feat: per-guild configuration (multi-tenancy)

src/api/routes/guilds.js

@@ -93,31 +93,26 @@ router.get('/:id', (req, res) => {
 
 /**
  * GET /:id/config — Read guild config (safe keys only)
- * Note: Config is global, not per-guild. The guild ID is accepted for
- * API consistency but does not scope the returned config.
- * Per-guild config is tracked in Issue #71.
+ * Returns per-guild config (global defaults merged with guild overrides).
  */
 router.get('/:id/config', (req, res) => {
-  const config = getConfig();
+  const config = getConfig(req.params.id);
   const safeConfig = {};
   for (const key of READABLE_CONFIG_KEYS) {
     if (key in config) {
       safeConfig[key] = config[key];
     }
   }
   res.json({
-    scope: 'global',
-    note: 'Config is global, not per-guild. Per-guild config is tracked in Issue #71.',
+    guildId: req.params.id,
     ...safeConfig,
   });
 });
 
 /**
- * PATCH /:id/config — Update a config value (safe keys only)
+ * PATCH /:id/config — Update a guild-specific config value (safe keys only)
  * Body: { path: "ai.model", value: "claude-3" }
- * Note: Config is global, not per-guild. The guild ID is accepted for
- * API consistency but does not scope the update.
- * Per-guild config is tracked in Issue #71.
+ * Writes to the per-guild config overrides for the requested guild.
  */
 router.patch('/:id/config', async (req, res) => {
   if (!req.body) {
@@ -151,7 +146,7 @@ router.patch('/:id/config', async (req, res) => {
   }
 
   try {
-    const updated = await setConfigValue(path, value);
+    const updated = await setConfigValue(path, value, req.params.id);
     info('Config updated via API', { path, value, guild: req.params.id });
     res.json(updated);
   } catch (err) {

src/commands/ban.js

@@ -41,7 +41,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const user = interaction.options.getUser('user');
     const reason = interaction.options.getString('reason');
     const deleteMessageDays = interaction.options.getInteger('delete_messages') || 0;

src/commands/case.js

@@ -219,7 +219,7 @@ async function handleReason(interaction) {
   // Try to edit the log message if it exists
   if (caseRow.log_message_id) {
     try {
-      const config = getConfig();
+      const config = getConfig(interaction.guildId);
       const channels = config.moderation?.logging?.channels;
       if (channels) {
         const channelKey = ACTION_LOG_CHANNEL_KEY[caseRow.action];

src/commands/config.js

@@ -121,7 +121,7 @@ function collectConfigPaths(source, prefix = '', paths = []) {
 export async function autocomplete(interaction) {
   const focusedOption = interaction.options.getFocused(true);
   const focusedValue = focusedOption.value.toLowerCase().trim();
-  const config = getConfig();
+  const config = getConfig(interaction.guildId);
 
   let choices;
   if (focusedOption.name === 'section') {
@@ -186,7 +186,7 @@ const EMBED_CHAR_LIMIT = 6000;
  */
 async function handleView(interaction) {
   try {
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const section = interaction.options.getString('section');
 
     const embed = new EmbedBuilder()
@@ -275,7 +275,7 @@ async function handleSet(interaction) {
 
   // Validate section exists in live config
   const section = path.split('.')[0];
-  const validSections = Object.keys(getConfig());
+  const validSections = Object.keys(getConfig(interaction.guildId));
   if (!validSections.includes(section)) {
     const safeSection = escapeInlineCode(section);
     return await safeReply(interaction, {
@@ -287,7 +287,7 @@ async function handleSet(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const updatedSection = await setConfigValue(path, value);
+    const updatedSection = await setConfigValue(path, value, interaction.guildId);
 
     // Traverse to the actual leaf value for display
     const leafValue = path
@@ -331,7 +331,7 @@ async function handleReset(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    await resetConfig(section || undefined);
+    await resetConfig(section || undefined, interaction.guildId);
 
     const embed = new EmbedBuilder()
       .setColor(0xfee75c)

src/commands/kick.js

@@ -33,7 +33,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const target = interaction.options.getMember('user');
     if (!target) {
       return await safeEditReply(interaction, '❌ User is not in this server.');

src/commands/lock.js

@@ -52,7 +52,7 @@ export async function execute(interaction) {
       .setTimestamp();
     await safeSend(channel, { embeds: [notifyEmbed] });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const caseData = await createCase(interaction.guild.id, {
       action: 'lock',
       targetId: channel.id,

src/commands/modlog.js

@@ -125,8 +125,16 @@ async function handleSetup(interaction) {
 
       if (i.customId === 'modlog_channel' && selectedCategory) {
         const channelId = i.values[0];
-        await setConfigValue(`moderation.logging.channels.${selectedCategory}`, channelId);
-        info('Modlog channel configured', { category: selectedCategory, channelId });
+        await setConfigValue(
+          `moderation.logging.channels.${selectedCategory}`,
+          channelId,
+          interaction.guildId,
+        );
+        info('Modlog channel configured', {
+          category: selectedCategory,
+          channelId,
+          guildId: interaction.guildId,
+        });
         await i.update({
           embeds: [
             embed.setDescription(
@@ -166,7 +174,7 @@ async function handleSetup(interaction) {
  */
 async function handleView(interaction) {
   try {
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const channels = config.moderation?.logging?.channels || {};
 
     const embed = new EmbedBuilder()
@@ -199,10 +207,10 @@ async function handleDisable(interaction) {
   try {
     const keys = ['default', 'warns', 'bans', 'kicks', 'timeouts', 'purges', 'locks'];
     for (const key of keys) {
-      await setConfigValue(`moderation.logging.channels.${key}`, null);
+      await setConfigValue(`moderation.logging.channels.${key}`, null, interaction.guildId);
     }
 
-    info('Mod logging disabled', { moderator: interaction.user.tag });
+    info('Mod logging disabled', { moderator: interaction.user.tag, guildId: interaction.guildId });
     await safeEditReply(
       interaction,
       '✅ Mod logging has been disabled. All log channels have been cleared.',

src/commands/purge.js

@@ -152,7 +152,7 @@ export async function execute(interaction) {
       scanned: fetched.size,
     });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const caseData = await createCase(interaction.guild.id, {
       action: 'purge',
       targetId: channel.id,

src/commands/slowmode.js

@@ -64,7 +64,7 @@ export async function execute(interaction) {
 
     await channel.setRateLimitPerUser(seconds);
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const caseData = await createCase(interaction.guild.id, {
       action: 'slowmode',
       targetId: channel.id,

src/commands/softban.js

@@ -41,7 +41,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const target = interaction.options.getMember('user');
     if (!target) {
       return await safeEditReply(interaction, '❌ User is not in this server.');

src/commands/tempban.js

@@ -46,7 +46,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const user = interaction.options.getUser('user');
     const durationStr = interaction.options.getString('duration');
     const reason = interaction.options.getString('reason');

src/commands/timeout.js

@@ -37,7 +37,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const target = interaction.options.getMember('user');
     if (!target) {
       return await safeEditReply(interaction, '❌ User is not in this server.');

src/commands/unban.js

@@ -28,7 +28,7 @@ export const adminOnly = true;
 export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const userId = interaction.options.getString('user_id');
     const reason = interaction.options.getString('reason');
 

src/commands/unlock.js

@@ -52,7 +52,7 @@ export async function execute(interaction) {
       .setTimestamp();
     await safeSend(channel, { embeds: [notifyEmbed] });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const caseData = await createCase(interaction.guild.id, {
       action: 'unlock',
       targetId: channel.id,

src/commands/untimeout.js

@@ -27,7 +27,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const target = interaction.options.getMember('user');
     if (!target) {
       return await safeEditReply(interaction, '❌ User is not in this server.');

src/commands/warn.js

@@ -34,7 +34,7 @@ export async function execute(interaction) {
   try {
     await interaction.deferReply({ ephemeral: true });
 
-    const config = getConfig();
+    const config = getConfig(interaction.guildId);
     const target = interaction.options.getMember('user');
     if (!target) {
       return await safeEditReply(interaction, '❌ User is not in this server.');

src/db.js

@@ -91,12 +91,40 @@ export async function initDb() {
       // Create schema
       await pool.query(`
         CREATE TABLE IF NOT EXISTS config (
-          key TEXT PRIMARY KEY,
+          guild_id TEXT NOT NULL DEFAULT 'global',
+          key TEXT NOT NULL,
           value JSONB NOT NULL,
-          updated_at TIMESTAMPTZ DEFAULT NOW()
+          updated_at TIMESTAMPTZ DEFAULT NOW(),
+          PRIMARY KEY (guild_id, key)
         )
       `);
 
+      // Migrate existing config table: add guild_id column and composite PK.
+      // Looks up the actual PK constraint name from pg_constraint instead of
+      // assuming 'config_pkey', which may differ across environments.
+      await pool.query(`
+        DO $$
+        DECLARE
+          pk_name TEXT;
+        BEGIN
+          IF NOT EXISTS (
+            SELECT 1 FROM information_schema.columns
+            WHERE table_name = 'config' AND column_name = 'guild_id'
+          ) THEN
+            ALTER TABLE config ADD COLUMN guild_id TEXT NOT NULL DEFAULT 'global';
+            SELECT conname INTO pk_name FROM pg_constraint
+            WHERE conrelid = 'config'::regclass AND contype = 'p';
+            IF pk_name IS NOT NULL THEN
+              EXECUTE format('ALTER TABLE config DROP CONSTRAINT %I', pk_name);
+            END IF;
+            ALTER TABLE config ADD PRIMARY KEY (guild_id, key);
+          END IF;
+        END $$
+      `);
+
+      // Note: No standalone guild_id index needed — the composite PK (guild_id, key)
+      // already covers guild_id-only queries via leftmost prefix.
+
       await pool.query(`
         CREATE TABLE IF NOT EXISTS conversations (
           id SERIAL PRIMARY KEY,

src/index.js

@@ -372,7 +372,7 @@ async function startup() {
     });
   }
 
-  // AI, spam, and moderation modules call getConfig() per-request, so config
+  // AI, spam, and moderation modules call getConfig(guildId) per-request, so config
   // changes take effect automatically. Listeners provide observability only.
   onConfigChange('ai.*', (newValue, _oldValue, path) => {
     info('AI config updated', { path, newValue });

src/modules/ai.js

@@ -28,11 +28,12 @@ const pendingHydrations = new Map();
 
 /**
  * Get the configured history length from config
+ * @param {string} [guildId] - Guild ID for per-guild config
  * @returns {number} History length
  */
-function getHistoryLength() {
+function getHistoryLength(guildId) {
   try {
-    const config = getConfig();
+    const config = getConfig(guildId);
     const len = config?.ai?.historyLength;
     if (typeof len === 'number' && len > 0) return len;
   } catch {
@@ -43,11 +44,12 @@ function getHistoryLength() {
 
 /**
  * Get the configured TTL days from config
+ * @param {string} [guildId] - Guild ID for per-guild config
  * @returns {number} TTL in days
  */
-function getHistoryTTLDays() {
+function getHistoryTTLDays(guildId) {
   try {
-    const config = getConfig();
+    const config = getConfig(guildId);
     const ttl = config?.ai?.historyTTLDays;
     if (typeof ttl === 'number' && ttl > 0) return ttl;
   } catch {
@@ -115,6 +117,11 @@ export const OPENCLAW_TOKEN = process.env.OPENCLAW_API_KEY || process.env.OPENCL
 /**
  * Hydrate conversation history for a channel from DB.
  * Dedupes concurrent hydrations and merges DB rows with in-flight in-memory writes.
+ *
+ * Note: Uses global config defaults for history length intentionally — this operates
+ * at the channel level across all guilds and guildId is not available in this context.
+ * The guild-aware config path is through generateResponse(), which passes guildId.
+ *
  * @param {string} channelId - Channel ID
  * @returns {Promise<Array>} Conversation history
  */
@@ -244,8 +251,13 @@ export function addToHistory(channelId, role, content, username, guildId) {
 }
 
 /**
- * Initialize conversation history from DB on startup
- * Loads last N messages per active channel
+ * Initialize conversation history from DB on startup.
+ * Loads last N messages per active channel.
+ *
+ * Note: Uses global config defaults for history length and TTL intentionally —
+ * this runs at startup across all channels/guilds and guildId is not available.
+ * The guild-aware config path is through generateResponse(), which passes guildId.
+ *
  * @returns {Promise<void>}
  */
 export async function initConversationHistory() {
@@ -343,7 +355,12 @@ export function stopConversationCleanup() {
 }
 
 /**
- * Run a single cleanup pass
+ * Run a single cleanup pass.
+ *
+ * Note: Uses global config default for TTL intentionally — cleanup runs
+ * across all guilds/channels and guildId is not available in this context.
+ * The guild-aware config path is through generateResponse(), which passes guildId.
+ *
  * @returns {Promise<void>}
  */
 async function runCleanup() {