"A beginning is a very delicate time."
Sahir Venn — Mentat of Dune: Awakening Docker
The watcher that never sleeps.
Mentat Link is home to Sahir Venn — the Mentat serving Dune: Awakening Docker. A Mentat is a human trained as a living computer; Sahir Venn is the one assigned to your server. Status cards, player inventories, combat intel, and more — all through slash commands.
See It In Action
Two commands — your server's health and your character's status.
What Sahir Venn Brings to Your Sietch
Seven pillars of knowledge, pinned to the board for all to see.
Sietch Watch
Eyes on the battlegroup
The Personal Ledger
Know thyself, know thy spice
Deep Desert Intel
What the worms know
The Archives
Records of Arrakis
Kanly Council
The voice of the Naib
Foundation Stones
Beneath the sand
Mentat Core
The beat that calls
How Sahir Venn Works
From silence to watcher in minutes.
Add to Discord
Invite Sahir Venn to your Discord server. No application or bot token to create — it's already a running, hosted bot.
Connect Your Console
Sign in with Discord on the setup portal, then enter your console URL and adapter token. If your console's Discord adapter is already enabled, no .env editing is needed.
Type /dune
Assign roles to your members. Check server status, view inventories, track combat intel — right from Discord.
Built for Survival
Security is not a feature. It is the foundation.
Deny-by-Default RBAC
Every command is denied unless explicitly granted. The owner assigns Discord roles to four tiers (Player, Moderator, Admin, Owner) with fine-grained per-command permissions. Write operations (restarts, backups, updates) are separately gated behind a global enable flag.
Bearer-Token Auth
Every request to the console requires a secret bearer token. No token, no access.
Granular Role-Based Access
Four tiers — Player, Moderator, Admin, Owner — control command access. The owner can assign any Discord role to any command or group of commands. Two modes: restricted (explicit grants required) and open (all members have access).
No Docker Socket
The bot never touches the Docker socket. It cannot see or control your containers.
No Direct Game Database Access
The bot never queries the game server's Postgres database. Character linking stores Discord↔Character associations (up to three per user) in the bot's own local database. All game data flows through the console's secure API layer.
No Shell Commands
The bot cannot execute shell commands on your server. Period.
Secrets Stay Out of Code
Tokens loaded from files (keep them at 0600) or environment variables — never committed to git. Multi-tenant adapter tokens encrypted at rest (AES-256-GCM). The bot's own code never writes secrets to logs.
Scanned Every Commit and PR
Pre-commit hooks run gitleaks, ggshield, and semgrep locally. CI adds full Semgrep Pro + Supply Chain analysis, trivy scanning, and dependency auditing on every push to main and every pull request.
All the Words Sahir Venn Speaks
Every command, laid bare on the scroll.
| Command | Description | Role |
|---|---|---|
/dune server health | Check the Discord adapter | Player |
/dune server status | Dashboard card with server status, players, maps | Player |
/dune server summary | Compact text summary of server status | Player |
/dune server readiness | Readiness and preflight checks | Player |
/dune server services | List all game services and their state | Player |
/dune server services-detail | Detailed service status with diagnostics | Player |
/dune server readiness-detail | Readiness with full issue reporting | Player |
/dune server maintenance | Show maintenance mode status | Player |
| Command | Description | Role |
|---|---|---|
/dune player link <name> | Link Discord to your in-game character | Player |
/dune player unlink <id> | Remove a specific character link by ID | Player |
/dune player whoami | Show your linked game character info | Player |
/dune player verify <code> | Verify a multi-character link code | Player |
/dune player characters | List all your linked characters | Player |
/dune player enable <id> | Enable a linked character in this server | Player |
/dune player disable <id> | Disable a linked character in this server | Player |
/dune player default <id> | Set your default character for this server | Player |
/dune player inventory | View your character's inventory | Player |
/dune player storage | View items in your storage containers | Player |
/dune player find <item> | Search for an item across all storage | Player |
/dune player faction <name> | Set your faction for themed embeds | Player |
| Command | Description | Role |
|---|---|---|
/dune ops activity | Player activity statistics | Player |
/dune ops combat | Combat and death statistics | Player |
/dune ops resources | Resource field data (spice, water, minerals) | Player |
/dune ops economy | Currency, trading, and tax data | Player |
/dune ops location | Map location activity (markers, density, territories) | Player |
/dune ops dashboard | Aggregated operational summary | Player |
/dune ops armory | Server-wide aggregate inventory stats | Player |
/dune ops prometheus | Container and infrastructure metrics | Player |
/dune ops soc | Bridge health and request stats | Player |
/dune ops announcements | Show recent server announcements | Player |
/dune ops alerts | Show active Prometheus alerts | Player |
| Command | Description | Role |
|---|---|---|
/dune admin doctor | Full system diagnostic across all services | Admin |
/dune admin cooldowns | Show active command cooldowns | Admin |
/dune admin latency | Adapter request latency history | Admin |
/dune admin events | Recent server incidents and alerts | Admin |
/dune admin broadcast <msg> | Send a message to all in-game players | Moderator+ |
/dune admin roles | Show configured Discord role mappings | Admin |
/dune admin sync-commands | Check Core's command catalog for drift against the bot's registry | Admin |
| Command | Description | Role |
|---|---|---|
/dune infra version | Show Dune stack version | Player |
/dune infra servers | List game server partitions | Player |
/dune infra ports | Show network port and listener status | Player |
/dune infra db | Database status and health | Player |
| Command | Description | Role |
|---|---|---|
/dune core about | Bot version, security info, connection details | Player |
/dune core ping | Test Discord and adapter latency | Player |
/dune core help | List all commands you have permission to use | Player |
/dune core setup | How to add this bot to your own Discord server | Player |
| Command | Description | Role |
|---|---|---|
/dune data population | Show server population statistics | Player |
/dune data backups | List recent database backups | Player |
/dune data maps | Show active map partitions | Player |
| Command | Description | Role |
|---|---|---|
/dune logs dune-cache | View dune-cache container logs | Player |
/dune logs dune-generated | View dune-generated container logs | Player |
/dune logs dune-server | View dune-server container logs | Player |
/dune logs dune-steam | View dune-steam container logs | Player |
/dune logs dune-work | View dune-work container logs | Player |
/dune logs orchestrator | View orchestrator service logs | Player |
/dune logs redblink-dune-docker-console | View the console adapter's own container logs | Player |
Bring the Watcher to Your Sietch
"The mystery of life isn't a problem to solve, but a reality to experience."
Sahir Venn is a hosted Discord bot — invite it, connect your console through the setup portal. If your console's Discord adapter is already enabled, you're up in about 5 minutes. No Discord application or bot token to create.
Questions the Fremen Ask
Wisdom for those who seek to understand.
Yes. Sahir Venn is a single, hosted bot — invite it with the Add to Discord link, then connect your console through the web setup portal. No Discord application to create. Follow the Setup Guide for step-by-step instructions.
Yes. It never accesses the Docker socket or game files directly. All commands go through a bearer-token protected API. Secrets use file-based storage with restricted permissions (0600). Security scanning runs on every commit.
Sahir Venn uses a deny-by-default IAM-style RBAC model. The owner assigns Discord roles to four tiers (Player, Moderator, Admin, Owner) with per-command permissions. Character linking (/dune player link) stores a Discord↔Character association in the bot's local database. Admin write operations (restarts, backups, updates) require an explicit enable flag and role authorization.
First, link your Discord account to your character: /dune player link <your-character-name>. Then run /dune player inventory to see everything your character is carrying.
You likely don't have a role for Sahir Venn assigned yet — ask a server admin to give you the Player role (or higher). If commands still don't appear after a minute, try logging out and back into Discord. If your server was just connected, allow up to an hour for commands to register globally.
No coding. Inviting the bot and connecting it through the web setup portal is mostly point-and-click — you'll need your console's URL and an adapter token. If your console doesn't have the Discord adapter enabled yet, that's one SSH step (the Setup Guide shows the exact commands) rather than anything you write yourself.
Yes — Sahir Venn runs on our hosted infrastructure, so your Console URL must be publicly reachable (a public IP, a domain, or a tunnel like Cloudflare Tunnel if your console runs on a home network). See the Setup Guide for details.
Generate a new token, update the token file in your console's repo root (runtime/secrets/discord-adapter-token.txt — the full path is /repo/runtime/secrets/discord-adapter-token.txt inside the console container), restart the console, and paste the new token into the setup portal. The old token stops working immediately.