@helyx/bot 1.2.1 → 1.3.0

package/dist/moderation-action-registry.js

@@ -105,6 +105,7 @@ export class BotModerationActionRegistry {
             const evidenceClaims = {
                 caseIds: new Set(),
                 threadIds: new Set(),
+                openingMessageIds: new Set(),
             };
             const requestServices = createRequestBoundServices(this.services, evidenceClaims);
             return await this.#actionProvider.execute({
@@ -117,15 +118,30 @@ export class BotModerationActionRegistry {
                             !OPERATION_KEY_PATTERN.test(delivery.caseId) ||
                             !OPERATION_KEY_PATTERN.test(delivery.operationKey) ||
                             !evidenceClaims.caseIds.has(delivery.caseId) ||
-                            !evidenceClaims.threadIds.has(delivery.threadId))
+                            !evidenceClaims.threadIds.has(delivery.threadId) ||
+                            (delivery.openingMessageId !== undefined &&
+                                (!ID_PATTERN.test(delivery.openingMessageId) ||
+                                    !evidenceClaims.openingMessageIds.has(`${delivery.threadId}:${delivery.openingMessageId}`))))
                             return { outcome: "evidence_unavailable" };
                         if (!this.evidenceDelivery)
                             return { outcome: "evidence_unavailable" };
                         return await this.evidenceDelivery.deliverEvidence({
                             guildId: delivery.guildId,
                             threadId: delivery.threadId,
+                            ...(delivery.openingMessageId
+                                ? { openingMessageId: delivery.openingMessageId }
+                                : {}),
                             evidenceReference: input.request.evidenceReference,
                             operationKey: delivery.operationKey,
+                            context: {
+                                severity: input.request.severity,
+                                occurredAt: input.request.occurredAt,
+                                ...(policy.ruleName ? { ruleName: policy.ruleName } : {}),
+                                confidenceClass: input.request.confidenceClass,
+                                ...(input.request.confidenceScore !== undefined
+                                    ? { confidenceScore: input.request.confidenceScore }
+                                    : {}),
+                            },
                         });
                     },
                 },
@@ -168,6 +184,11 @@ function isValidRequest(request) {
         SAFE_CODE_PATTERN.test(request.reasonCode) &&
         ["low", "medium", "high", "critical"].includes(request.severity) &&
         ["exact", "native_equivalent", "high", "medium", "low"].includes(request.confidenceClass) &&
+        (request.confidenceScore === undefined ||
+            (request.detectionSource === "enhanced" &&
+                Number.isInteger(request.confidenceScore) &&
+                request.confidenceScore >= 0 &&
+                request.confidenceScore <= 100)) &&
         (request.sourceMessage === null ||
             (ID_PATTERN.test(request.sourceMessage.channelId) &&
                 (request.sourceMessage.messageId === null ||
@@ -234,9 +255,20 @@ function createRequestBoundServices(services, claims) {
                     },
                     addMember: (input) => service.addMember(input),
                     removeMember: (input) => service.removeMember(input),
-                    send: (input) => service.send(input),
+                    send: async (input) => {
+                        const result = await service.send(input);
+                        if (claims.threadIds.has(input.threadId) &&
+                            (result.outcome === "sent" || result.outcome === "already_sent"))
+                            claims.openingMessageIds.add(`${input.threadId}:${result.messageId}`);
+                        return result;
+                    },
                     close: (input) => service.close(input),
                     reconcile: (input) => service.reconcile(input),
+                    ...(service.editControls
+                        ? {
+                            editControls: (input) => service.editControls(input),
+                        }
+                        : {}),
                 };
                 return bound;
             }
@@ -254,6 +286,12 @@ function isValidPolicy(policy) {
         policy.windowStartsAt instanceof Date &&
         !Number.isNaN(policy.windowStartsAt.getTime()) &&
         typeof policy.openViolationThread === "boolean" &&
+        (policy.deleteSourceMessage === undefined ||
+            typeof policy.deleteSourceMessage === "boolean") &&
+        (policy.ruleName === undefined ||
+            (typeof policy.ruleName === "string" &&
+                policy.ruleName.trim().length > 0 &&
+                policy.ruleName.length <= 100)) &&
         validRoleIds(policy.globalIgnoredRoleIds, MODERATION_CONTRACT_LIMITS.ignoredRolesPerScope) &&
         validRoleIds(policy.ruleIgnoredRoleIds, MODERATION_CONTRACT_LIMITS.ignoredRolesPerScope) &&
         Boolean(policy.actionPolicy) &&
@@ -325,6 +363,7 @@ function samePolicy(expected, current) {
         expected.configurationRevision === current.configurationRevision &&
         expected.windowStartsAt.getTime() === current.windowStartsAt.getTime() &&
         expected.openViolationThread === current.openViolationThread &&
+        expected.deleteSourceMessage === current.deleteSourceMessage &&
         sameStrings(expected.globalIgnoredRoleIds, current.globalIgnoredRoleIds) &&
         sameStrings(expected.ruleIgnoredRoleIds, current.ruleIgnoredRoleIds) &&
         sameAction(expected.actionPolicy.first, current.actionPolicy.first) &&

package/dist/privacy-provider-registry.d.ts

@@ -1,4 +1,4 @@
-import type { ModuleDefinition, PrivacyProvider, PrivacyProviderExecutor, ServiceAccess } from "@helyx/sdk";
+import { type ModuleDefinition, type PrivacyProvider, type PrivacyProviderExecutor, type ServiceAccess } from "@helyx/sdk";
 export declare function createPrivacyProviderRegistry(modules: readonly ModuleDefinition[], executor: PrivacyProviderExecutor | undefined, services: ServiceAccess): ReadonlyMap<string, PrivacyProvider>;
 export declare function describePrivacyProviders(providers: ReadonlyMap<string, PrivacyProvider>): readonly {
     id: string;

package/dist/privacy-provider-registry.js

@@ -1,12 +1,41 @@
+import { createPrivacyProvider, } from "@helyx/sdk";
 export function createPrivacyProviderRegistry(modules, executor, services) {
     if (!executor)
         return new Map();
-    return new Map(modules.flatMap((module) => {
-        if (!module.privacy)
-            return [];
-        const provider = module.privacy.create(executor, services);
-        return [[provider.id, provider]];
-    }));
+    const configurationDeclaration = {
+        containsPersonalData: true,
+        providerVersion: 1,
+        collections: [
+            {
+                name: "moderation_notification_memberships",
+                createdAtField: "updated_at",
+                subjectFields: [
+                    {
+                        field: "notification_user_id",
+                        role: "staff-notification-recipient",
+                        erasure: "set-null",
+                    },
+                ],
+            },
+        ],
+    };
+    const configurationProvider = createPrivacyProvider({
+        id: "helyx.configuration",
+        declaration: configurationDeclaration,
+        executor,
+    });
+    if (modules.some(({ manifest }) => manifest.id === configurationProvider.id)) {
+        throw new Error("Core configuration privacy identity cannot be a module identity");
+    }
+    return new Map([
+        [configurationProvider.id, configurationProvider],
+        ...modules.flatMap((module) => {
+            if (!module.privacy)
+                return [];
+            const provider = module.privacy.create(executor, services);
+            return [[provider.id, provider]];
+        }),
+    ]);
 }
 export function describePrivacyProviders(providers) {
     return [...providers.values()]

package/dist/shard-router.js

@@ -8,7 +8,7 @@ import { SHARD_CONTROL_TIMEOUT_MS, controlOperationGuildId, guildIdToShardId, sh
 // deadline turned healthy leases into deterministic 503s. Keep the check
 // bounded while allowing normal network variance.
 const LEASE_VALIDATION_TIMEOUT_MS = 3_000;
-const ECKO_RESULT_TIMEOUT_MS = AUTOMOD_SCANNER_LIMITS.actionDeadlineSeconds * 1_000;
+const ECKO_RESULT_TIMEOUT_MS = AUTOMOD_SCANNER_LIMITS.resultAcknowledgementSeconds * 1_000;
 export class ShardControlRouter {
     input;
     constructor(input) {
@@ -30,7 +30,7 @@ export class ShardControlRouter {
     }
     /** Routes an authenticated Ecko result to the current guild owner. */
     acceptHostedEckoResult(input) {
-        return this.#route({ kind: "automod.enhanced.result.accept", ...input }, remainingEnhancedDeadline(input.result));
+        return this.#route({ kind: "automod.enhanced.result.accept", ...input }, ECKO_RESULT_TIMEOUT_MS);
     }
     /** Reads the fenced leader's current Enhanced configuration snapshot. */
     getHostedEckoConfigurationPage(input) {
@@ -336,17 +336,6 @@ async function executeLeaderOperation(input, operation) {
         throw new BotControlTransportError(503, "The shard leader is temporarily unavailable");
     return executePrivacy(input.privacy, operation);
 }
-function remainingEnhancedDeadline(result) {
-    if (!result || typeof result !== "object")
-        return ECKO_RESULT_TIMEOUT_MS;
-    const deadlineAt = result["deadlineAt"];
-    if (typeof deadlineAt !== "string")
-        return ECKO_RESULT_TIMEOUT_MS;
-    const parsed = Date.parse(deadlineAt);
-    if (!Number.isFinite(parsed))
-        return ECKO_RESULT_TIMEOUT_MS;
-    return Math.max(1, Math.min(ECKO_RESULT_TIMEOUT_MS, parsed - Date.now()));
-}
 async function executePrivacy(privacy, operation) {
     if (operation.kind === "privacy.providers.list")
         return (await privacy.listPrivacyProviders());

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helyx/bot",
-  "version": "1.2.1",
+  "version": "1.3.0",
   "description": "Production Discord runtime for the modular Helyx platform.",
   "keywords": [
     "helyx",
@@ -55,9 +55,9 @@
     "@helyx/core": ">=0.1.0 <0.2.0",
     "@helyx/database": ">=2.0.0 <3.0.0",
     "@helyx/framework": ">=0.1.0 <0.2.0",
-    "@helyx/module-manifest": ">=0.10.0 <0.11.0",
+    "@helyx/module-manifest": ">=0.11.0 <0.12.0",
     "@helyx/platform": ">=1.0.0 <2.0.0",
-    "@helyx/sdk": ">=0.12.0 <0.13.0",
+    "@helyx/sdk": ">=0.13.0 <0.14.0",
     "@helyx/status-client": ">=0.2.0 <0.3.0",
     "@helyx/verification-contracts": ">=0.3.0 <0.4.0",
     "discord.js": "14.27.0",