@spinabot/brigade 1.6.0 → 1.7.0

package/dist/agents/channels/discord/rest-components.d.ts

@@ -0,0 +1,122 @@
+/**
+ * Discord REST-JSON component serializers (Fix A1).
+ *
+ * The Phase-3 builders (`components.ts` / `component-blocks.ts`) emit discord.js
+ * *Builder* objects for the GATEWAY `sendInteractive` path. The `discord_action`
+ * tool, however, talks straight to Discord REST v10 (`rest-actions.ts`), which
+ * needs RAW component JSON — the on-the-wire shape Discord documents, identical
+ * whether discord.js serialized it or we did.
+ *
+ * This module turns high-level STRUCTURED specs (selects / modal triggers / V2
+ * blocks) into that raw JSON, carrying the SAME custom_id codecs the press-
+ * routing in `connection.ts handleInteraction` already understands:
+ *
+ *   - SELECT rows get a `custom_id` prefixed with {@link GENERAL_CALLBACK_PREFIX}
+ *     (via {@link buildDiscordSelectRow}) so a selection routes through the
+ *     general-callback branch → `callbackQuery{ data, values }`.
+ *   - MODAL triggers register the heavy form in `modal-registry.ts` and emit a
+ *     button whose `custom_id` is the `modal:<id>` marker `handleInteraction`
+ *     recognizes → `showModal`.
+ *   - V2 blocks become Components-V2 JSON; the caller sets the `IsComponentsV2`
+ *     message flag (1 << 15) and moves all text into TextDisplay blocks.
+ *
+ * Pure / deterministic — no I/O, no discord.js, no globals. Returns a discriminated
+ * result so the tool can surface a clean validation error instead of shipping a
+ * half-built component Discord would 400 on.
+ */
+import { type DiscordButtonStyleValue, type DiscordSelectKind, type DiscordSelectOption } from "./components.js";
+import { type DiscordBlockSpec } from "./component-blocks.js";
+import { type DiscordModalRegistration } from "./modal-registry.js";
+/** Discord component-type ids on the wire (v10). */
+export declare const DISCORD_COMPONENT_TYPE: {
+    readonly actionRow: 1;
+    readonly button: 2;
+    readonly stringSelect: 3;
+    readonly textInput: 4;
+    readonly userSelect: 5;
+    readonly roleSelect: 6;
+    readonly mentionableSelect: 7;
+    readonly channelSelect: 8;
+    readonly section: 9;
+    readonly textDisplay: 10;
+    readonly thumbnail: 11;
+    readonly mediaGallery: 12;
+    readonly file: 13;
+    readonly separator: 14;
+    readonly container: 17;
+};
+/** Discord caps a message at 5 select rows / 5 action rows. */
+export declare const DISCORD_MAX_SELECT_ROWS = 5;
+/** Discord caps a string select at 25 options. */
+export declare const DISCORD_MAX_SELECT_OPTIONS = 25;
+/** The structured `select` spec the tool accepts (validated → REST JSON). */
+export interface DiscordSelectInput {
+    kind: DiscordSelectKind;
+    /** App-defined token (the tool prefixes it with the general marker on press-routing). */
+    customId: string;
+    placeholder?: string;
+    minValues?: number;
+    maxValues?: number;
+    options?: DiscordSelectOption[];
+}
+/** The structured `modal` spec the tool accepts (registered + a trigger button emitted). */
+export interface DiscordModalInput {
+    /** Trigger button label. */
+    buttonLabel: string;
+    title?: string;
+    fields: DiscordModalRegistration["fields"];
+    sessionKey?: string;
+    agentId?: string;
+    accountId?: string;
+    allowedUsers?: string[];
+    buttonStyle?: DiscordButtonStyleValue;
+}
+/** The structured `blocks` (Components-V2) spec the tool accepts. */
+export interface DiscordBlocksInput {
+    blocks: DiscordBlockSpec[];
+    accentColor?: number;
+}
+/** A failure result — the caller renders `error` instead of shipping bad JSON. */
+export interface DiscordRestComponentError {
+    ok: false;
+    error: string;
+}
+/**
+ * Serialize one structured select spec into a Discord action-row JSON object
+ * wrapping a select component. The select's `custom_id` carries the general
+ * callback prefix (via {@link buildDiscordSelectRow}) so a press routes through
+ * the existing select branch in `handleInteraction`. Returns an error result when
+ * the spec is unusable (empty token / over-budget id / a string select with no
+ * usable option).
+ */
+export declare function serializeDiscordSelectRow(input: DiscordSelectInput): {
+    ok: true;
+    row: Record<string, unknown>;
+} | DiscordRestComponentError;
+/**
+ * Register the modal definition in the TTL registry and serialize the
+ * MODAL-TRIGGER button into a Discord action-row JSON object. The button's
+ * `custom_id` is the `modal:<id>` marker `handleInteraction` recognizes → it
+ * calls `showModal` instead of routing a turn. Returns the row JSON + the minted
+ * modal id, or an error when the spec is unusable (empty label / no field).
+ */
+export declare function serializeDiscordModalTrigger(input: DiscordModalInput): {
+    ok: true;
+    row: Record<string, unknown>;
+    modalId: string;
+} | DiscordRestComponentError;
+/**
+ * Serialize a structured V2 (`blocks`) spec into a Components-V2 message body
+ * fragment: a single top-level CONTAINER (type 17) holding the serialized blocks,
+ * plus the {@link DISCORD_FLAG_IS_COMPONENTS_V2} flag the caller ORs into the
+ * message `flags`. The high-level spec is validated through
+ * {@link buildDiscordV2Message} first (drops empty blocks, caps section texts,
+ * rejects non-`attachment://` file refs); an empty container yields an error so
+ * the caller can fall back to a plain text send.
+ */
+export declare function serializeDiscordV2Message(input: DiscordBlocksInput): {
+    ok: true;
+    components: Array<Record<string, unknown>>;
+    flags: number;
+} | DiscordRestComponentError;
+//# sourceMappingURL=rest-components.d.ts.map

package/dist/agents/channels/discord/rest-components.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-components.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/rest-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EAKN,KAAK,uBAAuB,EAC5B,KAAK,iBAAiB,EACtB,KAAK,mBAAmB,EACxB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EAIN,KAAK,gBAAgB,EAGrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAwB,KAAK,wBAAwB,EAAE,MAAM,qBAAqB,CAAC;AAG1F,oDAAoD;AACpD,eAAO,MAAM,sBAAsB;;;;;;;;;;;;;;;;CAgBzB,CAAC;AAEX,+DAA+D;AAC/D,eAAO,MAAM,uBAAuB,IAAmB,CAAC;AACxD,kDAAkD;AAClD,eAAO,MAAM,0BAA0B,KAAK,CAAC;AAI7C,6EAA6E;AAC7E,MAAM,WAAW,kBAAkB;IAClC,IAAI,EAAE,iBAAiB,CAAC;IACxB,yFAAyF;IACzF,QAAQ,EAAE,MAAM,CAAC;IACjB,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,OAAO,CAAC,EAAE,mBAAmB,EAAE,CAAC;CAChC;AAED,4FAA4F;AAC5F,MAAM,WAAW,iBAAiB;IACjC,4BAA4B;IAC5B,WAAW,EAAE,MAAM,CAAC;IACpB,KAAK,CAAC,EAAE,MAAM,CAAC;IACf,MAAM,EAAE,wBAAwB,CAAC,QAAQ,CAAC,CAAC;IAC3C,UAAU,CAAC,EAAE,MAAM,CAAC;IACpB,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB,YAAY,CAAC,EAAE,MAAM,EAAE,CAAC;IACxB,WAAW,CAAC,EAAE,uBAAuB,CAAC;CACtC;AAED,qEAAqE;AACrE,MAAM,WAAW,kBAAkB;IAClC,MAAM,EAAE,gBAAgB,EAAE,CAAC;IAC3B,WAAW,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,kFAAkF;AAClF,MAAM,WAAW,yBAAyB;IACzC,EAAE,EAAE,KAAK,CAAC;IACV,KAAK,EAAE,MAAM,CAAC;CACd;AAID;;;;;;;GAOG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,kBAAkB,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,GAAG,yBAAyB,CAuCxE;AAID;;;;;;GAMG;AACH,wBAAgB,4BAA4B,CAC3C,KAAK,EAAE,iBAAiB,GACtB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IAAC,OAAO,EAAE,MAAM,CAAA;CAAE,GAAG,yBAAyB,CAqBzF;AA4ED;;;;;;;;GAQG;AACH,wBAAgB,yBAAyB,CACxC,KAAK,EAAE,kBAAkB,GACvB;IAAE,EAAE,EAAE,IAAI,CAAC;IAAC,UAAU,EAAE,KAAK,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GAAG,yBAAyB,CAsBrG"}

package/dist/agents/channels/discord/rest-components.js

@@ -0,0 +1,243 @@
+/**
+ * Discord REST-JSON component serializers (Fix A1).
+ *
+ * The Phase-3 builders (`components.ts` / `component-blocks.ts`) emit discord.js
+ * *Builder* objects for the GATEWAY `sendInteractive` path. The `discord_action`
+ * tool, however, talks straight to Discord REST v10 (`rest-actions.ts`), which
+ * needs RAW component JSON — the on-the-wire shape Discord documents, identical
+ * whether discord.js serialized it or we did.
+ *
+ * This module turns high-level STRUCTURED specs (selects / modal triggers / V2
+ * blocks) into that raw JSON, carrying the SAME custom_id codecs the press-
+ * routing in `connection.ts handleInteraction` already understands:
+ *
+ *   - SELECT rows get a `custom_id` prefixed with {@link GENERAL_CALLBACK_PREFIX}
+ *     (via {@link buildDiscordSelectRow}) so a selection routes through the
+ *     general-callback branch → `callbackQuery{ data, values }`.
+ *   - MODAL triggers register the heavy form in `modal-registry.ts` and emit a
+ *     button whose `custom_id` is the `modal:<id>` marker `handleInteraction`
+ *     recognizes → `showModal`.
+ *   - V2 blocks become Components-V2 JSON; the caller sets the `IsComponentsV2`
+ *     message flag (1 << 15) and moves all text into TextDisplay blocks.
+ *
+ * Pure / deterministic — no I/O, no discord.js, no globals. Returns a discriminated
+ * result so the tool can surface a clean validation error instead of shipping a
+ * half-built component Discord would 400 on.
+ */
+import { DISCORD_BUTTON_STYLE, DISCORD_MAX_ROWS, DISCORD_SELECT_COMPONENT_TYPE, buildDiscordSelectRow, } from "./components.js";
+import { DISCORD_FLAG_IS_COMPONENTS_V2, DISCORD_BUTTON_STYLE_LINK, buildDiscordV2Message, } from "./component-blocks.js";
+import { registerDiscordModal } from "./modal-registry.js";
+import { buildDiscordModalCustomId } from "./modals.js";
+/** Discord component-type ids on the wire (v10). */
+export const DISCORD_COMPONENT_TYPE = {
+    actionRow: 1,
+    button: 2,
+    stringSelect: 3,
+    textInput: 4,
+    userSelect: 5,
+    roleSelect: 6,
+    mentionableSelect: 7,
+    channelSelect: 8,
+    section: 9,
+    textDisplay: 10,
+    thumbnail: 11,
+    mediaGallery: 12,
+    file: 13,
+    separator: 14,
+    container: 17,
+};
+/** Discord caps a message at 5 select rows / 5 action rows. */
+export const DISCORD_MAX_SELECT_ROWS = DISCORD_MAX_ROWS;
+/** Discord caps a string select at 25 options. */
+export const DISCORD_MAX_SELECT_OPTIONS = 25;
+/* ───────────────────────────── select → JSON ───────────────────────────── */
+/**
+ * Serialize one structured select spec into a Discord action-row JSON object
+ * wrapping a select component. The select's `custom_id` carries the general
+ * callback prefix (via {@link buildDiscordSelectRow}) so a press routes through
+ * the existing select branch in `handleInteraction`. Returns an error result when
+ * the spec is unusable (empty token / over-budget id / a string select with no
+ * usable option).
+ */
+export function serializeDiscordSelectRow(input) {
+    const cappedOptions = input.kind === "string" && Array.isArray(input.options)
+        ? input.options.slice(0, DISCORD_MAX_SELECT_OPTIONS)
+        : input.options;
+    const spec = buildDiscordSelectRow({
+        kind: input.kind,
+        customIdToken: input.customId,
+        ...(input.placeholder !== undefined ? { placeholder: input.placeholder } : {}),
+        ...(typeof input.minValues === "number" ? { minValues: input.minValues } : {}),
+        ...(typeof input.maxValues === "number" ? { maxValues: input.maxValues } : {}),
+        ...(cappedOptions ? { options: cappedOptions } : {}),
+    });
+    if (!spec) {
+        return {
+            ok: false,
+            error: input.kind === "string"
+                ? "select requires a non-empty customId and at least one option with a label + value."
+                : "select requires a non-empty customId that fits Discord's 100-char custom_id budget.",
+        };
+    }
+    const componentType = DISCORD_SELECT_COMPONENT_TYPE[spec.kind];
+    const select = {
+        type: componentType,
+        custom_id: spec.customId,
+    };
+    if (spec.placeholder)
+        select.placeholder = spec.placeholder;
+    if (typeof spec.minValues === "number")
+        select.min_values = spec.minValues;
+    if (typeof spec.maxValues === "number")
+        select.max_values = spec.maxValues;
+    if (spec.kind === "string" && spec.options) {
+        select.options = spec.options.map((opt) => ({
+            label: opt.label,
+            value: opt.value,
+            ...(opt.description ? { description: opt.description } : {}),
+        }));
+    }
+    return { ok: true, row: { type: DISCORD_COMPONENT_TYPE.actionRow, components: [select] } };
+}
+/* ───────────────────────────── modal → JSON ───────────────────────────── */
+/**
+ * Register the modal definition in the TTL registry and serialize the
+ * MODAL-TRIGGER button into a Discord action-row JSON object. The button's
+ * `custom_id` is the `modal:<id>` marker `handleInteraction` recognizes → it
+ * calls `showModal` instead of routing a turn. Returns the row JSON + the minted
+ * modal id, or an error when the spec is unusable (empty label / no field).
+ */
+export function serializeDiscordModalTrigger(input) {
+    const label = (input.buttonLabel ?? "").trim();
+    if (!label)
+        return { ok: false, error: "modal requires a non-empty buttonLabel." };
+    const fields = Array.isArray(input.fields) ? input.fields.filter((f) => f && typeof f.id === "string" && f.id.trim()) : [];
+    if (fields.length === 0)
+        return { ok: false, error: "modal requires at least one field with an id." };
+    const modalId = registerDiscordModal({
+        ...(input.title !== undefined ? { title: input.title } : {}),
+        fields,
+        ...(input.sessionKey !== undefined ? { sessionKey: input.sessionKey } : {}),
+        ...(input.agentId !== undefined ? { agentId: input.agentId } : {}),
+        ...(input.accountId !== undefined ? { accountId: input.accountId } : {}),
+        ...(input.allowedUsers !== undefined ? { allowedUsers: input.allowedUsers } : {}),
+    });
+    const button = {
+        type: DISCORD_COMPONENT_TYPE.button,
+        style: input.buttonStyle ?? DISCORD_BUTTON_STYLE.Primary,
+        label: label.slice(0, 80),
+        custom_id: buildDiscordModalCustomId(modalId),
+    };
+    return { ok: true, row: { type: DISCORD_COMPONENT_TYPE.actionRow, components: [button] }, modalId };
+}
+/* ───────────────────────────── V2 blocks → JSON ───────────────────────────── */
+/** Serialize one V2 button (link OR general-prefixed interactive) into wire JSON. */
+function serializeV2Button(b) {
+    if (typeof b.url === "string" && b.url.length > 0) {
+        const link = b;
+        return { type: DISCORD_COMPONENT_TYPE.button, style: DISCORD_BUTTON_STYLE_LINK, label: link.label, url: link.url };
+    }
+    const btn = b;
+    return {
+        type: DISCORD_COMPONENT_TYPE.button,
+        style: btn.style ?? DISCORD_BUTTON_STYLE.Secondary,
+        label: btn.label,
+        custom_id: btn.customId,
+    };
+}
+/** Map a separator spacing word to Discord's numeric spacing (1=small, 2=large). */
+function separatorSpacing(spacing) {
+    if (spacing === "small")
+        return 1;
+    if (spacing === "large")
+        return 2;
+    return undefined;
+}
+/** Serialize one validated V2 block into its Discord wire-JSON component object. */
+function serializeV2Block(block) {
+    switch (block.type) {
+        case "text":
+            return { type: DISCORD_COMPONENT_TYPE.textDisplay, content: block.text };
+        case "section": {
+            const out = {
+                type: DISCORD_COMPONENT_TYPE.section,
+                components: block.texts.map((t) => ({ type: DISCORD_COMPONENT_TYPE.textDisplay, content: t })),
+            };
+            if (block.accessory) {
+                if (block.accessory.kind === "thumbnail") {
+                    out.accessory = { type: DISCORD_COMPONENT_TYPE.thumbnail, media: { url: block.accessory.url } };
+                }
+                else {
+                    out.accessory = serializeV2Button(block.accessory.button);
+                }
+            }
+            return out;
+        }
+        case "separator": {
+            const out = { type: DISCORD_COMPONENT_TYPE.separator };
+            if (typeof block.divider === "boolean")
+                out.divider = block.divider;
+            const spacing = separatorSpacing(block.spacing);
+            if (spacing !== undefined)
+                out.spacing = spacing;
+            return out;
+        }
+        case "actions":
+            return {
+                type: DISCORD_COMPONENT_TYPE.actionRow,
+                components: block.buttons.map((b) => serializeV2Button(b)),
+            };
+        case "media-gallery":
+            return {
+                type: DISCORD_COMPONENT_TYPE.mediaGallery,
+                items: block.items.map((it) => ({
+                    media: { url: it.url },
+                    ...(it.description ? { description: it.description } : {}),
+                    ...(it.spoiler ? { spoiler: true } : {}),
+                })),
+            };
+        case "file": {
+            const out = { type: DISCORD_COMPONENT_TYPE.file, file: { url: block.url } };
+            if (typeof block.spoiler === "boolean")
+                out.spoiler = block.spoiler;
+            return out;
+        }
+        default:
+            return null;
+    }
+}
+/**
+ * Serialize a structured V2 (`blocks`) spec into a Components-V2 message body
+ * fragment: a single top-level CONTAINER (type 17) holding the serialized blocks,
+ * plus the {@link DISCORD_FLAG_IS_COMPONENTS_V2} flag the caller ORs into the
+ * message `flags`. The high-level spec is validated through
+ * {@link buildDiscordV2Message} first (drops empty blocks, caps section texts,
+ * rejects non-`attachment://` file refs); an empty container yields an error so
+ * the caller can fall back to a plain text send.
+ */
+export function serializeDiscordV2Message(input) {
+    const spec = buildDiscordV2Message({
+        blocks: input.blocks ?? [],
+        ...(typeof input.accentColor === "number" ? { accentColor: input.accentColor } : {}),
+    });
+    if (!spec) {
+        return { ok: false, error: "blocks produced no renderable Components-V2 content." };
+    }
+    const children = [];
+    for (const block of spec.blocks) {
+        const serialized = serializeV2Block(block);
+        if (serialized)
+            children.push(serialized);
+    }
+    if (children.length === 0) {
+        return { ok: false, error: "blocks produced no renderable Components-V2 content." };
+    }
+    const container = {
+        type: DISCORD_COMPONENT_TYPE.container,
+        components: children,
+    };
+    if (typeof spec.accentColor === "number")
+        container.accent_color = spec.accentColor;
+    return { ok: true, components: [container], flags: DISCORD_FLAG_IS_COMPONENTS_V2 };
+}
+//# sourceMappingURL=rest-components.js.map

package/dist/agents/channels/discord/rest-components.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"rest-components.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/rest-components.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;GAyBG;AAEH,OAAO,EACN,oBAAoB,EACpB,gBAAgB,EAChB,6BAA6B,EAC7B,qBAAqB,GAIrB,MAAM,iBAAiB,CAAC;AACzB,OAAO,EACN,6BAA6B,EAC7B,yBAAyB,EACzB,qBAAqB,GAIrB,MAAM,uBAAuB,CAAC;AAC/B,OAAO,EAAE,oBAAoB,EAAiC,MAAM,qBAAqB,CAAC;AAC1F,OAAO,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAC;AAExD,oDAAoD;AACpD,MAAM,CAAC,MAAM,sBAAsB,GAAG;IACrC,SAAS,EAAE,CAAC;IACZ,MAAM,EAAE,CAAC;IACT,YAAY,EAAE,CAAC;IACf,SAAS,EAAE,CAAC;IACZ,UAAU,EAAE,CAAC;IACb,UAAU,EAAE,CAAC;IACb,iBAAiB,EAAE,CAAC;IACpB,aAAa,EAAE,CAAC;IAChB,OAAO,EAAE,CAAC;IACV,WAAW,EAAE,EAAE;IACf,SAAS,EAAE,EAAE;IACb,YAAY,EAAE,EAAE;IAChB,IAAI,EAAE,EAAE;IACR,SAAS,EAAE,EAAE;IACb,SAAS,EAAE,EAAE;CACJ,CAAC;AAEX,+DAA+D;AAC/D,MAAM,CAAC,MAAM,uBAAuB,GAAG,gBAAgB,CAAC;AACxD,kDAAkD;AAClD,MAAM,CAAC,MAAM,0BAA0B,GAAG,EAAE,CAAC;AAwC7C,+EAA+E;AAE/E;;;;;;;GAOG;AACH,MAAM,UAAU,yBAAyB,CACxC,KAAyB;IAEzB,MAAM,aAAa,GAClB,KAAK,CAAC,IAAI,KAAK,QAAQ,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,OAAO,CAAC;QACtD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC;QACpD,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC;IAClB,MAAM,IAAI,GAAG,qBAAqB,CAAC;QAClC,IAAI,EAAE,KAAK,CAAC,IAAI;QAChB,aAAa,EAAE,KAAK,CAAC,QAAQ;QAC7B,GAAG,CAAC,KAAK,CAAC,WAAW,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC9E,GAAG,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,aAAa,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpD,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO;YACN,EAAE,EAAE,KAAK;YACT,KAAK,EACJ,KAAK,CAAC,IAAI,KAAK,QAAQ;gBACtB,CAAC,CAAC,oFAAoF;gBACtF,CAAC,CAAC,qFAAqF;SACzF,CAAC;IACH,CAAC;IAED,MAAM,aAAa,GAAG,6BAA6B,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;IAC/D,MAAM,MAAM,GAA4B;QACvC,IAAI,EAAE,aAAa;QACnB,SAAS,EAAE,IAAI,CAAC,QAAQ;KACxB,CAAC;IACF,IAAI,IAAI,CAAC,WAAW;QAAE,MAAM,CAAC,WAAW,GAAG,IAAI,CAAC,WAAW,CAAC;IAC5D,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3E,IAAI,OAAO,IAAI,CAAC,SAAS,KAAK,QAAQ;QAAE,MAAM,CAAC,UAAU,GAAG,IAAI,CAAC,SAAS,CAAC;IAC3E,IAAI,IAAI,CAAC,IAAI,KAAK,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,CAAC;QAC5C,MAAM,CAAC,OAAO,GAAG,IAAI,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,GAAG,EAAE,EAAE,CAAC,CAAC;YAC3C,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,KAAK,EAAE,GAAG,CAAC,KAAK;YAChB,GAAG,CAAC,GAAG,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;SAC5D,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,CAAC;AAC5F,CAAC;AAED,8EAA8E;AAE9E;;;;;;GAMG;AACH,MAAM,UAAU,4BAA4B,CAC3C,KAAwB;IAExB,MAAM,KAAK,GAAG,CAAC,KAAK,CAAC,WAAW,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAC/C,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,yCAAyC,EAAE,CAAC;IACnF,MAAM,MAAM,GAAG,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,IAAI,OAAO,CAAC,CAAC,EAAE,KAAK,QAAQ,IAAI,CAAC,CAAC,EAAE,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;IAC3H,IAAI,MAAM,CAAC,MAAM,KAAK,CAAC;QAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,+CAA+C,EAAE,CAAC;IAEtG,MAAM,OAAO,GAAG,oBAAoB,CAAC;QACpC,GAAG,CAAC,KAAK,CAAC,KAAK,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC5D,MAAM;QACN,GAAG,CAAC,KAAK,CAAC,UAAU,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,UAAU,EAAE,KAAK,CAAC,UAAU,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAC3E,GAAG,CAAC,KAAK,CAAC,OAAO,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,KAAK,CAAC,OAAO,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QAClE,GAAG,CAAC,KAAK,CAAC,SAAS,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,SAAS,EAAE,KAAK,CAAC,SAAS,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACxE,GAAG,CAAC,KAAK,CAAC,YAAY,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,KAAK,CAAC,YAAY,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACjF,CAAC,CAAC;IACH,MAAM,MAAM,GAA4B;QACvC,IAAI,EAAE,sBAAsB,CAAC,MAAM;QACnC,KAAK,EAAE,KAAK,CAAC,WAAW,IAAI,oBAAoB,CAAC,OAAO;QACxD,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,CAAC,EAAE,EAAE,CAAC;QACzB,SAAS,EAAE,yBAAyB,CAAC,OAAO,CAAC;KAC7C,CAAC;IACF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,EAAE,UAAU,EAAE,CAAC,MAAM,CAAC,EAAE,EAAE,OAAO,EAAE,CAAC;AACrG,CAAC;AAED,kFAAkF;AAElF,qFAAqF;AACrF,SAAS,iBAAiB,CAAC,CAA8C;IACxE,IAAI,OAAQ,CAA2B,CAAC,GAAG,KAAK,QAAQ,IAAK,CAA2B,CAAC,GAAG,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACzG,MAAM,IAAI,GAAG,CAA0B,CAAC;QACxC,OAAO,EAAE,IAAI,EAAE,sBAAsB,CAAC,MAAM,EAAE,KAAK,EAAE,yBAAyB,EAAE,KAAK,EAAE,IAAI,CAAC,KAAK,EAAE,GAAG,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;IACpH,CAAC;IACD,MAAM,GAAG,GAAG,CAAwB,CAAC;IACrC,OAAO;QACN,IAAI,EAAE,sBAAsB,CAAC,MAAM;QACnC,KAAK,EAAE,GAAG,CAAC,KAAK,IAAI,oBAAoB,CAAC,SAAS;QAClD,KAAK,EAAE,GAAG,CAAC,KAAK;QAChB,SAAS,EAAE,GAAG,CAAC,QAAQ;KACvB,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,OAA2B;IACpD,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAClC,IAAI,OAAO,KAAK,OAAO;QAAE,OAAO,CAAC,CAAC;IAClC,OAAO,SAAS,CAAC;AAClB,CAAC;AAED,oFAAoF;AACpF,SAAS,gBAAgB,CAAC,KAAuB;IAChD,QAAQ,KAAK,CAAC,IAAI,EAAE,CAAC;QACpB,KAAK,MAAM;YACV,OAAO,EAAE,IAAI,EAAE,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,KAAK,CAAC,IAAI,EAAE,CAAC;QAC1E,KAAK,SAAS,CAAC,CAAC,CAAC;YAChB,MAAM,GAAG,GAA4B;gBACpC,IAAI,EAAE,sBAAsB,CAAC,OAAO;gBACpC,UAAU,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,sBAAsB,CAAC,WAAW,EAAE,OAAO,EAAE,CAAC,EAAE,CAAC,CAAC;aAC9F,CAAC;YACF,IAAI,KAAK,CAAC,SAAS,EAAE,CAAC;gBACrB,IAAI,KAAK,CAAC,SAAS,CAAC,IAAI,KAAK,WAAW,EAAE,CAAC;oBAC1C,GAAG,CAAC,SAAS,GAAG,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,EAAE,KAAK,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,SAAS,CAAC,GAAG,EAAE,EAAE,CAAC;gBACjG,CAAC;qBAAM,CAAC;oBACP,GAAG,CAAC,SAAS,GAAG,iBAAiB,CAAC,KAAK,CAAC,SAAS,CAAC,MAAM,CAAC,CAAC;gBAC3D,CAAC;YACF,CAAC;YACD,OAAO,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,WAAW,CAAC,CAAC,CAAC;YAClB,MAAM,GAAG,GAA4B,EAAE,IAAI,EAAE,sBAAsB,CAAC,SAAS,EAAE,CAAC;YAChF,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACpE,MAAM,OAAO,GAAG,gBAAgB,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;YAChD,IAAI,OAAO,KAAK,SAAS;gBAAE,GAAG,CAAC,OAAO,GAAG,OAAO,CAAC;YACjD,OAAO,GAAG,CAAC;QACZ,CAAC;QACD,KAAK,SAAS;YACb,OAAO;gBACN,IAAI,EAAE,sBAAsB,CAAC,SAAS;gBACtC,UAAU,EAAE,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,iBAAiB,CAAC,CAAC,CAAC,CAAC;aAC1D,CAAC;QACH,KAAK,eAAe;YACnB,OAAO;gBACN,IAAI,EAAE,sBAAsB,CAAC,YAAY;gBACzC,KAAK,EAAE,KAAK,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,EAAE,EAAE,EAAE,CAAC,CAAC;oBAC/B,KAAK,EAAE,EAAE,GAAG,EAAE,EAAE,CAAC,GAAG,EAAE;oBACtB,GAAG,CAAC,EAAE,CAAC,WAAW,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;oBAC1D,GAAG,CAAC,EAAE,CAAC,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;iBACxC,CAAC,CAAC;aACH,CAAC;QACH,KAAK,MAAM,CAAC,CAAC,CAAC;YACb,MAAM,GAAG,GAA4B,EAAE,IAAI,EAAE,sBAAsB,CAAC,IAAI,EAAE,IAAI,EAAE,EAAE,GAAG,EAAE,KAAK,CAAC,GAAG,EAAE,EAAE,CAAC;YACrG,IAAI,OAAO,KAAK,CAAC,OAAO,KAAK,SAAS;gBAAE,GAAG,CAAC,OAAO,GAAG,KAAK,CAAC,OAAO,CAAC;YACpE,OAAO,GAAG,CAAC;QACZ,CAAC;QACD;YACC,OAAO,IAAI,CAAC;IACd,CAAC;AACF,CAAC;AAED;;;;;;;;GAQG;AACH,MAAM,UAAU,yBAAyB,CACxC,KAAyB;IAEzB,MAAM,IAAI,GAAG,qBAAqB,CAAC;QAClC,MAAM,EAAE,KAAK,CAAC,MAAM,IAAI,EAAE;QAC1B,GAAG,CAAC,OAAO,KAAK,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,KAAK,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACpF,CAAC,CAAC;IACH,IAAI,CAAC,IAAI,EAAE,CAAC;QACX,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,QAAQ,GAAmC,EAAE,CAAC;IACpD,KAAK,MAAM,KAAK,IAAI,IAAI,CAAC,MAAM,EAAE,CAAC;QACjC,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAC;QAC3C,IAAI,UAAU;YAAE,QAAQ,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC;IAC3C,CAAC;IACD,IAAI,QAAQ,CAAC,MAAM,KAAK,CAAC,EAAE,CAAC;QAC3B,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,sDAAsD,EAAE,CAAC;IACrF,CAAC;IACD,MAAM,SAAS,GAA4B;QAC1C,IAAI,EAAE,sBAAsB,CAAC,SAAS;QACtC,UAAU,EAAE,QAAQ;KACpB,CAAC;IACF,IAAI,OAAO,IAAI,CAAC,WAAW,KAAK,QAAQ;QAAE,SAAS,CAAC,YAAY,GAAG,IAAI,CAAC,WAAW,CAAC;IACpF,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,UAAU,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,6BAA6B,EAAE,CAAC;AACpF,CAAC"}

package/dist/agents/channels/discord/security-audit.d.ts

@@ -0,0 +1,29 @@
+/**
+ * Discord security audit — the structured findings `brigade doctor` renders via
+ * the central `channel-security-registry.ts` (`collectChannelSecurityAudit`).
+ *
+ * The single concern here: name-based (MUTABLE) allow-from entries. A Discord
+ * username/tag can be changed by its owner, so an allow-list keyed on a name can
+ * silently grant access to a DIFFERENT person later. Id-based entries (`123`,
+ * `<@123>`, `user:123`) are stable and fine; bare names / tags / empty-prefixed
+ * entries get a `warn` finding telling the operator to use stable ids.
+ *
+ * Walks `channels.discord.allowFrom`, `channels.discord.dm.allowFrom`, and the
+ * per-guild `channels.discord.guilds.<id>.users` +
+ * `channels.discord.guilds.<id>.channels.<id>.users` lists (plus the per-account
+ * variants). Pure-ish: reads only the supplied config. Defensive — a malformed
+ * shape contributes nothing.
+ */
+import type { BrigadeConfig } from "../../../config/io.js";
+import type { ChannelSecurityAuditFinding } from "../types.adapters.js";
+/**
+ * Collect Discord security audit findings. Returns a single `warn` finding when
+ * the allow-lists contain name/tag (mutable-identity) entries, naming a few
+ * examples; returns `[]` when every entry is a stable id. The `accountId` (when
+ * supplied) selects the per-account allow-list in addition to the top-level one.
+ */
+export declare function collectDiscordSecurityAuditFindings(params: {
+    cfg: BrigadeConfig;
+    accountId?: string | null;
+}): ChannelSecurityAuditFinding[];
+//# sourceMappingURL=security-audit.d.ts.map

package/dist/agents/channels/discord/security-audit.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/security-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,uBAAuB,CAAC;AAC3D,OAAO,KAAK,EAAE,2BAA2B,EAAE,MAAM,sBAAsB,CAAC;AAqBxE;;;;;GAKG;AACH,wBAAgB,mCAAmC,CAAC,MAAM,EAAE;IAC3D,GAAG,EAAE,aAAa,CAAC;IACnB,SAAS,CAAC,EAAE,MAAM,GAAG,IAAI,CAAC;CAC1B,GAAG,2BAA2B,EAAE,CAqDhC"}

package/dist/agents/channels/discord/security-audit.js

@@ -0,0 +1,94 @@
+/**
+ * Discord security audit — the structured findings `brigade doctor` renders via
+ * the central `channel-security-registry.ts` (`collectChannelSecurityAudit`).
+ *
+ * The single concern here: name-based (MUTABLE) allow-from entries. A Discord
+ * username/tag can be changed by its owner, so an allow-list keyed on a name can
+ * silently grant access to a DIFFERENT person later. Id-based entries (`123`,
+ * `<@123>`, `user:123`) are stable and fine; bare names / tags / empty-prefixed
+ * entries get a `warn` finding telling the operator to use stable ids.
+ *
+ * Walks `channels.discord.allowFrom`, `channels.discord.dm.allowFrom`, and the
+ * per-guild `channels.discord.guilds.<id>.users` +
+ * `channels.discord.guilds.<id>.channels.<id>.users` lists (plus the per-account
+ * variants). Pure-ish: reads only the supplied config. Defensive — a malformed
+ * shape contributes nothing.
+ */
+import { isDiscordMutableAllowEntry } from "./security-doctor.js";
+const CHANNEL_ID = "discord";
+/** Collect mutable (name-based) entries from one allow-from list into the set, with source labels. */
+function collectMutableEntries(values, source, into) {
+    if (!Array.isArray(values))
+        return;
+    for (const value of values) {
+        const text = String(value ?? "").trim();
+        if (!text || !isDiscordMutableAllowEntry(text))
+            continue;
+        into.add(`${source}: ${text}`);
+    }
+}
+/** Read the `channels.discord` slot loosely (schema keeps it open). */
+function discordSlot(cfg) {
+    const slot = cfg.channels?.[CHANNEL_ID];
+    return slot && typeof slot === "object" ? slot : undefined;
+}
+/**
+ * Collect Discord security audit findings. Returns a single `warn` finding when
+ * the allow-lists contain name/tag (mutable-identity) entries, naming a few
+ * examples; returns `[]` when every entry is a stable id. The `accountId` (when
+ * supplied) selects the per-account allow-list in addition to the top-level one.
+ */
+export function collectDiscordSecurityAuditFindings(params) {
+    const slot = discordSlot(params.cfg);
+    if (!slot)
+        return [];
+    const accountId = (params.accountId ?? "").trim();
+    const mutable = new Set();
+    // Top-level allow-from + dm.allowFrom.
+    collectMutableEntries(slot.allowFrom, "channels.discord.allowFrom", mutable);
+    const dm = slot.dm;
+    collectMutableEntries(dm?.allowFrom, "channels.discord.dm.allowFrom", mutable);
+    // Per-account allow-from (when an account is in scope).
+    if (accountId) {
+        const accounts = Array.isArray(slot.accounts) ? slot.accounts : [];
+        for (const entry of accounts) {
+            if (typeof entry?.id === "string" && entry.id.trim() === accountId) {
+                collectMutableEntries(entry.allowFrom, `channels.discord.accounts.${accountId}.allowFrom`, mutable);
+            }
+        }
+    }
+    // Per-guild users + per-channel users.
+    const guilds = slot.guilds;
+    if (guilds && typeof guilds === "object") {
+        for (const [guildKey, guildValue] of Object.entries(guilds)) {
+            if (!guildValue || typeof guildValue !== "object")
+                continue;
+            const guild = guildValue;
+            collectMutableEntries(guild.users, `channels.discord.guilds.${guildKey}.users`, mutable);
+            const channels = guild.channels;
+            if (!channels || typeof channels !== "object")
+                continue;
+            for (const [channelKey, channelValue] of Object.entries(channels)) {
+                if (!channelValue || typeof channelValue !== "object")
+                    continue;
+                const channel = channelValue;
+                collectMutableEntries(channel.users, `channels.discord.guilds.${guildKey}.channels.${channelKey}.users`, mutable);
+            }
+        }
+    }
+    if (mutable.size === 0)
+        return [];
+    const examples = Array.from(mutable).slice(0, 5);
+    const more = mutable.size > examples.length ? ` (+${mutable.size - examples.length} more)` : "";
+    return [
+        {
+            checkId: "channels.discord.allowFrom.name_based_entries",
+            severity: "warn",
+            title: "Discord allowlist contains name or tag entries",
+            detail: "Discord name/tag allowlist matching keys on a mutable identity — a username can be changed by its owner and later resolve to a different person. " +
+                `Found: ${examples.join(", ")}${more}.`,
+            remediation: "Prefer stable Discord ids (a numeric id, <@id>, or user:<id>) in channels.discord.allowFrom and channels.discord.guilds.*.users.",
+        },
+    ];
+}
+//# sourceMappingURL=security-audit.js.map

package/dist/agents/channels/discord/security-audit.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-audit.js","sourceRoot":"","sources":["../../../../src/agents/channels/discord/security-audit.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAIH,OAAO,EAAE,0BAA0B,EAAE,MAAM,sBAAsB,CAAC;AAElE,MAAM,UAAU,GAAG,SAAS,CAAC;AAE7B,sGAAsG;AACtG,SAAS,qBAAqB,CAAC,MAAe,EAAE,MAAc,EAAE,IAAiB;IAChF,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC;QAAE,OAAO;IACnC,KAAK,MAAM,KAAK,IAAI,MAAM,EAAE,CAAC;QAC5B,MAAM,IAAI,GAAG,MAAM,CAAC,KAAK,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;QACxC,IAAI,CAAC,IAAI,IAAI,CAAC,0BAA0B,CAAC,IAAI,CAAC;YAAE,SAAS;QACzD,IAAI,CAAC,GAAG,CAAC,GAAG,MAAM,KAAK,IAAI,EAAE,CAAC,CAAC;IAChC,CAAC;AACF,CAAC;AAED,uEAAuE;AACvE,SAAS,WAAW,CAAC,GAAkB;IACtC,MAAM,IAAI,GAAI,GAA8C,CAAC,QAAQ,EAAE,CAAC,UAAU,CAAC,CAAC;IACpF,OAAO,IAAI,IAAI,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAE,IAAgC,CAAC,CAAC,CAAC,SAAS,CAAC;AACzF,CAAC;AAED;;;;;GAKG;AACH,MAAM,UAAU,mCAAmC,CAAC,MAGnD;IACA,MAAM,IAAI,GAAG,WAAW,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC;IACrC,IAAI,CAAC,IAAI;QAAE,OAAO,EAAE,CAAC;IACrB,MAAM,SAAS,GAAG,CAAC,MAAM,CAAC,SAAS,IAAI,EAAE,CAAC,CAAC,IAAI,EAAE,CAAC;IAClD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAElC,uCAAuC;IACvC,qBAAqB,CAAC,IAAI,CAAC,SAAS,EAAE,4BAA4B,EAAE,OAAO,CAAC,CAAC;IAC7E,MAAM,EAAE,GAAG,IAAI,CAAC,EAAyC,CAAC;IAC1D,qBAAqB,CAAC,EAAE,EAAE,SAAS,EAAE,+BAA+B,EAAE,OAAO,CAAC,CAAC;IAE/E,wDAAwD;IACxD,IAAI,SAAS,EAAE,CAAC;QACf,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAE,IAAI,CAAC,QAA2C,CAAC,CAAC,CAAC,EAAE,CAAC;QACvG,KAAK,MAAM,KAAK,IAAI,QAAQ,EAAE,CAAC;YAC9B,IAAI,OAAO,KAAK,EAAE,EAAE,KAAK,QAAQ,IAAI,KAAK,CAAC,EAAE,CAAC,IAAI,EAAE,KAAK,SAAS,EAAE,CAAC;gBACpE,qBAAqB,CAAC,KAAK,CAAC,SAAS,EAAE,6BAA6B,SAAS,YAAY,EAAE,OAAO,CAAC,CAAC;YACrG,CAAC;QACF,CAAC;IACF,CAAC;IAED,uCAAuC;IACvC,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC;IAC3B,IAAI,MAAM,IAAI,OAAO,MAAM,KAAK,QAAQ,EAAE,CAAC;QAC1C,KAAK,MAAM,CAAC,QAAQ,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,MAAiC,CAAC,EAAE,CAAC;YACxF,IAAI,CAAC,UAAU,IAAI,OAAO,UAAU,KAAK,QAAQ;gBAAE,SAAS;YAC5D,MAAM,KAAK,GAAG,UAAqC,CAAC;YACpD,qBAAqB,CAAC,KAAK,CAAC,KAAK,EAAE,2BAA2B,QAAQ,QAAQ,EAAE,OAAO,CAAC,CAAC;YACzF,MAAM,QAAQ,GAAG,KAAK,CAAC,QAAQ,CAAC;YAChC,IAAI,CAAC,QAAQ,IAAI,OAAO,QAAQ,KAAK,QAAQ;gBAAE,SAAS;YACxD,KAAK,MAAM,CAAC,UAAU,EAAE,YAAY,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,QAAmC,CAAC,EAAE,CAAC;gBAC9F,IAAI,CAAC,YAAY,IAAI,OAAO,YAAY,KAAK,QAAQ;oBAAE,SAAS;gBAChE,MAAM,OAAO,GAAG,YAAuC,CAAC;gBACxD,qBAAqB,CAAC,OAAO,CAAC,KAAK,EAAE,2BAA2B,QAAQ,aAAa,UAAU,QAAQ,EAAE,OAAO,CAAC,CAAC;YACnH,CAAC;QACF,CAAC;IACF,CAAC;IAED,IAAI,OAAO,CAAC,IAAI,KAAK,CAAC;QAAE,OAAO,EAAE,CAAC;IAClC,MAAM,QAAQ,GAAG,KAAK,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,KAAK,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC;IACjD,MAAM,IAAI,GAAG,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,GAAG,QAAQ,CAAC,MAAM,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;IAChG,OAAO;QACN;YACC,OAAO,EAAE,+CAA+C;YACxD,QAAQ,EAAE,MAAM;YAChB,KAAK,EAAE,gDAAgD;YACvD,MAAM,EACL,mJAAmJ;gBACnJ,UAAU,QAAQ,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,IAAI,GAAG;YACxC,WAAW,EACV,kIAAkI;SACnI;KACD,CAAC;AACH,CAAC"}

package/dist/agents/channels/discord/security-doctor.d.ts

@@ -0,0 +1,43 @@
+/**
+ * Discord security-doctor helpers — the pure predicates the security audit +
+ * numeric-id scan build on.
+ *
+ * Two concerns:
+ *   1. `isDiscordMutableAllowEntry` — is an allow-from entry a MUTABLE identity
+ *      (a name / tag / handle) rather than a stable id? A Discord username can be
+ *      changed by its owner, so a name-based allow entry can silently grant
+ *      access to a DIFFERENT person later. Id-based entries (`123`, `<@123>`,
+ *      `user:123`) are stable and fine; bare names + empty-prefixed entries warn.
+ *   2. `scanDiscordNumericIdHazards` — find snowflake ids that were parsed as JS
+ *      NUMBERS in config (precision loss above 2^53). A Discord id stored as a
+ *      number silently corrupts above that boundary; this flags them and marks
+ *      which can be safely repaired to a string (lossless) vs which already lost
+ *      precision (refuse — the original digits are gone).
+ */
+/**
+ * True when `raw` is a MUTABLE allow-from identity (a name/tag/handle) rather
+ * than a stable id. A bare numeric id, a `<@id>` / `<@!id>` mention, or a
+ * `discord:` / `user:` / `pk:` prefix carrying a non-empty id → stable (returns
+ * false). A bare name, or a prefix with an EMPTY id, → mutable (returns true).
+ * `*` (wildcard) and empty are not mutable identities (returns false).
+ */
+export declare function isDiscordMutableAllowEntry(raw: string): boolean;
+/** One flagged snowflake-as-number hazard. */
+export interface DiscordNumericIdHazard {
+    /** Config path where the lossy number lives (e.g. `channels.discord.guilds.123`). */
+    path: string;
+    /** The raw number as Brigade read it. */
+    value: number;
+    /** True when the value is ≤ 2^53-1 → can be losslessly repaired to a string. */
+    repairable: boolean;
+}
+/**
+ * Scan a `channels.discord` config slot for snowflake ids that were parsed as JS
+ * numbers (JSON without quotes). Returns the flagged hazards: `repairable: true`
+ * ones are ≤ 2^53-1 and can be safely converted to strings; `repairable: false`
+ * ones already lost precision (refuse to "repair" — the original id is
+ * unrecoverable; the operator must re-enter it as a quoted string). Pure; the
+ * caller decides whether to warn-only or repair.
+ */
+export declare function scanDiscordNumericIdHazards(discordConfig: unknown, basePath?: string): DiscordNumericIdHazard[];
+//# sourceMappingURL=security-doctor.d.ts.map

package/dist/agents/channels/discord/security-doctor.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"security-doctor.d.ts","sourceRoot":"","sources":["../../../../src/agents/channels/discord/security-doctor.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAKH;;;;;;GAMG;AACH,wBAAgB,0BAA0B,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAa/D;AAED,8CAA8C;AAC9C,MAAM,WAAW,sBAAsB;IACtC,qFAAqF;IACrF,IAAI,EAAE,MAAM,CAAC;IACb,yCAAyC;IACzC,KAAK,EAAE,MAAM,CAAC;IACd,gFAAgF;IAChF,UAAU,EAAE,OAAO,CAAC;CACpB;AA4BD;;;;;;;GAOG;AACH,wBAAgB,2BAA2B,CAAC,aAAa,EAAE,OAAO,EAAE,QAAQ,SAAqB,GAAG,sBAAsB,EAAE,CAK3H"}

package/dist/agents/channels/discord/security-doctor.js

@@ -0,0 +1,83 @@
+/**
+ * Discord security-doctor helpers — the pure predicates the security audit +
+ * numeric-id scan build on.
+ *
+ * Two concerns:
+ *   1. `isDiscordMutableAllowEntry` — is an allow-from entry a MUTABLE identity
+ *      (a name / tag / handle) rather than a stable id? A Discord username can be
+ *      changed by its owner, so a name-based allow entry can silently grant
+ *      access to a DIFFERENT person later. Id-based entries (`123`, `<@123>`,
+ *      `user:123`) are stable and fine; bare names + empty-prefixed entries warn.
+ *   2. `scanDiscordNumericIdHazards` — find snowflake ids that were parsed as JS
+ *      NUMBERS in config (precision loss above 2^53). A Discord id stored as a
+ *      number silently corrupts above that boundary; this flags them and marks
+ *      which can be safely repaired to a string (lossless) vs which already lost
+ *      precision (refuse — the original digits are gone).
+ */
+/** JS-safe integer ceiling — above this a snowflake-as-number has lost precision. */
+const MAX_SAFE = Number.MAX_SAFE_INTEGER; // 2^53 - 1
+/**
+ * True when `raw` is a MUTABLE allow-from identity (a name/tag/handle) rather
+ * than a stable id. A bare numeric id, a `<@id>` / `<@!id>` mention, or a
+ * `discord:` / `user:` / `pk:` prefix carrying a non-empty id → stable (returns
+ * false). A bare name, or a prefix with an EMPTY id, → mutable (returns true).
+ * `*` (wildcard) and empty are not mutable identities (returns false).
+ */
+export function isDiscordMutableAllowEntry(raw) {
+    const text = (raw ?? "").trim();
+    if (!text || text === "*")
+        return false;
+    // `<@123>` / `<@!123>` mention → strip the wrapper; numeric inside = stable.
+    const maybeMentionId = text.replace(/^<@!?/, "").replace(/>$/, "");
+    if (/^\d+$/.test(maybeMentionId))
+        return false;
+    for (const prefix of ["discord:", "user:", "pk:"]) {
+        if (!text.startsWith(prefix))
+            continue;
+        // `user:` with an empty id is a mutable/incomplete entry; `user:123` is stable.
+        return text.slice(prefix.length).trim().length === 0;
+    }
+    // Anything else (a bare name / tag) is mutable.
+    return true;
+}
+/** Recursively walk an object, flagging numeric values that look like snowflakes. */
+function walkForNumericIds(node, path, out) {
+    if (typeof node === "number") {
+        // A Discord snowflake is a large integer. Flag big integers (≥ 1e15, near
+        // the 2^53 safe-integer ceiling) — small numbers (debounceMs, position,
+        // durations) aren't ids. `repairable` is true only when the value is still
+        // ≤ 2^53-1 (lossless to stringify); a larger value already lost precision.
+        // NOTE: real snowflakes (17-19 digits) ALWAYS exceed 2^53, so an
+        // unquoted-snowflake-in-JSON is effectively never safely repairable — this
+        // flags the hazard so the operator re-enters the id as a quoted string.
+        if (Number.isInteger(node) && node >= 1e15) {
+            out.push({ path, value: node, repairable: node <= MAX_SAFE });
+        }
+        return;
+    }
+    if (Array.isArray(node)) {
+        node.forEach((child, i) => walkForNumericIds(child, `${path}[${i}]`, out));
+        return;
+    }
+    if (node && typeof node === "object") {
+        for (const [key, child] of Object.entries(node)) {
+            walkForNumericIds(child, path ? `${path}.${key}` : key, out);
+        }
+    }
+}
+/**
+ * Scan a `channels.discord` config slot for snowflake ids that were parsed as JS
+ * numbers (JSON without quotes). Returns the flagged hazards: `repairable: true`
+ * ones are ≤ 2^53-1 and can be safely converted to strings; `repairable: false`
+ * ones already lost precision (refuse to "repair" — the original id is
+ * unrecoverable; the operator must re-enter it as a quoted string). Pure; the
+ * caller decides whether to warn-only or repair.
+ */
+export function scanDiscordNumericIdHazards(discordConfig, basePath = "channels.discord") {
+    const out = [];
+    if (!discordConfig || typeof discordConfig !== "object")
+        return out;
+    walkForNumericIds(discordConfig, basePath, out);
+    return out;
+}
+//# sourceMappingURL=security-doctor.js.map