@open-everywhere/provider-discord 0.1.0

package/dist/agent/commands/discord-command-sync.js

@@ -0,0 +1,224 @@
+// THE DISCORD HALF of the surface-command reconcile plane (OPE-1687) — the deployment registers its
+// own "/oe" command instead of waiting for an operator to run a CLI.
+//
+// WHAT IT DOES, ONCE PER PROCESS START: read the commands Discord holds for this application at each
+// declared guild, project both sides onto the fields this deployment actually declares, and write
+// ONLY when they differ. No difference ⇒ no write, so a warm deployment's steady-state cost is one
+// vendor read per cold start.
+//
+// 🔴 THE WRITE IS ADDITIVE — `POST …/commands`, NEVER the bulk `PUT`. Discord's bulk PUT is a full
+// OVERWRITE of every command at that scope, which is the right contract for the operator CLI
+// (`scripts/register-discord-commands.ts`, run deliberately, documented as destructive) and the wrong
+// one for an unattended boot. `docs/deploy/surfaces/discord.md` tells operators to register their own
+// `/ask` command by hand at this same scope; a boot-time PUT of our one-command array would delete it
+// silently on the next cold start. The per-command POST creates-or-updates by NAME and leaves every
+// other command at the scope untouched, so this plane can only ever add or correct "/oe".
+//
+// 🔴 THE DIFF IS A PROJECTION, NOT A DEEP EQUAL. Discord's GET returns fields nobody declared — `id`,
+// `application_id`, `version`, `guild_id`, `default_member_permissions`, `nsfw`, localisation maps —
+// and omits `required` where it is false. A deep equal against the declared body would therefore
+// differ EVERY time and turn "write only on a difference" into a write on every cold start. Both
+// sides go through the same `projectCommand`, which keeps exactly the fields
+// `buildOeDiscordCommandDefinition` sets and fills `required` with its Discord default.
+//
+// NEVER THROWS, AND NEVER BLOCKS BOOT FOR LONG. Every failure — no credential, a refused request, a
+// timeout, malformed JSON — answers with an outcome the boot plane logs. A bot token never reaches an
+// outcome's `detail`, and neither does a response body: a 401 says "401", not what Discord wrote back.
+// The latency bound is two constants below, and both are load-bearing rather than tuning: no 429
+// backoff at all, and one budget for the whole reconcile whatever the guild count.
+//
+// 🔴 ANY PROCESS THAT STARTS WITH BOTH CREDENTIALS WRITES TO THE DECLARED GUILD. The credential pair
+// is the only gate, so a local `eve dev`/`eve start` run with the deployment's own `DISCORD_BOT_TOKEN`
+// registers THAT CHECKOUT's command shape into the declared guild — see the warning in
+// `agent/commands/discord-commands.ts`.
+import { discordFetch } from "../channels/discord-rest.js";
+import { buildOeDiscordCommandDefinition } from "./discord-commands.js";
+/**
+ * 🔴 NO 429 BACKOFF AT ALL — the reconcile sits on the FIRST REQUEST's latency path.
+ *
+ * `withRetryAfter`'s defaults allow up to four attempts, a 30 s single wait and a 60 s total
+ * (`packages/core/agent/channels/rate-limit-retry.ts`), and its own header says a latency-critical
+ * caller must pass a tighter policy. A boot on a lambda is the strictest such caller there is: the
+ * cold start it rides is usually a Discord INTERACTION, which must be acknowledged inside 3 seconds.
+ * A 429 answered with `retry_after: 60` would otherwise sleep 30 s inside the boot's own top-level
+ * await, blow that ack, and possibly time the invocation out. So a rate-limited Discord is a plain
+ * failure here — the next cold start reads again, and the command list is stale meanwhile, which is
+ * the state it was already in.
+ *
+ * The same reasoning is why `discord-gateway.ts` gives its two ephemeral affordances `AFFORDANCE_RETRY`.
+ */
+const BOOT_RETRY = { maxAttempts: 1 };
+/** How long ONE Discord call may take. `AbortSignal.timeout` bounds a call, never a backoff sleep —
+ *  that is what {@link BOOT_RETRY} removes. */
+const CALL_TIMEOUT_MS = 1_500;
+/**
+ * The ceiling on the WHOLE reconcile, across every declared guild and both of each guild's calls.
+ * Without it the worst case multiplies by declared guild, and "bounded" would depend on how many
+ * rooms an operator listed. A guild the budget cannot reach reports `failed` and is read again on the
+ * next cold start.
+ */
+const RECONCILE_BUDGET_MS = 2_000;
+const API_BASE = "https://discord.com/api/v10";
+function isObject(v) {
+    return typeof v === "object" && v !== null;
+}
+function str(v) {
+    return typeof v === "string" ? v : "";
+}
+function numOrUndefined(v) {
+    return typeof v === "number" && Number.isFinite(v) ? v : undefined;
+}
+function projectOptions(raw) {
+    if (!Array.isArray(raw))
+        return [];
+    const out = [];
+    for (const entry of raw) {
+        if (!isObject(entry))
+            continue;
+        const min = numOrUndefined(entry["min_value"]);
+        const max = numOrUndefined(entry["max_value"]);
+        out.push({
+            name: str(entry["name"]),
+            description: str(entry["description"]),
+            type: numOrUndefined(entry["type"]) ?? 0,
+            // Discord OMITS `required` when it is false, so the default is part of the projection. Without
+            // it every optional option reads as a difference and the reconcile writes on every cold start.
+            required: entry["required"] === true,
+            ...(min === undefined ? {} : { min_value: min }),
+            ...(max === undefined ? {} : { max_value: max }),
+            options: projectOptions(entry["options"]),
+        });
+    }
+    return out;
+}
+/**
+ * Project one ApplicationCommand — declared or vendor-held — onto the fields this deployment sets.
+ * Returns undefined for anything that is not an object with a name, which is what a malformed or
+ * unexpected list entry looks like.
+ *
+ * OPTION ORDER IS PART OF THE PROJECTION. Discord renders a command's options in the order they were
+ * registered, so a reordered list is a real user-visible difference and must be written. Discord
+ * returns them in the registered order, so a steady state never reorders on its own.
+ */
+export function projectCommand(raw) {
+    if (!isObject(raw))
+        return undefined;
+    const name = str(raw["name"]);
+    if (name.length === 0)
+        return undefined;
+    return {
+        name,
+        // Discord's own default for `type` is 1 (CHAT_INPUT); the declaration sets it explicitly.
+        type: numOrUndefined(raw["type"]) ?? 1,
+        description: str(raw["description"]),
+        options: projectOptions(raw["options"]),
+    };
+}
+/** A stable string for one projected command, so two projections compare as text. */
+function canonical(command) {
+    const opt = (o) => [o.name, o.description, o.type, o.required, o.min_value ?? null, o.max_value ?? null, o.options.map(opt)];
+    return JSON.stringify([command.name, command.type, command.description, command.options.map(opt)]);
+}
+/**
+ * Compare the command this deployment DECLARES against the list Discord HOLDS at one scope.
+ *
+ * `held` is the raw array Discord's GET returned. Only the entry whose name matches the declared
+ * command is considered: every other command at that scope belongs to someone else and this plane
+ * neither reads nor writes it.
+ */
+export function discordCommandDrift(declared, held) {
+    const want = projectCommand(declared);
+    if (want === undefined) {
+        // A declaration this file cannot project is a code defect, not a vendor state. Refusing to write
+        // is the safe half: a bad body would replace a working command with a broken one.
+        return { changed: false, reason: "the declared command has no name — nothing was compared and nothing will be written" };
+    }
+    const list = Array.isArray(held) ? held : [];
+    const mine = list.map((entry) => projectCommand(entry)).find((entry) => entry !== undefined && entry.name === want.name);
+    if (mine === undefined) {
+        return { changed: true, reason: `"/${want.name}" is not registered at this scope` };
+    }
+    if (canonical(mine) !== canonical(want)) {
+        return { changed: true, reason: `"/${want.name}" is registered with a different shape` };
+    }
+    return { changed: false, reason: `"/${want.name}" already matches what this deployment declares` };
+}
+/** Read + compare + (only on a difference) write, for ONE guild. Never throws. `msLeft` is what is
+ *  left of the whole reconcile's budget, so no single guild can spend more than the rest of them. */
+async function reconcileOneGuild(guildId, applicationId, botToken, deps, msLeft) {
+    const declared = buildOeDiscordCommandDefinition();
+    const url = `${API_BASE}/applications/${applicationId}/guilds/${guildId}/commands`;
+    const headers = { authorization: `Bot ${botToken}`, "content-type": "application/json" };
+    const cap = deps.timeoutMs ?? CALL_TIMEOUT_MS;
+    const fetchDeps = { ...(deps.fetch ? { fetch: deps.fetch } : {}), retry: BOOT_RETRY };
+    /** This call's own ceiling: the per-call cap, or whatever is left of the reconcile's budget. */
+    const nextTimeout = () => Math.min(cap, msLeft());
+    if (nextTimeout() <= 0) {
+        return { status: "failed", detail: `guild ${guildId}: the boot budget was already spent on an earlier guild — read again on the next start` };
+    }
+    let held;
+    try {
+        const res = await discordFetch("GET /applications/{id}/guilds/{id}/commands", url, { method: "GET", headers, signal: AbortSignal.timeout(nextTimeout()) }, fetchDeps);
+        if (!res.ok)
+            return { status: "failed", detail: `guild ${guildId}: the command list read returned ${res.status}` };
+        held = await res.json();
+    }
+    catch (err) {
+        return { status: "failed", detail: `guild ${guildId}: the command list read failed (${err instanceof Error ? err.name : "error"})` };
+    }
+    const drift = discordCommandDrift(declared, held);
+    if (!drift.changed)
+        return { status: "unchanged", detail: `guild ${guildId}: ${drift.reason}` };
+    if (nextTimeout() <= 0) {
+        return { status: "failed", detail: `guild ${guildId}: ${drift.reason}, and the boot budget was spent before the write — retried on the next start` };
+    }
+    try {
+        // CREATE-OR-UPDATE BY NAME. Discord treats a POST naming an existing command as an update of
+        // that command, and touches nothing else at the scope — see the header on why the bulk PUT is
+        // wrong here.
+        const res = await discordFetch("POST /applications/{id}/guilds/{id}/commands", url, { method: "POST", headers, body: JSON.stringify(declared), signal: AbortSignal.timeout(nextTimeout()) }, fetchDeps);
+        if (!res.ok)
+            return { status: "failed", detail: `guild ${guildId}: ${drift.reason}, and the write returned ${res.status}` };
+        return { status: "updated", detail: `guild ${guildId}: ${drift.reason} — registered` };
+    }
+    catch (err) {
+        return { status: "failed", detail: `guild ${guildId}: ${drift.reason}, and the write failed (${err instanceof Error ? err.name : "error"})` };
+    }
+}
+/**
+ * THE RECONCILER the discord bundle registers with core's command plane.
+ *
+ * Runs at boot, so it is gated on BOTH deployment credentials being present: `DISCORD_APPLICATION_ID`
+ * says which app this is and `DISCORD_BOT_TOKEN` authenticates the call. Either missing ⇒ `skipped`,
+ * which is the correct reading of a deployment that carries the bundle but no Discord app — and it is
+ * also what keeps every offline test tier network-free, since no test publishes an application id.
+ *
+ * 🔴 THESE TWO STAY ENV. They are the credential pair this deployment speaks as, which is exactly the
+ * `secret`/`identity` half of the config-as-code line. The GUILD ids do not: they are tracked literals
+ * in `agent/commands/discord-commands.ts` and arrive here as the declared scope.
+ */
+export async function reconcileDiscordCommands(scope, deps = {}) {
+    const applicationId = deps.applicationId ?? process.env.DISCORD_APPLICATION_ID;
+    const botToken = deps.botToken ?? process.env.DISCORD_BOT_TOKEN;
+    if (!applicationId || !botToken) {
+        return {
+            status: "skipped",
+            detail: "DISCORD_APPLICATION_ID and DISCORD_BOT_TOKEN must both be set for this deployment to register its own commands.",
+        };
+    }
+    const deadline = Date.now() + (deps.budgetMs ?? RECONCILE_BUDGET_MS);
+    const msLeft = () => deadline - Date.now();
+    const results = [];
+    for (const guildId of scope.scopes) {
+        results.push(await reconcileOneGuild(guildId, applicationId, botToken, deps, msLeft));
+    }
+    const detail = results.map((r) => r.detail).join("; ");
+    // A failure on ANY guild is the outcome, even when another guild succeeded: the boot log must not
+    // read green while one room is still missing the command.
+    if (results.some((r) => r.status === "failed"))
+        return { status: "failed", detail };
+    if (results.some((r) => r.status === "updated"))
+        return { status: "updated", detail };
+    return { status: "unchanged", detail };
+}
+//# sourceMappingURL=discord-command-sync.js.map

package/dist/agent/commands/discord-command-sync.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-command-sync.js","sourceRoot":"","sources":["../../../agent/commands/discord-command-sync.ts"],"names":[],"mappings":"AAAA,oGAAoG;AACpG,qEAAqE;AACrE,EAAE;AACF,qGAAqG;AACrG,kGAAkG;AAClG,mGAAmG;AACnG,8BAA8B;AAC9B,EAAE;AACF,mGAAmG;AACnG,6FAA6F;AAC7F,sGAAsG;AACtG,sGAAsG;AACtG,sGAAsG;AACtG,oGAAoG;AACpG,0FAA0F;AAC1F,EAAE;AACF,sGAAsG;AACtG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,6EAA6E;AAC7E,wFAAwF;AACxF,EAAE;AACF,oGAAoG;AACpG,sGAAsG;AACtG,uGAAuG;AACvG,iGAAiG;AACjG,mFAAmF;AACnF,EAAE;AACF,qGAAqG;AACrG,uGAAuG;AACvG,uFAAuF;AACvF,wCAAwC;AAGxC,OAAO,EAAE,YAAY,EAAyB,MAAM,6BAA6B,CAAC;AAClF,OAAO,EAAE,+BAA+B,EAAE,MAAM,uBAAuB,CAAC;AAExE;;;;;;;;;;;;;GAaG;AACH,MAAM,UAAU,GAAgB,EAAE,WAAW,EAAE,CAAC,EAAE,CAAC;AAEnD;+CAC+C;AAC/C,MAAM,eAAe,GAAG,KAAK,CAAC;AAE9B;;;;;GAKG;AACH,MAAM,mBAAmB,GAAG,KAAK,CAAC;AAElC,MAAM,QAAQ,GAAG,6BAA6B,CAAC;AAoB/C,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AAED,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACxC,CAAC;AAED,SAAS,cAAc,CAAC,CAAU;IAChC,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AACrE,CAAC;AAED,SAAS,cAAc,CAAC,GAAY;IAClC,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC;QAAE,OAAO,EAAE,CAAC;IACnC,MAAM,GAAG,GAAsB,EAAE,CAAC;IAClC,KAAK,MAAM,KAAK,IAAI,GAAG,EAAE,CAAC;QACxB,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;YAAE,SAAS;QAC/B,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/C,MAAM,GAAG,GAAG,cAAc,CAAC,KAAK,CAAC,WAAW,CAAC,CAAC,CAAC;QAC/C,GAAG,CAAC,IAAI,CAAC;YACP,IAAI,EAAE,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC;YACxB,WAAW,EAAE,GAAG,CAAC,KAAK,CAAC,aAAa,CAAC,CAAC;YACtC,IAAI,EAAE,cAAc,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;YACxC,+FAA+F;YAC/F,+FAA+F;YAC/F,QAAQ,EAAE,KAAK,CAAC,UAAU,CAAC,KAAK,IAAI;YACpC,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAChD,GAAG,CAAC,GAAG,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,GAAG,EAAE,CAAC;YAChD,OAAO,EAAE,cAAc,CAAC,KAAK,CAAC,SAAS,CAAC,CAAC;SAC1C,CAAC,CAAC;IACL,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,cAAc,CAAC,GAAY;IACzC,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC;QAAE,OAAO,SAAS,CAAC;IACrC,MAAM,IAAI,GAAG,GAAG,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC;IAC9B,IAAI,IAAI,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACxC,OAAO;QACL,IAAI;QACJ,0FAA0F;QAC1F,IAAI,EAAE,cAAc,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC;QACtC,WAAW,EAAE,GAAG,CAAC,GAAG,CAAC,aAAa,CAAC,CAAC;QACpC,OAAO,EAAE,cAAc,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;KACxC,CAAC;AACJ,CAAC;AAED,qFAAqF;AACrF,SAAS,SAAS,CAAC,OAAyB;IAC1C,MAAM,GAAG,GAAG,CAAC,CAAkB,EAAW,EAAE,CAAC,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,QAAQ,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,SAAS,IAAI,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC;IACvJ,OAAO,IAAI,CAAC,SAAS,CAAC,CAAC,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,IAAI,EAAE,OAAO,CAAC,WAAW,EAAE,OAAO,CAAC,OAAO,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC;AACrG,CAAC;AASD;;;;;;GAMG;AACH,MAAM,UAAU,mBAAmB,CAAC,QAAiB,EAAE,IAAa;IAClE,MAAM,IAAI,GAAG,cAAc,CAAC,QAAQ,CAAC,CAAC;IACtC,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,iGAAiG;QACjG,kFAAkF;QAClF,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,qFAAqF,EAAE,CAAC;IAC3H,CAAC;IACD,MAAM,IAAI,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC;IAC7C,MAAM,IAAI,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,cAAc,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,KAAK,KAAK,SAAS,IAAI,KAAK,CAAC,IAAI,KAAK,IAAI,CAAC,IAAI,CAAC,CAAC;IACzH,IAAI,IAAI,KAAK,SAAS,EAAE,CAAC;QACvB,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,IAAI,mCAAmC,EAAE,CAAC;IACtF,CAAC;IACD,IAAI,SAAS,CAAC,IAAI,CAAC,KAAK,SAAS,CAAC,IAAI,CAAC,EAAE,CAAC;QACxC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,IAAI,wCAAwC,EAAE,CAAC;IAC3F,CAAC;IACD,OAAO,EAAE,OAAO,EAAE,KAAK,EAAE,MAAM,EAAE,KAAK,IAAI,CAAC,IAAI,iDAAiD,EAAE,CAAC;AACrG,CAAC;AAkBD;qGACqG;AACrG,KAAK,UAAU,iBAAiB,CAC9B,OAAe,EACf,aAAqB,EACrB,QAAgB,EAChB,IAA4B,EAC5B,MAAoB;IAEpB,MAAM,QAAQ,GAAG,+BAA+B,EAAE,CAAC;IACnD,MAAM,GAAG,GAAG,GAAG,QAAQ,iBAAiB,aAAa,WAAW,OAAO,WAAW,CAAC;IACnF,MAAM,OAAO,GAAG,EAAE,aAAa,EAAE,OAAO,QAAQ,EAAE,EAAE,cAAc,EAAE,kBAAkB,EAAE,CAAC;IACzF,MAAM,GAAG,GAAG,IAAI,CAAC,SAAS,IAAI,eAAe,CAAC;IAC9C,MAAM,SAAS,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,KAAK,EAAE,UAAU,EAAE,CAAC;IACtF,gGAAgG;IAChG,MAAM,WAAW,GAAG,GAAW,EAAE,CAAC,IAAI,CAAC,GAAG,CAAC,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;IAE1D,IAAI,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,wFAAwF,EAAE,CAAC;IAChJ,CAAC;IAED,IAAI,IAAa,CAAC;IAClB,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,YAAY,CAAC,6CAA6C,EAAE,GAAG,EAAE,EAAE,MAAM,EAAE,KAAK,EAAE,OAAO,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EAAE,SAAS,CAAC,CAAC;QACtK,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,oCAAoC,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QACnH,IAAI,GAAG,MAAM,GAAG,CAAC,IAAI,EAAE,CAAC;IAC1B,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,mCAAmC,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;IACvI,CAAC;IAED,MAAM,KAAK,GAAG,mBAAmB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAAC;IAClD,IAAI,CAAC,KAAK,CAAC,OAAO;QAAE,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,EAAE,EAAE,CAAC;IAEhG,IAAI,WAAW,EAAE,IAAI,CAAC,EAAE,CAAC;QACvB,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,8EAA8E,EAAE,CAAC;IACvJ,CAAC;IAED,IAAI,CAAC;QACH,6FAA6F;QAC7F,8FAA8F;QAC9F,cAAc;QACd,MAAM,GAAG,GAAG,MAAM,YAAY,CAC5B,8CAA8C,EAC9C,GAAG,EACH,EAAE,MAAM,EAAE,MAAM,EAAE,OAAO,EAAE,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,WAAW,EAAE,CAAC,EAAE,EACvG,SAAS,CACV,CAAC;QACF,IAAI,CAAC,GAAG,CAAC,EAAE;YAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,4BAA4B,GAAG,CAAC,MAAM,EAAE,EAAE,CAAC;QAC5H,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,eAAe,EAAE,CAAC;IACzF,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,SAAS,OAAO,KAAK,KAAK,CAAC,MAAM,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,OAAO,GAAG,EAAE,CAAC;IAChJ,CAAC;AACH,CAAC;AAED;;;;;;;;;;;GAWG;AACH,MAAM,CAAC,KAAK,UAAU,wBAAwB,CAAC,KAA0B,EAAE,IAAI,GAA2B,EAAE;IAC1G,MAAM,aAAa,GAAG,IAAI,CAAC,aAAa,IAAI,OAAO,CAAC,GAAG,CAAC,sBAAsB,CAAC;IAC/E,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,IAAI,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC;IAChE,IAAI,CAAC,aAAa,IAAI,CAAC,QAAQ,EAAE,CAAC;QAChC,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,iHAAiH;SAC1H,CAAC;IACJ,CAAC;IAED,MAAM,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,CAAC,IAAI,CAAC,QAAQ,IAAI,mBAAmB,CAAC,CAAC;IACrE,MAAM,MAAM,GAAG,GAAW,EAAE,CAAC,QAAQ,GAAG,IAAI,CAAC,GAAG,EAAE,CAAC;IACnD,MAAM,OAAO,GAAkB,EAAE,CAAC;IAClC,KAAK,MAAM,OAAO,IAAI,KAAK,CAAC,MAAM,EAAE,CAAC;QACnC,OAAO,CAAC,IAAI,CAAC,MAAM,iBAAiB,CAAC,OAAO,EAAE,aAAa,EAAE,QAAQ,EAAE,IAAI,EAAE,MAAM,CAAC,CAAC,CAAC;IACxF,CAAC;IACD,MAAM,MAAM,GAAG,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IACvD,kGAAkG;IAClG,0DAA0D;IAC1D,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,QAAQ,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC;IACpF,IAAI,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,KAAK,SAAS,CAAC;QAAE,OAAO,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,EAAE,CAAC;IACtF,OAAO,EAAE,MAAM,EAAE,WAAW,EAAE,MAAM,EAAE,CAAC;AACzC,CAAC"}

package/dist/agent/commands/discord-commands.d.ts

@@ -0,0 +1,45 @@
+import { type AttachSessionForCancel, type OeCommand } from "@open-everywhere/core/agent/adapter-api.js";
+import { type OpenEverywhereDiscordAuth } from "../channels/discord-identity.js";
+import type { DiscordInteractionResponse } from "../approvals/discord-flow.js";
+/**
+ * Walk Discord's nested SUB_COMMAND_GROUP/SUB_COMMAND option tree for "/oe" into an
+ * `OeCommand`. Discord's schema REQUIRES picking a concrete subcommand — you cannot invoke a
+ * bare "/oe budget" the way Slack's free-text grammar allows ("budget" alone means
+ * budget-status there); that's a genuine, documented platform difference (see
+ * docs/deploy/surfaces/discord.md), not a bug. Defensive: untrusted wire JSON, every field
+ * probed, NEVER throws.
+ */
+export declare function parseDiscordOeCommandOptions(rawOptions: unknown): OeCommand;
+interface ParsedOeInvocation {
+    readonly auth: OpenEverywhereDiscordAuth;
+    readonly command: OeCommand;
+}
+/**
+ * Parse a raw (already Ed25519-verified) Discord interaction body into the auth + command a
+ * "/oe" invocation carries — or an `{ error }` for a recognizably-ours-but-unusable body
+ * (no resolvable user, or a bot author), or `null` for anything that isn't type-2 name-"oe"
+ * at all (the front route's classifier already checked this; re-checking here is the same
+ * defensive belt-and-braces parseDiscordComponentClick applies to approval clicks). NEVER
+ * throws.
+ */
+export declare function parseOeCommandInteraction(raw: unknown): ParsedOeInvocation | {
+    readonly error: string;
+} | null;
+/**
+ * Handle one verified Discord interaction the front route classified as "ours" (an "/oe"
+ * APPLICATION_COMMAND). Returns null for anything that doesn't actually parse as one (the
+ * caller then forwards to Eve — defensive fallback, mirrors handleDiscordApprovalInteraction);
+ * otherwise ALWAYS returns an ephemeral interaction response — NEVER throws, because Discord's
+ * interactions endpoint must always answer within 3s. Zero-inference: this never calls the
+ * model, and never consults spend caps (see core.ts's header — that's the entire point).
+ */
+export declare function handleDiscordOeCommandInteraction(raw: unknown, attachSession?: AttachSessionForCancel): Promise<DiscordInteractionResponse | null>;
+/**
+ * The Discord ApplicationCommand body for "/oe" — pure, no network, so the registration
+ * script (scripts/register-discord-commands.ts) and its test share exactly one definition.
+ * Shape: a "budget" SUB_COMMAND_GROUP (status/raise/clear) plus top-level "status"/"help"
+ * SUB_COMMANDs — see the file header for why "budget" alone isn't invokable on Discord.
+ */
+export declare function buildOeDiscordCommandDefinition(): Record<string, unknown>;
+export {};
+//# sourceMappingURL=discord-commands.d.ts.map

package/dist/agent/commands/discord-commands.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-commands.d.ts","sourceRoot":"","sources":["../../../agent/commands/discord-commands.ts"],"names":[],"mappings":"AA2BA,OAAO,EAML,KAAK,sBAAsB,EAE3B,KAAK,SAAS,EACf,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAoB,KAAK,yBAAyB,EAAE,MAAM,iCAAiC,CAAC;AACnG,OAAO,KAAK,EAAE,0BAA0B,EAAE,MAAM,8BAA8B,CAAC;AA2D/E;;;;;;;GAOG;AACH,wBAAgB,4BAA4B,CAAC,UAAU,EAAE,OAAO,GAAG,SAAS,CA2C3E;AAED,UAAU,kBAAkB;IAC1B,QAAQ,CAAC,IAAI,EAAE,yBAAyB,CAAC;IACzC,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;CAC7B;AAED;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CAAC,GAAG,EAAE,OAAO,GAAG,kBAAkB,GAAG;IAAE,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,CAsB9G;AAED;;;;;;;GAOG;AACH,wBAAsB,iCAAiC,CACrD,GAAG,EAAE,OAAO,EACZ,aAAa,CAAC,EAAE,sBAAsB,GACrC,OAAO,CAAC,0BAA0B,GAAG,IAAI,CAAC,CAqB5C;AAWD;;;;;GAKG;AACH,wBAAgB,+BAA+B,IAAI,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAsDzE"}

package/dist/agent/commands/discord-commands.js

@@ -0,0 +1,266 @@
+// The Discord I/O half of the "/oe" zero-inference slash command (backlog item 23) — the
+// sibling of approvals/discord-flow.ts's split (pure render/parse in one file, the
+// interactions-endpoint handler here). Two entry points:
+//
+//   buildOeDiscordCommandDefinition() — the pure ApplicationCommand JSON body for "/oe"
+//                                        (SUB_COMMAND_GROUP "budget" + top-level "status"/
+//                                        "stop"/"rate"/"help"). Shared by the registration script
+//                                        AND its test, so there is exactly one source of truth
+//                                        for the shape Discord expects.
+//   handleDiscordOeCommandInteraction() — called by the Discord front route
+//                                        (channels/discord-front.ts) for every verified
+//                                        interaction body its classifier marked "oe-command".
+//                                        Returns null for anything that isn't actually a
+//                                        parseable "/oe" invocation (defensive belt-and-braces
+//                                        — the front's classifier already checked type===2 &&
+//                                        data.name==="oe"), so the caller falls back to
+//                                        forwarding rather than silently swallowing the click.
+//                                        NEVER throws — Discord's interactions endpoint must
+//                                        always answer within 3s, so every failure mode here
+//                                        is fail-soft (an ephemeral note).
+//
+// WHY THIS NEVER REACHES discordChannel's onCommand: docs/deploy/surfaces/discord.md notes
+// that hook "does not filter on a specific command name — it accepts ANY registered
+// application command" and dispatches a full agent turn. "/oe" is deliberately intercepted
+// at the FRONT (before onCommand ever sees it) so it costs zero inference — see
+// channels/discord-front.ts's classifyDiscordInteraction.
+import { bindFrom, MODEL_AB_RATING_MAX, MODEL_AB_RATING_MIN, OE_COMMAND_NAME, runOeCommand, } from "@open-everywhere/core/agent/adapter-api.js";
+import { buildDiscordAuth } from "../channels/discord-identity.js";
+// Discord interaction-response wire constants, defined locally (same "leaf-over-import" call
+// approvals/discord-flow.ts and approvals/discord-card.ts make for their own copies): importing
+// eve's channel module here just for two stable public-API integers isn't worth the coupling.
+const RESPONSE_CHANNEL_MESSAGE = 4; // CHANNEL_MESSAGE_WITH_SOURCE — a fresh reply to the invocation
+const EPHEMERAL_FLAG = 64; //         only the invoking user sees the reply
+function ephemeral(content) {
+    return { type: RESPONSE_CHANNEL_MESSAGE, data: { content, flags: EPHEMERAL_FLAG } };
+}
+// --- defensive wire-JSON probing (untrusted body, post-signature-check) ---------------------
+// Mirrors approvals/discord-flow.ts's parseDiscordComponentClick posture exactly: this is
+// attacker-shaped JSON reaching a public URL (Discord relays whatever a client sends), so
+// every field is probed, nothing assumed present or well-typed.
+function isObject(v) {
+    return typeof v === "object" && v !== null;
+}
+function str(v) {
+    return typeof v === "string" && v.length > 0 ? v : undefined;
+}
+function num(v) {
+    if (typeof v === "number" && Number.isFinite(v))
+        return v;
+    if (typeof v === "string" && v.trim().length > 0) {
+        const n = Number(v);
+        return Number.isFinite(n) ? n : undefined;
+    }
+    return undefined;
+}
+/** Read Discord's raw numeric channel `type` off the interaction payload — duplicated in
+ *  miniature from channels/discord.ts's private channelTypeFromRaw (not exported there; this
+ *  file only needs the one field and importing the whole module for it isn't worth the
+ *  coupling — the same leaf-duplication call the header note makes). */
+function channelTypeFromRaw(raw) {
+    const ch = raw["channel"];
+    if (ch && typeof ch === "object") {
+        const t = ch["type"];
+        if (typeof t === "number")
+            return String(t);
+    }
+    return undefined;
+}
+function optArray(options) {
+    return Array.isArray(options) ? options : [];
+}
+function findOpt(options, name) {
+    return options.find((o) => isObject(o) && o.name === name);
+}
+/**
+ * Walk Discord's nested SUB_COMMAND_GROUP/SUB_COMMAND option tree for "/oe" into an
+ * `OeCommand`. Discord's schema REQUIRES picking a concrete subcommand — you cannot invoke a
+ * bare "/oe budget" the way Slack's free-text grammar allows ("budget" alone means
+ * budget-status there); that's a genuine, documented platform difference (see
+ * docs/deploy/surfaces/discord.md), not a bug. Defensive: untrusted wire JSON, every field
+ * probed, NEVER throws.
+ */
+export function parseDiscordOeCommandOptions(rawOptions) {
+    const top = optArray(rawOptions);
+    if (top.length === 0)
+        return { kind: "help" }; // shouldn't happen (Discord enforces a subcommand) — safe default
+    const first = top[0];
+    const name = str(first.name);
+    if (name === "status")
+        return { kind: "status" };
+    if (name === "stop")
+        return { kind: "stop" };
+    if (name === "help")
+        return { kind: "help" };
+    if (name === "rate") {
+        // OPE-34. Discord types the option INTEGER with min/max, so a well-formed client cannot send an
+        // out-of-range value — but this is untrusted wire JSON, so the range is re-checked here and the
+        // message is the one a person reads. The BOUNDS COME FROM CORE, in all three places this file
+        // states them: a scale that lived here as a literal would silently start refusing scores the
+        // Slack parser accepts the day core's scale changed.
+        const scoreOpt = findOpt(optArray(first.options), "score");
+        const score = num(scoreOpt?.value);
+        if (score === undefined || !Number.isInteger(score) || score < MODEL_AB_RATING_MIN || score > MODEL_AB_RATING_MAX) {
+            return {
+                kind: "error",
+                message: `"/oe rate" needs a whole "score" from ${MODEL_AB_RATING_MIN} to ${MODEL_AB_RATING_MAX} (got ${JSON.stringify(scoreOpt?.value)}).`,
+            };
+        }
+        return { kind: "rate", score };
+    }
+    if (name === "budget") {
+        const sub = optArray(first.options)[0];
+        const subName = sub ? str(sub.name) : undefined;
+        if (!subName || subName === "status")
+            return { kind: "budget-status" };
+        if (subName === "clear")
+            return { kind: "budget-clear" };
+        if (subName === "raise") {
+            const usdOpt = findOpt(optArray(sub?.options), "usd");
+            const usd = num(usdOpt?.value);
+            if (usd === undefined || usd <= 0) {
+                return {
+                    kind: "error",
+                    message: `"/oe budget raise" needs a positive "usd" amount (got ${JSON.stringify(usdOpt?.value)}).`,
+                };
+            }
+            return { kind: "budget-raise", usd };
+        }
+        return { kind: "error", message: `Unknown "budget" subcommand "${subName}".` };
+    }
+    return { kind: "error", message: `Unknown "/oe" subcommand "${name ?? "?"}" — try "/oe help".` };
+}
+/**
+ * Parse a raw (already Ed25519-verified) Discord interaction body into the auth + command a
+ * "/oe" invocation carries — or an `{ error }` for a recognizably-ours-but-unusable body
+ * (no resolvable user, or a bot author), or `null` for anything that isn't type-2 name-"oe"
+ * at all (the front route's classifier already checked this; re-checking here is the same
+ * defensive belt-and-braces parseDiscordComponentClick applies to approval clicks). NEVER
+ * throws.
+ */
+export function parseOeCommandInteraction(raw) {
+    if (!isObject(raw) || raw["type"] !== 2)
+        return null;
+    const data = isObject(raw["data"]) ? raw["data"] : undefined;
+    if (!data || data["name"] !== OE_COMMAND_NAME)
+        return null;
+    const member = isObject(raw["member"]) ? raw["member"] : undefined;
+    const memberUser = member && isObject(member["user"]) ? member["user"] : undefined;
+    const user = isObject(raw["user"]) ? raw["user"] : undefined;
+    const userId = (memberUser ? str(memberUser["id"]) : undefined) ?? (user ? str(user["id"]) : undefined);
+    const isBot = memberUser?.["bot"] === true || user?.["bot"] === true;
+    if (!userId || isBot) {
+        return { error: "Couldn't identify who invoked this — commands can't be run by a bot." };
+    }
+    const channelId = str(raw["channel_id"]);
+    if (!channelId) {
+        return { error: "Couldn't resolve this channel's id — try again from a real channel or DM." };
+    }
+    const guildId = str(raw["guild_id"]);
+    const channelType = channelTypeFromRaw(raw);
+    const auth = buildDiscordAuth({ userId, guildId, channelId, channelType });
+    const command = parseDiscordOeCommandOptions(data["options"]);
+    return { auth, command };
+}
+/**
+ * Handle one verified Discord interaction the front route classified as "ours" (an "/oe"
+ * APPLICATION_COMMAND). Returns null for anything that doesn't actually parse as one (the
+ * caller then forwards to Eve — defensive fallback, mirrors handleDiscordApprovalInteraction);
+ * otherwise ALWAYS returns an ephemeral interaction response — NEVER throws, because Discord's
+ * interactions endpoint must always answer within 3s. Zero-inference: this never calls the
+ * model, and never consults spend caps (see core.ts's header — that's the entire point).
+ */
+export async function handleDiscordOeCommandInteraction(raw, attachSession) {
+    const parsed = parseOeCommandInteraction(raw);
+    if (parsed === null)
+        return null; // not actually an "/oe" invocation — forward to Eve
+    if ("error" in parsed)
+        return ephemeral(parsed.error);
+    try {
+        const ctx = { channel: { kind: "discord" }, session: { auth: { current: parsed.auth } } };
+        const binding = bindFrom(ctx);
+        // `attachSession` is eve's I/O-free cancel door, threaded down from the route args purely for
+        // "/oe stop" (OPE-418). Every other branch ignores it, and its ABSENCE is handled with a
+        // user-facing sentence rather than a silent no-op — see core.ts's runStop.
+        const text = await runOeCommand(parsed.command, binding, attachSession ? { attachSession } : {});
+        return ephemeral(text);
+    }
+    catch (err) {
+        // runOeCommand's budget-raise/clear branches can throw a user-facing validation error
+        // (e.g. "propose from a DM needs an explicit scope") — surface it verbatim; anything else
+        // (a genuinely unexpected store/network failure) gets a generic fail-soft note. Either way,
+        // never throw out of this function.
+        console.error(`[open-everywhere:discord-commands] "/oe" command failed softly: ${String(err)}`);
+        return ephemeral(`Couldn't complete that: ${err instanceof Error ? err.message : String(err)}`);
+    }
+}
+// --- registration: the pure ApplicationCommand JSON body ------------------------------------
+// Discord option type integers (stable public API constants, defined locally — see the header
+// note on why this file doesn't import eve's channel module for two integers).
+const SUB_COMMAND = 1;
+const SUB_COMMAND_GROUP = 2;
+const OPTION_INTEGER = 4;
+const OPTION_NUMBER = 10;
+const CHAT_INPUT = 1;
+/**
+ * The Discord ApplicationCommand body for "/oe" — pure, no network, so the registration
+ * script (scripts/register-discord-commands.ts) and its test share exactly one definition.
+ * Shape: a "budget" SUB_COMMAND_GROUP (status/raise/clear) plus top-level "status"/"help"
+ * SUB_COMMANDs — see the file header for why "budget" alone isn't invokable on Discord.
+ */
+export function buildOeDiscordCommandDefinition() {
+    return {
+        name: OE_COMMAND_NAME,
+        type: CHAT_INPUT,
+        description: "Open Everywhere control-plane commands (status, budget) — no model turn.",
+        options: [
+            {
+                name: "budget",
+                description: "Spend-cap status and proposals for this channel/server.",
+                type: SUB_COMMAND_GROUP,
+                options: [
+                    { name: "status", description: "Show effective caps and current-month spend.", type: SUB_COMMAND },
+                    {
+                        name: "raise",
+                        description: "Propose a new monthly USD cap for this channel (posts an approval card).",
+                        type: SUB_COMMAND,
+                        options: [
+                            {
+                                name: "usd",
+                                description: "Proposed monthly USD budget.",
+                                type: OPTION_NUMBER,
+                                required: true,
+                                min_value: 0.01,
+                            },
+                        ],
+                    },
+                    { name: "clear", description: "Propose clearing this channel's spend-limit override.", type: SUB_COMMAND },
+                ],
+            },
+            { name: "status", description: "Deploy sanity: app version, model config, memory provider.", type: SUB_COMMAND },
+            // OPE-418: the free, pre-model stop. A top-level SUB_COMMAND (not a group) because it takes
+            // no arguments — the channel it was invoked in IS the argument.
+            { name: "stop", description: "Stand down the turn running in this channel.", type: SUB_COMMAND },
+            // OPE-34: the human mark on the model A/B test. A top-level SUB_COMMAND with one required
+            // INTEGER, bounded by Discord's own min/max so the client refuses an out-of-range score
+            // before it ever reaches the interaction endpoint.
+            {
+                name: "rate",
+                description: `Rate this channel's last answer (${MODEL_AB_RATING_MIN}-${MODEL_AB_RATING_MAX}) to mark the model A/B test.`,
+                type: SUB_COMMAND,
+                options: [
+                    {
+                        name: "score",
+                        description: `${MODEL_AB_RATING_MIN} (worst) to ${MODEL_AB_RATING_MAX} (best).`,
+                        type: OPTION_INTEGER,
+                        required: true,
+                        min_value: MODEL_AB_RATING_MIN,
+                        max_value: MODEL_AB_RATING_MAX,
+                    },
+                ],
+            },
+            { name: "help", description: "List the /oe commands.", type: SUB_COMMAND },
+        ],
+    };
+}
+//# sourceMappingURL=discord-commands.js.map

package/dist/agent/commands/discord-commands.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"discord-commands.js","sourceRoot":"","sources":["../../../agent/commands/discord-commands.ts"],"names":[],"mappings":"AAAA,yFAAyF;AACzF,mFAAmF;AACnF,yDAAyD;AACzD,EAAE;AACF,wFAAwF;AACxF,2FAA2F;AAC3F,kGAAkG;AAClG,+FAA+F;AAC/F,wEAAwE;AACxE,4EAA4E;AAC5E,wFAAwF;AACxF,8FAA8F;AAC9F,yFAAyF;AACzF,+FAA+F;AAC/F,8FAA8F;AAC9F,wFAAwF;AACxF,+FAA+F;AAC/F,6FAA6F;AAC7F,6FAA6F;AAC7F,2EAA2E;AAC3E,EAAE;AACF,2FAA2F;AAC3F,oFAAoF;AACpF,2FAA2F;AAC3F,gFAAgF;AAChF,0DAA0D;AAE1D,OAAO,EACL,QAAQ,EACR,mBAAmB,EACnB,mBAAmB,EACnB,eAAe,EACf,YAAY,GAIb,MAAM,4CAA4C,CAAC;AACpD,OAAO,EAAE,gBAAgB,EAAkC,MAAM,iCAAiC,CAAC;AAGnG,6FAA6F;AAC7F,gGAAgG;AAChG,8FAA8F;AAC9F,MAAM,wBAAwB,GAAG,CAAC,CAAC,CAAC,gEAAgE;AACpG,MAAM,cAAc,GAAG,EAAE,CAAC,CAAC,gDAAgD;AAE3E,SAAS,SAAS,CAAC,OAAe;IAChC,OAAO,EAAE,IAAI,EAAE,wBAAwB,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,KAAK,EAAE,cAAc,EAAE,EAAE,CAAC;AACtF,CAAC;AAED,+FAA+F;AAC/F,0FAA0F;AAC1F,0FAA0F;AAC1F,gEAAgE;AAEhE,SAAS,QAAQ,CAAC,CAAU;IAC1B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,KAAK,IAAI,CAAC;AAC7C,CAAC;AACD,SAAS,GAAG,CAAC,CAAU;IACrB,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;AAC/D,CAAC;AACD,SAAS,GAAG,CAAC,CAAU;IACrB,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;QAAE,OAAO,CAAC,CAAC;IAC1D,IAAI,OAAO,CAAC,KAAK,QAAQ,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjD,MAAM,CAAC,GAAG,MAAM,CAAC,CAAC,CAAC,CAAC;QACpB,OAAO,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC5C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED;;;wEAGwE;AACxE,SAAS,kBAAkB,CAAC,GAA4B;IACtD,MAAM,EAAE,GAAG,GAAG,CAAC,SAAS,CAAC,CAAC;IAC1B,IAAI,EAAE,IAAI,OAAO,EAAE,KAAK,QAAQ,EAAE,CAAC;QACjC,MAAM,CAAC,GAAI,EAA8B,CAAC,MAAM,CAAC,CAAC;QAClD,IAAI,OAAO,CAAC,KAAK,QAAQ;YAAE,OAAO,MAAM,CAAC,CAAC,CAAC,CAAC;IAC9C,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAQD,SAAS,QAAQ,CAAC,OAAgB;IAChC,OAAO,KAAK,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC,CAAC,CAAE,OAAkC,CAAC,CAAC,CAAC,EAAE,CAAC;AAC3E,CAAC;AAED,SAAS,OAAO,CAAC,OAAwC,EAAE,IAAY;IACrE,OAAO,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,KAAK,IAAI,CAAC,CAAC;AAC7D,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,4BAA4B,CAAC,UAAmB;IAC9D,MAAM,GAAG,GAAG,QAAQ,CAAC,UAAU,CAAC,CAAC;IACjC,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC,CAAC,kEAAkE;IACjH,MAAM,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAC;IACrB,MAAM,IAAI,GAAG,GAAG,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAC7B,IAAI,IAAI,KAAK,QAAQ;QAAE,OAAO,EAAE,IAAI,EAAE,QAAQ,EAAE,CAAC;IACjD,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7C,IAAI,IAAI,KAAK,MAAM;QAAE,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,CAAC;IAC7C,IAAI,IAAI,KAAK,MAAM,EAAE,CAAC;QACpB,gGAAgG;QAChG,gGAAgG;QAChG,8FAA8F;QAC9F,6FAA6F;QAC7F,qDAAqD;QACrD,MAAM,QAAQ,GAAG,OAAO,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC,CAAC;QAC3D,MAAM,KAAK,GAAG,GAAG,CAAC,QAAQ,EAAE,KAAK,CAAC,CAAC;QACnC,IAAI,KAAK,KAAK,SAAS,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,mBAAmB,IAAI,KAAK,GAAG,mBAAmB,EAAE,CAAC;YAClH,OAAO;gBACL,IAAI,EAAE,OAAO;gBACb,OAAO,EAAE,yCAAyC,mBAAmB,OAAO,mBAAmB,SAAS,IAAI,CAAC,SAAS,CAAC,QAAQ,EAAE,KAAK,CAAC,IAAI;aAC5I,CAAC;QACJ,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,EAAE,CAAC;IACjC,CAAC;IACD,IAAI,IAAI,KAAK,QAAQ,EAAE,CAAC;QACtB,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC;QACvC,MAAM,OAAO,GAAG,GAAG,CAAC,CAAC,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;QAChD,IAAI,CAAC,OAAO,IAAI,OAAO,KAAK,QAAQ;YAAE,OAAO,EAAE,IAAI,EAAE,eAAe,EAAE,CAAC;QACvE,IAAI,OAAO,KAAK,OAAO;YAAE,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,CAAC;QACzD,IAAI,OAAO,KAAK,OAAO,EAAE,CAAC;YACxB,MAAM,MAAM,GAAG,OAAO,CAAC,QAAQ,CAAC,GAAG,EAAE,OAAO,CAAC,EAAE,KAAK,CAAC,CAAC;YACtD,MAAM,GAAG,GAAG,GAAG,CAAC,MAAM,EAAE,KAAK,CAAC,CAAC;YAC/B,IAAI,GAAG,KAAK,SAAS,IAAI,GAAG,IAAI,CAAC,EAAE,CAAC;gBAClC,OAAO;oBACL,IAAI,EAAE,OAAO;oBACb,OAAO,EAAE,yDAAyD,IAAI,CAAC,SAAS,CAAC,MAAM,EAAE,KAAK,CAAC,IAAI;iBACpG,CAAC;YACJ,CAAC;YACD,OAAO,EAAE,IAAI,EAAE,cAAc,EAAE,GAAG,EAAE,CAAC;QACvC,CAAC;QACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,gCAAgC,OAAO,IAAI,EAAE,CAAC;IACjF,CAAC;IACD,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,OAAO,EAAE,6BAA6B,IAAI,IAAI,GAAG,qBAAqB,EAAE,CAAC;AACnG,CAAC;AAOD;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CAAC,GAAY;IACpD,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,IAAI,GAAG,CAAC,MAAM,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAC;IACrD,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,IAAI,CAAC,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,KAAK,eAAe;QAAE,OAAO,IAAI,CAAC;IAE3D,MAAM,MAAM,GAAG,QAAQ,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnE,MAAM,UAAU,GAAG,MAAM,IAAI,QAAQ,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IACnF,MAAM,IAAI,GAAG,QAAQ,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,MAAM,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC;IACxG,MAAM,KAAK,GAAG,UAAU,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,IAAI,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,IAAI,CAAC;IACrE,IAAI,CAAC,MAAM,IAAI,KAAK,EAAE,CAAC;QACrB,OAAO,EAAE,KAAK,EAAE,sEAAsE,EAAE,CAAC;IAC3F,CAAC;IACD,MAAM,SAAS,GAAG,GAAG,CAAC,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC;IACzC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,OAAO,EAAE,KAAK,EAAE,2EAA2E,EAAE,CAAC;IAChG,CAAC;IACD,MAAM,OAAO,GAAG,GAAG,CAAC,GAAG,CAAC,UAAU,CAAC,CAAC,CAAC;IACrC,MAAM,WAAW,GAAG,kBAAkB,CAAC,GAAG,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,gBAAgB,CAAC,EAAE,MAAM,EAAE,OAAO,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,CAAC;IAC3E,MAAM,OAAO,GAAG,4BAA4B,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,CAAC;IAC9D,OAAO,EAAE,IAAI,EAAE,OAAO,EAAE,CAAC;AAC3B,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,CAAC,KAAK,UAAU,iCAAiC,CACrD,GAAY,EACZ,aAAsC;IAEtC,MAAM,MAAM,GAAG,yBAAyB,CAAC,GAAG,CAAC,CAAC;IAC9C,IAAI,MAAM,KAAK,IAAI;QAAE,OAAO,IAAI,CAAC,CAAC,oDAAoD;IACtF,IAAI,OAAO,IAAI,MAAM;QAAE,OAAO,SAAS,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IAEtD,IAAI,CAAC;QACH,MAAM,GAAG,GAAoB,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,SAAS,EAAE,EAAE,OAAO,EAAE,EAAE,IAAI,EAAE,EAAE,OAAO,EAAE,MAAM,CAAC,IAAI,EAAE,EAAE,EAAE,CAAC;QAC3G,MAAM,OAAO,GAAG,QAAQ,CAAC,GAAG,CAAC,CAAC;QAC9B,8FAA8F;QAC9F,yFAAyF;QACzF,2EAA2E;QAC3E,MAAM,IAAI,GAAG,MAAM,YAAY,CAAC,MAAM,CAAC,OAAO,EAAE,OAAO,EAAE,aAAa,CAAC,CAAC,CAAC,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC;QACjG,OAAO,SAAS,CAAC,IAAI,CAAC,CAAC;IACzB,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,sFAAsF;QACtF,0FAA0F;QAC1F,4FAA4F;QAC5F,oCAAoC;QACpC,OAAO,CAAC,KAAK,CAAC,mEAAmE,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;QAChG,OAAO,SAAS,CAAC,2BAA2B,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC;IAClG,CAAC;AACH,CAAC;AAED,+FAA+F;AAC/F,8FAA8F;AAC9F,+EAA+E;AAC/E,MAAM,WAAW,GAAG,CAAC,CAAC;AACtB,MAAM,iBAAiB,GAAG,CAAC,CAAC;AAC5B,MAAM,cAAc,GAAG,CAAC,CAAC;AACzB,MAAM,aAAa,GAAG,EAAE,CAAC;AACzB,MAAM,UAAU,GAAG,CAAC,CAAC;AAErB;;;;;GAKG;AACH,MAAM,UAAU,+BAA+B;IAC7C,OAAO;QACL,IAAI,EAAE,eAAe;QACrB,IAAI,EAAE,UAAU;QAChB,WAAW,EAAE,0EAA0E;QACvF,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,QAAQ;gBACd,WAAW,EAAE,yDAAyD;gBACtE,IAAI,EAAE,iBAAiB;gBACvB,OAAO,EAAE;oBACP,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,8CAA8C,EAAE,IAAI,EAAE,WAAW,EAAE;oBAClG;wBACE,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,0EAA0E;wBACvF,IAAI,EAAE,WAAW;wBACjB,OAAO,EAAE;4BACP;gCACE,IAAI,EAAE,KAAK;gCACX,WAAW,EAAE,8BAA8B;gCAC3C,IAAI,EAAE,aAAa;gCACnB,QAAQ,EAAE,IAAI;gCACd,SAAS,EAAE,IAAI;6BAChB;yBACF;qBACF;oBACD,EAAE,IAAI,EAAE,OAAO,EAAE,WAAW,EAAE,uDAAuD,EAAE,IAAI,EAAE,WAAW,EAAE;iBAC3G;aACF;YACD,EAAE,IAAI,EAAE,QAAQ,EAAE,WAAW,EAAE,4DAA4D,EAAE,IAAI,EAAE,WAAW,EAAE;YAChH,4FAA4F;YAC5F,gEAAgE;YAChE,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,8CAA8C,EAAE,IAAI,EAAE,WAAW,EAAE;YAChG,0FAA0F;YAC1F,wFAAwF;YACxF,mDAAmD;YACnD;gBACE,IAAI,EAAE,MAAM;gBACZ,WAAW,EAAE,oCAAoC,mBAAmB,IAAI,mBAAmB,+BAA+B;gBAC1H,IAAI,EAAE,WAAW;gBACjB,OAAO,EAAE;oBACP;wBACE,IAAI,EAAE,OAAO;wBACb,WAAW,EAAE,GAAG,mBAAmB,eAAe,mBAAmB,UAAU;wBAC/E,IAAI,EAAE,cAAc;wBACpB,QAAQ,EAAE,IAAI;wBACd,SAAS,EAAE,mBAAmB;wBAC9B,SAAS,EAAE,mBAAmB;qBAC/B;iBACF;aACF;YACD,EAAE,IAAI,EAAE,MAAM,EAAE,WAAW,EAAE,wBAAwB,EAAE,IAAI,EAAE,WAAW,EAAE;SAC3E;KACF,CAAC;AACJ,CAAC"}

package/dist/agent/contributions.d.ts

@@ -0,0 +1,17 @@
+export declare const CONTRIBUTIONS: {
+    readonly schemaVersion: 1;
+    readonly package: "@open-everywhere/provider-discord";
+    readonly register: "agent/register.js#registerDiscordProvider";
+    readonly contributions: readonly [{
+        readonly kind: "channel";
+        readonly name: "discord";
+        readonly module: "agent/channels/discord.js";
+        readonly summary: "The Discord surface. Wires Discord's HTTP Interactions (slash commands) → an OpenEverywhere session, and — the point of the \"Discord-binding\" slice — populates the session auth context with the REAL…";
+    }, {
+        readonly kind: "channel";
+        readonly name: "discord-gateway";
+        readonly module: "agent/channels/discord-gateway.js";
+        readonly summary: "The Discord GATEWAY ingestion surface — Milestone 2 of the Discord Gateway feature.";
+    }];
+};
+//# sourceMappingURL=contributions.d.ts.map

package/dist/agent/contributions.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributions.d.ts","sourceRoot":"","sources":["../../agent/contributions.ts"],"names":[],"mappings":"AAsBA,eAAO,MAAM,aAAa;aACxB,aAAa,EAAE,CAAC;aAChB,OAAO,EAAE,mCAAmC;aAC5C,QAAQ,EAAE,2CAA2C;aACrD,aAAa;iBACT,IAAI,EAAE,SAAS;iBAAE,IAAI,EAAE,SAAS;iBAAE,MAAM,EAAE,2BAA2B;iBAAE,OAAO,EAAE,2MAA2M;;iBAC3R,IAAI,EAAE,SAAS;iBAAE,IAAI,EAAE,iBAAiB;iBAAE,MAAM,EAAE,mCAAmC;iBAAE,OAAO,EAAE,qFAAqF;;CAEjL,CAAC"}

package/dist/agent/contributions.js

@@ -0,0 +1,31 @@
+// THE CONTRIBUTION MANIFEST for `@open-everywhere/provider-discord` (OPE-375) — the curated
+// catalogue of everything this package OFFERS an app's eve slot tree. `oe build` reads it;
+// the app's `roster.config.ts` decides about it, and `roster.lock.json` records the review.
+//
+// 🔴 CURATED, NOT SCANNED, AND THAT IS MEASURED RATHER THAN STYLISTIC. A directory scan cannot
+// enumerate contributions: core ships 47 files under `agent/channels/` of which 9 are channels, and
+// 13 under `agent/connections/` of which 1 is a connection. Shape predicates do not rescue it either
+// — only 8 of the 9 mounted core channels contain `defineChannel(`. A hand-kept list is the only
+// honest catalogue, so keeping it current is a real authoring duty (`npm run lint:contributions`
+// scan-compares the two kinds where a predicate IS sound — tools and hooks — and says plainly that
+// the other four are unguarded).
+//
+// 🔴 THIS FILE IMPORTS NOTHING, DELIBERATELY. A provider bundle may reach core only through the
+// `@open-everywhere/core/agent/adapter-api.js` barrel (the boundary lock, packages/core/scripts/
+// boundary-test.ts), so a manifest that imported its own types would be a boundary red — and
+// widening the barrel to admit a build-time type would be the wrong fix. Every manifest is therefore
+// import-free DATA whose shape `roster-plan.ts` validates at build time, exactly as it must for a
+// third-party package it has never seen. The types are in
+// `@open-everywhere/core/agent/scaffold/roster-config.js` for READERS.
+//
+// ERASABLE SYNTAX ONLY (no `enum`, no `namespace`) — `oe build` loads this with a bare import.
+export const CONTRIBUTIONS = {
+    schemaVersion: 1,
+    package: "@open-everywhere/provider-discord",
+    register: "agent/register.js#registerDiscordProvider",
+    contributions: [
+        { kind: "channel", name: "discord", module: "agent/channels/discord.js", summary: "The Discord surface. Wires Discord's HTTP Interactions (slash commands) → an OpenEverywhere session, and — the point of the \"Discord-binding\" slice — populates the session auth context with the REAL…" },
+        { kind: "channel", name: "discord-gateway", module: "agent/channels/discord-gateway.js", summary: "The Discord GATEWAY ingestion surface — Milestone 2 of the Discord Gateway feature." },
+    ],
+};
+//# sourceMappingURL=contributions.js.map

package/dist/agent/contributions.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"contributions.js","sourceRoot":"","sources":["../../agent/contributions.ts"],"names":[],"mappings":"AAAA,4FAA4F;AAC5F,2FAA2F;AAC3F,4FAA4F;AAC5F,EAAE;AACF,+FAA+F;AAC/F,oGAAoG;AACpG,qGAAqG;AACrG,iGAAiG;AACjG,iGAAiG;AACjG,mGAAmG;AACnG,iCAAiC;AACjC,EAAE;AACF,gGAAgG;AAChG,iGAAiG;AACjG,6FAA6F;AAC7F,qGAAqG;AACrG,kGAAkG;AAClG,0DAA0D;AAC1D,uEAAuE;AACvE,EAAE;AACF,+FAA+F;AAE/F,MAAM,CAAC,MAAM,aAAa,GAAG;IAC3B,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,mCAAmC;IAC5C,QAAQ,EAAE,2CAA2C;IACrD,aAAa,EAAE;QACb,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,SAAS,EAAE,MAAM,EAAE,2BAA2B,EAAE,OAAO,EAAE,2MAA2M,EAAE;QAC/R,EAAE,IAAI,EAAE,SAAS,EAAE,IAAI,EAAE,iBAAiB,EAAE,MAAM,EAAE,mCAAmC,EAAE,OAAO,EAAE,qFAAqF,EAAE;KAC1L;CACO,CAAC"}