@openclaw/discord 2026.3.13 → 2026.5.1-beta.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (498) hide show
  1. package/account-inspect-api.ts +6 -0
  2. package/action-runtime-api.ts +1 -0
  3. package/api.ts +132 -0
  4. package/channel-config-api.ts +1 -0
  5. package/channel-plugin-api.ts +3 -0
  6. package/config-api.ts +4 -0
  7. package/configured-state.ts +6 -0
  8. package/contract-api.ts +21 -0
  9. package/directory-contract-api.ts +4 -0
  10. package/doctor-contract-api.ts +1 -0
  11. package/index.test.ts +13 -0
  12. package/index.ts +18 -13
  13. package/openclaw.plugin.json +3282 -1
  14. package/package.json +67 -2
  15. package/runtime-api.actions.ts +15 -0
  16. package/runtime-api.lookup.ts +22 -0
  17. package/runtime-api.monitor.ts +50 -0
  18. package/runtime-api.send.ts +79 -0
  19. package/runtime-api.threads.ts +30 -0
  20. package/runtime-api.ts +180 -0
  21. package/runtime-setter-api.ts +3 -0
  22. package/secret-contract-api.ts +4 -0
  23. package/security-audit-contract-api.ts +1 -0
  24. package/security-contract-api.ts +4 -0
  25. package/session-key-api.ts +1 -0
  26. package/setup-entry.ts +9 -0
  27. package/setup-plugin-api.ts +3 -0
  28. package/src/account-inspect.test.ts +126 -0
  29. package/src/account-inspect.ts +132 -0
  30. package/src/accounts.test.ts +247 -0
  31. package/src/accounts.ts +196 -0
  32. package/src/actions/handle-action.guild-admin.ts +411 -0
  33. package/src/actions/handle-action.test.ts +185 -0
  34. package/src/actions/handle-action.ts +332 -0
  35. package/src/actions/runtime.guild.ts +446 -0
  36. package/src/actions/runtime.messaging.messages.ts +205 -0
  37. package/src/actions/runtime.messaging.reactions.ts +67 -0
  38. package/src/actions/runtime.messaging.runtime.ts +69 -0
  39. package/src/actions/runtime.messaging.send.ts +244 -0
  40. package/src/actions/runtime.messaging.shared.ts +92 -0
  41. package/src/actions/runtime.messaging.ts +37 -0
  42. package/src/actions/runtime.moderation-shared.ts +48 -0
  43. package/src/actions/runtime.moderation.authz.test.ts +151 -0
  44. package/src/actions/runtime.moderation.ts +116 -0
  45. package/src/actions/runtime.presence.test.ts +160 -0
  46. package/src/actions/runtime.presence.ts +117 -0
  47. package/src/actions/runtime.shared.ts +83 -0
  48. package/src/actions/runtime.test.ts +1056 -0
  49. package/src/actions/runtime.ts +81 -0
  50. package/src/api-barrel.test.ts +80 -0
  51. package/src/api.test.ts +130 -0
  52. package/src/api.ts +169 -0
  53. package/src/approval-handler.runtime.test.ts +41 -0
  54. package/src/approval-handler.runtime.ts +632 -0
  55. package/src/approval-native.test.ts +330 -0
  56. package/src/approval-native.ts +219 -0
  57. package/src/approval-runtime.ts +14 -0
  58. package/src/approval-shared.ts +53 -0
  59. package/src/audit-core.ts +141 -0
  60. package/src/audit.test.ts +145 -0
  61. package/src/audit.ts +32 -0
  62. package/src/channel-actions.contract.test.ts +45 -0
  63. package/src/channel-actions.runtime.ts +1 -0
  64. package/src/channel-actions.test.ts +236 -0
  65. package/src/channel-actions.ts +198 -0
  66. package/src/channel-api.ts +28 -0
  67. package/src/channel.conversation.ts +159 -0
  68. package/src/channel.loaders.ts +47 -0
  69. package/src/channel.runtime.ts +1 -0
  70. package/src/channel.setup.ts +12 -0
  71. package/src/channel.test.ts +539 -12
  72. package/src/channel.ts +596 -430
  73. package/src/chunk.test.ts +157 -0
  74. package/src/chunk.ts +321 -0
  75. package/src/client.proxy.test.ts +176 -0
  76. package/src/client.test.ts +76 -0
  77. package/src/client.ts +139 -0
  78. package/src/component-custom-id.ts +72 -0
  79. package/src/components-registry.ts +356 -0
  80. package/src/components.builders.ts +409 -0
  81. package/src/components.modal.ts +124 -0
  82. package/src/components.parse.ts +407 -0
  83. package/src/components.test.ts +312 -0
  84. package/src/components.ts +54 -0
  85. package/src/components.types.ts +187 -0
  86. package/src/config-schema.test.ts +325 -0
  87. package/src/config-schema.ts +6 -0
  88. package/src/config-ui-hints.ts +249 -0
  89. package/src/conversation-identity.ts +58 -0
  90. package/src/delivery-retry.ts +56 -0
  91. package/src/directory-cache.ts +116 -0
  92. package/src/directory-config.ts +58 -0
  93. package/src/directory-contract.test.ts +129 -0
  94. package/src/directory-live.test.ts +126 -0
  95. package/src/directory-live.ts +135 -0
  96. package/src/doctor-contract.ts +477 -0
  97. package/src/doctor-shared.ts +5 -0
  98. package/src/doctor.test.ts +405 -0
  99. package/src/doctor.ts +340 -0
  100. package/src/draft-chunking.test.ts +64 -0
  101. package/src/draft-chunking.ts +43 -0
  102. package/src/draft-stream.test.ts +159 -0
  103. package/src/draft-stream.ts +154 -0
  104. package/src/error-body.ts +38 -0
  105. package/src/exec-approvals.test.ts +88 -0
  106. package/src/exec-approvals.ts +110 -0
  107. package/src/gateway-logging.test.ts +98 -0
  108. package/src/gateway-logging.ts +67 -0
  109. package/src/group-policy.ts +113 -0
  110. package/src/guilds.ts +29 -0
  111. package/src/inbound-context.contract.test.ts +11 -0
  112. package/src/interactive-dispatch.ts +104 -0
  113. package/src/internal/api.commands.ts +51 -0
  114. package/src/internal/api.guild.ts +164 -0
  115. package/src/internal/api.interactions.ts +53 -0
  116. package/src/internal/api.messages.ts +113 -0
  117. package/src/internal/api.reactions.ts +38 -0
  118. package/src/internal/api.test.ts +262 -0
  119. package/src/internal/api.ts +61 -0
  120. package/src/internal/api.users.ts +19 -0
  121. package/src/internal/api.webhooks.ts +13 -0
  122. package/src/internal/client.test.ts +297 -0
  123. package/src/internal/client.ts +246 -0
  124. package/src/internal/command-deploy.ts +202 -0
  125. package/src/internal/commands.ts +188 -0
  126. package/src/internal/components.base.ts +65 -0
  127. package/src/internal/components.message.ts +279 -0
  128. package/src/internal/components.modal.ts +95 -0
  129. package/src/internal/components.ts +31 -0
  130. package/src/internal/discord.ts +11 -0
  131. package/src/internal/embeds.ts +35 -0
  132. package/src/internal/entity-cache.ts +98 -0
  133. package/src/internal/event-queue.ts +162 -0
  134. package/src/internal/gateway-close-codes.ts +25 -0
  135. package/src/internal/gateway-dispatch.ts +96 -0
  136. package/src/internal/gateway-identify-limiter.ts +26 -0
  137. package/src/internal/gateway-lifecycle.ts +61 -0
  138. package/src/internal/gateway-rate-limit.ts +104 -0
  139. package/src/internal/gateway.test.ts +475 -0
  140. package/src/internal/gateway.ts +437 -0
  141. package/src/internal/interaction-dispatch.test.ts +148 -0
  142. package/src/internal/interaction-dispatch.ts +130 -0
  143. package/src/internal/interaction-options.ts +98 -0
  144. package/src/internal/interaction-response.ts +53 -0
  145. package/src/internal/interactions.test.ts +253 -0
  146. package/src/internal/interactions.ts +337 -0
  147. package/src/internal/listeners.ts +85 -0
  148. package/src/internal/live-smoke.live.test.ts +26 -0
  149. package/src/internal/modal-fields.ts +95 -0
  150. package/src/internal/payload.ts +69 -0
  151. package/src/internal/rest-body.ts +115 -0
  152. package/src/internal/rest-errors.ts +88 -0
  153. package/src/internal/rest-routes.ts +50 -0
  154. package/src/internal/rest-scheduler.ts +412 -0
  155. package/src/internal/rest.test.ts +437 -0
  156. package/src/internal/rest.ts +213 -0
  157. package/src/internal/schemas.ts +36 -0
  158. package/src/internal/structures.ts +278 -0
  159. package/src/internal/test-builders.test-support.ts +163 -0
  160. package/src/internal/voice.ts +49 -0
  161. package/src/media-detection.ts +28 -0
  162. package/src/mentions.test.ts +111 -0
  163. package/src/mentions.ts +147 -0
  164. package/src/monitor/access-groups.ts +55 -0
  165. package/src/monitor/ack-reactions.ts +70 -0
  166. package/src/monitor/acp-bind-here.integration.test.ts +211 -0
  167. package/src/monitor/agent-components-auth.ts +7 -0
  168. package/src/monitor/agent-components-context.ts +144 -0
  169. package/src/monitor/agent-components-data.ts +224 -0
  170. package/src/monitor/agent-components-dm-auth.ts +221 -0
  171. package/src/monitor/agent-components-guild-auth.ts +322 -0
  172. package/src/monitor/agent-components-helpers.runtime.ts +5 -0
  173. package/src/monitor/agent-components-helpers.ts +34 -0
  174. package/src/monitor/agent-components-reply.ts +10 -0
  175. package/src/monitor/agent-components.deps.runtime.ts +2 -0
  176. package/src/monitor/agent-components.dispatch.ts +366 -0
  177. package/src/monitor/agent-components.handlers.ts +303 -0
  178. package/src/monitor/agent-components.modal.ts +160 -0
  179. package/src/monitor/agent-components.plugin-interactive.ts +187 -0
  180. package/src/monitor/agent-components.runtime.ts +14 -0
  181. package/src/monitor/agent-components.system-controls.ts +211 -0
  182. package/src/monitor/agent-components.ts +70 -0
  183. package/src/monitor/agent-components.types.ts +57 -0
  184. package/src/monitor/agent-components.wildcard-controls.ts +168 -0
  185. package/src/monitor/agent-components.wildcard.test.ts +71 -0
  186. package/src/monitor/allow-list.ts +623 -0
  187. package/src/monitor/auto-presence.test.ts +156 -0
  188. package/src/monitor/auto-presence.ts +356 -0
  189. package/src/monitor/channel-access.ts +70 -0
  190. package/src/monitor/commands.test.ts +24 -0
  191. package/src/monitor/commands.ts +9 -0
  192. package/src/monitor/dm-command-auth.test.ts +197 -0
  193. package/src/monitor/dm-command-auth.ts +158 -0
  194. package/src/monitor/dm-command-decision.test.ts +113 -0
  195. package/src/monitor/dm-command-decision.ts +49 -0
  196. package/src/monitor/exec-approvals.test.ts +226 -0
  197. package/src/monitor/exec-approvals.ts +158 -0
  198. package/src/monitor/format.ts +45 -0
  199. package/src/monitor/gateway-handle.ts +34 -0
  200. package/src/monitor/gateway-metadata.test.ts +29 -0
  201. package/src/monitor/gateway-metadata.ts +298 -0
  202. package/src/monitor/gateway-plugin.test.ts +297 -0
  203. package/src/monitor/gateway-plugin.ts +294 -0
  204. package/src/monitor/gateway-registry.ts +37 -0
  205. package/src/monitor/gateway-supervisor.test.ts +150 -0
  206. package/src/monitor/gateway-supervisor.ts +206 -0
  207. package/src/monitor/inbound-context.test-helpers.ts +37 -0
  208. package/src/monitor/inbound-context.test.ts +106 -0
  209. package/src/monitor/inbound-context.ts +103 -0
  210. package/src/monitor/inbound-dedupe.ts +79 -0
  211. package/src/monitor/inbound-job.test.ts +203 -0
  212. package/src/monitor/inbound-job.ts +118 -0
  213. package/src/monitor/listeners.queue.ts +91 -0
  214. package/src/monitor/listeners.reactions.ts +610 -0
  215. package/src/monitor/listeners.test.ts +200 -0
  216. package/src/monitor/listeners.ts +150 -0
  217. package/src/monitor/message-channel-info.ts +96 -0
  218. package/src/monitor/message-forwarded.ts +107 -0
  219. package/src/monitor/message-handler.batch-gate.test.ts +22 -0
  220. package/src/monitor/message-handler.batch-gate.ts +19 -0
  221. package/src/monitor/message-handler.bot-self-filter.test.ts +68 -0
  222. package/src/monitor/message-handler.context.ts +393 -0
  223. package/src/monitor/message-handler.dm-preflight.ts +123 -0
  224. package/src/monitor/message-handler.draft-preview.ts +246 -0
  225. package/src/monitor/message-handler.hydration.test.ts +80 -0
  226. package/src/monitor/message-handler.hydration.ts +198 -0
  227. package/src/monitor/message-handler.inbound-context.test.ts +59 -0
  228. package/src/monitor/message-handler.module-test-helpers.ts +31 -0
  229. package/src/monitor/message-handler.preflight-channel-access.ts +86 -0
  230. package/src/monitor/message-handler.preflight-channel-context.ts +55 -0
  231. package/src/monitor/message-handler.preflight-context.ts +54 -0
  232. package/src/monitor/message-handler.preflight-helpers.ts +164 -0
  233. package/src/monitor/message-handler.preflight-history.ts +23 -0
  234. package/src/monitor/message-handler.preflight-logging.ts +36 -0
  235. package/src/monitor/message-handler.preflight-pluralkit.ts +27 -0
  236. package/src/monitor/message-handler.preflight-runtime.ts +28 -0
  237. package/src/monitor/message-handler.preflight-thread.ts +49 -0
  238. package/src/monitor/message-handler.preflight.acp-bindings.test.ts +369 -0
  239. package/src/monitor/message-handler.preflight.test-helpers.ts +111 -0
  240. package/src/monitor/message-handler.preflight.test.ts +1544 -0
  241. package/src/monitor/message-handler.preflight.ts +680 -0
  242. package/src/monitor/message-handler.preflight.types.ts +109 -0
  243. package/src/monitor/message-handler.process.test.ts +1301 -0
  244. package/src/monitor/message-handler.process.ts +684 -0
  245. package/src/monitor/message-handler.queue.test.ts +496 -0
  246. package/src/monitor/message-handler.routing-preflight.ts +112 -0
  247. package/src/monitor/message-handler.test-harness.ts +99 -0
  248. package/src/monitor/message-handler.test-helpers.ts +75 -0
  249. package/src/monitor/message-handler.ts +274 -0
  250. package/src/monitor/message-media.ts +507 -0
  251. package/src/monitor/message-run-queue.ts +101 -0
  252. package/src/monitor/message-text.ts +171 -0
  253. package/src/monitor/message-utils.test.ts +1151 -0
  254. package/src/monitor/message-utils.ts +32 -0
  255. package/src/monitor/model-picker-preferences.test.ts +67 -0
  256. package/src/monitor/model-picker-preferences.ts +184 -0
  257. package/src/monitor/model-picker.state.ts +364 -0
  258. package/src/monitor/model-picker.test-utils.ts +26 -0
  259. package/src/monitor/model-picker.test.ts +794 -0
  260. package/src/monitor/model-picker.ts +38 -0
  261. package/src/monitor/model-picker.view.ts +695 -0
  262. package/src/monitor/monitor.agent-components.test.ts +375 -0
  263. package/src/monitor/monitor.test.ts +849 -0
  264. package/src/monitor/monitor.threading-utils.test.ts +598 -0
  265. package/src/monitor/native-command-agent-reply.ts +123 -0
  266. package/src/monitor/native-command-arg-ui.ts +233 -0
  267. package/src/monitor/native-command-auth.ts +308 -0
  268. package/src/monitor/native-command-bypass.ts +13 -0
  269. package/src/monitor/native-command-context.test.ts +98 -0
  270. package/src/monitor/native-command-context.ts +103 -0
  271. package/src/monitor/native-command-dispatch.ts +35 -0
  272. package/src/monitor/native-command-model-picker-apply.ts +177 -0
  273. package/src/monitor/native-command-model-picker-interaction.ts +461 -0
  274. package/src/monitor/native-command-model-picker-ui.ts +368 -0
  275. package/src/monitor/native-command-reply.test.ts +68 -0
  276. package/src/monitor/native-command-reply.ts +183 -0
  277. package/src/monitor/native-command-route.ts +91 -0
  278. package/src/monitor/native-command-status.ts +76 -0
  279. package/src/monitor/native-command-ui.ts +26 -0
  280. package/src/monitor/native-command-ui.types.ts +20 -0
  281. package/src/monitor/native-command.args.ts +45 -0
  282. package/src/monitor/native-command.command-arg.test.ts +99 -0
  283. package/src/monitor/native-command.commands-allowfrom.test.ts +490 -0
  284. package/src/monitor/native-command.model-picker.test.ts +767 -0
  285. package/src/monitor/native-command.options.test.ts +369 -0
  286. package/src/monitor/native-command.options.ts +153 -0
  287. package/src/monitor/native-command.plugin-dispatch.test.ts +879 -0
  288. package/src/monitor/native-command.runtime.ts +50 -0
  289. package/src/monitor/native-command.status-direct.test.ts +272 -0
  290. package/src/monitor/native-command.test-helpers.ts +64 -0
  291. package/src/monitor/native-command.think-autocomplete.test.ts +416 -0
  292. package/src/monitor/native-command.ts +699 -0
  293. package/src/monitor/native-command.types.ts +9 -0
  294. package/src/monitor/native-interaction-channel-context.ts +50 -0
  295. package/src/monitor/preflight-audio.runtime.ts +9 -0
  296. package/src/monitor/preflight-audio.test.ts +157 -0
  297. package/src/monitor/preflight-audio.ts +130 -0
  298. package/src/monitor/presence-cache.ts +61 -0
  299. package/src/monitor/presence.test.ts +44 -0
  300. package/src/monitor/presence.ts +50 -0
  301. package/src/monitor/provider-session.runtime.ts +12 -0
  302. package/src/monitor/provider.acp.ts +89 -0
  303. package/src/monitor/provider.allowlist.test.ts +149 -0
  304. package/src/monitor/provider.allowlist.ts +394 -0
  305. package/src/monitor/provider.cleanup.ts +41 -0
  306. package/src/monitor/provider.commands.ts +129 -0
  307. package/src/monitor/provider.config-log.ts +45 -0
  308. package/src/monitor/provider.deploy-errors.ts +362 -0
  309. package/src/monitor/provider.deploy.ts +221 -0
  310. package/src/monitor/provider.interactions.ts +160 -0
  311. package/src/monitor/provider.lifecycle.test.ts +658 -0
  312. package/src/monitor/provider.lifecycle.ts +545 -0
  313. package/src/monitor/provider.proxy.test.ts +745 -0
  314. package/src/monitor/provider.rest-proxy.test.ts +121 -0
  315. package/src/monitor/provider.runtime.ts +1 -0
  316. package/src/monitor/provider.skill-dedupe.test.ts +42 -0
  317. package/src/monitor/provider.startup-log.ts +32 -0
  318. package/src/monitor/provider.startup.test.ts +426 -0
  319. package/src/monitor/provider.startup.ts +323 -0
  320. package/src/monitor/provider.test.ts +1111 -0
  321. package/src/monitor/provider.ts +713 -0
  322. package/src/monitor/reply-context.ts +64 -0
  323. package/src/monitor/reply-delivery.test.ts +244 -0
  324. package/src/monitor/reply-delivery.ts +203 -0
  325. package/src/monitor/rest-fetch.ts +43 -0
  326. package/src/monitor/route-resolution.test.ts +204 -0
  327. package/src/monitor/route-resolution.ts +140 -0
  328. package/src/monitor/sender-identity.ts +81 -0
  329. package/src/monitor/startup-status.test.ts +30 -0
  330. package/src/monitor/startup-status.ts +10 -0
  331. package/src/monitor/status.ts +22 -0
  332. package/src/monitor/system-events.ts +55 -0
  333. package/src/monitor/thread-bindings.config.ts +35 -0
  334. package/src/monitor/thread-bindings.discord-api.test.ts +229 -0
  335. package/src/monitor/thread-bindings.discord-api.ts +318 -0
  336. package/src/monitor/thread-bindings.lifecycle.test.ts +1871 -0
  337. package/src/monitor/thread-bindings.lifecycle.ts +354 -0
  338. package/src/monitor/thread-bindings.manager.ts +553 -0
  339. package/src/monitor/thread-bindings.messages.ts +6 -0
  340. package/src/monitor/thread-bindings.persona.test.ts +34 -0
  341. package/src/monitor/thread-bindings.persona.ts +25 -0
  342. package/src/monitor/thread-bindings.session-adapter.ts +229 -0
  343. package/src/monitor/thread-bindings.session-shared.ts +59 -0
  344. package/src/monitor/thread-bindings.session-updates.ts +35 -0
  345. package/src/monitor/thread-bindings.shared-state.test.ts +36 -0
  346. package/src/monitor/thread-bindings.state.ts +540 -0
  347. package/src/monitor/thread-bindings.ts +48 -0
  348. package/src/monitor/thread-bindings.types.ts +83 -0
  349. package/src/monitor/thread-channel-context.ts +112 -0
  350. package/src/monitor/thread-session-close.test.ts +180 -0
  351. package/src/monitor/thread-session-close.ts +63 -0
  352. package/src/monitor/thread-title.generate.test.ts +197 -0
  353. package/src/monitor/thread-title.test.ts +31 -0
  354. package/src/monitor/thread-title.ts +181 -0
  355. package/src/monitor/threading.auto-thread.test.ts +327 -0
  356. package/src/monitor/threading.auto-thread.ts +287 -0
  357. package/src/monitor/threading.cache.ts +45 -0
  358. package/src/monitor/threading.parent-info.test.ts +156 -0
  359. package/src/monitor/threading.starter.test.ts +260 -0
  360. package/src/monitor/threading.starter.ts +287 -0
  361. package/src/monitor/threading.ts +20 -0
  362. package/src/monitor/threading.types.ts +102 -0
  363. package/src/monitor/timeouts.ts +84 -0
  364. package/src/monitor/typing.test.ts +42 -0
  365. package/src/monitor/typing.ts +17 -0
  366. package/src/monitor.gateway.test.ts +187 -0
  367. package/src/monitor.gateway.ts +75 -0
  368. package/src/monitor.test.ts +1397 -0
  369. package/src/monitor.ts +28 -0
  370. package/src/normalize.test.ts +56 -0
  371. package/src/normalize.ts +86 -0
  372. package/src/outbound-adapter.interactive-order.test.ts +64 -0
  373. package/src/outbound-adapter.test-harness.ts +207 -0
  374. package/src/outbound-adapter.test.ts +696 -0
  375. package/src/outbound-adapter.ts +291 -0
  376. package/src/outbound-approval.ts +29 -0
  377. package/src/outbound-components.ts +81 -0
  378. package/src/outbound-payload.contract.test.ts +38 -0
  379. package/src/outbound-payload.ts +134 -0
  380. package/src/outbound-send-context.ts +92 -0
  381. package/src/outbound-session-route.test.ts +34 -0
  382. package/src/outbound-session-route.ts +72 -0
  383. package/src/pluralkit.test.ts +67 -0
  384. package/src/pluralkit.ts +58 -0
  385. package/src/preview-streaming.ts +32 -0
  386. package/src/probe.intents.test.ts +94 -0
  387. package/src/probe.parse-token.test.ts +43 -0
  388. package/src/probe.runtime.ts +1 -0
  389. package/src/probe.ts +237 -0
  390. package/src/proxy-fetch.ts +92 -0
  391. package/src/proxy-request-client.test.ts +78 -0
  392. package/src/proxy-request-client.ts +54 -0
  393. package/src/recipient-resolution.ts +39 -0
  394. package/src/resolve-allowlist-common.test.ts +36 -0
  395. package/src/resolve-allowlist-common.ts +39 -0
  396. package/src/resolve-channels.test.ts +340 -0
  397. package/src/resolve-channels.ts +369 -0
  398. package/src/resolve-users.test.ts +222 -0
  399. package/src/resolve-users.ts +184 -0
  400. package/src/retry.test.ts +83 -0
  401. package/src/retry.ts +98 -0
  402. package/src/runtime-api.ts +64 -0
  403. package/src/runtime.ts +22 -5
  404. package/src/secret-config-contract.ts +140 -0
  405. package/src/security-audit.runtime.ts +1 -0
  406. package/src/security-audit.test.ts +246 -0
  407. package/src/security-audit.ts +208 -0
  408. package/src/security-contract.ts +47 -0
  409. package/src/security-doctor.test.ts +25 -0
  410. package/src/security-doctor.ts +20 -0
  411. package/src/security.ts +60 -0
  412. package/src/send-target-parsing.ts +14 -0
  413. package/src/send.channels.ts +139 -0
  414. package/src/send.components.test.ts +275 -0
  415. package/src/send.components.ts +383 -0
  416. package/src/send.creates-thread.test.ts +643 -0
  417. package/src/send.emojis-stickers.ts +57 -0
  418. package/src/send.guild.ts +170 -0
  419. package/src/send.message-request.ts +97 -0
  420. package/src/send.messages.test.ts +53 -0
  421. package/src/send.messages.ts +225 -0
  422. package/src/send.outbound.ts +414 -0
  423. package/src/send.permissions.authz.test.ts +188 -0
  424. package/src/send.permissions.ts +283 -0
  425. package/src/send.reactions.ts +155 -0
  426. package/src/send.sends-basic-channel-messages.test.ts +919 -0
  427. package/src/send.shared.ts +445 -0
  428. package/src/send.test-harness.ts +56 -0
  429. package/src/send.ts +82 -0
  430. package/src/send.types.ts +188 -0
  431. package/src/send.typing.test.ts +41 -0
  432. package/src/send.typing.ts +9 -0
  433. package/src/send.voice.ts +134 -0
  434. package/src/send.webhook-activity.test.ts +105 -0
  435. package/src/send.webhook.proxy.test.ts +191 -0
  436. package/src/send.webhook.ts +133 -0
  437. package/src/session-contract.ts +3 -0
  438. package/src/session-key-normalization.test.ts +44 -0
  439. package/src/session-key-normalization.ts +47 -0
  440. package/src/setup-account-state.test.ts +91 -0
  441. package/src/setup-account-state.ts +144 -0
  442. package/src/setup-adapter.ts +12 -0
  443. package/src/setup-core.ts +180 -0
  444. package/src/setup-runtime-helpers.ts +10 -0
  445. package/src/setup-surface.test.ts +96 -0
  446. package/src/setup-surface.ts +129 -0
  447. package/src/shared-interactive.test.ts +153 -0
  448. package/src/shared-interactive.ts +124 -0
  449. package/src/shared.test.ts +159 -0
  450. package/src/shared.ts +190 -0
  451. package/src/status-issues.test.ts +70 -0
  452. package/src/status-issues.ts +169 -0
  453. package/src/subagent-hooks.test.ts +40 -44
  454. package/src/subagent-hooks.ts +185 -122
  455. package/src/target-parsing.ts +53 -0
  456. package/src/target-resolver.ts +129 -0
  457. package/src/targets.test.ts +367 -0
  458. package/src/targets.ts +12 -0
  459. package/src/test-http-helpers.ts +10 -0
  460. package/src/test-support/component-runtime.ts +190 -0
  461. package/src/test-support/config.ts +7 -0
  462. package/src/test-support/configured-binding-runtime.ts +29 -0
  463. package/src/test-support/partial-channel.ts +26 -0
  464. package/src/test-support/provider.test-support.ts +545 -0
  465. package/src/token.test.ts +107 -0
  466. package/src/token.ts +60 -0
  467. package/src/ui-colors.ts +27 -0
  468. package/src/ui.ts +20 -0
  469. package/src/voice/access.test.ts +217 -0
  470. package/src/voice/access.ts +124 -0
  471. package/src/voice/audio.ts +173 -0
  472. package/src/voice/capture-state.test.ts +48 -0
  473. package/src/voice/capture-state.ts +120 -0
  474. package/src/voice/command.test.ts +164 -0
  475. package/src/voice/command.ts +283 -0
  476. package/src/voice/config.ts +8 -0
  477. package/src/voice/manager.e2e.test.ts +928 -0
  478. package/src/voice/manager.ready-listener.test.ts +37 -0
  479. package/src/voice/manager.runtime.ts +11 -0
  480. package/src/voice/manager.ts +691 -0
  481. package/src/voice/prompt.test.ts +16 -0
  482. package/src/voice/prompt.ts +17 -0
  483. package/src/voice/receive-recovery.test.ts +79 -0
  484. package/src/voice/receive-recovery.ts +159 -0
  485. package/src/voice/sanitize.test.ts +34 -0
  486. package/src/voice/sanitize.ts +32 -0
  487. package/src/voice/sdk-runtime.ts +14 -0
  488. package/src/voice/segment.ts +156 -0
  489. package/src/voice/session.ts +50 -0
  490. package/src/voice/speaker-context.ts +127 -0
  491. package/src/voice/tts.ts +125 -0
  492. package/src/voice-message.test.ts +234 -0
  493. package/src/voice-message.ts +444 -0
  494. package/subagent-hooks-api.ts +27 -0
  495. package/test-api.ts +4 -0
  496. package/thread-binding-api.ts +1 -0
  497. package/timeouts.ts +6 -0
  498. package/tsconfig.json +16 -0
@@ -0,0 +1,1151 @@
1
+ import {
2
+ ComponentType,
3
+ MessageFlags,
4
+ MessageReferenceType,
5
+ StickerFormatType,
6
+ } from "discord-api-types/v10";
7
+ import { beforeAll, beforeEach, describe, expect, it, vi } from "vitest";
8
+ import { ChannelType, type Client, type Message } from "../internal/discord.js";
9
+
10
+ const fetchRemoteMedia = vi.fn();
11
+ const saveMediaBuffer = vi.fn();
12
+
13
+ vi.mock("openclaw/plugin-sdk/media-runtime", async () => {
14
+ const actual = await vi.importActual<typeof import("openclaw/plugin-sdk/media-runtime")>(
15
+ "openclaw/plugin-sdk/media-runtime",
16
+ );
17
+ return {
18
+ ...actual,
19
+ fetchRemoteMedia: (...args: unknown[]) => fetchRemoteMedia(...args),
20
+ saveMediaBuffer: (...args: unknown[]) => saveMediaBuffer(...args),
21
+ };
22
+ });
23
+
24
+ vi.mock("openclaw/plugin-sdk/runtime-env", async () => {
25
+ const actual = await vi.importActual<typeof import("openclaw/plugin-sdk/runtime-env")>(
26
+ "openclaw/plugin-sdk/runtime-env",
27
+ );
28
+ return {
29
+ ...actual,
30
+ logVerbose: () => {},
31
+ };
32
+ });
33
+
34
+ let __resetDiscordChannelInfoCacheForTest: typeof import("./message-utils.js").__resetDiscordChannelInfoCacheForTest;
35
+ let resolveDiscordChannelInfo: typeof import("./message-utils.js").resolveDiscordChannelInfo;
36
+ let resolveDiscordMessageChannelId: typeof import("./message-utils.js").resolveDiscordMessageChannelId;
37
+ let resolveDiscordMessageText: typeof import("./message-utils.js").resolveDiscordMessageText;
38
+ let resolveForwardedMediaList: typeof import("./message-utils.js").resolveForwardedMediaList;
39
+ let resolveMediaList: typeof import("./message-utils.js").resolveMediaList;
40
+
41
+ beforeAll(async () => {
42
+ ({
43
+ __resetDiscordChannelInfoCacheForTest,
44
+ resolveDiscordChannelInfo,
45
+ resolveDiscordMessageChannelId,
46
+ resolveDiscordMessageText,
47
+ resolveForwardedMediaList,
48
+ resolveMediaList,
49
+ } = await import("./message-utils.js"));
50
+ });
51
+
52
+ function asMessage(payload: Record<string, unknown>): Message {
53
+ return payload as unknown as Message;
54
+ }
55
+
56
+ const DISCORD_CDN_HOSTNAMES = [
57
+ "cdn.discordapp.com",
58
+ "media.discordapp.net",
59
+ "*.discordapp.com",
60
+ "*.discordapp.net",
61
+ ];
62
+
63
+ function expectDiscordCdnSsrFPolicy(policy: unknown) {
64
+ expect(policy).toEqual(
65
+ expect.objectContaining({
66
+ allowRfc2544BenchmarkRange: true,
67
+ hostnameAllowlist: expect.arrayContaining(DISCORD_CDN_HOSTNAMES),
68
+ }),
69
+ );
70
+ }
71
+
72
+ function expectSinglePngDownload(params: {
73
+ result: unknown;
74
+ expectedUrl: string;
75
+ filePathHint: string;
76
+ expectedPath: string;
77
+ placeholder: "<media:image>" | "<media:sticker>";
78
+ }) {
79
+ expect(fetchRemoteMedia).toHaveBeenCalledTimes(1);
80
+ const call = fetchRemoteMedia.mock.calls[0]?.[0] as {
81
+ url?: string;
82
+ filePathHint?: string;
83
+ maxBytes?: number;
84
+ fetchImpl?: unknown;
85
+ readIdleTimeoutMs?: number;
86
+ requestInit?: { signal?: AbortSignal };
87
+ ssrfPolicy?: unknown;
88
+ };
89
+ expect(call).toMatchObject({
90
+ url: params.expectedUrl,
91
+ filePathHint: params.filePathHint,
92
+ maxBytes: 512,
93
+ fetchImpl: undefined,
94
+ });
95
+ expectDiscordCdnSsrFPolicy(call.ssrfPolicy);
96
+ expect(saveMediaBuffer).toHaveBeenCalledTimes(1);
97
+ expect(saveMediaBuffer).toHaveBeenCalledWith(expect.any(Buffer), "image/png", "inbound", 512);
98
+ expect(params.result).toEqual([
99
+ {
100
+ path: params.expectedPath,
101
+ contentType: "image/png",
102
+ placeholder: params.placeholder,
103
+ },
104
+ ]);
105
+ }
106
+
107
+ function expectAttachmentImageFallback(params: { result: unknown; attachment: { url: string } }) {
108
+ expect(saveMediaBuffer).not.toHaveBeenCalled();
109
+ expect(params.result).toEqual([
110
+ {
111
+ path: params.attachment.url,
112
+ contentType: "image/png",
113
+ placeholder: "<media:image>",
114
+ },
115
+ ]);
116
+ }
117
+
118
+ function asForwardedSnapshotMessage(params: {
119
+ content: string;
120
+ embeds: Array<{ title?: string; description?: string }>;
121
+ }) {
122
+ return asMessage({
123
+ content: "",
124
+ rawData: {
125
+ message_snapshots: [
126
+ {
127
+ message: {
128
+ content: params.content,
129
+ embeds: params.embeds,
130
+ attachments: [],
131
+ author: {
132
+ id: "u2",
133
+ username: "Bob",
134
+ discriminator: "0",
135
+ },
136
+ },
137
+ },
138
+ ],
139
+ },
140
+ });
141
+ }
142
+
143
+ function asReferencedForwardMessage(params: {
144
+ content?: string;
145
+ components?: Array<Record<string, unknown>>;
146
+ embeds?: Array<{ title?: string; description?: string }>;
147
+ attachments?: Array<Record<string, unknown>>;
148
+ messageReferenceType?: MessageReferenceType;
149
+ }) {
150
+ return asMessage({
151
+ content: "",
152
+ messageReference: {
153
+ type: params.messageReferenceType ?? MessageReferenceType.Forward,
154
+ message_id: "m0",
155
+ channel_id: "c1",
156
+ },
157
+ referencedMessage: asMessage({
158
+ id: "m0",
159
+ channelId: "c1",
160
+ content: params.content ?? "",
161
+ components: params.components ?? [],
162
+ attachments: params.attachments ?? [],
163
+ embeds: params.embeds ?? [],
164
+ flags: params.components ? MessageFlags.IsComponentsV2 : 0,
165
+ stickers: [],
166
+ author: {
167
+ id: "u2",
168
+ username: "Bob",
169
+ discriminator: "0",
170
+ },
171
+ }),
172
+ });
173
+ }
174
+
175
+ describe("resolveDiscordMessageChannelId", () => {
176
+ it.each([
177
+ {
178
+ name: "uses message.channelId when present",
179
+ params: { message: asMessage({ channelId: " 123 " }) },
180
+ expected: "123",
181
+ },
182
+ {
183
+ name: "falls back to message.channel_id",
184
+ params: { message: asMessage({ channel_id: " 234 " }) },
185
+ expected: "234",
186
+ },
187
+ {
188
+ name: "falls back to message.rawData.channel_id",
189
+ params: { message: asMessage({ rawData: { channel_id: "456" } }) },
190
+ expected: "456",
191
+ },
192
+ {
193
+ name: "falls back to eventChannelId and coerces numeric values",
194
+ params: { message: asMessage({}), eventChannelId: 789 },
195
+ expected: "789",
196
+ },
197
+ ] as const)("$name", ({ params, expected }) => {
198
+ expect(resolveDiscordMessageChannelId(params)).toBe(expected);
199
+ });
200
+ });
201
+
202
+ describe("resolveForwardedMediaList", () => {
203
+ beforeEach(() => {
204
+ fetchRemoteMedia.mockClear();
205
+ saveMediaBuffer.mockClear();
206
+ });
207
+
208
+ it("downloads forwarded attachments", async () => {
209
+ const attachment = {
210
+ id: "att-1",
211
+ url: "https://cdn.discordapp.com/attachments/1/image.png",
212
+ filename: "image.png",
213
+ content_type: "image/png",
214
+ };
215
+ fetchRemoteMedia.mockResolvedValueOnce({
216
+ buffer: Buffer.from("image"),
217
+ contentType: "image/png",
218
+ });
219
+ saveMediaBuffer.mockResolvedValueOnce({
220
+ path: "/tmp/image.png",
221
+ contentType: "image/png",
222
+ });
223
+
224
+ const result = await resolveForwardedMediaList(
225
+ asMessage({
226
+ rawData: {
227
+ message_snapshots: [{ message: { attachments: [attachment] } }],
228
+ },
229
+ }),
230
+ 512,
231
+ );
232
+
233
+ expectSinglePngDownload({
234
+ result,
235
+ expectedUrl: attachment.url,
236
+ filePathHint: attachment.filename,
237
+ expectedPath: "/tmp/image.png",
238
+ placeholder: "<media:image>",
239
+ });
240
+ });
241
+
242
+ it("forwards fetchImpl to forwarded attachment downloads", async () => {
243
+ const proxyFetch = vi.fn() as unknown as typeof fetch;
244
+ const attachment = {
245
+ id: "att-proxy",
246
+ url: "https://cdn.discordapp.com/attachments/1/proxy.png",
247
+ filename: "proxy.png",
248
+ content_type: "image/png",
249
+ };
250
+ fetchRemoteMedia.mockResolvedValueOnce({
251
+ buffer: Buffer.from("image"),
252
+ contentType: "image/png",
253
+ });
254
+ saveMediaBuffer.mockResolvedValueOnce({
255
+ path: "/tmp/proxy.png",
256
+ contentType: "image/png",
257
+ });
258
+
259
+ await resolveForwardedMediaList(
260
+ asMessage({
261
+ rawData: {
262
+ message_snapshots: [{ message: { attachments: [attachment] } }],
263
+ },
264
+ }),
265
+ 512,
266
+ { fetchImpl: proxyFetch },
267
+ );
268
+
269
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
270
+ expect.objectContaining({ fetchImpl: proxyFetch }),
271
+ );
272
+ });
273
+
274
+ it("keeps forwarded attachment metadata when download fails", async () => {
275
+ const attachment = {
276
+ id: "att-fallback",
277
+ url: "https://cdn.discordapp.com/attachments/1/fallback.png",
278
+ filename: "fallback.png",
279
+ content_type: "image/png",
280
+ };
281
+ fetchRemoteMedia.mockRejectedValueOnce(new Error("blocked by ssrf guard"));
282
+
283
+ const result = await resolveForwardedMediaList(
284
+ asMessage({
285
+ rawData: {
286
+ message_snapshots: [{ message: { attachments: [attachment] } }],
287
+ },
288
+ }),
289
+ 512,
290
+ );
291
+
292
+ expectAttachmentImageFallback({ result, attachment });
293
+ });
294
+
295
+ it("downloads forwarded stickers", async () => {
296
+ const sticker = {
297
+ id: "sticker-1",
298
+ name: "wave",
299
+ format_type: StickerFormatType.PNG,
300
+ };
301
+ fetchRemoteMedia.mockResolvedValueOnce({
302
+ buffer: Buffer.from("sticker"),
303
+ contentType: "image/png",
304
+ });
305
+ saveMediaBuffer.mockResolvedValueOnce({
306
+ path: "/tmp/sticker.png",
307
+ contentType: "image/png",
308
+ });
309
+
310
+ const result = await resolveForwardedMediaList(
311
+ asMessage({
312
+ rawData: {
313
+ message_snapshots: [{ message: { sticker_items: [sticker] } }],
314
+ },
315
+ }),
316
+ 512,
317
+ );
318
+
319
+ expectSinglePngDownload({
320
+ result,
321
+ expectedUrl: "https://media.discordapp.net/stickers/sticker-1.png",
322
+ filePathHint: "wave.png",
323
+ expectedPath: "/tmp/sticker.png",
324
+ placeholder: "<media:sticker>",
325
+ });
326
+ });
327
+
328
+ it("returns empty when no snapshots are present", async () => {
329
+ const result = await resolveForwardedMediaList(asMessage({}), 512);
330
+
331
+ expect(result).toEqual([]);
332
+ expect(fetchRemoteMedia).not.toHaveBeenCalled();
333
+ });
334
+
335
+ it("downloads forwarded referenced attachments when snapshots are absent", async () => {
336
+ const attachment = {
337
+ id: "att-ref-1",
338
+ url: "https://cdn.discordapp.com/attachments/1/ref-image.png",
339
+ filename: "ref-image.png",
340
+ content_type: "image/png",
341
+ };
342
+ fetchRemoteMedia.mockResolvedValueOnce({
343
+ buffer: Buffer.from("image"),
344
+ contentType: "image/png",
345
+ });
346
+ saveMediaBuffer.mockResolvedValueOnce({
347
+ path: "/tmp/ref-image.png",
348
+ contentType: "image/png",
349
+ });
350
+
351
+ const result = await resolveForwardedMediaList(
352
+ asReferencedForwardMessage({
353
+ attachments: [attachment],
354
+ }),
355
+ 512,
356
+ );
357
+
358
+ expectSinglePngDownload({
359
+ result,
360
+ expectedUrl: attachment.url,
361
+ filePathHint: attachment.filename,
362
+ expectedPath: "/tmp/ref-image.png",
363
+ placeholder: "<media:image>",
364
+ });
365
+ });
366
+
367
+ it("skips snapshots without attachments", async () => {
368
+ const result = await resolveForwardedMediaList(
369
+ asMessage({
370
+ rawData: {
371
+ message_snapshots: [{ message: { content: "hello" } }],
372
+ },
373
+ }),
374
+ 512,
375
+ );
376
+
377
+ expect(result).toEqual([]);
378
+ expect(fetchRemoteMedia).not.toHaveBeenCalled();
379
+ });
380
+
381
+ it("passes readIdleTimeoutMs to forwarded attachment downloads", async () => {
382
+ const attachment = {
383
+ id: "att-timeout-forwarded",
384
+ url: "https://cdn.discordapp.com/attachments/1/forwarded-timeout.png",
385
+ filename: "forwarded-timeout.png",
386
+ content_type: "image/png",
387
+ };
388
+ fetchRemoteMedia.mockResolvedValueOnce({
389
+ buffer: Buffer.from("image"),
390
+ contentType: "image/png",
391
+ });
392
+ saveMediaBuffer.mockResolvedValueOnce({
393
+ path: "/tmp/forwarded-timeout.png",
394
+ contentType: "image/png",
395
+ });
396
+
397
+ await resolveForwardedMediaList(
398
+ asMessage({
399
+ rawData: {
400
+ message_snapshots: [{ message: { attachments: [attachment] } }],
401
+ },
402
+ }),
403
+ 512,
404
+ { readIdleTimeoutMs: 60_000 },
405
+ );
406
+
407
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
408
+ expect.objectContaining({ readIdleTimeoutMs: 60_000 }),
409
+ );
410
+ });
411
+
412
+ it("passes readIdleTimeoutMs to forwarded sticker downloads", async () => {
413
+ const sticker = {
414
+ id: "sticker-timeout-forwarded",
415
+ name: "timeout-forwarded",
416
+ format_type: StickerFormatType.PNG,
417
+ };
418
+ fetchRemoteMedia.mockResolvedValueOnce({
419
+ buffer: Buffer.from("sticker"),
420
+ contentType: "image/png",
421
+ });
422
+ saveMediaBuffer.mockResolvedValueOnce({
423
+ path: "/tmp/forwarded-sticker-timeout.png",
424
+ contentType: "image/png",
425
+ });
426
+
427
+ await resolveForwardedMediaList(
428
+ asMessage({
429
+ rawData: {
430
+ message_snapshots: [{ message: { sticker_items: [sticker] } }],
431
+ },
432
+ }),
433
+ 512,
434
+ { readIdleTimeoutMs: 60_000 },
435
+ );
436
+
437
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
438
+ expect.objectContaining({ readIdleTimeoutMs: 60_000 }),
439
+ );
440
+ });
441
+ });
442
+
443
+ describe("resolveMediaList", () => {
444
+ beforeEach(() => {
445
+ fetchRemoteMedia.mockClear();
446
+ saveMediaBuffer.mockClear();
447
+ });
448
+
449
+ it("downloads stickers", async () => {
450
+ const sticker = {
451
+ id: "sticker-2",
452
+ name: "hello",
453
+ format_type: StickerFormatType.PNG,
454
+ };
455
+ fetchRemoteMedia.mockResolvedValueOnce({
456
+ buffer: Buffer.from("sticker"),
457
+ contentType: "image/png",
458
+ });
459
+ saveMediaBuffer.mockResolvedValueOnce({
460
+ path: "/tmp/sticker-2.png",
461
+ contentType: "image/png",
462
+ });
463
+
464
+ const result = await resolveMediaList(
465
+ asMessage({
466
+ stickers: [sticker],
467
+ }),
468
+ 512,
469
+ );
470
+
471
+ expectSinglePngDownload({
472
+ result,
473
+ expectedUrl: "https://media.discordapp.net/stickers/sticker-2.png",
474
+ filePathHint: "hello.png",
475
+ expectedPath: "/tmp/sticker-2.png",
476
+ placeholder: "<media:sticker>",
477
+ });
478
+ });
479
+
480
+ it("forwards fetchImpl to sticker downloads", async () => {
481
+ const proxyFetch = vi.fn() as unknown as typeof fetch;
482
+ const sticker = {
483
+ id: "sticker-proxy",
484
+ name: "proxy-sticker",
485
+ format_type: StickerFormatType.PNG,
486
+ };
487
+ fetchRemoteMedia.mockResolvedValueOnce({
488
+ buffer: Buffer.from("sticker"),
489
+ contentType: "image/png",
490
+ });
491
+ saveMediaBuffer.mockResolvedValueOnce({
492
+ path: "/tmp/sticker-proxy.png",
493
+ contentType: "image/png",
494
+ });
495
+
496
+ await resolveMediaList(
497
+ asMessage({
498
+ stickers: [sticker],
499
+ }),
500
+ 512,
501
+ { fetchImpl: proxyFetch },
502
+ );
503
+
504
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
505
+ expect.objectContaining({ fetchImpl: proxyFetch }),
506
+ );
507
+ });
508
+
509
+ it("keeps attachment metadata when download fails", async () => {
510
+ const attachment = {
511
+ id: "att-main-fallback",
512
+ url: "https://cdn.discordapp.com/attachments/1/main-fallback.png",
513
+ filename: "main-fallback.png",
514
+ content_type: "image/png",
515
+ };
516
+ fetchRemoteMedia.mockRejectedValueOnce(new Error("blocked by ssrf guard"));
517
+
518
+ const result = await resolveMediaList(
519
+ asMessage({
520
+ attachments: [attachment],
521
+ }),
522
+ 512,
523
+ );
524
+
525
+ expectAttachmentImageFallback({ result, attachment });
526
+ });
527
+
528
+ it("skips attachments without a usable URL", async () => {
529
+ const result = await resolveMediaList(
530
+ asMessage({
531
+ attachments: [
532
+ {
533
+ id: "att-missing-url",
534
+ filename: "voice.ogg",
535
+ content_type: "audio/ogg",
536
+ },
537
+ ],
538
+ }),
539
+ 512,
540
+ );
541
+
542
+ expect(fetchRemoteMedia).not.toHaveBeenCalled();
543
+ expect(saveMediaBuffer).not.toHaveBeenCalled();
544
+ expect(result).toEqual([]);
545
+ });
546
+
547
+ it("classifies audio attachments by filename when content type is missing", async () => {
548
+ const attachment = {
549
+ id: "att-audio-fallback",
550
+ url: "https://cdn.discordapp.com/attachments/1/voice.ogg",
551
+ filename: "voice.ogg",
552
+ };
553
+ fetchRemoteMedia.mockRejectedValueOnce(new Error("blocked by ssrf guard"));
554
+
555
+ const result = await resolveMediaList(
556
+ asMessage({
557
+ attachments: [attachment],
558
+ }),
559
+ 512,
560
+ );
561
+
562
+ expect(result).toEqual([
563
+ {
564
+ path: attachment.url,
565
+ contentType: undefined,
566
+ placeholder: "<media:audio>",
567
+ },
568
+ ]);
569
+ });
570
+
571
+ it("classifies Discord voice attachments by waveform metadata", async () => {
572
+ const attachment = {
573
+ id: "att-voice-metadata",
574
+ url: "https://cdn.discordapp.com/attachments/1/voice",
575
+ filename: "voice",
576
+ duration_secs: 1.5,
577
+ waveform: "AAAA",
578
+ };
579
+ fetchRemoteMedia.mockRejectedValueOnce(new Error("blocked by ssrf guard"));
580
+
581
+ const result = await resolveMediaList(
582
+ asMessage({
583
+ attachments: [attachment],
584
+ }),
585
+ 512,
586
+ );
587
+
588
+ expect(result).toEqual([
589
+ {
590
+ path: attachment.url,
591
+ contentType: undefined,
592
+ placeholder: "<media:audio>",
593
+ },
594
+ ]);
595
+ });
596
+
597
+ it("falls back to URL when saveMediaBuffer fails", async () => {
598
+ const attachment = {
599
+ id: "att-save-fail",
600
+ url: "https://cdn.discordapp.com/attachments/1/photo.png",
601
+ filename: "photo.png",
602
+ content_type: "image/png",
603
+ };
604
+ fetchRemoteMedia.mockResolvedValueOnce({
605
+ buffer: Buffer.from("image"),
606
+ contentType: "image/png",
607
+ });
608
+ saveMediaBuffer.mockRejectedValueOnce(new Error("disk full"));
609
+
610
+ const result = await resolveMediaList(
611
+ asMessage({
612
+ attachments: [attachment],
613
+ }),
614
+ 512,
615
+ );
616
+
617
+ expect(fetchRemoteMedia).toHaveBeenCalledTimes(1);
618
+ expect(saveMediaBuffer).toHaveBeenCalledTimes(1);
619
+ expect(result).toEqual([
620
+ {
621
+ path: attachment.url,
622
+ contentType: "image/png",
623
+ placeholder: "<media:image>",
624
+ },
625
+ ]);
626
+ });
627
+
628
+ it("preserves downloaded attachments alongside failed ones", async () => {
629
+ const goodAttachment = {
630
+ id: "att-good",
631
+ url: "https://cdn.discordapp.com/attachments/1/good.png",
632
+ filename: "good.png",
633
+ content_type: "image/png",
634
+ };
635
+ const badAttachment = {
636
+ id: "att-bad",
637
+ url: "https://cdn.discordapp.com/attachments/1/bad.pdf",
638
+ filename: "bad.pdf",
639
+ content_type: "application/pdf",
640
+ };
641
+
642
+ fetchRemoteMedia
643
+ .mockResolvedValueOnce({
644
+ buffer: Buffer.from("image"),
645
+ contentType: "image/png",
646
+ })
647
+ .mockRejectedValueOnce(new Error("network timeout"));
648
+ saveMediaBuffer.mockResolvedValueOnce({
649
+ path: "/tmp/good.png",
650
+ contentType: "image/png",
651
+ });
652
+
653
+ const result = await resolveMediaList(
654
+ asMessage({
655
+ attachments: [goodAttachment, badAttachment],
656
+ }),
657
+ 512,
658
+ );
659
+
660
+ expect(result).toEqual([
661
+ {
662
+ path: "/tmp/good.png",
663
+ contentType: "image/png",
664
+ placeholder: "<media:image>",
665
+ },
666
+ {
667
+ path: badAttachment.url,
668
+ contentType: "application/pdf",
669
+ placeholder: "<media:document>",
670
+ },
671
+ ]);
672
+ });
673
+
674
+ it("keeps sticker metadata when sticker download fails", async () => {
675
+ const sticker = {
676
+ id: "sticker-fallback",
677
+ name: "fallback",
678
+ format_type: StickerFormatType.PNG,
679
+ };
680
+ fetchRemoteMedia.mockRejectedValueOnce(new Error("blocked by ssrf guard"));
681
+
682
+ const result = await resolveMediaList(
683
+ asMessage({
684
+ stickers: [sticker],
685
+ }),
686
+ 512,
687
+ );
688
+
689
+ expect(saveMediaBuffer).not.toHaveBeenCalled();
690
+ expect(result).toEqual([
691
+ {
692
+ path: "https://media.discordapp.net/stickers/sticker-fallback.png",
693
+ contentType: "image/png",
694
+ placeholder: "<media:sticker>",
695
+ },
696
+ ]);
697
+ });
698
+
699
+ it("passes readIdleTimeoutMs to fetchRemoteMedia for attachments", async () => {
700
+ const attachment = {
701
+ id: "att-timeout",
702
+ url: "https://cdn.discordapp.com/attachments/1/timeout.png",
703
+ filename: "timeout.png",
704
+ content_type: "image/png",
705
+ };
706
+ fetchRemoteMedia.mockResolvedValueOnce({
707
+ buffer: Buffer.from("image"),
708
+ contentType: "image/png",
709
+ });
710
+ saveMediaBuffer.mockResolvedValueOnce({
711
+ path: "/tmp/timeout.png",
712
+ contentType: "image/png",
713
+ });
714
+
715
+ await resolveMediaList(
716
+ asMessage({
717
+ attachments: [attachment],
718
+ }),
719
+ 512,
720
+ { readIdleTimeoutMs: 60_000 },
721
+ );
722
+
723
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
724
+ expect.objectContaining({ readIdleTimeoutMs: 60_000 }),
725
+ );
726
+ });
727
+
728
+ it("passes readIdleTimeoutMs to fetchRemoteMedia for stickers", async () => {
729
+ const sticker = {
730
+ id: "sticker-timeout",
731
+ name: "timeout",
732
+ format_type: StickerFormatType.PNG,
733
+ };
734
+ fetchRemoteMedia.mockResolvedValueOnce({
735
+ buffer: Buffer.from("sticker"),
736
+ contentType: "image/png",
737
+ });
738
+ saveMediaBuffer.mockResolvedValueOnce({
739
+ path: "/tmp/sticker-timeout.png",
740
+ contentType: "image/png",
741
+ });
742
+
743
+ await resolveMediaList(
744
+ asMessage({
745
+ stickers: [sticker],
746
+ }),
747
+ 512,
748
+ { readIdleTimeoutMs: 60_000 },
749
+ );
750
+
751
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
752
+ expect.objectContaining({ readIdleTimeoutMs: 60_000 }),
753
+ );
754
+ });
755
+
756
+ it("times out slow attachment downloads and returns fallback", async () => {
757
+ const attachment = {
758
+ id: "att-total-timeout",
759
+ url: "https://cdn.discordapp.com/attachments/1/slow.png",
760
+ filename: "slow.png",
761
+ content_type: "image/png",
762
+ };
763
+ vi.useFakeTimers();
764
+ fetchRemoteMedia.mockImplementation(
765
+ () =>
766
+ new Promise(() => {
767
+ // never resolves
768
+ }),
769
+ );
770
+
771
+ try {
772
+ const resultPromise = resolveMediaList(
773
+ asMessage({
774
+ attachments: [attachment],
775
+ }),
776
+ 512,
777
+ { totalTimeoutMs: 100 },
778
+ );
779
+
780
+ await vi.advanceTimersByTimeAsync(100);
781
+
782
+ await expect(resultPromise).resolves.toEqual([
783
+ {
784
+ path: attachment.url,
785
+ contentType: "image/png",
786
+ placeholder: "<media:image>",
787
+ },
788
+ ]);
789
+ } finally {
790
+ vi.useRealTimers();
791
+ }
792
+ });
793
+
794
+ it("passes abortSignal to fetchRemoteMedia and falls back when aborted", async () => {
795
+ const attachment = {
796
+ id: "att-abort",
797
+ url: "https://cdn.discordapp.com/attachments/1/abort.png",
798
+ filename: "abort.png",
799
+ content_type: "image/png",
800
+ };
801
+ const abortController = new AbortController();
802
+ fetchRemoteMedia.mockImplementationOnce(
803
+ (params: { requestInit?: { signal?: AbortSignal } }) =>
804
+ new Promise((_, reject) => {
805
+ const signal = params.requestInit?.signal;
806
+ const abortError = Object.assign(new Error("aborted"), { name: "AbortError" });
807
+ if (signal?.aborted) {
808
+ reject(abortError);
809
+ return;
810
+ }
811
+ signal?.addEventListener("abort", () => reject(abortError), { once: true });
812
+ }),
813
+ );
814
+
815
+ const resultPromise = resolveMediaList(
816
+ asMessage({
817
+ attachments: [attachment],
818
+ }),
819
+ 512,
820
+ { abortSignal: abortController.signal },
821
+ );
822
+ abortController.abort();
823
+
824
+ await expect(resultPromise).resolves.toEqual([
825
+ {
826
+ path: attachment.url,
827
+ contentType: "image/png",
828
+ placeholder: "<media:image>",
829
+ },
830
+ ]);
831
+ expect(fetchRemoteMedia).toHaveBeenCalledWith(
832
+ expect.objectContaining({
833
+ requestInit: expect.objectContaining({ signal: abortController.signal }),
834
+ }),
835
+ );
836
+ });
837
+ });
838
+
839
+ describe("Discord media SSRF policy", () => {
840
+ beforeEach(() => {
841
+ fetchRemoteMedia.mockClear();
842
+ saveMediaBuffer.mockClear();
843
+ });
844
+
845
+ it("passes Discord CDN hostname allowlist with RFC2544 enabled", async () => {
846
+ fetchRemoteMedia.mockResolvedValueOnce({
847
+ buffer: Buffer.from("img"),
848
+ contentType: "image/png",
849
+ });
850
+ saveMediaBuffer.mockResolvedValueOnce({
851
+ path: "/tmp/a.png",
852
+ contentType: "image/png",
853
+ });
854
+
855
+ await resolveMediaList(
856
+ asMessage({
857
+ attachments: [{ id: "a1", url: "https://cdn.discordapp.com/a.png", filename: "a.png" }],
858
+ }),
859
+ 1024,
860
+ );
861
+
862
+ const policy = fetchRemoteMedia.mock.calls[0]?.[0]?.ssrfPolicy;
863
+ expectDiscordCdnSsrFPolicy(policy);
864
+ });
865
+
866
+ it("merges provided ssrfPolicy with Discord CDN defaults", async () => {
867
+ fetchRemoteMedia.mockResolvedValueOnce({
868
+ buffer: Buffer.from("img"),
869
+ contentType: "image/png",
870
+ });
871
+ saveMediaBuffer.mockResolvedValueOnce({
872
+ path: "/tmp/b.png",
873
+ contentType: "image/png",
874
+ });
875
+
876
+ await resolveMediaList(
877
+ asMessage({
878
+ attachments: [{ id: "b1", url: "https://cdn.discordapp.com/b.png", filename: "b.png" }],
879
+ }),
880
+ 1024,
881
+ {
882
+ ssrfPolicy: {
883
+ allowPrivateNetwork: true,
884
+ hostnameAllowlist: ["assets.example.com"],
885
+ allowedHostnames: ["assets.example.com"],
886
+ },
887
+ },
888
+ );
889
+
890
+ const policy = fetchRemoteMedia.mock.calls[0]?.[0]?.ssrfPolicy;
891
+ expect(policy).toEqual(
892
+ expect.objectContaining({
893
+ allowPrivateNetwork: true,
894
+ allowRfc2544BenchmarkRange: true,
895
+ allowedHostnames: expect.arrayContaining(["assets.example.com"]),
896
+ hostnameAllowlist: expect.arrayContaining(["assets.example.com", ...DISCORD_CDN_HOSTNAMES]),
897
+ }),
898
+ );
899
+ });
900
+ });
901
+
902
+ describe("resolveDiscordMessageText", () => {
903
+ it("includes forwarded message snapshots in body text", () => {
904
+ const text = resolveDiscordMessageText(
905
+ asForwardedSnapshotMessage({
906
+ content: "forwarded hello",
907
+ embeds: [],
908
+ }),
909
+ { includeForwarded: true },
910
+ );
911
+
912
+ expect(text).toContain("[Forwarded message from @Bob]");
913
+ expect(text).toContain("forwarded hello");
914
+ });
915
+
916
+ it("falls back to referenced forward message text when snapshots are absent", () => {
917
+ const text = resolveDiscordMessageText(
918
+ asReferencedForwardMessage({
919
+ content: "forwarded from referenced message",
920
+ }),
921
+ { includeForwarded: true },
922
+ );
923
+
924
+ expect(text).toContain("[Forwarded message from @Bob]");
925
+ expect(text).toContain("forwarded from referenced message");
926
+ });
927
+
928
+ it("does not treat ordinary replies as forwarded context", () => {
929
+ const text = resolveDiscordMessageText(
930
+ asReferencedForwardMessage({
931
+ content: "quoted reply content",
932
+ messageReferenceType: MessageReferenceType.Default,
933
+ }),
934
+ { includeForwarded: true },
935
+ );
936
+
937
+ expect(text).toBe("");
938
+ });
939
+
940
+ it("resolves user mentions in content", () => {
941
+ const text = resolveDiscordMessageText(
942
+ asMessage({
943
+ content: "Hello <@123> and <@456>!",
944
+ mentionedUsers: [
945
+ { id: "123", username: "alice", globalName: "Alice Wonderland", discriminator: "0" },
946
+ { id: "456", username: "bob", discriminator: "0" },
947
+ ],
948
+ }),
949
+ );
950
+ expect(text).toBe("Hello @Alice Wonderland and @bob!");
951
+ });
952
+
953
+ it("leaves content unchanged if no mentions present", () => {
954
+ const text = resolveDiscordMessageText(
955
+ asMessage({
956
+ content: "Hello world",
957
+ mentionedUsers: [],
958
+ }),
959
+ );
960
+ expect(text).toBe("Hello world");
961
+ });
962
+
963
+ it("uses sticker placeholders when content is empty", () => {
964
+ const text = resolveDiscordMessageText(
965
+ asMessage({
966
+ content: "",
967
+ stickers: [
968
+ {
969
+ id: "sticker-3",
970
+ name: "party",
971
+ format_type: StickerFormatType.PNG,
972
+ },
973
+ ],
974
+ }),
975
+ );
976
+
977
+ expect(text).toBe("<media:sticker> (1 sticker)");
978
+ });
979
+
980
+ it("uses embed title when content is empty", () => {
981
+ const text = resolveDiscordMessageText(
982
+ asMessage({
983
+ content: "",
984
+ embeds: [{ title: "Breaking" }],
985
+ }),
986
+ );
987
+
988
+ expect(text).toBe("Breaking");
989
+ });
990
+
991
+ it("uses Components v2 text display content when normal message text is empty", () => {
992
+ const text = resolveDiscordMessageText(
993
+ asMessage({
994
+ content: "",
995
+ flags: MessageFlags.IsComponentsV2,
996
+ components: [
997
+ {
998
+ type: ComponentType.Container,
999
+ components: [
1000
+ { type: ComponentType.TextDisplay, content: "Component headline" },
1001
+ {
1002
+ type: ComponentType.Section,
1003
+ components: [{ type: ComponentType.TextDisplay, content: "Component body" }],
1004
+ accessory: { type: ComponentType.Thumbnail, media: { url: "attachment://x.png" } },
1005
+ },
1006
+ ],
1007
+ },
1008
+ ],
1009
+ }),
1010
+ );
1011
+
1012
+ expect(text).toBe("Component headline\nComponent body");
1013
+ });
1014
+
1015
+ it("uses Components v2 text display content from referenced reply messages", () => {
1016
+ const text = resolveDiscordMessageText(
1017
+ asReferencedForwardMessage({
1018
+ components: [
1019
+ {
1020
+ type: ComponentType.Container,
1021
+ components: [{ type: ComponentType.TextDisplay, content: "Referenced component text" }],
1022
+ },
1023
+ ],
1024
+ messageReferenceType: MessageReferenceType.Default,
1025
+ }).referencedMessage!,
1026
+ );
1027
+
1028
+ expect(text).toBe("Referenced component text");
1029
+ });
1030
+
1031
+ it("uses embed description when content is empty", () => {
1032
+ const text = resolveDiscordMessageText(
1033
+ asMessage({
1034
+ content: "",
1035
+ embeds: [{ description: "Details" }],
1036
+ }),
1037
+ );
1038
+
1039
+ expect(text).toBe("Details");
1040
+ });
1041
+
1042
+ it("joins embed title and description when content is empty", () => {
1043
+ const text = resolveDiscordMessageText(
1044
+ asMessage({
1045
+ content: "",
1046
+ embeds: [{ title: "Breaking", description: "Details" }],
1047
+ }),
1048
+ );
1049
+
1050
+ expect(text).toBe("Breaking\nDetails");
1051
+ });
1052
+
1053
+ it("prefers message content over embed fallback text", () => {
1054
+ const text = resolveDiscordMessageText(
1055
+ asMessage({
1056
+ content: "hello from content",
1057
+ embeds: [{ title: "Breaking", description: "Details" }],
1058
+ }),
1059
+ );
1060
+
1061
+ expect(text).toBe("hello from content");
1062
+ });
1063
+
1064
+ it("joins forwarded snapshot embed title and description when content is empty", () => {
1065
+ const text = resolveDiscordMessageText(
1066
+ asForwardedSnapshotMessage({
1067
+ content: "",
1068
+ embeds: [{ title: "Forwarded title", description: "Forwarded details" }],
1069
+ }),
1070
+ { includeForwarded: true },
1071
+ );
1072
+
1073
+ expect(text).toContain("[Forwarded message from @Bob]");
1074
+ expect(text).toContain("Forwarded title\nForwarded details");
1075
+ });
1076
+
1077
+ it("includes Components v2 text display content from forwarded snapshots", () => {
1078
+ const text = resolveDiscordMessageText(
1079
+ asMessage({
1080
+ content: "",
1081
+ rawData: {
1082
+ message_snapshots: [
1083
+ {
1084
+ message: {
1085
+ content: "",
1086
+ embeds: [],
1087
+ attachments: [],
1088
+ components: [
1089
+ {
1090
+ type: ComponentType.Container,
1091
+ components: [
1092
+ { type: ComponentType.TextDisplay, content: "Forwarded component text" },
1093
+ ],
1094
+ },
1095
+ ],
1096
+ author: {
1097
+ id: "u2",
1098
+ username: "Bob",
1099
+ discriminator: "0",
1100
+ },
1101
+ },
1102
+ },
1103
+ ],
1104
+ },
1105
+ }),
1106
+ { includeForwarded: true },
1107
+ );
1108
+
1109
+ expect(text).toContain("[Forwarded message from @Bob]");
1110
+ expect(text).toContain("Forwarded component text");
1111
+ });
1112
+ });
1113
+
1114
+ describe("resolveDiscordChannelInfo", () => {
1115
+ beforeEach(() => {
1116
+ __resetDiscordChannelInfoCacheForTest();
1117
+ });
1118
+
1119
+ it("caches channel lookups between calls", async () => {
1120
+ const fetchChannel = vi.fn().mockResolvedValue({
1121
+ type: ChannelType.DM,
1122
+ name: "dm",
1123
+ });
1124
+ const client = { fetchChannel } as unknown as Client;
1125
+
1126
+ const first = await resolveDiscordChannelInfo(client, "cache-channel-1");
1127
+ const second = await resolveDiscordChannelInfo(client, "cache-channel-1");
1128
+
1129
+ expect(first).toEqual({
1130
+ type: ChannelType.DM,
1131
+ name: "dm",
1132
+ topic: undefined,
1133
+ parentId: undefined,
1134
+ ownerId: undefined,
1135
+ });
1136
+ expect(second).toEqual(first);
1137
+ expect(fetchChannel).toHaveBeenCalledTimes(1);
1138
+ });
1139
+
1140
+ it("negative-caches missing channels", async () => {
1141
+ const fetchChannel = vi.fn().mockResolvedValue(null);
1142
+ const client = { fetchChannel } as unknown as Client;
1143
+
1144
+ const first = await resolveDiscordChannelInfo(client, "missing-channel");
1145
+ const second = await resolveDiscordChannelInfo(client, "missing-channel");
1146
+
1147
+ expect(first).toBeNull();
1148
+ expect(second).toBeNull();
1149
+ expect(fetchChannel).toHaveBeenCalledTimes(1);
1150
+ });
1151
+ });