@loomcycle/bridge-discord 0.2.0 → 0.4.0

package/README.md

@@ -1,17 +1,18 @@
 # @loomcycle/bridge-discord
 
-A Discord bot for a [loomcycle](https://github.com/denn-gubsky/loomcycle) interactive agent. People talk to the agent with slash commands. In a DM each person is their own loomcycle user, with their own runs, memory, history, budget and rate limit; a server channel is a loomcycle user of its own.
+A Discord bot for a [loomcycle](https://github.com/denn-gubsky/loomcycle) interactive agent. People talk to the agent with slash commands. In a DM each person is their own loomcycle user, with their own runs, memory, history and rate limit, and a token budget of their own when loomcycle holds one for them (the gate's `new_user.budget`, below); a server channel is a loomcycle user of its own.
 
 - **Slash commands:** `/ask prompt:<text>` talks to the agent, `/new` starts over, `/stop` stops the current answer, `/help` lists them.
 - **Steering:** an `/ask` sent while the agent is working reaches it mid-turn.
 - **Questions and reviews** from the agent arrive as messages with buttons.
 - **Restarts lose nothing:** the next `/ask` continues the conversation, with the agent's full history.
+- **Voice messages** (opt-in): ask with your own voice message through its **Apps → Ask by voice** menu, and hear the reply as a Discord voice message (below).
 
 It is built on `@loomcycle/bridge-core`, which holds the per-user tokens, conversations and cards every bridge shares. Design: RFC EQ (Bridges) in the loomcycle document store.
 
 ## What v1 does not do
 
-The bridge takes Discord **interactions over HTTP** only. It does not connect to the Gateway, so it never sees ordinary messages: people use `/ask`, in a server or in a DM. Free-text messages need the Gateway and are a later phase.
+The bridge takes Discord **interactions over HTTP** only. It does not connect to the Gateway, so it never sees ordinary messages: people use `/ask`, in a server or in a DM. Free-text messages, and voice messages sent without the **Ask by voice** command, need the Gateway and are a later phase.
 
 ## How it works
 
@@ -45,7 +46,7 @@ Run loomcycle with authentication on and a persistent store. Then:
 1. In the [Developer Portal](https://discord.com/developers/applications), create an application.
 2. **General Information:** copy the **Application ID** (`DISCORD_APPLICATION_ID`) and the **Public Key** (`DISCORD_PUBLIC_KEY`).
 3. **Bot:** reset and copy the token (`DISCORD_BOT_TOKEN`). The bot needs no privileged intents.
-4. **Installation:** keep **Guild Install** only. For the install link, add the scopes `bot` and `applications.commands`, and the bot permissions *Send Messages* and *View Channels*. Install it in your server.
+4. **Installation:** keep **Guild Install** only. For the install link, add the scopes `bot` and `applications.commands`, and the bot permissions *Send Messages* and *View Channels*. With voice messages on, also *Send Voice Messages* and *Attach Files* (permissions integer `70368744213504`, against `3072` without voice). Install it in your server.
 5. Start the bridge (below), then set **Interactions Endpoint URL** to `https://<bridge-host>/discord/interactions`. Discord checks the URL with a PING when you save it, so the bridge must be running and reachable; it also probes the endpoint with bad signatures from time to time.
 
 ### 3. Run the bridge
@@ -60,7 +61,7 @@ Or run the container image, `denngubsky/loomcycle-bridge-discord` (also `ghcr.io
 docker run --env-file discord-bridge.env -p 8080:8080 -v discord-bridge-data:/data denngubsky/loomcycle-bridge-discord:<version>
 ```
 
-With `DISCORD_BRIDGE_REGISTER_COMMANDS=1` the bridge registers its four commands when it starts:
+With `DISCORD_BRIDGE_REGISTER_COMMANDS=1` the bridge registers its four commands when it starts, and with `BRIDGE_VOICE=1` the **Ask by voice** message command beside them:
 
 - **in each allowed server, as that server's commands.** They take effect at once and show only where the bot answers.
 - **globally, limited to the bot's DMs,** when DMs are on. Commands in DMs can only be global, and limiting them to DMs keeps a server from listing them twice.
@@ -73,15 +74,15 @@ The shared settings, as every bridge reads them:
 
 | Variable | Meaning | Default |
 |---|---|---|
-| `LOOMCYCLE_BASE_URL` | loomcycle's private URL | required |
-| `LOOMCYCLE_TOKEN` | The bridge's `substrate:tenant` token | required |
+| `LOOMCYCLE_BASE_URL` | loomcycle's URL. From `@loomcycle/bridge-core` 0.4.0: `https://`, or `http://` to localhost; over a private network set `BRIDGE_ALLOW_INSECURE_LOOMCYCLE=1` | required |
+| `LOOMCYCLE_TOKEN` | The bridge's `substrate:tenant` token | required, unless the bridge is a gate (below) |
 | `BRIDGE_AGENT` | The loomcycle agent every conversation runs | required |
 | `BRIDGE_TOKEN_TTL_SECONDS` | Lifetime of a user's token | `43200` |
 | `BRIDGE_RATE_PER_MINUTE`, `BRIDGE_RATE_BURST` | Runs a user may start per minute, and the burst | `6`, `10` |
 | `BRIDGE_USER_ACCESS_MODE` | `isolated` (a user sees only their own data) or `tenant` | `isolated` |
 | `BRIDGE_IDLE_MINUTES` | End a conversation's run after this long without a message; the next message continues it | `1440` |
 | `BRIDGE_STORE` | `memory`, or `file:<path>` to survive restarts on one instance | `memory` |
-| `BRIDGE_DEV` | `1` turns signature verification off, for local testing only | unset |
+| `BRIDGE_DEV` | `1` turns signature verification off, for local testing only. From `@loomcycle/bridge-core` 0.4.0 it is refused on a gate, and the listener binds loopback only | unset |
 | `PORT` | Listen port | `8080` |
 
 Discord's:
@@ -97,7 +98,76 @@ Discord's:
 | `DISCORD_BRIDGE_REGISTER_COMMANDS` | `1` registers the commands at start | off |
 | `DISCORD_BRIDGE_API_BASE_URL` | Discord's REST API (`https`, or `http` to localhost for a test fake) | `https://discord.com/api/v10` |
 
-**The bridge is closed by default.** It refuses to start unless `DISCORD_BRIDGE_ALLOWED_GUILDS` or `DISCORD_BRIDGE_ALLOW_DMS=1` opens something: anyone on the internet can reach a Discord bot, and every message it answers runs on your model keys. `DISCORD_BRIDGE_ALLOW_DMS=1` means exactly that, so pair it with the rate limit and loomcycle's token budgets.
+**The bridge is closed by default.** It refuses to start unless `DISCORD_BRIDGE_ALLOWED_GUILDS` or `DISCORD_BRIDGE_ALLOW_DMS=1` opens something: anyone on the internet can reach a Discord bot, and every message it answers runs on your model keys. `DISCORD_BRIDGE_ALLOW_DMS=1` means exactly that, so pair it with the rate limit and loomcycle's token budgets: a tenant budget, and, as a gate, `new_user.budget` (or `provision: known`, or `new_user.status: pending` to approve each person).
+
+## As a loomcycle gate
+
+Since 0.3 the bridge can be a loomcycle gate instead of holding a token: it signs who is talking with its own key, and loomcycle provisions the user and issues the token. A stolen bridge can then only speak for Discord users, never act as a tenant operator. Set `BRIDGE_GATE` and the bridge runs this way; without it, it runs with `LOOMCYCLE_TOKEN` as before.
+
+1. Make a key pair. The private half goes to the bridge only:
+
+   ```bash
+   node -e 'const {privateKey,publicKey}=require("node:crypto").generateKeyPairSync("ed25519");
+   console.log("BRIDGE_GATE_KEY=" + JSON.stringify(privateKey.export({format:"jwk"})));
+   console.log("public_key: " + JSON.stringify(publicKey.export({format:"jwk"})))'
+   ```
+
+2. Register the gate in loomcycle, in the tenant the bridge used:
+
+   ```yaml
+   auth:
+     gates:
+       discord:
+         kind: external
+         public_key: { kty: OKP, crv: Ed25519, x: "<the public x>" }
+         issued_token: { ttl: 12h, agents: [chat], overrides: [interactive], rate: { per_minute: 6, burst: 10 } }
+         identity_map:
+           tenant: acme
+           provision: auto
+           legacy_subject_prefix: discord-
+           new_user: { budget: { soft_limit: 500000, hard_limit: 1000000 } }   # tokens a month, per user
+   ```
+
+   `issued_token` is required, or the gate does not load (write `issued_token: unrestricted` for tokens with the user's whole member reach). `new_user.budget` becomes each new user's token limit, so people the bot admits are capped without a limit written for each; leave it out and they have none.
+
+   `legacy_subject_prefix: discord-` keeps the people and channels the bridge already served: each one's first message through the gate links the user the bridge made (`discord-<user id>`, a channel's `discord-conv-<hash>`), so their history, memory and documents stay theirs. Without it they would start again as new users `discord:<user id>`. New people are `discord:<user id>`, new channels `discord:conv:<hash>`, either way.
+
+3. Reconfigure the bridge: set `BRIDGE_GATE=discord`, `BRIDGE_GATE_AUDIENCE` (loomcycle's `LOOMCYCLE_PUBLIC_URL`) and `BRIDGE_GATE_KEY`, and remove `LOOMCYCLE_TOKEN` and `BRIDGE_USER_ACCESS_MODE`, which a gate bridge refuses. Then retire the old operator token. The other `BRIDGE_GATE_*` settings are in `@loomcycle/bridge-core`'s README.
+
+Do it in this order: the gate, with its prefix, must be in loomcycle's config before the bridge switches, or the first messages make new, empty users.
+
+As a gate the bridge also tells loomcycle about groups and leavers.
+
+- **Groups.** A channel is in the loomcycle group `discord:dc-guild-<server id>` of its server. A person (a DM) is in `discord:dc-guild-<server id>` for each server in `DISCORD_BRIDGE_TRUSTED_GUILDS` they are a member of, and `discord:dc-role-<role id>` for each role they hold there, which an operator can bind permissions to; it takes `trusted: true` on the gate and an `identity_map.groups` block. The bridge reads a person's membership with the bot token (Get Guild Member, which needs no privileged intent; the bot must be in the server), once per person per 10 minutes. When a lookup fails, or with more than 20 trusted servers, it asserts no groups for that person, so loomcycle never drops a group on a guess.
+- **Leavers.** A person who removes the app is revoked in loomcycle: disabled at once, then removed by the gate's removal policy. Discord tells the bridge through Webhook Events: in the Developer Portal, on the **Webhooks** page, set the **Endpoint** to `https://<bridge-host>/discord/events`, turn **Events** on and select `APPLICATION_DEAUTHORIZED`. Discord checks the URL with a PING when you save it, so the bridge must already run as a gate. These events are signed like interactions and always verified. The bridge answers an event only once loomcycle has taken the revoke; if it has not, Discord gets a `503` and delivers the event again.
+
+## Voice messages
+
+With `BRIDGE_VOICE=1`, a person can put a question to the agent as a voice message and hear the answer as one (RFC GA). Off by default.
+
+**Asking.** Record a voice message in the channel or DM as usual, then right-click it (long-press on mobile) and pick **Apps → Ask by voice**. The bridge answers with "thinking…", has loomcycle transcribe the recording with the conversation's own token, and hands the agent the words, marked `(voice message)`, exactly as typed text goes: a trusted speaker's into the prompt, an untrusted speaker's as an untrusted block. A message with exactly one audio file works the same way.
+
+- **Why a command, not just a voice message.** The bridge has no Gateway connection, so it never sees messages people post; a message command arrives as an interaction, through the endpoint the bridge already serves, with the message and its attachment in it. In a server, Discord would also withhold a message's attachments from a Gateway bot without the privileged Message Content intent. The command needs neither.
+- **Only your own voice message.** Ask by voice on someone else's message is refused. Their words would reach the agent as your request, with your trust, and their recording would go to transcription without their asking. It also keeps the bridge from transcribing its own voice replies.
+- **The recording** is fetched from Discord's CDN (`cdn.discordapp.com`, `media.discordapp.net`, nowhere else, redirects included) at its signed URL, with no token, and held in memory for that one request. A recording longer than `BRIDGE_VOICE_MAX_SECONDS` is refused from its metadata, before anything is downloaded.
+- **Settings.** `/voice on`, `/voice off` and `/voice auto` are typed through `/ask`, as in `/ask /voice on`. `/help` lists them with voice on.
+
+**The spoken reply.** The text reply is always posted. When the reply should also be spoken (by default, when the question was a voice message), the bridge has loomcycle voice it and posts it as a Discord voice message with the bot token, as a reply to the text. A voice message can carry no text, so the text reply gets one more line, `-# AI voice` (`BRIDGE_VOICE_LABEL`), saying the voice is generated. If the text cannot be edited (its interaction is too old, or the reply already fills its 2,000 characters), the label is posted as a short message of its own and the voice replies to that. A voice message that cannot be labelled is not sent.
+
+**What it needs.**
+
+- **Discord:** the bot permissions *Send Voice Messages* and *Attach Files* in the channel, and the bot in the channel, since the voice message goes by the bot token. If Discord refuses it (a missing permission, a DM the person closed), spoken replies stop in that conversation until someone sends `/ask /voice on`; the text replies carry on.
+- **loomcycle:** the `speech:` and `transcription.stt:` engines, and for spoken replies `speech.encode` (an ffmpeg Opus command) with `speech.format: ogg`, because Discord shows only OGG/Opus as a voice message. Without it, voice messages are still understood and the replies stay text.
+- **The user tokens' surfaces.** With voice on, the bridge asks for each user token to reach loomcycle's speech routes (`surfaces: [speech, transcription]`, loomcycle 1.141 or later). As a gate, add `surfaces: [speech, transcription]` to the gate's `issued_token`; without it loomcycle grants none. A voice message then gets "I can only read text for now.", in a DM and in a server channel alike: the "Ask by voice" reply is always answered.
+- **Rate.** A voice turn takes three starts from the user's rate (transcribe, run, speak). Raise `BRIDGE_RATE_PER_MINUTE` to at least `12` with voice on (and the gate's `issued_token.rate`, for a gate).
+
+The other `BRIDGE_VOICE_*` settings (length and size caps, the reply mode, the echo, untrusted speakers) are in `@loomcycle/bridge-core`'s README.
+
+**Not yet checked against Discord** (RFC GA P0):
+
+- **The waveform.** The bridge sends an empty one, as community clients do, and Discord draws a flat bar. If Discord starts refusing that, loomcycle will send a real one.
+- **Bot-token posting.** A voice message is posted with the bot token, not through the interaction, because whether an interaction follow-up may carry the voice flag is unconfirmed. So a spoken reply in a DM, or in a channel the bot is not in, may be refused where the text reply was not.
+- **The upload limit** is the `attachment_size_limit` of the channel's last interaction, else 10 MB. A spoken reply is far smaller than either.
 
 ## Servers, channels and trust
 
@@ -125,7 +195,8 @@ Discord's:
 
 - **Inbound:** every request's `X-Signature-Ed25519` is checked over the timestamp and the raw body with the application's public key, before the body is parsed. A timestamp more than five minutes off, and an interaction id already seen, are refused. A failed check is a bare `401`.
 - **Bots are dropped,** the bot itself included, before anything reaches loomcycle.
-- **Least privilege:** the bridge's own token never runs agents. A user's token is limited to one agent, every per-run override except `interactive` is locked, it is rate-limited, and it expires.
+- **Least privilege:** the bridge's own token never runs agents; as a loomcycle gate (above) it holds no loomcycle token at all. A user's token is limited to one agent, every per-run override except `interactive` is locked, it is rate-limited, and it expires.
+- **Voice:** a recording is downloaded from Discord's CDN hosts only, with no credential, read up to the size cap and never kept; the bot token never goes to the CDN. Logs carry sizes and outcomes, never a transcript.
 - **Credentials stay in memory.** Interaction tokens are never written to the conversation store, so `BRIDGE_STORE=file:` holds no credential; after a restart, replies use the bot token until the next command. The bot token is sent only to Discord's REST API, never to an interaction webhook. Logs carry ids, never a token, message text or agent output.
 - **Output:** agent text can be steered by whoever writes in a channel, so nothing the bridge posts can ping anyone (`allowed_mentions` parses nothing, so `@everyone` and role mentions are inert), shows a link preview (`SUPPRESS_EMBEDS` on every message: Discord would fetch the link to build one, with no click, and hand its query string to whoever runs that server), or hides a link's target (a masked link `[label](url)` is rewritten as `label (<url>)`). Tool inputs and outputs are never sent.
 

package/dist/api.d.ts

@@ -17,12 +17,22 @@ export declare class DiscordApiError extends Error {
     /** Discord's JSON error code (10062 "Unknown interaction", say), when sent. */
     code?: number | undefined);
 }
+/** The parts of a guild member object the bridge reads; shape-checked at use. */
+export interface GuildMember {
+    roles?: unknown;
+    user?: {
+        id?: string;
+        bot?: boolean;
+    };
+}
 /** Discord asks bot clients to identify themselves this way. */
 export declare const USER_AGENT = "DiscordBot (https://github.com/denn-gubsky/loomcycle, 0.1.0)";
 export interface CommandSpec {
     name: string;
+    /** Empty for a message command: Discord refuses one with a description. */
     description: string;
-    type: 1;
+    /** 1: a slash command; 3: a message command (a message's Apps menu). */
+    type: 1 | 3;
     contexts: number[];
     integration_types: number[];
     options?: Array<{
@@ -33,6 +43,21 @@ export interface CommandSpec {
         max_length?: number;
     }>;
 }
+/** A voice message (flag IS_VOICE_MESSAGE): Discord allows no content,
+ *  embeds or components beside its one attachment. */
+export interface VoiceMessagePayload {
+    flags: number;
+    attachments: Array<{
+        id: number;
+        filename: string;
+        duration_secs: number;
+        waveform: string;
+    }>;
+    message_reference?: {
+        message_id: string;
+        fail_if_not_exists: boolean;
+    };
+}
 export declare class DiscordApi {
     private readonly opts;
     private readonly fetch;
@@ -40,8 +65,20 @@ export declare class DiscordApi {
     constructor(opts: DiscordApiOptions);
     editOriginal(interactionToken: string, body: MessageBody): Promise<unknown>;
     followUp(interactionToken: string, body: MessageBody): Promise<unknown>;
+    editFollowUp(interactionToken: string, messageId: string, body: MessageBody): Promise<unknown>;
     createMessage(channelId: string, body: MessageBody): Promise<unknown>;
+    editMessage(channelId: string, messageId: string, body: MessageBody): Promise<unknown>;
+    /** createVoiceMessage posts audio as a voice message, with the bot token:
+     *  multipart, payload_json beside the file as files[0]. */
+    createVoiceMessage(channelId: string, payload: VoiceMessagePayload, file: {
+        bytes: Uint8Array;
+        filename: string;
+        contentType: string;
+    }): Promise<unknown>;
     typing(channelId: string): Promise<unknown>;
+    /** guildMember reads one member of a server (their roles), with the bot
+     *  token. A person not in the server is a 404. */
+    guildMember(guildId: string, userId: string): Promise<GuildMember | undefined>;
     /** putCommands replaces the application's commands: globally, or in one server. */
     putCommands(commands: CommandSpec[], guildId?: string): Promise<unknown>;
     private call;

package/dist/api.js

@@ -38,12 +38,31 @@ export class DiscordApi {
     followUp(interactionToken, body) {
         return this.call("POST", `/webhooks/${this.opts.applicationId}/${interactionToken}`, "POST webhooks/followup", body, false);
     }
+    editFollowUp(interactionToken, messageId, body) {
+        return this.call("PATCH", `/webhooks/${this.opts.applicationId}/${interactionToken}/messages/${messageId}`, "PATCH webhooks/messages", body, false);
+    }
     createMessage(channelId, body) {
         return this.call("POST", `/channels/${channelId}/messages`, "POST channels/messages", body, true);
     }
+    editMessage(channelId, messageId, body) {
+        return this.call("PATCH", `/channels/${channelId}/messages/${messageId}`, "PATCH channels/messages", body, true);
+    }
+    /** createVoiceMessage posts audio as a voice message, with the bot token:
+     *  multipart, payload_json beside the file as files[0]. */
+    createVoiceMessage(channelId, payload, file) {
+        const form = new FormData();
+        form.set("payload_json", JSON.stringify(payload));
+        form.set("files[0]", new Blob([new Uint8Array(file.bytes)], { type: file.contentType }), file.filename);
+        return this.call("POST", `/channels/${channelId}/messages`, "POST channels/messages (voice)", form, true);
+    }
     typing(channelId) {
         return this.call("POST", `/channels/${channelId}/typing`, "POST channels/typing", undefined, true);
     }
+    /** guildMember reads one member of a server (their roles), with the bot
+     *  token. A person not in the server is a 404. */
+    guildMember(guildId, userId) {
+        return this.call("GET", `/guilds/${guildId}/members/${userId}`, "GET guilds/members", undefined, true);
+    }
     /** putCommands replaces the application's commands: globally, or in one server. */
     putCommands(commands, guildId) {
         const path = guildId
@@ -53,7 +72,9 @@ export class DiscordApi {
     }
     async call(method, path, route, body, bot) {
         const headers = { "user-agent": USER_AGENT };
-        if (body !== undefined)
+        // A FormData body sets its own multipart content type, boundary included.
+        const form = body instanceof FormData;
+        if (body !== undefined && !form)
             headers["content-type"] = "application/json";
         if (bot)
             headers.authorization = `Bot ${this.opts.botToken}`;
@@ -61,7 +82,7 @@ export class DiscordApi {
             const res = await this.fetch(`${this.opts.baseUrl}${path}`, {
                 method,
                 headers,
-                body: body === undefined ? undefined : JSON.stringify(body),
+                body: body === undefined ? undefined : form ? body : JSON.stringify(body),
             });
             const text = await res.text();
             const json = parseJson(text);

package/dist/api.js.map

@@ -1 +1 @@
-{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AAexE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B,MAAM;IACN,KAAK;IAEL,IAAI;IAJf,YACW,MAAc,EACd,KAAa;IACtB,+EAA+E;IACtE,IAAa;QAEtB,KAAK,CAAC,WAAW,KAAK,UAAU,MAAM,EAAE,CAAC,CAAC;sBALjC,MAAM;qBACN,KAAK;oBAEL,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAED,gEAAgE;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,8DAA8D,CAAC;AAEzF,gFAAgF;AAChF,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,WAAW,GAAG,MAAM,CAAC;AAW3B,MAAM,OAAO,UAAU;IAIQ,IAAI;IAHhB,KAAK,CAAe;IACpB,KAAK,CAAgC;IAEtD,YAA6B,IAAuB;oBAAvB,IAAI;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,YAAY,CAAC,gBAAwB,EAAE,IAAiB;QACtD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,qBAAqB,EAAE,0BAA0B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpJ,CAAC;IAED,QAAQ,CAAC,gBAAwB,EAAE,IAAiB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9H,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,IAAiB;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,SAAS,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,SAAS,SAAS,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACrG,CAAC;IAED,mFAAmF;IACnF,WAAW,CAAC,QAAuB,EAAE,OAAgB;QACnD,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,OAAO,WAAW;YACvE,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxG,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa,EAAE,IAAa,EAAE,GAAY;QACzF,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QACrE,IAAI,IAAI,KAAK,SAAS;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QACrE,IAAI,GAAG;YAAE,OAAO,CAAC,aAAa,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC1D,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC5D,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBAChE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACvB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,OAAQ,IAA2B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClH,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,MAAqB;IAC/D,MAAM,QAAQ,GAAI,IAA8C,EAAE,WAAW,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjG,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC"}
+{"version":3,"file":"api.js","sourceRoot":"","sources":["../src/api.ts"],"names":[],"mappings":"AAAA,kEAAkE;AAClE,EAAE;AACF,4EAA4E;AAC5E,2EAA2E;AAC3E,6EAA6E;AAC7E,wEAAwE;AAexE,MAAM,OAAO,eAAgB,SAAQ,KAAK;IAE7B,MAAM;IACN,KAAK;IAEL,IAAI;IAJf,YACW,MAAc,EACd,KAAa;IACtB,+EAA+E;IACtE,IAAa;QAEtB,KAAK,CAAC,WAAW,KAAK,UAAU,MAAM,EAAE,CAAC,CAAC;sBALjC,MAAM;qBACN,KAAK;oBAEL,IAAI;QAGb,IAAI,CAAC,IAAI,GAAG,iBAAiB,CAAC;IAChC,CAAC;CACF;AAQD,gEAAgE;AAChE,MAAM,CAAC,MAAM,UAAU,GAAG,8DAA8D,CAAC;AAEzF,gFAAgF;AAChF,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,WAAW,GAAG,MAAM,CAAC;AAqB3B,MAAM,OAAO,UAAU;IAIQ,IAAI;IAHhB,KAAK,CAAe;IACpB,KAAK,CAAgC;IAEtD,YAA6B,IAAuB;oBAAvB,IAAI;QAC/B,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC;QAC5C,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,IAAI,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC;IAC7E,CAAC;IAED,YAAY,CAAC,gBAAwB,EAAE,IAAiB;QACtD,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,qBAAqB,EAAE,0BAA0B,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACpJ,CAAC;IAED,QAAQ,CAAC,gBAAwB,EAAE,IAAiB;QAClD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,EAAE,EAAE,wBAAwB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IAC9H,CAAC;IAED,YAAY,CAAC,gBAAwB,EAAE,SAAiB,EAAE,IAAiB;QACzE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,IAAI,CAAC,IAAI,CAAC,aAAa,IAAI,gBAAgB,aAAa,SAAS,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,KAAK,CAAC,CAAC;IACtJ,CAAC;IAED,aAAa,CAAC,SAAiB,EAAE,IAAiB;QAChD,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,SAAS,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACpG,CAAC;IAED,WAAW,CAAC,SAAiB,EAAE,SAAiB,EAAE,IAAiB;QACjE,OAAO,IAAI,CAAC,IAAI,CAAC,OAAO,EAAE,aAAa,SAAS,aAAa,SAAS,EAAE,EAAE,yBAAyB,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IACnH,CAAC;IAED;+DAC2D;IAC3D,kBAAkB,CAAC,SAAiB,EAAE,OAA4B,EAAE,IAAkE;QACpI,MAAM,IAAI,GAAG,IAAI,QAAQ,EAAE,CAAC;QAC5B,IAAI,CAAC,GAAG,CAAC,cAAc,EAAE,IAAI,CAAC,SAAS,CAAC,OAAO,CAAC,CAAC,CAAC;QAClD,IAAI,CAAC,GAAG,CAAC,UAAU,EAAE,IAAI,IAAI,CAAC,CAAC,IAAI,UAAU,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,IAAI,EAAE,IAAI,CAAC,WAAW,EAAE,CAAC,EAAE,IAAI,CAAC,QAAQ,CAAC,CAAC;QACxG,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,SAAS,WAAW,EAAE,gCAAgC,EAAE,IAAI,EAAE,IAAI,CAAC,CAAC;IAC5G,CAAC;IAED,MAAM,CAAC,SAAiB;QACtB,OAAO,IAAI,CAAC,IAAI,CAAC,MAAM,EAAE,aAAa,SAAS,SAAS,EAAE,sBAAsB,EAAE,SAAS,EAAE,IAAI,CAAC,CAAC;IACrG,CAAC;IAED;sDACkD;IAClD,WAAW,CAAC,OAAe,EAAE,MAAc;QACzC,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,WAAW,OAAO,YAAY,MAAM,EAAE,EAAE,oBAAoB,EAAE,SAAS,EAAE,IAAI,CAAqC,CAAC;IAC7I,CAAC;IAED,mFAAmF;IACnF,WAAW,CAAC,QAAuB,EAAE,OAAgB;QACnD,MAAM,IAAI,GAAG,OAAO;YAClB,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,OAAO,WAAW;YACvE,CAAC,CAAC,iBAAiB,IAAI,CAAC,IAAI,CAAC,aAAa,WAAW,CAAC;QACxD,OAAO,IAAI,CAAC,IAAI,CAAC,KAAK,EAAE,IAAI,EAAE,OAAO,CAAC,CAAC,CAAC,oBAAoB,CAAC,CAAC,CAAC,qBAAqB,EAAE,QAAQ,EAAE,IAAI,CAAC,CAAC;IACxG,CAAC;IAEO,KAAK,CAAC,IAAI,CAAC,MAAc,EAAE,IAAY,EAAE,KAAa,EAAE,IAAa,EAAE,GAAY;QACzF,MAAM,OAAO,GAA2B,EAAE,YAAY,EAAE,UAAU,EAAE,CAAC;QACrE,0EAA0E;QAC1E,MAAM,IAAI,GAAG,IAAI,YAAY,QAAQ,CAAC;QACtC,IAAI,IAAI,KAAK,SAAS,IAAI,CAAC,IAAI;YAAE,OAAO,CAAC,cAAc,CAAC,GAAG,kBAAkB,CAAC;QAC9E,IAAI,GAAG;YAAE,OAAO,CAAC,aAAa,GAAG,OAAO,IAAI,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC7D,KAAK,IAAI,OAAO,GAAG,CAAC,GAAI,OAAO,EAAE,EAAE,CAAC;YAClC,MAAM,GAAG,GAAG,MAAM,IAAI,CAAC,KAAK,CAAC,GAAG,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,EAAE,EAAE;gBAC1D,MAAM;gBACN,OAAO;gBACP,IAAI,EAAE,IAAI,KAAK,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC1E,CAAC,CAAC;YACH,MAAM,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;YAC7B,IAAI,GAAG,CAAC,MAAM,KAAK,GAAG,IAAI,OAAO,GAAG,WAAW,EAAE,CAAC;gBAChD,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC;gBAChE,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,IAAI,WAAW,EAAE,CAAC;oBAC9C,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,IAAI,CAAC,+BAA+B,EAAE,EAAE,KAAK,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC;oBAC9E,MAAM,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;oBACvB,SAAS;gBACX,CAAC;YACH,CAAC;YACD,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;gBACZ,MAAM,IAAI,GAAG,OAAQ,IAA2B,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAyB,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;gBAClH,MAAM,IAAI,eAAe,CAAC,GAAG,CAAC,MAAM,EAAE,KAAK,EAAE,IAAI,CAAC,CAAC;YACrD,CAAC;YACD,OAAO,IAAI,CAAC;QACd,CAAC;IACH,CAAC;CACF;AAED,SAAS,SAAS,CAAC,IAAY;IAC7B,IAAI,CAAC,IAAI;QAAE,OAAO,SAAS,CAAC;IAC5B,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;oEACoE;AACpE,MAAM,UAAU,YAAY,CAAC,IAAa,EAAE,MAAqB;IAC/D,MAAM,QAAQ,GAAI,IAA8C,EAAE,WAAW,CAAC;IAC9E,MAAM,OAAO,GAAG,OAAO,QAAQ,KAAK,QAAQ,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,MAAM,KAAK,IAAI,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC;IACjG,OAAO,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,OAAO,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,GAAG,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC1F,CAAC"}

package/dist/bridge.d.ts

@@ -3,7 +3,7 @@ import type { DiscordConfig } from "./config.js";
 import { type DiscordRef } from "./port.js";
 export declare const MAX_MESSAGE_CHARS = 2000;
 export interface DiscordBridgeOptions extends BridgeOptions<DiscordRef> {
-    /** Override how Discord's API is called (tests, a proxy). */
+    /** Override how Discord's API and its attachment CDN are reached (tests, a proxy). */
     fetch?: typeof fetch;
     sleep?: (ms: number) => Promise<void>;
     /** How long a button press may take before it is acked and finished later. */

package/dist/bridge.js

@@ -1,10 +1,13 @@
 // The Discord adapter on the shared core: interactions over HTTP, no Gateway.
 import { consoleLogger, createBridge } from "@loomcycle/bridge-core";
 import { DiscordApi } from "./api.js";
-import { HELP_TEXT, registerCommands } from "./commands.js";
+import { helpText, registerCommands } from "./commands.js";
+import { EVENTS_PATH, eventsRoute } from "./events.js";
+import { GroupLookup } from "./groups.js";
 import { interactionRoute } from "./interactions.js";
 import { DiscordPort } from "./port.js";
 import { publicKeyFromHex } from "./verify.js";
+import { DiscordVoice } from "./voice.js";
 export const MAX_MESSAGE_CHARS = 2000;
 export function createDiscordBridge(cfg, opts = {}) {
     const log = opts.logger ?? consoleLogger;
@@ -19,17 +22,45 @@ export function createDiscordBridge(cfg, opts = {}) {
     });
     const port = new DiscordPort(api, log, { now });
     const key = publicKeyFromHex(cfg.publicKey);
+    const fences = {
+        applicationId: cfg.applicationId,
+        allowedGuilds: cfg.allowedGuilds,
+        allowDms: cfg.allowDms,
+        trustedGuilds: cfg.trustedGuilds,
+        dev: cfg.dev,
+        ...(cfg.gate ? { gate: cfg.gate.name } : {}),
+    };
+    // Voice messages (RFC GA §5.3), with BRIDGE_VOICE=1 only.
+    const voice = cfg.voice?.enabled ? new DiscordVoice(api, port, { fetch: opts.fetch }) : undefined;
+    const groups = cfg.gate ? new GroupLookup({ api, gate: cfg.gate.name, trustedGuilds: cfg.trustedGuilds, now }) : undefined;
     const adapter = {
         // `/ask prompt:/help` reaches the core as "/help": answer with the same
         // list as the /help command, not the core's typed-command one.
-        platform: { name: "discord", label: "Discord", helpText: HELP_TEXT },
+        // An "Ask by voice" is a deferred interaction: it must be answered even
+        // in a server channel, where the core is otherwise quiet about a voice
+        // message it does not take.
+        platform: { name: "discord", label: "Discord", helpText: helpText(voice !== undefined), answerEveryVoice: true },
         // Without the Gateway there is no message to edit as it grows, and each
         // turn is one message per 2,000 characters.
         capabilities: { streaming: "never", maxMessageChars: MAX_MESSAGE_CHARS },
         port,
         async start(ctx) {
+            const gate = ctx.gate;
             await ctx.serve({
-                "POST /discord/interactions": interactionRoute({ cfg, key, port, api, router: ctx.router, log: ctx.log, now, inlineCardMs: opts.inlineCardMs }),
+                "POST /discord/interactions": interactionRoute({
+                    cfg: fences,
+                    key,
+                    port,
+                    api,
+                    router: ctx.router,
+                    log: ctx.log,
+                    now,
+                    inlineCardMs: opts.inlineCardMs,
+                    ...(voice ? { voice: { port: voice, untrusted: cfg.voice?.untrusted ?? true } } : {}),
+                }),
+                // Webhook Events only for a gate, which is what tells loomcycle of a
+                // person who removed the app.
+                ...(gate ? { [`POST ${EVENTS_PATH}`]: eventsRoute({ key, gate, forget: (s) => groups?.forget(s), log: ctx.log, now }) } : {}),
             });
             if (cfg.registerCommands)
                 await registerCommands(api, cfg, ctx.log);
@@ -37,6 +68,8 @@ export function createDiscordBridge(cfg, opts = {}) {
         async stop() {
             port.stop();
         },
+        ...(groups ? { groupsFor: (subject, ref) => groups.groupsFor(subject, ref) } : {}),
+        ...(voice ? { voice } : {}),
     };
     return createBridge(cfg, adapter, { ...opts, logger: log });
 }

package/dist/bridge.js.map

@@ -1 +1 @@
-{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAuD,MAAM,wBAAwB,CAAC;AAE1H,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE5D,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAmB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAE/C,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAUtC,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,IAAI,GAAyB,EAAE;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC;QACzB,OAAO,EAAE,GAAG,CAAC,UAAU;QACvB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG;QACH,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAE5C,MAAM,OAAO,GAA8B;QACzC,wEAAwE;QACxE,+DAA+D;QAC/D,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,SAAS,EAAE;QACpE,wEAAwE;QACxE,4CAA4C;QAC5C,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE;QACxE,IAAI;QACJ,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,GAAG,CAAC,KAAK,CAAC;gBACd,4BAA4B,EAAE,gBAAgB,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,YAAY,EAAE,IAAI,CAAC,YAAY,EAAE,CAAC;aAChJ,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,gBAAgB;gBAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,IAAI;YACR,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;KACF,CAAC;IACF,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9D,CAAC"}
+{"version":3,"file":"bridge.js","sourceRoot":"","sources":["../src/bridge.ts"],"names":[],"mappings":"AAAA,8EAA8E;AAE9E,OAAO,EAAE,aAAa,EAAE,YAAY,EAAuD,MAAM,wBAAwB,CAAC;AAE1H,OAAO,EAAE,UAAU,EAAE,MAAM,UAAU,CAAC;AACtC,OAAO,EAAE,QAAQ,EAAE,gBAAgB,EAAE,MAAM,eAAe,CAAC;AAE3D,OAAO,EAAE,WAAW,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AACvD,OAAO,EAAE,WAAW,EAAE,MAAM,aAAa,CAAC;AAC1C,OAAO,EAAE,gBAAgB,EAAE,MAAM,mBAAmB,CAAC;AACrD,OAAO,EAAE,WAAW,EAAmB,MAAM,WAAW,CAAC;AACzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAC;AAC/C,OAAO,EAAE,YAAY,EAAE,MAAM,YAAY,CAAC;AAE1C,MAAM,CAAC,MAAM,iBAAiB,GAAG,IAAI,CAAC;AAUtC,MAAM,UAAU,mBAAmB,CAAC,GAAkB,EAAE,IAAI,GAAyB,EAAE;IACrF,MAAM,GAAG,GAAG,IAAI,CAAC,MAAM,IAAI,aAAa,CAAC;IACzC,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,IAAI,CAAC,GAAG,CAAC;IACjC,MAAM,GAAG,GAAG,IAAI,UAAU,CAAC;QACzB,OAAO,EAAE,GAAG,CAAC,UAAU;QACvB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,GAAG;QACH,KAAK,EAAE,IAAI,CAAC,KAAK;QACjB,KAAK,EAAE,IAAI,CAAC,KAAK;KAClB,CAAC,CAAC;IACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,GAAG,EAAE,GAAG,EAAE,EAAE,GAAG,EAAE,CAAC,CAAC;IAChD,MAAM,GAAG,GAAG,gBAAgB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC5C,MAAM,MAAM,GAAG;QACb,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,QAAQ,EAAE,GAAG,CAAC,QAAQ;QACtB,aAAa,EAAE,GAAG,CAAC,aAAa;QAChC,GAAG,EAAE,GAAG,CAAC,GAAG;QACZ,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC7C,CAAC;IACF,0DAA0D;IAC1D,MAAM,KAAK,GAAG,GAAG,CAAC,KAAK,EAAE,OAAO,CAAC,CAAC,CAAC,IAAI,YAAY,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAClG,MAAM,MAAM,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,aAAa,EAAE,GAAG,CAAC,aAAa,EAAE,GAAG,EAAE,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE3H,MAAM,OAAO,GAA8B;QACzC,wEAAwE;QACxE,+DAA+D;QAC/D,wEAAwE;QACxE,uEAAuE;QACvE,4BAA4B;QAC5B,QAAQ,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,KAAK,EAAE,SAAS,EAAE,QAAQ,EAAE,QAAQ,CAAC,KAAK,KAAK,SAAS,CAAC,EAAE,gBAAgB,EAAE,IAAI,EAAE;QAChH,wEAAwE;QACxE,4CAA4C;QAC5C,YAAY,EAAE,EAAE,SAAS,EAAE,OAAO,EAAE,eAAe,EAAE,iBAAiB,EAAE;QACxE,IAAI;QACJ,KAAK,CAAC,KAAK,CAAC,GAAG;YACb,MAAM,IAAI,GAAG,GAAG,CAAC,IAAI,CAAC;YACtB,MAAM,GAAG,CAAC,KAAK,CAAC;gBACd,4BAA4B,EAAE,gBAAgB,CAAC;oBAC7C,GAAG,EAAE,MAAM;oBACX,GAAG;oBACH,IAAI;oBACJ,GAAG;oBACH,MAAM,EAAE,GAAG,CAAC,MAAM;oBAClB,GAAG,EAAE,GAAG,CAAC,GAAG;oBACZ,GAAG;oBACH,YAAY,EAAE,IAAI,CAAC,YAAY;oBAC/B,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,SAAS,EAAE,GAAG,CAAC,KAAK,EAAE,SAAS,IAAI,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACtF,CAAC;gBACF,qEAAqE;gBACrE,8BAA8B;gBAC9B,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,QAAQ,WAAW,EAAE,CAAC,EAAE,WAAW,CAAC,EAAE,GAAG,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,EAAE,EAAE,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;aAC9H,CAAC,CAAC;YACH,IAAI,GAAG,CAAC,gBAAgB;gBAAE,MAAM,gBAAgB,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,GAAG,CAAC,CAAC;QACtE,CAAC;QACD,KAAK,CAAC,IAAI;YACR,IAAI,CAAC,IAAI,EAAE,CAAC;QACd,CAAC;QACD,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,CAAC,OAAe,EAAE,GAAe,EAAE,EAAE,CAAC,MAAM,CAAC,SAAS,CAAC,OAAO,EAAE,GAAG,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACtG,GAAG,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAC5B,CAAC;IACF,OAAO,YAAY,CAAC,GAAG,EAAE,OAAO,EAAE,EAAE,GAAG,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAC9D,CAAC"}

package/dist/commands.d.ts

@@ -1,10 +1,28 @@
-import type { Logger } from "@loomcycle/bridge-core";
+import { type Logger } from "@loomcycle/bridge-core";
 import type { CommandSpec, DiscordApi } from "./api.js";
 import type { DiscordConfig } from "./config.js";
 export declare const MAX_PROMPT_CHARS = 4000;
+/** The message command that takes a voice message (RFC GA): right-click it,
+ *  Apps, Ask by voice. */
+export declare const ASK_BY_VOICE = "Ask by voice";
 export declare const HELP_TEXT: string;
-export declare function commandSpecs(contexts: number[]): CommandSpec[];
+/** DISCORD_VOICE_HELP is added to the list with voice on. The core's /voice
+ *  settings are typed messages, which on Discord go through /ask. */
+export declare const DISCORD_VOICE_HELP: string;
+/** helpText is the platform's /help list: the core adds its voice settings
+ *  after it when voice is on. */
+export declare function helpText(voice: boolean): string;
+/** slashHelpText answers the /help command, which the bridge answers itself. */
+export declare function slashHelpText(voice: boolean): string;
+export declare function commandSpecs(contexts: number[], opts?: {
+    voice?: boolean;
+}): CommandSpec[];
 /** registerCommands replaces the application's commands in every allowed
  *  server, and globally (DMs only) when DMs are on. The bridge owns the
- *  application's commands: anything else registered there is replaced. */
-export declare function registerCommands(api: DiscordApi, cfg: Pick<DiscordConfig, "allowedGuilds" | "allowDms">, log: Logger): Promise<void>;
+ *  application's commands: anything else registered there is replaced. Ask
+ *  by voice is registered only with voice on, so no menu offers it in vain. */
+export declare function registerCommands(api: DiscordApi, cfg: Pick<DiscordConfig, "allowedGuilds" | "allowDms"> & {
+    voice?: {
+        enabled: boolean;
+    };
+}, log: Logger): Promise<void>;

package/dist/commands.js

@@ -4,9 +4,13 @@
 // take effect at once and show only where the bot answers. Commands in DMs
 // can only be global, so with DMs on they are also registered globally,
 // limited to the bot's DMs, so a server never lists them twice.
-import { Context } from "./interaction.js";
+import { VOICE_HELP_TEXT } from "@loomcycle/bridge-core";
+import { CommandType, Context } from "./interaction.js";
 const GUILD_INSTALL = 0;
 export const MAX_PROMPT_CHARS = 4000;
+/** The message command that takes a voice message (RFC GA): right-click it,
+ *  Apps, Ask by voice. */
+export const ASK_BY_VOICE = "Ask by voice";
 export const HELP_TEXT = [
     "Commands:",
     "- **/ask** `prompt`: talk to the agent. When it asks you a question without options, answer with /ask too.",
@@ -16,8 +20,24 @@ export const HELP_TEXT = [
     "",
     "In a server, everyone in a channel shares one conversation with the agent. The person who started it answers the agent's questions and can /new or /stop it.",
 ].join("\n");
-export function commandSpecs(contexts) {
-    const base = { type: 1, contexts, integration_types: [GUILD_INSTALL] };
+/** DISCORD_VOICE_HELP is added to the list with voice on. The core's /voice
+ *  settings are typed messages, which on Discord go through /ask. */
+export const DISCORD_VOICE_HELP = [
+    "",
+    "Voice: right-click your own voice message, then **Apps** → **Ask by voice**. The voice settings go through /ask, as in `/ask /voice on`:",
+].join("\n");
+/** helpText is the platform's /help list: the core adds its voice settings
+ *  after it when voice is on. */
+export function helpText(voice) {
+    return voice ? `${HELP_TEXT}\n${DISCORD_VOICE_HELP}` : HELP_TEXT;
+}
+/** slashHelpText answers the /help command, which the bridge answers itself. */
+export function slashHelpText(voice) {
+    return voice ? `${helpText(true)}\n${VOICE_HELP_TEXT}` : HELP_TEXT;
+}
+export function commandSpecs(contexts, opts = {}) {
+    const base = { type: CommandType.CHAT_INPUT, contexts, integration_types: [GUILD_INSTALL] };
+    const voice = opts.voice ? [{ ...base, type: CommandType.MESSAGE, name: ASK_BY_VOICE, description: "" }] : [];
     return [
         {
             ...base,
@@ -28,18 +48,21 @@ export function commandSpecs(contexts) {
         { ...base, name: "new", description: "Start a new conversation with the agent" },
         { ...base, name: "stop", description: "Stop the agent's current answer" },
         { ...base, name: "help", description: "Show what the bot can do" },
+        ...voice,
     ];
 }
 /** registerCommands replaces the application's commands in every allowed
  *  server, and globally (DMs only) when DMs are on. The bridge owns the
- *  application's commands: anything else registered there is replaced. */
+ *  application's commands: anything else registered there is replaced. Ask
+ *  by voice is registered only with voice on, so no menu offers it in vain. */
 export async function registerCommands(api, cfg, log) {
+    const opts = { voice: cfg.voice?.enabled === true };
     for (const guild of cfg.allowedGuilds) {
-        await api.putCommands(commandSpecs([Context.GUILD]), guild);
+        await api.putCommands(commandSpecs([Context.GUILD], opts), guild);
         log.info("registered commands", { guild });
     }
     if (cfg.allowDms) {
-        await api.putCommands(commandSpecs([Context.BOT_DM]));
+        await api.putCommands(commandSpecs([Context.BOT_DM], opts));
         log.info("registered commands", { scope: "dm" });
     }
 }

package/dist/commands.js.map

@@ -1 +1 @@
-{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,gEAAgE;AAMhE,OAAO,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAE3C,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAErC,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,WAAW;IACX,4GAA4G;IAC5G,mEAAmE;IACnE,sCAAsC;IACtC,6BAA6B;IAC7B,EAAE;IACF,8JAA8J;CAC/J,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb,MAAM,UAAU,YAAY,CAAC,QAAkB;IAC7C,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,CAAU,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IAChF,OAAO;QACL;YACE,GAAG,IAAI;YACP,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;SAC9H;QACD,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,yCAAyC,EAAE;QAChF,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iCAAiC,EAAE;QACzE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE;KACnE,CAAC;AACJ,CAAC;AAED;;0EAE0E;AAC1E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAC,GAAe,EAAE,GAAsD,EAAE,GAAW;IACzH,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QACtD,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}
+{"version":3,"file":"commands.js","sourceRoot":"","sources":["../src/commands.ts"],"names":[],"mappings":"AAAA,4CAA4C;AAC5C,EAAE;AACF,8EAA8E;AAC9E,2EAA2E;AAC3E,wEAAwE;AACxE,gEAAgE;AAEhE,OAAO,EAAE,eAAe,EAAe,MAAM,wBAAwB,CAAC;AAItE,OAAO,EAAE,WAAW,EAAE,OAAO,EAAE,MAAM,kBAAkB,CAAC;AAExD,MAAM,aAAa,GAAG,CAAC,CAAC;AACxB,MAAM,CAAC,MAAM,gBAAgB,GAAG,IAAI,CAAC;AACrC;0BAC0B;AAC1B,MAAM,CAAC,MAAM,YAAY,GAAG,cAAc,CAAC;AAE3C,MAAM,CAAC,MAAM,SAAS,GAAG;IACvB,WAAW;IACX,4GAA4G;IAC5G,mEAAmE;IACnE,sCAAsC;IACtC,6BAA6B;IAC7B,EAAE;IACF,8JAA8J;CAC/J,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;qEACqE;AACrE,MAAM,CAAC,MAAM,kBAAkB,GAAG;IAChC,EAAE;IACF,0IAA0I;CAC3I,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;AAEb;iCACiC;AACjC,MAAM,UAAU,QAAQ,CAAC,KAAc;IACrC,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,SAAS,KAAK,kBAAkB,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACnE,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,aAAa,CAAC,KAAc;IAC1C,OAAO,KAAK,CAAC,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,CAAC,KAAK,eAAe,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,MAAM,UAAU,YAAY,CAAC,QAAkB,EAAE,IAAI,GAAwB,EAAE;IAC7E,MAAM,IAAI,GAAG,EAAE,IAAI,EAAE,WAAW,CAAC,UAAU,EAAE,QAAQ,EAAE,iBAAiB,EAAE,CAAC,aAAa,CAAC,EAAE,CAAC;IAC5F,MAAM,KAAK,GAAkB,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,WAAW,CAAC,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,WAAW,EAAE,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7H,OAAO;QACL;YACE,GAAG,IAAI;YACP,IAAI,EAAE,KAAK;YACX,WAAW,EAAE,mBAAmB;YAChC,OAAO,EAAE,CAAC,EAAE,IAAI,EAAE,CAAC,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,0BAA0B,EAAE,QAAQ,EAAE,IAAI,EAAE,UAAU,EAAE,gBAAgB,EAAE,CAAC;SAC9H;QACD,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,WAAW,EAAE,yCAAyC,EAAE;QAChF,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,iCAAiC,EAAE;QACzE,EAAE,GAAG,IAAI,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,0BAA0B,EAAE;QAClE,GAAG,KAAK;KACT,CAAC;AACJ,CAAC;AAED;;;+EAG+E;AAC/E,MAAM,CAAC,KAAK,UAAU,gBAAgB,CACpC,GAAe,EACf,GAAyF,EACzF,GAAW;IAEX,MAAM,IAAI,GAAG,EAAE,KAAK,EAAE,GAAG,CAAC,KAAK,EAAE,OAAO,KAAK,IAAI,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,GAAG,CAAC,aAAa,EAAE,CAAC;QACtC,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,EAAE,IAAI,CAAC,EAAE,KAAK,CAAC,CAAC;QAClE,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,CAAC,CAAC;IAC7C,CAAC;IACD,IAAI,GAAG,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,GAAG,CAAC,WAAW,CAAC,YAAY,CAAC,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,IAAI,CAAC,CAAC,CAAC;QAC5D,GAAG,CAAC,IAAI,CAAC,qBAAqB,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;IACnD,CAAC;AACH,CAAC"}

package/dist/config.js

@@ -24,7 +24,7 @@ function apiBaseUrl(reader) {
     if (url.protocol !== "https:" && !(url.protocol === "http:" && local)) {
         reader.problems.push("DISCORD_BRIDGE_API_BASE_URL must be https (http only to localhost)");
     }
-    return raw.replace(/\/+$/, "");
+    return withoutTrailingSlashes(raw);
 }
 function guilds(reader, name) {
     const ids = reader.list(name);
@@ -38,7 +38,9 @@ function guilds(reader, name) {
 }
 export function loadConfig(env = process.env) {
     const reader = new EnvReader(env);
-    const shared = loadSharedConfig(reader, { port: DEFAULT_PORT });
+    // A gate only when BRIDGE_GATE names one: a bridge deployed with a
+    // loomcycle token keeps running as it was until it is reconfigured.
+    const shared = loadSharedConfig(reader, { port: DEFAULT_PORT, gate: reader.get("BRIDGE_GATE") !== undefined });
     const applicationId = reader.required("DISCORD_APPLICATION_ID");
     if (applicationId && !isSnowflake(applicationId))
         reader.problems.push("DISCORD_APPLICATION_ID must be the application's numeric id");
@@ -74,4 +76,13 @@ export function loadConfig(env = process.env) {
     reader.check("discord-bridge");
     return cfg;
 }
+/** withoutTrailingSlashes drops a URL's trailing slashes. A loop, not
+ *  /\/+$/, which backtracks quadratically on a long run of slashes that is
+ *  not at the end. */
+function withoutTrailingSlashes(s) {
+    let end = s.length;
+    while (end > 0 && s[end - 1] === "/")
+        end--;
+    return s.slice(0, end);
+}
 //# sourceMappingURL=config.js.map

package/dist/config.js.map

@@ -1 +1 @@
-{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,0BAA0B;AAE1B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAA+B,MAAM,wBAAwB,CAAC;AAoBlG,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAElE,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;8DAC8D;AAC9D,SAAS,UAAU,CAAC,MAAiB;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,oBAAoB,CAAC;IAC9E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,GAAG,CAAC,OAAO,CAAC,MAAM,EAAE,EAAE,CAAC,CAAC;AACjC,CAAC;AAED,SAAS,MAAM,CAAC,MAAiB,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAC;YAC3E,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,GAAQ,OAAO,CAAC,GAAG;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,CAAC,CAAC;IAEhE,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAChE,IAAI,aAAa,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACtI,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,yDAAyD,CAAC,CAAC,WAAW,EAAE,CAAC;IACjI,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzD,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACpH,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAkB;QACzB,GAAG,MAAM;QACT,aAAa;QACb,SAAS;QACT,QAAQ;QACR,aAAa;QACb,QAAQ;QACR,aAAa;QACb,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC;QACjE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;KAC/B,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC"}
+{"version":3,"file":"config.js","sourceRoot":"","sources":["../src/config.ts"],"names":[],"mappings":"AAAA,2EAA2E;AAC3E,6EAA6E;AAC7E,0BAA0B;AAE1B,OAAO,EAAE,SAAS,EAAE,gBAAgB,EAA+B,MAAM,wBAAwB,CAAC;AAoBlG,MAAM,CAAC,MAAM,YAAY,GAAG,IAAI,CAAC;AACjC,MAAM,CAAC,MAAM,oBAAoB,GAAG,6BAA6B,CAAC;AAElE,MAAM,SAAS,GAAG,YAAY,CAAC;AAE/B,MAAM,UAAU,WAAW,CAAC,CAAU;IACpC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;AACpD,CAAC;AAED;8DAC8D;AAC9D,SAAS,UAAU,CAAC,MAAiB;IACnC,MAAM,GAAG,GAAG,MAAM,CAAC,GAAG,CAAC,6BAA6B,CAAC,IAAI,oBAAoB,CAAC;IAC9E,IAAI,GAAQ,CAAC;IACb,IAAI,CAAC;QACH,GAAG,GAAG,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;IACrB,CAAC;IAAC,MAAM,CAAC;QACP,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,2CAA2C,CAAC,CAAC;QAClE,OAAO,oBAAoB,CAAC;IAC9B,CAAC;IACD,MAAM,KAAK,GAAG,CAAC,WAAW,EAAE,WAAW,EAAE,OAAO,CAAC,CAAC,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC;IACzE,IAAI,GAAG,CAAC,QAAQ,KAAK,QAAQ,IAAI,CAAC,CAAC,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,KAAK,CAAC,EAAE,CAAC;QACtE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,oEAAoE,CAAC,CAAC;IAC7F,CAAC;IACD,OAAO,sBAAsB,CAAC,GAAG,CAAC,CAAC;AACrC,CAAC;AAED,SAAS,MAAM,CAAC,MAAiB,EAAE,IAAY;IAC7C,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC9B,KAAK,MAAM,EAAE,IAAI,GAAG,EAAE,CAAC;QACrB,IAAI,CAAC,WAAW,CAAC,EAAE,CAAC,EAAE,CAAC;YACrB,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,GAAG,IAAI,6CAA6C,CAAC,CAAC;YAC3E,MAAM;QACR,CAAC;IACH,CAAC;IACD,OAAO,IAAI,GAAG,CAAC,GAAG,CAAC,CAAC;AACtB,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,GAAG,GAAQ,OAAO,CAAC,GAAG;IAC/C,MAAM,MAAM,GAAG,IAAI,SAAS,CAAC,GAAG,CAAC,CAAC;IAClC,mEAAmE;IACnE,oEAAoE;IACpE,MAAM,MAAM,GAAG,gBAAgB,CAAC,MAAM,EAAE,EAAE,IAAI,EAAE,YAAY,EAAE,IAAI,EAAE,MAAM,CAAC,GAAG,CAAC,aAAa,CAAC,KAAK,SAAS,EAAE,CAAC,CAAC;IAE/G,MAAM,aAAa,GAAG,MAAM,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAChE,IAAI,aAAa,IAAI,CAAC,WAAW,CAAC,aAAa,CAAC;QAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6DAA6D,CAAC,CAAC;IACtI,MAAM,SAAS,GAAG,MAAM,CAAC,QAAQ,CAAC,oBAAoB,EAAE,yDAAyD,CAAC,CAAC,WAAW,EAAE,CAAC;IACjI,IAAI,SAAS,IAAI,CAAC,gBAAgB,CAAC,IAAI,CAAC,SAAS,CAAC;QAAE,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,8CAA8C,CAAC,CAAC;IACzH,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAC,mBAAmB,CAAC,CAAC;IAEtD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IACtE,MAAM,QAAQ,GAAG,MAAM,CAAC,IAAI,CAAC,0BAA0B,CAAC,CAAC;IACzD,wEAAwE;IACxE,2CAA2C;IAC3C,IAAI,aAAa,CAAC,IAAI,KAAK,CAAC,IAAI,CAAC,QAAQ,EAAE,CAAC;QAC1C,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,yGAAyG,CAAC,CAAC;IAClI,CAAC;IACD,MAAM,aAAa,GAAG,MAAM,CAAC,MAAM,EAAE,+BAA+B,CAAC,CAAC;IACtE,KAAK,MAAM,CAAC,IAAI,aAAa,EAAE,CAAC;QAC9B,IAAI,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC;YAC1B,MAAM,CAAC,QAAQ,CAAC,IAAI,CAAC,6FAA6F,CAAC,CAAC;YACpH,MAAM;QACR,CAAC;IACH,CAAC;IAED,MAAM,GAAG,GAAkB;QACzB,GAAG,MAAM;QACT,aAAa;QACb,SAAS;QACT,QAAQ;QACR,aAAa;QACb,QAAQ;QACR,aAAa;QACb,gBAAgB,EAAE,MAAM,CAAC,IAAI,CAAC,kCAAkC,CAAC;QACjE,UAAU,EAAE,UAAU,CAAC,MAAM,CAAC;KAC/B,CAAC;IACF,MAAM,CAAC,KAAK,CAAC,gBAAgB,CAAC,CAAC;IAC/B,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;sBAEsB;AACtB,SAAS,sBAAsB,CAAC,CAAS;IACvC,IAAI,GAAG,GAAG,CAAC,CAAC,MAAM,CAAC;IACnB,OAAO,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,CAAC,KAAK,GAAG;QAAE,GAAG,EAAE,CAAC;IAC5C,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;AACzB,CAAC"}

package/dist/events.d.ts

@@ -0,0 +1,40 @@
+import { type Logger, type Route } from "@loomcycle/bridge-core";
+import type { KeyObject } from "node:crypto";
+export declare const EVENTS_PATH = "/discord/events";
+/** The outer object's type: Discord's probe when the URL is saved, or an event. */
+export declare const WebhookType: {
+    readonly PING: 0;
+    readonly EVENT: 1;
+};
+export declare const APPLICATION_DEAUTHORIZED = "APPLICATION_DEAUTHORIZED";
+/** The parts of a webhook event the bridge reads; the body is signed by
+ *  Discord, but its shape is still checked before use. */
+export interface WebhookEvent {
+    version?: number;
+    application_id?: string;
+    type?: number;
+    event?: {
+        type?: string;
+        timestamp?: string;
+        data?: {
+            user?: {
+                id?: string;
+            };
+        };
+    };
+}
+export interface EventDeps {
+    key: KeyObject;
+    /** The core's gate: names a platform id's subject, and revokes it. */
+    gate: {
+        subjectOf(sub: string): string;
+        revoke(subject: string): Promise<void>;
+    };
+    /** Called with the revoked subject, so cached groups go with it. */
+    forget(subject: string): void;
+    log: Logger;
+    now: () => number;
+    /** How long the answer waits for loomcycle's revoke (tests). */
+    revokeTimeoutMs?: number;
+}
+export declare function eventsRoute(deps: EventDeps): Route;