@hogsend/plugin-discord 0.25.0 → 0.27.0

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hogsend/plugin-discord",
-  "version": "0.25.0",
+  "version": "0.27.0",
   "type": "module",
   "license": "MIT",
   "repository": {
@@ -23,7 +23,7 @@
     "access": "public"
   },
   "dependencies": {
-    "@hogsend/engine": "^0.25.0"
+    "@hogsend/engine": "^0.27.0"
   },
   "peerDependencies": {
     "discord.js": ">=14.0.0"

package/src/gateway/index.ts

@@ -1,4 +1,8 @@
 export { type PostToIngressArgs, postToIngress } from "./ingress.js";
+export {
+  LINK_VERIFY_COMMANDS,
+  registerSlashCommands,
+} from "./register-commands.js";
 export { createDiscordRuntime } from "./runtime.js";
 export {
   createDiscordGatewayWorker,

package/src/gateway/register-commands.ts

@@ -0,0 +1,68 @@
+import { DISCORD_API_BASE } from "../constants.js";
+
+/**
+ * The slash commands the native `/link` → `/verify` identify loop needs.
+ * `/link` carries no options (it opens a private modal that collects the
+ * email); `/verify` takes the emailed code (STRING option type = 3).
+ */
+export const LINK_VERIFY_COMMANDS = [
+  {
+    name: "link",
+    description: "Link your email to your Discord account",
+  },
+  {
+    name: "verify",
+    description: "Verify a code we emailed you (fallback)",
+    options: [
+      {
+        name: "code",
+        description: "The code from your email",
+        type: 3,
+        required: true,
+      },
+    ],
+  },
+] as const;
+
+/**
+ * Idempotently register `/link` + `/verify` GLOBALLY (a PUT replaces the full
+ * command set), so they appear in EVERY guild the bot is in — the
+ * one-bot-many-guilds story (a guild-scoped PUT would only register in a single
+ * guild and silently break multi-guild). The inline gateway runtime calls this
+ * once the socket is ready, eliminating the forgotten manual
+ * `discord:register-commands` step; idempotent, so re-running on each lease
+ * acquisition (and after a token rotation) is safe.
+ *
+ * Best-effort: a non-2xx logs the HTTP STATUS ONLY (never the bot token, which
+ * Discord's error body can echo) and never throws — the socket is already up.
+ */
+export async function registerSlashCommands(args: {
+  botToken: string;
+  applicationId: string;
+}): Promise<void> {
+  try {
+    const res = await fetch(
+      `${DISCORD_API_BASE}/applications/${args.applicationId}/commands`,
+      {
+        method: "PUT",
+        headers: {
+          "Content-Type": "application/json",
+          Authorization: `Bot ${args.botToken}`,
+        },
+        body: JSON.stringify(LINK_VERIFY_COMMANDS),
+      },
+    );
+    if (!res.ok) {
+      console.error(
+        `discord slash-command registration failed (${res.status})`,
+      );
+    } else {
+      console.log("discord slash-commands registered (/link, /verify)");
+    }
+  } catch (err) {
+    console.error(
+      "discord slash-command registration error:",
+      err instanceof Error ? err.message : String(err),
+    );
+  }
+}

package/src/gateway/worker.ts

@@ -1,6 +1,7 @@
 import { DISCORD_INTENTS } from "../constants.js";
 import { DiscordEvents } from "../events.js";
 import { type PostToIngressResult, postToIngress } from "./ingress.js";
+import { registerSlashCommands } from "./register-commands.js";
 
 /**
  * The long-lived Discord Gateway worker. It is its OWN entrypoint / Railway
@@ -171,6 +172,21 @@ export function createDiscordGatewayWorker(
     });
     c.once("ready", () => {
       console.log("discord gateway worker connected");
+      // Idempotently (re)register /link + /verify so the forgotten manual
+      // `discord:register-commands` step is gone and the commands self-heal
+      // after a token rotation. App id comes from the ready client; GLOBAL
+      // registration so they appear in every guild the bot is in.
+      const appId = c.application?.id;
+      if (appId) {
+        void registerSlashCommands({
+          botToken: config.botToken,
+          applicationId: appId,
+        });
+      } else {
+        console.warn(
+          "discord: no application id on ready; skipping command registration",
+        );
+      }
     });
 
     // Rejects on a bad token or disallowed (un-toggled) privileged intents —