@openclaw/discord 2026.9.1-beta.1 → 2026.9.1

package/dist/account-inspect-BY-ve3yH.js

@@ -0,0 +1,45 @@
+import { _ as inspectDiscordAccountTokenState, o as mergeDiscordAccountConfig, r as listDiscordAccountIds, s as resolveDefaultDiscordAccountId, u as resolveDiscordAccountConfig, v as resolveDiscordAccountAvailability } from "./accounts-CwJQoLjM.js";
+import { DEFAULT_ACCOUNT_ID, normalizeAccountId } from "openclaw/plugin-sdk/account-id";
+import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { normalizeSecretInputString } from "openclaw/plugin-sdk/secret-input";
+//#region extensions/discord/src/account-inspect.ts
+function inspectDiscordAccountPrimary(params) {
+	const accountId = normalizeAccountId(params.accountId ?? resolveDefaultDiscordAccountId(params.cfg));
+	const merged = mergeDiscordAccountConfig(params.cfg, accountId);
+	const enabled = params.cfg.channels?.discord?.enabled !== false && merged.enabled !== false;
+	const accountConfig = resolveDiscordAccountConfig(params.cfg, accountId);
+	const hasAccountToken = Boolean(accountConfig && Object.hasOwn(accountConfig, "token"));
+	return inspectDiscordAccountTokenState({
+		base: {
+			accountId,
+			enabled,
+			name: normalizeOptionalString(merged.name)
+		},
+		config: merged,
+		accountToken: accountConfig?.token,
+		hasAccountToken,
+		channelToken: params.cfg.channels?.discord?.token,
+		resolveFallbackToken: () => {
+			const envToken = accountId === DEFAULT_ACCOUNT_ID ? normalizeSecretInputString(params.envToken ?? process.env.DISCORD_BOT_TOKEN) : void 0;
+			return {
+				token: envToken?.replace(/^Bot\s+/i, "") ?? "",
+				source: envToken ? "env" : "none"
+			};
+		}
+	});
+}
+function inspectDiscordAccount(params) {
+	const account = inspectDiscordAccountPrimary(params);
+	return {
+		...account,
+		...resolveDiscordAccountAvailability({
+			account,
+			resolveAccounts: () => listDiscordAccountIds(params.cfg).map((accountId) => inspectDiscordAccountPrimary({
+				...params,
+				accountId
+			}))
+		})
+	};
+}
+//#endregion
+export { inspectDiscordAccount as t };

package/dist/account-inspect-api.js

@@ -1,4 +1,4 @@
-import { t as inspectDiscordAccount } from "./account-inspect-BDfKyuvL.js";
+import { t as inspectDiscordAccount } from "./account-inspect-BY-ve3yH.js";
 //#region extensions/discord/account-inspect-api.ts
 function inspectDiscordReadOnlyAccount(cfg, accountId) {
 	return inspectDiscordAccount({

package/dist/{accounts-CfQ-vSyf.js → accounts-CwJQoLjM.js}

@@ -4,8 +4,87 @@ import { mapAllowFromEntries, normalizeChannelDmPolicy } from "openclaw/plugin-s
 import { resolveConfiguredFromCredentialStatuses } from "openclaw/plugin-sdk/channel-status";
 import { DEFAULT_ACCOUNT_ID as DEFAULT_ACCOUNT_ID$1, normalizeAccountId as normalizeAccountId$1, resolveAccountEntry } from "openclaw/plugin-sdk/routing";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
+import { hasConfiguredSecretInput, normalizeResolvedSecretInputString, normalizeSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input";
 import { getRuntimeConfigSnapshot, getRuntimeConfigSourceSnapshot, selectApplicableRuntimeConfig } from "openclaw/plugin-sdk/runtime-config-snapshot";
-import { normalizeResolvedSecretInputString, resolveSecretInputString } from "openclaw/plugin-sdk/secret-input";
+//#region extensions/discord/src/account-token-inspect.ts
+function inspectDiscordConfiguredToken(value) {
+	const normalized = normalizeSecretInputString(value);
+	if (normalized) return {
+		token: normalized.replace(/^Bot\s+/i, ""),
+		tokenSource: "config",
+		tokenStatus: "available"
+	};
+	if (hasConfiguredSecretInput(value)) return {
+		token: "",
+		tokenSource: "config",
+		tokenStatus: "configured_unavailable"
+	};
+	return null;
+}
+function inspectDiscordAccountTokenState(params) {
+	const accountToken = inspectDiscordConfiguredToken(params.accountToken);
+	if (accountToken) return {
+		...params.base,
+		...accountToken,
+		configured: true,
+		config: params.config
+	};
+	if (params.hasAccountToken) return {
+		...params.base,
+		token: "",
+		tokenSource: "none",
+		tokenStatus: "missing",
+		configured: false,
+		config: params.config
+	};
+	const channelToken = inspectDiscordConfiguredToken(params.channelToken);
+	if (channelToken) return {
+		...params.base,
+		...channelToken,
+		configured: true,
+		config: params.config
+	};
+	const fallback = params.resolveFallbackToken();
+	if (fallback.token) return {
+		...params.base,
+		token: fallback.token,
+		tokenSource: fallback.source,
+		tokenStatus: "available",
+		configured: true,
+		config: params.config
+	};
+	return {
+		...params.base,
+		token: "",
+		tokenSource: "none",
+		tokenStatus: "missing",
+		configured: false,
+		config: params.config
+	};
+}
+/** Runtime and inspection keep the first enabled owner, preferring config over env tokens. */
+function resolveDiscordAccountAvailability(params) {
+	if (!params.account.enabled) return {
+		enabled: false,
+		stateReason: "disabled"
+	};
+	const token = params.account.token.trim();
+	let owner;
+	if (token) for (const account of params.resolveAccounts()) {
+		if (!account.enabled || account.token.trim() !== token) continue;
+		const priority = account.tokenSource === "config" ? 2 : account.tokenSource === "env" ? 1 : 0;
+		if (!owner || priority > owner.priority) owner = {
+			accountId: account.accountId,
+			priority
+		};
+	}
+	const duplicateOwner = owner && owner.accountId !== params.account.accountId ? owner.accountId : void 0;
+	return {
+		enabled: !duplicateOwner,
+		stateReason: duplicateOwner ? `duplicate bot token; using account "${duplicateOwner}"` : void 0
+	};
+}
+//#endregion
 //#region extensions/discord/src/runtime-config.ts
 function selectDiscordRuntimeConfig(inputConfig) {
 	return selectApplicableRuntimeConfig({
@@ -186,55 +265,20 @@ function resolveDiscordMaxLinesPerMessage(params) {
 		accountId: params.accountId
 	}).config.maxLinesPerMessage;
 }
-function resolveDiscordAccountTokenOwner(params) {
-	const token = params.token.trim();
-	if (!token) return;
-	let owner;
-	const accountIds = listDiscordAccountIds(params.cfg);
-	for (const [index, accountId] of accountIds.entries()) {
-		const account = resolveDiscordAccount({
-			cfg: params.cfg,
+function inspectDiscordRuntimeAvailability(account, cfg) {
+	return resolveDiscordAccountAvailability({
+		account,
+		resolveAccounts: () => listDiscordAccountIds(cfg).map((accountId) => resolveDiscordAccount({
+			cfg,
 			accountId
-		});
-		const accountToken = account.token.trim();
-		if (!account.enabled || accountToken !== token) continue;
-		const priority = account.tokenSource === "config" ? 2 : account.tokenSource === "env" ? 1 : 0;
-		if (!owner || priority > owner.priority) {
-			owner = {
-				accountId: account.accountId,
-				priority,
-				index
-			};
-			continue;
-		}
-		if (priority === owner.priority && index < owner.index) owner = {
-			accountId: account.accountId,
-			priority,
-			index
-		};
-	}
-	return owner?.accountId;
-}
-function resolveDiscordDuplicateTokenOwner(params) {
-	const owner = resolveDiscordAccountTokenOwner({
-		cfg: params.cfg,
-		token: params.account.token
+		}))
 	});
-	return owner && owner !== params.account.accountId ? owner : void 0;
 }
 function isDiscordAccountEnabledForRuntime(account, cfg) {
-	return account.enabled && !resolveDiscordDuplicateTokenOwner({
-		cfg,
-		account
-	});
+	return inspectDiscordRuntimeAvailability(account, cfg).enabled;
 }
 function resolveDiscordAccountDisabledReason(account, cfg) {
-	if (!account.enabled) return "disabled";
-	const owner = resolveDiscordDuplicateTokenOwner({
-		cfg,
-		account
-	});
-	return owner ? `duplicate bot token; using account "${owner}"` : "disabled";
+	return inspectDiscordRuntimeAvailability(account, cfg).stateReason ?? "disabled";
 }
 function listEnabledDiscordAccounts(cfg) {
 	return listDiscordAccountIds(cfg).map((accountId) => resolveDiscordAccount({
@@ -249,4 +293,4 @@ function listDiscordStartupAccountIds(cfg) {
 	return [defaultAccountId, ...startupAccountIds.filter((candidateId) => candidateId !== defaultAccountId)];
 }
 //#endregion
-export { listEnabledDiscordAccounts as a, resolveDiscordAccount as c, resolveDiscordAccountDisabledReason as d, resolveDiscordAccountDmPolicy as f, selectDiscordActivitiesRuntimeConfig as g, resolveDiscordToken as h, listDiscordStartupAccountIds as i, resolveDiscordAccountAllowFrom as l, normalizeDiscordToken as m, isDiscordAccountEnabledForRuntime as n, mergeDiscordAccountConfig as o, resolveDiscordMaxLinesPerMessage as p, listDiscordAccountIds as r, resolveDefaultDiscordAccountId as s, createDiscordActionGate as t, resolveDiscordAccountConfig as u };
+export { inspectDiscordAccountTokenState as _, listEnabledDiscordAccounts as a, resolveDiscordAccount as c, resolveDiscordAccountDisabledReason as d, resolveDiscordAccountDmPolicy as f, selectDiscordActivitiesRuntimeConfig as g, resolveDiscordToken as h, listDiscordStartupAccountIds as i, resolveDiscordAccountAllowFrom as l, normalizeDiscordToken as m, isDiscordAccountEnabledForRuntime as n, mergeDiscordAccountConfig as o, resolveDiscordMaxLinesPerMessage as p, listDiscordAccountIds as r, resolveDefaultDiscordAccountId as s, createDiscordActionGate as t, resolveDiscordAccountConfig as u, resolveDiscordAccountAvailability as v };

package/dist/action-runtime-api.js

@@ -1,2 +1,2 @@
-import { t as handleDiscordAction } from "./runtime-BHrTlFkf.js";
+import { t as handleDiscordAction } from "./runtime-BbWNtfyq.js";
 export { handleDiscordAction };

package/dist/{activities-api-q-9PaaHH.js → activities-api-E-segZn6.js}

@@ -1,12 +1,12 @@
-import { v as resolveDiscordChannelId$1 } from "./retry-Cv4jCU5Z.js";
-import { i as buildDiscordPresentationComponents, x as parseDiscordActivityCustomId } from "./components-B9V5o361.js";
-import { c as resolveDiscordAccount } from "./accounts-CfQ-vSyf.js";
-import { r as sendDiscordComponentMessage } from "./send.components-DKKAw5VX.js";
-import { r as setDiscordActivitiesRuntime, t as DiscordActivitiesRuntime } from "./runtime-CY4PRMF-.js";
+import { y as resolveDiscordChannelId$1 } from "./retry-BNCxiyyR.js";
+import { S as parseDiscordActivityCustomId, i as buildDiscordPresentationComponents } from "./components-DmXYIQ26.js";
+import { c as resolveDiscordAccount } from "./accounts-CwJQoLjM.js";
+import { r as sendDiscordComponentMessage } from "./send.components-BWVEcjRP.js";
+import { r as setDiscordActivitiesRuntime, t as DiscordActivitiesRuntime } from "./runtime-DB7Fb6AU.js";
 import fs from "node:fs/promises";
 import { logError } from "openclaw/plugin-sdk/logging-core";
 import { resolveRequestClientIp } from "openclaw/plugin-sdk/webhook-ingress";
-import { WEBHOOK_BODY_READ_DEFAULTS, readJsonBodyWithLimit } from "openclaw/plugin-sdk/webhook-request-guards";
+import { WEBHOOK_BODY_READ_DEFAULTS, readJsonBodyWithLimit, sendHttpRequestRejection } from "openclaw/plugin-sdk/webhook-request-guards";
 import { randomBytes } from "node:crypto";
 import { readProviderJsonResponse } from "openclaw/plugin-sdk/provider-http";
 import { fetchWithSsrFGuard as fetchWithSsrFGuard$1 } from "openclaw/plugin-sdk/ssrf-runtime";
@@ -14,7 +14,7 @@ import { fetchWithSsrFGuard as fetchWithSsrFGuard$1 } from "openclaw/plugin-sdk/
 const DISCORD_TOKEN_URL = "https://discord.com/api/oauth2/token";
 const DISCORD_USER_URL = "https://discord.com/api/v10/users/@me";
 const DISCORD_HOST = "discord.com";
-const JSON_MAX_BYTES = 64 * 1024;
+const JSON_MAX_BYTES = 65536;
 const INSTANCE_ID_MAX_LENGTH = 256;
 function normalizeInstanceId(value) {
 	const instanceId = value?.trim();
@@ -243,7 +243,8 @@ run().catch((error) => {
 `;
 //#endregion
 //#region extensions/discord/src/activities/http.ts
-const BODY_MAX_BYTES = 8 * 1024;
+const BODY_MAX_BYTES = 8192;
+const JSON_CONTENT_TYPE = "application/json; charset=utf-8";
 const WIDGET_ID_PATTERN = /^[A-Za-z0-9_-]{22}$/;
 const DOC_TOKEN_PATTERN = /^[A-Za-z0-9_-]{43}$/;
 const DISCORD_ACTIVITY_WIDGET_CSP = "sandbox allow-scripts; default-src 'none'; script-src 'unsafe-inline'; style-src 'unsafe-inline'; img-src data: blob:; font-src data:; connect-src 'none'; frame-ancestors *";
@@ -260,8 +261,11 @@ function respond(res, statusCode, body, contentType, headers) {
 	res.end(body);
 	return true;
 }
+function jsonBody(body) {
+	return `${JSON.stringify(body)}\n`;
+}
 function respondJson(res, statusCode, body) {
-	return respond(res, statusCode, `${JSON.stringify(body)}\n`, "application/json; charset=utf-8");
+	return respond(res, statusCode, jsonBody(body), JSON_CONTENT_TYPE);
 }
 function notFound(res, widgetDocument = false) {
 	return respond(res, 404, "not found", "text/plain; charset=utf-8", widgetDocument ? { "Content-Security-Policy": DISCORD_ACTIVITY_WIDGET_CSP } : void 0);
@@ -309,9 +313,17 @@ function createDiscordActivityHttpHandler(deps) {
 		const bodyResult = await readJsonBodyWithLimit(req, {
 			maxBytes: BODY_MAX_BYTES,
 			timeoutMs: bodyTimeoutMs,
-			emptyObjectOnEmpty: true
+			emptyObjectOnEmpty: true,
+			destroyOnLimit: false
 		});
-		if (!bodyResult.ok && bodyResult.code === "REQUEST_BODY_TIMEOUT") return respondJson(res, 408, { error: "request body timeout" });
+		if (!bodyResult.ok && bodyResult.code === "REQUEST_BODY_TIMEOUT") {
+			await sendHttpRequestRejection(req, res, 408, jsonBody({ error: "request body timeout" }), JSON_CONTENT_TYPE);
+			return true;
+		}
+		if (!bodyResult.ok && bodyResult.code === "PAYLOAD_TOO_LARGE") {
+			await sendHttpRequestRejection(req, res, 413, jsonBody({ error: "request body too large" }), JSON_CONTENT_TYPE);
+			return true;
+		}
 		const body = bodyResult.ok && bodyResult.value && typeof bodyResult.value === "object" && !Array.isArray(bodyResult.value) ? bodyResult.value : null;
 		const code = typeof body?.code === "string" ? body.code.trim() : "";
 		if (!code) return respondJson(res, 401, { error: "invalid authorization code" });
@@ -466,7 +478,7 @@ function createDiscordActivityHttpHandler(deps) {
 }
 //#endregion
 //#region extensions/discord/src/activities/presenter.ts
-const DISCORD_WIDGET_HTML_MAX_BYTES = 48 * 1024;
+const DISCORD_WIDGET_HTML_MAX_BYTES = 49152;
 function resolveDiscordChannelId(context) {
 	const raw = context.nativeChannelId?.trim() || context.currentMessagingTarget?.trim() || context.currentChannelId?.trim() || context.deliveryContext?.to?.trim();
 	if (!raw) return;
@@ -593,12 +605,12 @@ function createDiscordWidgetPresenter(runtime, deps = {}) {
 }
 //#endregion
 //#region extensions/discord/src/activities/store.ts
-const DAY_MS = 1440 * 60 * 1e3;
+const DAY_MS = 864e5;
 const DISCORD_EPOCH_MS = 14200704e5;
 const WIDGET_TTL_MS = 7 * DAY_MS;
-const SESSION_TTL_MS = 900 * 1e3;
-const DOC_TOKEN_TTL_MS = 60 * 1e3;
-const PENDING_LAUNCH_TTL_MS = 120 * 1e3;
+const SESSION_TTL_MS = 9e5;
+const DOC_TOKEN_TTL_MS = 6e4;
+const PENDING_LAUNCH_TTL_MS = 12e4;
 function requireAtomicUpdate(store) {
 	if (!store.update) throw new Error("Discord Activities require atomic plugin state updates");
 	return store;
@@ -722,7 +734,8 @@ var DiscordActivityStore = class {
 //#region extensions/discord/src/activities/register.ts
 function registerDiscordActivities$1(api) {
 	setDiscordActivitiesRuntime(void 0);
-	const runtime = new DiscordActivitiesRuntime(new DiscordActivityStore(openDiscordActivityStores((options) => api.runtime.state.openKeyedStore(options))), api.config, api.runtime.config?.current ? () => api.runtime.config.current() : void 0);
+	const store = new DiscordActivityStore(openDiscordActivityStores((options) => api.runtime.state.openKeyedStore(options)));
+	const runtime = new DiscordActivitiesRuntime(store, api.config, api.runtime.config?.current ? () => api.runtime.config.current() : void 0);
 	setDiscordActivitiesRuntime(runtime);
 	const http = createDiscordActivityHttpHandler({
 		runtime,

package/dist/activities-api.js

@@ -1,2 +1,2 @@
-import { t as registerDiscordActivities } from "./activities-api-q-9PaaHH.js";
+import { t as registerDiscordActivities } from "./activities-api-E-segZn6.js";
 export { registerDiscordActivities };

package/dist/{allow-list-BDMimASD.js → allow-list-C2JuH-R0.js}

@@ -258,10 +258,12 @@ function buildDiscordChannelKeys(params) {
 	return buildChannelKeyCandidates(params.id, allowNameMatch ? params.slug : void 0, allowNameMatch ? params.name : void 0);
 }
 function resolveDiscordChannelEntryMatch(channels, params, parentParams) {
+	const keys = buildDiscordChannelKeys(params);
+	const parentKeys = parentParams ? buildDiscordChannelKeys(parentParams) : void 0;
 	return resolveChannelEntryMatchWithFallback({
 		entries: channels,
-		keys: buildDiscordChannelKeys(params),
-		parentKeys: parentParams ? buildDiscordChannelKeys(parentParams) : void 0,
+		keys,
+		parentKeys,
 		wildcardKey: "*"
 	});
 }
@@ -288,18 +290,19 @@ function resolveDiscordChannelConfig(params) {
 	const { guildInfo, channelId, channelName, channelSlug } = params;
 	const channels = guildInfo?.channels;
 	if (!hasConfiguredDiscordChannels(channels)) return null;
-	return resolveChannelMatchConfig(resolveDiscordChannelEntryMatch(channels, {
+	const match = resolveDiscordChannelEntryMatch(channels, {
 		id: channelId,
 		name: channelName,
 		slug: channelSlug
-	}), resolveDiscordChannelConfigEntry) ?? { allowed: false };
+	});
+	return resolveChannelMatchConfig(match, resolveDiscordChannelConfigEntry) ?? { allowed: false };
 }
 function resolveDiscordChannelConfigWithFallback(params) {
 	const { guildInfo, channelId, channelName, channelSlug, parentId, parentName, parentSlug, scope } = params;
 	const channels = guildInfo?.channels;
 	if (!hasConfiguredDiscordChannels(channels)) return null;
 	const resolvedParentSlug = parentSlug ?? (parentName ? normalizeDiscordSlug(parentName) : "");
-	return resolveChannelMatchConfig(resolveDiscordChannelEntryMatch(channels, {
+	const match = resolveDiscordChannelEntryMatch(channels, {
 		id: channelId,
 		name: channelName,
 		slug: channelSlug,
@@ -308,7 +311,8 @@ function resolveDiscordChannelConfigWithFallback(params) {
 		id: parentId ?? "",
 		name: parentName,
 		slug: resolvedParentSlug
-	} : void 0), resolveDiscordChannelConfigEntry) ?? { allowed: false };
+	} : void 0);
+	return resolveChannelMatchConfig(match, resolveDiscordChannelConfigEntry) ?? { allowed: false };
 }
 function resolveDiscordShouldRequireMention(params) {
 	if (!params.isGuildMessage) return false;

package/dist/{api-DNVbJyEy.js → api-BfmEP6wp.js}

@@ -1,4 +1,4 @@
-import { t as parseDiscordRetryAfterBodySeconds } from "./retry-after-DdLPmPoa.js";
+import { t as parseDiscordRetryAfterBodySeconds } from "./retry-after-BrLjLUJi.js";
 import { redactToolPayloadText } from "openclaw/plugin-sdk/logging-core";
 import { resolveTimerTimeoutMs } from "openclaw/plugin-sdk/number-runtime";
 import { readResponseWithLimit } from "openclaw/plugin-sdk/response-limit-runtime";
@@ -27,12 +27,12 @@ const DISCORD_API_BASE = "https://discord.com/api/v10";
 const DISCORD_API_RETRY_DEFAULTS = {
 	attempts: 3,
 	minDelayMs: 500,
-	maxDelayMs: 5 * 6e4,
+	maxDelayMs: 3e5,
 	jitter: .1
 };
 const DISCORD_API_429_FALLBACK_RETRY_AFTER_SECONDS = 60;
-const DISCORD_API_ERROR_BODY_LIMIT_BYTES = 8 * 1024;
-const DISCORD_API_RESPONSE_BODY_LIMIT_BYTES = 4 * 1024 * 1024;
+const DISCORD_API_ERROR_BODY_LIMIT_BYTES = 8192;
+const DISCORD_API_RESPONSE_BODY_LIMIT_BYTES = 4194304;
 const DISCORD_DIRECTORY_LOOKUP_TIMEOUT_MS = 1e4;
 function parseDiscordApiErrorPayload(text) {
 	const trimmed = text.trim();
@@ -46,7 +46,8 @@ function parseDiscordApiErrorPayload(text) {
 	return null;
 }
 function parseRetryAfterSeconds(text, response) {
-	const retryAfter = parseDiscordRetryAfterBodySeconds(parseDiscordApiErrorPayload(text)?.retry_after);
+	const payload = parseDiscordApiErrorPayload(text);
+	const retryAfter = parseDiscordRetryAfterBodySeconds(payload?.retry_after);
 	if (retryAfter !== void 0) return retryAfter;
 	const header = response.headers.get("Retry-After");
 	if (!header) return;

package/dist/api.js

@@ -1,24 +1,24 @@
-import { _ as parseDiscordTarget, g as normalizeDiscordOutboundTarget, h as normalizeDiscordMessagingTarget, m as looksLikeDiscordTargetId, v as resolveDiscordChannelId } from "./retry-Cv4jCU5Z.js";
-import { C as parseDiscordComponentCustomId, E as parseDiscordModalCustomIdForInteraction, T as parseDiscordModalCustomId, _ as DISCORD_MODAL_CUSTOM_ID_KEY, b as buildDiscordModalCustomId, d as buildDiscordComponentMessage, f as buildDiscordComponentMessageFlags, g as DISCORD_COMPONENT_CUSTOM_ID_KEY, h as resolveDiscordComponentAttachmentName, l as DiscordFormModal, m as readDiscordComponentSpec, n as formatDiscordComponentEventText, p as DISCORD_COMPONENT_ATTACHMENT_PREFIX, r as buildDiscordInteractiveComponents, u as createDiscordFormModal, w as parseDiscordComponentCustomIdForInteraction, y as buildDiscordComponentCustomId } from "./components-B9V5o361.js";
-import { a as listEnabledDiscordAccounts, c as resolveDiscordAccount, o as mergeDiscordAccountConfig, p as resolveDiscordMaxLinesPerMessage, r as listDiscordAccountIds, s as resolveDefaultDiscordAccountId, t as createDiscordActionGate, u as resolveDiscordAccountConfig } from "./accounts-CfQ-vSyf.js";
-import { i as requestDiscord, n as DiscordApiError, r as fetchDiscord } from "./api-DNVbJyEy.js";
-import { i as parseDiscordSendTarget, n as resolveDiscordTarget } from "./target-resolver-vxIh6O3-.js";
-import { t as inspectDiscordAccount } from "./account-inspect-BDfKyuvL.js";
-import { i as DISCORD_DEFAULT_LISTENER_TIMEOUT_MS, n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS, r as DISCORD_DEFAULT_INBOUND_WORKER_TIMEOUT_MS, t as DISCORD_ATTACHMENT_IDLE_TIMEOUT_MS } from "./timeouts-B9cy6RvQ.js";
-import "./targets-CtTKvntJ.js";
-import { C as shouldSuppressLocalDiscordExecApprovalPrompt, S as isDiscordExecApprovalClientEnabled, b as getDiscordExecApprovalApprovers, x as isDiscordExecApprovalApprover } from "./outbound-session-route-Cg15ZFJd.js";
-import { i as resolveDiscordGroupToolPolicy, n as collectDiscordStatusIssues, r as resolveDiscordGroupRequireMention, t as discordPlugin } from "./channel-Dx1tMTfx.js";
+import { _ as normalizeDiscordOutboundTarget, g as normalizeDiscordMessagingTarget, h as looksLikeDiscordTargetId, v as parseDiscordTarget, y as resolveDiscordChannelId } from "./retry-BNCxiyyR.js";
+import { D as parseDiscordModalCustomIdForInteraction, E as parseDiscordModalCustomId, T as parseDiscordComponentCustomIdForInteraction, _ as DISCORD_COMPONENT_CUSTOM_ID_KEY, b as buildDiscordComponentCustomId, d as buildDiscordComponentMessage, f as buildDiscordComponentMessageFlags, g as resolveDiscordComponentAttachmentName, h as readDiscordComponentSpec, l as DiscordFormModal, n as formatDiscordComponentEventText, p as DISCORD_COMPONENT_ATTACHMENT_PREFIX, r as buildDiscordInteractiveComponents, u as createDiscordFormModal, v as DISCORD_MODAL_CUSTOM_ID_KEY, w as parseDiscordComponentCustomId, x as buildDiscordModalCustomId } from "./components-DmXYIQ26.js";
+import { a as listEnabledDiscordAccounts, c as resolveDiscordAccount, o as mergeDiscordAccountConfig, p as resolveDiscordMaxLinesPerMessage, r as listDiscordAccountIds, s as resolveDefaultDiscordAccountId, t as createDiscordActionGate, u as resolveDiscordAccountConfig } from "./accounts-CwJQoLjM.js";
+import { i as requestDiscord, n as DiscordApiError, r as fetchDiscord } from "./api-BfmEP6wp.js";
+import { i as parseDiscordSendTarget, n as resolveDiscordTarget } from "./target-resolver-BVI8xSSC.js";
+import { t as inspectDiscordAccount } from "./account-inspect-BY-ve3yH.js";
+import { i as DISCORD_DEFAULT_LISTENER_TIMEOUT_MS, n as DISCORD_ATTACHMENT_TOTAL_TIMEOUT_MS, r as DISCORD_DEFAULT_INBOUND_WORKER_TIMEOUT_MS, t as DISCORD_ATTACHMENT_IDLE_TIMEOUT_MS } from "./timeouts-D86uWLt_.js";
+import "./targets-DbxVbq8k.js";
+import { C as shouldSuppressLocalDiscordExecApprovalPrompt, S as isDiscordExecApprovalClientEnabled, b as getDiscordExecApprovalApprovers, x as isDiscordExecApprovalApprover } from "./outbound-session-route-BFGRF9fE.js";
+import { i as resolveDiscordGroupToolPolicy, n as collectDiscordStatusIssues, r as resolveDiscordGroupRequireMention, t as discordPlugin } from "./channel-D93LnbTE.js";
 import { t as normalizeExplicitDiscordSessionKey } from "./session-key-normalization-wJgsKPNF.js";
-import { t as discordSetupPlugin } from "./channel.setup-DOzXS2Pk.js";
-import { n as handleDiscordSubagentEnded, t as handleDiscordSubagentDeliveryTarget } from "./subagent-hooks-DQzvOptn.js";
-import { t as tryHandleDiscordMessageActionGuildAdmin } from "./handle-action.guild-admin-BdwCRHmm.js";
-import { n as listDiscordDirectoryGroupsFromConfig, r as listDiscordDirectoryPeersFromConfig } from "./directory-config-BK6eqekJ.js";
-import { t as fetchPluralKitMessageInfo } from "./pluralkit-Tiyl70dx.js";
-import { i as probeDiscord, n as fetchDiscordApplicationSummary, o as resolveDiscordPrivilegedIntentsFromFlags, r as parseApplicationIdFromToken, t as fetchDiscordApplicationId } from "./probe-n6ZXxK8V.js";
-import { t as collectDiscordSecurityAuditFindings } from "./security-audit-BfJhAXZp.js";
+import { t as discordSetupPlugin } from "./channel.setup-DTL7kPOM.js";
+import { n as handleDiscordSubagentEnded, t as handleDiscordSubagentDeliveryTarget } from "./subagent-hooks-IzQKX4RQ.js";
+import { t as tryHandleDiscordMessageActionGuildAdmin } from "./handle-action.guild-admin-B0egstYq.js";
+import { n as listDiscordDirectoryGroupsFromConfig, r as listDiscordDirectoryPeersFromConfig } from "./directory-config-BD4YL7wT.js";
+import { t as fetchPluralKitMessageInfo } from "./pluralkit-XmmAHoV6.js";
+import { i as probeDiscord, n as fetchDiscordApplicationSummary, o as resolveDiscordPrivilegedIntentsFromFlags, r as parseApplicationIdFromToken, t as fetchDiscordApplicationId } from "./probe-3ovFAp3b.js";
+import { t as collectDiscordSecurityAuditFindings } from "./security-audit-DKfK-iPY.js";
 import { resolveOpenProviderRuntimeGroupPolicy as resolveDiscordRuntimeGroupPolicy } from "openclaw/plugin-sdk/runtime-group-policy";
 //#region extensions/discord/api.ts
-const handleDiscordMessageAction = async (...args) => (await import("./channel-actions.runtime-CLWWu9nC.js")).handleDiscordMessageAction(...args);
+const handleDiscordMessageAction = async (...args) => (await import("./channel-actions.runtime-DMFv4doE.js")).handleDiscordMessageAction(...args);
 /**
 * @deprecated Shipped `@openclaw/discord/api` compatibility only. Use native
 * `AbortSignal.any` after filtering optional signals. Removal with the next

package/dist/{approval-handler.runtime-B7qhK3fR.js → approval-handler.runtime-CW5k3mSa.js}

@@ -1,8 +1,8 @@
-import { Dt as deleteChannelMessage, _t as stripUndefinedFields, ct as Row, et as Button, ft as TextDisplay, kt as editChannelMessage, nt as Container, q as serializePayload, ut as Separator, wt as createChannelMessage, yt as createUserDmChannel } from "./retry-Cv4jCU5Z.js";
-import { s as buildExecApprovalCustomId } from "./components-B9V5o361.js";
-import { N as createDiscordClient, O as createDiscordMessageNonce } from "./send.shared-JjljcV4O.js";
-import { S as isDiscordExecApprovalClientEnabled, n as DISCORD_APPROVAL_ALLOWED_MENTIONS, r as formatDiscordApprovalDisplayValue } from "./outbound-session-route-Cg15ZFJd.js";
-import { a as shouldHandleDiscordApprovalRequest } from "./channel-Dx1tMTfx.js";
+import { At as editChannelMessage, J as serializePayload, Ot as deleteChannelMessage, Tt as createChannelMessage, bt as createUserDmChannel, dt as Separator, lt as Row, pt as TextDisplay, rt as Container, tt as Button, vt as stripUndefinedFields } from "./retry-BNCxiyyR.js";
+import { s as buildExecApprovalCustomId } from "./components-DmXYIQ26.js";
+import { N as createDiscordClient, O as createDiscordMessageNonce } from "./send.shared-5vxBTagO.js";
+import { S as isDiscordExecApprovalClientEnabled, n as DISCORD_APPROVAL_ALLOWED_MENTIONS, r as formatDiscordApprovalDisplayValue } from "./outbound-session-route-BFGRF9fE.js";
+import { a as shouldHandleDiscordApprovalRequest } from "./channel-D93LnbTE.js";
 import { logDebug, logError } from "openclaw/plugin-sdk/logging-core";
 import { ButtonStyle } from "discord-api-types/v10";
 import { normalizeOptionalString } from "openclaw/plugin-sdk/string-coerce-runtime";
@@ -52,7 +52,7 @@ var ExecApprovalContainer = class extends DiscordUiContainer {
 			divider: true,
 			spacing: "small"
 		}));
-		components.push(new TextDisplay(`### Command\n\`\`\`\n${params.commandPreview}\n\`\`\``));
+		components.push(new TextDisplay(`### ${params.commandLabel ?? "Command"}\n\`\`\`\n${params.commandPreview}\n\`\`\``));
 		if (params.commandSecondaryPreview) components.push(new TextDisplay(`### Shell Preview\n\`\`\`\n${params.commandSecondaryPreview}\n\`\`\``));
 		if (params.metadataLines?.length) components.push(new TextDisplay(params.metadataLines.join("\n")));
 		if (params.actionRow) components.push(params.actionRow);
@@ -140,15 +140,16 @@ function resolveCommandPreviews(commandText, commandPreview, maxChars, secondary
 function createApprovalContainer(params) {
 	const { view } = params;
 	const plugin = view.approvalKind === "plugin";
+	const systemAgent = view.approvalKind === "system-agent";
 	const pending = view.phase === "pending";
-	const approvalLabel = plugin ? "Plugin" : "Exec";
+	const approvalLabel = plugin ? "Plugin" : systemAgent ? "OpenClaw Change" : "Exec";
 	const { commandPreview, commandSecondaryPreview } = plugin ? {
 		commandPreview: formatCommandPreview(view.title, 700),
 		commandSecondaryPreview: formatOptionalCommandPreview(view.description, 1e3)
 	} : resolveCommandPreviews(view.commandText, view.commandPreview, pending ? 1e3 : 500, pending ? 500 : 300);
-	const decisionLabel = view.phase !== "resolved" ? void 0 : view.decision === "allow-once" ? "Allowed (once)" : view.decision === "allow-always" ? "Allowed (always)" : "Denied";
+	const decisionLabel = view.phase !== "resolved" ? void 0 : systemAgent && view.terminalStatus === "cancelled" ? "Cancelled" : systemAgent && view.applicationStatus === "applied" ? "Applied" : systemAgent && view.applicationStatus === "not-applied" ? "Not applied" : view.decision === "allow-once" ? "Allowed (once)" : view.decision === "allow-always" ? "Allowed (always)" : "Denied";
 	const title = pending ? `${approvalLabel} Approval Required` : `${approvalLabel} Approval: ${view.phase === "expired" ? "Expired" : decisionLabel}`;
-	const description = pending ? plugin ? "A plugin action needs your approval." : "A command needs your approval." : view.phase === "expired" ? "This approval request has expired." : view.resolvedBy ? `Resolved by ${formatDiscordApprovalDisplayValue(view.resolvedBy)}` : "Resolved";
+	const description = pending ? plugin ? "A plugin action needs your approval." : systemAgent ? "An OpenClaw change needs your approval." : "A command needs your approval." : view.phase === "expired" ? "This approval request has expired." : view.resolvedBy ? `Resolved by ${formatDiscordApprovalDisplayValue(view.resolvedBy)}` : "Resolved";
 	const accentColor = view.phase === "expired" ? "#99AAB5" : view.phase === "resolved" ? view.decision === "deny" ? "#ED4245" : view.decision === "allow-always" ? "#5865F2" : "#57F287" : plugin ? view.severity === "critical" ? "#ED4245" : view.severity === "info" ? "#5865F2" : "#FAA61A" : "#FFA500";
 	const approvalId = formatDiscordApprovalDisplayValue(view.approvalId);
 	const footer = pending ? `Expires <t:${Math.max(0, Math.floor(view.expiresAtMs / 1e3))}:R> · ID: ${approvalId}` : `ID: ${approvalId}`;
@@ -157,6 +158,7 @@ function createApprovalContainer(params) {
 		accountId: params.accountId,
 		title,
 		description,
+		commandLabel: systemAgent ? "Change" : "Command",
 		commandPreview,
 		commandSecondaryPreview,
 		metadataLines: buildApprovalMetadataLines(view.metadata),
@@ -196,7 +198,11 @@ async function finalizeMessage(params) {
 	}
 }
 const discordApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
-	eventKinds: ["exec", "plugin"],
+	eventKinds: [
+		"exec",
+		"plugin",
+		"system-agent"
+	],
 	availability: {
 		isConfigured: (params) => {
 			const resolved = resolveHandlerContext(params);
@@ -224,12 +230,13 @@ const discordApprovalNativeRuntime = createChannelApprovalNativeRuntimeAdapter({
 				context
 			});
 			if (!resolved) return { body: {} };
-			return { body: stripUndefinedFields(serializePayload(buildExecApprovalPayload(createApprovalContainer({
+			const container = createApprovalContainer({
 				view,
 				cfg,
 				accountId: resolved.accountId,
 				actionRow: createApprovalActionRow(view)
-			})))) };
+			});
+			return { body: stripUndefinedFields(serializePayload(buildExecApprovalPayload(container))) };
 		},
 		buildResolvedResult: ({ cfg, accountId, context, view }) => {
 			const resolvedContext = resolveHandlerContext({

package/dist/{audit-CBEv_ERu.js → audit-B9rydv5a.js}

@@ -1,18 +1,19 @@
-import { on as __exportAll } from "./retry-Cv4jCU5Z.js";
-import { x as fetchChannelPermissionsDiscord } from "./send.shared-JjljcV4O.js";
-import { t as inspectDiscordAccount } from "./account-inspect-BDfKyuvL.js";
-import "./send-C49MFF9j.js";
-import { _ as auditDiscordChannelPermissionsWithFetcher, v as collectDiscordAuditChannelIdsForAccount } from "./outbound-session-route-Cg15ZFJd.js";
+import { sn as __exportAll } from "./retry-BNCxiyyR.js";
+import { x as fetchChannelPermissionsDiscord } from "./send.shared-5vxBTagO.js";
+import { t as inspectDiscordAccount } from "./account-inspect-BY-ve3yH.js";
+import "./send-BnTEIeLE.js";
+import { _ as auditDiscordChannelPermissionsWithFetcher, v as collectDiscordAuditChannelIdsForAccount } from "./outbound-session-route-BFGRF9fE.js";
 //#region extensions/discord/src/audit.ts
 var audit_exports = /* @__PURE__ */ __exportAll({
 	auditDiscordChannelPermissions: () => auditDiscordChannelPermissions,
 	collectDiscordAuditChannelIds: () => collectDiscordAuditChannelIds
 });
 function collectDiscordAuditChannelIds(params) {
-	return collectDiscordAuditChannelIdsForAccount(inspectDiscordAccount({
+	const account = inspectDiscordAccount({
 		cfg: params.cfg,
 		accountId: params.accountId
-	}).config);
+	});
+	return collectDiscordAuditChannelIdsForAccount(account.config);
 }
 async function auditDiscordChannelPermissions(params) {
 	return await auditDiscordChannelPermissionsWithFetcher({