([\\s\\S]*?)<\\/title>/)?.[1]?.replaceAll(\"&\", \"&\");\n const link = entry.match(/<link[^>]+href=\"([^\"]+)\"/)?.[1];\n if (!published || !title || !link || new Date(published) <= since) continue;\n if (!/zombie stage|zomst|round/i.test(title)) continue;\n\n await fetch(`https://discord.com/api/v10/channels/${CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { \"Authorization\": `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `🧟‍♀️ **NEW VIVINOS ZOMBIE STAGE UPLOAD!**\\n${title}\\n${link}` }),\n });\n }\n}\n","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":88,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_67":89,"_18":90},{"_33":78,"_13":79,"_35":80,"_37":-5,"_38":39,"_40":81,"_42":43,"_44":82,"_17":83,"_47":84,"_49":85,"_51":52,"_53":-5,"_67":86,"_18":87},{"_33":70,"_13":71,"_35":72,"_37":-5,"_38":39,"_40":64,"_42":43,"_44":73,"_17":74,"_47":65,"_49":75,"_51":52,"_53":-5,"_67":76,"_18":77},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":64,"_47":65,"_49":66,"_51":52,"_53":-5,"_67":68,"_18":69},"5e73d2d3-910b-4375-af8f-d27fa032cf42","register_announce.ts","faee8cce-9e38-11f1-af62-1607ee4eb77e",16,["D",1787481289819],3,"script","const DISCORD_API = \"https://discord.com/api/v10\";\nconst APPLICATION_ID = \"1540693340255821874\";\nconst STAFF_CMDS_CHANNEL_ID = \"1527979768245387354\";\n\nexport default async function () {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token) throw new Error(\"DISCORD_BOT_TOKEN is not configured\");\n\n // Get the guild ID from the staff-cmds channel, then register the commands\n // as guild commands so they appear immediately in that Discord server.\n const channelResponse = await fetch(`${DISCORD_API}/channels/${STAFF_CMDS_CHANNEL_ID}`, {\n headers: { Authorization: `Bot ${token}` },\n });\n if (!channelResponse.ok) {\n throw new Error(`Could not read staff channel (${channelResponse.status})`);\n }\n const channel = await channelResponse.json();\n const guildId = channel.guild_id;\n if (!guildId) throw new Error(\"Staff channel is not part of a guild\");\n\n const commands = [\n {\n name: \"announce\",\n description: \"Send an announcement to #announcement.\",\n default_member_permissions: \"8192\",\n dm_permission: false,\n options: [{ name: \"message\", description: \"The announcement to send\", type: 3, required: true }],\n },\n {\n name: \"announcementsecond\",\n description: \"Send a text-only announcement from #staff-cmds.\",\n default_member_permissions: \"8192\",\n dm_permission: false,\n options: [{ name: \"message\", description: \"The announcement to send\", type: 3, required: true }],\n },\n ];\n\n const response = await fetch(`${DISCORD_API}/applications/${APPLICATION_ID}/guilds/${guildId}/commands`, {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n });\n\n const text = await response.text();\n if (!response.ok) throw new Error(`Discord registration failed (${response.status}): ${text}`);\n return text;\n}\n","children",[],[60],"7758bbf7-ed2e-499c-b958-12420bcc4018","post_merch.ts","94840642-9e30-11f1-98be-1607ee4eb77e",["D",1787406691234],0,"const CHANNEL_ID = \"1527963441330127018\";\nconst token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\nif (!token) throw new Error(\"Missing DISCORD_BOT_TOKEN environment variable.\");\n\nconst message = `🛍️ **NEW ALIEN STAGE MERCH!**\\n\\nALIEN STAGE Nendoroid Plus acrylic magnets — Mizi, Sua, Till, Ivan, Luka & Hyuna (6-piece set).\\n\\nOfficial listing: https://www.goodsmile.com/ja/product/1142562/ALIEN%2BSTAGE%2B%E3%81%AD%E3%82%93%E3%81%A9%E3%82%8D%E3%81%84%E3%81%A9%2B%E3%81%B7%E3%82%89%E3%81%99%2B%E3%82%A2%E3%82%AF%E3%83%AA%E3%83%AB%E3%83%9E%E3%82%B0%E3%83%8D%E3%83%83%E3%83%88%2B%E3%83%9F%E3%82%B8%2B%E3%82%B9%E3%82%A2%2B%E3%83%86%E3%82%A3%E3%83%AB%2B%E3%82%A4%E3%83%B4%E3%82%A1%E3%83%B3%2B%E3%83%AB%E3%82%AB%2B%E3%83%92%E3%83%A7%E3%83%8A%2B6%E7%A8%AE%E3%82%BB%E3%83%83%E3%83%88\\n\\n©2026 VIVINOS`;\n\nconst res = await fetch(`https://discord.com/api/v10/channels/${CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: message }),\n});\nif (!res.ok) throw new Error(`Discord API ${res.status}: ${await res.text()}`);\nconsole.log(\"Merch announcement posted.\");",[],[71],"0de3976b-60ab-4282-8ee8-d1fa6ec3b861","announce_command.ts","ef9b2fc2-9e37-11f1-bbb5-1607ee4eb77e",15,["D",1787481237075],8,"http","const ANNOUNCEMENT_CHANNEL_ID = \"1527801808242737173\";\nconst STAFF_CMDS_CHANNEL_ID = \"1527979768245387354\";\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// Discord sends slash commands as signed interactions.\n// This endpoint verifies the signature before doing anything.\nasync function verifyDiscordRequest(req: Request, publicKeyHex: string): Promise<Uint8Array> {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n if (!signature || !timestamp) throw new Error(\"Missing Discord signature\");\n\n const body = await req.clone().text();\n const hexToBytes = (hex: string) => new Uint8Array(hex.match(/.{1,2}/g)!.map((b) => parseInt(b, 16)));\n const key = await crypto.subtle.importKey(\n \"raw\",\n hexToBytes(publicKeyHex),\n { name: \"Ed25519\" },\n false,\n [\"verify\"],\n );\n const valid = await crypto.subtle.verify(\n \"Ed25519\",\n key,\n hexToBytes(signature),\n new TextEncoder().encode(timestamp + body),\n );\n if (!valid) throw new Error(\"Invalid Discord signature\");\n return new TextEncoder().encode(body);\n}\n\nexport default async function (req: Request): Promise<Response> {\n if (req.method !== \"POST\") return new Response(\"POST only\", { status: 405 });\n\n const publicKey = Deno.env.get(\"DISCORD_PUBLIC_KEY\");\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!publicKey || !token) return new Response(\"Discord bot is not configured.\", { status: 500 });\n\n let bodyText: string;\n try {\n bodyText = new TextDecoder().decode(await verifyDiscordRequest(req, publicKey));\n } catch {\n return new Response(\"Invalid Discord interaction.\", { status: 401 });\n }\n\n const body = JSON.parse(bodyText);\n\n // Discord's PING handshake.\n if (body.type === 1) return Response.json({ type: 1 });\n\n if (body.type !== 2 || ![\"announce\", \"announcementsecond\"].includes(body.data?.name)) {\n return Response.json({ type: 4, data: { content: \"Unknown command.\", flags: 64 } });\n }\n\n const commandName = body.data.name;\n\n // /announce is used in #announcement; /announcementsecond is used only in #staff-cmds.\n if (commandName === \"announce\" && body.channel_id !== ANNOUNCEMENT_CHANNEL_ID) {\n return Response.json({\n type: 4,\n data: { content: \"Use this command in #announcement.\", flags: 64 },\n });\n }\n\n if (commandName === \"announcementsecond\") {\n const channelResponse = await fetch(`${DISCORD_API}/channels/${body.channel_id}`, {\n headers: { Authorization: `Bot ${token}` },\n });\n const channel = channelResponse.ok ? await channelResponse.json() : null;\n if (body.channel_id !== STAFF_CMDS_CHANNEL_ID) {\n return Response.json({\n type: 4,\n data: { content: \"Use /announcementsecond only in #staff-cmds.\", flags: 64 },\n });\n }\n }\n\n // Staff-only: require Manage Messages permission.\n // This is checked server-side, so hiding the command in Discord is not the only protection.\n const permissions = BigInt(body.member?.permissions ?? \"0\");\n const MANAGE_MESSAGES = 1n << 13n;\n if ((permissions & MANAGE_MESSAGES) === 0n) {\n return Response.json({\n type: 4,\n data: { content: \"You need staff permissions to use this command.\", flags: 64 },\n });\n }\n\n const option = body.data.options?.find((o: { name: string }) => o.name === \"message\");\n const message = typeof option?.value === \"string\" ? option.value.trim() : \"\";\n if (!message) {\n return Response.json({\n type: 4,\n data: { content: \"Please provide an announcement message.\", flags: 64 },\n });\n }\n\n const response = await fetch(`${DISCORD_API}/channels/${ANNOUNCEMENT_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `📢 **Announcement**\\n${message}` }),\n });\n\n if (!response.ok) {\n return Response.json({\n type: 4,\n data: { content: \"I couldn't send the announcement.\", flags: 64 },\n });\n }\n\n // No username/trigger information is included in the public announcement.\n return Response.json({\n type: 4,\n data: { content: \"Announcement sent!\", flags: 64 },\n });\n}\n",[],[79],["D",1787406349359],[],[19],"7d7b2631-c7b2-4371-89b8-09e31ea339be",["D",1787405351211],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","VIVINOS announcement bot — no commands","imageUrl","userId","f64e871c-3555-40fa-bb56-8bbf3860f05a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a024fc-52ba-70fc-96f1-cde7debb30c3","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_145":141},"org",{"_11":12,"_138":139,"_140":141,"_101":102,"_142":143,"_144":52},"branch",{"_17":62,"_13":16,"_33":39,"_130":91,"_131":-5,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":14,"_137":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Minseo Yahh","avatar","https://lh3.googleusercontent.com/a/ACg8ocLF1l4QIByz6TNGmu_8CSLEccNZU3NukCYOssh2jmgxt4uEdg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":91,"_13":14,"_44":188,"_93":-5,"_94":52,"_95":96,"_97":96,"_98":99,"_100":-5,"_101":102,"_103":80,"_104":43,"_105":-5,"_106":-5,"_107":74,"_108":109,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":189,"_125":190,"_127":191,"_129":52},[176,177,178,179],"files",[176,177,178,179],"counts",{"_167":74,"_168":46,"_169":74,"_32":170,"_171":172},[],{"_33":34,"_38":39,"_35":36,"_13":19,"_49":50,"_47":48,"_17":46,"_37":-5,"_44":165,"_40":41,"_53":-5,"_18":166},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1787406349359],[19],"pulls","branches","forks",{"_173":74,"_175":74},"connections",{"_173":74,"_174":74},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":88,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_67":186,"_18":187},{"_33":78,"_13":79,"_35":80,"_37":-5,"_38":39,"_40":81,"_42":43,"_44":82,"_17":83,"_47":84,"_49":85,"_51":52,"_53":-5,"_67":184,"_18":185},{"_33":70,"_13":71,"_35":72,"_37":-5,"_38":39,"_40":64,"_42":43,"_44":73,"_17":74,"_47":65,"_49":75,"_51":52,"_53":-5,"_67":182,"_18":183},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":64,"_47":65,"_49":66,"_51":52,"_53":-5,"_67":180,"_18":181},[],[60],[],[71],[],[79],[],[19],["D",1787405351211],{"_11":12,"_145":141},{"_11":12,"_138":139,"_140":141,"_101":102,"_142":143,"_144":52},{"_17":62,"_13":16,"_33":39,"_130":91,"_131":-5,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":14,"_137":12},"ctx",{"_123":-5,"_162":225,"_226":227,"_228":229,"_230":52,"_231":52,"_232":52,"_233":43,"_234":-5,"_235":-7,"_236":-7,"_237":74,"_238":52,"_239":52,"_240":-5,"_241":52,"_242":52,"_243":52,"_244":-5},"ENV",{"_196":197,"_198":199,"_200":16,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>

[{"_1":2,"_3":-5,"_4":-5},"loaderData",{"_5":6,"_7":8,"_9":10},"actionData","errors","root",{"_192":193,"_194":195},"routes/_app.x.$handle.$name",{"_11":12,"_13":14,"_15":16,"_18":19,"_17":-7,"_146":-5,"_20":147,"_22":148,"_149":150,"_151":152,"_26":153,"_24":154,"_155":-5,"_156":-5,"_157":52,"_158":159,"_160":43,"_161":-5,"_162":-5,"_163":164},"routes/_app.x.$handle.$name.branch.$branch.code.$",{"_11":12,"_13":14,"_15":16,"_17":-7,"_18":19,"_20":21,"_22":23,"_24":25,"_26":27,"_28":-5,"_29":-5,"_30":-5,"_31":-5,"_32":-5},"handle","minseoyahh","name","discordbot","branchName","main","version","path","announce.ts","project",{"_33":91,"_13":14,"_44":92,"_93":-5,"_94":52,"_95":96,"_97":96,"_98":99,"_100":-5,"_101":102,"_103":80,"_104":43,"_105":-5,"_106":-5,"_107":74,"_108":109,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":124,"_125":126,"_127":128,"_129":52},"tree",[55,56,57,58],"file",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":45,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_18":54},"contents",[],"upstream","pull","ahead","behind","envVars","id","e966c475-7c9f-43af-aded-75768947dfcc","fileId","75d28726-9e2d-11f1-8795-1607ee4eb77e","parentId","branchId","9c9a892e-4a74-4203-a387-4da61488be21","branchVersion",2,"latest",true,"createdAt",["D",1787406349359],1,"fileType","interval","content","// VIVINOS announcement bot — automatic announcements only, no commands.\nconst CHANNEL_ID = \"1527963441330127018\"; // #offical alnst merch\nconst YOUTUBE_RSS = \"https://www.youtube.com/feeds/videos.xml?channel_id=UCwePpiwZ5W4u2gHh7J8m4xw\";\n\nexport default async function (interval: Interval) {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token) throw new Error(\"Missing DISCORD_BOT_TOKEN environment variable.\");\n\n // Official-source polling is intentionally link-only: the bot announces new posts/videos\n // instead of copying copyrighted media into Discord.\n const since = interval.lastRunAt ?? new Date(Date.now() - 24 * 60 * 60 * 1000);\n const xml = await (await fetch(YOUTUBE_RSS)).text();\n const entries = [...xml.matchAll(/([\\s\\S]*?)<\\/entry>/g)].map(m => m[1]);\n\n for (const entry of entries.reverse()) {\n const published = entry.match(/(.*?)<\\/published>/)?.[1];\n const title = entry.match(/([\\s\\S]*?)<\\/title>/)?.[1]?.replaceAll(\"&\", \"&\");\n const link = entry.match(/<link[^>]+href=\"([^\"]+)\"/)?.[1];\n if (!published || !title || !link || new Date(published) <= since) continue;\n if (!/zombie stage|zomst|round/i.test(title)) continue;\n\n await fetch(`https://discord.com/api/v10/channels/${CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { \"Authorization\": `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `🧟‍♀️ **NEW VIVINOS ZOMBIE STAGE UPLOAD!**\\n${title}\\n${link}` }),\n });\n }\n}\n","deleted",false,"label",[19],{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":88,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_67":89,"_18":90},{"_33":78,"_13":79,"_35":80,"_37":-5,"_38":39,"_40":81,"_42":43,"_44":82,"_17":83,"_47":84,"_49":85,"_51":52,"_53":-5,"_67":86,"_18":87},{"_33":70,"_13":71,"_35":72,"_37":-5,"_38":39,"_40":64,"_42":43,"_44":73,"_17":74,"_47":65,"_49":75,"_51":52,"_53":-5,"_67":76,"_18":77},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":64,"_47":65,"_49":66,"_51":52,"_53":-5,"_67":68,"_18":69},"5e73d2d3-910b-4375-af8f-d27fa032cf42","register_announce.ts","faee8cce-9e38-11f1-af62-1607ee4eb77e",16,["D",1787481289819],3,"script","const DISCORD_API = \"https://discord.com/api/v10\";\nconst APPLICATION_ID = \"1540693340255821874\";\nconst STAFF_CMDS_CHANNEL_ID = \"1527979768245387354\";\n\nexport default async function () {\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!token) throw new Error(\"DISCORD_BOT_TOKEN is not configured\");\n\n // Get the guild ID from the staff-cmds channel, then register the commands\n // as guild commands so they appear immediately in that Discord server.\n const channelResponse = await fetch(`${DISCORD_API}/channels/${STAFF_CMDS_CHANNEL_ID}`, {\n headers: { Authorization: `Bot ${token}` },\n });\n if (!channelResponse.ok) {\n throw new Error(`Could not read staff channel (${channelResponse.status})`);\n }\n const channel = await channelResponse.json();\n const guildId = channel.guild_id;\n if (!guildId) throw new Error(\"Staff channel is not part of a guild\");\n\n const commands = [\n {\n name: \"announce\",\n description: \"Send an announcement to #announcement.\",\n default_member_permissions: \"8192\",\n dm_permission: false,\n options: [{ name: \"message\", description: \"The announcement to send\", type: 3, required: true }],\n },\n {\n name: \"announcementsecond\",\n description: \"Send a text-only announcement from #staff-cmds.\",\n default_member_permissions: \"8192\",\n dm_permission: false,\n options: [{ name: \"message\", description: \"The announcement to send\", type: 3, required: true }],\n },\n ];\n\n const response = await fetch(`${DISCORD_API}/applications/${APPLICATION_ID}/guilds/${guildId}/commands`, {\n method: \"PUT\",\n headers: {\n Authorization: `Bot ${token}`,\n \"Content-Type\": \"application/json\",\n },\n body: JSON.stringify(commands),\n });\n\n const text = await response.text();\n if (!response.ok) throw new Error(`Discord registration failed (${response.status}): ${text}`);\n return text;\n}\n","children",[],[60],"7758bbf7-ed2e-499c-b958-12420bcc4018","post_merch.ts","94840642-9e30-11f1-98be-1607ee4eb77e",["D",1787406691234],0,"const CHANNEL_ID = \"1527963441330127018\";\nconst token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\nif (!token) throw new Error(\"Missing DISCORD_BOT_TOKEN environment variable.\");\n\nconst message = `🛍️ **NEW ALIEN STAGE MERCH!**\\n\\nALIEN STAGE Nendoroid Plus acrylic magnets — Mizi, Sua, Till, Ivan, Luka & Hyuna (6-piece set).\\n\\nOfficial listing: https://www.goodsmile.com/ja/product/1142562/ALIEN%2BSTAGE%2B%E3%81%AD%E3%82%93%E3%81%A9%E3%82%8D%E3%81%84%E3%81%A9%2B%E3%81%B7%E3%82%89%E3%81%99%2B%E3%82%A2%E3%82%AF%E3%83%AA%E3%83%AB%E3%83%9E%E3%82%B0%E3%83%8D%E3%83%83%E3%83%88%2B%E3%83%9F%E3%82%B8%2B%E3%82%B9%E3%82%A2%2B%E3%83%86%E3%82%A3%E3%83%AB%2B%E3%82%A4%E3%83%B4%E3%82%A1%E3%83%B3%2B%E3%83%AB%E3%82%AB%2B%E3%83%92%E3%83%A7%E3%83%8A%2B6%E7%A8%AE%E3%82%BB%E3%83%83%E3%83%88\\n\\n©2026 VIVINOS`;\n\nconst res = await fetch(`https://discord.com/api/v10/channels/${CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: message }),\n});\nif (!res.ok) throw new Error(`Discord API ${res.status}: ${await res.text()}`);\nconsole.log(\"Merch announcement posted.\");",[],[71],"0de3976b-60ab-4282-8ee8-d1fa6ec3b861","announce_command.ts","ef9b2fc2-9e37-11f1-bbb5-1607ee4eb77e",15,["D",1787481237075],8,"http","const ANNOUNCEMENT_CHANNEL_ID = \"1527801808242737173\";\nconst STAFF_CMDS_CHANNEL_ID = \"1527979768245387354\";\nconst DISCORD_API = \"https://discord.com/api/v10\";\n\n// Discord sends slash commands as signed interactions.\n// This endpoint verifies the signature before doing anything.\nasync function verifyDiscordRequest(req: Request, publicKeyHex: string): Promise<Uint8Array> {\n const signature = req.headers.get(\"X-Signature-Ed25519\");\n const timestamp = req.headers.get(\"X-Signature-Timestamp\");\n if (!signature || !timestamp) throw new Error(\"Missing Discord signature\");\n\n const body = await req.clone().text();\n const hexToBytes = (hex: string) => new Uint8Array(hex.match(/.{1,2}/g)!.map((b) => parseInt(b, 16)));\n const key = await crypto.subtle.importKey(\n \"raw\",\n hexToBytes(publicKeyHex),\n { name: \"Ed25519\" },\n false,\n [\"verify\"],\n );\n const valid = await crypto.subtle.verify(\n \"Ed25519\",\n key,\n hexToBytes(signature),\n new TextEncoder().encode(timestamp + body),\n );\n if (!valid) throw new Error(\"Invalid Discord signature\");\n return new TextEncoder().encode(body);\n}\n\nexport default async function (req: Request): Promise<Response> {\n if (req.method !== \"POST\") return new Response(\"POST only\", { status: 405 });\n\n const publicKey = Deno.env.get(\"DISCORD_PUBLIC_KEY\");\n const token = Deno.env.get(\"DISCORD_BOT_TOKEN\");\n if (!publicKey || !token) return new Response(\"Discord bot is not configured.\", { status: 500 });\n\n let bodyText: string;\n try {\n bodyText = new TextDecoder().decode(await verifyDiscordRequest(req, publicKey));\n } catch {\n return new Response(\"Invalid Discord interaction.\", { status: 401 });\n }\n\n const body = JSON.parse(bodyText);\n\n // Discord's PING handshake.\n if (body.type === 1) return Response.json({ type: 1 });\n\n if (body.type !== 2 || ![\"announce\", \"announcementsecond\"].includes(body.data?.name)) {\n return Response.json({ type: 4, data: { content: \"Unknown command.\", flags: 64 } });\n }\n\n const commandName = body.data.name;\n\n // /announce is used in #announcement; /announcementsecond is used only in #staff-cmds.\n if (commandName === \"announce\" && body.channel_id !== ANNOUNCEMENT_CHANNEL_ID) {\n return Response.json({\n type: 4,\n data: { content: \"Use this command in #announcement.\", flags: 64 },\n });\n }\n\n if (commandName === \"announcementsecond\") {\n const channelResponse = await fetch(`${DISCORD_API}/channels/${body.channel_id}`, {\n headers: { Authorization: `Bot ${token}` },\n });\n const channel = channelResponse.ok ? await channelResponse.json() : null;\n if (body.channel_id !== STAFF_CMDS_CHANNEL_ID) {\n return Response.json({\n type: 4,\n data: { content: \"Use /announcementsecond only in #staff-cmds.\", flags: 64 },\n });\n }\n }\n\n // Staff-only: require Manage Messages permission.\n // This is checked server-side, so hiding the command in Discord is not the only protection.\n const permissions = BigInt(body.member?.permissions ?? \"0\");\n const MANAGE_MESSAGES = 1n << 13n;\n if ((permissions & MANAGE_MESSAGES) === 0n) {\n return Response.json({\n type: 4,\n data: { content: \"You need staff permissions to use this command.\", flags: 64 },\n });\n }\n\n const option = body.data.options?.find((o: { name: string }) => o.name === \"message\");\n const message = typeof option?.value === \"string\" ? option.value.trim() : \"\";\n if (!message) {\n return Response.json({\n type: 4,\n data: { content: \"Please provide an announcement message.\", flags: 64 },\n });\n }\n\n const response = await fetch(`${DISCORD_API}/channels/${ANNOUNCEMENT_CHANNEL_ID}/messages`, {\n method: \"POST\",\n headers: { Authorization: `Bot ${token}`, \"Content-Type\": \"application/json\" },\n body: JSON.stringify({ content: `📢 **Announcement**\\n${message}` }),\n });\n\n if (!response.ok) {\n return Response.json({\n type: 4,\n data: { content: \"I couldn't send the announcement.\", flags: 64 },\n });\n }\n\n // No username/trigger information is included in the public announcement.\n return Response.json({\n type: 4,\n data: { content: \"Announcement sent!\", flags: 64 },\n });\n}\n",[],[79],["D",1787406349359],[],[19],"7d7b2631-c7b2-4371-89b8-09e31ea339be",["D",1787405351211],"deletedAt","legacyEnvVars","privacy","public","httpPrivacy","description","VIVINOS announcement bot — no commands","imageUrl","userId","f64e871c-3555-40fa-bb56-8bbf3860f05a","pinnedFileId","pinPreview","pinMigrated","screenshotVersion","likeCount","orgId","01a024fc-52ba-70fc-96f1-cde7debb30c3","tursoName","tursoHostname","tursoMeasuredAt","pinned","userPerm","r","valPerm","blobPerm","rw","emailPerm","sqlitePerm","projectPerm","telemetryPerm","user",{"_11":12,"_145":141},"org",{"_11":12,"_138":139,"_140":141,"_101":102,"_142":143,"_144":52},"branch",{"_17":62,"_13":16,"_33":39,"_130":91,"_131":-5,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":14,"_137":12},"isOwned","projectId","forkedBranchId","forkedBranchVersion","forkedProjectPrivacy","forkedProjectId","forkedProjectOrgId","projectName","userHandle","displayName","Minseo Yahh","avatar","https://lh3.googleusercontent.com/a/ACg8ocLF1l4QIByz6TNGmu_8CSLEccNZU3NukCYOssh2jmgxt4uEdg=s96-c","tier","free","canRestrictVals","profileImageUrl","adoptOrgId",{"_33":91,"_13":14,"_44":188,"_93":-5,"_94":52,"_95":96,"_97":96,"_98":99,"_100":-5,"_101":102,"_103":80,"_104":43,"_105":-5,"_106":-5,"_107":74,"_108":109,"_110":-5,"_111":-5,"_112":-5,"_113":-5,"_114":115,"_116":115,"_117":118,"_119":118,"_120":118,"_121":115,"_122":115,"_123":189,"_125":190,"_127":191,"_129":52},[176,177,178,179],"files",[176,177,178,179],"counts",{"_167":74,"_168":46,"_169":74,"_32":170,"_171":172},[],{"_33":34,"_38":39,"_35":36,"_13":19,"_49":50,"_47":48,"_17":46,"_37":-5,"_44":165,"_40":41,"_53":-5,"_18":166},"upstreamProject","upstreamBranch","emptyEnvVars","flags",[],"hasHttpFiles","grants","orgs","customDomains",{},["D",1787406349359],[19],"pulls","branches","forks",{"_173":74,"_175":74},"connections",{"_173":74,"_174":74},"count","unfilledCount","emptyCount",{"_33":34,"_13":19,"_35":36,"_37":-5,"_38":39,"_40":41,"_42":43,"_44":88,"_17":46,"_47":48,"_49":50,"_51":52,"_53":-5,"_67":186,"_18":187},{"_33":78,"_13":79,"_35":80,"_37":-5,"_38":39,"_40":81,"_42":43,"_44":82,"_17":83,"_47":84,"_49":85,"_51":52,"_53":-5,"_67":184,"_18":185},{"_33":70,"_13":71,"_35":72,"_37":-5,"_38":39,"_40":64,"_42":43,"_44":73,"_17":74,"_47":65,"_49":75,"_51":52,"_53":-5,"_67":182,"_18":183},{"_33":59,"_13":60,"_35":61,"_37":-5,"_38":39,"_40":62,"_42":43,"_44":63,"_17":64,"_47":65,"_49":66,"_51":52,"_53":-5,"_67":180,"_18":181},[],[60],[],[71],[],[79],[],[19],["D",1787405351211],{"_11":12,"_145":141},{"_11":12,"_138":139,"_140":141,"_101":102,"_142":143,"_144":52},{"_17":62,"_13":16,"_33":39,"_130":91,"_131":-5,"_132":-5,"_133":-5,"_134":-5,"_135":-5,"_136":14,"_137":12},"ctx",{"_123":-5,"_162":225,"_226":227,"_228":229,"_230":52,"_231":52,"_232":52,"_233":43,"_234":-5,"_235":-7,"_236":-7,"_237":74,"_238":52,"_239":52,"_240":-5,"_241":52,"_242":52,"_243":52,"_244":-5},"ENV",{"_196":197,"_198":199,"_200":16,"_201":202,"_203":204,"_205":206,"_207":208,"_209":210,"_211":212,"_213":214,"_215":216,"_217":218,"_219":220,"_221":222,"_223":224},"REACT_APP_SENTRY_DSN","https://586020d86f05489db63a554690acf1e9@o1398359.ingest.sentry.io/6724499","RENDER_GIT_COMMIT","5015b8df46402d8bba4f485ecc37aec202b0e06b","RENDER_GIT_BRANCH","POSTHOG_API_TOKEN","phc_nmoyuAkStEZuUp69rYlg1DZgrIt19Gx0Y4Hwf8tGgJP","POSTHOG_API_HOST","https://wart.val.town","WEB_API_TEMPLATE","https://{val}.web.val.run","APP_URL","https://www.val.town","MODULE_URL","https://esm.town","VANITY_WEB_API_TEMPLATE","https://{label}.val.run/","DENOLS_URL","https://lsp.val.town","NODE_ENV","production","CLOUDFLARE_TURNSTILE_SITE_KEY","0x4AAAAAACtaIZJH7s9rBMZ6","GOOGLE_CLIENT_ID","875989696899-jtsqkhlbdv5jrlsk8631p7ipjg3c6o62.apps.googleusercontent.com","STRIPE_PUBLISHABLE_KEY","pk_live_51N2zvWEpZTTLipIkVEwXrUG9AT0yeOOEYxszarZT1jpsZV58Ly6wlg3SltZpHN26CUalOBmUSY7adQRQiSkCZz2500qSXNkf8Y","API_URL","https://api.val.town",[],"preferencesKeybindings","default","preferencesTheme","light","preferencesFixers","preferencesCopilot","preferencesSelectionAi","preferencesCloseBrackets","preferencesChatPanelState","preferencesDprint","preferencesDenofmt","notificationCount","flagDenols","isBusinessOrgMember","businessOrgHandle","isBusinessOrgAdmin","isHigherTownieTier","navCollapsed","currentOrgId"] </article></body></html>