },\n ],\n },\n {\n name: \"order\",\n description: \"View and manage orders.\",\n options: [\n {\n name: \"view\", description: \"View an order / receipt\", type: 1,\n options: [{ type: STRING, name: \"order\", description: \"Order ID\", required: true }],\n },\n {\n name: \"history\", description: \"A customer's order history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"update\", description: \"[Staff] Update an order's status\", type: 1,\n options: [\n { type: STRING, name: \"order\", description: \"Order ID\", required: true },\n { type: STRING, name: \"status\", description: \"pending/paid/processing/completed/cancelled/refunded\", required: true },\n ],\n },\n ],\n },\n {\n name: \"customer\",\n description: \"Customer profiles.\",\n options: [\n {\n name: \"view\", description: \"View a customer profile\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"history\", description: \"A customer's full history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true }],\n },\n {\n name: \"note\", description: \"[Staff] Add a staff note\", type: 1,\n options: [\n { type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true },\n { type: STRING, name: \"note\", description: \"Note text\", required: true },\n ],\n },\n ],\n },\n];\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nexport async function registerCommands(): Promise {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n const appId = Deno.env.get(\"DISCORD_APP_ID\");\n if (!token || !appId) return;\n const res = await fetch(`${DISCORD_API}/applications/${appId}/commands`, {\n method: \"PUT\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify(COMMANDS),\n });\n if (!res.ok) console.error(\"register commands failed:\", res.status, await res.text());\n}\n\n// ---- permission helper: build a command context ----\nasync function buildCtx(interaction: any): Promise {\n const cfg = await getConfig();\n const member = interaction.member ?? {};\n const user = member.user ?? interaction.user;\n const staffRole = cfg.roles[\"staff\"];\n const isStaff =\n (user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)) ||\n Boolean(member.permissions && (BigInt(member.permissions) & 0x20n)) || // MANAGE_GUILD\n Boolean(staffRole && (member.roles ?? []).includes(staffRole));\n return {\n guildId: interaction.guild_id ?? \"\",\n userId: String(user.id ?? \"\"),\n username: user.username ?? \"Unknown\",\n isStaff,\n isOwner: Boolean(user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)),\n options: {},\n };\n}\n\n// ---- parse subcommand groups into a flat context ----\nfunction parseOptions(data: any): { group: string; sub: string; options: Record } {\n const opts = (data.options ?? []) as Array>;\n const first = opts[0];\n if (first && first.type === 1) {\n const nested: Record = {};\n for (const o of first.options ?? []) nested[o.name] = o.value;\n return { group: data.name, sub: first.name, options: nested };\n }\n const flat: Record = {};\n for (const o of opts) flat[o.name] = o.value;\n return { group: data.name, sub: \"\", options: flat };\n}\n\n// ---- route a type-2 slash interaction ----\nexport async function handleCommand(interaction: any): Promise> {\n const data = interaction.data ?? {};\n const ctx = await buildCtx(interaction);\n const parsed = parseOptions(data);\n ctx.options = parsed.options;\n\n switch (data.name) {\n case \"ping\":\n return replyEmbed(UI.success({ title: \"Pong! 🟢\", description: \"Bot is online and healthy.\" }));\n\n case \"setup\":\n return handleSetup(ctx);\n\n case \"panel\":\n return handlePanel(ctx);\n\n case \"shop\":\n if (parsed.sub === \"buy\") {\n if (!parsed.options[\"product\"]) return reply(\"Provide a product ID.\");\n return buy(ctx);\n }\n return shop(ctx, parsed.sub);\n\n case \"order\":\n switch (parsed.sub) {\n case \"view\": return viewOrder(ctx);\n case \"history\": return orderHistory(ctx);\n case \"update\": return updateOrder(ctx);\n default: return reply(\"Unknown order command.\");\n }\n\n case \"customer\":\n return customer(ctx, parsed.sub);\n\n default:\n return reply(\"That command isn't implemented yet.\");\n }\n}\n\nasync function handleSetup(ctx: CmdCtx): Promise> {\n const cfg = await getConfig();\n cfg.setupAt = new Date().toISOString();\n cfg.ownerId = Deno.env.get(\"DISCORD_OWNER_ID\") ?? cfg.ownerId;\n await saveConfig(cfg);\n const field = (label: string, on: boolean) => ({\n name: `${on ? \"✅\" : \"⬜\"} ${label}`,\n value: on ? \"Enabled\" : \"Not configured\",\n inline: true,\n });\n return replyEmbed(\n UI.info({\n title: \"Server Setup Complete\",\n description: \"Re-run any time — existing configuration is preserved.\",\n fields: [\n field(\"Tickets\", cfg.systems.tickets),\n field(\"Moderation\", cfg.systems.moderation),\n field(\"Giveaways\", cfg.systems.giveaways),\n field(\"Shop\", cfg.systems.shop),\n field(\"Logs\", cfg.systems.logs),\n field(\"Welcome\", cfg.systems.welcome),\n ],\n }),\n );\n}\n\nasync function handlePanel(ctx: CmdCtx): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to open the panel.\");\n return replyEmbed(\n UI.info({\n title: \"Control Panel\",\n description: \"Systems are configured via commands. Each system adds its own panel view.\",\n fields: [\n { name: \"Shop\", value: \"/shop product-add · /order update\", inline: false },\n { name: \"Customers\", value: \"/customer view · /customer note\", inline: false },\n { name: \"Coming\", value: \"Tickets · Giveaways · Moderation · Security · Logs\", inline: false },\n ],\n }),\n );\n}\n","// Slash-command registry + dispatcher.\n// Organizes commands into logical groups (shop / order / customer / …) and\n// routes interactions to the matching system module. Permission checks are\n// done server-side here via CmdCtx.\n\nimport { reply, replyEmbed, UI } from \"./embeds.ts\";\nimport { getConfig, saveConfig } from \"./config.ts\";\nimport { shop, type CmdCtx } from \"./shop.ts\";\nimport { buy, orderHistory, updateOrder, viewOrder } from \"./orders.ts\";\nimport { customer } from \"./customers.ts\";\nimport { moderation } from \"./moderation.ts\";\n\n// ---- slash command definitions (global) ----\nconst STRING = 3, INTEGER = 4;\n\nexport const COMMANDS: Array> = [\n { name: \"ping\", description: \"Check the bot is alive and healthy.\" },\n { name: \"setup\", description: \"Run one-click server setup and show config summary.\" },\n { name: \"panel\", description: \"Open the central configuration control panel.\" },\n {\n name: \"shop\",\n description: \"Browse and buy products.\",\n options: [\n { name: \"browse\", description: \"Show all available products\", type: 1 },\n {\n name: \"view\", description: \"View one product\", type: 1,\n options: [{ type: STRING, name: \"product\", description: \"Product ID\", required: true }],\n },\n {\n name: \"buy\", description: \"Buy a product\", type: 1,\n options: [\n { type: STRING, name: \"product\", description: \"Product ID\", required: true },\n { type: INTEGER, name: \"quantity\", description: \"Quantity (default 1)\", required: false },\n ],\n },\n {\n name: \"product-add\", description: \"[Staff] Add a product\", type: 1,\n options: [\n { type: STRING, name: \"name\", description: \"Product name\", required: true },\n { type: INTEGER, name: \"price\", description: \"Price\", required: true },\n { type: INTEGER, name: \"stock\", description: \"Stock (default 1)\", required: false },\n { type: STRING, name: \"category\", description: \"Category\", required: false },\n { type: STRING, name: \"description\", description: \"Description\", required: false },\n { type: STRING, name: \"delivery\", description: \"Delivery type\", required: false },\n ],\n },\n ],\n },\n {\n name: \"order\",\n description: \"View and manage orders.\",\n options: [\n {\n name: \"view\", description: \"View an order / receipt\", type: 1,\n options: [{ type: STRING, name: \"order\", description: \"Order ID\", required: true }],\n },\n {\n name: \"history\", description: \"A customer's order history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"update\", description: \"[Staff] Update an order's status\", type: 1,\n options: [\n { type: STRING, name: \"order\", description: \"Order ID\", required: true },\n { type: STRING, name: \"status\", description: \"pending/paid/processing/completed/cancelled/refunded\", required: true },\n ],\n },\n ],\n },\n {\n name: \"customer\",\n description: \"Customer profiles.\",\n options: [\n {\n name: \"view\", description: \"View a customer profile\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: false }],\n },\n {\n name: \"history\", description: \"A customer's full history\", type: 1,\n options: [{ type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true }],\n },\n {\n name: \"note\", description: \"[Staff] Add a staff note\", type: 1,\n options: [\n { type: STRING, name: \"customer\", description: \"User or Customer ID\", required: true },\n { type: STRING, name: \"note\", description: \"Note text\", required: true },\n ],\n },\n ],\n },\n];\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\nexport async function registerCommands(): Promise {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n const appId = Deno.env.get(\"DISCORD_APP_ID\");\n if (!token || !appId) return;\n const res = await fetch(`${DISCORD_API}/applications/${appId}/commands`, {\n method: \"PUT\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify(COMMANDS),\n });\n if (!res.ok) console.error(\"register commands failed:\", res.status, await res.text());\n}\n\n// ---- permission helper: build a command context ----\nasync function buildCtx(interaction: any): Promise {\n const cfg = await getConfig();\n const member = interaction.member ?? {};\n const user = member.user ?? interaction.user;\n const staffRole = cfg.roles[\"staff\"];\n const isStaff =\n (user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)) ||\n Boolean(member.permissions && (BigInt(member.permissions) & 0x20n)) || // MANAGE_GUILD\n Boolean(staffRole && (member.roles ?? []).includes(staffRole));\n return {\n guildId: interaction.guild_id ?? \"\",\n userId: String(user.id ?? \"\"),\n username: user.username ?? \"Unknown\",\n isStaff,\n isOwner: Boolean(user.id && Deno.env.get(\"DISCORD_OWNER_ID\") === String(user.id)),\n options: {},\n };\n}\n\n// ---- parse subcommand groups into a flat context ----\nfunction parseOptions(data: any): { group: string; sub: string; options: Record } {\n const opts = (data.options ?? []) as Array>;\n const first = opts[0];\n if (first && first.type === 1) {\n const nested: Record = {};\n for (const o of first.options ?? []) nested[o.name] = o.value;\n return { group: data.name, sub: first.name, options: nested };\n }\n const flat: Record = {};\n for (const o of opts) flat[o.name] = o.value;\n return { group: data.name, sub: \"\", options: flat };\n}\n\n// ---- route a type-2 slash interaction ----\nexport async function handleCommand(interaction: any): Promise> {\n const data = interaction.data ?? {};\n const ctx = await buildCtx(interaction);\n const parsed = parseOptions(data);\n ctx.options = parsed.options;\n\n switch (data.name) {\n case \"ping\":\n return replyEmbed(UI.success({ title: \"Pong! 🟢\", description: \"Bot is online and healthy.\" }));\n\n case \"setup\":\n return handleSetup(ctx);\n\n case \"panel\":\n return handlePanel(ctx);\n\n case \"shop\":\n if (parsed.sub === \"buy\") {\n if (!parsed.options[\"product\"]) return reply(\"Provide a product ID.\");\n return buy(ctx);\n }\n return shop(ctx, parsed.sub);\n\n case \"order\":\n switch (parsed.sub) {\n case \"view\": return viewOrder(ctx);\n case \"history\": return orderHistory(ctx);\n case \"update\": return updateOrder(ctx);\n default: return reply(\"Unknown order command.\");\n }\n\n case \"customer\":\n return customer(ctx, parsed.sub);\n\n default:\n return reply(\"That command isn't implemented yet.\");\n }\n}\n\nasync function handleSetup(ctx: CmdCtx): Promise> {\n const cfg = await getConfig();\n cfg.setupAt = new Date().toISOString();\n cfg.ownerId = Deno.env.get(\"DISCORD_OWNER_ID\") ?? cfg.ownerId;\n await saveConfig(cfg);\n const field = (label: string, on: boolean) => ({\n name: `${on ? \"✅\" : \"⬜\"} ${label}`,\n value: on ? \"Enabled\" : \"Not configured\",\n inline: true,\n });\n return replyEmbed(\n UI.info({\n title: \"Server Setup Complete\",\n description: \"Re-run any time — existing configuration is preserved.\",\n fields: [\n field(\"Tickets\", cfg.systems.tickets),\n field(\"Moderation\", cfg.systems.moderation),\n field(\"Giveaways\", cfg.systems.giveaways),\n field(\"Shop\", cfg.systems.shop),\n field(\"Logs\", cfg.systems.logs),\n field(\"Welcome\", cfg.systems.welcome),\n ],\n }),\n );\n}\n\nasync function handlePanel(ctx: CmdCtx): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to open the panel.\");\n return replyEmbed(\n UI.info({\n title: \"Control Panel\",\n description: \"Systems are configured via commands. Each system adds its own panel view.\",\n fields: [\n { name: \"Shop\", value: \"/shop product-add · /order update\", inline: false },\n { name: \"Customers\", value: \"/customer view · /customer note\", inline: false },\n { name: \"Coming\", value: \"Tickets · Giveaways · Moderation · Security · Logs\", inline: false },\n ],\n }),\n );\n}\n","createdAt",["D",1787846968313],"branchVersion","branchId","dfaf1e7a-f8eb-4419-ac1e-aa00e1193983","id","438fe6a4-2424-4e5d-9feb-81f46ecbe799","discord-shop-bot",["D",1787846270953],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","Modular Discord shop & community bot","imageUrl","6b376f3a-5347-4c3a-b4ec-787b333560af","pinnedFileId","27082d74-a230-11f1-8efc-1607ee4eb77e","pinPreview",true,"pinMigrated","screenshotVersion","likeCount",0,"orgId","01a043e6-75ad-74fe-b7a7-17e3786f5114","tursoName","438fe6a424244e5d9feb81f46ecbe799","tursoHostname","438fe6a424244e5d9feb81f46ecbe799-val-town.aws-us-east-2.turso.io","tursoMeasuredAt",["D",1789497078049],"pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_107":106,"_114":109},"org",{"_107":106,"_108":109,"_110":109,"_19":62,"_111":112,"_113":31},"branch",{"_13":96,"_38":97,"_50":49,"_98":51,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":52,"_105":106},"isOwned",61,"main","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","eixixddizca","handle","displayName","","avatar","tier","free","canRestrictVals","profileImageUrl","branchName","adoptOrgId",{"_50":51,"_38":52,"_45":273,"_54":-5,"_55":31,"_56":57,"_58":57,"_59":60,"_61":-5,"_19":62,"_63":64,"_65":66,"_67":-5,"_68":-5,"_69":70,"_71":72,"_73":74,"_75":76,"_77":274,"_79":-5,"_80":81,"_82":81,"_83":84,"_85":84,"_86":84,"_87":81,"_88":81,"_89":275,"_91":276,"_93":277,"_95":31},"tree",[174,185,186],"files",[174,175,176,177,178,179,180,181,182,183,184,185,186],"counts",{"_163":70,"_164":145,"_165":70,"_166":167,"_168":169},"contents",[136,137,138],"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},{"_50":157,"_38":158,"_36":159,"_141":-5,"_48":49,"_47":145,"_143":66,"_45":160,"_13":70,"_40":161,"_42":-5,"_30":31,"_148":-5,"_33":162},{"_50":150,"_38":151,"_36":152,"_141":-5,"_48":49,"_47":153,"_143":31,"_45":154,"_13":145,"_40":26,"_42":155,"_30":31,"_148":-5,"_33":156},{"_50":139,"_38":140,"_36":64,"_141":-5,"_48":49,"_47":142,"_143":31,"_45":144,"_13":145,"_40":146,"_42":147,"_30":31,"_148":-5,"_33":149},"4745c156-adee-41fc-a750-7c91f09192b0","main.ts","parentId",18,"latest",["D",1787846882191],1,"http","// Discord interaction HTTP endpoint.\n// 1. Verifies every request with the Ed25519 signature (lib/verify.ts).\n// 2. Answers PING so the bot shows Online.\n// 3. Routes slash commands, buttons, and modals to the system modules.\n\nimport { verifyInteractionSignature, isFresh } from \"./lib/verify.ts\";\nimport { UI } from \"./lib/embeds.ts\";\nimport { handleCommand, registerCommands } from \"./lib/commands.ts\";\nimport { initSchema } from \"./lib/db.ts\";\n\n// Idempotent schema + global slash command registration on deploy.\nawait initSchema();\ntry {\n await registerCommands();\n} catch (err) {\n console.error(\"command registration failed:\", err);\n}\n\nexport default async function handler(req: Request): Promise {\n if (req.method !== \"POST\") return new Response(\"Method not allowed\", { status: 405 });\n\n const signature = req.headers.get(\"x-signature-ed25519\") ?? \"\";\n const timestamp = req.headers.get(\"x-signature-timestamp\") ?? \"\";\n const rawBody = new Uint8Array(await req.arrayBuffer());\n\n const ok = await verifyInteractionSignature(signature, timestamp, rawBody);\n if (!ok || !isFresh(timestamp)) {\n return new Response(\"Invalid signature\", { status: 401 });\n }\n\n const interaction = JSON.parse(new TextDecoder().decode(rawBody));\n\n try {\n switch (interaction.type) {\n case 1: // PING\n return json({ type: 1 });\n\n case 2: // slash command\n return json(await handleCommand(interaction));\n\n case 3: // message component (button / select)\n return json(await handleComponent(interaction));\n\n case 5: // modal submit\n return json(await handleModal(interaction));\n\n default:\n return json({ type: 4, data: { content: \"Unsupported interaction.\", flags: 64 } });\n }\n } catch (err) {\n console.error(\"interaction error:\", err);\n return json({\n type: 4,\n data: { embeds: [UI.error({ title: \"Something went wrong\", description: \"Please try again.\" })], flags: 64 },\n });\n }\n}\n\n// Buttons / select menus land here. Each system registers its own custom_id.\nimport { handleComponent, handleModal } from \"./lib/components.ts\";\n\nfunction json(body: unknown): Response {\n return new Response(JSON.stringify(body), {\n headers: { \"content-type\": \"application/json\" },\n });\n}\n","label",[140],"935ce09b-ed6f-4023-9c06-e6c1477d0611","README.md","2d1a0520-a230-11f1-8d98-1607ee4eb77e",20,["D",1787846926932],"# Discord Shop & Community Bot\n\nModular, production-ready Discord bot for a shop / marketplace / community. Built in phases.\n\n## Status — Phase 2 (Shop + Orders + Customers) ✅\n\n- [x] Ed25519 interaction signature verification (Web Crypto, no secrets in code)\n- [x] PING handling, slash-command registry + dispatcher, unified premium embeds\n- [x] **Shop** — `/shop browse`, `/shop view`, `/shop buy`, `/shop product-add`\n- [x] **Orders** — `/order view` (receipt), `/order history`, `/order update`, statuses\n- [x] **Customers** — auto-profiles on first order, `/customer view|history|note`\n- [x] **Persistence** — SQLite (`std/sqlite`): customers, products, orders\n- [x] **Integration** — buying updates customer stats/spending/last-purchase + order notifications\n- [x] Security: server-side permission checks, ephemeral responses, parameterized SQL\n- [ ] Tickets, Giveaways, Moderation, Promotions, etc. (next phases)\n\n## Architecture\n\n```\nmain.ts HTTP endpoint — verify, PING, route commands/components/modals\nlib/verify.ts Ed25519 signature verification + freshness check\nlib/commands.ts slash-command registry + permission helper + dispatcher\nlib/components.ts button / select / modal routing (custom_id tags)\nlib/embeds.ts one shared premium embed/UI builder\nlib/config.ts persistent config (std/blob)\nlib/db.ts SQLite schema + repositories (customers/products/orders)\nlib/shop.ts product management + browsing\nlib/orders.ts buy flow, receipts, order updates\nlib/customers.ts customer profiles & history\n```\n\n## Commands\n\n| Command | Access | Purpose |\n|---|---|---|\n| `/ping` | all | health check |\n| `/setup` | all | run setup + config summary |\n| `/panel` | staff/owner | control panel |\n| `/shop browse` | all | catalogue |\n| `/shop view ` | all | product detail |\n| `/shop buy [qty]` | all | place an order |\n| `/shop product-add …` | staff | add a product |\n| `/order view ` | owner | receipt |\n| `/order history [customer]` | all | order history |\n| `/order update ` | staff | change order status |\n| `/customer view [customer]` | all | customer profile |\n| `/customer history ` | staff | full history |\n| `/customer note ` | staff | staff note |\n\n## Setup\n\n1. **Env vars** on the val:\n - `DISCORD_PUBLIC_KEY`, `DISCORD_BOT_TOKEN`, `DISCORD_APP_ID`, `DISCORD_OWNER_ID`\n2. **Interactions Endpoint URL** in the dev portal → [Try the app](url:main.ts)\n3. **Invite the bot** with Administrator perms (slash commands auto-register on deploy).\n\n> 🔴 Rotate your bot token — it was exposed in chat earlier. Secrets live only in env vars.\n",[151],"5edd3a58-a298-41fd-aaac-fdf0e377c61a","lib","0c5122a9-bcd5-498b-89dd-adb72a9f617b",["D",1787846299103],"directory",[158],"pulls","branches","forks","envVars",{"_170":172,"_173":70},"connections",{"_170":70,"_171":70},"count","unfilledCount",4,"emptyCount",{"_50":157,"_38":158,"_36":159,"_141":-5,"_48":49,"_47":145,"_143":66,"_45":270,"_13":70,"_40":161,"_42":-5,"_30":31,"_148":-5,"_188":271,"_33":272},{"_50":265,"_38":39,"_36":37,"_141":159,"_48":49,"_47":14,"_143":31,"_45":266,"_13":267,"_40":41,"_42":44,"_30":31,"_148":-5,"_188":268,"_33":269},{"_50":257,"_38":258,"_36":259,"_141":159,"_48":49,"_47":260,"_143":31,"_45":261,"_13":70,"_40":41,"_42":262,"_30":31,"_148":-5,"_188":263,"_33":264},{"_50":249,"_38":250,"_36":251,"_141":159,"_48":49,"_47":252,"_143":31,"_45":253,"_13":70,"_40":41,"_42":254,"_30":31,"_148":-5,"_188":255,"_33":256},{"_50":241,"_38":242,"_36":243,"_141":159,"_48":49,"_47":244,"_143":66,"_45":245,"_13":70,"_40":41,"_42":246,"_30":31,"_148":-5,"_188":247,"_33":248},{"_50":233,"_38":234,"_36":235,"_141":159,"_48":49,"_47":236,"_143":31,"_45":237,"_13":145,"_40":41,"_42":238,"_30":31,"_148":-5,"_188":239,"_33":240},{"_50":225,"_38":226,"_36":227,"_141":159,"_48":49,"_47":228,"_143":66,"_45":229,"_13":70,"_40":41,"_42":230,"_30":31,"_148":-5,"_188":231,"_33":232},{"_50":217,"_38":218,"_36":219,"_141":159,"_48":49,"_47":220,"_143":66,"_45":221,"_13":70,"_40":41,"_42":222,"_30":31,"_148":-5,"_188":223,"_33":224},{"_50":209,"_38":210,"_36":211,"_141":159,"_48":49,"_47":212,"_143":66,"_45":213,"_13":70,"_40":41,"_42":214,"_30":31,"_148":-5,"_188":215,"_33":216},{"_50":201,"_38":202,"_36":203,"_141":159,"_48":49,"_47":204,"_143":66,"_45":205,"_13":70,"_40":41,"_42":206,"_30":31,"_148":-5,"_188":207,"_33":208},{"_50":194,"_38":195,"_36":196,"_141":159,"_48":49,"_47":145,"_143":66,"_45":197,"_13":70,"_40":41,"_42":198,"_30":31,"_148":-5,"_188":199,"_33":200},{"_50":150,"_38":151,"_36":152,"_141":-5,"_48":49,"_47":153,"_143":31,"_45":191,"_13":145,"_40":26,"_42":155,"_30":31,"_148":-5,"_188":192,"_33":193},{"_50":139,"_38":140,"_36":64,"_141":-5,"_48":49,"_47":142,"_143":31,"_45":187,"_13":145,"_40":146,"_42":147,"_30":31,"_148":-5,"_188":189,"_33":190},["D",1787846882191],"children",[],[140],["D",1787846926932],[],[151],"e67e4209-d0fb-4ead-96f6-98b8a1a4be5a","verify.ts","1f3a06bc-a230-11f1-bdda-1607ee4eb77e",["D",1787846299103],"// Discord interaction signature verification (Ed25519), using the Web Crypto API.\n// Verifies the X-Signature-Ed25519 header over timestamp + raw request body\n// using the application's public key. No secret material lives in code.\n\nconst encoder = new TextEncoder();\n\nfunction hexToBytes(hex: string): Uint8Array {\n const out = new Uint8Array(hex.length / 2);\n for (let i = 0; i < out.length; i++) {\n out[i] = parseInt(hex.slice(i * 2, i * 2 + 2), 16);\n }\n return out;\n}\n\nexport async function verifyInteractionSignature(\n signature: string,\n timestamp: string,\n rawBody: Uint8Array,\n): Promise {\n const publicKey = Deno.env.get(\"DISCORD_PUBLIC_KEY\");\n if (!publicKey) return false;\n if (!signature || !timestamp) return false;\n\n try {\n const key = await crypto.subtle.importKey(\n \"raw\",\n hexToBytes(publicKey),\n { name: \"Ed25519\" },\n false,\n [\"verify\"],\n );\n const ts = encoder.encode(timestamp);\n const message = new Uint8Array(ts.length + rawBody.length);\n message.set(ts, 0);\n message.set(rawBody, ts.length);\n return await crypto.subtle.verify(\"Ed25519\", key, hexToBytes(signature), message);\n } catch {\n return false;\n }\n}\n\n// Small guard against clock skew so old replayed requests are rejected.\nexport function isFresh(timestampHeader: string, maxAgeMs = 300_000): boolean {\n const t = Number(timestampHeader);\n if (!Number.isFinite(t)) return false;\n return Math.abs(Date.now() / 1000 - t) < maxAgeMs / 1000;\n}\n",[],[158,195],"dde7f97b-f937-4e85-a025-fe9219cbe0c5","shop.ts","0f8cfa0c-a231-11f1-8ba1-1607ee4eb77e",10,["D",1787846702307],"// Shop system: product management + public browsing + purchase entry point.\n// Uses the shared embed builder and the SQLite product/order repos.\n// Purchase flow continues in lib/orders.ts (confirmation → order → receipt).\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport {\n createProduct,\n ensureCustomer,\n getProduct,\n listActiveProducts,\n listCategories,\n money,\n setProductStatus,\n} from \"./db.ts\";\n\nexport interface CmdCtx {\n guildId: string;\n userId: string;\n username: string;\n options: Record;\n isStaff: boolean;\n isOwner: boolean;\n}\n\n// ---- command group: /shop ----\nexport async function shop(ctx: CmdCtx, sub: string): Promise> {\n switch (sub) {\n case \"browse\":\n return shopBrowse(ctx);\n case \"view\":\n return shopView(ctx.options[\"product\"] as string);\n case \"product-add\":\n return productAdd(ctx, ctx.options as Record);\n case \"product-edit\":\n return shopView(ctx.options[\"product\"] as string);\n default:\n return shopBrowse(ctx);\n }\n}\n\nasync function shopBrowse(ctx: CmdCtx): Promise> {\n const products = await listActiveProducts();\n if (products.length === 0) {\n return replyEmbed(\n UI.info({ title: \"🛍️ Shop\", description: \"No products available yet. Staff can add them with `/shop product-add`.\" }),\n );\n }\n const fields: EmbedField[] = products.map((p) => {\n const stock = p.status === \"out_of_stock\" ? \"Out of stock\" : `${p.stock} in stock`;\n return {\n name: `${p.name} — ${money(p.price, p.currency)}`,\n value: `${p.description}\\n\\`${p.productId}\\` · ${p.category} · ${stock}`,\n inline: false,\n };\n });\n return replyEmbed(\n UI.info({\n title: \"🛍️ Shop\",\n description: \"Browse our catalogue. Buy with `/shop buy`.\",\n fields,\n }),\n );\n}\n\nasync function shopView(productId: string): Promise> {\n const p = await getProduct(productId);\n if (!p) return reply(\"That product doesn't exist.\");\n const available = p.status === \"active\" && p.stock > 0;\n return replyEmbed(\n UI.info({\n title: p.name,\n description: p.description,\n thumbnail: p.image ? { url: p.image } : undefined,\n fields: [\n { name: \"ID\", value: `\\`${p.productId}\\``, inline: true },\n { name: \"Category\", value: p.category, inline: true },\n { name: \"Price\", value: money(p.price, p.currency), inline: true },\n { name: \"Stock\", value: available ? `${p.stock}` : \"Unavailable\", inline: true },\n { name: \"Delivery\", value: p.deliveryType, inline: true },\n { name: \"Status\", value: p.status.replace(\"_\", \" \"), inline: true },\n ],\n footer: {\n text: available ? \"Ready to Buy · /shop buy\" : \"Currently unavailable\",\n },\n }),\n );\n}\n\nasync function productAdd(ctx: CmdCtx, o: Record): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to manage products.\");\n const name = String(o[\"name\"] ?? \"\").trim();\n const price = Number(o[\"price\"]);\n const stock = Math.max(0, Number(o[\"stock\"] ?? 1));\n const category = String(o[\"category\"] ?? \"General\");\n const delivery = String(o[\"delivery\"] ?? \"Manual\");\n const description = String(o[\"description\"] ?? \"\");\n const currency = \"USD\";\n if (!name || !Number.isFinite(price) || price <= 0) {\n return reply(\"Please provide a `name` and a valid `price`.\");\n }\n const p = await createProduct({\n name, description, category, price, currency, stock,\n image: null, deliveryType: delivery,\n });\n return replyEmbed(\n UI.success({\n title: \"Product Created\",\n description: `${p.name} is now **${money(p.price, p.currency)}** · Category: ${p.category}`,\n fields: [\n { name: \"ID\", value: `\\`${p.productId}\\``, inline: true },\n { name: \"Stock\", value: `${p.stock}`, inline: true },\n { name: \"Delivery\", value: p.deliveryType, inline: true },\n ],\n }),\n );\n}\n\nexport async function setStock(productId: string, stock: number): Promise {\n const p = await getProduct(productId);\n if (!p) return;\n const status = stock > 0 ? \"active\" : \"out_of_stock\";\n const now = new Date().toISOString();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: \"UPDATE products SET stock = ?, status = ?, updatedAt = ? WHERE productId = ?\",\n args: [stock, status, now, productId],\n });\n}\n",[],[158,202],"01a30cf0-db71-477c-83c7-420ff034e276","orders.ts","20fbe168-a231-11f1-a3ba-1607ee4eb77e",11,["D",1787846731533],"// Order system: buy flow, order view/history, receipts.\n// When an order is placed it also updates the customer profile, spending,\n// and last-purchase — the start of the system integration chain.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport {\n createOrder,\n ensureCustomer,\n getCustomer,\n getOrder,\n getProduct,\n listOrdersByCustomer,\n money,\n} from \"./db.ts\";\nimport { setStock } from \"./shop.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// ----- /shop buy -----\nexport async function buy(ctx: CmdCtx): Promise> {\n const productId = (ctx.options[\"product\"] as string) ?? \"\";\n const qty = Math.max(1, Math.floor(Number(ctx.options[\"quantity\"] ?? 1)));\n const product = await getProduct(productId);\n if (!product) return reply(\"That product doesn't exist.\");\n if (product.status !== \"active\" || product.stock < qty) {\n return reply(\"That product is unavailable or out of stock.\");\n }\n\n const customer = await ensureCustomer(ctx.userId, ctx.username);\n if (customer.blacklisted) {\n return reply(\"You are restricted from using the shop. Contact staff for details.\");\n }\n\n // One atomic decrement is enough for the single-customer click path.\n await setStock(product.productId, product.stock - qty);\n const order = await createOrder(customer, product, qty, null);\n\n // Integrated bookkeeping: customer profile ← this order.\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `UPDATE customers SET\n totalOrders = totalOrders + 1,\n totalSpent = totalSpent + ?,\n lastPurchase = ?,\n lastActivity = ?\n WHERE userId = ?`,\n args: [order.finalAmount, now, now, customer.userId],\n });\n await queueChannelMessage(ctx.guildId, order.orderId); // staff fulfillment channel notice\n\n return { type: 4, data: { embeds: [receiptEmbed(order)], flags: 64, content: \"✅ Order placed!\" } };\n}\n\n// ----- /order view -----\nexport async function viewOrder(ctx: CmdCtx): Promise> {\n const orderId = (ctx.options[\"order\"] as string) ?? \"\";\n const order = await getOrder(orderId.toUpperCase());\n if (!order) return reply(\"That order doesn't exist.\");\n // customers see only their own; staff/owner see any\n if (order.customerId !== ctx.userId && !ctx.isStaff && !ctx.isOwner) {\n return reply(\"You can only view your own orders.\");\n }\n return replyEmbed(receiptEmbed(order));\n}\n\n// ----- /order history -----\nexport async function orderHistory(ctx: CmdCtx): Promise> {\n const customerId = (ctx.options[\"customer\"] as string) ?? ctx.userId;\n const rows = await listOrdersByCustomer(customerId, 10);\n if (rows.length === 0) return reply(\"No orders found for this customer.\");\n const fields: EmbedField[] = rows.map((o) => ({\n name: `${o.orderId} · ${o.productName}`,\n value: `${o.quantity} × ${money(o.unitPrice, \"USD\")} = **${money(o.finalAmount, \"USD\")}** · ${o.orderStatus}`,\n inline: false,\n }));\n return replyEmbed(\n UI.info({ title: \"📜 Order History\", description: `Last ${rows.length} orders`, fields }),\n );\n}\n\n// ----- receipt (shared by /order view and purchase confirmation) -----\nimport type { OrderRow } from \"./db.ts\";\nexport function receiptEmbed(order: OrderRow) {\n const statusEmoji: Record = {\n pending: \"🕐\", payment_pending: \"💳\", paid: \"✅\", processing: \"⚙️\",\n completed: \"🏁\", cancelled: \"❌\", refunded: \"↩️\",\n };\n return UI.info({\n title: \"🧾 Receipt\",\n description: `**${order.orderId}**`,\n fields: [\n { name: \"Customer\", value: `${order.customerName}`, inline: true },\n { name: \"Product\", value: order.productName, inline: true },\n { name: \"Quantity\", value: `${order.quantity}`, inline: true },\n { name: \"Unit Price\", value: money(order.unitPrice, \"USD\"), inline: true },\n { name: \"Discount\", value: money(order.discount, \"USD\"), inline: true },\n { name: \"Total\", value: `**${money(order.finalAmount, \"USD\")}**`, inline: true },\n { name: \"Status\", value: `${statusEmoji[order.orderStatus] ?? \"🕐\"} ${order.orderStatus}`, inline: true },\n { name: \"Placed\", value: ``, inline: true },\n ],\n });\n}\n\n// ----- staff /order fulfill -----\nexport async function updateOrder(ctx: CmdCtx): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to update orders.\");\n const order = await getOrder(String(ctx.options[\"order\"] ?? \"\").toUpperCase());\n if (!order) return reply(\"That order doesn't exist.\");\n const status = String(ctx.options[\"status\"] ?? \"\");\n if (!status) return reply(\"Specify a status.\");\n const now = new Date().toISOString();\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const completedAt = [\"completed\", \"cancelled\", \"refunded\"].includes(status) ? now : order.completedAt;\n await sqlite.execute({\n sql: \"UPDATE orders SET orderStatus = ?, completedAt = ?, staffId = ? WHERE orderId = ?\",\n args: [status, completedAt, ctx.userId, order.orderId],\n });\n if (status === \"completed\") {\n await sqlite.execute({\n sql: `UPDATE customers SET completedOrders = completedOrders + 1 WHERE userId = ?`,\n args: [order.customerId],\n });\n }\n return reply(`**${order.orderId}** → \\`${status}\\``);\n}\n\n// Best-effort staff notification for new orders (uses configured channel).\nasync function queueChannelMessage(guildId: string, orderId: string): Promise {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token || !guildId) return;\n try {\n // Harness reads guild channel config from project config (added in panel phase).\n const cfg = (await import(\"./config.ts\")).getConfig;\n const c = await cfg();\n const channelId = c.channels[\"orders\"];\n if (!channelId) return;\n await fetch(`${DISCORD_API}/channels/${channelId}/messages`, {\n method: \"POST\",\n headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\" },\n body: JSON.stringify({ content: `🆕 New order \\`${orderId}\\` placed.` }),\n });\n } catch (e) {\n console.error(\"order notify failed:\", e);\n }\n}\n",[],[158,210],"08aeadff-39cc-4d28-9fda-4516327b63f0","moderation.ts","aa7bc606-a231-11f1-8a0b-1607ee4eb77e",22,["D",1787846961822],"// Moderation system: cases-backed warnings and Discord moderation actions.\n// Every action gets a Case ID (CASE-XXXXX) stored persistently. Permission\n// checks are server-side (isStaff). Respects the Discord permission hierarchy\n// via the bot's ManageGuild requirement.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { generateCode } from \"./db.ts\";\n\nconst DISCORD_API = \"https://discord.com/api/v10\";\nconst BAN = 1 << 2; // BAN_MEMBERS\nconst KICK = 1 << 1; // KICK_MEMBERS\nconst MODERATE = 1 << 40; // MODERATE_MEMBERS\n\nasync function botToken(): Promise {\n const t = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!t) throw new Error(\"Bot token not configured\");\n return t;\n}\n\nasync function createCase(c: {\n userId: string; username: string; moderatorId: string; action: string;\n reason: string; evidence?: string; duration?: number;\n}): Promise {\n const caseId = \"CASE-\" + generateCode(5);\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({\n sql: `INSERT INTO cases (caseId, userId, username, moderatorId, action, reason, evidence, duration, createdAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?)`,\n args: [caseId, c.userId, c.username, c.moderatorId, c.action, c.reason, c.evidence ?? \"\", c.duration ?? null, new Date().toISOString()],\n });\n return caseId;\n}\n\nexport async function moderation(ctx: CmdCtx, sub: string): Promise> {\n if (sub === \"cases\") return listCases(ctx);\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to moderate.\");\n\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const reason = String(ctx.options[\"reason\"] ?? \"No reason provided\");\n const username = ctx.options[\"user\"] as string ?? userId;\n\n switch (sub) {\n case \"warn\": {\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"warn\", reason });\n // add to customer reputation\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n await sqlite.execute({ sql: \"UPDATE customers SET reputation = reputation + 1 WHERE userId = ?\", args: [userId] });\n return replyEmbed(UI.warning({\n title: \"⚠️ Warning Issued\",\n description: `Case \\`${caseId}\\` · <@${userId}>`,\n fields: [{ name: \"Reason\", value: reason, inline: false }],\n }));\n }\n\n case \"ban\": {\n await guildMod(ctx, userId, KICK, `PUT /guilds/${ctx.guildId}/bans/${userId}`, { reason });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"ban\", reason });\n return replyEmbed(UI.warning({ title: \"🔨 User Banned\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"kick\": {\n await guildMod(ctx, userId, KICK, `DELETE /guilds/${ctx.guildId}/members/${userId}`, null, reason);\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"kick\", reason });\n return replyEmbed(UI.warning({ title: \"👢 User Kicked\", description: `Case \\`${caseId}\\` · <@${userId}>`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n case \"timeout\": {\n const minutes = Math.max(1, Math.floor(Number(ctx.options[\"minutes\"] ?? 60)));\n await guildMod(ctx, userId, MODERATE, `PATCH /guilds/${ctx.guildId}/members/${userId}`, {\n communication_disabled_until: new Date(Date.now() + minutes * 60000).toISOString(),\n });\n const caseId = await createCase({ userId, username, moderatorId: ctx.userId, action: \"timeout\", reason, duration: minutes });\n return replyEmbed(UI.warning({ title: \"⏱️ Timed Out\", description: `Case \\`${caseId}\\` · <@${userId}> · ${minutes}m`, fields: [{ name: \"Reason\", value: reason, inline: false }] }));\n }\n\n default:\n return reply(\"Unknown moderation command.\");\n }\n}\n\n// Perform a Discord API moderation action, with best-effort errors.\nasync function guildMod(ctx: CmdCtx, userId: string, _permBit: number, methodAndPath: string, body: Record | null, reasonText?: string): Promise {\n const token = await botToken();\n const [method, url] = methodAndPath.split(\" \");\n const res = await fetch(`${DISCORD_API}${url}`, {\n method, headers: { authorization: `Bot ${token}`, \"content-type\": \"application/json\", ...(reasonText ? { \"X-Audit-Log-Reason\": reasonText } : {}) },\n body: body ? JSON.stringify(body) : undefined,\n });\n if (!res.ok) {\n const txt = await res.text();\n console.error(\"mod action failed:\", res.status, txt);\n throw new Error(\"Discord API error: \" + res.status);\n }\n}\n\nasync function listCases(ctx: CmdCtx): Promise> {\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const target = (ctx.options[\"user\"] as string) ?? \"\";\n const userId = target.trim().replace(/[<@!>]/g, \"\");\n const res = userId\n ? await sqlite.execute({ sql: \"SELECT * FROM cases WHERE userId = ? ORDER BY createdAt DESC LIMIT 10\", args: [userId] })\n : await sqlite.execute({ sql: \"SELECT * FROM cases ORDER BY createdAt DESC LIMIT 10\" });\n const rows = res.rows as Array>;\n if (!rows.length) return reply(\"No cases found.\");\n const fields: EmbedField[] = rows.map((r) => ({\n name: `${r.caseId} · ${r.action}`,\n value: `<@${r.userId}> — ${r.reason}\\n<@${r.moderatorId}> · `,\n inline: false,\n }));\n return replyEmbed(UI.info({ title: \"🛡️ Moderation Cases\", fields }));\n}\n",[],[158,218],"e4b9b477-4fd2-4dab-8930-a53d72920a42","embeds.ts","1f433f0c-a230-11f1-bdda-1607ee4eb77e",2,["D",1787846299170],"// One consistent premium embed builder used by every system.\n// Color, icons and structure stay uniform across shop, tickets, giveaways, etc.\n\nconst ACCENT = 0x5865f2; // Discord Blurple\nconst SUCCESS = 0x57f287;\nconst WARNING = 0xfee75c;\nconst ERROR = 0xed4245;\n\nexport interface EmbedField {\n name: string;\n value: string;\n inline?: boolean;\n}\n\nexport interface Embed {\n title?: string;\n description?: string;\n color?: number;\n fields?: EmbedField[];\n thumbnail?: { url: string };\n image?: { url: string };\n footer?: { text: string; icon_url?: string };\n timestamp?: string;\n}\n\nexport function embed(opts: Embed): Embed {\n return {\n color: opts.color ?? ACCENT,\n ...opts,\n footer: opts.footer\n ? { text: opts.footer.text, ...(opts.footer.icon_url ? { icon_url: opts.footer.icon_url } : {}) }\n : { text: \"Discord Shop\" },\n timestamp: opts.timestamp ?? new Date().toISOString(),\n };\n}\n\nexport const UI = {\n success: (d: Partial

) => embed({ color: SUCCESS, ...d }),\n warning: (d: Partial

) => embed({ color: WARNING, ...d }),\n error: (d: Partial

) => embed({ color: ERROR, ...d }),\n info: (d: Partial

) => embed({ ...d }),\n};\n\n// Interaction response helpers (type 4 = channel message). flags 64 = ephemeral.\nexport function reply(content: string, ephemeral = true) {\n return { type: 4, data: { content, flags: ephemeral ? 64 : 0 } };\n}\n\nexport function replyEmbed(emb: Embed, ephemeral = true) {\n return { type: 4, data: { embeds: [emb], flags: ephemeral ? 64 : 0 } };\n}\n",[],[158,226],"4796967d-6917-44b1-bad6-cc61d010d70e","db.ts","02143ee4-a231-11f1-bd07-1607ee4eb77e",21,["D",1787846940460],"// Persistent data layer (val-scoped SQLite).\n// Schema is idempotent; every important record survives restarts.\n// All queries are parameterized.\n\nimport { sqlite } from \"https://esm.town/v/std/sqlite/main.ts\";\n\nexport type ProductStatus = \"active\" | \"out_of_stock\" | \"hidden\" | \"disabled\";\n\nexport interface ProductRow {\n id: number;\n productId: string;\n name: string;\n description: string;\n category: string;\n price: number;\n currency: string;\n stock: number;\n image: string | null;\n deliveryType: string;\n status: ProductStatus;\n createdAt: string;\n updatedAt: string;\n}\n\nexport interface CustomerRow {\n userId: string;\n username: string;\n customerId: string;\n createdAt: string;\n customerSince: string;\n totalOrders: number;\n completedOrders: number;\n cancelledOrders: number;\n refundedOrders: number;\n totalSpent: number;\n ticketsOpened: number;\n ticketsCompleted: number;\n reviewsSubmitted: number;\n avgRating: number;\n vipLevel: string;\n reputation: number;\n lastPurchase: string | null;\n lastActivity: string | null;\n verified: number;\n blacklisted: number;\n notes: string;\n}\n\nexport interface OrderRow {\n id: number;\n orderId: string;\n customerId: string;\n customerName: string;\n productId: string;\n productName: string;\n quantity: number;\n unitPrice: number;\n discount: number;\n finalAmount: number;\n paymentStatus: string;\n orderStatus: string;\n createdAt: string;\n completedAt: string | null;\n staffId: string | null;\n notes: string;\n}\n\nexport async function initSchema(): Promise {\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS customers (\n userId TEXT PRIMARY KEY,\n username TEXT,\n customerId TEXT,\n createdAt TEXT,\n customerSince TEXT,\n totalOrders INTEGER DEFAULT 0,\n completedOrders INTEGER DEFAULT 0,\n cancelledOrders INTEGER DEFAULT 0,\n refundedOrders INTEGER DEFAULT 0,\n totalSpent REAL DEFAULT 0,\n ticketsOpened INTEGER DEFAULT 0,\n ticketsCompleted INTEGER DEFAULT 0,\n reviewsSubmitted INTEGER DEFAULT 0,\n avgRating REAL DEFAULT 0,\n vipLevel TEXT DEFAULT 'Member',\n reputation INTEGER DEFAULT 0,\n lastPurchase TEXT,\n lastActivity TEXT,\n verified INTEGER DEFAULT 0,\n blacklisted INTEGER DEFAULT 0,\n notes TEXT DEFAULT ''\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS products (\n id INTEGER PRIMARY KEY,\n productId TEXT UNIQUE,\n name TEXT,\n description TEXT,\n category TEXT,\n price REAL,\n currency TEXT,\n stock INTEGER,\n image TEXT,\n deliveryType TEXT,\n status TEXT,\n createdAt TEXT,\n updatedAt TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS orders (\n id INTEGER PRIMARY KEY,\n orderId TEXT UNIQUE,\n customerId TEXT,\n customerName TEXT,\n productId TEXT,\n productName TEXT,\n quantity INTEGER,\n unitPrice REAL,\n discount REAL,\n finalAmount REAL,\n paymentStatus TEXT,\n orderStatus TEXT,\n createdAt TEXT,\n completedAt TEXT,\n staffId TEXT,\n notes TEXT\n )`);\n\n await sqlite.execute(`CREATE TABLE IF NOT EXISTS cases (\n id INTEGER PRIMARY KEY,\n caseId TEXT UNIQUE,\n userId TEXT,\n username TEXT,\n moderatorId TEXT,\n action TEXT,\n reason TEXT,\n evidence TEXT,\n duration INTEGER,\n createdAt TEXT\n )`);\n}\n\n// ----- customers -----\nexport async function ensureCustomer(userId: string, username: string): Promise {\n const existing = await getCustomer(userId);\n if (existing) return existing;\n const now = new Date().toISOString();\n const customerId = \"C-\" + generateCode(6);\n await sqlite.execute({\n sql: `INSERT INTO customers (userId, username, customerId, createdAt, customerSince)\n VALUES (?, ?, ?, ?, ?)`,\n args: [userId, username, customerId, now, now],\n });\n return (await getCustomer(userId))!;\n}\n\nexport async function getCustomer(userId: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM customers WHERE userId = ?\",\n args: [userId],\n });\n return (res.rows[0] as CustomerRow) ?? null;\n}\n\nexport async function getCustomerByCode(code: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM customers WHERE customerId = ?\",\n args: [code],\n });\n return (res.rows[0] as CustomerRow) ?? null;\n}\n\nexport async function addCustomerNote(userId: string, note: string, append = true): Promise {\n if (append) {\n const c = await getCustomer(userId);\n await sqlite.execute({\n sql: \"UPDATE customers SET notes = ?, lastActivity = ? WHERE userId = ?\",\n args: [`${c?.notes ?? \"\"}${c?.notes ? \"\\n\" : \"\"}${note}`, new Date().toISOString(), userId],\n });\n } else {\n await sqlite.execute({\n sql: \"UPDATE customers SET notes = ?, lastActivity = ? WHERE userId = ?\",\n args: [note, new Date().toISOString(), userId],\n });\n }\n}\n\n// ----- products -----\nexport async function createProduct(p: Omit): Promise {\n const productId = \"P-\" + generateCode(6);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO products (productId, name, description, category, price, currency, stock, image, deliveryType, status, createdAt, updatedAt)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'active', ?, ?)`,\n args: [productId, p.name, p.description, p.category, p.price, p.currency, p.stock, p.image, p.deliveryType, now, now],\n });\n return (await getProduct(productId))!;\n}\n\nexport async function getProduct(productId: string): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM products WHERE productId = ?\",\n args: [productId],\n });\n return (res.rows[0] as ProductRow) ?? null;\n}\n\nexport async function listActiveProducts(category?: string): Promise {\n let sql = \"SELECT * FROM products WHERE status IN ('active','out_of_stock')\";\n const args: unknown[] = [];\n if (category) {\n sql += \" AND category = ?\";\n args.push(category);\n }\n sql += \" ORDER BY id ASC\";\n const res = await sqlite.execute({ sql, args });\n return res.rows as ProductRow[];\n}\n\nexport async function listCategories(): Promise {\n const res = await sqlite.execute(\n \"SELECT DISTINCT category FROM products WHERE status IN ('active','out_of_stock')\",\n );\n return res.rows.map((r) => (r as { category: string }).category).filter(Boolean);\n}\n\nexport async function setProductStatus(productId: string, status: string): Promise {\n await sqlite.execute({\n sql: \"UPDATE products SET status = ?, updatedAt = ? WHERE productId = ?\",\n args: [status, new Date().toISOString(), productId],\n });\n}\n\n// ----- orders -----\nexport async function createOrder(customer: CustomerRow, product: ProductRow, quantity: number, staffId: string | null): Promise {\n const discount = 0; // discount engine added with VIP/promos later\n const unitPrice = product.price;\n const finalAmount = Number((unitPrice * quantity * (1 - discount)).toFixed(2));\n const orderId = \"ORDER-\" + generateCode(5);\n const now = new Date().toISOString();\n await sqlite.execute({\n sql: `INSERT INTO orders (orderId, customerId, customerName, productId, productName, quantity, unitPrice, discount, finalAmount, paymentStatus, orderStatus, createdAt, staffId, notes)\n VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, 'pending', 'pending', ?, ?, ?)`,\n args: [orderId, customer.userId, customer.username, product.productId, product.name, quantity, unitPrice, discount, finalAmount, now, staffId, \"\"],\n });\n const res = await sqlite.execute({ sql: \"SELECT * FROM orders WHERE orderId = ?\", args: [orderId] });\n return res.rows[0] as OrderRow;\n}\n\nexport async function getOrder(orderId: string): Promise {\n const res = await sqlite.execute({ sql: \"SELECT * FROM orders WHERE orderId = ?\", args: [orderId] });\n return (res.rows[0] as OrderRow) ?? null;\n}\n\nexport async function listOrdersByCustomer(customerId: string, limit = 10): Promise {\n const res = await sqlite.execute({\n sql: \"SELECT * FROM orders WHERE customerId = ? ORDER BY createdAt DESC LIMIT ?\",\n args: [customerId, limit],\n });\n return res.rows as OrderRow[];\n}\n\n// ----- helpers -----\nexport function generateCode(len: number): string {\n let n = \"\";\n for (let i = 0; i < len; i++) n += Math.floor(Math.random() * 10);\n return n;\n}\n\n/** Money display in the configured currency. */\nexport function money(n: number, currency = \"USD\"): string {\n const sym: Record = { USD: \"$\", EUR: \"€\", GBP: \"£\", JPY: \"¥\", RUB: \"₽\" };\n const s = sym[currency] ?? \"\";\n return `${s}${Number(n).toFixed(2)}`;\n}\n",[],[158,234],"1cd20d09-c79f-40cc-9ff4-88f85be90578","customers.ts","3e544958-a231-11f1-aeed-1607ee4eb77e",12,["D",1787846780787],"// Customer management system: view profile, search, history, add notes.\n// Customer profiles are auto-created on first order and carry full history.\n\nimport { reply, replyEmbed, UI, type EmbedField } from \"./embeds.ts\";\nimport type { CmdCtx } from \"./shop.ts\";\nimport { addCustomerNote, ensureCustomer, getCustomer, getCustomerByCode, listOrdersByCustomer, money } from \"./db.ts\";\n\nexport async function customer(ctx: CmdCtx, sub: string): Promise> {\n const target = (ctx.options[\"customer\"] as string) ?? ctx.userId;\n switch (sub) {\n case \"view\":\n return view(target);\n case \"history\":\n return history(target);\n case \"note\":\n return note(ctx, target, String(ctx.options[\"note\"] ?? \"\"));\n case \"stats\":\n return view(target);\n default:\n return view(target);\n }\n}\n\nasync function resolve(target: string) {\n // accept either @mention/user id or C-XXXXXX customer code\n const cleaned = target.trim().replace(/[<@!>]/g, \"\");\n if (/^C-\\d+$/i.test(cleaned)) {\n const byCode = await getCustomerByCode(cleaned.toUpperCase());\n if (byCode) return byCode;\n }\n return getCustomer(cleaned);\n}\n\nasync function view(target: string): Promise> {\n const c = await resolve(target);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n const fields: EmbedField[] = [\n { name: \"Customer ID\", value: `\\`${c.customerId}\\``, inline: true },\n { name: \"User\", value: `<@${c.userId}>`, inline: true },\n { name: \"VIP Level\", value: c.vipLevel, inline: true },\n { name: \"Total Orders\", value: `${c.totalOrders}`, inline: true },\n { name: \"Completed\", value: `${c.completedOrders}`, inline: true },\n { name: \"Cancelled\", value: `${c.cancelledOrders}`, inline: true },\n { name: \"Refunded\", value: `${c.refundedOrders}`, inline: true },\n { name: \"Total Spent\", value: money(c.totalSpent, \"USD\"), inline: true },\n { name: \"Avg Order\", value: c.totalOrders ? money(c.totalSpent / c.totalOrders, \"USD\") : \"—\", inline: true },\n { name: \"Tickets\", value: `${c.ticketsOpened}`, inline: true },\n { name: \"Reviews\", value: `${c.reviewsSubmitted}`, inline: true },\n { name: \"Reputation\", value: `${c.reputation}`, inline: true },\n { name: \"Last Purchase\", value: c.lastPurchase ? `` : \"—\", inline: true },\n ];\n if (c.blacklisted) fields.push({ name: \"⚠️ Status\", value: \"Blacklisted\", inline: true });\n return replyEmbed(\n UI.info({\n title: `👤 ${c.username}'s Profile`,\n description: `Member since `,\n fields,\n }),\n );\n}\n\nasync function history(target: string): Promise> {\n const c = await resolve(target);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n const orders = await listOrdersByCustomer(c.userId, 5);\n const orderField = orders.length\n ? orders.map((o) => `${o.orderId} · ${o.productName} · **${money(o.finalAmount, \"USD\")}** · ${o.orderStatus}`).join(\"\\n\")\n : \"No orders yet.\";\n return replyEmbed(\n UI.info({\n title: `📜 ${c.username}'s History`,\n fields: [{ name: \"Orders\", value: orderField, inline: false }],\n }),\n );\n}\n\nasync function note(ctx: CmdCtx, target: string, note: string): Promise> {\n if (!ctx.isStaff && !ctx.isOwner) return reply(\"You don't have permission to add customer notes.\");\n if (!note) return reply(\"Provide a note to add.\");\n const { sqlite } = await import(\"https://esm.town/v/std/sqlite/main.ts\");\n const cleaned = target.trim().replace(/[<@!>]/g, \"\");\n const c = await getCustomer(cleaned);\n if (!c) return reply(\"No customer profile found for that user yet.\");\n await addCustomerNote(c.userId, `[${ctx.username}] ${note}`);\n return reply(\"✅ Customer note added.\");\n}\n",[],[158,242],"9310dfe3-559c-4a44-9ed3-4b149658521f","config.ts","1f4dccf6-a230-11f1-bdda-1607ee4eb77e",3,["D",1787846299240],"// Persistent, project-scoped configuration via std/blob.\n// Every system reads/writes config through here so the future web dashboard\n// and the bot share the exact same store.\n\nimport { blob } from \"https://esm.town/v/std/blob/main.ts\";\n\nexport interface GuildConfig {\n setupAt: string | null;\n systems: {\n tickets: boolean;\n moderation: boolean;\n giveaways: boolean;\n shop: boolean;\n logs: boolean;\n welcome: boolean;\n };\n ownerId: string | null;\n // channel/role ids get added as each system is built:\n channels: Record;\n roles: Record;\n settings: Record;\n}\n\nexport function defaultConfig(): GuildConfig {\n return {\n setupAt: null,\n systems: {\n tickets: false,\n moderation: false,\n giveaways: false,\n shop: false,\n logs: false,\n welcome: false,\n },\n ownerId: null,\n channels: {},\n roles: {},\n settings: {},\n };\n}\n\nconst KEY = \"guild:config\";\n\nexport async function getConfig(): Promise {\n const existing = await blob.getJSON(KEY);\n return { ...defaultConfig(), ...(existing ?? {}) };\n}\n\nexport async function saveConfig(cfg: GuildConfig): Promise {\n await blob.setJSON(KEY, cfg);\n}\n",[],[158,250],"2a5ecc62-d47c-4940-969f-a46e1ef0ca04","components.ts","873c3afe-a231-11f1-8ba1-1607ee4eb77e",19,["D",1787846903105],"// Component (button / select menu / modal) routing.\n// Every button/select carries a custom_id that begins with a system tag\n// (e.g. \"shop:buy:P-123456\"). Each system exports its own handler.\n// This keeps one entry point while letting systems grow independently.\n\nimport { reply } from \"./embeds.ts\";\n\ntype ComponentCtx = {\n userId: string;\n guildId: string;\n customId: string;\n [k: string]: unknown;\n};\n\nexport async function handleComponent(interaction: any): Promise> {\n const customId: string = interaction.data?.custom_id ?? \"\";\n const ctx: ComponentCtx = {\n userId: String(interaction.member?.user?.id ?? interaction.user?.id ?? \"\"),\n guildId: String(interaction.guild_id ?? \"\"),\n customId,\n };\n\n const [tag] = customId.split(\":\");\n switch (tag) {\n case \"shop\":\n return handleShopButton(ctx);\n case \"order\":\n return handleOrderButton(ctx);\n default:\n return reply(\"This button isn't wired up yet.\");\n }\n}\n\nexport async function handleModal(interaction: any): Promise> {\n const customId: string = interaction.data?.custom_id ?? \"\";\n const fields: Record = {};\n for (const row of interaction.data?.components ?? []) {\n for (const comp of row.components ?? []) {\n fields[comp.custom_id] = comp.value ?? \"\";\n }\n }\n const [tag] = customId.split(\":\");\n switch (tag) {\n default:\n return reply(\"This form isn't wired up yet.\");\n }\n}\n\n// ---- shop buttons ----\nasync function handleShopButton(ctx: ComponentCtx): Promise> {\n const [, action] = ctx.customId.split(\":\");\n switch (action) {\n case \"checkstock\":\n return reply(\"Stock check coming with the interactive product embeds.\");\n default:\n return reply(\"Unknown shop button.\");\n }\n}\n\n// ---- order buttons ----\nasync function handleOrderButton(ctx: ComponentCtx): Promise> {\n return reply(\"Order actions coming with the interactive order embeds.\");\n}\n",[],[158,258],"d93b12d8-04f3-48a5-a4d0-4dd74fa06a49",["D",1787846968313],8,[],[158,39],["D",1787846299103],[175,176,177,178,179,180,181,182,183,184],[158],["D",1787846270953],["D",1789497078049],{"_107":106,"_114":109},{"_107":106,"_108":109,"_110":109,"_19":62,"_111":112,"_113":31},{"_13":96,"_38":97,"_50":49,"_98":51,"_99":-5,"_100":-5,"_101":-5,"_102":-5,"_103":-5,"_104":52,"_105":106},"ctx",{"_89":-5,"_133":311,"_312":313,"_314":315,"_316":31,"_317":31,"_318":31,"_319":66,"_320":-5,"_321":-7,"_322":-7,"_323":70,"_324":31,"_325":31,"_326":-5,"_327":31,"_328":31,"_329":31,"_330":-5},"ENV",{"_282":283,"_284":285,"_286":97,"_287":288,"_289":290,"_291":292,"_293":294,"_295":296,"_297":298,"_299":300,"_301":302,"_303":304,"_305":306,"_307":308,"_309":310},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","e87eb04e707cf64e7e532c8e8ec395f209e17f15","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"]

Diff · v23