oft-agt 0.0.0-stage → 0.5.0

package/npm-shrinkwrap.json

@@ -0,0 +1,320 @@
+{
+  "name": "oft-agt",
+  "version": "0.5.0",
+  "lockfileVersion": 3,
+  "requires": true,
+  "packages": {
+    "": {
+      "name": "oft-agt",
+      "version": "0.5.0",
+      "dependencies": {
+        "discord.js": "^14.14.0",
+        "ws": "^8.18.0"
+      },
+      "bin": {
+        "oft-agt": "cli.mjs",
+        "oftone-agent": "cli.mjs"
+      },
+      "engines": {
+        "node": ">=22"
+      },
+      "license": "UNLICENSED"
+    },
+    "node_modules/@discordjs/builders": {
+      "version": "1.14.1",
+      "resolved": "https://registry.npmjs.org/@discordjs/builders/-/builders-1.14.1.tgz",
+      "integrity": "sha512-gSKkhXLqs96TCzk66VZuHHl8z2bQMJFGwrXC0f33ngK+FLNau4hU1PYny3DNJfNdSH+gVMzE85/d5FQ2BpcNwQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@discordjs/formatters": "^0.6.2",
+        "@discordjs/util": "^1.2.0",
+        "@sapphire/shapeshift": "^4.0.0",
+        "discord-api-types": "^0.38.40",
+        "fast-deep-equal": "^3.1.3",
+        "ts-mixer": "^6.0.4",
+        "tslib": "^2.6.3"
+      },
+      "engines": {
+        "node": ">=16.11.0"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/collection": {
+      "version": "1.5.3",
+      "resolved": "https://registry.npmjs.org/@discordjs/collection/-/collection-1.5.3.tgz",
+      "integrity": "sha512-SVb428OMd3WO1paV3rm6tSjM4wC+Kecaa1EUGX7vc6/fddvw/6lg90z4QtCqm21zvVe92vMMDt9+DkIvjXImQQ==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=16.11.0"
+      }
+    },
+    "node_modules/@discordjs/formatters": {
+      "version": "0.6.2",
+      "resolved": "https://registry.npmjs.org/@discordjs/formatters/-/formatters-0.6.2.tgz",
+      "integrity": "sha512-y4UPwWhH6vChKRkGdMB4odasUbHOUwy7KL+OVwF86PvT6QVOwElx+TiI1/6kcmcEe+g5YRXJFiXSXUdabqZOvQ==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "discord-api-types": "^0.38.33"
+      },
+      "engines": {
+        "node": ">=16.11.0"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/rest": {
+      "version": "2.6.3",
+      "resolved": "https://registry.npmjs.org/@discordjs/rest/-/rest-2.6.3.tgz",
+      "integrity": "sha512-wvOylxNYJkwKjctS/Mn5GP1w9r3/rzyH+ThD1JlAca6zEdlHs8QWBBUQJpU5Q+W6DoIj/Ljh1IPlZs7hTU+UAg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@discordjs/collection": "^2.1.1",
+        "@discordjs/util": "^1.2.0",
+        "@sapphire/async-queue": "^1.5.3",
+        "@sapphire/snowflake": "^3.5.5",
+        "@vladfrangu/async_event_emitter": "^2.4.6",
+        "discord-api-types": "^0.38.50",
+        "magic-bytes.js": "^1.13.0",
+        "tslib": "^2.6.3",
+        "undici": "^6.27.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/rest/node_modules/@discordjs/collection": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@discordjs/collection/-/collection-2.1.1.tgz",
+      "integrity": "sha512-LiSusze9Tc7qF03sLCujF5iZp7K+vRNEDBZ86FT9aQAv3vxMLihUvKvpsCWiQ2DJq1tVckopKm1rxomgNUc9hg==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/util": {
+      "version": "1.2.0",
+      "resolved": "https://registry.npmjs.org/@discordjs/util/-/util-1.2.0.tgz",
+      "integrity": "sha512-3LKP7F2+atl9vJFhaBjn4nOaSWahZ/yWjOvA4e5pnXkt2qyXRCHLxoBQy81GFtLGCq7K9lPm9R517M1U+/90Qg==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "discord-api-types": "^0.38.33"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/ws": {
+      "version": "1.2.3",
+      "resolved": "https://registry.npmjs.org/@discordjs/ws/-/ws-1.2.3.tgz",
+      "integrity": "sha512-wPlQDxEmlDg5IxhJPuxXr3Vy9AjYq5xCvFWGJyD7w7Np8ZGu+Mc+97LCoEc/+AYCo2IDpKioiH0/c/mj5ZR9Uw==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@discordjs/collection": "^2.1.0",
+        "@discordjs/rest": "^2.5.1",
+        "@discordjs/util": "^1.1.0",
+        "@sapphire/async-queue": "^1.5.2",
+        "@types/ws": "^8.5.10",
+        "@vladfrangu/async_event_emitter": "^2.2.4",
+        "discord-api-types": "^0.38.1",
+        "tslib": "^2.6.2",
+        "ws": "^8.17.0"
+      },
+      "engines": {
+        "node": ">=16.11.0"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@discordjs/ws/node_modules/@discordjs/collection": {
+      "version": "2.1.1",
+      "resolved": "https://registry.npmjs.org/@discordjs/collection/-/collection-2.1.1.tgz",
+      "integrity": "sha512-LiSusze9Tc7qF03sLCujF5iZp7K+vRNEDBZ86FT9aQAv3vxMLihUvKvpsCWiQ2DJq1tVckopKm1rxomgNUc9hg==",
+      "license": "Apache-2.0",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/@sapphire/async-queue": {
+      "version": "1.5.5",
+      "resolved": "https://registry.npmjs.org/@sapphire/async-queue/-/async-queue-1.5.5.tgz",
+      "integrity": "sha512-cvGzxbba6sav2zZkH8GPf2oGk9yYoD5qrNWdu9fRehifgnFZJMV+nuy2nON2roRO4yQQ+v7MK/Pktl/HgfsUXg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=v14.0.0",
+        "npm": ">=7.0.0"
+      }
+    },
+    "node_modules/@sapphire/shapeshift": {
+      "version": "4.0.0",
+      "resolved": "https://registry.npmjs.org/@sapphire/shapeshift/-/shapeshift-4.0.0.tgz",
+      "integrity": "sha512-d9dUmWVA7MMiKobL3VpLF8P2aeanRTu6ypG2OIaEv/ZHH/SUQ2iHOVyi5wAPjQ+HmnMuL0whK9ez8I/raWbtIg==",
+      "license": "MIT",
+      "dependencies": {
+        "fast-deep-equal": "^3.1.3",
+        "lodash": "^4.17.21"
+      },
+      "engines": {
+        "node": ">=v16"
+      }
+    },
+    "node_modules/@sapphire/snowflake": {
+      "version": "3.5.5",
+      "resolved": "https://registry.npmjs.org/@sapphire/snowflake/-/snowflake-3.5.5.tgz",
+      "integrity": "sha512-xzvBr1Q1c4lCe7i6sRnrofxeO1QTP/LKQ6A6qy0iB4x5yfiSfARMEQEghojzTNALDTcv8En04qYNIco9/K9eZQ==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=v14.0.0",
+        "npm": ">=7.0.0"
+      }
+    },
+    "node_modules/@types/node": {
+      "version": "26.6.6",
+      "resolved": "https://registry.npmjs.org/@types/node/-/node-26.6.6.tgz",
+      "integrity": "sha512-MzQj+8Kx3XI40OmUAE6Qoh58ZMNstNNMwn2nfd3qWsfe7nDNSqJNzes4njhz6AHwrSHOffSLwXU6yb474Q4aog==",
+      "license": "MIT",
+      "dependencies": {
+        "undici-types": "~8.9.0"
+      }
+    },
+    "node_modules/@types/ws": {
+      "version": "8.18.2",
+      "resolved": "https://registry.npmjs.org/@types/ws/-/ws-8.18.2.tgz",
+      "integrity": "sha512-67MQl+fpWKVTT1NYdnmo3U4sc/xPo/zQBncVnI74qmQa0z/b+1g6iYqNmGCPbxO+zz2aklb08a0oHfegiVd0/w==",
+      "license": "MIT",
+      "dependencies": {
+        "@types/node": "*"
+      }
+    },
+    "node_modules/@vladfrangu/async_event_emitter": {
+      "version": "2.4.7",
+      "resolved": "https://registry.npmjs.org/@vladfrangu/async_event_emitter/-/async_event_emitter-2.4.7.tgz",
+      "integrity": "sha512-Xfe6rpCTxSxfbswi/W/Pz7zp1WWSNn4A0eW4mLkQUewCrXXtMj31lCg+iQyTkh/CkusZSq9eDflu7tjEDXUY6g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=v14.0.0",
+        "npm": ">=7.0.0"
+      }
+    },
+    "node_modules/discord-api-types": {
+      "version": "0.38.57",
+      "resolved": "https://registry.npmjs.org/discord-api-types/-/discord-api-types-0.38.57.tgz",
+      "integrity": "sha512-R1CTSSt4RshqCq23j2Xq2ZscvzB4LzG9OB1CYQdKUGdw8Ti/oF/72EEtK2mNpagG/Vj9NcBT7dw9lKLf+Dacfg==",
+      "license": "MIT"
+    },
+    "node_modules/discord.js": {
+      "version": "14.27.0",
+      "resolved": "https://registry.npmjs.org/discord.js/-/discord.js-14.27.0.tgz",
+      "integrity": "sha512-qHbFlFG2N7y3LjPySYsL6A1+BnX6bkTVgo842EX0CqVPk/KTMwZkojPHEXKsQUpWZNyz5BISNHK1cPpQw0+m4A==",
+      "license": "Apache-2.0",
+      "dependencies": {
+        "@discordjs/builders": "^1.14.1",
+        "@discordjs/collection": "1.5.3",
+        "@discordjs/formatters": "^0.6.2",
+        "@discordjs/rest": "^2.6.2",
+        "@discordjs/util": "^1.2.0",
+        "@discordjs/ws": "^1.2.3",
+        "@sapphire/snowflake": "3.5.5",
+        "discord-api-types": "^0.38.49",
+        "fast-deep-equal": "3.1.3",
+        "lodash.snakecase": "4.1.1",
+        "magic-bytes.js": "^1.13.0",
+        "tslib": "^2.6.3",
+        "undici": "^6.27.0"
+      },
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/discordjs/discord.js?sponsor"
+      }
+    },
+    "node_modules/fast-deep-equal": {
+      "version": "3.1.3",
+      "resolved": "https://registry.npmjs.org/fast-deep-equal/-/fast-deep-equal-3.1.3.tgz",
+      "integrity": "sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==",
+      "license": "MIT"
+    },
+    "node_modules/lodash": {
+      "version": "4.18.1",
+      "resolved": "https://registry.npmjs.org/lodash/-/lodash-4.18.1.tgz",
+      "integrity": "sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==",
+      "license": "MIT"
+    },
+    "node_modules/lodash.snakecase": {
+      "version": "4.1.1",
+      "resolved": "https://registry.npmjs.org/lodash.snakecase/-/lodash.snakecase-4.1.1.tgz",
+      "integrity": "sha512-QZ1d4xoBHYUeuouhEq3lk3Uq7ldgyFXGBhg04+oRLnIz8o9T65Eh+8YdroUwn846zchkA9yDsDl5CVVaV2nqYw==",
+      "license": "MIT"
+    },
+    "node_modules/magic-bytes.js": {
+      "version": "1.13.1",
+      "resolved": "https://registry.npmjs.org/magic-bytes.js/-/magic-bytes.js-1.13.1.tgz",
+      "integrity": "sha512-x5sn4UX2k5gCWlcfmoFwG4TPie8+dctESyqOBdhB5p6MsgWXdBKGmt9nXPObj/JI50TTL928lc5Yt1WntMn1bw==",
+      "license": "MIT"
+    },
+    "node_modules/ts-mixer": {
+      "version": "6.0.4",
+      "resolved": "https://registry.npmjs.org/ts-mixer/-/ts-mixer-6.0.4.tgz",
+      "integrity": "sha512-ufKpbmrugz5Aou4wcr5Wc1UUFWOLhq+Fm6qa6P0w0K5Qw2yhaUoiWszhCVuNQyNwrlGiscHOmqYoAox1PtvgjA==",
+      "license": "MIT"
+    },
+    "node_modules/tslib": {
+      "version": "2.8.1",
+      "resolved": "https://registry.npmjs.org/tslib/-/tslib-2.8.1.tgz",
+      "integrity": "sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==",
+      "license": "0BSD"
+    },
+    "node_modules/undici": {
+      "version": "6.29.1",
+      "resolved": "https://registry.npmjs.org/undici/-/undici-6.29.1.tgz",
+      "integrity": "sha512-EvRlUt/QqAEvXdQeRMYUfwOQsfzpDztykrG2owGEE/rBOBoYv9uF39ZzsNDh4lTFHhTr2XOZjKkYgueD12ZmGA==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18.17"
+      }
+    },
+    "node_modules/undici-types": {
+      "version": "8.9.0",
+      "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-8.9.0.tgz",
+      "integrity": "sha512-KTDyRTYX8sWmKXAikPHHSyc63CRPETMctyjKFupcC6OBLXT3xsN0e9aF7m+mIXutFWpUXuedtowG7iLOzp0kQg==",
+      "license": "MIT"
+    },
+    "node_modules/ws": {
+      "version": "8.22.0",
+      "resolved": "https://registry.npmjs.org/ws/-/ws-8.22.0.tgz",
+      "integrity": "sha512-Ydggc987+RO0AnWtZ/7Wq9FtNvcrL1b/RO0ud9mWjUPgDrsAAwQSF51sm2hm1XofbU/4jkpGEsLFsZZxU+1DOg==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=10.0.0"
+      },
+      "peerDependencies": {
+        "bufferutil": "^4.0.1",
+        "utf-8-validate": ">=5.0.2"
+      },
+      "peerDependenciesMeta": {
+        "bufferutil": {
+          "optional": true
+        },
+        "utf-8-validate": {
+          "optional": true
+        }
+      }
+    }
+  }
+}

package/package.json

@@ -1,6 +1,35 @@
-{
-  "name": "oft-agt",
-  "version": "0.0.0-stage",
-  "stub": true,
-  "description": "Temporary package placeholder for staged publishing"
-}
+{
+  "name": "oft-agt",
+  "version": "0.5.0",
+  "private": false,
+  "type": "module",
+  "engines": {
+    "node": ">=22"
+  },
+  "bin": {
+    "oft-agt": "cli.mjs",
+    "oftone-agent": "cli.mjs"
+  },
+  "files": [
+    "cli.mjs",
+    "instance.mjs",
+    "version.mjs",
+    "release-key.mjs",
+    "update.mjs",
+    "supervisor.mjs",
+    "secret.mjs",
+    "usage.mjs",
+    "compiler.mjs",
+    "compile-plan.mjs",
+    "runtime",
+    "templates",
+    "npm-shrinkwrap.json"
+  ],
+  "dependencies": {
+    "ws": "^8.18.0",
+    "discord.js": "^14.14.0"
+  },
+  "license": "UNLICENSED",
+  "description": "Agent de liaison serveur pour Oftone Builder",
+  "homepage": "https://doc-builder.oftone.fr/agent"
+}

package/release-key.mjs

@@ -0,0 +1 @@
+export const RELEASE_PUBLIC_KEY = "-----BEGIN PUBLIC KEY-----\nMCowBQYDK2VwAyEAyAW2g5wSb82+on2XW1ie9amtHxtX/EEsZhGqw9FNFsI=\n-----END PUBLIC KEY-----\n";

package/runtime/agent-auth.mjs

@@ -0,0 +1,48 @@
+import { randomBytes, randomUUID } from 'node:crypto';
+import { readFile, writeFile, rename, unlink, link, stat } from 'node:fs/promises';
+import path from 'node:path';
+import { alive } from './lifecycle.mjs';
+
+async function save(file, value) { await writeFile(file + '.tmp', JSON.stringify(value), { mode: 0o600 }); await rename(file + '.tmp', file); }
+async function rotationLock(home, action) {
+  const nonce = randomUUID(), file = path.join(home, 'auth-operation.lock'), temporary = path.join(home, `auth-${nonce}.tmp`);
+  await writeFile(temporary, JSON.stringify({ pid: process.pid, nonce }), { flag: 'wx', mode: 0o600 });
+  try {
+    try { await link(temporary, file); }
+    catch (error) {
+      if (error.code !== 'EEXIST') throw error;
+      let previous;
+      try { previous = JSON.parse(await readFile(file, 'utf8')); } catch {}
+      if (alive(previous?.pid) || (!previous && Date.now() - (await stat(file)).mtimeMs < 30000)) throw new Error('AUTH_ROTATION_BUSY');
+      await unlink(file); await link(temporary, file);
+    }
+  } finally { await unlink(temporary); }
+  try { return await action(); }
+  finally { try { if (JSON.parse(await readFile(file, 'utf8')).nonce === nonce) await unlink(file); } catch {} }
+}
+async function complete(home, config, fetchImpl) {
+  const file = path.join(home, 'auth-rotation.json');
+  let pending;
+  try { pending = JSON.parse(await readFile(file, 'utf8')); } catch (error) { if (error.code === 'ENOENT') return config; throw error; }
+  if (!/^[a-f0-9]{64}$/.test(pending.credential || '') || pending.agentId !== config.agentId) throw new Error('AUTH_ROTATION_INVALID');
+  const response = await fetchImpl(`${config.relay}/v1/agents/${config.object}/rotate`, { method: 'POST', headers: { Authorization: `Bearer ${config.credential}`, 'Content-Type': 'application/json' }, body: JSON.stringify({ credential: pending.credential }), signal: AbortSignal.timeout(20000) });
+  if (!response.ok) throw new Error('AUTH_ROTATION_FAILED');
+  const next = { ...config, credential: pending.credential };
+  await save(path.join(home, 'agent.json'), next);
+  await unlink(file);
+  return next;
+}
+export async function completeCredentialRotation(home, config, fetchImpl = fetch) {
+  try { await readFile(path.join(home, 'auth-rotation.json')); } catch (error) { if (error.code === 'ENOENT') return config; throw error; }
+  return rotationLock(home, () => complete(home, config, fetchImpl));
+}
+export async function rotateCredential(home, config, credential = randomBytes(32).toString('hex'), fetchImpl = fetch) {
+  if (!/^[a-f0-9]{64}$/.test(credential) || credential === config.credential) throw new Error('AUTH_ROTATION_INVALID');
+  return rotationLock(home, async () => {
+    const file = path.join(home, 'auth-rotation.json');
+    // Preserve a pending operation after an interrupted response; start/token can resume it.
+    try { await readFile(file); return complete(home, config, fetchImpl); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    await save(file, { credential, agentId: config.agentId });
+    return complete(home, config, fetchImpl);
+  });
+}

package/runtime/command-options.mjs

@@ -0,0 +1,20 @@
+export const OPTION_TYPES = { textOption: { label: 'Texte', type: 3, help: 'Saisir un texte libre.' }, userOption: { label: 'Utilisateur', type: 6, help: 'Sélectionner un utilisateur Discord.' }, channelOption: { label: 'Salon', type: 7, help: 'Sélectionner un salon Discord.' } };
+export const isOption = kind => Object.hasOwn(OPTION_TYPES, kind || '');
+export function optionVariables(kind, name) {
+  const base = `${name || 'nom'}_option`;
+  return [base, ...(kind === 'userOption' ? ['id', 'name', 'displayName', 'avatar'] : kind === 'channelOption' ? ['id', 'name'] : []).map(suffix => `${base}_${suffix}`)];
+}
+export function compileOptions(blocks) {
+  const options = blocks.filter(block => isOption(block.type));
+  if (options.length > 25) throw new Error('Une commande accepte 25 options maximum.');
+  const names = new Set();
+  return options.map(block => {
+    const { name, description, required = true } = block.config || {};
+    if (typeof name !== 'string' || !/^[a-z0-9_-]{1,32}$/.test(name)) throw new Error('Nom d’option : 1 à 32 minuscules, chiffres, tirets ou underscores.');
+    if (names.has(name)) throw new Error(`Option dupliquée : ${name}.`);
+    names.add(name);
+    if (typeof description !== 'string' || !description.trim() || description.length > 100) throw new Error(`Option ${name} : une description de 1 à 100 caractères est requise.`);
+    if (typeof required !== 'boolean') throw new Error(`Option ${name} : le champ requis doit être un booléen.`);
+    return { id: block.id, kind: block.type, type: OPTION_TYPES[block.type].type, name, description, required };
+  }).sort((a, b) => Number(b.required) - Number(a.required));
+}

package/runtime/conditions.mjs

@@ -0,0 +1,80 @@
+export const CONDITION_TYPES = {
+  comparisonCondition: { label: 'Comparaison', help: 'Comparer des valeurs, du texte ou des variables.' },
+  userCondition: { label: 'Utilisateur', help: 'Vérifier qui exécute la commande.' },
+  channelCondition: { label: 'Salon', help: 'Vérifier dans quel salon la commande est exécutée.' },
+  permissionCondition: { label: 'Permissions', help: 'Vérifier les permissions Discord de l’auteur.' },
+};
+export const isCondition = kind => Object.hasOwn(CONDITION_TYPES, kind || '');
+export const COMPARISONS = { eq: 'Égal à', ne: 'Différent de', lt: 'Inférieur à', lte: 'Inférieur ou égal à', gt: 'Supérieur à', gte: 'Supérieur ou égal à', contains: 'Contient', notContains: 'Ne contient pas', startsWith: 'Commence par', endsWith: 'Se termine par', empty: 'Est vide', notEmpty: 'N’est pas vide' };
+// Discord permission flags: https://docs.discord.com/developers/topics/permissions
+const permissionNames = [
+  ['CreateInstantInvite','Créer des invitations'],['KickMembers','Expulser des membres'],['BanMembers','Bannir des membres'],['Administrator','Administrateur'],['ManageChannels','Gérer les salons'],['ManageGuild','Gérer le serveur'],['AddReactions','Ajouter des réactions'],['ViewAuditLog','Voir les logs du serveur'],['PrioritySpeaker','Voix prioritaire'],['Stream','Diffuser une vidéo'],['ViewChannel','Voir les salons'],['SendMessages','Envoyer des messages'],['SendTTSMessages','Envoyer des messages vocaux TTS'],['ManageMessages','Gérer les messages'],['EmbedLinks','Intégrer des liens'],['AttachFiles','Joindre des fichiers'],['ReadMessageHistory','Voir les anciens messages'],['MentionEveryone','Mentionner everyone et here'],['UseExternalEmojis','Utiliser des emojis externes'],['ViewGuildInsights','Voir les statistiques du serveur'],['Connect','Se connecter au vocal'],['Speak','Parler'],['MuteMembers','Rendre des membres muets'],['DeafenMembers','Mettre des membres en sourdine'],['MoveMembers','Déplacer des membres'],['UseVAD','Utiliser la détection de voix'],['ChangeNickname','Changer son pseudo'],['ManageNicknames','Gérer les pseudos'],['ManageRoles','Gérer les rôles'],['ManageWebhooks','Gérer les webhooks'],['ManageGuildExpressions','Gérer les expressions du serveur'],['UseApplicationCommands','Utiliser les commandes des applications'],['RequestToSpeak','Demander la parole'],['ManageEvents','Gérer les événements'],['ManageThreads','Gérer les fils'],['CreatePublicThreads','Créer des fils publics'],['CreatePrivateThreads','Créer des fils privés'],['UseExternalStickers','Utiliser des stickers externes'],['SendMessagesInThreads','Envoyer des messages dans les fils'],['UseEmbeddedActivities','Utiliser les activités'],['ModerateMembers','Exclure temporairement des membres'],['ViewCreatorMonetizationAnalytics','Voir les statistiques de monétisation'],['UseSoundboard','Utiliser la soundboard'],['CreateGuildExpressions','Créer des expressions du serveur'],['CreateEvents','Créer des événements'],['UseExternalSounds','Utiliser des sons externes'],['SendVoiceMessages','Envoyer des messages vocaux'],null,['SetVoiceChannelStatus','Définir le statut du salon vocal'],['SendPolls','Envoyer des sondages'],['UseExternalApps','Utiliser des applications externes'],['PinMessages','Épingler des messages'],['BypassSlowmode','Contourner le mode lent'],
+];
+export const DISCORD_PERMISSIONS = permissionNames.flatMap((entry, bit) => entry ? [{ key: entry[0], label: entry[1], value: (1n << BigInt(bit)).toString() }] : []);
+const permissions = new Map(DISCORD_PERMISSIONS.map(permission => [permission.key, permission.value]));
+export function validateCondition(kind, config) {
+  if (!isCondition(kind) || !config || !Array.isArray(config.rules) || config.rules.length > 25) throw new Error('Un bloc accepte 25 conditions maximum.');
+  const ids = new Set(['else']);
+  return { rules: config.rules.map(rule => {
+    if (!rule || typeof rule.id !== 'string' || !/^[a-zA-Z0-9_-]{1,100}$/.test(rule.id) || ids.has(rule.id)) throw new Error('Identifiant de condition invalide ou dupliqué.');
+    ids.add(rule.id);
+    const string = (value, name, required = true) => {
+      if (typeof value !== 'string' || value.length > 6000 || (required && !value.trim())) throw new Error(`${name} : renseignez une valeur (6 000 caractères maximum).`);
+      return value;
+    };
+    if (kind === 'comparisonCondition') {
+      if (!Object.hasOwn(COMPARISONS, rule.operator)) throw new Error('Comparaison inconnue.');
+      return { id: rule.id, value: string(rule.value, 'Valeur', false), operator: rule.operator, compare: string(rule.compare ?? '', 'Valeur de comparaison', false) };
+    }
+    if (!['is', 'isNot'].includes(rule.mode)) throw new Error('Choisissez si la condition doit être satisfaite ou inversée.');
+    if (kind === 'permissionCondition') {
+      if (!Array.isArray(rule.permissions) || !rule.permissions.length || rule.permissions.length > DISCORD_PERMISSIONS.length || rule.permissions.some(key => !permissions.has(key)) || new Set(rule.permissions).size !== rule.permissions.length) throw new Error('Choisissez des permissions Discord valides.');
+      return { id: rule.id, mode: rule.mode, permissions: [...rule.permissions] };
+    }
+    const value = string(rule.value, 'Identifiant ou variable');
+    if (!/^\d{17,20}$/.test(value) && !/^<[@#]!?\d{17,20}>$/.test(value) && !/\{[^{}]+\}/.test(value)) throw new Error('Renseignez un identifiant Discord, une mention ou une variable.');
+    return { id: rule.id, mode: rule.mode, value };
+  }) };
+}
+
+export function conditionLabel(kind, rule, index) {
+  if (kind === 'comparisonCondition') return `${rule.value || 'Valeur vide'} ${COMPARISONS[rule.operator]?.toLowerCase() || ''} ${['empty', 'notEmpty'].includes(rule.operator) ? '' : rule.compare || 'valeur vide'}`.trim();
+  if (kind === 'permissionCondition') return `${rule.mode === 'isNot' ? 'Sans' : 'Avec'} ${rule.permissions.length} permission(s)`;
+  return `${rule.mode === 'isNot' ? 'Tout sauf' : kind === 'userCondition' ? 'Utilisateur' : 'Salon'} ${rule.value || index + 1}`;
+}
+
+export function matchesCondition(kind, rule, interaction) {
+  if (kind === 'comparisonCondition') {
+    const a = String(rule.value ?? ''), b = String(rule.compare ?? '');
+    const numeric = value => value.trim() !== '' && Number.isFinite(Number(value));
+    const integers = /^[+-]?\d+$/.test(a.trim()) && /^[+-]?\d+$/.test(b.trim());
+    const left = integers ? BigInt(a.trim()) : Number(a), right = integers ? BigInt(b.trim()) : Number(b);
+    switch (rule.operator) {
+      case 'eq': return numeric(a) && numeric(b) ? left === right : a === b;
+      case 'ne': return numeric(a) && numeric(b) ? left !== right : a !== b;
+      case 'lt': return numeric(a) && numeric(b) && left < right;
+      case 'lte': return numeric(a) && numeric(b) && left <= right;
+      case 'gt': return numeric(a) && numeric(b) && left > right;
+      case 'gte': return numeric(a) && numeric(b) && left >= right;
+      case 'contains': return a.includes(b);
+      case 'notContains': return !a.includes(b);
+      case 'startsWith': return a.startsWith(b);
+      case 'endsWith': return a.endsWith(b);
+      case 'empty': return a.length === 0;
+      case 'notEmpty': return a.length !== 0;
+      default: throw new Error('CONDITION_OPERATOR_INVALID');
+    }
+  }
+  if (kind === 'permissionCondition') {
+    // Fail closed in DMs or when Discord did not supply member permissions, even for negations.
+    if (!interaction.guildId || !interaction.memberPermissions) return false;
+    const mask = BigInt(interaction.memberPermissions.bitfield ?? interaction.memberPermissions);
+    const has = key => Boolean(mask & 8n) || (mask & BigInt(permissions.get(key))) !== 0n;
+    return rule.mode === 'isNot' ? rule.permissions.every(key => !has(key)) : rule.permissions.every(has);
+  }
+  const id = String(rule.value || '').replace(/^<[@#]!?([0-9]+)>$/, '$1');
+  if (!/^\d{17,20}$/.test(id)) return false;
+  const actual = kind === 'userCondition' ? interaction.user?.id : interaction.channelId;
+  if (!actual) return false;
+  return rule.mode === 'isNot' ? actual !== id : actual === id;
+}

package/runtime/device-login.mjs

@@ -0,0 +1,58 @@
+import { generateKeyPairSync, randomBytes, createHash } from 'node:crypto';
+import { readFile, writeFile, mkdir, rename, unlink, open, stat } from 'node:fs/promises';
+import { spawn } from 'node:child_process';
+import path from 'node:path';
+import { alive } from './lifecycle.mjs';
+
+export const RELAY = 'https://oftone-agent-relay.hugocoutant2008.workers.dev';
+const hash = value => createHash('sha256').update(value).digest('hex');
+async function save(file, value) { await writeFile(file + '.tmp', JSON.stringify(value), { mode: 0o600 }); await rename(file + '.tmp', file); }
+export function openLoginPage(url) {
+  const [command, args] = process.platform === 'win32' ? ['rundll32.exe', ['url.dll,FileProtocolHandler', url]] : process.platform === 'darwin' ? ['open', [url]] : ['xdg-open', [url]];
+  const child = spawn(command, args, { detached: true, windowsHide: true, shell: false, stdio: 'ignore' }); child.on('error', () => {}); child.unref();
+}
+
+export async function authorizeDevice(base, { dashboard = 'https://builder.oftone.fr', noOpen = false, fetchImpl = fetch, sleep = ms => new Promise(resolve => setTimeout(resolve, ms)), now = Date.now, instructions = (url, code) => { console.log('Connectez-vous avec Discord depuis cet appareil ou un autre :\n' + url); console.log('Code de confirmation : ' + code); console.log('En attente du choix du bot dans le navigateur…'); }, openPage = openLoginPage } = {}) {
+  const website = new URL(dashboard);
+  if (website.origin !== 'https://builder.oftone.fr' && !(website.protocol === 'http:' && ['localhost', '127.0.0.1'].includes(website.hostname))) throw new Error('LOGIN_ORIGIN_INVALID');
+  await mkdir(base, { recursive: true, mode: 0o700 });
+  const lockPath = path.join(base, 'login.lock'); let lock;
+  try { lock = await open(lockPath, 'wx', 0o600); }
+  catch (error) {
+    if (error.code !== 'EEXIST') throw error;
+    const pid = Number(await readFile(lockPath, 'utf8'));
+    if (alive(pid) || (!pid && now() - (await stat(lockPath)).mtimeMs < 30000)) throw new Error('LOGIN_BUSY');
+    await unlink(lockPath); lock = await open(lockPath, 'wx', 0o600);
+  }
+  await lock.writeFile(String(process.pid));
+  const file = path.join(base, 'login-pending.json');
+  try {
+    let pending;
+    try { pending = JSON.parse(await readFile(file, 'utf8')); } catch (error) { if (error.code !== 'ENOENT') throw error; }
+    if (!pending || pending.expiresAt <= now()) {
+      const keys = generateKeyPairSync('rsa', { modulusLength: 4096 });
+      const credential = randomBytes(32).toString('hex'), pollSecret = randomBytes(32).toString('hex');
+      const response = await fetchImpl(RELAY + '/v1/device/start', { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ credentialHash: hash(credential), pollHash: hash(pollSecret), publicKey: keys.publicKey.export({ format: 'jwk' }) }), signal: AbortSignal.timeout(20000) });
+      if (!response.ok) throw new Error('LOGIN_START_FAILED');
+      const result = await response.json();
+      if (!/^[a-f0-9]{64}$/.test(result.deviceId || '') || !/^[0-9A-HJKMNP-TV-Z]{4}-[0-9A-HJKMNP-TV-Z]{4}$/.test(result.userCode || '') || result.expiresIn !== 600) throw new Error('LOGIN_RESPONSE_INVALID');
+      pending = { deviceId: result.deviceId, userCode: result.userCode, expiresAt: now() + 600000, credential, pollSecret, privateKey: keys.privateKey.export({ type: 'pkcs8', format: 'pem' }) };
+      await save(file, pending);
+    }
+    const url = new URL('/agent-connect', website); url.searchParams.set('device', pending.deviceId);
+    instructions(url.href, pending.userCode); if (!noOpen) openPage(url.href);
+    while (now() < pending.expiresAt) {
+      await sleep(3000);
+      let response;
+      try { response = await fetchImpl(`${RELAY}/v1/device/${pending.deviceId}/poll`, { method: 'POST', headers: { 'Content-Type': 'application/json' }, body: JSON.stringify({ pollSecret: pending.pollSecret }), signal: AbortSignal.timeout(20000) }); }
+      catch { continue; }
+      if (response.status === 429) { await sleep(3000); continue; }
+      if (!response.ok) throw new Error(response.status === 410 ? 'LOGIN_EXPIRED' : 'LOGIN_FAILED');
+      const result = await response.json();
+      if (result.state !== 'approved') continue;
+      if (!/^[a-f0-9]{64}$/.test(result.objectId || '') || !/^[a-f0-9-]{36}$/.test(result.agentId || '')) throw new Error('LOGIN_RESPONSE_INVALID');
+      return { config: { relay: RELAY, object: result.objectId, agentId: result.agentId, credential: pending.credential }, privateKey: pending.privateKey, pendingFile: file };
+    }
+    throw new Error('LOGIN_EXPIRED');
+  } finally { await lock.close(); await unlink(lockPath).catch(() => {}); }
+}