2 Commits

Author SHA1 Message Date
minori 33bdc72dce deps: update eslint to 10.0.0
Node.js CI / CI (pull_request) Failing after 30s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m37s
2026-02-17 07:07:14 -08:00
minori a776b285d3 deps: update eslint to 9.39.2
Node.js CI / CI (pull_request) Failing after 37s
Security Scan and Upload / Security & DefectDojo Upload (pull_request) Successful in 1m39s
2026-02-04 08:30:31 -08:00
11 changed files with 1198 additions and 1454 deletions
+25
View File
@@ -0,0 +1,25 @@
# Package Manager Configuration
# Force pnpm usage - breaks npm/yarn intentionally
node-linker=pnpm
# Security: Disable all lifecycle scripts
ignore-scripts=true
enable-pre-post-scripts=false
# Security: Require packages to be 10+ days old before installation
minimum-release-age=14400
# Security: Verify package integrity hashes
verify-store-integrity=true
# Security: Enforce strict trust policies
trust-policy=strict
# Security: Strict peer dependency resolution
strict-peer-dependencies=true
# Performance: Use symlinks for node_modules
symlink=true
# Lockfile: Ensure lockfile is not modified during install
frozen-lockfile=false
+11 -16
View File
@@ -7,15 +7,12 @@
import { DiscordAnalytics } from "@nhcarrigan/discord-analytics";
import { Client, Events, GatewayIntentBits, Partials } from "discord.js";
import { chatInputInteractionCreate } from "./events/interactionCreate.js";
import {
guildMessageCreate,
directMessageCreate,
} from "./events/messageCreate.js";
import { logger } from "./utils/logger.js";
/*
* Import {
* guildMessageCreate,
* directMessageCreate,
* } from "./events/messageCreate.js";
*/
const hikari = new Client({
intents: [
GatewayIntentBits.Guilds,
@@ -38,15 +35,13 @@ hikari.once(Events.ClientReady, () => {
analytics.startCron();
});
/*
* Hikari.on(Events.MessageCreate, (message) => {
* if (!message.inGuild()) {
* void directMessageCreate(hikari, message);
* return;
* }
* void guildMessageCreate(hikari, message);
* });
*/
hikari.on(Events.MessageCreate, (message) => {
if (!message.inGuild()) {
void directMessageCreate(hikari, message);
return;
}
void guildMessageCreate(hikari, message);
});
hikari.on(Events.InteractionCreate, (interaction) => {
if (interaction.isChatInputCommand()) {
-3
View File
@@ -14,9 +14,6 @@ export default [
"@typescript-eslint/no-empty-function": "off",
"@typescript-eslint/consistent-type-assertions": "off",
"@typescript-eslint/no-extraneous-class": "off",
"@typescript-eslint/no-unsafe-call": "off",
"@typescript-eslint/no-unsafe-assignment": "off",
"@typescript-eslint/no-unsafe-member-access": "off",
"stylistic/no-multi-spaces": "off",
"unicorn/filename-case": "off",
"@typescript-eslint/consistent-type-imports": "off",
+2 -2
View File
@@ -17,8 +17,8 @@
"devDependencies": {
"@nhcarrigan/eslint-config": "5.2.0",
"@nhcarrigan/typescript-config": "4.0.0",
"eslint": "9.30.1",
"turbo": "2.8.10",
"eslint": "10.0.0",
"turbo": "2.5.4",
"typescript": "5.8.3"
}
}
+1136 -1105
View File
File diff suppressed because it is too large Load Diff
+1 -23
View File
@@ -1,26 +1,4 @@
packages:
- bot
- client
- server
# Security
# Do not execute any scripts of installed packages (project scripts still run)
ignoreDepScripts: true
# Do not automatically run pre/post scripts (e.g. preinstall, postbuild)
enablePrePostScripts: false
# Only allow packages published at least 10 days ago (reduces risk of compromised packages)
minimumReleaseAge: 14400
# Fail if a package's trust level has decreased compared to previous releases
trustPolicy: no-downgrade
# Ignore trust policy for packages published more than 1 year ago (predates provenance signing)
trustPolicyIgnoreAfter: 525960
# Fail if there are missing or invalid peer dependencies
strictPeerDependencies: true
# Prevent transitive dependencies from using exotic sources (git repos, direct tarball URLs)
blockExoticSubdeps: true
# Lockfile
# Allow the lockfile to be updated during install (set to true in CI for stricter reproducibility)
preferFrozenLockfile: false
- server
+3 -46
View File
@@ -4,15 +4,9 @@
* @author Naomi Carrigan
*/
/* eslint-disable @typescript-eslint/naming-convention -- we are making raw API calls. */
/* eslint-disable max-lines-per-function -- Chunked sending requires more logic. */
/* eslint-disable max-statements -- Chunked sending requires more statements. */
/* eslint-disable no-await-in-loop -- Sequential chunk posting requires awaiting each request. */
import { chunkContent } from "../utils/chunkContent.js";
import type { AnnouncementType } from "../interfaces/announcementType.js";
const discordLimit = 2000;
const channelIds: Record<AnnouncementType, string> = {
community: "1386105484313886820",
company: "1422472775695728661",
@@ -31,7 +25,6 @@ const getAnnouncementPing = (type: AnnouncementType): string => {
/**
* Forwards an announcement to our Discord server.
* Sends content in sequential messages if it exceeds the 2000 character limit.
* @param title - The title of the announcement.
* @param content - The main body of the announcement.
* @param type - Whether the announcement is for a product or community.
@@ -42,23 +35,12 @@ export const announceOnDiscord = async(
content: string,
type: AnnouncementType,
): Promise<string> => {
const channelId = channelIds[type];
const ping = getAnnouncementPing(type);
const firstMessagePrefix = `# ${title}\n\n`;
const firstMessageSuffix = `\n-# ${ping}`;
const firstChunkLimit
= discordLimit - firstMessagePrefix.length - firstMessageSuffix.length;
const chunks = chunkContent(content, firstChunkLimit);
const firstChunk = chunks[0] ?? "";
const remainingChunks = chunks.slice(1);
const messageRequest = await fetch(
`https://discord.com/api/v10/channels/${channelId}/messages`,
`https://discord.com/api/v10/channels/${channelIds[type]}/messages`,
{
body: JSON.stringify({
allowed_mentions: { parse: [ "users", "roles" ] },
content: `${firstMessagePrefix}${firstChunk}${firstMessageSuffix}`,
content: `# ${title}\n\n${content}\n-# ${getAnnouncementPing(type)}`,
}),
headers: {
"Authorization": `Bot ${process.env.DISCORD_TOKEN ?? ""}`,
@@ -67,19 +49,16 @@ export const announceOnDiscord = async(
method: "POST",
},
);
if (messageRequest.status !== 200) {
return `Failed to send message to Discord. Status: ${messageRequest.status.toString()} ${messageRequest.statusText}`;
}
// eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- fetch does not accept generics.
const message = await messageRequest.json() as { id?: string };
if (message.id === undefined) {
return `Failed to parse message ID, cannot crosspost. ${JSON.stringify(message)}`;
}
const crosspostRequest = await fetch(
`https://discord.com/api/v10/channels/${channelId}/messages/${message.id}/crosspost`,
`https://discord.com/api/v10/channels/${channelIds[type]}/messages/${message.id}/crosspost`,
{
headers: {
"Authorization": `Bot ${process.env.DISCORD_TOKEN ?? ""}`,
@@ -88,30 +67,8 @@ export const announceOnDiscord = async(
method: "POST",
},
);
if (!crosspostRequest.ok) {
return `Failed to crosspost message to Discord. Status: ${crosspostRequest.status.toString()} ${crosspostRequest.statusText}`;
}
for (const chunk of remainingChunks) {
const chunkRequest = await fetch(
`https://discord.com/api/v10/channels/${channelId}/messages`,
{
body: JSON.stringify({
content: chunk,
}),
headers: {
"Authorization": `Bot ${process.env.DISCORD_TOKEN ?? ""}`,
"Content-Type": "application/json",
},
method: "POST",
},
);
if (!chunkRequest.ok) {
return `Failed to send continuation chunk to Discord. Status: ${chunkRequest.status.toString()} ${chunkRequest.statusText}`;
}
}
return "Successfully sent and published message to Discord.";
};
-92
View File
@@ -1,92 +0,0 @@
/**
* @copyright nhcarrigan
* @license Naomi's Public License
* @author Naomi Carrigan
*/
/* eslint-disable @typescript-eslint/naming-convention -- we are making raw API calls. */
/* eslint-disable no-await-in-loop -- Sequential chunk posting requires awaiting each request. */
/* eslint-disable max-lines-per-function -- Chunked posting requires more logic. */
import { chunkContent } from "../utils/chunkContent.js";
import type { AnnouncementType } from "../interfaces/announcementType.js";
const announcementCategoryId = 16;
const discourseLimit = 32_000;
const tags: Record<AnnouncementType, string> = {
community: "Community",
company: "Company",
products: "Products",
};
/**
* Posts an announcement to the NHCarrigan Discourse support forum.
* Sends overflow content as sequential replies if it exceeds the 32,000 character limit.
* @param title - The title of the announcement.
* @param content - The main body of the announcement in markdown.
* @param type - Whether the announcement is for a product, community, or company.
* @returns A message indicating the success or failure of the operation.
*/
export const announceOnDiscourse = async(
title: string,
content: string,
type: AnnouncementType,
): Promise<string> => {
if (process.env.FORUM_API_KEY === undefined) {
return "Discourse API key is not set.";
}
const chunks = chunkContent(content, discourseLimit);
const firstChunk = chunks[0] ?? "";
const remainingChunks = chunks.slice(1);
const response = await fetch("https://support.nhcarrigan.com/posts.json", {
body: JSON.stringify({
category: announcementCategoryId,
raw: firstChunk,
tags: [ tags[type] ],
title: title,
}),
headers: {
"Api-Key": process.env.FORUM_API_KEY,
"Api-Username": "hikari",
"Content-Type": "application/json",
},
method: "POST",
});
if (!response.ok) {
return `Failed to post to Discourse. Status: ${response.status.toString()} ${response.statusText}`;
}
// eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Fetch does not accept generic.
const data = (await response.json()) as { topic_id?: number };
for (const chunk of remainingChunks) {
if (data.topic_id === undefined) {
return "Failed to retrieve Discourse topic ID for continuation posts.";
}
const replyResponse = await fetch(
"https://support.nhcarrigan.com/posts.json",
{
body: JSON.stringify({
raw: chunk,
topic_id: data.topic_id,
}),
headers: {
"Api-Key": process.env.FORUM_API_KEY,
"Api-Username": "hikari",
"Content-Type": "application/json",
},
method: "POST",
},
);
if (!replyResponse.ok) {
return `Failed to post continuation chunk to Discourse. Status: ${replyResponse.status.toString()} ${replyResponse.statusText}`;
}
}
return "Successfully posted announcement to Discourse~! ✨";
};
+1 -53
View File
@@ -5,15 +5,9 @@
*/
/* eslint-disable @typescript-eslint/naming-convention -- we are making raw API calls. */
/* eslint-disable max-lines-per-function -- Big logic here. */
/* eslint-disable max-statements -- Complex Reddit posting flow with many steps. */
/* eslint-disable complexity -- Chunked reply chaining requires multiple branches. */
/* eslint-disable no-await-in-loop -- Sequential chunk posting requires awaiting each request. */
import { chunkContent } from "../utils/chunkContent.js";
import type { AnnouncementType } from "../interfaces/announcementType.js";
const redditLimit = 40_000;
const flairIds: Record<AnnouncementType, string> = {
community: "7a01a5a6-0f29-11ef-a0c4-c6fb085f7c8f",
company: "dd8057c0-9e30-11f0-b321-d683551dcb2b",
@@ -22,7 +16,6 @@ const flairIds: Record<AnnouncementType, string> = {
/**
* Posts an announcement to a specific subreddit as a self-post.
* Sends overflow content as nested replies if it exceeds the 40,000 character limit.
* @param title - The title of the announcement.
* @param content - The main body of the announcement.
* @param type - Whether the announcement is for a product or community.
@@ -41,11 +34,6 @@ export const announceOnReddit = async(
) {
return "Reddit credentials are not set.";
}
const chunks = chunkContent(content, redditLimit);
const firstChunk = chunks[0] ?? "";
const remainingChunks = chunks.slice(1);
const tokenResponse = await fetch(
"https://www.reddit.com/api/v1/access_token",
{
@@ -83,7 +71,7 @@ export const announceOnReddit = async(
flair_text: type,
kind: "self",
sr: "nhcarrigan",
text: firstChunk,
text: content,
title: title,
}),
headers: {
@@ -97,7 +85,6 @@ export const announceOnReddit = async(
// eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Fetch does not accept generic.
const redditData = (await redditPost.json()) as {
json: {
data?: { name?: string };
errors: Array<unknown>;
};
};
@@ -108,44 +95,5 @@ export const announceOnReddit = async(
)}`;
}
let parentName = redditData.json.data?.name;
for (const chunk of remainingChunks) {
if (parentName === undefined) {
return "Failed to get Reddit post fullname for chaining replies.";
}
const commentResponse = await fetch(
"https://oauth.reddit.com/api/comment",
{
body: new URLSearchParams({
api_type: "json",
text: chunk,
thing_id: parentName,
}),
headers: {
"Authorization": `bearer ${tokenData.access_token}`,
"Content-Type": "application/x-www-form-urlencoded",
"User-Agent": "HikariBot/1.0 by nhcarrigan",
},
method: "POST",
},
);
// eslint-disable-next-line @typescript-eslint/consistent-type-assertions -- Fetch does not accept generic.
const commentData = (await commentResponse.json()) as {
json: {
data?: { things?: Array<{ data?: { name?: string } }> };
errors: Array<unknown>;
};
};
if (commentData.json.errors.length > 0) {
return `Failed to post reply chunk to Reddit: ${JSON.stringify(commentData.json.errors)}`;
}
parentName = commentData.json.data?.things?.[0]?.data?.name;
}
return "Successfully posted announcement to Reddit~! ✨";
};
+19 -30
View File
@@ -8,7 +8,6 @@ import { blockedIps } from "../cache/blockedIps.js";
import { database } from "../db/database.js";
import { announceOnBluesky } from "../modules/announceOnBluesky.js";
import { announceOnDiscord } from "../modules/announceOnDiscord.js";
import { announceOnDiscourse } from "../modules/announceOnDiscourse.js";
import { announceOnFacebook } from "../modules/announceOnFacebook.js";
import { announceOnMastodon } from "../modules/announceOnMastodon.js";
import { announceOnReddit } from "../modules/announceOnReddit.js";
@@ -21,12 +20,6 @@ import type { FastifyPluginAsync } from "fastify";
const oneDay = 24 * 60 * 60 * 1000;
const getPlatformResult = (result: PromiseSettledResult<string>): string => {
return result.status === "fulfilled"
? result.value
: `Unexpected error: ${String(result.reason)}`;
};
/**
* Mounts the entry routes for the application. These routes
* should not require CORS, as they are used by external services
@@ -60,6 +53,7 @@ export const announcementRoutes: FastifyPluginAsync = async(server) => {
server.post<{ Body: { content: string; type: string } }>(
"/announcement",
// eslint-disable-next-line max-statements -- This is a long function.
async(request, reply) => {
const token = request.headers.authorization;
if (token === undefined || token !== process.env.ANNOUNCEMENT_TOKEN) {
@@ -90,8 +84,8 @@ export const announcementRoutes: FastifyPluginAsync = async(server) => {
const announcement = await generateAnnouncements(content);
if (announcement === null) {
return await reply.status(500).send({
error: `Failed to generate announcements.`,
return await reply.status(201).send({
message: `Failed to generate announcements.`,
});
}
@@ -110,30 +104,25 @@ export const announcementRoutes: FastifyPluginAsync = async(server) => {
},
});
const [
discordResult,
redditResult,
blueskyResult,
twitterResult,
facebookResult,
threadsResult,
mastodonResult,
discourseResult,
] = await Promise.allSettled([
announceOnDiscord(markdownTitle, markdownContent, type),
announceOnReddit(markdownTitle, markdownContent, type),
announceOnBluesky(threaded),
announceOnTwitter(threaded),
announceOnFacebook(plaintext),
announceOnThreads(threaded),
announceOnMastodon(threaded),
announceOnDiscourse(markdownTitle, markdownContent, type),
]);
const discordPost = await announceOnDiscord(
markdownTitle,
markdownContent,
type,
);
const redditPost = await announceOnReddit(
markdownTitle,
markdownContent,
type,
);
const blueskyPost = await announceOnBluesky(threaded);
const twitterPost = await announceOnTwitter(threaded);
const facebookPost = await announceOnFacebook(plaintext);
const threadsPost = await announceOnThreads(threaded);
const mastodonPost = await announceOnMastodon(threaded);
return await reply.status(201).send({
alert: `Please remember to manually post to: LinkedIn, Peerlist, Ko-fi, and Patreon.`,
cost: announcement.cost,
message: `Announcement processed. Discord: ${getPlatformResult(discordResult)}, Reddit: ${getPlatformResult(redditResult)}, Bluesky: ${getPlatformResult(blueskyResult)}, Twitter: ${getPlatformResult(twitterResult)}, Facebook: ${getPlatformResult(facebookResult)}, Threads: ${getPlatformResult(threadsResult)}, Mastodon: ${getPlatformResult(mastodonResult)}, Discourse: ${getPlatformResult(discourseResult)}`,
message: `Announcement processed. Discord: ${discordPost}, Reddit: ${redditPost}, Bluesky: ${blueskyPost}, Twitter: ${twitterPost}, Facebook: ${facebookPost}, Threads: ${threadsPost}, Mastodon: ${mastodonPost}`,
rawPost: announcement.response,
});
},
-84
View File
@@ -1,84 +0,0 @@
/**
* @copyright nhcarrigan
* @license Naomi's Public License
* @author Naomi Carrigan
*/
/* eslint-disable max-lines-per-function -- Multi-level split logic requires many lines. */
/* eslint-disable max-statements -- Multi-level split logic requires many statements. */
/* eslint-disable complexity -- Multi-level split logic has inherent branching complexity. */
/**
* Splits content into chunks that do not exceed the given character limit.
* Splits preferably at paragraph boundaries, then line boundaries,
* then hard-cuts at the limit as a last resort.
* @param content - The content to chunk.
* @param limit - The maximum character count per chunk.
* @returns An array of content chunks.
*/
export const chunkContent = (content: string, limit: number): Array<string> => {
if (content.length <= limit) {
return [ content ];
}
const chunks: Array<string> = [];
const paragraphs = content.split("\n\n");
let current = "";
for (const paragraph of paragraphs) {
const separator = current.length > 0
? "\n\n"
: "";
const combined = `${current}${separator}${paragraph}`;
if (combined.length <= limit) {
current = combined;
continue;
}
if (current.length > 0) {
chunks.push(current);
current = "";
}
if (paragraph.length <= limit) {
current = paragraph;
continue;
}
// Paragraph itself exceeds the limit — split by lines
const lines = paragraph.split("\n");
for (const line of lines) {
const lineSeparator = current.length > 0
? "\n"
: "";
const combinedLine = `${current}${lineSeparator}${line}`;
if (combinedLine.length <= limit) {
current = combinedLine;
continue;
}
if (current.length > 0) {
chunks.push(current);
current = "";
}
if (line.length <= limit) {
current = line;
continue;
}
// Single line exceeds limit — hard-cut
for (let index = 0; index < line.length; index = index + limit) {
chunks.push(line.slice(index, index + limit));
}
}
}
if (current.length > 0) {
chunks.push(current);
}
return chunks;
};