Service And Adapter Boundaries
This diagram captures the current foundation seams. Discord liveness routing, permission grants, guild-scoped LLM controls, plugin catalog controls, external app dry-run matching, semantic dry-run routing, guild mention chat fallback, and consented opt-in public dispatch are live when configured; capability, identity, audit, external app manifest, job, retrieval, and memory packages provide contracts or foundations for later privileged behavior.Reading Guide
internal/appowns process lifecycle and graceful shutdown.internal/webowns HTTP health/readiness only.internal/storagechecks DB reachability and runs idempotent migration files at startup.internal/capabilityevaluates and manages user/role grants by Discord IDs, with explicit admin override.internal/identitydefines fail-closed identity resolution for future privileged actions.internal/auditvalidates audit events and provides a durable audit-log store seam;internal/agentalso persists sanitized run and step records for agent executions.internal/pluginsdefines external app manifest shape: capabilities, triggers, surfaces, permissions, config schema, and attribution.internal/jobsdefines durable work records before workers exist.internal/discordhas live/ping, DMping, mentionping,/permissions,/llm,/plugins, external app dry-run planning, semantic dry-run routing, guild mention chat fallback, and consented publicsend_messageprefix dispatch; rich DM chat and restricted dispatch are still future work.internal/llmresolves guild model profiles, calls configured providers, and records usage without storing raw prompts or completions.
