@open-everywhere/provider-discord 0.1.0

package/dist/agent/channels/discord-events.js

@@ -0,0 +1,150 @@
+// Discord WEBHOOK EVENTS — the app-level install/uninstall audit trail (OPE-118 Discord §9).
+//
+// Distinct from BOTH of Discord's other webhook-shaped things, which is the whole reason this file
+// carries a header:
+//   • NOT an "incoming webhook" (§6) — that's a channel-scoped POST-only credential;
+//   • NOT the Interactions Endpoint (§5, discord-front.ts) — that's slash commands / button clicks.
+// Webhook Events are configured on a SEPARATE "Webhooks" page of the app in the developer portal
+// (its own URL), delivered app-level, and — critically — they do NOT carry ordinary chat events.
+// Channel messages remain Gateway-only (§8, deploy/discord-relay); the ONLY thing OE wants here is
+// `APPLICATION_AUTHORIZED` / `APPLICATION_DEAUTHORIZED`: the real-time signal that a guild admin
+// installed or removed the app, which OE previously had no way to see short of noticing silence.
+//
+// OBSERVABILITY ONLY. This route gates nothing, drops nothing, and wakes nothing — it writes audit
+// rows. A failure to audit is swallowed (the appendAudit layer is best-effort by contract) and the
+// endpoint still acks, because a non-2xx makes Discord retry and eventually SUSPEND delivery.
+//
+// Payload shape verified against docs.discord.com/developers/events/webhook-events (2026-07):
+//   { version: 1, application_id, type, event: { type, timestamp, data } }
+//   type 0 = PING (endpoint verification), type 1 = Event.
+//   APPLICATION_AUTHORIZED   data: { integration_type, user, scopes, guild? }
+//     — integration_type 0 = guild install (guild present), 1 = user install (no guild).
+//   APPLICATION_DEAUTHORIZED data: { user }   (no guild, no scopes — Discord sends neither)
+// Discord requires a 204 with an EMPTY body within 3s for both the PING and every event, and a 401
+// when signature validation fails; repeated failures get the endpoint unregistered.
+//
+// Signature: the SAME Ed25519 app public key the Interactions Endpoint uses, so this reuses
+// `verifyDiscordInteraction` (discord-front.ts) verbatim rather than standing up a second
+// verification path — one key, one verifier.
+import { POST } from "eve/channels";
+import { verifyDiscordInteraction } from "./discord-front.js";
+import { appendAudit, deploymentOrg } from "@open-everywhere/core/agent/adapter-api.js";
+/** The public URL to paste into the app's developer-portal **Webhooks** page (NOT the
+ *  Interactions Endpoint URL, which stays {@link PUBLIC_DISCORD_ROUTE}). */
+export const PUBLIC_DISCORD_EVENTS_ROUTE = "/eve/v1/discord/events";
+/** Discord's outer webhook `type`. */
+const WEBHOOK_TYPE_PING = 0;
+const WEBHOOK_TYPE_EVENT = 1;
+function elog(msg) {
+    console.log(`[open-everywhere:discord-events] ${msg}`);
+}
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+function obj(v) {
+    return typeof v === "object" && v !== null && !Array.isArray(v) ? v : undefined;
+}
+/**
+ * Classify one raw Webhook Events body. PURE — no I/O, so every branch is unit-tested.
+ *
+ * The audit partition mirrors what the rest of the Discord surface uses: the GUILD is the
+ * workspace (the org boundary — `bindDiscord` maps guild→workspace), and the authorizing user is
+ * the principal. A USER install (integration_type 1) has no guild at all, so it partitions under
+ * the sentinel workspace `user-install` rather than being forced into a guild it doesn't have —
+ * a fabricated workspace id would be worse than an honest one.
+ */
+export function classifyDiscordEvent(rawBody) {
+    let json;
+    try {
+        json = JSON.parse(rawBody);
+    }
+    catch {
+        return { kind: "ack", reason: "unparseable body" };
+    }
+    const p = obj(json);
+    if (!p)
+        return { kind: "ack", reason: "non-object body" };
+    if (p["type"] === WEBHOOK_TYPE_PING)
+        return { kind: "ack", reason: "PING — endpoint verification" };
+    if (p["type"] !== WEBHOOK_TYPE_EVENT)
+        return { kind: "ack", reason: `webhook type ${String(p["type"])} — not an event` };
+    const event = obj(p["event"]);
+    const eventType = str(event?.["type"]);
+    if (eventType !== "APPLICATION_AUTHORIZED" && eventType !== "APPLICATION_DEAUTHORIZED") {
+        // Entitlements, Social-SDK lobby/DM events, and anything Discord adds later: acked, unaudited.
+        return { kind: "ack", reason: `event ${eventType ?? "?"} — not an install/uninstall` };
+    }
+    const data = obj(event?.["data"]);
+    const guild = obj(data?.["guild"]);
+    const guildId = str(guild?.["id"]);
+    const userId = str(obj(data?.["user"])?.["id"]);
+    // integration_type is only sent on AUTHORIZED; 0 = guild install, 1 = user install.
+    const integrationType = typeof data?.["integration_type"] === "number" ? data["integration_type"] : undefined;
+    const scopes = Array.isArray(data?.["scopes"]) ? data["scopes"].filter((s) => typeof s === "string") : undefined;
+    return {
+        kind: "audit",
+        action: eventType === "APPLICATION_AUTHORIZED" ? "surface.app_installed" : "surface.app_uninstalled",
+        // A DEAUTHORIZED payload carries no guild (Discord sends only `user`), so an uninstall of a
+        // guild install partitions as unknown — honest, and the paired install row names the guild.
+        workspace: guildId ?? (integrationType === 1 ? "user-install" : "unknown"),
+        ...(userId ? { principalId: userId } : {}),
+        detail: {
+            event: eventType,
+            ...(integrationType !== undefined ? { integrationType } : {}),
+            ...(guildId ? { guildId } : {}),
+            // Scope names only — the grant's shape, not any member data.
+            ...(scopes && scopes.length > 0 ? { scopes } : {}),
+            ...(str(event?.["timestamp"]) ? { eventTimestamp: str(event?.["timestamp"]) } : {}),
+        },
+    };
+}
+/** Discord requires an EMPTY 204 body for both the PING and every event, within 3 seconds. */
+const ACK = () => new Response(null, { status: 204 });
+/**
+ * Build the Webhook Events route handler: verify (fail-closed 401), classify, audit, ack.
+ *
+ * The audit write is deliberately AWAITED rather than backgrounded — a `surface.app_*` row is one
+ * cheap insert and Discord's budget is 3 seconds, so we'd rather the row land than shave a
+ * millisecond. It is also wrapped: an audit failure must never turn into a non-2xx, because
+ * Discord retries a failure and then suspends the endpoint — losing the very observability this
+ * route exists to provide.
+ */
+export function buildDiscordEventsHandler(opts = {}) {
+    const now = opts.now ?? (() => Date.now());
+    const publicKey = () => opts.publicKey ?? process.env.DISCORD_PUBLIC_KEY;
+    const audit = opts.audit ??
+        (async (row) => {
+            await appendAudit({ org: deploymentOrg(), platform: "discord", workspace: row.workspace, ...(row.principalId ? { principalId: row.principalId } : {}), action: row.action, detail: row.detail });
+        });
+    return async (req) => {
+        const rawBody = await req.text();
+        if (!verifyDiscordInteraction(rawBody, req.headers, publicKey(), now())) {
+            return new Response("unauthorized", { status: 401 });
+        }
+        const decision = classifyDiscordEvent(rawBody);
+        if (decision.kind === "ack") {
+            elog(`acked: ${decision.reason}`);
+            return ACK();
+        }
+        try {
+            await audit({ action: decision.action, workspace: decision.workspace, ...(decision.principalId ? { principalId: decision.principalId } : {}), detail: decision.detail });
+            elog(`${decision.detail["event"]} on ${decision.workspace} audited as ${decision.action}`);
+        }
+        catch (err) {
+            // Observability-only: never let a failed row become a delivery failure (Discord would retry,
+            // then suspend the endpoint).
+            elog(`audit write failed (acked anyway): ${String(err)}`);
+        }
+        return ACK();
+    };
+}
+/**
+ * Mount the Webhook Events route onto the Discord channel. Additive: it only PREPENDS a route to
+ * the same channel object (one channel name → one session namespace, the frontDiscordChannel
+ * shape), touching neither the interactions front nor eve's own adapter/receive. With no URL
+ * configured in the developer portal this route is simply never hit.
+ */
+export function withDiscordEventsRoute(channel, opts = {}) {
+    return { ...channel, routes: [POST(PUBLIC_DISCORD_EVENTS_ROUTE, buildDiscordEventsHandler(opts)), ...channel.routes] };
+}
+//# sourceMappingURL=discord-events.js.map

package/dist/agent/channels/discord-events.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-events.js","sourceRoot":"","sources":["../../../agent/channels/discord-events.ts"],"names":[],"mappings":"AAAA,6FAA6F;AAC7F,EAAE;AACF,mGAAmG;AACnG,oBAAoB;AACpB,qFAAqF;AACrF,oGAAoG;AACpG,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,iGAAiG;AACjG,iGAAiG;AACjG,EAAE;AACF,mGAAmG;AACnG,mGAAmG;AACnG,8FAA8F;AAC9F,EAAE;AACF,8FAA8F;AAC9F,2EAA2E;AAC3E,2DAA2D;AAC3D,8EAA8E;AAC9E,yFAAyF;AACzF,4FAA4F;AAC5F,mGAAmG;AACnG,oFAAoF;AACpF,EAAE;AACF,4FAA4F;AAC5F,0FAA0F;AAC1F,6CAA6C;AAE7C,OAAO,EAAE,IAAI,EAAuC,MAAM,cAAc,CAAC;AACzE,OAAO,EAAE,wBAAwB,EAAE,MAAM,oBAAoB,CAAC;AAC9D,OAAO,EAAE,WAAW,EAAE,aAAa,EAAE,MAAM,4CAA4C,CAAC;AAExF;4EAC4E;AAC5E,MAAM,CAAC,MAAM,2BAA2B,GAAG,wBAAwB,CAAC;AAEpE,sCAAsC;AACtC,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,kBAAkB,GAAG,CAAC,CAAC;AAE7B,SAAS,IAAI,CAAC,GAAW;IACvB,OAAO,CAAC,GAAG,CAAC,oCAAoC,GAAG,EAAE,CAAC,CAAC;AACzD,CAAC;AASD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,CAAE,CAA6B,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/G,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,oBAAoB,CAAC,OAAe;IAClD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,kBAAkB,EAAE,CAAC;IACrD,CAAC;IACD,MAAM,CAAC,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC;IACpB,IAAI,CAAC,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC1D,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,iBAAiB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,8BAA8B,EAAE,CAAC;IACpG,IAAI,CAAC,CAAC,MAAM,CAAC,KAAK,kBAAkB;QAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,gBAAgB,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,iBAAiB,EAAE,CAAC;IAEzH,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC;IAC9B,MAAM,SAAS,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IACvC,IAAI,SAAS,KAAK,wBAAwB,IAAI,SAAS,KAAK,0BAA0B,EAAE,CAAC;QACvF,+FAA+F;QAC/F,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,EAAE,SAAS,SAAS,IAAI,GAAG,6BAA6B,EAAE,CAAC;IACzF,CAAC;IAED,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC;IAClC,MAAM,KAAK,GAAG,GAAG,CAAC,IAAI,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC;IACnC,MAAM,OAAO,GAAG,GAAG,CAAC,KAAK,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IACnC,MAAM,MAAM,GAAG,GAAG,CAAC,GAAG,CAAC,IAAI,EAAE,CAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,CAAC,CAAC;IAChD,oFAAoF;IACpF,MAAM,eAAe,GAAG,OAAO,IAAI,EAAE,CAAC,kBAAkB,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAI,CAAC,kBAAkB,CAAY,CAAC,CAAC,CAAC,SAAS,CAAC;IAC1H,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAAQ,CAAe,CAAC,MAAM,CAAC,CAAC,CAAC,EAAe,EAAE,CAAC,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAE7I,OAAO;QACL,IAAI,EAAE,OAAO;QACb,MAAM,EAAE,SAAS,KAAK,wBAAwB,CAAC,CAAC,CAAC,uBAAuB,CAAC,CAAC,CAAC,yBAAyB;QACpG,4FAA4F;QAC5F,4FAA4F;QAC5F,SAAS,EAAE,OAAO,IAAI,CAAC,eAAe,KAAK,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,CAAC,SAAS,CAAC;QAC1E,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC1C,MAAM,EAAE;YACN,KAAK,EAAE,SAAS;YAChB,GAAG,CAAC,eAAe,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,eAAe,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC7D,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC/B,6DAA6D;YAC7D,GAAG,CAAC,MAAM,IAAI,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAClD,GAAG,CAAC,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,cAAc,EAAE,GAAG,CAAC,KAAK,EAAE,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACpF;KACF,CAAC;AACJ,CAAC;AAWD,8FAA8F;AAC9F,MAAM,GAAG,GAAG,GAAG,EAAE,CAAC,IAAI,QAAQ,CAAC,IAAI,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;AAEtD;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CAAC,IAAI,GAAyB,EAAE;IACvE,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzE,MAAM,KAAK,GACT,IAAI,CAAC,KAAK;QACV,CAAC,KAAK,EAAE,GAAG,EAAE,EAAE;YACb,MAAM,WAAW,CAAC,EAAE,GAAG,EAAE,aAAa,EAAE,EAAE,QAAQ,EAAE,SAAS,EAAE,SAAS,EAAE,GAAG,CAAC,SAAS,EAAE,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;QACnM,CAAC,CAAC,CAAC;IAEL,OAAO,KAAK,EAAE,GAAY,EAAqB,EAAE;QAC/C,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,QAAQ,GAAG,oBAAoB,CAAC,OAAO,CAAC,CAAC;QAC/C,IAAI,QAAQ,CAAC,IAAI,KAAK,KAAK,EAAE,CAAC;YAC5B,IAAI,CAAC,UAAU,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YAClC,OAAO,GAAG,EAAE,CAAC;QACf,CAAC;QACD,IAAI,CAAC;YACH,MAAM,KAAK,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,SAAS,EAAE,QAAQ,CAAC,SAAS,EAAE,GAAG,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,MAAM,EAAE,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;YACzK,IAAI,CAAC,GAAG,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,OAAO,QAAQ,CAAC,SAAS,eAAe,QAAQ,CAAC,MAAM,EAAE,CAAC,CAAC;QAC7F,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,6FAA6F;YAC7F,8BAA8B;YAC9B,IAAI,CAAC,sCAAsC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAC5D,CAAC;QACD,OAAO,GAAG,EAAE,CAAC;IACf,CAAC,CAAC;AACJ,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,sBAAsB,CAAmC,OAAU,EAAE,IAAI,GAAyB,EAAE;IAClH,OAAO,EAAE,GAAG,OAAO,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,2BAA2B,EAAE,yBAAyB,CAAC,IAAI,CAAC,CAAC,EAAE,GAAG,OAAO,CAAC,MAAM,CAAC,EAAE,CAAC;AACzH,CAAC"}

package/dist/agent/channels/discord-front.d.ts

@@ -0,0 +1,115 @@
+import { type Channel, type RouteHandlerArgs } from "eve/channels";
+import { type DiscordInteractionResponse } from "../approvals/discord-flow.js";
+import { type ApprovalRespondFn } from "./discord-approval-card.js";
+import { type AttachSessionForCancel } from "@open-everywhere/core/agent/adapter-api.js";
+/** An HTTP route handler — `RouteHandler` isn't a public eve export, so we mirror its shape
+ *  (same workaround as slack-front.ts). */
+type RouteHandler = (req: Request, args: RouteHandlerArgs) => Promise<Response>;
+/** The public URL Discord POSTs every interaction to (the app's Interactions Endpoint URL). */
+export declare const PUBLIC_DISCORD_ROUTE = "/eve/v1/discord";
+/** The internal path the wrapped `discordChannel` is mounted at (never hit by Discord directly). */
+export declare const INTERNAL_DISCORD_ROUTE = "/eve/v1/discord/interaction";
+/**
+ * Verify a Discord interaction over the RAW body (the exact bytes Discord signed):
+ * Ed25519 of `{timestamp}{body}` against the app public key, with a 5-minute skew window.
+ * Fail-closed: no key configured, a missing header, a malformed/stale timestamp, or a
+ * signature mismatch all return false — never "verified". `nowMs` is injectable so the
+ * skew window is tested; the crypto itself is eve's public `verifyDiscordSignature`.
+ */
+export declare function verifyDiscordInteraction(rawBody: string, headers: Headers, publicKey: string | undefined, nowMs?: number): boolean;
+/** The decision the front route makes for one verified inbound interaction. The parsed
+ *  body rides the approval-click branch so the handler needn't re-parse it. */
+export type DiscordFrontDecision = {
+    readonly kind: "forward";
+    readonly reason: string;
+} | {
+    readonly kind: "approval-click";
+    readonly reason: string;
+    readonly interaction: unknown;
+} | {
+    readonly kind: "link-consent-click";
+    readonly reason: string;
+    readonly interaction: unknown;
+}
+/** An `oe_grant:` credential-grant card button click (core access/credential-grant-card.ts) — ours:
+ *  the OWNER answering a request to spend their credential (OPE-1260). */
+ | {
+    readonly kind: "grant-click";
+    readonly reason: string;
+    readonly interaction: unknown;
+}
+/** An `oe_input:` BRIDGED-APPROVAL card button click (core channels/approval-card.ts) — ours: the
+ *  room answering an eve `tool-approval` this deployment rendered onto a unified origin (OPE-1720).
+ *  eve's own route cannot resolve it — the parked request lives on the UNIFIED window, not on the
+ *  Discord channel's session — so forwarding it would drop the tap. */
+ | {
+    readonly kind: "input-click";
+    readonly reason: string;
+    readonly interaction: unknown;
+} | {
+    readonly kind: "oe-command";
+    readonly reason: string;
+    readonly interaction: unknown;
+};
+/**
+ * Decide how the front route handles a raw interaction body. FORWARD is the fail-safe
+ * default: anything discordChannel owns (PING/PONG, any OTHER slash command, eve's own HITL
+ * component clicks and modal submits) or anything unrecognized goes to it unchanged.
+ * A MESSAGE_COMPONENT (type 3) whose custom_id starts with our `oe-approval:` prefix, or an
+ * APPLICATION_COMMAND (type 2) named "oe", is ours. Pure: no I/O, so every branch is
+ * unit-tested.
+ */
+export declare function classifyDiscordInteraction(rawBody: string): DiscordFrontDecision;
+/** Injectable seams so the front route is testable without live crypto env / the real store. */
+export interface DiscordFrontOptions {
+    /** The app public key; defaults to DISCORD_PUBLIC_KEY (same env eve's channel reads). */
+    readonly publicKey?: string;
+    readonly now?: () => number;
+    /** Approval-click handler (defaults to the real approvals/discord-flow.ts). Injectable so
+     *  tests can stub it without the store/executor machinery it drags in. */
+    readonly handleApprovalInteraction?: (raw: unknown, deps?: {
+        waitUntil?: (p: Promise<unknown>) => void;
+    }) => Promise<DiscordInteractionResponse | null>;
+    /** Identity-consent click handler (defaults to the real identity/discord-link-consent.ts).
+     *  Injectable for the same reason the approval one is — it reaches the link store. */
+    readonly handleLinkConsentInteraction?: (raw: unknown) => Promise<DiscordInteractionResponse | null>;
+    /** Credential-grant card click handler (defaults to the real access/discord-grant-click.ts).
+     *  Injectable for the same reason the two above are — it reaches the grant store.
+     *
+     *  🔴 IT TAKES THE ROUTE'S `waitUntil` (OPE-1282). That door answers with a DEFERRED response and
+     *  resolves the click off the response path, so it needs somewhere for that work to live past the
+     *  reply. A stub that ignores the second argument gets the old synchronous shape, which is exactly
+     *  what a test wants. */
+    readonly handleGrantCardInteraction?: (raw: unknown, deps?: {
+        waitUntil?: (p: Promise<unknown>) => void;
+    }) => Promise<DiscordInteractionResponse | null>;
+    /** Bridged-approval-card `oe_input:` tap handler (OPE-1720, defaults to
+     *  `./discord-approval-card.ts`). Injectable so the classification and the branch are testable
+     *  without a store, a bot token or eve's `respond` primitive. It takes the SETTLE delivery as its
+     *  second argument because `args.from` is the only place eve hands that primitive out, so it is
+     *  bound in the route and injected rather than reached for inside the handler. */
+    readonly handleApprovalCardInteraction?: (raw: unknown, respond: ApprovalRespondFn, deps?: {
+        waitUntil?: (p: Promise<unknown>) => void;
+    }) => Promise<DiscordInteractionResponse | null>;
+    /** "/oe" zero-inference command handler (defaults to the real commands/discord-commands.ts).
+     *  Injectable so tests can stub it without the spend/approval/memory machinery it may touch. */
+    readonly handleOeCommand?: (raw: unknown, attachSession?: AttachSessionForCancel) => Promise<DiscordInteractionResponse | null>;
+}
+/**
+ * Build the front route handler. Buffers the body once, verifies the Ed25519 signature,
+ * then answers our approval clicks or forwards per {@link classifyDiscordInteraction}.
+ * `innerHandler` is discordChannel's own POST handler, invoked with a FRESH Request
+ * (re-readable body) + the same {@link RouteHandlerArgs}, so discordChannel re-verifies
+ * and dispatches exactly as if it owned the URL.
+ */
+export declare function buildDiscordFrontHandler(innerHandler: RouteHandler, opts?: DiscordFrontOptions): RouteHandler;
+/**
+ * Compose the approval-click front route with a wrapped `discordChannel`. `inner` must have
+ * been built with `route: INTERNAL_DISCORD_ROUTE`. Returns the SAME channel value
+ * (preserving eve's internal `__kind`/adapter/receive) with the public front route
+ * prepended — so Discord's Interactions Endpoint URL hits us, and both routes share one
+ * channel name → one session namespace. (Byte-for-byte the frontSlackChannel pattern.)
+ */
+export declare function frontDiscordChannel<C extends Channel<any, any, any>>(inner: C, opts?: DiscordFrontOptions): C;
+export {};
+//# sourceMappingURL=discord-front.d.ts.map

package/dist/agent/channels/discord-front.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-front.d.ts","sourceRoot":"","sources":["../../../agent/channels/discord-front.ts"],"names":[],"mappings":"AA+BA,OAAO,EAAQ,KAAK,OAAO,EAA4B,KAAK,gBAAgB,EAAE,MAAM,cAAc,CAAC;AAGnG,OAAO,EAAoC,KAAK,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAIjH,OAAO,EAAwC,KAAK,iBAAiB,EAAE,MAAM,4BAA4B,CAAC;AAC1G,OAAO,EAA2C,KAAK,sBAAsB,EAAE,MAAM,4CAA4C,CAAC;AAGlI;2CAC2C;AAC3C,KAAK,YAAY,GAAG,CAAC,GAAG,EAAE,OAAO,EAAE,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,QAAQ,CAAC,CAAC;AAEhF,+FAA+F;AAC/F,eAAO,MAAM,oBAAoB,oBAAoB,CAAC;AACtD,oGAAoG;AACpG,eAAO,MAAM,sBAAsB,gCAAgC,CAAC;AAwCpE;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CACtC,OAAO,EAAE,MAAM,EACf,OAAO,EAAE,OAAO,EAChB,SAAS,EAAE,MAAM,GAAG,SAAS,EAC7B,KAAK,GAAE,MAAmB,GACzB,OAAO,CAOT;AAED;+EAC+E;AAC/E,MAAM,MAAM,oBAAoB,GAC5B;IAAE,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAA;CAAE,GACrD;IAAE,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GAC3F;IAAE,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE;AACjG;0EAC0E;GACxE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE;AAC1F;;;uEAGuE;GACrE;IAAE,QAAQ,CAAC,IAAI,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,GACxF;IAAE,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,OAAO,CAAA;CAAE,CAAC;AAE5F;;;;;;;GAOG;AACH,wBAAgB,0BAA0B,CAAC,OAAO,EAAE,MAAM,GAAG,oBAAoB,CAiDhF;AAED,gGAAgG;AAChG,MAAM,WAAW,mBAAmB;IAClC,yFAAyF;IACzF,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,GAAG,CAAC,EAAE,MAAM,MAAM,CAAC;IAC5B;8EAC0E;IAC1E,QAAQ,CAAC,yBAAyB,CAAC,EAAE,CACnC,GAAG,EAAE,OAAO,EACZ,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,KACjD,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAChD;0FACsF;IACtF,QAAQ,CAAC,4BAA4B,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,KAAK,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IACrG;;;;;;6BAMyB;IACzB,QAAQ,CAAC,0BAA0B,CAAC,EAAE,CACpC,GAAG,EAAE,OAAO,EACZ,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,KACjD,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAChD;;;;sFAIkF;IAClF,QAAQ,CAAC,6BAA6B,CAAC,EAAE,CACvC,GAAG,EAAE,OAAO,EACZ,OAAO,EAAE,iBAAiB,EAC1B,IAAI,CAAC,EAAE;QAAE,SAAS,CAAC,EAAE,CAAC,CAAC,EAAE,OAAO,CAAC,OAAO,CAAC,KAAK,IAAI,CAAA;KAAE,KACjD,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;IAChD;oGACgG;IAChG,QAAQ,CAAC,eAAe,CAAC,EAAE,CAAC,GAAG,EAAE,OAAO,EAAE,aAAa,CAAC,EAAE,sBAAsB,KAAK,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAAC;CACjI;AAMD;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,YAAY,EAAE,YAAY,EAAE,IAAI,GAAE,mBAAwB,GAAG,YAAY,CAiGjH;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,CAAC,SAAS,OAAO,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,EAAE,KAAK,EAAE,CAAC,EAAE,IAAI,GAAE,mBAAwB,GAAG,CAAC,CAYjH"}

package/dist/agent/channels/discord-front.js

@@ -0,0 +1,279 @@
+// Approval-click front for the Discord interactions endpoint — the Discord sibling of
+// slack-front.ts's option-(c) route-fronting, for the same structural reason: eve's
+// `discordChannel` owns the interactions URL and handles MESSAGE_COMPONENT clicks itself
+// (its own HITL decode → DEFERRED_UPDATE), exposing no onComponent hook — so an
+// `oe-approval:` button click would vanish into eve's deferral. We FRONT the public URL
+// with our own route, answer OUR clicks (approvals/discord-flow.ts), and forward everything
+// else — PING, slash commands, eve's `eve_input:` HITL clicks, modal submits — to
+// discordChannel's own handler unchanged.
+//
+// The design (mirrors frontSlackChannel exactly):
+//   • The wrapped `discordChannel` is pointed at an INTERNAL route (`/eve/v1/discord/interaction`).
+//   • OUR route sits at the PUBLIC `/eve/v1/discord` (the Interactions Endpoint URL in the
+//     Discord developer portal — unchanged, so no re-registration).
+//   • Both routes live on the SAME channel object (one channel name → one session namespace),
+//     and forwarding hands eve a FRESH Request over the same raw body, so it re-verifies and
+//     dispatches exactly as if it owned the URL — we only ADD a gate, never weaken one.
+//
+// The front route:
+//   1. Buffers the RAW body ONCE (needed for BOTH signature verification AND forwarding).
+//   2. Verifies Discord's Ed25519 signature over `timestamp + rawBody` (fail-closed 401).
+//      Unlike slack-front (which had to re-implement Slack's HMAC), eve publicly exports
+//      `verifyDiscordSignature`, so the actual crypto is eve's — we only add the header
+//      plumbing + skew window around it.
+//   3. Classifies: a type-3 MESSAGE_COMPONENT whose custom_id carries our `oe-approval:`
+//      prefix (the approvals plane) or our `oe-link:` prefix (the identity-consent button,
+//      OPE-622) → OURS, answered synchronously with the interaction response the matching click
+//      handler returns; a type-2 APPLICATION_COMMAND named "oe" → OURS too (backlog item
+//      23's zero-inference slash command — see commands/core.ts), answered synchronously and
+//      NEVER forwarded to discordChannel's `onCommand`, which dispatches a full agent turn for
+//      ANY registered command name (docs/deploy/surfaces/discord.md); anything else → forward.
+import { POST } from "eve/channels";
+import { verifyDiscordSignature } from "eve/channels/discord";
+import { OE_DISCORD_APPROVAL_PREFIX } from "../approvals/discord-card.js";
+import { handleDiscordApprovalInteraction } from "../approvals/discord-flow.js";
+import { LINK_CONSENT_CLICK_PREFIX, OE_GRANT_ACTION_PREFIX, OE_INPUT_CLICK_PREFIX } from "@open-everywhere/core/agent/adapter-api.js";
+import { handleDiscordLinkConsentInteraction } from "../identity/discord-link-consent.js";
+import { handleDiscordGrantCardInteraction } from "../access/discord-grant-click.js";
+import { handleDiscordApprovalCardInteraction } from "./discord-approval-card.js";
+import { approvalCardRespondVia, OE_COMMAND_NAME } from "@open-everywhere/core/agent/adapter-api.js";
+import { handleDiscordOeCommandInteraction } from "../commands/discord-commands.js";
+/** The public URL Discord POSTs every interaction to (the app's Interactions Endpoint URL). */
+export const PUBLIC_DISCORD_ROUTE = "/eve/v1/discord";
+/** The internal path the wrapped `discordChannel` is mounted at (never hit by Discord directly). */
+export const INTERNAL_DISCORD_ROUTE = "/eve/v1/discord/interaction";
+// --- signature verification (Discord Ed25519) --------------------------------
+//
+// 🔴 THIS SCHEME STAYS INLINE AND IS DELIBERATELY *NOT* ON THE WEBHOOK VERIFIER REGISTRY (OPE-197).
+// Slack's `v0=` scheme was registered under that ticket; this one was assessed alongside it and
+// refused. The reason is NOT that it fails to fit `WebhookVerifier.verify({rawBody, headers, keys,
+// nowMs})` — it fits perfectly, and the registry's `keyKind: "public-key"` was designed against this
+// exact scheme. The reason is that the entry would be UNREACHABLE, and a registry row nothing can
+// reach makes the thing the registry is for WORSE:
+//
+//   • `registeredWebhookVerifierSources()` is printed verbatim in the generic ingress's 401
+//     (webhooks/gate.ts) as the set of sources a caller may declare. Adding `discord` to it would
+//     advertise a hook an operator can create, point Discord at, and never receive one delivery on.
+//   • EVERY Ed25519-signed Discord egress is bound to a RESPONSE contract the generic ingress
+//     structurally does not satisfy, so Discord refuses the endpoint before any delivery exists:
+//       – the Interactions Endpoint URL is saved only if an immediate `PING` gets a signed `PONG`
+//         body back (docs/deploy/surfaces/discord.md §1.5 and its Gotchas);
+//       – the Webhook Events URL requires "a 204 with an EMPTY body within 3s for both the PING and
+//         every event", and "repeated failures get the endpoint unregistered" (the header of
+//         channels/discord-events.ts, verified against Discord's docs).
+//     The generic ingress answers `200 "ok"` (core channels/webhooks.ts). That is neither, on either
+//     arm — and both arms are all there is: Discord has no third signed outbound.
+//
+// This is the shape OPE-207 already deleted once on the Notion side: an arm that shipped and was
+// removed because "nothing could put a hook into the status the arm required, so it was reachable by
+// no route". Registering `discord` would re-create it, one registry row further out.
+//
+// WHAT WOULD FLIP THIS: the generic ingress growing a per-source response contract (a source able to
+// declare the bytes it must answer a verification handshake with). Then the entry becomes reachable
+// and should be added — the verifier body below is already the whole implementation. Until then the
+// honest statement is that this deployment CAN verify Discord's signature, on the one route Discord
+// can actually be pointed at, which is this one.
+//
+// (Note also that the crypto here is EVE'S `verifyDiscordSignature`, not ours — this file adds
+// header plumbing and a skew window. On the "is the scheme ours and inline" axis it was always
+// closer to Linear and Teams, which use eve's verifiers, than to Slack, which does not.)
+const DISCORD_MAX_SKEW_SECONDS = 60 * 5; // same window eve's own verifyDiscordRequest defaults to
+/**
+ * Verify a Discord interaction over the RAW body (the exact bytes Discord signed):
+ * Ed25519 of `{timestamp}{body}` against the app public key, with a 5-minute skew window.
+ * Fail-closed: no key configured, a missing header, a malformed/stale timestamp, or a
+ * signature mismatch all return false — never "verified". `nowMs` is injectable so the
+ * skew window is tested; the crypto itself is eve's public `verifyDiscordSignature`.
+ */
+export function verifyDiscordInteraction(rawBody, headers, publicKey, nowMs = Date.now()) {
+    const signature = headers.get("x-signature-ed25519");
+    const timestamp = headers.get("x-signature-timestamp");
+    if (!publicKey || !signature || !timestamp)
+        return false;
+    const ts = Number(timestamp);
+    if (!Number.isFinite(ts) || Math.abs(nowMs / 1000 - ts) > DISCORD_MAX_SKEW_SECONDS)
+        return false;
+    return verifyDiscordSignature({ body: rawBody, publicKey, signature, timestamp });
+}
+/**
+ * Decide how the front route handles a raw interaction body. FORWARD is the fail-safe
+ * default: anything discordChannel owns (PING/PONG, any OTHER slash command, eve's own HITL
+ * component clicks and modal submits) or anything unrecognized goes to it unchanged.
+ * A MESSAGE_COMPONENT (type 3) whose custom_id starts with our `oe-approval:` prefix, or an
+ * APPLICATION_COMMAND (type 2) named "oe", is ours. Pure: no I/O, so every branch is
+ * unit-tested.
+ */
+export function classifyDiscordInteraction(rawBody) {
+    let json;
+    try {
+        json = JSON.parse(rawBody);
+    }
+    catch {
+        return { kind: "forward", reason: "unparseable body — let discordChannel answer it" };
+    }
+    if (typeof json !== "object" || json === null) {
+        return { kind: "forward", reason: "non-object body — let discordChannel answer it" };
+    }
+    const p = json;
+    if (p.type === 2) {
+        // APPLICATION_COMMAND (a slash command). "/oe" is OUR zero-inference command (backlog
+        // item 23) — answered here, NEVER forwarded to discordChannel's onCommand, which
+        // dispatches a full agent turn for ANY registered command name. Any OTHER command name
+        // (e.g. "/ask", docs/deploy/surfaces/discord.md) is a real user command and still
+        // forwards untouched — this is the ONLY command name the front route special-cases.
+        const data = typeof p.data === "object" && p.data !== null ? p.data : undefined;
+        const name = typeof data?.name === "string" ? data.name : undefined;
+        if (name === OE_COMMAND_NAME) {
+            return { kind: "oe-command", reason: `"/${OE_COMMAND_NAME}" command — ours, zero-inference, never forwarded`, interaction: json };
+        }
+        return { kind: "forward", reason: `application command "${name ?? "?"}" — not ours, discordChannel dispatches it` };
+    }
+    if (p.type !== 3) {
+        return { kind: "forward", reason: `interaction type ${String(p.type)} — not a component click` };
+    }
+    const data = typeof p.data === "object" && p.data !== null ? p.data : undefined;
+    const customId = typeof data?.custom_id === "string" ? data.custom_id : undefined;
+    // Four OE prefixes now, and they are deliberately different strings so a log line names one
+    // feature: `oe-approval:` is the approvals plane, `oe-link:` is the identity-consent button
+    // (OPE-622), `oe_grant:` is the credential-grant card (OPE-1260 — before it, that card's buttons
+    // rendered here and fell through to eve, so the owner's tap was lost), `oe_input:` is the bridged
+    // eve approval card on a unified origin (OPE-1720 — the same lost-tap shape, one plane along).
+    // Anything else — eve's own `eve_input:` HITL buttons included — forwards untouched, and the two
+    // spellings are one character apart on purpose: `oe_input:` is OURS and `eve_input:` is eve's.
+    if (customId?.startsWith(OE_DISCORD_APPROVAL_PREFIX)) {
+        return { kind: "approval-click", reason: "oe-approval: component click — ours, never forwarded", interaction: json };
+    }
+    if (customId?.startsWith(LINK_CONSENT_CLICK_PREFIX)) {
+        return { kind: "link-consent-click", reason: "oe-link: component click — ours, never forwarded", interaction: json };
+    }
+    if (customId?.startsWith(OE_GRANT_ACTION_PREFIX)) {
+        return { kind: "grant-click", reason: "oe_grant: component click — ours, never forwarded", interaction: json };
+    }
+    if (customId?.startsWith(OE_INPUT_CLICK_PREFIX)) {
+        return { kind: "input-click", reason: "oe_input: component click — ours, never forwarded", interaction: json };
+    }
+    return { kind: "forward", reason: "component click — eve's HITL owns it" };
+}
+function interactionJson(body) {
+    return new Response(JSON.stringify(body), { status: 200, headers: { "content-type": "application/json" } });
+}
+/**
+ * Build the front route handler. Buffers the body once, verifies the Ed25519 signature,
+ * then answers our approval clicks or forwards per {@link classifyDiscordInteraction}.
+ * `innerHandler` is discordChannel's own POST handler, invoked with a FRESH Request
+ * (re-readable body) + the same {@link RouteHandlerArgs}, so discordChannel re-verifies
+ * and dispatches exactly as if it owned the URL.
+ */
+export function buildDiscordFrontHandler(innerHandler, opts = {}) {
+    const now = opts.now ?? (() => Date.now());
+    const publicKey = () => opts.publicKey ?? process.env.DISCORD_PUBLIC_KEY;
+    const handleClick = opts.handleApprovalInteraction ?? handleDiscordApprovalInteraction;
+    const handleLinkConsent = opts.handleLinkConsentInteraction ?? handleDiscordLinkConsentInteraction;
+    const handleGrantCard = opts.handleGrantCardInteraction ?? handleDiscordGrantCardInteraction;
+    const handleApprovalCard = opts.handleApprovalCardInteraction ?? handleDiscordApprovalCardInteraction;
+    const handleOeCommand = opts.handleOeCommand ?? handleDiscordOeCommandInteraction;
+    return async (req, args) => {
+        const rawBody = await req.text();
+        if (!verifyDiscordInteraction(rawBody, req.headers, publicKey(), now())) {
+            return new Response("unauthorized", { status: 401 });
+        }
+        const decision = classifyDiscordInteraction(rawBody);
+        if (decision.kind === "approval-click") {
+            // Ours: parsed, admin-checked, CAS-decided and executed by our code (the same
+            // resolveApprovalClick core Slack clicks use), answered as an interaction response.
+            //
+            // 🔴 `args.waitUntil` RIDES ALONG (OPE-1407), for the same reason the grant branch below takes
+            // it: the decision FEEDBACK — a Discord REST notice post plus a wake dispatch — runs off the
+            // response path, and on a serverless host a promise with nowhere to live is frozen with the
+            // invocation. The door awaits the feedback when this is absent, so passing it is what moves
+            // that leg out of Discord's three-second budget.
+            const response = await handleClick(decision.interaction, { waitUntil: args.waitUntil });
+            if (response)
+                return interactionJson(response);
+            // Defensive: classification said "ours" but the handler disagreed (an ours-prefixed
+            // but unparseable custom_id) — fall through to forwarding so the click is never
+            // silently swallowed; eve's HITL decode no-ops it with a harmless deferred ack.
+        }
+        if (decision.kind === "link-consent-click") {
+            // Ours: the person named in a directory-transport link request tapped their own consent ask
+            // (OPE-622). Core's `resolveLinkConsentClick` owns the decision and the writes; this route only
+            // carries Discord's verified envelope in and Discord's EPHEMERAL answer back out. A null means
+            // the handler could not read the id after all — forward rather than swallow, exactly as the
+            // approval branch does.
+            const response = await handleLinkConsent(decision.interaction);
+            if (response)
+                return interactionJson(response);
+        }
+        if (decision.kind === "grant-click") {
+            // Ours: the OWNER of a credential answered a request to spend it (OPE-1260). Core's
+            // `resolveGrantCardClick` owns the decision, the owner check and the writes; this route only
+            // carries Discord's verified envelope in and Discord's EPHEMERAL answer back out. A null means
+            // the handler could not read the id after all — forward rather than swallow, exactly as the two
+            // branches above do.
+            //
+            // 🔴 `args.waitUntil` RIDES ALONG (OPE-1282), and this branch is the only one that passes it.
+            // The grant door answers with a DEFERRED response and resolves the click afterwards; without
+            // somewhere for that work to survive the reply, a serverless host would freeze the invocation
+            // and the owner would sit on "thinking…" forever. The door falls back to its old synchronous
+            // shape when this is absent, so passing it is what turns the fix on.
+            const response = await handleGrantCard(decision.interaction, { waitUntil: args.waitUntil });
+            if (response)
+                return interactionJson(response);
+        }
+        if (decision.kind === "input-click") {
+            // Ours (core channels/approval-card.ts): somebody tapped a bridged eve approval this deployment
+            // rendered onto a unified origin (OPE-1720). The handler resolves the ticket, admits the tap
+            // through the SAME floor the typed answer takes, and delivers
+            // `respond([{requestId, optionId}])` to the parked WINDOW session.
+            //
+            // 🔴 THE DELIVERY GOES BY SESSION ID (OPE-1863). `args.from` is CHANNEL-LOCAL — on this route
+            // it addresses `discord:<token>`, while the parked session lives at `unified:<token>` — so the
+            // settle threw "the target session was not found" and every tap left the approval parked.
+            // `args.attachSession` dispatches by durable session id from any channel, and
+            // `approvalCardRespondVia` is the one road every surface binds. Bound HERE and injected because
+            // the route handler is the only place eve hands out either primitive.
+            //
+            // 🔴 `args.waitUntil` RIDES ALONG, for the grant branch's reason and one more of this door's
+            // own: a settle RESUMES a parked turn, and Discord does not redeliver an interaction it never
+            // saw answered — so a slow settle without the defer shows the tapper a red failure over an
+            // approval that really did settle. A null means the payload carried our prefix but not a shape
+            // the handler could read: forward rather than swallow, exactly as the three branches above do.
+            const respondToApproval = approvalCardRespondVia(args.attachSession);
+            const response = await handleApprovalCard(decision.interaction, respondToApproval, { waitUntil: args.waitUntil });
+            if (response)
+                return interactionJson(response);
+        }
+        if (decision.kind === "oe-command") {
+            // Ours: zero-inference — parsed, executed as pure logic (+ the approval-card path for
+            // budget raise/clear), answered synchronously as an interaction response. NEVER reaches
+            // discordChannel's onCommand (which would dispatch a full agent turn).
+            // `args.attachSession` rides along purely for "/oe stop" (OPE-418) — it is I/O-free, so
+            // passing it costs nothing on the branches that never touch it.
+            const response = await handleOeCommand(decision.interaction, args.attachSession);
+            if (response)
+                return interactionJson(response);
+            // Defensive fallback mirrors the approval-click branch above: classification said
+            // "ours" but the handler disagreed — never silently swallow, forward instead.
+        }
+        // Fresh Request so discordChannel can re-read the raw body + re-verify the signature.
+        const forwarded = new Request(req.url, { method: "POST", headers: req.headers, body: rawBody });
+        return innerHandler(forwarded, args);
+    };
+}
+/**
+ * Compose the approval-click front route with a wrapped `discordChannel`. `inner` must have
+ * been built with `route: INTERNAL_DISCORD_ROUTE`. Returns the SAME channel value
+ * (preserving eve's internal `__kind`/adapter/receive) with the public front route
+ * prepended — so Discord's Interactions Endpoint URL hits us, and both routes share one
+ * channel name → one session namespace. (Byte-for-byte the frontSlackChannel pattern.)
+ */
+export function frontDiscordChannel(inner, opts = {}) {
+    const innerPost = inner.routes.find((r) => r.method === "POST" && r.path === INTERNAL_DISCORD_ROUTE);
+    if (!innerPost) {
+        throw new Error(`frontDiscordChannel: wrapped discordChannel must be built with route: "${INTERNAL_DISCORD_ROUTE}" ` +
+            `(found paths: ${inner.routes.map((r) => r.path).join(", ")})`);
+    }
+    const front = buildDiscordFrontHandler(innerPost.handler, opts);
+    return { ...inner, routes: [POST(PUBLIC_DISCORD_ROUTE, front), ...inner.routes] };
+}
+//# sourceMappingURL=discord-front.js.map

package/dist/agent/channels/discord-front.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-front.js","sourceRoot":"","sources":["../../../agent/channels/discord-front.ts"],"names":[],"mappings":"AAAA,sFAAsF;AACtF,oFAAoF;AACpF,yFAAyF;AACzF,gFAAgF;AAChF,wFAAwF;AACxF,4FAA4F;AAC5F,kFAAkF;AAClF,0CAA0C;AAC1C,EAAE;AACF,kDAAkD;AAClD,oGAAoG;AACpG,2FAA2F;AAC3F,oEAAoE;AACpE,8FAA8F;AAC9F,6FAA6F;AAC7F,wFAAwF;AACxF,EAAE;AACF,mBAAmB;AACnB,0FAA0F;AAC1F,0FAA0F;AAC1F,yFAAyF;AACzF,wFAAwF;AACxF,yCAAyC;AACzC,yFAAyF;AACzF,2FAA2F;AAC3F,gGAAgG;AAChG,yFAAyF;AACzF,6FAA6F;AAC7F,+FAA+F;AAC/F,+FAA+F;AAE/F,OAAO,EAAE,IAAI,EAAiE,MAAM,cAAc,CAAC;AACnG,OAAO,EAAE,sBAAsB,EAAE,MAAM,sBAAsB,CAAC;AAC9D,OAAO,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AAC1E,OAAO,EAAE,gCAAgC,EAAmC,MAAM,8BAA8B,CAAC;AACjH,OAAO,EAAE,yBAAyB,EAAE,sBAAsB,EAAE,qBAAqB,EAAE,MAAM,4CAA4C,CAAC;AACtI,OAAO,EAAE,mCAAmC,EAAE,MAAM,qCAAqC,CAAC;AAC1F,OAAO,EAAE,iCAAiC,EAAE,MAAM,kCAAkC,CAAC;AACrF,OAAO,EAAE,oCAAoC,EAA0B,MAAM,4BAA4B,CAAC;AAC1G,OAAO,EAAE,sBAAsB,EAAE,eAAe,EAA+B,MAAM,4CAA4C,CAAC;AAClI,OAAO,EAAE,iCAAiC,EAAE,MAAM,iCAAiC,CAAC;AAMpF,+FAA+F;AAC/F,MAAM,CAAC,MAAM,oBAAoB,GAAG,iBAAiB,CAAC;AACtD,oGAAoG;AACpG,MAAM,CAAC,MAAM,sBAAsB,GAAG,6BAA6B,CAAC;AAEpE,gFAAgF;AAChF,EAAE;AACF,oGAAoG;AACpG,gGAAgG;AAChG,mGAAmG;AACnG,qGAAqG;AACrG,kGAAkG;AAClG,mDAAmD;AACnD,EAAE;AACF,4FAA4F;AAC5F,kGAAkG;AAClG,oGAAoG;AACpG,8FAA8F;AAC9F,iGAAiG;AACjG,kGAAkG;AAClG,4EAA4E;AAC5E,oGAAoG;AACpG,6FAA6F;AAC7F,wEAAwE;AACxE,qGAAqG;AACrG,kFAAkF;AAClF,EAAE;AACF,iGAAiG;AACjG,qGAAqG;AACrG,qFAAqF;AACrF,EAAE;AACF,qGAAqG;AACrG,oGAAoG;AACpG,oGAAoG;AACpG,oGAAoG;AACpG,iDAAiD;AACjD,EAAE;AACF,+FAA+F;AAC/F,+FAA+F;AAC/F,yFAAyF;AAEzF,MAAM,wBAAwB,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,yDAAyD;AAElG;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,OAAe,EACf,OAAgB,EAChB,SAA6B,EAC7B,KAAK,GAAW,IAAI,CAAC,GAAG,EAAE;IAE1B,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,qBAAqB,CAAC,CAAC;IACrD,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC;IACvD,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS,IAAI,CAAC,SAAS;QAAE,OAAO,KAAK,CAAC;IACzD,MAAM,EAAE,GAAG,MAAM,CAAC,SAAS,CAAC,CAAC;IAC7B,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,EAAE,CAAC,IAAI,IAAI,CAAC,GAAG,CAAC,KAAK,GAAG,IAAI,GAAG,EAAE,CAAC,GAAG,wBAAwB;QAAE,OAAO,KAAK,CAAC;IACjG,OAAO,sBAAsB,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,SAAS,EAAE,SAAS,EAAE,SAAS,EAAE,CAAC,CAAC;AACpF,CAAC;AAkBD;;;;;;;GAOG;AACH,MAAM,UAAU,0BAA0B,CAAC,OAAe;IACxD,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,IAAI,GAAG,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;IAC7B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,iDAAiD,EAAE,CAAC;IACxF,CAAC;IACD,IAAI,OAAO,IAAI,KAAK,QAAQ,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;QAC9C,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,gDAAgD,EAAE,CAAC;IACvF,CAAC;IACD,MAAM,CAAC,GAAG,IAA+B,CAAC;IAC1C,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACjB,sFAAsF;QACtF,iFAAiF;QACjF,uFAAuF;QACvF,kFAAkF;QAClF,oFAAoF;QACpF,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;QAC7G,MAAM,IAAI,GAAG,OAAO,IAAI,EAAE,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC;QACpE,IAAI,IAAI,KAAK,eAAe,EAAE,CAAC;YAC7B,OAAO,EAAE,IAAI,EAAE,YAAY,EAAE,MAAM,EAAE,KAAK,eAAe,mDAAmD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;QACpI,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,wBAAwB,IAAI,IAAI,GAAG,4CAA4C,EAAE,CAAC;IACtH,CAAC;IACD,IAAI,CAAC,CAAC,IAAI,KAAK,CAAC,EAAE,CAAC;QACjB,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,oBAAoB,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,0BAA0B,EAAE,CAAC;IACnG,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,CAAC,CAAC,IAAI,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC,CAAE,CAAC,CAAC,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7G,MAAM,QAAQ,GAAG,OAAO,IAAI,EAAE,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAC;IAClF,4FAA4F;IAC5F,4FAA4F;IAC5F,iGAAiG;IACjG,kGAAkG;IAClG,+FAA+F;IAC/F,iGAAiG;IACjG,+FAA+F;IAC/F,IAAI,QAAQ,EAAE,UAAU,CAAC,0BAA0B,CAAC,EAAE,CAAC;QACrD,OAAO,EAAE,IAAI,EAAE,gBAAgB,EAAE,MAAM,EAAE,sDAAsD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvH,CAAC;IACD,IAAI,QAAQ,EAAE,UAAU,CAAC,yBAAyB,CAAC,EAAE,CAAC;QACpD,OAAO,EAAE,IAAI,EAAE,oBAAoB,EAAE,MAAM,EAAE,kDAAkD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACvH,CAAC;IACD,IAAI,QAAQ,EAAE,UAAU,CAAC,sBAAsB,CAAC,EAAE,CAAC;QACjD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,mDAAmD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjH,CAAC;IACD,IAAI,QAAQ,EAAE,UAAU,CAAC,qBAAqB,CAAC,EAAE,CAAC;QAChD,OAAO,EAAE,IAAI,EAAE,aAAa,EAAE,MAAM,EAAE,mDAAmD,EAAE,WAAW,EAAE,IAAI,EAAE,CAAC;IACjH,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,sCAAsC,EAAE,CAAC;AAC7E,CAAC;AA0CD,SAAS,eAAe,CAAC,IAAgC;IACvD,OAAO,IAAI,QAAQ,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,EAAE,CAAC,CAAC;AAC9G,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CAAC,YAA0B,EAAE,IAAI,GAAwB,EAAE;IACjG,MAAM,GAAG,GAAG,IAAI,CAAC,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;IAC3C,MAAM,SAAS,GAAG,GAAG,EAAE,CAAC,IAAI,CAAC,SAAS,IAAI,OAAO,CAAC,GAAG,CAAC,kBAAkB,CAAC;IACzE,MAAM,WAAW,GAAG,IAAI,CAAC,yBAAyB,IAAI,gCAAgC,CAAC;IACvF,MAAM,iBAAiB,GAAG,IAAI,CAAC,4BAA4B,IAAI,mCAAmC,CAAC;IACnG,MAAM,eAAe,GAAG,IAAI,CAAC,0BAA0B,IAAI,iCAAiC,CAAC;IAC7F,MAAM,kBAAkB,GAAG,IAAI,CAAC,6BAA6B,IAAI,oCAAoC,CAAC;IACtG,MAAM,eAAe,GAAG,IAAI,CAAC,eAAe,IAAI,iCAAiC,CAAC;IAElF,OAAO,KAAK,EAAE,GAAY,EAAE,IAAsB,EAAqB,EAAE;QACvE,MAAM,OAAO,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;QACjC,IAAI,CAAC,wBAAwB,CAAC,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,SAAS,EAAE,EAAE,GAAG,EAAE,CAAC,EAAE,CAAC;YACxE,OAAO,IAAI,QAAQ,CAAC,cAAc,EAAE,EAAE,MAAM,EAAE,GAAG,EAAE,CAAC,CAAC;QACvD,CAAC;QACD,MAAM,QAAQ,GAAG,0BAA0B,CAAC,OAAO,CAAC,CAAC;QAErD,IAAI,QAAQ,CAAC,IAAI,KAAK,gBAAgB,EAAE,CAAC;YACvC,8EAA8E;YAC9E,oFAAoF;YACpF,EAAE;YACF,+FAA+F;YAC/F,6FAA6F;YAC7F,4FAA4F;YAC5F,4FAA4F;YAC5F,iDAAiD;YACjD,MAAM,QAAQ,GAAG,MAAM,WAAW,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YACxF,IAAI,QAAQ;gBAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/C,oFAAoF;YACpF,gFAAgF;YAChF,gFAAgF;QAClF,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,oBAAoB,EAAE,CAAC;YAC3C,4FAA4F;YAC5F,gGAAgG;YAChG,+FAA+F;YAC/F,4FAA4F;YAC5F,wBAAwB;YACxB,MAAM,QAAQ,GAAG,MAAM,iBAAiB,CAAC,QAAQ,CAAC,WAAW,CAAC,CAAC;YAC/D,IAAI,QAAQ;gBAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,oFAAoF;YACpF,6FAA6F;YAC7F,+FAA+F;YAC/F,gGAAgG;YAChG,qBAAqB;YACrB,EAAE;YACF,8FAA8F;YAC9F,6FAA6F;YAC7F,8FAA8F;YAC9F,6FAA6F;YAC7F,qEAAqE;YACrE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAC5F,IAAI,QAAQ;gBAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,aAAa,EAAE,CAAC;YACpC,gGAAgG;YAChG,6FAA6F;YAC7F,8DAA8D;YAC9D,mEAAmE;YACnE,EAAE;YACF,8FAA8F;YAC9F,+FAA+F;YAC/F,0FAA0F;YAC1F,8EAA8E;YAC9E,gGAAgG;YAChG,sEAAsE;YACtE,EAAE;YACF,6FAA6F;YAC7F,8FAA8F;YAC9F,2FAA2F;YAC3F,+FAA+F;YAC/F,+FAA+F;YAC/F,MAAM,iBAAiB,GAAsB,sBAAsB,CAAC,IAAI,CAAC,aAAa,CAAC,CAAC;YACxF,MAAM,QAAQ,GAAG,MAAM,kBAAkB,CAAC,QAAQ,CAAC,WAAW,EAAE,iBAAiB,EAAE,EAAE,SAAS,EAAE,IAAI,CAAC,SAAS,EAAE,CAAC,CAAC;YAClH,IAAI,QAAQ;gBAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;QACjD,CAAC;QAED,IAAI,QAAQ,CAAC,IAAI,KAAK,YAAY,EAAE,CAAC;YACnC,sFAAsF;YACtF,wFAAwF;YACxF,uEAAuE;YACvE,wFAAwF;YACxF,gEAAgE;YAChE,MAAM,QAAQ,GAAG,MAAM,eAAe,CAAC,QAAQ,CAAC,WAAW,EAAE,IAAI,CAAC,aAAa,CAAC,CAAC;YACjF,IAAI,QAAQ;gBAAE,OAAO,eAAe,CAAC,QAAQ,CAAC,CAAC;YAC/C,kFAAkF;YAClF,8EAA8E;QAChF,CAAC;QAED,sFAAsF;QACtF,MAAM,SAAS,GAAG,IAAI,OAAO,CAAC,GAAG,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,GAAG,CAAC,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC,CAAC;QAChG,OAAO,YAAY,CAAC,SAAS,EAAE,IAAI,CAAC,CAAC;IACvC,CAAC,CAAC;AACJ,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAmC,KAAQ,EAAE,IAAI,GAAwB,EAAE;IAC5G,MAAM,SAAS,GAAG,KAAK,CAAC,MAAM,CAAC,IAAI,CACjC,CAAC,CAAC,EAAiC,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,MAAM,IAAI,CAAC,CAAC,IAAI,KAAK,sBAAsB,CAC/F,CAAC;IACF,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,MAAM,IAAI,KAAK,CACb,0EAA0E,sBAAsB,IAAI;YAClG,iBAAiB,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CACjE,CAAC;IACJ,CAAC;IACD,MAAM,KAAK,GAAG,wBAAwB,CAAC,SAAS,CAAC,OAAO,EAAE,IAAI,CAAC,CAAC;IAChE,OAAO,EAAE,GAAG,KAAK,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,oBAAoB,EAAE,KAAK,CAAC,EAAE,GAAG,KAAK,CAAC,MAAM,CAAC,EAAE,CAAC;AACpF,CAAC"}