Subsystem 1a: Discord workspace provisioning & configuration (#4)

* chore(workspace): scaffold Features.Workspace project and tests

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(domain): add ProvisionedCategory/Channel/Message entities

* refactor: remove /server, /bind, and ChannelBinding (superseded by workspace provisioning)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(persistence): provisioning schema + WorkspaceProvisioning migration

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(persistence): IWorkspaceStore + WorkspaceStore upsert/teardown queries

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): i18n localization seam with EN/FR catalog

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): spec registry (channel/message specs, providers, renderer seam)

* feat(workspace): IWorkspaceGateway seam + in-memory test fake

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): per-guild ProvisioningLock

* feat(workspace): WorkspaceReconciler converge engine + fresh provision

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* refactor(workspace): address review — Skipped status + UpdatedAt on edit-in-place

* test(workspace): reconciler is idempotent on re-run

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(workspace): reconciler adopts same-named channel on drift

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(workspace): reconciler self-heals a deleted channel

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(workspace): message repost-vs-edit and orphan-spec retention

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(workspace): concurrent reconciles converge once

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* test(workspace): per-server category provisioning

* feat(workspace): channel/message keys, renderers, and spec providers

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): teardown service (RemoveServer / ResetGuild)

* feat: ServerRegisteredEvent, WorkspaceOptions, and interaction-module assembly seam

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): Discord.Net implementation of IWorkspaceGateway

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): AddWorkspace DI registration + composition test

Introduces WorkspaceServiceCollectionExtensions.AddWorkspace() wiring
all workspace singletons and scoped services, validated by a
ValidateScopes=true composition test that proves the full DI graph
resolves without captive-dependency violations.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): /setup command module

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

* feat(workspace): settings language selector + /workspace reset & simulate-server

* feat(workspace): HealGuild self-heal + hosted service (startup, ChannelDestroyed, ServerRegistered)

* feat(host): wire AddWorkspace, config flag, and update running-locally docs

* refactor(workspace): address final review — heal all provisioned scopes, skip empty payloads

- HealGuildAsync now heals whichever scopes are provisioned (global-if-present + each
  provisioned server category) instead of gating on the global category, so a per-server-only
  guild (e.g. simulate-server without /setup) self-heals; still no-ops when nothing is
  provisioned, preserving reset resurrection-safety.
- EnsureMessagesAsync skips posting an empty payload (a renderer whose source entity vanished
  mid-reconcile) since Discord rejects a message with no content/embed/components.
- Document the in-process event bus no-replay window on the ServerRegistered consumer.

* style(workspace): apply dotnet format (pre-push hook)

* fix(workspace): address PR review — validate culture/port, clarify reset wording, Français label

- SettingsComponentModule: only persist supported cultures (en/fr) from the (forgeable) component
  payload, defaulting to en, so an overlong/unknown value can't break GuildSettings.Culture (max 16).
- WorkspaceAdminModule: validate simulate-server port is 1-65535; clarify /workspace reset
  description to 'this Discord server' to disambiguate from a Rust server.
- SettingsMessageRenderer: correct the user-facing language label to 'Français'.

---------

Co-authored-by: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: HandyS11

RustPlusBot.slnx

@@ -4,10 +4,12 @@
     <Project Path="src/RustPlusBot.Discord/RustPlusBot.Discord.csproj" />
     <Project Path="src/RustPlusBot.Domain/RustPlusBot.Domain.csproj" />
     <Project Path="src/RustPlusBot.Host/RustPlusBot.Host.csproj" />
+    <Project Path="src/RustPlusBot.Features.Workspace/RustPlusBot.Features.Workspace.csproj" />
     <Project Path="src/RustPlusBot.Persistence/RustPlusBot.Persistence.csproj" />
   </Folder>
   <Folder Name="/tests/">
     <Project Path="tests/RustPlusBot.Abstractions.Tests/RustPlusBot.Abstractions.Tests.csproj" />
+    <Project Path="tests/RustPlusBot.Features.Workspace.Tests/RustPlusBot.Features.Workspace.Tests.csproj" />
     <Project Path="tests/RustPlusBot.Persistence.Tests/RustPlusBot.Persistence.Tests.csproj" />
   </Folder>
 </Solution>

docs/development/running-locally.md

@@ -21,11 +21,18 @@
 
    On first run the host applies the EF Core migration and creates `rustplusbot.db` in the working directory.
 
-5. In the guild, use the slash commands:
-
-   - `/server add name:<name> ip:<host> port:<port>`
-   - `/server list`
-   - `/server remove id:<id>`
-   - `/bind feature:<Chat|Events|Devices|Cameras> channel:<#channel>`
+5. In the guild, use the slash commands per the provisioning flow below.
 
 A missing or empty `Discord:Token` makes the host fail fast at startup with a clear `OptionsValidationException`.
+
+## Provisioning the workspace
+
+1. Invite the bot with the **Manage Channels**, **Manage Roles**, **Manage Messages**, and
+   **Embed Links** permissions.
+2. In your test guild, run `/setup`. The bot creates a **RustPlusBot** category with
+   `#information`, `#setup`, and `#settings` channels and posts its anchored messages.
+3. Re-running `/setup` is safe — it reconciles and repairs without creating duplicates.
+4. Change the language from the selector in `#settings`.
+5. In Development (`Workspace:EnableDangerCommands = true`), use
+   `/workspace simulate-server name:<n> ip:<host> port:<port>` to create a server category, and
+   `/workspace reset` to delete the whole workspace.

src/RustPlusBot.Abstractions/Events/ServerRegisteredEvent.cs

@@ -0,0 +1,6 @@
+namespace RustPlusBot.Abstractions.Events;
+
+/// <summary>Published when a Rust server is registered to a guild (stub trigger in 1a; FCM pairing in 1b).</summary>
+/// <param name="GuildId">The owning guild snowflake.</param>
+/// <param name="ServerId">The registered server's id.</param>
+public sealed record ServerRegisteredEvent(ulong GuildId, Guid ServerId);

src/RustPlusBot.Discord/DiscordBotService.cs

@@ -16,6 +16,7 @@ namespace RustPlusBot.Discord;
 /// <param name="client">The Discord socket client.</param>
 /// <param name="interactions">The interaction service that dispatches slash commands.</param>
 /// <param name="services">The root service provider used to construct interaction modules.</param>
+/// <param name="moduleAssemblies">Additional assemblies to scan for interaction modules contributed by feature projects.</param>
 /// <param name="options">The Discord options carrying the bot token.</param>
 /// <param name="logger">The logger.</param>
 [SuppressMessage("Performance", "CA1873:Avoid potentially expensive logging",
@@ -25,6 +26,7 @@ public sealed class DiscordBotService(
     DiscordSocketClient client,
     InteractionService interactions,
     IServiceProvider services,
+    IEnumerable<InteractionModuleAssembly> moduleAssemblies,
     IOptions<DiscordOptions> options,
     ILogger<DiscordBotService> logger) : IHostedService
 {
@@ -41,6 +43,11 @@ public async Task StartAsync(CancellationToken cancellationToken)
         client.JoinedGuild += OnJoinedGuildAsync;
 
         await interactions.AddModulesAsync(Assembly.GetExecutingAssembly(), services).ConfigureAwait(false);
+        foreach (var moduleAssembly in moduleAssemblies)
+        {
+            await interactions.AddModulesAsync(moduleAssembly.Assembly, services).ConfigureAwait(false);
+        }
+
         await client.LoginAsync(TokenType.Bot, _options.Token).ConfigureAwait(false);
         await client.StartAsync().ConfigureAwait(false);
     }

src/RustPlusBot.Discord/InteractionModuleAssembly.cs

@@ -0,0 +1,7 @@
+using System.Reflection;
+
+namespace RustPlusBot.Discord;
+
+/// <summary>Registers an assembly whose Discord interaction modules should be loaded at startup.</summary>
+/// <param name="Assembly">The assembly to scan for interaction modules.</param>
+public sealed record InteractionModuleAssembly(Assembly Assembly);

src/RustPlusBot.Discord/Modules/BindModule.cs

@@ -0,0 +1,20 @@
+namespace RustPlusBot.Domain.Workspace;
+
+/// <summary>A Discord category the bot has provisioned. One per scope (global or per-server).</summary>
+public sealed class ProvisionedCategory
+{
+    /// <summary>Surrogate primary key.</summary>
+    public Guid Id { get; set; } = Guid.NewGuid();
+
+    /// <summary>The owning Discord guild snowflake.</summary>
+    public ulong GuildId { get; set; }
+
+    /// <summary>The server this category belongs to, or <c>null</c> for the global category.</summary>
+    public Guid? RustServerId { get; set; }
+
+    /// <summary>The provisioned Discord category snowflake.</summary>
+    public ulong DiscordCategoryId { get; set; }
+
+    /// <summary>When the record was first created (UTC).</summary>
+    public DateTimeOffset CreatedAt { get; set; }
+}