@open-mercato/channel-discord 0.6.8-develop.7090.1.4dbca7b350

package/dist/modules/channel_discord/api/channels/[id]/ai-auto-reply/route.js

@@ -0,0 +1,222 @@
+import { NextResponse } from "next/server";
+import { z } from "zod";
+import { getAuthFromRequest } from "@open-mercato/shared/lib/auth/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { isCrudHttpError } from "@open-mercato/shared/lib/crud/errors";
+import { validateRouteMutationGuard } from "@open-mercato/core/modules/communication_channels/lib/route-mutation-guard";
+import { CHANNEL_DISCORD_AUTO_REPLY_AGENT_ID } from "../../../../ai-agents.js";
+import {
+  CHANNEL_DISCORD_CHANNEL_RESOURCE_KIND,
+  CHANNEL_DISCORD_UPDATE_AI_AUTO_REPLY_COMMAND_ID,
+  discordAiAutoReplySettingsSchema
+} from "../../../../commands/update-ai-auto-reply.js";
+import {
+  findDiscordEligibleAgent,
+  listDiscordEligibleAgents,
+  missingAgentFeatures
+} from "../../../../lib/ai-agent-directory.js";
+import { CHANNEL_DISCORD_CONFIGURE_FEATURE, CHANNEL_DISCORD_VIEW_FEATURE } from "../../../../lib/ai-features.js";
+import { resolveDiscordAiPrincipal } from "../../../../lib/ai-service-principal.js";
+import { loadDiscordChannelForRequest } from "../../../../lib/channel-access.js";
+import { discordChannelStateSchema } from "../../../../lib/credentials.js";
+const metadata = {
+  GET: {
+    requireAuth: true,
+    requireFeatures: [CHANNEL_DISCORD_VIEW_FEATURE]
+  },
+  PUT: {
+    requireAuth: true,
+    requireFeatures: [CHANNEL_DISCORD_CONFIGURE_FEATURE]
+  }
+};
+function fieldError(field, message, extra) {
+  return NextResponse.json(
+    { error: message, fieldErrors: { [field]: message }, ...extra },
+    { status: 400 }
+  );
+}
+async function loadInvokingPrincipal(container, scope) {
+  const em = container.resolve("em").fork();
+  return resolveDiscordAiPrincipal({
+    em,
+    resolver: { resolve: (name) => container.resolve(name) },
+    scope
+  });
+}
+async function GET(req, context) {
+  const { id } = await context.params;
+  if (!z.string().uuid().safeParse(id).success) {
+    return NextResponse.json({ error: "Invalid channel id" }, { status: 400 });
+  }
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const container = await createRequestContainer();
+  const access = await loadDiscordChannelForRequest({ container, req, auth, channelId: id, mode: "read" });
+  if ("response" in access) return access.response;
+  const { channel } = access;
+  const state = discordChannelStateSchema.safeParse(channel.channelState ?? {});
+  const directory = await listDiscordEligibleAgents();
+  const principal = directory.available ? await loadInvokingPrincipal(container, {
+    tenantId: auth.tenantId,
+    organizationId: access.rbacOrganizationId
+  }) : null;
+  const agents = directory.available && principal ? directory.agents.map((agent) => {
+    const missingFeatures = missingAgentFeatures(agent.requiredFeatures, principal);
+    return { ...agent, invocable: missingFeatures.length === 0, missingFeatures };
+  }) : [];
+  return NextResponse.json({
+    id: channel.id,
+    channelId: channel.id,
+    displayName: channel.displayName,
+    updatedAt: channel.updatedAt ? channel.updatedAt.toISOString() : null,
+    aiAutoReplyEnabled: state.success ? Boolean(state.data.aiAutoReplyEnabled) : false,
+    aiAgentId: (state.success ? state.data.aiAgentId : void 0) ?? null,
+    // Why the last attempt produced nothing, so an armed channel that answers
+    // nothing says so instead of looking healthy.
+    aiAutoReplyLastError: (state.success ? state.data.aiAutoReplyLastError : void 0) ?? null,
+    aiAutoReplyLastErrorAt: (state.success ? state.data.aiAutoReplyLastErrorAt : void 0) ?? null,
+    defaultAgentId: CHANNEL_DISCORD_AUTO_REPLY_AGENT_ID,
+    aiAvailable: directory.available,
+    agents
+  });
+}
+async function PUT(req, context) {
+  const { id } = await context.params;
+  if (!z.string().uuid().safeParse(id).success) {
+    return NextResponse.json({ error: "Invalid channel id" }, { status: 400 });
+  }
+  const auth = await getAuthFromRequest(req);
+  if (!auth?.sub || !auth?.tenantId) {
+    return NextResponse.json({ error: "Unauthorized" }, { status: 401 });
+  }
+  const organizationId = auth.orgId ?? null;
+  const rawBody = await req.json().catch(() => null);
+  if (rawBody == null || typeof rawBody !== "object") {
+    return NextResponse.json({ error: "Request body must be a JSON object" }, { status: 400 });
+  }
+  const parsed = discordAiAutoReplySettingsSchema.safeParse(rawBody);
+  if (!parsed.success) {
+    const issue = parsed.error.issues[0];
+    const field = issue?.path.join(".") || "aiAutoReplyEnabled";
+    return fieldError(field, issue?.message ?? "Invalid AI auto-reply settings");
+  }
+  const container = await createRequestContainer();
+  const access = await loadDiscordChannelForRequest({ container, req, auth, channelId: id, mode: "manage" });
+  if ("response" in access) return access.response;
+  if (parsed.data.aiAutoReplyEnabled) {
+    const agentId = parsed.data.aiAgentId;
+    const agent = await findDiscordEligibleAgent(agentId);
+    if (!agent) {
+      const directory = await listDiscordEligibleAgents();
+      return directory.available ? fieldError("aiAgentId", "channel_discord.aiAutoReply.errors.agentNotEligible") : fieldError("aiAutoReplyEnabled", "channel_discord.aiAutoReply.errors.aiUnavailable");
+    }
+    const principal = await loadInvokingPrincipal(container, {
+      tenantId: auth.tenantId,
+      organizationId: access.rbacOrganizationId
+    });
+    const missingFeatures = missingAgentFeatures(agent.requiredFeatures, principal);
+    if (missingFeatures.length > 0) {
+      return fieldError(
+        "aiAgentId",
+        "channel_discord.aiAutoReply.errors.agentFeaturesMissing",
+        { missingFeatures }
+      );
+    }
+  }
+  const guard = await validateRouteMutationGuard({
+    container,
+    req,
+    auth,
+    input: {
+      resourceKind: CHANNEL_DISCORD_CHANNEL_RESOURCE_KIND,
+      resourceId: id,
+      operation: "update",
+      mutationPayload: { ...parsed.data }
+    }
+  });
+  if ("response" in guard) return guard.response;
+  const commandBus = container.resolve("commandBus");
+  const input = {
+    channelId: id,
+    settings: parsed.data,
+    scope: {
+      tenantId: auth.tenantId,
+      organizationId: access.rbacOrganizationId,
+      organizationIds: access.organizationIds
+    }
+  };
+  let result;
+  try {
+    const executed = await commandBus.execute(
+      CHANNEL_DISCORD_UPDATE_AI_AUTO_REPLY_COMMAND_ID,
+      {
+        input,
+        ctx: {
+          container,
+          auth,
+          organizationScope: null,
+          selectedOrganizationId: organizationId,
+          organizationIds: organizationId ? [organizationId] : null,
+          request: req
+        }
+      }
+    );
+    result = executed.result;
+  } catch (err) {
+    if (isCrudHttpError(err)) {
+      return NextResponse.json(err.body, { status: err.status });
+    }
+    throw err;
+  }
+  if (result.status === "not_found") {
+    return NextResponse.json({ error: "Channel not found" }, { status: 404 });
+  }
+  await guard.afterSuccess();
+  return NextResponse.json(
+    {
+      channelId: result.channelId,
+      aiAutoReplyEnabled: result.aiAutoReplyEnabled,
+      aiAgentId: result.aiAgentId,
+      updatedAt: result.updatedAt
+    },
+    { status: 200 }
+  );
+}
+const openApi = {
+  tags: ["CommunicationChannels"],
+  methods: {
+    GET: {
+      summary: "Read a Discord channel's AI auto-reply configuration",
+      tags: ["CommunicationChannels"],
+      responses: [
+        { status: 200, description: "Current settings plus the agents this channel may be pointed at" },
+        { status: 400, description: "Invalid channel id" },
+        { status: 401, description: "Unauthorized" },
+        { status: 404, description: "Channel not found, not a Discord channel in scope, or not the caller\u2019s to see" }
+      ]
+    },
+    PUT: {
+      summary: "Update a Discord channel's AI auto-reply configuration",
+      tags: ["CommunicationChannels"],
+      responses: [
+        { status: 200, description: "Settings stored" },
+        {
+          status: 400,
+          description: "Invalid payload, AI module absent, agent not eligible, or the auto-reply principal lacks the agent\u2019s required features"
+        },
+        { status: 401, description: "Unauthorized" },
+        { status: 404, description: "Channel not found, or not a Discord channel in this scope" },
+        { status: 409, description: "The channel changed since the form was loaded" }
+      ]
+    }
+  }
+};
+export {
+  GET,
+  PUT,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/channel_discord/api/channels/[id]/ai-auto-reply/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../../../src/modules/channel_discord/api/channels/%5Bid%5D/ai-auto-reply/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport { z } from 'zod'\nimport type { AwilixContainer } from 'awilix'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { getAuthFromRequest } from '@open-mercato/shared/lib/auth/server'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport type { CommandBus } from '@open-mercato/shared/lib/commands'\nimport { isCrudHttpError } from '@open-mercato/shared/lib/crud/errors'\nimport { validateRouteMutationGuard } from '@open-mercato/core/modules/communication_channels/lib/route-mutation-guard'\nimport { CHANNEL_DISCORD_AUTO_REPLY_AGENT_ID } from '../../../../ai-agents'\nimport {\n  CHANNEL_DISCORD_CHANNEL_RESOURCE_KIND,\n  CHANNEL_DISCORD_UPDATE_AI_AUTO_REPLY_COMMAND_ID,\n  discordAiAutoReplySettingsSchema,\n  type UpdateAiAutoReplyInput,\n  type UpdateAiAutoReplyResult,\n} from '../../../../commands/update-ai-auto-reply'\nimport {\n  findDiscordEligibleAgent,\n  listDiscordEligibleAgents,\n  missingAgentFeatures,\n  type AgentInvokingPrincipal,\n} from '../../../../lib/ai-agent-directory'\nimport { CHANNEL_DISCORD_CONFIGURE_FEATURE, CHANNEL_DISCORD_VIEW_FEATURE } from '../../../../lib/ai-features'\nimport { resolveDiscordAiPrincipal } from '../../../../lib/ai-service-principal'\nimport { loadDiscordChannelForRequest } from '../../../../lib/channel-access'\nimport { discordChannelStateSchema } from '../../../../lib/credentials'\n\nexport const metadata = {\n  GET: {\n    requireAuth: true,\n    requireFeatures: [CHANNEL_DISCORD_VIEW_FEATURE],\n  },\n  PUT: {\n    requireAuth: true,\n    requireFeatures: [CHANNEL_DISCORD_CONFIGURE_FEATURE],\n  },\n}\n\ntype RouteContext = {\n  params: Promise<{ id: string }> | { id: string }\n}\n\nfunction fieldError(field: string, message: string, extra?: Record<string, unknown>): Response {\n  return NextResponse.json(\n    { error: message, fieldErrors: { [field]: message }, ...extra },\n    { status: 400 },\n  )\n}\n\n/**\n * The identity the auto-reply subscriber will run the chosen agent under, so both\n * methods can answer \"would the runtime accept this?\" with the same grants the\n * subscriber will present \u2014 the tenant's channel-bot user when it exists, the\n * provider service principal otherwise.\n */\nasync function loadInvokingPrincipal(\n  container: AwilixContainer,\n  scope: { tenantId: string; organizationId: string | null },\n): Promise<AgentInvokingPrincipal> {\n  const em = (container.resolve('em') as EntityManager).fork()\n  return resolveDiscordAiPrincipal({\n    em,\n    resolver: { resolve: <T,>(name: string): T => container.resolve(name) as T },\n    scope,\n  })\n}\n\n/**\n * Read a Discord channel's AI auto-reply settings plus everything the settings\n * form needs to render itself: the eligible agents, whether the optional AI peer\n * is installed at all, and the channel's `updatedAt` so the form can attach the\n * optimistic-lock header on save.\n */\nexport async function GET(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n\n  const container = await createRequestContainer()\n  const access = await loadDiscordChannelForRequest({ container, req, auth, channelId: id, mode: 'read' })\n  if ('response' in access) return access.response\n  const { channel } = access\n\n  const state = discordChannelStateSchema.safeParse(channel.channelState ?? {})\n  const directory = await listDiscordEligibleAgents()\n\n  // Every offered agent carries whether the auto-reply principal could actually\n  // invoke it. Without this the picker offers agents from other modules that the\n  // runtime will refuse, and the refusal only ever happens later in a background\n  // subscriber \u2014 so the operator sees \"Auto-reply on\" and silence.\n  const principal = directory.available\n    ? await loadInvokingPrincipal(container, {\n      tenantId: auth.tenantId as string,\n      organizationId: access.rbacOrganizationId,\n    })\n    : null\n  const agents = directory.available && principal\n    ? directory.agents.map((agent) => {\n      const missingFeatures = missingAgentFeatures(agent.requiredFeatures, principal)\n      return { ...agent, invocable: missingFeatures.length === 0, missingFeatures }\n    })\n    : []\n\n  return NextResponse.json({\n    id: channel.id,\n    channelId: channel.id,\n    displayName: channel.displayName,\n    updatedAt: channel.updatedAt ? channel.updatedAt.toISOString() : null,\n    aiAutoReplyEnabled: state.success ? Boolean(state.data.aiAutoReplyEnabled) : false,\n    aiAgentId: (state.success ? state.data.aiAgentId : undefined) ?? null,\n    // Why the last attempt produced nothing, so an armed channel that answers\n    // nothing says so instead of looking healthy.\n    aiAutoReplyLastError: (state.success ? state.data.aiAutoReplyLastError : undefined) ?? null,\n    aiAutoReplyLastErrorAt: (state.success ? state.data.aiAutoReplyLastErrorAt : undefined) ?? null,\n    defaultAgentId: CHANNEL_DISCORD_AUTO_REPLY_AGENT_ID,\n    aiAvailable: directory.available,\n    agents,\n  })\n}\n\n/**\n * Write a Discord channel's AI auto-reply settings \u2014 the configuration path the\n * subscriber was missing (issue #4778).\n *\n * The route is deliberately strict about *enabling*: it refuses to arm a channel\n * whose AI peer is absent, one pointed at an agent the runtime would reject on\n * shape, and one pointed at an agent the auto-reply principal is not authorized\n * to invoke. All three would store a setting that can only fail later, inside a\n * background subscriber where nobody sees the error \u2014 which is precisely how the\n * feature ended up dormant in the first place. The three checks mirror, in order,\n * what `runAiAgentObject` \u2192 `checkAgentPolicy` will ask at run time.\n */\nexport async function PUT(req: Request, context: RouteContext): Promise<Response> {\n  const { id } = await context.params\n  if (!z.string().uuid().safeParse(id).success) {\n    return NextResponse.json({ error: 'Invalid channel id' }, { status: 400 })\n  }\n\n  const auth = await getAuthFromRequest(req)\n  if (!auth?.sub || !auth?.tenantId) {\n    return NextResponse.json({ error: 'Unauthorized' }, { status: 401 })\n  }\n  const organizationId = (auth as { orgId?: string | null }).orgId ?? null\n\n  const rawBody = await req.json().catch(() => null)\n  if (rawBody == null || typeof rawBody !== 'object') {\n    return NextResponse.json({ error: 'Request body must be a JSON object' }, { status: 400 })\n  }\n\n  const parsed = discordAiAutoReplySettingsSchema.safeParse(rawBody)\n  if (!parsed.success) {\n    const issue = parsed.error.issues[0]\n    const field = issue?.path.join('.') || 'aiAutoReplyEnabled'\n    return fieldError(field, issue?.message ?? 'Invalid AI auto-reply settings')\n  }\n\n  const container = await createRequestContainer()\n  // Authorize before the guard so a caller who may not touch this channel gets a\n  // masked 404 rather than a guard verdict about a record they cannot see. It\n  // also comes before the arming checks below, which need the channel's resolved\n  // organization to build the principal they judge the agent against.\n  const access = await loadDiscordChannelForRequest({ container, req, auth, channelId: id, mode: 'manage' })\n  if ('response' in access) return access.response\n\n  if (parsed.data.aiAutoReplyEnabled) {\n    const agentId = parsed.data.aiAgentId as string\n    const agent = await findDiscordEligibleAgent(agentId)\n    if (!agent) {\n      // No eligible agent under this id: either the optional AI peer is absent, or\n      // the agent is not object-mode and `runAiAgentObject` would reject it.\n      const directory = await listDiscordEligibleAgents()\n      return directory.available\n        ? fieldError('aiAgentId', 'channel_discord.aiAutoReply.errors.agentNotEligible')\n        : fieldError('aiAutoReplyEnabled', 'channel_discord.aiAutoReply.errors.aiUnavailable')\n    }\n\n    // Shape is not authorization. `checkAgentPolicy` enforces the agent's\n    // `requiredFeatures` against the auto-reply principal at run time, so arming a\n    // channel against an agent that principal cannot invoke stores a setting that\n    // can only fail later \u2014 inside a background subscriber, where the operator\n    // never sees it. Refuse here, naming the grants the tenant's channel-bot user\n    // is missing, rather than accepting a channel that would answer nothing.\n    const principal = await loadInvokingPrincipal(container, {\n      tenantId: auth.tenantId as string,\n      organizationId: access.rbacOrganizationId,\n    })\n    const missingFeatures = missingAgentFeatures(agent.requiredFeatures, principal)\n    if (missingFeatures.length > 0) {\n      return fieldError(\n        'aiAgentId',\n        'channel_discord.aiAutoReply.errors.agentFeaturesMissing',\n        { missingFeatures },\n      )\n    }\n  }\n\n  const guard = await validateRouteMutationGuard({\n    container,\n    req,\n    auth,\n    input: {\n      resourceKind: CHANNEL_DISCORD_CHANNEL_RESOURCE_KIND,\n      resourceId: id,\n      operation: 'update',\n      mutationPayload: { ...parsed.data },\n    },\n  })\n  if ('response' in guard) return guard.response\n\n  const commandBus = container.resolve('commandBus') as CommandBus\n  const input: UpdateAiAutoReplyInput = {\n    channelId: id,\n    settings: parsed.data,\n    scope: {\n      tenantId: auth.tenantId as string,\n      organizationId: access.rbacOrganizationId,\n      organizationIds: access.organizationIds,\n    },\n  }\n\n  let result: UpdateAiAutoReplyResult\n  try {\n    const executed = await commandBus.execute<UpdateAiAutoReplyInput, UpdateAiAutoReplyResult>(\n      CHANNEL_DISCORD_UPDATE_AI_AUTO_REPLY_COMMAND_ID,\n      {\n        input,\n        ctx: {\n          container,\n          auth: auth as never,\n          organizationScope: null,\n          selectedOrganizationId: organizationId,\n          organizationIds: organizationId ? [organizationId] : null,\n          request: req,\n        },\n      },\n    )\n    result = executed.result\n  } catch (err) {\n    // The optimistic-lock guard throws the shared structured 409 so the form's\n    // conflict bar renders the same way it does anywhere else in the product.\n    if (isCrudHttpError(err)) {\n      return NextResponse.json(err.body, { status: err.status })\n    }\n    throw err\n  }\n\n  if (result.status === 'not_found') {\n    return NextResponse.json({ error: 'Channel not found' }, { status: 404 })\n  }\n\n  await guard.afterSuccess()\n  return NextResponse.json(\n    {\n      channelId: result.channelId,\n      aiAutoReplyEnabled: result.aiAutoReplyEnabled,\n      aiAgentId: result.aiAgentId,\n      updatedAt: result.updatedAt,\n    },\n    { status: 200 },\n  )\n}\n\nexport const openApi = {\n  tags: ['CommunicationChannels'],\n  methods: {\n    GET: {\n      summary: \"Read a Discord channel's AI auto-reply configuration\",\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Current settings plus the agents this channel may be pointed at' },\n        { status: 400, description: 'Invalid channel id' },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found, not a Discord channel in scope, or not the caller\u2019s to see' },\n      ],\n    },\n    PUT: {\n      summary: \"Update a Discord channel's AI auto-reply configuration\",\n      tags: ['CommunicationChannels'],\n      responses: [\n        { status: 200, description: 'Settings stored' },\n        {\n          status: 400,\n          description:\n            'Invalid payload, AI module absent, agent not eligible, or the auto-reply principal lacks the agent\u2019s required features',\n        },\n        { status: 401, description: 'Unauthorized' },\n        { status: 404, description: 'Channel not found, or not a Discord channel in this scope' },\n        { status: 409, description: 'The channel changed since the form was loaded' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAC7B,SAAS,SAAS;AAGlB,SAAS,0BAA0B;AACnC,SAAS,8BAA8B;AAEvC,SAAS,uBAAuB;AAChC,SAAS,kCAAkC;AAC3C,SAAS,2CAA2C;AACpD;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAEK;AACP,SAAS,mCAAmC,oCAAoC;AAChF,SAAS,iCAAiC;AAC1C,SAAS,oCAAoC;AAC7C,SAAS,iCAAiC;AAEnC,MAAM,WAAW;AAAA,EACtB,KAAK;AAAA,IACH,aAAa;AAAA,IACb,iBAAiB,CAAC,4BAA4B;AAAA,EAChD;AAAA,EACA,KAAK;AAAA,IACH,aAAa;AAAA,IACb,iBAAiB,CAAC,iCAAiC;AAAA,EACrD;AACF;AAMA,SAAS,WAAW,OAAe,SAAiB,OAA2C;AAC7F,SAAO,aAAa;AAAA,IAClB,EAAE,OAAO,SAAS,aAAa,EAAE,CAAC,KAAK,GAAG,QAAQ,GAAG,GAAG,MAAM;AAAA,IAC9D,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAQA,eAAe,sBACb,WACA,OACiC;AACjC,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAC3D,SAAO,0BAA0B;AAAA,IAC/B;AAAA,IACA,UAAU,EAAE,SAAS,CAAK,SAAoB,UAAU,QAAQ,IAAI,EAAO;AAAA,IAC3E;AAAA,EACF,CAAC;AACH;AAQA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,SAAS,MAAM,6BAA6B,EAAE,WAAW,KAAK,MAAM,WAAW,IAAI,MAAM,OAAO,CAAC;AACvG,MAAI,cAAc,OAAQ,QAAO,OAAO;AACxC,QAAM,EAAE,QAAQ,IAAI;AAEpB,QAAM,QAAQ,0BAA0B,UAAU,QAAQ,gBAAgB,CAAC,CAAC;AAC5E,QAAM,YAAY,MAAM,0BAA0B;AAMlD,QAAM,YAAY,UAAU,YACxB,MAAM,sBAAsB,WAAW;AAAA,IACvC,UAAU,KAAK;AAAA,IACf,gBAAgB,OAAO;AAAA,EACzB,CAAC,IACC;AACJ,QAAM,SAAS,UAAU,aAAa,YAClC,UAAU,OAAO,IAAI,CAAC,UAAU;AAChC,UAAM,kBAAkB,qBAAqB,MAAM,kBAAkB,SAAS;AAC9E,WAAO,EAAE,GAAG,OAAO,WAAW,gBAAgB,WAAW,GAAG,gBAAgB;AAAA,EAC9E,CAAC,IACC,CAAC;AAEL,SAAO,aAAa,KAAK;AAAA,IACvB,IAAI,QAAQ;AAAA,IACZ,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,WAAW,QAAQ,YAAY,QAAQ,UAAU,YAAY,IAAI;AAAA,IACjE,oBAAoB,MAAM,UAAU,QAAQ,MAAM,KAAK,kBAAkB,IAAI;AAAA,IAC7E,YAAY,MAAM,UAAU,MAAM,KAAK,YAAY,WAAc;AAAA;AAAA;AAAA,IAGjE,uBAAuB,MAAM,UAAU,MAAM,KAAK,uBAAuB,WAAc;AAAA,IACvF,yBAAyB,MAAM,UAAU,MAAM,KAAK,yBAAyB,WAAc;AAAA,IAC3F,gBAAgB;AAAA,IAChB,aAAa,UAAU;AAAA,IACvB;AAAA,EACF,CAAC;AACH;AAcA,eAAsB,IAAI,KAAc,SAA0C;AAChF,QAAM,EAAE,GAAG,IAAI,MAAM,QAAQ;AAC7B,MAAI,CAAC,EAAE,OAAO,EAAE,KAAK,EAAE,UAAU,EAAE,EAAE,SAAS;AAC5C,WAAO,aAAa,KAAK,EAAE,OAAO,qBAAqB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3E;AAEA,QAAM,OAAO,MAAM,mBAAmB,GAAG;AACzC,MAAI,CAAC,MAAM,OAAO,CAAC,MAAM,UAAU;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,eAAe,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EACrE;AACA,QAAM,iBAAkB,KAAmC,SAAS;AAEpE,QAAM,UAAU,MAAM,IAAI,KAAK,EAAE,MAAM,MAAM,IAAI;AACjD,MAAI,WAAW,QAAQ,OAAO,YAAY,UAAU;AAClD,WAAO,aAAa,KAAK,EAAE,OAAO,qCAAqC,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC3F;AAEA,QAAM,SAAS,iCAAiC,UAAU,OAAO;AACjE,MAAI,CAAC,OAAO,SAAS;AACnB,UAAM,QAAQ,OAAO,MAAM,OAAO,CAAC;AACnC,UAAM,QAAQ,OAAO,KAAK,KAAK,GAAG,KAAK;AACvC,WAAO,WAAW,OAAO,OAAO,WAAW,gCAAgC;AAAA,EAC7E;AAEA,QAAM,YAAY,MAAM,uBAAuB;AAK/C,QAAM,SAAS,MAAM,6BAA6B,EAAE,WAAW,KAAK,MAAM,WAAW,IAAI,MAAM,SAAS,CAAC;AACzG,MAAI,cAAc,OAAQ,QAAO,OAAO;AAExC,MAAI,OAAO,KAAK,oBAAoB;AAClC,UAAM,UAAU,OAAO,KAAK;AAC5B,UAAM,QAAQ,MAAM,yBAAyB,OAAO;AACpD,QAAI,CAAC,OAAO;AAGV,YAAM,YAAY,MAAM,0BAA0B;AAClD,aAAO,UAAU,YACb,WAAW,aAAa,qDAAqD,IAC7E,WAAW,sBAAsB,kDAAkD;AAAA,IACzF;AAQA,UAAM,YAAY,MAAM,sBAAsB,WAAW;AAAA,MACvD,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,IACzB,CAAC;AACD,UAAM,kBAAkB,qBAAqB,MAAM,kBAAkB,SAAS;AAC9E,QAAI,gBAAgB,SAAS,GAAG;AAC9B,aAAO;AAAA,QACL;AAAA,QACA;AAAA,QACA,EAAE,gBAAgB;AAAA,MACpB;AAAA,IACF;AAAA,EACF;AAEA,QAAM,QAAQ,MAAM,2BAA2B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,OAAO;AAAA,MACL,cAAc;AAAA,MACd,YAAY;AAAA,MACZ,WAAW;AAAA,MACX,iBAAiB,EAAE,GAAG,OAAO,KAAK;AAAA,IACpC;AAAA,EACF,CAAC;AACD,MAAI,cAAc,MAAO,QAAO,MAAM;AAEtC,QAAM,aAAa,UAAU,QAAQ,YAAY;AACjD,QAAM,QAAgC;AAAA,IACpC,WAAW;AAAA,IACX,UAAU,OAAO;AAAA,IACjB,OAAO;AAAA,MACL,UAAU,KAAK;AAAA,MACf,gBAAgB,OAAO;AAAA,MACvB,iBAAiB,OAAO;AAAA,IAC1B;AAAA,EACF;AAEA,MAAI;AACJ,MAAI;AACF,UAAM,WAAW,MAAM,WAAW;AAAA,MAChC;AAAA,MACA;AAAA,QACE;AAAA,QACA,KAAK;AAAA,UACH;AAAA,UACA;AAAA,UACA,mBAAmB;AAAA,UACnB,wBAAwB;AAAA,UACxB,iBAAiB,iBAAiB,CAAC,cAAc,IAAI;AAAA,UACrD,SAAS;AAAA,QACX;AAAA,MACF;AAAA,IACF;AACA,aAAS,SAAS;AAAA,EACpB,SAAS,KAAK;AAGZ,QAAI,gBAAgB,GAAG,GAAG;AACxB,aAAO,aAAa,KAAK,IAAI,MAAM,EAAE,QAAQ,IAAI,OAAO,CAAC;AAAA,IAC3D;AACA,UAAM;AAAA,EACR;AAEA,MAAI,OAAO,WAAW,aAAa;AACjC,WAAO,aAAa,KAAK,EAAE,OAAO,oBAAoB,GAAG,EAAE,QAAQ,IAAI,CAAC;AAAA,EAC1E;AAEA,QAAM,MAAM,aAAa;AACzB,SAAO,aAAa;AAAA,IAClB;AAAA,MACE,WAAW,OAAO;AAAA,MAClB,oBAAoB,OAAO;AAAA,MAC3B,WAAW,OAAO;AAAA,MAClB,WAAW,OAAO;AAAA,IACpB;AAAA,IACA,EAAE,QAAQ,IAAI;AAAA,EAChB;AACF;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,uBAAuB;AAAA,EAC9B,SAAS;AAAA,IACP,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kEAAkE;AAAA,QAC9F,EAAE,QAAQ,KAAK,aAAa,qBAAqB;AAAA,QACjD,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,qFAAgF;AAAA,MAC9G;AAAA,IACF;AAAA,IACA,KAAK;AAAA,MACH,SAAS;AAAA,MACT,MAAM,CAAC,uBAAuB;AAAA,MAC9B,WAAW;AAAA,QACT,EAAE,QAAQ,KAAK,aAAa,kBAAkB;AAAA,QAC9C;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,QACJ;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,eAAe;AAAA,QAC3C,EAAE,QAAQ,KAAK,aAAa,4DAA4D;AAAA,QACxF,EAAE,QAAQ,KAAK,aAAa,gDAAgD;AAAA,MAC9E;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}

package/dist/modules/channel_discord/api/interactions/route.js

@@ -0,0 +1,173 @@
+import { NextResponse } from "next/server";
+import { createRequestContainer } from "@open-mercato/shared/lib/di/container";
+import { findWithDecryption } from "@open-mercato/shared/lib/encryption/find";
+import { resolveTranslations } from "@open-mercato/shared/lib/i18n/server";
+import { createLogger } from "@open-mercato/shared/lib/logger";
+import { CommunicationChannel } from "@open-mercato/core/modules/communication_channels/data/entities";
+import { discordCredentialsSchema } from "../../lib/credentials.js";
+import { DISCORD_MESSAGE_FLAG_EPHEMERAL } from "../../lib/discord-rest.js";
+import {
+  DEFAULT_INTERACTION_MESSAGES,
+  resolveDiscordInteraction,
+  screenInteractionRequest
+} from "../../lib/interactions-handler.js";
+import {
+  getInteractionDispatchQueue
+} from "../../lib/interactions-queue.js";
+import { DiscordInteractionResponseType } from "../../lib/interactions-verify.js";
+const logger = createLogger("channel_discord").child({ component: "interactions-route" });
+const metadata = {
+  // Pinned explicitly: this URL is operator-facing — it goes into the Discord
+  // application's Interactions Endpoint field — so it is part of this route's
+  // contract rather than a by-product of where the file happens to sit. It is
+  // the same path the folder derives, so the pin documents the contract instead
+  // of overriding it.
+  path: "/channel_discord/interactions",
+  POST: {
+    requireAuth: false,
+    // Unauthenticated by design. Unsigned traffic is now rejected before any
+    // candidate is loaded, so this bounds the residual case: a caller who does
+    // present well-formed, fresh headers and drives the narrowed candidate load
+    // repeatedly before the signature gate rejects them.
+    rateLimit: { points: 120, duration: 60, keyPrefix: "discord_interactions" }
+  }
+};
+async function POST(req) {
+  const rawBody = await req.text();
+  const signatureHex = req.headers.get("x-signature-ed25519");
+  const timestamp = req.headers.get("x-signature-timestamp");
+  const screened = screenInteractionRequest({ signatureHex, timestamp });
+  if (screened) return NextResponse.json(screened.body, { status: screened.status });
+  const { t } = await resolveTranslations();
+  const result = await resolveDiscordInteraction({
+    rawBody,
+    signatureHex,
+    timestamp,
+    loadCandidates: loadInteractionCandidates,
+    messages: {
+      notDispatchable: t(
+        "channel_discord.interactions.notDispatchable",
+        DEFAULT_INTERACTION_MESSAGES.notDispatchable
+      ),
+      unsupported: t("channel_discord.interactions.unsupported", DEFAULT_INTERACTION_MESSAGES.unsupported)
+    }
+  });
+  if (result.dispatch && result.matchedChannel) {
+    const enqueued = await enqueueInteractionDispatch(result.dispatch, result.matchedChannel);
+    if (!enqueued) {
+      return NextResponse.json(
+        {
+          type: DiscordInteractionResponseType.CHANNEL_MESSAGE_WITH_SOURCE,
+          data: {
+            content: t(
+              "channel_discord.interactions.dispatchFailed",
+              "Open Mercato could not record this interaction right now. Please try again in a moment."
+            ),
+            flags: DISCORD_MESSAGE_FLAG_EPHEMERAL
+          }
+        },
+        { status: 200 }
+      );
+    }
+  }
+  return NextResponse.json(result.body, { status: result.status });
+}
+async function enqueueInteractionDispatch(dispatch, channel) {
+  const payload = {
+    channelId: channel.channelId,
+    channelType: channel.channelType,
+    tenantId: channel.tenantId,
+    organizationId: channel.organizationId,
+    credentialScope: channel.credentialScope,
+    interaction: dispatch
+  };
+  try {
+    await getInteractionDispatchQueue().enqueue(payload);
+    return true;
+  } catch (err) {
+    logger.error("failed to enqueue discord interaction dispatch", { err, channelId: channel.channelId });
+    return false;
+  }
+}
+async function loadInteractionCandidates(filter) {
+  const container = await createRequestContainer();
+  const em = container.resolve("em").fork();
+  let credentialsService = null;
+  try {
+    credentialsService = container.resolve("integrationCredentialsService");
+  } catch {
+    credentialsService = null;
+  }
+  if (!credentialsService) return [];
+  const candidates = [];
+  try {
+    const rows = await findWithDecryption(em, CommunicationChannel, {
+      providerKey: "discord",
+      isActive: true,
+      deletedAt: null
+    });
+    const resolvedByScope = /* @__PURE__ */ new Map();
+    for (const channel of rows) {
+      if (!channel.credentialsRef) continue;
+      const organizationId = channel.organizationId ?? channel.tenantId;
+      const userId = channel.userId ?? null;
+      const scopeKey = `${channel.tenantId}|${organizationId}|${userId ?? ""}`;
+      if (!resolvedByScope.has(scopeKey)) {
+        try {
+          resolvedByScope.set(
+            scopeKey,
+            await credentialsService.resolve("channel_discord", {
+              tenantId: channel.tenantId,
+              organizationId,
+              userId
+            })
+          );
+        } catch {
+          resolvedByScope.set(scopeKey, null);
+        }
+      }
+      const parsed = discordCredentialsSchema.safeParse(resolvedByScope.get(scopeKey) ?? {});
+      if (!parsed.success) continue;
+      if (filter.applicationId && parsed.data.applicationId !== filter.applicationId) continue;
+      candidates.push({
+        channelId: channel.id,
+        channelType: channel.channelType,
+        tenantId: channel.tenantId,
+        organizationId: channel.organizationId ?? null,
+        publicKey: parsed.data.publicKey,
+        applicationId: parsed.data.applicationId,
+        // The exact scope this row's credentials resolved under, so the worker
+        // re-resolves the same bag instead of guessing — and no token travels.
+        credentialScope: { tenantId: channel.tenantId, organizationId, userId }
+      });
+    }
+  } catch (err) {
+    logger.warn("failed to load discord interaction candidates", { err });
+    return [];
+  }
+  return candidates;
+}
+const openApi = {
+  tags: ["ChannelDiscord"],
+  summary: "Discord Interactions endpoint (slash commands, buttons, PING handshake)",
+  methods: {
+    POST: {
+      summary: "Verify (Ed25519, fail-closed) and dispatch a Discord interaction",
+      tags: ["ChannelDiscord"],
+      responses: [
+        {
+          status: 200,
+          description: "Verified interaction \u2014 PONG for the handshake, a deferred ack for a dispatched slash command / component / modal submission, an empty autocomplete result, or an ephemeral message when the interaction cannot be dispatched"
+        },
+        { status: 400, description: "Verified but malformed interaction body" },
+        { status: 401, description: "Signature verification failed against every candidate channel, or the signed timestamp is outside the replay window" }
+      ]
+    }
+  }
+};
+export {
+  POST,
+  metadata,
+  openApi
+};
+//# sourceMappingURL=route.js.map

package/dist/modules/channel_discord/api/interactions/route.js.map

@@ -0,0 +1,7 @@
+{
+  "version": 3,
+  "sources": ["../../../../../src/modules/channel_discord/api/interactions/route.ts"],
+  "sourcesContent": ["import { NextResponse } from 'next/server'\nimport type { EntityManager } from '@mikro-orm/postgresql'\nimport { createRequestContainer } from '@open-mercato/shared/lib/di/container'\nimport { findWithDecryption } from '@open-mercato/shared/lib/encryption/find'\nimport { resolveTranslations } from '@open-mercato/shared/lib/i18n/server'\nimport { createLogger } from '@open-mercato/shared/lib/logger'\nimport { CommunicationChannel } from '@open-mercato/core/modules/communication_channels/data/entities'\nimport { discordCredentialsSchema } from '../../lib/credentials'\nimport { DISCORD_MESSAGE_FLAG_EPHEMERAL } from '../../lib/discord-rest'\nimport type { DispatchableInteraction } from '../../lib/interactions-dispatch'\nimport {\n  DEFAULT_INTERACTION_MESSAGES,\n  resolveDiscordInteraction,\n  screenInteractionRequest,\n  type InteractionCandidate,\n  type InteractionCandidateFilter,\n} from '../../lib/interactions-handler'\nimport {\n  getInteractionDispatchQueue,\n  type InteractionDispatchJobPayload,\n} from '../../lib/interactions-queue'\nimport { DiscordInteractionResponseType } from '../../lib/interactions-verify'\n\nconst logger = createLogger('channel_discord').child({ component: 'interactions-route' })\n\n/**\n * Discord Interactions endpoint (slash commands, buttons, PING handshake).\n *\n * This is a **provider-owned** signed route \u2014 the resolution to the spec's one\n * \"under negotiation\" hub touch-point. Discord requires a *synchronous* PONG\n * (`{ type: 1 }`) on the initial PING, which the hub's generic\n * `api/post/webhook/[provider]` route cannot return (it 202-acks + enqueues). By\n * shipping this route from the provider package we serve the handshake without\n * changing the hub contract. Operators set the Interactions Endpoint URL to\n * `/api/channel_discord/interactions`.\n *\n * Auth model: unauthenticated at the platform layer \u2014 Ed25519 signature\n * verification IS the auth, and it is fail-closed (a tampered/missing signature\n * verifies against no candidate channel \u2192 401).\n *\n * Timing model: Discord closes an interaction that is not answered within three\n * seconds, so a verified slash command / component press is answered with a\n * DEFERRED acknowledgement and handed to `workers/discord-interactions.ts`,\n * which does the two slow halves \u2014 writing the interaction into the hub's\n * inbound queue and replacing the \"thinking\u2026\" placeholder with a real message.\n * The hand-off happens BEFORE the ack is returned, so a queue that cannot accept\n * the job downgrades the response to a visible error instead of promising a\n * follow-up nothing will send.\n */\nexport const metadata = {\n  // Pinned explicitly: this URL is operator-facing \u2014 it goes into the Discord\n  // application's Interactions Endpoint field \u2014 so it is part of this route's\n  // contract rather than a by-product of where the file happens to sit. It is\n  // the same path the folder derives, so the pin documents the contract instead\n  // of overriding it.\n  path: '/channel_discord/interactions',\n  POST: {\n    requireAuth: false,\n    // Unauthenticated by design. Unsigned traffic is now rejected before any\n    // candidate is loaded, so this bounds the residual case: a caller who does\n    // present well-formed, fresh headers and drives the narrowed candidate load\n    // repeatedly before the signature gate rejects them.\n    rateLimit: { points: 120, duration: 60, keyPrefix: 'discord_interactions' },\n  },\n}\n\nexport async function POST(req: Request): Promise<Response> {\n  const rawBody = await req.text()\n  const signatureHex = req.headers.get('x-signature-ed25519')\n  const timestamp = req.headers.get('x-signature-timestamp')\n\n  // Screened here as well as inside `resolveDiscordInteraction` so that unsigned,\n  // malformed or stale traffic returns before the dictionary load below \u2014 this\n  // route is unauthenticated, so everything decidable from the request alone\n  // stays ahead of every other cost.\n  const screened = screenInteractionRequest({ signatureHex, timestamp })\n  if (screened) return NextResponse.json(screened.body, { status: screened.status })\n\n  const { t } = await resolveTranslations()\n\n  const result = await resolveDiscordInteraction({\n    rawBody,\n    signatureHex,\n    timestamp,\n    loadCandidates: loadInteractionCandidates,\n    messages: {\n      notDispatchable: t(\n        'channel_discord.interactions.notDispatchable',\n        DEFAULT_INTERACTION_MESSAGES.notDispatchable,\n      ),\n      unsupported: t('channel_discord.interactions.unsupported', DEFAULT_INTERACTION_MESSAGES.unsupported),\n    },\n  })\n\n  // A deferred acknowledgement is a promise of a follow-up. Enqueue it BEFORE\n  // answering: if the hand-off fails the user gets a visible error instead of a\n  // \"thinking\u2026\" state nothing will ever replace.\n  if (result.dispatch && result.matchedChannel) {\n    const enqueued = await enqueueInteractionDispatch(result.dispatch, result.matchedChannel)\n    if (!enqueued) {\n      return NextResponse.json(\n        {\n          type: DiscordInteractionResponseType.CHANNEL_MESSAGE_WITH_SOURCE,\n          data: {\n            content: t(\n              'channel_discord.interactions.dispatchFailed',\n              'Open Mercato could not record this interaction right now. Please try again in a moment.',\n            ),\n            flags: DISCORD_MESSAGE_FLAG_EPHEMERAL,\n          },\n        },\n        { status: 200 },\n      )\n    }\n  }\n\n  return NextResponse.json(result.body, { status: result.status })\n}\n\n/**\n * Hand the verified interaction to the dispatch worker. Returns `false` when the\n * job could not be queued at all, which is the one case where the deferred ack\n * must be downgraded to a visible reply.\n */\nasync function enqueueInteractionDispatch(\n  dispatch: DispatchableInteraction,\n  channel: InteractionCandidate,\n): Promise<boolean> {\n  const payload: InteractionDispatchJobPayload = {\n    channelId: channel.channelId,\n    channelType: channel.channelType,\n    tenantId: channel.tenantId,\n    organizationId: channel.organizationId,\n    credentialScope: channel.credentialScope,\n    interaction: dispatch,\n  }\n  try {\n    await getInteractionDispatchQueue().enqueue(payload as unknown as Record<string, unknown>)\n    return true\n  } catch (err) {\n    logger.error('failed to enqueue discord interaction dispatch', { err, channelId: channel.channelId })\n    return false\n  }\n}\n\ntype CredentialsServiceLike = {\n  resolve: (\n    integrationId: string,\n    scope: { organizationId: string; tenantId: string; userId?: string | null },\n  ) => Promise<Record<string, unknown> | null>\n}\n\nasync function loadInteractionCandidates(\n  filter: InteractionCandidateFilter,\n): Promise<InteractionCandidate[]> {\n  const container = await createRequestContainer()\n  const em = (container.resolve('em') as EntityManager).fork()\n\n  let credentialsService: CredentialsServiceLike | null = null\n  try {\n    credentialsService = container.resolve<CredentialsServiceLike>('integrationCredentialsService')\n  } catch {\n    credentialsService = null\n  }\n  if (!credentialsService) return []\n\n  const candidates: InteractionCandidate[] = []\n  try {\n    const rows = (await findWithDecryption(em, CommunicationChannel, {\n      providerKey: 'discord',\n      isActive: true,\n      deletedAt: null,\n    })) as CommunicationChannel[]\n\n    // Credentials are resolved per (tenant, organization, user) scope, and a\n    // tenant's Discord channels usually share one \u2014 cache within this request so\n    // N channel rows do not become N decrypts of the same credential bag.\n    const resolvedByScope = new Map<string, Record<string, unknown> | null>()\n\n    for (const channel of rows) {\n      if (!channel.credentialsRef) continue\n      const organizationId = channel.organizationId ?? channel.tenantId\n      const userId = channel.userId ?? null\n      const scopeKey = `${channel.tenantId}|${organizationId}|${userId ?? ''}`\n      if (!resolvedByScope.has(scopeKey)) {\n        try {\n          resolvedByScope.set(\n            scopeKey,\n            await credentialsService.resolve('channel_discord', {\n              tenantId: channel.tenantId,\n              organizationId,\n              userId,\n            }),\n          )\n        } catch {\n          resolvedByScope.set(scopeKey, null)\n        }\n      }\n      const parsed = discordCredentialsSchema.safeParse(resolvedByScope.get(scopeKey) ?? {})\n      if (!parsed.success) continue\n      // Narrowing only \u2014 the signature still decides. A body claiming an\n      // application nobody here owns simply verifies against nothing.\n      if (filter.applicationId && parsed.data.applicationId !== filter.applicationId) continue\n      candidates.push({\n        channelId: channel.id,\n        channelType: channel.channelType,\n        tenantId: channel.tenantId,\n        organizationId: channel.organizationId ?? null,\n        publicKey: parsed.data.publicKey,\n        applicationId: parsed.data.applicationId,\n        // The exact scope this row's credentials resolved under, so the worker\n        // re-resolves the same bag instead of guessing \u2014 and no token travels.\n        credentialScope: { tenantId: channel.tenantId, organizationId, userId },\n      })\n    }\n  } catch (err) {\n    logger.warn('failed to load discord interaction candidates', { err })\n    return []\n  }\n\n  return candidates\n}\n\nexport const openApi = {\n  tags: ['ChannelDiscord'],\n  summary: 'Discord Interactions endpoint (slash commands, buttons, PING handshake)',\n  methods: {\n    POST: {\n      summary: 'Verify (Ed25519, fail-closed) and dispatch a Discord interaction',\n      tags: ['ChannelDiscord'],\n      responses: [\n        {\n          status: 200,\n          description:\n            'Verified interaction \u2014 PONG for the handshake, a deferred ack for a dispatched slash command / component / modal submission, an empty autocomplete result, or an ephemeral message when the interaction cannot be dispatched',\n        },\n        { status: 400, description: 'Verified but malformed interaction body' },\n        { status: 401, description: 'Signature verification failed against every candidate channel, or the signed timestamp is outside the replay window' },\n      ],\n    },\n  },\n}\n"],
+  "mappings": "AAAA,SAAS,oBAAoB;AAE7B,SAAS,8BAA8B;AACvC,SAAS,0BAA0B;AACnC,SAAS,2BAA2B;AACpC,SAAS,oBAAoB;AAC7B,SAAS,4BAA4B;AACrC,SAAS,gCAAgC;AACzC,SAAS,sCAAsC;AAE/C;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,OAGK;AACP;AAAA,EACE;AAAA,OAEK;AACP,SAAS,sCAAsC;AAE/C,MAAM,SAAS,aAAa,iBAAiB,EAAE,MAAM,EAAE,WAAW,qBAAqB,CAAC;AA0BjF,MAAM,WAAW;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAMtB,MAAM;AAAA,EACN,MAAM;AAAA,IACJ,aAAa;AAAA;AAAA;AAAA;AAAA;AAAA,IAKb,WAAW,EAAE,QAAQ,KAAK,UAAU,IAAI,WAAW,uBAAuB;AAAA,EAC5E;AACF;AAEA,eAAsB,KAAK,KAAiC;AAC1D,QAAM,UAAU,MAAM,IAAI,KAAK;AAC/B,QAAM,eAAe,IAAI,QAAQ,IAAI,qBAAqB;AAC1D,QAAM,YAAY,IAAI,QAAQ,IAAI,uBAAuB;AAMzD,QAAM,WAAW,yBAAyB,EAAE,cAAc,UAAU,CAAC;AACrE,MAAI,SAAU,QAAO,aAAa,KAAK,SAAS,MAAM,EAAE,QAAQ,SAAS,OAAO,CAAC;AAEjF,QAAM,EAAE,EAAE,IAAI,MAAM,oBAAoB;AAExC,QAAM,SAAS,MAAM,0BAA0B;AAAA,IAC7C;AAAA,IACA;AAAA,IACA;AAAA,IACA,gBAAgB;AAAA,IAChB,UAAU;AAAA,MACR,iBAAiB;AAAA,QACf;AAAA,QACA,6BAA6B;AAAA,MAC/B;AAAA,MACA,aAAa,EAAE,4CAA4C,6BAA6B,WAAW;AAAA,IACrG;AAAA,EACF,CAAC;AAKD,MAAI,OAAO,YAAY,OAAO,gBAAgB;AAC5C,UAAM,WAAW,MAAM,2BAA2B,OAAO,UAAU,OAAO,cAAc;AACxF,QAAI,CAAC,UAAU;AACb,aAAO,aAAa;AAAA,QAClB;AAAA,UACE,MAAM,+BAA+B;AAAA,UACrC,MAAM;AAAA,YACJ,SAAS;AAAA,cACP;AAAA,cACA;AAAA,YACF;AAAA,YACA,OAAO;AAAA,UACT;AAAA,QACF;AAAA,QACA,EAAE,QAAQ,IAAI;AAAA,MAChB;AAAA,IACF;AAAA,EACF;AAEA,SAAO,aAAa,KAAK,OAAO,MAAM,EAAE,QAAQ,OAAO,OAAO,CAAC;AACjE;AAOA,eAAe,2BACb,UACA,SACkB;AAClB,QAAM,UAAyC;AAAA,IAC7C,WAAW,QAAQ;AAAA,IACnB,aAAa,QAAQ;AAAA,IACrB,UAAU,QAAQ;AAAA,IAClB,gBAAgB,QAAQ;AAAA,IACxB,iBAAiB,QAAQ;AAAA,IACzB,aAAa;AAAA,EACf;AACA,MAAI;AACF,UAAM,4BAA4B,EAAE,QAAQ,OAA6C;AACzF,WAAO;AAAA,EACT,SAAS,KAAK;AACZ,WAAO,MAAM,kDAAkD,EAAE,KAAK,WAAW,QAAQ,UAAU,CAAC;AACpG,WAAO;AAAA,EACT;AACF;AASA,eAAe,0BACb,QACiC;AACjC,QAAM,YAAY,MAAM,uBAAuB;AAC/C,QAAM,KAAM,UAAU,QAAQ,IAAI,EAAoB,KAAK;AAE3D,MAAI,qBAAoD;AACxD,MAAI;AACF,yBAAqB,UAAU,QAAgC,+BAA+B;AAAA,EAChG,QAAQ;AACN,yBAAqB;AAAA,EACvB;AACA,MAAI,CAAC,mBAAoB,QAAO,CAAC;AAEjC,QAAM,aAAqC,CAAC;AAC5C,MAAI;AACF,UAAM,OAAQ,MAAM,mBAAmB,IAAI,sBAAsB;AAAA,MAC/D,aAAa;AAAA,MACb,UAAU;AAAA,MACV,WAAW;AAAA,IACb,CAAC;AAKD,UAAM,kBAAkB,oBAAI,IAA4C;AAExE,eAAW,WAAW,MAAM;AAC1B,UAAI,CAAC,QAAQ,eAAgB;AAC7B,YAAM,iBAAiB,QAAQ,kBAAkB,QAAQ;AACzD,YAAM,SAAS,QAAQ,UAAU;AACjC,YAAM,WAAW,GAAG,QAAQ,QAAQ,IAAI,cAAc,IAAI,UAAU,EAAE;AACtE,UAAI,CAAC,gBAAgB,IAAI,QAAQ,GAAG;AAClC,YAAI;AACF,0BAAgB;AAAA,YACd;AAAA,YACA,MAAM,mBAAmB,QAAQ,mBAAmB;AAAA,cAClD,UAAU,QAAQ;AAAA,cAClB;AAAA,cACA;AAAA,YACF,CAAC;AAAA,UACH;AAAA,QACF,QAAQ;AACN,0BAAgB,IAAI,UAAU,IAAI;AAAA,QACpC;AAAA,MACF;AACA,YAAM,SAAS,yBAAyB,UAAU,gBAAgB,IAAI,QAAQ,KAAK,CAAC,CAAC;AACrF,UAAI,CAAC,OAAO,QAAS;AAGrB,UAAI,OAAO,iBAAiB,OAAO,KAAK,kBAAkB,OAAO,cAAe;AAChF,iBAAW,KAAK;AAAA,QACd,WAAW,QAAQ;AAAA,QACnB,aAAa,QAAQ;AAAA,QACrB,UAAU,QAAQ;AAAA,QAClB,gBAAgB,QAAQ,kBAAkB;AAAA,QAC1C,WAAW,OAAO,KAAK;AAAA,QACvB,eAAe,OAAO,KAAK;AAAA;AAAA;AAAA,QAG3B,iBAAiB,EAAE,UAAU,QAAQ,UAAU,gBAAgB,OAAO;AAAA,MACxE,CAAC;AAAA,IACH;AAAA,EACF,SAAS,KAAK;AACZ,WAAO,KAAK,iDAAiD,EAAE,IAAI,CAAC;AACpE,WAAO,CAAC;AAAA,EACV;AAEA,SAAO;AACT;AAEO,MAAM,UAAU;AAAA,EACrB,MAAM,CAAC,gBAAgB;AAAA,EACvB,SAAS;AAAA,EACT,SAAS;AAAA,IACP,MAAM;AAAA,MACJ,SAAS;AAAA,MACT,MAAM,CAAC,gBAAgB;AAAA,MACvB,WAAW;AAAA,QACT;AAAA,UACE,QAAQ;AAAA,UACR,aACE;AAAA,QACJ;AAAA,QACA,EAAE,QAAQ,KAAK,aAAa,0CAA0C;AAAA,QACtE,EAAE,QAAQ,KAAK,aAAa,sHAAsH;AAAA,MACpJ;AAAA,IACF;AAAA,EACF;AACF;",
+  "names": []
+}