fledge-plugin-discord

Discord webhook plugin for Fledge. Send messages to Discord and receive incoming webhooks.

Install

fledge plugins install CorvidLabs/fledge-plugin-discord

Store webhook URLs securely

Avoid pasting webhook URLs into env vars and shell history. The plugin keeps URLs in the OS-native secure store:

# Prompts with masked input (URL never appears in argv, history, or stdout)
fledge discord set-url
fledge discord set-url --name prod
fledge discord set-url --name staging --from-stdin <<< "$URL"

fledge discord list-urls                       # names only
fledge discord get-url --name prod             # confirms presence (does not print URL)
fledge discord get-url --name prod --reveal    # explicitly prints the URL
fledge discord clear-url --name prod
fledge discord clear-url --all

Force a specific backend with FLEDGE_DISCORD_CRED_BACKEND={keychain|secret-tool|dpapi|file}.

URL resolution order for send and the webhook receiver:

1. --webhook <url> flag (send only)
2. --name <name> from the secure store
3. DISCORD_WEBHOOK_URL environment variable
4. default from the secure store

Send a message

# Plain text
fledge discord send "Deploy succeeded"

# Pipe from stdin
git log -1 --pretty=%B | fledge discord send -

# Embed with color, fields, footer, timestamp
fledge discord send --embed \
  --color green \
  --field "Status=Passing" \
  --field "+Tests=37" \
  --field "+Plugin=discord" \
  --footer "fledge-plugin-discord" \
  --now \
  "Build Complete" "All checks green"

# Raw Discord payload
fledge discord send --json '{"content":"hi","embeds":[{"title":"X"}]}'

# Send using a stored credential
fledge discord send --name prod "Deployed to production"

# Override webhook URL inline (skips stored credentials and env)
fledge discord send --webhook https://discord.com/api/webhooks/... "Hi"

# Preview without sending
fledge discord send --dry-run --embed "Title" "Description"

Send options

Webhook receiver

fledge discord webhook

Listens for POST requests on /webhook (port 3100 by default) and forwards to Discord.

# Plain text
curl -X POST http://localhost:3100/webhook \
  -H "Content-Type: application/json" \
  -d '{"text": "Deploy succeeded"}'

# Discord embed (passed through)
curl -X POST http://localhost:3100/webhook \
  -H "Content-Type: application/json" \
  -d '{"embeds": [{"title": "Build Complete", "color": 3066993}]}'

# Any JSON (rendered as code block)
curl -X POST http://localhost:3100/webhook \
  -H "Content-Type: application/json" \
  -d '{"status": "failed", "service": "api"}'

GET /health returns ok for liveness checks.

Signature verification

Set WEBHOOK_SECRET to require HMAC verification. Checks headers in order: x-hub-signature-256 (GitHub), x-signature-256, x-signature.

Environment variables

Payload handling (webhook receiver)

Library usage

import {
  sendDiscordWebhook,
  formatEmbed,
  formatText,
  toDiscordMessage,
  parseColor,
  verifyHmacSignature,
} from "fledge-plugin-discord";

Development

bun install
bun test            # Run tests
bun run send -- --help
bun run webhook     # Start the receiver
bun run dev         # Receiver with hot reload

License

MIT