@helyx/module-account-gate 2.0.4 → 2.1.1

package/CHANGELOG.md

@@ -1,5 +1,47 @@
 # Changelog
 
+## 2.1.1
+
+### Patch Changes
+
+- Updated dependencies [7034a9c]
+  - @helyx/sdk@0.16.0
+
+## 2.1.0
+
+### Minor Changes
+
+- Prepare the coordinated Phase 8 minor release and align internal package dependencies. Existing deployment and database-support restrictions are unchanged.
+
+  Use a bounded generation identifier for durable Access Control revocation tasks,
+  while preserving legacy payload keys and stale-generation protection.
+
+  Give Emoji Entry panels the existing bound Start check control, explain the
+  start-first step for Password and Emoji guides, and reject stale Emoji panel
+  controls after the configured gate changes without starting sessions from reactions.
+
+  Align the panel editor hint and dashboard defaults with the start-first flow,
+  and document the actual Settings > Publish gate route for new panels.
+
+  Run terminal role delivery only through the existing leased durable worker,
+  so concurrent completion paths cannot remove a successfully granted access role.
+
+  Update challenge progress in the same private message, replacing outdated
+  buttons so members can complete multi-step checks without selecting old controls.
+
+### Patch Changes
+
+- Updated dependencies
+  - @helyx/module-manifest@0.13.0
+  - @helyx/sdk@0.15.0
+
+## 2.0.5
+
+### Patch Changes
+
+- Bound internal dependencies to compatible releases while preserving each
+  consumer's required minimum API version.
+
 ## 2.0.4
 
 ### Patch Changes
@@ -120,25 +162,7 @@
 
 ### Patch Changes
 
-- Accept compatible internal Helyx releases within explicit minor-safe pre-1.0 or major-safe stable ranges, preventing dependency-only patch cascades.---
-  "@helyx/bot": patch
-  "@helyx/cli": patch
-  "@helyx/core": patch
-  "@helyx/framework": patch
-  "@helyx/platform": patch
-  "@helyx/sdk": patch
-  "@helyx/module-account-gate": patch
-  "@helyx/module-feedback": patch
-  "@helyx/module-giveaways": patch
-  "@helyx/module-levels": patch
-  "@helyx/module-logging": patch
-  "@helyx/module-polls": patch
-  "@helyx/module-reactionroles": patch
-  "@helyx/module-suggestions": patch
-  "@helyx/module-welcome": patch
-  ---
-
-  Accept compatible internal Helyx releases within explicit minor-safe pre-1.0 or major-safe stable ranges, preventing dependency-only patch cascades.
+- Accept compatible internal Helyx releases within explicit minor-safe pre-1.0 or major-safe stable ranges, preventing dependency-only patch cascades.
 
 ## 1.0.8
 

package/README.md

@@ -28,7 +28,7 @@ Every slash-command path has its own permission identity and dashboard override.
 
 ## Dashboard configuration
 
-Settings cover access type, roles, gate and staff-review channels, attempt and timing controls, account age, returning-member behavior, final-failure action, and optional strict mode. Managed resources publish, edit, repair, or repost gate panels and maintain server questions. The Members resource exposes bounded current state and guarded review or revoke actions.
+Settings cover access type, roles, gate and staff-review channels, attempt and timing controls, account age, returning-member behavior, final-failure action, and optional strict mode. In Settings, **Publish gate** saves the configuration and publishes a panel with the entered instructions. Resources edits, repairs or reposts existing panels and maintains server questions. The Members resource exposes bounded current state and guarded review or revoke actions.
 
 Activation validates the selected roles, channels, Discord capabilities, published panel, and at least one enabled question when Server Questions is used. Helyx does not maintain a second allowlist for every channel visible to a pending role; managers configure those Discord overwrites directly.
 

package/dist/challenge-interactions.js

@@ -4,7 +4,14 @@ import { recordAccountGateAttempt } from "./member-restart.js";
 import { boundComponentId, parseComponentBinding, replyError, secureRandom, } from "./runtime-support.js";
 import { challengeMessage, requiredRuntimeConfiguration, } from "./setup-presentation.js";
 import { scheduleSessionExpiry } from "./task-scheduling.js";
-import { ensureTerminalFinalization, finalizeTerminalFinalization, } from "./terminal-finalization.js";
+import { ensureTerminalFinalization } from "./terminal-finalization.js";
+async function presentChallengeResponse(context, response) {
+    if (context.updateResponse) {
+        await context.updateResponse(response);
+        return;
+    }
+    await context.reply(response);
+}
 export async function processAction(context, action, binding) {
     if (!context.serverId) {
         await replyError(context, "This Access Control interaction is unavailable.");
@@ -46,7 +53,7 @@ export async function processAction(context, action, binding) {
             sessionId: session.sessionId,
             expiredAt: session.expiresAt,
         });
-        await context.reply(challengeMessage(result.state, {
+        await presentChallengeResponse(context, challengeMessage(result.state, {
             sessionId: session.sessionId,
             version: updated.version,
         }));
@@ -69,7 +76,7 @@ export async function processAction(context, action, binding) {
         expiredAt: session.expiresAt,
     });
     if (result.outcome === "advanced") {
-        await context.reply(challengeMessage(result.state, {
+        await presentChallengeResponse(context, challengeMessage(result.state, {
             sessionId: session.sessionId,
             version: advanced.version,
         }));
@@ -91,8 +98,7 @@ export async function finaliseAttempt(context, sessionId, result, challengeType)
     await recordAccountGateAttempt(records, guildId, context.userId, sessionId, result.state, challengeType, result.outcome);
     if (!(await ensureTerminalFinalization(context.services, guildId, context.userId, sessionId, result.state, result.outcome)))
         return;
-    await finalizeTerminalFinalization(context.services, guildId, sessionId);
-    await context.reply({
+    await presentChallengeResponse(context, {
         ephemeral: true,
         componentsV2: {
             accentColor: result.outcome === "passed" ? GREEN : RED,
@@ -153,7 +159,7 @@ export async function rerollChallenge(context) {
         sessionId: session.sessionId,
         expiredAt: session.expiresAt,
     });
-    await context.reply(challengeMessage(state, {
+    await presentChallengeResponse(context, challengeMessage(state, {
         sessionId: session.sessionId,
         version: updated.version,
     }));

package/dist/contracts.d.ts

@@ -2,7 +2,7 @@ export declare const ACCOUNT_GATE_IDENTITY: {
     readonly packageName: "@helyx/module-account-gate";
     readonly moduleId: "helyx.account-gate";
     readonly name: "Access Control";
-    readonly version: "2.0.4";
+    readonly version: "2.1.1";
     readonly releaseStatus: "live";
     readonly category: "safety";
     readonly icon: "shield-check";

package/dist/contracts.js

@@ -2,7 +2,7 @@ export const ACCOUNT_GATE_IDENTITY = {
     packageName: "@helyx/module-account-gate",
     moduleId: "helyx.account-gate",
     name: "Access Control",
-    version: "2.0.4",
+    version: "2.1.1",
     releaseStatus: "live",
     category: "safety",
     icon: "shield-check",

package/dist/expiry-workflows.js

@@ -4,7 +4,7 @@ import { createReview } from "./review-store.js";
 import { dateValue, numberValue } from "./runtime-support.js";
 import { requiredRuntimeConfiguration } from "./setup-presentation.js";
 import { armRecordRetention } from "./task-scheduling.js";
-import { ensureTerminalFinalization, finalizeTerminalFinalization, } from "./terminal-finalization.js";
+import { ensureTerminalFinalization } from "./terminal-finalization.js";
 export function validateJoinDeadlinePayload(input) {
     if (!input || typeof input !== "object" || Array.isArray(input))
         throw new Error("Account Gate join-deadline payload is invalid");
@@ -215,7 +215,6 @@ export async function expireSession(context, task) {
     if (expiredState.status === "failed") {
         if (!(await ensureTerminalFinalization(context.services, guildId, userId, sessionId, expiredState, "failed")))
             return { outcome: "completed" };
-        await finalizeTerminalFinalization(context.services, guildId, sessionId);
         return { outcome: "completed" };
     }
     if (expiredState.status === "passed") {
@@ -247,7 +246,6 @@ export async function expireSession(context, task) {
             if (recorded.created)
                 await armRecordRetention(records, guildId, "attempts", "attempt_id", attemptId, retentionUntil);
         }
-        await finalizeTerminalFinalization(context.services, guildId, sessionId);
         return { outcome: "completed" };
     }
     const challengeType = expiredState.chain[expiredState.currentStep]?.type;

package/dist/gateway-interactions.js

@@ -4,7 +4,7 @@ import { recordAccountGateAttempt } from "./member-restart.js";
 import { canonicalEmojiKey, staticResumeMessage } from "./runtime-support.js";
 import { configurationForPanel, getConfiguration, requiredRuntimeConfiguration, validateAccountGateSetup, } from "./setup-presentation.js";
 import { scheduleSessionExpiry } from "./task-scheduling.js";
-import { ensureTerminalFinalization, finalizeTerminalFinalization, } from "./terminal-finalization.js";
+import { ensureTerminalFinalization } from "./terminal-finalization.js";
 export async function handlePasswordEntry(context) {
     if (context.userIsBot || context.webhookId !== null)
         return;
@@ -119,6 +119,5 @@ export async function processGatewayAction(services, guildId, userId, session, a
         });
         return;
     }
-    await finalizeTerminalFinalization(services, guildId, session.sessionId);
 }
 //# sourceMappingURL=gateway-interactions.js.map

package/dist/index.js

@@ -41,6 +41,14 @@ const everyonePolicy = {
 };
 export const accountGateModule = defineModule({
     manifest,
+    async admissionGate(input) {
+        const configuration = await getConfiguration(input.services, input.guildId);
+        if (!configuration)
+            return "ready";
+        return input.roleIds.includes(configuration.verifiedRoleId)
+            ? "ready"
+            : "pending";
+    },
     exclusiveCapabilities: ["entry-role-workflow"],
     async validateActivation(context) {
         const configuration = await getConfiguration(context.services, context.guildId);
@@ -130,7 +138,7 @@ export const accountGateModule = defineModule({
         modals: [
             {
                 customIdPrefix: ACCOUNT_GATE_COMPONENTS.recallSubmitPrefix,
-                acknowledgement: "deferred-ephemeral",
+                acknowledgement: "deferred-update",
                 execute: submitRecallModal,
             },
         ],

package/dist/member-revocation.js

@@ -33,7 +33,7 @@ export async function revokeMemberAccess(input) {
             payload: {
                 guildId: input.guildId,
                 memberUserId: input.memberUserId,
-                generation: String(generation),
+                generationId: String(generation),
             },
             scheduledFor: now,
         },
@@ -68,17 +68,24 @@ export function validateRevocationPayload(input) {
     if (!input || typeof input !== "object" || Array.isArray(input))
         throw new Error("Account Gate revocation payload is invalid");
     const value = input;
-    if (typeof value.guildId !== "string" ||
+    const hasGenerationId = Object.hasOwn(value, "generationId");
+    const hasLegacyGeneration = Object.hasOwn(value, "generation");
+    const generationKey = hasGenerationId ? "generationId" : "generation";
+    const generation = value[generationKey];
+    if (Object.keys(value).length !== 3 ||
+        hasGenerationId === hasLegacyGeneration ||
+        typeof value.guildId !== "string" ||
         !/^\d{17,20}$/u.test(value.guildId) ||
         typeof value.memberUserId !== "string" ||
         !/^\d{17,20}$/u.test(value.memberUserId) ||
-        typeof value.generation !== "string" ||
-        !/^[1-9]\d{0,9}$/u.test(value.generation))
+        typeof generation !== "string" ||
+        !/^[1-9]\d{0,9}$/u.test(generation))
         throw new Error("Account Gate revocation payload is invalid");
     return {
         guildId: value.guildId,
         memberUserId: value.memberUserId,
-        generation: value.generation,
+        // Keep legacy keys intact: the runner compares validated and stored payloads.
+        [generationKey]: generation,
     };
 }
 export async function reconcileRevocationTask(context, task) {
@@ -90,7 +97,7 @@ export async function reconcileRevocationTask(context, task) {
             outcome: "requires_review",
             safeCode: "revocation-configuration-missing",
         };
-    await reconcileRevokedMember(context.services, task.payload.guildId, task.payload.memberUserId, Number(task.payload.generation), parseAccountGateConfiguration(configurationRecord.value));
+    await reconcileRevokedMember(context.services, task.payload.guildId, task.payload.memberUserId, Number(task.payload.generationId ?? task.payload.generation), parseAccountGateConfiguration(configurationRecord.value));
     return { outcome: "completed" };
 }
 async function reconcileRevokedMember(services, guildId, memberUserId, generation, configuration) {

package/dist/member-start.js

@@ -1,15 +1,33 @@
-import { HELYX_SERVICE_NAMES, generateChallengeChain, ACCOUNT_GATE_COMPONENTS, ACCOUNT_GATE_SESSION_PURPOSE, validateRuntimeCapabilities, getGatePanelRuntime, createAccountGateSessionState, parseAccountGateSessionState, VIOLET, GREEN, RED, } from "./runtime-dependencies.js";
+import { HELYX_SERVICE_NAMES, ACCOUNT_GATE_IDENTITY, generateChallengeChain, ACCOUNT_GATE_COMPONENTS, ACCOUNT_GATE_SESSION_PURPOSE, validateRuntimeCapabilities, getGatePanelRuntime, createAccountGateSessionState, parseAccountGateSessionState, VIOLET, GREEN, RED, } from "./runtime-dependencies.js";
 import { resumeRevokedMember } from "./member-restart.js";
 import { loadMemberSummary } from "./member-summary.js";
 import { dateValue, numberValue, replyError, secureRandom, } from "./runtime-support.js";
 import { challengeMessage, configurationForPanel, currentStrictMode, getConfiguration, loadQuestions, validateAccountGateSetup, } from "./setup-presentation.js";
 import { scheduleSessionExpiry } from "./task-scheduling.js";
-import { ensureTerminalFinalization, finalizeTerminalFinalization, } from "./terminal-finalization.js";
+import { ensureTerminalFinalization } from "./terminal-finalization.js";
 export async function startCheck(context) {
     if (!context.serverId) {
         await replyError(context, "Access Control only works in a Discord server.");
         return;
     }
+    const authorised = await context.services
+        .get(HELYX_SERVICE_NAMES.resourceAuthorization)
+        .canUse({
+        guildId: context.serverId,
+        moduleId: ACCOUNT_GATE_IDENTITY.moduleId,
+        permissionId: "account-gate.start",
+        actor: {
+            userId: context.userId,
+            roleIds: context.userRoleIds,
+            permissions: context.userPermissions ?? [],
+            isServerOwner: context.isServerOwner ?? false,
+            isAdministrator: context.isAdministrator,
+        },
+    });
+    if (!authorised) {
+        await replyError(context, "You do not have permission to start an Access Control check.");
+        return;
+    }
     const configuration = await getConfiguration(context.services, context.serverId);
     if (!configuration) {
         await replyError(context, "Access Control has not been configured by the server team.");
@@ -37,6 +55,10 @@ export async function startCheck(context) {
         await replyError(context, "This Challenge panel is not currently active. Ask the server team to publish the current Access Control setup.");
         return;
     }
+    if (panel?.accessType === "emoji" && configuration.accessType !== "emoji") {
+        await replyError(context, "This Emoji Entry panel is not currently active. Ask the server team to publish the current Access Control setup.");
+        return;
+    }
     const activeConfiguration = panel
         ? configurationForPanel(configuration, panel.accessType)
         : configuration;
@@ -92,8 +114,7 @@ export async function startCheck(context) {
         const existingState = parseAccountGateSessionState(existing.state);
         if (existingState.status === "passed" ||
             existingState.status === "failed") {
-            if (await ensureTerminalFinalization(context.services, context.serverId, context.userId, existing.sessionId, existingState, existingState.status))
-                await finalizeTerminalFinalization(context.services, context.serverId, existing.sessionId);
+            await ensureTerminalFinalization(context.services, context.serverId, context.userId, existing.sessionId, existingState, existingState.status);
             const finalizedSummary = await loadMemberSummary(context.services.get(HELYX_SERVICE_NAMES.records), context.serverId, context.userId);
             await context.reply(terminalRecoveryMessage(existingState.status, typeof finalizedSummary?.last_decision === "string"
                 ? finalizedSummary.last_decision

package/dist/panel-model.d.ts

@@ -8,15 +8,6 @@ export interface PanelPassword {
 }
 export declare const DEFAULT_PANEL_MESSAGES: Readonly<Record<GatePanelAccessType, string>>;
 export declare function panelMessage(messageBody: string, accessType: GatePanelAccessType, panelId: string): {
-    allowedUserMentionIds: never[];
-    componentsV2: {
-        text: {
-            content: string;
-            markdown: boolean;
-        }[];
-    };
-    buttons?: never;
-} | {
     allowedUserMentionIds: never[];
     componentsV2: {
         text: ({

package/dist/panel-model.js

@@ -3,16 +3,10 @@ import { ACCOUNT_GATE_COMPONENTS } from "./contracts.js";
 const VIOLET = 0x7c3aed;
 export const DEFAULT_PANEL_MESSAGES = {
     challenges: "Complete a short human-interaction check to access the server. Press the button below when you are ready.",
-    password: "Enter the password for this gate in the Password Entry channel. Never enter your Discord password or authentication code.",
-    emoji: "React with the configured emoji on the Emoji Entry message to continue.",
+    password: "Press Start check, then enter this gate's password in the Password Entry channel. Never enter your Discord password or authentication code.",
+    emoji: "Press Start check, then react with the configured emoji on the Emoji Entry message to continue.",
 };
 export function panelMessage(messageBody, accessType, panelId) {
-    if (accessType === "emoji") {
-        return {
-            allowedUserMentionIds: [],
-            componentsV2: { text: [{ content: messageBody, markdown: false }] },
-        };
-    }
     return {
         allowedUserMentionIds: [],
         componentsV2: {
@@ -21,6 +15,15 @@ export function panelMessage(messageBody, accessType, panelId) {
                 ...(accessType === "challenges"
                     ? [{ content: "## Complete Access Control" }]
                     : []),
+                ...(accessType !== "challenges" &&
+                    messageBody !== DEFAULT_PANEL_MESSAGES[accessType]
+                    ? [
+                        {
+                            content: "Press Start check below before following these instructions. Your check opens privately.",
+                            markdown: false,
+                        },
+                    ]
+                    : []),
                 { content: messageBody, markdown: false },
             ],
         },

package/dist/panel-resource.js

@@ -7,6 +7,7 @@ import { DEFAULT_PANEL_MESSAGES, panelAccessType, panelDetail as detail, panelLi
 import { claimPanelMutation, finalizePanelMutation, } from "./panel-mutations.js";
 import { configuredPanelAccessType as configuredAccessType, inspectedPanelDetail as inspectedDetail, panelPasswordForCreate, panelPasswordForUpdate, } from "./panel-presentation.js";
 import { accountGateRecords } from "./records.js";
+import { gateChannelAudienceError } from "./setup-presentation.js";
 export { getGatePanelRuntime, hasPasswordGatePanel } from "./panel-runtime.js";
 const MAX_GATE_PANELS = 10;
 export const gatePanelResource = {
@@ -162,6 +163,7 @@ async function replacePanel(context, current, action, messageBody, accessType, p
         throw new DashboardActionValidationError("Save Access Control settings before posting the panel.");
     }
     const configuration = parseAccountGateConfiguration(configured.value);
+    await assertGatePanelAudience(context, configuration.gateChannelId, configuration.temporaryRoleIds);
     const store = records(context);
     const claimed = await claimPanelMutation(store, current, {
         ...auditContext(context),
@@ -231,6 +233,18 @@ function assertRevision(current, expectedRevision) {
     if (numberValue(current.revision) !== expectedRevision)
         throw stalePanel();
 }
+async function assertGatePanelAudience(context, channelId, temporaryRoleIds) {
+    const audience = await context.services
+        .get(HELYX_SERVICE_NAMES.discordResources)
+        .inspectChannelAudience({
+        guildId: context.guildId,
+        channelId,
+        roleIds: temporaryRoleIds,
+    });
+    const error = gateChannelAudienceError(audience);
+    if (error)
+        throw new DashboardActionValidationError(error);
+}
 async function post(context, value = {}) {
     const configured = await context.services
         .get(HELYX_SERVICE_NAMES.configuration)
@@ -238,6 +252,7 @@ async function post(context, value = {}) {
     if (!configured)
         throw new DashboardActionValidationError("Save Access Control settings before posting the panel.");
     const configuration = parseAccountGateConfiguration(configured.value);
+    await assertGatePanelAudience(context, configuration.gateChannelId, configuration.temporaryRoleIds);
     const store = records(context);
     const existing = await currentPanelOrNull(context, context.correlationId);
     if (existing)
@@ -281,6 +296,13 @@ async function post(context, value = {}) {
             collection: "gate_panels",
             uniqueBy: ["panel_id"],
             values: row,
+            quotaGuards: [
+                {
+                    collection: "gate_panels",
+                    where: { guild_id: context.guildId },
+                    maximum: MAX_GATE_PANELS,
+                },
+            ],
         });
         if (!created.created) {
             throw new DashboardActionValidationError("That gate-panel request was already handled. Reload the resources list.");

package/dist/setup-presentation.d.ts

@@ -1,7 +1,9 @@
+import type { DiscordChannelAudienceInspection } from "@helyx/sdk";
 import type { MessageResponse, ServiceAccess, AccountGateSessionState, ServerQuestion, AccountGateConfiguration } from "./runtime-dependencies.js";
 export declare function configurationForPanel(configuration: AccountGateConfiguration, accessType: "challenges" | "password" | "emoji"): AccountGateConfiguration;
 export declare function reviewMessage(memberUserId: string, reasonCode: string): MessageResponse;
 export declare function validateAccountGateSetup(services: ServiceAccess, guildId: string, configuration: AccountGateConfiguration, throwOnError?: boolean, allowMissingPanel?: boolean): Promise<readonly string[]>;
+export declare function gateChannelAudienceError(audience: DiscordChannelAudienceInspection): string | null;
 export declare function challengeMessage(state: AccountGateSessionState, binding: {
     sessionId: string;
     version: bigint;

package/dist/setup-presentation.js

@@ -106,10 +106,9 @@ export async function validateAccountGateSetup(services, guildId, configuration,
         errors.push("Helyx Verification already owns this server's entry-role workflow. Disable it before enabling Access Control.");
     if (!gateChannel.viewable || !gateChannel.sendMessages)
         errors.push("Helyx cannot view and send messages in the gate channel.");
-    if (!gateAudience.everyoneCanView &&
-        (gateAudience.roles.length === 0 ||
-            gateAudience.roles.some(({ exists, canView }) => !exists || !canView)))
-        errors.push("The gate channel must be visible to @everyone or every configured temporary member role.");
+    const gateAudienceError = gateChannelAudienceError(gateAudience);
+    if (gateAudienceError)
+        errors.push(gateAudienceError);
     if (!guildCapabilities.manageRoles)
         errors.push("Access Control requires Manage Roles.");
     if (!verifiedRole.assignable)
@@ -203,6 +202,13 @@ export async function validateAccountGateSetup(services, guildId, configuration,
         throw new DashboardActionValidationError(errors[0]);
     return errors;
 }
+export function gateChannelAudienceError(audience) {
+    return !audience.everyoneCanView &&
+        (audience.roles.length === 0 ||
+            audience.roles.some(({ exists, canView }) => !exists || !canView))
+        ? "The gate channel must be visible to @everyone or every configured temporary member role."
+        : null;
+}
 export function challengeMessage(state, binding, options = {}) {
     const challenge = state.chain[state.currentStep];
     if (!challenge) {

package/manifest.json

@@ -1,5 +1,6 @@
 {
   "manifestVersion": "0.4",
+  "databaseEngines": ["postgresql", "mysql"],
   "releaseStatus": "live",
   "deploymentSupport": "both",
   "credentialRisk": "none",
@@ -10,10 +11,10 @@
   "healthExposure": "direct",
   "id": "helyx.account-gate",
   "name": "Access Control",
-  "version": "2.0.4",
+  "version": "2.1.1",
   "description": "Require new members to complete configurable Discord interaction checks before gaining access.",
   "entry": "./dist/index.js",
-  "framework": "^0.1.0",
+  "framework": "^0.2.0",
   "dependencies": [],
   "permissions": [
     "ADD_REACTIONS",
@@ -595,7 +596,7 @@
             "key": "messageBody",
             "type": "string",
             "label": "Message",
-            "description": "Instructions shown to members. Challenge and Password panels add a Start check button; Emoji panels remain instruction-only.",
+            "description": "Instructions shown to members. Challenge, Password and Emoji panels include Start check. Members start first, then follow their private instructions; Emoji reactions still belong on the exact configured message.",
             "required": true,
             "minLength": 1,
             "maxLength": 1000,
@@ -722,6 +723,7 @@
             "description": "Enter two to four incorrect answers, one per line.",
             "required": true,
             "group": "Answers",
+            "multiline": true,
             "minLength": 3,
             "maxLength": 323
           },

package/migrations-mysql/0001_account_gate_foundation.sql

@@ -0,0 +1,249 @@
+-- MySQL-compatible Account Gate baseline. PostgreSQL migration bytes stay immutable.
+-- Hosted Request My Data erasure, including its SECURITY DEFINER suppression
+-- triggers, remains on PostgreSQL. Ordinary module reads/writes use this schema.
+
+CREATE TABLE account_gate_gate_panels (
+  panel_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  channel_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  message_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  message_body VARCHAR(1000) COLLATE utf8mb4_bin NOT NULL DEFAULT
+    'Complete a short human-interaction check to access the server. Press the button below when you are ready.',
+  access_type VARCHAR(10) CHARACTER SET ascii COLLATE ascii_bin NOT NULL DEFAULT 'challenges',
+  password_hash VARCHAR(255) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  password_ignore_case BOOLEAN NOT NULL DEFAULT TRUE,
+  password_trim_whitespace BOOLEAN NOT NULL DEFAULT TRUE,
+  status VARCHAR(7) CHARACTER SET ascii COLLATE ascii_bin NOT NULL DEFAULT 'posted',
+  revision INT NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  KEY account_gate_gate_panels_guild_idx (guild_id, created_at, panel_id),
+  CHECK (CHAR_LENGTH(message_body) BETWEEN 1 AND 1000),
+  CHECK (access_type IN ('challenges', 'password', 'emoji')),
+  CHECK (password_ignore_case IN (0, 1)),
+  CHECK (password_trim_whitespace IN (0, 1)),
+  CHECK (status IN ('posted', 'missing')),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_questions (
+  question_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  question_text VARCHAR(200) COLLATE utf8mb4_bin NOT NULL,
+  answers_json TEXT COLLATE utf8mb4_bin NOT NULL,
+  correct_option_index INT NOT NULL,
+  enabled BOOLEAN NOT NULL,
+  sort_order INT NOT NULL,
+  revision INT NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_questions_guild_question_unique UNIQUE (guild_id, question_id),
+  KEY account_gate_questions_guild_order_idx (guild_id, sort_order, question_id),
+  CHECK (CHAR_LENGTH(question_text) BETWEEN 1 AND 200),
+  CHECK (correct_option_index BETWEEN 0 AND 4),
+  CHECK (enabled IN (0, 1)),
+  CHECK (sort_order BETWEEN 0 AND 1000),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_question_creators (
+  attribution_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  question_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  creator_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_question_creator_question_unique UNIQUE (question_id),
+  KEY account_gate_question_creator_privacy_idx (creator_user_id, created_at, attribution_id)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_attempts (
+  attempt_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  session_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  challenge_type VARCHAR(32) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  outcome VARCHAR(7) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  reason_code VARCHAR(255) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  duration_ms BIGINT NOT NULL,
+  retention_until DATETIME(3) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_attempts_guild_attempt_unique UNIQUE (guild_id, attempt_id),
+  CONSTRAINT account_gate_attempts_session_challenge_unique UNIQUE (guild_id, session_id, challenge_type),
+  KEY account_gate_attempts_member_privacy_idx (member_user_id, created_at, attempt_id),
+  KEY account_gate_attempts_retention_idx (retention_until, attempt_id),
+  CHECK (challenge_type IN (
+    'quick_sum', 'button_sequence', 'number_order', 'symbol_match',
+    'modal_recall', 'server_question', 'password_entry', 'emoji_entry'
+  )),
+  CHECK (outcome IN ('passed', 'failed', 'expired')),
+  CHECK (duration_ms >= 0)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_member_summaries (
+  summary_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  previous_success_at DATETIME(3) NULL,
+  failure_count INT NOT NULL,
+  lockout_until DATETIME(3) NULL,
+  rejoin_count INT NOT NULL,
+  join_generation INT NOT NULL,
+  account_created_at DATETIME(3) NOT NULL,
+  joined_at DATETIME(3) NOT NULL,
+  deadline_at DATETIME(3) NOT NULL,
+  pending_reason VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  last_failure_terminal_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  left_at DATETIME(3) NULL,
+  last_decision VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  revision INT NOT NULL,
+  retention_until DATETIME(3) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  PRIMARY KEY (guild_id, member_user_id),
+  CONSTRAINT account_gate_member_summaries_id_unique UNIQUE (summary_id),
+  KEY account_gate_member_summary_privacy_idx (member_user_id, created_at, guild_id),
+  KEY account_gate_member_summary_retention_idx (retention_until, guild_id, member_user_id),
+  CHECK (failure_count >= 0),
+  CHECK (rejoin_count >= 0),
+  CHECK (join_generation > 0),
+  CHECK (pending_reason IN ('none', 'account_too_new')),
+  CHECK (last_decision IN (
+    'pending', 'finalizing', 'passed', 'failed', 'review', 'kick_pending',
+    'kicked', 'dismissed', 'revoked'
+  )),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_reviews (
+  review_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  pending_key VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  join_generation INT NOT NULL,
+  status VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  pending_member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin
+    GENERATED ALWAYS AS (IF(status = 'pending', member_user_id, NULL)) STORED,
+  delivery_status VARCHAR(7) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  claim_action VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  claim_expires_at DATETIME(3) NULL,
+  reason_code VARCHAR(255) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  challenge_types_json TEXT COLLATE utf8mb4_bin NOT NULL,
+  failed_attempts INT NOT NULL,
+  expired_attempts INT NOT NULL,
+  review_channel_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  review_message_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  decided_by_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  decided_at DATETIME(3) NULL,
+  revision INT NOT NULL,
+  retention_until DATETIME(3) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_reviews_pending_key_unique UNIQUE (pending_key),
+  CONSTRAINT account_gate_reviews_guild_review_unique UNIQUE (guild_id, review_id),
+  CONSTRAINT account_gate_reviews_guild_message_unique UNIQUE (guild_id, review_message_id),
+  CONSTRAINT account_gate_one_pending_review_unique UNIQUE (guild_id, pending_member_user_id),
+  KEY account_gate_reviews_member_privacy_idx (member_user_id, created_at, review_id),
+  KEY account_gate_reviews_actor_privacy_idx (decided_by_user_id, created_at, review_id),
+  KEY account_gate_reviews_retention_idx (retention_until, review_id),
+  CHECK (join_generation > 0),
+  CHECK (status IN (
+    'pending', 'claim_approve', 'claim_retry', 'claim_kick',
+    'claim_dismiss', 'approved', 'retry', 'kicked', 'dismissed'
+  )),
+  CHECK (delivery_status IN ('pending', 'sent', 'failed')),
+  CHECK (failed_attempts >= 0),
+  CHECK (expired_attempts >= 0),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_terminal_finalizations (
+  finalization_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  session_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  join_generation INT NOT NULL,
+  outcome VARCHAR(7) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  challenge_type VARCHAR(32) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  challenge_types_json TEXT COLLATE utf8mb4_bin NOT NULL,
+  work_created_at DATETIME(3) NOT NULL,
+  status VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  revision INT NOT NULL,
+  retention_until DATETIME(3) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_terminal_session_unique UNIQUE (guild_id, session_id),
+  KEY account_gate_terminal_finalization_status_idx (status, created_at, finalization_id),
+  CHECK (join_generation > 0),
+  CHECK (outcome IN ('passed', 'failed')),
+  CHECK (status IN ('pending', 'failure_recorded', 'completed', 'cancelled')),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_role_transitions (
+  transition_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  verified_role_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  pending_remove_role_ids_json TEXT COLLATE utf8mb4_bin NOT NULL,
+  status VARCHAR(10) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  revision INT NOT NULL,
+  next_retry_at DATETIME(3) NULL,
+  completed_at DATETIME(3) NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  CONSTRAINT account_gate_role_transition_guild_id_unique UNIQUE (guild_id, transition_id),
+  CONSTRAINT account_gate_role_transition_member_unique UNIQUE (guild_id, member_user_id),
+  KEY account_gate_role_transition_privacy_idx (member_user_id, created_at, transition_id),
+  KEY account_gate_role_transition_retry_idx (status, next_retry_at, transition_id),
+  CHECK (status IN ('pending', 'partial', 'completed', 'review')),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_strict_modes (
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  status VARCHAR(8) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  ends_at DATETIME(3) NOT NULL,
+  generation INT NOT NULL,
+  activated_by_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NULL,
+  revision INT NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  updated_at DATETIME(3) NOT NULL,
+  KEY account_gate_strict_mode_expiry_idx (status, ends_at, guild_id),
+  KEY account_gate_strict_mode_actor_privacy_idx (activated_by_user_id, created_at, guild_id),
+  CHECK (status IN ('active', 'expired', 'disabled')),
+  CHECK (generation > 0),
+  CHECK (revision > 0),
+  CHECK (updated_at >= created_at)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_privacy_suppressions (
+  suppression_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  member_user_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  suppressed_at DATETIME(3) NOT NULL,
+  created_at DATETIME(3) NOT NULL,
+  PRIMARY KEY (guild_id, member_user_id),
+  CONSTRAINT account_gate_privacy_suppression_id_unique UNIQUE (suppression_id),
+  KEY account_gate_privacy_suppression_subject_idx (member_user_id, created_at, guild_id)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;
+
+CREATE TABLE account_gate_panel_message_cleanup (
+  cleanup_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin PRIMARY KEY,
+  guild_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  panel_id VARCHAR(128) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  channel_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  message_id VARCHAR(20) CHARACTER SET ascii COLLATE ascii_bin NOT NULL,
+  attempts INT NOT NULL DEFAULT 0,
+  next_attempt_at DATETIME(3) NOT NULL,
+  completed_at DATETIME(3) NULL,
+  created_at DATETIME(3) NOT NULL DEFAULT CURRENT_TIMESTAMP(3),
+  CONSTRAINT account_gate_panel_cleanup_message_unique UNIQUE (guild_id, channel_id, message_id),
+  KEY account_gate_panel_cleanup_pending_idx (next_attempt_at, cleanup_id),
+  CHECK (attempts >= 0)
+) ENGINE=InnoDB DEFAULT CHARACTER SET=utf8mb4 COLLATE=utf8mb4_bin;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@helyx/module-account-gate",
-  "version": "2.0.4",
+  "version": "2.1.1",
   "description": "Require configurable Discord interaction checks before new members gain access.",
   "keywords": [
     "helyx",
@@ -24,7 +24,7 @@
   },
   "publishConfig": {
     "access": "public",
-    "provenance": true
+    "provenance": false
   },
   "type": "module",
   "files": [
@@ -32,6 +32,7 @@
     "!dist/*.tsbuildinfo",
     "!dist/**/*.map",
     "migrations",
+    "migrations-mysql",
     "manifest.json",
     "README.md",
     "CHANGELOG.md",
@@ -49,7 +50,7 @@
     "test": "vitest run --root ../.. modules/account-gate/tests"
   },
   "dependencies": {
-    "@helyx/module-manifest": ">=0.11.0 <0.12.0",
-    "@helyx/sdk": ">=0.14.0"
+    "@helyx/module-manifest": ">=0.13.0 <0.14.0",
+    "@helyx/sdk": ">=0.16.0 <0.17.0"
   }
 }