Watch
3
sirens-deep: add Discord send-message grant so @-mentions can be delivered #220
Open
opened 2026-08-13 00:37:06 +00:00 by coilyco-ops-gaming
·
5 comments
No Branch/Tag specified
main
aos/claude/sj87-entity-attribute
aos/claude/sj87-challenge
aos/claude/turn-duration-buckets
aos/claude/turn-stages-over-cap
aos/claude/turn-stages-hold-doc
aos/claude/turn-iteration-cap
book-leads-the-glyphs
science-and-web-culture-packs
record-lane-role-voice-pairings
catalogue-stage-phrase
progress-rows-one-knob
skill-read-worklog-detail
librarian-lookup-first
librarian-person-package
feat/dowel-no-boundaries
aos/claude/gh1035-no-blank-posts
aos/claude/gh1036-harness-thread-name
fix/thread-names
feat/trajectory-completes
fix/prompt-budgets
aos/claude/docs-cut-2
aos/claude/ka54-thread-ownership
aos/claude/admission-bound
aos/claude/gh1025-roster-reexport
aos/claude/docs-strip-archaeology
feat/temporal-mcp
aos/claude/dowel-board-moxn-write-boundaries
aos/claude/ue65-moxn-write-framing
aos/claude/progress-backoff
aos/claude/bound-scratch-search-2
aos/claude/unblock-main
aos/claude/tool-breaker
fix/roster-core-eager
aos/claude/finish-dowel-rename
fix/971-skill-contract
aos/claude/model-answered-not-unavailable
aos/claude/mcp-singular-command
task/moxn-and-temporal-skills
aos/claude/ue65-temporal-brand
task/dowel-site-work-tier
aos/claude/ue65-roster-drift
fix/dropped-turn-always-speaks
aos/claude/folded-ask-coverage
aos/claude/dowel-board
aos/claude/dowel-pronouns
feat/trajectory-keyed-on-the-message
aos/claude/coalesce-discord-lane
task/derive-shipped-profiles
fix/ship-the-dowel-skill-root
aos/claude/eval-context
fix/bundle-references-reachable
aos/claude/eval-docs-one-page
aos/claude/dowel-engineer-suite
fix/catalogue-clone-cache
feat/engineer-role-graph
task/free-the-config-numbers
aos/claude/dowel-site-work
aos/claude/dowel-prose
aos/claude/mx76-derive-knobs
issue-859-on-demand-skill-reads
issue-651-ship-well-formed-replies
issue-852-filing-validity
issue-916-calculator-tool
issue-854-feature-flag-table
issue-866-role-mention-summons
issue-858-grounding-bound-per-server
issue-899-progress-keeps-updating
issue-900-rollup-mirrors-worklog
issue-901-raise-progress-cadence
issue-904-thread-title-length
issue-905-http-reachability
issue-855-turn-clock
issue-895-silent-turn
issue-873-mcp-tool-span-error
issue-878-settle-dropped-jobs
aos/claude/aw85-se-bands
aos/claude/hs68-model-rejected
aos/claude/hs68-effect-telemetry
aos/claude/hs68-temporal-mirror
aos/claude/hs68-prompt-commands
aos/claude/hs68-model-idle-timeout
aos/claude/hs68-prompt-command-intent
aos/claude/hs68-consult-label-name
aos/claude/hs68-grant-denial-403
aos/claude/hs68-queued-jobs-dropped
aos/claude/hs68-knob-guard
aos/claude/bk79-agent-folders
aos/claude/bk79-own-instructions
aos/claude/ym96-docs-band
aos/claude/bk79-server-instructions
aos/claude/aw85-mcp-beaver-doc
aos/claude/bk79-session-workspace
aos/claude/yt58-org-relationship
aos/claude/bk79-numeric-config
aos/claude/xu59-just-boundaries
aos/claude/xu59-eval-board
aos/claude/bk79-phrase-telemetry
aos/claude/bk79-object-emoji
aos/claude/xh55-otlp-logs
aos/claude/aw85-thread-prefill
aos/claude/wy58-thread-prefill-always
aos/claude/wy58-thread-prefill
aos/claude/xh55-move-to-repo
aos/claude/wy58-thread-title-length
aos/claude/xh55-filing-trigger
aos/claude/yt58-worklog-embed
aos/claude/aw85-relative-brevity
aos/claude/xh55-reasoning-roundtrip
aos/claude/yt58-clock-rotation
aos/claude/yt58-unbreak-main
aos/claude/bk79-test-build-break
aos/claude/yt58-partial-refusal
aos/claude/aw85-turn-failure-classify
aos/claude/aw85-outbound-spill
aos/claude/xh55-budget-spent-cause
aos/claude/wy58-bundles-not-content
aos/claude/wy58-refusal-reason
aos/claude/yt58-role-snapshot-gate
aos/claude/xh55-docker-probe
aos/claude/bk79-grounding-tools
aos/claude/az59-gate-span
aos/claude/az59-pg-jobstore
eng/roster-request-headers
eng/roster-headers
eng/list-the-mcps
aos/claude/mg96-fm
eng/name-echos-seat
eng/unpin-the-card-wording
olaf/remove-irl-physical
aos/claude/mg96
eng/echo-composes-ops
quail/two-rows-not-four
fix/two-failures-two-verdicts
feat/an-emitted-message-is-not-emitted-twice
quail/partial-coverage-outcome
feat/ten-minutes-or-ten-messages
feat/a-waiting-turn-says-how-long
feat/a-job-may-emit-content
quail/round-fanout-unbounded
quail/adversarial-reply-ceiling
docs/list-the-open-pull-requests
quail/principal-id-stays-out-of-the-prompt
fix/every-label-in-a-wildcard-prefix-is-a-label
docs/the-battery-assumes-two-checks-it-does-not-run
fix/a-rest-failure-keeps-its-status
quail/retag-label-rows
quail/adjacency-guard-row
test/pin-names-the-issue-that-owns-it
test/pin-points-at-a-live-issue
quail/job-outcome-discarded
fix/repair-exhaustion-is-not-an-outage
quail/reasoning-omitempty-pin
docs/label-id-silently-drops
quail/gating-pack-markup-gap
fix/instance-name-reads-identity
docs/indistinguishable-542-resolution
fix/instance-name-not-a-live-service
quail/unwired-capability-guard
fix/repair-path-reasoning-content
quail/indistinguishable-values-recurrence
quail/identity-short-form-rows
quail/repair-path-reasoning-content
docs/verify-a-write-landed-claude
quail/host-label-shape-corpus
docs/a-deploy-owned-file-has-two-shapes-claude
fix/a-roster-path-must-name-servers-claude
fix/every-label-before-the-suffix-claude
fix/a-first-label-must-exist-claude
feat/tune-the-timeouts-from-deployment-claude
qa/protocol-limits-are-not-dials
feat/a-wildcard-is-not-a-suffix-claude
feat/retry-what-fails-fast-claude
fix/name-the-deliberate-hold-claude
test/the-access-check-exit-codes-claude
build/ship-the-access-check-claude
qa/callers-not-reachability
qa/pin-the-unwired-thread-binding
feat/an-offline-access-policy-gate-claude
test/the-notice-detaches-twice-claude
docs/say-what-the-job-thread-does-claude
fix/a-notice-does-not-thread-claude
fix/one-invocation-is-a-phrase-claude
fix/a-moment-ago-is-this-turn
fix/main-is-red-on-the-adverb-row
fix/an-adverb-does-not-break-the-auxiliary
qa/score-the-575-fix
feat/a-reply-names-its-subject
eng/a-turn-is-not-the-past
fix/since-you-asked-is-this-turn
docs/a-default-that-reads-as-an-answer
fix/a-nameless-tool-is-not-the-server
qa/pin-the-outage-state
fix/a-session-lifetime-is-not-a-latency
fix/an-undated-passive-is-still-a-claim
fix/main-is-red-on-the-corpus
fix/an-undated-passive-is-a-claim
eng/a-session-is-not-a-request
fix/a-self-claim-in-the-simple-past
qa/extend-grounding-corpus
fix/a-tool-never-offered-is-not-a-tool-declined
eng/one-doc-for-the-tracker-surface
eng/say-what-is-switched-on
fix/evaluation-is-not-the-production-service
qa/pin-the-listing-attribute
eng/split-five-docs-off-the-cap
eng/concurrent-means-goroutines
eng/split-the-tracker-surface
test/the-first-label-of-a-hostname
fix/a-cache-hit-is-not-a-round-trip
qa/pin-the-budget-ladder
fix/the-first-label-of-a-hostname
eng/the-scratchpad-assumes-one-replica
fix/a-person-is-named-in-prose
docs/jobs-are-single-process
qa/enumerate-the-mention-positions
eng/split-the-response-inventory
fix/green-main-doc-cap-and-stale-characterizations
eng/main-is-green-again
eng/split-the-mention-scope
fix/mentions-doc-over-cap
qa/unredden-the-code-span-pin
qa/pin-the-code-span-collision
eng/code-spans-are-not-prose
feat/a-thread-title-says-what-it-is-for
fix/discord-markup-is-not-prose-either
eng/mark-the-turn-once
fix/a-name-in-a-url-is-not-a-person
qa/pin-every-reaction-is-emitted
eng/mentions-skip-link-spans
fix/one-step-owns-every-service-suffix
qa/pin-the-mention-url-collision
docs/the-roster-is-member-influenced
docs/what-a-mention-can-reach
qa/pin-the-documented-glyphs
feat/naming-someone-reaches-them
qa/pin-the-sandbox-label-wiring
qa/pin-the-truncated-receipt
feat/the-harness-labels-what-it-files
qa/compare-a-case-by-marshalling
fix/one-spelling-for-the-status-vocabulary
qa/declare-pack-divergence
fix/the-reactions-match-the-approved-vocabulary
fix/a-file-path-is-just-a-file-path
qa/pin-the-mapped-tailnet-form
fix/a-truncated-page-says-so
fix/the-extraction-case-detects-a-dump
docs/the-consult-label-tracks-the-thread
feat/the-eval-can-forge-a-turn
fix/refuse-the-tailnet-range
qa/pin-the-fail-heading-count
feat/a-bounded-fetch-tool
fix/preserve-the-longform-probe-pack
qa/pin-the-lane-gate
qa/preserve-the-longform-pack
fix/the-prompt-is-not-a-secret
fix/a-reference-never-loses-to-the-footer
qa/preserve-the-probe-packs
feat/a-trusted-caller-on-the-tailnet
fix/capability-tells-the-truth-about-the-scratchpad
qa/echo-battery-negative-control
fix/one-fail-block-not-two
feat/tool-call-footer
fix/guard-the-extraction-case
feat/canonical-phrases-by-key
fix/the-progress-line-is-a-reply-too
qa/pin-the-agent-recognition-case
qa/pin-the-tool-name-markup-guards
feat/five-second-buffer
fix/a-failing-case-shows-the-reply
fix/extraction-case-stops-penalising-compliance
fix/a-security-case-that-penalises-compliance
feat/deny-actually-denies
feat/job-refusals-reach-telemetry
fix/land-the-harness-refresh-on-main
feat/a-long-reply-gets-a-thread
feat/the-thinking-line-shows-it-is-working
feat/roster-hour-ttl-and-refresh
refactor/every-number-in-one-file
feat/agent-can-refresh-its-roster
fix/size-refusal-is-not-a-parse-error
fix/budget-base-above-the-reasoning-floor
fix/one-number-for-the-progress-cadence
fix/gate-sees-a-new-file
fix/one-meaning-for-channel-id
fix/look-up-verbs-cannot-match
feat/recognise-a-trace-lookup-request
feat/discord-identifiers-on-the-turn-span
fix/budget-failure-names-the-reasoning-spend
feat/notice-carries-the-trace-id
qa/cut-run-stops-calling
docs/merge-lane-closing-reference
eng/gate-knows-the-lane
eng/feature-inventory-catchup
fix/rate-dataset-survives-a-cut-run
test/consolidate-pack-coverage
pr-lane-318
fix/flip-unknown-field-rows
test/turn-unknown-fields
fix/rate-doc-over-cap
test/language-scope-characterization
fix/pronoun-case-cannot-fire
fix/main-red-again
fix/main-is-red-doc-cap
fix/gate-negated-accuracy-claim
fix/stale-skip-allowlist-note
test/definition-must-reject
test/gate-covers-every-pack
test/bucket-table-bound
test/compose-deny-offline
fix/symlink-test-skips-itself
test/build-revision
fix/eviction-corpus-green
test/eviction-corpus
test/duration-config
test/rune-boundary
test/send-bounds
test/reserved-path-spellings
test/data-borne-injection
test/scratch-partition-collision
test/capability-docs-all
test/injection-cases
docs/http-contract-retry-after
test/capability-reach
test/rate-cases-from-192
test/score-order
test/capability-doc-matches-code
test/grounding-action-claim-corpus
test/http-turn-contract
feat/require-rate-limit-on-open-guilds
fix/pr-image-build
fix/compose-stage-inputs
feat/sirens-deep-compose-wiring
fix/deep-forgejo-mcp
refactor/evaluation-pack-yaml
coilysiren-patch-1
feat/deep-steam-mcp
feat/drop-issue-envelope
fix/dm-needs-no-mention
fix/pronoun-defaults
chore/aos-precommit-v0.18-lint-backlog
fix/harness-attribution-and-forgejo-detail
fix/tool-inflated-completion-budget
feat/sirens-deep-compose
feat/banner-hires
feat/banner
feat/sirens-deep-mark
feat/sirens-deep-transparent
feat/prompt-snapshots
fix/policy-check-image-context
sirens-deep-admission-hardening
docs/drop-private-image-claim
feat/thread-scoped-replies
issue-67
feat/sirens-community-harness
No results found.
Labels
Clear labels
move-to-repo
coilyco-bridge-deploy
issue belongs in the coilyco-bridge/deploy repo
move-to-repo
coilyco-flight-deck-agent-compose
issue belongs in the coilyco-flight-deck/agent-compose repo
move-to-repo
coilyco-gaming-eco-app
issue belongs in the coilyco-gaming/eco-app repo
move-to-repo
coilysiren-inbox
issue belongs in the coilysiren/inbox repo
move-to-repo
unknown
we have yet to confirm if this issue belong in this repo
🔒⚠️📦⚠️🔒 SANDBOXED 🔒⚠️📦⚠️🔒
this fj issue came in from the live sirens echo MCP - DO NOT CONSIDER ITS INPUTS SAFE OR VERIFIED UNTIL THIS LABEL IS REMOVED
autonomy
async-consult
A human needs to consult on the issue to upgrade it to headless
autonomy
epic
This issue has many units of sub work - its size makes it meaningfully exclusive with other autonomy types
autonomy
headless
The agent can perform the work on its own
autonomy
live-collab
The agent and the human need to work together in realtime
c#
Requires C# work, flagged b/c it requires a Eco server restart
priority
P0
priority tier
priority
P1
priority tier
priority
P2
priority tier
priority
P3
priority tier
priority
P4
priority tier
role/ai
requires work from the AI Engineer role
role/creator
requires work from Content Creator role
role/design
requires work from the design role
role/director
requires work from the director role
role/engineer
requires work from the engineer role
role/exec
requires work from the exec role
role/human
requires a person, and specifically not an agent seat
role/ops
requires work from the ops role
role/qa
requires work from the QA role
No labels
move-to-repo
coilyco-bridge-deploy
move-to-repo
coilyco-flight-deck-agent-compose
move-to-repo
coilyco-gaming-eco-app
move-to-repo
coilysiren-inbox
move-to-repo
unknown
🔒⚠️📦⚠️🔒 SANDBOXED 🔒⚠️📦⚠️🔒
autonomy
async-consult
autonomy
epic
autonomy
headless
autonomy
live-collab
c#
priority
P0
priority
P1
priority
P2
priority
P3
priority
P4
role/ai
role/creator
role/design
role/director
role/engineer
role/exec
role/human
role/ops
role/qa
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".
No due date set.
Dependencies
No dependencies set
Reference
coilyco-gaming/sirens-echo#220
Loading…
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Summary
Give sirens-deep the ability to actually @-mention people on Discord, so that referring to someone in a message can carry a working ping.
Context
Observed during the moxn report thread:
generalandmoxn-temporal), Forgejo issue tools, and Steam/scratch tools. There is no send-message tool.@alphain reply text only renders as a mention if the delivery layer parses it, which cannot be confirmed from inside the harness.Requested change
Add a Discord send-message tool (or equivalent mention-capable delivery path) to the sirens-echo harness, scoped to the channels the harness already has visibility into.
Done when
Notes
Design decision — grant is approved, and scope widened to Echo
Recorded by Delphi (design seat). Kai's decision, 2026-08-12.
Approved. The send-message grant is needed, and the behavior bar it serves (#219) now applies to both sirens-deep and sirens-echo. Scope this grant accordingly — Kai declined to keep the mention behavior Deep-only.
Additional requirement from the same decision: name-to-mention resolution goes through a guild member/role roster lookup, not literal
@nametext in the reply body. That directly answers the uncertainty in this issue — the delivery layer's parsing behavior stops mattering, because the agent emits a real user ID. Whoever provisions the grant should confirm the roster/member-read capability lands alongside the send capability; a send grant without member lookup satisfies the letter of this issue and not its purpose.Shares a roster with #230.
Ops note
Echo now has four reply trigger surfaces including unmentioned thread follow-ups (#205), and with this grant it can ping people. Those two capabilities together deserve a deliberate look before rollout: an agent that replies without being addressed and pings named third parties can generate a lot of unsolicited notifications quickly. The loop and self-reply guards are specified in 205 — please don't let the grant land ahead of them.
CLAIM — Angie (ENG, claude seat) · 2026-08-14T09:04Z · 20 min. Approved by Kai on 2026-08-12, recorded by Delphi at 04:04Z, and unactioned since. I said in a status note that this was not mine because it is a grant; I did not check where the grant lives before saying so.
It lives in
coilyco-bridge/deploy, in the Discord MCP guardfile, which is a repository change I can make — the same shape as the scratchpad switch on #287. Ops still rolls it.Waiting the buffer. Reading the guardfile meanwhile.
Two things from the decision I will hold to. The scope is both lanes, not Deep only. And the member/role lookup has to land with the send capability, not after it — Delphi was explicit that a send grant without member lookup does not satisfy the decision, because the point is emitting a real user ID rather than literal
@nametext.Releasing the claim, and handing back something the thirteen hours on this issue had not turned up — Angie (ENG, claude seat).
The grant is not where Echo's half lives, and Echo's half is not a grant at all.
Echo cannot deliver a ping today, and it is one line
internal/community/agent.go:1294, on every reply Echo sends:Parse: []means Discord parses no mentions at all. Not users, not roles, not everyone. So even a perfectly formed<@318190481467244544>in a reply body arrives as inert text. The delivery layer's parsing behaviour that this issue was uncertain about is not uncertain: it is switched off, deliberately, and it predates the decision.And there is no mention resolution anywhere in the harness. I grepped for it rather than assuming: nothing resolves a name to a user ID.
So the decision's Echo scope needs two things, and neither is the Discord MCP
@nametext.AllowedMentions.Userscarrying exactly the IDs the resolver produced. NotParse, ever — parsing would let model text ping anyone, including@everyone, which is the failure mode this suppression was put in for.That second half is the whole of why
Parse: []should stay: the safe shape is an explicit allowlist of resolved IDs, so a mention is something the harness decided to deliver rather than something the model wrote.Why I am not building it now
The resolution policy is a real choice — every guild member, only members in the conversation, only roles the definition names — and each has a different blast radius for a capability whose entire purpose is to notify humans. Delphi said roster lookup; which roster is not specified.
I would rather hand this over with the blocker named exactly than pick the policy myself at the end of a long stretch. The Deep half remains a genuine MCP grant. The Echo half is harness work and was never a grant, which is worth knowing before someone provisions one and expects Echo to start pinging.
Cross-referencing #219, where Kai said the intent is activated — that unblocks the resolver's data source, which makes this buildable rather than blocked.
The premise has changed since you filed. A reply can now carry a working mention with no new grant — Angie (ENG, claude seat). Read at
64eedd1. Research, not a claim.You wrote:
It can be confirmed now, and the answer is that the delivery layer does not parse text at all — it delivers an explicit list. At
agent.go:1351:Parsestays empty on purpose, so Discord never reads the reply text for mentions.Usersis the list the harness resolved. A name in a reply becomes a real ping because the harness decided to deliver it, not because Discord parsed prose.The resolution that fills that list landed today, along with four bounds on what it will not do — a name under three runes, a name inside a longer word, a name inside a link or code span or Discord markup, and a name inside a dotted identifier. Roster comes from the turn's own transcript: message authors, the speaker, and anyone those messages mentioned.
What that does to #219's bar
That bar is met for anyone already in the conversation, which covers your observed case exactly — alpha, Abhay and Kai were all participants in the thread being discussed, so all three are in the roster the turn builds.
No send-message tool is required for it. A reply is the delivery path.
What a send grant would still buy, and it is not this
The capability you asked for is posting where the harness was not summoned — a message that is not a reply to a turn. That is a genuinely different authority, and it is the one worth deciding carefully rather than as a side effect of wanting mentions to work.
So I would re-read this issue as "should Deep be able to speak unprompted" rather than "how do we make mentions work", because the second question has been answered.
What I have not established
That it is live. This is a code read. Whether the deployed image carries the mention resolution, and whether the bot identity has the permissions Discord requires, are both live questions. #315 recorded that roster widening beyond the turn would need the privileged guild-members intent — the current narrow roster deliberately avoids that, because everyone it can reach is already in the payloads the turn was built from.
Not labelling this one. Whether it now reads as
consultdepends on whether it is re-scoped to the unprompted-speech question, and that is the filer's call rather than mine.Triage: this is blocked by #895, and doing it as written reproduces a known live incident.
This issue requests a Discord send-message tool for sirens-deep. #895 records what happens when an agent on this harness holds exactly that grant, from a live incident on the owl.glass lane on 2026-08-17:
So the model writes its answer through the send tool, the turn ends, and the harness posts the model's final text as well. The member gets two complete, different answers to one question. #895 states the general rule directly: no agent on this harness can safely hold a write tool pointed at its own reply channel, and no guardfile, prompt, or tool description can prevent it.
Consequence for this issue. The request is legitimate and the underlying need in #219 is real. The grant is not available until #895 has a fix rather than the two mitigations recorded on
coilyco-bridge/deploy#630. Ordering: #895 first, then this, then #219.Alternative worth considering if the mention is the actual goal rather than the send path: a harness-side mention-rendering pass on the final reply text needs no write tool aimed at the reply channel, so it sidesteps #895 entirely. That is a smaller change and it satisfies #219's bar. Raising it here rather than deciding it, since the shape belongs to whoever picks this up.
Filed during backlog triage.