@helyx/bot 0.4.41 → 0.4.42

package/CHANGELOG.md

@@ -1,5 +1,11 @@
 # Changelog
 
+## 0.4.42
+
+### Patch Changes
+
+- Include in-progress giveaway draws linked to a Discord user in privacy access and erasure processing, and reject modules that omit Discord identity record fields from their privacy declarations.
+
 ## 0.4.41
 
 ### Patch Changes

package/dist/control-server.js

@@ -15,6 +15,7 @@ import { assertVersion, dashboardActionPermissionId, declaredManagedResourcePerm
 import { dashboardCommands, } from "./dashboard-commands.js";
 import { availabilityCatalogueDefinitions, availabilityCatalogue, dashboardModuleStatus, disabledModuleSummary, moduleAvailabilityService, moduleAvailabilityStates, } from "./module-availability-control.js";
 import { registerGuildCommandControlRoutes } from "./guild-command-control-routes.js";
+import { createPrivacyProviderRegistry, describePrivacyProviders, } from "./privacy-provider-registry.js";
 const snowflake = z.string().regex(/^\d{17,20}$/u);
 const moduleId = z.string().regex(/^[a-z][a-z0-9]*(?:[.-][a-z0-9]+)+$/u);
 const MAX_DISCORD_SETTING_SELECTIONS = 25;
@@ -284,14 +285,7 @@ export class BotControlService {
         this.#installations = services.get(HELYX_SERVICE_NAMES.installations);
         this.#permissions = services.get(HELYX_SERVICE_NAMES.permissions);
         this.#services = services;
-        this.#privacyProviders = new Map(privacyExecutor
-            ? modules
-                .filter((module) => module.privacy !== undefined)
-                .map((module) => {
-                const provider = module.privacy.create(privacyExecutor, this.#services);
-                return [provider.id, provider];
-            })
-            : []);
+        this.#privacyProviders = createPrivacyProviderRegistry(modules, privacyExecutor, this.#services);
     }
     async cleanupOAuthConsumer(input) {
         const module = this.#modules.get(input.moduleId);
@@ -391,13 +385,7 @@ export class BotControlService {
             .then((receipt) => actionReceiptSchema.parse(receipt));
     }
     listPrivacyProviders() {
-        return Promise.resolve([...this.#privacyProviders.values()]
-            .map((provider) => ({
-            id: provider.id,
-            version: provider.version,
-            containsPersonalData: provider.describe().containsPersonalData,
-        }))
-            .sort((left, right) => left.id.localeCompare(right.id)));
+        return Promise.resolve(describePrivacyProviders(this.#privacyProviders));
     }
     capturePrivacy(input) {
         const provider = this.#privacyProvider(input.providerId, input.providerVersion);

package/dist/modules.js

@@ -204,6 +204,19 @@ function validatePrivacyParity(definition) {
             }
         }
     }
+    const subjectFieldsByCollection = new Map(definition.manifest.privacy.collections.map((collection) => [
+        collection.name,
+        new Set(collection.subjectFields.map(({ field }) => field)),
+    ]));
+    for (const [collectionName, collection] of Object.entries(definition.records ?? {})) {
+        const declaredSubjectFields = subjectFieldsByCollection.get(collectionName);
+        for (const field of Object.keys(collection.fields)) {
+            if (isDiscordIdentityRecordField(field) &&
+                !declaredSubjectFields?.has(field)) {
+                throw new Error(`Module record field containing a Discord identity is not declared for privacy access: ${collectionName}.${field}`);
+            }
+        }
+    }
     const unavailable = () => {
         throw new Error("Privacy provider executor is unavailable during loading");
     };
@@ -220,6 +233,11 @@ function validatePrivacyParity(definition) {
         throw new Error("Module manifest privacy declaration does not match executable provider");
     }
 }
+function isDiscordIdentityRecordField(field) {
+    return (/(?:^|_)(?:user_id|member_id|subject_id)$/u.test(field) ||
+        field === "created_by" ||
+        field === "updated_by");
+}
 function assertSameContributionIds(declared, executable, label) {
     if (new Set(executable).size !== executable.length) {
         throw new Error(`Module has duplicate executable ${label}`);

package/dist/privacy-provider-registry.d.ts

@@ -0,0 +1,8 @@
+import type { ModuleDefinition, PrivacyProvider, PrivacyProviderExecutor, ServiceAccess } from "@helyx/sdk";
+export declare function createPrivacyProviderRegistry(modules: readonly ModuleDefinition[], executor: PrivacyProviderExecutor | undefined, services: ServiceAccess): ReadonlyMap<string, PrivacyProvider>;
+export declare function describePrivacyProviders(providers: ReadonlyMap<string, PrivacyProvider>): readonly {
+    id: string;
+    version: number;
+    containsPersonalData: boolean;
+}[];
+//# sourceMappingURL=privacy-provider-registry.d.ts.map

package/dist/privacy-provider-registry.js

@@ -0,0 +1,20 @@
+export function createPrivacyProviderRegistry(modules, executor, services) {
+    if (!executor)
+        return new Map();
+    return new Map(modules.flatMap((module) => {
+        if (!module.privacy)
+            return [];
+        const provider = module.privacy.create(executor, services);
+        return [[provider.id, provider]];
+    }));
+}
+export function describePrivacyProviders(providers) {
+    return [...providers.values()]
+        .map((provider) => ({
+        id: provider.id,
+        version: provider.version,
+        containsPersonalData: provider.describe().containsPersonalData,
+    }))
+        .sort((left, right) => left.id.localeCompare(right.id));
+}
+//# sourceMappingURL=privacy-provider-registry.js.map

package/package.json

@@ -1,74 +1,74 @@
-{
-  "name": "@helyx/bot",
-  "version": "0.4.41",
-  "description": "Production Discord runtime for the modular Helyx platform.",
-  "keywords": [
-    "helyx",
-    "discord",
-    "bot",
-    "modular"
-  ],
-  "private": false,
-  "license": "HSAL 1.0",
-  "homepage": "https://helyx.gg/",
-  "bugs": {
-    "url": "https://github.com/ZyC0R3/Helyx/issues"
-  },
-  "repository": {
-    "type": "git",
-    "url": "git+https://github.com/ZyC0R3/Helyx.git",
-    "directory": "apps/bot"
-  },
-  "engines": {
-    "node": ">=24 <27",
-    "npm": ">=11"
-  },
-  "publishConfig": {
-    "access": "public",
-    "provenance": true
-  },
-  "type": "module",
-  "files": [
-    "dist",
-    "!dist/*.tsbuildinfo",
-    "!dist/**/*.map",
-    "documentation",
-    "CHANGELOG.md",
-    "README.md",
-    "LICENSE"
-  ],
-  "exports": {
-    ".": {
-      "types": "./dist/index.d.ts",
-      "default": "./dist/index.js"
-    }
-  },
-  "scripts": {
-    "build": "tsc -b",
-    "prepack": "node ../../scripts/public-documentation.mjs --sync-bot",
-    "dev": "node --env-file-if-exists=../../.env --import tsx src/index.ts",
-    "start": "node --env-file-if-exists=../../.env dist/index.js"
-  },
-  "dependencies": {
-    "@helyx/config": ">=0.5.0 <0.6.0",
-    "@helyx/control-protocol": ">=0.4.0 <0.5.0",
-    "@helyx/core": ">=0.1.0 <0.2.0",
-    "@helyx/database": ">=0.8.6 <0.9.0",
-    "@helyx/framework": ">=0.1.0 <0.2.0",
-    "@helyx/module-manifest": ">=0.7.0 <0.8.0",
-    "@helyx/platform": ">=0.6.2 <0.7.0",
-    "@helyx/sdk": ">=0.8.4 <0.9.0",
-    "@helyx/status-client": ">=0.1.0 <0.2.0",
-    "@helyx/verification-contracts": ">=0.3.0 <0.4.0",
-    "discord.js": "14.27.0",
-    "fastify": "5.10.0",
-    "pino": "10.3.1",
-    "redis": "6.1.0",
-    "undici": "6.28.0",
-    "ws": "8.21.1",
-    "zod": "4.4.3"
-  },
-  "devDependencies": {
-    "@types/ws": "8.18.1"
-  }
-}
+{
+  "name": "@helyx/bot",
+  "version": "0.4.42",
+  "description": "Production Discord runtime for the modular Helyx platform.",
+  "keywords": [
+    "helyx",
+    "discord",
+    "bot",
+    "modular"
+  ],
+  "private": false,
+  "license": "HSAL 1.0",
+  "homepage": "https://helyx.gg/",
+  "bugs": {
+    "url": "https://github.com/ZyC0R3/Helyx/issues"
+  },
+  "repository": {
+    "type": "git",
+    "url": "git+https://github.com/ZyC0R3/Helyx.git",
+    "directory": "apps/bot"
+  },
+  "engines": {
+    "node": ">=24 <27",
+    "npm": ">=11"
+  },
+  "publishConfig": {
+    "access": "public",
+    "provenance": true
+  },
+  "type": "module",
+  "files": [
+    "dist",
+    "!dist/*.tsbuildinfo",
+    "!dist/**/*.map",
+    "documentation",
+    "CHANGELOG.md",
+    "README.md",
+    "LICENSE"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "default": "./dist/index.js"
+    }
+  },
+  "scripts": {
+    "build": "tsc -b",
+    "prepack": "node ../../scripts/public-documentation.mjs --sync-bot",
+    "dev": "node --env-file-if-exists=../../.env --import tsx src/index.ts",
+    "start": "node --env-file-if-exists=../../.env dist/index.js"
+  },
+  "dependencies": {
+    "@helyx/config": ">=0.5.0 <0.6.0",
+    "@helyx/control-protocol": ">=0.4.0 <0.5.0",
+    "@helyx/core": ">=0.1.0 <0.2.0",
+    "@helyx/database": ">=0.8.6 <0.9.0",
+    "@helyx/framework": ">=0.1.0 <0.2.0",
+    "@helyx/module-manifest": ">=0.7.0 <0.8.0",
+    "@helyx/platform": ">=0.6.2 <0.7.0",
+    "@helyx/sdk": ">=0.8.4 <0.9.0",
+    "@helyx/status-client": ">=0.1.0 <0.2.0",
+    "@helyx/verification-contracts": ">=0.3.0 <0.4.0",
+    "discord.js": "14.27.0",
+    "fastify": "5.10.0",
+    "pino": "10.3.1",
+    "redis": "6.1.0",
+    "undici": "6.28.0",
+    "ws": "8.21.1",
+    "zod": "4.4.3"
+  },
+  "devDependencies": {
+    "@types/ws": "8.18.1"
+  }
+}