Update configuration and README for improved setup and security; disable default API and emoji sync, and enhance Discord permission checks in API routes.

Co-authored-by: Cursor <cursoragent@cursor.com>

bot/cogs/commands/autoreact.py

@@ -0,0 +1,159 @@
+# ╔══════════════════════════════════════════════════════════════════╗
+# ║                                                                  ║
+# ║   ░█▀▀░█▀█░█▀▄░█▀▀░█░█   ░█▀▄░█▀▀░█░█░█▀▀                     ║
+# ║   ░█░░░█░█░█░█░█▀▀░▄▀▄   ░█░█░█▀▀░▀▄▀░▀▀█                     ║
+# ║   ░▀▀▀░▀▀▀░▀▀░░▀▀▀░▀░▀   ░▀▀░░▀▀▀░░▀░░▀▀▀                     ║
+# ║                                                                  ║
+# ║            © 2026 CodeX Devs — All Rights Reserved              ║
+# ║                                                                  ║
+# ║   discord  ──  https://discord.gg/codexdev                      ║
+# ║   youtube  ──  https://youtube.com/@CodeXDevs                   ║
+# ║   github   ──  https://github.com/RayExo                        ║
+# ║                                                                  ║
+# ╚══════════════════════════════════════════════════════════════════╝
+
+import discord
+from utils.emoji import CROSS, ICONS_WARNING, TICK
+from discord.ext import commands
+from discord.ui import LayoutView, TextDisplay, Separator, Container
+import aiosqlite
+import re
+from utils.Tools import *
+from utils.cv2 import CV2, build_container
+
+
+
+
+
+class AutoReaction(commands.Cog):
+    def __init__(self, bot):
+        self.bot = bot
+        self.db_path = 'db/autoreact.db'
+        self.bot.loop.create_task(self.setup_database())
+
+    async def setup_database(self):
+        async with aiosqlite.connect(self.db_path) as db:
+            await db.execute("""
+                CREATE TABLE IF NOT EXISTS autoreact (
+                    guild_id INTEGER,
+                    trigger TEXT,
+                    emojis TEXT
+                )
+            """)
+            await db.commit()
+
+    async def get_triggers(self, guild_id):
+        async with aiosqlite.connect(self.db_path) as db:
+            cursor = await db.execute("SELECT trigger, emojis FROM autoreact WHERE guild_id = ?", (guild_id,))
+            return await cursor.fetchall()
+
+    async def trigger_exists(self, guild_id, trigger):
+        async with aiosqlite.connect(self.db_path) as db:
+            cursor = await db.execute("SELECT 1 FROM autoreact WHERE guild_id = ? AND trigger = ?", (guild_id, trigger))
+            return await cursor.fetchone()
+
+    @commands.group(name="react", aliases=["autoreact"], help="Lists all subcommands of autoreact group.", invoke_without_command=True)
+    @blacklist_check()
+    @ignore_check()
+    @commands.cooldown(1, 4, commands.BucketType.user)
+    @commands.max_concurrency(1, per=commands.BucketType.default, wait=False)
+    @commands.guild_only()
+    @commands.has_permissions(administrator=True)
+    async def react(self, ctx):
+        if ctx.subcommand_passed is None:
+            await ctx.send_help(ctx.command)
+            ctx.command.reset_cooldown(ctx)
+
+    @react.command(name="add", aliases=["set", "create"], help="Adds a trigger and its emojis to the autoreact.")
+    @blacklist_check()
+    @ignore_check()
+    @commands.cooldown(1, 4, commands.BucketType.user)
+    @commands.max_concurrency(1, per=commands.BucketType.default, wait=False)
+    @commands.guild_only()
+    @commands.has_permissions(administrator=True)
+    async def add(self, ctx, trigger: str, *, emojis: str):
+        if len(trigger.split()) > 1:
+            view = CV2(f"{CROSS} Invalid Trigger", "Triggers can only be one word.")
+            return await ctx.reply(view=view)
+
+        
+        emoji_list = re.findall(r"<a?:\w+:\d+>|[\u263a-\U0001f645]", emojis)
+        if len(emoji_list) > 10:
+            view = CV2(f"{CROSS} Too Many Emojis", "You can only set up to **10** emojis per trigger.")
+            return await ctx.reply(view=view)
+
+        triggers = await self.get_triggers(ctx.guild.id)
+        if len(triggers) >= 10:
+            view = CV2(f"{ICONS_WARNING} Trigger Limit Reached", "You can only set up to 10 triggers for auto-reactions in this guild.")
+            return await ctx.reply(view=view)
+
+        if await self.trigger_exists(ctx.guild.id, trigger):
+            view = CV2(f"{ICONS_WARNING} Trigger Exists", f"The trigger '{trigger}' already exists. Remove it before adding it again.")
+            return await ctx.reply(view=view)
+
+        async with aiosqlite.connect(self.db_path) as db:
+            await db.execute("INSERT INTO autoreact (guild_id, trigger, emojis) VALUES (?, ?, ?)", 
+                             (ctx.guild.id, trigger, " ".join(emoji_list)))
+            await db.commit()
+
+        view = CV2(f"{TICK} Trigger Added", f"Successfully added trigger '{trigger}' with emojis {', '.join(emoji_list)}.")
+        await ctx.reply(view=view)
+
+    @react.command(name="remove", aliases=["clear", "delete"], help="Removes a trigger and its emojis from the autoreact.")
+    @blacklist_check()
+    @ignore_check()
+    @commands.cooldown(1, 4, commands.BucketType.user)
+    @commands.max_concurrency(1, per=commands.BucketType.default, wait=False)
+    @commands.guild_only()
+    @commands.has_permissions(administrator=True)
+    async def remove(self, ctx, trigger: str):
+        if not await self.trigger_exists(ctx.guild.id, trigger):
+            view = CV2(f"{CROSS} Trigger Not Found", f"The trigger '{trigger}' does not exist.")
+            return await ctx.reply(view=view)
+
+        async with aiosqlite.connect(self.db_path) as db:
+            await db.execute("DELETE FROM autoreact WHERE guild_id = ? AND trigger = ?", (ctx.guild.id, trigger))
+            await db.commit()
+
+        view = CV2(f"{TICK} Trigger Removed", f"Successfully removed trigger '{trigger}'.")
+        await ctx.reply(view=view)
+
+    @react.command(name="list", aliases=["show", "config"], help="Lists all the triggers and their emojis in the autoreact module.")
+    @blacklist_check()
+    @ignore_check()
+    @commands.cooldown(1, 4, commands.BucketType.user)
+    @commands.max_concurrency(1, per=commands.BucketType.default, wait=False)
+    @commands.guild_only()
+    @commands.has_permissions(administrator=True)
+    async def list(self, ctx):
+        triggers = await self.get_triggers(ctx.guild.id)
+        if not triggers:
+            view = CV2("No Triggers Set", "There are no auto-reaction triggers set in this guild.")
+            return await ctx.reply(view=view)
+
+        trigger_list = "\n".join([f"**{t[0]}:** {t[1]}" for t in triggers])
+        view = CV2("Auto-Reaction Triggers", trigger_list)
+        await ctx.reply(view=view)
+
+    @react.command(name="reset", help="Resets all the triggers and their emojis in the autoreact module.")
+    @blacklist_check()
+    @ignore_check()
+    @commands.cooldown(1, 4, commands.BucketType.user)
+    @commands.max_concurrency(1, per=commands.BucketType.default, wait=False)
+    @commands.guild_only()
+    @commands.has_permissions(administrator=True)
+    async def reset(self, ctx):
+        triggers = await self.get_triggers(ctx.guild.id)
+        if not triggers:
+            view = CV2(f"{CROSS} No Triggers Set", "There are no auto-reaction triggers set to reset.")
+            return await ctx.reply(view=view)
+
+        async with aiosqlite.connect(self.db_path) as db:
+            await db.execute("DELETE FROM autoreact WHERE guild_id = ?", (ctx.guild.id,))
+            await db.commit()
+
+        view = CV2(f"{TICK} All Triggers Reset", "Successfully removed all auto-reaction triggers.")
+        await ctx.reply(view=view)
+
+async def setup(bot):
+    await bot.add_cog(AutoReaction(bot))