Merge branch 'main' of https://github.com/AstroHWeston/kog-bot-tomfoolery into staging

Author: Sheepboi546KOG

.github/workflows/compile.yml

@@ -0,0 +1,48 @@
+name: Compile KOG Bot
+
+on:
+  push:
+    branches: [ "main", "staging" ]
+  pull_request:
+    branches: [ "main", "staging" ]
+
+jobs:
+
+  compile:
+    runs-on: ubuntu-22.04
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      - name: Use Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'pnpm'
+      - name: Install dependencies
+        run: pnpm install
+      - name: Build project
+        run: pnpm run build
+
+  testrun:
+    runs-on: ubuntu-22.04
+    if: github.ref == 'refs/heads/main' || (github.event_name == 'pull_request' && github.base_ref == 'main')
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      - name: Use Node.js 22
+        uses: actions/setup-node@v4
+        with:
+          node-version: 22
+          cache: 'pnpm'
+      - name: Install dependencies
+        run: pnpm install
+      - name: Simulate environment
+        run: cp config.example.toml config.toml
+      - name: Run tests
+        run: pnpm run start:ci

.github/workflows/node.js.yml

@@ -0,0 +1,23 @@
+name: Node install
+on:
+  push:
+
+jobs:
+  node:
+    runs-on: ubuntu-22.04
+    strategy:
+      matrix:
+        node-version: [22]
+    steps:
+      - uses: actions/checkout@v4
+      - name: Install pnpm
+        uses: pnpm/action-setup@v4
+        with:
+          version: 9
+      - name: Use Node.js ${{ matrix.node-version }}
+        uses: actions/setup-node@v4
+        with:
+          node-version: ${{ matrix.node-version }}
+          cache: 'pnpm'
+      - name: Install dependencies
+        run: pnpm install

SECURITY.md

@@ -0,0 +1,11 @@
+# Security Policy
+
+We take security bugs contained within the KOG bot with upmost seriousness. We appreciate your effort to appropriately and responsibly disclose your findings, and we will make sure your efforts to report these vulnerabilities are acknowledged.
+
+If you wish to report a security vulnerability, please utilize GitHub's built in [Security tab](https://github.com/AstroHWeston/kog-bot-tomfoolery/security) and click on the `Report a vulnerability` button in the top right.
+After your request is received, the development team will diligently review your request, and start working on a fix on the vulnerability as soon as possible.
+
+Throughout this, the developers will keep you up to date with the progress of a potential fix to your issue, as well as what steps to take to cordon off any possible security intrusions in production.
+
+> [!NOTE]
+> If your vulerability report is contained to one specific package, and not our implementation of that package, please report the vulnerability to that package's maintainer. You may view the email address of the package maintainer by running `npm show <package_name>`.

config.example.toml

@@ -1,3 +1,14 @@
 [discord]
 client_id = ""
-client_token = ""
+client_token = ""
+
+[database]
+client = "mysql2"
+host = ""
+port = "3306"
+user = ""
+password = ""
+schema = ""
+
+[sentry]
+dsn = ""

package.json

@@ -1,12 +1,15 @@
 {
   "name": "kog-bot-tomfoolery",
-  "version": "0.0.1",
+  "version": "0.0.2",
   "description": "Discord utility for the Kleiner Oil Group.",
   "main": "build/src/index.js",
   "type": "module",
   "scripts": {
     "build": "tsc",
-    "start": "node ."
+    "build:watch": "tsc -w",
+    "start:prod": "node .",
+    "start:dev": "node . --debug",
+    "start:ci": "pnpm run build && echo Successfully built! && node . --ci"
   },
   "keywords": [],
   "author": "Asynchronite & Sheepboi546",
@@ -16,6 +19,8 @@
     "knex": "^3.1.0"
   },
   "devDependencies": {
+    "@sentry/node": "^9.4.0",
+    "@sentry/profiling-node": "^9.4.0",
     "mysql2": "^3.12.0",
     "nodemon": "^3.1.9",
     "toml": "^3.0.0"