patchwork-os 0.2.0-alpha.8 → 0.2.0-beta.0

package/dist/connectors/datadog.js

@@ -0,0 +1,385 @@
+/**
+ * Datadog connector — query metrics, monitors, alerts, and incidents.
+ *
+ * Auth: API key + Application key.
+ *   - Env vars: DATADOG_API_KEY, DATADOG_APP_KEY, DATADOG_SITE (optional)
+ *   - Stored: getSecretJsonSync("datadog") → DatadogTokens
+ *   - Headers: DD-API-KEY + DD-APPLICATION-KEY
+ *
+ * Tools: queryMetrics, listMonitors, getMonitor, listActiveAlerts, muteMonitor, listIncidents
+ *
+ * Extends BaseConnector for unified auth, retry, rate-limit, error handling.
+ */
+import { BaseConnector, } from "./baseConnector.js";
+import { deleteSecretJsonSync, getSecretJsonSync, storeSecretJsonSync, } from "./tokenStorage.js";
+export class DatadogConnector extends BaseConnector {
+    providerName = "datadog";
+    tokens = null;
+    getOAuthConfig() {
+        return null;
+    }
+    async authenticate() {
+        const tokens = loadTokens();
+        if (!tokens) {
+            throw new Error("Datadog not connected. Run: patchwork-os connect datadog or set DATADOG_API_KEY");
+        }
+        this.tokens = tokens;
+        return {
+            token: tokens.apiKey,
+            scopes: ["read", "write"],
+        };
+    }
+    async healthCheck() {
+        try {
+            const result = await this.apiCall(async () => {
+                const res = await fetch(`${this.baseUrl()}/api/v1/validate`, {
+                    headers: this.buildHeaders(),
+                });
+                if (!res.ok)
+                    throw new Error(`HTTP ${res.status}`);
+                return res.json();
+            });
+            if ("error" in result)
+                return { ok: false, error: result.error };
+            return { ok: true };
+        }
+        catch (err) {
+            return { ok: false, error: this.normalizeError(err) };
+        }
+    }
+    normalizeError(error) {
+        if (error instanceof Response) {
+            const s = error.status;
+            if (s === 401 || s === 403)
+                return {
+                    code: "auth_expired",
+                    message: "Datadog authentication failed — check API key and App key",
+                    retryable: false,
+                    suggestedAction: "patchwork-os connect datadog",
+                };
+            if (s === 404)
+                return {
+                    code: "not_found",
+                    message: "Datadog resource not found",
+                    retryable: false,
+                };
+            if (s === 429)
+                return {
+                    code: "rate_limited",
+                    message: "Datadog API rate limit exceeded",
+                    retryable: true,
+                    suggestedAction: "Wait and retry",
+                };
+            return {
+                code: "provider_error",
+                message: `Datadog API error: HTTP ${s}`,
+                retryable: s >= 500,
+            };
+        }
+        if (error instanceof Error) {
+            if (error.message.includes("ENOTFOUND") ||
+                error.message.includes("ECONNREFUSED")) {
+                return {
+                    code: "network_error",
+                    message: `Cannot connect to Datadog: ${error.message}`,
+                    retryable: true,
+                };
+            }
+        }
+        return {
+            code: "provider_error",
+            message: error instanceof Error ? error.message : String(error),
+            retryable: false,
+        };
+    }
+    getStatus() {
+        const tokens = loadTokens();
+        return {
+            id: "datadog",
+            status: tokens ? "connected" : "disconnected",
+            lastSync: tokens?.connected_at,
+            workspace: tokens?.orgName ?? tokens?.site ?? undefined,
+        };
+    }
+    // ── API Methods ────────────────────────────────────────────────────────────
+    async queryMetrics(query, from, to) {
+        const result = await this.apiCall(async () => {
+            const q = encodeURIComponent(query);
+            const url = `${this.baseUrl()}/api/v1/query?query=${q}&from=${from}&to=${to}`;
+            const res = await fetch(url, { headers: this.buildHeaders() });
+            this.updateRateLimitFromHeaders({
+                "x-ratelimit-remaining": res.headers.get("x-ratelimit-remaining") ?? undefined,
+                "retry-after": res.headers.get("retry-after") ?? undefined,
+            });
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async listMonitors(params = {}) {
+        const result = await this.apiCall(async () => {
+            const qs = new URLSearchParams({ group_states: "all" });
+            if (params.tags?.length)
+                qs.set("tags", params.tags.join(","));
+            if (params.perPage)
+                qs.set("per_page", String(params.perPage));
+            const res = await fetch(`${this.baseUrl()}/api/v1/monitor?${qs}`, {
+                headers: this.buildHeaders(),
+            });
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async getMonitor(monitorId) {
+        const result = await this.apiCall(async () => {
+            const res = await fetch(`${this.baseUrl()}/api/v1/monitor/${monitorId}`, {
+                headers: this.buildHeaders(),
+            });
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async listActiveAlerts(params = {}) {
+        const result = await this.apiCall(async () => {
+            const qs = new URLSearchParams({
+                monitor_tags: "*",
+                group_states: "Alert,Warn",
+                with_downtimes: "false",
+            });
+            if (params.priority !== undefined)
+                qs.set("priority", String(params.priority));
+            const res = await fetch(`${this.baseUrl()}/api/v1/monitor?${qs}`, {
+                headers: this.buildHeaders(),
+            });
+            if (!res.ok)
+                throw res;
+            const monitors = (await res.json());
+            return monitors.filter((m) => m.overall_state === "Alert" || m.overall_state === "Warn");
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async muteMonitor(monitorId, end) {
+        const result = await this.apiCall(async () => {
+            const body = {};
+            if (end !== undefined)
+                body.end = end;
+            const res = await fetch(`${this.baseUrl()}/api/v1/monitor/${monitorId}/mute`, {
+                method: "POST",
+                headers: this.buildHeaders(),
+                body: JSON.stringify(body),
+            });
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    async listIncidents(params = {}) {
+        const result = await this.apiCall(async () => {
+            const qs = new URLSearchParams();
+            if (params.perPage)
+                qs.set("page[size]", String(params.perPage));
+            const url = `${this.baseUrl()}/api/v2/incidents${qs.toString() ? `?${qs}` : ""}`;
+            const res = await fetch(url, { headers: this.buildHeaders() });
+            if (!res.ok)
+                throw res;
+            return res.json();
+        });
+        if ("error" in result)
+            throw new Error(result.error.message);
+        return result.data;
+    }
+    // ── Helpers ────────────────────────────────────────────────────────────────
+    baseUrl() {
+        return `https://api.${this.tokens?.site ?? "datadoghq.com"}`;
+    }
+    buildHeaders() {
+        return {
+            "DD-API-KEY": this.tokens?.apiKey ?? "",
+            "DD-APPLICATION-KEY": this.tokens?.appKey ?? "",
+            "Content-Type": "application/json",
+            Accept: "application/json",
+        };
+    }
+}
+// ── Token persistence ────────────────────────────────────────────────────────
+export function loadTokens() {
+    const envApiKey = process.env.DATADOG_API_KEY;
+    const envAppKey = process.env.DATADOG_APP_KEY;
+    if (envApiKey && envAppKey) {
+        return {
+            apiKey: envApiKey,
+            appKey: envAppKey,
+            site: process.env.DATADOG_SITE ?? "datadoghq.com",
+            connected_at: new Date().toISOString(),
+        };
+    }
+    return getSecretJsonSync("datadog");
+}
+export function saveTokens(tokens) {
+    storeSecretJsonSync("datadog", tokens);
+}
+export function clearTokens() {
+    try {
+        deleteSecretJsonSync("datadog");
+    }
+    catch {
+        // ignore
+    }
+}
+// ── Singleton instance ───────────────────────────────────────────────────────
+let _instance = null;
+function resetDatadogConnector() {
+    _instance = null;
+}
+export function getDatadogConnector() {
+    if (!_instance) {
+        _instance = new DatadogConnector();
+    }
+    return _instance;
+}
+export { getDatadogConnector as datadog };
+/**
+ * POST /connections/datadog/connect  { apiKey, appKey, site? }
+ */
+export async function handleDatadogConnect(body) {
+    let apiKey;
+    let appKey;
+    let site;
+    try {
+        const parsed = JSON.parse(body);
+        if (typeof parsed.apiKey !== "string" || !parsed.apiKey) {
+            return {
+                status: 400,
+                contentType: "application/json",
+                body: JSON.stringify({ ok: false, error: "apiKey is required" }),
+            };
+        }
+        if (typeof parsed.appKey !== "string" || !parsed.appKey) {
+            return {
+                status: 400,
+                contentType: "application/json",
+                body: JSON.stringify({ ok: false, error: "appKey is required" }),
+            };
+        }
+        apiKey = parsed.apiKey;
+        appKey = parsed.appKey;
+        site =
+            typeof parsed.site === "string" && parsed.site
+                ? parsed.site
+                : "datadoghq.com";
+    }
+    catch {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error: "Invalid JSON body" }),
+        };
+    }
+    try {
+        const res = await fetch(`https://api.${site}/api/v1/validate`, {
+            headers: {
+                "DD-API-KEY": apiKey,
+                "DD-APPLICATION-KEY": appKey,
+                Accept: "application/json",
+            },
+        });
+        if (!res.ok) {
+            return {
+                status: 401,
+                contentType: "application/json",
+                body: JSON.stringify({
+                    ok: false,
+                    error: `Credentials rejected by Datadog (HTTP ${res.status}) — check apiKey and appKey`,
+                }),
+            };
+        }
+        const tokens = {
+            apiKey,
+            appKey,
+            site,
+            connected_at: new Date().toISOString(),
+        };
+        saveTokens(tokens);
+        resetDatadogConnector();
+        return {
+            status: 200,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: true,
+                site,
+                connectedAt: tokens.connected_at,
+            }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 500,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+/**
+ * POST /connections/datadog/test
+ */
+export async function handleDatadogTest() {
+    const tokens = loadTokens();
+    if (!tokens) {
+        return {
+            status: 400,
+            contentType: "application/json",
+            body: JSON.stringify({ ok: false, error: "Datadog not connected" }),
+        };
+    }
+    try {
+        const connector = getDatadogConnector();
+        const check = await connector.healthCheck();
+        return {
+            status: check.ok ? 200 : 401,
+            contentType: "application/json",
+            body: JSON.stringify(check.ok ? { ok: true } : { ok: false, error: check.error?.message }),
+        };
+    }
+    catch (err) {
+        return {
+            status: 500,
+            contentType: "application/json",
+            body: JSON.stringify({
+                ok: false,
+                error: err instanceof Error ? err.message : String(err),
+            }),
+        };
+    }
+}
+/**
+ * DELETE /connections/datadog
+ */
+export function handleDatadogDisconnect() {
+    clearTokens();
+    resetDatadogConnector();
+    return {
+        status: 200,
+        contentType: "application/json",
+        body: JSON.stringify({ ok: true }),
+    };
+}
+//# sourceMappingURL=datadog.js.map

package/dist/connectors/datadog.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"datadog.js","sourceRoot":"","sources":["../../src/connectors/datadog.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG;AAEH,OAAO,EAEL,aAAa,GAGd,MAAM,oBAAoB,CAAC;AAC5B,OAAO,EACL,oBAAoB,EACpB,iBAAiB,EACjB,mBAAmB,GACpB,MAAM,mBAAmB,CAAC;AAmD3B,MAAM,OAAO,gBAAiB,SAAQ,aAAa;IACxC,YAAY,GAAG,SAAS,CAAC;IAC1B,MAAM,GAAyB,IAAI,CAAC;IAElC,cAAc;QACtB,OAAO,IAAI,CAAC;IACd,CAAC;IAED,KAAK,CAAC,YAAY;QAChB,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;YACZ,MAAM,IAAI,KAAK,CACb,iFAAiF,CAClF,CAAC;QACJ,CAAC;QACD,IAAI,CAAC,MAAM,GAAG,MAAM,CAAC;QACrB,OAAO;YACL,KAAK,EAAE,MAAM,CAAC,MAAM;YACpB,MAAM,EAAE,CAAC,MAAM,EAAE,OAAO,CAAC;SAC1B,CAAC;IACJ,CAAC;IAED,KAAK,CAAC,WAAW;QACf,IAAI,CAAC;YACH,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;gBAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,kBAAkB,EAAE;oBAC3D,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;iBAC7B,CAAC,CAAC;gBACH,IAAI,CAAC,GAAG,CAAC,EAAE;oBAAE,MAAM,IAAI,KAAK,CAAC,QAAQ,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;gBACnD,OAAO,GAAG,CAAC,IAAI,EAAE,CAAC;YACpB,CAAC,CAAC,CAAC;YACH,IAAI,OAAO,IAAI,MAAM;gBAAE,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,MAAM,CAAC,KAAK,EAAE,CAAC;YACjE,OAAO,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;QACtB,CAAC;QAAC,OAAO,GAAG,EAAE,CAAC;YACb,OAAO,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,IAAI,CAAC,cAAc,CAAC,GAAG,CAAC,EAAE,CAAC;QACxD,CAAC;IACH,CAAC;IAED,cAAc,CAAC,KAAc;QAC3B,IAAI,KAAK,YAAY,QAAQ,EAAE,CAAC;YAC9B,MAAM,CAAC,GAAG,KAAK,CAAC,MAAM,CAAC;YACvB,IAAI,CAAC,KAAK,GAAG,IAAI,CAAC,KAAK,GAAG;gBACxB,OAAO;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,2DAA2D;oBACpE,SAAS,EAAE,KAAK;oBAChB,eAAe,EAAE,8BAA8B;iBAChD,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,WAAW;oBACjB,OAAO,EAAE,4BAA4B;oBACrC,SAAS,EAAE,KAAK;iBACjB,CAAC;YACJ,IAAI,CAAC,KAAK,GAAG;gBACX,OAAO;oBACL,IAAI,EAAE,cAAc;oBACpB,OAAO,EAAE,iCAAiC;oBAC1C,SAAS,EAAE,IAAI;oBACf,eAAe,EAAE,gBAAgB;iBAClC,CAAC;YACJ,OAAO;gBACL,IAAI,EAAE,gBAAgB;gBACtB,OAAO,EAAE,2BAA2B,CAAC,EAAE;gBACvC,SAAS,EAAE,CAAC,IAAI,GAAG;aACpB,CAAC;QACJ,CAAC;QACD,IAAI,KAAK,YAAY,KAAK,EAAE,CAAC;YAC3B,IACE,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,WAAW,CAAC;gBACnC,KAAK,CAAC,OAAO,CAAC,QAAQ,CAAC,cAAc,CAAC,EACtC,CAAC;gBACD,OAAO;oBACL,IAAI,EAAE,eAAe;oBACrB,OAAO,EAAE,8BAA8B,KAAK,CAAC,OAAO,EAAE;oBACtD,SAAS,EAAE,IAAI;iBAChB,CAAC;YACJ,CAAC;QACH,CAAC;QACD,OAAO;YACL,IAAI,EAAE,gBAAgB;YACtB,OAAO,EAAE,KAAK,YAAY,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC;YAC/D,SAAS,EAAE,KAAK;SACjB,CAAC;IACJ,CAAC;IAED,SAAS;QACP,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;QAC5B,OAAO;YACL,EAAE,EAAE,SAAS;YACb,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,CAAC,cAAc;YAC7C,QAAQ,EAAE,MAAM,EAAE,YAAY;YAC9B,SAAS,EAAE,MAAM,EAAE,OAAO,IAAI,MAAM,EAAE,IAAI,IAAI,SAAS;SACxD,CAAC;IACJ,CAAC;IAED,8EAA8E;IAE9E,KAAK,CAAC,YAAY,CAChB,KAAa,EACb,IAAY,EACZ,EAAU;QAEV,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,CAAC,CAAC;YACpC,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,uBAAuB,CAAC,SAAS,IAAI,OAAO,EAAE,EAAE,CAAC;YAC9E,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAE/D,IAAI,CAAC,0BAA0B,CAAC;gBAC9B,uBAAuB,EACrB,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,uBAAuB,CAAC,IAAI,SAAS;gBACvD,aAAa,EAAE,GAAG,CAAC,OAAO,CAAC,GAAG,CAAC,aAAa,CAAC,IAAI,SAAS;aAC3D,CAAC,CAAC;YAEH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA0C,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAmC,CAAC;IACpD,CAAC;IAED,KAAK,CAAC,YAAY,CAChB,SAAwE,EAAE;QAE1E,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC,EAAE,YAAY,EAAE,KAAK,EAAE,CAAC,CAAC;YACxD,IAAI,MAAM,CAAC,IAAI,EAAE,MAAM;gBAAE,EAAE,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC,CAAC;YAC/D,IAAI,MAAM,CAAC,OAAO;gBAAE,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YAC/D,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE;gBAChE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA+B,CAAC;QACjD,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAwB,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,UAAU,CAAC,SAAiB;QAChC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,SAAS,EAAE,EAAE;gBACvE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA6B,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAsB,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,gBAAgB,CACpB,SAAgC,EAAE;QAElC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,EAAE,GAAG,IAAI,eAAe,CAAC;gBAC7B,YAAY,EAAE,GAAG;gBACjB,YAAY,EAAE,YAAY;gBAC1B,cAAc,EAAE,OAAO;aACxB,CAAC,CAAC;YACH,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS;gBAC/B,EAAE,CAAC,GAAG,CAAC,UAAU,EAAE,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,CAAC;YAC9C,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,EAAE,EAAE,EAAE;gBAChE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;aAC7B,CAAC,CAAC;YACH,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,MAAM,QAAQ,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAqB,CAAC;YACxD,OAAO,QAAQ,CAAC,MAAM,CACpB,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,aAAa,KAAK,OAAO,IAAI,CAAC,CAAC,aAAa,KAAK,MAAM,CACjE,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAwB,CAAC;IACzC,CAAC;IAED,KAAK,CAAC,WAAW,CAAC,SAAiB,EAAE,GAAY;QAC/C,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,IAAI,GAA4B,EAAE,CAAC;YACzC,IAAI,GAAG,KAAK,SAAS;gBAAE,IAAI,CAAC,GAAG,GAAG,GAAG,CAAC;YACtC,MAAM,GAAG,GAAG,MAAM,KAAK,CACrB,GAAG,IAAI,CAAC,OAAO,EAAE,mBAAmB,SAAS,OAAO,EACpD;gBACE,MAAM,EAAE,MAAM;gBACd,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE;gBAC5B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;aAC3B,CACF,CAAC;YACF,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA6B,CAAC;QAC/C,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAsB,CAAC;IACvC,CAAC;IAED,KAAK,CAAC,aAAa,CACjB,SAA+B,EAAE;QAEjC,MAAM,MAAM,GAAG,MAAM,IAAI,CAAC,OAAO,CAAC,KAAK,IAAI,EAAE;YAC3C,MAAM,EAAE,GAAG,IAAI,eAAe,EAAE,CAAC;YACjC,IAAI,MAAM,CAAC,OAAO;gBAAE,EAAE,CAAC,GAAG,CAAC,YAAY,EAAE,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC;YACjE,MAAM,GAAG,GAAG,GAAG,IAAI,CAAC,OAAO,EAAE,oBAAoB,EAAE,CAAC,QAAQ,EAAE,CAAC,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC;YACjF,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,GAAG,EAAE,EAAE,OAAO,EAAE,IAAI,CAAC,YAAY,EAAE,EAAE,CAAC,CAAC;YAC/D,IAAI,CAAC,GAAG,CAAC,EAAE;gBAAE,MAAM,GAAG,CAAC;YACvB,OAAO,GAAG,CAAC,IAAI,EAA0C,CAAC;QAC5D,CAAC,CAAC,CAAC;QAEH,IAAI,OAAO,IAAI,MAAM;YAAE,MAAM,IAAI,KAAK,CAAC,MAAM,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC;QAC7D,OAAO,MAAM,CAAC,IAAmC,CAAC;IACpD,CAAC;IAED,8EAA8E;IAEtE,OAAO;QACb,OAAO,eAAe,IAAI,CAAC,MAAM,EAAE,IAAI,IAAI,eAAe,EAAE,CAAC;IAC/D,CAAC;IAEO,YAAY;QAClB,OAAO;YACL,YAAY,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;YACvC,oBAAoB,EAAE,IAAI,CAAC,MAAM,EAAE,MAAM,IAAI,EAAE;YAC/C,cAAc,EAAE,kBAAkB;YAClC,MAAM,EAAE,kBAAkB;SAC3B,CAAC;IACJ,CAAC;CACF;AAED,gFAAgF;AAEhF,MAAM,UAAU,UAAU;IACxB,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9C,MAAM,SAAS,GAAG,OAAO,CAAC,GAAG,CAAC,eAAe,CAAC;IAC9C,IAAI,SAAS,IAAI,SAAS,EAAE,CAAC;QAC3B,OAAO;YACL,MAAM,EAAE,SAAS;YACjB,MAAM,EAAE,SAAS;YACjB,IAAI,EAAE,OAAO,CAAC,GAAG,CAAC,YAAY,IAAI,eAAe;YACjD,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;IACJ,CAAC;IACD,OAAO,iBAAiB,CAAgB,SAAS,CAAC,CAAC;AACrD,CAAC;AAED,MAAM,UAAU,UAAU,CAAC,MAAqB;IAC9C,mBAAmB,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;AACzC,CAAC;AAED,MAAM,UAAU,WAAW;IACzB,IAAI,CAAC;QACH,oBAAoB,CAAC,SAAS,CAAC,CAAC;IAClC,CAAC;IAAC,MAAM,CAAC;QACP,SAAS;IACX,CAAC;AACH,CAAC;AAED,gFAAgF;AAEhF,IAAI,SAAS,GAA4B,IAAI,CAAC;AAE9C,SAAS,qBAAqB;IAC5B,SAAS,GAAG,IAAI,CAAC;AACnB,CAAC;AAED,MAAM,UAAU,mBAAmB;IACjC,IAAI,CAAC,SAAS,EAAE,CAAC;QACf,SAAS,GAAG,IAAI,gBAAgB,EAAE,CAAC;IACrC,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,OAAO,EAAE,mBAAmB,IAAI,OAAO,EAAE,CAAC;AAW1C;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,IAAY;IAEZ,IAAI,MAAc,CAAC;IACnB,IAAI,MAAc,CAAC;IACnB,IAAI,IAAwB,CAAC;IAE7B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAI7B,CAAC;QACF,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;aACjE,CAAC;QACJ,CAAC;QACD,IAAI,OAAO,MAAM,CAAC,MAAM,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,MAAM,EAAE,CAAC;YACxD,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,oBAAoB,EAAE,CAAC;aACjE,CAAC;QACJ,CAAC;QACD,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;QACvB,IAAI;YACF,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,IAAI,MAAM,CAAC,IAAI;gBAC5C,CAAC,CAAC,MAAM,CAAC,IAAI;gBACb,CAAC,CAAC,eAAe,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,mBAAmB,EAAE,CAAC;SAChE,CAAC;IACJ,CAAC;IAED,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,MAAM,KAAK,CAAC,eAAe,IAAI,kBAAkB,EAAE;YAC7D,OAAO,EAAE;gBACP,YAAY,EAAE,MAAM;gBACpB,oBAAoB,EAAE,MAAM;gBAC5B,MAAM,EAAE,kBAAkB;aAC3B;SACF,CAAC,CAAC;QACH,IAAI,CAAC,GAAG,CAAC,EAAE,EAAE,CAAC;YACZ,OAAO;gBACL,MAAM,EAAE,GAAG;gBACX,WAAW,EAAE,kBAAkB;gBAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;oBACnB,EAAE,EAAE,KAAK;oBACT,KAAK,EAAE,yCAAyC,GAAG,CAAC,MAAM,6BAA6B;iBACxF,CAAC;aACH,CAAC;QACJ,CAAC;QAED,MAAM,MAAM,GAAkB;YAC5B,MAAM;YACN,MAAM;YACN,IAAI;YACJ,YAAY,EAAE,IAAI,IAAI,EAAE,CAAC,WAAW,EAAE;SACvC,CAAC;QACF,UAAU,CAAC,MAAM,CAAC,CAAC;QACnB,qBAAqB,EAAE,CAAC;QAExB,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,IAAI;gBACR,IAAI;gBACJ,WAAW,EAAE,MAAM,CAAC,YAAY;aACjC,CAAC;SACH,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,CAAC,KAAK,UAAU,iBAAiB;IACrC,MAAM,MAAM,GAAG,UAAU,EAAE,CAAC;IAC5B,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,uBAAuB,EAAE,CAAC;SACpE,CAAC;IACJ,CAAC;IACD,IAAI,CAAC;QACH,MAAM,SAAS,GAAG,mBAAmB,EAAE,CAAC;QACxC,MAAM,KAAK,GAAG,MAAM,SAAS,CAAC,WAAW,EAAE,CAAC;QAC5C,OAAO;YACL,MAAM,EAAE,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG;YAC5B,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAClB,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,KAAK,EAAE,KAAK,EAAE,KAAK,CAAC,KAAK,EAAE,OAAO,EAAE,CACrE;SACF,CAAC;IACJ,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,OAAO;YACL,MAAM,EAAE,GAAG;YACX,WAAW,EAAE,kBAAkB;YAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC;gBACnB,EAAE,EAAE,KAAK;gBACT,KAAK,EAAE,GAAG,YAAY,KAAK,CAAC,CAAC,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,GAAG,CAAC;aACxD,CAAC;SACH,CAAC;IACJ,CAAC;AACH,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,uBAAuB;IACrC,WAAW,EAAE,CAAC;IACd,qBAAqB,EAAE,CAAC;IACxB,OAAO;QACL,MAAM,EAAE,GAAG;QACX,WAAW,EAAE,kBAAkB;QAC/B,IAAI,EAAE,IAAI,CAAC,SAAS,CAAC,EAAE,EAAE,EAAE,IAAI,EAAE,CAAC;KACnC,CAAC;AACJ,CAAC"}

package/dist/connectors/discord.d.ts

@@ -0,0 +1,150 @@
+/**
+ * Discord connector — read guilds, channels, messages.
+ *
+ * OAuth 2.0 Authorization Code Grant. Discord is a confidential client
+ * (bridge holds the client secret), so PKCE is not required. Refresh
+ * tokens are issued; access tokens expire (typically 7 days).
+ *
+ * Auth: standard OAuth 2.0 with `client_id` + `client_secret` + `redirect_uri`.
+ *   - Env vars: DISCORD_CLIENT_ID, DISCORD_CLIENT_SECRET (mirrors slack)
+ *   - Stored: getSecretJsonSync("discord") → DiscordTokens
+ *   - Header: Authorization: Bearer <access_token>
+ *
+ * Tools: getCurrentUser, listGuilds, listChannels, listMessages (read);
+ *   sendMessage (write).
+ *
+ * NOTE on writes: Discord's REST API does NOT permit user-context OAuth tokens
+ * to send messages on behalf of the user — only bot-scope tokens can hit
+ * `POST /channels/{id}/messages`. The current connector authenticates as a
+ * regular user (scopes: identify, guilds, messages.read), so `sendMessage`
+ * will return a `permission_denied` error until the user re-authenticates
+ * with the `bot` scope. The method is wired correctly; the gap is the auth
+ * scope, which is left to operators to upgrade when they want write access.
+ *
+ * HTTP routes (wired in src/server.ts):
+ *   GET    /connections/discord/auth     — redirect to Discord consent
+ *   GET    /connections/discord/callback — exchange code for tokens
+ *   POST   /connections/discord/test     — ping Discord API
+ *   DELETE /connections/discord          — clear stored tokens
+ *
+ * Extends BaseConnector for unified auth, retry, rate-limit, error handling.
+ * Token refresh is delegated to BaseConnector.refreshToken() via apiCall.
+ */
+import { type AuthContext, BaseConnector, type ConnectorError, type ConnectorStatus, type OAuthConfig } from "./baseConnector.js";
+export interface DiscordTokens {
+    access_token: string;
+    refresh_token?: string;
+    /** ms since epoch; absolute, not relative */
+    expires_at?: number;
+    scope?: string;
+    token_type?: string;
+    /** stored at auth time so refresh works even if env vars are absent */
+    _client_id?: string;
+    _client_secret?: string;
+    username?: string;
+    user_id?: string;
+    connected_at: string;
+}
+export interface DiscordUser {
+    id: string;
+    username: string;
+    discriminator?: string;
+    global_name?: string | null;
+    avatar?: string | null;
+}
+export interface DiscordGuild {
+    id: string;
+    name: string;
+    icon?: string | null;
+    owner?: boolean;
+    permissions?: string;
+}
+export interface DiscordChannel {
+    id: string;
+    type: number;
+    name?: string;
+    guild_id?: string;
+    topic?: string | null;
+    position?: number;
+}
+export interface DiscordMessage {
+    id: string;
+    channel_id: string;
+    content: string;
+    timestamp: string;
+    author: {
+        id: string;
+        username: string;
+        global_name?: string | null;
+    };
+}
+export declare function loadTokens(): DiscordTokens | null;
+export declare function saveTokens(tokens: DiscordTokens): void;
+export declare function clearTokens(): void;
+export declare function isConnected(): boolean;
+export declare class DiscordConnector extends BaseConnector {
+    readonly providerName = "discord";
+    protected getOAuthConfig(): OAuthConfig | null;
+    authenticate(): Promise<AuthContext>;
+    /**
+     * Persist refreshed tokens after BaseConnector.refreshToken() updates
+     * `this.auth`. BaseConnector calls `saveTokens()` (its own method on the
+     * tokenStorage StoredToken shape); we additionally mirror to our
+     * Discord-specific JSON so loadTokens() keeps working for HTTP probes.
+     */
+    saveTokens(): Promise<void>;
+    healthCheck(): Promise<{
+        ok: boolean;
+        error?: ConnectorError;
+    }>;
+    normalizeError(error: unknown): ConnectorError;
+    getStatus(): ConnectorStatus;
+    getCurrentUser(): Promise<DiscordUser>;
+    listGuilds(params?: {
+        limit?: number;
+    }): Promise<DiscordGuild[]>;
+    listChannels(guildId: string): Promise<DiscordChannel[]>;
+    listMessages(channelId: string, params?: {
+        limit?: number;
+    }): Promise<DiscordMessage[]>;
+    /**
+     * Send a message to a Discord channel.
+     *
+     * Caveat: requires bot-scope OAuth — regular user-context tokens cannot
+     * send via this endpoint. On 403 the connector surfaces a
+     * `permission_denied` error pointing at the bot-scope requirement.
+     *
+     * @param channelId Discord channel id (non-empty)
+     * @param body { content (≤2000 chars), tts? defaults false }
+     */
+    sendMessage(channelId: string, body: {
+        content: string;
+        tts?: boolean;
+    }): Promise<DiscordMessage>;
+    private buildHeaders;
+    private captureRateLimit;
+}
+export declare function getDiscordConnector(): DiscordConnector;
+export { getDiscordConnector as discord };
+export interface ConnectorHandlerResult {
+    status: number;
+    body: string;
+    contentType?: string;
+    redirect?: string;
+}
+/**
+ * GET /connections/discord/auth — redirect to Discord consent screen.
+ */
+export declare function handleDiscordAuthorize(): ConnectorHandlerResult;
+/**
+ * GET /connections/discord/callback — exchange code for tokens.
+ */
+export declare function handleDiscordCallback(code: string | null, state: string | null, error: string | null): Promise<ConnectorHandlerResult>;
+/**
+ * POST /connections/discord/test — verify stored token works.
+ */
+export declare function handleDiscordTest(): Promise<ConnectorHandlerResult>;
+/**
+ * DELETE /connections/discord — clear stored tokens (and revoke at Discord).
+ */
+export declare function handleDiscordDisconnect(): Promise<ConnectorHandlerResult>;