Add Keys/discord

Discord Key Setup

Read /add-keys first if you haven't — it explains the key model.

Auth type: api_key

• Account level: api_key (bot token), webhook_signature (public key for verifying interactions)

1. Get credentials from Discord

Bot token (api_key)

1. Go to https://discord.com/developers/applications → New Application
2. Name it (e.g. "Corsair") → Create
3. Go to Bot → Reset Token → confirm → copy the token
4. Under Privileged Gateway Intents, enable Message Content Intent

Public key (webhook_signature)

1. Go to General Information
2. Copy the Public Key

Invite the bot to your server

1. Go to OAuth2 → URL Generator → select scope bot
2. Select permissions: Send Messages, Read Message History
3. Copy the URL, open it, choose your server, Authorize

2. Write and run the setup script

Ask the user to provide both values, then write scripts/setup-discord.ts:

import 'dotenv/config';
import { and, eq } from 'drizzle-orm';
import { corsair } from '../server/corsair';
import { db } from '../server/db';
import { corsairAccounts, corsairIntegrations } from '../server/db/schema';

const PLUGIN = 'discord';
const TENANT_ID = 'default';
const BOT_TOKEN = '...';     // fill in
const PUBLIC_KEY = '...';    // fill in

async function main() {
  let [integration] = await db
    .select()
    .from(corsairIntegrations)
    .where(eq(corsairIntegrations.name, PLUGIN));

  if (!integration) {
    [integration] = await db
      .insert(corsairIntegrations)
      .values({ id: crypto.randomUUID(), name: PLUGIN })
      .returning();
    console.log(`✓ Created integration: ${PLUGIN}`);
  }

  await corsair.keys.discord.issue_new_dek();
  console.log('✓ Integration DEK ready');

  const [existing] = await db
    .select()
    .from(corsairAccounts)
    .where(
      and(
        eq(corsairAccounts.tenantId, TENANT_ID),
        eq(corsairAccounts.integrationId, integration!.id),
      ),
    );

  if (!existing) {
    await db.insert(corsairAccounts).values({
      id: crypto.randomUUID(),
      tenantId: TENANT_ID,
      integrationId: integration!.id,
    });
    console.log('✓ Created account');
  }

  await corsair.discord.keys.issue_new_dek();
  console.log('✓ Account DEK ready');

  await corsair.discord.keys.set_api_key(BOT_TOKEN);
  await corsair.discord.keys.set_webhook_signature(PUBLIC_KEY);

  const stored = await corsair.discord.keys.get_api_key();
  console.log(`✓ Discord configured. Token starts with: ${stored?.slice(0, 8)}...`);

  process.exit(0);
}

main().catch((e) => { console.error(e); process.exit(1); });

Run it:

docker compose exec agent pnpm tsx scripts/setup-discord.ts

Then delete the script:

rm scripts/setup-discord.ts