@helyx/bot 0.5.0 → 0.6.2

package/CHANGELOG.md

@@ -1,5 +1,62 @@
 # Changelog
 
+## 0.6.2
+
+### Patch Changes
+
+- Update Fastify to the patched 5.12.3 release used by hosted and self-hosted runtime distributions.
+
+## 0.6.1
+
+### Patch Changes
+
+- Allow Premium slots to be released, reassigned and moved immediately without a
+  transfer cooldown, while preserving atomic entitlement projection and
+  final-source Premium module disablement.
+
+  Add fail-closed Premium quantity incident controls, recoverable allocation
+  management for removed servers, overlapping Stripe webhook-secret rotation and
+  restricted exception diagnostics. Complete the production environment
+  contract for every API and bot schema field.
+
+- Updated dependencies
+  - @helyx/config@1.0.0
+  - @helyx/database@1.0.0
+
+## 0.6.0
+
+### Minor Changes
+
+- 1dfbf5b: Add the reviewed Premium module catalogue and enforce its entitlement across
+  hosted command, interaction, event, scheduled-task, configuration and dashboard
+  mutation paths. Add account-owned Premium slot allocation, the `/activate`
+  Discord flow, final-source-loss repair and optional safe billing lifecycle
+  notifications. Add audited, privacy-aware Admin Premium overrides and
+  deterministic entitlement convergence for inactive subscriptions and quantity
+  reductions, while keeping billing and Premium-only commands out of generated
+  self-host projects.
+
+### Patch Changes
+
+- Updated dependencies [1dfbf5b]
+  - @helyx/config@0.7.0
+  - @helyx/database@0.12.0
+  - @helyx/module-manifest@0.9.0
+  - @helyx/platform@0.8.0
+
+## 0.5.1
+
+### Patch Changes
+
+- 579f2c4: Keep transport-public components behind module availability and enablement,
+  and classify dashboard permission operations separately from Discord commands.
+- Updated dependencies [579f2c4]
+- Updated dependencies [579f2c4]
+- Updated dependencies [579f2c4]
+  - @helyx/sdk@0.11.0
+  - @helyx/config@0.6.0
+  - @helyx/database@0.11.0
+
 ## 0.5.0
 
 ### Minor Changes

package/README.md

@@ -45,10 +45,10 @@ bot-specific `HELYX_STATUS_HEARTBEAT_SECRET`,
 `CF_ACCESS_CLIENT_ID`/`CF_ACCESS_CLIENT_SECRET` pair. Never reuse another
 producer's Access identity or heartbeat secret.
 
-Giveaways also requires the existing `HELYX_DATA_ENCRYPTION_KEY` so core can
-resume secure weighted-selection checkpoints without exposing the selection
-key to a module. Keep it stable across deployments; do not rotate it while a
-giveaway is drawing.
+Giveaways and Invite Tracking also require the existing
+`HELYX_DATA_ENCRYPTION_KEY`. Core uses it for secure weighted-selection
+checkpoints and stable invite-member fingerprints without exposing the key to
+a module. Keep it stable across deployments.
 
 Trivia uses questions already imported into PostgreSQL. Multiple Choice and
 Guess both run entirely from the saved question catalogue, and the bot runtime

package/dist/cloud-management-module.js

@@ -1,4 +1,5 @@
 import { defineModule, } from "@helyx/sdk";
+import { safeError } from "@helyx/core";
 import { Events } from "discord.js";
 import { ClientCloudDiscordDirectory, CloudConnectorUserError, } from "./cloud-connector.js";
 import { INTERNAL_MODULE_MANIFEST_FIELDS } from "./internal-module-manifest.js";
@@ -622,9 +623,4 @@ function restrictedPolicy() {
         deniedUserIds: [],
     };
 }
-function safeError(error) {
-    return error instanceof Error
-        ? { name: error.name, message: error.message }
-        : { name: "Error", message: String(error) };
-}
 //# sourceMappingURL=cloud-management-module.js.map

package/dist/command-registration-policy.js

@@ -5,6 +5,7 @@ const platformGlobalModuleIds = new Set([
     "helyx.oauth",
     "helyx.permissions",
     "helyx.privacy",
+    "helyx.premium-activation",
 ]);
 const deploymentModuleIds = new Set(["helyx.cloud-connect"]);
 const internalGuildModuleIds = new Set(["helyx.developer-operations"]);

package/dist/control-server.d.ts

@@ -7,41 +7,9 @@ import { type BotModuleStatusMutationResult } from "./module-status-control.js";
 import { type FirstTimeCommandSetupHandler } from "./first-time-command-setup.js";
 import { type ShardHealthSnapshot } from "./shard-contracts.js";
 import { type DashboardPermissionState } from "./control-permissions.js";
-import { type DashboardCommandDefinition } from "./dashboard-commands.js";
+import { type DashboardModuleDefinition } from "./dashboard-module-projection.js";
 import { type AvailabilityModuleCatalogue } from "./module-availability-control.js";
 import { registerGuildCommandControlRoutes } from "./guild-command-control-routes.js";
-interface DashboardLogEventDefinition {
-    id: string;
-    name: string;
-    description: string;
-    defaultEnabled: boolean;
-}
-interface DashboardActionDefinition {
-    id: string;
-    label: string;
-    description: string;
-    buttonLabel: string;
-    style: "primary" | "secondary" | "danger";
-}
-type DashboardResourceDefinition = NonNullable<NonNullable<ModuleDefinition["manifest"]["dashboard"]>["resources"]>[number];
-interface DashboardModuleDefinition {
-    id: string;
-    name: string;
-    version: string;
-    summary: string;
-    category: string;
-    icon: string;
-    availability: "available";
-    releaseStatus: "planned" | "testing" | "beta" | "live";
-    requiredPermissions: string[];
-    settings: readonly unknown[];
-    commands: DashboardCommandDefinition[];
-    logEvents: DashboardLogEventDefinition[];
-    actions: DashboardActionDefinition[];
-    achievementTriggers: NonNullable<ModuleDefinition["manifest"]["contributions"]["achievementTriggers"]>;
-    resources: readonly DashboardResourceDefinition[];
-    workspace?: NonNullable<ModuleDefinition["manifest"]["dashboard"]>["workspace"];
-}
 interface DashboardLoggingPolicy {
     eventId: string;
     enabled: boolean;

package/dist/control-server.js

@@ -1,4 +1,5 @@
 import { AuditRepository, GuildAccessPolicyRepository, GuildCommandActiveLeaseError, GuildCommandRevisionConflictError, GuildCommandSetupConflictError, InstallationRepository, ModuleLoggingPolicyRepository, OptimisticConcurrencyError, PermissionPolicyRepository, withTransaction, } from "@helyx/database";
+import { safeError } from "@helyx/core";
 import { DashboardActionValidationError, DEFAULT_GUILD_ACCESS_POLICY, HELYX_SERVICE_NAMES, ModuleStateValidationError, } from "@helyx/sdk";
 import { actionReceiptSchema, signedAssessmentEnvelopeSchema, } from "@helyx/verification-contracts";
 import { canAccessGuildDashboard, canMutatePermissionPolicy, canUseCommand, resolveHelyxAuthority, } from "@helyx/core";
@@ -8,12 +9,13 @@ import { createHash, timingSafeEqual } from "node:crypto";
 import { z, ZodError } from "zod";
 import { addChannelMessageReaction as addDiscordChannelMessageReaction, deleteChannelMessage as deleteDiscordChannelMessage, editChannelMessage as editDiscordChannelMessage, normalizeDiscordPermission, sendToChannel as sendDiscordMessageToChannel, } from "./interactions.js";
 import { mutateDashboardModuleStatus, } from "./module-status-control.js";
+import { canAccessModule, PREMIUM_MODULE_UNAVAILABLE_MESSAGE, } from "./premium-access.js";
 import { completeFirstTimeCommandSetup, } from "./first-time-command-setup.js";
 import { SHARD_HEALTH_STALE_MS, } from "./shard-contracts.js";
-import { dashboardCategoryLabel } from "./dashboard-category.js";
 import { assertVersion, dashboardActionPermissionId, declaredManagedResourcePermission, fromDashboardPolicy, managedResourcePermissionId, permissionPoliciesEqual, permissionPolicyKey, safeOptionalVersion, safeVersion, toDashboardPolicy, } from "./control-permissions.js";
 import { assertPermissionMutationAllowed, BotControlForbiddenError, } from "./control-errors.js";
-import { dashboardCommands, } from "./dashboard-commands.js";
+import { dashboardCommands } from "./dashboard-commands.js";
+import { mapDashboardModule, } from "./dashboard-module-projection.js";
 import { availabilityCatalogueDefinitions, availabilityCatalogue, dashboardModuleStatus, disabledModuleSummary, moduleAvailabilityService, moduleAvailabilityStates, statusCatalogueDefinitions, } from "./module-availability-control.js";
 import { registerGuildCommandControlRoutes } from "./guild-command-control-routes.js";
 import { createPrivacyProviderRegistry, describePrivacyProviders, } from "./privacy-provider-registry.js";
@@ -633,13 +635,13 @@ export class BotControlService {
             dashboardModuleIds: this.#dashboardModules.map(({ id }) => id),
             installations: this.#installations,
             services: this.#services,
-            requireModuleAvailable: () => this.#requireModuleAvailable(input.moduleId),
+            requireModuleAvailable: () => this.#requireModuleAccessible(input.guildId, input.moduleId),
         });
     }
     async completeFirstTimeCommandSetup(input) {
         for (const moduleIdValue of new Set(input.moduleIds)) {
             this.#requireDashboardModule(moduleIdValue);
-            await this.#requireModuleAvailable(moduleIdValue);
+            await this.#requireModuleAccessible(input.guildId, moduleIdValue);
         }
         return completeFirstTimeCommandSetup({
             installations: this.#installations,
@@ -649,7 +651,7 @@ export class BotControlService {
     }
     async updateConfiguration(input) {
         const module = this.#requireDashboardModule(input.moduleId);
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         await this.#validateDiscordSettings(input.guildId, module, input.value);
         if (module.configuration?.validateUpdate) {
             try {
@@ -683,7 +685,7 @@ export class BotControlService {
     }
     async updatePermissions(input) {
         const module = this.#requireDashboardModule(input.moduleId);
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const commands = dashboardCommands(module);
         const supplied = new Map(input.state.commands.map((command) => [command.commandId, command]));
         if (supplied.size !== input.state.commands.length ||
@@ -808,8 +810,8 @@ export class BotControlService {
     }
     async updateLoggingPolicy(input) {
         await Promise.all([
-            this.#requireModuleAvailable(input.moduleId),
-            this.#requireModuleAvailable("helyx.logging"),
+            this.#requireModuleAccessible(input.guildId, input.moduleId),
+            this.#requireModuleAccessible(input.guildId, "helyx.logging"),
         ]);
         if (!this.#modules.has("helyx.logging")) {
             throw new BotControlNotFoundError("Logging is not installed");
@@ -855,7 +857,7 @@ export class BotControlService {
     }
     async executeDashboardAction(input) {
         const module = this.#requireDashboardModule(input.moduleId);
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const declared = module.manifest.dashboard?.actions?.find(({ id }) => id === input.actionId);
         const action = module.dashboardActions?.find(({ id }) => id === input.actionId);
         if (!declared || !action) {
@@ -914,13 +916,13 @@ export class BotControlService {
         })), relation.columns.map(({ key }) => key));
     }
     async previewManagedResource(input) {
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const { module, resource } = this.#prepareManagedResource(input);
         this.#requireManagedResourceOperation(module, input.resourceType, "preview");
         return resource.preview(await this.#managedResourceContext(input, module, "preview"), input.value);
     }
     async createManagedResource(input) {
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const { module, resource } = this.#prepareManagedResource(input);
         this.#requireManagedResourceOperation(module, input.resourceType, "create");
         const context = await this.#managedResourceContext(input, module, "create");
@@ -930,7 +932,7 @@ export class BotControlService {
         return normalizeManagedResourceDetail(managedResourceDetailSchema.parse(await resource.create(context, input.value, input.intent)), managedResourceColumnKeys(module, input.resourceType));
     }
     async updateManagedResource(input) {
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const { module, resource } = this.#prepareManagedResource(input);
         this.#requireManagedResourceOperation(module, input.resourceType, "update");
         return normalizeManagedResourceDetail(managedResourceDetailSchema.parse(await resource.update(await this.#managedResourceContext(input, module, "update"), {
@@ -940,7 +942,7 @@ export class BotControlService {
         })), managedResourceColumnKeys(module, input.resourceType));
     }
     async deleteManagedResource(input) {
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const { module, resource } = this.#prepareManagedResource(input);
         this.#requireManagedResourceOperation(module, input.resourceType, "delete");
         return managedResourceDeleteResultSchema.parse(await resource.delete(await this.#managedResourceContext(input, module, "delete"), {
@@ -949,7 +951,7 @@ export class BotControlService {
         }));
     }
     async executeManagedResourceAction(input) {
-        await this.#requireModuleAvailable(input.moduleId);
+        await this.#requireModuleAccessible(input.guildId, input.moduleId);
         const { module, resource } = this.#prepareManagedResource(input);
         const declared = module.manifest.dashboard?.resources
             ?.find(({ id }) => id === input.resourceType)
@@ -1053,6 +1055,12 @@ export class BotControlService {
         if (availability && !(await availability.isAvailable(moduleIdValue)))
             throw new BotControlValidationError("This module is temporarily unavailable for all hosted servers.");
     }
+    async #requireModuleAccessible(guildId, moduleIdValue) {
+        await this.#requireModuleAvailable(moduleIdValue);
+        const module = this.#requireModule(moduleIdValue);
+        if (!(await canAccessModule(this.#services, guildId, module)))
+            throw new BotControlValidationError(PREMIUM_MODULE_UNAVAILABLE_MESSAGE);
+    }
     #requireDashboardModule(moduleIdValue) {
         const module = this.#requireModule(moduleIdValue);
         if (!module.manifest.dashboard)
@@ -1703,10 +1711,7 @@ export async function createBotControlServer(input) {
             return reply.code(mapped.status).send({ message: mapped.message });
         if (error instanceof BotControlTransportError)
             return reply.code(error.status).send({ message: error.message });
-        const safeError = error instanceof Error
-            ? { name: error.name, message: error.message }
-            : { name: "Error", message: "Unknown control failure" };
-        request.log.error({ error: safeError }, "Private bot control request failed");
+        request.log.error({ error: safeError(error) }, "Private bot control request failed");
         return reply.code(500).send({ message: "The control request failed" });
     });
     return server;
@@ -1885,27 +1890,4 @@ function validateManagedResourceActionValue(inputs, value) {
             throw new DashboardActionValidationError(`${input.label} is not a valid action value.`);
     }
 }
-function mapDashboardModule(module) {
-    const dashboard = module.manifest.dashboard;
-    return {
-        id: module.manifest.id,
-        name: module.manifest.name,
-        version: module.manifest.version,
-        summary: module.manifest.description,
-        category: dashboardCategoryLabel(dashboard.category),
-        icon: dashboard.icon,
-        availability: "available",
-        releaseStatus: module.manifest.releaseStatus,
-        requiredPermissions: [...module.manifest.permissions],
-        settings: dashboard.settings,
-        commands: dashboardCommands(module),
-        logEvents: (module.logging?.events ?? []).map((event) => ({ ...event })),
-        actions: (dashboard.actions ?? []).map((action) => ({ ...action })),
-        achievementTriggers: (module.manifest.contributions?.achievementTriggers ?? []).map((trigger) => structuredClone(trigger)),
-        resources: (dashboard.resources ?? []).map((resource) => structuredClone(resource)),
-        workspace: dashboard.workspace
-            ? structuredClone(dashboard.workspace)
-            : undefined,
-    };
-}
 //# sourceMappingURL=control-server.js.map

package/dist/dashboard-commands.d.ts

@@ -4,6 +4,7 @@ export interface DashboardCommandDefinition {
     id: string;
     name: string;
     description: string;
+    kind: "command" | "operation";
     defaultPreset: DashboardPermissionPolicy["preset"];
 }
 export declare function dashboardCommands(module: ModuleDefinition): DashboardCommandDefinition[];

package/dist/dashboard-commands.js

@@ -5,6 +5,7 @@ export function dashboardCommands(module) {
         id: command.id,
         name: command.name,
         description: command.description,
+        kind: command.kind,
     }));
     return [
         ...new Map(commands.map((command) => [command.id, command])).values(),

package/dist/dashboard-module-projection.d.ts

@@ -0,0 +1,39 @@
+import { type ModuleTier } from "@helyx/module-manifest";
+import type { ModuleDefinition } from "@helyx/sdk";
+import { type DashboardCommandDefinition } from "./dashboard-commands.js";
+interface DashboardLogEventDefinition {
+    id: string;
+    name: string;
+    description: string;
+    defaultEnabled: boolean;
+}
+interface DashboardActionDefinition {
+    id: string;
+    label: string;
+    description: string;
+    buttonLabel: string;
+    style: "primary" | "secondary" | "danger";
+}
+type DashboardResourceDefinition = NonNullable<NonNullable<ModuleDefinition["manifest"]["dashboard"]>["resources"]>[number];
+export interface DashboardModuleDefinition {
+    id: string;
+    name: string;
+    version: string;
+    summary: string;
+    category: string;
+    icon: string;
+    availability: "available";
+    releaseStatus: "planned" | "testing" | "beta" | "live";
+    tier: ModuleTier;
+    requiredPermissions: string[];
+    settings: readonly unknown[];
+    commands: DashboardCommandDefinition[];
+    logEvents: DashboardLogEventDefinition[];
+    actions: DashboardActionDefinition[];
+    achievementTriggers: NonNullable<ModuleDefinition["manifest"]["contributions"]["achievementTriggers"]>;
+    resources: readonly DashboardResourceDefinition[];
+    workspace?: NonNullable<ModuleDefinition["manifest"]["dashboard"]>["workspace"];
+}
+export declare function mapDashboardModule(module: ModuleDefinition): DashboardModuleDefinition;
+export {};
+//# sourceMappingURL=dashboard-module-projection.d.ts.map

package/dist/dashboard-module-projection.js

@@ -0,0 +1,28 @@
+import { getModuleTier } from "@helyx/module-manifest";
+import { dashboardCategoryLabel } from "./dashboard-category.js";
+import { dashboardCommands, } from "./dashboard-commands.js";
+export function mapDashboardModule(module) {
+    const dashboard = module.manifest.dashboard;
+    return {
+        id: module.manifest.id,
+        name: module.manifest.name,
+        version: module.manifest.version,
+        summary: module.manifest.description,
+        category: dashboardCategoryLabel(dashboard.category),
+        icon: dashboard.icon,
+        availability: "available",
+        releaseStatus: module.manifest.releaseStatus,
+        tier: getModuleTier(module.manifest),
+        requiredPermissions: [...module.manifest.permissions],
+        settings: dashboard.settings,
+        commands: dashboardCommands(module),
+        logEvents: (module.logging?.events ?? []).map((event) => ({ ...event })),
+        actions: (dashboard.actions ?? []).map((action) => ({ ...action })),
+        achievementTriggers: (module.manifest.contributions?.achievementTriggers ?? []).map((trigger) => structuredClone(trigger)),
+        resources: (dashboard.resources ?? []).map((resource) => structuredClone(resource)),
+        workspace: dashboard.workspace
+            ? structuredClone(dashboard.workspace)
+            : undefined,
+    };
+}
+//# sourceMappingURL=dashboard-module-projection.js.map

package/dist/events.d.ts

@@ -1,7 +1,7 @@
 import type { DiscordChannelAudienceInspection, DiscordChannelInspection, DiscordEmojiInspection, DiscordMessageInspection, DiscordGuildCapabilityInspection, DiscordGuildChannelAudienceInspection, DiscordResourceInspectionService, DiscordRoleInspection, DiscordMessageService, InstallationService, MemberEnforcementService, MemberRoleService, ModuleDefinition, ServiceAccess, VerificationMemberService } from "@helyx/sdk";
 import { type Client, type MessageReaction, type PartialMessageReaction } from "discord.js";
 import { type InteractionLogger } from "./interactions.js";
-export declare function availabilityAwareInstallations(services: ServiceAccess): Pick<InstallationService, "isModuleEnabled">;
+export declare function availabilityAwareInstallations(services: ServiceAccess, modulesById?: ReadonlyMap<string, ModuleDefinition>): Pick<InstallationService, "isModuleEnabled">;
 export declare function installModuleEvents(client: Client, modules: readonly ModuleDefinition[], logger: InteractionLogger, services: ServiceAccess): ModuleEventHandle;
 export interface ModuleEventHandle {
     stop(): Promise<void>;

package/dist/events.js

@@ -1,9 +1,11 @@
 import { HELYX_SERVICE_NAMES } from "@helyx/sdk";
+import { safeError } from "@helyx/core";
 import { ChannelType, Events, GatewayIntentBits, GuildMemberFlags, PermissionFlagsBits, RESTJSONErrorCodes, UserFlags, } from "discord.js";
 import { toReplyOptions } from "./interactions.js";
 import { createHash } from "node:crypto";
 import { classifyGuildMessage, unavailableGuildMessageClassification, } from "./message-classification.js";
-export function availabilityAwareInstallations(services) {
+import { canAccessModule } from "./premium-access.js";
+export function availabilityAwareInstallations(services, modulesById) {
     const installations = services.get(HELYX_SERVICE_NAMES.installations);
     const candidate = typeof services.has === "function" &&
         services.has(HELYX_SERVICE_NAMES.moduleAvailability)
@@ -12,12 +14,15 @@ export function availabilityAwareInstallations(services) {
     const availability = typeof candidate?.isAvailable === "function" ? candidate : null;
     return {
         async isModuleEnabled(guildId, moduleId) {
+            const module = modulesById?.get(moduleId);
             return ((!availability || (await availability.isAvailable(moduleId))) &&
-                installations.isModuleEnabled(guildId, moduleId));
+                (await installations.isModuleEnabled(guildId, moduleId)) &&
+                (!module || (await canAccessModule(services, guildId, module))));
         },
     };
 }
 export function installModuleEvents(client, modules, logger, services) {
+    const modulesById = new Map(modules.map((module) => [module.manifest.id, module]));
     const privilegedMessageContributions = modules.flatMap((module) => (module.events?.privilegedMessageCreate ?? []).map((contribution) => ({
         moduleId: module.manifest.id,
         contribution,
@@ -149,7 +154,7 @@ export function installModuleEvents(client, modules, logger, services) {
             if (!message.guildId || !privilegedEligibilityQueue)
                 return;
             privilegedEligibilityQueue.enqueue(message.guildId, async () => {
-                const installations = availabilityAwareInstallations(services);
+                const installations = availabilityAwareInstallations(services, modulesById);
                 const eligible = [];
                 for (const item of privilegedMessageContributions) {
                     try {
@@ -301,7 +306,7 @@ export function installModuleEvents(client, modules, logger, services) {
         });
     }
     async function handleResourceLifecycle(contributions, serverId, identifier, resourceId, eventName) {
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of contributions) {
             try {
                 if (!(await installations.isModuleEnabled(serverId, moduleId))) {
@@ -327,7 +332,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handlePrivilegedMessageCreate(message, contributions) {
         if (!message.guildId || !message.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of contributions) {
             try {
                 if (!(await installations.isModuleEnabled(message.guildId, moduleId)))
@@ -360,7 +365,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handleGuildMessageCreate(message) {
         if (!message.guildId || !message.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         const parentChannelId = message.channel.isThread()
             ? (message.channel.parentId ?? undefined)
             : undefined;
@@ -456,7 +461,7 @@ export function installModuleEvents(client, modules, logger, services) {
                 : reaction.message;
             if (!message.guildId || !message.channelId)
                 return;
-            const installations = availabilityAwareInstallations(services);
+            const installations = availabilityAwareInstallations(services, modulesById);
             const member = await message.guild?.members.fetch(user.id);
             const userRoleIds = member ? [...member.roles.cache.keys()] : [];
             const parentChannelId = messageParentChannelId(message);
@@ -472,6 +477,14 @@ export function installModuleEvents(client, modules, logger, services) {
                         messageId: message.id,
                         userId: receivedUser.id,
                         userRoleIds,
+                        userPermissions: member?.permissions
+                            .toArray()
+                            .map((permission) => permission
+                            .replaceAll(/([a-z0-9])([A-Z])/g, "$1_$2")
+                            .toUpperCase()) ?? [],
+                        isServerOwner: message.guild?.ownerId === user.id,
+                        isAdministrator: member?.permissions.has(PermissionFlagsBits.Administrator) ??
+                            false,
                         emojiKey: reactionEmojiKey(reaction),
                         emojiIdentifier: reactionEmojiIdentifier(reaction),
                         reactionCount: Math.max(0, reaction.count ?? 0),
@@ -513,7 +526,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handleMemberAdd(member) {
         if (!member.joinedAt)
             throw new Error("Discord member join timestamp is unavailable");
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         const continuityGeneration = inviteInspection
             ? inviteInspection.continuityGeneration({ guildId: member.guild.id })
             : `runtime:${client.readyTimestamp ?? 0}`;
@@ -563,7 +576,7 @@ export function installModuleEvents(client, modules, logger, services) {
         }
     }
     async function handleMemberRemove(member) {
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of memberRemoveContributions) {
             try {
                 if (!(await installations.isModuleEnabled(member.guild.id, moduleId))) {
@@ -603,7 +616,7 @@ export function installModuleEvents(client, modules, logger, services) {
                 : reaction.message;
             if (!message.guildId || !message.channelId)
                 return;
-            const installations = availabilityAwareInstallations(services);
+            const installations = availabilityAwareInstallations(services, modulesById);
             const parentChannelId = messageParentChannelId(message);
             for (const { moduleId, contribution } of reactionRemoveContributions) {
                 if (!(await installations.isModuleEnabled(message.guildId, moduleId))) {
@@ -647,7 +660,7 @@ export function installModuleEvents(client, modules, logger, services) {
             : receivedMessage;
         if (!message.guildId || !message.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of reactionRemoveAllContributions) {
             try {
                 if (!(await installations.isModuleEnabled(message.guildId, moduleId)))
@@ -677,7 +690,7 @@ export function installModuleEvents(client, modules, logger, services) {
         const message = reaction.message;
         if (!message.guildId || !message.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of reactionRemoveEmojiContributions) {
             try {
                 if (!(await installations.isModuleEnabled(message.guildId, moduleId)))
@@ -705,7 +718,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handleMessageUpdate(receivedMessage) {
         if (!receivedMessage.guildId || !receivedMessage.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of messageUpdateContributions) {
             try {
                 if (!(await installations.isModuleEnabled(receivedMessage.guildId, moduleId)))
@@ -739,7 +752,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handleMessageDelete(message) {
         if (!message.guildId || !message.channelId)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         for (const { moduleId, contribution } of messageDeleteContributions) {
             try {
                 if (!(await installations.isModuleEnabled(message.guildId, moduleId))) {
@@ -766,7 +779,7 @@ export function installModuleEvents(client, modules, logger, services) {
     async function handleMessageDeleteBulk(guildId, channelId, messageIds) {
         if (messageIds.length === 0)
             return;
-        const installations = availabilityAwareInstallations(services);
+        const installations = availabilityAwareInstallations(services, modulesById);
         const boundedIds = messageIds.slice(0, 100);
         for (const { moduleId, contribution } of messageDeleteBulkContributions) {
             try {
@@ -800,7 +813,7 @@ export function installModuleEvents(client, modules, logger, services) {
             voiceSessions.delete(key);
             const endedAt = new Date();
             const durationSeconds = Math.max(1, Math.floor((endedAt.getTime() - previous.startedAt.getTime()) / 1_000));
-            const installations = availabilityAwareInstallations(services);
+            const installations = availabilityAwareInstallations(services, modulesById);
             for (const { moduleId, contribution } of guildVoiceSessionContributions) {
                 try {
                     if (!(await installations.isModuleEnabled(previous.guildId, moduleId)))
@@ -2061,8 +2074,4 @@ function isSingleUnicodeEmoji(value) {
     ];
     return graphemes.length === 1;
 }
-function safeError(error) {
-    const value = error instanceof Error ? error : new Error(String(error));
-    return { name: value.name, message: value.message };
-}
 //# sourceMappingURL=events.js.map

package/dist/guilds.js

@@ -1,4 +1,5 @@
 import { InstallationRepository, GuildCommandRepository, withTransaction, } from "@helyx/database";
+import { safeError } from "@helyx/core";
 import { Events } from "discord.js";
 const RECONCILIATION_PAGE_SIZE = 250;
 const DEFAULT_RECONCILIATION_INTERVAL_MS = 15 * 60 * 1_000;
@@ -214,8 +215,4 @@ export function installGuildTracking(client, database, modules, logger, enabledB
     };
     return prepare;
 }
-function safeError(error) {
-    const value = error instanceof Error ? error : new Error(String(error));
-    return { name: value.name, message: value.message };
-}
 //# sourceMappingURL=guilds.js.map