@mastra/discord 1.3.0-alpha.0 → 1.3.0

package/CHANGELOG.md

@@ -1,5 +1,34 @@
 # @mastra/discord
 
+## 1.3.0
+
+### Minor Changes
+
+- Fixed Discord installs staying "pending" forever after completing the bot invite. Discord's invite flow doesn't notify the server when it finishes, so the provider now exposes `reconcileInstallation(agentId)` — it activates a pending install when the server can attribute the newly joined guild to it, and Studio calls it when you return, so the agent shows "Connected" right away: ([#25993](https://github.com/mastra-ai/mastra/pull/25993))
+
+  ```ts
+  const info = await discord.reconcileInstallation('my-agent');
+  // info?.status === 'active' once the invite finished
+  ```
+
+  When the new guild can't be attributed safely (several invites in flight, or the bot joined more than one guild), the install stays pending and activates on its first interaction, as before. Invite attribution expires after 30 minutes and never crosses a bot credential change. `listInstallations()` is now a pure read.
+
+### Patch Changes
+
+- Fixed a Discord Gateway reconnect storm that could trip Discord's connection abuse limit (>1000 connects in a short window) and get the bot token force-reset. The provider now owns the Gateway reconnection loop: failed connects (invalid token, Message Content privileged intent not enabled) back off exponentially instead of retrying instantly, a revoked token parks reconnection until new credentials arrive, and exactly one loop runs per installation — credential rotations and `disconnect()` now stop the previous loop instead of leaking it. ([#26095](https://github.com/mastra-ai/mastra/pull/26095))
+
+- Updated dependencies [[`b54fda3`](https://github.com/mastra-ai/mastra/commit/b54fda3f30330d65e52bf34802f0aa4035e30ef8), [`b0d2c38`](https://github.com/mastra-ai/mastra/commit/b0d2c387ec339229d878fdd9bbf6b6f87ec308b8), [`97644a7`](https://github.com/mastra-ai/mastra/commit/97644a78cafe8276026509c56a70108075e950b7), [`06e3dcf`](https://github.com/mastra-ai/mastra/commit/06e3dcf59aa937d8d5ab4de61b87465dfe38a62d), [`56eb894`](https://github.com/mastra-ai/mastra/commit/56eb894700575480c0e5d14a1ed7b633008610f2), [`79b3c78`](https://github.com/mastra-ai/mastra/commit/79b3c7875c511a718526020e3442bca433787199), [`8a5278a`](https://github.com/mastra-ai/mastra/commit/8a5278a8ab3fc6d4ae81073c7cef100954b4f0ef), [`7a50f76`](https://github.com/mastra-ai/mastra/commit/7a50f76900eb1488f755090651deae87b57cbab1), [`6cb981b`](https://github.com/mastra-ai/mastra/commit/6cb981bc62994e4c775864204617af70a7db3c4a), [`4cf860a`](https://github.com/mastra-ai/mastra/commit/4cf860a5a550a21fabce43010e6f1c95710e155c), [`e554c6d`](https://github.com/mastra-ai/mastra/commit/e554c6d7ff40805950f37a230ede4e2db82fc426), [`e5f53fe`](https://github.com/mastra-ai/mastra/commit/e5f53fe5965b22b274435bde05fd75f0b851e1e5), [`9c5fd7d`](https://github.com/mastra-ai/mastra/commit/9c5fd7dd5468d4b029d1015a711b328010a71484), [`dac82ea`](https://github.com/mastra-ai/mastra/commit/dac82eaa324b66acad38d468799fa4e66594107f), [`3b03b05`](https://github.com/mastra-ai/mastra/commit/3b03b054281496e07201284f686b20b4dc2c51b1), [`06496a9`](https://github.com/mastra-ai/mastra/commit/06496a961baaa86178efe24be052107ea019d649), [`616ef0f`](https://github.com/mastra-ai/mastra/commit/616ef0fa482a7724f5e93609ab4f3960e3784a17), [`bcc2ceb`](https://github.com/mastra-ai/mastra/commit/bcc2ceb951d5259d09cde558dd6b86015b096d5c), [`9d4f647`](https://github.com/mastra-ai/mastra/commit/9d4f647c52ac5701f04ff320399d01b4cc2f0942), [`cdf0d0b`](https://github.com/mastra-ai/mastra/commit/cdf0d0bcad55398a2022bbf10fe921ca801d09ac), [`7736c40`](https://github.com/mastra-ai/mastra/commit/7736c40dedd54ce840f834f7de862e64895cd3a8), [`ce51958`](https://github.com/mastra-ai/mastra/commit/ce5195800c77c90141ee38684b4b163006dd56ff), [`b9c0fe5`](https://github.com/mastra-ai/mastra/commit/b9c0fe5e4cc4bc1758a7569837ae9e76a6e35839), [`bf982e9`](https://github.com/mastra-ai/mastra/commit/bf982e91512d5fb864984b44e649f104b7a9d7a4), [`da4eac9`](https://github.com/mastra-ai/mastra/commit/da4eac96c1856b81dd132183bccb3247de1d427f), [`832f57d`](https://github.com/mastra-ai/mastra/commit/832f57da36a03e5a90bf3ccc90e9df26ecf7d59d), [`97644a7`](https://github.com/mastra-ai/mastra/commit/97644a78cafe8276026509c56a70108075e950b7), [`ed8b01a`](https://github.com/mastra-ai/mastra/commit/ed8b01a81ebf018779571de5d9af63cdc61c5693), [`a3d23f9`](https://github.com/mastra-ai/mastra/commit/a3d23f9c2ea1283001b06dffd5015f798bf75d9d), [`757b1e4`](https://github.com/mastra-ai/mastra/commit/757b1e48e8645fd99551b0af9e8ce1b415f876ea), [`edf1ce6`](https://github.com/mastra-ai/mastra/commit/edf1ce69cc703f917cd2ee06488293a1f1d45597), [`824eb7f`](https://github.com/mastra-ai/mastra/commit/824eb7fef2eb3a52a63c59c2b879c7211294e5ae), [`648a4f3`](https://github.com/mastra-ai/mastra/commit/648a4f3ec442416816173e5fd64b97efd930df8d), [`539b958`](https://github.com/mastra-ai/mastra/commit/539b958da37c302f0b8bee5d9ce2b063c63ab09a), [`847a426`](https://github.com/mastra-ai/mastra/commit/847a426fc2158fdec7c939e576e8072c7998f2e3), [`4c1bc9d`](https://github.com/mastra-ai/mastra/commit/4c1bc9d87fb5545b190e7e691331576781bffecf), [`f6fb6bc`](https://github.com/mastra-ai/mastra/commit/f6fb6bc2b0efadd6b744b6f73f07aa9800e5fc07), [`810b48d`](https://github.com/mastra-ai/mastra/commit/810b48dd77d992966a47ca5920e3c32267521b3a), [`7e63f04`](https://github.com/mastra-ai/mastra/commit/7e63f0486ea13841fc64395e3c03866afa476449), [`b0d2b33`](https://github.com/mastra-ai/mastra/commit/b0d2b336efd2a023a9f29218b442b386e42248f9), [`7a5c69e`](https://github.com/mastra-ai/mastra/commit/7a5c69e59d6f23b68c44887b15a674715e8c876f), [`53ef78f`](https://github.com/mastra-ai/mastra/commit/53ef78fa1314549de9e3ac8fd7bf57941112e316), [`9131d74`](https://github.com/mastra-ai/mastra/commit/9131d7459cfbd67037b7ea2515fcf22b60c213f3), [`196fd89`](https://github.com/mastra-ai/mastra/commit/196fd89df87b1675adcff0d4eeb1cd75965e40cb), [`b1a5896`](https://github.com/mastra-ai/mastra/commit/b1a5896196764500614cd435c48c6364a00e8726), [`0a37598`](https://github.com/mastra-ai/mastra/commit/0a375986869049865023d765337db427b6e27436), [`3acf1e3`](https://github.com/mastra-ai/mastra/commit/3acf1e36e26835caac9c22764bc87ee536ef5a62), [`7a046c6`](https://github.com/mastra-ai/mastra/commit/7a046c6a75c27d9859d695a59f6b3e8a96f6bfc8), [`9168424`](https://github.com/mastra-ai/mastra/commit/9168424453b5c0d793e0ddaa8066dceec60f619a), [`e1478fc`](https://github.com/mastra-ai/mastra/commit/e1478fc0cb9284f2e6fca7e582381c06749e2c06), [`6efbfad`](https://github.com/mastra-ai/mastra/commit/6efbfad1d763f54a2b346579d43a67ad0d92ce42), [`fb03761`](https://github.com/mastra-ai/mastra/commit/fb0376186c5fc8fc633c38d13a8dcc7c976318d8), [`1d94199`](https://github.com/mastra-ai/mastra/commit/1d94199fbb65d5acbcd0101bcbac96876e35cac4), [`018ae9d`](https://github.com/mastra-ai/mastra/commit/018ae9d2f4ebfd3bd6f267d0010171a546cb3abf), [`3e7a81b`](https://github.com/mastra-ai/mastra/commit/3e7a81b4e9b2c9de440b85b315a8297418afbaca), [`8fd2313`](https://github.com/mastra-ai/mastra/commit/8fd23138d68dd1b1b324a45db645c4968df45751), [`c3caa9a`](https://github.com/mastra-ai/mastra/commit/c3caa9a04cfa7652a9e5e214839285074eaa3f05), [`077dc71`](https://github.com/mastra-ai/mastra/commit/077dc7181a69bd473319ce1c48f7fd2fcdf95b97), [`718207d`](https://github.com/mastra-ai/mastra/commit/718207d5cc37d625bea6ff290fe25a949d3594f6), [`c498e24`](https://github.com/mastra-ai/mastra/commit/c498e249038d08a2e2fc31eed7ba4ca5e7fa1aa8), [`873b67e`](https://github.com/mastra-ai/mastra/commit/873b67e1e80e33cedf1809bf51f342cf7e9e654f), [`c96dab0`](https://github.com/mastra-ai/mastra/commit/c96dab05e69601667bc237ff2b27b9cb7d1f50c6), [`6a4f0bd`](https://github.com/mastra-ai/mastra/commit/6a4f0bd01016fba8d8dea5159a18c6a400237256), [`a4b2030`](https://github.com/mastra-ai/mastra/commit/a4b2030f6a1cb7123530f99d06f2b9e461e63932), [`2a48242`](https://github.com/mastra-ai/mastra/commit/2a48242a18f7444896bf8c7054fb59c0afae050e), [`07440af`](https://github.com/mastra-ai/mastra/commit/07440affa587b68f8348eb68e92fc1aa1817b61f), [`499f480`](https://github.com/mastra-ai/mastra/commit/499f480c86ba137356367e6b6281ba02b42d8169), [`bb57489`](https://github.com/mastra-ai/mastra/commit/bb5748958b6d404619884f7e04a0d7619fdebae7), [`045d583`](https://github.com/mastra-ai/mastra/commit/045d583852e55d0c1c518d2f5f9c33b48243cf7d), [`4ec3ccd`](https://github.com/mastra-ai/mastra/commit/4ec3ccde9924c27e7320f7bbe26c932731b7b4cd), [`3439cb2`](https://github.com/mastra-ai/mastra/commit/3439cb236f17bd248a326ff7f2c934cfb9974936), [`b8be029`](https://github.com/mastra-ai/mastra/commit/b8be0295bf88782f95702e65349a714d03a787d1)]:
+  - @mastra/core@1.75.0
+
+## 1.3.0-alpha.1
+
+### Patch Changes
+
+- Fixed a Discord Gateway reconnect storm that could trip Discord's connection abuse limit (>1000 connects in a short window) and get the bot token force-reset. The provider now owns the Gateway reconnection loop: failed connects (invalid token, Message Content privileged intent not enabled) back off exponentially instead of retrying instantly, a revoked token parks reconnection until new credentials arrive, and exactly one loop runs per installation — credential rotations and `disconnect()` now stop the previous loop instead of leaking it. ([#26095](https://github.com/mastra-ai/mastra/pull/26095))
+
+- Updated dependencies [[`97644a7`](https://github.com/mastra-ai/mastra/commit/97644a78cafe8276026509c56a70108075e950b7), [`4cf860a`](https://github.com/mastra-ai/mastra/commit/4cf860a5a550a21fabce43010e6f1c95710e155c), [`dac82ea`](https://github.com/mastra-ai/mastra/commit/dac82eaa324b66acad38d468799fa4e66594107f), [`97644a7`](https://github.com/mastra-ai/mastra/commit/97644a78cafe8276026509c56a70108075e950b7), [`0a37598`](https://github.com/mastra-ai/mastra/commit/0a375986869049865023d765337db427b6e27436), [`018ae9d`](https://github.com/mastra-ai/mastra/commit/018ae9d2f4ebfd3bd6f267d0010171a546cb3abf), [`c498e24`](https://github.com/mastra-ai/mastra/commit/c498e249038d08a2e2fc31eed7ba4ca5e7fa1aa8), [`045d583`](https://github.com/mastra-ai/mastra/commit/045d583852e55d0c1c518d2f5f9c33b48243cf7d)]:
+  - @mastra/core@1.75.0-alpha.7
+
 ## 1.3.0-alpha.0
 
 ### Minor Changes

package/dist/index.cjs

@@ -109038,7 +109038,7 @@ var require_Shard = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const path$2 = require("path");
 	const process$7 = require("process");
 	const { setTimeout: setTimeout$1, clearTimeout: clearTimeout$1 } = require("timers");
-	const { setTimeout: sleep$1 } = require("timers/promises");
+	const { setTimeout: sleep$2 } = require("timers/promises");
 	const { SHARE_ENV } = require("worker_threads");
 	const { DiscordjsError, ErrorCodes } = require_errors();
 	const ShardEvents = require_ShardEvents();
@@ -109226,7 +109226,7 @@ var require_Shard = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		*/
 		async respawn({ delay = 500, timeout = 3e4 } = {}) {
 			this.kill();
-			if (delay > 0) await sleep$1(delay);
+			if (delay > 0) await sleep$2(delay);
 			return this.spawn(timeout);
 		}
 		/**
@@ -109449,7 +109449,7 @@ var require_ShardingManager = /* @__PURE__ */ __commonJSMin(((exports, module) =
 	const fs = require("fs");
 	const path$1 = require("path");
 	const process$6 = require("process");
-	const { setTimeout: sleep } = require("timers/promises");
+	const { setTimeout: sleep$1 } = require("timers/promises");
 	const { Collection } = require_dist$4();
 	const Shard = require_Shard();
 	const { DiscordjsError, DiscordjsTypeError, DiscordjsRangeError, ErrorCodes } = require_errors();
@@ -109613,7 +109613,7 @@ var require_ShardingManager = /* @__PURE__ */ __commonJSMin(((exports, module) =
 				const promises = [];
 				const shard = this.createShard(shardId);
 				promises.push(shard.spawn(timeout));
-				if (delay > 0 && this.shards.size !== this.shardList.length) promises.push(sleep(delay));
+				if (delay > 0 && this.shards.size !== this.shardList.length) promises.push(sleep$1(delay));
 				await Promise.all(promises);
 			}
 			return this.shards;
@@ -109697,7 +109697,7 @@ var require_ShardingManager = /* @__PURE__ */ __commonJSMin(((exports, module) =
 					delay: respawnDelay,
 					timeout
 				})];
-				if (++s < this.shards.size && shardDelay > 0) promises.push(sleep(shardDelay));
+				if (++s < this.shards.size && shardDelay > 0) promises.push(sleep$1(shardDelay));
 				await Promise.all(promises);
 			}
 			return this.shards;
@@ -123635,6 +123635,120 @@ function hashCommands(commands) {
 	return (0, crypto$1.createHash)("sha256").update(JSON.stringify(canonical)).digest("hex").slice(0, 16);
 }
 //#endregion
+//#region src/gateway-loop.ts
+/**
+* Provider-owned Discord Gateway reconnection loop.
+*
+* Core's `AgentChannels` has a built-in gateway loop, but the provider opts out
+* of it (`gateway: false` on the adapter entry) and runs this one instead,
+* because the core loop has two failure modes that combine into a connect
+* storm — severe enough that Discord's abuse tripwire (>1000 connects in a
+* short window) force-resets the bot token:
+*
+* - `@chat-adapter/discord` **swallows `client.login()` errors**: a session
+*   that fails IDENTIFY (invalid/reset token, the MessageContent privileged
+*   intent not enabled on the app) resolves "cleanly" within milliseconds.
+* - The core loop reconnects **immediately** on a clean session end and keeps
+*   **no abort handle**, so a failing session becomes a zero-delay IDENTIFY
+*   loop that nothing can stop, and every credential rotation leaks another
+*   immortal loop still hammering with the stale token.
+*
+* This loop defends against both: a session that ends before
+* {@link HEALTHY_SESSION_MS} is treated as a failed connect and backed off
+* exponentially; a REST token check distinguishes a revoked token (park the
+* loop until `configure()` delivers new credentials and restarts it) from a
+* transient failure (keep backing off); and the `AbortSignal` lets the
+* provider kill the loop on disconnect, credential rotation, or re-attach.
+* This mirrors how `@mastra/telegram` owns its polling loop (`stopPolling()`
+* on reconfigure/disconnect, capped backoff on errors).
+*/
+/** How long each Gateway session runs before a scheduled reconnect. */
+const GATEWAY_SESSION_MS = 1440 * 60 * 1e3;
+/**
+* A session that ends sooner than this is treated as a failed connect. The
+* adapter resolves login failures as if the session ended cleanly, so elapsed
+* time is the only signal that distinguishes "ran fine until the duration
+* elapsed / Discord closed us" from "IDENTIFY was rejected instantly".
+*/
+const HEALTHY_SESSION_MS = 60 * 1e3;
+/** First retry delay after a failed connect; doubles up to {@link MAX_BACKOFF_MS}. */
+const INITIAL_BACKOFF_MS = 5 * 1e3;
+/** Retry delay ceiling. */
+const MAX_BACKOFF_MS = 900 * 1e3;
+/** Pause between healthy sessions — a scheduled rollover, not a failure. */
+const RECONNECT_DELAY_MS = 1e3;
+/** After this many consecutive failed connects, log a diagnostic hint. */
+const SHORT_SESSION_HINT_THRESHOLD = 3;
+/**
+* Run Gateway sessions back-to-back until `signal` aborts or the bot token is
+* confirmed revoked. Resolves when the loop stops; never rejects.
+*/
+async function runGatewayLoop(deps, signal) {
+	const sessionMs = deps.sessionMs ?? 864e5;
+	let backoffMs = INITIAL_BACKOFF_MS;
+	let consecutiveFailures = 0;
+	while (!signal.aborted) {
+		const startedAt = Date.now();
+		try {
+			let settle;
+			let fail;
+			const done = new Promise((resolve, reject) => {
+				settle = resolve;
+				fail = reject;
+			});
+			let sessionDelivered = false;
+			const response = await deps.startSession({ waitUntil: (promise) => {
+				sessionDelivered = true;
+				promise.then(() => settle(), (err) => fail(err));
+			} }, sessionMs, signal);
+			if (!response.ok || !sessionDelivered) throw new Error(`Gateway session refused (status ${response.status})`);
+			await done;
+		} catch (err) {
+			deps.log("error", `Gateway session error: ${err instanceof Error ? err.message : String(err)}`);
+		}
+		if (signal.aborted) return;
+		const elapsedMs = Date.now() - startedAt;
+		if (elapsedMs >= 6e4) {
+			backoffMs = INITIAL_BACKOFF_MS;
+			consecutiveFailures = 0;
+			deps.log("info", "Gateway session ended; reconnecting");
+			await sleep(RECONNECT_DELAY_MS, signal);
+			continue;
+		}
+		consecutiveFailures += 1;
+		let check;
+		try {
+			check = await deps.checkToken();
+		} catch {
+			check = "unreachable";
+		}
+		if (signal.aborted) return;
+		if (check === "invalid") {
+			deps.log("error", "Discord rejected the bot token (401); Gateway reconnection is parked until configure() supplies new credentials. Reset tokens must be rotated in the Discord Developer Portal and updated wherever this provider gets its credentials.");
+			return;
+		}
+		if (consecutiveFailures === 3) deps.log("error", `Gateway sessions keep ending within ${HEALTHY_SESSION_MS / 1e3}s of starting. The token checks out over REST, so the usual cause is a rejected IDENTIFY: enable the "Message Content Intent" (a privileged intent) for this app in the Discord Developer Portal, or set gateway: false for an interactions-only deployment.`);
+		deps.log("warn", `Gateway session ended after ${Math.round(elapsedMs / 1e3)}s; retrying in ${Math.round(backoffMs / 1e3)}s`);
+		await sleep(backoffMs, signal);
+		backoffMs = Math.min(backoffMs * 2, MAX_BACKOFF_MS);
+	}
+}
+/** Abortable sleep: resolves early (never rejects) when the signal fires. */
+function sleep(ms, signal) {
+	if (signal.aborted) return Promise.resolve();
+	return new Promise((resolve) => {
+		const onAbort = () => {
+			clearTimeout(timer);
+			resolve();
+		};
+		const timer = setTimeout(() => {
+			signal.removeEventListener("abort", onAbort);
+			resolve();
+		}, ms);
+		signal.addEventListener("abort", onAbort, { once: true });
+	});
+}
+//#endregion
 //#region src/crypto.ts
 /**
 * Opt-in AES-256-GCM encryption for the app's bot token at rest, with
@@ -123931,8 +124045,10 @@ function planReconcile(input) {
 * Resolve the per-adapter config the provider applies to the Discord entry in
 * `AgentChannels.adapters`. Discord has native embeds + action-row buttons, so
 * `toolDisplay` defaults to `'cards'` (unlike Telegram's `'text'`); `streaming`
-* post-and-edits the interaction followup; `gateway` (default `true`) makes core
-* own the DM/mention Gateway reconnection loop.
+* post-and-edits the interaction followup; `gateway` (default `true`) makes the
+* **provider** run the DM/mention Gateway reconnection loop. (The adapter entry
+* handed to `AgentChannels` always carries `gateway: false` — core's loop must
+* never start; see `#createAgentChannels`.)
 */
 function resolveDiscordAdapterConfig(config) {
 	return {
@@ -123956,11 +124072,15 @@ function resolveDiscordAdapterConfig(config) {
 * member) or lazily off the first inbound interaction's authoritative `guild_id`
 * (see {@link activateGuild}).
 *
-* **Gateway is core's job.** The mounted interactions route only ever receives
-* HTTP Interactions (PING, slash commands, buttons). DMs / @mentions / reactions
-* arrive over the Gateway WebSocket, whose reconnection loop core owns: setting
-* `gateway: true` (default) on the adapter entry is enough — the wrapper never
-* calls `startGatewayListener` or runs a reconnect loop.
+* **Gateway is the provider's job.** The mounted interactions route only ever
+* receives HTTP Interactions (PING, slash commands, buttons). DMs / @mentions /
+* reactions arrive over the Gateway WebSocket, whose reconnection loop the
+* provider owns ({@link #startGatewayLoop} → `./gateway-loop`): one abortable
+* loop per installation, exponential backoff on failed connects, parked on a
+* revoked token. Core's `AgentChannels` loop is explicitly disabled
+* (`gateway: false` on the adapter entry) — it reconnects with no backoff and
+* cannot be stopped, which is how a failing IDENTIFY once tripped Discord's
+* 1000-connect abuse limit and got the bot token force-reset.
 *
 * Implemented (issues `mastra-discord-13x.2` + `.3`): the app-config +
 * guild-keyed install store, `connect()`/`disconnect()`, OAuth2 invite-URL
@@ -123974,6 +124094,15 @@ var DiscordProvider = class {
 	#store;
 	/** Live adapters, keyed by installation id (one per agent; all share the app's bot token). */
 	#adapters = /* @__PURE__ */ new Map();
+	/**
+	* Live Gateway reconnect loops, keyed by installation id. Aborting a
+	* controller ends the loop and destroys its discord.js client. Exactly one
+	* loop may exist per installation — {@link #startGatewayLoop} aborts any
+	* predecessor, so credential rotations and adapter rebuilds can't leak loops
+	* that keep IDENTIFYing with stale tokens (Discord force-resets the bot
+	* token past ~1000 connects in a short window).
+	*/
+	#gatewayLoops = /* @__PURE__ */ new Map();
 	/** Cached sync view of whether the app is configured (for {@link getInfo}). */
 	#configured = false;
 	#initPromise = null;
@@ -124020,6 +124149,7 @@ var DiscordProvider = class {
 			this.#storeIsFallback = false;
 		}
 		if (isNewInstance) {
+			this.#stopAllGatewayLoops();
 			this.#adapters.clear();
 			this.#configured = this.#hasSuppliedCredentials();
 		}
@@ -124117,6 +124247,7 @@ var DiscordProvider = class {
 				app: void 0
 			};
 			this.#configured = false;
+			this.#stopAllGatewayLoops();
 			this.#adapters.clear();
 			this.#initPromise = null;
 			return;
@@ -124152,6 +124283,7 @@ var DiscordProvider = class {
 			if (merged.botToken && merged.publicKey && merged.applicationId) await store.saveAppConfig(merged);
 		}
 		const wasInitialized = this.#initPromise !== null;
+		this.#stopAllGatewayLoops();
 		this.#adapters.clear();
 		this.#initPromise = null;
 		if (wasInitialized) await this.initialize();
@@ -124309,19 +124441,15 @@ var DiscordProvider = class {
 		return installation;
 	}
 	/**
-	* Disconnect an agent from Discord: remove its installation row and drop the
-	* adapter entry.
-	*
-	* **Limitation:** the Gateway loop is owned by core (it calls
-	* `startGatewayListener` itself; there is no `stopGatewayListener`), so
-	* disconnect cannot kill an in-flight gateway window — it lapses at the next
-	* duration boundary. Contrast Telegram's clean `stopPolling()`.
+	* Disconnect an agent from Discord: abort its Gateway loop, remove its
+	* installation row, and drop the adapter entry.
 	*/
 	async disconnect(agentId) {
 		const store = await this.#getStore();
 		const existing = await store.getByAgent(agentId);
 		if (!existing) throw new Error(`No Discord installation found for agent "${agentId}"`);
 		await this.#enqueueWebhookTask(existing.webhookId, async () => {
+			this.#stopGatewayLoop(existing.id);
 			this.#adapters.delete(existing.id);
 			await store.deleteByAgent(agentId);
 		});
@@ -124455,6 +124583,7 @@ var DiscordProvider = class {
 		if (!channels || channels.adapters["discord"] !== adapter) {
 			channels = this.#createAgentChannels(agent, adapter);
 			await channels.initialize(this.#mastra);
+			this.#startGatewayLoop(installation, adapter, app);
 		}
 		try {
 			return scheduleActivation(await channels.handleWebhookEvent(PLATFORM, c.req.raw, waitUntil ? { waitUntil } : void 0));
@@ -124531,13 +124660,64 @@ var DiscordProvider = class {
 		if (!app) return;
 		const agent = this.#resolveAgent(installation.agentId);
 		const adapter = this.#getOrCreateAdapter(installation, app);
-		if (agent && this.#mastra) await this.#createAgentChannels(agent, adapter).initialize(this.#mastra);
+		if (agent && this.#mastra) {
+			await this.#createAgentChannels(agent, adapter).initialize(this.#mastra);
+			this.#startGatewayLoop(installation, adapter, app);
+		}
+	}
+	/**
+	* Start (or restart) the Gateway reconnect loop for an installation. Any
+	* previous loop for the same installation is aborted first, so adapter
+	* rebuilds and credential rotations replace the loop instead of stacking
+	* another one. No-op when the provider is configured `gateway: false`.
+	*
+	* The loop itself lives in {@link runGatewayLoop}; see that module for why
+	* the provider owns this instead of core's `AgentChannels` loop.
+	*/
+	#startGatewayLoop(installation, adapter, app) {
+		if (!resolveDiscordAdapterConfig(this.#config).gateway) return;
+		this.#stopGatewayLoop(installation.id);
+		const controller = new AbortController();
+		this.#gatewayLoops.set(installation.id, controller);
+		const apiBaseUrl = this.#apiBaseUrl();
+		runGatewayLoop({
+			startSession: (options, durationMs, signal) => adapter.startGatewayListener(options, durationMs, signal),
+			checkToken: async () => {
+				try {
+					const response = await discordRequest(app.botToken, "GET", "/applications/@me", apiBaseUrl);
+					return response.status === 401 ? "invalid" : response.ok ? "valid" : "unreachable";
+				} catch {
+					return "unreachable";
+				}
+			},
+			log: (level, message) => {
+				const line = `[Discord] [gateway:${installation.agentId}] ${message}`;
+				if (level === "error") console.error(line);
+				else if (level === "warn") console.warn(line);
+				else console.info(line);
+			}
+		}, controller.signal).finally(() => {
+			if (this.#gatewayLoops.get(installation.id) === controller) this.#gatewayLoops.delete(installation.id);
+		});
+	}
+	/** Abort an installation's Gateway loop (ends the session, destroys the client). */
+	#stopGatewayLoop(installationId) {
+		const controller = this.#gatewayLoops.get(installationId);
+		if (!controller) return;
+		this.#gatewayLoops.delete(installationId);
+		controller.abort();
+	}
+	/** Abort every Gateway loop — credential revocation or Mastra re-attach. */
+	#stopAllGatewayLoops() {
+		for (const installationId of [...this.#gatewayLoops.keys()]) this.#stopGatewayLoop(installationId);
 	}
 	/**
 	* Create AgentChannels for an agent with the Discord adapter, preserving any
 	* adapters/config the agent author already configured (mirrors `@mastra/slack`
-	* / `@mastra/telegram`). `gateway: true` (default) makes core start the Gateway
-	* reconnection loop for DMs/mentions.
+	* / `@mastra/telegram`). The entry always carries `gateway: false`: core's
+	* built-in gateway loop reconnects with no backoff and no abort handle, so
+	* the provider owns the Gateway lifecycle instead ({@link #startGatewayLoop},
+	* gated on the provider-level `gateway` config).
 	*/
 	#createAgentChannels(agent, adapter) {
 		const existingConfig = agent.getChannels()?.channelConfig;
@@ -124545,6 +124725,7 @@ var DiscordProvider = class {
 		const entry = {
 			adapter,
 			...resolveDiscordAdapterConfig(cfg),
+			gateway: false,
 			...cfg.cors !== void 0 ? { cors: cfg.cors } : {},
 			...cfg.formatError !== void 0 ? { formatError: cfg.formatError } : {}
 		};