@geminixiang/mikan 1.0.0-beta.2 → 1.0.0-beta.20

package/CHANGELOG.md

@@ -9,6 +9,360 @@ any release.
 
 ## [Unreleased]
 
+## [1.0.0-beta.20]
+
+### Fixed
+
+- Validate subagent `outputSchema` correctly when it arrives as plain JSON Schema (the only form tool calls can carry), instead of throwing `ValueCheckUnknownTypeError` because it lacks TypeBox's `Kind` metadata.
+
+### Tests
+
+- Add coverage for plain JSON Schema hydration, nested objects, arrays, unions, and validation failures.
+
+## [1.0.0-beta.19]
+
+### Added
+
+- Add fresh in-memory subagents for the main agent and extensions, with explicit tools, budgets, structured output, parallel batches, and bounded DAG orchestration.
+- Stream debounced subagent node progress through the shared Slack, Discord, and Telegram response lifecycle.
+
+### Changed
+
+- Let final responses at the LLM-call cap complete without tripping the run budget when no continuation is required.
+
+### Fixed
+
+- Install worker binaries from the newest GitHub release that contains a matching asset, including prereleases.
+- Restore generic Google Workspace CLI credential mounts in sandbox vaults.
+
+### Tests
+
+- Add coverage for subagent isolation, recursion guards, budgets, structured output, parallel execution, DAG validation and dependency flow, and platform-neutral progress rendering.
+
+## [1.0.0-beta.18]
+
+### Added
+
+- Add an idempotent Debian and Ubuntu worker-host initialization script.
+- Add persistent `mikan-worker` installation as a delegated systemd service.
+- Add NFS export detection with OS-specific setup guidance for `gondolin:remote` workspaces.
+- Ship host-side vault credential files securely to remote workers without placing them in the shared workspace.
+- Add bounded shared-workspace health probes and worker degradation reporting.
+
+### Changed
+
+- Require each Gondolin remote gateway and static worker to declare its shared `workspaceRoot`.
+- Exclude workers with unhealthy shared workspaces from new placements and restore them after a healthy heartbeat.
+
+### Fixed
+
+- Fail remote execution with actionable diagnostics instead of hanging on dead shared-workspace mounts.
+- Create runtime cgroups beneath the worker's delegated cgroup and report missing `Delegate=yes` configuration.
+- Verify downloaded worker binaries against the matching release checksum filename.
+- Validate `gondolin:remote` only after gateway and worker transports are configured.
+
+### Security
+
+- Materialize remote credential files as owner-only, read-only runtime files outside shared workspaces.
+
+### Tests
+
+- Add coverage for worker host services, cgroup delegation, workspace health, credential delivery, NFS advice, remote validation, and idle execution deadlines.
+
+## [1.0.0-beta.17]
+
+### Added
+
+- Add `gondolin:remote` for scheduling sandbox runtimes across a fleet of Linux/KVM workers.
+- Add a standalone `mikan-worker` daemon with mutual TLS, fenced leases, crash recovery, capacity-aware placement, draining, and sticky conversation assignment.
+- Add dial-home worker enrollment through one-time join tokens and a mikan-hosted gateway.
+- Add private workspace projection, vault injection, resource limits, lifecycle reconciliation, and drift recovery to Gondolin runtimes.
+- Add worker installation, enrollment, operations, and remote quickstart documentation with a one-command end-to-end smoke test.
+- Publish `mikan-worker` binaries and checksums with GitHub releases.
+
+### Changed
+
+- Rename the preview sandbox mode from `microvm:default` to `gondolin:default` and the image build command to `npm run gondolin:image:build`.
+
+### Fixed
+
+- Project mounted files correctly into Gondolin guests.
+- Refresh rotated credentials when Gondolin runtimes are recreated.
+
+### Security
+
+- Authenticate remote workers with mutual TLS and fence stale workers through expiring leases.
+- Keep enrollment tokens one-time and store worker credentials privately.
+
+### Tests
+
+- Add coverage for Gondolin lifecycle, workspace isolation, vaults, resource controls, fleet scheduling, gateways, enrollment, workers, leases, and remote execution.
+
+## [1.0.0-beta.16]
+
+### Added
+
+- Add a preview `gondolin:default` sandbox backed by Gondolin and QEMU.
+- Add a curated microVM guest image build with Node.js, Python, uv, Git, ripgrep, fd, jq, SSH, and build tools.
+- Manage one process-local microVM per conversation with idle shutdown and recreation on demand.
+
+### Changed
+
+- Broaden the coverage gate across all source modules.
+
+### Fixed
+
+- Keep top-level Slack file uploads out of threads.
+
+### Tests
+
+- Add coverage for microVM execution and lifecycle, events, logging, disabled vaults, channel storage, and core file and shell tools.
+
+## [1.0.0-beta.15]
+
+### Added
+
+- Add native image generation with automatic upload through the active model provider.
+- Add extension chat commands via `api.registerCommand`: deterministic `/name` dispatch with no model call; built-ins and first registrations win.
+- Add an extension disposal lifecycle (`api.onDispose` or an `activate` return value), run when a harness instance is discarded (`/pi-new`, idle eviction, session rotation).
+- Add `api.triggerRun(text)` to fire an immediate autonomous agent run, `api.uploadFile(path, title)` for proactive file uploads, and an explicit `conversationId` option on `api.notify` for cross-conversation posting.
+- Add `agent_error` and `budget_exceeded` extension hooks so monitoring extensions see failed turns and tripped run budgets.
+- Pass a `RunOrigin` (platform, triggering message id, user identity, attachments) to extension hook events, making `api.react` and per-user extension policy usable.
+- Let `before_agent_start` extensions rewrite the user prompt or block the turn before the model runs; blocked turns leave no trace in the transcript or session store.
+- Let `tool_result` extensions rewrite tool output (content and error flag) before the model and the session store see it, enabling secret redaction and output truncation.
+
+### Changed
+
+- Dispatch `before_agent_start` and `tool_result` hooks with chaining semantics (each handler sees earlier handlers' rewrites; any `block` wins) instead of first-result-wins.
+
+### Fixed
+
+- Dispose cached runners when models switch or environment credentials refresh.
+
+### Tests
+
+- Add coverage for image generation, extension lifecycle and hook rewrites, and runner disposal.
+
+## [1.0.0-beta.14]
+
+### Added
+
+- Add GitHub inline review-thread intake and a `github_review_reply` tool.
+- Add `github_sync`, `github_read`, and `github_issue` tools for repository refresh and issue or pull request operations.
+- Add host-side Cloud Build log retrieval using GCP ADC or Workload Identity Federation.
+- Add a minimal embedder example that runs without portal services.
+
+### Changed
+
+- Update eligible GitHub pull request head branches in place instead of opening duplicate pull requests.
+- Drive platform command registration and routing from a shared command manifest.
+- Use one cross-platform stop grammar, including `/stop` in GitHub conversations.
+- Route sandbox file reads and writes through executors with staged, shell-safe transport.
+- Keep sandbox settings nested through configuration resolution and updates.
+
+### Fixed
+
+- Preserve raw session keys when using Slack's Force Stop button.
+- Spill large bash output into the runtime workspace so sandboxed agents can read it.
+- Keep malformed event files visible in the admin portal for deletion.
+- Unify platform formatting guidance across adapter and conversation contexts.
+
+### Security
+
+- Keep Cloud Build credentials host-side and outside agent sandboxes.
+- Centralize runtime identity and sandbox path sanitization.
+
+### Tests
+
+- Add coverage for GitHub tool operations, review threads, Cloud Build logs, executor file transport, command manifests, runtime embedding, and session serialization.
+
+## [1.0.0-beta.13]
+
+### Added
+
+- Add the `max` thinking level to commands, configuration, and the admin portal.
+- Add quickstart and extension development guides across all supported locales.
+
+### Changed
+
+- Update pi agent dependencies to 0.80.6.
+- Load platform-specific tool packs only for their configured adapters.
+- Improve `github_checks` output and guidance for external CI providers.
+- Synchronize configuration, platform, sandbox, session, skill, event, portal, and deployment documentation across locales.
+
+### Fixed
+
+- Fix broken CLI tables and dead documentation links across locales.
+
+### Security
+
+- Derive ambient shared-vault access from each platform's declared trust model and sandbox topology.
+
+### Tests
+
+- Add coverage for platform tool-pack isolation, external CI checks, and vault trust policy.
+
+## [1.0.0-beta.12]
+
+### Added
+
+- Let `github_checks` fetch the log tail for a failing GitHub Actions job by job ID.
+
+### Changed
+
+- Require GitHub App Actions read permission for job log inspection.
+
+### Fixed
+
+- Treat skipped and neutral GitHub checks separately from failures in check summaries.
+
+### Tests
+
+- Add coverage for job log retrieval and check conclusion classification.
+- Use collision-resistant temporary directories across parallel tests.
+
+## [1.0.0-beta.11]
+
+### Added
+
+- Add a read-only `github_checks` tool for inspecting branch and pull request check runs.
+
+### Changed
+
+- Make `github_pr` idempotent so pushing an existing branch updates its open pull request.
+- Teach the GitHub agent workflow to inspect CI, fix failures, and push updates.
+- Require GitHub App Checks read permission for CI inspection.
+
+### Tests
+
+- Add coverage for GitHub check summaries and existing pull request updates.
+
+## [1.0.0-beta.10]
+
+### Fixed
+
+- Retry cloning a GitHub repository on later triggers when the conversation clone is missing.
+
+### Security
+
+- Stop applying the ambient default shared vault to GitHub conversations while preserving explicit conversation vault grants.
+- Document the platform, shared machine, and personal credential trust boundaries.
+
+### Tests
+
+- Add coverage for GitHub clone retries and platform-gated default vault resolution.
+
+## [1.0.0-beta.9]
+
+### Added
+
+- Clone GitHub repositories into conversation workspaces and check out pull request heads.
+- Add a `github_pr` tool that pushes agent changes from `pi/*` branches and opens pull requests.
+
+### Changed
+
+- Require GitHub App Contents read and write permission for repository automation.
+- Post completed GitHub responses as single comments instead of streaming edits.
+
+### Fixed
+
+- Keep GitHub issue context inside the history recency window.
+
+### Security
+
+- Require commenters to have repository write permission or higher before triggering the agent.
+- Keep installation tokens out of sandboxes and restrict agent pushes to non-force `pi/*` branches.
+
+### Tests
+
+- Add coverage for GitHub repository checkout, permission gating, pull request creation, and branch restrictions.
+
+## [1.0.0-beta.8]
+
+### Added
+
+- Add a GitHub messaging adapter where each issue or pull request is an independent conversation.
+- Add GitHub App authentication, mention and participation triggers, persisted polling cursors, and downtime replay.
+- Add GitHub adapter deployment configuration and documentation.
+
+### Tests
+
+- Add coverage for GitHub polling, authentication, conversation context, triggers, and responses.
+
+## [1.0.0-beta.7]
+
+### Added
+
+- Add TypeScript and npm-package extensions with `package.json` entrypoints and runtime dependencies.
+- Add `mikan ext install`, `validate`, `list`, and `remove` commands.
+- Add extension installation from Git sources and repository subpaths.
+
+### Changed
+
+- Treat reinstalling an extension as an update while preserving its data directory.
+- Use `package.json` as the primary extension metadata source with `manifest.json` as a fallback.
+- Convert the agent project manager example to TypeScript with a typed extension API.
+- Add the Slack `reactions:write` scope and missing slash commands to the manifests and setup guides.
+
+### Tests
+
+- Add coverage for TypeScript loading, package metadata, extension CLI operations, and Git installation.
+
+## [1.0.0-beta.6]
+
+### Added
+
+- Add emoji reactions for agents and extensions across Slack, Discord, and Telegram.
+
+### Changed
+
+- Default the agent project manager example to conversation-scoped extension data.
+- Log when extensions rewrite the system prompt and report the resulting size change.
+
+### Fixed
+
+- Render Slack session links outside the triggered-by italic span.
+
+### Tests
+
+- Add coverage for the reaction tool and extension reaction API.
+
+## [1.0.0-beta.5]
+
+### Added
+
+- Add `api.paths.sharedDataDir` for extension state intentionally shared across conversations.
+- Add an idempotent, dry-run-first script for migrating extension code and data to the new layout.
+
+### Changed
+
+- Store conversation extension code and data under `conversations/<id>/` and global extension assets under `global/`.
+- Make `api.paths.dataDir` conversation-scoped by default to prevent accidental cross-conversation state sharing.
+
+### Tests
+
+- Update extension loader and command coverage for the conversation-scoped layout.
+
+## [1.0.0-beta.4]
+
+### Changed
+
+- Show an extension's slug in `/pi-extensions` when it differs from the manifest display name.
+
+### Fixed
+
+- Reject extensions installed directly at a scope root and show an actionable warning to use a named subdirectory.
+
+### Tests
+
+- Add coverage for scope-root extension mis-install detection and inventory warnings.
+
+## [1.0.0-beta.3]
+
+### Fixed
+
+- Route `/pi-extensions` through Slack and include it in the bundled app manifests.
+
 ## [1.0.0-beta.2]
 
 ### Added

package/README.md

@@ -51,19 +51,45 @@ npm install && npm run build
 
 ## Quick Start
 
-All platforms share the same CLI:
+Run mikan under [PM2](https://pm2.keymetrics.io/) so it stays up, restarts after failures, and starts on boot:
 
 ```bash
-mikan [--state-dir=~/.mikan] [--sandbox=<mode>] <working-directory>
+npm i -g @geminixiang/mikan pm2
+
+# One-time setup: create the state directory and settings
+mikan --onboard --state-dir=~/.mikan
+
+# Grab the maintained ecosystem file, then edit `args` and `env`
+curl -O https://raw.githubusercontent.com/geminixiang/mikan/main/deploy/pm2/ecosystem.config.cjs
+
+pm2 start ecosystem.config.cjs
+pm2 save
+pm2 startup   # run the printed command to enable boot autostart
+```
+
+In `ecosystem.config.cjs`, point `args` at your state dir, sandbox mode, and working directory:
+
+```js
+args: "--state-dir=/srv/mikan/state --sandbox=host /srv/mikan/workspace",
+```
+
+Then set the platform tokens you need in `env`; you can run multiple platforms at once:
+
+```js
+env: {
+  SLACK_APP_TOKEN: "xapp-...",
+  SLACK_BOT_TOKEN: "xoxb-...",
+  TELEGRAM_BOT_TOKEN: "123456:ABC-...",
+  DISCORD_BOT_TOKEN: "MTI...",
+},
 ```
 
-Set the platform tokens you need; you can run multiple platforms at once:
+Tail logs with `pm2 logs mikan`; upgrade with `npm i -g @geminixiang/mikan && pm2 reload mikan`. See [the deployment guide](src/content/docs/deployment.mdx) for sandbox images, graceful shutdown, and the health endpoint.
+
+For a one-off foreground run, the same CLI works directly:
 
 ```bash
-export SLACK_APP_TOKEN=xapp-...
-export SLACK_BOT_TOKEN=xoxb-...
-export TELEGRAM_BOT_TOKEN=123456:ABC-...
-export DISCORD_BOT_TOKEN=MTI...
+mikan [--state-dir=~/.mikan] [--sandbox=<mode>] <working-directory>
 ```
 
 ## Platforms
@@ -88,16 +114,16 @@ For routing, mounts, vault behavior, managed container details, and Firecracker/
 
 ## Chat commands
 
-| Command                                                    | Purpose                                          |
-| ---------------------------------------------------------- | ------------------------------------------------ |
-| `/login` / `/pi-login`                                     | Store API keys or run built-in OAuth flows       |
-| `session` / `/session`                                     | Open a read-only web view of the current session |
-| `new` / `/new`                                             | Reset the current session                        |
-| `model` / `/model` / `/pi-model provider/model[:thinking]` | Switch the LLM for the current conversation      |
-| `auto-reply` / `/pi-auto-reply on\|off\|status`            | Control group/channel auto-reply                 |
-| `stop` / `/stop`                                           | Stop the current run                             |
+| Command                                          | Purpose                                          |
+| ------------------------------------------------ | ------------------------------------------------ |
+| `/login` / `/pi-login`                           | Store API keys or run built-in OAuth flows       |
+| `session` / `/session`                           | Open a read-only web view of the current session |
+| `/new` / `/pi-new`                               | Reset the current session                        |
+| `/model` / `/pi-model provider/model[:thinking]` | Switch the LLM for the current conversation      |
+| `/auto-reply` / `/pi-auto-reply on\|off\|status` | Control group/channel auto-reply                 |
+| `stop` / `/stop`                                 | Stop the current run (works on every platform)   |
 
-See [src/content/docs/commands.md](src/content/docs/commands.md) for command details and web session viewer setup.
+`session` is the only command accepted without a leading slash. See [src/content/docs/commands.mdx](src/content/docs/commands.mdx) for the full command reference and web session viewer setup.
 
 ## Configuration
 

package/dist/adapter.d.ts

@@ -1,2 +1,2 @@
-export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, ChatAdapter, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, PlatformName, PlatformNotifier, RunningSession, } from "./types.js";
+export type { MessagingBot, ConversationContext, ConversationEvent, MessagingEventHandler, ChatAdapter, ConversationMessage, ConversationResponder, ChatToolResult, ConversationKind, MessagingInfo, PlatformName, PlatformNotifier, PlatformReactor, PlatformUploader, RunningSession, } from "./types.js";
 //# sourceMappingURL=adapter.d.ts.map

package/dist/adapter.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC"}
+{"version":3,"file":"adapter.d.ts","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"AAAA,YAAY,EACV,YAAY,EACZ,mBAAmB,EACnB,iBAAiB,EACjB,qBAAqB,EACrB,WAAW,EACX,mBAAmB,EACnB,qBAAqB,EACrB,cAAc,EACd,gBAAgB,EAChB,aAAa,EACb,YAAY,EACZ,gBAAgB,EAChB,eAAe,EACf,gBAAgB,EAChB,cAAc,GACf,MAAM,YAAY,CAAC"}

package/dist/adapter.js.map

@@ -1 +1 @@
-{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ChatAdapter,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  PlatformName,\n  PlatformNotifier,\n  RunningSession,\n} from \"./types.js\";\n"]}
+{"version":3,"file":"adapter.js","sourceRoot":"","sources":["../src/adapter.ts"],"names":[],"mappings":"","sourcesContent":["export type {\n  MessagingBot,\n  ConversationContext,\n  ConversationEvent,\n  MessagingEventHandler,\n  ChatAdapter,\n  ConversationMessage,\n  ConversationResponder,\n  ChatToolResult,\n  ConversationKind,\n  MessagingInfo,\n  PlatformName,\n  PlatformNotifier,\n  PlatformReactor,\n  PlatformUploader,\n  RunningSession,\n} from \"./types.js\";\n"]}

package/dist/adapters/discord/bot.d.ts

@@ -18,6 +18,7 @@ export declare class DiscordMessagingBot implements MessagingBot {
     start(): Promise<void>;
     postMessage(channel: string, text: string): Promise<string>;
     updateMessage(channel: string, ts: string, text: string): Promise<void>;
+    addReaction(channel: string, messageTs: string, emoji: string): Promise<void>;
     enqueueEvent(event: ConversationEvent): boolean;
     getMessagingInfo(): MessagingInfo;
     updateMessageRaw(channelId: string, messageId: string, text: string): Promise<void>;

package/dist/adapters/discord/bot.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../../../src/adapters/discord/bot.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,UAAU,EAEf,KAAK,UAAU,EAKhB,MAAM,YAAY,CAAC;AAIpB,OAAO,KAAK,EACV,YAAY,EAEZ,iBAAiB,EACjB,qBAAqB,EAIrB,aAAa,EACd,MAAM,kBAAkB,CAAC;AAiC1B,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,MAAM,CAA0C;IACxD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,QAAQ,CAAmD;IACnE,OAAO,CAAC,KAAK,CAA4E;IAEzF,YAAY,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAaxF;IAMK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CA+D3B;IAEK,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhE;IAEK,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;IAED,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAe9C;IAED,gBAAgB,IAAI,aAAa,CAWhC;IAMK,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxF;IAEK,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOnF;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc9F;IAEK,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ1E;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnF;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;IAEK,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF;IAED,cAAc,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAE/C;IAED,WAAW,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAErE;IAED,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEhD;IAED,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAEhE;IAED;;;OAGG;IACG,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,EAC3C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAkChD;IAED;;OAEG;YACW,kBAAkB;IAchC,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,0BAA0B;IA2BlC,OAAO,CAAC,0BAA0B;IA6DlC,OAAO,CAAC,kBAAkB;YAwMZ,gBAAgB;CAS/B"}
+{"version":3,"file":"bot.d.ts","sourceRoot":"","sources":["../../../src/adapters/discord/bot.ts"],"names":[],"mappings":"AAAA,OAAO,EAOL,KAAK,UAAU,EAEf,KAAK,UAAU,EAKhB,MAAM,YAAY,CAAC;AAIpB,OAAO,KAAK,EACV,YAAY,EAEZ,iBAAiB,EACjB,qBAAqB,EAIrB,aAAa,EACd,MAAM,kBAAkB,CAAC;AAkC1B,YAAY,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAM/C,qBAAa,mBAAoB,YAAW,YAAY;IACtD,OAAO,CAAC,MAAM,CAAS;IACvB,OAAO,CAAC,OAAO,CAAwB;IACvC,OAAO,CAAC,KAAK,CAAS;IACtB,OAAO,CAAC,UAAU,CAAS;IAC3B,OAAO,CAAC,SAAS,CAAuB;IACxC,OAAO,CAAC,MAAM,CAA0C;IACxD,OAAO,CAAC,WAAW,CAAa;IAChC,OAAO,CAAC,QAAQ,CAAmD;IACnE,OAAO,CAAC,KAAK,CAA4E;IAEzF,YAAY,OAAO,EAAE,qBAAqB,EAAE,MAAM,EAAE;QAAE,KAAK,EAAE,MAAM,CAAC;QAAC,UAAU,EAAE,MAAM,CAAA;KAAE,EAaxF;IAMK,KAAK,IAAI,OAAO,CAAC,IAAI,CAAC,CAyC3B;IAEK,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMhE;IAEK,aAAa,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAE5E;IAEK,WAAW,CAAC,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQlF;IAED,YAAY,CAAC,KAAK,EAAE,iBAAiB,GAAG,OAAO,CAe9C;IAED,gBAAgB,IAAI,aAAa,CAYhC;IAMK,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAMxF;IAEK,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAOnF;IAEK,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,iBAAiB,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAc9F;IAEK,gBAAgB,CAAC,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAQ1E;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOjD;IAEK,UAAU,CAAC,SAAS,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,KAAK,CAAC,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAOnF;IAEK,iBAAiB,CAAC,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,MAAM,CAAC,CAMrE;IAEK,WAAW,CAAC,eAAe,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAEtF;IAED,cAAc,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,IAAI,EAAE,MAAM,CAAA;KAAE,EAAE,CAE/C;IAED,WAAW,IAAI;QAAE,EAAE,EAAE,MAAM,CAAC;QAAC,QAAQ,EAAE,MAAM,CAAC;QAAC,WAAW,EAAE,MAAM,CAAA;KAAE,EAAE,CAErE;IAED,SAAS,CAAC,SAAS,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,GAAG,IAAI,CAEhD;IAED,cAAc,CAAC,SAAS,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,GAAG,IAAI,CAEhE;IAED;;;OAGG;IACG,kBAAkB,CACtB,SAAS,EAAE,MAAM,EACjB,WAAW,EAAE,UAAU,CAAC,MAAM,EAAE,UAAU,CAAC,EAC3C,UAAU,EAAE,MAAM,GACjB,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,EAAE,CAAC,CAkChD;IAED;;OAEG;YACW,kBAAkB;IAchC,OAAO,CAAC,QAAQ;IAShB,OAAO,CAAC,iBAAiB;IAWzB,OAAO,CAAC,mBAAmB;IAiB3B,OAAO,CAAC,wBAAwB;IAKhC,OAAO,CAAC,0BAA0B;IA2BlC,OAAO,CAAC,0BAA0B;IA6DlC,OAAO,CAAC,kBAAkB;YAmLZ,gBAAgB;CAS/B"}

package/dist/adapters/discord/bot.js

@@ -5,6 +5,7 @@ import * as log from "../../log.js";
 import { resolveChatSessionKey } from "../../sessions/policy.js";
 import { formatNothingRunning } from "../../platform-messages.js";
 import { appendBotResponseLog, appendChannelLog, MessagingEventQueue, downloadUrlToFile, resolveOnlyScopedStopTarget, resolveStopTarget, withRetry, } from "../shared.js";
+import { COMMAND_MANIFEST } from "../../commands/manifest.js";
 import { processMessageIntake } from "../intake.js";
 import { createDiscordAdapters } from "./context.js";
 // discord.js: DiscordAPIError exposes `.status` (HTTP status) and a `.code`.
@@ -55,48 +56,24 @@ export class DiscordMessagingBot {
                 this.loadCachedGuildData();
                 this.setupEventHandlers();
                 try {
-                    await readyClient.application.commands.set([
-                        {
-                            name: "login",
-                            description: "Store credentials in your private vault",
-                        },
-                        {
-                            name: "session",
-                            description: "Open the current session in the web viewer",
-                        },
-                        {
-                            name: "new",
-                            description: "Reset conversation history and start fresh",
-                        },
-                        {
-                            name: "stop",
-                            description: "Stop the current conversation",
-                        },
-                        {
-                            name: "model",
-                            description: "Switch this conversation's LLM model",
-                            options: [
-                                {
-                                    name: "model",
-                                    description: "provider/model[:thinking], e.g. anthropic/claude-sonnet-4-6:off",
-                                    type: ApplicationCommandOptionType.String,
-                                    required: false,
-                                },
-                            ],
-                        },
-                        {
-                            name: "sandbox",
-                            description: "Show or temporarily boost this conversation's sandbox limits",
-                            options: [
-                                {
-                                    name: "action",
-                                    description: "Use 'boost' to temporarily apply the configured boost limits",
-                                    type: ApplicationCommandOptionType.String,
-                                    required: false,
-                                },
-                            ],
-                        },
-                    ]);
+                    // Registration derives from the command manifest; routing below
+                    // handles new/stop natively and the rest through one generic path.
+                    await readyClient.application.commands.set(COMMAND_MANIFEST.filter((entry) => entry.discord).map((entry) => ({
+                        name: entry.name,
+                        description: entry.description,
+                        ...(entry.arg
+                            ? {
+                                options: [
+                                    {
+                                        name: entry.arg.name,
+                                        description: entry.arg.description,
+                                        type: ApplicationCommandOptionType.String,
+                                        required: entry.arg.required,
+                                    },
+                                ],
+                            }
+                            : {}),
+                    })));
                 }
                 catch (err) {
                     log.logWarning("Failed to register Discord slash commands", err instanceof Error ? err.message : String(err));
@@ -117,6 +94,15 @@ export class DiscordMessagingBot {
     async updateMessage(channel, ts, text) {
         await this.updateMessageRaw(channel, ts, text);
     }
+    async addReaction(channel, messageTs, emoji) {
+        // Discord uses Unicode emoji directly (e.g. "👀"); accept a bare name too
+        // but Slack-style short names won't resolve, so pass through as-is.
+        await discordRetry(async () => {
+            const ch = await this.fetchTextChannel(channel);
+            const msg = await ch.messages.fetch(messageTs);
+            await msg.react(emoji.replace(/^:|:$/g, ""));
+        });
+    }
     enqueueEvent(event) {
         const conversationId = event.conversationId;
         const queue = this.getQueue(conversationId);
@@ -134,7 +120,8 @@ export class DiscordMessagingBot {
     getMessagingInfo() {
         return {
             name: "discord",
-            formattingGuide: "## Discord Formatting (Markdown)\nBold: **text**, Italic: *text*, Code: `code`, Block: ```language\ncode```\nLinks: [text](url)",
+            trustModel: "membership",
+            formattingGuide: "## Discord Formatting (Markdown)\nBold: **text**, Italic: *text*, Code: `code`, Block: ```language\ncode```\nLinks: [text](url), Spoiler: ||text||\nKeep messages under 2000 characters. Use code blocks for code.",
             channels: this.getAllChannels(),
             users: this.getAllUsers(),
             diagnostics: {
@@ -386,14 +373,9 @@ export class DiscordMessagingBot {
         this.client.on(Events.InteractionCreate, async (interaction) => {
             if (!interaction.isChatInputCommand())
                 return;
-            if (interaction.commandName !== "login" &&
-                interaction.commandName !== "session" &&
-                interaction.commandName !== "new" &&
-                interaction.commandName !== "stop" &&
-                interaction.commandName !== "model" &&
-                interaction.commandName !== "sandbox") {
+            const manifestEntry = COMMAND_MANIFEST.find((entry) => entry.discord && entry.name === interaction.commandName);
+            if (!manifestEntry)
                 return;
-            }
             const isDM = !interaction.inGuild();
             const { conversationId, threadTs } = this.resolveConversationContext({
                 channelId: interaction.channelId,
@@ -410,13 +392,9 @@ export class DiscordMessagingBot {
                 persistentTopLevel: true,
                 threadTs,
             });
-            const modelOption = interaction.commandName === "model"
-                ? interaction.options.getString("model")?.trim()
-                : undefined;
-            const sandboxAction = interaction.commandName === "sandbox"
-                ? interaction.options.getString("action")?.trim()
+            const commandArg = manifestEntry.arg
+                ? interaction.options.getString(manifestEntry.arg.name)?.trim()
                 : undefined;
-            const commandArg = modelOption ?? sandboxAction;
             const commandText = commandArg
                 ? `/${interaction.commandName} ${commandArg}`
                 : `/${interaction.commandName}`;
@@ -525,21 +503,12 @@ export class DiscordMessagingBot {
                 userName,
                 text: cleanedText,
             };
-            // Handle stop before trigger gate — "stop" should never be auto-reply judged.
-            if (cleanedText.toLowerCase() === "stop" || cleanedText.toLowerCase() === "/stop") {
-                const stopTarget = this.resolveStopTarget(conversationId, sessionKey);
-                if (stopTarget) {
-                    await this.handler.handleStop(stopTarget, conversationId, this);
-                }
-                else if (!isAutoReplyCandidate) {
-                    await this.postMessage(conversationId, formatNothingRunning("discord"));
-                }
-                return;
-            }
             await processMessageIntake({
                 eventBase,
                 workingDir: this.workingDir,
                 isAutoReplyCandidate,
+                magicWord: { addressed: !isAutoReplyCandidate, scopeFallback: "top-level" },
+                busyPolicy: "queue",
                 logEntryBase: {
                     date: msg.createdAt.toISOString(),
                     ts: msgId,