From ebb7d5b24f8df42b15d1a412ec0a9f73f2c7c2d2 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Wed, 25 Feb 2026 23:53:32 -0500
Subject: [PATCH 01/10] feat: add starboard, permissions, memory, and rate
 limit config sections to web dashboard

---
 .../components/dashboard/config-editor.tsx    | 407 +++++++++++++++++-
 web/src/types/config.ts                       |  49 ++-
 2 files changed, 444 insertions(+), 12 deletions(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index ce511e37..0ecd586b 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -38,7 +38,7 @@ const inputClasses =
 function isGuildConfig(data: unknown): data is GuildConfig {
   if (typeof data !== "object" || data === null || Array.isArray(data)) return false;
   const obj = data as Record<string, unknown>;
-  const knownSections = ["ai", "welcome", "spam", "moderation", "triage"] as const;
+  const knownSections = ["ai", "welcome", "spam", "moderation", "triage", "starboard", "permissions", "memory"] as const;
   const hasKnownSection = knownSections.some((key) => key in obj);
   if (!hasKnownSection) return false;
   for (const key of knownSections) {
@@ -316,42 +316,42 @@ export function ConfigEditor() {
   const updateSystemPrompt = useCallback((value: string) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, ai: { ...prev.ai, systemPrompt: value } };
+      return { ...prev, ai: { ...prev.ai, systemPrompt: value } } as GuildConfig;
     });
   }, []);
 
   const updateAiEnabled = useCallback((enabled: boolean) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, ai: { ...prev.ai, enabled } };
+      return { ...prev, ai: { ...prev.ai, enabled } } as GuildConfig;
     });
   }, []);
 
   const updateWelcomeEnabled = useCallback((enabled: boolean) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, welcome: { ...prev.welcome, enabled } };
+      return { ...prev, welcome: { ...prev.welcome, enabled } } as GuildConfig;
     });
   }, []);
 
   const updateWelcomeMessage = useCallback((message: string) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, welcome: { ...prev.welcome, message } };
+      return { ...prev, welcome: { ...prev.welcome, message } } as GuildConfig;
     });
   }, []);
 
   const updateModerationEnabled = useCallback((enabled: boolean) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, moderation: { ...prev.moderation, enabled } };
+      return { ...prev, moderation: { ...prev.moderation, enabled } } as GuildConfig;
     });
   }, []);
 
   const updateModerationField = useCallback((field: string, value: unknown) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, moderation: { ...prev.moderation, [field]: value } };
+      return { ...prev, moderation: { ...prev.moderation, [field]: value } } as GuildConfig;
     });
   }, []);
 
@@ -364,7 +364,7 @@ export function ConfigEditor() {
           ...prev.moderation,
           dmNotifications: { ...prev.moderation?.dmNotifications, [action]: value },
         },
-      };
+      } as GuildConfig;
     });
   }, []);
 
@@ -377,21 +377,68 @@ export function ConfigEditor() {
           ...prev.moderation,
           escalation: { ...prev.moderation?.escalation, enabled },
         },
-      };
+      } as GuildConfig;
     });
   }, []);
 
   const updateTriageEnabled = useCallback((enabled: boolean) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, triage: { ...prev.triage, enabled } };
+      return { ...prev, triage: { ...prev.triage, enabled } } as GuildConfig;
     });
   }, []);
 
   const updateTriageField = useCallback((field: string, value: unknown) => {
     setDraftConfig((prev) => {
       if (!prev) return prev;
-      return { ...prev, triage: { ...prev.triage, [field]: value } };
+      return { ...prev, triage: { ...prev.triage, [field]: value } } as GuildConfig;
+    });
+  }, []);
+
+  const updateStarboardField = useCallback((field: string, value: unknown) => {
+    setDraftConfig((prev) => {
+      if (!prev) return prev;
+      return { ...prev, starboard: { ...prev.starboard, [field]: value } } as GuildConfig;
+    });
+  }, []);
+
+  const updateRateLimitField = useCallback((field: string, value: unknown) => {
+    setDraftConfig((prev) => {
+      if (!prev) return prev;
+      return {
+        ...prev,
+        moderation: {
+          ...prev.moderation,
+          rateLimit: { ...prev.moderation?.rateLimit, [field]: value },
+        },
+      } as GuildConfig;
+    });
+  }, []);
+
+  const updateLinkFilterField = useCallback((field: string, value: unknown) => {
+    setDraftConfig((prev) => {
+      if (!prev) return prev;
+      return {
+        ...prev,
+        moderation: {
+          ...prev.moderation,
+          linkFilter: { ...prev.moderation?.linkFilter, [field]: value },
+        },
+      } as GuildConfig;
+    });
+  }, []);
+
+  const updatePermissionsField = useCallback((field: string, value: unknown) => {
+    setDraftConfig((prev) => {
+      if (!prev) return prev;
+      return { ...prev, permissions: { ...prev.permissions, [field]: value } } as GuildConfig;
+    });
+  }, []);
+
+  const updateMemoryField = useCallback((field: string, value: unknown) => {
+    setDraftConfig((prev) => {
+      if (!prev) return prev;
+      return { ...prev, memory: { ...prev.memory, [field]: value } } as GuildConfig;
     });
   }, []);
 
@@ -617,6 +664,139 @@ export function ConfigEditor() {
                 label="Escalation"
               />
             </div>
+
+            {/* Rate Limiting sub-section */}
+            <fieldset className="space-y-2">
+              <legend className="text-sm font-medium">Rate Limiting</legend>
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Enabled</span>
+                <ToggleSwitch
+                  checked={draftConfig.moderation?.rateLimit?.enabled ?? false}
+                  onChange={(v) => updateRateLimitField("enabled", v)}
+                  disabled={saving}
+                  label="Rate Limiting"
+                />
+              </div>
+              <div className="grid grid-cols-2 gap-4">
+                <label className="space-y-2">
+                  <span className="text-sm text-muted-foreground">Max Messages</span>
+                  <input
+                    type="number"
+                    min={1}
+                    value={draftConfig.moderation?.rateLimit?.maxMessages ?? 10}
+                    onChange={(e) => {
+                      const raw = e.target.value;
+                      if (raw === "") return;
+                      const num = Number(raw);
+                      if (!Number.isFinite(num)) return;
+                      updateRateLimitField("maxMessages", num);
+                    }}
+                    disabled={saving}
+                    className={inputClasses}
+                  />
+                </label>
+                <label className="space-y-2">
+                  <span className="text-sm text-muted-foreground">Window (seconds)</span>
+                  <input
+                    type="number"
+                    min={1}
+                    value={draftConfig.moderation?.rateLimit?.windowSeconds ?? 10}
+                    onChange={(e) => {
+                      const raw = e.target.value;
+                      if (raw === "") return;
+                      const num = Number(raw);
+                      if (!Number.isFinite(num)) return;
+                      updateRateLimitField("windowSeconds", num);
+                    }}
+                    disabled={saving}
+                    className={inputClasses}
+                  />
+                </label>
+              </div>
+              <div className="grid grid-cols-3 gap-4">
+                <label className="space-y-2">
+                  <span className="text-sm text-muted-foreground">Mute After Triggers</span>
+                  <input
+                    type="number"
+                    min={1}
+                    value={draftConfig.moderation?.rateLimit?.muteAfterTriggers ?? 3}
+                    onChange={(e) => {
+                      const raw = e.target.value;
+                      if (raw === "") return;
+                      const num = Number(raw);
+                      if (!Number.isFinite(num)) return;
+                      updateRateLimitField("muteAfterTriggers", num);
+                    }}
+                    disabled={saving}
+                    className={inputClasses}
+                  />
+                </label>
+                <label className="space-y-2">
+                  <span className="text-sm text-muted-foreground">Mute Window (s)</span>
+                  <input
+                    type="number"
+                    min={1}
+                    value={draftConfig.moderation?.rateLimit?.muteWindowSeconds ?? 300}
+                    onChange={(e) => {
+                      const raw = e.target.value;
+                      if (raw === "") return;
+                      const num = Number(raw);
+                      if (!Number.isFinite(num)) return;
+                      updateRateLimitField("muteWindowSeconds", num);
+                    }}
+                    disabled={saving}
+                    className={inputClasses}
+                  />
+                </label>
+                <label className="space-y-2">
+                  <span className="text-sm text-muted-foreground">Mute Duration (s)</span>
+                  <input
+                    type="number"
+                    min={1}
+                    value={draftConfig.moderation?.rateLimit?.muteDurationSeconds ?? 300}
+                    onChange={(e) => {
+                      const raw = e.target.value;
+                      if (raw === "") return;
+                      const num = Number(raw);
+                      if (!Number.isFinite(num)) return;
+                      updateRateLimitField("muteDurationSeconds", num);
+                    }}
+                    disabled={saving}
+                    className={inputClasses}
+                  />
+                </label>
+              </div>
+            </fieldset>
+
+            {/* Link Filtering sub-section */}
+            <fieldset className="space-y-2">
+              <legend className="text-sm font-medium">Link Filtering</legend>
+              <div className="flex items-center justify-between">
+                <span className="text-sm text-muted-foreground">Enabled</span>
+                <ToggleSwitch
+                  checked={draftConfig.moderation?.linkFilter?.enabled ?? false}
+                  onChange={(v) => updateLinkFilterField("enabled", v)}
+                  disabled={saving}
+                  label="Link Filtering"
+                />
+              </div>
+              <label className="space-y-2">
+                <span className="text-sm text-muted-foreground">Blocked Domains</span>
+                <input
+                  type="text"
+                  value={(draftConfig.moderation?.linkFilter?.blockedDomains ?? []).join(", ")}
+                  onChange={(e) =>
+                    updateLinkFilterField(
+                      "blockedDomains",
+                      e.target.value.split(",").map((s) => s.trim()).filter(Boolean),
+                    )
+                  }
+                  disabled={saving}
+                  className={inputClasses}
+                  placeholder="example.com, spam.net"
+                />
+              </label>
+            </fieldset>
           </CardContent>
         </Card>
       )}
@@ -800,6 +980,15 @@ export function ConfigEditor() {
                 label="Debug Footer"
               />
             </div>
+            <div className="flex items-center justify-between">
+              <span className="text-sm font-medium">Status Reactions</span>
+              <ToggleSwitch
+                checked={draftConfig.triage?.statusReactions ?? false}
+                onChange={(v) => updateTriageField("statusReactions", v)}
+                disabled={saving}
+                label="Status Reactions"
+              />
+            </div>
             <label className="space-y-2">
               <span className="text-sm font-medium">Moderation Log Channel</span>
               <input
@@ -815,6 +1004,202 @@ export function ConfigEditor() {
         </Card>
       )}
 
+      {/* Starboard section */}
+      <Card>
+        <CardHeader>
+          <div className="flex items-center justify-between">
+            <div>
+              <CardTitle className="text-base">Starboard</CardTitle>
+              <CardDescription>
+                Pin popular messages to a starboard channel.
+              </CardDescription>
+            </div>
+            <ToggleSwitch
+              checked={draftConfig.starboard?.enabled ?? false}
+              onChange={(v) => updateStarboardField("enabled", v)}
+              disabled={saving}
+              label="Starboard"
+            />
+          </div>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Channel ID</span>
+            <input
+              type="text"
+              value={draftConfig.starboard?.channelId ?? ""}
+              onChange={(e) => updateStarboardField("channelId", e.target.value)}
+              disabled={saving}
+              className={inputClasses}
+              placeholder="Starboard channel ID"
+            />
+          </label>
+          <div className="grid grid-cols-2 gap-4">
+            <label className="space-y-2">
+              <span className="text-sm font-medium">Threshold</span>
+              <input
+                type="number"
+                min={1}
+                value={draftConfig.starboard?.threshold ?? 3}
+                onChange={(e) => {
+                  const raw = e.target.value;
+                  if (raw === "") return;
+                  const num = Number(raw);
+                  if (!Number.isFinite(num)) return;
+                  updateStarboardField("threshold", num);
+                }}
+                disabled={saving}
+                className={inputClasses}
+              />
+            </label>
+            <label className="space-y-2">
+              <span className="text-sm font-medium">Emoji</span>
+              <input
+                type="text"
+                value={draftConfig.starboard?.emoji ?? "⭐"}
+                onChange={(e) => updateStarboardField("emoji", e.target.value)}
+                disabled={saving}
+                className={inputClasses}
+                placeholder="⭐"
+              />
+            </label>
+          </div>
+          <div className="flex items-center justify-between">
+            <span className="text-sm font-medium">Allow Self-Star</span>
+            <ToggleSwitch
+              checked={draftConfig.starboard?.selfStarAllowed ?? false}
+              onChange={(v) => updateStarboardField("selfStarAllowed", v)}
+              disabled={saving}
+              label="Self-Star Allowed"
+            />
+          </div>
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Ignored Channels</span>
+            <input
+              type="text"
+              value={(draftConfig.starboard?.ignoredChannels ?? []).join(", ")}
+              onChange={(e) =>
+                updateStarboardField(
+                  "ignoredChannels",
+                  e.target.value.split(",").map((s) => s.trim()).filter(Boolean),
+                )
+              }
+              disabled={saving}
+              className={inputClasses}
+              placeholder="Comma-separated channel IDs"
+            />
+          </label>
+        </CardContent>
+      </Card>
+
+      {/* Permissions section */}
+      <Card>
+        <CardHeader>
+          <div className="flex items-center justify-between">
+            <div>
+              <CardTitle className="text-base">Permissions</CardTitle>
+              <CardDescription>
+                Configure role-based access and bot owner overrides.
+              </CardDescription>
+            </div>
+            <ToggleSwitch
+              checked={draftConfig.permissions?.enabled ?? false}
+              onChange={(v) => updatePermissionsField("enabled", v)}
+              disabled={saving}
+              label="Permissions"
+            />
+          </div>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Admin Role ID</span>
+            <input
+              type="text"
+              value={draftConfig.permissions?.adminRoleId ?? ""}
+              onChange={(e) => updatePermissionsField("adminRoleId", e.target.value)}
+              disabled={saving}
+              className={inputClasses}
+              placeholder="Discord role ID for admins"
+            />
+          </label>
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Moderator Role ID</span>
+            <input
+              type="text"
+              value={draftConfig.permissions?.moderatorRoleId ?? ""}
+              onChange={(e) => updatePermissionsField("moderatorRoleId", e.target.value)}
+              disabled={saving}
+              className={inputClasses}
+              placeholder="Discord role ID for moderators"
+            />
+          </label>
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Bot Owners</span>
+            <input
+              type="text"
+              value={(draftConfig.permissions?.botOwners ?? []).join(", ")}
+              onChange={(e) =>
+                updatePermissionsField(
+                  "botOwners",
+                  e.target.value.split(",").map((s) => s.trim()).filter(Boolean),
+                )
+              }
+              disabled={saving}
+              className={inputClasses}
+              placeholder="Comma-separated user IDs"
+            />
+          </label>
+        </CardContent>
+      </Card>
+
+      {/* Memory section */}
+      <Card>
+        <CardHeader>
+          <div className="flex items-center justify-between">
+            <div>
+              <CardTitle className="text-base">Memory</CardTitle>
+              <CardDescription>
+                Configure AI context memory and auto-extraction.
+              </CardDescription>
+            </div>
+            <ToggleSwitch
+              checked={draftConfig.memory?.enabled ?? false}
+              onChange={(v) => updateMemoryField("enabled", v)}
+              disabled={saving}
+              label="Memory"
+            />
+          </div>
+        </CardHeader>
+        <CardContent className="space-y-4">
+          <label className="space-y-2">
+            <span className="text-sm font-medium">Max Context Memories</span>
+            <input
+              type="number"
+              min={1}
+              value={draftConfig.memory?.maxContextMemories ?? 10}
+              onChange={(e) => {
+                const raw = e.target.value;
+                if (raw === "") return;
+                const num = Number(raw);
+                if (!Number.isFinite(num)) return;
+                updateMemoryField("maxContextMemories", num);
+              }}
+              disabled={saving}
+              className={inputClasses}
+            />
+          </label>
+          <div className="flex items-center justify-between">
+            <span className="text-sm font-medium">Auto-Extract</span>
+            <ToggleSwitch
+              checked={draftConfig.memory?.autoExtract ?? false}
+              onChange={(v) => updateMemoryField("autoExtract", v)}
+              disabled={saving}
+              label="Auto-Extract"
+            />
+          </div>
+        </CardContent>
+      </Card>
+
       {/* Diff view */}
       {hasChanges && savedConfig && (
         <ConfigDiff original={savedConfig} modified={draftConfig} />
diff --git a/web/src/types/config.ts b/web/src/types/config.ts
index df484501..589c92fa 100644
--- a/web/src/types/config.ts
+++ b/web/src/types/config.ts
@@ -76,6 +76,22 @@ export interface ModerationLogging {
   channels: ModerationLogChannels;
 }
 
+/** Rate limiting configuration nested under moderation. */
+export interface RateLimitConfig {
+  enabled: boolean;
+  maxMessages: number;
+  windowSeconds: number;
+  muteAfterTriggers: number;
+  muteWindowSeconds: number;
+  muteDurationSeconds: number;
+}
+
+/** Link filtering configuration nested under moderation. */
+export interface LinkFilterConfig {
+  enabled: boolean;
+  blockedDomains: string[];
+}
+
 /** Moderation configuration. */
 export interface ModerationConfig {
   enabled: boolean;
@@ -84,6 +100,33 @@ export interface ModerationConfig {
   dmNotifications: ModerationDmNotifications;
   escalation: ModerationEscalation;
   logging: ModerationLogging;
+  rateLimit?: RateLimitConfig;
+  linkFilter?: LinkFilterConfig;
+}
+
+/** Starboard configuration. */
+export interface StarboardConfig {
+  enabled: boolean;
+  channelId: string;
+  threshold: number;
+  emoji: string;
+  selfStarAllowed: boolean;
+  ignoredChannels: string[];
+}
+
+/** Permissions configuration. */
+export interface PermissionsConfig {
+  enabled: boolean;
+  adminRoleId: string;
+  moderatorRoleId: string;
+  botOwners: string[];
+}
+
+/** Memory configuration. */
+export interface MemoryConfig {
+  enabled: boolean;
+  maxContextMemories: number;
+  autoExtract: boolean;
 }
 
 /** Triage configuration. */
@@ -112,6 +155,7 @@ export interface TriageConfig {
   debugFooter: boolean;
   debugFooterLevel: string;
   moderationLogChannel: string;
+  statusReactions: boolean;
 }
 
 /** Full bot config response from GET /api/guilds/:id/config. */
@@ -122,10 +166,13 @@ export interface BotConfig {
   spam: SpamConfig;
   moderation: ModerationConfig;
   triage?: TriageConfig;
+  starboard?: StarboardConfig;
+  permissions?: PermissionsConfig;
+  memory?: MemoryConfig;
 }
 
 /** All config sections shown in the editor. */
-export type ConfigSection = "ai" | "welcome" | "spam" | "moderation" | "triage";
+export type ConfigSection = "ai" | "welcome" | "spam" | "moderation" | "triage" | "starboard" | "permissions" | "memory";
 
 /**
  * @deprecated Use {@link ConfigSection} directly.

From 685f38ee819b89e0b4ee5ab3a54fef224fbae061 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 13:05:56 -0500
Subject: [PATCH 02/10] fix: nullable role IDs, add missing permission fields,
 enforce min constraints, update JSDoc

---
 .../components/dashboard/config-editor.tsx    | 19 +++++++++++++------
 web/src/types/config.ts                       |  6 ++++--
 2 files changed, 17 insertions(+), 8 deletions(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index 0ecd586b..094366fd 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -28,11 +28,21 @@ type GuildConfig = DeepPartial<BotConfig>;
 const inputClasses =
   "w-full rounded-md border bg-background px-3 py-2 text-sm ring-offset-background placeholder:text-muted-foreground focus-visible:outline-none focus-visible:ring-2 focus-visible:ring-ring focus-visible:ring-offset-2 disabled:cursor-not-allowed disabled:opacity-50";
 
+/** Parse a number input value, enforcing optional min/max constraints. Returns undefined if invalid. */
+function parseNumberInput(raw: string, min?: number, max?: number): number | undefined {
+  if (raw === "") return undefined;
+  const num = Number(raw);
+  if (!Number.isFinite(num)) return undefined;
+  if (min !== undefined && num < min) return min;
+  if (max !== undefined && num > max) return max;
+  return num;
+}
+
 /**
  * Type guard that checks whether a value is a guild configuration object returned by the API.
  *
  * @returns `true` if the value is an object containing at least one known top-level section
- *   (`ai`, `welcome`, `spam`, `moderation`, `triage`) and each present section is a plain object
+ *   (`ai`, `welcome`, `spam`, `moderation`, `triage`, `starboard`, `permissions`, `memory`) and each present section is a plain object
  *   (not an array or null). Returns `false` otherwise.
  */
 function isGuildConfig(data: unknown): data is GuildConfig {
@@ -1042,11 +1052,8 @@ export function ConfigEditor() {
                 min={1}
                 value={draftConfig.starboard?.threshold ?? 3}
                 onChange={(e) => {
-                  const raw = e.target.value;
-                  if (raw === "") return;
-                  const num = Number(raw);
-                  if (!Number.isFinite(num)) return;
-                  updateStarboardField("threshold", num);
+                  const num = parseNumberInput(e.target.value, 1);
+                  if (num !== undefined) updateStarboardField("threshold", num);
                 }}
                 disabled={saving}
                 className={inputClasses}
diff --git a/web/src/types/config.ts b/web/src/types/config.ts
index 589c92fa..c83b5ae4 100644
--- a/web/src/types/config.ts
+++ b/web/src/types/config.ts
@@ -117,9 +117,11 @@ export interface StarboardConfig {
 /** Permissions configuration. */
 export interface PermissionsConfig {
   enabled: boolean;
-  adminRoleId: string;
-  moderatorRoleId: string;
+  adminRoleId: string | null;
+  moderatorRoleId: string | null;
   botOwners: string[];
+  usePermissions: boolean;
+  allowedCommands: Record<string, string[]>;
 }
 
 /** Memory configuration. */

From 7b5beaa15b9eaaeb51582d8f555c39374b8a136f Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 13:54:29 -0500
Subject: [PATCH 03/10] fix: add starboard/permissions/memory to
 SAFE_CONFIG_KEYS, fix types, use parseNumberInput everywhere

---
 src/api/utils/configAllowlist.js              | 13 ++-
 .../components/dashboard/config-editor.tsx    | 84 ++++++-------------
 web/src/types/config.ts                       |  2 +-
 3 files changed, 36 insertions(+), 63 deletions(-)

diff --git a/src/api/utils/configAllowlist.js b/src/api/utils/configAllowlist.js
index fdb511ca..69425325 100644
--- a/src/api/utils/configAllowlist.js
+++ b/src/api/utils/configAllowlist.js
@@ -4,9 +4,18 @@
  * can be read or written via the API.
  */
 
-export const SAFE_CONFIG_KEYS = new Set(['ai', 'welcome', 'spam', 'moderation', 'triage']);
+export const SAFE_CONFIG_KEYS = new Set([
+  'ai',
+  'welcome',
+  'spam',
+  'moderation',
+  'triage',
+  'starboard',
+  'permissions',
+  'memory',
+]);
 
-export const READABLE_CONFIG_KEYS = [...SAFE_CONFIG_KEYS, 'logging', 'memory', 'permissions'];
+export const READABLE_CONFIG_KEYS = [...SAFE_CONFIG_KEYS, 'logging'];
 
 /**
  * Dot-notation paths to config values that contain secrets (e.g. API keys).
diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index 094366fd..802721c8 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -695,11 +695,8 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.maxMessages ?? 10}
                     onChange={(e) => {
-                      const raw = e.target.value;
-                      if (raw === "") return;
-                      const num = Number(raw);
-                      if (!Number.isFinite(num)) return;
-                      updateRateLimitField("maxMessages", num);
+                      const num = parseNumberInput(e.target.value, 0);
+                      if (num !== undefined) updateRateLimitField("maxMessages", num);
                     }}
                     disabled={saving}
                     className={inputClasses}
@@ -712,11 +709,8 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.windowSeconds ?? 10}
                     onChange={(e) => {
-                      const raw = e.target.value;
-                      if (raw === "") return;
-                      const num = Number(raw);
-                      if (!Number.isFinite(num)) return;
-                      updateRateLimitField("windowSeconds", num);
+                      const num = parseNumberInput(e.target.value, 0);
+                      if (num !== undefined) updateRateLimitField("windowSeconds", num);
                     }}
                     disabled={saving}
                     className={inputClasses}
@@ -731,11 +725,8 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteAfterTriggers ?? 3}
                     onChange={(e) => {
-                      const raw = e.target.value;
-                      if (raw === "") return;
-                      const num = Number(raw);
-                      if (!Number.isFinite(num)) return;
-                      updateRateLimitField("muteAfterTriggers", num);
+                      const num = parseNumberInput(e.target.value, 0);
+                      if (num !== undefined) updateRateLimitField("muteAfterTriggers", num);
                     }}
                     disabled={saving}
                     className={inputClasses}
@@ -748,11 +739,8 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteWindowSeconds ?? 300}
                     onChange={(e) => {
-                      const raw = e.target.value;
-                      if (raw === "") return;
-                      const num = Number(raw);
-                      if (!Number.isFinite(num)) return;
-                      updateRateLimitField("muteWindowSeconds", num);
+                      const num = parseNumberInput(e.target.value, 0);
+                      if (num !== undefined) updateRateLimitField("muteWindowSeconds", num);
                     }}
                     disabled={saving}
                     className={inputClasses}
@@ -765,11 +753,8 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteDurationSeconds ?? 300}
                     onChange={(e) => {
-                      const raw = e.target.value;
-                      if (raw === "") return;
-                      const num = Number(raw);
-                      if (!Number.isFinite(num)) return;
-                      updateRateLimitField("muteDurationSeconds", num);
+                      const num = parseNumberInput(e.target.value, 0);
+                      if (num !== undefined) updateRateLimitField("muteDurationSeconds", num);
                     }}
                     disabled={saving}
                     className={inputClasses}
@@ -862,11 +847,8 @@ export function ConfigEditor() {
                   min={0}
                   value={draftConfig.triage?.classifyBudget ?? 0}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("classifyBudget", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("classifyBudget", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -880,11 +862,8 @@ export function ConfigEditor() {
                   min={0}
                   value={draftConfig.triage?.respondBudget ?? 0}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("respondBudget", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("respondBudget", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -899,11 +878,8 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.defaultInterval ?? 3000}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("defaultInterval", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("defaultInterval", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -916,11 +892,8 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.timeout ?? 30000}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("timeout", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("timeout", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -935,11 +908,8 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.contextMessages ?? 10}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("contextMessages", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("contextMessages", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -952,11 +922,8 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.maxBufferSize ?? 30}
                   onChange={(e) => {
-                    const raw = e.target.value;
-                    if (raw === "") return;
-                    const num = Number(raw);
-                    if (!Number.isFinite(num)) return;
-                    updateTriageField("maxBufferSize", num);
+                    const num = parseNumberInput(e.target.value, 0);
+                    if (num !== undefined) updateTriageField("maxBufferSize", num);
                   }}
                   disabled={saving}
                   className={inputClasses}
@@ -1185,11 +1152,8 @@ export function ConfigEditor() {
               min={1}
               value={draftConfig.memory?.maxContextMemories ?? 10}
               onChange={(e) => {
-                const raw = e.target.value;
-                if (raw === "") return;
-                const num = Number(raw);
-                if (!Number.isFinite(num)) return;
-                updateMemoryField("maxContextMemories", num);
+                const num = parseNumberInput(e.target.value, 0);
+                if (num !== undefined) updateMemoryField("maxContextMemories", num);
               }}
               disabled={saving}
               className={inputClasses}
diff --git a/web/src/types/config.ts b/web/src/types/config.ts
index c83b5ae4..12539e17 100644
--- a/web/src/types/config.ts
+++ b/web/src/types/config.ts
@@ -121,7 +121,7 @@ export interface PermissionsConfig {
   moderatorRoleId: string | null;
   botOwners: string[];
   usePermissions: boolean;
-  allowedCommands: Record<string, string[]>;
+  allowedCommands: Record<string, string>;
 }
 
 /** Memory configuration. */

From 4f6d0431084847d1dc9341ad75a39ab24a6bab57 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 14:11:14 -0500
Subject: [PATCH 04/10] feat: starboard emoji picker with 'Any' wildcard button
 and helper text

---
 .../components/dashboard/config-editor.tsx    | 33 ++++++++++++++-----
 1 file changed, 25 insertions(+), 8 deletions(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index 802721c8..4aa63eb0 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -1028,14 +1028,31 @@ export function ConfigEditor() {
             </label>
             <label className="space-y-2">
               <span className="text-sm font-medium">Emoji</span>
-              <input
-                type="text"
-                value={draftConfig.starboard?.emoji ?? "⭐"}
-                onChange={(e) => updateStarboardField("emoji", e.target.value)}
-                disabled={saving}
-                className={inputClasses}
-                placeholder="⭐"
-              />
+              <div className="flex items-center gap-2">
+                <input
+                  type="text"
+                  value={draftConfig.starboard?.emoji ?? "⭐"}
+                  onChange={(e) => updateStarboardField("emoji", e.target.value.trim() || "⭐")}
+                  disabled={saving}
+                  className={inputClasses}
+                  placeholder="⭐"
+                />
+                <button
+                  type="button"
+                  onClick={() => updateStarboardField("emoji", "*")}
+                  disabled={saving}
+                  className={`shrink-0 rounded-md px-3 py-2 text-xs font-medium transition-colors ${
+                    draftConfig.starboard?.emoji === "*"
+                      ? "bg-primary text-primary-foreground"
+                      : "bg-muted text-muted-foreground hover:bg-accent"
+                  }`}
+                >
+                  Any ✱
+                </button>
+              </div>
+              <p className="text-xs text-muted-foreground">
+                Set a specific emoji (e.g. ⭐ 🔥 👍) or click <strong>Any</strong> to let any emoji trigger the starboard.
+              </p>
             </label>
           </div>
           <div className="flex items-center justify-between">

From 143cc51aa18540387da2d3f9f69aaec96ae0ead5 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 14:13:23 -0500
Subject: [PATCH 05/10] feat: default starboard emoji to '*' in web config

---
 web/src/components/dashboard/config-editor.tsx | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index 4aa63eb0..1683d38d 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -1031,11 +1031,11 @@ export function ConfigEditor() {
               <div className="flex items-center gap-2">
                 <input
                   type="text"
-                  value={draftConfig.starboard?.emoji ?? "⭐"}
-                  onChange={(e) => updateStarboardField("emoji", e.target.value.trim() || "⭐")}
+                  value={draftConfig.starboard?.emoji ?? "*"}
+                  onChange={(e) => updateStarboardField("emoji", e.target.value.trim() || "*")}
                   disabled={saving}
                   className={inputClasses}
-                  placeholder="⭐"
+                  placeholder="*"
                 />
                 <button
                   type="button"

From e4db3d41de868ac130ee4bb4701b70327b3776c5 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 14:16:12 -0500
Subject: [PATCH 06/10] fix: match parseNumberInput min to HTML min attrs,
 normalize empty role IDs to null

---
 .../components/dashboard/config-editor.tsx    | 24 +++++++++----------
 1 file changed, 12 insertions(+), 12 deletions(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index 1683d38d..e70c9f5c 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -695,7 +695,7 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.maxMessages ?? 10}
                     onChange={(e) => {
-                      const num = parseNumberInput(e.target.value, 0);
+                      const num = parseNumberInput(e.target.value, 1);
                       if (num !== undefined) updateRateLimitField("maxMessages", num);
                     }}
                     disabled={saving}
@@ -709,7 +709,7 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.windowSeconds ?? 10}
                     onChange={(e) => {
-                      const num = parseNumberInput(e.target.value, 0);
+                      const num = parseNumberInput(e.target.value, 1);
                       if (num !== undefined) updateRateLimitField("windowSeconds", num);
                     }}
                     disabled={saving}
@@ -725,7 +725,7 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteAfterTriggers ?? 3}
                     onChange={(e) => {
-                      const num = parseNumberInput(e.target.value, 0);
+                      const num = parseNumberInput(e.target.value, 1);
                       if (num !== undefined) updateRateLimitField("muteAfterTriggers", num);
                     }}
                     disabled={saving}
@@ -739,7 +739,7 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteWindowSeconds ?? 300}
                     onChange={(e) => {
-                      const num = parseNumberInput(e.target.value, 0);
+                      const num = parseNumberInput(e.target.value, 1);
                       if (num !== undefined) updateRateLimitField("muteWindowSeconds", num);
                     }}
                     disabled={saving}
@@ -753,7 +753,7 @@ export function ConfigEditor() {
                     min={1}
                     value={draftConfig.moderation?.rateLimit?.muteDurationSeconds ?? 300}
                     onChange={(e) => {
-                      const num = parseNumberInput(e.target.value, 0);
+                      const num = parseNumberInput(e.target.value, 1);
                       if (num !== undefined) updateRateLimitField("muteDurationSeconds", num);
                     }}
                     disabled={saving}
@@ -878,7 +878,7 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.defaultInterval ?? 3000}
                   onChange={(e) => {
-                    const num = parseNumberInput(e.target.value, 0);
+                    const num = parseNumberInput(e.target.value, 1);
                     if (num !== undefined) updateTriageField("defaultInterval", num);
                   }}
                   disabled={saving}
@@ -892,7 +892,7 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.timeout ?? 30000}
                   onChange={(e) => {
-                    const num = parseNumberInput(e.target.value, 0);
+                    const num = parseNumberInput(e.target.value, 1);
                     if (num !== undefined) updateTriageField("timeout", num);
                   }}
                   disabled={saving}
@@ -908,7 +908,7 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.contextMessages ?? 10}
                   onChange={(e) => {
-                    const num = parseNumberInput(e.target.value, 0);
+                    const num = parseNumberInput(e.target.value, 1);
                     if (num !== undefined) updateTriageField("contextMessages", num);
                   }}
                   disabled={saving}
@@ -922,7 +922,7 @@ export function ConfigEditor() {
                   min={1}
                   value={draftConfig.triage?.maxBufferSize ?? 30}
                   onChange={(e) => {
-                    const num = parseNumberInput(e.target.value, 0);
+                    const num = parseNumberInput(e.target.value, 1);
                     if (num !== undefined) updateTriageField("maxBufferSize", num);
                   }}
                   disabled={saving}
@@ -1107,7 +1107,7 @@ export function ConfigEditor() {
             <input
               type="text"
               value={draftConfig.permissions?.adminRoleId ?? ""}
-              onChange={(e) => updatePermissionsField("adminRoleId", e.target.value)}
+              onChange={(e) => updatePermissionsField("adminRoleId", e.target.value.trim() || null)}
               disabled={saving}
               className={inputClasses}
               placeholder="Discord role ID for admins"
@@ -1118,7 +1118,7 @@ export function ConfigEditor() {
             <input
               type="text"
               value={draftConfig.permissions?.moderatorRoleId ?? ""}
-              onChange={(e) => updatePermissionsField("moderatorRoleId", e.target.value)}
+              onChange={(e) => updatePermissionsField("moderatorRoleId", e.target.value.trim() || null)}
               disabled={saving}
               className={inputClasses}
               placeholder="Discord role ID for moderators"
@@ -1169,7 +1169,7 @@ export function ConfigEditor() {
               min={1}
               value={draftConfig.memory?.maxContextMemories ?? 10}
               onChange={(e) => {
-                const num = parseNumberInput(e.target.value, 0);
+                const num = parseNumberInput(e.target.value, 1);
                 if (num !== undefined) updateMemoryField("maxContextMemories", num);
               }}
               disabled={saving}

From c0acaf1b24d4c2db3695ae74a4ddc1371300e875 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 14:32:56 -0500
Subject: [PATCH 07/10] test(configAllowlist): assert starboard, permissions,
 and memory in SAFE_CONFIG_KEYS

---
 tests/api/utils/configAllowlist.test.js | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/tests/api/utils/configAllowlist.test.js b/tests/api/utils/configAllowlist.test.js
index 51fc2be1..4294676b 100644
--- a/tests/api/utils/configAllowlist.test.js
+++ b/tests/api/utils/configAllowlist.test.js
@@ -17,6 +17,9 @@ describe('configAllowlist', () => {
       expect(SAFE_CONFIG_KEYS.has('spam')).toBe(true);
       expect(SAFE_CONFIG_KEYS.has('moderation')).toBe(true);
       expect(SAFE_CONFIG_KEYS.has('triage')).toBe(true);
+      expect(SAFE_CONFIG_KEYS.has('starboard')).toBe(true);
+      expect(SAFE_CONFIG_KEYS.has('permissions')).toBe(true);
+      expect(SAFE_CONFIG_KEYS.has('memory')).toBe(true);
     });
   });
 

From 6026b63523db36095a4520000fd763905b37c70b Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 14:47:39 -0500
Subject: [PATCH 08/10] fix: throw after 401 redirect in sendSection to prevent
 silent fulfillment

When sendSection received a 401, it aborted other requests and redirected
but returned normally. This allowed Promise.allSettled to treat it as
fulfilled, skipping the failed section in error reporting. Now throws
an Error after redirect so the section is correctly tracked as failed.
---
 web/src/components/dashboard/config-editor.tsx | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/web/src/components/dashboard/config-editor.tsx b/web/src/components/dashboard/config-editor.tsx
index e70c9f5c..db363700 100644
--- a/web/src/components/dashboard/config-editor.tsx
+++ b/web/src/components/dashboard/config-editor.tsx
@@ -241,7 +241,7 @@ export function ConfigEditor() {
           // Abort all other in-flight requests before redirecting
           saveAbortController.abort();
           window.location.href = "/login";
-          return;
+          throw new Error('Unauthorized');
         }
 
         if (!res.ok) {

From b59da77b6a496dec7a3bd4be30c8ff48fbd66394 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 15:02:58 -0500
Subject: [PATCH 09/10] test(configAllowlist): assert starboard in
 READABLE_CONFIG_KEYS

---
 tests/api/utils/configAllowlist.test.js | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tests/api/utils/configAllowlist.test.js b/tests/api/utils/configAllowlist.test.js
index 4294676b..183333f1 100644
--- a/tests/api/utils/configAllowlist.test.js
+++ b/tests/api/utils/configAllowlist.test.js
@@ -34,6 +34,7 @@ describe('configAllowlist', () => {
       expect(READABLE_CONFIG_KEYS).toContain('logging');
       expect(READABLE_CONFIG_KEYS).toContain('memory');
       expect(READABLE_CONFIG_KEYS).toContain('permissions');
+      expect(READABLE_CONFIG_KEYS).toContain('starboard');
     });
   });
 

From 6a78c97bc4446ec92e44f917d98c23ccb47fd652 Mon Sep 17 00:00:00 2001
From: Pip Build <bill@chirico.dev>
Date: Thu, 26 Feb 2026 15:17:23 -0500
Subject: [PATCH 10/10] fix: add modRoles to PermissionsConfig, starboard
 defaults to config.json, starboard/modRoles README docs

---
 README.md               | 12 ++++++++++++
 config.json             |  8 ++++++++
 web/src/types/config.ts |  1 +
 3 files changed, 21 insertions(+)

diff --git a/README.md b/README.md
index 14fdb5ac..c3e53aea 100644
--- a/README.md
+++ b/README.md
@@ -201,6 +201,17 @@ All configuration lives in `config.json` and can be updated at runtime via the `
 
 **Escalation thresholds** are objects with: `warns` (count), `withinDays` (window), `action` ("timeout" or "ban"), `duration` (for timeout, e.g. "1h").
 
+### Starboard (`starboard`)
+
+| Key | Type | Description |
+|-----|------|-------------|
+| `enabled` | boolean | Enable the starboard feature |
+| `channelId` | string | Channel ID where starred messages are reposted |
+| `threshold` | number | Reaction count required to star a message (default: 3) |
+| `emoji` | string | Emoji to watch for stars (default: `⭐`) |
+| `selfStarAllowed` | boolean | Allow users to star their own messages |
+| `ignoredChannels` | string[] | Channel IDs excluded from starboard tracking |
+
 ### Permissions (`permissions`)
 
 | Key | Type | Description |
@@ -208,6 +219,7 @@ All configuration lives in `config.json` and can be updated at runtime via the `
 | `enabled` | boolean | Enable permission checks |
 | `adminRoleId` | string | Role ID for admin commands |
 | `moderatorRoleId` | string | Role ID for moderator commands |
+| `modRoles` | string[] | Additional role IDs or names that count as moderators (legacy/`modExempt` checks) |
 | `botOwners` | string[] | Discord user IDs that bypass all permission checks |
 | `allowedCommands` | object | Per-command permission levels (`everyone`, `moderator`, `admin`) |
 
diff --git a/config.json b/config.json
index 03efd92a..d3a9e111 100644
--- a/config.json
+++ b/config.json
@@ -84,6 +84,14 @@
     "maxContextMemories": 5,
     "autoExtract": true
   },
+  "starboard": {
+    "enabled": false,
+    "channelId": "",
+    "threshold": 3,
+    "emoji": "⭐",
+    "selfStarAllowed": false,
+    "ignoredChannels": []
+  },
   "logging": {
     "level": "info",
     "fileOutput": true,
diff --git a/web/src/types/config.ts b/web/src/types/config.ts
index 12539e17..5698b526 100644
--- a/web/src/types/config.ts
+++ b/web/src/types/config.ts
@@ -119,6 +119,7 @@ export interface PermissionsConfig {
   enabled: boolean;
   adminRoleId: string | null;
   moderatorRoleId: string | null;
+  modRoles: string[];
   botOwners: string[];
   usePermissions: boolean;
   allowedCommands: Record<string, string>;