@spinabot/brigade 1.6.0 → 1.7.0

package/dist/agents/channels/discord/index.js

@@ -0,0 +1,21 @@
+/** Discord channel — public surface. */
+export { createDiscordAdapter, buildReactionNote, DISCORD_CAPABILITIES, } from "./adapter.js";
+export { listDiscordAccountIds, resolveDiscordAccount, resolveDiscordAutoThread, resolveDiscordBotToken, resolveDiscordPresence, resolveDiscordProxyUrl, discordChannelEnabled, discordLiveStreamEnabled, discordReactionNotifications, discordStreamThrottleMs, discordSurfaceReasoning, discordThreadIdleTtlMs, maskProxyUrl, stripBotPrefix, DISCORD_BOT_TOKEN_ENV_VAR, DISCORD_CHANNEL_ID, DISCORD_DEFAULT_ACCOUNT_ID, } from "./account-config.js";
+export { buildDiscordApprovalMessage, buildDiscordApprovalText, parseDiscordApprovalAction, } from "./approval-native.js";
+export { resolveDiscordApprover } from "./approval-authorize.js";
+export { buildDiscordApprovalRows, buildDiscordButtonRows, sanitizeDiscordCustomId, DISCORD_BUTTON_STYLE, DISCORD_BUTTONS_PER_ROW, DISCORD_CUSTOM_ID_MAX_CHARS, DISCORD_MAX_ROWS, } from "./components.js";
+export { buildDiscordCommandManifest, normalizeDiscordCommandName, } from "./command-menu.js";
+export { connectDiscord, discordBackoffDelay, isDiscordUnauthorized, redactDiscordToken, sanitizeThreadName, } from "./connection.js";
+export { downloadDiscordAttachment, buildDiscordAttachment, isAllowedDiscordAttachmentUrl, } from "./media.js";
+export { markdownToDiscord, discordTextIsEmpty, DISCORD_MESSAGE_LIMIT } from "./format.js";
+export { createDiscordPlugin } from "./plugin.js";
+export { probeDiscord, decodeMessageContentIntent, decodePrivilegedIntents, MESSAGE_CONTENT_DISABLED_WARNING, } from "./probe.js";
+export { listDiscordGuilds } from "./guilds.js";
+export { listDiscordDirectoryPeers, listDiscordDirectoryGroups, } from "./directory-live.js";
+export { auditDiscordChannelPermissions, } from "./permission-audit.js";
+export { collectDiscordStatusIssues } from "./status-issues.js";
+export { collectDiscordSecurityAuditFindings } from "./security-audit.js";
+export { isDiscordMutableAllowEntry, scanDiscordNumericIdHazards, } from "./security-doctor.js";
+export { collectConfiguredDiscordChannelIds } from "./plugin.js";
+export { discordModule } from "./module.js";
+//# sourceMappingURL=index.js.map

package/dist/agents/channels/discord/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/index.ts"],"names":[],"mappings":"AAAA,wCAAwC;AAExC,OAAO,EACN,oBAAoB,EACpB,iBAAiB,EACjB,oBAAoB,GAGpB,MAAM,cAAc,CAAC;AACtB,OAAO,EACN,qBAAqB,EACrB,qBAAqB,EACrB,wBAAwB,EACxB,sBAAsB,EACtB,sBAAsB,EACtB,sBAAsB,EACtB,qBAAqB,EACrB,wBAAwB,EACxB,4BAA4B,EAC5B,uBAAuB,EACvB,uBAAuB,EACvB,sBAAsB,EACtB,YAAY,EACZ,cAAc,EACd,yBAAyB,EACzB,kBAAkB,EAClB,0BAA0B,GAQ1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,2BAA2B,EAC3B,wBAAwB,EACxB,0BAA0B,GAE1B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,sBAAsB,EAAE,MAAM,yBAAyB,CAAC;AACjE,OAAO,EACN,wBAAwB,EACxB,sBAAsB,EACtB,uBAAuB,EACvB,oBAAoB,EACpB,uBAAuB,EACvB,2BAA2B,EAC3B,gBAAgB,GAGhB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,2BAA2B,EAC3B,2BAA2B,GAE3B,MAAM,mBAAmB,CAAC;AAC3B,OAAO,EACN,cAAc,EACd,mBAAmB,EACnB,qBAAqB,EACrB,kBAAkB,EAClB,kBAAkB,GAKlB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,yBAAyB,EACzB,sBAAsB,EACtB,6BAA6B,GAE7B,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAAE,kBAAkB,EAAE,qBAAqB,EAAE,MAAM,aAAa,CAAC;AAC3F,OAAO,EAAE,mBAAmB,EAAoD,MAAM,aAAa,CAAC;AACpG,OAAO,EACN,YAAY,EACZ,0BAA0B,EAC1B,uBAAuB,EACvB,gCAAgC,GAMhC,MAAM,YAAY,CAAC;AACpB,OAAO,EAAE,iBAAiB,EAA4B,MAAM,aAAa,CAAC;AAC1E,OAAO,EACN,yBAAyB,EACzB,0BAA0B,GAG1B,MAAM,qBAAqB,CAAC;AAC7B,OAAO,EACN,8BAA8B,GAG9B,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,0BAA0B,EAA6B,MAAM,oBAAoB,CAAC;AAC3F,OAAO,EAAE,mCAAmC,EAAE,MAAM,qBAAqB,CAAC;AAC1E,OAAO,EACN,0BAA0B,EAC1B,2BAA2B,GAE3B,MAAM,sBAAsB,CAAC;AAC9B,OAAO,EAAE,kCAAkC,EAA8B,MAAM,aAAa,CAAC;AAC7F,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC"}

package/dist/agents/channels/discord/media.d.ts

@@ -0,0 +1,85 @@
+/**
+ * Discord media helpers — inbound download + outbound upload construction.
+ *
+ * INBOUND: a Discord message attachment carries a public CDN `url`
+ * (cdn.discordapp.com / media.discordapp.net). We GET that URL (NO auth header —
+ * Discord attachment URLs are public, unlike Slack's `url_private`) and save the
+ * bytes under `~/.brigade/channels/discord/media/<YYYY-MM-DD>/<id>.<ext>` so the
+ * agent can `read` the attachment by path. In convex mode the cache relocates to
+ * the OS cache dir (never under ~/.brigade, to respect the strict-zero guard).
+ *
+ * OUTBOUND: `buildDiscordAttachment` validates a local path through Brigade's
+ * outbound media-path guard (so a prompt-injected "send ~/.ssh/id_rsa" can't
+ * exfiltrate a secret), then returns the `{ path, name }` the connection wraps
+ * in a discord.js `AttachmentBuilder`. The builder itself lives in the
+ * connection (which imports discord.js); this module stays dependency-light +
+ * unit-testable.
+ *
+ * SSRF GUARD: even though Discord URLs are public, we REQUIRE https + a Discord
+ * CDN host before fetching. Without this a prompt-injected / spoofed message
+ * could carry `http://169.254.169.254/…` (cloud metadata) or any attacker host
+ * and Brigade would fetch it — a classic SSRF. Mirrors `slack/media.ts`.
+ */
+import { type InboundMediaAttachment, type OutboundMedia } from "../sdk.js";
+import { type DiscordAttachmentLike } from "./inbound-extras.js";
+/**
+ * Defensive ceiling on an inbound attachment download. Discord's own per-file
+ * limit is generous (and tiered by server boost); we cap at 50 MB so a huge
+ * upload can't blow out memory. Anything larger is skipped (the message still
+ * reaches the agent without the attachment).
+ */
+declare const MAX_BYTES: number;
+/**
+ * True when `rawUrl` is an https URL whose host is a Discord CDN host (or a
+ * subdomain of one). Anything else (non-https, a non-Discord host, or an
+ * unparseable URL) returns false so the caller refuses to fetch.
+ */
+export declare function isAllowedDiscordAttachmentUrl(rawUrl: string): boolean;
+/**
+ * Bounded retry for the transient attachment fetch. Discord's CDN occasionally
+ * blips on a 5xx or a network reset; one or two quick retries turn a dropped
+ * attachment into a delivered one. The caller still wraps the whole thing in a
+ * try/catch that degrades to `null`, so an exhausted retry never breaks message
+ * delivery. Mirrors `slack/media.ts`'s `withSlackRetry`.
+ */
+export declare function withDiscordRetry<T>(fn: () => Promise<T>, attempts?: number): Promise<T>;
+export interface DownloadDiscordAttachmentArgs {
+    /** The Discord attachment object (from the message's `attachments`). */
+    attachment: DiscordAttachmentLike;
+    /** Injectable fetch (defaults to global fetch) — lets tests stub the download. */
+    fetchImpl?: typeof fetch;
+    /** Logger so a failed download logs without crashing the inbound flow. */
+    log?: (msg: string, meta?: Record<string, unknown>) => void;
+}
+/**
+ * Download one inbound Discord attachment to disk and return its normalized
+ * descriptor, or `null` when it couldn't be fetched (no url / too big / network
+ * error / non-Discord host). Never throws — a download glitch must not break
+ * message delivery.
+ */
+export declare function downloadDiscordAttachment(args: DownloadDiscordAttachmentArgs): Promise<InboundMediaAttachment | null>;
+/** The validated outbound attachment shape the connection wraps in an `AttachmentBuilder`. */
+export interface DiscordOutboundAttachment {
+    /** Local filesystem path (guard-validated). */
+    path: string;
+    /** Display filename. */
+    name: string;
+    /** Optional caption — sent as the message content alongside the file. */
+    caption?: string;
+}
+/**
+ * Validate + shape a local file for outbound upload. Runs the path through
+ * Brigade's outbound media-path guard and throws a clear operator-facing error
+ * when the guard refuses it (the `send_media` tool surfaces it). Returns the
+ * `{ path, name, caption? }` the connection turns into a discord.js
+ * `AttachmentBuilder`.
+ *
+ * Filename precedence: an explicit `media.fileName` wins; otherwise the path's
+ * basename. When the chosen name has NO extension we append one inferred from
+ * `media.kind` (image→png, video→mp4, audio→mp3, voice→ogg) so Discord detects
+ * the file type instead of treating it as an opaque blob (an extensionless
+ * `image` upload otherwise renders as a generic file, not an inline preview).
+ */
+export declare function buildDiscordAttachment(media: OutboundMedia): DiscordOutboundAttachment;
+export { MAX_BYTES as DISCORD_MEDIA_MAX_BYTES };
+//# sourceMappingURL=media.d.ts.map

package/dist/agents/channels/discord/media.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAUH,OAAO,EAA6B,KAAK,sBAAsB,EAAE,KAAK,aAAa,EAAE,MAAM,WAAW,CAAC;AACvG,OAAO,EAAgC,KAAK,qBAAqB,EAAE,MAAM,qBAAqB,CAAC;AAI/F;;;;;GAKG;AACH,QAAA,MAAM,SAAS,QAAmB,CAAC;AAUnC;;;;GAIG;AACH,wBAAgB,6BAA6B,CAAC,MAAM,EAAE,MAAM,GAAG,OAAO,CAUrE;AAuCD;;;;;;GAMG;AACH,wBAAsB,gBAAgB,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,OAAO,CAAC,CAAC,CAAC,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC,CAAC,CAAC,CAWxF;AAED,MAAM,WAAW,6BAA6B;IAC7C,wEAAwE;IACxE,UAAU,EAAE,qBAAqB,CAAC;IAClC,kFAAkF;IAClF,SAAS,CAAC,EAAE,OAAO,KAAK,CAAC;IACzB,0EAA0E;IAC1E,GAAG,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,IAAI,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,KAAK,IAAI,CAAC;CAC5D;AAED;;;;;GAKG;AACH,wBAAsB,yBAAyB,CAAC,IAAI,EAAE,6BAA6B,GAAG,OAAO,CAAC,sBAAsB,GAAG,IAAI,CAAC,CA4D3H;AAED,8FAA8F;AAC9F,MAAM,WAAW,yBAAyB;IACzC,+CAA+C;IAC/C,IAAI,EAAE,MAAM,CAAC;IACb,wBAAwB;IACxB,IAAI,EAAE,MAAM,CAAC;IACb,yEAAyE;IACzE,OAAO,CAAC,EAAE,MAAM,CAAC;CACjB;AAoBD;;;;;;;;;;;;GAYG;AACH,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,aAAa,GAAG,yBAAyB,CAiBtF;AAED,OAAO,EAAE,SAAS,IAAI,uBAAuB,EAAE,CAAC"}

package/dist/agents/channels/discord/media.js

@@ -0,0 +1,242 @@
+/**
+ * Discord media helpers — inbound download + outbound upload construction.
+ *
+ * INBOUND: a Discord message attachment carries a public CDN `url`
+ * (cdn.discordapp.com / media.discordapp.net). We GET that URL (NO auth header —
+ * Discord attachment URLs are public, unlike Slack's `url_private`) and save the
+ * bytes under `~/.brigade/channels/discord/media/<YYYY-MM-DD>/<id>.<ext>` so the
+ * agent can `read` the attachment by path. In convex mode the cache relocates to
+ * the OS cache dir (never under ~/.brigade, to respect the strict-zero guard).
+ *
+ * OUTBOUND: `buildDiscordAttachment` validates a local path through Brigade's
+ * outbound media-path guard (so a prompt-injected "send ~/.ssh/id_rsa" can't
+ * exfiltrate a secret), then returns the `{ path, name }` the connection wraps
+ * in a discord.js `AttachmentBuilder`. The builder itself lives in the
+ * connection (which imports discord.js); this module stays dependency-light +
+ * unit-testable.
+ *
+ * SSRF GUARD: even though Discord URLs are public, we REQUIRE https + a Discord
+ * CDN host before fetching. Without this a prompt-injected / spoofed message
+ * could carry `http://169.254.169.254/…` (cloud metadata) or any attacker host
+ * and Brigade would fetch it — a classic SSRF. Mirrors `slack/media.ts`.
+ */
+import { mkdirSync, writeFileSync } from "node:fs";
+import path from "node:path";
+import { resolveChannelStateDir, resolveOsCacheDir } from "../../../config/paths.js";
+import { tryGetRuntimeContext } from "../../../storage/runtime-context.js";
+// Channel SDK barrel — the outbound-media exfil guard + the contract types. All
+// contract types come from the channel SDK barrel so the channel is built
+// entirely on `../sdk.js`.
+import { validateOutboundMediaPath } from "../sdk.js";
+import { resolveDiscordAttachmentKind } from "./inbound-extras.js";
+const CHANNEL_ID = "discord";
+/**
+ * Defensive ceiling on an inbound attachment download. Discord's own per-file
+ * limit is generous (and tiered by server boost); we cap at 50 MB so a huge
+ * upload can't blow out memory. Anything larger is skipped (the message still
+ * reaches the agent without the attachment).
+ */
+const MAX_BYTES = 50 * 1024 * 1024;
+/**
+ * Discord's attachment-CDN hosts. An inbound attachment `url` only ever points
+ * at one of these — before fetching we REQUIRE https + a Discord host so a
+ * spoofed message can't make Brigade fetch an arbitrary internal URL (SSRF).
+ * Subdomains of these hosts are allowed.
+ */
+const DISCORD_CDN_HOSTS = ["cdn.discordapp.com", "media.discordapp.net", "cdn.discord.com"];
+/**
+ * True when `rawUrl` is an https URL whose host is a Discord CDN host (or a
+ * subdomain of one). Anything else (non-https, a non-Discord host, or an
+ * unparseable URL) returns false so the caller refuses to fetch.
+ */
+export function isAllowedDiscordAttachmentUrl(rawUrl) {
+    let parsed;
+    try {
+        parsed = new URL(rawUrl);
+    }
+    catch {
+        return false;
+    }
+    if (parsed.protocol !== "https:")
+        return false;
+    const host = parsed.hostname.toLowerCase();
+    return DISCORD_CDN_HOSTS.some((h) => host === h || host.endsWith(`.${h}`));
+}
+/** YYYY-MM-DD (UTC) bucket — stable filename grouping for grep / review. */
+function dayBucket() {
+    const d = new Date();
+    const pad = (x) => String(x).padStart(2, "0");
+    return `${d.getUTCFullYear()}-${pad(d.getUTCMonth() + 1)}-${pad(d.getUTCDate())}`;
+}
+/** Derive a file extension from a Discord attachment (filename / content-type / kind). */
+function extFromAttachment(att, kind) {
+    const name = (att.name ?? "").toLowerCase();
+    const fromName = name.includes(".") ? name.slice(name.lastIndexOf(".") + 1).replace(/[^a-z0-9]/g, "") : "";
+    if (fromName && /^[a-z0-9]+$/.test(fromName))
+        return fromName;
+    const mime = (att.contentType ?? "").toLowerCase();
+    const fromMime = mime.includes("/") ? mime.slice(mime.lastIndexOf("/") + 1).split(";")[0]?.replace(/[^a-z0-9]/g, "") : "";
+    if (fromMime && /^[a-z0-9]+$/.test(fromMime))
+        return fromMime;
+    // Sensible default by kind when nothing carried an extension.
+    switch (kind) {
+        case "image":
+            return "png";
+        case "video":
+            return "mp4";
+        case "voice":
+            return "ogg";
+        case "audio":
+            return "mp3";
+        default:
+            return "bin";
+    }
+}
+/** Where downloaded media lands — OS cache in convex mode, channel-state dir otherwise. */
+function mediaBaseDir() {
+    return tryGetRuntimeContext()?.mode === "convex"
+        ? path.join(resolveOsCacheDir(), "channels", CHANNEL_ID)
+        : resolveChannelStateDir(CHANNEL_ID);
+}
+/**
+ * Bounded retry for the transient attachment fetch. Discord's CDN occasionally
+ * blips on a 5xx or a network reset; one or two quick retries turn a dropped
+ * attachment into a delivered one. The caller still wraps the whole thing in a
+ * try/catch that degrades to `null`, so an exhausted retry never breaks message
+ * delivery. Mirrors `slack/media.ts`'s `withSlackRetry`.
+ */
+export async function withDiscordRetry(fn, attempts = 3) {
+    let lastErr;
+    for (let i = 0; i < attempts; i++) {
+        try {
+            return await fn();
+        }
+        catch (err) {
+            lastErr = err;
+            if (i < attempts - 1)
+                await new Promise((r) => setTimeout(r, 200 * 2 ** i));
+        }
+    }
+    throw lastErr;
+}
+/**
+ * Download one inbound Discord attachment to disk and return its normalized
+ * descriptor, or `null` when it couldn't be fetched (no url / too big / network
+ * error / non-Discord host). Never throws — a download glitch must not break
+ * message delivery.
+ */
+export async function downloadDiscordAttachment(args) {
+    const { attachment, log } = args;
+    const doFetch = args.fetchImpl ?? fetch;
+    const url = attachment.url || attachment.proxyURL;
+    if (!url) {
+        log?.("discord attachment skipped — no url", { id: attachment.id });
+        return null;
+    }
+    // SSRF guard: REFUSE any url that isn't https on a Discord CDN host — a spoofed
+    // message pointing at `http://169.254.169.254/…` (or any attacker host) must
+    // never be fetched. Checked BEFORE the fetch.
+    if (!isAllowedDiscordAttachmentUrl(url)) {
+        log?.("discord attachment skipped — url is not an allowed Discord CDN host (SSRF guard)", { id: attachment.id });
+        return null;
+    }
+    if (typeof attachment.size === "number" && attachment.size > MAX_BYTES) {
+        log?.("discord attachment skipped — exceeds size cap", { id: attachment.id, bytes: attachment.size, cap: MAX_BYTES });
+        return null;
+    }
+    const kind = resolveDiscordAttachmentKind(attachment);
+    try {
+        const res = await withDiscordRetry(async () => {
+            // `redirect: "manual"` so a cross-origin 30x can't carry the request off to
+            // a non-Discord host. A redirect surfaces as a non-ok response and falls
+            // through to the `!r.ok` handler below.
+            const r = await doFetch(url, { redirect: "manual" });
+            // Retry 5xx (transient CDN blip); a 4xx falls through to the !ok handler.
+            if (!r.ok && r.status >= 500)
+                throw new Error(`discord attachment fetch failed (${r.status})`);
+            return r;
+        });
+        if (!res.ok) {
+            log?.("discord attachment download failed", { id: attachment.id, status: res.status });
+            return null;
+        }
+        const buf = Buffer.from(await res.arrayBuffer());
+        if (buf.length === 0)
+            return null;
+        if (buf.length > MAX_BYTES) {
+            log?.("discord attachment skipped — exceeds size cap", { id: attachment.id, bytes: buf.length, cap: MAX_BYTES });
+            return null;
+        }
+        const dir = path.join(mediaBaseDir(), "media", dayBucket());
+        mkdirSync(dir, { recursive: true });
+        // attachment.id is stable; use it as the filename so the same media resolves
+        // idempotently. Fall back to a timestamp.
+        const baseName = (attachment.id || `discord_${Date.now()}`).replace(/[^A-Za-z0-9_-]/g, "_");
+        const dest = path.join(dir, `${baseName}.${extFromAttachment(attachment, kind)}`);
+        writeFileSync(dest, buf, { mode: 0o600 });
+        return {
+            kind,
+            path: dest,
+            ...(attachment.contentType ? { mimeType: attachment.contentType } : {}),
+            ...(attachment.name ? { fileName: attachment.name } : {}),
+        };
+    }
+    catch (err) {
+        log?.("discord attachment download failed", {
+            id: attachment.id,
+            error: err instanceof Error ? err.message : String(err),
+        });
+        return null;
+    }
+}
+/** Default outbound file extension by media kind (used when the path has none). */
+function outboundExtForKind(kind) {
+    switch (kind) {
+        case "image":
+            return "png";
+        case "video":
+            return "mp4";
+        case "voice":
+            return "ogg";
+        case "audio":
+            return "mp3";
+        default:
+            // document / sticker / anything else: leave extensionless (Discord falls
+            // back to the content the byte-sniff detects).
+            return "";
+    }
+}
+/**
+ * Validate + shape a local file for outbound upload. Runs the path through
+ * Brigade's outbound media-path guard and throws a clear operator-facing error
+ * when the guard refuses it (the `send_media` tool surfaces it). Returns the
+ * `{ path, name, caption? }` the connection turns into a discord.js
+ * `AttachmentBuilder`.
+ *
+ * Filename precedence: an explicit `media.fileName` wins; otherwise the path's
+ * basename. When the chosen name has NO extension we append one inferred from
+ * `media.kind` (image→png, video→mp4, audio→mp3, voice→ogg) so Discord detects
+ * the file type instead of treating it as an opaque blob (an extensionless
+ * `image` upload otherwise renders as a generic file, not an inline preview).
+ */
+export function buildDiscordAttachment(media) {
+    const verdict = validateOutboundMediaPath(media.path);
+    if (!verdict.ok) {
+        throw new Error(`Discord: ${verdict.reason ?? "refusing to attach this file"}`);
+    }
+    let name = media.fileName || path.basename(media.path) || "file";
+    // No extension on the resolved name → infer one from the media kind so Discord
+    // type-detects the attachment. `path.extname` returns "" when there's no dot.
+    if (!path.extname(name)) {
+        const ext = outboundExtForKind(media.kind);
+        if (ext)
+            name = `${name}.${ext}`;
+    }
+    return {
+        path: media.path,
+        name,
+        ...(media.caption ? { caption: media.caption } : {}),
+    };
+}
+export { MAX_BYTES as DISCORD_MEDIA_MAX_BYTES };
+//# sourceMappingURL=media.js.map

package/dist/agents/channels/discord/media.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"media.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/media.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,SAAS,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AACnD,OAAO,IAAI,MAAM,WAAW,CAAC;AAE7B,OAAO,EAAE,sBAAsB,EAAE,iBAAiB,EAAE,MAAM,0BAA0B,CAAC;AACrF,OAAO,EAAE,oBAAoB,EAAE,MAAM,qCAAqC,CAAC;AAC3E,gFAAgF;AAChF,0EAA0E;AAC1E,2BAA2B;AAC3B,OAAO,EAAE,yBAAyB,EAAmD,MAAM,WAAW,CAAC;AACvG,OAAO,EAAE,4BAA4B,EAA8B,MAAM,qBAAqB,CAAC;AAE/F,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B;;;;;GAKG;AACH,MAAM,SAAS,GAAG,EAAE,GAAG,IAAI,GAAG,IAAI,CAAC;AAEnC;;;;;GAKG;AACH,MAAM,iBAAiB,GAAG,CAAC,oBAAoB,EAAE,sBAAsB,EAAE,iBAAiB,CAAC,CAAC;AAE5F;;;;GAIG;AACH,MAAM,UAAU,6BAA6B,CAAC,MAAc;IAC3D,IAAI,MAAW,CAAC;IAChB,IAAI,CAAC;QACJ,MAAM,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,CAAC;IAC1B,CAAC;IAAC,MAAM,CAAC;QACR,OAAO,KAAK,CAAC;IACd,CAAC;IACD,IAAI,MAAM,CAAC,QAAQ,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC/C,MAAM,IAAI,GAAG,MAAM,CAAC,QAAQ,CAAC,WAAW,EAAE,CAAC;IAC3C,OAAO,iBAAiB,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,IAAI,KAAK,CAAC,IAAI,IAAI,CAAC,QAAQ,CAAC,IAAI,CAAC,EAAE,CAAC,CAAC,CAAC;AAC5E,CAAC;AAED,4EAA4E;AAC5E,SAAS,SAAS;IACjB,MAAM,CAAC,GAAG,IAAI,IAAI,EAAE,CAAC;IACrB,MAAM,GAAG,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC;IACtD,OAAO,GAAG,CAAC,CAAC,cAAc,EAAE,IAAI,GAAG,CAAC,CAAC,CAAC,WAAW,EAAE,GAAG,CAAC,CAAC,IAAI,GAAG,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,EAAE,CAAC;AACnF,CAAC;AAED,0FAA0F;AAC1F,SAAS,iBAAiB,CAAC,GAA0B,EAAE,IAAoC;IAC1F,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,IAAI,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IAC5C,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3G,IAAI,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,MAAM,IAAI,GAAG,CAAC,GAAG,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,WAAW,EAAE,CAAC;IACnD,MAAM,QAAQ,GAAG,IAAI,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,WAAW,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC1H,IAAI,QAAQ,IAAI,aAAa,CAAC,IAAI,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC;IAC9D,8DAA8D;IAC9D,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd;YACC,OAAO,KAAK,CAAC;IACf,CAAC;AACF,CAAC;AAED,2FAA2F;AAC3F,SAAS,YAAY;IACpB,OAAO,oBAAoB,EAAE,EAAE,IAAI,KAAK,QAAQ;QAC/C,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,iBAAiB,EAAE,EAAE,UAAU,EAAE,UAAU,CAAC;QACxD,CAAC,CAAC,sBAAsB,CAAC,UAAU,CAAC,CAAC;AACvC,CAAC;AAED;;;;;;GAMG;AACH,MAAM,CAAC,KAAK,UAAU,gBAAgB,CAAI,EAAoB,EAAE,QAAQ,GAAG,CAAC;IAC3E,IAAI,OAAgB,CAAC;IACrB,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,EAAE,CAAC,EAAE,EAAE,CAAC;QACnC,IAAI,CAAC;YACJ,OAAO,MAAM,EAAE,EAAE,CAAC;QACnB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACd,OAAO,GAAG,GAAG,CAAC;YACd,IAAI,CAAC,GAAG,QAAQ,GAAG,CAAC;gBAAE,MAAM,IAAI,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,UAAU,CAAC,CAAC,EAAE,GAAG,GAAG,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;QAC7E,CAAC;IACF,CAAC;IACD,MAAM,OAAO,CAAC;AACf,CAAC;AAWD;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,yBAAyB,CAAC,IAAmC;IAClF,MAAM,EAAE,UAAU,EAAE,GAAG,EAAE,GAAG,IAAI,CAAC;IACjC,MAAM,OAAO,GAAG,IAAI,CAAC,SAAS,IAAI,KAAK,CAAC;IACxC,MAAM,GAAG,GAAG,UAAU,CAAC,GAAG,IAAI,UAAU,CAAC,QAAQ,CAAC;IAClD,IAAI,CAAC,GAAG,EAAE,CAAC;QACV,GAAG,EAAE,CAAC,qCAAqC,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACpE,OAAO,IAAI,CAAC;IACb,CAAC;IACD,gFAAgF;IAChF,6EAA6E;IAC7E,8CAA8C;IAC9C,IAAI,CAAC,6BAA6B,CAAC,GAAG,CAAC,EAAE,CAAC;QACzC,GAAG,EAAE,CAAC,kFAAkF,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,CAAC,CAAC;QACjH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,IAAI,OAAO,UAAU,CAAC,IAAI,KAAK,QAAQ,IAAI,UAAU,CAAC,IAAI,GAAG,SAAS,EAAE,CAAC;QACxE,GAAG,EAAE,CAAC,+CAA+C,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,UAAU,CAAC,IAAI,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;QACtH,OAAO,IAAI,CAAC;IACb,CAAC;IACD,MAAM,IAAI,GAAG,4BAA4B,CAAC,UAAU,CAAC,CAAC;IACtD,IAAI,CAAC;QACJ,MAAM,GAAG,GAAG,MAAM,gBAAgB,CAAC,KAAK,IAAI,EAAE;YAC7C,4EAA4E;YAC5E,yEAAyE;YACzE,wCAAwC;YACxC,MAAM,CAAC,GAAG,MAAM,OAAO,CAAC,GAAG,EAAE,EAAE,QAAQ,EAAE,QAAQ,EAAE,CAAC,CAAC;YACrD,0EAA0E;YAC1E,IAAI,CAAC,CAAC,CAAC,EAAE,IAAI,CAAC,CAAC,MAAM,IAAI,GAAG;gBAAE,MAAM,IAAI,KAAK,CAAC,oCAAoC,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC;YAC/F,OAAO,CAAC,CAAC;QACV,CAAC,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACb,GAAG,EAAE,CAAC,oCAAoC,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,MAAM,EAAE,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;YACvF,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;QACjD,IAAI,GAAG,CAAC,MAAM,KAAK,CAAC;YAAE,OAAO,IAAI,CAAC;QAClC,IAAI,GAAG,CAAC,MAAM,GAAG,SAAS,EAAE,CAAC;YAC5B,GAAG,EAAE,CAAC,+CAA+C,EAAE,EAAE,EAAE,EAAE,UAAU,CAAC,EAAE,EAAE,KAAK,EAAE,GAAG,CAAC,MAAM,EAAE,GAAG,EAAE,SAAS,EAAE,CAAC,CAAC;YACjH,OAAO,IAAI,CAAC;QACb,CAAC;QACD,MAAM,GAAG,GAAG,IAAI,CAAC,IAAI,CAAC,YAAY,EAAE,EAAE,OAAO,EAAE,SAAS,EAAE,CAAC,CAAC;QAC5D,SAAS,CAAC,GAAG,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACpC,6EAA6E;QAC7E,0CAA0C;QAC1C,MAAM,QAAQ,GAAG,CAAC,UAAU,CAAC,EAAE,IAAI,WAAW,IAAI,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC,OAAO,CAAC,iBAAiB,EAAE,GAAG,CAAC,CAAC;QAC5F,MAAM,IAAI,GAAG,IAAI,CAAC,IAAI,CAAC,GAAG,EAAE,GAAG,QAAQ,IAAI,iBAAiB,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,CAAC,CAAC;QAClF,aAAa,CAAC,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;QAC1C,OAAO;YACN,IAAI;YACJ,IAAI,EAAE,IAAI;YACV,GAAG,CAAC,UAAU,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YACvE,GAAG,CAAC,UAAU,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,UAAU,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SACzD,CAAC;IACH,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACd,GAAG,EAAE,CAAC,oCAAoC,EAAE;YAC3C,EAAE,EAAE,UAAU,CAAC,EAAE;YACjB,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;SACvD,CAAC,CAAC;QACH,OAAO,IAAI,CAAC;IACb,CAAC;AACF,CAAC;AAYD,mFAAmF;AACnF,SAAS,kBAAkB,CAAC,IAA2B;IACtD,QAAQ,IAAI,EAAE,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd,KAAK,OAAO;YACX,OAAO,KAAK,CAAC;QACd;YACC,yEAAyE;YACzE,+CAA+C;YAC/C,OAAO,EAAE,CAAC;IACZ,CAAC;AACF,CAAC;AAED;;;;;;;;;;;;GAYG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAoB;IAC1D,MAAM,OAAO,GAAG,yBAAyB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IACtD,IAAI,CAAC,OAAO,CAAC,EAAE,EAAE,CAAC;QACjB,MAAM,IAAI,KAAK,CAAC,YAAY,OAAO,CAAC,MAAM,IAAI,8BAA8B,EAAE,CAAC,CAAC;IACjF,CAAC;IACD,IAAI,IAAI,GAAG,KAAK,CAAC,QAAQ,IAAI,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,CAAC,IAAI,MAAM,CAAC;IACjE,+EAA+E;IAC/E,8EAA8E;IAC9E,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,CAAC;QACzB,MAAM,GAAG,GAAG,kBAAkB,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;QAC3C,IAAI,GAAG;YAAE,IAAI,GAAG,GAAG,IAAI,IAAI,GAAG,EAAE,CAAC;IAClC,CAAC;IACD,OAAO;QACN,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,IAAI;QACJ,GAAG,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC;AACH,CAAC;AAED,OAAO,EAAE,SAAS,IAAI,uBAAuB,EAAE,CAAC"}

package/dist/agents/channels/discord/modal-registry.d.ts

@@ -0,0 +1,89 @@
+/**
+ * In-memory registry of pending Discord modal (form) definitions (Fix 3b).
+ *
+ * A Discord modal carries up to five text-input fields, each with a label,
+ * style, placeholder, and required flag. A modal is OPENED by pressing a
+ * "modal-trigger" button; on submit Discord delivers the field values keyed by
+ * each field's custom_id. The full field definition is far larger than the
+ * 100-char `custom_id` budget a button/modal can carry, so it CANNOT ride inline
+ * — hence this small side registry. The trigger button + the modal both carry
+ * only a short `modal:<modalId>` marker; the heavy definition lives here, keyed
+ * by that id.
+ *
+ * Entries expire after {@link MODAL_ENTRY_TTL_MS} so a never-submitted form
+ * doesn't leak. `consume` removes the entry (a modal is single-use by default);
+ * `get` peeks without removing (for the trigger → showModal lookup). A
+ * reset hook is exported for tests.
+ *
+ * Pure module-level state — no I/O.
+ */
+/** A modal lives for 30 minutes before it's reaped (the form was abandoned). */
+export declare const MODAL_ENTRY_TTL_MS: number;
+/** Discord supports at most 5 inputs per modal. */
+export declare const DISCORD_MODAL_FIELD_MAX = 5;
+/** discord.js `TextInputStyle` values (Short = single line, Paragraph = multi-line). */
+export declare const DISCORD_TEXT_INPUT_STYLE: {
+    readonly short: 1;
+    readonly paragraph: 2;
+};
+/** A single text-input field definition for a modal. */
+export interface DiscordModalField {
+    /** Field custom_id — Discord echoes this back keying the submitted value. */
+    id: string;
+    /** Label shown above the input. */
+    label: string;
+    /** `short` (single line) or `paragraph` (multi-line). Defaults to `short`. */
+    style?: "short" | "paragraph";
+    /** Whether the field must be filled before submit (default true). */
+    required?: boolean;
+    /** Placeholder hint shown in the empty input. */
+    placeholder?: string;
+}
+/** A registered modal definition (the heavy form spec the custom_id can't carry). */
+export interface DiscordModalEntry {
+    /** Modal heading shown above the form. */
+    title: string;
+    /** Text-input fields (1..5). */
+    fields: DiscordModalField[];
+    /** Session the form belongs to (so a submit routes back to the right turn). */
+    sessionKey?: string;
+    /** Agent that attached the form. */
+    agentId?: string;
+    /** Account namespace. */
+    accountId?: string;
+    /** Optional allowlist of user ids permitted to submit. */
+    allowedUsers?: string[];
+    /** Epoch ms the entry was registered. */
+    createdAt: number;
+    /** Epoch ms the entry expires. */
+    expiresAt: number;
+}
+/** What a caller supplies when registering a modal (timestamps are filled in). */
+export interface DiscordModalRegistration {
+    /** Modal heading (defaults to "Form" when empty). */
+    title?: string;
+    fields: DiscordModalField[];
+    sessionKey?: string;
+    agentId?: string;
+    accountId?: string;
+    allowedUsers?: string[];
+}
+/** Mint a short, unique modal id (fits the `modal:<id>` marker budget). */
+export declare function nextDiscordModalId(): string;
+/**
+ * Register a modal definition, returning the modal id the trigger button carries.
+ * The entry expires after {@link MODAL_ENTRY_TTL_MS}. Fields beyond the Discord
+ * 5-input cap are dropped.
+ */
+export declare function registerDiscordModal(reg: DiscordModalRegistration): string;
+/** Peek at a registered modal WITHOUT removing it (the trigger → showModal lookup). */
+export declare function getDiscordModal(modalId: string): DiscordModalEntry | undefined;
+/**
+ * Consume a registered modal — return it AND remove it (a modal is single-use, so
+ * a second submit of the same id degrades gracefully to `undefined`). Returns
+ * `undefined` for a missing / expired id.
+ */
+export declare function consumeDiscordModal(modalId: string): DiscordModalEntry | undefined;
+/** TEST-ONLY: clear the registry + reset the clock + id counter. */
+export declare function __resetDiscordModalRegistryForTest(clock?: () => number): void;
+//# sourceMappingURL=modal-registry.d.ts.map

package/dist/agents/channels/discord/modal-registry.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"modal-registry.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/modal-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,gFAAgF;AAChF,eAAO,MAAM,kBAAkB,QAAkB,CAAC;AAElD,mDAAmD;AACnD,eAAO,MAAM,uBAAuB,IAAI,CAAC;AAEzC,wFAAwF;AACxF,eAAO,MAAM,wBAAwB;;;CAG3B,CAAC;AAEX,wDAAwD;AACxD,MAAM,WAAW,iBAAiB;IACjC,6EAA6E;IAC7E,EAAE,EAAE,MAAM,CAAC;IACX,mCAAmC;IACnC,KAAK,EAAE,MAAM,CAAC;IACd,8EAA8E;IAC9E,KAAK,CAAC,EAAE,OAAO,GAAG,WAAW,CAAC;IAC9B,qEAAqE;IACrE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,iDAAiD;IACjD,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,qFAAqF;AACrF,MAAM,WAAW,iBAAiB;IACjC,0CAA0C;IAC1C,KAAK,EAAE,MAAM,CAAC;IACd,gCAAgC;IAChC,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,+EAA+E;IAC/E,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,oCAAoC;IACpC,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,yBAAyB;IACzB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,0DAA0D;IAC1D,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,yCAAyC;IACzC,SAAS,EAAE,MAAM,CAAC;IAClB,kCAAkC;IAClC,SAAS,EAAE,MAAM,CAAC;CAClB;AAED,kFAAkF;AAClF,MAAM,WAAW,wBAAwB;IACxC,qDAAqD;IACrD,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,iBAAiB,EAAE,CAAC;IAC5B,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;CACxB;AAWD,2EAA2E;AAC3E,wBAAgB,kBAAkB,IAAI,MAAM,CAG3C;AAUD;;;;GAIG;AACH,wBAAgB,oBAAoB,CAAC,GAAG,EAAE,wBAAwB,GAAG,MAAM,CAiB1E;AAED,uFAAuF;AACvF,wBAAgB,eAAe,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAS9E;AAED;;;;GAIG;AACH,wBAAgB,mBAAmB,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,GAAG,SAAS,CAIlF;AAED,oEAAoE;AACpE,wBAAgB,kCAAkC,CAAC,KAAK,CAAC,EAAE,MAAM,MAAM,GAAG,IAAI,CAI7E"}

package/dist/agents/channels/discord/modal-registry.js

@@ -0,0 +1,104 @@
+/**
+ * In-memory registry of pending Discord modal (form) definitions (Fix 3b).
+ *
+ * A Discord modal carries up to five text-input fields, each with a label,
+ * style, placeholder, and required flag. A modal is OPENED by pressing a
+ * "modal-trigger" button; on submit Discord delivers the field values keyed by
+ * each field's custom_id. The full field definition is far larger than the
+ * 100-char `custom_id` budget a button/modal can carry, so it CANNOT ride inline
+ * — hence this small side registry. The trigger button + the modal both carry
+ * only a short `modal:<modalId>` marker; the heavy definition lives here, keyed
+ * by that id.
+ *
+ * Entries expire after {@link MODAL_ENTRY_TTL_MS} so a never-submitted form
+ * doesn't leak. `consume` removes the entry (a modal is single-use by default);
+ * `get` peeks without removing (for the trigger → showModal lookup). A
+ * reset hook is exported for tests.
+ *
+ * Pure module-level state — no I/O.
+ */
+/** A modal lives for 30 minutes before it's reaped (the form was abandoned). */
+export const MODAL_ENTRY_TTL_MS = 30 * 60 * 1_000;
+/** Discord supports at most 5 inputs per modal. */
+export const DISCORD_MODAL_FIELD_MAX = 5;
+/** discord.js `TextInputStyle` values (Short = single line, Paragraph = multi-line). */
+export const DISCORD_TEXT_INPUT_STYLE = {
+    short: 1,
+    paragraph: 2,
+};
+/** modalId → entry. Insertion-ordered; pruned lazily on access. */
+const registry = new Map();
+/** Monotonic counter feeding the generated modal ids (collision-free per process). */
+let modalSeq = 0;
+/** A clock seam so tests can drive expiry deterministically. */
+let nowFn = () => Date.now();
+/** Mint a short, unique modal id (fits the `modal:<id>` marker budget). */
+export function nextDiscordModalId() {
+    modalSeq += 1;
+    return `m${modalSeq.toString(36)}${nowFn().toString(36).slice(-4)}`;
+}
+/** Drop every entry whose `expiresAt` is in the past. */
+function pruneExpired() {
+    const now = nowFn();
+    for (const [id, entry] of registry) {
+        if (entry.expiresAt <= now)
+            registry.delete(id);
+    }
+}
+/**
+ * Register a modal definition, returning the modal id the trigger button carries.
+ * The entry expires after {@link MODAL_ENTRY_TTL_MS}. Fields beyond the Discord
+ * 5-input cap are dropped.
+ */
+export function registerDiscordModal(reg) {
+    pruneExpired();
+    const id = nextDiscordModalId();
+    const now = nowFn();
+    const fields = (reg.fields ?? []).slice(0, DISCORD_MODAL_FIELD_MAX);
+    const entry = {
+        title: (reg.title ?? "").trim() || "Form",
+        fields,
+        createdAt: now,
+        expiresAt: now + MODAL_ENTRY_TTL_MS,
+    };
+    if (reg.sessionKey !== undefined)
+        entry.sessionKey = reg.sessionKey;
+    if (reg.agentId !== undefined)
+        entry.agentId = reg.agentId;
+    if (reg.accountId !== undefined)
+        entry.accountId = reg.accountId;
+    if (reg.allowedUsers !== undefined)
+        entry.allowedUsers = reg.allowedUsers;
+    registry.set(id, entry);
+    return id;
+}
+/** Peek at a registered modal WITHOUT removing it (the trigger → showModal lookup). */
+export function getDiscordModal(modalId) {
+    pruneExpired();
+    const entry = registry.get(modalId);
+    if (!entry)
+        return undefined;
+    if (entry.expiresAt <= nowFn()) {
+        registry.delete(modalId);
+        return undefined;
+    }
+    return entry;
+}
+/**
+ * Consume a registered modal — return it AND remove it (a modal is single-use, so
+ * a second submit of the same id degrades gracefully to `undefined`). Returns
+ * `undefined` for a missing / expired id.
+ */
+export function consumeDiscordModal(modalId) {
+    const entry = getDiscordModal(modalId);
+    if (entry)
+        registry.delete(modalId);
+    return entry;
+}
+/** TEST-ONLY: clear the registry + reset the clock + id counter. */
+export function __resetDiscordModalRegistryForTest(clock) {
+    registry.clear();
+    modalSeq = 0;
+    nowFn = clock ?? (() => Date.now());
+}
+//# sourceMappingURL=modal-registry.js.map

package/dist/agents/channels/discord/modal-registry.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"modal-registry.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/modal-registry.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,gFAAgF;AAChF,MAAM,CAAC,MAAM,kBAAkB,GAAG,EAAE,GAAG,EAAE,GAAG,KAAK,CAAC;AAElD,mDAAmD;AACnD,MAAM,CAAC,MAAM,uBAAuB,GAAG,CAAC,CAAC;AAEzC,wFAAwF;AACxF,MAAM,CAAC,MAAM,wBAAwB,GAAG;IACvC,KAAK,EAAE,CAAC;IACR,SAAS,EAAE,CAAC;CACH,CAAC;AA+CX,mEAAmE;AACnE,MAAM,QAAQ,GAAG,IAAI,GAAG,EAA6B,CAAC;AAEtD,sFAAsF;AACtF,IAAI,QAAQ,GAAG,CAAC,CAAC;AAEjB,gEAAgE;AAChE,IAAI,KAAK,GAAiB,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC;AAE3C,2EAA2E;AAC3E,MAAM,UAAU,kBAAkB;IACjC,QAAQ,IAAI,CAAC,CAAC;IACd,OAAO,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,QAAQ,CAAC,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;AACrE,CAAC;AAED,yDAAyD;AACzD,SAAS,YAAY;IACpB,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,KAAK,MAAM,CAAC,EAAE,EAAE,KAAK,CAAC,IAAI,QAAQ,EAAE,CAAC;QACpC,IAAI,KAAK,CAAC,SAAS,IAAI,GAAG;YAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC;IACjD,CAAC;AACF,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oBAAoB,CAAC,GAA6B;IACjE,YAAY,EAAE,CAAC;IACf,MAAM,EAAE,GAAG,kBAAkB,EAAE,CAAC;IAChC,MAAM,GAAG,GAAG,KAAK,EAAE,CAAC;IACpB,MAAM,MAAM,GAAG,CAAC,GAAG,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,uBAAuB,CAAC,CAAC;IACpE,MAAM,KAAK,GAAsB;QAChC,KAAK,EAAE,CAAC,GAAG,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,IAAI,MAAM;QACzC,MAAM;QACN,SAAS,EAAE,GAAG;QACd,SAAS,EAAE,GAAG,GAAG,kBAAkB;KACnC,CAAC;IACF,IAAI,GAAG,CAAC,UAAU,KAAK,SAAS;QAAE,KAAK,CAAC,UAAU,GAAG,GAAG,CAAC,UAAU,CAAC;IACpE,IAAI,GAAG,CAAC,OAAO,KAAK,SAAS;QAAE,KAAK,CAAC,OAAO,GAAG,GAAG,CAAC,OAAO,CAAC;IAC3D,IAAI,GAAG,CAAC,SAAS,KAAK,SAAS;QAAE,KAAK,CAAC,SAAS,GAAG,GAAG,CAAC,SAAS,CAAC;IACjE,IAAI,GAAG,CAAC,YAAY,KAAK,SAAS;QAAE,KAAK,CAAC,YAAY,GAAG,GAAG,CAAC,YAAY,CAAC;IAC1E,QAAQ,CAAC,GAAG,CAAC,EAAE,EAAE,KAAK,CAAC,CAAC;IACxB,OAAO,EAAE,CAAC;AACX,CAAC;AAED,uFAAuF;AACvF,MAAM,UAAU,eAAe,CAAC,OAAe;IAC9C,YAAY,EAAE,CAAC;IACf,MAAM,KAAK,GAAG,QAAQ,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACpC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,KAAK,CAAC,SAAS,IAAI,KAAK,EAAE,EAAE,CAAC;QAChC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;QACzB,OAAO,SAAS,CAAC;IAClB,CAAC;IACD,OAAO,KAAK,CAAC;AACd,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,mBAAmB,CAAC,OAAe;IAClD,MAAM,KAAK,GAAG,eAAe,CAAC,OAAO,CAAC,CAAC;IACvC,IAAI,KAAK;QAAE,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC;IACpC,OAAO,KAAK,CAAC;AACd,CAAC;AAED,oEAAoE;AACpE,MAAM,UAAU,kCAAkC,CAAC,KAAoB;IACtE,QAAQ,CAAC,KAAK,EAAE,CAAC;IACjB,QAAQ,GAAG,CAAC,CAAC;IACb,KAAK,GAAG,KAAK,IAAI,CAAC,GAAG,EAAE,CAAC,IAAI,CAAC,GAAG,EAAE,CAAC,CAAC;AACrC,CAAC"}