@openclaw/discord 2026.7.1 → 2026.7.2-beta.2

package/dist/{send.outbound-Bj61Q3a0.js → send.outbound-Cvulb-k_.js}

@@ -1,14 +1,15 @@
-import { dt as createChannelMessage, ft as createThread, n as createDiscordSendResult, r as createReusableDiscordReplyReference } from "./send.receipt-BpBQED_5.js";
-import { s as resolveDiscordAccount } from "./accounts-P19jm1lf.js";
-import { F as createDiscordClient, P as parseAndResolveChannelRecipient, _ as resolveDiscordMessageFlags, a as normalizeDiscordPollInput, c as normalizeStickerIds, f as sendDiscordMedia, g as buildDiscordMessageRequest, l as resolveChannelId, n as buildDiscordTextChunks, p as sendDiscordText, t as buildDiscordSendError, u as resolveDiscordChannelType, v as resolveDiscordSendComponents, y as resolveDiscordSendEmbeds } from "./send.shared-wAwMhHDN.js";
-import { a as resolveDiscordDirectoryUserId } from "./directory-live-BX79ImQA.js";
+import { gt as createThread, ht as createChannelMessage, i as createReusableDiscordReplyReference, r as createDiscordSendResult } from "./chunk-CHpY_lsO.js";
+import { s as resolveDiscordAccount } from "./accounts-CMd4nzLB.js";
+import { P as createDiscordClient, W as parseAndResolveChannelRecipient, _ as resolveDiscordMessageFlags, a as normalizeDiscordPollInput, c as normalizeStickerIds, f as sendDiscordMedia, g as createDiscordMessageNonce, h as buildDiscordMessageRequest, l as resolveChannelId, n as buildDiscordTextChunks, p as sendDiscordText, t as buildDiscordSendError, u as resolveDiscordChannel, v as resolveDiscordSendComponents, y as resolveDiscordSendEmbeds } from "./send.shared-XuOTO1dW.js";
+import { a as resolveDiscordDirectoryUserId } from "./directory-live-nfvekMil.js";
 import { normalizeLowercaseStringOrEmpty, normalizeOptionalString, normalizeOptionalStringifiedId } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ChannelType } from "discord-api-types/v10";
-import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
-import { resolveChunkMode } from "openclaw/plugin-sdk/reply-chunking";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { truncateUtf16Safe } from "openclaw/plugin-sdk/text-utility-runtime";
 import { recordChannelActivity } from "openclaw/plugin-sdk/channel-activity-runtime";
+import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveMarkdownTableMode } from "openclaw/plugin-sdk/markdown-table-runtime";
+import { resolveChunkMode } from "openclaw/plugin-sdk/reply-chunking";
 import { convertMarkdownTables } from "openclaw/plugin-sdk/text-chunking";
 //#region extensions/discord/src/mentions.ts
 const MENTION_CANDIDATE_PATTERN = /(^|[\s([{"'.,;:!?])@([a-z0-9_.-]{2,32}(?:#[0-9]{4})?)/gi;
@@ -39,7 +40,7 @@ function formatMention(params) {
 		} : null
 	].filter((entry) => Boolean(entry));
 	if (values.length !== 1) throw new Error("formatMention requires exactly one of userId, roleId, or channelId");
-	const target = values[0];
+	const target = expectDefined(values.at(0), "single Discord mention target");
 	if (target.kind === "user") return `<@${target.id}>`;
 	if (target.kind === "role") return `<@&${target.id}>`;
 	return `<#${target.id}>`;
@@ -170,8 +171,8 @@ function deriveForumThreadName(text) {
 	return truncateUtf16Safe(normalizeOptionalString(text.split("\n").find((line) => normalizeOptionalString(line))) ?? "", DISCORD_THREAD_NAME_LIMIT) || (/* @__PURE__ */ new Date()).toISOString().slice(0, 16);
 }
 /** Forum/Media channels cannot receive regular messages; detect them here. */
-function isForumLikeType(channelType) {
-	return channelType === ChannelType.GuildForum || channelType === ChannelType.GuildMedia;
+function isForumLikeChannel(channel) {
+	return channel?.type === ChannelType.GuildForum || channel?.type === ChannelType.GuildMedia;
 }
 function toDiscordSendResult(result, fallbackChannelId, params = {}) {
 	const resultParams = {
@@ -226,7 +227,8 @@ async function sendMessageDiscord(to, text, opts) {
 		cfg
 	});
 	const { channelId } = await resolveChannelId(rest, await parseAndResolveChannelRecipient(to, cfg, opts.accountId), request);
-	if (isForumLikeType(await resolveDiscordChannelType(rest, channelId))) {
+	const channel = await resolveDiscordChannel(rest, channelId);
+	if (isForumLikeChannel(channel)) {
 		const threadName = deriveForumThreadName(textWithTables);
 		const chunks = buildDiscordTextChunks(textWithMentions, {
 			maxLinesPerMessage,
@@ -244,6 +246,7 @@ async function sendMessageDiscord(to, text, opts) {
 			isFirst: true
 		});
 		const starterBody = buildDiscordMessageRequest({
+			endpoint: "forum-thread",
 			text: starterContent,
 			components: starterComponents,
 			embeds: starterEmbeds,
@@ -257,8 +260,9 @@ async function sendMessageDiscord(to, text, opts) {
 		try {
 			threadRes = await request(() => createThread(rest, channelId, { body: {
 				name: threadName,
+				...channel.default_auto_archive_duration === void 0 ? {} : { auto_archive_duration: channel.default_auto_archive_duration },
 				message: starterBody
-			} }), "forum-thread");
+			} }), "forum-thread", { safety: "non-idempotent-create" });
 		} catch (err) {
 			throw await buildDiscordSendError(err, {
 				channelId,
@@ -424,11 +428,14 @@ async function sendStickerDiscord(to, stickerIds, opts) {
 	const { rest, request, channelId, rewrittenContent, suppressEmbeds } = await resolveDiscordStructuredSendContext(to, opts);
 	const stickers = normalizeStickerIds(stickerIds);
 	const flags = resolveDiscordMessageFlags({ suppressEmbeds });
-	return toDiscordSendResult(await request(() => createChannelMessage(rest, channelId, { body: {
+	const body = {
 		content: rewrittenContent || void 0,
 		sticker_ids: stickers,
+		nonce: createDiscordMessageNonce(),
+		enforce_nonce: true,
 		...flags ? { flags } : {}
-	} }), "sticker"), channelId, { kind: "card" });
+	};
+	return toDiscordSendResult(await request(() => createChannelMessage(rest, channelId, { body }), "sticker", { safety: "nonce-protected-create" }), channelId, { kind: "card" });
 }
 async function sendPollDiscord(to, poll, opts) {
 	const { rest, request, channelId, rewrittenContent, suppressEmbeds } = await resolveDiscordStructuredSendContext(to, opts);
@@ -438,11 +445,14 @@ async function sendPollDiscord(to, poll, opts) {
 		silent: opts.silent,
 		suppressEmbeds
 	});
-	return toDiscordSendResult(await request(() => createChannelMessage(rest, channelId, { body: {
+	const body = {
 		content: rewrittenContent || void 0,
 		poll: payload,
+		nonce: createDiscordMessageNonce(),
+		enforce_nonce: true,
 		...flags ? { flags } : {}
-	} }), "poll"), channelId, { kind: "card" });
+	};
+	return toDiscordSendResult(await request(() => createChannelMessage(rest, channelId, { body }), "poll", { safety: "nonce-protected-create" }), channelId, { kind: "card" });
 }
 async function resolveDiscordStructuredSendContext(to, opts) {
 	const accountInfo = resolveDiscordAccount({

package/dist/{send.shared-wAwMhHDN.js → send.shared-XuOTO1dW.js}

@@ -1,48 +1,21 @@
-import { C as RequestClient, F as serializePayload, I as Embed, Nt as getGuild, Pt as getGuildMember, T as RateLimitError, _t as getChannel, dt as createChannelMessage, i as resolveDiscordReplyMessageId, ot as createUserDmChannel, st as getCurrentUser, u as chunkDiscordTextWithMode } from "./send.receipt-BpBQED_5.js";
-import { a as mergeDiscordAccountConfig, p as normalizeDiscordToken, s as resolveDiscordAccount } from "./accounts-P19jm1lf.js";
-import { t as parseAndResolveDiscordTarget } from "./target-resolver-CwHaSLt3.js";
-import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { B as Embed, Ct as getThreadMember, D as RequestClient, Rt as getGuild, a as resolveDiscordReplyMessageId, dt as getCurrentUser, ht as createChannelMessage, k as RateLimitError, t as chunkDiscordTextWithMode, ut as createUserDmChannel, xt as getChannel, z as serializePayload, zt as getGuildMember } from "./chunk-CHpY_lsO.js";
+import { a as mergeDiscordAccountConfig, p as normalizeDiscordToken, s as resolveDiscordAccount } from "./accounts-CMd4nzLB.js";
+import { t as parseAndResolveDiscordTarget } from "./target-resolver-BaEmTxeK.js";
 import { normalizeAccountId } from "openclaw/plugin-sdk/routing";
+import { normalizeOptionalString, normalizeStringEntries } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { ChannelType, MessageFlags, PermissionFlagsBits } from "discord-api-types/v10";
+import { randomBytes } from "node:crypto";
 import { parseStrictNonNegativeInteger } from "openclaw/plugin-sdk/number-runtime";
+import { expectDefined } from "openclaw/plugin-sdk/expect-runtime";
 import { collectErrorGraphCandidates, extractErrorCode, formatErrorMessage, readErrorName } from "openclaw/plugin-sdk/error-runtime";
+import { createChannelApiRetryRunner, resolveRetryConfig } from "openclaw/plugin-sdk/retry-runtime";
+import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
+import { danger } from "openclaw/plugin-sdk/runtime-env";
+import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { PollLayoutType } from "discord-api-types/payloads/v10";
 import { buildOutboundMediaLoadOptions, extensionForMime, normalizePollDurationHours, normalizePollInput } from "openclaw/plugin-sdk/media-runtime";
-import { requireRuntimeConfig } from "openclaw/plugin-sdk/plugin-config-runtime";
 import { resolveTextChunksWithFallback } from "openclaw/plugin-sdk/reply-payload";
 import { loadWebMedia } from "openclaw/plugin-sdk/web-media";
-import { makeProxyFetch } from "openclaw/plugin-sdk/fetch-runtime";
-import { createSubsystemLogger, danger } from "openclaw/plugin-sdk/runtime-env";
-import { resolveRetryConfig, retryAsync } from "openclaw/plugin-sdk/retry-runtime";
-//#region extensions/discord/src/monitor/gateway-registry.ts
-/**
-* Module-level registry of active Discord GatewayPlugin instances.
-* Bridges the gap between agent tool handlers (which only have REST access)
-* and the gateway WebSocket (needed for operations like updatePresence).
-* Follows the same pattern as presence-cache.ts.
-*/
-const gatewayRegistry = /* @__PURE__ */ new Map();
-const DEFAULT_ACCOUNT_KEY = "\0__default__";
-function resolveAccountKey(accountId) {
-	return accountId ?? DEFAULT_ACCOUNT_KEY;
-}
-/** Register a GatewayPlugin instance for an account. */
-function registerGateway(accountId, gateway) {
-	gatewayRegistry.set(resolveAccountKey(accountId), gateway);
-}
-/** Unregister a GatewayPlugin instance for an account. */
-function unregisterGateway(accountId) {
-	gatewayRegistry.delete(resolveAccountKey(accountId));
-}
-/** Get the GatewayPlugin for an account. Returns undefined if not registered. */
-function getGateway(accountId) {
-	return gatewayRegistry.get(resolveAccountKey(accountId));
-}
-/** Clear all registered gateways (for testing). */
-function clearGateways() {
-	gatewayRegistry.clear();
-}
-//#endregion
 //#region extensions/discord/src/proxy-fetch.ts
 function resolveDiscordProxyUrl(account, cfg) {
 	const accountProxy = account.config.proxy?.trim();
@@ -80,6 +53,55 @@ function validateDiscordProxyUrl(proxyUrl) {
 	return proxyUrl;
 }
 //#endregion
+//#region extensions/discord/src/recipient-resolution.ts
+async function parseAndResolveRecipient(raw, cfg, accountId, parseOptions = {}) {
+	if (!cfg) throw new Error("Discord recipient resolution requires a resolved runtime config. Load and resolve config at the command or gateway boundary, then pass cfg through the runtime path.");
+	const resolvedCfg = requireRuntimeConfig(cfg, "Discord recipient resolution");
+	const resolved = await parseAndResolveDiscordTarget(raw, {
+		cfg: resolvedCfg,
+		accountId: resolveDiscordAccount({
+			cfg: resolvedCfg,
+			accountId
+		}).accountId
+	}, parseOptions);
+	return {
+		kind: resolved.kind,
+		id: resolved.id
+	};
+}
+async function parseAndResolveChannelRecipient(raw, cfg, accountId) {
+	return await parseAndResolveRecipient(raw, cfg, accountId, { defaultKind: "channel" });
+}
+//#endregion
+//#region extensions/discord/src/monitor/gateway-registry.ts
+/**
+* Module-level registry of active Discord GatewayPlugin instances.
+* Bridges the gap between agent tool handlers (which only have REST access)
+* and the gateway WebSocket (needed for operations like updatePresence).
+* Follows the same pattern as presence-cache.ts.
+*/
+const gatewayRegistry = /* @__PURE__ */ new Map();
+const DEFAULT_ACCOUNT_KEY = "\0__default__";
+function resolveAccountKey(accountId) {
+	return accountId ?? DEFAULT_ACCOUNT_KEY;
+}
+/** Register a GatewayPlugin instance for an account. */
+function registerGateway(accountId, gateway) {
+	gatewayRegistry.set(resolveAccountKey(accountId), gateway);
+}
+/** Unregister a GatewayPlugin instance for an account. */
+function unregisterGateway(accountId) {
+	gatewayRegistry.delete(resolveAccountKey(accountId));
+}
+/** Get the GatewayPlugin for an account. Returns undefined if not registered. */
+function getGateway(accountId) {
+	return gatewayRegistry.get(resolveAccountKey(accountId));
+}
+/** Clear all registered gateways (for testing). */
+function clearGateways() {
+	gatewayRegistry.clear();
+}
+//#endregion
 //#region extensions/discord/src/proxy-request-client.ts
 const DISCORD_REST_TIMEOUT_MS = 15e3;
 function createDiscordRequestClient(token, options) {
@@ -116,7 +138,13 @@ const DISCORD_RETRYABLE_ERROR_CODES = /* @__PURE__ */ new Set([
 	"UND_ERR_SOCKET"
 ]);
 const DISCORD_TRANSIENT_MESSAGE_RE = /\b(?:bad gateway|fetch failed|network error|networkerror|service unavailable|socket hang up|temporarily unavailable|timed out|timeout)\b|connection (?:closed|reset|refused)/i;
-const log = createSubsystemLogger("discord/retry");
+const DISCORD_PRECONNECT_ERROR_CODES = /* @__PURE__ */ new Set([
+	"EAI_AGAIN",
+	"ECONNREFUSED",
+	"ENETUNREACH",
+	"ENOTFOUND",
+	"UND_ERR_CONNECT_TIMEOUT"
+]);
 function readDiscordErrorStatus(err) {
 	if (!err || typeof err !== "object") return;
 	return parseStrictNonNegativeInteger("status" in err && err.status !== void 0 ? err.status : "statusCode" in err && err.statusCode !== void 0 ? err.statusCode : void 0);
@@ -133,6 +161,18 @@ function isRetryableDiscordTransientError(err) {
 	}
 	return false;
 }
+function isRetryableDiscordPreConnectError(err) {
+	if (err instanceof RateLimitError) return true;
+	for (const candidate of collectErrorGraphCandidates(err, (current) => [current.cause, current.error])) {
+		if (readDiscordErrorStatus(candidate) === 429) return true;
+		const code = extractErrorCode(candidate);
+		if (code && DISCORD_PRECONNECT_ERROR_CODES.has(code.toUpperCase())) return true;
+	}
+	return false;
+}
+function resolveDiscordRetryPredicate(safety) {
+	return safety === "non-idempotent-create" ? isRetryableDiscordPreConnectError : isRetryableDiscordTransientError;
+}
 function isRetryableDiscordGatewayTransportError(err) {
 	if (!isRetryableDiscordTransientError(err) || err instanceof RateLimitError) return false;
 	return !collectErrorGraphCandidates(err, (current) => [current.cause, current.error]).some((candidate) => readDiscordErrorStatus(candidate) !== void 0);
@@ -143,7 +183,8 @@ function createDiscordRetryRunner(params) {
 		...params.retry
 	});
 	const attempts = retryConfig.attempts > 1 ? retryConfig.attempts + DISCORD_GATEWAY_RECONNECT_EXTRA_ATTEMPTS : retryConfig.attempts;
-	return (fn, label) => {
+	return (fn, label, options) => {
+		const isRetryable = resolveDiscordRetryPredicate(options?.safety ?? "idempotent");
 		let observedGatewayDisconnect = false;
 		const runRequest = async () => {
 			observedGatewayDisconnect ||= params.isGatewayDisconnected?.() === true;
@@ -154,18 +195,16 @@ function createDiscordRetryRunner(params) {
 				throw err;
 			}
 		};
-		return retryAsync(runRequest, {
-			...retryConfig,
-			attempts,
-			label,
-			shouldRetry: (err, attempt) => isRetryableDiscordTransientError(err) && (attempt < retryConfig.attempts || observedGatewayDisconnect && isRetryableDiscordGatewayTransportError(err)),
+		return createChannelApiRetryRunner({
+			retry: {
+				...retryConfig,
+				attempts
+			},
+			shouldRetry: (err, attempt) => isRetryable(err) && (attempt < retryConfig.attempts || observedGatewayDisconnect && isRetryableDiscordGatewayTransportError(err)),
+			strictShouldRetry: true,
 			retryAfterMs: (err) => err instanceof RateLimitError ? err.retryAfter * 1e3 : void 0,
-			onRetry: params.verbose ? (info) => {
-				const maxAttempts = observedGatewayDisconnect ? attempts : retryConfig.attempts;
-				const maxRetries = Math.max(1, maxAttempts - 1);
-				log.warn(`discord ${info.label ?? "request"} retry ${info.attempt}/${maxRetries} in ${info.delayMs}ms: ${formatErrorMessage(info.err)}`);
-			} : void 0
-		});
+			verbose: params.verbose
+		})(runRequest, label);
 	};
 }
 //#endregion
@@ -259,26 +298,6 @@ function resolveDiscordRest(opts) {
 	return createDiscordRestClient(opts).rest;
 }
 //#endregion
-//#region extensions/discord/src/recipient-resolution.ts
-async function parseAndResolveRecipient(raw, cfg, accountId, parseOptions = {}) {
-	if (!cfg) throw new Error("Discord recipient resolution requires a resolved runtime config. Load and resolve config at the command or gateway boundary, then pass cfg through the runtime path.");
-	const resolvedCfg = requireRuntimeConfig(cfg, "Discord recipient resolution");
-	const resolved = await parseAndResolveDiscordTarget(raw, {
-		cfg: resolvedCfg,
-		accountId: resolveDiscordAccount({
-			cfg: resolvedCfg,
-			accountId
-		}).accountId
-	}, parseOptions);
-	return {
-		kind: resolved.kind,
-		id: resolved.id
-	};
-}
-async function parseAndResolveChannelRecipient(raw, cfg, accountId) {
-	return await parseAndResolveRecipient(raw, cfg, accountId, { defaultKind: "channel" });
-}
-//#endregion
 //#region extensions/discord/src/send.permissions.ts
 const PERMISSION_ENTRIES = Object.entries(PermissionFlagsBits).filter(([, value]) => typeof value === "bigint");
 const ALL_PERMISSIONS = PERMISSION_ENTRIES.reduce((acc, [, value]) => acc | value, 0n);
@@ -380,16 +399,23 @@ async function canViewDiscordGuildChannel(guildId, channelId, userId, opts) {
 	const rest = resolveDiscordRest(opts);
 	try {
 		const channel = await getChannel(rest, channelId);
-		if (("guild_id" in channel ? channel.guild_id : void 0) !== guildId) return false;
+		const permissionChannel = await resolveChannelPermissionSubject(rest, channel);
+		if (("guild_id" in permissionChannel ? permissionChannel.guild_id : void 0) !== guildId) return false;
 		const [guild, member] = await Promise.all([getGuild(rest, guildId), getGuildMember(rest, guildId, userId)]);
 		if (guild.owner_id === userId) return true;
-		return hasPermissionBit(resolveMemberChannelPermissionBits({
+		const permissions = resolveMemberChannelPermissionBits({
 			guildId,
 			userId,
 			guild,
 			member,
-			channel
-		}), PermissionFlagsBits.ViewChannel);
+			channel: permissionChannel
+		});
+		if (!hasPermissionBit(permissions, PermissionFlagsBits.ViewChannel)) return false;
+		if ("type" in channel && channel.type === ChannelType.GuildPrivateThread) {
+			if (hasPermissionBit(permissions, PermissionFlagsBits.ManageThreads)) return true;
+			await getThreadMember(rest, channel.id, userId);
+		}
+		return true;
 	} catch {
 		return false;
 	}
@@ -529,6 +555,9 @@ const DISCORD_MAX_EVENT_COVER_BYTES = 8 * 1024 * 1024;
 //#region extensions/discord/src/send.message-request.ts
 const SUPPRESS_EMBEDS_FLAG = MessageFlags.SuppressEmbeds;
 const SUPPRESS_NOTIFICATIONS_FLAG = MessageFlags.SuppressNotifications;
+function createDiscordMessageNonce() {
+	return randomBytes(12).toString("hex");
+}
 function resolveDiscordSendComponents(params) {
 	if (!params.components || !params.isFirst) return;
 	return typeof params.components === "function" ? params.components(params.text) : params.components;
@@ -560,12 +589,16 @@ function resolveDiscordMessageFlags(params) {
 	return flags || void 0;
 }
 function buildDiscordMessageRequest(params) {
+	const payload = buildDiscordMessagePayload(params);
+	const nonce = params.endpoint === "create-message" ? params.nonce ?? createDiscordMessageNonce() : void 0;
 	return stripUndefinedFields({
-		...serializePayload(buildDiscordMessagePayload(params)),
+		...serializePayload(payload),
 		...params.replyTo ? { message_reference: {
 			message_id: params.replyTo,
 			fail_if_not_exists: false
-		} } : {}
+		} } : {},
+		nonce,
+		enforce_nonce: nonce ? true : void 0
 	});
 }
 function stripUndefinedFields(value) {
@@ -687,9 +720,9 @@ async function resolveDiscordTargetChannelId(raw, opts) {
 	const { rest, request } = createDiscordClient(opts);
 	return await resolveChannelId(rest, recipient, request);
 }
-async function resolveDiscordChannelType(rest, channelId) {
+async function resolveDiscordChannel(rest, channelId) {
 	try {
-		return (await getChannel(rest, channelId))?.type;
+		return await getChannel(rest, channelId);
 	} catch {
 		return;
 	}
@@ -702,12 +735,6 @@ function buildDiscordTextChunks(text, opts = {}) {
 		chunkMode: opts.chunkMode
 	}));
 }
-function toDiscordFileBlob(data) {
-	if (data instanceof Blob) return data;
-	const arrayBuffer = new ArrayBuffer(data.byteLength);
-	new Uint8Array(arrayBuffer).set(data);
-	return new Blob([arrayBuffer]);
-}
 async function sendDiscordText(params) {
 	const { rest, channelId, text, request, reply, maxLinesPerMessage, components, embeds, allowedMentions, chunkMode, silent, suppressEmbeds, maxChars, onResult } = params;
 	if (!text.trim()) throw new Error("Message must be non-empty for Discord sends");
@@ -732,6 +759,7 @@ async function sendDiscordText(params) {
 			suppressEmbeds: suppressEmbeds && !chunkEmbeds?.length
 		});
 		const body = buildDiscordMessageRequest({
+			endpoint: "create-message",
 			text: chunk,
 			components: chunkComponents,
 			embeds: chunkEmbeds,
@@ -740,12 +768,12 @@ async function sendDiscordText(params) {
 			replyTo: chunkReplyTo
 		});
 		return {
-			result: await request(() => createChannelMessage(rest, channelId, { body }), "text"),
+			result: await request(() => createChannelMessage(rest, channelId, { body }), "text", { safety: "nonce-protected-create" }),
 			replyToId: chunkReplyTo
 		};
 	};
 	if (chunks.length === 1) {
-		const { result, replyToId } = await sendChunk(chunks[0], true);
+		const { result, replyToId } = await sendChunk(expectDefined(chunks.at(0), "single Discord text chunk"), true);
 		await onResult?.(result, "text", replyToId);
 		return {
 			...result,
@@ -781,7 +809,6 @@ async function sendDiscordMedia(params) {
 		maxChars
 	}) : [];
 	const caption = chunks[0] ?? "";
-	const fileData = toDiscordFileBlob(media.buffer);
 	const captionComponents = resolveDiscordSendComponents({
 		components,
 		text: caption,
@@ -792,6 +819,7 @@ async function sendDiscordMedia(params) {
 		isFirst: true
 	});
 	const body = buildDiscordMessageRequest({
+		endpoint: "create-message",
 		text: caption,
 		components: captionComponents,
 		embeds: captionEmbeds,
@@ -802,13 +830,13 @@ async function sendDiscordMedia(params) {
 		}),
 		replyTo: resolveDiscordReplyMessageId(reply, true),
 		files: [{
-			data: fileData,
+			data: media.buffer,
 			name: resolvedFileName
 		}]
 	});
 	let res;
 	try {
-		res = await request(() => createChannelMessage(rest, channelId, { body }), "media");
+		res = await request(() => createChannelMessage(rest, channelId, { body }), "media", { safety: "nonce-protected-create" });
 	} catch (err) {
 		if (!isDiscordUploadTooLargeError(err)) throw err;
 		return sendDiscordText({
@@ -860,4 +888,4 @@ function formatReactionEmoji(emoji) {
 	return buildReactionIdentifier(emoji);
 }
 //#endregion
-export { hasAllGuildPermissionsDiscord as A, DISCORD_REST_TIMEOUT_MS as B, DISCORD_MAX_STICKER_BYTES as C, canViewDiscordGuildChannel as D, canManageGuildRoleDiscord as E, createDiscordClient as F, registerGateway as G, withValidatedDiscordProxy as H, createDiscordRestClient as I, unregisterGateway as K, createDiscordRuntimeAccountContext as L, hasAnyGuildPermissionDiscord as M, isThreadChannelType as N, fetchChannelPermissionsDiscord as O, parseAndResolveChannelRecipient as P, resolveDiscordClientAccountContext as R, DISCORD_MAX_EVENT_COVER_BYTES as S, canManageGuildMemberRoleDiscord as T, clearGateways as U, validateDiscordProxyUrl as V, getGateway as W, resolveDiscordMessageFlags as _, normalizeDiscordPollInput as a, stripUndefinedFields as b, normalizeStickerIds as c, resolveDiscordTargetChannelId as d, sendDiscordMedia as f, buildDiscordMessageRequest as g, SUPPRESS_NOTIFICATIONS_FLAG as h, formatReactionEmoji as i, hasAnyChannelPermissionDiscord as j, fetchMemberGuildPermissionsDiscord as k, resolveChannelId as l, toDiscordFileBlob as m, buildDiscordTextChunks as n, normalizeEmojiName as o, sendDiscordText as p, buildReactionIdentifier as r, normalizeReactionEmoji as s, buildDiscordSendError as t, resolveDiscordChannelType as u, resolveDiscordSendComponents as v, DiscordSendError as w, DISCORD_MAX_EMOJI_BYTES as x, resolveDiscordSendEmbeds as y, resolveDiscordRest as z };
+export { hasAllGuildPermissionsDiscord as A, clearGateways as B, DISCORD_MAX_STICKER_BYTES as C, canViewDiscordGuildChannel as D, canManageGuildRoleDiscord as E, createDiscordRestClient as F, resolveDiscordProxyFetchForAccount as G, registerGateway as H, createDiscordRuntimeAccountContext as I, validateDiscordProxyUrl as K, resolveDiscordClientAccountContext as L, hasAnyGuildPermissionDiscord as M, isThreadChannelType as N, fetchChannelPermissionsDiscord as O, createDiscordClient as P, resolveDiscordRest as R, DISCORD_MAX_EVENT_COVER_BYTES as S, canManageGuildMemberRoleDiscord as T, unregisterGateway as U, getGateway as V, parseAndResolveChannelRecipient as W, resolveDiscordMessageFlags as _, normalizeDiscordPollInput as a, stripUndefinedFields as b, normalizeStickerIds as c, resolveDiscordTargetChannelId as d, sendDiscordMedia as f, createDiscordMessageNonce as g, buildDiscordMessageRequest as h, formatReactionEmoji as i, hasAnyChannelPermissionDiscord as j, fetchMemberGuildPermissionsDiscord as k, resolveChannelId as l, SUPPRESS_NOTIFICATIONS_FLAG as m, buildDiscordTextChunks as n, normalizeEmojiName as o, sendDiscordText as p, withValidatedDiscordProxy as q, buildReactionIdentifier as r, normalizeReactionEmoji as s, buildDiscordSendError as t, resolveDiscordChannel as u, resolveDiscordSendComponents as v, DiscordSendError as w, DISCORD_MAX_EMOJI_BYTES as x, resolveDiscordSendEmbeds as y, DISCORD_REST_TIMEOUT_MS as z };

package/dist/{sender-identity-CEsfDF0L.js → sender-identity-C62lBe18.js}

@@ -1,4 +1,4 @@
-import { b as formatDiscordUserTag } from "./allow-list-C-MqM-B_.js";
+import { x as formatDiscordUserTag } from "./allow-list-B7qOH5xu.js";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
 //#region extensions/discord/src/monitor/sender-identity.ts
 function resolveDiscordWebhookId(message) {

package/dist/session-binding-contract-api.js

@@ -1,2 +1,2 @@
-import { i as testing, n as createThreadBindingManager } from "./thread-bindings.manager-Bwmtqc3E.js";
+import { i as testing, n as createThreadBindingManager } from "./thread-bindings.manager-DJ4cO5Eu.js";
 export { createThreadBindingManager, testing as discordThreadBindingTesting };

package/dist/setup-plugin-api.js

@@ -1,2 +1,2 @@
-import { t as discordSetupPlugin } from "./channel.setup-tZcpIn4e.js";
+import { t as discordSetupPlugin } from "./channel.setup-BS4gd8sc.js";
 export { discordSetupPlugin };

package/dist/{shared-BQVKfnev.js → shared-Bngr0I-v.js}

@@ -1,15 +1,15 @@
-import { t as inspectDiscordAccount } from "./account-inspect-DDZtT5C8.js";
-import { a as mergeDiscordAccountConfig, c as resolveDiscordAccountAllowFrom, d as resolveDiscordAccountDmPolicy, n as isDiscordAccountEnabledForRuntime, o as resolveDefaultDiscordAccountId, r as listDiscordAccountIds, s as resolveDiscordAccount, u as resolveDiscordAccountDisabledReason } from "./accounts-P19jm1lf.js";
+import { a as mergeDiscordAccountConfig, c as resolveDiscordAccountAllowFrom, d as resolveDiscordAccountDmPolicy, n as isDiscordAccountEnabledForRuntime, o as resolveDefaultDiscordAccountId, r as listDiscordAccountIds, s as resolveDiscordAccount, u as resolveDiscordAccountDisabledReason } from "./accounts-CMd4nzLB.js";
 import { i as getChatChannelMeta, o as resolveConfiguredFromCredentialStatuses } from "./channel-api-CAJ0wMoV.js";
-import { t as DiscordChannelConfigSchema } from "./config-schema-BgIhO3ko.js";
-import { n as normalizeCompatibilityConfig } from "./doctor-contract-CU7lnZTF.js";
+import { t as inspectDiscordAccount } from "./account-inspect-dFV0JrnR.js";
+import { t as DiscordChannelConfigSchema } from "./config-schema-CoDck1GW.js";
+import { n as normalizeCompatibilityConfig } from "./doctor-contract-wId6pV41.js";
 import { n as secretTargetRegistryEntries, t as collectRuntimeConfigAssignments } from "./secret-config-contract-BDNrRWvd.js";
 import { n as unsupportedSecretRefSurfacePatterns, t as collectUnsupportedSecretRefConfigCandidates } from "./security-contract-DSHk7I2w.js";
 import { t as deriveLegacySessionChatType } from "./session-contract-BO5tlIdl.js";
-import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
-import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { describeAccountSnapshot } from "openclaw/plugin-sdk/account-helpers";
+import { normalizeAccountId } from "openclaw/plugin-sdk/account-id";
 import { adaptScopedAccountAccessor, createScopedChannelConfigAdapter, createScopedDmSecurityResolver } from "openclaw/plugin-sdk/channel-config-helpers";
+import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 import { createOpenProviderConfiguredRouteWarningCollector } from "openclaw/plugin-sdk/channel-policy";
 import { createEnvPatchedAccountSetupAdapter } from "openclaw/plugin-sdk/setup-runtime";
 import { formatAllowFromLowercase } from "openclaw/plugin-sdk/allow-from";
@@ -47,7 +47,7 @@ const collectDiscordSecurityWarnings = createOpenProviderConfiguredRouteWarningC
 		remediation: "Set channels.discord.groupPolicy=\"allowlist\" and configure channels.discord.guilds.<id>.channels"
 	}
 });
-const loadDiscordSecurityAuditModule = createLazyRuntimeModule(() => import("./security-audit.runtime-CpPdDNEt.js"));
+const loadDiscordSecurityAuditModule = createLazyRuntimeModule(() => import("./security-audit.runtime-K0nkzjzJ.js"));
 const discordSecurityAdapter = {
 	resolveDmPolicy: resolveDiscordDmPolicy,
 	collectWarnings: collectDiscordSecurityWarnings,
@@ -66,7 +66,7 @@ const DISCORD_LEGACY_CONFIG_RULES = [];
 //#endregion
 //#region extensions/discord/src/shared.ts
 const DISCORD_CHANNEL = "discord";
-const loadDiscordDoctorModule = createLazyRuntimeModule(() => import("./doctor-Bgoxm5AN.js"));
+const loadDiscordDoctorModule = createLazyRuntimeModule(() => import("./doctor-Bq4pJAQk.js"));
 const discordDoctor = {
 	dmAllowFromMode: "topOnly",
 	groupModel: "route",

package/dist/subagent-hooks-api.js

@@ -1,6 +1,6 @@
 import { createLazyRuntimeModule } from "openclaw/plugin-sdk/lazy-runtime";
 //#region extensions/discord/subagent-hooks-api.ts
-const loadDiscordSubagentHooksModule = createLazyRuntimeModule(() => import("./subagent-hooks-B-bJxxGg.js").then((n) => n.i));
+const loadDiscordSubagentHooksModule = createLazyRuntimeModule(() => import("./subagent-hooks-mSxRv4AE.js").then((n) => n.i));
 function registerDiscordSubagentHooks(api) {
 	api.on("subagent_ended", async (event) => {
 		const { handleDiscordSubagentEnded } = await loadDiscordSubagentHooksModule();

package/dist/{subagent-hooks-B-bJxxGg.js → subagent-hooks-mSxRv4AE.js}

@@ -1,6 +1,6 @@
-import { Jt as __exportAll } from "./send.receipt-BpBQED_5.js";
-import { s as resolveDiscordAccount } from "./accounts-P19jm1lf.js";
-import { n as autoBindSpawnedDiscordSubagent, o as unbindThreadBindingsBySessionKey, r as listThreadBindingsBySessionKey } from "./thread-bindings-DsTxqu3E.js";
+import { Zt as __exportAll } from "./chunk-CHpY_lsO.js";
+import { s as resolveDiscordAccount } from "./accounts-CMd4nzLB.js";
+import { n as autoBindSpawnedDiscordSubagent, o as unbindThreadBindingsBySessionKey, r as listThreadBindingsBySessionKey } from "./thread-bindings-4MV-u8vU.js";
 import { normalizeOptionalLowercaseString, normalizeOptionalStringifiedId } from "openclaw/plugin-sdk/string-coerce-runtime";
 import { formatThreadBindingDisabledError, formatThreadBindingSpawnDisabledError, resolveThreadBindingSpawnPolicy } from "openclaw/plugin-sdk/conversation-runtime";
 //#region extensions/discord/src/subagent-hooks.ts

package/dist/{system-events-DVnqSyTt.js → system-events-BANBRAe3.js}

@@ -1,5 +1,5 @@
-import { d as discord_exports } from "./send.receipt-BpBQED_5.js";
-import { b as formatDiscordUserTag } from "./allow-list-C-MqM-B_.js";
+import { p as discord_exports } from "./chunk-CHpY_lsO.js";
+import { x as formatDiscordUserTag } from "./allow-list-B7qOH5xu.js";
 //#region extensions/discord/src/monitor/system-events.ts
 function resolveDiscordSystemEvent(message, location) {
 	switch (message.type) {

package/dist/{target-resolver-CwHaSLt3.js → target-resolver-BaEmTxeK.js}

@@ -1,6 +1,6 @@
-import { Jt as __exportAll, Kt as parseDiscordTarget, o as allowFromContainsDiscordUserId } from "./send.receipt-BpBQED_5.js";
-import { c as resolveDiscordAccountAllowFrom, s as resolveDiscordAccount } from "./accounts-P19jm1lf.js";
-import { i as rememberDiscordDirectoryUser, r as listDiscordDirectoryPeersLive } from "./directory-live-BX79ImQA.js";
+import { Zt as __exportAll, d as parseDiscordTarget, s as allowFromContainsDiscordUserId } from "./chunk-CHpY_lsO.js";
+import { c as resolveDiscordAccountAllowFrom, s as resolveDiscordAccount } from "./accounts-CMd4nzLB.js";
+import { i as rememberDiscordDirectoryUser, r as listDiscordDirectoryPeersLive } from "./directory-live-nfvekMil.js";
 import { buildMessagingTarget } from "openclaw/plugin-sdk/channel-targets";
 //#region extensions/discord/src/send-target-parsing.ts
 const parseDiscordSendTarget = (raw, options = {}) => parseDiscordTarget(raw, options);

package/dist/targets-fjJt3PYG.js

@@ -0,0 +1,3 @@
+import "./chunk-CHpY_lsO.js";
+import "./target-resolver-BaEmTxeK.js";
+export {};

package/dist/thread-binding-api-BDZJD4na.js

@@ -0,0 +1,4 @@
+//#region extensions/discord/src/thread-binding-api.ts
+const defaultTopLevelPlacement = "child";
+//#endregion
+export { defaultTopLevelPlacement as t };

package/dist/thread-binding-api.js

@@ -1,4 +1,2 @@
-//#region extensions/discord/thread-binding-api.ts
-const defaultTopLevelPlacement = "child";
-//#endregion
+import { t as defaultTopLevelPlacement } from "./thread-binding-api-BDZJD4na.js";
 export { defaultTopLevelPlacement };