@spinabot/brigade 1.6.0 → 1.6.1

package/dist/agents/channels/discord/media.js

@@ -0,0 +1,242 @@
+/**
+ * Discord media helpers — inbound download + outbound upload construction.
+ *
+ * INBOUND: a Discord message attachment carries a public CDN `url`
+ * (cdn.discordapp.com / media.discordapp.net). We GET that URL (NO auth header —
+ * Discord attachment URLs are public, unlike Slack's `url_private`) and save the
+ * bytes under `~/.brigade/channels/discord/media/<YYYY-MM-DD>/<id>.<ext>` so the
+ * agent can `read` the attachment by path. In convex mode the cache relocates to
+ * the OS cache dir (never under ~/.brigade, to respect the strict-zero guard).
+ *
+ * OUTBOUND: `buildDiscordAttachment` validates a local path through Brigade's
+ * outbound media-path guard (so a prompt-injected "send ~/.ssh/id_rsa" can't
+ * exfiltrate a secret), then returns the `{ path, name }` the connection wraps
+ * in a discord.js `AttachmentBuilder`. The builder itself lives in the
+ * connection (which imports discord.js); this module stays dependency-light +
+ * unit-testable.
+ *
+ * SSRF GUARD: even though Discord URLs are public, we REQUIRE https + a Discord
+ * CDN host before fetching. Without this a prompt-injected / spoofed message
+ * could carry `http://169.254.169.254/…` (cloud metadata) or any attacker host
+ * and Brigade would fetch it — a classic SSRF. Mirrors `slack/media.ts`.
+ */
+import { mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { resolveChannelStateDir, resolveOsCacheDir } from "../../../config/paths.js";
+import { tryGetRuntimeContext } from "../../../storage/runtime-context.js";
+// Channel SDK barrel — the outbound-media exfil guard + the contract types. All
+// contract types come from the channel SDK barrel so the channel is built
+// entirely on `../sdk.js`.
+import { validateOutboundMediaPath } from "../sdk.js";
+import { resolveDiscordAttachmentKind } from "./inbound-extras.js";
+const CHANNEL_ID = "discord";
+/**
+ * Defensive ceiling on an inbound attachment download. Discord's own per-file
+ * limit is generous (and tiered by server boost); we cap at 50 MB so a huge
+ * upload can't blow out memory. Anything larger is skipped (the message still
+ * reaches the agent without the attachment).
+ */
+const MAX_BYTES = 50 * 1024 * 1024;
+/**
+ * Discord's attachment-CDN hosts. An inbound attachment `url` only ever points
+ * at one of these — before fetching we REQUIRE https + a Discord host so a
+ * spoofed message can't make Brigade fetch an arbitrary internal URL (SSRF).
+ * Subdomains of these hosts are allowed.
+ */
+const DISCORD_CDN_HOSTS = ["cdn.discordapp.com", "media.discordapp.net", "cdn.discord.com"];
+/**
+ * True when `rawUrl` is an https URL whose host is a Discord CDN host (or a
+ * subdomain of one). Anything else (non-https, a non-Discord host, or an
+ * unparseable URL) returns false so the caller refuses to fetch.
+ */
+export function isAllowedDiscordAttachmentUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== "https:")
+        return false;
+    const host = parsed.hostname.toLowerCase();
+    return DISCORD_CDN_HOSTS.some((h) => host === h || host.endsWith(`.${h}`));
+}
+/** YYYY-MM-DD (UTC) bucket — stable filename grouping for grep / review. */
+function dayBucket() {
+    const d = new Date();
+    const pad = (x) => String(x).padStart(2, "0");
+    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}`;
+}
+/** Derive a file extension from a Discord attachment (filename / content-type / kind). */
+function extFromAttachment(att, kind) {
+    const name = (att.name ?? "").toLowerCase();
+    const fromName = name.includes(".") ? name.slice(name.lastIndexOf(".") + 1).replace(/[^a-z0-9]/g, "") : "";
+    if (fromName && /^[a-z0-9]+$/.test(fromName))
+        return fromName;
+    const mime = (att.contentType ?? "").toLowerCase();
+    const fromMime = mime.includes("/") ? mime.slice(mime.lastIndexOf("/") + 1).split(";")[0]?.replace(/[^a-z0-9]/g, "") : "";
+    if (fromMime && /^[a-z0-9]+$/.test(fromMime))
+        return fromMime;
+    // Sensible default by kind when nothing carried an extension.
+    switch (kind) {
+        case "image":
+            return "png";
+        case "video":
+            return "mp4";
+        case "voice":
+            return "ogg";
+        case "audio":
+            return "mp3";
+        default:
+            return "bin";
+    }
+}
+/** Where downloaded media lands — OS cache in convex mode, channel-state dir otherwise. */
+function mediaBaseDir() {
+    return tryGetRuntimeContext()?.mode === "convex"
+        ? path.join(resolveOsCacheDir(), "channels", CHANNEL_ID)
+        : resolveChannelStateDir(CHANNEL_ID);
+}
+/**
+ * Bounded retry for the transient attachment fetch. Discord's CDN occasionally
+ * blips on a 5xx or a network reset; one or two quick retries turn a dropped
+ * attachment into a delivered one. The caller still wraps the whole thing in a
+ * try/catch that degrades to `null`, so an exhausted retry never breaks message
+ * delivery. Mirrors `slack/media.ts`'s `withSlackRetry`.
+ */
+export async function withDiscordRetry(fn, attempts = 3) {
+    let lastErr;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (i < attempts - 1)
+                await new Promise((r) => setTimeout(r, 200 * 2 ** i));
+        }
+    }
+    throw lastErr;
+}
+/**
+ * Download one inbound Discord attachment to disk and return its normalized
+ * descriptor, or `null` when it couldn't be fetched (no url / too big / network
+ * error / non-Discord host). Never throws — a download glitch must not break
+ * message delivery.
+ */
+export async function downloadDiscordAttachment(args) {
+    const { attachment, log } = args;
+    const doFetch = args.fetchImpl ?? fetch;
+    const url = attachment.url || attachment.proxyURL;
+    if (!url) {
+        log?.("discord attachment skipped — no url", { id: attachment.id });
+        return null;
+    }
+    // SSRF guard: REFUSE any url that isn't https on a Discord CDN host — a spoofed
+    // message pointing at `http://169.254.169.254/…` (or any attacker host) must
+    // never be fetched. Checked BEFORE the fetch.
+    if (!isAllowedDiscordAttachmentUrl(url)) {
+        log?.("discord attachment skipped — url is not an allowed Discord CDN host (SSRF guard)", { id: attachment.id });
+        return null;
+    }
+    if (typeof attachment.size === "number" && attachment.size > MAX_BYTES) {
+        log?.("discord attachment skipped — exceeds size cap", { id: attachment.id, bytes: attachment.size, cap: MAX_BYTES });
+        return null;
+    }
+    const kind = resolveDiscordAttachmentKind(attachment);
+    try {
+        const res = await withDiscordRetry(async () => {
+            // `redirect: "manual"` so a cross-origin 30x can't carry the request off to
+            // a non-Discord host. A redirect surfaces as a non-ok response and falls
+            // through to the `!r.ok` handler below.
+            const r = await doFetch(url, { redirect: "manual" });
+            // Retry 5xx (transient CDN blip); a 4xx falls through to the !ok handler.
+            if (!r.ok && r.status >= 500)
+                throw new Error(`discord attachment fetch failed (${r.status})`);
+            return r;
+        });
+        if (!res.ok) {
+            log?.("discord attachment download failed", { id: attachment.id, status: res.status });
+            return null;
+        }
+        const buf = Buffer.from(await res.arrayBuffer());
+        if (buf.length === 0)
+            return null;
+        if (buf.length > MAX_BYTES) {
+            log?.("discord attachment skipped — exceeds size cap", { id: attachment.id, bytes: buf.length, cap: MAX_BYTES });
+            return null;
+        }
+        const dir = path.join(mediaBaseDir(), "media", dayBucket());
+        mkdirSync(dir, { recursive: true });
+        // attachment.id is stable; use it as the filename so the same media resolves
+        // idempotently. Fall back to a timestamp.
+        const baseName = (attachment.id || `discord_${Date.now()}`).replace(/[^A-Za-z0-9_-]/g, "_");
+        const dest = path.join(dir, `${baseName}.${extFromAttachment(attachment, kind)}`);
+        writeFileSync(dest, buf, { mode: 0o600 });
+        return {
+            kind,
+            path: dest,
+            ...(attachment.contentType ? { mimeType: attachment.contentType } : {}),
+            ...(attachment.name ? { fileName: attachment.name } : {}),
+        };
+    }
+    catch (err) {
+        log?.("discord attachment download failed", {
+            id: attachment.id,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return null;
+    }
+}
+/** Default outbound file extension by media kind (used when the path has none). */
+function outboundExtForKind(kind) {
+    switch (kind) {
+        case "image":
+            return "png";
+        case "video":
+            return "mp4";
+        case "voice":
+            return "ogg";
+        case "audio":
+            return "mp3";
+        default:
+            // document / sticker / anything else: leave extensionless (Discord falls
+            // back to the content the byte-sniff detects).
+            return "";
+    }
+}
+/**
+ * Validate + shape a local file for outbound upload. Runs the path through
+ * Brigade's outbound media-path guard and throws a clear operator-facing error
+ * when the guard refuses it (the `send_media` tool surfaces it). Returns the
+ * `{ path, name, caption? }` the connection turns into a discord.js
+ * `AttachmentBuilder`.
+ *
+ * Filename precedence: an explicit `media.fileName` wins; otherwise the path's
+ * basename. When the chosen name has NO extension we append one inferred from
+ * `media.kind` (image→png, video→mp4, audio→mp3, voice→ogg) so Discord detects
+ * the file type instead of treating it as an opaque blob (an extensionless
+ * `image` upload otherwise renders as a generic file, not an inline preview).
+ */
+export function buildDiscordAttachment(media) {
+    const verdict = validateOutboundMediaPath(media.path);
+    if (!verdict.ok) {
+        throw new Error(`Discord: ${verdict.reason ?? "refusing to attach this file"}`);
+    }
+    let name = media.fileName || path.basename(media.path) || "file";
+    // No extension on the resolved name → infer one from the media kind so Discord
+    // type-detects the attachment. `path.extname` returns "" when there's no dot.
+    if (!path.extname(name)) {
+        const ext = outboundExtForKind(media.kind);
+        if (ext)
+            name = `${name}.${ext}`;
+    }
+    return {
+        path: media.path,
+        name,
+        ...(media.caption ? { caption: media.caption } : {}),
+    };
+}
+export { MAX_BYTES as DISCORD_MEDIA_MAX_BYTES };
+//# sourceMappingURL=media.js.map

package/dist/agents/channels/discord/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,gFAAgF;AAChF,0EAA0E;AAC1E,2BAA2B;AAC3B,OAAO,EAAE,yBAAyB,EAAmD,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAA8B,MAAM,qBAAqB,CAAC;AAE/F,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE5F;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC3D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS;IACjB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,GAA0B,EAAE,IAAoC;IAC1F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,IAAI,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1H,IAAI,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,8DAA8D;IAC9D,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY;IACpB,OAAO,oBAAoB,EAAE,EAAE,IAAI,KAAK,QAAQ;QAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC;QACxD,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,EAAoB,EAAE,QAAQ,GAAG,CAAC;IAC3E,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC;AACf,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAmC;IAClF,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,GAAG,EAAE,CAAC,qCAAqC,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,gFAAgF;IAChF,6EAA6E;IAC7E,8CAA8C;IAC9C,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,EAAE,CAAC,kFAAkF,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC;QACxE,GAAG,EAAE,CAAC,+CAA+C,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;YAC7C,4EAA4E;YAC5E,yEAAyE;YACzE,wCAAwC;YACxC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,0EAA0E;YAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,OAAO,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,EAAE,CAAC,oCAAoC,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5B,GAAG,EAAE,CAAC,+CAA+C,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,6EAA6E;QAC7E,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO;YACN,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,EAAE,CAAC,oCAAoC,EAAE;YAC3C,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAYD,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,IAA2B;IACtD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd;YACC,yEAAyE;YACzE,+CAA+C;YAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAC1D,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IACjE,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG;YAAE,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;AACH,CAAC;AAED,OAAO,EAAE,SAAS,IAAI,uBAAuB,EAAE,CAAC"}

package/dist/agents/channels/discord/module.d.ts

@@ -0,0 +1,15 @@
+/**
+ * Discord extension module.
+ *
+ * Registers the Discord channel adapter through the seam. The loader gates it by
+ * the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.discord.enabled` is true AND a bot
+ * token resolves — so bundling this module is inert until the operator opts in.
+ *
+ * Unlike Slack's module, Discord registers NO gateway HTTP route: the Gateway
+ * (WebSocket) is the only inbound transport (no public URL needed, analogous to
+ * Slack Socket Mode / Telegram long-polling), so there is no events-mode webhook
+ * to wire. Discord mirror of `telegram/module.ts` (the polling-only shape).
+ */
+export declare const discordModule: import("../sdk.js").BrigadeModule;
+//# sourceMappingURL=module.d.ts.map

package/dist/agents/channels/discord/module.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAKH,eAAO,MAAM,aAAa,mCAKxB,CAAC"}

package/dist/agents/channels/discord/module.js

@@ -0,0 +1,22 @@
+/**
+ * Discord extension module.
+ *
+ * Registers the Discord channel adapter through the seam. The loader gates it by
+ * the usual extension config (`extensions.disabled` / `entries`), and the
+ * adapter itself only starts when `channels.discord.enabled` is true AND a bot
+ * token resolves — so bundling this module is inert until the operator opts in.
+ *
+ * Unlike Slack's module, Discord registers NO gateway HTTP route: the Gateway
+ * (WebSocket) is the only inbound transport (no public URL needed, analogous to
+ * Slack Socket Mode / Telegram long-polling), so there is no events-mode webhook
+ * to wire. Discord mirror of `telegram/module.ts` (the polling-only shape).
+ */
+import { defineModule } from "../sdk.js";
+import { createDiscordAdapter } from "./adapter.js";
+export const discordModule = defineModule({
+    id: "discord",
+    register(b) {
+        b.channel(createDiscordAdapter());
+    },
+});
+//# sourceMappingURL=module.js.map

package/dist/agents/channels/discord/module.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"module.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/module.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAC;AACzC,OAAO,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAC;AAEpD,MAAM,CAAC,MAAM,aAAa,GAAG,YAAY,CAAC;IACzC,EAAE,EAAE,SAAS;IACb,QAAQ,CAAC,CAAC;QACT,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,CAAC,CAAC;IACnC,CAAC;CACD,CAAC,CAAC"}

package/dist/agents/channels/discord/plugin.d.ts

@@ -0,0 +1,73 @@
+/**
+ * Discord `ChannelPlugin` — the multi-ACCOUNT contract surface.
+ *
+ * Mirrors `slack/plugin.ts`: wraps `createDiscordAdapter()` (the per-connection
+ * implementation) with the lifecycle adapters the `ChannelPluginManager`
+ * consumes, so an operator can run MORE THAN ONE Discord bot at once via:
+ *
+ *   channels.discord = {
+ *     enabled: true,
+ *     accounts: [
+ *       { id: "main", botToken: "…AAA" },
+ *       { id: "labs", botToken: "…BBB" },
+ *     ],
+ *   }
+ *
+ *   - `config.listAccountIds` / `resolveAccount`  → multi-account discovery
+ *   - `gateway.startAccount` / `stopAccount`      → per-account bot lifecycle
+ *   - `outbound.sendText` / `sendMedia`           → routes by `target.accountId`
+ *   - per-account approval-dispatcher registration → an exec-gate prompt raised
+ *     by a turn on (discord, labs) replies on (discord, labs), not the default
+ *
+ * Per-account state lives in a `Map<accountId, AccountRuntime>` held in this
+ * closure — one Gateway connection per account, partitioned token resolution per
+ * `channels.discord.accounts[].botToken`. Inbound dispatch reuses the shared
+ * `runChannelInboundPipeline` so the multi-account path carries the identical
+ * ACL + debounce + abort + approval-reply + approval-callback surface as the
+ * legacy single-adapter manager.
+ *
+ * The legacy single-account `createDiscordAdapter` (started by the legacy
+ * `startChannels` manager) STEPS ASIDE when >1 account is configured — its
+ * `isConfigured` returns false for the default account in that case (mirrors
+ * Slack), so the two paths never double-start a bot.
+ *
+ * Discord has no events-mode HTTP route (the Gateway is the only inbound
+ * transport), so — unlike Slack's plugin — there is NO per-account webhook-sink
+ * registry to populate.
+ */
+import type { BrigadeConfig } from "../../../config/types.js";
+import { type ChannelAdapter, type ChannelOutboundTarget, type ChannelPlugin, type StartChannelsArgs } from "../sdk.js";
+import { type ResolvedDiscordAccount } from "./account-config.js";
+import { type DiscordProbeResult } from "./probe.js";
+/** Dependencies the gateway hands the plugin to drive turns + replies. */
+export interface DiscordPluginDeps {
+    /** Boot-time default agent for routing fallbacks. */
+    defaultAgentId: string;
+    /** Active gateway config — re-read fresh per inbound for live policy. */
+    loadConfig: () => BrigadeConfig;
+    /** Run one agent turn (the gateway's serialised turn executor). */
+    runTurn: StartChannelsArgs["runTurn"];
+    /**
+     * Optional adapter factory — tests inject a fake; production uses
+     * `createDiscordAdapter`. Receives the per-account scope.
+     */
+    adapterFactory?: (args: {
+        accountId: string;
+    }) => ChannelAdapter;
+}
+/** Operator-grade view of a per-account bot — exposed via attached helpers. */
+export interface DiscordPluginRuntimeView {
+    /** Currently-running account ids. */
+    startedAccountIds(): string[];
+    /** Look up the per-account adapter (or undefined when the account isn't started). */
+    getAdapter(accountId: string): ChannelAdapter | undefined;
+    /** Run a `/users/@me` probe for an account (for status / doctor). */
+    probeAccount(accountId: string, cfg: BrigadeConfig): Promise<DiscordProbeResult>;
+}
+/** Plugin handle with the extra per-account introspection surface attached. */
+export type DiscordPluginHandle = ChannelPlugin<ResolvedDiscordAccount> & DiscordPluginRuntimeView;
+/** Construct the plugin instance, capturing per-account runtime state in closure. */
+export declare function createDiscordPlugin(deps: DiscordPluginDeps): DiscordPluginHandle;
+/** Outbound dispatch helper for callers reaching the plugin directly. */
+export type DiscordOutboundTarget = ChannelOutboundTarget;
+//# sourceMappingURL=plugin.d.ts.map

package/dist/agents/channels/discord/plugin.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"plugin.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/plugin.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoCG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,0BAA0B,CAAC;AAK9D,OAAO,EAON,KAAK,cAAc,EAOnB,KAAK,qBAAqB,EAC1B,KAAK,aAAa,EAKlB,KAAK,iBAAiB,EAEtB,MAAM,WAAW,CAAC;AACnB,OAAO,EAMN,KAAK,sBAAsB,EAC3B,MAAM,qBAAqB,CAAC;AAE7B,OAAO,EAAgB,KAAK,kBAAkB,EAAE,MAAM,YAAY,CAAC;AAkBnE,0EAA0E;AAC1E,MAAM,WAAW,iBAAiB;IACjC,qDAAqD;IACrD,cAAc,EAAE,MAAM,CAAC;IACvB,yEAAyE;IACzE,UAAU,EAAE,MAAM,aAAa,CAAC;IAChC,mEAAmE;IACnE,OAAO,EAAE,iBAAiB,CAAC,SAAS,CAAC,CAAC;IACtC;;;OAGG;IACH,cAAc,CAAC,EAAE,CAAC,IAAI,EAAE;QAAE,SAAS,EAAE,MAAM,CAAA;KAAE,KAAK,cAAc,CAAC;CACjE;AAED,+EAA+E;AAC/E,MAAM,WAAW,wBAAwB;IACxC,qCAAqC;IACrC,iBAAiB,IAAI,MAAM,EAAE,CAAC;IAC9B,qFAAqF;IACrF,UAAU,CAAC,SAAS,EAAE,MAAM,GAAG,cAAc,GAAG,SAAS,CAAC;IAC1D,qEAAqE;IACrE,YAAY,CAAC,SAAS,EAAE,MAAM,EAAE,GAAG,EAAE,aAAa,GAAG,OAAO,CAAC,kBAAkB,CAAC,CAAC;CACjF;AAED,+EAA+E;AAC/E,MAAM,MAAM,mBAAmB,GAAG,aAAa,CAAC,sBAAsB,CAAC,GAAG,wBAAwB,CAAC;AAqBnG,qFAAqF;AACrF,wBAAgB,mBAAmB,CAAC,IAAI,EAAE,iBAAiB,GAAG,mBAAmB,CA6NhF;AAOD,yEAAyE;AACzE,MAAM,MAAM,qBAAqB,GAAG,qBAAqB,CAAC"}