Discord bot anti-cheat checks
staff-only, evidence-based.

// /check command — staff-only response
import { SlashCommandBuilder, PermissionFlagsBits } from 'discord.js';

export const data = new SlashCommandBuilder()
  .setName('check')
  .setDescription('Run a CheatSentry risk check')
  .addStringOption(o =>
    o.setName('id').setDescription('Discord ID').setRequired(true)
  )
  .setDefaultMemberPermissions(PermissionFlagsBits.ModerateMembers);

export async function execute(interaction) {
  const id = interaction.options.getString('id', true);
  if (!/^\d{16,21}$/.test(id)) {
    return interaction.reply({ content: 'Invalid Discord ID.', ephemeral: true });
  }
  await interaction.deferReply({ ephemeral: true });

  const res = await fetch(`https://cheatsentry.com/api/v1/check/${id}`, {
    headers: { Authorization: `Bearer ${process.env.CHEATSENTRY_KEY}` },
  });
  if (!res.ok) return interaction.editReply('Risk check failed.');

  const data = await res.json();
  await interaction.editReply({
    embeds: [{
      title: `Risk signal · ${data.riskLevel ?? 'clean'}`,
      description: data.summary ?? 'No reviewed risk entry found.',
      footer: { text: 'CheatSentry — manual review recommended.' },
    }],
  });
}