zib/Veskslop-t
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Note all pending discussions in CURRENT, AGENTS, TODO

Browse Source
This commit is contained in:
Fisto
2026-09-11 16:14:13 +02:00
parent 6fd77ca88d
commit 32201b34cf
3 changed files with 33 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
AGENTS.md
+3
View File
@@ -71,6 +71,9 @@ See [CURRENT.md](CURRENT.md) and [TODO.md](TODO.md) for the live list. The main
5. MCP event delivery decision.
6. Collector account with read-only voice membership.
Open decisions wait in [CURRENT.md](CURRENT.md) → Open discussions: MCP event delivery, untrusted
logging, the privacy pass, the setup command flow, and the first live reaction check.
## Resume checklist
1. Read [CURRENT.md](CURRENT.md) and [TODO.md](TODO.md).
CURRENT.md
+17
View File
@@ -40,6 +40,23 @@ persistent logging. Voice, audio, and video stay deferred.
6. Collector account: read-only modules for voice membership fallback.
7. Later: voice actions, audio, video, client lightening, web debug UI, remote authentication.
## Open discussions (need the user)
These items were discussed and wait for a decision or a live check.
1. **MCP event delivery.** The MCP server is stateless, so it cannot push events. Options: (a) poll
the logs with a `since` cursor, (b) a stateful Streamable HTTP session with server notifications,
(c) a separate local SSE or WebSocket event stream. Option (a) works today. Decide before an LLM
attaches.
2. **Untrusted logging.** Untrusted interactions are ignored at this time. The separate 30-entry
buffer exists but receives nothing. Confirm whether to log untrusted DMs and mentions again.
3. **Privacy pass.** Only token-shaped and `mfa.` strings are redacted, and only in the persistent
action log. A fuller policy (retention, cache clearing, message redaction) is deferred.
4. **First live run of reactions.** `reaction.add` and the message-ID return are mock-verified only.
The first real-client poll must confirm Discord's internal `addReaction` lookup.
5. **Setup command flow.** The reaction-based multiple-choice design is recorded in `TODO.md`. The
poll command now provides the reaction machinery.
## Blocked / needs input
- The original repo `zib/Veskslop` has a broken server-side git setup. Fetches and clones fail with
TODO.md
+13 -7
View File
@@ -50,12 +50,18 @@ Next:
- Collector account: stripped-down read-only modules. Use it when the puppet cannot find a user's
voice channel or the channel members.
## MCP event delivery (open)
## Open decisions
The current Streamable HTTP mode is stateless. The server cannot push events. Options:
- **MCP event delivery.** The current Streamable HTTP mode is stateless. The server cannot push
events. Options:
1. Poll `get_message_log` and `get_action_log` with a `since` cursor. No new transport work.
2. A stateful Streamable HTTP session. The server can send notifications.
3. A separate local event stream over SSE or a WebSocket.
1. Poll `get_message_log` and `get_action_log` with a cursor. No new transport work.
2. A stateful Streamable HTTP session. The server can send notifications.
3. A separate local event stream over SSE or a WebSocket.
Option 1 works today. Options 2 and 3 need a decision before an LLM attaches.
Option 1 works today. Options 2 and 3 need a decision before an LLM attaches.
- **Untrusted logging.** Untrusted interactions are ignored at this time. The separate 30-entry
buffer exists but receives nothing. Decide whether to log untrusted DMs and mentions again.
- **Privacy pass.** Only token-shaped and `mfa.` strings are redacted, and only in the persistent
action log. Decide the fuller policy (retention, cache clearing, message redaction) later.
- **Live reaction check.** `reaction.add` and the message-ID return are mock-verified only. Confirm
Discord's internal `addReaction` lookup on the first real-client run.