Fix resilient Discord event logging

.claude/settings.json

@@ -0,0 +1,9 @@
+{
+  "permissions": {
+    "allow": [
+      "PowerShell(docker compose down)",
+      "PowerShell(docker compose up -d --build)",
+      "PowerShell(docker compose logs bot --tail=50)"
+    ]
+  }
+}

.claude/settings.local.json

@@ -0,0 +1,36 @@
+{
+  "permissions": {
+    "allow": [
+      "Bash(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\" -Force)",
+      "Bash(Select-Object Name, Mode)",
+      "Bash(Format-Table)",
+      "PowerShell(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\\\\src\" -Recurse -Force | Where-Object { $_.PSIsContainer } | Select-Object FullName | ForEach-Object { $_.FullName.Replace\\('c:\\\\code\\\\zen-bot\\\\', ''\\) } | Sort-Object)",
+      "PowerShell(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\" -Name -Force | Where-Object { $_ -match 'CLAUDE|cursor' })",
+      "PowerShell(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\\\\src\\\\commands\" | Where-Object { $_.PSIsContainer } | ForEach-Object { $_.Name })",
+      "Bash(docker compose *)",
+      "Bash(git rm *)",
+      "Bash(git add *)",
+      "Bash(git commit -m ' *)",
+      "Bash(git push *)",
+      "Bash(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\" -Recurse -Directory)",
+      "Bash(Select-Object -ExpandProperty FullName)",
+      "PowerShell(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\\\\src\\\\commands\\\\Economy\" -Recurse | Select-Object -ExpandProperty FullName | ForEach-Object { $_.Replace\\(\"c:\\\\code\\\\zen-bot\\\\\", \"\"\\) })",
+      "Bash(Get-ChildItem -Path 'c:\\\\code\\\\zen-bot\\\\src\\\\commands' -Recurse -File)",
+      "Bash(Select-Object FullName)",
+      "Bash(Sort-Object FullName)",
+      "Bash(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\\\\src\\\\commands\" -Recurse -Filter \"*.js\")",
+      "Bash(git -C \"/c/code/zen-bot\" log --oneline -5)",
+      "Bash(Get-ChildItem -Path \"c:\\\\code\\\\zen-bot\\\\src\\\\commands\" -Directory)",
+      "Bash(Select-Object Name)",
+      "PowerShell(docker run --rm -v \"c:/code/zen-bot:/app\" -w /app node:20-alpine npm install --save @discordjs/voice play-dl opusscript libsodium-wrappers 2>&1)",
+      "PowerShell(docker compose up -d --build 2>&1)",
+      "Bash(git revert *)",
+      "PowerShell(Get-Command cloudflared -ErrorAction SilentlyContinue; Get-ChildItem \"C:\\\\Program Files\\\\cloudflared\\\\\" -ErrorAction SilentlyContinue; Get-ChildItem \"$env:LOCALAPPDATA\\\\cloudflared\\\\\" -ErrorAction SilentlyContinue; Get-ChildItem \"$env:ProgramFiles\\\\Cloudflare\\\\\" -ErrorAction SilentlyContinue)",
+      "PowerShell(& \"C:\\\\Program Files \\(x86\\)\\\\cloudflared\\\\cloudflared.exe\" --version)",
+      "PowerShell(Start-Process -FilePath \"C:\\\\Program Files \\(x86\\)\\\\cloudflared\\\\cloudflared.exe\" -ArgumentList \"tunnel --url http://localhost:3000\" -NoNewWindow -RedirectStandardOutput \"C:\\\\code\\\\zen-bot\\\\cloudflared.log\" -RedirectStandardError \"C:\\\\code\\\\zen-bot\\\\cloudflared_err.log\")",
+      "Bash(docker exec *)",
+      "WebFetch(domain:maven.lavalink.dev)",
+      "PowerShell(docker exec titanbot sed -n '2785,2840p' /usr/src/app/node_modules/lavalink-client/dist/index.js 2>&1)"
+    ]
+  }
+}

.env.editil.example

@@ -0,0 +1,14 @@
+DISCORD_TOKEN=put_your_bot_token_here
+GUILD_ID=0
+WELCOME_CHANNEL_ID=0
+RULES_CHANNEL_ID=0
+LOG_CHANNEL_ID=0
+TICKET_CATEGORY_ID=0
+TICKET_STAFF_ROLE_ID=0
+NEW_MEMBER_ROLE_ID=0
+MEMBER_ROLE_ID=0
+BOOSTER_ROLE_ID=0
+BOOSTER_CHANNEL_ID=0
+WINNERS_CHANNEL_ID=0
+LINKS_ALLOWED_CHANNEL_IDS=
+BAD_WORDS=

.env.example

@@ -5,6 +5,7 @@ DISCORD_TOKEN=your_discord_bot_token_here
 CLIENT_ID=your_discord_client_id_here
 GUILD_ID=your_discord_guild_id_here
 OWNER_IDS=your_discord_id_here (optional)
+ADMIN_IDS=comma_separated_admin_ids_here (optional)
 
 # Bot Runtime Configuration
 NODE_ENV=production
@@ -48,3 +49,9 @@ POSTGRES_RESTORE_URL=
 
 # Optional Feature/API Keys
 TMDB_API_KEY=
+
+# Anti-NSFW image scanning (Sightengine — https://sightengine.com)
+# Sign up for a free account to get these values.
+# Without these, image/video scanning is skipped; text/domain filtering still works.
+SIGHTENGINE_API_USER=
+SIGHTENGINE_API_SECRET=

.gitignore

@@ -50,6 +50,10 @@ build/Release
 node_modules/
 jspm_packages/
 
+# Python cache
+__pycache__/
+*.pyc
+
 # Snowpack dependency directory (https:
 web_modules/
 
@@ -144,3 +148,11 @@ dist
 # Database backup artifacts
 backups/
 *.dump
+
+# Lavalink downloaded plugins (rebuilt on container start)
+lavalink/plugins/
+
+# Cloudflare tunnel logs
+cloudflared.log
+cloudflared_err.log
+Modelfile

.vscode/settings.json

@@ -1,4 +1,7 @@
 {
   "files.encoding": "utf8",
-  "files.autoGuessEncoding": false
+  "files.autoGuessEncoding": false,
+
+
 }
+

AGENTS.md

@@ -0,0 +1,86 @@
+# AGENTS.md
+
+This file provides guidance to Codex (Codex.ai/code) when working with code in this repository.
+
+## Commands
+
+```bash
+npm start                 # Run the bot
+npm test                  # Run all tests (Node built-in test runner)
+node --test tests/path/to/file.test.js  # Run a single test file
+npm run migrate           # Apply pending migrations
+npm run migrate:check     # Validate migration state
+npm run migrate:status    # Show migration history
+```
+
+Docker (preferred for full-stack):
+```bash
+docker compose up -d --build   # Build and start bot + PostgreSQL
+docker compose down            # Stop everything
+docker compose logs -f bot     # Stream bot logs
+```
+
+## Architecture
+
+### Entry Point & Bot Class
+`src/app.js` defines `TitanBot extends Client`. On startup it:
+1. Initializes the database (PostgreSQL with in-memory fallback)
+2. Loads commands, events, and interactions via handlers
+3. Starts an Express web server (`GET /health`, `GET /ready`)
+4. Schedules cron jobs (birthdays at 6 AM, giveaways every minute, counters every 15 min)
+
+### Command Loading
+`src/handlers/commandLoader.js` recursively scans `src/commands/**/*.js` (skipping `modules/` subdirs) and registers guild-level slash commands. Each command exports:
+```js
+export default {
+    data: new SlashCommandBuilder()...,
+    async execute(interaction, guildConfig, client) { ... }
+}
+```
+Commands are organized into category subdirectories under `src/commands/`.
+
+### Interaction Routing
+`src/events/interactionCreate.js` routes all Discord interactions:
+- Slash commands → `client.commands`
+- Button presses → `client.buttons`
+- Select menus → `client.selectMenus`
+- Modals → `client.modals`
+
+Each category has its handlers in `src/interactions/buttons/`, `src/interactions/selectMenus/`, and `src/interactions/modals/`. These are loaded by `src/handlers/interactions.js`.
+
+### Database Layer
+`src/utils/database.js` exports a `DatabaseWrapper` singleton (`db`) that wraps either:
+- **PostgreSQL** (`src/utils/postgresDatabase.js`) — when `POSTGRES_URL`/`POSTGRES_HOST` is reachable
+- **MemoryStorage** (`src/utils/memoryStorage.js`) — degraded fallback when Postgres is unavailable
+
+`db.isAvailable()` returns `true` only when PostgreSQL is connected. Functions that require SQL (e.g. `getEndedGiveaways`) check this and return empty results in degraded mode. The bot attaches the wrapper to `client.db` at startup.
+
+In Docker Compose the bot service must set `POSTGRES_HOST=db` and `POSTGRES_URL=postgresql://...@db:5432/...` — the `.env` file defaults to `localhost` which only works for local dev outside Docker.
+
+### Services
+`src/services/` contains domain-specific business logic (giveawayService, ticketService, leveling, economy, etc.). Commands call services; services interact with the database directly via `pgDb` or the wrapper.
+
+### Configuration
+`src/config/postgres.js` reads individual `POSTGRES_*` env vars (not `DATABASE_URL`). `src/config/bot.js` has feature flags — 18 features are toggleable; music is disabled. `src/config/schemaVersion.js` holds `EXPECTED_SCHEMA_VERSION` which must match the applied migration.
+
+### Migrations
+`scripts/migrate.js` manages schema versions tracked in the `schema_migrations` table. The bot will refuse to start if the schema version mismatches (`SCHEMA_VERSION_MISMATCH` error code). `AUTO_MIGRATE=true` in `.env` applies pending migrations automatically on startup.
+
+### Error & Interaction Helpers
+- `src/utils/interactionHelper.js` — use `InteractionHelper.safeReply/safeDeferReply/safeEdit` instead of raw Discord.js methods to handle already-acknowledged interaction errors gracefully.
+- `src/utils/abuseProtection.js` — rate limiting applied per command before `execute()` is called.
+- `src/utils/embeds.js` — `createEmbed({ title, description, color })` for consistent embed styling.
+
+## Completion Workflow
+
+After every completed coding task, unless the user explicitly says otherwise:
+
+1. Update the bot version and add accurate Hebrew release notes for the completed work.
+2. Run the full test suite and any focused validation appropriate to the change.
+3. Commit only the task's intended files and push the current branch.
+4. Rebuild and restart the bot with Docker Compose.
+5. If the pushed commit contains a user-facing bot update or bug fix, publish exactly one Hebrew bot-update announcement through the persistent update system. Do not announce documentation-only, tests-only, formatting, refactoring-without-behavior-change, or routine maintenance commits.
+6. Verify PostgreSQL recorded the announced version and message ID, inspect the Discord message for correct Hebrew/UTF-8 content, and check the readiness endpoint.
+7. Report the commit, branch, test results, deployment health, announced version, and Discord message ID.
+
+Never publish an automatic update while PostgreSQL is unavailable or the bot is using in-memory degraded storage. Never start a second local bot process when the Docker bot service is already running. Do not stage, commit, or overwrite unrelated user changes.

CLAUDE.md

@@ -0,0 +1,72 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Commands
+
+```bash
+npm start                 # Run the bot
+npm test                  # Run all tests (Node built-in test runner)
+node --test tests/path/to/file.test.js  # Run a single test file
+npm run migrate           # Apply pending migrations
+npm run migrate:check     # Validate migration state
+npm run migrate:status    # Show migration history
+```
+
+Docker (preferred for full-stack):
+```bash
+docker compose up -d --build   # Build and start bot + PostgreSQL
+docker compose down            # Stop everything
+docker compose logs -f bot     # Stream bot logs
+```
+
+## Architecture
+
+### Entry Point & Bot Class
+`src/app.js` defines `TitanBot extends Client`. On startup it:
+1. Initializes the database (PostgreSQL with in-memory fallback)
+2. Loads commands, events, and interactions via handlers
+3. Starts an Express web server (`GET /health`, `GET /ready`)
+4. Schedules cron jobs (birthdays at 6 AM, giveaways every minute, counters every 15 min)
+
+### Command Loading
+`src/handlers/commandLoader.js` recursively scans `src/commands/**/*.js` (skipping `modules/` subdirs) and registers guild-level slash commands. Each command exports:
+```js
+export default {
+    data: new SlashCommandBuilder()...,
+    async execute(interaction, guildConfig, client) { ... }
+}
+```
+Commands are organized into category subdirectories under `src/commands/`.
+
+### Interaction Routing
+`src/events/interactionCreate.js` routes all Discord interactions:
+- Slash commands → `client.commands`
+- Button presses → `client.buttons`
+- Select menus → `client.selectMenus`
+- Modals → `client.modals`
+
+Each category has its handlers in `src/interactions/buttons/`, `src/interactions/selectMenus/`, and `src/interactions/modals/`. These are loaded by `src/handlers/interactions.js`.
+
+### Database Layer
+`src/utils/database.js` exports a `DatabaseWrapper` singleton (`db`) that wraps either:
+- **PostgreSQL** (`src/utils/postgresDatabase.js`) — when `POSTGRES_URL`/`POSTGRES_HOST` is reachable
+- **MemoryStorage** (`src/utils/memoryStorage.js`) — degraded fallback when Postgres is unavailable
+
+`db.isAvailable()` returns `true` only when PostgreSQL is connected. Functions that require SQL (e.g. `getEndedGiveaways`) check this and return empty results in degraded mode. The bot attaches the wrapper to `client.db` at startup.
+
+In Docker Compose the bot service must set `POSTGRES_HOST=db` and `POSTGRES_URL=postgresql://...@db:5432/...` — the `.env` file defaults to `localhost` which only works for local dev outside Docker.
+
+### Services
+`src/services/` contains domain-specific business logic (giveawayService, ticketService, leveling, economy, etc.). Commands call services; services interact with the database directly via `pgDb` or the wrapper.
+
+### Configuration
+`src/config/postgres.js` reads individual `POSTGRES_*` env vars (not `DATABASE_URL`). `src/config/bot.js` has feature flags — 18 features are toggleable; music is disabled. `src/config/schemaVersion.js` holds `EXPECTED_SCHEMA_VERSION` which must match the applied migration.
+
+### Migrations
+`scripts/migrate.js` manages schema versions tracked in the `schema_migrations` table. The bot will refuse to start if the schema version mismatches (`SCHEMA_VERSION_MISMATCH` error code). `AUTO_MIGRATE=true` in `.env` applies pending migrations automatically on startup.
+
+### Error & Interaction Helpers
+- `src/utils/interactionHelper.js` — use `InteractionHelper.safeReply/safeDeferReply/safeEdit` instead of raw Discord.js methods to handle already-acknowledged interaction errors gracefully.
+- `src/utils/abuseProtection.js` — rate limiting applied per command before `execute()` is called.
+- `src/utils/embeds.js` — `createEmbed({ title, description, color })` for consistent embed styling.

Dockerfile

@@ -8,6 +8,12 @@ WORKDIR /usr/src/app
 COPY package*.json ./
 
 # Install only production dependencies
+RUN apk add --no-cache ffmpeg python3 py3-pip && \
+    pip3 install yt-dlp --break-system-packages --quiet && \
+    mkdir -p /root/.config/yt-dlp && \
+    echo '--js-runtimes node' > /root/.config/yt-dlp/config && \
+    yt-dlp --js-runtimes node --remote-components ejs:github --simulate "https://www.youtube.com/watch?v=jNQXAC9IVRw" 2>/dev/null || true
+
 RUN npm ci --omit=dev
 
 # Bundle app source

Dockerfile.editil

@@ -0,0 +1,8 @@
+FROM python:3.12-slim
+
+WORKDIR /app
+COPY requirements-editil.txt ./
+RUN pip install --no-cache-dir -r requirements-editil.txt
+COPY editil_bot ./editil_bot
+
+CMD ["python", "-m", "editil_bot.main"]

README-EDITIL.md

@@ -0,0 +1,26 @@
+# עורכי ישראל | EditIL
+
+בוט Discord מקצועי לקהילת עורכי וידאו ישראלית, בנוי עם Python, `discord.py`, כפתורי UI ו־SQLite.
+
+## הפעלה
+
+1. התקינו Python 3.11 ומעלה.
+2. צרו `.env.editil` על בסיס [`.env.editil.example`](.env.editil.example), והזינו את מזהי התפקידים והערוצים.
+3. התקינו תלויות: `py -m pip install -r requirements-editil.txt`
+4. הפעילו: `py -m editil_bot.main`
+
+להפעלה עם Docker: `docker compose -f docker-compose.editil.yml up -d --build`.
+
+הפעילו ב־Discord Developer Portal את **Server Members Intent** ואת **Message Content Intent**.
+
+## ניהול
+
+- `/panel roles` — פאנל בחירת תוכנות וסוגי עורכים.
+- `/panel verify` — פאנל אימות חברי קהילה.
+- `/tickets` — פאנל כרטיסי עזרה, דיווחים, שיתופי פעולה ובאגים.
+- `/warn`, `/timeout`, `/kick`, `/ban`, `/clear` — כלי ניהול.
+- `/showcase` — פרסום יצירה.
+- `/profile` — פרופיל עורך.
+- `/contest create`, `/contest submit`, `/contest vote` — תחרויות עריכה.
+
+למערכת התפקידים, צרו בשרת תפקידים בעלי השמות המדויקים שמופיעים בפאנל. הגדירו את תפקידי `🆕 חדש`, `❤️ חבר קהילה` ו־`💎 Booster` באמצעות מזהי התפקידים בקובץ ההגדרות.

docker-compose.editil.yml

@@ -0,0 +1,13 @@
+services:
+  editil-bot:
+    build:
+      context: .
+      dockerfile: Dockerfile.editil
+    env_file:
+      - .env.editil
+    volumes:
+      - editil-data:/app/data
+    restart: unless-stopped
+
+volumes:
+  editil-data:

docker-compose.linux.yml

@@ -0,0 +1,52 @@
+# Linux VPS deployment — uses network_mode: host so Discord voice UDP works.
+# Usage: docker compose -f docker-compose.linux.yml up -d --build
+
+services:
+  bot:
+    build: .
+    container_name: titanbot
+    restart: unless-stopped
+    network_mode: host
+    environment:
+      - NODE_ENV=production
+      - DISCORD_TOKEN=${DISCORD_TOKEN}
+      - CLIENT_ID=${CLIENT_ID}
+      - GUILD_ID=${GUILD_ID}
+      - OWNER_IDS=${OWNER_IDS}
+      - LOG_LEVEL=${LOG_LEVEL:-warn}
+      - PORT=${PORT:-3000}
+      - WEB_HOST=0.0.0.0
+      - AUTO_MIGRATE=true
+      - POSTGRES_HOST=localhost
+      - POSTGRES_PORT=5432
+      - POSTGRES_USER=${POSTGRES_USER:-titanbot}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-titanbotpassword}
+      - POSTGRES_DB=${POSTGRES_DB:-titanbot}
+      - POSTGRES_URL=postgresql://${POSTGRES_USER:-titanbot}:${POSTGRES_PASSWORD:-titanbotpassword}@localhost:5432/${POSTGRES_DB:-titanbot}
+      - DATABASE_URL=postgres://${POSTGRES_USER:-titanbot}:${POSTGRES_PASSWORD:-titanbotpassword}@localhost:5432/${POSTGRES_DB:-titanbot}
+      - SIGHTENGINE_API_USER=${SIGHTENGINE_API_USER}
+      - SIGHTENGINE_API_SECRET=${SIGHTENGINE_API_SECRET}
+    depends_on:
+      db:
+        condition: service_healthy
+
+  db:
+    image: postgres:15-alpine
+    container_name: titanbot-db
+    restart: unless-stopped
+    ports:
+      - "127.0.0.1:5432:5432"
+    environment:
+      - POSTGRES_USER=${POSTGRES_USER:-titanbot}
+      - POSTGRES_PASSWORD=${POSTGRES_PASSWORD:-titanbotpassword}
+      - POSTGRES_DB=${POSTGRES_DB:-titanbot}
+    volumes:
+      - postgres_data:/var/lib/postgresql/data
+    healthcheck:
+      test: ["CMD-SHELL", "pg_isready -U $$POSTGRES_USER -d $$POSTGRES_DB"]
+      interval: 10s
+      timeout: 5s
+      retries: 5
+
+volumes:
+  postgres_data: