I seem to recall a hacking saga that involved some programmers implementing a program to keep track of coffee orders (I’m running to the starbucks, can I get you anything)-- and it expanded and expanded until it involved instant messaging, banking, derivatives, virtual currencies and all sorts of other cruft.
Protocols and file formats that are Turing-complete input languages are the worst offenders, because for them, recognizing valid or expected inputs is UNDECIDABLE: no amount of programming or testing will get it right.
A Turing-complete input language destroys security for generations of users. Avoid Turing-complete input languages!
I hope you’re okay with coffeescript. Currently, the bot is stateless. We’ll need to add a brain to the bot (either redis or the existing sql db that patrace has).